[Mon Nov 10 18:43:21.260043 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260148 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp-admin/install\\.php$' to uri ''
[Mon Nov 10 18:43:21.260172 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260192 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp-admin/includes/' to uri ''
[Mon Nov 10 18:43:21.260212 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260227 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp-includes/' to uri ''
[Mon Nov 10 18:43:21.260245 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260261 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri ''
[Mon Nov 10 18:43:21.260278 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260290 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:43:21.260300 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260334 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:43:21.260353 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260368 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:43:21.260381 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260392 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:43:21.260408 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='on' pattern='on' => matched
[Mon Nov 10 18:43:21.260418 2025] [rewrite:trace5] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] setting env variable 'WPR_SSL' to '-https'
[Mon Nov 10 18:43:21.260426 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260434 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:43:21.260444 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='gzip' => not-matched
[Mon Nov 10 18:43:21.260453 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260461 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:43:21.260471 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='GET' pattern='GET' => matched
[Mon Nov 10 18:43:21.260481 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='=""' => matched
[Mon Nov 10 18:43:21.260491 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!(wordpress_logged_in_.+|wp-postpass_|wptouch_switch_toggle|comment_author_|comment_author_email_)' [NC] => matched
[Mon Nov 10 18:43:21.260514 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='/' pattern='!^(/(?:.+/)?feed(?:/(?:.+/?)?)?$|/(?:.+/)?embed/|/(index.php/)?(.*)wp-json(/.*|$))$' [NC] => matched
[Mon Nov 10 18:43:21.260532 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!^[a-z0-9\\"]+' [NC] => matched
[Mon Nov 10 18:43:21.260543 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!^[a-z0-9\\"]+' [NC] => matched
[Mon Nov 10 18:43:21.260604 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^.*(2.0\\ MMP|240x320|400X240|AvantGo|BlackBerry|Blazer|Cellphone|Danger|DoCoMo|Elaine/3.0|EudoraWeb|Googlebot-Mobile|hiptop|IEMobile|KYOCERA/WX310K|LG/U990|MIDP-2.|MMEF20|MOT-V|NetFront|Newt|Nintendo\\ Wii|Nitro|Nokia|Opera\\ Mini|Palm|PlayStation\\ Portable|portalmmm|Proxinet|ProxiNet|SHARP-TQ-GX10|SHG-i900|Small|SonyEricsson|Symbian\\ OS|SymbianOS|TS21i-10|UP.Browser|UP.Link|webOS|Windows\\ CE|WinWAP|YahooSeeker/M1A1-R2D2|iPhone|iPod|Android|BlackBerry9530|LG-TU915\\ Obigo|LGE\\ VX|webOS|Nokia5800).*' [NC] => matched
[Mon Nov 10 18:43:21.260620 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^(w3c\\ |w3c-|acs-|alav|alca|amoi|audi|avan|benq|bird|blac|blaz|brew|cell|cldc|cmd-|dang|doco|eric|hipt|htc_|inno|ipaq|ipod|jigs|kddi|keji|leno|lg-c|lg-d|lg-g|lge-|lg/u|maui|maxo|midp|mits|mmef|mobi|mot-|moto|mwbp|nec-|newt|noki|palm|pana|pant|phil|play|port|prox|qwap|sage|sams|sany|sch-|sec-|send|seri|sgh-|shar|sie-|siem|smal|smar|sony|sph-|symb|t-mo|teli|tim-|tosh|tsm-|upg1|upsi|vk-v|voda|wap-|wapa|wapi|wapp|wapr|webc|winw|winw|xda\\ |xda-).*' [NC] => matched
[Mon Nov 10 18:43:21.260634 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^(facebookexternalhit|WhatsApp).*' [NC] => not-matched
[Mon Nov 10 18:43:21.260643 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260651 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:43:21.260661 2025] [rewrite:trace5] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:43:21.260669 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260678 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:43:21.260686 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.260694 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:43:21.260708 2025] [rewrite:trace1] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c0c5920/initial] [perdir /home/makifimc/public_html/] pass through /home/makifimc/public_html/
[Mon Nov 10 18:43:21.260792 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260806 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'index.php'
[Mon Nov 10 18:43:21.260815 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260824 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp-admin/includes/' to uri 'index.php'
[Mon Nov 10 18:43:21.260833 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260841 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp-includes/' to uri 'index.php'
[Mon Nov 10 18:43:21.260850 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260858 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'index.php'
[Mon Nov 10 18:43:21.260867 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260875 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:43:21.260890 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260899 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:43:21.260908 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260943 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:43:21.260952 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260958 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:43:21.260958 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='on' pattern='on' => matched
[Mon Nov 10 18:43:21.260964 2025] [rewrite:trace5] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] setting env variable 'WPR_SSL' to '-https'
[Mon Nov 10 18:43:21.260973 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.260981 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:43:21.260991 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='gzip' => not-matched
[Mon Nov 10 18:43:21.260999 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.261007 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:43:21.261017 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='GET' pattern='GET' => matched
[Mon Nov 10 18:43:21.261026 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='=""' => matched
[Mon Nov 10 18:43:21.261036 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!(wordpress_logged_in_.+|wp-postpass_|wptouch_switch_toggle|comment_author_|comment_author_email_)' [NC] => matched
[Mon Nov 10 18:43:21.261051 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='/index.php' pattern='!^(/(?:.+/)?feed(?:/(?:.+/?)?)?$|/(?:.+/)?embed/|/(index.php/)?(.*)wp-json(/.*|$))$' [NC] => matched
[Mon Nov 10 18:43:21.261073 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!^[a-z0-9\\"]+' [NC] => matched
[Mon Nov 10 18:43:21.261084 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!^[a-z0-9\\"]+' [NC] => matched
[Mon Nov 10 18:43:21.261158 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^.*(2.0\\ MMP|240x320|400X240|AvantGo|BlackBerry|Blazer|Cellphone|Danger|DoCoMo|Elaine/3.0|EudoraWeb|Googlebot-Mobile|hiptop|IEMobile|KYOCERA/WX310K|LG/U990|MIDP-2.|MMEF20|MOT-V|NetFront|Newt|Nintendo\\ Wii|Nitro|Nokia|Opera\\ Mini|Palm|PlayStation\\ Portable|portalmmm|Proxinet|ProxiNet|SHARP-TQ-GX10|SHG-i900|Small|SonyEricsson|Symbian\\ OS|SymbianOS|TS21i-10|UP.Browser|UP.Link|webOS|Windows\\ CE|WinWAP|YahooSeeker/M1A1-R2D2|iPhone|iPod|Android|BlackBerry9530|LG-TU915\\ Obigo|LGE\\ VX|webOS|Nokia5800).*' [NC] => matched
[Mon Nov 10 18:43:21.261196 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^(w3c\\ |w3c-|acs-|alav|alca|amoi|audi|avan|benq|bird|blac|blaz|brew|cell|cldc|cmd-|dang|doco|eric|hipt|htc_|inno|ipaq|ipod|jigs|kddi|keji|leno|lg-c|lg-d|lg-g|lge-|lg/u|maui|maxo|midp|mits|mmef|mobi|mot-|moto|mwbp|nec-|newt|noki|palm|pana|pant|phil|play|port|prox|qwap|sage|sams|sany|sch-|sec-|send|seri|sgh-|shar|sie-|siem|smal|smar|sony|sph-|symb|t-mo|teli|tim-|tosh|tsm-|upg1|upsi|vk-v|voda|wap-|wapa|wapi|wapp|wapr|webc|winw|winw|xda\\ |xda-).*' [NC] => matched
[Mon Nov 10 18:43:21.261210 2025] [rewrite:trace4] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^(facebookexternalhit|WhatsApp).*' [NC] => not-matched
[Mon Nov 10 18:43:21.261210 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.261218 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:43:21.261228 2025] [rewrite:trace5] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:43:21.261237 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.261245 2025] [rewrite:trace3] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:43:21.261260 2025] [rewrite:trace1] [pid 11495:tid 11530] mod_rewrite.c(505): [client 31.13.127.2:59092] 31.13.127.2 - - [makifim.com.au/sid#21c92320][rid#7f384c002970/subreq] [perdir /home/makifimc/public_html/] pass through /home/makifimc/public_html/index.php
[Mon Nov 10 18:43:21.348499 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348567 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp-admin/install\\.php$' to uri ''
[Mon Nov 10 18:43:21.348580 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348589 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp-admin/includes/' to uri ''
[Mon Nov 10 18:43:21.348598 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348606 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp-includes/' to uri ''
[Mon Nov 10 18:43:21.348617 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348625 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri ''
[Mon Nov 10 18:43:21.348634 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348642 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:43:21.348651 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348659 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:43:21.348668 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348677 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri ''
[Mon Nov 10 18:43:21.348704 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348721 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:43:21.348737 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='on' pattern='on' => matched
[Mon Nov 10 18:43:21.348748 2025] [rewrite:trace5] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] setting env variable 'WPR_SSL' to '-https'
[Mon Nov 10 18:43:21.348756 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348764 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:43:21.348775 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='gzip' => not-matched
[Mon Nov 10 18:43:21.348784 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348792 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:43:21.348803 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='GET' pattern='GET' => matched
[Mon Nov 10 18:43:21.348817 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='=""' => matched
[Mon Nov 10 18:43:21.348828 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!(wordpress_logged_in_.+|wp-postpass_|wptouch_switch_toggle|comment_author_|comment_author_email_)' [NC] => matched
[Mon Nov 10 18:43:21.348840 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='/' pattern='!^(/(?:.+/)?feed(?:/(?:.+/?)?)?$|/(?:.+/)?embed/|/(index.php/)?(.*)wp-json(/.*|$))$' [NC] => matched
[Mon Nov 10 18:43:21.348850 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!^[a-z0-9\\"]+' [NC] => matched
[Mon Nov 10 18:43:21.348866 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!^[a-z0-9\\"]+' [NC] => matched
[Mon Nov 10 18:43:21.348949 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^.*(2.0\\ MMP|240x320|400X240|AvantGo|BlackBerry|Blazer|Cellphone|Danger|DoCoMo|Elaine/3.0|EudoraWeb|Googlebot-Mobile|hiptop|IEMobile|KYOCERA/WX310K|LG/U990|MIDP-2.|MMEF20|MOT-V|NetFront|Newt|Nintendo\\ Wii|Nitro|Nokia|Opera\\ Mini|Palm|PlayStation\\ Portable|portalmmm|Proxinet|ProxiNet|SHARP-TQ-GX10|SHG-i900|Small|SonyEricsson|Symbian\\ OS|SymbianOS|TS21i-10|UP.Browser|UP.Link|webOS|Windows\\ CE|WinWAP|YahooSeeker/M1A1-R2D2|iPhone|iPod|Android|BlackBerry9530|LG-TU915\\ Obigo|LGE\\ VX|webOS|Nokia5800).*' [NC] => matched
[Mon Nov 10 18:43:21.348967 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^(w3c\\ |w3c-|acs-|alav|alca|amoi|audi|avan|benq|bird|blac|blaz|brew|cell|cldc|cmd-|dang|doco|eric|hipt|htc_|inno|ipaq|ipod|jigs|kddi|keji|leno|lg-c|lg-d|lg-g|lge-|lg/u|maui|maxo|midp|mits|mmef|mobi|mot-|moto|mwbp|nec-|newt|noki|palm|pana|pant|phil|play|port|prox|qwap|sage|sams|sany|sch-|sec-|send|seri|sgh-|shar|sie-|siem|smal|smar|sony|sph-|symb|t-mo|teli|tim-|tosh|tsm-|upg1|upsi|vk-v|voda|wap-|wapa|wapi|wapp|wapr|webc|winw|winw|xda\\ |xda-).*' [NC] => matched
[Mon Nov 10 18:43:21.348981 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^(facebookexternalhit|WhatsApp).*' [NC] => not-matched
[Mon Nov 10 18:43:21.348990 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.348998 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri ''
[Mon Nov 10 18:43:21.349008 2025] [rewrite:trace5] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:43:21.349017 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.349033 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:43:21.349043 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/ -> 
[Mon Nov 10 18:43:21.349056 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:43:21.349071 2025] [rewrite:trace1] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440161f0/initial] [perdir /home/makifimc/public_html/] pass through /home/makifimc/public_html/
[Mon Nov 10 18:43:21.349174 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349188 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp-admin/install\\.php$' to uri 'index.php'
[Mon Nov 10 18:43:21.349198 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349214 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp-admin/includes/' to uri 'index.php'
[Mon Nov 10 18:43:21.349224 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349233 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp-includes/' to uri 'index.php'
[Mon Nov 10 18:43:21.349242 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349250 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '(^|.*/)\\.(git|svn)/.*' to uri 'index.php'
[Mon Nov 10 18:43:21.349258 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349267 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/uploads/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:43:21.349276 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349288 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/plugins/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:43:21.349304 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349341 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '^wp\\-content/themes/.*\\.(?:php[1-7]?|pht|phtml?|phps)\\.?$' to uri 'index.php'
[Mon Nov 10 18:43:21.349357 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349365 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:43:21.349377 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='on' pattern='on' => matched
[Mon Nov 10 18:43:21.349386 2025] [rewrite:trace5] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] setting env variable 'WPR_SSL' to '-https'
[Mon Nov 10 18:43:21.349395 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349402 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:43:21.349412 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='gzip' => not-matched
[Mon Nov 10 18:43:21.349421 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349429 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:43:21.349439 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='GET' pattern='GET' => matched
[Mon Nov 10 18:43:21.349448 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='=""' => matched
[Mon Nov 10 18:43:21.349457 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!(wordpress_logged_in_.+|wp-postpass_|wptouch_switch_toggle|comment_author_|comment_author_email_)' [NC] => matched
[Mon Nov 10 18:43:21.349476 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='/index.php' pattern='!^(/(?:.+/)?feed(?:/(?:.+/?)?)?$|/(?:.+/)?embed/|/(index.php/)?(.*)wp-json(/.*|$))$' [NC] => matched
[Mon Nov 10 18:43:21.349486 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!^[a-z0-9\\"]+' [NC] => matched
[Mon Nov 10 18:43:21.349496 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='' pattern='!^[a-z0-9\\"]+' [NC] => matched
[Mon Nov 10 18:43:21.349578 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^.*(2.0\\ MMP|240x320|400X240|AvantGo|BlackBerry|Blazer|Cellphone|Danger|DoCoMo|Elaine/3.0|EudoraWeb|Googlebot-Mobile|hiptop|IEMobile|KYOCERA/WX310K|LG/U990|MIDP-2.|MMEF20|MOT-V|NetFront|Newt|Nintendo\\ Wii|Nitro|Nokia|Opera\\ Mini|Palm|PlayStation\\ Portable|portalmmm|Proxinet|ProxiNet|SHARP-TQ-GX10|SHG-i900|Small|SonyEricsson|Symbian\\ OS|SymbianOS|TS21i-10|UP.Browser|UP.Link|webOS|Windows\\ CE|WinWAP|YahooSeeker/M1A1-R2D2|iPhone|iPod|Android|BlackBerry9530|LG-TU915\\ Obigo|LGE\\ VX|webOS|Nokia5800).*' [NC] => matched
[Mon Nov 10 18:43:21.349598 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^(w3c\\ |w3c-|acs-|alav|alca|amoi|audi|avan|benq|bird|blac|blaz|brew|cell|cldc|cmd-|dang|doco|eric|hipt|htc_|inno|ipaq|ipod|jigs|kddi|keji|leno|lg-c|lg-d|lg-g|lge-|lg/u|maui|maxo|midp|mits|mmef|mobi|mot-|moto|mwbp|nec-|newt|noki|palm|pana|pant|phil|play|port|prox|qwap|sage|sams|sany|sch-|sec-|send|seri|sgh-|shar|sie-|siem|smal|smar|sony|sph-|symb|t-mo|teli|tim-|tosh|tsm-|upg1|upsi|vk-v|voda|wap-|wapa|wapi|wapp|wapr|webc|winw|winw|xda\\ |xda-).*' [NC] => matched
[Mon Nov 10 18:43:21.349613 2025] [rewrite:trace4] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] RewriteCond: input='facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)' pattern='!^(facebookexternalhit|WhatsApp).*' [NC] => not-matched
[Mon Nov 10 18:43:21.349622 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349639 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '.*' to uri 'index.php'
[Mon Nov 10 18:43:21.349650 2025] [rewrite:trace5] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:43:21.349659 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] strip per-dir prefix: /home/makifimc/public_html/index.php -> index.php
[Mon Nov 10 18:43:21.349672 2025] [rewrite:trace3] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:43:21.349681 2025] [rewrite:trace1] [pid 11582:tid 11586] mod_rewrite.c(505): [client 31.13.127.9:52658] 31.13.127.9 - - [makifim.com.au/sid#21c92320][rid#7f38440d08b0/subreq] [perdir /home/makifimc/public_html/] pass through /home/makifimc/public_html/index.php
[Tue Nov 11 00:33:05.709863 2025] [autoindex:error] [pid 41978:tid 42014] [client 196.251.85.129:62826] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 00:33:59.338929 2025] [proxy_fcgi:error] [pid 41825:tid 41909] [client 103.4.122.14:44758] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core/lib/class-itsec-lib-highlighted-logs.php', 'wp-content/plugins/ithemes-security-pro/core/lib/class-itsec-lib-highlighted-logs.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core/lib/class-itsec-lib-ip-detector.php', 'wp-content/plugins/ithemes-security-pro/core/lib/class-itsec-lib-ip-detector.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core/lib/class-itsec-lib-ip-tools.php', 'wp-content/plugins/ithemes-security-pro/core/lib/class-itsec-lib-ip-tools.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core/lib/class-itsec-lib-jwt.php', 'wp-content/plugins/ithemes-security-pro/core/lib/class-itsec-lib-jwt.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core/modules/site-scanner/Repository/Scans_Options.php', 'wp-content/plugins/ithemes-security-pro/core/modules/site-scanner/Repository/Scans_Options.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core/modules/site-scanner/Repository/Scans_Repository.php', 'wp-content/plugins/ithemes-security-pro/core/modules/site-scanner/Repository/Scans_Repository.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core/modules/site-scanner/Repository/Vulnerabilities_Options.php', 'wp-content/plugins/ithemes-security-pro/core/modules/site-scanner/Repository/Vulnerabilities_Options.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/core/modules/site-scanner/Repository/Vulnerabilities_Repository.php', 'wp-conte...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/dist/import-export/tools.min.js.LICENSE.txt', 'wp-content/plugins/ithemes-security-pro/dist/import-export/tools.min.js.LICENSE.txt'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/dist/import-export/ui.min.js', 'wp-content/plugins/ithemes-security-pro/dist/import-export/ui.min.js'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/dist/manifest.php', 'wp-content/plugins/ithemes-security-pro/dist/manifest.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/dist/network-brute-force/settings.min.js', 'wp-content/plugins/ithemes-security-pro/dist/network-brute-force/settings.min.js'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/dist/notification-center/settings.min.js', 'wp-content/p...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/pro/wp-cli/notification-center.php', 'wp-content/plugins/ithemes-security-pro/pro/wp-cli/notification-center.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/pro/wp-cli/remote-messages.php', 'wp-content/plugins/ithemes-security-pro/pro/wp-cli/remote-messages.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/pro/wp-cli/scheduler.php', 'wp-content/plugins/ithemes-security-pro/pro/wp-cli/scheduler.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/pro/wp-cli/security-check.php', 'wp-content/plugins/ithemes-security-pro/pro/wp-cli/security-check.php'), ('/home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/pro/wp-cli/settings.php', 'wp-content/plugins/ithemes-security-pro/pro/wp-cli/...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/css/tw-gb/block.css', 'wp-content/plugins/photo-gallery/css/tw-gb/block.css'), ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/filemanager/UploadHandler.php', 'wp-content/plugins/photo-gallery/filemanager/UploadHandler.php'), ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/filemanager/controller.php', 'wp-content/plugins/photo-gallery/filemanager/controller.php'), ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/filemanager/css/default.css', 'wp-content/plugins/photo-gallery/filemanager/css/default.css'), ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/filemanager/css/default_view_list.css', 'wp-content/plugins/photo-gallery/filemanager/css/default_view_list.css'), ('/home/makifimc/public_html/wp-content/plugins/photo-gall...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/wd/assets/img/wds_main_plugin.png', 'wp-content/plugins/photo-gallery/wd/assets/img/wds_main_plugin.png'), ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/wd/assets/img/wp_logo.png', 'wp-content/plugins/photo-gallery/wd/assets/img/wp_logo.png'), ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/wd/assets/img/ytwd_main_plugin.png', 'wp-content/plugins/photo-gallery/wd/assets/img/ytwd_main_plugin.png'), ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/wd/assets/js/deactivate_popup.js', 'wp-content/plugins/photo-gallery/wd/assets/js/deactivate_popup.js'), ('/home/makifimc/public_html/wp-content/plugins/photo-gallery/wd/assets/js/overview.js', 'wp-content/plugins/photo-gallery/wd/assets/js/overview.js'), ('/home/makifimc/public_html/wp-conten...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/really-simple-ssl/settings/src/Page.js', 'wp-content/plugins/really-simple-ssl/settings/src/Page.js'), ('/home/makifimc/public_html/wp-content/plugins/really-simple-ssl/settings/src/Placeholder/DashboardPlaceholder.js', 'wp-content/plugins/really-simple-ssl/settings/src/Placeholder/DashboardPlaceholder.js'), ('/home/makifimc/public_html/wp-content/plugins/really-simple-ssl/settings/src/Placeholder/DatatablePlaceholder.js', 'wp-content/plugins/really-simple-ssl/settings/src/Placeholder/DatatablePlaceholder.js'), ('/home/makifimc/public_html/wp-content/plugins/really-simple-ssl/settings/src/Placeholder/MenuPlaceholder.js', 'wp-content/plugins/really-simple-ssl/settings/src/Placeholder/MenuPlaceholder.js'), ('/home/makifimc/public_html/wp-content/plugins/really-simple-ssl/settings/src/Placehol...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/simply-gallery-block/freemius/includes/customizer/class-fs-customizer-upsell-control.php', 'wp-content/plugins/simply-gallery-block/freemius/includes/customizer/class-fs-customizer-upsell-control.php'), ('/home/makifimc/public_html/wp-content/plugins/simply-gallery-block/freemius/includes/customizer/index.php', 'wp-content/plugins/simply-gallery-block/freemius/includes/customizer/index.php'), ('/home/makifimc/public_html/wp-content/plugins/simply-gallery-block/freemius/includes/debug/class-fs-debug-bar-panel.php', 'wp-content/plugins/simply-gallery-block/freemius/includes/debug/class-fs-debug-bar-panel.php'), ('/home/makifimc/public_html/wp-content/plugins/simply-gallery-block/freemius/includes/debug/debug-bar-start.php', 'wp-content/plugins
[Tue Nov 11 00:34:05.366030 2025] [proxy_fcgi:error] [pid 41825:tid 41909] [client 103.4.122.14:44758] AH01071: Got error 'exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/updraftplus/methods/ftp.php', 'wp-content/plugins/updraftplus/methods/ftp.php'), ('/home/makifimc/public_html/wp-content/plugins/updraftplus/methods/googlecloud.php', 'wp-content/plugins/updraftplus/methods/googlecloud.php'), ('/home/makifimc/public_html/wp-content/plugins/updraftplus/methods/googledrive.php', 'wp-content/plugins/updraftplus/methods/googledrive.php'), ('/home/makifimc/public_html/wp-content/plugins/updraftplus/methods/insufficient.php', 'wp-content/plugins/updraftplus/methods/insufficient.php'), ('/home/makifimc/public_html/wp-content/plugins/updraftplus/methods/onedrive.php', 'wp-content/plugins/updraftplus/methods/onedrive.php'), ('/home/makifimc/public_html/wp-content/plugins/updraftplus/methods/openstack-base.php', 'wp-content/plugins/updraftplus/methods/openstack-base....PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/DatabaseListError.php', 'wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/DatabaseListError.php'), ('/home/makifimc/public_html/wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/DatabaseNameError.php', 'wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/DatabaseNameError.php'), ('/home/makifimc/public_html/wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/DatabaseUpdateError.php', 'wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/Common/Exceptions/DatabaseUpdateError.php'), ('/home/makifimc/public_html/wp-content/plug...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfknownfilelist (path, wordpress_path) VALUES ('/home/makifimc/public_html/wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversPreview.php', 'wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversPreview.php'), ('/home/makifimc/public_html/wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversWordPressCoreContent.php', 'wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversWordPressCoreContent.php'), ('/home/makifimc/public_html/wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversWordPressCoreMultisite.php', 'wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversWordPressCoreMultisite.php'), ('/home/makifimc/public_html/wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversWordPressCoreSite.php', 'wp-content/plugins/wordfence/lib/audit-log/wfAuditLogObserversWordPressCoreSite.php'), ('/home/makifimc/public_html/wp-content/p...'
[Tue Nov 11 00:35:33.315885 2025] [proxy_fcgi:error] [pid 41816:tid 41883] [client 103.4.122.14:45284] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wffilemods SET stoppedOnSignature = '9209', stoppedOnPosition = 0 WHERE filenameMD5 = UNHEX('22dbc309de410f2145d7ae2bc0e28a10') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceMalwareScanFile->updateStoppedOn, wfDB->queryWrite'
[Tue Nov 11 00:45:34.152386 2025] [proxy_fcgi:error] [pid 24225:tid 24253] (70007)The timeout specified has expired: [client 91.92.242.56:58087] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:11:17.631002 2025] [authz_core:error] [pid 14120:tid 14128] [client 91.92.242.56:57363] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/really-simple-ssl/readme.txt
[Tue Nov 11 01:19:37.091671 2025] [:error] [pid 24554:tid 24558] [client 91.92.242.56:54176] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/wp-content/debug.log"] [unique_id "aRIeqRbgcg5JFvN-BGVtSAAAAsA"]
[Tue Nov 11 01:43:56.694243 2025] [:error] [pid 24817:tid 24839] [client 91.92.242.56:51440] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRIkXOBo1Juuc7yq76DR8gAAAxQ"]
[Tue Nov 11 01:51:21.256545 2025] [:error] [pid 31985:tid 32014] [client 91.92.242.56:61746] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRImGZeXIbTtCYJNJFCHbAAAAQY"]
[Tue Nov 11 01:51:24.612564 2025] [:error] [pid 24354:tid 24359] [client 91.92.242.56:60929] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRImHCiUwEIL0MTd44PiOgAAAoE"]
[Tue Nov 11 01:51:25.697971 2025] [:error] [pid 24354:tid 24377] [client 91.92.242.56:59856] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRImHSiUwEIL0MTd44PiPgAAApM"]
[Tue Nov 11 01:51:26.798591 2025] [:error] [pid 41839:tid 41918] [client 91.92.242.56:55178] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRImHjGxg5uCD9Nfh5XH3wAAAIQ"]
[Tue Nov 11 01:51:27.864170 2025] [:error] [pid 24103:tid 24112] [client 91.92.242.56:49530] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRImH7mrGVWhZHx4njJC_gAAAgY"]
[Tue Nov 11 01:51:28.944463 2025] [:error] [pid 41839:tid 41924] [client 91.92.242.56:49488] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRImIDGxg5uCD9Nfh5XH4AAAAIo"]
[Tue Nov 11 01:51:30.007529 2025] [:error] [pid 24554:tid 24560] [client 91.92.242.56:53934] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRImIhbgcg5JFvN-BGV4ZgAAAsI"]
[Tue Nov 11 01:51:31.084490 2025] [:error] [pid 24354:tid 24364] [client 91.92.242.56:59794] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRImIyiUwEIL0MTd44PiXAAAAoY"]
[Tue Nov 11 01:51:32.170843 2025] [:error] [pid 41978:tid 42014] [client 91.92.242.56:53208] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRImJJTXUiwDnS4PcJ9M3QAAANQ"]
[Tue Nov 11 08:23:40.111130 2025] [authz_core:error] [pid 19183:tid 19195] [client 91.92.242.56:50474] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/really-simple-ssl/readme.txt
[Tue Nov 11 08:32:20.835388 2025] [:error] [pid 19756:tid 19766] [client 91.92.242.56:54579] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/wp-content/debug.log"] [unique_id "aRKEFOkAxCY2xqQFnfoA0wAAAkg"]
[Tue Nov 11 10:38:52.559793 2025] [:error] [pid 53355:tid 53365] [client 66.249.64.128:41413] [client 66.249.64.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bet/%E0%B8%94%E0%B8%B9%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%20888%20%E0%B8%AA%E0%B8%94%20%E0%B8%9F%E0%B8%B8%E0%B8%95%E0%B8%9A%E0%B8%AD%E0%B8%A5.html"] [unique_id "aRKhvIB5X5A3rMc4_nDcdgAAAAc"]
[Tue Nov 11 10:39:02.424963 2025] [:error] [pid 53449:tid 53473] [client 66.249.64.128:44106] [client 66.249.64.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nohu/%E0%B8%9C%E0%B8%A5%E0%B8%AA%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.html"] [unique_id "aRKhxtpz08j5NoUSzp_GnQAAAVM"]
[Tue Nov 11 10:39:21.113766 2025] [:error] [pid 59670:tid 59697] [client 66.249.64.128:61048] [client 66.249.64.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gambling/Slot%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94vip.html"] [unique_id "aRKh2ak2Cnts0y-hpfp-aAAAAJg"]
[Tue Nov 11 10:39:35.474551 2025] [:error] [pid 53449:tid 53475] [client 66.249.64.128:47582] [client 66.249.64.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoso/Login%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aRKh59pz08j5NoUSzp_G7QAAAVU"]
[Tue Nov 11 10:39:44.394185 2025] [:error] [pid 53355:tid 53378] [client 66.249.64.128:51816] [client 66.249.64.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betting/%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%9E%E0%B8%A5%E0%B8%B5%E0%B8%A2%E0%B9%80%E0%B8%A1%E0%B8%B5%E0%B8%A2%E0%B8%A5%E0%B8%B5%E0%B8%81.html"] [unique_id "aRKh8IB5X5A3rMc4_nDc1AAAABQ"]
[Tue Nov 11 13:56:47.058790 2025] [proxy_fcgi:error] [pid 53356:tid 53405] [client 44.223.115.10:7173] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_wp_theme_files_patterns-3b23ae1e99ee6913382a1a5c16971124', 'a:2:{s:7:\\"version\\";s:6:\\"4.27.4\\";s:8:\\"patterns\\";a:0:{}}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1762840606.3350510597229003906250', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Tue Nov 11 22:10:29.731997 2025] [:error] [pid 47859:tid 47888] [client 213.209.143.137:56351] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND1aRzLR7egYHK_4d6AQAAABg"]
[Tue Nov 11 22:10:30.250729 2025] [:error] [pid 47964:tid 47989] [client 213.209.143.137:60006] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND1l6CQC3ebUS5pkQC6wAAAZY"]
[Tue Nov 11 22:10:30.769783 2025] [:error] [pid 47931:tid 47955] [client 213.209.143.137:63343] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND1jWP7ptQ6Y-gz68dYQAAAVU"]
[Wed Nov 12 04:22:44.490910 2025] [:error] [pid 57222:tid 57232] [client 213.209.143.137:54849] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRObFGGJazH5XCcA91cV3QAAAAU"]
[Wed Nov 12 04:22:44.999958 2025] [:error] [pid 57222:tid 57246] [client 213.209.143.137:56402] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRObFGGJazH5XCcA91cV4AAAABM"]
[Wed Nov 12 04:22:45.514802 2025] [:error] [pid 57224:tid 57307] [client 213.209.143.137:58232] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRObFRs7oZ7imwCSdAno2QAAAJc"]
2025/11/12 08:43:53 [error] 24793#24793: *395 connect() failed (111: Connection refused) while connecting to upstream, client: 35.94.206.92, server: makifim.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "makifim.com.au"
2025/11/12 08:47:33 [error] 24792#24792: *1459 connect() failed (111: Connection refused) while connecting to upstream, client: 37.60.246.231, server: makifim.com.au, request: "GET /wp-admin/css/ HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-admin/css/", host: "makifim.com.au", referrer: "binance.com"
[Wed Nov 12 12:35:47.510811 2025] [:error] [pid 60096:tid 60156] [client 45.153.34.41:55888] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aRQOozmzkhCvvk8DXOw42gAAAJY"]
[Wed Nov 12 12:59:00.026420 2025] [:error] [pid 60097:tid 60160] [client 45.153.34.41:47700] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aRQUFMdT5oio_TbWpi8V5QAAAMc"]
[Wed Nov 12 21:19:13.228954 2025] [:error] [pid 23737:tid 23769] [client 41.216.188.194:62217] [client 41.216.188.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.216.188.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aRSJURQUsVVfOZWgW_XUhQAAAZQ"], referer: https://twitter.com/
[Thu Nov 13 07:42:40.347132 2025] [:error] [pid 34451:tid 34469] [client 85.203.36.163:53817] [client 85.203.36.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aRUbcDRcD8KetQb4RaqrMgAAAVA"]
[Thu Nov 13 11:48:50.731205 2025] [:error] [pid 62217:tid 62298] [client 15.235.145.161:64480] [client 15.235.145.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/postnews.php"] [unique_id "aRVVIhjGU3T9wKBmdNe7DAAAAFg"]
[Thu Nov 13 11:48:52.906114 2025] [:error] [pid 62217:tid 62275] [client 15.235.145.161:64635] [client 15.235.145.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRVVJBjGU3T9wKBmdNe7EAAAAEE"]
[Thu Nov 13 11:49:01.996506 2025] [:error] [pid 6086:tid 6102] [client 15.235.145.161:63055] [client 15.235.145.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRVVLX9_6CRZzjZnAe2JEgAAAQ0"]
[Thu Nov 13 12:08:41.382465 2025] [:error] [pid 62217:tid 62285] [client 216.24.219.229:25727] [client 216.24.219.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/postnews.php"] [unique_id "aRVZyRjGU3T9wKBmdNfDCgAAAEs"]
[Thu Nov 13 12:08:41.872962 2025] [:error] [pid 62303:tid 62317] [client 104.234.19.116:60399] [client 104.234.19.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRVZyb-hlFTtVrZw8jBnJAAAAIo"]
[Thu Nov 13 17:55:43.519823 2025] [:error] [pid 62303:tid 62312] [client 150.241.107.255:56188] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRWrH7-hlFTtVrZw8jDoFQAAAIU"]
[Thu Nov 13 17:55:44.066826 2025] [:error] [pid 6086:tid 6112] [client 150.241.107.255:56544] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRWrIH9_6CRZzjZnAe0zSgAAARc"]
[Thu Nov 13 17:55:44.613682 2025] [:error] [pid 62215:tid 62237] [client 150.241.107.255:56730] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIEvClof1c6XaOBWsOwAAANI"]
[Thu Nov 13 20:58:11.188049 2025] [:error] [pid 44245:tid 44269] [client 143.244.57.82:53926] [client 143.244.57.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.57.82, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aRXV44k7r-HKZdqw-dX1xgAAAVI"]
[Thu Nov 13 20:58:12.202832 2025] [:error] [pid 44354:tid 44367] [client 143.244.57.82:53942] [client 143.244.57.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.57.82, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aRXV5HqKopQhy3G4s3moYAAAAYg"]
[Thu Nov 13 20:58:13.499003 2025] [:error] [pid 44245:tid 44273] [client 143.244.57.82:53926] [client 143.244.57.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.244.57.82, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aRXV5Yk7r-HKZdqw-dX1yQAAAVY"]
[Thu Nov 13 20:58:14.507685 2025] [:error] [pid 44354:tid 44371] [client 143.244.57.82:53942] [client 143.244.57.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.244.57.82, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aRXV5nqKopQhy3G4s3mocgAAAYw"]
[Thu Nov 13 22:51:44.926077 2025] [:error] [pid 28868:tid 28873] [client 45.138.16.29:60835] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/postnews.php"] [unique_id "aRXwgIq9fgBJ6LAEEDzdEQAAAUM"]
[Thu Nov 13 22:51:45.452288 2025] [:error] [pid 19872:tid 19901] [client 45.138.16.29:60913] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRXwgcusrN1b6ZJ_vbso9AAAAFg"]
[Thu Nov 13 22:51:45.977630 2025] [:error] [pid 4992:tid 5011] [client 45.138.16.29:61093] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwgSmsutP7nusdj-CV_QAAAM8"]
[Fri Nov 14 00:50:43.070733 2025] [proxy_fcgi:error] [pid 49246:tid 49259] [client 103.4.122.14:47526] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Nov 14 06:02:24.879121 2025] [:error] [pid 47154:tid 47172] [client 172.202.1.208:3016] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aRZVcEijA13A3g3ATrJurAAAAA0"]
[Fri Nov 14 06:02:26.600571 2025] [:error] [pid 47155:tid 47189] [client 172.202.1.208:3048] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aRZVcpipxRXMZJH8hmjztgAAAEM"]
[Fri Nov 14 06:02:27.943241 2025] [:error] [pid 47156:tid 47236] [client 172.202.1.208:3027] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aRZVc9jrQX_P-kC7M_7wAQAAAJU"]
[Fri Nov 14 06:02:29.727567 2025] [:error] [pid 47630:tid 47652] [client 172.202.1.208:3053] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aRZVdcxXXNBfWgpfVJ4rzgAAARQ"]
[Fri Nov 14 06:02:31.338992 2025] [:error] [pid 47155:tid 47203] [client 172.202.1.208:3040] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aRZVd5ipxRXMZJH8hmjzuwAAAFE"]
[Fri Nov 14 06:02:32.478096 2025] [:error] [pid 47154:tid 47172] [client 172.202.1.208:3026] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aRZVeEijA13A3g3ATrJutgAAAA0"]
[Fri Nov 14 06:02:33.905187 2025] [:error] [pid 47242:tid 47260] [client 172.202.1.208:3065] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aRZVeVPNnvrux3OMagyIjAAAAM8"]
[Fri Nov 14 06:02:36.055426 2025] [:error] [pid 47155:tid 47187] [client 172.202.1.208:3071] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aRZVfJipxRXMZJH8hmjzxAAAAEE"]
[Fri Nov 14 06:02:37.636267 2025] [:error] [pid 47154:tid 47176] [client 172.202.1.208:3038] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aRZVfUijA13A3g3ATrJuwQAAABE"]
[Fri Nov 14 06:02:38.450101 2025] [:error] [pid 47156:tid 47216] [client 172.202.1.208:2987] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aRZVftjrQX_P-kC7M_7wDQAAAII"]
[Fri Nov 14 06:02:40.613397 2025] [:error] [pid 47154:tid 47162] [client 172.202.1.208:2965] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aRZVgEijA13A3g3ATrJuxQAAAAM"]
[Fri Nov 14 06:02:43.323582 2025] [:error] [pid 47154:tid 47180] [client 172.202.1.208:3037] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aRZVg0ijA13A3g3ATrJuzAAAABU"]
[Fri Nov 14 06:02:44.732903 2025] [:error] [pid 47242:tid 47264] [client 172.202.1.208:3043] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aRZVhFPNnvrux3OMagyIlgAAANM"]
[Fri Nov 14 06:02:47.276532 2025] [:error] [pid 47242:tid 47252] [client 172.202.1.208:3030] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aRZVh1PNnvrux3OMagyIoQAAAMc"]
[Fri Nov 14 06:02:48.699939 2025] [:error] [pid 47156:tid 47224] [client 172.202.1.208:3032] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aRZViNjrQX_P-kC7M_7wHwAAAIo"]
[Fri Nov 14 06:02:50.139276 2025] [:error] [pid 47156:tid 47217] [client 172.202.1.208:3022] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aRZVitjrQX_P-kC7M_7wIgAAAIM"]
[Fri Nov 14 06:02:51.197715 2025] [:error] [pid 47156:tid 47230] [client 172.202.1.208:2958] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file32.php"] [unique_id "aRZVi9jrQX_P-kC7M_7wJgAAAJA"]
[Fri Nov 14 06:02:53.134528 2025] [:error] [pid 47154:tid 47170] [client 172.202.1.208:3021] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file32.php"] [unique_id "aRZVjUijA13A3g3ATrJu4gAAAAs"]
[Fri Nov 14 06:02:54.941471 2025] [:error] [pid 47630:tid 47634] [client 172.202.1.208:3068] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file32.php"] [unique_id "aRZVjsxXXNBfWgpfVJ4r_gAAAQI"]
[Fri Nov 14 06:02:56.224600 2025] [:error] [pid 47155:tid 47186] [client 172.202.1.208:2955] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file32.php"] [unique_id "aRZVkJipxRXMZJH8hmjz5AAAAEA"]
[Fri Nov 14 06:02:57.889803 2025] [:error] [pid 47155:tid 47205] [client 172.202.1.208:3050] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filesss.php"] [unique_id "aRZVkZipxRXMZJH8hmjz6QAAAFM"]
[Fri Nov 14 06:02:59.078563 2025] [:error] [pid 47630:tid 47648] [client 172.202.1.208:2905] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filesss.php"] [unique_id "aRZVk8xXXNBfWgpfVJ4sCgAAARA"]
[Fri Nov 14 06:03:00.498513 2025] [:error] [pid 47156:tid 47229] [client 172.202.1.208:3046] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filesss.php"] [unique_id "aRZVlNjrQX_P-kC7M_7wNQAAAI8"]
[Fri Nov 14 06:03:02.679064 2025] [:error] [pid 47155:tid 47196] [client 172.202.1.208:3033] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filesss.php"] [unique_id "aRZVlpipxRXMZJH8hmjz8QAAAEo"]
[Fri Nov 14 06:03:05.374625 2025] [:error] [pid 47242:tid 47251] [client 172.202.1.208:3020] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aRZVmVPNnvrux3OMagyIzQAAAMY"]
[Fri Nov 14 06:03:06.563213 2025] [:error] [pid 47156:tid 47231] [client 172.202.1.208:3031] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aRZVmtjrQX_P-kC7M_7wQwAAAJE"]
[Fri Nov 14 06:03:08.255722 2025] [:error] [pid 47630:tid 47655] [client 172.202.1.208:2959] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aRZVnMxXXNBfWgpfVJ4sNgAAARc"]
[Fri Nov 14 06:03:09.291028 2025] [:error] [pid 47155:tid 47188] [client 172.202.1.208:2900] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aRZVnZipxRXMZJH8hmjz_gAAAEI"]
[Fri Nov 14 06:03:10.258066 2025] [:error] [pid 47630:tid 47656] [client 172.202.1.208:2982] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file13.php"] [unique_id "aRZVnsxXXNBfWgpfVJ4sRgAAARg"]
[Fri Nov 14 06:03:11.286500 2025] [:error] [pid 47242:tid 47255] [client 172.202.1.208:3013] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file13.php"] [unique_id "aRZVn1PNnvrux3OMagyI6gAAAMo"]
[Fri Nov 14 06:03:13.136706 2025] [:error] [pid 47156:tid 47239] [client 172.202.1.208:3059] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file13.php"] [unique_id "aRZVodjrQX_P-kC7M_7wWgAAAJg"]
[Fri Nov 14 06:03:14.421086 2025] [:error] [pid 47630:tid 47645] [client 172.202.1.208:2950] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file13.php"] [unique_id "aRZVosxXXNBfWgpfVJ4sZAAAAQ0"]
[Fri Nov 14 06:03:15.842471 2025] [:error] [pid 47242:tid 47262] [client 172.202.1.208:3008] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file3.php"] [unique_id "aRZVo1PNnvrux3OMagyI-gAAANE"]
[Fri Nov 14 06:03:17.138117 2025] [:error] [pid 47156:tid 47232] [client 172.202.1.208:2952] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file3.php"] [unique_id "aRZVpdjrQX_P-kC7M_7wawAAAJI"]
[Fri Nov 14 06:04:41.554399 2025] [:error] [pid 47155:tid 47203] [client 172.202.1.208:3044] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aRZV-ZipxRXMZJH8hmj0yAAAAFE"]
[Fri Nov 14 06:04:45.229621 2025] [:error] [pid 47156:tid 47226] [client 172.202.1.208:3058] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aRZV_djrQX_P-kC7M_7xIwAAAIw"]
[Fri Nov 14 06:04:47.852305 2025] [:error] [pid 47156:tid 47215] [client 172.202.1.208:2957] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aRZV_9jrQX_P-kC7M_7xJgAAAIE"]
[Fri Nov 14 06:04:49.234001 2025] [:error] [pid 47155:tid 47193] [client 172.202.1.208:3019] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aRZWAZipxRXMZJH8hmj03AAAAEc"]
[Fri Nov 14 06:04:51.031377 2025] [:error] [pid 47242:tid 47266] [client 172.202.1.208:2956] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0%25.php"] [unique_id "aRZWA1PNnvrux3OMagyJ0gAAANU"]
[Fri Nov 14 06:04:52.418961 2025] [:error] [pid 47242:tid 47258] [client 172.202.1.208:3055] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0%25.php"] [unique_id "aRZWBFPNnvrux3OMagyJ1gAAAM0"]
[Fri Nov 14 06:04:54.036720 2025] [:error] [pid 47242:tid 47253] [client 172.202.1.208:2896] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0%25.php"] [unique_id "aRZWBlPNnvrux3OMagyJ3AAAAMg"]
[Fri Nov 14 06:04:55.142020 2025] [:error] [pid 47242:tid 47250] [client 172.202.1.208:2948] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0%25.php"] [unique_id "aRZWB1PNnvrux3OMagyJ3QAAAMU"]
[Fri Nov 14 06:04:56.593254 2025] [:error] [pid 47630:tid 47634] [client 172.202.1.208:2981] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aRZWCMxXXNBfWgpfVJ4togAAAQI"]
[Fri Nov 14 06:04:57.752233 2025] [:error] [pid 47630:tid 47647] [client 172.202.1.208:2964] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aRZWCcxXXNBfWgpfVJ4tpgAAAQ8"]
[Fri Nov 14 06:04:59.050125 2025] [:error] [pid 47242:tid 47251] [client 172.202.1.208:2969] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aRZWC1PNnvrux3OMagyJ7gAAAMY"]
[Fri Nov 14 06:05:01.096994 2025] [:error] [pid 47154:tid 47173] [client 172.202.1.208:2970] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aRZWDUijA13A3g3ATrJv6QAAAA4"]
[Fri Nov 14 06:05:02.159151 2025] [:error] [pid 47155:tid 47187] [client 172.202.1.208:3018] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aRZWDpipxRXMZJH8hmj06wAAAEE"]
[Fri Nov 14 06:05:03.182991 2025] [:error] [pid 47155:tid 47207] [client 172.202.1.208:2961] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aRZWD5ipxRXMZJH8hmj07AAAAFU"]
[Fri Nov 14 06:05:03.902083 2025] [:error] [pid 47154:tid 47160] [client 172.202.1.208:3004] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aRZWD0ijA13A3g3ATrJv8gAAAAE"]
[Fri Nov 14 06:05:05.994656 2025] [:error] [pid 47154:tid 47162] [client 172.202.1.208:3070] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aRZWEUijA13A3g3ATrJv9gAAAAM"]
[Fri Nov 14 06:05:07.553879 2025] [:error] [pid 47242:tid 47247] [client 172.202.1.208:3000] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aRZWE1PNnvrux3OMagyKAAAAAMI"]
[Fri Nov 14 06:05:08.939143 2025] [:error] [pid 47630:tid 47650] [client 172.202.1.208:2967] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aRZWFMxXXNBfWgpfVJ4ttgAAARI"]
[Fri Nov 14 06:05:09.771963 2025] [:error] [pid 47630:tid 47645] [client 172.202.1.208:3052] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aRZWFcxXXNBfWgpfVJ4tuQAAAQ0"]
[Fri Nov 14 06:05:10.415159 2025] [:error] [pid 47630:tid 47653] [client 172.202.1.208:3049] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aRZWFsxXXNBfWgpfVJ4tuwAAARU"]
[Fri Nov 14 06:05:11.308140 2025] [:error] [pid 47155:tid 47207] [client 172.202.1.208:2991] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aRZWF5ipxRXMZJH8hmj0-AAAAFU"]
[Fri Nov 14 06:05:12.653029 2025] [:error] [pid 47156:tid 47237] [client 172.202.1.208:2951] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aRZWGNjrQX_P-kC7M_7xTAAAAJY"]
[Fri Nov 14 06:05:14.069320 2025] [:error] [pid 47156:tid 47231] [client 172.202.1.208:3028] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aRZWGtjrQX_P-kC7M_7xUAAAAJE"]
[Fri Nov 14 06:05:15.757655 2025] [:error] [pid 47156:tid 47218] [client 172.202.1.208:3023] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aRZWG9jrQX_P-kC7M_7xVAAAAIQ"]
[Fri Nov 14 06:05:17.436655 2025] [:error] [pid 47154:tid 47170] [client 172.202.1.208:2946] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aRZWHUijA13A3g3ATrJwBAAAAAs"]
[Fri Nov 14 06:05:19.184027 2025] [:error] [pid 47156:tid 47237] [client 172.202.1.208:3025] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aRZWH9jrQX_P-kC7M_7xWwAAAJY"]
[Fri Nov 14 06:05:20.101506 2025] [:error] [pid 47630:tid 47635] [client 172.202.1.208:3060] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aRZWIMxXXNBfWgpfVJ4t0gAAAQM"]
[Fri Nov 14 06:05:21.258057 2025] [:error] [pid 47154:tid 47183] [client 172.202.1.208:3047] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aRZWIUijA13A3g3ATrJwDQAAABg"]
[Fri Nov 14 06:05:22.866330 2025] [:error] [pid 47630:tid 47652] [client 172.202.1.208:3052] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aRZWIsxXXNBfWgpfVJ4t2wAAARQ"]
[Fri Nov 14 06:05:23.725662 2025] [:error] [pid 47630:tid 47656] [client 172.202.1.208:2954] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aRZWI8xXXNBfWgpfVJ4t3wAAARg"]
[Fri Nov 14 06:05:25.349248 2025] [:error] [pid 47242:tid 47266] [client 172.202.1.208:3066] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aRZWJVPNnvrux3OMagyKHQAAANU"]
[Fri Nov 14 06:05:25.877796 2025] [:error] [pid 47242:tid 47264] [client 172.202.1.208:2945] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aRZWJVPNnvrux3OMagyKHwAAANM"]
[Fri Nov 14 06:05:26.763301 2025] [:error] [pid 47242:tid 47248] [client 172.202.1.208:2979] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aRZWJlPNnvrux3OMagyKIwAAAMM"]
[Fri Nov 14 06:05:28.129007 2025] [:error] [pid 47630:tid 47642] [client 172.202.1.208:2962] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aRZWKMxXXNBfWgpfVJ4t6AAAAQo"]
[Fri Nov 14 06:05:30.076350 2025] [:error] [pid 47155:tid 47197] [client 172.202.1.208:2899] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aRZWKpipxRXMZJH8hmj1GwAAAEs"]
[Fri Nov 14 06:05:31.567652 2025] [:error] [pid 47630:tid 47641] [client 172.202.1.208:3011] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aRZWK8xXXNBfWgpfVJ4t7wAAAQk"]
[Fri Nov 14 06:05:33.444388 2025] [:error] [pid 47154:tid 47169] [client 172.202.1.208:2901] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aRZWLUijA13A3g3ATrJwKgAAAAo"]
[Fri Nov 14 06:06:48.294742 2025] [:error] [pid 47242:tid 47253] [client 172.202.1.208:3051] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aRZWeFPNnvrux3OMagyKywAAAMg"]
[Fri Nov 14 06:06:49.415295 2025] [:error] [pid 47154:tid 47166] [client 172.202.1.208:2889] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aRZWeUijA13A3g3ATrJwuAAAAAc"]
[Fri Nov 14 06:06:51.559867 2025] [:error] [pid 47242:tid 47248] [client 172.202.1.208:2853] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aRZWe1PNnvrux3OMagyK0gAAAMM"]
[Fri Nov 14 06:06:52.698574 2025] [:error] [pid 47242:tid 47247] [client 172.202.1.208:2944] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aRZWfFPNnvrux3OMagyK2AAAAMI"]
[Fri Nov 14 06:06:53.318133 2025] [:error] [pid 47156:tid 47226] [client 172.202.1.208:3062] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cfile.php"] [unique_id "aRZWfdjrQX_P-kC7M_7yPwAAAIw"]
[Fri Nov 14 06:06:54.224816 2025] [:error] [pid 47155:tid 47189] [client 172.202.1.208:3010] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cfile.php"] [unique_id "aRZWfpipxRXMZJH8hmj2WwAAAEM"]
[Fri Nov 14 06:06:55.144613 2025] [:error] [pid 47630:tid 47639] [client 172.202.1.208:2891] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cfile.php"] [unique_id "aRZWf8xXXNBfWgpfVJ4uxQAAAQc"]
[Fri Nov 14 06:06:56.645773 2025] [:error] [pid 47156:tid 47239] [client 172.202.1.208:2966] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cfile.php"] [unique_id "aRZWgNjrQX_P-kC7M_7ySQAAAJg"]
[Fri Nov 14 06:06:57.850942 2025] [:error] [pid 47154:tid 47179] [client 172.202.1.208:3026] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aRZWgUijA13A3g3ATrJwvwAAABQ"]
[Fri Nov 14 06:06:59.242811 2025] [:error] [pid 47154:tid 47168] [client 172.202.1.208:3043] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aRZWg0ijA13A3g3ATrJwwgAAAAk"]
[Fri Nov 14 06:07:00.334363 2025] [:error] [pid 47630:tid 47651] [client 172.202.1.208:2960] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aRZWhMxXXNBfWgpfVJ4u1AAAARM"]
[Fri Nov 14 06:07:01.612565 2025] [:error] [pid 47155:tid 47192] [client 172.202.1.208:3065] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aRZWhZipxRXMZJH8hmj2ZQAAAEY"]
[Fri Nov 14 06:07:02.483569 2025] [:error] [pid 47155:tid 47209] [client 172.202.1.208:2985] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aRZWhpipxRXMZJH8hmj2agAAAFc"]
[Fri Nov 14 06:07:03.627906 2025] [:error] [pid 47156:tid 47236] [client 172.202.1.208:3067] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aRZWh9jrQX_P-kC7M_7yTgAAAJU"]
[Fri Nov 14 06:07:06.482386 2025] [:error] [pid 47154:tid 47179] [client 172.202.1.208:2984] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aRZWikijA13A3g3ATrJwzQAAABQ"]
[Fri Nov 14 06:07:08.593731 2025] [:error] [pid 47630:tid 47656] [client 172.202.1.208:3009] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aRZWjMxXXNBfWgpfVJ4u7gAAARg"]
[Fri Nov 14 06:07:10.907214 2025] [:error] [pid 47156:tid 47227] [client 172.202.1.208:2932] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aRZWjtjrQX_P-kC7M_7yVwAAAI0"]
[Fri Nov 14 06:07:13.389146 2025] [:error] [pid 47242:tid 47254] [client 172.202.1.208:3044] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aRZWkVPNnvrux3OMagyK8wAAAMk"]
[Fri Nov 14 06:07:14.637936 2025] [:error] [pid 47242:tid 47253] [client 172.202.1.208:3036] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aRZWklPNnvrux3OMagyK9wAAAMg"]
[Fri Nov 14 06:07:20.645437 2025] [:error] [pid 47242:tid 47253] [client 172.202.1.208:2995] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aRZWmFPNnvrux3OMagyLAAAAAMg"]
[Fri Nov 14 06:07:22.851819 2025] [:error] [pid 47630:tid 47644] [client 172.202.1.208:3024] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aRZWmsxXXNBfWgpfVJ4vDQAAAQw"]
[Fri Nov 14 06:07:24.240441 2025] [:error] [pid 47242:tid 47266] [client 172.202.1.208:3069] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aRZWnFPNnvrux3OMagyLCwAAANU"]
[Fri Nov 14 06:07:25.391559 2025] [:error] [pid 47156:tid 47215] [client 172.202.1.208:2958] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aRZWndjrQX_P-kC7M_7yZAAAAIE"]
[Fri Nov 14 06:07:27.683606 2025] [:error] [pid 47156:tid 47232] [client 172.202.1.208:3033] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aRZWn9jrQX_P-kC7M_7yaQAAAJI"]
[Fri Nov 14 06:07:28.894342 2025] [:error] [pid 47630:tid 47637] [client 172.202.1.208:3030] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vast.php"] [unique_id "aRZWoMxXXNBfWgpfVJ4vHQAAAQU"]
[Fri Nov 14 06:07:29.923600 2025] [:error] [pid 47156:tid 47227] [client 172.202.1.208:3037] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vast.php"] [unique_id "aRZWodjrQX_P-kC7M_7yawAAAI0"]
[Fri Nov 14 06:07:30.631111 2025] [:error] [pid 47630:tid 47645] [client 172.202.1.208:2941] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vast.php"] [unique_id "aRZWosxXXNBfWgpfVJ4vJAAAAQ0"]
[Fri Nov 14 06:07:31.215010 2025] [:error] [pid 47156:tid 47221] [client 172.202.1.208:3059] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vast.php"] [unique_id "aRZWo9jrQX_P-kC7M_7ycAAAAIc"]
[Fri Nov 14 06:07:32.435634 2025] [:error] [pid 47156:tid 47230] [client 172.202.1.208:3032] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanki.php"] [unique_id "aRZWpNjrQX_P-kC7M_7ydQAAAJA"]
[Fri Nov 14 06:07:37.151837 2025] [:error] [pid 47630:tid 47645] [client 172.202.1.208:2987] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanki.php"] [unique_id "aRZWqcxXXNBfWgpfVJ4vQwAAAQ0"]
[Fri Nov 14 06:07:40.584913 2025] [:error] [pid 47242:tid 47264] [client 172.202.1.208:2976] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanki.php"] [unique_id "aRZWrFPNnvrux3OMagyLMAAAANM"]
[Fri Nov 14 06:07:41.350707 2025] [:error] [pid 47154:tid 47176] [client 172.202.1.208:2894] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanki.php"] [unique_id "aRZWrUijA13A3g3ATrJxCQAAABE"]
[Fri Nov 14 06:07:42.754106 2025] [:error] [pid 47154:tid 47169] [client 172.202.1.208:2998] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aRZWrkijA13A3g3ATrJxDAAAAAo"]
[Fri Nov 14 06:07:44.917772 2025] [:error] [pid 47156:tid 47223] [client 172.202.1.208:2949] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aRZWsNjrQX_P-kC7M_7yfwAAAIk"]
[Fri Nov 14 06:09:15.790250 2025] [:error] [pid 47242:tid 47254] [client 172.202.1.208:3038] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRZXC1PNnvrux3OMagyMQgAAAMk"]
[Fri Nov 14 06:09:16.252380 2025] [:error] [pid 47630:tid 47634] [client 172.202.1.208:3064] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRZXDMxXXNBfWgpfVJ4wHgAAAQI"]
[Fri Nov 14 06:09:16.883652 2025] [:error] [pid 47630:tid 47651] [client 172.202.1.208:3029] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRZXDMxXXNBfWgpfVJ4wIQAAARM"]
[Fri Nov 14 06:09:17.872583 2025] [:error] [pid 47155:tid 47186] [client 172.202.1.208:2890] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRZXDZipxRXMZJH8hmj3XAAAAEA"]
[Fri Nov 14 06:09:19.253340 2025] [:error] [pid 47630:tid 47642] [client 172.202.1.208:3012] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aRZXD8xXXNBfWgpfVJ4wKQAAAQo"]
[Fri Nov 14 06:09:20.644625 2025] [:error] [pid 47155:tid 47189] [client 172.202.1.208:3013] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aRZXEJipxRXMZJH8hmj3ZQAAAEM"]
[Fri Nov 14 06:09:21.847068 2025] [:error] [pid 47155:tid 47191] [client 172.202.1.208:2963] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aRZXEZipxRXMZJH8hmj3aAAAAEU"]
[Fri Nov 14 06:09:22.886340 2025] [:error] [pid 47630:tid 47642] [client 172.202.1.208:3031] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aRZXEsxXXNBfWgpfVJ4wMwAAAQo"]
[Fri Nov 14 06:09:24.541509 2025] [:error] [pid 47155:tid 47209] [client 172.202.1.208:3054] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aRZXFJipxRXMZJH8hmj3bgAAAFc"]
[Fri Nov 14 06:09:25.499714 2025] [:error] [pid 47630:tid 47643] [client 172.202.1.208:3001] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aRZXFcxXXNBfWgpfVJ4wOAAAAQs"]
[Fri Nov 14 06:09:27.383542 2025] [:error] [pid 47154:tid 47161] [client 172.202.1.208:3027] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aRZXF0ijA13A3g3ATrJx2AAAAAI"]
[Fri Nov 14 06:09:29.394955 2025] [:error] [pid 47155:tid 47209] [client 172.202.1.208:3057] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aRZXGZipxRXMZJH8hmj3dgAAAFc"]
[Fri Nov 14 06:09:30.361876 2025] [:error] [pid 47154:tid 47173] [client 172.202.1.208:3071] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dfre.php"] [unique_id "aRZXGkijA13A3g3ATrJx3QAAAA4"]
[Fri Nov 14 06:09:31.605447 2025] [:error] [pid 47156:tid 47217] [client 172.202.1.208:2955] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dfre.php"] [unique_id "aRZXG9jrQX_P-kC7M_7zWAAAAIM"]
[Fri Nov 14 06:09:33.558630 2025] [:error] [pid 47630:tid 47653] [client 172.202.1.208:2952] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dfre.php"] [unique_id "aRZXHcxXXNBfWgpfVJ4wQgAAARU"]
[Fri Nov 14 06:09:34.228871 2025] [:error] [pid 47630:tid 47650] [client 172.202.1.208:2883] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dfre.php"] [unique_id "aRZXHsxXXNBfWgpfVJ4wRAAAARI"]
[Fri Nov 14 06:09:34.769163 2025] [:error] [pid 47630:tid 47637] [client 172.202.1.208:3042] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aRZXHsxXXNBfWgpfVJ4wRQAAAQU"]
[Fri Nov 14 06:09:35.735216 2025] [:error] [pid 47630:tid 47642] [client 172.202.1.208:2905] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aRZXH8xXXNBfWgpfVJ4wRwAAAQo"]
[Fri Nov 14 06:09:36.847171 2025] [:error] [pid 47630:tid 47632] [client 172.202.1.208:2968] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aRZXIMxXXNBfWgpfVJ4wTAAAAQA"]
[Fri Nov 14 06:09:38.071360 2025] [:error] [pid 47242:tid 47253] [client 172.202.1.208:2961] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aRZXIlPNnvrux3OMagyMXAAAAMg"]
[Fri Nov 14 06:09:39.631902 2025] [:error] [pid 47156:tid 47219] [client 172.202.1.208:2971] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aRZXI9jrQX_P-kC7M_7zXwAAAIU"]
[Fri Nov 14 06:09:40.501653 2025] [:error] [pid 47630:tid 47637] [client 172.202.1.208:3048] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aRZXJMxXXNBfWgpfVJ4wWAAAAQU"]
[Fri Nov 14 06:09:41.940798 2025] [:error] [pid 47630:tid 47632] [client 172.202.1.208:2956] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aRZXJcxXXNBfWgpfVJ4wWgAAAQA"]
[Fri Nov 14 06:09:45.788795 2025] [:error] [pid 47242:tid 47250] [client 172.202.1.208:2950] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aRZXKVPNnvrux3OMagyMbAAAAMU"]
[Fri Nov 14 06:09:46.387998 2025] [:error] [pid 47155:tid 47196] [client 172.202.1.208:3053] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/usep.php"] [unique_id "aRZXKpipxRXMZJH8hmj3kQAAAEo"]
[Fri Nov 14 06:09:47.603708 2025] [:error] [pid 47242:tid 47264] [client 172.202.1.208:3050] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/usep.php"] [unique_id "aRZXK1PNnvrux3OMagyMeAAAANM"]
[Fri Nov 14 06:09:48.583835 2025] [:error] [pid 47156:tid 47220] [client 172.202.1.208:3028] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/usep.php"] [unique_id "aRZXLNjrQX_P-kC7M_7zgwAAAIY"]
[Fri Nov 14 06:09:49.897965 2025] [:error] [pid 47630:tid 47643] [client 172.202.1.208:3034] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/usep.php"] [unique_id "aRZXLcxXXNBfWgpfVJ4wawAAAQs"]
[Fri Nov 14 06:09:51.231343 2025] [:error] [pid 47156:tid 47223] [client 172.202.1.208:3014] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aRZXL9jrQX_P-kC7M_7zhgAAAIk"]
[Fri Nov 14 06:09:52.650028 2025] [:error] [pid 47154:tid 47179] [client 172.202.1.208:2904] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aRZXMEijA13A3g3ATrJyAQAAABQ"]
[Fri Nov 14 06:09:54.175628 2025] [:error] [pid 47630:tid 47652] [client 172.202.1.208:2991] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aRZXMsxXXNBfWgpfVJ4wgAAAARQ"]
[Fri Nov 14 06:09:55.310589 2025] [:error] [pid 47154:tid 47173] [client 172.202.1.208:2945] [client 172.202.1.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aRZXM0ijA13A3g3ATrJyBAAAAA4"]
[Fri Nov 14 12:02:55.657298 2025] [:error] [pid 16671:tid 16694] [client 136.144.19.220:49215] [client 136.144.19.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aRap7zsoHwEAmeIzZXC96QAAARE"]
[Fri Nov 14 12:02:56.138410 2025] [:error] [pid 16574:tid 16619] [client 136.144.19.196:46753] [client 136.144.19.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/txets.php"] [unique_id "aRap8P6XQqe4NqaoE9K4QAAAAIw"]
[Fri Nov 14 12:02:56.624109 2025] [:error] [pid 16574:tid 16623] [client 136.144.19.193:29057] [client 136.144.19.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aRap8P6XQqe4NqaoE9K4QgAAAJA"]
[Fri Nov 14 20:11:41.491502 2025] [:error] [pid 16709:tid 16729] [client 216.24.219.241:54917] [client 216.24.219.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aRccfaNdzfVNC4oipLWNEQAAAVI"]
[Fri Nov 14 20:11:43.001190 2025] [:error] [pid 16709:tid 16721] [client 104.234.19.117:53145] [client 104.234.19.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/style.php"] [unique_id "aRccf6NdzfVNC4oipLWNGAAAAUo"]
[Fri Nov 14 20:11:44.602693 2025] [:error] [pid 1170:tid 1179] [client 216.24.219.208:56909] [client 216.24.219.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aRccgA5pkvzCDzzjItRvYwAAAAc"]
[Fri Nov 14 20:11:45.337132 2025] [:error] [pid 16575:tid 16651] [client 216.24.219.214:35209] [client 216.24.219.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/style.php"] [unique_id "aRccge6qT670YxigvbClYAAAANE"]
[Fri Nov 14 20:11:45.837504 2025] [:error] [pid 16671:tid 16686] [client 216.24.219.223:20381] [client 216.24.219.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style.php"] [unique_id "aRccgTsoHwEAmeIzZXB6RwAAAQk"]
[Fri Nov 14 20:11:46.411144 2025] [:error] [pid 16575:tid 16656] [client 216.24.219.194:22591] [client 216.24.219.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aRccgu6qT670YxigvbClYwAAANY"]
[Fri Nov 14 20:11:47.915303 2025] [:error] [pid 1170:tid 1177] [client 216.24.219.223:55165] [client 216.24.219.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aRccgw5pkvzCDzzjItRvawAAAAU"]
[Sat Nov 15 03:58:36.720943 2025] [:error] [pid 48480:tid 48503] [client 139.59.110.66:45732] [client 139.59.110.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aReJ7D_JmA-GoSj5Mj2J3AAAANQ"]
[Sat Nov 15 03:58:53.287096 2025] [:error] [pid 48373:tid 48407] [client 139.59.110.66:45754] [client 139.59.110.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aReJ_VvujhTe_5A1RjAxjQAAABM"]
[Sat Nov 15 12:09:26.732141 2025] [:error] [pid 27997:tid 28010] [client 138.197.23.42:64760] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRf89tpja_6cDxKbxFmOBwAAAMs"]
[Sat Nov 15 12:09:27.155641 2025] [:error] [pid 22765:tid 22782] [client 138.197.23.42:64912] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRf896brQzjuZmPIWDafFAAAAow"]
[Sat Nov 15 12:09:27.586838 2025] [:error] [pid 27997:tid 28020] [client 138.197.23.42:65074] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRf899pja_6cDxKbxFmOTQAAANU"]
[Sat Nov 15 12:09:28.030655 2025] [:error] [pid 22613:tid 22617] [client 138.197.23.42:65243] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRf8-CoyR3cDsIRGPRl8jAAAAgI"]
[Sat Nov 15 12:09:28.458477 2025] [:error] [pid 27997:tid 28002] [client 138.197.23.42:56220] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRf8-Npja_6cDxKbxFmOdQAAAMM"]
[Sat Nov 15 20:16:40.793963 2025] [:error] [pid 20654:tid 20679] [client 45.138.16.215:59542] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/postnews.php"] [unique_id "aRhvKHcS7eC8vO76_ycGqQAAA5Y"]
[Sat Nov 15 20:16:41.349644 2025] [:error] [pid 20654:tid 20669] [client 45.138.16.215:59647] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRhvKXcS7eC8vO76_ycGrAAAA4w"]
[Sat Nov 15 20:16:41.896501 2025] [:error] [pid 27997:tid 28010] [client 45.138.16.215:59747] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRhvKdpja_6cDxKbxFnp0QAAAMs"]
[Sat Nov 15 20:26:27.865144 2025] [:error] [pid 27911:tid 27976] [client 45.134.79.103:64023] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRhxc8GzUdrhGBIfiKR1-gAAAIg"]
[Sat Nov 15 20:26:28.524132 2025] [:error] [pid 27909:tid 27935] [client 45.134.79.103:64230] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRhxdCTfZ6B57n8HepU9qwAAABY"]
[Sat Nov 15 20:26:29.171047 2025] [:error] [pid 27911:tid 27976] [client 45.134.79.103:64400] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdcGzUdrhGBIfiKR2CwAAAIg"]
[Sat Nov 15 20:48:30.283131 2025] [:error] [pid 19961:tid 20013] [client 45.131.195.16:30379] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aRh2njar7Si-84EApVSIgAAAAdQ"]
[Sat Nov 15 20:48:31.172903 2025] [:error] [pid 22613:tid 22637] [client 45.131.195.45:30693] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aRh2nyoyR3cDsIRGPRnVnwAAAhY"]
[Sat Nov 15 20:48:32.037611 2025] [:error] [pid 20313:tid 20332] [client 45.131.195.47:26387] [client 45.131.195.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRh2oBI9DXIgPadBLUagzQAAAtA"]
[Sat Nov 15 20:48:32.904334 2025] [:error] [pid 20346:tid 20363] [client 45.131.195.46:34441] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aRh2oJ7hsydZdIoVTltQ0AAAAw4"]
[Sat Nov 15 20:48:33.765830 2025] [:error] [pid 27997:tid 28015] [client 45.131.195.11:24565] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aRh2odpja_6cDxKbxFnuBQAAANA"]
[Sat Nov 15 20:48:34.638781 2025] [:error] [pid 27997:tid 28020] [client 45.131.195.11:36821] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aRh2otpja_6cDxKbxFnuBgAAANU"]
[Sat Nov 15 20:48:35.501181 2025] [:error] [pid 20313:tid 20330] [client 45.131.195.43:47485] [client 45.131.195.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aRh2oxI9DXIgPadBLUagzgAAAs4"]
[Sat Nov 15 20:48:36.414985 2025] [:error] [pid 20346:tid 20364] [client 45.131.195.49:37959] [client 45.131.195.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aRh2pJ7hsydZdIoVTltQ0gAAAw8"]
[Sat Nov 15 20:48:37.277050 2025] [:error] [pid 27997:tid 27999] [client 45.131.195.245:23977] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "aRh2pdpja_6cDxKbxFnuCAAAAMA"]
[Sat Nov 15 20:48:43.163670 2025] [:error] [pid 20313:tid 20332] [client 45.131.195.18:28163] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-conflg.php"] [unique_id "aRh2qxI9DXIgPadBLUag1wAAAtA"]
[Sat Nov 15 20:48:44.025754 2025] [:error] [pid 27909:tid 27929] [client 45.131.195.39:59975] [client 45.131.195.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aRh2rCTfZ6B57n8HepVAmwAAABA"]
[Sat Nov 15 20:48:44.888469 2025] [:error] [pid 19959:tid 19974] [client 45.131.195.41:37391] [client 45.131.195.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aRh2rMjejiTUP1-IawPx5QAAAYg"]
[Sat Nov 15 20:48:45.780635 2025] [:error] [pid 22613:tid 22628] [client 45.131.195.5:65355] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aRh2rSoyR3cDsIRGPRnVrAAAAg0"]
[Sat Nov 15 20:48:46.658390 2025] [:error] [pid 27909:tid 27923] [client 45.131.195.31:23807] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aRh2riTfZ6B57n8HepVAngAAAAo"]
[Sat Nov 15 20:48:47.530148 2025] [:error] [pid 19959:tid 19972] [client 45.131.195.17:51911] [client 45.131.195.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aRh2r8jejiTUP1-IawPx6QAAAYY"]
[Sat Nov 15 20:48:48.391478 2025] [:error] [pid 27911:tid 27974] [client 45.131.195.3:28979] [client 45.131.195.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aRh2sMGzUdrhGBIfiKR5aQAAAIY"]
[Sat Nov 15 20:48:49.254534 2025] [:error] [pid 27997:tid 28019] [client 45.131.195.6:37155] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aRh2sdpja_6cDxKbxFnuJwAAANQ"]
[Sat Nov 15 20:48:50.126256 2025] [:error] [pid 20346:tid 20360] [client 45.131.195.16:29697] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aRh2sp7hsydZdIoVTltQ5AAAAws"]
[Sat Nov 15 20:48:50.989144 2025] [:error] [pid 20654:tid 20663] [client 45.131.195.40:32711] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/load.php"] [unique_id "aRh2sncS7eC8vO76_ycPKgAAA4Y"]
[Sat Nov 15 20:48:56.933046 2025] [:error] [pid 20654:tid 20678] [client 45.131.195.5:32123] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aRh2uHcS7eC8vO76_ycPLgAAA5U"]
[Sat Nov 15 20:48:57.809165 2025] [:error] [pid 20346:tid 20370] [client 45.131.195.33:47241] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/jindex.php"] [unique_id "aRh2uZ7hsydZdIoVTltQ6gAAAxU"]
[Sat Nov 15 20:48:58.670285 2025] [:error] [pid 20654:tid 20661] [client 45.131.195.39:37897] [client 45.131.195.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "aRh2uncS7eC8vO76_ycPMwAAA4Q"]
[Sat Nov 15 20:48:59.540802 2025] [:error] [pid 27997:tid 28000] [client 45.131.195.27:22935] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aRh2u9pja_6cDxKbxFnuKwAAAME"]
[Sat Nov 15 20:49:00.653661 2025] [:error] [pid 20346:tid 20372] [client 45.131.195.4:65331] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aRh2vJ7hsydZdIoVTltQ7AAAAxc"]
[Sat Nov 15 20:49:01.517053 2025] [:error] [pid 22613:tid 22638] [client 45.131.195.2:35627] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aRh2vSoyR3cDsIRGPRnVtwAAAhc"]
[Sat Nov 15 20:49:02.379979 2025] [:error] [pid 20346:tid 20371] [client 45.131.195.12:41035] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aRh2vp7hsydZdIoVTltQ7wAAAxY"]
[Sat Nov 15 20:49:03.244382 2025] [:error] [pid 22613:tid 22626] [client 45.131.195.33:31399] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings"] [unique_id "aRh2vyoyR3cDsIRGPRnVuAAAAgs"]
[Sat Nov 15 20:49:04.111354 2025] [:error] [pid 22613:tid 22627] [client 45.131.195.29:47465] [client 45.131.195.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aRh2wCoyR3cDsIRGPRnVuQAAAgw"]
[Sat Nov 15 20:49:04.974496 2025] [:error] [pid 20346:tid 20354] [client 45.131.195.21:41973] [client 45.131.195.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue"] [unique_id "aRh2wJ7hsydZdIoVTltQ9QAAAwU"]
[Sat Nov 15 20:49:05.836408 2025] [:error] [pid 20346:tid 20372] [client 45.131.195.36:50415] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aRh2wZ7hsydZdIoVTltQ9gAAAxc"]
[Sat Nov 15 20:49:06.702907 2025] [:error] [pid 20346:tid 20358] [client 45.131.195.3:46699] [client 45.131.195.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aRh2wp7hsydZdIoVTltQ-AAAAwk"]
[Sat Nov 15 20:49:07.574021 2025] [:error] [pid 19961:tid 20012] [client 45.131.195.246:49121] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aRh2wzar7Si-84EApVSIiAAAAdM"]
[Sat Nov 15 20:49:08.436396 2025] [:error] [pid 20313:tid 20339] [client 45.131.195.51:50033] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aRh2xBI9DXIgPadBLUag3wAAAtc"]
[Sat Nov 15 20:49:10.318373 2025] [:error] [pid 22613:tid 22618] [client 45.131.195.39:35659] [client 45.131.195.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aRh2xioyR3cDsIRGPRnVugAAAgM"]
[Sat Nov 15 20:49:11.185028 2025] [:error] [pid 20654:tid 20664] [client 45.131.195.40:26135] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/leafmailer.php"] [unique_id "aRh2x3cS7eC8vO76_ycPNwAAA4c"]
[Sat Nov 15 20:49:12.046762 2025] [:error] [pid 20654:tid 20669] [client 45.131.195.25:62337] [client 45.131.195.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/leaf.php"] [unique_id "aRh2yHcS7eC8vO76_ycPOQAAA4w"]
[Sat Nov 15 20:49:12.912433 2025] [:error] [pid 20654:tid 20680] [client 45.131.195.35:39485] [client 45.131.195.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "aRh2yHcS7eC8vO76_ycPOwAAA5c"]
[Sat Nov 15 20:49:13.779570 2025] [:error] [pid 22765:tid 22784] [client 45.131.195.2:51295] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aRh2yabrQzjuZmPIWDYByAAAAo4"]
[Sat Nov 15 20:49:14.643706 2025] [:error] [pid 19961:tid 19997] [client 45.131.195.31:32211] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aRh2yjar7Si-84EApVSIigAAAcQ"]
[Sat Nov 15 20:49:15.508001 2025] [:error] [pid 22765:tid 22783] [client 45.131.195.31:60861] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aRh2y6brQzjuZmPIWDYByQAAAo0"]
[Sat Nov 15 20:49:16.371700 2025] [:error] [pid 19961:tid 19999] [client 45.131.195.34:60395] [client 45.131.195.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aRh2zDar7Si-84EApVSIjAAAAcY"]
[Sat Nov 15 20:49:17.236430 2025] [:error] [pid 19961:tid 19996] [client 45.131.195.51:60131] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aRh2zTar7Si-84EApVSIjQAAAcM"]
[Sat Nov 15 20:49:18.101640 2025] [:error] [pid 27997:tid 28001] [client 45.131.195.49:65025] [client 45.131.195.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aRh2ztpja_6cDxKbxFnuOAAAAMI"]
[Sat Nov 15 20:49:18.967881 2025] [:error] [pid 20346:tid 20364] [client 45.131.195.22:38563] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aRh2zp7hsydZdIoVTltRBwAAAw8"]
[Sat Nov 15 20:49:19.829815 2025] [:error] [pid 20313:tid 20328] [client 45.131.195.9:35051] [client 45.131.195.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aRh2zxI9DXIgPadBLUag5AAAAsw"]
[Sat Nov 15 20:49:20.699574 2025] [:error] [pid 20654:tid 20678] [client 45.131.195.35:63515] [client 45.131.195.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "aRh20HcS7eC8vO76_ycPRwAAA5U"]
[Sat Nov 15 20:49:21.588013 2025] [:error] [pid 20346:tid 20372] [client 45.131.195.32:31307] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/uploaded_script.php"] [unique_id "aRh20Z7hsydZdIoVTltRDgAAAxc"]
[Sat Nov 15 20:49:22.452731 2025] [:error] [pid 20313:tid 20335] [client 45.131.195.10:32983] [client 45.131.195.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aRh20hI9DXIgPadBLUag5gAAAtM"]
[Sat Nov 15 20:49:23.315813 2025] [:error] [pid 27997:tid 28011] [client 45.131.195.34:49893] [client 45.131.195.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aRh209pja_6cDxKbxFnuPQAAAMw"]
[Sat Nov 15 20:49:24.178777 2025] [:error] [pid 19959:tid 19976] [client 45.131.195.47:50519] [client 45.131.195.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aRh21MjejiTUP1-IawPx-wAAAYo"]
[Sat Nov 15 20:49:25.045397 2025] [:error] [pid 20654:tid 20669] [client 45.131.195.50:29903] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aRh21XcS7eC8vO76_ycPTwAAA4w"]
[Sat Nov 15 20:49:25.915288 2025] [:error] [pid 20313:tid 20339] [client 45.131.195.31:24737] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aRh21RI9DXIgPadBLUag6gAAAtc"]
[Sat Nov 15 20:49:26.790230 2025] [:error] [pid 22765:tid 22791] [client 45.131.195.29:37079] [client 45.131.195.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aRh21qbrQzjuZmPIWDYB1gAAApU"]
[Sat Nov 15 20:49:27.651146 2025] [:error] [pid 20654:tid 20675] [client 45.131.195.36:55027] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat"] [unique_id "aRh213cS7eC8vO76_ycPUwAAA5I"]
[Sat Nov 15 20:49:28.547478 2025] [:error] [pid 20346:tid 20356] [client 45.131.195.18:22629] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aRh22J7hsydZdIoVTltRFAAAAwc"]
[Sat Nov 15 20:49:29.410023 2025] [:error] [pid 27911:tid 27980] [client 45.131.195.25:29991] [client 45.131.195.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aRh22cGzUdrhGBIfiKR5hQAAAIw"]
[Sat Nov 15 20:49:30.278238 2025] [:error] [pid 19959:tid 19980] [client 45.131.195.38:51677] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aRh22sjejiTUP1-IawPx_wAAAY4"]
[Sat Nov 15 20:49:31.245831 2025] [:error] [pid 19959:tid 19969] [client 45.131.195.43:57207] [client 45.131.195.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aRh228jejiTUP1-IawPyAgAAAYM"]
[Sat Nov 15 20:49:32.108652 2025] [:error] [pid 22765:tid 22781] [client 45.131.195.50:38845] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aRh23KbrQzjuZmPIWDYB1wAAAos"]
[Sat Nov 15 20:49:32.970342 2025] [:error] [pid 20654:tid 20660] [client 45.131.195.38:24911] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aRh23HcS7eC8vO76_ycPVQAAA4M"]
[Sat Nov 15 20:49:33.835022 2025] [:error] [pid 20654:tid 20668] [client 45.131.195.40:58609] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aRh23XcS7eC8vO76_ycPVwAAA4s"]
[Sat Nov 15 20:49:34.696298 2025] [:error] [pid 19959:tid 19987] [client 45.131.195.16:24575] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aRh23sjejiTUP1-IawPyBQAAAZU"]
[Sat Nov 15 20:49:35.572243 2025] [:error] [pid 20346:tid 20362] [client 45.131.195.50:47343] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index.php"] [unique_id "aRh2357hsydZdIoVTltRHQAAAw0"]
[Sat Nov 15 20:49:36.437792 2025] [:error] [pid 20313:tid 20317] [client 45.131.195.48:42035] [client 45.131.195.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aRh24BI9DXIgPadBLUag8AAAAsE"]
[Sat Nov 15 20:49:37.309703 2025] [:error] [pid 20654:tid 20679] [client 45.131.195.27:63971] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aRh24XcS7eC8vO76_ycPWQAAA5Y"]
[Sat Nov 15 20:49:38.192023 2025] [:error] [pid 19959:tid 19973] [client 45.131.195.5:22197] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aRh24sjejiTUP1-IawPyCAAAAYc"]
[Sat Nov 15 20:49:39.056045 2025] [:error] [pid 27997:tid 28001] [client 45.131.195.4:53087] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index2.php"] [unique_id "aRh249pja_6cDxKbxFnuTQAAAMI"]
[Sat Nov 15 20:49:39.921125 2025] [:error] [pid 20654:tid 20670] [client 45.131.195.28:52119] [client 45.131.195.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRh243cS7eC8vO76_ycPWwAAA40"]
[Sat Nov 15 20:49:40.785539 2025] [:error] [pid 20654:tid 20658] [client 45.131.195.2:25205] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aRh25HcS7eC8vO76_ycPYAAAA4E"]
[Sat Nov 15 20:49:41.648063 2025] [:error] [pid 20313:tid 20329] [client 45.131.195.12:34829] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/error.php"] [unique_id "aRh25RI9DXIgPadBLUag9AAAAs0"]
[Sat Nov 15 20:49:42.510294 2025] [:error] [pid 27997:tid 28014] [client 45.131.195.46:61965] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aRh25tpja_6cDxKbxFnuUQAAAM8"]
[Sat Nov 15 20:49:43.390371 2025] [:error] [pid 20654:tid 20660] [client 45.131.195.2:39639] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aRh253cS7eC8vO76_ycPYQAAA4M"]
[Sat Nov 15 20:49:44.251582 2025] [:error] [pid 20313:tid 20321] [client 45.131.195.26:24055] [client 45.131.195.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aRh26BI9DXIgPadBLUag9QAAAsU"]
[Sat Nov 15 20:49:45.112920 2025] [:error] [pid 20346:tid 20357] [client 45.131.195.245:61267] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aRh26Z7hsydZdIoVTltRKgAAAwg"]
[Sat Nov 15 20:49:45.976853 2025] [:error] [pid 20313:tid 20327] [client 45.131.195.45:29697] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aRh26RI9DXIgPadBLUag-QAAAss"]
[Sat Nov 15 20:49:51.881945 2025] [:error] [pid 19959:tid 19983] [client 45.131.195.23:52075] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "aRh278jejiTUP1-IawPyCgAAAZE"]
[Sat Nov 15 20:49:52.745905 2025] [:error] [pid 27909:tid 27936] [client 45.131.195.10:45375] [client 45.131.195.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "aRh28CTfZ6B57n8HepVAtwAAABc"]
[Sat Nov 15 20:49:53.608893 2025] [:error] [pid 22613:tid 22629] [client 45.131.195.246:54397] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aRh28SoyR3cDsIRGPRnVwgAAAg4"]
[Sat Nov 15 20:49:54.476238 2025] [:error] [pid 19959:tid 19982] [client 45.131.195.15:44463] [client 45.131.195.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "aRh28sjejiTUP1-IawPyDAAAAZA"]
[Sat Nov 15 20:49:55.341368 2025] [:error] [pid 20346:tid 20350] [client 45.131.195.25:43307] [client 45.131.195.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aRh2857hsydZdIoVTltRNAAAAwE"]
[Sat Nov 15 20:49:56.259730 2025] [:error] [pid 19959:tid 19973] [client 45.131.195.3:56899] [client 45.131.195.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aRh29MjejiTUP1-IawPyEAAAAYc"]
[Sat Nov 15 20:49:57.123558 2025] [:error] [pid 22765:tid 22777] [client 45.131.195.31:34309] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function/function.php"] [unique_id "aRh29abrQzjuZmPIWDYB4wAAAoc"]
[Sat Nov 15 20:49:58.057869 2025] [:error] [pid 22613:tid 22623] [client 45.131.195.37:38361] [client 45.131.195.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "aRh29ioyR3cDsIRGPRnVxQAAAgg"]
[Sat Nov 15 20:49:58.923388 2025] [:error] [pid 19959:tid 19983] [client 45.131.195.12:33567] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aRh29sjejiTUP1-IawPyFwAAAZE"]
[Sat Nov 15 20:49:59.786389 2025] [:error] [pid 22613:tid 22618] [client 45.131.195.31:32905] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/index.php"] [unique_id "aRh29yoyR3cDsIRGPRnVxwAAAgM"]
[Sat Nov 15 20:50:00.654230 2025] [:error] [pid 20654:tid 20665] [client 45.131.195.3:56339] [client 45.131.195.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aRh2-HcS7eC8vO76_ycPbAAAA4g"]
[Sat Nov 15 20:50:01.516056 2025] [:error] [pid 19959:tid 19981] [client 45.131.195.51:61665] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aRh2-cjejiTUP1-IawPyGgAAAY8"]
[Sat Nov 15 20:50:02.151338 2025] [:error] [pid 27911:tid 27990] [client 45.131.195.16:24053] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sim.php"] [unique_id "aRh2-sGzUdrhGBIfiKR5kgAAAJY"]
[Sat Nov 15 20:50:03.015667 2025] [:error] [pid 19961:tid 20014] [client 45.131.195.22:31167] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aRh2-zar7Si-84EApVSIswAAAdU"]
[Sat Nov 15 20:50:03.878667 2025] [:error] [pid 19959:tid 19973] [client 45.131.195.17:48445] [client 45.131.195.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ini.php"] [unique_id "aRh2-8jejiTUP1-IawPyHAAAAYc"]
[Sat Nov 15 20:50:04.748495 2025] [:error] [pid 20654:tid 20677] [client 45.131.195.9:32863] [client 45.131.195.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aRh2_HcS7eC8vO76_ycPbwAAA5Q"]
[Sat Nov 15 20:50:05.614624 2025] [:error] [pid 27909:tid 27922] [client 45.131.195.46:47585] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aRh2_STfZ6B57n8HepVAvAAAAAk"]
[Sat Nov 15 20:50:06.477052 2025] [:error] [pid 22765:tid 22786] [client 45.131.195.48:31773] [client 45.131.195.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "aRh2_qbrQzjuZmPIWDYB5wAAApA"]
[Sat Nov 15 20:50:07.340224 2025] [:error] [pid 22765:tid 22769] [client 45.131.195.2:55463] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aRh2_6brQzjuZmPIWDYB6AAAAoE"]
[Sat Nov 15 20:50:08.205411 2025] [:error] [pid 20654:tid 20661] [client 45.131.195.245:29991] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aRh3AHcS7eC8vO76_ycPdAAAA4Q"]
[Sat Nov 15 20:50:09.066860 2025] [:error] [pid 27997:tid 28000] [client 45.131.195.40:53841] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aRh3Adpja_6cDxKbxFnufQAAAME"]
[Sat Nov 15 20:50:09.931588 2025] [:error] [pid 19961:tid 20017] [client 45.131.195.6:27049] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aRh3ATar7Si-84EApVSItgAAAdg"]
[Sat Nov 15 20:50:10.794691 2025] [:error] [pid 19959:tid 19981] [client 45.131.195.44:33867] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aRh3AsjejiTUP1-IawPyIQAAAY8"]
[Sat Nov 15 20:50:11.659698 2025] [:error] [pid 19959:tid 19970] [client 45.131.195.245:42303] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aRh3A8jejiTUP1-IawPyIgAAAYQ"]
[Sat Nov 15 20:50:12.520710 2025] [:error] [pid 27997:tid 28012] [client 45.131.195.19:59665] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aRh3BNpja_6cDxKbxFnugQAAAM0"]
[Sat Nov 15 20:50:13.386168 2025] [:error] [pid 20313:tid 20338] [client 45.131.195.14:57005] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aRh3BRI9DXIgPadBLUahBAAAAtY"]
[Sat Nov 15 20:50:14.251886 2025] [:error] [pid 20654:tid 20670] [client 45.131.195.37:25665] [client 45.131.195.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images"] [unique_id "aRh3BncS7eC8vO76_ycPewAAA40"]
[Sat Nov 15 20:50:15.113576 2025] [:error] [pid 19959:tid 19977] [client 45.131.195.6:63195] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aRh3B8jejiTUP1-IawPyJQAAAYs"]
[Sat Nov 15 20:50:18.649861 2025] [:error] [pid 20654:tid 20680] [client 45.131.195.13:56391] [client 45.131.195.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aRh3CncS7eC8vO76_ycPfgAAA5c"]
[Sat Nov 15 20:50:19.515055 2025] [:error] [pid 22613:tid 22628] [client 45.131.195.37:43135] [client 45.131.195.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour"] [unique_id "aRh3CyoyR3cDsIRGPRnVzgAAAg0"]
[Sat Nov 15 20:50:20.377692 2025] [:error] [pid 27911:tid 27969] [client 45.131.195.42:25417] [client 45.131.195.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xml.php"] [unique_id "aRh3DMGzUdrhGBIfiKR5nQAAAIE"]
[Sat Nov 15 20:50:21.240799 2025] [:error] [pid 22765:tid 22780] [client 45.131.195.29:61341] [client 45.131.195.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aRh3DabrQzjuZmPIWDYB9AAAAoo"]
[Sat Nov 15 20:50:22.110025 2025] [:error] [pid 22765:tid 22769] [client 45.131.195.2:64849] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/class-config.php"] [unique_id "aRh3DqbrQzjuZmPIWDYB9QAAAoE"]
[Sat Nov 15 20:50:22.976407 2025] [:error] [pid 22765:tid 22777] [client 45.131.195.40:61883] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aRh3DqbrQzjuZmPIWDYB9gAAAoc"]
[Sat Nov 15 20:50:23.838821 2025] [:error] [pid 20654:tid 20669] [client 45.131.195.4:34663] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aRh3D3cS7eC8vO76_ycPhQAAA4w"]
[Sat Nov 15 20:50:24.705014 2025] [:error] [pid 19959:tid 19971] [client 45.131.195.42:45949] [client 45.131.195.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aRh3EMjejiTUP1-IawPyLwAAAYU"]
[Sat Nov 15 20:50:25.567846 2025] [:error] [pid 20313:tid 20317] [client 45.131.195.23:22203] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aRh3ERI9DXIgPadBLUahCgAAAsE"]
[Sat Nov 15 20:50:26.528997 2025] [:error] [pid 27909:tid 27935] [client 45.131.195.28:60273] [client 45.131.195.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRh3EiTfZ6B57n8HepVAxwAAABY"]
[Sat Nov 15 20:50:27.391606 2025] [:error] [pid 27909:tid 27924] [client 45.131.195.27:23675] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRh3EyTfZ6B57n8HepVAygAAAAs"]
[Sat Nov 15 20:50:28.252546 2025] [:error] [pid 19961:tid 20009] [client 45.131.195.20:46441] [client 45.131.195.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aRh3FDar7Si-84EApVSIuQAAAdA"]
[Sat Nov 15 20:50:29.116320 2025] [:error] [pid 22765:tid 22776] [client 45.131.195.245:55881] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aRh3FabrQzjuZmPIWDYB_gAAAoY"]
[Sat Nov 15 20:50:29.993181 2025] [:error] [pid 27997:tid 28021] [client 45.131.195.23:40813] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aRh3Fdpja_6cDxKbxFnujQAAANY"]
[Sat Nov 15 20:50:30.857103 2025] [:error] [pid 20346:tid 20367] [client 45.131.195.44:40451] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content.php"] [unique_id "aRh3Fp7hsydZdIoVTltRUgAAAxI"]
[Sat Nov 15 20:50:36.720698 2025] [:error] [pid 27997:tid 28023] [client 45.131.195.23:29819] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge"] [unique_id "aRh3HNpja_6cDxKbxFnukwAAANg"]
[Sat Nov 15 20:50:37.584384 2025] [:error] [pid 19959:tid 19970] [client 45.131.195.12:39915] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aRh3HcjejiTUP1-IawPyPwAAAYQ"]
[Sat Nov 15 20:50:38.449096 2025] [:error] [pid 19959:tid 19984] [client 45.131.195.34:37735] [client 45.131.195.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aRh3HsjejiTUP1-IawPyQQAAAZI"]
[Sat Nov 15 20:50:39.311866 2025] [:error] [pid 20654:tid 20663] [client 45.131.195.45:20157] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/back.php"] [unique_id "aRh3H3cS7eC8vO76_ycPlgAAA4Y"]
[Sat Nov 15 20:50:40.178956 2025] [:error] [pid 22765:tid 22791] [client 45.131.195.30:54997] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aRh3IKbrQzjuZmPIWDYCBQAAApU"]
[Sat Nov 15 20:50:41.043174 2025] [:error] [pid 27911:tid 27980] [client 45.131.195.245:27489] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bk/index.php"] [unique_id "aRh3IcGzUdrhGBIfiKR5pAAAAIw"]
[Sat Nov 15 20:50:43.378533 2025] [:error] [pid 20346:tid 20349] [client 45.131.195.32:49651] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aRh3I57hsydZdIoVTltRXAAAAwA"]
[Sat Nov 15 20:50:44.240765 2025] [:error] [pid 22613:tid 22622] [client 45.131.195.12:56663] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aRh3JCoyR3cDsIRGPRnV_AAAAgc"]
[Sat Nov 15 20:50:45.102913 2025] [:error] [pid 22613:tid 22634] [client 45.131.195.10:57759] [client 45.131.195.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aRh3JSoyR3cDsIRGPRnWAwAAAhM"]
[Sat Nov 15 20:50:45.965197 2025] [:error] [pid 22613:tid 22621] [client 45.131.195.6:34119] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-conf.php"] [unique_id "aRh3JSoyR3cDsIRGPRnWBwAAAgY"]
[Sat Nov 15 20:50:46.829529 2025] [:error] [pid 20654:tid 20681] [client 45.131.195.11:54925] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api"] [unique_id "aRh3JncS7eC8vO76_ycPmwAAA5g"]
[Sat Nov 15 20:50:47.698803 2025] [:error] [pid 22765:tid 22789] [client 45.131.195.37:40049] [client 45.131.195.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer"] [unique_id "aRh3J6brQzjuZmPIWDYCBwAAApM"]
[Sat Nov 15 20:50:48.560407 2025] [:error] [pid 27997:tid 28018] [client 45.131.195.27:47713] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/product.php"] [unique_id "aRh3KNpja_6cDxKbxFnuogAAANM"]
[Sat Nov 15 20:50:49.422865 2025] [:error] [pid 27997:tid 28021] [client 45.131.195.35:27991] [client 45.131.195.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aRh3Kdpja_6cDxKbxFnupwAAANY"]
[Sat Nov 15 20:50:50.286784 2025] [:error] [pid 22765:tid 22771] [client 45.131.195.41:24055] [client 45.131.195.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aRh3KqbrQzjuZmPIWDYCCAAAAoM"]
[Sat Nov 15 20:50:51.154734 2025] [:error] [pid 20346:tid 20369] [client 45.131.195.16:24889] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "aRh3K57hsydZdIoVTltRYAAAAxQ"]
[Sat Nov 15 20:50:52.026019 2025] [:error] [pid 20654:tid 20675] [client 45.131.195.11:30323] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aRh3LHcS7eC8vO76_ycPowAAA5I"]
[Sat Nov 15 20:50:53.904615 2025] [:error] [pid 27909:tid 27927] [client 45.131.195.245:29611] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wsa.php"] [unique_id "aRh3LSTfZ6B57n8HepVA0QAAAA4"]
[Sat Nov 15 20:50:54.828780 2025] [:error] [pid 20654:tid 20665] [client 45.131.195.38:52079] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes"] [unique_id "aRh3LncS7eC8vO76_ycPpQAAA4g"]
[Sat Nov 15 20:50:55.719729 2025] [:error] [pid 22765:tid 22770] [client 45.131.195.41:44201] [client 45.131.195.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aRh3L6brQzjuZmPIWDYCGQAAAoI"]
[Sat Nov 15 20:50:56.582242 2025] [:error] [pid 22613:tid 22631] [client 45.131.195.22:43553] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aRh3MCoyR3cDsIRGPRnWDAAAAhA"]
[Sat Nov 15 20:50:57.445016 2025] [:error] [pid 20654:tid 20678] [client 45.131.195.13:29841] [client 45.131.195.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aRh3MXcS7eC8vO76_ycPqQAAA5U"]
[Sat Nov 15 20:50:58.306192 2025] [:error] [pid 22613:tid 22629] [client 45.131.195.27:48747] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aRh3MioyR3cDsIRGPRnWEQAAAg4"]
[Sat Nov 15 20:50:59.169509 2025] [:error] [pid 19959:tid 19967] [client 45.131.195.50:28247] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-l0gin.php"] [unique_id "aRh3M8jejiTUP1-IawPyQgAAAYE"]
[Sat Nov 15 20:51:00.056116 2025] [:error] [pid 27997:tid 28018] [client 45.131.195.2:45049] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aRh3NNpja_6cDxKbxFnurgAAANM"]
[Sat Nov 15 20:51:01.029243 2025] [:error] [pid 20313:tid 20325] [client 45.131.195.32:45371] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/uploads/index.php"] [unique_id "aRh3NRI9DXIgPadBLUahIQAAAsk"]
[Sat Nov 15 20:51:01.894308 2025] [:error] [pid 20313:tid 20328] [client 45.131.195.26:40399] [client 45.131.195.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aRh3NRI9DXIgPadBLUahIgAAAsw"]
[Sat Nov 15 20:51:02.769946 2025] [:error] [pid 19959:tid 19969] [client 45.131.195.45:46541] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/version.php"] [unique_id "aRh3NsjejiTUP1-IawPyRgAAAYM"]
[Sat Nov 15 20:51:03.636525 2025] [:error] [pid 19959:tid 19966] [client 45.131.195.6:39029] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aRh3N8jejiTUP1-IawPySAAAAYA"]
[Sat Nov 15 20:51:04.500286 2025] [:error] [pid 27909:tid 27926] [client 45.131.195.10:25699] [client 45.131.195.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ectoplasm"] [unique_id "aRh3OCTfZ6B57n8HepVA1gAAAA0"]
[Sat Nov 15 20:51:05.364613 2025] [:error] [pid 20346:tid 20366] [client 45.131.195.17:33411] [client 45.131.195.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps"] [unique_id "aRh3OZ7hsydZdIoVTltRbgAAAxE"]
[Sat Nov 15 20:51:06.229668 2025] [:error] [pid 19961:tid 20006] [client 45.131.195.246:20505] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRh3Ojar7Si-84EApVSIyQAAAc0"]
[Sat Nov 15 20:51:07.091078 2025] [:error] [pid 27909:tid 27937] [client 45.131.195.51:64829] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aRh3OyTfZ6B57n8HepVA2QAAABg"]
[Sat Nov 15 20:51:07.962813 2025] [:error] [pid 22765:tid 22781] [client 45.131.195.42:23575] [client 45.131.195.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aRh3O6brQzjuZmPIWDYCHgAAAos"]
[Sat Nov 15 20:51:08.826065 2025] [:error] [pid 27997:tid 28022] [client 45.131.195.14:28821] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives"] [unique_id "aRh3PNpja_6cDxKbxFnutwAAANc"]
[Sat Nov 15 20:51:09.688195 2025] [:error] [pid 22765:tid 22768] [client 45.131.195.43:64269] [client 45.131.195.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aRh3PabrQzjuZmPIWDYCIQAAAoA"]
[Sat Nov 15 20:51:10.550572 2025] [:error] [pid 27911:tid 27977] [client 45.131.195.22:58797] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aRh3PsGzUdrhGBIfiKR5rQAAAIk"]
[Sat Nov 15 20:51:11.417273 2025] [:error] [pid 27997:tid 28019] [client 45.131.195.13:43563] [client 45.131.195.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "aRh3P9pja_6cDxKbxFnuuwAAANQ"]
[Sat Nov 15 20:51:12.279488 2025] [:error] [pid 20346:tid 20356] [client 45.131.195.19:36873] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aRh3QJ7hsydZdIoVTltRhwAAAwc"]
[Sat Nov 15 20:51:13.147677 2025] [:error] [pid 20654:tid 20676] [client 45.131.195.13:37847] [client 45.131.195.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aRh3QXcS7eC8vO76_ycP0wAAA5M"]
[Sat Nov 15 20:51:14.013635 2025] [:error] [pid 20654:tid 20666] [client 45.131.195.46:36275] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/file.php"] [unique_id "aRh3QncS7eC8vO76_ycP1QAAA4k"]
[Sat Nov 15 20:51:14.877450 2025] [:error] [pid 20654:tid 20669] [client 45.131.195.4:58717] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aRh3QncS7eC8vO76_ycP1gAAA4w"]
[Sat Nov 15 20:51:15.739152 2025] [:error] [pid 20654:tid 20678] [client 45.131.195.45:23489] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files/home.php"] [unique_id "aRh3Q3cS7eC8vO76_ycP2gAAA5U"]
[Sat Nov 15 20:51:16.601639 2025] [:error] [pid 20654:tid 20674] [client 45.131.195.4:33761] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aRh3RHcS7eC8vO76_ycP3gAAA5E"]
[Sat Nov 15 20:51:17.463931 2025] [:error] [pid 20346:tid 20368] [client 45.131.195.14:44309] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRh3RZ7hsydZdIoVTltRkAAAAxM"]
[Sat Nov 15 20:51:18.329254 2025] [:error] [pid 27997:tid 28005] [client 45.131.195.20:43691] [client 45.131.195.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/zasf"] [unique_id "aRh3Rtpja_6cDxKbxFnuvQAAAMY"]
[Sat Nov 15 20:51:19.192640 2025] [:error] [pid 20346:tid 20353] [client 45.131.195.38:46793] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aRh3R57hsydZdIoVTltRkQAAAwQ"]
[Sat Nov 15 20:51:20.103384 2025] [:error] [pid 20654:tid 20665] [client 45.131.195.245:24021] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets"] [unique_id "aRh3SHcS7eC8vO76_ycP5AAAA4g"]
[Sat Nov 15 20:51:20.965300 2025] [:error] [pid 27997:tid 28020] [client 45.131.195.12:41119] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aRh3SNpja_6cDxKbxFnuwAAAANU"]
[Sat Nov 15 20:51:21.977033 2025] [:error] [pid 19961:tid 20009] [client 45.131.195.15:61299] [client 45.131.195.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/js/index.php"] [unique_id "aRh3STar7Si-84EApVSI2AAAAdA"]
[Sat Nov 15 20:51:22.837506 2025] [:error] [pid 20654:tid 20660] [client 45.131.195.2:64821] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aRh3SncS7eC8vO76_ycP5wAAA4M"]
[Sat Nov 15 20:51:23.751233 2025] [:error] [pid 19959:tid 19977] [client 45.131.195.32:32053] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aRh3S8jejiTUP1-IawPyVAAAAYs"]
[Sat Nov 15 20:51:24.616392 2025] [:error] [pid 20654:tid 20664] [client 45.131.195.5:40419] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ms-themes.php"] [unique_id "aRh3THcS7eC8vO76_ycP6wAAA4c"]
[Sat Nov 15 20:51:25.480947 2025] [:error] [pid 22613:tid 22615] [client 45.131.195.18:29725] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aRh3TSoyR3cDsIRGPRnWGwAAAgA"]
[Sat Nov 15 20:51:26.343465 2025] [:error] [pid 22765:tid 22788] [client 45.131.195.3:59925] [client 45.131.195.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aRh3TqbrQzjuZmPIWDYCJAAAApI"]
[Sat Nov 15 20:51:27.205899 2025] [:error] [pid 27909:tid 27916] [client 45.131.195.25:56809] [client 45.131.195.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aRh3TyTfZ6B57n8HepVA7QAAAAM"]
[Sat Nov 15 20:51:28.069725 2025] [:error] [pid 20346:tid 20368] [client 45.131.195.19:21497] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aRh3UJ7hsydZdIoVTltRngAAAxM"]
[Sat Nov 15 20:51:28.933590 2025] [:error] [pid 27911:tid 27973] [client 45.131.195.12:30395] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known"] [unique_id "aRh3UMGzUdrhGBIfiKR5twAAAIU"]
[Sat Nov 15 20:51:29.796315 2025] [:error] [pid 27997:tid 28018] [client 45.131.195.48:57745] [client 45.131.195.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/function.php"] [unique_id "aRh3Udpja_6cDxKbxFnuxAAAANM"]
[Sat Nov 15 20:51:30.663314 2025] [:error] [pid 27997:tid 28001] [client 45.131.195.14:43687] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aRh3Utpja_6cDxKbxFnuxgAAAMI"]
[Sat Nov 15 20:51:31.528500 2025] [:error] [pid 20313:tid 20340] [client 45.131.195.36:36583] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRh3UxI9DXIgPadBLUahLAAAAtg"]
[Sat Nov 15 20:51:32.396006 2025] [:error] [pid 20654:tid 20657] [client 45.131.195.11:60313] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aRh3VHcS7eC8vO76_ycP7gAAA4A"]
[Sat Nov 15 20:51:33.261860 2025] [:error] [pid 20654:tid 20680] [client 45.131.195.19:30431] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aRh3VXcS7eC8vO76_ycP8AAAA5c"]
[Sat Nov 15 20:51:34.124853 2025] [:error] [pid 22765:tid 22791] [client 45.131.195.23:64755] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aRh3VqbrQzjuZmPIWDYCNAAAApU"]
[Sat Nov 15 20:51:34.991426 2025] [:error] [pid 27997:tid 28000] [client 45.131.195.22:24611] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets"] [unique_id "aRh3Vtpja_6cDxKbxFnuygAAAME"]
[Sat Nov 15 20:51:35.856967 2025] [:error] [pid 27909:tid 27922] [client 45.131.195.27:63501] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/7b3658dfc7.php"] [unique_id "aRh3VyTfZ6B57n8HepVA8QAAAAk"]
[Sat Nov 15 20:51:36.717752 2025] [:error] [pid 19959:tid 19967] [client 45.131.195.19:24401] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aRh3WMjejiTUP1-IawPyXAAAAYE"]
[Sat Nov 15 20:51:37.588263 2025] [:error] [pid 20313:tid 20325] [client 45.131.195.7:39117] [client 45.131.195.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aRh3WRI9DXIgPadBLUahNAAAAsk"]
[Sat Nov 15 20:51:38.451622 2025] [:error] [pid 22613:tid 22638] [client 45.131.195.47:53985] [client 45.131.195.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aRh3WioyR3cDsIRGPRnWKgAAAhc"]
[Sat Nov 15 20:51:39.317921 2025] [:error] [pid 27909:tid 27926] [client 45.131.195.246:21751] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aRh3WyTfZ6B57n8HepVA9wAAAA0"]
[Sat Nov 15 20:51:40.180904 2025] [:error] [pid 27909:tid 27917] [client 45.131.195.14:42111] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aRh3XCTfZ6B57n8HepVA-gAAAAQ"]
[Sat Nov 15 20:51:41.044052 2025] [:error] [pid 20346:tid 20354] [client 45.131.195.27:20713] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aRh3XZ7hsydZdIoVTltRpQAAAwU"]
[Sat Nov 15 20:51:41.908564 2025] [:error] [pid 20346:tid 20361] [client 45.131.195.6:50093] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils/index.php"] [unique_id "aRh3XZ7hsydZdIoVTltRpgAAAww"]
[Sat Nov 15 20:51:42.787317 2025] [:error] [pid 20346:tid 20366] [client 45.131.195.30:25079] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade"] [unique_id "aRh3Xp7hsydZdIoVTltRqAAAAxE"]
[Sat Nov 15 20:51:43.652744 2025] [:error] [pid 20346:tid 20367] [client 45.131.195.17:62335] [client 45.131.195.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aRh3X57hsydZdIoVTltRqgAAAxI"]
[Sat Nov 15 20:51:44.516983 2025] [:error] [pid 20654:tid 20671] [client 45.131.195.7:40835] [client 45.131.195.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight"] [unique_id "aRh3YHcS7eC8vO76_ycP-QAAA44"]
[Sat Nov 15 20:51:45.384280 2025] [:error] [pid 20654:tid 20665] [client 45.131.195.44:38981] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aRh3YXcS7eC8vO76_ycP_QAAA4g"]
[Sat Nov 15 20:51:46.247678 2025] [:error] [pid 22613:tid 22636] [client 45.131.195.32:32293] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aRh3YioyR3cDsIRGPRnWLQAAAhU"]
[Sat Nov 15 20:51:47.109226 2025] [:error] [pid 19959:tid 19974] [client 45.131.195.21:34421] [client 45.131.195.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aRh3Y8jejiTUP1-IawPyZgAAAYg"]
[Sat Nov 15 20:51:47.970574 2025] [:error] [pid 20346:tid 20357] [client 45.131.195.45:45341] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "aRh3Y57hsydZdIoVTltRsAAAAwg"]
[Sat Nov 15 20:51:49.846300 2025] [:error] [pid 20654:tid 20662] [client 45.131.195.4:50347] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aRh3ZXcS7eC8vO76_ycQAwAAA4U"]
[Sat Nov 15 20:51:50.710502 2025] [:error] [pid 22765:tid 22794] [client 45.131.195.45:39595] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aRh3ZqbrQzjuZmPIWDYCOgAAApg"]
[Sat Nov 15 20:51:51.585428 2025] [:error] [pid 22765:tid 22793] [client 45.131.195.29:42493] [client 45.131.195.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/index.php"] [unique_id "aRh3Z6brQzjuZmPIWDYCPAAAApc"]
[Sat Nov 15 20:51:52.448640 2025] [:error] [pid 20346:tid 20353] [client 45.131.195.51:34105] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/index.php"] [unique_id "aRh3aJ7hsydZdIoVTltRtgAAAwQ"]
[Sat Nov 15 20:51:53.324877 2025] [:error] [pid 20313:tid 20338] [client 45.131.195.40:39939] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aRh3aRI9DXIgPadBLUahPgAAAtY"]
[Sat Nov 15 20:51:54.187204 2025] [:error] [pid 19959:tid 19971] [client 45.131.195.31:44277] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aRh3asjejiTUP1-IawPyaQAAAYU"]
[Sat Nov 15 20:51:55.126021 2025] [:error] [pid 22613:tid 22618] [client 45.131.195.26:32345] [client 45.131.195.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aRh3ayoyR3cDsIRGPRnWLwAAAgM"]
[Sat Nov 15 20:51:56.084590 2025] [:error] [pid 20346:tid 20357] [client 45.131.195.22:30545] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aRh3bJ7hsydZdIoVTltRuwAAAwg"]
[Sat Nov 15 20:51:56.950933 2025] [:error] [pid 22765:tid 22769] [client 45.131.195.15:59035] [client 45.131.195.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "aRh3bKbrQzjuZmPIWDYCQQAAAoE"]
[Sat Nov 15 20:51:57.817422 2025] [:error] [pid 22613:tid 22633] [client 45.131.195.245:51737] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist"] [unique_id "aRh3bSoyR3cDsIRGPRnWMQAAAhI"]
[Sat Nov 15 20:51:58.686785 2025] [:error] [pid 19959:tid 19983] [client 45.131.195.13:49249] [client 45.131.195.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/file_folder_manager.php"] [unique_id "aRh3bsjejiTUP1-IawPybgAAAZE"]
[Sat Nov 15 20:51:59.549059 2025] [:error] [pid 22765:tid 22789] [client 45.131.195.40:39991] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aRh3b6brQzjuZmPIWDYCQgAAApM"]
[Sat Nov 15 20:52:00.413707 2025] [:error] [pid 27909:tid 27931] [client 45.131.195.33:48153] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aRh3cCTfZ6B57n8HepVBBAAAABI"]
[Sat Nov 15 20:52:01.279793 2025] [:error] [pid 22613:tid 22635] [client 45.131.195.245:42611] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aRh3cSoyR3cDsIRGPRnWNQAAAhQ"]
[Sat Nov 15 20:52:02.146699 2025] [:error] [pid 19959:tid 19987] [client 45.131.195.45:62323] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-Owl.php"] [unique_id "aRh3csjejiTUP1-IawPycgAAAZU"]
[Sat Nov 15 20:52:03.046668 2025] [:error] [pid 27911:tid 27981] [client 45.131.195.35:61377] [client 45.131.195.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aRh3c8GzUdrhGBIfiKR5wwAAAI0"]
[Sat Nov 15 20:52:03.948757 2025] [:error] [pid 20346:tid 20350] [client 45.131.195.50:22067] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aRh3c57hsydZdIoVTltRwQAAAwE"]
[Sat Nov 15 20:52:04.939801 2025] [:error] [pid 22613:tid 22634] [client 45.131.195.33:22327] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aRh3dCoyR3cDsIRGPRnWOAAAAhM"]
[Sat Nov 15 20:52:05.801673 2025] [:error] [pid 27909:tid 27936] [client 45.131.195.33:36659] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aRh3dSTfZ6B57n8HepVBBgAAABc"]
[Sat Nov 15 20:52:06.679258 2025] [:error] [pid 19961:tid 19994] [client 45.131.195.42:41493] [client 45.131.195.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aRh3djar7Si-84EApVSI5AAAAcE"]
[Sat Nov 15 20:52:07.556996 2025] [:error] [pid 20346:tid 20357] [client 45.131.195.24:47915] [client 45.131.195.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/cong.php"] [unique_id "aRh3d57hsydZdIoVTltRxAAAAwg"]
[Sat Nov 15 20:52:08.418621 2025] [:error] [pid 27909:tid 27918] [client 45.131.195.8:65089] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "aRh3eCTfZ6B57n8HepVBBwAAAAU"]
[Sat Nov 15 20:52:09.281053 2025] [:error] [pid 27909:tid 27927] [client 45.131.195.2:36713] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aRh3eSTfZ6B57n8HepVBCAAAAA4"]
[Sat Nov 15 20:52:10.149322 2025] [:error] [pid 20654:tid 20658] [client 45.131.195.30:57587] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aRh3encS7eC8vO76_ycQEgAAA4E"]
[Sat Nov 15 20:52:11.021485 2025] [:error] [pid 20346:tid 20370] [client 45.131.195.28:43881] [client 45.131.195.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aRh3e57hsydZdIoVTltRyAAAAxU"]
[Sat Nov 15 20:52:11.994503 2025] [:error] [pid 20313:tid 20338] [client 45.131.195.41:39439] [client 45.131.195.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/index.php"] [unique_id "aRh3exI9DXIgPadBLUahRwAAAtY"]
[Sat Nov 15 20:52:12.867023 2025] [:error] [pid 20313:tid 20316] [client 45.131.195.5:46047] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aRh3fBI9DXIgPadBLUahSQAAAsA"]
[Sat Nov 15 20:52:13.729622 2025] [:error] [pid 27911:tid 27990] [client 45.131.195.32:30341] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aRh3fcGzUdrhGBIfiKR5ywAAAJY"]
[Sat Nov 15 20:52:14.625778 2025] [:error] [pid 20654:tid 20681] [client 45.131.195.246:26623] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aRh3fncS7eC8vO76_ycQFQAAA5g"]
[Sat Nov 15 20:52:15.495879 2025] [:error] [pid 19959:tid 19968] [client 45.131.195.30:63671] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist"] [unique_id "aRh3f8jejiTUP1-IawPygAAAAYI"]
[Sat Nov 15 20:52:16.358164 2025] [:error] [pid 27909:tid 27926] [client 45.131.195.16:24033] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen/function.php"] [unique_id "aRh3gCTfZ6B57n8HepVBDAAAAA0"]
[Sat Nov 15 20:52:17.250936 2025] [:error] [pid 27909:tid 27913] [client 45.131.195.50:57247] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ajax/xl2024.php"] [unique_id "aRh3gSTfZ6B57n8HepVBDQAAAAA"]
[Sat Nov 15 20:52:18.128727 2025] [:error] [pid 27909:tid 27920] [client 45.131.195.49:51037] [client 45.131.195.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aRh3giTfZ6B57n8HepVBDgAAAAc"]
[Sat Nov 15 20:52:19.036535 2025] [:error] [pid 19961:tid 20003] [client 45.131.195.32:29373] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/linkpreview"] [unique_id "aRh3gzar7Si-84EApVSI6gAAAco"]
[Sat Nov 15 20:52:19.899035 2025] [:error] [pid 20654:tid 20670] [client 45.131.195.245:44601] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aRh3g3cS7eC8vO76_ycQGwAAA40"]
[Sat Nov 15 20:52:20.760903 2025] [:error] [pid 20654:tid 20673] [client 45.131.195.6:47959] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aRh3hHcS7eC8vO76_ycQHgAAA5A"]
[Sat Nov 15 20:52:21.622685 2025] [:error] [pid 20654:tid 20675] [client 45.131.195.46:47327] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options.php"] [unique_id "aRh3hXcS7eC8vO76_ycQIAAAA5I"]
[Sat Nov 15 20:52:22.486378 2025] [:error] [pid 27997:tid 28022] [client 45.131.195.6:58409] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aRh3htpja_6cDxKbxFnu4QAAANc"]
[Sat Nov 15 20:52:23.348615 2025] [:error] [pid 22765:tid 22778] [client 45.131.195.21:63077] [client 45.131.195.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads"] [unique_id "aRh3h6brQzjuZmPIWDYCTAAAAog"]
[Sat Nov 15 20:52:24.214260 2025] [:error] [pid 22765:tid 22772] [client 45.131.195.32:64611] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aRh3iKbrQzjuZmPIWDYCUAAAAoQ"]
[Sat Nov 15 20:52:25.080198 2025] [:error] [pid 20654:tid 20669] [client 45.131.195.8:24449] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRh3iXcS7eC8vO76_ycQJAAAA4w"]
[Sat Nov 15 20:52:25.941677 2025] [:error] [pid 19961:tid 20009] [client 45.131.195.41:59149] [client 45.131.195.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aRh3iTar7Si-84EApVSI7wAAAdA"]
[Sat Nov 15 20:52:26.820226 2025] [:error] [pid 27909:tid 27915] [client 45.131.195.49:54895] [client 45.131.195.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "aRh3iiTfZ6B57n8HepVBEAAAAAI"]
[Sat Nov 15 20:52:27.686701 2025] [:error] [pid 20654:tid 20673] [client 45.131.195.18:52879] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aRh3i3cS7eC8vO76_ycQJwAAA5A"]
[Sat Nov 15 20:52:28.548619 2025] [:error] [pid 20654:tid 20676] [client 45.131.195.14:32999] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signup.php"] [unique_id "aRh3jHcS7eC8vO76_ycQKAAAA5M"]
[Sat Nov 15 20:52:29.410403 2025] [:error] [pid 19959:tid 19981] [client 45.131.195.245:48231] [client 45.131.195.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "aRh3jcjejiTUP1-IawPyhQAAAY8"]
[Sat Nov 15 20:52:30.356371 2025] [:error] [pid 27909:tid 27916] [client 45.131.195.17:48999] [client 45.131.195.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aRh3jiTfZ6B57n8HepVBEgAAAAM"]
[Sat Nov 15 20:52:31.341710 2025] [:error] [pid 22765:tid 22779] [client 45.131.195.46:60007] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints"] [unique_id "aRh3j6brQzjuZmPIWDYCVAAAAok"]
[Sat Nov 15 20:52:32.204228 2025] [:error] [pid 20654:tid 20680] [client 45.131.195.42:28077] [client 45.131.195.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/text.php"] [unique_id "aRh3kHcS7eC8vO76_ycQMgAAA5c"]
[Sat Nov 15 20:52:33.076719 2025] [:error] [pid 27997:tid 28007] [client 45.131.195.37:27571] [client 45.131.195.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aRh3kdpja_6cDxKbxFnu7gAAAMg"]
[Sat Nov 15 20:52:33.943052 2025] [:error] [pid 27997:tid 28009] [client 45.131.195.14:37587] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aRh3kdpja_6cDxKbxFnu7wAAAMo"]
[Sat Nov 15 20:52:34.805730 2025] [:error] [pid 27997:tid 27999] [client 45.131.195.8:42371] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks"] [unique_id "aRh3ktpja_6cDxKbxFnu8AAAAMA"]
[Sat Nov 15 20:52:35.668844 2025] [:error] [pid 20313:tid 20325] [client 45.131.195.51:54595] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aRh3kxI9DXIgPadBLUahVQAAAsk"]
[Sat Nov 15 20:52:36.528699 2025] [:error] [pid 19961:tid 20007] [client 45.131.195.16:54095] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-header.php"] [unique_id "aRh3lDar7Si-84EApVSI8QAAAc4"]
[Sat Nov 15 20:52:37.390861 2025] [:error] [pid 19961:tid 19993] [client 45.131.195.11:38343] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aRh3lTar7Si-84EApVSI8gAAAcA"]
[Sat Nov 15 20:52:38.257501 2025] [:error] [pid 22613:tid 22631] [client 45.131.195.246:58753] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aRh3lioyR3cDsIRGPRnWTgAAAhA"]
[Sat Nov 15 20:52:39.150027 2025] [:error] [pid 19961:tid 19996] [client 45.131.195.45:37825] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css"] [unique_id "aRh3lzar7Si-84EApVSI9QAAAcM"]
[Sat Nov 15 20:52:40.015408 2025] [:error] [pid 19959:tid 19984] [client 45.131.195.46:38681] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api"] [unique_id "aRh3mMjejiTUP1-IawPyiwAAAZI"]
[Sat Nov 15 20:52:41.209267 2025] [:error] [pid 27911:tid 27984] [client 45.131.195.21:26649] [client 45.131.195.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/buy.php"] [unique_id "aRh3mcGzUdrhGBIfiKR51QAAAJA"]
[Sat Nov 15 20:52:42.096280 2025] [:error] [pid 20654:tid 20660] [client 45.131.195.15:58297] [client 45.131.195.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/index.php"] [unique_id "aRh3mncS7eC8vO76_ycQPQAAA4M"]
[Sat Nov 15 20:52:42.958826 2025] [:error] [pid 27909:tid 27914] [client 45.131.195.19:41889] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aRh3miTfZ6B57n8HepVBHgAAAAE"]
[Sat Nov 15 20:52:43.819384 2025] [:error] [pid 27997:tid 28001] [client 45.131.195.40:58477] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aRh3m9pja_6cDxKbxFnvAwAAAMI"]
[Sat Nov 15 20:52:44.682314 2025] [:error] [pid 19959:tid 19969] [client 45.131.195.48:26889] [client 45.131.195.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aRh3nMjejiTUP1-IawPyjwAAAYM"]
[Sat Nov 15 20:52:45.587365 2025] [:error] [pid 27909:tid 27927] [client 45.131.195.30:54127] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/update/function.php"] [unique_id "aRh3nSTfZ6B57n8HepVBIgAAAA4"]
[Sat Nov 15 20:52:46.455917 2025] [:error] [pid 20313:tid 20330] [client 45.131.195.16:21341] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files"] [unique_id "aRh3nhI9DXIgPadBLUahXQAAAs4"]
[Sat Nov 15 20:52:47.322149 2025] [:error] [pid 20313:tid 20335] [client 45.131.195.33:61559] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aRh3nxI9DXIgPadBLUahXgAAAtM"]
[Sat Nov 15 20:52:48.186050 2025] [:error] [pid 27997:tid 28011] [client 45.131.195.47:37369] [client 45.131.195.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/index.php"] [unique_id "aRh3oNpja_6cDxKbxFnvBQAAAMw"]
[Sat Nov 15 20:52:49.047001 2025] [:error] [pid 27911:tid 27969] [client 45.131.195.37:23947] [client 45.131.195.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aRh3ocGzUdrhGBIfiKR51wAAAIE"]
[Sat Nov 15 20:52:49.909416 2025] [:error] [pid 19959:tid 19986] [client 45.131.195.7:57757] [client 45.131.195.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aRh3ocjejiTUP1-IawPylAAAAZQ"]
[Sat Nov 15 20:52:50.775044 2025] [:error] [pid 22613:tid 22622] [client 45.131.195.28:49755] [client 45.131.195.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/update/g.php"] [unique_id "aRh3oioyR3cDsIRGPRnWWQAAAgc"]
[Sat Nov 15 20:52:51.636487 2025] [:error] [pid 27997:tid 28002] [client 45.131.195.46:33159] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aRh3o9pja_6cDxKbxFnvCQAAAMM"]
[Sat Nov 15 20:52:52.498418 2025] [:error] [pid 20313:tid 20321] [client 45.131.195.4:61915] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aRh3pBI9DXIgPadBLUahYQAAAsU"]
[Sat Nov 15 20:52:53.363562 2025] [:error] [pid 19959:tid 19990] [client 45.131.195.22:49325] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aRh3pcjejiTUP1-IawPylgAAAZg"]
[Sat Nov 15 20:52:54.225517 2025] [:error] [pid 22613:tid 22623] [client 45.131.195.20:37947] [client 45.131.195.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/media"] [unique_id "aRh3pioyR3cDsIRGPRnWXAAAAgg"]
[Sat Nov 15 20:52:55.089843 2025] [:error] [pid 20346:tid 20350] [client 45.131.195.36:35383] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aRh3p57hsydZdIoVTltR8AAAAwE"]
[Sat Nov 15 20:52:55.988287 2025] [:error] [pid 27997:tid 28010] [client 45.131.195.26:44535] [client 45.131.195.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js"] [unique_id "aRh3p9pja_6cDxKbxFnvDAAAAMs"]
[Sat Nov 15 20:52:56.873705 2025] [:error] [pid 22613:tid 22618] [client 45.131.195.32:41529] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aRh3qCoyR3cDsIRGPRnWXgAAAgM"]
[Sat Nov 15 20:52:57.743443 2025] [:error] [pid 20346:tid 20361] [client 45.131.195.24:43457] [client 45.131.195.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aRh3qZ7hsydZdIoVTltR9AAAAww"]
[Sat Nov 15 20:52:58.604390 2025] [:error] [pid 27909:tid 27921] [client 45.131.195.24:50479] [client 45.131.195.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aRh3qiTfZ6B57n8HepVBJwAAAAg"]
[Sat Nov 15 20:52:59.503224 2025] [:error] [pid 19961:tid 20006] [client 45.131.195.23:21713] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aRh3qzar7Si-84EApVSI-wAAAc0"]
[Sat Nov 15 20:53:00.368077 2025] [:error] [pid 20654:tid 20674] [client 45.131.195.26:43131] [client 45.131.195.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aRh3rHcS7eC8vO76_ycQSgAAA5E"]
[Sat Nov 15 20:53:01.277182 2025] [:error] [pid 20346:tid 20365] [client 45.131.195.16:38447] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRh3rZ7hsydZdIoVTltR9wAAAxA"]
[Sat Nov 15 20:53:03.489650 2025] [:error] [pid 27909:tid 27931] [client 45.131.195.32:59583] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aRh3ryTfZ6B57n8HepVBKQAAABI"]
[Sat Nov 15 20:53:04.352490 2025] [:error] [pid 27911:tid 27978] [client 45.131.195.33:40551] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/copypaths.php"] [unique_id "aRh3sMGzUdrhGBIfiKR56AAAAIo"]
[Sat Nov 15 20:53:05.216311 2025] [:error] [pid 27909:tid 27930] [client 45.131.195.36:63745] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media"] [unique_id "aRh3sSTfZ6B57n8HepVBKwAAABE"]
[Sat Nov 15 20:53:06.080174 2025] [:error] [pid 22613:tid 22638] [client 45.131.195.18:59121] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aRh3sioyR3cDsIRGPRnWZAAAAhc"]
[Sat Nov 15 20:53:06.945784 2025] [:error] [pid 22613:tid 22622] [client 45.131.195.21:30841] [client 45.131.195.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aRh3sioyR3cDsIRGPRnWZgAAAgc"]
[Sat Nov 15 20:53:07.810412 2025] [:error] [pid 20313:tid 20337] [client 45.131.195.44:21137] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aRh3sxI9DXIgPadBLUahZwAAAtU"]
[Sat Nov 15 20:53:08.678818 2025] [:error] [pid 20654:tid 20659] [client 45.131.195.48:30835] [client 45.131.195.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aRh3tHcS7eC8vO76_ycQVAAAA4I"]
[Sat Nov 15 20:53:09.821992 2025] [:error] [pid 27909:tid 27928] [client 45.131.195.49:29891] [client 45.131.195.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dz.php"] [unique_id "aRh3tSTfZ6B57n8HepVBLQAAAA8"]
[Sat Nov 15 20:53:10.690965 2025] [:error] [pid 20654:tid 20680] [client 45.131.195.14:57461] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aRh3tncS7eC8vO76_ycQVQAAA5c"]
[Sat Nov 15 20:53:11.555735 2025] [:error] [pid 22613:tid 22628] [client 45.131.195.18:23759] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/upload/css.php"] [unique_id "aRh3tyoyR3cDsIRGPRnWbQAAAg0"]
[Sat Nov 15 20:53:12.422082 2025] [:error] [pid 27997:tid 28011] [client 45.131.195.6:20581] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aRh3uNpja_6cDxKbxFnvDwAAAMw"]
[Sat Nov 15 20:53:13.289447 2025] [:error] [pid 27997:tid 28022] [client 45.131.195.38:31495] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aRh3udpja_6cDxKbxFnvEAAAANc"]
[Sat Nov 15 20:53:14.152826 2025] [:error] [pid 20346:tid 20353] [client 45.131.195.8:32075] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "aRh3up7hsydZdIoVTltR_wAAAwQ"]
[Sat Nov 15 20:53:15.014016 2025] [:error] [pid 20654:tid 20681] [client 45.131.195.246:21689] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aRh3u3cS7eC8vO76_ycQWQAAA5g"]
[Sat Nov 15 20:53:15.875255 2025] [:error] [pid 20654:tid 20660] [client 45.131.195.32:20957] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aRh3u3cS7eC8vO76_ycQXAAAA4M"]
[Sat Nov 15 20:53:16.744136 2025] [:error] [pid 20346:tid 20350] [client 45.131.195.30:62553] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aRh3vJ7hsydZdIoVTltSCAAAAwE"]
[Sat Nov 15 20:53:17.608538 2025] [:error] [pid 20346:tid 20353] [client 45.131.195.10:44297] [client 45.131.195.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aRh3vZ7hsydZdIoVTltSCgAAAwQ"]
[Sat Nov 15 20:53:20.407642 2025] [:error] [pid 20654:tid 20657] [client 45.131.195.20:24209] [client 45.131.195.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aRh3wHcS7eC8vO76_ycQXgAAA4A"]
[Sat Nov 15 20:53:21.270846 2025] [:error] [pid 27997:tid 28012] [client 45.131.195.15:29549] [client 45.131.195.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aRh3wdpja_6cDxKbxFnvFQAAAM0"]
[Sat Nov 15 20:53:22.137821 2025] [:error] [pid 22765:tid 22794] [client 45.131.195.34:52371] [client 45.131.195.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "aRh3wqbrQzjuZmPIWDYCdQAAApg"]
[Sat Nov 15 20:53:24.007739 2025] [:error] [pid 19961:tid 19995] [client 45.131.195.43:55633] [client 45.131.195.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aRh3xDar7Si-84EApVSJBAAAAcI"]
[Sat Nov 15 20:53:25.910882 2025] [:error] [pid 19961:tid 19993] [client 45.131.195.5:56113] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/as/function.php"] [unique_id "aRh3xTar7Si-84EApVSJBwAAAcA"]
[Sat Nov 15 20:53:26.899111 2025] [:error] [pid 22613:tid 22619] [client 45.131.195.30:22221] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aRh3xioyR3cDsIRGPRnWcAAAAgQ"]
[Sat Nov 15 20:53:27.763656 2025] [:error] [pid 27911:tid 27980] [client 45.131.195.44:57613] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aRh3x8GzUdrhGBIfiKR5-gAAAIw"]
[Sat Nov 15 20:53:28.625850 2025] [:error] [pid 22613:tid 22632] [client 45.131.195.5:52597] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aRh3yCoyR3cDsIRGPRnWcwAAAhE"]
[Sat Nov 15 20:53:29.498606 2025] [:error] [pid 19959:tid 19977] [client 45.131.195.17:34055] [client 45.131.195.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class.api.php"] [unique_id "aRh3ycjejiTUP1-IawPyowAAAYs"]
[Sat Nov 15 20:53:30.409009 2025] [:error] [pid 22765:tid 22783] [client 45.131.195.31:31519] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-activate.php"] [unique_id "aRh3yqbrQzjuZmPIWDYCggAAAo0"]
[Sat Nov 15 20:53:31.280940 2025] [:error] [pid 20346:tid 20354] [client 45.131.195.246:47261] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aRh3y57hsydZdIoVTltSFgAAAwU"]
[Sat Nov 15 20:53:32.180201 2025] [:error] [pid 22765:tid 22771] [client 45.131.195.15:20699] [client 45.131.195.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aRh3zKbrQzjuZmPIWDYCgwAAAoM"]
[Sat Nov 15 20:53:33.042531 2025] [:error] [pid 27997:tid 28022] [client 45.131.195.38:52195] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/hehe.php"] [unique_id "aRh3zdpja_6cDxKbxFnvGwAAANc"]
[Sat Nov 15 20:53:33.916985 2025] [:error] [pid 20654:tid 20677] [client 45.131.195.50:48799] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aRh3zXcS7eC8vO76_ycQZQAAA5Q"]
[Sat Nov 15 20:53:34.779778 2025] [:error] [pid 20313:tid 20326] [client 45.131.195.43:33083] [client 45.131.195.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aRh3zhI9DXIgPadBLUahbwAAAso"]
[Sat Nov 15 20:53:35.641879 2025] [:error] [pid 22613:tid 22636] [client 45.131.195.33:33087] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-theme-editor/include.php"] [unique_id "aRh3zyoyR3cDsIRGPRnWdwAAAhU"]
[Sat Nov 15 20:53:36.507308 2025] [:error] [pid 19959:tid 19977] [client 45.131.195.17:54169] [client 45.131.195.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib"] [unique_id "aRh30MjejiTUP1-IawPyrAAAAYs"]
[Sat Nov 15 20:53:37.373279 2025] [:error] [pid 19959:tid 19966] [client 45.131.195.40:65411] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/504.php"] [unique_id "aRh30cjejiTUP1-IawPyrQAAAYA"]
[Sat Nov 15 20:53:38.289057 2025] [:error] [pid 20346:tid 20351] [client 45.131.195.19:26943] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/plugin.php"] [unique_id "aRh30p7hsydZdIoVTltSGQAAAwI"]
[Sat Nov 15 20:53:39.155825 2025] [:error] [pid 19961:tid 19995] [client 45.131.195.31:39463] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/87.php"] [unique_id "aRh30zar7Si-84EApVSJDgAAAcI"]
[Sat Nov 15 20:53:40.020399 2025] [:error] [pid 19959:tid 19972] [client 45.131.195.45:45541] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aRh31MjejiTUP1-IawPyrwAAAYY"]
[Sat Nov 15 20:53:40.887537 2025] [:error] [pid 20654:tid 20680] [client 45.131.195.38:59015] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "aRh31HcS7eC8vO76_ycQagAAA5c"]
[Sat Nov 15 20:53:41.751426 2025] [:error] [pid 19959:tid 19980] [client 45.131.195.14:28699] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wordpress/BypassBest.php"] [unique_id "aRh31cjejiTUP1-IawPysgAAAY4"]
[Sat Nov 15 20:53:42.614708 2025] [:error] [pid 22613:tid 22624] [client 45.131.195.11:43117] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aRh31ioyR3cDsIRGPRnWeQAAAgk"]
[Sat Nov 15 20:53:43.482026 2025] [:error] [pid 27909:tid 27930] [client 45.131.195.35:45561] [client 45.131.195.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes"] [unique_id "aRh31yTfZ6B57n8HepVBNAAAABE"]
[Sat Nov 15 20:53:44.350092 2025] [:error] [pid 27911:tid 27980] [client 45.131.195.32:32099] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/about.php"] [unique_id "aRh32MGzUdrhGBIfiKR6BQAAAIw"]
[Sat Nov 15 20:53:45.210653 2025] [:error] [pid 27997:tid 28000] [client 45.131.195.44:32471] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aRh32dpja_6cDxKbxFnvIwAAAME"]
[Sat Nov 15 20:53:46.074606 2025] [:error] [pid 27997:tid 28022] [client 45.131.195.18:63529] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine"] [unique_id "aRh32tpja_6cDxKbxFnvJQAAANc"]
[Sat Nov 15 20:53:46.936317 2025] [:error] [pid 22765:tid 22777] [client 45.131.195.38:23229] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aRh32qbrQzjuZmPIWDYCiwAAAoc"]
[Sat Nov 15 20:53:47.796467 2025] [:error] [pid 27997:tid 28019] [client 45.131.195.26:56363] [client 45.131.195.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/epinyins.php"] [unique_id "aRh329pja_6cDxKbxFnvKwAAANQ"]
[Sat Nov 15 20:53:48.657614 2025] [:error] [pid 20654:tid 20675] [client 45.131.195.40:42259] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aRh33HcS7eC8vO76_ycQbQAAA5I"]
[Sat Nov 15 20:53:49.808836 2025] [:error] [pid 20313:tid 20329] [client 45.131.195.38:47353] [client 45.131.195.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aRh33RI9DXIgPadBLUahcQAAAs0"]
[Sat Nov 15 20:53:50.672036 2025] [:error] [pid 20654:tid 20669] [client 45.131.195.44:44551] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "aRh33ncS7eC8vO76_ycQcAAAA4w"]
[Sat Nov 15 20:53:51.588198 2025] [:error] [pid 19961:tid 20005] [client 45.131.195.11:31453] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/hehe.php"] [unique_id "aRh33zar7Si-84EApVSJGQAAAcw"]
[Sat Nov 15 20:53:52.450074 2025] [:error] [pid 19961:tid 20009] [client 45.131.195.30:23209] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ajk.php"] [unique_id "aRh34Dar7Si-84EApVSJHAAAAdA"]
[Sat Nov 15 20:53:53.312075 2025] [:error] [pid 20346:tid 20358] [client 45.131.195.26:60585] [client 45.131.195.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simple/simple.php"] [unique_id "aRh34Z7hsydZdIoVTltSIwAAAwk"]
[Sat Nov 15 20:53:54.178773 2025] [:error] [pid 27911:tid 27978] [client 45.131.195.50:39641] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aRh34sGzUdrhGBIfiKR6CwAAAIo"]
[Sat Nov 15 20:53:55.070723 2025] [:error] [pid 20346:tid 20356] [client 45.131.195.17:24911] [client 45.131.195.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/product.php"] [unique_id "aRh3457hsydZdIoVTltSKAAAAwc"]
[Sat Nov 15 20:53:55.953738 2025] [:error] [pid 20654:tid 20672] [client 45.131.195.42:32039] [client 45.131.195.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aRh343cS7eC8vO76_ycQcwAAA48"]
[Sat Nov 15 20:53:56.822476 2025] [:error] [pid 27911:tid 27990] [client 45.131.195.5:50133] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/wp-login.php"] [unique_id "aRh35MGzUdrhGBIfiKR6FgAAAJY"]
[Sat Nov 15 20:53:57.692633 2025] [:error] [pid 27911:tid 27978] [client 45.131.195.18:33367] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "aRh35cGzUdrhGBIfiKR6FwAAAIo"]
[Sat Nov 15 20:53:58.672393 2025] [:error] [pid 19959:tid 19971] [client 45.131.195.2:43771] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aRh35sjejiTUP1-IawPyvQAAAYU"]
[Sat Nov 15 20:53:59.541213 2025] [:error] [pid 27997:tid 28005] [client 45.131.195.246:37405] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/install.php"] [unique_id "aRh359pja_6cDxKbxFnvNQAAAMY"]
[Sat Nov 15 20:54:00.404030 2025] [:error] [pid 27911:tid 27982] [client 45.131.195.25:64533] [client 45.131.195.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/about.php"] [unique_id "aRh36MGzUdrhGBIfiKR6HwAAAI4"]
[Sat Nov 15 20:54:01.280481 2025] [:error] [pid 19961:tid 20005] [client 45.131.195.31:60393] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aRh36Tar7Si-84EApVSJIAAAAcw"]
[Sat Nov 15 20:54:02.148121 2025] [:error] [pid 22613:tid 22630] [client 45.131.195.11:40785] [client 45.131.195.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "aRh36ioyR3cDsIRGPRnWfwAAAg8"]
[Sat Nov 15 20:54:03.161124 2025] [:error] [pid 19959:tid 19976] [client 45.131.195.24:56723] [client 45.131.195.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/Coldsellers.php"] [unique_id "aRh368jejiTUP1-IawPyxQAAAYo"]
[Sat Nov 15 20:54:05.034675 2025] [:error] [pid 22613:tid 22631] [client 45.131.195.45:59327] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aRh37SoyR3cDsIRGPRnWgwAAAhA"]
[Sat Nov 15 20:54:05.938334 2025] [:error] [pid 22613:tid 22629] [client 45.131.195.23:55869] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xc.php"] [unique_id "aRh37SoyR3cDsIRGPRnWhQAAAg4"]
[Sat Nov 15 20:54:06.800965 2025] [:error] [pid 27911:tid 27979] [client 45.131.195.8:28083] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aRh37sGzUdrhGBIfiKR6JQAAAIs"]
[Sat Nov 15 20:54:07.683022 2025] [:error] [pid 22613:tid 22633] [client 45.131.195.44:31875] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aRh37yoyR3cDsIRGPRnWiAAAAhI"]
[Sat Nov 15 20:54:08.545438 2025] [:error] [pid 22765:tid 22791] [client 45.131.195.27:38873] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/file.php"] [unique_id "aRh38KbrQzjuZmPIWDYClAAAApU"]
[Sat Nov 15 20:54:09.416849 2025] [:error] [pid 20654:tid 20661] [client 45.131.195.45:59447] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/search"] [unique_id "aRh38XcS7eC8vO76_ycQgwAAA4Q"]
[Sat Nov 15 20:54:10.420139 2025] [:error] [pid 19961:tid 20015] [client 45.131.195.28:29265] [client 45.131.195.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aRh38jar7Si-84EApVSJIQAAAdY"]
[Sat Nov 15 20:54:11.284926 2025] [:error] [pid 27997:tid 28019] [client 45.131.195.4:65449] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aRh389pja_6cDxKbxFnvPAAAANQ"]
[Sat Nov 15 20:54:12.170731 2025] [:error] [pid 20346:tid 20363] [client 45.131.195.16:59055] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aRh39J7hsydZdIoVTltSMQAAAw4"]
[Sat Nov 15 20:54:13.082078 2025] [:error] [pid 27909:tid 27926] [client 45.131.195.21:34937] [client 45.131.195.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aRh39STfZ6B57n8HepVBQQAAAA0"]
[Sat Nov 15 20:54:13.961773 2025] [:error] [pid 27909:tid 27936] [client 45.131.195.5:23247] [client 45.131.195.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aRh39STfZ6B57n8HepVBRQAAABc"]
[Sat Nov 15 20:54:14.827080 2025] [:error] [pid 27911:tid 27985] [client 45.131.195.16:42519] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/man.php7"] [unique_id "aRh39sGzUdrhGBIfiKR6KQAAAJE"]
[Sat Nov 15 20:54:15.690423 2025] [:error] [pid 22765:tid 22788] [client 45.131.195.40:39075] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff"] [unique_id "aRh396brQzjuZmPIWDYClwAAApI"]
[Sat Nov 15 20:54:16.559207 2025] [:error] [pid 27911:tid 27982] [client 45.131.195.44:26447] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/fie.php"] [unique_id "aRh3-MGzUdrhGBIfiKR6LQAAAI4"]
[Sat Nov 15 20:54:17.421068 2025] [:error] [pid 20654:tid 20677] [client 45.131.195.7:24385] [client 45.131.195.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "aRh3-XcS7eC8vO76_ycQhAAAA5Q"]
[Sat Nov 15 20:54:18.288545 2025] [:error] [pid 20654:tid 20668] [client 45.131.195.18:39049] [client 45.131.195.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR"] [unique_id "aRh3-ncS7eC8vO76_ycQhgAAA4s"]
[Sat Nov 15 20:54:19.150215 2025] [:error] [pid 20654:tid 20676] [client 45.131.195.33:34313] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/customize.php"] [unique_id "aRh3-3cS7eC8vO76_ycQhwAAA5M"]
[Sat Nov 15 20:54:20.063694 2025] [:error] [pid 20654:tid 20678] [client 45.131.195.50:61609] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aRh3_HcS7eC8vO76_ycQiQAAA5U"]
[Sat Nov 15 20:54:20.976486 2025] [:error] [pid 19959:tid 19981] [client 45.131.195.36:20045] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRh3_MjejiTUP1-IawPyzQAAAY8"]
[Sat Nov 15 20:54:21.839134 2025] [:error] [pid 19959:tid 19967] [client 45.131.195.51:37203] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "aRh3_cjejiTUP1-IawPyzgAAAYE"]
[Sat Nov 15 20:54:22.867720 2025] [:error] [pid 20654:tid 20658] [client 45.131.195.48:65121] [client 45.131.195.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aRh3_ncS7eC8vO76_ycQiwAAA4E"]
[Sat Nov 15 20:54:23.729819 2025] [:error] [pid 20654:tid 20681] [client 45.131.195.22:65199] [client 45.131.195.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css/admin.php"] [unique_id "aRh3_3cS7eC8vO76_ycQjgAAA5g"]
[Sat Nov 15 20:54:24.592912 2025] [:error] [pid 27909:tid 27927] [client 45.131.195.6:21373] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aRh4ACTfZ6B57n8HepVBSAAAAA4"]
[Sat Nov 15 20:54:25.481451 2025] [:error] [pid 22765:tid 22789] [client 45.131.195.51:41433] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer"] [unique_id "aRh4AabrQzjuZmPIWDYCnAAAApM"]
[Sat Nov 15 20:54:26.351934 2025] [:error] [pid 20346:tid 20372] [client 45.131.195.50:64299] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aRh4Ap7hsydZdIoVTltSOQAAAxc"]
[Sat Nov 15 20:54:27.220730 2025] [:error] [pid 20346:tid 20373] [client 45.131.195.20:37265] [client 45.131.195.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/hi.php"] [unique_id "aRh4A57hsydZdIoVTltSOwAAAxg"]
[Sat Nov 15 20:54:28.082669 2025] [:error] [pid 19959:tid 19983] [client 45.131.195.42:52315] [client 45.131.195.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css/about.php"] [unique_id "aRh4BMjejiTUP1-IawPy1gAAAZE"]
[Sat Nov 15 20:54:28.945270 2025] [:error] [pid 20654:tid 20672] [client 45.131.195.16:37797] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aRh4BHcS7eC8vO76_ycQlAAAA48"]
[Sat Nov 15 20:54:29.809037 2025] [:error] [pid 20654:tid 20667] [client 45.131.195.8:61433] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ge.php"] [unique_id "aRh4BXcS7eC8vO76_ycQlgAAA4o"]
[Sat Nov 15 20:54:30.712711 2025] [:error] [pid 27909:tid 27928] [client 45.131.195.39:61067] [client 45.131.195.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "aRh4BiTfZ6B57n8HepVBSgAAAA8"]
[Sat Nov 15 20:54:31.580395 2025] [:error] [pid 20654:tid 20660] [client 45.131.195.32:24545] [client 45.131.195.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/webdb.php"] [unique_id "aRh4B3cS7eC8vO76_ycQngAAA4M"]
[Sat Nov 15 20:54:32.442316 2025] [:error] [pid 20346:tid 20352] [client 45.131.195.45:64463] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/nope.php"] [unique_id "aRh4CJ7hsydZdIoVTltSPgAAAwM"]
[Sat Nov 15 20:54:33.760186 2025] [:error] [pid 22765:tid 22788] [client 45.131.195.13:45147] [client 45.131.195.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aRh4CabrQzjuZmPIWDYCowAAApI"]
[Sat Nov 15 20:54:34.623492 2025] [:error] [pid 19959:tid 19990] [client 45.131.195.36:55553] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aRh4CsjejiTUP1-IawPy2wAAAZg"]
[Sat Nov 15 20:54:35.490104 2025] [:error] [pid 20654:tid 20681] [client 45.131.195.41:39129] [client 45.131.195.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aRh4C3cS7eC8vO76_ycQpAAAA5g"]
[Sat Nov 15 20:54:36.354680 2025] [:error] [pid 20346:tid 20353] [client 45.131.195.43:38221] [client 45.131.195.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aRh4DJ7hsydZdIoVTltSPwAAAwQ"]
[Sat Nov 15 20:54:38.402425 2025] [:error] [pid 22613:tid 22616] [client 45.131.195.9:36355] [client 45.131.195.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/erinyani"] [unique_id "aRh4DioyR3cDsIRGPRnWjwAAAgE"]
[Sat Nov 15 20:54:39.272900 2025] [:error] [pid 27997:tid 28001] [client 45.131.195.20:59767] [client 45.131.195.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aRh4D9pja_6cDxKbxFnvRwAAAMI"]
[Sat Nov 15 20:54:40.138538 2025] [:error] [pid 27997:tid 28010] [client 45.131.195.8:32037] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aRh4ENpja_6cDxKbxFnvSAAAAMs"]
[Sat Nov 15 20:54:40.999198 2025] [:error] [pid 27909:tid 27929] [client 45.131.195.4:51269] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3"] [unique_id "aRh4ECTfZ6B57n8HepVBTQAAABA"]
[Sat Nov 15 20:54:41.861215 2025] [:error] [pid 22613:tid 22630] [client 45.131.195.16:46539] [client 45.131.195.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRh4ESoyR3cDsIRGPRnWlQAAAg8"]
[Sat Nov 15 20:54:42.730245 2025] [:error] [pid 20313:tid 20336] [client 45.131.195.246:59861] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aRh4EhI9DXIgPadBLUahgQAAAtQ"]
[Sat Nov 15 20:54:43.653606 2025] [:error] [pid 27911:tid 27976] [client 45.131.195.246:20017] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css"] [unique_id "aRh4E8GzUdrhGBIfiKR6OAAAAIg"]
[Sat Nov 15 20:54:44.521955 2025] [:error] [pid 20654:tid 20660] [client 45.131.195.29:22815] [client 45.131.195.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin"] [unique_id "aRh4FHcS7eC8vO76_ycQpwAAA4M"]
[Sat Nov 15 20:54:45.396717 2025] [:error] [pid 20654:tid 20668] [client 45.131.195.49:36777] [client 45.131.195.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sbryl.php"] [unique_id "aRh4FXcS7eC8vO76_ycQqQAAA4s"]
[Sat Nov 15 20:54:46.263044 2025] [:error] [pid 27997:tid 28003] [client 45.131.195.49:40021] [client 45.131.195.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aRh4Ftpja_6cDxKbxFnvTAAAAMQ"]
[Sat Nov 15 20:54:47.126734 2025] [:error] [pid 20654:tid 20678] [client 45.131.195.51:64187] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aRh4F3cS7eC8vO76_ycQrAAAA5U"]
[Sat Nov 15 20:54:47.989735 2025] [:error] [pid 20346:tid 20364] [client 45.131.195.33:28043] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/w1px.php"] [unique_id "aRh4F57hsydZdIoVTltSRAAAAw8"]
[Sat Nov 15 20:54:48.854966 2025] [:error] [pid 20346:tid 20373] [client 45.131.195.45:23073] [client 45.131.195.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/baxa1.php7"] [unique_id "aRh4GJ7hsydZdIoVTltSRgAAAxg"]
[Sat Nov 15 20:54:49.718659 2025] [:error] [pid 27997:tid 28014] [client 45.131.195.19:64155] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classsmtps.php"] [unique_id "aRh4Gdpja_6cDxKbxFnvUgAAAM8"]
[Sat Nov 15 20:54:50.584294 2025] [:error] [pid 20313:tid 20317] [client 45.131.195.51:21637] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/aresk.php"] [unique_id "aRh4GhI9DXIgPadBLUahggAAAsE"]
[Sat Nov 15 20:54:51.450882 2025] [:error] [pid 27911:tid 27985] [client 45.131.195.31:63965] [client 45.131.195.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aRh4G8GzUdrhGBIfiKR6PgAAAJE"]
[Sat Nov 15 20:54:52.362284 2025] [:error] [pid 27909:tid 27936] [client 45.131.195.36:23985] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mari.php"] [unique_id "aRh4HCTfZ6B57n8HepVBTwAAABc"]
[Sat Nov 15 20:54:53.349881 2025] [:error] [pid 19959:tid 19975] [client 45.131.195.40:57785] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aRh4HcjejiTUP1-IawPy4gAAAYk"]
[Sat Nov 15 20:54:54.231063 2025] [:error] [pid 22765:tid 22792] [client 45.131.195.49:36273] [client 45.131.195.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xman.php"] [unique_id "aRh4HqbrQzjuZmPIWDYCqwAAApY"]
[Sat Nov 15 20:54:55.093132 2025] [:error] [pid 20313:tid 20323] [client 45.131.195.44:48273] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/css"] [unique_id "aRh4HxI9DXIgPadBLUahhQAAAsc"]
[Sat Nov 15 20:54:55.958143 2025] [:error] [pid 19961:tid 20011] [client 45.131.195.10:52673] [client 45.131.195.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/zex.php"] [unique_id "aRh4Hzar7Si-84EApVSJMQAAAdI"]
[Sat Nov 15 20:54:56.829444 2025] [:error] [pid 27997:tid 28020] [client 45.131.195.9:38527] [client 45.131.195.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/contact/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRh4INpja_6cDxKbxFnvVAAAANU"]
[Sat Nov 15 20:54:58.697619 2025] [:error] [pid 22613:tid 22619] [client 45.131.195.21:38445] [client 45.131.195.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aRh4IioyR3cDsIRGPRnWpwAAAgQ"]
[Sat Nov 15 20:54:59.559735 2025] [:error] [pid 22765:tid 22771] [client 45.131.195.12:57439] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/user.php"] [unique_id "aRh4I6brQzjuZmPIWDYCrgAAAoM"]
[Sat Nov 15 20:55:00.427142 2025] [:error] [pid 20313:tid 20332] [client 45.131.195.46:58095] [client 45.131.195.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aRh4JBI9DXIgPadBLUahigAAAtA"]
[Sat Nov 15 20:55:01.385351 2025] [:error] [pid 20346:tid 20353] [client 45.131.195.14:26413] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aRh4JZ7hsydZdIoVTltSSgAAAwQ"]
[Sat Nov 15 20:55:02.279055 2025] [:error] [pid 27911:tid 27976] [client 45.131.195.47:59115] [client 45.131.195.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-2019.php"] [unique_id "aRh4JsGzUdrhGBIfiKR6RAAAAIg"]
[Sat Nov 15 20:55:03.149921 2025] [:error] [pid 19959:tid 19966] [client 45.131.195.36:27409] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aRh4J8jejiTUP1-IawPy6gAAAYA"]
[Sat Nov 15 20:55:04.122594 2025] [:error] [pid 22765:tid 22780] [client 45.131.195.6:44281] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple/function.php"] [unique_id "aRh4KKbrQzjuZmPIWDYCsgAAAoo"]
[Sat Nov 15 20:55:04.987932 2025] [:error] [pid 22613:tid 22637] [client 45.131.195.4:52489] [client 45.131.195.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aRh4KCoyR3cDsIRGPRnWqwAAAhY"]
[Sat Nov 15 20:55:05.850931 2025] [:error] [pid 19959:tid 19967] [client 45.131.195.27:63365] [client 45.131.195.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aRh4KcjejiTUP1-IawPy7wAAAYE"]
[Sat Nov 15 20:55:06.716085 2025] [:error] [pid 20654:tid 20658] [client 45.131.195.51:53411] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils"] [unique_id "aRh4KncS7eC8vO76_ycQuwAAA4E"]
[Sat Nov 15 20:55:07.578117 2025] [:error] [pid 20346:tid 20364] [client 45.131.195.19:48827] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/pridmag/404.php"] [unique_id "aRh4K57hsydZdIoVTltSTwAAAw8"]
[Sat Nov 15 20:55:08.440899 2025] [:error] [pid 22613:tid 22621] [client 45.131.195.37:23361] [client 45.131.195.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/public/hi.php"] [unique_id "aRh4LCoyR3cDsIRGPRnWrAAAAgY"]
[Sat Nov 15 20:55:09.334345 2025] [:error] [pid 20313:tid 20325] [client 45.131.195.6:42949] [client 45.131.195.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/subs/pics/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRh4LRI9DXIgPadBLUahjAAAAsk"]
[Sat Nov 15 20:55:10.197545 2025] [:error] [pid 20654:tid 20675] [client 45.131.195.15:32655] [client 45.131.195.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/login.php"] [unique_id "aRh4LncS7eC8vO76_ycQwAAAA5I"]
[Sat Nov 15 20:55:11.098780 2025] [:error] [pid 20654:tid 20667] [client 45.131.195.14:54331] [client 45.131.195.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/fucku.php"] [unique_id "aRh4L3cS7eC8vO76_ycQwwAAA4o"]
[Sat Nov 15 20:55:11.963308 2025] [:error] [pid 20346:tid 20363] [client 45.131.195.9:61207] [client 45.131.195.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aRh4L57hsydZdIoVTltSUgAAAw4"]
[Sat Nov 15 20:55:12.826089 2025] [:error] [pid 27911:tid 27987] [client 45.131.195.3:63439] [client 45.131.195.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aRh4MMGzUdrhGBIfiKR6SAAAAJM"]
[Sat Nov 15 20:55:13.694092 2025] [:error] [pid 22613:tid 22632] [client 45.131.195.39:58913] [client 45.131.195.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files/index.php"] [unique_id "aRh4MSoyR3cDsIRGPRnWsAAAAhE"]
[Sat Nov 15 20:55:14.555748 2025] [:error] [pid 20346:tid 20357] [client 45.131.195.51:44579] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aRh4Mp7hsydZdIoVTltSVAAAAwg"]
[Sat Nov 15 20:55:15.423743 2025] [:error] [pid 27909:tid 27923] [client 45.131.195.30:41215] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "aRh4MyTfZ6B57n8HepVBYAAAAAo"]
[Sat Nov 15 20:55:16.287506 2025] [:error] [pid 27911:tid 27982] [client 45.131.195.9:30547] [client 45.131.195.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ans.php"] [unique_id "aRh4NMGzUdrhGBIfiKR6SwAAAI4"]
[Sat Nov 15 20:55:17.150081 2025] [:error] [pid 20654:tid 20671] [client 45.131.195.25:55971] [client 45.131.195.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/qfunctions.php"] [unique_id "aRh4NXcS7eC8vO76_ycQ2AAAA44"]
[Sat Nov 15 20:55:18.011797 2025] [:error] [pid 27909:tid 27921] [client 45.131.195.30:40897] [client 45.131.195.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload.php"] [unique_id "aRh4NiTfZ6B57n8HepVBZAAAAAg"]
[Sat Nov 15 20:55:18.875661 2025] [:error] [pid 27909:tid 27930] [client 45.131.195.36:33337] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/worksec.php"] [unique_id "aRh4NiTfZ6B57n8HepVBZwAAABE"]
[Sat Nov 15 20:55:19.785969 2025] [:error] [pid 22613:tid 22633] [client 45.131.195.2:60455] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/as.php"] [unique_id "aRh4NyoyR3cDsIRGPRnWsgAAAhI"]
[Sat Nov 15 20:55:20.691004 2025] [:error] [pid 27997:tid 28013] [client 45.131.195.39:63883] [client 45.131.195.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/tolly-t/hello.php"] [unique_id "aRh4ONpja_6cDxKbxFnvbQAAAM4"]
[Sat Nov 15 20:55:21.554561 2025] [:error] [pid 19959:tid 19967] [client 45.131.195.48:42181] [client 45.131.195.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aRh4OcjejiTUP1-IawPy-AAAAYE"]
[Sat Nov 15 20:55:22.427536 2025] [:error] [pid 20654:tid 20676] [client 45.131.195.23:30979] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aRh4OncS7eC8vO76_ycQ2gAAA5M"]
[Sat Nov 15 20:55:23.292735 2025] [:error] [pid 20654:tid 20680] [client 45.131.195.33:34453] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aRh4O3cS7eC8vO76_ycQ2wAAA5c"]
[Sat Nov 15 20:55:24.159441 2025] [:error] [pid 22765:tid 22792] [client 45.131.195.8:22627] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aRh4PKbrQzjuZmPIWDYCvQAAApY"]
[Sat Nov 15 20:55:25.023103 2025] [:error] [pid 22613:tid 22628] [client 45.131.195.8:36639] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aRh4PSoyR3cDsIRGPRnWtQAAAg0"]
[Sat Nov 15 20:55:25.888095 2025] [:error] [pid 19961:tid 19997] [client 45.131.195.42:47979] [client 45.131.195.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content"] [unique_id "aRh4PTar7Si-84EApVSJPgAAAcQ"]
[Sat Nov 15 20:55:26.757069 2025] [:error] [pid 20313:tid 20323] [client 45.131.195.41:64065] [client 45.131.195.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates"] [unique_id "aRh4PhI9DXIgPadBLUahkgAAAsc"]
[Sat Nov 15 20:55:27.619596 2025] [:error] [pid 20654:tid 20667] [client 45.131.195.36:62195] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-conf.phps"] [unique_id "aRh4P3cS7eC8vO76_ycQ3AAAA4o"]
[Sat Nov 15 20:55:28.481439 2025] [:error] [pid 20654:tid 20659] [client 45.131.195.23:52849] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aRh4QHcS7eC8vO76_ycQ3wAAA4I"]
[Sat Nov 15 20:55:29.391362 2025] [:error] [pid 20346:tid 20359] [client 45.131.195.8:54091] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aRh4QZ7hsydZdIoVTltSXwAAAwo"]
[Sat Nov 15 20:55:30.264004 2025] [:error] [pid 20654:tid 20676] [client 45.131.195.20:29443] [client 45.131.195.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/site/buy.php"] [unique_id "aRh4QncS7eC8vO76_ycQ5wAAA5M"]
[Sat Nov 15 20:55:31.138406 2025] [:error] [pid 19959:tid 19987] [client 45.131.195.19:29351] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aRh4Q8jejiTUP1-IawPy_AAAAZU"]
[Sat Nov 15 20:55:32.000485 2025] [:error] [pid 20654:tid 20669] [client 45.131.195.23:59685] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets"] [unique_id "aRh4Q3cS7eC8vO76_ycQ6QAAA4w"]
[Sat Nov 15 20:55:32.866516 2025] [:error] [pid 20654:tid 20658] [client 45.131.195.20:44489] [client 45.131.195.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/index.php"] [unique_id "aRh4RHcS7eC8vO76_ycQ7AAAA4E"]
[Sat Nov 15 20:55:33.896446 2025] [:error] [pid 27909:tid 27932] [client 45.131.195.29:29461] [client 45.131.195.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRh4RSTfZ6B57n8HepVBbAAAABM"]
[Sat Nov 15 20:55:34.760961 2025] [:error] [pid 20313:tid 20324] [client 45.131.195.44:47263] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/item.php"] [unique_id "aRh4RhI9DXIgPadBLUahlgAAAsg"]
[Sat Nov 15 20:55:35.624750 2025] [:error] [pid 20654:tid 20677] [client 45.131.195.40:57435] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aRh4R3cS7eC8vO76_ycQ8QAAA5Q"]
[Sat Nov 15 20:55:36.487231 2025] [:error] [pid 19959:tid 19983] [client 45.131.195.2:50657] [client 45.131.195.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-set.php"] [unique_id "aRh4SMjejiTUP1-IawPzAQAAAZE"]
[Sat Nov 15 20:55:37.350271 2025] [:error] [pid 20654:tid 20658] [client 45.131.195.39:56025] [client 45.131.195.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/1.php"] [unique_id "aRh4SXcS7eC8vO76_ycQ9AAAA4E"]
[Sat Nov 15 20:55:38.215824 2025] [:error] [pid 20654:tid 20661] [client 45.131.195.246:64787] [client 45.131.195.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aRh4SncS7eC8vO76_ycQ9QAAA4Q"]
[Sat Nov 15 20:55:44.122514 2025] [:error] [pid 22613:tid 22624] [client 45.131.195.19:41367] [client 45.131.195.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aRh4UCoyR3cDsIRGPRnWvQAAAgk"]
[Sat Nov 15 20:55:45.805474 2025] [:error] [pid 19959:tid 19967] [client 45.131.195.36:46053] [client 45.131.195.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aRh4UcjejiTUP1-IawPzBAAAAYE"]
[Sat Nov 15 20:55:46.670438 2025] [:error] [pid 20346:tid 20371] [client 45.131.195.44:23071] [client 45.131.195.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/Ova-Simple.php"] [unique_id "aRh4Up7hsydZdIoVTltSZQAAAxY"]
[Sat Nov 15 20:55:47.765320 2025] [:error] [pid 20346:tid 20352] [client 45.131.195.12:43085] [client 45.131.195.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aRh4U57hsydZdIoVTltSZgAAAwM"]
[Sat Nov 15 20:55:48.639044 2025] [:error] [pid 20654:tid 20673] [client 45.131.195.8:21995] [client 45.131.195.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint"] [unique_id "aRh4VHcS7eC8vO76_ycRBAAAA5A"]
[Sat Nov 15 20:55:49.503593 2025] [:error] [pid 20346:tid 20355] [client 45.131.195.51:61299] [client 45.131.195.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns"] [unique_id "aRh4VZ7hsydZdIoVTltSbAAAAwY"]
[Sat Nov 15 20:55:50.367412 2025] [:error] [pid 27909:tid 27918] [client 45.131.195.21:29337] [client 45.131.195.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "aRh4ViTfZ6B57n8HepVBfQAAAAU"]
[Sat Nov 15 20:55:51.274478 2025] [:error] [pid 20654:tid 20667] [client 45.131.195.40:39771] [client 45.131.195.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aRh4V3cS7eC8vO76_ycRBgAAA4o"]
[Sat Nov 15 23:43:41.570914 2025] [:error] [pid 20346:tid 20365] [client 34.87.153.7:55364] [client 34.87.153.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aRifrZ7hsydZdIoVTltwqQAAAxA"]
[Sun Nov 16 03:15:34.162489 2025] [autoindex:error] [pid 27805:tid 27908] [client 20.2.83.141:63697] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 06:04:12.292130 2025] [autoindex:error] [pid 20556:tid 20567] [client 213.199.55.196:57433] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 08:46:38.505824 2025] [:error] [pid 52470:tid 52524] [client 136.144.19.184:51645] [client 136.144.19.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aRke7kg9mXF2ZFFtj1X5YQAAAFM"]
[Sun Nov 16 08:46:38.995973 2025] [:error] [pid 52470:tid 52513] [client 193.36.224.17:54711] [client 193.36.224.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/txets.php"] [unique_id "aRke7kg9mXF2ZFFtj1X5YgAAAEg"]
[Sun Nov 16 08:46:39.488412 2025] [:error] [pid 20556:tid 20580] [client 104.234.19.21:23607] [client 104.234.19.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aRke70kbyEckbWtBcCLWKwAAARY"]
[Sun Nov 16 19:06:43.780077 2025] [autoindex:error] [pid 34165:tid 34207] [client 155.94.163.116:62684] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 22:28:55.208786 2025] [:error] [pid 34133:tid 34147] [client 73.119.141.130:60476] [client 73.119.141.130] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "178.20.45.182_e7f7872d1f072df13adde147b911fb7b6f889d07"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/wp-content/themes/Your-Generated-Divi-child-theme-template-by-DiviCake/style.css"] [unique_id "aRnfpPSAB3iwXVRY0gG6BgAAAUw"], referer: https://makifim.com.au/
[Mon Nov 17 01:00:19.496771 2025] [proxy_fcgi:error] [pid 55656:tid 55714] [client 103.4.122.14:51552] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Nov 17 04:58:33.600789 2025] [:error] [pid 39537:tid 39544] [client 136.144.19.207:56799] [client 136.144.19.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aRo6-YZRrh1pcrdcLB_F1AAAAMQ"]
[Mon Nov 17 04:58:35.082693 2025] [:error] [pid 39451:tid 39514] [client 136.144.19.220:32709] [client 136.144.19.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/txets.php"] [unique_id "aRo6--fgkqXTS0SO3fBbrwAAAIY"]
[Mon Nov 17 04:58:36.570542 2025] [:error] [pid 39450:tid 39489] [client 136.144.19.193:33345] [client 136.144.19.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aRo6_OoZqPB4_7vNEDSIFAAAAEg"]
[Tue Nov 18 11:28:48.773360 2025] [proxy_fcgi:error] [pid 61392:tid 61434] [client 35.185.124.94:44141] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1763436528.5956459045410156250000', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Tue Nov 18 16:27:10.768738 2025] [autoindex:error] [pid 44624:tid 44633] [client 84.247.191.22:55624] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 18 21:37:31.493250 2025] [:error] [pid 44470:tid 44495] [client 45.134.79.103:54395] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRx2mzv-RLYfULjlgDb_UwAAAFQ"]
[Tue Nov 18 21:37:32.146054 2025] [:error] [pid 44471:tid 44505] [client 45.134.79.103:49786] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aRx2nO_6m0bQO14XwtOC7AAAAQE"]
[Tue Nov 18 21:37:32.829186 2025] [:error] [pid 3500:tid 3515] [client 45.134.79.103:55895] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nPCbRC7k2D7mjbST7wAAAc0"]
[Wed Nov 19 07:30:39.859991 2025] [:error] [pid 6919:tid 6923] [client 18.191.165.250:56825] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR0Bn0YFdN1s_9xJVUmrTAAAAQE"]
[Wed Nov 19 07:30:40.250888 2025] [:error] [pid 6554:tid 6569] [client 18.191.165.250:56909] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR0BoN8rvPWLafJFqmVXAAAAAAk"]
[Wed Nov 19 07:30:40.647684 2025] [:error] [pid 6556:tid 6632] [client 18.191.165.250:57051] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR0BoJuL7hhgrmdM1mt7VAAAAI4"]
[Wed Nov 19 07:30:41.041871 2025] [:error] [pid 6556:tid 6619] [client 18.191.165.250:57174] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR0BoZuL7hhgrmdM1mt7XgAAAIE"]
[Wed Nov 19 07:30:41.434695 2025] [:error] [pid 6919:tid 6926] [client 18.191.165.250:57256] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR0BoUYFdN1s_9xJVUmregAAAQQ"]
[Wed Nov 19 07:50:43.152546 2025] [proxy_fcgi:error] [pid 26664:tid 26689] [client 66.249.64.128:42122] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_wp_theme_files_patterns-3b23ae1e99ee6913382a1a5c16971124', 'a:2:{s:7:\\"version\\";s:6:\\"4.27.4\\";s:8:\\"patterns\\";a:0:{}}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1763509842.3975288867950439453125', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Wed Nov 19 10:16:49.458032 2025] [proxy_fcgi:error] [pid 6919:tid 6936] [client 66.249.64.128:35171] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1763518600.6960570812225341796875', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Wed Nov 19 20:35:57.218658 2025] [:error] [pid 6556:tid 6622] [client 104.196.176.201:57899] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rZuL7hhgrmdM1msnaAAAAIQ"]
[Thu Nov 20 01:12:29.816945 2025] [proxy_fcgi:error] [pid 50475:tid 50536] [client 103.4.122.14:34898] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Nov 20 02:23:32.795264 2025] [:error] [pid 8872:tid 8891] [client 91.92.242.56:54673] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LJDkBDH0q-89RJLFIFQAAA1A"]
[Thu Nov 20 02:23:33.382003 2025] [:error] [pid 8822:tid 8833] [client 91.92.242.56:55010] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LJTHA2IF8PiYVHyhlzAAAAwk"]
[Thu Nov 20 02:23:33.948019 2025] [:error] [pid 8065:tid 8088] [client 91.92.242.56:55380] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LJREkusKum219iEis_AAAAdQ"]
[Thu Nov 20 04:38:17.805074 2025] [:error] [pid 55343:tid 55401] [client 20.19.181.152:26544] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aR4quVWlO3EnyVMV7w7l8gAAAII"]
[Thu Nov 20 04:38:20.213108 2025] [:error] [pid 55342:tid 55394] [client 20.19.181.152:27115] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aR4qvLg6x32Tvk7fIG8j5AAAAFY"]
[Thu Nov 20 04:38:24.262777 2025] [:error] [pid 55343:tid 55421] [client 20.19.181.152:27135] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aR4qwFWlO3EnyVMV7w7l_gAAAJY"]
[Thu Nov 20 04:38:30.667435 2025] [:error] [pid 55430:tid 55449] [client 20.19.181.152:26588] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/aduot.php"] [unique_id "aR4qxvPZXaIMEU4pE7soLwAAANA"]
[Thu Nov 20 04:41:07.809285 2025] [:error] [pid 55430:tid 55457] [client 20.19.181.152:30530] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pss.php"] [unique_id "aR4rY_PZXaIMEU4pE7spgAAAANg"]
[Thu Nov 20 04:41:34.767941 2025] [:error] [pid 55343:tid 55403] [client 20.19.181.152:36502] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aR4rflWlO3EnyVMV7w7m2gAAAIQ"]
[Thu Nov 20 04:41:39.287103 2025] [:error] [pid 55342:tid 55386] [client 20.19.181.152:29152] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aR4rg7g6x32Tvk7fIG8kqQAAAE4"]
[Thu Nov 20 04:41:52.285074 2025] [:error] [pid 55340:tid 55358] [client 20.19.181.152:35302] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/aws.php"] [unique_id "aR4rkPOxD-NeMydTybCysgAAAA0"]
[Thu Nov 20 04:42:02.526172 2025] [:error] [pid 55343:tid 55412] [client 20.19.181.152:51648] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/aws.php"] [unique_id "aR4rmlWlO3EnyVMV7w7m7gAAAI0"]
[Thu Nov 20 04:43:36.538481 2025] [:error] [pid 55342:tid 55377] [client 20.19.181.152:4381] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/undel.php"] [unique_id "aR4r-Lg6x32Tvk7fIG8lFwAAAEU"]
[Thu Nov 20 04:43:43.158676 2025] [:error] [pid 55430:tid 55444] [client 20.19.181.152:4401] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/undel.php"] [unique_id "aR4r__PZXaIMEU4pE7sqcQAAAMs"]
[Thu Nov 20 04:43:46.021027 2025] [:error] [pid 55430:tid 55441] [client 20.19.181.152:36595] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/undel.php"] [unique_id "aR4sAvPZXaIMEU4pE7sqdAAAAMg"]
[Thu Nov 20 04:43:50.004173 2025] [:error] [pid 55430:tid 55437] [client 20.19.181.152:4298] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/undel.php"] [unique_id "aR4sBvPZXaIMEU4pE7sqegAAAMQ"]
[Thu Nov 20 12:10:22.480034 2025] [:error] [pid 804:tid 836] [client 98.81.111.26:60626] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6UrvaRHpUlPL9O0Lk1tQAAAYw"]
[Thu Nov 20 12:10:22.887633 2025] [:error] [pid 55430:tid 55438] [client 98.81.111.26:60873] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6UrvPZXaIMEU4pE7ug4AAAAMU"]
[Thu Nov 20 12:10:23.294268 2025] [:error] [pid 55340:tid 55352] [client 98.81.111.26:56073] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6Ur_OxD-NeMydTybBJ_wAAAAc"]
[Thu Nov 20 12:10:23.712383 2025] [:error] [pid 55430:tid 55450] [client 98.81.111.26:50736] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6Ur_PZXaIMEU4pE7uhEwAAANE"]
[Thu Nov 20 12:10:24.130166 2025] [:error] [pid 55340:tid 55367] [client 98.81.111.26:63106] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6UsPOxD-NeMydTybBKFQAAABY"]
[Thu Nov 20 12:15:52.824131 2025] [:error] [pid 55340:tid 55362] [client 98.81.111.26:64400] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6V-POxD-NeMydTybBNfQAAABE"]
[Thu Nov 20 12:15:53.235297 2025] [:error] [pid 55342:tid 55381] [client 98.81.111.26:50097] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6V-bg6x32Tvk7fIG-PTQAAAEk"]
[Thu Nov 20 12:15:53.641174 2025] [:error] [pid 55343:tid 55423] [client 98.81.111.26:52220] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6V-VWlO3EnyVMV7w5o7wAAAJg"]
[Thu Nov 20 12:15:54.047004 2025] [:error] [pid 55343:tid 55404] [client 98.81.111.26:54333] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6V-lWlO3EnyVMV7w5pCQAAAIU"]
[Thu Nov 20 12:15:54.458701 2025] [:error] [pid 804:tid 839] [client 98.81.111.26:57850] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aR6V-vaRHpUlPL9O0Lk5dAAAAY8"]
[Thu Nov 20 18:59:26.788673 2025] [:error] [pid 40508:tid 40511] [client 34.138.47.236:52520] [client 34.138.47.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.47.236, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aR70jqxXNVCMW_ksxPutoQAAAoE"]
[Thu Nov 20 18:59:32.210084 2025] [:error] [pid 40508:tid 40520] [client 34.138.47.236:52520] [client 34.138.47.236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aR70lKxXNVCMW_ksxPutpgAAAoo"]
[Thu Nov 20 18:59:34.446737 2025] [:error] [pid 40508:tid 40516] [client 34.138.47.236:52520] [client 34.138.47.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.47.236, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aR70lqxXNVCMW_ksxPutqQAAAoY"]
[Fri Nov 21 14:43:16.826648 2025] [:error] [pid 25554:tid 25563] [client 213.21.239.4:39490] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aSAKBB-NtB-9AzFZrk4RSgAAAQU"]
[Fri Nov 21 15:09:11.209845 2025] [:error] [pid 25431:tid 25497] [client 213.21.239.4:53324] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aSAQF8klhXxmoIExII0K1QAAAIo"]
[Fri Nov 21 15:42:18.438929 2025] [:error] [pid 25554:tid 25566] [client 213.21.239.4:33526] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAX2h-NtB-9AzFZrk48NgAAAQg"]
[Fri Nov 21 16:08:12.761346 2025] [:error] [pid 25554:tid 25573] [client 213.21.239.4:49468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAd7B-NtB-9AzFZrk5bXAAAAQ8"]
[Fri Nov 21 18:45:39.410616 2025] [:error] [pid 25521:tid 25524] [client 104.28.208.82:31417] [client 104.28.208.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.82, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aSBC0_hXnBMilDddn3UeFwAAAME"]
[Fri Nov 21 20:49:57.942747 2025] [:error] [pid 46939:tid 46946] [client 173.239.254.59:33879] [client 173.239.254.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.59, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aSBf9e0OmVoxD4VZ_ZnsNAAAAUQ"]
[Sat Nov 22 03:53:13.945657 2025] [:error] [pid 53477:tid 53503] [client 103.167.150.158:58579] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDKX7Lu30Ku9O40aKiWAAAABY"]
[Sat Nov 22 06:56:49.564709 2025] [:error] [pid 25856:tid 25881] [client 212.116.231.26:48940] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/O-Simple.php"] [unique_id "aSDuMRsTP0wy94zKUvHnxwAAARc"]
[Sat Nov 22 06:56:50.377439 2025] [:error] [pid 53477:tid 53497] [client 212.116.231.26:46074] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/O-Simple.php"] [unique_id "aSDuMn7Lu30Ku9O40aIHHgAAABA"]
[Sat Nov 22 06:56:51.188456 2025] [:error] [pid 53479:tid 53544] [client 212.116.231.26:46548] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/O-Simple.php"] [unique_id "aSDuM26cicFF3Aas-oShyQAAAIg"]
[Sat Nov 22 06:56:52.000094 2025] [:error] [pid 53478:tid 53516] [client 212.116.231.26:47062] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/O-Simple.php"] [unique_id "aSDuMwhUYdXBbQswAdRAdwAAAEc"]
[Sat Nov 22 06:56:52.814752 2025] [:error] [pid 53566:tid 53570] [client 212.116.231.26:47432] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/O-Simple.php"] [unique_id "aSDuNMbSHDBkRbwMbd5n_wAAAMI"]
[Sat Nov 22 06:56:53.646925 2025] [:error] [pid 53478:tid 53526] [client 212.116.231.26:47936] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNQhUYdXBbQswAdRAhwAAAFE"]
[Sat Nov 22 06:56:54.494659 2025] [:error] [pid 53477:tid 53494] [client 212.116.231.26:48318] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNn7Lu30Ku9O40aIHVQAAAA0"]
[Sat Nov 22 06:56:55.337227 2025] [:error] [pid 53477:tid 53501] [client 212.116.231.26:48680] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuN37Lu30Ku9O40aIHXQAAABQ"]
[Sat Nov 22 06:56:56.170417 2025] [:error] [pid 53566:tid 53573] [client 212.116.231.26:48940] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOMbSHDBkRbwMbd5oIwAAAMU"]
[Sat Nov 22 06:56:56.981989 2025] [:error] [pid 25856:tid 25862] [client 212.116.231.26:49164] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOBsTP0wy94zKUvHoQQAAAQQ"]
[Sat Nov 22 07:17:15.547516 2025] [:error] [pid 9547:tid 9554] [client 194.5.82.150:32839] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDy-9ClOR5qk7DoMeGt3QAAAUE"]
[Sat Nov 22 07:17:18.909141 2025] [:error] [pid 53477:tid 53488] [client 194.5.82.105:49189] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDy_n7Lu30Ku9O40aIMjQAAAAc"]
[Sat Nov 22 07:17:25.261334 2025] [:error] [pid 25856:tid 25858] [client 194.5.82.111:22735] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSDzBRsTP0wy94zKUvHvWwAAAQA"]
[Sat Nov 22 07:17:30.436715 2025] [:error] [pid 53479:tid 53554] [client 194.5.82.138:24759] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSDzCm6cicFF3Aas-oSm0gAAAJI"]
[Sat Nov 22 07:17:40.706945 2025] [autoindex:error] [pid 53478:tid 53510] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:40.823794 2025] [autoindex:error] [pid 53478:tid 53518] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:40.924483 2025] [autoindex:error] [pid 53478:tid 53533] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:41.089052 2025] [autoindex:error] [pid 53478:tid 53512] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:43.996129 2025] [autoindex:error] [pid 53478:tid 53515] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:44.304797 2025] [autoindex:error] [pid 53478:tid 53513] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:44.427618 2025] [autoindex:error] [pid 53478:tid 53520] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:44.551329 2025] [autoindex:error] [pid 53478:tid 53528] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:44.656804 2025] [autoindex:error] [pid 53478:tid 53532] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:44.983371 2025] [autoindex:error] [pid 53478:tid 53521] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:46.327415 2025] [autoindex:error] [pid 53478:tid 53516] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:49.597358 2025] [autoindex:error] [pid 53478:tid 53518] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:49.865833 2025] [autoindex:error] [pid 53478:tid 53512] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:50.046257 2025] [autoindex:error] [pid 53478:tid 53509] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:53.513913 2025] [autoindex:error] [pid 53478:tid 53525] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:55.246604 2025] [autoindex:error] [pid 53478:tid 53520] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:58.236286 2025] [autoindex:error] [pid 53478:tid 53519] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:58.401199 2025] [autoindex:error] [pid 53478:tid 53523] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:17:58.546461 2025] [autoindex:error] [pid 53478:tid 53522] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:07.324222 2025] [autoindex:error] [pid 53478:tid 53523] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:09.103484 2025] [autoindex:error] [pid 53478:tid 53512] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:09.219724 2025] [autoindex:error] [pid 53478:tid 53509] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:09.615707 2025] [autoindex:error] [pid 53478:tid 53520] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:09.718367 2025] [autoindex:error] [pid 53478:tid 53525] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:09.842599 2025] [autoindex:error] [pid 53478:tid 53526] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:56.812714 2025] [autoindex:error] [pid 53478:tid 53516] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:56.922724 2025] [autoindex:error] [pid 53478:tid 53510] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:57.038789 2025] [autoindex:error] [pid 53478:tid 53529] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:18:57.205291 2025] [autoindex:error] [pid 53478:tid 53509] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:00.861774 2025] [autoindex:error] [pid 53478:tid 53520] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:02.627673 2025] [autoindex:error] [pid 53478:tid 53518] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:02.771140 2025] [autoindex:error] [pid 53478:tid 53526] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:02.911614 2025] [autoindex:error] [pid 53478:tid 53514] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:04.594123 2025] [autoindex:error] [pid 53478:tid 53511] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:04.739027 2025] [autoindex:error] [pid 53478:tid 53515] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:04.897975 2025] [autoindex:error] [pid 53478:tid 53525] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:05.007069 2025] [autoindex:error] [pid 53478:tid 53516] [client 194.5.82.135:33747] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:40.628716 2025] [autoindex:error] [pid 53479:tid 53560] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:19:57.508960 2025] [autoindex:error] [pid 53479:tid 53553] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:03.977558 2025] [autoindex:error] [pid 53479:tid 53555] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:04.108805 2025] [autoindex:error] [pid 53479:tid 53550] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:10.699396 2025] [autoindex:error] [pid 53479:tid 53537] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:10.826584 2025] [autoindex:error] [pid 53479:tid 53555] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:10.950390 2025] [autoindex:error] [pid 53479:tid 53550] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:11.067897 2025] [autoindex:error] [pid 53479:tid 53542] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:11.180018 2025] [autoindex:error] [pid 53479:tid 53549] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:11.349802 2025] [autoindex:error] [pid 53479:tid 53545] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:11.453296 2025] [autoindex:error] [pid 53479:tid 53546] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:11.591805 2025] [autoindex:error] [pid 53479:tid 53551] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:40.447633 2025] [autoindex:error] [pid 53479:tid 53557] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:20:43.626491 2025] [autoindex:error] [pid 53479:tid 53541] [client 194.5.82.163:21617] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 09:14:59.837519 2025] [autoindex:error] [pid 53477:tid 53499] [client 139.59.37.180:55452] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 23 01:00:07.772672 2025] [proxy_fcgi:error] [pid 8816:tid 8894] [client 103.4.122.14:46474] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Nov 23 01:00:15.819810 2025] [proxy_fcgi:error] [pid 39719:tid 39788] [client 103.4.122.14:46560] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Nov 23 02:24:45.563902 2025] [:error] [pid 39719:tid 39780] [client 57.141.14.55:40836] [client 57.141.14.55] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aSH_7RmP4k0tY5Yex-XcoQAAAQQ"]
[Sun Nov 23 04:26:13.236686 2025] [:error] [pid 38738:tid 38750] [client 216.126.225.91:60274] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aSIcZQytc6TL9XavPmO0VQAAAAg"]
[Sun Nov 23 10:09:32.700644 2025] [:error] [pid 38738:tid 38759] [client 84.247.191.22:52922] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aSJs3Aytc6TL9XavPmM1kQAAABE"], referer: binance.com
[Sun Nov 23 10:42:59.593872 2025] [:error] [pid 38738:tid 38755] [client 54.226.125.235:37816] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aSJ0swytc6TL9XavPmM-XwAAAA0"]
[Sun Nov 23 13:18:56.297450 2025] [:error] [pid 44652:tid 44730] [client 137.184.165.127:49152] [client 137.184.165.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.165.127, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aSKZQNiQFwsyXQDhwyBS1wAAARg"]
[Sun Nov 23 13:18:57.836177 2025] [:error] [pid 44652:tid 44725] [client 137.184.165.127:49152] [client 137.184.165.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.165.127, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aSKZQdiQFwsyXQDhwyBS3wAAARM"]
[Sun Nov 23 13:47:56.324533 2025] [:error] [pid 44652:tid 44712] [client 54.226.125.235:39730] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aSKgDNiQFwsyXQDhwyBZlgAAAQY"]
[Sun Nov 23 15:35:52.148783 2025] [:error] [pid 38738:tid 38758] [client 34.134.160.15:60293] [client 34.134.160.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.160.15, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSK5WAytc6TL9XavPmOwRgAAABA"]
[Sun Nov 23 15:35:59.310979 2025] [:error] [pid 38738:tid 38752] [client 34.134.160.15:60293] [client 34.134.160.15] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSK5Xwytc6TL9XavPmOwUgAAAAo"]
[Sun Nov 23 15:36:01.261827 2025] [:error] [pid 38738:tid 38746] [client 34.134.160.15:60293] [client 34.134.160.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.160.15, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSK5YQytc6TL9XavPmOwVAAAAAQ"]
[Sun Nov 23 16:38:01.563059 2025] [:error] [pid 38824:tid 38840] [client 35.196.195.189:64126] [client 35.196.195.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.195.189, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSLH6U8WZjXLvbHTHPefCAAAAM0"]
[Sun Nov 23 16:38:26.860581 2025] [:error] [pid 38824:tid 38828] [client 35.196.195.189:64126] [client 35.196.195.189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSLIAk8WZjXLvbHTHPegwAAAAME"]
[Sun Nov 23 16:38:33.156043 2025] [:error] [pid 38824:tid 38845] [client 35.196.195.189:64126] [client 35.196.195.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.195.189, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSLICU8WZjXLvbHTHPehPAAAANI"]
[Sun Nov 23 16:43:06.843205 2025] [autoindex:error] [pid 14602:tid 14626] [client 140.99.1.63:54559] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:07.020362 2025] [autoindex:error] [pid 14602:tid 14627] [client 140.99.1.63:54559] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:07.485070 2025] [autoindex:error] [pid 14602:tid 14632] [client 140.99.1.63:54559] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:07.587753 2025] [autoindex:error] [pid 14602:tid 14643] [client 140.99.1.63:54559] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 18:48:58.330823 2025] [:error] [pid 17534:tid 17556] [client 85.11.167.4:55112] [client 85.11.167.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.11.167.4, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSLmmnPX9nXBrhgM8sx1iwAAAdQ"]
[Sun Nov 23 22:43:30.627343 2025] [:error] [pid 16066:tid 16086] [client 172.70.247.8:13756] [client 172.70.247.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aSMdkvq-c47Q5mW5E9HZKgAAAZE"]
[Mon Nov 24 00:12:31.431951 2025] [:error] [pid 38738:tid 38755] [client 34.70.59.56:51700] [client 34.70.59.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.59.56, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSMybwytc6TL9XavPmNn_wAAAA0"]
[Mon Nov 24 00:12:37.153152 2025] [:error] [pid 38738:tid 38761] [client 34.70.59.56:51700] [client 34.70.59.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSMydQytc6TL9XavPmNoBgAAABM"]
[Mon Nov 24 00:12:38.991778 2025] [:error] [pid 38738:tid 38743] [client 34.70.59.56:51700] [client 34.70.59.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.59.56, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSMydgytc6TL9XavPmNoDwAAAAE"]
[Mon Nov 24 00:55:13.805474 2025] [:error] [pid 1452:tid 1473] [client 172.71.246.237:10554] [client 172.71.246.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aSM8cRKZkEEyVNVXr_m-kQAAAFA"]
[Mon Nov 24 01:39:24.967638 2025] [:error] [pid 1453:tid 1501] [client 193.37.33.96:47421] [client 193.37.33.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aSNGzBUBCt7LU0bO_GBRRwAAAJA"]
[Mon Nov 24 02:13:21.003872 2025] [:error] [pid 1452:tid 1468] [client 136.117.248.7:57229] [client 136.117.248.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.248.7, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSNOwRKZkEEyVNVXr_nR8wAAAEs"]
[Mon Nov 24 02:13:29.056985 2025] [:error] [pid 1452:tid 1466] [client 136.117.248.7:57229] [client 136.117.248.7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSNOyRKZkEEyVNVXr_nSAAAAAEk"]
[Mon Nov 24 02:13:31.230304 2025] [:error] [pid 1452:tid 1462] [client 136.117.248.7:57229] [client 136.117.248.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.248.7, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSNOyxKZkEEyVNVXr_nSBAAAAEU"]
[Mon Nov 24 08:19:59.064939 2025] [:error] [pid 48601:tid 48675] [client 103.65.237.124:57799] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "aSOkr4MM4MaVTk74-AYoIwAAAhI"]
[Mon Nov 24 08:19:59.470718 2025] [:error] [pid 48600:tid 48638] [client 103.65.237.124:57802] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSOkr_tOzSUAQvWVjBcKKwAAAcg"]
[Mon Nov 24 15:44:41.302092 2025] [:error] [pid 16593:tid 16596] [client 16.52.58.70:37736] [client 16.52.58.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aSQM6RVGznHBJI2LKpQvCgAAAoE"]
[Mon Nov 24 15:57:39.855168 2025] [:error] [pid 48599:tid 48622] [client 44.234.117.48:59974] [client 44.234.117.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aSQP85zvu6PDJiRKE3IUwgAAAZM"]
[Mon Nov 24 21:39:23.465288 2025] [:error] [pid 16549:tid 16566] [client 52.165.159.173:2431] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bq.php"] [unique_id "aSRgC6eWW19A99PUw_dm9QAAAU4"]
[Mon Nov 24 21:39:24.275950 2025] [:error] [pid 9630:tid 9638] [client 52.165.159.173:2237] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bq.php"] [unique_id "aSRgDCrSgUgPGkizt2o2jQAAAEY"]
[Mon Nov 24 21:39:26.281427 2025] [:error] [pid 16441:tid 16445] [client 52.165.159.173:1985] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bq.php"] [unique_id "aSRgDoq_bc5MOa9HflmRUgAAAIE"]
[Mon Nov 24 21:39:27.578692 2025] [:error] [pid 16441:tid 16452] [client 52.165.159.173:6899] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bq.php"] [unique_id "aSRgD4q_bc5MOa9HflmRVAAAAIg"]
[Mon Nov 24 21:39:28.220093 2025] [:error] [pid 48599:tid 48611] [client 52.165.159.173:2015] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tro.php"] [unique_id "aSRgEJzvu6PDJiRKE3JO9gAAAYg"]
[Mon Nov 24 21:39:28.990772 2025] [:error] [pid 16593:tid 16596] [client 52.165.159.173:3530] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tro.php"] [unique_id "aSRgEBVGznHBJI2LKpRrBQAAAoE"]
[Mon Nov 24 21:39:29.928213 2025] [:error] [pid 48601:tid 48676] [client 52.165.159.173:2010] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tro.php"] [unique_id "aSRgEYMM4MaVTk74-AblxAAAAhM"]
[Mon Nov 24 21:39:31.126344 2025] [:error] [pid 16549:tid 16571] [client 52.165.159.173:1199] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tro.php"] [unique_id "aSRgE6eWW19A99PUw_dm_QAAAVI"]
[Mon Nov 24 21:39:32.145265 2025] [:error] [pid 16516:tid 16540] [client 52.165.159.173:6905] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lov.php"] [unique_id "aSRgFPqZbniwaNwL8XkLtAAAARU"]
[Mon Nov 24 21:39:32.876156 2025] [:error] [pid 16441:tid 16460] [client 52.165.159.173:3458] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lov.php"] [unique_id "aSRgFIq_bc5MOa9HflmRWwAAAJA"]
[Mon Nov 24 21:39:33.950769 2025] [:error] [pid 9630:tid 9639] [client 52.165.159.173:3520] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lov.php"] [unique_id "aSRgFSrSgUgPGkizt2o2mwAAAEc"]
[Mon Nov 24 21:39:35.389664 2025] [:error] [pid 16549:tid 16576] [client 52.165.159.173:3555] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lov.php"] [unique_id "aSRgF6eWW19A99PUw_dnBQAAAVc"]
[Mon Nov 24 21:39:36.481305 2025] [:error] [pid 49900:tid 49920] [client 52.165.159.173:3560] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsz.php"] [unique_id "aSRgGDCyPLrvg06aorlH9QAAABI"]
[Mon Nov 24 21:39:37.324497 2025] [:error] [pid 9630:tid 9645] [client 52.165.159.173:3161] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsz.php"] [unique_id "aSRgGSrSgUgPGkizt2o2pAAAAE0"]
[Mon Nov 24 21:39:38.334878 2025] [:error] [pid 48599:tid 48611] [client 52.165.159.173:6855] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsz.php"] [unique_id "aSRgGpzvu6PDJiRKE3JPCAAAAYg"]
[Mon Nov 24 21:39:40.444659 2025] [:error] [pid 49900:tid 49912] [client 52.165.159.173:2791] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsz.php"] [unique_id "aSRgHDCyPLrvg06aorlH-QAAAAo"]
[Mon Nov 24 21:39:42.089495 2025] [:error] [pid 49900:tid 49904] [client 52.165.159.173:1175] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/73106.php"] [unique_id "aSRgHjCyPLrvg06aorlH-wAAAAI"]
[Mon Nov 24 21:39:44.453061 2025] [:error] [pid 49900:tid 49903] [client 52.165.159.173:1991] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/73106.php"] [unique_id "aSRgIDCyPLrvg06aorlH_wAAAAE"]
[Mon Nov 24 21:39:45.638775 2025] [:error] [pid 16441:tid 16461] [client 52.165.159.173:1160] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/73106.php"] [unique_id "aSRgIYq_bc5MOa9HflmRaQAAAJE"]
[Mon Nov 24 21:39:47.149862 2025] [:error] [pid 9630:tid 9637] [client 52.165.159.173:2420] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/73106.php"] [unique_id "aSRgIyrSgUgPGkizt2o2tAAAAEU"]
[Mon Nov 24 21:39:48.676319 2025] [:error] [pid 16441:tid 16444] [client 52.165.159.173:6176] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nas.php"] [unique_id "aSRgJIq_bc5MOa9HflmRbQAAAIA"]
[Mon Nov 24 21:39:49.586799 2025] [:error] [pid 48601:tid 48673] [client 52.165.159.173:1203] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nas.php"] [unique_id "aSRgJYMM4MaVTk74-Abl2AAAAhA"]
[Mon Nov 24 21:39:50.865856 2025] [:error] [pid 16593:tid 16618] [client 52.165.159.173:3562] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nas.php"] [unique_id "aSRgJhVGznHBJI2LKpRrHAAAApc"]
[Mon Nov 24 21:39:51.900310 2025] [:error] [pid 9630:tid 9640] [client 52.165.159.173:6130] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nas.php"] [unique_id "aSRgJyrSgUgPGkizt2o2uwAAAEg"]
[Mon Nov 24 21:39:52.768459 2025] [:error] [pid 9630:tid 9650] [client 52.165.159.173:1167] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aSRgKCrSgUgPGkizt2o2vwAAAFI"]
[Mon Nov 24 21:39:54.045230 2025] [:error] [pid 16441:tid 16455] [client 52.165.159.173:6849] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aSRgKoq_bc5MOa9HflmRcwAAAIs"]
[Mon Nov 24 21:39:54.834503 2025] [:error] [pid 49900:tid 49924] [client 52.165.159.173:7568] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aSRgKjCyPLrvg06aorlIBQAAABY"]
[Mon Nov 24 21:39:55.861126 2025] [:error] [pid 48600:tid 48639] [client 52.165.159.173:7555] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aSRgK_tOzSUAQvWVjBehHgAAAck"]
[Mon Nov 24 21:39:57.497121 2025] [:error] [pid 48600:tid 48641] [client 52.165.159.173:6083] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aol7.php"] [unique_id "aSRgLftOzSUAQvWVjBehIAAAAcs"]
[Mon Nov 24 21:39:58.614509 2025] [:error] [pid 48599:tid 48621] [client 52.165.159.173:5203] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aol7.php"] [unique_id "aSRgLpzvu6PDJiRKE3JPGAAAAZI"]
[Mon Nov 24 21:39:59.388972 2025] [:error] [pid 16549:tid 16577] [client 52.165.159.173:1045] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aol7.php"] [unique_id "aSRgL6eWW19A99PUw_dnEAAAAVg"]
[Mon Nov 24 21:40:00.812862 2025] [:error] [pid 16549:tid 16552] [client 52.165.159.173:5216] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aol7.php"] [unique_id "aSRgMKeWW19A99PUw_dnEgAAAUA"]
[Mon Nov 24 21:40:01.642933 2025] [:error] [pid 16593:tid 16611] [client 52.165.159.173:3580] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wui.php"] [unique_id "aSRgMRVGznHBJI2LKpRrLAAAApA"]
[Mon Nov 24 21:40:02.611540 2025] [:error] [pid 16593:tid 16612] [client 52.165.159.173:5234] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wui.php"] [unique_id "aSRgMhVGznHBJI2LKpRrLQAAApE"]
[Mon Nov 24 21:40:04.132732 2025] [:error] [pid 16549:tid 16554] [client 52.165.159.173:7123] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wui.php"] [unique_id "aSRgNKeWW19A99PUw_dnFgAAAUI"]
[Mon Nov 24 21:40:05.237535 2025] [:error] [pid 9630:tid 9638] [client 52.165.159.173:2176] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wui.php"] [unique_id "aSRgNSrSgUgPGkizt2o2xQAAAEY"]
[Mon Nov 24 21:40:06.464055 2025] [:error] [pid 16441:tid 16461] [client 52.165.159.173:2630] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSRgNoq_bc5MOa9HflmRiAAAAJE"]
[Mon Nov 24 21:40:07.937211 2025] [:error] [pid 48600:tid 48638] [client 52.165.159.173:2189] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSRgN_tOzSUAQvWVjBehKAAAAcg"]
[Mon Nov 24 21:40:09.096029 2025] [:error] [pid 16441:tid 16444] [client 52.165.159.173:6133] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSRgOYq_bc5MOa9HflmRjgAAAIA"]
[Mon Nov 24 21:40:09.848994 2025] [:error] [pid 49900:tid 49906] [client 52.165.159.173:7562] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSRgOTCyPLrvg06aorlIGQAAAAQ"]
[Mon Nov 24 21:40:11.472789 2025] [:error] [pid 16549:tid 16559] [client 52.165.159.173:3550] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/poj.php"] [unique_id "aSRgO6eWW19A99PUw_dnGAAAAUc"]
[Mon Nov 24 21:40:13.199047 2025] [:error] [pid 16549:tid 16566] [client 52.165.159.173:6142] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/poj.php"] [unique_id "aSRgPaeWW19A99PUw_dnGgAAAU4"]
[Mon Nov 24 21:40:14.613934 2025] [:error] [pid 16549:tid 16577] [client 52.165.159.173:7597] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/poj.php"] [unique_id "aSRgPqeWW19A99PUw_dnHgAAAVg"]
[Mon Nov 24 21:40:15.962097 2025] [:error] [pid 48600:tid 48653] [client 52.165.159.173:5201] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/poj.php"] [unique_id "aSRgP_tOzSUAQvWVjBehNAAAAdc"]
[Mon Nov 24 21:40:17.752100 2025] [:error] [pid 48601:tid 48670] [client 52.165.159.173:3559] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aSRgQYMM4MaVTk74-Abl7gAAAg0"]
[Mon Nov 24 21:40:18.458478 2025] [:error] [pid 9630:tid 9642] [client 52.165.159.173:3558] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aSRgQirSgUgPGkizt2o20QAAAEo"]
[Mon Nov 24 21:40:20.922039 2025] [:error] [pid 16516:tid 16535] [client 52.165.159.173:5134] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aSRgRPqZbniwaNwL8XkLygAAARA"]
[Mon Nov 24 21:41:02.847177 2025] [:error] [pid 48600:tid 48651] [client 52.165.159.173:5154] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh77.php"] [unique_id "aSRgbvtOzSUAQvWVjBehTAAAAdU"]
[Mon Nov 24 21:41:04.014275 2025] [:error] [pid 49900:tid 49922] [client 52.165.159.173:7464] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh77.php"] [unique_id "aSRgcDCyPLrvg06aorlIVwAAABQ"]
[Mon Nov 24 21:41:05.572059 2025] [:error] [pid 48600:tid 48654] [client 52.165.159.173:4014] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh77.php"] [unique_id "aSRgcftOzSUAQvWVjBehTwAAAdg"]
[Mon Nov 24 21:41:07.011518 2025] [:error] [pid 48600:tid 48645] [client 52.165.159.173:4020] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh77.php"] [unique_id "aSRgc_tOzSUAQvWVjBehUQAAAc8"]
[Mon Nov 24 21:41:08.034419 2025] [:error] [pid 16441:tid 16446] [client 52.165.159.173:4689] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aSRgdIq_bc5MOa9HflmRugAAAII"]
[Mon Nov 24 21:41:09.214107 2025] [:error] [pid 16593:tid 16608] [client 52.165.159.173:6509] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aSRgdRVGznHBJI2LKpRrTAAAAo0"]
[Mon Nov 24 21:41:10.653953 2025] [:error] [pid 9630:tid 9633] [client 52.165.159.173:4166] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aSRgdirSgUgPGkizt2o27wAAAEE"]
[Mon Nov 24 21:41:12.200294 2025] [:error] [pid 16441:tid 16454] [client 52.165.159.173:4208] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aSRgeIq_bc5MOa9HflmRvwAAAIo"]
[Mon Nov 24 21:41:13.743215 2025] [:error] [pid 49900:tid 49910] [client 52.165.159.173:4450] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hey.php"] [unique_id "aSRgeTCyPLrvg06aorlIbwAAAAg"]
[Mon Nov 24 21:41:14.569845 2025] [:error] [pid 48600:tid 48650] [client 52.165.159.173:6475] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hey.php"] [unique_id "aSRgevtOzSUAQvWVjBehWAAAAdQ"]
[Mon Nov 24 21:41:16.325199 2025] [:error] [pid 9630:tid 9641] [client 52.165.159.173:2944] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hey.php"] [unique_id "aSRgfCrSgUgPGkizt2o29gAAAEk"]
[Mon Nov 24 21:41:17.622753 2025] [:error] [pid 9630:tid 9655] [client 52.165.159.173:1864] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hey.php"] [unique_id "aSRgfSrSgUgPGkizt2o29wAAAFc"]
[Mon Nov 24 21:41:18.852268 2025] [:error] [pid 16441:tid 16448] [client 52.165.159.173:7760] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ed35f.php"] [unique_id "aSRgfoq_bc5MOa9HflmRyQAAAIQ"]
[Mon Nov 24 21:41:20.419735 2025] [:error] [pid 48688:tid 48700] [client 52.165.159.173:7778] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ed35f.php"] [unique_id "aSRggBm2q1FkzLam7A3O0QAAAkg"]
[Mon Nov 24 21:41:21.516244 2025] [:error] [pid 48601:tid 48667] [client 52.165.159.173:6923] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ed35f.php"] [unique_id "aSRggYMM4MaVTk74-AbmHAAAAgo"]
[Mon Nov 24 21:41:22.575565 2025] [:error] [pid 49900:tid 49911] [client 52.165.159.173:2339] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ed35f.php"] [unique_id "aSRggjCyPLrvg06aorlIdwAAAAk"]
[Mon Nov 24 21:41:24.012467 2025] [:error] [pid 48599:tid 48605] [client 52.165.159.173:3334] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reyha.php"] [unique_id "aSRghJzvu6PDJiRKE3JPYgAAAYI"]
[Mon Nov 24 21:41:25.278514 2025] [:error] [pid 16593:tid 16615] [client 52.165.159.173:2059] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reyha.php"] [unique_id "aSRghRVGznHBJI2LKpRrVQAAApQ"]
[Mon Nov 24 21:41:26.285183 2025] [:error] [pid 48599:tid 48623] [client 52.165.159.173:1651] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reyha.php"] [unique_id "aSRghpzvu6PDJiRKE3JPZAAAAZQ"]
[Mon Nov 24 21:41:27.200023 2025] [:error] [pid 48599:tid 48617] [client 52.165.159.173:6942] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reyha.php"] [unique_id "aSRgh5zvu6PDJiRKE3JPZgAAAY4"]
[Mon Nov 24 21:41:28.220295 2025] [:error] [pid 16593:tid 16614] [client 52.165.159.173:7359] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lok.php"] [unique_id "aSRgiBVGznHBJI2LKpRrVwAAApM"]
[Mon Nov 24 21:41:29.366531 2025] [:error] [pid 48601:tid 48658] [client 52.165.159.173:6531] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lok.php"] [unique_id "aSRgiYMM4MaVTk74-AbmIgAAAgE"]
[Mon Nov 24 21:41:30.497265 2025] [:error] [pid 48688:tid 48716] [client 52.165.159.173:2323] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lok.php"] [unique_id "aSRgihm2q1FkzLam7A3O1wAAAlg"]
[Mon Nov 24 21:41:31.418678 2025] [:error] [pid 9630:tid 9656] [client 52.165.159.173:2367] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lok.php"] [unique_id "aSRgiyrSgUgPGkizt2o3BQAAAFg"]
[Mon Nov 24 21:41:32.454376 2025] [:error] [pid 48601:tid 48666] [client 52.165.159.173:2060] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hgm.php"] [unique_id "aSRgjIMM4MaVTk74-AbmIwAAAgk"]
[Mon Nov 24 21:41:33.275717 2025] [:error] [pid 48599:tid 48624] [client 52.165.159.173:1238] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hgm.php"] [unique_id "aSRgjZzvu6PDJiRKE3JPagAAAZU"]
[Mon Nov 24 21:41:34.477433 2025] [:error] [pid 49900:tid 49915] [client 52.165.159.173:6371] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hgm.php"] [unique_id "aSRgjjCyPLrvg06aorlIiQAAAA0"]
[Mon Nov 24 21:41:34.955221 2025] [:error] [pid 16593:tid 16616] [client 52.165.159.173:1233] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hgm.php"] [unique_id "aSRgjhVGznHBJI2LKpRrXQAAApU"]
[Mon Nov 24 21:41:36.588434 2025] [:error] [pid 16516:tid 16534] [client 52.165.159.173:7759] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nax.php"] [unique_id "aSRgkPqZbniwaNwL8XkL9wAAAQ8"]
[Mon Nov 24 21:41:37.580155 2025] [:error] [pid 16516:tid 16530] [client 52.165.159.173:3934] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nax.php"] [unique_id "aSRgkfqZbniwaNwL8XkL-QAAAQs"]
[Mon Nov 24 21:41:39.046662 2025] [:error] [pid 16593:tid 16618] [client 52.165.159.173:6389] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nax.php"] [unique_id "aSRgkxVGznHBJI2LKpRrXgAAApc"]
[Mon Nov 24 21:41:39.974915 2025] [:error] [pid 16441:tid 16466] [client 52.165.159.173:6340] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nax.php"] [unique_id "aSRgk4q_bc5MOa9HflmR2wAAAJY"]
[Mon Nov 24 21:41:41.159803 2025] [:error] [pid 16516:tid 16523] [client 52.165.159.173:2337] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xrp.php"] [unique_id "aSRglfqZbniwaNwL8XkL-gAAAQQ"]
[Mon Nov 24 21:41:42.082478 2025] [:error] [pid 48599:tid 48605] [client 52.165.159.173:4138] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xrp.php"] [unique_id "aSRglpzvu6PDJiRKE3JPcgAAAYI"]
[Mon Nov 24 21:41:43.843942 2025] [:error] [pid 9630:tid 9645] [client 52.165.159.173:7406] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xrp.php"] [unique_id "aSRglyrSgUgPGkizt2o3CQAAAE0"]
[Mon Nov 24 21:41:45.439462 2025] [:error] [pid 16441:tid 16468] [client 52.165.159.173:5865] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xrp.php"] [unique_id "aSRgmYq_bc5MOa9HflmR5QAAAJg"]
[Mon Nov 24 21:41:47.554628 2025] [:error] [pid 48601:tid 48660] [client 52.165.159.173:3585] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypltspd.php"] [unique_id "aSRgm4MM4MaVTk74-AbmMwAAAgM"]
[Mon Nov 24 21:41:49.095837 2025] [:error] [pid 49900:tid 49904] [client 52.165.159.173:2289] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypltspd.php"] [unique_id "aSRgnTCyPLrvg06aorlIkAAAAAI"]
[Mon Nov 24 21:41:50.192961 2025] [:error] [pid 48601:tid 48671] [client 52.165.159.173:5720] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypltspd.php"] [unique_id "aSRgnoMM4MaVTk74-AbmNwAAAg4"]
[Mon Nov 24 21:41:52.102707 2025] [:error] [pid 16593:tid 16610] [client 52.165.159.173:2082] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypltspd.php"] [unique_id "aSRgoBVGznHBJI2LKpRrZgAAAo8"]
[Mon Nov 24 21:41:54.202807 2025] [:error] [pid 16593:tid 16598] [client 52.165.159.173:1925] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc.php"] [unique_id "aSRgohVGznHBJI2LKpRrZwAAAoM"]
[Mon Nov 24 21:41:55.328785 2025] [:error] [pid 16441:tid 16446] [client 52.165.159.173:5539] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc.php"] [unique_id "aSRgo4q_bc5MOa9HflmSBAAAAII"]
[Mon Nov 24 21:41:57.645277 2025] [:error] [pid 48601:tid 48675] [client 52.165.159.173:2056] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc.php"] [unique_id "aSRgpYMM4MaVTk74-AbmOwAAAhI"]
[Mon Nov 24 21:41:59.430920 2025] [:error] [pid 49900:tid 49922] [client 52.165.159.173:5394] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc.php"] [unique_id "aSRgpzCyPLrvg06aorlInQAAABQ"]
[Mon Nov 24 21:42:43.400957 2025] [:error] [pid 16441:tid 16461] [client 52.165.159.173:6650] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/show/asa.php"] [unique_id "aSRg04q_bc5MOa9HflmSPQAAAJE"]
[Mon Nov 24 21:42:45.815113 2025] [:error] [pid 16441:tid 16462] [client 52.165.159.173:5917] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/show/asa.php"] [unique_id "aSRg1Yq_bc5MOa9HflmSPwAAAJI"]
[Mon Nov 24 21:42:47.585170 2025] [:error] [pid 48600:tid 48644] [client 52.165.159.173:3929] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/show/asa.php"] [unique_id "aSRg1_tOzSUAQvWVjBehkAAAAc4"]
[Mon Nov 24 21:42:48.430523 2025] [:error] [pid 48601:tid 48675] [client 52.165.159.173:4506] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/show/asa.php"] [unique_id "aSRg2IMM4MaVTk74-AbmVgAAAhI"]
[Mon Nov 24 21:42:51.670972 2025] [:error] [pid 9630:tid 9642] [client 52.165.159.173:2574] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nae.php"] [unique_id "aSRg2yrSgUgPGkizt2o3TQAAAEo"]
[Mon Nov 24 21:42:53.535055 2025] [:error] [pid 48600:tid 48650] [client 52.165.159.173:3772] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nae.php"] [unique_id "aSRg3ftOzSUAQvWVjBehlgAAAdQ"]
[Mon Nov 24 21:42:56.363029 2025] [:error] [pid 48601:tid 48665] [client 52.165.159.173:2588] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nae.php"] [unique_id "aSRg4IMM4MaVTk74-AbmWwAAAgg"]
[Mon Nov 24 21:42:58.192786 2025] [:error] [pid 16549:tid 16562] [client 52.165.159.173:6799] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nae.php"] [unique_id "aSRg4qeWW19A99PUw_dnjAAAAUo"]
[Mon Nov 24 21:42:59.797654 2025] [:error] [pid 16441:tid 16454] [client 52.165.159.173:3435] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tua.php"] [unique_id "aSRg44q_bc5MOa9HflmSTAAAAIo"]
[Mon Nov 24 21:43:02.136616 2025] [:error] [pid 49900:tid 49919] [client 52.165.159.173:6806] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tua.php"] [unique_id "aSRg5jCyPLrvg06aorlIxgAAABE"]
[Mon Nov 24 21:43:04.363505 2025] [:error] [pid 9630:tid 9647] [client 52.165.159.173:5984] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tua.php"] [unique_id "aSRg6CrSgUgPGkizt2o3YAAAAE8"]
[Mon Nov 24 21:43:06.334202 2025] [:error] [pid 16549:tid 16561] [client 52.165.159.173:3440] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tua.php"] [unique_id "aSRg6qeWW19A99PUw_dnjgAAAUk"]
[Mon Nov 24 21:43:09.845138 2025] [:error] [pid 48688:tid 48694] [client 52.165.159.173:5503] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/exhitrgp.php"] [unique_id "aSRg7Rm2q1FkzLam7A3PJgAAAkI"]
[Mon Nov 24 21:43:10.783943 2025] [:error] [pid 16593:tid 16612] [client 52.165.159.173:3739] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/exhitrgp.php"] [unique_id "aSRg7hVGznHBJI2LKpRrkgAAApE"]
[Mon Nov 24 21:43:12.461770 2025] [:error] [pid 16549:tid 16557] [client 52.165.159.173:6812] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/exhitrgp.php"] [unique_id "aSRg8KeWW19A99PUw_dnlAAAAUU"]
[Mon Nov 24 21:43:13.750271 2025] [:error] [pid 16593:tid 16597] [client 52.165.159.173:5957] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/exhitrgp.php"] [unique_id "aSRg8RVGznHBJI2LKpRrkwAAAoI"]
[Mon Nov 24 21:43:15.216875 2025] [:error] [pid 16549:tid 16576] [client 52.165.159.173:2748] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4ff11.php"] [unique_id "aSRg86eWW19A99PUw_dnmAAAAVc"]
[Mon Nov 24 21:43:16.451956 2025] [:error] [pid 16441:tid 16465] [client 52.165.159.173:5322] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4ff11.php"] [unique_id "aSRg9Iq_bc5MOa9HflmSZQAAAJU"]
[Mon Nov 24 21:43:18.143203 2025] [:error] [pid 48688:tid 48716] [client 52.165.159.173:6834] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4ff11.php"] [unique_id "aSRg9hm2q1FkzLam7A3PKAAAAlg"]
[Mon Nov 24 21:43:20.602834 2025] [:error] [pid 48599:tid 48603] [client 52.165.159.173:5966] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4ff11.php"] [unique_id "aSRg-Jzvu6PDJiRKE3JPvAAAAYA"]
[Mon Nov 24 21:43:22.474992 2025] [:error] [pid 49900:tid 49902] [client 52.165.159.173:1805] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nbr.php"] [unique_id "aSRg-jCyPLrvg06aorlI3AAAAAA"]
[Mon Nov 24 21:43:24.298745 2025] [:error] [pid 48599:tid 48614] [client 52.165.159.173:6450] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nbr.php"] [unique_id "aSRg_Jzvu6PDJiRKE3JPvgAAAYs"]
[Mon Nov 24 21:43:26.419179 2025] [:error] [pid 49900:tid 49917] [client 52.165.159.173:3415] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nbr.php"] [unique_id "aSRg_jCyPLrvg06aorlI3QAAAA8"]
[Mon Nov 24 21:43:28.093805 2025] [:error] [pid 16593:tid 16603] [client 52.165.159.173:2801] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nbr.php"] [unique_id "aSRhABVGznHBJI2LKpRrlgAAAog"]
[Mon Nov 24 21:43:30.250270 2025] [:error] [pid 48688:tid 48712] [client 52.165.159.173:4555] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/o2.php"] [unique_id "aSRhAhm2q1FkzLam7A3PMwAAAlQ"]
[Mon Nov 24 21:43:31.623088 2025] [:error] [pid 16593:tid 16598] [client 52.165.159.173:5989] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/o2.php"] [unique_id "aSRhAxVGznHBJI2LKpRrmAAAAoM"]
[Mon Nov 24 21:43:33.024792 2025] [:error] [pid 49900:tid 49912] [client 52.165.159.173:4551] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/o2.php"] [unique_id "aSRhBTCyPLrvg06aorlI5QAAAAo"]
[Mon Nov 24 21:43:34.810442 2025] [:error] [pid 16441:tid 16450] [client 52.165.159.173:2708] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/o2.php"] [unique_id "aSRhBoq_bc5MOa9HflmScQAAAIY"]
[Mon Nov 24 21:43:35.434093 2025] [:error] [pid 16441:tid 16445] [client 52.165.159.173:2993] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kla.php"] [unique_id "aSRhB4q_bc5MOa9HflmScwAAAIE"]
[Mon Nov 24 21:43:36.684643 2025] [:error] [pid 49900:tid 49923] [client 52.165.159.173:6408] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kla.php"] [unique_id "aSRhCDCyPLrvg06aorlI6AAAABU"]
[Mon Nov 24 21:43:38.184988 2025] [:error] [pid 49900:tid 49902] [client 52.165.159.173:2759] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kla.php"] [unique_id "aSRhCjCyPLrvg06aorlI6QAAAAA"]
[Mon Nov 24 21:43:39.466712 2025] [:error] [pid 48600:tid 48649] [client 52.165.159.173:2154] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kla.php"] [unique_id "aSRhC_tOzSUAQvWVjBehqwAAAdM"]
[Mon Nov 24 21:43:40.115714 2025] [:error] [pid 48601:tid 48664] [client 52.165.159.173:6421] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1254.php"] [unique_id "aSRhDIMM4MaVTk74-AbmgQAAAgc"]
[Mon Nov 24 21:43:40.877231 2025] [:error] [pid 48600:tid 48652] [client 52.165.159.173:2926] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1254.php"] [unique_id "aSRhDPtOzSUAQvWVjBehrAAAAdY"]
[Mon Nov 24 21:44:28.899848 2025] [:error] [pid 48599:tid 48626] [client 52.165.159.173:2121] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ryuk.php"] [unique_id "aSRhPJzvu6PDJiRKE3JP8gAAAZc"]
[Mon Nov 24 21:44:29.769139 2025] [:error] [pid 9630:tid 9655] [client 52.165.159.173:2421] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ryuk.php"] [unique_id "aSRhPSrSgUgPGkizt2o3rgAAAFc"]
[Mon Nov 24 21:44:31.993419 2025] [:error] [pid 48599:tid 48613] [client 52.165.159.173:7154] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ryuk.php"] [unique_id "aSRhP5zvu6PDJiRKE3JP9AAAAYo"]
[Mon Nov 24 21:44:33.227230 2025] [:error] [pid 16516:tid 16535] [client 52.165.159.173:7571] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ryuk.php"] [unique_id "aSRhQfqZbniwaNwL8XkMPAAAARA"]
[Mon Nov 24 21:44:34.530040 2025] [:error] [pid 16441:tid 16446] [client 52.165.159.173:7163] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aSRhQoq_bc5MOa9HflmSqgAAAII"]
[Mon Nov 24 21:44:36.289920 2025] [:error] [pid 16516:tid 16530] [client 52.165.159.173:6119] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aSRhRPqZbniwaNwL8XkMPQAAAQs"]
[Mon Nov 24 21:44:36.964760 2025] [:error] [pid 9630:tid 9650] [client 52.165.159.173:7146] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aSRhRCrSgUgPGkizt2o31wAAAFI"]
[Mon Nov 24 21:44:38.750879 2025] [:error] [pid 48688:tid 48695] [client 52.165.159.173:7613] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aSRhRhm2q1FkzLam7A3PbgAAAkM"]
[Mon Nov 24 21:44:39.829688 2025] [:error] [pid 16441:tid 16462] [client 52.165.159.173:7609] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6erg.php"] [unique_id "aSRhR4q_bc5MOa9HflmStgAAAJI"]
[Mon Nov 24 21:44:41.352642 2025] [:error] [pid 49900:tid 49913] [client 52.165.159.173:1782] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6erg.php"] [unique_id "aSRhSTCyPLrvg06aorlJFQAAAAs"]
[Mon Nov 24 21:44:42.671803 2025] [:error] [pid 9630:tid 9645] [client 52.165.159.173:3316] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6erg.php"] [unique_id "aSRhSirSgUgPGkizt2o34AAAAE0"]
[Mon Nov 24 21:44:43.836712 2025] [:error] [pid 9630:tid 9653] [client 52.165.159.173:1510] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6erg.php"] [unique_id "aSRhSyrSgUgPGkizt2o34QAAAFU"]
[Mon Nov 24 21:44:44.733262 2025] [:error] [pid 16516:tid 16520] [client 52.165.159.173:2205] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "aSRhTPqZbniwaNwL8XkMPwAAAQE"]
[Mon Nov 24 21:44:45.917291 2025] [:error] [pid 49900:tid 49910] [client 52.165.159.173:7556] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "aSRhTTCyPLrvg06aorlJKgAAAAg"]
[Mon Nov 24 21:44:47.319489 2025] [:error] [pid 16441:tid 16460] [client 52.165.159.173:7115] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "aSRhT4q_bc5MOa9HflmSwgAAAJA"]
[Mon Nov 24 21:44:48.757601 2025] [:error] [pid 16593:tid 16610] [client 52.165.159.173:5170] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "aSRhUBVGznHBJI2LKpRrtQAAAo8"]
[Mon Nov 24 21:44:50.104102 2025] [:error] [pid 49900:tid 49905] [client 52.165.159.173:2209] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/89.php"] [unique_id "aSRhUjCyPLrvg06aorlJMgAAAAM"]
[Mon Nov 24 21:44:51.933252 2025] [:error] [pid 48599:tid 48625] [client 52.165.159.173:1734] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/89.php"] [unique_id "aSRhU5zvu6PDJiRKE3JQAwAAAZY"]
[Mon Nov 24 21:44:53.761891 2025] [:error] [pid 48600:tid 48636] [client 52.165.159.173:3093] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/89.php"] [unique_id "aSRhVftOzSUAQvWVjBeh2wAAAcY"]
[Mon Nov 24 21:44:55.631028 2025] [:error] [pid 49900:tid 49911] [client 52.165.159.173:1379] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/89.php"] [unique_id "aSRhVzCyPLrvg06aorlJTgAAAAk"]
[Mon Nov 24 21:44:57.102142 2025] [:error] [pid 48601:tid 48672] [client 52.165.159.173:2855] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3.php"] [unique_id "aSRhWYMM4MaVTk74-AbmxwAAAg8"]
[Mon Nov 24 21:44:58.453201 2025] [:error] [pid 16441:tid 16467] [client 52.165.159.173:1370] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3.php"] [unique_id "aSRhWoq_bc5MOa9HflmS7QAAAJc"]
[Mon Nov 24 21:45:00.550733 2025] [:error] [pid 48599:tid 48610] [client 52.165.159.173:7513] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3.php"] [unique_id "aSRhXJzvu6PDJiRKE3JQDwAAAYc"]
[Mon Nov 24 21:45:01.283288 2025] [:error] [pid 9630:tid 9647] [client 52.165.159.173:4834] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3.php"] [unique_id "aSRhXSrSgUgPGkizt2o38gAAAE8"]
[Mon Nov 24 21:45:02.821823 2025] [:error] [pid 16441:tid 16453] [client 52.165.159.173:4808] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aSRhXoq_bc5MOa9HflmS-gAAAIk"]
[Mon Nov 24 21:45:05.088057 2025] [:error] [pid 9630:tid 9649] [client 52.165.159.173:5039] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aSRhYSrSgUgPGkizt2o39QAAAFE"]
[Mon Nov 24 21:45:07.023188 2025] [:error] [pid 48688:tid 48704] [client 52.165.159.173:7093] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aSRhYxm2q1FkzLam7A3PmgAAAkw"]
[Mon Nov 24 21:45:09.422881 2025] [:error] [pid 9630:tid 9646] [client 52.165.159.173:2869] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aSRhZSrSgUgPGkizt2o4BwAAAE4"]
[Mon Nov 24 21:45:10.514693 2025] [:error] [pid 49900:tid 49909] [client 52.165.159.173:1321] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sko.php"] [unique_id "aSRhZjCyPLrvg06aorlJUQAAAAc"]
[Mon Nov 24 21:45:11.656133 2025] [:error] [pid 48600:tid 48638] [client 52.165.159.173:7044] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sko.php"] [unique_id "aSRhZ_tOzSUAQvWVjBeh5wAAAcg"]
[Mon Nov 24 21:45:13.139442 2025] [:error] [pid 16441:tid 16460] [client 52.165.159.173:3668] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sko.php"] [unique_id "aSRhaYq_bc5MOa9HflmTBgAAAJA"]
[Mon Nov 24 21:45:14.025055 2025] [:error] [pid 49900:tid 49917] [client 52.165.159.173:1317] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sko.php"] [unique_id "aSRhajCyPLrvg06aorlJUwAAAA8"]
[Mon Nov 24 21:45:15.149896 2025] [:error] [pid 48601:tid 48679] [client 52.165.159.173:7507] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berm.php"] [unique_id "aSRha4MM4MaVTk74-Abm0wAAAhY"]
[Mon Nov 24 21:45:16.589491 2025] [:error] [pid 48601:tid 48658] [client 52.165.159.173:5814] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berm.php"] [unique_id "aSRhbIMM4MaVTk74-Abm1gAAAgE"]
[Mon Nov 24 21:45:18.581304 2025] [:error] [pid 49900:tid 49926] [client 52.165.159.173:4661] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berm.php"] [unique_id "aSRhbjCyPLrvg06aorlJXAAAABg"]
[Mon Nov 24 21:45:21.272414 2025] [:error] [pid 48600:tid 48635] [client 52.165.159.173:3993] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berm.php"] [unique_id "aSRhcftOzSUAQvWVjBeh8AAAAcU"]
[Mon Nov 24 21:45:23.299763 2025] [:error] [pid 9630:tid 9652] [client 52.165.159.173:4442] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wan.php"] [unique_id "aSRhcyrSgUgPGkizt2o4GgAAAFQ"]
[Mon Nov 24 21:45:23.993686 2025] [:error] [pid 48600:tid 48645] [client 52.165.159.173:7239] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wan.php"] [unique_id "aSRhc_tOzSUAQvWVjBeh8QAAAc8"]
[Mon Nov 24 21:45:24.640019 2025] [:error] [pid 48688:tid 48713] [client 52.165.159.173:1336] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wan.php"] [unique_id "aSRhdBm2q1FkzLam7A3PqwAAAlU"]
[Mon Nov 24 21:45:38.448506 2025] [:error] [pid 48601:tid 48663] [client 193.32.126.212:54542] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aSRhgoMM4MaVTk74-AbnAAAAAgY"]
[Mon Nov 24 21:45:38.939334 2025] [:error] [pid 16549:tid 16561] [client 193.32.126.212:55177] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aSRhgqeWW19A99PUw_doCQAAAUk"]
[Mon Nov 24 21:45:39.434621 2025] [:error] [pid 16516:tid 16540] [client 193.32.126.212:55671] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhg_qZbniwaNwL8XkMggAAARU"]
[Mon Nov 24 21:46:17.925330 2025] [:error] [pid 16441:tid 16448] [client 52.165.159.173:3986] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Eva.php"] [unique_id "aSRhqYq_bc5MOa9HflmUCwAAAIQ"]
[Mon Nov 24 21:46:18.562348 2025] [:error] [pid 16441:tid 16452] [client 52.165.159.173:4103] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Eva.php"] [unique_id "aSRhqoq_bc5MOa9HflmUDQAAAIg"]
[Mon Nov 24 21:46:19.592226 2025] [:error] [pid 16441:tid 16461] [client 52.165.159.173:1415] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Eva.php"] [unique_id "aSRhq4q_bc5MOa9HflmUEAAAAJE"]
[Mon Nov 24 21:46:21.098567 2025] [:error] [pid 16441:tid 16456] [client 52.165.159.173:7331] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Eva.php"] [unique_id "aSRhrYq_bc5MOa9HflmUFwAAAIw"]
[Mon Nov 24 21:46:22.128906 2025] [:error] [pid 9630:tid 9640] [client 52.165.159.173:3336] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aSRhrirSgUgPGkizt2o4rQAAAEg"]
[Mon Nov 24 21:46:22.953640 2025] [:error] [pid 49900:tid 49916] [client 52.165.159.173:4785] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aSRhrjCyPLrvg06aorlJ-gAAAA4"]
[Mon Nov 24 21:46:24.622132 2025] [:error] [pid 49900:tid 49905] [client 52.165.159.173:3363] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aSRhsDCyPLrvg06aorlJ_QAAAAM"]
[Mon Nov 24 21:46:25.292667 2025] [:error] [pid 16441:tid 16462] [client 52.165.159.173:3354] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aSRhsYq_bc5MOa9HflmUIgAAAJI"]
[Mon Nov 24 21:46:26.725539 2025] [:error] [pid 16441:tid 16463] [client 52.165.159.173:7347] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aSRhsoq_bc5MOa9HflmUJgAAAJM"]
[Mon Nov 24 21:46:28.715649 2025] [:error] [pid 48599:tid 48609] [client 52.165.159.173:6046] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aSRhtJzvu6PDJiRKE3JQagAAAYY"]
[Mon Nov 24 21:46:29.194081 2025] [:error] [pid 16441:tid 16454] [client 52.165.159.173:4740] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aSRhtYq_bc5MOa9HflmULAAAAIo"]
[Mon Nov 24 21:46:29.971181 2025] [:error] [pid 48600:tid 48643] [client 52.165.159.173:1652] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aSRhtftOzSUAQvWVjBeiRQAAAc0"]
[Mon Nov 24 21:46:31.008209 2025] [:error] [pid 48600:tid 48648] [client 52.165.159.173:6018] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/giclass.php"] [unique_id "aSRht_tOzSUAQvWVjBeiRwAAAdI"]
[Mon Nov 24 21:46:32.403589 2025] [:error] [pid 48601:tid 48667] [client 52.165.159.173:6970] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/giclass.php"] [unique_id "aSRhuIMM4MaVTk74-AbnOAAAAgo"]
[Mon Nov 24 21:46:33.756746 2025] [:error] [pid 48688:tid 48709] [client 52.165.159.173:7358] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/giclass.php"] [unique_id "aSRhuRm2q1FkzLam7A3QCAAAAlE"]
[Mon Nov 24 21:46:34.689179 2025] [:error] [pid 16516:tid 16529] [client 52.165.159.173:1454] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/giclass.php"] [unique_id "aSRhuvqZbniwaNwL8XkMsgAAAQo"]
[Mon Nov 24 21:46:35.698223 2025] [:error] [pid 48601:tid 48660] [client 52.165.159.173:3345] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vip.php"] [unique_id "aSRhu4MM4MaVTk74-AbnOgAAAgM"]
[Mon Nov 24 21:46:36.318666 2025] [:error] [pid 16441:tid 16456] [client 52.165.159.173:1626] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vip.php"] [unique_id "aSRhvIq_bc5MOa9HflmUNAAAAIw"]
[Mon Nov 24 21:46:37.175872 2025] [:error] [pid 48599:tid 48625] [client 52.165.159.173:3388] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vip.php"] [unique_id "aSRhvZzvu6PDJiRKE3JQgwAAAZY"]
[Mon Nov 24 21:46:38.675178 2025] [:error] [pid 16593:tid 16618] [client 52.165.159.173:7319] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vip.php"] [unique_id "aSRhvhVGznHBJI2LKpRsRgAAApc"]
[Mon Nov 24 21:46:39.288261 2025] [:error] [pid 48599:tid 48619] [client 52.165.159.173:7327] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tox.php"] [unique_id "aSRhv5zvu6PDJiRKE3JQhAAAAZA"]
[Mon Nov 24 21:46:40.028053 2025] [:error] [pid 48599:tid 48626] [client 52.165.159.173:1252] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tox.php"] [unique_id "aSRhwJzvu6PDJiRKE3JQhQAAAZc"]
[Mon Nov 24 21:46:41.121232 2025] [:error] [pid 9630:tid 9639] [client 52.165.159.173:3367] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tox.php"] [unique_id "aSRhwSrSgUgPGkizt2o45AAAAEc"]
[Mon Nov 24 21:46:41.949399 2025] [:error] [pid 49900:tid 49925] [client 52.165.159.173:4753] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tox.php"] [unique_id "aSRhwTCyPLrvg06aorlKBgAAABc"]
[Mon Nov 24 21:46:42.587426 2025] [:error] [pid 48600:tid 48635] [client 52.165.159.173:6921] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xm.php"] [unique_id "aSRhwvtOzSUAQvWVjBeiVQAAAcU"]
[Mon Nov 24 21:46:43.226299 2025] [:error] [pid 9630:tid 9651] [client 52.165.159.173:1457] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xm.php"] [unique_id "aSRhwyrSgUgPGkizt2o45gAAAFM"]
[Mon Nov 24 21:46:43.851062 2025] [:error] [pid 48601:tid 48680] [client 52.165.159.173:1235] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xm.php"] [unique_id "aSRhw4MM4MaVTk74-AbnPQAAAhc"]
[Mon Nov 24 21:46:45.134591 2025] [:error] [pid 48600:tid 48639] [client 52.165.159.173:1216] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xm.php"] [unique_id "aSRhxftOzSUAQvWVjBeiVgAAAck"]
[Mon Nov 24 21:46:45.799235 2025] [:error] [pid 9630:tid 9646] [client 52.165.159.173:1658] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc1.php"] [unique_id "aSRhxSrSgUgPGkizt2o47AAAAE4"]
[Mon Nov 24 21:46:46.728012 2025] [:error] [pid 16441:tid 16462] [client 52.165.159.173:1450] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc1.php"] [unique_id "aSRhxoq_bc5MOa9HflmUPgAAAJI"]
[Mon Nov 24 21:46:48.170594 2025] [:error] [pid 49900:tid 49922] [client 52.165.159.173:1625] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc1.php"] [unique_id "aSRhyDCyPLrvg06aorlKCgAAABQ"]
[Mon Nov 24 21:46:48.981039 2025] [:error] [pid 16441:tid 16459] [client 52.165.159.173:1224] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc1.php"] [unique_id "aSRhyIq_bc5MOa9HflmUPwAAAI8"]
[Mon Nov 24 21:46:49.799126 2025] [:error] [pid 48599:tid 48612] [client 52.165.159.173:4158] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/33.php"] [unique_id "aSRhyZzvu6PDJiRKE3JQpQAAAYk"]
[Mon Nov 24 21:46:51.161608 2025] [:error] [pid 48688:tid 48711] [client 52.165.159.173:3335] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/33.php"] [unique_id "aSRhyxm2q1FkzLam7A3QEAAAAlM"]
[Mon Nov 24 21:46:52.136611 2025] [:error] [pid 16441:tid 16448] [client 52.165.159.173:4766] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/33.php"] [unique_id "aSRhzIq_bc5MOa9HflmUSAAAAIQ"]
[Mon Nov 24 21:46:53.655208 2025] [:error] [pid 16441:tid 16449] [client 52.165.159.173:1653] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/33.php"] [unique_id "aSRhzYq_bc5MOa9HflmUTAAAAIU"]
[Mon Nov 24 21:46:54.313602 2025] [:error] [pid 16593:tid 16602] [client 52.165.159.173:3822] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xml.php"] [unique_id "aSRhzhVGznHBJI2LKpRsYQAAAoc"]
[Mon Nov 24 21:46:55.086405 2025] [:error] [pid 16593:tid 16600] [client 52.165.159.173:3369] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xml.php"] [unique_id "aSRhzxVGznHBJI2LKpRsYgAAAoU"]
[Mon Nov 24 21:46:56.304574 2025] [:error] [pid 49900:tid 49926] [client 52.165.159.173:6060] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xml.php"] [unique_id "aSRh0DCyPLrvg06aorlKDQAAABg"]
[Mon Nov 24 21:46:57.044039 2025] [:error] [pid 49900:tid 49920] [client 52.165.159.173:6020] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xml.php"] [unique_id "aSRh0TCyPLrvg06aorlKDgAAABI"]
[Mon Nov 24 21:46:58.154232 2025] [:error] [pid 9630:tid 9645] [client 52.165.159.173:6042] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aSRh0irSgUgPGkizt2o5BgAAAE0"]
[Mon Nov 24 21:46:59.108518 2025] [:error] [pid 48599:tid 48625] [client 52.165.159.173:6949] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aSRh05zvu6PDJiRKE3JQqAAAAZY"]
[Mon Nov 24 21:47:00.331880 2025] [:error] [pid 48599:tid 48627] [client 52.165.159.173:1221] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aSRh1Jzvu6PDJiRKE3JQrAAAAZg"]
[Mon Nov 24 21:47:01.443214 2025] [:error] [pid 48599:tid 48603] [client 52.165.159.173:4796] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aSRh1Zzvu6PDJiRKE3JQrQAAAYA"]
[Mon Nov 24 21:47:02.391782 2025] [:error] [pid 48599:tid 48623] [client 52.165.159.173:4741] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wle.php"] [unique_id "aSRh1pzvu6PDJiRKE3JQrgAAAZQ"]
[Mon Nov 24 21:47:03.182632 2025] [:error] [pid 9630:tid 9652] [client 52.165.159.173:6034] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wle.php"] [unique_id "aSRh1yrSgUgPGkizt2o5EgAAAFQ"]
[Mon Nov 24 21:47:04.345468 2025] [:error] [pid 49900:tid 49904] [client 52.165.159.173:3365] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wle.php"] [unique_id "aSRh2DCyPLrvg06aorlKFgAAAAI"]
[Mon Nov 24 21:47:05.633731 2025] [:error] [pid 16549:tid 16554] [client 52.165.159.173:6922] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wle.php"] [unique_id "aSRh2aeWW19A99PUw_doRAAAAUI"]
[Mon Nov 24 21:47:06.433087 2025] [:error] [pid 16441:tid 16460] [client 52.165.159.173:6968] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "aSRh2oq_bc5MOa9HflmUUwAAAJA"]
[Mon Nov 24 21:47:07.078148 2025] [:error] [pid 16549:tid 16576] [client 52.165.159.173:4153] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "aSRh26eWW19A99PUw_doRQAAAVc"]
[Mon Nov 24 21:47:07.833223 2025] [:error] [pid 16441:tid 16454] [client 52.165.159.173:4799] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "aSRh24q_bc5MOa9HflmUVwAAAIo"]
[Mon Nov 24 21:47:08.483360 2025] [:error] [pid 9630:tid 9651] [client 52.165.159.173:4749] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "aSRh3CrSgUgPGkizt2o5HAAAAFM"]
[Mon Nov 24 21:47:09.047344 2025] [:error] [pid 9630:tid 9637] [client 52.165.159.173:3381] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tarc.php"] [unique_id "aSRh3SrSgUgPGkizt2o5IQAAAEU"]
[Mon Nov 24 21:47:09.680529 2025] [:error] [pid 16549:tid 16561] [client 52.165.159.173:4137] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tarc.php"] [unique_id "aSRh3aeWW19A99PUw_doRgAAAUk"]
[Mon Nov 24 21:47:10.882206 2025] [:error] [pid 16441:tid 16466] [client 52.165.159.173:6973] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tarc.php"] [unique_id "aSRh3oq_bc5MOa9HflmUZgAAAJY"]
[Mon Nov 24 21:47:11.797766 2025] [:error] [pid 48599:tid 48624] [client 52.165.159.173:4754] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tarc.php"] [unique_id "aSRh35zvu6PDJiRKE3JQsAAAAZU"]
[Mon Nov 24 21:47:12.551395 2025] [:error] [pid 9630:tid 9645] [client 52.165.159.173:6924] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mo.php"] [unique_id "aSRh4CrSgUgPGkizt2o5OgAAAE0"]
[Mon Nov 24 21:47:13.553432 2025] [:error] [pid 16549:tid 16575] [client 52.165.159.173:4763] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mo.php"] [unique_id "aSRh4aeWW19A99PUw_doRwAAAVY"]
[Mon Nov 24 21:47:14.461692 2025] [:error] [pid 48599:tid 48607] [client 52.165.159.173:4138] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mo.php"] [unique_id "aSRh4pzvu6PDJiRKE3JQtAAAAYQ"]
[Mon Nov 24 21:47:15.330002 2025] [:error] [pid 16441:tid 16452] [client 52.165.159.173:4106] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mo.php"] [unique_id "aSRh44q_bc5MOa9HflmUgAAAAIg"]
[Mon Nov 24 21:47:15.793052 2025] [:error] [pid 16549:tid 16562] [client 52.165.159.173:6297] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtp.php"] [unique_id "aSRh46eWW19A99PUw_doSAAAAUo"]
[Mon Nov 24 21:48:08.029461 2025] [:error] [pid 16441:tid 16448] [client 52.165.159.173:6019] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aSRiGIq_bc5MOa9HflmUsgAAAIQ"]
[Mon Nov 24 21:48:09.707946 2025] [:error] [pid 16441:tid 16456] [client 52.165.159.173:1437] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aSRiGYq_bc5MOa9HflmUswAAAIw"]
[Mon Nov 24 21:48:10.914514 2025] [:error] [pid 16441:tid 16458] [client 52.165.159.173:4198] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aSRiGoq_bc5MOa9HflmUtgAAAI4"]
[Mon Nov 24 21:48:12.890469 2025] [:error] [pid 48599:tid 48603] [client 52.165.159.173:1271] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aSRiHJzvu6PDJiRKE3JQxQAAAYA"]
[Mon Nov 24 21:48:16.167302 2025] [:error] [pid 48599:tid 48617] [client 52.165.159.173:4104] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/card.php"] [unique_id "aSRiIJzvu6PDJiRKE3JQyQAAAY4"]
[Mon Nov 24 21:48:18.495758 2025] [:error] [pid 48599:tid 48616] [client 52.165.159.173:1604] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/card.php"] [unique_id "aSRiIpzvu6PDJiRKE3JQzAAAAY0"]
[Mon Nov 24 21:48:19.139323 2025] [:error] [pid 48600:tid 48652] [client 52.165.159.173:6963] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/card.php"] [unique_id "aSRiI_tOzSUAQvWVjBeibQAAAdY"]
[Mon Nov 24 21:48:20.104610 2025] [:error] [pid 48599:tid 48619] [client 52.165.159.173:1247] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/card.php"] [unique_id "aSRiJJzvu6PDJiRKE3JQ1QAAAZA"]
[Mon Nov 24 21:48:20.865476 2025] [:error] [pid 48688:tid 48706] [client 52.165.159.173:3378] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aSRiJBm2q1FkzLam7A3QRgAAAk4"]
[Mon Nov 24 21:48:22.102221 2025] [:error] [pid 48599:tid 48622] [client 52.165.159.173:6919] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aSRiJpzvu6PDJiRKE3JQ4AAAAZM"]
[Mon Nov 24 21:48:24.221740 2025] [:error] [pid 16549:tid 16552] [client 52.165.159.173:6915] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aSRiKKeWW19A99PUw_dobQAAAUA"]
[Mon Nov 24 21:48:25.241536 2025] [:error] [pid 16441:tid 16461] [client 52.165.159.173:1223] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aSRiKYq_bc5MOa9HflmUvgAAAJE"]
[Mon Nov 24 21:48:26.093706 2025] [:error] [pid 16441:tid 16460] [client 52.165.159.173:6054] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aSRiKoq_bc5MOa9HflmUwAAAAJA"]
[Mon Nov 24 21:48:27.344116 2025] [:error] [pid 9630:tid 9632] [client 52.165.159.173:6038] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aSRiKyrSgUgPGkizt2o5iAAAAEA"]
[Mon Nov 24 21:48:28.354840 2025] [:error] [pid 16593:tid 16596] [client 52.165.159.173:1435] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aSRiLBVGznHBJI2LKpRsnwAAAoE"]
[Mon Nov 24 21:48:32.806985 2025] [:error] [pid 48601:tid 48672] [client 52.165.159.173:1611] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aSRiMIMM4MaVTk74-AbnmgAAAg8"]
[Mon Nov 24 21:48:33.393971 2025] [:error] [pid 48601:tid 48661] [client 52.165.159.173:1238] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aSRiMYMM4MaVTk74-AbnnAAAAgQ"]
[Mon Nov 24 21:48:34.419319 2025] [:error] [pid 48599:tid 48619] [client 52.165.159.173:6036] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aSRiMpzvu6PDJiRKE3JQ5gAAAZA"]
[Mon Nov 24 21:48:35.341801 2025] [:error] [pid 16549:tid 16574] [client 52.165.159.173:1651] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aSRiM6eWW19A99PUw_dobwAAAVU"]
[Mon Nov 24 21:48:36.290780 2025] [:error] [pid 48600:tid 48652] [client 52.165.159.173:1240] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aSRiNPtOzSUAQvWVjBeigQAAAdY"]
[Mon Nov 24 21:48:37.806596 2025] [:error] [pid 16593:tid 16604] [client 52.165.159.173:6039] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "aSRiNRVGznHBJI2LKpRsogAAAok"]
[Mon Nov 24 21:48:38.669046 2025] [:error] [pid 16441:tid 16463] [client 52.165.159.173:4133] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "aSRiNoq_bc5MOa9HflmUxwAAAJM"]
[Mon Nov 24 21:48:39.607486 2025] [:error] [pid 16441:tid 16451] [client 52.165.159.173:3376] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "aSRiN4q_bc5MOa9HflmUyQAAAIc"]
[Mon Nov 24 21:48:40.505319 2025] [:error] [pid 48688:tid 48710] [client 52.165.159.173:6050] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "aSRiOBm2q1FkzLam7A3QaAAAAlI"]
[Mon Nov 24 21:48:41.478865 2025] [:error] [pid 16441:tid 16459] [client 52.165.159.173:1465] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zasd.php"] [unique_id "aSRiOYq_bc5MOa9HflmUygAAAI8"]
[Mon Nov 24 21:48:43.011800 2025] [:error] [pid 48600:tid 48653] [client 52.165.159.173:6937] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zasd.php"] [unique_id "aSRiO_tOzSUAQvWVjBeihAAAAdc"]
[Mon Nov 24 21:48:43.936184 2025] [:error] [pid 16549:tid 16572] [client 52.165.159.173:6017] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zasd.php"] [unique_id "aSRiO6eWW19A99PUw_dofQAAAVM"]
[Mon Nov 24 21:48:44.754518 2025] [:error] [pid 9630:tid 9640] [client 52.165.159.173:4148] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zasd.php"] [unique_id "aSRiPCrSgUgPGkizt2o5jgAAAEg"]
[Mon Nov 24 21:48:45.757627 2025] [:error] [pid 48688:tid 48698] [client 52.165.159.173:1440] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/skk.php"] [unique_id "aSRiPRm2q1FkzLam7A3QagAAAkY"]
[Mon Nov 24 21:48:46.431413 2025] [:error] [pid 48601:tid 48659] [client 52.165.159.173:1641] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/skk.php"] [unique_id "aSRiPoMM4MaVTk74-AbnoAAAAgI"]
[Mon Nov 24 21:48:47.208913 2025] [:error] [pid 49900:tid 49907] [client 52.165.159.173:1640] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/skk.php"] [unique_id "aSRiPzCyPLrvg06aorlKNgAAAAU"]
[Mon Nov 24 21:48:47.701436 2025] [:error] [pid 48599:tid 48603] [client 52.165.159.173:3796] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/skk.php"] [unique_id "aSRiP5zvu6PDJiRKE3JQ6gAAAYA"]
[Mon Nov 24 21:48:48.370380 2025] [:error] [pid 48688:tid 48711] [client 52.165.159.173:3342] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/haf.php"] [unique_id "aSRiQBm2q1FkzLam7A3QbAAAAlM"]
[Mon Nov 24 21:48:49.192163 2025] [:error] [pid 48600:tid 48645] [client 52.165.159.173:6041] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/haf.php"] [unique_id "aSRiQftOzSUAQvWVjBeihgAAAc8"]
[Mon Nov 24 21:48:50.223067 2025] [:error] [pid 48688:tid 48693] [client 52.165.159.173:1613] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/haf.php"] [unique_id "aSRiQhm2q1FkzLam7A3QbQAAAkE"]
[Mon Nov 24 21:48:51.054224 2025] [:error] [pid 16441:tid 16455] [client 52.165.159.173:4771] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/haf.php"] [unique_id "aSRiQ4q_bc5MOa9HflmU0wAAAIs"]
[Mon Nov 24 21:48:52.411304 2025] [:error] [pid 16593:tid 16610] [client 52.165.159.173:4159] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admi.php"] [unique_id "aSRiRBVGznHBJI2LKpRsrgAAAo8"]
[Mon Nov 24 21:48:53.063578 2025] [:error] [pid 48600:tid 48651] [client 52.165.159.173:1636] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admi.php"] [unique_id "aSRiRftOzSUAQvWVjBeihwAAAdU"]
[Mon Nov 24 21:48:53.891300 2025] [:error] [pid 16441:tid 16451] [client 52.165.159.173:1232] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admi.php"] [unique_id "aSRiRYq_bc5MOa9HflmU1wAAAIc"]
[Mon Nov 24 21:48:55.219106 2025] [:error] [pid 48688:tid 48696] [client 52.165.159.173:3337] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admi.php"] [unique_id "aSRiRxm2q1FkzLam7A3QcgAAAkQ"]
[Mon Nov 24 21:48:56.433460 2025] [:error] [pid 48600:tid 48630] [client 52.165.159.173:1621] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gib.php"] [unique_id "aSRiSPtOzSUAQvWVjBeiiAAAAcA"]
[Mon Nov 24 21:48:57.672986 2025] [:error] [pid 48601:tid 48657] [client 52.165.159.173:4102] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gib.php"] [unique_id "aSRiSYMM4MaVTk74-AbnpgAAAgA"]
[Mon Nov 24 21:48:58.187137 2025] [:error] [pid 16516:tid 16530] [client 52.165.159.173:1630] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gib.php"] [unique_id "aSRiSvqZbniwaNwL8XkM6wAAAQs"]
[Mon Nov 24 21:48:59.242302 2025] [:error] [pid 16549:tid 16561] [client 52.165.159.173:6016] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gib.php"] [unique_id "aSRiS6eWW19A99PUw_doigAAAUk"]
[Mon Nov 24 21:49:00.252662 2025] [:error] [pid 16593:tid 16601] [client 52.165.159.173:3384] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aSRiTBVGznHBJI2LKpRstAAAAoY"]
[Mon Nov 24 21:49:01.009691 2025] [:error] [pid 48601:tid 48672] [client 52.165.159.173:6938] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aSRiTYMM4MaVTk74-AbnqQAAAg8"]
[Mon Nov 24 21:49:01.686148 2025] [:error] [pid 48601:tid 48661] [client 52.165.159.173:4150] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aSRiTYMM4MaVTk74-AbnqgAAAgQ"]
[Mon Nov 24 21:49:02.389420 2025] [:error] [pid 48599:tid 48605] [client 52.165.159.173:1628] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aSRiTpzvu6PDJiRKE3JRFQAAAYI"]
[Mon Nov 24 21:49:03.211392 2025] [:error] [pid 48601:tid 48671] [client 52.165.159.173:4135] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/skj.php"] [unique_id "aSRiT4MM4MaVTk74-AbnrgAAAg4"]
[Mon Nov 24 21:49:04.130966 2025] [:error] [pid 48599:tid 48621] [client 52.165.159.173:1275] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/skj.php"] [unique_id "aSRiUJzvu6PDJiRKE3JRFwAAAZI"]
[Mon Nov 24 21:49:04.857663 2025] [:error] [pid 16549:tid 16567] [client 52.165.159.173:4129] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/skj.php"] [unique_id "aSRiUKeWW19A99PUw_dojAAAAU8"]
[Mon Nov 24 21:49:05.483385 2025] [:error] [pid 16516:tid 16542] [client 52.165.159.173:6954] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/skj.php"] [unique_id "aSRiUfqZbniwaNwL8XkM8AAAARc"]
[Mon Nov 24 21:49:49.456800 2025] [:error] [pid 16441:tid 16444] [client 52.165.159.173:6917] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/klwc.php"] [unique_id "aSRifYq_bc5MOa9HflmVOQAAAIA"]
[Mon Nov 24 21:49:50.672908 2025] [:error] [pid 48688:tid 48697] [client 52.165.159.173:6935] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/klwc.php"] [unique_id "aSRifhm2q1FkzLam7A3QtQAAAkU"]
[Mon Nov 24 21:49:52.451312 2025] [:error] [pid 49900:tid 49910] [client 52.165.159.173:1434] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/klwc.php"] [unique_id "aSRigDCyPLrvg06aorlKcAAAAAg"]
[Mon Nov 24 21:49:53.875282 2025] [:error] [pid 48688:tid 48697] [client 52.165.159.173:3344] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/klwc.php"] [unique_id "aSRigRm2q1FkzLam7A3QyAAAAkU"]
[Mon Nov 24 21:49:54.523897 2025] [:error] [pid 48600:tid 48631] [client 52.165.159.173:1245] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fresh3.php"] [unique_id "aSRigvtOzSUAQvWVjBeivwAAAcE"]
[Mon Nov 24 21:49:55.399990 2025] [:error] [pid 16593:tid 16603] [client 52.165.159.173:3807] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fresh3.php"] [unique_id "aSRigxVGznHBJI2LKpRs8gAAAog"]
[Mon Nov 24 21:49:56.625997 2025] [:error] [pid 16516:tid 16530] [client 52.165.159.173:6062] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fresh3.php"] [unique_id "aSRihPqZbniwaNwL8XkNGwAAAQs"]
[Mon Nov 24 21:49:57.652567 2025] [:error] [pid 16593:tid 16617] [client 52.165.159.173:4004] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fresh3.php"] [unique_id "aSRihRVGznHBJI2LKpRs9AAAApY"]
[Mon Nov 24 21:49:58.762031 2025] [:error] [pid 16441:tid 16451] [client 52.165.159.173:6477] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ula.php"] [unique_id "aSRihoq_bc5MOa9HflmVPQAAAIc"]
[Mon Nov 24 21:49:59.736922 2025] [:error] [pid 49900:tid 49908] [client 52.165.159.173:3826] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ula.php"] [unique_id "aSRihzCyPLrvg06aorlKdAAAAAY"]
[Mon Nov 24 21:50:00.979014 2025] [:error] [pid 16593:tid 16616] [client 52.165.159.173:4191] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ula.php"] [unique_id "aSRiiBVGznHBJI2LKpRtAAAAApU"]
[Mon Nov 24 21:50:01.920608 2025] [:error] [pid 16593:tid 16609] [client 52.165.159.173:6280] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ula.php"] [unique_id "aSRiiRVGznHBJI2LKpRtAQAAAo4"]
[Mon Nov 24 21:50:02.910492 2025] [:error] [pid 16593:tid 16598] [client 52.165.159.173:7284] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thoms.php"] [unique_id "aSRiihVGznHBJI2LKpRtAwAAAoM"]
[Mon Nov 24 21:50:03.543717 2025] [:error] [pid 16593:tid 16603] [client 52.165.159.173:4617] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thoms.php"] [unique_id "aSRiixVGznHBJI2LKpRtBQAAAog"]
[Mon Nov 24 21:50:04.424953 2025] [:error] [pid 49900:tid 49924] [client 52.165.159.173:3656] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thoms.php"] [unique_id "aSRijDCyPLrvg06aorlKdwAAABY"]
[Mon Nov 24 21:50:04.985338 2025] [:error] [pid 48600:tid 48636] [client 52.165.159.173:1388] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thoms.php"] [unique_id "aSRijPtOzSUAQvWVjBeixwAAAcY"]
[Mon Nov 24 21:50:06.304488 2025] [:error] [pid 48599:tid 48607] [client 52.165.159.173:2512] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolv2.php"] [unique_id "aSRijpzvu6PDJiRKE3JRgAAAAYQ"]
[Mon Nov 24 21:50:07.104295 2025] [:error] [pid 9630:tid 9635] [client 52.165.159.173:1705] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolv2.php"] [unique_id "aSRijyrSgUgPGkizt2o6DwAAAEM"]
[Mon Nov 24 21:50:07.657421 2025] [:error] [pid 49900:tid 49919] [client 52.165.159.173:1721] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolv2.php"] [unique_id "aSRijzCyPLrvg06aorlKegAAABE"]
[Mon Nov 24 21:50:09.029102 2025] [:error] [pid 16441:tid 16444] [client 52.165.159.173:6082] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolv2.php"] [unique_id "aSRikYq_bc5MOa9HflmVQwAAAIA"]
[Mon Nov 24 21:50:09.859004 2025] [:error] [pid 48599:tid 48614] [client 52.165.159.173:5184] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xex.php"] [unique_id "aSRikZzvu6PDJiRKE3JRgQAAAYs"]
[Mon Nov 24 21:50:11.241714 2025] [:error] [pid 16441:tid 16468] [client 52.165.159.173:2011] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xex.php"] [unique_id "aSRik4q_bc5MOa9HflmVRgAAAJg"]
[Mon Nov 24 21:50:12.000114 2025] [:error] [pid 16516:tid 16521] [client 52.165.159.173:2017] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xex.php"] [unique_id "aSRik_qZbniwaNwL8XkNOgAAAQI"]
[Mon Nov 24 21:50:13.280778 2025] [:error] [pid 48599:tid 48625] [client 52.165.159.173:6892] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xex.php"] [unique_id "aSRilZzvu6PDJiRKE3JRhAAAAZY"]
[Mon Nov 24 21:50:14.238659 2025] [:error] [pid 48600:tid 48630] [client 52.165.159.173:1031] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wto.php"] [unique_id "aSRilvtOzSUAQvWVjBeiygAAAcA"]
[Mon Nov 24 21:50:15.190866 2025] [:error] [pid 49900:tid 49921] [client 52.165.159.173:2655] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wto.php"] [unique_id "aSRilzCyPLrvg06aorlKfAAAABM"]
[Mon Nov 24 21:50:16.338185 2025] [:error] [pid 48601:tid 48676] [client 52.165.159.173:4882] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wto.php"] [unique_id "aSRimIMM4MaVTk74-AboFgAAAhM"]
[Mon Nov 24 21:50:17.601797 2025] [:error] [pid 16441:tid 16458] [client 52.165.159.173:3136] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wto.php"] [unique_id "aSRimYq_bc5MOa9HflmVSgAAAI4"]
[Mon Nov 24 21:50:18.479604 2025] [:error] [pid 16441:tid 16452] [client 52.165.159.173:6242] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/G6.php"] [unique_id "aSRimoq_bc5MOa9HflmVTAAAAIg"]
[Mon Nov 24 21:50:20.125732 2025] [:error] [pid 16441:tid 16455] [client 52.165.159.173:1073] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/G6.php"] [unique_id "aSRinIq_bc5MOa9HflmVUwAAAIs"]
[Mon Nov 24 21:50:22.058988 2025] [:error] [pid 16441:tid 16452] [client 52.165.159.173:1087] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/G6.php"] [unique_id "aSRinoq_bc5MOa9HflmVWgAAAIg"]
[Mon Nov 24 21:50:23.321004 2025] [:error] [pid 48688:tid 48702] [client 52.165.159.173:4697] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/G6.php"] [unique_id "aSRinxm2q1FkzLam7A3Q1AAAAko"]
[Mon Nov 24 21:50:24.161798 2025] [:error] [pid 16441:tid 16446] [client 52.165.159.173:6271] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z57.php"] [unique_id "aSRioIq_bc5MOa9HflmVXQAAAII"]
[Mon Nov 24 21:50:25.522610 2025] [:error] [pid 16441:tid 16447] [client 52.165.159.173:4682] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z57.php"] [unique_id "aSRioYq_bc5MOa9HflmVZAAAAIM"]
[Mon Nov 24 21:50:27.148180 2025] [:error] [pid 9630:tid 9633] [client 52.165.159.173:2799] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z57.php"] [unique_id "aSRioyrSgUgPGkizt2o6GQAAAEE"]
[Mon Nov 24 21:50:27.963141 2025] [:error] [pid 48688:tid 48698] [client 52.165.159.173:5570] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z57.php"] [unique_id "aSRioxm2q1FkzLam7A3Q3AAAAkY"]
[Mon Nov 24 21:50:31.095642 2025] [:error] [pid 48600:tid 48653] [client 52.165.159.173:2166] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/JPG.php"] [unique_id "aSRip_tOzSUAQvWVjBei0QAAAdc"]
[Mon Nov 24 21:50:32.431610 2025] [:error] [pid 16549:tid 16555] [client 52.165.159.173:5609] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/JPG.php"] [unique_id "aSRiqKeWW19A99PUw_dpOwAAAUM"]
[Mon Nov 24 21:50:36.764605 2025] [:error] [pid 49900:tid 49918] [client 52.165.159.173:2992] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/JPG.php"] [unique_id "aSRirDCyPLrvg06aorlKhQAAABA"]
[Mon Nov 24 21:50:37.304006 2025] [:error] [pid 48688:tid 48699] [client 52.165.159.173:3231] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/JPG.php"] [unique_id "aSRirRm2q1FkzLam7A3Q4QAAAkc"]
[Mon Nov 24 21:50:39.058484 2025] [:error] [pid 16441:tid 16465] [client 52.165.159.173:6440] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/09fa6.php"] [unique_id "aSRir4q_bc5MOa9HflmVfQAAAJU"]
[Mon Nov 24 21:50:40.481904 2025] [:error] [pid 49900:tid 49907] [client 52.165.159.173:2803] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/09fa6.php"] [unique_id "aSRisDCyPLrvg06aorlKhwAAAAU"]
[Mon Nov 24 21:50:42.431276 2025] [:error] [pid 49900:tid 49905] [client 52.165.159.173:2965] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/09fa6.php"] [unique_id "aSRisjCyPLrvg06aorlKiAAAAAM"]
[Mon Nov 24 21:50:43.991677 2025] [:error] [pid 48688:tid 48692] [client 52.165.159.173:2696] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/09fa6.php"] [unique_id "aSRisxm2q1FkzLam7A3Q7QAAAkA"]
[Mon Nov 24 21:50:45.207518 2025] [:error] [pid 49900:tid 49910] [client 52.165.159.173:3403] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "aSRitTCyPLrvg06aorlKiwAAAAg"]
[Mon Nov 24 21:51:31.009902 2025] [:error] [pid 48688:tid 48706] [client 52.165.159.173:4587] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pt.php"] [unique_id "aSRi4xm2q1FkzLam7A3RMQAAAk4"]
[Mon Nov 24 21:51:32.282804 2025] [:error] [pid 16441:tid 16465] [client 52.165.159.173:6999] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pt.php"] [unique_id "aSRi5Iq_bc5MOa9HflmV_gAAAJU"]
[Mon Nov 24 21:51:33.546865 2025] [:error] [pid 16593:tid 16601] [client 52.165.159.173:5470] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pt.php"] [unique_id "aSRi5RVGznHBJI2LKpRtIgAAAoY"]
[Mon Nov 24 21:51:35.167600 2025] [:error] [pid 48688:tid 48707] [client 52.165.159.173:7028] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pt.php"] [unique_id "aSRi5xm2q1FkzLam7A3ROAAAAk8"]
[Mon Nov 24 21:51:36.394559 2025] [:error] [pid 16593:tid 16611] [client 52.165.159.173:4042] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "aSRi6BVGznHBJI2LKpRtJQAAApA"]
[Mon Nov 24 21:51:38.268484 2025] [:error] [pid 16441:tid 16463] [client 52.165.159.173:3712] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "aSRi6oq_bc5MOa9HflmWDgAAAJM"]
[Mon Nov 24 21:51:39.540612 2025] [:error] [pid 16516:tid 16537] [client 52.165.159.173:4381] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "aSRi6_qZbniwaNwL8XkNtQAAARI"]
[Mon Nov 24 21:51:40.566817 2025] [:error] [pid 48600:tid 48634] [client 52.165.159.173:4518] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "aSRi7PtOzSUAQvWVjBejUQAAAcQ"]
[Mon Nov 24 21:51:41.327643 2025] [:error] [pid 48599:tid 48612] [client 52.165.159.173:4525] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aSRi7Zzvu6PDJiRKE3JRwwAAAYk"]
[Mon Nov 24 21:51:42.988460 2025] [:error] [pid 16593:tid 16616] [client 52.165.159.173:4325] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aSRi7hVGznHBJI2LKpRtJwAAApU"]
[Mon Nov 24 21:51:43.687388 2025] [:error] [pid 16516:tid 16543] [client 52.165.159.173:6562] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aSRi7_qZbniwaNwL8XkNugAAARg"]
[Mon Nov 24 21:51:45.023490 2025] [:error] [pid 16516:tid 16529] [client 52.165.159.173:7772] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aSRi8fqZbniwaNwL8XkNuwAAAQo"]
[Mon Nov 24 21:51:46.726992 2025] [:error] [pid 9630:tid 9632] [client 52.165.159.173:2573] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aSRi8irSgUgPGkizt2o6fgAAAEA"]
[Mon Nov 24 21:51:49.413969 2025] [:error] [pid 48599:tid 48603] [client 52.165.159.173:2326] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aSRi9Zzvu6PDJiRKE3JRyQAAAYA"]
[Mon Nov 24 21:51:51.514349 2025] [:error] [pid 49900:tid 49908] [client 52.165.159.173:4058] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aSRi9zCyPLrvg06aorlLLQAAAAY"]
[Mon Nov 24 21:51:53.056409 2025] [:error] [pid 16441:tid 16451] [client 52.165.159.173:2602] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aSRi-Yq_bc5MOa9HflmWTwAAAIc"]
[Mon Nov 24 21:51:54.275567 2025] [:error] [pid 49900:tid 49904] [client 52.165.159.173:7016] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mango.php"] [unique_id "aSRi-jCyPLrvg06aorlLLwAAAAI"]
[Mon Nov 24 21:51:55.228232 2025] [:error] [pid 49900:tid 49909] [client 52.165.159.173:7227] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mango.php"] [unique_id "aSRi-zCyPLrvg06aorlLMwAAAAc"]
[Mon Nov 24 21:51:56.685722 2025] [:error] [pid 9630:tid 9651] [client 52.165.159.173:3423] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mango.php"] [unique_id "aSRi_CrSgUgPGkizt2o6jAAAAFM"]
[Mon Nov 24 21:51:58.380522 2025] [:error] [pid 9630:tid 9638] [client 52.165.159.173:2297] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mango.php"] [unique_id "aSRi_irSgUgPGkizt2o6lAAAAEY"]
[Mon Nov 24 21:51:59.623947 2025] [:error] [pid 9630:tid 9647] [client 52.165.159.173:4089] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/singlex.php"] [unique_id "aSRi_yrSgUgPGkizt2o6lQAAAE8"]
[Mon Nov 24 21:52:00.473911 2025] [:error] [pid 16441:tid 16446] [client 52.165.159.173:5843] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/singlex.php"] [unique_id "aSRjAIq_bc5MOa9HflmWXQAAAII"]
[Mon Nov 24 21:52:01.941198 2025] [:error] [pid 9630:tid 9637] [client 52.165.159.173:7683] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/singlex.php"] [unique_id "aSRjASrSgUgPGkizt2o6lwAAAEU"]
[Mon Nov 24 21:52:02.963599 2025] [:error] [pid 48599:tid 48606] [client 52.165.159.173:5473] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/singlex.php"] [unique_id "aSRjApzvu6PDJiRKE3JR0gAAAYM"]
[Mon Nov 24 21:52:03.733466 2025] [:error] [pid 16549:tid 16566] [client 52.165.159.173:5517] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php"] [unique_id "aSRjA6eWW19A99PUw_dpwAAAAU4"]
[Mon Nov 24 21:52:05.143307 2025] [:error] [pid 9630:tid 9644] [client 52.165.159.173:2311] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php"] [unique_id "aSRjBSrSgUgPGkizt2o6mQAAAEw"]
[Mon Nov 24 21:52:06.627402 2025] [:error] [pid 16516:tid 16525] [client 52.165.159.173:4488] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php"] [unique_id "aSRjBvqZbniwaNwL8XkN0QAAAQY"]
[Mon Nov 24 21:52:08.465222 2025] [:error] [pid 16441:tid 16457] [client 52.165.159.173:5505] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php"] [unique_id "aSRjCIq_bc5MOa9HflmWcwAAAI0"]
[Mon Nov 24 21:52:09.818586 2025] [:error] [pid 16516:tid 16543] [client 52.165.159.173:6796] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aSRjCfqZbniwaNwL8XkN1QAAARg"]
[Mon Nov 24 21:52:11.009932 2025] [:error] [pid 48601:tid 48663] [client 52.165.159.173:4600] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aSRjC4MM4MaVTk74-AboYgAAAgY"]
[Mon Nov 24 21:52:12.112229 2025] [:error] [pid 16441:tid 16460] [client 52.165.159.173:4284] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aSRjDIq_bc5MOa9HflmWggAAAJA"]
[Mon Nov 24 21:52:13.416136 2025] [:error] [pid 16441:tid 16452] [client 52.165.159.173:6801] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aSRjDYq_bc5MOa9HflmWjAAAAIg"]
[Mon Nov 24 21:52:14.077634 2025] [:error] [pid 48600:tid 48644] [client 52.165.159.173:3738] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zcrtg.php"] [unique_id "aSRjDvtOzSUAQvWVjBejbAAAAc4"]
[Mon Nov 24 21:52:15.514430 2025] [:error] [pid 16593:tid 16607] [client 52.165.159.173:2218] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zcrtg.php"] [unique_id "aSRjDxVGznHBJI2LKpRtUQAAAow"]
[Mon Nov 24 21:52:16.602629 2025] [:error] [pid 49900:tid 49910] [client 52.165.159.173:7373] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zcrtg.php"] [unique_id "aSRjEDCyPLrvg06aorlLWQAAAAg"]
[Mon Nov 24 21:52:17.834373 2025] [:error] [pid 16441:tid 16459] [client 52.165.159.173:7011] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zcrtg.php"] [unique_id "aSRjEYq_bc5MOa9HflmWoAAAAI8"]
[Mon Nov 24 21:52:18.661200 2025] [:error] [pid 48601:tid 48668] [client 52.165.159.173:2198] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BbiNip.php"] [unique_id "aSRjEoMM4MaVTk74-AboaQAAAgs"]
[Mon Nov 24 21:52:19.702772 2025] [:error] [pid 9630:tid 9649] [client 52.165.159.173:2078] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BbiNip.php"] [unique_id "aSRjEyrSgUgPGkizt2o6qgAAAFE"]
[Mon Nov 24 21:52:20.733357 2025] [:error] [pid 48599:tid 48623] [client 52.165.159.173:2070] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BbiNip.php"] [unique_id "aSRjFJzvu6PDJiRKE3JR3AAAAZQ"]
[Mon Nov 24 21:52:21.612263 2025] [:error] [pid 48601:tid 48662] [client 52.165.159.173:7020] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BbiNip.php"] [unique_id "aSRjFYMM4MaVTk74-AbobAAAAgU"]
[Mon Nov 24 21:52:23.205584 2025] [:error] [pid 48600:tid 48654] [client 52.165.159.173:5494] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xl2023.php"] [unique_id "aSRjF_tOzSUAQvWVjBejcQAAAdg"]
[Mon Nov 24 21:52:24.645479 2025] [:error] [pid 48688:tid 48703] [client 52.165.159.173:6050] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xl2023.php"] [unique_id "aSRjGBm2q1FkzLam7A3RYQAAAks"]
[Mon Nov 24 21:52:25.600097 2025] [:error] [pid 49900:tid 49921] [client 52.165.159.173:5951] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xl2023.php"] [unique_id "aSRjGTCyPLrvg06aorlLZAAAABM"]
[Mon Nov 24 21:52:26.848805 2025] [:error] [pid 48599:tid 48615] [client 52.165.159.173:7781] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xl2023.php"] [unique_id "aSRjGpzvu6PDJiRKE3JR5gAAAYw"]
[Mon Nov 24 21:52:27.813844 2025] [:error] [pid 48601:tid 48665] [client 52.165.159.173:2580] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hehe.php"] [unique_id "aSRjG4MM4MaVTk74-AbocQAAAgg"]
[Mon Nov 24 21:53:14.053717 2025] [:error] [pid 16516:tid 16537] [client 52.165.159.173:2607] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kn18l3.php"] [unique_id "aSRjSvqZbniwaNwL8XkOSAAAARI"]
[Mon Nov 24 21:53:15.696298 2025] [:error] [pid 16441:tid 16452] [client 52.165.159.173:4972] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kn18l3.php"] [unique_id "aSRjS4q_bc5MOa9HflmXDwAAAIg"]
[Mon Nov 24 21:53:17.005231 2025] [:error] [pid 16549:tid 16566] [client 52.165.159.173:5471] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kn18l3.php"] [unique_id "aSRjTaeWW19A99PUw_dp4QAAAU4"]
[Mon Nov 24 21:53:19.616710 2025] [:error] [pid 48600:tid 48644] [client 52.165.159.173:4983] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kn18l3.php"] [unique_id "aSRjT_tOzSUAQvWVjBejnAAAAc4"]
[Mon Nov 24 21:53:20.998330 2025] [:error] [pid 16549:tid 16557] [client 52.165.159.173:3655] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pwnd.php"] [unique_id "aSRjUKeWW19A99PUw_dp4wAAAUU"]
[Mon Nov 24 21:53:21.941059 2025] [:error] [pid 9630:tid 9643] [client 52.165.159.173:5243] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pwnd.php"] [unique_id "aSRjUSrSgUgPGkizt2o7GQAAAEs"]
[Mon Nov 24 21:53:23.453333 2025] [:error] [pid 48599:tid 48619] [client 52.165.159.173:1493] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pwnd.php"] [unique_id "aSRjU5zvu6PDJiRKE3JSCgAAAZA"]
[Mon Nov 24 21:53:24.873938 2025] [:error] [pid 16593:tid 16603] [client 52.165.159.173:3654] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pwnd.php"] [unique_id "aSRjVBVGznHBJI2LKpRtdwAAAog"]
[Mon Nov 24 21:53:26.062779 2025] [:error] [pid 48601:tid 48657] [client 52.165.159.173:4380] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/getid3s.php"] [unique_id "aSRjVoMM4MaVTk74-AbonAAAAgA"]
[Mon Nov 24 21:53:27.350449 2025] [:error] [pid 48599:tid 48626] [client 52.165.159.173:3114] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/getid3s.php"] [unique_id "aSRjV5zvu6PDJiRKE3JSCwAAAZc"]
[Mon Nov 24 21:53:28.587094 2025] [:error] [pid 48601:tid 48680] [client 52.165.159.173:4067] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/getid3s.php"] [unique_id "aSRjWIMM4MaVTk74-AbonwAAAhc"]
[Mon Nov 24 21:53:29.291926 2025] [:error] [pid 9630:tid 9649] [client 52.165.159.173:2060] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/getid3s.php"] [unique_id "aSRjWSrSgUgPGkizt2o7MgAAAFE"]
[Mon Nov 24 21:53:31.070682 2025] [:error] [pid 48600:tid 48631] [client 52.165.159.173:5904] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Auth.php"] [unique_id "aSRjW_tOzSUAQvWVjBejpAAAAcE"]
[Mon Nov 24 21:53:31.782407 2025] [:error] [pid 16441:tid 16467] [client 52.165.159.173:7207] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Auth.php"] [unique_id "aSRjW4q_bc5MOa9HflmXHQAAAJc"]
[Mon Nov 24 21:53:33.584128 2025] [:error] [pid 16549:tid 16563] [client 52.165.159.173:4232] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Auth.php"] [unique_id "aSRjXaeWW19A99PUw_dp6AAAAUs"]
[Mon Nov 24 21:53:34.856849 2025] [:error] [pid 16549:tid 16574] [client 52.165.159.173:4044] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Auth.php"] [unique_id "aSRjXqeWW19A99PUw_dp6QAAAVU"]
[Mon Nov 24 21:53:36.714833 2025] [:error] [pid 16441:tid 16458] [client 52.165.159.173:2574] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kaori.php"] [unique_id "aSRjYIq_bc5MOa9HflmXIAAAAI4"]
[Mon Nov 24 21:53:37.763969 2025] [:error] [pid 48601:tid 48665] [client 52.165.159.173:5912] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kaori.php"] [unique_id "aSRjYYMM4MaVTk74-AboowAAAgg"]
[Mon Nov 24 21:53:39.147857 2025] [:error] [pid 16441:tid 16455] [client 52.165.159.173:3732] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kaori.php"] [unique_id "aSRjY4q_bc5MOa9HflmXIwAAAIs"]
[Mon Nov 24 21:53:41.020767 2025] [:error] [pid 9630:tid 9650] [client 52.165.159.173:3529] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kaori.php"] [unique_id "aSRjZSrSgUgPGkizt2o7OgAAAFI"]
[Mon Nov 24 21:53:42.001651 2025] [:error] [pid 48688:tid 48696] [client 52.165.159.173:5035] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/white.php"] [unique_id "aSRjZhm2q1FkzLam7A3RnwAAAkQ"]
[Mon Nov 24 21:53:44.155255 2025] [:error] [pid 16549:tid 16568] [client 52.165.159.173:3773] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/white.php"] [unique_id "aSRjaKeWW19A99PUw_dp6wAAAVA"]
[Mon Nov 24 21:53:45.927608 2025] [:error] [pid 9630:tid 9652] [client 52.165.159.173:4999] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/white.php"] [unique_id "aSRjaSrSgUgPGkizt2o7OwAAAFQ"]
[Mon Nov 24 21:53:47.084444 2025] [:error] [pid 49900:tid 49924] [client 52.165.159.173:7043] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/white.php"] [unique_id "aSRjazCyPLrvg06aorlLnAAAABY"]
[Mon Nov 24 21:53:48.463541 2025] [:error] [pid 48688:tid 48716] [client 52.165.159.173:7503] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aSRjbBm2q1FkzLam7A3RowAAAlg"]
[Mon Nov 24 21:53:49.245559 2025] [:error] [pid 48688:tid 48695] [client 52.165.159.173:5044] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aSRjbRm2q1FkzLam7A3RpQAAAkM"]
[Mon Nov 24 21:53:50.367013 2025] [:error] [pid 16516:tid 16538] [client 52.165.159.173:7086] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aSRjbvqZbniwaNwL8XkOaAAAARM"]
[Mon Nov 24 21:53:51.642263 2025] [:error] [pid 48688:tid 48699] [client 52.165.159.173:4996] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aSRjbxm2q1FkzLam7A3RpwAAAkc"]
[Mon Nov 24 21:53:52.671654 2025] [:error] [pid 9630:tid 9643] [client 52.165.159.173:5888] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-db.php"] [unique_id "aSRjcCrSgUgPGkizt2o7QQAAAEs"]
[Mon Nov 24 21:53:53.203330 2025] [:error] [pid 9630:tid 9640] [client 52.165.159.173:4629] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-db.php"] [unique_id "aSRjcSrSgUgPGkizt2o7RAAAAEg"]
[Mon Nov 24 21:53:54.309357 2025] [:error] [pid 49900:tid 49903] [client 52.165.159.173:1111] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-db.php"] [unique_id "aSRjcjCyPLrvg06aorlLpwAAAAE"]
[Mon Nov 24 21:53:55.155272 2025] [:error] [pid 48688:tid 48697] [client 52.165.159.173:7550] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-db.php"] [unique_id "aSRjcxm2q1FkzLam7A3RrgAAAkU"]
[Mon Nov 24 21:53:56.596809 2025] [:error] [pid 48601:tid 48674] [client 52.165.159.173:3567] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/14.php"] [unique_id "aSRjdIMM4MaVTk74-AbotwAAAhE"]
[Mon Nov 24 21:53:59.275272 2025] [:error] [pid 16441:tid 16448] [client 52.165.159.173:3545] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/14.php"] [unique_id "aSRjd4q_bc5MOa9HflmXNAAAAIQ"]
[Mon Nov 24 21:54:00.743024 2025] [:error] [pid 48601:tid 48659] [client 52.165.159.173:1149] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/14.php"] [unique_id "aSRjeIMM4MaVTk74-AbougAAAgI"]
[Mon Nov 24 21:54:02.070646 2025] [:error] [pid 16516:tid 16524] [client 52.165.159.173:2492] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/14.php"] [unique_id "aSRjevqZbniwaNwL8XkOdQAAAQU"]
[Mon Nov 24 21:54:03.035650 2025] [:error] [pid 48688:tid 48699] [client 52.165.159.173:2490] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aSRjexm2q1FkzLam7A3RuAAAAkc"]
[Mon Nov 24 21:54:03.807313 2025] [:error] [pid 16549:tid 16562] [client 52.165.159.173:3539] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aSRje6eWW19A99PUw_dp8wAAAUo"]
[Mon Nov 24 21:54:04.787224 2025] [:error] [pid 9630:tid 9647] [client 52.165.159.173:2458] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aSRjfCrSgUgPGkizt2o7SwAAAE8"]
[Mon Nov 24 21:54:05.812367 2025] [:error] [pid 9630:tid 9655] [client 52.165.159.173:4627] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aSRjfSrSgUgPGkizt2o7TAAAAFc"]
[Mon Nov 24 21:54:07.057525 2025] [:error] [pid 9630:tid 9648] [client 52.165.159.173:3533] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/end.php"] [unique_id "aSRjfyrSgUgPGkizt2o7TQAAAFA"]
[Mon Nov 24 21:54:07.544782 2025] [:error] [pid 48688:tid 48700] [client 52.165.159.173:1224] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/end.php"] [unique_id "aSRjfxm2q1FkzLam7A3RuwAAAkg"]
[Mon Nov 24 21:54:08.148347 2025] [:error] [pid 48601:tid 48665] [client 52.165.159.173:5042] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/end.php"] [unique_id "aSRjgIMM4MaVTk74-AboxgAAAgg"]
[Mon Nov 24 21:54:09.131541 2025] [:error] [pid 16441:tid 16453] [client 52.165.159.173:7510] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/end.php"] [unique_id "aSRjgYq_bc5MOa9HflmXNQAAAIk"]
[Mon Nov 24 21:54:56.367391 2025] [:error] [pid 48599:tid 48626] [client 52.165.159.173:3365] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahda.php"] [unique_id "aSRjsJzvu6PDJiRKE3JSOQAAAZc"]
[Mon Nov 24 21:54:57.379888 2025] [:error] [pid 9630:tid 9654] [client 52.165.159.173:6182] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahda.php"] [unique_id "aSRjsSrSgUgPGkizt2o7bQAAAFY"]
[Mon Nov 24 21:54:58.189826 2025] [:error] [pid 48599:tid 48612] [client 52.165.159.173:3008] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahda.php"] [unique_id "aSRjspzvu6PDJiRKE3JSOwAAAYk"]
[Mon Nov 24 21:54:59.030435 2025] [:error] [pid 48601:tid 48675] [client 52.165.159.173:1751] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahda.php"] [unique_id "aSRjs4MM4MaVTk74-Abo2AAAAhI"]
[Mon Nov 24 21:54:59.910378 2025] [:error] [pid 16593:tid 16613] [client 52.165.159.173:5587] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aSRjsxVGznHBJI2LKpRtnQAAApI"]
[Mon Nov 24 21:55:00.755114 2025] [:error] [pid 16516:tid 16529] [client 52.165.159.173:5625] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aSRjtPqZbniwaNwL8XkOjQAAAQo"]
[Mon Nov 24 21:55:01.939026 2025] [:error] [pid 48601:tid 48658] [client 52.165.159.173:3237] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aSRjtYMM4MaVTk74-Abo2gAAAgE"]
[Mon Nov 24 21:55:02.812380 2025] [:error] [pid 9630:tid 9637] [client 52.165.159.173:2814] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aSRjtirSgUgPGkizt2o7bgAAAEU"]
[Mon Nov 24 21:55:03.532669 2025] [:error] [pid 16441:tid 16465] [client 52.165.159.173:3498] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aSRjt4q_bc5MOa9HflmXnAAAAJU"]
[Mon Nov 24 21:55:04.488341 2025] [:error] [pid 9630:tid 9650] [client 52.165.159.173:2794] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aSRjuCrSgUgPGkizt2o7bwAAAFI"]
[Mon Nov 24 21:55:05.609343 2025] [:error] [pid 16593:tid 16609] [client 52.165.159.173:3249] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aSRjuRVGznHBJI2LKpRtoQAAAo4"]
[Mon Nov 24 21:55:06.563673 2025] [:error] [pid 16516:tid 16543] [client 52.165.159.173:3500] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aSRjuvqZbniwaNwL8XkOkQAAARg"]
[Mon Nov 24 21:55:07.828648 2025] [:error] [pid 49900:tid 49908] [client 52.165.159.173:2142] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/error_log.php"] [unique_id "aSRjuzCyPLrvg06aorlL2gAAAAY"]
[Mon Nov 24 21:55:08.916866 2025] [:error] [pid 48601:tid 48663] [client 52.165.159.173:3504] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/error_log.php"] [unique_id "aSRjvIMM4MaVTk74-Abo2wAAAgY"]
[Mon Nov 24 21:55:09.505982 2025] [:error] [pid 16441:tid 16460] [client 52.165.159.173:3200] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/error_log.php"] [unique_id "aSRjvYq_bc5MOa9HflmXqwAAAJA"]
[Mon Nov 24 21:55:10.390648 2025] [:error] [pid 16441:tid 16450] [client 52.165.159.173:2802] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/error_log.php"] [unique_id "aSRjvoq_bc5MOa9HflmXrQAAAIY"]
[Mon Nov 24 21:55:11.358920 2025] [:error] [pid 48601:tid 48664] [client 52.165.159.173:6453] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aSRjv4MM4MaVTk74-Abo4AAAAgc"]
[Mon Nov 24 21:55:12.681145 2025] [:error] [pid 48688:tid 48707] [client 52.165.159.173:2790] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aSRjwBm2q1FkzLam7A3R8gAAAk8"]
[Mon Nov 24 21:55:13.320142 2025] [:error] [pid 48688:tid 48695] [client 52.165.159.173:1810] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aSRjwRm2q1FkzLam7A3R8wAAAkM"]
[Mon Nov 24 21:55:14.400136 2025] [:error] [pid 48688:tid 48693] [client 52.165.159.173:3483] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aSRjwhm2q1FkzLam7A3R9gAAAkE"]
[Mon Nov 24 21:55:15.958432 2025] [:error] [pid 49900:tid 49903] [client 52.165.159.173:2764] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oxvrws.php"] [unique_id "aSRjwzCyPLrvg06aorlL4gAAAAE"]
[Mon Nov 24 21:55:17.333792 2025] [:error] [pid 16549:tid 16568] [client 52.165.159.173:2164] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oxvrws.php"] [unique_id "aSRjxaeWW19A99PUw_dqHgAAAVA"]
[Mon Nov 24 21:55:18.162192 2025] [:error] [pid 16516:tid 16534] [client 52.165.159.173:5614] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oxvrws.php"] [unique_id "aSRjxvqZbniwaNwL8XkOlgAAAQ8"]
[Mon Nov 24 21:55:20.238322 2025] [:error] [pid 16593:tid 16607] [client 52.165.159.173:1614] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oxvrws.php"] [unique_id "aSRjyBVGznHBJI2LKpRtqwAAAow"]
[Mon Nov 24 21:55:21.496318 2025] [:error] [pid 16549:tid 16573] [client 52.165.159.173:5584] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1wx.php"] [unique_id "aSRjyaeWW19A99PUw_dqIAAAAVQ"]
[Mon Nov 24 21:55:22.603124 2025] [:error] [pid 16549:tid 16556] [client 52.165.159.173:5569] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1wx.php"] [unique_id "aSRjyqeWW19A99PUw_dqIQAAAUQ"]
[Mon Nov 24 21:55:23.588868 2025] [:error] [pid 9630:tid 9650] [client 52.165.159.173:1610] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1wx.php"] [unique_id "aSRjyyrSgUgPGkizt2o7jgAAAFI"]
[Mon Nov 24 21:55:24.642963 2025] [:error] [pid 16549:tid 16566] [client 52.165.159.173:5620] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1wx.php"] [unique_id "aSRjzKeWW19A99PUw_dqJAAAAU4"]
[Mon Nov 24 21:55:25.407123 2025] [:error] [pid 16549:tid 16557] [client 52.165.159.173:2743] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pagea.php"] [unique_id "aSRjzaeWW19A99PUw_dqJQAAAUU"]
[Mon Nov 24 21:55:26.826998 2025] [:error] [pid 9630:tid 9635] [client 52.165.159.173:2122] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pagea.php"] [unique_id "aSRjzirSgUgPGkizt2o7kgAAAEM"]
[Mon Nov 24 21:55:27.927114 2025] [:error] [pid 49900:tid 49916] [client 52.165.159.173:2138] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pagea.php"] [unique_id "aSRjzzCyPLrvg06aorlL6wAAAA4"]
[Mon Nov 24 21:55:28.820174 2025] [:error] [pid 16441:tid 16444] [client 52.165.159.173:5603] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pagea.php"] [unique_id "aSRj0Iq_bc5MOa9HflmXsQAAAIA"]
[Mon Nov 24 21:55:29.634566 2025] [:error] [pid 9630:tid 9642] [client 52.165.159.173:2729] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aSRj0SrSgUgPGkizt2o7lQAAAEo"]
[Mon Nov 24 21:55:30.669325 2025] [:error] [pid 48601:tid 48657] [client 52.165.159.173:1605] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aSRj0oMM4MaVTk74-Abo8gAAAgA"]
[Mon Nov 24 21:55:31.983614 2025] [:error] [pid 48601:tid 48672] [client 52.165.159.173:1782] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aSRj04MM4MaVTk74-Abo9AAAAg8"]
[Mon Nov 24 21:55:33.857974 2025] [:error] [pid 16593:tid 16595] [client 52.165.159.173:2704] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aSRj1RVGznHBJI2LKpRtswAAAoA"]
[Mon Nov 24 21:55:35.964326 2025] [:error] [pid 48688:tid 48693] [client 52.165.159.173:2132] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzmelu.php"] [unique_id "aSRj1xm2q1FkzLam7A3SAgAAAkE"]
[Mon Nov 24 21:55:37.220240 2025] [:error] [pid 49900:tid 49909] [client 52.165.159.173:2172] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzmelu.php"] [unique_id "aSRj2TCyPLrvg06aorlL-AAAAAc"]
[Mon Nov 24 21:55:38.152860 2025] [:error] [pid 48600:tid 48644] [client 52.165.159.173:2807] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzmelu.php"] [unique_id "aSRj2vtOzSUAQvWVjBej1gAAAc4"]
[Mon Nov 24 21:55:38.799510 2025] [:error] [pid 48600:tid 48652] [client 52.165.159.173:1634] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzmelu.php"] [unique_id "aSRj2vtOzSUAQvWVjBej1wAAAdY"]
[Mon Nov 24 21:55:39.678064 2025] [:error] [pid 48600:tid 48651] [client 52.165.159.173:2810] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpas2.php"] [unique_id "aSRj2_tOzSUAQvWVjBej2QAAAdU"]
[Mon Nov 24 21:55:40.646080 2025] [:error] [pid 16516:tid 16536] [client 52.165.159.173:5618] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpas2.php"] [unique_id "aSRj3PqZbniwaNwL8XkOnQAAARE"]
[Mon Nov 24 21:55:41.558071 2025] [:error] [pid 49900:tid 49905] [client 52.165.159.173:5574] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpas2.php"] [unique_id "aSRj3TCyPLrvg06aorlL-gAAAAM"]
[Mon Nov 24 21:55:42.645788 2025] [:error] [pid 49900:tid 49922] [client 52.165.159.173:2769] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpas2.php"] [unique_id "aSRj3jCyPLrvg06aorlL-wAAABQ"]
[Mon Nov 24 21:55:43.821143 2025] [:error] [pid 49900:tid 49904] [client 52.165.159.173:5594] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sss.php"] [unique_id "aSRj3zCyPLrvg06aorlL_AAAAAI"]
[Mon Nov 24 21:55:45.152228 2025] [:error] [pid 9630:tid 9653] [client 52.165.159.173:5623] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sss.php"] [unique_id "aSRj4SrSgUgPGkizt2o7oAAAAFU"]
[Mon Nov 24 21:55:46.732469 2025] [:error] [pid 16593:tid 16611] [client 52.165.159.173:1652] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sss.php"] [unique_id "aSRj4hVGznHBJI2LKpRttgAAApA"]
[Mon Nov 24 21:55:47.927972 2025] [:error] [pid 9630:tid 9654] [client 52.165.159.173:2784] [client 52.165.159.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sss.php"] [unique_id "aSRj4yrSgUgPGkizt2o7pQAAAFY"]
[Mon Nov 24 22:21:19.439635 2025] [proxy_fcgi:error] [pid 9630:tid 9654] [client 45.86.203.214:61037] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_wp_theme_files_patterns-3b23ae1e99ee6913382a1a5c16971124', 'a:2:{s:7:\\"version\\";s:6:\\"4.27.4\\";s:8:\\"patterns\\";a:0:{}}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_option'
[Mon Nov 24 22:21:26.126566 2025] [:error] [pid 9630:tid 9637] [client 45.86.203.214:61037] [client 45.86.203.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSRp5irSgUgPGkizt2pCMgAAAEU"]
[Mon Nov 24 22:21:30.886061 2025] [:error] [pid 9630:tid 9633] [client 45.86.203.208:20971] [client 45.86.203.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSRp6irSgUgPGkizt2pCOgAAAEE"]
[Mon Nov 24 22:21:43.728702 2025] [:error] [pid 16549:tid 16560] [client 45.86.203.213:22289] [client 45.86.203.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSRp96eWW19A99PUw_dtgQAAAUg"]
[Mon Nov 24 22:21:51.597739 2025] [:error] [pid 16441:tid 16458] [client 45.86.203.224:48733] [client 45.86.203.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSRp_4q_bc5MOa9HflmgzgAAAI4"]
[Mon Nov 24 22:21:57.323761 2025] [:error] [pid 16441:tid 16455] [client 45.86.203.207:22575] [client 45.86.203.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSRqBYq_bc5MOa9Hflmg6AAAAIs"]
[Mon Nov 24 22:21:59.454762 2025] [:error] [pid 9630:tid 9642] [client 45.86.203.33:62009] [client 45.86.203.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSRqByrSgUgPGkizt2pCfQAAAEo"]
[Mon Nov 24 22:22:02.472117 2025] [:error] [pid 16441:tid 16457] [client 45.86.203.206:38735] [client 45.86.203.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSRqCoq_bc5MOa9HflmhAAAAAI0"]
[Mon Nov 24 22:22:05.625152 2025] [:error] [pid 16516:tid 16525] [client 45.86.203.203:58877] [client 45.86.203.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSRqDfqZbniwaNwL8XkSkAAAAQY"]
[Mon Nov 24 22:22:22.313607 2025] [:error] [pid 16549:tid 16573] [client 45.86.203.198:42675] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSRqHqeWW19A99PUw_dtnwAAAVQ"]
[Mon Nov 24 22:22:24.368089 2025] [:error] [pid 16516:tid 16527] [client 45.86.203.221:53613] [client 45.86.203.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSRqIPqZbniwaNwL8XkSlwAAAQg"]
[Mon Nov 24 22:23:59.290375 2025] [:error] [pid 16441:tid 16447] [client 45.86.203.209:50251] [client 45.86.203.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.209, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aSRqf4q_bc5MOa9HflmhoQAAAIM"]
[Mon Nov 24 22:24:15.995664 2025] [:error] [pid 16516:tid 16523] [client 45.86.203.202:40399] [client 45.86.203.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSRqj_qZbniwaNwL8XkSwgAAAQQ"]
[Mon Nov 24 22:24:46.631339 2025] [:error] [pid 48601:tid 48677] [client 45.86.203.198:41771] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSRqroMM4MaVTk74-AbvCAAAAhQ"]
[Mon Nov 24 22:26:00.894282 2025] [:error] [pid 16441:tid 16465] [client 45.86.203.220:38189] [client 45.86.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSRq-Iq_bc5MOa9Hflmi4QAAAJU"]
[Mon Nov 24 22:27:53.999541 2025] [:error] [pid 49900:tid 49915] [client 45.86.203.218:52329] [client 45.86.203.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSRraTCyPLrvg06aorlSdwAAAA0"]
[Mon Nov 24 22:28:49.142360 2025] [:error] [pid 16441:tid 16468] [client 45.86.203.207:21425] [client 45.86.203.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSRroYq_bc5MOa9HflmklAAAAJg"]
[Mon Nov 24 22:28:50.353983 2025] [:error] [pid 48601:tid 48659] [client 45.86.203.198:62533] [client 45.86.203.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.86.203.198, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSRrooMM4MaVTk74-Abv7QAAAgI"]
[Mon Nov 24 22:28:54.604769 2025] [:error] [pid 48601:tid 48676] [client 45.86.203.198:62533] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSRrpoMM4MaVTk74-Abv9QAAAhM"]
[Mon Nov 24 22:29:14.862374 2025] [:error] [pid 16516:tid 16540] [client 45.86.203.208:38527] [client 45.86.203.208] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "65.109.158.238_14eed4e054b6958c400d83ae9dea5011b45e4f11"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/index.php"] [unique_id "aSRrtvqZbniwaNwL8XkTXwAAARU"]
[Mon Nov 24 22:29:14.863933 2025] [:error] [pid 16516:tid 16537] [client 45.86.203.208:38527] [client 45.86.203.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSRruvqZbniwaNwL8XkTYwAAARI"]
[Mon Nov 24 22:29:49.224180 2025] [:error] [pid 16516:tid 16539] [client 45.86.203.215:47855] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSRr3fqZbniwaNwL8XkTjwAAARQ"]
[Mon Nov 24 22:29:50.907168 2025] [:error] [pid 49900:tid 49915] [client 45.86.203.215:65045] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSRr3jCyPLrvg06aorlTFQAAAA0"]
[Mon Nov 24 22:29:51.867576 2025] [:error] [pid 49900:tid 49919] [client 45.86.203.205:44967] [client 45.86.203.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSRr3zCyPLrvg06aorlTFwAAABE"]
[Mon Nov 24 22:29:53.312730 2025] [:error] [pid 16549:tid 16556] [client 45.86.203.203:63009] [client 45.86.203.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSRr4aeWW19A99PUw_duggAAAUQ"]
[Mon Nov 24 22:30:00.021406 2025] [:error] [pid 48599:tid 48626] [client 45.86.203.210:62649] [client 45.86.203.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.210, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSRr6Jzvu6PDJiRKE3JY_QAAAZc"]
[Mon Nov 24 22:30:34.782027 2025] [:error] [pid 49900:tid 49908] [client 45.86.203.225:47837] [client 45.86.203.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSRsCjCyPLrvg06aorlTdgAAAAY"]
[Mon Nov 24 22:30:44.218219 2025] [:error] [pid 48599:tid 48620] [client 45.86.203.33:56473] [client 45.86.203.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.33, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSRsFJzvu6PDJiRKE3JZGgAAAZE"]
[Mon Nov 24 22:30:56.921852 2025] [:error] [pid 48599:tid 48604] [client 45.86.203.33:56473] [client 45.86.203.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSRsIJzvu6PDJiRKE3JZJgAAAYE"]
[Mon Nov 24 22:31:00.514400 2025] [:error] [pid 16593:tid 16616] [client 45.86.203.224:60801] [client 45.86.203.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSRsJBVGznHBJI2LKpRzSgAAApU"]
[Mon Nov 24 22:31:10.006007 2025] [proxy_fcgi:error] [pid 48601:tid 48668] [client 45.86.203.208:42033] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:31:20.743480 2025] [proxy_fcgi:error] [pid 48601:tid 48667] [client 45.86.203.208:42033] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:31:45.520959 2025] [:error] [pid 48601:tid 48663] [client 45.86.203.208:42033] [client 45.86.203.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSRsUYMM4MaVTk74-AbwxwAAAgY"]
[Mon Nov 24 22:31:51.880841 2025] [:error] [pid 48688:tid 48697] [client 45.86.203.222:20775] [client 45.86.203.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSRsVxm2q1FkzLam7A3ZFgAAAkU"]
[Mon Nov 24 22:31:55.021346 2025] [:error] [pid 9630:tid 9650] [client 45.86.203.214:26855] [client 45.86.203.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSRsWyrSgUgPGkizt2pFAQAAAFI"]
[Mon Nov 24 22:32:02.445072 2025] [:error] [pid 9630:tid 9647] [client 45.86.203.34:60735] [client 45.86.203.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aSRsYirSgUgPGkizt2pFHAAAAE8"]
[Mon Nov 24 22:32:03.718633 2025] [:error] [pid 16441:tid 16467] [client 45.86.203.32:32137] [client 45.86.203.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSRsY4q_bc5MOa9HflmlZwAAAJc"]
[Mon Nov 24 22:32:05.105476 2025] [:error] [pid 16441:tid 16451] [client 45.86.203.212:52359] [client 45.86.203.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.212, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSRsZYq_bc5MOa9HflmlawAAAIc"]
[Mon Nov 24 22:32:12.337659 2025] [:error] [pid 16441:tid 16468] [client 45.86.203.212:52359] [client 45.86.203.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSRsbIq_bc5MOa9HflmlcQAAAJg"]
[Mon Nov 24 22:32:22.642751 2025] [autoindex:error] [pid 48599:tid 48626] [client 45.86.203.31:40091] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:32:25.058712 2025] [:error] [pid 48599:tid 48607] [client 45.86.203.31:40091] [client 45.86.203.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSRseZzvu6PDJiRKE3JZVAAAAYQ"]
[Mon Nov 24 22:32:30.376969 2025] [:error] [pid 48600:tid 48652] [client 45.86.203.212:28097] [client 45.86.203.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSRsfvtOzSUAQvWVjBepXgAAAdY"]
[Mon Nov 24 22:32:36.625635 2025] [:error] [pid 48599:tid 48624] [client 45.86.203.36:33469] [client 45.86.203.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSRshJzvu6PDJiRKE3JZWwAAAZU"]
[Mon Nov 24 22:32:41.839285 2025] [:error] [pid 48601:tid 48658] [client 45.86.203.220:53573] [client 45.86.203.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.220, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSRsiYMM4MaVTk74-Abw8gAAAgE"]
[Mon Nov 24 22:32:47.728056 2025] [:error] [pid 48601:tid 48679] [client 45.86.203.220:53573] [client 45.86.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSRsj4MM4MaVTk74-Abw9wAAAhY"]
[Mon Nov 24 22:32:48.938903 2025] [:error] [pid 9630:tid 9644] [client 45.86.203.198:43411] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSRskCrSgUgPGkizt2pFNwAAAEw"]
[Mon Nov 24 22:33:08.423811 2025] [:error] [pid 16441:tid 16459] [client 45.86.203.215:35115] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSRspIq_bc5MOa9HflmlnQAAAI8"]
[Mon Nov 24 22:33:10.463500 2025] [:error] [pid 49900:tid 49910] [client 45.86.203.218:63667] [client 45.86.203.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSRspjCyPLrvg06aorlUMgAAAAg"]
[Mon Nov 24 22:33:11.405022 2025] [:error] [pid 9630:tid 9633] [client 45.86.203.200:20741] [client 45.86.203.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSRspyrSgUgPGkizt2pFWgAAAEE"]
[Mon Nov 24 22:33:12.461609 2025] [:error] [pid 48688:tid 48697] [client 45.86.203.222:59571] [client 45.86.203.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSRsqBm2q1FkzLam7A3ZNAAAAkU"]
[Mon Nov 24 22:33:13.422665 2025] [:error] [pid 48688:tid 48709] [client 45.86.203.205:33475] [client 45.86.203.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSRsqRm2q1FkzLam7A3ZNgAAAlE"]
[Mon Nov 24 22:33:15.890674 2025] [autoindex:error] [pid 9630:tid 9648] [client 45.86.203.212:44821] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:33:19.600516 2025] [:error] [pid 9630:tid 9649] [client 45.86.203.212:44821] [client 45.86.203.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSRsryrSgUgPGkizt2pFaAAAAFE"]
[Mon Nov 24 22:33:27.875753 2025] [:error] [pid 16516:tid 16542] [client 45.86.203.32:49143] [client 45.86.203.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSRst_qZbniwaNwL8XkT7wAAARc"]
[Mon Nov 24 22:33:34.766649 2025] [:error] [pid 16549:tid 16558] [client 45.86.203.201:52827] [client 45.86.203.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSRsvqeWW19A99PUw_du4AAAAUY"]
[Mon Nov 24 22:33:37.834755 2025] [:error] [pid 9630:tid 9637] [client 45.86.203.221:56303] [client 45.86.203.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSRswSrSgUgPGkizt2pFbwAAAEU"]
[Mon Nov 24 22:33:44.104978 2025] [:error] [pid 16593:tid 16615] [client 45.86.203.202:48531] [client 45.86.203.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSRsyBVGznHBJI2LKpRzkQAAApQ"]
[Mon Nov 24 22:33:45.060383 2025] [:error] [pid 48601:tid 48668] [client 45.86.203.207:29585] [client 45.86.203.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSRsyYMM4MaVTk74-AbxGgAAAgs"]
[Mon Nov 24 22:33:47.498894 2025] [:error] [pid 48688:tid 48709] [client 45.86.203.212:43597] [client 45.86.203.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSRsyxm2q1FkzLam7A3ZRAAAAlE"]
[Mon Nov 24 22:33:54.496225 2025] [:error] [pid 48601:tid 48674] [client 45.86.203.220:45083] [client 45.86.203.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.220, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSRs0oMM4MaVTk74-AbxIwAAAhE"]
[Mon Nov 24 22:33:59.684771 2025] [:error] [pid 48601:tid 48659] [client 45.86.203.220:45083] [client 45.86.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSRs14MM4MaVTk74-AbxKAAAAgI"]
[Mon Nov 24 22:34:00.565795 2025] [:error] [pid 16593:tid 16606] [client 45.86.203.214:22813] [client 45.86.203.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSRs2BVGznHBJI2LKpRzngAAAos"]
[Mon Nov 24 22:34:20.801083 2025] [:error] [pid 49900:tid 49911] [client 45.86.203.226:27331] [client 45.86.203.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSRs7DCyPLrvg06aorlUgwAAAAk"]
[Mon Nov 24 22:34:22.278255 2025] [:error] [pid 49900:tid 49925] [client 45.86.203.226:27331] [client 45.86.203.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSRs7jCyPLrvg06aorlUhQAAABc"]
[Mon Nov 24 22:34:23.150305 2025] [:error] [pid 16441:tid 16460] [client 45.86.203.203:47969] [client 45.86.203.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSRs74q_bc5MOa9Hflml4QAAAJA"]
[Mon Nov 24 22:34:25.328846 2025] [:error] [pid 9630:tid 9648] [client 45.86.203.199:28303] [client 45.86.203.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSRs8SrSgUgPGkizt2pFigAAAFA"]
[Mon Nov 24 22:34:34.570791 2025] [:error] [pid 16516:tid 16535] [client 45.86.203.36:63553] [client 45.86.203.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSRs-vqZbniwaNwL8XkUCQAAARA"]
[Mon Nov 24 22:34:52.027723 2025] [:error] [pid 48601:tid 48673] [client 45.86.203.215:64215] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSRtDIMM4MaVTk74-AbxTQAAAhA"]
[Mon Nov 24 22:34:57.553674 2025] [:error] [pid 16549:tid 16556] [client 45.86.203.36:56123] [client 45.86.203.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSRtEaeWW19A99PUw_dvBQAAAUQ"]
[Mon Nov 24 22:35:08.517896 2025] [:error] [pid 48599:tid 48610] [client 45.86.203.202:34613] [client 45.86.203.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSRtHJzvu6PDJiRKE3JZsQAAAYc"]
[Mon Nov 24 22:35:14.685772 2025] [:error] [pid 16593:tid 16611] [client 45.86.203.31:58507] [client 45.86.203.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSRtIhVGznHBJI2LKpRz0wAAApA"]
[Mon Nov 24 22:35:19.402108 2025] [:error] [pid 16549:tid 16573] [client 45.86.203.218:63803] [client 45.86.203.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSRtJ6eWW19A99PUw_dvDAAAAVQ"]
[Mon Nov 24 22:35:22.462951 2025] [:error] [pid 49900:tid 49911] [client 45.86.203.31:26395] [client 45.86.203.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSRtKjCyPLrvg06aorlUpAAAAAk"]
[Mon Nov 24 22:35:24.070389 2025] [:error] [pid 48599:tid 48623] [client 45.86.203.204:52657] [client 45.86.203.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSRtLJzvu6PDJiRKE3JZugAAAZQ"]
[Mon Nov 24 22:35:27.160372 2025] [:error] [pid 48688:tid 48712] [client 45.86.203.35:50137] [client 45.86.203.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSRtLxm2q1FkzLam7A3ZcgAAAlQ"]
[Mon Nov 24 22:35:32.788956 2025] [:error] [pid 48600:tid 48631] [client 45.86.203.207:59749] [client 45.86.203.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSRtNPtOzSUAQvWVjBep1QAAAcE"]
[Mon Nov 24 22:35:41.743389 2025] [:error] [pid 48601:tid 48667] [client 45.86.203.219:27447] [client 45.86.203.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSRtPYMM4MaVTk74-AbxZwAAAgo"]
[Mon Nov 24 22:35:46.716773 2025] [:error] [pid 48688:tid 48709] [client 45.86.203.210:60089] [client 45.86.203.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSRtQhm2q1FkzLam7A3ZgQAAAlE"]
[Mon Nov 24 22:35:56.323759 2025] [proxy_fcgi:error] [pid 16441:tid 16459] [client 45.86.203.31:54233] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:36:01.465713 2025] [:error] [pid 16441:tid 16453] [client 45.86.203.31:54233] [client 45.86.203.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSRtUYq_bc5MOa9HflmmiQAAAIk"]
[Mon Nov 24 22:36:31.835374 2025] [:error] [pid 48600:tid 48637] [client 45.86.203.198:53283] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSRtb_tOzSUAQvWVjBeqOgAAAcc"]
[Mon Nov 24 22:36:33.223232 2025] [:error] [pid 48599:tid 48605] [client 45.86.203.209:25125] [client 45.86.203.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSRtcZzvu6PDJiRKE3JaQQAAAYI"]
[Mon Nov 24 22:36:40.562735 2025] [:error] [pid 49900:tid 49923] [client 45.86.203.221:51027] [client 45.86.203.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSRteDCyPLrvg06aorlVCwAAABU"]
[Mon Nov 24 22:36:42.490724 2025] [:error] [pid 48600:tid 48652] [client 45.86.203.209:47211] [client 45.86.203.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSRtevtOzSUAQvWVjBeqPAAAAdY"]
[Mon Nov 24 22:36:47.614148 2025] [:error] [pid 48600:tid 48650] [client 45.86.203.224:27503] [client 45.86.203.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSRtf_tOzSUAQvWVjBeqPgAAAdQ"]
[Mon Nov 24 22:37:00.591520 2025] [:error] [pid 49900:tid 49912] [client 45.86.203.214:35365] [client 45.86.203.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSRtjDCyPLrvg06aorlVHQAAAAo"]
[Mon Nov 24 22:37:04.400908 2025] [:error] [pid 16516:tid 16528] [client 45.86.203.36:62389] [client 45.86.203.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.36, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSRtkPqZbniwaNwL8XkUZwAAAQk"]
[Mon Nov 24 22:37:12.370471 2025] [:error] [pid 16516:tid 16537] [client 45.86.203.36:62389] [client 45.86.203.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSRtmPqZbniwaNwL8XkUawAAARI"]
[Mon Nov 24 22:37:14.549304 2025] [:error] [pid 48599:tid 48606] [client 45.86.203.204:25173] [client 45.86.203.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSRtmpzvu6PDJiRKE3JaTgAAAYM"]
[Mon Nov 24 22:37:24.516956 2025] [:error] [pid 48688:tid 48715] [client 45.86.203.30:61931] [client 45.86.203.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSRtpBm2q1FkzLam7A3Z4gAAAlc"]
[Mon Nov 24 22:37:27.492000 2025] [:error] [pid 9630:tid 9651] [client 45.86.203.213:50561] [client 45.86.203.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSRtpyrSgUgPGkizt2pGdAAAAFM"]
[Mon Nov 24 22:37:37.327249 2025] [proxy_fcgi:error] [pid 48601:tid 48657] [client 45.86.203.35:57327] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:37:49.361463 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 45.86.203.35:57327] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:37:51.895386 2025] [:error] [pid 48601:tid 48672] [client 45.86.203.35:57327] [client 45.86.203.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSRtv4MM4MaVTk74-AbyNwAAAg8"]
[Mon Nov 24 22:38:03.149119 2025] [:error] [pid 48600:tid 48648] [client 45.86.203.201:22397] [client 45.86.203.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSRty_tOzSUAQvWVjBeqWAAAAdI"]
[Mon Nov 24 22:38:10.617642 2025] [:error] [pid 16516:tid 16532] [client 45.86.203.209:62543] [client 45.86.203.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.209, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSRt0vqZbniwaNwL8XkUiAAAAQ0"]
[Mon Nov 24 22:38:10.622636 2025] [proxy_fcgi:error] [pid 16516:tid 16532] [client 45.86.203.209:62543] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:38:22.236987 2025] [:error] [pid 16516:tid 16529] [client 45.86.203.209:62543] [client 45.86.203.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSRt3vqZbniwaNwL8XkUmQAAAQo"]
[Mon Nov 24 22:38:23.132262 2025] [:error] [pid 48599:tid 48621] [client 45.86.203.32:23551] [client 45.86.203.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.32, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSRt35zvu6PDJiRKE3JahAAAAZI"]
[Mon Nov 24 22:38:24.644057 2025] [:error] [pid 48599:tid 48624] [client 45.86.203.32:23551] [client 45.86.203.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSRt4Jzvu6PDJiRKE3JahwAAAZU"]
[Mon Nov 24 22:38:36.948348 2025] [proxy_fcgi:error] [pid 48688:tid 48716] [client 45.86.203.204:29697] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:38:41.373851 2025] [:error] [pid 48688:tid 48712] [client 45.86.203.204:29697] [client 45.86.203.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSRt8Rm2q1FkzLam7A3aQQAAAlQ"]
[Mon Nov 24 22:38:44.971956 2025] [:error] [pid 16441:tid 16467] [client 45.86.203.216:36173] [client 45.86.203.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSRt9Iq_bc5MOa9HflmnWgAAAJc"]
[Mon Nov 24 22:38:48.060401 2025] [:error] [pid 16441:tid 16459] [client 45.86.203.216:62771] [client 45.86.203.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.216, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSRt-Iq_bc5MOa9HflmnXwAAAI8"]
[Mon Nov 24 22:39:03.013822 2025] [:error] [pid 16441:tid 16447] [client 45.86.203.216:62771] [client 45.86.203.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSRuB4q_bc5MOa9HflmnaAAAAIM"]
[Mon Nov 24 22:39:10.597390 2025] [:error] [pid 16441:tid 16457] [client 45.86.203.203:58569] [client 45.86.203.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSRuDoq_bc5MOa9HflmnfgAAAI0"]
[Mon Nov 24 22:39:28.083661 2025] [:error] [pid 9630:tid 9638] [client 45.86.203.211:43655] [client 45.86.203.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSRuICrSgUgPGkizt2pGywAAAEY"]
[Mon Nov 24 22:39:30.862965 2025] [:error] [pid 16549:tid 16558] [client 45.86.203.216:31411] [client 45.86.203.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSRuIqeWW19A99PUw_dwBAAAAUY"]
[Mon Nov 24 22:39:36.697289 2025] [:error] [pid 48599:tid 48620] [client 45.86.203.35:36603] [client 45.86.203.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSRuKJzvu6PDJiRKE3JatQAAAZE"]
[Mon Nov 24 22:39:45.939046 2025] [:error] [pid 9630:tid 9648] [client 45.86.203.220:49639] [client 45.86.203.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.220, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSRuMSrSgUgPGkizt2pG2QAAAFA"]
[Mon Nov 24 22:39:47.842607 2025] [:error] [pid 9630:tid 9650] [client 45.86.203.220:49639] [client 45.86.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSRuMyrSgUgPGkizt2pG2gAAAFI"]
[Mon Nov 24 22:40:08.934454 2025] [:error] [pid 16441:tid 16450] [client 45.86.203.220:62935] [client 45.86.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSRuSIq_bc5MOa9Hflmn9QAAAIY"]
[Mon Nov 24 22:40:10.584686 2025] [:error] [pid 16549:tid 16565] [client 45.86.203.34:53037] [client 45.86.203.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSRuSqeWW19A99PUw_dwFAAAAU0"]
[Mon Nov 24 22:40:21.349325 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 45.86.203.207:35859] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:40:23.991967 2025] [proxy_fcgi:error] [pid 48599:tid 48624] [client 45.86.203.207:35859] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:40:24.493888 2025] [:error] [pid 48599:tid 48619] [client 45.86.203.207:35859] [client 45.86.203.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSRuWJzvu6PDJiRKE3Ja3AAAAZA"]
[Mon Nov 24 22:40:32.929168 2025] [:error] [pid 48601:tid 48667] [client 45.86.203.215:60575] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSRuYIMM4MaVTk74-Aby0wAAAgo"]
[Mon Nov 24 22:40:45.008439 2025] [proxy_fcgi:error] [pid 48601:tid 48658] [client 45.86.203.226:60017] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:40:47.056671 2025] [:error] [pid 48601:tid 48669] [client 45.86.203.226:60017] [client 45.86.203.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSRub4MM4MaVTk74-Aby4QAAAgw"]
[Mon Nov 24 22:41:02.427258 2025] [:error] [pid 49900:tid 49925] [client 45.86.203.202:51351] [client 45.86.203.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSRufjCyPLrvg06aorlV1gAAABc"]
[Mon Nov 24 22:41:21.033139 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 45.86.203.31:58941] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:41:22.617067 2025] [:error] [pid 16441:tid 16464] [client 45.86.203.31:58941] [client 45.86.203.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSRukoq_bc5MOa9HflmoNgAAAJQ"]
[Mon Nov 24 22:41:24.322627 2025] [proxy_fcgi:error] [pid 48601:tid 48677] [client 45.86.203.226:62683] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:41:30.843233 2025] [proxy_fcgi:error] [pid 48601:tid 48681] [client 45.86.203.226:62683] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/makifimc/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/makifimc/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/makifimc/public_html/wp-settings.php on line 34PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/makifimc/public_html/wp-settings.php on line 34'
[Mon Nov 24 22:41:32.599123 2025] [:error] [pid 16441:tid 16458] [client 45.86.203.216:48563] [client 45.86.203.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSRunIq_bc5MOa9HflmoRwAAAI4"]
[Mon Nov 24 22:41:49.577046 2025] [:error] [pid 48688:tid 48697] [client 45.86.203.204:27519] [client 45.86.203.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSRurRm2q1FkzLam7A3a9AAAAkU"]
[Mon Nov 24 22:42:03.878192 2025] [:error] [pid 48599:tid 48620] [client 45.86.203.203:24457] [client 45.86.203.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.203, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSRuu5zvu6PDJiRKE3JbQgAAAZE"]
[Mon Nov 24 22:42:05.954810 2025] [:error] [pid 48599:tid 48605] [client 45.86.203.203:24457] [client 45.86.203.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.203, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSRuvZzvu6PDJiRKE3JbQwAAAYI"]
[Mon Nov 24 22:42:06.461751 2025] [:error] [pid 48599:tid 48613] [client 45.86.203.203:24457] [client 45.86.203.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSRuvpzvu6PDJiRKE3JbRAAAAYo"]
[Mon Nov 24 22:42:24.399877 2025] [:error] [pid 16441:tid 16462] [client 45.86.203.215:53983] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSRu0Iq_bc5MOa9HflmopQAAAJI"]
[Mon Nov 24 22:42:29.318486 2025] [:error] [pid 16593:tid 16607] [client 45.86.203.33:41461] [client 45.86.203.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSRu1RVGznHBJI2LKpR04wAAAow"]
[Mon Nov 24 22:42:38.049695 2025] [proxy_fcgi:error] [pid 9630:tid 9637] [client 45.86.203.35:21757] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:42:44.497165 2025] [proxy_fcgi:error] [pid 9630:tid 9638] [client 45.86.203.35:21757] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:42:47.386233 2025] [:error] [pid 9630:tid 9648] [client 45.86.203.35:21757] [client 45.86.203.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSRu5yrSgUgPGkizt2pHxgAAAFA"]
[Mon Nov 24 22:42:48.450512 2025] [:error] [pid 48601:tid 48661] [client 45.86.203.219:26161] [client 45.86.203.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSRu6IMM4MaVTk74-AbzXwAAAgQ"]
[Mon Nov 24 22:42:56.188528 2025] [:error] [pid 48600:tid 48642] [client 45.86.203.203:30641] [client 45.86.203.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.203, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSRu8PtOzSUAQvWVjBerJAAAAcw"]
[Mon Nov 24 22:43:02.764101 2025] [:error] [pid 48600:tid 48631] [client 45.86.203.203:30641] [client 45.86.203.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSRu9vtOzSUAQvWVjBerKgAAAcE"]
[Mon Nov 24 22:43:07.560730 2025] [:error] [pid 48688:tid 48696] [client 45.86.203.198:24387] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSRu-xm2q1FkzLam7A3bRgAAAkQ"]
[Mon Nov 24 22:43:08.692417 2025] [:error] [pid 48601:tid 48680] [client 45.86.203.215:43125] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSRu_IMM4MaVTk74-AbzbwAAAhc"]
[Mon Nov 24 22:43:14.623863 2025] [:error] [pid 48688:tid 48712] [client 45.86.203.202:46663] [client 45.86.203.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSRvAhm2q1FkzLam7A3bUwAAAlQ"]
[Mon Nov 24 22:43:25.163093 2025] [proxy_fcgi:error] [pid 48600:tid 48634] [client 45.86.203.199:48767] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:43:29.034878 2025] [:error] [pid 48600:tid 48654] [client 45.86.203.199:48767] [client 45.86.203.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSRvEftOzSUAQvWVjBerYQAAAdg"]
[Mon Nov 24 22:43:33.380642 2025] [proxy_fcgi:error] [pid 48688:tid 48705] [client 45.86.203.222:59439] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:43:55.774691 2025] [:error] [pid 48688:tid 48703] [client 45.86.203.222:59439] [client 45.86.203.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSRvKxm2q1FkzLam7A3boAAAAks"]
[Mon Nov 24 22:44:15.842740 2025] [:error] [pid 49900:tid 49906] [client 45.86.203.34:62869] [client 45.86.203.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSRvPzCyPLrvg06aorlW3AAAAAQ"]
[Mon Nov 24 22:44:23.665710 2025] [:error] [pid 48600:tid 48639] [client 45.86.203.219:61815] [client 45.86.203.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSRvR_tOzSUAQvWVjBervwAAAck"]
[Mon Nov 24 22:44:28.200702 2025] [:error] [pid 49900:tid 49910] [client 45.86.203.220:36603] [client 45.86.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSRvTDCyPLrvg06aorlW7AAAAAg"]
[Mon Nov 24 22:44:42.647694 2025] [:error] [pid 16593:tid 16609] [client 45.86.203.198:25059] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSRvWhVGznHBJI2LKpR1PwAAAo4"]
[Mon Nov 24 22:44:44.878325 2025] [:error] [pid 48688:tid 48715] [client 45.86.203.200:43089] [client 45.86.203.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSRvXBm2q1FkzLam7A3bxgAAAlc"]
[Mon Nov 24 22:44:47.397067 2025] [:error] [pid 16441:tid 16455] [client 45.86.203.212:47111] [client 45.86.203.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSRvX4q_bc5MOa9HflmpmwAAAIs"]
[Mon Nov 24 22:45:47.115351 2025] [proxy_fcgi:error] [pid 16441:tid 16448] [client 45.86.203.215:60315] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:45:51.115200 2025] [:error] [pid 16441:tid 16451] [client 45.86.203.215:60315] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSRvn4q_bc5MOa9HflmqYgAAAIc"]
[Mon Nov 24 22:46:16.392227 2025] [:error] [pid 16516:tid 16539] [client 45.86.203.224:40749] [client 45.86.203.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSRvuPqZbniwaNwL8XkWKwAAARQ"]
[Mon Nov 24 22:46:36.897593 2025] [:error] [pid 48688:tid 48694] [client 45.86.203.223:50257] [client 45.86.203.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSRvzBm2q1FkzLam7A3cNAAAAkI"]
[Mon Nov 24 22:46:37.778078 2025] [:error] [pid 16441:tid 16454] [client 45.86.203.36:32003] [client 45.86.203.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSRvzYq_bc5MOa9HflmqkwAAAIo"]
[Mon Nov 24 22:46:44.282061 2025] [:error] [pid 48601:tid 48671] [client 45.86.203.220:35635] [client 45.86.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSRv1IMM4MaVTk74-Ab0TQAAAg4"]
[Mon Nov 24 22:46:46.846202 2025] [:error] [pid 9630:tid 9655] [client 45.86.203.223:25617] [client 45.86.203.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSRv1irSgUgPGkizt2pJFQAAAFc"]
[Mon Nov 24 22:47:18.365786 2025] [:error] [pid 48599:tid 48612] [client 45.86.203.215:22643] [client 45.86.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSRv9pzvu6PDJiRKE3JcrQAAAYk"]
[Mon Nov 24 22:47:19.267761 2025] [:error] [pid 49900:tid 49919] [client 45.86.203.224:32069] [client 45.86.203.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSRv9zCyPLrvg06aorlXygAAABE"]
[Mon Nov 24 22:47:23.615515 2025] [:error] [pid 9630:tid 9643] [client 45.86.203.208:53457] [client 45.86.203.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSRv-yrSgUgPGkizt2pJTQAAAEs"]
[Mon Nov 24 22:47:30.624450 2025] [:error] [pid 16516:tid 16521] [client 45.86.203.206:62191] [client 45.86.203.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSRwAvqZbniwaNwL8XkWSQAAAQI"]
[Mon Nov 24 22:47:32.557435 2025] [:error] [pid 48601:tid 48672] [client 45.86.203.30:53431] [client 45.86.203.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSRwBIMM4MaVTk74-Ab0aAAAAg8"]
[Mon Nov 24 22:47:37.736511 2025] [:error] [pid 16516:tid 16525] [client 45.86.203.209:24797] [client 45.86.203.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.209, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/images/wp-login.php"] [unique_id "aSRwCfqZbniwaNwL8XkWUAAAAQY"]
[Mon Nov 24 22:47:45.267212 2025] [:error] [pid 16516:tid 16529] [client 45.86.203.209:24797] [client 45.86.203.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSRwEfqZbniwaNwL8XkWWAAAAQo"]
[Mon Nov 24 22:47:52.956386 2025] [:error] [pid 16441:tid 16468] [client 45.86.203.225:46559] [client 45.86.203.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSRwGIq_bc5MOa9HflmrMwAAAJg"]
[Mon Nov 24 22:47:55.273064 2025] [:error] [pid 49900:tid 49912] [client 45.86.203.205:62833] [client 45.86.203.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSRwGzCyPLrvg06aorlX4QAAAAo"]
[Mon Nov 24 22:47:58.098003 2025] [proxy_fcgi:error] [pid 48600:tid 48644] [client 45.86.203.198:55505] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 22:47:58.814895 2025] [:error] [pid 48600:tid 48639] [client 45.86.203.198:55505] [client 45.86.203.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.198, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSRwHvtOzSUAQvWVjBesIgAAAck"]
[Mon Nov 24 22:48:03.357171 2025] [:error] [pid 48600:tid 48641] [client 45.86.203.198:55505] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSRwI_tOzSUAQvWVjBesJQAAAcs"]
[Mon Nov 24 22:48:10.741338 2025] [:error] [pid 49900:tid 49922] [client 45.86.203.208:25331] [client 45.86.203.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSRwKjCyPLrvg06aorlX7gAAABQ"]
[Mon Nov 24 22:49:43.277090 2025] [:error] [pid 16441:tid 16458] [client 45.86.203.198:46723] [client 45.86.203.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.198, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSRwh4q_bc5MOa9HflmsDQAAAI4"]
[Mon Nov 24 22:49:49.097399 2025] [:error] [pid 16441:tid 16462] [client 45.86.203.198:46723] [client 45.86.203.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.198, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSRwjYq_bc5MOa9HflmsIAAAAJI"]
[Mon Nov 24 22:49:53.652856 2025] [:error] [pid 16441:tid 16468] [client 45.86.203.198:46723] [client 45.86.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSRwkYq_bc5MOa9HflmsLgAAAJg"]
[Mon Nov 24 22:49:55.497980 2025] [:error] [pid 49900:tid 49919] [client 45.86.203.223:40487] [client 45.86.203.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSRwkzCyPLrvg06aorlYqQAAABE"]
[Mon Nov 24 22:49:56.626104 2025] [:error] [pid 49900:tid 49915] [client 45.86.203.216:37129] [client 45.86.203.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSRwlDCyPLrvg06aorlYqwAAAA0"]
[Mon Nov 24 22:50:28.165878 2025] [:error] [pid 48601:tid 48661] [client 45.86.203.217:56937] [client 45.86.203.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.217, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSRwtIMM4MaVTk74-Ab1cQAAAgQ"]
[Mon Nov 24 22:50:30.108481 2025] [:error] [pid 48601:tid 48673] [client 45.86.203.217:56937] [client 45.86.203.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSRwtoMM4MaVTk74-Ab1eQAAAhA"]
[Mon Nov 24 22:50:33.879238 2025] [:error] [pid 16593:tid 16609] [client 45.86.203.211:55667] [client 45.86.203.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.211, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSRwuRVGznHBJI2LKpR2GwAAAo4"]
[Mon Nov 24 22:51:30.250835 2025] [:error] [pid 16549:tid 16555] [client 45.86.203.212:32737] [client 45.86.203.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSRw8qeWW19A99PUw_dx7QAAAUM"]
[Mon Nov 24 22:51:56.916058 2025] [:error] [pid 16549:tid 16565] [client 45.86.203.223:20739] [client 45.86.203.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSRxDKeWW19A99PUw_dx_wAAAU0"]
[Mon Nov 24 22:52:27.782817 2025] [:error] [pid 16441:tid 16450] [client 45.86.203.209:40465] [client 45.86.203.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.203.209, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSRxK4q_bc5MOa9HflmtZQAAAIY"]
[Mon Nov 24 22:52:52.711601 2025] [autoindex:error] [pid 16441:tid 16465] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:52:53.160355 2025] [autoindex:error] [pid 16441:tid 16458] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:52:53.762626 2025] [autoindex:error] [pid 16441:tid 16461] [client 45.86.203.209:40465] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:04.286281 2025] [autoindex:error] [pid 16441:tid 16453] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:06.818830 2025] [autoindex:error] [pid 16441:tid 16463] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:07.432858 2025] [autoindex:error] [pid 16441:tid 16456] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:09.199743 2025] [autoindex:error] [pid 16441:tid 16460] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:09.703811 2025] [autoindex:error] [pid 16441:tid 16466] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:10.167960 2025] [autoindex:error] [pid 16441:tid 16452] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:11.323711 2025] [autoindex:error] [pid 16441:tid 16467] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:11.832638 2025] [autoindex:error] [pid 16441:tid 16458] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:12.417515 2025] [autoindex:error] [pid 16441:tid 16462] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:12.954658 2025] [autoindex:error] [pid 16441:tid 16459] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:53:36.155060 2025] [:error] [pid 48600:tid 48637] [client 3.86.214.214:53094] [client 3.86.214.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aSRxcPtOzSUAQvWVjBes9AAAAcc"]
[Mon Nov 24 22:54:24.560026 2025] [autoindex:error] [pid 16441:tid 16451] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:25.113180 2025] [autoindex:error] [pid 16441:tid 16466] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:26.626440 2025] [autoindex:error] [pid 16441:tid 16462] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:28.454313 2025] [autoindex:error] [pid 16441:tid 16458] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:28.924491 2025] [autoindex:error] [pid 16441:tid 16457] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:31.255684 2025] [autoindex:error] [pid 16441:tid 16464] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:31.805250 2025] [autoindex:error] [pid 16441:tid 16465] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:37.806213 2025] [autoindex:error] [pid 16441:tid 16456] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:40.194404 2025] [autoindex:error] [pid 16441:tid 16468] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:40.636788 2025] [autoindex:error] [pid 16441:tid 16451] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:41.168748 2025] [autoindex:error] [pid 16441:tid 16466] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:44.279063 2025] [autoindex:error] [pid 16441:tid 16450] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:44.789468 2025] [autoindex:error] [pid 16441:tid 16445] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:45.269938 2025] [autoindex:error] [pid 16441:tid 16456] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:45.836488 2025] [autoindex:error] [pid 16441:tid 16444] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:54:46.378678 2025] [autoindex:error] [pid 16441:tid 16452] [client 45.86.203.209:40465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:55:45.990339 2025] [autoindex:error] [pid 16593:tid 16598] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:11.032100 2025] [autoindex:error] [pid 16593:tid 16602] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:21.994149 2025] [autoindex:error] [pid 16593:tid 16616] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:24.824080 2025] [autoindex:error] [pid 16593:tid 16597] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:31.739251 2025] [autoindex:error] [pid 16593:tid 16605] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:32.421787 2025] [autoindex:error] [pid 16593:tid 16600] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:32.987968 2025] [autoindex:error] [pid 16593:tid 16599] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:33.586483 2025] [autoindex:error] [pid 16593:tid 16617] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:35.355449 2025] [autoindex:error] [pid 16593:tid 16618] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:36.740335 2025] [autoindex:error] [pid 16593:tid 16613] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:37.625627 2025] [autoindex:error] [pid 16593:tid 16616] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:38.194006 2025] [autoindex:error] [pid 16593:tid 16614] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:56:38.769209 2025] [autoindex:error] [pid 16593:tid 16612] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:57:22.851627 2025] [autoindex:error] [pid 16593:tid 16608] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:57:23.335920 2025] [autoindex:error] [pid 16593:tid 16609] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:57:31.553920 2025] [autoindex:error] [pid 16593:tid 16612] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:57:56.496653 2025] [autoindex:error] [pid 16593:tid 16615] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:01.524218 2025] [autoindex:error] [pid 16593:tid 16610] [client 45.86.203.217:53453] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:10.547659 2025] [autoindex:error] [pid 16516:tid 16521] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:13.052510 2025] [autoindex:error] [pid 16516:tid 16524] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:18.378656 2025] [autoindex:error] [pid 16516:tid 16525] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:21.580772 2025] [autoindex:error] [pid 16516:tid 16534] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:22.206038 2025] [autoindex:error] [pid 16516:tid 16535] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:24.959476 2025] [autoindex:error] [pid 16516:tid 16543] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:27.882238 2025] [autoindex:error] [pid 16516:tid 16538] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:32.562177 2025] [autoindex:error] [pid 16516:tid 16523] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:41.370041 2025] [autoindex:error] [pid 16516:tid 16540] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:58:55.199870 2025] [autoindex:error] [pid 16516:tid 16530] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:59:06.950378 2025] [autoindex:error] [pid 16516:tid 16541] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:59:10.793069 2025] [autoindex:error] [pid 16516:tid 16524] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 22:59:11.369455 2025] [autoindex:error] [pid 16516:tid 16534] [client 45.86.203.225:26203] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 23:00:31.998313 2025] [autoindex:error] [pid 48688:tid 48716] [client 45.86.203.225:26207] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 23:00:39.158715 2025] [autoindex:error] [pid 48688:tid 48713] [client 45.86.203.225:26207] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 23:01:12.511507 2025] [autoindex:error] [pid 48688:tid 48705] [client 45.86.203.225:26207] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 13:38:12.384011 2025] [:error] [pid 14168:tid 14191] [client 136.144.19.94:42923] [client 136.144.19.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aSVAxPR-ZDU0QEgAIIsOUwAAANQ"]
[Tue Nov 25 13:38:12.865276 2025] [:error] [pid 14688:tid 14708] [client 136.144.19.118:57541] [client 136.144.19.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/txets.php"] [unique_id "aSVAxG9vYrBoEsiDnixoOwAAARI"]
[Tue Nov 25 13:38:13.347013 2025] [:error] [pid 14076:tid 14100] [client 136.144.19.113:43343] [client 136.144.19.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aSVAxXsB4Gz6Qw-pvBuwRgAAABM"]
[Tue Nov 25 18:53:14.687330 2025] [:error] [pid 14077:tid 14119] [client 138.199.60.187:51034] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aSWKmhG9n7UHEkwDTyh-YAAAAEk"]
[Tue Nov 25 18:53:14.939404 2025] [:error] [pid 14077:tid 14120] [client 138.199.60.187:54766] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aSWKmhG9n7UHEkwDTyh-ZQAAAEo"]
[Tue Nov 25 18:53:15.203292 2025] [:error] [pid 28836:tid 28958] [client 138.199.60.187:54954] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aSWKm5wNRsoxcLQGkTe3tQAAAsM"]
[Tue Nov 25 18:53:15.482949 2025] [:error] [pid 28836:tid 29010] [client 138.199.60.187:55150] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aSWKm5wNRsoxcLQGkTe3uwAAAtQ"]
[Tue Nov 25 18:53:15.705459 2025] [:error] [pid 28842:tid 28999] [client 138.199.60.187:55392] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aSWKm9NmoaPf6T4-6C2D6AAAA0k"]
[Tue Nov 25 18:53:15.975837 2025] [:error] [pid 14076:tid 14103] [client 138.199.60.187:55638] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKm3sB4Gz6Qw-pvBsKcgAAABY"]
[Tue Nov 25 18:53:16.249884 2025] [:error] [pid 14078:tid 14137] [client 138.199.60.187:55844] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnNVXYbb0ii_rVoI4CwAAAIA"]
[Tue Nov 25 18:53:16.471250 2025] [:error] [pid 28740:tid 28811] [client 138.199.60.187:56054] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnFppQCoYxWW6V0VzCwAAAlQ"]
[Tue Nov 25 18:53:16.724683 2025] [:error] [pid 14076:tid 14094] [client 138.199.60.187:56316] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnHsB4Gz6Qw-pvBsKeAAAAA0"]
[Tue Nov 25 18:53:17.006484 2025] [:error] [pid 14077:tid 14127] [client 138.199.60.187:56554] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnRG9n7UHEkwDTyh-hgAAAFE"]
[Tue Nov 25 23:24:00.908996 2025] [:error] [pid 28739:tid 28780] [client 4.251.107.128:36262] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "aSXKEBxGpKmlkG4FexTTIgAAAhI"]
[Tue Nov 25 23:24:02.213900 2025] [:error] [pid 43981:tid 43996] [client 4.251.107.128:56266] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "aSXKEggZn97m_qh_RaGEUQAAAw0"]
[Tue Nov 25 23:24:06.626381 2025] [:error] [pid 28836:tid 28957] [client 4.251.107.128:56302] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "aSXKFpwNRsoxcLQGkTcFwAAAAsI"]
[Tue Nov 25 23:24:09.750283 2025] [:error] [pid 28739:tid 28766] [client 4.251.107.128:56262] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "aSXKGRxGpKmlkG4FexTTKwAAAgQ"]
[Tue Nov 25 23:24:12.472064 2025] [:error] [pid 28836:tid 28966] [client 4.251.107.128:36283] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/snus.php"] [unique_id "aSXKHJwNRsoxcLQGkTcFxAAAAss"]
[Tue Nov 25 23:24:15.381557 2025] [:error] [pid 2987:tid 3009] [client 4.251.107.128:36239] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/snus.php"] [unique_id "aSXKH8-djEt-pTzPxnzoqwAAAVQ"]
[Tue Nov 25 23:24:21.137021 2025] [:error] [pid 14076:tid 14102] [client 4.251.107.128:36279] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/snus.php"] [unique_id "aSXKJXsB4Gz6Qw-pvBtklQAAABU"]
[Tue Nov 25 23:24:22.342673 2025] [:error] [pid 14076:tid 14103] [client 4.251.107.128:36248] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/snus.php"] [unique_id "aSXKJnsB4Gz6Qw-pvBtkmQAAABY"]
[Tue Nov 25 23:24:43.760265 2025] [:error] [pid 28836:tid 28964] [client 4.251.107.128:58896] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/disaos.php"] [unique_id "aSXKO5wNRsoxcLQGkTcF-wAAAsk"]
[Tue Nov 25 23:24:45.256109 2025] [:error] [pid 14078:tid 14155] [client 4.251.107.128:36233] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/disaos.php"] [unique_id "aSXKPdVXYbb0ii_rVoKxGAAAAJI"]
[Tue Nov 25 23:24:47.963983 2025] [:error] [pid 28609:tid 28630] [client 4.251.107.128:57573] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/disaos.php"] [unique_id "aSXKPyGGdT-nZJVs3x0OSwAAAYw"]
[Tue Nov 25 23:24:50.775252 2025] [:error] [pid 28739:tid 28773] [client 4.251.107.128:36264] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/disaos.php"] [unique_id "aSXKQhxGpKmlkG4FexTTfAAAAgs"]
[Tue Nov 25 23:24:54.375025 2025] [:error] [pid 2987:tid 3001] [client 4.251.107.128:57592] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aSXKRs-djEt-pTzPxnzo6wAAAUw"]
[Tue Nov 25 23:24:56.595109 2025] [:error] [pid 43981:tid 43985] [client 4.251.107.128:57574] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aSXKSAgZn97m_qh_RaGEjQAAAwI"]
[Tue Nov 25 23:26:05.580526 2025] [:error] [pid 14078:tid 14144] [client 4.251.107.128:57546] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aSXKjdVXYbb0ii_rVoKx1wAAAIc"]
[Tue Nov 25 23:26:07.188363 2025] [:error] [pid 43843:tid 43857] [client 4.251.107.128:36227] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aSXKjxhx4v3NUNdMKDMPPwAAAcw"]
[Tue Nov 25 23:26:08.754867 2025] [:error] [pid 14077:tid 14122] [client 4.251.107.128:57599] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aSXKkBG9n7UHEkwDTyjsTQAAAEw"]
[Tue Nov 25 23:26:16.034917 2025] [:error] [pid 14078:tid 14160] [client 4.251.107.128:36228] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aSXKmNVXYbb0ii_rVoKx_gAAAJc"]
[Tue Nov 25 23:26:21.757216 2025] [:error] [pid 43843:tid 43846] [client 4.251.107.128:57552] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/naxc.php"] [unique_id "aSXKnRhx4v3NUNdMKDMPSwAAAcE"]
[Tue Nov 25 23:26:29.182331 2025] [:error] [pid 14078:tid 14158] [client 4.251.107.128:56271] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/naxc.php"] [unique_id "aSXKpdVXYbb0ii_rVoKyHAAAAJU"]
[Tue Nov 25 23:26:30.372493 2025] [:error] [pid 28609:tid 28641] [client 4.251.107.128:36234] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/naxc.php"] [unique_id "aSXKpiGGdT-nZJVs3x0OqwAAAZc"]
[Tue Nov 25 23:26:31.238386 2025] [:error] [pid 28836:tid 28969] [client 4.251.107.128:56258] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/naxc.php"] [unique_id "aSXKp5wNRsoxcLQGkTcGdAAAAs4"]
[Tue Nov 25 23:26:44.077386 2025] [:error] [pid 14077:tid 14130] [client 4.251.107.128:57539] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aSXKtBG9n7UHEkwDTyjsewAAAFQ"]
[Tue Nov 25 23:26:58.817621 2025] [:error] [pid 2987:tid 3006] [client 4.251.107.128:56308] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "aSXKws-djEt-pTzPxnzpcgAAAVE"]
[Tue Nov 25 23:27:19.048954 2025] [:error] [pid 14168:tid 14186] [client 4.251.107.128:57590] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSXK1_R-ZDU0QEgAIIupawAAAM8"]
[Tue Nov 25 23:28:43.903751 2025] [:error] [pid 2987:tid 2999] [client 4.251.107.128:36232] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e56.php"] [unique_id "aSXLK8-djEt-pTzPxnzp4AAAAUo"]
[Tue Nov 25 23:28:47.886173 2025] [:error] [pid 28739:tid 28780] [client 4.251.107.128:36258] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e56.php"] [unique_id "aSXLLxxGpKmlkG4FexTVRwAAAhI"]
[Tue Nov 25 23:28:50.309217 2025] [:error] [pid 28739:tid 28769] [client 4.251.107.128:56283] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e56.php"] [unique_id "aSXLMhxGpKmlkG4FexTVUgAAAgc"]
[Tue Nov 25 23:28:53.450201 2025] [:error] [pid 28739:tid 28780] [client 4.251.107.128:36248] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e56.php"] [unique_id "aSXLNRxGpKmlkG4FexTVWAAAAhI"]
[Tue Nov 25 23:28:56.548404 2025] [:error] [pid 14076:tid 14082] [client 4.251.107.128:36270] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-x.php"] [unique_id "aSXLOHsB4Gz6Qw-pvBtmRwAAAAE"]
[Tue Nov 25 23:29:00.649915 2025] [:error] [pid 14077:tid 14128] [client 4.251.107.128:36263] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-x.php"] [unique_id "aSXLPBG9n7UHEkwDTyjtJgAAAFI"]
[Tue Nov 25 23:29:02.710092 2025] [:error] [pid 28609:tid 28633] [client 4.251.107.128:56307] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-x.php"] [unique_id "aSXLPiGGdT-nZJVs3x0PngAAAY8"]
[Tue Nov 25 23:29:06.455377 2025] [:error] [pid 43843:tid 43856] [client 4.251.107.128:56287] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-x.php"] [unique_id "aSXLQhhx4v3NUNdMKDMP9QAAAcs"]
[Tue Nov 25 23:29:08.745294 2025] [:error] [pid 14078:tid 14158] [client 4.251.107.128:57541] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aSXLRNVXYbb0ii_rVoKzXAAAAJU"]
[Tue Nov 25 23:29:16.433993 2025] [:error] [pid 43981:tid 43990] [client 4.251.107.128:36278] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aSXLTAgZn97m_qh_RaGFlAAAAwc"]
[Tue Nov 25 23:29:18.602708 2025] [:error] [pid 14078:tid 14160] [client 4.251.107.128:56301] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aSXLTtVXYbb0ii_rVoKzeQAAAJc"]
[Tue Nov 25 23:29:20.052006 2025] [:error] [pid 43843:tid 43853] [client 4.251.107.128:56311] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aSXLUBhx4v3NUNdMKDMQBwAAAcg"]
[Tue Nov 25 23:29:21.736104 2025] [:error] [pid 14078:tid 14156] [client 4.251.107.128:58887] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aSXLUdVXYbb0ii_rVoKzgQAAAJM"]
[Tue Nov 25 23:29:33.305847 2025] [:error] [pid 14077:tid 14117] [client 4.251.107.128:36252] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aSXLXRG9n7UHEkwDTyjtZAAAAEc"]
[Tue Nov 25 23:30:44.601517 2025] [:error] [pid 43981:tid 44005] [client 4.251.107.128:57579] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "aSXLpAgZn97m_qh_RaGF4AAAAxY"]
[Tue Nov 25 23:30:46.918493 2025] [:error] [pid 43981:tid 43993] [client 4.251.107.128:36257] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "aSXLpggZn97m_qh_RaGF4QAAAwo"]
[Tue Nov 25 23:31:01.963998 2025] [:error] [pid 28609:tid 28637] [client 4.251.107.128:57587] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aSXLtSGGdT-nZJVs3x0QUgAAAZM"]
[Tue Nov 25 23:31:03.864344 2025] [:error] [pid 43843:tid 43861] [client 4.251.107.128:36233] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aSXLtxhx4v3NUNdMKDMQWwAAAdA"]
[Tue Nov 25 23:31:05.069456 2025] [:error] [pid 14076:tid 14097] [client 4.251.107.128:56257] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aSXLuXsB4Gz6Qw-pvBtm8wAAABA"]
[Tue Nov 25 23:31:07.712678 2025] [:error] [pid 14078:tid 14143] [client 4.251.107.128:57540] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aSXLu9VXYbb0ii_rVoK0SgAAAIY"]
[Tue Nov 25 23:31:12.057992 2025] [:error] [pid 2987:tid 3011] [client 4.251.107.128:57565] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aSXLwM-djEt-pTzPxnzqawAAAVY"]
[Tue Nov 25 23:31:15.620089 2025] [:error] [pid 43843:tid 43861] [client 4.251.107.128:56258] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aSXLwxhx4v3NUNdMKDMQbQAAAdA"]
[Tue Nov 25 23:31:18.717259 2025] [:error] [pid 14076:tid 14091] [client 4.251.107.128:56289] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aSXLxnsB4Gz6Qw-pvBtm_wAAAAo"]
[Tue Nov 25 23:31:23.028689 2025] [:error] [pid 28836:tid 29012] [client 4.251.107.128:36271] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aSXLy5wNRsoxcLQGkTcHrwAAAtY"]
[Tue Nov 25 23:31:26.027953 2025] [:error] [pid 28739:tid 28773] [client 4.251.107.128:56310] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aSXLzhxGpKmlkG4FexTWOQAAAgs"]
[Tue Nov 25 23:32:56.152373 2025] [:error] [pid 28739:tid 28780] [client 4.251.107.128:36123] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aSXMKBxGpKmlkG4FexTWqAAAAhI"]
[Tue Nov 25 23:32:58.313127 2025] [:error] [pid 14076:tid 14095] [client 4.251.107.128:56278] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aSXMKnsB4Gz6Qw-pvBtnjAAAAA4"]
[Tue Nov 25 23:33:00.070332 2025] [:error] [pid 14077:tid 14132] [client 4.251.107.128:56291] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aSXMLBG9n7UHEkwDTyjuTQAAAFY"]
[Tue Nov 25 23:33:03.167067 2025] [:error] [pid 28836:tid 28969] [client 4.251.107.128:56294] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aSXML5wNRsoxcLQGkTcIBwAAAs4"]
[Tue Nov 25 23:33:05.634953 2025] [:error] [pid 14077:tid 14133] [client 4.251.107.128:56270] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aSXMMRG9n7UHEkwDTyjuXQAAAFc"]
[Tue Nov 25 23:33:07.169605 2025] [:error] [pid 14078:tid 14151] [client 4.251.107.128:56273] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aSXMM9VXYbb0ii_rVoK1HAAAAI4"]
[Tue Nov 25 23:33:08.619798 2025] [:error] [pid 14076:tid 14082] [client 4.251.107.128:36276] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aSXMNHsB4Gz6Qw-pvBtnmgAAAAE"]
[Tue Nov 25 23:33:11.623040 2025] [:error] [pid 43843:tid 43853] [client 4.251.107.128:58895] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aSXMNxhx4v3NUNdMKDMQ6QAAAcg"]
[Tue Nov 25 23:33:15.695691 2025] [:error] [pid 28609:tid 28630] [client 4.251.107.128:56299] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aSXMOyGGdT-nZJVs3x0Q3AAAAYw"]
[Tue Nov 25 23:33:16.535392 2025] [:error] [pid 2987:tid 3013] [client 4.251.107.128:57573] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aSXMPM-djEt-pTzPxnzrEQAAAVg"]
[Tue Nov 25 23:33:25.119147 2025] [:error] [pid 14077:tid 14124] [client 4.251.107.128:36234] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aSXMRRG9n7UHEkwDTyjuagAAAE4"]
[Tue Nov 25 23:33:28.381480 2025] [:error] [pid 14077:tid 14121] [client 4.251.107.128:57545] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aSXMSBG9n7UHEkwDTyjudgAAAEs"]
[Tue Nov 25 23:33:46.113186 2025] [:error] [pid 43843:tid 43856] [client 4.251.107.128:56303] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aSXMWhhx4v3NUNdMKDMRBgAAAcs"]
[Tue Nov 25 23:33:48.158452 2025] [:error] [pid 28609:tid 28641] [client 4.251.107.128:57594] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aSXMXCGGdT-nZJVs3x0Q7QAAAZc"]
[Tue Nov 25 23:33:53.777578 2025] [:error] [pid 28609:tid 28640] [client 4.251.107.128:36252] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aSXMYSGGdT-nZJVs3x0Q-QAAAZY"]
[Tue Nov 25 23:33:55.821350 2025] [:error] [pid 43843:tid 43845] [client 4.251.107.128:57557] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aSXMYxhx4v3NUNdMKDMRGQAAAcA"]
[Tue Nov 25 23:34:15.826789 2025] [:error] [pid 2987:tid 3000] [client 4.251.107.128:57582] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXMd8-djEt-pTzPxnzrVAAAAUs"]
[Tue Nov 25 23:34:18.934192 2025] [:error] [pid 14077:tid 14128] [client 4.251.107.128:57563] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXMehG9n7UHEkwDTyju2QAAAFI"]
[Tue Nov 25 23:34:22.508126 2025] [:error] [pid 2987:tid 2993] [client 4.251.107.128:56309] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXMfs-djEt-pTzPxnzrWAAAAUQ"]
[Tue Nov 25 23:34:27.122466 2025] [:error] [pid 28836:tid 28955] [client 4.251.107.128:56295] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXMg5wNRsoxcLQGkTcIWQAAAsA"]
[Tue Nov 25 23:34:28.653628 2025] [:error] [pid 14168:tid 14173] [client 4.251.107.128:57576] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/02.php"] [unique_id "aSXMhPR-ZDU0QEgAIIurYwAAAMI"]
[Tue Nov 25 23:34:31.260623 2025] [:error] [pid 43981:tid 43986] [client 4.251.107.128:58932] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/02.php"] [unique_id "aSXMhwgZn97m_qh_RaGG4gAAAwM"]
[Tue Nov 25 23:34:34.439277 2025] [:error] [pid 14077:tid 14120] [client 4.251.107.128:57586] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/02.php"] [unique_id "aSXMihG9n7UHEkwDTyju7gAAAEo"]
[Tue Nov 25 23:34:37.492530 2025] [:error] [pid 28739:tid 28762] [client 4.251.107.128:36231] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/02.php"] [unique_id "aSXMjRxGpKmlkG4FexTXXAAAAgA"]
[Tue Nov 25 23:34:42.961179 2025] [:error] [pid 14076:tid 14102] [client 4.251.107.128:57536] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aSXMknsB4Gz6Qw-pvBtoDQAAABU"]
[Tue Nov 25 23:34:52.504777 2025] [:error] [pid 28609:tid 28627] [client 4.251.107.128:57540] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aSXMnCGGdT-nZJVs3x0RXAAAAYk"]
[Tue Nov 25 23:34:52.926414 2025] [:error] [pid 28836:tid 28986] [client 4.251.107.128:36246] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aSXMnJwNRsoxcLQGkTcIZgAAAs8"]
[Tue Nov 25 23:34:56.340818 2025] [:error] [pid 14076:tid 14101] [client 4.251.107.128:36269] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aSXMoHsB4Gz6Qw-pvBtoHQAAABQ"]
[Tue Nov 25 23:35:00.588742 2025] [:error] [pid 43981:tid 43989] [client 4.251.107.128:57590] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aSXMpAgZn97m_qh_RaGG8QAAAwY"]
[Tue Nov 25 23:35:02.205885 2025] [:error] [pid 14168:tid 14172] [client 4.251.107.128:57593] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aSXMpvR-ZDU0QEgAIIurcwAAAME"]
[Tue Nov 25 23:35:04.526784 2025] [:error] [pid 14168:tid 14186] [client 4.251.107.128:36228] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aSXMqPR-ZDU0QEgAIIurdgAAAM8"]
[Tue Nov 25 23:35:10.557379 2025] [:error] [pid 28836:tid 28955] [client 4.251.107.128:57594] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aSXMrpwNRsoxcLQGkTcIcQAAAsA"]
[Tue Nov 25 23:35:16.456306 2025] [:error] [pid 28609:tid 28624] [client 4.251.107.128:36252] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aSXMtCGGdT-nZJVs3x0RcAAAAYY"]
[Tue Nov 25 23:35:18.643897 2025] [:error] [pid 14168:tid 14183] [client 4.251.107.128:56285] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aSXMtvR-ZDU0QEgAIIurgQAAAMw"]
[Tue Nov 25 23:35:21.133940 2025] [:error] [pid 14078:tid 14153] [client 4.251.107.128:56274] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aSXMudVXYbb0ii_rVoK16wAAAJA"]
[Tue Nov 25 23:35:59.912538 2025] [:error] [pid 28739:tid 28775] [client 4.251.107.128:57568] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aSXM3xxGpKmlkG4FexTXzAAAAg0"]
[Tue Nov 25 23:36:03.487420 2025] [:error] [pid 28836:tid 29006] [client 4.251.107.128:36283] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aSXM45wNRsoxcLQGkTcImgAAAtA"]
[Tue Nov 25 23:36:06.376394 2025] [:error] [pid 14076:tid 14081] [client 4.251.107.128:56298] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aSXM5nsB4Gz6Qw-pvBtoZQAAAAA"]
[Tue Nov 25 23:36:10.227329 2025] [:error] [pid 2987:tid 2993] [client 4.251.107.128:58923] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aSXM6s-djEt-pTzPxnzrowAAAUQ"]
[Tue Nov 25 23:36:14.703208 2025] [:error] [pid 28836:tid 29014] [client 4.251.107.128:36285] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aSXM7pwNRsoxcLQGkTcIpQAAAtg"]
[Tue Nov 25 23:36:19.578276 2025] [:error] [pid 2987:tid 3010] [client 4.251.107.128:56305] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSXM88-djEt-pTzPxnzrrQAAAVU"]
[Tue Nov 25 23:36:27.830787 2025] [:error] [pid 28609:tid 28623] [client 4.251.107.128:36250] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aSXM-yGGdT-nZJVs3x0RwQAAAYU"]
[Tue Nov 25 23:37:00.613407 2025] [:error] [pid 14078:tid 14160] [client 4.251.107.128:56276] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSXNHNVXYbb0ii_rVoK2igAAAJc"]
[Tue Nov 25 23:37:03.781324 2025] [:error] [pid 14078:tid 14144] [client 4.251.107.128:58936] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aSXNH9VXYbb0ii_rVoK2kwAAAIc"]
[Tue Nov 25 23:37:07.092394 2025] [:error] [pid 14076:tid 14098] [client 4.251.107.128:57577] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aSXNI3sB4Gz6Qw-pvBtoigAAABE"]
[Tue Nov 25 23:37:10.437426 2025] [:error] [pid 14078:tid 14147] [client 4.251.107.128:36286] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aSXNJtVXYbb0ii_rVoK2mAAAAIo"]
[Tue Nov 25 23:37:13.435464 2025] [:error] [pid 28836:tid 28958] [client 4.251.107.128:57552] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aSXNKZwNRsoxcLQGkTcI5AAAAsM"]
[Tue Nov 25 23:37:16.147208 2025] [:error] [pid 14077:tid 14134] [client 4.251.107.128:57556] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aSXNLBG9n7UHEkwDTyjvhQAAAFg"]
[Tue Nov 25 23:37:21.504927 2025] [:error] [pid 14168:tid 14184] [client 4.251.107.128:36238] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aSXNMfR-ZDU0QEgAIIur9QAAAM0"]
[Tue Nov 25 23:37:26.094801 2025] [:error] [pid 14078:tid 14154] [client 4.251.107.128:36242] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aSXNNtVXYbb0ii_rVoK2qQAAAJE"]
[Tue Nov 25 23:37:30.023864 2025] [:error] [pid 28609:tid 28634] [client 4.251.107.128:57585] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aSXNOiGGdT-nZJVs3x0R8gAAAZA"]
[Tue Nov 25 23:38:07.927473 2025] [:error] [pid 43981:tid 43984] [client 4.251.107.128:56269] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aSXNXwgZn97m_qh_RaGHrwAAAwE"]
[Tue Nov 25 23:38:10.647423 2025] [:error] [pid 14076:tid 14099] [client 4.251.107.128:56292] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aSXNYnsB4Gz6Qw-pvBto1AAAABI"]
[Tue Nov 25 23:38:15.284732 2025] [:error] [pid 14076:tid 14088] [client 4.251.107.128:57589] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSXNZ3sB4Gz6Qw-pvBto3QAAAAc"]
[Tue Nov 25 23:38:24.714624 2025] [:error] [pid 28609:tid 28625] [client 4.251.107.128:36260] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSXNcCGGdT-nZJVs3x0SNAAAAYc"]
[Tue Nov 25 23:38:27.078730 2025] [:error] [pid 28739:tid 28777] [client 4.251.107.128:57574] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSXNcxxGpKmlkG4FexTYewAAAg8"]
[Tue Nov 25 23:38:44.395537 2025] [:error] [pid 2987:tid 2995] [client 4.251.107.128:56265] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aSXNhM-djEt-pTzPxnzsLgAAAUY"]
[Tue Nov 25 23:38:49.268283 2025] [:error] [pid 28609:tid 28630] [client 4.251.107.128:56300] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSXNiSGGdT-nZJVs3x0SaAAAAYw"]
[Tue Nov 25 23:38:52.882524 2025] [:error] [pid 28836:tid 28965] [client 4.251.107.128:57546] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSXNjJwNRsoxcLQGkTcJPAAAAso"]
[Tue Nov 25 23:38:59.579783 2025] [:error] [pid 28739:tid 28784] [client 4.251.107.128:36108] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSXNkxxGpKmlkG4FexTYvAAAAhY"]
[Tue Nov 25 23:39:13.458151 2025] [:error] [pid 14078:tid 14146] [client 4.251.107.128:57576] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aSXNodVXYbb0ii_rVoK3vwAAAIk"]
[Tue Nov 25 23:39:16.902494 2025] [:error] [pid 14077:tid 14132] [client 4.251.107.128:57588] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aSXNpBG9n7UHEkwDTyjv1AAAAFY"]
[Tue Nov 25 23:39:21.261207 2025] [:error] [pid 43843:tid 43848] [client 4.251.107.128:56289] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aSXNqRhx4v3NUNdMKDMSVwAAAcM"]
[Tue Nov 25 23:39:26.627245 2025] [:error] [pid 14076:tid 14102] [client 4.251.107.128:36274] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aSXNrnsB4Gz6Qw-pvBtpIgAAABU"]
[Tue Nov 25 23:39:31.842178 2025] [:error] [pid 43843:tid 43852] [client 4.251.107.128:36246] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aSXNsxhx4v3NUNdMKDMSWwAAAcc"]
[Tue Nov 25 23:39:34.619953 2025] [:error] [pid 28836:tid 29013] [client 4.251.107.128:56273] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aSXNtpwNRsoxcLQGkTcJWgAAAtc"]
[Tue Nov 25 23:39:37.897319 2025] [:error] [pid 14078:tid 14139] [client 4.251.107.128:36258] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXNudVXYbb0ii_rVoK38gAAAII"]
[Tue Nov 25 23:39:43.396755 2025] [:error] [pid 14078:tid 14161] [client 4.251.107.128:36229] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXNv9VXYbb0ii_rVoK3_QAAAJg"]
[Tue Nov 25 23:39:45.407148 2025] [:error] [pid 28609:tid 28620] [client 4.251.107.128:36280] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXNwSGGdT-nZJVs3x0SlAAAAYI"]
[Tue Nov 25 23:39:51.435785 2025] [:error] [pid 43843:tid 43866] [client 4.251.107.128:56313] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/marijuana.php"] [unique_id "aSXNxxhx4v3NUNdMKDMSagAAAdU"]
[Tue Nov 25 23:39:55.557717 2025] [:error] [pid 43843:tid 43867] [client 4.251.107.128:57537] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/marijuana.php"] [unique_id "aSXNyxhx4v3NUNdMKDMScAAAAdY"]
[Tue Nov 25 23:40:01.858588 2025] [:error] [pid 14078:tid 14152] [client 4.251.107.128:56296] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/marijuana.php"] [unique_id "aSXN0dVXYbb0ii_rVoK4FgAAAI8"]
[Tue Nov 25 23:40:03.558149 2025] [:error] [pid 28739:tid 28775] [client 4.251.107.128:57579] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/marijuana.php"] [unique_id "aSXN0xxGpKmlkG4FexTZFgAAAg0"]
[Tue Nov 25 23:40:06.006564 2025] [:error] [pid 28836:tid 29014] [client 4.251.107.128:57597] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSXN1pwNRsoxcLQGkTcJegAAAtg"]
[Tue Nov 25 23:40:15.535128 2025] [:error] [pid 28609:tid 28641] [client 4.251.107.128:57557] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSXN3yGGdT-nZJVs3x0SsgAAAZc"]
[Tue Nov 25 23:40:29.912455 2025] [:error] [pid 14077:tid 14117] [client 4.251.107.128:57599] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSXN7RG9n7UHEkwDTyjwBAAAAEc"]
[Tue Nov 25 23:40:31.417195 2025] [:error] [pid 2987:tid 3012] [client 4.251.107.128:36254] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aSXN78-djEt-pTzPxnzs4QAAAVc"]
[Tue Nov 25 23:40:34.434460 2025] [:error] [pid 43981:tid 43986] [client 4.251.107.128:56284] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aSXN8ggZn97m_qh_RaGIPQAAAwM"]
[Tue Nov 25 23:40:37.923454 2025] [:error] [pid 28609:tid 28618] [client 4.251.107.128:36125] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aSXN9SGGdT-nZJVs3x0SxwAAAYA"]
[Tue Nov 25 23:40:40.166048 2025] [:error] [pid 2987:tid 2999] [client 4.251.107.128:56294] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aSXN-M-djEt-pTzPxnzs7QAAAUo"]
[Tue Nov 25 23:40:45.036210 2025] [:error] [pid 14078:tid 14158] [client 4.251.107.128:56256] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/marijuana.php"] [unique_id "aSXN_dVXYbb0ii_rVoK4cwAAAJU"]
[Tue Nov 25 23:40:46.841858 2025] [:error] [pid 14078:tid 14155] [client 4.251.107.128:56277] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/marijuana.php"] [unique_id "aSXN_tVXYbb0ii_rVoK4dQAAAJI"]
[Tue Nov 25 23:40:48.979707 2025] [:error] [pid 28739:tid 28765] [client 4.251.107.128:36262] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/marijuana.php"] [unique_id "aSXOABxGpKmlkG4FexTZWQAAAgM"]
[Tue Nov 25 23:40:52.942899 2025] [:error] [pid 14076:tid 14100] [client 4.251.107.128:36226] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/marijuana.php"] [unique_id "aSXOBHsB4Gz6Qw-pvBtptgAAABM"]
[Tue Nov 25 23:40:55.531118 2025] [:error] [pid 14078:tid 14139] [client 4.251.107.128:56280] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aSXOB9VXYbb0ii_rVoK4igAAAII"]
[Tue Nov 25 23:40:57.368656 2025] [:error] [pid 14078:tid 14145] [client 4.251.107.128:56297] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aSXOCdVXYbb0ii_rVoK4kwAAAIg"]
[Tue Nov 25 23:41:02.145783 2025] [:error] [pid 43981:tid 44001] [client 4.251.107.128:36285] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aSXODggZn97m_qh_RaGISQAAAxI"]
[Tue Nov 25 23:41:06.441646 2025] [:error] [pid 28609:tid 28636] [client 4.251.107.128:57581] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aSXOEiGGdT-nZJVs3x0S9QAAAZI"]
[Tue Nov 25 23:41:10.749266 2025] [:error] [pid 28609:tid 28639] [client 4.251.107.128:56291] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aSXOFiGGdT-nZJVs3x0S_gAAAZU"]
[Tue Nov 25 23:41:27.826333 2025] [:error] [pid 28836:tid 28962] [client 4.251.107.128:56312] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aSXOJ5wNRsoxcLQGkTcJswAAAsc"]
[Tue Nov 25 23:41:40.397250 2025] [:error] [pid 28836:tid 28966] [client 4.251.107.128:56263] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aSXONJwNRsoxcLQGkTcJwwAAAss"]
[Tue Nov 25 23:41:43.537058 2025] [:error] [pid 14076:tid 14083] [client 4.251.107.128:58891] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aSXON3sB4Gz6Qw-pvBtp1gAAAAI"]
[Tue Nov 25 23:41:48.233562 2025] [:error] [pid 28836:tid 29011] [client 4.251.107.128:56278] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aSXOPJwNRsoxcLQGkTcJywAAAtU"]
[Tue Nov 25 23:41:51.951322 2025] [:error] [pid 14168:tid 14177] [client 4.251.107.128:56303] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aSXOP_R-ZDU0QEgAIIusxgAAAMY"]
[Tue Nov 25 23:41:58.093729 2025] [:error] [pid 28739:tid 28786] [client 4.251.107.128:56287] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aSXORhxGpKmlkG4FexTZowAAAhg"]
[Tue Nov 25 23:42:02.563363 2025] [:error] [pid 28739:tid 28770] [client 4.251.107.128:36255] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aSXOShxGpKmlkG4FexTZqwAAAgg"]
[Tue Nov 25 23:42:05.644427 2025] [:error] [pid 14077:tid 14132] [client 4.251.107.128:57544] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aSXOTRG9n7UHEkwDTyjwPwAAAFY"]
[Tue Nov 25 23:42:09.866244 2025] [:error] [pid 43843:tid 43869] [client 4.251.107.128:57538] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "aSXOURhx4v3NUNdMKDMSywAAAdg"]
[Tue Nov 25 23:42:13.150743 2025] [:error] [pid 28739:tid 28781] [client 4.251.107.128:36118] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "aSXOVRxGpKmlkG4FexTZtAAAAhM"]
[Tue Nov 25 23:42:15.821529 2025] [:error] [pid 14078:tid 14145] [client 4.251.107.128:57571] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "aSXOV9VXYbb0ii_rVoK5JgAAAIg"]
[Tue Nov 25 23:42:43.315057 2025] [:error] [pid 14077:tid 14123] [client 4.251.107.128:59541] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/network.php"] [unique_id "aSXOcxG9n7UHEkwDTyjwWAAAAE0"]
[Tue Nov 25 23:42:47.373967 2025] [:error] [pid 43981:tid 43992] [client 4.251.107.128:57543] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/network.php"] [unique_id "aSXOdwgZn97m_qh_RaGIegAAAwk"]
[Tue Nov 25 23:43:01.204617 2025] [:error] [pid 14076:tid 14092] [client 4.251.107.128:36259] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-2019.php"] [unique_id "aSXOhXsB4Gz6Qw-pvBtqCQAAAAs"]
[Tue Nov 25 23:43:04.099906 2025] [:error] [pid 14078:tid 14147] [client 4.251.107.128:58895] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-2019.php"] [unique_id "aSXOiNVXYbb0ii_rVoK5XAAAAIo"]
[Tue Nov 25 23:43:08.608878 2025] [:error] [pid 28739:tid 28764] [client 4.251.107.128:57539] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-2019.php"] [unique_id "aSXOjBxGpKmlkG4FexTaQgAAAgI"]
[Tue Nov 25 23:43:14.667004 2025] [:error] [pid 28739:tid 28775] [client 4.251.107.128:57555] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-2019.php"] [unique_id "aSXOkhxGpKmlkG4FexTaRAAAAg0"]
[Tue Nov 25 23:43:17.267123 2025] [:error] [pid 14168:tid 14179] [client 4.251.107.128:56302] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aSXOlfR-ZDU0QEgAIIutAQAAAMg"]
[Tue Nov 25 23:43:23.461267 2025] [:error] [pid 28609:tid 28621] [client 4.251.107.128:36232] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aSXOmyGGdT-nZJVs3x0T5AAAAYM"]
[Tue Nov 25 23:43:26.142275 2025] [:error] [pid 43843:tid 43867] [client 4.251.107.128:56288] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aSXOnhhx4v3NUNdMKDMTZQAAAdY"]
[Tue Nov 25 23:43:28.118405 2025] [:error] [pid 14078:tid 14148] [client 4.251.107.128:56318] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aSXOoNVXYbb0ii_rVoK5awAAAIs"]
[Tue Nov 25 23:43:31.481158 2025] [:error] [pid 28836:tid 28958] [client 4.251.107.128:57541] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSXOo5wNRsoxcLQGkTcJ9AAAAsM"]
[Tue Nov 25 23:43:34.996813 2025] [:error] [pid 14077:tid 14119] [client 4.251.107.128:36108] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSXOphG9n7UHEkwDTyjwegAAAEk"]
[Tue Nov 25 23:43:38.233560 2025] [:error] [pid 28836:tid 28963] [client 4.251.107.128:57561] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aSXOqpwNRsoxcLQGkTcJ-wAAAsg"]
[Tue Nov 25 23:44:38.313066 2025] [:error] [pid 28609:tid 28635] [client 4.251.107.128:56308] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aSXO5iGGdT-nZJVs3x0ULAAAAZE"]
[Tue Nov 25 23:44:46.912979 2025] [:error] [pid 43843:tid 43859] [client 4.251.107.128:56259] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aSXO7hhx4v3NUNdMKDMTkAAAAc4"]
[Tue Nov 25 23:45:01.528748 2025] [:error] [pid 14077:tid 14114] [client 4.251.107.128:36281] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aSXO_RG9n7UHEkwDTyjwuwAAAEQ"]
[Tue Nov 25 23:45:05.413157 2025] [:error] [pid 14076:tid 14090] [client 4.251.107.128:57599] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aSXPAXsB4Gz6Qw-pvBtqiAAAAAk"]
[Tue Nov 25 23:45:07.834698 2025] [:error] [pid 14076:tid 14091] [client 4.251.107.128:56297] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aSXPA3sB4Gz6Qw-pvBtqkAAAAAo"]
[Tue Nov 25 23:45:09.126979 2025] [:error] [pid 28609:tid 28640] [client 4.251.107.128:56285] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aSXPBSGGdT-nZJVs3x0UVgAAAZY"]
[Tue Nov 25 23:45:34.961967 2025] [:error] [pid 28739:tid 28762] [client 4.251.107.128:36245] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXPHhxGpKmlkG4FexTa_AAAAgA"]
[Tue Nov 25 23:45:36.598617 2025] [:error] [pid 43843:tid 43863] [client 4.251.107.128:57582] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXPIBhx4v3NUNdMKDMTuQAAAdI"]
[Tue Nov 25 23:45:38.619165 2025] [:error] [pid 28836:tid 28969] [client 4.251.107.128:56291] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXPIpwNRsoxcLQGkTcKlAAAAs4"]
[Tue Nov 25 23:45:40.078413 2025] [:error] [pid 28739:tid 28765] [client 4.251.107.128:57548] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXPJBxGpKmlkG4FexTbAQAAAgM"]
[Tue Nov 25 23:45:43.935004 2025] [:error] [pid 14078:tid 14157] [client 4.251.107.128:56283] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXPJ9VXYbb0ii_rVoK6MwAAAJQ"]
[Tue Nov 25 23:45:45.403307 2025] [:error] [pid 2987:tid 2995] [client 4.251.107.128:36261] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXPKc-djEt-pTzPxnztugAAAUY"]
[Tue Nov 25 23:45:46.116969 2025] [:error] [pid 14077:tid 14123] [client 4.251.107.128:56294] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXPKhG9n7UHEkwDTyjw9QAAAE0"]
[Tue Nov 25 23:45:47.191730 2025] [:error] [pid 14077:tid 14131] [client 4.251.107.128:36226] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXPKxG9n7UHEkwDTyjw-QAAAFU"]
[Tue Nov 25 23:45:50.490673 2025] [:error] [pid 28609:tid 28623] [client 4.251.107.128:57583] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSXPLiGGdT-nZJVs3x0UfAAAAYU"]
[Tue Nov 25 23:45:51.518840 2025] [:error] [pid 43981:tid 43993] [client 4.251.107.128:57567] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSXPLwgZn97m_qh_RaGJIAAAAwo"]
[Tue Nov 25 23:45:53.373558 2025] [:error] [pid 43981:tid 44004] [client 4.251.107.128:57588] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSXPMQgZn97m_qh_RaGJIgAAAxU"]
[Tue Nov 25 23:46:02.507608 2025] [:error] [pid 14077:tid 14129] [client 4.251.107.128:57557] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aSXPOhG9n7UHEkwDTyjxCgAAAFM"]
[Tue Nov 25 23:46:05.235893 2025] [:error] [pid 28609:tid 28627] [client 4.251.107.128:57575] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aSXPPSGGdT-nZJVs3x0UmQAAAYk"]
[Tue Nov 25 23:46:11.644530 2025] [:error] [pid 43843:tid 43860] [client 4.251.107.128:58881] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aSXPQxhx4v3NUNdMKDMTxwAAAc8"]
[Tue Nov 25 23:46:13.858968 2025] [:error] [pid 28609:tid 28629] [client 4.251.107.128:36260] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aSXPRSGGdT-nZJVs3x0UpAAAAYs"]
[Tue Nov 25 23:46:15.822956 2025] [:error] [pid 28609:tid 28622] [client 4.251.107.128:36237] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSXPRyGGdT-nZJVs3x0UsgAAAYQ"]
[Tue Nov 25 23:46:20.593993 2025] [:error] [pid 28609:tid 28637] [client 4.251.107.128:57563] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSXPTCGGdT-nZJVs3x0UtQAAAZM"]
[Tue Nov 25 23:46:30.225704 2025] [:error] [pid 28739:tid 28768] [client 4.251.107.128:36250] [client 4.251.107.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSXPVhxGpKmlkG4FexTbLAAAAgY"]
[Tue Nov 25 23:46:36.782188 2025] [:error] [pid 14077:tid 14128] [client 4.251.107.128:36278] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSXPXBG9n7UHEkwDTyjxLQAAAFI"]
[Tue Nov 25 23:46:39.631777 2025] [:error] [pid 43843:tid 43849] [client 4.251.107.128:56310] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSXPXxhx4v3NUNdMKDMT0gAAAcQ"]
[Tue Nov 25 23:46:43.516009 2025] [:error] [pid 28836:tid 29010] [client 4.251.107.128:57593] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSXPY5wNRsoxcLQGkTcKwQAAAtQ"]
[Tue Nov 25 23:46:51.535276 2025] [:error] [pid 14076:tid 14091] [client 4.251.107.128:56297] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/fucku.php"] [unique_id "aSXPa3sB4Gz6Qw-pvBtq6gAAAAo"]
[Tue Nov 25 23:46:52.914329 2025] [:error] [pid 43981:tid 43990] [client 4.251.107.128:58892] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/fucku.php"] [unique_id "aSXPbAgZn97m_qh_RaGJYwAAAwc"]
[Tue Nov 25 23:47:35.290457 2025] [:error] [pid 14076:tid 14086] [client 4.251.107.128:56312] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSXPl3sB4Gz6Qw-pvBtrCgAAAAU"]
[Tue Nov 25 23:47:36.839699 2025] [:error] [pid 43981:tid 43988] [client 4.251.107.128:56271] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSXPmAgZn97m_qh_RaGJfAAAAwU"]
[Tue Nov 25 23:47:39.618719 2025] [:error] [pid 28739:tid 28765] [client 4.251.107.128:57544] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSXPmxxGpKmlkG4FexTbegAAAgM"]
[Tue Nov 25 23:47:40.518981 2025] [:error] [pid 14078:tid 14152] [client 4.251.107.128:36259] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSXPnNVXYbb0ii_rVoK67wAAAI8"]
[Tue Nov 25 23:50:39.455077 2025] [:error] [pid 28609:tid 28638] [client 139.59.30.253:50613] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aSXQTyGGdT-nZJVs3x0V0QAAAZQ"], referer: binance.com
[Wed Nov 26 00:28:09.440131 2025] [:error] [pid 28836:tid 29009] [client 213.21.239.4:54840] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/developer/.git/config"] [unique_id "aSXZGZwNRsoxcLQGkTcVZAAAAtM"]
[Wed Nov 26 00:28:09.441145 2025] [:error] [pid 43981:tid 43985] [client 213.21.239.4:54868] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.git/config"] [unique_id "aSXZGQgZn97m_qh_RaGRqgAAAwI"]
[Wed Nov 26 00:28:09.442341 2025] [:error] [pid 28739:tid 28763] [client 213.21.239.4:54948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.git/config"] [unique_id "aSXZGRxGpKmlkG4FexTrTgAAAgE"]
[Wed Nov 26 00:28:09.444634 2025] [:error] [pid 28609:tid 28639] [client 213.21.239.4:54810] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim/static../.git/config"] [unique_id "aSXZGSGGdT-nZJVs3x0gHQAAAZU"]
[Wed Nov 26 00:28:09.446144 2025] [:error] [pid 28609:tid 28628] [client 213.21.239.4:54984] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/database/.git/config"] [unique_id "aSXZGSGGdT-nZJVs3x0gHgAAAYo"]
[Wed Nov 26 00:28:09.446182 2025] [:error] [pid 28609:tid 28624] [client 213.21.239.4:54838] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim/.git/config"] [unique_id "aSXZGSGGdT-nZJVs3x0gIAAAAYY"]
[Wed Nov 26 00:28:09.446288 2025] [:error] [pid 28609:tid 28642] [client 213.21.239.4:54902] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/assets../.git/config"] [unique_id "aSXZGSGGdT-nZJVs3x0gHwAAAZg"]
[Wed Nov 26 00:28:09.448219 2025] [:error] [pid 2987:tid 3008] [client 213.21.239.4:54878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/application/.git/config"] [unique_id "aSXZGc-djEt-pTzPxnz4PQAAAVM"]
[Wed Nov 26 00:28:09.448331 2025] [:error] [pid 14076:tid 14105] [client 213.21.239.4:54918] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.git/config"] [unique_id "aSXZGXsB4Gz6Qw-pvBt27AAAABg"]
[Wed Nov 26 00:28:09.450664 2025] [:error] [pid 28739:tid 28777] [client 213.21.239.4:54976] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/css../.git/config"] [unique_id "aSXZGRxGpKmlkG4FexTrTwAAAg8"]
[Wed Nov 26 00:28:09.453662 2025] [:error] [pid 28836:tid 28965] [client 213.21.239.4:54982] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/common/.git/config"] [unique_id "aSXZGZwNRsoxcLQGkTcVZgAAAso"]
[Wed Nov 26 00:28:09.455827 2025] [:error] [pid 14078:tid 14145] [client 213.21.239.4:54794] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim/..;/.git/config"] [unique_id "aSXZGdVXYbb0ii_rVoLNpAAAAIg"]
[Wed Nov 26 00:28:09.456487 2025] [:error] [pid 43981:tid 44002] [client 213.21.239.4:54782] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim/.git/config;"] [unique_id "aSXZGQgZn97m_qh_RaGRqwAAAxM"]
[Wed Nov 26 00:28:09.465675 2025] [:error] [pid 43843:tid 43859] [client 213.21.239.4:54786] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim../.git/config"] [unique_id "aSXZGRhx4v3NUNdMKDMcHgAAAc4"]
[Wed Nov 26 00:28:09.469198 2025] [:error] [pid 43981:tid 43993] [client 213.21.239.4:54854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/dev/.git/config"] [unique_id "aSXZGQgZn97m_qh_RaGRrAAAAwo"]
[Wed Nov 26 00:28:09.469646 2025] [:error] [pid 43843:tid 43855] [client 213.21.239.4:54824] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim/.git/%0Aconfig"] [unique_id "aSXZGRhx4v3NUNdMKDMcHwAAAco"]
[Wed Nov 26 00:28:09.470183 2025] [:error] [pid 14077:tid 14112] [client 213.21.239.4:54974] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backup/.git/config"] [unique_id "aSXZGRG9n7UHEkwDTyj8NwAAAEI"]
[Wed Nov 26 00:28:09.470825 2025] [:error] [pid 43981:tid 44006] [client 213.21.239.4:54938] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim/.git/config;.."] [unique_id "aSXZGQgZn97m_qh_RaGRrQAAAxc"]
[Wed Nov 26 00:28:09.471901 2025] [:error] [pid 14168:tid 14195] [client 213.21.239.4:54894] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim/;/.git/config"] [unique_id "aSXZGfR-ZDU0QEgAIIu2QAAAANg"]
[Wed Nov 26 00:28:09.472981 2025] [:error] [pid 2987:tid 3012] [client 213.21.239.4:54966] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/content../.git/config"] [unique_id "aSXZGc-djEt-pTzPxnz4PgAAAVc"]
[Wed Nov 26 00:28:11.376428 2025] [:error] [pid 14078:tid 14139] [client 213.21.239.4:55012] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/;/.git/config"] [unique_id "aSXZG9VXYbb0ii_rVoLNqQAAAII"]
[Wed Nov 26 00:28:11.393988 2025] [:error] [pid 28609:tid 28637] [client 213.21.239.4:55086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config;.."] [unique_id "aSXZGyGGdT-nZJVs3x0gJQAAAZM"]
[Wed Nov 26 00:28:11.395279 2025] [:error] [pid 43843:tid 43849] [client 213.21.239.4:55024] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/static../.git/config"] [unique_id "aSXZGxhx4v3NUNdMKDMcIwAAAcQ"]
[Wed Nov 26 00:28:11.395381 2025] [:error] [pid 2987:tid 3000] [client 213.21.239.4:55104] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.git/config"] [unique_id "aSXZG8-djEt-pTzPxnz4QAAAAUs"]
[Wed Nov 26 00:28:11.396155 2025] [:error] [pid 28836:tid 28964] [client 213.21.239.4:55036] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config;"] [unique_id "aSXZG5wNRsoxcLQGkTcVcwAAAsk"]
[Wed Nov 26 00:28:11.397003 2025] [:error] [pid 28609:tid 28629] [client 213.21.239.4:55026] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSXZGyGGdT-nZJVs3x0gJgAAAYs"]
[Wed Nov 26 00:28:11.402980 2025] [:error] [pid 14076:tid 14083] [client 213.21.239.4:55028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/..;/.git/config"] [unique_id "aSXZG3sB4Gz6Qw-pvBt27wAAAAI"]
[Wed Nov 26 00:28:11.404337 2025] [:error] [pid 14076:tid 14082] [client 213.21.239.4:55138] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.git/config;"] [unique_id "aSXZG3sB4Gz6Qw-pvBt28AAAAAE"]
[Wed Nov 26 00:28:11.406653 2025] [:error] [pid 2987:tid 2995] [client 213.21.239.4:55070] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.git/%0Aconfig"] [unique_id "aSXZG8-djEt-pTzPxnz4QQAAAUY"]
[Wed Nov 26 00:28:11.408188 2025] [:error] [pid 28836:tid 28966] [client 213.21.239.4:55030] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aSXZG5wNRsoxcLQGkTcVdAAAAss"]
[Wed Nov 26 00:28:11.409289 2025] [:error] [pid 43981:tid 44007] [client 213.21.239.4:55068] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au../.git/config"] [unique_id "aSXZGwgZn97m_qh_RaGRsAAAAxg"]
[Wed Nov 26 00:28:11.410414 2025] [:error] [pid 28739:tid 28769] [client 213.21.239.4:55152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/img../.git/config"] [unique_id "aSXZGxxGpKmlkG4FexTrUQAAAgc"]
[Wed Nov 26 00:28:11.414121 2025] [:error] [pid 14078:tid 14142] [client 213.21.239.4:55168] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/images../.git/config"] [unique_id "aSXZG9VXYbb0ii_rVoLNqgAAAIU"]
[Wed Nov 26 00:28:11.415279 2025] [:error] [pid 14168:tid 14183] [client 213.21.239.4:55128] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.git/config;.."] [unique_id "aSXZG_R-ZDU0QEgAIIu2RAAAAMw"]
[Wed Nov 26 00:28:11.415279 2025] [:error] [pid 43981:tid 43999] [client 213.21.239.4:55158] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/git/.git/config"] [unique_id "aSXZGwgZn97m_qh_RaGRsQAAAxA"]
[Wed Nov 26 00:28:11.416022 2025] [:error] [pid 14076:tid 14104] [client 213.21.239.4:55058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/;/.git/config"] [unique_id "aSXZG3sB4Gz6Qw-pvBt28QAAABc"]
[Wed Nov 26 00:28:11.416667 2025] [:error] [pid 43981:tid 43989] [client 213.21.239.4:55096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/..;/.git/config"] [unique_id "aSXZGwgZn97m_qh_RaGRsgAAAwY"]
[Wed Nov 26 00:28:13.381838 2025] [:error] [pid 43843:tid 43851] [client 213.21.239.4:48812] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/js../.git/config"] [unique_id "aSXZHRhx4v3NUNdMKDMcJgAAAcY"]
[Wed Nov 26 00:28:13.387416 2025] [:error] [pid 2987:tid 2993] [client 213.21.239.4:48836] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/qa/.git/config"] [unique_id "aSXZHc-djEt-pTzPxnz4RwAAAUQ"]
[Wed Nov 26 00:28:13.400917 2025] [:error] [pid 43981:tid 43991] [client 213.21.239.4:48906] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/..;/.git/config"] [unique_id "aSXZHQgZn97m_qh_RaGRtQAAAwg"]
[Wed Nov 26 00:28:13.402433 2025] [:error] [pid 43843:tid 43856] [client 213.21.239.4:48878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/new/.git/config"] [unique_id "aSXZHRhx4v3NUNdMKDMcJwAAAcs"]
[Wed Nov 26 00:28:13.402461 2025] [:error] [pid 43843:tid 43846] [client 213.21.239.4:48826] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/lib../.git/config"] [unique_id "aSXZHRhx4v3NUNdMKDMcKAAAAcE"]
[Wed Nov 26 00:28:13.402500 2025] [:error] [pid 14078:tid 14143] [client 213.21.239.4:48930] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.git/config"] [unique_id "aSXZHdVXYbb0ii_rVoLNrAAAAIY"]
[Wed Nov 26 00:28:13.404160 2025] [:error] [pid 28609:tid 28640] [client 213.21.239.4:48868] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/message-api/.git/config"] [unique_id "aSXZHSGGdT-nZJVs3x0gKQAAAZY"]
[Wed Nov 26 00:28:13.408406 2025] [:error] [pid 43981:tid 44000] [client 213.21.239.4:48918] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/prod/.git/config"] [unique_id "aSXZHQgZn97m_qh_RaGRtgAAAxE"]
[Wed Nov 26 00:28:13.408406 2025] [:error] [pid 14168:tid 14176] [client 213.21.239.4:48880] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.git/%0Aconfig"] [unique_id "aSXZHfR-ZDU0QEgAIIu2SQAAAMU"]
[Wed Nov 26 00:28:13.408870 2025] [:error] [pid 43981:tid 44003] [client 213.21.239.4:48862] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.git/config;.."] [unique_id "aSXZHQgZn97m_qh_RaGRtwAAAxQ"]
[Wed Nov 26 00:28:13.413702 2025] [:error] [pid 14168:tid 14192] [client 213.21.239.4:48848] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/live/.git/config"] [unique_id "aSXZHfR-ZDU0QEgAIIu2SwAAANU"]
[Wed Nov 26 00:28:13.414808 2025] [:error] [pid 28739:tid 28779] [client 213.21.239.4:48850] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.git/config;"] [unique_id "aSXZHRxGpKmlkG4FexTrVQAAAhE"]
[Wed Nov 26 00:28:13.415025 2025] [:error] [pid 43981:tid 43985] [client 213.21.239.4:48894] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/m/.git/config"] [unique_id "aSXZHQgZn97m_qh_RaGRuQAAAwI"]
[Wed Nov 26 00:28:13.417599 2025] [:error] [pid 14168:tid 14179] [client 213.21.239.4:48946] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.git/config"] [unique_id "aSXZHfR-ZDU0QEgAIIu2TAAAAMg"]
[Wed Nov 26 00:28:13.417599 2025] [:error] [pid 43981:tid 44001] [client 213.21.239.4:48922] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au../.git/config"] [unique_id "aSXZHQgZn97m_qh_RaGRugAAAxI"]
[Wed Nov 26 00:28:14.392768 2025] [:error] [pid 43843:tid 43866] [client 213.21.239.4:48968] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/;/.git/config"] [unique_id "aSXZHhhx4v3NUNdMKDMcKgAAAdU"]
[Wed Nov 26 00:28:15.383140 2025] [:error] [pid 43843:tid 43868] [client 213.21.239.4:48998] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/static../.git/config"] [unique_id "aSXZHxhx4v3NUNdMKDMcKwAAAdc"]
[Wed Nov 26 00:28:15.391351 2025] [:error] [pid 43843:tid 43859] [client 213.21.239.4:49110] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/;/.git/config"] [unique_id "aSXZHxhx4v3NUNdMKDMcLAAAAc4"]
[Wed Nov 26 00:28:15.396223 2025] [:error] [pid 2987:tid 2998] [client 213.21.239.4:49108] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSXZH8-djEt-pTzPxnz4SwAAAUk"]
[Wed Nov 26 00:28:15.397305 2025] [core:error] [pid 2987:tid 3009] [client 213.21.239.4:48986] AH10244: invalid URI path (/../config)
[Wed Nov 26 00:28:15.398155 2025] [:error] [pid 14077:tid 14128] [client 213.21.239.4:49006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/static../.git/config"] [unique_id "aSXZHxG9n7UHEkwDTyj8PwAAAFI"]
[Wed Nov 26 00:28:15.399316 2025] [:error] [pid 14077:tid 14125] [client 213.21.239.4:49146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aSXZHxG9n7UHEkwDTyj8QAAAAE8"]
[Wed Nov 26 00:28:15.400349 2025] [:error] [pid 14077:tid 14111] [client 213.21.239.4:49022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/staging/.git/config"] [unique_id "aSXZHxG9n7UHEkwDTyj8QQAAAEE"]
[Wed Nov 26 00:28:15.400627 2025] [:error] [pid 2987:tid 3010] [client 213.21.239.4:49076] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.git/config"] [unique_id "aSXZH8-djEt-pTzPxnz4TQAAAVU"]
[Wed Nov 26 00:28:15.401062 2025] [:error] [pid 2987:tid 2989] [client 213.21.239.4:49050] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/static../.git/config"] [unique_id "aSXZH8-djEt-pTzPxnz4TgAAAUA"]
[Wed Nov 26 00:28:15.404116 2025] [:error] [pid 14168:tid 14171] [client 213.21.239.4:49136] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/../.git/config"] [unique_id "aSXZH_R-ZDU0QEgAIIu2TwAAAMA"]
[Wed Nov 26 00:28:15.404261 2025] [:error] [pid 43843:tid 43855] [client 213.21.239.4:49036] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config;.."] [unique_id "aSXZHxhx4v3NUNdMKDMcLgAAAco"]
[Wed Nov 26 00:28:15.405338 2025] [:error] [pid 14168:tid 14195] [client 213.21.239.4:49060] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/uat/.git/config"] [unique_id "aSXZH_R-ZDU0QEgAIIu2UAAAANg"]
[Wed Nov 26 00:28:15.406214 2025] [:error] [pid 28739:tid 28775] [client 213.21.239.4:49120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSXZHxxGpKmlkG4FexTrWQAAAg0"]
[Wed Nov 26 00:28:15.408487 2025] [:error] [pid 28739:tid 28763] [client 213.21.239.4:49132] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/..;/.git/config"] [unique_id "aSXZHxxGpKmlkG4FexTrWgAAAgE"]
[Wed Nov 26 00:28:15.412130 2025] [:error] [pid 28739:tid 28767] [client 213.21.239.4:49010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config;"] [unique_id "aSXZHxxGpKmlkG4FexTrXAAAAgU"]
[Wed Nov 26 00:28:16.379428 2025] [:error] [pid 14076:tid 14103] [client 213.21.239.4:49150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSXZIHsB4Gz6Qw-pvBt2-QAAABY"]
[Wed Nov 26 00:28:16.390202 2025] [:error] [pid 28609:tid 28634] [client 213.21.239.4:49156] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSXZICGGdT-nZJVs3x0gLgAAAZA"]
[Wed Nov 26 03:04:04.298854 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 103.4.122.14:58322] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query insert into wp_wfstatus (ctime, level, type, msg) values ('1764097444.230664', 2, 'error', 'Error finishing writing value for wfsd_engine (MySQLi error: [1206] The total number of locks exceeds the lock table size)') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wfScanEngine->fork, wfConfig::set_ser, wordfence::status, wfLog->addStatus, wfDB->queryWrite'
[Wed Nov 26 04:57:11.330248 2025] [:error] [pid 38796:tid 38800] [client 34.60.183.159:53512] [client 34.60.183.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.183.159, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYYJwGcUUzaXxvjCXOjpAAAAUE"]
[Wed Nov 26 04:57:16.269826 2025] [:error] [pid 38796:tid 38822] [client 34.60.183.159:53512] [client 34.60.183.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSYYLAGcUUzaXxvjCXOjrgAAAVc"]
[Wed Nov 26 04:57:18.110635 2025] [:error] [pid 38796:tid 38806] [client 34.60.183.159:53512] [client 34.60.183.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.183.159, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYYLgGcUUzaXxvjCXOjtQAAAUc"]
[Wed Nov 26 06:49:49.948912 2025] [:error] [pid 2053:tid 2089] [client 45.135.232.10:59047] [client 45.135.232.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.135.232.10, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYyjaPpsJMycZy0cRpZUQAAA1U"], referer: https://makifim.com.au/xmlrpc.php
[Wed Nov 26 06:50:00.889818 2025] [:error] [pid 3011:tid 3045] [client 45.135.232.10:53743] [client 45.135.232.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.135.232.10, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYymEb0BA3GljiGlI7XfQAAAEM"], referer: https://makifim.com.au/xmlrpc.php
[Wed Nov 26 06:50:05.068458 2025] [:error] [pid 514:tid 547] [client 45.135.232.10:58919] [client 45.135.232.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.135.232.10, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aSYynP1im2wfcIabi9_8rAAAAZA"], referer: https://makifim.com.au/wp-login.php
[Wed Nov 26 08:27:24.108644 2025] [:error] [pid 45901:tid 45924] [client 84.233.212.20:65484] [client 84.233.212.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.233.212.20, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSZJbCunQ1SpfPRNrtxRNgAAARU"]
[Wed Nov 26 13:43:51.077880 2025] [autoindex:error] [pid 34743:tid 34779] [client 139.59.30.253:53681] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 21:26:37.971213 2025] [:error] [pid 45684:tid 45729] [client 216.126.239.203:33922] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aScADfg5LMxwI4-PD1eBDQAAAA4"]
[Thu Nov 27 00:53:39.856960 2025] [:error] [pid 54723:tid 54730] [client 103.77.107.57:50165] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "aScwkw2CEg7QoyDosdLy1AAAAAE"]
[Thu Nov 27 03:54:46.015415 2025] [:error] [pid 6290:tid 6317] [client 34.71.162.21:60909] [client 34.71.162.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.71.162.21, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSdbBoqL4zye-zKr6suAjgAAANc"]
[Thu Nov 27 03:54:54.756666 2025] [:error] [pid 6290:tid 6298] [client 34.71.162.21:60909] [client 34.71.162.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSdbDoqL4zye-zKr6suAowAAAMQ"]
[Thu Nov 27 03:54:57.468161 2025] [:error] [pid 6290:tid 6316] [client 34.71.162.21:60909] [client 34.71.162.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.71.162.21, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSdbEYqL4zye-zKr6suApQAAANY"]
[Thu Nov 27 08:51:41.238313 2025] [:error] [pid 39563:tid 39575] [client 143.110.213.72:36004] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.makifim.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.makifim.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSegnTNSKUd-PJ2wU0QihwAAAQo"]
[Thu Nov 27 08:51:46.193967 2025] [:error] [pid 19014:tid 19057] [client 64.225.75.246:57050] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||makifim.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "makifim.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSegoo2utvwZ4eADRmr8IwAAAE0"]
[Thu Nov 27 08:51:52.720667 2025] [:error] [pid 40009:tid 40087] [client 64.225.75.246:50960] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about"] [unique_id "aSegqEJuxjShta_KR6X9nAAAAVc"]
[Thu Nov 27 08:51:53.693015 2025] [:error] [pid 19014:tid 19058] [client 64.225.75.246:50962] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/debug/default/view"] [unique_id "aSegqY2utvwZ4eADRmr8LAAAAE4"]
[Thu Nov 27 08:51:54.666683 2025] [:error] [pid 19013:tid 19025] [client 64.225.75.246:50964] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2/_catalog"] [unique_id "aSegqoaBrX8b6-N6_86YDAAAAAg"]
[Thu Nov 27 08:51:55.630189 2025] [:error] [pid 19013:tid 19026] [client 64.225.75.246:50980] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSegq4aBrX8b6-N6_86YDgAAAAk"]
[Thu Nov 27 08:51:56.592978 2025] [:error] [pid 40009:tid 40074] [client 64.225.75.246:50990] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/server-status"] [unique_id "aSegrEJuxjShta_KR6X9rwAAAUs"]
[Thu Nov 27 08:51:57.602891 2025] [authz_core:error] [pid 19013:tid 19018] [client 143.110.213.72:47146] AH01630: client denied by server configuration: /home/makifimc/public_html/server-status
[Thu Nov 27 08:51:57.709104 2025] [:error] [pid 40009:tid 40063] [client 64.225.75.246:50190] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/login.action"] [unique_id "aSegrUJuxjShta_KR6X9vgAAAUE"]
[Thu Nov 27 08:51:58.782904 2025] [:error] [pid 19013:tid 19038] [client 64.225.75.246:50206] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/_all_dbs"] [unique_id "aSegroaBrX8b6-N6_86YEAAAABU"]
[Thu Nov 27 08:51:59.770704 2025] [:error] [pid 19119:tid 19174] [client 64.225.75.246:50212] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.DS_Store"] [unique_id "aSegrxsL_RTusriYkwd9_QAAAMA"]
[Thu Nov 27 08:52:00.827423 2025] [:error] [pid 19119:tid 19196] [client 64.225.75.246:50228] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aSegsBsL_RTusriYkwd-AwAAANY"]
[Thu Nov 27 08:52:01.841769 2025] [:error] [pid 40009:tid 40079] [client 64.225.75.246:50244] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aSegsUJuxjShta_KR6X-IQAAAU8"]
[Thu Nov 27 08:52:02.803846 2025] [:error] [pid 19119:tid 19197] [client 64.225.75.246:50254] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSegshsL_RTusriYkwd-GAAAANc"]
[Thu Nov 27 08:52:03.827535 2025] [:error] [pid 19119:tid 19192] [client 64.225.75.246:50256] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.json"] [unique_id "aSegsxsL_RTusriYkwd-HQAAANI"]
[Thu Nov 27 08:52:04.811504 2025] [:error] [pid 19119:tid 19191] [client 64.225.75.246:50258] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/telescope/requests"] [unique_id "aSegtBsL_RTusriYkwd-IAAAANE"]
[Thu Nov 27 08:52:05.781923 2025] [:error] [pid 19119:tid 19194] [client 64.225.75.246:50272] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aSegtRsL_RTusriYkwd-JAAAANQ"]
[Thu Nov 27 08:52:05.963146 2025] [:error] [pid 19013:tid 19021] [client 143.110.213.72:40618] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "aSegtYaBrX8b6-N6_86YMAAAAAQ"]
[Thu Nov 27 08:52:06.806567 2025] [:error] [pid 19013:tid 19041] [client 64.225.75.246:50276] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aSegtoaBrX8b6-N6_86YMgAAABg"]
[Thu Nov 27 08:52:06.830971 2025] [:error] [pid 19013:tid 19018] [client 143.110.213.72:40620] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aSegtoaBrX8b6-N6_86YMwAAAAE"]
[Thu Nov 27 08:53:12.061566 2025] [:error] [pid 19014:tid 19053] [client 205.169.39.244:59063] [client 205.169.39.244] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.70.106_2d969d8071b542d61d3e68d48bb83cae7a49d5cb"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/wp-content/themes/Your-Generated-Divi-child-theme-template-by-DiviCake/style.css"] [unique_id "aSeg9o2utvwZ4eADRmr8kQAAAEk"], referer: https://makifim.com.au/
[Thu Nov 27 09:14:30.237118 2025] [:error] [pid 40009:tid 40072] [client 107.175.205.29:34505] [client 107.175.205.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.175.205.29, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSel9kJuxjShta_KR6UIaAAAAUk"], referer: https://makifim.com.au/
[Thu Nov 27 09:14:38.870241 2025] [:error] [pid 19119:tid 19187] [client 107.175.205.29:34773] [client 107.175.205.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.175.205.29, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aSel_hsL_RTusriYkweKgwAAAM0"], referer: https://makifim.com.au/
[Mon Dec 01 08:55:48.496477 2025] [proxy_fcgi:error] [pid 37745:tid 37758] [client 103.172.76.104:10163] AH01071: Got error 'PHP message: Malformed cookie redaction patterns received, response body: {"success":false,"errorMessage":"Request rate limit reached."}', referer: https://makifim.com.au/
[Mon Dec 01 08:55:52.819170 2025] [proxy_fcgi:error] [pid 37746:tid 37776] [client 103.172.76.104:10787] AH01071: Got error 'PHP message: Malformed cookie redaction patterns received, response body: {"success":false,"errorMessage":"Request rate limit reached."}', referer: https://makifim.com.au/
[Mon Dec 01 14:33:04.052149 2025] [proxy_fcgi:error] [pid 50143:tid 50166] [client 143.44.165.232:49594] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_theme_roots', 'a:3:{s:4:\\"Divi\\";s:7:\\"/themes\\";s:52:\\"Your-Generated-Divi-child-theme-template-by-DiviCake\\";s:7:\\"/themes\\";s:16:\\"twentytwentyfive\\";s:7:\\"/themes\\";}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('after_setup_theme'), WP_Hook->do_action, WP_Hook->apply_filters, it_registration_list_init, require_once('/plugins/ithemes-security-pro/lib/updater/init.php'), require('/plugins/ithemes-security-pro/lib/updater/admin.php'), Ithemes_Updater_Admin->__construct, Ithemes_Updater_Packages::get_packages_to_include_in_ui, Ithemes_Updater_Packages::get_local_details, Ithemes_Updater_Packages::...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_timeout_wp_theme_files_patterns-88f2b1bac84bef5b9e8e4f962e64f409', '1764572583', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_wp_theme_files_patterns-88f2b1bac84bef5b9e8e4f962e64f409', 'a:2:{s:7:\\"version\\";s:3:\\"1.0\\";s:8:\\"patterns\\";a:0:{}}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_timeout_wp_theme_files_patterns-3b23ae1e99ee6913382a1a5c16971124', '1764572583', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_wp_theme_files_patterns-3b23ae1e99ee6913382a1a5c16971124', 'a:2:{s:7:\\"version\\";s:6:\\"4.27.4\\";s:8:\\"patterns\\";a:0:{}}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_option', referer: https://makifim.com.au/
[Mon Dec 01 14:33:04.853923 2025] [proxy_fcgi:error] [pid 50143:tid 50154] [client 143.44.165.232:49641] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_wp_theme_files_patterns-3b23ae1e99ee6913382a1a5c16971124', 'a:2:{s:7:\\"version\\";s:6:\\"4.27.4\\";s:8:\\"patterns\\";a:0:{}}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_option', referer: https://makifim.com.au/
[Mon Dec 01 14:33:05.160631 2025] [proxy_fcgi:error] [pid 57714:tid 57733] [client 143.44.165.232:49644] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_site_transient_wp_theme_files_patterns-3b23ae1e99ee6913382a1a5c16971124', 'a:2:{s:7:\\"version\\";s:6:\\"4.27.4\\";s:8:\\"patterns\\";a:0:{}}', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, _register_theme_block_patterns, WP_Theme->get_block_patterns, WP_Theme->set_pattern_cache, set_site_transient, add_site_option, add_network_option, add_option', referer: https://makifim.com.au/
[Mon Dec 01 19:52:53.719870 2025] [autoindex:error] [pid 3247:tid 3291] [client 139.59.37.180:55088] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Dec 02 00:51:50.048839 2025] [:error] [pid 56397:tid 56410] [client 34.86.128.246:57790] [client 34.86.128.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.128.246, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aS3HpsGKI2_WNDIMokID8gAAAMs"]
[Tue Dec 02 02:18:31.910252 2025] [:error] [pid 56397:tid 56406] [client 103.65.236.149:54712] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "aS3b98GKI2_WNDIMokI0KAAAAMc"]
[Tue Dec 02 02:18:32.202817 2025] [:error] [pid 25307:tid 25330] [client 103.65.236.149:65291] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aS3b-HJ-V-CI00LOhTPSfAAAAVU"]
[Tue Dec 02 15:59:24.388691 2025] [:error] [pid 3649:tid 3716] [client 62.60.131.162:49863] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aS6cXLwjL4uqC6YFjxFXTgAAAIU"]
[Tue Dec 02 16:24:39.747689 2025] [:error] [pid 3649:tid 3722] [client 15.152.116.241:51576] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpversion.php"] [unique_id "aS6iR7wjL4uqC6YFjxFe2QAAAIs"]
[Tue Dec 02 16:24:40.311266 2025] [:error] [pid 3648:tid 3703] [client 15.152.116.241:51586] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_version.php"] [unique_id "aS6iSOQEp5icp6XOJr2klQAAAFM"]
[Tue Dec 02 16:24:40.873099 2025] [:error] [pid 3648:tid 3704] [client 15.152.116.241:51596] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/serverinfo.php"] [unique_id "aS6iSOQEp5icp6XOJr2klwAAAFQ"]
[Tue Dec 02 16:24:41.434422 2025] [:error] [pid 3648:tid 3692] [client 15.152.116.241:51612] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/server.php"] [unique_id "aS6iSeQEp5icp6XOJr2kmgAAAEg"]
[Tue Dec 02 16:24:41.998884 2025] [:error] [pid 5272:tid 5284] [client 15.152.116.241:51618] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/debug.php"] [unique_id "aS6iSewbFoRzPGfZYVQxjwAAAUk"]
[Tue Dec 02 16:24:42.560401 2025] [:error] [pid 48650:tid 48665] [client 15.152.116.241:51628] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/diagnostic.php"] [unique_id "aS6iSoQuWSn3xrJsXbk59gAAAco"]
[Tue Dec 02 16:24:43.121602 2025] [:error] [pid 48650:tid 48664] [client 15.152.116.241:51638] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phptest.php"] [unique_id "aS6iS4QuWSn3xrJsXbk59wAAAck"]
[Tue Dec 02 16:24:43.682141 2025] [:error] [pid 5273:tid 5315] [client 15.152.116.241:51646] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/check.php"] [unique_id "aS6iSyMmXO5H1kNwHHUIHQAAAY0"]
[Tue Dec 02 16:24:44.241505 2025] [:error] [pid 3647:tid 3662] [client 15.152.116.241:51650] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/probe.php"] [unique_id "aS6iTFJaqGDFgh_0XI9ouAAAAAk"]
[Tue Dec 02 16:24:44.804517 2025] [:error] [pid 5232:tid 5247] [client 15.152.116.241:51654] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aS6iTAApmO-auDy1ob7ArAAAAQ0"]
[Tue Dec 02 16:24:45.363860 2025] [:error] [pid 48650:tid 48663] [client 15.152.116.241:51670] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aS6iTYQuWSn3xrJsXbk5-wAAAcg"]
[Tue Dec 02 16:24:45.927941 2025] [:error] [pid 3649:tid 3734] [client 15.152.116.241:51680] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aS6iTbwjL4uqC6YFjxFe3QAAAJc"]
[Tue Dec 02 16:24:46.488757 2025] [:error] [pid 5232:tid 5241] [client 15.152.116.241:38874] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aS6iTgApmO-auDy1ob7AsAAAAQc"]
[Tue Dec 02 16:24:47.054817 2025] [:error] [pid 3648:tid 3696] [client 15.152.116.241:38890] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aS6iT-QEp5icp6XOJr2koAAAAEw"]
[Tue Dec 02 16:24:47.615484 2025] [:error] [pid 3649:tid 3725] [client 15.152.116.241:38896] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aS6iT7wjL4uqC6YFjxFe5AAAAI4"]
[Tue Dec 02 16:24:48.177652 2025] [:error] [pid 5232:tid 5248] [client 15.152.116.241:38908] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info_php.php"] [unique_id "aS6iUAApmO-auDy1ob7AtgAAAQ4"]
[Tue Dec 02 16:24:48.741237 2025] [:error] [pid 5232:tid 5256] [client 15.152.116.241:38922] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php-info.php"] [unique_id "aS6iUAApmO-auDy1ob7AuQAAARY"]
[Tue Dec 02 16:24:49.302277 2025] [:error] [pid 5232:tid 5246] [client 15.152.116.241:38934] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infophp.php"] [unique_id "aS6iUQApmO-auDy1ob7AvQAAAQw"]
[Tue Dec 02 16:24:49.866281 2025] [:error] [pid 3647:tid 3660] [client 15.152.116.241:38938] [client 15.152.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/testphp.php"] [unique_id "aS6iUVJaqGDFgh_0XI9ovwAAAAc"]
[Tue Dec 02 16:24:50.628107 2025] [:error] [pid 3649:tid 3731] [client 15.152.116.241:38940] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aS6iUrwjL4uqC6YFjxFe7AAAAJQ"]
[Tue Dec 02 16:24:51.456366 2025] [:error] [pid 3648:tid 3684] [client 15.152.116.241:38956] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aS6iU-QEp5icp6XOJr2kowAAAEA"]
[Tue Dec 02 16:24:52.357274 2025] [:error] [pid 3647:tid 3675] [client 15.152.116.241:38960] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aS6iVFJaqGDFgh_0XI9owwAAABY"]
[Tue Dec 02 16:24:53.237330 2025] [:error] [pid 48650:tid 48664] [client 15.152.116.241:38968] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.remote"] [unique_id "aS6iVYQuWSn3xrJsXbk6BAAAAck"]
[Tue Dec 02 16:24:54.168269 2025] [:error] [pid 3648:tid 3692] [client 15.152.116.241:38976] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aS6iVuQEp5icp6XOJr2kpgAAAEg"]
[Tue Dec 02 16:24:54.896621 2025] [:error] [pid 3760:tid 3765] [client 15.152.116.241:38982] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aS6iVljLYEjdWVcKgVU6rwAAAMM"]
[Tue Dec 02 16:24:55.514496 2025] [:error] [pid 48650:tid 48656] [client 15.152.116.241:38986] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aS6iV4QuWSn3xrJsXbk6CQAAAcE"]
[Tue Dec 02 16:24:56.117301 2025] [:error] [pid 3648:tid 3697] [client 15.152.116.241:39000] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aS6iWOQEp5icp6XOJr2kqAAAAE0"]
[Tue Dec 02 16:24:56.681295 2025] [:error] [pid 3648:tid 3686] [client 15.152.116.241:57934] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aS6iWOQEp5icp6XOJr2kqwAAAEI"]
[Tue Dec 02 16:24:57.244321 2025] [:error] [pid 3760:tid 3771] [client 15.152.116.241:57950] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "aS6iWVjLYEjdWVcKgVU6sAAAAMk"]
[Tue Dec 02 16:24:57.804626 2025] [:error] [pid 3760:tid 3776] [client 15.152.116.241:57958] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aS6iWVjLYEjdWVcKgVU6sgAAAM4"]
[Tue Dec 02 16:24:58.367496 2025] [:error] [pid 48650:tid 48671] [client 15.152.116.241:57974] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aS6iWoQuWSn3xrJsXbk6DQAAAdA"]
[Tue Dec 02 16:24:58.932102 2025] [:error] [pid 5272:tid 5297] [client 15.152.116.241:57990] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aS6iWuwbFoRzPGfZYVQxmAAAAVY"]
[Tue Dec 02 16:24:59.496386 2025] [:error] [pid 48650:tid 48669] [client 15.152.116.241:57996] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.1"] [unique_id "aS6iW4QuWSn3xrJsXbk6DgAAAc4"]
[Tue Dec 02 16:25:00.059777 2025] [:error] [pid 5232:tid 5247] [client 15.152.116.241:58000] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.2"] [unique_id "aS6iXAApmO-auDy1ob7AxgAAAQ0"]
[Tue Dec 02 16:25:00.624159 2025] [:error] [pid 3647:tid 3669] [client 15.152.116.241:58014] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod.local"] [unique_id "aS6iXFJaqGDFgh_0XI9oywAAABA"]
[Tue Dec 02 16:25:01.186749 2025] [:error] [pid 3760:tid 3777] [client 15.152.116.241:58018] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev.local"] [unique_id "aS6iXVjLYEjdWVcKgVU6tAAAAM8"]
[Tue Dec 02 16:25:01.748007 2025] [:error] [pid 5272:tid 5288] [client 15.152.116.241:58026] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/vendor/.env"] [unique_id "aS6iXewbFoRzPGfZYVQxmwAAAU0"]
[Tue Dec 02 16:25:02.314051 2025] [:error] [pid 5273:tid 5305] [client 15.152.116.241:58034] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/lib/.env"] [unique_id "aS6iXiMmXO5H1kNwHHUINAAAAYM"]
[Tue Dec 02 16:25:02.876745 2025] [:error] [pid 3647:tid 3675] [client 15.152.116.241:58044] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/lab/.env"] [unique_id "aS6iXlJaqGDFgh_0XI9o1QAAABY"]
[Tue Dec 02 16:25:03.439073 2025] [:error] [pid 3648:tid 3708] [client 15.152.116.241:58058] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/cronlab/.env"] [unique_id "aS6iX-QEp5icp6XOJr2krwAAAFg"]
[Tue Dec 02 16:25:04.003654 2025] [:error] [pid 3648:tid 3704] [client 15.152.116.241:58074] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/cron/.env"] [unique_id "aS6iYOQEp5icp6XOJr2ksAAAAFQ"]
[Tue Dec 02 16:25:04.565802 2025] [:error] [pid 48650:tid 48670] [client 15.152.116.241:58078] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/core/.env"] [unique_id "aS6iYIQuWSn3xrJsXbk6QgAAAc8"]
[Tue Dec 02 16:25:05.127639 2025] [:error] [pid 3649:tid 3734] [client 15.152.116.241:58084] [client 15.152.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/core/app/.env"] [unique_id "aS6iYbwjL4uqC6YFjxFe9AAAAJc"]
[Tue Dec 02 20:22:29.278860 2025] [:error] [pid 3647:tid 3664] [client 34.139.107.70:58860] [client 34.139.107.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.107.70, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aS7aBVJaqGDFgh_0XI-hBwAAAAs"]
[Tue Dec 02 20:22:34.481018 2025] [:error] [pid 3647:tid 3653] [client 34.139.107.70:58860] [client 34.139.107.70] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS7aClJaqGDFgh_0XI-hDQAAAAA"]
[Tue Dec 02 20:22:36.652544 2025] [:error] [pid 3647:tid 3668] [client 34.139.107.70:58860] [client 34.139.107.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.107.70, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aS7aDFJaqGDFgh_0XI-hEQAAAA8"]
[Tue Dec 02 21:46:38.022643 2025] [:error] [pid 3648:tid 3699] [client 136.119.63.146:60910] [client 136.119.63.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aS7tvuQEp5icp6XOJr0KUgAAAE8"]
[Tue Dec 02 21:46:38.835306 2025] [:error] [pid 48650:tid 48658] [client 136.119.63.146:60924] [client 136.119.63.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/favicon.ico"] [unique_id "aS7tvoQuWSn3xrJsXbnEygAAAcM"]
[Tue Dec 02 21:46:46.892219 2025] [:error] [pid 3648:tid 3696] [client 136.113.244.29:48110] [client 136.113.244.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "aS7txuQEp5icp6XOJr0KYgAAAEw"]
[Tue Dec 02 21:46:47.697942 2025] [:error] [pid 48650:tid 48669] [client 136.113.244.29:48114] [client 136.113.244.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.makifim.com.au"] [uri "/favicon.ico"] [unique_id "aS7tx4QuWSn3xrJsXbnE3AAAAc4"]
[Wed Dec 03 01:14:03.194158 2025] [:error] [pid 25475:tid 25530] [client 34.83.101.104:50719] [client 34.83.101.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.101.104, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8eWx7VdEeEe8GnPSUdpwAAARI"]
[Wed Dec 03 01:14:09.769248 2025] [:error] [pid 25475:tid 25529] [client 34.83.101.104:50719] [client 34.83.101.104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS8eYR7VdEeEe8GnPSUdwgAAARE"]
[Wed Dec 03 01:14:11.534832 2025] [:error] [pid 25475:tid 25518] [client 34.83.101.104:50719] [client 34.83.101.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.101.104, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8eYx7VdEeEe8GnPSUd0QAAAQY"]
[Wed Dec 03 01:50:44.540404 2025] [:error] [pid 47067:tid 47074] [client 34.75.250.200:52972] [client 34.75.250.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.250.200, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8m9AcYJkWYuBnpVapLmgAAAAI"]
[Wed Dec 03 01:50:49.894659 2025] [:error] [pid 47067:tid 47077] [client 34.75.250.200:52972] [client 34.75.250.200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS8m-QcYJkWYuBnpVapLqQAAAAU"]
[Wed Dec 03 01:50:51.666666 2025] [:error] [pid 47067:tid 47096] [client 34.75.250.200:52972] [client 34.75.250.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.250.200, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8m-wcYJkWYuBnpVapLsQAAABg"]
[Wed Dec 03 01:59:52.581625 2025] [:error] [pid 25475:tid 25530] [client 198.98.52.120:55146] [client 198.98.52.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.52.120, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aS8pGB7VdEeEe8GnPSVA2gAAARI"], referer: http://www.google.com.hk
[Wed Dec 03 02:49:20.798466 2025] [:error] [pid 25475:tid 25520] [client 135.181.4.161:48760] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/robots.txt"] [unique_id "aS80sB7VdEeEe8GnPSVusQAAAQg"]
[Wed Dec 03 02:49:21.887625 2025] [:error] [pid 47067:tid 47085] [client 135.181.4.161:48776] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/robots.txt"] [unique_id "aS80sQcYJkWYuBnpVapxCQAAAA0"]
[Wed Dec 03 05:00:40.186037 2025] [:error] [pid 33336:tid 33348] [client 93.123.109.132:33562] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aS9TeF1BwcDaKU65W1UVeAAAAUc"]
[Wed Dec 03 05:00:44.464124 2025] [:error] [pid 33336:tid 33353] [client 93.123.109.132:33652] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aS9TfF1BwcDaKU65W1UVggAAAUw"]
[Wed Dec 03 05:00:48.351740 2025] [:error] [pid 33412:tid 33446] [client 93.123.109.132:33728] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "aS9TgEcTQQQWx2_k4FcwYwAAAgI"]
[Wed Dec 03 05:00:52.109419 2025] [:error] [pid 33411:tid 33428] [client 93.123.109.132:33812] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "aS9ThAaAszyHc_21rY_2EAAAAcs"]
[Wed Dec 03 05:00:55.491629 2025] [:error] [pid 33526:tid 33552] [client 93.123.109.132:33872] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/core/.env"] [unique_id "aS9Th2kHVvyO7JLEhwYBBAAAApg"]
[Wed Dec 03 05:24:15.554781 2025] [:error] [pid 33412:tid 33456] [client 134.209.175.162:60524] [client 134.209.175.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aS9Y_0cTQQQWx2_k4Fc1MAAAAgw"]
[Wed Dec 03 06:58:41.916223 2025] [:error] [pid 33559:tid 33577] [client 208.115.224.163:51771] [client 208.115.224.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.163, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aS9vIRjwmvaY39XExDt23wAAAtA"]
[Wed Dec 03 19:30:24.383626 2025] [:error] [pid 32437:tid 32446] [client 3.68.86.79:47758] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTAfUKBId4T5gQoDbCFcUAAAAAY"]
[Wed Dec 03 19:30:25.513027 2025] [:error] [pid 20669:tid 20681] [client 3.68.86.79:47764] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "aTAfUZLWoJXGOhmabmulTQAAAUU"]
[Wed Dec 03 19:30:26.645662 2025] [:error] [pid 32437:tid 32463] [client 3.68.86.79:47768] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.local"] [unique_id "aTAfUqBId4T5gQoDbCFcUwAAABc"]
[Wed Dec 03 19:30:27.775318 2025] [:error] [pid 32437:tid 32460] [client 3.68.86.79:47784] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.production"] [unique_id "aTAfU6BId4T5gQoDbCFcVQAAABQ"]
[Wed Dec 03 19:30:28.904821 2025] [:error] [pid 20707:tid 20731] [client 3.68.86.79:47800] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.development"] [unique_id "aTAfVDObjEHgU5ngsxfSewAAARY"]
[Wed Dec 03 19:30:30.023955 2025] [:error] [pid 20707:tid 20715] [client 3.68.86.79:47802] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.bak"] [unique_id "aTAfVjObjEHgU5ngsxfSfQAAAQY"]
[Wed Dec 03 19:30:31.174076 2025] [:error] [pid 20707:tid 20718] [client 3.68.86.79:47990] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.example"] [unique_id "aTAfVzObjEHgU5ngsxfSggAAAQk"]
[Wed Dec 03 19:30:32.305461 2025] [:error] [pid 47815:tid 47835] [client 3.68.86.79:48006] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.test"] [unique_id "aTAfWETsjPA8HXY_dpHLhAAAANI"]
[Wed Dec 03 19:31:00.103520 2025] [:error] [pid 20669:tid 20689] [client 3.68.86.79:51118] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/config.ini"] [unique_id "aTAfdJLWoJXGOhmabmulawAAAU0"]
[Wed Dec 03 19:31:36.936390 2025] [:error] [pid 20669:tid 20700] [client 3.68.86.79:38228] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/wp-config.php"] [unique_id "aTAfmJLWoJXGOhmabmulkwAAAVg"]
[Wed Dec 03 19:31:38.059891 2025] [:error] [pid 20669:tid 20683] [client 3.68.86.79:38240] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/composer.json"] [unique_id "aTAfmpLWoJXGOhmabmullQAAAUc"]
[Wed Dec 03 19:31:41.715453 2025] [:error] [pid 32437:tid 32451] [client 3.68.86.79:36650] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.php"] [unique_id "aTAfnaBId4T5gQoDbCFcqQAAAAs"]
[Wed Dec 03 19:32:11.150562 2025] [:error] [pid 32437:tid 32450] [client 3.68.86.79:34476] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/aws/config.ini"] [unique_id "aTAfu6BId4T5gQoDbCFcugAAAAo"]
[Wed Dec 03 19:32:12.286145 2025] [:error] [pid 20669:tid 20684] [client 3.68.86.79:34482] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/aws/credentials.bak"] [unique_id "aTAfvJLWoJXGOhmabmulswAAAUg"]
[Wed Dec 03 19:32:21.245573 2025] [:error] [pid 20607:tid 20617] [client 3.68.86.79:58090] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/.aws/config.bak"] [unique_id "aTAfxfpiIcI2BRWBwqx14wAAAEc"]
[Wed Dec 03 19:33:05.551985 2025] [:error] [pid 20669:tid 20684] [client 3.68.86.79:45298] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/stripe.ini"] [unique_id "aTAf8ZLWoJXGOhmabmumAAAAAUg"]
[Wed Dec 03 19:33:14.285796 2025] [:error] [pid 47815:tid 47828] [client 3.68.86.79:42202] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.stripe"] [unique_id "aTAf-kTsjPA8HXY_dpHL5AAAAMs"]
[Wed Dec 03 19:33:25.816941 2025] [:error] [pid 47926:tid 47940] [client 3.68.86.79:53202] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.django"] [unique_id "aTAgBWmj6HWCHJ9euRKDSwAAAYw"]
[Wed Dec 03 19:33:50.231118 2025] [:error] [pid 20669:tid 20700] [client 3.68.86.79:59914] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/django.ini"] [unique_id "aTAgHpLWoJXGOhmabmumXgAAAVg"]
[Wed Dec 03 19:33:59.248254 2025] [:error] [pid 47926:tid 47949] [client 3.68.86.79:45850] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/config/master.key"] [unique_id "aTAgJ2mj6HWCHJ9euRKDdgAAAZU"]
[Wed Dec 03 19:34:35.634733 2025] [:error] [pid 20669:tid 20695] [client 3.68.86.79:34288] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".key.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/master.key.bak"] [unique_id "aTAgS5LWoJXGOhmabmumlgAAAVM"]
[Wed Dec 03 19:34:44.263262 2025] [:error] [pid 20707:tid 20728] [client 3.68.86.79:60556] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.js"] [unique_id "aTAgVDObjEHgU5ngsxfT-AAAARM"]
[Wed Dec 03 19:35:36.219686 2025] [:error] [pid 47815:tid 47820] [client 3.68.86.79:34484] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/app.ini"] [unique_id "aTAgiETsjPA8HXY_dpHMsAAAAMM"]
[Wed Dec 03 19:35:37.353299 2025] [:error] [pid 47926:tid 47944] [client 3.68.86.79:34494] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/local.ini"] [unique_id "aTAgiWmj6HWCHJ9euRKD2AAAAZA"]
[Wed Dec 03 19:35:38.475653 2025] [:error] [pid 20669:tid 20690] [client 3.68.86.79:34506] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/secrets.ini"] [unique_id "aTAgipLWoJXGOhmabmum6gAAAU4"]
[Wed Dec 03 19:35:54.778565 2025] [:error] [pid 20608:tid 20652] [client 3.68.86.79:36400] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/php.ini"] [unique_id "aTAgmk5WGptz5j0ZvYeKuAAAAI8"]
[Wed Dec 03 19:36:01.052000 2025] [:error] [pid 47926:tid 47934] [client 3.68.86.79:53918] [client 3.68.86.79] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/system.ini"] [unique_id "aTAgoWmj6HWCHJ9euRKD9QAAAYY"]
[Thu Dec 04 03:11:30.410735 2025] [autoindex:error] [pid 63344:tid 63361] [client 143.110.180.207:59717] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 04 03:56:23.527924 2025] [:error] [pid 20600:tid 20672] [client 78.84.169.238:49300] [client 78.84.169.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "aTCV552GuHQdx_uRS2oB6wAAAI8"]
[Thu Dec 04 05:01:24.225935 2025] [:error] [pid 2244:tid 2248] [client 34.57.230.197:62499] [client 34.57.230.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.57.230.197, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTClJJm00CCLpKa0F70R4gAAAMI"]
[Thu Dec 04 05:01:31.886289 2025] [:error] [pid 2244:tid 2268] [client 34.57.230.197:62499] [client 34.57.230.197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTClK5m00CCLpKa0F70R9wAAANU"]
[Thu Dec 04 05:01:34.234790 2025] [:error] [pid 2244:tid 2269] [client 34.57.230.197:62499] [client 34.57.230.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.57.230.197, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTClLpm00CCLpKa0F70SBQAAANY"]
[Thu Dec 04 06:41:54.621883 2025] [:error] [pid 2161:tid 2230] [client 195.178.110.14:51145] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTC8sijiGdnP9Am2woV5YAAAAI0"]
[Thu Dec 04 06:42:07.428433 2025] [:error] [pid 63383:tid 63429] [client 195.178.110.11:59552] [client 195.178.110.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTC8v1JYyG_QEWdAPIWppgAAAsw"]
[Thu Dec 04 14:41:00.150752 2025] [:error] [pid 63383:tid 63441] [client 165.22.235.87:63438] [client 165.22.235.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.235.87, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTEs_FJYyG_QEWdAPIU3GQAAAtg"]
[Thu Dec 04 14:41:03.224508 2025] [:error] [pid 63383:tid 63427] [client 165.22.235.87:63438] [client 165.22.235.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.235.87, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTEs_1JYyG_QEWdAPIU3HwAAAso"]
[Thu Dec 04 21:24:57.310694 2025] [:error] [pid 2244:tid 2257] [client 34.135.38.67:50512] [client 34.135.38.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.38.67, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGLqZm00CCLpKa0F71tngAAAMs"]
[Thu Dec 04 21:25:03.649681 2025] [:error] [pid 2244:tid 2266] [client 34.135.38.67:50512] [client 34.135.38.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTGLr5m00CCLpKa0F71tpwAAANM"]
[Thu Dec 04 21:25:05.467646 2025] [:error] [pid 2244:tid 2259] [client 34.135.38.67:50512] [client 34.135.38.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.38.67, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGLsZm00CCLpKa0F71tqQAAAM0"]
[Thu Dec 04 22:38:29.744363 2025] [:error] [pid 63290:tid 63316] [client 34.86.243.169:61381] [client 34.86.243.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.243.169, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGc5SoM7G4ZFQQHTRxN5AAAAVg"]
[Thu Dec 04 22:38:36.443771 2025] [:error] [pid 63290:tid 63310] [client 34.86.243.169:61381] [client 34.86.243.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTGc7CoM7G4ZFQQHTRxN7AAAAVI"]
[Thu Dec 04 22:38:38.309275 2025] [:error] [pid 63290:tid 63308] [client 34.86.243.169:61381] [client 34.86.243.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.243.169, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGc7ioM7G4ZFQQHTRxN8wAAAVA"]
[Thu Dec 04 22:38:43.800937 2025] [:error] [pid 63382:tid 63473] [client 34.86.243.169:57517] [client 34.86.243.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.243.169, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGc80vJv09BlzBS6ST6IAAAAoQ"]
[Thu Dec 04 22:38:46.180666 2025] [:error] [pid 63290:tid 63293] [client 34.86.243.169:51161] [client 34.86.243.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.243.169, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGc9ioM7G4ZFQQHTRxN-gAAAUE"]
[Thu Dec 04 22:38:48.457826 2025] [:error] [pid 63381:tid 63445] [client 34.86.243.169:49493] [client 34.86.243.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.243.169, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGc-Oidz_S5muoRMExULwAAAkI"]
[Thu Dec 04 22:38:50.773218 2025] [:error] [pid 38403:tid 38407] [client 34.86.243.169:61156] [client 34.86.243.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.243.169, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGc-gBCL4g8TXcskwlDZgAAAQA"]
[Thu Dec 04 22:38:50.773385 2025] [:error] [pid 38403:tid 38407] [client 34.86.243.169:61156] [client 34.86.243.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.86.243.169, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGc-gBCL4g8TXcskwlDZgAAAQA"]
[Thu Dec 04 22:53:57.374629 2025] [:error] [pid 63290:tid 63295] [client 35.240.71.236:62137] [client 35.240.71.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.71.236, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGghSoM7G4ZFQQHTRxQTwAAAUM"]
[Thu Dec 04 22:54:05.571826 2025] [:error] [pid 63290:tid 63299] [client 35.240.71.236:62137] [client 35.240.71.236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTGgjSoM7G4ZFQQHTRxQVAAAAUc"]
[Thu Dec 04 22:54:07.570840 2025] [:error] [pid 63290:tid 63292] [client 35.240.71.236:62137] [client 35.240.71.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.71.236, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGgjyoM7G4ZFQQHTRxQVwAAAUA"]
[Fri Dec 05 03:20:54.296361 2025] [:error] [pid 13925:tid 13930] [client 34.11.127.199:49960] [client 34.11.127.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTHfFgT9_OOefeJMN1XH1QAAAgM"]
[Fri Dec 05 04:11:10.686815 2025] [:error] [pid 53839:tid 53910] [client 34.30.34.82:61287] [client 34.30.34.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.34.82, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHq3qQOuERg_RN7bn9HRwAAAI4"]
[Fri Dec 05 04:11:25.357883 2025] [:error] [pid 53839:tid 53901] [client 34.30.34.82:61287] [client 34.30.34.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTHq7aQOuERg_RN7bn9HaAAAAIU"]
[Fri Dec 05 04:11:27.548970 2025] [:error] [pid 53839:tid 53919] [client 34.30.34.82:61287] [client 34.30.34.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.34.82, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHq76QOuERg_RN7bn9HbQAAAJc"]
[Fri Dec 05 04:11:37.128645 2025] [proxy_fcgi:error] [pid 53837:tid 53855] [client 103.4.122.14:51926] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-content/plugins/simply-gallery-block/freemius/templates/forms/email-address-update.php','/home/makifimc/public_html/wp-content/plugins/simply-gallery-block/freemius/templates/forms/email-address-update.php',UNHEX('2d1f701ef7366edf670b6a6330acd6f5'),1,UNHEX('95B4EAF5348B8A060584F132F36A440B'),UNHEX('9C27CBFC55DC3F47AC18EAD33113EBC377653DAA5F17A44CDF34E5A3C2DF06F8')),('wp-content/plugins/simply-gallery-block/freemius/templates/forms/index.php','/home/makifimc/public_html/wp-content/plugins/simply-gallery-block/freemius/templates/forms/index.php',UNHEX('67a8a37e5f033d7505be4652d0f7a24b'),1,UNHEX('3DE0A4B8BBE2931C74DAEBD9674537E2'),UNHEX('802A79C28899760D4A50882D3AC854818440ABADBC12970AD105F338D52430C2')),('wp-content/plugins/simply-gallery-block/freemius/templates/forms/license-activation.php','/home/makifimc...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-content/plugins/simply-gallery-block/freemius/templates/forms/email-address-update.php\\',\\'/home/makifimc/public_html/wp-content/plugins/simply-gallery-block/freemius/templates/forms/email-address-update.php\\',UNHEX(\\'2d1f701ef7366edf670b6a6330acd6f5\\'),1,UNHEX(\\'95B4EAF5348B8A060584F132F36A440B\\'),UNHEX(\\'9C27CBFC55DC3F47AC18EAD33113EBC377653DAA5F17A44CDF34E5A3C2DF06F8\\')),(\\'wp-content/plugins/simply-gallery-block/freemius/templates/forms/index.php\\',\\'/home/makifimc/public_html/wp-content/plugins/simply-gallery-block/freemius/templates/forms/index.php\\',UNHEX(\\'67a8a37e5f033d7505be4652d0f7a24b\\'),1,UNHEX(\\'3DE0A4B8BBE2931C74DAEBD9674537E2\\'),UNHEX(\\'802A79C28899760D4A50882D3AC854818440ABADBC12970AD105F338D5...'
[Fri Dec 05 09:48:04.617721 2025] [:error] [pid 35173:tid 35175] [client 35.94.214.139:54944] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTI51DLwYloPE6LF3uBUpAAAAUA"]
[Fri Dec 05 09:48:09.010542 2025] [:error] [pid 24010:tid 24034] [client 35.94.214.139:49210] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "aTI52atjRoDpxa46mwe4gQAAARY"]
[Fri Dec 05 09:48:09.746268 2025] [:error] [pid 35173:tid 35193] [client 35.94.214.139:49224] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "aTI52TLwYloPE6LF3uBUqQAAAVE"]
[Fri Dec 05 09:48:18.990173 2025] [:error] [pid 53923:tid 53938] [client 35.94.214.139:42404] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTI54rl8ebZN0VCAVXBvfQAAAM0"]
[Fri Dec 05 09:48:19.718405 2025] [:error] [pid 53837:tid 53866] [client 35.94.214.139:42420] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aTI54zbsUyTxys8OiMJ8WQAAABg"]
[Fri Dec 05 09:48:20.456349 2025] [:error] [pid 53837:tid 53861] [client 35.94.214.139:42436] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aTI55DbsUyTxys8OiMJ8WgAAABM"]
[Fri Dec 05 09:48:21.190523 2025] [:error] [pid 53923:tid 53948] [client 35.94.214.139:42446] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aTI55bl8ebZN0VCAVXBvgwAAANc"]
[Fri Dec 05 09:48:21.927456 2025] [:error] [pid 53837:tid 53851] [client 35.94.214.139:42462] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aTI55TbsUyTxys8OiMJ8XAAAAAk"]
[Fri Dec 05 09:48:22.653186 2025] [:error] [pid 53923:tid 53927] [client 35.94.214.139:42474] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aTI55rl8ebZN0VCAVXBvhwAAAMI"]
[Fri Dec 05 09:48:23.376636 2025] [:error] [pid 53838:tid 53887] [client 35.94.214.139:42480] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aTI5558M7CH_vMhLrzJfNQAAAFI"]
[Fri Dec 05 09:48:44.771865 2025] [:error] [pid 35173:tid 35179] [client 35.94.214.139:48498] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.rb"] [unique_id "aTI5_DLwYloPE6LF3uBU7gAAAUQ"]
[Fri Dec 05 09:48:45.495279 2025] [:error] [pid 53838:tid 53870] [client 35.94.214.139:48512] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.yaml"] [unique_id "aTI5_Z8M7CH_vMhLrzJfZQAAAEE"]
[Fri Dec 05 09:48:46.219042 2025] [:error] [pid 53837:tid 53846] [client 35.94.214.139:39998] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.yml"] [unique_id "aTI5_jbsUyTxys8OiMJ8lwAAAAQ"]
[Fri Dec 05 09:48:46.942676 2025] [:error] [pid 53837:tid 53850] [client 35.94.214.139:40012] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.ini"] [unique_id "aTI5_jbsUyTxys8OiMJ8nAAAAAg"]
[Fri Dec 05 09:48:47.673767 2025] [:error] [pid 53923:tid 53930] [client 35.94.214.139:40016] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.properties"] [unique_id "aTI5_7l8ebZN0VCAVXBvvgAAAMU"]
[Fri Dec 05 09:48:48.399636 2025] [:error] [pid 35173:tid 35187] [client 35.94.214.139:40020] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/configuration"] [unique_id "aTI6ADLwYloPE6LF3uBU_wAAAUs"]
[Fri Dec 05 09:48:49.121816 2025] [:error] [pid 53923:tid 53948] [client 35.94.214.139:40034] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/settings"] [unique_id "aTI6Abl8ebZN0VCAVXBvwAAAANc"]
[Fri Dec 05 09:48:49.847321 2025] [:error] [pid 53839:tid 53908] [client 35.94.214.139:40038] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/settings.json"] [unique_id "aTI6AaQOuERg_RN7bn_psQAAAIw"]
[Fri Dec 05 09:48:50.579107 2025] [:error] [pid 24010:tid 24017] [client 35.94.214.139:40048] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/settings.py"] [unique_id "aTI6AqtjRoDpxa46mwe40AAAAQU"]
[Fri Dec 05 09:48:51.310340 2025] [:error] [pid 53923:tid 53935] [client 35.94.214.139:40052] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/settings.rb"] [unique_id "aTI6A7l8ebZN0VCAVXBvxQAAAMo"]
[Fri Dec 05 09:48:52.042285 2025] [:error] [pid 53837:tid 53862] [client 35.94.214.139:40060] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.config.js"] [unique_id "aTI6BDbsUyTxys8OiMJ8pQAAABQ"]
[Fri Dec 05 09:48:52.773113 2025] [:error] [pid 53838:tid 53872] [client 35.94.214.139:40070] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local.settings.json"] [unique_id "aTI6BJ8M7CH_vMhLrzJfbQAAAEM"]
[Fri Dec 05 09:48:53.497440 2025] [:error] [pid 24010:tid 24026] [client 35.94.214.139:40080] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.json"] [unique_id "aTI6BatjRoDpxa46mwe42AAAAQ4"]
[Fri Dec 05 09:48:54.221772 2025] [:error] [pid 53839:tid 53911] [client 35.94.214.139:40082] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo.php"] [unique_id "aTI6BqQOuERg_RN7bn_puAAAAI8"]
[Fri Dec 05 09:48:54.945813 2025] [:error] [pid 53837:tid 53856] [client 35.94.214.139:40088] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTI6BjbsUyTxys8OiMJ8rAAAAA4"]
[Fri Dec 05 09:48:55.674628 2025] [:error] [pid 53839:tid 53912] [client 35.94.214.139:47234] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpversion.php"] [unique_id "aTI6B6QOuERg_RN7bn_puwAAAJA"]
[Fri Dec 05 09:48:56.407608 2025] [:error] [pid 53923:tid 53945] [client 35.94.214.139:47250] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "aTI6CLl8ebZN0VCAVXBvzAAAANQ"]
[Fri Dec 05 09:48:57.145033 2025] [:error] [pid 53923:tid 53948] [client 35.94.214.139:47256] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTI6Cbl8ebZN0VCAVXBvzgAAANc"]
[Fri Dec 05 09:48:57.870842 2025] [:error] [pid 53838:tid 53871] [client 35.94.214.139:47268] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php"] [unique_id "aTI6CZ8M7CH_vMhLrzJfcgAAAEI"]
[Fri Dec 05 09:48:58.595355 2025] [:error] [pid 24010:tid 24017] [client 35.94.214.139:47274] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/composer.json"] [unique_id "aTI6CqtjRoDpxa46mwe43AAAAQU"]
[Fri Dec 05 09:48:59.325755 2025] [:error] [pid 53923:tid 53929] [client 35.94.214.139:47280] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aTI6C7l8ebZN0VCAVXBv0gAAAMQ"]
[Fri Dec 05 09:49:00.051261 2025] [:error] [pid 53837:tid 53858] [client 35.94.214.139:47292] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.php"] [unique_id "aTI6DDbsUyTxys8OiMJ8sgAAABA"]
[Fri Dec 05 09:49:00.784412 2025] [:error] [pid 53839:tid 53905] [client 35.94.214.139:47302] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.php"] [unique_id "aTI6DKQOuERg_RN7bn_pvwAAAIk"]
[Fri Dec 05 09:49:01.514950 2025] [:error] [pid 35173:tid 35184] [client 35.94.214.139:47316] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/config"] [unique_id "aTI6DTLwYloPE6LF3uBVFwAAAUk"]
[Fri Dec 05 09:49:02.240286 2025] [:error] [pid 53839:tid 53901] [client 35.94.214.139:47328] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/credentials"] [unique_id "aTI6DqQOuERg_RN7bn_pwwAAAIU"]
[Fri Dec 05 09:49:02.971363 2025] [:error] [pid 35173:tid 35191] [client 35.94.214.139:47338] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws/config"] [unique_id "aTI6DjLwYloPE6LF3uBVGAAAAU8"]
[Fri Dec 05 09:49:03.705803 2025] [:error] [pid 35173:tid 35188] [client 35.94.214.139:47350] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws/credentials"] [unique_id "aTI6DzLwYloPE6LF3uBVGgAAAUw"]
[Fri Dec 05 09:49:04.433633 2025] [:error] [pid 24010:tid 24020] [client 35.94.214.139:47362] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.json"] [unique_id "aTI6EKtjRoDpxa46mwe46AAAAQg"]
[Fri Dec 05 09:49:05.160067 2025] [:error] [pid 53838:tid 53893] [client 35.94.214.139:47378] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws-credentials.json"] [unique_id "aTI6EZ8M7CH_vMhLrzJfdwAAAFg"]
[Fri Dec 05 09:49:05.891660 2025] [:error] [pid 53837:tid 53864] [client 35.94.214.139:49404] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws-config.js"] [unique_id "aTI6ETbsUyTxys8OiMJ8tQAAABY"]
[Fri Dec 05 09:49:06.620305 2025] [:error] [pid 35173:tid 35190] [client 35.94.214.139:49416] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws-keys.json"] [unique_id "aTI6EjLwYloPE6LF3uBVHgAAAU4"]
[Fri Dec 05 09:49:07.343813 2025] [:error] [pid 53837:tid 53852] [client 35.94.214.139:49428] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws/secrets.yaml"] [unique_id "aTI6EzbsUyTxys8OiMJ8twAAAAo"]
[Fri Dec 05 09:49:08.075841 2025] [:error] [pid 53839:tid 53896] [client 35.94.214.139:49430] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws/access-keys.js"] [unique_id "aTI6FKQOuERg_RN7bn_p0AAAAIA"]
[Fri Dec 05 09:49:08.808832 2025] [:error] [pid 53837:tid 53854] [client 35.94.214.139:49434] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws/config.ini"] [unique_id "aTI6FDbsUyTxys8OiMJ8uQAAAAw"]
[Fri Dec 05 09:49:09.539323 2025] [:error] [pid 35173:tid 35191] [client 35.94.214.139:49450] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws/credentials.bak"] [unique_id "aTI6FTLwYloPE6LF3uBVIQAAAU8"]
[Fri Dec 05 09:49:10.271812 2025] [:error] [pid 53923:tid 53947] [client 35.94.214.139:49454] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/secrets"] [unique_id "aTI6Frl8ebZN0VCAVXBv5gAAANY"]
[Fri Dec 05 09:49:10.999956 2025] [:error] [pid 35173:tid 35182] [client 35.94.214.139:49462] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws-env.json"] [unique_id "aTI6FjLwYloPE6LF3uBVJAAAAUc"]
[Fri Dec 05 09:49:11.722671 2025] [:error] [pid 53837:tid 53858] [client 35.94.214.139:49472] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws-keys.env"] [unique_id "aTI6FzbsUyTxys8OiMJ8uwAAABA"]
[Fri Dec 05 09:49:12.451746 2025] [:error] [pid 53837:tid 53843] [client 35.94.214.139:49488] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/config.bak"] [unique_id "aTI6GDbsUyTxys8OiMJ8vAAAAAE"]
[Fri Dec 05 09:49:13.184116 2025] [:error] [pid 53837:tid 53848] [client 35.94.214.139:49504] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws/secrets.json"] [unique_id "aTI6GTbsUyTxys8OiMJ8vQAAAAY"]
[Fri Dec 05 09:49:13.910329 2025] [:error] [pid 53838:tid 53893] [client 35.94.214.139:49508] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws/config.properties"] [unique_id "aTI6GZ8M7CH_vMhLrzJfhAAAAFg"]
[Fri Dec 05 09:49:14.635063 2025] [:error] [pid 24010:tid 24036] [client 35.94.214.139:49520] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/credentials.json"] [unique_id "aTI6GqtjRoDpxa46mwe4-wAAARg"]
[Fri Dec 05 09:49:15.356789 2025] [:error] [pid 53838:tid 53869] [client 35.94.214.139:49526] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws_keys.py"] [unique_id "aTI6G58M7CH_vMhLrzJfjgAAAEA"]
[Fri Dec 05 09:49:16.096990 2025] [:error] [pid 53923:tid 53937] [client 35.94.214.139:37056] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe/config"] [unique_id "aTI6HLl8ebZN0VCAVXBv9QAAAMw"]
[Fri Dec 05 09:49:16.829057 2025] [:error] [pid 53838:tid 53874] [client 35.94.214.139:37072] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe.json"] [unique_id "aTI6HJ8M7CH_vMhLrzJflAAAAEU"]
[Fri Dec 05 09:49:17.560062 2025] [:error] [pid 53837:tid 53849] [client 35.94.214.139:37078] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe.js"] [unique_id "aTI6HTbsUyTxys8OiMJ81AAAAAc"]
[Fri Dec 05 09:49:18.292656 2025] [:error] [pid 24010:tid 24034] [client 35.94.214.139:37092] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe-config.yaml"] [unique_id "aTI6HqtjRoDpxa46mwe5BwAAARY"]
[Fri Dec 05 09:49:19.025094 2025] [:error] [pid 53838:tid 53876] [client 35.94.214.139:37106] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe-keys.json"] [unique_id "aTI6H58M7CH_vMhLrzJfmQAAAEc"]
[Fri Dec 05 09:49:19.760191 2025] [:error] [pid 35173:tid 35197] [client 35.94.214.139:37112] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe/credentials"] [unique_id "aTI6HzLwYloPE6LF3uBVPwAAAVU"]
[Fri Dec 05 09:49:20.491292 2025] [:error] [pid 35173:tid 35195] [client 35.94.214.139:37128] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe/secrets.yml"] [unique_id "aTI6IDLwYloPE6LF3uBVQAAAAVM"]
[Fri Dec 05 09:49:21.222194 2025] [:error] [pid 35173:tid 35178] [client 35.94.214.139:37140] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe.env"] [unique_id "aTI6ITLwYloPE6LF3uBVQwAAAUM"]
[Fri Dec 05 09:49:21.948951 2025] [:error] [pid 35173:tid 35181] [client 35.94.214.139:37150] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe/config.php"] [unique_id "aTI6ITLwYloPE6LF3uBVRgAAAUY"]
[Fri Dec 05 09:49:22.679315 2025] [:error] [pid 53839:tid 53896] [client 35.94.214.139:37160] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.stripe/keys"] [unique_id "aTI6IqQOuERg_RN7bn_p5AAAAIA"]
[Fri Dec 05 09:49:23.403644 2025] [:error] [pid 53923:tid 53936] [client 35.94.214.139:37166] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe_api.json"] [unique_id "aTI6I7l8ebZN0VCAVXBwCAAAAMs"]
[Fri Dec 05 09:49:24.132907 2025] [:error] [pid 35173:tid 35198] [client 35.94.214.139:37176] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/stripe.rb"] [unique_id "aTI6JDLwYloPE6LF3uBVSwAAAVY"]
[Fri Dec 05 09:49:24.864177 2025] [:error] [pid 53838:tid 53874] [client 35.94.214.139:37178] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe_keys.py"] [unique_id "aTI6JJ8M7CH_vMhLrzJfmgAAAEU"]
[Fri Dec 05 09:49:25.597934 2025] [:error] [pid 53838:tid 53889] [client 35.94.214.139:53070] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe.ini"] [unique_id "aTI6JZ8M7CH_vMhLrzJfnQAAAFQ"]
[Fri Dec 05 09:49:26.330188 2025] [:error] [pid 24010:tid 24013] [client 35.94.214.139:53086] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe.properties"] [unique_id "aTI6JqtjRoDpxa46mwe5DwAAAQE"]
[Fri Dec 05 09:49:27.056305 2025] [:error] [pid 24010:tid 24034] [client 35.94.214.139:53096] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe/config.js"] [unique_id "aTI6J6tjRoDpxa46mwe5EgAAARY"]
[Fri Dec 05 09:49:27.786984 2025] [:error] [pid 53923:tid 53943] [client 35.94.214.139:53104] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe/secrets.json"] [unique_id "aTI6J7l8ebZN0VCAVXBwFgAAANI"]
[Fri Dec 05 09:49:28.518160 2025] [:error] [pid 35173:tid 35199] [client 35.94.214.139:53114] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.stripe"] [unique_id "aTI6KDLwYloPE6LF3uBVTwAAAVc"]
[Fri Dec 05 09:49:29.250825 2025] [:error] [pid 53839:tid 53900] [client 35.94.214.139:53116] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stripe-credentials.json"] [unique_id "aTI6KaQOuERg_RN7bn_p6wAAAIQ"]
[Fri Dec 05 09:49:29.976412 2025] [:error] [pid 35173:tid 35198] [client 35.94.214.139:53118] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api/stripe.js"] [unique_id "aTI6KTLwYloPE6LF3uBVUAAAAVY"]
[Fri Dec 05 09:49:30.705670 2025] [:error] [pid 24010:tid 24031] [client 35.94.214.139:53120] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local_settings.py"] [unique_id "aTI6KqtjRoDpxa46mwe5GAAAARM"]
[Fri Dec 05 09:49:31.430217 2025] [:error] [pid 35173:tid 35183] [client 35.94.214.139:53126] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/django_settings.json"] [unique_id "aTI6KzLwYloPE6LF3uBVUQAAAUg"]
[Fri Dec 05 09:49:32.162226 2025] [:error] [pid 53837:tid 53859] [client 35.94.214.139:53138] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.django"] [unique_id "aTI6LDbsUyTxys8OiMJ83AAAABE"]
[Fri Dec 05 09:49:32.888073 2025] [:error] [pid 35173:tid 35195] [client 35.94.214.139:53154] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manage.py"] [unique_id "aTI6LDLwYloPE6LF3uBVWAAAAVM"]
[Fri Dec 05 09:49:33.620847 2025] [:error] [pid 53923:tid 53931] [client 35.94.214.139:53166] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/settings/local.py"] [unique_id "aTI6Lbl8ebZN0VCAVXBwHgAAAMY"]
[Fri Dec 05 09:49:34.346527 2025] [:error] [pid 53838:tid 53871] [client 35.94.214.139:53170] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.py"] [unique_id "aTI6Lp8M7CH_vMhLrzJftAAAAEI"]
[Fri Dec 05 09:49:35.072918 2025] [:error] [pid 24010:tid 24013] [client 35.94.214.139:53186] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/django.env"] [unique_id "aTI6L6tjRoDpxa46mwe5GgAAAQE"]
[Fri Dec 05 09:49:35.805860 2025] [:error] [pid 24010:tid 24019] [client 35.94.214.139:38730] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/python.config.json"] [unique_id "aTI6L6tjRoDpxa46mwe5HQAAAQc"]
[Fri Dec 05 09:49:36.531844 2025] [:error] [pid 53837:tid 53865] [client 35.94.214.139:38740] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app/settings/production.py"] [unique_id "aTI6MDbsUyTxys8OiMJ84gAAABc"]
[Fri Dec 05 09:49:37.256859 2025] [:error] [pid 35173:tid 35197] [client 35.94.214.139:38754] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/django/secrets.json"] [unique_id "aTI6MTLwYloPE6LF3uBVaAAAAVU"]
[Fri Dec 05 09:49:37.988204 2025] [:error] [pid 24010:tid 24029] [client 35.94.214.139:38760] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.pythonenv"] [unique_id "aTI6MatjRoDpxa46mwe5HwAAARE"]
[Fri Dec 05 09:49:38.715814 2025] [:error] [pid 24010:tid 24015] [client 35.94.214.139:38766] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/local.py"] [unique_id "aTI6MqtjRoDpxa46mwe5IAAAAQM"]
[Fri Dec 05 09:49:39.440132 2025] [:error] [pid 24010:tid 24035] [client 35.94.214.139:38782] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/django.ini"] [unique_id "aTI6M6tjRoDpxa46mwe5IQAAARc"]
[Fri Dec 05 09:49:40.171239 2025] [:error] [pid 35173:tid 35180] [client 35.94.214.139:38790] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/database.yml"] [unique_id "aTI6NDLwYloPE6LF3uBVcQAAAUU"]
[Fri Dec 05 09:49:40.906485 2025] [:error] [pid 35173:tid 35194] [client 35.94.214.139:38800] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/secrets.yml"] [unique_id "aTI6NDLwYloPE6LF3uBVdAAAAVI"]
[Fri Dec 05 09:49:44.754850 2025] [:error] [pid 35173:tid 35187] [client 35.94.214.139:38812] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/config/master.key"] [unique_id "aTI6ODLwYloPE6LF3uBVfQAAAUs"]
[Fri Dec 05 09:50:12.845674 2025] [:error] [pid 53839:tid 53914] [client 35.94.214.139:42300] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/routes.rb"] [unique_id "aTI6VKQOuERg_RN7bn_qTQAAAJI"]
[Fri Dec 05 09:50:13.572319 2025] [:error] [pid 53839:tid 53913] [client 35.94.214.139:42314] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.ruby-version"] [unique_id "aTI6VaQOuERg_RN7bn_qUQAAAJE"]
[Fri Dec 05 09:50:14.296421 2025] [:error] [pid 53923:tid 53933] [client 35.94.214.139:42316] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/application.yml"] [unique_id "aTI6Vrl8ebZN0VCAVXBwUQAAAMg"]
[Fri Dec 05 09:50:15.019470 2025] [:error] [pid 35173:tid 35196] [client 35.94.214.139:42322] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.yml.enc"] [unique_id "aTI6VzLwYloPE6LF3uBVswAAAVQ"]
[Fri Dec 05 09:50:15.743711 2025] [:error] [pid 24010:tid 24016] [client 35.94.214.139:52558] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/master.key.bak"] [unique_id "aTI6V6tjRoDpxa46mwe5hgAAAQQ"]
[Fri Dec 05 09:50:16.467191 2025] [:error] [pid 35173:tid 35188] [client 35.94.214.139:52574] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/database.json"] [unique_id "aTI6WDLwYloPE6LF3uBVtQAAAUw"]
[Fri Dec 05 09:50:17.194651 2025] [:error] [pid 53837:tid 53865] [client 35.94.214.139:52582] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.js"] [unique_id "aTI6WTbsUyTxys8OiMJ8_AAAABc"]
[Fri Dec 05 09:50:17.965687 2025] [:error] [pid 35173:tid 35183] [client 35.94.214.139:52598] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api_keys.js"] [unique_id "aTI6WTLwYloPE6LF3uBVuQAAAUg"]
[Fri Dec 05 09:50:18.697764 2025] [:error] [pid 53923:tid 53939] [client 35.94.214.139:52606] [client 35.94.214.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.js"] [unique_id "aTI6Wrl8ebZN0VCAVXBwVgAAAM4"]
[Fri Dec 05 09:50:19.432793 2025] [:error] [pid 53839:tid 53908] [client 35.94.214.139:52620] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/package.json"] [unique_id "aTI6W6QOuERg_RN7bn_qZQAAAIw"]
[Fri Dec 05 09:50:20.162861 2025] [:error] [pid 24010:tid 24017] [client 35.94.214.139:52624] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/server.js"] [unique_id "aTI6XKtjRoDpxa46mwe5jgAAAQU"]
[Fri Dec 05 09:50:20.893942 2025] [:error] [pid 24010:tid 24030] [client 35.94.214.139:52632] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.js"] [unique_id "aTI6XKtjRoDpxa46mwe5jwAAARI"]
[Fri Dec 05 09:50:21.627786 2025] [:error] [pid 53839:tid 53898] [client 35.94.214.139:52646] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/env.js"] [unique_id "aTI6XaQOuERg_RN7bn_qawAAAII"]
[Fri Dec 05 09:50:22.359847 2025] [:error] [pid 35173:tid 35184] [client 35.94.214.139:52656] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.js"] [unique_id "aTI6XjLwYloPE6LF3uBVwQAAAUk"]
[Fri Dec 05 09:50:23.090595 2025] [:error] [pid 24010:tid 24013] [client 35.94.214.139:52666] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/node.config.json"] [unique_id "aTI6X6tjRoDpxa46mwe5oAAAAQE"]
[Fri Dec 05 09:50:23.815587 2025] [:error] [pid 53838:tid 53881] [client 35.94.214.139:52682] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/secrets.json"] [unique_id "aTI6X58M7CH_vMhLrzJf8wAAAEw"]
[Fri Dec 05 09:50:24.539121 2025] [:error] [pid 53839:tid 53905] [client 35.94.214.139:52688] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/client/config.js"] [unique_id "aTI6YKQOuERg_RN7bn_qdQAAAIk"]
[Fri Dec 05 09:50:25.266565 2025] [:error] [pid 53837:tid 53854] [client 35.94.214.139:52696] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/config.js"] [unique_id "aTI6YTbsUyTxys8OiMJ8_wAAAAw"]
[Fri Dec 05 09:50:25.995942 2025] [:error] [pid 53923:tid 53930] [client 35.94.214.139:33902] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/src/config/api.js"] [unique_id "aTI6Ybl8ebZN0VCAVXBwYgAAAMU"]
[Fri Dec 05 09:50:26.722533 2025] [:error] [pid 53923:tid 53943] [client 35.94.214.139:33914] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/node_modules/.bin/env"] [unique_id "aTI6Yrl8ebZN0VCAVXBwYwAAANI"]
[Fri Dec 05 09:50:27.452606 2025] [:error] [pid 35173:tid 35190] [client 35.94.214.139:33930] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.npmrc"] [unique_id "aTI6YzLwYloPE6LF3uBV0gAAAU4"]
[Fri Dec 05 09:50:28.184368 2025] [:error] [pid 53837:tid 53866] [client 35.94.214.139:33932] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yarn.lock"] [unique_id "aTI6ZDbsUyTxys8OiMJ9BAAAABg"]
[Fri Dec 05 09:50:28.915644 2025] [:error] [pid 53838:tid 53891] [client 35.94.214.139:33942] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/client.js"] [unique_id "aTI6ZJ8M7CH_vMhLrzJf_AAAAFY"]
[Fri Dec 05 09:50:29.646966 2025] [:error] [pid 53837:tid 53858] [client 35.94.214.139:33958] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api/config.js"] [unique_id "aTI6ZTbsUyTxys8OiMJ9BQAAABA"]
[Fri Dec 05 09:50:30.378284 2025] [:error] [pid 53837:tid 53859] [client 35.94.214.139:33968] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/frontend/env.json"] [unique_id "aTI6ZjbsUyTxys8OiMJ9BwAAABE"]
[Fri Dec 05 09:50:31.112696 2025] [:error] [pid 24010:tid 24034] [client 35.94.214.139:33976] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/backend/secrets.js"] [unique_id "aTI6Z6tjRoDpxa46mwe5sgAAARY"]
[Fri Dec 05 09:50:31.839405 2025] [:error] [pid 53838:tid 53886] [client 35.94.214.139:33992] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/application.properties"] [unique_id "aTI6Z58M7CH_vMhLrzJgBQAAAFE"]
[Fri Dec 05 09:50:32.567845 2025] [:error] [pid 53837:tid 53857] [client 35.94.214.139:34006] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.properties"] [unique_id "aTI6aDbsUyTxys8OiMJ9DQAAAA8"]
[Fri Dec 05 09:50:33.298685 2025] [:error] [pid 53839:tid 53910] [client 35.94.214.139:34014] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.properties"] [unique_id "aTI6aaQOuERg_RN7bn_qgAAAAI4"]
[Fri Dec 05 09:50:34.030547 2025] [:error] [pid 24010:tid 24021] [client 35.94.214.139:34018] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.ini"] [unique_id "aTI6aqtjRoDpxa46mwe5ugAAAQk"]
[Fri Dec 05 09:50:34.763193 2025] [:error] [pid 53837:tid 53865] [client 35.94.214.139:34034] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local.ini"] [unique_id "aTI6ajbsUyTxys8OiMJ9EAAAABc"]
[Fri Dec 05 09:50:35.505903 2025] [:error] [pid 53839:tid 53906] [client 35.94.214.139:34038] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.ini"] [unique_id "aTI6a6QOuERg_RN7bn_qggAAAIo"]
[Fri Dec 05 09:50:36.241264 2025] [:error] [pid 53839:tid 53899] [client 35.94.214.139:35388] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.json"] [unique_id "aTI6bKQOuERg_RN7bn_qhAAAAIM"]
[Fri Dec 05 09:50:36.972679 2025] [:error] [pid 35173:tid 35199] [client 35.94.214.139:35400] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config/secrets.json"] [unique_id "aTI6bDLwYloPE6LF3uBV-QAAAVc"]
[Fri Dec 05 09:50:37.697356 2025] [:error] [pid 53839:tid 53905] [client 35.94.214.139:35406] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local.json"] [unique_id "aTI6baQOuERg_RN7bn_qhgAAAIk"]
[Fri Dec 05 09:50:38.424083 2025] [:error] [pid 24010:tid 24024] [client 35.94.214.139:35422] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.json"] [unique_id "aTI6bqtjRoDpxa46mwe5wQAAAQw"]
[Fri Dec 05 09:50:39.154378 2025] [:error] [pid 53839:tid 53918] [client 35.94.214.139:35430] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/env.properties"] [unique_id "aTI6b6QOuERg_RN7bn_qiQAAAJY"]
[Fri Dec 05 09:50:39.887823 2025] [:error] [pid 53923:tid 53946] [client 35.94.214.139:35434] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.properties"] [unique_id "aTI6b7l8ebZN0VCAVXBwdgAAANU"]
[Fri Dec 05 09:50:40.621634 2025] [:error] [pid 53838:tid 53870] [client 35.94.214.139:35436] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php.ini"] [unique_id "aTI6cJ8M7CH_vMhLrzJgCgAAAEE"]
[Fri Dec 05 09:50:41.354176 2025] [:error] [pid 53839:tid 53910] [client 35.94.214.139:35452] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.properties"] [unique_id "aTI6caQOuERg_RN7bn_qjgAAAI4"]
[Fri Dec 05 09:50:42.087963 2025] [:error] [pid 35173:tid 35192] [client 35.94.214.139:35466] [client 35.94.214.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/user.properties"] [unique_id "aTI6cjLwYloPE6LF3uBWBwAAAVA"]
[Fri Dec 05 12:11:09.367449 2025] [:error] [pid 62720:tid 62730] [client 207.180.196.165:44774] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTJbXWDTJuF6xQ5UsIOgEQAAAYg"]
[Fri Dec 05 12:11:10.879685 2025] [:error] [pid 24010:tid 24034] [client 207.180.196.165:34232] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTJbXqtjRoDpxa46mwfqTwAAARY"]
[Fri Dec 05 12:11:11.729129 2025] [:error] [pid 35173:tid 35187] [client 207.180.196.165:45446] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.env"] [unique_id "aTJbXzLwYloPE6LF3uCG0AAAAUs"]
[Fri Dec 05 12:11:13.308995 2025] [:error] [pid 53837:tid 53866] [client 207.180.196.165:34864] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.env"] [unique_id "aTJbYTbsUyTxys8OiMKpoAAAABg"]
[Fri Dec 05 12:11:14.275804 2025] [:error] [pid 53839:tid 53919] [client 207.180.196.165:46080] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.www"] [unique_id "aTJbYqQOuERg_RN7bn8rfAAAAJc"]
[Fri Dec 05 12:11:15.861265 2025] [:error] [pid 24010:tid 24013] [client 207.180.196.165:35516] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.www"] [unique_id "aTJbY6tjRoDpxa46mwfqYQAAAQE"]
[Fri Dec 05 12:11:16.793999 2025] [:error] [pid 53838:tid 53873] [client 207.180.196.165:46738] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.env"] [unique_id "aTJbZJ8M7CH_vMhLrzKTaQAAAEQ"]
[Fri Dec 05 12:11:18.379394 2025] [:error] [pid 53839:tid 53909] [client 207.180.196.165:36106] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/makifim.com.au/.env"] [unique_id "aTJbZqQOuERg_RN7bn8rgwAAAI0"]
[Fri Dec 05 12:11:19.316869 2025] [:error] [pid 53923:tid 53948] [client 207.180.196.165:47292] [client 207.180.196.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_1"] [unique_id "aTJbZ7l8ebZN0VCAVXDAEwAAANc"]
[Fri Dec 05 13:03:30.753115 2025] [:error] [pid 53923:tid 53942] [client 16.144.251.27:40556] [client 16.144.251.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/"] [unique_id "aTJnorl8ebZN0VCAVXDaqAAAANE"]
[Fri Dec 05 13:03:31.509910 2025] [:error] [pid 53923:tid 53944] [client 16.144.251.27:40562] [client 16.144.251.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aTJno7l8ebZN0VCAVXDaqgAAANM"]
[Fri Dec 05 13:20:54.329725 2025] [:error] [pid 53837:tid 53860] [client 35.87.214.203:51298] [client 35.87.214.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/"] [unique_id "aTJrtjbsUyTxys8OiMK-SQAAABI"]
[Fri Dec 05 13:20:55.063731 2025] [:error] [pid 35173:tid 35182] [client 35.87.214.203:51304] [client 35.87.214.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aTJrtzLwYloPE6LF3uCY7wAAAUc"]
[Fri Dec 05 15:45:02.812170 2025] [:error] [pid 53923:tid 53940] [client 176.65.132.18:60934] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTKNfrl8ebZN0VCAVXAsTwAAAM8"]
[Fri Dec 05 16:15:34.327597 2025] [:error] [pid 53839:tid 53918] [client 104.28.160.144:13230] [client 104.28.160.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aTKUpqQOuERg_RN7bn-JRwAAAJY"]
[Fri Dec 05 17:56:33.853306 2025] [:error] [pid 35173:tid 35199] [client 45.86.202.188:32347] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTKsUTLwYloPE6LF3uDXowAAAVc"]
[Fri Dec 05 17:56:46.844804 2025] [:error] [pid 53923:tid 53929] [client 45.86.202.195:52723] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aTKsXrl8ebZN0VCAVXBgYwAAAMQ"]
[Fri Dec 05 17:56:50.133441 2025] [:error] [pid 62720:tid 62735] [client 45.86.202.196:27121] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aTKsYmDTJuF6xQ5UsIMIfgAAAY0"]
[Fri Dec 05 17:56:51.110739 2025] [:error] [pid 35173:tid 35197] [client 45.86.202.174:21449] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "aTKsYzLwYloPE6LF3uDXpQAAAVU"]
[Fri Dec 05 19:39:54.753296 2025] [:error] [pid 18579:tid 18599] [client 149.22.95.170:54066] [client 149.22.95.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTLEisAUSulJty2JiBqLygAAAA4"]
[Fri Dec 05 21:19:40.014780 2025] [:error] [pid 18614:tid 18623] [client 52.79.122.186:57054] [client 52.79.122.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTLb7HHum9jj9plt7MVsQAAAAUc"]
[Fri Dec 05 21:22:59.528836 2025] [:error] [pid 35962:tid 35986] [client 44.251.95.67:40072] [client 44.251.95.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTLcs5-hnYjbYINfh7HKdQAAAFY"]
[Fri Dec 05 21:56:23.504391 2025] [:error] [pid 18520:tid 18544] [client 34.48.178.120:46036] [client 34.48.178.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTLkh4OC8XSo46ZrIeP27gAAAJQ"]
[Fri Dec 05 22:39:04.612689 2025] [:error] [pid 18521:tid 18551] [client 56.155.146.186:49640] [client 56.155.146.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTLuiE_hJ6r18UnAijyivQAAAMA"]
[Fri Dec 05 23:04:27.347788 2025] [:error] [pid 32416:tid 32440] [client 3.110.163.14:50226] [client 3.110.163.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTL0e9w2m4oeKabXf6-LLAAAAZY"]
[Fri Dec 05 23:50:06.757615 2025] [:error] [pid 35962:tid 35982] [client 44.252.85.168:53580] [client 44.252.85.168] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||makifim.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?s=LznT&xsxA=4990%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTL_Lp-hnYjbYINfh7EIoAAAAFI"], referer: https://makifim.com.au/
[Fri Dec 05 23:50:56.203236 2025] [:error] [pid 18579:tid 18599] [client 44.252.85.168:43972] [client 44.252.85.168] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||makifim.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?sZUI=6636%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTL_X8AUSulJty2JiBrXCAAAAA4"], referer: https://makifim.com.au/
[Fri Dec 05 23:53:36.315190 2025] [:error] [pid 18520:tid 18547] [client 44.252.85.168:54174] [client 44.252.85.168] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||makifim.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fmakifim.com.au%2F&pDQh=6326%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "aTMAAIOC8XSo46ZrIeMX1wAAAJc"], referer: https://makifim.com.au/wp-json/oembed/1.0/embed
[Fri Dec 05 23:54:07.929403 2025] [:error] [pid 32416:tid 32434] [client 44.252.85.168:34542] [client 44.252.85.168] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||makifim.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fmakifim.com.au%2F&format=xml&mfCD=7011%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "aTMAH9w2m4oeKabXf6-d_QAAAZA"], referer: https://makifim.com.au/wp-json/oembed/1.0/embed
[Fri Dec 05 23:54:24.113468 2025] [:error] [pid 18614:tid 18629] [client 44.252.85.168:35674] [client 44.252.85.168] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||makifim.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /embed/?TIfF=8000%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/embed/"] [unique_id "aTMAMHHum9jj9plt7MWdFAAAAU0"], referer: https://makifim.com.au/embed/
[Sat Dec 06 08:30:53.657159 2025] [:error] [pid 35621:tid 35633] [client 104.28.246.116:59031] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aTN5PUQGb3oZH9SdKQVQjgAAAUk"]
[Sat Dec 06 08:30:57.093967 2025] [:error] [pid 35621:tid 35639] [client 104.28.246.116:28634] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/style.php"] [unique_id "aTN5QUQGb3oZH9SdKQVQlAAAAU8"]
[Sat Dec 06 10:44:05.248998 2025] [:error] [pid 1838:tid 1867] [client 13.57.219.149:53740] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTOYdS5zgnu67Yo7vrZ7gAAAApU"]
[Sat Dec 06 10:44:06.761206 2025] [:error] [pid 35622:tid 35654] [client 13.57.219.149:53750] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/error.log"] [unique_id "aTOYdiOSP_9DVLgFwI56gAAAAYM"]
[Sat Dec 06 10:44:11.797538 2025] [:error] [pid 61303:tid 61329] [client 13.57.219.149:40844] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aTOYe9wK_fe00OH7zy40MwAAANY"]
[Sat Dec 06 10:44:12.585340 2025] [:error] [pid 61303:tid 61331] [client 13.57.219.149:40844] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/database.sql"] [unique_id "aTOYfNwK_fe00OH7zy40NAAAANg"]
[Sat Dec 06 10:44:13.034585 2025] [:error] [pid 61303:tid 61314] [client 13.57.219.149:40844] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/backup.sql"] [unique_id "aTOYfdwK_fe00OH7zy40NQAAAMg"]
[Sat Dec 06 10:44:16.523097 2025] [:error] [pid 61303:tid 61325] [client 13.57.219.149:40844] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/debug.log"] [unique_id "aTOYgNwK_fe00OH7zy40PQAAANI"]
[Sat Dec 06 10:44:19.345632 2025] [:error] [pid 61303:tid 61307] [client 13.57.219.149:40844] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/dump.sql"] [unique_id "aTOYg9wK_fe00OH7zy40PwAAAME"]
[Sat Dec 06 10:44:22.176960 2025] [:error] [pid 61303:tid 61319] [client 13.57.219.149:40844] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aTOYhtwK_fe00OH7zy40QgAAAM0"]
[Sat Dec 06 10:44:28.639301 2025] [:error] [pid 48399:tid 48406] [client 13.57.219.149:49622] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aTOYjOjNPOrIshd8Ewd0-AAAAcU"]
[Sat Dec 06 10:44:32.567021 2025] [:error] [pid 52809:tid 52818] [client 13.57.219.149:49626] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aTOYkOrRwgsmpIJQ2qYmFAAAAgc"]
[Sat Dec 06 10:44:35.475872 2025] [:error] [pid 61303:tid 61321] [client 13.57.219.149:44468] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/db_backup.sql"] [unique_id "aTOYk9wK_fe00OH7zy40TgAAAM4"]
[Sat Dec 06 10:44:43.524031 2025] [:error] [pid 61303:tid 61317] [client 13.57.219.149:44468] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aTOYm9wK_fe00OH7zy40VgAAAMs"]
[Sat Dec 06 10:44:57.372688 2025] [:error] [pid 1838:tid 1870] [client 13.57.219.149:52066] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aTOYqS5zgnu67Yo7vrZ7xQAAApg"]
[Sat Dec 06 10:45:16.460241 2025] [:error] [pid 1727:tid 1740] [client 13.57.219.149:54710] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev.local"] [unique_id "aTOYvMD83luYT37-ZaW9QgAAAks"]
[Sat Dec 06 10:45:18.974015 2025] [:error] [pid 1838:tid 1863] [client 13.57.219.149:54720] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.1"] [unique_id "aTOYvi5zgnu67Yo7vrZ71AAAApE"]
[Sat Dec 06 10:45:20.471146 2025] [:error] [pid 61217:tid 61277] [client 13.57.219.149:54726] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aTOYwFdSKQYfLI3fYo5AdAAAAIQ"]
[Sat Dec 06 10:45:22.657671 2025] [:error] [pid 1727:tid 1747] [client 13.57.219.149:42066] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aTOYwsD83luYT37-ZaW9RwAAAlI"]
[Sat Dec 06 10:45:27.335094 2025] [:error] [pid 1727:tid 1735] [client 13.57.219.149:42088] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api/v1/config"] [unique_id "aTOYx8D83luYT37-ZaW9TAAAAkY"]
[Sat Dec 06 10:45:28.458125 2025] [:error] [pid 52809:tid 52821] [client 13.57.219.149:42092] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_error.log"] [unique_id "aTOYyOrRwgsmpIJQ2qYmMwAAAgo"]
[Sat Dec 06 10:45:29.511395 2025] [:error] [pid 48399:tid 48412] [client 13.57.219.149:42102] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/etc/local.xml"] [unique_id "aTOYyejNPOrIshd8Ewd1CAAAAcs"]
[Sat Dec 06 10:45:31.242283 2025] [:error] [pid 52809:tid 52822] [client 13.57.219.149:39760] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/configuration.php"] [unique_id "aTOYy-rRwgsmpIJQ2qYmNQAAAgs"]
[Sat Dec 06 10:45:32.441797 2025] [:error] [pid 52809:tid 52820] [client 13.57.219.149:39766] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sites/default/settings.php"] [unique_id "aTOYzOrRwgsmpIJQ2qYmNgAAAgk"]
[Sat Dec 06 10:45:33.577664 2025] [:error] [pid 1838:tid 1850] [client 13.57.219.149:39774] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.DS_Store"] [unique_id "aTOYzS5zgnu67Yo7vrZ72AAAAoQ"]
[Sat Dec 06 10:45:34.687902 2025] [:error] [pid 61216:tid 61269] [client 13.57.219.149:39780] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.zip"] [unique_id "aTOYzjHlXXVdP5ewviWx6gAAAFc"]
[Sat Dec 06 10:45:35.759285 2025] [:error] [pid 35591:tid 35614] [client 13.57.219.149:39784] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.txt"] [unique_id "aTOYz4bmw-7bFvTxc9PK-gAAARU"]
[Sat Dec 06 10:45:36.887309 2025] [:error] [pid 1838:tid 1869] [client 13.57.219.149:39796] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.json"] [unique_id "aTOY0C5zgnu67Yo7vrZ72wAAApc"]
[Sat Dec 06 10:45:37.993220 2025] [:error] [pid 61217:tid 61287] [client 13.57.219.149:39812] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/credentials"] [unique_id "aTOY0VdSKQYfLI3fYo5AewAAAI4"]
[Sat Dec 06 10:45:39.857733 2025] [:error] [pid 35622:tid 35671] [client 13.57.219.149:39828] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aTOY0yOSP_9DVLgFwI56uwAAAZQ"]
[Sat Dec 06 10:45:41.572851 2025] [:error] [pid 61216:tid 61253] [client 13.57.219.149:39014] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i.php"] [unique_id "aTOY1THlXXVdP5ewviWx8gAAAEc"]
[Sat Dec 06 10:45:43.358752 2025] [:error] [pid 1838:tid 1862] [client 13.57.219.149:39016] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php.php"] [unique_id "aTOY1y5zgnu67Yo7vrZ78AAAApA"]
[Sat Dec 06 10:45:44.473065 2025] [:error] [pid 1838:tid 1852] [client 13.57.219.149:39026] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/errors.log"] [unique_id "aTOY2C5zgnu67Yo7vrZ79AAAAoY"]
[Sat Dec 06 10:45:45.735762 2025] [:error] [pid 1838:tid 1851] [client 13.57.219.149:39030] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app/etc/env.php"] [unique_id "aTOY2S5zgnu67Yo7vrZ79wAAAoU"]
[Sat Dec 06 10:45:48.284182 2025] [:error] [pid 52809:tid 52828] [client 13.57.219.149:39038] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logs/application.log"] [unique_id "aTOY3OrRwgsmpIJQ2qYmTwAAAhE"]
[Sat Dec 06 10:45:50.196136 2025] [:error] [pid 48399:tid 48409] [client 13.57.219.149:39044] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app/logs/dev.log"] [unique_id "aTOY3ujNPOrIshd8Ewd1DAAAAcg"]
[Sat Dec 06 10:47:14.727380 2025] [:error] [pid 48399:tid 48422] [client 13.57.219.149:35558] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apikeys.json"] [unique_id "aTOZMujNPOrIshd8Ewd1QQAAAdU"]
[Sat Dec 06 10:47:16.490363 2025] [:error] [pid 1838:tid 1860] [client 13.57.219.149:49992] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api_keys.json"] [unique_id "aTOZNC5zgnu67Yo7vrZ8hQAAAo4"]
[Sat Dec 06 10:47:17.888668 2025] [:error] [pid 1838:tid 1862] [client 13.57.219.149:49998] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.yml"] [unique_id "aTOZNS5zgnu67Yo7vrZ8hgAAApA"]
[Sat Dec 06 10:47:19.488600 2025] [:error] [pid 61215:tid 61241] [client 13.57.219.149:50010] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.json"] [unique_id "aTOZN-OOZ8nTCBYuI-wDEQAAABY"]
[Sat Dec 06 10:47:21.102972 2025] [:error] [pid 35591:tid 35594] [client 13.57.219.149:50026] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.azure/credentials"] [unique_id "aTOZOYbmw-7bFvTxc9PLKwAAAQE"]
[Sat Dec 06 10:47:23.066258 2025] [:error] [pid 61216:tid 61254] [client 13.57.219.149:48498] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/azure.json"] [unique_id "aTOZOzHlXXVdP5ewviWyMwAAAEg"]
[Sat Dec 06 10:47:24.347719 2025] [:error] [pid 61303:tid 61315] [client 13.57.219.149:48508] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gcp-credentials.json"] [unique_id "aTOZPNwK_fe00OH7zy404wAAAMk"]
[Sat Dec 06 10:47:25.700744 2025] [:error] [pid 35622:tid 35670] [client 13.57.219.149:48522] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.gcloud/credentials"] [unique_id "aTOZPSOSP_9DVLgFwI565wAAAZM"]
[Sat Dec 06 10:47:26.887046 2025] [:error] [pid 1727:tid 1752] [client 13.57.219.149:48532] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3.yml"] [unique_id "aTOZPsD83luYT37-ZaW9gQAAAlc"]
[Sat Dec 06 10:47:27.879325 2025] [:error] [pid 48399:tid 48418] [client 13.57.219.149:48534] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.s3cfg"] [unique_id "aTOZP-jNPOrIshd8Ewd1SgAAAdE"]
[Sat Dec 06 10:47:29.056227 2025] [:error] [pid 61303:tid 61319] [client 13.57.219.149:48544] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/config"] [unique_id "aTOZQdwK_fe00OH7zy405QAAAM0"]
[Sat Dec 06 10:47:30.231359 2025] [:error] [pid 61215:tid 61227] [client 13.57.219.149:48554] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.2"] [unique_id "aTOZQuOOZ8nTCBYuI-wDFQAAAAg"]
[Sat Dec 06 10:47:32.078397 2025] [:error] [pid 61303:tid 61310] [client 13.57.219.149:36388] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aTOZRNwK_fe00OH7zy405gAAAMQ"]
[Sat Dec 06 10:47:33.832856 2025] [:error] [pid 61303:tid 61326] [client 13.57.219.149:36394] [client 13.57.219.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.remote"] [unique_id "aTOZRdwK_fe00OH7zy406AAAANM"]
[Sat Dec 06 10:47:36.704669 2025] [:error] [pid 1838:tid 1859] [client 13.57.219.149:36408] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/testphp.php"] [unique_id "aTOZSC5zgnu67Yo7vrZ8jQAAAo0"]
[Sat Dec 06 10:47:50.513452 2025] [:error] [pid 61216:tid 61250] [client 13.57.219.149:33320] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php-info.php"] [unique_id "aTOZVjHlXXVdP5ewviWySAAAAEQ"]
[Sat Dec 06 10:48:46.103609 2025] [:error] [pid 1838:tid 1864] [client 13.57.219.149:34252] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info1.php"] [unique_id "aTOZji5zgnu67Yo7vrZ8sQAAApI"]
[Sat Dec 06 10:48:48.023238 2025] [:error] [pid 35591:tid 35612] [client 13.57.219.149:49522] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_info.php"] [unique_id "aTOZkIbmw-7bFvTxc9PLRgAAARM"]
[Sat Dec 06 10:48:49.738972 2025] [:error] [pid 35622:tid 35674] [client 13.57.219.149:49524] [client 13.57.219.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_version.php"] [unique_id "aTOZkSOSP_9DVLgFwI57EQAAAZc"]
[Sat Dec 06 11:50:43.102188 2025] [:error] [pid 1838:tid 1869] [client 216.73.216.129:7536] [client 216.73.216.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.129, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTOoEy5zgnu67Yo7vraNcgAAApc"]
[Sat Dec 06 13:25:59.404825 2025] [:error] [pid 1838:tid 1859] [client 44.249.70.158:59714] [client 44.249.70.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.249.70.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTO-Zy5zgnu67Yo7vraiuwAAAo0"]
[Sat Dec 06 13:26:09.102010 2025] [:error] [pid 48399:tid 48421] [client 44.249.70.158:47152] [client 44.249.70.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.249.70.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTO-cejNPOrIshd8EweGwgAAAdQ"]
[Sat Dec 06 13:38:39.423450 2025] [:error] [pid 1838:tid 1859] [client 34.213.234.20:51924] [client 34.213.234.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/"] [unique_id "aTPBXy5zgnu67Yo7vrak-QAAAo0"]
[Sat Dec 06 13:38:40.206283 2025] [:error] [pid 61216:tid 61263] [client 34.213.234.20:51928] [client 34.213.234.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aTPBYDHlXXVdP5ewviXQkwAAAFE"]
[Sat Dec 06 14:41:49.173205 2025] [:error] [pid 61215:tid 61239] [client 15.237.94.217:59152] [client 15.237.94.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.237.94.217, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTPQLeOOZ8nTCBYuI-wdFgAAABQ"]
[Sat Dec 06 14:42:06.752259 2025] [:error] [pid 61217:tid 61288] [client 15.237.94.217:44400] [client 15.237.94.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.237.94.217, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTPQPldSKQYfLI3fYo5bcgAAAI8"]
[Sat Dec 06 16:12:01.028021 2025] [:error] [pid 61303:tid 61308] [client 13.126.94.175:52740] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTPlUdwK_fe00OH7zy5r4wAAAMI"]
[Sat Dec 06 16:12:01.975738 2025] [:error] [pid 61217:tid 61285] [client 13.126.94.175:52754] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/error.log"] [unique_id "aTPlUVdSKQYfLI3fYo5lrAAAAIw"]
[Sat Dec 06 16:12:06.533938 2025] [:error] [pid 1727:tid 1739] [client 13.126.94.175:52770] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aTPlVsD83luYT37-ZaXopgAAAko"]
[Sat Dec 06 16:12:07.483133 2025] [:error] [pid 1838:tid 1847] [client 13.126.94.175:52784] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/database.sql"] [unique_id "aTPlVy5zgnu67Yo7vrbN1gAAAoE"]
[Sat Dec 06 16:12:08.424411 2025] [:error] [pid 61217:tid 61279] [client 13.126.94.175:55050] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/backup.sql"] [unique_id "aTPlWFdSKQYfLI3fYo5luAAAAIY"]
[Sat Dec 06 16:12:09.363598 2025] [:error] [pid 48399:tid 48407] [client 13.126.94.175:55066] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/debug.log"] [unique_id "aTPlWejNPOrIshd8Ewec9wAAAcY"]
[Sat Dec 06 16:12:13.333816 2025] [:error] [pid 1838:tid 1847] [client 13.126.94.175:55086] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/dump.sql"] [unique_id "aTPlXS5zgnu67Yo7vrbN6gAAAoE"]
[Sat Dec 06 16:12:14.277550 2025] [:error] [pid 61215:tid 61232] [client 13.126.94.175:55100] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aTPlXuOOZ8nTCBYuI-wo9QAAAA0"]
[Sat Dec 06 16:12:21.301189 2025] [:error] [pid 61216:tid 61266] [client 13.126.94.175:53890] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aTPlZTHlXXVdP5ewviXuwgAAAFQ"]
[Sat Dec 06 16:12:25.348208 2025] [:error] [pid 1838:tid 1857] [client 13.126.94.175:53914] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aTPlaS5zgnu67Yo7vrbN-QAAAos"]
[Sat Dec 06 16:12:26.291611 2025] [:error] [pid 48399:tid 48410] [client 13.126.94.175:53926] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/db_backup.sql"] [unique_id "aTPlaujNPOrIshd8Ewec-gAAAck"]
[Sat Dec 06 16:12:35.908432 2025] [:error] [pid 48399:tid 48421] [client 13.126.94.175:40648] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aTPlc-jNPOrIshd8EwedAwAAAdQ"]
[Sat Dec 06 16:12:36.846069 2025] [:error] [pid 35622:tid 35653] [client 13.126.94.175:40652] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "aTPldCOSP_9DVLgFwI6grAAAAYI"]
[Sat Dec 06 16:12:43.556176 2025] [:error] [pid 61215:tid 61221] [client 13.126.94.175:35692] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aTPle-OOZ8nTCBYuI-wpDQAAAAI"]
[Sat Dec 06 16:12:47.354669 2025] [:error] [pid 61216:tid 61247] [client 13.126.94.175:35710] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aTPlfzHlXXVdP5ewviXu2wAAAEE"]
[Sat Dec 06 16:12:48.291989 2025] [:error] [pid 1727:tid 1743] [client 13.126.94.175:32978] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docker-compose.yml"] [unique_id "aTPlgMD83luYT37-ZaXoxAAAAk4"]
[Sat Dec 06 16:12:49.237177 2025] [:error] [pid 35622:tid 35667] [client 13.126.94.175:32992] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws-config.json"] [unique_id "aTPlgSOSP_9DVLgFwI6gtwAAAZA"]
[Sat Dec 06 16:12:50.174340 2025] [:error] [pid 61303:tid 61310] [client 13.126.94.175:33006] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev.local"] [unique_id "aTPlgtwK_fe00OH7zy5sDQAAAMQ"]
[Sat Dec 06 16:12:51.114148 2025] [:error] [pid 61217:tid 61277] [client 13.126.94.175:33018] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod.local"] [unique_id "aTPlg1dSKQYfLI3fYo5l2AAAAIQ"]
[Sat Dec 06 16:12:52.049627 2025] [:error] [pid 1838:tid 1855] [client 13.126.94.175:33020] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.1"] [unique_id "aTPlhC5zgnu67Yo7vrbOGgAAAok"]
[Sat Dec 06 16:12:52.993480 2025] [:error] [pid 52809:tid 52818] [client 13.126.94.175:33024] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aTPlhOrRwgsmpIJQ2qZUDAAAAgc"]
[Sat Dec 06 16:12:53.941487 2025] [:error] [pid 35622:tid 35673] [client 13.126.94.175:33040] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aTPlhSOSP_9DVLgFwI6gugAAAZY"]
[Sat Dec 06 16:12:54.881248 2025] [:error] [pid 61303:tid 61327] [client 13.126.94.175:33054] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/server.php"] [unique_id "aTPlhtwK_fe00OH7zy5sFgAAANQ"]
[Sat Dec 06 16:12:55.819712 2025] [:error] [pid 61303:tid 61323] [client 13.126.94.175:33070] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api/v1/config"] [unique_id "aTPlh9wK_fe00OH7zy5sGgAAANA"]
[Sat Dec 06 16:12:56.756392 2025] [:error] [pid 1838:tid 1858] [client 13.126.94.175:33082] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_error.log"] [unique_id "aTPliC5zgnu67Yo7vrbOIwAAAow"]
[Sat Dec 06 16:12:57.699751 2025] [:error] [pid 61303:tid 61331] [client 13.126.94.175:33084] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/etc/local.xml"] [unique_id "aTPlidwK_fe00OH7zy5sHQAAANg"]
[Sat Dec 06 16:12:58.653852 2025] [:error] [pid 61215:tid 61225] [client 13.126.94.175:40116] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/configuration.php"] [unique_id "aTPliuOOZ8nTCBYuI-wpFQAAAAY"]
[Sat Dec 06 16:12:59.603396 2025] [:error] [pid 1838:tid 1861] [client 13.126.94.175:40122] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sites/default/settings.php"] [unique_id "aTPliy5zgnu67Yo7vrbOJgAAAo8"]
[Sat Dec 06 16:13:00.542773 2025] [:error] [pid 1727:tid 1733] [client 13.126.94.175:40126] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.DS_Store"] [unique_id "aTPljMD83luYT37-ZaXozwAAAkQ"]
[Sat Dec 06 16:13:01.482509 2025] [:error] [pid 35622:tid 35657] [client 13.126.94.175:40128] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.zip"] [unique_id "aTPljSOSP_9DVLgFwI6gxAAAAYY"]
[Sat Dec 06 16:13:02.423302 2025] [:error] [pid 1727:tid 1746] [client 13.126.94.175:40138] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.txt"] [unique_id "aTPljsD83luYT37-ZaXo0gAAAlE"]
[Sat Dec 06 16:13:03.366020 2025] [:error] [pid 61216:tid 61269] [client 13.126.94.175:40144] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.json"] [unique_id "aTPljzHlXXVdP5ewviXu8gAAAFc"]
[Sat Dec 06 16:13:04.311223 2025] [:error] [pid 48399:tid 48414] [client 13.126.94.175:40152] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/credentials"] [unique_id "aTPlkOjNPOrIshd8EwedIwAAAc0"]
[Sat Dec 06 16:13:05.257190 2025] [:error] [pid 48399:tid 48422] [client 13.126.94.175:40164] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aTPlkejNPOrIshd8EwedJwAAAdU"]
[Sat Dec 06 16:13:06.194657 2025] [:error] [pid 35591:tid 35599] [client 13.126.94.175:40172] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i.php"] [unique_id "aTPlkobmw-7bFvTxc9P1AgAAAQY"]
[Sat Dec 06 16:13:07.141750 2025] [:error] [pid 61215:tid 61227] [client 13.126.94.175:40174] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php.php"] [unique_id "aTPlk-OOZ8nTCBYuI-wpHgAAAAg"]
[Sat Dec 06 16:13:08.080253 2025] [:error] [pid 1727:tid 1731] [client 13.126.94.175:58642] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/errors.log"] [unique_id "aTPllMD83luYT37-ZaXo2AAAAkI"]
[Sat Dec 06 16:13:09.027910 2025] [:error] [pid 1838:tid 1846] [client 13.126.94.175:58652] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app/etc/env.php"] [unique_id "aTPllS5zgnu67Yo7vrbOMwAAAoA"]
[Sat Dec 06 16:13:09.974770 2025] [:error] [pid 48399:tid 48406] [client 13.126.94.175:58658] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logs/application.log"] [unique_id "aTPllejNPOrIshd8EwedLgAAAcU"]
[Sat Dec 06 16:13:10.920647 2025] [:error] [pid 1838:tid 1858] [client 13.126.94.175:58660] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app/logs/dev.log"] [unique_id "aTPlli5zgnu67Yo7vrbOOAAAAow"]
[Sat Dec 06 16:13:11.858220 2025] [:error] [pid 35622:tid 35657] [client 13.126.94.175:58676] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app/logs/prod.log"] [unique_id "aTPllyOSP_9DVLgFwI6gzAAAAYY"]
[Sat Dec 06 16:13:12.798604 2025] [:error] [pid 61217:tid 61285] [client 13.126.94.175:58686] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Thumbs.db"] [unique_id "aTPlmFdSKQYfLI3fYo5l6wAAAIw"]
[Sat Dec 06 16:13:13.737577 2025] [:error] [pid 1838:tid 1848] [client 13.126.94.175:58698] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/site-backup.zip"] [unique_id "aTPlmS5zgnu67Yo7vrbOPQAAAoI"]
[Sat Dec 06 16:13:14.690100 2025] [:error] [pid 1727:tid 1741] [client 13.126.94.175:58708] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/backup.tar.gz"] [unique_id "aTPlmsD83luYT37-ZaXo4gAAAkw"]
[Sat Dec 06 16:13:15.640720 2025] [:error] [pid 61216:tid 61265] [client 13.126.94.175:58712] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k8s-config.yml"] [unique_id "aTPlmzHlXXVdP5ewviXu_wAAAFM"]
[Sat Dec 06 16:13:16.576704 2025] [:error] [pid 1838:tid 1860] [client 13.126.94.175:58726] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kubernetes.yml"] [unique_id "aTPlnC5zgnu67Yo7vrbOQwAAAo4"]
[Sat Dec 06 16:13:17.524195 2025] [:error] [pid 1838:tid 1865] [client 13.126.94.175:58742] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.dockerignore"] [unique_id "aTPlnS5zgnu67Yo7vrbORQAAApM"]
[Sat Dec 06 16:13:18.470486 2025] [:error] [pid 61215:tid 61231] [client 13.126.94.175:44952] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.docker/config.json"] [unique_id "aTPlnuOOZ8nTCBYuI-wpKgAAAAw"]
[Sat Dec 06 16:13:19.413184 2025] [:error] [pid 61216:tid 61253] [client 13.126.94.175:44966] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.dockerenv"] [unique_id "aTPlnzHlXXVdP5ewviXvCwAAAEc"]
[Sat Dec 06 16:13:20.352225 2025] [:error] [pid 61303:tid 61312] [client 13.126.94.175:44982] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docker-compose.override.yml"] [unique_id "aTPloNwK_fe00OH7zy5sOAAAAMY"]
[Sat Dec 06 16:13:21.299764 2025] [:error] [pid 1838:tid 1850] [client 13.126.94.175:44990] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docker-compose.yaml"] [unique_id "aTPloS5zgnu67Yo7vrbOUQAAAoQ"]
[Sat Dec 06 16:13:22.238702 2025] [:error] [pid 35622:tid 35671] [client 13.126.94.175:45000] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/security.txt"] [unique_id "aTPloiOSP_9DVLgFwI6g1AAAAZQ"]
[Sat Dec 06 16:13:23.182788 2025] [:error] [pid 61303:tid 61309] [client 13.126.94.175:45012] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api/v2/config"] [unique_id "aTPlo9wK_fe00OH7zy5sQgAAAMM"]
[Sat Dec 06 16:13:24.121510 2025] [:error] [pid 48399:tid 48419] [client 13.126.94.175:45028] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.secrets"] [unique_id "aTPlpOjNPOrIshd8EwedOwAAAdI"]
[Sat Dec 06 16:13:25.059648 2025] [:error] [pid 52809:tid 52832] [client 13.126.94.175:45044] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oauth.json"] [unique_id "aTPlperRwgsmpIJQ2qZULwAAAhU"]
[Sat Dec 06 16:13:25.999517 2025] [:error] [pid 61216:tid 61259] [client 13.126.94.175:45050] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tokens.json"] [unique_id "aTPlpTHlXXVdP5ewviXvKwAAAE0"]
[Sat Dec 06 16:13:26.939327 2025] [:error] [pid 52809:tid 52811] [client 13.126.94.175:45064] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/keys.json"] [unique_id "aTPlpurRwgsmpIJQ2qZUMwAAAgA"]
[Sat Dec 06 16:13:27.884154 2025] [:error] [pid 61303:tid 61330] [client 13.126.94.175:37104] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/credentials.json"] [unique_id "aTPlp9wK_fe00OH7zy5sSAAAANc"]
[Sat Dec 06 16:13:28.831677 2025] [:error] [pid 35622:tid 35661] [client 13.126.94.175:37114] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.api_keys"] [unique_id "aTPlqCOSP_9DVLgFwI6g3gAAAYo"]
[Sat Dec 06 16:13:29.775391 2025] [:error] [pid 61216:tid 61257] [client 13.126.94.175:37116] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apikeys.json"] [unique_id "aTPlqTHlXXVdP5ewviXvMAAAAEs"]
[Sat Dec 06 16:13:30.721781 2025] [:error] [pid 48399:tid 48406] [client 13.126.94.175:37122] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api_keys.json"] [unique_id "aTPlqujNPOrIshd8EwedQQAAAcU"]
[Sat Dec 06 16:13:31.672067 2025] [:error] [pid 35591:tid 35610] [client 13.126.94.175:37138] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.yml"] [unique_id "aTPlq4bmw-7bFvTxc9P1EwAAARE"]
[Sat Dec 06 16:13:32.617767 2025] [:error] [pid 48399:tid 48403] [client 13.126.94.175:37152] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/secrets.json"] [unique_id "aTPlrOjNPOrIshd8EwedQwAAAcI"]
[Sat Dec 06 16:13:33.556258 2025] [:error] [pid 35622:tid 35657] [client 13.126.94.175:37168] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.azure/credentials"] [unique_id "aTPlrSOSP_9DVLgFwI6g4QAAAYY"]
[Sat Dec 06 16:13:34.499923 2025] [:error] [pid 48399:tid 48401] [client 13.126.94.175:37174] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/azure.json"] [unique_id "aTPlrujNPOrIshd8EwedRAAAAcA"]
[Sat Dec 06 16:13:35.441538 2025] [:error] [pid 1838:tid 1864] [client 13.126.94.175:37184] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gcp-credentials.json"] [unique_id "aTPlry5zgnu67Yo7vrbObwAAApI"]
[Sat Dec 06 16:13:36.379847 2025] [:error] [pid 61303:tid 61322] [client 13.126.94.175:37194] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.gcloud/credentials"] [unique_id "aTPlsNwK_fe00OH7zy5sUgAAAM8"]
[Sat Dec 06 16:13:37.314598 2025] [:error] [pid 61303:tid 61314] [client 13.126.94.175:37210] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3.yml"] [unique_id "aTPlsdwK_fe00OH7zy5sVQAAAMg"]
[Sat Dec 06 16:13:38.254943 2025] [:error] [pid 61216:tid 61263] [client 13.126.94.175:40832] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.s3cfg"] [unique_id "aTPlsjHlXXVdP5ewviXvMQAAAFE"]
[Sat Dec 06 16:13:39.194319 2025] [:error] [pid 1838:tid 1860] [client 13.126.94.175:40842] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.aws/config"] [unique_id "aTPlsy5zgnu67Yo7vrbOcAAAAo4"]
[Sat Dec 06 16:13:40.131293 2025] [:error] [pid 1838:tid 1847] [client 13.126.94.175:40854] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.2"] [unique_id "aTPltC5zgnu67Yo7vrbOdAAAAoE"]
[Sat Dec 06 16:13:41.066296 2025] [:error] [pid 61216:tid 61258] [client 13.126.94.175:40858] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aTPltTHlXXVdP5ewviXvOAAAAEw"]
[Sat Dec 06 16:13:42.006611 2025] [:error] [pid 61216:tid 61251] [client 13.126.94.175:40860] [client 13.126.94.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.remote"] [unique_id "aTPltjHlXXVdP5ewviXvOQAAAEU"]
[Sat Dec 06 16:13:42.947414 2025] [:error] [pid 1838:tid 1848] [client 13.126.94.175:40864] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/testphp.php"] [unique_id "aTPlti5zgnu67Yo7vrbOeQAAAoI"]
[Sat Dec 06 16:13:43.885771 2025] [:error] [pid 1727:tid 1731] [client 13.126.94.175:40868] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infophp.php"] [unique_id "aTPlt8D83luYT37-ZaXo-gAAAkI"]
[Sat Dec 06 16:14:17.657737 2025] [:error] [pid 61216:tid 61254] [client 13.126.94.175:59946] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/debug.php"] [unique_id "aTPl2THlXXVdP5ewviXvVAAAAEg"]
[Sat Dec 06 16:14:18.601932 2025] [:error] [pid 61216:tid 61256] [client 13.126.94.175:35966] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/serverinfo.php"] [unique_id "aTPl2jHlXXVdP5ewviXvWAAAAEo"]
[Sat Dec 06 16:14:19.546704 2025] [:error] [pid 1838:tid 1866] [client 13.126.94.175:35976] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpversion.php"] [unique_id "aTPl2y5zgnu67Yo7vrbOswAAApQ"]
[Sat Dec 06 16:14:20.489354 2025] [:error] [pid 61303:tid 61323] [client 13.126.94.175:35992] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info3.php"] [unique_id "aTPl3NwK_fe00OH7zy5sjwAAANA"]
[Sat Dec 06 16:14:21.437973 2025] [:error] [pid 48399:tid 48411] [client 13.126.94.175:35998] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info2.php"] [unique_id "aTPl3ejNPOrIshd8EwedWAAAAco"]
[Sat Dec 06 16:14:22.373438 2025] [:error] [pid 61216:tid 61262] [client 13.126.94.175:36012] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info1.php"] [unique_id "aTPl3jHlXXVdP5ewviXvZQAAAFA"]
[Sat Dec 06 16:14:23.315174 2025] [:error] [pid 61216:tid 61268] [client 13.126.94.175:36022] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_info.php"] [unique_id "aTPl3zHlXXVdP5ewviXvZwAAAFY"]
[Sat Dec 06 16:14:24.253980 2025] [:error] [pid 1838:tid 1849] [client 13.126.94.175:36028] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_version.php"] [unique_id "aTPl4C5zgnu67Yo7vrbOuQAAAoM"]
[Sat Dec 06 16:14:26.440921 2025] [:error] [pid 1727:tid 1740] [client 13.126.94.175:36040] [client 13.126.94.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js"] [unique_id "aTPl4sD83luYT37-ZaXpIwAAAks"]
[Sat Dec 06 16:35:21.865502 2025] [:error] [pid 61216:tid 61263] [client 85.9.207.35:48050] [client 85.9.207.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTPqyTHlXXVdP5ewviXzXQAAAFE"]
[Sat Dec 06 17:15:45.117911 2025] [:error] [pid 61215:tid 61226] [client 3.34.130.132:39092] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTP0QeOOZ8nTCBYuI-wylgAAAAc"]
[Sat Dec 06 17:15:46.238276 2025] [:error] [pid 1838:tid 1846] [client 3.34.130.132:39652] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aTP0Qi5zgnu67Yo7vrbgqAAAAoA"]
[Sat Dec 06 17:15:46.643027 2025] [:error] [pid 61303:tid 61313] [client 3.34.130.132:40032] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aTP0QtwK_fe00OH7zy53vAAAAMc"]
[Sat Dec 06 17:15:46.711660 2025] [:error] [pid 35591:tid 35602] [client 3.34.130.132:39994] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aTP0Qobmw-7bFvTxc9P-1QAAAQk"]
[Sat Dec 06 17:15:47.530268 2025] [:error] [pid 1727:tid 1747] [client 3.34.130.132:40598] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aTP0Q8D83luYT37-ZaXyWgAAAlI"]
[Sat Dec 06 17:15:48.154424 2025] [:error] [pid 48399:tid 48401] [client 3.34.130.132:40782] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aTP0ROjNPOrIshd8EwelIQAAAcA"]
[Sat Dec 06 17:15:48.154469 2025] [:error] [pid 61217:tid 61277] [client 3.34.130.132:40756] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "aTP0RFdSKQYfLI3fYo5uNAAAAIQ"]
[Sat Dec 06 17:15:49.571855 2025] [:error] [pid 61303:tid 61315] [client 3.34.130.132:41230] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "aTP0RdwK_fe00OH7zy53vgAAAMk"]
[Sat Dec 06 17:15:49.880259 2025] [:error] [pid 61217:tid 61281] [client 3.34.130.132:41792] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aTP0RVdSKQYfLI3fYo5uNwAAAIg"]
[Sat Dec 06 17:15:49.881994 2025] [:error] [pid 61217:tid 61291] [client 3.34.130.132:41796] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aTP0RVdSKQYfLI3fYo5uOAAAAJI"]
[Sat Dec 06 17:15:50.027407 2025] [:error] [pid 61303:tid 61312] [client 3.34.130.132:41794] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aTP0RtwK_fe00OH7zy53vwAAAMY"]
[Sat Dec 06 17:15:50.028317 2025] [:error] [pid 61217:tid 61286] [client 3.34.130.132:41860] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aTP0RldSKQYfLI3fYo5uOQAAAI0"]
[Sat Dec 06 17:15:50.346643 2025] [:error] [pid 61303:tid 61309] [client 3.34.130.132:41940] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "aTP0RtwK_fe00OH7zy53wAAAAMM"]
[Sat Dec 06 17:15:50.459510 2025] [:error] [pid 1727:tid 1734] [client 3.34.130.132:41984] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aTP0RsD83luYT37-ZaXyXAAAAkU"]
[Sat Dec 06 17:15:50.768379 2025] [:error] [pid 61216:tid 61253] [client 3.34.130.132:42224] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.1"] [unique_id "aTP0RjHlXXVdP5ewviX78wAAAEc"]
[Sat Dec 06 17:15:53.276280 2025] [:error] [pid 35622:tid 35672] [client 3.34.130.132:43612] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "aTP0SSOSP_9DVLgFwI6otQAAAZU"]
[Sat Dec 06 17:15:53.352049 2025] [:error] [pid 1838:tid 1853] [client 3.34.130.132:43620] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "aTP0SS5zgnu67Yo7vrbgqQAAAoc"]
[Sat Dec 06 17:15:53.352238 2025] [:error] [pid 52809:tid 52816] [client 3.34.130.132:43616] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.2"] [unique_id "aTP0SerRwgsmpIJQ2qZfDgAAAgU"]
[Sat Dec 06 17:15:53.353157 2025] [:error] [pid 61216:tid 61247] [client 3.34.130.132:43628] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "aTP0STHlXXVdP5ewviX79QAAAEE"]
[Sat Dec 06 17:15:53.353606 2025] [:error] [pid 1838:tid 1850] [client 3.34.130.132:43614] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/src/.env"] [unique_id "aTP0SS5zgnu67Yo7vrbgqgAAAoQ"]
[Sat Dec 06 17:15:53.353695 2025] [:error] [pid 61216:tid 61250] [client 3.34.130.132:43622] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod.local"] [unique_id "aTP0STHlXXVdP5ewviX79gAAAEQ"]
[Sat Dec 06 17:15:53.353878 2025] [:error] [pid 61216:tid 61262] [client 3.34.130.132:43618] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "aTP0STHlXXVdP5ewviX79wAAAFA"]
[Sat Dec 06 17:15:55.736800 2025] [:error] [pid 61303:tid 61329] [client 3.34.130.132:44124] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "aTP0S9wK_fe00OH7zy53xgAAANY"]
[Sat Dec 06 17:15:56.026357 2025] [:error] [pid 1838:tid 1857] [client 3.34.130.132:45434] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.env"] [unique_id "aTP0TC5zgnu67Yo7vrbgqwAAAos"]
[Sat Dec 06 17:15:56.521806 2025] [:error] [pid 1727:tid 1748] [client 3.34.130.132:45452] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/vendor/.env"] [unique_id "aTP0TMD83luYT37-ZaXyYgAAAlM"]
[Sat Dec 06 17:15:56.521933 2025] [:error] [pid 1727:tid 1738] [client 3.34.130.132:45454] [client 3.34.130.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/storage/.env"] [unique_id "aTP0TMD83luYT37-ZaXyYwAAAkk"]
[Sat Dec 06 17:53:15.721351 2025] [:error] [pid 1838:tid 1869] [client 85.9.207.35:49968] [client 85.9.207.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTP9Cy5zgnu67Yo7vrbsPAAAApc"]
[Sat Dec 06 19:30:49.765727 2025] [:error] [pid 61303:tid 61306] [client 185.223.152.43:54157] [client 185.223.152.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.43, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTQT6dwK_fe00OH7zy6QDQAAAMA"]
[Sun Dec 07 01:45:11.548750 2025] [:error] [pid 44817:tid 44847] [client 20.84.81.88:59306] [client 20.84.81.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||makifim.com.au|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "makifim.com.au"] [uri "/console/images/%2E%2E%2Fconsole.portal"] [unique_id "aTRrp4q9cLyU8e8Cr9hJ0gAAABg"]
[Sun Dec 07 05:11:16.600293 2025] [autoindex:error] [pid 34108:tid 34117] [client 45.146.55.53:47021] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:11:17.039818 2025] [autoindex:error] [pid 34108:tid 34115] [client 45.146.55.53:47021] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:11:17.494741 2025] [autoindex:error] [pid 34108:tid 34132] [client 45.146.55.53:47021] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:11:17.931175 2025] [autoindex:error] [pid 34108:tid 34123] [client 45.146.55.53:47021] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:51:13.654990 2025] [:error] [pid 7089:tid 7113] [client 136.144.43.227:64373] [client 136.144.43.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.227, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTSlUYJPZ-pZM-y51NEGxwAAARY"]
[Sun Dec 07 05:51:28.866658 2025] [:error] [pid 7089:tid 7104] [client 136.144.43.227:64373] [client 136.144.43.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.227, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTSlYIJPZ-pZM-y51NEG_QAAAQ0"]
[Sun Dec 07 11:59:02.069662 2025] [:error] [pid 25601:tid 25644] [client 185.177.72.8:49988] [client 185.177.72.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTT7hqtsSIqGPs4YVxETBwAAAIk"]
[Sun Dec 07 12:07:25.101899 2025] [:error] [pid 25600:tid 25617] [client 20.84.81.88:64838] [client 20.84.81.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||makifim.com.au|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "makifim.com.au"] [uri "/console/images/%2E%2E%2Fconsole.portal"] [unique_id "aTT9fYX3SVrXRURpt5Ia6gAAAEo"]
[Sun Dec 07 13:43:51.734701 2025] [:error] [pid 25600:tid 25621] [client 85.209.135.111:41316] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTUUF4X3SVrXRURpt5IvEgAAAE4"]
[Sun Dec 07 13:51:11.654402 2025] [:error] [pid 36068:tid 36075] [client 85.209.135.111:59492] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTUVz1GuxqM4ZYob8lPIpwAAAAU"]
[Sun Dec 07 14:48:42.236221 2025] [:error] [pid 39560:tid 39568] [client 185.177.72.8:53002] [client 185.177.72.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTUjSitL21FvSzcnpi0D0AAAAUY"]
[Sun Dec 07 15:53:38.002995 2025] [:error] [pid 25694:tid 25710] [client 83.229.107.129:43179] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTUygkf7996cewJ5N28gWAAAAQ4"]
[Sun Dec 07 15:53:38.004512 2025] [:error] [pid 36068:tid 36080] [client 83.229.107.129:41405] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTUyglGuxqM4ZYob8lPjqwAAAAo"]
[Sun Dec 07 15:53:38.009099 2025] [:error] [pid 25694:tid 25716] [client 83.229.107.129:42389] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTUygkf7996cewJ5N28gWQAAARQ"]
[Sun Dec 07 15:53:38.009195 2025] [:error] [pid 25694:tid 25696] [client 83.229.107.129:38943] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTUygkf7996cewJ5N28gWgAAAQA"]
[Sun Dec 07 15:55:26.353132 2025] [:error] [pid 25694:tid 25720] [client 83.229.107.129:43369] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTUy7kf7996cewJ5N28g-wAAARg"]
[Sun Dec 07 16:19:15.034630 2025] [:error] [pid 25694:tid 25713] [client 104.28.246.54:14220] [client 104.28.246.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aTU4g0f7996cewJ5N28nfwAAARE"]
[Sun Dec 07 16:19:15.753364 2025] [:error] [pid 36068:tid 36080] [client 104.28.246.54:19342] [client 104.28.246.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/style.php"] [unique_id "aTU4g1GuxqM4ZYob8lPqogAAAAo"]
[Sun Dec 07 16:19:19.486464 2025] [:error] [pid 25602:tid 25670] [client 104.28.214.54:32646] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aTU4hxMayYLriq9gRdfjcgAAAMg"]
[Sun Dec 07 16:19:20.225214 2025] [:error] [pid 39560:tid 39572] [client 104.28.246.54:39319] [client 104.28.246.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/style.php"] [unique_id "aTU4iCtL21FvSzcnpi0gmQAAAUo"]
[Sun Dec 07 18:02:39.625153 2025] [:error] [pid 39560:tid 39582] [client 136.118.10.250:63228] [client 136.118.10.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.10.250, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTVQvytL21FvSzcnpi1BowAAAVQ"]
[Sun Dec 07 18:02:47.657943 2025] [:error] [pid 39560:tid 39562] [client 136.118.10.250:63228] [client 136.118.10.250] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTVQxytL21FvSzcnpi1BqgAAAUA"]
[Sun Dec 07 18:02:49.644897 2025] [:error] [pid 39560:tid 39581] [client 136.118.10.250:63228] [client 136.118.10.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.10.250, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTVQyStL21FvSzcnpi1BrAAAAVM"]
[Sun Dec 07 19:11:03.159841 2025] [:error] [pid 25602:tid 25680] [client 20.89.193.126:55381] [client 20.89.193.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVgxxMayYLriq9gRdcBeQAAANI"]
[Sun Dec 07 19:11:06.449202 2025] [:error] [pid 25694:tid 25710] [client 20.89.193.126:56319] [client 20.89.193.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVgykf7996cewJ5N29V1wAAAQ4"]
[Sun Dec 07 19:44:32.855918 2025] [:error] [pid 25694:tid 25699] [client 4.217.198.93:35737] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTVooEf7996cewJ5N29dsQAAAQM"]
[Sun Dec 07 19:45:01.760547 2025] [:error] [pid 25600:tid 25613] [client 4.217.198.93:40812] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTVovYX3SVrXRURpt5Jz7AAAAEY"]
[Sun Dec 07 19:45:03.383409 2025] [:error] [pid 25602:tid 25663] [client 4.217.198.93:40798] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTVovxMayYLriq9gRdcIegAAAME"]
[Sun Dec 07 19:45:11.417322 2025] [:error] [pid 39560:tid 39577] [client 4.217.198.93:42672] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTVoxytL21FvSzcnpi1nQwAAAU8"]
[Sun Dec 07 19:45:18.215511 2025] [:error] [pid 36068:tid 36087] [client 4.217.198.93:49165] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aTVozlGuxqM4ZYob8lMaqAAAABE"]
[Sun Dec 07 19:45:23.728207 2025] [:error] [pid 39560:tid 39583] [client 4.217.198.93:42649] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aTVo0ytL21FvSzcnpi1nWQAAAVU"]
[Sun Dec 07 19:45:24.596567 2025] [:error] [pid 39560:tid 39568] [client 4.217.198.93:35720] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aTVo1CtL21FvSzcnpi1nXQAAAUY"]
[Sun Dec 07 19:45:26.790971 2025] [:error] [pid 25600:tid 25615] [client 4.217.198.93:41947] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aTVo1oX3SVrXRURpt5J0DwAAAEg"]
[Sun Dec 07 19:45:28.119772 2025] [:error] [pid 39560:tid 39580] [client 4.217.198.93:38940] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aTVo2CtL21FvSzcnpi1nZgAAAVI"]
[Sun Dec 07 19:45:29.417681 2025] [:error] [pid 36068:tid 36081] [client 4.217.198.93:49189] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aTVo2VGuxqM4ZYob8lMasgAAAAs"]
[Sun Dec 07 19:45:30.865613 2025] [:error] [pid 39560:tid 39577] [client 4.217.198.93:38972] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aTVo2itL21FvSzcnpi1nagAAAU8"]
[Sun Dec 07 19:45:32.542065 2025] [:error] [pid 25602:tid 25665] [client 4.217.198.93:35714] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aTVo3BMayYLriq9gRdcIlAAAAMM"]
[Sun Dec 07 19:45:37.994903 2025] [:error] [pid 39560:tid 39567] [client 4.217.198.93:49197] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTVo4StL21FvSzcnpi1ncwAAAUU"]
[Sun Dec 07 19:45:39.954518 2025] [:error] [pid 25600:tid 25629] [client 4.217.198.93:35294] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTVo44X3SVrXRURpt5J0JQAAAFY"]
[Sun Dec 07 19:45:43.463894 2025] [:error] [pid 25600:tid 25628] [client 4.217.198.93:37801] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTVo54X3SVrXRURpt5J0KAAAAFU"]
[Sun Dec 07 19:45:56.415458 2025] [:error] [pid 39560:tid 39585] [client 4.217.198.93:41152] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aTVo9CtL21FvSzcnpi1niAAAAVc"]
[Sun Dec 07 19:46:08.861027 2025] [:error] [pid 36068:tid 36075] [client 4.217.198.93:40746] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aTVpAFGuxqM4ZYob8lMa4AAAAAU"]
[Sun Dec 07 19:46:14.701741 2025] [proxy_fcgi:error] [pid 39560:tid 39567] [client 4.217.198.93:41502] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 19:46:14.853609 2025] [:error] [pid 39560:tid 39563] [client 4.217.198.93:41502] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/0.php"] [unique_id "aTVpBitL21FvSzcnpi1nmwAAAUE"]
[Sun Dec 07 19:46:35.264717 2025] [:error] [pid 25600:tid 25615] [client 4.217.198.93:56467] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aTVpG4X3SVrXRURpt5J0SgAAAEg"]
[Sun Dec 07 19:47:23.713288 2025] [:error] [pid 25600:tid 25622] [client 4.217.198.93:34956] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/17.php"] [unique_id "aTVpS4X3SVrXRURpt5J1QAAAAE8"]
[Sun Dec 07 19:47:26.540930 2025] [:error] [pid 39560:tid 39586] [client 4.217.198.93:50302] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/17.php"] [unique_id "aTVpTitL21FvSzcnpi1n9QAAAVg"]
[Sun Dec 07 19:47:28.113273 2025] [:error] [pid 39560:tid 39570] [client 4.217.198.93:8542] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/17.php"] [unique_id "aTVpUCtL21FvSzcnpi1n9wAAAUg"]
[Sun Dec 07 19:47:30.899814 2025] [:error] [pid 25602:tid 25663] [client 4.217.198.93:59054] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/17.php"] [unique_id "aTVpUhMayYLriq9gRdcI-gAAAME"]
[Sun Dec 07 19:47:32.198963 2025] [:error] [pid 25694:tid 25712] [client 4.217.198.93:34971] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aTVpVEf7996cewJ5N29eawAAARA"]
[Sun Dec 07 19:47:33.887169 2025] [:error] [pid 25694:tid 25717] [client 4.217.198.93:58965] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aTVpVUf7996cewJ5N29ebgAAARU"]
[Sun Dec 07 19:47:39.409056 2025] [:error] [pid 36068:tid 36070] [client 4.217.198.93:8553] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aTVpW1GuxqM4ZYob8lMbeQAAAAA"]
[Sun Dec 07 19:47:49.637435 2025] [:error] [pid 25601:tid 25639] [client 4.217.198.93:59032] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aTVpZatsSIqGPs4YVxFqWQAAAIQ"]
[Sun Dec 07 19:47:53.767245 2025] [:error] [pid 36068:tid 36076] [client 4.217.198.93:50242] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aTVpaVGuxqM4ZYob8lMbigAAAAY"]
[Sun Dec 07 19:48:03.170089 2025] [:error] [pid 25694:tid 25697] [client 4.217.198.93:38161] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aTVpc0f7996cewJ5N29eiQAAAQE"]
[Sun Dec 07 19:48:06.119184 2025] [:error] [pid 25601:tid 25641] [client 4.217.198.93:58942] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aTVpdqtsSIqGPs4YVxFqZAAAAIY"]
[Sun Dec 07 19:48:07.216100 2025] [:error] [pid 25601:tid 25637] [client 4.217.198.93:38177] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aTVpd6tsSIqGPs4YVxFqZgAAAII"]
[Sun Dec 07 19:48:08.329961 2025] [:error] [pid 25600:tid 25616] [client 4.217.198.93:8517] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aTVpeIX3SVrXRURpt5J1XgAAAEk"]
[Sun Dec 07 19:48:15.022401 2025] [:error] [pid 36068:tid 36085] [client 4.217.198.93:59018] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTVpf1GuxqM4ZYob8lMblgAAAA8"]
[Sun Dec 07 19:49:15.517261 2025] [:error] [pid 25694:tid 25696] [client 4.217.198.93:47046] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/multi.php"] [unique_id "aTVpu0f7996cewJ5N29e2QAAAQA"]
[Sun Dec 07 19:49:23.283899 2025] [:error] [pid 25602:tid 25679] [client 4.217.198.93:37832] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/multi.php"] [unique_id "aTVpwxMayYLriq9gRdcJNAAAANE"]
[Sun Dec 07 19:49:24.579212 2025] [:error] [pid 25602:tid 25681] [client 4.217.198.93:37856] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/multi.php"] [unique_id "aTVpxBMayYLriq9gRdcJNgAAANM"]
[Sun Dec 07 19:49:27.454544 2025] [:error] [pid 25600:tid 25611] [client 4.217.198.93:37088] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/multi.php"] [unique_id "aTVpx4X3SVrXRURpt5J1fwAAAEQ"]
[Sun Dec 07 19:49:29.497118 2025] [:error] [pid 25600:tid 25631] [client 4.217.198.93:37085] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aTVpyYX3SVrXRURpt5J1gwAAAFg"]
[Sun Dec 07 19:49:35.718181 2025] [:error] [pid 25602:tid 25677] [client 4.217.198.93:37847] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aTVpzxMayYLriq9gRdcJOgAAAM8"]
[Sun Dec 07 19:49:38.339350 2025] [:error] [pid 39560:tid 39564] [client 4.217.198.93:37841] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aTVp0itL21FvSzcnpi1oiwAAAUI"]
[Sun Dec 07 19:49:39.863176 2025] [:error] [pid 25602:tid 25667] [client 4.217.198.93:35183] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aTVp0xMayYLriq9gRdcJPQAAAMU"]
[Sun Dec 07 19:49:41.541750 2025] [:error] [pid 25600:tid 25619] [client 4.217.198.93:37873] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aTVp1YX3SVrXRURpt5J1iwAAAEw"]
[Sun Dec 07 19:49:44.277973 2025] [:error] [pid 25602:tid 25668] [client 4.217.198.93:42737] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aTVp2BMayYLriq9gRdcJRQAAAMY"]
[Sun Dec 07 19:49:45.083870 2025] [:error] [pid 25600:tid 25625] [client 4.217.198.93:37426] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aTVp2YX3SVrXRURpt5J1jQAAAFI"]
[Sun Dec 07 19:49:45.685801 2025] [:error] [pid 25694:tid 25696] [client 4.217.198.93:42725] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aTVp2Uf7996cewJ5N29e9QAAAQA"]
[Sun Dec 07 19:49:47.743881 2025] [:error] [pid 25602:tid 25676] [client 4.217.198.93:37378] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk.php"] [unique_id "aTVp2xMayYLriq9gRdcJSAAAAM4"]
[Sun Dec 07 19:49:48.574485 2025] [:error] [pid 25694:tid 25702] [client 4.217.198.93:42716] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk.php"] [unique_id "aTVp3Ef7996cewJ5N29e_AAAAQY"]
[Sun Dec 07 19:49:49.048479 2025] [:error] [pid 25694:tid 25719] [client 4.217.198.93:37056] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk.php"] [unique_id "aTVp3Uf7996cewJ5N29e_gAAARc"]
[Sun Dec 07 19:49:51.249239 2025] [:error] [pid 36068:tid 36092] [client 4.217.198.93:41973] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk.php"] [unique_id "aTVp31GuxqM4ZYob8lMb-gAAABY"]
[Sun Dec 07 19:49:53.654526 2025] [:error] [pid 25602:tid 25662] [client 4.217.198.93:37381] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-crom.php"] [unique_id "aTVp4RMayYLriq9gRdcJTQAAAMA"]
[Sun Dec 07 19:49:55.923167 2025] [:error] [pid 39560:tid 39580] [client 4.217.198.93:40803] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-crom.php"] [unique_id "aTVp4ytL21FvSzcnpi1onQAAAVI"]
[Sun Dec 07 19:49:56.770102 2025] [:error] [pid 25601:tid 25657] [client 4.217.198.93:38957] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-crom.php"] [unique_id "aTVp5KtsSIqGPs4YVxFqpQAAAJY"]
[Sun Dec 07 19:49:58.035732 2025] [:error] [pid 39560:tid 39570] [client 4.217.198.93:50186] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-crom.php"] [unique_id "aTVp5itL21FvSzcnpi1onwAAAUg"]
[Sun Dec 07 19:49:59.449523 2025] [:error] [pid 36068:tid 36082] [client 4.217.198.93:35442] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aTVp51GuxqM4ZYob8lMcAAAAAAw"]
[Sun Dec 07 19:50:00.468523 2025] [:error] [pid 39560:tid 39572] [client 4.217.198.93:35561] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aTVp6CtL21FvSzcnpi1oowAAAUo"]
[Sun Dec 07 19:50:01.534645 2025] [:error] [pid 25602:tid 25670] [client 4.217.198.93:38920] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aTVp6RMayYLriq9gRdcJUQAAAMg"]
[Sun Dec 07 19:50:03.065784 2025] [:error] [pid 25602:tid 25674] [client 4.217.198.93:35754] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aTVp6xMayYLriq9gRdcJVgAAAMw"]
[Sun Dec 07 19:50:04.180762 2025] [:error] [pid 36068:tid 36091] [client 4.217.198.93:35575] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTVp7FGuxqM4ZYob8lMcAwAAABU"]
[Sun Dec 07 19:50:05.119224 2025] [:error] [pid 25600:tid 25609] [client 4.217.198.93:35436] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTVp7YX3SVrXRURpt5J1mwAAAEI"]
[Sun Dec 07 19:50:06.138088 2025] [:error] [pid 39560:tid 39563] [client 4.217.198.93:35769] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTVp7itL21FvSzcnpi1oqQAAAUE"]
[Sun Dec 07 19:50:11.966868 2025] [:error] [pid 25694:tid 25699] [client 4.217.198.93:49159] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTVp80f7996cewJ5N29fFAAAAQM"]
[Sun Dec 07 19:51:11.897938 2025] [:error] [pid 25694:tid 25698] [client 4.217.198.93:46182] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aTVqL0f7996cewJ5N29fdAAAAQI"]
[Sun Dec 07 19:51:24.171259 2025] [:error] [pid 25601:tid 25643] [client 4.217.198.93:38237] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aTVqPKtsSIqGPs4YVxFrfgAAAIg"]
[Sun Dec 07 19:51:29.419122 2025] [:error] [pid 39560:tid 39578] [client 4.217.198.93:35337] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/product.php"] [unique_id "aTVqQStL21FvSzcnpi1pMAAAAVA"]
[Sun Dec 07 19:51:31.561890 2025] [:error] [pid 36068:tid 36081] [client 4.217.198.93:39030] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/product.php"] [unique_id "aTVqQ1GuxqM4ZYob8lMcdAAAAAs"]
[Sun Dec 07 19:51:33.441210 2025] [:error] [pid 25601:tid 25657] [client 4.217.198.93:38578] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/product.php"] [unique_id "aTVqRatsSIqGPs4YVxFroAAAAJY"]
[Sun Dec 07 19:51:34.662018 2025] [:error] [pid 25601:tid 25654] [client 4.217.198.93:8677] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/product.php"] [unique_id "aTVqRqtsSIqGPs4YVxFrogAAAJM"]
[Sun Dec 07 19:51:35.288400 2025] [:error] [pid 39560:tid 39582] [client 4.217.198.93:38557] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wi.php"] [unique_id "aTVqRytL21FvSzcnpi1pQQAAAVQ"]
[Sun Dec 07 19:51:44.098334 2025] [:error] [pid 25694:tid 25709] [client 4.217.198.93:40397] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wi.php"] [unique_id "aTVqUEf7996cewJ5N29fpQAAAQ0"]
[Sun Dec 07 19:51:52.064009 2025] [:error] [pid 39560:tid 39576] [client 4.217.198.93:49717] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mms.php"] [unique_id "aTVqWCtL21FvSzcnpi1pVgAAAU4"]
[Sun Dec 07 19:51:53.865848 2025] [:error] [pid 25694:tid 25706] [client 4.217.198.93:49725] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mms.php"] [unique_id "aTVqWUf7996cewJ5N29fuwAAAQo"]
[Sun Dec 07 19:52:01.813301 2025] [:error] [pid 25602:tid 25685] [client 4.217.198.93:35618] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mms.php"] [unique_id "aTVqYRMayYLriq9gRdcKPQAAANc"]
[Sun Dec 07 19:52:04.219463 2025] [:error] [pid 25600:tid 25616] [client 4.217.198.93:40017] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mms.php"] [unique_id "aTVqZIX3SVrXRURpt5J1_AAAAEk"]
[Sun Dec 07 19:52:05.947519 2025] [:error] [pid 25602:tid 25673] [client 4.217.198.93:40054] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTVqZRMayYLriq9gRdcKQQAAAMs"]
[Sun Dec 07 19:52:07.894376 2025] [:error] [pid 25600:tid 25607] [client 4.217.198.93:56533] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "aTVqZ4X3SVrXRURpt5J1_wAAAEA"]
[Sun Dec 07 19:52:11.037715 2025] [:error] [pid 39560:tid 39571] [client 4.217.198.93:49252] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "aTVqaytL21FvSzcnpi1pbgAAAUk"]
[Sun Dec 07 19:52:16.367125 2025] [:error] [pid 25694:tid 25704] [client 4.217.198.93:38578] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "aTVqcEf7996cewJ5N29f1AAAAQg"]
[Sun Dec 07 19:52:19.472003 2025] [:error] [pid 25601:tid 25653] [client 4.217.198.93:43142] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mn.php"] [unique_id "aTVqc6tsSIqGPs4YVxFruQAAAJI"]
[Sun Dec 07 19:52:20.453784 2025] [:error] [pid 25602:tid 25684] [client 4.217.198.93:50301] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mn.php"] [unique_id "aTVqdBMayYLriq9gRdcKRwAAANY"]
[Sun Dec 07 19:52:21.235234 2025] [:error] [pid 25600:tid 25610] [client 4.217.198.93:38600] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mn.php"] [unique_id "aTVqdYX3SVrXRURpt5J2CgAAAEM"]
[Sun Dec 07 19:52:22.871771 2025] [:error] [pid 39560:tid 39569] [client 4.217.198.93:56473] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mn.php"] [unique_id "aTVqditL21FvSzcnpi1pfwAAAUc"]
[Sun Dec 07 19:52:25.406104 2025] [:error] [pid 25694:tid 25701] [client 4.217.198.93:46084] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aTVqeUf7996cewJ5N29f4AAAAQU"]
[Sun Dec 07 19:52:26.636750 2025] [:error] [pid 39560:tid 39567] [client 4.217.198.93:9083] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aTVqeitL21FvSzcnpi1phQAAAUU"]
[Sun Dec 07 19:52:46.498558 2025] [:error] [pid 25602:tid 25668] [client 4.217.198.93:42267] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTVqjhMayYLriq9gRdcKXAAAAMY"]
[Sun Dec 07 19:53:06.332126 2025] [:error] [pid 36068:tid 36084] [client 4.217.198.93:35671] [client 4.217.198.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aTVqolGuxqM4ZYob8lMc5AAAAA4"]
[Sun Dec 07 19:53:31.157741 2025] [:error] [pid 39560:tid 39574] [client 4.217.198.93:35633] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "aTVquytL21FvSzcnpi1p6gAAAUw"]
[Sun Dec 07 19:53:32.908778 2025] [:error] [pid 39560:tid 39564] [client 4.217.198.93:40809] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "aTVqvCtL21FvSzcnpi1p7QAAAUI"]
[Sun Dec 07 19:53:37.747223 2025] [:error] [pid 5224:tid 5282] [client 4.217.198.93:40822] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "aTVqwfAAkbWt7RJBoF_YlgAAAME"]
[Sun Dec 07 19:53:41.914712 2025] [:error] [pid 5312:tid 5324] [client 4.217.198.93:49193] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "aTVqxeaM49rasZGg_o7qAAAAAAo"]
[Sun Dec 07 19:53:51.383094 2025] [:error] [pid 5222:tid 5238] [client 4.217.198.93:40829] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aTVqz98FU0HgkYWmt7sv4AAAAEw"]
[Sun Dec 07 19:53:53.633699 2025] [:error] [pid 5222:tid 5234] [client 4.217.198.93:35944] [client 4.217.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aTVq0d8FU0HgkYWmt7sv5AAAAEg"]
[Sun Dec 07 20:59:08.117381 2025] [:error] [pid 9610:tid 9622] [client 34.78.52.28:57262] [client 34.78.52.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.52.28, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTV6HMZ4Zl9G0UhQ7w00DwAAAQo"]
[Sun Dec 07 20:59:14.346866 2025] [:error] [pid 9610:tid 9615] [client 34.78.52.28:57262] [client 34.78.52.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTV6IsZ4Zl9G0UhQ7w00EgAAAQM"]
[Sun Dec 07 20:59:16.339884 2025] [:error] [pid 9610:tid 9628] [client 34.78.52.28:57262] [client 34.78.52.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.52.28, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTV6JMZ4Zl9G0UhQ7w00FgAAARA"]
[Sun Dec 07 22:09:42.171684 2025] [:error] [pid 9961:tid 9971] [client 34.86.156.107:56913] [client 34.86.156.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.156.107, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTWKpmQdnfbgcnzr89JvtAAAAUg"]
[Sun Dec 07 22:09:48.556160 2025] [:error] [pid 9961:tid 9978] [client 34.86.156.107:56913] [client 34.86.156.107] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTWKrGQdnfbgcnzr89JvvQAAAU8"]
[Sun Dec 07 22:09:50.475599 2025] [:error] [pid 9961:tid 9966] [client 34.86.156.107:56913] [client 34.86.156.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.156.107, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTWKrmQdnfbgcnzr89JvwAAAAUM"]
[Sun Dec 07 22:27:01.510249 2025] [autoindex:error] [pid 5222:tid 5226] [client 159.65.145.165:54265] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 07 22:28:04.497751 2025] [:error] [pid 9961:tid 9973] [client 136.144.35.239:30685] [client 136.144.35.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTWO9GQdnfbgcnzr89J2_wAAAUo"]
[Sun Dec 07 22:28:05.157841 2025] [:error] [pid 5222:tid 5238] [client 136.144.35.219:62807] [client 136.144.35.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aTWO9d8FU0HgkYWmt7tNVwAAAEw"]
[Sun Dec 07 22:28:15.824389 2025] [:error] [pid 9961:tid 9985] [client 136.144.35.225:52779] [client 136.144.35.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aTWO_2Qdnfbgcnzr89J3CAAAAVY"]
[Sun Dec 07 22:28:16.488583 2025] [:error] [pid 5224:tid 5299] [client 136.144.35.228:61633] [client 136.144.35.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "aTWPAPAAkbWt7RJBoF_3pAAAANI"]
[Mon Dec 08 04:56:33.367707 2025] [proxy_fcgi:error] [pid 18634:tid 18645] [client 103.4.122.14:34582] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Handler/BufferHandler.php','/home/makifimc/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Handler/BufferHandler.php',UNHEX('a5ca5b8c1934a93676e81bedc8830fcb'),0,UNHEX('A3670E321168BF9DFA793FC307C972E6'),UNHEX('86A3FCCF9BBFDD23A66C5A2DD0B2078DAE4DE27EA6D0A2CA19863AD4D7DE1A9E')),('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Handler/ChromePHPHandler.php','/home/makifimc/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Handler/ChromePHPHandler.php',UNHEX('1ca7f45d7f45da7ee3c14fad1051bea9'),0,UNHEX('0E30F554EF276ED11F1D7EB51144F92C'),UNHEX('14CF264DF77124AC1DDA137AA718166F6928D982BD4D6734D8BCDB0C9BC9B797')),('wp-c...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Handler/BufferHandler.php\\',\\'/home/makifimc/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Handler/BufferHandler.php\\',UNHEX(\\'a5ca5b8c1934a93676e81bedc8830fcb\\'),0,UNHEX(\\'A3670E321168BF9DFA793FC307C972E6\\'),UNHEX(\\'86A3FCCF9BBFDD23A66C5A2DD0B2078DAE4DE27EA6D0A2CA19863AD4D7DE1A9E\\')),(\\'wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Handler/ChromePHPHandler.php\\',\\'/home/makifimc/public_html/wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/monolog/monolog/src/Monolog/Handler/ChromePHPHandler.php\\',UNHEX(\\'1ca7f45d7f45da7ee3c14fad1051bea9\\'),0,UNHEX(\\'0E...'
[Mon Dec 08 06:16:31.523759 2025] [:error] [pid 54705:tid 54757] [client 56.228.31.70:55288] [client 56.228.31.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTX8v6dUeDkxwo12SG8ufAAAAZc"]
[Mon Dec 08 06:34:57.176870 2025] [proxy_fcgi:error] [pid 18635:tid 18686] [client 213.21.239.4:37396] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1765146895.9910581111907958984375', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('wp_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT IGNORE INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('itsec-lock-scheduling', '1765146898', 'no') /* LOCK */ made by require('wp-blog-header.php'), require_once('wp-includes/template-loader.php'), include('/themes/Divi/page.php'), get_header, do_action('get_header'), WP_Hook->do_action, WP_Hook->apply_filters, et_theme_builder_frontend_override_header, et_theme_builder_frontend_override_partial, require_once('/themes/Divi/includes/builder/frontend-builder/theme-builder/frontend-header-template.php'), wp_head, do_action('wp_head'), WP_Hook->do_action, WP_Hook->apply_filters, wp_enqueue_scripts, do_action('wp_enqueue_scripts'), WP_Hook->do_action, WP_Hook->apply_filters, ITSEC_Core_Active->register_scripts, ITSEC_Lib_Feature_Flags::get_enabled, ITSEC_Lib_Feature_Flags::get_available_flags, ITSEC_Lib_Feature_Flags::get_registered_flags, ITSEC_Lib_Feature_Flags::get_flag...'
[Mon Dec 08 07:43:52.743881 2025] [:error] [pid 63058:tid 63127] [client 13.60.63.55:33330] [client 13.60.63.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTYROGeGShynhncwx-a46QAAAIo"]
[Mon Dec 08 07:56:06.786636 2025] [:error] [pid 39160:tid 39213] [client 152.42.170.30:61179] [client 152.42.170.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.170.30, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTYUFim5Ndns0p3OT9AyjwAAAFQ"]
[Mon Dec 08 07:56:09.359968 2025] [:error] [pid 39160:tid 39204] [client 152.42.170.30:61179] [client 152.42.170.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.170.30, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTYUGSm5Ndns0p3OT9AylAAAAEw"]
[Mon Dec 08 10:39:02.435860 2025] [:error] [pid 39261:tid 39267] [client 3.16.180.138:54928] [client 3.16.180.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTY6RnijlEqKrwMitDH3bAAAAMI"]
[Mon Dec 08 10:48:25.394270 2025] [:error] [pid 39159:tid 39176] [client 45.86.202.168:44505] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTY8eU48HaQt8jqjSbpv-QAAAAs"]
[Mon Dec 08 10:48:25.997362 2025] [:error] [pid 39261:tid 39277] [client 45.86.202.171:24715] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aTY8eXijlEqKrwMitDH83QAAAMw"]
[Mon Dec 08 10:48:26.600346 2025] [:error] [pid 53927:tid 53930] [client 45.86.202.183:40379] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aTY8erTtIvPZ1Cm2r053WwAAAQE"]
[Mon Dec 08 10:48:27.204979 2025] [:error] [pid 53927:tid 53929] [client 45.86.202.189:53355] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aTY8e7TtIvPZ1Cm2r053XAAAAQA"]
[Mon Dec 08 10:48:27.804241 2025] [:error] [pid 39161:tid 39236] [client 45.86.202.200:58513] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "aTY8e-QBy-JdpUuZzWflNQAAAJA"]
[Mon Dec 08 11:46:39.362107 2025] [:error] [pid 39160:tid 39193] [client 45.88.186.148:52566] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTZKHym5Ndns0p3OT9CKSgAAAEE"]
[Mon Dec 08 11:46:39.767538 2025] [:error] [pid 53927:tid 53949] [client 45.88.186.148:52706] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTZKH7TtIvPZ1Cm2r06bXAAAARQ"]
[Mon Dec 08 11:46:40.177650 2025] [:error] [pid 43362:tid 43415] [client 45.88.186.148:52871] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTZKIDoamfxHn2vcwqy4RgAAAdg"]
[Mon Dec 08 11:46:40.594264 2025] [:error] [pid 43361:tid 43372] [client 45.88.186.148:53020] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTZKIMrZJ_dsPpuIXPnQbAAAAYg"]
[Mon Dec 08 11:46:40.997973 2025] [:error] [pid 43362:tid 43398] [client 45.88.186.148:53197] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTZKIDoamfxHn2vcwqy4cwAAAcc"]
[Mon Dec 08 14:13:17.086708 2025] [:error] [pid 13533:tid 13559] [client 142.93.127.95:55294] [client 142.93.127.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.127.95, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTZsfUwxYk7zHgjCNdZwhAAAAVg"]
[Mon Dec 08 14:13:18.736312 2025] [:error] [pid 13533:tid 13535] [client 142.93.127.95:55294] [client 142.93.127.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.127.95, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTZsfkwxYk7zHgjCNdZwiAAAAUA"]
[Mon Dec 08 16:48:11.564419 2025] [:error] [pid 58847:tid 58876] [client 44.251.239.249:34012] [client 44.251.239.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "aTaQy3y4UHQXWKMwpHnNiwAAARc"]
[Mon Dec 08 18:58:49.182603 2025] [:error] [pid 58759:tid 58801] [client 209.97.156.74:52850] [client 209.97.156.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aTavaf6HZGkO2H0XX-iRggAAAMs"], referer: binance.com
[Mon Dec 08 19:48:41.029265 2025] [:error] [pid 58847:tid 58863] [client 4.190.217.206:21879] [client 4.190.217.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.217.206, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTa7GXy4UHQXWKMwpHkDdgAAAQo"]
[Mon Dec 08 19:48:42.583024 2025] [:error] [pid 58847:tid 58876] [client 4.190.217.206:21879] [client 4.190.217.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.217.206, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTa7Gny4UHQXWKMwpHkDegAAARc"]
[Mon Dec 08 19:49:04.320181 2025] [:error] [pid 58758:tid 58771] [client 4.190.217.206:21838] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTa7MABS5U6_vVkyhEeqwQAAAEk"]
[Mon Dec 08 19:49:05.463795 2025] [:error] [pid 2754:tid 2758] [client 4.190.217.206:21787] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTa7MbSzS4AFjS-DhTVJaAAAAUE"]
[Mon Dec 08 19:49:06.876357 2025] [:error] [pid 58847:tid 58866] [client 4.190.217.206:21858] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTa7Mny4UHQXWKMwpHkDpwAAAQ0"]
[Mon Dec 08 19:49:11.250583 2025] [:error] [pid 58760:tid 58817] [client 4.190.217.206:21801] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTa7N2qmF_jKbCz9E6l7NAAAAAA"]
[Mon Dec 08 19:49:14.970613 2025] [:error] [pid 11366:tid 11374] [client 4.190.217.206:21769] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aTa7OgcQjfMWfwPjgxEEcwAAAcY"]
[Mon Dec 08 19:49:16.140652 2025] [:error] [pid 58847:tid 58859] [client 4.190.217.206:21763] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aTa7PHy4UHQXWKMwpHkDrgAAAQY"]
[Mon Dec 08 19:49:16.798666 2025] [:error] [pid 58759:tid 58798] [client 4.190.217.206:21829] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aTa7PP6HZGkO2H0XX-ijEwAAAMg"]
[Mon Dec 08 19:49:17.834178 2025] [:error] [pid 58760:tid 58825] [client 4.190.217.206:21783] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aTa7PWqmF_jKbCz9E6l7PgAAAAg"]
[Mon Dec 08 19:49:19.806693 2025] [:error] [pid 58758:tid 58765] [client 4.190.217.206:21793] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aTa7PwBS5U6_vVkyhEeqyAAAAEM"]
[Mon Dec 08 19:49:21.943693 2025] [:error] [pid 2754:tid 2764] [client 4.190.217.206:21768] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aTa7QbSzS4AFjS-DhTVJbgAAAUc"]
[Mon Dec 08 19:49:23.217616 2025] [:error] [pid 58759:tid 58791] [client 4.190.217.206:21868] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aTa7Q_6HZGkO2H0XX-ijFgAAAME"]
[Mon Dec 08 19:49:24.937606 2025] [:error] [pid 58760:tid 58829] [client 4.190.217.206:21842] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aTa7RGqmF_jKbCz9E6l7RAAAAAw"]
[Mon Dec 08 19:49:26.524702 2025] [:error] [pid 63353:tid 63372] [client 4.190.217.206:21872] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aTa7Rhtg8HdYG392GAgw7gAAAJA"]
[Mon Dec 08 19:49:27.700135 2025] [:error] [pid 58758:tid 58771] [client 4.190.217.206:21791] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aTa7RwBS5U6_vVkyhEeqywAAAEk"]
[Mon Dec 08 19:49:28.143627 2025] [:error] [pid 63353:tid 63368] [client 4.190.217.206:21841] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aTa7SBtg8HdYG392GAgw8gAAAIw"]
[Mon Dec 08 19:49:28.763785 2025] [:error] [pid 63353:tid 63359] [client 4.190.217.206:21857] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aTa7SBtg8HdYG392GAgw9QAAAIM"]
[Mon Dec 08 19:49:29.595458 2025] [:error] [pid 58760:tid 58841] [client 4.190.217.206:21796] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aTa7SWqmF_jKbCz9E6l7TQAAABg"]
[Mon Dec 08 19:49:30.413003 2025] [:error] [pid 63353:tid 63364] [client 4.190.217.206:21030] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aTa7Shtg8HdYG392GAgw-AAAAIg"]
[Mon Dec 08 19:49:31.361591 2025] [:error] [pid 37840:tid 37853] [client 4.190.217.206:21826] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aTa7S1nJIKqlie_aHNb2MgAAAYo"]
[Mon Dec 08 19:49:32.393059 2025] [:error] [pid 63353:tid 63359] [client 4.190.217.206:21843] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aTa7TBtg8HdYG392GAgxBgAAAIM"]
[Mon Dec 08 19:49:33.878942 2025] [:error] [pid 58759:tid 58798] [client 4.190.217.206:21848] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aTa7Tf6HZGkO2H0XX-ijHQAAAMg"]
[Mon Dec 08 19:49:34.467914 2025] [:error] [pid 63353:tid 63374] [client 4.190.217.206:21775] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aTa7Thtg8HdYG392GAgxCgAAAJI"]
[Mon Dec 08 19:49:34.773586 2025] [:error] [pid 37840:tid 37847] [client 4.190.217.206:21879] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aTa7TlnJIKqlie_aHNb2OgAAAYQ"]
[Mon Dec 08 19:49:36.075476 2025] [:error] [pid 37840:tid 37856] [client 4.190.217.206:21795] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aTa7UFnJIKqlie_aHNb2PAAAAY0"]
[Mon Dec 08 19:49:36.514333 2025] [:error] [pid 63353:tid 63379] [client 4.190.217.206:21836] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aTa7UBtg8HdYG392GAgxDgAAAJc"]
[Mon Dec 08 19:49:36.918239 2025] [:error] [pid 63353:tid 63362] [client 4.190.217.206:21844] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aTa7UBtg8HdYG392GAgxEAAAAIY"]
[Mon Dec 08 19:49:38.448303 2025] [:error] [pid 63353:tid 63358] [client 4.190.217.206:21846] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aTa7Uhtg8HdYG392GAgxEwAAAII"]
[Mon Dec 08 19:49:39.248917 2025] [:error] [pid 58760:tid 58831] [client 4.190.217.206:21876] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aTa7U2qmF_jKbCz9E6l7YAAAAA4"]
[Mon Dec 08 19:49:40.045586 2025] [:error] [pid 37840:tid 37860] [client 4.190.217.206:21834] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTa7VFnJIKqlie_aHNb2QQAAAZE"]
[Mon Dec 08 19:49:41.214690 2025] [:error] [pid 63353:tid 63371] [client 4.190.217.206:21845] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTa7VRtg8HdYG392GAgxHAAAAI8"]
[Mon Dec 08 19:49:41.813488 2025] [:error] [pid 37840:tid 37855] [client 4.190.217.206:21870] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTa7VVnJIKqlie_aHNb2RgAAAYw"]
[Mon Dec 08 19:49:42.972342 2025] [:error] [pid 63353:tid 63369] [client 4.190.217.206:21867] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTa7Vhtg8HdYG392GAgxKAAAAI0"]
[Mon Dec 08 19:49:43.754697 2025] [:error] [pid 63353:tid 63356] [client 4.190.217.206:21855] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aTa7Vxtg8HdYG392GAgxKgAAAIA"]
[Mon Dec 08 19:49:45.387842 2025] [:error] [pid 63353:tid 63375] [client 4.190.217.206:21798] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aTa7WRtg8HdYG392GAgxLwAAAJM"]
[Mon Dec 08 19:49:46.343434 2025] [:error] [pid 63353:tid 63373] [client 4.190.217.206:21023] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aTa7Whtg8HdYG392GAgxMgAAAJE"]
[Mon Dec 08 19:49:47.548039 2025] [:error] [pid 58758:tid 58770] [client 4.190.217.206:21871] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aTa7WwBS5U6_vVkyhEeq5QAAAEg"]
[Mon Dec 08 19:49:48.101558 2025] [:error] [pid 58760:tid 58821] [client 4.190.217.206:21790] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aTa7XGqmF_jKbCz9E6l7bgAAAAQ"]
[Mon Dec 08 19:49:49.234933 2025] [:error] [pid 58759:tid 58793] [client 4.190.217.206:21802] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aTa7Xf6HZGkO2H0XX-ijLAAAAMM"]
[Mon Dec 08 19:49:50.099955 2025] [:error] [pid 58758:tid 58768] [client 4.190.217.206:21035] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aTa7XgBS5U6_vVkyhEeq7AAAAEY"]
[Mon Dec 08 19:49:51.064715 2025] [:error] [pid 58847:tid 58877] [client 4.190.217.206:21886] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aTa7X3y4UHQXWKMwpHkD2gAAARg"]
[Mon Dec 08 19:49:51.869160 2025] [:error] [pid 58760:tid 58837] [client 4.190.217.206:21860] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTa7X2qmF_jKbCz9E6l7cwAAABQ"]
[Mon Dec 08 19:49:52.255352 2025] [:error] [pid 58847:tid 58857] [client 4.190.217.206:21766] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTa7YHy4UHQXWKMwpHkD3QAAAQQ"]
[Mon Dec 08 19:49:52.758154 2025] [:error] [pid 63353:tid 63375] [client 4.190.217.206:21828] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTa7YBtg8HdYG392GAgxNwAAAJM"]
[Mon Dec 08 19:49:53.194601 2025] [:error] [pid 58760:tid 58833] [client 4.190.217.206:21882] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTa7YWqmF_jKbCz9E6l7dQAAABA"]
[Mon Dec 08 19:49:53.751871 2025] [:error] [pid 58758:tid 58763] [client 4.190.217.206:21002] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aTa7YQBS5U6_vVkyhEeq8QAAAEE"]
[Mon Dec 08 19:49:54.340661 2025] [:error] [pid 58759:tid 58811] [client 4.190.217.206:21861] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aTa7Yv6HZGkO2H0XX-ijNAAAANU"]
[Mon Dec 08 19:49:54.810691 2025] [:error] [pid 58758:tid 58779] [client 4.190.217.206:21875] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aTa7YgBS5U6_vVkyhEeq9AAAAFE"]
[Mon Dec 08 19:49:55.529836 2025] [:error] [pid 37840:tid 37856] [client 4.190.217.206:21760] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aTa7Y1nJIKqlie_aHNb2WQAAAY0"]
[Mon Dec 08 19:49:55.965318 2025] [:error] [pid 2754:tid 2777] [client 4.190.217.206:21792] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTa7Y7SzS4AFjS-DhTVJiwAAAVM"]
[Mon Dec 08 19:49:56.239587 2025] [:error] [pid 58847:tid 58858] [client 4.190.217.206:21850] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTa7ZHy4UHQXWKMwpHkD5AAAAQU"]
[Mon Dec 08 19:49:56.606178 2025] [:error] [pid 58847:tid 58876] [client 4.190.217.206:21885] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTa7ZHy4UHQXWKMwpHkD5wAAARc"]
[Mon Dec 08 19:49:56.923543 2025] [:error] [pid 58847:tid 58862] [client 4.190.217.206:21778] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTa7ZHy4UHQXWKMwpHkD6gAAAQk"]
[Mon Dec 08 19:49:57.761122 2025] [:error] [pid 58758:tid 58771] [client 4.190.217.206:21819] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aTa7ZQBS5U6_vVkyhEeq-QAAAEk"]
[Mon Dec 08 19:49:58.595473 2025] [:error] [pid 58760:tid 58821] [client 4.190.217.206:21785] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aTa7ZmqmF_jKbCz9E6l7fwAAAAQ"]
[Mon Dec 08 19:49:59.034327 2025] [:error] [pid 63353:tid 63377] [client 4.190.217.206:21825] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aTa7Zxtg8HdYG392GAgxQAAAAJU"]
[Mon Dec 08 19:49:59.757944 2025] [:error] [pid 63353:tid 63374] [client 4.190.217.206:21866] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aTa7Zxtg8HdYG392GAgxQwAAAJI"]
[Mon Dec 08 19:50:00.365301 2025] [:error] [pid 63353:tid 63362] [client 4.190.217.206:21822] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTa7aBtg8HdYG392GAgxRgAAAIY"]
[Mon Dec 08 19:50:01.213318 2025] [:error] [pid 58758:tid 58780] [client 4.190.217.206:21865] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTa7aQBS5U6_vVkyhEerAQAAAFI"]
[Mon Dec 08 19:50:43.270300 2025] [:error] [pid 63353:tid 63367] [client 4.190.217.206:21800] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pekok.php"] [unique_id "aTa7kxtg8HdYG392GAgxugAAAIs"]
[Mon Dec 08 19:50:45.090816 2025] [:error] [pid 63353:tid 63356] [client 4.190.217.206:21818] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pekok.php"] [unique_id "aTa7lRtg8HdYG392GAgxxAAAAIA"]
[Mon Dec 08 19:50:46.779109 2025] [:error] [pid 11366:tid 11369] [client 4.190.217.206:21771] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pekok.php"] [unique_id "aTa7lgcQjfMWfwPjgxEE0gAAAcE"]
[Mon Dec 08 19:50:47.609097 2025] [:error] [pid 11366:tid 11373] [client 4.190.217.206:21854] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pekok.php"] [unique_id "aTa7lwcQjfMWfwPjgxEE4QAAAcU"]
[Mon Dec 08 19:50:48.512982 2025] [:error] [pid 58758:tid 58774] [client 4.190.217.206:21031] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aTa7mABS5U6_vVkyhEerRAAAAEw"]
[Mon Dec 08 19:50:49.840167 2025] [:error] [pid 58759:tid 58808] [client 4.190.217.206:21830] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aTa7mf6HZGkO2H0XX-ijWwAAANI"]
[Mon Dec 08 19:50:50.563087 2025] [:error] [pid 11366:tid 11374] [client 4.190.217.206:21873] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aTa7mgcQjfMWfwPjgxEE8AAAAcY"]
[Mon Dec 08 19:50:51.607251 2025] [:error] [pid 63353:tid 63378] [client 4.190.217.206:21764] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aTa7mxtg8HdYG392GAgx2wAAAJY"]
[Mon Dec 08 19:50:52.080474 2025] [:error] [pid 63353:tid 63358] [client 4.190.217.206:21840] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-aa.php"] [unique_id "aTa7nBtg8HdYG392GAgx3wAAAII"]
[Mon Dec 08 19:50:53.154011 2025] [:error] [pid 63353:tid 63360] [client 4.190.217.206:21805] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-aa.php"] [unique_id "aTa7nRtg8HdYG392GAgx4wAAAIQ"]
[Mon Dec 08 19:50:53.793276 2025] [:error] [pid 58759:tid 58792] [client 4.190.217.206:21816] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-aa.php"] [unique_id "aTa7nf6HZGkO2H0XX-ijYgAAAMI"]
[Mon Dec 08 19:50:54.955342 2025] [:error] [pid 58759:tid 58795] [client 4.190.217.206:21847] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-aa.php"] [unique_id "aTa7nv6HZGkO2H0XX-ijZAAAAMU"]
[Mon Dec 08 19:50:55.507112 2025] [:error] [pid 58760:tid 58823] [client 4.190.217.206:21782] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cart.php"] [unique_id "aTa7n2qmF_jKbCz9E6l71gAAAAY"]
[Mon Dec 08 19:50:56.164268 2025] [:error] [pid 63353:tid 63380] [client 4.190.217.206:21797] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cart.php"] [unique_id "aTa7oBtg8HdYG392GAgx6AAAAJg"]
[Mon Dec 08 19:50:56.725371 2025] [:error] [pid 58847:tid 58873] [client 4.190.217.206:21770] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cart.php"] [unique_id "aTa7oHy4UHQXWKMwpHkETAAAARQ"]
[Mon Dec 08 19:50:57.439272 2025] [:error] [pid 63353:tid 63366] [client 4.190.217.206:21039] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cart.php"] [unique_id "aTa7oRtg8HdYG392GAgx7QAAAIo"]
[Mon Dec 08 19:50:57.952410 2025] [:error] [pid 63353:tid 63356] [client 4.190.217.206:21022] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/compare.php"] [unique_id "aTa7oRtg8HdYG392GAgx8AAAAIA"]
[Mon Dec 08 19:50:58.735925 2025] [:error] [pid 58759:tid 58806] [client 4.190.217.206:21853] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/compare.php"] [unique_id "aTa7ov6HZGkO2H0XX-ijZwAAANA"]
[Mon Dec 08 19:50:59.670775 2025] [:error] [pid 58759:tid 58805] [client 4.190.217.206:21786] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/compare.php"] [unique_id "aTa7o_6HZGkO2H0XX-ijagAAAM8"]
[Mon Dec 08 19:51:00.283154 2025] [:error] [pid 58847:tid 58864] [client 4.190.217.206:21784] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/compare.php"] [unique_id "aTa7pHy4UHQXWKMwpHkETQAAAQs"]
[Mon Dec 08 19:51:00.727434 2025] [:error] [pid 37840:tid 37864] [client 4.190.217.206:21809] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aTa7pFnJIKqlie_aHNb2vgAAAZU"]
[Mon Dec 08 19:51:01.771909 2025] [:error] [pid 58847:tid 58870] [client 4.190.217.206:21789] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aTa7pXy4UHQXWKMwpHkETwAAARE"]
[Mon Dec 08 19:51:02.135175 2025] [:error] [pid 58759:tid 58794] [client 4.190.217.206:21799] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aTa7pv6HZGkO2H0XX-ijbgAAAMQ"]
[Mon Dec 08 19:51:02.795876 2025] [:error] [pid 58760:tid 58838] [client 4.190.217.206:21881] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aTa7pmqmF_jKbCz9E6l72AAAABU"]
[Mon Dec 08 19:51:03.513255 2025] [:error] [pid 11366:tid 11376] [client 4.190.217.206:21823] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aTa7pwcQjfMWfwPjgxEE8wAAAcg"]
[Mon Dec 08 19:51:04.270455 2025] [:error] [pid 37840:tid 37853] [client 4.190.217.206:21804] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aTa7qFnJIKqlie_aHNb2xAAAAYo"]
[Mon Dec 08 19:51:04.886801 2025] [:error] [pid 11366:tid 11379] [client 4.190.217.206:21859] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aTa7qAcQjfMWfwPjgxEE9gAAAcs"]
[Mon Dec 08 19:51:05.817642 2025] [:error] [pid 58760:tid 58839] [client 4.190.217.206:21018] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aTa7qWqmF_jKbCz9E6l72gAAABY"]
[Mon Dec 08 19:51:06.550109 2025] [:error] [pid 58847:tid 58874] [client 4.190.217.206:21863] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aTa7qny4UHQXWKMwpHkEUAAAARU"]
[Mon Dec 08 19:51:06.875750 2025] [:error] [pid 58758:tid 58773] [client 4.190.217.206:21883] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aTa7qgBS5U6_vVkyhEerWQAAAEs"]
[Mon Dec 08 19:51:07.535286 2025] [:error] [pid 11366:tid 11368] [client 4.190.217.206:21761] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aTa7qwcQjfMWfwPjgxEE_AAAAcA"]
[Mon Dec 08 19:51:08.463247 2025] [:error] [pid 58760:tid 58830] [client 4.190.217.206:21814] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aTa7rGqmF_jKbCz9E6l73QAAAA0"]
[Mon Dec 08 19:51:09.915610 2025] [:error] [pid 58760:tid 58841] [client 4.190.217.206:21777] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atom.php"] [unique_id "aTa7rWqmF_jKbCz9E6l73wAAABg"]
[Mon Dec 08 19:51:10.904249 2025] [:error] [pid 58847:tid 58866] [client 4.190.217.206:21817] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atom.php"] [unique_id "aTa7rny4UHQXWKMwpHkEVQAAAQ0"]
[Mon Dec 08 19:51:12.131667 2025] [:error] [pid 58760:tid 58823] [client 4.190.217.206:21794] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atom.php"] [unique_id "aTa7sGqmF_jKbCz9E6l74QAAAAY"]
[Mon Dec 08 19:51:13.284243 2025] [:error] [pid 63353:tid 63375] [client 4.190.217.206:21005] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atom.php"] [unique_id "aTa7sRtg8HdYG392GAgx-AAAAJM"]
[Mon Dec 08 19:51:14.436427 2025] [:error] [pid 58759:tid 58798] [client 4.190.217.206:21032] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/case.php"] [unique_id "aTa7sv6HZGkO2H0XX-ijdQAAAMg"]
[Mon Dec 08 19:51:15.252581 2025] [:error] [pid 37840:tid 37858] [client 4.190.217.206:6882] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/case.php"] [unique_id "aTa7s1nJIKqlie_aHNb2ywAAAY8"]
[Mon Dec 08 19:51:16.848543 2025] [:error] [pid 63353:tid 63376] [client 4.190.217.206:21766] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/case.php"] [unique_id "aTa7tBtg8HdYG392GAgyAQAAAJQ"]
[Mon Dec 08 19:51:18.187727 2025] [:error] [pid 58758:tid 58775] [client 4.190.217.206:21779] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/case.php"] [unique_id "aTa7tgBS5U6_vVkyhEerXgAAAE0"]
[Mon Dec 08 19:51:18.996612 2025] [:error] [pid 63353:tid 63368] [client 4.190.217.206:21006] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aTa7thtg8HdYG392GAgyBQAAAIw"]
[Mon Dec 08 19:51:19.651915 2025] [:error] [pid 58759:tid 58805] [client 4.190.217.206:6864] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aTa7t_6HZGkO2H0XX-ijfQAAAM8"]
[Mon Dec 08 19:51:20.392143 2025] [:error] [pid 63353:tid 63379] [client 4.190.217.206:21026] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aTa7uBtg8HdYG392GAgyCQAAAJc"]
[Mon Dec 08 19:51:21.083228 2025] [:error] [pid 58759:tid 58796] [client 4.190.217.206:21003] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aTa7uf6HZGkO2H0XX-ijfgAAAMY"]
[Mon Dec 08 19:51:22.053845 2025] [:error] [pid 2754:tid 2773] [client 4.190.217.206:21017] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aTa7urSzS4AFjS-DhTVJ6wAAAVA"]
[Mon Dec 08 19:51:22.595074 2025] [:error] [pid 58759:tid 58803] [client 4.190.217.206:6884] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aTa7uv6HZGkO2H0XX-ijfwAAAM0"]
[Mon Dec 08 19:51:23.374931 2025] [:error] [pid 63353:tid 63375] [client 4.190.217.206:21851] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aTa7uxtg8HdYG392GAgyDwAAAJM"]
[Mon Dec 08 19:51:23.835487 2025] [:error] [pid 63353:tid 63365] [client 4.190.217.206:21788] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aTa7uxtg8HdYG392GAgyEQAAAIk"]
[Mon Dec 08 19:51:24.393104 2025] [:error] [pid 58847:tid 58873] [client 4.190.217.206:6858] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aTa7vHy4UHQXWKMwpHkEXgAAARQ"]
[Mon Dec 08 19:51:24.786397 2025] [:error] [pid 58759:tid 58801] [client 4.190.217.206:20996] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aTa7vP6HZGkO2H0XX-ijgwAAAMs"]
[Mon Dec 08 19:51:25.435068 2025] [:error] [pid 11366:tid 11389] [client 4.190.217.206:21832] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aTa7vQcQjfMWfwPjgxEFCAAAAdU"]
[Mon Dec 08 19:51:26.079395 2025] [:error] [pid 11366:tid 11372] [client 4.190.217.206:21041] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aTa7vgcQjfMWfwPjgxEFCQAAAcQ"]
[Mon Dec 08 19:51:26.688197 2025] [:error] [pid 37840:tid 37849] [client 4.190.217.206:21877] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aTa7vlnJIKqlie_aHNb2zgAAAYY"]
[Mon Dec 08 19:51:27.972358 2025] [:error] [pid 58759:tid 58810] [client 4.190.217.206:21869] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aTa7v_6HZGkO2H0XX-ijjwAAANQ"]
[Mon Dec 08 19:51:28.405494 2025] [:error] [pid 58760:tid 58841] [client 4.190.217.206:21780] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aTa7wGqmF_jKbCz9E6l78wAAABg"]
[Mon Dec 08 19:51:28.663938 2025] [:error] [pid 63353:tid 63365] [client 4.190.217.206:21878] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aTa7wBtg8HdYG392GAgyGAAAAIk"]
[Mon Dec 08 19:51:29.269116 2025] [:error] [pid 58759:tid 58812] [client 4.190.217.206:21044] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTa7wf6HZGkO2H0XX-ijkAAAANY"]
[Mon Dec 08 19:51:30.347227 2025] [:error] [pid 63353:tid 63378] [client 4.190.217.206:21824] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTa7whtg8HdYG392GAgyHAAAAJY"]
[Mon Dec 08 19:51:31.172200 2025] [:error] [pid 2754:tid 2760] [client 4.190.217.206:21815] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTa7w7SzS4AFjS-DhTVJ-AAAAUM"]
[Mon Dec 08 19:51:32.210268 2025] [:error] [pid 2754:tid 2762] [client 4.190.217.206:21808] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTa7xLSzS4AFjS-DhTVJ-QAAAUU"]
[Mon Dec 08 19:51:33.095356 2025] [:error] [pid 58760:tid 58827] [client 4.190.217.206:21016] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTa7xWqmF_jKbCz9E6l79AAAAAo"]
[Mon Dec 08 19:51:33.733565 2025] [:error] [pid 37840:tid 37855] [client 4.190.217.206:6900] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTa7xVnJIKqlie_aHNb21AAAAYw"]
[Mon Dec 08 19:51:34.050116 2025] [:error] [pid 11366:tid 11384] [client 4.190.217.206:21762] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTa7xgcQjfMWfwPjgxEFDgAAAdA"]
[Mon Dec 08 19:51:34.495318 2025] [:error] [pid 58760:tid 58817] [client 4.190.217.206:21034] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTa7xmqmF_jKbCz9E6l7-AAAAAA"]
[Mon Dec 08 19:51:35.686935 2025] [:error] [pid 58847:tid 58857] [client 4.190.217.206:21776] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTa7x3y4UHQXWKMwpHkEawAAAQQ"]
[Mon Dec 08 19:51:36.780657 2025] [:error] [pid 58760:tid 58841] [client 4.190.217.206:21010] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTa7yGqmF_jKbCz9E6l7-wAAABg"]
[Mon Dec 08 19:51:37.453573 2025] [:error] [pid 37840:tid 37847] [client 4.190.217.206:6878] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTa7yVnJIKqlie_aHNb21wAAAYQ"]
[Mon Dec 08 19:51:38.709870 2025] [:error] [pid 58847:tid 58871] [client 4.190.217.206:21055] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTa7yny4UHQXWKMwpHkEdAAAARI"]
[Mon Dec 08 19:51:39.313444 2025] [:error] [pid 37840:tid 37853] [client 4.190.217.206:21887] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aTa7y1nJIKqlie_aHNb22QAAAYo"]
[Mon Dec 08 19:51:40.425944 2025] [:error] [pid 58760:tid 58839] [client 4.190.217.206:21012] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aTa7zGqmF_jKbCz9E6l8BAAAABY"]
[Mon Dec 08 19:52:28.087044 2025] [:error] [pid 58847:tid 58869] [client 4.190.217.206:21040] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aTa7_Hy4UHQXWKMwpHkExgAAARA"]
[Mon Dec 08 19:52:29.641074 2025] [:error] [pid 58847:tid 58867] [client 4.190.217.206:6875] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aTa7_Xy4UHQXWKMwpHkExwAAAQ4"]
[Mon Dec 08 19:52:30.706412 2025] [:error] [pid 11366:tid 11387] [client 4.190.217.206:6863] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aTa7_gcQjfMWfwPjgxEFJwAAAdM"]
[Mon Dec 08 19:52:31.233733 2025] [:error] [pid 58760:tid 58822] [client 4.190.217.206:6874] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aTa7_2qmF_jKbCz9E6l8gwAAAAU"]
[Mon Dec 08 19:52:32.037787 2025] [:error] [pid 58758:tid 58780] [client 4.190.217.206:21803] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTa8AABS5U6_vVkyhEerfQAAAFI"]
[Mon Dec 08 19:52:33.206037 2025] [:error] [pid 63353:tid 63358] [client 4.190.217.206:6861] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTa8ARtg8HdYG392GAgyYwAAAII"]
[Mon Dec 08 19:52:34.816086 2025] [:error] [pid 2754:tid 2776] [client 4.190.217.206:21029] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTa8ArSzS4AFjS-DhTVKEgAAAVI"]
[Mon Dec 08 19:52:36.040156 2025] [:error] [pid 2754:tid 2767] [client 4.190.217.206:6851] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTa8BLSzS4AFjS-DhTVKFAAAAUo"]
[Mon Dec 08 19:52:37.727428 2025] [:error] [pid 37840:tid 37867] [client 4.190.217.206:21036] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aTa8BVnJIKqlie_aHNb3QQAAAZg"]
[Mon Dec 08 19:52:39.963879 2025] [:error] [pid 58759:tid 58806] [client 4.190.217.206:6859] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aTa8B_6HZGkO2H0XX-ikCgAAANA"]
[Mon Dec 08 19:52:42.485275 2025] [:error] [pid 58759:tid 58799] [client 4.190.217.206:21009] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aTa8Cv6HZGkO2H0XX-ikGgAAAMk"]
[Mon Dec 08 19:52:42.985334 2025] [:error] [pid 63353:tid 63356] [client 4.190.217.206:21011] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aTa8Chtg8HdYG392GAgycgAAAIA"]
[Mon Dec 08 19:52:44.004410 2025] [:error] [pid 63353:tid 63376] [client 4.190.217.206:20995] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTa8DBtg8HdYG392GAgyeQAAAJQ"]
[Mon Dec 08 19:52:44.837854 2025] [:error] [pid 63353:tid 63378] [client 4.190.217.206:21000] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTa8DBtg8HdYG392GAgyfQAAAJY"]
[Mon Dec 08 19:52:46.077247 2025] [:error] [pid 58847:tid 58874] [client 4.190.217.206:21033] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTa8Dny4UHQXWKMwpHkE0gAAARU"]
[Mon Dec 08 19:52:47.853229 2025] [:error] [pid 63353:tid 63376] [client 4.190.217.206:21043] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTa8Dxtg8HdYG392GAgyhgAAAJQ"]
[Mon Dec 08 19:52:49.313441 2025] [:error] [pid 2754:tid 2764] [client 4.190.217.206:6905] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aTa8EbSzS4AFjS-DhTVKPwAAAUc"]
[Mon Dec 08 19:52:50.200591 2025] [:error] [pid 11366:tid 11379] [client 4.190.217.206:21821] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aTa8EgcQjfMWfwPjgxEFMgAAAcs"]
[Mon Dec 08 19:52:51.112600 2025] [:error] [pid 11366:tid 11385] [client 4.190.217.206:6867] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aTa8EwcQjfMWfwPjgxEFMwAAAdE"]
[Mon Dec 08 19:52:52.132671 2025] [:error] [pid 58760:tid 58836] [client 4.190.217.206:21774] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aTa8FGqmF_jKbCz9E6l8mgAAABM"]
[Mon Dec 08 19:52:53.037242 2025] [:error] [pid 58758:tid 58779] [client 4.190.217.206:21024] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aTa8FQBS5U6_vVkyhEertwAAAFE"]
[Mon Dec 08 19:52:54.332161 2025] [:error] [pid 2754:tid 2769] [client 4.190.217.206:6857] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aTa8FrSzS4AFjS-DhTVKQwAAAUw"]
[Mon Dec 08 19:52:55.116915 2025] [:error] [pid 2754:tid 2770] [client 4.190.217.206:6908] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aTa8F7SzS4AFjS-DhTVKRgAAAU0"]
[Mon Dec 08 19:52:56.537869 2025] [:error] [pid 63353:tid 63364] [client 4.190.217.206:21884] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aTa8GBtg8HdYG392GAgylAAAAIg"]
[Mon Dec 08 19:52:57.959506 2025] [:error] [pid 63353:tid 63372] [client 4.190.217.206:21767] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aTa8GRtg8HdYG392GAgylQAAAJA"]
[Mon Dec 08 19:53:00.202230 2025] [:error] [pid 2754:tid 2760] [client 4.190.217.206:21056] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aTa8HLSzS4AFjS-DhTVKTAAAAUM"]
[Mon Dec 08 19:53:01.948706 2025] [:error] [pid 63353:tid 63358] [client 4.190.217.206:21014] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aTa8HRtg8HdYG392GAgymQAAAII"]
[Mon Dec 08 19:53:03.289820 2025] [:error] [pid 58758:tid 58764] [client 4.190.217.206:6854] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aTa8HwBS5U6_vVkyhEervwAAAEI"]
[Mon Dec 08 19:53:04.647925 2025] [:error] [pid 63353:tid 63364] [client 4.190.217.206:6911] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aTa8IBtg8HdYG392GAgymwAAAIg"]
[Mon Dec 08 19:53:06.052365 2025] [:error] [pid 58847:tid 58860] [client 4.190.217.206:6891] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aTa8Iny4UHQXWKMwpHkFZwAAAQc"]
[Mon Dec 08 19:53:06.824434 2025] [:error] [pid 63353:tid 63376] [client 4.190.217.206:21019] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aTa8Ihtg8HdYG392GAgyngAAAJQ"]
[Mon Dec 08 19:53:07.991398 2025] [:error] [pid 58759:tid 58806] [client 4.190.217.206:21001] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aTa8I_6HZGkO2H0XX-ikQwAAANA"]
[Mon Dec 08 19:53:09.385436 2025] [:error] [pid 58760:tid 58820] [client 4.190.217.206:20997] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aTa8JWqmF_jKbCz9E6l8rAAAAAM"]
[Mon Dec 08 19:53:10.977010 2025] [:error] [pid 63353:tid 63373] [client 4.190.217.206:6881] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aTa8Jhtg8HdYG392GAgyqAAAAJE"]
[Mon Dec 08 19:53:11.976317 2025] [:error] [pid 58760:tid 58827] [client 4.190.217.206:6885] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aTa8J2qmF_jKbCz9E6l8tAAAAAo"]
[Mon Dec 08 19:53:12.675946 2025] [:error] [pid 58759:tid 58801] [client 4.190.217.206:21864] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aTa8KP6HZGkO2H0XX-ikRQAAAMs"]
[Mon Dec 08 19:53:14.419332 2025] [:error] [pid 37840:tid 37847] [client 4.190.217.206:21810] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aTa8KlnJIKqlie_aHNb3bQAAAYQ"]
[Mon Dec 08 19:53:16.460321 2025] [:error] [pid 63353:tid 63371] [client 4.190.217.206:21037] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aTa8LBtg8HdYG392GAgyuAAAAI8"]
[Mon Dec 08 19:53:18.985612 2025] [:error] [pid 63353:tid 63366] [client 4.190.217.206:21054] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aTa8Lhtg8HdYG392GAgywQAAAIo"]
[Mon Dec 08 19:53:20.936716 2025] [:error] [pid 2754:tid 2780] [client 4.190.217.206:6876] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aTa8MLSzS4AFjS-DhTVKWwAAAVY"]
[Mon Dec 08 19:53:23.057860 2025] [:error] [pid 11366:tid 11388] [client 4.190.217.206:21008] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aTa8MwcQjfMWfwPjgxEFTQAAAdQ"]
[Mon Dec 08 19:53:24.890961 2025] [:error] [pid 58847:tid 58864] [client 4.190.217.206:21069] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aTa8NHy4UHQXWKMwpHkFuAAAAQs"]
[Mon Dec 08 19:53:25.725889 2025] [:error] [pid 58759:tid 58791] [client 4.190.217.206:21060] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aTa8Nf6HZGkO2H0XX-ikVgAAAME"]
[Mon Dec 08 19:54:21.350683 2025] [:error] [pid 37840:tid 37859] [client 4.190.217.206:21042] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aTa8bVnJIKqlie_aHNb3xQAAAZA"]
[Mon Dec 08 19:54:22.758915 2025] [:error] [pid 63353:tid 63363] [client 4.190.217.206:21775] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aTa8bhtg8HdYG392GAgz3wAAAIc"]
[Mon Dec 08 19:54:23.269412 2025] [:error] [pid 58759:tid 58790] [client 4.190.217.206:21827] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aTa8b_6HZGkO2H0XX-ikswAAAMA"]
[Mon Dec 08 19:54:25.287653 2025] [:error] [pid 58759:tid 58812] [client 4.190.217.206:21765] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aTa8cf6HZGkO2H0XX-iktwAAANY"]
[Mon Dec 08 19:54:28.379566 2025] [:error] [pid 63353:tid 63375] [client 4.190.217.206:21763] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTa8dBtg8HdYG392GAgz4wAAAJM"]
[Mon Dec 08 19:54:30.005302 2025] [:error] [pid 58760:tid 58829] [client 4.190.217.206:21007] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTa8dmqmF_jKbCz9E6l9mAAAAAw"]
[Mon Dec 08 19:54:31.638317 2025] [:error] [pid 63353:tid 63378] [client 4.190.217.206:21791] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTa8dxtg8HdYG392GAgz6QAAAJY"]
[Mon Dec 08 19:54:33.043428 2025] [:error] [pid 11366:tid 11386] [client 4.190.217.206:21837] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTa8eQcQjfMWfwPjgxEFoQAAAdI"]
[Mon Dec 08 19:54:34.477496 2025] [:error] [pid 58759:tid 58809] [client 4.190.217.206:21117] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTa8ev6HZGkO2H0XX-ikuQAAANM"]
[Mon Dec 08 19:54:36.880804 2025] [:error] [pid 37840:tid 37852] [client 4.190.217.206:21798] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTa8fFnJIKqlie_aHNb30AAAAYk"]
[Mon Dec 08 19:54:38.897610 2025] [:error] [pid 58759:tid 58808] [client 4.190.217.206:21023] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTa8fv6HZGkO2H0XX-ikvQAAANI"]
[Mon Dec 08 19:54:40.342305 2025] [:error] [pid 58760:tid 58837] [client 4.190.217.206:21793] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTa8gGqmF_jKbCz9E6l9pAAAABQ"]
[Mon Dec 08 19:54:41.680073 2025] [:error] [pid 58759:tid 58812] [client 4.190.217.206:21001] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aTa8gf6HZGkO2H0XX-ikxAAAANY"]
[Mon Dec 08 19:54:42.043643 2025] [:error] [pid 58758:tid 58783] [client 4.190.217.206:21842] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aTa8ggBS5U6_vVkyhEesdQAAAFU"]
[Mon Dec 08 19:54:42.804034 2025] [:error] [pid 58759:tid 58802] [client 4.190.217.206:21057] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aTa8gv6HZGkO2H0XX-ikyQAAAMw"]
[Mon Dec 08 19:54:43.644370 2025] [:error] [pid 58760:tid 58827] [client 4.190.217.206:20992] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aTa8g2qmF_jKbCz9E6l9pQAAAAo"]
[Mon Dec 08 19:54:44.608842 2025] [:error] [pid 58759:tid 58814] [client 4.190.217.206:21835] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aTa8hP6HZGkO2H0XX-ikzwAAANg"]
[Mon Dec 08 19:54:45.885853 2025] [:error] [pid 63353:tid 63376] [client 4.190.217.206:6904] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aTa8hRtg8HdYG392GAgz9QAAAJQ"]
[Mon Dec 08 19:54:47.660535 2025] [:error] [pid 63353:tid 63370] [client 4.190.217.206:21806] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aTa8hxtg8HdYG392GAgz-AAAAI4"]
[Mon Dec 08 19:54:48.851115 2025] [:error] [pid 58760:tid 58821] [client 4.190.217.206:21773] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aTa8iGqmF_jKbCz9E6l9rAAAAAQ"]
[Mon Dec 08 19:54:49.610461 2025] [:error] [pid 58759:tid 58797] [client 4.190.217.206:6903] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aTa8if6HZGkO2H0XX-ik2gAAAMc"]
[Mon Dec 08 19:54:50.791177 2025] [:error] [pid 37840:tid 37850] [client 4.190.217.206:21834] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aTa8ilnJIKqlie_aHNb31AAAAYc"]
[Mon Dec 08 19:54:51.576911 2025] [:error] [pid 37840:tid 37859] [client 4.190.217.206:21028] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aTa8i1nJIKqlie_aHNb31wAAAZA"]
[Mon Dec 08 19:54:52.112934 2025] [:error] [pid 63353:tid 63359] [client 4.190.217.206:21781] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aTa8jBtg8HdYG392GAgz_gAAAIM"]
[Mon Dec 08 19:54:53.979351 2025] [:error] [pid 58847:tid 58854] [client 4.190.217.206:21051] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aTa8jXy4UHQXWKMwpHkGXAAAAQE"]
[Mon Dec 08 19:54:55.157073 2025] [:error] [pid 58847:tid 58856] [client 4.190.217.206:21792] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aTa8j3y4UHQXWKMwpHkGXgAAAQM"]
[Mon Dec 08 19:54:57.116459 2025] [:error] [pid 63353:tid 63371] [client 4.190.217.206:21035] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aTa8kRtg8HdYG392GAg0BQAAAI8"]
[Mon Dec 08 19:54:59.119252 2025] [:error] [pid 58759:tid 58801] [client 4.190.217.206:21098] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aTa8k_6HZGkO2H0XX-ik3wAAAMs"]
[Mon Dec 08 19:55:01.293494 2025] [:error] [pid 63353:tid 63357] [client 4.190.217.206:21790] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aTa8lRtg8HdYG392GAg0BwAAAIE"]
[Mon Dec 08 19:55:03.396962 2025] [:error] [pid 63353:tid 63366] [client 4.190.217.206:21820] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aTa8lxtg8HdYG392GAg0DAAAAIo"]
[Mon Dec 08 19:55:04.678051 2025] [:error] [pid 58760:tid 58833] [client 4.190.217.206:6883] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aTa8mGqmF_jKbCz9E6l9tAAAABA"]
[Mon Dec 08 19:55:06.586642 2025] [:error] [pid 58847:tid 58864] [client 4.190.217.206:21831] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aTa8mny4UHQXWKMwpHkGagAAAQs"]
[Mon Dec 08 19:55:07.279953 2025] [:error] [pid 63353:tid 63368] [client 4.190.217.206:21091] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aTa8mxtg8HdYG392GAg0FAAAAIw"]
[Mon Dec 08 19:55:08.984826 2025] [:error] [pid 11366:tid 11391] [client 4.190.217.206:21049] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aTa8nAcQjfMWfwPjgxEFvgAAAdc"]
[Mon Dec 08 19:55:10.046089 2025] [:error] [pid 63353:tid 63371] [client 4.190.217.206:21079] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aTa8nhtg8HdYG392GAg0FwAAAI8"]
[Mon Dec 08 19:55:11.733351 2025] [:error] [pid 58847:tid 58871] [client 4.190.217.206:21080] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aTa8n3y4UHQXWKMwpHkGbgAAARI"]
[Mon Dec 08 19:55:12.151040 2025] [:error] [pid 58759:tid 58810] [client 4.190.217.206:21882] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aTa8oP6HZGkO2H0XX-ik5gAAANQ"]
[Mon Dec 08 19:55:13.011173 2025] [:error] [pid 58759:tid 58797] [client 4.190.217.206:21876] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aTa8of6HZGkO2H0XX-ik6AAAAMc"]
[Mon Dec 08 19:55:13.725108 2025] [:error] [pid 58760:tid 58840] [client 4.190.217.206:21872] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aTa8oWqmF_jKbCz9E6l9vwAAABc"]
[Mon Dec 08 19:55:14.632019 2025] [:error] [pid 2754:tid 2770] [client 4.190.217.206:21846] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aTa8orSzS4AFjS-DhTVKwwAAAU0"]
[Mon Dec 08 19:55:15.282114 2025] [:error] [pid 58847:tid 58867] [client 4.190.217.206:6852] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aTa8o3y4UHQXWKMwpHkGcAAAAQ4"]
[Mon Dec 08 19:55:16.001604 2025] [:error] [pid 58847:tid 58875] [client 4.190.217.206:6877] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aTa8pHy4UHQXWKMwpHkGcQAAARY"]
[Mon Dec 08 19:55:16.868849 2025] [:error] [pid 58847:tid 58876] [client 4.190.217.206:21844] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aTa8pHy4UHQXWKMwpHkGcgAAARc"]
[Mon Dec 08 19:56:01.856821 2025] [:error] [pid 58759:tid 58807] [client 4.190.217.206:21841] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aTa80f6HZGkO2H0XX-ilIwAAANE"]
[Mon Dec 08 19:56:02.436377 2025] [:error] [pid 58760:tid 58840] [client 4.190.217.206:21861] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aTa80mqmF_jKbCz9E6l98gAAABc"]
[Mon Dec 08 19:56:03.310027 2025] [:error] [pid 63353:tid 63374] [client 4.190.217.206:21850] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aTa80xtg8HdYG392GAg0bAAAAJI"]
[Mon Dec 08 19:56:04.798119 2025] [:error] [pid 2754:tid 2767] [client 4.190.217.206:21812] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aTa81LSzS4AFjS-DhTVK2wAAAUo"]
[Mon Dec 08 19:56:05.778001 2025] [:error] [pid 63353:tid 63370] [client 4.190.217.206:21789] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aTa81Rtg8HdYG392GAg0cQAAAI4"]
[Mon Dec 08 19:56:06.613730 2025] [:error] [pid 58759:tid 58812] [client 4.190.217.206:21880] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aTa81v6HZGkO2H0XX-ilKAAAANY"]
[Mon Dec 08 19:56:07.551043 2025] [:error] [pid 58759:tid 58813] [client 4.190.217.206:21875] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aTa81_6HZGkO2H0XX-ilKQAAANc"]
[Mon Dec 08 19:56:08.451672 2025] [:error] [pid 37840:tid 37856] [client 4.190.217.206:21794] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aTa82FnJIKqlie_aHNb4OQAAAY0"]
[Mon Dec 08 19:56:09.106245 2025] [:error] [pid 58759:tid 58794] [client 4.190.217.206:21800] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aTa82f6HZGkO2H0XX-ilKgAAAMQ"]
[Mon Dec 08 19:56:10.456433 2025] [:error] [pid 37840:tid 37844] [client 4.190.217.206:21858] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aTa82lnJIKqlie_aHNb4PAAAAYE"]
[Mon Dec 08 19:56:11.766705 2025] [:error] [pid 58759:tid 58800] [client 4.190.217.206:21849] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aTa82_6HZGkO2H0XX-ilLgAAAMo"]
[Mon Dec 08 19:56:12.610436 2025] [:error] [pid 2754:tid 2762] [client 4.190.217.206:21833] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aTa83LSzS4AFjS-DhTVK3gAAAUU"]
[Mon Dec 08 19:56:13.864117 2025] [:error] [pid 58758:tid 58786] [client 4.190.217.206:21874] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aTa83QBS5U6_vVkyhEetCQAAAFg"]
[Mon Dec 08 19:56:14.950646 2025] [:error] [pid 2754:tid 2766] [client 4.190.217.206:21771] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aTa83rSzS4AFjS-DhTVK4QAAAUk"]
[Mon Dec 08 19:56:15.800905 2025] [:error] [pid 2754:tid 2757] [client 4.190.217.206:21768] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aTa837SzS4AFjS-DhTVK4wAAAUA"]
[Mon Dec 08 19:56:16.697772 2025] [:error] [pid 11366:tid 11380] [client 4.190.217.206:21847] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aTa84AcQjfMWfwPjgxEF4wAAAcw"]
[Mon Dec 08 19:56:18.103359 2025] [:error] [pid 11366:tid 11383] [client 4.190.217.206:21796] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aTa84gcQjfMWfwPjgxEF5AAAAc8"]
[Mon Dec 08 19:56:18.422340 2025] [:error] [pid 11366:tid 11376] [client 4.190.217.206:21862] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aTa84gcQjfMWfwPjgxEF5QAAAcg"]
[Mon Dec 08 19:56:19.362464 2025] [:error] [pid 63353:tid 63358] [client 4.190.217.206:21787] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aTa84xtg8HdYG392GAg0fQAAAII"]
[Mon Dec 08 19:56:20.209098 2025] [:error] [pid 63353:tid 63371] [client 4.190.217.206:21776] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aTa85Btg8HdYG392GAg0fgAAAI8"]
[Mon Dec 08 19:56:20.975428 2025] [:error] [pid 63353:tid 63366] [client 4.190.217.206:21760] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aTa85Btg8HdYG392GAg0fwAAAIo"]
[Mon Dec 08 19:56:21.447966 2025] [:error] [pid 37840:tid 37864] [client 4.190.217.206:21871] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aTa85VnJIKqlie_aHNb4QgAAAZU"]
[Mon Dec 08 19:56:22.216193 2025] [:error] [pid 63353:tid 63359] [client 4.190.217.206:21801] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aTa85htg8HdYG392GAg0hAAAAIM"]
[Mon Dec 08 19:56:22.883145 2025] [:error] [pid 63353:tid 63375] [client 4.190.217.206:21784] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aTa85htg8HdYG392GAg0hwAAAJM"]
[Mon Dec 08 19:56:23.396837 2025] [:error] [pid 37840:tid 37855] [client 4.190.217.206:21805] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aTa851nJIKqlie_aHNb4RQAAAYw"]
[Mon Dec 08 19:56:23.843633 2025] [:error] [pid 63353:tid 63364] [client 4.190.217.206:21839] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aTa85xtg8HdYG392GAg0iwAAAIg"]
[Mon Dec 08 19:56:24.863612 2025] [:error] [pid 58759:tid 58794] [client 4.190.217.206:21770] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aTa86P6HZGkO2H0XX-ilQAAAAMQ"]
[Mon Dec 08 19:56:25.523567 2025] [:error] [pid 58760:tid 58820] [client 4.190.217.206:6890] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aTa86WqmF_jKbCz9E6l9-gAAAAM"]
[Mon Dec 08 19:56:26.567992 2025] [:error] [pid 11366:tid 11375] [client 4.190.217.206:21843] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aTa86gcQjfMWfwPjgxEF6wAAAcc"]
[Mon Dec 08 19:56:27.583840 2025] [:error] [pid 63353:tid 63364] [client 4.190.217.206:21885] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aTa86xtg8HdYG392GAg0jwAAAIg"]
[Mon Dec 08 19:56:28.990316 2025] [:error] [pid 58759:tid 58795] [client 4.190.217.206:21886] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aTa87P6HZGkO2H0XX-ilRAAAAMU"]
[Mon Dec 08 19:56:30.145077 2025] [:error] [pid 58760:tid 58821] [client 4.190.217.206:21026] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aTa87mqmF_jKbCz9E6l-AQAAAAQ"]
[Mon Dec 08 19:56:31.094428 2025] [:error] [pid 58760:tid 58828] [client 4.190.217.206:21114] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTa872qmF_jKbCz9E6l-AwAAAAs"]
[Mon Dec 08 19:56:31.820665 2025] [:error] [pid 58759:tid 58810] [client 4.190.217.206:21782] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTa87_6HZGkO2H0XX-ilSAAAANQ"]
[Mon Dec 08 19:56:32.758636 2025] [:error] [pid 63353:tid 63371] [client 4.190.217.206:6897] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTa88Btg8HdYG392GAg0lQAAAI8"]
[Mon Dec 08 19:56:33.223747 2025] [:error] [pid 37840:tid 37845] [client 4.190.217.206:21772] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTa88VnJIKqlie_aHNb4SwAAAYI"]
[Mon Dec 08 19:56:34.456965 2025] [:error] [pid 37840:tid 37864] [client 4.190.217.206:21777] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aTa88lnJIKqlie_aHNb4TwAAAZU"]
[Mon Dec 08 19:56:35.665738 2025] [:error] [pid 11366:tid 11378] [client 4.190.217.206:21856] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aTa88wcQjfMWfwPjgxEF8AAAAco"]
[Mon Dec 08 19:56:36.740566 2025] [:error] [pid 63353:tid 63356] [client 4.190.217.206:21031] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aTa89Btg8HdYG392GAg0mgAAAIA"]
[Mon Dec 08 19:56:37.274420 2025] [:error] [pid 58760:tid 58818] [client 4.190.217.206:21830] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aTa89WqmF_jKbCz9E6l-CwAAAAE"]
[Mon Dec 08 19:56:38.833023 2025] [:error] [pid 11366:tid 11370] [client 4.190.217.206:21769] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aTa89gcQjfMWfwPjgxEF9gAAAcI"]
[Mon Dec 08 19:56:41.164862 2025] [:error] [pid 58847:tid 58873] [client 4.190.217.206:21785] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aTa8-Xy4UHQXWKMwpHkGvgAAARQ"]
[Mon Dec 08 19:56:42.450367 2025] [:error] [pid 58847:tid 58870] [client 4.190.217.206:21052] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aTa8-ny4UHQXWKMwpHkGwQAAARE"]
[Mon Dec 08 19:56:44.213973 2025] [:error] [pid 63353:tid 63360] [client 4.190.217.206:21817] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aTa8_Btg8HdYG392GAg0pAAAAIQ"]
[Mon Dec 08 19:56:46.307490 2025] [:error] [pid 63353:tid 63361] [client 4.190.217.206:6910] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aTa8_htg8HdYG392GAg0rQAAAIU"]
[Mon Dec 08 19:56:48.712922 2025] [:error] [pid 58760:tid 58824] [client 4.190.217.206:6866] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aTa9AGqmF_jKbCz9E6l-DwAAAAc"]
[Mon Dec 08 19:56:51.132122 2025] [:error] [pid 58847:tid 58869] [client 4.190.217.206:21865] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aTa9A3y4UHQXWKMwpHkGwgAAARA"]
[Mon Dec 08 19:56:52.389953 2025] [:error] [pid 2754:tid 2769] [client 4.190.217.206:21840] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aTa9BLSzS4AFjS-DhTVK6gAAAUw"]
[Mon Dec 08 19:56:54.623694 2025] [:error] [pid 63353:tid 63366] [client 4.190.217.206:21788] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aTa9Bhtg8HdYG392GAg0twAAAIo"]
[Mon Dec 08 19:56:56.596391 2025] [:error] [pid 37840:tid 37864] [client 4.190.217.206:6865] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aTa9CFnJIKqlie_aHNb4YAAAAZU"]
[Mon Dec 08 19:56:57.771655 2025] [:error] [pid 58760:tid 58817] [client 4.190.217.206:6898] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aTa9CWqmF_jKbCz9E6l-HQAAAAA"]
[Mon Dec 08 20:22:24.544735 2025] [:error] [pid 48482:tid 48523] [client 34.73.25.230:61736] [client 34.73.25.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.25.230, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbDAH23gV7gRu3vn81pfgAAAIs"]
[Mon Dec 08 20:22:30.945798 2025] [:error] [pid 48482:tid 48533] [client 34.73.25.230:61736] [client 34.73.25.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTbDBn23gV7gRu3vn81pmAAAAJU"]
[Mon Dec 08 20:22:33.002632 2025] [:error] [pid 48482:tid 48523] [client 34.73.25.230:61736] [client 34.73.25.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.25.230, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbDCX23gV7gRu3vn81poAAAAIs"]
[Mon Dec 08 23:21:22.575084 2025] [:error] [pid 48541:tid 48543] [client 34.44.128.81:65356] [client 34.44.128.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.128.81, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbs8gSNhJPArxLCdWEy1QAAAQA"]
[Mon Dec 08 23:21:27.914955 2025] [:error] [pid 48541:tid 48564] [client 34.44.128.81:65356] [client 34.44.128.81] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTbs9wSNhJPArxLCdWEy9wAAARU"]
[Mon Dec 08 23:21:30.974947 2025] [:error] [pid 48541:tid 48548] [client 34.44.128.81:65356] [client 34.44.128.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.128.81, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTbs-gSNhJPArxLCdWEzBAAAAQU"]
[Tue Dec 09 01:14:14.919933 2025] [:error] [pid 17588:tid 17629] [client 35.247.54.155:51628] [client 35.247.54.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.247.54.155, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTcHZjfolJgrovDIxbRgdwAAAIk"]
[Tue Dec 09 01:14:21.172112 2025] [:error] [pid 17588:tid 17620] [client 35.247.54.155:51628] [client 35.247.54.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTcHbTfolJgrovDIxbRggAAAAIA"]
[Tue Dec 09 01:14:23.834510 2025] [:error] [pid 17588:tid 17625] [client 35.247.54.155:51628] [client 35.247.54.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.247.54.155, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTcHbzfolJgrovDIxbRgggAAAIU"]
[Tue Dec 09 01:25:18.240032 2025] [:error] [pid 17587:tid 17593] [client 136.113.246.139:61280] [client 136.113.246.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.246.139, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTcJ_pJbuGn8bV7YLq9dbgAAAME"]
[Tue Dec 09 01:25:25.590964 2025] [:error] [pid 17587:tid 17608] [client 136.113.246.139:61280] [client 136.113.246.139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTcKBZJbuGn8bV7YLq9dfQAAANA"]
[Tue Dec 09 01:25:27.414391 2025] [:error] [pid 17587:tid 17610] [client 136.113.246.139:61280] [client 136.113.246.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.246.139, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTcKB5JbuGn8bV7YLq9dgAAAANI"]
[Tue Dec 09 01:56:10.982585 2025] [:error] [pid 17588:tid 17635] [client 13.60.81.58:49460] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTcROjfolJgrovDIxbRrlwAAAI8"], referer: https://www.google.com/
[Tue Dec 09 01:56:11.623807 2025] [:error] [pid 57134:tid 57191] [client 13.60.81.58:49520] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aTcRO1n7_Hlbg-DXKIsVywAAAFE"], referer: https://www.google.com/
[Tue Dec 09 01:56:12.285423 2025] [:error] [pid 59067:tid 59094] [client 13.60.81.58:49582] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "aTcRPHStYKzcfg3q9jfFLQAAARQ"], referer: https://www.google.com/
[Tue Dec 09 01:56:12.996691 2025] [:error] [pid 17588:tid 17634] [client 13.60.81.58:49650] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "aTcRPDfolJgrovDIxbRrmQAAAI4"], referer: https://www.google.com/
[Tue Dec 09 01:56:13.801164 2025] [:error] [pid 57134:tid 57195] [client 13.60.81.58:49708] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aTcRPVn7_Hlbg-DXKIsV0QAAAFU"], referer: https://www.google.com/
[Tue Dec 09 01:56:14.525292 2025] [:error] [pid 17587:tid 17602] [client 13.60.81.58:49766] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aTcRPpJbuGn8bV7YLq9lWAAAAMo"], referer: https://www.google.com/
[Tue Dec 09 01:56:15.220062 2025] [:error] [pid 57134:tid 57182] [client 13.60.81.58:49838] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aTcRP1n7_Hlbg-DXKIsV1gAAAEg"], referer: https://www.google.com/
[Tue Dec 09 01:56:15.828155 2025] [:error] [pid 17587:tid 17599] [client 13.60.81.58:49908] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aTcRP5JbuGn8bV7YLq9lWQAAAMc"], referer: https://www.google.com/
[Tue Dec 09 01:56:16.461075 2025] [:error] [pid 59067:tid 59090] [client 13.60.81.58:49996] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aTcRQHStYKzcfg3q9jfFNAAAARA"], referer: https://www.google.com/
[Tue Dec 09 01:56:17.173194 2025] [:error] [pid 17674:tid 17699] [client 13.60.81.58:50096] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aTcRQQX-np7s8gMWL-pRHgAAABc"], referer: https://www.google.com/
[Tue Dec 09 01:56:17.767787 2025] [:error] [pid 17589:tid 17656] [client 13.60.81.58:50194] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "aTcRQY3u_N_j630LWcCTuAAAAUk"], referer: https://www.google.com/
[Tue Dec 09 01:56:18.370919 2025] [:error] [pid 17588:tid 17635] [client 13.60.81.58:50272] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aTcRQjfolJgrovDIxbRroAAAAI8"], referer: https://www.google.com/
[Tue Dec 09 01:56:19.014631 2025] [:error] [pid 17587:tid 17605] [client 13.60.81.58:50334] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aTcRQ5JbuGn8bV7YLq9lXAAAAM0"], referer: https://www.google.com/
[Tue Dec 09 01:56:19.629203 2025] [:error] [pid 59067:tid 59080] [client 13.60.81.58:50414] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aTcRQ3StYKzcfg3q9jfFNwAAAQY"], referer: https://www.google.com/
[Tue Dec 09 01:56:20.328709 2025] [:error] [pid 59067:tid 59092] [client 13.60.81.58:50474] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.orig"] [unique_id "aTcRRHStYKzcfg3q9jfFOQAAARI"], referer: https://www.google.com/
[Tue Dec 09 01:56:20.952399 2025] [:error] [pid 17588:tid 17632] [client 13.60.81.58:50522] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.swp"] [unique_id "aTcRRDfolJgrovDIxbRrowAAAIw"], referer: https://www.google.com/
[Tue Dec 09 01:56:21.546959 2025] [:error] [pid 59067:tid 59098] [client 13.60.81.58:50602] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env~"] [unique_id "aTcRRXStYKzcfg3q9jfFPAAAARg"], referer: https://www.google.com/
[Tue Dec 09 01:56:22.161585 2025] [:error] [pid 17587:tid 17600] [client 13.60.81.58:50672] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.tmp"] [unique_id "aTcRRpJbuGn8bV7YLq9lZAAAAMg"], referer: https://www.google.com/
[Tue Dec 09 01:56:22.804052 2025] [:error] [pid 57134:tid 57187] [client 13.60.81.58:50756] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "aTcRRln7_Hlbg-DXKIsV6QAAAE0"], referer: https://www.google.com/
[Tue Dec 09 01:56:23.382874 2025] [:error] [pid 59067:tid 59085] [client 13.60.81.58:50836] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "aTcRR3StYKzcfg3q9jfFPQAAAQs"], referer: https://www.google.com/
[Tue Dec 09 01:56:24.010279 2025] [:error] [pid 57134:tid 57197] [client 13.60.81.58:50936] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env.save"] [unique_id "aTcRSFn7_Hlbg-DXKIsV8AAAAFc"], referer: https://www.google.com/
[Tue Dec 09 01:56:24.624123 2025] [:error] [pid 17589:tid 17663] [client 13.60.81.58:51020] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env.bak"] [unique_id "aTcRSI3u_N_j630LWcCTxwAAAVA"], referer: https://www.google.com/
[Tue Dec 09 01:56:25.226086 2025] [:error] [pid 17588:tid 17622] [client 13.60.81.58:51092] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env.old"] [unique_id "aTcRSTfolJgrovDIxbRrsQAAAII"], referer: https://www.google.com/
[Tue Dec 09 01:56:25.810193 2025] [:error] [pid 17589:tid 17665] [client 13.60.81.58:51162] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "aTcRSY3u_N_j630LWcCTyQAAAVI"], referer: https://www.google.com/
[Tue Dec 09 01:56:26.392538 2025] [:error] [pid 57134:tid 57184] [client 13.60.81.58:51230] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env.save"] [unique_id "aTcRSln7_Hlbg-DXKIsV9wAAAEo"], referer: https://www.google.com/
[Tue Dec 09 01:56:26.976434 2025] [:error] [pid 17589:tid 17649] [client 13.60.81.58:51282] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env.bak"] [unique_id "aTcRSo3u_N_j630LWcCTzAAAAUI"], referer: https://www.google.com/
[Tue Dec 09 01:56:27.568857 2025] [:error] [pid 57134:tid 57183] [client 13.60.81.58:51338] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env.old"] [unique_id "aTcRS1n7_Hlbg-DXKIsV_QAAAEk"], referer: https://www.google.com/
[Tue Dec 09 01:56:28.155720 2025] [:error] [pid 57134:tid 57197] [client 13.60.81.58:51384] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "aTcRTFn7_Hlbg-DXKIsWAQAAAFc"], referer: https://www.google.com/
[Tue Dec 09 01:56:28.759703 2025] [:error] [pid 57134:tid 57184] [client 13.60.81.58:51434] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env.save"] [unique_id "aTcRTFn7_Hlbg-DXKIsWBgAAAEo"], referer: https://www.google.com/
[Tue Dec 09 01:56:29.372534 2025] [:error] [pid 17588:tid 17635] [client 13.60.81.58:51508] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env.bak"] [unique_id "aTcRTTfolJgrovDIxbRruQAAAI8"], referer: https://www.google.com/
[Tue Dec 09 01:56:30.090314 2025] [:error] [pid 57134:tid 57194] [client 13.60.81.58:51568] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env.old"] [unique_id "aTcRTln7_Hlbg-DXKIsWDAAAAFQ"], referer: https://www.google.com/
[Tue Dec 09 01:56:30.946200 2025] [:error] [pid 57134:tid 57191] [client 13.60.81.58:51642] [client 13.60.81.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "aTcRTln7_Hlbg-DXKIsWDgAAAFE"], referer: https://www.google.com/
[Tue Dec 09 07:16:09.106027 2025] [:error] [pid 26689:tid 26747] [client 45.148.10.204:18114] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aTdcOdkbfj8nyBvIyRBVbgAAAQs"]
[Tue Dec 09 07:16:16.825654 2025] [:error] [pid 62041:tid 62114] [client 45.148.10.204:36134] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.example"] [unique_id "aTdcQPOmnJGvfaNPxPNn-QAAAJE"]
[Tue Dec 09 07:16:17.969730 2025] [:error] [pid 62041:tid 62107] [client 45.148.10.204:36150] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.development"] [unique_id "aTdcQfOmnJGvfaNPxPNn-wAAAIo"]
[Tue Dec 09 07:16:19.119994 2025] [:error] [pid 26689:tid 26750] [client 45.148.10.204:36152] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.production"] [unique_id "aTdcQ9kbfj8nyBvIyRBVeAAAAQ4"]
[Tue Dec 09 07:16:20.276143 2025] [:error] [pid 6053:tid 6064] [client 45.148.10.204:36168] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/api/.env"] [unique_id "aTdcRCHz_Tnml8kdMwzDDwAAAYk"]
[Tue Dec 09 07:16:21.680860 2025] [:error] [pid 62124:tid 62128] [client 45.148.10.204:36176] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/backend/.env"] [unique_id "aTdcRVraBX51GaCVVuVaZQAAAME"]
[Tue Dec 09 07:18:06.623765 2025] [:error] [pid 6097:tid 6113] [client 45.148.10.204:44354] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config/database.yml"] [unique_id "aTdcruY9nDD1R9gHO2SwWgAAAc4"]
[Tue Dec 09 07:18:07.778169 2025] [:error] [pid 6053:tid 6075] [client 45.148.10.204:44356] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/settings.py"] [unique_id "aTdcryHz_Tnml8kdMwzDNwAAAZQ"]
[Tue Dec 09 07:18:08.912036 2025] [:error] [pid 6053:tid 6067] [client 45.148.10.204:44368] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/logs/debug.log"] [unique_id "aTdcsCHz_Tnml8kdMwzDOgAAAYw"]
[Tue Dec 09 07:18:10.051140 2025] [:error] [pid 62039:tid 62052] [client 45.148.10.204:44384] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.js"] [unique_id "aTdcsq-WdjFepfLrlW6U3wAAAAk"]
[Tue Dec 09 07:18:11.331632 2025] [:error] [pid 34783:tid 34788] [client 45.148.10.204:44398] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/debug.log"] [unique_id "aTdcs617odLapL7SFcxLUAAAAUM"]
[Tue Dec 09 07:18:17.624282 2025] [:error] [pid 62040:tid 62090] [client 45.148.10.204:33222] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/logs/error.log"] [unique_id "aTdcufkSVjwLGqZL-9J6mAAAAFQ"]
[Tue Dec 09 07:18:18.756210 2025] [:error] [pid 6097:tid 6114] [client 45.148.10.204:33232] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/laravel.log"] [unique_id "aTdcuuY9nDD1R9gHO2SwYgAAAc8"]
[Tue Dec 09 07:18:19.905172 2025] [:error] [pid 62039:tid 62056] [client 45.148.10.204:33234] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/logs/debug.log"] [unique_id "aTdcu6-WdjFepfLrlW6U8gAAAA0"]
[Tue Dec 09 07:18:21.047501 2025] [:error] [pid 6097:tid 6106] [client 45.148.10.204:33246] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aTdcveY9nDD1R9gHO2SwZAAAAcc"]
[Tue Dec 09 07:18:22.191081 2025] [:error] [pid 6053:tid 6056] [client 45.148.10.204:33256] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/debug.log"] [unique_id "aTdcviHz_Tnml8kdMwzDPwAAAYE"]
[Tue Dec 09 09:59:29.941449 2025] [:error] [pid 6053:tid 6059] [client 45.86.202.136:47563] [client 45.86.202.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTeCgSHz_Tnml8kdMwzrGgAAAYQ"]
[Tue Dec 09 11:22:11.808950 2025] [:error] [pid 62040:tid 62082] [client 45.138.16.233:54460] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/postnews.php"] [unique_id "aTeV4_kSVjwLGqZL-9Km7QAAAEw"]
[Tue Dec 09 11:22:12.408274 2025] [:error] [pid 62039:tid 62063] [client 45.138.16.233:54562] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aTeV5K-WdjFepfLrlW71GgAAABQ"]
[Tue Dec 09 11:22:13.012903 2025] [:error] [pid 62124:tid 62143] [client 45.138.16.233:54659] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aTeV5VraBX51GaCVVuWL_AAAANA"]
[Tue Dec 09 13:21:45.853040 2025] [:error] [pid 7324:tid 7343] [client 34.213.234.20:46300] [client 34.213.234.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aTex6ef70zXc9zH4rTK8xQAAAU4"]
[Tue Dec 09 14:54:06.265871 2025] [:error] [pid 12069:tid 12092] [client 45.138.16.233:62285] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHjmwNDNgPF6LHYDTcgwAAAFU"], referer: www.google.com
[Tue Dec 09 14:54:06.269250 2025] [:error] [pid 59388:tid 59408] [client 45.138.16.233:62302] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTfHjt7acjYK4IXwCBWjJAAAAJI"]
[Tue Dec 09 14:54:06.270032 2025] [:error] [pid 7382:tid 7399] [client 45.138.16.233:62299] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHjidEXhamGkzwq-gx_wAAAcU"], referer: www.google.com
[Tue Dec 09 14:54:06.270835 2025] [:error] [pid 12069:tid 12091] [client 45.138.16.233:62288] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHjmwNDNgPF6LHYDTchAAAAFQ"], referer: www.google.com
[Tue Dec 09 14:54:06.580722 2025] [:error] [pid 7287:tid 7289] [client 45.138.16.233:62306] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHjv3UQf3HGDaVS5P9yAAAAAA"], referer: www.google.com
[Tue Dec 09 14:54:06.880381 2025] [:error] [pid 7287:tid 7292] [client 45.138.16.233:58729] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTfHjv3UQf3HGDaVS5P9ygAAAAM"]
[Tue Dec 09 14:54:06.881394 2025] [:error] [pid 7382:tid 7409] [client 45.138.16.233:58732] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHjidEXhamGkzwq-gyBgAAAc8"], referer: www.google.com
[Tue Dec 09 14:54:06.881715 2025] [:error] [pid 7382:tid 7417] [client 45.138.16.233:65368] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHjidEXhamGkzwq-gyBwAAAdc"], referer: www.google.com
[Tue Dec 09 14:54:07.207976 2025] [:error] [pid 7325:tid 7359] [client 45.138.16.233:57274] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHjwqEQlZnpyQAsW1aPAAAAYM"], referer: www.google.com
[Tue Dec 09 14:54:07.481926 2025] [:error] [pid 12069:tid 12094] [client 45.138.16.233:56972] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHj2wNDNgPF6LHYDTcjgAAAFc"], referer: www.google.com
[Tue Dec 09 14:54:07.504509 2025] [:error] [pid 7382:tid 7411] [client 45.138.16.233:60096] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTfHjydEXhamGkzwq-gyDQAAAdE"]
[Tue Dec 09 14:54:07.822989 2025] [:error] [pid 7324:tid 7340] [client 45.138.16.233:58985] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHj-f70zXc9zH4rTLUKAAAAUs"], referer: www.google.com
[Tue Dec 09 14:54:08.082673 2025] [:error] [pid 12069:tid 12092] [client 45.138.16.233:57536] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHkGwNDNgPF6LHYDTcmAAAAFU"], referer: www.google.com
[Tue Dec 09 14:54:08.099016 2025] [:error] [pid 7324:tid 7351] [client 45.138.16.233:60310] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTfHkOf70zXc9zH4rTLULQAAAVY"]
[Tue Dec 09 14:54:08.431599 2025] [:error] [pid 59388:tid 59396] [client 45.138.16.233:56905] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHkN7acjYK4IXwCBWjOAAAAIY"], referer: www.google.com
[Tue Dec 09 14:54:08.683743 2025] [:error] [pid 59388:tid 59401] [client 45.138.16.233:49352] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHkN7acjYK4IXwCBWjQAAAAIs"], referer: www.google.com
[Tue Dec 09 14:54:08.703645 2025] [:error] [pid 7324:tid 7330] [client 45.138.16.233:58059] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTfHkOf70zXc9zH4rTLUMgAAAUE"]
[Tue Dec 09 14:54:09.639652 2025] [:error] [pid 7325:tid 7359] [client 45.138.16.233:61084] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHkQqEQlZnpyQAsW1aWgAAAYM"], referer: www.google.com
[Tue Dec 09 14:54:09.891157 2025] [:error] [pid 7287:tid 7290] [client 45.138.16.233:61936] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHkf3UQf3HGDaVS5P94AAAAAE"], referer: www.google.com
[Tue Dec 09 14:54:10.863594 2025] [:error] [pid 12069:tid 12083] [client 45.138.16.233:57660] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHkmwNDNgPF6LHYDTcvQAAAEw"], referer: www.google.com
[Tue Dec 09 14:54:11.091455 2025] [:error] [pid 12069:tid 12076] [client 45.138.16.233:60085] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHk2wNDNgPF6LHYDTcxAAAAEU"], referer: www.google.com
[Tue Dec 09 14:54:11.794091 2025] [:error] [pid 7324:tid 7345] [client 45.138.16.233:60163] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHk-f70zXc9zH4rTLUWgAAAVA"], referer: www.google.com
[Tue Dec 09 14:54:12.075507 2025] [:error] [pid 7324:tid 7329] [client 45.138.16.233:63863] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHlOf70zXc9zH4rTLUYAAAAUA"], referer: www.google.com
[Tue Dec 09 14:54:12.292011 2025] [:error] [pid 7287:tid 7292] [client 45.138.16.233:58881] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHlP3UQf3HGDaVS5P98AAAAAM"], referer: www.google.com
[Tue Dec 09 14:54:13.027031 2025] [:error] [pid 12069:tid 12083] [client 45.138.16.233:62158] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHlWwNDNgPF6LHYDTc1AAAAEw"], referer: www.google.com
[Tue Dec 09 14:54:13.281893 2025] [:error] [pid 7324:tid 7334] [client 45.138.16.233:49701] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHlef70zXc9zH4rTLUagAAAUU"], referer: www.google.com
[Tue Dec 09 14:54:13.521419 2025] [:error] [pid 59388:tid 59396] [client 45.138.16.233:50310] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHld7acjYK4IXwCBWjegAAAIY"], referer: www.google.com
[Tue Dec 09 14:54:14.234638 2025] [:error] [pid 12069:tid 12072] [client 45.138.16.233:57393] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHlmwNDNgPF6LHYDTc5wAAAEE"], referer: www.google.com
[Tue Dec 09 14:54:14.489781 2025] [:error] [pid 59388:tid 59411] [client 45.138.16.233:57166] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHlt7acjYK4IXwCBWjiQAAAJU"], referer: www.google.com
[Tue Dec 09 14:54:14.723170 2025] [:error] [pid 59388:tid 59410] [client 45.138.16.233:58936] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHlt7acjYK4IXwCBWjjgAAAJQ"], referer: www.google.com
[Tue Dec 09 14:54:15.449025 2025] [:error] [pid 12069:tid 12087] [client 45.138.16.233:59176] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHl2wNDNgPF6LHYDTdAQAAAFA"], referer: www.google.com
[Tue Dec 09 14:54:16.652333 2025] [:error] [pid 7325:tid 7375] [client 45.138.16.233:57272] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHmAqEQlZnpyQAsW1ajwAAAZM"], referer: www.google.com
[Tue Dec 09 14:54:22.285140 2025] [proxy_fcgi:error] [pid 7287:tid 7296] [client 103.4.122.14:45182] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, 'cb7f0fe50645a41fe62c1e4c2584d526', 'cb7f0fe50645a41fe62c1e4c2584d526', 'The Plugin \\"Really Simple Security\\" needs an upgrade (9.5.0.2 -> 9.5.4).', 'You need to upgrade \\"Really Simple Security\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:21:{s:4:\\"Name\\";s:22:\\"Really Simple Security\\";s:9:\\"PluginURI\\";s:29:\\"https://really-simple-ssl.com\\";s:7:\\"Version\\";s:7:\\"9.5.0.2\\";s:11:\\"Description\\";s:161:\\"Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate generation.\\";s:6:\\"Author\\";s:22:\\"Really Simple Security\\";s:9:\\"AuthorURI\\";s:38:\\"https://really-simple-ssl.com/a...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, '18a81b1221bdad533a9ba2723aee9b65', '18a81b1221bdad533a9ba2723aee9b65', 'The Plugin \\"Simple History\\" needs an upgrade (5.16.0 -> 5.20.0).', 'You need to upgrade \\"Simple History\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:21:{s:4:\\"Name\\";s:14:\\"Simple History\\";s:9:\\"PluginURI\\";s:26:\\"https://simple-history.com\\";s:7:\\"Version\\";s:6:\\"5.16.0\\";s:11:\\"Description\\";s:106:\\"Plugin that logs various things that occur in WordPress and then presents those events in a very nice GUI.\\";s:6:\\"Author\\";s:16:\\"P\xc3\xa4r Thernstr\xc3\xb6m\\";s:9:\\"AuthorURI\\";s:27:\\"https://simple-history.com/\\";s:10:\\"TextDomain\\";s:14:\\"simple-history\\";s:10:\\"DomainPath\\";s:0:\\"\\";s:7:\\"Network\\";b...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, '3a1db80a88b79faef8fb0834e33613c0', '3a1db80a88b79faef8fb0834e33613c0', 'The Plugin \\"SimpLy Gallery Block & Lightbox\\" needs an upgrade (3.2.7 -> 3.2.8).', 'You need to upgrade \\"SimpLy Gallery Block & Lightbox\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:21:{s:4:\\"Name\\";s:31:\\"SimpLy Gallery Block & Lightbox\\";s:9:\\"PluginURI\\";s:25:\\"https://simplygallery.co/\\";s:7:\\"Version\\";s:5:\\"3.2.7\\";s:11:\\"Description\\";s:330:\\"The highly customizable Lightbox for native WordPress Gallery/Image. And beautiful gallery blocks with advanced Lightbox for photographers, video creators, writers and content marketers. This blocks set will help you create responsive Images, Video...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, 'dc5444f46a31d84ea9d12d1e829eb996', 'dc5444f46a31d84ea9d12d1e829eb996', 'The Plugin \\"Wordfence Security\\" needs an upgrade (8.1.0 -> 8.1.3).', 'You need to upgrade \\"Wordfence Security\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:21:{s:4:\\"Name\\";s:18:\\"Wordfence Security\\";s:9:\\"PluginURI\\";s:26:\\"https://www.wordfence.com/\\";s:7:\\"Version\\";s:5:\\"8.1.0\\";s:11:\\"Description\\";s:58:\\"Wordfence Security - Anti-virus, Firewall and Malware Scan\\";s:6:\\"Author\\";s:9:\\"Wordfence\\";s:9:\\"AuthorURI\\";s:26:\\"https://www.wordfence.com/\\";s:10:\\"TextDomain\\";s:9:\\"wordfence\\";s:10:\\"DomainPath\\";s:10:\\"/languages\\";s:7:\\"Network\\";b:1;s:10:\\"RequiresWP\\";s:3:\\"4.7\\";s:11:\\"Re...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfPluginUpgrade', 50, 'ae9e6108ea813a42d120c88735f6c1e1', 'ae9e6108ea813a42d120c88735f6c1e1', 'The Plugin \\"UpdraftPlus - Backup/Restore\\" needs an upgrade (2.25.7.26 -> 2.25.9.0).', 'You need to upgrade \\"UpdraftPlus - Backup/Restore\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:21:{s:4:\\"Name\\";s:28:\\"UpdraftPlus - Backup/Restore\\";s:9:\\"PluginURI\\";s:23:\\"https://updraftplus.com\\";s:7:\\"Version\\";s:9:\\"2.25.7.26\\";s:11:\\"Description\\";s:147:\\"Backup and restore: take backups locally, or backup to Amazon S3, Dropbox, Google Drive, Rackspace, (S)FTP, WebDAV & email, on automatic schedules.\\";s:6:\\"Author\\";s:26:\\"TeamUpdraft, DavidAnderson\\";s:9:\\"AuthorURI\\";s:23:\\"https://updraftplus.co...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfissues (time, lastUpdated, status, type, severity, ignoreP, ignoreC, shortMsg, longMsg, data) VALUES (UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), 'new', 'wfThemeUpgrade', 50, 'c44491af39b9ccd5310ef4ee9a8f8189', 'c44491af39b9ccd5310ef4ee9a8f8189', 'The Theme \\"Twenty Twenty-Five\\" needs an upgrade (1.3 -> 1.4).', 'You need to upgrade \\"Twenty Twenty-Five\\" to the newest version to ensure you have any security fixes the developer has released.', 'a:7:{s:10:\\"newVersion\\";s:3:\\"1.4\\";s:7:\\"package\\";s:62:\\"https://downloads.wordpress.org/theme/twentytwentyfive.1.4.zip\\";s:3:\\"URL\\";s:46:\\"https://wordpress.org/themes/twentytwentyfive/\\";s:4:\\"Name\\";s:18:\\"Twenty Twenty-Five\\";s:4:\\"name\\";s:18:\\"Twenty Twenty-Five\\";s:7:\\"version\\";s:3:\\"1.3\\";s:10:\\"vulnerable\\";b:0;}') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfnotifications SET priority = 502, ctime = 1765263261, html = '<a href=\\"https://makifim.com.au/wp-admin/admin.php?page=WordfenceScan\\">4 issues found in most recent scan</a>', links = '[]' WHERE id = 'site-AEAAAAA' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine::refreshScanNotification, wfNotification->__construct'
[Tue Dec 09 14:57:50.662311 2025] [:error] [pid 59388:tid 59398] [client 103.77.106.81:63852] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "aTfIbt7acjYK4IXwCBWmlgAAAIg"]
[Tue Dec 09 14:57:51.274889 2025] [:error] [pid 7287:tid 7289] [client 103.77.106.81:64958] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTfIb_3UQf3HGDaVS5P_2wAAAAA"]
[Tue Dec 09 19:24:38.711302 2025] [:error] [pid 30500:tid 30566] [client 140.99.1.31:28711] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aTgG9q2eIIK3JPWHCXW-8wAAAYk"]
[Tue Dec 09 19:24:39.215632 2025] [:error] [pid 30498:tid 30518] [client 140.99.1.9:63663] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aTgG9x2mcZJQ5qP_RC0fLAAAABA"]
[Tue Dec 09 19:24:39.798273 2025] [:error] [pid 30500:tid 30563] [client 140.99.1.52:34295] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "aTgG962eIIK3JPWHCXW-9wAAAYY"]
[Tue Dec 09 19:24:40.206209 2025] [:error] [pid 30499:tid 30534] [client 140.99.1.2:34519] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "aTgG-E0x3OqZTOPp7cnbtgAAAUQ"]
[Tue Dec 09 19:24:40.713354 2025] [:error] [pid 30591:tid 30601] [client 140.99.1.5:21297] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "aTgG-BG-g76drVdWQUVkbgAAAEc"]
[Tue Dec 09 19:24:41.103565 2025] [:error] [pid 30500:tid 30573] [client 140.99.1.6:29091] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "aTgG-a2eIIK3JPWHCXW--AAAAZA"]
[Tue Dec 09 19:24:41.501234 2025] [:error] [pid 30500:tid 30562] [client 140.99.1.48:42705] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "aTgG-a2eIIK3JPWHCXW--QAAAYU"]
[Tue Dec 09 19:24:41.902079 2025] [:error] [pid 30500:tid 30565] [client 140.99.1.15:59243] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "aTgG-a2eIIK3JPWHCXW-_QAAAYg"]
[Tue Dec 09 19:24:42.300158 2025] [:error] [pid 30499:tid 30535] [client 140.99.1.75:31791] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aTgG-k0x3OqZTOPp7cnbugAAAUU"]
[Tue Dec 09 19:24:42.901129 2025] [:error] [pid 30499:tid 30543] [client 140.99.1.13:48323] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aTgG-k0x3OqZTOPp7cnbvAAAAU0"]
[Tue Dec 09 19:24:43.600134 2025] [:error] [pid 30500:tid 30563] [client 140.99.1.33:63067] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTgG-62eIIK3JPWHCXW_AQAAAYY"]
[Tue Dec 09 19:24:45.404406 2025] [:error] [pid 30500:tid 30570] [client 140.99.1.32:36765] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "aTgG_a2eIIK3JPWHCXW_CQAAAY0"]
[Tue Dec 09 19:24:45.998652 2025] [:error] [pid 30500:tid 30560] [client 140.99.1.31:35419] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aTgG_a2eIIK3JPWHCXW_EQAAAYM"]
[Tue Dec 09 19:24:46.402371 2025] [:error] [pid 30500:tid 30564] [client 140.99.1.3:59155] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aTgG_q2eIIK3JPWHCXW_EwAAAYc"]
[Tue Dec 09 19:24:46.799462 2025] [:error] [pid 30499:tid 30551] [client 140.99.1.9:21921] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aTgG_k0x3OqZTOPp7cnbwAAAAVU"]
[Tue Dec 09 19:24:47.407528 2025] [:error] [pid 30500:tid 30577] [client 140.99.1.72:57033] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aTgG_62eIIK3JPWHCXW_GgAAAZQ"]
[Tue Dec 09 19:24:47.820455 2025] [:error] [pid 5276:tid 5285] [client 140.99.1.16:24399] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aTgG_0tSXwbewdwyu-1bOwAAAMc"]
[Tue Dec 09 19:24:48.204064 2025] [:error] [pid 30499:tid 30540] [client 140.99.1.73:25207] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aTgHAE0x3OqZTOPp7cnbwgAAAUo"]
[Tue Dec 09 19:24:49.105647 2025] [:error] [pid 5276:tid 5299] [client 140.99.1.50:43227] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aTgHAUtSXwbewdwyu-1bPQAAANU"]
[Tue Dec 09 19:24:50.197951 2025] [:error] [pid 30499:tid 30548] [client 140.99.1.18:30405] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aTgHAk0x3OqZTOPp7cnbxgAAAVI"]
[Tue Dec 09 19:24:51.505491 2025] [:error] [pid 36456:tid 36472] [client 140.99.1.47:54467] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-mobile-detector/cache/settings_auto.php"] [unique_id "aTgHAx0pAnOyfXl_v40WBAAAAI4"]
[Tue Dec 09 19:24:52.297636 2025] [:error] [pid 30500:tid 30564] [client 140.99.1.50:58739] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "aTgHBK2eIIK3JPWHCXW_HwAAAYc"]
[Tue Dec 09 19:24:52.715179 2025] [:error] [pid 30500:tid 30562] [client 140.99.1.77:31439] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTgHBK2eIIK3JPWHCXW_IAAAAYU"]
[Tue Dec 09 19:24:53.195816 2025] [:error] [pid 30499:tid 30551] [client 140.99.1.28:41209] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aTgHBU0x3OqZTOPp7cnbzgAAAVU"]
[Tue Dec 09 19:24:53.900695 2025] [:error] [pid 30499:tid 30546] [client 140.99.1.73:24147] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTgHBU0x3OqZTOPp7cnbzwAAAVA"]
[Tue Dec 09 19:24:54.298581 2025] [:error] [pid 30500:tid 30572] [client 140.99.1.26:54389] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTgHBq2eIIK3JPWHCXW_IgAAAY8"]
[Tue Dec 09 19:24:54.713248 2025] [:error] [pid 30499:tid 30549] [client 140.99.1.33:51593] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aTgHBk0x3OqZTOPp7cnb0AAAAVM"]
[Tue Dec 09 19:24:55.203283 2025] [:error] [pid 30591:tid 30617] [client 140.99.1.67:31437] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTgHBxG-g76drVdWQUVkcAAAAFc"]
[Tue Dec 09 19:24:55.709473 2025] [:error] [pid 30500:tid 30578] [client 140.99.1.15:21803] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTgHB62eIIK3JPWHCXW_JAAAAZU"]
[Tue Dec 09 19:24:57.112173 2025] [:error] [pid 5276:tid 5291] [client 140.99.1.68:55565] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aTgHCUtSXwbewdwyu-1bRAAAAM0"]
[Tue Dec 09 19:24:58.605991 2025] [:error] [pid 30500:tid 30579] [client 140.99.1.33:45213] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aTgHCq2eIIK3JPWHCXW_KAAAAZY"]
[Tue Dec 09 19:24:59.404509 2025] [:error] [pid 30500:tid 30575] [client 140.99.1.65:20949] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "aTgHC62eIIK3JPWHCXW_KQAAAZI"]
[Tue Dec 09 19:24:59.808602 2025] [:error] [pid 30591:tid 30595] [client 140.99.1.62:45493] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "aTgHCxG-g76drVdWQUVkcwAAAEE"]
[Tue Dec 09 19:25:00.833253 2025] [:error] [pid 30500:tid 30563] [client 140.99.1.3:27347] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aTgHDK2eIIK3JPWHCXW_LAAAAYY"]
[Tue Dec 09 19:25:01.307138 2025] [:error] [pid 30500:tid 30562] [client 140.99.1.52:31041] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "aTgHDa2eIIK3JPWHCXW_LgAAAYU"]
[Tue Dec 09 19:25:01.931687 2025] [:error] [pid 30499:tid 30535] [client 140.99.1.46:49359] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aTgHDU0x3OqZTOPp7cnb0QAAAUU"]
[Tue Dec 09 19:25:02.501344 2025] [:error] [pid 30499:tid 30537] [client 140.99.1.20:52919] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aTgHDk0x3OqZTOPp7cnb0wAAAUc"]
[Tue Dec 09 19:25:03.021036 2025] [:error] [pid 5276:tid 5282] [client 140.99.1.47:27117] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aTgHD0tSXwbewdwyu-1bRwAAAMQ"]
[Tue Dec 09 19:25:03.705082 2025] [:error] [pid 5276:tid 5299] [client 140.99.1.73:54827] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "aTgHD0tSXwbewdwyu-1bSAAAANU"]
[Tue Dec 09 19:25:04.505137 2025] [:error] [pid 30498:tid 30513] [client 140.99.1.6:29605] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aTgHEB2mcZJQ5qP_RC0fNAAAAAs"]
[Tue Dec 09 19:25:05.407937 2025] [:error] [pid 36456:tid 36465] [client 140.99.1.65:58977] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTgHER0pAnOyfXl_v40WCgAAAIc"]
[Tue Dec 09 19:25:05.901704 2025] [:error] [pid 30500:tid 30576] [client 140.99.1.49:47569] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "aTgHEa2eIIK3JPWHCXW_MgAAAZM"]
[Tue Dec 09 19:25:07.395995 2025] [:error] [pid 30500:tid 30566] [client 140.99.1.39:42155] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aTgHE62eIIK3JPWHCXW_NgAAAYk"]
[Tue Dec 09 19:25:07.800143 2025] [:error] [pid 30499:tid 30536] [client 140.99.1.68:62577] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTgHE00x3OqZTOPp7cnb2AAAAUY"]
[Tue Dec 09 19:25:08.202954 2025] [:error] [pid 30500:tid 30573] [client 140.99.1.7:26673] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTgHFK2eIIK3JPWHCXW_OQAAAZA"]
[Tue Dec 09 19:25:08.905017 2025] [:error] [pid 36456:tid 36475] [client 140.99.1.13:41351] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aTgHFB0pAnOyfXl_v40WCwAAAJE"]
[Tue Dec 09 19:25:09.399638 2025] [:error] [pid 30499:tid 30531] [client 140.99.1.50:27525] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aTgHFU0x3OqZTOPp7cnb2QAAAUE"]
[Tue Dec 09 19:25:09.808378 2025] [:error] [pid 30499:tid 30534] [client 140.99.1.3:20341] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTgHFU0x3OqZTOPp7cnb2gAAAUQ"]
[Tue Dec 09 19:25:10.202177 2025] [:error] [pid 5276:tid 5286] [client 140.99.1.27:23521] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTgHFktSXwbewdwyu-1bSgAAAMg"]
[Tue Dec 09 19:25:10.799598 2025] [:error] [pid 30498:tid 30506] [client 140.99.1.31:44327] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTgHFh2mcZJQ5qP_RC0fOQAAAAQ"]
[Tue Dec 09 19:25:11.712818 2025] [:error] [pid 30498:tid 30514] [client 140.99.1.13:41333] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTgHFx2mcZJQ5qP_RC0fPAAAAAw"]
[Tue Dec 09 19:25:12.605898 2025] [:error] [pid 30500:tid 30561] [client 140.99.1.28:57669] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTgHGK2eIIK3JPWHCXW_PwAAAYQ"]
[Tue Dec 09 19:25:13.103350 2025] [:error] [pid 30500:tid 30578] [client 140.99.1.63:24959] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTgHGa2eIIK3JPWHCXW_QAAAAZU"]
[Tue Dec 09 19:25:13.498983 2025] [:error] [pid 30500:tid 30576] [client 140.99.1.67:32875] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTgHGa2eIIK3JPWHCXW_QQAAAZM"]
[Tue Dec 09 19:25:14.104594 2025] [:error] [pid 30591:tid 30605] [client 140.99.1.47:42335] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTgHGhG-g76drVdWQUVkdwAAAEs"]
[Tue Dec 09 19:25:14.810349 2025] [:error] [pid 36456:tid 36463] [client 140.99.1.17:58471] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTgHGh0pAnOyfXl_v40WDgAAAIU"]
[Tue Dec 09 19:25:15.593254 2025] [:error] [pid 30499:tid 30537] [client 140.99.1.10:40667] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTgHG00x3OqZTOPp7cnb3wAAAUc"]
[Tue Dec 09 19:25:16.100021 2025] [:error] [pid 30499:tid 30545] [client 140.99.1.16:34749] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTgHHE0x3OqZTOPp7cnb4AAAAU8"]
[Tue Dec 09 19:25:16.505191 2025] [:error] [pid 5276:tid 5285] [client 140.99.1.5:52065] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/plugins.php"] [unique_id "aTgHHEtSXwbewdwyu-1bUgAAAMc"]
[Tue Dec 09 19:25:17.099234 2025] [:error] [pid 30591:tid 30608] [client 140.99.1.70:22193] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aTgHHRG-g76drVdWQUVkeQAAAE4"]
[Tue Dec 09 19:25:18.109473 2025] [:error] [pid 5276:tid 5299] [client 140.99.1.76:40835] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTgHHktSXwbewdwyu-1bVAAAANU"]
[Tue Dec 09 19:25:18.599947 2025] [:error] [pid 30500:tid 30562] [client 140.99.1.10:41357] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "aTgHHq2eIIK3JPWHCXW_SwAAAYU"]
[Tue Dec 09 19:25:19.005789 2025] [:error] [pid 5276:tid 5284] [client 140.99.1.20:34727] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aTgHH0tSXwbewdwyu-1bVQAAAMY"]
[Tue Dec 09 19:25:19.912709 2025] [:error] [pid 30591:tid 30614] [client 140.99.1.77:41901] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTgHHxG-g76drVdWQUVkfAAAAFQ"]
[Tue Dec 09 19:25:21.597707 2025] [:error] [pid 30591:tid 30596] [client 140.99.1.17:38499] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTgHIRG-g76drVdWQUVkgAAAAEI"]
[Tue Dec 09 19:25:22.220734 2025] [:error] [pid 30499:tid 30531] [client 140.99.1.10:39837] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTgHIk0x3OqZTOPp7cnb5QAAAUE"]
[Tue Dec 09 19:25:22.700269 2025] [:error] [pid 30499:tid 30534] [client 140.99.1.18:22431] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "aTgHIk0x3OqZTOPp7cnb5wAAAUQ"]
[Tue Dec 09 19:25:23.099714 2025] [:error] [pid 30499:tid 30539] [client 140.99.1.73:54353] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options.php"] [unique_id "aTgHI00x3OqZTOPp7cnb6QAAAUk"]
[Tue Dec 09 19:25:23.604229 2025] [:error] [pid 30499:tid 30535] [client 140.99.1.37:23653] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "aTgHI00x3OqZTOPp7cnb6gAAAUU"]
[Tue Dec 09 19:25:24.204684 2025] [:error] [pid 30499:tid 30530] [client 140.99.1.78:53167] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aTgHJE0x3OqZTOPp7cnb6wAAAUA"]
[Tue Dec 09 19:25:24.603489 2025] [:error] [pid 30591:tid 30616] [client 140.99.1.32:36235] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTgHJBG-g76drVdWQUVkgwAAAFY"]
[Tue Dec 09 19:25:25.108441 2025] [:error] [pid 5276:tid 5279] [client 140.99.1.26:29943] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTgHJUtSXwbewdwyu-1bXAAAAME"]
[Tue Dec 09 19:25:25.496792 2025] [:error] [pid 5276:tid 5280] [client 140.99.1.15:47187] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aTgHJUtSXwbewdwyu-1bXgAAAMI"]
[Tue Dec 09 19:25:25.902338 2025] [:error] [pid 5276:tid 5296] [client 140.99.1.30:48357] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wordfence-waf.php"] [unique_id "aTgHJUtSXwbewdwyu-1bXwAAANI"]
[Tue Dec 09 19:25:26.298652 2025] [:error] [pid 36456:tid 36466] [client 140.99.1.77:34335] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "aTgHJh0pAnOyfXl_v40WGQAAAIg"]
[Tue Dec 09 19:25:26.801672 2025] [:error] [pid 36456:tid 36471] [client 140.99.1.33:51731] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aTgHJh0pAnOyfXl_v40WGgAAAI0"]
[Tue Dec 09 19:25:28.004499 2025] [:error] [pid 30499:tid 30552] [client 140.99.1.33:62721] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "aTgHKE0x3OqZTOPp7cnb8gAAAVY"]
[Tue Dec 09 19:25:28.812091 2025] [:error] [pid 30499:tid 30546] [client 140.99.1.32:42123] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aTgHKE0x3OqZTOPp7cnb9AAAAVA"]
[Tue Dec 09 19:25:29.518652 2025] [:error] [pid 36456:tid 36467] [client 140.99.1.38:60945] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aTgHKR0pAnOyfXl_v40WHQAAAIk"]
[Tue Dec 09 19:25:29.998895 2025] [:error] [pid 30498:tid 30524] [client 140.99.1.31:46669] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aTgHKR2mcZJQ5qP_RC0fSAAAABY"]
[Tue Dec 09 19:25:30.410273 2025] [:error] [pid 30499:tid 30553] [client 140.99.1.73:35757] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aTgHKk0x3OqZTOPp7cnb9gAAAVc"]
[Tue Dec 09 19:25:30.800237 2025] [:error] [pid 30500:tid 30571] [client 140.99.1.68:64885] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aTgHKq2eIIK3JPWHCXW_UwAAAY4"]
[Tue Dec 09 19:25:31.399877 2025] [:error] [pid 30499:tid 30550] [client 140.99.1.63:50195] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload.php"] [unique_id "aTgHK00x3OqZTOPp7cnb-AAAAVQ"]
[Tue Dec 09 19:25:32.002962 2025] [:error] [pid 30499:tid 30548] [client 140.99.1.52:39833] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aTgHLE0x3OqZTOPp7cnb-gAAAVI"]
[Tue Dec 09 19:25:32.403932 2025] [:error] [pid 30591:tid 30605] [client 140.99.1.15:32351] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTgHLBG-g76drVdWQUVkiAAAAEs"]
[Tue Dec 09 19:25:32.801070 2025] [:error] [pid 30591:tid 30608] [client 140.99.1.76:28885] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTgHLBG-g76drVdWQUVkigAAAE4"]
[Tue Dec 09 19:25:33.907279 2025] [:error] [pid 30500:tid 30565] [client 140.99.1.69:45593] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xl2023.php"] [unique_id "aTgHLa2eIIK3JPWHCXW_WgAAAYg"]
[Tue Dec 09 19:25:35.103542 2025] [:error] [pid 30500:tid 30576] [client 140.99.1.5:23815] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aTgHL62eIIK3JPWHCXW_XgAAAZM"]
[Tue Dec 09 19:25:35.900015 2025] [:error] [pid 30500:tid 30579] [client 140.99.1.69:48765] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/login.php"] [unique_id "aTgHL62eIIK3JPWHCXW_XwAAAZY"]
[Tue Dec 09 19:25:36.398251 2025] [:error] [pid 30500:tid 30563] [client 140.99.1.2:62789] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aTgHMK2eIIK3JPWHCXW_YgAAAYY"]
[Tue Dec 09 19:25:36.909524 2025] [:error] [pid 30500:tid 30560] [client 140.99.1.30:40809] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aTgHMK2eIIK3JPWHCXW_ZQAAAYM"]
[Tue Dec 09 19:25:37.398268 2025] [:error] [pid 30591:tid 30596] [client 140.99.1.31:30603] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aTgHMRG-g76drVdWQUVkjwAAAEI"]
[Tue Dec 09 19:25:37.806482 2025] [:error] [pid 5276:tid 5291] [client 140.99.1.48:45245] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "aTgHMUtSXwbewdwyu-1bZQAAAM0"]
[Tue Dec 09 19:25:38.201732 2025] [:error] [pid 30498:tid 30513] [client 140.99.1.68:49531] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTgHMh2mcZJQ5qP_RC0fUAAAAAs"]
[Tue Dec 09 19:25:38.605315 2025] [:error] [pid 30500:tid 30577] [client 140.99.1.18:48089] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aTgHMq2eIIK3JPWHCXW_aQAAAZQ"]
[Tue Dec 09 19:25:39.300312 2025] [:error] [pid 30498:tid 30503] [client 140.99.1.67:52407] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/pachr.php"] [unique_id "aTgHMx2mcZJQ5qP_RC0fUgAAAAE"]
[Tue Dec 09 19:25:39.709470 2025] [:error] [pid 5276:tid 5301] [client 140.99.1.44:53791] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTgHM0tSXwbewdwyu-1baAAAANc"]
[Tue Dec 09 19:25:40.105563 2025] [:error] [pid 30500:tid 30578] [client 140.99.1.44:62261] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aTgHNK2eIIK3JPWHCXW_bAAAAZU"]
[Tue Dec 09 19:25:40.517477 2025] [:error] [pid 30498:tid 30519] [client 140.99.1.70:59089] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "aTgHNB2mcZJQ5qP_RC0fVAAAABE"]
[Tue Dec 09 19:25:42.401917 2025] [:error] [pid 30498:tid 30526] [client 140.99.1.28:56045] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "aTgHNh2mcZJQ5qP_RC0fWwAAABg"]
[Tue Dec 09 19:25:42.902809 2025] [:error] [pid 5276:tid 5298] [client 140.99.1.43:24059] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/user.php"] [unique_id "aTgHNktSXwbewdwyu-1bbwAAANQ"]
[Tue Dec 09 19:25:43.306978 2025] [:error] [pid 30500:tid 30558] [client 140.99.1.63:63367] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aTgHN62eIIK3JPWHCXW_bwAAAYE"]
[Tue Dec 09 19:25:43.804424 2025] [:error] [pid 30500:tid 30577] [client 140.99.1.47:31877] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTgHN62eIIK3JPWHCXW_cQAAAZQ"]
[Tue Dec 09 19:25:44.208056 2025] [:error] [pid 30498:tid 30505] [client 140.99.1.28:20639] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/text.php"] [unique_id "aTgHOB2mcZJQ5qP_RC0fXAAAAAM"]
[Tue Dec 09 19:25:44.606947 2025] [:error] [pid 5276:tid 5291] [client 140.99.1.27:56105] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aTgHOEtSXwbewdwyu-1bdQAAAM0"]
[Tue Dec 09 19:25:45.002055 2025] [:error] [pid 30591:tid 30599] [client 140.99.1.67:23979] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTgHORG-g76drVdWQUVklAAAAEU"]
[Tue Dec 09 19:25:45.403854 2025] [:error] [pid 30498:tid 30513] [client 140.99.1.32:36117] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/demo.php"] [unique_id "aTgHOR2mcZJQ5qP_RC0fXQAAAAs"]
[Tue Dec 09 19:25:45.901486 2025] [:error] [pid 5276:tid 5296] [client 140.99.1.53:28049] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aTgHOUtSXwbewdwyu-1bdwAAANI"]
[Tue Dec 09 19:25:46.411679 2025] [:error] [pid 30500:tid 30579] [client 140.99.1.18:44031] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aTgHOq2eIIK3JPWHCXW_egAAAZY"]
[Tue Dec 09 19:25:47.106053 2025] [:error] [pid 5276:tid 5286] [client 140.99.1.46:52779] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aTgHO0tSXwbewdwyu-1bewAAAMg"]
[Tue Dec 09 19:25:47.513082 2025] [:error] [pid 30498:tid 30508] [client 140.99.1.70:43581] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xml.php"] [unique_id "aTgHOx2mcZJQ5qP_RC0fYAAAAAY"]
[Tue Dec 09 19:25:48.000155 2025] [:error] [pid 30498:tid 30509] [client 140.99.1.6:41365] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTgHOx2mcZJQ5qP_RC0fYQAAAAc"]
[Tue Dec 09 19:25:49.171380 2025] [:error] [pid 30500:tid 30570] [client 140.99.1.73:43725] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTgHPa2eIIK3JPWHCXW_fQAAAY0"]
[Tue Dec 09 19:25:49.813636 2025] [:error] [pid 30499:tid 30541] [client 140.99.1.42:24575] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aTgHPU0x3OqZTOPp7cncCAAAAUs"]
[Tue Dec 09 19:25:51.118896 2025] [:error] [pid 5276:tid 5292] [client 140.99.1.31:51543] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aTgHP0tSXwbewdwyu-1bhwAAAM4"]
[Tue Dec 09 19:25:52.214914 2025] [:error] [pid 30499:tid 30552] [client 140.99.1.3:39031] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTgHQE0x3OqZTOPp7cncDAAAAVY"]
[Tue Dec 09 19:25:53.198267 2025] [:error] [pid 5276:tid 5281] [client 140.99.1.68:50209] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "aTgHQUtSXwbewdwyu-1biQAAAMM"]
[Tue Dec 09 19:25:53.908245 2025] [:error] [pid 30499:tid 30531] [client 140.99.1.73:27611] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aTgHQU0x3OqZTOPp7cncEAAAAUE"]
[Tue Dec 09 19:25:54.513843 2025] [:error] [pid 30500:tid 30574] [client 140.99.1.52:52497] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTgHQq2eIIK3JPWHCXW_gwAAAZE"]
[Tue Dec 09 19:25:55.001289 2025] [:error] [pid 30499:tid 30535] [client 140.99.1.67:35541] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/up.php"] [unique_id "aTgHQ00x3OqZTOPp7cncEgAAAUU"]
[Tue Dec 09 19:25:55.607030 2025] [:error] [pid 30499:tid 30541] [client 140.99.1.28:53181] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aTgHQ00x3OqZTOPp7cncFgAAAUs"]
[Tue Dec 09 19:25:56.100349 2025] [:error] [pid 30499:tid 30554] [client 140.99.1.28:45045] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTgHRE0x3OqZTOPp7cncFwAAAVg"]
[Tue Dec 09 19:25:56.602691 2025] [:error] [pid 36456:tid 36477] [client 140.99.1.39:58979] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aTgHRB0pAnOyfXl_v40WKAAAAJM"]
[Tue Dec 09 19:25:57.307350 2025] [:error] [pid 30499:tid 30552] [client 140.99.1.47:39607] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aTgHRU0x3OqZTOPp7cncGQAAAVY"]
[Tue Dec 09 19:25:58.313121 2025] [:error] [pid 30591:tid 30594] [client 140.99.1.75:31115] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez/admin.php"] [unique_id "aTgHRhG-g76drVdWQUVkogAAAEA"]
[Tue Dec 09 19:25:59.214317 2025] [:error] [pid 30591:tid 30611] [client 140.99.1.77:33959] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/bluestork/error.php"] [unique_id "aTgHRxG-g76drVdWQUVkqAAAAFE"]
[Tue Dec 09 19:25:59.601604 2025] [:error] [pid 30591:tid 30602] [client 140.99.1.13:46539] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Yamato/index.php"] [unique_id "aTgHRxG-g76drVdWQUVkqgAAAEg"]
[Tue Dec 09 19:26:01.900714 2025] [:error] [pid 36456:tid 36475] [client 140.99.1.18:47125] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/isis/index.php"] [unique_id "aTgHSR0pAnOyfXl_v40WLwAAAJE"]
[Tue Dec 09 19:26:02.303973 2025] [:error] [pid 36456:tid 36482] [client 140.99.1.75:28891] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aTgHSh0pAnOyfXl_v40WMQAAAJg"]
[Tue Dec 09 19:26:03.116816 2025] [:error] [pid 30498:tid 30521] [client 140.99.1.39:34987] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Globy/index.php"] [unique_id "aTgHSx2mcZJQ5qP_RC0fawAAABM"]
[Tue Dec 09 19:26:04.004834 2025] [:error] [pid 30591:tid 30613] [client 140.99.1.78:22837] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "aTgHTBG-g76drVdWQUVkrgAAAFM"]
[Tue Dec 09 19:26:04.712586 2025] [:error] [pid 30499:tid 30534] [client 140.99.1.50:41103] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/atomic/error.php"] [unique_id "aTgHTE0x3OqZTOPp7cncHgAAAUQ"]
[Tue Dec 09 19:26:05.315380 2025] [:error] [pid 30499:tid 30535] [client 140.99.1.49:23175] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez5/index.php"] [unique_id "aTgHTU0x3OqZTOPp7cncHwAAAUU"]
[Tue Dec 09 19:26:06.206340 2025] [:error] [pid 30500:tid 30563] [client 140.99.1.7:24625] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez3/index.php"] [unique_id "aTgHTq2eIIK3JPWHCXW_jAAAAYY"]
[Tue Dec 09 19:26:06.704145 2025] [:error] [pid 30499:tid 30538] [client 140.99.1.47:28491] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/rhuk_solarflare_ii/index.php"] [unique_id "aTgHTk0x3OqZTOPp7cncIwAAAUg"]
[Tue Dec 09 19:26:07.201772 2025] [:error] [pid 30591:tid 30617] [client 140.99.1.63:47669] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Protostar/index.php"] [unique_id "aTgHTxG-g76drVdWQUVksgAAAFc"]
[Tue Dec 09 19:26:07.802310 2025] [:error] [pid 30591:tid 30615] [client 140.99.1.33:62529] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/rhuk_milkyway/index.php"] [unique_id "aTgHTxG-g76drVdWQUVktAAAAFU"]
[Tue Dec 09 19:26:08.401256 2025] [:error] [pid 30591:tid 30616] [client 140.99.1.30:38921] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/isis/error.php"] [unique_id "aTgHUBG-g76drVdWQUVkuAAAAFY"]
[Tue Dec 09 19:26:08.809374 2025] [:error] [pid 5276:tid 5289] [client 140.99.1.7:23311] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez_20/index.php"] [unique_id "aTgHUEtSXwbewdwyu-1bkgAAAMs"]
[Tue Dec 09 19:26:09.410305 2025] [:error] [pid 30591:tid 30594] [client 140.99.1.16:54169] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Globy/error.php"] [unique_id "aTgHURG-g76drVdWQUVkuQAAAEA"]
[Tue Dec 09 19:26:11.099811 2025] [:error] [pid 30500:tid 30574] [client 140.99.1.43:23793] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Protostar/error.php"] [unique_id "aTgHU62eIIK3JPWHCXW_kgAAAZE"]
[Tue Dec 09 19:26:11.998906 2025] [:error] [pid 30499:tid 30536] [client 140.99.1.7:36329] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/hathor/error.php"] [unique_id "aTgHU00x3OqZTOPp7cncKgAAAUY"]
[Tue Dec 09 19:26:12.402760 2025] [:error] [pid 36456:tid 36472] [client 140.99.1.78:51293] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Atomic/error.php"] [unique_id "aTgHVB0pAnOyfXl_v40WOwAAAI4"]
[Tue Dec 09 19:26:13.203883 2025] [:error] [pid 30500:tid 30573] [client 140.99.1.17:59303] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/isis/error.php"] [unique_id "aTgHVa2eIIK3JPWHCXW_lQAAAZA"]
[Tue Dec 09 19:26:13.903618 2025] [:error] [pid 30499:tid 30535] [client 140.99.1.68:22623] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Hoxa/error.php"] [unique_id "aTgHVU0x3OqZTOPp7cncLgAAAUU"]
[Tue Dec 09 19:26:14.498356 2025] [:error] [pid 30499:tid 30548] [client 140.99.1.65:59101] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/BeginDot/error.php"] [unique_id "aTgHVk0x3OqZTOPp7cncMAAAAVI"]
[Tue Dec 09 19:26:15.091866 2025] [:error] [pid 30499:tid 30550] [client 140.99.1.65:49221] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Raees/index.php"] [unique_id "aTgHV00x3OqZTOPp7cncNAAAAVQ"]
[Tue Dec 09 19:26:15.717700 2025] [:error] [pid 36456:tid 36462] [client 140.99.1.30:65161] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/madeyourweb/error.php"] [unique_id "aTgHVx0pAnOyfXl_v40WQQAAAIQ"]
[Tue Dec 09 19:26:16.410259 2025] [:error] [pid 30591:tid 30608] [client 140.99.1.7:43933] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Binv/error.php"] [unique_id "aTgHWBG-g76drVdWQUVkuwAAAE4"]
[Tue Dec 09 19:26:16.802060 2025] [:error] [pid 30499:tid 30551] [client 140.99.1.37:53313] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez2/index.php"] [unique_id "aTgHWE0x3OqZTOPp7cncNQAAAVU"]
[Tue Dec 09 19:26:17.198495 2025] [:error] [pid 36456:tid 36467] [client 140.99.1.38:60019] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Atum/error.php"] [unique_id "aTgHWR0pAnOyfXl_v40WRwAAAIk"]
[Tue Dec 09 19:26:17.802793 2025] [:error] [pid 36456:tid 36465] [client 140.99.1.50:50121] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/protostar/error.php"] [unique_id "aTgHWR0pAnOyfXl_v40WSQAAAIc"]
[Tue Dec 09 19:26:19.115250 2025] [:error] [pid 30499:tid 30533] [client 140.99.1.16:33845] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez_20/error.php"] [unique_id "aTgHW00x3OqZTOPp7cncNgAAAUM"]
[Tue Dec 09 19:26:20.498948 2025] [:error] [pid 36456:tid 36476] [client 140.99.1.65:26367] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aTgHXB0pAnOyfXl_v40WTQAAAJI"]
[Tue Dec 09 19:26:21.297543 2025] [:error] [pid 5276:tid 5296] [client 140.99.1.9:60227] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "aTgHXUtSXwbewdwyu-1bmAAAANI"]
[Tue Dec 09 19:26:21.702537 2025] [:error] [pid 5276:tid 5284] [client 140.99.1.68:26743] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/protostar/index.php"] [unique_id "aTgHXUtSXwbewdwyu-1bmgAAAMY"]
[Tue Dec 09 19:26:22.102213 2025] [:error] [pid 30500:tid 30578] [client 140.99.1.50:25985] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Atum/index.php"] [unique_id "aTgHXq2eIIK3JPWHCXW_nwAAAZU"]
[Tue Dec 09 19:26:22.502509 2025] [:error] [pid 30500:tid 30580] [client 140.99.1.78:34187] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez3/error.php"] [unique_id "aTgHXq2eIIK3JPWHCXW_ogAAAZc"]
[Tue Dec 09 19:26:23.001105 2025] [:error] [pid 5276:tid 5293] [client 140.99.1.48:39821] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Hoxa/index.php"] [unique_id "aTgHX0tSXwbewdwyu-1bnwAAAM8"]
[Tue Dec 09 19:26:23.400082 2025] [:error] [pid 36456:tid 36466] [client 140.99.1.62:26037] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/isis/index.php"] [unique_id "aTgHXx0pAnOyfXl_v40WTgAAAIg"]
[Tue Dec 09 19:26:24.005489 2025] [:error] [pid 30498:tid 30526] [client 140.99.1.74:48829] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Aaika/error.php"] [unique_id "aTgHYB2mcZJQ5qP_RC0fcwAAABg"]
[Tue Dec 09 19:26:24.897183 2025] [:error] [pid 36456:tid 36469] [client 140.99.1.2:25049] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Binv/index.php"] [unique_id "aTgHYB0pAnOyfXl_v40WUAAAAIs"]
[Tue Dec 09 19:26:25.303531 2025] [:error] [pid 30591:tid 30615] [client 140.99.1.17:24783] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/JMart/error.php"] [unique_id "aTgHYRG-g76drVdWQUVkwAAAAFU"]
[Tue Dec 09 19:26:25.707415 2025] [:error] [pid 5276:tid 5279] [client 140.99.1.20:57965] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Cassiopeia/error.php"] [unique_id "aTgHYUtSXwbewdwyu-1boQAAAME"]
[Tue Dec 09 19:26:26.100666 2025] [:error] [pid 30499:tid 30544] [client 140.99.1.11:58817] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/atomic/index.php"] [unique_id "aTgHYk0x3OqZTOPp7cncPgAAAU4"]
[Tue Dec 09 19:26:27.298735 2025] [:error] [pid 30591:tid 30604] [client 140.99.1.16:47481] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez5/error.php"] [unique_id "aTgHYxG-g76drVdWQUVkxQAAAEo"]
[Tue Dec 09 19:26:28.613460 2025] [:error] [pid 30591:tid 30609] [client 140.99.1.74:42577] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Eatoreh/index.php"] [unique_id "aTgHZBG-g76drVdWQUVkyQAAAE8"]
[Tue Dec 09 19:26:29.495900 2025] [:error] [pid 30591:tid 30610] [client 140.99.1.52:28065] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/rhuk_milkyway/error.php"] [unique_id "aTgHZRG-g76drVdWQUVkzAAAAFA"]
[Tue Dec 09 19:26:29.900472 2025] [:error] [pid 30499:tid 30536] [client 140.99.1.16:63965] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/ja-helio-farsi/index.php"] [unique_id "aTgHZU0x3OqZTOPp7cncRAAAAUY"]
[Tue Dec 09 19:26:30.398759 2025] [:error] [pid 30500:tid 30565] [client 140.99.1.26:58241] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Aaika/index.php"] [unique_id "aTgHZq2eIIK3JPWHCXW_qAAAAYg"]
[Tue Dec 09 19:26:30.801669 2025] [:error] [pid 36456:tid 36460] [client 140.99.1.28:50603] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/hathor/index.php"] [unique_id "aTgHZh0pAnOyfXl_v40WUwAAAII"]
[Tue Dec 09 19:26:31.503149 2025] [:error] [pid 30498:tid 30505] [client 140.99.1.73:38493] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/madeyourweb/index.php"] [unique_id "aTgHZx2mcZJQ5qP_RC0fdwAAAAM"]
[Tue Dec 09 19:26:31.904114 2025] [:error] [pid 30499:tid 30535] [client 140.99.1.26:37607] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/hathor/index.php"] [unique_id "aTgHZ00x3OqZTOPp7cncRwAAAUU"]
[Tue Dec 09 19:26:32.404267 2025] [:error] [pid 30591:tid 30603] [client 140.99.1.70:36345] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Genius/error.php"] [unique_id "aTgHaBG-g76drVdWQUVkzwAAAEk"]
[Tue Dec 09 19:26:32.908031 2025] [:error] [pid 30591:tid 30598] [client 140.99.1.26:60367] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Atomic/index.php"] [unique_id "aTgHaBG-g76drVdWQUVk0AAAAEQ"]
[Tue Dec 09 19:26:33.501945 2025] [:error] [pid 30591:tid 30594] [client 140.99.1.75:59255] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Eatoreh/error.php"] [unique_id "aTgHaRG-g76drVdWQUVk0gAAAEA"]
[Tue Dec 09 19:26:34.197491 2025] [:error] [pid 5276:tid 5282] [client 140.99.1.2:27761] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/RiverS/error.php"] [unique_id "aTgHaktSXwbewdwyu-1bpQAAAMQ"]
[Tue Dec 09 19:26:34.597756 2025] [:error] [pid 5276:tid 5284] [client 140.99.1.76:31861] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/hathor/error.php"] [unique_id "aTgHaktSXwbewdwyu-1bpwAAAMY"]
[Tue Dec 09 19:26:35.400817 2025] [:error] [pid 30591:tid 30609] [client 140.99.1.78:22883] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/RiverS/index.php"] [unique_id "aTgHaxG-g76drVdWQUVk1QAAAE8"]
[Tue Dec 09 19:26:35.902727 2025] [:error] [pid 30499:tid 30537] [client 140.99.1.75:29205] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aTgHa00x3OqZTOPp7cncTAAAAUc"]
[Tue Dec 09 19:26:36.399494 2025] [:error] [pid 30591:tid 30610] [client 140.99.1.49:25713] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Yamato/error.php"] [unique_id "aTgHbBG-g76drVdWQUVk2AAAAFA"]
[Tue Dec 09 19:26:36.900982 2025] [:error] [pid 5276:tid 5283] [client 140.99.1.9:32819] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/JMart/index.php"] [unique_id "aTgHbEtSXwbewdwyu-1brAAAAMU"]
[Tue Dec 09 19:26:37.299833 2025] [:error] [pid 30499:tid 30541] [client 140.99.1.33:54325] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez/index.php"] [unique_id "aTgHbU0x3OqZTOPp7cncTwAAAUs"]
[Tue Dec 09 19:26:37.803047 2025] [:error] [pid 30499:tid 30540] [client 140.99.1.67:55647] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Cassiopeia/index.php"] [unique_id "aTgHbU0x3OqZTOPp7cncUQAAAUo"]
[Tue Dec 09 19:26:38.301625 2025] [:error] [pid 30499:tid 30532] [client 140.99.1.52:46375] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez5/error.php"] [unique_id "aTgHbk0x3OqZTOPp7cncUgAAAUI"]
[Tue Dec 09 19:26:38.699879 2025] [:error] [pid 30498:tid 30518] [client 140.99.1.48:23207] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Genius/index.php"] [unique_id "aTgHbh2mcZJQ5qP_RC0feQAAABA"]
[Tue Dec 09 19:26:39.108179 2025] [:error] [pid 30498:tid 30509] [client 140.99.1.16:36175] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez5/index.php"] [unique_id "aTgHbx2mcZJQ5qP_RC0fegAAAAc"]
[Tue Dec 09 19:26:39.503802 2025] [:error] [pid 30591:tid 30600] [client 140.99.1.53:20057] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Raees/error.php"] [unique_id "aTgHbxG-g76drVdWQUVk2gAAAEY"]
[Tue Dec 09 19:26:40.000050 2025] [:error] [pid 36456:tid 36462] [client 140.99.1.6:57115] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/BeginDot/index.php"] [unique_id "aTgHbx0pAnOyfXl_v40WXAAAAIQ"]
[Tue Dec 09 19:26:40.513698 2025] [:error] [pid 30500:tid 30561] [client 140.99.1.16:55885] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/rhuk_solarflare_ii/error.php"] [unique_id "aTgHcK2eIIK3JPWHCXW_sQAAAYQ"]
[Tue Dec 09 19:26:41.698726 2025] [:error] [pid 36456:tid 36466] [client 140.99.1.69:53879] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez2/error.php"] [unique_id "aTgHcR0pAnOyfXl_v40WXQAAAIg"]
[Tue Dec 09 19:26:43.703223 2025] [:error] [pid 30499:tid 30551] [client 140.99.1.43:24263] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "aTgHc00x3OqZTOPp7cncWwAAAVU"]
[Tue Dec 09 19:26:44.513341 2025] [:error] [pid 30591:tid 30614] [client 140.99.1.62:55177] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Jollyany/index.php"] [unique_id "aTgHdBG-g76drVdWQUVk4QAAAFQ"]
[Tue Dec 09 19:26:44.906487 2025] [:error] [pid 36456:tid 36479] [client 140.99.1.46:52503] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Jollyany/error.php"] [unique_id "aTgHdB0pAnOyfXl_v40WYQAAAJU"]
[Tue Dec 09 19:26:45.298906 2025] [:error] [pid 30591:tid 30595] [client 140.99.1.27:48867] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/ets_whatsapp/new.php"] [unique_id "aTgHdRG-g76drVdWQUVk5QAAAEE"]
[Tue Dec 09 19:26:45.701597 2025] [:error] [pid 30591:tid 30610] [client 140.99.1.13:51519] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aTgHdRG-g76drVdWQUVk5wAAAFA"]
[Tue Dec 09 19:26:46.301393 2025] [:error] [pid 30591:tid 30600] [client 140.99.1.7:65505] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aTgHdhG-g76drVdWQUVk6QAAAEY"]
[Tue Dec 09 19:26:46.701605 2025] [:error] [pid 30591:tid 30615] [client 140.99.1.37:63845] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "aTgHdhG-g76drVdWQUVk6gAAAFU"]
[Tue Dec 09 19:26:47.199071 2025] [:error] [pid 30498:tid 30519] [client 140.99.1.3:55499] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod%20ariimageslidersa/mod%20ariimageslidersa.php"] [unique_id "aTgHdx2mcZJQ5qP_RC0fgAAAABE"]
[Tue Dec 09 19:26:47.608389 2025] [:error] [pid 30499:tid 30539] [client 140.99.1.47:65371] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "aTgHd00x3OqZTOPp7cncYgAAAUk"]
[Tue Dec 09 19:26:48.200127 2025] [:error] [pid 36456:tid 36466] [client 140.99.1.14:44183] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_ju_articleslider/tmpl/admin.php"] [unique_id "aTgHeB0pAnOyfXl_v40WaQAAAIg"]
[Tue Dec 09 19:26:48.601633 2025] [:error] [pid 30498:tid 30507] [client 140.99.1.71:58765] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_rebug/library/index2.php"] [unique_id "aTgHeB2mcZJQ5qP_RC0fggAAAAU"]
[Tue Dec 09 19:26:49.003959 2025] [:error] [pid 30591:tid 30599] [client 140.99.1.24:52767] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_ariimageslidersa/mod_ariimageslidersa.php"] [unique_id "aTgHeRG-g76drVdWQUVk8AAAAEU"]
[Tue Dec 09 19:26:49.510260 2025] [:error] [pid 30498:tid 30523] [client 140.99.1.30:31411] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/modules/modules.php"] [unique_id "aTgHeR2mcZJQ5qP_RC0fhQAAABU"]
[Tue Dec 09 19:26:50.702440 2025] [:error] [pid 30591:tid 30616] [client 140.99.1.9:46799] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "aTgHehG-g76drVdWQUVk8QAAAFY"]
[Tue Dec 09 19:26:51.109713 2025] [:error] [pid 36456:tid 36463] [client 140.99.1.11:52941] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/sendinblue/mini.php"] [unique_id "aTgHex0pAnOyfXl_v40WbAAAAIU"]
[Tue Dec 09 19:26:51.805004 2025] [:error] [pid 36456:tid 36481] [client 140.99.1.49:59121] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vendor/htmlawed/htmlawed/gel4y.php"] [unique_id "aTgHex0pAnOyfXl_v40WbwAAAJc"]
[Tue Dec 09 19:26:52.499072 2025] [:error] [pid 30591:tid 30612] [client 140.99.1.14:36547] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/joomla/index.php"] [unique_id "aTgHfBG-g76drVdWQUVk8gAAAFI"]
[Tue Dec 09 19:26:52.905007 2025] [:error] [pid 30499:tid 30554] [client 140.99.1.43:31703] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vendor/composer/about.php"] [unique_id "aTgHfE0x3OqZTOPp7cncZwAAAVg"]
[Tue Dec 09 19:26:53.308867 2025] [:error] [pid 30498:tid 30525] [client 140.99.1.49:62323] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/components/com_newsfeeds/models/index.php"] [unique_id "aTgHfR2mcZJQ5qP_RC0fjQAAABc"]
[Tue Dec 09 19:26:53.806075 2025] [:error] [pid 30499:tid 30533] [client 140.99.1.31:34033] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vendor/composer/cache.php"] [unique_id "aTgHfU0x3OqZTOPp7cncaQAAAUM"]
[Tue Dec 09 19:26:54.210455 2025] [:error] [pid 36456:tid 36477] [client 140.99.1.13:36699] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aTgHfh0pAnOyfXl_v40WdgAAAJM"]
[Tue Dec 09 19:26:54.606923 2025] [:error] [pid 30498:tid 30510] [client 140.99.1.67:26029] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/joomla/jmail.php"] [unique_id "aTgHfh2mcZJQ5qP_RC0fjwAAAAg"]
[Tue Dec 09 19:26:54.997917 2025] [:error] [pid 30499:tid 30542] [client 140.99.1.50:31799] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/joomla/css.php"] [unique_id "aTgHfk0x3OqZTOPp7cncagAAAUw"]
[Tue Dec 09 19:26:55.710635 2025] [:error] [pid 36456:tid 36469] [client 140.99.1.49:46613] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/components/com_jbcatalog/libraries/jsupload/server/php/files/up.php"] [unique_id "aTgHfx0pAnOyfXl_v40WeQAAAIs"]
[Tue Dec 09 19:26:57.901679 2025] [:error] [pid 30499:tid 30539] [client 140.99.1.5:32399] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/index2.php"] [unique_id "aTgHgU0x3OqZTOPp7cncbQAAAUk"]
[Tue Dec 09 19:26:59.503848 2025] [:error] [pid 36456:tid 36465] [client 140.99.1.53:32571] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/language/english.php"] [unique_id "aTgHgx0pAnOyfXl_v40WfAAAAIc"]
[Tue Dec 09 19:27:00.000496 2025] [:error] [pid 30498:tid 30505] [client 140.99.1.17:21609] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aTgHgx2mcZJQ5qP_RC0flAAAAAM"]
[Tue Dec 09 19:27:00.503698 2025] [:error] [pid 30498:tid 30517] [client 140.99.1.26:32631] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aTgHhB2mcZJQ5qP_RC0flQAAAA8"]
[Tue Dec 09 19:27:01.207099 2025] [:error] [pid 5276:tid 5287] [client 140.99.1.17:37473] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aTgHhUtSXwbewdwyu-1bwAAAAMk"]
[Tue Dec 09 19:27:01.897545 2025] [:error] [pid 5276:tid 5289] [client 140.99.1.37:56823] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aTgHhUtSXwbewdwyu-1bwgAAAMs"]
[Tue Dec 09 19:27:02.510724 2025] [:error] [pid 30498:tid 30507] [client 140.99.1.49:42543] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/log.php"] [unique_id "aTgHhh2mcZJQ5qP_RC0fmQAAAAU"]
[Tue Dec 09 19:27:03.414542 2025] [:error] [pid 5276:tid 5280] [client 140.99.1.26:44433] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/include/student.php"] [unique_id "aTgHh0tSXwbewdwyu-1bxAAAAMI"]
[Tue Dec 09 19:27:05.313186 2025] [:error] [pid 36456:tid 36461] [client 140.99.1.38:44065] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/cache.php"] [unique_id "aTgHiR0pAnOyfXl_v40WfwAAAIM"]
[Tue Dec 09 19:27:05.905738 2025] [:error] [pid 30499:tid 30554] [client 140.99.1.75:24129] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/index.php"] [unique_id "aTgHiU0x3OqZTOPp7cnccQAAAVg"]
[Tue Dec 09 19:27:06.502667 2025] [:error] [pid 36456:tid 36458] [client 140.99.1.26:25979] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/controller/extension/extension/index.php"] [unique_id "aTgHih0pAnOyfXl_v40WgQAAAIA"]
[Tue Dec 09 19:27:07.099619 2025] [:error] [pid 5276:tid 5295] [client 140.99.1.37:47987] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/local/index.php"] [unique_id "aTgHi0tSXwbewdwyu-1bzAAAANE"]
[Tue Dec 09 19:27:07.915369 2025] [:error] [pid 30500:tid 30564] [client 140.99.1.16:33211] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes/classic/x.php"] [unique_id "aTgHi62eIIK3JPWHCXW_xAAAAYc"]
[Tue Dec 09 19:27:10.415144 2025] [:error] [pid 5276:tid 5302] [client 140.99.1.42:21067] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/adriv4.php"] [unique_id "aTgHjktSXwbewdwyu-1b0gAAANg"]
[Tue Dec 09 19:27:12.301338 2025] [:error] [pid 30500:tid 30564] [client 140.99.1.39:58503] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aTgHkK2eIIK3JPWHCXW_zwAAAYc"]
[Tue Dec 09 19:27:12.799228 2025] [:error] [pid 36456:tid 36480] [client 140.99.1.32:34909] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sites/default/files/index.php"] [unique_id "aTgHkB0pAnOyfXl_v40WkAAAAJY"]
[Tue Dec 09 19:27:13.413687 2025] [:error] [pid 30500:tid 30560] [client 140.99.1.37:35465] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/local/moodle_webshell/index.php"] [unique_id "aTgHka2eIIK3JPWHCXW_0wAAAYM"]
[Tue Dec 09 19:27:14.104093 2025] [:error] [pid 30498:tid 30512] [client 140.99.1.39:55223] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/wp-domain.php"] [unique_id "aTgHkh2mcZJQ5qP_RC0fswAAAAo"]
[Tue Dec 09 19:27:15.310085 2025] [:error] [pid 30499:tid 30542] [client 140.99.1.6:20737] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/setting-api.php"] [unique_id "aTgHk00x3OqZTOPp7cncdgAAAUw"]
[Tue Dec 09 19:53:49.228804 2025] [:error] [pid 30498:tid 30515] [client 35.192.77.233:57900] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTgNzR2mcZJQ5qP_RC0mxQAAAA0"]
[Tue Dec 09 19:53:49.662335 2025] [:error] [pid 36456:tid 36482] [client 35.192.77.233:55490] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTgNzR0pAnOyfXl_v40dbgAAAJg"]
[Tue Dec 09 19:53:50.071690 2025] [:error] [pid 5276:tid 5279] [client 35.192.77.233:61183] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzktSXwbewdwyu-1jCAAAAME"]
[Tue Dec 09 20:49:12.480257 2025] [:error] [pid 30591:tid 30598] [client 64.225.28.111:60782] [client 64.225.28.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.225.28.111, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTgayBG-g76drVdWQUWAJAAAAEQ"]
[Tue Dec 09 20:49:24.291350 2025] [:error] [pid 30591:tid 30617] [client 64.225.28.111:60782] [client 64.225.28.111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTga1BG-g76drVdWQUWARAAAAFc"]
[Tue Dec 09 20:49:27.101380 2025] [:error] [pid 30591:tid 30596] [client 64.225.28.111:60782] [client 64.225.28.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.225.28.111, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTga1xG-g76drVdWQUWARwAAAEI"]
[Tue Dec 09 20:49:27.104444 2025] [:error] [pid 30591:tid 30596] [client 64.225.28.111:60782] [client 64.225.28.111] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTga1xG-g76drVdWQUWARwAAAEI"]
[Tue Dec 09 20:49:27.106293 2025] [:error] [pid 30591:tid 30596] [client 64.225.28.111:60782] [client 64.225.28.111] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||makifim.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTga1xG-g76drVdWQUWARwAAAEI"]
[Tue Dec 09 20:49:32.072644 2025] [:error] [pid 30498:tid 30503] [client 64.225.28.111:56380] [client 64.225.28.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.225.28.111, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTga3B2mcZJQ5qP_RC046wAAAAE"]
[Tue Dec 09 21:31:36.065748 2025] [:error] [pid 5276:tid 5298] [client 34.139.148.19:51785] [client 34.139.148.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.148.19, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTgkuEtSXwbewdwyu-2BrQAAANQ"]
[Tue Dec 09 21:31:41.146410 2025] [:error] [pid 5276:tid 5284] [client 34.139.148.19:51785] [client 34.139.148.19] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTgkvUtSXwbewdwyu-2BtAAAAMY"]
[Tue Dec 09 21:31:43.026847 2025] [:error] [pid 5276:tid 5281] [client 34.139.148.19:51785] [client 34.139.148.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.148.19, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTgkv0tSXwbewdwyu-2BuwAAAMM"]
[Wed Dec 10 01:00:01.996738 2025] [:error] [pid 2366:tid 2372] [client 20.78.180.119:7120] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/article.php"] [unique_id "aThVkUAeBjkmsNRkd1NPJQAAAMQ"]
[Wed Dec 10 01:00:02.931353 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:7152] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/article.php"] [unique_id "aThVkkAeBjkmsNRkd1NPKAAAAMM"]
[Wed Dec 10 01:00:05.105777 2025] [:error] [pid 2279:tid 2330] [client 20.78.180.119:7132] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/article.php"] [unique_id "aThVlVmpdQscMcJOElWgpQAAAVQ"]
[Wed Dec 10 01:00:06.555871 2025] [:error] [pid 2279:tid 2317] [client 20.78.180.119:7052] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/article.php"] [unique_id "aThVllmpdQscMcJOElWgrAAAAUc"]
[Wed Dec 10 01:00:09.907278 2025] [:error] [pid 2280:tid 2338] [client 20.78.180.119:7128] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efile.php"] [unique_id "aThVmXcqIB-8ALgw4ZpBuwAAAIE"]
[Wed Dec 10 01:00:11.734584 2025] [:error] [pid 2279:tid 2326] [client 20.78.180.119:7112] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efile.php"] [unique_id "aThVm1mpdQscMcJOElWgtwAAAVA"]
[Wed Dec 10 01:00:12.602759 2025] [:error] [pid 2280:tid 2346] [client 20.78.180.119:7121] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efile.php"] [unique_id "aThVnHcqIB-8ALgw4ZpBwQAAAIk"]
[Wed Dec 10 01:00:18.451880 2025] [:error] [pid 2277:tid 2297] [client 20.78.180.119:7166] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efile.php"] [unique_id "aThVooWGo731r6eS-w5JtQAAAA4"]
[Wed Dec 10 01:00:21.032160 2025] [:error] [pid 2277:tid 2289] [client 20.78.180.119:7117] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wui.php"] [unique_id "aThVpYWGo731r6eS-w5JvgAAAAc"]
[Wed Dec 10 01:00:22.383650 2025] [:error] [pid 2366:tid 2373] [client 20.78.180.119:7138] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wui.php"] [unique_id "aThVpkAeBjkmsNRkd1NPYQAAAMU"]
[Wed Dec 10 01:00:23.842000 2025] [:error] [pid 2277:tid 2307] [client 20.78.180.119:7053] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wui.php"] [unique_id "aThVp4WGo731r6eS-w5JywAAABg"]
[Wed Dec 10 01:00:26.915767 2025] [:error] [pid 2366:tid 2369] [client 20.78.180.119:7114] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wui.php"] [unique_id "aThVqkAeBjkmsNRkd1NPdQAAAME"]
[Wed Dec 10 01:00:28.366460 2025] [:error] [pid 2277:tid 2283] [client 20.78.180.119:7105] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgn.php"] [unique_id "aThVrIWGo731r6eS-w5J2wAAAAE"]
[Wed Dec 10 01:00:31.632334 2025] [:error] [pid 2280:tid 2346] [client 20.78.180.119:7071] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgn.php"] [unique_id "aThVr3cqIB-8ALgw4ZpCBwAAAIk"]
[Wed Dec 10 01:00:34.327010 2025] [:error] [pid 37041:tid 37046] [client 20.78.180.119:7135] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgn.php"] [unique_id "aThVsruffDW8UzBwa1aheQAAAEM"]
[Wed Dec 10 01:00:36.835389 2025] [:error] [pid 37041:tid 37058] [client 20.78.180.119:7164] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgn.php"] [unique_id "aThVtLuffDW8UzBwa1ahfAAAAE8"]
[Wed Dec 10 01:00:39.571395 2025] [:error] [pid 2277:tid 2293] [client 20.78.180.119:7143] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "aThVt4WGo731r6eS-w5J6AAAAAo"]
[Wed Dec 10 01:00:40.619374 2025] [:error] [pid 2366:tid 2386] [client 20.78.180.119:7142] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "aThVuEAeBjkmsNRkd1NPigAAANI"]
[Wed Dec 10 01:00:42.178628 2025] [:error] [pid 2366:tid 2372] [client 20.78.180.119:7130] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "aThVukAeBjkmsNRkd1NPjgAAAMQ"]
[Wed Dec 10 01:00:45.609740 2025] [:error] [pid 2280:tid 2339] [client 20.78.180.119:7055] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "aThVvXcqIB-8ALgw4ZpCFgAAAII"]
[Wed Dec 10 01:00:48.844318 2025] [:error] [pid 2277:tid 2302] [client 20.78.180.119:7043] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/spk.php"] [unique_id "aThVwIWGo731r6eS-w5J8QAAABM"]
[Wed Dec 10 01:00:52.947582 2025] [:error] [pid 2366:tid 2374] [client 20.78.180.119:7155] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/spk.php"] [unique_id "aThVxEAeBjkmsNRkd1NPogAAAMY"]
[Wed Dec 10 01:00:54.703385 2025] [:error] [pid 37041:tid 37061] [client 20.78.180.119:7162] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/spk.php"] [unique_id "aThVxruffDW8UzBwa1ahlgAAAFI"]
[Wed Dec 10 01:00:56.061660 2025] [:error] [pid 37041:tid 37067] [client 20.78.180.119:7140] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/spk.php"] [unique_id "aThVyLuffDW8UzBwa1ahmAAAAFg"]
[Wed Dec 10 01:00:56.860169 2025] [:error] [pid 37041:tid 37055] [client 20.78.180.119:7153] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/log.php"] [unique_id "aThVyLuffDW8UzBwa1ahmQAAAEw"]
[Wed Dec 10 01:03:31.231938 2025] [:error] [pid 37041:tid 37050] [client 20.78.180.119:7146] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aThWY7uffDW8UzBwa1ai5gAAAEc"]
[Wed Dec 10 01:03:32.909088 2025] [:error] [pid 37041:tid 37054] [client 20.78.180.119:7046] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aThWZLuffDW8UzBwa1ai6QAAAEs"]
[Wed Dec 10 01:03:35.907527 2025] [:error] [pid 2280:tid 2358] [client 20.78.180.119:7104] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aThWZ3cqIB-8ALgw4ZpERwAAAJU"]
[Wed Dec 10 01:03:37.418966 2025] [:error] [pid 2279:tid 2325] [client 20.78.180.119:7060] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aThWaVmpdQscMcJOElWj3wAAAU8"]
[Wed Dec 10 01:03:39.603680 2025] [:error] [pid 2277:tid 2305] [client 20.78.180.119:7160] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haf.php"] [unique_id "aThWa4WGo731r6eS-w5L9wAAABY"]
[Wed Dec 10 01:03:40.300653 2025] [:error] [pid 37041:tid 37058] [client 20.78.180.119:7077] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haf.php"] [unique_id "aThWbLuffDW8UzBwa1ai-gAAAE8"]
[Wed Dec 10 01:03:41.067157 2025] [:error] [pid 2280:tid 2356] [client 20.78.180.119:7148] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haf.php"] [unique_id "aThWbXcqIB-8ALgw4ZpEWgAAAJM"]
[Wed Dec 10 01:03:42.289617 2025] [:error] [pid 2277:tid 2285] [client 20.78.180.119:7079] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haf.php"] [unique_id "aThWboWGo731r6eS-w5MAQAAAAM"]
[Wed Dec 10 01:03:44.389162 2025] [:error] [pid 2366:tid 2374] [client 20.78.180.119:7159] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aThWcEAeBjkmsNRkd1NSOQAAAMY"]
[Wed Dec 10 01:03:46.571138 2025] [:error] [pid 2280:tid 2343] [client 20.78.180.119:6988] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aThWcncqIB-8ALgw4ZpEcgAAAIY"]
[Wed Dec 10 01:03:50.918371 2025] [:error] [pid 2277:tid 2294] [client 20.78.180.119:7123] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aThWdoWGo731r6eS-w5MHAAAAAs"]
[Wed Dec 10 01:03:53.429536 2025] [:error] [pid 2277:tid 2307] [client 20.78.180.119:7032] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aThWeYWGo731r6eS-w5MIgAAABg"]
[Wed Dec 10 01:03:57.579968 2025] [:error] [pid 2280:tid 2348] [client 20.78.180.119:7068] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error.php"] [unique_id "aThWfXcqIB-8ALgw4ZpEmgAAAIs"]
[Wed Dec 10 01:03:59.428323 2025] [:error] [pid 2366:tid 2379] [client 20.78.180.119:7109] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error.php"] [unique_id "aThWf0AeBjkmsNRkd1NSewAAAMs"]
[Wed Dec 10 01:04:02.989450 2025] [:error] [pid 2280:tid 2356] [client 20.78.180.119:7102] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error.php"] [unique_id "aThWgncqIB-8ALgw4ZpEuwAAAJM"]
[Wed Dec 10 01:04:05.082679 2025] [:error] [pid 37041:tid 37048] [client 20.78.180.119:7118] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error.php"] [unique_id "aThWhbuffDW8UzBwa1ajMgAAAEU"]
[Wed Dec 10 01:04:07.935482 2025] [:error] [pid 2366:tid 2383] [client 20.78.180.119:6977] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eru.php"] [unique_id "aThWh0AeBjkmsNRkd1NSnAAAAM8"]
[Wed Dec 10 01:04:12.235777 2025] [:error] [pid 2280:tid 2354] [client 20.78.180.119:7113] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eru.php"] [unique_id "aThWjHcqIB-8ALgw4ZpE9QAAAJE"]
[Wed Dec 10 01:04:13.050891 2025] [:error] [pid 37041:tid 37062] [client 20.78.180.119:7056] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eru.php"] [unique_id "aThWjbuffDW8UzBwa1ajRwAAAFM"]
[Wed Dec 10 01:04:14.099942 2025] [:error] [pid 2277:tid 2305] [client 20.78.180.119:7048] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eru.php"] [unique_id "aThWjoWGo731r6eS-w5MTwAAABY"]
[Wed Dec 10 01:04:15.963795 2025] [:error] [pid 2277:tid 2291] [client 20.78.180.119:7090] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aThWj4WGo731r6eS-w5MWAAAAAk"]
[Wed Dec 10 01:04:16.879073 2025] [:error] [pid 2366:tid 2384] [client 20.78.180.119:7108] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aThWkEAeBjkmsNRkd1NSuAAAANA"]
[Wed Dec 10 01:04:18.023914 2025] [:error] [pid 2279:tid 2310] [client 20.78.180.119:7167] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aThWklmpdQscMcJOElWkJgAAAUA"]
[Wed Dec 10 01:04:20.162316 2025] [:error] [pid 2280:tid 2355] [client 20.78.180.119:6984] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aThWlHcqIB-8ALgw4ZpFIwAAAJI"]
[Wed Dec 10 01:04:22.338928 2025] [:error] [pid 2279:tid 2327] [client 20.78.180.119:7103] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsx.php"] [unique_id "aThWllmpdQscMcJOElWkLwAAAVE"]
[Wed Dec 10 01:04:24.178773 2025] [:error] [pid 2366:tid 2382] [client 20.78.180.119:7089] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsx.php"] [unique_id "aThWmEAeBjkmsNRkd1NSzQAAAM4"]
[Wed Dec 10 01:04:25.710311 2025] [:error] [pid 2277:tid 2293] [client 20.78.180.119:7165] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsx.php"] [unique_id "aThWmYWGo731r6eS-w5MgQAAAAo"]
[Wed Dec 10 01:04:26.798325 2025] [:error] [pid 2277:tid 2300] [client 20.78.180.119:7151] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsx.php"] [unique_id "aThWmoWGo731r6eS-w5MhAAAABE"]
[Wed Dec 10 01:06:37.507577 2025] [:error] [pid 37041:tid 37061] [client 20.78.180.119:7152] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/888.php"] [unique_id "aThXHbuffDW8UzBwa1akRwAAAFI"]
[Wed Dec 10 01:06:39.029637 2025] [:error] [pid 2279:tid 2334] [client 20.78.180.119:7112] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/888.php"] [unique_id "aThXH1mpdQscMcJOElWl4QAAAVg"]
[Wed Dec 10 01:06:41.898611 2025] [:error] [pid 2279:tid 2316] [client 20.78.180.119:7135] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/888.php"] [unique_id "aThXIVmpdQscMcJOElWl5gAAAUY"]
[Wed Dec 10 01:06:45.072761 2025] [:error] [pid 2366:tid 2383] [client 20.78.180.119:7143] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/888.php"] [unique_id "aThXJUAeBjkmsNRkd1NUTgAAAM8"]
[Wed Dec 10 01:06:48.252144 2025] [:error] [pid 2366:tid 2370] [client 20.78.180.119:7044] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rei.php"] [unique_id "aThXKEAeBjkmsNRkd1NUVwAAAMI"]
[Wed Dec 10 01:06:52.831128 2025] [:error] [pid 2279:tid 2326] [client 20.78.180.119:7121] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rei.php"] [unique_id "aThXLFmpdQscMcJOElWl9gAAAVA"]
[Wed Dec 10 01:06:56.369613 2025] [:error] [pid 2277:tid 2304] [client 20.78.180.119:7163] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rei.php"] [unique_id "aThXMIWGo731r6eS-w5NuwAAABU"]
[Wed Dec 10 01:06:59.195022 2025] [:error] [pid 2279:tid 2327] [client 20.78.180.119:7138] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rei.php"] [unique_id "aThXM1mpdQscMcJOElWl_wAAAVE"]
[Wed Dec 10 01:07:01.746704 2025] [:error] [pid 2277:tid 2306] [client 20.78.180.119:7119] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file3.php"] [unique_id "aThXNYWGo731r6eS-w5NxQAAABc"]
[Wed Dec 10 01:07:03.075750 2025] [:error] [pid 2280:tid 2338] [client 20.78.180.119:7042] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file3.php"] [unique_id "aThXN3cqIB-8ALgw4ZpHEQAAAIE"]
[Wed Dec 10 01:07:03.981393 2025] [:error] [pid 2366:tid 2387] [client 20.78.180.119:7140] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file3.php"] [unique_id "aThXN0AeBjkmsNRkd1NUbwAAANM"]
[Wed Dec 10 01:07:05.049877 2025] [:error] [pid 2366:tid 2389] [client 20.78.180.119:7055] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file3.php"] [unique_id "aThXOUAeBjkmsNRkd1NUcAAAANU"]
[Wed Dec 10 01:07:06.669833 2025] [:error] [pid 2279:tid 2333] [client 20.78.180.119:7142] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nok.php"] [unique_id "aThXOlmpdQscMcJOElWmBAAAAVc"]
[Wed Dec 10 01:07:07.909872 2025] [:error] [pid 2280:tid 2342] [client 20.78.180.119:7161] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nok.php"] [unique_id "aThXO3cqIB-8ALgw4ZpHGQAAAIU"]
[Wed Dec 10 01:07:09.795185 2025] [:error] [pid 2279:tid 2325] [client 20.78.180.119:6998] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nok.php"] [unique_id "aThXPVmpdQscMcJOElWmCQAAAU8"]
[Wed Dec 10 01:07:11.876712 2025] [:error] [pid 2277:tid 2303] [client 20.78.180.119:7156] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nok.php"] [unique_id "aThXP4WGo731r6eS-w5N3AAAABQ"]
[Wed Dec 10 01:07:13.160040 2025] [:error] [pid 2277:tid 2301] [client 20.78.180.119:7051] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asgtt.php"] [unique_id "aThXQYWGo731r6eS-w5N4QAAABI"]
[Wed Dec 10 01:07:14.120155 2025] [:error] [pid 37041:tid 37054] [client 20.78.180.119:7130] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asgtt.php"] [unique_id "aThXQruffDW8UzBwa1akjgAAAEs"]
[Wed Dec 10 01:07:15.058387 2025] [:error] [pid 2280:tid 2358] [client 20.78.180.119:7083] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asgtt.php"] [unique_id "aThXQ3cqIB-8ALgw4ZpHIwAAAJU"]
[Wed Dec 10 01:07:16.926301 2025] [:error] [pid 2366:tid 2388] [client 20.78.180.119:7052] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asgtt.php"] [unique_id "aThXREAeBjkmsNRkd1NUhwAAANQ"]
[Wed Dec 10 01:07:19.276411 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:6980] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d57.php"] [unique_id "aThXR0AeBjkmsNRkd1NUjQAAAMM"]
[Wed Dec 10 01:07:21.381241 2025] [:error] [pid 2366:tid 2381] [client 20.78.180.119:7058] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d57.php"] [unique_id "aThXSUAeBjkmsNRkd1NUkAAAAM0"]
[Wed Dec 10 01:07:22.661811 2025] [:error] [pid 2366:tid 2382] [client 20.78.180.119:7144] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d57.php"] [unique_id "aThXSkAeBjkmsNRkd1NUkgAAAM4"]
[Wed Dec 10 01:07:24.019291 2025] [:error] [pid 2280:tid 2344] [client 20.78.180.119:7122] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d57.php"] [unique_id "aThXTHcqIB-8ALgw4ZpHRwAAAIc"]
[Wed Dec 10 01:07:28.387759 2025] [:error] [pid 2277:tid 2282] [client 20.78.180.119:7150] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aThXUIWGo731r6eS-w5N7gAAAAA"]
[Wed Dec 10 01:07:31.124745 2025] [:error] [pid 2279:tid 2321] [client 20.78.180.119:7007] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aThXU1mpdQscMcJOElWmOQAAAUs"]
[Wed Dec 10 01:07:32.819504 2025] [:error] [pid 2366:tid 2392] [client 20.78.180.119:7071] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aThXVEAeBjkmsNRkd1NUuwAAANg"]
[Wed Dec 10 01:09:52.345213 2025] [:error] [pid 37041:tid 37050] [client 20.78.180.119:7111] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aThX4LuffDW8UzBwa1al1QAAAEc"]
[Wed Dec 10 01:09:53.636801 2025] [:error] [pid 2366:tid 2388] [client 20.78.180.119:7114] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aThX4UAeBjkmsNRkd1NWUwAAANQ"]
[Wed Dec 10 01:09:56.102292 2025] [:error] [pid 37041:tid 37056] [client 20.78.180.119:7167] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aThX5LuffDW8UzBwa1al3gAAAE0"]
[Wed Dec 10 01:09:56.824541 2025] [:error] [pid 2280:tid 2349] [client 20.78.180.119:7074] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aThX5HcqIB-8ALgw4ZpIvwAAAIw"]
[Wed Dec 10 01:10:00.234783 2025] [:error] [pid 2279:tid 2320] [client 20.78.180.119:7105] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/73106.php"] [unique_id "aThX6FmpdQscMcJOElWnewAAAUo"]
[Wed Dec 10 01:10:01.144410 2025] [:error] [pid 2280:tid 2348] [client 20.78.180.119:7125] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/73106.php"] [unique_id "aThX6XcqIB-8ALgw4ZpIyAAAAIs"]
[Wed Dec 10 01:10:04.013943 2025] [:error] [pid 2279:tid 2313] [client 20.78.180.119:7073] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/73106.php"] [unique_id "aThX7FmpdQscMcJOElWngAAAAUM"]
[Wed Dec 10 01:10:06.095465 2025] [:error] [pid 2366:tid 2376] [client 20.78.180.119:6983] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/73106.php"] [unique_id "aThX7kAeBjkmsNRkd1NWbAAAAMg"]
[Wed Dec 10 01:10:07.709625 2025] [:error] [pid 2280:tid 2341] [client 20.78.180.119:7124] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv.php"] [unique_id "aThX73cqIB-8ALgw4ZpI1wAAAIQ"]
[Wed Dec 10 01:10:10.573881 2025] [:error] [pid 37041:tid 37059] [client 20.78.180.119:7064] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv.php"] [unique_id "aThX8ruffDW8UzBwa1amLgAAAFA"]
[Wed Dec 10 01:10:11.742241 2025] [:error] [pid 2366:tid 2383] [client 20.78.180.119:7131] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv.php"] [unique_id "aThX80AeBjkmsNRkd1NWhgAAAM8"]
[Wed Dec 10 01:10:13.984564 2025] [:error] [pid 2277:tid 2294] [client 20.78.180.119:7157] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv.php"] [unique_id "aThX9YWGo731r6eS-w5PewAAAAs"]
[Wed Dec 10 01:10:14.929034 2025] [:error] [pid 2277:tid 2303] [client 20.78.180.119:7077] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yanki.php"] [unique_id "aThX9oWGo731r6eS-w5PfAAAABQ"]
[Wed Dec 10 01:10:16.368091 2025] [:error] [pid 2279:tid 2318] [client 20.78.180.119:7095] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yanki.php"] [unique_id "aThX-FmpdQscMcJOElWnngAAAUg"]
[Wed Dec 10 01:10:17.448515 2025] [:error] [pid 2277:tid 2286] [client 20.78.180.119:7117] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yanki.php"] [unique_id "aThX-YWGo731r6eS-w5PfwAAAAQ"]
[Wed Dec 10 01:10:19.151982 2025] [:error] [pid 2280:tid 2346] [client 20.78.180.119:7059] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yanki.php"] [unique_id "aThX-3cqIB-8ALgw4ZpI-QAAAIk"]
[Wed Dec 10 01:10:19.762271 2025] [:error] [pid 2366:tid 2370] [client 20.78.180.119:7090] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ouh.php"] [unique_id "aThX-0AeBjkmsNRkd1NWjwAAAMI"]
[Wed Dec 10 01:10:21.726757 2025] [:error] [pid 2280:tid 2352] [client 20.78.180.119:7155] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ouh.php"] [unique_id "aThX_XcqIB-8ALgw4ZpJBAAAAI8"]
[Wed Dec 10 01:10:23.017630 2025] [:error] [pid 2279:tid 2331] [client 20.78.180.119:6986] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ouh.php"] [unique_id "aThX_1mpdQscMcJOElWnqAAAAVU"]
[Wed Dec 10 01:10:24.271986 2025] [:error] [pid 2366:tid 2392] [client 20.78.180.119:7118] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ouh.php"] [unique_id "aThYAEAeBjkmsNRkd1NWlQAAANg"]
[Wed Dec 10 01:10:24.980607 2025] [:error] [pid 37041:tid 37056] [client 20.78.180.119:7162] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/555.php"] [unique_id "aThYALuffDW8UzBwa1amXgAAAE0"]
[Wed Dec 10 01:10:26.450186 2025] [:error] [pid 2277:tid 2301] [client 20.78.180.119:7165] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/555.php"] [unique_id "aThYAoWGo731r6eS-w5PiwAAABI"]
[Wed Dec 10 01:10:27.153323 2025] [:error] [pid 2280:tid 2354] [client 20.78.180.119:7120] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/555.php"] [unique_id "aThYA3cqIB-8ALgw4ZpJCgAAAJE"]
[Wed Dec 10 01:10:28.773967 2025] [:error] [pid 37041:tid 37052] [client 20.78.180.119:7153] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/555.php"] [unique_id "aThYBLuffDW8UzBwa1amYgAAAEk"]
[Wed Dec 10 01:10:34.714061 2025] [:error] [pid 2277:tid 2282] [client 20.78.180.119:7088] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dlu.php"] [unique_id "aThYCoWGo731r6eS-w5PkwAAAAA"]
[Wed Dec 10 01:10:36.170825 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:7040] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dlu.php"] [unique_id "aThYDEAeBjkmsNRkd1NWpgAAAMM"]
[Wed Dec 10 01:10:37.089681 2025] [:error] [pid 2277:tid 2306] [client 20.78.180.119:6981] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dlu.php"] [unique_id "aThYDYWGo731r6eS-w5PlgAAABc"]
[Wed Dec 10 01:10:38.302848 2025] [:error] [pid 2366:tid 2374] [client 20.78.180.119:7062] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dlu.php"] [unique_id "aThYDkAeBjkmsNRkd1NWqwAAAMY"]
[Wed Dec 10 01:10:44.652785 2025] [:error] [pid 37041:tid 37051] [client 20.78.180.119:7100] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dds.php"] [unique_id "aThYFLuffDW8UzBwa1amagAAAEg"]
[Wed Dec 10 01:11:52.276617 2025] [:error] [pid 2279:tid 2320] [client 20.78.180.119:7104] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-freya.php"] [unique_id "aThYWFmpdQscMcJOElWoHwAAAUo"]
[Wed Dec 10 01:11:57.461208 2025] [:error] [pid 2279:tid 2328] [client 20.78.180.119:7115] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-freya.php"] [unique_id "aThYXVmpdQscMcJOElWoJAAAAVI"]
[Wed Dec 10 01:12:00.271164 2025] [:error] [pid 37041:tid 37057] [client 20.78.180.119:7163] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-freya.php"] [unique_id "aThYYLuffDW8UzBwa1amygAAAE4"]
[Wed Dec 10 01:12:04.253848 2025] [:error] [pid 2279:tid 2318] [client 20.78.180.119:7149] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-freya.php"] [unique_id "aThYZFmpdQscMcJOElWoJgAAAUg"]
[Wed Dec 10 01:12:04.873912 2025] [:error] [pid 37041:tid 37059] [client 20.78.180.119:7054] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2%25.php"] [unique_id "aThYZLuffDW8UzBwa1amzQAAAFA"]
[Wed Dec 10 01:12:07.521603 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:7072] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2%25.php"] [unique_id "aThYZ0AeBjkmsNRkd1NXTAAAAMM"]
[Wed Dec 10 01:12:08.384384 2025] [:error] [pid 2366:tid 2382] [client 20.78.180.119:7102] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2%25.php"] [unique_id "aThYaEAeBjkmsNRkd1NXTgAAAM4"]
[Wed Dec 10 01:12:09.637494 2025] [:error] [pid 2279:tid 2315] [client 20.78.180.119:7108] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2%25.php"] [unique_id "aThYaVmpdQscMcJOElWoMAAAAUU"]
[Wed Dec 10 01:12:13.279406 2025] [:error] [pid 2280:tid 2359] [client 20.78.180.119:7141] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aThYbXcqIB-8ALgw4ZpJoQAAAJY"]
[Wed Dec 10 01:12:14.933133 2025] [:error] [pid 2277:tid 2299] [client 20.78.180.119:7080] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aThYboWGo731r6eS-w5P5gAAABA"]
[Wed Dec 10 01:12:16.582842 2025] [:error] [pid 2366:tid 2368] [client 20.78.180.119:7146] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aThYcEAeBjkmsNRkd1NXYwAAAMA"]
[Wed Dec 10 01:12:27.352384 2025] [:error] [pid 37041:tid 37059] [client 20.78.180.119:7044] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/faq.php"] [unique_id "aThYe7uffDW8UzBwa1am5AAAAFA"]
[Wed Dec 10 01:12:28.150092 2025] [:error] [pid 37041:tid 37065] [client 20.78.180.119:7049] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/faq.php"] [unique_id "aThYfLuffDW8UzBwa1am5gAAAFY"]
[Wed Dec 10 01:12:29.336332 2025] [:error] [pid 37041:tid 37058] [client 20.78.180.119:6997] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/faq.php"] [unique_id "aThYfbuffDW8UzBwa1am7QAAAE8"]
[Wed Dec 10 01:12:30.823048 2025] [:error] [pid 2366:tid 2368] [client 20.78.180.119:7056] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/faq.php"] [unique_id "aThYfkAeBjkmsNRkd1NXcwAAAMA"]
[Wed Dec 10 01:12:31.609909 2025] [:error] [pid 2280:tid 2355] [client 20.78.180.119:7140] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x3.php"] [unique_id "aThYf3cqIB-8ALgw4ZpJtgAAAJI"]
[Wed Dec 10 01:12:35.343477 2025] [:error] [pid 2277:tid 2284] [client 20.78.180.119:7057] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x3.php"] [unique_id "aThYg4WGo731r6eS-w5QEQAAAAI"]
[Wed Dec 10 01:12:36.982378 2025] [:error] [pid 2280:tid 2351] [client 20.78.180.119:7127] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x3.php"] [unique_id "aThYhHcqIB-8ALgw4ZpJxAAAAI4"]
[Wed Dec 10 01:12:38.325961 2025] [:error] [pid 2280:tid 2345] [client 20.78.180.119:7076] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x3.php"] [unique_id "aThYhncqIB-8ALgw4ZpJyQAAAIg"]
[Wed Dec 10 01:12:39.828088 2025] [:error] [pid 37041:tid 37060] [client 20.78.180.119:7116] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nbr.php"] [unique_id "aThYh7uffDW8UzBwa1am-wAAAFE"]
[Wed Dec 10 01:12:41.775045 2025] [:error] [pid 2280:tid 2353] [client 20.78.180.119:7147] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nbr.php"] [unique_id "aThYiXcqIB-8ALgw4ZpJzAAAAJA"]
[Wed Dec 10 01:12:45.209046 2025] [:error] [pid 2277:tid 2306] [client 20.78.180.119:7109] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nbr.php"] [unique_id "aThYjYWGo731r6eS-w5QKQAAABc"]
[Wed Dec 10 01:12:46.897619 2025] [:error] [pid 37041:tid 37060] [client 20.78.180.119:7133] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nbr.php"] [unique_id "aThYjruffDW8UzBwa1anBAAAAFE"]
[Wed Dec 10 01:12:47.852364 2025] [:error] [pid 2279:tid 2311] [client 20.78.180.119:7159] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lov.php"] [unique_id "aThYj1mpdQscMcJOElWoWgAAAUE"]
[Wed Dec 10 01:12:49.512769 2025] [:error] [pid 2279:tid 2325] [client 20.78.180.119:7152] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lov.php"] [unique_id "aThYkVmpdQscMcJOElWoXAAAAU8"]
[Wed Dec 10 01:14:37.750121 2025] [:error] [pid 2280:tid 2339] [client 20.78.180.119:7047] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thoms.php"] [unique_id "aThY_XcqIB-8ALgw4ZpKuAAAAII"]
[Wed Dec 10 01:14:38.663726 2025] [:error] [pid 2279:tid 2318] [client 20.78.180.119:7074] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thoms.php"] [unique_id "aThY_lmpdQscMcJOElWo4AAAAUg"]
[Wed Dec 10 01:14:39.463059 2025] [:error] [pid 2277:tid 2299] [client 20.78.180.119:7120] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thoms.php"] [unique_id "aThY_4WGo731r6eS-w5RCAAAABA"]
[Wed Dec 10 01:14:40.226304 2025] [:error] [pid 37041:tid 37055] [client 20.78.180.119:7167] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thoms.php"] [unique_id "aThZALuffDW8UzBwa1anhQAAAEw"]
[Wed Dec 10 01:14:41.704563 2025] [:error] [pid 2366:tid 2379] [client 20.78.180.119:7128] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aThZAUAeBjkmsNRkd1NYfQAAAMs"]
[Wed Dec 10 01:14:42.573122 2025] [:error] [pid 2366:tid 2368] [client 20.78.180.119:7126] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aThZAkAeBjkmsNRkd1NYggAAAMA"]
[Wed Dec 10 01:14:43.916796 2025] [:error] [pid 2280:tid 2354] [client 20.78.180.119:7132] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aThZA3cqIB-8ALgw4ZpKxQAAAJE"]
[Wed Dec 10 01:14:44.335219 2025] [:error] [pid 2279:tid 2329] [client 20.78.180.119:7139] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aThZBFmpdQscMcJOElWo8wAAAVM"]
[Wed Dec 10 01:14:45.730890 2025] [:error] [pid 2366:tid 2381] [client 20.78.180.119:7053] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/has.php"] [unique_id "aThZBUAeBjkmsNRkd1NYiAAAAM0"]
[Wed Dec 10 01:14:48.367256 2025] [:error] [pid 37041:tid 37051] [client 20.78.180.119:7148] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/has.php"] [unique_id "aThZCLuffDW8UzBwa1anjQAAAEg"]
[Wed Dec 10 01:14:49.308076 2025] [:error] [pid 2277:tid 2306] [client 20.78.180.119:7051] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/has.php"] [unique_id "aThZCYWGo731r6eS-w5RIgAAABc"]
[Wed Dec 10 01:14:50.165119 2025] [:error] [pid 2280:tid 2358] [client 20.78.180.119:7040] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/has.php"] [unique_id "aThZCncqIB-8ALgw4ZpK3AAAAJU"]
[Wed Dec 10 01:14:51.011240 2025] [:error] [pid 37041:tid 37053] [client 20.78.180.119:6992] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pent.php"] [unique_id "aThZC7uffDW8UzBwa1anlQAAAEo"]
[Wed Dec 10 01:14:51.927676 2025] [:error] [pid 2366:tid 2381] [client 20.78.180.119:6976] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pent.php"] [unique_id "aThZC0AeBjkmsNRkd1NYlAAAAM0"]
[Wed Dec 10 01:14:53.094321 2025] [:error] [pid 37041:tid 37066] [client 20.78.180.119:7078] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pent.php"] [unique_id "aThZDbuffDW8UzBwa1anmQAAAFc"]
[Wed Dec 10 01:14:54.051689 2025] [:error] [pid 2280:tid 2353] [client 20.78.180.119:6913] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pent.php"] [unique_id "aThZDncqIB-8ALgw4ZpK5wAAAJA"]
[Wed Dec 10 01:14:55.292595 2025] [:error] [pid 37041:tid 37047] [client 20.78.180.119:7157] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aThZD7uffDW8UzBwa1annwAAAEQ"]
[Wed Dec 10 01:14:56.269674 2025] [:error] [pid 2366:tid 2387] [client 20.78.180.119:6982] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aThZEEAeBjkmsNRkd1NYngAAANM"]
[Wed Dec 10 01:14:57.998351 2025] [:error] [pid 2366:tid 2374] [client 20.78.180.119:7150] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aThZEUAeBjkmsNRkd1NYqAAAAMY"]
[Wed Dec 10 01:14:58.984138 2025] [:error] [pid 2280:tid 2337] [client 20.78.180.119:7043] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aThZEncqIB-8ALgw4ZpK7wAAAIA"]
[Wed Dec 10 01:14:59.721426 2025] [:error] [pid 2366:tid 2375] [client 20.78.180.119:7045] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hexx.php"] [unique_id "aThZE0AeBjkmsNRkd1NYrAAAAMc"]
[Wed Dec 10 01:15:00.350909 2025] [:error] [pid 2366:tid 2385] [client 20.78.180.119:7158] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hexx.php"] [unique_id "aThZFEAeBjkmsNRkd1NYrwAAANE"]
[Wed Dec 10 01:15:00.814517 2025] [:error] [pid 2366:tid 2390] [client 20.78.180.119:7100] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hexx.php"] [unique_id "aThZFEAeBjkmsNRkd1NYswAAANY"]
[Wed Dec 10 01:15:02.224630 2025] [:error] [pid 2366:tid 2385] [client 20.78.180.119:7134] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hexx.php"] [unique_id "aThZFkAeBjkmsNRkd1NYuQAAANE"]
[Wed Dec 10 01:15:03.135315 2025] [:error] [pid 2277:tid 2287] [client 20.78.180.119:7060] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wrt.php"] [unique_id "aThZF4WGo731r6eS-w5ROgAAAAU"]
[Wed Dec 10 01:15:03.785211 2025] [:error] [pid 2366:tid 2369] [client 20.78.180.119:7155] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wrt.php"] [unique_id "aThZF0AeBjkmsNRkd1NYvgAAAME"]
[Wed Dec 10 01:15:05.424127 2025] [:error] [pid 2277:tid 2289] [client 20.78.180.119:7097] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wrt.php"] [unique_id "aThZGYWGo731r6eS-w5RPwAAAAc"]
[Wed Dec 10 01:15:06.595165 2025] [:error] [pid 2366:tid 2390] [client 20.78.180.119:6984] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wrt.php"] [unique_id "aThZGkAeBjkmsNRkd1NYyAAAANY"]
[Wed Dec 10 01:15:07.369311 2025] [:error] [pid 2277:tid 2306] [client 20.78.180.119:7025] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eauu.php"] [unique_id "aThZG4WGo731r6eS-w5RRAAAABc"]
[Wed Dec 10 01:15:09.556096 2025] [:error] [pid 2366:tid 2373] [client 20.78.180.119:7145] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eauu.php"] [unique_id "aThZHUAeBjkmsNRkd1NY0wAAAMU"]
[Wed Dec 10 01:15:10.496006 2025] [:error] [pid 2366:tid 2388] [client 20.78.180.119:7077] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eauu.php"] [unique_id "aThZHkAeBjkmsNRkd1NY1AAAANQ"]
[Wed Dec 10 01:15:11.365708 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:7086] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eauu.php"] [unique_id "aThZH0AeBjkmsNRkd1NY2AAAAMM"]
[Wed Dec 10 01:15:12.390791 2025] [:error] [pid 2277:tid 2300] [client 20.78.180.119:7136] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1%25.php"] [unique_id "aThZIIWGo731r6eS-w5RTAAAABE"]
[Wed Dec 10 01:15:13.153997 2025] [:error] [pid 2366:tid 2388] [client 20.78.180.119:7154] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1%25.php"] [unique_id "aThZIUAeBjkmsNRkd1NY4QAAANQ"]
[Wed Dec 10 01:15:13.825495 2025] [:error] [pid 2277:tid 2294] [client 20.78.180.119:7105] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1%25.php"] [unique_id "aThZIYWGo731r6eS-w5RTwAAAAs"]
[Wed Dec 10 01:15:14.714645 2025] [:error] [pid 2366:tid 2392] [client 20.239.184.21:18905] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gib.php"] [unique_id "aThZIkAeBjkmsNRkd1NY4wAAANg"]
[Wed Dec 10 01:15:14.932330 2025] [:error] [pid 37041:tid 37046] [client 20.78.180.119:7050] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1%25.php"] [unique_id "aThZIruffDW8UzBwa1anuAAAAEM"]
[Wed Dec 10 01:15:15.378649 2025] [:error] [pid 2366:tid 2377] [client 20.239.184.21:16384] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gib.php"] [unique_id "aThZI0AeBjkmsNRkd1NY6QAAAMk"]
[Wed Dec 10 01:15:15.706218 2025] [:error] [pid 37041:tid 37050] [client 20.78.180.119:7130] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/444.php"] [unique_id "aThZI7uffDW8UzBwa1anugAAAEc"]
[Wed Dec 10 01:15:16.602044 2025] [:error] [pid 2280:tid 2337] [client 20.239.184.21:12960] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gib.php"] [unique_id "aThZJHcqIB-8ALgw4ZpLBwAAAIA"]
[Wed Dec 10 01:15:16.889210 2025] [:error] [pid 2280:tid 2344] [client 20.78.180.119:7122] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/444.php"] [unique_id "aThZJHcqIB-8ALgw4ZpLCAAAAIc"]
[Wed Dec 10 01:15:18.055756 2025] [:error] [pid 2366:tid 2383] [client 20.78.180.119:7042] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/444.php"] [unique_id "aThZJkAeBjkmsNRkd1NY9QAAAM8"]
[Wed Dec 10 01:15:18.610601 2025] [:error] [pid 37041:tid 37051] [client 20.239.184.21:18566] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gib.php"] [unique_id "aThZJruffDW8UzBwa1anvwAAAEg"]
[Wed Dec 10 01:15:18.729363 2025] [:error] [pid 2277:tid 2286] [client 20.239.184.21:16736] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/article.php"] [unique_id "aThZJoWGo731r6eS-w5RUwAAAAQ"]
[Wed Dec 10 01:15:20.047363 2025] [:error] [pid 2279:tid 2320] [client 20.239.184.21:16205] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/article.php"] [unique_id "aThZKFmpdQscMcJOElWpMQAAAUo"]
[Wed Dec 10 01:15:20.721487 2025] [:error] [pid 2277:tid 2291] [client 20.78.180.119:6995] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/444.php"] [unique_id "aThZKIWGo731r6eS-w5RVwAAAAk"]
[Wed Dec 10 01:15:21.045604 2025] [:error] [pid 37041:tid 37053] [client 20.239.184.21:16218] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/article.php"] [unique_id "aThZKbuffDW8UzBwa1anyQAAAEo"]
[Wed Dec 10 01:15:22.165690 2025] [:error] [pid 2279:tid 2314] [client 20.239.184.21:41929] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/article.php"] [unique_id "aThZKlmpdQscMcJOElWpNQAAAUQ"]
[Wed Dec 10 01:15:22.541048 2025] [:error] [pid 2280:tid 2361] [client 20.78.180.119:7081] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/09fa6.php"] [unique_id "aThZKncqIB-8ALgw4ZpLEQAAAJg"]
[Wed Dec 10 01:15:22.988445 2025] [:error] [pid 2280:tid 2346] [client 20.239.184.21:16436] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/efile.php"] [unique_id "aThZKncqIB-8ALgw4ZpLEgAAAIk"]
[Wed Dec 10 01:15:24.135780 2025] [:error] [pid 2279:tid 2310] [client 20.239.184.21:12322] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/efile.php"] [unique_id "aThZLFmpdQscMcJOElWpOQAAAUA"]
[Wed Dec 10 01:15:24.673797 2025] [:error] [pid 2280:tid 2349] [client 20.78.180.119:7131] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/09fa6.php"] [unique_id "aThZLHcqIB-8ALgw4ZpLFgAAAIw"]
[Wed Dec 10 01:15:24.719457 2025] [:error] [pid 2280:tid 2360] [client 20.239.184.21:12288] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/efile.php"] [unique_id "aThZLHcqIB-8ALgw4ZpLFwAAAJc"]
[Wed Dec 10 01:15:25.164476 2025] [:error] [pid 2277:tid 2288] [client 20.239.184.21:41935] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/efile.php"] [unique_id "aThZLYWGo731r6eS-w5RYQAAAAY"]
[Wed Dec 10 01:15:25.936770 2025] [:error] [pid 37041:tid 37054] [client 20.78.180.119:7164] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/09fa6.php"] [unique_id "aThZLbuffDW8UzBwa1an0AAAAEs"]
[Wed Dec 10 01:15:26.030990 2025] [:error] [pid 2280:tid 2351] [client 20.239.184.21:12298] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wui.php"] [unique_id "aThZLncqIB-8ALgw4ZpLHAAAAI4"]
[Wed Dec 10 01:15:26.505708 2025] [:error] [pid 2366:tid 2377] [client 20.239.184.21:12299] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wui.php"] [unique_id "aThZLkAeBjkmsNRkd1NZAQAAAMk"]
[Wed Dec 10 01:15:26.636896 2025] [:error] [pid 2280:tid 2356] [client 20.78.180.119:7125] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/09fa6.php"] [unique_id "aThZLncqIB-8ALgw4ZpLHgAAAJM"]
[Wed Dec 10 01:15:27.039324 2025] [:error] [pid 37041:tid 37059] [client 20.239.184.21:16198] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wui.php"] [unique_id "aThZL7uffDW8UzBwa1an0gAAAFA"]
[Wed Dec 10 01:15:27.377658 2025] [:error] [pid 2366:tid 2373] [client 20.239.184.21:16413] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wui.php"] [unique_id "aThZL0AeBjkmsNRkd1NZBwAAAMU"]
[Wed Dec 10 01:15:27.666037 2025] [:error] [pid 37041:tid 37043] [client 20.78.180.119:7124] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aThZL7uffDW8UzBwa1an0wAAAEA"]
[Wed Dec 10 01:15:28.013048 2025] [:error] [pid 2280:tid 2354] [client 20.239.184.21:39084] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgn.php"] [unique_id "aThZMHcqIB-8ALgw4ZpLIAAAAJE"]
[Wed Dec 10 01:15:28.691638 2025] [:error] [pid 2279:tid 2314] [client 20.239.184.21:39098] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgn.php"] [unique_id "aThZMFmpdQscMcJOElWpRAAAAUQ"]
[Wed Dec 10 01:15:28.982465 2025] [:error] [pid 2279:tid 2312] [client 20.78.180.119:6980] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aThZMFmpdQscMcJOElWpRgAAAUI"]
[Wed Dec 10 01:15:29.077305 2025] [:error] [pid 2277:tid 2290] [client 20.239.184.21:12479] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgn.php"] [unique_id "aThZMYWGo731r6eS-w5RaAAAAAg"]
[Wed Dec 10 01:15:29.734938 2025] [:error] [pid 2277:tid 2307] [client 20.239.184.21:12454] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgn.php"] [unique_id "aThZMYWGo731r6eS-w5RagAAABg"]
[Wed Dec 10 01:15:30.000617 2025] [:error] [pid 2279:tid 2324] [client 20.78.180.119:7112] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aThZMVmpdQscMcJOElWpSgAAAU4"]
[Wed Dec 10 01:15:30.676425 2025] [:error] [pid 2280:tid 2347] [client 20.239.184.21:28697] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aThZMncqIB-8ALgw4ZpLJAAAAIo"]
[Wed Dec 10 01:15:31.039015 2025] [:error] [pid 2277:tid 2298] [client 20.239.184.21:28231] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aThZM4WGo731r6eS-w5RbwAAAA8"]
[Wed Dec 10 01:15:31.106228 2025] [:error] [pid 2277:tid 2295] [client 20.78.180.119:7071] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aThZM4WGo731r6eS-w5RcQAAAAw"]
[Wed Dec 10 01:15:31.426251 2025] [:error] [pid 37041:tid 37061] [client 20.239.184.21:28674] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aThZM7uffDW8UzBwa1an2AAAAFI"]
[Wed Dec 10 01:15:31.808209 2025] [:error] [pid 37041:tid 37053] [client 20.239.184.21:28694] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aThZM7uffDW8UzBwa1an2QAAAEo"]
[Wed Dec 10 01:15:32.343290 2025] [:error] [pid 2366:tid 2379] [client 20.239.184.21:39068] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spk.php"] [unique_id "aThZNEAeBjkmsNRkd1NZDwAAAMs"]
[Wed Dec 10 01:15:33.556234 2025] [:error] [pid 37041:tid 37046] [client 20.239.184.21:28224] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spk.php"] [unique_id "aThZNbuffDW8UzBwa1an2wAAAEM"]
[Wed Dec 10 01:15:34.888004 2025] [:error] [pid 2279:tid 2322] [client 20.78.180.119:7018] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/we.php"] [unique_id "aThZNlmpdQscMcJOElWpVQAAAUw"]
[Wed Dec 10 01:15:35.632335 2025] [:error] [pid 2277:tid 2305] [client 20.239.184.21:28724] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spk.php"] [unique_id "aThZN4WGo731r6eS-w5RdQAAABY"]
[Wed Dec 10 01:15:37.697864 2025] [:error] [pid 2277:tid 2294] [client 20.239.184.21:28228] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spk.php"] [unique_id "aThZOYWGo731r6eS-w5RewAAAAs"]
[Wed Dec 10 01:15:40.635799 2025] [:error] [pid 2277:tid 2298] [client 20.239.184.21:27129] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aThZPIWGo731r6eS-w5RgAAAAA8"]
[Wed Dec 10 01:15:42.682573 2025] [:error] [pid 37041:tid 37045] [client 20.239.184.21:42511] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aThZPruffDW8UzBwa1an5gAAAEI"]
[Wed Dec 10 01:15:44.091593 2025] [:error] [pid 2366:tid 2390] [client 20.239.184.21:41893] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aThZQEAeBjkmsNRkd1NZIgAAANY"]
[Wed Dec 10 01:15:44.807665 2025] [:error] [pid 2277:tid 2301] [client 20.239.184.21:41860] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aThZQIWGo731r6eS-w5RiAAAABI"]
[Wed Dec 10 01:15:46.098594 2025] [:error] [pid 2280:tid 2353] [client 20.239.184.21:32375] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aThZQncqIB-8ALgw4ZpLRAAAAJA"]
[Wed Dec 10 01:15:47.197178 2025] [:error] [pid 2279:tid 2317] [client 20.239.184.21:32391] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aThZQ1mpdQscMcJOElWpbgAAAUc"]
[Wed Dec 10 01:15:48.247503 2025] [:error] [pid 2366:tid 2368] [client 20.239.184.21:32333] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aThZREAeBjkmsNRkd1NZMAAAAMA"]
[Wed Dec 10 01:15:49.207076 2025] [:error] [pid 2277:tid 2295] [client 20.239.184.21:32432] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aThZRYWGo731r6eS-w5RjQAAAAw"]
[Wed Dec 10 01:15:50.429280 2025] [:error] [pid 2277:tid 2291] [client 20.239.184.21:21170] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2r.php"] [unique_id "aThZRoWGo731r6eS-w5RkQAAAAk"]
[Wed Dec 10 01:15:51.277082 2025] [:error] [pid 2280:tid 2359] [client 20.239.184.21:21152] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2r.php"] [unique_id "aThZR3cqIB-8ALgw4ZpLWQAAAJY"]
[Wed Dec 10 01:15:51.552882 2025] [:error] [pid 37041:tid 37064] [client 20.239.184.21:16936] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2r.php"] [unique_id "aThZR7uffDW8UzBwa1an8wAAAFU"]
[Wed Dec 10 01:15:52.612916 2025] [:error] [pid 37041:tid 37043] [client 20.239.184.21:32393] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2r.php"] [unique_id "aThZSLuffDW8UzBwa1an9AAAAEA"]
[Wed Dec 10 01:15:53.786718 2025] [:error] [pid 2366:tid 2383] [client 20.239.184.21:12554] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mailer.php7"] [unique_id "aThZSUAeBjkmsNRkd1NZPQAAAM8"]
[Wed Dec 10 01:15:54.952212 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:32373] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mailer.php7"] [unique_id "aThZSncqIB-8ALgw4ZpLbgAAAIg"]
[Wed Dec 10 01:15:55.822231 2025] [:error] [pid 2277:tid 2293] [client 20.239.184.21:38452] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mailer.php7"] [unique_id "aThZS4WGo731r6eS-w5RqgAAAAo"]
[Wed Dec 10 01:15:57.392003 2025] [:error] [pid 37041:tid 37065] [client 20.239.184.21:15471] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mailer.php7"] [unique_id "aThZTbuffDW8UzBwa1an-wAAAFY"]
[Wed Dec 10 01:15:58.307842 2025] [:error] [pid 37041:tid 37059] [client 20.239.184.21:15844] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rsnu.php"] [unique_id "aThZTruffDW8UzBwa1an_gAAAFA"]
[Wed Dec 10 01:15:59.698864 2025] [:error] [pid 37041:tid 37052] [client 20.239.184.21:15437] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rsnu.php"] [unique_id "aThZT7uffDW8UzBwa1aoAAAAAEk"]
[Wed Dec 10 01:16:01.408311 2025] [:error] [pid 2277:tid 2304] [client 20.239.184.21:38400] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rsnu.php"] [unique_id "aThZUYWGo731r6eS-w5RswAAABU"]
[Wed Dec 10 01:16:02.533471 2025] [:error] [pid 2366:tid 2385] [client 20.239.184.21:12582] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rsnu.php"] [unique_id "aThZUkAeBjkmsNRkd1NZYQAAANE"]
[Wed Dec 10 01:16:03.756355 2025] [:error] [pid 37041:tid 37049] [client 20.239.184.21:16983] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aThZU7uffDW8UzBwa1aoCgAAAEY"]
[Wed Dec 10 01:16:05.206056 2025] [:error] [pid 2279:tid 2332] [client 20.239.184.21:12671] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aThZVVmpdQscMcJOElWpqwAAAVY"]
[Wed Dec 10 01:16:06.502772 2025] [:error] [pid 2366:tid 2388] [client 20.239.184.21:17005] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aThZVkAeBjkmsNRkd1NZcgAAANQ"]
[Wed Dec 10 01:16:07.286290 2025] [:error] [pid 2279:tid 2325] [client 20.239.184.21:12501] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aThZV1mpdQscMcJOElWptwAAAU8"]
[Wed Dec 10 01:16:07.896566 2025] [:error] [pid 37041:tid 37044] [client 20.239.184.21:27039] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aThZV7uffDW8UzBwa1aoEwAAAEE"]
[Wed Dec 10 01:16:08.870134 2025] [:error] [pid 2366:tid 2381] [client 20.239.184.21:27061] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aThZWEAeBjkmsNRkd1NZfgAAAM0"]
[Wed Dec 10 01:16:09.534557 2025] [:error] [pid 2366:tid 2375] [client 20.239.184.21:12732] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aThZWUAeBjkmsNRkd1NZgwAAAMc"]
[Wed Dec 10 01:16:52.417368 2025] [:error] [pid 2366:tid 2371] [client 20.239.184.21:16981] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aThZhEAeBjkmsNRkd1NaEQAAAMM"]
[Wed Dec 10 01:16:53.632047 2025] [:error] [pid 37041:tid 37050] [client 20.239.184.21:33159] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aThZhbuffDW8UzBwa1aogQAAAEc"]
[Wed Dec 10 01:16:54.705591 2025] [:error] [pid 2280:tid 2337] [client 20.239.184.21:15951] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aThZhncqIB-8ALgw4ZpMCwAAAIA"]
[Wed Dec 10 01:16:55.712947 2025] [:error] [pid 2366:tid 2391] [client 20.239.184.21:16140] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aThZh0AeBjkmsNRkd1NaIQAAANc"]
[Wed Dec 10 01:16:56.346757 2025] [:error] [pid 2366:tid 2372] [client 20.239.184.21:15682] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsx.php"] [unique_id "aThZiEAeBjkmsNRkd1NaJgAAAMQ"]
[Wed Dec 10 01:16:57.421263 2025] [:error] [pid 2280:tid 2338] [client 20.239.184.21:16180] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsx.php"] [unique_id "aThZiXcqIB-8ALgw4ZpMEwAAAIE"]
[Wed Dec 10 01:16:58.920975 2025] [:error] [pid 2366:tid 2369] [client 20.239.184.21:12385] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsx.php"] [unique_id "aThZikAeBjkmsNRkd1NaNgAAAME"]
[Wed Dec 10 01:17:00.096973 2025] [:error] [pid 2366:tid 2371] [client 20.239.184.21:12389] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsx.php"] [unique_id "aThZjEAeBjkmsNRkd1NaRgAAAMM"]
[Wed Dec 10 01:17:00.685225 2025] [:error] [pid 2279:tid 2313] [client 20.239.184.21:15706] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/suy.php"] [unique_id "aThZjFmpdQscMcJOElWqiAAAAUM"]
[Wed Dec 10 01:17:01.629737 2025] [:error] [pid 2366:tid 2379] [client 20.239.184.21:15703] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/suy.php"] [unique_id "aThZjUAeBjkmsNRkd1NaYwAAAMs"]
[Wed Dec 10 01:17:02.835654 2025] [:error] [pid 2280:tid 2341] [client 20.239.184.21:16175] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/suy.php"] [unique_id "aThZjncqIB-8ALgw4ZpMHAAAAIQ"]
[Wed Dec 10 01:17:04.315974 2025] [:error] [pid 37041:tid 37050] [client 20.239.184.21:12362] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/suy.php"] [unique_id "aThZkLuffDW8UzBwa1aolQAAAEc"]
[Wed Dec 10 01:17:06.872579 2025] [:error] [pid 37041:tid 37063] [client 20.239.184.21:12409] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dop.php"] [unique_id "aThZkruffDW8UzBwa1aongAAAFQ"]
[Wed Dec 10 01:17:09.367134 2025] [:error] [pid 2277:tid 2282] [client 20.239.184.21:13247] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dop.php"] [unique_id "aThZlYWGo731r6eS-w5SmgAAAAA"]
[Wed Dec 10 01:17:11.268440 2025] [:error] [pid 2279:tid 2314] [client 20.239.184.21:17991] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dop.php"] [unique_id "aThZl1mpdQscMcJOElWqmwAAAUQ"]
[Wed Dec 10 01:17:14.748490 2025] [:error] [pid 2277:tid 2296] [client 20.239.184.21:13057] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dop.php"] [unique_id "aThZmoWGo731r6eS-w5SrQAAAA0"]
[Wed Dec 10 01:17:16.419797 2025] [:error] [pid 2277:tid 2304] [client 20.239.184.21:21188] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zde.php"] [unique_id "aThZnIWGo731r6eS-w5StAAAABU"]
[Wed Dec 10 01:17:17.580912 2025] [:error] [pid 2280:tid 2337] [client 20.239.184.21:13061] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zde.php"] [unique_id "aThZnXcqIB-8ALgw4ZpMXQAAAIA"]
[Wed Dec 10 01:17:18.731093 2025] [:error] [pid 37041:tid 37066] [client 20.239.184.21:13090] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zde.php"] [unique_id "aThZnruffDW8UzBwa1aosQAAAFc"]
[Wed Dec 10 01:17:20.868644 2025] [:error] [pid 2280:tid 2358] [client 20.239.184.21:42598] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zde.php"] [unique_id "aThZoHcqIB-8ALgw4ZpMaAAAAJU"]
[Wed Dec 10 01:17:22.581611 2025] [:error] [pid 2279:tid 2321] [client 20.239.184.21:42607] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aThZolmpdQscMcJOElWquQAAAUs"]
[Wed Dec 10 01:17:25.657892 2025] [:error] [pid 2366:tid 2377] [client 20.239.184.21:53260] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aThZpUAeBjkmsNRkd1NbPQAAAMk"]
[Wed Dec 10 01:17:27.494671 2025] [:error] [pid 2279:tid 2332] [client 20.239.184.21:53301] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aThZp1mpdQscMcJOElWq0gAAAVY"]
[Wed Dec 10 01:17:30.187357 2025] [:error] [pid 37041:tid 37052] [client 20.239.184.21:53303] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aThZqruffDW8UzBwa1aowQAAAEk"]
[Wed Dec 10 01:17:32.119069 2025] [:error] [pid 2366:tid 2386] [client 20.239.184.21:21814] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "aThZrEAeBjkmsNRkd1NbXQAAANI"]
[Wed Dec 10 01:17:34.414085 2025] [:error] [pid 2279:tid 2325] [client 20.78.180.119:7062] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aThZrlmpdQscMcJOElWq_AAAAU8"]
[Wed Dec 10 01:17:34.750333 2025] [:error] [pid 2280:tid 2342] [client 20.239.184.21:53279] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "aThZrncqIB-8ALgw4ZpMtAAAAIU"]
[Wed Dec 10 01:17:35.935708 2025] [:error] [pid 2366:tid 2377] [client 20.78.180.119:7129] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aThZr0AeBjkmsNRkd1NbawAAAMk"]
[Wed Dec 10 01:17:36.717687 2025] [:error] [pid 37041:tid 37052] [client 20.78.180.119:7162] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aThZsLuffDW8UzBwa1ao6gAAAEk"]
[Wed Dec 10 01:17:37.449110 2025] [:error] [pid 37041:tid 37065] [client 20.239.184.21:39001] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "aThZsbuffDW8UzBwa1ao7gAAAFY"]
[Wed Dec 10 01:17:38.642905 2025] [:error] [pid 2366:tid 2374] [client 20.239.184.21:28172] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "aThZskAeBjkmsNRkd1NbcwAAAMY"]
[Wed Dec 10 01:17:40.482265 2025] [:error] [pid 2277:tid 2283] [client 20.239.184.21:37257] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aThZtIWGo731r6eS-w5TAQAAAAE"]
[Wed Dec 10 01:17:41.783256 2025] [:error] [pid 37041:tid 37064] [client 20.78.180.119:7110] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aThZtbuffDW8UzBwa1apBQAAAFU"]
[Wed Dec 10 01:17:42.280919 2025] [:error] [pid 2279:tid 2311] [client 20.239.184.21:12793] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aThZtlmpdQscMcJOElWrEwAAAUE"]
[Wed Dec 10 01:17:43.013913 2025] [:error] [pid 37041:tid 37044] [client 20.78.180.119:7052] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ooj.php"] [unique_id "aThZt7uffDW8UzBwa1apCQAAAEE"]
[Wed Dec 10 01:17:43.759086 2025] [:error] [pid 2280:tid 2339] [client 20.78.180.119:7068] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ooj.php"] [unique_id "aThZt3cqIB-8ALgw4ZpM9AAAAII"]
[Wed Dec 10 01:17:44.307121 2025] [:error] [pid 2279:tid 2315] [client 20.239.184.21:22428] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aThZuFmpdQscMcJOElWrFQAAAUU"]
[Wed Dec 10 01:17:45.337508 2025] [:error] [pid 2366:tid 2378] [client 20.78.180.119:7070] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ooj.php"] [unique_id "aThZuUAeBjkmsNRkd1NbjgAAAMo"]
[Wed Dec 10 01:17:45.858812 2025] [:error] [pid 2280:tid 2349] [client 20.239.184.21:22455] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aThZuXcqIB-8ALgw4ZpNAAAAAIw"]
[Wed Dec 10 01:17:46.195140 2025] [:error] [pid 2366:tid 2391] [client 20.78.180.119:6917] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ooj.php"] [unique_id "aThZukAeBjkmsNRkd1NblgAAANc"]
[Wed Dec 10 01:17:46.876982 2025] [:error] [pid 2366:tid 2384] [client 20.239.184.21:12499] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/led.php"] [unique_id "aThZukAeBjkmsNRkd1NbnQAAANA"]
[Wed Dec 10 01:17:47.857862 2025] [:error] [pid 2366:tid 2376] [client 20.239.184.21:21797] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/led.php"] [unique_id "aThZu0AeBjkmsNRkd1NbqQAAAMg"]
[Wed Dec 10 01:17:47.883870 2025] [:error] [pid 2279:tid 2327] [client 20.78.180.119:6981] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/filesss.php"] [unique_id "aThZu1mpdQscMcJOElWrLAAAAVE"]
[Wed Dec 10 01:17:48.780372 2025] [:error] [pid 37041:tid 37060] [client 20.78.180.119:7146] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/filesss.php"] [unique_id "aThZvLuffDW8UzBwa1apEAAAAFE"]
[Wed Dec 10 01:17:49.008413 2025] [:error] [pid 2279:tid 2318] [client 20.239.184.21:12750] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/led.php"] [unique_id "aThZvVmpdQscMcJOElWrNQAAAUg"]
[Wed Dec 10 01:17:50.341017 2025] [:error] [pid 37041:tid 37054] [client 20.78.180.119:7116] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/filesss.php"] [unique_id "aThZvruffDW8UzBwa1apFwAAAEs"]
[Wed Dec 10 01:17:52.698227 2025] [:error] [pid 37041:tid 37046] [client 20.78.180.119:7144] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/filesss.php"] [unique_id "aThZwLuffDW8UzBwa1apGQAAAEM"]
[Wed Dec 10 01:17:53.258511 2025] [:error] [pid 37041:tid 37060] [client 20.78.180.119:7056] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "aThZwbuffDW8UzBwa1apHQAAAFE"]
[Wed Dec 10 01:17:54.822396 2025] [:error] [pid 2279:tid 2322] [client 20.78.180.119:7049] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "aThZwlmpdQscMcJOElWrTgAAAUw"]
[Wed Dec 10 01:17:56.231089 2025] [:error] [pid 2279:tid 2334] [client 20.78.180.119:7137] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "aThZxFmpdQscMcJOElWrWwAAAVg"]
[Wed Dec 10 01:17:57.235325 2025] [:error] [pid 2280:tid 2349] [client 20.78.180.119:7005] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "aThZxXcqIB-8ALgw4ZpNKwAAAIw"]
[Wed Dec 10 01:17:58.655773 2025] [:error] [pid 2277:tid 2282] [client 20.78.180.119:7141] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php.php"] [unique_id "aThZxoWGo731r6eS-w5TLAAAAAA"]
[Wed Dec 10 01:18:01.881487 2025] [:error] [pid 2366:tid 2374] [client 20.78.180.119:6985] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php.php"] [unique_id "aThZyUAeBjkmsNRkd1Nb0wAAAMY"]
[Wed Dec 10 01:18:03.063431 2025] [:error] [pid 2280:tid 2361] [client 20.78.180.119:7054] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php.php"] [unique_id "aThZy3cqIB-8ALgw4ZpNPQAAAJg"]
[Wed Dec 10 01:18:04.096721 2025] [:error] [pid 2279:tid 2332] [client 20.78.180.119:7103] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php.php"] [unique_id "aThZzFmpdQscMcJOElWrjgAAAVY"]
[Wed Dec 10 01:18:06.737157 2025] [:error] [pid 2279:tid 2315] [client 20.78.180.119:7107] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xz99.php"] [unique_id "aThZzlmpdQscMcJOElWroQAAAUU"]
[Wed Dec 10 01:18:07.434788 2025] [:error] [pid 2366:tid 2384] [client 20.78.180.119:7064] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xz99.php"] [unique_id "aThZz0AeBjkmsNRkd1Nb6AAAANA"]
[Wed Dec 10 01:18:08.947289 2025] [:error] [pid 2366:tid 2368] [client 20.78.180.119:7114] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xz99.php"] [unique_id "aThZ0EAeBjkmsNRkd1Nb7QAAAMA"]
[Wed Dec 10 01:18:09.742027 2025] [:error] [pid 37041:tid 37067] [client 20.78.180.119:7013] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xz99.php"] [unique_id "aThZ0buffDW8UzBwa1apOAAAAFg"]
[Wed Dec 10 01:18:10.556476 2025] [:error] [pid 2366:tid 2390] [client 20.78.180.119:7055] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file13.php"] [unique_id "aThZ0kAeBjkmsNRkd1Nb9QAAANY"]
[Wed Dec 10 01:18:11.577353 2025] [:error] [pid 2277:tid 2296] [client 20.78.180.119:7160] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file13.php"] [unique_id "aThZ04WGo731r6eS-w5TUAAAAA0"]
[Wed Dec 10 01:18:12.664663 2025] [:error] [pid 37041:tid 37065] [client 20.78.180.119:7059] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file13.php"] [unique_id "aThZ1LuffDW8UzBwa1apRQAAAFY"]
[Wed Dec 10 01:18:15.915044 2025] [:error] [pid 2277:tid 2299] [client 20.78.180.119:6986] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file13.php"] [unique_id "aThZ14WGo731r6eS-w5TYwAAABA"]
[Wed Dec 10 01:18:17.052152 2025] [:error] [pid 2280:tid 2343] [client 20.78.180.119:7065] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ifm.php"] [unique_id "aThZ2XcqIB-8ALgw4ZpNYgAAAIY"]
[Wed Dec 10 01:18:19.173630 2025] [:error] [pid 2366:tid 2373] [client 20.78.180.119:7057] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ifm.php"] [unique_id "aThZ20AeBjkmsNRkd1NcEQAAAMU"]
[Wed Dec 10 01:18:20.059459 2025] [:error] [pid 2279:tid 2320] [client 20.78.180.119:7041] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ifm.php"] [unique_id "aThZ3FmpdQscMcJOElWr0wAAAUo"]
[Wed Dec 10 01:18:20.845148 2025] [:error] [pid 2279:tid 2322] [client 20.78.180.119:7138] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ifm.php"] [unique_id "aThZ3FmpdQscMcJOElWr1AAAAUw"]
[Wed Dec 10 01:18:23.430966 2025] [:error] [pid 2280:tid 2361] [client 20.78.180.119:7073] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "aThZ33cqIB-8ALgw4ZpNdQAAAJg"]
[Wed Dec 10 01:18:23.986020 2025] [:error] [pid 2279:tid 2331] [client 20.78.180.119:7106] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "aThZ31mpdQscMcJOElWr2gAAAVU"]
[Wed Dec 10 01:18:24.767985 2025] [:error] [pid 2366:tid 2386] [client 20.78.180.119:6912] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "aThZ4EAeBjkmsNRkd1NcLQAAANI"]
[Wed Dec 10 01:18:25.764685 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:7004] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "aThZ4UAeBjkmsNRkd1NcNgAAAMM"]
[Wed Dec 10 01:18:35.441264 2025] [:error] [pid 2366:tid 2383] [client 20.239.184.21:21800] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aThZ60AeBjkmsNRkd1NcVQAAAM8"]
[Wed Dec 10 01:18:36.813714 2025] [:error] [pid 2277:tid 2297] [client 20.239.184.21:15546] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aThZ7IWGo731r6eS-w5TfwAAAA4"]
[Wed Dec 10 01:18:38.120485 2025] [:error] [pid 2277:tid 2305] [client 20.239.184.21:33124] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aThZ7oWGo731r6eS-w5ThQAAABY"]
[Wed Dec 10 01:18:39.644603 2025] [:error] [pid 2366:tid 2375] [client 20.239.184.21:33121] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aThZ70AeBjkmsNRkd1NcXgAAAMc"]
[Wed Dec 10 01:18:41.285954 2025] [:error] [pid 2280:tid 2348] [client 20.239.184.21:12774] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aThZ8XcqIB-8ALgw4ZpNmgAAAIs"]
[Wed Dec 10 01:18:41.837732 2025] [:error] [pid 2277:tid 2303] [client 20.239.184.21:33107] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aThZ8YWGo731r6eS-w5TjAAAABQ"]
[Wed Dec 10 01:18:42.780822 2025] [:error] [pid 2280:tid 2339] [client 20.239.184.21:13293] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aThZ8ncqIB-8ALgw4ZpNpAAAAII"]
[Wed Dec 10 01:18:43.408748 2025] [:error] [pid 37041:tid 37058] [client 20.239.184.21:13271] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aThZ87uffDW8UzBwa1apjwAAAE8"]
[Wed Dec 10 01:18:44.159785 2025] [:error] [pid 2279:tid 2322] [client 20.239.184.21:12908] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file52.php"] [unique_id "aThZ9FmpdQscMcJOElWsHQAAAUw"]
[Wed Dec 10 01:18:44.697301 2025] [:error] [pid 2277:tid 2288] [client 20.239.184.21:12482] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file52.php"] [unique_id "aThZ9IWGo731r6eS-w5TrQAAAAY"]
[Wed Dec 10 01:18:45.197099 2025] [:error] [pid 37041:tid 37053] [client 20.239.184.21:38392] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file52.php"] [unique_id "aThZ9buffDW8UzBwa1apsAAAAEo"]
[Wed Dec 10 01:18:46.354298 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:42532] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file52.php"] [unique_id "aThZ9ncqIB-8ALgw4ZpNsQAAAIg"]
[Wed Dec 10 01:18:47.390240 2025] [:error] [pid 2279:tid 2325] [client 20.239.184.21:33142] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aThZ91mpdQscMcJOElWsKAAAAU8"]
[Wed Dec 10 01:18:48.158504 2025] [:error] [pid 2366:tid 2382] [client 20.239.184.21:15550] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aThZ-EAeBjkmsNRkd1NccwAAAM4"]
[Wed Dec 10 01:18:49.019894 2025] [:error] [pid 37041:tid 37043] [client 20.239.184.21:33096] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aThZ-buffDW8UzBwa1apuAAAAEA"]
[Wed Dec 10 01:18:49.913369 2025] [:error] [pid 2280:tid 2358] [client 20.239.184.21:38346] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aThZ-XcqIB-8ALgw4ZpNtwAAAJU"]
[Wed Dec 10 01:18:50.900376 2025] [:error] [pid 2366:tid 2377] [client 20.239.184.21:42557] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aThZ-kAeBjkmsNRkd1NcfQAAAMk"]
[Wed Dec 10 01:18:51.500127 2025] [:error] [pid 2279:tid 2311] [client 20.239.184.21:13288] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aThZ-1mpdQscMcJOElWsMwAAAUE"]
[Wed Dec 10 01:18:53.468111 2025] [:error] [pid 2366:tid 2381] [client 20.239.184.21:38359] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aThZ_UAeBjkmsNRkd1NchQAAAM0"]
[Wed Dec 10 01:18:55.289924 2025] [:error] [pid 2366:tid 2370] [client 20.239.184.21:12521] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aThZ_0AeBjkmsNRkd1NcnwAAAMI"]
[Wed Dec 10 01:18:58.597659 2025] [:error] [pid 37041:tid 37067] [client 20.239.184.21:13302] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aThaAruffDW8UzBwa1apygAAAFg"]
[Wed Dec 10 01:18:59.426853 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:13276] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aThaA3cqIB-8ALgw4ZpNxgAAAIg"]
[Wed Dec 10 01:19:00.769322 2025] [:error] [pid 2277:tid 2291] [client 20.239.184.21:42522] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aThaBIWGo731r6eS-w5TwgAAAAk"]
[Wed Dec 10 01:19:01.512959 2025] [:error] [pid 37041:tid 37060] [client 20.239.184.21:13281] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aThaBbuffDW8UzBwa1ap0AAAAFE"]
[Wed Dec 10 01:19:03.035026 2025] [:error] [pid 2279:tid 2333] [client 20.239.184.21:12925] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aThaB1mpdQscMcJOElWsSAAAAVc"]
[Wed Dec 10 01:19:04.000605 2025] [:error] [pid 2366:tid 2392] [client 20.239.184.21:12920] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aThaCEAeBjkmsNRkd1NcxgAAANg"]
[Wed Dec 10 01:19:05.500171 2025] [:error] [pid 2366:tid 2382] [client 20.239.184.21:38978] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aThaCUAeBjkmsNRkd1NcywAAAM4"]
[Wed Dec 10 01:19:08.094039 2025] [:error] [pid 2280:tid 2344] [client 20.239.184.21:15501] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aThaDHcqIB-8ALgw4ZpN2wAAAIc"]
[Wed Dec 10 01:19:08.838016 2025] [:error] [pid 2279:tid 2311] [client 20.239.184.21:13309] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tro.php"] [unique_id "aThaDFmpdQscMcJOElWsVQAAAUE"]
[Wed Dec 10 01:19:10.509311 2025] [:error] [pid 2279:tid 2325] [client 20.239.184.21:53288] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tro.php"] [unique_id "aThaDlmpdQscMcJOElWsWgAAAU8"]
[Wed Dec 10 01:19:11.465239 2025] [:error] [pid 2279:tid 2318] [client 20.239.184.21:16450] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tro.php"] [unique_id "aThaD1mpdQscMcJOElWsXAAAAUg"]
[Wed Dec 10 01:19:12.119211 2025] [:error] [pid 2280:tid 2356] [client 20.239.184.21:12845] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tro.php"] [unique_id "aThaEHcqIB-8ALgw4ZpN5AAAAJM"]
[Wed Dec 10 01:19:13.396940 2025] [:error] [pid 37041:tid 37066] [client 20.239.184.21:12835] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aThaEbuffDW8UzBwa1ap4QAAAFc"]
[Wed Dec 10 01:19:14.534526 2025] [:error] [pid 2366:tid 2387] [client 20.239.184.21:12852] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aThaEkAeBjkmsNRkd1Nc6QAAANM"]
[Wed Dec 10 01:19:15.399616 2025] [:error] [pid 2277:tid 2301] [client 20.239.184.21:12840] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aThaE4WGo731r6eS-w5T4wAAABI"]
[Wed Dec 10 01:19:16.197723 2025] [:error] [pid 2366:tid 2376] [client 20.239.184.21:16382] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aThaFEAeBjkmsNRkd1Nc8AAAAMg"]
[Wed Dec 10 01:19:17.464216 2025] [:error] [pid 2277:tid 2305] [client 20.239.184.21:17327] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/keu.php"] [unique_id "aThaFYWGo731r6eS-w5T5wAAABY"]
[Wed Dec 10 01:19:18.877256 2025] [:error] [pid 2277:tid 2296] [client 20.239.184.21:13100] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/keu.php"] [unique_id "aThaFoWGo731r6eS-w5T7AAAAA0"]
[Wed Dec 10 01:19:20.493123 2025] [:error] [pid 2279:tid 2313] [client 20.239.184.21:23388] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/keu.php"] [unique_id "aThaGFmpdQscMcJOElWsbgAAAUM"]
[Wed Dec 10 01:19:21.676654 2025] [:error] [pid 2279:tid 2329] [client 20.239.184.21:17310] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/keu.php"] [unique_id "aThaGVmpdQscMcJOElWscAAAAVM"]
[Wed Dec 10 01:19:23.023177 2025] [:error] [pid 2279:tid 2323] [client 20.239.184.21:16372] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aThaG1mpdQscMcJOElWscgAAAU0"]
[Wed Dec 10 01:19:23.603975 2025] [:error] [pid 37041:tid 37062] [client 20.239.184.21:13106] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aThaG7uffDW8UzBwa1aqAwAAAFM"]
[Wed Dec 10 01:19:24.336206 2025] [:error] [pid 37041:tid 37054] [client 20.239.184.21:39705] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aThaHLuffDW8UzBwa1aqBQAAAEs"]
[Wed Dec 10 01:19:25.680989 2025] [:error] [pid 2277:tid 2291] [client 20.239.184.21:12965] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aThaHYWGo731r6eS-w5T9QAAAAk"]
[Wed Dec 10 01:19:26.515780 2025] [:error] [pid 2279:tid 2317] [client 20.239.184.21:12980] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThaHlmpdQscMcJOElWsfQAAAUc"]
[Wed Dec 10 01:19:27.205283 2025] [:error] [pid 2280:tid 2339] [client 20.239.184.21:39706] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThaH3cqIB-8ALgw4ZpOEAAAAII"]
[Wed Dec 10 01:19:27.710131 2025] [:error] [pid 37041:tid 37062] [client 20.239.184.21:39729] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThaH7uffDW8UzBwa1aqCgAAAFM"]
[Wed Dec 10 01:19:28.650583 2025] [:error] [pid 2279:tid 2332] [client 20.239.184.21:15602] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThaIFmpdQscMcJOElWsgQAAAVY"]
[Wed Dec 10 01:19:29.088607 2025] [:error] [pid 2366:tid 2392] [client 20.239.184.21:17329] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aThaIUAeBjkmsNRkd1NdLwAAANg"]
[Wed Dec 10 01:19:30.026634 2025] [:error] [pid 2280:tid 2342] [client 20.239.184.21:15587] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aThaIncqIB-8ALgw4ZpOFQAAAIU"]
[Wed Dec 10 01:19:30.550020 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:12990] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aThaIncqIB-8ALgw4ZpOGAAAAIg"]
[Wed Dec 10 01:19:30.909379 2025] [:error] [pid 2279:tid 2334] [client 20.239.184.21:39742] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aThaIlmpdQscMcJOElWshAAAAVg"]
[Wed Dec 10 01:19:31.665438 2025] [:error] [pid 37041:tid 37048] [client 20.239.184.21:15554] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/73106.php"] [unique_id "aThaI7uffDW8UzBwa1aqDgAAAEU"]
[Wed Dec 10 01:19:32.103297 2025] [:error] [pid 2366:tid 2382] [client 20.239.184.21:12960] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/73106.php"] [unique_id "aThaJEAeBjkmsNRkd1NdOQAAAM4"]
[Wed Dec 10 01:19:32.560141 2025] [:error] [pid 37041:tid 37045] [client 20.239.184.21:16359] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/73106.php"] [unique_id "aThaJLuffDW8UzBwa1aqEQAAAEI"]
[Wed Dec 10 01:19:53.735797 2025] [:error] [pid 2366:tid 2384] [client 20.78.180.119:6913] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mpxct.php"] [unique_id "aThaOUAeBjkmsNRkd1NdfgAAANA"]
[Wed Dec 10 01:19:54.796426 2025] [:error] [pid 2366:tid 2370] [client 20.78.180.119:7111] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mpxct.php"] [unique_id "aThaOkAeBjkmsNRkd1NdggAAAMI"]
[Wed Dec 10 01:19:55.934151 2025] [:error] [pid 2280:tid 2338] [client 20.78.180.119:7061] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mpxct.php"] [unique_id "aThaO3cqIB-8ALgw4ZpOUAAAAIE"]
[Wed Dec 10 01:19:56.842468 2025] [:error] [pid 2366:tid 2373] [client 20.78.180.119:7148] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mpxct.php"] [unique_id "aThaPEAeBjkmsNRkd1NdiwAAAMU"]
[Wed Dec 10 01:19:57.918463 2025] [:error] [pid 37041:tid 37067] [client 20.78.180.119:7134] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ex.php"] [unique_id "aThaPbuffDW8UzBwa1aqYQAAAFg"]
[Wed Dec 10 01:19:59.225255 2025] [:error] [pid 2280:tid 2358] [client 20.78.180.119:6980] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ex.php"] [unique_id "aThaP3cqIB-8ALgw4ZpOUQAAAJU"]
[Wed Dec 10 01:19:59.996230 2025] [:error] [pid 37041:tid 37047] [client 20.78.180.119:7142] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ex.php"] [unique_id "aThaP7uffDW8UzBwa1aqZgAAAEQ"]
[Wed Dec 10 01:20:02.076683 2025] [:error] [pid 2366:tid 2390] [client 20.78.180.119:7077] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ex.php"] [unique_id "aThaQkAeBjkmsNRkd1NdmQAAANY"]
[Wed Dec 10 01:20:04.559472 2025] [:error] [pid 37041:tid 37043] [client 20.78.180.119:7164] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kki.php"] [unique_id "aThaRLuffDW8UzBwa1aqbAAAAEA"]
[Wed Dec 10 01:20:05.991294 2025] [:error] [pid 2366:tid 2376] [client 20.78.180.119:7122] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kki.php"] [unique_id "aThaRUAeBjkmsNRkd1NdnQAAAMg"]
[Wed Dec 10 01:20:08.827701 2025] [:error] [pid 2366:tid 2390] [client 20.78.180.119:7118] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kki.php"] [unique_id "aThaSEAeBjkmsNRkd1NdpAAAANY"]
[Wed Dec 10 01:20:10.600438 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:7086] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kki.php"] [unique_id "aThaSkAeBjkmsNRkd1NdqQAAAMM"]
[Wed Dec 10 01:20:11.776180 2025] [:error] [pid 37041:tid 37061] [client 20.78.180.119:7117] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file88.php"] [unique_id "aThaS7uffDW8UzBwa1aqdwAAAFI"]
[Wed Dec 10 01:20:13.621397 2025] [:error] [pid 2280:tid 2355] [client 20.78.180.119:7125] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file88.php"] [unique_id "aThaTXcqIB-8ALgw4ZpObwAAAJI"]
[Wed Dec 10 01:20:13.828126 2025] [:error] [pid 2366:tid 2371] [client 20.239.184.21:12931] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-su.php"] [unique_id "aThaTUAeBjkmsNRkd1NdvAAAAMM"]
[Wed Dec 10 01:20:14.706704 2025] [:error] [pid 37041:tid 37053] [client 20.239.184.21:13214] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-su.php"] [unique_id "aThaTruffDW8UzBwa1aqfQAAAEo"]
[Wed Dec 10 01:20:15.450637 2025] [:error] [pid 2280:tid 2348] [client 20.239.184.21:16337] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-su.php"] [unique_id "aThaT3cqIB-8ALgw4ZpOdQAAAIs"]
[Wed Dec 10 01:20:15.641218 2025] [:error] [pid 2366:tid 2391] [client 20.78.180.119:7045] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file88.php"] [unique_id "aThaT0AeBjkmsNRkd1NdvQAAANc"]
[Wed Dec 10 01:20:16.058782 2025] [:error] [pid 2279:tid 2316] [client 20.239.184.21:16755] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-su.php"] [unique_id "aThaUFmpdQscMcJOElWsxQAAAUY"]
[Wed Dec 10 01:20:16.558747 2025] [:error] [pid 2366:tid 2384] [client 20.239.184.21:15575] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aThaUEAeBjkmsNRkd1NdwAAAANA"]
[Wed Dec 10 01:20:16.903267 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:13104] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aThaUHcqIB-8ALgw4ZpOfQAAAIg"]
[Wed Dec 10 01:20:16.987623 2025] [:error] [pid 37041:tid 37055] [client 20.78.180.119:7043] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file88.php"] [unique_id "aThaULuffDW8UzBwa1aqfgAAAEw"]
[Wed Dec 10 01:20:17.385057 2025] [:error] [pid 2366:tid 2383] [client 20.239.184.21:12950] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aThaUUAeBjkmsNRkd1NdwwAAAM8"]
[Wed Dec 10 01:20:17.912382 2025] [:error] [pid 2280:tid 2351] [client 20.78.180.119:7120] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aThaUXcqIB-8ALgw4ZpOgAAAAI4"]
[Wed Dec 10 01:20:17.967847 2025] [:error] [pid 2280:tid 2352] [client 20.239.184.21:16381] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aThaUXcqIB-8ALgw4ZpOgQAAAI8"]
[Wed Dec 10 01:20:18.455725 2025] [:error] [pid 2277:tid 2301] [client 20.239.184.21:13070] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/JPG.php"] [unique_id "aThaUoWGo731r6eS-w5UJQAAABI"]
[Wed Dec 10 01:20:18.942377 2025] [:error] [pid 2280:tid 2340] [client 20.239.184.21:15558] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/JPG.php"] [unique_id "aThaUncqIB-8ALgw4ZpOhAAAAIM"]
[Wed Dec 10 01:20:19.323004 2025] [:error] [pid 2277:tid 2302] [client 20.78.180.119:7007] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aThaU4WGo731r6eS-w5UJgAAABM"]
[Wed Dec 10 01:20:19.470710 2025] [:error] [pid 2280:tid 2344] [client 20.239.184.21:16380] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/JPG.php"] [unique_id "aThaU3cqIB-8ALgw4ZpOhQAAAIc"]
[Wed Dec 10 01:20:19.832538 2025] [:error] [pid 2279:tid 2321] [client 20.239.184.21:16761] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/JPG.php"] [unique_id "aThaU1mpdQscMcJOElWs0AAAAUs"]
[Wed Dec 10 01:20:20.201987 2025] [:error] [pid 2366:tid 2388] [client 20.239.184.21:17322] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/te.php"] [unique_id "aThaVEAeBjkmsNRkd1NdxQAAANQ"]
[Wed Dec 10 01:20:20.712367 2025] [:error] [pid 2366:tid 2371] [client 20.239.184.21:39703] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/te.php"] [unique_id "aThaVEAeBjkmsNRkd1NdxwAAAMM"]
[Wed Dec 10 01:20:21.104442 2025] [:error] [pid 2280:tid 2342] [client 20.239.184.21:12940] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/te.php"] [unique_id "aThaVXcqIB-8ALgw4ZpOiAAAAIU"]
[Wed Dec 10 01:20:21.634639 2025] [:error] [pid 2280:tid 2349] [client 20.239.184.21:17296] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/te.php"] [unique_id "aThaVXcqIB-8ALgw4ZpOiwAAAIw"]
[Wed Dec 10 01:20:21.646863 2025] [:error] [pid 2277:tid 2298] [client 20.78.180.119:6976] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aThaVYWGo731r6eS-w5UJwAAAA8"]
[Wed Dec 10 01:20:22.127373 2025] [:error] [pid 2280:tid 2359] [client 20.239.184.21:16343] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/poj.php"] [unique_id "aThaVncqIB-8ALgw4ZpOkgAAAJY"]
[Wed Dec 10 01:20:22.711831 2025] [:error] [pid 2366:tid 2380] [client 20.239.184.21:12991] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/poj.php"] [unique_id "aThaVkAeBjkmsNRkd1NdywAAAMw"]
[Wed Dec 10 01:20:23.017316 2025] [:error] [pid 2277:tid 2305] [client 20.78.180.119:7075] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aThaV4WGo731r6eS-w5ULgAAABY"]
[Wed Dec 10 01:20:23.284183 2025] [:error] [pid 2280:tid 2342] [client 20.239.184.21:17284] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/poj.php"] [unique_id "aThaV3cqIB-8ALgw4ZpOlgAAAIU"]
[Wed Dec 10 01:20:23.716900 2025] [:error] [pid 2366:tid 2389] [client 20.239.184.21:13198] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/poj.php"] [unique_id "aThaV0AeBjkmsNRkd1Nd0AAAANU"]
[Wed Dec 10 01:20:24.072621 2025] [:error] [pid 2277:tid 2297] [client 20.239.184.21:16333] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aThaWIWGo731r6eS-w5UMgAAAA4"]
[Wed Dec 10 01:20:24.567595 2025] [:error] [pid 2280:tid 2353] [client 20.239.184.21:17298] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aThaWHcqIB-8ALgw4ZpOnAAAAJA"]
[Wed Dec 10 01:20:24.606190 2025] [:error] [pid 2277:tid 2293] [client 20.78.180.119:7154] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an.php"] [unique_id "aThaWIWGo731r6eS-w5UMwAAAAo"]
[Wed Dec 10 01:20:24.892244 2025] [:error] [pid 2280:tid 2347] [client 20.239.184.21:13056] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aThaWHcqIB-8ALgw4ZpOrwAAAIo"]
[Wed Dec 10 01:20:25.224429 2025] [:error] [pid 2279:tid 2311] [client 20.239.184.21:17285] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aThaWVmpdQscMcJOElWs1wAAAUE"]
[Wed Dec 10 01:20:25.465874 2025] [:error] [pid 2277:tid 2302] [client 20.239.184.21:39693] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile1.php"] [unique_id "aThaWYWGo731r6eS-w5UNQAAABM"]
[Wed Dec 10 01:20:26.090101 2025] [:error] [pid 2277:tid 2304] [client 20.239.184.21:16711] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile1.php"] [unique_id "aThaWoWGo731r6eS-w5UOAAAABU"]
[Wed Dec 10 01:20:26.340751 2025] [:error] [pid 2280:tid 2345] [client 20.78.180.119:7167] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an.php"] [unique_id "aThaWncqIB-8ALgw4ZpPBwAAAIg"]
[Wed Dec 10 01:20:26.368391 2025] [:error] [pid 2366:tid 2380] [client 20.239.184.21:13238] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile1.php"] [unique_id "aThaWkAeBjkmsNRkd1Nd1gAAAMw"]
[Wed Dec 10 01:20:26.852677 2025] [:error] [pid 2366:tid 2384] [client 20.239.184.21:13184] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile1.php"] [unique_id "aThaWkAeBjkmsNRkd1Nd2gAAANA"]
[Wed Dec 10 01:20:27.451774 2025] [:error] [pid 2279:tid 2327] [client 20.78.180.119:7067] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an.php"] [unique_id "aThaW1mpdQscMcJOElWs3gAAAVE"]
[Wed Dec 10 01:20:27.576906 2025] [:error] [pid 2280:tid 2341] [client 20.239.184.21:16352] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-freya.php"] [unique_id "aThaW3cqIB-8ALgw4ZpPEQAAAIQ"]
[Wed Dec 10 01:20:28.078558 2025] [:error] [pid 2277:tid 2290] [client 20.239.184.21:13223] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-freya.php"] [unique_id "aThaXIWGo731r6eS-w5UiwAAAAg"]
[Wed Dec 10 01:20:28.250952 2025] [:error] [pid 37041:tid 37046] [client 20.78.180.119:7003] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an.php"] [unique_id "aThaXLuffDW8UzBwa1aqkAAAAEM"]
[Wed Dec 10 01:20:28.462327 2025] [:error] [pid 2279:tid 2310] [client 20.239.184.21:17311] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-freya.php"] [unique_id "aThaXFmpdQscMcJOElWs4AAAAUA"]
[Wed Dec 10 01:20:29.156132 2025] [:error] [pid 2279:tid 2323] [client 20.239.184.21:16335] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-freya.php"] [unique_id "aThaXVmpdQscMcJOElWs4wAAAU0"]
[Wed Dec 10 01:20:29.459556 2025] [:error] [pid 37041:tid 37062] [client 20.78.180.119:7042] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fns.php"] [unique_id "aThaXbuffDW8UzBwa1aqlQAAAFM"]
[Wed Dec 10 01:20:29.490324 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:13185] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2%25.php"] [unique_id "aThaXXcqIB-8ALgw4ZpPFAAAAIg"]
[Wed Dec 10 01:20:30.079624 2025] [:error] [pid 37041:tid 37064] [client 20.78.180.119:7046] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fns.php"] [unique_id "aThaXruffDW8UzBwa1aqmQAAAFU"]
[Wed Dec 10 01:20:30.095522 2025] [:error] [pid 2366:tid 2370] [client 20.239.184.21:13205] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2%25.php"] [unique_id "aThaXkAeBjkmsNRkd1Nd5gAAAMI"]
[Wed Dec 10 01:20:30.691941 2025] [:error] [pid 2280:tid 2346] [client 20.239.184.21:12929] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2%25.php"] [unique_id "aThaXncqIB-8ALgw4ZpPFQAAAIk"]
[Wed Dec 10 01:20:31.019895 2025] [:error] [pid 37041:tid 37053] [client 20.239.184.21:17291] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2%25.php"] [unique_id "aThaX7uffDW8UzBwa1aqmgAAAEo"]
[Wed Dec 10 01:20:31.449285 2025] [:error] [pid 2279:tid 2333] [client 20.239.184.21:12981] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aThaX1mpdQscMcJOElWs5wAAAVc"]
[Wed Dec 10 01:20:32.001633 2025] [:error] [pid 2277:tid 2288] [client 20.239.184.21:13241] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aThaYIWGo731r6eS-w5UjwAAAAY"]
[Wed Dec 10 01:20:32.398878 2025] [:error] [pid 2279:tid 2320] [client 20.78.180.119:7166] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fns.php"] [unique_id "aThaYFmpdQscMcJOElWs6gAAAUo"]
[Wed Dec 10 01:20:33.011452 2025] [:error] [pid 2366:tid 2383] [client 20.239.184.21:13204] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aThaYUAeBjkmsNRkd1Nd6gAAAM8"]
[Wed Dec 10 01:20:33.852742 2025] [:error] [pid 2280:tid 2340] [client 20.78.180.119:7040] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fns.php"] [unique_id "aThaYXcqIB-8ALgw4ZpPGgAAAIM"]
[Wed Dec 10 01:20:34.452132 2025] [:error] [pid 2277:tid 2290] [client 20.239.184.21:17323] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aThaYoWGo731r6eS-w5UlAAAAAg"]
[Wed Dec 10 01:20:35.184670 2025] [:error] [pid 2366:tid 2387] [client 20.78.180.119:7158] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadis.php"] [unique_id "aThaY0AeBjkmsNRkd1Nd7AAAANM"]
[Wed Dec 10 01:20:37.608285 2025] [:error] [pid 2277:tid 2293] [client 20.78.180.119:7039] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadis.php"] [unique_id "aThaZYWGo731r6eS-w5UmQAAAAo"]
[Wed Dec 10 01:20:39.089450 2025] [:error] [pid 37041:tid 37052] [client 20.78.180.119:7157] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadis.php"] [unique_id "aThaZ7uffDW8UzBwa1aqowAAAEk"]
[Wed Dec 10 01:20:39.205985 2025] [:error] [pid 2277:tid 2301] [client 20.239.184.21:12856] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/faq.php"] [unique_id "aThaZ4WGo731r6eS-w5UmgAAABI"]
[Wed Dec 10 01:20:39.560690 2025] [:error] [pid 2366:tid 2379] [client 20.239.184.21:39690] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/faq.php"] [unique_id "aThaZ0AeBjkmsNRkd1Nd9QAAAMs"]
[Wed Dec 10 01:20:40.067877 2025] [:error] [pid 2279:tid 2319] [client 20.78.180.119:7090] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadis.php"] [unique_id "aThaaFmpdQscMcJOElWs8QAAAUk"]
[Wed Dec 10 01:20:40.243519 2025] [:error] [pid 2280:tid 2353] [client 20.239.184.21:13235] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/faq.php"] [unique_id "aThaaHcqIB-8ALgw4ZpPIgAAAJA"]
[Wed Dec 10 01:20:41.298073 2025] [:error] [pid 2277:tid 2294] [client 20.239.184.21:15608] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/faq.php"] [unique_id "aThaaYWGo731r6eS-w5UngAAAAs"]
[Wed Dec 10 01:20:41.402012 2025] [:error] [pid 2366:tid 2386] [client 20.78.180.119:7108] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/c451f.php"] [unique_id "aThaaUAeBjkmsNRkd1Nd-AAAANI"]
[Wed Dec 10 01:20:42.211039 2025] [:error] [pid 2366:tid 2377] [client 20.239.184.21:16353] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x3.php"] [unique_id "aThaakAeBjkmsNRkd1Nd_AAAAMk"]
[Wed Dec 10 01:20:42.336164 2025] [:error] [pid 2366:tid 2380] [client 20.78.180.119:7091] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/c451f.php"] [unique_id "aThaakAeBjkmsNRkd1Nd_QAAAMw"]
[Wed Dec 10 01:20:42.491388 2025] [:error] [pid 2366:tid 2390] [client 20.239.184.21:12974] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x3.php"] [unique_id "aThaakAeBjkmsNRkd1Nd_gAAANY"]
[Wed Dec 10 01:20:43.089705 2025] [:error] [pid 2366:tid 2373] [client 20.239.184.21:13068] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x3.php"] [unique_id "aThaa0AeBjkmsNRkd1NeAQAAAMU"]
[Wed Dec 10 01:20:43.488542 2025] [:error] [pid 2279:tid 2328] [client 20.78.180.119:7047] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/c451f.php"] [unique_id "aThaa1mpdQscMcJOElWs9AAAAVI"]
[Wed Dec 10 01:20:43.619788 2025] [:error] [pid 2366:tid 2376] [client 20.239.184.21:39714] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x3.php"] [unique_id "aThaa0AeBjkmsNRkd1NeAwAAAMg"]
[Wed Dec 10 01:20:44.215661 2025] [:error] [pid 2279:tid 2332] [client 20.78.180.119:7113] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/c451f.php"] [unique_id "aThabFmpdQscMcJOElWs9gAAAVY"]
[Wed Dec 10 01:20:44.360244 2025] [:error] [pid 2366:tid 2383] [client 20.239.184.21:39720] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nbr.php"] [unique_id "aThabEAeBjkmsNRkd1NeBgAAAM8"]
[Wed Dec 10 01:20:45.406507 2025] [:error] [pid 2366:tid 2382] [client 20.78.180.119:6995] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/031.php"] [unique_id "aThabUAeBjkmsNRkd1NeCAAAAM4"]
[Wed Dec 10 01:20:45.779777 2025] [:error] [pid 37041:tid 37045] [client 20.239.184.21:15612] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nbr.php"] [unique_id "aThabbuffDW8UzBwa1aqpgAAAEI"]
[Wed Dec 10 01:20:46.766913 2025] [:error] [pid 37041:tid 37058] [client 20.239.184.21:15554] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nbr.php"] [unique_id "aThabruffDW8UzBwa1aqpwAAAE8"]
[Wed Dec 10 01:20:47.259589 2025] [:error] [pid 37041:tid 37044] [client 20.239.184.21:16378] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nbr.php"] [unique_id "aThab7uffDW8UzBwa1aqqQAAAEE"]
[Wed Dec 10 01:20:47.627956 2025] [:error] [pid 2280:tid 2339] [client 20.78.180.119:7140] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/031.php"] [unique_id "aThab3cqIB-8ALgw4ZpPJQAAAII"]
[Wed Dec 10 01:20:47.825499 2025] [:error] [pid 2280:tid 2348] [client 20.239.184.21:13234] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lov.php"] [unique_id "aThab3cqIB-8ALgw4ZpPJgAAAIs"]
[Wed Dec 10 01:20:48.447785 2025] [:error] [pid 2279:tid 2314] [client 20.239.184.21:17312] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lov.php"] [unique_id "aThacFmpdQscMcJOElWs_QAAAUQ"]
[Wed Dec 10 01:20:49.272792 2025] [:error] [pid 2279:tid 2317] [client 20.239.184.21:17339] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lov.php"] [unique_id "aThacVmpdQscMcJOElWs_wAAAUc"]
[Wed Dec 10 01:20:49.834869 2025] [:error] [pid 37041:tid 37062] [client 20.239.184.21:15582] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lov.php"] [unique_id "aThacbuffDW8UzBwa1aqrQAAAFM"]
[Wed Dec 10 01:20:50.558959 2025] [:error] [pid 2366:tid 2382] [client 20.78.180.119:7093] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/031.php"] [unique_id "aThackAeBjkmsNRkd1NeEgAAAM4"]
[Wed Dec 10 01:20:50.696762 2025] [:error] [pid 2277:tid 2296] [client 20.239.184.21:13221] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yawa.php"] [unique_id "aThacoWGo731r6eS-w5UpAAAAA0"]
[Wed Dec 10 01:20:51.199088 2025] [:error] [pid 37041:tid 37063] [client 20.239.184.21:39704] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yawa.php"] [unique_id "aThac7uffDW8UzBwa1aqrgAAAFQ"]
[Wed Dec 10 01:20:51.595869 2025] [:error] [pid 2279:tid 2322] [client 20.239.184.21:16374] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yawa.php"] [unique_id "aThac1mpdQscMcJOElWtAwAAAUw"]
[Wed Dec 10 01:20:52.300131 2025] [:error] [pid 2280:tid 2357] [client 20.239.184.21:15562] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yawa.php"] [unique_id "aThadHcqIB-8ALgw4ZpPKwAAAJQ"]
[Wed Dec 10 01:20:52.786783 2025] [:error] [pid 2279:tid 2318] [client 20.239.184.21:16715] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kla.php"] [unique_id "aThadFmpdQscMcJOElWtBAAAAUg"]
[Wed Dec 10 01:20:53.176825 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:15569] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kla.php"] [unique_id "aThadXcqIB-8ALgw4ZpPLAAAAIg"]
[Wed Dec 10 01:20:54.019203 2025] [:error] [pid 2279:tid 2332] [client 20.239.184.21:16710] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kla.php"] [unique_id "aThadlmpdQscMcJOElWtBwAAAVY"]
[Wed Dec 10 01:20:54.810087 2025] [:error] [pid 37041:tid 37057] [client 20.239.184.21:39726] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kla.php"] [unique_id "aThadruffDW8UzBwa1aqsgAAAE4"]
[Wed Dec 10 01:20:55.838565 2025] [:error] [pid 2277:tid 2295] [client 20.239.184.21:13059] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hum.php"] [unique_id "aThad4WGo731r6eS-w5UqwAAAAw"]
[Wed Dec 10 01:20:56.434805 2025] [:error] [pid 2280:tid 2337] [client 20.239.184.21:39702] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hum.php"] [unique_id "aThaeHcqIB-8ALgw4ZpPLQAAAIA"]
[Wed Dec 10 01:20:57.039319 2025] [:error] [pid 2366:tid 2379] [client 20.239.184.21:12952] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hum.php"] [unique_id "aThaeUAeBjkmsNRkd1NeGgAAAMs"]
[Wed Dec 10 01:20:57.506172 2025] [:error] [pid 37041:tid 37046] [client 20.239.184.21:13197] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hum.php"] [unique_id "aThaebuffDW8UzBwa1aqtgAAAEM"]
[Wed Dec 10 01:20:57.962198 2025] [:error] [pid 2366:tid 2368] [client 20.239.184.21:39739] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zuk.php"] [unique_id "aThaeUAeBjkmsNRkd1NeHAAAAMA"]
[Wed Dec 10 01:20:58.438533 2025] [:error] [pid 2279:tid 2323] [client 20.239.184.21:12975] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zuk.php"] [unique_id "aThaelmpdQscMcJOElWtCAAAAU0"]
[Wed Dec 10 01:20:58.758880 2025] [:error] [pid 37041:tid 37062] [client 20.239.184.21:16759] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zuk.php"] [unique_id "aThaeruffDW8UzBwa1aquAAAAFM"]
[Wed Dec 10 01:20:59.508454 2025] [:error] [pid 2277:tid 2305] [client 20.239.184.21:13108] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zuk.php"] [unique_id "aThae4WGo731r6eS-w5UrgAAABY"]
[Wed Dec 10 01:21:00.279425 2025] [:error] [pid 2277:tid 2299] [client 20.239.184.21:16475] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ed35f.php"] [unique_id "aThafIWGo731r6eS-w5UrwAAABA"]
[Wed Dec 10 01:21:00.835406 2025] [:error] [pid 2279:tid 2331] [client 20.239.184.21:16350] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ed35f.php"] [unique_id "aThafFmpdQscMcJOElWtCgAAAVU"]
[Wed Dec 10 01:21:01.300153 2025] [:error] [pid 37041:tid 37051] [client 20.239.184.21:16743] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ed35f.php"] [unique_id "aThafbuffDW8UzBwa1aquwAAAEg"]
[Wed Dec 10 01:21:01.739306 2025] [:error] [pid 2279:tid 2314] [client 20.239.184.21:17316] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ed35f.php"] [unique_id "aThafVmpdQscMcJOElWtDAAAAUQ"]
[Wed Dec 10 01:21:02.196817 2025] [:error] [pid 2280:tid 2350] [client 20.239.184.21:13210] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file32.php"] [unique_id "aThafncqIB-8ALgw4ZpPPQAAAI0"]
[Wed Dec 10 01:21:02.734138 2025] [:error] [pid 2277:tid 2291] [client 20.239.184.21:15613] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file32.php"] [unique_id "aThafoWGo731r6eS-w5UsgAAAAk"]
[Wed Dec 10 01:21:03.384939 2025] [:error] [pid 2280:tid 2356] [client 20.239.184.21:15559] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file32.php"] [unique_id "aThaf3cqIB-8ALgw4ZpPQwAAAJM"]
[Wed Dec 10 01:21:03.780753 2025] [:error] [pid 2366:tid 2371] [client 20.239.184.21:39736] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file32.php"] [unique_id "aThaf0AeBjkmsNRkd1NeIgAAAMM"]
[Wed Dec 10 01:21:04.344738 2025] [:error] [pid 2280:tid 2358] [client 20.239.184.21:15588] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zgh.php"] [unique_id "aThagHcqIB-8ALgw4ZpPRwAAAJU"]
[Wed Dec 10 01:21:04.920100 2025] [:error] [pid 2279:tid 2329] [client 20.239.184.21:15578] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zgh.php"] [unique_id "aThagFmpdQscMcJOElWtEAAAAVM"]
[Wed Dec 10 01:21:05.244060 2025] [:error] [pid 2279:tid 2333] [client 20.239.184.21:16737] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zgh.php"] [unique_id "aThagVmpdQscMcJOElWtEQAAAVc"]
[Wed Dec 10 01:21:05.840681 2025] [:error] [pid 2366:tid 2379] [client 20.239.184.21:13186] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zgh.php"] [unique_id "aThagUAeBjkmsNRkd1NeJgAAAMs"]
[Wed Dec 10 01:21:06.413656 2025] [:error] [pid 2279:tid 2320] [client 20.239.184.21:39743] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aThaglmpdQscMcJOElWtFgAAAUo"]
[Wed Dec 10 01:21:06.793940 2025] [:error] [pid 2366:tid 2368] [client 20.239.184.21:16752] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aThagkAeBjkmsNRkd1NeJwAAAMA"]
[Wed Dec 10 01:21:07.357789 2025] [:error] [pid 2279:tid 2331] [client 20.239.184.21:12986] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aThag1mpdQscMcJOElWtGgAAAVU"]
[Wed Dec 10 01:21:08.190773 2025] [:error] [pid 2279:tid 2325] [client 20.239.184.21:16705] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aThahFmpdQscMcJOElWtHQAAAU8"]
[Wed Dec 10 01:21:09.175457 2025] [:error] [pid 2366:tid 2369] [client 20.239.184.21:16329] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aThahUAeBjkmsNRkd1NeKwAAAME"]
[Wed Dec 10 01:21:09.889597 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:13196] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aThahXcqIB-8ALgw4ZpPVgAAAIg"]
[Wed Dec 10 01:21:10.485592 2025] [:error] [pid 2366:tid 2385] [client 20.239.184.21:16377] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aThahkAeBjkmsNRkd1NeLwAAANE"]
[Wed Dec 10 01:21:51.803647 2025] [:error] [pid 2277:tid 2305] [client 20.239.184.21:16734] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/444.php"] [unique_id "aThar4WGo731r6eS-w5U8gAAABY"]
[Wed Dec 10 01:21:52.762805 2025] [:error] [pid 2366:tid 2389] [client 20.239.184.21:15663] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/444.php"] [unique_id "aThasEAeBjkmsNRkd1NehQAAANU"]
[Wed Dec 10 01:21:54.471610 2025] [:error] [pid 2366:tid 2380] [client 20.239.184.21:27683] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/444.php"] [unique_id "aThaskAeBjkmsNRkd1NehwAAAMw"]
[Wed Dec 10 01:21:56.347302 2025] [:error] [pid 2279:tid 2327] [client 20.239.184.21:16030] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/444.php"] [unique_id "aThatFmpdQscMcJOElWtkwAAAVE"]
[Wed Dec 10 01:21:57.608808 2025] [:error] [pid 2279:tid 2328] [client 20.78.180.119:7083] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aThatVmpdQscMcJOElWtmAAAAVI"]
[Wed Dec 10 01:21:57.610847 2025] [:error] [pid 2279:tid 2310] [client 20.239.184.21:13127] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/09fa6.php"] [unique_id "aThatVmpdQscMcJOElWtmQAAAUA"]
[Wed Dec 10 01:21:58.525587 2025] [:error] [pid 2280:tid 2342] [client 20.239.184.21:16026] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/09fa6.php"] [unique_id "aThatncqIB-8ALgw4ZpPuAAAAIU"]
[Wed Dec 10 01:21:59.358426 2025] [:error] [pid 2277:tid 2289] [client 20.239.184.21:16022] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/09fa6.php"] [unique_id "aThat4WGo731r6eS-w5U9gAAAAc"]
[Wed Dec 10 01:21:59.874191 2025] [:error] [pid 37041:tid 37056] [client 20.78.180.119:7149] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aThat7uffDW8UzBwa1arAAAAAE0"]
[Wed Dec 10 01:22:00.152625 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:18331] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/09fa6.php"] [unique_id "aThauHcqIB-8ALgw4ZpPuwAAAIg"]
[Wed Dec 10 01:22:00.890072 2025] [:error] [pid 2280:tid 2353] [client 20.239.184.21:18337] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aThauHcqIB-8ALgw4ZpPvgAAAJA"]
[Wed Dec 10 01:22:01.297124 2025] [:error] [pid 2279:tid 2319] [client 20.239.184.21:16694] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aThauVmpdQscMcJOElWtoQAAAUk"]
[Wed Dec 10 01:22:01.859943 2025] [:error] [pid 37041:tid 37063] [client 20.239.184.21:23347] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aThaubuffDW8UzBwa1arBAAAAFQ"]
[Wed Dec 10 01:22:02.322150 2025] [:error] [pid 2280:tid 2346] [client 20.78.180.119:7070] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aThauncqIB-8ALgw4ZpPwQAAAIk"]
[Wed Dec 10 01:22:02.389938 2025] [:error] [pid 2277:tid 2302] [client 20.239.184.21:16697] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aThauoWGo731r6eS-w5U-QAAABM"]
[Wed Dec 10 01:22:03.411678 2025] [:error] [pid 37041:tid 37053] [client 20.239.184.21:12601] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aThau7uffDW8UzBwa1arCAAAAEo"]
[Wed Dec 10 01:22:04.188468 2025] [:error] [pid 2280:tid 2344] [client 20.78.180.119:6977] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aThavHcqIB-8ALgw4ZpPxwAAAIc"]
[Wed Dec 10 01:22:04.387661 2025] [:error] [pid 2366:tid 2374] [client 20.239.184.21:13169] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aThavEAeBjkmsNRkd1NejwAAAMY"]
[Wed Dec 10 01:22:05.059632 2025] [:error] [pid 2366:tid 2392] [client 20.239.184.21:16987] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aThavUAeBjkmsNRkd1NekAAAANg"]
[Wed Dec 10 01:22:05.350163 2025] [:error] [pid 2280:tid 2353] [client 20.239.184.21:16641] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aThavXcqIB-8ALgw4ZpPygAAAJA"]
[Wed Dec 10 01:22:05.926019 2025] [:error] [pid 2280:tid 2355] [client 20.239.184.21:38402] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aThavXcqIB-8ALgw4ZpPywAAAJI"]
[Wed Dec 10 01:22:06.200963 2025] [:error] [pid 2280:tid 2348] [client 20.78.180.119:7129] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/GX.php"] [unique_id "aThavncqIB-8ALgw4ZpPzAAAAIs"]
[Wed Dec 10 01:22:06.866748 2025] [:error] [pid 37041:tid 37067] [client 20.239.184.21:15477] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aThavruffDW8UzBwa1arDwAAAFg"]
[Wed Dec 10 01:22:07.975626 2025] [:error] [pid 2366:tid 2370] [client 20.239.184.21:12568] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aThav0AeBjkmsNRkd1NemQAAAMI"]
[Wed Dec 10 01:22:07.989622 2025] [:error] [pid 2280:tid 2354] [client 20.78.180.119:7058] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/GX.php"] [unique_id "aThav3cqIB-8ALgw4ZpP0gAAAJE"]
[Wed Dec 10 01:22:08.768872 2025] [:error] [pid 2280:tid 2348] [client 20.239.184.21:38403] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aThawHcqIB-8ALgw4ZpP1gAAAIs"]
[Wed Dec 10 01:22:09.250118 2025] [:error] [pid 2277:tid 2295] [client 20.78.180.119:7156] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/GX.php"] [unique_id "aThawYWGo731r6eS-w5U_QAAAAw"]
[Wed Dec 10 01:22:09.630281 2025] [:error] [pid 2280:tid 2350] [client 20.239.184.21:15843] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aThawXcqIB-8ALgw4ZpP2wAAAI0"]
[Wed Dec 10 01:22:10.494708 2025] [:error] [pid 37041:tid 37055] [client 20.239.184.21:16382] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aThawruffDW8UzBwa1arFAAAAEw"]
[Wed Dec 10 01:22:10.682306 2025] [:error] [pid 37041:tid 37058] [client 20.78.180.119:7097] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/GX.php"] [unique_id "aThawruffDW8UzBwa1arFgAAAE8"]
[Wed Dec 10 01:22:11.581599 2025] [:error] [pid 2279:tid 2314] [client 20.78.180.119:7105] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/num.php"] [unique_id "aThaw1mpdQscMcJOElWtqwAAAUQ"]
[Wed Dec 10 01:22:12.097675 2025] [:error] [pid 2280:tid 2360] [client 20.239.184.21:18324] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aThaxHcqIB-8ALgw4ZpP4gAAAJc"]
[Wed Dec 10 01:22:12.225482 2025] [:error] [pid 37041:tid 37063] [client 20.78.180.119:7060] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/num.php"] [unique_id "aThaxLuffDW8UzBwa1arGAAAAFQ"]
[Wed Dec 10 01:22:12.870411 2025] [:error] [pid 2277:tid 2299] [client 20.78.180.119:7079] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/num.php"] [unique_id "aThaxIWGo731r6eS-w5VAAAAABA"]
[Wed Dec 10 01:22:13.809946 2025] [:error] [pid 2279:tid 2318] [client 20.239.184.21:32374] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aThaxVmpdQscMcJOElWtrwAAAUg"]
[Wed Dec 10 01:22:14.029975 2025] [:error] [pid 2366:tid 2378] [client 20.78.180.119:7146] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/num.php"] [unique_id "aThaxkAeBjkmsNRkd1NeoQAAAMo"]
[Wed Dec 10 01:22:14.900961 2025] [:error] [pid 2279:tid 2332] [client 20.78.180.119:7066] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efa4f.php"] [unique_id "aThaxlmpdQscMcJOElWtswAAAVY"]
[Wed Dec 10 01:22:14.936866 2025] [:error] [pid 2366:tid 2381] [client 20.239.184.21:32442] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThaxkAeBjkmsNRkd1NepAAAAM0"]
[Wed Dec 10 01:22:15.828892 2025] [:error] [pid 2366:tid 2391] [client 20.239.184.21:16935] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThax0AeBjkmsNRkd1NeqAAAANc"]
[Wed Dec 10 01:22:15.835300 2025] [:error] [pid 2366:tid 2372] [client 20.78.180.119:7053] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efa4f.php"] [unique_id "aThax0AeBjkmsNRkd1NeqQAAAMQ"]
[Wed Dec 10 01:22:16.930534 2025] [:error] [pid 2277:tid 2302] [client 20.239.184.21:32386] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThayIWGo731r6eS-w5VBAAAABM"]
[Wed Dec 10 01:22:17.469177 2025] [:error] [pid 2280:tid 2341] [client 20.239.184.21:41884] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThayXcqIB-8ALgw4ZpP7wAAAIQ"]
[Wed Dec 10 01:22:17.674481 2025] [:error] [pid 2280:tid 2340] [client 20.78.180.119:7052] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efa4f.php"] [unique_id "aThayXcqIB-8ALgw4ZpP8AAAAIM"]
[Wed Dec 10 01:22:18.259122 2025] [:error] [pid 2279:tid 2333] [client 20.78.180.119:7074] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efa4f.php"] [unique_id "aThaylmpdQscMcJOElWtyQAAAVc"]
[Wed Dec 10 01:22:18.359875 2025] [:error] [pid 2279:tid 2327] [client 20.239.184.21:16903] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi2.php"] [unique_id "aThaylmpdQscMcJOElWtywAAAVE"]
[Wed Dec 10 01:22:19.573971 2025] [:error] [pid 2366:tid 2385] [client 20.78.180.119:7026] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ilex.php"] [unique_id "aThay0AeBjkmsNRkd1NesgAAANE"]
[Wed Dec 10 01:22:19.729444 2025] [:error] [pid 2277:tid 2301] [client 20.239.184.21:42780] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi2.php"] [unique_id "aThay4WGo731r6eS-w5VBQAAABI"]
[Wed Dec 10 01:22:20.243668 2025] [:error] [pid 2277:tid 2295] [client 20.239.184.21:17394] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi2.php"] [unique_id "aThazIWGo731r6eS-w5VBgAAAAw"]
[Wed Dec 10 01:22:20.497297 2025] [:error] [pid 2366:tid 2389] [client 20.78.180.119:7163] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ilex.php"] [unique_id "aThazEAeBjkmsNRkd1NeswAAANU"]
[Wed Dec 10 01:22:20.745169 2025] [:error] [pid 2280:tid 2349] [client 20.239.184.21:38417] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi2.php"] [unique_id "aThazHcqIB-8ALgw4ZpP-AAAAIw"]
[Wed Dec 10 01:22:21.136242 2025] [:error] [pid 2280:tid 2352] [client 20.239.184.21:42756] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/q1.php"] [unique_id "aThazXcqIB-8ALgw4ZpP-QAAAI8"]
[Wed Dec 10 01:22:21.941688 2025] [:error] [pid 2366:tid 2380] [client 20.239.184.21:15426] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/q1.php"] [unique_id "aThazUAeBjkmsNRkd1NetwAAAMw"]
[Wed Dec 10 01:22:22.086265 2025] [:error] [pid 2366:tid 2383] [client 20.78.180.119:7132] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ilex.php"] [unique_id "aThazkAeBjkmsNRkd1NeuAAAAM8"]
[Wed Dec 10 01:22:22.583646 2025] [:error] [pid 2279:tid 2319] [client 20.239.184.21:16937] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/q1.php"] [unique_id "aThazlmpdQscMcJOElWuAQAAAUk"]
[Wed Dec 10 01:22:22.914449 2025] [:error] [pid 2366:tid 2379] [client 20.78.180.119:7144] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ilex.php"] [unique_id "aThazkAeBjkmsNRkd1NevwAAAMs"]
[Wed Dec 10 01:22:23.202283 2025] [:error] [pid 2277:tid 2284] [client 20.239.184.21:16898] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/q1.php"] [unique_id "aThaz4WGo731r6eS-w5VCgAAAAI"]
[Wed Dec 10 01:22:23.975434 2025] [:error] [pid 37041:tid 37065] [client 20.239.184.21:17352] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zil.php"] [unique_id "aThaz7uffDW8UzBwa1arHgAAAFY"]
[Wed Dec 10 01:22:24.393212 2025] [:error] [pid 2366:tid 2386] [client 20.78.180.119:7051] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aTha0EAeBjkmsNRkd1NexQAAANI"]
[Wed Dec 10 01:22:25.009708 2025] [:error] [pid 37041:tid 37058] [client 20.239.184.21:42790] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zil.php"] [unique_id "aTha0buffDW8UzBwa1arIAAAAE8"]
[Wed Dec 10 01:22:25.696643 2025] [:error] [pid 2280:tid 2359] [client 20.78.180.119:7011] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aTha0XcqIB-8ALgw4ZpQAAAAAJY"]
[Wed Dec 10 01:22:25.834763 2025] [:error] [pid 2279:tid 2327] [client 20.239.184.21:31915] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zil.php"] [unique_id "aTha0VmpdQscMcJOElWuHAAAAVE"]
[Wed Dec 10 01:22:26.588357 2025] [:error] [pid 2280:tid 2352] [client 20.78.180.119:7153] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aTha0ncqIB-8ALgw4ZpQAgAAAI8"]
[Wed Dec 10 01:22:26.985631 2025] [:error] [pid 2279:tid 2317] [client 20.239.184.21:16099] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zil.php"] [unique_id "aTha0lmpdQscMcJOElWuJgAAAUc"]
[Wed Dec 10 01:22:27.933124 2025] [:error] [pid 2279:tid 2319] [client 20.78.180.119:7133] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aTha01mpdQscMcJOElWuNQAAAUk"]
[Wed Dec 10 01:22:28.349520 2025] [:error] [pid 2280:tid 2342] [client 20.239.184.21:41918] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wle.php"] [unique_id "aTha1HcqIB-8ALgw4ZpQBwAAAIU"]
[Wed Dec 10 01:22:28.702870 2025] [:error] [pid 2279:tid 2310] [client 20.78.180.119:6987] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/new2.php"] [unique_id "aTha1FmpdQscMcJOElWuOQAAAUA"]
[Wed Dec 10 01:22:28.994676 2025] [:error] [pid 37041:tid 37057] [client 20.239.184.21:15887] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wle.php"] [unique_id "aTha1LuffDW8UzBwa1arKQAAAE4"]
[Wed Dec 10 01:22:29.678602 2025] [:error] [pid 37041:tid 37061] [client 20.78.180.119:7131] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/new2.php"] [unique_id "aTha1buffDW8UzBwa1arLAAAAFI"]
[Wed Dec 10 01:22:30.173909 2025] [:error] [pid 37041:tid 37056] [client 20.239.184.21:15884] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wle.php"] [unique_id "aTha1ruffDW8UzBwa1arLwAAAE0"]
[Wed Dec 10 01:22:31.479205 2025] [:error] [pid 2277:tid 2294] [client 20.78.180.119:7159] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/new2.php"] [unique_id "aTha14WGo731r6eS-w5VHAAAAAs"]
[Wed Dec 10 01:22:31.556290 2025] [:error] [pid 2279:tid 2323] [client 20.239.184.21:53240] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wle.php"] [unique_id "aTha11mpdQscMcJOElWuPQAAAU0"]
[Wed Dec 10 01:22:32.526473 2025] [:error] [pid 2366:tid 2389] [client 20.78.180.119:6986] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/new2.php"] [unique_id "aTha2EAeBjkmsNRkd1Ne6QAAANU"]
[Wed Dec 10 01:22:32.991977 2025] [:error] [pid 37041:tid 37057] [client 20.239.184.21:21129] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTha2LuffDW8UzBwa1arOgAAAE4"]
[Wed Dec 10 01:22:33.918820 2025] [:error] [pid 37041:tid 37064] [client 20.78.180.119:7160] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/axx.php"] [unique_id "aTha2buffDW8UzBwa1arQAAAAFU"]
[Wed Dec 10 01:22:34.258204 2025] [:error] [pid 2277:tid 2296] [client 20.239.184.21:41862] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTha2oWGo731r6eS-w5VIQAAAA0"]
[Wed Dec 10 01:22:34.750240 2025] [:error] [pid 2279:tid 2324] [client 20.239.184.21:21165] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTha2lmpdQscMcJOElWuUgAAAU4"]
[Wed Dec 10 01:22:36.088615 2025] [:error] [pid 2277:tid 2286] [client 20.78.180.119:7127] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/axx.php"] [unique_id "aTha3IWGo731r6eS-w5VJQAAAAQ"]
[Wed Dec 10 01:22:36.272420 2025] [:error] [pid 2277:tid 2293] [client 20.239.184.21:16114] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTha3IWGo731r6eS-w5VJgAAAAo"]
[Wed Dec 10 01:22:37.163887 2025] [:error] [pid 2279:tid 2328] [client 20.239.184.21:28717] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aTha3VmpdQscMcJOElWucAAAAVI"]
[Wed Dec 10 01:22:37.257634 2025] [:error] [pid 2279:tid 2310] [client 20.78.180.119:6998] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/axx.php"] [unique_id "aTha3VmpdQscMcJOElWucgAAAUA"]
[Wed Dec 10 01:22:38.096922 2025] [:error] [pid 2366:tid 2380] [client 20.239.184.21:31818] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aTha3kAeBjkmsNRkd1Ne9gAAAMw"]
[Wed Dec 10 01:22:38.135713 2025] [:error] [pid 2277:tid 2307] [client 20.78.180.119:7123] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/axx.php"] [unique_id "aTha3oWGo731r6eS-w5VKQAAABg"]
[Wed Dec 10 01:22:38.937701 2025] [:error] [pid 2279:tid 2332] [client 20.78.180.119:7069] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goat.php"] [unique_id "aTha3lmpdQscMcJOElWuhgAAAVY"]
[Wed Dec 10 01:22:41.090382 2025] [:error] [pid 2366:tid 2390] [client 20.78.180.119:7121] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goat.php"] [unique_id "aTha4UAeBjkmsNRkd1Ne_wAAANY"]
[Wed Dec 10 01:22:42.304423 2025] [:error] [pid 2366:tid 2391] [client 20.78.180.119:7056] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goat.php"] [unique_id "aTha4kAeBjkmsNRkd1NfAwAAANc"]
[Wed Dec 10 01:22:42.962641 2025] [:error] [pid 2279:tid 2321] [client 20.78.180.119:7094] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goat.php"] [unique_id "aTha4lmpdQscMcJOElWurwAAAUs"]
[Wed Dec 10 01:22:43.726121 2025] [:error] [pid 37041:tid 37045] [client 20.239.184.21:27748] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aTha47uffDW8UzBwa1arZwAAAEI"]
[Wed Dec 10 01:22:44.025997 2025] [:error] [pid 2279:tid 2324] [client 20.78.180.119:7041] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aTha5FmpdQscMcJOElWuvAAAAU4"]
[Wed Dec 10 01:22:44.233873 2025] [:error] [pid 2366:tid 2378] [client 20.239.184.21:28683] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aTha5EAeBjkmsNRkd1NfDQAAAMo"]
[Wed Dec 10 01:22:44.771492 2025] [:error] [pid 2366:tid 2379] [client 20.239.184.21:12289] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "aTha5EAeBjkmsNRkd1NfDwAAAMs"]
[Wed Dec 10 01:22:45.600912 2025] [:error] [pid 2279:tid 2312] [client 20.239.184.21:39081] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "aTha5VmpdQscMcJOElWuywAAAUI"]
[Wed Dec 10 01:22:46.441563 2025] [:error] [pid 2280:tid 2338] [client 20.239.184.21:41967] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "aTha5ncqIB-8ALgw4ZpQIQAAAIE"]
[Wed Dec 10 01:22:46.708783 2025] [:error] [pid 2279:tid 2326] [client 20.78.180.119:7165] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aTha5lmpdQscMcJOElWu1AAAAVA"]
[Wed Dec 10 01:22:47.277929 2025] [:error] [pid 2280:tid 2337] [client 20.239.184.21:39086] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "aTha53cqIB-8ALgw4ZpQJgAAAIA"]
[Wed Dec 10 01:22:48.071626 2025] [:error] [pid 2279:tid 2321] [client 20.78.180.119:7126] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aTha6FmpdQscMcJOElWu2AAAAUs"]
[Wed Dec 10 01:22:48.100439 2025] [:error] [pid 2279:tid 2320] [client 20.239.184.21:28720] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTha6FmpdQscMcJOElWu2QAAAUo"]
[Wed Dec 10 01:22:48.738166 2025] [:error] [pid 2279:tid 2325] [client 20.78.180.119:7044] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aTha6FmpdQscMcJOElWu3QAAAU8"]
[Wed Dec 10 01:22:48.738637 2025] [:error] [pid 2279:tid 2314] [client 20.239.184.21:16300] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTha6FmpdQscMcJOElWu3gAAAUQ"]
[Wed Dec 10 01:22:50.324329 2025] [:error] [pid 37041:tid 37062] [client 20.78.180.119:7048] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file6.php"] [unique_id "aTha6ruffDW8UzBwa1arhgAAAFM"]
[Wed Dec 10 01:22:51.094575 2025] [:error] [pid 2366:tid 2388] [client 20.78.180.119:7050] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file6.php"] [unique_id "aTha60AeBjkmsNRkd1NfHAAAANQ"]
[Wed Dec 10 01:22:52.117494 2025] [:error] [pid 2366:tid 2386] [client 20.78.180.119:7062] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file6.php"] [unique_id "aTha7EAeBjkmsNRkd1NfHQAAANI"]
[Wed Dec 10 01:22:52.981601 2025] [:error] [pid 2366:tid 2383] [client 20.78.180.119:7057] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file6.php"] [unique_id "aTha7EAeBjkmsNRkd1NfHwAAAM8"]
[Wed Dec 10 01:22:54.070608 2025] [:error] [pid 2366:tid 2391] [client 20.78.180.119:7081] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file5.php"] [unique_id "aTha7kAeBjkmsNRkd1NfIAAAANc"]
[Wed Dec 10 01:22:54.810684 2025] [:error] [pid 2279:tid 2320] [client 20.78.180.119:6994] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file5.php"] [unique_id "aTha7lmpdQscMcJOElWu8AAAAUo"]
[Wed Dec 10 01:23:35.372820 2025] [:error] [pid 2280:tid 2347] [client 20.239.184.21:16251] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ker.php"] [unique_id "aThbF3cqIB-8ALgw4ZpQhwAAAIo"]
[Wed Dec 10 01:23:36.108835 2025] [:error] [pid 37041:tid 37066] [client 20.239.184.21:12886] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ker.php"] [unique_id "aThbGLuffDW8UzBwa1ar4QAAAFc"]
[Wed Dec 10 01:23:37.056682 2025] [:error] [pid 2277:tid 2283] [client 20.239.184.21:21780] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ker.php"] [unique_id "aThbGYWGo731r6eS-w5VdAAAAAE"]
[Wed Dec 10 01:23:37.416664 2025] [:error] [pid 2277:tid 2302] [client 20.239.184.21:18892] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ker.php"] [unique_id "aThbGYWGo731r6eS-w5VdwAAABM"]
[Wed Dec 10 01:23:38.266930 2025] [:error] [pid 2279:tid 2313] [client 20.239.184.21:21866] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gul.php"] [unique_id "aThbGlmpdQscMcJOElWvVAAAAUM"]
[Wed Dec 10 01:23:38.674679 2025] [:error] [pid 37041:tid 37055] [client 20.239.184.21:37779] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gul.php"] [unique_id "aThbGruffDW8UzBwa1ar5QAAAEw"]
[Wed Dec 10 01:23:39.214931 2025] [:error] [pid 2366:tid 2373] [client 20.239.184.21:37759] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gul.php"] [unique_id "aThbG0AeBjkmsNRkd1NfhgAAAMU"]
[Wed Dec 10 01:23:39.746135 2025] [:error] [pid 2366:tid 2390] [client 20.239.184.21:38357] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gul.php"] [unique_id "aThbG0AeBjkmsNRkd1NfiAAAANY"]
[Wed Dec 10 01:23:40.260344 2025] [:error] [pid 2366:tid 2383] [client 20.239.184.21:21828] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/image.php"] [unique_id "aThbHEAeBjkmsNRkd1NfiQAAAM8"]
[Wed Dec 10 01:23:40.935982 2025] [:error] [pid 2366:tid 2382] [client 20.239.184.21:18925] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/image.php"] [unique_id "aThbHEAeBjkmsNRkd1NfigAAAM4"]
[Wed Dec 10 01:23:41.723737 2025] [:error] [pid 37041:tid 37053] [client 20.239.184.21:12923] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/image.php"] [unique_id "aThbHbuffDW8UzBwa1ar6wAAAEo"]
[Wed Dec 10 01:23:42.147436 2025] [:error] [pid 37041:tid 37062] [client 20.239.184.21:38350] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/image.php"] [unique_id "aThbHruffDW8UzBwa1ar7AAAAFM"]
[Wed Dec 10 01:23:42.801053 2025] [:error] [pid 37041:tid 37054] [client 20.239.184.21:18936] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lok.php"] [unique_id "aThbHruffDW8UzBwa1ar8AAAAEs"]
[Wed Dec 10 01:23:43.305050 2025] [:error] [pid 2280:tid 2360] [client 20.239.184.21:37729] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lok.php"] [unique_id "aThbH3cqIB-8ALgw4ZpQwgAAAJc"]
[Wed Dec 10 01:23:44.608593 2025] [:error] [pid 37041:tid 37060] [client 20.239.184.21:21843] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lok.php"] [unique_id "aThbILuffDW8UzBwa1ar9gAAAFE"]
[Wed Dec 10 01:23:45.099569 2025] [:error] [pid 2279:tid 2318] [client 20.239.184.21:38351] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lok.php"] [unique_id "aThbIVmpdQscMcJOElWvZgAAAUg"]
[Wed Dec 10 01:23:46.005827 2025] [:error] [pid 2279:tid 2334] [client 20.239.184.21:18898] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hey.php"] [unique_id "aThbIlmpdQscMcJOElWvZwAAAVg"]
[Wed Dec 10 01:23:47.361449 2025] [:error] [pid 37041:tid 37066] [client 20.239.184.21:21820] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hey.php"] [unique_id "aThbI7uffDW8UzBwa1ar-gAAAFc"]
[Wed Dec 10 01:23:48.591069 2025] [:error] [pid 2280:tid 2343] [client 20.239.184.21:12874] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hey.php"] [unique_id "aThbJHcqIB-8ALgw4ZpQxgAAAIY"]
[Wed Dec 10 01:23:49.864704 2025] [:error] [pid 2279:tid 2324] [client 20.239.184.21:18903] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hey.php"] [unique_id "aThbJVmpdQscMcJOElWvcwAAAU4"]
[Wed Dec 10 01:23:51.132929 2025] [:error] [pid 2366:tid 2382] [client 20.239.184.21:12758] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "aThbJ0AeBjkmsNRkd1NflQAAAM4"]
[Wed Dec 10 01:23:54.145224 2025] [:error] [pid 2277:tid 2307] [client 20.239.184.21:18918] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "aThbKoWGo731r6eS-w5VjgAAABg"]
[Wed Dec 10 01:23:55.365412 2025] [:error] [pid 37041:tid 37066] [client 20.239.184.21:21793] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "aThbK7uffDW8UzBwa1asBAAAAFc"]
[Wed Dec 10 01:23:57.198638 2025] [:error] [pid 37041:tid 37054] [client 20.239.184.21:42497] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "aThbLbuffDW8UzBwa1asCAAAAEs"]
[Wed Dec 10 01:23:58.532388 2025] [:error] [pid 2279:tid 2320] [client 20.239.184.21:21788] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wok.php"] [unique_id "aThbLlmpdQscMcJOElWvfQAAAUo"]
[Wed Dec 10 01:23:59.789224 2025] [:error] [pid 2279:tid 2323] [client 20.239.184.21:18919] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wok.php"] [unique_id "aThbL1mpdQscMcJOElWvgQAAAU0"]
[Wed Dec 10 01:24:00.834313 2025] [:error] [pid 2366:tid 2379] [client 20.239.184.21:38349] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wok.php"] [unique_id "aThbMEAeBjkmsNRkd1NfqwAAAMs"]
[Wed Dec 10 01:24:01.621296 2025] [:error] [pid 2277:tid 2305] [client 20.239.184.21:42508] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wok.php"] [unique_id "aThbMYWGo731r6eS-w5VmQAAABY"]
[Wed Dec 10 01:24:02.055895 2025] [:error] [pid 2366:tid 2375] [client 20.239.184.21:37251] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ini.php"] [unique_id "aThbMkAeBjkmsNRkd1NfrwAAAMc"]
[Wed Dec 10 01:24:02.897641 2025] [:error] [pid 2280:tid 2358] [client 20.239.184.21:38367] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ini.php"] [unique_id "aThbMncqIB-8ALgw4ZpQ2wAAAJU"]
[Wed Dec 10 01:24:03.670128 2025] [:error] [pid 2279:tid 2329] [client 20.239.184.21:42521] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ini.php"] [unique_id "aThbM1mpdQscMcJOElWviAAAAVM"]
[Wed Dec 10 01:24:04.456870 2025] [:error] [pid 2280:tid 2341] [client 20.239.184.21:21805] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ini.php"] [unique_id "aThbNHcqIB-8ALgw4ZpQ3wAAAIQ"]
[Wed Dec 10 01:24:05.195942 2025] [:error] [pid 37041:tid 37046] [client 20.239.184.21:12872] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hzz.php"] [unique_id "aThbNbuffDW8UzBwa1asCwAAAEM"]
[Wed Dec 10 01:24:05.703795 2025] [:error] [pid 37041:tid 37061] [client 20.239.184.21:18896] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hzz.php"] [unique_id "aThbNbuffDW8UzBwa1asDQAAAFI"]
[Wed Dec 10 01:24:06.060483 2025] [:error] [pid 2366:tid 2381] [client 20.239.184.21:42528] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hzz.php"] [unique_id "aThbNkAeBjkmsNRkd1NfswAAAM0"]
[Wed Dec 10 01:24:06.660181 2025] [:error] [pid 2277:tid 2304] [client 20.239.184.21:37282] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hzz.php"] [unique_id "aThbNoWGo731r6eS-w5VogAAABU"]
[Wed Dec 10 01:24:07.228210 2025] [:error] [pid 2277:tid 2296] [client 20.239.184.21:38373] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpxct.php"] [unique_id "aThbN4WGo731r6eS-w5VowAAAA0"]
[Wed Dec 10 01:24:07.888051 2025] [:error] [pid 2366:tid 2372] [client 20.239.184.21:15497] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpxct.php"] [unique_id "aThbN0AeBjkmsNRkd1NfuAAAAMQ"]
[Wed Dec 10 01:24:09.010329 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:15494] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpxct.php"] [unique_id "aThbOXcqIB-8ALgw4ZpQ4wAAAIg"]
[Wed Dec 10 01:24:09.489983 2025] [:error] [pid 2280:tid 2344] [client 20.239.184.21:15528] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpxct.php"] [unique_id "aThbOXcqIB-8ALgw4ZpQ5AAAAIc"]
[Wed Dec 10 01:24:10.109795 2025] [:error] [pid 2279:tid 2314] [client 20.239.184.21:42506] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ex.php"] [unique_id "aThbOlmpdQscMcJOElWvkgAAAUQ"]
[Wed Dec 10 01:24:10.715370 2025] [:error] [pid 2277:tid 2300] [client 20.239.184.21:12873] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ex.php"] [unique_id "aThbOoWGo731r6eS-w5VqQAAABE"]
[Wed Dec 10 01:24:11.092479 2025] [:error] [pid 2279:tid 2330] [client 20.239.184.21:42538] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ex.php"] [unique_id "aThbO1mpdQscMcJOElWvkwAAAVQ"]
[Wed Dec 10 01:24:12.030584 2025] [:error] [pid 37041:tid 37058] [client 20.239.184.21:38347] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ex.php"] [unique_id "aThbPLuffDW8UzBwa1asIAAAAE8"]
[Wed Dec 10 01:24:13.112027 2025] [:error] [pid 2280:tid 2343] [client 20.239.184.21:38337] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kki.php"] [unique_id "aThbPXcqIB-8ALgw4ZpQ7gAAAIY"]
[Wed Dec 10 01:24:14.250793 2025] [:error] [pid 2277:tid 2295] [client 20.239.184.21:18916] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kki.php"] [unique_id "aThbPoWGo731r6eS-w5VrwAAAAw"]
[Wed Dec 10 01:24:15.169071 2025] [:error] [pid 2279:tid 2330] [client 20.239.184.21:15544] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kki.php"] [unique_id "aThbP1mpdQscMcJOElWvpAAAAVQ"]
[Wed Dec 10 01:24:15.585957 2025] [:error] [pid 2366:tid 2383] [client 20.239.184.21:21781] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kki.php"] [unique_id "aThbP0AeBjkmsNRkd1NfxQAAAM8"]
[Wed Dec 10 01:24:16.153093 2025] [:error] [pid 2280:tid 2360] [client 20.239.184.21:21802] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aThbQHcqIB-8ALgw4ZpQ9AAAAJc"]
[Wed Dec 10 01:24:16.940181 2025] [:error] [pid 2280:tid 2346] [client 20.239.184.21:38346] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aThbQHcqIB-8ALgw4ZpQ9wAAAIk"]
[Wed Dec 10 01:24:17.700836 2025] [:error] [pid 2279:tid 2334] [client 20.239.184.21:15540] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aThbQVmpdQscMcJOElWvrAAAAVg"]
[Wed Dec 10 01:24:18.697331 2025] [:error] [pid 37041:tid 37063] [client 20.239.184.21:37260] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aThbQruffDW8UzBwa1asLwAAAFQ"]
[Wed Dec 10 01:24:20.095614 2025] [:error] [pid 2279:tid 2313] [client 20.239.184.21:12784] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aThbRFmpdQscMcJOElWvtwAAAUM"]
[Wed Dec 10 01:24:20.999629 2025] [:error] [pid 37041:tid 37060] [client 20.239.184.21:42534] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aThbRLuffDW8UzBwa1asNQAAAFE"]
[Wed Dec 10 01:24:21.636432 2025] [:error] [pid 2279:tid 2322] [client 20.239.184.21:15510] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aThbRVmpdQscMcJOElWvvwAAAUw"]
[Wed Dec 10 01:24:22.204589 2025] [:error] [pid 2366:tid 2391] [client 20.239.184.21:17974] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aThbRkAeBjkmsNRkd1NfzAAAANc"]
[Wed Dec 10 01:24:23.152131 2025] [:error] [pid 2279:tid 2316] [client 20.239.184.21:42557] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThbR1mpdQscMcJOElWvxwAAAUY"]
[Wed Dec 10 01:24:23.671648 2025] [:error] [pid 2366:tid 2375] [client 20.239.184.21:21823] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThbR0AeBjkmsNRkd1Nf1AAAAMc"]
[Wed Dec 10 01:24:24.665332 2025] [:error] [pid 2277:tid 2295] [client 20.239.184.21:15492] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThbSIWGo731r6eS-w5VygAAAAw"]
[Wed Dec 10 01:24:25.701066 2025] [:error] [pid 2366:tid 2380] [client 20.239.184.21:15518] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThbSUAeBjkmsNRkd1Nf4AAAAMw"]
[Wed Dec 10 01:24:26.122618 2025] [:error] [pid 2366:tid 2381] [client 20.239.184.21:15534] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fns.php"] [unique_id "aThbSkAeBjkmsNRkd1Nf5QAAAM0"]
[Wed Dec 10 01:24:27.288714 2025] [:error] [pid 2366:tid 2380] [client 20.239.184.21:18929] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fns.php"] [unique_id "aThbS0AeBjkmsNRkd1Nf7gAAAMw"]
[Wed Dec 10 01:24:28.067509 2025] [:error] [pid 2366:tid 2386] [client 20.239.184.21:21787] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fns.php"] [unique_id "aThbTEAeBjkmsNRkd1Nf9gAAANI"]
[Wed Dec 10 01:24:28.989379 2025] [:error] [pid 2366:tid 2369] [client 20.239.184.21:37274] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fns.php"] [unique_id "aThbTEAeBjkmsNRkd1Nf-wAAAME"]
[Wed Dec 10 01:24:30.312841 2025] [:error] [pid 37041:tid 37047] [client 20.239.184.21:12882] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadis.php"] [unique_id "aThbTruffDW8UzBwa1asVgAAAEQ"]
[Wed Dec 10 01:24:30.955636 2025] [:error] [pid 2366:tid 2391] [client 20.239.184.21:42549] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadis.php"] [unique_id "aThbTkAeBjkmsNRkd1NgAgAAANc"]
[Wed Dec 10 01:24:31.349818 2025] [:error] [pid 37041:tid 37061] [client 20.239.184.21:12888] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadis.php"] [unique_id "aThbT7uffDW8UzBwa1asWgAAAFI"]
[Wed Dec 10 01:24:32.186724 2025] [:error] [pid 37041:tid 37046] [client 20.239.184.21:42554] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadis.php"] [unique_id "aThbULuffDW8UzBwa1asWwAAAEM"]
[Wed Dec 10 01:24:35.369640 2025] [:error] [pid 2366:tid 2369] [client 20.78.180.119:7112] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tua.php"] [unique_id "aThbU0AeBjkmsNRkd1NgEAAAAME"]
[Wed Dec 10 01:24:36.571487 2025] [:error] [pid 37041:tid 37063] [client 20.78.180.119:6934] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tua.php"] [unique_id "aThbVLuffDW8UzBwa1asXgAAAFQ"]
[Wed Dec 10 01:24:37.519848 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:7116] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tua.php"] [unique_id "aThbVUAeBjkmsNRkd1NgHQAAAMM"]
[Wed Dec 10 01:24:38.451456 2025] [:error] [pid 37041:tid 37057] [client 20.78.180.119:7154] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tua.php"] [unique_id "aThbVruffDW8UzBwa1asYgAAAE4"]
[Wed Dec 10 01:24:39.364955 2025] [:error] [pid 2277:tid 2289] [client 20.78.180.119:7075] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admir.php"] [unique_id "aThbV4WGo731r6eS-w5V3QAAAAc"]
[Wed Dec 10 01:24:41.055632 2025] [:error] [pid 2279:tid 2333] [client 20.78.180.119:7148] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admir.php"] [unique_id "aThbWVmpdQscMcJOElWwBAAAAVc"]
[Wed Dec 10 01:24:42.201812 2025] [:error] [pid 2277:tid 2306] [client 20.78.180.119:7162] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admir.php"] [unique_id "aThbWoWGo731r6eS-w5V5wAAABc"]
[Wed Dec 10 01:24:43.328290 2025] [:error] [pid 2279:tid 2330] [client 20.78.180.119:7107] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admir.php"] [unique_id "aThbW1mpdQscMcJOElWwEAAAAVQ"]
[Wed Dec 10 01:24:44.914790 2025] [:error] [pid 37041:tid 37064] [client 20.78.180.119:7046] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsr2.php"] [unique_id "aThbXLuffDW8UzBwa1ascgAAAFU"]
[Wed Dec 10 01:24:45.951462 2025] [:error] [pid 37041:tid 37063] [client 20.78.180.119:7124] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsr2.php"] [unique_id "aThbXbuffDW8UzBwa1asdgAAAFQ"]
[Wed Dec 10 01:24:47.750044 2025] [:error] [pid 2366:tid 2370] [client 20.78.180.119:7071] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsr2.php"] [unique_id "aThbX0AeBjkmsNRkd1NgLQAAAMI"]
[Wed Dec 10 01:24:49.834838 2025] [:error] [pid 2280:tid 2338] [client 20.78.180.119:6980] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsr2.php"] [unique_id "aThbYXcqIB-8ALgw4ZpRcwAAAIE"]
[Wed Dec 10 01:24:51.319622 2025] [:error] [pid 2366:tid 2373] [client 20.78.180.119:7000] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aThbY0AeBjkmsNRkd1NgMwAAAMU"]
[Wed Dec 10 01:24:54.219676 2025] [:error] [pid 37041:tid 37066] [client 20.78.180.119:7161] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aThbZruffDW8UzBwa1asgAAAAFc"]
[Wed Dec 10 01:24:57.500464 2025] [:error] [pid 2277:tid 2307] [client 20.78.180.119:6925] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aThbaYWGo731r6eS-w5WAQAAABg"]
[Wed Dec 10 01:24:59.145125 2025] [:error] [pid 37041:tid 37058] [client 20.78.180.119:7067] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aThba7uffDW8UzBwa1askAAAAE8"]
[Wed Dec 10 01:25:00.517038 2025] [:error] [pid 2280:tid 2346] [client 20.78.180.119:6988] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wto.php"] [unique_id "aThbbHcqIB-8ALgw4ZpRugAAAIk"]
[Wed Dec 10 01:25:03.038761 2025] [:error] [pid 2280:tid 2356] [client 20.78.180.119:7035] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wto.php"] [unique_id "aThbb3cqIB-8ALgw4ZpRwAAAAJM"]
[Wed Dec 10 01:25:05.110237 2025] [:error] [pid 2366:tid 2387] [client 20.78.180.119:7152] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wto.php"] [unique_id "aThbcUAeBjkmsNRkd1NgUgAAANM"]
[Wed Dec 10 01:25:06.586704 2025] [:error] [pid 2280:tid 2347] [client 20.78.180.119:7085] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wto.php"] [unique_id "aThbcncqIB-8ALgw4ZpRzQAAAIo"]
[Wed Dec 10 01:25:08.136345 2025] [:error] [pid 2279:tid 2311] [client 20.78.180.119:7130] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ink.php"] [unique_id "aThbdFmpdQscMcJOElWwUgAAAUE"]
[Wed Dec 10 01:25:08.793402 2025] [:error] [pid 2366:tid 2369] [client 20.78.180.119:7049] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ink.php"] [unique_id "aThbdEAeBjkmsNRkd1NgXAAAAME"]
[Wed Dec 10 01:25:09.720629 2025] [:error] [pid 2279:tid 2317] [client 20.78.180.119:7142] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ink.php"] [unique_id "aThbdVmpdQscMcJOElWwWgAAAUc"]
[Wed Dec 10 01:25:10.325181 2025] [:error] [pid 2280:tid 2350] [client 20.78.180.119:7167] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ink.php"] [unique_id "aThbdncqIB-8ALgw4ZpR2AAAAI0"]
[Wed Dec 10 01:25:11.130180 2025] [:error] [pid 2280:tid 2357] [client 20.78.180.119:7055] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aThbd3cqIB-8ALgw4ZpR2wAAAJQ"]
[Wed Dec 10 01:25:12.036627 2025] [:error] [pid 2279:tid 2313] [client 20.78.180.119:7158] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aThbeFmpdQscMcJOElWwZgAAAUM"]
[Wed Dec 10 01:25:13.188381 2025] [:error] [pid 2277:tid 2289] [client 20.78.180.119:7122] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aThbeYWGo731r6eS-w5WMQAAAAc"]
[Wed Dec 10 01:25:13.760323 2025] [:error] [pid 2366:tid 2383] [client 20.78.180.119:7001] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aThbeUAeBjkmsNRkd1NgegAAAM8"]
[Wed Dec 10 01:25:15.323695 2025] [:error] [pid 2366:tid 2372] [client 20.78.180.119:7141] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/qlex1.php"] [unique_id "aThbe0AeBjkmsNRkd1NgfwAAAMQ"]
[Wed Dec 10 01:25:16.215098 2025] [:error] [pid 2366:tid 2385] [client 20.78.180.119:6930] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/qlex1.php"] [unique_id "aThbfEAeBjkmsNRkd1NggwAAANE"]
[Wed Dec 10 01:25:16.968353 2025] [:error] [pid 2277:tid 2306] [client 20.239.184.21:12751] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxq.php"] [unique_id "aThbfIWGo731r6eS-w5WOAAAABc"]
[Wed Dec 10 01:25:17.592354 2025] [:error] [pid 2280:tid 2340] [client 20.239.184.21:16459] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxq.php"] [unique_id "aThbfXcqIB-8ALgw4ZpR7AAAAIM"]
[Wed Dec 10 01:25:17.867333 2025] [:error] [pid 2279:tid 2319] [client 20.78.180.119:7016] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/qlex1.php"] [unique_id "aThbfVmpdQscMcJOElWwbAAAAUk"]
[Wed Dec 10 01:25:18.656144 2025] [:error] [pid 37041:tid 37050] [client 20.239.184.21:16503] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxq.php"] [unique_id "aThbfruffDW8UzBwa1asqgAAAEc"]
[Wed Dec 10 01:25:18.745115 2025] [:error] [pid 2279:tid 2318] [client 20.78.180.119:7164] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/qlex1.php"] [unique_id "aThbflmpdQscMcJOElWwbgAAAUg"]
[Wed Dec 10 01:25:19.797976 2025] [:error] [pid 2366:tid 2382] [client 20.239.184.21:42526] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxq.php"] [unique_id "aThbf0AeBjkmsNRkd1NgjwAAAM4"]
[Wed Dec 10 01:25:19.995372 2025] [:error] [pid 2366:tid 2377] [client 20.78.180.119:7010] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pes.php"] [unique_id "aThbf0AeBjkmsNRkd1NgkQAAAMk"]
[Wed Dec 10 01:25:21.728300 2025] [:error] [pid 37041:tid 37043] [client 20.239.184.21:16498] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aThbgbuffDW8UzBwa1asrwAAAEA"]
[Wed Dec 10 01:25:22.193688 2025] [:error] [pid 2366:tid 2369] [client 20.78.180.119:7111] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pes.php"] [unique_id "aThbgkAeBjkmsNRkd1NglQAAAME"]
[Wed Dec 10 01:25:22.390301 2025] [:error] [pid 2277:tid 2288] [client 20.239.184.21:38377] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aThbgoWGo731r6eS-w5WVAAAAAY"]
[Wed Dec 10 01:25:23.526084 2025] [:error] [pid 2277:tid 2282] [client 20.239.184.21:13298] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aThbg4WGo731r6eS-w5WWwAAAAA"]
[Wed Dec 10 01:25:24.755712 2025] [:error] [pid 2280:tid 2337] [client 20.239.184.21:13274] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aThbhHcqIB-8ALgw4ZpR-QAAAIA"]
[Wed Dec 10 01:25:25.975511 2025] [:error] [pid 2366:tid 2386] [client 20.239.184.21:23411] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aThbhUAeBjkmsNRkd1NgnwAAANI"]
[Wed Dec 10 01:25:26.281086 2025] [:error] [pid 37041:tid 37064] [client 20.78.180.119:7086] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pes.php"] [unique_id "aThbhruffDW8UzBwa1aswwAAAFU"]
[Wed Dec 10 01:25:26.427514 2025] [:error] [pid 2366:tid 2385] [client 20.239.184.21:23361] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aThbhkAeBjkmsNRkd1NgoQAAANE"]
[Wed Dec 10 01:25:27.328744 2025] [:error] [pid 2279:tid 2331] [client 20.78.180.119:7140] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pes.php"] [unique_id "aThbh1mpdQscMcJOElWwdQAAAVU"]
[Wed Dec 10 01:25:27.725003 2025] [:error] [pid 2280:tid 2357] [client 20.239.184.21:15731] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aThbh3cqIB-8ALgw4ZpR_QAAAJQ"]
[Wed Dec 10 01:25:28.641966 2025] [:error] [pid 2277:tid 2297] [client 20.239.184.21:15730] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aThbiIWGo731r6eS-w5WawAAAA4"]
[Wed Dec 10 01:25:28.932666 2025] [:error] [pid 2279:tid 2310] [client 20.78.180.119:7065] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/redi.php"] [unique_id "aThbiFmpdQscMcJOElWweQAAAUA"]
[Wed Dec 10 01:25:29.668433 2025] [:error] [pid 37041:tid 37053] [client 20.78.180.119:7031] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/redi.php"] [unique_id "aThbibuffDW8UzBwa1asygAAAEo"]
[Wed Dec 10 01:25:30.673624 2025] [:error] [pid 37041:tid 37060] [client 20.239.184.21:21231] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/GX.php"] [unique_id "aThbiruffDW8UzBwa1aszQAAAFE"]
[Wed Dec 10 01:25:30.810414 2025] [:error] [pid 2366:tid 2369] [client 20.78.180.119:7135] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/redi.php"] [unique_id "aThbikAeBjkmsNRkd1NgqQAAAME"]
[Wed Dec 10 01:25:31.322343 2025] [:error] [pid 2366:tid 2381] [client 20.78.180.119:7045] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/redi.php"] [unique_id "aThbi0AeBjkmsNRkd1NgqwAAAM0"]
[Wed Dec 10 01:25:32.152237 2025] [:error] [pid 2279:tid 2334] [client 20.239.184.21:15704] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/GX.php"] [unique_id "aThbjFmpdQscMcJOElWwfgAAAVg"]
[Wed Dec 10 01:25:33.438993 2025] [:error] [pid 2280:tid 2360] [client 20.239.184.21:12804] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/GX.php"] [unique_id "aThbjXcqIB-8ALgw4ZpSBgAAAJc"]
[Wed Dec 10 01:25:34.891983 2025] [:error] [pid 37041:tid 37046] [client 20.239.184.21:16173] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/GX.php"] [unique_id "aThbjruffDW8UzBwa1as0AAAAEM"]
[Wed Dec 10 01:25:37.298489 2025] [:error] [pid 37041:tid 37059] [client 20.239.184.21:15804] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aThbkbuffDW8UzBwa1as1gAAAFA"]
[Wed Dec 10 01:25:38.323362 2025] [:error] [pid 2279:tid 2330] [client 20.239.184.21:53250] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aThbklmpdQscMcJOElWwiwAAAVQ"]
[Wed Dec 10 01:25:39.367024 2025] [:error] [pid 2277:tid 2299] [client 20.239.184.21:15782] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aThbk4WGo731r6eS-w5WegAAABA"]
[Wed Dec 10 01:25:40.207205 2025] [:error] [pid 2366:tid 2369] [client 20.239.184.21:12847] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aThblEAeBjkmsNRkd1NguwAAAME"]
[Wed Dec 10 01:25:41.198300 2025] [:error] [pid 37041:tid 37058] [client 20.239.184.21:12806] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/efa4f.php"] [unique_id "aThblbuffDW8UzBwa1as2gAAAE8"]
[Wed Dec 10 01:25:41.662016 2025] [:error] [pid 2280:tid 2350] [client 20.239.184.21:22475] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/efa4f.php"] [unique_id "aThblXcqIB-8ALgw4ZpSEwAAAI0"]
[Wed Dec 10 01:25:42.249966 2025] [:error] [pid 2366:tid 2378] [client 20.239.184.21:13185] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/efa4f.php"] [unique_id "aThblkAeBjkmsNRkd1NgvgAAAMo"]
[Wed Dec 10 01:25:43.074715 2025] [:error] [pid 2366:tid 2376] [client 20.239.184.21:18402] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/efa4f.php"] [unique_id "aThbl0AeBjkmsNRkd1NgvwAAAMg"]
[Wed Dec 10 01:25:43.719661 2025] [:error] [pid 2279:tid 2317] [client 20.239.184.21:15973] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ilex.php"] [unique_id "aThbl1mpdQscMcJOElWwmAAAAUc"]
[Wed Dec 10 01:25:44.800592 2025] [:error] [pid 2277:tid 2286] [client 20.239.184.21:17286] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ilex.php"] [unique_id "aThbmIWGo731r6eS-w5WgQAAAAQ"]
[Wed Dec 10 01:25:45.722519 2025] [:error] [pid 2279:tid 2328] [client 20.239.184.21:15974] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ilex.php"] [unique_id "aThbmVmpdQscMcJOElWwmgAAAVI"]
[Wed Dec 10 01:25:46.409727 2025] [:error] [pid 2280:tid 2341] [client 20.239.184.21:12405] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ilex.php"] [unique_id "aThbmncqIB-8ALgw4ZpSGwAAAIQ"]
[Wed Dec 10 01:25:46.813535 2025] [:error] [pid 37041:tid 37057] [client 20.239.184.21:15943] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ffile.php"] [unique_id "aThbmruffDW8UzBwa1as4QAAAE4"]
[Wed Dec 10 01:25:48.353961 2025] [:error] [pid 2277:tid 2300] [client 20.239.184.21:22494] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ffile.php"] [unique_id "aThbnIWGo731r6eS-w5WjQAAABE"]
[Wed Dec 10 01:25:48.828164 2025] [:error] [pid 37041:tid 37056] [client 20.239.184.21:15993] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ffile.php"] [unique_id "aThbnLuffDW8UzBwa1as5AAAAE0"]
[Wed Dec 10 01:25:50.078237 2025] [:error] [pid 2366:tid 2370] [client 20.239.184.21:12358] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ffile.php"] [unique_id "aThbnkAeBjkmsNRkd1NgywAAAMI"]
[Wed Dec 10 01:25:51.229582 2025] [:error] [pid 2279:tid 2312] [client 20.239.184.21:28184] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/new2.php"] [unique_id "aThbn1mpdQscMcJOElWwnwAAAUI"]
[Wed Dec 10 01:25:51.699687 2025] [:error] [pid 2366:tid 2371] [client 20.239.184.21:12996] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/new2.php"] [unique_id "aThbn0AeBjkmsNRkd1Ng1gAAAMM"]
[Wed Dec 10 01:25:52.289984 2025] [:error] [pid 2366:tid 2391] [client 20.239.184.21:15937] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/new2.php"] [unique_id "aThboEAeBjkmsNRkd1Ng2AAAANc"]
[Wed Dec 10 01:25:53.149405 2025] [:error] [pid 2366:tid 2369] [client 20.239.184.21:28214] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/new2.php"] [unique_id "aThboUAeBjkmsNRkd1Ng2wAAAME"]
[Wed Dec 10 01:25:53.565562 2025] [:error] [pid 2277:tid 2295] [client 20.239.184.21:37201] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aThboYWGo731r6eS-w5WkAAAAAw"]
[Wed Dec 10 01:25:54.104655 2025] [:error] [pid 37041:tid 37051] [client 20.239.184.21:18652] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aThboruffDW8UzBwa1as7QAAAEg"]
[Wed Dec 10 01:25:55.085131 2025] [:error] [pid 2280:tid 2339] [client 20.239.184.21:12517] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aThbo3cqIB-8ALgw4ZpSMAAAAII"]
[Wed Dec 10 01:25:55.393940 2025] [:error] [pid 2366:tid 2386] [client 20.239.184.21:37188] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aThbo0AeBjkmsNRkd1Ng3gAAANI"]
[Wed Dec 10 01:25:57.266190 2025] [:error] [pid 37041:tid 37060] [client 20.239.184.21:37194] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aThbpbuffDW8UzBwa1as9AAAAFE"]
[Wed Dec 10 01:25:58.342122 2025] [:error] [pid 2366:tid 2370] [client 20.239.184.21:18853] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aThbpkAeBjkmsNRkd1Ng5AAAAMI"]
[Wed Dec 10 01:25:59.036069 2025] [:error] [pid 2366:tid 2383] [client 20.239.184.21:12522] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aThbp0AeBjkmsNRkd1Ng6AAAAM8"]
[Wed Dec 10 01:26:00.559218 2025] [:error] [pid 2280:tid 2350] [client 20.239.184.21:28166] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aThbqHcqIB-8ALgw4ZpSPwAAAI0"]
[Wed Dec 10 01:26:02.056366 2025] [:error] [pid 2366:tid 2391] [client 20.239.184.21:53259] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aThbqkAeBjkmsNRkd1Ng7gAAANc"]
[Wed Dec 10 01:26:02.864631 2025] [:error] [pid 2277:tid 2300] [client 20.239.184.21:12714] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aThbqoWGo731r6eS-w5WlwAAABE"]
[Wed Dec 10 01:26:04.428321 2025] [:error] [pid 37041:tid 37065] [client 20.239.184.21:16583] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aThbrLuffDW8UzBwa1as-gAAAFY"]
[Wed Dec 10 01:26:06.194290 2025] [:error] [pid 2277:tid 2301] [client 20.239.184.21:53265] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aThbroWGo731r6eS-w5WmAAAABI"]
[Wed Dec 10 01:26:07.117913 2025] [:error] [pid 2366:tid 2370] [client 20.239.184.21:16576] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aThbr0AeBjkmsNRkd1Ng8wAAAMI"]
[Wed Dec 10 01:26:09.489766 2025] [:error] [pid 2279:tid 2319] [client 20.239.184.21:12733] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aThbsVmpdQscMcJOElWwqQAAAUk"]
[Wed Dec 10 01:26:10.908261 2025] [:error] [pid 2366:tid 2382] [client 20.239.184.21:16585] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aThbskAeBjkmsNRkd1Ng_AAAAM4"]
[Wed Dec 10 01:26:12.264699 2025] [:error] [pid 2280:tid 2338] [client 20.239.184.21:15622] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aThbtHcqIB-8ALgw4ZpSUQAAAIE"]
[Wed Dec 10 01:26:13.226997 2025] [:error] [pid 37041:tid 37050] [client 20.239.184.21:12672] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aThbtbuffDW8UzBwa1atBwAAAEc"]
[Wed Dec 10 01:26:14.363791 2025] [:error] [pid 2277:tid 2284] [client 20.239.184.21:16767] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aThbtoWGo731r6eS-w5WnAAAAAI"]
[Wed Dec 10 01:26:20.904265 2025] [proxy_fcgi:error] [pid 37041:tid 37056] [client 20.78.180.119:7151] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 01:26:57.340907 2025] [:error] [pid 37041:tid 37055] [client 20.239.184.21:16044] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tua.php"] [unique_id "aThb4buffDW8UzBwa1atfQAAAEw"]
[Wed Dec 10 01:26:58.777308 2025] [:error] [pid 2366:tid 2375] [client 20.239.184.21:16264] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tua.php"] [unique_id "aThb4kAeBjkmsNRkd1NhowAAAMc"]
[Wed Dec 10 01:26:59.157283 2025] [:error] [pid 2277:tid 2288] [client 20.239.184.21:18010] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tua.php"] [unique_id "aThb44WGo731r6eS-w5XJAAAAAY"]
[Wed Dec 10 01:27:00.767432 2025] [:error] [pid 2279:tid 2329] [client 20.239.184.21:17986] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tua.php"] [unique_id "aThb5FmpdQscMcJOElWxEgAAAVM"]
[Wed Dec 10 01:27:01.671438 2025] [:error] [pid 2277:tid 2305] [client 20.239.184.21:18034] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "aThb5YWGo731r6eS-w5XJwAAABY"]
[Wed Dec 10 01:27:02.951360 2025] [:error] [pid 2280:tid 2340] [client 20.239.184.21:33196] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "aThb5ncqIB-8ALgw4ZpS0AAAAIM"]
[Wed Dec 10 01:27:03.794436 2025] [:error] [pid 2277:tid 2295] [client 20.239.184.21:33154] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "aThb54WGo731r6eS-w5XKgAAAAw"]
[Wed Dec 10 01:27:04.718616 2025] [:error] [pid 2279:tid 2327] [client 20.239.184.21:53197] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "aThb6FmpdQscMcJOElWxGwAAAVE"]
[Wed Dec 10 01:27:05.496636 2025] [:error] [pid 37041:tid 37062] [client 20.239.184.21:33183] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsr2.php"] [unique_id "aThb6buffDW8UzBwa1atjQAAAFM"]
[Wed Dec 10 01:27:06.206799 2025] [:error] [pid 2279:tid 2333] [client 20.239.184.21:33213] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsr2.php"] [unique_id "aThb6lmpdQscMcJOElWxIAAAAVc"]
[Wed Dec 10 01:27:07.104033 2025] [:error] [pid 2279:tid 2324] [client 20.239.184.21:53226] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsr2.php"] [unique_id "aThb61mpdQscMcJOElWxJQAAAU4"]
[Wed Dec 10 01:27:08.187906 2025] [:error] [pid 2366:tid 2370] [client 20.239.184.21:53184] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsr2.php"] [unique_id "aThb7EAeBjkmsNRkd1NhuwAAAMI"]
[Wed Dec 10 01:27:09.704189 2025] [:error] [pid 2366:tid 2377] [client 20.239.184.21:41960] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aThb7UAeBjkmsNRkd1NhvwAAAMk"]
[Wed Dec 10 01:27:10.484391 2025] [:error] [pid 2277:tid 2305] [client 20.239.184.21:28693] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aThb7oWGo731r6eS-w5XMAAAABY"]
[Wed Dec 10 01:27:12.678367 2025] [:error] [pid 2280:tid 2355] [client 20.239.184.21:53202] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aThb8HcqIB-8ALgw4ZpS7QAAAJI"]
[Wed Dec 10 01:27:14.675908 2025] [:error] [pid 2277:tid 2297] [client 20.239.184.21:39045] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aThb8oWGo731r6eS-w5XOgAAAA4"]
[Wed Dec 10 01:27:15.517732 2025] [:error] [pid 37041:tid 37058] [client 20.239.184.21:33165] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wto.php"] [unique_id "aThb87uffDW8UzBwa1atmgAAAE8"]
[Wed Dec 10 01:27:18.470994 2025] [:error] [pid 2280:tid 2350] [client 20.239.184.21:53234] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wto.php"] [unique_id "aThb9ncqIB-8ALgw4ZpS9gAAAI0"]
[Wed Dec 10 01:27:20.090655 2025] [:error] [pid 2279:tid 2319] [client 20.239.184.21:28733] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wto.php"] [unique_id "aThb-FmpdQscMcJOElWxOgAAAUk"]
[Wed Dec 10 01:27:21.317244 2025] [:error] [pid 37041:tid 37057] [client 20.239.184.21:13127] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wto.php"] [unique_id "aThb-buffDW8UzBwa1atrAAAAE4"]
[Wed Dec 10 01:27:22.292378 2025] [:error] [pid 37041:tid 37044] [client 20.239.184.21:28225] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ink.php"] [unique_id "aThb-ruffDW8UzBwa1atsQAAAEE"]
[Wed Dec 10 01:27:23.328236 2025] [:error] [pid 2277:tid 2293] [client 20.239.184.21:41926] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ink.php"] [unique_id "aThb-4WGo731r6eS-w5XTgAAAAo"]
[Wed Dec 10 01:27:23.986630 2025] [:error] [pid 2280:tid 2350] [client 20.239.184.21:39086] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ink.php"] [unique_id "aThb-3cqIB-8ALgw4ZpTAAAAAI0"]
[Wed Dec 10 01:27:24.869391 2025] [:error] [pid 2279:tid 2330] [client 20.239.184.21:28244] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ink.php"] [unique_id "aThb_FmpdQscMcJOElWxQwAAAVQ"]
[Wed Dec 10 01:27:25.607432 2025] [:error] [pid 2279:tid 2316] [client 20.239.184.21:28256] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aThb_VmpdQscMcJOElWxRAAAAUY"]
[Wed Dec 10 01:27:26.319237 2025] [:error] [pid 2277:tid 2304] [client 20.239.184.21:39102] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aThb_oWGo731r6eS-w5XVQAAABU"]
[Wed Dec 10 01:27:26.972848 2025] [:error] [pid 2277:tid 2285] [client 20.239.184.21:28254] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aThb_oWGo731r6eS-w5XWAAAAAM"]
[Wed Dec 10 01:27:27.794375 2025] [:error] [pid 2277:tid 2291] [client 20.239.184.21:39074] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aThb_4WGo731r6eS-w5XWwAAAAk"]
[Wed Dec 10 01:27:28.737629 2025] [:error] [pid 2366:tid 2391] [client 20.239.184.21:39101] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qlex1.php"] [unique_id "aThcAEAeBjkmsNRkd1Nh2wAAANc"]
[Wed Dec 10 01:27:29.278943 2025] [:error] [pid 2279:tid 2317] [client 20.239.184.21:39046] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qlex1.php"] [unique_id "aThcAVmpdQscMcJOElWxTQAAAUc"]
[Wed Dec 10 01:27:29.382863 2025] [:error] [pid 2366:tid 2376] [client 20.78.180.119:7121] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file7.php"] [unique_id "aThcAUAeBjkmsNRkd1Nh3QAAAMg"]
[Wed Dec 10 01:27:29.761725 2025] [:error] [pid 2280:tid 2344] [client 20.239.184.21:28252] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qlex1.php"] [unique_id "aThcAXcqIB-8ALgw4ZpTCgAAAIc"]
[Wed Dec 10 01:27:30.343919 2025] [:error] [pid 2366:tid 2386] [client 20.78.180.119:7146] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file7.php"] [unique_id "aThcAkAeBjkmsNRkd1Nh3gAAANI"]
[Wed Dec 10 01:27:30.537707 2025] [:error] [pid 37041:tid 37046] [client 20.239.184.21:17290] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qlex1.php"] [unique_id "aThcAruffDW8UzBwa1atwQAAAEM"]
[Wed Dec 10 01:27:31.209905 2025] [:error] [pid 2280:tid 2360] [client 20.78.180.119:7081] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file7.php"] [unique_id "aThcA3cqIB-8ALgw4ZpTCwAAAJc"]
[Wed Dec 10 01:27:31.351482 2025] [:error] [pid 2277:tid 2299] [client 20.239.184.21:28279] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pes.php"] [unique_id "aThcA4WGo731r6eS-w5XawAAABA"]
[Wed Dec 10 01:27:32.679215 2025] [:error] [pid 2366:tid 2380] [client 20.78.180.119:7113] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file7.php"] [unique_id "aThcBEAeBjkmsNRkd1Nh4gAAAMw"]
[Wed Dec 10 01:27:33.314098 2025] [:error] [pid 2279:tid 2324] [client 20.239.184.21:28686] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pes.php"] [unique_id "aThcBVmpdQscMcJOElWxUwAAAU4"]
[Wed Dec 10 01:27:33.629786 2025] [:error] [pid 2279:tid 2327] [client 20.78.180.119:7108] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hi.php"] [unique_id "aThcBVmpdQscMcJOElWxVQAAAVE"]
[Wed Dec 10 01:27:34.099849 2025] [:error] [pid 2279:tid 2331] [client 20.239.184.21:28257] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pes.php"] [unique_id "aThcBlmpdQscMcJOElWxWAAAAVU"]
[Wed Dec 10 01:27:35.233586 2025] [:error] [pid 2280:tid 2348] [client 20.239.184.21:17320] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pes.php"] [unique_id "aThcB3cqIB-8ALgw4ZpTEAAAAIs"]
[Wed Dec 10 01:27:35.321486 2025] [:error] [pid 2279:tid 2310] [client 20.78.180.119:7084] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hi.php"] [unique_id "aThcB1mpdQscMcJOElWxWwAAAUA"]
[Wed Dec 10 01:27:36.816899 2025] [:error] [pid 37041:tid 37048] [client 20.239.184.21:28263] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/redi.php"] [unique_id "aThcCLuffDW8UzBwa1atxgAAAEU"]
[Wed Dec 10 01:27:36.830305 2025] [:error] [pid 2280:tid 2352] [client 20.78.180.119:7139] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hi.php"] [unique_id "aThcCHcqIB-8ALgw4ZpTFgAAAI8"]
[Wed Dec 10 01:27:37.827662 2025] [:error] [pid 2280:tid 2354] [client 20.78.180.119:7042] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hi.php"] [unique_id "aThcCXcqIB-8ALgw4ZpTGQAAAJE"]
[Wed Dec 10 01:27:38.531085 2025] [:error] [pid 2279:tid 2313] [client 20.239.184.21:28697] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/redi.php"] [unique_id "aThcClmpdQscMcJOElWxXgAAAUM"]
[Wed Dec 10 01:27:39.155795 2025] [:error] [pid 2277:tid 2283] [client 20.78.180.119:7060] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/default.php"] [unique_id "aThcC4WGo731r6eS-w5XfwAAAAE"]
[Wed Dec 10 01:27:40.053787 2025] [:error] [pid 37041:tid 37066] [client 20.78.180.119:6982] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/default.php"] [unique_id "aThcDLuffDW8UzBwa1atzwAAAFc"]
[Wed Dec 10 01:27:40.501635 2025] [:error] [pid 37041:tid 37057] [client 20.239.184.21:39049] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/redi.php"] [unique_id "aThcDLuffDW8UzBwa1at0gAAAE4"]
[Wed Dec 10 01:27:40.676864 2025] [:error] [pid 2277:tid 2286] [client 20.78.180.119:7064] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/default.php"] [unique_id "aThcDIWGo731r6eS-w5XhgAAAAQ"]
[Wed Dec 10 01:27:41.596103 2025] [:error] [pid 2279:tid 2315] [client 20.239.184.21:28680] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/redi.php"] [unique_id "aThcDVmpdQscMcJOElWxYQAAAUU"]
[Wed Dec 10 01:27:41.684870 2025] [:error] [pid 2279:tid 2311] [client 20.78.180.119:7056] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/default.php"] [unique_id "aThcDVmpdQscMcJOElWxYgAAAUE"]
[Wed Dec 10 01:27:42.176879 2025] [:error] [pid 2366:tid 2385] [client 20.239.184.21:28703] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php7"] [unique_id "aThcDkAeBjkmsNRkd1Nh8AAAANE"]
[Wed Dec 10 01:27:42.587779 2025] [:error] [pid 2277:tid 2298] [client 20.78.180.119:7102] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byp.php"] [unique_id "aThcDoWGo731r6eS-w5XiwAAAA8"]
[Wed Dec 10 01:27:43.322147 2025] [:error] [pid 37041:tid 37051] [client 20.239.184.21:28712] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php7"] [unique_id "aThcD7uffDW8UzBwa1at2AAAAEg"]
[Wed Dec 10 01:27:43.587895 2025] [:error] [pid 2366:tid 2387] [client 20.78.180.119:7138] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byp.php"] [unique_id "aThcD0AeBjkmsNRkd1Nh8gAAANM"]
[Wed Dec 10 01:27:44.040078 2025] [:error] [pid 37041:tid 37045] [client 20.78.180.119:7120] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byp.php"] [unique_id "aThcELuffDW8UzBwa1at3gAAAEI"]
[Wed Dec 10 01:27:44.713813 2025] [:error] [pid 2279:tid 2331] [client 20.78.180.119:7036] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byp.php"] [unique_id "aThcEFmpdQscMcJOElWxbgAAAVU"]
[Wed Dec 10 01:27:44.731820 2025] [:error] [pid 2279:tid 2333] [client 20.239.184.21:41939] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php7"] [unique_id "aThcEFmpdQscMcJOElWxbwAAAVc"]
[Wed Dec 10 01:27:46.482637 2025] [:error] [pid 2366:tid 2389] [client 20.78.180.119:6981] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yasnu.php"] [unique_id "aThcEkAeBjkmsNRkd1NiAAAAANU"]
[Wed Dec 10 01:27:46.594496 2025] [:error] [pid 2280:tid 2359] [client 20.239.184.21:39060] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php7"] [unique_id "aThcEncqIB-8ALgw4ZpTOQAAAJY"]
[Wed Dec 10 01:27:48.250238 2025] [:error] [pid 37041:tid 37062] [client 20.239.184.21:12297] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aThcFLuffDW8UzBwa1at5gAAAFM"]
[Wed Dec 10 01:27:48.949108 2025] [:error] [pid 2277:tid 2289] [client 20.78.180.119:7147] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yasnu.php"] [unique_id "aThcFIWGo731r6eS-w5XjgAAAAc"]
[Wed Dec 10 01:27:49.565856 2025] [:error] [pid 2366:tid 2373] [client 20.239.184.21:21231] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aThcFUAeBjkmsNRkd1NiBwAAAMU"]
[Wed Dec 10 01:27:49.781870 2025] [:error] [pid 2366:tid 2383] [client 20.78.180.119:7048] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yasnu.php"] [unique_id "aThcFUAeBjkmsNRkd1NiCAAAAM8"]
[Wed Dec 10 01:27:50.342078 2025] [:error] [pid 37041:tid 37059] [client 20.239.184.21:41936] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aThcFruffDW8UzBwa1at6QAAAFA"]
[Wed Dec 10 01:27:51.314510 2025] [:error] [pid 2366:tid 2380] [client 20.78.180.119:7129] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yasnu.php"] [unique_id "aThcF0AeBjkmsNRkd1NiEQAAAMw"]
[Wed Dec 10 01:27:51.333568 2025] [:error] [pid 2366:tid 2379] [client 20.239.184.21:12456] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aThcF0AeBjkmsNRkd1NiEgAAAMs"]
[Wed Dec 10 01:27:52.373933 2025] [:error] [pid 2366:tid 2386] [client 20.239.184.21:28732] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hob.php"] [unique_id "aThcGEAeBjkmsNRkd1NiFwAAANI"]
[Wed Dec 10 01:27:52.592821 2025] [:error] [pid 2366:tid 2387] [client 20.78.180.119:7070] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r79.php"] [unique_id "aThcGEAeBjkmsNRkd1NiGQAAANM"]
[Wed Dec 10 01:27:53.009539 2025] [:error] [pid 2366:tid 2370] [client 20.239.184.21:12457] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hob.php"] [unique_id "aThcGUAeBjkmsNRkd1NiHQAAAMI"]
[Wed Dec 10 01:27:54.904603 2025] [:error] [pid 2277:tid 2301] [client 20.239.184.21:16232] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hob.php"] [unique_id "aThcGoWGo731r6eS-w5XkAAAABI"]
[Wed Dec 10 01:27:55.571167 2025] [:error] [pid 2366:tid 2387] [client 20.78.180.119:7110] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r79.php"] [unique_id "aThcG0AeBjkmsNRkd1NiJAAAANM"]
[Wed Dec 10 01:27:56.191337 2025] [:error] [pid 2366:tid 2371] [client 20.78.180.119:7137] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r79.php"] [unique_id "aThcHEAeBjkmsNRkd1NiKQAAAMM"]
[Wed Dec 10 01:27:57.885880 2025] [:error] [pid 2366:tid 2386] [client 20.78.180.119:7133] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r79.php"] [unique_id "aThcHUAeBjkmsNRkd1NiNQAAANI"]
[Wed Dec 10 01:27:59.984034 2025] [:error] [pid 2366:tid 2373] [client 20.78.180.119:7127] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/777.php"] [unique_id "aThcH0AeBjkmsNRkd1NigQAAAMU"]
[Wed Dec 10 01:28:01.965288 2025] [:error] [pid 2366:tid 2380] [client 20.78.180.119:7143] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/777.php"] [unique_id "aThcIUAeBjkmsNRkd1NimAAAAMw"]
[Wed Dec 10 01:28:04.027010 2025] [:error] [pid 2366:tid 2369] [client 20.78.180.119:7062] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/777.php"] [unique_id "aThcJEAeBjkmsNRkd1NinQAAAME"]
[Wed Dec 10 01:28:05.800806 2025] [:error] [pid 2277:tid 2293] [client 20.78.180.119:7144] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/777.php"] [unique_id "aThcJYWGo731r6eS-w5XlwAAAAo"]
[Wed Dec 10 01:28:06.524865 2025] [:error] [pid 2277:tid 2283] [client 20.78.180.119:7073] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/520.php"] [unique_id "aThcJoWGo731r6eS-w5XmAAAAAE"]
[Wed Dec 10 01:28:07.585412 2025] [proxy_fcgi:error] [pid 2277:tid 2303] [client 20.239.184.21:16401] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 01:28:07.769664 2025] [:error] [pid 2277:tid 2294] [client 20.78.180.119:7165] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/520.php"] [unique_id "aThcJ4WGo731r6eS-w5XnQAAAAs"]
[Wed Dec 10 01:28:09.185509 2025] [:error] [pid 2279:tid 2312] [client 20.78.180.119:7040] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/520.php"] [unique_id "aThcKVmpdQscMcJOElWxiwAAAUI"]
[Wed Dec 10 01:28:10.491972 2025] [:error] [pid 2280:tid 2357] [client 20.78.180.119:7092] [client 20.78.180.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/520.php"] [unique_id "aThcKncqIB-8ALgw4ZpTVgAAAJQ"]
[Wed Dec 10 01:28:36.309659 2025] [:error] [pid 2277:tid 2288] [client 20.239.184.21:16401] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aThcRIWGo731r6eS-w5XvAAAAAY"]
[Wed Dec 10 01:28:38.562880 2025] [:error] [pid 2280:tid 2349] [client 20.239.184.21:16221] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aThcRncqIB-8ALgw4ZpTfAAAAIw"]
[Wed Dec 10 01:28:40.361599 2025] [:error] [pid 2366:tid 2368] [client 20.239.184.21:17966] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aThcSEAeBjkmsNRkd1NiywAAAMA"]
[Wed Dec 10 01:28:41.952772 2025] [:error] [pid 37041:tid 37057] [client 20.239.184.21:27736] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aThcSbuffDW8UzBwa1auJAAAAE4"]
[Wed Dec 10 01:28:43.387339 2025] [:error] [pid 2366:tid 2385] [client 20.239.184.21:37771] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aThcS0AeBjkmsNRkd1Ni0wAAANE"]
[Wed Dec 10 01:28:44.281235 2025] [:error] [pid 2280:tid 2344] [client 20.239.184.21:15605] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aThcTHcqIB-8ALgw4ZpThQAAAIc"]
[Wed Dec 10 01:28:46.029140 2025] [:error] [pid 2280:tid 2345] [client 20.239.184.21:37795] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aThcTncqIB-8ALgw4ZpTigAAAIg"]
[Wed Dec 10 01:28:47.520651 2025] [:error] [pid 2277:tid 2307] [client 20.239.184.21:27763] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aThcT4WGo731r6eS-w5XwgAAABg"]
[Wed Dec 10 01:28:48.976811 2025] [:error] [pid 2280:tid 2347] [client 20.239.184.21:27718] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "aThcUHcqIB-8ALgw4ZpTjgAAAIo"]
[Wed Dec 10 01:28:50.673895 2025] [:error] [pid 2279:tid 2310] [client 20.239.184.21:21867] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "aThcUlmpdQscMcJOElWxvwAAAUA"]
[Wed Dec 10 01:28:53.183863 2025] [:error] [pid 2279:tid 2333] [client 20.239.184.21:18575] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "aThcVVmpdQscMcJOElWxxQAAAVc"]
[Wed Dec 10 01:28:53.553624 2025] [:error] [pid 37041:tid 37056] [client 20.239.184.21:21880] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "aThcVbuffDW8UzBwa1auLQAAAE0"]
[Wed Dec 10 01:28:54.410466 2025] [:error] [pid 37041:tid 37051] [client 20.239.184.21:18560] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r79.php"] [unique_id "aThcVruffDW8UzBwa1auLwAAAEg"]
[Wed Dec 10 01:28:56.732527 2025] [:error] [pid 2366:tid 2386] [client 20.239.184.21:18607] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r79.php"] [unique_id "aThcWEAeBjkmsNRkd1Ni8QAAANI"]
[Wed Dec 10 01:28:58.282650 2025] [:error] [pid 2366:tid 2377] [client 20.239.184.21:27752] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r79.php"] [unique_id "aThcWkAeBjkmsNRkd1Ni_QAAAMk"]
[Wed Dec 10 01:29:00.144517 2025] [:error] [pid 2280:tid 2337] [client 20.239.184.21:37743] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r79.php"] [unique_id "aThcXHcqIB-8ALgw4ZpTogAAAIA"]
[Wed Dec 10 01:29:02.205189 2025] [:error] [pid 37041:tid 37046] [client 20.239.184.21:12872] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/777.php"] [unique_id "aThcXruffDW8UzBwa1auOQAAAEM"]
[Wed Dec 10 01:29:04.779789 2025] [:error] [pid 2280:tid 2341] [client 20.239.184.21:37769] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/777.php"] [unique_id "aThcYHcqIB-8ALgw4ZpTqQAAAIQ"]
[Wed Dec 10 01:29:06.868402 2025] [:error] [pid 2366:tid 2377] [client 20.239.184.21:18566] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/777.php"] [unique_id "aThcYkAeBjkmsNRkd1NjCwAAAMk"]
[Wed Dec 10 01:29:08.081310 2025] [:error] [pid 2277:tid 2293] [client 20.239.184.21:37706] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/777.php"] [unique_id "aThcZIWGo731r6eS-w5X2QAAAAo"]
[Wed Dec 10 01:29:10.083858 2025] [:error] [pid 2280:tid 2348] [client 20.239.184.21:16239] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aThcZncqIB-8ALgw4ZpTswAAAIs"]
[Wed Dec 10 01:29:11.688877 2025] [:error] [pid 2279:tid 2329] [client 20.239.184.21:27712] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aThcZ1mpdQscMcJOElWx3AAAAVM"]
[Wed Dec 10 01:29:13.333916 2025] [:error] [pid 2280:tid 2349] [client 20.239.184.21:15526] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aThcaXcqIB-8ALgw4ZpTwQAAAIw"]
[Wed Dec 10 01:29:15.064945 2025] [:error] [pid 2279:tid 2310] [client 20.239.184.21:37726] [client 20.239.184.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aThca1mpdQscMcJOElWx4gAAAUA"]
[Wed Dec 10 02:52:05.827410 2025] [:error] [pid 2279:tid 2326] [client 4.194.127.155:2029] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aThv1VmpdQscMcJOElXYwAAAAVA"]
[Wed Dec 10 02:52:06.006563 2025] [:error] [pid 2277:tid 2306] [client 4.194.127.155:2026] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aThv1oWGo731r6eS-w59oQAAABc"]
[Wed Dec 10 02:52:06.194404 2025] [:error] [pid 2366:tid 2373] [client 4.194.127.155:2043] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aThv1kAeBjkmsNRkd1OangAAAMU"]
[Wed Dec 10 02:52:06.388916 2025] [:error] [pid 2366:tid 2377] [client 4.194.127.155:2028] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aThv1kAeBjkmsNRkd1OanwAAAMk"]
[Wed Dec 10 02:52:06.567101 2025] [:error] [pid 2366:tid 2370] [client 4.194.127.155:1161] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThv1kAeBjkmsNRkd1OaoAAAAMI"]
[Wed Dec 10 02:52:06.748834 2025] [:error] [pid 2280:tid 2338] [client 4.194.127.155:1999] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThv1ncqIB-8ALgw4Zp-OAAAAIE"]
[Wed Dec 10 02:52:06.932771 2025] [:error] [pid 2280:tid 2359] [client 4.194.127.155:2037] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThv1ncqIB-8ALgw4Zp-OQAAAJY"]
[Wed Dec 10 02:52:07.112303 2025] [:error] [pid 2366:tid 2384] [client 4.194.127.155:2011] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThv10AeBjkmsNRkd1OaowAAANA"]
[Wed Dec 10 02:52:07.287421 2025] [:error] [pid 2279:tid 2318] [client 4.194.127.155:1176] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/20.php"] [unique_id "aThv11mpdQscMcJOElXYwgAAAUg"]
[Wed Dec 10 02:52:07.460944 2025] [:error] [pid 37041:tid 37049] [client 4.194.127.155:1166] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/20.php"] [unique_id "aThv17uffDW8UzBwa1bSoQAAAEY"]
[Wed Dec 10 02:52:07.656379 2025] [:error] [pid 2279:tid 2334] [client 4.194.127.155:1995] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/20.php"] [unique_id "aThv11mpdQscMcJOElXYwwAAAVg"]
[Wed Dec 10 02:52:07.846004 2025] [:error] [pid 2279:tid 2328] [client 4.194.127.155:2040] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/20.php"] [unique_id "aThv11mpdQscMcJOElXYxAAAAVI"]
[Wed Dec 10 02:52:08.071535 2025] [:error] [pid 2277:tid 2287] [client 4.194.127.155:1177] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aThv2IWGo731r6eS-w59owAAAAU"]
[Wed Dec 10 02:52:08.246960 2025] [:error] [pid 2279:tid 2323] [client 4.194.127.155:1173] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aThv2FmpdQscMcJOElXYxgAAAU0"]
[Wed Dec 10 02:52:08.450979 2025] [:error] [pid 2277:tid 2298] [client 4.194.127.155:1181] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aThv2IWGo731r6eS-w59pQAAAA8"]
[Wed Dec 10 02:52:08.683751 2025] [:error] [pid 2279:tid 2325] [client 4.194.127.155:2033] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aThv2FmpdQscMcJOElXYyAAAAU8"]
[Wed Dec 10 02:52:08.885644 2025] [:error] [pid 2366:tid 2376] [client 4.194.127.155:2002] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThv2EAeBjkmsNRkd1OapQAAAMg"]
[Wed Dec 10 02:52:09.072021 2025] [:error] [pid 2280:tid 2337] [client 4.194.127.155:2046] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThv2XcqIB-8ALgw4Zp-OwAAAIA"]
[Wed Dec 10 02:52:09.258231 2025] [:error] [pid 2366:tid 2374] [client 4.194.127.155:1193] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThv2UAeBjkmsNRkd1OapgAAAMY"]
[Wed Dec 10 02:52:09.457852 2025] [:error] [pid 2366:tid 2369] [client 4.194.127.155:2034] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThv2UAeBjkmsNRkd1OapwAAAME"]
[Wed Dec 10 02:52:09.665438 2025] [:error] [pid 2366:tid 2381] [client 4.194.127.155:1160] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aThv2UAeBjkmsNRkd1OaqAAAAM0"]
[Wed Dec 10 02:52:09.839800 2025] [:error] [pid 2280:tid 2343] [client 4.194.127.155:2010] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aThv2XcqIB-8ALgw4Zp-PQAAAIY"]
[Wed Dec 10 02:52:10.025194 2025] [:error] [pid 2280:tid 2346] [client 4.194.127.155:1169] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aThv2ncqIB-8ALgw4Zp-PgAAAIk"]
[Wed Dec 10 02:52:10.199087 2025] [:error] [pid 2366:tid 2372] [client 4.194.127.155:2009] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aThv2kAeBjkmsNRkd1OaqgAAAMQ"]
[Wed Dec 10 02:52:10.376996 2025] [:error] [pid 2279:tid 2330] [client 4.194.127.155:1182] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/build.php"] [unique_id "aThv2lmpdQscMcJOElXYygAAAVQ"]
[Wed Dec 10 02:52:10.557462 2025] [:error] [pid 2366:tid 2391] [client 4.194.127.155:2005] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/build.php"] [unique_id "aThv2kAeBjkmsNRkd1OarAAAANc"]
[Wed Dec 10 02:52:10.740897 2025] [:error] [pid 2366:tid 2389] [client 4.194.127.155:1612] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/build.php"] [unique_id "aThv2kAeBjkmsNRkd1OargAAANU"]
[Wed Dec 10 02:52:10.972167 2025] [:error] [pid 2366:tid 2378] [client 4.194.127.155:1167] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/build.php"] [unique_id "aThv2kAeBjkmsNRkd1OasAAAAMo"]
[Wed Dec 10 02:52:11.150925 2025] [:error] [pid 2366:tid 2387] [client 4.194.127.155:1174] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/upload/css.php"] [unique_id "aThv20AeBjkmsNRkd1OasgAAANM"]
[Wed Dec 10 02:52:11.348423 2025] [:error] [pid 2280:tid 2359] [client 4.194.127.155:1179] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/upload/css.php"] [unique_id "aThv23cqIB-8ALgw4Zp-QAAAAJY"]
[Wed Dec 10 02:52:11.523584 2025] [:error] [pid 2366:tid 2374] [client 4.194.127.155:2018] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/upload/css.php"] [unique_id "aThv20AeBjkmsNRkd1OatAAAAMY"]
[Wed Dec 10 02:52:11.697802 2025] [:error] [pid 2366:tid 2382] [client 4.194.127.155:1180] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/upload/css.php"] [unique_id "aThv20AeBjkmsNRkd1OatQAAAM4"]
[Wed Dec 10 02:52:11.876013 2025] [:error] [pid 2366:tid 2371] [client 4.194.127.155:1994] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aThv20AeBjkmsNRkd1OatwAAAMM"]
[Wed Dec 10 02:52:12.052489 2025] [:error] [pid 37041:tid 37059] [client 4.194.127.155:1170] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aThv3LuffDW8UzBwa1bSpwAAAFA"]
[Wed Dec 10 02:52:12.226024 2025] [:error] [pid 2280:tid 2352] [client 4.194.127.155:1204] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aThv3HcqIB-8ALgw4Zp-QgAAAI8"]
[Wed Dec 10 02:52:12.405345 2025] [:error] [pid 2280:tid 2357] [client 4.194.127.155:1630] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aThv3HcqIB-8ALgw4Zp-RAAAAJQ"]
[Wed Dec 10 02:52:12.580386 2025] [:error] [pid 37041:tid 37051] [client 4.194.127.155:1172] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aThv3LuffDW8UzBwa1bSqQAAAEg"]
[Wed Dec 10 02:52:12.755046 2025] [:error] [pid 2366:tid 2389] [client 4.194.127.155:2032] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aThv3EAeBjkmsNRkd1OauQAAANU"]
[Wed Dec 10 02:52:12.956779 2025] [:error] [pid 37041:tid 37067] [client 4.194.127.155:1159] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aThv3LuffDW8UzBwa1bSqgAAAFg"]
[Wed Dec 10 02:52:13.131156 2025] [:error] [pid 2280:tid 2351] [client 4.194.127.155:1187] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aThv3XcqIB-8ALgw4Zp-RQAAAI4"]
[Wed Dec 10 02:52:13.304806 2025] [:error] [pid 2279:tid 2332] [client 4.194.127.155:1155] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aThv3VmpdQscMcJOElXYzQAAAVY"]
[Wed Dec 10 02:52:13.554344 2025] [:error] [pid 37041:tid 37064] [client 4.194.127.155:1990] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aThv3buffDW8UzBwa1bSqwAAAFU"]
[Wed Dec 10 02:52:13.731048 2025] [:error] [pid 37041:tid 37049] [client 4.194.127.155:1183] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aThv3buffDW8UzBwa1bSrQAAAEY"]
[Wed Dec 10 02:52:13.925078 2025] [:error] [pid 2280:tid 2360] [client 4.194.127.155:2016] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aThv3XcqIB-8ALgw4Zp-RwAAAJc"]
[Wed Dec 10 02:52:14.099085 2025] [:error] [pid 2366:tid 2379] [client 4.194.127.155:1632] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aThv3kAeBjkmsNRkd1OawAAAAMs"]
[Wed Dec 10 02:52:14.273444 2025] [:error] [pid 2366:tid 2381] [client 4.194.127.155:1154] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aThv3kAeBjkmsNRkd1OawgAAAM0"]
[Wed Dec 10 02:52:14.458106 2025] [:error] [pid 2366:tid 2372] [client 4.194.127.155:1603] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aThv3kAeBjkmsNRkd1OawwAAAMQ"]
[Wed Dec 10 02:52:14.631876 2025] [:error] [pid 2366:tid 2377] [client 4.194.127.155:1214] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aThv3kAeBjkmsNRkd1OaxAAAAMk"]
[Wed Dec 10 02:52:14.806220 2025] [:error] [pid 2280:tid 2345] [client 4.194.127.155:1206] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "aThv3ncqIB-8ALgw4Zp-SQAAAIg"]
[Wed Dec 10 02:52:14.996746 2025] [:error] [pid 2279:tid 2321] [client 4.194.127.155:1158] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "aThv3lmpdQscMcJOElXYzwAAAUs"]
[Wed Dec 10 02:52:15.171809 2025] [:error] [pid 2277:tid 2286] [client 4.194.127.155:1657] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "aThv34WGo731r6eS-w59qQAAAAQ"]
[Wed Dec 10 02:52:15.352695 2025] [:error] [pid 2277:tid 2305] [client 4.194.127.155:1189] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "aThv34WGo731r6eS-w59qgAAABY"]
[Wed Dec 10 02:52:15.527957 2025] [:error] [pid 2280:tid 2354] [client 4.194.127.155:1207] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "aThv33cqIB-8ALgw4Zp-SwAAAJE"]
[Wed Dec 10 02:52:15.701352 2025] [:error] [pid 2366:tid 2368] [client 4.194.127.155:1171] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "aThv30AeBjkmsNRkd1OayAAAAMA"]
[Wed Dec 10 02:52:15.913918 2025] [:error] [pid 2279:tid 2311] [client 4.194.127.155:2014] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "aThv31mpdQscMcJOElXY0gAAAUE"]
[Wed Dec 10 02:52:16.095186 2025] [:error] [pid 2279:tid 2323] [client 4.194.127.155:1606] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "aThv4FmpdQscMcJOElXY0wAAAU0"]
[Wed Dec 10 02:52:16.269348 2025] [:error] [pid 2279:tid 2333] [client 4.194.127.155:2013] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aThv4FmpdQscMcJOElXY1AAAAVc"]
[Wed Dec 10 02:52:16.452632 2025] [:error] [pid 2366:tid 2376] [client 4.194.127.155:2012] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aThv4EAeBjkmsNRkd1OaygAAAMg"]
[Wed Dec 10 02:52:16.628322 2025] [:error] [pid 37041:tid 37047] [client 4.194.127.155:1162] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aThv4LuffDW8UzBwa1bSsQAAAEQ"]
[Wed Dec 10 02:52:16.837739 2025] [:error] [pid 2277:tid 2306] [client 4.194.127.155:1205] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aThv4IWGo731r6eS-w59rQAAABc"]
[Wed Dec 10 02:52:17.029558 2025] [:error] [pid 37041:tid 37053] [client 4.194.127.155:1188] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aThv4buffDW8UzBwa1bSswAAAEo"]
[Wed Dec 10 02:52:17.214444 2025] [:error] [pid 2277:tid 2287] [client 4.194.127.155:1933] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aThv4YWGo731r6eS-w59rgAAAAU"]
[Wed Dec 10 02:52:17.395084 2025] [:error] [pid 2279:tid 2330] [client 4.194.127.155:1178] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aThv4VmpdQscMcJOElXY1wAAAVQ"]
[Wed Dec 10 02:52:17.605303 2025] [:error] [pid 2277:tid 2298] [client 4.194.127.155:1634] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aThv4YWGo731r6eS-w59rwAAAA8"]
[Wed Dec 10 02:52:17.796089 2025] [:error] [pid 2277:tid 2299] [client 4.194.127.155:1601] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aThv4YWGo731r6eS-w59sAAAABA"]
[Wed Dec 10 02:52:17.971658 2025] [:error] [pid 2277:tid 2307] [client 4.194.127.155:2006] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aThv4YWGo731r6eS-w59sgAAABg"]
[Wed Dec 10 02:52:18.148742 2025] [:error] [pid 2366:tid 2381] [client 4.194.127.155:2007] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aThv4kAeBjkmsNRkd1OaywAAAM0"]
[Wed Dec 10 02:52:18.331827 2025] [:error] [pid 2277:tid 2291] [client 4.194.127.155:1993] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aThv4oWGo731r6eS-w59tgAAAAk"]
[Wed Dec 10 02:52:18.513743 2025] [:error] [pid 2280:tid 2349] [client 4.194.127.155:1213] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aThv4ncqIB-8ALgw4Zp-TgAAAIw"]
[Wed Dec 10 02:52:18.689688 2025] [:error] [pid 2280:tid 2355] [client 4.194.127.155:2045] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aThv4ncqIB-8ALgw4Zp-TwAAAJI"]
[Wed Dec 10 02:52:18.864195 2025] [:error] [pid 2277:tid 2302] [client 4.194.127.155:2036] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aThv4oWGo731r6eS-w59twAAABM"]
[Wed Dec 10 02:52:19.043819 2025] [:error] [pid 2279:tid 2320] [client 4.194.127.155:2031] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aThv41mpdQscMcJOElXY2AAAAUo"]
[Wed Dec 10 02:52:19.217570 2025] [:error] [pid 2279:tid 2317] [client 4.194.127.155:2038] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aThv41mpdQscMcJOElXY2QAAAUc"]
[Wed Dec 10 02:52:19.406235 2025] [:error] [pid 2279:tid 2332] [client 4.194.127.155:1197] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aThv41mpdQscMcJOElXY2wAAAVY"]
[Wed Dec 10 02:52:19.580179 2025] [:error] [pid 37041:tid 37065] [client 4.194.127.155:2017] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aThv47uffDW8UzBwa1bStQAAAFY"]
[Wed Dec 10 02:52:19.804070 2025] [:error] [pid 2277:tid 2294] [client 4.194.127.155:1646] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aThv44WGo731r6eS-w59uAAAAAs"]
[Wed Dec 10 02:52:19.976972 2025] [:error] [pid 2277:tid 2296] [client 4.194.127.155:2023] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aThv44WGo731r6eS-w59uQAAAA0"]
[Wed Dec 10 02:52:20.168407 2025] [:error] [pid 37041:tid 37044] [client 4.194.127.155:1625] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aThv5LuffDW8UzBwa1bStwAAAEE"]
[Wed Dec 10 02:52:20.348182 2025] [:error] [pid 2277:tid 2285] [client 4.194.127.155:2047] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aThv5IWGo731r6eS-w59uwAAAAM"]
[Wed Dec 10 02:52:20.532205 2025] [:error] [pid 2277:tid 2282] [client 4.194.127.155:1943] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aThv5IWGo731r6eS-w59vAAAAAA"]
[Wed Dec 10 02:52:20.715110 2025] [:error] [pid 2277:tid 2300] [client 4.194.127.155:1200] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aThv5IWGo731r6eS-w59vQAAABE"]
[Wed Dec 10 02:52:20.903069 2025] [:error] [pid 37041:tid 37064] [client 4.194.127.155:1191] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aThv5LuffDW8UzBwa1bSugAAAFU"]
[Wed Dec 10 02:52:21.077536 2025] [:error] [pid 37041:tid 37049] [client 4.194.127.155:1617] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aThv5buffDW8UzBwa1bSuwAAAEY"]
[Wed Dec 10 02:52:21.279062 2025] [:error] [pid 2280:tid 2351] [client 4.194.127.155:2001] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aThv5XcqIB-8ALgw4Zp-UgAAAI4"]
[Wed Dec 10 02:52:21.494069 2025] [:error] [pid 37041:tid 37048] [client 4.194.127.155:1186] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aThv5buffDW8UzBwa1bSvgAAAEU"]
[Wed Dec 10 02:52:21.670598 2025] [:error] [pid 2277:tid 2303] [client 4.194.127.155:2019] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aThv5YWGo731r6eS-w59vgAAABQ"]
[Wed Dec 10 02:52:21.854961 2025] [:error] [pid 2277:tid 2289] [client 4.194.127.155:1604] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aThv5YWGo731r6eS-w59wAAAAAc"]
[Wed Dec 10 02:52:22.045512 2025] [:error] [pid 2366:tid 2385] [client 4.194.127.155:1627] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aThv5kAeBjkmsNRkd1OazwAAANE"]
[Wed Dec 10 02:52:22.219509 2025] [:error] [pid 2277:tid 2306] [client 4.194.127.155:1997] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aThv5oWGo731r6eS-w59wgAAABc"]
[Wed Dec 10 02:52:22.398674 2025] [:error] [pid 2279:tid 2313] [client 4.194.127.155:1602] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aThv5lmpdQscMcJOElXY3AAAAUM"]
[Wed Dec 10 02:52:22.571481 2025] [:error] [pid 2366:tid 2374] [client 4.194.127.155:1199] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aThv5kAeBjkmsNRkd1Oa0AAAAMY"]
[Wed Dec 10 02:52:22.746802 2025] [:error] [pid 2279:tid 2328] [client 4.194.127.155:1202] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aThv5lmpdQscMcJOElXY3QAAAVI"]
[Wed Dec 10 02:52:22.922175 2025] [:error] [pid 2277:tid 2304] [client 4.194.127.155:1610] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aThv5oWGo731r6eS-w59xQAAABU"]
[Wed Dec 10 02:52:23.097035 2025] [:error] [pid 2277:tid 2293] [client 4.194.127.155:2041] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aThv54WGo731r6eS-w59xgAAAAo"]
[Wed Dec 10 02:52:23.279025 2025] [:error] [pid 2280:tid 2337] [client 4.194.127.155:2027] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aThv53cqIB-8ALgw4Zp-VAAAAIA"]
[Wed Dec 10 02:52:23.453332 2025] [:error] [pid 2277:tid 2302] [client 4.194.127.155:1152] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aThv54WGo731r6eS-w59xwAAABM"]
[Wed Dec 10 02:52:23.648155 2025] [:error] [pid 2280:tid 2343] [client 4.194.127.155:2021] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThv53cqIB-8ALgw4Zp-VQAAAIY"]
[Wed Dec 10 02:52:23.823137 2025] [:error] [pid 2280:tid 2358] [client 4.194.127.155:1164] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThv53cqIB-8ALgw4Zp-VgAAAJU"]
[Wed Dec 10 02:52:23.998737 2025] [:error] [pid 2280:tid 2342] [client 4.194.127.155:1153] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThv53cqIB-8ALgw4Zp-VwAAAIU"]
[Wed Dec 10 02:52:24.178057 2025] [:error] [pid 2280:tid 2361] [client 4.194.127.155:1157] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThv6HcqIB-8ALgw4Zp-WAAAAJg"]
[Wed Dec 10 02:52:24.363239 2025] [:error] [pid 37041:tid 37045] [client 4.194.127.155:1611] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/02.php"] [unique_id "aThv6LuffDW8UzBwa1bSwAAAAEI"]
[Wed Dec 10 02:52:24.542703 2025] [:error] [pid 37041:tid 37062] [client 4.194.127.155:1600] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/02.php"] [unique_id "aThv6LuffDW8UzBwa1bSwQAAAFM"]
[Wed Dec 10 02:52:24.717421 2025] [:error] [pid 37041:tid 37047] [client 4.194.127.155:1661] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/02.php"] [unique_id "aThv6LuffDW8UzBwa1bSwgAAAEQ"]
[Wed Dec 10 02:52:24.893230 2025] [:error] [pid 2280:tid 2340] [client 4.194.127.155:1642] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/02.php"] [unique_id "aThv6HcqIB-8ALgw4Zp-XQAAAIM"]
[Wed Dec 10 02:52:25.088044 2025] [:error] [pid 2280:tid 2347] [client 4.194.127.155:1605] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aThv6XcqIB-8ALgw4Zp-XwAAAIo"]
[Wed Dec 10 02:52:25.308151 2025] [:error] [pid 2366:tid 2378] [client 4.194.127.155:1616] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aThv6UAeBjkmsNRkd1Oa1QAAAMo"]
[Wed Dec 10 02:52:25.490674 2025] [:error] [pid 2280:tid 2357] [client 4.194.127.155:1643] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aThv6XcqIB-8ALgw4Zp-YgAAAJQ"]
[Wed Dec 10 02:52:25.670703 2025] [:error] [pid 2280:tid 2351] [client 4.194.127.155:2035] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aThv6XcqIB-8ALgw4Zp-YwAAAI4"]
[Wed Dec 10 02:52:25.892228 2025] [:error] [pid 2366:tid 2377] [client 4.194.127.155:1652] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aThv6UAeBjkmsNRkd1Oa1gAAAMk"]
[Wed Dec 10 02:52:26.086822 2025] [:error] [pid 2366:tid 2386] [client 4.194.127.155:1622] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aThv6kAeBjkmsNRkd1Oa2AAAANI"]
[Wed Dec 10 02:52:26.262445 2025] [:error] [pid 2280:tid 2342] [client 4.194.127.155:1645] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aThv6ncqIB-8ALgw4Zp-ZgAAAIU"]
[Wed Dec 10 02:52:26.443757 2025] [:error] [pid 2366:tid 2389] [client 4.194.127.155:1998] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aThv6kAeBjkmsNRkd1Oa2wAAANU"]
[Wed Dec 10 02:52:26.633860 2025] [:error] [pid 2366:tid 2380] [client 4.194.127.155:1648] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aThv6kAeBjkmsNRkd1Oa3AAAAMw"]
[Wed Dec 10 02:52:26.828661 2025] [:error] [pid 2366:tid 2376] [client 4.194.127.155:1928] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aThv6kAeBjkmsNRkd1Oa3QAAAMg"]
[Wed Dec 10 02:52:27.052498 2025] [:error] [pid 2279:tid 2329] [client 4.194.127.155:1185] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aThv61mpdQscMcJOElXY4QAAAVM"]
[Wed Dec 10 02:52:27.229174 2025] [:error] [pid 2279:tid 2319] [client 4.194.127.155:1209] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ee.php"] [unique_id "aThv61mpdQscMcJOElXY4gAAAUk"]
[Wed Dec 10 02:52:27.405156 2025] [:error] [pid 37041:tid 37044] [client 4.194.127.155:2030] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThv67uffDW8UzBwa1bSxQAAAEE"]
[Wed Dec 10 02:52:27.601605 2025] [:error] [pid 2280:tid 2361] [client 4.194.127.155:1165] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThv63cqIB-8ALgw4Zp-aAAAAJg"]
[Wed Dec 10 02:52:27.781904 2025] [:error] [pid 2280:tid 2346] [client 4.194.127.155:1615] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThv63cqIB-8ALgw4Zp-aQAAAIk"]
[Wed Dec 10 02:52:27.956880 2025] [:error] [pid 37041:tid 37049] [client 4.194.127.155:1609] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThv67uffDW8UzBwa1bSyAAAAEY"]
[Wed Dec 10 02:52:28.137390 2025] [:error] [pid 37041:tid 37046] [client 4.194.127.155:1986] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aThv7LuffDW8UzBwa1bSyQAAAEM"]
[Wed Dec 10 02:52:28.314220 2025] [:error] [pid 37041:tid 37048] [client 4.194.127.155:1636] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aThv7LuffDW8UzBwa1bSywAAAEU"]
[Wed Dec 10 02:52:28.505421 2025] [:error] [pid 2277:tid 2287] [client 4.194.127.155:1976] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aThv7IWGo731r6eS-w59ygAAAAU"]
[Wed Dec 10 02:52:28.681889 2025] [:error] [pid 2279:tid 2320] [client 4.194.127.155:2044] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aThv7FmpdQscMcJOElXY5QAAAUo"]
[Wed Dec 10 02:52:28.855342 2025] [:error] [pid 2280:tid 2338] [client 4.194.127.155:1952] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aThv7HcqIB-8ALgw4Zp-awAAAIE"]
[Wed Dec 10 02:52:29.043844 2025] [:error] [pid 2366:tid 2378] [client 4.194.127.155:1644] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aThv7UAeBjkmsNRkd1Oa4gAAAMo"]
[Wed Dec 10 02:52:29.223169 2025] [:error] [pid 2279:tid 2322] [client 4.194.127.155:1195] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aThv7VmpdQscMcJOElXY5wAAAUw"]
[Wed Dec 10 02:52:29.396771 2025] [:error] [pid 2366:tid 2386] [client 4.194.127.155:1634] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aThv7UAeBjkmsNRkd1Oa4wAAANI"]
[Wed Dec 10 02:52:29.574743 2025] [:error] [pid 2280:tid 2359] [client 4.194.127.155:1987] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/y7.PHP"] [unique_id "aThv7XcqIB-8ALgw4Zp-bAAAAJY"]
[Wed Dec 10 02:52:29.760682 2025] [:error] [pid 2277:tid 2304] [client 4.194.127.155:1658] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/y7.PHP"] [unique_id "aThv7YWGo731r6eS-w59zQAAABU"]
[Wed Dec 10 02:52:29.945046 2025] [:error] [pid 2366:tid 2380] [client 4.194.127.155:1988] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/y7.PHP"] [unique_id "aThv7UAeBjkmsNRkd1Oa5QAAAMw"]
[Wed Dec 10 02:52:30.118456 2025] [:error] [pid 2366:tid 2370] [client 4.194.127.155:2020] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/y7.PHP"] [unique_id "aThv7kAeBjkmsNRkd1Oa5wAAAMI"]
[Wed Dec 10 02:52:30.304048 2025] [:error] [pid 2277:tid 2307] [client 4.194.127.155:1190] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yr.PHP"] [unique_id "aThv7oWGo731r6eS-w59zgAAABg"]
[Wed Dec 10 02:52:30.487531 2025] [:error] [pid 2277:tid 2293] [client 4.194.127.155:1156] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yr.PHP"] [unique_id "aThv7oWGo731r6eS-w59zwAAAAo"]
[Wed Dec 10 02:52:30.661957 2025] [:error] [pid 2280:tid 2355] [client 4.194.127.155:1613] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yr.PHP"] [unique_id "aThv7ncqIB-8ALgw4Zp-bgAAAJI"]
[Wed Dec 10 02:52:30.836286 2025] [:error] [pid 2279:tid 2327] [client 4.194.127.155:1198] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yr.PHP"] [unique_id "aThv7lmpdQscMcJOElXY6QAAAVE"]
[Wed Dec 10 02:52:31.009255 2025] [:error] [pid 2279:tid 2323] [client 4.194.127.155:1184] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l3gi0n.php"] [unique_id "aThv71mpdQscMcJOElXY6gAAAU0"]
[Wed Dec 10 02:52:31.200287 2025] [:error] [pid 2279:tid 2321] [client 4.194.127.155:1924] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l3gi0n.php"] [unique_id "aThv71mpdQscMcJOElXY6wAAAUs"]
[Wed Dec 10 02:52:31.379055 2025] [:error] [pid 2277:tid 2302] [client 4.194.127.155:1208] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l3gi0n.php"] [unique_id "aThv74WGo731r6eS-w590QAAABM"]
[Wed Dec 10 02:52:31.555270 2025] [:error] [pid 2277:tid 2294] [client 4.194.127.155:1940] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l3gi0n.php"] [unique_id "aThv74WGo731r6eS-w590gAAAAs"]
[Wed Dec 10 02:52:31.762639 2025] [:error] [pid 2279:tid 2331] [client 4.194.127.155:1989] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/loads.PhP"] [unique_id "aThv71mpdQscMcJOElXY7gAAAVU"]
[Wed Dec 10 02:52:31.935801 2025] [:error] [pid 37041:tid 37061] [client 4.194.127.155:2008] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/loads.PhP"] [unique_id "aThv77uffDW8UzBwa1bS0gAAAFI"]
[Wed Dec 10 02:52:32.120885 2025] [:error] [pid 2279:tid 2330] [client 4.194.127.155:1194] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/loads.PhP"] [unique_id "aThv8FmpdQscMcJOElXY8AAAAVQ"]
[Wed Dec 10 02:52:32.304379 2025] [:error] [pid 2277:tid 2296] [client 4.194.127.155:2003] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/loads.PhP"] [unique_id "aThv8IWGo731r6eS-w590wAAAA0"]
[Wed Dec 10 02:52:32.478017 2025] [:error] [pid 2279:tid 2325] [client 4.194.127.155:1650] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mj.php"] [unique_id "aThv8FmpdQscMcJOElXY8gAAAU8"]
[Wed Dec 10 02:52:32.660371 2025] [:error] [pid 2279:tid 2329] [client 4.194.127.155:1947] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mj.php"] [unique_id "aThv8FmpdQscMcJOElXY8wAAAVM"]
[Wed Dec 10 02:52:32.844960 2025] [:error] [pid 37041:tid 37053] [client 4.194.127.155:1629] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mj.php"] [unique_id "aThv8LuffDW8UzBwa1bS0wAAAEo"]
[Wed Dec 10 02:52:33.019763 2025] [:error] [pid 2277:tid 2285] [client 4.194.127.155:1203] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mj.php"] [unique_id "aThv8YWGo731r6eS-w591QAAAAM"]
[Wed Dec 10 02:52:33.202691 2025] [:error] [pid 2279:tid 2315] [client 4.194.127.155:2015] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aThv8VmpdQscMcJOElXY9QAAAUU"]
[Wed Dec 10 02:52:33.390065 2025] [:error] [pid 2366:tid 2387] [client 4.194.127.155:1191] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aThv8UAeBjkmsNRkd1Oa6wAAANM"]
[Wed Dec 10 02:52:33.567797 2025] [:error] [pid 2279:tid 2320] [client 4.194.127.155:1212] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aThv8VmpdQscMcJOElXY9wAAAUo"]
[Wed Dec 10 02:52:33.748856 2025] [:error] [pid 2279:tid 2317] [client 4.194.127.155:1623] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aThv8VmpdQscMcJOElXY-AAAAUc"]
[Wed Dec 10 02:52:33.932596 2025] [:error] [pid 2279:tid 2332] [client 4.194.127.155:2000] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsz.php"] [unique_id "aThv8VmpdQscMcJOElXY-QAAAVY"]
[Wed Dec 10 02:52:34.106670 2025] [:error] [pid 2279:tid 2322] [client 4.194.127.155:1608] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsz.php"] [unique_id "aThv8lmpdQscMcJOElXY-gAAAUw"]
[Wed Dec 10 02:52:34.290136 2025] [:error] [pid 2279:tid 2313] [client 4.194.127.155:1169] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsz.php"] [unique_id "aThv8lmpdQscMcJOElXY-wAAAUM"]
[Wed Dec 10 02:52:34.475190 2025] [:error] [pid 2279:tid 2318] [client 4.194.127.155:1211] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsz.php"] [unique_id "aThv8lmpdQscMcJOElXY_QAAAUg"]
[Wed Dec 10 02:52:34.648603 2025] [:error] [pid 2366:tid 2379] [client 4.194.127.155:1483] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aThv8kAeBjkmsNRkd1Oa7QAAAMs"]
[Wed Dec 10 02:52:34.841108 2025] [:error] [pid 2366:tid 2378] [client 4.194.127.155:1923] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aThv8kAeBjkmsNRkd1Oa7gAAAMo"]
[Wed Dec 10 02:52:35.027256 2025] [:error] [pid 2366:tid 2371] [client 4.194.127.155:1635] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aThv80AeBjkmsNRkd1Oa7wAAAMM"]
[Wed Dec 10 02:52:35.202331 2025] [:error] [pid 2366:tid 2386] [client 4.194.127.155:1651] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aThv80AeBjkmsNRkd1Oa8AAAANI"]
[Wed Dec 10 02:52:35.377185 2025] [:error] [pid 2366:tid 2388] [client 4.194.127.155:1175] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThv80AeBjkmsNRkd1Oa8gAAANQ"]
[Wed Dec 10 02:52:35.565970 2025] [:error] [pid 2366:tid 2389] [client 4.194.127.155:1992] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThv80AeBjkmsNRkd1Oa8wAAANU"]
[Wed Dec 10 02:52:35.741507 2025] [:error] [pid 2280:tid 2338] [client 4.194.127.155:1477] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThv83cqIB-8ALgw4Zp-cQAAAIE"]
[Wed Dec 10 02:52:35.917133 2025] [:error] [pid 2366:tid 2370] [client 4.194.127.155:1922] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aThv80AeBjkmsNRkd1Oa9gAAAMI"]
[Wed Dec 10 02:52:36.103379 2025] [:error] [pid 2279:tid 2328] [client 4.194.127.155:1192] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "aThv9FmpdQscMcJOElXZAQAAAVI"]
[Wed Dec 10 02:52:36.279533 2025] [:error] [pid 2366:tid 2373] [client 4.194.127.155:1920] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "aThv9EAeBjkmsNRkd1Oa-AAAAMU"]
[Wed Dec 10 02:52:36.454225 2025] [:error] [pid 2366:tid 2372] [client 4.194.127.155:1626] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "aThv9EAeBjkmsNRkd1Oa-gAAAMQ"]
[Wed Dec 10 02:52:36.679823 2025] [:error] [pid 2280:tid 2349] [client 4.194.127.155:1859] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "aThv9HcqIB-8ALgw4Zp-cgAAAIw"]
[Wed Dec 10 02:52:36.853748 2025] [:error] [pid 2277:tid 2306] [client 4.194.127.155:1980] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aThv9IWGo731r6eS-w591wAAABc"]
[Wed Dec 10 02:52:37.034044 2025] [:error] [pid 2280:tid 2347] [client 4.194.127.155:1647] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aThv9XcqIB-8ALgw4Zp-cwAAAIo"]
[Wed Dec 10 02:52:37.208266 2025] [:error] [pid 2366:tid 2375] [client 4.194.127.155:1964] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aThv9UAeBjkmsNRkd1Oa_QAAAMc"]
[Wed Dec 10 02:52:37.386236 2025] [:error] [pid 2279:tid 2322] [client 4.194.127.155:1656] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aThv9VmpdQscMcJOElXZDQAAAUw"]
[Wed Dec 10 02:52:37.579354 2025] [:error] [pid 2366:tid 2387] [client 4.194.127.155:1957] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aThv9UAeBjkmsNRkd1Oa_wAAANM"]
[Wed Dec 10 02:52:37.759386 2025] [:error] [pid 2277:tid 2298] [client 4.194.127.155:1931] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aThv9YWGo731r6eS-w592gAAAA8"]
[Wed Dec 10 02:52:37.978823 2025] [:error] [pid 2366:tid 2392] [client 4.194.127.155:1659] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aThv9UAeBjkmsNRkd1ObAAAAANg"]
[Wed Dec 10 02:52:38.196409 2025] [:error] [pid 2280:tid 2340] [client 4.194.127.155:1958] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aThv9ncqIB-8ALgw4Zp-dQAAAIM"]
[Wed Dec 10 02:52:38.395566 2025] [:error] [pid 2366:tid 2378] [client 4.194.127.155:1984] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThv9kAeBjkmsNRkd1ObAgAAAMo"]
[Wed Dec 10 02:52:38.581786 2025] [:error] [pid 37041:tid 37053] [client 4.194.127.155:1663] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThv9ruffDW8UzBwa1bS3AAAAEo"]
[Wed Dec 10 02:52:38.766846 2025] [:error] [pid 2280:tid 2358] [client 4.194.127.155:1628] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThv9ncqIB-8ALgw4Zp-fQAAAJU"]
[Wed Dec 10 02:52:38.951765 2025] [:error] [pid 2366:tid 2372] [client 4.194.127.155:1948] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aThv9kAeBjkmsNRkd1ObDgAAAMQ"]
[Wed Dec 10 02:52:39.128153 2025] [:error] [pid 2366:tid 2387] [client 4.194.127.155:1960] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aThv90AeBjkmsNRkd1ObFAAAANM"]
[Wed Dec 10 02:52:39.322454 2025] [:error] [pid 2280:tid 2359] [client 4.194.127.155:1624] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aThv93cqIB-8ALgw4Zp-hAAAAJY"]
[Wed Dec 10 02:52:39.524882 2025] [:error] [pid 2366:tid 2383] [client 4.194.127.155:1934] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aThv90AeBjkmsNRkd1ObGwAAAM8"]
[Wed Dec 10 02:52:39.724698 2025] [:error] [pid 2366:tid 2389] [client 4.194.127.155:2022] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aThv90AeBjkmsNRkd1ObHAAAANU"]
[Wed Dec 10 02:52:39.905498 2025] [:error] [pid 2277:tid 2283] [client 4.194.127.155:1215] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trplv.php"] [unique_id "aThv94WGo731r6eS-w596gAAAAE"]
[Wed Dec 10 02:52:40.088958 2025] [:error] [pid 2366:tid 2377] [client 4.194.127.155:1925] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trplv.php"] [unique_id "aThv-EAeBjkmsNRkd1ObHwAAAMk"]
[Wed Dec 10 02:52:40.273038 2025] [:error] [pid 37041:tid 37062] [client 4.194.127.155:1474] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trplv.php"] [unique_id "aThv-LuffDW8UzBwa1bS8wAAAFM"]
[Wed Dec 10 02:52:40.456872 2025] [:error] [pid 37041:tid 37058] [client 4.194.127.155:1163] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trplv.php"] [unique_id "aThv-LuffDW8UzBwa1bS9AAAAE8"]
[Wed Dec 10 02:52:40.632135 2025] [:error] [pid 37041:tid 37056] [client 4.194.127.155:1476] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aThv-LuffDW8UzBwa1bS9QAAAE0"]
[Wed Dec 10 02:52:40.815030 2025] [:error] [pid 2279:tid 2313] [client 4.194.127.155:1653] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aThv-FmpdQscMcJOElXZFgAAAUM"]
[Wed Dec 10 02:52:40.993979 2025] [:error] [pid 37041:tid 37065] [client 4.194.127.155:1972] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aThv-LuffDW8UzBwa1bS9wAAAFY"]
[Wed Dec 10 02:52:41.183982 2025] [:error] [pid 37041:tid 37044] [client 4.194.127.155:1473] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aThv-buffDW8UzBwa1bS-AAAAEE"]
[Wed Dec 10 02:52:41.387339 2025] [:error] [pid 2280:tid 2337] [client 4.194.127.155:1961] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wa.php"] [unique_id "aThv-XcqIB-8ALgw4Zp-jQAAAIA"]
[Wed Dec 10 02:52:41.605270 2025] [:error] [pid 2280:tid 2360] [client 4.194.127.155:2004] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wa.php"] [unique_id "aThv-XcqIB-8ALgw4Zp-jgAAAJc"]
[Wed Dec 10 02:52:41.801901 2025] [:error] [pid 37041:tid 37049] [client 4.194.127.155:1962] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wa.php"] [unique_id "aThv-buffDW8UzBwa1bS-gAAAEY"]
[Wed Dec 10 02:52:41.975677 2025] [:error] [pid 2366:tid 2374] [client 4.194.127.155:1640] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wa.php"] [unique_id "aThv-UAeBjkmsNRkd1ObJAAAAMY"]
[Wed Dec 10 02:52:42.157327 2025] [:error] [pid 2280:tid 2352] [client 4.194.127.155:1535] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aThv-ncqIB-8ALgw4Zp-kwAAAI8"]
[Wed Dec 10 02:52:42.361385 2025] [:error] [pid 2280:tid 2361] [client 4.194.127.155:1620] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aThv-ncqIB-8ALgw4Zp-lQAAAJg"]
[Wed Dec 10 02:52:42.538714 2025] [:error] [pid 2280:tid 2342] [client 4.194.127.155:1484] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aThv-ncqIB-8ALgw4Zp-mAAAAIU"]
[Wed Dec 10 02:52:42.726126 2025] [:error] [pid 37041:tid 37043] [client 4.194.127.155:1654] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aThv-ruffDW8UzBwa1bS_QAAAEA"]
[Wed Dec 10 02:52:42.902044 2025] [:error] [pid 2280:tid 2338] [client 4.194.127.155:1510] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThv-ncqIB-8ALgw4Zp-mgAAAIE"]
[Wed Dec 10 02:52:43.083729 2025] [:error] [pid 2366:tid 2386] [client 4.194.127.155:1985] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThv-0AeBjkmsNRkd1ObJgAAANI"]
[Wed Dec 10 02:52:43.294213 2025] [:error] [pid 2279:tid 2323] [client 4.194.127.155:1956] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThv-1mpdQscMcJOElXZHAAAAU0"]
[Wed Dec 10 02:52:43.468484 2025] [:error] [pid 2279:tid 2321] [client 4.194.127.155:1639] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aThv-1mpdQscMcJOElXZHQAAAUs"]
[Wed Dec 10 02:52:43.642613 2025] [:error] [pid 2279:tid 2331] [client 4.194.127.155:1966] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aThv-1mpdQscMcJOElXZHgAAAVU"]
[Wed Dec 10 02:52:43.824737 2025] [:error] [pid 2280:tid 2340] [client 4.194.127.155:1487] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aThv-3cqIB-8ALgw4Zp-ngAAAIM"]
[Wed Dec 10 02:52:44.000642 2025] [:error] [pid 37041:tid 37063] [client 4.194.127.155:1649] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aThv-7uffDW8UzBwa1bTAQAAAFQ"]
[Wed Dec 10 02:52:44.179482 2025] [:error] [pid 2366:tid 2370] [client 4.194.127.155:1970] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aThv_EAeBjkmsNRkd1ObKgAAAMI"]
[Wed Dec 10 02:52:44.371814 2025] [:error] [pid 2279:tid 2328] [client 4.194.127.155:2042] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aThv_FmpdQscMcJOElXZIAAAAVI"]
[Wed Dec 10 02:52:44.555162 2025] [:error] [pid 2279:tid 2312] [client 4.194.127.155:1534] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aThv_FmpdQscMcJOElXZIgAAAUI"]
[Wed Dec 10 02:52:44.735141 2025] [:error] [pid 2366:tid 2392] [client 4.194.127.155:1641] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aThv_EAeBjkmsNRkd1ObLgAAANg"]
[Wed Dec 10 02:52:44.938935 2025] [:error] [pid 2366:tid 2379] [client 4.194.127.155:1485] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aThv_EAeBjkmsNRkd1ObMAAAAMs"]
[Wed Dec 10 02:52:45.141758 2025] [:error] [pid 2366:tid 2386] [client 4.194.127.155:2039] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aThv_UAeBjkmsNRkd1ObMgAAANI"]
[Wed Dec 10 02:52:45.315819 2025] [:error] [pid 2366:tid 2372] [client 4.194.127.155:1944] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aThv_UAeBjkmsNRkd1ObNAAAAMQ"]
[Wed Dec 10 02:52:45.490461 2025] [:error] [pid 2366:tid 2390] [client 4.194.127.155:1660] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aThv_UAeBjkmsNRkd1ObNgAAANY"]
[Wed Dec 10 02:52:45.669513 2025] [:error] [pid 2280:tid 2351] [client 4.194.127.155:2024] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aThv_XcqIB-8ALgw4Zp-nwAAAI4"]
[Wed Dec 10 02:52:45.896597 2025] [:error] [pid 2366:tid 2381] [client 4.194.127.155:1935] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aThv_UAeBjkmsNRkd1ObOgAAAM0"]
[Wed Dec 10 02:52:47.551278 2025] [:error] [pid 2280:tid 2346] [client 4.194.127.155:1492] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aThv_3cqIB-8ALgw4Zp-oQAAAIk"]
[Wed Dec 10 02:52:47.725566 2025] [:error] [pid 2280:tid 2338] [client 4.194.127.155:1621] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aThv_3cqIB-8ALgw4Zp-owAAAIE"]
[Wed Dec 10 02:52:47.908965 2025] [:error] [pid 2280:tid 2344] [client 4.194.127.155:1938] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aThv_3cqIB-8ALgw4Zp-pAAAAIc"]
[Wed Dec 10 02:52:48.087346 2025] [:error] [pid 2280:tid 2353] [client 4.194.127.155:2025] [client 4.194.127.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aThwAHcqIB-8ALgw4Zp-pgAAAJA"]
[Wed Dec 10 02:52:48.291011 2025] [:error] [pid 2279:tid 2321] [client 4.194.127.155:1655] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aThwAFmpdQscMcJOElXZKAAAAUs"]
[Wed Dec 10 02:52:48.477478 2025] [:error] [pid 2280:tid 2340] [client 4.194.127.155:1168] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aThwAHcqIB-8ALgw4Zp-qQAAAIM"]
[Wed Dec 10 02:52:48.655087 2025] [:error] [pid 2280:tid 2360] [client 4.194.127.155:1971] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aThwAHcqIB-8ALgw4Zp-qgAAAJc"]
[Wed Dec 10 02:52:48.846724 2025] [:error] [pid 2366:tid 2390] [client 4.194.127.155:1638] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aThwAEAeBjkmsNRkd1ObRAAAANY"]
[Wed Dec 10 02:52:49.022418 2025] [:error] [pid 2366:tid 2375] [client 4.194.127.155:1926] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aThwAUAeBjkmsNRkd1ObRgAAAMc"]
[Wed Dec 10 02:52:49.209837 2025] [:error] [pid 2366:tid 2374] [client 4.194.127.155:1618] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aThwAUAeBjkmsNRkd1ObRwAAAMY"]
[Wed Dec 10 02:52:49.411760 2025] [:error] [pid 2366:tid 2387] [client 4.194.127.155:1619] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aThwAUAeBjkmsNRkd1ObSQAAANM"]
[Wed Dec 10 02:52:49.593033 2025] [:error] [pid 2366:tid 2391] [client 4.194.127.155:1950] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aThwAUAeBjkmsNRkd1ObSwAAANc"]
[Wed Dec 10 02:52:49.799744 2025] [:error] [pid 2280:tid 2350] [client 4.194.127.155:1614] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aThwAXcqIB-8ALgw4Zp-qwAAAI0"]
[Wed Dec 10 02:52:49.995620 2025] [:error] [pid 2277:tid 2283] [client 4.194.127.155:1633] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aThwAYWGo731r6eS-w598wAAAAE"]
[Wed Dec 10 02:52:50.179451 2025] [:error] [pid 2279:tid 2333] [client 4.194.127.155:1996] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aThwAlmpdQscMcJOElXZKgAAAVc"]
[Wed Dec 10 02:52:50.368444 2025] [:error] [pid 2366:tid 2378] [client 4.194.127.155:1941] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aThwAkAeBjkmsNRkd1ObTgAAAMo"]
[Wed Dec 10 02:52:50.553098 2025] [:error] [pid 2366:tid 2388] [client 4.194.127.155:1936] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aThwAkAeBjkmsNRkd1ObTwAAANQ"]
[Wed Dec 10 02:52:50.740540 2025] [:error] [pid 2277:tid 2304] [client 4.194.127.155:1527] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aThwAoWGo731r6eS-w599wAAABU"]
[Wed Dec 10 02:52:50.923991 2025] [:error] [pid 2366:tid 2375] [client 4.194.127.155:1927] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aThwAkAeBjkmsNRkd1ObVAAAAMc"]
[Wed Dec 10 02:52:51.113804 2025] [:error] [pid 37041:tid 37051] [client 4.194.127.155:1937] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aThwA7uffDW8UzBwa1bTEQAAAEg"]
[Wed Dec 10 02:52:51.288172 2025] [:error] [pid 2279:tid 2326] [client 4.194.127.155:1930] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/znz2ra.php"] [unique_id "aThwA1mpdQscMcJOElXZLAAAAVA"]
[Wed Dec 10 02:52:51.488481 2025] [:error] [pid 37041:tid 37044] [client 4.194.127.155:1196] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/znz2ra.php"] [unique_id "aThwA7uffDW8UzBwa1bTEwAAAEE"]
[Wed Dec 10 02:52:51.662239 2025] [:error] [pid 2366:tid 2371] [client 4.194.127.155:1868] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/znz2ra.php"] [unique_id "aThwA0AeBjkmsNRkd1ObVgAAAMM"]
[Wed Dec 10 02:52:51.865771 2025] [:error] [pid 2366:tid 2383] [client 4.194.127.155:1493] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/znz2ra.php"] [unique_id "aThwA0AeBjkmsNRkd1ObWQAAAM8"]
[Wed Dec 10 02:52:52.061450 2025] [:error] [pid 37041:tid 37059] [client 4.194.127.155:1955] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aThwBLuffDW8UzBwa1bTFgAAAFA"]
[Wed Dec 10 02:52:52.236314 2025] [:error] [pid 2366:tid 2388] [client 4.194.127.155:1904] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aThwBEAeBjkmsNRkd1ObWgAAANQ"]
[Wed Dec 10 02:52:52.419281 2025] [:error] [pid 2280:tid 2343] [client 4.194.127.155:1946] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aThwBHcqIB-8ALgw4Zp-rwAAAIY"]
[Wed Dec 10 02:52:52.595665 2025] [:error] [pid 2279:tid 2314] [client 4.194.127.155:1528] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aThwBFmpdQscMcJOElXZLwAAAUQ"]
[Wed Dec 10 02:52:52.783622 2025] [:error] [pid 2277:tid 2293] [client 4.194.127.155:1883] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-729.php"] [unique_id "aThwBIWGo731r6eS-w59-gAAAAo"]
[Wed Dec 10 02:52:52.963330 2025] [:error] [pid 2277:tid 2288] [client 4.194.127.155:1490] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-729.php"] [unique_id "aThwBIWGo731r6eS-w59-wAAAAY"]
[Wed Dec 10 02:52:53.138858 2025] [:error] [pid 2279:tid 2317] [client 4.194.127.155:1918] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-729.php"] [unique_id "aThwBVmpdQscMcJOElXZMAAAAUc"]
[Wed Dec 10 02:52:53.313344 2025] [:error] [pid 37041:tid 37055] [client 4.194.127.155:1481] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-729.php"] [unique_id "aThwBbuffDW8UzBwa1bTGAAAAEw"]
[Wed Dec 10 02:52:53.508601 2025] [:error] [pid 37041:tid 37064] [client 4.194.127.155:1968] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aThwBbuffDW8UzBwa1bTGgAAAFU"]
[Wed Dec 10 02:52:53.699969 2025] [:error] [pid 37041:tid 37048] [client 4.194.127.155:1963] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aThwBbuffDW8UzBwa1bTGwAAAEU"]
[Wed Dec 10 02:52:53.875999 2025] [:error] [pid 2366:tid 2380] [client 4.194.127.155:1932] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aThwBUAeBjkmsNRkd1ObXwAAAMw"]
[Wed Dec 10 02:52:54.075114 2025] [:error] [pid 37041:tid 37067] [client 4.194.127.155:1482] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aThwBruffDW8UzBwa1bTHgAAAFg"]
[Wed Dec 10 02:52:54.254702 2025] [:error] [pid 2366:tid 2390] [client 4.194.127.155:1873] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kk.php"] [unique_id "aThwBkAeBjkmsNRkd1ObYQAAANY"]
[Wed Dec 10 02:52:54.428897 2025] [:error] [pid 37041:tid 37060] [client 4.194.127.155:1991] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kk.php"] [unique_id "aThwBruffDW8UzBwa1bTIAAAAFE"]
[Wed Dec 10 02:52:54.605791 2025] [:error] [pid 2277:tid 2282] [client 4.194.127.155:1502] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kk.php"] [unique_id "aThwBoWGo731r6eS-w5-AAAAAAA"]
[Wed Dec 10 02:52:54.781296 2025] [:error] [pid 2279:tid 2334] [client 4.194.127.155:1505] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kk.php"] [unique_id "aThwBlmpdQscMcJOElXZNAAAAVg"]
[Wed Dec 10 02:52:54.960783 2025] [:error] [pid 2279:tid 2323] [client 4.194.127.155:1637] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aThwBlmpdQscMcJOElXZNQAAAU0"]
[Wed Dec 10 02:52:55.139043 2025] [:error] [pid 2280:tid 2353] [client 4.194.127.155:1509] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aThwB3cqIB-8ALgw4Zp-sgAAAJA"]
[Wed Dec 10 02:52:55.316619 2025] [:error] [pid 2279:tid 2310] [client 4.194.127.155:1974] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aThwB1mpdQscMcJOElXZOAAAAUA"]
[Wed Dec 10 02:52:55.496067 2025] [:error] [pid 37041:tid 37047] [client 4.194.127.155:1913] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aThwB7uffDW8UzBwa1bTIwAAAEQ"]
[Wed Dec 10 02:52:55.671517 2025] [:error] [pid 2366:tid 2376] [client 4.194.127.155:1875] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aThwB0AeBjkmsNRkd1ObZAAAAMg"]
[Wed Dec 10 02:52:55.853710 2025] [:error] [pid 2280:tid 2348] [client 4.194.127.155:1499] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aThwB3cqIB-8ALgw4Zp-tAAAAIs"]
[Wed Dec 10 02:52:56.027201 2025] [:error] [pid 37041:tid 37058] [client 4.194.127.155:1607] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aThwCLuffDW8UzBwa1bTJgAAAE8"]
[Wed Dec 10 02:52:56.209256 2025] [:error] [pid 2366:tid 2381] [client 4.194.127.155:1508] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aThwCEAeBjkmsNRkd1ObaAAAAM0"]
[Wed Dec 10 02:52:56.387948 2025] [:error] [pid 2366:tid 2374] [client 4.194.127.155:1479] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ghreshttryu.php"] [unique_id "aThwCEAeBjkmsNRkd1ObawAAAMY"]
[Wed Dec 10 02:52:56.580652 2025] [:error] [pid 2366:tid 2375] [client 4.194.127.155:1978] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ghreshttryu.php"] [unique_id "aThwCEAeBjkmsNRkd1ObbAAAAMc"]
[Wed Dec 10 02:52:56.755437 2025] [:error] [pid 2366:tid 2371] [client 4.194.127.155:1874] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ghreshttryu.php"] [unique_id "aThwCEAeBjkmsNRkd1ObbQAAAMM"]
[Wed Dec 10 02:52:56.955682 2025] [:error] [pid 37041:tid 37061] [client 4.194.127.155:1953] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ghreshttryu.php"] [unique_id "aThwCLuffDW8UzBwa1bTJwAAAFI"]
[Wed Dec 10 02:52:57.137109 2025] [:error] [pid 2366:tid 2392] [client 4.194.127.155:1942] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/siln.php"] [unique_id "aThwCUAeBjkmsNRkd1ObcQAAANg"]
[Wed Dec 10 02:52:57.311341 2025] [:error] [pid 2366:tid 2379] [client 4.194.127.155:1973] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/siln.php"] [unique_id "aThwCUAeBjkmsNRkd1ObcgAAAMs"]
[Wed Dec 10 02:52:57.490940 2025] [:error] [pid 2279:tid 2311] [client 4.194.127.155:1836] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/siln.php"] [unique_id "aThwCVmpdQscMcJOElXZPAAAAUE"]
[Wed Dec 10 02:52:57.667928 2025] [:error] [pid 2279:tid 2317] [client 4.194.127.155:1631] [client 4.194.127.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/siln.php"] [unique_id "aThwCVmpdQscMcJOElXZPgAAAUc"]
[Wed Dec 10 06:22:13.802342 2025] [:error] [pid 16566:tid 16588] [client 45.148.10.154:49326] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aTihFSEgzB1153EFuAbJXgAAAVQ"]
[Wed Dec 10 09:45:41.245701 2025] [proxy_fcgi:error] [pid 16596:tid 16623] [client 13.60.196.105:51940] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_wp_mail_logging_installed', '1', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wp-mail-logging/wp-mail-logging.php'), No3x\\WPML\\WPML_Init->init, No3x\\WPML\\WPML_InstallIndicator->isInstalled, set_transient, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_wp_mail_logging_installed', '1', 'off') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), include_once('/plugins/wp-mail-logging/wp-mail-logging.php'), No3x\\WPML\\WPML_Init->init, No3x\\WPML\\WPML_Plugin->upgrade, No3x\\WPML\\WPML_InstallIndicator->isInstalled, set_transient, add_optionPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_wp_rocket_pricing', 'O:8:\\"stdClass\\":3:{s:8:\\"licenses\\";O:8:\\"stdClass\\":7:{s:6:\\"single\\";O:8:\\"stdClass\\":3:{s:4:\\"name\\";s:6:\\"Single\\";s:6:\\"prices\\";O:8:\\"stdClass\\":3:{s:7:\\"regular\\";i:59;s:4:\\"sale\\";d:35.4;s:7:\\"renewal\\";O:8:\\"stdClass\\":4:{s:14:\\"is_grandfather\\";d:47.2;s:14:\\"is_grandmother\\";i:59;s:15:\\"not_grandfather\\";i:59;s:10:\\"is_expired\\";i:59;}}s:8:\\"websites\\";i:1;}s:4:\\"plus\\";O:8:\\"stdClass\\":3:{s:4:\\"name\\";s:4:\\"Plus\\";s:6:\\"prices\\";O:8:\\"stdClass\\":4:{s:11:\\"from_single\\";O:8:\\"stdClass\\":3:{s:7:\\"regular\\";i:60;s:4:\\"sale\\";i:36;s:5:\\"stack\\";b:0;}s:7:\\"regular\\";i:119;s:4:\\"sale\\";d:71.4;s:7:\\"renewal\\";O:8:\\"stdClass\\":4:{s:14:\\"is_grandfather\\";d:95.2;s:14:\\"is_grandmother\\";i:119;s:15:\\"not_grandfather\\";i:119;s:10:\\"is_expired\\";i:119;}}s:8:\\"websites\\";i:3;}s:8:\\"infinite\\"...'
[Wed Dec 10 10:10:21.592839 2025] [:error] [pid 21291:tid 21307] [client 45.134.20.169:55229] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aTjWjZreiUgLUUTTKJdkBAAAAk4"]
[Wed Dec 10 10:10:23.325666 2025] [:error] [pid 21327:tid 21337] [client 45.134.20.140:41791] [client 45.134.20.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aTjWj9uj_E2YnwjFG0917wAAAog"]
[Wed Dec 10 10:10:25.053435 2025] [:error] [pid 11268:tid 11331] [client 45.134.20.165:51853] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "aTjWkbbpLcj9WqyQndxGlwAAAIc"]
[Wed Dec 10 10:10:26.774055 2025] [:error] [pid 16596:tid 16617] [client 45.134.20.153:30103] [client 45.134.20.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "aTjWknBe21fHOHH2RQo98gAAAZE"]
[Wed Dec 10 10:10:28.496567 2025] [:error] [pid 11268:tid 11345] [client 45.134.20.140:57183] [client 45.134.20.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "aTjWlLbpLcj9WqyQndxGxgAAAJU"]
[Wed Dec 10 10:10:31.239547 2025] [:error] [pid 11268:tid 11333] [client 45.134.20.161:57043] [client 45.134.20.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "aTjWl7bpLcj9WqyQndxGywAAAIk"]
[Wed Dec 10 10:10:32.990310 2025] [:error] [pid 16566:tid 16583] [client 45.134.20.144:20409] [client 45.134.20.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "aTjWmCEgzB1153EFuAYAjQAAAU8"]
[Wed Dec 10 10:10:34.706195 2025] [:error] [pid 21255:tid 21271] [client 45.134.20.158:64215] [client 45.134.20.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "aTjWmvOw-vgCwe7hEWFQCwAAAg0"]
[Wed Dec 10 10:10:36.423973 2025] [:error] [pid 16566:tid 16578] [client 45.134.20.172:36743] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aTjWnCEgzB1153EFuAYAkgAAAUo"]
[Wed Dec 10 10:10:38.143906 2025] [:error] [pid 21356:tid 21381] [client 45.134.20.151:21155] [client 45.134.20.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aTjWnqfG7wIA5S25Sld8YAAAAtY"]
[Wed Dec 10 10:10:40.870677 2025] [:error] [pid 16597:tid 16648] [client 45.134.20.151:62367] [client 45.134.20.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTjWoG4Hlu0QtpUGkRRp7QAAAdU"]
[Wed Dec 10 10:10:42.601650 2025] [:error] [pid 21356:tid 21368] [client 45.134.20.169:29933] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "aTjWoqfG7wIA5S25Sld8YgAAAsk"]
[Wed Dec 10 10:10:44.316626 2025] [:error] [pid 16566:tid 16571] [client 45.134.20.155:37399] [client 45.134.20.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aTjWpCEgzB1153EFuAYAmwAAAUM"]
[Wed Dec 10 10:10:46.032272 2025] [:error] [pid 21356:tid 21379] [client 45.134.20.157:26221] [client 45.134.20.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aTjWpqfG7wIA5S25Sld8ZwAAAtQ"]
[Wed Dec 10 10:10:47.757739 2025] [:error] [pid 11354:tid 11361] [client 45.134.20.153:28639] [client 45.134.20.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aTjWp-2TFO6mVSqWP8RNrAAAAMQ"]
[Wed Dec 10 10:10:49.476463 2025] [:error] [pid 11268:tid 11334] [client 45.134.20.161:55027] [client 45.134.20.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aTjWqbbpLcj9WqyQndxG0gAAAIo"]
[Wed Dec 10 10:10:51.193216 2025] [:error] [pid 11354:tid 11381] [client 45.134.20.163:59069] [client 45.134.20.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aTjWq-2TFO6mVSqWP8RNsAAAANg"]
[Wed Dec 10 10:10:52.927670 2025] [:error] [pid 16566:tid 16576] [client 45.134.20.175:23709] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aTjWrCEgzB1153EFuAYApwAAAUg"]
[Wed Dec 10 10:10:55.649353 2025] [:error] [pid 16566:tid 16577] [client 45.134.20.170:64121] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aTjWryEgzB1153EFuAYAxAAAAUk"]
[Wed Dec 10 10:10:58.193911 2025] [:error] [pid 16566:tid 16580] [client 45.134.20.151:29167] [client 45.134.20.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aTjWsiEgzB1153EFuAYAxgAAAUw"]
[Wed Dec 10 10:10:59.912235 2025] [:error] [pid 16597:tid 16636] [client 45.134.20.175:20735] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-mobile-detector/cache/settings_auto.php"] [unique_id "aTjWs24Hlu0QtpUGkRRp-AAAAck"]
[Wed Dec 10 10:11:01.634319 2025] [:error] [pid 21327:tid 21338] [client 45.134.20.156:34885] [client 45.134.20.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "aTjWtduj_E2YnwjFG092IQAAAok"]
[Wed Dec 10 10:11:03.355436 2025] [:error] [pid 21327:tid 21335] [client 45.134.20.160:40517] [client 45.134.20.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTjWt9uj_E2YnwjFG092IgAAAoY"]
[Wed Dec 10 10:11:05.072697 2025] [:error] [pid 11354:tid 11366] [client 45.134.20.173:40161] [client 45.134.20.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aTjWue2TFO6mVSqWP8RNzAAAAMk"]
[Wed Dec 10 10:11:06.791029 2025] [:error] [pid 11268:tid 11330] [client 45.134.20.149:21017] [client 45.134.20.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTjWurbpLcj9WqyQndxG2gAAAIY"]
[Wed Dec 10 10:11:08.499031 2025] [:error] [pid 16566:tid 16588] [client 45.134.20.152:54633] [client 45.134.20.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTjWvCEgzB1153EFuAYAzQAAAVQ"]
[Wed Dec 10 10:11:11.020028 2025] [:error] [pid 16596:tid 16622] [client 45.134.20.175:41679] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aTjWv3Be21fHOHH2RQo9_wAAAZY"]
[Wed Dec 10 10:11:13.264417 2025] [:error] [pid 11266:tid 11276] [client 45.134.20.144:56497] [client 45.134.20.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTjWwSXL_Qb0Ip3FW3nOlQAAAAY"]
[Wed Dec 10 10:11:15.495321 2025] [:error] [pid 16566:tid 16577] [client 45.134.20.163:48255] [client 45.134.20.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTjWwyEgzB1153EFuAYA1gAAAUk"]
[Wed Dec 10 10:11:17.204461 2025] [:error] [pid 21327:tid 21336] [client 45.134.20.171:40079] [client 45.134.20.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aTjWxduj_E2YnwjFG092NAAAAoc"]
[Wed Dec 10 10:11:18.920408 2025] [:error] [pid 11268:tid 11324] [client 45.134.20.159:38045] [client 45.134.20.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aTjWxrbpLcj9WqyQndxG4QAAAIA"]
[Wed Dec 10 10:11:20.636531 2025] [:error] [pid 11266:tid 11285] [client 45.134.20.145:42161] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "aTjWyCXL_Qb0Ip3FW3nOmAAAAA8"]
[Wed Dec 10 10:11:24.210756 2025] [:error] [pid 16596:tid 16620] [client 45.134.20.165:62039] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "aTjWzHBe21fHOHH2RQo-CAAAAZQ"]
[Wed Dec 10 10:11:25.912142 2025] [:error] [pid 16597:tid 16642] [client 45.134.20.156:37253] [client 45.134.20.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aTjWzW4Hlu0QtpUGkRRqAQAAAc8"]
[Wed Dec 10 10:11:28.163290 2025] [:error] [pid 11268:tid 11347] [client 45.134.20.158:54103] [client 45.134.20.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "aTjW0LbpLcj9WqyQndxG5gAAAJc"]
[Wed Dec 10 10:11:29.875476 2025] [:error] [pid 16596:tid 16602] [client 45.134.20.142:38343] [client 45.134.20.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aTjW0XBe21fHOHH2RQo-DAAAAYI"]
[Wed Dec 10 10:11:32.120459 2025] [:error] [pid 21327:tid 21350] [client 45.134.20.170:51117] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aTjW1Nuj_E2YnwjFG092NgAAApU"]
[Wed Dec 10 10:11:33.840805 2025] [:error] [pid 16597:tid 16647] [client 45.134.20.172:30855] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aTjW1W4Hlu0QtpUGkRRqAgAAAdQ"]
[Wed Dec 10 10:11:36.325715 2025] [:error] [pid 16597:tid 16638] [client 45.134.20.145:60229] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "aTjW2G4Hlu0QtpUGkRRqBQAAAcs"]
[Wed Dec 10 10:11:38.044171 2025] [:error] [pid 21356:tid 21372] [client 45.134.20.160:45731] [client 45.134.20.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aTjW2qfG7wIA5S25Sld8kAAAAs0"]
[Wed Dec 10 10:11:39.770837 2025] [:error] [pid 21327:tid 21346] [client 45.134.20.151:34929] [client 45.134.20.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTjW29uj_E2YnwjFG092OgAAApE"]
[Wed Dec 10 10:11:41.497744 2025] [:error] [pid 16566:tid 16569] [client 45.134.20.156:53775] [client 45.134.20.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "aTjW3SEgzB1153EFuAYA9QAAAUE"]
[Wed Dec 10 10:11:43.750657 2025] [:error] [pid 16566:tid 16579] [client 45.134.20.170:57009] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aTjW3yEgzB1153EFuAYA-wAAAUs"]
[Wed Dec 10 10:11:46.025433 2025] [:error] [pid 21255:tid 21282] [client 45.134.20.159:27133] [client 45.134.20.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTjW4vOw-vgCwe7hEWFQrwAAAhg"]
[Wed Dec 10 10:11:47.749276 2025] [:error] [pid 11354:tid 11360] [client 45.134.20.171:37961] [client 45.134.20.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTjW4-2TFO6mVSqWP8RN7wAAAMM"]
[Wed Dec 10 10:11:49.461457 2025] [:error] [pid 21356:tid 21377] [client 45.134.20.175:32519] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aTjW5afG7wIA5S25Sld8lQAAAtI"]
[Wed Dec 10 10:11:51.174724 2025] [:error] [pid 11354:tid 11377] [client 45.134.20.154:36059] [client 45.134.20.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aTjW5-2TFO6mVSqWP8RN9QAAANQ"]
[Wed Dec 10 10:11:53.708896 2025] [:error] [pid 11354:tid 11376] [client 45.134.20.145:54823] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTjW6e2TFO6mVSqWP8RN-wAAANM"]
[Wed Dec 10 10:11:55.427994 2025] [:error] [pid 21291:tid 21296] [client 45.134.20.142:50867] [client 45.134.20.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTjW65reiUgLUUTTKJdkMAAAAkM"]
[Wed Dec 10 10:11:57.556672 2025] [:error] [pid 11354:tid 11367] [client 45.134.20.153:61271] [client 45.134.20.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTjW7e2TFO6mVSqWP8RN_QAAAMo"]
[Wed Dec 10 10:11:59.277871 2025] [:error] [pid 21291:tid 21306] [client 45.134.20.165:57585] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTjW75reiUgLUUTTKJdkNAAAAk0"]
[Wed Dec 10 10:12:00.992895 2025] [:error] [pid 11266:tid 11289] [client 45.134.20.141:22991] [client 45.134.20.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTjW8CXL_Qb0Ip3FW3nOqAAAABM"]
[Wed Dec 10 10:12:03.231070 2025] [:error] [pid 21255:tid 21261] [client 45.134.20.144:48245] [client 45.134.20.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTjW8_Ow-vgCwe7hEWFQvAAAAgM"]
[Wed Dec 10 10:12:04.987829 2025] [:error] [pid 21327:tid 21338] [client 45.134.20.174:41025] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTjW9Nuj_E2YnwjFG092QQAAAok"]
[Wed Dec 10 10:12:08.184501 2025] [:error] [pid 16596:tid 16609] [client 45.134.20.162:21873] [client 45.134.20.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTjW-HBe21fHOHH2RQo-GQAAAYk"]
[Wed Dec 10 10:12:09.911165 2025] [:error] [pid 11354:tid 11381] [client 45.134.20.165:42779] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTjW-e2TFO6mVSqWP8ROFQAAANg"]
[Wed Dec 10 10:12:11.632867 2025] [:error] [pid 16566:tid 16591] [client 45.134.20.175:41223] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTjW-yEgzB1153EFuAYBCQAAAVc"]
[Wed Dec 10 10:12:14.407519 2025] [:error] [pid 16566:tid 16575] [client 45.134.20.148:46913] [client 45.134.20.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTjW_iEgzB1153EFuAYBEQAAAUc"]
[Wed Dec 10 10:12:16.642216 2025] [:error] [pid 16566:tid 16572] [client 45.134.20.159:31147] [client 45.134.20.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/plugins.php"] [unique_id "aTjXACEgzB1153EFuAYBGAAAAUQ"]
[Wed Dec 10 10:12:18.360003 2025] [:error] [pid 16596:tid 16605] [client 45.134.20.168:54803] [client 45.134.20.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aTjXAnBe21fHOHH2RQo-KAAAAYU"]
[Wed Dec 10 10:12:20.508699 2025] [:error] [pid 16596:tid 16602] [client 45.134.20.141:50337] [client 45.134.20.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTjXBHBe21fHOHH2RQo-LAAAAYI"]
[Wed Dec 10 10:12:22.233604 2025] [:error] [pid 21327:tid 21335] [client 45.134.20.174:35863] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "aTjXBtuj_E2YnwjFG092UAAAAoY"]
[Wed Dec 10 10:12:23.959647 2025] [:error] [pid 16597:tid 16633] [client 45.134.20.161:60629] [client 45.134.20.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aTjXB24Hlu0QtpUGkRRqFQAAAcY"]
[Wed Dec 10 10:12:25.677890 2025] [:error] [pid 16596:tid 16609] [client 45.134.20.169:26901] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTjXCXBe21fHOHH2RQo-MgAAAYk"]
[Wed Dec 10 10:12:29.237640 2025] [:error] [pid 16596:tid 16604] [client 45.134.20.161:43025] [client 45.134.20.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTjXDXBe21fHOHH2RQo-NAAAAYQ"]
[Wed Dec 10 10:12:30.960166 2025] [:error] [pid 11268:tid 11325] [client 45.134.20.162:40841] [client 45.134.20.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTjXDrbpLcj9WqyQndxG_gAAAIE"]
[Wed Dec 10 10:12:32.805095 2025] [:error] [pid 16597:tid 16642] [client 45.134.20.165:24359] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "aTjXEG4Hlu0QtpUGkRRqGwAAAc8"]
[Wed Dec 10 10:12:36.068037 2025] [:error] [pid 16597:tid 16635] [client 45.134.20.154:36887] [client 45.134.20.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options.php"] [unique_id "aTjXFG4Hlu0QtpUGkRRqHQAAAcg"]
[Wed Dec 10 10:12:38.798120 2025] [:error] [pid 16596:tid 16612] [client 45.134.20.152:49359] [client 45.134.20.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "aTjXFnBe21fHOHH2RQo-OQAAAYw"]
[Wed Dec 10 10:12:40.516782 2025] [:error] [pid 21291:tid 21315] [client 45.134.20.147:53803] [client 45.134.20.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aTjXGJreiUgLUUTTKJdkOgAAAlY"]
[Wed Dec 10 10:12:42.233701 2025] [:error] [pid 21327:tid 21334] [client 45.134.20.175:48175] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTjXGtuj_E2YnwjFG092WAAAAoU"]
[Wed Dec 10 10:12:43.939804 2025] [:error] [pid 16566:tid 16591] [client 45.134.20.166:51365] [client 45.134.20.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTjXGyEgzB1153EFuAYBOwAAAVc"]
[Wed Dec 10 10:12:45.658322 2025] [:error] [pid 11266:tid 11276] [client 45.134.20.162:48593] [client 45.134.20.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aTjXHSXL_Qb0Ip3FW3nOxQAAAAY"]
[Wed Dec 10 10:12:47.358023 2025] [:error] [pid 11266:tid 11291] [client 45.134.20.172:60709] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wordfence-waf.php"] [unique_id "aTjXHyXL_Qb0Ip3FW3nOyQAAABU"]
[Wed Dec 10 10:12:49.073049 2025] [:error] [pid 11268:tid 11329] [client 45.134.20.162:43703] [client 45.134.20.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "aTjXIbbpLcj9WqyQndxHAgAAAIU"]
[Wed Dec 10 10:12:50.803523 2025] [:error] [pid 11266:tid 11290] [client 45.134.20.170:23609] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aTjXIiXL_Qb0Ip3FW3nOzQAAABQ"]
[Wed Dec 10 10:12:52.959615 2025] [:error] [pid 11266:tid 11276] [client 45.134.20.157:43255] [client 45.134.20.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "aTjXJCXL_Qb0Ip3FW3nO0QAAAAY"]
[Wed Dec 10 10:12:54.681616 2025] [:error] [pid 16566:tid 16591] [client 45.134.20.148:35245] [client 45.134.20.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aTjXJiEgzB1153EFuAYBWAAAAVc"]
[Wed Dec 10 10:12:56.422031 2025] [:error] [pid 21327:tid 21344] [client 45.134.20.173:41001] [client 45.134.20.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aTjXKNuj_E2YnwjFG092gAAAAo8"]
[Wed Dec 10 10:12:58.136976 2025] [:error] [pid 16566:tid 16572] [client 45.134.20.157:60141] [client 45.134.20.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aTjXKiEgzB1153EFuAYBbAAAAUQ"]
[Wed Dec 10 10:12:59.858269 2025] [:error] [pid 21327:tid 21330] [client 45.134.20.168:35591] [client 45.134.20.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aTjXK9uj_E2YnwjFG092kwAAAoE"]
[Wed Dec 10 10:13:01.586313 2025] [:error] [pid 11354:tid 11378] [client 45.134.20.144:34925] [client 45.134.20.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aTjXLe2TFO6mVSqWP8ROWwAAANU"]
[Wed Dec 10 10:13:03.717178 2025] [:error] [pid 16597:tid 16641] [client 45.134.20.166:34173] [client 45.134.20.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload.php"] [unique_id "aTjXL24Hlu0QtpUGkRRqPgAAAc4"]
[Wed Dec 10 10:13:07.294489 2025] [:error] [pid 16596:tid 16608] [client 45.134.20.157:58185] [client 45.134.20.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aTjXM3Be21fHOHH2RQo-uwAAAYg"]
[Wed Dec 10 10:13:09.010677 2025] [:error] [pid 11266:tid 11282] [client 45.134.20.156:22095] [client 45.134.20.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTjXNSXL_Qb0Ip3FW3nPHQAAAAw"]
[Wed Dec 10 10:13:10.735984 2025] [:error] [pid 11354:tid 11358] [client 45.134.20.155:20805] [client 45.134.20.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTjXNu2TFO6mVSqWP8ROggAAAME"]
[Wed Dec 10 10:13:12.461074 2025] [:error] [pid 21356:tid 21362] [client 45.134.20.155:40549] [client 45.134.20.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xl2023.php"] [unique_id "aTjXOKfG7wIA5S25Sld85wAAAsM"]
[Wed Dec 10 10:13:16.664432 2025] [:error] [pid 11268:tid 11344] [client 45.134.20.150:47075] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aTjXPLbpLcj9WqyQndxHTgAAAJQ"]
[Wed Dec 10 10:13:19.433263 2025] [:error] [pid 16566:tid 16584] [client 45.134.20.154:61903] [client 45.134.20.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/login.php"] [unique_id "aTjXPyEgzB1153EFuAYBoQAAAVA"]
[Wed Dec 10 10:13:21.578823 2025] [:error] [pid 16597:tid 16642] [client 45.134.20.165:63759] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aTjXQW4Hlu0QtpUGkRRqTwAAAc8"]
[Wed Dec 10 10:13:23.299980 2025] [:error] [pid 21356:tid 21381] [client 45.134.20.169:61195] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aTjXQ6fG7wIA5S25Sld88gAAAtY"]
[Wed Dec 10 10:13:26.516308 2025] [:error] [pid 16566:tid 16569] [client 45.134.20.165:35237] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aTjXRiEgzB1153EFuAYBqgAAAUE"]
[Wed Dec 10 10:13:28.218834 2025] [:error] [pid 21255:tid 21282] [client 45.134.20.166:30633] [client 45.134.20.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "aTjXSPOw-vgCwe7hEWFRWQAAAhg"]
[Wed Dec 10 10:13:29.930055 2025] [:error] [pid 11266:tid 11279] [client 45.134.20.170:31023] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTjXSSXL_Qb0Ip3FW3nPIgAAAAk"]
[Wed Dec 10 10:13:31.648099 2025] [:error] [pid 16566:tid 16590] [client 45.134.20.157:46215] [client 45.134.20.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aTjXSyEgzB1153EFuAYBrAAAAVY"]
[Wed Dec 10 10:13:33.371331 2025] [:error] [pid 21255:tid 21276] [client 45.134.20.174:48223] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/pachr.php"] [unique_id "aTjXTfOw-vgCwe7hEWFRYwAAAhI"]
[Wed Dec 10 10:13:35.087456 2025] [:error] [pid 16596:tid 16619] [client 45.134.20.170:31933] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTjXT3Be21fHOHH2RQo-xAAAAZM"]
[Wed Dec 10 10:13:36.796705 2025] [:error] [pid 21291:tid 21314] [client 45.134.20.165:62585] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aTjXUJreiUgLUUTTKJdkjwAAAlU"]
[Wed Dec 10 10:13:38.529858 2025] [:error] [pid 21255:tid 21281] [client 45.134.20.142:34793] [client 45.134.20.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "aTjXUvOw-vgCwe7hEWFRbAAAAhc"]
[Wed Dec 10 10:13:40.242504 2025] [:error] [pid 21327:tid 21344] [client 45.134.20.169:36977] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "aTjXVNuj_E2YnwjFG0923gAAAo8"]
[Wed Dec 10 10:13:41.961082 2025] [:error] [pid 11266:tid 11284] [client 45.134.20.169:31005] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/user.php"] [unique_id "aTjXVSXL_Qb0Ip3FW3nPPgAAAA4"]
[Wed Dec 10 10:13:43.690339 2025] [:error] [pid 16566:tid 16582] [client 45.134.20.160:41347] [client 45.134.20.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aTjXVyEgzB1153EFuAYBzwAAAU4"]
[Wed Dec 10 10:13:45.403081 2025] [:error] [pid 21255:tid 21273] [client 45.134.20.170:54435] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTjXWfOw-vgCwe7hEWFRlgAAAg8"]
[Wed Dec 10 10:13:48.132860 2025] [:error] [pid 16597:tid 16636] [client 45.134.20.151:34135] [client 45.134.20.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/text.php"] [unique_id "aTjXXG4Hlu0QtpUGkRRqaAAAAck"]
[Wed Dec 10 10:13:50.369039 2025] [:error] [pid 11354:tid 11356] [client 45.134.20.174:26061] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aTjXXu2TFO6mVSqWP8ROwAAAAMA"]
[Wed Dec 10 10:13:52.094455 2025] [:error] [pid 16566:tid 16591] [client 45.134.20.165:22235] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTjXYCEgzB1153EFuAYB6AAAAVc"]
[Wed Dec 10 10:13:53.819202 2025] [:error] [pid 21255:tid 21281] [client 45.134.20.147:53367] [client 45.134.20.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/demo.php"] [unique_id "aTjXYfOw-vgCwe7hEWFRnAAAAhc"]
[Wed Dec 10 10:13:57.053638 2025] [:error] [pid 16566:tid 16570] [client 45.134.20.150:43151] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aTjXZSEgzB1153EFuAYB7wAAAUI"]
[Wed Dec 10 10:13:59.548499 2025] [:error] [pid 11266:tid 11273] [client 45.134.20.163:42973] [client 45.134.20.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aTjXZyXL_Qb0Ip3FW3nPVwAAAAM"]
[Wed Dec 10 10:14:02.728272 2025] [:error] [pid 21327:tid 21347] [client 45.134.20.147:41555] [client 45.134.20.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aTjXatuj_E2YnwjFG0926AAAApI"]
[Wed Dec 10 10:14:05.449121 2025] [:error] [pid 16596:tid 16621] [client 45.134.20.159:39753] [client 45.134.20.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xml.php"] [unique_id "aTjXbXBe21fHOHH2RQo-3AAAAZU"]
[Wed Dec 10 10:14:07.580715 2025] [:error] [pid 16566:tid 16579] [client 45.134.20.143:61813] [client 45.134.20.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTjXbyEgzB1153EFuAYB-gAAAUs"]
[Wed Dec 10 10:14:09.317320 2025] [:error] [pid 16566:tid 16590] [client 45.134.20.157:62641] [client 45.134.20.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTjXcSEgzB1153EFuAYB_gAAAVY"]
[Wed Dec 10 10:14:11.116801 2025] [:error] [pid 21291:tid 21295] [client 45.134.20.143:20061] [client 45.134.20.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aTjXc5reiUgLUUTTKJdkogAAAkI"]
[Wed Dec 10 10:14:12.841777 2025] [:error] [pid 16596:tid 16611] [client 45.134.20.158:54237] [client 45.134.20.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aTjXdHBe21fHOHH2RQo-4QAAAYs"]
[Wed Dec 10 10:14:15.368744 2025] [:error] [pid 21356:tid 21360] [client 45.134.20.158:22173] [client 45.134.20.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTjXd6fG7wIA5S25Sld9MAAAAsE"]
[Wed Dec 10 10:14:17.086669 2025] [:error] [pid 21356:tid 21382] [client 45.134.20.169:30459] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "aTjXeafG7wIA5S25Sld9MgAAAtc"]
[Wed Dec 10 10:14:19.328847 2025] [:error] [pid 21356:tid 21376] [client 45.134.20.145:51787] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aTjXe6fG7wIA5S25Sld9NQAAAtE"]
[Wed Dec 10 10:14:22.048811 2025] [:error] [pid 16566:tid 16571] [client 45.134.20.158:26655] [client 45.134.20.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTjXfiEgzB1153EFuAYCBwAAAUM"]
[Wed Dec 10 10:14:23.789178 2025] [:error] [pid 21291:tid 21306] [client 45.134.20.169:41971] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/up.php"] [unique_id "aTjXf5reiUgLUUTTKJdkpgAAAk0"]
[Wed Dec 10 10:14:25.502311 2025] [:error] [pid 16596:tid 16609] [client 45.134.20.154:62551] [client 45.134.20.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aTjXgXBe21fHOHH2RQo-8gAAAYk"]
[Wed Dec 10 10:14:27.222879 2025] [:error] [pid 21356:tid 21360] [client 45.134.20.156:64233] [client 45.134.20.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTjXg6fG7wIA5S25Sld9PgAAAsE"]
[Wed Dec 10 10:14:28.943651 2025] [:error] [pid 21327:tid 21353] [client 45.134.20.162:26093] [client 45.134.20.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aTjXhNuj_E2YnwjFG0928wAAApg"]
[Wed Dec 10 10:14:30.656124 2025] [:error] [pid 11268:tid 11335] [client 45.134.20.174:49049] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aTjXhrbpLcj9WqyQndxHgQAAAIs"]
[Wed Dec 10 10:14:32.369322 2025] [:error] [pid 21255:tid 21282] [client 45.134.20.163:50923] [client 45.134.20.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez/admin.php"] [unique_id "aTjXiPOw-vgCwe7hEWFRrgAAAhg"]
[Wed Dec 10 10:14:34.094090 2025] [:error] [pid 16596:tid 16607] [client 45.134.20.150:56089] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/bluestork/error.php"] [unique_id "aTjXinBe21fHOHH2RQo-9wAAAYc"]
[Wed Dec 10 10:14:35.818635 2025] [:error] [pid 21327:tid 21338] [client 45.134.20.148:30797] [client 45.134.20.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Yamato/index.php"] [unique_id "aTjXi9uj_E2YnwjFG092-AAAAok"]
[Wed Dec 10 10:14:38.566638 2025] [:error] [pid 16596:tid 16622] [client 45.134.20.175:48377] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/isis/index.php"] [unique_id "aTjXjnBe21fHOHH2RQo--QAAAZY"]
[Wed Dec 10 10:14:40.277769 2025] [:error] [pid 11268:tid 11344] [client 45.134.20.167:27645] [client 45.134.20.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aTjXkLbpLcj9WqyQndxHhQAAAJQ"]
[Wed Dec 10 10:14:41.989268 2025] [:error] [pid 21255:tid 21275] [client 45.134.20.161:48495] [client 45.134.20.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Globy/index.php"] [unique_id "aTjXkfOw-vgCwe7hEWFRswAAAhE"]
[Wed Dec 10 10:14:44.243532 2025] [:error] [pid 11266:tid 11275] [client 45.134.20.174:42417] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "aTjXlCXL_Qb0Ip3FW3nPagAAAAU"]
[Wed Dec 10 10:14:45.964214 2025] [:error] [pid 16597:tid 16634] [client 45.134.20.153:60693] [client 45.134.20.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/atomic/error.php"] [unique_id "aTjXlW4Hlu0QtpUGkRRqqAAAAcc"]
[Wed Dec 10 10:14:47.681712 2025] [:error] [pid 11354:tid 11374] [client 45.134.20.147:42503] [client 45.134.20.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez5/index.php"] [unique_id "aTjXl-2TFO6mVSqWP8RO4wAAANE"]
[Wed Dec 10 10:14:49.416861 2025] [:error] [pid 21327:tid 21347] [client 45.134.20.174:53931] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez3/index.php"] [unique_id "aTjXmduj_E2YnwjFG093CAAAApI"]
[Wed Dec 10 10:14:51.660040 2025] [:error] [pid 21356:tid 21369] [client 45.134.20.161:55951] [client 45.134.20.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/rhuk_solarflare_ii/index.php"] [unique_id "aTjXm6fG7wIA5S25Sld9RQAAAso"]
[Wed Dec 10 10:14:53.374630 2025] [:error] [pid 16566:tid 16587] [client 45.134.20.168:41451] [client 45.134.20.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Protostar/index.php"] [unique_id "aTjXnSEgzB1153EFuAYCQAAAAVM"]
[Wed Dec 10 10:14:55.095110 2025] [:error] [pid 11266:tid 11282] [client 45.134.20.160:55449] [client 45.134.20.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/rhuk_milkyway/index.php"] [unique_id "aTjXnyXL_Qb0Ip3FW3nPbgAAAAw"]
[Wed Dec 10 10:14:56.812840 2025] [:error] [pid 11268:tid 11333] [client 45.134.20.175:24125] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/isis/error.php"] [unique_id "aTjXoLbpLcj9WqyQndxHiwAAAIk"]
[Wed Dec 10 10:14:58.524820 2025] [:error] [pid 16566:tid 16590] [client 45.134.20.147:38983] [client 45.134.20.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez_20/index.php"] [unique_id "aTjXoiEgzB1153EFuAYCRQAAAVY"]
[Wed Dec 10 10:15:00.280588 2025] [:error] [pid 21356:tid 21366] [client 45.134.20.172:51441] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Globy/error.php"] [unique_id "aTjXpKfG7wIA5S25Sld9TgAAAsc"]
[Wed Dec 10 10:15:01.982359 2025] [:error] [pid 11354:tid 11381] [client 45.134.20.149:33419] [client 45.134.20.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Protostar/error.php"] [unique_id "aTjXpe2TFO6mVSqWP8RPAgAAANg"]
[Wed Dec 10 10:15:03.693708 2025] [:error] [pid 21327:tid 21339] [client 45.134.20.145:23633] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/hathor/error.php"] [unique_id "aTjXp9uj_E2YnwjFG093DQAAAoo"]
[Wed Dec 10 10:15:05.407208 2025] [:error] [pid 21356:tid 21378] [client 45.134.20.149:56051] [client 45.134.20.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Atomic/error.php"] [unique_id "aTjXqafG7wIA5S25Sld9UwAAAtM"]
[Wed Dec 10 10:15:07.120846 2025] [:error] [pid 16597:tid 16645] [client 45.134.20.164:60475] [client 45.134.20.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/isis/error.php"] [unique_id "aTjXq24Hlu0QtpUGkRRqvwAAAdI"]
[Wed Dec 10 10:15:08.847503 2025] [:error] [pid 16566:tid 16587] [client 45.134.20.174:47087] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Hoxa/error.php"] [unique_id "aTjXrCEgzB1153EFuAYCUgAAAVM"]
[Wed Dec 10 10:15:10.571912 2025] [:error] [pid 16597:tid 16643] [client 45.134.20.169:34599] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/BeginDot/error.php"] [unique_id "aTjXrm4Hlu0QtpUGkRRqwQAAAdA"]
[Wed Dec 10 10:15:12.294120 2025] [:error] [pid 16566:tid 16576] [client 45.134.20.161:41805] [client 45.134.20.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Raees/index.php"] [unique_id "aTjXsCEgzB1153EFuAYCWAAAAUg"]
[Wed Dec 10 10:15:14.021749 2025] [:error] [pid 21255:tid 21263] [client 45.134.20.151:51581] [client 45.134.20.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/madeyourweb/error.php"] [unique_id "aTjXsvOw-vgCwe7hEWFR0AAAAgU"]
[Wed Dec 10 10:15:15.740707 2025] [:error] [pid 21327:tid 21333] [client 45.134.20.168:48593] [client 45.134.20.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Binv/error.php"] [unique_id "aTjXs9uj_E2YnwjFG093EwAAAoQ"]
[Wed Dec 10 10:15:17.458500 2025] [:error] [pid 16566:tid 16589] [client 45.134.20.141:24403] [client 45.134.20.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez2/index.php"] [unique_id "aTjXtSEgzB1153EFuAYCYQAAAVU"]
[Wed Dec 10 10:15:20.199092 2025] [:error] [pid 16596:tid 16608] [client 45.134.20.154:36017] [client 45.134.20.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Atum/error.php"] [unique_id "aTjXuHBe21fHOHH2RQo_LQAAAYg"]
[Wed Dec 10 10:15:21.924178 2025] [:error] [pid 21291:tid 21297] [client 45.134.20.156:52071] [client 45.134.20.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/protostar/error.php"] [unique_id "aTjXuZreiUgLUUTTKJdkyQAAAkQ"]
[Wed Dec 10 10:15:24.166691 2025] [:error] [pid 21327:tid 21337] [client 45.134.20.156:27621] [client 45.134.20.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez_20/error.php"] [unique_id "aTjXvNuj_E2YnwjFG093GgAAAog"]
[Wed Dec 10 10:15:25.886696 2025] [:error] [pid 21255:tid 21275] [client 45.134.20.169:31999] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aTjXvfOw-vgCwe7hEWFR2gAAAhE"]
[Wed Dec 10 10:15:29.210741 2025] [:error] [pid 21327:tid 21351] [client 45.134.20.143:24049] [client 45.134.20.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "aTjXwduj_E2YnwjFG093GwAAApY"]
[Wed Dec 10 10:15:30.938891 2025] [:error] [pid 21327:tid 21350] [client 45.134.20.145:24809] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/protostar/index.php"] [unique_id "aTjXwtuj_E2YnwjFG093HgAAApU"]
[Wed Dec 10 10:15:32.658643 2025] [:error] [pid 11268:tid 11327] [client 45.134.20.149:32035] [client 45.134.20.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Atum/index.php"] [unique_id "aTjXxLbpLcj9WqyQndxHnAAAAIM"]
[Wed Dec 10 10:15:35.437953 2025] [:error] [pid 16597:tid 16641] [client 45.134.20.171:62551] [client 45.134.20.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez3/error.php"] [unique_id "aTjXx24Hlu0QtpUGkRRq0QAAAc4"]
[Wed Dec 10 10:15:37.162733 2025] [:error] [pid 16596:tid 16621] [client 45.134.20.175:24425] [client 45.134.20.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Hoxa/index.php"] [unique_id "aTjXyXBe21fHOHH2RQo_PgAAAZU"]
[Wed Dec 10 10:15:40.921870 2025] [:error] [pid 21327:tid 21348] [client 45.134.20.147:35261] [client 45.134.20.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/isis/index.php"] [unique_id "aTjXzNuj_E2YnwjFG093IwAAApM"]
[Wed Dec 10 10:15:42.645862 2025] [:error] [pid 21255:tid 21267] [client 45.134.20.164:56133] [client 45.134.20.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Aaika/error.php"] [unique_id "aTjXzvOw-vgCwe7hEWFSEAAAAgk"]
[Wed Dec 10 10:15:45.955272 2025] [:error] [pid 21356:tid 21383] [client 45.134.20.143:63345] [client 45.134.20.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Binv/index.php"] [unique_id "aTjX0afG7wIA5S25Sld9gwAAAtg"]
[Wed Dec 10 10:15:47.672797 2025] [:error] [pid 21291:tid 21314] [client 45.134.20.164:54607] [client 45.134.20.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/JMart/error.php"] [unique_id "aTjX05reiUgLUUTTKJdk5gAAAlU"]
[Wed Dec 10 10:15:49.396278 2025] [:error] [pid 16566:tid 16588] [client 45.134.20.163:21083] [client 45.134.20.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Cassiopeia/error.php"] [unique_id "aTjX1SEgzB1153EFuAYCgAAAAVQ"]
[Wed Dec 10 10:15:53.743870 2025] [:error] [pid 21356:tid 21370] [client 45.134.20.145:36793] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/atomic/index.php"] [unique_id "aTjX2afG7wIA5S25Sld9iAAAAss"]
[Wed Dec 10 10:15:55.459273 2025] [:error] [pid 16566:tid 16578] [client 45.134.20.145:33135] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez5/error.php"] [unique_id "aTjX2yEgzB1153EFuAYCiQAAAUo"]
[Wed Dec 10 10:15:57.172217 2025] [:error] [pid 11354:tid 11366] [client 45.134.20.172:22091] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Eatoreh/index.php"] [unique_id "aTjX3e2TFO6mVSqWP8RPLAAAAMk"]
[Wed Dec 10 10:16:00.010499 2025] [:error] [pid 21291:tid 21314] [client 45.134.20.155:51589] [client 45.134.20.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/rhuk_milkyway/error.php"] [unique_id "aTjX4JreiUgLUUTTKJdk7wAAAlU"]
[Wed Dec 10 10:16:01.732965 2025] [:error] [pid 16596:tid 16612] [client 45.134.20.154:22535] [client 45.134.20.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/ja-helio-farsi/index.php"] [unique_id "aTjX4XBe21fHOHH2RQo_TgAAAYw"]
[Wed Dec 10 10:16:03.453934 2025] [:error] [pid 21327:tid 21345] [client 45.134.20.140:31889] [client 45.134.20.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Aaika/index.php"] [unique_id "aTjX49uj_E2YnwjFG093LAAAApA"]
[Wed Dec 10 10:16:05.170710 2025] [:error] [pid 11268:tid 11345] [client 45.134.20.145:35935] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/templates/hathor/index.php"] [unique_id "aTjX5bbpLcj9WqyQndxHuwAAAJU"]
[Wed Dec 10 10:16:07.305052 2025] [:error] [pid 16566:tid 16577] [client 45.134.20.144:64763] [client 45.134.20.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/madeyourweb/index.php"] [unique_id "aTjX5yEgzB1153EFuAYCkAAAAUk"]
[Wed Dec 10 10:16:10.464113 2025] [:error] [pid 16596:tid 16613] [client 45.134.20.164:45633] [client 45.134.20.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/hathor/index.php"] [unique_id "aTjX6nBe21fHOHH2RQo_UwAAAY0"]
[Wed Dec 10 10:16:13.179870 2025] [:error] [pid 16566:tid 16579] [client 45.134.20.174:46349] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Genius/error.php"] [unique_id "aTjX7SEgzB1153EFuAYCkwAAAUs"]
[Wed Dec 10 10:16:14.906242 2025] [:error] [pid 11266:tid 11278] [client 45.134.20.172:33229] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Atomic/index.php"] [unique_id "aTjX7iXL_Qb0Ip3FW3nPlgAAAAg"]
[Wed Dec 10 10:16:16.620905 2025] [:error] [pid 11268:tid 11336] [client 45.134.20.146:21101] [client 45.134.20.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Eatoreh/error.php"] [unique_id "aTjX8LbpLcj9WqyQndxHwgAAAIw"]
[Wed Dec 10 10:16:18.328480 2025] [:error] [pid 21291:tid 21295] [client 45.134.20.155:35531] [client 45.134.20.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/RiverS/error.php"] [unique_id "aTjX8preiUgLUUTTKJdk-AAAAkI"]
[Wed Dec 10 10:16:20.439375 2025] [:error] [pid 21327:tid 21330] [client 45.134.20.150:32891] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/hathor/error.php"] [unique_id "aTjX9Nuj_E2YnwjFG093LwAAAoE"]
[Wed Dec 10 10:16:22.146062 2025] [:error] [pid 11266:tid 11280] [client 45.134.20.164:33329] [client 45.134.20.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/RiverS/index.php"] [unique_id "aTjX9iXL_Qb0Ip3FW3nPmgAAAAo"]
[Wed Dec 10 10:16:25.577000 2025] [:error] [pid 21327:tid 21353] [client 45.134.20.140:41585] [client 45.134.20.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aTjX-duj_E2YnwjFG093MgAAApg"]
[Wed Dec 10 10:16:27.282973 2025] [:error] [pid 11266:tid 11279] [client 45.134.20.159:59621] [client 45.134.20.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Yamato/error.php"] [unique_id "aTjX-yXL_Qb0Ip3FW3nPmwAAAAk"]
[Wed Dec 10 10:16:28.998569 2025] [:error] [pid 11266:tid 11277] [client 45.134.20.170:44281] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/JMart/index.php"] [unique_id "aTjX_CXL_Qb0Ip3FW3nPnAAAAAc"]
[Wed Dec 10 10:16:30.709004 2025] [:error] [pid 21356:tid 21374] [client 45.134.20.172:37149] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez/index.php"] [unique_id "aTjX_qfG7wIA5S25Sld9lAAAAs8"]
[Wed Dec 10 10:16:32.417181 2025] [:error] [pid 11266:tid 11278] [client 45.134.20.148:47441] [client 45.134.20.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Cassiopeia/index.php"] [unique_id "aTjYACXL_Qb0Ip3FW3nPnwAAAAg"]
[Wed Dec 10 10:16:34.656754 2025] [:error] [pid 16596:tid 16619] [client 45.134.20.168:23537] [client 45.134.20.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez5/error.php"] [unique_id "aTjYAnBe21fHOHH2RQo_XwAAAZM"]
[Wed Dec 10 10:16:36.376956 2025] [:error] [pid 16566:tid 16575] [client 45.134.20.164:43517] [client 45.134.20.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Genius/index.php"] [unique_id "aTjYBCEgzB1153EFuAYCpAAAAUc"]
[Wed Dec 10 10:16:40.561005 2025] [:error] [pid 21356:tid 21364] [client 45.134.20.174:51801] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez5/index.php"] [unique_id "aTjYCKfG7wIA5S25Sld9mgAAAsU"]
[Wed Dec 10 10:16:42.271929 2025] [:error] [pid 16597:tid 16649] [client 45.134.20.173:22171] [client 45.134.20.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Raees/error.php"] [unique_id "aTjYCm4Hlu0QtpUGkRRq9wAAAdY"]
[Wed Dec 10 10:16:43.982334 2025] [:error] [pid 11354:tid 11356] [client 45.134.20.151:48265] [client 45.134.20.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/BeginDot/index.php"] [unique_id "aTjYC-2TFO6mVSqWP8RPQAAAAMA"]
[Wed Dec 10 10:16:45.701175 2025] [:error] [pid 21327:tid 21329] [client 45.134.20.172:48185] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/rhuk_solarflare_ii/error.php"] [unique_id "aTjYDduj_E2YnwjFG093OQAAAoA"]
[Wed Dec 10 10:16:48.454306 2025] [:error] [pid 21356:tid 21374] [client 45.134.20.151:25543] [client 45.134.20.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Beez2/error.php"] [unique_id "aTjYEKfG7wIA5S25Sld9ngAAAs8"]
[Wed Dec 10 10:16:50.178613 2025] [:error] [pid 21291:tid 21314] [client 45.134.20.156:44141] [client 45.134.20.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "aTjYEpreiUgLUUTTKJdlCgAAAlU"]
[Wed Dec 10 10:16:51.902358 2025] [:error] [pid 16566:tid 16591] [client 45.134.20.169:51633] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Jollyany/index.php"] [unique_id "aTjYEyEgzB1153EFuAYCqwAAAVc"]
[Wed Dec 10 10:16:53.616165 2025] [:error] [pid 21327:tid 21345] [client 45.134.20.158:48727] [client 45.134.20.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/Jollyany/error.php"] [unique_id "aTjYFduj_E2YnwjFG093QwAAApA"]
[Wed Dec 10 10:16:55.844771 2025] [:error] [pid 11268:tid 11342] [client 45.134.20.150:52365] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/ets_whatsapp/new.php"] [unique_id "aTjYF7bpLcj9WqyQndxH0AAAAJI"]
[Wed Dec 10 10:16:57.560257 2025] [:error] [pid 11268:tid 11334] [client 45.134.20.141:65273] [client 45.134.20.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aTjYGbbpLcj9WqyQndxH0gAAAIo"]
[Wed Dec 10 10:17:00.736825 2025] [:error] [pid 21356:tid 21367] [client 45.134.20.145:53821] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aTjYHKfG7wIA5S25Sld9qAAAAsg"]
[Wed Dec 10 10:17:02.590405 2025] [:error] [pid 21356:tid 21380] [client 45.134.20.153:64717] [client 45.134.20.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "aTjYHqfG7wIA5S25Sld9qgAAAtU"]
[Wed Dec 10 10:17:04.315089 2025] [:error] [pid 11354:tid 11362] [client 45.134.20.142:45951] [client 45.134.20.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod%20ariimageslidersa/mod%20ariimageslidersa.php"] [unique_id "aTjYIO2TFO6mVSqWP8RPQwAAAMU"]
[Wed Dec 10 10:17:06.029642 2025] [:error] [pid 11354:tid 11359] [client 45.134.20.145:59733] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "aTjYIu2TFO6mVSqWP8RPSAAAAMI"]
[Wed Dec 10 10:17:07.741623 2025] [:error] [pid 16596:tid 16616] [client 45.134.20.169:61913] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_ju_articleslider/tmpl/admin.php"] [unique_id "aTjYI3Be21fHOHH2RQo_bgAAAZA"]
[Wed Dec 10 10:17:09.443726 2025] [:error] [pid 16597:tid 16647] [client 45.134.20.163:53399] [client 45.134.20.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_rebug/library/index2.php"] [unique_id "aTjYJW4Hlu0QtpUGkRRrAgAAAdQ"]
[Wed Dec 10 10:17:11.152497 2025] [:error] [pid 11354:tid 11363] [client 45.134.20.169:45425] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_ariimageslidersa/mod_ariimageslidersa.php"] [unique_id "aTjYJ-2TFO6mVSqWP8RPSwAAAMY"]
[Wed Dec 10 10:17:13.268942 2025] [:error] [pid 21291:tid 21317] [client 45.134.20.144:24357] [client 45.134.20.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/modules/modules.php"] [unique_id "aTjYKZreiUgLUUTTKJdlFgAAAlg"]
[Wed Dec 10 10:17:14.989200 2025] [:error] [pid 21327:tid 21344] [client 45.134.20.172:23163] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "aTjYKtuj_E2YnwjFG093TQAAAo8"]
[Wed Dec 10 10:17:16.711604 2025] [:error] [pid 16597:tid 16645] [client 45.134.20.154:54455] [client 45.134.20.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/sendinblue/mini.php"] [unique_id "aTjYLG4Hlu0QtpUGkRRrBgAAAdI"]
[Wed Dec 10 10:17:18.429641 2025] [:error] [pid 21291:tid 21297] [client 45.134.20.165:58923] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vendor/htmlawed/htmlawed/gel4y.php"] [unique_id "aTjYLpreiUgLUUTTKJdlGAAAAkQ"]
[Wed Dec 10 10:17:20.159418 2025] [:error] [pid 11354:tid 11370] [client 45.134.20.167:23493] [client 45.134.20.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/joomla/index.php"] [unique_id "aTjYMO2TFO6mVSqWP8RPUwAAAM0"]
[Wed Dec 10 10:17:22.409162 2025] [:error] [pid 11266:tid 11279] [client 45.134.20.160:57875] [client 45.134.20.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vendor/composer/about.php"] [unique_id "aTjYMiXL_Qb0Ip3FW3nPwQAAAAk"]
[Wed Dec 10 10:17:24.125078 2025] [:error] [pid 16596:tid 16615] [client 45.134.20.167:47251] [client 45.134.20.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/components/com_newsfeeds/models/index.php"] [unique_id "aTjYNHBe21fHOHH2RQo_fgAAAY8"]
[Wed Dec 10 10:17:25.838866 2025] [:error] [pid 21356:tid 21375] [client 45.134.20.145:40923] [client 45.134.20.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vendor/composer/cache.php"] [unique_id "aTjYNafG7wIA5S25Sld9uQAAAtA"]
[Wed Dec 10 10:17:27.621715 2025] [:error] [pid 11268:tid 11333] [client 45.134.20.174:35301] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aTjYN7bpLcj9WqyQndxH6wAAAIk"]
[Wed Dec 10 10:17:29.341056 2025] [:error] [pid 11354:tid 11377] [client 45.134.20.165:47609] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/joomla/jmail.php"] [unique_id "aTjYOe2TFO6mVSqWP8RPZgAAANQ"]
[Wed Dec 10 10:17:31.474669 2025] [:error] [pid 21327:tid 21337] [client 45.134.20.149:52601] [client 45.134.20.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/joomla/css.php"] [unique_id "aTjYO9uj_E2YnwjFG093WwAAAog"]
[Wed Dec 10 10:17:33.198347 2025] [:error] [pid 16596:tid 16609] [client 45.134.20.168:47629] [client 45.134.20.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/components/com_jbcatalog/libraries/jsupload/server/php/files/up.php"] [unique_id "aTjYPXBe21fHOHH2RQo_iwAAAYk"]
[Wed Dec 10 10:17:34.920724 2025] [:error] [pid 16597:tid 16648] [client 45.134.20.165:27413] [client 45.134.20.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/index2.php"] [unique_id "aTjYPm4Hlu0QtpUGkRRrEgAAAdU"]
[Wed Dec 10 10:17:36.652784 2025] [:error] [pid 16597:tid 16628] [client 45.134.20.172:22773] [client 45.134.20.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/language/english.php"] [unique_id "aTjYQG4Hlu0QtpUGkRRrFAAAAcE"]
[Wed Dec 10 10:17:39.373067 2025] [:error] [pid 11354:tid 11373] [client 45.134.20.171:30021] [client 45.134.20.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aTjYQ-2TFO6mVSqWP8RPcgAAANA"]
[Wed Dec 10 10:17:41.539805 2025] [:error] [pid 11354:tid 11375] [client 45.134.20.152:51803] [client 45.134.20.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aTjYRe2TFO6mVSqWP8RPeAAAANI"]
[Wed Dec 10 10:17:43.263521 2025] [:error] [pid 21255:tid 21269] [client 45.134.20.150:61031] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aTjYR_Ow-vgCwe7hEWFSbgAAAgs"]
[Wed Dec 10 10:17:45.748303 2025] [:error] [pid 21291:tid 21306] [client 45.134.20.166:44285] [client 45.134.20.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aTjYSZreiUgLUUTTKJdlJwAAAk0"]
[Wed Dec 10 10:17:47.467873 2025] [:error] [pid 16596:tid 16619] [client 45.134.20.174:27813] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/log.php"] [unique_id "aTjYS3Be21fHOHH2RQo_lQAAAZM"]
[Wed Dec 10 10:17:49.190591 2025] [:error] [pid 16566:tid 16582] [client 45.134.20.169:51315] [client 45.134.20.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/include/student.php"] [unique_id "aTjYTSEgzB1153EFuAYC5wAAAU4"]
[Wed Dec 10 10:17:50.913738 2025] [:error] [pid 21327:tid 21345] [client 45.134.20.150:31477] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/cache.php"] [unique_id "aTjYTtuj_E2YnwjFG093YwAAApA"]
[Wed Dec 10 10:17:52.634707 2025] [:error] [pid 16597:tid 16645] [client 45.134.20.168:28369] [client 45.134.20.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/administrator/index.php"] [unique_id "aTjYUG4Hlu0QtpUGkRRrIgAAAdI"]
[Wed Dec 10 10:17:55.790568 2025] [:error] [pid 16566:tid 16584] [client 45.134.20.174:53767] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/controller/extension/extension/index.php"] [unique_id "aTjYUyEgzB1153EFuAYC-wAAAVA"]
[Wed Dec 10 10:17:57.513916 2025] [:error] [pid 21255:tid 21262] [client 45.134.20.167:28771] [client 45.134.20.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/local/index.php"] [unique_id "aTjYVfOw-vgCwe7hEWFSeQAAAgQ"]
[Wed Dec 10 10:17:59.304954 2025] [:error] [pid 21291:tid 21300] [client 45.134.20.174:57795] [client 45.134.20.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes/classic/x.php"] [unique_id "aTjYV5reiUgLUUTTKJdlMwAAAkc"]
[Wed Dec 10 10:18:01.020458 2025] [:error] [pid 16597:tid 16627] [client 45.134.20.171:40079] [client 45.134.20.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/adriv4.php"] [unique_id "aTjYWW4Hlu0QtpUGkRRrIwAAAcA"]
[Wed Dec 10 10:18:02.732546 2025] [:error] [pid 11354:tid 11358] [client 45.134.20.150:37933] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aTjYWu2TFO6mVSqWP8RPhwAAAME"]
[Wed Dec 10 10:18:04.501281 2025] [:error] [pid 11354:tid 11370] [client 45.134.20.150:34329] [client 45.134.20.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sites/default/files/index.php"] [unique_id "aTjYXO2TFO6mVSqWP8RPiQAAAM0"]
[Wed Dec 10 10:18:06.197094 2025] [:error] [pid 21255:tid 21279] [client 45.134.20.170:39317] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/local/moodle_webshell/index.php"] [unique_id "aTjYXvOw-vgCwe7hEWFSggAAAhU"]
[Wed Dec 10 10:18:07.916163 2025] [:error] [pid 21327:tid 21352] [client 45.134.20.159:49189] [client 45.134.20.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/wp-domain.php"] [unique_id "aTjYX9uj_E2YnwjFG093bQAAApc"]
[Wed Dec 10 10:18:09.642985 2025] [:error] [pid 21255:tid 21263] [client 45.134.20.170:39675] [client 45.134.20.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/setting-api.php"] [unique_id "aTjYYfOw-vgCwe7hEWFShAAAAgU"]
[Wed Dec 10 15:53:06.447323 2025] [autoindex:error] [pid 46868:tid 46882] [client 75.119.143.158:55182] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 10 19:17:13.329065 2025] [:error] [pid 37062:tid 37071] [client 34.42.210.56:57746] [client 34.42.210.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.210.56, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTlWuTB0I62HCw8Z5BRGJwAAAAc"]
[Wed Dec 10 19:17:18.793370 2025] [:error] [pid 37062:tid 37087] [client 34.42.210.56:57746] [client 34.42.210.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTlWvjB0I62HCw8Z5BRGLAAAABc"]
[Wed Dec 10 19:17:21.146983 2025] [:error] [pid 37062:tid 37080] [client 34.42.210.56:57746] [client 34.42.210.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.210.56, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTlWwTB0I62HCw8Z5BRGMAAAABA"]
[Wed Dec 10 19:18:50.198420 2025] [:error] [pid 36976:tid 37023] [client 188.166.50.18:51568] [client 188.166.50.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.50.18, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTlXGiSpHW5KVaY9tJmRTAAAANA"]
[Wed Dec 10 19:18:51.704177 2025] [:error] [pid 36976:tid 37009] [client 188.166.50.18:51568] [client 188.166.50.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.50.18, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTlXGySpHW5KVaY9tJmRTgAAAMI"]
[Wed Dec 10 21:38:42.782630 2025] [:error] [pid 36977:tid 37045] [client 35.237.226.140:57647] [client 35.237.226.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.226.140, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTl34sc-JLl-uoL-Au7LEwAAAEs"]
[Wed Dec 10 21:38:50.204862 2025] [:error] [pid 36977:tid 37040] [client 35.237.226.140:57647] [client 35.237.226.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTl36sc-JLl-uoL-Au7LHgAAAEY"]
[Wed Dec 10 21:38:52.404868 2025] [:error] [pid 36977:tid 37046] [client 35.237.226.140:57647] [client 35.237.226.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.226.140, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTl37Mc-JLl-uoL-Au7LIQAAAEw"]
[Thu Dec 11 01:03:01.233648 2025] [proxy_fcgi:error] [pid 10520:tid 10542] [client 103.4.122.14:33428] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Dec 11 01:24:31.083890 2025] [:error] [pid 10434:tid 10488] [client 45.128.199.28:41259] [client 45.128.199.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.28, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTmsz2bAnZFInxx5bO-uqwAAAFU"]
[Thu Dec 11 01:48:38.270025 2025] [:error] [pid 10434:tid 10479] [client 136.118.170.43:56431] [client 136.118.170.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.170.43, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmydmbAnZFInxx5bO-2_AAAAEw"]
[Thu Dec 11 01:48:38.685694 2025] [:error] [pid 10434:tid 10476] [client 193.189.100.197:58111] [client 193.189.100.197] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/backups.sql"] [unique_id "aTmydmbAnZFInxx5bO-2_QAAAEk"]
[Thu Dec 11 01:48:43.481496 2025] [:error] [pid 10434:tid 10469] [client 136.118.170.43:56431] [client 136.118.170.43] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTmye2bAnZFInxx5bO-3BQAAAEI"]
[Thu Dec 11 01:48:43.798133 2025] [:error] [pid 10434:tid 10484] [client 204.8.96.77:41892] [client 204.8.96.77] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/kifim.sql"] [unique_id "aTmye2bAnZFInxx5bO-3BwAAAFE"]
[Thu Dec 11 01:48:45.138442 2025] [:error] [pid 10434:tid 10489] [client 107.189.8.133:14916] [client 107.189.8.133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/ifim.sql"] [unique_id "aTmyfWbAnZFInxx5bO-3CAAAAFY"]
[Thu Dec 11 01:48:45.467757 2025] [:error] [pid 10434:tid 10473] [client 136.118.170.43:56431] [client 136.118.170.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.170.43, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmyfWbAnZFInxx5bO-3CgAAAEY"]
[Thu Dec 11 01:48:58.661042 2025] [:error] [pid 42065:tid 42071] [client 185.220.101.2:56794] [client 185.220.101.2] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/backup.sql"] [unique_id "aTmyivkj8kMSvqJobVUPIAAAAUQ"]
[Thu Dec 11 01:49:00.766634 2025] [:error] [pid 10435:tid 10511] [client 185.129.62.64:44668] [client 185.129.62.64] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/makifi.sql"] [unique_id "aTmyjI5HZq66Rpdj2aKFEAAAABE"]
[Thu Dec 11 01:49:01.581429 2025] [:error] [pid 10520:tid 10525] [client 81.19.141.199:57424] [client 81.19.141.199] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/.sql"] [unique_id "aTmyjUNrVZZksrD9M7EhPQAAAQM"]
[Thu Dec 11 01:49:02.437260 2025] [:error] [pid 10520:tid 10530] [client 109.70.100.5:25390] [client 109.70.100.5] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/m.sql"] [unique_id "aTmyjkNrVZZksrD9M7EhPwAAAQg"]
[Thu Dec 11 01:49:03.397883 2025] [:error] [pid 10433:tid 10455] [client 89.58.41.156:62206] [client 89.58.41.156] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/ma.sql"] [unique_id "aTmyj2fQ1q-Ic7huYoUA0gAAANI"]
[Thu Dec 11 01:52:12.455895 2025] [:error] [pid 10435:tid 10517] [client 136.118.164.101:55687] [client 136.118.164.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.164.101, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmzTI5HZq66Rpdj2aKF2wAAABc"]
[Thu Dec 11 01:52:19.031385 2025] [:error] [pid 10435:tid 10510] [client 136.118.164.101:55687] [client 136.118.164.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTmzU45HZq66Rpdj2aKF4AAAABA"]
[Thu Dec 11 01:52:20.972984 2025] [:error] [pid 10435:tid 10505] [client 136.118.164.101:55687] [client 136.118.164.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.164.101, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTmzVI5HZq66Rpdj2aKF4gAAAAs"]
[Thu Dec 11 05:53:42.216843 2025] [:error] [pid 57990:tid 58008] [client 216.24.219.206:59421] [client 216.24.219.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.206, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTnr5gqZT_dc36fQdXG7LQAAAA0"]
[Thu Dec 11 13:04:46.901436 2025] [autoindex:error] [pid 57992:tid 58067] [client 84.247.164.141:49567] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 11 17:46:56.272498 2025] [autoindex:error] [pid 57992:tid 58068] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:46:56.709040 2025] [autoindex:error] [pid 57992:tid 58069] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:46:57.158846 2025] [autoindex:error] [pid 57992:tid 58064] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:46:57.590909 2025] [autoindex:error] [pid 57992:tid 58050] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:01.712174 2025] [autoindex:error] [pid 57992:tid 58053] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:02.609222 2025] [autoindex:error] [pid 57992:tid 58070] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:03.053714 2025] [autoindex:error] [pid 57992:tid 58061] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:03.491910 2025] [autoindex:error] [pid 57992:tid 58068] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:03.924757 2025] [autoindex:error] [pid 57992:tid 58069] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:04.800813 2025] [autoindex:error] [pid 57992:tid 58065] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:07.267705 2025] [autoindex:error] [pid 57992:tid 58060] [client 185.192.71.81:25079] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:09.982414 2025] [autoindex:error] [pid 48261:tid 48270] [client 185.92.25.2:45693] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:10.868702 2025] [autoindex:error] [pid 48261:tid 48288] [client 185.92.25.2:45693] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:11.304849 2025] [autoindex:error] [pid 48261:tid 48279] [client 185.92.25.2:45693] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:13.558615 2025] [autoindex:error] [pid 35112:tid 35123] [client 91.230.225.55:34427] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:15.943434 2025] [autoindex:error] [pid 57992:tid 58060] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:20.379474 2025] [autoindex:error] [pid 57992:tid 58072] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:20.819754 2025] [autoindex:error] [pid 57992:tid 58049] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:21.256915 2025] [autoindex:error] [pid 57992:tid 58073] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:33.981736 2025] [autoindex:error] [pid 57992:tid 58055] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:36.461954 2025] [autoindex:error] [pid 57992:tid 58053] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:37.982417 2025] [autoindex:error] [pid 57992:tid 58052] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:39.327194 2025] [autoindex:error] [pid 57992:tid 58061] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:39.765728 2025] [autoindex:error] [pid 57992:tid 58063] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:47:40.212677 2025] [autoindex:error] [pid 57992:tid 58057] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:40.715232 2025] [autoindex:error] [pid 57992:tid 58061] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:41.201871 2025] [autoindex:error] [pid 57992:tid 58050] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:41.668976 2025] [autoindex:error] [pid 57992:tid 58055] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:42.160026 2025] [autoindex:error] [pid 57992:tid 58072] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:48.348420 2025] [autoindex:error] [pid 57992:tid 58067] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:50.747051 2025] [autoindex:error] [pid 57992:tid 58050] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:51.222723 2025] [autoindex:error] [pid 57992:tid 58060] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:51.660121 2025] [autoindex:error] [pid 57992:tid 58055] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:54.140008 2025] [autoindex:error] [pid 57992:tid 58056] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:54.582082 2025] [autoindex:error] [pid 57992:tid 58072] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:55.059401 2025] [autoindex:error] [pid 57992:tid 58073] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:48:55.555245 2025] [autoindex:error] [pid 57992:tid 58052] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:49:43.737085 2025] [autoindex:error] [pid 57992:tid 58058] [client 185.192.71.82:25111] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:06.674671 2025] [autoindex:error] [pid 57992:tid 58070] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:15.162845 2025] [autoindex:error] [pid 57992:tid 58056] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:15.598038 2025] [autoindex:error] [pid 57992:tid 58065] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:24.529498 2025] [autoindex:error] [pid 57992:tid 58072] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:24.961542 2025] [autoindex:error] [pid 57992:tid 58059] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:25.435622 2025] [autoindex:error] [pid 57992:tid 58049] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:25.869985 2025] [autoindex:error] [pid 57992:tid 58067] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:26.310442 2025] [autoindex:error] [pid 57992:tid 58065] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:26.744127 2025] [autoindex:error] [pid 57992:tid 58055] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:27.198850 2025] [autoindex:error] [pid 57992:tid 58059] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:50:27.675179 2025] [autoindex:error] [pid 57992:tid 58061] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:51:05.693067 2025] [autoindex:error] [pid 57992:tid 58059] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 17:51:10.343204 2025] [autoindex:error] [pid 57992:tid 58051] [client 91.230.225.246:22755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 18:42:54.387881 2025] [:error] [pid 58099:tid 58108] [client 144.48.38.146:52310] [client 144.48.38.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.38.146, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTqgLsKZVSF_bdPFqRj6yAAAAMc"]
[Thu Dec 11 18:43:01.566351 2025] [:error] [pid 57991:tid 58034] [client 144.48.38.146:52320] [client 144.48.38.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.38.146, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTqgNaPyGmNXA2ZsETaYrgAAAEw"]
[Thu Dec 11 18:43:12.206079 2025] [:error] [pid 57990:tid 58016] [client 144.48.38.146:52349] [client 144.48.38.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.48.38.146, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTqgQAqZT_dc36fQdXFsYgAAABU"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend
[Thu Dec 11 18:43:16.921968 2025] [autoindex:error] [pid 58099:tid 58114] [client 103.4.122.14:34128] AH01276: Cannot serve directory /home/makifimc/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 22:32:07.823646 2025] [:error] [pid 48261:tid 48280] [client 4.230.0.143:59752] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTrV5-yPI4WU-4JmiQPTmAAAAZA"]
[Thu Dec 11 22:32:08.879700 2025] [:error] [pid 27459:tid 27481] [client 4.230.0.143:9742] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTrV6FhPEXihPBKMpRN2xAAAARQ"]
[Thu Dec 11 22:32:10.188614 2025] [:error] [pid 48261:tid 48288] [client 4.230.0.143:58998] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTrV6uyPI4WU-4JmiQPTnQAAAZg"]
[Thu Dec 11 22:32:11.252316 2025] [:error] [pid 58814:tid 58817] [client 4.230.0.143:60111] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTrV69iz0l9AD_3pkMxaUQAAAcE"]
[Thu Dec 11 22:32:12.410694 2025] [:error] [pid 58814:tid 58831] [client 4.230.0.143:65271] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTrV7Niz0l9AD_3pkMxaVQAAAc8"]
[Thu Dec 11 22:32:13.564696 2025] [:error] [pid 58814:tid 58820] [client 4.230.0.143:60131] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTrV7diz0l9AD_3pkMxaWgAAAcQ"]
[Thu Dec 11 22:32:14.370933 2025] [:error] [pid 57990:tid 58002] [client 4.230.0.143:9786] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTrV7gqZT_dc36fQdXGVJQAAAAc"]
[Thu Dec 11 22:32:15.207496 2025] [:error] [pid 57991:tid 58034] [client 4.230.0.143:65274] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTrV76PyGmNXA2ZsETbJ2wAAAEw"]
[Thu Dec 11 22:32:15.795085 2025] [:error] [pid 24527:tid 24575] [client 4.230.0.143:57650] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aTrV719_glvtS5vXiTUkMAAAApM"]
[Thu Dec 11 22:32:16.355120 2025] [:error] [pid 27459:tid 27479] [client 4.230.0.143:65278] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aTrV8FhPEXihPBKMpRN2zQAAARI"]
[Thu Dec 11 22:32:16.702823 2025] [:error] [pid 57990:tid 58000] [client 4.230.0.143:58961] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aTrV8AqZT_dc36fQdXGVKQAAAAU"]
[Thu Dec 11 22:32:17.265130 2025] [:error] [pid 57991:tid 58024] [client 4.230.0.143:65252] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aTrV8aPyGmNXA2ZsETbJ3QAAAEI"]
[Thu Dec 11 22:32:17.943605 2025] [:error] [pid 57990:tid 58017] [client 4.230.0.143:9734] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTrV8QqZT_dc36fQdXGVLAAAABY"]
[Thu Dec 11 22:32:18.679444 2025] [:error] [pid 57990:tid 58012] [client 4.230.0.143:65236] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTrV8gqZT_dc36fQdXGVLQAAABE"]
[Thu Dec 11 22:32:19.569888 2025] [:error] [pid 57990:tid 58005] [client 4.230.0.143:60137] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTrV8wqZT_dc36fQdXGVLwAAAAo"]
[Thu Dec 11 22:32:20.696897 2025] [:error] [pid 57991:tid 58026] [client 4.230.0.143:10153] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTrV9KPyGmNXA2ZsETbJ5AAAAEQ"]
[Thu Dec 11 22:32:22.586759 2025] [:error] [pid 57991:tid 58029] [client 4.230.0.143:64808] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aTrV9qPyGmNXA2ZsETbJ6QAAAEc"]
[Thu Dec 11 22:32:23.278401 2025] [:error] [pid 24483:tid 24496] [client 4.230.0.143:65232] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aTrV91GHKh2d_uVkopR0OQAAAgs"]
[Thu Dec 11 22:32:24.611495 2025] [:error] [pid 48261:tid 48265] [client 4.230.0.143:9311] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aTrV-OyPI4WU-4JmiQPTpgAAAYE"]
[Thu Dec 11 22:32:26.710501 2025] [:error] [pid 48261:tid 48274] [client 4.230.0.143:64814] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aTrV-uyPI4WU-4JmiQPTqwAAAYo"]
[Thu Dec 11 22:32:28.174160 2025] [:error] [pid 58814:tid 58837] [client 4.230.0.143:58663] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/fm.php"] [unique_id "aTrV_Niz0l9AD_3pkMxaaAAAAdU"]
[Thu Dec 11 22:32:29.151627 2025] [:error] [pid 58814:tid 58836] [client 4.230.0.143:58677] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/fm.php"] [unique_id "aTrV_diz0l9AD_3pkMxabgAAAdQ"]
[Thu Dec 11 22:32:30.543433 2025] [:error] [pid 57991:tid 58041] [client 4.230.0.143:9342] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/fm.php"] [unique_id "aTrV_qPyGmNXA2ZsETbJ6gAAAFM"]
[Thu Dec 11 22:32:31.121638 2025] [:error] [pid 57992:tid 58054] [client 4.230.0.143:61195] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/fm.php"] [unique_id "aTrV_-Ueau0BMFF2vHnBigAAAIU"]
[Thu Dec 11 22:32:31.800359 2025] [:error] [pid 57990:tid 58010] [client 4.230.0.143:58654] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aTrV_wqZT_dc36fQdXGVMgAAAA8"]
[Thu Dec 11 22:32:32.563245 2025] [:error] [pid 58814:tid 58829] [client 4.230.0.143:64821] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aTrWANiz0l9AD_3pkMxadgAAAc0"]
[Thu Dec 11 22:32:33.045540 2025] [:error] [pid 35112:tid 35132] [client 4.230.0.143:9313] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aTrWAZ9ZpQ0WIeJhsJd7nQAAAVI"]
[Thu Dec 11 22:32:33.532422 2025] [:error] [pid 24483:tid 24487] [client 4.230.0.143:57999] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aTrWAVGHKh2d_uVkopR0RwAAAgI"]
[Thu Dec 11 22:32:34.445123 2025] [:error] [pid 57992:tid 58059] [client 4.230.0.143:65273] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aTrWAuUeau0BMFF2vHnBnAAAAIo"]
[Thu Dec 11 22:32:35.006370 2025] [:error] [pid 57990:tid 58016] [client 4.230.0.143:58039] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aTrWAwqZT_dc36fQdXGVMwAAABU"]
[Thu Dec 11 22:32:36.241247 2025] [:error] [pid 58814:tid 58823] [client 4.230.0.143:64768] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aTrWBNiz0l9AD_3pkMxagAAAAcc"]
[Thu Dec 11 22:32:37.464198 2025] [:error] [pid 27459:tid 27461] [client 4.230.0.143:58023] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aTrWBVhPEXihPBKMpRN22wAAAQA"]
[Thu Dec 11 22:32:38.138640 2025] [:error] [pid 27459:tid 27462] [client 4.230.0.143:61210] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php"] [unique_id "aTrWBlhPEXihPBKMpRN23QAAAQE"]
[Thu Dec 11 22:32:39.509722 2025] [:error] [pid 27459:tid 27478] [client 4.230.0.143:9328] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php"] [unique_id "aTrWB1hPEXihPBKMpRN24QAAARE"]
[Thu Dec 11 22:32:40.100425 2025] [:error] [pid 27459:tid 27484] [client 4.230.0.143:54854] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php"] [unique_id "aTrWCFhPEXihPBKMpRN25AAAARc"]
[Thu Dec 11 22:32:40.715925 2025] [:error] [pid 24483:tid 24509] [client 4.230.0.143:61612] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php"] [unique_id "aTrWCFGHKh2d_uVkopR0TwAAAhg"]
[Thu Dec 11 22:32:41.312327 2025] [:error] [pid 58814:tid 58823] [client 4.230.0.143:54851] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aTrWCdiz0l9AD_3pkMxaiwAAAcc"]
[Thu Dec 11 22:32:42.523969 2025] [:error] [pid 24527:tid 24567] [client 4.230.0.143:54873] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aTrWCl9_glvtS5vXiTUkPAAAAos"]
[Thu Dec 11 22:32:43.287435 2025] [:error] [pid 58814:tid 58817] [client 4.230.0.143:55627] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aTrWC9iz0l9AD_3pkMxakgAAAcE"]
[Thu Dec 11 22:32:43.886674 2025] [:error] [pid 57991:tid 58023] [client 4.230.0.143:65353] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aTrWC6PyGmNXA2ZsETbJ7gAAAEE"]
[Thu Dec 11 22:32:45.022631 2025] [:error] [pid 48261:tid 48282] [client 4.230.0.143:63079] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aTrWDeyPI4WU-4JmiQPTtwAAAZI"]
[Thu Dec 11 22:32:45.664754 2025] [:error] [pid 24483:tid 24505] [client 4.230.0.143:58323] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aTrWDVGHKh2d_uVkopR0UgAAAhQ"]
[Thu Dec 11 22:32:46.582150 2025] [:error] [pid 57992:tid 58069] [client 4.230.0.143:63081] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aTrWDuUeau0BMFF2vHnBqgAAAJQ"]
[Thu Dec 11 22:32:47.366380 2025] [:error] [pid 48261:tid 48269] [client 4.230.0.143:57942] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aTrWD-yPI4WU-4JmiQPTuAAAAYU"]
[Thu Dec 11 22:32:48.103340 2025] [:error] [pid 24527:tid 24566] [client 4.230.0.143:64728] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hoot.php"] [unique_id "aTrWEF9_glvtS5vXiTUkSgAAAoo"]
[Thu Dec 11 22:32:49.411508 2025] [:error] [pid 58814:tid 58833] [client 4.230.0.143:63047] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hoot.php"] [unique_id "aTrWEdiz0l9AD_3pkMxaugAAAdE"]
[Thu Dec 11 22:32:49.963665 2025] [:error] [pid 24527:tid 24565] [client 4.230.0.143:57953] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hoot.php"] [unique_id "aTrWEV9_glvtS5vXiTUkTAAAAok"]
[Thu Dec 11 22:32:50.475736 2025] [:error] [pid 57991:tid 58023] [client 4.230.0.143:57054] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hoot.php"] [unique_id "aTrWEqPyGmNXA2ZsETbKAgAAAEE"]
[Thu Dec 11 22:32:51.083421 2025] [:error] [pid 57992:tid 58071] [client 4.230.0.143:58319] [client 4.230.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aTrWE-Ueau0BMFF2vHnBrAAAAJY"]
[Thu Dec 11 22:32:51.691300 2025] [:error] [pid 48261:tid 48284] [client 4.230.0.143:56858] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aTrWE-yPI4WU-4JmiQPTuQAAAZQ"]
[Thu Dec 11 22:32:52.461274 2025] [:error] [pid 58099:tid 58125] [client 4.230.0.143:58337] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aTrWFMKZVSF_bdPFqRgthQAAANg"]
[Thu Dec 11 22:32:53.060349 2025] [:error] [pid 24527:tid 24562] [client 4.230.0.143:57024] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aTrWFV9_glvtS5vXiTUkUQAAAoY"]
[Thu Dec 11 22:32:53.929055 2025] [:error] [pid 24483:tid 24502] [client 4.230.0.143:62307] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aTrWFVGHKh2d_uVkopR0XQAAAhE"]
[Thu Dec 11 22:32:54.594375 2025] [:error] [pid 57991:tid 58044] [client 4.230.0.143:54854] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aTrWFqPyGmNXA2ZsETbKBAAAAFY"]
[Thu Dec 11 22:32:55.613705 2025] [:error] [pid 58814:tid 58823] [client 4.230.0.143:57029] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aTrWF9iz0l9AD_3pkMxavQAAAcc"]
[Thu Dec 11 22:32:56.349042 2025] [:error] [pid 24527:tid 24578] [client 4.230.0.143:9461] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aTrWGF9_glvtS5vXiTUkUwAAApY"]
[Thu Dec 11 22:32:57.352052 2025] [:error] [pid 58814:tid 58818] [client 4.230.0.143:57065] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aTrWGdiz0l9AD_3pkMxavgAAAcI"]
[Thu Dec 11 22:32:59.539837 2025] [:error] [pid 57992:tid 58053] [client 4.230.0.143:61150] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "aTrWG-Ueau0BMFF2vHnBsgAAAIQ"]
[Thu Dec 11 22:33:01.166348 2025] [:error] [pid 24483:tid 24505] [client 4.230.0.143:9819] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "aTrWHVGHKh2d_uVkopR0YwAAAhQ"]
[Thu Dec 11 22:33:03.873361 2025] [:error] [pid 58814:tid 58819] [client 4.230.0.143:9828] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "aTrWH9iz0l9AD_3pkMxawQAAAcM"]
[Thu Dec 11 22:33:04.933472 2025] [:error] [pid 24527:tid 24568] [client 4.230.0.143:10015] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "aTrWIF9_glvtS5vXiTUkXgAAAow"]
[Thu Dec 11 22:33:52.188920 2025] [:error] [pid 24527:tid 24572] [client 4.230.0.143:9543] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aTrWUF9_glvtS5vXiTUklAAAApA"]
[Thu Dec 11 22:33:53.611746 2025] [:error] [pid 58814:tid 58825] [client 4.230.0.143:10045] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aTrWUdiz0l9AD_3pkMxbBwAAAck"]
[Thu Dec 11 22:33:54.134153 2025] [:error] [pid 57990:tid 58016] [client 4.230.0.143:60416] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aTrWUgqZT_dc36fQdXGVYAAAABU"]
[Thu Dec 11 22:33:55.431674 2025] [:error] [pid 24527:tid 24560] [client 4.230.0.143:10041] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aTrWU19_glvtS5vXiTUklwAAAoQ"]
[Thu Dec 11 22:33:57.580173 2025] [:error] [pid 57990:tid 58017] [client 4.230.0.143:10020] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aTrWVQqZT_dc36fQdXGVYwAAABY"]
[Thu Dec 11 22:33:58.859777 2025] [:error] [pid 24527:tid 24559] [client 4.230.0.143:59039] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aTrWVl9_glvtS5vXiTUknwAAAoM"]
[Thu Dec 11 22:33:59.800314 2025] [:error] [pid 58099:tid 58103] [client 4.230.0.143:59025] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aTrWV8KZVSF_bdPFqRgtvQAAAMI"]
[Thu Dec 11 22:34:01.313504 2025] [:error] [pid 57992:tid 58069] [client 4.230.0.143:9997] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aTrWWeUeau0BMFF2vHnB2gAAAJQ"]
[Thu Dec 11 22:34:03.001247 2025] [:error] [pid 58814:tid 58816] [client 4.230.0.143:64464] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aTrWW9iz0l9AD_3pkMxbDwAAAcA"]
[Thu Dec 11 22:34:03.769650 2025] [:error] [pid 48261:tid 48274] [client 4.230.0.143:59026] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aTrWW-yPI4WU-4JmiQPT8wAAAYo"]
[Thu Dec 11 22:34:04.454742 2025] [:error] [pid 27459:tid 27462] [client 4.230.0.143:9568] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aTrWXFhPEXihPBKMpRN3QgAAAQE"]
[Thu Dec 11 22:34:06.435581 2025] [:error] [pid 58099:tid 58122] [client 4.230.0.143:61176] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aTrWXsKZVSF_bdPFqRgtxgAAANU"]
[Thu Dec 11 22:34:07.391005 2025] [:error] [pid 24527:tid 24572] [client 4.230.0.143:9815] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTrWX19_glvtS5vXiTUkuwAAApA"]
[Thu Dec 11 22:34:08.487337 2025] [:error] [pid 27459:tid 27464] [client 4.230.0.143:61175] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTrWYFhPEXihPBKMpRN3UQAAAQM"]
[Thu Dec 11 22:34:09.929451 2025] [:error] [pid 57992:tid 58050] [client 4.230.0.143:60958] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTrWYeUeau0BMFF2vHnB2wAAAIE"]
[Thu Dec 11 22:34:11.780232 2025] [:error] [pid 24527:tid 24560] [client 4.230.0.143:9546] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTrWY19_glvtS5vXiTUkygAAAoQ"]
[Thu Dec 11 22:34:12.910714 2025] [:error] [pid 58099:tid 58122] [client 4.230.0.143:59060] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "aTrWZMKZVSF_bdPFqRgt1wAAANU"]
[Thu Dec 11 22:34:14.248798 2025] [:error] [pid 58099:tid 58101] [client 4.230.0.143:54028] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "aTrWZsKZVSF_bdPFqRgt2gAAAMA"]
[Thu Dec 11 22:34:16.008183 2025] [:error] [pid 24527:tid 24578] [client 4.230.0.143:9827] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "aTrWaF9_glvtS5vXiTUk0AAAApY"]
[Thu Dec 11 22:34:17.873403 2025] [:error] [pid 48261:tid 48280] [client 4.230.0.143:9457] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "aTrWaeyPI4WU-4JmiQPUEgAAAZA"]
[Thu Dec 11 22:34:18.906749 2025] [:error] [pid 57992:tid 58067] [client 4.230.0.143:63477] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aTrWauUeau0BMFF2vHnB4AAAAJI"]
[Thu Dec 11 22:34:20.729950 2025] [:error] [pid 57990:tid 58014] [client 4.230.0.143:57935] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aTrWbAqZT_dc36fQdXGVbwAAABM"]
[Thu Dec 11 22:34:24.085347 2025] [:error] [pid 24483:tid 24495] [client 4.230.0.143:56884] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aTrWcFGHKh2d_uVkopR0lQAAAgo"]
[Thu Dec 11 22:34:24.847049 2025] [:error] [pid 57992:tid 58049] [client 4.230.0.143:64737] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aTrWcOUeau0BMFF2vHnB6QAAAIA"]
[Thu Dec 11 22:34:25.566915 2025] [:error] [pid 24483:tid 24490] [client 4.230.0.143:54948] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "aTrWcVGHKh2d_uVkopR0mAAAAgU"]
[Thu Dec 11 22:34:26.798699 2025] [:error] [pid 35112:tid 35121] [client 4.230.0.143:55629] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "aTrWcp9ZpQ0WIeJhsJd8BgAAAUc"]
[Thu Dec 11 22:34:27.758996 2025] [:error] [pid 24527:tid 24569] [client 4.230.0.143:61191] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "aTrWc19_glvtS5vXiTUk2AAAAo0"]
[Thu Dec 11 22:34:29.491054 2025] [:error] [pid 57991:tid 58025] [client 4.230.0.143:55248] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "aTrWdaPyGmNXA2ZsETbKXwAAAEM"]
[Thu Dec 11 22:34:30.732979 2025] [:error] [pid 57990:tid 58017] [client 4.230.0.143:58946] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTrWdgqZT_dc36fQdXGVewAAABY"]
[Thu Dec 11 22:34:31.697290 2025] [:error] [pid 58814:tid 58831] [client 4.230.0.143:60378] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTrWd9iz0l9AD_3pkMxbRwAAAc8"]
[Thu Dec 11 22:34:32.885749 2025] [:error] [pid 58814:tid 58838] [client 4.230.0.143:10101] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTrWeNiz0l9AD_3pkMxbSQAAAdY"]
[Thu Dec 11 22:34:33.583024 2025] [:error] [pid 35112:tid 35136] [client 4.230.0.143:56052] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTrWeZ9ZpQ0WIeJhsJd8DAAAAVY"]
[Thu Dec 11 22:34:34.459605 2025] [:error] [pid 27459:tid 27485] [client 4.230.0.143:56018] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aTrWelhPEXihPBKMpRN3cgAAARg"]
[Thu Dec 11 22:34:34.983930 2025] [:error] [pid 57990:tid 58009] [client 4.230.0.143:58370] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aTrWegqZT_dc36fQdXGVfQAAAA4"]
[Thu Dec 11 22:34:36.364795 2025] [:error] [pid 48261:tid 48288] [client 4.230.0.143:9667] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aTrWfOyPI4WU-4JmiQPUGwAAAZg"]
[Thu Dec 11 22:34:37.721725 2025] [:error] [pid 24483:tid 24509] [client 4.230.0.143:10053] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aTrWfVGHKh2d_uVkopR0ngAAAhg"]
[Thu Dec 11 22:34:39.057681 2025] [:error] [pid 24483:tid 24494] [client 4.230.0.143:10099] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aTrWf1GHKh2d_uVkopR0oQAAAgk"]
[Thu Dec 11 22:34:42.634721 2025] [:error] [pid 24527:tid 24573] [client 4.230.0.143:15605] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aTrWgl9_glvtS5vXiTUk7gAAApE"]
[Thu Dec 11 22:34:44.740174 2025] [:error] [pid 58814:tid 58825] [client 4.230.0.143:60358] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aTrWhNiz0l9AD_3pkMxbYQAAAck"]
[Thu Dec 11 22:34:45.499638 2025] [:error] [pid 58814:tid 58830] [client 4.230.0.143:60384] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aTrWhdiz0l9AD_3pkMxbZAAAAc4"]
[Thu Dec 11 22:34:46.382632 2025] [:error] [pid 24483:tid 24505] [client 4.230.0.143:60376] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aTrWhlGHKh2d_uVkopR0pgAAAhQ"]
[Thu Dec 11 22:34:47.821616 2025] [:error] [pid 58814:tid 58828] [client 4.230.0.143:60389] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aTrWh9iz0l9AD_3pkMxbZwAAAcw"]
[Thu Dec 11 22:34:48.551441 2025] [:error] [pid 24483:tid 24498] [client 4.230.0.143:58423] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aTrWiFGHKh2d_uVkopR0qQAAAg0"]
[Thu Dec 11 22:34:49.632399 2025] [:error] [pid 35112:tid 35129] [client 4.230.0.143:9352] [client 4.230.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aTrWiZ9ZpQ0WIeJhsJd8EQAAAU8"]
[Fri Dec 12 08:37:08.987260 2025] [:error] [pid 27950:tid 27976] [client 143.44.165.232:18875] [client 143.44.165.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.232, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTtjtIVLRvkrdsSc1F3twwAAAVg"], referer: https://makifim.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page
[Fri Dec 12 08:37:11.913434 2025] [:error] [pid 27950:tid 27963] [client 143.44.165.232:18875] [client 143.44.165.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.232, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTtjt4VLRvkrdsSc1F3txQAAAUs"], referer: https://makifim.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page
[Fri Dec 12 10:27:58.475802 2025] [:error] [pid 26521:tid 26600] [client 45.128.199.252:34445] [client 45.128.199.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.252, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTt9rpdhcAPU617AKTC0dwAAAJU"]
[Fri Dec 12 19:32:51.537232 2025] [:error] [pid 26520:tid 26567] [client 57.128.243.0:38744] [client 57.128.243.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/robots.txt"] [unique_id "aTv9Y0G_frlY5vNXu_DrDgAAAE8"]
[Fri Dec 12 20:52:15.424149 2025] [:error] [pid 26607:tid 26628] [client 48.210.64.188:15979] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aTwP_8b_b0tOEWTL2KmanAAAANM"]
[Fri Dec 12 20:52:16.275571 2025] [:error] [pid 26520:tid 26561] [client 48.210.64.188:15956] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aTwQAEG_frlY5vNXu_D5HQAAAEk"]
[Fri Dec 12 20:52:17.158839 2025] [:error] [pid 26520:tid 26553] [client 48.210.64.188:15943] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aTwQAUG_frlY5vNXu_D5IgAAAEE"]
[Fri Dec 12 20:52:18.336400 2025] [:error] [pid 26519:tid 26533] [client 48.210.64.188:15994] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aTwQAs8TRgSGOeWqEhfx9AAAAAo"]
[Fri Dec 12 20:52:18.912171 2025] [:error] [pid 27950:tid 27967] [client 48.210.64.188:15880] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTwQAoVLRvkrdsSc1F2cawAAAU8"]
[Fri Dec 12 20:52:19.359630 2025] [:error] [pid 27950:tid 27973] [client 48.210.64.188:15879] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTwQA4VLRvkrdsSc1F2cbAAAAVU"]
[Fri Dec 12 20:52:19.701988 2025] [:error] [pid 26521:tid 26589] [client 48.210.64.188:15964] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTwQA5dhcAPU617AKTB7XQAAAIo"]
[Fri Dec 12 20:52:19.972427 2025] [:error] [pid 26521:tid 26597] [client 48.210.64.188:15873] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTwQA5dhcAPU617AKTB7XwAAAJI"]
[Fri Dec 12 20:52:20.487132 2025] [:error] [pid 26519:tid 26541] [client 48.210.64.188:15980] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aTwQBM8TRgSGOeWqEhfx9wAAABI"]
[Fri Dec 12 20:52:21.039660 2025] [:error] [pid 55760:tid 55769] [client 48.210.64.188:15974] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aTwQBVObDQlftFDyGawONwAAAYc"]
[Fri Dec 12 20:52:21.581852 2025] [:error] [pid 26520:tid 26564] [client 48.210.64.188:15990] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aTwQBUG_frlY5vNXu_D5JgAAAEw"]
[Fri Dec 12 20:52:22.421912 2025] [:error] [pid 27950:tid 27952] [client 48.210.64.188:15992] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aTwQBoVLRvkrdsSc1F2ccQAAAUA"]
[Fri Dec 12 20:52:23.279833 2025] [:error] [pid 60649:tid 60659] [client 48.210.64.188:15981] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aTwQB1OcUGKU3sgfHP_3ggAAAQc"]
[Fri Dec 12 20:52:23.917327 2025] [:error] [pid 26519:tid 26525] [client 48.210.64.188:15963] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aTwQB88TRgSGOeWqEhfx-QAAAAI"]
[Fri Dec 12 20:52:24.929289 2025] [:error] [pid 55760:tid 55765] [client 48.210.64.188:15984] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aTwQCFObDQlftFDyGawOOAAAAYM"]
[Fri Dec 12 20:52:25.482837 2025] [:error] [pid 55760:tid 55779] [client 48.210.64.188:15972] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aTwQCVObDQlftFDyGawOOgAAAZE"]
[Fri Dec 12 20:52:25.886872 2025] [:error] [pid 26607:tid 26614] [client 48.210.64.188:15998] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aTwQCcb_b0tOEWTL2KmaoAAAAMU"]
[Fri Dec 12 20:52:26.431904 2025] [:error] [pid 26521:tid 26580] [client 48.210.64.188:15989] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aTwQCpdhcAPU617AKTB7YwAAAIE"]
[Fri Dec 12 20:52:26.968840 2025] [:error] [pid 27950:tid 27959] [client 48.210.64.188:15874] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aTwQCoVLRvkrdsSc1F2cdwAAAUc"]
[Fri Dec 12 20:52:27.537702 2025] [:error] [pid 55760:tid 55774] [client 48.210.64.188:15962] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aTwQC1ObDQlftFDyGawOOwAAAYw"]
[Fri Dec 12 20:52:28.149576 2025] [:error] [pid 26521:tid 26594] [client 48.210.64.188:15877] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aTwQDJdhcAPU617AKTB7ZAAAAI8"]
[Fri Dec 12 20:52:29.097576 2025] [:error] [pid 26521:tid 26593] [client 48.210.64.188:15882] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aTwQDZdhcAPU617AKTB7ZQAAAI4"]
[Fri Dec 12 20:52:29.686929 2025] [:error] [pid 26521:tid 26601] [client 48.210.64.188:15999] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aTwQDZdhcAPU617AKTB7ZgAAAJY"]
[Fri Dec 12 20:52:30.657082 2025] [:error] [pid 26521:tid 26590] [client 48.210.64.188:15885] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aTwQDpdhcAPU617AKTB7aAAAAIs"]
[Fri Dec 12 20:52:31.145895 2025] [:error] [pid 26521:tid 26581] [client 48.210.64.188:15968] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aTwQD5dhcAPU617AKTB7aQAAAII"]
[Fri Dec 12 20:52:31.465563 2025] [:error] [pid 55760:tid 55772] [client 48.210.64.188:15881] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aTwQD1ObDQlftFDyGawOPgAAAYo"]
[Fri Dec 12 20:52:31.778595 2025] [:error] [pid 26521:tid 26587] [client 48.210.64.188:15890] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aTwQD5dhcAPU617AKTB7agAAAIg"]
[Fri Dec 12 20:52:32.232746 2025] [:error] [pid 27950:tid 27953] [client 48.210.64.188:15961] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aTwQEIVLRvkrdsSc1F2ceQAAAUE"]
[Fri Dec 12 20:52:32.918041 2025] [:error] [pid 27950:tid 27952] [client 48.210.64.188:15951] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aTwQEIVLRvkrdsSc1F2cegAAAUA"]
[Fri Dec 12 20:52:33.359126 2025] [:error] [pid 55760:tid 55767] [client 48.210.64.188:15903] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aTwQEVObDQlftFDyGawOQgAAAYU"]
[Fri Dec 12 20:52:33.795422 2025] [:error] [pid 60649:tid 60674] [client 48.210.64.188:15897] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aTwQEVOcUGKU3sgfHP_3iAAAARY"]
[Fri Dec 12 20:52:34.270671 2025] [:error] [pid 26521:tid 26583] [client 48.210.64.188:15931] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aTwQEpdhcAPU617AKTB7awAAAIQ"]
[Fri Dec 12 20:52:34.923059 2025] [:error] [pid 26521:tid 26599] [client 48.210.64.188:15902] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aTwQEpdhcAPU617AKTB7bAAAAJQ"]
[Fri Dec 12 20:52:35.736527 2025] [:error] [pid 26521:tid 26579] [client 48.210.64.188:15941] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aTwQE5dhcAPU617AKTB7bQAAAIA"]
[Fri Dec 12 20:52:36.407273 2025] [:error] [pid 26520:tid 26566] [client 48.210.64.188:15966] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aTwQFEG_frlY5vNXu_D5KgAAAE4"]
[Fri Dec 12 20:52:36.840126 2025] [:error] [pid 26519:tid 26546] [client 48.210.64.188:15878] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aTwQFM8TRgSGOeWqEhfx_gAAABc"]
[Fri Dec 12 20:52:37.168639 2025] [:error] [pid 26519:tid 26533] [client 48.210.64.188:15958] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aTwQFc8TRgSGOeWqEhfx_wAAAAo"]
[Fri Dec 12 20:52:38.528022 2025] [:error] [pid 26521:tid 26597] [client 48.210.64.188:15986] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aTwQFpdhcAPU617AKTB7cgAAAJI"]
[Fri Dec 12 20:52:38.967915 2025] [:error] [pid 26519:tid 26532] [client 48.210.64.188:15940] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aTwQFs8TRgSGOeWqEhfyAwAAAAk"]
[Fri Dec 12 20:52:39.400101 2025] [:error] [pid 27950:tid 27966] [client 48.210.64.188:15915] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aTwQF4VLRvkrdsSc1F2cewAAAU4"]
[Fri Dec 12 20:52:39.847537 2025] [:error] [pid 26521:tid 26584] [client 48.210.64.188:15976] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTwQF5dhcAPU617AKTB7dQAAAIU"]
[Fri Dec 12 20:52:40.460945 2025] [:error] [pid 27950:tid 27968] [client 48.210.64.188:15876] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTwQGIVLRvkrdsSc1F2cfAAAAVA"]
[Fri Dec 12 20:52:40.960447 2025] [:error] [pid 26521:tid 26580] [client 48.210.64.188:15993] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTwQGJdhcAPU617AKTB7dwAAAIE"]
[Fri Dec 12 20:52:41.446760 2025] [:error] [pid 26521:tid 26593] [client 48.210.64.188:15996] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aTwQGZdhcAPU617AKTB7eAAAAI4"]
[Fri Dec 12 20:52:41.889647 2025] [:error] [pid 26521:tid 26601] [client 48.210.64.188:15895] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aTwQGZdhcAPU617AKTB7egAAAJY"]
[Fri Dec 12 20:52:42.171072 2025] [:error] [pid 26519:tid 26541] [client 48.210.64.188:7116] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aTwQGs8TRgSGOeWqEhfyBQAAABI"]
[Fri Dec 12 20:52:42.461926 2025] [:error] [pid 26519:tid 26545] [client 48.210.64.188:15946] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aTwQGs8TRgSGOeWqEhfyBgAAABY"]
[Fri Dec 12 20:52:43.454232 2025] [:error] [pid 26519:tid 26525] [client 48.210.64.188:15899] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aTwQG88TRgSGOeWqEhfyBwAAAAI"]
[Fri Dec 12 20:52:43.936710 2025] [:error] [pid 26519:tid 26544] [client 48.210.64.188:15949] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aTwQG88TRgSGOeWqEhfyCAAAABU"]
[Fri Dec 12 20:52:44.768535 2025] [:error] [pid 26520:tid 26560] [client 48.210.64.188:7112] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aTwQHEG_frlY5vNXu_D5KwAAAEg"]
[Fri Dec 12 20:52:45.306271 2025] [:error] [pid 26521:tid 26585] [client 48.210.64.188:15945] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aTwQHZdhcAPU617AKTB7fAAAAIY"]
[Fri Dec 12 20:52:45.874875 2025] [:error] [pid 60649:tid 60667] [client 48.210.64.188:15935] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aTwQHVOcUGKU3sgfHP_3igAAAQ8"]
[Fri Dec 12 20:52:46.626430 2025] [:error] [pid 26521:tid 26579] [client 48.210.64.188:15898] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aTwQHpdhcAPU617AKTB7fwAAAIA"]
[Fri Dec 12 20:52:46.967766 2025] [:error] [pid 26521:tid 26598] [client 48.210.64.188:15947] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aTwQHpdhcAPU617AKTB7gQAAAJM"]
[Fri Dec 12 20:52:47.382298 2025] [:error] [pid 26521:tid 26592] [client 48.210.64.188:7113] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aTwQH5dhcAPU617AKTB7gwAAAI0"]
[Fri Dec 12 20:52:47.863132 2025] [:error] [pid 26607:tid 26626] [client 48.210.64.188:7120] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aTwQH8b_b0tOEWTL2KmapQAAANE"]
[Fri Dec 12 20:52:48.236821 2025] [:error] [pid 27950:tid 27975] [client 48.210.64.188:15969] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aTwQIIVLRvkrdsSc1F2cfQAAAVc"]
[Fri Dec 12 20:52:48.520217 2025] [:error] [pid 26607:tid 26616] [client 48.210.64.188:15910] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aTwQIMb_b0tOEWTL2KmapgAAAMc"]
[Fri Dec 12 20:52:49.319453 2025] [:error] [pid 26519:tid 26539] [client 48.210.64.188:15937] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aTwQIc8TRgSGOeWqEhfyCgAAABA"]
[Fri Dec 12 20:52:50.355930 2025] [:error] [pid 26521:tid 26594] [client 48.210.64.188:15875] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aTwQIpdhcAPU617AKTB7iwAAAI8"]
[Fri Dec 12 20:52:51.128210 2025] [:error] [pid 26521:tid 26599] [client 48.210.64.188:7109] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aTwQI5dhcAPU617AKTB7kAAAAJQ"]
[Fri Dec 12 20:52:51.629880 2025] [:error] [pid 26521:tid 26597] [client 48.210.64.188:15908] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aTwQI5dhcAPU617AKTB7kgAAAJI"]
[Fri Dec 12 20:52:52.274041 2025] [:error] [pid 55760:tid 55762] [client 48.210.64.188:15896] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aTwQJFObDQlftFDyGawOSgAAAYA"]
[Fri Dec 12 20:52:52.874062 2025] [:error] [pid 26607:tid 26625] [client 48.210.64.188:15959] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aTwQJMb_b0tOEWTL2KmapwAAANA"]
[Fri Dec 12 20:52:53.384964 2025] [:error] [pid 27950:tid 27972] [client 48.210.64.188:15952] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aTwQJYVLRvkrdsSc1F2cgAAAAVQ"]
[Fri Dec 12 20:52:53.674830 2025] [:error] [pid 26607:tid 26613] [client 48.210.64.188:7153] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aTwQJcb_b0tOEWTL2KmaqAAAAMQ"]
[Fri Dec 12 20:52:56.014525 2025] [:error] [pid 26520:tid 26564] [client 48.210.64.188:7127] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aTwQKEG_frlY5vNXu_D5LgAAAEw"]
[Fri Dec 12 20:52:56.442638 2025] [:error] [pid 27950:tid 27959] [client 48.210.64.188:7157] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aTwQKIVLRvkrdsSc1F2cgQAAAUc"]
[Fri Dec 12 20:52:56.854113 2025] [:error] [pid 55760:tid 55772] [client 48.210.64.188:7158] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTwQKFObDQlftFDyGawOSwAAAYo"]
[Fri Dec 12 20:52:57.518444 2025] [:error] [pid 27950:tid 27962] [client 48.210.64.188:15991] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTwQKYVLRvkrdsSc1F2cggAAAUo"]
[Fri Dec 12 20:52:58.170721 2025] [:error] [pid 26607:tid 26611] [client 48.210.64.188:15954] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTwQKsb_b0tOEWTL2KmarAAAAMI"]
[Fri Dec 12 20:52:58.507085 2025] [:error] [pid 60649:tid 60659] [client 48.210.64.188:15883] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTwQKlOcUGKU3sgfHP_3kAAAAQc"]
[Fri Dec 12 20:52:59.739598 2025] [:error] [pid 60649:tid 60668] [client 48.210.64.188:15957] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aTwQK1OcUGKU3sgfHP_3kwAAARA"]
[Fri Dec 12 20:53:00.273498 2025] [:error] [pid 27950:tid 27958] [client 48.210.64.188:15965] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aTwQLIVLRvkrdsSc1F2chQAAAUY"]
[Fri Dec 12 20:53:00.557908 2025] [:error] [pid 55760:tid 55767] [client 48.210.64.188:15944] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aTwQLFObDQlftFDyGawOTQAAAYU"]
[Fri Dec 12 20:53:01.625141 2025] [:error] [pid 55760:tid 55780] [client 48.210.64.188:15887] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aTwQLVObDQlftFDyGawOTwAAAZI"]
[Fri Dec 12 20:53:02.332886 2025] [:error] [pid 26519:tid 26527] [client 48.210.64.188:15901] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTwQLs8TRgSGOeWqEhfyDgAAAAQ"]
[Fri Dec 12 20:53:03.972126 2025] [:error] [pid 60649:tid 60670] [client 48.210.64.188:15922] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTwQL1OcUGKU3sgfHP_3mAAAARI"]
[Fri Dec 12 20:53:04.420957 2025] [:error] [pid 26519:tid 26524] [client 48.210.64.188:15972] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTwQMM8TRgSGOeWqEhfyEAAAAAE"]
[Fri Dec 12 20:53:04.995762 2025] [:error] [pid 60649:tid 60660] [client 48.210.64.188:15891] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTwQMFOcUGKU3sgfHP_3mQAAAQg"]
[Fri Dec 12 20:53:05.446402 2025] [:error] [pid 60649:tid 60658] [client 48.210.64.188:15923] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTwQMVOcUGKU3sgfHP_3mgAAAQY"]
[Fri Dec 12 20:53:05.823374 2025] [:error] [pid 26519:tid 26536] [client 48.210.64.188:15892] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTwQMc8TRgSGOeWqEhfyEQAAAA0"]
[Fri Dec 12 20:53:06.303311 2025] [:error] [pid 55760:tid 55773] [client 48.210.64.188:15893] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTwQMlObDQlftFDyGawOUQAAAYs"]
[Fri Dec 12 20:53:06.672266 2025] [:error] [pid 27950:tid 27966] [client 48.210.64.188:15982] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTwQMoVLRvkrdsSc1F2ciQAAAU4"]
[Fri Dec 12 20:53:07.119913 2025] [:error] [pid 26519:tid 26541] [client 48.210.64.188:15948] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aTwQM88TRgSGOeWqEhfyEwAAABI"]
[Fri Dec 12 20:53:07.668508 2025] [:error] [pid 27950:tid 27968] [client 48.210.64.188:15917] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aTwQM4VLRvkrdsSc1F2cigAAAVA"]
[Fri Dec 12 20:53:08.041651 2025] [:error] [pid 26520:tid 26559] [client 48.210.64.188:15955] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aTwQNEG_frlY5vNXu_D5MQAAAEc"]
[Fri Dec 12 20:53:08.536704 2025] [:error] [pid 26519:tid 26544] [client 48.210.64.188:15977] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aTwQNM8TRgSGOeWqEhfyFQAAABU"]
[Fri Dec 12 20:53:08.882023 2025] [:error] [pid 27950:tid 27974] [client 48.210.64.188:7104] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aTwQNIVLRvkrdsSc1F2cjAAAAVY"]
[Fri Dec 12 20:53:09.326694 2025] [:error] [pid 27950:tid 27969] [client 48.210.64.188:7162] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aTwQNYVLRvkrdsSc1F2cjQAAAVE"]
[Fri Dec 12 20:53:09.571757 2025] [:error] [pid 60649:tid 60671] [client 48.210.64.188:15929] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aTwQNVOcUGKU3sgfHP_3nQAAARM"]
[Fri Dec 12 20:53:09.991351 2025] [:error] [pid 26519:tid 26539] [client 48.210.64.188:15970] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aTwQNc8TRgSGOeWqEhfyFgAAABA"]
[Fri Dec 12 20:53:10.416865 2025] [:error] [pid 55760:tid 55783] [client 48.210.64.188:15933] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTwQNlObDQlftFDyGawOUwAAAZU"]
[Fri Dec 12 20:53:11.191344 2025] [:error] [pid 26520:tid 26569] [client 48.210.64.188:15872] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTwQN0G_frlY5vNXu_D5MwAAAFE"]
[Fri Dec 12 20:53:11.813966 2025] [:error] [pid 26520:tid 26558] [client 48.210.64.188:15960] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTwQN0G_frlY5vNXu_D5NAAAAEY"]
[Fri Dec 12 20:53:12.156626 2025] [:error] [pid 26519:tid 26535] [client 48.210.64.188:7068] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aTwQOM8TRgSGOeWqEhfyFwAAAAw"]
[Fri Dec 12 20:53:12.512949 2025] [:error] [pid 55760:tid 55769] [client 48.210.64.188:7125] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTwQOFObDQlftFDyGawOVAAAAYc"]
[Fri Dec 12 20:53:12.796136 2025] [:error] [pid 26519:tid 26531] [client 48.210.64.188:15894] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTwQOM8TRgSGOeWqEhfyGAAAAAg"]
[Fri Dec 12 20:53:22.705633 2025] [:error] [pid 60649:tid 60675] [client 48.210.64.188:15987] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTwQQlOcUGKU3sgfHP_3qgAAARc"]
[Fri Dec 12 20:53:59.123805 2025] [:error] [pid 27950:tid 27968] [client 48.210.64.188:15889] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwQZ4VLRvkrdsSc1F2cpgAAAVA"]
[Fri Dec 12 20:53:59.656441 2025] [:error] [pid 26607:tid 26609] [client 48.210.64.188:7149] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwQZ8b_b0tOEWTL2KmawAAAAMA"]
[Fri Dec 12 20:54:00.470087 2025] [:error] [pid 55760:tid 55781] [client 48.210.64.188:7154] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwQaFObDQlftFDyGawObQAAAZM"]
[Fri Dec 12 20:54:01.317020 2025] [:error] [pid 26607:tid 26610] [client 48.210.64.188:15912] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwQacb_b0tOEWTL2KmawgAAAME"]
[Fri Dec 12 20:54:01.944166 2025] [:error] [pid 27950:tid 27957] [client 48.210.64.188:15906] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aTwQaYVLRvkrdsSc1F2cqAAAAUU"]
[Fri Dec 12 20:54:03.184095 2025] [:error] [pid 55760:tid 55779] [client 48.210.64.188:7133] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aTwQa1ObDQlftFDyGawOcAAAAZE"]
[Fri Dec 12 20:54:03.757691 2025] [:error] [pid 27950:tid 27969] [client 48.210.64.188:15983] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aTwQa4VLRvkrdsSc1F2cqgAAAVE"]
[Fri Dec 12 20:54:04.357994 2025] [:error] [pid 26519:tid 26547] [client 48.210.64.188:15921] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aTwQbM8TRgSGOeWqEhfyKgAAABg"]
[Fri Dec 12 20:54:04.891511 2025] [:error] [pid 55760:tid 55784] [client 48.210.64.188:7124] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTwQbFObDQlftFDyGawOcwAAAZY"]
[Fri Dec 12 20:54:05.456948 2025] [:error] [pid 55760:tid 55780] [client 48.210.64.188:15913] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTwQbVObDQlftFDyGawOdAAAAZI"]
[Fri Dec 12 20:54:06.111605 2025] [:error] [pid 55760:tid 55782] [client 48.210.64.188:15900] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTwQblObDQlftFDyGawOdgAAAZQ"]
[Fri Dec 12 20:54:06.798810 2025] [:error] [pid 60649:tid 60656] [client 48.210.64.188:15888] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTwQblOcUGKU3sgfHP_3uAAAAQQ"]
[Fri Dec 12 20:54:07.451939 2025] [:error] [pid 27950:tid 27971] [client 48.210.64.188:7123] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTwQb4VLRvkrdsSc1F2csAAAAVM"]
[Fri Dec 12 20:54:07.830063 2025] [:error] [pid 26607:tid 26630] [client 48.210.64.188:15905] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTwQb8b_b0tOEWTL2KmawwAAANU"]
[Fri Dec 12 20:54:08.261074 2025] [:error] [pid 26521:tid 26593] [client 48.210.64.188:15919] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTwQcJdhcAPU617AKTB8FgAAAI4"]
[Fri Dec 12 20:54:08.846322 2025] [:error] [pid 26607:tid 26619] [client 48.210.64.188:15934] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aTwQcMb_b0tOEWTL2KmaxQAAAMo"]
[Fri Dec 12 20:54:09.278632 2025] [:error] [pid 27950:tid 27965] [client 48.210.64.188:7139] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about3.php"] [unique_id "aTwQcYVLRvkrdsSc1F2csQAAAU0"]
[Fri Dec 12 20:54:09.998931 2025] [:error] [pid 55760:tid 55769] [client 48.210.64.188:15911] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about3.php"] [unique_id "aTwQcVObDQlftFDyGawOeQAAAYc"]
[Fri Dec 12 20:54:10.392972 2025] [:error] [pid 55760:tid 55778] [client 48.210.64.188:7077] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about3.php"] [unique_id "aTwQclObDQlftFDyGawOegAAAZA"]
[Fri Dec 12 20:54:10.837958 2025] [:error] [pid 55760:tid 55762] [client 48.210.64.188:7089] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about3.php"] [unique_id "aTwQclObDQlftFDyGawOfwAAAYA"]
[Fri Dec 12 20:54:11.274170 2025] [:error] [pid 27950:tid 27956] [client 48.210.64.188:7062] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTwQc4VLRvkrdsSc1F2cswAAAUQ"]
[Fri Dec 12 20:54:12.053788 2025] [:error] [pid 27950:tid 27954] [client 48.210.64.188:7122] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTwQdIVLRvkrdsSc1F2ctAAAAUI"]
[Fri Dec 12 20:54:12.736398 2025] [:error] [pid 26607:tid 26633] [client 48.210.64.188:15932] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTwQdMb_b0tOEWTL2KmaxwAAANg"]
[Fri Dec 12 20:54:13.345782 2025] [:error] [pid 60649:tid 60676] [client 48.210.64.188:15884] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTwQdVOcUGKU3sgfHP_3ugAAARg"]
[Fri Dec 12 20:54:13.667619 2025] [:error] [pid 26519:tid 26538] [client 48.210.64.188:15904] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTwQdc8TRgSGOeWqEhfyLAAAAA8"]
[Fri Dec 12 20:54:14.682637 2025] [:error] [pid 26521:tid 26589] [client 48.210.64.188:7073] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTwQdpdhcAPU617AKTB8GwAAAIo"]
[Fri Dec 12 20:54:15.070008 2025] [:error] [pid 26520:tid 26555] [client 48.210.64.188:7110] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTwQd0G_frlY5vNXu_D5SAAAAEM"]
[Fri Dec 12 20:54:15.483962 2025] [:error] [pid 26607:tid 26625] [client 48.210.64.188:7019] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTwQd8b_b0tOEWTL2KmayQAAANA"]
[Fri Dec 12 20:54:15.959430 2025] [:error] [pid 26520:tid 26559] [client 48.210.64.188:7161] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTwQd0G_frlY5vNXu_D5SQAAAEc"]
[Fri Dec 12 20:54:16.680795 2025] [:error] [pid 26521:tid 26581] [client 48.210.64.188:7132] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTwQeJdhcAPU617AKTB8HgAAAII"]
[Fri Dec 12 20:54:17.049375 2025] [:error] [pid 27950:tid 27975] [client 48.210.64.188:15907] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTwQeYVLRvkrdsSc1F2cuAAAAVc"]
[Fri Dec 12 20:54:17.381119 2025] [:error] [pid 27950:tid 27960] [client 48.210.64.188:7143] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTwQeYVLRvkrdsSc1F2cuQAAAUg"]
[Fri Dec 12 20:54:17.995973 2025] [:error] [pid 60649:tid 60655] [client 48.210.64.188:15914] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTwQeVOcUGKU3sgfHP_3vAAAAQM"]
[Fri Dec 12 20:54:18.331285 2025] [:error] [pid 26607:tid 26627] [client 48.210.64.188:7121] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTwQesb_b0tOEWTL2KmaygAAANI"]
[Fri Dec 12 20:54:18.985182 2025] [:error] [pid 60649:tid 60672] [client 48.210.64.188:7047] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTwQelOcUGKU3sgfHP_3vgAAARQ"]
[Fri Dec 12 20:54:19.464981 2025] [:error] [pid 26607:tid 26624] [client 48.210.64.188:7146] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTwQe8b_b0tOEWTL2KmaywAAAM8"]
[Fri Dec 12 20:54:20.162357 2025] [:error] [pid 60649:tid 60675] [client 48.210.64.188:7091] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTwQfFOcUGKU3sgfHP_3vwAAARc"]
[Fri Dec 12 20:54:21.149155 2025] [:error] [pid 55760:tid 55768] [client 48.210.64.188:15938] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTwQfVObDQlftFDyGawOjAAAAYY"]
[Fri Dec 12 20:54:21.740825 2025] [:error] [pid 55760:tid 55773] [client 48.210.64.188:7137] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTwQfVObDQlftFDyGawOjQAAAYs"]
[Fri Dec 12 20:54:22.376364 2025] [:error] [pid 26607:tid 26614] [client 48.210.64.188:15971] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTwQfsb_b0tOEWTL2KmazgAAAMU"]
[Fri Dec 12 20:54:22.927289 2025] [:error] [pid 55760:tid 55772] [client 48.210.64.188:7055] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aTwQflObDQlftFDyGawOkAAAAYo"]
[Fri Dec 12 20:54:23.408497 2025] [:error] [pid 27950:tid 27970] [client 48.210.64.188:7130] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aTwQf4VLRvkrdsSc1F2cugAAAVI"]
[Fri Dec 12 20:54:24.252110 2025] [:error] [pid 55760:tid 55777] [client 48.210.64.188:15942] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aTwQgFObDQlftFDyGawOlQAAAY8"]
[Fri Dec 12 20:54:24.921035 2025] [:error] [pid 27950:tid 27959] [client 48.210.64.188:7115] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aTwQgIVLRvkrdsSc1F2cuwAAAUc"]
[Fri Dec 12 20:54:25.493875 2025] [:error] [pid 26607:tid 26609] [client 48.210.64.188:15985] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTwQgcb_b0tOEWTL2KmazwAAAMA"]
[Fri Dec 12 20:54:25.906911 2025] [:error] [pid 26607:tid 26628] [client 48.210.64.188:7078] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTwQgcb_b0tOEWTL2Kma0QAAANM"]
[Fri Dec 12 20:54:26.317805 2025] [:error] [pid 60649:tid 60658] [client 48.210.64.188:15950] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTwQglOcUGKU3sgfHP_3wQAAAQY"]
[Fri Dec 12 20:54:26.838878 2025] [:error] [pid 60649:tid 60661] [client 48.210.64.188:7064] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTwQglOcUGKU3sgfHP_3wwAAAQk"]
[Fri Dec 12 20:54:27.181857 2025] [:error] [pid 26607:tid 26631] [client 48.210.64.188:7128] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTwQg8b_b0tOEWTL2Kma1AAAANY"]
[Fri Dec 12 20:54:27.624719 2025] [:error] [pid 27950:tid 27958] [client 48.210.64.188:7057] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTwQg4VLRvkrdsSc1F2cvAAAAUY"]
[Fri Dec 12 20:54:28.324421 2025] [:error] [pid 27950:tid 27971] [client 48.210.64.188:7085] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTwQhIVLRvkrdsSc1F2cvgAAAVM"]
[Fri Dec 12 20:54:28.824812 2025] [:error] [pid 26521:tid 26601] [client 48.210.64.188:7152] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aTwQhJdhcAPU617AKTB8IgAAAJY"]
[Fri Dec 12 20:54:29.462135 2025] [:error] [pid 26520:tid 26568] [client 48.210.64.188:7041] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aTwQhUG_frlY5vNXu_D5SwAAAFA"]
[Fri Dec 12 20:54:30.024559 2025] [:error] [pid 55760:tid 55769] [client 48.210.64.188:7135] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aTwQhlObDQlftFDyGawOnAAAAYc"]
[Fri Dec 12 20:54:30.329161 2025] [:error] [pid 26520:tid 26570] [client 48.210.64.188:7145] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aTwQhkG_frlY5vNXu_D5TgAAAFI"]
[Fri Dec 12 20:54:30.709335 2025] [:error] [pid 26520:tid 26561] [client 48.210.64.188:7167] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aTwQhkG_frlY5vNXu_D5TwAAAEk"]
[Fri Dec 12 20:54:31.072512 2025] [:error] [pid 26520:tid 26560] [client 48.210.64.188:15988] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTwQh0G_frlY5vNXu_D5UQAAAEg"]
[Fri Dec 12 20:54:31.871048 2025] [:error] [pid 26607:tid 26620] [client 48.210.64.188:7040] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTwQh8b_b0tOEWTL2Kma1gAAAMs"]
[Fri Dec 12 20:54:32.464619 2025] [:error] [pid 26607:tid 26615] [client 48.210.64.188:7148] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTwQiMb_b0tOEWTL2Kma2AAAAMY"]
[Fri Dec 12 20:54:32.998951 2025] [:error] [pid 26521:tid 26580] [client 48.210.64.188:7107] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTwQiJdhcAPU617AKTB8JwAAAIE"]
[Fri Dec 12 20:54:33.278378 2025] [:error] [pid 26521:tid 26589] [client 48.210.64.188:7114] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aTwQiZdhcAPU617AKTB8KAAAAIo"]
[Fri Dec 12 20:54:33.576333 2025] [:error] [pid 60649:tid 60668] [client 48.210.64.188:7111] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aTwQiVOcUGKU3sgfHP_3yQAAARA"]
[Fri Dec 12 20:54:34.094490 2025] [:error] [pid 26521:tid 26591] [client 48.210.64.188:7106] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aTwQipdhcAPU617AKTB8KgAAAIw"]
[Fri Dec 12 20:54:34.735134 2025] [:error] [pid 26607:tid 26626] [client 48.210.64.188:7136] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aTwQisb_b0tOEWTL2Kma2wAAANE"]
[Fri Dec 12 20:54:35.083348 2025] [:error] [pid 60649:tid 60673] [client 48.210.64.188:7129] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aTwQi1OcUGKU3sgfHP_3ygAAARU"]
[Fri Dec 12 20:54:35.652747 2025] [:error] [pid 26519:tid 26547] [client 48.210.64.188:7142] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aTwQi88TRgSGOeWqEhfyNQAAABg"]
[Fri Dec 12 20:54:36.031764 2025] [:error] [pid 55760:tid 55764] [client 48.210.64.188:15907] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aTwQjFObDQlftFDyGawOpAAAAYI"]
[Fri Dec 12 20:54:36.376727 2025] [:error] [pid 26520:tid 26573] [client 48.210.64.188:7058] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aTwQjEG_frlY5vNXu_D5VgAAAFU"]
[Fri Dec 12 20:54:36.889743 2025] [:error] [pid 26607:tid 26614] [client 48.210.64.188:15928] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTwQjMb_b0tOEWTL2Kma3gAAAMU"]
[Fri Dec 12 20:54:37.350753 2025] [:error] [pid 60649:tid 60655] [client 48.210.64.188:7105] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTwQjVOcUGKU3sgfHP_3ywAAAQM"]
[Fri Dec 12 20:54:38.183760 2025] [:error] [pid 26519:tid 26543] [client 48.210.64.188:7008] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTwQjs8TRgSGOeWqEhfyOAAAABQ"]
[Fri Dec 12 20:54:39.076101 2025] [:error] [pid 27950:tid 27963] [client 48.210.64.188:7126] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aTwQj4VLRvkrdsSc1F2cxAAAAUs"]
[Fri Dec 12 20:54:39.704034 2025] [:error] [pid 55760:tid 55776] [client 48.210.64.188:7140] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTwQj1ObDQlftFDyGawOqQAAAY4"]
[Fri Dec 12 20:54:40.185537 2025] [:error] [pid 26521:tid 26597] [client 48.210.64.188:15926] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTwQkJdhcAPU617AKTB8LwAAAJI"]
[Fri Dec 12 20:54:40.659611 2025] [:error] [pid 27950:tid 27975] [client 48.210.64.188:7101] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTwQkIVLRvkrdsSc1F2cxQAAAVc"]
[Fri Dec 12 20:54:41.137682 2025] [:error] [pid 60649:tid 60657] [client 48.210.64.188:7061] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aTwQkVOcUGKU3sgfHP_3zQAAAQU"]
[Fri Dec 12 20:54:41.653656 2025] [:error] [pid 26520:tid 26559] [client 48.210.64.188:7094] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aTwQkUG_frlY5vNXu_D5VwAAAEc"]
[Fri Dec 12 20:54:42.118805 2025] [:error] [pid 26520:tid 26569] [client 48.210.64.188:7165] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aTwQkkG_frlY5vNXu_D5WAAAAFE"]
[Fri Dec 12 20:54:42.884787 2025] [:error] [pid 26607:tid 26622] [client 48.210.64.188:7150] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aTwQksb_b0tOEWTL2Kma4QAAAM0"]
[Fri Dec 12 20:54:43.765076 2025] [:error] [pid 55760:tid 55769] [client 48.210.64.188:7071] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aTwQk1ObDQlftFDyGawOrQAAAYc"]
[Fri Dec 12 20:54:44.320662 2025] [:error] [pid 60649:tid 60660] [client 48.210.64.188:7045] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwQlFOcUGKU3sgfHP_30AAAAQg"]
[Fri Dec 12 20:54:45.181637 2025] [:error] [pid 26607:tid 26632] [client 48.210.64.188:6991] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwQlcb_b0tOEWTL2Kma4gAAANc"]
[Fri Dec 12 20:54:45.659617 2025] [:error] [pid 26519:tid 26529] [client 48.210.64.188:7147] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwQlc8TRgSGOeWqEhfyOgAAAAY"]
[Fri Dec 12 20:54:46.570641 2025] [:error] [pid 26521:tid 26594] [client 48.210.64.188:6981] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwQlpdhcAPU617AKTB8MwAAAI8"]
[Fri Dec 12 20:54:46.995070 2025] [:error] [pid 27950:tid 27962] [client 48.210.64.188:7059] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTwQloVLRvkrdsSc1F2c0QAAAUo"]
[Fri Dec 12 20:54:47.627500 2025] [:error] [pid 26607:tid 26610] [client 48.210.64.188:7131] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTwQl8b_b0tOEWTL2Kma4wAAAME"]
[Fri Dec 12 20:54:48.546605 2025] [:error] [pid 26519:tid 26540] [client 48.210.64.188:7063] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTwQmM8TRgSGOeWqEhfyPQAAABE"]
[Fri Dec 12 20:54:49.209314 2025] [:error] [pid 26521:tid 26588] [client 48.210.64.188:7022] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTwQmZdhcAPU617AKTB8OQAAAIk"]
[Fri Dec 12 20:54:49.702728 2025] [:error] [pid 26521:tid 26587] [client 48.210.64.188:15927] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTwQmZdhcAPU617AKTB8OgAAAIg"]
[Fri Dec 12 20:54:50.191279 2025] [:error] [pid 26519:tid 26531] [client 48.210.64.188:15939] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTwQms8TRgSGOeWqEhfyPgAAAAg"]
[Fri Dec 12 20:54:50.712049 2025] [:error] [pid 26520:tid 26553] [client 48.210.64.188:7081] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTwQmkG_frlY5vNXu_D5XAAAAEE"]
[Fri Dec 12 20:54:51.478128 2025] [:error] [pid 26521:tid 26586] [client 48.210.64.188:7138] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTwQm5dhcAPU617AKTB8PQAAAIc"]
[Fri Dec 12 20:54:52.384775 2025] [:error] [pid 26607:tid 26615] [client 48.210.64.188:6914] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aTwQnMb_b0tOEWTL2Kma5wAAAMY"]
[Fri Dec 12 20:54:52.950464 2025] [:error] [pid 27950:tid 27959] [client 48.210.64.188:7053] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aTwQnIVLRvkrdsSc1F2c0gAAAUc"]
[Fri Dec 12 20:54:53.406492 2025] [:error] [pid 26521:tid 26593] [client 48.210.64.188:15978] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aTwQnZdhcAPU617AKTB8QgAAAI4"]
[Fri Dec 12 20:54:54.326218 2025] [:error] [pid 55760:tid 55767] [client 48.210.64.188:7074] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aTwQnlObDQlftFDyGawOvgAAAYU"]
[Fri Dec 12 20:54:55.158626 2025] [:error] [pid 26521:tid 26598] [client 48.210.64.188:7159] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTwQn5dhcAPU617AKTB8QwAAAJM"]
[Fri Dec 12 20:54:56.232359 2025] [:error] [pid 26519:tid 26535] [client 48.210.64.188:7079] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aTwQoM8TRgSGOeWqEhfyPwAAAAw"]
[Fri Dec 12 20:55:06.594366 2025] [:error] [pid 26521:tid 26595] [client 48.210.64.188:6993] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aTwQqpdhcAPU617AKTB8TAAAAJA"]
[Fri Dec 12 20:55:17.358344 2025] [:error] [pid 27950:tid 27956] [client 48.210.64.188:15930] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aTwQtYVLRvkrdsSc1F2c5QAAAUQ"]
[Fri Dec 12 20:55:26.414453 2025] [:error] [pid 26521:tid 26598] [client 48.210.64.188:7087] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aTwQvpdhcAPU617AKTB8dwAAAJM"]
[Fri Dec 12 20:55:40.447071 2025] [proxy_fcgi:error] [pid 26520:tid 26572] [client 48.210.64.188:7010] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 20:55:50.558067 2025] [:error] [pid 26520:tid 26566] [client 48.210.64.188:7010] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTwQ1kG_frlY5vNXu_D5hgAAAE4"]
[Fri Dec 12 20:55:51.418491 2025] [:error] [pid 55760:tid 55769] [client 48.210.64.188:6982] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTwQ11ObDQlftFDyGawPGgAAAYc"]
[Fri Dec 12 20:55:51.936857 2025] [:error] [pid 60649:tid 60658] [client 48.210.64.188:6988] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTwQ11OcUGKU3sgfHP_39QAAAQY"]
[Fri Dec 12 20:55:52.287955 2025] [:error] [pid 60649:tid 60653] [client 48.210.64.188:6997] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTwQ2FOcUGKU3sgfHP_39gAAAQE"]
[Fri Dec 12 20:55:53.021847 2025] [:error] [pid 26607:tid 26633] [client 48.210.64.188:6978] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTwQ2cb_b0tOEWTL2KmbAwAAANg"]
[Fri Dec 12 20:55:53.628480 2025] [:error] [pid 26607:tid 26625] [client 48.210.64.188:15924] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTwQ2cb_b0tOEWTL2KmbBQAAANA"]
[Fri Dec 12 20:55:54.405962 2025] [:error] [pid 26519:tid 26542] [client 48.210.64.188:7141] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTwQ2s8TRgSGOeWqEhfyXgAAABM"]
[Fri Dec 12 20:55:55.232764 2025] [:error] [pid 60649:tid 60676] [client 48.210.64.188:7000] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTwQ21OcUGKU3sgfHP_3-wAAARg"]
[Fri Dec 12 20:55:56.041819 2025] [:error] [pid 55760:tid 55766] [client 48.210.64.188:7164] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTwQ3FObDQlftFDyGawPGwAAAYQ"]
[Fri Dec 12 20:55:56.724945 2025] [:error] [pid 26521:tid 26587] [client 48.210.64.188:7103] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTwQ3JdhcAPU617AKTB8jwAAAIg"]
[Fri Dec 12 20:55:57.265765 2025] [:error] [pid 27950:tid 27974] [client 48.210.64.188:7155] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTwQ3YVLRvkrdsSc1F2c-wAAAVY"]
[Fri Dec 12 20:55:57.835429 2025] [:error] [pid 27950:tid 27957] [client 48.210.64.188:6994] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTwQ3YVLRvkrdsSc1F2c_QAAAUU"]
[Fri Dec 12 20:55:58.242891 2025] [:error] [pid 26521:tid 26599] [client 48.210.64.188:7066] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTwQ3pdhcAPU617AKTB8kQAAAJQ"]
[Fri Dec 12 20:55:58.896176 2025] [:error] [pid 55760:tid 55778] [client 48.210.64.188:7056] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTwQ3lObDQlftFDyGawPHQAAAZA"]
[Fri Dec 12 20:55:59.469211 2025] [:error] [pid 26521:tid 26588] [client 48.210.64.188:7042] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTwQ35dhcAPU617AKTB8kwAAAIk"]
[Fri Dec 12 20:56:00.089634 2025] [:error] [pid 26521:tid 26583] [client 48.210.64.188:7069] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTwQ4JdhcAPU617AKTB8lAAAAIQ"]
[Fri Dec 12 20:56:00.468505 2025] [:error] [pid 26521:tid 26590] [client 48.210.64.188:7026] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTwQ4JdhcAPU617AKTB8lQAAAIs"]
[Fri Dec 12 20:56:01.111564 2025] [:error] [pid 60649:tid 60654] [client 48.210.64.188:6976] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTwQ4VOcUGKU3sgfHP_4AgAAAQI"]
[Fri Dec 12 20:56:01.703626 2025] [:error] [pid 26520:tid 26562] [client 48.210.64.188:7023] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTwQ4UG_frlY5vNXu_D5igAAAEo"]
[Fri Dec 12 20:56:02.250345 2025] [:error] [pid 27950:tid 27955] [client 48.210.64.188:7060] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTwQ4oVLRvkrdsSc1F2dAAAAAUM"]
[Fri Dec 12 20:56:02.809052 2025] [:error] [pid 26520:tid 26575] [client 48.210.64.188:7080] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTwQ4kG_frlY5vNXu_D5iwAAAFc"]
[Fri Dec 12 20:56:03.594078 2025] [:error] [pid 55760:tid 55765] [client 48.210.64.188:7070] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTwQ41ObDQlftFDyGawPJgAAAYM"]
[Fri Dec 12 20:56:04.571069 2025] [:error] [pid 55760:tid 55783] [client 48.210.64.188:7083] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTwQ5FObDQlftFDyGawPJwAAAZU"]
[Fri Dec 12 20:56:05.735642 2025] [:error] [pid 26607:tid 26611] [client 48.210.64.188:7005] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTwQ5cb_b0tOEWTL2KmbDQAAAMI"]
[Fri Dec 12 20:56:06.478256 2025] [:error] [pid 26607:tid 26612] [client 48.210.64.188:7076] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTwQ5sb_b0tOEWTL2KmbDwAAAMM"]
[Fri Dec 12 20:56:07.152838 2025] [:error] [pid 26519:tid 26530] [client 48.210.64.188:7108] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTwQ588TRgSGOeWqEhfyYQAAAAc"]
[Fri Dec 12 20:56:08.245264 2025] [:error] [pid 27950:tid 27956] [client 48.210.64.188:15997] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTwQ6IVLRvkrdsSc1F2dBQAAAUQ"]
[Fri Dec 12 20:56:08.793136 2025] [:error] [pid 26519:tid 26537] [client 48.210.64.188:7119] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTwQ6M8TRgSGOeWqEhfyYwAAAA4"]
[Fri Dec 12 20:56:09.360728 2025] [:error] [pid 26520:tid 26568] [client 48.210.64.188:7051] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTwQ6UG_frlY5vNXu_D5kQAAAFA"]
[Fri Dec 12 20:56:09.887873 2025] [:error] [pid 26607:tid 26625] [client 48.210.64.188:15973] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTwQ6cb_b0tOEWTL2KmbEwAAANA"]
[Fri Dec 12 20:56:10.619217 2025] [:error] [pid 26607:tid 26616] [client 48.210.64.188:15975] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTwQ6sb_b0tOEWTL2KmbFQAAAMc"]
[Fri Dec 12 20:56:11.640527 2025] [:error] [pid 60649:tid 60664] [client 48.210.64.188:7021] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTwQ61OcUGKU3sgfHP_4CQAAAQw"]
[Fri Dec 12 20:56:12.119102 2025] [:error] [pid 27950:tid 27975] [client 48.210.64.188:7082] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTwQ7IVLRvkrdsSc1F2dBgAAAVc"]
[Fri Dec 12 20:56:12.592245 2025] [:error] [pid 27950:tid 27974] [client 48.210.64.188:7099] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTwQ7IVLRvkrdsSc1F2dBwAAAVY"]
[Fri Dec 12 20:56:13.102678 2025] [:error] [pid 27950:tid 27960] [client 48.210.64.188:7043] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTwQ7YVLRvkrdsSc1F2dCAAAAUg"]
[Fri Dec 12 20:56:13.749581 2025] [:error] [pid 26521:tid 26591] [client 48.210.64.188:7049] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTwQ7ZdhcAPU617AKTB8mwAAAIw"]
[Fri Dec 12 20:56:14.573758 2025] [:error] [pid 26521:tid 26588] [client 48.210.64.188:6995] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aTwQ7pdhcAPU617AKTB8nAAAAIk"]
[Fri Dec 12 20:56:15.177190 2025] [:error] [pid 26521:tid 26583] [client 48.210.64.188:7001] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aTwQ75dhcAPU617AKTB8ngAAAIQ"]
[Fri Dec 12 20:56:16.019436 2025] [:error] [pid 26521:tid 26601] [client 48.210.64.188:7096] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aTwQ8JdhcAPU617AKTB8oAAAAJY"]
[Fri Dec 12 20:56:16.956018 2025] [:error] [pid 26520:tid 26562] [client 48.210.64.188:7084] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aTwQ8EG_frlY5vNXu_D5mAAAAEo"]
[Fri Dec 12 20:56:17.619143 2025] [:error] [pid 26521:tid 26590] [client 48.210.64.188:7156] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aTwQ8ZdhcAPU617AKTB8oQAAAIs"]
[Fri Dec 12 20:56:19.149088 2025] [:error] [pid 55760:tid 55773] [client 48.210.64.188:15909] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aTwQ81ObDQlftFDyGawPKwAAAYs"]
[Fri Dec 12 20:56:20.105455 2025] [:error] [pid 27950:tid 27973] [client 48.210.64.188:7048] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aTwQ9IVLRvkrdsSc1F2dFgAAAVU"]
[Fri Dec 12 20:56:21.069857 2025] [:error] [pid 55760:tid 55771] [client 48.210.64.188:7002] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aTwQ9VObDQlftFDyGawPLgAAAYk"]
[Fri Dec 12 20:56:22.367229 2025] [:error] [pid 26519:tid 26536] [client 48.210.64.188:7018] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aTwQ9s8TRgSGOeWqEhfyaQAAAA0"]
[Fri Dec 12 20:56:23.471059 2025] [:error] [pid 55760:tid 55770] [client 48.210.64.188:7072] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aTwQ91ObDQlftFDyGawPMAAAAYg"]
[Fri Dec 12 20:56:24.120490 2025] [:error] [pid 26519:tid 26540] [client 48.210.64.188:6998] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aTwQ-M8TRgSGOeWqEhfyagAAABE"]
[Fri Dec 12 20:56:25.016371 2025] [:error] [pid 60649:tid 60661] [client 48.210.64.188:6938] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aTwQ-VOcUGKU3sgfHP_4EgAAAQk"]
[Fri Dec 12 20:56:26.045031 2025] [:error] [pid 60649:tid 60667] [client 48.210.64.188:15918] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTwQ-lOcUGKU3sgfHP_4FAAAAQ8"]
[Fri Dec 12 20:56:27.499144 2025] [:error] [pid 26521:tid 26580] [client 48.210.64.188:15936] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aTwQ-5dhcAPU617AKTB8pQAAAIE"]
[Fri Dec 12 20:56:29.420701 2025] [:error] [pid 27950:tid 27968] [client 48.210.64.188:6985] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTwQ_YVLRvkrdsSc1F2dGgAAAVA"]
[Fri Dec 12 20:56:31.582190 2025] [:error] [pid 55760:tid 55772] [client 48.210.64.188:7163] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTwQ_1ObDQlftFDyGawPOAAAAYo"]
[Fri Dec 12 20:56:32.788731 2025] [:error] [pid 55760:tid 55773] [client 48.210.64.188:7014] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTwRAFObDQlftFDyGawPOwAAAYs"]
[Fri Dec 12 20:56:33.560310 2025] [:error] [pid 26521:tid 26593] [client 48.210.64.188:6933] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aTwRAZdhcAPU617AKTB8pwAAAI4"]
[Fri Dec 12 20:56:34.313212 2025] [:error] [pid 60649:tid 60657] [client 48.210.64.188:7017] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aTwRAlOcUGKU3sgfHP_4FgAAAQU"]
[Fri Dec 12 20:56:35.171332 2025] [:error] [pid 26519:tid 26526] [client 48.210.64.188:7032] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aTwRA88TRgSGOeWqEhfybgAAAAM"]
[Fri Dec 12 20:56:36.714759 2025] [:error] [pid 27950:tid 27972] [client 48.210.64.188:6915] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aTwRBIVLRvkrdsSc1F2dIQAAAVQ"]
[Fri Dec 12 20:56:37.326501 2025] [:error] [pid 27950:tid 27954] [client 48.210.64.188:7044] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aTwRBYVLRvkrdsSc1F2dJAAAAUI"]
[Fri Dec 12 20:56:38.600687 2025] [:error] [pid 26521:tid 26595] [client 48.210.64.188:6996] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTwRBpdhcAPU617AKTB8qgAAAJA"]
[Fri Dec 12 20:56:40.334894 2025] [:error] [pid 60649:tid 60661] [client 48.210.64.188:6960] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTwRCFOcUGKU3sgfHP_4JgAAAQk"]
[Fri Dec 12 20:56:40.969162 2025] [:error] [pid 55760:tid 55762] [client 48.210.64.188:15940] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTwRCFObDQlftFDyGawPPAAAAYA"]
[Fri Dec 12 20:56:41.437657 2025] [:error] [pid 26607:tid 26626] [client 48.210.64.188:6942] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTwRCcb_b0tOEWTL2KmbMgAAANE"]
[Fri Dec 12 20:56:42.386242 2025] [:error] [pid 26520:tid 26573] [client 48.210.64.188:7006] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aTwRCkG_frlY5vNXu_D5pQAAAFU"]
[Fri Dec 12 20:56:42.806971 2025] [:error] [pid 26520:tid 26554] [client 48.210.64.188:6873] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aTwRCkG_frlY5vNXu_D5pgAAAEI"]
[Fri Dec 12 20:56:43.661857 2025] [:error] [pid 26520:tid 26555] [client 48.210.64.188:6945] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aTwRC0G_frlY5vNXu_D5pwAAAEM"]
[Fri Dec 12 20:56:44.190642 2025] [:error] [pid 26607:tid 26617] [client 48.210.64.188:15920] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aTwRDMb_b0tOEWTL2KmbNgAAAMg"]
[Fri Dec 12 20:56:44.941133 2025] [:error] [pid 55760:tid 55785] [client 48.210.64.188:6999] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aTwRDFObDQlftFDyGawPQQAAAZc"]
[Fri Dec 12 20:56:46.197637 2025] [:error] [pid 26520:tid 26561] [client 48.210.64.188:6990] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aTwRDkG_frlY5vNXu_D5sQAAAEk"]
[Fri Dec 12 20:56:47.263303 2025] [:error] [pid 26520:tid 26572] [client 48.210.64.188:7012] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aTwRD0G_frlY5vNXu_D5tQAAAFQ"]
[Fri Dec 12 20:57:41.651429 2025] [:error] [pid 26607:tid 26620] [client 48.210.64.188:15980] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aTwRRcb_b0tOEWTL2KmbkwAAAMs"]
[Fri Dec 12 20:57:43.395358 2025] [:error] [pid 60649:tid 60676] [client 48.210.64.188:15948] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aTwRR1OcUGKU3sgfHP_4ZgAAARg"]
[Fri Dec 12 20:57:44.325958 2025] [:error] [pid 26521:tid 26585] [client 48.210.64.188:15962] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aTwRSJdhcAPU617AKTB8_AAAAIY"]
[Fri Dec 12 20:57:45.525164 2025] [:error] [pid 26521:tid 26589] [client 48.210.64.188:15873] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aTwRSZdhcAPU617AKTB9AAAAAIo"]
[Fri Dec 12 20:57:47.017095 2025] [:error] [pid 60649:tid 60668] [client 48.210.64.188:15886] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aTwRS1OcUGKU3sgfHP_4bAAAARA"]
[Fri Dec 12 20:57:48.613914 2025] [:error] [pid 26520:tid 26562] [client 48.210.64.188:15961] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aTwRTEG_frlY5vNXu_D6FAAAAEo"]
[Fri Dec 12 20:57:49.741197 2025] [:error] [pid 27950:tid 27953] [client 48.210.64.188:15876] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aTwRTYVLRvkrdsSc1F2dpgAAAUE"]
[Fri Dec 12 20:57:51.064060 2025] [:error] [pid 26520:tid 26575] [client 48.210.64.188:7104] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aTwRT0G_frlY5vNXu_D6FQAAAFc"]
[Fri Dec 12 20:57:51.925536 2025] [:error] [pid 26521:tid 26589] [client 48.210.64.188:15945] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTwRT5dhcAPU617AKTB9NgAAAIo"]
[Fri Dec 12 20:57:52.567784 2025] [:error] [pid 26519:tid 26530] [client 48.210.64.188:15965] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTwRUM8TRgSGOeWqEhfzMwAAAAc"]
[Fri Dec 12 20:57:53.327898 2025] [:error] [pid 27950:tid 27969] [client 48.210.64.188:15947] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTwRUYVLRvkrdsSc1F2dqwAAAVE"]
[Fri Dec 12 20:57:54.095796 2025] [:error] [pid 27950:tid 27965] [client 48.210.64.188:15993] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aTwRUoVLRvkrdsSc1F2drgAAAU0"]
[Fri Dec 12 20:57:55.849427 2025] [:error] [pid 26519:tid 26546] [client 48.210.64.188:15931] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aTwRU88TRgSGOeWqEhfzNgAAABc"]
[Fri Dec 12 20:57:56.910408 2025] [:error] [pid 26521:tid 26581] [client 48.210.64.188:15925] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aTwRVJdhcAPU617AKTB9PwAAAII"]
[Fri Dec 12 20:57:57.666126 2025] [:error] [pid 26521:tid 26587] [client 48.210.64.188:15974] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aTwRVZdhcAPU617AKTB9QQAAAIg"]
[Fri Dec 12 20:57:58.254018 2025] [:error] [pid 26519:tid 26544] [client 48.210.64.188:7054] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aTwRVs8TRgSGOeWqEhfzOwAAABU"]
[Fri Dec 12 20:57:59.468977 2025] [:error] [pid 26521:tid 26588] [client 48.210.64.188:15878] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aTwRV5dhcAPU617AKTB9RAAAAIk"]
[Fri Dec 12 20:58:00.122512 2025] [:error] [pid 26521:tid 26598] [client 48.210.64.188:6969] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aTwRWJdhcAPU617AKTB9RQAAAJM"]
[Fri Dec 12 20:58:00.900339 2025] [:error] [pid 26521:tid 26594] [client 48.210.64.188:15937] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aTwRWJdhcAPU617AKTB9SQAAAI8"]
[Fri Dec 12 20:58:02.098200 2025] [:error] [pid 26607:tid 26617] [client 48.210.64.188:15986] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aTwRWsb_b0tOEWTL2KmbvAAAAMg"]
[Fri Dec 12 20:58:03.311507 2025] [:error] [pid 26520:tid 26575] [client 48.210.64.188:15897] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aTwRW0G_frlY5vNXu_D6HgAAAFc"]
[Fri Dec 12 20:58:04.285690 2025] [:error] [pid 26520:tid 26571] [client 48.210.64.188:15989] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aTwRXEG_frlY5vNXu_D6IAAAAFM"]
[Fri Dec 12 20:58:05.629308 2025] [:error] [pid 60649:tid 60676] [client 48.210.64.188:15967] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aTwRXVOcUGKU3sgfHP_4rgAAARg"]
[Fri Dec 12 20:58:07.169118 2025] [:error] [pid 26607:tid 26614] [client 48.210.64.188:15968] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aTwRX8b_b0tOEWTL2KmbxQAAAMU"]
[Fri Dec 12 20:58:08.659206 2025] [:error] [pid 26519:tid 26541] [client 48.210.64.188:15981] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aTwRYM8TRgSGOeWqEhfzRwAAABI"]
[Fri Dec 12 20:58:10.384978 2025] [:error] [pid 26520:tid 26565] [client 48.210.64.188:15896] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aTwRYkG_frlY5vNXu_D6JgAAAE0"]
[Fri Dec 12 20:58:11.907363 2025] [:error] [pid 27950:tid 27965] [client 48.210.64.188:15941] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aTwRY4VLRvkrdsSc1F2dyAAAAU0"]
[Fri Dec 12 20:58:13.127314 2025] [:error] [pid 55760:tid 55782] [client 48.210.64.188:15996] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aTwRZVObDQlftFDyGawPnAAAAZQ"]
[Fri Dec 12 20:58:13.630080 2025] [:error] [pid 26607:tid 26626] [client 48.210.64.188:15958] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTwRZcb_b0tOEWTL2Kmb0QAAANE"]
[Fri Dec 12 20:58:14.967983 2025] [:error] [pid 26521:tid 26584] [client 48.210.64.188:15976] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTwRZpdhcAPU617AKTB9YAAAAIU"]
[Fri Dec 12 20:58:16.543829 2025] [:error] [pid 60649:tid 60661] [client 48.210.64.188:7151] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTwRaFOcUGKU3sgfHP_4uwAAAQk"]
[Fri Dec 12 20:58:17.235738 2025] [:error] [pid 26607:tid 26617] [client 48.210.64.188:15901] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aTwRacb_b0tOEWTL2Kmb1QAAAMg"]
[Fri Dec 12 20:58:18.515531 2025] [:error] [pid 26519:tid 26537] [client 48.210.64.188:15990] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aTwRas8TRgSGOeWqEhfzVgAAAA4"]
[Fri Dec 12 20:58:19.008932 2025] [:error] [pid 26607:tid 26618] [client 48.210.64.188:15887] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aTwRa8b_b0tOEWTL2Kmb2AAAAMk"]
[Fri Dec 12 20:58:20.058050 2025] [:error] [pid 26520:tid 26566] [client 48.210.64.188:15882] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aTwRbEG_frlY5vNXu_D6MgAAAE4"]
[Fri Dec 12 20:58:21.005264 2025] [:error] [pid 26607:tid 26615] [client 48.210.64.188:15977] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aTwRbcb_b0tOEWTL2Kmb2QAAAMY"]
[Fri Dec 12 20:58:22.536941 2025] [:error] [pid 26607:tid 26628] [client 48.210.64.188:15929] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aTwRbsb_b0tOEWTL2Kmb2wAAANM"]
[Fri Dec 12 20:58:23.862088 2025] [:error] [pid 26520:tid 26562] [client 48.210.64.188:15951] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aTwRb0G_frlY5vNXu_D6OAAAAEo"]
[Fri Dec 12 20:58:25.174871 2025] [:error] [pid 55760:tid 55780] [client 48.210.64.188:15954] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aTwRcVObDQlftFDyGawPqQAAAZI"]
[Fri Dec 12 20:58:26.325970 2025] [:error] [pid 26519:tid 26535] [client 48.210.64.188:15915] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aTwRcs8TRgSGOeWqEhfzYAAAAAw"]
[Fri Dec 12 20:58:28.033674 2025] [:error] [pid 26520:tid 26573] [client 48.210.64.188:15883] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aTwRdEG_frlY5vNXu_D6PwAAAFU"]
[Fri Dec 12 20:58:28.785601 2025] [:error] [pid 60649:tid 60673] [client 48.210.64.188:15944] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aTwRdFOcUGKU3sgfHP_45AAAARU"]
[Fri Dec 12 20:58:29.308979 2025] [:error] [pid 26521:tid 26589] [client 48.210.64.188:7090] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aTwRdZdhcAPU617AKTB9hwAAAIo"]
[Fri Dec 12 20:58:29.785952 2025] [:error] [pid 55760:tid 55784] [client 48.210.64.188:15994] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aTwRdVObDQlftFDyGawPrAAAAZY"]
[Fri Dec 12 20:58:30.954372 2025] [:error] [pid 26607:tid 26621] [client 48.210.64.188:15902] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aTwRdsb_b0tOEWTL2Kmb9AAAAMw"]
[Fri Dec 12 20:58:31.717735 2025] [:error] [pid 26520:tid 26567] [client 48.210.64.188:15949] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aTwRd0G_frlY5vNXu_D6SQAAAE8"]
[Fri Dec 12 20:58:32.593777 2025] [:error] [pid 26520:tid 26557] [client 48.210.64.188:15999] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aTwReEG_frlY5vNXu_D6SwAAAEU"]
[Fri Dec 12 20:58:33.087043 2025] [:error] [pid 26607:tid 26625] [client 48.210.64.188:15998] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aTwRecb_b0tOEWTL2Kmb9wAAANA"]
[Fri Dec 12 20:58:34.057690 2025] [:error] [pid 55760:tid 55764] [client 48.210.64.188:7020] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aTwRelObDQlftFDyGawPsAAAAYI"]
[Fri Dec 12 20:58:34.828279 2025] [:error] [pid 60649:tid 60668] [client 48.210.64.188:15899] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aTwRelOcUGKU3sgfHP_48wAAARA"]
[Fri Dec 12 20:58:35.301100 2025] [:error] [pid 60649:tid 60665] [client 48.210.64.188:15955] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aTwRe1OcUGKU3sgfHP_49wAAAQ0"]
[Fri Dec 12 20:58:36.635431 2025] [:error] [pid 26520:tid 26556] [client 48.210.64.188:15943] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aTwRfEG_frlY5vNXu_D6TgAAAEQ"]
[Fri Dec 12 20:58:37.738105 2025] [:error] [pid 26521:tid 26596] [client 48.210.64.188:6977] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aTwRfZdhcAPU617AKTB9kwAAAJE"]
[Fri Dec 12 20:58:38.811210 2025] [:error] [pid 60649:tid 60652] [client 48.210.64.188:15966] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aTwRflOcUGKU3sgfHP_5AgAAAQA"]
[Fri Dec 12 20:59:15.193511 2025] [:error] [pid 26521:tid 26603] [client 48.210.64.188:6937] [client 48.210.64.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.210.64.188, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTwRo5dhcAPU617AKTB-FgAAAJg"]
[Fri Dec 12 20:59:15.199840 2025] [proxy_fcgi:error] [pid 26521:tid 26603] [client 48.210.64.188:6937] AH01071: Got error 'Primary script unknown'
[Fri Dec 12 20:59:23.667221 2025] [:error] [pid 26521:tid 26599] [client 48.210.64.188:6937] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xse25.php"] [unique_id "aTwRq5dhcAPU617AKTB-IwAAAJQ"]
[Fri Dec 12 20:59:24.895221 2025] [:error] [pid 27950:tid 27962] [client 48.210.64.188:15884] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xse25.php"] [unique_id "aTwRrIVLRvkrdsSc1F2eIQAAAUo"]
[Fri Dec 12 20:59:27.281099 2025] [:error] [pid 27950:tid 27953] [client 48.210.64.188:15881] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xse25.php"] [unique_id "aTwRr4VLRvkrdsSc1F2eJAAAAUE"]
[Fri Dec 12 20:59:29.091207 2025] [:error] [pid 26520:tid 26567] [client 48.210.64.188:15900] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xse25.php"] [unique_id "aTwRsUG_frlY5vNXu_D6mgAAAE8"]
[Fri Dec 12 20:59:30.331077 2025] [:error] [pid 26521:tid 26590] [client 48.210.64.188:15890] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTwRspdhcAPU617AKTB-LAAAAIs"]
[Fri Dec 12 20:59:31.265447 2025] [:error] [pid 26519:tid 26536] [client 48.210.64.188:15984] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTwRs88TRgSGOeWqEhfzpQAAAA0"]
[Fri Dec 12 20:59:32.069153 2025] [:error] [pid 26521:tid 26584] [client 48.210.64.188:15880] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTwRtJdhcAPU617AKTB-MgAAAIU"]
[Fri Dec 12 20:59:34.004323 2025] [:error] [pid 26521:tid 26595] [client 48.210.64.188:15888] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTwRtpdhcAPU617AKTB-NwAAAJA"]
[Fri Dec 12 20:59:36.704628 2025] [:error] [pid 26521:tid 26582] [client 48.210.64.188:7107] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTwRuJdhcAPU617AKTB-PgAAAIM"]
[Fri Dec 12 20:59:39.351785 2025] [:error] [pid 27950:tid 27968] [client 48.210.64.188:15979] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTwRu4VLRvkrdsSc1F2eKwAAAVA"]
[Fri Dec 12 20:59:41.361855 2025] [:error] [pid 60649:tid 60664] [client 48.210.64.188:6991] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aTwRvVOcUGKU3sgfHP_5WAAAAQw"]
[Fri Dec 12 20:59:44.932673 2025] [:error] [pid 55760:tid 55766] [client 48.210.64.188:7121] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aTwRwFObDQlftFDyGawQJQAAAYQ"]
[Fri Dec 12 20:59:45.675423 2025] [:error] [pid 60649:tid 60671] [client 48.210.64.188:15914] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aTwRwVOcUGKU3sgfHP_5XwAAARM"]
[Fri Dec 12 20:59:47.550429 2025] [:error] [pid 55760:tid 55769] [client 48.210.64.188:15872] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aTwRw1ObDQlftFDyGawQLAAAAYc"]
[Fri Dec 12 20:59:48.324156 2025] [:error] [pid 60649:tid 60673] [client 48.210.64.188:15952] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTwRxFOcUGKU3sgfHP_5aAAAARU"]
[Fri Dec 12 20:59:50.118245 2025] [:error] [pid 27950:tid 27959] [client 48.210.64.188:7106] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aTwRxoVLRvkrdsSc1F2eNwAAAUc"]
[Fri Dec 12 20:59:51.052203 2025] [:error] [pid 27950:tid 27966] [client 48.210.64.188:15893] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aTwRx4VLRvkrdsSc1F2eOAAAAU4"]
[Fri Dec 12 20:59:52.530885 2025] [:error] [pid 26520:tid 26565] [client 48.210.64.188:15972] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aTwRyEG_frlY5vNXu_D6wQAAAE0"]
[Fri Dec 12 20:59:53.239319 2025] [:error] [pid 26521:tid 26589] [client 48.210.64.188:15895] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTwRyZdhcAPU617AKTB-RwAAAIo"]
[Fri Dec 12 20:59:55.909507 2025] [:error] [pid 26520:tid 26566] [client 48.210.64.188:15912] [client 48.210.64.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aTwRy0G_frlY5vNXu_D6yAAAAE4"]
[Fri Dec 12 20:59:57.225411 2025] [:error] [pid 26521:tid 26584] [client 48.210.64.188:15932] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shoyo.php"] [unique_id "aTwRzZdhcAPU617AKTB-UQAAAIU"]
[Fri Dec 12 20:59:58.980523 2025] [:error] [pid 27950:tid 27952] [client 48.210.64.188:15898] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shoyo.php"] [unique_id "aTwRzoVLRvkrdsSc1F2eQQAAAUA"]
[Fri Dec 12 20:59:59.683062 2025] [:error] [pid 27950:tid 27976] [client 48.210.64.188:7122] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shoyo.php"] [unique_id "aTwRz4VLRvkrdsSc1F2eRAAAAVg"]
[Fri Dec 12 21:00:00.810473 2025] [:error] [pid 26607:tid 26622] [client 48.210.64.188:7138] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shoyo.php"] [unique_id "aTwR0Mb_b0tOEWTL2KmcewAAAM0"]
[Fri Dec 12 21:00:01.735834 2025] [:error] [pid 26521:tid 26585] [client 48.210.64.188:15988] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "aTwR0ZdhcAPU617AKTB-agAAAIY"]
[Fri Dec 12 21:00:03.240169 2025] [:error] [pid 26607:tid 26626] [client 48.210.64.188:15903] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "aTwR08b_b0tOEWTL2KmcfgAAANE"]
[Fri Dec 12 21:00:04.371648 2025] [:error] [pid 27950:tid 27972] [client 48.210.64.188:7146] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "aTwR1IVLRvkrdsSc1F2eRwAAAVQ"]
[Fri Dec 12 21:00:05.533042 2025] [:error] [pid 27950:tid 27954] [client 48.210.64.188:15982] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "aTwR1YVLRvkrdsSc1F2eSAAAAUI"]
[Fri Dec 12 21:00:06.927494 2025] [:error] [pid 26607:tid 26623] [client 48.210.64.188:15916] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/waq.php"] [unique_id "aTwR1sb_b0tOEWTL2KmcgAAAAM4"]
[Fri Dec 12 21:00:08.090371 2025] [:error] [pid 26607:tid 26632] [client 48.210.64.188:7135] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/waq.php"] [unique_id "aTwR2Mb_b0tOEWTL2KmcggAAANc"]
[Fri Dec 12 21:00:10.911822 2025] [:error] [pid 26607:tid 26629] [client 48.210.64.188:7159] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/waq.php"] [unique_id "aTwR2sb_b0tOEWTL2KmciQAAANQ"]
[Fri Dec 12 21:00:11.862470 2025] [:error] [pid 60649:tid 60667] [client 48.210.64.188:15892] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/waq.php"] [unique_id "aTwR21OcUGKU3sgfHP_5lAAAAQ8"]
[Fri Dec 12 21:00:15.505036 2025] [:error] [pid 55760:tid 55765] [client 48.210.64.188:15875] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yyy.php"] [unique_id "aTwR31ObDQlftFDyGawQXQAAAYM"]
[Fri Dec 12 21:00:17.041989 2025] [:error] [pid 27950:tid 27967] [client 48.210.64.188:15971] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yyy.php"] [unique_id "aTwR4YVLRvkrdsSc1F2eTwAAAU8"]
[Fri Dec 12 21:00:19.020201 2025] [:error] [pid 60649:tid 60670] [client 48.210.64.188:15921] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yyy.php"] [unique_id "aTwR41OcUGKU3sgfHP_5lgAAARI"]
[Fri Dec 12 21:00:20.580384 2025] [:error] [pid 26521:tid 26597] [client 48.210.64.188:7110] [client 48.210.64.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yyy.php"] [unique_id "aTwR5JdhcAPU617AKTB-cQAAAJI"]
[Fri Dec 12 22:18:04.464751 2025] [:error] [pid 26520:tid 26570] [client 4.189.145.82:17656] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aTwkHEG_frlY5vNXu_AJpAAAAFI"]
[Fri Dec 12 22:18:04.829730 2025] [:error] [pid 55760:tid 55782] [client 4.189.145.82:17567] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aTwkHFObDQlftFDyGawnBAAAAZQ"]
[Fri Dec 12 22:18:13.978063 2025] [:error] [pid 26607:tid 26625] [client 4.189.145.82:17663] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aTwkJcb_b0tOEWTL2KmsOgAAANA"]
[Fri Dec 12 22:18:28.913905 2025] [:error] [pid 27950:tid 27971] [client 4.189.145.82:17562] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp.php"] [unique_id "aTwkNIVLRvkrdsSc1F2ydQAAAVM"]
[Fri Dec 12 22:18:33.135293 2025] [:error] [pid 26607:tid 26630] [client 4.189.145.82:17542] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aTwkOcb_b0tOEWTL2KmsYAAAANU"]
[Fri Dec 12 22:18:33.372122 2025] [:error] [pid 26520:tid 26558] [client 4.189.145.82:6103] [client 4.189.145.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.145.82, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/network/chosen.php/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aTwkOUG_frlY5vNXu_AJvQAAAEY"]
[Fri Dec 12 22:18:51.637806 2025] [:error] [pid 26520:tid 26556] [client 4.189.145.82:6103] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "aTwkS0G_frlY5vNXu_AJ3AAAAEQ"]
[Fri Dec 12 22:18:55.688240 2025] [:error] [pid 55760:tid 55769] [client 4.189.145.82:17557] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aTwkT1ObDQlftFDyGawnVwAAAYc"]
[Fri Dec 12 22:19:00.528855 2025] [:error] [pid 26521:tid 26602] [client 4.189.145.82:17609] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTwkVJdhcAPU617AKTCbOwAAAJc"]
[Fri Dec 12 22:19:00.835059 2025] [:error] [pid 60649:tid 60656] [client 4.189.145.82:17605] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/vuln.php"] [unique_id "aTwkVFOcUGKU3sgfHP8JewAAAQQ"]
[Fri Dec 12 22:19:01.067844 2025] [:error] [pid 26607:tid 26627] [client 4.189.145.82:17631] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTwkVcb_b0tOEWTL2KmseQAAANI"]
[Fri Dec 12 22:19:01.622861 2025] [:error] [pid 55760:tid 55783] [client 4.189.145.82:17563] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTwkVVObDQlftFDyGawnXAAAAZU"]
[Fri Dec 12 22:19:02.010682 2025] [:error] [pid 26607:tid 26616] [client 4.189.145.82:17536] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTwkVsb_b0tOEWTL2KmsegAAAMc"]
[Fri Dec 12 22:19:02.366093 2025] [:error] [pid 27950:tid 27961] [client 4.189.145.82:6119] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTwkVoVLRvkrdsSc1F2ypgAAAUk"]
[Fri Dec 12 22:19:02.647750 2025] [:error] [pid 26519:tid 26525] [client 4.189.145.82:17558] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTwkVs8TRgSGOeWqEhcAxwAAAAI"]
[Fri Dec 12 22:19:02.912209 2025] [:error] [pid 26521:tid 26601] [client 4.189.145.82:6101] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTwkVpdhcAPU617AKTCbQAAAAJY"]
[Fri Dec 12 22:19:03.220096 2025] [:error] [pid 27950:tid 27959] [client 4.189.145.82:17652] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/404.php"] [unique_id "aTwkV4VLRvkrdsSc1F2yqAAAAUc"]
[Fri Dec 12 22:19:03.500937 2025] [:error] [pid 26520:tid 26556] [client 4.189.145.82:17553] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/404.php"] [unique_id "aTwkV0G_frlY5vNXu_AJ5AAAAEQ"]
[Fri Dec 12 22:19:03.771521 2025] [:error] [pid 27950:tid 27953] [client 4.189.145.82:17566] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/404.php"] [unique_id "aTwkV4VLRvkrdsSc1F2yqQAAAUE"]
[Fri Dec 12 22:19:04.046239 2025] [:error] [pid 26521:tid 26603] [client 4.189.145.82:17606] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/404.php"] [unique_id "aTwkWJdhcAPU617AKTCbQwAAAJg"]
[Fri Dec 12 22:19:04.354060 2025] [:error] [pid 26520:tid 26570] [client 4.189.145.82:17644] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTwkWEG_frlY5vNXu_AJ5gAAAFI"]
[Fri Dec 12 22:19:04.628104 2025] [:error] [pid 26521:tid 26586] [client 4.189.145.82:17560] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTwkWJdhcAPU617AKTCbRgAAAIc"]
[Fri Dec 12 22:19:04.893640 2025] [:error] [pid 26607:tid 26630] [client 4.189.145.82:17555] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTwkWMb_b0tOEWTL2KmsfAAAANU"]
[Fri Dec 12 22:19:05.188528 2025] [:error] [pid 26519:tid 26545] [client 4.189.145.82:17626] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTwkWc8TRgSGOeWqEhcAyQAAABY"]
[Fri Dec 12 22:19:05.448047 2025] [:error] [pid 60649:tid 60653] [client 4.189.145.82:17659] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTwkWVOcUGKU3sgfHP8JfgAAAQE"]
[Fri Dec 12 22:19:05.689712 2025] [:error] [pid 26521:tid 26595] [client 4.189.145.82:17662] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTwkWZdhcAPU617AKTCbSQAAAJA"]
[Fri Dec 12 22:19:05.931899 2025] [:error] [pid 60649:tid 60672] [client 4.189.145.82:17545] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTwkWVOcUGKU3sgfHP8JgAAAARQ"]
[Fri Dec 12 22:19:06.168369 2025] [:error] [pid 27950:tid 27966] [client 4.189.145.82:17585] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aTwkWoVLRvkrdsSc1F2yqwAAAU4"]
[Fri Dec 12 22:19:06.403999 2025] [:error] [pid 26521:tid 26579] [client 4.189.145.82:17600] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTwkWpdhcAPU617AKTCbTAAAAIA"]
[Fri Dec 12 22:19:06.652352 2025] [:error] [pid 26519:tid 26547] [client 4.189.145.82:17565] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTwkWs8TRgSGOeWqEhcAygAAABg"]
[Fri Dec 12 22:19:06.882271 2025] [:error] [pid 26519:tid 26544] [client 4.189.145.82:17547] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTwkWs8TRgSGOeWqEhcAywAAABU"]
[Fri Dec 12 22:19:07.145522 2025] [:error] [pid 26521:tid 26581] [client 4.189.145.82:6094] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTwkW5dhcAPU617AKTCbUQAAAII"]
[Fri Dec 12 22:19:07.383256 2025] [:error] [pid 26519:tid 26535] [client 4.189.145.82:17621] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTwkW88TRgSGOeWqEhcAzQAAAAw"]
[Fri Dec 12 22:19:07.621645 2025] [:error] [pid 26607:tid 26611] [client 4.189.145.82:17604] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTwkW8b_b0tOEWTL2KmsfgAAAMI"]
[Fri Dec 12 22:19:07.994511 2025] [:error] [pid 55760:tid 55774] [client 4.189.145.82:17549] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTwkW1ObDQlftFDyGawnYAAAAYw"]
[Fri Dec 12 22:19:08.454415 2025] [:error] [pid 27950:tid 27964] [client 4.189.145.82:17622] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTwkXIVLRvkrdsSc1F2yrgAAAUw"]
[Fri Dec 12 22:19:08.959672 2025] [:error] [pid 26520:tid 26572] [client 4.189.145.82:17537] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12wudscz.php"] [unique_id "aTwkXEG_frlY5vNXu_AJ5wAAAFQ"]
[Fri Dec 12 22:19:09.263186 2025] [:error] [pid 26520:tid 26558] [client 4.189.145.82:17627] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12wudscz.php"] [unique_id "aTwkXUG_frlY5vNXu_AJ6AAAAEY"]
[Fri Dec 12 22:19:09.509784 2025] [:error] [pid 26520:tid 26557] [client 4.189.145.82:17645] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12wudscz.php"] [unique_id "aTwkXUG_frlY5vNXu_AJ6QAAAEU"]
[Fri Dec 12 22:19:09.781210 2025] [:error] [pid 26520:tid 26565] [client 4.189.145.82:17552] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12wudscz.php"] [unique_id "aTwkXUG_frlY5vNXu_AJ6gAAAE0"]
[Fri Dec 12 22:19:10.082093 2025] [:error] [pid 26607:tid 26615] [client 4.189.145.82:17571] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTwkXsb_b0tOEWTL2KmsggAAAMY"]
[Fri Dec 12 22:19:10.466753 2025] [:error] [pid 26521:tid 26592] [client 4.189.145.82:17561] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTwkXpdhcAPU617AKTCbWQAAAI0"]
[Fri Dec 12 22:19:11.404636 2025] [:error] [pid 26607:tid 26627] [client 4.189.145.82:17591] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTwkX8b_b0tOEWTL2KmshgAAANI"]
[Fri Dec 12 22:19:11.732166 2025] [:error] [pid 26520:tid 26560] [client 4.189.145.82:17647] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTwkX0G_frlY5vNXu_AJ7AAAAEg"]
[Fri Dec 12 22:19:11.995131 2025] [:error] [pid 26520:tid 26555] [client 4.189.145.82:17613] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTwkX0G_frlY5vNXu_AJ7QAAAEM"]
[Fri Dec 12 22:19:12.278653 2025] [:error] [pid 26521:tid 26594] [client 4.189.145.82:17636] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTwkYJdhcAPU617AKTCbXAAAAI8"]
[Fri Dec 12 22:19:12.602371 2025] [:error] [pid 27950:tid 27974] [client 4.189.145.82:6114] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTwkYIVLRvkrdsSc1F2yswAAAVY"]
[Fri Dec 12 22:19:12.873072 2025] [:error] [pid 26519:tid 26537] [client 4.189.145.82:6082] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTwkYM8TRgSGOeWqEhcAzwAAAA4"]
[Fri Dec 12 22:19:13.112809 2025] [:error] [pid 26519:tid 26529] [client 4.189.145.82:17643] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwkYc8TRgSGOeWqEhcA0AAAAAY"]
[Fri Dec 12 22:19:13.356018 2025] [:error] [pid 55760:tid 55783] [client 4.189.145.82:17576] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwkYVObDQlftFDyGawnYgAAAZU"]
[Fri Dec 12 22:19:13.647671 2025] [:error] [pid 26520:tid 26569] [client 4.189.145.82:17607] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwkYUG_frlY5vNXu_AJ7gAAAFE"]
[Fri Dec 12 22:19:13.929387 2025] [:error] [pid 26521:tid 26583] [client 4.189.145.82:17540] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwkYZdhcAPU617AKTCbXwAAAIQ"]
[Fri Dec 12 22:19:14.397252 2025] [:error] [pid 26519:tid 26534] [client 4.189.145.82:17650] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aTwkYs8TRgSGOeWqEhcA0gAAAAs"]
[Fri Dec 12 22:19:15.069324 2025] [:error] [pid 26519:tid 26531] [client 4.189.145.82:17550] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTwkY88TRgSGOeWqEhcA0wAAAAg"]
[Fri Dec 12 22:19:15.420786 2025] [:error] [pid 26520:tid 26554] [client 4.189.145.82:17635] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTwkY0G_frlY5vNXu_AJ7wAAAEI"]
[Fri Dec 12 22:19:15.705469 2025] [:error] [pid 26607:tid 26629] [client 4.189.145.82:17641] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTwkY8b_b0tOEWTL2KmsiQAAANQ"]
[Fri Dec 12 22:19:16.055910 2025] [:error] [pid 26607:tid 26632] [client 4.189.145.82:17586] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTwkZMb_b0tOEWTL2KmsiwAAANc"]
[Fri Dec 12 22:19:16.326416 2025] [:error] [pid 26520:tid 26567] [client 4.189.145.82:17633] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTwkZEG_frlY5vNXu_AJ8AAAAE8"]
[Fri Dec 12 22:19:16.615846 2025] [:error] [pid 26521:tid 26595] [client 4.189.145.82:17649] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aTwkZJdhcAPU617AKTCbYwAAAJA"]
[Fri Dec 12 22:19:16.856702 2025] [:error] [pid 26607:tid 26625] [client 4.189.145.82:6087] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/about.php"] [unique_id "aTwkZMb_b0tOEWTL2KmsjQAAANA"]
[Fri Dec 12 22:19:17.087218 2025] [:error] [pid 27950:tid 27956] [client 4.189.145.82:17602] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/about.php"] [unique_id "aTwkZYVLRvkrdsSc1F2yuQAAAUQ"]
[Fri Dec 12 22:19:17.366954 2025] [:error] [pid 26607:tid 26622] [client 4.189.145.82:17596] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/about.php"] [unique_id "aTwkZcb_b0tOEWTL2KmsjwAAAM0"]
[Fri Dec 12 22:19:17.603641 2025] [:error] [pid 60649:tid 60656] [client 4.189.145.82:6107] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTwkZVOcUGKU3sgfHP8JhwAAAQQ"]
[Fri Dec 12 22:19:17.889877 2025] [:error] [pid 26521:tid 26580] [client 4.189.145.82:17629] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTwkZZdhcAPU617AKTCbZQAAAIE"]
[Fri Dec 12 22:19:18.158590 2025] [:error] [pid 26520:tid 26570] [client 4.189.145.82:17658] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTwkZkG_frlY5vNXu_AJ8gAAAFI"]
[Fri Dec 12 22:19:18.568931 2025] [:error] [pid 26521:tid 26600] [client 4.189.145.82:17632] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aTwkZpdhcAPU617AKTCbZwAAAJU"]
[Fri Dec 12 22:19:18.827484 2025] [:error] [pid 26521:tid 26591] [client 4.189.145.82:17642] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTwkZpdhcAPU617AKTCbaAAAAIw"]
[Fri Dec 12 22:19:19.185316 2025] [:error] [pid 26521:tid 26587] [client 4.189.145.82:17544] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTwkZ5dhcAPU617AKTCbaQAAAIg"]
[Fri Dec 12 22:19:19.432589 2025] [:error] [pid 26521:tid 26592] [client 4.189.145.82:6106] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTwkZ5dhcAPU617AKTCbagAAAI0"]
[Fri Dec 12 22:19:19.741392 2025] [:error] [pid 26521:tid 26599] [client 4.189.145.82:5831] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTwkZ5dhcAPU617AKTCbawAAAJQ"]
[Fri Dec 12 22:19:20.024535 2025] [:error] [pid 27950:tid 27952] [client 4.189.145.82:17573] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTwkaIVLRvkrdsSc1F2yugAAAUA"]
[Fri Dec 12 22:19:20.306291 2025] [:error] [pid 26521:tid 26585] [client 4.189.145.82:6093] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTwkaJdhcAPU617AKTCbbgAAAIY"]
[Fri Dec 12 22:19:20.655789 2025] [:error] [pid 26519:tid 26535] [client 4.189.145.82:17621] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTwkaM8TRgSGOeWqEhcA1gAAAAw"]
[Fri Dec 12 22:19:20.920458 2025] [:error] [pid 26521:tid 26590] [client 4.189.145.82:17581] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTwkaJdhcAPU617AKTCbcQAAAIs"]
[Fri Dec 12 22:19:21.219146 2025] [:error] [pid 26521:tid 26581] [client 4.189.145.82:17637] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aTwkaZdhcAPU617AKTCbcgAAAII"]
[Fri Dec 12 22:19:21.535144 2025] [:error] [pid 60649:tid 60672] [client 4.189.145.82:17620] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTwkaVOcUGKU3sgfHP8JiwAAARQ"]
[Fri Dec 12 22:19:21.774866 2025] [:error] [pid 60649:tid 60655] [client 4.189.145.82:6135] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTwkaVOcUGKU3sgfHP8JjAAAAQM"]
[Fri Dec 12 22:19:22.064231 2025] [:error] [pid 26521:tid 26593] [client 4.189.145.82:17614] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTwkapdhcAPU617AKTCbdQAAAI4"]
[Fri Dec 12 22:19:22.299222 2025] [:error] [pid 26521:tid 26596] [client 4.189.145.82:17559] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTwkapdhcAPU617AKTCbdwAAAJE"]
[Fri Dec 12 22:19:22.612002 2025] [:error] [pid 26521:tid 26598] [client 4.189.145.82:17640] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aTwkapdhcAPU617AKTCbeAAAAJM"]
[Fri Dec 12 22:19:22.959742 2025] [:error] [pid 26521:tid 26585] [client 4.189.145.82:17655] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTwkapdhcAPU617AKTCbfAAAAIY"]
[Fri Dec 12 22:19:23.204663 2025] [:error] [pid 26521:tid 26595] [client 4.189.145.82:17554] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTwka5dhcAPU617AKTCbfgAAAJA"]
[Fri Dec 12 22:19:23.528784 2025] [:error] [pid 55760:tid 55768] [client 4.189.145.82:17657] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTwka1ObDQlftFDyGawnZgAAAYY"]
[Fri Dec 12 22:19:23.772424 2025] [:error] [pid 26521:tid 26597] [client 4.189.145.82:17589] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aTwka5dhcAPU617AKTCbgAAAAJI"]
[Fri Dec 12 22:19:24.106034 2025] [:error] [pid 26521:tid 26593] [client 4.189.145.82:17653] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTwkbJdhcAPU617AKTCbggAAAI4"]
[Fri Dec 12 22:19:24.358065 2025] [:error] [pid 55760:tid 55781] [client 4.189.145.82:6138] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTwkbFObDQlftFDyGawnaAAAAZM"]
[Fri Dec 12 22:19:24.626597 2025] [:error] [pid 55760:tid 55763] [client 4.189.145.82:6112] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTwkbFObDQlftFDyGawnawAAAYE"]
[Fri Dec 12 22:19:24.880359 2025] [:error] [pid 26520:tid 26572] [client 4.189.145.82:17625] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aTwkbEG_frlY5vNXu_AJ9wAAAFQ"]
[Fri Dec 12 22:19:25.111076 2025] [:error] [pid 26520:tid 26558] [client 4.189.145.82:5868] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTwkbUG_frlY5vNXu_AJ-AAAAEY"]
[Fri Dec 12 22:19:25.367629 2025] [:error] [pid 26520:tid 26565] [client 4.189.145.82:17651] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTwkbUG_frlY5vNXu_AJ-QAAAE0"]
[Fri Dec 12 22:19:25.607350 2025] [:error] [pid 26520:tid 26560] [client 4.189.145.82:17634] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTwkbUG_frlY5vNXu_AJ-wAAAEg"]
[Fri Dec 12 22:19:25.898720 2025] [:error] [pid 26520:tid 26562] [client 4.189.145.82:17590] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTwkbUG_frlY5vNXu_AJ_gAAAEo"]
[Fri Dec 12 22:19:26.176810 2025] [:error] [pid 26520:tid 26569] [client 4.189.145.82:17624] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/network.php"] [unique_id "aTwkbkG_frlY5vNXu_AJ_wAAAFE"]
[Fri Dec 12 22:19:26.403664 2025] [:error] [pid 26520:tid 26567] [client 4.189.145.82:5862] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/network.php"] [unique_id "aTwkbkG_frlY5vNXu_AKAgAAAE8"]
[Fri Dec 12 22:19:26.657954 2025] [:error] [pid 26520:tid 26574] [client 4.189.145.82:6128] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/network.php"] [unique_id "aTwkbkG_frlY5vNXu_AKAwAAAFY"]
[Fri Dec 12 22:19:27.032125 2025] [:error] [pid 55760:tid 55765] [client 4.189.145.82:17639] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/network.php"] [unique_id "aTwkb1ObDQlftFDyGawncAAAAYM"]
[Fri Dec 12 22:19:27.420655 2025] [:error] [pid 26521:tid 26602] [client 4.189.145.82:17539] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTwkb5dhcAPU617AKTCbiwAAAJc"]
[Fri Dec 12 22:19:27.691353 2025] [:error] [pid 60649:tid 60663] [client 4.189.145.82:17570] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTwkb1OcUGKU3sgfHP8JjwAAAQs"]
[Fri Dec 12 22:19:27.937791 2025] [:error] [pid 26520:tid 26571] [client 4.189.145.82:6133] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTwkb0G_frlY5vNXu_AKBAAAAFM"]
[Fri Dec 12 22:19:28.486156 2025] [:error] [pid 26520:tid 26559] [client 4.189.145.82:6134] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTwkcEG_frlY5vNXu_AKBQAAAEc"]
[Fri Dec 12 22:19:29.256357 2025] [:error] [pid 26520:tid 26576] [client 4.189.145.82:6083] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTwkcUG_frlY5vNXu_AKCQAAAFg"]
[Fri Dec 12 22:19:29.500694 2025] [:error] [pid 26520:tid 26563] [client 4.189.145.82:17611] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTwkcUG_frlY5vNXu_AKCgAAAEs"]
[Fri Dec 12 22:19:29.741309 2025] [:error] [pid 26607:tid 26624] [client 4.189.145.82:17616] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTwkccb_b0tOEWTL2KmspgAAAM8"]
[Fri Dec 12 22:19:29.983035 2025] [:error] [pid 26521:tid 26597] [client 4.189.145.82:17583] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTwkcZdhcAPU617AKTCbjQAAAJI"]
[Fri Dec 12 22:19:30.239321 2025] [:error] [pid 26521:tid 26593] [client 4.189.145.82:17587] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTwkcpdhcAPU617AKTCbjgAAAI4"]
[Fri Dec 12 22:19:30.495855 2025] [:error] [pid 26520:tid 26573] [client 4.189.145.82:17615] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTwkckG_frlY5vNXu_AKDAAAAFU"]
[Fri Dec 12 22:19:30.733010 2025] [:error] [pid 27950:tid 27969] [client 4.189.145.82:6090] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTwkcoVLRvkrdsSc1F2yvwAAAVE"]
[Fri Dec 12 22:19:31.056436 2025] [:error] [pid 26519:tid 26526] [client 4.189.145.82:17546] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTwkc88TRgSGOeWqEhcA3wAAAAM"]
[Fri Dec 12 22:19:31.322853 2025] [:error] [pid 26519:tid 26531] [client 4.189.145.82:17588] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aTwkc88TRgSGOeWqEhcA4QAAAAg"]
[Fri Dec 12 22:19:31.728969 2025] [:error] [pid 26520:tid 26552] [client 4.189.145.82:6125] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aTwkc0G_frlY5vNXu_AKDgAAAEA"]
[Fri Dec 12 22:19:31.962207 2025] [:error] [pid 27950:tid 27976] [client 4.189.145.82:17574] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aTwkc4VLRvkrdsSc1F2ywgAAAVg"]
[Fri Dec 12 22:19:32.197958 2025] [:error] [pid 55760:tid 55764] [client 4.189.145.82:6132] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aTwkdFObDQlftFDyGawndgAAAYI"]
[Fri Dec 12 22:19:32.428427 2025] [:error] [pid 26520:tid 26567] [client 4.189.145.82:6116] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aTwkdEG_frlY5vNXu_AKEAAAAE8"]
[Fri Dec 12 22:19:32.699385 2025] [:error] [pid 27950:tid 27974] [client 4.189.145.82:17638] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aTwkdIVLRvkrdsSc1F2yxwAAAVY"]
[Fri Dec 12 22:19:32.970852 2025] [:error] [pid 26520:tid 26574] [client 4.189.145.82:17584] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aTwkdEG_frlY5vNXu_AKEgAAAFY"]
[Fri Dec 12 22:19:33.214539 2025] [:error] [pid 27950:tid 27954] [client 4.189.145.82:17579] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTwkdYVLRvkrdsSc1F2yzAAAAUI"]
[Fri Dec 12 22:19:33.488338 2025] [:error] [pid 55760:tid 55785] [client 4.189.145.82:17582] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTwkdVObDQlftFDyGawneQAAAZc"]
[Fri Dec 12 22:19:33.725385 2025] [:error] [pid 26520:tid 26570] [client 4.189.145.82:6136] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTwkdUG_frlY5vNXu_AKFAAAAFI"]
[Fri Dec 12 22:19:34.013784 2025] [:error] [pid 26519:tid 26523] [client 4.189.145.82:17541] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aTwkds8TRgSGOeWqEhcA5gAAAAA"]
[Fri Dec 12 22:19:34.318912 2025] [:error] [pid 26607:tid 26632] [client 4.189.145.82:17594] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aTwkdsb_b0tOEWTL2KmsqAAAANc"]
[Fri Dec 12 22:19:34.604240 2025] [:error] [pid 55760:tid 55778] [client 4.189.145.82:17543] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aTwkdlObDQlftFDyGawnfAAAAZA"]
[Fri Dec 12 22:19:34.848660 2025] [:error] [pid 26521:tid 26591] [client 4.189.145.82:6108] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aTwkdpdhcAPU617AKTCblAAAAIw"]
[Fri Dec 12 22:19:35.093476 2025] [:error] [pid 26519:tid 26530] [client 4.189.145.82:6085] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTwkd88TRgSGOeWqEhcA6AAAAAc"]
[Fri Dec 12 22:19:35.344636 2025] [:error] [pid 26519:tid 26537] [client 4.189.145.82:6096] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTwkd88TRgSGOeWqEhcA6gAAAA4"]
[Fri Dec 12 22:19:35.576298 2025] [:error] [pid 26519:tid 26546] [client 4.189.145.82:5838] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTwkd88TRgSGOeWqEhcA7AAAABc"]
[Fri Dec 12 22:19:35.924989 2025] [:error] [pid 60649:tid 60670] [client 4.189.145.82:17561] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTwkd1OcUGKU3sgfHP8JlQAAARI"]
[Fri Dec 12 22:19:36.201838 2025] [:error] [pid 55760:tid 55784] [client 4.189.145.82:6092] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTwkeFObDQlftFDyGawnfgAAAZY"]
[Fri Dec 12 22:19:36.507648 2025] [:error] [pid 60649:tid 60653] [client 4.189.145.82:6099] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTwkeFOcUGKU3sgfHP8JlwAAAQE"]
[Fri Dec 12 22:19:36.743500 2025] [:error] [pid 26521:tid 26603] [client 4.189.145.82:6127] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTwkeJdhcAPU617AKTCbmQAAAJg"]
[Fri Dec 12 22:19:37.014231 2025] [:error] [pid 26521:tid 26588] [client 4.189.145.82:6105] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aTwkeZdhcAPU617AKTCbmwAAAIk"]
[Fri Dec 12 22:19:37.583909 2025] [:error] [pid 60649:tid 60674] [client 4.189.145.82:6089] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aTwkeVOcUGKU3sgfHP8JmwAAARY"]
[Fri Dec 12 22:19:38.165767 2025] [:error] [pid 27950:tid 27971] [client 4.189.145.82:17654] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aTwkeoVLRvkrdsSc1F2y1AAAAVM"]
[Fri Dec 12 22:19:38.436191 2025] [:error] [pid 27950:tid 27952] [client 4.189.145.82:6080] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aTwkeoVLRvkrdsSc1F2y1QAAAUA"]
[Fri Dec 12 22:19:38.755931 2025] [:error] [pid 27950:tid 27975] [client 4.189.145.82:6139] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aTwkeoVLRvkrdsSc1F2y1gAAAVc"]
[Fri Dec 12 22:19:39.508738 2025] [:error] [pid 26521:tid 26591] [client 4.189.145.82:17538] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/item.php"] [unique_id "aTwke5dhcAPU617AKTCbogAAAIw"]
[Fri Dec 12 22:19:39.778218 2025] [:error] [pid 26519:tid 26527] [client 4.189.145.82:17551] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/item.php"] [unique_id "aTwke88TRgSGOeWqEhcA8AAAAAQ"]
[Fri Dec 12 22:19:40.008688 2025] [:error] [pid 26520:tid 26568] [client 4.189.145.82:6102] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/item.php"] [unique_id "aTwkfEG_frlY5vNXu_AKGwAAAFA"]
[Fri Dec 12 22:19:40.726375 2025] [:error] [pid 27950:tid 27955] [client 4.189.145.82:17619] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/item.php"] [unique_id "aTwkfIVLRvkrdsSc1F2y2QAAAUM"]
[Fri Dec 12 22:19:41.089678 2025] [:error] [pid 26521:tid 26588] [client 4.189.145.82:6129] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aTwkfZdhcAPU617AKTCbqAAAAIk"]
[Fri Dec 12 22:19:41.349616 2025] [:error] [pid 60649:tid 60658] [client 4.189.145.82:6091] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aTwkfVOcUGKU3sgfHP8JnwAAAQY"]
[Fri Dec 12 22:19:41.590233 2025] [:error] [pid 55760:tid 55771] [client 4.189.145.82:17646] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aTwkfVObDQlftFDyGawngQAAAYk"]
[Fri Dec 12 22:19:41.841365 2025] [:error] [pid 26519:tid 26535] [client 4.189.145.82:17580] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aTwkfc8TRgSGOeWqEhcA8wAAAAw"]
[Fri Dec 12 22:19:42.096719 2025] [:error] [pid 27950:tid 27963] [client 4.189.145.82:6131] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aTwkfoVLRvkrdsSc1F2y3AAAAUs"]
[Fri Dec 12 22:19:42.543221 2025] [:error] [pid 55760:tid 55766] [client 4.189.145.82:6121] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aTwkflObDQlftFDyGawngwAAAYQ"]
[Fri Dec 12 22:19:43.170238 2025] [:error] [pid 26521:tid 26589] [client 4.189.145.82:5855] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aTwkf5dhcAPU617AKTCbqwAAAIo"]
[Fri Dec 12 22:19:43.409248 2025] [:error] [pid 55760:tid 55776] [client 4.189.145.82:6100] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aTwkf1ObDQlftFDyGawnhwAAAY4"]
[Fri Dec 12 22:19:43.637804 2025] [:error] [pid 26521:tid 26580] [client 4.189.145.82:17618] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aTwkf5dhcAPU617AKTCbrgAAAIE"]
[Fri Dec 12 22:19:43.914464 2025] [:error] [pid 27950:tid 27967] [client 4.189.145.82:17612] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aTwkf4VLRvkrdsSc1F2y3gAAAU8"]
[Fri Dec 12 22:19:44.150663 2025] [:error] [pid 27950:tid 27971] [client 4.189.145.82:6118] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aTwkgIVLRvkrdsSc1F2y3wAAAVM"]
[Fri Dec 12 22:19:44.382276 2025] [:error] [pid 26520:tid 26559] [client 4.189.145.82:5825] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aTwkgEG_frlY5vNXu_AKIAAAAEc"]
[Fri Dec 12 22:19:44.666587 2025] [:error] [pid 27950:tid 27965] [client 4.189.145.82:17642] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/xp.php"] [unique_id "aTwkgIVLRvkrdsSc1F2y4gAAAU0"]
[Fri Dec 12 22:19:44.910504 2025] [:error] [pid 27950:tid 27975] [client 4.189.145.82:17628] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/xp.php"] [unique_id "aTwkgIVLRvkrdsSc1F2y4wAAAVc"]
[Fri Dec 12 22:19:45.144063 2025] [:error] [pid 26520:tid 26572] [client 4.189.145.82:17599] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/xp.php"] [unique_id "aTwkgUG_frlY5vNXu_AKJAAAAFQ"]
[Fri Dec 12 22:19:45.685456 2025] [:error] [pid 26520:tid 26575] [client 4.189.145.82:6141] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/xp.php"] [unique_id "aTwkgUG_frlY5vNXu_AKJwAAAFc"]
[Fri Dec 12 22:19:46.127441 2025] [:error] [pid 26520:tid 26565] [client 4.189.145.82:6143] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aTwkgkG_frlY5vNXu_AKKQAAAE0"]
[Fri Dec 12 22:19:46.424808 2025] [:error] [pid 27950:tid 27973] [client 4.189.145.82:6104] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTwkgoVLRvkrdsSc1F2y5QAAAVU"]
[Fri Dec 12 22:19:46.775400 2025] [:error] [pid 26521:tid 26590] [client 4.189.145.82:5851] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTwkgpdhcAPU617AKTCbsgAAAIs"]
[Fri Dec 12 22:19:47.083902 2025] [:error] [pid 55760:tid 55783] [client 4.189.145.82:17623] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTwkg1ObDQlftFDyGawnjQAAAZU"]
[Fri Dec 12 22:19:47.361335 2025] [:error] [pid 27950:tid 27963] [client 4.189.145.82:17564] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTwkg4VLRvkrdsSc1F2y5gAAAUs"]
[Fri Dec 12 22:19:47.638840 2025] [:error] [pid 55760:tid 55768] [client 4.189.145.82:6088] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aTwkg1ObDQlftFDyGawnjgAAAYY"]
[Fri Dec 12 22:19:47.887175 2025] [:error] [pid 26521:tid 26597] [client 4.189.145.82:17593] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aTwkg5dhcAPU617AKTCbtgAAAJI"]
[Fri Dec 12 22:19:48.131409 2025] [:error] [pid 26521:tid 26601] [client 4.189.145.82:17572] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aTwkhJdhcAPU617AKTCbtwAAAJY"]
[Fri Dec 12 22:19:48.522904 2025] [:error] [pid 55760:tid 55772] [client 4.189.145.82:6084] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aTwkhFObDQlftFDyGawnkAAAAYo"]
[Fri Dec 12 22:19:48.753470 2025] [:error] [pid 27950:tid 27964] [client 4.189.145.82:5878] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTwkhIVLRvkrdsSc1F2y6QAAAUw"]
[Fri Dec 12 22:19:49.031911 2025] [:error] [pid 26521:tid 26589] [client 4.189.145.82:6111] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aTwkhZdhcAPU617AKTCbuQAAAIo"]
[Fri Dec 12 22:19:49.309847 2025] [:error] [pid 60649:tid 60676] [client 4.189.145.82:5829] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/style.php"] [unique_id "aTwkhVOcUGKU3sgfHP8JpQAAARg"]
[Fri Dec 12 22:19:49.591346 2025] [:error] [pid 26519:tid 26543] [client 4.189.145.82:5850] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/style.php"] [unique_id "aTwkhc8TRgSGOeWqEhcA9gAAABQ"]
[Fri Dec 12 22:19:49.832894 2025] [:error] [pid 27950:tid 27969] [client 4.189.145.82:6086] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/style.php"] [unique_id "aTwkhYVLRvkrdsSc1F2y6gAAAVE"]
[Fri Dec 12 22:19:50.081566 2025] [:error] [pid 27950:tid 27962] [client 4.189.145.82:6124] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/style.php"] [unique_id "aTwkhoVLRvkrdsSc1F2y6wAAAUo"]
[Fri Dec 12 22:19:50.367057 2025] [:error] [pid 60649:tid 60655] [client 4.189.145.82:5854] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTwkhlOcUGKU3sgfHP8JqAAAAQM"]
[Fri Dec 12 22:19:50.701114 2025] [:error] [pid 26521:tid 26592] [client 4.189.145.82:6137] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTwkhpdhcAPU617AKTCbvwAAAI0"]
[Fri Dec 12 22:19:50.949571 2025] [:error] [pid 26521:tid 26600] [client 4.189.145.82:17648] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTwkhpdhcAPU617AKTCbwQAAAJU"]
[Fri Dec 12 22:19:51.207158 2025] [:error] [pid 60649:tid 60662] [client 4.189.145.82:6022] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTwkh1OcUGKU3sgfHP8JqwAAAQo"]
[Fri Dec 12 22:19:51.565090 2025] [:error] [pid 60649:tid 60663] [client 4.189.145.82:6095] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aTwkh1OcUGKU3sgfHP8JrAAAAQs"]
[Fri Dec 12 22:19:51.813166 2025] [:error] [pid 60649:tid 60658] [client 4.189.145.82:5828] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aTwkh1OcUGKU3sgfHP8JrQAAAQY"]
[Fri Dec 12 22:19:52.050095 2025] [:error] [pid 26521:tid 26602] [client 4.189.145.82:5856] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aTwkiJdhcAPU617AKTCbxQAAAJc"]
[Fri Dec 12 22:19:52.299080 2025] [:error] [pid 60649:tid 60661] [client 4.189.145.82:5852] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aTwkiFOcUGKU3sgfHP8JsAAAAQk"]
[Fri Dec 12 22:19:52.563520 2025] [:error] [pid 26520:tid 26559] [client 4.189.145.82:6126] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aTwkiEG_frlY5vNXu_AKLAAAAEc"]
[Fri Dec 12 22:19:52.832503 2025] [:error] [pid 26520:tid 26553] [client 4.189.145.82:6038] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aTwkiEG_frlY5vNXu_AKLQAAAEE"]
[Fri Dec 12 22:19:53.816607 2025] [:error] [pid 27950:tid 27959] [client 4.189.145.82:17610] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTwkiYVLRvkrdsSc1F2y7QAAAUc"]
[Fri Dec 12 22:19:54.121170 2025] [:error] [pid 27950:tid 27958] [client 4.189.145.82:5874] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTwkioVLRvkrdsSc1F2y7gAAAUY"]
[Fri Dec 12 22:19:54.349170 2025] [:error] [pid 60649:tid 60659] [client 4.189.145.82:6140] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTwkilOcUGKU3sgfHP8JtQAAAQc"]
[Fri Dec 12 22:19:54.648172 2025] [:error] [pid 55760:tid 55784] [client 4.189.145.82:6021] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTwkilObDQlftFDyGawnmAAAAZY"]
[Fri Dec 12 22:19:54.945093 2025] [:error] [pid 26520:tid 26568] [client 4.189.145.82:5859] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aTwkikG_frlY5vNXu_AKLwAAAFA"]
[Fri Dec 12 22:19:55.192310 2025] [:error] [pid 26520:tid 26569] [client 4.189.145.82:6055] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aTwki0G_frlY5vNXu_AKMQAAAFE"]
[Fri Dec 12 22:19:55.434173 2025] [:error] [pid 26520:tid 26573] [client 4.189.145.82:5879] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aTwki0G_frlY5vNXu_AKMgAAAFU"]
[Fri Dec 12 22:19:55.675139 2025] [:error] [pid 60649:tid 60671] [client 4.189.145.82:6098] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aTwki1OcUGKU3sgfHP8JtwAAARM"]
[Fri Dec 12 22:19:55.947669 2025] [:error] [pid 26520:tid 26563] [client 4.189.145.82:17556] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aTwki0G_frlY5vNXu_AKNAAAAEs"]
[Fri Dec 12 22:19:56.209982 2025] [:error] [pid 27950:tid 27954] [client 4.189.145.82:17578] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aTwkjIVLRvkrdsSc1F2y7wAAAUI"]
[Fri Dec 12 22:19:56.515263 2025] [:error] [pid 27950:tid 27963] [client 4.189.145.82:6045] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aTwkjIVLRvkrdsSc1F2y8gAAAUs"]
[Fri Dec 12 22:19:57.302991 2025] [:error] [pid 27950:tid 27974] [client 4.189.145.82:5824] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aTwkjYVLRvkrdsSc1F2y9wAAAVY"]
[Fri Dec 12 22:19:57.568756 2025] [:error] [pid 60649:tid 60654] [client 4.189.145.82:5834] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTwkjVOcUGKU3sgfHP8JuwAAAQI"]
[Fri Dec 12 22:19:57.823898 2025] [:error] [pid 26519:tid 26531] [client 4.189.145.82:17592] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTwkjc8TRgSGOeWqEhcA-gAAAAg"]
[Fri Dec 12 22:20:29.011385 2025] [:error] [pid 55760:tid 55780] [client 4.189.145.82:5847] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/network.php"] [unique_id "aTwkrVObDQlftFDyGawn1QAAAZI"]
[Fri Dec 12 22:20:33.319910 2025] [:error] [pid 55760:tid 55785] [client 4.189.145.82:6110] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "aTwksVObDQlftFDyGawn3AAAAZc"]
[Fri Dec 12 22:20:41.921421 2025] [:error] [pid 26607:tid 26630] [client 4.189.145.82:17549] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "aTwkucb_b0tOEWTL2Kms2gAAANU"]
[Fri Dec 12 22:20:50.393678 2025] [:error] [pid 26521:tid 26598] [client 4.189.145.82:17597] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aTwkwpdhcAPU617AKTCcNAAAAJM"]
[Fri Dec 12 22:20:50.697985 2025] [:error] [pid 26521:tid 26583] [client 4.189.145.82:5843] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aTwkwpdhcAPU617AKTCcNgAAAIQ"]
[Fri Dec 12 22:20:50.951116 2025] [:error] [pid 27950:tid 27972] [client 4.189.145.82:5881] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aTwkwoVLRvkrdsSc1F2zNQAAAVQ"]
[Fri Dec 12 22:20:51.295404 2025] [:error] [pid 26520:tid 26556] [client 4.189.145.82:5836] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aTwkw0G_frlY5vNXu_AKbwAAAEQ"]
[Fri Dec 12 22:20:51.591890 2025] [:error] [pid 26520:tid 26575] [client 4.189.145.82:17548] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTwkw0G_frlY5vNXu_AKcQAAAFc"]
[Fri Dec 12 22:20:51.872695 2025] [:error] [pid 26520:tid 26570] [client 4.189.145.82:6028] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTwkw0G_frlY5vNXu_AKcgAAAFI"]
[Fri Dec 12 22:20:52.201398 2025] [:error] [pid 27950:tid 27966] [client 4.189.145.82:17569] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTwkxIVLRvkrdsSc1F2zOQAAAU4"]
[Fri Dec 12 22:20:52.459014 2025] [:error] [pid 26521:tid 26600] [client 4.189.145.82:6130] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTwkxJdhcAPU617AKTCcOwAAAJU"]
[Fri Dec 12 22:20:52.764524 2025] [:error] [pid 60649:tid 60664] [client 4.189.145.82:5869] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "aTwkxFOcUGKU3sgfHP8J9gAAAQw"]
[Fri Dec 12 22:20:53.098029 2025] [:error] [pid 26520:tid 26572] [client 4.189.145.82:5840] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aTwkxUG_frlY5vNXu_AKdAAAAFQ"]
[Fri Dec 12 22:20:53.366078 2025] [:error] [pid 26521:tid 26602] [client 4.189.145.82:6109] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwkxZdhcAPU617AKTCcPQAAAJc"]
[Fri Dec 12 22:20:53.646600 2025] [:error] [pid 27950:tid 27973] [client 4.189.145.82:5827] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwkxYVLRvkrdsSc1F2zQwAAAVU"]
[Fri Dec 12 22:20:53.914240 2025] [:error] [pid 55760:tid 55774] [client 4.189.145.82:5875] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwkxVObDQlftFDyGawn8QAAAYw"]
[Fri Dec 12 22:20:54.235614 2025] [:error] [pid 55760:tid 55784] [client 4.189.145.82:6142] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTwkxlObDQlftFDyGawn8gAAAZY"]
[Fri Dec 12 22:20:54.677863 2025] [:error] [pid 26519:tid 26532] [client 4.189.145.82:17660] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTwkxs8TRgSGOeWqEhcBIQAAAAk"]
[Fri Dec 12 22:20:54.944512 2025] [:error] [pid 60649:tid 60672] [client 4.189.145.82:5849] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTwkxlOcUGKU3sgfHP8J_gAAARQ"]
[Fri Dec 12 22:20:55.272127 2025] [:error] [pid 26521:tid 26587] [client 4.189.145.82:5765] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTwkx5dhcAPU617AKTCcRAAAAIg"]
[Fri Dec 12 22:20:55.648614 2025] [:error] [pid 60649:tid 60667] [client 4.189.145.82:5860] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aTwkx1OcUGKU3sgfHP8KAQAAAQ8"]
[Fri Dec 12 22:20:56.008302 2025] [:error] [pid 55760:tid 55781] [client 4.189.145.82:5830] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aTwkyFObDQlftFDyGawn9QAAAZM"]
[Fri Dec 12 22:20:56.412233 2025] [:error] [pid 55760:tid 55783] [client 4.189.145.82:6122] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aTwkyFObDQlftFDyGawn9gAAAZU"]
[Fri Dec 12 22:20:56.710048 2025] [:error] [pid 26519:tid 26527] [client 4.189.145.82:6019] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aTwkyM8TRgSGOeWqEhcBIgAAAAQ"]
[Fri Dec 12 22:20:56.982986 2025] [:error] [pid 26519:tid 26545] [client 4.189.145.82:6041] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aTwkyM8TRgSGOeWqEhcBIwAAABY"]
[Fri Dec 12 22:20:57.410998 2025] [:error] [pid 60649:tid 60668] [client 4.189.145.82:6031] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aTwkyVOcUGKU3sgfHP8KBgAAARA"]
[Fri Dec 12 22:20:57.716239 2025] [:error] [pid 27950:tid 27961] [client 4.189.145.82:6025] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/item.php"] [unique_id "aTwkyYVLRvkrdsSc1F2zUQAAAUk"]
[Fri Dec 12 22:20:58.083193 2025] [:error] [pid 26521:tid 26583] [client 4.189.145.82:6123] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTwkypdhcAPU617AKTCcSAAAAIQ"]
[Fri Dec 12 22:20:58.360677 2025] [:error] [pid 60649:tid 60657] [client 4.189.145.82:5848] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTwkylOcUGKU3sgfHP8KCQAAAQU"]
[Fri Dec 12 22:20:58.856771 2025] [:error] [pid 26521:tid 26597] [client 4.189.145.82:5883] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTwkypdhcAPU617AKTCcSgAAAJI"]
[Fri Dec 12 22:20:59.146270 2025] [:error] [pid 26519:tid 26530] [client 4.189.145.82:5865] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTwky88TRgSGOeWqEhcBKQAAAAc"]
[Fri Dec 12 22:20:59.465278 2025] [:error] [pid 26521:tid 26591] [client 4.189.145.82:17595] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTwky5dhcAPU617AKTCcTAAAAIw"]
[Fri Dec 12 22:20:59.791150 2025] [:error] [pid 55760:tid 55768] [client 4.189.145.82:17575] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTwky1ObDQlftFDyGawn-gAAAYY"]
[Fri Dec 12 22:21:00.236512 2025] [:error] [pid 55760:tid 55764] [client 4.189.145.82:6081] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTwkzFObDQlftFDyGawn_AAAAYI"]
[Fri Dec 12 22:21:00.485880 2025] [:error] [pid 26521:tid 26599] [client 4.189.145.82:5845] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTwkzJdhcAPU617AKTCcTwAAAJQ"]
[Fri Dec 12 22:21:00.851701 2025] [:error] [pid 26521:tid 26603] [client 4.189.145.82:5853] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTwkzJdhcAPU617AKTCcUgAAAJg"]
[Fri Dec 12 22:21:01.196386 2025] [:error] [pid 27950:tid 27955] [client 4.189.145.82:6017] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTwkzYVLRvkrdsSc1F2zVgAAAUM"]
[Fri Dec 12 22:21:01.523935 2025] [:error] [pid 27950:tid 27957] [client 4.189.145.82:5877] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTwkzYVLRvkrdsSc1F2zVwAAAUU"]
[Fri Dec 12 22:21:01.858491 2025] [:error] [pid 55760:tid 55776] [client 4.189.145.82:6070] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTwkzVObDQlftFDyGawoAQAAAY4"]
[Fri Dec 12 22:21:02.125431 2025] [:error] [pid 26520:tid 26563] [client 4.189.145.82:5785] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/link.php"] [unique_id "aTwkzkG_frlY5vNXu_AKiQAAAEs"]
[Fri Dec 12 22:21:02.438818 2025] [:error] [pid 55760:tid 55784] [client 4.189.145.82:5873] [client 4.189.145.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wlw/wp-login.php"] [unique_id "aTwkzlObDQlftFDyGawoAgAAAZY"]
[Fri Dec 12 22:21:02.872590 2025] [:error] [pid 27950:tid 27972] [client 4.189.145.82:6023] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTwkzoVLRvkrdsSc1F2zWQAAAVQ"]
[Fri Dec 12 22:21:03.188675 2025] [:error] [pid 60649:tid 60667] [client 4.189.145.82:5826] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTwkz1OcUGKU3sgfHP8KEAAAAQ8"]
[Fri Dec 12 22:21:03.530700 2025] [:error] [pid 60649:tid 60663] [client 4.189.145.82:5880] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTwkz1OcUGKU3sgfHP8KEgAAAQs"]
[Fri Dec 12 22:21:03.762035 2025] [:error] [pid 60649:tid 60664] [client 4.189.145.82:5832] [client 4.189.145.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aTwkz1OcUGKU3sgfHP8KFQAAAQw"]
[Sat Dec 13 00:41:55.451244 2025] [:error] [pid 26521:tid 26579] [client 20.18.142.105:28825] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "aTxF05dhcAPU617AKTDPvgAAAIA"]
[Sat Dec 13 00:42:08.017813 2025] [:error] [pid 26520:tid 26558] [client 20.18.142.105:18895] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "aTxF4EG_frlY5vNXu_AmUwAAAEY"]
[Sat Dec 13 00:42:32.929229 2025] [:error] [pid 26520:tid 26569] [client 20.18.142.105:28863] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid-file.php"] [unique_id "aTxF-EG_frlY5vNXu_AmWgAAAFE"]
[Sat Dec 13 00:42:33.292625 2025] [:error] [pid 26607:tid 26632] [client 20.18.142.105:28820] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid-file.php"] [unique_id "aTxF-cb_b0tOEWTL2KnNCAAAANc"]
[Sat Dec 13 00:42:40.583628 2025] [:error] [pid 27950:tid 27963] [client 20.18.142.105:28814] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid-file.php"] [unique_id "aTxGAIVLRvkrdsSc1F3VWAAAAUs"]
[Sat Dec 13 00:42:45.295465 2025] [:error] [pid 27950:tid 27953] [client 20.18.142.105:18904] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid-file.php"] [unique_id "aTxGBYVLRvkrdsSc1F3VWwAAAUE"]
[Sat Dec 13 00:44:04.636538 2025] [:error] [pid 26521:tid 26584] [client 20.18.142.105:18907] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krypton.php"] [unique_id "aTxGVJdhcAPU617AKTDQUQAAAIU"]
[Sat Dec 13 00:44:14.085635 2025] [:error] [pid 60649:tid 60662] [client 20.18.142.105:28811] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aTxGXlOcUGKU3sgfHP8qjwAAAQo"]
[Sat Dec 13 00:44:22.795008 2025] [:error] [pid 26519:tid 26540] [client 35.232.250.106:61592] [client 35.232.250.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.250.106, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aTxGZs8TRgSGOeWqEhcccgAAABE"]
[Sat Dec 13 00:44:25.141893 2025] [:error] [pid 27950:tid 27963] [client 20.18.142.105:28832] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aTxGaYVLRvkrdsSc1F3ViwAAAUs"]
[Sat Dec 13 00:44:36.652809 2025] [:error] [pid 60649:tid 60663] [client 20.18.142.105:18901] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aTxGdFOcUGKU3sgfHP8qmQAAAQs"]
[Sat Dec 13 00:44:37.336405 2025] [:error] [pid 26519:tid 26527] [client 20.18.142.105:18887] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aTxGdc8TRgSGOeWqEhcckwAAAAQ"]
[Sat Dec 13 00:44:38.248187 2025] [:error] [pid 26521:tid 26582] [client 20.18.142.105:18892] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aTxGdpdhcAPU617AKTDQagAAAIM"]
[Sat Dec 13 00:44:41.145736 2025] [:error] [pid 26607:tid 26612] [client 20.18.142.105:28824] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aTxGecb_b0tOEWTL2KnNhwAAAMM"]
[Sat Dec 13 00:44:46.064860 2025] [:error] [pid 26519:tid 26538] [client 20.18.142.105:18881] [client 20.18.142.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aTxGfs8TRgSGOeWqEhccnAAAAA8"]
[Sat Dec 13 01:40:35.379091 2025] [:error] [pid 55760:tid 55770] [client 216.126.224.198:55031] [client 216.126.224.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aTxTk1ObDQlftFDyGaxd4QAAAYg"]
[Sat Dec 13 01:40:44.128947 2025] [:error] [pid 55760:tid 55784] [client 216.126.224.198:55863] [client 216.126.224.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.126.224.198, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aTxTnFObDQlftFDyGaxd6wAAAZY"]
[Sat Dec 13 01:41:15.882467 2025] [:error] [pid 26521:tid 26598] [client 216.126.224.198:58465] [client 216.126.224.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aTxTu5dhcAPU617AKTDf3AAAAJM"]
[Sat Dec 13 01:50:04.093454 2025] [autoindex:error] [pid 26521:tid 26598] [client 216.126.224.198:50676] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 03:43:22.017334 2025] [:error] [pid 26607:tid 26628] [client 38.97.60.82:52831] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aTxwWsb_b0tOEWTL2KnxBgAAANM"], referer: binance.com
[Sat Dec 13 04:18:35.331511 2025] [:error] [pid 64355:tid 64446] [client 38.97.60.82:62562] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aTx4m_zy6OXYeYq3qodrOwAAAJM"], referer: binance.com
[Sat Dec 13 12:01:44.225381 2025] [autoindex:error] [pid 39287:tid 39304] [client 164.68.111.227:50170] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 13 13:00:34.606214 2025] [:error] [pid 43747:tid 43760] [client 45.154.98.18:50587] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTzy8pYw3twBd_JQEHj04gAAAAk"]
[Sat Dec 13 13:00:35.190221 2025] [:error] [pid 43836:tid 43859] [client 45.154.98.18:50908] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTzy82AEOBirsxb11nbT5AAAANU"]
[Sat Dec 13 13:00:35.766431 2025] [:error] [pid 39287:tid 39308] [client 45.154.98.18:51388] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTzy8zBwBW1JRRoCYqZirgAAARM"]
[Sat Dec 13 13:00:36.359626 2025] [:error] [pid 8243:tid 8276] [client 45.154.98.18:52222] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTzy9CIrGC80ajIR9nJNLAAAAoA"]
[Sat Dec 13 13:00:36.952939 2025] [:error] [pid 43747:tid 43752] [client 45.154.98.18:53055] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aTzy9JYw3twBd_JQEHj1FwAAAAE"]
[Sat Dec 13 18:48:40.384793 2025] [:error] [pid 21342:tid 21354] [client 185.153.199.208:63789] [client 185.153.199.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aT1EiPBL0VVSMIEvqsthzAAAAwg"]
[Sat Dec 13 18:48:42.696743 2025] [:error] [pid 22505:tid 22529] [client 185.153.199.208:64801] [client 185.153.199.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aT1EijvNI-35hW16TnUSXwAAA5Y"]
[Sat Dec 13 20:48:25.052212 2025] [:error] [pid 43748:tid 43786] [client 136.114.14.249:52825] [client 136.114.14.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.114.14.249, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aT1gmarTT0VzE3gYjcCumAAAAEc"]
[Sat Dec 13 20:48:30.893356 2025] [:error] [pid 43748:tid 43796] [client 136.114.14.249:52825] [client 136.114.14.249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aT1gnqrTT0VzE3gYjcCumwAAAFE"]
[Sat Dec 13 20:48:33.041448 2025] [:error] [pid 43748:tid 43803] [client 136.114.14.249:52825] [client 136.114.14.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.114.14.249, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aT1goarTT0VzE3gYjcCunQAAAFc"]
[Sat Dec 13 22:34:46.585008 2025] [:error] [pid 23013:tid 23034] [client 31.171.130.145:32539] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aT15hqs9bDNWPQXUW1awcwAAA9M"]
[Sat Dec 13 22:34:50.009926 2025] [:error] [pid 22505:tid 22529] [client 31.171.130.118:31963] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aT15ijvNI-35hW16TnUryQAAA5Y"]
[Sat Dec 13 22:34:59.494904 2025] [:error] [pid 21342:tid 21357] [client 31.171.130.165:49407] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aT15k_BL0VVSMIEvqsuXmwAAAws"]
[Sat Dec 13 22:35:06.075669 2025] [:error] [pid 43748:tid 43780] [client 31.171.130.129:42111] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aT15mqrTT0VzE3gYjcC7nwAAAEE"]
[Sat Dec 13 22:35:15.083029 2025] [:error] [pid 20799:tid 20823] [client 31.171.130.161:26675] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aT15o6Pz3eVRUTzZpOKSywAAAtY"]
[Sat Dec 13 22:35:17.770435 2025] [:error] [pid 43747:tid 43768] [client 31.171.130.149:31147] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aT15pZYw3twBd_JQEHhNBwAAABE"]
[Sat Dec 13 22:35:18.416835 2025] [:error] [pid 20799:tid 20820] [client 31.171.130.155:38145] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aT15pqPz3eVRUTzZpOKSzAAAAtM"]
[Sat Dec 13 22:35:19.032372 2025] [:error] [pid 8242:tid 8269] [client 31.171.130.134:40977] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aT15pyNKA7vSGNUfnOFHUAAAAlU"]
[Sat Dec 13 22:35:19.661209 2025] [:error] [pid 8242:tid 8250] [client 31.171.130.147:37137] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aT15pyNKA7vSGNUfnOFHUQAAAkI"]
[Sat Dec 13 22:35:20.271740 2025] [:error] [pid 43748:tid 43785] [client 31.171.130.109:23725] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aT15qKrTT0VzE3gYjcC7tAAAAEY"]
[Sat Dec 13 22:35:22.951500 2025] [:error] [pid 43836:tid 43848] [client 31.171.130.147:62687] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aT15qmAEOBirsxb11nYN5QAAAMo"]
[Sat Dec 13 22:35:25.848113 2025] [:error] [pid 23013:tid 23033] [client 31.171.130.152:60933] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aT15ras9bDNWPQXUW1awngAAA9I"]
[Sat Dec 13 22:35:30.492487 2025] [:error] [pid 20799:tid 20813] [client 31.171.130.157:42495] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aT15sqPz3eVRUTzZpOKS0AAAAsw"]
[Sat Dec 13 22:35:34.980380 2025] [:error] [pid 43747:tid 43769] [client 31.171.130.110:23367] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aT15tpYw3twBd_JQEHhNEgAAABI"]
[Sat Dec 13 22:35:37.521940 2025] [:error] [pid 20799:tid 20815] [client 31.171.130.159:44985] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aT15uaPz3eVRUTzZpOKS1gAAAs4"]
[Sat Dec 13 22:35:46.789519 2025] [:error] [pid 43748:tid 43796] [client 31.171.130.130:26267] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aT15wqrTT0VzE3gYjcC7zQAAAFE"]
[Sat Dec 13 22:35:49.411630 2025] [:error] [pid 43747:tid 43762] [client 31.171.130.151:45103] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aT15xZYw3twBd_JQEHhNFwAAAAs"]
[Sat Dec 13 22:35:52.308458 2025] [:error] [pid 20799:tid 20821] [client 31.171.130.144:55225] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aT15yKPz3eVRUTzZpOKS3wAAAtQ"]
[Sat Dec 13 22:35:54.864196 2025] [:error] [pid 23013:tid 23024] [client 31.171.130.148:31287] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aT15yqs9bDNWPQXUW1awqwAAA8k"]
[Sat Dec 13 22:36:04.211537 2025] [:error] [pid 39287:tid 39289] [client 31.171.130.131:46831] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT151DBwBW1JRRoCYqaXhAAAAQA"]
[Sat Dec 13 22:36:06.421143 2025] [:error] [pid 43748:tid 43802] [client 31.171.130.142:56497] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aT151qrTT0VzE3gYjcC70gAAAFY"]
[Sat Dec 13 22:36:09.244125 2025] [:error] [pid 20799:tid 20825] [client 31.171.130.141:26261] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aT152aPz3eVRUTzZpOKS6QAAAtg"]
[Sat Dec 13 22:36:09.865845 2025] [:error] [pid 21342:tid 21348] [client 31.171.130.131:47133] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aT152fBL0VVSMIEvqsuXwwAAAwI"]
[Sat Dec 13 22:36:10.485165 2025] [:error] [pid 21342:tid 21363] [client 31.171.130.160:32189] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aT152vBL0VVSMIEvqsuXxQAAAxE"]
[Sat Dec 13 22:36:16.843314 2025] [:error] [pid 21342:tid 21348] [client 31.171.130.119:40969] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aT154PBL0VVSMIEvqsuX1AAAAwI"]
[Sat Dec 13 22:36:18.466398 2025] [:error] [pid 43747:tid 43773] [client 31.171.130.140:24565] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aT154pYw3twBd_JQEHhNJgAAABY"]
[Sat Dec 13 22:36:20.087034 2025] [:error] [pid 21342:tid 21366] [client 31.171.130.111:51299] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT155PBL0VVSMIEvqsuX1wAAAxQ"]
[Sat Dec 13 22:36:35.463638 2025] [:error] [pid 21342:tid 21347] [client 31.171.130.131:39105] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aT158_BL0VVSMIEvqsuX6wAAAwE"]
[Sat Dec 13 22:36:39.866591 2025] [:error] [pid 22505:tid 22523] [client 31.171.130.139:41597] [client 31.171.130.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.139, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aT159zvNI-35hW16TnUsEAAAA5A"]
[Sat Dec 13 22:37:01.061063 2025] [:error] [pid 22505:tid 22522] [client 31.171.130.139:41597] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aT16DTvNI-35hW16TnUsIgAAA48"]
[Sat Dec 13 22:37:05.752855 2025] [:error] [pid 8242:tid 8248] [client 31.171.130.135:63831] [client 31.171.130.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.135, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aT16ESNKA7vSGNUfnOFHcwAAAkA"]
[Sat Dec 13 22:37:09.258026 2025] [:error] [pid 8242:tid 8270] [client 31.171.130.135:63831] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "aT16FSNKA7vSGNUfnOFHdQAAAlY"]
[Sat Dec 13 22:37:23.417276 2025] [:error] [pid 55071:tid 55076] [client 31.171.130.116:23725] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aT16I8HSpNduhEZ_mjfoUAAAAYM"]
[Sat Dec 13 22:37:36.325293 2025] [:error] [pid 20799:tid 20808] [client 31.171.130.154:61003] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aT16MKPz3eVRUTzZpOKTGgAAAsc"]
[Sat Dec 13 22:37:41.011680 2025] [:error] [pid 43748:tid 43796] [client 31.171.130.157:23223] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aT16NarTT0VzE3gYjcC7-AAAAFE"]
[Sat Dec 13 22:37:45.819356 2025] [:error] [pid 43836:tid 43852] [client 31.171.130.132:32417] [client 31.171.130.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.132, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aT16OWAEOBirsxb11nYOCgAAAM4"]
[Sat Dec 13 22:37:47.322755 2025] [:error] [pid 43836:tid 43857] [client 31.171.130.132:32417] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aT16O2AEOBirsxb11nYOCwAAANM"]
[Sat Dec 13 22:38:13.495742 2025] [:error] [pid 43748:tid 43803] [client 31.171.130.108:46717] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aT16VarTT0VzE3gYjcC8FAAAAFc"]
[Sat Dec 13 22:38:17.872266 2025] [:error] [pid 43747:tid 43755] [client 31.171.130.165:48649] [client 31.171.130.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.165, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aT16WZYw3twBd_JQEHhNYgAAAAQ"]
[Sat Dec 13 22:38:26.247584 2025] [:error] [pid 43747:tid 43765] [client 31.171.130.165:48649] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aT16YpYw3twBd_JQEHhNaAAAAA4"]
[Sat Dec 13 22:38:28.833813 2025] [:error] [pid 55071:tid 55084] [client 31.171.130.113:32481] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aT16ZMHSpNduhEZ_mjfoYgAAAYs"]
[Sat Dec 13 22:38:33.038839 2025] [:error] [pid 20799:tid 20820] [client 31.171.130.165:43767] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT16aaPz3eVRUTzZpOKTLgAAAtM"]
[Sat Dec 13 22:38:39.694520 2025] [:error] [pid 39287:tid 39312] [client 31.171.130.136:37899] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aT16bzBwBW1JRRoCYqaXpAAAARc"]
[Sat Dec 13 22:38:41.849890 2025] [:error] [pid 55071:tid 55075] [client 31.171.130.116:52623] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT16ccHSpNduhEZ_mjfoZwAAAYI"]
[Sat Dec 13 22:38:51.589244 2025] [:error] [pid 22505:tid 22513] [client 31.171.130.139:38219] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aT16ezvNI-35hW16TnUsTQAAA4Y"]
[Sat Dec 13 22:38:54.040508 2025] [:error] [pid 8242:tid 8272] [client 31.171.130.145:25363] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aT16fiNKA7vSGNUfnOFHlgAAAlg"]
[Sat Dec 13 22:39:00.034885 2025] [:error] [pid 21342:tid 21363] [client 31.171.130.122:63691] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aT16hPBL0VVSMIEvqsuYPwAAAxE"]
[Sat Dec 13 22:39:06.588021 2025] [:error] [pid 8242:tid 8263] [client 31.171.130.160:20483] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aT16iiNKA7vSGNUfnOFHnAAAAk8"]
[Sat Dec 13 22:39:10.702308 2025] [:error] [pid 21342:tid 21359] [client 31.171.130.162:46869] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "aT16jvBL0VVSMIEvqsuYVAAAAw0"]
[Sat Dec 13 22:39:16.428463 2025] [:error] [pid 43747:tid 43755] [client 31.171.130.155:28355] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aT16lJYw3twBd_JQEHhNggAAAAQ"]
[Sat Dec 13 22:39:28.162097 2025] [:error] [pid 43748:tid 43791] [client 31.171.130.138:24015] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aT16oKrTT0VzE3gYjcC8JgAAAEw"]
[Sat Dec 13 22:39:28.790824 2025] [:error] [pid 21342:tid 21367] [client 31.171.130.113:59519] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aT16oPBL0VVSMIEvqsuYXgAAAxU"]
[Sat Dec 13 22:39:29.476100 2025] [:error] [pid 22505:tid 22528] [client 31.171.130.121:27535] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aT16oTvNI-35hW16TnUsWgAAA5U"]
[Sat Dec 13 22:39:30.145769 2025] [:error] [pid 39287:tid 39296] [client 31.171.130.115:64419] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aT16ojBwBW1JRRoCYqaXrwAAAQc"]
[Sat Dec 13 22:39:32.719903 2025] [:error] [pid 8242:tid 8257] [client 31.171.130.113:24213] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aT16pCNKA7vSGNUfnOFHqwAAAkk"]
[Sat Dec 13 22:39:33.326077 2025] [:error] [pid 22505:tid 22527] [client 31.171.130.108:25299] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aT16pTvNI-35hW16TnUsYQAAA5Q"]
[Sat Dec 13 22:39:38.106673 2025] [:error] [pid 55071:tid 55093] [client 31.171.130.122:63319] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aT16qsHSpNduhEZ_mjfofQAAAZQ"]
[Sat Dec 13 22:39:38.754032 2025] [:error] [pid 43747:tid 43752] [client 31.171.130.162:58263] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aT16qpYw3twBd_JQEHhNigAAAAE"]
[Sat Dec 13 22:39:39.381200 2025] [:error] [pid 23013:tid 23027] [client 31.171.130.121:51725] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aT16q6s9bDNWPQXUW1aw-gAAA8w"]
[Sat Dec 13 22:39:51.009161 2025] [autoindex:error] [pid 8242:tid 8259] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:51.315199 2025] [autoindex:error] [pid 8242:tid 8253] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:51.626935 2025] [autoindex:error] [pid 8242:tid 8267] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:51.938869 2025] [autoindex:error] [pid 8242:tid 8272] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:55.514459 2025] [autoindex:error] [pid 8242:tid 8250] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:56.147824 2025] [autoindex:error] [pid 8242:tid 8248] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:56.505948 2025] [autoindex:error] [pid 8242:tid 8265] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:56.814141 2025] [autoindex:error] [pid 8242:tid 8270] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:57.157048 2025] [autoindex:error] [pid 8242:tid 8249] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:57.775800 2025] [autoindex:error] [pid 8242:tid 8262] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:39:59.659115 2025] [autoindex:error] [pid 8242:tid 8263] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:04.622990 2025] [autoindex:error] [pid 8242:tid 8254] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:05.293819 2025] [autoindex:error] [pid 8242:tid 8260] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:05.615249 2025] [autoindex:error] [pid 8242:tid 8251] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:10.011286 2025] [autoindex:error] [pid 8242:tid 8253] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:12.543143 2025] [autoindex:error] [pid 8242:tid 8266] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:16.642404 2025] [autoindex:error] [pid 8242:tid 8248] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:16.966860 2025] [autoindex:error] [pid 8242:tid 8265] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:17.289016 2025] [autoindex:error] [pid 8242:tid 8270] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:29.085691 2025] [autoindex:error] [pid 8242:tid 8252] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:31.367334 2025] [autoindex:error] [pid 8242:tid 8251] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:31.692871 2025] [autoindex:error] [pid 8242:tid 8268] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:32.724812 2025] [autoindex:error] [pid 8242:tid 8272] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:33.068641 2025] [autoindex:error] [pid 8242:tid 8267] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:40:33.392885 2025] [autoindex:error] [pid 8242:tid 8271] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:34.156642 2025] [autoindex:error] [pid 8242:tid 8259] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:34.496434 2025] [autoindex:error] [pid 8242:tid 8272] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:34.826005 2025] [autoindex:error] [pid 8242:tid 8266] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:35.129820 2025] [autoindex:error] [pid 8242:tid 8269] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:40.381323 2025] [autoindex:error] [pid 8242:tid 8249] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:42.693103 2025] [autoindex:error] [pid 8242:tid 8262] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:43.037119 2025] [autoindex:error] [pid 8242:tid 8258] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:43.384881 2025] [autoindex:error] [pid 8242:tid 8257] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:45.615692 2025] [autoindex:error] [pid 8242:tid 8254] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:45.967467 2025] [autoindex:error] [pid 8242:tid 8264] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:46.315807 2025] [autoindex:error] [pid 8242:tid 8252] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:41:46.627218 2025] [autoindex:error] [pid 8242:tid 8260] [client 31.171.130.157:23127] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:42:33.792920 2025] [autoindex:error] [pid 8242:tid 8271] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:42:56.016825 2025] [autoindex:error] [pid 8242:tid 8268] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:04.271752 2025] [autoindex:error] [pid 8242:tid 8266] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:04.626750 2025] [autoindex:error] [pid 8242:tid 8271] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:13.352920 2025] [autoindex:error] [pid 8242:tid 8263] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:13.668597 2025] [autoindex:error] [pid 8242:tid 8264] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:14.004408 2025] [autoindex:error] [pid 8242:tid 8252] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:14.338625 2025] [autoindex:error] [pid 8242:tid 8254] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:14.670080 2025] [autoindex:error] [pid 8242:tid 8260] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:15.004632 2025] [autoindex:error] [pid 8242:tid 8268] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:16.515171 2025] [autoindex:error] [pid 8242:tid 8251] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:16.860981 2025] [autoindex:error] [pid 8242:tid 8259] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:53.379457 2025] [autoindex:error] [pid 8242:tid 8259] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 22:43:57.618910 2025] [autoindex:error] [pid 8242:tid 8271] [client 31.171.130.142:34185] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 13 23:08:37.052302 2025] [:error] [pid 8242:tid 8252] [client 192.42.116.217:43050] [client 192.42.116.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aT2BdSNKA7vSGNUfnOFLqgAAAkQ"]
[Sat Dec 13 23:25:29.985758 2025] [:error] [pid 55071:tid 55080] [client 45.138.16.164:27454] [client 45.138.16.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aT2FacHSpNduhEZ_mjfvvwAAAYc"]
[Sun Dec 14 01:44:05.976989 2025] [:error] [pid 3635:tid 3669] [client 54.86.66.252:13792] [client 54.86.66.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.86.66.252, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aT2l5TqfhzW7OpfKxKzr_gAAAMQ"]
[Sun Dec 14 01:44:08.334216 2025] [:error] [pid 14689:tid 14694] [client 184.72.115.35:55164] [client 184.72.115.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.72.115.35, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aT2l6EEcifvaa9I7SnmCtAAAAUE"]
[Sun Dec 14 18:17:41.041920 2025] [:error] [pid 39525:tid 39591] [client 104.28.214.117:39120] [client 104.28.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aT6OxU1fX_pB_BrvE_4g3wAAAIg"]
[Sun Dec 14 18:17:42.472117 2025] [:error] [pid 39524:tid 39570] [client 104.28.214.117:39187] [client 104.28.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/style.php"] [unique_id "aT6OxmrVGpbDzFtDE9OsdQAAAE4"]
[Sun Dec 14 18:17:43.898681 2025] [:error] [pid 40596:tid 40644] [client 104.28.214.117:39191] [client 104.28.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aT6Ox2vZZo4N2X7WoLxigQAAAdI"]
[Sun Dec 14 18:17:44.313495 2025] [:error] [pid 39524:tid 39578] [client 104.28.214.117:65291] [client 104.28.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/style.php"] [unique_id "aT6OyGrVGpbDzFtDE9OsdgAAAFY"]
[Mon Dec 15 10:35:26.821469 2025] [:error] [pid 63653:tid 63656] [client 148.72.140.6:40540] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apple-touch-icon-76x76.png"] [unique_id "aT9z7svHkJ_6ffg4W-8JrQAAAUE"], referer: https://makifim.com.au/
[Mon Dec 15 10:35:27.869968 2025] [:error] [pid 35104:tid 35121] [client 148.72.140.6:40556] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apple-touch-icon-72x72.png"] [unique_id "aT9z76WpPfWnBdEuPp6d3QAAAM4"], referer: https://makifim.com.au/
[Mon Dec 15 10:35:28.921693 2025] [:error] [pid 35019:tid 35034] [client 148.72.140.6:42904] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apple-touch-icon-60x60.png"] [unique_id "aT9z8K2LAdKSfjdLIKIfLwAAAAs"], referer: https://makifim.com.au/
[Mon Dec 15 10:35:29.971052 2025] [:error] [pid 35104:tid 35112] [client 148.72.140.6:42916] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apple-touch-icon-57x57.png"] [unique_id "aT9z8aWpPfWnBdEuPp6d4AAAAMU"], referer: https://makifim.com.au/
[Mon Dec 15 10:35:31.009450 2025] [:error] [pid 35104:tid 35124] [client 148.72.140.6:42922] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/favicon-32x32.png"] [unique_id "aT9z86WpPfWnBdEuPp6d4QAAANE"], referer: https://makifim.com.au/
[Mon Dec 15 10:35:32.060653 2025] [:error] [pid 35104:tid 35119] [client 148.72.140.6:42936] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/favicon-16x16.png"] [unique_id "aT9z9KWpPfWnBdEuPp6d4wAAAMw"], referer: https://makifim.com.au/
[Mon Dec 15 12:09:30.379089 2025] [proxy_fcgi:error] [pid 44555:tid 44558] [client 101.176.0.196:49612] AH01071: Got error 'PHP message: Malformed cookie redaction patterns received, response body: {"success":false,"errorMessage":"Request rate limit reached."}'
[Mon Dec 15 15:50:18.220595 2025] [:error] [pid 17595:tid 17598] [client 74.7.227.42:54268] [client 74.7.227.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.42, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aT-9uiEZ31fZFzV3Us_uygAAAQE"]
[Mon Dec 15 15:50:49.818806 2025] [:error] [pid 39914:tid 39918] [client 74.7.227.42:46652] [client 74.7.227.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.42, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aT-92V247O4ulGRu1dOCxQAAAAE"]
[Mon Dec 15 23:04:03.911804 2025] [:error] [pid 31459:tid 31466] [client 34.168.8.133:60236] [client 34.168.8.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.8.133, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUAjYzqerS0TDpViRzuwMQAAAAU"]
[Mon Dec 15 23:04:09.910318 2025] [:error] [pid 31459:tid 31475] [client 34.168.8.133:60236] [client 34.168.8.133] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUAjaTqerS0TDpViRzuwOQAAAA4"]
[Mon Dec 15 23:04:12.191975 2025] [:error] [pid 31459:tid 31485] [client 34.168.8.133:60236] [client 34.168.8.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.8.133, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUAjbDqerS0TDpViRzuwPwAAABg"]
[Tue Dec 16 04:10:23.322943 2025] [autoindex:error] [pid 65267:tid 65310] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:23.734367 2025] [autoindex:error] [pid 65267:tid 65307] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:24.134183 2025] [autoindex:error] [pid 65267:tid 65309] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:24.490079 2025] [autoindex:error] [pid 65267:tid 65313] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:28.685952 2025] [autoindex:error] [pid 65267:tid 65299] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:29.613371 2025] [autoindex:error] [pid 65267:tid 65318] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:30.059699 2025] [autoindex:error] [pid 65267:tid 65316] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:30.576271 2025] [autoindex:error] [pid 65267:tid 65308] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:31.092699 2025] [autoindex:error] [pid 65267:tid 65319] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:32.063224 2025] [autoindex:error] [pid 65267:tid 65299] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:36.204893 2025] [autoindex:error] [pid 65267:tid 65307] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:47.923613 2025] [autoindex:error] [pid 65267:tid 65304] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:48.783460 2025] [autoindex:error] [pid 65267:tid 65316] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:49.244252 2025] [autoindex:error] [pid 65267:tid 65321] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:10:59.359694 2025] [autoindex:error] [pid 65267:tid 65308] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:03.218397 2025] [autoindex:error] [pid 65267:tid 65310] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:11.663109 2025] [autoindex:error] [pid 65267:tid 65303] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:12.139260 2025] [autoindex:error] [pid 65267:tid 65300] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:12.603784 2025] [autoindex:error] [pid 65267:tid 65320] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:38.594275 2025] [autoindex:error] [pid 65267:tid 65322] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:43.051015 2025] [autoindex:error] [pid 65267:tid 65312] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:43.457679 2025] [autoindex:error] [pid 65267:tid 65318] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:47.069691 2025] [autoindex:error] [pid 65267:tid 65308] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:47.524541 2025] [autoindex:error] [pid 65267:tid 65311] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:11:47.955434 2025] [autoindex:error] [pid 65267:tid 65302] [client 45.154.138.1:36601] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 07:22:43.992040 2025] [:error] [pid 18322:tid 18330] [client 52.164.245.44:8130] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aUCYQ5sCeWBjrw28XtwqSAAAAAQ"]
[Tue Dec 16 07:22:44.490377 2025] [:error] [pid 18322:tid 18340] [client 52.164.245.44:3947] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aUCYRJsCeWBjrw28XtwqSgAAAA4"]
[Tue Dec 16 07:22:44.988160 2025] [:error] [pid 51991:tid 52000] [client 52.164.245.44:7358] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aUCYRK7zKCVJSuwV1xZuagAAAQc"]
[Tue Dec 16 07:22:45.485540 2025] [:error] [pid 18324:tid 18388] [client 52.164.245.44:2032] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aUCYRaG4um2mD1VpJHK5VwAAAIg"]
[Tue Dec 16 07:22:45.982925 2025] [:error] [pid 18408:tid 18418] [client 52.164.245.44:3439] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aUCYRTi2Gr8pDzjrVBAi6gAAAMg"]
[Tue Dec 16 07:22:46.480982 2025] [:error] [pid 18323:tid 18354] [client 52.164.245.44:11758] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aUCYRjJB6UFxIutsA8Zg7AAAAEE"]
[Tue Dec 16 07:22:46.978212 2025] [:error] [pid 18323:tid 18369] [client 52.164.245.44:5110] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aUCYRjJB6UFxIutsA8Zg7gAAAFA"]
[Tue Dec 16 07:22:47.475103 2025] [:error] [pid 18323:tid 18357] [client 52.164.245.44:5090] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aUCYRzJB6UFxIutsA8Zg8AAAAEQ"]
[Tue Dec 16 23:33:04.825348 2025] [:error] [pid 51991:tid 51999] [client 194.26.192.221:53785] [client 194.26.192.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUF7sK7zKCVJSuwV1xb86gAAAQY"]
[Tue Dec 16 23:33:05.982202 2025] [:error] [pid 18324:tid 18398] [client 194.26.192.221:56878] [client 194.26.192.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUF7saG4um2mD1VpJHLUrwAAAJI"]
[Tue Dec 16 23:33:07.221202 2025] [:error] [pid 35998:tid 36017] [client 194.26.192.221:56242] [client 194.26.192.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUF7sxKnhGuuhGxBSLPe7AAAAVA"]
[Tue Dec 16 23:33:08.592869 2025] [:error] [pid 18323:tid 18377] [client 194.26.192.221:61668] [client 194.26.192.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUF7tDJB6UFxIutsA8ZfRgAAAFg"]
[Tue Dec 16 23:33:10.249908 2025] [:error] [pid 53940:tid 53953] [client 194.26.192.221:56666] [client 194.26.192.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUF7tl91PNbcXLVkpR4hGgAAAco"]
[Wed Dec 17 01:45:32.795066 2025] [:error] [pid 64835:tid 64852] [client 104.196.54.182:49335] [client 104.196.54.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.54.182, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUGavO0_iNx32Sz58MLY8AAAAA0"]
[Wed Dec 17 01:45:38.039319 2025] [:error] [pid 64835:tid 64848] [client 104.196.54.182:49335] [client 104.196.54.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUGawu0_iNx32Sz58MLY9QAAAAk"]
[Wed Dec 17 01:45:40.188329 2025] [:error] [pid 64835:tid 64858] [client 104.196.54.182:49335] [client 104.196.54.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.54.182, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUGaxO0_iNx32Sz58MLY9wAAABM"]
[Wed Dec 17 01:57:39.364145 2025] [proxy_fcgi:error] [pid 7514:tid 7527] [client 103.4.122.14:35732] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Dec 17 03:44:19.407504 2025] [:error] [pid 50191:tid 50206] [client 121.127.34.151:60599] [client 121.127.34.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.127.34.151, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUG2k42kH_QR7N4cGFe9MgAAAY0"]
[Wed Dec 17 08:48:36.872935 2025] [autoindex:error] [pid 7715:tid 7721] [client 84.247.164.141:61427] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 17 17:15:52.009978 2025] [:error] [pid 45621:tid 45642] [client 4.194.69.42:15251] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-sid.php"] [unique_id "aUJ0yOVNGQfJ1rR90pQmGwAAANA"]
[Wed Dec 17 17:15:54.248268 2025] [:error] [pid 45531:tid 45571] [client 4.194.69.42:15317] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-sid.php"] [unique_id "aUJ0yojuE-Fd-sBWjvVNmAAAAEg"]
[Wed Dec 17 17:15:56.186260 2025] [:error] [pid 11733:tid 11743] [client 4.194.69.42:15311] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-sid.php"] [unique_id "aUJ0zDzmtBRXExJb1PHqfwAAAQg"]
[Wed Dec 17 17:15:57.414106 2025] [:error] [pid 45532:tid 45613] [client 4.194.69.42:15319] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-sid.php"] [unique_id "aUJ0zQeWB-JXOyTKNs0JYQAAAJc"]
[Wed Dec 17 17:15:58.408323 2025] [:error] [pid 45530:tid 45552] [client 4.194.69.42:15324] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aUJ0zm4IsXcKlf7LWf_iIgAAABE"]
[Wed Dec 17 17:16:00.554470 2025] [:error] [pid 11733:tid 11743] [client 4.194.69.42:15354] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aUJ00DzmtBRXExJb1PHqhgAAAQg"]
[Wed Dec 17 17:16:02.141252 2025] [:error] [pid 45621:tid 45648] [client 4.194.69.42:15340] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aUJ00uVNGQfJ1rR90pQmNwAAANY"]
[Wed Dec 17 17:16:03.474163 2025] [:error] [pid 45531:tid 45573] [client 4.194.69.42:15345] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aUJ004juE-Fd-sBWjvVNrAAAAEo"]
[Wed Dec 17 17:16:05.148904 2025] [:error] [pid 45530:tid 45545] [client 4.194.69.42:15352] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aUJ01W4IsXcKlf7LWf_iKQAAAAo"]
[Wed Dec 17 17:16:05.995361 2025] [:error] [pid 45530:tid 45543] [client 4.194.69.42:15300] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aUJ01W4IsXcKlf7LWf_iLQAAAAg"]
[Wed Dec 17 17:16:07.980623 2025] [:error] [pid 45530:tid 45547] [client 4.194.69.42:15341] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aUJ0124IsXcKlf7LWf_iNAAAAAw"]
[Wed Dec 17 17:16:09.056121 2025] [:error] [pid 45532:tid 45614] [client 4.194.69.42:15303] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aUJ02QeWB-JXOyTKNs0JpQAAAJg"]
[Wed Dec 17 17:16:11.585750 2025] [:error] [pid 45530:tid 45550] [client 4.194.69.42:15255] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUJ0224IsXcKlf7LWf_iOgAAAA8"]
[Wed Dec 17 17:16:13.564874 2025] [:error] [pid 45530:tid 45536] [client 4.194.69.42:15305] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUJ03W4IsXcKlf7LWf_iPwAAAAE"]
[Wed Dec 17 17:16:14.568837 2025] [:error] [pid 45530:tid 45540] [client 4.194.69.42:15350] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUJ03m4IsXcKlf7LWf_iQgAAAAU"]
[Wed Dec 17 17:16:15.282901 2025] [:error] [pid 11733:tid 11743] [client 4.194.69.42:15318] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUJ03zzmtBRXExJb1PHqtAAAAQg"]
[Wed Dec 17 17:16:15.897901 2025] [:error] [pid 45621:tid 45643] [client 4.194.69.42:15358] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-title.php"] [unique_id "aUJ03-VNGQfJ1rR90pQmXgAAANE"]
[Wed Dec 17 17:16:16.665959 2025] [:error] [pid 11733:tid 11735] [client 4.194.69.42:15269] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-title.php"] [unique_id "aUJ04DzmtBRXExJb1PHquAAAAQA"]
[Wed Dec 17 17:16:17.908705 2025] [:error] [pid 11733:tid 11754] [client 4.194.69.42:15235] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-title.php"] [unique_id "aUJ04TzmtBRXExJb1PHquwAAARM"]
[Wed Dec 17 17:16:19.655628 2025] [:error] [pid 45531:tid 45585] [client 4.194.69.42:15335] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-title.php"] [unique_id "aUJ044juE-Fd-sBWjvVNywAAAFY"]
[Wed Dec 17 17:16:22.756824 2025] [:error] [pid 11733:tid 11754] [client 4.194.69.42:15336] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aUJ05jzmtBRXExJb1PHqwwAAARM"]
[Wed Dec 17 17:16:25.403355 2025] [:error] [pid 45532:tid 45591] [client 4.194.69.42:15258] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aUJ06QeWB-JXOyTKNs0JswAAAIE"]
[Wed Dec 17 17:16:26.292374 2025] [:error] [pid 45530:tid 45558] [client 4.194.69.42:15339] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aUJ06m4IsXcKlf7LWf_iUgAAABc"]
[Wed Dec 17 17:16:27.491598 2025] [:error] [pid 11733:tid 11739] [client 4.194.69.42:15322] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aUJ06zzmtBRXExJb1PHqygAAAQQ"]
[Wed Dec 17 17:16:29.331459 2025] [:error] [pid 45621:tid 45626] [client 4.194.69.42:15344] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-home.php"] [unique_id "aUJ07eVNGQfJ1rR90pQmbgAAAMA"]
[Wed Dec 17 17:16:30.825924 2025] [:error] [pid 45532:tid 45608] [client 4.194.69.42:15245] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-home.php"] [unique_id "aUJ07geWB-JXOyTKNs0JuAAAAJI"]
[Wed Dec 17 17:16:32.549482 2025] [:error] [pid 45531:tid 45577] [client 4.194.69.42:15288] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-home.php"] [unique_id "aUJ08IjuE-Fd-sBWjvVN3gAAAE4"]
[Wed Dec 17 17:16:33.940168 2025] [:error] [pid 45532:tid 45611] [client 4.194.69.42:15329] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-home.php"] [unique_id "aUJ08QeWB-JXOyTKNs0JvQAAAJU"]
[Wed Dec 17 17:16:34.516819 2025] [:error] [pid 45532:tid 45591] [client 4.194.69.42:15240] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aUJ08geWB-JXOyTKNs0JwQAAAIE"]
[Wed Dec 17 17:16:35.728395 2025] [:error] [pid 45532:tid 45596] [client 4.194.69.42:15239] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aUJ08weWB-JXOyTKNs0JxQAAAIY"]
[Wed Dec 17 17:16:36.294293 2025] [:error] [pid 11733:tid 11736] [client 4.194.69.42:15315] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aUJ09DzmtBRXExJb1PHqzwAAAQE"]
[Wed Dec 17 17:16:37.087167 2025] [:error] [pid 45530:tid 45557] [client 4.194.69.42:15266] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aUJ09W4IsXcKlf7LWf_iYwAAABY"]
[Wed Dec 17 17:16:38.036836 2025] [:error] [pid 45530:tid 45541] [client 4.194.69.42:15333] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atex1.php"] [unique_id "aUJ09m4IsXcKlf7LWf_iaAAAAAY"]
[Wed Dec 17 17:16:39.531375 2025] [:error] [pid 45621:tid 45626] [client 4.194.69.42:15232] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atex1.php"] [unique_id "aUJ09-VNGQfJ1rR90pQmdQAAAMA"]
[Wed Dec 17 17:16:40.933696 2025] [:error] [pid 45531:tid 45579] [client 4.194.69.42:15298] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atex1.php"] [unique_id "aUJ0-IjuE-Fd-sBWjvVN6QAAAFA"]
[Wed Dec 17 17:16:41.925684 2025] [:error] [pid 45621:tid 45640] [client 4.194.69.42:15302] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atex1.php"] [unique_id "aUJ0-eVNGQfJ1rR90pQmiwAAAM4"]
[Wed Dec 17 17:16:43.044719 2025] [:error] [pid 45530:tid 45551] [client 4.194.69.42:15337] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kdgok.php"] [unique_id "aUJ0-24IsXcKlf7LWf_icwAAABA"]
[Wed Dec 17 17:16:43.426853 2025] [:error] [pid 45530:tid 45547] [client 4.194.69.42:15356] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kdgok.php"] [unique_id "aUJ0-24IsXcKlf7LWf_idAAAAAw"]
[Wed Dec 17 17:16:44.041967 2025] [:error] [pid 45530:tid 45544] [client 4.194.69.42:15349] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kdgok.php"] [unique_id "aUJ0_G4IsXcKlf7LWf_idwAAAAk"]
[Wed Dec 17 17:16:44.797497 2025] [:error] [pid 45532:tid 45604] [client 4.194.69.42:15327] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kdgok.php"] [unique_id "aUJ0_AeWB-JXOyTKNs0J1wAAAI4"]
[Wed Dec 17 17:16:45.881207 2025] [:error] [pid 45621:tid 45649] [client 4.194.69.42:15309] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "aUJ0_eVNGQfJ1rR90pQmkAAAANc"]
[Wed Dec 17 17:16:48.706580 2025] [:error] [pid 45531:tid 45565] [client 4.194.69.42:15299] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "aUJ1AIjuE-Fd-sBWjvVN_wAAAEI"]
[Wed Dec 17 17:16:49.721462 2025] [:error] [pid 45531:tid 45569] [client 4.194.69.42:15238] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "aUJ1AYjuE-Fd-sBWjvVOBAAAAEY"]
[Wed Dec 17 17:17:38.010679 2025] [:error] [pid 45621:tid 45636] [client 4.194.69.42:15272] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUJ1MuVNGQfJ1rR90pQmxgAAAMo"]
[Wed Dec 17 17:17:38.558064 2025] [:error] [pid 45621:tid 45647] [client 4.194.69.42:15308] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUJ1MuVNGQfJ1rR90pQmyAAAANU"]
[Wed Dec 17 17:17:39.679788 2025] [:error] [pid 45532:tid 45606] [client 4.194.69.42:15310] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUJ1MweWB-JXOyTKNs0KEwAAAJA"]
[Wed Dec 17 17:17:41.728251 2025] [:error] [pid 45621:tid 45629] [client 4.194.69.42:15323] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUJ1NeVNGQfJ1rR90pQmzgAAAMM"]
[Wed Dec 17 17:17:42.483014 2025] [:error] [pid 45621:tid 45650] [client 4.194.69.42:15173] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUJ1NuVNGQfJ1rR90pQmzwAAANg"]
[Wed Dec 17 17:17:43.139433 2025] [:error] [pid 11733:tid 11746] [client 4.194.69.42:15284] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUJ1NzzmtBRXExJb1PHrKgAAAQs"]
[Wed Dec 17 17:17:44.826491 2025] [:error] [pid 11733:tid 11737] [client 4.194.69.42:15290] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUJ1ODzmtBRXExJb1PHrKwAAAQI"]
[Wed Dec 17 17:17:45.745808 2025] [:error] [pid 45530:tid 45544] [client 4.194.69.42:15264] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUJ1OW4IsXcKlf7LWf_i3QAAAAk"]
[Wed Dec 17 17:17:47.111598 2025] [:error] [pid 45530:tid 45545] [client 4.194.69.42:15313] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ac.php"] [unique_id "aUJ1O24IsXcKlf7LWf_i4gAAAAo"]
[Wed Dec 17 17:17:48.148011 2025] [:error] [pid 11733:tid 11755] [client 4.194.69.42:15250] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ac.php"] [unique_id "aUJ1PDzmtBRXExJb1PHrLwAAARQ"]
[Wed Dec 17 17:17:48.717873 2025] [:error] [pid 45621:tid 45627] [client 4.194.69.42:15301] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ac.php"] [unique_id "aUJ1POVNGQfJ1rR90pQm1QAAAME"]
[Wed Dec 17 17:17:49.837626 2025] [:error] [pid 45621:tid 45640] [client 4.194.69.42:15186] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ac.php"] [unique_id "aUJ1PeVNGQfJ1rR90pQm1gAAAM4"]
[Wed Dec 17 17:17:51.352196 2025] [:error] [pid 45531:tid 45575] [client 4.194.69.42:15223] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krypton.php"] [unique_id "aUJ1P4juE-Fd-sBWjvVOUgAAAEw"]
[Wed Dec 17 17:17:53.292907 2025] [:error] [pid 45530:tid 45536] [client 4.194.69.42:15252] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krypton.php"] [unique_id "aUJ1QW4IsXcKlf7LWf_i-wAAAAE"]
[Wed Dec 17 17:17:54.075098 2025] [:error] [pid 45530:tid 45556] [client 4.194.69.42:15297] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krypton.php"] [unique_id "aUJ1Qm4IsXcKlf7LWf_jAQAAABU"]
[Wed Dec 17 17:17:57.278029 2025] [:error] [pid 45530:tid 45538] [client 4.194.69.42:15259] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krypton.php"] [unique_id "aUJ1RW4IsXcKlf7LWf_jDgAAAAM"]
[Wed Dec 17 17:17:57.595065 2025] [:error] [pid 45530:tid 45557] [client 4.194.69.42:15237] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUJ1RW4IsXcKlf7LWf_jEAAAABY"]
[Wed Dec 17 17:17:57.879065 2025] [:error] [pid 11733:tid 11756] [client 4.194.69.42:15241] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUJ1RTzmtBRXExJb1PHrMQAAARU"]
[Wed Dec 17 17:17:58.315059 2025] [:error] [pid 45621:tid 45648] [client 4.194.69.42:15294] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUJ1RuVNGQfJ1rR90pQm3gAAANY"]
[Wed Dec 17 17:18:00.550795 2025] [:error] [pid 45532:tid 45607] [client 4.194.69.42:15233] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUJ1SAeWB-JXOyTKNs0KGQAAAJE"]
[Wed Dec 17 17:18:03.484283 2025] [:error] [pid 45532:tid 45599] [client 4.194.69.42:15330] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aUJ1SweWB-JXOyTKNs0KGwAAAIk"]
[Wed Dec 17 17:18:04.887938 2025] [:error] [pid 45532:tid 45601] [client 4.194.69.42:15321] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aUJ1TAeWB-JXOyTKNs0KJQAAAIs"]
[Wed Dec 17 17:18:06.288183 2025] [:error] [pid 45532:tid 45593] [client 4.194.69.42:15355] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aUJ1TgeWB-JXOyTKNs0KJwAAAIM"]
[Wed Dec 17 17:18:08.207639 2025] [:error] [pid 45532:tid 45611] [client 4.194.69.42:15304] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aUJ1UAeWB-JXOyTKNs0KLQAAAJU"]
[Wed Dec 17 17:18:10.193818 2025] [:error] [pid 45531:tid 45571] [client 4.194.69.42:15325] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUJ1UojuE-Fd-sBWjvVObgAAAEg"]
[Wed Dec 17 17:18:12.052522 2025] [:error] [pid 45621:tid 45639] [client 4.194.69.42:15176] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUJ1VOVNGQfJ1rR90pQm5QAAAM0"]
[Wed Dec 17 17:18:12.724890 2025] [:error] [pid 45532:tid 45613] [client 4.194.69.42:15242] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUJ1VAeWB-JXOyTKNs0KMQAAAJc"]
[Wed Dec 17 17:18:13.265380 2025] [:error] [pid 11733:tid 11756] [client 4.194.69.42:15331] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUJ1VTzmtBRXExJb1PHrSwAAARU"]
[Wed Dec 17 17:18:14.102329 2025] [:error] [pid 45531:tid 45584] [client 4.194.69.42:15246] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jjrpo.php"] [unique_id "aUJ1VojuE-Fd-sBWjvVOdAAAAFU"]
[Wed Dec 17 17:18:15.006804 2025] [:error] [pid 45621:tid 45643] [client 4.194.69.42:15307] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jjrpo.php"] [unique_id "aUJ1V-VNGQfJ1rR90pQm-AAAANE"]
[Wed Dec 17 17:18:16.025247 2025] [:error] [pid 45532:tid 45595] [client 4.194.69.42:15175] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jjrpo.php"] [unique_id "aUJ1WAeWB-JXOyTKNs0KNQAAAIU"]
[Wed Dec 17 17:18:16.592452 2025] [:error] [pid 45531:tid 45565] [client 4.194.69.42:15293] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jjrpo.php"] [unique_id "aUJ1WIjuE-Fd-sBWjvVOeAAAAEI"]
[Wed Dec 17 17:18:17.328122 2025] [:error] [pid 45532:tid 45600] [client 4.194.69.42:15185] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aUJ1WQeWB-JXOyTKNs0KPAAAAIo"]
[Wed Dec 17 17:18:17.572771 2025] [:error] [pid 45532:tid 45613] [client 4.194.69.42:15332] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aUJ1WQeWB-JXOyTKNs0KPgAAAJc"]
[Wed Dec 17 17:18:18.031388 2025] [:error] [pid 45530:tid 45550] [client 4.194.69.42:15343] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aUJ1Wm4IsXcKlf7LWf_jIgAAAA8"]
[Wed Dec 17 17:18:18.866633 2025] [:error] [pid 45531:tid 45585] [client 4.194.69.42:15275] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aUJ1WojuE-Fd-sBWjvVOgQAAAFY"]
[Wed Dec 17 17:18:19.548793 2025] [:error] [pid 45531:tid 45567] [client 4.194.69.42:15338] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-advaced.php"] [unique_id "aUJ1W4juE-Fd-sBWjvVOhgAAAEQ"]
[Wed Dec 17 17:18:20.445003 2025] [:error] [pid 45532:tid 45601] [client 4.194.69.42:15326] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-advaced.php"] [unique_id "aUJ1XAeWB-JXOyTKNs0KQwAAAIs"]
[Wed Dec 17 17:18:21.484733 2025] [:error] [pid 45530:tid 45535] [client 4.194.69.42:15257] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-advaced.php"] [unique_id "aUJ1XW4IsXcKlf7LWf_jKgAAAAA"]
[Wed Dec 17 17:18:21.992480 2025] [:error] [pid 45532:tid 45608] [client 4.194.69.42:15285] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-advaced.php"] [unique_id "aUJ1XQeWB-JXOyTKNs0KRwAAAJI"]
[Wed Dec 17 17:18:23.398140 2025] [:error] [pid 45532:tid 45613] [client 4.194.69.42:15236] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "aUJ1XweWB-JXOyTKNs0KTgAAAJc"]
[Wed Dec 17 17:18:24.264833 2025] [:error] [pid 45530:tid 45542] [client 4.194.69.42:15291] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "aUJ1YG4IsXcKlf7LWf_jMAAAAAc"]
[Wed Dec 17 17:18:25.703015 2025] [:error] [pid 45621:tid 45626] [client 4.194.69.42:15249] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "aUJ1YeVNGQfJ1rR90pQnCgAAAMA"]
[Wed Dec 17 17:18:26.059027 2025] [:error] [pid 45532:tid 45597] [client 4.194.69.42:15320] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "aUJ1YgeWB-JXOyTKNs0KXwAAAIc"]
[Wed Dec 17 17:18:27.867062 2025] [:error] [pid 45530:tid 45559] [client 4.194.69.42:15276] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtt.php"] [unique_id "aUJ1Y24IsXcKlf7LWf_jPgAAABg"]
[Wed Dec 17 17:18:29.695630 2025] [:error] [pid 45531:tid 45571] [client 4.194.69.42:15268] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtt.php"] [unique_id "aUJ1ZYjuE-Fd-sBWjvVOmAAAAEg"]
[Wed Dec 17 17:18:32.645723 2025] [:error] [pid 45531:tid 45573] [client 4.194.69.42:15105] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtt.php"] [unique_id "aUJ1aIjuE-Fd-sBWjvVOuAAAAEo"]
[Wed Dec 17 17:18:34.258413 2025] [:error] [pid 45530:tid 45545] [client 4.194.69.42:15342] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtt.php"] [unique_id "aUJ1am4IsXcKlf7LWf_jkwAAAAo"]
[Wed Dec 17 17:18:34.851580 2025] [:error] [pid 45532:tid 45597] [client 4.194.69.42:15316] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aUJ1ageWB-JXOyTKNs0KgAAAAIc"]
[Wed Dec 17 17:18:35.276156 2025] [:error] [pid 11733:tid 11748] [client 4.194.69.42:15286] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aUJ1azzmtBRXExJb1PHrhQAAAQ0"]
[Wed Dec 17 17:18:35.697648 2025] [:error] [pid 11733:tid 11745] [client 4.194.69.42:15271] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aUJ1azzmtBRXExJb1PHriQAAAQo"]
[Wed Dec 17 17:19:24.644982 2025] [:error] [pid 45621:tid 45645] [client 4.194.69.42:15261] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5b9ac.php"] [unique_id "aUJ1nOVNGQfJ1rR90pQnuQAAANM"]
[Wed Dec 17 17:19:25.518709 2025] [:error] [pid 45531:tid 45565] [client 4.194.69.42:15216] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5b9ac.php"] [unique_id "aUJ1nYjuE-Fd-sBWjvVPQgAAAEI"]
[Wed Dec 17 17:19:27.939931 2025] [:error] [pid 11733:tid 11736] [client 4.194.69.42:15194] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5b9ac.php"] [unique_id "aUJ1nzzmtBRXExJb1PHr8AAAAQE"]
[Wed Dec 17 17:19:30.412019 2025] [:error] [pid 45621:tid 45642] [client 4.194.69.42:15225] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5b9ac.php"] [unique_id "aUJ1ouVNGQfJ1rR90pQnwAAAANA"]
[Wed Dec 17 17:19:31.540735 2025] [:error] [pid 45530:tid 45553] [client 4.194.69.42:15348] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aUJ1o24IsXcKlf7LWf_kawAAABI"]
[Wed Dec 17 17:19:32.201087 2025] [:error] [pid 45530:tid 45539] [client 4.194.69.42:15197] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aUJ1pG4IsXcKlf7LWf_kbQAAAAQ"]
[Wed Dec 17 17:19:32.868341 2025] [:error] [pid 45530:tid 45536] [client 4.194.69.42:15196] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aUJ1pG4IsXcKlf7LWf_kcQAAAAE"]
[Wed Dec 17 17:19:33.558782 2025] [:error] [pid 45531:tid 45587] [client 4.194.69.42:15312] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aUJ1pYjuE-Fd-sBWjvVPXAAAAFg"]
[Wed Dec 17 17:19:34.503885 2025] [:error] [pid 45531:tid 45567] [client 4.194.69.42:15193] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "aUJ1pojuE-Fd-sBWjvVPXgAAAEQ"]
[Wed Dec 17 17:19:35.177410 2025] [:error] [pid 45530:tid 45542] [client 4.194.69.42:15270] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "aUJ1p24IsXcKlf7LWf_kggAAAAc"]
[Wed Dec 17 17:19:36.696396 2025] [:error] [pid 45532:tid 45603] [client 4.194.69.42:15247] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "aUJ1qAeWB-JXOyTKNs0LKAAAAI0"]
[Wed Dec 17 17:19:37.604566 2025] [:error] [pid 45530:tid 45555] [client 4.194.69.42:15328] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "aUJ1qW4IsXcKlf7LWf_kkQAAABQ"]
[Wed Dec 17 17:19:38.583043 2025] [:error] [pid 45530:tid 45536] [client 4.194.69.42:15182] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ce.php"] [unique_id "aUJ1qm4IsXcKlf7LWf_kmgAAAAE"]
[Wed Dec 17 17:19:39.455448 2025] [:error] [pid 45530:tid 45540] [client 4.194.69.42:15234] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ce.php"] [unique_id "aUJ1q24IsXcKlf7LWf_kngAAAAU"]
[Wed Dec 17 17:19:40.611254 2025] [:error] [pid 11733:tid 11735] [client 4.194.69.42:15179] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ce.php"] [unique_id "aUJ1rDzmtBRXExJb1PHr9QAAAQA"]
[Wed Dec 17 17:19:41.586370 2025] [:error] [pid 45531:tid 45586] [client 4.194.69.42:15263] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ce.php"] [unique_id "aUJ1rYjuE-Fd-sBWjvVPbAAAAFc"]
[Wed Dec 17 17:19:42.952918 2025] [:error] [pid 45531:tid 45570] [client 4.194.69.42:15283] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "aUJ1rojuE-Fd-sBWjvVPcgAAAEc"]
[Wed Dec 17 17:19:44.022072 2025] [:error] [pid 45532:tid 45613] [client 4.194.69.42:15280] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "aUJ1sAeWB-JXOyTKNs0LOAAAAJc"]
[Wed Dec 17 17:19:44.771878 2025] [:error] [pid 45531:tid 45579] [client 4.194.69.42:15168] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "aUJ1sIjuE-Fd-sBWjvVPegAAAFA"]
[Wed Dec 17 17:19:45.484796 2025] [:error] [pid 45532:tid 45614] [client 4.194.69.42:15265] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "aUJ1sQeWB-JXOyTKNs0LPAAAAJg"]
[Wed Dec 17 17:19:46.470982 2025] [:error] [pid 11733:tid 11747] [client 4.194.69.42:15228] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "aUJ1sjzmtBRXExJb1PHr-QAAAQw"]
[Wed Dec 17 17:19:48.158126 2025] [:error] [pid 11733:tid 11753] [client 4.194.69.42:15260] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "aUJ1tDzmtBRXExJb1PHsAAAAARI"]
[Wed Dec 17 17:19:52.209449 2025] [:error] [pid 45530:tid 45544] [client 4.194.69.42:15195] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "aUJ1uG4IsXcKlf7LWf_kwQAAAAk"]
[Wed Dec 17 17:19:53.925728 2025] [:error] [pid 11733:tid 11739] [client 4.194.69.42:15191] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "aUJ1uTzmtBRXExJb1PHsFAAAAQQ"]
[Wed Dec 17 17:19:57.392914 2025] [:error] [pid 45530:tid 45542] [client 4.194.69.42:15282] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asa.php"] [unique_id "aUJ1vW4IsXcKlf7LWf_k1AAAAAc"]
[Wed Dec 17 17:20:03.647977 2025] [:error] [pid 45531:tid 45585] [client 4.194.69.42:15274] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asa.php"] [unique_id "aUJ1w4juE-Fd-sBWjvVPpgAAAFY"]
[Wed Dec 17 17:20:04.185138 2025] [:error] [pid 45532:tid 45608] [client 4.194.69.42:15253] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asa.php"] [unique_id "aUJ1xAeWB-JXOyTKNs0LVAAAAJI"]
[Wed Dec 17 17:20:04.484286 2025] [:error] [pid 45532:tid 45595] [client 4.194.69.42:15119] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asa.php"] [unique_id "aUJ1xAeWB-JXOyTKNs0LVgAAAIU"]
[Wed Dec 17 17:20:05.173997 2025] [:error] [pid 45531:tid 45578] [client 4.194.69.42:15243] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4fk6.php"] [unique_id "aUJ1xYjuE-Fd-sBWjvVPrAAAAE8"]
[Wed Dec 17 17:20:06.379633 2025] [:error] [pid 45530:tid 45539] [client 4.194.69.42:15256] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4fk6.php"] [unique_id "aUJ1xm4IsXcKlf7LWf_k8gAAAAQ"]
[Wed Dec 17 17:20:07.506387 2025] [:error] [pid 45530:tid 45558] [client 4.194.69.42:15198] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4fk6.php"] [unique_id "aUJ1x24IsXcKlf7LWf_k9gAAABc"]
[Wed Dec 17 17:20:09.205425 2025] [:error] [pid 45532:tid 45607] [client 4.194.69.42:15170] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4fk6.php"] [unique_id "aUJ1yQeWB-JXOyTKNs0LWwAAAJE"]
[Wed Dec 17 17:20:11.545429 2025] [:error] [pid 45621:tid 45634] [client 4.194.69.42:15054] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z123.php"] [unique_id "aUJ1y-VNGQfJ1rR90pQoHwAAAMg"]
[Wed Dec 17 17:20:14.306738 2025] [:error] [pid 45530:tid 45544] [client 4.194.69.42:15262] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z123.php"] [unique_id "aUJ1zm4IsXcKlf7LWf_lCwAAAAk"]
[Wed Dec 17 17:20:16.160339 2025] [:error] [pid 45530:tid 45542] [client 4.194.69.42:15347] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z123.php"] [unique_id "aUJ10G4IsXcKlf7LWf_lFQAAAAc"]
[Wed Dec 17 17:20:18.071106 2025] [:error] [pid 45532:tid 45596] [client 4.194.69.42:15311] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z123.php"] [unique_id "aUJ10geWB-JXOyTKNs0LcQAAAIY"]
[Wed Dec 17 17:20:20.919776 2025] [:error] [pid 11733:tid 11754] [client 4.194.69.42:15218] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aUJ11DzmtBRXExJb1PHsMAAAARM"]
[Wed Dec 17 17:21:07.771868 2025] [:error] [pid 45531:tid 45582] [client 4.194.69.42:15142] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "aUJ2A4juE-Fd-sBWjvVQFgAAAFM"]
[Wed Dec 17 17:21:09.005190 2025] [:error] [pid 11733:tid 11736] [client 4.194.69.42:15353] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "aUJ2BTzmtBRXExJb1PHsmwAAAQE"]
[Wed Dec 17 17:21:10.394169 2025] [:error] [pid 45531:tid 45586] [client 4.194.69.42:15181] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "aUJ2BojuE-Fd-sBWjvVQIwAAAFc"]
[Wed Dec 17 17:21:12.010466 2025] [:error] [pid 11733:tid 11755] [client 4.194.69.42:15244] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "aUJ2CDzmtBRXExJb1PHsowAAARQ"]
[Wed Dec 17 17:21:13.381411 2025] [:error] [pid 45532:tid 45591] [client 4.194.69.42:15266] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aUJ2CQeWB-JXOyTKNs0L2AAAAIE"]
[Wed Dec 17 17:21:16.004601 2025] [:error] [pid 45532:tid 45608] [client 4.194.69.42:15277] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aUJ2DAeWB-JXOyTKNs0L3AAAAJI"]
[Wed Dec 17 17:21:17.079648 2025] [:error] [pid 11733:tid 11751] [client 4.194.69.42:15213] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aUJ2DTzmtBRXExJb1PHsqwAAARA"]
[Wed Dec 17 17:21:19.223007 2025] [:error] [pid 45530:tid 45548] [client 4.194.69.42:15334] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aUJ2D24IsXcKlf7LWf_l_QAAAA0"]
[Wed Dec 17 17:21:21.815136 2025] [:error] [pid 45532:tid 45602] [client 4.194.69.42:15171] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aUJ2EQeWB-JXOyTKNs0MCwAAAIw"]
[Wed Dec 17 17:21:23.004150 2025] [:error] [pid 45531:tid 45586] [client 4.194.69.42:15235] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aUJ2E4juE-Fd-sBWjvVQSwAAAFc"]
[Wed Dec 17 17:21:23.687957 2025] [:error] [pid 45621:tid 45635] [client 4.194.69.42:15300] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aUJ2E-VNGQfJ1rR90pQozQAAAMk"]
[Wed Dec 17 17:21:24.571401 2025] [:error] [pid 45621:tid 45647] [client 4.194.69.42:15324] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aUJ2FOVNGQfJ1rR90pQo0QAAANU"]
[Wed Dec 17 17:21:26.966562 2025] [:error] [pid 45532:tid 45606] [client 4.194.69.42:15314] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUJ2FgeWB-JXOyTKNs0MEAAAAJA"]
[Wed Dec 17 17:21:28.521624 2025] [:error] [pid 45621:tid 45647] [client 4.194.69.42:15254] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUJ2GOVNGQfJ1rR90pQo3wAAANU"]
[Wed Dec 17 17:21:31.072737 2025] [:error] [pid 45530:tid 45553] [client 4.194.69.42:15358] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUJ2G24IsXcKlf7LWf_mFAAAABI"]
[Wed Dec 17 17:21:33.452249 2025] [:error] [pid 45621:tid 45640] [client 4.194.69.42:15352] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUJ2HeVNGQfJ1rR90pQo6gAAAM4"]
[Wed Dec 17 17:21:35.003598 2025] [:error] [pid 45532:tid 45614] [client 4.194.69.42:15289] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "aUJ2HweWB-JXOyTKNs0MHQAAAJg"]
[Wed Dec 17 17:21:36.999659 2025] [:error] [pid 45530:tid 45559] [client 4.194.69.42:15302] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "aUJ2IG4IsXcKlf7LWf_mFwAAABg"]
[Wed Dec 17 17:21:38.249703 2025] [:error] [pid 45531:tid 45563] [client 4.194.69.42:15327] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "aUJ2IojuE-Fd-sBWjvVQbwAAAEA"]
[Wed Dec 17 17:21:39.762320 2025] [:error] [pid 45530:tid 45557] [client 4.194.69.42:15169] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "aUJ2I24IsXcKlf7LWf_mHwAAABY"]
[Wed Dec 17 17:21:41.331127 2025] [:error] [pid 11733:tid 11743] [client 4.194.69.42:15245] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aUJ2JTzmtBRXExJb1PHs4wAAAQg"]
[Wed Dec 17 17:21:42.723564 2025] [:error] [pid 45531:tid 45580] [client 4.194.69.42:15178] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aUJ2JojuE-Fd-sBWjvVQfAAAAFE"]
[Wed Dec 17 17:21:44.849248 2025] [:error] [pid 45532:tid 45610] [client 4.194.69.42:15295] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aUJ2KAeWB-JXOyTKNs0MKwAAAJQ"]
[Wed Dec 17 17:21:46.656362 2025] [:error] [pid 45621:tid 45644] [client 4.194.69.42:15212] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aUJ2KuVNGQfJ1rR90pQo_QAAANI"]
[Wed Dec 17 17:21:49.603887 2025] [:error] [pid 45621:tid 45640] [client 4.194.69.42:15354] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aUJ2LeVNGQfJ1rR90pQpCQAAAM4"]
[Wed Dec 17 17:21:51.054631 2025] [:error] [pid 45531:tid 45572] [client 4.194.69.42:15323] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aUJ2L4juE-Fd-sBWjvVQgAAAAEk"]
[Wed Dec 17 17:21:52.330991 2025] [:error] [pid 45530:tid 45555] [client 4.194.69.42:15350] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aUJ2MG4IsXcKlf7LWf_mMQAAABQ"]
[Wed Dec 17 17:21:53.391788 2025] [:error] [pid 45532:tid 45602] [client 4.194.69.42:15298] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aUJ2MQeWB-JXOyTKNs0MNQAAAIw"]
[Wed Dec 17 17:21:54.608880 2025] [:error] [pid 11733:tid 11746] [client 4.194.69.42:15267] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUJ2MjzmtBRXExJb1PHs8wAAAQs"]
[Wed Dec 17 17:21:56.173535 2025] [:error] [pid 45621:tid 45627] [client 4.194.69.42:15296] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUJ2NOVNGQfJ1rR90pQpEwAAAME"]
[Wed Dec 17 17:21:57.349140 2025] [:error] [pid 11733:tid 11743] [client 4.194.69.42:15357] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUJ2NTzmtBRXExJb1PHs-gAAAQg"]
[Wed Dec 17 17:21:58.593762 2025] [:error] [pid 11733:tid 11739] [client 4.194.69.42:15344] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUJ2NjzmtBRXExJb1PHs_QAAAQQ"]
[Wed Dec 17 17:21:59.693240 2025] [:error] [pid 45530:tid 45541] [client 4.194.69.42:15248] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "aUJ2N24IsXcKlf7LWf_mQgAAAAY"]
[Wed Dec 17 17:22:00.800640 2025] [:error] [pid 11733:tid 11755] [client 4.194.69.42:15317] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "aUJ2ODzmtBRXExJb1PHtAAAAARQ"]
[Wed Dec 17 17:22:01.594797 2025] [:error] [pid 45621:tid 45638] [client 4.194.69.42:15351] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "aUJ2OeVNGQfJ1rR90pQpJAAAAMw"]
[Wed Dec 17 17:22:02.600844 2025] [:error] [pid 45531:tid 45573] [client 4.194.69.42:15305] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "aUJ2OojuE-Fd-sBWjvVQkQAAAEo"]
[Wed Dec 17 17:22:04.147405 2025] [:error] [pid 45531:tid 45570] [client 4.194.69.42:15134] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rp8zi.php"] [unique_id "aUJ2PIjuE-Fd-sBWjvVQlAAAAEc"]
[Wed Dec 17 17:23:21.002062 2025] [:error] [pid 11733:tid 11757] [client 4.194.69.42:15251] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUJ2iTzmtBRXExJb1PHt5QAAARY"]
[Wed Dec 17 17:23:22.035496 2025] [:error] [pid 45531:tid 45569] [client 4.194.69.42:15113] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUJ2iojuE-Fd-sBWjvVRTwAAAEY"]
[Wed Dec 17 17:23:23.244779 2025] [:error] [pid 11733:tid 11737] [client 4.194.69.42:15287] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUJ2izzmtBRXExJb1PHt7AAAAQI"]
[Wed Dec 17 17:23:24.728157 2025] [:error] [pid 45621:tid 45637] [client 4.194.69.42:15337] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUJ2jOVNGQfJ1rR90pQqcwAAAMs"]
[Wed Dec 17 17:23:26.405935 2025] [:error] [pid 45621:tid 45638] [client 4.194.69.42:15345] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUJ2juVNGQfJ1rR90pQqeQAAAMw"]
[Wed Dec 17 17:23:28.075104 2025] [:error] [pid 45532:tid 45598] [client 4.194.69.42:15264] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUJ2kAeWB-JXOyTKNs0NoQAAAIg"]
[Wed Dec 17 17:23:29.757759 2025] [:error] [pid 45531:tid 45576] [client 4.194.69.42:15104] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUJ2kYjuE-Fd-sBWjvVRVQAAAE0"]
[Wed Dec 17 17:23:32.029633 2025] [:error] [pid 45531:tid 45584] [client 4.194.69.42:15315] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUJ2lIjuE-Fd-sBWjvVRWAAAAFU"]
[Wed Dec 17 17:23:32.528007 2025] [:error] [pid 45530:tid 45535] [client 4.194.69.42:15188] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mhpglaje.php"] [unique_id "aUJ2lG4IsXcKlf7LWf_nfAAAAAA"]
[Wed Dec 17 17:23:35.646844 2025] [:error] [pid 11733:tid 11757] [client 4.194.69.42:15161] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mhpglaje.php"] [unique_id "aUJ2lzzmtBRXExJb1PHuHAAAARY"]
[Wed Dec 17 17:23:39.740801 2025] [:error] [pid 45532:tid 45606] [client 4.194.69.42:15346] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mhpglaje.php"] [unique_id "aUJ2mweWB-JXOyTKNs0NqgAAAJA"]
[Wed Dec 17 17:23:41.046008 2025] [:error] [pid 45621:tid 45629] [client 4.194.69.42:15340] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mhpglaje.php"] [unique_id "aUJ2neVNGQfJ1rR90pQqtwAAAMM"]
[Wed Dec 17 17:23:42.309893 2025] [:error] [pid 45531:tid 45572] [client 4.194.69.42:15310] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUJ2nojuE-Fd-sBWjvVRYwAAAEk"]
[Wed Dec 17 17:23:44.163919 2025] [:error] [pid 45621:tid 45630] [client 4.194.69.42:15259] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUJ2oOVNGQfJ1rR90pQqxAAAAMQ"]
[Wed Dec 17 17:23:45.518862 2025] [:error] [pid 45531:tid 45579] [client 4.194.69.42:15299] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUJ2oYjuE-Fd-sBWjvVRaAAAAFA"]
[Wed Dec 17 17:23:48.279580 2025] [:error] [pid 45530:tid 45550] [client 4.194.69.42:15246] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUJ2pG4IsXcKlf7LWf_nsgAAAA8"]
[Wed Dec 17 17:23:50.815787 2025] [:error] [pid 45531:tid 45569] [client 4.194.69.42:15261] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUJ2pojuE-Fd-sBWjvVRdAAAAEY"]
[Wed Dec 17 17:23:52.527127 2025] [:error] [pid 45530:tid 45546] [client 4.194.69.42:15304] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUJ2qG4IsXcKlf7LWf_nuwAAAAs"]
[Wed Dec 17 17:23:55.033148 2025] [:error] [pid 11733:tid 11744] [client 4.194.69.42:15269] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUJ2qzzmtBRXExJb1PHuLQAAAQk"]
[Wed Dec 17 17:23:56.610329 2025] [:error] [pid 11733:tid 11745] [client 4.194.69.42:15294] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUJ2rDzmtBRXExJb1PHuLgAAAQo"]
[Wed Dec 17 17:23:58.606212 2025] [:error] [pid 45621:tid 45634] [client 4.194.69.42:15273] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUJ2ruVNGQfJ1rR90pQq2gAAAMg"]
[Wed Dec 17 17:24:01.391911 2025] [:error] [pid 11733:tid 11735] [client 4.194.69.42:15349] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUJ2sTzmtBRXExJb1PHuNAAAAQA"]
[Wed Dec 17 17:24:02.297951 2025] [:error] [pid 45530:tid 45541] [client 4.194.69.42:15271] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUJ2sm4IsXcKlf7LWf_n0QAAAAY"]
[Wed Dec 17 17:24:03.514839 2025] [:error] [pid 11733:tid 11750] [client 4.194.69.42:15332] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUJ2szzmtBRXExJb1PHuOAAAAQ8"]
[Wed Dec 17 17:24:05.000898 2025] [:error] [pid 45532:tid 45607] [client 4.194.69.42:15336] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUJ2tAeWB-JXOyTKNs0N1wAAAJE"]
[Wed Dec 17 17:24:05.739761 2025] [:error] [pid 45621:tid 45636] [client 4.194.69.42:15239] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUJ2teVNGQfJ1rR90pQq7gAAAMo"]
[Wed Dec 17 17:24:06.728458 2025] [:error] [pid 11733:tid 11741] [client 4.194.69.42:15260] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUJ2tjzmtBRXExJb1PHuQAAAAQY"]
[Wed Dec 17 17:24:08.526387 2025] [:error] [pid 45531:tid 45584] [client 4.194.69.42:15242] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUJ2uIjuE-Fd-sBWjvVRfgAAAFU"]
[Wed Dec 17 17:24:11.506431 2025] [:error] [pid 45532:tid 45610] [client 4.194.69.42:15320] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUJ2uweWB-JXOyTKNs0N3QAAAJQ"]
[Wed Dec 17 17:24:13.796005 2025] [:error] [pid 11733:tid 11747] [client 4.194.69.42:15250] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUJ2vTzmtBRXExJb1PHuRwAAAQw"]
[Wed Dec 17 17:24:15.848360 2025] [:error] [pid 45531:tid 45563] [client 4.194.69.42:15319] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUJ2v4juE-Fd-sBWjvVRhAAAAEA"]
[Wed Dec 17 17:24:17.469608 2025] [:error] [pid 11733:tid 11758] [client 4.194.69.42:15243] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUJ2wTzmtBRXExJb1PHuSQAAARc"]
[Wed Dec 17 17:25:04.749967 2025] [:error] [pid 45530:tid 45557] [client 4.194.69.42:15236] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUJ28G4IsXcKlf7LWf_okwAAABY"]
[Wed Dec 17 17:25:06.422491 2025] [:error] [pid 45531:tid 45570] [client 4.194.69.42:15297] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUJ28ojuE-Fd-sBWjvVR_AAAAEc"]
[Wed Dec 17 17:25:07.020783 2025] [:error] [pid 45532:tid 45601] [client 4.194.69.42:15249] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUJ28weWB-JXOyTKNs0OWAAAAIs"]
[Wed Dec 17 17:25:07.919386 2025] [:error] [pid 45530:tid 45545] [client 4.194.69.42:15194] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUJ2824IsXcKlf7LWf_omAAAAAo"]
[Wed Dec 17 17:25:09.480119 2025] [:error] [pid 45530:tid 45546] [client 4.194.69.42:15286] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aUJ29W4IsXcKlf7LWf_onAAAAAs"]
[Wed Dec 17 17:25:12.064222 2025] [:error] [pid 45621:tid 45626] [client 4.194.69.42:15335] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aUJ2-OVNGQfJ1rR90pQsTQAAAMA"]
[Wed Dec 17 17:25:13.132516 2025] [:error] [pid 45532:tid 45614] [client 4.194.69.42:15313] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aUJ2-QeWB-JXOyTKNs0OXQAAAJg"]
[Wed Dec 17 17:25:13.892658 2025] [:error] [pid 45530:tid 45552] [client 4.194.69.42:15263] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aUJ2-W4IsXcKlf7LWf_opQAAABE"]
[Wed Dec 17 17:25:14.997847 2025] [:error] [pid 45532:tid 45599] [client 4.194.69.42:15170] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aUJ2-geWB-JXOyTKNs0OYAAAAIk"]
[Wed Dec 17 17:25:16.605684 2025] [:error] [pid 45532:tid 45598] [client 4.194.69.42:15189] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aUJ2_AeWB-JXOyTKNs0OYQAAAIg"]
[Wed Dec 17 17:25:17.551399 2025] [:error] [pid 45531:tid 45563] [client 4.194.69.42:15247] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aUJ2_YjuE-Fd-sBWjvVSDAAAAEA"]
[Wed Dec 17 17:25:18.309600 2025] [:error] [pid 11733:tid 11741] [client 4.194.69.42:15108] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aUJ2_jzmtBRXExJb1PHurQAAAQY"]
[Wed Dec 17 17:25:18.811441 2025] [:error] [pid 11733:tid 11736] [client 4.194.69.42:15316] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aUJ2_jzmtBRXExJb1PHurgAAAQE"]
[Wed Dec 17 17:25:20.235778 2025] [:error] [pid 45621:tid 45650] [client 4.194.69.42:15331] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aUJ3AOVNGQfJ1rR90pQsVgAAANg"]
[Wed Dec 17 17:25:21.965123 2025] [:error] [pid 11733:tid 11747] [client 4.194.69.42:15191] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aUJ3ATzmtBRXExJb1PHutAAAAQw"]
[Wed Dec 17 17:25:23.881833 2025] [:error] [pid 11733:tid 11736] [client 4.194.69.42:15185] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aUJ3AzzmtBRXExJb1PHuuQAAAQE"]
[Wed Dec 17 17:25:24.600950 2025] [:error] [pid 45621:tid 45637] [client 4.194.69.42:15202] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dejavu.php"] [unique_id "aUJ3BOVNGQfJ1rR90pQsagAAAMs"]
[Wed Dec 17 17:25:25.602189 2025] [:error] [pid 11733:tid 11735] [client 4.194.69.42:15240] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dejavu.php"] [unique_id "aUJ3BTzmtBRXExJb1PHuwAAAAQA"]
[Wed Dec 17 17:25:26.907718 2025] [:error] [pid 45621:tid 45635] [client 4.194.69.42:15184] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dejavu.php"] [unique_id "aUJ3BuVNGQfJ1rR90pQscQAAAMk"]
[Wed Dec 17 17:25:28.269233 2025] [:error] [pid 45621:tid 45634] [client 4.194.69.42:15186] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dejavu.php"] [unique_id "aUJ3COVNGQfJ1rR90pQsdAAAAMg"]
[Wed Dec 17 17:25:29.394214 2025] [:error] [pid 11733:tid 11756] [client 4.194.69.42:15135] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aUJ3CTzmtBRXExJb1PHuxgAAARU"]
[Wed Dec 17 17:25:30.817293 2025] [:error] [pid 45530:tid 45557] [client 4.194.69.42:15329] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aUJ3Cm4IsXcKlf7LWf_osgAAABY"]
[Wed Dec 17 17:25:32.034418 2025] [:error] [pid 45530:tid 45559] [client 4.194.69.42:15284] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aUJ3DG4IsXcKlf7LWf_otgAAABg"]
[Wed Dec 17 17:25:32.858055 2025] [:error] [pid 45530:tid 45540] [client 4.194.69.42:15303] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aUJ3DG4IsXcKlf7LWf_ouAAAAAU"]
[Wed Dec 17 17:25:34.028381 2025] [:error] [pid 45532:tid 45611] [client 4.194.69.42:15347] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aUJ3DgeWB-JXOyTKNs0OcwAAAJU"]
[Wed Dec 17 17:25:34.712705 2025] [:error] [pid 45530:tid 45536] [client 4.194.69.42:15222] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aUJ3Dm4IsXcKlf7LWf_ouwAAAAE"]
[Wed Dec 17 17:25:35.336050 2025] [:error] [pid 45530:tid 45555] [client 4.194.69.42:15270] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aUJ3D24IsXcKlf7LWf_ovAAAABQ"]
[Wed Dec 17 17:25:36.517286 2025] [:error] [pid 45532:tid 45601] [client 4.194.69.42:15244] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aUJ3EAeWB-JXOyTKNs0OdgAAAIs"]
[Wed Dec 17 17:25:37.576118 2025] [:error] [pid 45531:tid 45575] [client 4.194.69.42:15314] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUJ3EYjuE-Fd-sBWjvVSKwAAAEw"]
[Wed Dec 17 17:25:38.199637 2025] [:error] [pid 45530:tid 45556] [client 4.194.69.42:15312] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUJ3Em4IsXcKlf7LWf_owgAAABU"]
[Wed Dec 17 17:25:39.383074 2025] [:error] [pid 11733:tid 11752] [client 4.194.69.42:15257] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUJ3EzzmtBRXExJb1PHu0gAAARE"]
[Wed Dec 17 17:25:41.379767 2025] [:error] [pid 45530:tid 45550] [client 4.194.69.42:15256] [client 4.194.69.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUJ3FW4IsXcKlf7LWf_oyAAAAA8"]
[Thu Dec 18 00:21:58.737074 2025] [:error] [pid 43580:tid 43596] [client 34.52.216.176:54295] [client 34.52.216.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.52.216.176, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aULYptw5Ex8-DN38kP3eEAAAAI4"]
[Thu Dec 18 00:22:05.420701 2025] [:error] [pid 43580:tid 43591] [client 34.52.216.176:54295] [client 34.52.216.176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aULYrdw5Ex8-DN38kP3eIwAAAIk"]
[Thu Dec 18 00:22:08.557821 2025] [:error] [pid 43580:tid 43583] [client 34.52.216.176:54295] [client 34.52.216.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.52.216.176, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aULYsNw5Ex8-DN38kP3eLgAAAIE"]
[Thu Dec 18 02:04:07.722048 2025] [:error] [pid 63337:tid 63352] [client 193.36.224.103:54265] [client 193.36.224.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aULwl9Sc2ofHSwVzjx-kuQAAAQ0"]
[Thu Dec 18 02:04:08.195222 2025] [:error] [pid 43493:tid 43520] [client 193.36.224.54:63731] [client 193.36.224.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/txets.php"] [unique_id "aULwmKJPcefhPyLljLx9vwAAABQ"]
[Thu Dec 18 02:04:08.669983 2025] [:error] [pid 43494:tid 43536] [client 193.36.224.62:56473] [client 193.36.224.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aULwmOpvK2pzfvdDETp-KQAAAEk"]
[Thu Dec 18 06:51:13.792087 2025] [autoindex:error] [pid 24542:tid 24562] [client 193.19.109.182:61249] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:14.234958 2025] [autoindex:error] [pid 24542:tid 24565] [client 193.19.109.182:61249] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:14.618246 2025] [autoindex:error] [pid 24542:tid 24551] [client 193.19.109.182:61249] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:15.024051 2025] [autoindex:error] [pid 24542:tid 24557] [client 193.19.109.182:61249] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 19:01:02.611730 2025] [:error] [pid 23558:tid 23628] [client 4.189.153.110:10780] [client 4.189.153.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.153.110, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aUPe7uHam9NbgPQa9ub8-QAAAM0"]
[Thu Dec 18 19:01:04.451930 2025] [:error] [pid 23558:tid 23627] [client 4.189.153.110:10780] [client 4.189.153.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.153.110, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aUPe8OHam9NbgPQa9ub8_AAAAMw"]
[Thu Dec 18 19:01:29.176881 2025] [:error] [pid 23645:tid 23661] [client 4.189.153.110:10761] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aUPfCTf_Rx0Y0ao_QJhDOAAAAI4"]
[Thu Dec 18 19:01:29.525087 2025] [:error] [pid 12383:tid 12389] [client 4.189.153.110:10854] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aUPfCfdgllo9h1cyxGat8QAAAsM"]
[Thu Dec 18 19:01:29.874809 2025] [:error] [pid 23558:tid 23635] [client 4.189.153.110:10762] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aUPfCeHam9NbgPQa9ub9NgAAANQ"]
[Thu Dec 18 19:01:30.171000 2025] [:error] [pid 24542:tid 24552] [client 4.189.153.110:10839] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aUPfCktQz4H2oS3NrDbqzgAAAUg"]
[Thu Dec 18 19:01:30.470195 2025] [:error] [pid 23558:tid 23639] [client 4.189.153.110:10871] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aUPfCuHam9NbgPQa9ub9OAAAANg"]
[Thu Dec 18 19:01:30.791660 2025] [:error] [pid 23556:tid 23572] [client 4.189.153.110:10826] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aUPfChnmLlk3u5yt9kHNXQAAAAw"]
[Thu Dec 18 19:01:31.123048 2025] [:error] [pid 12239:tid 12264] [client 4.189.153.110:10865] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aUPfC9NnXxfGIuWO6anyOQAAApQ"]
[Thu Dec 18 19:01:31.549246 2025] [:error] [pid 12035:tid 12061] [client 4.189.153.110:10833] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aUPfC7cVHrNSHjCo-0qBZgAAAhI"]
[Thu Dec 18 19:01:31.852850 2025] [:error] [pid 23558:tid 23628] [client 4.189.153.110:10869] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aUPfC-Ham9NbgPQa9ub9OgAAAM0"]
[Thu Dec 18 19:01:32.196825 2025] [:error] [pid 23645:tid 23651] [client 4.189.153.110:10775] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aUPfDDf_Rx0Y0ao_QJhDOgAAAIQ"]
[Thu Dec 18 19:01:32.498884 2025] [:error] [pid 23556:tid 23584] [client 4.189.153.110:10765] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aUPfDBnmLlk3u5yt9kHNYQAAABg"]
[Thu Dec 18 19:01:32.809387 2025] [:error] [pid 24958:tid 24978] [client 4.189.153.110:10856] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aUPfDMkDOrUkd0wNm2G2XwAAAZE"]
[Thu Dec 18 19:01:33.167090 2025] [:error] [pid 12239:tid 12260] [client 4.189.153.110:10827] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aUPfDdNnXxfGIuWO6anyQAAAApA"]
[Thu Dec 18 19:01:33.643022 2025] [:error] [pid 12239:tid 12245] [client 4.189.153.110:10860] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aUPfDdNnXxfGIuWO6anyQgAAAoE"]
[Thu Dec 18 19:01:33.941642 2025] [:error] [pid 24433:tid 24455] [client 4.189.153.110:10862] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aUPfDZ4pN9ycmipm8TjBWwAAARM"]
[Thu Dec 18 19:01:34.279152 2025] [:error] [pid 23556:tid 23569] [client 4.189.153.110:10779] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aUPfDhnmLlk3u5yt9kHNYwAAAAk"]
[Thu Dec 18 19:01:34.581078 2025] [:error] [pid 24433:tid 24436] [client 4.189.153.110:10770] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aUPfDp4pN9ycmipm8TjBXAAAAQA"]
[Thu Dec 18 19:01:34.866910 2025] [:error] [pid 25357:tid 25372] [client 4.189.153.110:10844] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aUPfDoaT7bsEXnJVfJdLiAAAAc0"]
[Thu Dec 18 19:01:35.142287 2025] [:error] [pid 24542:tid 24555] [client 4.189.153.110:10777] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aUPfD0tQz4H2oS3NrDbq0wAAAUs"]
[Thu Dec 18 19:01:35.583840 2025] [:error] [pid 12383:tid 12393] [client 4.189.153.110:10863] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aUPfD_dgllo9h1cyxGat9gAAAsc"]
[Thu Dec 18 19:01:35.872027 2025] [:error] [pid 24958:tid 24969] [client 4.189.153.110:10835] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aUPfD8kDOrUkd0wNm2G2YgAAAYg"]
[Thu Dec 18 19:01:36.270631 2025] [:error] [pid 24433:tid 24447] [client 4.189.153.110:10849] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aUPfEJ4pN9ycmipm8TjBXwAAAQs"]
[Thu Dec 18 19:01:36.625898 2025] [:error] [pid 12035:tid 12047] [client 4.189.153.110:10843] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aUPfELcVHrNSHjCo-0qBbQAAAgU"]
[Thu Dec 18 19:01:36.974015 2025] [:error] [pid 12035:tid 12056] [client 4.189.153.110:10834] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aUPfELcVHrNSHjCo-0qBbwAAAg0"]
[Thu Dec 18 19:01:37.337777 2025] [:error] [pid 12383:tid 12390] [client 4.189.153.110:10753] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aUPfEfdgllo9h1cyxGat-QAAAsQ"]
[Thu Dec 18 19:01:37.698134 2025] [:error] [pid 24433:tid 24438] [client 4.189.153.110:10858] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aUPfEZ4pN9ycmipm8TjBYQAAAQI"]
[Thu Dec 18 19:01:38.023861 2025] [:error] [pid 24542:tid 24561] [client 4.189.153.110:10874] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aUPfEktQz4H2oS3NrDbq1QAAAVE"]
[Thu Dec 18 19:01:38.359624 2025] [:error] [pid 24433:tid 24442] [client 4.189.153.110:10859] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aUPfEp4pN9ycmipm8TjBYwAAAQY"]
[Thu Dec 18 19:01:38.683727 2025] [:error] [pid 12239:tid 12250] [client 4.189.153.110:10768] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aUPfEtNnXxfGIuWO6anyRgAAAoY"]
[Thu Dec 18 19:01:39.004968 2025] [:error] [pid 12035:tid 12046] [client 4.189.153.110:10836] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aUPfE7cVHrNSHjCo-0qBdQAAAgQ"]
[Thu Dec 18 19:01:39.454352 2025] [:error] [pid 23645:tid 23656] [client 4.189.153.110:7158] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aUPfEzf_Rx0Y0ao_QJhDPAAAAIk"]
[Thu Dec 18 19:01:39.758601 2025] [:error] [pid 25357:tid 25371] [client 4.189.153.110:10803] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aUPfE4aT7bsEXnJVfJdLjwAAAcw"]
[Thu Dec 18 19:01:40.202946 2025] [:error] [pid 12035:tid 12065] [client 4.189.153.110:10771] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aUPfFLcVHrNSHjCo-0qBdgAAAhY"]
[Thu Dec 18 19:01:40.745001 2025] [:error] [pid 23645:tid 23655] [client 4.189.153.110:10867] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aUPfFDf_Rx0Y0ao_QJhDQAAAAIg"]
[Thu Dec 18 19:01:41.027668 2025] [:error] [pid 12239:tid 12253] [client 4.189.153.110:10812] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aUPfFdNnXxfGIuWO6anySAAAAok"]
[Thu Dec 18 19:01:41.369338 2025] [:error] [pid 25357:tid 25377] [client 4.189.153.110:10776] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aUPfFYaT7bsEXnJVfJdLkQAAAdI"]
[Thu Dec 18 19:01:41.907991 2025] [:error] [pid 23645:tid 23663] [client 4.189.153.110:10837] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aUPfFTf_Rx0Y0ao_QJhDQQAAAJA"]
[Thu Dec 18 19:01:42.263198 2025] [:error] [pid 24542:tid 24555] [client 4.189.153.110:10767] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aUPfFktQz4H2oS3NrDbq3AAAAUs"]
[Thu Dec 18 19:01:42.579747 2025] [:error] [pid 23558:tid 23635] [client 4.189.153.110:10768] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aUPfFuHam9NbgPQa9ub9VAAAANQ"]
[Thu Dec 18 19:01:42.897873 2025] [:error] [pid 24542:tid 24554] [client 4.189.153.110:10752] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aUPfFktQz4H2oS3NrDbq3QAAAUo"]
[Thu Dec 18 19:01:43.277834 2025] [:error] [pid 24958:tid 24978] [client 4.189.153.110:10842] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aUPfF8kDOrUkd0wNm2G2aAAAAZE"]
[Thu Dec 18 19:01:44.173307 2025] [:error] [pid 24958:tid 24975] [client 4.189.153.110:7127] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aUPfGMkDOrUkd0wNm2G2awAAAY4"]
[Thu Dec 18 19:01:44.567367 2025] [:error] [pid 23645:tid 23651] [client 4.189.153.110:10823] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aUPfGDf_Rx0Y0ao_QJhDRQAAAIQ"]
[Thu Dec 18 19:01:44.891080 2025] [:error] [pid 24958:tid 24977] [client 4.189.153.110:10790] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aUPfGMkDOrUkd0wNm2G2bQAAAZA"]
[Thu Dec 18 19:01:45.250853 2025] [:error] [pid 24433:tid 24436] [client 4.189.153.110:10805] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aUPfGZ4pN9ycmipm8TjBbAAAAQA"]
[Thu Dec 18 19:01:45.573102 2025] [:error] [pid 23556:tid 23573] [client 4.189.153.110:10818] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aUPfGRnmLlk3u5yt9kHNaQAAAA0"]
[Thu Dec 18 19:01:45.980465 2025] [:error] [pid 24433:tid 24441] [client 4.189.153.110:7167] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aUPfGZ4pN9ycmipm8TjBbwAAAQU"]
[Thu Dec 18 19:01:46.419791 2025] [:error] [pid 25357:tid 25363] [client 4.189.153.110:10822] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aUPfGoaT7bsEXnJVfJdLmAAAAcQ"]
[Thu Dec 18 19:01:46.809117 2025] [:error] [pid 12383:tid 12406] [client 4.189.153.110:7107] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aUPfGvdgllo9h1cyxGauDAAAAtQ"]
[Thu Dec 18 19:01:47.162566 2025] [:error] [pid 24542:tid 24545] [client 4.189.153.110:10830] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aUPfG0tQz4H2oS3NrDbq4gAAAUE"]
[Thu Dec 18 19:01:47.445133 2025] [:error] [pid 12035:tid 12058] [client 4.189.153.110:7137] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aUPfG7cVHrNSHjCo-0qBegAAAg8"]
[Thu Dec 18 19:01:47.790675 2025] [:error] [pid 12239:tid 12253] [client 4.189.153.110:10820] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aUPfG9NnXxfGIuWO6anyVwAAAok"]
[Thu Dec 18 19:01:48.121882 2025] [:error] [pid 23645:tid 23663] [client 4.189.153.110:10774] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aUPfHDf_Rx0Y0ao_QJhDTAAAAJA"]
[Thu Dec 18 19:01:48.461826 2025] [:error] [pid 23556:tid 23571] [client 4.189.153.110:10759] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aUPfHBnmLlk3u5yt9kHNbwAAAAs"]
[Thu Dec 18 19:01:48.778445 2025] [:error] [pid 12035:tid 12056] [client 4.189.153.110:7132] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aUPfHLcVHrNSHjCo-0qBfgAAAg0"]
[Thu Dec 18 19:01:49.155373 2025] [:error] [pid 23556:tid 23581] [client 4.189.153.110:10864] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aUPfHRnmLlk3u5yt9kHNcAAAABU"]
[Thu Dec 18 19:01:49.502323 2025] [:error] [pid 23558:tid 23624] [client 4.189.153.110:10828] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aUPfHeHam9NbgPQa9ub9agAAAMk"]
[Thu Dec 18 19:01:49.877762 2025] [:error] [pid 23556:tid 23565] [client 4.189.153.110:10782] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aUPfHRnmLlk3u5yt9kHNcQAAAAU"]
[Thu Dec 18 19:01:50.232477 2025] [:error] [pid 23556:tid 23576] [client 4.189.153.110:10821] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aUPfHhnmLlk3u5yt9kHNcgAAABA"]
[Thu Dec 18 19:01:50.545624 2025] [:error] [pid 12383:tid 12386] [client 4.189.153.110:10848] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aUPfHvdgllo9h1cyxGauDwAAAsA"]
[Thu Dec 18 19:01:50.861212 2025] [:error] [pid 23645:tid 23662] [client 4.189.153.110:10792] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aUPfHjf_Rx0Y0ao_QJhDUQAAAI8"]
[Thu Dec 18 19:01:51.223879 2025] [:error] [pid 12035:tid 12044] [client 4.189.153.110:10879] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aUPfH7cVHrNSHjCo-0qBggAAAgI"]
[Thu Dec 18 19:01:51.594724 2025] [:error] [pid 24542:tid 24547] [client 4.189.153.110:10783] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aUPfH0tQz4H2oS3NrDbq6wAAAUM"]
[Thu Dec 18 19:01:51.950707 2025] [:error] [pid 25357:tid 25373] [client 4.189.153.110:10870] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aUPfH4aT7bsEXnJVfJdLogAAAc4"]
[Thu Dec 18 19:01:52.275454 2025] [:error] [pid 23645:tid 23656] [client 4.189.153.110:10873] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aUPfIDf_Rx0Y0ao_QJhDVAAAAIk"]
[Thu Dec 18 19:01:52.605787 2025] [:error] [pid 23556:tid 23577] [client 4.189.153.110:10778] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aUPfIBnmLlk3u5yt9kHNdgAAABE"]
[Thu Dec 18 19:01:52.900155 2025] [:error] [pid 23556:tid 23578] [client 4.189.153.110:10754] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aUPfIBnmLlk3u5yt9kHNdwAAABI"]
[Thu Dec 18 19:01:53.205759 2025] [:error] [pid 24542:tid 24563] [client 4.189.153.110:10815] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aUPfIUtQz4H2oS3NrDbq8AAAAVM"]
[Thu Dec 18 19:01:53.491302 2025] [:error] [pid 12239:tid 12260] [client 4.189.153.110:10850] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUPfIdNnXxfGIuWO6anyZQAAApA"]
[Thu Dec 18 19:01:53.840358 2025] [:error] [pid 23558:tid 23626] [client 4.189.153.110:10876] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUPfIeHam9NbgPQa9ub9cgAAAMs"]
[Thu Dec 18 19:01:54.162451 2025] [:error] [pid 24958:tid 24984] [client 4.189.153.110:10808] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUPfIskDOrUkd0wNm2G2gQAAAZc"]
[Thu Dec 18 19:01:54.455449 2025] [:error] [pid 24542:tid 24552] [client 4.189.153.110:10847] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUPfIktQz4H2oS3NrDbq9gAAAUg"]
[Thu Dec 18 19:01:54.752698 2025] [:error] [pid 25357:tid 25360] [client 4.189.153.110:10825] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aUPfIoaT7bsEXnJVfJdLpwAAAcE"]
[Thu Dec 18 19:01:55.062100 2025] [:error] [pid 24433:tid 24448] [client 4.189.153.110:10764] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aUPfI54pN9ycmipm8TjBeAAAAQw"]
[Thu Dec 18 19:01:55.366741 2025] [:error] [pid 24542:tid 24566] [client 4.189.153.110:10800] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aUPfI0tQz4H2oS3NrDbq_AAAAVY"]
[Thu Dec 18 19:01:55.692384 2025] [:error] [pid 23558:tid 23629] [client 4.189.153.110:10861] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aUPfI-Ham9NbgPQa9ub9dwAAAM4"]
[Thu Dec 18 19:01:55.973988 2025] [:error] [pid 12035:tid 12043] [client 4.189.153.110:7117] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aUPfI7cVHrNSHjCo-0qBigAAAgE"]
[Thu Dec 18 19:01:56.322024 2025] [:error] [pid 12383:tid 12396] [client 4.189.153.110:10784] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aUPfJPdgllo9h1cyxGauEwAAAso"]
[Thu Dec 18 19:01:56.694099 2025] [:error] [pid 25357:tid 25364] [client 4.189.153.110:10831] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aUPfJIaT7bsEXnJVfJdLrAAAAcU"]
[Thu Dec 18 19:01:57.074822 2025] [:error] [pid 23558:tid 23628] [client 4.189.153.110:10763] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aUPfJeHam9NbgPQa9ub9ewAAAM0"]
[Thu Dec 18 19:01:57.401898 2025] [:error] [pid 24542:tid 24555] [client 4.189.153.110:10857] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aUPfJUtQz4H2oS3NrDbrAAAAAUs"]
[Thu Dec 18 19:01:57.845880 2025] [:error] [pid 24542:tid 24554] [client 4.189.153.110:10766] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aUPfJUtQz4H2oS3NrDbrAwAAAUo"]
[Thu Dec 18 19:01:58.155327 2025] [:error] [pid 24433:tid 24453] [client 4.189.153.110:10851] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aUPfJp4pN9ycmipm8TjBfAAAARE"]
[Thu Dec 18 19:01:58.531113 2025] [:error] [pid 25357:tid 25375] [client 4.189.153.110:10845] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aUPfJoaT7bsEXnJVfJdLrwAAAdA"]
[Thu Dec 18 19:01:58.896787 2025] [:error] [pid 24542:tid 24544] [client 4.189.153.110:10796] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aUPfJktQz4H2oS3NrDbrCwAAAUA"]
[Thu Dec 18 19:01:59.392804 2025] [:error] [pid 23645:tid 23649] [client 4.189.153.110:10877] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aUPfJzf_Rx0Y0ao_QJhDWAAAAII"]
[Thu Dec 18 19:01:59.735880 2025] [:error] [pid 24542:tid 24554] [client 4.189.153.110:10758] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aUPfJ0tQz4H2oS3NrDbrEAAAAUo"]
[Thu Dec 18 19:02:00.092420 2025] [:error] [pid 12239:tid 12253] [client 4.189.153.110:10852] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aUPfKNNnXxfGIuWO6anybgAAAok"]
[Thu Dec 18 19:02:00.469351 2025] [:error] [pid 23645:tid 23658] [client 4.189.153.110:7114] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aUPfKDf_Rx0Y0ao_QJhDXAAAAIs"]
[Thu Dec 18 19:02:00.799727 2025] [:error] [pid 23558:tid 23631] [client 4.189.153.110:7131] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aUPfKOHam9NbgPQa9ub9fwAAANA"]
[Thu Dec 18 19:02:01.131032 2025] [:error] [pid 23645:tid 23664] [client 4.189.153.110:10810] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aUPfKTf_Rx0Y0ao_QJhDXQAAAJE"]
[Thu Dec 18 19:02:01.443198 2025] [:error] [pid 23556:tid 23562] [client 4.189.153.110:7126] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aUPfKRnmLlk3u5yt9kHNfgAAAAI"]
[Thu Dec 18 19:02:01.767909 2025] [:error] [pid 23645:tid 23657] [client 4.189.153.110:7146] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aUPfKTf_Rx0Y0ao_QJhDXgAAAIo"]
[Thu Dec 18 19:02:02.241212 2025] [:error] [pid 23645:tid 23656] [client 4.189.153.110:7111] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aUPfKjf_Rx0Y0ao_QJhDYAAAAIk"]
[Thu Dec 18 19:02:02.561029 2025] [:error] [pid 23556:tid 23561] [client 4.189.153.110:7085] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aUPfKhnmLlk3u5yt9kHNgAAAAAE"]
[Thu Dec 18 19:02:02.926687 2025] [:error] [pid 23556:tid 23563] [client 4.189.153.110:10794] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aUPfKhnmLlk3u5yt9kHNgQAAAAM"]
[Thu Dec 18 19:02:03.230482 2025] [:error] [pid 23558:tid 23628] [client 4.189.153.110:7088] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aUPfK-Ham9NbgPQa9ub9hQAAAM0"]
[Thu Dec 18 19:02:03.550459 2025] [:error] [pid 23556:tid 23583] [client 4.189.153.110:10772] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aUPfKxnmLlk3u5yt9kHNgwAAABc"]
[Thu Dec 18 19:02:03.875875 2025] [:error] [pid 24542:tid 24551] [client 4.189.153.110:7136] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aUPfK0tQz4H2oS3NrDbrHQAAAUc"]
[Thu Dec 18 19:02:04.203830 2025] [:error] [pid 23558:tid 23630] [client 4.189.153.110:7041] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aUPfLOHam9NbgPQa9ub9hgAAAM8"]
[Thu Dec 18 19:02:04.551231 2025] [:error] [pid 23645:tid 23649] [client 4.189.153.110:7140] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUPfLDf_Rx0Y0ao_QJhDaAAAAII"]
[Thu Dec 18 19:02:04.881146 2025] [:error] [pid 12239:tid 12250] [client 4.189.153.110:10757] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUPfLNNnXxfGIuWO6anyeQAAAoY"]
[Thu Dec 18 19:02:05.224160 2025] [:error] [pid 23556:tid 23582] [client 4.189.153.110:10793] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUPfLRnmLlk3u5yt9kHNhgAAABY"]
[Thu Dec 18 19:02:05.620616 2025] [:error] [pid 12239:tid 12265] [client 4.189.153.110:10780] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUPfLdNnXxfGIuWO6anyewAAApU"]
[Thu Dec 18 19:02:05.961892 2025] [:error] [pid 12383:tid 12402] [client 4.189.153.110:7119] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aUPfLfdgllo9h1cyxGauGQAAAtA"]
[Thu Dec 18 19:02:06.315771 2025] [:error] [pid 12383:tid 12403] [client 4.189.153.110:10797] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aUPfLvdgllo9h1cyxGauHAAAAtE"]
[Thu Dec 18 19:02:06.643346 2025] [:error] [pid 23556:tid 23584] [client 4.189.153.110:10773] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aUPfLhnmLlk3u5yt9kHNiQAAABg"]
[Thu Dec 18 19:02:06.926293 2025] [:error] [pid 12239:tid 12245] [client 4.189.153.110:7163] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aUPfLtNnXxfGIuWO6anyfgAAAoE"]
[Thu Dec 18 19:02:07.207524 2025] [:error] [pid 25357:tid 25374] [client 4.189.153.110:7135] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aUPfL4aT7bsEXnJVfJdLvwAAAc8"]
[Thu Dec 18 19:02:07.513134 2025] [:error] [pid 23645:tid 23668] [client 4.189.153.110:7082] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aUPfLzf_Rx0Y0ao_QJhDcgAAAJU"]
[Thu Dec 18 19:02:07.825774 2025] [:error] [pid 23645:tid 23669] [client 4.189.153.110:7150] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aUPfLzf_Rx0Y0ao_QJhDcwAAAJY"]
[Thu Dec 18 19:02:08.154825 2025] [:error] [pid 24542:tid 24562] [client 4.189.153.110:10789] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aUPfMEtQz4H2oS3NrDbrJgAAAVI"]
[Thu Dec 18 19:02:08.472212 2025] [:error] [pid 23645:tid 23661] [client 4.189.153.110:7105] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aUPfMDf_Rx0Y0ao_QJhDdwAAAI4"]
[Thu Dec 18 19:02:08.884109 2025] [:error] [pid 12383:tid 12408] [client 4.189.153.110:10841] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aUPfMPdgllo9h1cyxGauHwAAAtY"]
[Thu Dec 18 19:02:09.257600 2025] [:error] [pid 23645:tid 23671] [client 4.189.153.110:7154] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aUPfMTf_Rx0Y0ao_QJhDewAAAJg"]
[Thu Dec 18 19:02:09.629137 2025] [:error] [pid 12383:tid 12396] [client 4.189.153.110:10839] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aUPfMfdgllo9h1cyxGauIAAAAso"]
[Thu Dec 18 19:02:09.963481 2025] [:error] [pid 23556:tid 23577] [client 4.189.153.110:7143] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aUPfMRnmLlk3u5yt9kHNkgAAABE"]
[Thu Dec 18 19:02:10.339206 2025] [:error] [pid 12239:tid 12246] [client 4.189.153.110:7055] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aUPfMtNnXxfGIuWO6anyhQAAAoI"]
[Thu Dec 18 19:02:10.662244 2025] [:error] [pid 25357:tid 25363] [client 4.189.153.110:10816] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aUPfMoaT7bsEXnJVfJdLxwAAAcQ"]
[Thu Dec 18 19:02:10.989301 2025] [:error] [pid 24542:tid 24547] [client 4.189.153.110:10872] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aUPfMktQz4H2oS3NrDbrKwAAAUM"]
[Thu Dec 18 19:02:11.342767 2025] [:error] [pid 24542:tid 24563] [client 4.189.153.110:7103] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aUPfM0tQz4H2oS3NrDbrLQAAAVM"]
[Thu Dec 18 19:02:11.732639 2025] [:error] [pid 12035:tid 12048] [client 4.189.153.110:10853] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aUPfM7cVHrNSHjCo-0qBmgAAAgY"]
[Thu Dec 18 19:02:12.046737 2025] [:error] [pid 12035:tid 12044] [client 4.189.153.110:7149] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aUPfNLcVHrNSHjCo-0qBmwAAAgI"]
[Thu Dec 18 19:02:12.377040 2025] [:error] [pid 12383:tid 12388] [client 4.189.153.110:7057] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aUPfNPdgllo9h1cyxGauJwAAAsI"]
[Thu Dec 18 19:02:12.747459 2025] [:error] [pid 24433:tid 24446] [client 4.189.153.110:10840] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aUPfNJ4pN9ycmipm8TjBjAAAAQo"]
[Thu Dec 18 19:02:13.076453 2025] [:error] [pid 12035:tid 12064] [client 4.189.153.110:10875] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aUPfNbcVHrNSHjCo-0qBnwAAAhU"]
[Thu Dec 18 19:02:13.394513 2025] [:error] [pid 24433:tid 24438] [client 4.189.153.110:10755] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aUPfNZ4pN9ycmipm8TjBkAAAAQI"]
[Thu Dec 18 19:02:13.710469 2025] [:error] [pid 23556:tid 23569] [client 4.189.153.110:10813] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aUPfNRnmLlk3u5yt9kHNlwAAAAk"]
[Thu Dec 18 19:02:14.042028 2025] [:error] [pid 23556:tid 23560] [client 4.189.153.110:10809] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aUPfNhnmLlk3u5yt9kHNmwAAAAA"]
[Thu Dec 18 19:02:14.367419 2025] [:error] [pid 23558:tid 23639] [client 4.189.153.110:7051] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aUPfNuHam9NbgPQa9ub9mQAAANg"]
[Thu Dec 18 19:02:14.715089 2025] [:error] [pid 24542:tid 24553] [client 4.189.153.110:10832] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aUPfNktQz4H2oS3NrDbrMQAAAUk"]
[Thu Dec 18 19:02:15.039785 2025] [:error] [pid 12035:tid 12051] [client 4.189.153.110:7106] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aUPfN7cVHrNSHjCo-0qBogAAAgk"]
[Thu Dec 18 19:02:15.340035 2025] [:error] [pid 24958:tid 24973] [client 4.189.153.110:7113] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aUPfN8kDOrUkd0wNm2G2ngAAAYw"]
[Thu Dec 18 19:02:15.659879 2025] [:error] [pid 24542:tid 24563] [client 4.189.153.110:10795] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aUPfN0tQz4H2oS3NrDbrPwAAAVM"]
[Thu Dec 18 19:02:15.959997 2025] [:error] [pid 12383:tid 12387] [client 4.189.153.110:10801] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aUPfN_dgllo9h1cyxGauLAAAAsE"]
[Thu Dec 18 19:02:16.274418 2025] [:error] [pid 23556:tid 23573] [client 4.189.153.110:7070] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aUPfOBnmLlk3u5yt9kHNpQAAAA0"]
[Thu Dec 18 19:02:16.634165 2025] [:error] [pid 25357:tid 25379] [client 4.189.153.110:7123] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aUPfOIaT7bsEXnJVfJdL0AAAAdQ"]
[Thu Dec 18 19:02:16.994843 2025] [:error] [pid 12239:tid 12267] [client 4.189.153.110:7160] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aUPfONNnXxfGIuWO6anyiwAAApc"]
[Thu Dec 18 19:02:17.271869 2025] [:error] [pid 12239:tid 12249] [client 4.189.153.110:7165] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aUPfOdNnXxfGIuWO6anyjAAAAoU"]
[Thu Dec 18 19:02:17.555488 2025] [:error] [pid 23556:tid 23582] [client 4.189.153.110:10791] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aUPfORnmLlk3u5yt9kHNpwAAABY"]
[Thu Dec 18 19:02:17.852838 2025] [:error] [pid 24433:tid 24451] [client 4.189.153.110:7128] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUPfOZ4pN9ycmipm8TjBmAAAAQ8"]
[Thu Dec 18 19:02:18.124887 2025] [:error] [pid 23645:tid 23653] [client 4.189.153.110:7040] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUPfOjf_Rx0Y0ao_QJhDjAAAAIY"]
[Thu Dec 18 19:02:18.436448 2025] [:error] [pid 23556:tid 23566] [client 4.189.153.110:10817] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUPfOhnmLlk3u5yt9kHNqwAAAAY"]
[Thu Dec 18 19:02:18.775585 2025] [:error] [pid 24433:tid 24456] [client 4.189.153.110:7081] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUPfOp4pN9ycmipm8TjBnQAAARQ"]
[Thu Dec 18 19:02:19.131972 2025] [:error] [pid 23556:tid 23577] [client 4.189.153.110:7118] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aUPfOxnmLlk3u5yt9kHNrQAAABE"]
[Thu Dec 18 19:02:19.513677 2025] [:error] [pid 23645:tid 23654] [client 4.189.153.110:10814] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aUPfOzf_Rx0Y0ao_QJhDkAAAAIc"]
[Thu Dec 18 19:02:19.832325 2025] [:error] [pid 25357:tid 25362] [client 4.189.153.110:7145] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aUPfO4aT7bsEXnJVfJdL1QAAAcM"]
[Thu Dec 18 19:02:20.210080 2025] [:error] [pid 23645:tid 23655] [client 4.189.153.110:7049] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aUPfPDf_Rx0Y0ao_QJhDkwAAAIg"]
[Thu Dec 18 19:02:20.573666 2025] [:error] [pid 12239:tid 12253] [client 4.189.153.110:7124] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aUPfPNNnXxfGIuWO6anykwAAAok"]
[Thu Dec 18 19:02:20.851077 2025] [:error] [pid 23558:tid 23626] [client 4.189.153.110:10878] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aUPfPOHam9NbgPQa9ub9rAAAAMs"]
[Thu Dec 18 19:02:21.201648 2025] [:error] [pid 23645:tid 23658] [client 4.189.153.110:7153] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aUPfPTf_Rx0Y0ao_QJhDlAAAAIs"]
[Thu Dec 18 19:02:21.518772 2025] [:error] [pid 12239:tid 12256] [client 4.189.153.110:7152] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aUPfPdNnXxfGIuWO6anylgAAAow"]
[Thu Dec 18 19:02:21.813073 2025] [:error] [pid 12239:tid 12264] [client 4.189.153.110:7161] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aUPfPdNnXxfGIuWO6anylwAAApQ"]
[Thu Dec 18 19:02:22.121629 2025] [:error] [pid 25357:tid 25383] [client 4.189.153.110:7109] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aUPfPoaT7bsEXnJVfJdL3AAAAdg"]
[Thu Dec 18 19:02:22.461731 2025] [:error] [pid 12239:tid 12259] [client 4.189.153.110:7079] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aUPfPtNnXxfGIuWO6anymgAAAo8"]
[Thu Dec 18 19:02:22.791340 2025] [:error] [pid 23556:tid 23575] [client 4.189.153.110:10760] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aUPfPhnmLlk3u5yt9kHNsAAAAA8"]
[Thu Dec 18 19:02:23.135004 2025] [:error] [pid 12035:tid 12062] [client 4.189.153.110:7104] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aUPfP7cVHrNSHjCo-0qBpwAAAhM"]
[Thu Dec 18 19:02:23.528299 2025] [:error] [pid 12383:tid 12389] [client 4.189.153.110:7060] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aUPfP_dgllo9h1cyxGauOAAAAsM"]
[Thu Dec 18 19:02:23.852817 2025] [:error] [pid 24958:tid 24983] [client 4.189.153.110:7047] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aUPfP8kDOrUkd0wNm2G2pAAAAZY"]
[Thu Dec 18 19:02:24.181441 2025] [:error] [pid 24958:tid 24971] [client 4.189.153.110:7121] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aUPfQMkDOrUkd0wNm2G2pgAAAYo"]
[Thu Dec 18 19:02:24.477962 2025] [:error] [pid 12035:tid 12060] [client 4.189.153.110:7030] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aUPfQLcVHrNSHjCo-0qBqgAAAhE"]
[Thu Dec 18 19:02:24.798602 2025] [:error] [pid 23558:tid 23623] [client 4.189.153.110:7122] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aUPfQOHam9NbgPQa9ub9swAAAMg"]
[Thu Dec 18 19:02:25.145695 2025] [:error] [pid 23558:tid 23638] [client 4.189.153.110:10785] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aUPfQeHam9NbgPQa9ub9tAAAANc"]
[Thu Dec 18 19:02:25.481672 2025] [:error] [pid 12383:tid 12391] [client 4.189.153.110:7076] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aUPfQfdgllo9h1cyxGauOQAAAsU"]
[Thu Dec 18 19:02:25.850867 2025] [:error] [pid 12035:tid 12056] [client 4.189.153.110:7138] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aUPfQbcVHrNSHjCo-0qBrwAAAg0"]
[Thu Dec 18 19:03:11.991453 2025] [:error] [pid 24542:tid 24561] [client 4.189.153.110:7155] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/compare.php"] [unique_id "aUPfb0tQz4H2oS3NrDbrzQAAAVE"]
[Thu Dec 18 19:03:12.347961 2025] [:error] [pid 24542:tid 24551] [client 4.189.153.110:7077] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/compare.php"] [unique_id "aUPfcEtQz4H2oS3NrDbr0QAAAUc"]
[Thu Dec 18 19:03:12.674017 2025] [:error] [pid 12383:tid 12403] [client 4.189.153.110:7120] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/compare.php"] [unique_id "aUPfcPdgllo9h1cyxGauXAAAAtE"]
[Thu Dec 18 19:03:13.097346 2025] [:error] [pid 12239:tid 12247] [client 4.189.153.110:7065] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/compare.php"] [unique_id "aUPfcdNnXxfGIuWO6any4AAAAoM"]
[Thu Dec 18 19:03:13.421143 2025] [:error] [pid 24542:tid 24555] [client 4.189.153.110:7101] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aUPfcUtQz4H2oS3NrDbr1gAAAUs"]
[Thu Dec 18 19:03:13.762359 2025] [:error] [pid 24958:tid 24963] [client 4.189.153.110:7043] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aUPfcckDOrUkd0wNm2G2xgAAAYI"]
[Thu Dec 18 19:03:14.133795 2025] [:error] [pid 24958:tid 24975] [client 4.189.153.110:7075] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aUPfcskDOrUkd0wNm2G2yAAAAY4"]
[Thu Dec 18 19:03:14.487754 2025] [:error] [pid 24958:tid 24974] [client 4.189.153.110:7064] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aUPfcskDOrUkd0wNm2G2yQAAAY0"]
[Thu Dec 18 19:03:14.897132 2025] [:error] [pid 24958:tid 24984] [client 4.189.153.110:7044] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aUPfcskDOrUkd0wNm2G2ywAAAZc"]
[Thu Dec 18 19:03:15.211772 2025] [:error] [pid 12239:tid 12262] [client 4.189.153.110:10781] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aUPfc9NnXxfGIuWO6any4gAAApI"]
[Thu Dec 18 19:03:15.532187 2025] [:error] [pid 23558:tid 23631] [client 4.189.153.110:10798] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aUPfc-Ham9NbgPQa9ub-DgAAANA"]
[Thu Dec 18 19:03:15.955596 2025] [:error] [pid 23645:tid 23653] [client 4.189.153.110:7089] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aUPfczf_Rx0Y0ao_QJhDswAAAIY"]
[Thu Dec 18 19:03:16.306138 2025] [:error] [pid 24542:tid 24548] [client 4.189.153.110:7108] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUPfdEtQz4H2oS3NrDbr2QAAAUQ"]
[Thu Dec 18 19:03:16.715913 2025] [:error] [pid 12239:tid 12246] [client 4.189.153.110:7115] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUPfdNNnXxfGIuWO6any5AAAAoI"]
[Thu Dec 18 19:03:17.033489 2025] [:error] [pid 12239:tid 12268] [client 4.189.153.110:7061] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUPfddNnXxfGIuWO6any5QAAApg"]
[Thu Dec 18 19:03:17.397647 2025] [:error] [pid 12239:tid 12254] [client 4.189.153.110:7004] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUPfddNnXxfGIuWO6any5gAAAoo"]
[Thu Dec 18 19:03:17.768616 2025] [:error] [pid 25357:tid 25359] [client 4.189.153.110:7003] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atom.php"] [unique_id "aUPfdYaT7bsEXnJVfJdMCQAAAcA"]
[Thu Dec 18 19:03:18.248706 2025] [:error] [pid 24958:tid 24982] [client 4.189.153.110:7142] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atom.php"] [unique_id "aUPfdskDOrUkd0wNm2G2zAAAAZU"]
[Thu Dec 18 19:03:18.696519 2025] [:error] [pid 24433:tid 24441] [client 4.189.153.110:10866] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atom.php"] [unique_id "aUPfdp4pN9ycmipm8TjBzQAAAQU"]
[Thu Dec 18 19:03:19.186897 2025] [:error] [pid 12239:tid 12249] [client 4.189.153.110:10769] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atom.php"] [unique_id "aUPfd9NnXxfGIuWO6any6AAAAoU"]
[Thu Dec 18 19:03:19.563857 2025] [:error] [pid 23558:tid 23632] [client 4.189.153.110:7074] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/case.php"] [unique_id "aUPfd-Ham9NbgPQa9ub-FgAAANE"]
[Thu Dec 18 19:03:19.910239 2025] [:error] [pid 12383:tid 12386] [client 4.189.153.110:7159] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/case.php"] [unique_id "aUPfd_dgllo9h1cyxGauaAAAAsA"]
[Thu Dec 18 19:03:20.243652 2025] [:error] [pid 23645:tid 23661] [client 4.189.153.110:7072] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/case.php"] [unique_id "aUPfeDf_Rx0Y0ao_QJhDuQAAAI4"]
[Thu Dec 18 19:03:20.568928 2025] [:error] [pid 12239:tid 12255] [client 4.189.153.110:7068] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/case.php"] [unique_id "aUPfeNNnXxfGIuWO6any6QAAAos"]
[Thu Dec 18 19:03:20.982102 2025] [:error] [pid 24542:tid 24566] [client 4.189.153.110:7097] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aUPfeEtQz4H2oS3NrDbr3gAAAVY"]
[Thu Dec 18 19:03:21.351122 2025] [:error] [pid 12239:tid 12245] [client 4.189.153.110:7099] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aUPfedNnXxfGIuWO6any6gAAAoE"]
[Thu Dec 18 19:03:21.712514 2025] [:error] [pid 24542:tid 24568] [client 4.189.153.110:7151] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aUPfeUtQz4H2oS3NrDbr4QAAAVg"]
[Thu Dec 18 19:03:22.032669 2025] [:error] [pid 23645:tid 23651] [client 4.189.153.110:6914] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aUPfejf_Rx0Y0ao_QJhDuwAAAIQ"]
[Thu Dec 18 19:03:22.492123 2025] [:error] [pid 23558:tid 23618] [client 4.189.153.110:7052] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aUPfeuHam9NbgPQa9ub-GQAAAMM"]
[Thu Dec 18 19:03:22.809807 2025] [:error] [pid 25357:tid 25382] [client 4.189.153.110:7062] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aUPfeoaT7bsEXnJVfJdMDAAAAdc"]
[Thu Dec 18 19:03:23.103440 2025] [:error] [pid 12239:tid 12251] [client 4.189.153.110:7066] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aUPfe9NnXxfGIuWO6any7AAAAoc"]
[Thu Dec 18 19:03:23.464320 2025] [:error] [pid 24542:tid 24556] [client 4.189.153.110:7045] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aUPfe0tQz4H2oS3NrDbr5AAAAUw"]
[Thu Dec 18 19:03:23.834765 2025] [:error] [pid 24958:tid 24983] [client 4.189.153.110:10811] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUPfe8kDOrUkd0wNm2G20AAAAZY"]
[Thu Dec 18 19:03:24.215246 2025] [:error] [pid 12383:tid 12408] [client 4.189.153.110:7053] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUPffPdgllo9h1cyxGaubQAAAtY"]
[Thu Dec 18 19:03:24.519265 2025] [:error] [pid 23556:tid 23578] [client 4.189.153.110:7095] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUPffBnmLlk3u5yt9kHN2gAAABI"]
[Thu Dec 18 19:03:24.927035 2025] [:error] [pid 12383:tid 12394] [client 4.189.153.110:10807] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUPffPdgllo9h1cyxGaubgAAAsg"]
[Thu Dec 18 19:03:25.233472 2025] [:error] [pid 23556:tid 23561] [client 4.189.153.110:7084] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aUPffRnmLlk3u5yt9kHN3AAAAAE"]
[Thu Dec 18 19:03:25.565954 2025] [:error] [pid 12383:tid 12399] [client 4.189.153.110:7129] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aUPfffdgllo9h1cyxGaubwAAAs0"]
[Thu Dec 18 19:03:25.928314 2025] [:error] [pid 23556:tid 23580] [client 4.189.153.110:7110] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aUPffRnmLlk3u5yt9kHN3wAAABQ"]
[Thu Dec 18 19:03:26.243159 2025] [:error] [pid 23556:tid 23583] [client 4.189.153.110:7008] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aUPffhnmLlk3u5yt9kHN4QAAABc"]
[Thu Dec 18 19:03:26.649659 2025] [:error] [pid 23645:tid 23663] [client 4.189.153.110:7001] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aUPffjf_Rx0Y0ao_QJhDwgAAAJA"]
[Thu Dec 18 19:03:27.043644 2025] [:error] [pid 24542:tid 24561] [client 4.189.153.110:10824] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aUPff0tQz4H2oS3NrDbr7gAAAVE"]
[Thu Dec 18 19:03:27.329262 2025] [:error] [pid 12383:tid 12406] [client 4.189.153.110:6976] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aUPff_dgllo9h1cyxGaucgAAAtQ"]
[Thu Dec 18 19:03:27.640277 2025] [:error] [pid 12035:tid 12049] [client 4.189.153.110:10802] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aUPff7cVHrNSHjCo-0qB4AAAAgc"]
[Thu Dec 18 19:03:27.950284 2025] [:error] [pid 24542:tid 24547] [client 4.189.153.110:7166] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aUPff0tQz4H2oS3NrDbr8AAAAUM"]
[Thu Dec 18 19:03:28.253852 2025] [:error] [pid 24542:tid 24545] [client 4.189.153.110:10799] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aUPfgEtQz4H2oS3NrDbr8QAAAUE"]
[Thu Dec 18 19:03:28.648740 2025] [:error] [pid 25357:tid 25374] [client 4.189.153.110:6980] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aUPfgIaT7bsEXnJVfJdMEwAAAc8"]
[Thu Dec 18 19:03:28.988160 2025] [:error] [pid 24542:tid 24562] [client 4.189.153.110:7006] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aUPfgEtQz4H2oS3NrDbr9QAAAVI"]
[Thu Dec 18 19:03:29.379764 2025] [:error] [pid 24958:tid 24975] [client 4.189.153.110:7002] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aUPfgckDOrUkd0wNm2G21wAAAY4"]
[Thu Dec 18 19:03:29.733695 2025] [:error] [pid 23645:tid 23658] [client 4.189.153.110:7086] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aUPfgTf_Rx0Y0ao_QJhDxwAAAIs"]
[Thu Dec 18 19:03:30.041048 2025] [:error] [pid 23556:tid 23576] [client 4.189.153.110:6913] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aUPfghnmLlk3u5yt9kHN4wAAABA"]
[Thu Dec 18 19:03:30.371957 2025] [:error] [pid 25357:tid 25379] [client 4.189.153.110:7134] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aUPfgoaT7bsEXnJVfJdMFQAAAdQ"]
[Thu Dec 18 19:03:30.714325 2025] [:error] [pid 12239:tid 12267] [client 4.189.153.110:10868] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aUPfgtNnXxfGIuWO6any7gAAApc"]
[Thu Dec 18 19:03:31.017996 2025] [:error] [pid 24542:tid 24544] [client 4.189.153.110:7026] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aUPfg0tQz4H2oS3NrDbr9gAAAUA"]
[Thu Dec 18 19:03:31.301758 2025] [:error] [pid 24958:tid 24962] [client 4.189.153.110:7102] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aUPfg8kDOrUkd0wNm2G22gAAAYE"]
[Thu Dec 18 19:03:31.604471 2025] [:error] [pid 24542:tid 24557] [client 4.189.153.110:7164] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aUPfg0tQz4H2oS3NrDbr-AAAAU0"]
[Thu Dec 18 19:03:31.994986 2025] [:error] [pid 12239:tid 12266] [client 4.189.153.110:7141] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aUPfg9NnXxfGIuWO6any8AAAApY"]
[Thu Dec 18 19:03:32.287706 2025] [:error] [pid 23645:tid 23651] [client 4.189.153.110:7036] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aUPfhDf_Rx0Y0ao_QJhDyAAAAIQ"]
[Thu Dec 18 19:03:32.600466 2025] [:error] [pid 24433:tid 24438] [client 4.189.153.110:7013] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aUPfhJ4pN9ycmipm8TjB1AAAAQI"]
[Thu Dec 18 19:03:32.900024 2025] [:error] [pid 24542:tid 24547] [client 4.189.153.110:7087] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aUPfhEtQz4H2oS3NrDbr_AAAAUM"]
[Thu Dec 18 19:03:33.229007 2025] [:error] [pid 12239:tid 12247] [client 4.189.153.110:7144] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aUPfhdNnXxfGIuWO6any8gAAAoM"]
[Thu Dec 18 19:03:33.554562 2025] [:error] [pid 25357:tid 25362] [client 4.189.153.110:7083] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aUPfhYaT7bsEXnJVfJdMGQAAAcM"]
[Thu Dec 18 19:03:33.850248 2025] [:error] [pid 23556:tid 23563] [client 4.189.153.110:7133] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aUPfhRnmLlk3u5yt9kHN6AAAAAM"]
[Thu Dec 18 19:03:34.144857 2025] [:error] [pid 23645:tid 23667] [client 4.189.153.110:10786] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aUPfhjf_Rx0Y0ao_QJhDywAAAJQ"]
[Thu Dec 18 19:03:34.540115 2025] [:error] [pid 12035:tid 12059] [client 4.189.153.110:7056] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aUPfhrcVHrNSHjCo-0qB4wAAAhA"]
[Thu Dec 18 19:03:34.888955 2025] [:error] [pid 23556:tid 23568] [client 4.189.153.110:6977] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aUPfhhnmLlk3u5yt9kHN6gAAAAg"]
[Thu Dec 18 19:03:35.181028 2025] [:error] [pid 24542:tid 24563] [client 4.189.153.110:7125] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aUPfh0tQz4H2oS3NrDbr_gAAAVM"]
[Thu Dec 18 19:03:35.474257 2025] [:error] [pid 24542:tid 24549] [client 4.189.153.110:10788] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aUPfh0tQz4H2oS3NrDbsAAAAAUU"]
[Thu Dec 18 19:03:35.752776 2025] [:error] [pid 12239:tid 12263] [client 4.189.153.110:6867] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aUPfh9NnXxfGIuWO6any8wAAApM"]
[Thu Dec 18 19:03:36.054050 2025] [:error] [pid 12239:tid 12260] [client 4.189.153.110:7096] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aUPfiNNnXxfGIuWO6any9AAAApA"]
[Thu Dec 18 19:03:36.354347 2025] [:error] [pid 25357:tid 25367] [client 4.189.153.110:7116] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aUPfiIaT7bsEXnJVfJdMHAAAAcg"]
[Thu Dec 18 19:03:36.643345 2025] [:error] [pid 24542:tid 24565] [client 4.189.153.110:7090] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aUPfiEtQz4H2oS3NrDbsBAAAAVU"]
[Thu Dec 18 19:03:36.976169 2025] [:error] [pid 23645:tid 23647] [client 4.189.153.110:7063] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aUPfiDf_Rx0Y0ao_QJhDzgAAAIA"]
[Thu Dec 18 19:03:37.331592 2025] [:error] [pid 12239:tid 12258] [client 4.189.153.110:7005] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aUPfidNnXxfGIuWO6any9wAAAo4"]
[Thu Dec 18 19:03:37.659016 2025] [:error] [pid 24958:tid 24967] [client 4.189.153.110:7019] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aUPfickDOrUkd0wNm2G23AAAAYY"]
[Thu Dec 18 19:03:37.988589 2025] [:error] [pid 25357:tid 25376] [client 4.189.153.110:7157] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aUPfiYaT7bsEXnJVfJdMHQAAAdE"]
[Thu Dec 18 19:03:38.287371 2025] [:error] [pid 12035:tid 12051] [client 4.189.153.110:10829] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUPfircVHrNSHjCo-0qB5wAAAgk"]
[Thu Dec 18 19:03:38.715603 2025] [:error] [pid 23556:tid 23573] [client 4.189.153.110:6984] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUPfihnmLlk3u5yt9kHN7QAAAA0"]
[Thu Dec 18 19:03:39.088728 2025] [:error] [pid 24958:tid 24972] [client 4.189.153.110:7094] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUPfi8kDOrUkd0wNm2G23QAAAYs"]
[Thu Dec 18 19:03:39.433272 2025] [:error] [pid 23556:tid 23574] [client 4.189.153.110:10787] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUPfixnmLlk3u5yt9kHN7gAAAA4"]
[Thu Dec 18 19:03:39.763535 2025] [:error] [pid 12383:tid 12403] [client 4.189.153.110:6997] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aUPfi_dgllo9h1cyxGaucwAAAtE"]
[Thu Dec 18 19:03:40.091697 2025] [:error] [pid 12383:tid 12405] [client 4.189.153.110:10855] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aUPfjPdgllo9h1cyxGaudAAAAtM"]
[Thu Dec 18 19:03:40.448048 2025] [:error] [pid 25357:tid 25359] [client 4.189.153.110:10877] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aUPfjIaT7bsEXnJVfJdMHwAAAcA"]
[Thu Dec 18 19:03:40.731739 2025] [:error] [pid 12035:tid 12050] [client 4.189.153.110:7139] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aUPfjLcVHrNSHjCo-0qB6wAAAgg"]
[Thu Dec 18 19:03:41.069801 2025] [:error] [pid 12239:tid 12256] [client 4.189.153.110:6992] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aUPfjdNnXxfGIuWO6any-wAAAow"]
[Thu Dec 18 19:03:41.451206 2025] [:error] [pid 23556:tid 23584] [client 4.189.153.110:7059] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aUPfjRnmLlk3u5yt9kHN8QAAABg"]
[Thu Dec 18 19:03:41.770346 2025] [:error] [pid 12035:tid 12056] [client 4.189.153.110:10838] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aUPfjbcVHrNSHjCo-0qB7AAAAg0"]
[Thu Dec 18 19:03:42.102721 2025] [:error] [pid 12383:tid 12396] [client 4.189.153.110:6982] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aUPfjvdgllo9h1cyxGaueAAAAso"]
[Thu Dec 18 19:03:42.442751 2025] [:error] [pid 12383:tid 12398] [client 4.189.153.110:7000] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aUPfjvdgllo9h1cyxGaueQAAAsw"]
[Thu Dec 18 19:03:42.762037 2025] [:error] [pid 12383:tid 12394] [client 4.189.153.110:6920] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aUPfjvdgllo9h1cyxGauewAAAsg"]
[Thu Dec 18 19:03:43.101716 2025] [:error] [pid 24958:tid 24973] [client 4.189.153.110:7050] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aUPfj8kDOrUkd0wNm2G24QAAAYw"]
[Thu Dec 18 19:03:43.461770 2025] [:error] [pid 24433:tid 24439] [client 4.189.153.110:7023] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aUPfj54pN9ycmipm8TjB3QAAAQM"]
[Thu Dec 18 19:03:43.881792 2025] [:error] [pid 23556:tid 23580] [client 4.189.153.110:6999] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aUPfjxnmLlk3u5yt9kHN-AAAABQ"]
[Thu Dec 18 19:03:44.212598 2025] [:error] [pid 24433:tid 24440] [client 4.189.153.110:7017] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aUPfkJ4pN9ycmipm8TjB3gAAAQQ"]
[Thu Dec 18 19:03:44.561275 2025] [:error] [pid 24958:tid 24980] [client 4.189.153.110:6924] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aUPfkMkDOrUkd0wNm2G24gAAAZM"]
[Thu Dec 18 19:03:44.857157 2025] [:error] [pid 24433:tid 24453] [client 4.189.153.110:6986] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aUPfkJ4pN9ycmipm8TjB4QAAARE"]
[Thu Dec 18 19:03:45.163808 2025] [:error] [pid 24433:tid 24436] [client 4.189.153.110:7048] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aUPfkZ4pN9ycmipm8TjB4gAAAQA"]
[Thu Dec 18 19:03:45.549515 2025] [:error] [pid 24433:tid 24446] [client 4.189.153.110:6916] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aUPfkZ4pN9ycmipm8TjB4wAAAQo"]
[Thu Dec 18 19:03:45.896605 2025] [:error] [pid 24542:tid 24554] [client 4.189.153.110:7058] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aUPfkUtQz4H2oS3NrDbsDgAAAUo"]
[Thu Dec 18 19:03:46.298127 2025] [:error] [pid 25357:tid 25362] [client 4.189.153.110:6948] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aUPfkoaT7bsEXnJVfJdMIQAAAcM"]
[Thu Dec 18 19:03:46.619783 2025] [:error] [pid 23556:tid 23571] [client 4.189.153.110:7025] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aUPfkhnmLlk3u5yt9kHN_gAAAAs"]
[Thu Dec 18 19:03:46.974845 2025] [:error] [pid 23556:tid 23576] [client 4.189.153.110:7073] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aUPfkhnmLlk3u5yt9kHOAAAAABA"]
[Thu Dec 18 19:03:47.373403 2025] [:error] [pid 24542:tid 24550] [client 4.189.153.110:10806] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aUPfk0tQz4H2oS3NrDbsEgAAAUY"]
[Thu Dec 18 19:03:47.741793 2025] [:error] [pid 24542:tid 24557] [client 4.189.153.110:7046] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aUPfk0tQz4H2oS3NrDbsEwAAAU0"]
[Thu Dec 18 19:03:48.077696 2025] [:error] [pid 23645:tid 23654] [client 4.189.153.110:6988] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aUPflDf_Rx0Y0ao_QJhD1QAAAIc"]
[Thu Dec 18 19:03:48.442343 2025] [:error] [pid 23556:tid 23567] [client 4.189.153.110:6979] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aUPflBnmLlk3u5yt9kHOAgAAAAc"]
[Thu Dec 18 19:03:48.773752 2025] [:error] [pid 12383:tid 12410] [client 4.189.153.110:7098] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aUPflPdgllo9h1cyxGauggAAAtg"]
[Thu Dec 18 19:03:49.142982 2025] [:error] [pid 24542:tid 24548] [client 4.189.153.110:7035] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aUPflUtQz4H2oS3NrDbsFQAAAUQ"]
[Thu Dec 18 19:03:49.487396 2025] [:error] [pid 24542:tid 24556] [client 4.189.153.110:6994] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aUPflUtQz4H2oS3NrDbsFgAAAUw"]
[Thu Dec 18 19:03:49.779037 2025] [:error] [pid 25357:tid 25365] [client 4.189.153.110:7112] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aUPflYaT7bsEXnJVfJdMIwAAAcY"]
[Thu Dec 18 19:03:50.104871 2025] [:error] [pid 12239:tid 12268] [client 4.189.153.110:7024] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aUPfltNnXxfGIuWO6anzAAAAApg"]
[Thu Dec 18 19:03:50.419691 2025] [:error] [pid 23556:tid 23573] [client 4.189.153.110:6929] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aUPflhnmLlk3u5yt9kHOBgAAAA0"]
[Thu Dec 18 19:03:50.721301 2025] [:error] [pid 23645:tid 23662] [client 4.189.153.110:7067] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aUPfljf_Rx0Y0ao_QJhD1wAAAI8"]
[Thu Dec 18 19:03:51.080162 2025] [:error] [pid 12035:tid 12048] [client 4.189.153.110:7009] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aUPfl7cVHrNSHjCo-0qB7gAAAgY"]
[Thu Dec 18 19:03:51.394296 2025] [:error] [pid 24433:tid 24458] [client 4.189.153.110:7130] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aUPfl54pN9ycmipm8TjB6QAAARY"]
[Thu Dec 18 19:03:51.770051 2025] [:error] [pid 23558:tid 23617] [client 4.189.153.110:7148] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aUPfl-Ham9NbgPQa9ub-LAAAAMI"]
[Thu Dec 18 19:03:52.150851 2025] [:error] [pid 23558:tid 23634] [client 4.189.153.110:6928] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aUPfmOHam9NbgPQa9ub-LQAAANM"]
[Thu Dec 18 19:03:52.438831 2025] [:error] [pid 24958:tid 24981] [client 4.189.153.110:7014] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aUPfmMkDOrUkd0wNm2G25AAAAZQ"]
[Thu Dec 18 19:03:52.873300 2025] [:error] [pid 24542:tid 24558] [client 4.189.153.110:7034] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aUPfmEtQz4H2oS3NrDbsGwAAAU4"]
[Thu Dec 18 19:03:53.181005 2025] [:error] [pid 23556:tid 23584] [client 4.189.153.110:7029] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aUPfmRnmLlk3u5yt9kHOCQAAABg"]
[Thu Dec 18 19:03:53.515093 2025] [:error] [pid 12239:tid 12259] [client 4.189.153.110:6861] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aUPfmdNnXxfGIuWO6anzCQAAAo8"]
[Thu Dec 18 19:03:53.849503 2025] [:error] [pid 24542:tid 24567] [client 4.189.153.110:6927] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aUPfmUtQz4H2oS3NrDbsJQAAAVc"]
[Thu Dec 18 19:03:54.254341 2025] [:error] [pid 23558:tid 23626] [client 4.189.153.110:7018] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aUPfmuHam9NbgPQa9ub-LwAAAMs"]
[Thu Dec 18 19:03:54.580774 2025] [:error] [pid 24542:tid 24566] [client 4.189.153.110:6978] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aUPfmktQz4H2oS3NrDbsMQAAAVY"]
[Thu Dec 18 19:03:54.855305 2025] [:error] [pid 24542:tid 24555] [client 4.189.153.110:6995] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aUPfmktQz4H2oS3NrDbsNQAAAUs"]
[Thu Dec 18 19:03:55.233597 2025] [:error] [pid 12239:tid 12267] [client 4.189.153.110:6957] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aUPfm9NnXxfGIuWO6anzHwAAApc"]
[Thu Dec 18 19:03:55.550076 2025] [:error] [pid 23645:tid 23653] [client 4.189.153.110:7021] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aUPfmzf_Rx0Y0ao_QJhD3AAAAIY"]
[Thu Dec 18 19:03:55.869002 2025] [:error] [pid 25357:tid 25383] [client 4.189.153.110:6876] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aUPfm4aT7bsEXnJVfJdMKwAAAdg"]
[Thu Dec 18 19:03:56.187427 2025] [:error] [pid 25357:tid 25381] [client 4.189.153.110:6985] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aUPfnIaT7bsEXnJVfJdMLAAAAdY"]
[Thu Dec 18 19:03:56.476404 2025] [:error] [pid 12239:tid 12247] [client 4.189.153.110:6965] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aUPfnNNnXxfGIuWO6anzIwAAAoM"]
[Thu Dec 18 19:03:56.827536 2025] [:error] [pid 12239:tid 12250] [client 4.189.153.110:7147] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aUPfnNNnXxfGIuWO6anzJAAAAoY"]
[Thu Dec 18 19:03:57.153875 2025] [:error] [pid 12239:tid 12263] [client 4.189.153.110:7033] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aUPfndNnXxfGIuWO6anzJQAAApM"]
[Thu Dec 18 19:03:57.585633 2025] [:error] [pid 24433:tid 24436] [client 4.189.153.110:7027] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aUPfnZ4pN9ycmipm8TjB7AAAAQA"]
[Thu Dec 18 19:03:57.901202 2025] [:error] [pid 12239:tid 12246] [client 4.189.153.110:6967] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aUPfndNnXxfGIuWO6anzJgAAAoI"]
[Thu Dec 18 19:03:58.283329 2025] [:error] [pid 24542:tid 24548] [client 4.189.153.110:6968] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aUPfnktQz4H2oS3NrDbsQAAAAUQ"]
[Thu Dec 18 19:03:58.662803 2025] [:error] [pid 25357:tid 25371] [client 4.189.153.110:7042] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aUPfnoaT7bsEXnJVfJdMLQAAAcw"]
[Thu Dec 18 19:03:59.072093 2025] [:error] [pid 23645:tid 23661] [client 4.189.153.110:7100] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aUPfnzf_Rx0Y0ao_QJhD3gAAAI4"]
[Thu Dec 18 19:03:59.427928 2025] [:error] [pid 12383:tid 12387] [client 4.189.153.110:6926] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aUPfn_dgllo9h1cyxGaupQAAAsE"]
[Thu Dec 18 19:03:59.768176 2025] [:error] [pid 25357:tid 25363] [client 4.189.153.110:6983] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aUPfn4aT7bsEXnJVfJdMMgAAAcQ"]
[Thu Dec 18 19:04:00.103047 2025] [:error] [pid 24542:tid 24546] [client 4.189.153.110:7093] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aUPfoEtQz4H2oS3NrDbsQQAAAUI"]
[Thu Dec 18 19:04:00.459928 2025] [:error] [pid 23645:tid 23666] [client 4.189.153.110:6950] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aUPfoDf_Rx0Y0ao_QJhD4AAAAJM"]
[Thu Dec 18 19:04:00.832774 2025] [:error] [pid 12239:tid 12258] [client 4.189.153.110:6938] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aUPfoNNnXxfGIuWO6anzKQAAAo4"]
[Thu Dec 18 19:04:01.178094 2025] [:error] [pid 12383:tid 12393] [client 4.189.153.110:10819] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aUPfofdgllo9h1cyxGauqAAAAsc"]
[Thu Dec 18 19:04:01.502723 2025] [:error] [pid 23645:tid 23668] [client 4.189.153.110:6919] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aUPfoTf_Rx0Y0ao_QJhD5AAAAJU"]
[Thu Dec 18 19:04:01.809806 2025] [:error] [pid 24958:tid 24970] [client 4.189.153.110:6987] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUPfockDOrUkd0wNm2G27AAAAYk"]
[Thu Dec 18 19:04:02.133631 2025] [:error] [pid 12035:tid 12056] [client 4.189.153.110:7078] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUPforcVHrNSHjCo-0qB9gAAAg0"]
[Thu Dec 18 19:04:02.452431 2025] [:error] [pid 24542:tid 24558] [client 4.189.153.110:6945] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUPfoktQz4H2oS3NrDbsQgAAAU4"]
[Thu Dec 18 19:04:02.771974 2025] [:error] [pid 23558:tid 23618] [client 4.189.153.110:6974] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUPfouHam9NbgPQa9ub-NAAAAMM"]
[Thu Dec 18 19:04:03.140183 2025] [:error] [pid 12035:tid 12049] [client 4.189.153.110:6870] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aUPfo7cVHrNSHjCo-0qB-QAAAgc"]
[Thu Dec 18 19:04:03.472098 2025] [:error] [pid 23558:tid 23623] [client 4.189.153.110:6788] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aUPfo-Ham9NbgPQa9ub-NgAAAMg"]
[Thu Dec 18 19:04:03.871651 2025] [:error] [pid 24542:tid 24559] [client 4.189.153.110:6936] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aUPfo0tQz4H2oS3NrDbsRQAAAU8"]
[Thu Dec 18 19:04:04.182048 2025] [:error] [pid 24542:tid 24567] [client 4.189.153.110:6852] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aUPfpEtQz4H2oS3NrDbsRgAAAVc"]
[Thu Dec 18 19:04:04.572423 2025] [:error] [pid 23645:tid 23653] [client 4.189.153.110:7032] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aUPfpDf_Rx0Y0ao_QJhD5wAAAIY"]
[Thu Dec 18 19:04:04.915832 2025] [:error] [pid 23556:tid 23576] [client 4.189.153.110:7156] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aUPfpBnmLlk3u5yt9kHOVAAAABA"]
[Thu Dec 18 19:04:05.234825 2025] [:error] [pid 12383:tid 12395] [client 4.189.153.110:6996] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aUPfpfdgllo9h1cyxGauqgAAAsk"]
[Thu Dec 18 19:04:05.549389 2025] [:error] [pid 24958:tid 24974] [client 4.189.153.110:6874] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aUPfpckDOrUkd0wNm2G27gAAAY0"]
[Thu Dec 18 19:04:05.960956 2025] [:error] [pid 23556:tid 23581] [client 4.189.153.110:7031] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aUPfpRnmLlk3u5yt9kHOXAAAABU"]
[Thu Dec 18 19:04:06.386386 2025] [:error] [pid 23558:tid 23617] [client 4.189.153.110:6882] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aUPfpuHam9NbgPQa9ub-OwAAAMI"]
[Thu Dec 18 19:04:06.753373 2025] [:error] [pid 24958:tid 24964] [client 4.189.153.110:6952] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aUPfpskDOrUkd0wNm2G28AAAAYM"]
[Thu Dec 18 19:04:07.090304 2025] [:error] [pid 12035:tid 12064] [client 4.189.153.110:6848] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aUPfp7cVHrNSHjCo-0qB-wAAAhU"]
[Thu Dec 18 19:04:07.451403 2025] [:error] [pid 25357:tid 25371] [client 4.189.153.110:6930] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aUPfp4aT7bsEXnJVfJdMNwAAAcw"]
[Thu Dec 18 19:04:07.778378 2025] [:error] [pid 24958:tid 24982] [client 4.189.153.110:6933] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aUPfp8kDOrUkd0wNm2G28gAAAZU"]
[Thu Dec 18 19:04:08.265121 2025] [:error] [pid 24958:tid 24978] [client 4.189.153.110:6915] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aUPfqMkDOrUkd0wNm2G28wAAAZE"]
[Thu Dec 18 19:04:08.698130 2025] [:error] [pid 12239:tid 12266] [client 4.189.153.110:6956] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aUPfqNNnXxfGIuWO6anzMAAAApY"]
[Thu Dec 18 19:04:57.110105 2025] [:error] [pid 23556:tid 23567] [client 4.189.153.110:6991] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aUPf2RnmLlk3u5yt9kHOmAAAAAc"]
[Thu Dec 18 19:04:57.403384 2025] [:error] [pid 24542:tid 24551] [client 4.189.153.110:6892] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aUPf2UtQz4H2oS3NrDbsjwAAAUc"]
[Thu Dec 18 19:04:57.772009 2025] [:error] [pid 12239:tid 12257] [client 4.189.153.110:7038] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aUPf2dNnXxfGIuWO6anzaQAAAo0"]
[Thu Dec 18 19:04:58.085428 2025] [:error] [pid 12239:tid 12244] [client 4.189.153.110:7007] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aUPf2tNnXxfGIuWO6anzagAAAoA"]
[Thu Dec 18 19:04:58.431196 2025] [:error] [pid 23556:tid 23576] [client 4.189.153.110:6935] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aUPf2hnmLlk3u5yt9kHOmQAAABA"]
[Thu Dec 18 19:04:58.858273 2025] [:error] [pid 24542:tid 24549] [client 4.189.153.110:6959] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aUPf2ktQz4H2oS3NrDbslwAAAUU"]
[Thu Dec 18 19:04:59.260158 2025] [:error] [pid 24542:tid 24544] [client 4.189.153.110:6971] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aUPf20tQz4H2oS3NrDbsmQAAAUA"]
[Thu Dec 18 19:04:59.606544 2025] [:error] [pid 23558:tid 23622] [client 4.189.153.110:6990] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aUPf2-Ham9NbgPQa9ub-dQAAAMc"]
[Thu Dec 18 19:04:59.937878 2025] [:error] [pid 25357:tid 25378] [client 4.189.153.110:6946] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aUPf24aT7bsEXnJVfJdMbQAAAdM"]
[Thu Dec 18 19:05:00.265665 2025] [:error] [pid 23645:tid 23658] [client 4.189.153.110:6888] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aUPf3Df_Rx0Y0ao_QJhEFAAAAIs"]
[Thu Dec 18 19:05:00.583204 2025] [:error] [pid 25357:tid 25382] [client 4.189.153.110:6969] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aUPf3IaT7bsEXnJVfJdMcAAAAdc"]
[Thu Dec 18 19:05:00.988465 2025] [:error] [pid 12383:tid 12403] [client 4.189.153.110:6921] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aUPf3Pdgllo9h1cyxGau1QAAAtE"]
[Thu Dec 18 19:05:01.283225 2025] [:error] [pid 23645:tid 23666] [client 4.189.153.110:7016] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aUPf3Tf_Rx0Y0ao_QJhEFQAAAJM"]
[Thu Dec 18 19:05:01.603977 2025] [:error] [pid 23645:tid 23654] [client 4.189.153.110:7020] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aUPf3Tf_Rx0Y0ao_QJhEGAAAAIc"]
[Thu Dec 18 19:05:01.932043 2025] [:error] [pid 24542:tid 24553] [client 4.189.153.110:6875] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aUPf3UtQz4H2oS3NrDbsngAAAUk"]
[Thu Dec 18 19:05:02.297521 2025] [:error] [pid 25357:tid 25381] [client 4.189.153.110:6918] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aUPf3oaT7bsEXnJVfJdMcgAAAdY"]
[Thu Dec 18 19:05:02.705978 2025] [:error] [pid 24542:tid 24559] [client 4.189.153.110:6981] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aUPf3ktQz4H2oS3NrDbsnwAAAU8"]
[Thu Dec 18 19:05:03.025317 2025] [:error] [pid 12383:tid 12409] [client 4.189.153.110:6939] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aUPf3_dgllo9h1cyxGau1gAAAtc"]
[Thu Dec 18 19:05:03.372174 2025] [:error] [pid 23558:tid 23638] [client 4.189.153.110:10756] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aUPf3-Ham9NbgPQa9ub-egAAANc"]
[Thu Dec 18 19:05:03.798003 2025] [:error] [pid 25357:tid 25375] [client 4.189.153.110:7011] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aUPf34aT7bsEXnJVfJdMdQAAAdA"]
[Thu Dec 18 19:05:04.136932 2025] [:error] [pid 12383:tid 12399] [client 4.189.153.110:6966] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aUPf4Pdgllo9h1cyxGau1wAAAs0"]
[Thu Dec 18 19:05:04.479634 2025] [:error] [pid 23558:tid 23623] [client 4.189.153.110:10804] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aUPf4OHam9NbgPQa9ub-fAAAAMg"]
[Thu Dec 18 19:05:04.817827 2025] [:error] [pid 23558:tid 23632] [client 4.189.153.110:6961] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aUPf4OHam9NbgPQa9ub-fgAAANE"]
[Thu Dec 18 19:05:05.268264 2025] [:error] [pid 23556:tid 23573] [client 4.189.153.110:6883] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aUPf4RnmLlk3u5yt9kHOoQAAAA0"]
[Thu Dec 18 19:05:05.645864 2025] [:error] [pid 24433:tid 24444] [client 4.189.153.110:7069] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aUPf4Z4pN9ycmipm8TjCEQAAAQg"]
[Thu Dec 18 19:05:06.081702 2025] [:error] [pid 12239:tid 12254] [client 4.189.153.110:6970] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aUPf4tNnXxfGIuWO6anzcAAAAoo"]
[Thu Dec 18 19:05:06.469239 2025] [:error] [pid 24542:tid 24551] [client 4.189.153.110:6865] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aUPf4ktQz4H2oS3NrDbsowAAAUc"]
[Thu Dec 18 19:05:06.802805 2025] [:error] [pid 12383:tid 12410] [client 4.189.153.110:6912] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aUPf4vdgllo9h1cyxGau2QAAAtg"]
[Thu Dec 18 19:05:07.103509 2025] [:error] [pid 24542:tid 24555] [client 4.189.153.110:6993] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUPf40tQz4H2oS3NrDbspQAAAUs"]
[Thu Dec 18 19:05:07.457093 2025] [:error] [pid 24433:tid 24458] [client 4.189.153.110:6917] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUPf454pN9ycmipm8TjCEwAAARY"]
[Thu Dec 18 19:05:07.807905 2025] [:error] [pid 24958:tid 24979] [client 4.189.153.110:6901] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUPf48kDOrUkd0wNm2G3DgAAAZI"]
[Thu Dec 18 19:05:08.177594 2025] [:error] [pid 12383:tid 12387] [client 4.189.153.110:6890] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUPf5Pdgllo9h1cyxGau3AAAAsE"]
[Thu Dec 18 19:05:08.512197 2025] [:error] [pid 24433:tid 24451] [client 4.189.153.110:7039] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aUPf5J4pN9ycmipm8TjCFAAAAQ8"]
[Thu Dec 18 19:05:08.824918 2025] [:error] [pid 23556:tid 23584] [client 4.189.153.110:6830] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aUPf5BnmLlk3u5yt9kHOpwAAABg"]
[Thu Dec 18 19:05:09.146729 2025] [:error] [pid 23645:tid 23649] [client 4.189.153.110:7054] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aUPf5Tf_Rx0Y0ao_QJhEHQAAAII"]
[Thu Dec 18 19:05:09.492584 2025] [:error] [pid 23645:tid 23665] [client 4.189.153.110:6853] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aUPf5Tf_Rx0Y0ao_QJhEHgAAAJI"]
[Thu Dec 18 19:05:09.942560 2025] [:error] [pid 12383:tid 12390] [client 4.189.153.110:6789] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aUPf5fdgllo9h1cyxGau3gAAAsQ"]
[Thu Dec 18 19:05:10.350452 2025] [:error] [pid 24958:tid 24969] [client 4.189.153.110:6922] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aUPf5skDOrUkd0wNm2G3EAAAAYg"]
[Thu Dec 18 19:05:10.728079 2025] [:error] [pid 23645:tid 23662] [client 4.189.153.110:6798] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aUPf5jf_Rx0Y0ao_QJhEHwAAAI8"]
[Thu Dec 18 19:05:11.128978 2025] [:error] [pid 23558:tid 23622] [client 4.189.153.110:6898] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aUPf5-Ham9NbgPQa9ub-gQAAAMc"]
[Thu Dec 18 19:05:11.450287 2025] [:error] [pid 24433:tid 24453] [client 4.189.153.110:6889] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aUPf554pN9ycmipm8TjCFgAAARE"]
[Thu Dec 18 19:05:11.755221 2025] [:error] [pid 24542:tid 24557] [client 4.189.153.110:6849] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aUPf50tQz4H2oS3NrDbsrAAAAU0"]
[Thu Dec 18 19:05:12.031293 2025] [:error] [pid 24958:tid 24967] [client 4.189.153.110:6850] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aUPf6MkDOrUkd0wNm2G3EgAAAYY"]
[Thu Dec 18 19:05:12.323660 2025] [:error] [pid 12383:tid 12407] [client 4.189.153.110:6860] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aUPf6Pdgllo9h1cyxGau4AAAAtU"]
[Thu Dec 18 19:05:12.630490 2025] [:error] [pid 24958:tid 24971] [client 4.189.153.110:6955] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/406.php"] [unique_id "aUPf6MkDOrUkd0wNm2G3EwAAAYo"]
[Thu Dec 18 19:05:12.936352 2025] [:error] [pid 24433:tid 24438] [client 4.189.153.110:6858] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/406.php"] [unique_id "aUPf6J4pN9ycmipm8TjCGAAAAQI"]
[Thu Dec 18 19:05:13.246198 2025] [:error] [pid 25357:tid 25362] [client 4.189.153.110:7012] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/406.php"] [unique_id "aUPf6YaT7bsEXnJVfJdMeAAAAcM"]
[Thu Dec 18 19:05:13.558968 2025] [:error] [pid 24542:tid 24550] [client 4.189.153.110:7010] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/406.php"] [unique_id "aUPf6UtQz4H2oS3NrDbssAAAAUY"]
[Thu Dec 18 19:05:14.015414 2025] [:error] [pid 23645:tid 23654] [client 4.189.153.110:6940] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mariju.php"] [unique_id "aUPf6jf_Rx0Y0ao_QJhEIQAAAIc"]
[Thu Dec 18 19:05:14.403031 2025] [:error] [pid 24542:tid 24568] [client 4.189.153.110:6925] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mariju.php"] [unique_id "aUPf6ktQz4H2oS3NrDbsswAAAVg"]
[Thu Dec 18 19:05:14.805176 2025] [:error] [pid 12239:tid 12265] [client 4.189.153.110:6864] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mariju.php"] [unique_id "aUPf6tNnXxfGIuWO6anzdwAAApU"]
[Thu Dec 18 19:05:15.125748 2025] [:error] [pid 12239:tid 12267] [client 4.189.153.110:6787] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mariju.php"] [unique_id "aUPf69NnXxfGIuWO6anzeAAAApc"]
[Thu Dec 18 19:05:15.424836 2025] [:error] [pid 12035:tid 12056] [client 4.189.153.110:6960] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUPf67cVHrNSHjCo-0qCLAAAAg0"]
[Thu Dec 18 19:05:15.868643 2025] [:error] [pid 23558:tid 23638] [client 4.189.153.110:6964] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUPf6-Ham9NbgPQa9ub-hgAAANc"]
[Thu Dec 18 19:05:16.193612 2025] [:error] [pid 24433:tid 24450] [client 4.189.153.110:6790] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUPf7J4pN9ycmipm8TjCGgAAAQ4"]
[Thu Dec 18 19:05:16.564187 2025] [:error] [pid 24542:tid 24567] [client 4.189.153.110:7022] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUPf7EtQz4H2oS3NrDbsuAAAAVc"]
[Thu Dec 18 19:05:16.904370 2025] [:error] [pid 12239:tid 12262] [client 4.189.153.110:7015] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aUPf7NNnXxfGIuWO6anzeQAAApI"]
[Thu Dec 18 19:05:17.276861 2025] [:error] [pid 24542:tid 24546] [client 4.189.153.110:6932] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aUPf7UtQz4H2oS3NrDbsugAAAUI"]
[Thu Dec 18 19:05:17.652725 2025] [:error] [pid 12239:tid 12248] [client 4.189.153.110:6944] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aUPf7dNnXxfGIuWO6anzewAAAoQ"]
[Thu Dec 18 19:05:17.983633 2025] [:error] [pid 24433:tid 24441] [client 4.189.153.110:6934] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aUPf7Z4pN9ycmipm8TjCHgAAAQU"]
[Thu Dec 18 19:05:18.324499 2025] [:error] [pid 24433:tid 24444] [client 4.189.153.110:6891] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aUPf7p4pN9ycmipm8TjCHwAAAQg"]
[Thu Dec 18 19:05:18.636983 2025] [:error] [pid 24958:tid 24964] [client 4.189.153.110:6989] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aUPf7skDOrUkd0wNm2G3GAAAAYM"]
[Thu Dec 18 19:05:19.035744 2025] [:error] [pid 24542:tid 24553] [client 4.189.153.110:6894] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aUPf70tQz4H2oS3NrDbsuwAAAUk"]
[Thu Dec 18 19:05:19.447476 2025] [:error] [pid 23558:tid 23630] [client 4.189.153.110:6905] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aUPf7-Ham9NbgPQa9ub-iwAAAM8"]
[Thu Dec 18 19:05:19.788259 2025] [:error] [pid 23558:tid 23633] [client 4.189.153.110:6951] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aUPf7-Ham9NbgPQa9ub-jAAAANI"]
[Thu Dec 18 19:05:20.146291 2025] [:error] [pid 24542:tid 24568] [client 4.189.153.110:6823] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aUPf8EtQz4H2oS3NrDbsvAAAAVg"]
[Thu Dec 18 19:05:20.494032 2025] [:error] [pid 24542:tid 24563] [client 4.189.153.110:6931] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aUPf8EtQz4H2oS3NrDbsvQAAAVM"]
[Thu Dec 18 19:05:20.841394 2025] [:error] [pid 12383:tid 12393] [client 4.189.153.110:6895] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aUPf8Pdgllo9h1cyxGau5QAAAsc"]
[Thu Dec 18 19:05:21.177519 2025] [:error] [pid 23645:tid 23671] [client 4.189.153.110:6854] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aUPf8Tf_Rx0Y0ao_QJhEIwAAAJg"]
[Thu Dec 18 19:05:21.615915 2025] [:error] [pid 24542:tid 24564] [client 4.189.153.110:6847] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aUPf8UtQz4H2oS3NrDbswAAAAVQ"]
[Thu Dec 18 19:05:21.977488 2025] [:error] [pid 24542:tid 24549] [client 4.189.153.110:6941] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aUPf8UtQz4H2oS3NrDbswQAAAUU"]
[Thu Dec 18 19:05:22.272614 2025] [:error] [pid 12239:tid 12256] [client 4.189.153.110:6795] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aUPf8tNnXxfGIuWO6anzfgAAAow"]
[Thu Dec 18 19:05:22.601501 2025] [:error] [pid 24433:tid 24457] [client 4.189.153.110:10784] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aUPf8p4pN9ycmipm8TjCIQAAARU"]
[Thu Dec 18 19:05:22.960209 2025] [:error] [pid 23556:tid 23571] [client 4.189.153.110:6909] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aUPf8hnmLlk3u5yt9kHOsAAAAAs"]
[Thu Dec 18 19:05:23.289057 2025] [:error] [pid 23558:tid 23638] [client 4.189.153.110:6902] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aUPf8-Ham9NbgPQa9ub-kAAAANc"]
[Thu Dec 18 19:05:23.644975 2025] [:error] [pid 23645:tid 23648] [client 4.189.153.110:6998] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aUPf8zf_Rx0Y0ao_QJhEKwAAAIE"]
[Thu Dec 18 19:05:24.004018 2025] [:error] [pid 12239:tid 12264] [client 4.189.153.110:7091] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aUPf9NNnXxfGIuWO6anzggAAApQ"]
[Thu Dec 18 19:05:24.346845 2025] [:error] [pid 24958:tid 24977] [client 4.189.153.110:6904] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aUPf9MkDOrUkd0wNm2G3GgAAAZA"]
[Thu Dec 18 19:05:24.680877 2025] [:error] [pid 12239:tid 12251] [client 4.189.153.110:6785] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aUPf9NNnXxfGIuWO6anziQAAAoc"]
[Thu Dec 18 19:05:25.023796 2025] [:error] [pid 23556:tid 23576] [client 4.189.153.110:6872] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aUPf9RnmLlk3u5yt9kHOtgAAABA"]
[Thu Dec 18 19:05:25.335323 2025] [:error] [pid 24542:tid 24545] [client 4.189.153.110:6911] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aUPf9UtQz4H2oS3NrDbsxgAAAUE"]
[Thu Dec 18 19:05:25.662707 2025] [:error] [pid 12239:tid 12266] [client 4.189.153.110:7126] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aUPf9dNnXxfGIuWO6anzlAAAApY"]
[Thu Dec 18 19:05:25.973708 2025] [:error] [pid 24542:tid 24560] [client 4.189.153.110:6942] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aUPf9UtQz4H2oS3NrDbsygAAAVA"]
[Thu Dec 18 19:05:26.322954 2025] [:error] [pid 23645:tid 23658] [client 4.189.153.110:6873] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aUPf9jf_Rx0Y0ao_QJhELQAAAIs"]
[Thu Dec 18 19:05:26.605815 2025] [:error] [pid 23556:tid 23571] [client 4.189.153.110:7028] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aUPf9hnmLlk3u5yt9kHOwgAAAAs"]
[Thu Dec 18 19:05:27.049966 2025] [:error] [pid 23558:tid 23638] [client 4.189.153.110:6949] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aUPf9-Ham9NbgPQa9ub-ogAAANc"]
[Thu Dec 18 19:05:27.367252 2025] [:error] [pid 24542:tid 24563] [client 4.189.153.110:7080] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aUPf90tQz4H2oS3NrDbszQAAAVM"]
[Thu Dec 18 19:05:27.718615 2025] [:error] [pid 23556:tid 23573] [client 4.189.153.110:6954] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aUPf9xnmLlk3u5yt9kHOwwAAAA0"]
[Thu Dec 18 19:05:28.069609 2025] [:error] [pid 12035:tid 12054] [client 4.189.153.110:6910] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aUPf-LcVHrNSHjCo-0qCLwAAAgs"]
[Thu Dec 18 19:05:28.370141 2025] [:error] [pid 12383:tid 12391] [client 4.189.153.110:6877] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aUPf-Pdgllo9h1cyxGau-gAAAsU"]
[Thu Dec 18 19:05:28.716428 2025] [:error] [pid 23556:tid 23582] [client 4.189.153.110:6844] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aUPf-BnmLlk3u5yt9kHOxwAAABY"]
[Thu Dec 18 19:05:29.107744 2025] [:error] [pid 23558:tid 23632] [client 4.189.153.110:6796] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aUPf-eHam9NbgPQa9ub-pgAAANE"]
[Thu Dec 18 19:05:29.443478 2025] [:error] [pid 24542:tid 24549] [client 4.189.153.110:6973] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aUPf-UtQz4H2oS3NrDbs0AAAAUU"]
[Thu Dec 18 19:05:29.759602 2025] [:error] [pid 23556:tid 23579] [client 4.189.153.110:6857] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aUPf-RnmLlk3u5yt9kHOyAAAABM"]
[Thu Dec 18 19:05:30.123721 2025] [:error] [pid 12239:tid 12263] [client 4.189.153.110:6907] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aUPf-tNnXxfGIuWO6anzngAAApM"]
[Thu Dec 18 19:05:30.511659 2025] [:error] [pid 24958:tid 24968] [client 4.189.153.110:6862] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aUPf-skDOrUkd0wNm2G3HwAAAYc"]
[Thu Dec 18 19:05:30.928106 2025] [:error] [pid 23558:tid 23625] [client 4.189.153.110:6943] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aUPf-uHam9NbgPQa9ub-qgAAAMo"]
[Thu Dec 18 19:05:31.260645 2025] [:error] [pid 23558:tid 23624] [client 4.189.153.110:6822] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aUPf--Ham9NbgPQa9ub-qwAAAMk"]
[Thu Dec 18 19:05:31.621461 2025] [:error] [pid 24958:tid 24973] [client 4.189.153.110:6824] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aUPf-8kDOrUkd0wNm2G3IQAAAYw"]
[Thu Dec 18 19:05:31.980405 2025] [:error] [pid 23645:tid 23650] [client 4.189.153.110:6831] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aUPf-zf_Rx0Y0ao_QJhENwAAAIM"]
[Thu Dec 18 19:05:32.290185 2025] [:error] [pid 24958:tid 24972] [client 4.189.153.110:6900] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aUPf_MkDOrUkd0wNm2G3IwAAAYs"]
[Thu Dec 18 19:05:32.597827 2025] [:error] [pid 12239:tid 12266] [client 4.189.153.110:6803] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aUPf_NNnXxfGIuWO6anzogAAApY"]
[Thu Dec 18 19:05:32.922876 2025] [:error] [pid 24433:tid 24442] [client 4.189.153.110:6793] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aUPf_J4pN9ycmipm8TjCJgAAAQY"]
[Thu Dec 18 19:05:33.238035 2025] [:error] [pid 23556:tid 23564] [client 4.189.153.110:6958] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aUPf_RnmLlk3u5yt9kHOyQAAAAQ"]
[Thu Dec 18 19:05:33.543677 2025] [:error] [pid 24433:tid 24447] [client 4.189.153.110:7037] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aUPf_Z4pN9ycmipm8TjCKAAAAQs"]
[Thu Dec 18 19:05:33.847201 2025] [:error] [pid 25357:tid 25368] [client 4.189.153.110:6784] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aUPf_YaT7bsEXnJVfJdMnAAAAck"]
[Thu Dec 18 19:05:34.193337 2025] [:error] [pid 25357:tid 25378] [client 4.189.153.110:6749] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aUPf_oaT7bsEXnJVfJdMnQAAAdM"]
[Thu Dec 18 19:05:34.609894 2025] [:error] [pid 24542:tid 24561] [client 4.189.153.110:6962] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aUPf_ktQz4H2oS3NrDbs2AAAAVE"]
[Thu Dec 18 19:05:34.941001 2025] [:error] [pid 12383:tid 12392] [client 4.189.153.110:6871] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aUPf_vdgllo9h1cyxGau_gAAAsY"]
[Thu Dec 18 19:05:35.210680 2025] [:error] [pid 24433:tid 24456] [client 4.189.153.110:6836] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aUPf_54pN9ycmipm8TjCKgAAARQ"]
[Thu Dec 18 19:05:35.572658 2025] [:error] [pid 24542:tid 24565] [client 4.189.153.110:6794] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aUPf_0tQz4H2oS3NrDbs2gAAAVU"]
[Thu Dec 18 19:05:35.880389 2025] [:error] [pid 24542:tid 24547] [client 4.189.153.110:6856] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aUPf_0tQz4H2oS3NrDbs3gAAAUM"]
[Thu Dec 18 19:05:36.154113 2025] [:error] [pid 24542:tid 24553] [client 4.189.153.110:6881] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aUPgAEtQz4H2oS3NrDbs4AAAAUk"]
[Thu Dec 18 19:05:36.479705 2025] [:error] [pid 23558:tid 23621] [client 4.189.153.110:7071] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aUPgAOHam9NbgPQa9ub-sgAAAMY"]
[Thu Dec 18 19:05:36.771384 2025] [:error] [pid 12035:tid 12067] [client 4.189.153.110:6828] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aUPgALcVHrNSHjCo-0qCMgAAAhg"]
[Thu Dec 18 19:05:37.110526 2025] [:error] [pid 24958:tid 24965] [client 4.189.153.110:7092] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aUPgAckDOrUkd0wNm2G3JQAAAYQ"]
[Thu Dec 18 19:05:37.408302 2025] [:error] [pid 25357:tid 25372] [client 4.189.153.110:6744] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aUPgAYaT7bsEXnJVfJdMnwAAAc0"]
[Thu Dec 18 19:05:37.746776 2025] [:error] [pid 25357:tid 25361] [client 4.189.153.110:6746] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aUPgAYaT7bsEXnJVfJdMoAAAAcI"]
[Thu Dec 18 19:05:38.080864 2025] [:error] [pid 24542:tid 24561] [client 4.189.153.110:6842] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aUPgAktQz4H2oS3NrDbs5gAAAVE"]
[Thu Dec 18 19:05:38.371448 2025] [:error] [pid 24958:tid 24977] [client 4.189.153.110:6764] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aUPgAskDOrUkd0wNm2G3KQAAAZA"]
[Thu Dec 18 19:05:38.740681 2025] [:error] [pid 24542:tid 24567] [client 4.189.153.110:6722] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aUPgAktQz4H2oS3NrDbs6AAAAVc"]
[Thu Dec 18 19:05:39.099325 2025] [:error] [pid 25357:tid 25371] [client 4.189.153.110:6851] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aUPgA4aT7bsEXnJVfJdMogAAAcw"]
[Thu Dec 18 19:05:39.449053 2025] [:error] [pid 24433:tid 24452] [client 4.189.153.110:6818] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aUPgA54pN9ycmipm8TjCLwAAARA"]
[Thu Dec 18 19:05:39.823713 2025] [:error] [pid 23556:tid 23568] [client 4.189.153.110:6760] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aUPgAxnmLlk3u5yt9kHOzwAAAAg"]
[Thu Dec 18 19:05:40.182172 2025] [:error] [pid 23556:tid 23569] [client 4.189.153.110:6963] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aUPgBBnmLlk3u5yt9kHO0AAAAAk"]
[Thu Dec 18 19:05:40.470302 2025] [:error] [pid 23556:tid 23561] [client 4.189.153.110:6738] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aUPgBBnmLlk3u5yt9kHO0QAAAAE"]
[Thu Dec 18 19:05:40.816607 2025] [:error] [pid 24958:tid 24969] [client 4.189.153.110:6947] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aUPgBMkDOrUkd0wNm2G3LAAAAYg"]
[Thu Dec 18 19:05:41.156362 2025] [:error] [pid 23556:tid 23582] [client 4.189.153.110:6908] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aUPgBRnmLlk3u5yt9kHO0wAAABY"]
[Thu Dec 18 19:05:41.511697 2025] [:error] [pid 23645:tid 23654] [client 4.189.153.110:6814] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aUPgBTf_Rx0Y0ao_QJhEPgAAAIc"]
[Thu Dec 18 19:05:41.878766 2025] [:error] [pid 12035:tid 12064] [client 4.189.153.110:6725] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aUPgBbcVHrNSHjCo-0qCOQAAAhU"]
[Thu Dec 18 19:05:42.229843 2025] [:error] [pid 24542:tid 24563] [client 4.189.153.110:6923] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aUPgBktQz4H2oS3NrDbs6QAAAVM"]
[Thu Dec 18 19:05:42.642647 2025] [:error] [pid 24542:tid 24554] [client 4.189.153.110:6700] [client 4.189.153.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aUPgBktQz4H2oS3NrDbs6gAAAUo"]
[Fri Dec 19 03:25:48.717760 2025] [:error] [pid 15099:tid 15166] [client 170.64.237.132:42720] [client 170.64.237.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aURVPG9X86sdxdNGvfqjNwAAAIc"]
[Fri Dec 19 03:26:01.760991 2025] [:error] [pid 15192:tid 15211] [client 170.64.237.132:42724] [client 170.64.237.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aURVSXT3wVZj4bD7MDtapwAAANA"]
[Fri Dec 19 12:44:44.605030 2025] [:error] [pid 20580:tid 20588] [client 136.144.33.93:57679] [client 136.144.33.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.93, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aUTYPEmd1op_YdAdgR0KiwAAAEI"]
[Fri Dec 19 14:46:34.662504 2025] [autoindex:error] [pid 20581:tid 20617] [client 144.91.111.74:56763] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Dec 19 19:46:20.147600 2025] [:error] [pid 20675:tid 20697] [client 209.38.85.249:54532] [client 209.38.85.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aUU7DLMyJ3XqeDRsbQmNIwAAAQk"]
[Fri Dec 19 19:46:37.617336 2025] [:error] [pid 41451:tid 41457] [client 209.38.85.249:54550] [client 209.38.85.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aUU7HQYXFn-DbZghZBHMuAAAAAM"]
[Fri Dec 19 21:31:29.026926 2025] [:error] [pid 20581:tid 20626] [client 20.89.194.239:16285] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUVTsfxEv7WXNhnFD1mQgQAAAIs"]
[Fri Dec 19 21:31:29.952459 2025] [:error] [pid 18438:tid 18463] [client 20.89.194.239:16354] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUVTsZRArClWV1iij_SiFgAAAZY"]
[Fri Dec 19 21:31:30.705382 2025] [:error] [pid 18438:tid 18465] [client 20.89.194.239:16343] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUVTspRArClWV1iij_SiGwAAAZg"]
[Fri Dec 19 21:31:31.713872 2025] [:error] [pid 16026:tid 16043] [client 20.89.194.239:16277] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUVTs0LVfhf4Jb3enmNEbAAAAU4"]
[Fri Dec 19 21:31:32.317651 2025] [:error] [pid 20581:tid 20634] [client 20.89.194.239:16357] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVTtPxEv7WXNhnFD1mQggAAAJM"]
[Fri Dec 19 21:31:32.857031 2025] [:error] [pid 20580:tid 20601] [client 20.89.194.239:6108] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVTtEmd1op_YdAdgR2q8QAAAE8"]
[Fri Dec 19 21:31:33.309560 2025] [:error] [pid 16026:tid 16041] [client 20.89.194.239:16266] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVTtULVfhf4Jb3enmNEbQAAAUw"]
[Fri Dec 19 21:31:34.056521 2025] [:error] [pid 20675:tid 20708] [client 20.89.194.239:16294] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVTtrMyJ3XqeDRsbQmpBwAAARQ"]
[Fri Dec 19 21:31:34.536480 2025] [:error] [pid 18438:tid 18441] [client 20.89.194.239:16283] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aUVTtpRArClWV1iij_SiIgAAAYA"]
[Fri Dec 19 21:31:34.963651 2025] [:error] [pid 18438:tid 18453] [client 20.89.194.239:16347] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aUVTtpRArClWV1iij_SiJQAAAYw"]
[Fri Dec 19 21:31:35.474003 2025] [:error] [pid 41451:tid 41477] [client 20.89.194.239:16371] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aUVTtwYXFn-DbZghZBHnhQAAABc"]
[Fri Dec 19 21:31:36.074538 2025] [:error] [pid 16026:tid 16048] [client 20.89.194.239:16356] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aUVTuELVfhf4Jb3enmNEbwAAAVM"]
[Fri Dec 19 21:31:37.231795 2025] [:error] [pid 16026:tid 16034] [client 20.89.194.239:6080] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUVTuULVfhf4Jb3enmNEdAAAAUU"]
[Fri Dec 19 21:31:37.953454 2025] [:error] [pid 16026:tid 16051] [client 20.89.194.239:16360] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUVTuULVfhf4Jb3enmNEdgAAAVY"]
[Fri Dec 19 21:31:39.180389 2025] [:error] [pid 16026:tid 16053] [client 20.89.194.239:16358] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUVTu0LVfhf4Jb3enmNEeAAAAVg"]
[Fri Dec 19 21:31:39.718372 2025] [:error] [pid 20675:tid 20692] [client 20.89.194.239:16281] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUVTu7MyJ3XqeDRsbQmpCQAAAQQ"]
[Fri Dec 19 21:31:40.778944 2025] [:error] [pid 20580:tid 20592] [client 20.89.194.239:16359] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "aUVTvEmd1op_YdAdgR2rAwAAAEY"]
[Fri Dec 19 21:31:41.336658 2025] [:error] [pid 41451:tid 41474] [client 20.89.194.239:16258] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "aUVTvQYXFn-DbZghZBHnjgAAABQ"]
[Fri Dec 19 21:31:41.780363 2025] [:error] [pid 16026:tid 16035] [client 20.89.194.239:16259] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "aUVTvULVfhf4Jb3enmNEfgAAAUY"]
[Fri Dec 19 21:31:42.498046 2025] [:error] [pid 16026:tid 16048] [client 20.89.194.239:6104] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "aUVTvkLVfhf4Jb3enmNEgQAAAVM"]
[Fri Dec 19 21:31:43.258659 2025] [:error] [pid 16026:tid 16044] [client 20.89.194.239:16381] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cong.php"] [unique_id "aUVTv0LVfhf4Jb3enmNEhAAAAU8"]
[Fri Dec 19 21:31:43.854686 2025] [:error] [pid 20582:tid 20664] [client 20.89.194.239:6086] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cong.php"] [unique_id "aUVTv8pAnrkQKZ4b5gZE4gAAANY"]
[Fri Dec 19 21:31:44.339118 2025] [:error] [pid 18438:tid 18456] [client 20.89.194.239:16262] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cong.php"] [unique_id "aUVTwJRArClWV1iij_SiLQAAAY8"]
[Fri Dec 19 21:31:45.397785 2025] [:error] [pid 20582:tid 20655] [client 20.89.194.239:16298] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cong.php"] [unique_id "aUVTwcpAnrkQKZ4b5gZE5wAAAM0"]
[Fri Dec 19 21:31:45.985083 2025] [:error] [pid 20675:tid 20688] [client 20.89.194.239:16328] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/123.php"] [unique_id "aUVTwbMyJ3XqeDRsbQmpEgAAAQA"]
[Fri Dec 19 21:31:46.892587 2025] [:error] [pid 20582:tid 20650] [client 20.89.194.239:16284] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/123.php"] [unique_id "aUVTwspAnrkQKZ4b5gZE7AAAAMg"]
[Fri Dec 19 21:31:47.844517 2025] [:error] [pid 20580:tid 20587] [client 20.89.194.239:16349] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/123.php"] [unique_id "aUVTw0md1op_YdAdgR2rBQAAAEE"]
[Fri Dec 19 21:31:48.985231 2025] [:error] [pid 16026:tid 16038] [client 20.89.194.239:6099] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/123.php"] [unique_id "aUVTxELVfhf4Jb3enmNEigAAAUk"]
[Fri Dec 19 21:31:49.883232 2025] [:error] [pid 20675:tid 20692] [client 20.89.194.239:16324] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/num.php"] [unique_id "aUVTxbMyJ3XqeDRsbQmpFwAAAQQ"]
[Fri Dec 19 21:31:50.725771 2025] [:error] [pid 20580:tid 20601] [client 20.89.194.239:16280] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/num.php"] [unique_id "aUVTxkmd1op_YdAdgR2rEAAAAE8"]
[Fri Dec 19 21:31:51.562477 2025] [:error] [pid 20582:tid 20645] [client 20.89.194.239:16302] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/num.php"] [unique_id "aUVTx8pAnrkQKZ4b5gZE8QAAAMM"]
[Fri Dec 19 21:31:52.638862 2025] [:error] [pid 20582:tid 20642] [client 20.89.194.239:16375] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/num.php"] [unique_id "aUVTyMpAnrkQKZ4b5gZE8wAAAMA"]
[Fri Dec 19 21:31:53.985201 2025] [:error] [pid 16026:tid 16040] [client 20.89.194.239:16327] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock360.php"] [unique_id "aUVTyULVfhf4Jb3enmNEjgAAAUs"]
[Fri Dec 19 21:31:55.205719 2025] [:error] [pid 20582:tid 20652] [client 20.89.194.239:16368] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock360.php"] [unique_id "aUVTy8pAnrkQKZ4b5gZE9AAAAMo"]
[Fri Dec 19 21:31:56.512050 2025] [:error] [pid 16026:tid 16049] [client 20.89.194.239:16348] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock360.php"] [unique_id "aUVTzELVfhf4Jb3enmNEnwAAAVQ"]
[Fri Dec 19 21:31:57.604862 2025] [:error] [pid 18438:tid 18447] [client 20.89.194.239:16337] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock360.php"] [unique_id "aUVTzZRArClWV1iij_SiQQAAAYY"]
[Fri Dec 19 21:31:58.481578 2025] [:error] [pid 20580:tid 20596] [client 20.89.194.239:16276] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUVTzkmd1op_YdAdgR2rHQAAAEo"]
[Fri Dec 19 21:31:59.162899 2025] [:error] [pid 20582:tid 20646] [client 20.89.194.239:16300] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUVTz8pAnrkQKZ4b5gZE_AAAAMQ"]
[Fri Dec 19 21:31:59.714687 2025] [:error] [pid 20582:tid 20647] [client 20.89.194.239:6119] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUVTz8pAnrkQKZ4b5gZE_QAAAMU"]
[Fri Dec 19 21:32:00.379259 2025] [:error] [pid 20675:tid 20696] [client 20.89.194.239:16286] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUVT0LMyJ3XqeDRsbQmpJAAAAQg"]
[Fri Dec 19 21:32:05.732249 2025] [:error] [pid 18438:tid 18455] [client 20.89.194.239:16376] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/NewFile.php"] [unique_id "aUVT1ZRArClWV1iij_SiSQAAAY4"]
[Fri Dec 19 21:32:08.041860 2025] [:error] [pid 20582:tid 20646] [client 20.89.194.239:16278] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/NewFile.php"] [unique_id "aUVT2MpAnrkQKZ4b5gZFCwAAAMQ"]
[Fri Dec 19 21:32:09.447631 2025] [:error] [pid 16026:tid 16037] [client 20.89.194.239:16323] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/NewFile.php"] [unique_id "aUVT2ULVfhf4Jb3enmNEpwAAAUg"]
[Fri Dec 19 21:32:11.171026 2025] [:error] [pid 41451:tid 41469] [client 20.89.194.239:6100] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/NewFile.php"] [unique_id "aUVT2wYXFn-DbZghZBHnpQAAAA8"]
[Fri Dec 19 21:32:12.105174 2025] [:error] [pid 41451:tid 41455] [client 20.89.194.239:16307] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-x7.php"] [unique_id "aUVT3AYXFn-DbZghZBHnpgAAAAE"]
[Fri Dec 19 21:32:13.166863 2025] [:error] [pid 41451:tid 41457] [client 20.89.194.239:16370] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-x7.php"] [unique_id "aUVT3QYXFn-DbZghZBHnqQAAAAM"]
[Fri Dec 19 21:32:13.992228 2025] [:error] [pid 16026:tid 16039] [client 20.89.194.239:16342] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-x7.php"] [unique_id "aUVT3ULVfhf4Jb3enmNErgAAAUo"]
[Fri Dec 19 21:32:14.469822 2025] [:error] [pid 16026:tid 16031] [client 20.89.194.239:6083] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-x7.php"] [unique_id "aUVT3kLVfhf4Jb3enmNEsQAAAUI"]
[Fri Dec 19 21:32:15.426087 2025] [:error] [pid 20675:tid 20708] [client 20.89.194.239:16257] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aUVT37MyJ3XqeDRsbQmpMAAAARQ"]
[Fri Dec 19 21:32:16.077893 2025] [:error] [pid 20675:tid 20705] [client 20.89.194.239:16326] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aUVT4LMyJ3XqeDRsbQmpMQAAARE"]
[Fri Dec 19 21:32:16.620385 2025] [:error] [pid 20581:tid 20622] [client 20.89.194.239:16274] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aUVT4PxEv7WXNhnFD1mQmgAAAIc"]
[Fri Dec 19 21:32:17.505811 2025] [:error] [pid 20675:tid 20700] [client 20.89.194.239:16267] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aUVT4bMyJ3XqeDRsbQmpNgAAAQw"]
[Fri Dec 19 21:32:18.336640 2025] [:error] [pid 16026:tid 16036] [client 20.89.194.239:16367] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v3.php"] [unique_id "aUVT4kLVfhf4Jb3enmNEtQAAAUc"]
[Fri Dec 19 21:32:19.029023 2025] [:error] [pid 20675:tid 20710] [client 20.89.194.239:16382] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v3.php"] [unique_id "aUVT47MyJ3XqeDRsbQmpOQAAARY"]
[Fri Dec 19 21:32:19.626020 2025] [:error] [pid 20581:tid 20638] [client 20.89.194.239:16265] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v3.php"] [unique_id "aUVT4_xEv7WXNhnFD1mQnwAAAJc"]
[Fri Dec 19 21:32:20.042846 2025] [:error] [pid 18438:tid 18462] [client 20.89.194.239:16379] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v3.php"] [unique_id "aUVT5JRArClWV1iij_SiVgAAAZU"]
[Fri Dec 19 21:32:20.704246 2025] [:error] [pid 20581:tid 20615] [client 20.89.194.239:16264] [client 20.89.194.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUVT5PxEv7WXNhnFD1mQoQAAAIA"]
[Fri Dec 19 21:32:22.044034 2025] [:error] [pid 18438:tid 18463] [client 20.89.194.239:16334] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/system.php"] [unique_id "aUVT5pRArClWV1iij_SiWgAAAZY"]
[Fri Dec 19 21:32:23.041240 2025] [:error] [pid 18438:tid 18444] [client 20.89.194.239:6090] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/system.php"] [unique_id "aUVT55RArClWV1iij_SiXAAAAYM"]
[Fri Dec 19 21:32:23.728211 2025] [:error] [pid 18438:tid 18452] [client 20.89.194.239:16355] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/system.php"] [unique_id "aUVT55RArClWV1iij_SiXgAAAYs"]
[Fri Dec 19 21:32:24.733702 2025] [:error] [pid 18438:tid 18449] [client 20.89.194.239:16282] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ton.php"] [unique_id "aUVT6JRArClWV1iij_SiYQAAAYg"]
[Fri Dec 19 21:32:26.059553 2025] [:error] [pid 18438:tid 18465] [client 20.89.194.239:16331] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ton.php"] [unique_id "aUVT6pRArClWV1iij_SiZQAAAZg"]
[Fri Dec 19 21:32:26.973296 2025] [:error] [pid 18438:tid 18455] [client 20.89.194.239:16352] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ton.php"] [unique_id "aUVT6pRArClWV1iij_SiaQAAAY4"]
[Fri Dec 19 21:33:38.926426 2025] [:error] [pid 20582:tid 20649] [client 20.89.194.239:16338] [client 20.89.194.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUVUMspAnrkQKZ4b5gZFWgAAAMc"]
[Fri Dec 19 21:34:12.727014 2025] [:error] [pid 41451:tid 41468] [client 20.89.194.239:16373] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aUVUVAYXFn-DbZghZBHoDQAAAA4"]
[Fri Dec 19 21:34:13.860326 2025] [:error] [pid 16026:tid 16035] [client 20.89.194.239:16256] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aUVUVULVfhf4Jb3enmNFEgAAAUY"]
[Fri Dec 19 21:34:14.769869 2025] [:error] [pid 41451:tid 41463] [client 20.89.194.239:16292] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aUVUVgYXFn-DbZghZBHoFQAAAAk"]
[Fri Dec 19 21:34:17.010873 2025] [:error] [pid 18438:tid 18458] [client 20.89.194.239:16369] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aUVUWZRArClWV1iij_Si_wAAAZE"]
[Fri Dec 19 21:34:18.484689 2025] [:error] [pid 20581:tid 20639] [client 20.89.194.239:16383] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp1.php"] [unique_id "aUVUWvxEv7WXNhnFD1mRBAAAAJg"]
[Fri Dec 19 21:34:19.979206 2025] [:error] [pid 20581:tid 20632] [client 20.89.194.239:6133] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp1.php"] [unique_id "aUVUW_xEv7WXNhnFD1mRCAAAAJE"]
[Fri Dec 19 21:34:21.854658 2025] [:error] [pid 16026:tid 16045] [client 20.89.194.239:6091] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp1.php"] [unique_id "aUVUXULVfhf4Jb3enmNFGgAAAVA"]
[Fri Dec 19 21:34:23.078948 2025] [:error] [pid 16026:tid 16042] [client 20.89.194.239:16303] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp1.php"] [unique_id "aUVUX0LVfhf4Jb3enmNFHAAAAU0"]
[Fri Dec 19 21:34:24.932286 2025] [:error] [pid 20582:tid 20644] [client 20.89.194.239:6025] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css/up.php"] [unique_id "aUVUYMpAnrkQKZ4b5gZFrAAAAMI"]
[Fri Dec 19 21:34:26.666337 2025] [:error] [pid 16026:tid 16048] [client 20.89.194.239:16353] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css/up.php"] [unique_id "aUVUYkLVfhf4Jb3enmNFHgAAAVM"]
[Fri Dec 19 21:34:27.730700 2025] [:error] [pid 20580:tid 20586] [client 20.89.194.239:16361] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css/up.php"] [unique_id "aUVUY0md1op_YdAdgR2rdgAAAEA"]
[Fri Dec 19 21:34:29.171063 2025] [:error] [pid 20582:tid 20663] [client 20.89.194.239:6123] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css/up.php"] [unique_id "aUVUZcpAnrkQKZ4b5gZFtQAAANU"]
[Fri Dec 19 21:34:30.224018 2025] [:error] [pid 20581:tid 20631] [client 20.89.194.239:6130] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aUVUZvxEv7WXNhnFD1mRGgAAAJA"]
[Fri Dec 19 21:34:32.905323 2025] [:error] [pid 16026:tid 16036] [client 20.89.194.239:16365] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aUVUaELVfhf4Jb3enmNFJQAAAUc"]
[Fri Dec 19 21:34:35.582939 2025] [:error] [pid 20582:tid 20653] [client 20.89.194.239:6084] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aUVUa8pAnrkQKZ4b5gZFwgAAAMs"]
[Fri Dec 19 21:34:36.965407 2025] [:error] [pid 18438:tid 18446] [client 20.89.194.239:16260] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aUVUbJRArClWV1iij_SjCAAAAYU"]
[Fri Dec 19 21:34:39.007637 2025] [:error] [pid 41451:tid 41462] [client 20.89.194.239:16279] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aUVUbwYXFn-DbZghZBHoOAAAAAg"]
[Fri Dec 19 21:34:39.786727 2025] [:error] [pid 41451:tid 41455] [client 20.89.194.239:6040] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aUVUbwYXFn-DbZghZBHoOgAAAAE"]
[Fri Dec 19 21:34:40.820651 2025] [:error] [pid 18438:tid 18458] [client 20.89.194.239:16270] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aUVUcJRArClWV1iij_SjDAAAAZE"]
[Fri Dec 19 21:34:42.624247 2025] [:error] [pid 20581:tid 20622] [client 20.89.194.239:16351] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aUVUcvxEv7WXNhnFD1mRIQAAAIc"]
[Fri Dec 19 21:34:43.802621 2025] [:error] [pid 20675:tid 20691] [client 20.89.194.239:16315] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wb.php"] [unique_id "aUVUc7MyJ3XqeDRsbQmplgAAAQM"]
[Fri Dec 19 21:34:45.039082 2025] [:error] [pid 20580:tid 20597] [client 20.89.194.239:6022] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wb.php"] [unique_id "aUVUdUmd1op_YdAdgR2rfgAAAEs"]
[Fri Dec 19 21:34:46.875731 2025] [:error] [pid 18438:tid 18442] [client 20.89.194.239:16261] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wb.php"] [unique_id "aUVUdpRArClWV1iij_SjEgAAAYE"]
[Fri Dec 19 21:34:48.082682 2025] [:error] [pid 16026:tid 16051] [client 20.89.194.239:6094] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wb.php"] [unique_id "aUVUeELVfhf4Jb3enmNFKQAAAVY"]
[Fri Dec 19 21:34:49.269158 2025] [:error] [pid 20580:tid 20604] [client 20.89.194.239:16363] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aUVUeUmd1op_YdAdgR2rgQAAAFI"]
[Fri Dec 19 21:34:51.254758 2025] [:error] [pid 41451:tid 41456] [client 20.89.194.239:16294] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aUVUewYXFn-DbZghZBHoPwAAAAI"]
[Fri Dec 19 21:34:52.188761 2025] [:error] [pid 20582:tid 20646] [client 20.89.194.239:6141] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aUVUfMpAnrkQKZ4b5gZFxwAAAMQ"]
[Fri Dec 19 21:34:53.064159 2025] [:error] [pid 16026:tid 16041] [client 20.89.194.239:16272] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aUVUfULVfhf4Jb3enmNFLQAAAUw"]
[Fri Dec 19 21:34:54.735105 2025] [:error] [pid 16026:tid 16037] [client 20.89.194.239:16303] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aUVUfkLVfhf4Jb3enmNFMQAAAUg"]
[Fri Dec 19 21:34:55.715086 2025] [:error] [pid 41451:tid 41462] [client 20.89.194.239:6105] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aUVUfwYXFn-DbZghZBHoQgAAAAg"]
[Fri Dec 19 21:34:56.656353 2025] [:error] [pid 16026:tid 16050] [client 20.89.194.239:6093] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aUVUgELVfhf4Jb3enmNFMgAAAVU"]
[Fri Dec 19 21:34:57.767537 2025] [:error] [pid 20675:tid 20698] [client 20.89.194.239:16290] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aUVUgbMyJ3XqeDRsbQmppQAAAQo"]
[Fri Dec 19 21:34:59.259260 2025] [:error] [pid 41451:tid 41455] [client 20.89.194.239:16378] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x.php"] [unique_id "aUVUgwYXFn-DbZghZBHoRAAAAAE"]
[Fri Dec 19 21:35:00.199078 2025] [:error] [pid 20581:tid 20616] [client 20.89.194.239:16329] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x.php"] [unique_id "aUVUhPxEv7WXNhnFD1mRLAAAAIE"]
[Fri Dec 19 21:35:01.646158 2025] [:error] [pid 20582:tid 20650] [client 20.89.194.239:6140] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x.php"] [unique_id "aUVUhcpAnrkQKZ4b5gZF0AAAAMg"]
[Fri Dec 19 21:35:02.974897 2025] [:error] [pid 18438:tid 18454] [client 20.89.194.239:6126] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x.php"] [unique_id "aUVUhpRArClWV1iij_SjIAAAAY0"]
[Fri Dec 19 21:35:03.727630 2025] [:error] [pid 18438:tid 18446] [client 20.89.194.239:6089] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless11.php"] [unique_id "aUVUh5RArClWV1iij_SjIgAAAYU"]
[Fri Dec 19 21:35:04.318680 2025] [:error] [pid 20582:tid 20656] [client 20.89.194.239:16297] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless11.php"] [unique_id "aUVUiMpAnrkQKZ4b5gZF1AAAAM4"]
[Fri Dec 19 21:35:05.098671 2025] [:error] [pid 20675:tid 20693] [client 20.89.194.239:6085] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless11.php"] [unique_id "aUVUibMyJ3XqeDRsbQmppwAAAQU"]
[Fri Dec 19 21:35:05.772804 2025] [:error] [pid 18438:tid 18458] [client 20.89.194.239:16271] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless11.php"] [unique_id "aUVUiZRArClWV1iij_SjJQAAAZE"]
[Fri Dec 19 21:35:06.359062 2025] [:error] [pid 20580:tid 20597] [client 20.89.194.239:16317] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aUVUikmd1op_YdAdgR2rigAAAEs"]
[Fri Dec 19 21:35:07.542764 2025] [:error] [pid 20582:tid 20657] [client 20.89.194.239:16377] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aUVUi8pAnrkQKZ4b5gZF3gAAAM8"]
[Fri Dec 19 21:36:42.601663 2025] [proxy_fcgi:error] [pid 16026:tid 16053] [client 20.89.194.239:16364] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 21:36:42.804836 2025] [:error] [pid 16026:tid 16040] [client 20.89.194.239:16364] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aUVU6kLVfhf4Jb3enmNFjwAAAUs"]
[Fri Dec 19 21:36:43.898566 2025] [:error] [pid 16026:tid 16043] [client 20.89.194.239:6056] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aUVU60LVfhf4Jb3enmNFkAAAAU4"]
[Fri Dec 19 21:36:45.061431 2025] [:error] [pid 20581:tid 20626] [client 20.89.194.239:16372] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aUVU7fxEv7WXNhnFD1mRdwAAAIs"]
[Fri Dec 19 21:36:45.759781 2025] [:error] [pid 16026:tid 16037] [client 20.89.194.239:16285] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aUVU7ULVfhf4Jb3enmNFlAAAAUg"]
[Fri Dec 19 21:36:47.000915 2025] [:error] [pid 20675:tid 20707] [client 20.89.194.239:16293] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the1me.php"] [unique_id "aUVU7rMyJ3XqeDRsbQmqBwAAARM"]
[Fri Dec 19 21:36:48.604846 2025] [:error] [pid 20580:tid 20609] [client 20.89.194.239:6122] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the1me.php"] [unique_id "aUVU8Emd1op_YdAdgR2ruQAAAFc"]
[Fri Dec 19 21:36:49.618559 2025] [:error] [pid 20675:tid 20708] [client 20.89.194.239:16278] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the1me.php"] [unique_id "aUVU8bMyJ3XqeDRsbQmqCQAAARQ"]
[Fri Dec 19 21:36:50.358360 2025] [:error] [pid 20580:tid 20601] [client 20.89.194.239:16289] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the1me.php"] [unique_id "aUVU8kmd1op_YdAdgR2rvwAAAE8"]
[Fri Dec 19 21:36:50.969824 2025] [:error] [pid 20581:tid 20623] [client 20.89.194.239:16316] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lala.php"] [unique_id "aUVU8vxEv7WXNhnFD1mRgQAAAIg"]
[Fri Dec 19 21:36:51.856862 2025] [:error] [pid 20675:tid 20697] [client 20.89.194.239:6027] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lala.php"] [unique_id "aUVU87MyJ3XqeDRsbQmqDQAAAQk"]
[Fri Dec 19 21:36:52.353716 2025] [:error] [pid 20675:tid 20704] [client 20.89.194.239:16266] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lala.php"] [unique_id "aUVU9LMyJ3XqeDRsbQmqDgAAARA"]
[Fri Dec 19 21:36:52.859680 2025] [:error] [pid 20580:tid 20586] [client 20.89.194.239:6082] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lala.php"] [unique_id "aUVU9Emd1op_YdAdgR2rwwAAAEA"]
[Fri Dec 19 21:36:53.653762 2025] [:error] [pid 20675:tid 20706] [client 20.89.194.239:6042] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aUVU9bMyJ3XqeDRsbQmqFAAAARI"]
[Fri Dec 19 21:36:54.805413 2025] [:error] [pid 18438:tid 18463] [client 20.89.194.239:6057] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aUVU9pRArClWV1iij_SjsQAAAZY"]
[Fri Dec 19 21:36:56.222065 2025] [:error] [pid 41451:tid 41457] [client 20.89.194.239:16370] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aUVU-AYXFn-DbZghZBHolQAAAAM"]
[Fri Dec 19 21:36:57.376717 2025] [:error] [pid 41451:tid 41472] [client 20.89.194.239:16381] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aUVU-QYXFn-DbZghZBHolgAAABI"]
[Fri Dec 19 21:36:58.108436 2025] [:error] [pid 20580:tid 20609] [client 20.89.194.239:16320] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aUVU-kmd1op_YdAdgR2rygAAAFc"]
[Fri Dec 19 21:36:58.749628 2025] [:error] [pid 16026:tid 16035] [client 20.89.194.239:16301] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aUVU-kLVfhf4Jb3enmNFqQAAAUY"]
[Fri Dec 19 21:36:59.570409 2025] [:error] [pid 20582:tid 20665] [client 20.89.194.239:16265] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aUVU-8pAnrkQKZ4b5gZGRgAAANc"]
[Fri Dec 19 21:37:00.600358 2025] [:error] [pid 20675:tid 20708] [client 20.89.194.239:6124] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aUVU_LMyJ3XqeDRsbQmqHgAAARQ"]
[Fri Dec 19 21:37:01.707052 2025] [:error] [pid 18438:tid 18463] [client 20.89.194.239:6096] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aUVU_ZRArClWV1iij_SjvgAAAZY"]
[Fri Dec 19 21:37:02.380463 2025] [:error] [pid 20580:tid 20599] [client 20.89.194.239:6044] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aUVU_kmd1op_YdAdgR2r0wAAAE0"]
[Fri Dec 19 21:37:04.130182 2025] [:error] [pid 16026:tid 16029] [client 20.89.194.239:16264] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aUVVAELVfhf4Jb3enmNFrAAAAUA"]
[Fri Dec 19 21:37:05.815622 2025] [:error] [pid 41451:tid 41456] [client 20.89.194.239:6099] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aUVVAQYXFn-DbZghZBHomgAAAAI"]
[Fri Dec 19 21:37:07.368631 2025] [:error] [pid 20581:tid 20618] [client 20.89.194.239:6088] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aUVVA_xEv7WXNhnFD1mRkAAAAIM"]
[Fri Dec 19 21:37:08.426799 2025] [:error] [pid 20580:tid 20608] [client 20.89.194.239:16354] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aUVVBEmd1op_YdAdgR2r2QAAAFY"]
[Fri Dec 19 21:37:09.563105 2025] [:error] [pid 20580:tid 20586] [client 20.89.194.239:16283] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aUVVBUmd1op_YdAdgR2r2wAAAEA"]
[Fri Dec 19 21:37:10.608779 2025] [:error] [pid 16026:tid 16048] [client 20.89.194.239:16308] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aUVVBkLVfhf4Jb3enmNFsgAAAVM"]
[Fri Dec 19 21:37:12.219631 2025] [:error] [pid 18438:tid 18448] [client 20.89.194.239:16375] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aUVVCJRArClWV1iij_Sj0gAAAYc"]
[Fri Dec 19 21:37:13.592979 2025] [:error] [pid 18438:tid 18454] [client 20.89.194.239:16267] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aUVVCZRArClWV1iij_Sj1QAAAY0"]
[Fri Dec 19 21:37:15.038260 2025] [:error] [pid 16026:tid 16042] [client 20.89.194.239:16380] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aUVVC0LVfhf4Jb3enmNFtQAAAU0"]
[Fri Dec 19 21:37:16.333914 2025] [:error] [pid 41451:tid 41466] [client 20.89.194.239:16331] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aUVVDAYXFn-DbZghZBHooQAAAAw"]
[Fri Dec 19 21:37:17.481315 2025] [:error] [pid 20581:tid 20622] [client 20.89.194.239:16281] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aUVVDfxEv7WXNhnFD1mRmgAAAIc"]
[Fri Dec 19 21:37:19.335763 2025] [:error] [pid 20675:tid 20700] [client 20.89.194.239:16368] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aUVVD7MyJ3XqeDRsbQmqLwAAAQw"]
[Fri Dec 19 21:37:21.902326 2025] [:error] [pid 18438:tid 18450] [client 20.89.194.239:5958] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aUVVEZRArClWV1iij_Sj2gAAAYk"]
[Fri Dec 19 21:37:22.821022 2025] [:error] [pid 20580:tid 20610] [client 20.89.194.239:16341] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aUVVEkmd1op_YdAdgR2r4AAAAFg"]
[Fri Dec 19 21:37:23.949804 2025] [:error] [pid 20582:tid 20649] [client 20.89.194.239:16287] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hk.php"] [unique_id "aUVVE8pAnrkQKZ4b5gZGXQAAAMc"]
[Fri Dec 19 21:37:25.408171 2025] [:error] [pid 16026:tid 16037] [client 20.89.194.239:6128] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hk.php"] [unique_id "aUVVFULVfhf4Jb3enmNFwAAAAUg"]
[Fri Dec 19 21:37:26.086917 2025] [:error] [pid 16026:tid 16035] [client 20.89.194.239:16300] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hk.php"] [unique_id "aUVVFkLVfhf4Jb3enmNFwQAAAUY"]
[Fri Dec 19 21:37:27.155296 2025] [:error] [pid 20675:tid 20702] [client 20.89.194.239:16376] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hk.php"] [unique_id "aUVVF7MyJ3XqeDRsbQmqNwAAAQ4"]
[Fri Dec 19 21:37:28.461155 2025] [:error] [pid 20581:tid 20636] [client 20.89.194.239:16371] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yas.php"] [unique_id "aUVVGPxEv7WXNhnFD1mRoAAAAJU"]
[Fri Dec 19 21:37:29.264889 2025] [:error] [pid 20675:tid 20693] [client 20.89.194.239:6083] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yas.php"] [unique_id "aUVVGbMyJ3XqeDRsbQmqPAAAAQU"]
[Fri Dec 19 21:37:29.786049 2025] [:error] [pid 41451:tid 41477] [client 20.89.194.239:16358] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yas.php"] [unique_id "aUVVGQYXFn-DbZghZBHorwAAABc"]
[Fri Dec 19 21:37:30.400967 2025] [:error] [pid 20581:tid 20631] [client 20.89.194.239:16273] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yas.php"] [unique_id "aUVVGvxEv7WXNhnFD1mRogAAAJA"]
[Fri Dec 19 21:37:31.864937 2025] [:error] [pid 20582:tid 20652] [client 20.89.194.239:16348] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "aUVVG8pAnrkQKZ4b5gZGZwAAAMo"]
[Fri Dec 19 21:37:33.459154 2025] [:error] [pid 18438:tid 18457] [client 20.89.194.239:16257] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "aUVVHZRArClWV1iij_Sj7AAAAZA"]
[Fri Dec 19 21:37:35.312015 2025] [:error] [pid 16026:tid 16032] [client 20.89.194.239:16286] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "aUVVH0LVfhf4Jb3enmNFzgAAAUM"]
[Fri Dec 19 21:37:38.581078 2025] [:error] [pid 20675:tid 20691] [client 20.89.194.239:6080] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "aUVVIrMyJ3XqeDRsbQmqRAAAAQM"]
[Fri Dec 19 21:37:39.278061 2025] [:error] [pid 18438:tid 18450] [client 20.89.194.239:16326] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-gr.php"] [unique_id "aUVVI5RArClWV1iij_Sj_QAAAYk"]
[Fri Dec 19 21:37:41.058085 2025] [:error] [pid 18438:tid 18462] [client 20.89.194.239:6097] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-gr.php"] [unique_id "aUVVJZRArClWV1iij_SkAAAAAZU"]
[Fri Dec 19 21:39:46.432394 2025] [:error] [pid 18438:tid 18449] [client 20.89.194.239:16374] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aUVVopRArClWV1iij_SljQAAAYg"]
[Fri Dec 19 21:39:47.735390 2025] [:error] [pid 20581:tid 20636] [client 20.89.194.239:16262] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aUVVo_xEv7WXNhnFD1mSEgAAAJU"]
[Fri Dec 19 21:39:48.789242 2025] [:error] [pid 20582:tid 20660] [client 20.89.194.239:16317] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aUVVpMpAnrkQKZ4b5gZHbwAAANI"]
[Fri Dec 19 21:39:49.788431 2025] [:error] [pid 20581:tid 20624] [client 20.89.194.239:16277] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aUVVpfxEv7WXNhnFD1mSFAAAAIk"]
[Fri Dec 19 21:39:50.542908 2025] [:error] [pid 20582:tid 20662] [client 20.89.194.239:16367] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUVVpspAnrkQKZ4b5gZHcgAAANQ"]
[Fri Dec 19 21:39:51.867623 2025] [:error] [pid 41451:tid 41461] [client 20.89.194.239:16382] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUVVpwYXFn-DbZghZBHpxQAAAAc"]
[Fri Dec 19 21:39:53.123382 2025] [:error] [pid 20580:tid 20606] [client 20.89.194.239:16329] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUVVqUmd1op_YdAdgR2sogAAAFQ"]
[Fri Dec 19 21:39:54.617738 2025] [:error] [pid 18438:tid 18453] [client 20.89.194.239:16332] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUVVqpRArClWV1iij_SlvgAAAYw"]
[Fri Dec 19 21:39:55.637907 2025] [:error] [pid 41451:tid 41462] [client 20.89.194.239:16351] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tox.php"] [unique_id "aUVVqwYXFn-DbZghZBHpxgAAAAg"]
[Fri Dec 19 21:39:57.648736 2025] [:error] [pid 20581:tid 20624] [client 20.89.194.239:16261] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tox.php"] [unique_id "aUVVrfxEv7WXNhnFD1mSKQAAAIk"]
[Fri Dec 19 21:39:59.323505 2025] [:error] [pid 20580:tid 20595] [client 20.89.194.239:16338] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tox.php"] [unique_id "aUVVr0md1op_YdAdgR2ssAAAAEk"]
[Fri Dec 19 21:40:01.262933 2025] [:error] [pid 41451:tid 41470] [client 20.89.194.239:16288] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tox.php"] [unique_id "aUVVsQYXFn-DbZghZBHp0gAAABA"]
[Fri Dec 19 21:40:01.906672 2025] [:error] [pid 41451:tid 41469] [client 20.89.194.239:16337] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lo.php"] [unique_id "aUVVsQYXFn-DbZghZBHp0wAAAA8"]
[Fri Dec 19 21:40:03.440078 2025] [:error] [pid 20582:tid 20647] [client 20.89.194.239:16334] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lo.php"] [unique_id "aUVVs8pAnrkQKZ4b5gZHfQAAAMU"]
[Fri Dec 19 21:40:03.996836 2025] [:error] [pid 20582:tid 20659] [client 20.89.194.239:16318] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lo.php"] [unique_id "aUVVs8pAnrkQKZ4b5gZHfgAAANE"]
[Fri Dec 19 21:40:05.258603 2025] [:error] [pid 20581:tid 20620] [client 20.89.194.239:16340] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lo.php"] [unique_id "aUVVtfxEv7WXNhnFD1mSOgAAAIU"]
[Fri Dec 19 21:40:06.571973 2025] [:error] [pid 20580:tid 20604] [client 20.89.194.239:6138] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpls.php"] [unique_id "aUVVtkmd1op_YdAdgR2svAAAAFI"]
[Fri Dec 19 21:40:07.845835 2025] [:error] [pid 20580:tid 20588] [client 20.89.194.239:16284] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpls.php"] [unique_id "aUVVt0md1op_YdAdgR2svgAAAEI"]
[Fri Dec 19 21:40:08.780018 2025] [:error] [pid 16026:tid 16030] [client 20.89.194.239:16357] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpls.php"] [unique_id "aUVVuELVfhf4Jb3enmNGlAAAAUE"]
[Fri Dec 19 21:40:10.425738 2025] [:error] [pid 18438:tid 18443] [client 20.89.194.239:16304] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpls.php"] [unique_id "aUVVupRArClWV1iij_Sl1gAAAYI"]
[Fri Dec 19 21:40:11.770357 2025] [:error] [pid 18438:tid 18465] [client 20.89.194.239:6066] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geck.php"] [unique_id "aUVVu5RArClWV1iij_Sl4QAAAZg"]
[Fri Dec 19 21:40:12.627042 2025] [:error] [pid 20675:tid 20706] [client 20.89.194.239:16291] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geck.php"] [unique_id "aUVVvLMyJ3XqeDRsbQmq8wAAARI"]
[Fri Dec 19 21:40:13.114287 2025] [:error] [pid 20580:tid 20601] [client 20.89.194.239:16363] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geck.php"] [unique_id "aUVVvUmd1op_YdAdgR2sxAAAAE8"]
[Fri Dec 19 21:40:14.525078 2025] [:error] [pid 18438:tid 18453] [client 20.89.194.239:16258] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geck.php"] [unique_id "aUVVvpRArClWV1iij_Sl7QAAAYw"]
[Fri Dec 19 21:40:15.754168 2025] [:error] [pid 20582:tid 20650] [client 20.89.194.239:16307] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inde.php"] [unique_id "aUVVv8pAnrkQKZ4b5gZHlgAAAMg"]
[Fri Dec 19 21:40:17.212877 2025] [:error] [pid 16026:tid 16043] [client 20.89.194.239:16294] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inde.php"] [unique_id "aUVVwULVfhf4Jb3enmNGqQAAAU4"]
[Fri Dec 19 21:40:18.791649 2025] [:error] [pid 16026:tid 16048] [client 20.89.194.239:6130] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inde.php"] [unique_id "aUVVwkLVfhf4Jb3enmNGtAAAAVM"]
[Fri Dec 19 21:40:21.322622 2025] [:error] [pid 20580:tid 20590] [client 20.89.194.239:6094] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inde.php"] [unique_id "aUVVxUmd1op_YdAdgR2szQAAAEQ"]
[Fri Dec 19 21:40:22.966217 2025] [:error] [pid 18438:tid 18443] [client 20.89.194.239:6085] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/777.php"] [unique_id "aUVVxpRArClWV1iij_SmAQAAAYI"]
[Fri Dec 19 21:40:25.100103 2025] [:error] [pid 20675:tid 20694] [client 20.89.194.239:6104] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/777.php"] [unique_id "aUVVybMyJ3XqeDRsbQmq-wAAAQY"]
[Fri Dec 19 21:40:27.123092 2025] [:error] [pid 41451:tid 41471] [client 20.89.194.239:6098] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/777.php"] [unique_id "aUVVywYXFn-DbZghZBHp8QAAABE"]
[Fri Dec 19 21:40:27.943846 2025] [:error] [pid 18438:tid 18460] [client 20.89.194.239:16366] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/777.php"] [unique_id "aUVVy5RArClWV1iij_SmDAAAAZM"]
[Fri Dec 19 21:40:29.041979 2025] [:error] [pid 16026:tid 16041] [client 20.89.194.239:16302] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/luxe.php"] [unique_id "aUVVzULVfhf4Jb3enmNGywAAAUw"]
[Fri Dec 19 21:40:30.428526 2025] [:error] [pid 16026:tid 16038] [client 20.89.194.239:6093] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/luxe.php"] [unique_id "aUVVzkLVfhf4Jb3enmNGzwAAAUk"]
[Fri Dec 19 21:40:32.380168 2025] [:error] [pid 16026:tid 16052] [client 20.89.194.239:6034] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/luxe.php"] [unique_id "aUVV0ELVfhf4Jb3enmNG0QAAAVc"]
[Fri Dec 19 21:40:33.399471 2025] [:error] [pid 16026:tid 16039] [client 20.89.194.239:6086] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/luxe.php"] [unique_id "aUVV0ULVfhf4Jb3enmNG0wAAAUo"]
[Fri Dec 19 21:40:34.240959 2025] [:error] [pid 16026:tid 16045] [client 20.89.194.239:16298] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "aUVV0kLVfhf4Jb3enmNG1QAAAVA"]
[Fri Dec 19 21:40:35.465931 2025] [:error] [pid 18438:tid 18460] [client 20.89.194.239:16279] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "aUVV05RArClWV1iij_SmGAAAAZM"]
[Fri Dec 19 21:40:36.712091 2025] [:error] [pid 20581:tid 20638] [client 20.89.194.239:6118] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "aUVV1PxEv7WXNhnFD1mSXQAAAJc"]
[Fri Dec 19 21:40:37.623610 2025] [:error] [pid 20581:tid 20630] [client 20.89.194.239:6095] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "aUVV1fxEv7WXNhnFD1mSYAAAAI8"]
[Fri Dec 19 21:40:38.673831 2025] [:error] [pid 20675:tid 20692] [client 20.89.194.239:16379] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxin.php"] [unique_id "aUVV1rMyJ3XqeDRsbQmrBAAAAQQ"]
[Fri Dec 19 21:40:39.821766 2025] [:error] [pid 20581:tid 20625] [client 20.89.194.239:16377] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxin.php"] [unique_id "aUVV1_xEv7WXNhnFD1mSYwAAAIo"]
[Fri Dec 19 21:40:41.713961 2025] [:error] [pid 20675:tid 20693] [client 20.89.194.239:16360] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxin.php"] [unique_id "aUVV2bMyJ3XqeDRsbQmrCAAAAQU"]
[Fri Dec 19 21:40:42.619673 2025] [:error] [pid 41451:tid 41471] [client 20.89.194.239:16269] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxin.php"] [unique_id "aUVV2gYXFn-DbZghZBHqAQAAABE"]
[Fri Dec 19 21:40:45.689018 2025] [:error] [pid 41451:tid 41471] [client 20.89.194.239:16269] [client 20.89.194.239] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "113.175.209.140_794d54186261fe2bc2736ed06e3d0e320c015c5f"): Internal error (specific information not available) [hostname "www.makifim.com.au"] [uri "/zxin.php"] [unique_id "aUVV2gYXFn-DbZghZBHqAQAAABE"]
[Fri Dec 19 21:42:01.889841 2025] [:error] [pid 16026:tid 16050] [client 20.89.194.239:16352] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v4.php"] [unique_id "aUVWKULVfhf4Jb3enmNHZAAAAVU"]
[Fri Dec 19 21:42:02.473765 2025] [:error] [pid 41451:tid 41459] [client 20.89.194.239:16346] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v4.php"] [unique_id "aUVWKgYXFn-DbZghZBHqdQAAAAU"]
[Fri Dec 19 21:42:02.925196 2025] [:error] [pid 41451:tid 41474] [client 20.89.194.239:16285] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v4.php"] [unique_id "aUVWKgYXFn-DbZghZBHqdgAAABQ"]
[Fri Dec 19 21:42:03.677854 2025] [:error] [pid 18438:tid 18452] [client 20.89.194.239:16270] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v4.php"] [unique_id "aUVWK5RArClWV1iij_Sm1gAAAYs"]
[Fri Dec 19 21:42:04.725954 2025] [:error] [pid 20675:tid 20701] [client 20.89.194.239:16355] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aUVWLLMyJ3XqeDRsbQmrZQAAAQ0"]
[Fri Dec 19 21:42:05.294048 2025] [:error] [pid 18438:tid 18453] [client 20.89.194.239:16376] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aUVWLZRArClWV1iij_Sm2QAAAYw"]
[Fri Dec 19 21:42:05.965727 2025] [:error] [pid 41451:tid 41472] [client 20.89.194.239:5952] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aUVWLQYXFn-DbZghZBHqfwAAABI"]
[Fri Dec 19 21:42:06.506487 2025] [:error] [pid 41451:tid 41468] [client 20.89.194.239:6142] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aUVWLgYXFn-DbZghZBHqggAAAA4"]
[Fri Dec 19 21:42:07.063682 2025] [:error] [pid 41451:tid 41458] [client 20.89.194.239:16371] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gg.php"] [unique_id "aUVWLwYXFn-DbZghZBHqiAAAAAQ"]
[Fri Dec 19 21:42:07.768361 2025] [:error] [pid 20580:tid 20599] [client 20.89.194.239:16308] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gg.php"] [unique_id "aUVWL0md1op_YdAdgR2tRgAAAE0"]
[Fri Dec 19 21:42:08.318820 2025] [:error] [pid 20581:tid 20634] [client 20.89.194.239:6107] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gg.php"] [unique_id "aUVWMPxEv7WXNhnFD1mSrgAAAJM"]
[Fri Dec 19 21:42:08.762679 2025] [:error] [pid 20675:tid 20693] [client 20.89.194.239:16378] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gg.php"] [unique_id "aUVWMLMyJ3XqeDRsbQmrbAAAAQU"]
[Fri Dec 19 21:42:09.952316 2025] [:error] [pid 18438:tid 18455] [client 20.89.194.239:16283] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aUVWMZRArClWV1iij_Sm3AAAAY4"]
[Fri Dec 19 21:42:10.515342 2025] [:error] [pid 20581:tid 20636] [client 20.89.194.239:16369] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aUVWMvxEv7WXNhnFD1mStgAAAJU"]
[Fri Dec 19 21:42:11.198115 2025] [:error] [pid 20580:tid 20607] [client 20.89.194.239:16345] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aUVWM0md1op_YdAdgR2tUQAAAFU"]
[Fri Dec 19 21:42:12.141703 2025] [:error] [pid 41451:tid 41478] [client 20.89.194.239:16344] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aUVWNAYXFn-DbZghZBHqjQAAABg"]
[Fri Dec 19 21:42:13.024159 2025] [:error] [pid 20675:tid 20690] [client 20.89.194.239:16293] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gelap.php"] [unique_id "aUVWNbMyJ3XqeDRsbQmregAAAQI"]
[Fri Dec 19 21:42:13.780582 2025] [:error] [pid 20675:tid 20708] [client 20.89.194.239:16333] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gelap.php"] [unique_id "aUVWNbMyJ3XqeDRsbQmrfwAAARQ"]
[Fri Dec 19 21:42:14.237813 2025] [:error] [pid 20581:tid 20622] [client 20.89.194.239:6025] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gelap.php"] [unique_id "aUVWNvxEv7WXNhnFD1mSvAAAAIc"]
[Fri Dec 19 21:42:14.770519 2025] [:error] [pid 18438:tid 18459] [client 20.89.194.239:16267] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gelap.php"] [unique_id "aUVWNpRArClWV1iij_Sm3wAAAZI"]
[Fri Dec 19 21:42:15.664043 2025] [:error] [pid 20582:tid 20646] [client 20.89.194.239:16364] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aUVWN8pAnrkQKZ4b5gZIMwAAAMQ"]
[Fri Dec 19 21:42:16.259644 2025] [:error] [pid 20582:tid 20644] [client 20.89.194.239:16383] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aUVWOMpAnrkQKZ4b5gZINAAAAMI"]
[Fri Dec 19 21:42:16.980524 2025] [:error] [pid 41451:tid 41462] [client 20.89.194.239:16282] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aUVWOAYXFn-DbZghZBHqlwAAAAg"]
[Fri Dec 19 21:42:17.921939 2025] [:error] [pid 16026:tid 16035] [client 20.89.194.239:16266] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aUVWOULVfhf4Jb3enmNHaQAAAUY"]
[Fri Dec 19 21:42:18.899589 2025] [:error] [pid 20582:tid 20663] [client 20.89.194.239:16290] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aUVWOspAnrkQKZ4b5gZINQAAANU"]
[Fri Dec 19 21:42:19.581420 2025] [:error] [pid 18438:tid 18463] [client 20.89.194.239:16356] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aUVWO5RArClWV1iij_Sm6AAAAZY"]
[Fri Dec 19 21:42:19.968784 2025] [:error] [pid 20581:tid 20635] [client 20.89.194.239:16373] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aUVWO_xEv7WXNhnFD1mSvQAAAJQ"]
[Fri Dec 19 21:42:20.713026 2025] [:error] [pid 18438:tid 18448] [client 20.89.194.239:16259] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aUVWPJRArClWV1iij_Sm7QAAAYc"]
[Fri Dec 19 21:42:21.681832 2025] [:error] [pid 18438:tid 18457] [client 20.89.194.239:16256] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aUVWPZRArClWV1iij_Sm7wAAAZA"]
[Fri Dec 19 21:42:22.555986 2025] [:error] [pid 41451:tid 41457] [client 20.89.194.239:16339] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aUVWPgYXFn-DbZghZBHqnwAAAAM"]
[Fri Dec 19 21:42:23.167995 2025] [:error] [pid 20675:tid 20710] [client 20.89.194.239:6080] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aUVWP7MyJ3XqeDRsbQmriQAAARY"]
[Fri Dec 19 21:42:23.463769 2025] [:error] [pid 20580:tid 20594] [client 20.89.194.239:16325] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aUVWP0md1op_YdAdgR2tWgAAAEg"]
[Fri Dec 19 21:42:29.325711 2025] [:error] [pid 20675:tid 20692] [client 20.89.194.239:16312] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUVWRbMyJ3XqeDRsbQmrkAAAAQQ"]
[Fri Dec 19 21:42:30.390616 2025] [:error] [pid 18438:tid 18452] [client 20.89.194.239:16286] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUVWRpRArClWV1iij_Sm8wAAAYs"]
[Fri Dec 19 21:42:31.374938 2025] [:error] [pid 41451:tid 41460] [client 20.89.194.239:16292] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUVWRwYXFn-DbZghZBHqqwAAAAY"]
[Fri Dec 19 21:42:32.691461 2025] [:error] [pid 20582:tid 20649] [client 20.89.194.239:16272] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUVWSMpAnrkQKZ4b5gZIOAAAAMc"]
[Fri Dec 19 21:42:33.197148 2025] [:error] [pid 18438:tid 18447] [client 20.89.194.239:16341] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aUVWSZRArClWV1iij_Sm-AAAAYY"]
[Fri Dec 19 21:42:33.785651 2025] [:error] [pid 20581:tid 20618] [client 20.89.194.239:6109] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aUVWSfxEv7WXNhnFD1mSygAAAIM"]
[Fri Dec 19 21:42:34.312724 2025] [:error] [pid 20580:tid 20606] [client 20.89.194.239:16268] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aUVWSkmd1op_YdAdgR2tXwAAAFQ"]
[Fri Dec 19 21:42:36.417917 2025] [:error] [pid 20675:tid 20711] [client 20.89.194.239:16278] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aUVWTLMyJ3XqeDRsbQmrlgAAARc"]
[Fri Dec 19 21:42:36.751181 2025] [:error] [pid 18438:tid 18457] [client 20.89.194.239:6141] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v.php"] [unique_id "aUVWTJRArClWV1iij_Sm_AAAAZA"]
[Fri Dec 19 21:42:37.097415 2025] [:error] [pid 18438:tid 18460] [client 20.89.194.239:16342] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v.php"] [unique_id "aUVWTZRArClWV1iij_Sm_gAAAZM"]
[Fri Dec 19 21:42:37.615846 2025] [:error] [pid 41451:tid 41475] [client 20.89.194.239:6032] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v.php"] [unique_id "aUVWTQYXFn-DbZghZBHqrwAAABU"]
[Fri Dec 19 21:42:38.332382 2025] [:error] [pid 20675:tid 20697] [client 20.89.194.239:16353] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v.php"] [unique_id "aUVWTrMyJ3XqeDRsbQmrmwAAAQk"]
[Fri Dec 19 21:42:39.124226 2025] [:error] [pid 18438:tid 18452] [client 20.89.194.239:16326] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aUVWT5RArClWV1iij_SnBAAAAYs"]
[Fri Dec 19 21:42:40.182060 2025] [:error] [pid 20582:tid 20647] [client 20.89.194.239:16350] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aUVWUMpAnrkQKZ4b5gZIPgAAAMU"]
[Fri Dec 19 21:42:41.281294 2025] [:error] [pid 20675:tid 20694] [client 20.89.194.239:6124] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aUVWUbMyJ3XqeDRsbQmrngAAAQY"]
[Fri Dec 19 21:42:41.924643 2025] [:error] [pid 20675:tid 20698] [client 20.89.194.239:6087] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aUVWUbMyJ3XqeDRsbQmroAAAAQo"]
[Fri Dec 19 21:42:42.558209 2025] [:error] [pid 20675:tid 20711] [client 20.89.194.239:16301] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless.php"] [unique_id "aUVWUrMyJ3XqeDRsbQmrogAAARc"]
[Fri Dec 19 21:42:43.105011 2025] [:error] [pid 41451:tid 41468] [client 20.89.194.239:6112] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless.php"] [unique_id "aUVWUwYXFn-DbZghZBHqswAAAA4"]
[Fri Dec 19 21:42:43.549503 2025] [:error] [pid 18438:tid 18458] [client 20.89.194.239:16319] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless.php"] [unique_id "aUVWU5RArClWV1iij_SnEQAAAZE"]
[Fri Dec 19 21:42:44.041430 2025] [:error] [pid 41451:tid 41462] [client 20.89.194.239:6131] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless.php"] [unique_id "aUVWVAYXFn-DbZghZBHqtQAAAAg"]
[Fri Dec 19 21:42:44.564501 2025] [:error] [pid 20675:tid 20706] [client 20.89.194.239:6061] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aUVWVLMyJ3XqeDRsbQmrowAAARI"]
[Fri Dec 19 21:42:45.581470 2025] [:error] [pid 20580:tid 20590] [client 20.89.194.239:6132] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aUVWVUmd1op_YdAdgR2tawAAAEQ"]
[Fri Dec 19 21:42:45.995894 2025] [:error] [pid 20580:tid 20587] [client 20.89.194.239:16322] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aUVWVUmd1op_YdAdgR2tbAAAAEE"]
[Fri Dec 19 21:42:46.542304 2025] [:error] [pid 20581:tid 20636] [client 20.89.194.239:6100] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aUVWVvxEv7WXNhnFD1mSzgAAAJU"]
[Fri Dec 19 21:42:47.098701 2025] [:error] [pid 20580:tid 20600] [client 20.89.194.239:16358] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "aUVWV0md1op_YdAdgR2tbwAAAE4"]
[Fri Dec 19 21:42:47.814992 2025] [:error] [pid 16026:tid 16049] [client 20.89.194.239:16280] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "aUVWV0LVfhf4Jb3enmNHhQAAAVQ"]
[Fri Dec 19 21:42:48.425226 2025] [:error] [pid 20675:tid 20705] [client 20.89.194.239:16257] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "aUVWWLMyJ3XqeDRsbQmrqAAAARE"]
[Fri Dec 19 21:42:49.047921 2025] [:error] [pid 20581:tid 20639] [client 20.89.194.239:6028] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "aUVWWfxEv7WXNhnFD1mS0gAAAJg"]
[Fri Dec 19 21:42:50.093605 2025] [:error] [pid 16026:tid 16038] [client 20.89.194.239:16271] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/static/as.php"] [unique_id "aUVWWkLVfhf4Jb3enmNHiAAAAUk"]
[Fri Dec 19 21:42:50.768650 2025] [:error] [pid 20675:tid 20704] [client 20.89.194.239:6031] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/static/as.php"] [unique_id "aUVWWrMyJ3XqeDRsbQmrqQAAARA"]
[Fri Dec 19 21:42:51.554643 2025] [:error] [pid 20675:tid 20689] [client 20.89.194.239:16313] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/static/as.php"] [unique_id "aUVWW7MyJ3XqeDRsbQmrqwAAAQE"]
[Fri Dec 19 21:42:52.379779 2025] [:error] [pid 16026:tid 16040] [client 20.89.194.239:6136] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/static/as.php"] [unique_id "aUVWXELVfhf4Jb3enmNHjwAAAUs"]
[Fri Dec 19 21:42:53.321124 2025] [:error] [pid 20675:tid 20710] [client 20.89.194.239:6088] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class.php"] [unique_id "aUVWXbMyJ3XqeDRsbQmrrwAAARY"]
[Fri Dec 19 21:42:53.842927 2025] [:error] [pid 20581:tid 20623] [client 20.89.194.239:16354] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class.php"] [unique_id "aUVWXfxEv7WXNhnFD1mS2QAAAIg"]
[Fri Dec 19 21:42:54.519845 2025] [:error] [pid 20675:tid 20701] [client 20.89.194.239:16273] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class.php"] [unique_id "aUVWXrMyJ3XqeDRsbQmrtAAAAQ0"]
[Fri Dec 19 21:42:54.938980 2025] [:error] [pid 18438:tid 18447] [client 20.89.194.239:16274] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class.php"] [unique_id "aUVWXpRArClWV1iij_SnGQAAAYY"]
[Fri Dec 19 21:42:55.661622 2025] [:error] [pid 20582:tid 20666] [client 20.89.194.239:6030] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "aUVWX8pAnrkQKZ4b5gZISgAAANg"]
[Fri Dec 19 21:42:56.051628 2025] [:error] [pid 20581:tid 20621] [client 20.89.194.239:16300] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "aUVWYPxEv7WXNhnFD1mS3QAAAIY"]
[Fri Dec 19 21:42:56.505781 2025] [:error] [pid 16026:tid 16048] [client 20.89.194.239:6126] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "aUVWYELVfhf4Jb3enmNHkwAAAVM"]
[Fri Dec 19 21:42:57.128523 2025] [:error] [pid 20582:tid 20646] [client 20.89.194.239:6060] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "aUVWYcpAnrkQKZ4b5gZITwAAAMQ"]
[Fri Dec 19 21:42:57.739200 2025] [:error] [pid 16026:tid 16043] [client 20.89.194.239:16368] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVWYULVfhf4Jb3enmNHlgAAAU4"]
[Fri Dec 19 21:42:58.166225 2025] [:error] [pid 16026:tid 16032] [client 20.89.194.239:16381] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVWYkLVfhf4Jb3enmNHlwAAAUM"]
[Fri Dec 19 21:42:58.845071 2025] [:error] [pid 20582:tid 20657] [client 20.89.194.239:16310] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVWYspAnrkQKZ4b5gZIUgAAAM8"]
[Fri Dec 19 21:44:35.260373 2025] [:error] [pid 20582:tid 20657] [client 20.89.194.239:16343] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error.php"] [unique_id "aUVWw8pAnrkQKZ4b5gZI2gAAAM8"]
[Fri Dec 19 21:44:35.886149 2025] [:error] [pid 16026:tid 16039] [client 20.89.194.239:6017] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error.php"] [unique_id "aUVWw0LVfhf4Jb3enmNH_gAAAUo"]
[Fri Dec 19 21:44:36.699026 2025] [:error] [pid 20581:tid 20633] [client 20.89.194.239:16317] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error.php"] [unique_id "aUVWxPxEv7WXNhnFD1mTXAAAAJI"]
[Fri Dec 19 21:44:37.213535 2025] [:error] [pid 20582:tid 20662] [client 20.89.194.239:16314] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error.php"] [unique_id "aUVWxcpAnrkQKZ4b5gZI3AAAANQ"]
[Fri Dec 19 21:44:38.009424 2025] [:error] [pid 20582:tid 20656] [client 20.89.194.239:16316] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv2.php"] [unique_id "aUVWxspAnrkQKZ4b5gZI3gAAAM4"]
[Fri Dec 19 21:44:38.812547 2025] [:error] [pid 20581:tid 20624] [client 20.89.194.239:16265] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv2.php"] [unique_id "aUVWxvxEv7WXNhnFD1mTYAAAAIk"]
[Fri Dec 19 21:44:39.379639 2025] [:error] [pid 41451:tid 41457] [client 20.89.194.239:16315] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv2.php"] [unique_id "aUVWxwYXFn-DbZghZBHrCQAAAAM"]
[Fri Dec 19 21:44:39.774595 2025] [:error] [pid 20581:tid 20637] [client 20.89.194.239:6105] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv2.php"] [unique_id "aUVWx_xEv7WXNhnFD1mTYQAAAJY"]
[Fri Dec 19 21:44:40.267904 2025] [:error] [pid 20675:tid 20705] [client 20.89.194.239:16372] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-is.php"] [unique_id "aUVWyLMyJ3XqeDRsbQmsEQAAARE"]
[Fri Dec 19 21:44:40.669897 2025] [:error] [pid 18438:tid 18459] [client 20.89.194.239:6084] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-is.php"] [unique_id "aUVWyJRArClWV1iij_SnvgAAAZI"]
[Fri Dec 19 21:44:41.302888 2025] [:error] [pid 41451:tid 41478] [client 20.89.194.239:6122] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-is.php"] [unique_id "aUVWyQYXFn-DbZghZBHrCwAAABg"]
[Fri Dec 19 21:44:41.947308 2025] [:error] [pid 20582:tid 20649] [client 20.89.194.239:6027] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-is.php"] [unique_id "aUVWycpAnrkQKZ4b5gZI4QAAAMc"]
[Fri Dec 19 21:44:42.453867 2025] [:error] [pid 18438:tid 18457] [client 20.89.194.239:16299] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "aUVWypRArClWV1iij_SnwgAAAZA"]
[Fri Dec 19 21:44:43.026156 2025] [:error] [pid 20581:tid 20619] [client 20.89.194.239:16281] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "aUVWy_xEv7WXNhnFD1mTZAAAAIQ"]
[Fri Dec 19 21:44:43.715916 2025] [:error] [pid 20582:tid 20645] [client 20.89.194.239:16276] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "aUVWy8pAnrkQKZ4b5gZI4gAAAMM"]
[Fri Dec 19 21:44:44.438595 2025] [:error] [pid 16026:tid 16034] [client 20.89.194.239:6121] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "aUVWzELVfhf4Jb3enmNICAAAAUU"]
[Fri Dec 19 21:44:44.968888 2025] [:error] [pid 41451:tid 41461] [client 20.89.194.239:16318] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/m.php"] [unique_id "aUVWzAYXFn-DbZghZBHrDQAAAAc"]
[Fri Dec 19 21:44:45.719394 2025] [:error] [pid 20582:tid 20664] [client 20.89.194.239:6054] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/m.php"] [unique_id "aUVWzcpAnrkQKZ4b5gZI4wAAANY"]
[Fri Dec 19 21:44:46.296356 2025] [:error] [pid 18438:tid 18444] [client 20.89.194.239:16335] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/m.php"] [unique_id "aUVWzpRArClWV1iij_SnygAAAYM"]
[Fri Dec 19 21:44:46.753879 2025] [:error] [pid 18438:tid 18454] [client 20.89.194.239:16311] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/m.php"] [unique_id "aUVWzpRArClWV1iij_SnywAAAY0"]
[Fri Dec 19 21:44:47.133274 2025] [:error] [pid 20581:tid 20629] [client 20.89.194.239:6023] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell1.php"] [unique_id "aUVWz_xEv7WXNhnFD1mTaAAAAI4"]
[Fri Dec 19 21:44:47.759266 2025] [:error] [pid 20675:tid 20712] [client 20.89.194.239:16382] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell1.php"] [unique_id "aUVWz7MyJ3XqeDRsbQmsFgAAARg"]
[Fri Dec 19 21:44:48.439087 2025] [:error] [pid 18438:tid 18447] [client 20.89.194.239:16275] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell1.php"] [unique_id "aUVW0JRArClWV1iij_SnzQAAAYY"]
[Fri Dec 19 21:44:48.834689 2025] [:error] [pid 20582:tid 20658] [client 20.89.194.239:6073] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell1.php"] [unique_id "aUVW0MpAnrkQKZ4b5gZI5QAAANA"]
[Fri Dec 19 21:44:49.783768 2025] [:error] [pid 41451:tid 41464] [client 20.89.194.239:16284] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gdn.php"] [unique_id "aUVW0QYXFn-DbZghZBHrEAAAAAo"]
[Fri Dec 19 21:44:50.240441 2025] [:error] [pid 20580:tid 20599] [client 20.89.194.239:5954] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gdn.php"] [unique_id "aUVW0kmd1op_YdAdgR2uAQAAAE0"]
[Fri Dec 19 21:44:50.821128 2025] [:error] [pid 41451:tid 41468] [client 20.89.194.239:6050] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gdn.php"] [unique_id "aUVW0gYXFn-DbZghZBHrEQAAAA4"]
[Fri Dec 19 21:44:51.326907 2025] [:error] [pid 20675:tid 20689] [client 20.89.194.239:6115] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gdn.php"] [unique_id "aUVW07MyJ3XqeDRsbQmsGwAAAQE"]
[Fri Dec 19 21:44:51.907250 2025] [:error] [pid 16026:tid 16032] [client 20.89.194.239:16362] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "aUVW00LVfhf4Jb3enmNIDQAAAUM"]
[Fri Dec 19 21:44:52.926416 2025] [:error] [pid 20580:tid 20597] [client 20.89.194.239:5985] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "aUVW1Emd1op_YdAdgR2uCwAAAEs"]
[Fri Dec 19 21:44:53.695744 2025] [:error] [pid 41451:tid 41458] [client 20.89.194.239:6137] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "aUVW1QYXFn-DbZghZBHrFAAAAAQ"]
[Fri Dec 19 21:44:54.261565 2025] [:error] [pid 20582:tid 20659] [client 20.89.194.239:6127] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "aUVW1spAnrkQKZ4b5gZI7QAAANE"]
[Fri Dec 19 21:44:55.337462 2025] [:error] [pid 20582:tid 20648] [client 20.89.194.239:16374] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/doc.php"] [unique_id "aUVW18pAnrkQKZ4b5gZI7gAAAMY"]
[Fri Dec 19 21:44:55.865040 2025] [:error] [pid 18438:tid 18450] [client 20.89.194.239:16334] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/doc.php"] [unique_id "aUVW15RArClWV1iij_Sn2gAAAYk"]
[Fri Dec 19 21:44:56.411827 2025] [:error] [pid 16026:tid 16045] [client 20.89.194.239:16287] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/doc.php"] [unique_id "aUVW2ELVfhf4Jb3enmNIGQAAAVA"]
[Fri Dec 19 21:44:56.966397 2025] [:error] [pid 20675:tid 20698] [client 20.89.194.239:16262] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/doc.php"] [unique_id "aUVW2LMyJ3XqeDRsbQmsHwAAAQo"]
[Fri Dec 19 21:44:57.463223 2025] [:error] [pid 20675:tid 20695] [client 20.89.194.239:16361] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUVW2bMyJ3XqeDRsbQmsIAAAAQc"]
[Fri Dec 19 21:44:57.823662 2025] [:error] [pid 20582:tid 20665] [client 20.89.194.239:16277] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUVW2cpAnrkQKZ4b5gZI8AAAANc"]
[Fri Dec 19 21:44:58.225427 2025] [:error] [pid 20581:tid 20628] [client 20.89.194.239:16289] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUVW2vxEv7WXNhnFD1mTdwAAAI0"]
[Fri Dec 19 21:44:58.799023 2025] [:error] [pid 18438:tid 18446] [client 20.89.194.239:6090] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUVW2pRArClWV1iij_Sn3AAAAYU"]
[Fri Dec 19 21:44:59.540311 2025] [:error] [pid 20582:tid 20658] [client 20.89.194.239:16332] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd67.php"] [unique_id "aUVW28pAnrkQKZ4b5gZI8wAAANA"]
[Fri Dec 19 21:45:00.287478 2025] [:error] [pid 41451:tid 41469] [client 20.89.194.239:5981] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd67.php"] [unique_id "aUVW3AYXFn-DbZghZBHrGQAAAA8"]
[Fri Dec 19 21:45:00.937930 2025] [:error] [pid 41451:tid 41457] [client 20.89.194.239:16321] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd67.php"] [unique_id "aUVW3AYXFn-DbZghZBHrGgAAAAM"]
[Fri Dec 19 21:45:01.404172 2025] [:error] [pid 20675:tid 20702] [client 20.89.194.239:6066] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd67.php"] [unique_id "aUVW3bMyJ3XqeDRsbQmsJAAAAQ4"]
[Fri Dec 19 21:45:01.933667 2025] [:error] [pid 20580:tid 20591] [client 20.89.194.239:16351] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aUVW3Umd1op_YdAdgR2uHQAAAEU"]
[Fri Dec 19 21:45:02.510827 2025] [:error] [pid 20675:tid 20688] [client 20.89.194.239:6026] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aUVW3rMyJ3XqeDRsbQmsJQAAAQA"]
[Fri Dec 19 21:45:03.224152 2025] [:error] [pid 18438:tid 18448] [client 20.89.194.239:16295] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aUVW35RArClWV1iij_Sn3QAAAYc"]
[Fri Dec 19 21:45:03.937512 2025] [:error] [pid 20582:tid 20662] [client 20.89.194.239:6035] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aUVW38pAnrkQKZ4b5gZI-gAAANQ"]
[Fri Dec 19 21:45:04.455474 2025] [:error] [pid 20582:tid 20663] [client 20.89.194.239:16263] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/manager.php"] [unique_id "aUVW4MpAnrkQKZ4b5gZI_AAAANU"]
[Fri Dec 19 21:45:04.996294 2025] [:error] [pid 16026:tid 16050] [client 20.89.194.239:5978] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/manager.php"] [unique_id "aUVW4ELVfhf4Jb3enmNIIwAAAVU"]
[Fri Dec 19 21:45:05.797519 2025] [:error] [pid 20675:tid 20709] [client 20.89.194.239:6024] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/manager.php"] [unique_id "aUVW4bMyJ3XqeDRsbQmsKAAAARU"]
[Fri Dec 19 21:45:06.351493 2025] [:error] [pid 20675:tid 20693] [client 20.89.194.239:16329] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/manager.php"] [unique_id "aUVW4rMyJ3XqeDRsbQmsKgAAAQU"]
[Fri Dec 19 21:45:06.802376 2025] [:error] [pid 20582:tid 20666] [client 20.89.194.239:6103] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/usep.php"] [unique_id "aUVW4spAnrkQKZ4b5gZJAAAAANg"]
[Fri Dec 19 21:45:07.360921 2025] [:error] [pid 20675:tid 20704] [client 20.89.194.239:5937] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/usep.php"] [unique_id "aUVW47MyJ3XqeDRsbQmsKwAAARA"]
[Fri Dec 19 21:45:07.898602 2025] [:error] [pid 20580:tid 20600] [client 20.89.194.239:16363] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/usep.php"] [unique_id "aUVW40md1op_YdAdgR2uIQAAAE4"]
[Fri Dec 19 21:45:08.462276 2025] [:error] [pid 20580:tid 20608] [client 20.89.194.239:6108] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/usep.php"] [unique_id "aUVW5Emd1op_YdAdgR2uIwAAAFY"]
[Fri Dec 19 21:45:09.294025 2025] [:error] [pid 20581:tid 20621] [client 20.89.194.239:5967] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/auth.php"] [unique_id "aUVW5fxEv7WXNhnFD1mTfwAAAIY"]
[Fri Dec 19 21:45:10.009126 2025] [:error] [pid 20675:tid 20690] [client 20.89.194.239:16323] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/auth.php"] [unique_id "aUVW5rMyJ3XqeDRsbQmsMAAAAQI"]
[Fri Dec 19 21:45:10.609835 2025] [:error] [pid 41451:tid 41472] [client 20.89.194.239:6089] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/auth.php"] [unique_id "aUVW5gYXFn-DbZghZBHrKQAAABI"]
[Fri Dec 19 21:45:10.991754 2025] [:error] [pid 18438:tid 18445] [client 20.89.194.239:16258] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/auth.php"] [unique_id "aUVW5pRArClWV1iij_Sn5AAAAYQ"]
[Fri Dec 19 21:45:11.616279 2025] [:error] [pid 20580:tid 20597] [client 20.89.194.239:16364] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUVW50md1op_YdAdgR2uJQAAAEs"]
[Fri Dec 19 21:45:12.318541 2025] [:error] [pid 16026:tid 16042] [client 20.89.194.239:16337] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUVW6ELVfhf4Jb3enmNIJgAAAU0"]
[Fri Dec 19 21:45:12.939402 2025] [:error] [pid 20581:tid 20635] [client 20.89.194.239:6081] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUVW6PxEv7WXNhnFD1mTggAAAJQ"]
[Fri Dec 19 21:45:13.769761 2025] [:error] [pid 41451:tid 41478] [client 20.89.194.239:5964] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUVW6QYXFn-DbZghZBHrLAAAABg"]
[Fri Dec 19 21:45:14.544193 2025] [:error] [pid 18438:tid 18456] [client 20.89.194.239:6069] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "aUVW6pRArClWV1iij_Sn6AAAAY8"]
[Fri Dec 19 21:45:15.002789 2025] [:error] [pid 18438:tid 18448] [client 20.89.194.239:6139] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "aUVW65RArClWV1iij_Sn6gAAAYc"]
[Fri Dec 19 21:45:15.618506 2025] [:error] [pid 16026:tid 16045] [client 20.89.194.239:16261] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "aUVW60LVfhf4Jb3enmNIJwAAAVA"]
[Fri Dec 19 21:45:16.186663 2025] [:error] [pid 41451:tid 41467] [client 20.89.194.239:6093] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "aUVW7AYXFn-DbZghZBHrLwAAAA0"]
[Fri Dec 19 21:45:16.749652 2025] [:error] [pid 20580:tid 20594] [client 20.89.194.239:6044] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abt.php"] [unique_id "aUVW7Emd1op_YdAdgR2uJgAAAEg"]
[Fri Dec 19 21:45:17.127255 2025] [:error] [pid 20580:tid 20589] [client 20.89.194.239:6037] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abt.php"] [unique_id "aUVW7Umd1op_YdAdgR2uKAAAAEM"]
[Fri Dec 19 21:45:17.676144 2025] [:error] [pid 16026:tid 16052] [client 20.89.194.239:16304] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abt.php"] [unique_id "aUVW7ULVfhf4Jb3enmNIKQAAAVc"]
[Fri Dec 19 21:45:18.129596 2025] [:error] [pid 20581:tid 20633] [client 20.89.194.239:6114] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abt.php"] [unique_id "aUVW7vxEv7WXNhnFD1mThwAAAJI"]
[Fri Dec 19 21:45:18.676233 2025] [:error] [pid 20580:tid 20605] [client 20.89.194.239:6099] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aUVW7kmd1op_YdAdgR2uKQAAAFM"]
[Fri Dec 19 21:45:19.046301 2025] [:error] [pid 20580:tid 20607] [client 20.89.194.239:6058] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aUVW70md1op_YdAdgR2uKgAAAFU"]
[Fri Dec 19 21:45:19.558226 2025] [:error] [pid 20580:tid 20606] [client 20.89.194.239:16349] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aUVW70md1op_YdAdgR2uLAAAAFQ"]
[Fri Dec 19 21:45:19.997433 2025] [:error] [pid 18438:tid 18441] [client 20.89.194.239:6101] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aUVW75RArClWV1iij_Sn7QAAAYA"]
[Fri Dec 19 21:45:20.803401 2025] [:error] [pid 18438:tid 18461] [client 20.89.194.239:16370] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/layout.php"] [unique_id "aUVW8JRArClWV1iij_Sn7gAAAZQ"]
[Fri Dec 19 21:45:21.344331 2025] [:error] [pid 18438:tid 18460] [client 20.89.194.239:6138] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/layout.php"] [unique_id "aUVW8ZRArClWV1iij_Sn7wAAAZM"]
[Fri Dec 19 21:45:21.906355 2025] [:error] [pid 16026:tid 16049] [client 20.89.194.239:6113] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/layout.php"] [unique_id "aUVW8ULVfhf4Jb3enmNILgAAAVQ"]
[Fri Dec 19 21:45:22.745089 2025] [:error] [pid 20580:tid 20591] [client 20.89.194.239:6111] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/layout.php"] [unique_id "aUVW8kmd1op_YdAdgR2uLQAAAEU"]
[Fri Dec 19 21:45:23.246003 2025] [:error] [pid 20675:tid 20700] [client 20.89.194.239:6016] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/up.php"] [unique_id "aUVW87MyJ3XqeDRsbQmsPgAAAQw"]
[Fri Dec 19 21:45:23.788983 2025] [:error] [pid 18438:tid 18444] [client 20.89.194.239:6119] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/up.php"] [unique_id "aUVW85RArClWV1iij_Sn8gAAAYM"]
[Fri Dec 19 21:45:24.893751 2025] [:error] [pid 16026:tid 16050] [client 20.89.194.239:6104] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/up.php"] [unique_id "aUVW9ELVfhf4Jb3enmNIMQAAAVU"]
[Fri Dec 19 21:45:26.379722 2025] [:error] [pid 20675:tid 20706] [client 20.89.194.239:16340] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/up.php"] [unique_id "aUVW9rMyJ3XqeDRsbQmsQQAAARI"]
[Fri Dec 19 21:45:27.284225 2025] [:error] [pid 41451:tid 41466] [client 20.89.194.239:16297] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower.php"] [unique_id "aUVW9wYXFn-DbZghZBHrRgAAAAw"]
[Fri Dec 19 21:45:28.053419 2025] [:error] [pid 18438:tid 18462] [client 20.89.194.239:6019] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower.php"] [unique_id "aUVW-JRArClWV1iij_Sn-AAAAZU"]
[Fri Dec 19 21:45:28.606103 2025] [:error] [pid 20675:tid 20710] [client 20.89.194.239:6092] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower.php"] [unique_id "aUVW-LMyJ3XqeDRsbQmsRQAAARY"]
[Fri Dec 19 21:45:29.430678 2025] [:error] [pid 18438:tid 18461] [client 20.89.194.239:6052] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower.php"] [unique_id "aUVW-ZRArClWV1iij_Sn-wAAAZQ"]
[Fri Dec 19 21:45:30.724867 2025] [:error] [pid 20675:tid 20690] [client 20.89.194.239:16260] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nope.php"] [unique_id "aUVW-rMyJ3XqeDRsbQmsSAAAAQI"]
[Fri Dec 19 21:45:31.806766 2025] [:error] [pid 20675:tid 20691] [client 20.89.194.239:16307] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nope.php"] [unique_id "aUVW-7MyJ3XqeDRsbQmsSwAAAQM"]
[Fri Dec 19 21:45:58.321530 2025] [autoindex:error] [pid 16026:tid 16039] [client 20.89.194.239:6091] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 19 21:47:14.388884 2025] [:error] [pid 16026:tid 16053] [client 20.89.194.239:6025] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aUVXYkLVfhf4Jb3enmNIzQAAAVg"]
[Fri Dec 19 21:47:15.434741 2025] [:error] [pid 20675:tid 20707] [client 20.89.194.239:6080] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aUVXY7MyJ3XqeDRsbQmslAAAARM"]
[Fri Dec 19 21:47:15.912468 2025] [:error] [pid 20580:tid 20605] [client 20.89.194.239:16347] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aUVXY0md1op_YdAdgR2usgAAAFM"]
[Fri Dec 19 21:47:16.467259 2025] [:error] [pid 20580:tid 20587] [client 20.89.194.239:16366] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aUVXZEmd1op_YdAdgR2uswAAAEE"]
[Fri Dec 19 21:47:17.105747 2025] [:error] [pid 41451:tid 41466] [client 20.89.194.239:16296] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r4f_1.php"] [unique_id "aUVXZQYXFn-DbZghZBHrtwAAAAw"]
[Fri Dec 19 21:47:17.550686 2025] [:error] [pid 41451:tid 41459] [client 20.89.194.239:16375] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r4f_1.php"] [unique_id "aUVXZQYXFn-DbZghZBHruAAAAAU"]
[Fri Dec 19 21:47:18.586991 2025] [:error] [pid 16026:tid 16031] [client 20.89.194.239:6085] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r4f_1.php"] [unique_id "aUVXZkLVfhf4Jb3enmNI1QAAAUI"]
[Fri Dec 19 21:47:19.129691 2025] [:error] [pid 20580:tid 20594] [client 20.89.194.239:16345] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r4f_1.php"] [unique_id "aUVXZ0md1op_YdAdgR2uugAAAEg"]
[Fri Dec 19 21:47:19.892411 2025] [:error] [pid 20675:tid 20692] [client 20.89.194.239:16371] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ftp.php"] [unique_id "aUVXZ7MyJ3XqeDRsbQmsoQAAAQQ"]
[Fri Dec 19 21:47:20.482008 2025] [:error] [pid 41451:tid 41455] [client 20.89.194.239:6118] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ftp.php"] [unique_id "aUVXaAYXFn-DbZghZBHrwwAAAAE"]
[Fri Dec 19 21:47:20.880100 2025] [:error] [pid 20675:tid 20695] [client 20.89.194.239:6087] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ftp.php"] [unique_id "aUVXaLMyJ3XqeDRsbQmsowAAAQc"]
[Fri Dec 19 21:47:21.451704 2025] [:error] [pid 16026:tid 16051] [client 20.89.194.239:5963] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ftp.php"] [unique_id "aUVXaULVfhf4Jb3enmNI4gAAAVY"]
[Fri Dec 19 21:47:21.935213 2025] [:error] [pid 16026:tid 16039] [client 20.89.194.239:16308] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/content.php"] [unique_id "aUVXaULVfhf4Jb3enmNI5AAAAUo"]
[Fri Dec 19 21:47:22.363901 2025] [:error] [pid 20582:tid 20647] [client 20.89.194.239:16282] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/content.php"] [unique_id "aUVXaspAnrkQKZ4b5gZJkwAAAMU"]
[Fri Dec 19 21:47:23.256261 2025] [:error] [pid 20581:tid 20630] [client 20.89.194.239:6132] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/content.php"] [unique_id "aUVXa_xEv7WXNhnFD1mT_gAAAI8"]
[Fri Dec 19 21:47:24.239511 2025] [:error] [pid 16026:tid 16030] [client 20.89.194.239:6002] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/content.php"] [unique_id "aUVXbELVfhf4Jb3enmNI6QAAAUE"]
[Fri Dec 19 21:47:25.229382 2025] [:error] [pid 20581:tid 20624] [client 20.89.194.239:16320] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ext.php"] [unique_id "aUVXbfxEv7WXNhnFD1mT_wAAAIk"]
[Fri Dec 19 21:47:26.350304 2025] [:error] [pid 41451:tid 41470] [client 20.89.194.239:16360] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ext.php"] [unique_id "aUVXbgYXFn-DbZghZBHr0wAAABA"]
[Fri Dec 19 21:47:27.149378 2025] [:error] [pid 18438:tid 18462] [client 20.89.194.239:6041] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ext.php"] [unique_id "aUVXb5RArClWV1iij_SomgAAAZU"]
[Fri Dec 19 21:47:27.998537 2025] [:error] [pid 16026:tid 16039] [client 20.89.194.239:5993] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ext.php"] [unique_id "aUVXb0LVfhf4Jb3enmNI8AAAAUo"]
[Fri Dec 19 21:47:28.546881 2025] [:error] [pid 20580:tid 20604] [client 20.89.194.239:16283] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/himu.php"] [unique_id "aUVXcEmd1op_YdAdgR2uvQAAAFI"]
[Fri Dec 19 21:47:29.114758 2025] [:error] [pid 20581:tid 20619] [client 20.89.194.239:16333] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/himu.php"] [unique_id "aUVXcfxEv7WXNhnFD1mUAQAAAIQ"]
[Fri Dec 19 21:47:29.638309 2025] [:error] [pid 20580:tid 20603] [client 20.89.194.239:16383] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/himu.php"] [unique_id "aUVXcUmd1op_YdAdgR2uvwAAAFE"]
[Fri Dec 19 21:47:30.646991 2025] [:error] [pid 20582:tid 20647] [client 20.89.194.239:6095] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/himu.php"] [unique_id "aUVXcspAnrkQKZ4b5gZJowAAAMU"]
[Fri Dec 19 21:47:31.216851 2025] [:error] [pid 18438:tid 18446] [client 20.89.194.239:16270] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aUVXc5RArClWV1iij_SooAAAAYU"]
[Fri Dec 19 21:47:31.652197 2025] [:error] [pid 20580:tid 20596] [client 20.89.194.239:16266] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aUVXc0md1op_YdAdgR2uwgAAAEo"]
[Fri Dec 19 21:47:32.157492 2025] [:error] [pid 20582:tid 20660] [client 20.89.194.239:6120] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aUVXdMpAnrkQKZ4b5gZJqAAAANI"]
[Fri Dec 19 21:47:32.775493 2025] [:error] [pid 18438:tid 18445] [client 20.89.194.239:16379] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aUVXdJRArClWV1iij_SoowAAAYQ"]
[Fri Dec 19 21:47:33.562136 2025] [:error] [pid 18438:tid 18447] [client 20.89.194.239:6091] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "aUVXdZRArClWV1iij_SopwAAAYY"]
[Fri Dec 19 21:47:34.581800 2025] [:error] [pid 18438:tid 18461] [client 20.89.194.239:16290] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "aUVXdpRArClWV1iij_SoqQAAAZQ"]
[Fri Dec 19 21:47:35.685378 2025] [:error] [pid 18438:tid 18453] [client 20.89.194.239:16324] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "aUVXd5RArClWV1iij_SoqwAAAYw"]
[Fri Dec 19 21:47:36.204705 2025] [:error] [pid 20580:tid 20598] [client 20.89.194.239:16353] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "aUVXeEmd1op_YdAdgR2uxwAAAEw"]
[Fri Dec 19 21:47:37.013745 2025] [:error] [pid 20675:tid 20708] [client 20.89.194.239:16259] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/miansha.php"] [unique_id "aUVXebMyJ3XqeDRsbQmsrAAAARQ"]
[Fri Dec 19 21:47:37.964561 2025] [:error] [pid 20581:tid 20638] [client 20.89.194.239:16350] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/miansha.php"] [unique_id "aUVXefxEv7WXNhnFD1mUAwAAAJc"]
[Fri Dec 19 21:47:38.908123 2025] [:error] [pid 20582:tid 20644] [client 20.89.194.239:16319] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/miansha.php"] [unique_id "aUVXespAnrkQKZ4b5gZJtgAAAMI"]
[Fri Dec 19 21:47:39.477454 2025] [:error] [pid 20582:tid 20659] [client 20.89.194.239:16380] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/miansha.php"] [unique_id "aUVXe8pAnrkQKZ4b5gZJuQAAANE"]
[Fri Dec 19 21:47:40.646589 2025] [:error] [pid 41451:tid 41476] [client 20.89.194.239:16373] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/test2.php"] [unique_id "aUVXfAYXFn-DbZghZBHr4AAAABY"]
[Fri Dec 19 21:47:41.345812 2025] [:error] [pid 20582:tid 20645] [client 20.89.194.239:16291] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/test2.php"] [unique_id "aUVXfcpAnrkQKZ4b5gZJuwAAAMM"]
[Fri Dec 19 21:47:42.245330 2025] [:error] [pid 18438:tid 18443] [client 20.89.194.239:16381] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/test2.php"] [unique_id "aUVXfpRArClWV1iij_SorwAAAYI"]
[Fri Dec 19 21:47:43.060112 2025] [:error] [pid 20581:tid 20629] [client 20.89.194.239:16271] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/test2.php"] [unique_id "aUVXf_xEv7WXNhnFD1mUDAAAAI4"]
[Fri Dec 19 21:47:43.511532 2025] [:error] [pid 18438:tid 18462] [client 20.89.194.239:16338] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUVXf5RArClWV1iij_SosgAAAZU"]
[Fri Dec 19 21:47:44.173410 2025] [:error] [pid 18438:tid 18457] [client 20.89.194.239:16354] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUVXgJRArClWV1iij_SoswAAAZA"]
[Fri Dec 19 21:47:44.822100 2025] [:error] [pid 20675:tid 20700] [client 20.89.194.239:5897] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUVXgLMyJ3XqeDRsbQmstgAAAQw"]
[Fri Dec 19 21:47:45.248663 2025] [:error] [pid 18438:tid 18455] [client 20.89.194.239:16256] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUVXgZRArClWV1iij_SotgAAAY4"]
[Fri Dec 19 21:47:45.688516 2025] [:error] [pid 41451:tid 41466] [client 20.89.194.239:16294] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUVXgQYXFn-DbZghZBHr5AAAAAw"]
[Fri Dec 19 21:47:46.482472 2025] [:error] [pid 41451:tid 41465] [client 20.89.194.239:16328] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUVXggYXFn-DbZghZBHr5wAAAAs"]
[Fri Dec 19 21:47:47.149363 2025] [:error] [pid 18438:tid 18450] [client 20.89.194.239:16322] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUVXg5RArClWV1iij_SougAAAYk"]
[Fri Dec 19 21:47:47.608481 2025] [:error] [pid 16026:tid 16029] [client 20.89.194.239:16369] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUVXg0LVfhf4Jb3enmNJBAAAAUA"]
[Fri Dec 19 21:47:48.030700 2025] [:error] [pid 20582:tid 20646] [client 20.89.194.239:16359] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mah.php"] [unique_id "aUVXhMpAnrkQKZ4b5gZJvQAAAMQ"]
[Fri Dec 19 21:47:48.431117 2025] [:error] [pid 16026:tid 16048] [client 20.89.194.239:16286] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mah.php"] [unique_id "aUVXhELVfhf4Jb3enmNJBgAAAVM"]
[Fri Dec 19 21:47:49.493055 2025] [:error] [pid 16026:tid 16038] [client 20.89.194.239:6032] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mah.php"] [unique_id "aUVXhULVfhf4Jb3enmNJCAAAAUk"]
[Fri Dec 19 21:47:50.164121 2025] [:error] [pid 20580:tid 20604] [client 20.89.194.239:16344] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mah.php"] [unique_id "aUVXhkmd1op_YdAdgR2uzgAAAFI"]
[Fri Dec 19 21:47:50.826784 2025] [:error] [pid 20580:tid 20586] [client 20.89.194.239:16274] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asas.php"] [unique_id "aUVXhkmd1op_YdAdgR2uzwAAAEA"]
[Fri Dec 19 21:47:51.288372 2025] [:error] [pid 16026:tid 16051] [client 20.89.194.239:6141] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asas.php"] [unique_id "aUVXh0LVfhf4Jb3enmNJCQAAAVY"]
[Fri Dec 19 21:47:51.777866 2025] [:error] [pid 20580:tid 20595] [client 20.89.194.239:16272] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asas.php"] [unique_id "aUVXh0md1op_YdAdgR2u0QAAAEk"]
[Fri Dec 19 21:47:52.529641 2025] [:error] [pid 20675:tid 20706] [client 20.89.194.239:6130] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asas.php"] [unique_id "aUVXiLMyJ3XqeDRsbQmswAAAARI"]
[Fri Dec 19 21:47:53.202933 2025] [:error] [pid 41451:tid 41470] [client 20.89.194.239:6020] [client 20.89.194.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUVXiQYXFn-DbZghZBHr8QAAABA"]
[Fri Dec 19 21:47:53.994997 2025] [:error] [pid 20582:tid 20663] [client 20.89.194.239:6126] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mans.php"] [unique_id "aUVXicpAnrkQKZ4b5gZJwQAAANU"]
[Fri Dec 19 21:47:54.609403 2025] [:error] [pid 20582:tid 20652] [client 20.89.194.239:6034] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mans.php"] [unique_id "aUVXispAnrkQKZ4b5gZJwgAAAMo"]
[Fri Dec 19 21:47:55.405805 2025] [:error] [pid 20675:tid 20696] [client 20.89.194.239:6117] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mans.php"] [unique_id "aUVXi7MyJ3XqeDRsbQmsxQAAAQg"]
[Fri Dec 19 21:47:55.904173 2025] [:error] [pid 20675:tid 20708] [client 20.89.194.239:6031] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/build.php"] [unique_id "aUVXi7MyJ3XqeDRsbQmsyQAAARQ"]
[Fri Dec 19 21:47:56.542119 2025] [:error] [pid 18438:tid 18458] [client 20.89.194.239:6123] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/build.php"] [unique_id "aUVXjJRArClWV1iij_SoxgAAAZE"]
[Fri Dec 19 21:47:57.631980 2025] [:error] [pid 20582:tid 20653] [client 20.89.194.239:16377] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/build.php"] [unique_id "aUVXjcpAnrkQKZ4b5gZJxQAAAMs"]
[Fri Dec 19 21:47:58.511322 2025] [:error] [pid 16026:tid 16050] [client 20.89.194.239:6022] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/build.php"] [unique_id "aUVXjkLVfhf4Jb3enmNJDgAAAVU"]
[Fri Dec 19 21:47:59.304825 2025] [:error] [pid 20581:tid 20627] [client 20.89.194.239:5956] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/atomlib.php"] [unique_id "aUVXj_xEv7WXNhnFD1mUIQAAAIw"]
[Fri Dec 19 21:47:59.823826 2025] [:error] [pid 16026:tid 16053] [client 20.89.194.239:16367] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/atomlib.php"] [unique_id "aUVXj0LVfhf4Jb3enmNJEQAAAVg"]
[Fri Dec 19 21:48:00.447469 2025] [:error] [pid 20675:tid 20695] [client 20.89.194.239:6086] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/atomlib.php"] [unique_id "aUVXkLMyJ3XqeDRsbQmszQAAAQc"]
[Fri Dec 19 21:48:01.265824 2025] [:error] [pid 18438:tid 18445] [client 20.89.194.239:16268] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/atomlib.php"] [unique_id "aUVXkZRArClWV1iij_SozAAAAYQ"]
[Fri Dec 19 21:48:01.770642 2025] [:error] [pid 18438:tid 18464] [client 20.89.194.239:16346] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "aUVXkZRArClWV1iij_SozgAAAZc"]
[Fri Dec 19 21:48:02.360000 2025] [:error] [pid 18438:tid 18460] [client 20.89.194.239:16325] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "aUVXkpRArClWV1iij_SozwAAAZM"]
[Fri Dec 19 21:48:03.584467 2025] [:error] [pid 16026:tid 16042] [client 20.89.194.239:16341] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "aUVXk0LVfhf4Jb3enmNJFAAAAU0"]
[Fri Dec 19 21:48:04.368623 2025] [:error] [pid 41451:tid 41461] [client 20.89.194.239:6110] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "aUVXlAYXFn-DbZghZBHr-QAAAAc"]
[Fri Dec 19 21:48:04.969945 2025] [:error] [pid 20675:tid 20689] [client 20.89.194.239:5971] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "aUVXlLMyJ3XqeDRsbQms0AAAAQE"]
[Fri Dec 19 21:48:05.798996 2025] [:error] [pid 20582:tid 20652] [client 20.89.194.239:6097] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "aUVXlcpAnrkQKZ4b5gZJywAAAMo"]
[Fri Dec 19 21:48:06.347220 2025] [:error] [pid 18438:tid 18444] [client 20.89.194.239:16278] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "aUVXlpRArClWV1iij_So3gAAAYM"]
[Fri Dec 19 21:48:06.692193 2025] [:error] [pid 20580:tid 20594] [client 20.89.194.239:5997] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "aUVXlkmd1op_YdAdgR2u3AAAAEg"]
[Fri Dec 19 21:48:07.461417 2025] [:error] [pid 20580:tid 20610] [client 20.89.194.239:6125] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-wp.php"] [unique_id "aUVXl0md1op_YdAdgR2u3wAAAFg"]
[Fri Dec 19 21:48:08.037623 2025] [:error] [pid 20582:tid 20651] [client 20.89.194.239:6076] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-wp.php"] [unique_id "aUVXmMpAnrkQKZ4b5gZJzQAAAMk"]
[Fri Dec 19 21:48:08.697513 2025] [:error] [pid 16026:tid 16033] [client 20.89.194.239:6048] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-wp.php"] [unique_id "aUVXmELVfhf4Jb3enmNJGQAAAUQ"]
[Fri Dec 19 21:48:09.494357 2025] [:error] [pid 18438:tid 18459] [client 20.89.194.239:6116] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-wp.php"] [unique_id "aUVXmZRArClWV1iij_So4QAAAZI"]
[Fri Dec 19 21:48:09.964713 2025] [:error] [pid 20581:tid 20631] [client 20.89.194.239:6082] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about.php"] [unique_id "aUVXmfxEv7WXNhnFD1mUJwAAAJA"]
[Fri Dec 19 21:48:10.541209 2025] [:error] [pid 20581:tid 20628] [client 20.89.194.239:16279] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about.php"] [unique_id "aUVXmvxEv7WXNhnFD1mUKAAAAI0"]
[Fri Dec 19 21:48:10.948000 2025] [:error] [pid 20582:tid 20665] [client 20.89.194.239:6106] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about.php"] [unique_id "aUVXmspAnrkQKZ4b5gZJ1AAAANc"]
[Fri Dec 19 21:48:20.182096 2025] [:error] [pid 16026:tid 16051] [client 20.89.194.239:16310] [client 20.89.194.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.makifim.com.au"] [uri "/filemanager.php"] [unique_id "aUVXpELVfhf4Jb3enmNJJAAAAVY"]
[Fri Dec 19 21:49:19.955223 2025] [:error] [pid 20581:tid 20628] [client 20.89.194.239:16356] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aUVX3_xEv7WXNhnFD1mUiwAAAI0"]
[Fri Dec 19 21:49:20.282285 2025] [:error] [pid 41451:tid 41458] [client 20.89.194.239:16288] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aUVX4AYXFn-DbZghZBHsOAAAAAQ"]
[Fri Dec 19 21:49:20.672896 2025] [:error] [pid 18438:tid 18463] [client 20.89.194.239:16301] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aUVX4JRArClWV1iij_SpXAAAAZY"]
[Fri Dec 19 21:49:21.159885 2025] [:error] [pid 20675:tid 20689] [client 20.89.194.239:16281] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aUVX4bMyJ3XqeDRsbQmtHAAAAQE"]
[Fri Dec 19 21:49:21.687209 2025] [:error] [pid 18438:tid 18461] [client 20.89.194.239:5968] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z.php"] [unique_id "aUVX4ZRArClWV1iij_SpYAAAAZQ"]
[Fri Dec 19 21:49:22.252685 2025] [:error] [pid 18438:tid 18451] [client 20.89.194.239:16299] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z.php"] [unique_id "aUVX4pRArClWV1iij_SpYwAAAYo"]
[Fri Dec 19 21:49:22.696220 2025] [:error] [pid 20675:tid 20707] [client 20.89.194.239:6070] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z.php"] [unique_id "aUVX4rMyJ3XqeDRsbQmtHgAAARM"]
[Fri Dec 19 21:49:23.122314 2025] [:error] [pid 20581:tid 20616] [client 20.89.194.239:16316] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z.php"] [unique_id "aUVX4_xEv7WXNhnFD1mUjQAAAIE"]
[Fri Dec 19 21:49:23.603375 2025] [:error] [pid 20581:tid 20622] [client 20.89.194.239:6075] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/akcc.php"] [unique_id "aUVX4_xEv7WXNhnFD1mUjgAAAIc"]
[Fri Dec 19 21:49:24.150986 2025] [:error] [pid 20581:tid 20629] [client 20.89.194.239:16358] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/akcc.php"] [unique_id "aUVX5PxEv7WXNhnFD1mUjwAAAI4"]
[Fri Dec 19 21:49:24.743714 2025] [:error] [pid 20580:tid 20608] [client 20.89.194.239:6129] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/akcc.php"] [unique_id "aUVX5Emd1op_YdAdgR2vGgAAAFY"]
[Fri Dec 19 21:49:25.081982 2025] [:error] [pid 20581:tid 20638] [client 20.89.194.239:6047] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/akcc.php"] [unique_id "aUVX5fxEv7WXNhnFD1mUkQAAAJc"]
[Fri Dec 19 21:49:25.431632 2025] [:error] [pid 20582:tid 20644] [client 20.89.194.239:16312] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxz.php"] [unique_id "aUVX5cpAnrkQKZ4b5gZKQQAAAMI"]
[Fri Dec 19 21:49:26.029797 2025] [:error] [pid 41451:tid 41460] [client 20.89.194.239:5989] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxz.php"] [unique_id "aUVX5gYXFn-DbZghZBHsPQAAAAY"]
[Fri Dec 19 21:49:26.569338 2025] [:error] [pid 20581:tid 20632] [client 20.89.194.239:6107] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxz.php"] [unique_id "aUVX5vxEv7WXNhnFD1mUkgAAAJE"]
[Fri Dec 19 21:49:27.158949 2025] [:error] [pid 20580:tid 20589] [client 20.89.194.239:16313] [client 20.89.194.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxz.php"] [unique_id "aUVX50md1op_YdAdgR2vIgAAAEM"]
[Sat Dec 20 00:36:10.884227 2025] [:error] [pid 35625:tid 35655] [client 104.28.214.116:63880] [client 104.28.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aUV--o12VmSu4NX34PTNswAAAIA"]
[Sat Dec 20 00:36:14.387426 2025] [:error] [pid 35711:tid 35720] [client 104.28.214.116:65436] [client 104.28.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/style.php"] [unique_id "aUV-_ixTWUmlILwAM_ehIAAAAAc"]
[Sat Dec 20 04:41:22.649210 2025] [proxy_fcgi:error] [pid 39493:tid 39563] [client 103.4.122.14:47684] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Dec 20 07:39:32.253995 2025] [autoindex:error] [pid 39493:tid 39549] [client 45.86.202.86:26907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:32.548869 2025] [autoindex:error] [pid 39493:tid 39562] [client 45.86.202.86:26907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:32.856997 2025] [autoindex:error] [pid 39493:tid 39551] [client 45.86.202.86:26907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:33.141998 2025] [autoindex:error] [pid 39493:tid 39571] [client 45.86.202.86:26907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:40:22.338614 2025] [proxy_fcgi:error] [pid 39492:tid 39524] (70007)The timeout specified has expired: [client 45.86.202.88:34165] AH01075: Error dispatching request to : (polling)
[Sat Dec 20 12:23:11.150743 2025] [autoindex:error] [pid 39492:tid 39542] [client 62.84.176.10:61611] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 20 19:16:24.571123 2025] [autoindex:error] [pid 14286:tid 14300] [client 62.171.144.198:62393] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 20 21:52:41.548204 2025] [autoindex:error] [pid 14247:tid 14251] [client 85.203.34.8:32223] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:52:41.906247 2025] [autoindex:error] [pid 14247:tid 14252] [client 85.203.34.8:32223] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:52:42.236586 2025] [autoindex:error] [pid 14247:tid 14262] [client 85.203.34.8:32223] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:13:58.052198 2025] [:error] [pid 8751:tid 8770] [client 45.88.186.197:58545] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUbZVmvrnuGjNP7vtDQXigAAABE"]
[Sun Dec 21 01:13:58.459130 2025] [:error] [pid 22338:tid 22385] [client 45.88.186.197:58724] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUbZVnGYQSUt-opKpSIMuQAAAEE"]
[Sun Dec 21 01:13:58.874756 2025] [:error] [pid 22338:tid 22385] [client 45.88.186.197:58886] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUbZVnGYQSUt-opKpSIM2QAAAEE"]
[Sun Dec 21 01:13:59.285100 2025] [:error] [pid 8751:tid 8757] [client 45.88.186.197:59042] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUbZV2vrnuGjNP7vtDQYDQAAAAQ"]
[Sun Dec 21 01:13:59.689641 2025] [:error] [pid 8641:tid 8696] [client 45.88.186.197:59172] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUbZV3E703usYSvQGLRYLwAAANE"]
[Sun Dec 21 01:14:49.516489 2025] [autoindex:error] [pid 22338:tid 22406] [client 185.249.225.220:56604] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 21 02:42:58.997422 2025] [autoindex:error] [pid 22338:tid 22402] [client 31.171.130.151:53633] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:59.335253 2025] [autoindex:error] [pid 22338:tid 22403] [client 31.171.130.151:53633] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:43:00.289402 2025] [autoindex:error] [pid 22338:tid 22395] [client 31.171.130.151:53633] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:43:00.609265 2025] [autoindex:error] [pid 22338:tid 22393] [client 31.171.130.151:53633] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 06:20:31.580468 2025] [:error] [pid 20676:tid 20735] [client 163.5.210.154:45590] [client 163.5.210.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.210.154, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/makifim.com.au/xmlrpc.php"] [unique_id "aUchL6pSa967F4pOO5zNwwAAAII"]
[Sun Dec 21 06:20:36.003601 2025] [:error] [pid 20674:tid 20684] [client 163.5.210.154:37656] [client 163.5.210.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.210.154, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/makifim.com.au/xmlrpc.php"] [unique_id "aUchNNhSbhHOCK6TAw8gVQAAAAY"]
[Sun Dec 21 06:20:42.605497 2025] [:error] [pid 20676:tid 20738] [client 163.5.210.154:34420] [client 163.5.210.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.210.154, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/makifim.com.au/xmlrpc.php"] [unique_id "aUchOqpSa967F4pOO5zN1AAAAIU"]
[Sun Dec 21 06:20:47.112516 2025] [:error] [pid 16016:tid 16022] [client 163.5.210.154:43898] [client 163.5.210.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.210.154, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/makifim.com.au/xmlrpc.php"] [unique_id "aUchP8HQ_KQh3iINaCOYPgAAAUQ"]
[Sun Dec 21 12:56:50.528356 2025] [:error] [pid 20675:tid 20714] [client 34.138.101.78:64960] [client 34.138.101.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.101.78, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUd-EryUvZnd3bHSR3ZgSgAAAEg"]
[Sun Dec 21 12:56:55.852210 2025] [:error] [pid 20675:tid 20729] [client 34.138.101.78:64960] [client 34.138.101.78] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUd-F7yUvZnd3bHSR3ZgTwAAAFc"]
[Sun Dec 21 12:56:58.096401 2025] [:error] [pid 20675:tid 20711] [client 34.138.101.78:64960] [client 34.138.101.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.101.78, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUd-GryUvZnd3bHSR3ZgUQAAAEU"]
[Sun Dec 21 23:15:28.147386 2025] [:error] [pid 59158:tid 59167] [client 157.245.3.60:37906] [client 157.245.3.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aUgPEI7NvyNF8ab5VgV4zAAAAMc"]
[Mon Dec 22 04:58:46.227242 2025] [:error] [pid 33472:tid 33524] [client 165.227.108.154:56040] [client 165.227.108.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aUhfhp5p2WQpPIK8HAkTfQAAAZc"]
[Mon Dec 22 07:37:29.262534 2025] [:error] [pid 33564:tid 33591] [client 52.13.171.147:50462] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUiEuQSHeG6oLmMnKY7F_AAAAhg"]
[Mon Dec 22 07:37:29.650858 2025] [:error] [pid 33440:tid 33464] [client 52.13.171.147:50822] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUiEuZOsUWKqgxu6QTR3hQAAARY"]
[Mon Dec 22 07:37:30.041092 2025] [:error] [pid 33643:tid 33657] [client 52.13.171.147:65247] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEukoNwyN4xVhAvNONBQAAAos"]
[Mon Dec 22 10:20:19.224027 2025] [:error] [pid 33565:tid 33611] [client 2.58.56.27:55480] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUiq49OWX69q8T0m_yKfhAAAAlE"]
[Mon Dec 22 10:20:19.245953 2025] [:error] [pid 33535:tid 33542] [client 2.58.56.27:55478] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq42OCI8D9Xtn-n7QcuwAAAcU"], referer: www.google.com
[Mon Dec 22 10:20:19.248767 2025] [:error] [pid 33440:tid 33450] [client 2.58.56.27:54082] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq45OsUWKqgxu6QTSV8gAAAQg"], referer: www.google.com
[Mon Dec 22 10:20:19.250810 2025] [:error] [pid 33471:tid 33476] [client 2.58.56.27:54083] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq475BeNE7regJ7izGGQAAAUI"], referer: www.google.com
[Mon Dec 22 10:20:19.391441 2025] [:error] [pid 33472:tid 33505] [client 2.58.56.27:54088] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq455p2WQpPIK8HAlSZQAAAYQ"]
[Mon Dec 22 10:20:20.507293 2025] [:error] [pid 58079:tid 58134] [client 2.58.56.27:53656] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUiq5HxLB7WYaNS5A7j4UgAAAFU"]
[Mon Dec 22 10:20:20.533665 2025] [:error] [pid 33472:tid 33519] [client 2.58.56.27:53064] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5J5p2WQpPIK8HAlSjQAAAZI"], referer: www.google.com
[Mon Dec 22 10:20:20.548062 2025] [:error] [pid 58079:tid 58131] [client 2.58.56.27:53026] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5HxLB7WYaNS5A7j4VAAAAFI"], referer: www.google.com
[Mon Dec 22 10:20:20.555244 2025] [:error] [pid 33472:tid 33501] [client 2.58.56.27:53576] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq5J5p2WQpPIK8HAlSjgAAAYA"], referer: www.google.com
[Mon Dec 22 10:20:20.746166 2025] [:error] [pid 33471:tid 33478] [client 2.58.56.27:56319] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5L5BeNE7regJ7izGSwAAAUQ"]
[Mon Dec 22 10:20:21.398887 2025] [:error] [pid 33471:tid 33490] [client 2.58.56.27:57203] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUiq5b5BeNE7regJ7izGYwAAAVA"]
[Mon Dec 22 10:20:21.449983 2025] [:error] [pid 33471:tid 33490] [client 2.58.56.27:54536] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5b5BeNE7regJ7izGZQAAAVA"], referer: www.google.com
[Mon Dec 22 10:20:21.454187 2025] [:error] [pid 58079:tid 58131] [client 2.58.56.27:56443] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq5XxLB7WYaNS5A7j4dgAAAFI"], referer: www.google.com
[Mon Dec 22 10:20:21.460010 2025] [:error] [pid 56080:tid 56129] [client 2.58.56.27:51482] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5ZIHT3YJq9hjDc5erwAAAwU"], referer: www.google.com
[Mon Dec 22 10:20:21.497541 2025] [:error] [pid 58079:tid 58123] [client 2.58.56.27:54352] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5XxLB7WYaNS5A7j4eQAAAEo"]
[Mon Dec 22 10:20:22.045277 2025] [:error] [pid 33535:tid 33559] [client 2.58.56.27:65331] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUiq5mOCI8D9Xtn-n7QdFwAAAdY"]
[Mon Dec 22 10:20:22.323338 2025] [:error] [pid 33472:tid 33501] [client 2.58.56.27:56252] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5p5p2WQpPIK8HAlSxgAAAYA"]
[Mon Dec 22 10:20:22.323418 2025] [:error] [pid 33564:tid 33581] [client 2.58.56.27:53739] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq5gSHeG6oLmMnKY4HRAAAAg4"], referer: www.google.com
[Mon Dec 22 10:20:22.641650 2025] [:error] [pid 56155:tid 56234] [client 2.58.56.27:58375] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5mG8a3wQucsuN656tgAAA4w"], referer: www.google.com
[Mon Dec 22 10:20:22.764980 2025] [:error] [pid 56156:tid 56197] [client 2.58.56.27:58819] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5lt4V0DS5rs9y54etAAAA8E"], referer: www.google.com
[Mon Dec 22 10:20:22.897626 2025] [:error] [pid 56155:tid 56223] [client 2.58.56.27:63503] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aUiq5mG8a3wQucsuN6560QAAA4E"]
[Mon Dec 22 10:20:22.997677 2025] [:error] [pid 56080:tid 56135] [client 2.58.56.27:54398] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5pIHT3YJq9hjDc5e1QAAAws"]
[Mon Dec 22 10:20:23.006896 2025] [:error] [pid 56044:tid 56054] [client 2.58.56.27:58479] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq5-60uUaieriJqP3uHQAAAIY"], referer: www.google.com
[Mon Dec 22 10:20:23.349879 2025] [:error] [pid 56080:tid 56142] [client 2.58.56.27:54733] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq55IHT3YJq9hjDc5e2QAAAxI"], referer: www.google.com
[Mon Dec 22 10:20:23.505894 2025] [:error] [pid 58078:tid 58085] [client 2.58.56.27:55456] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq55WKg9Bf8njHlB6mtQAAAAI"], referer: www.google.com
[Mon Dec 22 10:20:24.686714 2025] [:error] [pid 58078:tid 58096] [client 2.58.56.27:59563] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6JWKg9Bf8njHlB6muQAAAA0"], referer: www.google.com
[Mon Dec 22 10:20:24.779716 2025] [:error] [pid 58172:tid 58174] [client 2.58.56.27:64505] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6OSVKDT5jWOcnSUmRAAAAMA"], referer: www.google.com
[Mon Dec 22 10:20:25.804741 2025] [:error] [pid 58079:tid 58122] [client 2.58.56.27:56799] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6XxLB7WYaNS5A7j4tAAAAEk"], referer: www.google.com
[Mon Dec 22 10:20:26.029500 2025] [:error] [pid 33440:tid 33447] [client 2.58.56.27:57364] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6pOsUWKqgxu6QTSWjQAAAQU"], referer: www.google.com
[Mon Dec 22 10:20:26.946516 2025] [:error] [pid 56044:tid 56057] [client 2.58.56.27:57419] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6u60uUaieriJqP3uPAAAAIk"], referer: www.google.com
[Mon Dec 22 10:20:27.161791 2025] [:error] [pid 33564:tid 33575] [client 2.58.56.27:61222] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6wSHeG6oLmMnKY4HbAAAAgg"], referer: www.google.com
[Mon Dec 22 10:20:28.097995 2025] [:error] [pid 58078:tid 58102] [client 2.58.56.27:61778] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq7JWKg9Bf8njHlB6m4QAAABM"], referer: www.google.com
[Mon Dec 22 10:20:28.288502 2025] [:error] [pid 58078:tid 58092] [client 2.58.56.27:49650] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq7JWKg9Bf8njHlB6m4wAAAAk"], referer: www.google.com
[Mon Dec 22 10:20:29.229898 2025] [:error] [pid 56044:tid 56050] [client 2.58.56.27:62220] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq7e60uUaieriJqP3uQgAAAII"], referer: www.google.com
[Mon Dec 22 10:20:29.401719 2025] [:error] [pid 58079:tid 58116] [client 2.58.56.27:64198] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq7XxLB7WYaNS5A7j4zgAAAEM"], referer: www.google.com
[Tue Dec 23 01:07:30.984133 2025] [proxy_fcgi:error] [pid 40269:tid 40353] [client 103.4.122.14:35042] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Dec 23 18:05:04.100330 2025] [:error] [pid 3405:tid 3446] [client 129.212.224.206:57196] [client 129.212.224.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.212.224.206, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUppULdHHpIDpQ39rwkOdwAAAAk"]
[Tue Dec 23 18:05:06.794568 2025] [:error] [pid 3405:tid 3445] [client 129.212.224.206:57196] [client 129.212.224.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.212.224.206, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aUppUrdHHpIDpQ39rwkOfAAAAAg"]
[Tue Dec 23 20:44:58.392133 2025] [:error] [pid 3406:tid 3481] [client 4.189.174.134:34825] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUqOyvn8DLWxW7TPzpHnywAAAFE"]
[Tue Dec 23 20:45:17.580621 2025] [:error] [pid 11812:tid 11816] [client 4.189.174.134:38623] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aUqO3bBkIQ4nTXm4A3Ud7AAAAII"]
[Tue Dec 23 20:45:21.799724 2025] [:error] [pid 25976:tid 26000] [client 4.189.174.134:35677] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aUqO4bF6LaWzQScE-xOAbQAAARY"]
[Tue Dec 23 20:45:35.051162 2025] [:error] [pid 25976:tid 25985] [client 4.189.174.134:35651] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aUqO77F6LaWzQScE-xOAcAAAAQc"]
[Tue Dec 23 20:45:36.473220 2025] [:error] [pid 54408:tid 54415] [client 4.189.174.134:36312] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aUqO8Gup4YbWx_MWvp1YtQAAAoQ"]
[Tue Dec 23 20:45:37.507362 2025] [:error] [pid 3404:tid 3410] [client 4.189.174.134:45677] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aUqO8cJGbPWZNlrhVJdXHQAAAcE"]
[Tue Dec 23 20:46:35.237243 2025] [:error] [pid 3404:tid 3411] [client 4.189.174.134:36603] [client 4.189.174.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aUqPK8JGbPWZNlrhVJdXUAAAAcI"]
[Tue Dec 23 20:47:36.765916 2025] [:error] [pid 3404:tid 3427] [client 4.189.174.134:36872] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aUqPaMJGbPWZNlrhVJdXdAAAAdI"]
[Tue Dec 23 20:47:38.339052 2025] [:error] [pid 54340:tid 54347] [client 4.189.174.134:36921] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aUqPapye8-oij4iGhogp4wAAAgU"]
[Tue Dec 23 20:47:41.389975 2025] [:error] [pid 3405:tid 3461] [client 4.189.174.134:34602] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aUqPbbdHHpIDpQ39rwlEMgAAABg"]
[Tue Dec 23 20:47:46.914379 2025] [:error] [pid 54340:tid 54362] [client 4.189.174.134:36177] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aUqPcpye8-oij4iGhogp6wAAAhQ"]
[Tue Dec 23 20:47:55.921893 2025] [:error] [pid 54297:tid 54323] [client 4.189.174.134:35111] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ot.php"] [unique_id "aUqPe0ZMNime0caoKPKk4gAAAZY"]
[Tue Dec 23 20:48:00.923563 2025] [:error] [pid 3405:tid 3450] [client 4.189.174.134:36211] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ot.php"] [unique_id "aUqPgLdHHpIDpQ39rwlERgAAAA0"]
[Tue Dec 23 20:48:05.831407 2025] [:error] [pid 3497:tid 3503] [client 4.189.174.134:36254] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aUqPhezUE6hZ8LJecSsZCwAAAMM"]
[Tue Dec 23 20:48:10.804674 2025] [:error] [pid 3497:tid 3516] [client 4.189.174.134:34612] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aUqPiuzUE6hZ8LJecSsZEQAAANA"]
[Tue Dec 23 20:48:14.827631 2025] [:error] [pid 54375:tid 54401] [client 4.189.174.134:35902] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aUqPjp1Yro3O5R2WY-ByMwAAAlg"]
[Tue Dec 23 20:48:21.404753 2025] [:error] [pid 54340:tid 54348] [client 4.189.174.134:34595] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUqPlZye8-oij4iGhogqAQAAAgY"]
[Tue Dec 23 20:48:22.312145 2025] [:error] [pid 25976:tid 26000] [client 4.189.174.134:34591] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUqPlrF6LaWzQScE-xOA-wAAARY"]
[Tue Dec 23 20:48:25.676944 2025] [:error] [pid 54375:tid 54384] [client 4.189.174.134:34561] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUqPmZ1Yro3O5R2WY-ByPQAAAkc"]
[Tue Dec 23 20:48:28.932064 2025] [:error] [pid 3405:tid 3450] [client 4.189.174.134:35079] [client 4.189.174.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUqPnLdHHpIDpQ39rwlEXwAAAA0"]
[Tue Dec 23 21:10:39.109290 2025] [:error] [pid 3404:tid 3409] [client 35.184.44.180:56015] [client 35.184.44.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.44.180, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUqUz8JGbPWZNlrhVJdaxwAAAcA"]
[Tue Dec 23 21:10:46.868218 2025] [:error] [pid 3404:tid 3433] [client 35.184.44.180:56015] [client 35.184.44.180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUqU1sJGbPWZNlrhVJda0wAAAdg"]
[Tue Dec 23 21:10:49.248353 2025] [:error] [pid 3404:tid 3428] [client 35.184.44.180:56015] [client 35.184.44.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.44.180, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUqU2cJGbPWZNlrhVJda1wAAAdM"]
[Tue Dec 23 21:57:13.187717 2025] [:error] [pid 25976:tid 26002] [client 85.203.21.202:54451] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aUqfubF6LaWzQScE-xONuQAAARg"]
[Tue Dec 23 21:57:13.538186 2025] [:error] [pid 3405:tid 3461] [client 85.203.21.197:22365] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aUqfubdHHpIDpQ39rwlWlwAAABg"]
[Tue Dec 23 21:57:13.897385 2025] [:error] [pid 3497:tid 3521] [client 85.203.21.58:36719] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUqfuezUE6hZ8LJecSsqNQAAANU"]
[Tue Dec 23 21:57:14.258951 2025] [:error] [pid 54297:tid 54313] [client 85.203.21.217:63263] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aUqfukZMNime0caoKPKvrQAAAYw"]
[Tue Dec 23 21:57:14.653858 2025] [:error] [pid 3497:tid 3523] [client 85.203.21.159:64389] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aUqfuuzUE6hZ8LJecSsqOAAAANc"]
[Tue Dec 23 21:57:15.030343 2025] [:error] [pid 3497:tid 3520] [client 193.37.32.3:40665] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aUqfu-zUE6hZ8LJecSsqOgAAANQ"]
[Tue Dec 23 21:57:15.382920 2025] [:error] [pid 11812:tid 11837] [client 193.37.32.2:53283] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aUqfu7BkIQ4nTXm4A3UqoQAAAJc"]
[Tue Dec 23 21:57:15.740239 2025] [:error] [pid 3405:tid 3438] [client 85.203.21.192:41575] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aUqfu7dHHpIDpQ39rwlWnQAAAAE"]
[Tue Dec 23 21:57:16.122949 2025] [:error] [pid 11812:tid 11828] [client 85.203.21.172:20859] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/selam.php"] [unique_id "aUqfvLBkIQ4nTXm4A3UqogAAAI4"]
[Tue Dec 23 21:57:16.496175 2025] [:error] [pid 3497:tid 3515] [client 85.203.21.160:54021] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aUqfvOzUE6hZ8LJecSsqPwAAAM8"]
[Tue Dec 23 21:57:16.864413 2025] [:error] [pid 54297:tid 54311] [client 85.203.21.202:22595] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aUqfvEZMNime0caoKPKvrwAAAYo"]
[Tue Dec 23 21:57:17.268485 2025] [:error] [pid 3405:tid 3455] [client 85.203.21.184:58233] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aUqfvbdHHpIDpQ39rwlWoAAAABI"]
[Tue Dec 23 21:57:17.648237 2025] [:error] [pid 3404:tid 3428] [client 85.203.21.195:63325] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aUqfvcJGbPWZNlrhVJdi9gAAAdM"]
[Tue Dec 23 21:57:18.011988 2025] [:error] [pid 3405:tid 3439] [client 85.203.21.167:38423] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aUqfvrdHHpIDpQ39rwlWowAAAAI"]
[Tue Dec 23 21:57:18.379135 2025] [:error] [pid 3405:tid 3444] [client 193.37.32.2:47373] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aUqfvrdHHpIDpQ39rwlWpQAAAAc"]
[Tue Dec 23 21:57:18.768235 2025] [:error] [pid 54340:tid 54355] [client 85.203.21.156:48751] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aUqfvpye8-oij4iGhog0AgAAAg0"]
[Tue Dec 23 21:57:19.115134 2025] [:error] [pid 54340:tid 54363] [client 85.203.21.201:42183] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "aUqfv5ye8-oij4iGhog0AwAAAhU"]
[Tue Dec 23 21:57:19.468451 2025] [:error] [pid 3497:tid 3500] [client 85.203.21.188:29863] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aUqfv-zUE6hZ8LJecSsqSQAAAMA"]
[Tue Dec 23 21:57:19.829704 2025] [:error] [pid 54297:tid 54319] [client 85.203.21.226:21917] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updates.php"] [unique_id "aUqfv0ZMNime0caoKPKvsQAAAZI"]
[Tue Dec 23 21:57:20.206018 2025] [:error] [pid 54408:tid 54429] [client 85.203.21.188:54985] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aUqfwGup4YbWx_MWvp1kqwAAApI"]
[Tue Dec 23 21:57:20.559615 2025] [:error] [pid 25976:tid 25996] [client 85.203.21.45:65285] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aUqfwLF6LaWzQScE-xONvwAAARI"]
[Tue Dec 23 21:57:20.906822 2025] [:error] [pid 3404:tid 3416] [client 85.203.21.192:32551] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aUqfwMJGbPWZNlrhVJdi-gAAAcc"]
[Tue Dec 23 21:57:21.268224 2025] [:error] [pid 11812:tid 11824] [client 85.203.21.239:64829] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "aUqfwbBkIQ4nTXm4A3UqpgAAAIo"]
[Tue Dec 23 21:57:21.656068 2025] [:error] [pid 54340:tid 54366] [client 193.37.32.3:65301] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aUqfwZye8-oij4iGhog0BwAAAhg"]
[Tue Dec 23 21:57:22.062984 2025] [:error] [pid 3404:tid 3432] [client 85.203.21.207:23139] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aUqfwsJGbPWZNlrhVJdi-wAAAdc"]
[Tue Dec 23 21:57:22.464417 2025] [:error] [pid 3497:tid 3502] [client 85.203.21.208:58909] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aUqfwuzUE6hZ8LJecSsqUAAAAMI"]
[Tue Dec 23 21:57:22.863074 2025] [:error] [pid 54408:tid 54414] [client 85.203.21.223:37485] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aUqfwmup4YbWx_MWvp1krgAAAoM"]
[Tue Dec 23 21:57:23.281115 2025] [:error] [pid 3404:tid 3411] [client 85.203.21.226:64113] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUqfw8JGbPWZNlrhVJdi_AAAAcI"]
[Tue Dec 23 21:57:23.672230 2025] [:error] [pid 54375:tid 54389] [client 85.203.21.54:51013] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aUqfw51Yro3O5R2WY-B-mQAAAkw"]
[Tue Dec 23 21:57:24.073045 2025] [:error] [pid 54375:tid 54381] [client 85.203.21.217:48905] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "aUqfxJ1Yro3O5R2WY-B-mgAAAkQ"]
[Tue Dec 23 21:57:24.468419 2025] [:error] [pid 3405:tid 3456] [client 85.203.21.195:35721] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aUqfxLdHHpIDpQ39rwlWtAAAABM"]
[Tue Dec 23 21:57:24.871015 2025] [:error] [pid 3405:tid 3438] [client 85.203.21.54:64295] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-conflg.php"] [unique_id "aUqfxLdHHpIDpQ39rwlWtQAAAAE"]
[Tue Dec 23 21:57:25.282756 2025] [:error] [pid 3497:tid 3500] [client 193.37.32.3:45863] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aUqfxezUE6hZ8LJecSsqUQAAAMA"]
[Tue Dec 23 21:57:25.664616 2025] [:error] [pid 54408:tid 54430] [client 85.203.21.190:29523] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/"] [unique_id "aUqfxWup4YbWx_MWvp1krwAAApM"]
[Tue Dec 23 21:57:26.046231 2025] [:error] [pid 11812:tid 11820] [client 85.203.21.155:62137] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class.api.php"] [unique_id "aUqfxrBkIQ4nTXm4A3UqqAAAAIY"]
[Tue Dec 23 21:57:26.409751 2025] [:error] [pid 11812:tid 11817] [client 85.203.21.168:53601] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aUqfxrBkIQ4nTXm4A3UqqgAAAIM"]
[Tue Dec 23 21:57:26.801902 2025] [:error] [pid 25976:tid 25990] [client 85.203.21.213:49557] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "aUqfxrF6LaWzQScE-xONxwAAAQw"]
[Tue Dec 23 21:57:27.196142 2025] [:error] [pid 3404:tid 3422] [client 85.203.21.197:43503] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aUqfx8JGbPWZNlrhVJdjAAAAAc0"]
[Tue Dec 23 21:57:27.565707 2025] [:error] [pid 3404:tid 3430] [client 85.203.21.58:50647] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aUqfx8JGbPWZNlrhVJdjAgAAAdU"]
[Tue Dec 23 21:57:27.926244 2025] [:error] [pid 54340:tid 54363] [client 85.203.21.235:48911] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aUqfx5ye8-oij4iGhog0EQAAAhU"]
[Tue Dec 23 21:57:28.285494 2025] [:error] [pid 3405:tid 3461] [client 85.203.21.238:51741] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aUqfyLdHHpIDpQ39rwlWtwAAABg"]
[Tue Dec 23 21:57:28.669739 2025] [:error] [pid 54297:tid 54313] [client 85.203.21.223:35605] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aUqfyEZMNime0caoKPKvtgAAAYw"]
[Tue Dec 23 21:57:29.026586 2025] [:error] [pid 3405:tid 3439] [client 85.203.21.222:23149] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aUqfybdHHpIDpQ39rwlWuAAAAAI"]
[Tue Dec 23 21:57:29.385499 2025] [:error] [pid 3405:tid 3458] [client 85.203.21.210:24311] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aUqfybdHHpIDpQ39rwlWugAAABU"]
[Tue Dec 23 21:57:29.744864 2025] [:error] [pid 3497:tid 3522] [client 85.203.21.54:56785] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aUqfyezUE6hZ8LJecSsqVgAAANY"]
[Tue Dec 23 21:57:30.100982 2025] [:error] [pid 54408:tid 54432] [client 85.203.21.228:52211] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aUqfymup4YbWx_MWvp1ksQAAApU"]
[Tue Dec 23 21:57:30.507379 2025] [:error] [pid 25976:tid 25994] [client 85.203.21.208:47045] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aUqfyrF6LaWzQScE-xONzQAAARA"]
[Tue Dec 23 21:57:30.929784 2025] [:error] [pid 3497:tid 3502] [client 85.203.21.238:45853] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aUqfyuzUE6hZ8LJecSsqVwAAAMI"]
[Tue Dec 23 21:57:31.367429 2025] [:error] [pid 3497:tid 3501] [client 85.203.21.232:34197] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aUqfy-zUE6hZ8LJecSsqWgAAAME"]
[Tue Dec 23 21:57:31.805790 2025] [:error] [pid 54375:tid 54391] [client 85.203.21.57:43965] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aUqfy51Yro3O5R2WY-B-ngAAAk4"]
[Tue Dec 23 21:57:32.195522 2025] [:error] [pid 54297:tid 54314] [client 85.203.21.204:45399] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aUqfzEZMNime0caoKPKvtwAAAY0"]
[Tue Dec 23 21:57:32.562112 2025] [:error] [pid 3405:tid 3459] [client 193.37.32.3:51871] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aUqfzLdHHpIDpQ39rwlWvQAAABY"]
[Tue Dec 23 21:57:32.925150 2025] [:error] [pid 54297:tid 54312] [client 85.203.21.45:56909] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUqfzEZMNime0caoKPKvuAAAAYs"]
[Tue Dec 23 21:57:33.292176 2025] [:error] [pid 54375:tid 54387] [client 85.203.21.228:40243] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "aUqfzZ1Yro3O5R2WY-B-oQAAAko"]
[Tue Dec 23 21:57:33.673266 2025] [:error] [pid 54375:tid 54393] [client 85.203.21.164:25447] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aUqfzZ1Yro3O5R2WY-B-pAAAAlA"]
[Tue Dec 23 21:57:34.041217 2025] [:error] [pid 3404:tid 3419] [client 85.203.21.54:61159] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aUqfzsJGbPWZNlrhVJdjBgAAAco"]
[Tue Dec 23 21:57:34.398758 2025] [:error] [pid 25976:tid 25979] [client 85.203.21.208:46047] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aUqfzrF6LaWzQScE-xON0QAAAQE"]
[Tue Dec 23 21:57:34.759335 2025] [:error] [pid 3497:tid 3512] [client 85.203.21.221:26171] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aUqfzuzUE6hZ8LJecSsqYAAAAMw"]
[Tue Dec 23 21:57:35.117198 2025] [:error] [pid 11812:tid 11824] [client 85.203.21.197:31359] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aUqfz7BkIQ4nTXm4A3UqtAAAAIo"]
[Tue Dec 23 21:57:35.509449 2025] [:error] [pid 3404:tid 3429] [client 85.203.21.227:62835] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aUqfz8JGbPWZNlrhVJdjCAAAAdQ"]
[Tue Dec 23 21:57:35.872690 2025] [:error] [pid 3404:tid 3413] [client 85.203.21.157:63099] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function/function.php"] [unique_id "aUqfz8JGbPWZNlrhVJdjCwAAAcQ"]
[Tue Dec 23 21:57:36.231412 2025] [:error] [pid 3405:tid 3447] [client 85.203.21.195:59109] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aUqf0LdHHpIDpQ39rwlWvwAAAAo"]
[Tue Dec 23 21:57:36.584448 2025] [:error] [pid 11812:tid 11831] [client 85.203.21.227:33391] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aUqf0LBkIQ4nTXm4A3UquAAAAJE"]
[Tue Dec 23 21:57:36.932347 2025] [:error] [pid 54375:tid 54392] [client 85.203.21.197:21871] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/network_xo.php"] [unique_id "aUqf0J1Yro3O5R2WY-B-qwAAAk8"]
[Tue Dec 23 21:57:37.285663 2025] [:error] [pid 11812:tid 11817] [client 85.203.21.228:51465] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aUqf0bBkIQ4nTXm4A3UquwAAAIM"]
[Tue Dec 23 21:57:37.642324 2025] [:error] [pid 54375:tid 54378] [client 85.203.21.57:35889] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/222.php"] [unique_id "aUqf0Z1Yro3O5R2WY-B-rwAAAkE"]
[Tue Dec 23 21:57:37.992180 2025] [:error] [pid 54375:tid 54395] [client 85.203.21.172:33997] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aUqf0Z1Yro3O5R2WY-B-sAAAAlI"]
[Tue Dec 23 21:57:38.342455 2025] [:error] [pid 54375:tid 54401] [client 85.203.21.160:59447] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aUqf0p1Yro3O5R2WY-B-sgAAAlg"]
[Tue Dec 23 21:57:38.692912 2025] [:error] [pid 54340:tid 54354] [client 85.203.21.159:32975] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aUqf0pye8-oij4iGhog0EgAAAgw"]
[Tue Dec 23 21:57:39.043325 2025] [:error] [pid 54375:tid 54384] [client 193.37.32.2:23377] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aUqf051Yro3O5R2WY-B-twAAAkc"]
[Tue Dec 23 21:57:39.391703 2025] [:error] [pid 54375:tid 54380] [client 85.203.21.176:59091] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aUqf051Yro3O5R2WY-B-uQAAAkM"]
[Tue Dec 23 21:57:39.740892 2025] [:error] [pid 25976:tid 25987] [client 85.203.21.156:29699] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aUqf07F6LaWzQScE-xON1gAAAQk"]
[Tue Dec 23 21:57:40.088315 2025] [:error] [pid 54340:tid 54358] [client 85.203.21.157:57997] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aUqf1Jye8-oij4iGhog0EwAAAhA"]
[Tue Dec 23 21:57:40.437897 2025] [:error] [pid 3404:tid 3412] [client 85.203.21.222:35349] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aUqf1MJGbPWZNlrhVJdjDQAAAcM"]
[Tue Dec 23 21:57:40.786788 2025] [:error] [pid 25976:tid 25995] [client 193.37.32.3:51829] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUqf1LF6LaWzQScE-xON1wAAARE"]
[Tue Dec 23 21:57:41.137537 2025] [:error] [pid 3404:tid 3419] [client 85.203.21.239:28787] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aUqf1cJGbPWZNlrhVJdjEAAAAco"]
[Tue Dec 23 21:57:41.488335 2025] [:error] [pid 3404:tid 3423] [client 85.203.21.197:40087] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/"] [unique_id "aUqf1cJGbPWZNlrhVJdjEgAAAc4"]
[Tue Dec 23 21:57:41.837291 2025] [:error] [pid 3404:tid 3430] [client 85.203.21.228:29665] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aUqf1cJGbPWZNlrhVJdjFwAAAdU"]
[Tue Dec 23 21:57:42.305195 2025] [:error] [pid 11812:tid 11825] [client 85.203.21.172:57919] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aUqf1rBkIQ4nTXm4A3UqwgAAAIs"]
[Tue Dec 23 21:57:42.654043 2025] [:error] [pid 54408:tid 54420] [client 85.203.21.210:42029] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aUqf1mup4YbWx_MWvp1kuAAAAok"]
[Tue Dec 23 21:57:43.009960 2025] [:error] [pid 3406:tid 3474] [client 85.203.21.223:38599] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aUqf1_n8DLWxW7TPzpHzhgAAAEo"]
[Tue Dec 23 21:57:43.374802 2025] [:error] [pid 3406:tid 3468] [client 85.203.21.221:49419] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aUqf1_n8DLWxW7TPzpHziAAAAEQ"]
[Tue Dec 23 21:57:43.726262 2025] [:error] [pid 54340:tid 54345] [client 85.203.21.186:50997] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aUqf15ye8-oij4iGhog0FQAAAgM"]
[Tue Dec 23 21:57:44.074833 2025] [:error] [pid 3405:tid 3461] [client 193.37.32.2:38755] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aUqf2LdHHpIDpQ39rwlWwQAAABg"]
[Tue Dec 23 21:57:44.425265 2025] [:error] [pid 25976:tid 25991] [client 85.203.21.186:64361] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aUqf2LF6LaWzQScE-xON3AAAAQ0"]
[Tue Dec 23 21:57:44.775677 2025] [:error] [pid 3404:tid 3425] [client 85.203.21.45:45411] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aUqf2MJGbPWZNlrhVJdjHAAAAdA"]
[Tue Dec 23 21:57:45.124092 2025] [:error] [pid 54340:tid 54346] [client 85.203.21.184:25165] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aUqf2Zye8-oij4iGhog0FgAAAgQ"]
[Tue Dec 23 21:57:45.492597 2025] [:error] [pid 54297:tid 54316] [client 85.203.21.201:51621] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aUqf2UZMNime0caoKPKvwAAAAY8"]
[Tue Dec 23 21:57:45.851215 2025] [:error] [pid 3497:tid 3508] [client 193.37.32.3:50701] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aUqf2ezUE6hZ8LJecSsqagAAAMg"]
[Tue Dec 23 21:57:46.208115 2025] [:error] [pid 54408:tid 54431] [client 85.203.21.207:42707] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aUqf2mup4YbWx_MWvp1kvgAAApQ"]
[Tue Dec 23 21:57:46.559037 2025] [:error] [pid 3404:tid 3422] [client 85.203.21.45:48095] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "aUqf2sJGbPWZNlrhVJdjIgAAAc0"]
[Tue Dec 23 21:57:46.907355 2025] [:error] [pid 3404:tid 3417] [client 85.203.21.156:40243] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aUqf2sJGbPWZNlrhVJdjJAAAAcg"]
[Tue Dec 23 21:57:47.265977 2025] [:error] [pid 54340:tid 54360] [client 85.203.21.162:47623] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aUqf25ye8-oij4iGhog0GAAAAhI"]
[Tue Dec 23 21:57:47.614695 2025] [:error] [pid 54297:tid 54320] [client 85.203.21.222:35817] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-conflg/function.php"] [unique_id "aUqf20ZMNime0caoKPKvxAAAAZM"]
[Tue Dec 23 21:57:47.963674 2025] [:error] [pid 3404:tid 3412] [client 85.203.21.45:48295] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aUqf28JGbPWZNlrhVJdjKQAAAcM"]
[Tue Dec 23 21:57:48.313713 2025] [:error] [pid 54375:tid 54388] [client 85.203.21.57:58187] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aUqf3J1Yro3O5R2WY-B-vwAAAks"]
[Tue Dec 23 21:57:48.664002 2025] [:error] [pid 54375:tid 54397] [client 85.203.21.226:25331] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUqf3J1Yro3O5R2WY-B-wAAAAlQ"]
[Tue Dec 23 21:57:49.013251 2025] [:error] [pid 3406:tid 3464] [client 85.203.21.159:59305] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aUqf3fn8DLWxW7TPzpHzjwAAAEA"]
[Tue Dec 23 21:57:49.369127 2025] [:error] [pid 3406:tid 3474] [client 85.203.21.160:65193] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aUqf3fn8DLWxW7TPzpHzkAAAAEo"]
[Tue Dec 23 21:57:49.717353 2025] [:error] [pid 54408:tid 54433] [client 85.203.21.54:57321] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUqf3Wup4YbWx_MWvp1kwwAAApY"]
[Tue Dec 23 21:57:50.066185 2025] [:error] [pid 11812:tid 11816] [client 85.203.21.213:25449] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aUqf3rBkIQ4nTXm4A3UqzAAAAII"]
[Tue Dec 23 21:57:50.415202 2025] [:error] [pid 54375:tid 54400] [client 85.203.21.237:23497] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aUqf3p1Yro3O5R2WY-B-wQAAAlc"]
[Tue Dec 23 21:57:50.763740 2025] [:error] [pid 11812:tid 11822] [client 85.203.21.190:41845] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aUqf3rBkIQ4nTXm4A3UqzgAAAIg"]
[Tue Dec 23 21:57:51.112687 2025] [:error] [pid 54375:tid 54385] [client 85.203.21.207:48725] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aUqf351Yro3O5R2WY-B-xAAAAkg"]
[Tue Dec 23 21:57:51.463411 2025] [:error] [pid 54297:tid 54319] [client 85.203.21.213:22875] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "aUqf30ZMNime0caoKPKvxgAAAZI"]
[Tue Dec 23 21:57:51.810313 2025] [:error] [pid 3405:tid 3437] [client 85.203.21.227:55537] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "aUqf37dHHpIDpQ39rwlWxgAAAAA"]
[Tue Dec 23 21:57:52.157513 2025] [:error] [pid 54375:tid 54380] [client 85.203.21.227:30853] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUqf4J1Yro3O5R2WY-B-yAAAAkM"]
[Tue Dec 23 21:57:52.511785 2025] [:error] [pid 54375:tid 54393] [client 85.203.21.170:44407] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aUqf4J1Yro3O5R2WY-B-ygAAAlA"]
[Tue Dec 23 21:57:52.859155 2025] [:error] [pid 54297:tid 54303] [client 85.203.21.176:49009] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/"] [unique_id "aUqf4EZMNime0caoKPKvyAAAAYI"]
[Tue Dec 23 21:57:53.207838 2025] [:error] [pid 54375:tid 54387] [client 193.37.32.2:42391] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aUqf4Z1Yro3O5R2WY-B-zAAAAko"]
[Tue Dec 23 21:57:53.569697 2025] [:error] [pid 54297:tid 54314] [client 85.203.21.162:35791] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aUqf4UZMNime0caoKPKvygAAAY0"]
[Tue Dec 23 21:57:53.922512 2025] [:error] [pid 11812:tid 11825] [client 85.203.21.52:45375] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aUqf4bBkIQ4nTXm4A3Uq0QAAAIs"]
[Tue Dec 23 21:57:54.277634 2025] [:error] [pid 54375:tid 54379] [client 85.203.21.58:34833] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aUqf4p1Yro3O5R2WY-B-zgAAAkI"]
[Tue Dec 23 21:57:54.626329 2025] [:error] [pid 25976:tid 25981] [client 85.203.21.52:53537] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aUqf4rF6LaWzQScE-xON6wAAAQM"]
[Tue Dec 23 21:57:54.972901 2025] [:error] [pid 3406:tid 3476] [client 85.203.21.172:61851] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "aUqf4vn8DLWxW7TPzpHzkwAAAEw"]
[Tue Dec 23 21:57:55.331262 2025] [:error] [pid 54297:tid 54307] [client 85.203.21.238:41199] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/admin.php"] [unique_id "aUqf40ZMNime0caoKPKvzQAAAYY"]
[Tue Dec 23 21:57:55.692386 2025] [:error] [pid 3406:tid 3475] [client 85.203.21.159:21561] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aUqf4_n8DLWxW7TPzpHzlgAAAEs"]
[Tue Dec 23 21:57:56.042033 2025] [:error] [pid 54340:tid 54352] [client 85.203.21.155:32479] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/"] [unique_id "aUqf5Jye8-oij4iGhog0HwAAAgo"]
[Tue Dec 23 21:57:56.390889 2025] [:error] [pid 54297:tid 54311] [client 193.37.32.2:20973] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aUqf5EZMNime0caoKPKvzgAAAYo"]
[Tue Dec 23 21:57:56.793562 2025] [:error] [pid 54375:tid 54385] [client 193.37.32.1:21063] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aUqf5J1Yro3O5R2WY-B-0gAAAkg"]
[Tue Dec 23 21:57:57.145699 2025] [:error] [pid 54297:tid 54318] [client 85.203.21.221:62499] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aUqf5UZMNime0caoKPKv0AAAAZE"]
[Tue Dec 23 21:57:57.497793 2025] [:error] [pid 3404:tid 3416] [client 85.203.21.52:50423] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aUqf5cJGbPWZNlrhVJdjLwAAAcc"]
[Tue Dec 23 21:57:57.853478 2025] [:error] [pid 3405:tid 3452] [client 85.203.21.162:25595] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aUqf5bdHHpIDpQ39rwlWzgAAAA8"]
[Tue Dec 23 21:57:58.201743 2025] [:error] [pid 54340:tid 54364] [client 85.203.21.186:47565] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUqf5pye8-oij4iGhog0IwAAAhY"]
[Tue Dec 23 21:57:58.555428 2025] [:error] [pid 54340:tid 54365] [client 85.203.21.162:37245] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aUqf5pye8-oij4iGhog0JAAAAhc"]
[Tue Dec 23 21:57:58.901054 2025] [:error] [pid 54340:tid 54366] [client 193.37.32.2:53343] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aUqf5pye8-oij4iGhog0JgAAAhg"]
[Tue Dec 23 21:57:59.249613 2025] [:error] [pid 54340:tid 54349] [client 85.203.21.210:40405] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aUqf55ye8-oij4iGhog0JwAAAgc"]
[Tue Dec 23 21:57:59.609778 2025] [:error] [pid 54340:tid 54356] [client 85.203.21.190:59163] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aUqf55ye8-oij4iGhog0KAAAAg4"]
[Tue Dec 23 21:57:59.965919 2025] [:error] [pid 54340:tid 54343] [client 85.203.21.221:36091] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/"] [unique_id "aUqf55ye8-oij4iGhog0KgAAAgE"]
[Tue Dec 23 21:58:00.315261 2025] [:error] [pid 3406:tid 3474] [client 85.203.21.197:54787] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aUqf6Pn8DLWxW7TPzpHzmwAAAEo"]
[Tue Dec 23 21:58:00.791011 2025] [:error] [pid 54340:tid 54358] [client 193.37.32.3:62565] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options.php"] [unique_id "aUqf6Jye8-oij4iGhog0LQAAAhA"]
[Tue Dec 23 21:58:01.173119 2025] [:error] [pid 54408:tid 54428] [client 85.203.21.192:20007] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUqf6Wup4YbWx_MWvp1kxwAAApE"]
[Tue Dec 23 21:58:01.559647 2025] [:error] [pid 3404:tid 3422] [client 85.203.21.208:31711] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aUqf6cJGbPWZNlrhVJdjNwAAAc0"]
[Tue Dec 23 21:58:01.936170 2025] [:error] [pid 25976:tid 25992] [client 193.37.32.3:26755] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aUqf6bF6LaWzQScE-xON7gAAAQ4"]
[Tue Dec 23 21:58:02.320725 2025] [:error] [pid 3404:tid 3432] [client 85.203.21.228:52949] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUqf6sJGbPWZNlrhVJdjOAAAAdc"]
[Tue Dec 23 21:58:02.707999 2025] [:error] [pid 25976:tid 25997] [client 85.203.21.238:54747] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aUqf6rF6LaWzQScE-xON7wAAARM"]
[Tue Dec 23 21:58:03.058622 2025] [:error] [pid 3497:tid 3524] [client 85.203.21.58:59967] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aUqf6-zUE6hZ8LJecSsqbwAAANg"]
[Tue Dec 23 21:58:03.406286 2025] [:error] [pid 3406:tid 3465] [client 85.203.21.238:47073] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aUqf6_n8DLWxW7TPzpHznQAAAEE"]
[Tue Dec 23 21:58:03.771268 2025] [:error] [pid 3405:tid 3443] [client 193.37.32.3:58223] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aUqf67dHHpIDpQ39rwlW1QAAAAY"]
[Tue Dec 23 21:58:04.124499 2025] [:error] [pid 54340:tid 54349] [client 85.203.21.197:22085] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "aUqf7Jye8-oij4iGhog0MgAAAgc"]
[Tue Dec 23 21:58:04.472508 2025] [:error] [pid 54340:tid 54356] [client 85.203.21.167:29087] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUqf7Jye8-oij4iGhog0MwAAAg4"]
[Tue Dec 23 21:58:04.827979 2025] [:error] [pid 3406:tid 3483] [client 85.203.21.170:46461] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aUqf7Pn8DLWxW7TPzpHzngAAAFM"]
[Tue Dec 23 21:58:05.203851 2025] [:error] [pid 3405:tid 3453] [client 85.203.21.164:25365] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell3.php"] [unique_id "aUqf7bdHHpIDpQ39rwlW2gAAABA"]
[Tue Dec 23 21:58:05.571700 2025] [:error] [pid 11812:tid 11826] [client 85.203.21.197:56199] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aUqf7bBkIQ4nTXm4A3Uq2wAAAIw"]
[Tue Dec 23 21:58:05.921596 2025] [:error] [pid 54340:tid 54347] [client 85.203.21.223:46987] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aUqf7Zye8-oij4iGhog0OAAAAgU"]
[Tue Dec 23 21:58:06.290675 2025] [:error] [pid 54408:tid 54434] [client 85.203.21.197:38705] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aUqf7mup4YbWx_MWvp1kyQAAApc"]
[Tue Dec 23 21:58:06.664540 2025] [:error] [pid 54340:tid 54360] [client 85.203.21.238:41295] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aUqf7pye8-oij4iGhog0OgAAAhI"]
[Tue Dec 23 21:58:07.042697 2025] [:error] [pid 11812:tid 11819] [client 85.203.21.237:65351] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aUqf77BkIQ4nTXm4A3Uq3QAAAIU"]
[Tue Dec 23 21:58:07.392950 2025] [:error] [pid 11812:tid 11818] [client 85.203.21.206:38345] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aUqf77BkIQ4nTXm4A3Uq4AAAAIQ"]
[Tue Dec 23 21:58:07.769304 2025] [:error] [pid 11812:tid 11814] [client 85.203.21.172:31809] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aUqf77BkIQ4nTXm4A3Uq4QAAAIA"]
[Tue Dec 23 21:58:08.131065 2025] [:error] [pid 54297:tid 54314] [client 85.203.21.193:25205] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aUqf8EZMNime0caoKPKv0wAAAY0"]
[Tue Dec 23 21:58:08.484204 2025] [:error] [pid 54297:tid 54306] [client 85.203.21.207:33227] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aUqf8EZMNime0caoKPKv1QAAAYU"]
[Tue Dec 23 21:58:08.832252 2025] [:error] [pid 3406:tid 3472] [client 85.203.21.164:45435] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "aUqf8Pn8DLWxW7TPzpHzogAAAEg"]
[Tue Dec 23 21:58:09.189965 2025] [:error] [pid 11812:tid 11816] [client 85.203.21.156:21953] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/"] [unique_id "aUqf8bBkIQ4nTXm4A3Uq5QAAAII"]
[Tue Dec 23 21:58:09.538743 2025] [:error] [pid 54408:tid 54413] [client 85.203.21.155:20877] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aUqf8Wup4YbWx_MWvp1kzAAAAoI"]
[Tue Dec 23 21:58:09.886501 2025] [:error] [pid 54408:tid 54418] [client 85.203.21.204:51705] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aUqf8Wup4YbWx_MWvp1kzQAAAoc"]
[Tue Dec 23 21:58:10.260117 2025] [:error] [pid 3405:tid 3456] [client 85.203.21.207:50723] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aUqf8rdHHpIDpQ39rwlW3QAAABM"]
[Tue Dec 23 21:58:10.618434 2025] [:error] [pid 54375:tid 54384] [client 85.203.21.207:56497] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/"] [unique_id "aUqf8p1Yro3O5R2WY-B-2QAAAkc"]
[Tue Dec 23 21:58:10.967660 2025] [:error] [pid 3406:tid 3477] [client 85.203.21.222:41057] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUqf8vn8DLWxW7TPzpHzpAAAAE0"]
[Tue Dec 23 21:58:11.314596 2025] [:error] [pid 3404:tid 3423] [client 85.203.21.195:20087] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aUqf88JGbPWZNlrhVJdjPwAAAc4"]
[Tue Dec 23 21:58:12.665157 2025] [:error] [pid 54375:tid 54378] [client 85.203.21.227:43673] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aUqf9J1Yro3O5R2WY-B-3QAAAkE"]
[Tue Dec 23 21:58:13.020013 2025] [:error] [pid 54375:tid 54379] [client 85.203.21.195:41265] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aUqf9Z1Yro3O5R2WY-B-3gAAAkI"]
[Tue Dec 23 21:58:13.395094 2025] [:error] [pid 54375:tid 54377] [client 85.203.21.192:20791] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aUqf9Z1Yro3O5R2WY-B-4AAAAkA"]
[Tue Dec 23 21:58:13.744676 2025] [:error] [pid 25976:tid 25994] [client 85.203.21.162:45633] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aUqf9bF6LaWzQScE-xON9gAAARA"]
[Tue Dec 23 21:58:14.098644 2025] [:error] [pid 54375:tid 54386] [client 85.203.21.221:51811] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aUqf9p1Yro3O5R2WY-B-4wAAAkk"]
[Tue Dec 23 21:58:14.465586 2025] [:error] [pid 3497:tid 3522] [client 85.203.21.222:64691] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aUqf9uzUE6hZ8LJecSsqcAAAANY"]
[Tue Dec 23 21:58:14.835382 2025] [:error] [pid 54375:tid 54398] [client 85.203.21.201:21703] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aUqf9p1Yro3O5R2WY-B-5AAAAlU"]
[Tue Dec 23 21:58:15.218720 2025] [:error] [pid 3404:tid 3419] [client 85.203.21.197:24805] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content.php"] [unique_id "aUqf98JGbPWZNlrhVJdjQwAAAco"]
[Tue Dec 23 21:58:15.591010 2025] [:error] [pid 3404:tid 3413] [client 85.203.21.197:63111] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aUqf98JGbPWZNlrhVJdjRAAAAcQ"]
[Tue Dec 23 21:58:16.019939 2025] [:error] [pid 3404:tid 3429] [client 85.203.21.45:42731] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aUqf-MJGbPWZNlrhVJdjRQAAAdQ"]
[Tue Dec 23 21:58:16.399756 2025] [:error] [pid 3404:tid 3409] [client 85.203.21.226:42691] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/"] [unique_id "aUqf-MJGbPWZNlrhVJdjSAAAAcA"]
[Tue Dec 23 21:58:16.772271 2025] [:error] [pid 3404:tid 3431] [client 85.203.21.41:32469] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aUqf-MJGbPWZNlrhVJdjSwAAAdY"]
[Tue Dec 23 21:58:17.130367 2025] [:error] [pid 3497:tid 3519] [client 85.203.21.160:47647] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUqf-ezUE6hZ8LJecSsqeQAAANM"]
[Tue Dec 23 21:58:17.524652 2025] [:error] [pid 3497:tid 3514] [client 193.37.32.2:59433] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aUqf-ezUE6hZ8LJecSsqfQAAAM4"]
[Tue Dec 23 21:58:17.911732 2025] [:error] [pid 3405:tid 3439] [client 85.203.21.45:28529] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aUqf-bdHHpIDpQ39rwlW3gAAAAI"]
[Tue Dec 23 21:58:18.290500 2025] [:error] [pid 3497:tid 3512] [client 85.203.21.155:54669] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aUqf-uzUE6hZ8LJecSsqfwAAAMw"]
[Tue Dec 23 21:58:18.666081 2025] [:error] [pid 3497:tid 3524] [client 85.203.21.54:46191] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aUqf-uzUE6hZ8LJecSsqgQAAANg"]
[Tue Dec 23 21:58:19.044633 2025] [:error] [pid 54340:tid 54349] [client 85.203.21.168:39307] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/m.php"] [unique_id "aUqf-5ye8-oij4iGhog0QQAAAgc"]
[Tue Dec 23 21:58:19.440862 2025] [:error] [pid 3497:tid 3522] [client 85.203.21.54:52187] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aUqf--zUE6hZ8LJecSsqhAAAANY"]
[Tue Dec 23 21:58:19.790683 2025] [:error] [pid 3404:tid 3415] [client 85.203.21.237:30965] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aUqf-8JGbPWZNlrhVJdjWAAAAcY"]
[Tue Dec 23 21:58:20.171487 2025] [:error] [pid 3404:tid 3424] [client 85.203.21.183:55123] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/et-cache/taxonomy/project_category/21/about.php"] [unique_id "aUqf_MJGbPWZNlrhVJdjWwAAAc8"]
[Tue Dec 23 21:58:20.543359 2025] [:error] [pid 11812:tid 11819] [client 85.203.21.156:43311] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aUqf_LBkIQ4nTXm4A3Uq6wAAAIU"]
[Tue Dec 23 21:58:22.445055 2025] [:error] [pid 11812:tid 11834] [client 85.203.21.156:27289] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/common/admin.php"] [unique_id "aUqf_rBkIQ4nTXm4A3Uq8AAAAJQ"]
[Tue Dec 23 21:58:22.823742 2025] [:error] [pid 54297:tid 54306] [client 85.203.21.228:29363] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/classes/admin.php"] [unique_id "aUqf_kZMNime0caoKPKv3AAAAYU"]
[Tue Dec 23 21:58:23.185866 2025] [:error] [pid 3405:tid 3451] [client 85.203.21.170:50831] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aUqf_7dHHpIDpQ39rwlW4AAAAA4"]
[Tue Dec 23 21:58:23.549125 2025] [:error] [pid 54375:tid 54396] [client 85.203.21.162:62189] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/portfolio/seton/about.php"] [unique_id "aUqf_51Yro3O5R2WY-B-7AAAAlM"]
[Tue Dec 23 21:58:23.928606 2025] [:error] [pid 54340:tid 54348] [client 193.37.32.1:30909] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/portfolio/about.php"] [unique_id "aUqf_5ye8-oij4iGhog0QwAAAgY"]
[Tue Dec 23 21:58:24.359841 2025] [:error] [pid 54340:tid 54358] [client 85.203.21.193:36989] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/single/about.php"] [unique_id "aUqgAJye8-oij4iGhog0RQAAAhA"]
[Tue Dec 23 21:58:24.788658 2025] [:error] [pid 3497:tid 3511] [client 85.203.21.192:50863] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/full/admin.php"] [unique_id "aUqgAOzUE6hZ8LJecSsqjQAAAMs"]
[Tue Dec 23 21:58:25.185128 2025] [:error] [pid 54340:tid 54363] [client 85.203.21.159:46027] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/about.php"] [unique_id "aUqgAZye8-oij4iGhog0SwAAAhU"]
[Tue Dec 23 21:58:25.589018 2025] [:error] [pid 54340:tid 54357] [client 85.203.21.170:58699] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/fm.php"] [unique_id "aUqgAZye8-oij4iGhog0TwAAAg8"]
[Tue Dec 23 21:58:25.966092 2025] [:error] [pid 54340:tid 54358] [client 85.203.21.170:44171] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wolf.php"] [unique_id "aUqgAZye8-oij4iGhog0UQAAAhA"]
[Tue Dec 23 21:58:26.365587 2025] [:error] [pid 11812:tid 11836] [client 85.203.21.238:55979] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/files/admin.php"] [unique_id "aUqgArBkIQ4nTXm4A3Uq9gAAAJY"]
[Tue Dec 23 21:58:26.764424 2025] [:error] [pid 54340:tid 54346] [client 85.203.21.201:41827] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/1.php"] [unique_id "aUqgApye8-oij4iGhog0UwAAAgQ"]
[Tue Dec 23 21:58:27.149924 2025] [:error] [pid 11812:tid 11822] [client 85.203.21.159:24567] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aUqgA7BkIQ4nTXm4A3Uq-AAAAIg"]
[Tue Dec 23 21:58:27.560846 2025] [:error] [pid 54297:tid 54307] [client 85.203.21.176:33113] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/stamp/1.php"] [unique_id "aUqgA0ZMNime0caoKPKv3QAAAYY"]
[Tue Dec 23 21:58:27.984623 2025] [:error] [pid 11812:tid 11818] [client 85.203.21.172:27887] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bbn.php"] [unique_id "aUqgA7BkIQ4nTXm4A3Uq-QAAAIQ"]
[Tue Dec 23 21:58:28.397852 2025] [:error] [pid 11812:tid 11834] [client 85.203.21.202:49289] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aUqgBLBkIQ4nTXm4A3Uq_gAAAJQ"]
[Tue Dec 23 21:58:28.808860 2025] [:error] [pid 3404:tid 3410] [client 193.37.32.2:24971] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/LayerSlider/wp/1.php"] [unique_id "aUqgBMJGbPWZNlrhVJdjZQAAAcE"]
[Tue Dec 23 21:58:29.210275 2025] [:error] [pid 54408:tid 54434] [client 85.203.21.164:63217] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/1.php"] [unique_id "aUqgBWup4YbWx_MWvp1k1QAAApc"]
[Tue Dec 23 21:58:29.588468 2025] [:error] [pid 11812:tid 11814] [client 85.203.21.176:42017] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-sweep/1.php"] [unique_id "aUqgBbBkIQ4nTXm4A3UrAQAAAIA"]
[Tue Dec 23 21:58:30.002171 2025] [:error] [pid 3404:tid 3423] [client 85.203.21.208:31617] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/tablepress/1.php"] [unique_id "aUqgBsJGbPWZNlrhVJdjaAAAAc4"]
[Tue Dec 23 21:58:30.381785 2025] [:error] [pid 3404:tid 3411] [client 85.203.21.237:54219] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/autoptimize/1.php"] [unique_id "aUqgBsJGbPWZNlrhVJdjagAAAcI"]
[Tue Dec 23 21:58:30.792123 2025] [:error] [pid 11812:tid 11826] [client 85.203.21.195:25705] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/ubermenu-icons/thom-hardy.php"] [unique_id "aUqgBrBkIQ4nTXm4A3UrBQAAAIw"]
[Tue Dec 23 21:58:31.208006 2025] [:error] [pid 11812:tid 11819] [client 85.203.21.176:65487] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/newsletter/main/1.php"] [unique_id "aUqgB7BkIQ4nTXm4A3UrBwAAAIU"]
[Tue Dec 23 21:58:31.739597 2025] [:error] [pid 11812:tid 11832] [client 85.203.21.237:51925] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo-premium/deprecated/1.php"] [unique_id "aUqgB7BkIQ4nTXm4A3UrCwAAAJI"]
[Tue Dec 23 21:58:32.136734 2025] [:error] [pid 54375:tid 54401] [client 85.203.21.57:26237] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/backups/1.php"] [unique_id "aUqgCJ1Yro3O5R2WY-B-9QAAAlg"]
[Tue Dec 23 21:58:32.520037 2025] [:error] [pid 54375:tid 54391] [client 85.203.21.197:51023] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aUqgCJ1Yro3O5R2WY-B-9wAAAk4"]
[Tue Dec 23 21:58:32.954874 2025] [:error] [pid 54375:tid 54393] [client 85.203.21.190:45991] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aUqgCJ1Yro3O5R2WY-B--gAAAlA"]
[Tue Dec 23 21:58:33.380925 2025] [:error] [pid 11812:tid 11838] [client 193.37.32.2:46181] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/web/admin.php"] [unique_id "aUqgCbBkIQ4nTXm4A3UrDQAAAJg"]
[Tue Dec 23 21:58:33.827989 2025] [:error] [pid 11812:tid 11823] [client 85.203.21.208:20729] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/public_html/shell.php"] [unique_id "aUqgCbBkIQ4nTXm4A3UrDgAAAIk"]
[Tue Dec 23 21:58:34.232812 2025] [:error] [pid 25976:tid 25978] [client 85.203.21.168:35735] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/site/admin.php"] [unique_id "aUqgCrF6LaWzQScE-xON_gAAAQA"]
[Tue Dec 23 21:58:34.629675 2025] [:error] [pid 25976:tid 25996] [client 85.203.21.195:44453] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/webroot/admin.php"] [unique_id "aUqgCrF6LaWzQScE-xOOAAAAARI"]
[Tue Dec 23 21:58:35.036432 2025] [:error] [pid 25976:tid 25984] [client 85.203.21.161:32633] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/www/shell.php"] [unique_id "aUqgC7F6LaWzQScE-xOOAgAAAQY"]
[Tue Dec 23 21:58:35.427601 2025] [:error] [pid 25976:tid 25988] [client 85.203.21.239:36375] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/html/admin.php"] [unique_id "aUqgC7F6LaWzQScE-xOOBAAAAQo"]
[Tue Dec 23 21:58:35.798714 2025] [:error] [pid 54375:tid 54399] [client 85.203.21.222:55753] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes2/blocks/column/"] [unique_id "aUqgC51Yro3O5R2WY-B_AQAAAlY"]
[Tue Dec 23 21:58:36.162245 2025] [:error] [pid 3404:tid 3433] [client 85.203.21.183:59703] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/uploads/dynamic_avia/"] [unique_id "aUqgDMJGbPWZNlrhVJdjbQAAAdg"]
[Tue Dec 23 21:58:36.540253 2025] [:error] [pid 54408:tid 54427] [client 85.203.21.227:33975] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aUqgDGup4YbWx_MWvp1k1wAAApA"]
[Tue Dec 23 21:58:36.897465 2025] [:error] [pid 11812:tid 11834] [client 85.203.21.156:41065] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/let.php"] [unique_id "aUqgDLBkIQ4nTXm4A3UrFAAAAJQ"]
[Tue Dec 23 21:58:37.245600 2025] [:error] [pid 11812:tid 11832] [client 85.203.21.192:59433] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aUqgDbBkIQ4nTXm4A3UrFQAAAJI"]
[Tue Dec 23 21:58:37.597711 2025] [:error] [pid 25976:tid 25990] [client 85.203.21.161:24979] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/areak/areak1.php"] [unique_id "aUqgDbF6LaWzQScE-xOOCAAAAQw"]
[Tue Dec 23 21:58:37.952871 2025] [:error] [pid 25976:tid 25987] [client 85.203.21.222:37969] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/11.php"] [unique_id "aUqgDbF6LaWzQScE-xOOCQAAAQk"]
[Tue Dec 23 21:58:38.322504 2025] [:error] [pid 25976:tid 25978] [client 193.37.32.2:48311] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dpsnv/classes/font/"] [unique_id "aUqgDrF6LaWzQScE-xOOCwAAAQA"]
[Tue Dec 23 21:58:38.671991 2025] [:error] [pid 3405:tid 3447] [client 85.203.21.221:23877] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUqgDrdHHpIDpQ39rwlW5wAAAAo"]
[Tue Dec 23 21:58:39.024640 2025] [:error] [pid 54408:tid 54419] [client 85.203.21.222:53061] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aUqgD2up4YbWx_MWvp1k4gAAAog"]
[Tue Dec 23 21:58:39.393567 2025] [:error] [pid 54408:tid 54428] [client 85.203.21.192:38233] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aUqgD2up4YbWx_MWvp1k5AAAApE"]
[Tue Dec 23 21:58:39.774851 2025] [:error] [pid 54408:tid 54434] [client 85.203.21.157:29223] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aUqgD2up4YbWx_MWvp1k5QAAApc"]
[Tue Dec 23 21:58:40.153600 2025] [:error] [pid 3404:tid 3424] [client 85.203.21.202:20529] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aUqgEMJGbPWZNlrhVJdjcgAAAc8"]
[Tue Dec 23 21:58:40.617799 2025] [:error] [pid 54375:tid 54383] [client 85.203.21.160:51835] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aUqgEJ1Yro3O5R2WY-B_CwAAAkY"]
[Tue Dec 23 21:58:40.996049 2025] [:error] [pid 3404:tid 3419] [client 85.203.21.190:26491] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aUqgEMJGbPWZNlrhVJdjdwAAAco"]
[Tue Dec 23 21:58:41.358810 2025] [:error] [pid 3405:tid 3461] [client 85.203.21.41:60759] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aUqgEbdHHpIDpQ39rwlW6QAAABg"]
[Tue Dec 23 21:58:41.727145 2025] [:error] [pid 3405:tid 3439] [client 85.203.21.221:34173] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/themes/wp-cron.php"] [unique_id "aUqgEbdHHpIDpQ39rwlW6gAAAAI"]
[Tue Dec 23 21:58:42.141564 2025] [:error] [pid 3405:tid 3437] [client 85.203.21.156:22485] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/cover/cover/theme-footer.php"] [unique_id "aUqgErdHHpIDpQ39rwlW7AAAAAA"]
[Tue Dec 23 21:58:42.558193 2025] [:error] [pid 11812:tid 11827] [client 85.203.21.162:53451] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/latest-posts/latest-posts/faq-builder.php"] [unique_id "aUqgErBkIQ4nTXm4A3UrHQAAAI0"]
[Tue Dec 23 21:58:42.986039 2025] [:error] [pid 3405:tid 3441] [client 85.203.21.164:41891] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aUqgErdHHpIDpQ39rwlW8AAAAAQ"]
[Tue Dec 23 21:58:43.408781 2025] [:error] [pid 3405:tid 3458] [client 85.203.21.227:37035] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/algovge.php"] [unique_id "aUqgE7dHHpIDpQ39rwlW9AAAABU"]
[Tue Dec 23 21:58:43.822720 2025] [:error] [pid 54408:tid 54420] [client 85.203.21.239:41457] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/klex.php"] [unique_id "aUqgE2up4YbWx_MWvp1k5wAAAok"]
[Tue Dec 23 21:58:44.219203 2025] [:error] [pid 3405:tid 3461] [client 85.203.21.228:32035] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/datate.php"] [unique_id "aUqgFLdHHpIDpQ39rwlW9wAAABg"]
[Tue Dec 23 21:58:44.624320 2025] [:error] [pid 3405:tid 3439] [client 85.203.21.184:31459] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/alfa.php"] [unique_id "aUqgFLdHHpIDpQ39rwlW-QAAAAI"]
[Tue Dec 23 21:58:45.045157 2025] [:error] [pid 54297:tid 54324] [client 85.203.21.192:21905] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/zczv.php"] [unique_id "aUqgFUZMNime0caoKPKv3wAAAZc"]
[Tue Dec 23 21:58:45.455886 2025] [:error] [pid 3405:tid 3451] [client 85.203.21.202:20175] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-speed.php"] [unique_id "aUqgFbdHHpIDpQ39rwlW_AAAAA4"]
[Tue Dec 23 21:58:45.874365 2025] [:error] [pid 54408:tid 54419] [client 85.203.21.223:60753] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/tx1.php"] [unique_id "aUqgFWup4YbWx_MWvp1k6QAAAog"]
[Tue Dec 23 21:58:46.270877 2025] [:error] [pid 11812:tid 11828] [client 85.203.21.192:38509] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-classic-editor.php"] [unique_id "aUqgFrBkIQ4nTXm4A3UrIAAAAI4"]
[Tue Dec 23 21:58:46.672502 2025] [:error] [pid 3405:tid 3445] [client 85.203.21.155:31025] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ox.php"] [unique_id "aUqgFrdHHpIDpQ39rwlW_QAAAAg"]
[Tue Dec 23 21:58:47.082642 2025] [:error] [pid 3404:tid 3422] [client 85.203.21.232:22819] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-error.php"] [unique_id "aUqgF8JGbPWZNlrhVJdjgAAAAc0"]
[Tue Dec 23 21:58:47.475647 2025] [:error] [pid 3404:tid 3421] [client 85.203.21.45:46095] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aUqgF8JGbPWZNlrhVJdjgQAAAcw"]
[Tue Dec 23 21:58:47.945903 2025] [:error] [pid 11812:tid 11816] [client 85.203.21.45:33249] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/templates/xex.php"] [unique_id "aUqgF7BkIQ4nTXm4A3UrIQAAAII"]
[Tue Dec 23 21:58:48.359381 2025] [:error] [pid 3405:tid 3450] [client 85.203.21.167:62291] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUqgGLdHHpIDpQ39rwlW_gAAAA0"]
[Tue Dec 23 21:58:48.803035 2025] [:error] [pid 3405:tid 3454] [client 193.37.32.3:56013] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/themes.php"] [unique_id "aUqgGLdHHpIDpQ39rwlXAAAAABE"]
[Tue Dec 23 21:58:49.239131 2025] [:error] [pid 3405:tid 3461] [client 85.203.21.193:58421] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUqgGbdHHpIDpQ39rwlXAQAAABg"]
[Tue Dec 23 21:58:49.638127 2025] [:error] [pid 3405:tid 3439] [client 85.203.21.168:50203] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aUqgGbdHHpIDpQ39rwlXAgAAAAI"]
[Tue Dec 23 21:58:50.033278 2025] [:error] [pid 3405:tid 3442] [client 85.203.21.208:26027] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aUqgGrdHHpIDpQ39rwlXBQAAAAU"]
[Tue Dec 23 21:58:50.401850 2025] [:error] [pid 3405:tid 3437] [client 85.203.21.184:32593] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aUqgGrdHHpIDpQ39rwlXCAAAAAA"]
[Tue Dec 23 21:58:50.768116 2025] [:error] [pid 25976:tid 25984] [client 85.203.21.195:56845] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/locks.php"] [unique_id "aUqgGrF6LaWzQScE-xOOFQAAAQY"]
[Tue Dec 23 21:58:51.143747 2025] [:error] [pid 25976:tid 25979] [client 85.203.21.195:22799] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/locks.php"] [unique_id "aUqgG7F6LaWzQScE-xOOFwAAAQE"]
[Tue Dec 23 21:58:51.516311 2025] [:error] [pid 54340:tid 54342] [client 85.203.21.227:46007] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aUqgG5ye8-oij4iGhog0XwAAAgA"]
[Tue Dec 23 21:58:51.900807 2025] [:error] [pid 25976:tid 25997] [client 85.203.21.161:64293] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/onXRoy.php"] [unique_id "aUqgG7F6LaWzQScE-xOOGQAAARM"]
[Tue Dec 23 21:58:52.283429 2025] [:error] [pid 11812:tid 11837] [client 85.203.21.210:42641] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/checker/wsa.php"] [unique_id "aUqgHLBkIQ4nTXm4A3UrJQAAAJc"]
[Tue Dec 23 21:58:52.677099 2025] [:error] [pid 54340:tid 54357] [client 85.203.21.221:29559] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/Contrller.php"] [unique_id "aUqgHJye8-oij4iGhog0YAAAAg8"]
[Tue Dec 23 21:58:53.068522 2025] [:error] [pid 3497:tid 3507] [client 85.203.21.226:33219] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/goup.php"] [unique_id "aUqgHezUE6hZ8LJecSsqlQAAAMc"]
[Tue Dec 23 21:58:53.467341 2025] [:error] [pid 25976:tid 25982] [client 85.203.21.228:58395] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-super-cache/partials/about.php"] [unique_id "aUqgHbF6LaWzQScE-xOOHAAAAQQ"]
[Tue Dec 23 21:58:53.855798 2025] [:error] [pid 3497:tid 3502] [client 85.203.21.161:46229] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aUqgHezUE6hZ8LJecSsqlwAAAMI"]
[Tue Dec 23 21:58:54.253436 2025] [:error] [pid 3497:tid 3521] [client 85.203.21.195:61961] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aUqgHuzUE6hZ8LJecSsqmgAAANU"]
[Tue Dec 23 21:58:54.633122 2025] [:error] [pid 3404:tid 3424] [client 85.203.21.238:46265] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/hex.php"] [unique_id "aUqgHsJGbPWZNlrhVJdjhwAAAc8"]
[Tue Dec 23 21:58:55.015279 2025] [:error] [pid 3405:tid 3443] [client 85.203.21.164:53123] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/buttons/about.php"] [unique_id "aUqgH7dHHpIDpQ39rwlXCgAAAAY"]
[Tue Dec 23 21:58:55.403019 2025] [:error] [pid 3497:tid 3508] [client 85.203.21.232:59265] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/xddqann/"] [unique_id "aUqgH-zUE6hZ8LJecSsqmwAAAMg"]
[Tue Dec 23 21:58:55.792249 2025] [:error] [pid 3405:tid 3451] [client 85.203.21.197:64149] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/locks.php"] [unique_id "aUqgH7dHHpIDpQ39rwlXDQAAAA4"]
[Tue Dec 23 21:58:56.176172 2025] [:error] [pid 54408:tid 54429] [client 85.203.21.223:31763] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/tetracl/"] [unique_id "aUqgIGup4YbWx_MWvp1k7QAAApI"]
[Tue Dec 23 21:58:56.535329 2025] [:error] [pid 11812:tid 11818] [client 85.203.21.188:49219] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aUqgILBkIQ4nTXm4A3UrKQAAAIQ"]
[Tue Dec 23 21:58:56.892923 2025] [:error] [pid 54297:tid 54317] [client 85.203.21.208:23219] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function/test.php"] [unique_id "aUqgIEZMNime0caoKPKv4gAAAZA"]
[Tue Dec 23 21:58:57.248187 2025] [:error] [pid 54375:tid 54392] [client 85.203.21.222:29485] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/connect-polylang-elementor/includes/locks.php"] [unique_id "aUqgIZ1Yro3O5R2WY-B_DQAAAk8"]
[Tue Dec 23 21:58:57.596783 2025] [:error] [pid 3405:tid 3440] [client 85.203.21.197:48869] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/twentytwentyfive/locks.php"] [unique_id "aUqgIbdHHpIDpQ39rwlXEAAAAAM"]
[Tue Dec 23 21:58:57.962637 2025] [:error] [pid 3405:tid 3461] [client 85.203.21.161:29283] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aUqgIbdHHpIDpQ39rwlXEgAAABg"]
[Tue Dec 23 21:58:58.323982 2025] [:error] [pid 54297:tid 54301] [client 85.203.21.213:57245] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/george-lois-wpcom/t.php"] [unique_id "aUqgIkZMNime0caoKPKv5AAAAYA"]
[Tue Dec 23 21:58:58.673169 2025] [:error] [pid 3405:tid 3457] [client 85.203.21.222:20085] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp_helper_hzkys/shell.php"] [unique_id "aUqgIrdHHpIDpQ39rwlXFgAAABQ"]
[Tue Dec 23 21:58:59.033693 2025] [:error] [pid 3405:tid 3460] [client 85.203.21.57:51463] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/nux.php"] [unique_id "aUqgI7dHHpIDpQ39rwlXFwAAABc"]
[Tue Dec 23 21:58:59.394453 2025] [:error] [pid 3405:tid 3438] [client 85.203.21.172:41219] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/foter.php"] [unique_id "aUqgI7dHHpIDpQ39rwlXGgAAAAE"]
[Tue Dec 23 21:58:59.768131 2025] [:error] [pid 54340:tid 54354] [client 85.203.21.176:43657] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/cache/et/"] [unique_id "aUqgI5ye8-oij4iGhog0YgAAAgw"]
[Tue Dec 23 21:59:00.135663 2025] [:error] [pid 54375:tid 54387] [client 85.203.21.222:64781] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/amp/assets/images/about.php"] [unique_id "aUqgJJ1Yro3O5R2WY-B_DgAAAko"]
[Tue Dec 23 21:59:00.516018 2025] [:error] [pid 25976:tid 25992] [client 85.203.21.213:22095] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/rstsgd.php"] [unique_id "aUqgJLF6LaWzQScE-xOOHQAAAQ4"]
[Tue Dec 23 21:59:00.950164 2025] [:error] [pid 54375:tid 54396] [client 85.203.21.168:35177] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/alf.php"] [unique_id "aUqgJJ1Yro3O5R2WY-B_DwAAAlM"]
[Tue Dec 23 21:59:01.361792 2025] [:error] [pid 3497:tid 3502] [client 85.203.21.206:47533] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUqgJezUE6hZ8LJecSsqoAAAAMI"]
[Tue Dec 23 21:59:01.756664 2025] [:error] [pid 3405:tid 3461] [client 85.203.21.227:21691] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/prayer_intentions.php"] [unique_id "aUqgJbdHHpIDpQ39rwlXHQAAABg"]
[Tue Dec 23 21:59:02.147190 2025] [:error] [pid 3404:tid 3430] [client 85.203.21.190:50997] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Cookie/"] [unique_id "aUqgJsJGbPWZNlrhVJdjiAAAAdU"]
[Tue Dec 23 21:59:02.548128 2025] [:error] [pid 54375:tid 54388] [client 193.37.32.2:23661] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ufbngowues/main.php"] [unique_id "aUqgJp1Yro3O5R2WY-B_EAAAAks"]
[Tue Dec 23 21:59:02.959190 2025] [:error] [pid 3404:tid 3421] [client 85.203.21.232:45201] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dup-installer/tmp/src/"] [unique_id "aUqgJsJGbPWZNlrhVJdjiQAAAcw"]
[Tue Dec 23 21:59:03.358739 2025] [:error] [pid 54297:tid 54316] [client 85.203.21.54:37525] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dup-installer/templates/import-base/pages-parts/step4/"] [unique_id "aUqgJ0ZMNime0caoKPKv5QAAAY8"]
[Tue Dec 23 21:59:03.761272 2025] [:error] [pid 54375:tid 54377] [client 85.203.21.52:41361] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dup-installer/wp-includes/js/tinymce/skins/lightgray/fonts/cm8odl/aunvr.php"] [unique_id "aUqgJ51Yro3O5R2WY-B_EQAAAkA"]
[Tue Dec 23 21:59:04.163941 2025] [:error] [pid 3405:tid 3437] [client 85.203.21.207:39271] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dup-installer/wp-includes/css/dist/patterns/"] [unique_id "aUqgKLdHHpIDpQ39rwlXIAAAAAA"]
[Tue Dec 23 21:59:04.563493 2025] [:error] [pid 3405:tid 3449] [client 193.37.32.1:30259] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dup-installer/wp-includes/blocks/post-author-biography/"] [unique_id "aUqgKLdHHpIDpQ39rwlXIgAAAAw"]
[Tue Dec 23 21:59:04.977105 2025] [:error] [pid 3404:tid 3417] [client 85.203.21.197:51099] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dup-installer/wp-content/et-cache/fr_FR/"] [unique_id "aUqgKMJGbPWZNlrhVJdjjAAAAcg"]
[Tue Dec 23 21:59:05.379394 2025] [:error] [pid 3404:tid 3433] [client 85.203.21.178:28597] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dup-installer/wp-content/themes/Divi/includes/widgets/"] [unique_id "aUqgKcJGbPWZNlrhVJdjjgAAAdg"]
[Tue Dec 23 21:59:05.780578 2025] [:error] [pid 54297:tid 54307] [client 85.203.21.204:45279] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/new.php"] [unique_id "aUqgKUZMNime0caoKPKv6QAAAYY"]
[Tue Dec 23 21:59:06.171620 2025] [:error] [pid 3497:tid 3506] [client 85.203.21.57:42091] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aUqgKuzUE6hZ8LJecSsqogAAAMY"]
[Tue Dec 23 21:59:06.580523 2025] [:error] [pid 54408:tid 54426] [client 85.203.21.159:27007] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aUqgKmup4YbWx_MWvp1k8AAAAo8"]
[Tue Dec 23 21:59:07.016215 2025] [:error] [pid 3404:tid 3409] [client 85.203.21.235:43931] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aUqgK8JGbPWZNlrhVJdjkgAAAcA"]
[Tue Dec 23 21:59:07.417710 2025] [:error] [pid 54297:tid 54325] [client 85.203.21.239:62773] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aUqgK0ZMNime0caoKPKv7AAAAZg"]
[Tue Dec 23 21:59:07.810783 2025] [:error] [pid 3405:tid 3461] [client 85.203.21.41:35917] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/target/admin/"] [unique_id "aUqgK7dHHpIDpQ39rwlXJAAAABg"]
[Tue Dec 23 21:59:08.201185 2025] [:error] [pid 3497:tid 3501] [client 85.203.21.155:62881] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/dt-the7/inc/mods/mod-woocommerce/assets/"] [unique_id "aUqgLOzUE6hZ8LJecSsqowAAAME"]
[Tue Dec 23 21:59:08.591744 2025] [:error] [pid 11812:tid 11820] [client 85.203.21.52:43209] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aUqgLLBkIQ4nTXm4A3UrLQAAAIY"]
[Tue Dec 23 21:59:09.001577 2025] [:error] [pid 54375:tid 54378] [client 85.203.21.162:35423] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/junkfood/mainhack.php"] [unique_id "aUqgLZ1Yro3O5R2WY-B_GAAAAkE"]
[Tue Dec 23 21:59:09.388351 2025] [:error] [pid 3404:tid 3424] [client 193.37.32.1:31449] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/maks.php"] [unique_id "aUqgLcJGbPWZNlrhVJdjlQAAAc8"]
[Tue Dec 23 21:59:09.787186 2025] [:error] [pid 3406:tid 3464] [client 85.203.21.164:41687] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aUqgLfn8DLWxW7TPzpHzrQAAAEA"]
[Tue Dec 23 21:59:10.164782 2025] [:error] [pid 3405:tid 3455] [client 85.203.21.57:39627] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "aUqgLrdHHpIDpQ39rwlXJwAAABI"]
[Tue Dec 23 21:59:10.538015 2025] [:error] [pid 3406:tid 3474] [client 85.203.21.239:26695] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/maintenance.php"] [unique_id "aUqgLvn8DLWxW7TPzpHzrwAAAEo"]
[Tue Dec 23 21:59:10.906247 2025] [:error] [pid 11812:tid 11827] [client 85.203.21.57:35627] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/file_folder_manager.php"] [unique_id "aUqgLrBkIQ4nTXm4A3UrLwAAAI0"]
[Tue Dec 23 21:59:13.638392 2025] [:error] [pid 11812:tid 11819] [client 85.203.21.58:25665] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp.php"] [unique_id "aUqgMbBkIQ4nTXm4A3UrMgAAAIU"]
[Tue Dec 23 21:59:14.084921 2025] [:error] [pid 54408:tid 54414] [client 85.203.21.197:64785] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/cheka.php"] [unique_id "aUqgMmup4YbWx_MWvp1k-wAAAoM"]
[Tue Dec 23 21:59:14.513383 2025] [:error] [pid 54375:tid 54396] [client 85.203.21.202:53463] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dgzax.php"] [unique_id "aUqgMp1Yro3O5R2WY-B_HAAAAlM"]
[Tue Dec 23 21:59:14.950590 2025] [:error] [pid 3404:tid 3427] [client 85.203.21.193:30137] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/Contrller.php"] [unique_id "aUqgMsJGbPWZNlrhVJdjlwAAAdI"]
[Tue Dec 23 21:59:15.392249 2025] [:error] [pid 3405:tid 3449] [client 85.203.21.54:27973] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aUqgM7dHHpIDpQ39rwlXKQAAAAw"]
[Tue Dec 23 21:59:15.825395 2025] [:error] [pid 11812:tid 11831] [client 85.203.21.54:27207] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/search/just2.php"] [unique_id "aUqgM7BkIQ4nTXm4A3UrNQAAAJE"]
[Tue Dec 23 21:59:16.269195 2025] [:error] [pid 54375:tid 54385] [client 85.203.21.213:59999] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/tag-cloud/admin.php"] [unique_id "aUqgNJ1Yro3O5R2WY-B_HgAAAkg"]
[Tue Dec 23 21:59:16.669370 2025] [:error] [pid 11812:tid 11829] [client 85.203.21.162:56441] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aUqgNLBkIQ4nTXm4A3UrNgAAAI8"]
[Tue Dec 23 21:59:17.066135 2025] [:error] [pid 54375:tid 54400] [client 85.203.21.188:38351] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/prv8.php"] [unique_id "aUqgNZ1Yro3O5R2WY-B_HwAAAlc"]
[Tue Dec 23 21:59:17.450644 2025] [:error] [pid 54408:tid 54427] [client 85.203.21.54:49681] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/class-json.php"] [unique_id "aUqgNWup4YbWx_MWvp1lDAAAApA"]
[Tue Dec 23 21:59:17.840970 2025] [:error] [pid 3406:tid 3483] [client 85.203.21.188:41525] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aUqgNfn8DLWxW7TPzpHzswAAAFM"]
[Tue Dec 23 21:59:18.226300 2025] [:error] [pid 11812:tid 11836] [client 85.203.21.239:28621] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dxkmb/"] [unique_id "aUqgNrBkIQ4nTXm4A3UrOQAAAJY"]
[Tue Dec 23 21:59:18.621065 2025] [:error] [pid 3404:tid 3415] [client 85.203.21.197:40395] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aUqgNsJGbPWZNlrhVJdjmwAAAcY"]
[Tue Dec 23 21:59:19.000436 2025] [:error] [pid 3406:tid 3469] [client 85.203.21.161:57507] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aUqgNvn8DLWxW7TPzpHztQAAAEU"]
[Tue Dec 23 21:59:19.447431 2025] [:error] [pid 54340:tid 54357] [client 85.203.21.208:51181] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aUqgN5ye8-oij4iGhog0bAAAAg8"]
[Tue Dec 23 21:59:19.851780 2025] [:error] [pid 3404:tid 3416] [client 85.203.21.193:23117] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aUqgN8JGbPWZNlrhVJdjnQAAAcc"]
[Tue Dec 23 21:59:20.266601 2025] [:error] [pid 3404:tid 3422] [client 85.203.21.160:28351] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aUqgOMJGbPWZNlrhVJdjngAAAc0"]
[Tue Dec 23 21:59:20.673589 2025] [:error] [pid 11812:tid 11829] [client 85.203.21.183:53343] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/mabar88/inc/compatibility/learndash/customizer/sections/layout/lock.php"] [unique_id "aUqgOLBkIQ4nTXm4A3UrRwAAAI8"]
[Tue Dec 23 21:59:21.104536 2025] [:error] [pid 11812:tid 11816] [client 85.203.21.193:57353] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aUqgObBkIQ4nTXm4A3UrSAAAAII"]
[Tue Dec 23 21:59:21.540387 2025] [:error] [pid 54297:tid 54308] [client 85.203.21.207:25263] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/mcyru/alfa_asli.php"] [unique_id "aUqgOUZMNime0caoKPKv7wAAAYc"]
[Tue Dec 23 21:59:21.959342 2025] [:error] [pid 25976:tid 25991] [client 85.203.21.228:57497] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-terms/vx.php"] [unique_id "aUqgObF6LaWzQScE-xOOIAAAAQ0"]
[Tue Dec 23 21:59:22.362505 2025] [:error] [pid 3406:tid 3486] [client 85.203.21.226:35543] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "aUqgOvn8DLWxW7TPzpHztgAAAFY"]
[Tue Dec 23 21:59:22.755605 2025] [:error] [pid 3404:tid 3433] [client 85.203.21.204:38647] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aUqgOsJGbPWZNlrhVJdjogAAAdg"]
[Tue Dec 23 21:59:23.173052 2025] [:error] [pid 3404:tid 3418] [client 85.203.21.156:35775] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includesdgfsa/Text/Diff/"] [unique_id "aUqgO8JGbPWZNlrhVJdjpAAAAck"]
[Tue Dec 23 21:59:23.596142 2025] [:error] [pid 3404:tid 3409] [client 85.203.21.178:59743] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/eflhedn/"] [unique_id "aUqgO8JGbPWZNlrhVJdjpgAAAcA"]
[Tue Dec 23 21:59:24.002451 2025] [:error] [pid 11812:tid 11823] [client 85.203.21.202:61059] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aUqgPLBkIQ4nTXm4A3UrSgAAAIk"]
[Tue Dec 23 21:59:24.434477 2025] [:error] [pid 11812:tid 11835] [client 85.203.21.188:39669] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/ryan/admin/main/inc/callbacks/sanitize_callback/select_faicons/lock.php"] [unique_id "aUqgPLBkIQ4nTXm4A3UrSwAAAJU"]
[Tue Dec 23 21:59:24.846630 2025] [:error] [pid 3406:tid 3488] [client 85.203.21.235:43559] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/prv8.php"] [unique_id "aUqgPPn8DLWxW7TPzpHzuAAAAFg"]
[Tue Dec 23 21:59:25.222343 2025] [:error] [pid 3405:tid 3442] [client 85.203.21.195:48067] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/mapiezRi.php"] [unique_id "aUqgPbdHHpIDpQ39rwlXKwAAAAU"]
[Tue Dec 23 21:59:25.613706 2025] [:error] [pid 3405:tid 3447] [client 85.203.21.232:56629] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/royal-elementor-addons/modules/theme-builder/post-navigation/widgets/lock.php"] [unique_id "aUqgPbdHHpIDpQ39rwlXMAAAAAo"]
[Tue Dec 23 21:59:26.011903 2025] [:error] [pid 3405:tid 3439] [client 85.203.21.208:42055] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aUqgPrdHHpIDpQ39rwlXMgAAAAI"]
[Tue Dec 23 21:59:26.384261 2025] [:error] [pid 54408:tid 54418] [client 85.203.21.157:34653] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aUqgPmup4YbWx_MWvp1lNQAAAoc"]
[Tue Dec 23 21:59:26.763660 2025] [:error] [pid 3405:tid 3437] [client 85.203.21.238:60765] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aUqgPrdHHpIDpQ39rwlXNAAAAAA"]
[Tue Dec 23 21:59:27.162493 2025] [:error] [pid 3404:tid 3411] [client 85.203.21.188:35599] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/uuj_gagal.php"] [unique_id "aUqgP8JGbPWZNlrhVJdjqQAAAcI"]
[Tue Dec 23 21:59:27.551149 2025] [:error] [pid 3404:tid 3428] [client 85.203.21.58:33319] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aUqgP8JGbPWZNlrhVJdjqgAAAdM"]
[Tue Dec 23 21:59:27.961737 2025] [:error] [pid 11812:tid 11819] [client 85.203.21.183:31445] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aUqgP7BkIQ4nTXm4A3UrTQAAAIU"]
[Tue Dec 23 21:59:28.347098 2025] [:error] [pid 3405:tid 3446] [client 85.203.21.195:58491] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pgaas/"] [unique_id "aUqgQLdHHpIDpQ39rwlXNwAAAAk"]
[Tue Dec 23 21:59:28.736369 2025] [:error] [pid 54375:tid 54387] [client 85.203.21.162:27479] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mtodm/"] [unique_id "aUqgQJ1Yro3O5R2WY-B_JQAAAko"]
[Tue Dec 23 21:59:29.134317 2025] [:error] [pid 54297:tid 54322] [client 85.203.21.58:50519] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aUqgQUZMNime0caoKPKv8wAAAZU"]
[Tue Dec 23 21:59:29.516967 2025] [:error] [pid 3405:tid 3452] [client 85.203.21.41:53889] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aUqgQbdHHpIDpQ39rwlXOgAAAA8"]
[Tue Dec 23 21:59:29.923802 2025] [:error] [pid 3497:tid 3513] [client 193.37.32.1:65155] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/codex.php"] [unique_id "aUqgQezUE6hZ8LJecSsqqgAAAM0"]
[Tue Dec 23 21:59:30.326448 2025] [:error] [pid 3497:tid 3504] [client 85.203.21.170:34155] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/codex.php"] [unique_id "aUqgQuzUE6hZ8LJecSsqqwAAAMQ"]
[Tue Dec 23 21:59:32.137805 2025] [:error] [pid 54340:tid 54358] [client 85.203.21.162:62489] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/areak1.php"] [unique_id "aUqgRJye8-oij4iGhog0cwAAAhA"]
[Tue Dec 23 21:59:32.553486 2025] [:error] [pid 54340:tid 54364] [client 85.203.21.186:59339] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/moon.php"] [unique_id "aUqgRJye8-oij4iGhog0dAAAAhY"]
[Tue Dec 23 21:59:32.945771 2025] [:error] [pid 54340:tid 54352] [client 85.203.21.161:37365] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/futurio/lib/customizer/"] [unique_id "aUqgRJye8-oij4iGhog0dgAAAgo"]
[Tue Dec 23 21:59:33.343587 2025] [:error] [pid 54340:tid 54362] [client 85.203.21.54:63021] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/class-wp-site-health-xml.php"] [unique_id "aUqgRZye8-oij4iGhog0dwAAAhQ"]
[Tue Dec 23 21:59:33.737720 2025] [:error] [pid 3405:tid 3457] [client 85.203.21.161:54663] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/ms-admin-filters-alpha.php"] [unique_id "aUqgRbdHHpIDpQ39rwlXPgAAABQ"]
[Tue Dec 23 21:59:34.152457 2025] [:error] [pid 3405:tid 3437] [client 85.203.21.232:38231] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/upload-event.php"] [unique_id "aUqgRrdHHpIDpQ39rwlXPwAAAAA"]
[Tue Dec 23 21:59:34.552174 2025] [:error] [pid 54340:tid 54365] [client 85.203.21.45:56187] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/class-IXR-client-sql.php"] [unique_id "aUqgRpye8-oij4iGhog0egAAAhc"]
[Tue Dec 23 21:59:34.954341 2025] [:error] [pid 54375:tid 54385] [client 85.203.21.172:22895] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/222.php"] [unique_id "aUqgRp1Yro3O5R2WY-B_KQAAAkg"]
[Tue Dec 23 21:59:35.369500 2025] [:error] [pid 3405:tid 3446] [client 85.203.21.207:20993] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "aUqgR7dHHpIDpQ39rwlXQAAAAAk"]
[Tue Dec 23 21:59:35.762377 2025] [:error] [pid 3406:tid 3483] [client 85.203.21.192:59987] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/require-static-blocks-add.php"] [unique_id "aUqgR_n8DLWxW7TPzpHzvQAAAFM"]
[Tue Dec 23 21:59:36.145285 2025] [:error] [pid 3406:tid 3487] [client 85.203.21.183:27253] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aUqgSPn8DLWxW7TPzpHzwgAAAFc"]
[Tue Dec 23 21:59:36.537985 2025] [:error] [pid 3406:tid 3472] [client 85.203.21.232:64931] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/post-thumbnail-template-call.php"] [unique_id "aUqgSPn8DLWxW7TPzpHzyAAAAEg"]
[Tue Dec 23 21:59:36.944705 2025] [:error] [pid 54408:tid 54430] [client 193.37.32.2:36331] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/site-logo/admin.php"] [unique_id "aUqgSGup4YbWx_MWvp1lZAAAApM"]
[Tue Dec 23 21:59:37.331179 2025] [:error] [pid 3406:tid 3468] [client 85.203.21.178:55685] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor-pro/admin.php"] [unique_id "aUqgSfn8DLWxW7TPzpHzzgAAAEQ"]
[Tue Dec 23 21:59:37.704921 2025] [:error] [pid 3405:tid 3458] [client 85.203.21.41:23861] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wc-logs/"] [unique_id "aUqgSbdHHpIDpQ39rwlXQQAAABU"]
[Tue Dec 23 21:59:38.056598 2025] [:error] [pid 3405:tid 3453] [client 85.203.21.168:58677] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/amp.php"] [unique_id "aUqgSrdHHpIDpQ39rwlXQwAAABA"]
[Tue Dec 23 21:59:38.413530 2025] [:error] [pid 3405:tid 3448] [client 85.203.21.186:31847] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/lock.php"] [unique_id "aUqgSrdHHpIDpQ39rwlXRgAAAAs"]
[Tue Dec 23 21:59:38.779296 2025] [:error] [pid 54297:tid 54309] [client 85.203.21.184:50273] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/classwithtostring.php"] [unique_id "aUqgSkZMNime0caoKPKv9AAAAYg"]
[Tue Dec 23 21:59:39.131645 2025] [:error] [pid 3404:tid 3416] [client 85.203.21.208:64853] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/file/locks.php"] [unique_id "aUqgS8JGbPWZNlrhVJdjrwAAAcc"]
[Tue Dec 23 21:59:39.485718 2025] [:error] [pid 3404:tid 3422] [client 85.203.21.193:33009] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-content/post-content/lock.php"] [unique_id "aUqgS8JGbPWZNlrhVJdjsAAAAc0"]
[Tue Dec 23 21:59:39.854451 2025] [:error] [pid 3404:tid 3413] [client 85.203.21.237:31937] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/mabar88/inc/addons/transparent-header/assets/lock.php"] [unique_id "aUqgS8JGbPWZNlrhVJdjsgAAAcQ"]
[Tue Dec 23 21:59:40.201942 2025] [:error] [pid 11812:tid 11825] [client 85.203.21.159:55717] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/about.php"] [unique_id "aUqgTLBkIQ4nTXm4A3UrTwAAAIs"]
[Tue Dec 23 21:59:40.570638 2025] [:error] [pid 3405:tid 3443] [client 85.203.21.206:36367] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUqgTLdHHpIDpQ39rwlXSAAAAAY"]
[Tue Dec 23 21:59:40.917759 2025] [:error] [pid 3406:tid 3478] [client 85.203.21.164:59997] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/images/about.php"] [unique_id "aUqgTPn8DLWxW7TPzpHz5gAAAE4"]
[Tue Dec 23 21:59:41.265510 2025] [:error] [pid 54375:tid 54395] [client 85.203.21.190:53057] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/zwz.php"] [unique_id "aUqgTZ1Yro3O5R2WY-B_KgAAAlI"]
[Tue Dec 23 21:59:41.613187 2025] [:error] [pid 54375:tid 54392] [client 193.37.32.1:48433] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-domain.php"] [unique_id "aUqgTZ1Yro3O5R2WY-B_KwAAAk8"]
[Tue Dec 23 21:59:41.960974 2025] [:error] [pid 3405:tid 3446] [client 85.203.21.155:59051] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-edit-link/admin.php"] [unique_id "aUqgTbdHHpIDpQ39rwlXTAAAAAk"]
[Tue Dec 23 21:59:42.308055 2025] [:error] [pid 3405:tid 3441] [client 85.203.21.58:22931] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/image/admin.php"] [unique_id "aUqgTrdHHpIDpQ39rwlXTQAAAAQ"]
[Tue Dec 23 21:59:42.669989 2025] [:error] [pid 3404:tid 3431] [client 85.203.21.197:23505] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wso.php"] [unique_id "aUqgTsJGbPWZNlrhVJdjtgAAAdY"]
[Tue Dec 23 21:59:43.017150 2025] [:error] [pid 3404:tid 3410] [client 85.203.21.206:37019] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css.php"] [unique_id "aUqgT8JGbPWZNlrhVJdjuAAAAcE"]
[Tue Dec 23 21:59:43.366045 2025] [:error] [pid 54297:tid 54323] [client 85.203.21.54:25251] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/ru.php"] [unique_id "aUqgT0ZMNime0caoKPKv-AAAAZY"]
[Tue Dec 23 21:59:43.715009 2025] [:error] [pid 54340:tid 54352] [client 85.203.21.170:55949] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp_helper_t46pm/shell.php"] [unique_id "aUqgT5ye8-oij4iGhog0fwAAAgo"]
[Tue Dec 23 21:59:44.062209 2025] [:error] [pid 54297:tid 54301] [client 85.203.21.192:65321] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp_helper_fpne3/shell.php"] [unique_id "aUqgUEZMNime0caoKPKv-QAAAYA"]
[Tue Dec 23 21:59:44.410726 2025] [:error] [pid 54375:tid 54391] [client 85.203.21.57:50721] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/post-duplicator/assets/js/about.php"] [unique_id "aUqgUJ1Yro3O5R2WY-B_LgAAAk4"]
[Tue Dec 23 21:59:44.763226 2025] [:error] [pid 11812:tid 11829] [client 85.203.21.217:31961] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/all-in-one-wp-migration/about.php"] [unique_id "aUqgULBkIQ4nTXm4A3UrUQAAAI8"]
[Tue Dec 23 21:59:45.108898 2025] [:error] [pid 11812:tid 11816] [client 85.203.21.197:56335] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/duplicator/src/Lite/about.php"] [unique_id "aUqgUbBkIQ4nTXm4A3UrUgAAAII"]
[Tue Dec 23 21:59:45.458809 2025] [:error] [pid 54340:tid 54349] [client 85.203.21.188:56187] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/dplay/global-templates/about.php"] [unique_id "aUqgUZye8-oij4iGhog0gQAAAgc"]
[Tue Dec 23 21:59:45.810863 2025] [:error] [pid 3405:tid 3459] [client 85.203.21.192:35297] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aUqgUbdHHpIDpQ39rwlXTwAAABY"]
[Tue Dec 23 21:59:46.178615 2025] [:error] [pid 3497:tid 3516] [client 85.203.21.184:59157] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/nux/about.php"] [unique_id "aUqgUuzUE6hZ8LJecSsqtgAAANA"]
[Tue Dec 23 21:59:46.527493 2025] [:error] [pid 25976:tid 25997] [client 85.203.21.178:53859] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/page-list/about.php"] [unique_id "aUqgUrF6LaWzQScE-xOOJwAAARM"]
[Tue Dec 23 21:59:46.876364 2025] [:error] [pid 3404:tid 3411] [client 85.203.21.45:24589] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/ahax.php"] [unique_id "aUqgUsJGbPWZNlrhVJdjuwAAAcI"]
[Tue Dec 23 21:59:47.234441 2025] [:error] [pid 3405:tid 3443] [client 85.203.21.222:28805] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/ahax.php"] [unique_id "aUqgU7dHHpIDpQ39rwlXUgAAAAY"]
[Tue Dec 23 21:59:47.608649 2025] [:error] [pid 3405:tid 3455] [client 85.203.21.192:30297] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aUqgU7dHHpIDpQ39rwlXVAAAABI"]
[Tue Dec 23 21:59:47.968391 2025] [:error] [pid 3405:tid 3441] [client 85.203.21.176:49477] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/unlimited-elements-for-elementor-premium/vendor/spucon/"] [unique_id "aUqgU7dHHpIDpQ39rwlXVQAAAAQ"]
[Tue Dec 23 21:59:48.316018 2025] [:error] [pid 3497:tid 3505] [client 85.203.21.204:23489] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aUqgVOzUE6hZ8LJecSsquAAAAMU"]
[Tue Dec 23 21:59:48.665535 2025] [:error] [pid 3497:tid 3514] [client 193.37.32.2:44631] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aUqgVOzUE6hZ8LJecSsquQAAAM4"]
[Tue Dec 23 21:59:49.012459 2025] [:error] [pid 54408:tid 54424] [client 85.203.21.208:31221] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aUqgVWup4YbWx_MWvp1lZgAAAo0"]
[Tue Dec 23 21:59:49.359272 2025] [:error] [pid 3405:tid 3442] [client 85.203.21.41:43961] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUqgVbdHHpIDpQ39rwlXVwAAAAU"]
[Tue Dec 23 21:59:49.706078 2025] [:error] [pid 3405:tid 3451] [client 85.203.21.197:47649] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aUqgVbdHHpIDpQ39rwlXWAAAAA4"]
[Tue Dec 23 21:59:50.064795 2025] [:error] [pid 3405:tid 3448] [client 85.203.21.204:27513] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "aUqgVrdHHpIDpQ39rwlXWwAAAAs"]
[Tue Dec 23 21:59:50.412374 2025] [:error] [pid 54340:tid 54358] [client 85.203.21.155:64819] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aUqgVpye8-oij4iGhog0hQAAAhA"]
[Tue Dec 23 21:59:50.762535 2025] [:error] [pid 25976:tid 25990] [client 193.37.32.1:34971] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUqgVrF6LaWzQScE-xOOKQAAAQw"]
[Tue Dec 23 21:59:51.126671 2025] [:error] [pid 11812:tid 11834] [client 85.203.21.221:34855] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aUqgV7BkIQ4nTXm4A3UrVQAAAJQ"]
[Tue Dec 23 21:59:51.483108 2025] [:error] [pid 54340:tid 54347] [client 85.203.21.183:57571] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUqgV5ye8-oij4iGhog0hwAAAgU"]
[Tue Dec 23 21:59:51.831351 2025] [:error] [pid 54340:tid 54356] [client 85.203.21.58:61593] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUqgV5ye8-oij4iGhog0iAAAAg4"]
[Tue Dec 23 21:59:52.177356 2025] [:error] [pid 54340:tid 54350] [client 85.203.21.164:59287] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/php-compat/wp-conflg.php"] [unique_id "aUqgWJye8-oij4iGhog0iQAAAgg"]
[Tue Dec 23 21:59:52.524208 2025] [:error] [pid 54297:tid 54311] [client 85.203.21.167:24507] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aUqgWEZMNime0caoKPKv_gAAAYo"]
[Tue Dec 23 21:59:52.873513 2025] [:error] [pid 54340:tid 54357] [client 85.203.21.222:55067] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aUqgWJye8-oij4iGhog0jQAAAg8"]
[Tue Dec 23 21:59:53.221263 2025] [:error] [pid 54340:tid 54351] [client 85.203.21.204:32425] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUqgWZye8-oij4iGhog0jgAAAgk"]
[Tue Dec 23 21:59:53.570938 2025] [:error] [pid 54340:tid 54342] [client 85.203.21.237:47587] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUqgWZye8-oij4iGhog0kAAAAgA"]
[Tue Dec 23 21:59:53.919815 2025] [:error] [pid 3404:tid 3429] [client 85.203.21.164:42677] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUqgWcJGbPWZNlrhVJdjvQAAAdQ"]
[Tue Dec 23 21:59:54.270281 2025] [:error] [pid 54297:tid 54310] [client 85.203.21.45:35213] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aUqgWkZMNime0caoKPKwAgAAAYk"]
[Tue Dec 23 21:59:54.618578 2025] [:error] [pid 3497:tid 3502] [client 85.203.21.190:29097] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUqgWuzUE6hZ8LJecSsqvQAAAMI"]
[Tue Dec 23 21:59:54.965407 2025] [:error] [pid 25976:tid 25983] [client 85.203.21.238:56725] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/litespeed/autoload_classmap.php"] [unique_id "aUqgWrF6LaWzQScE-xOOKwAAAQU"]
[Tue Dec 23 21:59:55.310482 2025] [:error] [pid 54297:tid 54317] [client 85.203.21.188:64621] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aUqgW0ZMNime0caoKPKwBAAAAZA"]
[Tue Dec 23 21:59:55.657950 2025] [:error] [pid 3404:tid 3414] [client 85.203.21.195:39609] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/chosen.php"] [unique_id "aUqgW8JGbPWZNlrhVJdjvgAAAcU"]
[Tue Dec 23 21:59:56.005566 2025] [:error] [pid 3405:tid 3440] [client 85.203.21.183:30511] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aUqgXLdHHpIDpQ39rwlXXwAAAAM"]
[Tue Dec 23 21:59:56.354021 2025] [:error] [pid 54408:tid 54428] [client 85.203.21.204:24849] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/page-list/"] [unique_id "aUqgXGup4YbWx_MWvp1laAAAApE"]
[Tue Dec 23 21:59:56.703233 2025] [:error] [pid 54297:tid 54301] [client 85.203.21.228:24305] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/Bypass-System.php"] [unique_id "aUqgXEZMNime0caoKPKwBgAAAYA"]
[Tue Dec 23 21:59:57.052631 2025] [:error] [pid 54297:tid 54314] [client 85.203.21.202:20531] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "aUqgXUZMNime0caoKPKwBwAAAY0"]
[Tue Dec 23 21:59:57.398812 2025] [:error] [pid 3406:tid 3477] [client 85.203.21.41:47999] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/modules/home/about.php"] [unique_id "aUqgXfn8DLWxW7TPzpH0DAAAAE0"]
[Tue Dec 23 21:59:57.767018 2025] [:error] [pid 25976:tid 25996] [client 85.203.21.161:59077] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/settings/chosen.php"] [unique_id "aUqgXbF6LaWzQScE-xOOLAAAARI"]
[Tue Dec 23 21:59:58.112158 2025] [:error] [pid 3404:tid 3421] [client 85.203.21.208:20377] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/akses.php"] [unique_id "aUqgXsJGbPWZNlrhVJdjwgAAAcw"]
[Tue Dec 23 21:59:58.473294 2025] [:error] [pid 54340:tid 54350] [client 85.203.21.156:35311] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/updated/wp-includes/rest-api/file.php"] [unique_id "aUqgXpye8-oij4iGhog0kwAAAgg"]
[Tue Dec 23 21:59:58.821191 2025] [:error] [pid 54375:tid 54377] [client 85.203.21.237:56407] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/abc.php"] [unique_id "aUqgXp1Yro3O5R2WY-B_LwAAAkA"]
[Tue Dec 23 21:59:59.182658 2025] [:error] [pid 54408:tid 54411] [client 85.203.21.222:46445] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/edit-tags.php"] [unique_id "aUqgX2up4YbWx_MWvp1lbwAAAoA"]
[Tue Dec 23 21:59:59.531710 2025] [:error] [pid 54408:tid 54414] [client 85.203.21.168:32975] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/audio/wp-conflg.php"] [unique_id "aUqgX2up4YbWx_MWvp1lcAAAAoM"]
[Tue Dec 23 22:00:01.321445 2025] [:error] [pid 11812:tid 11822] [client 85.203.21.204:41035] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aUqgYbBkIQ4nTXm4A3UrWgAAAIg"]
[Tue Dec 23 22:00:01.670532 2025] [:error] [pid 54408:tid 54423] [client 85.203.21.227:40007] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/chosen.php"] [unique_id "aUqgYWup4YbWx_MWvp1ldAAAAow"]
[Tue Dec 23 22:00:03.424371 2025] [:error] [pid 25976:tid 25984] [client 85.203.21.45:52453] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/comment-editor/about.php"] [unique_id "aUqgY7F6LaWzQScE-xOOLgAAAQY"]
[Tue Dec 23 22:00:03.778652 2025] [:error] [pid 3405:tid 3438] [client 85.203.21.227:56013] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/about.php"] [unique_id "aUqgY7dHHpIDpQ39rwlXYgAAAAE"]
[Tue Dec 23 22:00:04.144472 2025] [:error] [pid 54408:tid 54427] [client 85.203.21.206:47663] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aUqgZGup4YbWx_MWvp1leQAAApA"]
[Tue Dec 23 22:00:04.531968 2025] [:error] [pid 3404:tid 3413] [client 85.203.21.197:55111] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/dokan-child/content-"] [unique_id "aUqgZMJGbPWZNlrhVJdjxAAAAcQ"]
[Tue Dec 23 22:00:04.917393 2025] [:error] [pid 54375:tid 54385] [client 85.203.21.204:52943] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/dokan/content-"] [unique_id "aUqgZJ1Yro3O5R2WY-B_MgAAAkg"]
[Tue Dec 23 22:00:05.276414 2025] [:error] [pid 3405:tid 3455] [client 85.203.21.217:20623] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/pridmag/ot.php"] [unique_id "aUqgZbdHHpIDpQ39rwlXZQAAABI"]
[Tue Dec 23 22:00:05.636351 2025] [:error] [pid 54408:tid 54420] [client 85.203.21.160:49373] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/consultstreet/content-"] [unique_id "aUqgZWup4YbWx_MWvp1lfgAAAok"]
[Tue Dec 23 22:00:05.985448 2025] [:error] [pid 3404:tid 3428] [client 85.203.21.157:59617] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpadmin/acp.php"] [unique_id "aUqgZcJGbPWZNlrhVJdjxQAAAdM"]
[Tue Dec 23 22:00:06.338641 2025] [:error] [pid 54408:tid 54422] [client 85.203.21.156:23867] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/mu-plugins/"] [unique_id "aUqgZmup4YbWx_MWvp1lfwAAAos"]
[Tue Dec 23 22:00:06.694529 2025] [:error] [pid 3404:tid 3426] [client 193.37.32.2:20757] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/ioxi-o.php"] [unique_id "aUqgZsJGbPWZNlrhVJdjxwAAAdE"]
[Tue Dec 23 22:00:07.049324 2025] [:error] [pid 3405:tid 3452] [client 85.203.21.184:24879] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/Shell.php"] [unique_id "aUqgZ7dHHpIDpQ39rwlXaAAAAA8"]
[Tue Dec 23 22:00:07.406224 2025] [:error] [pid 54408:tid 54417] [client 85.203.21.190:64451] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/admin.php"] [unique_id "aUqgZ2up4YbWx_MWvp1lgQAAAoY"]
[Tue Dec 23 22:00:07.759656 2025] [:error] [pid 3404:tid 3409] [client 85.203.21.204:53223] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/button/adc.php"] [unique_id "aUqgZ8JGbPWZNlrhVJdjyQAAAcA"]
[Tue Dec 23 22:00:08.113096 2025] [:error] [pid 3404:tid 3410] [client 85.203.21.156:20033] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aUqgaMJGbPWZNlrhVJdjygAAAcE"]
[Tue Dec 23 22:00:08.477789 2025] [:error] [pid 54408:tid 54418] [client 85.203.21.157:64771] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/taxonomy-exception.php"] [unique_id "aUqgaGup4YbWx_MWvp1lhAAAAoc"]
[Tue Dec 23 22:00:08.855793 2025] [:error] [pid 54340:tid 54352] [client 85.203.21.170:46293] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/module.audio.dts-list.php"] [unique_id "aUqgaJye8-oij4iGhog0lwAAAgo"]
[Tue Dec 23 22:00:09.205065 2025] [:error] [pid 3404:tid 3417] [client 85.203.21.202:47369] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/options-core.php"] [unique_id "aUqgacJGbPWZNlrhVJdjzQAAAcg"]
[Tue Dec 23 22:00:09.556613 2025] [:error] [pid 54340:tid 54356] [client 85.203.21.160:27885] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/media-module.php"] [unique_id "aUqgaZye8-oij4iGhog0mAAAAg4"]
[Tue Dec 23 22:00:09.905652 2025] [:error] [pid 54408:tid 54420] [client 85.203.21.156:57083] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/css/filesss.php"] [unique_id "aUqgaWup4YbWx_MWvp1lhgAAAok"]
[Tue Dec 23 22:00:10.250733 2025] [:error] [pid 54375:tid 54395] [client 85.203.21.176:48667] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ectoplasm/moon.php"] [unique_id "aUqgap1Yro3O5R2WY-B_NgAAAlI"]
[Tue Dec 23 22:00:10.618104 2025] [:error] [pid 3404:tid 3424] [client 85.203.21.164:36707] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aUqgasJGbPWZNlrhVJdj0QAAAc8"]
[Tue Dec 23 22:00:11.012748 2025] [:error] [pid 54408:tid 54424] [client 85.203.21.207:59417] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/file-manager.phpn.com/wp-content/plugins/phpad/acp.php"] [unique_id "aUqga2up4YbWx_MWvp1lhwAAAo0"]
[Tue Dec 23 22:00:11.395056 2025] [:error] [pid 54375:tid 54397] [client 85.203.21.238:65321] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/drive.php"] [unique_id "aUqga51Yro3O5R2WY-B_NwAAAlQ"]
[Tue Dec 23 22:00:11.769811 2025] [:error] [pid 54408:tid 54435] [client 85.203.21.41:52991] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/gssdd.php"] [unique_id "aUqga2up4YbWx_MWvp1liAAAApg"]
[Tue Dec 23 22:00:12.148460 2025] [:error] [pid 54297:tid 54321] [client 85.203.21.170:35317] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/image/wp-conflg.php"] [unique_id "aUqgbEZMNime0caoKPKwDgAAAZQ"]
[Tue Dec 23 22:00:12.498223 2025] [:error] [pid 3406:tid 3468] [client 193.37.32.1:43771] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/chosen.php"] [unique_id "aUqgbPn8DLWxW7TPzpH0DwAAAEQ"]
[Tue Dec 23 22:00:12.854734 2025] [:error] [pid 3406:tid 3483] [client 85.203.21.168:58841] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aUqgbPn8DLWxW7TPzpH0EAAAAFM"]
[Tue Dec 23 22:00:13.202563 2025] [:error] [pid 3404:tid 3412] [client 85.203.21.45:60961] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/adout.php"] [unique_id "aUqgbcJGbPWZNlrhVJdj1AAAAcM"]
[Tue Dec 23 22:00:13.584676 2025] [:error] [pid 3406:tid 3473] [client 85.203.21.226:39169] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/xxfile.php"] [unique_id "aUqgbfn8DLWxW7TPzpH0EgAAAEk"]
[Tue Dec 23 22:00:13.942828 2025] [:error] [pid 11812:tid 11823] [client 85.203.21.238:60425] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/xxfile.php"] [unique_id "aUqgbbBkIQ4nTXm4A3UrXgAAAIk"]
[Tue Dec 23 22:00:14.290850 2025] [:error] [pid 11812:tid 11835] [client 85.203.21.161:48123] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/"] [unique_id "aUqgbrBkIQ4nTXm4A3UrXwAAAJU"]
[Tue Dec 23 22:00:14.643070 2025] [:error] [pid 11812:tid 11827] [client 85.203.21.168:43543] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/site-logo/"] [unique_id "aUqgbrBkIQ4nTXm4A3UrYAAAAI0"]
[Tue Dec 23 22:00:15.000517 2025] [:error] [pid 54375:tid 54388] [client 85.203.21.45:31285] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/reusable-blocks/"] [unique_id "aUqgbp1Yro3O5R2WY-B_OwAAAks"]
[Tue Dec 23 22:00:15.352065 2025] [:error] [pid 25976:tid 26002] [client 85.203.21.195:63949] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/flatsome/inc/admin/options/helpers/"] [unique_id "aUqgb7F6LaWzQScE-xOOLwAAARg"]
[Tue Dec 23 22:00:15.716331 2025] [:error] [pid 25976:tid 25992] [client 85.203.21.237:30549] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/screenshots/"] [unique_id "aUqgb7F6LaWzQScE-xOOMAAAAQ4"]
[Tue Dec 23 22:00:16.066923 2025] [:error] [pid 3405:tid 3454] [client 85.203.21.221:63697] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/zero.php"] [unique_id "aUqgcLdHHpIDpQ39rwlXagAAABE"]
[Tue Dec 23 22:00:16.415603 2025] [:error] [pid 3404:tid 3416] [client 193.37.32.3:63707] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/readme.php"] [unique_id "aUqgcMJGbPWZNlrhVJdj1gAAAcc"]
[Tue Dec 23 22:00:16.766244 2025] [:error] [pid 3497:tid 3509] [client 85.203.21.210:20081] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aUqgcOzUE6hZ8LJecSsqwAAAAMk"]
[Tue Dec 23 22:00:17.117314 2025] [:error] [pid 3497:tid 3501] [client 85.203.21.160:43315] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/lock360.php"] [unique_id "aUqgcezUE6hZ8LJecSsqwQAAAME"]
[Tue Dec 23 22:00:17.469734 2025] [:error] [pid 54408:tid 54411] [client 85.203.21.159:22023] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aUqgcWup4YbWx_MWvp1ligAAAoA"]
[Tue Dec 23 22:00:17.819060 2025] [:error] [pid 54340:tid 54363] [client 85.203.21.184:33777] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/php-compat/wp/rohmuI.php"] [unique_id "aUqgcZye8-oij4iGhog0nQAAAhU"]
[Tue Dec 23 22:00:18.166406 2025] [:error] [pid 54375:tid 54393] [client 85.203.21.204:62789] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/vx.php"] [unique_id "aUqgcp1Yro3O5R2WY-B_PQAAAlA"]
[Tue Dec 23 22:00:18.515192 2025] [:error] [pid 3406:tid 3470] [client 85.203.21.156:61183] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/2k.php"] [unique_id "aUqgcvn8DLWxW7TPzpH0FQAAAEY"]
[Tue Dec 23 22:00:18.866816 2025] [:error] [pid 54340:tid 54342] [client 85.203.21.183:49261] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ocean/wp-hidden2.php"] [unique_id "aUqgcpye8-oij4iGhog0ngAAAgA"]
[Tue Dec 23 22:00:19.229188 2025] [:error] [pid 3497:tid 3512] [client 85.203.21.239:20691] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aUqgc-zUE6hZ8LJecSsqyAAAAMw"]
[Tue Dec 23 22:00:19.577264 2025] [:error] [pid 3405:tid 3437] [client 85.203.21.197:32443] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aUqgc7dHHpIDpQ39rwlXbQAAAAA"]
[Tue Dec 23 22:00:19.923545 2025] [:error] [pid 54340:tid 54345] [client 85.203.21.195:38173] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/about.php"] [unique_id "aUqgc5ye8-oij4iGhog0nwAAAgM"]
[Tue Dec 23 22:00:20.276950 2025] [:error] [pid 54375:tid 54397] [client 85.203.21.238:26817] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "aUqgdJ1Yro3O5R2WY-B_QwAAAlQ"]
[Tue Dec 23 22:00:20.691445 2025] [:error] [pid 11812:tid 11828] [client 85.203.21.168:49049] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/styles/typography/"] [unique_id "aUqgdLBkIQ4nTXm4A3UraQAAAI4"]
[Tue Dec 23 22:00:21.041435 2025] [:error] [pid 11812:tid 11838] [client 85.203.21.235:46157] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aUqgdbBkIQ4nTXm4A3UragAAAJg"]
[Tue Dec 23 22:00:21.391342 2025] [:error] [pid 11812:tid 11823] [client 85.203.21.221:31185] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aUqgdbBkIQ4nTXm4A3UrawAAAIk"]
[Tue Dec 23 22:00:21.748981 2025] [:error] [pid 54340:tid 54360] [client 85.203.21.57:34017] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "aUqgdZye8-oij4iGhog0pAAAAhI"]
[Tue Dec 23 22:00:22.101987 2025] [:error] [pid 54340:tid 54349] [client 85.203.21.213:25163] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-directory/about.php"] [unique_id "aUqgdpye8-oij4iGhog0pwAAAgc"]
[Tue Dec 23 22:00:22.451437 2025] [:error] [pid 3497:tid 3513] [client 85.203.21.172:34781] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aUqgduzUE6hZ8LJecSsqygAAAM0"]
[Tue Dec 23 22:00:22.798281 2025] [:error] [pid 3404:tid 3412] [client 85.203.21.52:33311] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-author/about.php"] [unique_id "aUqgdsJGbPWZNlrhVJdj2QAAAcM"]
[Tue Dec 23 22:00:23.153540 2025] [:error] [pid 11812:tid 11825] [client 85.203.21.57:58581] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aUqgd7BkIQ4nTXm4A3UrbwAAAIs"]
[Tue Dec 23 22:00:23.503497 2025] [:error] [pid 54340:tid 54344] [client 85.203.21.155:34869] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aUqgd5ye8-oij4iGhog0sgAAAgI"]
[Tue Dec 23 22:00:23.853102 2025] [:error] [pid 54340:tid 54360] [client 85.203.21.188:31009] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/about.php"] [unique_id "aUqgd5ye8-oij4iGhog0tQAAAhI"]
[Tue Dec 23 22:00:25.616158 2025] [:error] [pid 54375:tid 54399] [client 85.203.21.192:40595] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/FR/wetrasesnnotarial/img/about.php"] [unique_id "aUqgeZ1Yro3O5R2WY-B_RwAAAlY"]
[Tue Dec 23 22:00:25.968887 2025] [:error] [pid 11812:tid 11823] [client 85.203.21.167:59563] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/vx.php"] [unique_id "aUqgebBkIQ4nTXm4A3UrcwAAAIk"]
[Tue Dec 23 22:00:26.319429 2025] [:error] [pid 54340:tid 54353] [client 85.203.21.206:32863] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/root.php"] [unique_id "aUqgepye8-oij4iGhog0uAAAAgs"]
[Tue Dec 23 22:00:26.671063 2025] [:error] [pid 25976:tid 25989] [client 85.203.21.235:32529] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/sss.php"] [unique_id "aUqgerF6LaWzQScE-xOOMwAAAQs"]
[Tue Dec 23 22:00:27.021740 2025] [:error] [pid 11812:tid 11837] [client 85.203.21.168:54763] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/amryr/"] [unique_id "aUqge7BkIQ4nTXm4A3UrdAAAAJc"]
[Tue Dec 23 22:00:27.375435 2025] [:error] [pid 3406:tid 3485] [client 85.203.21.223:45003] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin/3d-flipbook-dflip-lite/3d-flipbook-dflip-lite.php"] [unique_id "aUqge_n8DLWxW7TPzpH0GQAAAFU"]
[Tue Dec 23 22:00:27.729077 2025] [:error] [pid 11812:tid 11825] [client 85.203.21.176:29681] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aUqge7BkIQ4nTXm4A3UreAAAAIs"]
[Tue Dec 23 22:00:28.081611 2025] [:error] [pid 54340:tid 54345] [client 85.203.21.52:34921] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aUqgfJye8-oij4iGhog0ugAAAgM"]
[Tue Dec 23 22:00:28.436358 2025] [:error] [pid 54408:tid 54423] [client 85.203.21.54:40721] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-fmfile.php"] [unique_id "aUqgfGup4YbWx_MWvp1ljQAAAow"]
[Tue Dec 23 22:00:28.790632 2025] [:error] [pid 54408:tid 54412] [client 85.203.21.213:48047] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/aaka.php"] [unique_id "aUqgfGup4YbWx_MWvp1ljwAAAoE"]
[Tue Dec 23 22:00:29.146689 2025] [:error] [pid 11812:tid 11830] [client 85.203.21.159:45869] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aUqgfbBkIQ4nTXm4A3UregAAAJA"]
[Tue Dec 23 22:00:29.496964 2025] [:error] [pid 54340:tid 54356] [client 85.203.21.156:52705] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aUqgfZye8-oij4iGhog0vQAAAg4"]
[Tue Dec 23 22:00:29.849235 2025] [:error] [pid 3405:tid 3449] [client 85.203.21.162:48037] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/"] [unique_id "aUqgfbdHHpIDpQ39rwlXbwAAAAw"]
[Tue Dec 23 22:00:30.203615 2025] [:error] [pid 54408:tid 54434] [client 85.203.21.217:35019] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-all.php"] [unique_id "aUqgfmup4YbWx_MWvp1lkgAAApc"]
[Tue Dec 23 22:00:30.552765 2025] [:error] [pid 3497:tid 3510] [client 85.203.21.204:47153] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aUqgfuzUE6hZ8LJecSsqzAAAAMo"]
[Tue Dec 23 22:00:30.899852 2025] [:error] [pid 54375:tid 54394] [client 85.203.21.159:36955] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/m.php"] [unique_id "aUqgfp1Yro3O5R2WY-B_TQAAAlE"]
[Tue Dec 23 22:00:31.269991 2025] [:error] [pid 11812:tid 11826] [client 85.203.21.160:26159] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp/wp-admin/user/aws.php"] [unique_id "aUqgf7BkIQ4nTXm4A3UrewAAAIw"]
[Tue Dec 23 22:00:31.626103 2025] [:error] [pid 54297:tid 54302] [client 193.37.32.2:29731] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp/admin.php"] [unique_id "aUqgf0ZMNime0caoKPKwFQAAAYE"]
[Tue Dec 23 22:00:31.980900 2025] [:error] [pid 54340:tid 54357] [client 85.203.21.223:57595] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp/wp-content/plugins/peptide/peptide2.php"] [unique_id "aUqgf5ye8-oij4iGhog0vwAAAg8"]
[Tue Dec 23 22:00:32.328357 2025] [:error] [pid 11812:tid 11818] [client 85.203.21.172:61559] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp/wp-includes/"] [unique_id "aUqggLBkIQ4nTXm4A3UrfQAAAIQ"]
[Tue Dec 23 22:00:32.680528 2025] [:error] [pid 11812:tid 11827] [client 85.203.21.160:30275] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp/wp-includes/css/dist/commands/"] [unique_id "aUqggLBkIQ4nTXm4A3UrfgAAAI0"]
[Tue Dec 23 22:00:33.030799 2025] [:error] [pid 11812:tid 11831] [client 85.203.21.204:53603] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/fonts/jost/"] [unique_id "aUqggbBkIQ4nTXm4A3UrfwAAAJE"]
[Tue Dec 23 22:00:33.382931 2025] [:error] [pid 3406:tid 3473] [client 85.203.21.172:46669] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/parts/"] [unique_id "aUqggfn8DLWxW7TPzpH0HAAAAEk"]
[Tue Dec 23 22:00:33.734841 2025] [:error] [pid 54375:tid 54387] [client 85.203.21.193:62137] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/cache/all/neve_custom_layouts/blog-title/embed/"] [unique_id "aUqggZ1Yro3O5R2WY-B_UwAAAko"]
[Tue Dec 23 22:00:34.088903 2025] [:error] [pid 54375:tid 54395] [client 85.203.21.178:51539] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/cache/all/get-a-quote-for-your-trucking-business/"] [unique_id "aUqggp1Yro3O5R2WY-B_VAAAAlI"]
[Tue Dec 23 22:00:34.444945 2025] [:error] [pid 3404:tid 3432] [client 85.203.21.226:64309] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin00/css/colors/midnight/"] [unique_id "aUqggsJGbPWZNlrhVJdj3AAAAdc"]
[Tue Dec 23 22:00:34.803600 2025] [:error] [pid 54375:tid 54377] [client 85.203.21.183:49487] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/v2/itw/"] [unique_id "aUqggp1Yro3O5R2WY-B_VQAAAkA"]
[Tue Dec 23 22:00:35.217828 2025] [:error] [pid 54375:tid 54389] [client 85.203.21.192:53007] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aUqgg51Yro3O5R2WY-B_VgAAAkw"]
[Tue Dec 23 22:00:35.580534 2025] [:error] [pid 54297:tid 54305] [client 85.203.21.202:27673] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aUqgg0ZMNime0caoKPKwFgAAAYQ"]
[Tue Dec 23 22:00:35.949801 2025] [:error] [pid 54340:tid 54350] [client 193.37.32.2:61851] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aUqgg5ye8-oij4iGhog0zAAAAgg"]
[Tue Dec 23 22:00:36.318720 2025] [:error] [pid 11812:tid 11836] [client 85.203.21.160:35783] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aUqghLBkIQ4nTXm4A3UrggAAAJY"]
[Tue Dec 23 22:00:36.685330 2025] [:error] [pid 11812:tid 11816] [client 85.203.21.164:43417] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aUqghLBkIQ4nTXm4A3UrgwAAAII"]
[Tue Dec 23 22:00:37.058678 2025] [:error] [pid 54408:tid 54433] [client 85.203.21.208:43471] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aUqghWup4YbWx_MWvp1lkwAAApY"]
[Tue Dec 23 23:15:49.775265 2025] [:error] [pid 3406:tid 3467] [client 34.171.180.38:57609] [client 34.171.180.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.171.180.38, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUqyJfn8DLWxW7TPzpEAdAAAAEM"]
[Tue Dec 23 23:15:57.213173 2025] [:error] [pid 3406:tid 3485] [client 34.171.180.38:57609] [client 34.171.180.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUqyLfn8DLWxW7TPzpEAfwAAAFU"]
[Tue Dec 23 23:15:59.244730 2025] [:error] [pid 3406:tid 3472] [client 34.171.180.38:57609] [client 34.171.180.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.171.180.38, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUqyL_n8DLWxW7TPzpEAhAAAAEg"]
[Wed Dec 24 10:49:27.935738 2025] [autoindex:error] [pid 16550:tid 16553] [client 63.135.161.50:61943] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:28.166383 2025] [autoindex:error] [pid 16550:tid 16556] [client 63.135.161.50:61943] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:28.406356 2025] [autoindex:error] [pid 16550:tid 16558] [client 63.135.161.50:61943] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:28.675856 2025] [autoindex:error] [pid 16550:tid 16573] [client 63.135.161.50:61943] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 18:23:54.732817 2025] [:error] [pid 54139:tid 54156] [client 144.126.220.227:62048] [client 144.126.220.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.220.227, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aUu_OsrYCZenIDzgXuKQwAAAAQ8"]
[Wed Dec 24 18:24:08.785774 2025] [:error] [pid 54139:tid 54160] [client 144.126.220.227:62048] [client 144.126.220.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.220.227, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aUu_SMrYCZenIDzgXuKQxgAAARM"]
[Wed Dec 24 19:04:26.642498 2025] [:error] [pid 16466:tid 16482] [client 34.148.16.240:56766] [client 34.148.16.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.16.240, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUvIuru0JcuKJMjJn6wzZAAAAAw"]
[Wed Dec 24 19:04:34.028043 2025] [:error] [pid 16466:tid 16470] [client 34.148.16.240:56766] [client 34.148.16.240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUvIwru0JcuKJMjJn6wzbQAAAAA"]
[Wed Dec 24 19:04:36.275563 2025] [:error] [pid 16466:tid 16487] [client 34.148.16.240:56766] [client 34.148.16.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.16.240, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUvIxLu0JcuKJMjJn6wzcAAAABE"]
[Wed Dec 24 20:19:56.979978 2025] [:error] [pid 28405:tid 28417] [client 35.229.72.58:56914] [client 35.229.72.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.72.58, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUvabMKkTWlhmfdXFqaQOgAAAUg"]
[Wed Dec 24 20:20:05.530201 2025] [:error] [pid 28405:tid 28431] [client 35.229.72.58:56914] [client 35.229.72.58] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUvadcKkTWlhmfdXFqaQSAAAAVU"]
[Wed Dec 24 20:20:07.529025 2025] [:error] [pid 28405:tid 28424] [client 35.229.72.58:56914] [client 35.229.72.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.72.58, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aUvad8KkTWlhmfdXFqaQTQAAAU4"]
[Thu Dec 25 01:36:18.429082 2025] [authz_core:error] [pid 16341:tid 16356] [client 27.115.124.68:16775] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/simply-gallery-block/readme.txt
[Thu Dec 25 01:36:20.103342 2025] [authz_core:error] [pid 16659:tid 16724] [client 27.115.124.113:1523] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/photo-gallery/readme.txt
[Thu Dec 25 01:36:28.280213 2025] [authz_core:error] [pid 38613:tid 38689] [client 27.115.124.112:39843] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/contact-form-7/readme.txt
[Thu Dec 25 01:36:32.200821 2025] [authz_core:error] [pid 16659:tid 16721] [client 27.115.124.104:46370] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/themes/Your-Generated-Divi-child-theme-template-by-DiviCake/readme.txt
[Thu Dec 25 01:36:39.221787 2025] [authz_core:error] [pid 16341:tid 16365] [client 27.115.124.68:40761] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/themes/Divi/readme.txt
[Thu Dec 25 18:45:03.683937 2025] [:error] [pid 2996:tid 3020] [client 20.255.93.205:13413] [client 20.255.93.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.255.93.205, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aU0Vr6rrTp0EWNyhaIRMGQAAARY"]
[Thu Dec 25 18:45:05.275658 2025] [:error] [pid 2996:tid 3002] [client 20.255.93.205:13413] [client 20.255.93.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.255.93.205, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aU0VsarrTp0EWNyhaIRMHAAAAQQ"]
[Thu Dec 25 18:45:22.722943 2025] [:error] [pid 31569:tid 31587] [client 20.255.93.205:13328] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aU0VwmiSFBH7Ee_uldXT2wAAAA4"]
[Thu Dec 25 18:45:23.003412 2025] [:error] [pid 2996:tid 3018] [client 20.255.93.205:13417] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aU0Vw6rrTp0EWNyhaIRMMAAAARQ"]
[Thu Dec 25 18:45:23.265200 2025] [:error] [pid 31569:tid 31594] [client 20.255.93.205:13402] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aU0Vw2iSFBH7Ee_uldXT3gAAABU"]
[Thu Dec 25 18:45:23.526445 2025] [:error] [pid 2996:tid 3019] [client 20.255.93.205:13337] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aU0Vw6rrTp0EWNyhaIRMMgAAARU"]
[Thu Dec 25 18:45:23.791961 2025] [:error] [pid 31570:tid 31623] [client 20.255.93.205:13428] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aU0Vw2Py2DpAzW_4a2g-IwAAAFc"]
[Thu Dec 25 18:45:24.064649 2025] [:error] [pid 31569:tid 31577] [client 20.255.93.205:13335] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aU0VxGiSFBH7Ee_uldXT4AAAAAQ"]
[Thu Dec 25 18:45:24.333858 2025] [:error] [pid 31570:tid 31611] [client 20.255.93.205:13422] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aU0VxGPy2DpAzW_4a2g-JAAAAEs"]
[Thu Dec 25 18:45:24.595159 2025] [:error] [pid 31570:tid 31615] [client 20.255.93.205:13407] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aU0VxGPy2DpAzW_4a2g-JgAAAE8"]
[Thu Dec 25 18:45:24.860511 2025] [:error] [pid 2996:tid 3009] [client 20.255.93.205:13416] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aU0VxKrrTp0EWNyhaIRMNgAAAQs"]
[Thu Dec 25 18:45:25.143151 2025] [:error] [pid 31570:tid 31624] [client 20.255.93.205:13330] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aU0VxWPy2DpAzW_4a2g-KAAAAFg"]
[Thu Dec 25 18:45:25.405380 2025] [:error] [pid 2996:tid 3000] [client 20.255.93.205:13338] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aU0VxarrTp0EWNyhaIRMNwAAAQI"]
[Thu Dec 25 18:45:25.702621 2025] [:error] [pid 31571:tid 31642] [client 20.255.93.205:13313] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aU0Vxe7e_lLK2X5wU8m17AAAAI8"]
[Thu Dec 25 18:45:25.965332 2025] [:error] [pid 2996:tid 3020] [client 20.255.93.205:13317] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aU0VxarrTp0EWNyhaIRMOQAAARY"]
[Thu Dec 25 18:45:26.226978 2025] [:error] [pid 2996:tid 3008] [client 20.255.93.205:13377] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aU0VxqrrTp0EWNyhaIRMOwAAAQo"]
[Thu Dec 25 18:45:26.488714 2025] [:error] [pid 31571:tid 31645] [client 20.255.93.205:13435] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aU0Vxu7e_lLK2X5wU8m17QAAAJI"]
[Thu Dec 25 18:45:26.751165 2025] [:error] [pid 31655:tid 31668] [client 20.255.93.205:6115] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aU0VxpozPMk9HPtIJPOXJQAAAMs"]
[Thu Dec 25 18:45:27.013070 2025] [:error] [pid 31570:tid 31612] [client 20.255.93.205:13356] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aU0Vx2Py2DpAzW_4a2g-KQAAAEw"]
[Thu Dec 25 18:45:27.295561 2025] [:error] [pid 2996:tid 3015] [client 20.255.93.205:13355] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aU0Vx6rrTp0EWNyhaIRMPwAAARE"]
[Thu Dec 25 18:45:27.556632 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:13339] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aU0Vx6rrTp0EWNyhaIRMQQAAAQk"]
[Thu Dec 25 18:45:27.818628 2025] [:error] [pid 2996:tid 3010] [client 20.255.93.205:6091] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aU0Vx6rrTp0EWNyhaIRMQgAAAQw"]
[Thu Dec 25 18:45:28.097244 2025] [:error] [pid 2996:tid 3016] [client 20.255.93.205:13420] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aU0VyKrrTp0EWNyhaIRMRAAAARI"]
[Thu Dec 25 18:45:28.363040 2025] [:error] [pid 2996:tid 3006] [client 20.255.93.205:13409] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aU0VyKrrTp0EWNyhaIRMRQAAAQg"]
[Thu Dec 25 18:45:28.624407 2025] [:error] [pid 31655:tid 31666] [client 20.255.93.205:13389] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aU0VyJozPMk9HPtIJPOXJgAAAMk"]
[Thu Dec 25 18:45:28.892168 2025] [:error] [pid 31655:tid 31670] [client 20.255.93.205:13392] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aU0VyJozPMk9HPtIJPOXJwAAAM0"]
[Thu Dec 25 18:45:29.164095 2025] [:error] [pid 31570:tid 31616] [client 20.255.93.205:13432] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aU0VyWPy2DpAzW_4a2g-KgAAAFA"]
[Thu Dec 25 18:45:29.427732 2025] [:error] [pid 31571:tid 31646] [client 20.255.93.205:13379] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aU0Vye7e_lLK2X5wU8m17wAAAJM"]
[Thu Dec 25 18:45:29.693467 2025] [:error] [pid 31570:tid 31601] [client 20.255.93.205:13333] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aU0VyWPy2DpAzW_4a2g-KwAAAEE"]
[Thu Dec 25 18:45:29.955155 2025] [:error] [pid 31570:tid 31609] [client 20.255.93.205:6105] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aU0VyWPy2DpAzW_4a2g-LAAAAEk"]
[Thu Dec 25 18:45:30.222543 2025] [:error] [pid 31571:tid 31636] [client 20.255.93.205:13388] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aU0Vyu7e_lLK2X5wU8m18AAAAIk"]
[Thu Dec 25 18:45:30.491094 2025] [:error] [pid 2996:tid 3020] [client 20.255.93.205:13327] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aU0VyqrrTp0EWNyhaIRMTwAAARY"]
[Thu Dec 25 18:45:30.771608 2025] [:error] [pid 31570:tid 31600] [client 20.255.93.205:13316] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aU0VymPy2DpAzW_4a2g-LgAAAEA"]
[Thu Dec 25 18:45:31.034163 2025] [:error] [pid 31655:tid 31657] [client 20.255.93.205:13319] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aU0Vy5ozPMk9HPtIJPOXKAAAAMA"]
[Thu Dec 25 18:45:31.315237 2025] [:error] [pid 2996:tid 3015] [client 20.255.93.205:6097] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aU0Vy6rrTp0EWNyhaIRMUwAAARE"]
[Thu Dec 25 18:45:31.577609 2025] [:error] [pid 31569:tid 31586] [client 20.255.93.205:13312] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aU0Vy2iSFBH7Ee_uldXT5wAAAA0"]
[Thu Dec 25 18:45:31.842107 2025] [:error] [pid 31569:tid 31595] [client 20.255.93.205:13411] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aU0Vy2iSFBH7Ee_uldXT6AAAABY"]
[Thu Dec 25 18:45:32.104377 2025] [:error] [pid 31569:tid 31574] [client 20.255.93.205:6083] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aU0VzGiSFBH7Ee_uldXT6gAAAAE"]
[Thu Dec 25 18:45:32.365878 2025] [:error] [pid 2996:tid 2998] [client 20.255.93.205:13336] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aU0VzKrrTp0EWNyhaIRMVgAAAQA"]
[Thu Dec 25 18:45:32.653736 2025] [:error] [pid 31655:tid 31662] [client 20.255.93.205:13315] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aU0VzJozPMk9HPtIJPOXKQAAAMU"]
[Thu Dec 25 18:45:32.931278 2025] [:error] [pid 31655:tid 31679] [client 20.255.93.205:6103] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aU0VzJozPMk9HPtIJPOXKwAAANY"]
[Thu Dec 25 18:45:33.275968 2025] [:error] [pid 31569:tid 31581] [client 20.255.93.205:13368] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aU0VzWiSFBH7Ee_uldXT7QAAAAg"]
[Thu Dec 25 18:45:33.537519 2025] [:error] [pid 31569:tid 31575] [client 20.255.93.205:13406] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aU0VzWiSFBH7Ee_uldXT7gAAAAI"]
[Thu Dec 25 18:45:33.806615 2025] [:error] [pid 31570:tid 31605] [client 20.255.93.205:6081] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aU0VzWPy2DpAzW_4a2g-NAAAAEU"]
[Thu Dec 25 18:45:34.069884 2025] [:error] [pid 31571:tid 31644] [client 20.255.93.205:6094] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aU0Vzu7e_lLK2X5wU8m18gAAAJE"]
[Thu Dec 25 18:45:34.334027 2025] [:error] [pid 2996:tid 3003] [client 20.255.93.205:13384] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aU0VzqrrTp0EWNyhaIRMXAAAAQU"]
[Thu Dec 25 18:45:34.595449 2025] [:error] [pid 2996:tid 3001] [client 20.255.93.205:6107] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aU0VzqrrTp0EWNyhaIRMXQAAAQM"]
[Thu Dec 25 18:45:34.858251 2025] [:error] [pid 31570:tid 31624] [client 20.255.93.205:13437] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aU0VzmPy2DpAzW_4a2g-NQAAAFg"]
[Thu Dec 25 18:45:35.132119 2025] [:error] [pid 31570:tid 31617] [client 20.255.93.205:13429] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aU0Vz2Py2DpAzW_4a2g-NgAAAFE"]
[Thu Dec 25 18:45:35.415048 2025] [:error] [pid 2996:tid 3002] [client 20.255.93.205:13421] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aU0Vz6rrTp0EWNyhaIRMYgAAAQQ"]
[Thu Dec 25 18:45:35.691233 2025] [:error] [pid 2996:tid 3018] [client 20.255.93.205:13401] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aU0Vz6rrTp0EWNyhaIRMZwAAARQ"]
[Thu Dec 25 18:45:35.952856 2025] [:error] [pid 31569:tid 31596] [client 20.255.93.205:13415] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aU0Vz2iSFBH7Ee_uldXT8wAAABc"]
[Thu Dec 25 18:45:36.220308 2025] [:error] [pid 31569:tid 31578] [client 20.255.93.205:13331] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aU0V0GiSFBH7Ee_uldXT9AAAAAU"]
[Thu Dec 25 18:45:36.484796 2025] [:error] [pid 31569:tid 31582] [client 20.255.93.205:6111] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aU0V0GiSFBH7Ee_uldXT9QAAAAk"]
[Thu Dec 25 18:45:36.746219 2025] [:error] [pid 31569:tid 31579] [client 20.255.93.205:13323] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aU0V0GiSFBH7Ee_uldXT9gAAAAY"]
[Thu Dec 25 18:45:37.014516 2025] [:error] [pid 31571:tid 31634] [client 20.255.93.205:13314] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aU0V0e7e_lLK2X5wU8m19AAAAIc"]
[Thu Dec 25 18:45:37.315330 2025] [:error] [pid 31569:tid 31584] [client 20.255.93.205:13436] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aU0V0WiSFBH7Ee_uldXT9wAAAAs"]
[Thu Dec 25 18:45:37.581087 2025] [:error] [pid 31569:tid 31586] [client 20.255.93.205:6114] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aU0V0WiSFBH7Ee_uldXT-QAAAA0"]
[Thu Dec 25 18:45:37.842032 2025] [:error] [pid 31569:tid 31593] [client 20.255.93.205:13344] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aU0V0WiSFBH7Ee_uldXT-wAAABQ"]
[Thu Dec 25 18:45:38.106187 2025] [:error] [pid 31571:tid 31633] [client 20.255.93.205:6080] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aU0V0u7e_lLK2X5wU8m19QAAAIY"]
[Thu Dec 25 18:45:38.370823 2025] [:error] [pid 2996:tid 3022] [client 20.255.93.205:13430] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aU0V0qrrTp0EWNyhaIRMawAAARg"]
[Thu Dec 25 18:45:38.647809 2025] [:error] [pid 2996:tid 3021] [client 20.255.93.205:13360] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aU0V0qrrTp0EWNyhaIRMbQAAARc"]
[Thu Dec 25 18:45:38.932749 2025] [:error] [pid 31571:tid 31643] [client 20.255.93.205:6085] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aU0V0u7e_lLK2X5wU8m19gAAAJA"]
[Thu Dec 25 18:45:39.199606 2025] [:error] [pid 31571:tid 31650] [client 20.255.93.205:13365] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aU0V0-7e_lLK2X5wU8m1-AAAAJc"]
[Thu Dec 25 18:45:39.461181 2025] [:error] [pid 31571:tid 31647] [client 20.255.93.205:13418] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aU0V0-7e_lLK2X5wU8m1-QAAAJQ"]
[Thu Dec 25 18:45:39.723597 2025] [:error] [pid 31570:tid 31612] [client 20.255.93.205:13372] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aU0V02Py2DpAzW_4a2g-OAAAAEw"]
[Thu Dec 25 18:45:39.994891 2025] [:error] [pid 2996:tid 3003] [client 20.255.93.205:13332] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aU0V06rrTp0EWNyhaIRMbwAAAQU"]
[Thu Dec 25 18:45:40.256585 2025] [:error] [pid 2996:tid 3001] [client 20.255.93.205:13324] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aU0V1KrrTp0EWNyhaIRMcAAAAQM"]
[Thu Dec 25 18:45:40.530325 2025] [:error] [pid 31570:tid 31613] [client 20.255.93.205:13322] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aU0V1GPy2DpAzW_4a2g-OgAAAE0"]
[Thu Dec 25 18:45:40.796429 2025] [:error] [pid 31570:tid 31601] [client 20.255.93.205:6106] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aU0V1GPy2DpAzW_4a2g-OwAAAEE"]
[Thu Dec 25 18:45:41.064648 2025] [:error] [pid 31571:tid 31632] [client 20.255.93.205:13395] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aU0V1e7e_lLK2X5wU8m1-gAAAIU"]
[Thu Dec 25 18:45:41.330268 2025] [:error] [pid 31570:tid 31607] [client 20.255.93.205:6096] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aU0V1WPy2DpAzW_4a2g-PAAAAEc"]
[Thu Dec 25 18:45:41.596785 2025] [:error] [pid 31570:tid 31600] [client 20.255.93.205:13404] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aU0V1WPy2DpAzW_4a2g-PQAAAEA"]
[Thu Dec 25 18:45:41.875248 2025] [:error] [pid 31655:tid 31667] [client 20.255.93.205:13405] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aU0V1ZozPMk9HPtIJPOXLAAAAMo"]
[Thu Dec 25 18:45:42.136541 2025] [:error] [pid 31571:tid 31628] [client 20.255.93.205:13410] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aU0V1u7e_lLK2X5wU8m1_AAAAIE"]
[Thu Dec 25 18:45:42.430174 2025] [:error] [pid 31569:tid 31587] [client 20.255.93.205:13394] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aU0V1miSFBH7Ee_uldXUAgAAAA4"]
[Thu Dec 25 18:45:42.692502 2025] [:error] [pid 31655:tid 31681] [client 20.255.93.205:13391] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aU0V1pozPMk9HPtIJPOXLgAAANg"]
[Thu Dec 25 18:45:42.963703 2025] [:error] [pid 2996:tid 3020] [client 20.255.93.205:13438] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aU0V1qrrTp0EWNyhaIRMcQAAARY"]
[Thu Dec 25 18:45:43.225938 2025] [:error] [pid 31571:tid 31651] [client 20.255.93.205:13382] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aU0V1-7e_lLK2X5wU8m1_gAAAJg"]
[Thu Dec 25 18:45:43.487377 2025] [:error] [pid 31571:tid 31642] [client 20.255.93.205:13342] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aU0V1-7e_lLK2X5wU8m2AAAAAI8"]
[Thu Dec 25 18:45:43.750148 2025] [:error] [pid 31571:tid 31635] [client 20.255.93.205:13381] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aU0V1-7e_lLK2X5wU8m2AgAAAIg"]
[Thu Dec 25 18:45:44.020402 2025] [:error] [pid 31571:tid 31636] [client 20.255.93.205:6041] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aU0V2O7e_lLK2X5wU8m2AwAAAIk"]
[Thu Dec 25 18:45:44.281903 2025] [:error] [pid 2996:tid 3008] [client 20.255.93.205:13364] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aU0V2KrrTp0EWNyhaIRMcgAAAQo"]
[Thu Dec 25 18:45:44.544105 2025] [:error] [pid 2996:tid 3000] [client 20.255.93.205:13400] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aU0V2KrrTp0EWNyhaIRMcwAAAQI"]
[Thu Dec 25 18:45:44.807832 2025] [:error] [pid 31569:tid 31573] [client 20.255.93.205:6117] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aU0V2GiSFBH7Ee_uldXUBAAAAAA"]
[Thu Dec 25 18:45:45.071175 2025] [:error] [pid 31569:tid 31595] [client 20.255.93.205:13376] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aU0V2WiSFBH7Ee_uldXUBgAAABY"]
[Thu Dec 25 18:45:45.332045 2025] [:error] [pid 31569:tid 31583] [client 20.255.93.205:6141] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aU0V2WiSFBH7Ee_uldXUBwAAAAo"]
[Thu Dec 25 18:45:45.595666 2025] [:error] [pid 31569:tid 31593] [client 20.255.93.205:6113] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aU0V2WiSFBH7Ee_uldXUCAAAABQ"]
[Thu Dec 25 18:45:45.866504 2025] [:error] [pid 31569:tid 31577] [client 20.255.93.205:13439] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aU0V2WiSFBH7Ee_uldXUCgAAAAQ"]
[Thu Dec 25 18:45:46.131613 2025] [:error] [pid 31569:tid 31594] [client 20.255.93.205:13378] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aU0V2miSFBH7Ee_uldXUCwAAABU"]
[Thu Dec 25 18:45:46.401635 2025] [:error] [pid 31569:tid 31575] [client 20.255.93.205:6138] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aU0V2miSFBH7Ee_uldXUDAAAAAI"]
[Thu Dec 25 18:45:46.674016 2025] [:error] [pid 31569:tid 31591] [client 20.255.93.205:13318] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aU0V2miSFBH7Ee_uldXUDgAAABI"]
[Thu Dec 25 18:45:46.972628 2025] [:error] [pid 31570:tid 31621] [client 20.255.93.205:13354] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aU0V2mPy2DpAzW_4a2g-PgAAAFU"]
[Thu Dec 25 18:45:47.286173 2025] [:error] [pid 31655:tid 31665] [client 20.255.93.205:13341] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aU0V25ozPMk9HPtIJPOXMQAAAMg"]
[Thu Dec 25 18:45:47.555190 2025] [:error] [pid 31655:tid 31673] [client 20.255.93.205:13334] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aU0V25ozPMk9HPtIJPOXMgAAANA"]
[Thu Dec 25 18:45:47.831888 2025] [:error] [pid 31570:tid 31614] [client 20.255.93.205:6103] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aU0V22Py2DpAzW_4a2g-QQAAAE4"]
[Thu Dec 25 18:45:48.146859 2025] [:error] [pid 31655:tid 31676] [client 20.255.93.205:6139] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aU0V3JozPMk9HPtIJPOXNgAAANM"]
[Thu Dec 25 18:45:48.459622 2025] [:error] [pid 31569:tid 31588] [client 20.255.93.205:13408] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aU0V3GiSFBH7Ee_uldXUEAAAAA8"]
[Thu Dec 25 18:45:48.794865 2025] [:error] [pid 2996:tid 3017] [client 20.255.93.205:13434] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aU0V3KrrTp0EWNyhaIRMdAAAARM"]
[Thu Dec 25 18:45:49.058168 2025] [:error] [pid 31571:tid 31649] [client 20.255.93.205:6086] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aU0V3e7e_lLK2X5wU8m2BQAAAJY"]
[Thu Dec 25 18:45:49.365048 2025] [:error] [pid 31571:tid 31648] [client 20.255.93.205:6036] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aU0V3e7e_lLK2X5wU8m2BgAAAJU"]
[Thu Dec 25 18:45:49.713263 2025] [:error] [pid 31570:tid 31615] [client 20.255.93.205:13343] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aU0V3WPy2DpAzW_4a2g-RAAAAE8"]
[Thu Dec 25 18:45:50.044323 2025] [:error] [pid 31569:tid 31587] [client 20.255.93.205:6098] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aU0V3miSFBH7Ee_uldXUEwAAAA4"]
[Thu Dec 25 18:45:50.385222 2025] [:error] [pid 2996:tid 3002] [client 20.255.93.205:13427] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aU0V3qrrTp0EWNyhaIRMdQAAAQQ"]
[Thu Dec 25 18:45:50.661470 2025] [:error] [pid 31571:tid 31637] [client 20.255.93.205:6101] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aU0V3u7e_lLK2X5wU8m2CQAAAIo"]
[Thu Dec 25 18:45:50.928222 2025] [:error] [pid 31655:tid 31657] [client 20.255.93.205:13398] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aU0V3pozPMk9HPtIJPOXOgAAAMA"]
[Thu Dec 25 18:45:51.190203 2025] [:error] [pid 31655:tid 31662] [client 20.255.93.205:13326] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aU0V35ozPMk9HPtIJPOXOwAAAMU"]
[Thu Dec 25 18:45:51.458966 2025] [:error] [pid 2996:tid 3018] [client 20.255.93.205:13320] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aU0V36rrTp0EWNyhaIRMdwAAARQ"]
[Thu Dec 25 18:45:51.738356 2025] [:error] [pid 31571:tid 31640] [client 20.255.93.205:6087] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aU0V3-7e_lLK2X5wU8m2DAAAAI0"]
[Thu Dec 25 18:45:52.002137 2025] [:error] [pid 31569:tid 31581] [client 20.255.93.205:13396] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aU0V4GiSFBH7Ee_uldXUGAAAAAg"]
[Thu Dec 25 18:45:52.264762 2025] [:error] [pid 31571:tid 31628] [client 20.255.93.205:13373] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aU0V4O7e_lLK2X5wU8m2DgAAAIE"]
[Thu Dec 25 18:45:52.532562 2025] [:error] [pid 31570:tid 31604] [client 20.255.93.205:6040] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aU0V4GPy2DpAzW_4a2g-SQAAAEQ"]
[Thu Dec 25 18:45:52.793764 2025] [:error] [pid 31655:tid 31672] [client 20.255.93.205:13414] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aU0V4JozPMk9HPtIJPOXPQAAAM8"]
[Thu Dec 25 18:45:53.080925 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:6049] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aU0V4arrTp0EWNyhaIRMeAAAAQk"]
[Thu Dec 25 18:45:53.342063 2025] [:error] [pid 31569:tid 31576] [client 20.255.93.205:13424] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aU0V4WiSFBH7Ee_uldXUKAAAAAM"]
[Thu Dec 25 18:45:53.603947 2025] [:error] [pid 31569:tid 31597] [client 20.255.93.205:13346] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aU0V4WiSFBH7Ee_uldXUKgAAABg"]
[Thu Dec 25 18:45:53.867350 2025] [:error] [pid 31571:tid 31635] [client 20.255.93.205:6088] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aU0V4e7e_lLK2X5wU8m2EgAAAIg"]
[Thu Dec 25 18:45:54.128807 2025] [:error] [pid 31571:tid 31638] [client 20.255.93.205:13352] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aU0V4u7e_lLK2X5wU8m2FAAAAIs"]
[Thu Dec 25 18:45:54.390012 2025] [:error] [pid 31655:tid 31678] [client 20.255.93.205:6137] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aU0V4pozPMk9HPtIJPOXQAAAANU"]
[Thu Dec 25 18:45:54.673916 2025] [:error] [pid 2996:tid 3022] [client 20.255.93.205:6116] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aU0V4qrrTp0EWNyhaIRMfQAAARg"]
[Thu Dec 25 18:45:54.934716 2025] [:error] [pid 2996:tid 2998] [client 20.255.93.205:6112] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aU0V4qrrTp0EWNyhaIRMfgAAAQA"]
[Thu Dec 25 18:45:55.195468 2025] [:error] [pid 2996:tid 3014] [client 20.255.93.205:6124] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aU0V46rrTp0EWNyhaIRMfwAAARA"]
[Thu Dec 25 18:45:55.463436 2025] [:error] [pid 31570:tid 31601] [client 20.255.93.205:6109] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aU0V42Py2DpAzW_4a2g-SwAAAEE"]
[Thu Dec 25 18:45:55.723651 2025] [:error] [pid 31570:tid 31603] [client 20.255.93.205:13369] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aU0V42Py2DpAzW_4a2g-TAAAAEM"]
[Thu Dec 25 18:45:55.985172 2025] [:error] [pid 31570:tid 31607] [client 20.255.93.205:6085] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aU0V42Py2DpAzW_4a2g-TQAAAEc"]
[Thu Dec 25 18:45:56.249205 2025] [:error] [pid 2996:tid 2999] [client 20.255.93.205:13386] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aU0V5KrrTp0EWNyhaIRMgwAAAQE"]
[Thu Dec 25 18:45:56.510822 2025] [:error] [pid 2996:tid 3020] [client 20.255.93.205:13419] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aU0V5KrrTp0EWNyhaIRMhAAAARY"]
[Thu Dec 25 18:45:56.771803 2025] [:error] [pid 31571:tid 31649] [client 20.255.93.205:6125] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aU0V5O7e_lLK2X5wU8m2FwAAAJY"]
[Thu Dec 25 18:45:57.039836 2025] [:error] [pid 31655:tid 31659] [client 20.255.93.205:13397] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aU0V5ZozPMk9HPtIJPOXQwAAAMI"]
[Thu Dec 25 18:45:57.308882 2025] [:error] [pid 31571:tid 31647] [client 20.255.93.205:13375] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aU0V5e7e_lLK2X5wU8m2GQAAAJQ"]
[Thu Dec 25 18:45:57.569888 2025] [:error] [pid 31655:tid 31671] [client 20.255.93.205:13435] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aU0V5ZozPMk9HPtIJPOXRAAAAM4"]
[Thu Dec 25 18:45:57.859201 2025] [:error] [pid 31569:tid 31574] [client 20.255.93.205:13353] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aU0V5WiSFBH7Ee_uldXUPgAAAAE"]
[Thu Dec 25 18:45:58.120383 2025] [:error] [pid 31570:tid 31609] [client 20.255.93.205:13345] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aU0V5mPy2DpAzW_4a2g-TgAAAEk"]
[Thu Dec 25 18:45:58.383067 2025] [:error] [pid 31570:tid 31600] [client 20.255.93.205:6121] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aU0V5mPy2DpAzW_4a2g-TwAAAEA"]
[Thu Dec 25 18:45:58.651837 2025] [:error] [pid 31655:tid 31676] [client 20.255.93.205:6102] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aU0V5pozPMk9HPtIJPOXRQAAANM"]
[Thu Dec 25 18:45:58.931446 2025] [:error] [pid 31655:tid 31669] [client 20.255.93.205:13413] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aU0V5pozPMk9HPtIJPOXRwAAAMw"]
[Thu Dec 25 18:45:59.203845 2025] [:error] [pid 31570:tid 31606] [client 20.255.93.205:6122] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aU0V52Py2DpAzW_4a2g-UAAAAEY"]
[Thu Dec 25 18:45:59.465454 2025] [:error] [pid 31655:tid 31661] [client 20.255.93.205:13329] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aU0V55ozPMk9HPtIJPOXSQAAAMQ"]
[Thu Dec 25 18:45:59.727216 2025] [:error] [pid 31655:tid 31657] [client 20.255.93.205:6128] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aU0V55ozPMk9HPtIJPOXTAAAAMA"]
[Thu Dec 25 18:45:59.991655 2025] [:error] [pid 2996:tid 3015] [client 20.255.93.205:13370] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aU0V56rrTp0EWNyhaIRMiAAAARE"]
[Thu Dec 25 18:46:00.254093 2025] [:error] [pid 31570:tid 31614] [client 20.255.93.205:6055] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aU0V6GPy2DpAzW_4a2g-UwAAAE4"]
[Thu Dec 25 18:46:00.517258 2025] [:error] [pid 31569:tid 31580] [client 20.255.93.205:13357] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aU0V6GiSFBH7Ee_uldXUPwAAAAc"]
[Thu Dec 25 18:46:00.803218 2025] [:error] [pid 31571:tid 31645] [client 20.255.93.205:6039] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aU0V6O7e_lLK2X5wU8m2HwAAAJI"]
[Thu Dec 25 18:46:01.069892 2025] [:error] [pid 31655:tid 31673] [client 20.255.93.205:13340] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aU0V6ZozPMk9HPtIJPOXWQAAANA"]
[Thu Dec 25 18:46:01.331834 2025] [:error] [pid 2996:tid 3017] [client 20.255.93.205:6126] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aU0V6arrTp0EWNyhaIRMmwAAARM"]
[Thu Dec 25 18:46:01.595332 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:13361] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aU0V6arrTp0EWNyhaIRMogAAAQk"]
[Thu Dec 25 18:46:01.898704 2025] [:error] [pid 31571:tid 31650] [client 20.255.93.205:13347] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aU0V6e7e_lLK2X5wU8m2SQAAAJc"]
[Thu Dec 25 18:46:02.166976 2025] [:error] [pid 31569:tid 31577] [client 20.255.93.205:6082] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aU0V6miSFBH7Ee_uldXUQgAAAAQ"]
[Thu Dec 25 18:46:02.428448 2025] [:error] [pid 31571:tid 31638] [client 20.255.93.205:6038] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aU0V6u7e_lLK2X5wU8m2TwAAAIs"]
[Thu Dec 25 18:46:02.695569 2025] [:error] [pid 31655:tid 31675] [client 20.255.93.205:6131] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aU0V6pozPMk9HPtIJPOXhAAAANI"]
[Thu Dec 25 18:46:02.974281 2025] [:error] [pid 31570:tid 31608] [client 20.255.93.205:13371] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aU0V6mPy2DpAzW_4a2g-cQAAAEg"]
[Thu Dec 25 18:46:03.234447 2025] [:error] [pid 31655:tid 31661] [client 20.255.93.205:6047] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aU0V65ozPMk9HPtIJPOXiAAAAMQ"]
[Thu Dec 25 18:46:03.504319 2025] [:error] [pid 31570:tid 31602] [client 20.255.93.205:6130] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aU0V62Py2DpAzW_4a2g-cgAAAEI"]
[Thu Dec 25 18:46:03.770994 2025] [:error] [pid 31570:tid 31604] [client 20.255.93.205:6103] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aU0V62Py2DpAzW_4a2g-cwAAAEQ"]
[Thu Dec 25 18:46:04.032384 2025] [:error] [pid 31655:tid 31663] [client 20.255.93.205:13374] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aU0V7JozPMk9HPtIJPOXigAAAMY"]
[Thu Dec 25 18:46:04.296940 2025] [:error] [pid 31655:tid 31666] [client 20.255.93.205:6129] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aU0V7JozPMk9HPtIJPOXiwAAAMk"]
[Thu Dec 25 18:46:04.568236 2025] [:error] [pid 31570:tid 31618] [client 20.255.93.205:6092] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aU0V7GPy2DpAzW_4a2g-dAAAAFI"]
[Thu Dec 25 18:46:04.833688 2025] [:error] [pid 31570:tid 31612] [client 20.255.93.205:13358] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aU0V7GPy2DpAzW_4a2g-dQAAAEw"]
[Thu Dec 25 18:46:05.096288 2025] [:error] [pid 31655:tid 31677] [client 20.255.93.205:13387] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aU0V7ZozPMk9HPtIJPOXjAAAANQ"]
[Thu Dec 25 18:46:05.377511 2025] [:error] [pid 31569:tid 31596] [client 20.255.93.205:6118] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aU0V7WiSFBH7Ee_uldXURQAAABc"]
[Thu Dec 25 18:46:05.653349 2025] [:error] [pid 31570:tid 31616] [client 20.255.93.205:13366] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aU0V7WPy2DpAzW_4a2g-dgAAAFA"]
[Thu Dec 25 18:46:05.934501 2025] [:error] [pid 31569:tid 31576] [client 20.255.93.205:13363] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aU0V7WiSFBH7Ee_uldXURgAAAAM"]
[Thu Dec 25 18:46:06.196923 2025] [:error] [pid 31569:tid 31579] [client 20.255.93.205:6030] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aU0V7miSFBH7Ee_uldXURwAAAAY"]
[Thu Dec 25 18:46:06.471328 2025] [:error] [pid 31655:tid 31679] [client 20.255.93.205:13426] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aU0V7pozPMk9HPtIJPOXkwAAANY"]
[Thu Dec 25 18:46:06.765465 2025] [:error] [pid 2996:tid 3002] [client 20.255.93.205:13412] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aU0V7qrrTp0EWNyhaIRMrwAAAQQ"]
[Thu Dec 25 18:46:07.059076 2025] [:error] [pid 2996:tid 3018] [client 20.255.93.205:6024] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aU0V76rrTp0EWNyhaIRMsQAAARQ"]
[Thu Dec 25 18:46:07.338957 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:13359] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aU0V76rrTp0EWNyhaIRMswAAAQk"]
[Thu Dec 25 18:46:07.609459 2025] [:error] [pid 31570:tid 31621] [client 20.255.93.205:13403] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aU0V72Py2DpAzW_4a2g-eAAAAFU"]
[Thu Dec 25 18:46:07.889142 2025] [:error] [pid 31571:tid 31629] [client 20.255.93.205:13325] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aU0V7-7e_lLK2X5wU8m2WAAAAII"]
[Thu Dec 25 18:46:08.151457 2025] [:error] [pid 2996:tid 3022] [client 20.255.93.205:6053] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aU0V8KrrTp0EWNyhaIRMtAAAARg"]
[Thu Dec 25 18:46:08.422890 2025] [:error] [pid 2996:tid 3013] [client 20.255.93.205:6095] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aU0V8KrrTp0EWNyhaIRMtgAAAQ8"]
[Thu Dec 25 18:46:08.692891 2025] [:error] [pid 31570:tid 31600] [client 20.255.93.205:6089] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aU0V8GPy2DpAzW_4a2g-egAAAEA"]
[Thu Dec 25 18:46:08.972974 2025] [:error] [pid 31570:tid 31606] [client 20.255.93.205:6016] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aU0V8GPy2DpAzW_4a2g-ewAAAEY"]
[Thu Dec 25 18:46:09.235747 2025] [:error] [pid 31570:tid 31614] [client 20.255.93.205:13423] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aU0V8WPy2DpAzW_4a2g-fQAAAE4"]
[Thu Dec 25 18:46:09.505099 2025] [:error] [pid 31570:tid 31622] [client 20.255.93.205:6032] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aU0V8WPy2DpAzW_4a2g-fgAAAFY"]
[Thu Dec 25 18:46:09.784565 2025] [:error] [pid 31570:tid 31610] [client 20.255.93.205:6075] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aU0V8WPy2DpAzW_4a2g-fwAAAEo"]
[Thu Dec 25 18:46:10.048699 2025] [:error] [pid 31570:tid 31620] [client 20.255.93.205:13351] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aU0V8mPy2DpAzW_4a2g-gAAAAFQ"]
[Thu Dec 25 18:46:10.342938 2025] [:error] [pid 31571:tid 31636] [client 20.255.93.205:13419] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aU0V8u7e_lLK2X5wU8m2XwAAAIk"]
[Thu Dec 25 18:46:10.603934 2025] [:error] [pid 31569:tid 31583] [client 20.255.93.205:6093] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aU0V8miSFBH7Ee_uldXUTQAAAAo"]
[Thu Dec 25 18:46:10.895971 2025] [:error] [pid 31570:tid 31624] [client 20.255.93.205:6127] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aU0V8mPy2DpAzW_4a2g-ggAAAFg"]
[Thu Dec 25 18:46:11.179567 2025] [:error] [pid 31569:tid 31574] [client 20.255.93.205:13375] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aU0V82iSFBH7Ee_uldXUTgAAAAE"]
[Thu Dec 25 18:46:11.441397 2025] [:error] [pid 31655:tid 31666] [client 20.255.93.205:5977] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aU0V85ozPMk9HPtIJPOXmAAAAMk"]
[Thu Dec 25 18:46:11.707640 2025] [:error] [pid 31569:tid 31594] [client 20.255.93.205:5932] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aU0V82iSFBH7Ee_uldXUTwAAABU"]
[Thu Dec 25 18:46:11.972905 2025] [:error] [pid 31569:tid 31580] [client 20.255.93.205:6077] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aU0V82iSFBH7Ee_uldXUUAAAAAc"]
[Thu Dec 25 18:46:12.268853 2025] [:error] [pid 31571:tid 31646] [client 20.255.93.205:6072] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aU0V9O7e_lLK2X5wU8m2YAAAAJM"]
[Thu Dec 25 18:46:12.581274 2025] [:error] [pid 31570:tid 31613] [client 20.255.93.205:5968] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aU0V9GPy2DpAzW_4a2g-igAAAE0"]
[Thu Dec 25 18:46:12.921324 2025] [:error] [pid 31569:tid 31595] [client 20.255.93.205:6135] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aU0V9GiSFBH7Ee_uldXUUgAAABY"]
[Thu Dec 25 18:46:13.271441 2025] [:error] [pid 2996:tid 3017] [client 20.255.93.205:6099] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aU0V9arrTp0EWNyhaIRMvAAAARM"]
[Thu Dec 25 18:46:13.578004 2025] [:error] [pid 31655:tid 31669] [client 20.255.93.205:6035] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aU0V9ZozPMk9HPtIJPOXmQAAAMw"]
[Thu Dec 25 18:46:13.884763 2025] [:error] [pid 31569:tid 31582] [client 20.255.93.205:6021] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aU0V9WiSFBH7Ee_uldXUVAAAAAk"]
[Thu Dec 25 18:46:14.231473 2025] [:error] [pid 31571:tid 31647] [client 20.255.93.205:6065] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warm.PhP7"] [unique_id "aU0V9u7e_lLK2X5wU8m2YwAAAJQ"]
[Thu Dec 25 18:46:14.517528 2025] [:error] [pid 31571:tid 31628] [client 20.255.93.205:6018] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warm.PhP7"] [unique_id "aU0V9u7e_lLK2X5wU8m2ZAAAAIE"]
[Thu Dec 25 18:46:14.778605 2025] [:error] [pid 31571:tid 31629] [client 20.255.93.205:13350] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warm.PhP7"] [unique_id "aU0V9u7e_lLK2X5wU8m2ZQAAAII"]
[Thu Dec 25 18:46:15.042981 2025] [:error] [pid 31571:tid 31637] [client 20.255.93.205:13399] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warm.PhP7"] [unique_id "aU0V9-7e_lLK2X5wU8m2ZgAAAIo"]
[Thu Dec 25 18:46:15.310600 2025] [:error] [pid 31571:tid 31632] [client 20.255.93.205:6126] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php7"] [unique_id "aU0V9-7e_lLK2X5wU8m2ZwAAAIU"]
[Thu Dec 25 18:46:15.579836 2025] [:error] [pid 2996:tid 3003] [client 20.255.93.205:13380] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php7"] [unique_id "aU0V96rrTp0EWNyhaIRMvQAAAQU"]
[Thu Dec 25 18:46:15.843318 2025] [:error] [pid 31570:tid 31600] [client 20.255.93.205:6104] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php7"] [unique_id "aU0V92Py2DpAzW_4a2g-kAAAAEA"]
[Thu Dec 25 18:46:16.117441 2025] [:error] [pid 31571:tid 31651] [client 20.255.93.205:5976] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php7"] [unique_id "aU0V-O7e_lLK2X5wU8m2aQAAAJg"]
[Thu Dec 25 18:46:16.379797 2025] [:error] [pid 2996:tid 3018] [client 20.255.93.205:13321] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rss.php"] [unique_id "aU0V-KrrTp0EWNyhaIRMvgAAARQ"]
[Thu Dec 25 18:46:16.653710 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:6025] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rss.php"] [unique_id "aU0V-KrrTp0EWNyhaIRMvwAAAQk"]
[Thu Dec 25 18:46:16.917283 2025] [:error] [pid 31571:tid 31627] [client 20.255.93.205:13393] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rss.php"] [unique_id "aU0V-O7e_lLK2X5wU8m2agAAAIA"]
[Thu Dec 25 18:46:17.183076 2025] [:error] [pid 2996:tid 3010] [client 20.255.93.205:5997] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rss.php"] [unique_id "aU0V-arrTp0EWNyhaIRMwAAAAQw"]
[Thu Dec 25 18:46:17.444115 2025] [:error] [pid 31570:tid 31610] [client 20.255.93.205:13362] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pekok.php"] [unique_id "aU0V-WPy2DpAzW_4a2g-lAAAAEo"]
[Thu Dec 25 18:46:17.707191 2025] [:error] [pid 31570:tid 31624] [client 20.255.93.205:5982] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pekok.php"] [unique_id "aU0V-WPy2DpAzW_4a2g-lgAAAFg"]
[Thu Dec 25 18:46:17.976012 2025] [:error] [pid 31571:tid 31639] [client 20.255.93.205:13431] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pekok.php"] [unique_id "aU0V-e7e_lLK2X5wU8m2awAAAIw"]
[Thu Dec 25 18:46:18.238852 2025] [:error] [pid 31655:tid 31667] [client 20.255.93.205:5962] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pekok.php"] [unique_id "aU0V-pozPMk9HPtIJPOXnQAAAMo"]
[Thu Dec 25 18:46:18.500720 2025] [:error] [pid 31655:tid 31680] [client 20.255.93.205:6063] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aU0V-pozPMk9HPtIJPOXngAAANc"]
[Thu Dec 25 18:46:18.789155 2025] [:error] [pid 31655:tid 31678] [client 20.255.93.205:6066] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aU0V-pozPMk9HPtIJPOXoAAAANU"]
[Thu Dec 25 18:46:19.051332 2025] [:error] [pid 31571:tid 31642] [client 20.255.93.205:6050] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aU0V--7e_lLK2X5wU8m2bAAAAI8"]
[Thu Dec 25 18:46:19.355835 2025] [:error] [pid 31569:tid 31590] [client 20.255.93.205:6058] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aU0V-2iSFBH7Ee_uldXUWQAAABE"]
[Thu Dec 25 18:46:19.617908 2025] [:error] [pid 2996:tid 3012] [client 20.255.93.205:6133] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-aa.php"] [unique_id "aU0V-6rrTp0EWNyhaIRMxAAAAQ4"]
[Thu Dec 25 18:46:19.889355 2025] [:error] [pid 31655:tid 31672] [client 20.255.93.205:13433] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-aa.php"] [unique_id "aU0V-5ozPMk9HPtIJPOXpAAAAM8"]
[Thu Dec 25 18:47:02.714494 2025] [:error] [pid 31570:tid 31614] [client 20.255.93.205:6034] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aU0WJmPy2DpAzW_4a2g-xwAAAE4"]
[Thu Dec 25 18:47:02.981343 2025] [:error] [pid 31571:tid 31629] [client 20.255.93.205:5964] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aU0WJu7e_lLK2X5wU8m2jAAAAII"]
[Thu Dec 25 18:47:03.247171 2025] [:error] [pid 2996:tid 3012] [client 20.255.93.205:6108] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aU0WJ6rrTp0EWNyhaIRNCwAAAQ4"]
[Thu Dec 25 18:47:03.510333 2025] [:error] [pid 31569:tid 31593] [client 20.255.93.205:5888] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aU0WJ2iSFBH7Ee_uldXUfgAAABQ"]
[Thu Dec 25 18:47:03.777060 2025] [:error] [pid 31569:tid 31586] [client 20.255.93.205:5995] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aU0WJ2iSFBH7Ee_uldXUfwAAAA0"]
[Thu Dec 25 18:47:04.047266 2025] [:error] [pid 31569:tid 31575] [client 20.255.93.205:13390] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aU0WKGiSFBH7Ee_uldXUgAAAAAI"]
[Thu Dec 25 18:47:04.315498 2025] [:error] [pid 31571:tid 31632] [client 20.255.93.205:6048] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aU0WKO7e_lLK2X5wU8m2kAAAAIU"]
[Thu Dec 25 18:47:04.579760 2025] [:error] [pid 31569:tid 31583] [client 20.255.93.205:6051] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aU0WKGiSFBH7Ee_uldXUgwAAAAo"]
[Thu Dec 25 18:47:04.852505 2025] [:error] [pid 31571:tid 31627] [client 20.255.93.205:6060] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aU0WKO7e_lLK2X5wU8m2kQAAAIA"]
[Thu Dec 25 18:47:05.116451 2025] [:error] [pid 2996:tid 3014] [client 20.255.93.205:13425] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aU0WKarrTp0EWNyhaIRNDQAAARA"]
[Thu Dec 25 18:47:05.413301 2025] [:error] [pid 2996:tid 3015] [client 20.255.93.205:5985] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aU0WKarrTp0EWNyhaIRNDwAAARE"]
[Thu Dec 25 18:47:05.674095 2025] [:error] [pid 2996:tid 3018] [client 20.255.93.205:6064] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aU0WKarrTp0EWNyhaIRNEgAAARQ"]
[Thu Dec 25 18:47:05.938536 2025] [:error] [pid 2996:tid 3017] [client 20.255.93.205:6019] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aU0WKarrTp0EWNyhaIRNEwAAARM"]
[Thu Dec 25 18:47:06.237518 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:6068] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aU0WKqrrTp0EWNyhaIRNFAAAAQk"]
[Thu Dec 25 18:47:06.500132 2025] [:error] [pid 31570:tid 31616] [client 20.255.93.205:5980] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aU0WKmPy2DpAzW_4a2g-yQAAAFA"]
[Thu Dec 25 18:47:06.761725 2025] [:error] [pid 31570:tid 31612] [client 20.255.93.205:5954] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aU0WKmPy2DpAzW_4a2g-ygAAAEw"]
[Thu Dec 25 18:47:07.024106 2025] [:error] [pid 31570:tid 31615] [client 20.255.93.205:13383] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aU0WK2Py2DpAzW_4a2g-ywAAAE8"]
[Thu Dec 25 18:47:07.286075 2025] [:error] [pid 31571:tid 31639] [client 20.255.93.205:6022] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aU0WK-7e_lLK2X5wU8m2lAAAAIw"]
[Thu Dec 25 18:47:07.554123 2025] [:error] [pid 31571:tid 31648] [client 20.255.93.205:6143] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aU0WK-7e_lLK2X5wU8m2lgAAAJU"]
[Thu Dec 25 18:47:07.816515 2025] [:error] [pid 31571:tid 31635] [client 20.255.93.205:6123] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aU0WK-7e_lLK2X5wU8m2lwAAAIg"]
[Thu Dec 25 18:47:08.088745 2025] [:error] [pid 31570:tid 31608] [client 20.255.93.205:6033] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aU0WLGPy2DpAzW_4a2g-zQAAAEg"]
[Thu Dec 25 18:47:08.354608 2025] [:error] [pid 31569:tid 31576] [client 20.255.93.205:6046] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aU0WLGiSFBH7Ee_uldXUhgAAAAM"]
[Thu Dec 25 18:47:08.624683 2025] [:error] [pid 31569:tid 31578] [client 20.255.93.205:6002] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aU0WLGiSFBH7Ee_uldXUhwAAAAU"]
[Thu Dec 25 18:47:08.893591 2025] [:error] [pid 31569:tid 31577] [client 20.255.93.205:5956] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aU0WLGiSFBH7Ee_uldXUiQAAAAQ"]
[Thu Dec 25 18:47:09.157790 2025] [:error] [pid 31571:tid 31645] [client 20.255.93.205:6140] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aU0WLe7e_lLK2X5wU8m2mQAAAJI"]
[Thu Dec 25 18:47:09.450510 2025] [:error] [pid 2996:tid 3009] [client 20.255.93.205:6020] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aU0WLarrTp0EWNyhaIRNGAAAAQs"]
[Thu Dec 25 18:47:09.714783 2025] [:error] [pid 31571:tid 31643] [client 20.255.93.205:6054] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aU0WLe7e_lLK2X5wU8m2mgAAAJA"]
[Thu Dec 25 18:47:09.988628 2025] [:error] [pid 31571:tid 31633] [client 20.255.93.205:6074] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aU0WLe7e_lLK2X5wU8m2mwAAAIY"]
[Thu Dec 25 18:47:10.264521 2025] [:error] [pid 2996:tid 3013] [client 20.255.93.205:6142] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aU0WLqrrTp0EWNyhaIRNGgAAAQ8"]
[Thu Dec 25 18:47:10.528922 2025] [:error] [pid 2996:tid 3006] [client 20.255.93.205:13349] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aU0WLqrrTp0EWNyhaIRNGwAAAQg"]
[Thu Dec 25 18:47:10.789642 2025] [:error] [pid 2996:tid 3021] [client 20.255.93.205:5924] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aU0WLqrrTp0EWNyhaIRNHgAAARc"]
[Thu Dec 25 18:47:11.056777 2025] [:error] [pid 2996:tid 3001] [client 20.255.93.205:5971] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aU0WL6rrTp0EWNyhaIRNIAAAAQM"]
[Thu Dec 25 18:47:11.319983 2025] [:error] [pid 31571:tid 31647] [client 20.255.93.205:5916] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aU0WL-7e_lLK2X5wU8m2nQAAAJQ"]
[Thu Dec 25 18:47:11.588152 2025] [:error] [pid 31571:tid 31629] [client 20.255.93.205:6028] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aU0WL-7e_lLK2X5wU8m2nwAAAII"]
[Thu Dec 25 18:47:11.852840 2025] [:error] [pid 31571:tid 31627] [client 20.255.93.205:6100] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aU0WL-7e_lLK2X5wU8m2oQAAAIA"]
[Thu Dec 25 18:47:12.113645 2025] [:error] [pid 31570:tid 31619] [client 20.255.93.205:6031] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aU0WMGPy2DpAzW_4a2g-0wAAAFM"]
[Thu Dec 25 18:47:12.412637 2025] [:error] [pid 2996:tid 3018] [client 20.255.93.205:6044] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aU0WMKrrTp0EWNyhaIRNIQAAARQ"]
[Thu Dec 25 18:47:12.677289 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:6090] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aU0WMKrrTp0EWNyhaIRNIgAAAQk"]
[Thu Dec 25 18:47:12.954940 2025] [:error] [pid 31569:tid 31580] [client 20.255.93.205:5953] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aU0WMGiSFBH7Ee_uldXUkQAAAAc"]
[Thu Dec 25 18:47:13.217707 2025] [:error] [pid 31570:tid 31620] [client 20.255.93.205:5926] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aU0WMWPy2DpAzW_4a2g-1AAAAFQ"]
[Thu Dec 25 18:47:13.487751 2025] [:error] [pid 31570:tid 31606] [client 20.255.93.205:6132] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aU0WMWPy2DpAzW_4a2g-1QAAAEY"]
[Thu Dec 25 18:47:13.751593 2025] [:error] [pid 31570:tid 31610] [client 20.255.93.205:6042] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aU0WMWPy2DpAzW_4a2g-1gAAAEo"]
[Thu Dec 25 18:47:14.012234 2025] [:error] [pid 31570:tid 31614] [client 20.255.93.205:5960] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aU0WMmPy2DpAzW_4a2g-1wAAAE4"]
[Thu Dec 25 18:47:14.276496 2025] [:error] [pid 31571:tid 31631] [client 20.255.93.205:5992] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aU0WMu7e_lLK2X5wU8m2pgAAAIQ"]
[Thu Dec 25 18:47:14.600813 2025] [:error] [pid 31570:tid 31623] [client 20.255.93.205:6079] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aU0WMmPy2DpAzW_4a2g-2AAAAFc"]
[Thu Dec 25 18:47:14.923238 2025] [:error] [pid 31570:tid 31611] [client 20.255.93.205:5942] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aU0WMmPy2DpAzW_4a2g-2gAAAEs"]
[Thu Dec 25 18:47:15.248513 2025] [:error] [pid 31570:tid 31621] [client 20.255.93.205:5989] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aU0WM2Py2DpAzW_4a2g-3AAAAFU"]
[Thu Dec 25 18:47:15.525477 2025] [:error] [pid 31570:tid 31615] [client 20.255.93.205:5993] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aU0WM2Py2DpAzW_4a2g-3gAAAE8"]
[Thu Dec 25 18:47:15.804602 2025] [:error] [pid 31571:tid 31644] [client 20.255.93.205:6043] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aU0WM-7e_lLK2X5wU8m2qQAAAJE"]
[Thu Dec 25 18:47:16.066706 2025] [:error] [pid 31571:tid 31634] [client 20.255.93.205:6059] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aU0WNO7e_lLK2X5wU8m2qgAAAIc"]
[Thu Dec 25 18:47:16.327595 2025] [:error] [pid 31571:tid 31645] [client 20.255.93.205:6084] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aU0WNO7e_lLK2X5wU8m2qwAAAJI"]
[Thu Dec 25 18:47:16.593945 2025] [:error] [pid 31571:tid 31633] [client 20.255.93.205:6061] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aU0WNO7e_lLK2X5wU8m2rQAAAIY"]
[Thu Dec 25 18:47:16.858785 2025] [:error] [pid 31571:tid 31628] [client 20.255.93.205:5969] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aU0WNO7e_lLK2X5wU8m2rgAAAIE"]
[Thu Dec 25 18:47:17.121306 2025] [:error] [pid 31570:tid 31616] [client 20.255.93.205:6069] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aU0WNWPy2DpAzW_4a2g-4AAAAFA"]
[Thu Dec 25 18:47:17.389922 2025] [:error] [pid 31655:tid 31673] [client 20.255.93.205:6052] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aU0WNZozPMk9HPtIJPOX4wAAANA"]
[Thu Dec 25 18:47:17.656647 2025] [:error] [pid 31569:tid 31585] [client 20.255.93.205:6006] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aU0WNWiSFBH7Ee_uldXUlQAAAAw"]
[Thu Dec 25 18:47:17.926731 2025] [:error] [pid 31569:tid 31587] [client 20.255.93.205:6067] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aU0WNWiSFBH7Ee_uldXUlgAAAA4"]
[Thu Dec 25 18:47:18.198155 2025] [:error] [pid 31569:tid 31573] [client 20.255.93.205:13385] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aU0WNmiSFBH7Ee_uldXUlwAAAAA"]
[Thu Dec 25 18:47:18.461978 2025] [:error] [pid 31570:tid 31607] [client 20.255.93.205:5939] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aU0WNmPy2DpAzW_4a2g-4wAAAEc"]
[Thu Dec 25 18:47:18.730510 2025] [:error] [pid 31570:tid 31609] [client 20.255.93.205:6029] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aU0WNmPy2DpAzW_4a2g-5AAAAEk"]
[Thu Dec 25 18:47:18.992061 2025] [:error] [pid 31569:tid 31590] [client 20.255.93.205:5967] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aU0WNmiSFBH7Ee_uldXUmgAAABE"]
[Thu Dec 25 18:47:19.255121 2025] [:error] [pid 31569:tid 31589] [client 20.255.93.205:6023] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aU0WN2iSFBH7Ee_uldXUmwAAABA"]
[Thu Dec 25 18:47:19.530356 2025] [:error] [pid 31655:tid 31674] [client 20.255.93.205:5965] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aU0WN5ozPMk9HPtIJPOX5gAAANE"]
[Thu Dec 25 18:47:19.811793 2025] [:error] [pid 2996:tid 3016] [client 20.255.93.205:6014] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aU0WN6rrTp0EWNyhaIRNJAAAARI"]
[Thu Dec 25 18:47:20.080904 2025] [:error] [pid 31570:tid 31604] [client 20.255.93.205:5974] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aU0WOGPy2DpAzW_4a2g-5QAAAEQ"]
[Thu Dec 25 18:47:20.342318 2025] [:error] [pid 31655:tid 31657] [client 20.255.93.205:6136] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aU0WOJozPMk9HPtIJPOX6QAAAMA"]
[Thu Dec 25 18:47:20.602758 2025] [:error] [pid 31655:tid 31676] [client 20.255.93.205:5897] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aU0WOJozPMk9HPtIJPOX6gAAANM"]
[Thu Dec 25 18:47:20.873299 2025] [:error] [pid 2996:tid 3004] [client 20.255.93.205:6027] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aU0WOKrrTp0EWNyhaIRNJgAAAQY"]
[Thu Dec 25 18:47:21.134694 2025] [:error] [pid 2996:tid 3022] [client 20.255.93.205:5983] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aU0WOarrTp0EWNyhaIRNJwAAARg"]
[Thu Dec 25 18:47:21.398946 2025] [:error] [pid 2996:tid 3009] [client 20.255.93.205:5981] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aU0WOarrTp0EWNyhaIRNKAAAAQs"]
[Thu Dec 25 18:47:21.689518 2025] [:error] [pid 31655:tid 31664] [client 20.255.93.205:5902] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aU0WOZozPMk9HPtIJPOX7gAAAMc"]
[Thu Dec 25 18:47:21.951380 2025] [:error] [pid 2996:tid 3020] [client 20.255.93.205:6005] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aU0WOarrTp0EWNyhaIRNKQAAARY"]
[Thu Dec 25 18:47:22.226542 2025] [:error] [pid 31655:tid 31669] [client 20.255.93.205:6070] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aU0WOpozPMk9HPtIJPOX7wAAAMw"]
[Thu Dec 25 18:47:22.490631 2025] [:error] [pid 31570:tid 31617] [client 20.255.93.205:5990] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aU0WOmPy2DpAzW_4a2g-6AAAAFE"]
[Thu Dec 25 18:47:22.754156 2025] [:error] [pid 2996:tid 2999] [client 20.255.93.205:5847] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aU0WOqrrTp0EWNyhaIRNKgAAAQE"]
[Thu Dec 25 18:47:23.019822 2025] [:error] [pid 31569:tid 31591] [client 20.255.93.205:6078] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aU0WO2iSFBH7Ee_uldXUpAAAABI"]
[Thu Dec 25 18:47:23.306317 2025] [:error] [pid 2996:tid 3012] [client 20.255.93.205:5991] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aU0WO6rrTp0EWNyhaIRNKwAAAQ4"]
[Thu Dec 25 18:47:23.588350 2025] [:error] [pid 31570:tid 31624] [client 20.255.93.205:5975] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aU0WO2Py2DpAzW_4a2g-6QAAAFg"]
[Thu Dec 25 18:47:23.849691 2025] [:error] [pid 31571:tid 31651] [client 20.255.93.205:5998] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aU0WO-7e_lLK2X5wU8m2sAAAAJg"]
[Thu Dec 25 18:47:24.137129 2025] [:error] [pid 2996:tid 3013] [client 20.255.93.205:6026] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aU0WPKrrTp0EWNyhaIRNLAAAAQ8"]
[Thu Dec 25 18:47:24.398650 2025] [:error] [pid 31655:tid 31680] [client 20.255.93.205:5911] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aU0WPJozPMk9HPtIJPOX8gAAANc"]
[Thu Dec 25 18:47:24.687771 2025] [:error] [pid 31655:tid 31661] [client 20.255.93.205:5917] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aU0WPJozPMk9HPtIJPOX8wAAAMQ"]
[Thu Dec 25 18:47:24.949958 2025] [:error] [pid 31569:tid 31573] [client 20.255.93.205:5952] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aU0WPGiSFBH7Ee_uldXUqQAAAAA"]
[Thu Dec 25 18:47:25.210518 2025] [:error] [pid 31570:tid 31602] [client 20.255.93.205:5922] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aU0WPWPy2DpAzW_4a2g-6wAAAEI"]
[Thu Dec 25 18:47:25.471434 2025] [:error] [pid 31655:tid 31667] [client 20.255.93.205:6056] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aU0WPZozPMk9HPtIJPOX9AAAAMo"]
[Thu Dec 25 18:47:25.751186 2025] [:error] [pid 31570:tid 31612] [client 20.255.93.205:6076] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aU0WPWPy2DpAzW_4a2g-7QAAAEw"]
[Thu Dec 25 18:47:26.015962 2025] [:error] [pid 31655:tid 31673] [client 20.255.93.205:6057] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aU0WPpozPMk9HPtIJPOX9wAAANA"]
[Thu Dec 25 18:47:26.294964 2025] [:error] [pid 31655:tid 31658] [client 20.255.93.205:6134] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aU0WPpozPMk9HPtIJPOX-QAAAME"]
[Thu Dec 25 18:47:26.559840 2025] [:error] [pid 2996:tid 3008] [client 20.255.93.205:5935] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aU0WPqrrTp0EWNyhaIRNLgAAAQo"]
[Thu Dec 25 18:47:26.821908 2025] [:error] [pid 31570:tid 31613] [client 20.255.93.205:5909] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aU0WPmPy2DpAzW_4a2g-7wAAAE0"]
[Thu Dec 25 18:47:27.083331 2025] [:error] [pid 31570:tid 31618] [client 20.255.93.205:5834] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aU0WP2Py2DpAzW_4a2g-8QAAAFI"]
[Thu Dec 25 18:47:27.348956 2025] [:error] [pid 2996:tid 3015] [client 20.255.93.205:6062] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aU0WP6rrTp0EWNyhaIRNMQAAARE"]
[Thu Dec 25 18:47:27.613086 2025] [:error] [pid 2996:tid 3005] [client 20.255.93.205:5927] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aU0WP6rrTp0EWNyhaIRNMgAAAQc"]
[Thu Dec 25 18:47:27.898722 2025] [:error] [pid 2996:tid 3001] [client 20.255.93.205:13367] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aU0WP6rrTp0EWNyhaIRNMwAAAQM"]
[Thu Dec 25 18:47:28.160652 2025] [:error] [pid 31655:tid 31676] [client 20.255.93.205:5826] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aU0WQJozPMk9HPtIJPOX_AAAANM"]
[Thu Dec 25 18:47:28.422637 2025] [:error] [pid 2996:tid 3017] [client 20.255.93.205:6011] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aU0WQKrrTp0EWNyhaIRNNQAAARM"]
[Thu Dec 25 18:47:28.692473 2025] [:error] [pid 2996:tid 3011] [client 20.255.93.205:5994] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aU0WQKrrTp0EWNyhaIRNNwAAAQ0"]
[Thu Dec 25 18:47:28.958973 2025] [:error] [pid 31655:tid 31666] [client 20.255.93.205:5870] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aU0WQJozPMk9HPtIJPOX_wAAAMk"]
[Thu Dec 25 18:47:29.237089 2025] [:error] [pid 2996:tid 3010] [client 20.255.93.205:5987] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aU0WQarrTp0EWNyhaIRNOQAAAQw"]
[Thu Dec 25 18:47:29.507056 2025] [:error] [pid 31569:tid 31593] [client 20.255.93.205:5891] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aU0WQWiSFBH7Ee_uldXUrwAAABQ"]
[Thu Dec 25 18:47:29.768501 2025] [:error] [pid 31571:tid 31638] [client 20.255.93.205:5842] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aU0WQe7e_lLK2X5wU8m2tgAAAIs"]
[Thu Dec 25 18:47:30.035035 2025] [:error] [pid 31570:tid 31619] [client 20.255.93.205:5863] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aU0WQmPy2DpAzW_4a2g-9QAAAFM"]
[Thu Dec 25 18:47:30.298003 2025] [:error] [pid 31571:tid 31639] [client 20.255.93.205:5955] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aU0WQu7e_lLK2X5wU8m2uAAAAIw"]
[Thu Dec 25 18:47:30.560166 2025] [:error] [pid 31569:tid 31583] [client 20.255.93.205:5970] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aU0WQmiSFBH7Ee_uldXUsQAAAAo"]
[Thu Dec 25 18:47:30.829022 2025] [:error] [pid 31571:tid 31635] [client 20.255.93.205:5951] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aU0WQu7e_lLK2X5wU8m2uQAAAIg"]
[Thu Dec 25 18:47:31.090975 2025] [:error] [pid 31569:tid 31574] [client 20.255.93.205:5830] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aU0WQ2iSFBH7Ee_uldXUsgAAAAE"]
[Thu Dec 25 18:47:31.354144 2025] [:error] [pid 31571:tid 31649] [client 20.255.93.205:5940] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aU0WQ-7e_lLK2X5wU8m2ugAAAJY"]
[Thu Dec 25 18:47:31.622982 2025] [:error] [pid 31570:tid 31600] [client 20.255.93.205:5853] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aU0WQ2Py2DpAzW_4a2g-9wAAAEA"]
[Thu Dec 25 18:47:31.884507 2025] [:error] [pid 31570:tid 31604] [client 20.255.93.205:6003] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aU0WQ2Py2DpAzW_4a2g--AAAAEQ"]
[Thu Dec 25 18:47:32.148602 2025] [:error] [pid 31569:tid 31596] [client 20.255.93.205:5961] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aU0WRGiSFBH7Ee_uldXUtgAAABc"]
[Thu Dec 25 18:47:32.423508 2025] [:error] [pid 31569:tid 31580] [client 20.255.93.205:5963] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aU0WRGiSFBH7Ee_uldXUtwAAAAc"]
[Thu Dec 25 18:47:32.685335 2025] [:error] [pid 31655:tid 31669] [client 20.255.93.205:5914] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aU0WRJozPMk9HPtIJPOYAQAAAMw"]
[Thu Dec 25 18:47:32.961582 2025] [:error] [pid 31569:tid 31577] [client 20.255.93.205:6017] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aU0WRGiSFBH7Ee_uldXUuQAAAAQ"]
[Thu Dec 25 18:47:33.222745 2025] [:error] [pid 31569:tid 31576] [client 20.255.93.205:5959] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aU0WRWiSFBH7Ee_uldXUvQAAAAM"]
[Thu Dec 25 18:47:33.484359 2025] [:error] [pid 31569:tid 31579] [client 20.255.93.205:5929] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aU0WRWiSFBH7Ee_uldXUvwAAAAY"]
[Thu Dec 25 18:47:33.762478 2025] [:error] [pid 31569:tid 31575] [client 20.255.93.205:6110] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aU0WRWiSFBH7Ee_uldXUwQAAAAI"]
[Thu Dec 25 18:47:34.031887 2025] [:error] [pid 2996:tid 3002] [client 20.255.93.205:5859] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aU0WRqrrTp0EWNyhaIRNPQAAAQQ"]
[Thu Dec 25 18:47:34.294329 2025] [:error] [pid 2996:tid 3012] [client 20.255.93.205:6013] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aU0WRqrrTp0EWNyhaIRNPgAAAQ4"]
[Thu Dec 25 18:47:34.580861 2025] [:error] [pid 31655:tid 31678] [client 20.255.93.205:5893] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aU0WRpozPMk9HPtIJPOYBAAAANU"]
[Thu Dec 25 18:47:34.850973 2025] [:error] [pid 31655:tid 31677] [client 20.255.93.205:5886] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aU0WRpozPMk9HPtIJPOYBQAAANQ"]
[Thu Dec 25 18:47:35.123653 2025] [:error] [pid 2996:tid 3019] [client 20.255.93.205:5999] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aU0WR6rrTp0EWNyhaIRNQQAAARU"]
[Thu Dec 25 18:47:35.396008 2025] [:error] [pid 31569:tid 31574] [client 20.255.93.205:5966] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aU0WR2iSFBH7Ee_uldXUxQAAAAE"]
[Thu Dec 25 18:47:35.671651 2025] [:error] [pid 2996:tid 3014] [client 20.255.93.205:5904] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aU0WR6rrTp0EWNyhaIRNRAAAARA"]
[Thu Dec 25 18:47:35.933740 2025] [:error] [pid 31569:tid 31586] [client 20.255.93.205:5890] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aU0WR2iSFBH7Ee_uldXUxgAAAA0"]
[Thu Dec 25 18:47:36.196276 2025] [:error] [pid 31570:tid 31621] [client 20.255.93.205:5896] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aU0WSGPy2DpAzW_4a2g-_QAAAFU"]
[Thu Dec 25 18:47:36.456586 2025] [:error] [pid 2996:tid 3001] [client 20.255.93.205:5779] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aU0WSKrrTp0EWNyhaIRNRQAAAQM"]
[Thu Dec 25 18:47:36.728513 2025] [:error] [pid 2996:tid 3017] [client 20.255.93.205:6120] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aU0WSKrrTp0EWNyhaIRNRwAAARM"]
[Thu Dec 25 18:47:37.011962 2025] [:error] [pid 31569:tid 31588] [client 20.255.93.205:6010] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aU0WSWiSFBH7Ee_uldXUyAAAAA8"]
[Thu Dec 25 18:47:37.273337 2025] [:error] [pid 31569:tid 31582] [client 20.255.93.205:5923] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "aU0WSWiSFBH7Ee_uldXUygAAAAk"]
[Thu Dec 25 18:47:37.543164 2025] [:error] [pid 31569:tid 31596] [client 20.255.93.205:5824] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "aU0WSWiSFBH7Ee_uldXUywAAABc"]
[Thu Dec 25 18:47:37.804670 2025] [:error] [pid 31571:tid 31647] [client 20.255.93.205:6073] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "aU0WSe7e_lLK2X5wU8m2vgAAAJQ"]
[Thu Dec 25 18:47:38.068288 2025] [:error] [pid 31569:tid 31590] [client 20.255.93.205:5809] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "aU0WSmiSFBH7Ee_uldXUzAAAABE"]
[Thu Dec 25 18:47:38.330395 2025] [:error] [pid 31655:tid 31670] [client 20.255.93.205:6008] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aU0WSpozPMk9HPtIJPOYCwAAAM0"]
[Thu Dec 25 18:47:38.622854 2025] [:error] [pid 2996:tid 3011] [client 20.255.93.205:5839] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aU0WSqrrTp0EWNyhaIRNSQAAAQ0"]
[Thu Dec 25 18:47:38.886306 2025] [:error] [pid 31571:tid 31628] [client 20.255.93.205:5937] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aU0WSu7e_lLK2X5wU8m2vwAAAIE"]
[Thu Dec 25 18:47:39.179416 2025] [:error] [pid 2996:tid 2998] [client 20.255.93.205:6119] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aU0WS6rrTp0EWNyhaIRNSgAAAQA"]
[Thu Dec 25 18:47:39.469328 2025] [:error] [pid 31571:tid 31646] [client 20.255.93.205:5844] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aU0WS-7e_lLK2X5wU8m2wAAAAJM"]
[Thu Dec 25 18:47:39.786175 2025] [:error] [pid 31571:tid 31629] [client 20.255.93.205:5794] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aU0WS-7e_lLK2X5wU8m2wQAAAII"]
[Thu Dec 25 18:47:40.127239 2025] [:error] [pid 2996:tid 3016] [client 20.255.93.205:5949] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aU0WTKrrTp0EWNyhaIRNSwAAARI"]
[Thu Dec 25 18:47:40.477955 2025] [:error] [pid 31569:tid 31592] [client 20.255.93.205:6015] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aU0WTGiSFBH7Ee_uldXUzwAAABM"]
[Thu Dec 25 18:47:40.807494 2025] [:error] [pid 31569:tid 31574] [client 20.255.93.205:5760] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aU0WTGiSFBH7Ee_uldXU0QAAAAE"]
[Thu Dec 25 18:47:41.147308 2025] [:error] [pid 2996:tid 3009] [client 20.255.93.205:5907] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aU0WTarrTp0EWNyhaIRNTQAAAQs"]
[Thu Dec 25 18:47:41.500612 2025] [:error] [pid 31655:tid 31663] [client 20.255.93.205:5856] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aU0WTZozPMk9HPtIJPOYDQAAAMY"]
[Thu Dec 25 18:47:41.823520 2025] [:error] [pid 31655:tid 31657] [client 20.255.93.205:6045] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aU0WTZozPMk9HPtIJPOYEAAAAMA"]
[Thu Dec 25 18:47:42.163464 2025] [:error] [pid 2996:tid 3002] [client 20.255.93.205:6001] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aU0WTqrrTp0EWNyhaIRNTwAAAQQ"]
[Thu Dec 25 18:47:42.505090 2025] [:error] [pid 31570:tid 31617] [client 20.255.93.205:5850] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aU0WTmPy2DpAzW_4a2g_CwAAAFE"]
[Thu Dec 25 18:47:42.835801 2025] [:error] [pid 31570:tid 31606] [client 20.255.93.205:5972] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aU0WTmPy2DpAzW_4a2g_DAAAAEY"]
[Thu Dec 25 18:47:43.177594 2025] [:error] [pid 31569:tid 31591] [client 20.255.93.205:5841] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aU0WT2iSFBH7Ee_uldXU0wAAABI"]
[Thu Dec 25 18:47:43.528670 2025] [:error] [pid 2996:tid 3014] [client 20.255.93.205:5921] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aU0WT6rrTp0EWNyhaIRNUwAAARA"]
[Thu Dec 25 18:47:43.817216 2025] [:error] [pid 2996:tid 3015] [client 20.255.93.205:5938] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aU0WT6rrTp0EWNyhaIRNVAAAARE"]
[Thu Dec 25 18:47:44.081904 2025] [:error] [pid 2996:tid 3001] [client 20.255.93.205:6007] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aU0WUKrrTp0EWNyhaIRNVQAAAQM"]
[Thu Dec 25 18:47:44.362421 2025] [:error] [pid 31570:tid 31610] [client 20.255.93.205:5894] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aU0WUGPy2DpAzW_4a2g_DgAAAEo"]
[Thu Dec 25 18:47:44.632747 2025] [:error] [pid 31655:tid 31660] [client 20.255.93.205:5827] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aU0WUJozPMk9HPtIJPOYEwAAAMM"]
[Thu Dec 25 18:47:44.902605 2025] [:error] [pid 31571:tid 31650] [client 20.255.93.205:5912] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aU0WUO7e_lLK2X5wU8m2xAAAAJc"]
[Thu Dec 25 18:47:45.172972 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:5919] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aU0WUarrTp0EWNyhaIRNWAAAAQk"]
[Thu Dec 25 18:47:45.440577 2025] [:error] [pid 2996:tid 2998] [client 20.255.93.205:5931] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aU0WUarrTp0EWNyhaIRNWgAAAQA"]
[Thu Dec 25 18:47:45.705436 2025] [:error] [pid 31569:tid 31582] [client 20.255.93.205:6009] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aU0WUWiSFBH7Ee_uldXU1gAAAAk"]
[Thu Dec 25 18:47:45.972158 2025] [:error] [pid 31571:tid 31642] [client 20.255.93.205:5781] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aU0WUe7e_lLK2X5wU8m2xwAAAI8"]
[Thu Dec 25 18:47:46.248047 2025] [:error] [pid 31570:tid 31621] [client 20.255.93.205:5946] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aU0WUmPy2DpAzW_4a2g_EAAAAFU"]
[Thu Dec 25 18:47:46.512959 2025] [:error] [pid 31569:tid 31596] [client 20.255.93.205:5978] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aU0WUmiSFBH7Ee_uldXU2AAAABc"]
[Thu Dec 25 18:47:46.782240 2025] [:error] [pid 31571:tid 31630] [client 20.255.93.205:6070] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aU0WUu7e_lLK2X5wU8m2yAAAAIM"]
[Thu Dec 25 18:47:47.077065 2025] [:error] [pid 31655:tid 31668] [client 20.255.93.205:5854] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aU0WU5ozPMk9HPtIJPOYFQAAAMs"]
[Thu Dec 25 18:47:47.349290 2025] [:error] [pid 31569:tid 31580] [client 20.255.93.205:5855] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aU0WU2iSFBH7Ee_uldXU2QAAAAc"]
[Thu Dec 25 18:47:47.637234 2025] [:error] [pid 31569:tid 31577] [client 20.255.93.205:6071] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aU0WU2iSFBH7Ee_uldXU2gAAAAQ"]
[Thu Dec 25 18:47:47.938568 2025] [:error] [pid 31570:tid 31623] [client 20.255.93.205:5898] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aU0WU2Py2DpAzW_4a2g_EwAAAFc"]
[Thu Dec 25 18:47:48.229324 2025] [:error] [pid 31569:tid 31576] [client 20.255.93.205:5913] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aU0WVGiSFBH7Ee_uldXU2wAAAAM"]
[Thu Dec 25 18:47:48.495722 2025] [:error] [pid 31655:tid 31667] [client 20.255.93.205:5829] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aU0WVJozPMk9HPtIJPOYFwAAAMo"]
[Thu Dec 25 18:47:48.789297 2025] [:error] [pid 31569:tid 31585] [client 20.255.93.205:5889] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aU0WVGiSFBH7Ee_uldXU3gAAAAw"]
[Thu Dec 25 18:47:49.054561 2025] [:error] [pid 31569:tid 31584] [client 20.255.93.205:5979] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aU0WVWiSFBH7Ee_uldXU3wAAAAs"]
[Thu Dec 25 18:47:49.320503 2025] [:error] [pid 31655:tid 31661] [client 20.255.93.205:5934] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aU0WVZozPMk9HPtIJPOYGAAAAMQ"]
[Thu Dec 25 18:47:49.598472 2025] [:error] [pid 31655:tid 31681] [client 20.255.93.205:5899] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aU0WVZozPMk9HPtIJPOYGQAAANg"]
[Thu Dec 25 18:47:49.859295 2025] [:error] [pid 31570:tid 31622] [client 20.255.93.205:5895] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aU0WVWPy2DpAzW_4a2g_FgAAAFY"]
[Thu Dec 25 18:47:50.147093 2025] [:error] [pid 31655:tid 31658] [client 20.255.93.205:6000] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aU0WVpozPMk9HPtIJPOYGwAAAME"]
[Thu Dec 25 18:47:50.422913 2025] [:error] [pid 31569:tid 31586] [client 20.255.93.205:13348] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aU0WVmiSFBH7Ee_uldXU4AAAAA0"]
[Thu Dec 25 18:47:50.692337 2025] [:error] [pid 31569:tid 31591] [client 20.255.93.205:5941] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aU0WVmiSFBH7Ee_uldXU4QAAABI"]
[Thu Dec 25 18:47:50.952913 2025] [:error] [pid 31569:tid 31594] [client 20.255.93.205:5906] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aU0WVmiSFBH7Ee_uldXU4gAAABU"]
[Thu Dec 25 18:47:51.217153 2025] [:error] [pid 31571:tid 31648] [client 20.255.93.205:5883] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aU0WV-7e_lLK2X5wU8m2ygAAAJU"]
[Thu Dec 25 18:47:51.492249 2025] [:error] [pid 31655:tid 31663] [client 20.255.93.205:5892] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aU0WV5ozPMk9HPtIJPOYHQAAAMY"]
[Thu Dec 25 18:47:51.755502 2025] [:error] [pid 31655:tid 31657] [client 20.255.93.205:5846] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aU0WV5ozPMk9HPtIJPOYHgAAAMA"]
[Thu Dec 25 18:47:52.028640 2025] [:error] [pid 31571:tid 31635] [client 20.255.93.205:5851] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aU0WWO7e_lLK2X5wU8m2ywAAAIg"]
[Thu Dec 25 18:47:52.292948 2025] [:error] [pid 31569:tid 31595] [client 20.255.93.205:5840] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aU0WWGiSFBH7Ee_uldXU5AAAABY"]
[Thu Dec 25 18:47:52.585307 2025] [:error] [pid 31569:tid 31581] [client 20.255.93.205:5803] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aU0WWGiSFBH7Ee_uldXU5gAAAAg"]
[Thu Dec 25 18:47:52.847147 2025] [:error] [pid 2996:tid 3014] [client 20.255.93.205:6012] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aU0WWKrrTp0EWNyhaIRNXwAAARA"]
[Thu Dec 25 18:47:53.110236 2025] [:error] [pid 31655:tid 31659] [client 20.255.93.205:5865] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aU0WWZozPMk9HPtIJPOYIQAAAMI"]
[Thu Dec 25 18:47:53.372322 2025] [:error] [pid 31571:tid 31645] [client 20.255.93.205:5925] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aU0WWe7e_lLK2X5wU8m2zwAAAJI"]
[Thu Dec 25 18:47:53.634210 2025] [:error] [pid 31655:tid 31660] [client 20.255.93.205:5879] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aU0WWZozPMk9HPtIJPOYIgAAAMM"]
[Thu Dec 25 18:47:53.906811 2025] [:error] [pid 31571:tid 31643] [client 20.255.93.205:5861] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aU0WWe7e_lLK2X5wU8m20AAAAJA"]
[Thu Dec 25 18:47:54.182330 2025] [:error] [pid 31655:tid 31664] [client 20.255.93.205:5771] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aU0WWpozPMk9HPtIJPOYJQAAAMc"]
[Thu Dec 25 18:47:54.458531 2025] [:error] [pid 31571:tid 31633] [client 20.255.93.205:5901] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aU0WWu7e_lLK2X5wU8m20QAAAIY"]
[Thu Dec 25 18:47:54.741200 2025] [:error] [pid 31570:tid 31600] [client 20.255.93.205:5849] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aU0WWmPy2DpAzW_4a2g_GQAAAEA"]
[Thu Dec 25 18:47:55.004235 2025] [:error] [pid 2996:tid 3015] [client 20.255.93.205:5832] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aU0WW6rrTp0EWNyhaIRNYAAAARE"]
[Thu Dec 25 18:47:55.265588 2025] [:error] [pid 31655:tid 31678] [client 20.255.93.205:5880] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aU0WW5ozPMk9HPtIJPOYJwAAANU"]
[Thu Dec 25 18:47:55.527636 2025] [:error] [pid 31571:tid 31647] [client 20.255.93.205:5835] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aU0WW-7e_lLK2X5wU8m20gAAAJQ"]
[Thu Dec 25 18:47:55.788754 2025] [:error] [pid 31571:tid 31628] [client 20.255.93.205:5825] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aU0WW-7e_lLK2X5wU8m20wAAAIE"]
[Thu Dec 25 18:47:56.051200 2025] [:error] [pid 31655:tid 31680] [client 20.255.93.205:5908] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aU0WXJozPMk9HPtIJPOYKAAAANc"]
[Thu Dec 25 18:47:56.316805 2025] [:error] [pid 31571:tid 31646] [client 20.255.93.205:5838] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aU0WXO7e_lLK2X5wU8m21AAAAJM"]
[Thu Dec 25 18:47:56.579069 2025] [:error] [pid 31570:tid 31620] [client 20.255.93.205:5903] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aU0WXGPy2DpAzW_4a2g_GwAAAFQ"]
[Thu Dec 25 18:47:56.840150 2025] [:error] [pid 31655:tid 31667] [client 20.255.93.205:5984] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aU0WXJozPMk9HPtIJPOYKQAAAMo"]
[Thu Dec 25 18:47:57.105242 2025] [:error] [pid 31571:tid 31629] [client 20.255.93.205:5928] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aU0WXe7e_lLK2X5wU8m21QAAAII"]
[Thu Dec 25 18:47:57.366479 2025] [:error] [pid 31655:tid 31681] [client 20.255.93.205:5772] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aU0WXZozPMk9HPtIJPOYKwAAANg"]
[Thu Dec 25 18:47:57.628786 2025] [:error] [pid 31570:tid 31606] [client 20.255.93.205:5881] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aU0WXWPy2DpAzW_4a2g_HQAAAEY"]
[Thu Dec 25 18:47:57.890397 2025] [:error] [pid 31571:tid 31650] [client 20.255.93.205:5958] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aU0WXe7e_lLK2X5wU8m22QAAAJc"]
[Thu Dec 25 18:47:58.152283 2025] [:error] [pid 2996:tid 3017] [client 20.255.93.205:5950] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aU0WXqrrTp0EWNyhaIRNYgAAARM"]
[Thu Dec 25 18:47:58.428743 2025] [:error] [pid 2996:tid 3018] [client 20.255.93.205:5828] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aU0WXqrrTp0EWNyhaIRNYwAAARQ"]
[Thu Dec 25 18:47:58.690434 2025] [:error] [pid 31655:tid 31665] [client 20.255.93.205:6004] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aU0WXpozPMk9HPtIJPOYLAAAAMg"]
[Thu Dec 25 18:47:58.959427 2025] [:error] [pid 31570:tid 31612] [client 20.255.93.205:5988] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aU0WXmPy2DpAzW_4a2g_HwAAAEw"]
[Thu Dec 25 18:47:59.222494 2025] [:error] [pid 31570:tid 31610] [client 20.255.93.205:5905] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aU0WX2Py2DpAzW_4a2g_IgAAAEo"]
[Thu Dec 25 18:47:59.487051 2025] [:error] [pid 31570:tid 31613] [client 20.255.93.205:5833] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aU0WX2Py2DpAzW_4a2g_JAAAAE0"]
[Thu Dec 25 18:47:59.748915 2025] [:error] [pid 31570:tid 31615] [client 20.255.93.205:5764] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aU0WX2Py2DpAzW_4a2g_JQAAAE8"]
[Thu Dec 25 18:48:40.634315 2025] [:error] [pid 31655:tid 31669] [client 20.255.93.205:5857] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aU0WiJozPMk9HPtIJPOYggAAAMw"]
[Thu Dec 25 18:48:40.954254 2025] [:error] [pid 31570:tid 31612] [client 20.255.93.205:5845] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aU0WiGPy2DpAzW_4a2g_PQAAAEw"]
[Thu Dec 25 18:48:41.290443 2025] [:error] [pid 2996:tid 3003] [client 20.255.93.205:5920] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aU0WiarrTp0EWNyhaIRNlQAAAQU"]
[Thu Dec 25 18:48:41.636626 2025] [:error] [pid 31571:tid 31637] [client 20.255.93.205:6085] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aU0Wie7e_lLK2X5wU8m26QAAAIo"]
[Thu Dec 25 18:48:41.988988 2025] [:error] [pid 31655:tid 31676] [client 20.255.93.205:5843] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aU0WiZozPMk9HPtIJPOYhQAAANM"]
[Thu Dec 25 18:48:42.354994 2025] [:error] [pid 31570:tid 31613] [client 20.255.93.205:5910] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aU0WimPy2DpAzW_4a2g_PgAAAE0"]
[Thu Dec 25 18:48:42.712280 2025] [:error] [pid 31570:tid 31608] [client 20.255.93.205:5973] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aU0WimPy2DpAzW_4a2g_QgAAAEg"]
[Thu Dec 25 18:48:43.042290 2025] [:error] [pid 31570:tid 31601] [client 20.255.93.205:5871] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aU0Wi2Py2DpAzW_4a2g_RwAAAEE"]
[Thu Dec 25 18:48:43.341718 2025] [:error] [pid 31655:tid 31670] [client 20.255.93.205:5801] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aU0Wi5ozPMk9HPtIJPOYhgAAAM0"]
[Thu Dec 25 18:48:43.602992 2025] [:error] [pid 31570:tid 31604] [client 20.255.93.205:5873] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aU0Wi2Py2DpAzW_4a2g_TAAAAEQ"]
[Thu Dec 25 18:48:43.872847 2025] [:error] [pid 31570:tid 31606] [client 20.255.93.205:5948] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aU0Wi2Py2DpAzW_4a2g_TgAAAEY"]
[Thu Dec 25 18:48:44.134395 2025] [:error] [pid 31570:tid 31620] [client 20.255.93.205:5768] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aU0WjGPy2DpAzW_4a2g_UAAAAFQ"]
[Thu Dec 25 18:48:44.396133 2025] [:error] [pid 31570:tid 31602] [client 20.255.93.205:5860] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aU0WjGPy2DpAzW_4a2g_UgAAAEI"]
[Thu Dec 25 18:48:44.666537 2025] [:error] [pid 31571:tid 31636] [client 20.255.93.205:5787] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aU0WjO7e_lLK2X5wU8m27AAAAIk"]
[Thu Dec 25 18:48:44.933749 2025] [:error] [pid 2996:tid 3014] [client 20.255.93.205:5944] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aU0WjKrrTp0EWNyhaIRNmgAAARA"]
[Thu Dec 25 18:48:45.195690 2025] [:error] [pid 31571:tid 31631] [client 20.255.93.205:5796] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aU0Wje7e_lLK2X5wU8m27gAAAIQ"]
[Thu Dec 25 18:48:45.467085 2025] [:error] [pid 31571:tid 31640] [client 20.255.93.205:5878] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aU0Wje7e_lLK2X5wU8m28AAAAI0"]
[Thu Dec 25 18:48:45.729852 2025] [:error] [pid 2996:tid 2998] [client 20.255.93.205:5867] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aU0WjarrTp0EWNyhaIRNmwAAAQA"]
[Thu Dec 25 18:48:45.991103 2025] [:error] [pid 2996:tid 3006] [client 20.255.93.205:5986] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aU0WjarrTp0EWNyhaIRNnAAAAQg"]
[Thu Dec 25 18:48:46.257668 2025] [:error] [pid 2996:tid 3001] [client 20.255.93.205:5837] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aU0WjqrrTp0EWNyhaIRNngAAAQM"]
[Thu Dec 25 18:48:46.529564 2025] [:error] [pid 31571:tid 31627] [client 20.255.93.205:5790] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aU0Wju7e_lLK2X5wU8m29gAAAIA"]
[Thu Dec 25 18:48:46.790294 2025] [:error] [pid 2996:tid 3020] [client 20.255.93.205:5831] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aU0WjqrrTp0EWNyhaIRNnwAAARY"]
[Thu Dec 25 18:48:47.058828 2025] [:error] [pid 31570:tid 31617] [client 20.255.93.205:5791] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aU0Wj2Py2DpAzW_4a2g_aAAAAFE"]
[Thu Dec 25 18:48:47.320610 2025] [:error] [pid 2996:tid 3003] [client 20.255.93.205:5918] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aU0Wj6rrTp0EWNyhaIRNowAAAQU"]
[Thu Dec 25 18:48:47.581703 2025] [:error] [pid 2996:tid 3007] [client 20.255.93.205:5785] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aU0Wj6rrTp0EWNyhaIRNpwAAAQk"]
[Thu Dec 25 18:48:47.847046 2025] [:error] [pid 2996:tid 3021] [client 20.255.93.205:5915] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aU0Wj6rrTp0EWNyhaIRNqAAAARc"]
[Thu Dec 25 18:48:48.108476 2025] [:error] [pid 31655:tid 31676] [client 20.255.93.205:5862] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aU0WkJozPMk9HPtIJPOYlgAAANM"]
[Thu Dec 25 18:48:48.370245 2025] [:error] [pid 31571:tid 31641] [client 20.255.93.205:5804] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aU0WkO7e_lLK2X5wU8m2_AAAAI4"]
[Thu Dec 25 18:48:48.637339 2025] [:error] [pid 31655:tid 31680] [client 20.255.93.205:5765] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aU0WkJozPMk9HPtIJPOYmwAAANc"]
[Thu Dec 25 18:48:48.902286 2025] [:error] [pid 31569:tid 31577] [client 20.255.93.205:5882] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aU0WkGiSFBH7Ee_uldXVLAAAAAQ"]
[Thu Dec 25 18:48:49.163015 2025] [:error] [pid 31570:tid 31603] [client 20.255.93.205:5876] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aU0WkWPy2DpAzW_4a2g_ewAAAEM"]
[Thu Dec 25 18:48:49.442759 2025] [:error] [pid 31655:tid 31664] [client 20.255.93.205:5885] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aU0WkZozPMk9HPtIJPOYoQAAAMc"]
[Thu Dec 25 18:48:49.703678 2025] [:error] [pid 31655:tid 31681] [client 20.255.93.205:5762] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aU0WkZozPMk9HPtIJPOYowAAANg"]
[Thu Dec 25 18:48:49.994018 2025] [:error] [pid 31655:tid 31667] [client 20.255.93.205:5945] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aU0WkZozPMk9HPtIJPOYpgAAAMo"]
[Thu Dec 25 18:48:50.255349 2025] [:error] [pid 31655:tid 31659] [client 20.255.93.205:5866] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aU0WkpozPMk9HPtIJPOYqQAAAMI"]
[Thu Dec 25 18:48:50.534015 2025] [:error] [pid 31570:tid 31603] [client 20.255.93.205:5957] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aU0WkmPy2DpAzW_4a2g_jwAAAEM"]
[Thu Dec 25 18:48:50.833374 2025] [:error] [pid 2996:tid 3016] [client 20.255.93.205:5887] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aU0WkqrrTp0EWNyhaIRNrQAAARI"]
[Thu Dec 25 18:48:51.096268 2025] [:error] [pid 31569:tid 31590] [client 20.255.93.205:5864] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aU0Wk2iSFBH7Ee_uldXVNQAAABE"]
[Thu Dec 25 18:48:51.358787 2025] [:error] [pid 31655:tid 31674] [client 20.255.93.205:5707] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aU0Wk5ozPMk9HPtIJPOYqgAAANE"]
[Thu Dec 25 18:48:51.620474 2025] [:error] [pid 2996:tid 3020] [client 20.255.93.205:5777] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aU0Wk6rrTp0EWNyhaIRNsgAAARY"]
[Thu Dec 25 18:48:51.887724 2025] [:error] [pid 31571:tid 31635] [client 20.255.93.205:5933] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aU0Wk-7e_lLK2X5wU8m3GQAAAIg"]
[Thu Dec 25 18:48:52.153297 2025] [:error] [pid 31569:tid 31584] [client 20.255.93.205:5788] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aU0WlGiSFBH7Ee_uldXVPQAAAAs"]
[Thu Dec 25 18:48:52.415665 2025] [:error] [pid 31570:tid 31606] [client 20.255.93.205:5868] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aU0WlGPy2DpAzW_4a2g_oQAAAEY"]
[Thu Dec 25 18:48:52.684609 2025] [:error] [pid 31570:tid 31603] [client 20.255.93.205:5806] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aU0WlGPy2DpAzW_4a2g_pQAAAEM"]
[Thu Dec 25 18:48:52.949907 2025] [:error] [pid 31570:tid 31610] [client 20.255.93.205:5703] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aU0WlGPy2DpAzW_4a2g_pwAAAEo"]
[Thu Dec 25 18:48:53.211327 2025] [:error] [pid 31569:tid 31596] [client 20.255.93.205:5776] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aU0WlWiSFBH7Ee_uldXVQwAAABc"]
[Thu Dec 25 18:48:53.475319 2025] [:error] [pid 31569:tid 31589] [client 20.255.93.205:5858] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aU0WlWiSFBH7Ee_uldXVRgAAABA"]
[Thu Dec 25 18:48:53.736804 2025] [:error] [pid 31569:tid 31592] [client 20.255.93.205:5782] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aU0WlWiSFBH7Ee_uldXVSgAAABM"]
[Thu Dec 25 18:48:54.007957 2025] [:error] [pid 31571:tid 31651] [client 20.255.93.205:5822] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aU0Wlu7e_lLK2X5wU8m3IwAAAJg"]
[Thu Dec 25 18:48:54.269446 2025] [:error] [pid 31655:tid 31664] [client 20.255.93.205:5789] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aU0WlpozPMk9HPtIJPOYtgAAAMc"]
[Thu Dec 25 18:48:54.530807 2025] [:error] [pid 31570:tid 31600] [client 20.255.93.205:5753] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aU0WlmPy2DpAzW_4a2g_rQAAAEA"]
[Thu Dec 25 18:48:54.794431 2025] [:error] [pid 31569:tid 31579] [client 20.255.93.205:5717] [client 20.255.93.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aU0WlmiSFBH7Ee_uldXVTAAAAAY"]
[Thu Dec 25 21:27:46.718065 2025] [:error] [pid 22043:tid 22048] [client 34.141.144.218:52848] [client 34.141.144.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.141.144.218, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aU070j4YVtlb2Iz_QE5E1gAAAAA"]
[Thu Dec 25 21:27:52.247654 2025] [:error] [pid 22043:tid 22067] [client 34.141.144.218:52848] [client 34.141.144.218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU072D4YVtlb2Iz_QE5E7wAAABM"]
[Thu Dec 25 21:27:54.574609 2025] [:error] [pid 22043:tid 22072] [client 34.141.144.218:52848] [client 34.141.144.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.141.144.218, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aU072j4YVtlb2Iz_QE5E9wAAABg"]
[Thu Dec 25 22:15:41.143092 2025] [:error] [pid 22045:tid 22119] [client 4.241.194.62:20179] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh1.php"] [unique_id "aU1HDasGGmXjDnvlmHtwCQAAAVE"]
[Thu Dec 25 22:15:43.251768 2025] [:error] [pid 27869:tid 27887] [client 4.241.194.62:20931] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh1.php"] [unique_id "aU1HDxNK7_n86kBD7qfdAgAAAJA"]
[Thu Dec 25 22:15:44.966451 2025] [:error] [pid 22045:tid 22113] [client 4.241.194.62:14053] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh1.php"] [unique_id "aU1HEKsGGmXjDnvlmHtwDAAAAUs"]
[Thu Dec 25 22:15:46.244562 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:15859] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh1.php"] [unique_id "aU1HEhNK7_n86kBD7qfdBQAAAJc"]
[Thu Dec 25 22:15:49.641511 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:23242] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w3llstore.php"] [unique_id "aU1HFRNK7_n86kBD7qfdCgAAAIc"]
[Thu Dec 25 22:15:51.270390 2025] [:error] [pid 22044:tid 22077] [client 4.241.194.62:15592] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w3llstore.php"] [unique_id "aU1HF3PTC5rQKTB0FQ-hjwAAAMI"]
[Thu Dec 25 22:15:53.786143 2025] [:error] [pid 22044:tid 22079] [client 4.241.194.62:2297] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w3llstore.php"] [unique_id "aU1HGXPTC5rQKTB0FQ-hlQAAAMQ"]
[Thu Dec 25 22:15:56.609986 2025] [:error] [pid 22043:tid 22058] [client 4.241.194.62:62938] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w3llstore.php"] [unique_id "aU1HHD4YVtlb2Iz_QE5URAAAAAo"]
[Thu Dec 25 22:16:00.360423 2025] [:error] [pid 22044:tid 22098] [client 4.241.194.62:62943] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s12.php"] [unique_id "aU1HIHPTC5rQKTB0FQ-hnwAAANc"]
[Thu Dec 25 22:16:01.352287 2025] [:error] [pid 22044:tid 22099] [client 4.241.194.62:64201] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s12.php"] [unique_id "aU1HIXPTC5rQKTB0FQ-hoAAAANg"]
[Thu Dec 25 22:16:03.469796 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:2362] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s12.php"] [unique_id "aU1HI3PTC5rQKTB0FQ-hogAAAMk"]
[Thu Dec 25 22:16:06.767673 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:62918] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s12.php"] [unique_id "aU1HJhNK7_n86kBD7qfdIwAAAIQ"]
[Thu Dec 25 22:16:10.711394 2025] [:error] [pid 22045:tid 22123] [client 4.241.194.62:23235] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aU1HKqsGGmXjDnvlmHtwfAAAAVU"]
[Thu Dec 25 22:16:15.814406 2025] [:error] [pid 22131:tid 22149] [client 4.241.194.62:2163] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aU1HL5vVMtSTB4lX2fY3FQAAAE4"]
[Thu Dec 25 22:16:19.385058 2025] [:error] [pid 27869:tid 27877] [client 4.241.194.62:2136] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aU1HMxNK7_n86kBD7qfdOgAAAIY"]
[Thu Dec 25 22:16:22.681708 2025] [:error] [pid 22131:tid 22152] [client 4.241.194.62:23236] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aU1HNpvVMtSTB4lX2fY3JAAAAFE"]
[Thu Dec 25 22:16:28.990521 2025] [:error] [pid 22045:tid 22103] [client 4.241.194.62:20725] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aU1HPKsGGmXjDnvlmHtwmgAAAUE"]
[Thu Dec 25 22:16:33.127703 2025] [:error] [pid 22044:tid 22090] [client 4.241.194.62:2775] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aU1HQXPTC5rQKTB0FQ-iGAAAAM8"]
[Thu Dec 25 22:16:36.349245 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:17526] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aU1HRBNK7_n86kBD7qfdbwAAAI0"]
[Thu Dec 25 22:16:38.758990 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:11569] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "aU1HRpvVMtSTB4lX2fY3PwAAAE8"]
[Thu Dec 25 22:17:27.381665 2025] [:error] [pid 22044:tid 22085] [client 4.241.194.62:49627] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "aU1Hd3PTC5rQKTB0FQ-icwAAAMo"]
[Thu Dec 25 22:17:30.944453 2025] [:error] [pid 22131:tid 22155] [client 4.241.194.62:2190] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "aU1HepvVMtSTB4lX2fY3cQAAAFM"]
[Thu Dec 25 22:17:34.361304 2025] [:error] [pid 22045:tid 22107] [client 4.241.194.62:2227] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "aU1HfqsGGmXjDnvlmHtw2QAAAUU"]
[Thu Dec 25 22:17:36.060356 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:16441] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "aU1HgHPTC5rQKTB0FQ-imwAAAMA"]
[Thu Dec 25 22:17:37.142993 2025] [:error] [pid 27869:tid 27871] [client 4.241.194.62:49606] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kao.php"] [unique_id "aU1HgRNK7_n86kBD7qfeNQAAAIA"]
[Thu Dec 25 22:17:39.622033 2025] [:error] [pid 22044:tid 22098] [client 4.241.194.62:49649] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kao.php"] [unique_id "aU1Hg3PTC5rQKTB0FQ-inAAAANc"]
[Thu Dec 25 22:17:41.048623 2025] [:error] [pid 22131:tid 22143] [client 4.241.194.62:16386] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kao.php"] [unique_id "aU1HhZvVMtSTB4lX2fY3eAAAAEk"]
[Thu Dec 25 22:17:42.272145 2025] [:error] [pid 22131:tid 22133] [client 4.241.194.62:16401] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kao.php"] [unique_id "aU1HhpvVMtSTB4lX2fY3fAAAAEA"]
[Thu Dec 25 22:17:42.889023 2025] [:error] [pid 22044:tid 22089] [client 4.241.194.62:18286] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell_14dcb27c.php"] [unique_id "aU1HhnPTC5rQKTB0FQ-ioAAAAM4"]
[Thu Dec 25 22:17:44.804769 2025] [:error] [pid 22045:tid 22109] [client 4.241.194.62:50260] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell_14dcb27c.php"] [unique_id "aU1HiKsGGmXjDnvlmHtw5AAAAUc"]
[Thu Dec 25 22:17:46.483635 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:2208] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell_14dcb27c.php"] [unique_id "aU1HihNK7_n86kBD7qfeRQAAAI4"]
[Thu Dec 25 22:17:47.927333 2025] [:error] [pid 22045:tid 22115] [client 4.241.194.62:49604] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell_14dcb27c.php"] [unique_id "aU1Hi6sGGmXjDnvlmHtw6AAAAU0"]
[Thu Dec 25 22:17:49.508286 2025] [:error] [pid 22043:tid 22071] [client 4.241.194.62:16397] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aU1HjT4YVtlb2Iz_QE5UngAAABc"]
[Thu Dec 25 22:17:50.820436 2025] [:error] [pid 22045:tid 22119] [client 4.241.194.62:49601] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aU1HjqsGGmXjDnvlmHtw6gAAAVE"]
[Thu Dec 25 22:17:54.782844 2025] [:error] [pid 22131:tid 22139] [client 4.241.194.62:49624] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aU1HkpvVMtSTB4lX2fY3ggAAAEU"]
[Thu Dec 25 22:17:56.260623 2025] [:error] [pid 22131:tid 22148] [client 4.241.194.62:50263] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aU1HlJvVMtSTB4lX2fY3hAAAAE0"]
[Thu Dec 25 22:17:58.905909 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:11594] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-729.php"] [unique_id "aU1HlnPTC5rQKTB0FQ-ipgAAAMk"]
[Thu Dec 25 22:17:59.564812 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:16441] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-729.php"] [unique_id "aU1Hl5vVMtSTB4lX2fY3iAAAAFA"]
[Thu Dec 25 22:18:03.455187 2025] [:error] [pid 27869:tid 27886] [client 4.241.194.62:11641] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-729.php"] [unique_id "aU1HmxNK7_n86kBD7qfeagAAAI8"]
[Thu Dec 25 22:18:04.145826 2025] [:error] [pid 22043:tid 22055] [client 4.241.194.62:18254] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-729.php"] [unique_id "aU1HnD4YVtlb2Iz_QE5UpAAAAAc"]
[Thu Dec 25 22:18:05.229452 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:16384] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aU1HnRNK7_n86kBD7qfeewAAAI4"]
[Thu Dec 25 22:18:07.085830 2025] [:error] [pid 22131:tid 22148] [client 4.241.194.62:13988] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aU1Hn5vVMtSTB4lX2fY3lgAAAE0"]
[Thu Dec 25 22:18:08.162812 2025] [:error] [pid 27869:tid 27882] [client 4.241.194.62:49627] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aU1HoBNK7_n86kBD7qfehgAAAIs"]
[Thu Dec 25 22:18:09.394768 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:18267] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aU1HoRNK7_n86kBD7qfelAAAAJQ"]
[Thu Dec 25 22:18:11.713399 2025] [:error] [pid 27869:tid 27895] [client 4.241.194.62:13960] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aU1HoxNK7_n86kBD7qfeoQAAAJg"]
[Thu Dec 25 22:18:13.397986 2025] [:error] [pid 22043:tid 22054] [client 4.241.194.62:18272] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aU1HpT4YVtlb2Iz_QE5UtQAAAAY"]
[Thu Dec 25 22:18:14.381099 2025] [:error] [pid 22044:tid 22077] [client 4.241.194.62:18280] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aU1HpnPTC5rQKTB0FQ-i1QAAAMI"]
[Thu Dec 25 22:18:15.773687 2025] [:error] [pid 22044:tid 22080] [client 4.241.194.62:50258] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aU1Hp3PTC5rQKTB0FQ-i4QAAAMU"]
[Thu Dec 25 22:18:17.703628 2025] [:error] [pid 22043:tid 22071] [client 4.241.194.62:18285] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "aU1HqT4YVtlb2Iz_QE5UvgAAABc"]
[Thu Dec 25 22:18:19.808662 2025] [:error] [pid 22044:tid 22080] [client 4.241.194.62:18287] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "aU1Hq3PTC5rQKTB0FQ-i8wAAAMU"]
[Thu Dec 25 22:18:21.344958 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:49600] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "aU1HrRNK7_n86kBD7qfe0QAAAJc"]
[Thu Dec 25 22:19:17.609582 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:16413] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aU1H5ZvVMtSTB4lX2fY4TAAAAFA"]
[Thu Dec 25 22:19:20.011266 2025] [:error] [pid 22043:tid 22072] [client 4.241.194.62:49610] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aU1H6D4YVtlb2Iz_QE5VAAAAABg"]
[Thu Dec 25 22:19:24.112320 2025] [:error] [pid 22043:tid 22071] [client 4.241.194.62:13713] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aU1H7D4YVtlb2Iz_QE5VAgAAABc"]
[Thu Dec 25 22:19:26.289853 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:49021] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aU1H7hNK7_n86kBD7qffVwAAAIc"]
[Thu Dec 25 22:19:27.644140 2025] [:error] [pid 22043:tid 22049] [client 4.241.194.62:53045] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aU1H7z4YVtlb2Iz_QE5VCQAAAAE"]
[Thu Dec 25 22:19:29.607965 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:49004] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aU1H8RNK7_n86kBD7qffWwAAAIg"]
[Thu Dec 25 22:19:31.675741 2025] [:error] [pid 22045:tid 22108] [client 4.241.194.62:21897] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aU1H86sGGmXjDnvlmHtxhAAAAUY"]
[Thu Dec 25 22:19:33.114321 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:2488] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aU1H9XPTC5rQKTB0FQ-kCgAAAMk"]
[Thu Dec 25 22:19:35.736064 2025] [:error] [pid 22044:tid 22090] [client 4.241.194.62:2470] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aU1H93PTC5rQKTB0FQ-kDQAAAM8"]
[Thu Dec 25 22:19:37.384473 2025] [:error] [pid 27869:tid 27873] [client 4.241.194.62:17463] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aU1H-RNK7_n86kBD7qffXwAAAII"]
[Thu Dec 25 22:19:38.340252 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:21971] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aU1H-hNK7_n86kBD7qffYAAAAJQ"]
[Thu Dec 25 22:19:38.981239 2025] [:error] [pid 22044:tid 22095] [client 4.241.194.62:21959] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aU1H-nPTC5rQKTB0FQ-kEgAAANQ"]
[Thu Dec 25 22:19:41.829707 2025] [:error] [pid 22044:tid 22093] [client 4.241.194.62:50904] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aU1H_XPTC5rQKTB0FQ-kFQAAANI"]
[Thu Dec 25 22:19:44.095610 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:21989] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aU1IAHPTC5rQKTB0FQ-kGAAAAMk"]
[Thu Dec 25 22:19:45.392613 2025] [:error] [pid 22045:tid 22115] [client 4.241.194.62:20884] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aU1IAasGGmXjDnvlmHtxkAAAAU0"]
[Thu Dec 25 22:19:47.425833 2025] [:error] [pid 22043:tid 22059] [client 4.241.194.62:50944] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aU1IAz4YVtlb2Iz_QE5VGgAAAAs"]
[Thu Dec 25 22:19:48.774704 2025] [:error] [pid 27869:tid 27889] [client 4.241.194.62:50881] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aU1IBBNK7_n86kBD7qffbQAAAJI"]
[Thu Dec 25 22:19:50.724590 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:56961] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aU1IBpvVMtSTB4lX2fY4awAAAFA"]
[Thu Dec 25 22:19:52.485424 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:24823] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aU1ICBNK7_n86kBD7qffdAAAAIQ"]
[Thu Dec 25 22:19:53.790590 2025] [:error] [pid 22044:tid 22094] [client 4.241.194.62:2383] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aU1ICXPTC5rQKTB0FQ-kHgAAANM"]
[Thu Dec 25 22:19:55.623660 2025] [:error] [pid 22045:tid 22105] [client 4.241.194.62:24801] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aU1IC6sGGmXjDnvlmHtxlwAAAUM"]
[Thu Dec 25 22:19:59.344097 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:50996] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aU1ID5vVMtSTB4lX2fY4cwAAAFA"]
[Thu Dec 25 22:20:01.203330 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:56982] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aU1IEXPTC5rQKTB0FQ-kIwAAAMk"]
[Thu Dec 25 22:20:04.795697 2025] [:error] [pid 22131:tid 22135] [client 4.241.194.62:50959] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aU1IFJvVMtSTB4lX2fY4egAAAEI"]
[Thu Dec 25 22:20:07.083461 2025] [:error] [pid 22044:tid 22094] [client 4.241.194.62:20432] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aU1IF3PTC5rQKTB0FQ-kLAAAANM"]
[Thu Dec 25 22:20:09.070846 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:24809] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aU1IGRNK7_n86kBD7qffiAAAAIc"]
[Thu Dec 25 22:20:10.451742 2025] [:error] [pid 22131:tid 22135] [client 4.241.194.62:24533] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aU1IGpvVMtSTB4lX2fY4igAAAEI"]
[Thu Dec 25 22:20:12.222786 2025] [:error] [pid 22045:tid 22118] [client 4.241.194.62:20621] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aU1IHKsGGmXjDnvlmHtxpAAAAVA"]
[Thu Dec 25 22:21:04.266093 2025] [:error] [pid 22045:tid 22117] [client 4.241.194.62:16121] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "aU1IUKsGGmXjDnvlmHtyAgAAAU8"]
[Thu Dec 25 22:21:06.827140 2025] [:error] [pid 22044:tid 22076] [client 4.241.194.62:2106] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "aU1IUnPTC5rQKTB0FQ-kZAAAAME"]
[Thu Dec 25 22:21:09.121511 2025] [:error] [pid 22131:tid 22153] [client 4.241.194.62:49610] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "aU1IVZvVMtSTB4lX2fY42QAAAFI"]
[Thu Dec 25 22:21:10.838676 2025] [:error] [pid 22045:tid 22110] [client 4.241.194.62:49703] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "aU1IVqsGGmXjDnvlmHtyCQAAAUg"]
[Thu Dec 25 22:21:15.985348 2025] [:error] [pid 22044:tid 22099] [client 4.241.194.62:17475] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aU1IW3PTC5rQKTB0FQ-kbQAAANg"]
[Thu Dec 25 22:21:17.580377 2025] [:error] [pid 22131:tid 22160] [client 4.241.194.62:24492] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aU1IXZvVMtSTB4lX2fY44QAAAFg"]
[Thu Dec 25 22:21:20.319796 2025] [:error] [pid 22045:tid 22112] [client 4.241.194.62:24464] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aU1IYKsGGmXjDnvlmHtyGgAAAUo"]
[Thu Dec 25 22:21:23.120224 2025] [:error] [pid 22044:tid 22083] [client 4.241.194.62:24509] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aU1IY3PTC5rQKTB0FQ-kfAAAAMg"]
[Thu Dec 25 22:21:24.417488 2025] [:error] [pid 27869:tid 27892] [client 4.241.194.62:20718] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tesTyuj.php"] [unique_id "aU1IZBNK7_n86kBD7qfgBgAAAJU"]
[Thu Dec 25 22:21:24.991634 2025] [:error] [pid 22043:tid 22048] [client 4.241.194.62:64196] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tesTyuj.php"] [unique_id "aU1IZD4YVtlb2Iz_QE5VhwAAAAA"]
[Thu Dec 25 22:21:26.918497 2025] [:error] [pid 27869:tid 27874] [client 4.241.194.62:59698] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tesTyuj.php"] [unique_id "aU1IZhNK7_n86kBD7qfgEAAAAIM"]
[Thu Dec 25 22:21:30.520949 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:64250] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tesTyuj.php"] [unique_id "aU1IanPTC5rQKTB0FQ-kngAAAMA"]
[Thu Dec 25 22:21:34.508086 2025] [:error] [pid 22044:tid 22083] [client 4.241.194.62:2280] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww3.php"] [unique_id "aU1IbnPTC5rQKTB0FQ-krwAAAMg"]
[Thu Dec 25 22:21:38.559204 2025] [:error] [pid 22043:tid 22069] [client 4.241.194.62:18498] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww3.php"] [unique_id "aU1Icj4YVtlb2Iz_QE5VjgAAABU"]
[Thu Dec 25 22:21:41.716313 2025] [:error] [pid 22044:tid 22078] [client 4.241.194.62:50957] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww3.php"] [unique_id "aU1IdXPTC5rQKTB0FQ-kwQAAAMM"]
[Thu Dec 25 22:21:44.000027 2025] [:error] [pid 22044:tid 22077] [client 4.241.194.62:24293] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww3.php"] [unique_id "aU1Id3PTC5rQKTB0FQ-kyQAAAMI"]
[Thu Dec 25 22:21:45.992033 2025] [:error] [pid 22044:tid 22098] [client 4.241.194.62:2407] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aU1IeXPTC5rQKTB0FQ-kzAAAANc"]
[Thu Dec 25 22:21:48.144447 2025] [:error] [pid 27869:tid 27887] [client 4.241.194.62:20431] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aU1IfBNK7_n86kBD7qfgRgAAAJA"]
[Thu Dec 25 22:21:51.597036 2025] [:error] [pid 22044:tid 22086] [client 4.241.194.62:57017] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aU1If3PTC5rQKTB0FQ-k3AAAAMs"]
[Thu Dec 25 22:21:54.728599 2025] [:error] [pid 22045:tid 22116] [client 4.241.194.62:2414] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aU1IgqsGGmXjDnvlmHtyWwAAAU4"]
[Thu Dec 25 22:21:57.755267 2025] [:error] [pid 22045:tid 22102] [client 4.241.194.62:24284] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-sid.php"] [unique_id "aU1IhasGGmXjDnvlmHtyaAAAAUA"]
[Thu Dec 25 22:21:59.460181 2025] [:error] [pid 27869:tid 27871] [client 4.241.194.62:24276] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-sid.php"] [unique_id "aU1IhxNK7_n86kBD7qfgWgAAAIA"]
[Thu Dec 25 22:22:00.905294 2025] [:error] [pid 22131:tid 22137] [client 4.241.194.62:20445] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-sid.php"] [unique_id "aU1IiJvVMtSTB4lX2fY5cgAAAEQ"]
[Thu Dec 25 22:22:45.750148 2025] [:error] [pid 22044:tid 22079] [client 4.241.194.62:20460] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-securitiy.php"] [unique_id "aU1ItXPTC5rQKTB0FQ-lIgAAAMQ"]
[Thu Dec 25 22:22:47.632277 2025] [:error] [pid 27869:tid 27876] [client 4.241.194.62:20906] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-securitiy.php"] [unique_id "aU1ItxNK7_n86kBD7qfgsAAAAIU"]
[Thu Dec 25 22:22:49.685654 2025] [:error] [pid 22045:tid 22111] [client 4.241.194.62:2400] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-securitiy.php"] [unique_id "aU1IuasGGmXjDnvlmHtypAAAAUk"]
[Thu Dec 25 22:22:50.537897 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:50935] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-securitiy.php"] [unique_id "aU1IuhNK7_n86kBD7qfgwAAAAJQ"]
[Thu Dec 25 22:22:51.794370 2025] [:error] [pid 22131:tid 22133] [client 4.241.194.62:2384] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aU1Iu5vVMtSTB4lX2fY5sgAAAEA"]
[Thu Dec 25 22:22:53.824939 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:50906] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aU1IvRNK7_n86kBD7qfg0AAAAJQ"]
[Thu Dec 25 22:22:56.816631 2025] [:error] [pid 22043:tid 22057] [client 4.241.194.62:51522] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aU1IwD4YVtlb2Iz_QE5WSgAAAAk"]
[Thu Dec 25 22:22:59.987717 2025] [:error] [pid 22045:tid 22118] [client 4.241.194.62:20461] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aU1Iw6sGGmXjDnvlmHtyvAAAAVA"]
[Thu Dec 25 22:23:01.444096 2025] [:error] [pid 22043:tid 22059] [client 4.241.194.62:20435] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ac.php"] [unique_id "aU1IxT4YVtlb2Iz_QE5WUQAAAAs"]
[Thu Dec 25 22:23:03.366049 2025] [:error] [pid 22045:tid 22123] [client 4.241.194.62:20875] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ac.php"] [unique_id "aU1Ix6sGGmXjDnvlmHtywwAAAVU"]
[Thu Dec 25 22:23:05.554530 2025] [:error] [pid 22044:tid 22091] [client 4.241.194.62:20896] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ac.php"] [unique_id "aU1IyXPTC5rQKTB0FQ-lMAAAANA"]
[Thu Dec 25 22:23:07.674835 2025] [:error] [pid 22131:tid 22158] [client 4.241.194.62:2408] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ac.php"] [unique_id "aU1Iy5vVMtSTB4lX2fY5yQAAAFY"]
[Thu Dec 25 22:23:09.596333 2025] [:error] [pid 22131:tid 22145] [client 4.241.194.62:20871] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aU1IzZvVMtSTB4lX2fY51AAAAEs"]
[Thu Dec 25 22:23:10.917826 2025] [:error] [pid 22131:tid 22158] [client 4.241.194.62:51001] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aU1IzpvVMtSTB4lX2fY52gAAAFY"]
[Thu Dec 25 22:23:11.461673 2025] [:error] [pid 22044:tid 22083] [client 4.241.194.62:57015] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aU1Iz3PTC5rQKTB0FQ-lPwAAAMg"]
[Thu Dec 25 22:23:13.494980 2025] [:error] [pid 22044:tid 22076] [client 4.241.194.62:50994] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aU1I0XPTC5rQKTB0FQ-lQQAAAME"]
[Thu Dec 25 22:23:15.694825 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:20918] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aU1I0xNK7_n86kBD7qfg-AAAAI0"]
[Thu Dec 25 22:23:18.602091 2025] [:error] [pid 22043:tid 22069] [client 4.241.194.62:20872] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aU1I1j4YVtlb2Iz_QE5WZwAAABU"]
[Thu Dec 25 22:23:19.644442 2025] [:error] [pid 27869:tid 27871] [client 4.241.194.62:2406] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aU1I1xNK7_n86kBD7qfhAAAAAIA"]
[Thu Dec 25 22:23:22.354205 2025] [:error] [pid 22044:tid 22092] [client 4.241.194.62:50982] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fc72f.php"] [unique_id "aU1I2nPTC5rQKTB0FQ-lSAAAANE"]
[Thu Dec 25 22:23:23.750205 2025] [:error] [pid 27869:tid 27889] [client 4.241.194.62:2431] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aU1I2xNK7_n86kBD7qfhCwAAAJI"]
[Thu Dec 25 22:23:25.444387 2025] [:error] [pid 27869:tid 27883] [client 4.241.194.62:50941] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aU1I3RNK7_n86kBD7qfhDwAAAIw"]
[Thu Dec 25 22:23:26.805212 2025] [:error] [pid 27869:tid 27876] [client 4.241.194.62:24303] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aU1I3hNK7_n86kBD7qfhEgAAAIU"]
[Thu Dec 25 22:23:30.214824 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:56978] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aU1I4nPTC5rQKTB0FQ-lWgAAAMA"]
[Thu Dec 25 22:23:33.899664 2025] [:error] [pid 22131:tid 22141] [client 4.241.194.62:20910] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jjrpo.php"] [unique_id "aU1I5ZvVMtSTB4lX2fY6CQAAAEc"]
[Thu Dec 25 22:23:37.724486 2025] [:error] [pid 22045:tid 22124] [client 4.241.194.62:50987] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jjrpo.php"] [unique_id "aU1I6asGGmXjDnvlmHty6wAAAVY"]
[Thu Dec 25 22:24:36.895809 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:13754] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aU1JJBNK7_n86kBD7qfhjAAAAJc"]
[Thu Dec 25 22:24:38.231344 2025] [:error] [pid 22044:tid 22088] [client 4.241.194.62:20372] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aU1JJnPTC5rQKTB0FQ-ltwAAAM0"]
[Thu Dec 25 22:24:40.608432 2025] [:error] [pid 22043:tid 22059] [client 4.241.194.62:3036] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aU1JKD4YVtlb2Iz_QE5WswAAAAs"]
[Thu Dec 25 22:24:41.775512 2025] [:error] [pid 22045:tid 22122] [client 4.241.194.62:18299] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aU1JKasGGmXjDnvlmHtzGwAAAVQ"]
[Thu Dec 25 22:24:43.749388 2025] [:error] [pid 22045:tid 22108] [client 4.241.194.62:23191] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "aU1JK6sGGmXjDnvlmHtzHAAAAUY"]
[Thu Dec 25 22:24:44.936071 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:20401] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "aU1JLBNK7_n86kBD7qfhjwAAAIc"]
[Thu Dec 25 22:24:47.484213 2025] [:error] [pid 22043:tid 22054] [client 4.241.194.62:18276] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "aU1JLz4YVtlb2Iz_QE5WwwAAAAY"]
[Thu Dec 25 22:24:48.800734 2025] [:error] [pid 27869:tid 27872] [client 4.241.194.62:56153] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "aU1JMBNK7_n86kBD7qfhlwAAAIE"]
[Thu Dec 25 22:24:50.757225 2025] [:error] [pid 22044:tid 22096] [client 4.241.194.62:18267] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ce.php"] [unique_id "aU1JMnPTC5rQKTB0FQ-lyQAAANU"]
[Thu Dec 25 22:24:53.924097 2025] [:error] [pid 22044:tid 22090] [client 4.241.194.62:23178] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ce.php"] [unique_id "aU1JNXPTC5rQKTB0FQ-l0AAAAM8"]
[Thu Dec 25 22:24:56.049723 2025] [:error] [pid 22131:tid 22159] [client 4.241.194.62:18269] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ce.php"] [unique_id "aU1JOJvVMtSTB4lX2fY6TgAAAFc"]
[Thu Dec 25 22:24:58.789319 2025] [:error] [pid 22131:tid 22139] [client 4.241.194.62:20365] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ce.php"] [unique_id "aU1JOpvVMtSTB4lX2fY6VQAAAEU"]
[Thu Dec 25 22:25:00.494178 2025] [:error] [pid 27869:tid 27877] [client 4.241.194.62:23168] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "aU1JPBNK7_n86kBD7qfhqwAAAIY"]
[Thu Dec 25 22:25:01.093442 2025] [:error] [pid 22044:tid 22086] [client 4.241.194.62:3020] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "aU1JPXPTC5rQKTB0FQ-l1QAAAMs"]
[Thu Dec 25 22:25:02.064385 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:3009] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "aU1JPhNK7_n86kBD7qfhrgAAAI4"]
[Thu Dec 25 22:25:04.006687 2025] [:error] [pid 27869:tid 27873] [client 4.241.194.62:23213] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "aU1JQBNK7_n86kBD7qfhtQAAAII"]
[Thu Dec 25 22:25:04.920759 2025] [:error] [pid 27869:tid 27893] [client 4.241.194.62:18303] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "aU1JQBNK7_n86kBD7qfhtwAAAJY"]
[Thu Dec 25 22:25:07.513256 2025] [:error] [pid 22131:tid 22147] [client 4.241.194.62:20383] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "aU1JQ5vVMtSTB4lX2fY6ZQAAAEw"]
[Thu Dec 25 22:25:08.973321 2025] [:error] [pid 22131:tid 22149] [client 4.241.194.62:57492] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "aU1JRJvVMtSTB4lX2fY6ZwAAAE4"]
[Thu Dec 25 22:25:10.667910 2025] [:error] [pid 22131:tid 22140] [client 4.241.194.62:52966] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "aU1JRpvVMtSTB4lX2fY6bAAAAEY"]
[Thu Dec 25 22:25:13.580464 2025] [:error] [pid 22131:tid 22155] [client 4.241.194.62:56181] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asa.php"] [unique_id "aU1JSZvVMtSTB4lX2fY6cwAAAFM"]
[Thu Dec 25 22:25:15.883001 2025] [:error] [pid 27869:tid 27890] [client 4.241.194.62:18266] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asa.php"] [unique_id "aU1JSxNK7_n86kBD7qfh2AAAAJM"]
[Thu Dec 25 22:25:21.234868 2025] [:error] [pid 27869:tid 27882] [client 4.241.194.62:3012] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asa.php"] [unique_id "aU1JURNK7_n86kBD7qfh5QAAAIs"]
[Thu Dec 25 22:25:25.220104 2025] [:error] [pid 22131:tid 22155] [client 4.241.194.62:18246] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asa.php"] [unique_id "aU1JVZvVMtSTB4lX2fY6gAAAAFM"]
[Thu Dec 25 22:25:27.377663 2025] [:error] [pid 27869:tid 27874] [client 4.241.194.62:3033] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4fk6.php"] [unique_id "aU1JVxNK7_n86kBD7qfh7QAAAIM"]
[Thu Dec 25 22:25:30.376892 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:20170] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4fk6.php"] [unique_id "aU1JWhNK7_n86kBD7qfh8wAAAI0"]
[Thu Dec 25 22:25:32.452493 2025] [:error] [pid 22044:tid 22091] [client 4.241.194.62:11541] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4fk6.php"] [unique_id "aU1JXHPTC5rQKTB0FQ-l8wAAANA"]
[Thu Dec 25 22:26:31.025696 2025] [:error] [pid 22043:tid 22048] [client 4.241.194.62:2676] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/783de.php"] [unique_id "aU1Jlz4YVtlb2Iz_QE5XAQAAAAA"]
[Thu Dec 25 22:26:32.153514 2025] [:error] [pid 22044:tid 22089] [client 4.241.194.62:17497] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/783de.php"] [unique_id "aU1JmHPTC5rQKTB0FQ-mTAAAAM4"]
[Thu Dec 25 22:26:34.461175 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:17533] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/783de.php"] [unique_id "aU1JmnPTC5rQKTB0FQ-mUQAAAMA"]
[Thu Dec 25 22:26:35.488309 2025] [:error] [pid 22045:tid 22123] [client 4.241.194.62:24724] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/783de.php"] [unique_id "aU1Jm6sGGmXjDnvlmHtzeQAAAVU"]
[Thu Dec 25 22:26:36.388854 2025] [:error] [pid 22131:tid 22155] [client 4.241.194.62:64211] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "aU1JnJvVMtSTB4lX2fY6zgAAAFM"]
[Thu Dec 25 22:26:37.214353 2025] [:error] [pid 22044:tid 22094] [client 4.241.194.62:15845] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "aU1JnXPTC5rQKTB0FQ-mVwAAANM"]
[Thu Dec 25 22:26:39.787593 2025] [:error] [pid 22044:tid 22088] [client 4.241.194.62:15809] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "aU1Jn3PTC5rQKTB0FQ-mWgAAAM0"]
[Thu Dec 25 22:26:41.657150 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:20941] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "aU1JoRNK7_n86kBD7qfiRgAAAIQ"]
[Thu Dec 25 22:26:43.306073 2025] [:error] [pid 22043:tid 22072] [client 4.241.194.62:20944] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aU1Joz4YVtlb2Iz_QE5XEQAAABg"]
[Thu Dec 25 22:26:44.361753 2025] [:error] [pid 27869:tid 27893] [client 4.241.194.62:15815] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aU1JpBNK7_n86kBD7qfiVAAAAJY"]
[Thu Dec 25 22:26:46.729476 2025] [:error] [pid 22131:tid 22145] [client 4.241.194.62:20947] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aU1JppvVMtSTB4lX2fY65gAAAEs"]
[Thu Dec 25 22:26:48.534024 2025] [:error] [pid 27869:tid 27883] [client 4.241.194.62:15848] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gdn.php"] [unique_id "aU1JqBNK7_n86kBD7qfiYwAAAIw"]
[Thu Dec 25 22:26:49.284952 2025] [:error] [pid 27869:tid 27887] [client 4.241.194.62:63498] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aU1JqRNK7_n86kBD7qfiagAAAJA"]
[Thu Dec 25 22:26:51.118709 2025] [:error] [pid 22044:tid 22085] [client 4.241.194.62:20970] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aU1Jq3PTC5rQKTB0FQ-mZQAAAMo"]
[Thu Dec 25 22:26:54.037806 2025] [:error] [pid 27869:tid 27874] [client 4.241.194.62:20701] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aU1JrhNK7_n86kBD7qficwAAAIM"]
[Thu Dec 25 22:26:55.252655 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:20978] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "aU1Jr5vVMtSTB4lX2fY68AAAAE8"]
[Thu Dec 25 22:26:56.819438 2025] [:error] [pid 22131:tid 22143] [client 4.241.194.62:17493] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aU1JsJvVMtSTB4lX2fY69AAAAEk"]
[Thu Dec 25 22:26:59.023618 2025] [:error] [pid 22044:tid 22096] [client 4.241.194.62:63541] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aU1Js3PTC5rQKTB0FQ-mbAAAANU"]
[Thu Dec 25 22:27:00.434894 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:49705] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aU1JtJvVMtSTB4lX2fY69gAAAFA"]
[Thu Dec 25 22:27:07.700797 2025] [:error] [pid 22045:tid 22112] [client 4.241.194.62:20958] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aU1Ju6sGGmXjDnvlmHtzoAAAAUo"]
[Thu Dec 25 22:27:09.335984 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:20720] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "aU1JvRNK7_n86kBD7qfimQAAAIg"]
[Thu Dec 25 22:27:13.008448 2025] [:error] [pid 22131:tid 22152] [client 4.241.194.62:63536] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "aU1JwZvVMtSTB4lX2fY7CgAAAFE"]
[Thu Dec 25 22:27:16.330916 2025] [:error] [pid 22044:tid 22098] [client 4.241.194.62:15813] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "aU1JxHPTC5rQKTB0FQ-meAAAANc"]
[Thu Dec 25 22:27:18.873833 2025] [:error] [pid 22044:tid 22089] [client 4.241.194.62:49667] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "aU1JxnPTC5rQKTB0FQ-mgAAAAM4"]
[Thu Dec 25 22:27:20.579966 2025] [:error] [pid 22045:tid 22112] [client 4.241.194.62:15823] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aU1JyKsGGmXjDnvlmHtzsAAAAUo"]
[Thu Dec 25 22:27:22.070963 2025] [:error] [pid 22043:tid 22062] [client 4.241.194.62:63539] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aU1Jyj4YVtlb2Iz_QE5XNAAAAA4"]
[Thu Dec 25 22:27:24.485620 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:63518] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aU1JzBNK7_n86kBD7qfiuAAAAIQ"]
[Thu Dec 25 22:27:26.403791 2025] [:error] [pid 22045:tid 22103] [client 4.241.194.62:64229] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aU1JzqsGGmXjDnvlmHtzsgAAAUE"]
[Thu Dec 25 22:27:27.210619 2025] [:error] [pid 22131:tid 22133] [client 4.241.194.62:64200] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aU1Jz5vVMtSTB4lX2fY7LAAAAEA"]
[Thu Dec 25 22:27:28.714414 2025] [:error] [pid 22045:tid 22119] [client 4.241.194.62:15856] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aU1J0KsGGmXjDnvlmHtztwAAAVE"]
[Thu Dec 25 22:28:22.357447 2025] [:error] [pid 27869:tid 27890] [client 174.138.85.139:62231] [client 174.138.85.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aU1KBhNK7_n86kBD7qfjQAAAAJM"], referer: binance.com
[Thu Dec 25 22:28:33.532641 2025] [:error] [pid 27869:tid 27892] [client 4.241.194.62:16120] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oc460l3x.php"] [unique_id "aU1KERNK7_n86kBD7qfjWwAAAJU"]
[Thu Dec 25 22:28:37.444782 2025] [:error] [pid 22045:tid 22125] [client 4.241.194.62:24451] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oc460l3x.php"] [unique_id "aU1KFasGGmXjDnvlmHt0IgAAAVc"]
[Thu Dec 25 22:28:39.627439 2025] [:error] [pid 22043:tid 22071] [client 4.241.194.62:59756] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oc460l3x.php"] [unique_id "aU1KFz4YVtlb2Iz_QE5XhAAAABc"]
[Thu Dec 25 22:28:41.560609 2025] [:error] [pid 22045:tid 22117] [client 4.241.194.62:2864] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oc460l3x.php"] [unique_id "aU1KGasGGmXjDnvlmHt0KQAAAU8"]
[Thu Dec 25 22:28:43.393507 2025] [:error] [pid 27869:tid 27890] [client 4.241.194.62:2824] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aU1KGxNK7_n86kBD7qfjZwAAAJM"]
[Thu Dec 25 22:28:44.448342 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:2097] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aU1KHBNK7_n86kBD7qfjawAAAIg"]
[Thu Dec 25 22:28:45.145675 2025] [:error] [pid 22044:tid 22082] [client 4.241.194.62:2822] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aU1KHXPTC5rQKTB0FQ-mwwAAAMc"]
[Thu Dec 25 22:28:45.895735 2025] [:error] [pid 22043:tid 22056] [client 4.241.194.62:57593] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aU1KHT4YVtlb2Iz_QE5XigAAAAg"]
[Thu Dec 25 22:28:46.880576 2025] [:error] [pid 22044:tid 22097] [client 4.241.194.62:18530] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nucqsqeg.php"] [unique_id "aU1KHnPTC5rQKTB0FQ-myQAAANY"]
[Thu Dec 25 22:28:48.108817 2025] [:error] [pid 22131:tid 22139] [client 4.241.194.62:2862] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nucqsqeg.php"] [unique_id "aU1KIJvVMtSTB4lX2fY7ggAAAEU"]
[Thu Dec 25 22:28:49.881289 2025] [:error] [pid 22044:tid 22078] [client 4.241.194.62:2366] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nucqsqeg.php"] [unique_id "aU1KIXPTC5rQKTB0FQ-m0gAAAMM"]
[Thu Dec 25 22:28:51.222290 2025] [:error] [pid 22044:tid 22096] [client 4.241.194.62:24456] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nucqsqeg.php"] [unique_id "aU1KI3PTC5rQKTB0FQ-m1AAAANU"]
[Thu Dec 25 22:28:52.206592 2025] [:error] [pid 22045:tid 22102] [client 4.241.194.62:57554] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mhpglaje.php"] [unique_id "aU1KJKsGGmXjDnvlmHt0NgAAAUA"]
[Thu Dec 25 22:28:54.830466 2025] [:error] [pid 27869:tid 27881] [client 4.241.194.62:17971] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mhpglaje.php"] [unique_id "aU1KJhNK7_n86kBD7qfjcAAAAIo"]
[Thu Dec 25 22:28:59.138673 2025] [:error] [pid 22131:tid 22137] [client 4.241.194.62:2090] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mhpglaje.php"] [unique_id "aU1KK5vVMtSTB4lX2fY7jwAAAEQ"]
[Thu Dec 25 22:29:00.843258 2025] [:error] [pid 22045:tid 22118] [client 4.241.194.62:15560] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mhpglaje.php"] [unique_id "aU1KLKsGGmXjDnvlmHt0QQAAAVA"]
[Thu Dec 25 22:29:02.514294 2025] [:error] [pid 22045:tid 22106] [client 4.241.194.62:13704] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU1KLqsGGmXjDnvlmHt0QgAAAUQ"]
[Thu Dec 25 22:29:04.105771 2025] [:error] [pid 22045:tid 22108] [client 4.241.194.62:13719] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU1KMKsGGmXjDnvlmHt0RwAAAUY"]
[Thu Dec 25 22:29:06.087421 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:13699] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU1KMpvVMtSTB4lX2fY7lQAAAFA"]
[Thu Dec 25 22:29:08.512398 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:62962] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU1KNBNK7_n86kBD7qfjkwAAAIQ"]
[Thu Dec 25 22:29:09.147239 2025] [:error] [pid 27869:tid 27882] [client 4.241.194.62:18513] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU1KNRNK7_n86kBD7qfjlgAAAIs"]
[Thu Dec 25 22:29:10.047340 2025] [:error] [pid 27869:tid 27890] [client 4.241.194.62:50285] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU1KNhNK7_n86kBD7qfjmwAAAJM"]
[Thu Dec 25 22:29:11.729809 2025] [:error] [pid 22044:tid 22099] [client 4.241.194.62:62933] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU1KN3PTC5rQKTB0FQ-m8wAAANg"]
[Thu Dec 25 22:29:14.309757 2025] [:error] [pid 27869:tid 27881] [client 4.241.194.62:21930] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU1KOhNK7_n86kBD7qfjnwAAAIo"]
[Thu Dec 25 22:29:15.729704 2025] [:error] [pid 22044:tid 22095] [client 4.241.194.62:50303] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aU1KO3PTC5rQKTB0FQ-m-gAAANQ"]
[Thu Dec 25 22:29:16.855544 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:2125] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aU1KPHPTC5rQKTB0FQ-m_AAAAMA"]
[Thu Dec 25 22:29:18.283264 2025] [:error] [pid 22045:tid 22119] [client 4.241.194.62:2131] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aU1KPqsGGmXjDnvlmHt0WAAAAVE"]
[Thu Dec 25 22:29:19.782369 2025] [:error] [pid 22045:tid 22110] [client 4.241.194.62:2124] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aU1KP6sGGmXjDnvlmHt0XAAAAUg"]
[Thu Dec 25 22:29:22.221967 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:24318] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU1KQhNK7_n86kBD7qfjrQAAAIQ"]
[Thu Dec 25 22:29:24.166623 2025] [:error] [pid 22131:tid 22139] [client 4.241.194.62:2571] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU1KRJvVMtSTB4lX2fY7rgAAAEU"]
[Thu Dec 25 22:29:25.647050 2025] [:error] [pid 22044:tid 22083] [client 4.241.194.62:62969] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU1KRXPTC5rQKTB0FQ-nCQAAAMg"]
[Thu Dec 25 22:29:26.858479 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:2577] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU1KRhNK7_n86kBD7qfjsQAAAJE"]
[Thu Dec 25 22:29:29.419906 2025] [:error] [pid 22045:tid 22111] [client 4.241.194.62:50258] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aU1KSasGGmXjDnvlmHt0ZwAAAUk"]
[Thu Dec 25 22:30:23.097520 2025] [:error] [pid 22043:tid 22048] [client 4.241.194.62:50250] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aU1Kfz4YVtlb2Iz_QE5X6AAAAAA"]
[Thu Dec 25 22:30:24.638120 2025] [:error] [pid 22043:tid 22060] [client 4.241.194.62:20439] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aU1KgD4YVtlb2Iz_QE5X7AAAAAw"]
[Thu Dec 25 22:30:27.823142 2025] [:error] [pid 22045:tid 22124] [client 4.241.194.62:50883] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aU1Kg6sGGmXjDnvlmHt0mQAAAVY"]
[Thu Dec 25 22:30:29.826329 2025] [:error] [pid 22043:tid 22066] [client 4.241.194.62:11607] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aU1KhT4YVtlb2Iz_QE5X9wAAABI"]
[Thu Dec 25 22:30:32.041242 2025] [:error] [pid 22131:tid 22134] [client 4.241.194.62:53049] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "aU1KiJvVMtSTB4lX2fY7_AAAAEE"]
[Thu Dec 25 22:30:33.613820 2025] [:error] [pid 22045:tid 22114] [client 4.241.194.62:11618] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "aU1KiasGGmXjDnvlmHt0nAAAAUw"]
[Thu Dec 25 22:30:37.832200 2025] [:error] [pid 22043:tid 22063] [client 4.241.194.62:20440] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "aU1KjT4YVtlb2Iz_QE5YBwAAAA8"]
[Thu Dec 25 22:30:42.876845 2025] [:error] [pid 22044:tid 22080] [client 4.241.194.62:20398] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "aU1KknPTC5rQKTB0FQ-nfAAAAMU"]
[Thu Dec 25 22:30:45.344907 2025] [:error] [pid 27869:tid 27889] [client 4.241.194.62:20479] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sikma.php"] [unique_id "aU1KlRNK7_n86kBD7qfkOwAAAJI"]
[Thu Dec 25 22:30:47.442899 2025] [:error] [pid 22044:tid 22094] [client 4.241.194.62:20459] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sikma.php"] [unique_id "aU1Kl3PTC5rQKTB0FQ-njQAAANM"]
[Thu Dec 25 22:30:49.573709 2025] [:error] [pid 22044:tid 22098] [client 4.241.194.62:3032] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sikma.php"] [unique_id "aU1KmXPTC5rQKTB0FQ-nlwAAANc"]
[Thu Dec 25 22:30:51.283746 2025] [:error] [pid 22131:tid 22141] [client 4.241.194.62:15753] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sikma.php"] [unique_id "aU1Km5vVMtSTB4lX2fY8GQAAAEc"]
[Thu Dec 25 22:30:52.381637 2025] [:error] [pid 27869:tid 27889] [client 4.241.194.62:15787] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "aU1KnBNK7_n86kBD7qfkSgAAAJI"]
[Thu Dec 25 22:30:53.558455 2025] [:error] [pid 22043:tid 22062] [client 4.241.194.62:15765] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "aU1KnT4YVtlb2Iz_QE5YFgAAAA4"]
[Thu Dec 25 22:30:54.679319 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:20454] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "aU1KnhNK7_n86kBD7qfkUQAAAJE"]
[Thu Dec 25 22:30:56.255330 2025] [:error] [pid 22043:tid 22057] [client 4.241.194.62:3043] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "aU1KoD4YVtlb2Iz_QE5YGQAAAAk"]
[Thu Dec 25 22:30:58.069508 2025] [:error] [pid 22043:tid 22071] [client 4.241.194.62:53045] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aU1Koj4YVtlb2Iz_QE5YHgAAABc"]
[Thu Dec 25 22:30:59.879720 2025] [:error] [pid 22045:tid 22109] [client 4.241.194.62:11584] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aU1Ko6sGGmXjDnvlmHt0wQAAAUc"]
[Thu Dec 25 22:31:02.419460 2025] [:error] [pid 22044:tid 22087] [client 4.241.194.62:50895] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aU1KpnPTC5rQKTB0FQ-ntwAAAMw"]
[Thu Dec 25 22:31:03.468922 2025] [:error] [pid 22131:tid 22147] [client 4.241.194.62:20366] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aU1Kp5vVMtSTB4lX2fY8KwAAAEw"]
[Thu Dec 25 22:31:05.431432 2025] [:error] [pid 22044:tid 22076] [client 4.241.194.62:52992] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aU1KqXPTC5rQKTB0FQ-nwAAAAME"]
[Thu Dec 25 22:31:07.114484 2025] [:error] [pid 22131:tid 22148] [client 4.241.194.62:20361] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aU1Kq5vVMtSTB4lX2fY8MwAAAE0"]
[Thu Dec 25 22:31:09.274983 2025] [:error] [pid 22043:tid 22058] [client 4.241.194.62:3034] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aU1KrT4YVtlb2Iz_QE5YLgAAAAo"]
[Thu Dec 25 22:31:10.768872 2025] [:error] [pid 22131:tid 22145] [client 4.241.194.62:20392] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aU1KrpvVMtSTB4lX2fY8QAAAAEs"]
[Thu Dec 25 22:31:12.316490 2025] [:error] [pid 22131:tid 22153] [client 4.241.194.62:20352] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "aU1KsJvVMtSTB4lX2fY8QgAAAFI"]
[Thu Dec 25 22:31:13.797104 2025] [:error] [pid 22043:tid 22072] [client 4.241.194.62:52996] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "aU1KsT4YVtlb2Iz_QE5YMwAAABg"]
[Thu Dec 25 22:31:15.652957 2025] [:error] [pid 27869:tid 27880] [client 4.241.194.62:52997] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "aU1KsxNK7_n86kBD7qfklwAAAIk"]
[Thu Dec 25 22:31:17.245732 2025] [:error] [pid 22043:tid 22057] [client 4.241.194.62:3063] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "aU1KtT4YVtlb2Iz_QE5YOAAAAAk"]
[Thu Dec 25 23:11:21.553166 2025] [:error] [pid 22045:tid 22126] [client 20.89.217.103:46695] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/udnkq.php"] [unique_id "aU1UGasGGmXjDnvlmHt_WAAAAVg"]
[Thu Dec 25 23:11:25.688740 2025] [:error] [pid 22044:tid 22096] [client 20.89.217.103:42271] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/udnkq.php"] [unique_id "aU1UHXPTC5rQKTB0FQ-1DgAAANU"]
[Thu Dec 25 23:11:31.204701 2025] [:error] [pid 27869:tid 27879] [client 20.89.217.103:54754] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/udnkq.php"] [unique_id "aU1UIxNK7_n86kBD7qf1ywAAAIg"]
[Thu Dec 25 23:11:35.063906 2025] [:error] [pid 27869:tid 27892] [client 20.89.217.103:51971] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/udnkq.php"] [unique_id "aU1UJxNK7_n86kBD7qf14QAAAJU"]
[Thu Dec 25 23:11:39.369531 2025] [:error] [pid 22045:tid 22107] [client 20.89.217.103:52662] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "aU1UK6sGGmXjDnvlmHt_cQAAAUU"]
[Thu Dec 25 23:11:42.927984 2025] [:error] [pid 22045:tid 22120] [client 20.89.217.103:10972] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "aU1ULqsGGmXjDnvlmHt_dQAAAVI"]
[Thu Dec 25 23:11:46.531160 2025] [:error] [pid 22044:tid 22089] [client 20.89.217.103:33649] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "aU1UMnPTC5rQKTB0FQ-1PwAAAM4"]
[Thu Dec 25 23:11:49.251195 2025] [:error] [pid 27869:tid 27883] [client 20.89.217.103:38043] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "aU1UNRNK7_n86kBD7qf2DQAAAIw"]
[Thu Dec 25 23:11:51.162199 2025] [:error] [pid 22043:tid 22056] [client 20.89.217.103:36230] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z4qmm5.php"] [unique_id "aU1UNz4YVtlb2Iz_QE5iqwAAAAg"]
[Thu Dec 25 23:11:53.579083 2025] [:error] [pid 22044:tid 22095] [client 20.89.217.103:36812] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z4qmm5.php"] [unique_id "aU1UOXPTC5rQKTB0FQ-1SgAAANQ"]
[Thu Dec 25 23:11:56.155728 2025] [:error] [pid 27869:tid 27887] [client 20.89.217.103:62061] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z4qmm5.php"] [unique_id "aU1UPBNK7_n86kBD7qf2IAAAAJA"]
[Thu Dec 25 23:12:00.846935 2025] [:error] [pid 22044:tid 22098] [client 20.89.217.103:43370] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z4qmm5.php"] [unique_id "aU1UQHPTC5rQKTB0FQ-1ZAAAANc"]
[Thu Dec 25 23:12:04.258683 2025] [:error] [pid 22044:tid 22088] [client 20.89.217.103:42198] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no3.php"] [unique_id "aU1URHPTC5rQKTB0FQ-1cAAAAM0"]
[Thu Dec 25 23:12:06.241913 2025] [:error] [pid 22131:tid 22157] [client 20.89.217.103:61494] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no3.php"] [unique_id "aU1URpvVMtSTB4lX2fZG1QAAAFU"]
[Thu Dec 25 23:12:09.125290 2025] [:error] [pid 22044:tid 22093] [client 20.89.217.103:43384] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no3.php"] [unique_id "aU1USXPTC5rQKTB0FQ-1egAAANI"]
[Thu Dec 25 23:12:10.740722 2025] [:error] [pid 27869:tid 27877] [client 20.89.217.103:55725] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no3.php"] [unique_id "aU1UShNK7_n86kBD7qf2OQAAAIY"]
[Thu Dec 25 23:12:13.232889 2025] [:error] [pid 22045:tid 22120] [client 20.89.217.103:41994] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/om.php"] [unique_id "aU1UTasGGmXjDnvlmHt_owAAAVI"]
[Thu Dec 25 23:12:18.807362 2025] [:error] [pid 22131:tid 22160] [client 20.89.217.103:46103] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/om.php"] [unique_id "aU1UUpvVMtSTB4lX2fZG3AAAAFg"]
[Thu Dec 25 23:13:12.803300 2025] [:error] [pid 27869:tid 27891] [client 20.89.217.103:11082] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aU1UiBNK7_n86kBD7qf23QAAAJQ"]
[Thu Dec 25 23:13:17.797623 2025] [:error] [pid 22044:tid 22076] [client 20.89.217.103:32402] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aU1UjXPTC5rQKTB0FQ-1-AAAAME"]
[Thu Dec 25 23:13:19.114238 2025] [:error] [pid 27869:tid 27881] [client 20.89.217.103:18079] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aU1UjxNK7_n86kBD7qf25wAAAIo"]
[Thu Dec 25 23:13:22.981910 2025] [:error] [pid 22131:tid 22156] [client 20.89.217.103:37443] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aU1UkpvVMtSTB4lX2fZHZQAAAFQ"]
[Thu Dec 25 23:13:26.639009 2025] [:error] [pid 27869:tid 27892] [client 20.89.217.103:48522] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aU1UlhNK7_n86kBD7qf2-gAAAJU"]
[Thu Dec 25 23:13:27.647112 2025] [:error] [pid 22044:tid 22097] [client 20.89.217.103:17999] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aU1Ul3PTC5rQKTB0FQ-2BQAAANY"]
[Thu Dec 25 23:13:32.406991 2025] [:error] [pid 22044:tid 22098] [client 20.89.217.103:18011] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aU1UnHPTC5rQKTB0FQ-2CwAAANc"]
[Thu Dec 25 23:13:34.192302 2025] [:error] [pid 22043:tid 22066] [client 20.89.217.103:18030] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aU1Unj4YVtlb2Iz_QE5jcAAAABI"]
[Thu Dec 25 23:13:36.488888 2025] [:error] [pid 27869:tid 27884] [client 20.89.217.103:51931] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aU1UoBNK7_n86kBD7qf3BQAAAI0"]
[Thu Dec 25 23:13:39.720559 2025] [:error] [pid 22044:tid 22095] [client 20.89.217.103:41211] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aU1Uo3PTC5rQKTB0FQ-2EgAAANQ"]
[Thu Dec 25 23:13:42.481126 2025] [:error] [pid 27869:tid 27886] [client 20.89.217.103:37173] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aU1UphNK7_n86kBD7qf3DgAAAI8"]
[Thu Dec 25 23:13:44.771249 2025] [:error] [pid 22045:tid 22115] [client 20.89.217.103:18032] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aU1UqKsGGmXjDnvlmHuAJwAAAU0"]
[Thu Dec 25 23:13:47.070229 2025] [:error] [pid 22044:tid 22080] [client 20.89.217.103:37181] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aU1Uq3PTC5rQKTB0FQ-2HAAAAMU"]
[Thu Dec 25 23:13:50.356380 2025] [:error] [pid 22043:tid 22072] [client 20.89.217.103:33099] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aU1Urj4YVtlb2Iz_QE5jkAAAABg"]
[Thu Dec 25 23:13:53.887656 2025] [:error] [pid 22043:tid 22070] [client 20.89.217.103:38723] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aU1UsT4YVtlb2Iz_QE5jkQAAABY"]
[Thu Dec 25 23:13:55.187201 2025] [:error] [pid 22131:tid 22149] [client 20.89.217.103:18003] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aU1Us5vVMtSTB4lX2fZHhgAAAE4"]
[Thu Dec 25 23:13:59.796502 2025] [:error] [pid 22045:tid 22106] [client 20.89.217.103:41154] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aU1Ut6sGGmXjDnvlmHuAWwAAAUQ"]
[Thu Dec 25 23:14:00.989666 2025] [:error] [pid 22044:tid 22090] [client 20.89.217.103:38731] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aU1UuHPTC5rQKTB0FQ-2KgAAAM8"]
[Thu Dec 25 23:14:03.815322 2025] [:error] [pid 27869:tid 27894] [client 20.89.217.103:33138] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aU1UuxNK7_n86kBD7qf3OgAAAJc"]
[Thu Dec 25 23:14:06.145452 2025] [:error] [pid 22131:tid 22153] [client 20.89.217.103:33089] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aU1UvpvVMtSTB4lX2fZHkQAAAFI"]
[Thu Dec 25 23:14:07.183181 2025] [:error] [pid 27869:tid 27889] [client 20.89.217.103:33142] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aU1UvxNK7_n86kBD7qf3QAAAAJI"]
[Thu Dec 25 23:14:53.172861 2025] [autoindex:error] [pid 27869:tid 27893] [client 20.89.217.103:11159] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 23:14:57.276238 2025] [:error] [pid 22043:tid 22065] [client 20.89.217.103:51916] [client 20.89.217.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU1U8T4YVtlb2Iz_QE5kAgAAABE"]
[Thu Dec 25 23:15:02.692734 2025] [:error] [pid 22043:tid 22063] [client 20.89.217.103:55723] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU1U9j4YVtlb2Iz_QE5kCgAAAA8"]
[Thu Dec 25 23:15:03.994457 2025] [:error] [pid 27869:tid 27875] [client 20.89.217.103:43328] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU1U9xNK7_n86kBD7qf3wQAAAIQ"]
[Thu Dec 25 23:15:08.834174 2025] [:error] [pid 22045:tid 22107] [client 20.89.217.103:55203] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU1U_KsGGmXjDnvlmHuAvwAAAUU"]
[Thu Dec 25 23:15:11.243120 2025] [:error] [pid 22044:tid 22097] [client 20.89.217.103:34229] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU1U_3PTC5rQKTB0FQ-2kgAAANY"]
[Thu Dec 25 23:15:12.774999 2025] [:error] [pid 22045:tid 22110] [client 20.89.217.103:34226] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aU1VAKsGGmXjDnvlmHuAxQAAAUg"]
[Thu Dec 25 23:15:16.015071 2025] [:error] [pid 22044:tid 22075] [client 20.89.217.103:50198] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aU1VBHPTC5rQKTB0FQ-2nQAAAMA"]
[Thu Dec 25 23:15:19.053657 2025] [:error] [pid 27869:tid 27876] [client 20.89.217.103:55224] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aU1VBxNK7_n86kBD7qf32wAAAIU"]
[Thu Dec 25 23:15:19.404146 2025] [:error] [pid 22131:tid 22148] [client 20.89.217.103:61470] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aU1VB5vVMtSTB4lX2fZH_QAAAE0"]
[Thu Dec 25 23:15:19.849593 2025] [:error] [pid 22043:tid 22057] [client 20.89.217.103:43335] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1VBz4YVtlb2Iz_QE5kGQAAAAk"]
[Thu Dec 25 23:15:21.521056 2025] [:error] [pid 22045:tid 22115] [client 20.89.217.103:55711] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1VCasGGmXjDnvlmHuAygAAAU0"]
[Thu Dec 25 23:15:23.480820 2025] [:error] [pid 27869:tid 27878] [client 20.89.217.103:42187] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1VCxNK7_n86kBD7qf34AAAAIc"]
[Thu Dec 25 23:15:25.373869 2025] [:error] [pid 22045:tid 22105] [client 20.89.217.103:42203] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1VDasGGmXjDnvlmHuAywAAAUM"]
[Thu Dec 25 23:15:27.950228 2025] [:error] [pid 22043:tid 22062] [client 20.89.217.103:43365] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aU1VDz4YVtlb2Iz_QE5kIQAAAA4"]
[Thu Dec 25 23:15:30.126351 2025] [:error] [pid 22131:tid 22160] [client 20.89.217.103:33162] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aU1VEpvVMtSTB4lX2fZIBwAAAFg"]
[Thu Dec 25 23:15:32.211865 2025] [:error] [pid 22043:tid 22057] [client 20.89.217.103:55692] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aU1VFD4YVtlb2Iz_QE5kJAAAAAk"]
[Thu Dec 25 23:15:33.584228 2025] [:error] [pid 22043:tid 22071] [client 20.89.217.103:50219] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aU1VFT4YVtlb2Iz_QE5kKQAAABc"]
[Thu Dec 25 23:15:35.038402 2025] [:error] [pid 22043:tid 22064] [client 20.89.217.103:47345] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aU1VFz4YVtlb2Iz_QE5kKgAAABA"]
[Thu Dec 25 23:15:37.065496 2025] [:error] [pid 22043:tid 22062] [client 20.89.217.103:47329] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aU1VGT4YVtlb2Iz_QE5kLwAAAA4"]
[Thu Dec 25 23:15:38.931063 2025] [:error] [pid 22045:tid 22126] [client 20.89.217.103:47353] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aU1VGqsGGmXjDnvlmHuAzgAAAVg"]
[Thu Dec 25 23:15:40.202711 2025] [:error] [pid 22045:tid 22103] [client 20.89.217.103:42231] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aU1VHKsGGmXjDnvlmHuA0QAAAUE"]
[Thu Dec 25 23:15:46.224772 2025] [:error] [pid 22045:tid 22118] [client 20.89.217.103:42222] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1VIqsGGmXjDnvlmHuA1QAAAVA"]
[Thu Dec 25 23:15:48.438925 2025] [:error] [pid 27869:tid 27877] [client 20.89.217.103:55189] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1VJBNK7_n86kBD7qf37QAAAIY"]
[Thu Dec 25 23:15:50.327417 2025] [:error] [pid 22044:tid 22094] [client 20.89.217.103:55192] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1VJnPTC5rQKTB0FQ-2uwAAANM"]
[Thu Dec 25 23:15:52.954892 2025] [:error] [pid 22045:tid 22111] [client 20.89.217.103:33214] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1VKKsGGmXjDnvlmHuA2wAAAUk"]
[Thu Dec 25 23:15:55.017730 2025] [:error] [pid 22131:tid 22136] [client 20.89.217.103:33170] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU1VK5vVMtSTB4lX2fZIEAAAAEM"]
[Thu Dec 25 23:15:56.892499 2025] [:error] [pid 27869:tid 27892] [client 20.89.217.103:47316] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU1VLBNK7_n86kBD7qf3-AAAAJU"]
[Thu Dec 25 23:15:58.455484 2025] [:error] [pid 27869:tid 27877] [client 20.89.217.103:43339] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU1VLhNK7_n86kBD7qf3-wAAAIY"]
[Thu Dec 25 23:16:47.309445 2025] [:error] [pid 22045:tid 22107] [client 20.89.217.103:55716] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aU1VX6sGGmXjDnvlmHuBDwAAAUU"]
[Thu Dec 25 23:16:52.408894 2025] [:error] [pid 22045:tid 22115] [client 20.89.217.103:38799] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aU1VZKsGGmXjDnvlmHuBEQAAAU0"]
[Thu Dec 25 23:16:55.948228 2025] [:error] [pid 22045:tid 22116] [client 20.89.217.103:10649] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aU1VZ6sGGmXjDnvlmHuBFQAAAU4"]
[Thu Dec 25 23:16:58.153467 2025] [:error] [pid 22045:tid 22125] [client 20.89.217.103:46685] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aU1VaqsGGmXjDnvlmHuBFgAAAVc"]
[Thu Dec 25 23:16:59.076286 2025] [:error] [pid 22131:tid 22145] [client 20.89.217.103:36347] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aU1Va5vVMtSTB4lX2fZIcQAAAEs"]
[Thu Dec 25 23:17:01.338562 2025] [:error] [pid 27869:tid 27890] [client 20.89.217.103:47862] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aU1VbRNK7_n86kBD7qf4VAAAAJM"]
[Thu Dec 25 23:17:03.033825 2025] [:error] [pid 22131:tid 22156] [client 20.89.217.103:11259] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aU1Vb5vVMtSTB4lX2fZIdgAAAFQ"]
[Thu Dec 25 23:17:06.264437 2025] [:error] [pid 27869:tid 27874] [client 20.89.217.103:47812] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aU1VchNK7_n86kBD7qf4YAAAAIM"]
[Thu Dec 25 23:17:08.591646 2025] [:error] [pid 22044:tid 22096] [client 20.89.217.103:34300] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aU1VdHPTC5rQKTB0FQ-3CQAAANU"]
[Thu Dec 25 23:17:09.767862 2025] [:error] [pid 22043:tid 22068] [client 20.89.217.103:17880] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aU1VdT4YVtlb2Iz_QE5ksQAAABQ"]
[Thu Dec 25 23:17:14.727457 2025] [:error] [pid 27869:tid 27875] [client 20.89.217.103:34270] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aU1VehNK7_n86kBD7qf4dwAAAIQ"]
[Thu Dec 25 23:17:15.608312 2025] [:error] [pid 22043:tid 22066] [client 20.89.217.103:39472] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aU1Vez4YVtlb2Iz_QE5ktAAAABI"]
[Thu Dec 25 23:17:19.117936 2025] [:error] [pid 22044:tid 22077] [client 20.89.217.103:50746] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU1Vf3PTC5rQKTB0FQ-3EgAAAMI"]
[Thu Dec 25 23:17:21.660610 2025] [:error] [pid 27869:tid 27872] [client 20.89.217.103:39368] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU1VgRNK7_n86kBD7qf4hgAAAIE"]
[Thu Dec 25 23:17:24.305828 2025] [:error] [pid 22131:tid 22144] [client 20.89.217.103:17913] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU1VhJvVMtSTB4lX2fZIhgAAAEo"]
[Thu Dec 25 23:17:27.967820 2025] [:error] [pid 22043:tid 22068] [client 20.89.217.103:40329] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU1Vhz4YVtlb2Iz_QE5kvwAAABQ"]
[Thu Dec 25 23:17:29.155118 2025] [:error] [pid 22045:tid 22114] [client 20.89.217.103:54799] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1ViasGGmXjDnvlmHuBKwAAAUw"]
[Thu Dec 25 23:17:32.280625 2025] [:error] [pid 27869:tid 27888] [client 20.89.217.103:17851] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1VjBNK7_n86kBD7qf4ngAAAJE"]
[Thu Dec 25 23:17:35.007883 2025] [:error] [pid 22131:tid 22159] [client 20.89.217.103:45499] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1Vj5vVMtSTB4lX2fZImAAAAFc"]
[Thu Dec 25 23:17:38.840934 2025] [:error] [pid 22043:tid 22065] [client 20.89.217.103:17793] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1Vkj4YVtlb2Iz_QE5kxwAAABE"]
[Thu Dec 25 23:17:39.771212 2025] [:error] [pid 22044:tid 22083] [client 20.89.217.103:52023] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aU1Vk3PTC5rQKTB0FQ-3SgAAAMg"]
[Thu Dec 25 23:17:41.632279 2025] [:error] [pid 22043:tid 22049] [client 20.89.217.103:51975] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aU1VlT4YVtlb2Iz_QE5kywAAAAE"]
[Thu Dec 25 23:18:30.420528 2025] [:error] [pid 22043:tid 22057] [client 20.89.217.103:45468] [client 20.89.217.103] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "51.75.236.136_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/index.php"] [unique_id "aU1Vwj4YVtlb2Iz_QE5lAgAAAAk"]
[Thu Dec 25 23:18:33.987346 2025] [:error] [pid 22043:tid 22053] [client 20.89.217.103:45468] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1VyT4YVtlb2Iz_QE5lCwAAAAU"]
[Thu Dec 25 23:18:35.454260 2025] [:error] [pid 22045:tid 22113] [client 20.89.217.103:10715] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1Vy6sGGmXjDnvlmHuBbAAAAUs"]
[Thu Dec 25 23:18:38.313747 2025] [:error] [pid 27869:tid 27889] [client 20.89.217.103:10712] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1VzhNK7_n86kBD7qf5IAAAAJI"]
[Thu Dec 25 23:18:44.191757 2025] [:error] [pid 22045:tid 22113] [client 20.89.217.103:41637] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1V1KsGGmXjDnvlmHuBeQAAAUs"]
[Thu Dec 25 23:18:46.030118 2025] [:error] [pid 27869:tid 27889] [client 20.89.217.103:48474] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aU1V1hNK7_n86kBD7qf5KQAAAJI"]
[Thu Dec 25 23:18:47.961325 2025] [:error] [pid 22043:tid 22054] [client 20.89.217.103:42637] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aU1V1z4YVtlb2Iz_QE5lHQAAAAY"]
[Thu Dec 25 23:18:50.483321 2025] [:error] [pid 22045:tid 22105] [client 20.89.217.103:51915] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aU1V2qsGGmXjDnvlmHuBfQAAAUM"]
[Thu Dec 25 23:18:51.502312 2025] [:error] [pid 27869:tid 27894] [client 20.89.217.103:37505] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aU1V2xNK7_n86kBD7qf5LgAAAJc"]
[Thu Dec 25 23:18:53.133588 2025] [:error] [pid 22131:tid 22150] [client 20.89.217.103:18139] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aU1V3ZvVMtSTB4lX2fZI7gAAAE8"]
[Thu Dec 25 23:18:55.987268 2025] [:error] [pid 22045:tid 22123] [client 20.89.217.103:51914] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aU1V36sGGmXjDnvlmHuBhQAAAVU"]
[Thu Dec 25 23:18:56.939426 2025] [:error] [pid 22043:tid 22055] [client 20.89.217.103:33146] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aU1V4D4YVtlb2Iz_QE5lJwAAAAc"]
[Thu Dec 25 23:19:01.674272 2025] [:error] [pid 27869:tid 27873] [client 20.89.217.103:47405] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aU1V5RNK7_n86kBD7qf5SwAAAII"]
[Thu Dec 25 23:19:04.306003 2025] [:error] [pid 22044:tid 22075] [client 20.89.217.103:51963] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aU1V6HPTC5rQKTB0FQ-3mgAAAMA"]
[Thu Dec 25 23:19:08.249095 2025] [:error] [pid 27869:tid 27890] [client 20.89.217.103:53715] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aU1V7BNK7_n86kBD7qf5UAAAAJM"]
[Thu Dec 25 23:19:10.118668 2025] [:error] [pid 27869:tid 27879] [client 20.89.217.103:37518] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aU1V7hNK7_n86kBD7qf5UwAAAIg"]
[Thu Dec 25 23:19:15.670473 2025] [:error] [pid 22043:tid 22070] [client 20.89.217.103:18157] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aU1V8z4YVtlb2Iz_QE5lMwAAABY"]
[Thu Dec 25 23:19:19.339427 2025] [:error] [pid 22044:tid 22088] [client 20.89.217.103:33099] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aU1V93PTC5rQKTB0FQ-3pQAAAM0"]
[Thu Dec 25 23:19:23.199463 2025] [:error] [pid 22045:tid 22125] [client 20.89.217.103:41194] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aU1V-6sGGmXjDnvlmHuBlQAAAVc"]
[Thu Dec 25 23:19:24.890763 2025] [:error] [pid 22131:tid 22145] [client 20.89.217.103:17998] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aU1V_JvVMtSTB4lX2fZI_wAAAEs"]
[Thu Dec 25 23:19:54.085276 2025] [:error] [pid 27869:tid 27891] [client 20.89.217.103:48567] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aU1WGhNK7_n86kBD7qf5mAAAAJQ"]
[Thu Dec 25 23:19:56.701051 2025] [:error] [pid 22131:tid 22133] [client 20.89.217.103:49680] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aU1WHJvVMtSTB4lX2fZJIAAAAEA"]
[Thu Dec 25 23:19:59.809598 2025] [:error] [pid 27869:tid 27871] [client 20.89.217.103:34278] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aU1WHxNK7_n86kBD7qf5sQAAAIA"]
[Thu Dec 25 23:20:01.440199 2025] [:error] [pid 22044:tid 22085] [client 20.89.217.103:39442] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aU1WIXPTC5rQKTB0FQ-4WAAAAMo"]
[Thu Dec 25 23:20:03.358483 2025] [:error] [pid 22131:tid 22142] [client 20.89.217.103:17882] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1WI5vVMtSTB4lX2fZJMgAAAEg"]
[Thu Dec 25 23:20:07.524280 2025] [:error] [pid 27869:tid 27875] [client 20.89.217.103:49040] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1WJxNK7_n86kBD7qf53gAAAIQ"]
[Thu Dec 25 23:20:11.160531 2025] [:error] [pid 22045:tid 22106] [client 20.89.217.103:39436] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1WK6sGGmXjDnvlmHuBuwAAAUQ"]
[Thu Dec 25 23:20:12.927924 2025] [:error] [pid 22043:tid 22070] [client 20.89.217.103:62678] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1WLD4YVtlb2Iz_QE5lmAAAABY"]
[Thu Dec 25 23:20:15.558299 2025] [:error] [pid 22043:tid 22049] [client 20.89.217.103:47870] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aU1WLz4YVtlb2Iz_QE5lmQAAAAE"]
[Thu Dec 25 23:20:18.821388 2025] [:error] [pid 22131:tid 22143] [client 20.89.217.103:62676] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aU1WMpvVMtSTB4lX2fZJSgAAAEk"]
[Thu Dec 25 23:20:21.894309 2025] [:error] [pid 27869:tid 27895] [client 20.89.217.103:55805] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aU1WNRNK7_n86kBD7qf59AAAAJg"]
[Thu Dec 25 23:20:26.362420 2025] [:error] [pid 22045:tid 22106] [client 20.89.217.103:40350] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aU1WOqsGGmXjDnvlmHuByQAAAUQ"]
[Thu Dec 25 23:20:27.819993 2025] [:error] [pid 27869:tid 27895] [client 20.89.217.103:55800] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aU1WOxNK7_n86kBD7qf6AwAAAJg"]
[Thu Dec 25 23:20:29.382561 2025] [:error] [pid 22131:tid 22141] [client 20.89.217.103:39918] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aU1WPZvVMtSTB4lX2fZJXwAAAEc"]
[Thu Dec 25 23:20:30.252797 2025] [:error] [pid 27869:tid 27895] [client 20.89.217.103:39892] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aU1WPhNK7_n86kBD7qf6EwAAAJg"]
[Thu Dec 25 23:20:31.438502 2025] [:error] [pid 27869:tid 27872] [client 20.89.217.103:34248] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aU1WPxNK7_n86kBD7qf6JAAAAIE"]
[Thu Dec 25 23:20:32.759281 2025] [:error] [pid 22043:tid 22065] [client 20.89.217.103:40810] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aU1WQD4YVtlb2Iz_QE5lsgAAABE"]
[Thu Dec 25 23:20:33.523890 2025] [:error] [pid 27869:tid 27890] [client 20.89.217.103:11078] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aU1WQRNK7_n86kBD7qf6PQAAAJM"]
[Thu Dec 25 23:20:35.829653 2025] [:error] [pid 22131:tid 22156] [client 20.89.217.103:34295] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aU1WQ5vVMtSTB4lX2fZJbAAAAFQ"]
[Thu Dec 25 23:20:36.637308 2025] [:error] [pid 22043:tid 22052] [client 20.89.217.103:11087] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aU1WRD4YVtlb2Iz_QE5lvwAAAAQ"]
[Thu Dec 25 23:20:38.823905 2025] [:error] [pid 22045:tid 22114] [client 20.89.217.103:39923] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aU1WRqsGGmXjDnvlmHuB1gAAAUw"]
[Thu Dec 25 23:20:40.434291 2025] [:error] [pid 27869:tid 27888] [client 20.89.217.103:47821] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aU1WSBNK7_n86kBD7qf6fAAAAJE"]
[Thu Dec 25 23:20:43.296617 2025] [:error] [pid 22045:tid 22119] [client 20.89.217.103:34287] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aU1WS6sGGmXjDnvlmHuB2wAAAVE"]
[Thu Dec 25 23:20:46.154164 2025] [:error] [pid 27869:tid 27873] [client 20.89.217.103:55807] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aU1WThNK7_n86kBD7qf6pwAAAII"]
[Thu Dec 25 23:20:47.707124 2025] [:error] [pid 22044:tid 22093] [client 20.89.217.103:11072] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aU1WT3PTC5rQKTB0FQ-4kQAAANI"]
[Thu Dec 25 23:20:49.667643 2025] [:error] [pid 22131:tid 22143] [client 20.89.217.103:49052] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aU1WUZvVMtSTB4lX2fZJjgAAAEk"]
[Thu Dec 25 23:20:51.039414 2025] [:error] [pid 22044:tid 22094] [client 20.89.217.103:11133] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aU1WU3PTC5rQKTB0FQ-4nAAAANM"]
[Thu Dec 25 23:20:57.455125 2025] [:error] [pid 22131:tid 22133] [client 20.89.217.103:33622] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aU1WWZvVMtSTB4lX2fZJyQAAAEA"]
[Thu Dec 25 23:20:59.893626 2025] [:error] [pid 27869:tid 27875] [client 20.89.217.103:49053] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aU1WWxNK7_n86kBD7qf6xwAAAIQ"]
[Thu Dec 25 23:21:00.434543 2025] [:error] [pid 27869:tid 27887] [client 20.89.217.103:47823] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aU1WXBNK7_n86kBD7qf6yQAAAJA"]
[Thu Dec 25 23:21:02.104391 2025] [:error] [pid 22131:tid 22148] [client 20.89.217.103:49032] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aU1WXpvVMtSTB4lX2fZJ0AAAAE0"]
[Thu Dec 25 23:21:03.606849 2025] [:error] [pid 22131:tid 22151] [client 20.89.217.103:11080] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU1WX5vVMtSTB4lX2fZJ0gAAAFA"]
[Thu Dec 25 23:21:04.958511 2025] [:error] [pid 22043:tid 22069] [client 20.89.217.103:47839] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU1WYD4YVtlb2Iz_QE5l3gAAABU"]
[Thu Dec 25 23:21:06.651637 2025] [:error] [pid 27869:tid 27889] [client 20.89.217.103:34253] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU1WYhNK7_n86kBD7qf61wAAAJI"]
[Thu Dec 25 23:21:08.917436 2025] [:error] [pid 27869:tid 27880] [client 20.89.217.103:10866] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU1WZBNK7_n86kBD7qf62wAAAIk"]
[Thu Dec 25 23:21:11.509997 2025] [:error] [pid 22044:tid 22078] [client 20.89.217.103:10858] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aU1WZ3PTC5rQKTB0FQ-4uQAAAMM"]
[Thu Dec 25 23:21:12.870708 2025] [:error] [pid 27869:tid 27885] [client 20.89.217.103:38813] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aU1WaBNK7_n86kBD7qf64wAAAI4"]
[Thu Dec 25 23:21:15.753515 2025] [:error] [pid 22044:tid 22082] [client 20.89.217.103:61412] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aU1Wa3PTC5rQKTB0FQ-4vwAAAMc"]
[Thu Dec 25 23:21:20.427452 2025] [:error] [pid 22043:tid 22066] [client 20.89.217.103:10944] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1WcD4YVtlb2Iz_QE5l9wAAABI"]
[Thu Dec 25 23:21:22.194817 2025] [:error] [pid 27869:tid 27885] [client 20.89.217.103:31781] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1WchNK7_n86kBD7qf68wAAAI4"]
[Thu Dec 25 23:21:24.172416 2025] [:error] [pid 22045:tid 22117] [client 20.89.217.103:38806] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1WdKsGGmXjDnvlmHuCFgAAAU8"]
[Thu Dec 25 23:21:26.059228 2025] [:error] [pid 22044:tid 22091] [client 20.89.217.103:10756] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1WdnPTC5rQKTB0FQ-42AAAANA"]
[Thu Dec 25 23:21:27.066587 2025] [:error] [pid 22131:tid 22157] [client 20.89.217.103:55246] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aU1Wd5vVMtSTB4lX2fZJ8QAAAFU"]
[Thu Dec 25 23:21:28.425855 2025] [:error] [pid 22045:tid 22103] [client 20.89.217.103:55285] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aU1WeKsGGmXjDnvlmHuCJAAAAUE"]
[Thu Dec 25 23:21:30.072389 2025] [:error] [pid 27869:tid 27890] [client 20.89.217.103:11213] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aU1WehNK7_n86kBD7qf7AwAAAJM"]
[Thu Dec 25 23:21:33.073066 2025] [:error] [pid 27869:tid 27877] [client 20.89.217.103:10895] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aU1WfRNK7_n86kBD7qf7DwAAAIY"]
[Thu Dec 25 23:21:35.376816 2025] [:error] [pid 22044:tid 22075] [client 20.89.217.103:37957] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aU1Wf3PTC5rQKTB0FQ-45gAAAMA"]
[Thu Dec 25 23:21:39.526360 2025] [:error] [pid 22045:tid 22126] [client 20.89.217.103:36790] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aU1Wg6sGGmXjDnvlmHuCNAAAAVg"]
[Thu Dec 25 23:21:41.708470 2025] [:error] [pid 22045:tid 22121] [client 20.89.217.103:52642] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aU1WhasGGmXjDnvlmHuCOAAAAVM"]
[Thu Dec 25 23:21:46.186148 2025] [:error] [pid 22044:tid 22083] [client 20.89.217.103:37991] [client 20.89.217.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aU1WinPTC5rQKTB0FQ-5AQAAAMg"]
[Fri Dec 26 00:58:55.540002 2025] [proxy_fcgi:error] [pid 24864:tid 24920] [client 103.4.122.14:49684] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Dec 26 00:58:59.554780 2025] [proxy_fcgi:error] [pid 24862:tid 24887] [client 103.4.122.14:49766] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Dec 26 01:11:15.620849 2025] [:error] [pid 24862:tid 24868] [client 34.48.96.251:50429] [client 34.48.96.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.96.251, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aU1wM7t-eeEEuo-2JKgsZQAAAAI"]
[Fri Dec 26 01:11:21.733175 2025] [:error] [pid 24862:tid 24880] [client 34.48.96.251:50429] [client 34.48.96.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU1wObt-eeEEuo-2JKgsegAAAA4"]
[Fri Dec 26 01:11:23.722474 2025] [:error] [pid 24862:tid 24868] [client 34.48.96.251:50429] [client 34.48.96.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.96.251, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aU1wO7t-eeEEuo-2JKgsfQAAAAI"]
[Fri Dec 26 03:27:03.319489 2025] [:error] [pid 24864:tid 24936] [client 194.5.82.41:42933] [client 194.5.82.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aU2QB8u59XOK5DpQQdC_xwAAAVA"]
[Fri Dec 26 03:27:16.493259 2025] [:error] [pid 51233:tid 51244] [client 194.5.82.9:64267] [client 194.5.82.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.9, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aU2QFNmsoP9GLOKyIHCsnQAAAQk"]
[Fri Dec 26 03:27:39.484636 2025] [proxy_fcgi:error] [pid 51233:tid 51236] [client 194.5.82.9:64267] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 03:28:01.853347 2025] [:error] [pid 51233:tid 51249] [client 194.5.82.9:64267] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aU2QQdmsoP9GLOKyIHCs8QAAAQ4"]
[Fri Dec 26 03:28:07.304972 2025] [:error] [pid 51233:tid 51235] [client 194.5.82.15:63111] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aU2QR9msoP9GLOKyIHCs-wAAAQA"]
[Fri Dec 26 03:28:32.396952 2025] [:error] [pid 51233:tid 51244] [client 194.5.82.25:33897] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU2QYNmsoP9GLOKyIHCtKgAAAQk"]
[Fri Dec 26 03:28:37.842599 2025] [:error] [pid 24862:tid 24873] [client 194.5.82.32:51573] [client 194.5.82.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aU2QZbt-eeEEuo-2JKhTJgAAAAc"]
[Fri Dec 26 03:28:51.238662 2025] [:error] [pid 24862:tid 24867] [client 194.5.82.49:55651] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aU2Qc7t-eeEEuo-2JKhTMgAAAAE"]
[Fri Dec 26 03:29:25.703000 2025] [:error] [pid 51233:tid 51241] [client 194.5.82.8:32343] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aU2QldmsoP9GLOKyIHCtbgAAAQY"]
[Fri Dec 26 03:29:49.812497 2025] [:error] [pid 24864:tid 24944] [client 194.5.82.25:41743] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aU2Qrcu59XOK5DpQQdDAjwAAAVg"]
[Fri Dec 26 03:29:59.253624 2025] [:error] [pid 51233:tid 51257] [client 194.5.82.25:23893] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aU2Qt9msoP9GLOKyIHCtkAAAARY"]
[Fri Dec 26 03:30:11.838049 2025] [proxy_fcgi:error] [pid 24864:tid 24921] [client 194.5.82.23:38813] AH01071: Got error 'Primary script unknown'
[Fri Dec 26 03:30:26.682387 2025] [:error] [pid 24864:tid 24920] [client 194.5.82.23:38813] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aU2Q0su59XOK5DpQQdDAswAAAUA"]
[Fri Dec 26 03:30:30.253539 2025] [:error] [pid 24946:tid 24948] [client 194.5.82.37:42549] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aU2Q1lfyLYxv3Jn9S71v4gAAAEA"]
[Fri Dec 26 03:31:02.199211 2025] [:error] [pid 24863:tid 24897] [client 194.5.82.15:47209] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aU2Q9h8SaH2KMpp43vcPigAAAMQ"]
[Fri Dec 26 03:31:05.229256 2025] [:error] [pid 24862:tid 24866] [client 194.5.82.15:38673] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aU2Q-bt-eeEEuo-2JKhTmQAAAAA"]
[Fri Dec 26 03:31:13.019779 2025] [:error] [pid 50907:tid 50917] [client 194.5.82.49:52267] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aU2RAUVKdS0jI1whEt1CMQAAAIc"]
[Fri Dec 26 03:31:23.573486 2025] [:error] [pid 51233:tid 51237] [client 194.5.82.52:62641] [client 194.5.82.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aU2RC9msoP9GLOKyIHCuQAAAAQI"]
[Fri Dec 26 03:31:34.695625 2025] [:error] [pid 24946:tid 24962] [client 194.5.82.53:39183] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aU2RFlfyLYxv3Jn9S71wHgAAAE4"]
[Fri Dec 26 03:31:50.879029 2025] [:error] [pid 24862:tid 24870] [client 194.5.82.13:48779] [client 194.5.82.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aU2RJrt-eeEEuo-2JKhTzQAAAAQ"]
[Fri Dec 26 03:31:52.677636 2025] [:error] [pid 51233:tid 51255] [client 194.5.82.33:62917] [client 194.5.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aU2RKNmsoP9GLOKyIHCuTwAAARQ"]
[Fri Dec 26 03:32:03.732485 2025] [:error] [pid 50907:tid 50911] [client 194.5.82.14:53701] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aU2RM0VKdS0jI1whEt1CWwAAAIE"]
[Fri Dec 26 03:32:05.190962 2025] [:error] [pid 24862:tid 24880] [client 194.5.82.8:24081] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aU2RNbt-eeEEuo-2JKhT0AAAAA4"]
[Fri Dec 26 03:32:08.251531 2025] [:error] [pid 24862:tid 24888] [client 194.5.82.5:44845] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aU2ROLt-eeEEuo-2JKhT0gAAABY"]
[Fri Dec 26 03:32:54.174228 2025] [:error] [pid 51233:tid 51243] [client 194.5.82.33:28123] [client 194.5.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aU2RZtmsoP9GLOKyIHCuvwAAAQg"]
[Fri Dec 26 03:32:57.568861 2025] [:error] [pid 24863:tid 24909] [client 194.5.82.37:51787] [client 194.5.82.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aU2RaR8SaH2KMpp43vcPwgAAANA"]
[Fri Dec 26 03:33:03.910366 2025] [:error] [pid 24862:tid 24874] [client 194.5.82.49:44769] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aU2Rb7t-eeEEuo-2JKhUAgAAAAg"]
[Fri Dec 26 03:33:07.316510 2025] [:error] [pid 50907:tid 50915] [client 194.5.82.40:55533] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aU2Rc0VKdS0jI1whEt1CewAAAIU"]
[Fri Dec 26 03:33:23.753090 2025] [:error] [pid 51233:tid 51246] [client 194.5.82.18:43351] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aU2Rg9msoP9GLOKyIHCu5gAAAQs"]
[Fri Dec 26 03:33:42.256935 2025] [:error] [pid 51233:tid 51247] [client 194.5.82.15:49301] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aU2RltmsoP9GLOKyIHCvBgAAAQw"]
[Fri Dec 26 03:33:57.585045 2025] [:error] [pid 51233:tid 51242] [client 194.5.82.50:48221] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aU2RpdmsoP9GLOKyIHCvIwAAAQc"]
[Fri Dec 26 03:34:16.499770 2025] [:error] [pid 24863:tid 24910] [client 194.5.82.4:56275] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aU2RuB8SaH2KMpp43vcP_QAAANE"]
[Fri Dec 26 03:34:37.592191 2025] [:error] [pid 24864:tid 24923] [client 194.5.82.51:41281] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aU2Rzcu59XOK5DpQQdDBjQAAAUM"]
[Fri Dec 26 03:34:45.694518 2025] [:error] [pid 24946:tid 24956] [client 194.5.82.5:34551] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aU2R1VfyLYxv3Jn9S71wgwAAAEg"]
[Fri Dec 26 03:35:26.353150 2025] [:error] [pid 24863:tid 24909] [client 194.5.82.25:41149] [client 194.5.82.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/layout.php"] [unique_id "aU2R_h8SaH2KMpp43vcQRgAAANA"]
[Fri Dec 26 03:35:28.404904 2025] [:error] [pid 24862:tid 24867] [client 194.5.82.5:22289] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aU2SALt-eeEEuo-2JKhUXwAAAAE"]
[Fri Dec 26 03:35:29.277133 2025] [:error] [pid 50907:tid 50914] [client 194.5.82.33:28573] [client 194.5.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aU2SAUVKdS0jI1whEt1CrwAAAIQ"]
[Fri Dec 26 03:35:41.849130 2025] [autoindex:error] [pid 24864:tid 24928] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:47.576700 2025] [autoindex:error] [pid 24864:tid 24924] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:48.027514 2025] [autoindex:error] [pid 24864:tid 24941] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:51.122828 2025] [autoindex:error] [pid 24864:tid 24928] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:51.867182 2025] [autoindex:error] [pid 24864:tid 24936] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:52.498159 2025] [autoindex:error] [pid 24864:tid 24940] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:53.612841 2025] [autoindex:error] [pid 24864:tid 24934] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:54.136790 2025] [autoindex:error] [pid 24864:tid 24924] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:57.073352 2025] [autoindex:error] [pid 24864:tid 24930] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:35:57.710964 2025] [autoindex:error] [pid 24864:tid 24931] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:00.546028 2025] [autoindex:error] [pid 24864:tid 24935] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:01.381336 2025] [autoindex:error] [pid 24864:tid 24930] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:04.345828 2025] [autoindex:error] [pid 24864:tid 24929] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:04.836481 2025] [autoindex:error] [pid 24864:tid 24943] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:05.472906 2025] [autoindex:error] [pid 24864:tid 24921] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:06.063205 2025] [autoindex:error] [pid 24864:tid 24939] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:09.503139 2025] [autoindex:error] [pid 24864:tid 24938] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:10.183384 2025] [autoindex:error] [pid 24864:tid 24940] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:10.850682 2025] [autoindex:error] [pid 24864:tid 24935] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:15.324428 2025] [autoindex:error] [pid 24864:tid 24933] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:15.957874 2025] [autoindex:error] [pid 24864:tid 24924] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:22.158528 2025] [autoindex:error] [pid 24864:tid 24941] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:22.728369 2025] [autoindex:error] [pid 24864:tid 24933] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:25.288037 2025] [autoindex:error] [pid 24864:tid 24934] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:25.770419 2025] [autoindex:error] [pid 24864:tid 24942] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:29.802590 2025] [autoindex:error] [pid 24864:tid 24924] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:32.788058 2025] [autoindex:error] [pid 24864:tid 24942] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:35.655814 2025] [autoindex:error] [pid 24864:tid 24935] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:36.321049 2025] [autoindex:error] [pid 24864:tid 24924] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:37.076729 2025] [autoindex:error] [pid 24864:tid 24926] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:41.823731 2025] [autoindex:error] [pid 24864:tid 24941] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:48.982268 2025] [autoindex:error] [pid 24864:tid 24938] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:49.577298 2025] [autoindex:error] [pid 24864:tid 24943] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:52.460382 2025] [autoindex:error] [pid 24864:tid 24933] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:53.016565 2025] [autoindex:error] [pid 24864:tid 24944] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:36:55.877159 2025] [autoindex:error] [pid 24864:tid 24944] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:00.810190 2025] [autoindex:error] [pid 24864:tid 24920] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:03.848135 2025] [autoindex:error] [pid 24864:tid 24925] [client 194.5.82.9:54181] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:07.026272 2025] [autoindex:error] [pid 24864:tid 24929] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:10.542434 2025] [autoindex:error] [pid 24864:tid 24935] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:12.136451 2025] [autoindex:error] [pid 24864:tid 24933] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:12.724595 2025] [autoindex:error] [pid 24864:tid 24925] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:15.550226 2025] [autoindex:error] [pid 24864:tid 24924] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:15.960109 2025] [autoindex:error] [pid 24864:tid 24922] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:16.479614 2025] [autoindex:error] [pid 24864:tid 24936] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:17.147014 2025] [autoindex:error] [pid 24864:tid 24927] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:17.708963 2025] [autoindex:error] [pid 24864:tid 24926] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:18.185386 2025] [autoindex:error] [pid 24864:tid 24938] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:20.951840 2025] [autoindex:error] [pid 24864:tid 24921] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:23.858001 2025] [autoindex:error] [pid 24864:tid 24933] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/swfupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:28.800355 2025] [autoindex:error] [pid 24864:tid 24935] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:29.211120 2025] [autoindex:error] [pid 24864:tid 24936] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:29.934684 2025] [autoindex:error] [pid 24864:tid 24938] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:32.907588 2025] [autoindex:error] [pid 24864:tid 24934] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:42.965252 2025] [autoindex:error] [pid 24864:tid 24935] [client 194.5.82.9:54181] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:43.660454 2025] [:error] [pid 24864:tid 24928] [client 194.5.82.9:54181] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager"] [unique_id "aU2Sh8u59XOK5DpQQdDC0AAAAUg"]
[Fri Dec 26 03:37:50.038829 2025] [autoindex:error] [pid 50907:tid 50927] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:50.747253 2025] [autoindex:error] [pid 50907:tid 50916] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:37:58.027822 2025] [autoindex:error] [pid 50907:tid 50931] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:01.276063 2025] [autoindex:error] [pid 50907:tid 50920] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:04.286108 2025] [autoindex:error] [pid 50907:tid 50924] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:04.774668 2025] [autoindex:error] [pid 50907:tid 50928] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:09.783093 2025] [autoindex:error] [pid 50907:tid 50914] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:10.463933 2025] [autoindex:error] [pid 50907:tid 50920] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:15.320520 2025] [autoindex:error] [pid 50907:tid 50911] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/site-logo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:18.199628 2025] [autoindex:error] [pid 50907:tid 50931] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/mediaelement/renderers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:21.399790 2025] [autoindex:error] [pid 50907:tid 50925] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:33.707795 2025] [autoindex:error] [pid 50907:tid 50932] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:36.591725 2025] [autoindex:error] [pid 50907:tid 50924] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/lightgray/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:37.368665 2025] [autoindex:error] [pid 50907:tid 50925] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:38.051747 2025] [autoindex:error] [pid 50907:tid 50926] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:49.129218 2025] [autoindex:error] [pid 50907:tid 50925] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:51.964713 2025] [autoindex:error] [pid 50907:tid 50932] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:52.457825 2025] [autoindex:error] [pid 50907:tid 50923] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:53.162797 2025] [autoindex:error] [pid 50907:tid 50920] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:56.213871 2025] [autoindex:error] [pid 50907:tid 50927] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:59.305919 2025] [autoindex:error] [pid 50907:tid 50926] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:38:59.871568 2025] [autoindex:error] [pid 50907:tid 50925] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:39:01.142755 2025] [autoindex:error] [pid 50907:tid 50931] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:39:02.375470 2025] [autoindex:error] [pid 50907:tid 50922] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 03:39:04.921207 2025] [autoindex:error] [pid 50907:tid 50912] [client 194.5.82.48:54345] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/latest-comments/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 04:48:09.395602 2025] [:error] [pid 28268:tid 28294] [client 35.227.60.117:59974] [client 35.227.60.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.227.60.117, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aU2jCXc_KuO_55-uPTS7cQAAABM"]
[Fri Dec 26 14:39:35.347405 2025] [autoindex:error] [pid 28268:tid 28297] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:35.826410 2025] [autoindex:error] [pid 28268:tid 28279] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:36.338297 2025] [autoindex:error] [pid 28268:tid 28296] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:36.792619 2025] [autoindex:error] [pid 28268:tid 28299] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:46.629999 2025] [autoindex:error] [pid 28268:tid 28290] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:47.590176 2025] [autoindex:error] [pid 28268:tid 28283] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:48.072834 2025] [autoindex:error] [pid 28268:tid 28276] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:48.596340 2025] [autoindex:error] [pid 28268:tid 28297] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:49.108878 2025] [autoindex:error] [pid 28268:tid 28291] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:50.908646 2025] [autoindex:error] [pid 28268:tid 28278] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:39:56.332942 2025] [autoindex:error] [pid 28268:tid 28277] [client 203.159.81.21:48495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 16:16:47.324384 2025] [:error] [pid 7160:tid 7180] [client 62.201.244.156:33062] [client 62.201.244.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "aU5Eb-w_ihNZR5L8vEU2JQAAAZE"]
[Fri Dec 26 16:16:48.911093 2025] [:error] [pid 15063:tid 15072] [client 175.143.90.184:35596] [client 175.143.90.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aU5EcODsf_aL46Jy7z_KZAAAAQc"]
[Sat Dec 27 05:09:29.719660 2025] [:error] [pid 32193:tid 32259] [client 198.235.24.5:64700] [client 198.235.24.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.235.24.5, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aU75iRgw0eCOc2qYqaIQDwAAAIk"]
[Sat Dec 27 16:18:21.479756 2025] [autoindex:error] [pid 3114:tid 3137] [client 157.173.120.59:51664] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 10:19:20.960128 2025] [autoindex:error] [pid 42293:tid 42329] [client 64.225.16.32:50652] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 11:55:44.995383 2025] [autoindex:error] [pid 42292:tid 42302] [client 194.163.171.119:54406] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 14:46:00.176974 2025] [autoindex:error] [pid 29437:tid 29475] [client 157.230.165.68:56212] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 15:32:33.975082 2025] [:error] [pid 29436:tid 29453] [client 34.86.169.128:8414] [client 34.86.169.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.169.128, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVDdEbchzOOtNL9VPNKZNQAAAY4"]
[Sun Dec 28 15:32:40.123742 2025] [:error] [pid 42293:tid 42338] [client 34.86.169.128:8653] [client 34.86.169.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.169.128, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVDdGMvc9B-5cwN385KihgAAAE8"]
[Sun Dec 28 16:05:39.038034 2025] [autoindex:error] [pid 42294:tid 42354] [client 159.89.181.56:60866] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 17:27:31.954163 2025] [:error] [pid 42292:tid 42319] [client 185.238.231.146:23199] [client 185.238.231.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.146, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVD4A5yOrM_vaFx1osYqEwAAABc"]
[Sun Dec 28 18:33:10.419035 2025] [:error] [pid 43789:tid 43810] [client 74.225.194.11:18316] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aVEHZga-tUppni4CcCYfDQAAARM"]
[Sun Dec 28 18:33:12.035765 2025] [:error] [pid 29436:tid 29449] [client 74.225.194.11:14343] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aVEHaLchzOOtNL9VPNLPHQAAAYo"]
[Sun Dec 28 18:33:14.041480 2025] [:error] [pid 29436:tid 29463] [client 74.225.194.11:19781] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aVEHarchzOOtNL9VPNLPKAAAAZg"]
[Sun Dec 28 18:33:22.371283 2025] [:error] [pid 42292:tid 42297] [client 74.225.194.11:21131] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aVEHcpyOrM_vaFx1osY3FQAAAAE"]
[Sun Dec 28 18:33:25.535446 2025] [:error] [pid 29436:tid 29441] [client 74.225.194.11:1480] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVEHdbchzOOtNL9VPNLPUwAAAYI"]
[Sun Dec 28 18:33:34.114268 2025] [:error] [pid 42378:tid 42380] [client 74.225.194.11:18792] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVEHfjgtcN-KHAjWrX8GhwAAAMA"]
[Sun Dec 28 18:33:36.822349 2025] [:error] [pid 29437:tid 29484] [client 74.225.194.11:18802] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVEHgBhDotAbVk6pZLesIAAAAdI"]
[Sun Dec 28 18:33:38.269013 2025] [:error] [pid 29436:tid 29457] [client 74.225.194.11:18899] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aVEHgrchzOOtNL9VPNLPdwAAAZI"]
[Sun Dec 28 18:33:46.108689 2025] [:error] [pid 42378:tid 42397] [client 74.225.194.11:19792] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aVEHijgtcN-KHAjWrX8GjQAAANE"]
[Sun Dec 28 18:33:47.261939 2025] [:error] [pid 42378:tid 42385] [client 74.225.194.11:1886] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aVEHizgtcN-KHAjWrX8GjgAAAMU"]
[Sun Dec 28 18:33:52.448827 2025] [:error] [pid 42293:tid 42332] [client 74.225.194.11:19231] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aVEHkMvc9B-5cwN385LOhQAAAEk"]
[Sun Dec 28 18:33:57.454372 2025] [:error] [pid 42292:tid 42313] [client 74.225.194.11:19885] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin2.php"] [unique_id "aVEHlZyOrM_vaFx1osY3OgAAABE"]
[Sun Dec 28 18:34:06.064344 2025] [:error] [pid 43789:tid 43811] [client 74.225.194.11:13680] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin2.php"] [unique_id "aVEHnga-tUppni4CcCYfNwAAARQ"]
[Sun Dec 28 18:34:58.741816 2025] [:error] [pid 42292:tid 42310] [client 74.225.194.11:19852] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signup.php"] [unique_id "aVEH0pyOrM_vaFx1osY3owAAAA4"]
[Sun Dec 28 18:35:06.456112 2025] [:error] [pid 42293:tid 42342] [client 74.225.194.11:18202] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signup.php"] [unique_id "aVEH2svc9B-5cwN385LPNgAAAFM"]
[Sun Dec 28 18:35:09.732318 2025] [:error] [pid 42292:tid 42313] [client 74.225.194.11:1037] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signup.php"] [unique_id "aVEH3ZyOrM_vaFx1osY3vAAAABE"]
[Sun Dec 28 18:35:11.417237 2025] [:error] [pid 29436:tid 29457] [client 74.225.194.11:1064] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signup.php"] [unique_id "aVEH37chzOOtNL9VPNLQ4QAAAZI"]
[Sun Dec 28 18:35:12.296246 2025] [:error] [pid 29436:tid 29456] [client 74.225.194.11:15881] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aVEH4LchzOOtNL9VPNLQ5AAAAZE"]
[Sun Dec 28 18:35:15.294728 2025] [:error] [pid 42293:tid 42326] [client 74.225.194.11:18518] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aVEH48vc9B-5cwN385LPPgAAAEM"]
[Sun Dec 28 18:35:17.405636 2025] [:error] [pid 29437:tid 29466] [client 74.225.194.11:16137] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aVEH5RhDotAbVk6pZLes0gAAAcA"]
[Sun Dec 28 18:35:18.217850 2025] [:error] [pid 29436:tid 29460] [client 74.225.194.11:15568] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "aVEH5rchzOOtNL9VPNLRCQAAAZU"]
[Sun Dec 28 18:35:21.705954 2025] [:error] [pid 29437:tid 29473] [client 74.225.194.11:15905] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aVEH6RhDotAbVk6pZLes2wAAAcc"]
[Sun Dec 28 18:35:25.261431 2025] [:error] [pid 42292:tid 42300] [client 74.225.194.11:1041] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aVEH7ZyOrM_vaFx1osY3ygAAAAQ"]
[Sun Dec 28 18:35:26.473676 2025] [:error] [pid 43789:tid 43813] [client 74.225.194.11:15645] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aVEH7ga-tUppni4CcCYfwAAAARY"]
[Sun Dec 28 18:35:28.757934 2025] [:error] [pid 43789:tid 43809] [client 74.225.194.11:1977] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aVEH8Aa-tUppni4CcCYfwgAAARI"]
[Sun Dec 28 18:35:33.172496 2025] [:error] [pid 29436:tid 29450] [client 74.225.194.11:18057] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aVEH9bchzOOtNL9VPNLRLgAAAYs"]
[Sun Dec 28 18:35:35.539559 2025] [:error] [pid 43789:tid 43807] [client 74.225.194.11:1197] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aVEH9wa-tUppni4CcCYf5wAAARA"]
[Sun Dec 28 18:35:39.058404 2025] [:error] [pid 42294:tid 42358] [client 74.225.194.11:15635] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aVEH-9TE5kYcYCOzl9GshgAAAIg"]
[Sun Dec 28 18:35:39.989245 2025] [:error] [pid 42293:tid 42343] [client 74.225.194.11:18227] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aVEH-8vc9B-5cwN385LPdwAAAFQ"]
[Sun Dec 28 18:35:40.728926 2025] [:error] [pid 42293:tid 42336] [client 74.225.194.11:19099] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aVEH_Mvc9B-5cwN385LPfAAAAE0"]
[Sun Dec 28 18:35:41.498180 2025] [:error] [pid 42292:tid 42306] [client 74.225.194.11:15438] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aVEH_ZyOrM_vaFx1osY3_QAAAAo"]
[Sun Dec 28 18:35:43.757023 2025] [:error] [pid 42292:tid 42312] [client 74.225.194.11:17450] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aVEH_5yOrM_vaFx1osY4EwAAABA"]
[Sun Dec 28 18:35:45.410293 2025] [:error] [pid 43789:tid 43809] [client 74.225.194.11:19111] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aVEIAQa-tUppni4CcCYgBAAAARI"]
[Sun Dec 28 18:35:49.244707 2025] [:error] [pid 43789:tid 43800] [client 74.225.194.11:19009] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "aVEIBQa-tUppni4CcCYgCgAAAQk"]
[Sun Dec 28 18:35:50.935246 2025] [:error] [pid 29437:tid 29474] [client 74.225.194.11:18111] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "aVEIBhhDotAbVk6pZLetCQAAAcg"]
[Sun Dec 28 18:35:52.185583 2025] [:error] [pid 29437:tid 29467] [client 74.225.194.11:1825] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "aVEICBhDotAbVk6pZLetCwAAAcE"]
[Sun Dec 28 18:35:55.011355 2025] [:error] [pid 29436:tid 29442] [client 74.225.194.11:19066] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "aVEIC7chzOOtNL9VPNLRxwAAAYM"]
[Sun Dec 28 18:35:55.836187 2025] [:error] [pid 43789:tid 43801] [client 74.225.194.11:19036] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/brand.php"] [unique_id "aVEICwa-tUppni4CcCYgJAAAAQo"]
[Sun Dec 28 18:37:06.203761 2025] [:error] [pid 29436:tid 29450] [client 74.225.194.11:18969] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/allez.php"] [unique_id "aVEIUrchzOOtNL9VPNLSvwAAAYs"]
[Sun Dec 28 18:37:15.422144 2025] [:error] [pid 29436:tid 29453] [client 74.225.194.11:15659] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/allez.php"] [unique_id "aVEIW7chzOOtNL9VPNLSzgAAAY4"]
[Sun Dec 28 18:37:16.437560 2025] [:error] [pid 29437:tid 29488] [client 74.225.194.11:20445] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/allez.php"] [unique_id "aVEIXBhDotAbVk6pZLet3AAAAdY"]
[Sun Dec 28 18:37:22.442898 2025] [:error] [pid 42292:tid 42303] [client 74.225.194.11:18511] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "aVEIYpyOrM_vaFx1osY4ZwAAAAc"]
[Sun Dec 28 18:37:25.281911 2025] [:error] [pid 42294:tid 42365] [client 74.225.194.11:18252] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "aVEIZdTE5kYcYCOzl9GtDAAAAI8"]
[Sun Dec 28 18:37:26.221394 2025] [:error] [pid 42292:tid 42312] [client 74.225.194.11:1273] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "aVEIZpyOrM_vaFx1osY4agAAABA"]
[Sun Dec 28 18:37:27.513580 2025] [:error] [pid 29437:tid 29490] [client 74.225.194.11:18451] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "aVEIZxhDotAbVk6pZLet7AAAAdg"]
[Sun Dec 28 18:37:32.173105 2025] [:error] [pid 42294:tid 42361] [client 74.225.194.11:13787] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/functions.php"] [unique_id "aVEIbNTE5kYcYCOzl9GtEAAAAIs"]
[Sun Dec 28 18:37:34.959286 2025] [:error] [pid 29436:tid 29439] [client 74.225.194.11:1445] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/functions.php"] [unique_id "aVEIbrchzOOtNL9VPNLS4QAAAYA"]
[Sun Dec 28 18:37:39.310524 2025] [:error] [pid 42293:tid 42343] [client 74.225.194.11:13389] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/functions.php"] [unique_id "aVEIc8vc9B-5cwN385LQGQAAAFQ"]
[Sun Dec 28 18:37:43.657285 2025] [:error] [pid 29436:tid 29459] [client 74.225.194.11:21171] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aVEId7chzOOtNL9VPNLS6QAAAZQ"]
[Sun Dec 28 18:37:54.374219 2025] [:error] [pid 29437:tid 29473] [client 74.225.194.11:14699] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aVEIghhDotAbVk6pZLeuBAAAAcc"]
[Sun Dec 28 18:37:57.719000 2025] [:error] [pid 42292:tid 42311] [client 74.225.194.11:18757] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aVEIhZyOrM_vaFx1osY4hgAAAA8"]
[Sun Dec 28 18:38:02.424677 2025] [:error] [pid 29436:tid 29454] [client 74.225.194.11:17616] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aVEIirchzOOtNL9VPNLTBAAAAY8"]
[Sun Dec 28 19:24:09.728632 2025] [:error] [pid 43789:tid 43799] [client 4.190.186.15:13961] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aVETWQa-tUppni4CcCYrMgAAAQg"]
[Sun Dec 28 19:24:10.017912 2025] [:error] [pid 29436:tid 29456] [client 4.190.186.15:12234] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aVETWrchzOOtNL9VPNLhdwAAAZE"]
[Sun Dec 28 19:24:10.266778 2025] [:error] [pid 29436:tid 29449] [client 4.190.186.15:14079] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aVETWrchzOOtNL9VPNLheAAAAYo"]
[Sun Dec 28 19:24:10.506055 2025] [:error] [pid 29436:tid 29455] [client 4.190.186.15:13975] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aVETWrchzOOtNL9VPNLheQAAAZA"]
[Sun Dec 28 19:24:10.767733 2025] [:error] [pid 29388:tid 29397] [client 4.190.186.15:13972] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aVETWtoLv2L2zI_SpdXWcgAAAUE"]
[Sun Dec 28 19:24:11.025924 2025] [:error] [pid 42294:tid 42355] [client 4.190.186.15:14028] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aVETW9TE5kYcYCOzl9G2lgAAAIU"]
[Sun Dec 28 19:24:11.278104 2025] [:error] [pid 42294:tid 42358] [client 4.190.186.15:14036] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aVETW9TE5kYcYCOzl9G2mAAAAIg"]
[Sun Dec 28 19:24:11.528902 2025] [:error] [pid 42293:tid 42334] [client 4.190.186.15:13979] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aVETW8vc9B-5cwN385LcRwAAAEs"]
[Sun Dec 28 19:24:11.779788 2025] [:error] [pid 29436:tid 29440] [client 4.190.186.15:13955] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aVETW7chzOOtNL9VPNLhfQAAAYE"]
[Sun Dec 28 19:24:12.054514 2025] [:error] [pid 42293:tid 42343] [client 4.190.186.15:13971] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aVETXMvc9B-5cwN385LcSAAAAFQ"]
[Sun Dec 28 19:24:12.336095 2025] [:error] [pid 29437:tid 29484] [client 4.190.186.15:13968] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aVETXBhDotAbVk6pZLe6YgAAAdI"]
[Sun Dec 28 19:24:12.582372 2025] [:error] [pid 29437:tid 29470] [client 4.190.186.15:14058] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aVETXBhDotAbVk6pZLe6ZgAAAcQ"]
[Sun Dec 28 19:24:12.882365 2025] [:error] [pid 43789:tid 43811] [client 4.190.186.15:14062] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aVETXAa-tUppni4CcCYrNQAAARQ"]
[Sun Dec 28 19:24:13.157287 2025] [:error] [pid 42293:tid 42345] [client 4.190.186.15:14027] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aVETXcvc9B-5cwN385LcSwAAAFY"]
[Sun Dec 28 19:24:13.444215 2025] [:error] [pid 29388:tid 29401] [client 4.190.186.15:13958] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aVETXdoLv2L2zI_SpdXWdwAAAUU"]
[Sun Dec 28 19:24:13.742478 2025] [:error] [pid 29437:tid 29473] [client 4.190.186.15:13973] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aVETXRhDotAbVk6pZLe6aQAAAcc"]
[Sun Dec 28 19:24:14.008620 2025] [:error] [pid 42294:tid 42373] [client 4.190.186.15:13983] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aVETXtTE5kYcYCOzl9G2ngAAAJc"]
[Sun Dec 28 19:24:14.313494 2025] [:error] [pid 43789:tid 43804] [client 4.190.186.15:14072] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aVETXga-tUppni4CcCYrNgAAAQ0"]
[Sun Dec 28 19:24:14.558310 2025] [:error] [pid 29436:tid 29462] [client 4.190.186.15:13963] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aVETXrchzOOtNL9VPNLhggAAAZc"]
[Sun Dec 28 19:24:14.920963 2025] [:error] [pid 43789:tid 43806] [client 4.190.186.15:13965] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aVETXga-tUppni4CcCYrOgAAAQ8"]
[Sun Dec 28 19:24:15.262442 2025] [:error] [pid 42294:tid 42360] [client 4.190.186.15:14064] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aVETX9TE5kYcYCOzl9G2nwAAAIo"]
[Sun Dec 28 19:24:15.521224 2025] [:error] [pid 29388:tid 29396] [client 4.190.186.15:13973] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aVETX9oLv2L2zI_SpdXWegAAAUA"]
[Sun Dec 28 19:24:15.997604 2025] [:error] [pid 29388:tid 29411] [client 4.190.186.15:13960] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aVETX9oLv2L2zI_SpdXWfQAAAU8"]
[Sun Dec 28 19:24:16.252795 2025] [:error] [pid 29437:tid 29487] [client 4.190.186.15:13977] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aVETYBhDotAbVk6pZLe6bAAAAdU"]
[Sun Dec 28 19:24:16.496077 2025] [:error] [pid 42293:tid 42330] [client 4.190.186.15:13953] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVETYMvc9B-5cwN385LcUgAAAEc"]
[Sun Dec 28 19:24:16.737675 2025] [:error] [pid 42294:tid 42372] [client 4.190.186.15:14055] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVETYNTE5kYcYCOzl9G2oAAAAJY"]
[Sun Dec 28 19:24:16.982454 2025] [:error] [pid 29437:tid 29485] [client 4.190.186.15:14051] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVETYBhDotAbVk6pZLe6bwAAAdM"]
[Sun Dec 28 19:24:17.343412 2025] [:error] [pid 42293:tid 42338] [client 4.190.186.15:14034] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVETYcvc9B-5cwN385LcVgAAAE8"]
[Sun Dec 28 19:24:17.584012 2025] [:error] [pid 43789:tid 43797] [client 4.190.186.15:13953] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aVETYQa-tUppni4CcCYrPgAAAQY"]
[Sun Dec 28 19:24:17.862660 2025] [:error] [pid 29388:tid 29416] [client 4.190.186.15:13974] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aVETYdoLv2L2zI_SpdXWgAAAAVQ"]
[Sun Dec 28 19:24:18.115920 2025] [:error] [pid 29388:tid 29415] [client 4.190.186.15:14060] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aVETYtoLv2L2zI_SpdXWgQAAAVM"]
[Sun Dec 28 19:24:18.356961 2025] [:error] [pid 29437:tid 29476] [client 4.190.186.15:14018] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aVETYhhDotAbVk6pZLe6cAAAAco"]
[Sun Dec 28 19:24:18.691494 2025] [:error] [pid 42293:tid 42342] [client 4.190.186.15:14016] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVETYsvc9B-5cwN385LcWQAAAFM"]
[Sun Dec 28 19:24:18.999799 2025] [:error] [pid 29388:tid 29413] [client 4.190.186.15:13980] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVETYtoLv2L2zI_SpdXWggAAAVE"]
[Sun Dec 28 19:24:19.239600 2025] [:error] [pid 29388:tid 29402] [client 4.190.186.15:13964] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVETY9oLv2L2zI_SpdXWhQAAAUY"]
[Sun Dec 28 19:24:19.512435 2025] [:error] [pid 43789:tid 43810] [client 4.190.186.15:14076] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVETYwa-tUppni4CcCYrQwAAARM"]
[Sun Dec 28 19:24:19.792151 2025] [:error] [pid 29437:tid 29486] [client 4.190.186.15:14024] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aVETYxhDotAbVk6pZLe6dQAAAdQ"]
[Sun Dec 28 19:24:20.095485 2025] [:error] [pid 29436:tid 29444] [client 4.190.186.15:14050] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aVETZLchzOOtNL9VPNLhhwAAAYU"]
[Sun Dec 28 19:24:20.390834 2025] [:error] [pid 29436:tid 29454] [client 4.190.186.15:13987] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aVETZLchzOOtNL9VPNLhiAAAAY8"]
[Sun Dec 28 19:24:20.686789 2025] [:error] [pid 42293:tid 42341] [client 4.190.186.15:13985] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aVETZMvc9B-5cwN385LcgAAAAFI"]
[Sun Dec 28 19:24:20.987755 2025] [:error] [pid 29437:tid 29476] [client 4.190.186.15:14032] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aVETZBhDotAbVk6pZLe6iQAAAco"]
[Sun Dec 28 19:24:21.228248 2025] [:error] [pid 29388:tid 29399] [client 4.190.186.15:13981] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aVETZdoLv2L2zI_SpdXWhgAAAUM"]
[Sun Dec 28 19:24:21.574650 2025] [:error] [pid 29388:tid 29406] [client 4.190.186.15:14029] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aVETZdoLv2L2zI_SpdXWiAAAAUo"]
[Sun Dec 28 19:24:21.829242 2025] [:error] [pid 42378:tid 42394] [client 4.190.186.15:12231] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aVETZTgtcN-KHAjWrX8RPwAAAM4"]
[Sun Dec 28 19:24:22.101200 2025] [:error] [pid 29437:tid 29484] [client 4.190.186.15:13966] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aVETZhhDotAbVk6pZLe6jwAAAdI"]
[Sun Dec 28 19:24:22.380829 2025] [:error] [pid 29436:tid 29453] [client 4.190.186.15:14061] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aVETZrchzOOtNL9VPNLhjQAAAY4"]
[Sun Dec 28 19:24:22.698430 2025] [:error] [pid 29436:tid 29446] [client 4.190.186.15:12229] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aVETZrchzOOtNL9VPNLhjgAAAYc"]
[Sun Dec 28 19:24:23.050663 2025] [:error] [pid 42292:tid 42296] [client 4.190.186.15:14031] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aVETZ5yOrM_vaFx1osZCQgAAAAA"]
[Sun Dec 28 19:24:23.370430 2025] [:error] [pid 43789:tid 43791] [client 4.190.186.15:14047] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aVETZwa-tUppni4CcCYrbwAAAQA"]
[Sun Dec 28 19:24:23.664888 2025] [:error] [pid 42292:tid 42318] [client 4.190.186.15:12264] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aVETZ5yOrM_vaFx1osZCRAAAABY"]
[Sun Dec 28 19:24:23.955651 2025] [:error] [pid 42293:tid 42338] [client 4.190.186.15:14022] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aVETZ8vc9B-5cwN385LcmAAAAE8"]
[Sun Dec 28 19:24:24.245260 2025] [:error] [pid 42294:tid 42363] [client 4.190.186.15:13959] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aVETaNTE5kYcYCOzl9G2pwAAAI0"]
[Sun Dec 28 19:24:24.544756 2025] [:error] [pid 42294:tid 42367] [client 4.190.186.15:13970] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVETaNTE5kYcYCOzl9G2qAAAAJE"]
[Sun Dec 28 19:24:24.808439 2025] [:error] [pid 29388:tid 29396] [client 4.190.186.15:13957] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVETaNoLv2L2zI_SpdXWiwAAAUA"]
[Sun Dec 28 19:24:25.085098 2025] [:error] [pid 29388:tid 29410] [client 4.190.186.15:14056] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVETadoLv2L2zI_SpdXWjQAAAU4"]
[Sun Dec 28 19:24:25.362627 2025] [:error] [pid 29436:tid 29452] [client 4.190.186.15:14059] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVETabchzOOtNL9VPNLhkwAAAY0"]
[Sun Dec 28 19:24:25.605249 2025] [:error] [pid 29388:tid 29405] [client 4.190.186.15:14054] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aVETadoLv2L2zI_SpdXWjgAAAUk"]
[Sun Dec 28 19:24:25.855830 2025] [:error] [pid 43789:tid 43795] [client 4.190.186.15:14053] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aVETaQa-tUppni4CcCYregAAAQQ"]
[Sun Dec 28 19:24:26.145030 2025] [:error] [pid 29437:tid 29488] [client 4.190.186.15:14023] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aVETahhDotAbVk6pZLe6lAAAAdY"]
[Sun Dec 28 19:24:26.416227 2025] [:error] [pid 42293:tid 42333] [client 4.190.186.15:12248] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aVETasvc9B-5cwN385LcoQAAAEo"]
[Sun Dec 28 19:24:26.672881 2025] [:error] [pid 42292:tid 42302] [client 4.190.186.15:14067] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aVETapyOrM_vaFx1osZCSQAAAAY"]
[Sun Dec 28 19:24:26.992791 2025] [:error] [pid 29436:tid 29445] [client 4.190.186.15:12263] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aVETarchzOOtNL9VPNLhlwAAAYY"]
[Sun Dec 28 19:24:27.307574 2025] [:error] [pid 29436:tid 29441] [client 4.190.186.15:13956] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aVETa7chzOOtNL9VPNLhmAAAAYI"]
[Sun Dec 28 19:24:27.590732 2025] [:error] [pid 42294:tid 42351] [client 4.190.186.15:14053] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aVETa9TE5kYcYCOzl9G2qgAAAIE"]
[Sun Dec 28 19:24:27.836520 2025] [:error] [pid 42293:tid 42330] [client 4.190.186.15:13984] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVETa8vc9B-5cwN385LcpwAAAEc"]
[Sun Dec 28 19:24:28.107364 2025] [:error] [pid 42292:tid 42306] [client 4.190.186.15:13978] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVETbJyOrM_vaFx1osZCSwAAAAo"]
[Sun Dec 28 19:24:28.402704 2025] [:error] [pid 42294:tid 42364] [client 4.190.186.15:14021] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVETbNTE5kYcYCOzl9G2qwAAAI4"]
[Sun Dec 28 19:24:28.683191 2025] [:error] [pid 29436:tid 29456] [client 4.190.186.15:13999] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVETbLchzOOtNL9VPNLhmgAAAZE"]
[Sun Dec 28 19:24:29.071203 2025] [:error] [pid 42293:tid 42338] [client 4.190.186.15:13976] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVETbcvc9B-5cwN385LcqgAAAE8"]
[Sun Dec 28 19:24:29.368520 2025] [:error] [pid 42292:tid 42299] [client 4.190.186.15:14068] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVETbZyOrM_vaFx1osZCTAAAAAM"]
[Sun Dec 28 19:24:29.649816 2025] [:error] [pid 42293:tid 42326] [client 4.190.186.15:13962] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVETbcvc9B-5cwN385LcrAAAAEM"]
[Sun Dec 28 19:24:30.033489 2025] [:error] [pid 29388:tid 29399] [client 4.190.186.15:13993] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVETbtoLv2L2zI_SpdXWlgAAAUM"]
[Sun Dec 28 19:24:30.328131 2025] [:error] [pid 29388:tid 29407] [client 4.190.186.15:12233] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVETbtoLv2L2zI_SpdXWlwAAAUs"]
[Sun Dec 28 19:24:30.612647 2025] [:error] [pid 29436:tid 29440] [client 4.190.186.15:14079] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVETbrchzOOtNL9VPNLhnwAAAYE"]
[Sun Dec 28 19:24:30.924777 2025] [:error] [pid 42293:tid 42343] [client 4.190.186.15:14037] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVETbsvc9B-5cwN385LcrwAAAFQ"]
[Sun Dec 28 19:24:31.221641 2025] [:error] [pid 42293:tid 42327] [client 4.190.186.15:14078] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVETb8vc9B-5cwN385LcsQAAAEQ"]
[Sun Dec 28 19:24:31.497013 2025] [:error] [pid 29388:tid 29417] [client 4.190.186.15:13952] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aVETb9oLv2L2zI_SpdXWmQAAAVU"]
[Sun Dec 28 19:24:31.763289 2025] [:error] [pid 29436:tid 29446] [client 4.190.186.15:13989] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aVETb7chzOOtNL9VPNLhoQAAAYc"]
[Sun Dec 28 19:24:32.027855 2025] [:error] [pid 42292:tid 42301] [client 4.190.186.15:14012] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aVETcJyOrM_vaFx1osZCTwAAAAU"]
[Sun Dec 28 19:24:32.293610 2025] [:error] [pid 29437:tid 29468] [client 4.190.186.15:12278] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aVETcBhDotAbVk6pZLe6lwAAAcI"]
[Sun Dec 28 19:24:32.591324 2025] [:error] [pid 29437:tid 29487] [client 4.190.186.15:14077] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aVETcBhDotAbVk6pZLe6mAAAAdU"]
[Sun Dec 28 19:24:32.852839 2025] [:error] [pid 42292:tid 42319] [client 4.190.186.15:12244] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aVETcJyOrM_vaFx1osZCUAAAABc"]
[Sun Dec 28 19:24:33.162436 2025] [:error] [pid 42294:tid 42350] [client 4.190.186.15:14070] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aVETcdTE5kYcYCOzl9G2sAAAAIA"]
[Sun Dec 28 19:24:33.480079 2025] [:error] [pid 29388:tid 29411] [client 4.190.186.15:12236] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aVETcdoLv2L2zI_SpdXWnAAAAU8"]
[Sun Dec 28 19:24:33.784686 2025] [:error] [pid 29388:tid 29405] [client 4.190.186.15:14071] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVETcdoLv2L2zI_SpdXWnQAAAUk"]
[Sun Dec 28 19:24:34.048754 2025] [:error] [pid 29437:tid 29485] [client 4.190.186.15:12258] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVETchhDotAbVk6pZLe6mgAAAdM"]
[Sun Dec 28 19:24:34.449427 2025] [:error] [pid 43789:tid 43795] [client 4.190.186.15:12254] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVETcga-tUppni4CcCYrhwAAAQQ"]
[Sun Dec 28 19:24:34.691763 2025] [:error] [pid 43789:tid 43803] [client 4.190.186.15:12249] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVETcga-tUppni4CcCYriQAAAQw"]
[Sun Dec 28 19:24:34.963867 2025] [:error] [pid 42378:tid 42399] [client 4.190.186.15:13967] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVETcjgtcN-KHAjWrX8RXAAAANM"]
[Sun Dec 28 19:24:35.203583 2025] [:error] [pid 42293:tid 42323] [client 4.190.186.15:14046] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVETc8vc9B-5cwN385LcygAAAEA"]
[Sun Dec 28 19:24:35.518011 2025] [:error] [pid 42293:tid 42329] [client 4.190.186.15:12252] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVETc8vc9B-5cwN385LczQAAAEY"]
[Sun Dec 28 19:24:35.795623 2025] [:error] [pid 43789:tid 43813] [client 4.190.186.15:14005] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVETcwa-tUppni4CcCYriwAAARY"]
[Sun Dec 28 19:24:36.056072 2025] [:error] [pid 42293:tid 42328] [client 4.190.186.15:13988] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVETdMvc9B-5cwN385Lc2wAAAEU"]
[Sun Dec 28 19:24:36.317462 2025] [:error] [pid 42294:tid 42370] [client 4.190.186.15:12268] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVETdNTE5kYcYCOzl9G2xAAAAJQ"]
[Sun Dec 28 19:24:36.634151 2025] [:error] [pid 42294:tid 42372] [client 4.190.186.15:14001] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVETdNTE5kYcYCOzl9G2xQAAAJY"]
[Sun Dec 28 19:24:36.876360 2025] [:error] [pid 29388:tid 29402] [client 4.190.186.15:14030] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVETdNoLv2L2zI_SpdXWowAAAUY"]
[Sun Dec 28 19:24:37.166674 2025] [:error] [pid 29388:tid 29418] [client 4.190.186.15:13997] [client 4.190.186.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVETddoLv2L2zI_SpdXWpQAAAVY"]
[Sun Dec 28 19:24:37.438178 2025] [:error] [pid 42293:tid 42347] [client 4.190.186.15:14075] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVETdcvc9B-5cwN385Lc3QAAAFg"]
[Sun Dec 28 19:24:37.709948 2025] [:error] [pid 42293:tid 42330] [client 4.190.186.15:14063] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVETdcvc9B-5cwN385Lc3wAAAEc"]
[Sun Dec 28 19:24:37.983103 2025] [:error] [pid 29436:tid 29461] [client 4.190.186.15:12243] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVETdbchzOOtNL9VPNLhqAAAAZY"]
[Sun Dec 28 19:24:38.259512 2025] [:error] [pid 42294:tid 42365] [client 4.190.186.15:12269] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVETdtTE5kYcYCOzl9G2yQAAAI8"]
[Sun Dec 28 19:24:38.600236 2025] [:error] [pid 29388:tid 29409] [client 4.190.186.15:12227] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVETdtoLv2L2zI_SpdXWpwAAAU0"]
[Sun Dec 28 19:24:38.941371 2025] [:error] [pid 42378:tid 42399] [client 4.190.186.15:12180] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVETdjgtcN-KHAjWrX8RcwAAANM"]
[Sun Dec 28 19:24:39.278913 2025] [:error] [pid 42293:tid 42338] [client 4.190.186.15:13954] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVETd8vc9B-5cwN385Lc4gAAAE8"]
[Sun Dec 28 19:24:39.581204 2025] [:error] [pid 29436:tid 29444] [client 4.190.186.15:12261] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVETd7chzOOtNL9VPNLhqwAAAYU"]
[Sun Dec 28 19:24:39.896227 2025] [:error] [pid 42378:tid 42403] [client 4.190.186.15:14043] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVETdzgtcN-KHAjWrX8RdQAAANc"]
[Sun Dec 28 19:24:40.265135 2025] [:error] [pid 29436:tid 29449] [client 4.190.186.15:14002] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVETeLchzOOtNL9VPNLhrgAAAYo"]
[Sun Dec 28 19:24:40.566927 2025] [:error] [pid 29436:tid 29457] [client 4.190.186.15:14069] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVETeLchzOOtNL9VPNLhsAAAAZI"]
[Sun Dec 28 19:24:40.866044 2025] [:error] [pid 29388:tid 29410] [client 4.190.186.15:12245] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVETeNoLv2L2zI_SpdXWrAAAAU4"]
[Sun Dec 28 19:24:41.120512 2025] [:error] [pid 42294:tid 42363] [client 4.190.186.15:12262] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVETedTE5kYcYCOzl9G2zgAAAI0"]
[Sun Dec 28 19:24:41.380262 2025] [:error] [pid 43789:tid 43815] [client 4.190.186.15:12286] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVETeQa-tUppni4CcCYrjQAAARg"]
[Sun Dec 28 19:24:41.649027 2025] [:error] [pid 42294:tid 42354] [client 4.190.186.15:13982] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVETedTE5kYcYCOzl9G20wAAAIQ"]
[Sun Dec 28 19:24:41.918306 2025] [:error] [pid 42378:tid 42394] [client 4.190.186.15:12232] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVETeTgtcN-KHAjWrX8ReQAAAM4"]
[Sun Dec 28 19:24:42.241028 2025] [:error] [pid 29388:tid 29408] [client 4.190.186.15:14008] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aVETetoLv2L2zI_SpdXWrwAAAUw"]
[Sun Dec 28 19:24:42.524009 2025] [:error] [pid 29436:tid 29451] [client 4.190.186.15:13994] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aVETerchzOOtNL9VPNLhtAAAAYw"]
[Sun Dec 28 19:24:42.770940 2025] [:error] [pid 29436:tid 29442] [client 4.190.186.15:14039] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aVETerchzOOtNL9VPNLhtgAAAYM"]
[Sun Dec 28 19:24:43.144202 2025] [:error] [pid 29436:tid 29448] [client 4.190.186.15:12247] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aVETe7chzOOtNL9VPNLhuQAAAYk"]
[Sun Dec 28 19:24:43.425244 2025] [:error] [pid 29436:tid 29459] [client 4.190.186.15:12250] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVETe7chzOOtNL9VPNLhvAAAAZQ"]
[Sun Dec 28 19:24:43.681371 2025] [:error] [pid 43789:tid 43814] [client 4.190.186.15:14007] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVETewa-tUppni4CcCYrjgAAARc"]
[Sun Dec 28 19:24:43.971334 2025] [:error] [pid 29436:tid 29460] [client 4.190.186.15:12251] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVETe7chzOOtNL9VPNLhwAAAAZU"]
[Sun Dec 28 19:24:44.214420 2025] [:error] [pid 42378:tid 42388] [client 4.190.186.15:13992] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVETfDgtcN-KHAjWrX8RgwAAAMg"]
[Sun Dec 28 19:24:44.558754 2025] [:error] [pid 29436:tid 29447] [client 4.190.186.15:14057] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aVETfLchzOOtNL9VPNLhwgAAAYg"]
[Sun Dec 28 19:24:44.809689 2025] [:error] [pid 29437:tid 29476] [client 4.190.186.15:12224] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aVETfBhDotAbVk6pZLe6nAAAAco"]
[Sun Dec 28 19:24:45.112998 2025] [:error] [pid 42293:tid 42325] [client 4.190.186.15:12168] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aVETfcvc9B-5cwN385Lc5QAAAEI"]
[Sun Dec 28 19:24:45.446984 2025] [:error] [pid 29437:tid 29474] [client 4.190.186.15:12246] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aVETfRhDotAbVk6pZLe6nQAAAcg"]
[Sun Dec 28 19:24:45.719288 2025] [:error] [pid 29437:tid 29469] [client 4.190.186.15:14073] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVETfRhDotAbVk6pZLe6nwAAAcM"]
[Sun Dec 28 19:24:46.199495 2025] [:error] [pid 29436:tid 29443] [client 4.190.186.15:12253] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVETfrchzOOtNL9VPNLhygAAAYQ"]
[Sun Dec 28 19:24:46.443624 2025] [:error] [pid 29437:tid 29490] [client 4.190.186.15:13995] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVETfhhDotAbVk6pZLe6oAAAAdg"]
[Sun Dec 28 19:24:46.736765 2025] [:error] [pid 29436:tid 29441] [client 4.190.186.15:14003] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVETfrchzOOtNL9VPNLhzQAAAYI"]
[Sun Dec 28 19:24:47.013894 2025] [:error] [pid 42293:tid 42345] [client 4.190.186.15:12235] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVETf8vc9B-5cwN385Lc5wAAAFY"]
[Sun Dec 28 19:24:47.270646 2025] [:error] [pid 42293:tid 42327] [client 4.190.186.15:12287] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVETf8vc9B-5cwN385Lc6AAAAEQ"]
[Sun Dec 28 19:24:47.658201 2025] [:error] [pid 42293:tid 42337] [client 4.190.186.15:12216] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVETf8vc9B-5cwN385Lc6gAAAE4"]
[Sun Dec 28 19:24:47.979064 2025] [:error] [pid 29388:tid 29404] [client 4.190.186.15:12192] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVETf9oLv2L2zI_SpdXWtAAAAUg"]
[Sun Dec 28 19:24:48.435032 2025] [:error] [pid 42292:tid 42317] [client 4.190.186.15:14004] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVETgJyOrM_vaFx1osZCagAAABU"]
[Sun Dec 28 19:24:48.734621 2025] [:error] [pid 29436:tid 29456] [client 4.190.186.15:13986] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVETgLchzOOtNL9VPNLh0gAAAZE"]
[Sun Dec 28 19:24:49.113185 2025] [:error] [pid 29436:tid 29447] [client 4.190.186.15:12226] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVETgbchzOOtNL9VPNLh0wAAAYg"]
[Sun Dec 28 19:24:49.427039 2025] [:error] [pid 29436:tid 29455] [client 4.190.186.15:12143] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVETgbchzOOtNL9VPNLh1AAAAZA"]
[Sun Dec 28 19:24:49.800154 2025] [:error] [pid 29436:tid 29442] [client 4.190.186.15:14045] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVETgbchzOOtNL9VPNLh1gAAAYM"]
[Sun Dec 28 19:24:50.049274 2025] [:error] [pid 29436:tid 29448] [client 4.190.186.15:14038] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVETgrchzOOtNL9VPNLh1wAAAYk"]
[Sun Dec 28 19:24:50.407691 2025] [:error] [pid 42378:tid 42396] [client 4.190.186.15:14048] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVETgjgtcN-KHAjWrX8RiQAAANA"]
[Sun Dec 28 19:24:50.658988 2025] [:error] [pid 42293:tid 42344] [client 4.190.186.15:14044] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVETgsvc9B-5cwN385Lc8gAAAFU"]
[Sun Dec 28 19:24:50.939666 2025] [:error] [pid 29437:tid 29467] [client 4.190.186.15:13967] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aVETghhDotAbVk6pZLe6pQAAAcE"]
[Sun Dec 28 19:24:51.285775 2025] [:error] [pid 42292:tid 42303] [client 4.190.186.15:12179] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aVETg5yOrM_vaFx1osZCbQAAAAc"]
[Sun Dec 28 19:24:51.563035 2025] [:error] [pid 29436:tid 29444] [client 4.190.186.15:12230] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aVETg7chzOOtNL9VPNLh2QAAAYU"]
[Sun Dec 28 19:24:51.873823 2025] [:error] [pid 43789:tid 43808] [client 4.190.186.15:12275] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aVETgwa-tUppni4CcCYrkwAAARE"]
[Sun Dec 28 19:24:52.215625 2025] [:error] [pid 42292:tid 42314] [client 4.190.186.15:12279] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEThJyOrM_vaFx1osZCcAAAABI"]
[Sun Dec 28 19:24:52.494355 2025] [:error] [pid 43789:tid 43811] [client 4.190.186.15:12162] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEThAa-tUppni4CcCYrlAAAARQ"]
[Sun Dec 28 19:24:52.931905 2025] [:error] [pid 42292:tid 42316] [client 4.190.186.15:12272] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEThJyOrM_vaFx1osZCcwAAABQ"]
[Sun Dec 28 19:24:53.191234 2025] [:error] [pid 43789:tid 43810] [client 4.190.186.15:13969] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEThQa-tUppni4CcCYrlwAAARM"]
[Sun Dec 28 19:24:53.505681 2025] [:error] [pid 43789:tid 43806] [client 4.190.186.15:12181] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVEThQa-tUppni4CcCYrmgAAAQ8"]
[Sun Dec 28 19:24:53.803097 2025] [:error] [pid 42293:tid 42326] [client 4.190.186.15:14035] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVEThcvc9B-5cwN385Lc9wAAAEM"]
[Sun Dec 28 19:24:54.092322 2025] [:error] [pid 42293:tid 42343] [client 4.190.186.15:12225] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVEThsvc9B-5cwN385Lc-QAAAFQ"]
[Sun Dec 28 19:24:54.494452 2025] [:error] [pid 42293:tid 42337] [client 4.190.186.15:12270] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVEThsvc9B-5cwN385Lc-wAAAE4"]
[Sun Dec 28 19:24:54.753929 2025] [:error] [pid 43789:tid 43803] [client 4.190.186.15:12266] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aVEThga-tUppni4CcCYrmwAAAQw"]
[Sun Dec 28 19:24:55.184008 2025] [:error] [pid 42292:tid 42319] [client 4.190.186.15:12240] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aVETh5yOrM_vaFx1osZCdQAAABc"]
[Sun Dec 28 19:24:55.510567 2025] [:error] [pid 43789:tid 43797] [client 4.190.186.15:14074] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aVEThwa-tUppni4CcCYrnQAAAQY"]
[Sun Dec 28 19:24:55.965101 2025] [:error] [pid 42294:tid 42364] [client 4.190.186.15:12166] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aVETh9TE5kYcYCOzl9G22QAAAI4"]
[Sun Dec 28 19:24:56.218614 2025] [:error] [pid 43789:tid 43813] [client 4.190.186.15:14014] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVETiAa-tUppni4CcCYrngAAARY"]
[Sun Dec 28 19:24:56.500562 2025] [:error] [pid 42294:tid 42351] [client 4.190.186.15:12191] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVETiNTE5kYcYCOzl9G22wAAAIE"]
[Sun Dec 28 19:24:56.805813 2025] [:error] [pid 29437:tid 29476] [client 4.190.186.15:12199] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVETiBhDotAbVk6pZLe6qwAAAco"]
[Sun Dec 28 19:24:57.092147 2025] [:error] [pid 29437:tid 29474] [client 4.190.186.15:14065] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVETiRhDotAbVk6pZLe6rAAAAcg"]
[Sun Dec 28 19:24:57.404975 2025] [:error] [pid 29437:tid 29481] [client 4.190.186.15:12108] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVETiRhDotAbVk6pZLe6rgAAAc8"]
[Sun Dec 28 19:24:57.699334 2025] [:error] [pid 29436:tid 29458] [client 4.190.186.15:12228] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVETibchzOOtNL9VPNLh2wAAAZM"]
[Sun Dec 28 19:24:57.976119 2025] [:error] [pid 42294:tid 42373] [client 4.190.186.15:12265] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVETidTE5kYcYCOzl9G23gAAAJc"]
[Sun Dec 28 19:24:58.248068 2025] [:error] [pid 42293:tid 42332] [client 4.190.186.15:12193] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVETisvc9B-5cwN385LdAwAAAEk"]
[Sun Dec 28 19:24:58.522229 2025] [:error] [pid 42293:tid 42342] [client 4.190.186.15:12196] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVETisvc9B-5cwN385LdBQAAAFM"]
[Sun Dec 28 19:24:58.817513 2025] [:error] [pid 29437:tid 29470] [client 4.190.186.15:12285] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVETihhDotAbVk6pZLe6tAAAAcQ"]
[Sun Dec 28 19:24:59.092498 2025] [:error] [pid 42294:tid 42350] [client 4.190.186.15:12223] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVETi9TE5kYcYCOzl9G23wAAAIA"]
[Sun Dec 28 19:24:59.469092 2025] [:error] [pid 29388:tid 29402] [client 4.190.186.15:12281] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVETi9oLv2L2zI_SpdXWwQAAAUY"]
[Sun Dec 28 19:24:59.759483 2025] [:error] [pid 29437:tid 29467] [client 4.190.186.15:12182] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVETixhDotAbVk6pZLe6tQAAAcE"]
[Sun Dec 28 19:25:00.010923 2025] [:error] [pid 42294:tid 42372] [client 4.190.186.15:14033] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVETjNTE5kYcYCOzl9G24AAAAJY"]
[Sun Dec 28 19:25:00.363305 2025] [:error] [pid 29388:tid 29399] [client 4.190.186.15:14041] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVETjNoLv2L2zI_SpdXWxQAAAUM"]
[Sun Dec 28 19:25:00.679293 2025] [:error] [pid 42293:tid 42323] [client 4.190.186.15:12110] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVETjMvc9B-5cwN385LdDgAAAEA"]
[Sun Dec 28 19:25:00.992042 2025] [:error] [pid 42294:tid 42360] [client 4.190.186.15:12238] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVETjNTE5kYcYCOzl9G25AAAAIo"]
[Sun Dec 28 19:25:01.264003 2025] [:error] [pid 42378:tid 42386] [client 4.190.186.15:12282] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVETjTgtcN-KHAjWrX8RkQAAAMY"]
[Sun Dec 28 19:25:01.519897 2025] [:error] [pid 29388:tid 29406] [client 4.190.186.15:12184] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVETjdoLv2L2zI_SpdXWxwAAAUo"]
[Sun Dec 28 19:25:01.798126 2025] [:error] [pid 29388:tid 29409] [client 4.190.186.15:12221] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVETjdoLv2L2zI_SpdXWyAAAAU0"]
[Sun Dec 28 19:25:02.109903 2025] [:error] [pid 42378:tid 42393] [client 4.190.186.15:14025] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVETjjgtcN-KHAjWrX8RlAAAAM0"]
[Sun Dec 28 19:25:02.361130 2025] [:error] [pid 42378:tid 42395] [client 4.190.186.15:14020] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVETjjgtcN-KHAjWrX8RlwAAAM8"]
[Sun Dec 28 19:25:02.629642 2025] [:error] [pid 42293:tid 42338] [client 4.190.186.15:12256] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVETjsvc9B-5cwN385LdEwAAAE8"]
[Sun Dec 28 19:25:02.945032 2025] [:error] [pid 29436:tid 29456] [client 4.190.186.15:14013] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVETjrchzOOtNL9VPNLh3wAAAZE"]
[Sun Dec 28 19:25:03.198590 2025] [:error] [pid 42293:tid 42335] [client 4.190.186.15:12177] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aVETj8vc9B-5cwN385LdFgAAAEw"]
[Sun Dec 28 19:25:03.469365 2025] [:error] [pid 42292:tid 42305] [client 4.190.186.15:14040] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aVETj5yOrM_vaFx1osZCewAAAAk"]
[Sun Dec 28 19:25:03.710191 2025] [:error] [pid 43789:tid 43791] [client 4.190.186.15:12280] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aVETjwa-tUppni4CcCYrpAAAAQA"]
[Sun Dec 28 19:25:03.976014 2025] [:error] [pid 43789:tid 43794] [client 4.190.186.15:12160] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aVETjwa-tUppni4CcCYrqAAAAQM"]
[Sun Dec 28 19:25:04.300123 2025] [:error] [pid 29437:tid 29485] [client 4.190.186.15:12164] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVETkBhDotAbVk6pZLe6uwAAAdM"]
[Sun Dec 28 19:25:04.541620 2025] [:error] [pid 42378:tid 42390] [client 4.190.186.15:12273] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVETkDgtcN-KHAjWrX8RmwAAAMo"]
[Sun Dec 28 19:25:04.788078 2025] [:error] [pid 29388:tid 29405] [client 4.190.186.15:12276] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVETkNoLv2L2zI_SpdXWzAAAAUk"]
[Sun Dec 28 19:25:05.080731 2025] [:error] [pid 29388:tid 29414] [client 4.190.186.15:12213] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVETkdoLv2L2zI_SpdXWzgAAAVI"]
[Sun Dec 28 19:25:05.337258 2025] [:error] [pid 29436:tid 29455] [client 4.190.186.15:12208] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVETkbchzOOtNL9VPNLh4gAAAZA"]
[Sun Dec 28 19:25:05.623325 2025] [:error] [pid 42294:tid 42365] [client 4.190.186.15:12271] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVETkdTE5kYcYCOzl9G25gAAAI8"]
[Sun Dec 28 19:25:05.896728 2025] [:error] [pid 29388:tid 29412] [client 4.190.186.15:12197] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVETkdoLv2L2zI_SpdXW0QAAAVA"]
[Sun Dec 28 19:25:06.141664 2025] [:error] [pid 42293:tid 42327] [client 4.190.186.15:14015] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVETksvc9B-5cwN385LdGAAAAEQ"]
[Sun Dec 28 19:25:06.421897 2025] [:error] [pid 29437:tid 29477] [client 4.190.186.15:12138] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aVETkhhDotAbVk6pZLe6vAAAAcs"]
[Sun Dec 28 19:25:06.663699 2025] [:error] [pid 29388:tid 29396] [client 4.190.186.15:12043] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aVETktoLv2L2zI_SpdXW0wAAAUA"]
[Sun Dec 28 19:25:06.917026 2025] [:error] [pid 42294:tid 42368] [client 4.190.186.15:14010] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aVETktTE5kYcYCOzl9G25wAAAJI"]
[Sun Dec 28 19:25:37.221054 2025] [autoindex:error] [pid 43789:tid 43791] [client 4.190.186.15:14060] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 19:25:50.725590 2025] [:error] [pid 29388:tid 29404] [client 4.190.186.15:12161] [client 4.190.186.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVETvtoLv2L2zI_SpdXW7gAAAUg"]
[Sun Dec 28 19:25:56.405457 2025] [:error] [pid 42292:tid 42313] [client 4.190.186.15:12217] [client 4.190.186.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVETxJyOrM_vaFx1osZC1wAAABE"]
[Sun Dec 28 19:25:56.647157 2025] [:error] [pid 42378:tid 42403] [client 4.190.186.15:12170] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVETxDgtcN-KHAjWrX8R2gAAANc"]
[Sun Dec 28 19:25:56.904057 2025] [:error] [pid 43789:tid 43800] [client 4.190.186.15:13996] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVETxAa-tUppni4CcCYr5gAAAQk"]
[Sun Dec 28 19:25:57.157491 2025] [:error] [pid 42294:tid 42356] [client 4.190.186.15:12202] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVETxdTE5kYcYCOzl9G3HAAAAIY"]
[Sun Dec 28 19:25:57.398977 2025] [:error] [pid 29436:tid 29444] [client 4.190.186.15:12242] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVETxbchzOOtNL9VPNLiMQAAAYU"]
[Sun Dec 28 19:25:57.642757 2025] [:error] [pid 42292:tid 42298] [client 4.190.186.15:12102] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVETxZyOrM_vaFx1osZC2AAAAAI"]
[Sun Dec 28 19:25:57.893255 2025] [:error] [pid 42294:tid 42364] [client 4.190.186.15:12167] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVETxdTE5kYcYCOzl9G3HwAAAI4"]
[Sun Dec 28 19:25:58.134918 2025] [:error] [pid 29436:tid 29449] [client 4.190.186.15:12195] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVETxrchzOOtNL9VPNLiMgAAAYo"]
[Sun Dec 28 19:25:58.454047 2025] [:error] [pid 42294:tid 42351] [client 4.190.186.15:12099] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVETxtTE5kYcYCOzl9G3IQAAAIE"]
[Sun Dec 28 19:25:58.788940 2025] [:error] [pid 29437:tid 29485] [client 4.190.186.15:12260] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVETxhhDotAbVk6pZLe6_gAAAdM"]
[Sun Dec 28 19:25:59.140368 2025] [:error] [pid 42293:tid 42332] [client 4.190.186.15:12097] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVETx8vc9B-5cwN385LdcwAAAEk"]
[Sun Dec 28 19:25:59.384611 2025] [:error] [pid 42294:tid 42354] [client 4.190.186.15:14000] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVETx9TE5kYcYCOzl9G3IgAAAIQ"]
[Sun Dec 28 19:25:59.663952 2025] [:error] [pid 29436:tid 29445] [client 4.190.186.15:12237] [client 4.190.186.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVETx7chzOOtNL9VPNLiNAAAAYY"]
[Sun Dec 28 19:26:00.031630 2025] [:error] [pid 42293:tid 42342] [client 4.190.186.15:12204] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aVETyMvc9B-5cwN385LddQAAAFM"]
[Sun Dec 28 19:26:00.299138 2025] [:error] [pid 42293:tid 42326] [client 4.190.186.15:12096] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aVETyMvc9B-5cwN385LddgAAAEM"]
[Sun Dec 28 19:26:00.628101 2025] [:error] [pid 29436:tid 29441] [client 4.190.186.15:14066] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aVETyLchzOOtNL9VPNLiOgAAAYI"]
[Sun Dec 28 19:26:00.877133 2025] [:error] [pid 43789:tid 43793] [client 4.190.186.15:12210] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aVETyAa-tUppni4CcCYr6AAAAQI"]
[Sun Dec 28 19:26:01.198859 2025] [:error] [pid 42293:tid 42323] [client 4.190.186.15:14009] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVETycvc9B-5cwN385LdegAAAEA"]
[Sun Dec 28 19:26:01.485472 2025] [:error] [pid 29436:tid 29454] [client 4.190.186.15:12194] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVETybchzOOtNL9VPNLiOwAAAY8"]
[Sun Dec 28 19:26:01.750810 2025] [:error] [pid 29388:tid 29418] [client 4.190.186.15:12255] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVETydoLv2L2zI_SpdXW8QAAAVY"]
[Sun Dec 28 19:26:02.005586 2025] [:error] [pid 29436:tid 29446] [client 4.190.186.15:12115] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVETyrchzOOtNL9VPNLiPAAAAYc"]
[Sun Dec 28 19:26:02.302743 2025] [:error] [pid 29388:tid 29406] [client 4.190.186.15:13991] [client 4.190.186.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVETytoLv2L2zI_SpdXW8gAAAUo"]
[Sun Dec 28 19:26:02.542805 2025] [:error] [pid 42293:tid 42341] [client 4.190.186.15:13990] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aVETysvc9B-5cwN385LdfQAAAFI"]
[Sun Dec 28 19:26:02.803451 2025] [:error] [pid 42293:tid 42325] [client 4.190.186.15:12185] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aVETysvc9B-5cwN385LdfgAAAEI"]
[Sun Dec 28 19:26:03.108247 2025] [:error] [pid 29437:tid 29488] [client 4.190.186.15:12284] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aVETyxhDotAbVk6pZLe7AQAAAdY"]
[Sun Dec 28 19:26:03.362472 2025] [:error] [pid 42292:tid 42300] [client 4.190.186.15:12209] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aVETy5yOrM_vaFx1osZC4AAAAAQ"]
[Sun Dec 28 19:26:03.613285 2025] [:error] [pid 29437:tid 29466] [client 4.190.186.15:12267] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aVETyxhDotAbVk6pZLe7AwAAAcA"]
[Sun Dec 28 19:26:03.860052 2025] [:error] [pid 29388:tid 29410] [client 4.190.186.15:12125] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aVETy9oLv2L2zI_SpdXW9QAAAU4"]
[Sun Dec 28 19:26:04.102927 2025] [:error] [pid 42378:tid 42394] [client 4.190.186.15:12186] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aVETzDgtcN-KHAjWrX8R4AAAAM4"]
[Sun Dec 28 19:26:04.357250 2025] [:error] [pid 29437:tid 29489] [client 4.190.186.15:12156] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aVETzBhDotAbVk6pZLe7BgAAAdc"]
[Sun Dec 28 19:26:04.617401 2025] [:error] [pid 42293:tid 42331] [client 4.190.186.15:14026] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aVETzMvc9B-5cwN385LdggAAAEg"]
[Sun Dec 28 19:26:04.864183 2025] [:error] [pid 42293:tid 42338] [client 4.190.186.15:12178] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aVETzMvc9B-5cwN385LdhAAAAE8"]
[Sun Dec 28 19:26:05.107856 2025] [:error] [pid 42293:tid 42326] [client 4.190.186.15:12144] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aVETzcvc9B-5cwN385LdhgAAAEM"]
[Sun Dec 28 19:26:05.354842 2025] [:error] [pid 42293:tid 42343] [client 4.190.186.15:12241] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVETzcvc9B-5cwN385LdiAAAAFQ"]
[Sun Dec 28 19:26:05.600347 2025] [:error] [pid 29388:tid 29405] [client 4.190.186.15:12033] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVETzdoLv2L2zI_SpdXW9gAAAUk"]
[Sun Dec 28 19:26:05.847224 2025] [:error] [pid 29437:tid 29473] [client 4.190.186.15:12207] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVETzRhDotAbVk6pZLe7CgAAAcc"]
[Sun Dec 28 19:26:06.126386 2025] [:error] [pid 29436:tid 29457] [client 4.190.186.15:14049] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVETzrchzOOtNL9VPNLiQgAAAZI"]
[Sun Dec 28 19:26:06.371585 2025] [:error] [pid 42294:tid 42366] [client 4.190.186.15:12139] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVETztTE5kYcYCOzl9G3LAAAAJA"]
[Sun Dec 28 19:26:06.668887 2025] [:error] [pid 29437:tid 29485] [client 4.190.186.15:12155] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVETzhhDotAbVk6pZLe7DQAAAdM"]
[Sun Dec 28 19:26:06.915957 2025] [:error] [pid 29437:tid 29470] [client 4.190.186.15:12176] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVETzhhDotAbVk6pZLe7DgAAAcQ"]
[Sun Dec 28 19:26:07.168441 2025] [:error] [pid 29436:tid 29459] [client 4.190.186.15:12259] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVETz7chzOOtNL9VPNLiRAAAAZQ"]
[Sun Dec 28 19:26:07.415493 2025] [:error] [pid 42294:tid 42356] [client 4.190.186.15:12100] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aVETz9TE5kYcYCOzl9G3LQAAAIY"]
[Sun Dec 28 19:26:07.655757 2025] [:error] [pid 42378:tid 42389] [client 4.190.186.15:12111] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aVETzzgtcN-KHAjWrX8R4gAAAMk"]
[Sun Dec 28 19:26:07.896236 2025] [:error] [pid 29388:tid 29412] [client 4.190.186.15:12277] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aVETz9oLv2L2zI_SpdXW-QAAAVA"]
[Sun Dec 28 19:26:08.169076 2025] [:error] [pid 29388:tid 29396] [client 4.190.186.15:12047] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aVET0NoLv2L2zI_SpdXW-wAAAUA"]
[Sun Dec 28 19:26:08.434023 2025] [:error] [pid 42292:tid 42312] [client 4.190.186.15:14006] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVET0JyOrM_vaFx1osZC5gAAABA"]
[Sun Dec 28 19:26:08.680781 2025] [:error] [pid 42293:tid 42341] [client 4.190.186.15:12203] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVET0Mvc9B-5cwN385LdkAAAAFI"]
[Sun Dec 28 19:26:08.925025 2025] [:error] [pid 42292:tid 42314] [client 4.190.186.15:12118] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVET0JyOrM_vaFx1osZC6AAAABI"]
[Sun Dec 28 19:26:09.169644 2025] [:error] [pid 29437:tid 29466] [client 4.190.186.15:12173] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVET0RhDotAbVk6pZLe7EwAAAcA"]
[Sun Dec 28 19:26:09.414280 2025] [:error] [pid 29437:tid 29478] [client 4.190.186.15:13996] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVET0RhDotAbVk6pZLe7FAAAAcw"]
[Sun Dec 28 19:26:09.655016 2025] [:error] [pid 29436:tid 29439] [client 4.190.186.15:12200] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVET0bchzOOtNL9VPNLiVQAAAYA"]
[Sun Dec 28 19:26:09.896857 2025] [:error] [pid 29436:tid 29452] [client 4.190.186.15:12187] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVET0bchzOOtNL9VPNLiVwAAAY0"]
[Sun Dec 28 19:26:10.147808 2025] [:error] [pid 42292:tid 42301] [client 4.190.186.15:12075] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVET0pyOrM_vaFx1osZC7AAAAAU"]
[Sun Dec 28 19:26:10.434152 2025] [:error] [pid 29436:tid 29460] [client 4.190.186.15:12116] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVET0rchzOOtNL9VPNLiWQAAAZU"]
[Sun Dec 28 19:26:10.674783 2025] [:error] [pid 29436:tid 29453] [client 4.190.186.15:11970] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVET0rchzOOtNL9VPNLiWwAAAY4"]
[Sun Dec 28 19:26:10.917692 2025] [:error] [pid 42292:tid 42299] [client 4.190.186.15:12214] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVET0pyOrM_vaFx1osZC7gAAAAM"]
[Sun Dec 28 19:26:11.156793 2025] [:error] [pid 42293:tid 42332] [client 4.190.186.15:12159] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVET08vc9B-5cwN385LdlwAAAEk"]
[Sun Dec 28 19:26:11.397530 2025] [:error] [pid 29436:tid 29451] [client 4.190.186.15:12104] [client 4.190.186.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVET07chzOOtNL9VPNLiXwAAAYw"]
[Sun Dec 28 19:26:11.638911 2025] [:error] [pid 29437:tid 29481] [client 4.190.186.15:12101] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVET0xhDotAbVk6pZLe7FwAAAc8"]
[Sun Dec 28 19:26:11.878635 2025] [:error] [pid 29437:tid 29484] [client 4.190.186.15:12129] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVET0xhDotAbVk6pZLe7GQAAAdI"]
[Sun Dec 28 19:26:12.117791 2025] [:error] [pid 29436:tid 29463] [client 4.190.186.15:12105] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVET1LchzOOtNL9VPNLiYwAAAZg"]
[Sun Dec 28 19:26:12.366953 2025] [:error] [pid 29436:tid 29448] [client 4.190.186.15:12154] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVET1LchzOOtNL9VPNLiZQAAAYk"]
[Sun Dec 28 19:26:12.624969 2025] [:error] [pid 42293:tid 42343] [client 4.190.186.15:12165] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVET1Mvc9B-5cwN385LdnAAAAFQ"]
[Sun Dec 28 19:26:12.884205 2025] [:error] [pid 42293:tid 42323] [client 4.190.186.15:12172] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVET1Mvc9B-5cwN385LdnQAAAEA"]
[Sun Dec 28 19:26:13.123828 2025] [:error] [pid 29436:tid 29457] [client 4.190.186.15:12126] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVET1bchzOOtNL9VPNLiagAAAZI"]
[Sun Dec 28 19:26:13.381602 2025] [:error] [pid 43789:tid 43791] [client 4.190.186.15:13998] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVET1Qa-tUppni4CcCYr6gAAAQA"]
[Sun Dec 28 19:26:13.622933 2025] [:error] [pid 42293:tid 42341] [client 4.190.186.15:12124] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVET1cvc9B-5cwN385LdoQAAAFI"]
[Sun Dec 28 19:26:13.865392 2025] [:error] [pid 29436:tid 29461] [client 4.190.186.15:12157] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVET1bchzOOtNL9VPNLibgAAAZY"]
[Sun Dec 28 19:26:14.109381 2025] [:error] [pid 42293:tid 42333] [client 4.190.186.15:11976] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVET1svc9B-5cwN385LdpAAAAEo"]
[Sun Dec 28 19:26:14.370429 2025] [:error] [pid 42378:tid 42401] [client 4.190.186.15:12128] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVET1jgtcN-KHAjWrX8R7wAAANU"]
[Sun Dec 28 19:26:14.612451 2025] [:error] [pid 42378:tid 42397] [client 4.190.186.15:12130] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVET1jgtcN-KHAjWrX8R8gAAANE"]
[Sun Dec 28 19:26:14.903938 2025] [:error] [pid 43789:tid 43813] [client 4.190.186.15:12206] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVET1ga-tUppni4CcCYr7AAAARY"]
[Sun Dec 28 19:26:15.143682 2025] [:error] [pid 42293:tid 42326] [client 4.190.186.15:12212] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVET18vc9B-5cwN385LdqAAAAEM"]
[Sun Dec 28 19:26:15.395453 2025] [:error] [pid 42293:tid 42347] [client 4.190.186.15:12119] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVET18vc9B-5cwN385LdqQAAAFg"]
[Sun Dec 28 19:26:15.639674 2025] [:error] [pid 42293:tid 42323] [client 4.190.186.15:12148] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVET18vc9B-5cwN385LdqgAAAEA"]
[Sun Dec 28 19:26:15.887446 2025] [:error] [pid 42378:tid 42386] [client 4.190.186.15:12109] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVET1zgtcN-KHAjWrX8R9wAAAMY"]
[Sun Dec 28 19:26:16.138318 2025] [:error] [pid 43789:tid 43810] [client 4.190.186.15:12174] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVET2Aa-tUppni4CcCYr8gAAARM"]
[Sun Dec 28 19:26:16.377990 2025] [:error] [pid 42294:tid 42354] [client 4.190.186.15:12034] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVET2NTE5kYcYCOzl9G3MQAAAIQ"]
[Sun Dec 28 19:26:16.637525 2025] [:error] [pid 43789:tid 43795] [client 4.190.186.15:12135] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVET2Aa-tUppni4CcCYr9AAAAQQ"]
[Sun Dec 28 19:26:16.885374 2025] [:error] [pid 43789:tid 43797] [client 4.190.186.15:14017] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVET2Aa-tUppni4CcCYr9QAAAQY"]
[Sun Dec 28 19:26:17.138066 2025] [:error] [pid 29437:tid 29473] [client 4.190.186.15:12117] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVET2RhDotAbVk6pZLe7GwAAAcc"]
[Sun Dec 28 19:26:17.378948 2025] [:error] [pid 29436:tid 29454] [client 4.190.186.15:12098] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aVET2bchzOOtNL9VPNLicQAAAY8"]
[Sun Dec 28 19:26:17.629145 2025] [:error] [pid 43789:tid 43803] [client 4.190.186.15:12188] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aVET2Qa-tUppni4CcCYr9wAAAQw"]
[Sun Dec 28 19:26:17.869026 2025] [:error] [pid 42293:tid 42337] [client 4.190.186.15:12163] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aVET2cvc9B-5cwN385LdswAAAE4"]
[Sun Dec 28 19:26:18.145477 2025] [:error] [pid 42378:tid 42393] [client 4.190.186.15:12158] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aVET2jgtcN-KHAjWrX8R-wAAAM0"]
[Sun Dec 28 19:26:18.430358 2025] [:error] [pid 42294:tid 42358] [client 4.190.186.15:11972] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aVET2tTE5kYcYCOzl9G3NAAAAIg"]
[Sun Dec 28 19:26:18.675830 2025] [:error] [pid 42294:tid 42367] [client 4.190.186.15:12215] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aVET2tTE5kYcYCOzl9G3NQAAAJE"]
[Sun Dec 28 19:26:18.928937 2025] [:error] [pid 42294:tid 42357] [client 4.190.186.15:12205] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aVET2tTE5kYcYCOzl9G3NgAAAIc"]
[Sun Dec 28 19:26:19.245708 2025] [:error] [pid 42378:tid 42392] [client 4.190.186.15:12122] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aVET2zgtcN-KHAjWrX8R_gAAAMw"]
[Sun Dec 28 19:26:19.502649 2025] [:error] [pid 42294:tid 42360] [client 4.190.186.15:12113] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aVET29TE5kYcYCOzl9G3NwAAAIo"]
[Sun Dec 28 19:26:19.745169 2025] [:error] [pid 42378:tid 42381] [client 4.190.186.15:11910] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aVET2zgtcN-KHAjWrX8SAQAAAME"]
[Sun Dec 28 19:26:20.003054 2025] [:error] [pid 29436:tid 29447] [client 4.190.186.15:12109] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aVET3LchzOOtNL9VPNLidAAAAYg"]
[Sun Dec 28 19:26:20.266515 2025] [:error] [pid 29436:tid 29439] [client 4.190.186.15:12049] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aVET3LchzOOtNL9VPNLidgAAAYA"]
[Sun Dec 28 19:26:20.544317 2025] [:error] [pid 43789:tid 43791] [client 4.190.186.15:12190] [client 4.190.186.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVET3Aa-tUppni4CcCYr_AAAAQA"]
[Sun Dec 28 19:26:20.828965 2025] [:error] [pid 42378:tid 42387] [client 4.190.186.15:11988] [client 4.190.186.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVET3DgtcN-KHAjWrX8SBAAAAMc"]
[Sun Dec 28 19:26:21.090861 2025] [:error] [pid 29436:tid 29449] [client 4.190.186.15:12274] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aVET3bchzOOtNL9VPNLieQAAAYo"]
[Sun Dec 28 19:26:21.331020 2025] [:error] [pid 29437:tid 29490] [client 4.190.186.15:12133] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aVET3RhDotAbVk6pZLe7IAAAAdg"]
[Sun Dec 28 19:26:21.581047 2025] [:error] [pid 42378:tid 42400] [client 4.190.186.15:12080] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aVET3TgtcN-KHAjWrX8SBgAAANQ"]
[Sun Dec 28 19:26:21.837072 2025] [:error] [pid 29436:tid 29459] [client 4.190.186.15:12072] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aVET3bchzOOtNL9VPNLifAAAAZQ"]
[Sun Dec 28 19:26:22.082995 2025] [:error] [pid 42294:tid 42355] [client 4.190.186.15:12062] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aVET3tTE5kYcYCOzl9G3PQAAAIU"]
[Sun Dec 28 19:26:22.331218 2025] [:error] [pid 42294:tid 42356] [client 4.190.186.15:12183] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aVET3tTE5kYcYCOzl9G3PgAAAIY"]
[Sun Dec 28 19:26:22.572695 2025] [:error] [pid 42293:tid 42326] [client 4.190.186.15:12207] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aVET3svc9B-5cwN385LdvAAAAEM"]
[Sun Dec 28 19:26:22.813817 2025] [:error] [pid 29436:tid 29461] [client 4.190.186.15:12032] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVET3rchzOOtNL9VPNLifQAAAZY"]
[Sun Dec 28 19:26:23.082640 2025] [:error] [pid 29436:tid 29444] [client 4.190.186.15:12151] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVET37chzOOtNL9VPNLifgAAAYU"]
[Sun Dec 28 19:26:23.370083 2025] [:error] [pid 29436:tid 29446] [client 4.190.186.15:12069] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVET37chzOOtNL9VPNLigAAAAYc"]
[Sun Dec 28 19:26:23.666744 2025] [:error] [pid 29437:tid 29489] [client 4.190.186.15:12107] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVET3xhDotAbVk6pZLe7JgAAAdc"]
[Sun Dec 28 19:26:24.025966 2025] [:error] [pid 42294:tid 42351] [client 4.190.186.15:12057] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aVET4NTE5kYcYCOzl9G3QQAAAIE"]
[Sun Dec 28 19:26:24.273264 2025] [:error] [pid 42294:tid 42354] [client 4.190.186.15:12211] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aVET4NTE5kYcYCOzl9G3QgAAAIQ"]
[Sun Dec 28 19:26:24.535241 2025] [:error] [pid 29436:tid 29441] [client 4.190.186.15:12141] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aVET4LchzOOtNL9VPNLiggAAAYI"]
[Sun Dec 28 19:26:24.784801 2025] [:error] [pid 42293:tid 42337] [client 4.190.186.15:12218] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aVET4Mvc9B-5cwN385LdxgAAAE4"]
[Sun Dec 28 19:26:25.048282 2025] [:error] [pid 42292:tid 42312] [client 4.190.186.15:12120] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aVET4ZyOrM_vaFx1osZC9AAAABA"]
[Sun Dec 28 19:26:25.335443 2025] [:error] [pid 43789:tid 43802] [client 4.190.186.15:14052] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aVET4Qa-tUppni4CcCYr_gAAAQs"]
[Sun Dec 28 19:26:25.593944 2025] [:error] [pid 42294:tid 42361] [client 4.190.186.15:12146] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aVET4dTE5kYcYCOzl9G3QwAAAIs"]
[Sun Dec 28 19:26:25.840127 2025] [:error] [pid 42293:tid 42332] [client 4.190.186.15:12091] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aVET4cvc9B-5cwN385LdzAAAAEk"]
[Sun Dec 28 19:26:26.096881 2025] [:error] [pid 42292:tid 42318] [client 4.190.186.15:12045] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aVET4pyOrM_vaFx1osZC9QAAABY"]
[Sun Dec 28 19:26:26.338309 2025] [:error] [pid 29388:tid 29401] [client 4.190.186.15:12020] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aVET4toLv2L2zI_SpdXXAwAAAUU"]
[Sun Dec 28 19:26:26.586062 2025] [:error] [pid 29436:tid 29460] [client 4.190.186.15:12078] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aVET4rchzOOtNL9VPNLihgAAAZU"]
[Sun Dec 28 19:26:26.853427 2025] [:error] [pid 42292:tid 42313] [client 4.190.186.15:12071] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aVET4pyOrM_vaFx1osZC9gAAABE"]
[Sun Dec 28 19:26:27.108410 2025] [:error] [pid 43789:tid 43812] [client 4.190.186.15:14011] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aVET4wa-tUppni4CcCYr_wAAARU"]
[Sun Dec 28 19:26:27.392432 2025] [:error] [pid 42294:tid 42358] [client 4.190.186.15:12054] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aVET49TE5kYcYCOzl9G3RQAAAIg"]
[Sun Dec 28 19:26:27.650597 2025] [:error] [pid 29388:tid 29408] [client 4.190.186.15:13986] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aVET49oLv2L2zI_SpdXXBQAAAUw"]
[Sun Dec 28 19:26:27.920486 2025] [:error] [pid 29436:tid 29457] [client 4.190.186.15:12153] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aVET47chzOOtNL9VPNLiigAAAZI"]
[Sun Dec 28 19:26:28.162738 2025] [:error] [pid 43789:tid 43792] [client 4.190.186.15:12021] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aVET5Aa-tUppni4CcCYsAQAAAQE"]
[Sun Dec 28 19:26:28.447386 2025] [:error] [pid 42293:tid 42344] [client 4.190.186.15:12112] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aVET5Mvc9B-5cwN385Ld2AAAAFU"]
[Sun Dec 28 19:26:28.687623 2025] [:error] [pid 42293:tid 42335] [client 4.190.186.15:12083] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aVET5Mvc9B-5cwN385Ld3AAAAEw"]
[Sun Dec 28 19:26:28.942054 2025] [:error] [pid 43789:tid 43807] [client 4.190.186.15:12264] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aVET5Aa-tUppni4CcCYsAgAAARA"]
[Sun Dec 28 19:26:29.188231 2025] [:error] [pid 42293:tid 42332] [client 4.190.186.15:12048] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aVET5cvc9B-5cwN385Ld4AAAAEk"]
[Sun Dec 28 19:26:29.478721 2025] [:error] [pid 42292:tid 42320] [client 4.190.186.15:12152] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aVET5ZyOrM_vaFx1osZC-AAAABg"]
[Sun Dec 28 19:26:29.759817 2025] [:error] [pid 43789:tid 43805] [client 4.190.186.15:12056] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aVET5Qa-tUppni4CcCYsBAAAAQ4"]
[Sun Dec 28 19:26:30.010334 2025] [:error] [pid 42292:tid 42301] [client 4.190.186.15:12150] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aVET5pyOrM_vaFx1osZC-gAAAAU"]
[Sun Dec 28 19:26:30.270615 2025] [:error] [pid 29437:tid 29468] [client 4.190.186.15:12106] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aVET5hhDotAbVk6pZLe7KwAAAcI"]
[Sun Dec 28 19:26:30.546470 2025] [:error] [pid 43789:tid 43814] [client 4.190.186.15:11990] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aVET5ga-tUppni4CcCYsBQAAARc"]
[Sun Dec 28 19:26:30.809281 2025] [:error] [pid 42294:tid 42357] [client 4.190.186.15:12257] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aVET5tTE5kYcYCOzl9G3RwAAAIc"]
[Sun Dec 28 19:26:31.126639 2025] [:error] [pid 42378:tid 42402] [client 4.190.186.15:12064] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aVET5zgtcN-KHAjWrX8SEgAAANY"]
[Sun Dec 28 19:26:31.396616 2025] [:error] [pid 29437:tid 29474] [client 4.190.186.15:12189] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aVET5xhDotAbVk6pZLe7LAAAAcg"]
[Sun Dec 28 19:26:31.679695 2025] [:error] [pid 42292:tid 42300] [client 4.190.186.15:12201] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aVET55yOrM_vaFx1osZC_wAAAAQ"]
[Sun Dec 28 19:26:31.954881 2025] [:error] [pid 42293:tid 42337] [client 4.190.186.15:12114] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aVET58vc9B-5cwN385Ld6QAAAE4"]
[Sun Dec 28 19:26:32.221111 2025] [:error] [pid 43789:tid 43799] [client 4.190.186.15:12140] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aVET6Aa-tUppni4CcCYsBgAAAQg"]
[Sun Dec 28 19:26:32.525310 2025] [:error] [pid 42378:tid 42388] [client 4.190.186.15:12059] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aVET6DgtcN-KHAjWrX8SFQAAAMg"]
[Sun Dec 28 19:26:32.797676 2025] [:error] [pid 42378:tid 42383] [client 4.190.186.15:12169] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aVET6DgtcN-KHAjWrX8SFgAAAMM"]
[Sun Dec 28 19:26:33.062666 2025] [:error] [pid 42378:tid 42380] [client 4.190.186.15:12220] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aVET6TgtcN-KHAjWrX8SGAAAAMA"]
[Sun Dec 28 19:26:33.364506 2025] [:error] [pid 42378:tid 42395] [client 4.190.186.15:12042] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aVET6TgtcN-KHAjWrX8SGwAAAM8"]
[Sun Dec 28 19:26:33.642037 2025] [:error] [pid 42293:tid 42333] [client 4.190.186.15:12000] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVET6cvc9B-5cwN385Ld7AAAAEo"]
[Sun Dec 28 19:26:33.904903 2025] [:error] [pid 42294:tid 42352] [client 4.190.186.15:12136] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVET6dTE5kYcYCOzl9G3SwAAAII"]
[Sun Dec 28 19:26:34.198743 2025] [:error] [pid 42378:tid 42381] [client 4.190.186.15:12081] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVET6jgtcN-KHAjWrX8SHgAAAME"]
[Sun Dec 28 19:26:34.537062 2025] [:error] [pid 29388:tid 29414] [client 4.190.186.15:12046] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVET6toLv2L2zI_SpdXXCAAAAVI"]
[Sun Dec 28 19:26:34.807215 2025] [:error] [pid 29436:tid 29450] [client 4.190.186.15:12044] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVET6rchzOOtNL9VPNLikQAAAYs"]
[Sun Dec 28 19:26:35.083129 2025] [:error] [pid 43789:tid 43811] [client 4.190.186.15:12123] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVET6wa-tUppni4CcCYsCAAAARQ"]
[Sun Dec 28 19:26:35.356479 2025] [:error] [pid 43789:tid 43801] [client 4.190.186.15:12175] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVET6wa-tUppni4CcCYsCQAAAQo"]
[Sun Dec 28 19:26:35.615537 2025] [:error] [pid 43789:tid 43815] [client 4.190.186.15:12022] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVET6wa-tUppni4CcCYsCgAAARg"]
[Sun Dec 28 19:26:35.854852 2025] [:error] [pid 29388:tid 29413] [client 4.190.186.15:14042] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aVET69oLv2L2zI_SpdXXCQAAAVE"]
[Sun Dec 28 19:26:36.116297 2025] [:error] [pid 42292:tid 42296] [client 4.190.186.15:12040] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aVET7JyOrM_vaFx1osZDDwAAAAA"]
[Sun Dec 28 19:26:36.406566 2025] [:error] [pid 29436:tid 29440] [client 4.190.186.15:11985] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aVET7LchzOOtNL9VPNLilgAAAYE"]
[Sun Dec 28 19:26:36.647870 2025] [:error] [pid 43789:tid 43808] [client 4.190.186.15:12087] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aVET7Aa-tUppni4CcCYsDQAAARE"]
[Sun Dec 28 19:26:36.908986 2025] [:error] [pid 29436:tid 29445] [client 4.190.186.15:11977] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aVET7LchzOOtNL9VPNLimAAAAYY"]
[Sun Dec 28 19:26:37.149014 2025] [:error] [pid 29437:tid 29482] [client 4.190.186.15:12283] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aVET7RhDotAbVk6pZLe7LwAAAdA"]
[Sun Dec 28 19:26:37.458277 2025] [:error] [pid 29436:tid 29452] [client 4.190.186.15:11987] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aVET7bchzOOtNL9VPNLimwAAAY0"]
[Sun Dec 28 19:26:37.724580 2025] [:error] [pid 29436:tid 29453] [client 4.190.186.15:11994] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aVET7bchzOOtNL9VPNLinAAAAY4"]
[Sun Dec 28 19:26:38.005359 2025] [:error] [pid 29437:tid 29466] [client 4.190.186.15:12149] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aVET7hhDotAbVk6pZLe7MQAAAcA"]
[Sun Dec 28 19:26:38.343961 2025] [:error] [pid 42293:tid 42343] [client 4.190.186.15:12079] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aVET7svc9B-5cwN385Ld8AAAAFQ"]
[Sun Dec 28 19:26:38.585958 2025] [:error] [pid 42293:tid 42331] [client 4.190.186.15:12145] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aVET7svc9B-5cwN385Ld8QAAAEg"]
[Sun Dec 28 19:26:39.108764 2025] [:error] [pid 29436:tid 29458] [client 4.190.186.15:11971] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aVET77chzOOtNL9VPNLioAAAAZM"]
[Sun Dec 28 19:26:39.419567 2025] [:error] [pid 29436:tid 29441] [client 4.190.186.15:12090] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aVET77chzOOtNL9VPNLiogAAAYI"]
[Sun Dec 28 19:26:40.333891 2025] [:error] [pid 29388:tid 29397] [client 4.190.186.15:11983] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aVET8NoLv2L2zI_SpdXXDgAAAUE"]
[Sun Dec 28 19:26:41.320176 2025] [:error] [pid 29388:tid 29399] [client 4.190.186.15:12014] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aVET8doLv2L2zI_SpdXXEAAAAUM"]
[Sun Dec 28 19:26:41.883510 2025] [:error] [pid 29437:tid 29488] [client 4.190.186.15:12063] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aVET8RhDotAbVk6pZLe7MgAAAdY"]
[Sun Dec 28 19:26:42.279412 2025] [:error] [pid 29436:tid 29463] [client 4.190.186.15:12131] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVET8rchzOOtNL9VPNLiqAAAAZg"]
[Sun Dec 28 19:26:42.815773 2025] [:error] [pid 29436:tid 29445] [client 4.190.186.15:11969] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVET8rchzOOtNL9VPNLiqwAAAYY"]
[Sun Dec 28 19:26:43.104024 2025] [:error] [pid 29436:tid 29461] [client 4.190.186.15:11974] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVET87chzOOtNL9VPNLirQAAAZY"]
[Sun Dec 28 19:26:43.503494 2025] [:error] [pid 29388:tid 29405] [client 4.190.186.15:11998] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVET89oLv2L2zI_SpdXXFQAAAUk"]
[Sun Dec 28 19:26:43.777804 2025] [:error] [pid 42294:tid 42355] [client 4.190.186.15:11935] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aVET89TE5kYcYCOzl9G3XwAAAIU"]
[Sun Dec 28 19:26:44.030147 2025] [:error] [pid 29437:tid 29478] [client 4.190.186.15:12073] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aVET9BhDotAbVk6pZLe7NQAAAcw"]
[Sun Dec 28 19:26:44.279092 2025] [:error] [pid 29436:tid 29451] [client 4.190.186.15:11975] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aVET9LchzOOtNL9VPNLisAAAAYw"]
[Sun Dec 28 19:26:44.541337 2025] [:error] [pid 42294:tid 42356] [client 4.190.186.15:12076] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aVET9NTE5kYcYCOzl9G3YAAAAIY"]
[Sun Dec 28 19:26:44.825222 2025] [:error] [pid 29388:tid 29403] [client 4.190.186.15:12041] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aVET9NoLv2L2zI_SpdXXGAAAAUc"]
[Sun Dec 28 19:26:45.086366 2025] [:error] [pid 42294:tid 42373] [client 4.190.186.15:12070] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aVET9dTE5kYcYCOzl9G3ZAAAAJc"]
[Sun Dec 28 19:26:45.374257 2025] [:error] [pid 29437:tid 29471] [client 4.190.186.15:12171] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aVET9RhDotAbVk6pZLe7OAAAAcU"]
[Sun Dec 28 19:26:45.654710 2025] [:error] [pid 42378:tid 42383] [client 4.190.186.15:11978] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aVET9TgtcN-KHAjWrX8SJQAAAMM"]
[Sun Dec 28 19:26:45.935889 2025] [:error] [pid 29437:tid 29469] [client 4.190.186.15:12089] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVET9RhDotAbVk6pZLe7OQAAAcM"]
[Sun Dec 28 19:26:46.207987 2025] [:error] [pid 43789:tid 43807] [client 4.190.186.15:12058] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVET9ga-tUppni4CcCYsEwAAARA"]
[Sun Dec 28 19:26:46.458527 2025] [:error] [pid 42292:tid 42313] [client 4.190.186.15:12051] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVET9pyOrM_vaFx1osZDHAAAABE"]
[Sun Dec 28 19:26:46.741181 2025] [:error] [pid 29437:tid 29472] [client 4.190.186.15:12092] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVET9hhDotAbVk6pZLe7PAAAAcY"]
[Sun Dec 28 19:26:47.179936 2025] [:error] [pid 42378:tid 42385] [client 4.190.186.15:12053] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVET9zgtcN-KHAjWrX8SKgAAAMU"]
[Sun Dec 28 19:26:47.495080 2025] [:error] [pid 43789:tid 43799] [client 4.190.186.15:12088] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVET9wa-tUppni4CcCYsFgAAAQg"]
[Sun Dec 28 19:26:47.775823 2025] [:error] [pid 42293:tid 42337] [client 4.190.186.15:12029] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVET98vc9B-5cwN385Ld9QAAAE4"]
[Sun Dec 28 19:26:48.047189 2025] [:error] [pid 29436:tid 29440] [client 4.190.186.15:11931] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVET-LchzOOtNL9VPNLiuAAAAYE"]
[Sun Dec 28 19:26:48.323320 2025] [:error] [pid 43789:tid 43815] [client 4.190.186.15:12010] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aVET-Aa-tUppni4CcCYsGAAAARg"]
[Sun Dec 28 19:26:48.586117 2025] [:error] [pid 43789:tid 43813] [client 4.190.186.15:12061] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aVET-Aa-tUppni4CcCYsGwAAARY"]
[Sun Dec 28 19:26:48.877283 2025] [:error] [pid 29437:tid 29480] [client 4.190.186.15:12005] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aVET-BhDotAbVk6pZLe7PwAAAc4"]
[Sun Dec 28 19:26:49.139463 2025] [:error] [pid 42294:tid 42372] [client 4.190.186.15:14046] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aVET-dTE5kYcYCOzl9G3aQAAAJY"]
[Sun Dec 28 19:26:49.406002 2025] [:error] [pid 29388:tid 29398] [client 4.190.186.15:14019] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aVET-doLv2L2zI_SpdXXHAAAAUI"]
[Sun Dec 28 19:26:49.698153 2025] [:error] [pid 42292:tid 42300] [client 4.190.186.15:12085] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aVET-ZyOrM_vaFx1osZDIQAAAAQ"]
[Sun Dec 28 19:26:49.974733 2025] [:error] [pid 43789:tid 43800] [client 4.190.186.15:12134] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aVET-Qa-tUppni4CcCYsHgAAAQk"]
[Sun Dec 28 19:26:50.279000 2025] [:error] [pid 42378:tid 42392] [client 4.190.186.15:11905] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aVET-jgtcN-KHAjWrX8SLQAAAMw"]
[Sun Dec 28 19:26:50.523255 2025] [:error] [pid 42292:tid 42310] [client 4.190.186.15:12077] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVET-pyOrM_vaFx1osZDIgAAAA4"]
[Sun Dec 28 19:26:50.771319 2025] [:error] [pid 42378:tid 42389] [client 4.190.186.15:12132] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVET-jgtcN-KHAjWrX8SLgAAAMk"]
[Sun Dec 28 19:26:51.113752 2025] [:error] [pid 43789:tid 43795] [client 4.190.186.15:12015] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVET-wa-tUppni4CcCYsIgAAAQQ"]
[Sun Dec 28 19:26:51.365208 2025] [:error] [pid 43789:tid 43812] [client 4.190.186.15:11982] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVET-wa-tUppni4CcCYsIwAAARU"]
[Sun Dec 28 19:26:51.627389 2025] [:error] [pid 43789:tid 43797] [client 4.190.186.15:12147] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aVET-wa-tUppni4CcCYsJAAAAQY"]
[Sun Dec 28 19:26:51.941198 2025] [:error] [pid 42292:tid 42302] [client 4.190.186.15:11907] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aVET-5yOrM_vaFx1osZDJgAAAAY"]
[Sun Dec 28 19:26:52.189073 2025] [:error] [pid 42293:tid 42333] [client 4.190.186.15:12012] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aVET_Mvc9B-5cwN385Ld-QAAAEo"]
[Sun Dec 28 19:26:52.434788 2025] [:error] [pid 42293:tid 42332] [client 4.190.186.15:12055] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aVET_Mvc9B-5cwN385Ld-wAAAEk"]
[Sun Dec 28 19:26:52.680510 2025] [:error] [pid 29388:tid 29400] [client 4.190.186.15:12050] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aVET_NoLv2L2zI_SpdXXHQAAAUQ"]
[Sun Dec 28 19:26:52.977454 2025] [:error] [pid 29388:tid 29397] [client 4.190.186.15:12127] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aVET_NoLv2L2zI_SpdXXIAAAAUE"]
[Sun Dec 28 19:26:53.221084 2025] [:error] [pid 42294:tid 42355] [client 4.190.186.15:12019] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aVET_dTE5kYcYCOzl9G3bQAAAIU"]
[Sun Dec 28 19:26:53.461511 2025] [:error] [pid 42293:tid 42338] [client 4.190.186.15:12239] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aVET_cvc9B-5cwN385Ld_QAAAE8"]
[Sun Dec 28 19:26:53.749582 2025] [:error] [pid 42378:tid 42398] [client 4.190.186.15:14023] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aVET_TgtcN-KHAjWrX8SMgAAANI"]
[Sun Dec 28 19:27:34.599265 2025] [:error] [pid 29388:tid 29400] [client 4.190.186.15:11968] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aVEUJtoLv2L2zI_SpdXXVQAAAUQ"]
[Sun Dec 28 19:27:34.871929 2025] [:error] [pid 42293:tid 42327] [client 4.190.186.15:11854] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aVEUJsvc9B-5cwN385LeLwAAAEQ"]
[Sun Dec 28 19:27:35.184656 2025] [:error] [pid 29437:tid 29475] [client 4.190.186.15:12198] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aVEUJxhDotAbVk6pZLe7bgAAAck"]
[Sun Dec 28 19:27:35.480253 2025] [:error] [pid 29436:tid 29458] [client 4.190.186.15:12222] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aVEUJ7chzOOtNL9VPNLi-gAAAZM"]
[Sun Dec 28 19:27:35.742479 2025] [:error] [pid 43789:tid 43812] [client 4.190.186.15:12052] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aVEUJwa-tUppni4CcCYsUwAAARU"]
[Sun Dec 28 19:27:36.017990 2025] [:error] [pid 29437:tid 29471] [client 4.190.186.15:12094] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aVEUKBhDotAbVk6pZLe7cAAAAcU"]
[Sun Dec 28 19:27:36.272476 2025] [:error] [pid 29436:tid 29440] [client 4.190.186.15:12103] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aVEUKLchzOOtNL9VPNLi_QAAAYE"]
[Sun Dec 28 19:27:36.553970 2025] [:error] [pid 29436:tid 29457] [client 4.190.186.15:12142] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aVEUKLchzOOtNL9VPNLi_gAAAZI"]
[Sun Dec 28 19:27:36.827786 2025] [:error] [pid 43789:tid 43809] [client 4.190.186.15:12219] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aVEUKAa-tUppni4CcCYsVAAAARI"]
[Sun Dec 28 19:27:37.116534 2025] [:error] [pid 29437:tid 29467] [client 4.190.186.15:12013] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aVEUKRhDotAbVk6pZLe7cgAAAcE"]
[Sun Dec 28 19:27:37.383204 2025] [:error] [pid 29436:tid 29450] [client 4.190.186.15:12024] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aVEUKbchzOOtNL9VPNLjAAAAAYs"]
[Sun Dec 28 19:27:37.654665 2025] [:error] [pid 43789:tid 43806] [client 4.190.186.15:12035] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aVEUKQa-tUppni4CcCYsVgAAAQ8"]
[Sun Dec 28 19:27:37.973174 2025] [:error] [pid 29436:tid 29444] [client 4.190.186.15:11997] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aVEUKbchzOOtNL9VPNLjAgAAAYU"]
[Sun Dec 28 19:27:38.279111 2025] [:error] [pid 29436:tid 29447] [client 4.190.186.15:12038] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aVEUKrchzOOtNL9VPNLjAwAAAYg"]
[Sun Dec 28 19:27:38.587004 2025] [:error] [pid 42293:tid 42324] [client 4.190.186.15:12023] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aVEUKsvc9B-5cwN385LeNAAAAEE"]
[Sun Dec 28 19:27:38.935988 2025] [:error] [pid 29388:tid 29420] [client 4.190.186.15:12068] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aVEUKtoLv2L2zI_SpdXXVwAAAVg"]
[Sun Dec 28 19:27:39.266336 2025] [:error] [pid 29436:tid 29453] [client 4.190.186.15:11992] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aVEUK7chzOOtNL9VPNLjBgAAAY4"]
[Sun Dec 28 19:27:39.514088 2025] [:error] [pid 29436:tid 29448] [client 4.190.186.15:12082] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aVEUK7chzOOtNL9VPNLjCAAAAYk"]
[Sun Dec 28 19:27:39.996387 2025] [:error] [pid 42378:tid 42391] [client 4.190.186.15:12074] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aVEUKzgtcN-KHAjWrX8SVwAAAMs"]
[Sun Dec 28 19:27:40.350118 2025] [:error] [pid 29436:tid 29454] [client 4.190.186.15:12065] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aVEULLchzOOtNL9VPNLjDAAAAY8"]
[Sun Dec 28 19:27:40.625114 2025] [:error] [pid 29436:tid 29462] [client 4.190.186.15:11996] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aVEULLchzOOtNL9VPNLjDwAAAZc"]
[Sun Dec 28 19:27:40.954165 2025] [:error] [pid 29436:tid 29451] [client 4.190.186.15:11942] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aVEULLchzOOtNL9VPNLjEQAAAYw"]
[Sun Dec 28 19:27:41.225725 2025] [:error] [pid 42378:tid 42397] [client 4.190.186.15:11962] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aVEULTgtcN-KHAjWrX8SWAAAANE"]
[Sun Dec 28 19:27:41.551178 2025] [:error] [pid 42294:tid 42360] [client 4.190.186.15:12025] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aVEULdTE5kYcYCOzl9G3kAAAAIo"]
[Sun Dec 28 19:27:41.887220 2025] [:error] [pid 29388:tid 29414] [client 4.190.186.15:11923] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aVEULdoLv2L2zI_SpdXXWwAAAVI"]
[Sun Dec 28 19:27:42.176560 2025] [:error] [pid 29388:tid 29409] [client 4.190.186.15:11906] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aVEULtoLv2L2zI_SpdXXXAAAAU0"]
[Sun Dec 28 19:27:42.421031 2025] [:error] [pid 42294:tid 42364] [client 4.190.186.15:12001] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aVEULtTE5kYcYCOzl9G3kwAAAI4"]
[Sun Dec 28 19:27:42.711856 2025] [:error] [pid 42294:tid 42354] [client 4.190.186.15:12007] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aVEULtTE5kYcYCOzl9G3lgAAAIQ"]
[Sun Dec 28 19:27:43.047841 2025] [:error] [pid 29388:tid 29419] [client 4.190.186.15:12067] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aVEUL9oLv2L2zI_SpdXXXgAAAVc"]
[Sun Dec 28 19:27:43.307805 2025] [:error] [pid 29388:tid 29412] [client 4.190.186.15:11845] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aVEUL9oLv2L2zI_SpdXXYAAAAVA"]
[Sun Dec 28 19:27:43.606090 2025] [:error] [pid 29436:tid 29441] [client 4.190.186.15:11927] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aVEUL7chzOOtNL9VPNLjEwAAAYI"]
[Sun Dec 28 19:27:43.884731 2025] [:error] [pid 29388:tid 29406] [client 4.190.186.15:11995] [client 4.190.186.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aVEUL9oLv2L2zI_SpdXXYgAAAUo"]
[Sun Dec 28 21:50:31.301009 2025] [:error] [pid 29436:tid 29450] [client 34.63.183.51:65444] [client 34.63.183.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.183.51, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE1p7chzOOtNL9VPNIacwAAAYs"]
[Sun Dec 28 21:50:39.299510 2025] [:error] [pid 29436:tid 29451] [client 34.63.183.51:65444] [client 34.63.183.51] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVE1r7chzOOtNL9VPNIaeAAAAYw"]
[Sun Dec 28 21:50:41.149612 2025] [:error] [pid 29436:tid 29459] [client 34.63.183.51:65444] [client 34.63.183.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.183.51, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE1sbchzOOtNL9VPNIaewAAAZQ"]
[Sun Dec 28 21:56:01.276602 2025] [:error] [pid 42293:tid 42328] [client 34.48.230.66:64077] [client 34.48.230.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.230.66, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE28cvc9B-5cwN385IIBwAAAEU"]
[Sun Dec 28 21:56:06.983364 2025] [:error] [pid 42293:tid 42323] [client 34.48.230.66:64077] [client 34.48.230.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVE29svc9B-5cwN385IIDgAAAEA"]
[Sun Dec 28 21:56:09.046643 2025] [:error] [pid 42293:tid 42332] [client 34.48.230.66:64077] [client 34.48.230.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.230.66, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE2-cvc9B-5cwN385IIEAAAAEk"]
[Sun Dec 28 23:32:32.947751 2025] [:error] [pid 42294:tid 42374] [client 4.190.188.171:43858] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVFNkNTE5kYcYCOzl9Hm1gAAAJg"]
[Sun Dec 28 23:32:50.828014 2025] [:error] [pid 42293:tid 42332] [client 4.190.188.171:25531] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVFNosvc9B-5cwN385IZuwAAAEk"]
[Sun Dec 28 23:32:57.687062 2025] [:error] [pid 43789:tid 43798] [client 4.190.188.171:54191] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVFNqQa-tUppni4CcCZghwAAAQc"]
[Sun Dec 28 23:33:21.240173 2025] [:error] [pid 43789:tid 43794] [client 4.190.188.171:56109] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aVFNwQa-tUppni4CcCZgmAAAAQM"]
[Sun Dec 28 23:33:24.724434 2025] [:error] [pid 29388:tid 29405] [client 4.190.188.171:28586] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aVFNxNoLv2L2zI_SpdUc5wAAAUk"]
[Sun Dec 28 23:33:25.473716 2025] [:error] [pid 43789:tid 43791] [client 4.190.188.171:26601] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aVFNxQa-tUppni4CcCZgowAAAQA"]
[Sun Dec 28 23:33:31.027837 2025] [:error] [pid 29388:tid 29413] [client 4.190.188.171:58059] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aVFNy9oLv2L2zI_SpdUc7wAAAVE"]
[Sun Dec 28 23:33:36.009922 2025] [:error] [pid 29436:tid 29447] [client 4.190.188.171:50443] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/xmrlpc.php"] [unique_id "aVFN0LchzOOtNL9VPNIwSgAAAYg"]
[Sun Dec 28 23:33:38.612703 2025] [:error] [pid 29388:tid 29413] [client 4.190.188.171:63333] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/xmrlpc.php"] [unique_id "aVFN0toLv2L2zI_SpdUc-gAAAVE"]
[Sun Dec 28 23:33:40.367971 2025] [:error] [pid 29388:tid 29419] [client 4.190.188.171:65430] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/xmrlpc.php"] [unique_id "aVFN1NoLv2L2zI_SpdUc_QAAAVc"]
[Sun Dec 28 23:33:41.221693 2025] [:error] [pid 42293:tid 42343] [client 4.190.188.171:58089] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/xmrlpc.php"] [unique_id "aVFN1cvc9B-5cwN385IZ6wAAAFQ"]
[Sun Dec 28 23:33:42.725167 2025] [:error] [pid 29388:tid 29405] [client 4.190.188.171:56119] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVFN1toLv2L2zI_SpdUdAAAAAUk"]
[Sun Dec 28 23:34:07.014108 2025] [:error] [pid 42294:tid 42374] [client 4.190.188.171:65417] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aVFN79TE5kYcYCOzl9Hm-AAAAJg"]
[Sun Dec 28 23:34:11.718244 2025] [:error] [pid 42292:tid 42311] [client 4.190.188.171:25803] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVFN85yOrM_vaFx1osZ08QAAAA8"]
[Sun Dec 28 23:34:15.899383 2025] [:error] [pid 29437:tid 29487] [client 4.190.188.171:25802] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVFN9xhDotAbVk6pZLf1CAAAAdU"]
[Sun Dec 28 23:34:54.666419 2025] [:error] [pid 29437:tid 29471] [client 4.190.188.171:55381] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aVFOHhhDotAbVk6pZLf1LQAAAcU"]
[Sun Dec 28 23:35:15.440858 2025] [:error] [pid 42294:tid 42368] [client 4.190.188.171:25807] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVFOM9TE5kYcYCOzl9HnHgAAAJI"]
[Sun Dec 28 23:35:23.711771 2025] [:error] [pid 29388:tid 29409] [client 4.190.188.171:25808] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVFOO9oLv2L2zI_SpdUdRgAAAU0"]
[Sun Dec 28 23:35:25.792019 2025] [:error] [pid 42293:tid 42344] [client 4.190.188.171:63351] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVFOPcvc9B-5cwN385IaEgAAAFU"]
[Sun Dec 28 23:35:34.434271 2025] [:error] [pid 29436:tid 29451] [client 4.190.188.171:58057] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVFORrchzOOtNL9VPNIwhQAAAYw"]
[Sun Dec 28 23:35:35.814498 2025] [:error] [pid 29436:tid 29453] [client 4.190.188.171:63325] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVFOR7chzOOtNL9VPNIwiAAAAY4"]
[Sun Dec 28 23:35:39.717437 2025] [:error] [pid 29436:tid 29447] [client 4.190.188.171:55375] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVFOS7chzOOtNL9VPNIwjwAAAYg"]
[Sun Dec 28 23:35:46.490529 2025] [:error] [pid 29436:tid 29450] [client 4.190.188.171:50479] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVFOUrchzOOtNL9VPNIwlgAAAYs"]
[Sun Dec 28 23:35:53.120666 2025] [:error] [pid 29437:tid 29466] [client 4.190.188.171:63334] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aVFOWRhDotAbVk6pZLf1RgAAAcA"]
[Sun Dec 28 23:35:55.302748 2025] [:error] [pid 29436:tid 29452] [client 4.190.188.171:50432] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aVFOW7chzOOtNL9VPNIwpQAAAY0"]
[Sun Dec 28 23:35:57.710145 2025] [:error] [pid 29388:tid 29420] [client 4.190.188.171:58077] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aVFOXdoLv2L2zI_SpdUdYwAAAVg"]
[Sun Dec 28 23:36:05.145439 2025] [:error] [pid 29436:tid 29441] [client 4.190.188.171:58098] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aVFOZbchzOOtNL9VPNIwrwAAAYI"]
[Sun Dec 28 23:36:07.285713 2025] [:error] [pid 42378:tid 42391] [client 4.190.188.171:50829] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aVFOZzgtcN-KHAjWrX9FMQAAAMs"]
[Sun Dec 28 23:36:16.913939 2025] [autoindex:error] [pid 42294:tid 42373] [client 4.190.188.171:9142] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 23:58:20.167536 2025] [:error] [pid 42293:tid 42331] [client 34.74.9.141:54255] [client 34.74.9.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.9.141, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVFTnMvc9B-5cwN385IdRwAAAEg"]
[Sun Dec 28 23:58:25.666082 2025] [:error] [pid 42293:tid 42327] [client 34.74.9.141:54255] [client 34.74.9.141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVFTocvc9B-5cwN385IdTgAAAEQ"]
[Sun Dec 28 23:58:27.700656 2025] [:error] [pid 42293:tid 42339] [client 34.74.9.141:54255] [client 34.74.9.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.9.141, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVFTo8vc9B-5cwN385IdUAAAAFA"]
[Mon Dec 29 00:49:56.318589 2025] [:error] [pid 62317:tid 62329] [client 173.239.218.170:63879] [client 173.239.218.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.170, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFftDrMrOtzJhli_KVrrwAAAQo"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:50:12.092863 2025] [:error] [pid 46537:tid 46580] [client 173.239.218.159:53907] [client 173.239.218.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.159, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFfxBIwkdHOre8AuwAsDwAAAIw"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:50:22.554058 2025] [:error] [pid 46537:tid 46580] [client 173.239.218.179:45737] [client 173.239.218.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.179, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFfzhIwkdHOre8AuwAsKwAAAIw"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:50:33.470701 2025] [:error] [pid 46536:tid 46551] [client 98.159.37.133:36291] [client 98.159.37.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.133, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFf2d72_BregW2fmRb7NAAAAAs"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:51:06.251792 2025] [:error] [pid 13155:tid 13181] [client 173.239.218.176:56667] [client 173.239.218.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.176, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFf-hEwDeBH7maxqIbLgQAAAxg"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:51:19.194804 2025] [:error] [pid 8229:tid 8294] [client 216.24.210.57:53357] [client 216.24.210.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.57, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgByk6YVu4f2yMJ5uYUwAAAlA"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:51:51.217774 2025] [:error] [pid 62278:tid 62296] [client 173.239.218.184:64699] [client 173.239.218.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.184, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgJ7XlQgY5k1TX4Y1EUQAAAFA"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:52:02.569399 2025] [:error] [pid 8076:tid 8090] [client 98.159.37.134:28881] [client 98.159.37.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.134, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgMumk6HKGnPEdvsJ44AAAAgw"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:52:28.185735 2025] [:error] [pid 46537:tid 46584] [client 173.239.218.182:28985] [client 173.239.218.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.182, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgTBIwkdHOre8AuwAsewAAAJA"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:52:38.115816 2025] [:error] [pid 8229:tid 8293] [client 98.159.37.125:65063] [client 98.159.37.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.125, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgVik6YVu4f2yMJ5uYcQAAAk8"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:52:46.988385 2025] [:error] [pid 8229:tid 8296] [client 173.239.218.166:58043] [client 173.239.218.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.166, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgXik6YVu4f2yMJ5uYeAAAAlI"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:52:55.930206 2025] [:error] [pid 13155:tid 13175] [client 98.159.37.118:51641] [client 98.159.37.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.118, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgZxEwDeBH7maxqIbLsAAAAxI"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:53:43.962617 2025] [:error] [pid 8804:tid 8822] [client 173.239.218.181:38609] [client 173.239.218.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.181, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFglzVoh1fD5_MoMv3k0AAAAs8"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:53:56.877730 2025] [:error] [pid 46537:tid 46590] [client 98.159.37.121:52897] [client 98.159.37.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.121, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgpBIwkdHOre8AuwAspgAAAJY"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:54:05.807280 2025] [:error] [pid 46537:tid 46586] [client 173.239.218.178:42341] [client 173.239.218.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.178, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgrRIwkdHOre8AuwAsrgAAAJI"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:54:38.106832 2025] [:error] [pid 8076:tid 8100] [client 98.159.37.126:35933] [client 98.159.37.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.126, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFgzumk6HKGnPEdvsJ5IwAAAhY"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:54:48.388584 2025] [:error] [pid 13155:tid 13161] [client 98.159.37.120:49841] [client 98.159.37.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.120, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFg2BEwDeBH7maxqIbLzwAAAwQ"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:54:59.172508 2025] [:error] [pid 8692:tid 8696] [client 173.239.218.173:53509] [client 173.239.218.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.173, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFg42qutRVJ-mCjpmJ-tQAAAoI"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:55:51.748503 2025] [:error] [pid 46622:tid 46648] [client 173.239.218.179:23651] [client 173.239.218.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.179, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFhFyZDJSVZN5_8UUN4OgAAAVg"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:56:14.379880 2025] [:error] [pid 46622:tid 46628] [client 173.239.218.176:38923] [client 173.239.218.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.176, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFhLiZDJSVZN5_8UUN4SgAAAUQ"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:56:45.200395 2025] [:error] [pid 46536:tid 46554] [client 216.24.210.57:60951] [client 216.24.210.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.57, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFhTd72_BregW2fmRb7pAAAAA4"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:56:54.529965 2025] [:error] [pid 8229:tid 8279] [client 98.159.37.118:53181] [client 98.159.37.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.118, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFhVik6YVu4f2yMJ5uYrwAAAkE"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:57:47.486035 2025] [:error] [pid 8692:tid 8709] [client 173.239.218.158:63955] [client 173.239.218.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.158, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFhi2qutRVJ-mCjpmJ-5gAAAo8"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:57:57.145485 2025] [:error] [pid 62317:tid 62334] [client 173.239.218.182:22893] [client 173.239.218.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.182, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFhlTrMrOtzJhli_KVtLgAAAQ8"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:58:06.425099 2025] [:error] [pid 8804:tid 8809] [client 173.239.218.176:43133] [client 173.239.218.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.176, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFhnjVoh1fD5_MoMv3lMQAAAsI"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:58:35.333795 2025] [:error] [pid 62317:tid 62328] [client 173.239.218.176:27687] [client 173.239.218.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.176, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFhuzrMrOtzJhli_KVtTQAAAQk"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:59:10.044562 2025] [:error] [pid 46536:tid 46542] [client 173.239.218.169:22871] [client 173.239.218.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.169, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFh3t72_BregW2fmRb8AQAAAAI"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:59:22.158527 2025] [:error] [pid 46536:tid 46544] [client 173.239.218.173:33775] [client 173.239.218.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.173, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFh6t72_BregW2fmRb8BQAAAAQ"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:59:32.332608 2025] [:error] [pid 62317:tid 62324] [client 173.239.218.168:35351] [client 173.239.218.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.168, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFh9DrMrOtzJhli_KVtYgAAAQU"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 00:59:59.517184 2025] [:error] [pid 46537:tid 46576] [client 173.239.218.177:47651] [client 173.239.218.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.177, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVFiDxIwkdHOre8AuwAtjQAAAIg"], referer: https://makifim.com.au/wp-admin/
[Mon Dec 29 01:05:27.887453 2025] [proxy_fcgi:error] [pid 46537:tid 46586] [client 103.4.122.14:42704] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Dec 29 01:05:37.443694 2025] [proxy_fcgi:error] [pid 8229:tid 8302] [client 103.4.122.14:42768] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Dec 29 04:51:07.497965 2025] [authz_core:error] [pid 37389:tid 37460] [client 27.115.124.112:29952] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/contact-form-7/readme.txt
[Mon Dec 29 04:51:08.152485 2025] [authz_core:error] [pid 11451:tid 11475] [client 27.115.124.97:40499] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/photo-gallery/readme.txt
[Mon Dec 29 04:51:08.993335 2025] [authz_core:error] [pid 11453:tid 11514] [client 27.115.124.69:17551] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/simply-gallery-block/readme.txt
[Mon Dec 29 04:51:18.381191 2025] [authz_core:error] [pid 11453:tid 11527] [client 27.115.124.113:10917] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/themes/Your-Generated-Divi-child-theme-template-by-DiviCake/readme.txt
[Mon Dec 29 04:51:19.148279 2025] [authz_core:error] [pid 11540:tid 11564] [client 27.115.124.69:24227] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/themes/Divi/readme.txt
[Mon Dec 29 05:36:51.518181 2025] [:error] [pid 11453:tid 11516] [client 167.99.61.218:63317] [client 167.99.61.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aVGi87y-FXnKT7-6pt446QAAAIc"], referer: binance.com
[Tue Dec 30 20:54:14.557663 2025] [:error] [pid 47553:tid 47555] [client 103.77.106.57:54002] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/postnews.php"] [unique_id "aVPLdrvhy9HerwSnwIQQlAAAAYA"]
[Tue Dec 30 20:54:15.404984 2025] [:error] [pid 28825:tid 28881] [client 103.77.106.57:54144] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVPLdz6dbc1G2hX-KfRbZgAAAMI"]
[Tue Dec 30 20:54:19.415880 2025] [:error] [pid 47441:tid 47446] [client 103.77.106.57:54595] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLey6d2esGSN6Ne3NZoQAAAUI"]
[Tue Dec 30 23:31:46.172228 2025] [:error] [pid 47553:tid 47570] [client 34.14.124.101:55750] [client 34.14.124.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.14.124.101, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVPwYrvhy9HerwSnwIQ0OgAAAY8"]
[Tue Dec 30 23:31:53.918182 2025] [:error] [pid 47553:tid 47561] [client 34.14.124.101:55750] [client 34.14.124.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVPwabvhy9HerwSnwIQ0RQAAAYY"]
[Tue Dec 30 23:31:56.118921 2025] [:error] [pid 47553:tid 47577] [client 34.14.124.101:55750] [client 34.14.124.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.14.124.101, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVPwbLvhy9HerwSnwIQ0TwAAAZY"]
[Wed Dec 31 00:10:55.793351 2025] [autoindex:error] [pid 49981:tid 50000] [client 159.89.181.56:62728] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 03:13:43.315113 2025] [:error] [pid 49983:tid 50056] [client 34.7.138.156:55432] [client 34.7.138.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.7.138.156, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQkZ2iL1pay2WifcvayswAAAQ4"]
[Wed Dec 31 03:13:49.470941 2025] [:error] [pid 49983:tid 50048] [client 34.7.138.156:55432] [client 34.7.138.156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVQkbWiL1pay2WifcvayugAAAQY"]
[Wed Dec 31 03:13:51.737786 2025] [:error] [pid 49983:tid 50053] [client 34.7.138.156:55432] [client 34.7.138.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.7.138.156, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQkb2iL1pay2WifcvayvAAAAQs"]
[Wed Dec 31 03:32:44.406751 2025] [:error] [pid 29457:tid 29476] [client 195.178.110.190:51226] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aVQo3OYuNAYgLNpTAwROGQAAANE"]
[Wed Dec 31 07:04:04.684951 2025] [autoindex:error] [pid 42410:tid 42461] [client 62.169.29.191:52557] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 16:31:20.804416 2025] [:error] [pid 64406:tid 64423] [client 138.197.17.1:55237] [client 138.197.17.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aVTfWCLRcJYP7e7OhBb0CgAAAQ8"], referer: binance.com
[Fri Jan 02 04:08:05.344198 2026] [:error] [pid 63098:tid 63112] [client 65.111.0.59:54571] [client 65.111.0.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.111.0.59, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVbUJcez9k78gUs48kp1yAAAAAU"], referer: https://makifim.com.au/
[Fri Jan 02 04:08:17.295802 2026] [:error] [pid 63098:tid 63114] [client 65.111.0.59:36251] [client 65.111.0.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.111.0.59, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVbUMcez9k78gUs48kp11QAAAAc"], referer: https://makifim.com.au/
[Fri Jan 02 12:21:42.103115 2026] [autoindex:error] [pid 29316:tid 29328] [client 157.173.111.139:59770] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 02 21:01:00.875824 2026] [:error] [pid 50186:tid 50204] [client 20.205.113.164:17011] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-activate.php"] [unique_id "aVfBjFXqK_iX4f-S70J1zgAAAZA"]
[Fri Jan 02 21:01:01.187073 2026] [:error] [pid 63100:tid 63178] [client 20.205.113.164:16990] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-activate.php"] [unique_id "aVfBjTuUXUKd3KTnKl9OdwAAAJE"]
[Fri Jan 02 21:01:01.482821 2026] [:error] [pid 63100:tid 63177] [client 20.205.113.164:16924] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-activate.php"] [unique_id "aVfBjTuUXUKd3KTnKl9OeQAAAJA"]
[Fri Jan 02 21:01:01.770966 2026] [:error] [pid 63100:tid 63162] [client 20.205.113.164:16921] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-activate.php"] [unique_id "aVfBjTuUXUKd3KTnKl9OewAAAIE"]
[Fri Jan 02 21:01:02.075409 2026] [:error] [pid 63099:tid 63149] [client 20.205.113.164:17001] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aVfBjsmCZokRPYUhzvi87wAAAE8"]
[Fri Jan 02 21:01:02.405434 2026] [:error] [pid 43358:tid 43366] [client 20.205.113.164:16927] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aVfBjgncbHK9auzvrA9W3gAAAcY"]
[Fri Jan 02 21:01:02.744584 2026] [:error] [pid 63208:tid 63235] [client 20.205.113.164:17009] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aVfBjnKLI9INGPLzfndGygAAANg"]
[Fri Jan 02 21:01:03.093073 2026] [:error] [pid 50186:tid 50209] [client 20.205.113.164:16917] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aVfBj1XqK_iX4f-S70J10AAAAZU"]
[Fri Jan 02 21:01:03.408710 2026] [:error] [pid 63098:tid 63122] [client 20.205.113.164:16903] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aVfBj8ez9k78gUs48kpdfAAAAA8"]
[Fri Jan 02 21:01:03.774358 2026] [:error] [pid 63099:tid 63140] [client 20.205.113.164:16988] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aVfBj8mCZokRPYUhzvi88gAAAEY"]
[Fri Jan 02 21:01:04.110070 2026] [:error] [pid 63099:tid 63138] [client 20.205.113.164:16963] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aVfBkMmCZokRPYUhzvi89AAAAEQ"]
[Fri Jan 02 21:01:04.407640 2026] [:error] [pid 63208:tid 63230] [client 20.205.113.164:16982] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aVfBkHKLI9INGPLzfndGzQAAANM"]
[Fri Jan 02 21:01:04.697474 2026] [:error] [pid 63099:tid 63136] [client 20.205.113.164:17002] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfBkMmCZokRPYUhzvi89gAAAEI"]
[Fri Jan 02 21:01:04.969200 2026] [:error] [pid 63098:tid 63131] [client 20.205.113.164:16902] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfBkMez9k78gUs48kpdfgAAABg"]
[Fri Jan 02 21:01:05.244944 2026] [:error] [pid 63208:tid 63214] [client 20.205.113.164:16922] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfBkXKLI9INGPLzfndG0QAAAMM"]
[Fri Jan 02 21:01:05.548337 2026] [:error] [pid 50186:tid 50192] [client 20.205.113.164:17022] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfBkVXqK_iX4f-S70J10wAAAYQ"]
[Fri Jan 02 21:01:05.877962 2026] [:error] [pid 63208:tid 63211] [client 20.205.113.164:14284] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs.php"] [unique_id "aVfBkXKLI9INGPLzfndG0wAAAMA"]
[Fri Jan 02 21:01:06.156625 2026] [:error] [pid 63208:tid 63233] [client 20.205.113.164:16998] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs.php"] [unique_id "aVfBknKLI9INGPLzfndG1wAAANY"]
[Fri Jan 02 21:01:06.421917 2026] [:error] [pid 29316:tid 29333] [client 20.205.113.164:16972] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs.php"] [unique_id "aVfBktfT9ty-7jZmgf-tsAAAAQ8"]
[Fri Jan 02 21:01:06.739776 2026] [:error] [pid 50046:tid 50066] [client 20.205.113.164:17020] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs.php"] [unique_id "aVfBkizv7fgIiwkQYNCuwwAAAVI"]
[Fri Jan 02 21:01:07.044208 2026] [:error] [pid 43358:tid 43361] [client 20.205.113.164:16971] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aVfBkwncbHK9auzvrA9W4gAAAcE"]
[Fri Jan 02 21:01:07.304692 2026] [:error] [pid 63208:tid 63235] [client 20.205.113.164:16949] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aVfBk3KLI9INGPLzfndG2wAAANg"]
[Fri Jan 02 21:01:07.624730 2026] [:error] [pid 63100:tid 63179] [client 20.205.113.164:16901] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aVfBkzuUXUKd3KTnKl9OgAAAAJI"]
[Fri Jan 02 21:01:07.875020 2026] [:error] [pid 50186:tid 50191] [client 20.205.113.164:16958] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aVfBk1XqK_iX4f-S70J11AAAAYM"]
[Fri Jan 02 21:01:08.118042 2026] [:error] [pid 63100:tid 63164] [client 20.205.113.164:16984] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aVfBlDuUXUKd3KTnKl9OgQAAAIM"]
[Fri Jan 02 21:01:08.374291 2026] [:error] [pid 63099:tid 63141] [client 20.205.113.164:16936] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aVfBlMmCZokRPYUhzvi8-wAAAEc"]
[Fri Jan 02 21:01:08.701339 2026] [:error] [pid 63098:tid 63113] [client 20.205.113.164:17010] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aVfBlMez9k78gUs48kpdhgAAAAY"]
[Fri Jan 02 21:01:08.938545 2026] [:error] [pid 63100:tid 63165] [client 20.205.113.164:16914] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aVfBlDuUXUKd3KTnKl9OhQAAAIQ"]
[Fri Jan 02 21:01:09.203588 2026] [:error] [pid 50046:tid 50050] [client 20.205.113.164:16974] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aVfBlSzv7fgIiwkQYNCuxQAAAUI"]
[Fri Jan 02 21:01:09.455440 2026] [:error] [pid 63208:tid 63227] [client 20.205.113.164:16900] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aVfBlXKLI9INGPLzfndG4AAAANA"]
[Fri Jan 02 21:01:09.696731 2026] [:error] [pid 43358:tid 43374] [client 20.205.113.164:17017] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aVfBlQncbHK9auzvrA9W5QAAAc4"]
[Fri Jan 02 21:01:09.930772 2026] [:error] [pid 63208:tid 63232] [client 20.205.113.164:16993] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aVfBlXKLI9INGPLzfndG4wAAANU"]
[Fri Jan 02 21:01:10.224704 2026] [:error] [pid 50046:tid 50060] [client 20.205.113.164:16957] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aVfBlizv7fgIiwkQYNCuxgAAAUw"]
[Fri Jan 02 21:01:10.484765 2026] [:error] [pid 63208:tid 63224] [client 20.205.113.164:17005] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aVfBlnKLI9INGPLzfndG5QAAAM0"]
[Fri Jan 02 21:01:10.763365 2026] [:error] [pid 63208:tid 63233] [client 20.205.113.164:17018] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aVfBlnKLI9INGPLzfndG6AAAANY"]
[Fri Jan 02 21:01:11.076119 2026] [:error] [pid 43358:tid 43381] [client 20.205.113.164:16980] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aVfBlwncbHK9auzvrA9W5wAAAdU"]
[Fri Jan 02 21:01:11.402909 2026] [:error] [pid 63208:tid 63229] [client 20.205.113.164:16937] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aVfBl3KLI9INGPLzfndG6QAAANI"]
[Fri Jan 02 21:01:11.727396 2026] [:error] [pid 63208:tid 63215] [client 20.205.113.164:16915] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aVfBl3KLI9INGPLzfndG6gAAAMQ"]
[Fri Jan 02 21:01:12.014991 2026] [:error] [pid 43358:tid 43379] [client 20.205.113.164:16906] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aVfBmAncbHK9auzvrA9W6gAAAdM"]
[Fri Jan 02 21:01:12.311295 2026] [:error] [pid 63098:tid 63125] [client 20.205.113.164:14294] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OK.php"] [unique_id "aVfBmMez9k78gUs48kpdjQAAABI"]
[Fri Jan 02 21:01:12.607744 2026] [:error] [pid 63100:tid 63161] [client 20.205.113.164:16962] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aVfBmDuUXUKd3KTnKl9OjQAAAIA"]
[Fri Jan 02 21:01:12.900756 2026] [:error] [pid 29316:tid 29339] [client 20.205.113.164:16986] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aVfBmNfT9ty-7jZmgf-ttgAAARU"]
[Fri Jan 02 21:01:13.196581 2026] [:error] [pid 63208:tid 63228] [client 20.205.113.164:16953] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aVfBmXKLI9INGPLzfndG8AAAANE"]
[Fri Jan 02 21:01:13.514535 2026] [:error] [pid 63208:tid 63227] [client 20.205.113.164:16910] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php"] [unique_id "aVfBmXKLI9INGPLzfndG8gAAANA"]
[Fri Jan 02 21:01:13.824747 2026] [:error] [pid 50046:tid 50054] [client 20.205.113.164:17023] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aVfBmSzv7fgIiwkQYNCuywAAAUY"]
[Fri Jan 02 21:01:14.121544 2026] [:error] [pid 43358:tid 43364] [client 20.205.113.164:16977] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aVfBmgncbHK9auzvrA9W8wAAAcQ"]
[Fri Jan 02 21:01:14.417601 2026] [:error] [pid 63099:tid 63139] [client 20.205.113.164:16965] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aVfBmsmCZokRPYUhzvi9DwAAAEU"]
[Fri Jan 02 21:01:14.687310 2026] [:error] [pid 50046:tid 50064] [client 20.205.113.164:16955] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aVfBmizv7fgIiwkQYNCuzwAAAVA"]
[Fri Jan 02 21:01:14.954288 2026] [:error] [pid 29316:tid 29342] [client 20.205.113.164:14228] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aVfBmtfT9ty-7jZmgf-tuQAAARg"]
[Fri Jan 02 21:01:15.225037 2026] [:error] [pid 63208:tid 63214] [client 20.205.113.164:16981] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aVfBm3KLI9INGPLzfndG9QAAAMM"]
[Fri Jan 02 21:01:15.470078 2026] [:error] [pid 50046:tid 50065] [client 20.205.113.164:16943] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aVfBmyzv7fgIiwkQYNCu0gAAAVE"]
[Fri Jan 02 21:01:15.721110 2026] [:error] [pid 50046:tid 50063] [client 20.205.113.164:16994] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arig.php"] [unique_id "aVfBmyzv7fgIiwkQYNCu1QAAAU8"]
[Fri Jan 02 21:01:15.955988 2026] [:error] [pid 63208:tid 63221] [client 20.205.113.164:16929] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aVfBm3KLI9INGPLzfndG9gAAAMo"]
[Fri Jan 02 21:01:16.190020 2026] [:error] [pid 63098:tid 63125] [client 20.205.113.164:16961] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aVfBnMez9k78gUs48kpdnAAAABI"]
[Fri Jan 02 21:01:16.456546 2026] [:error] [pid 63098:tid 63126] [client 20.205.113.164:16985] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aVfBnMez9k78gUs48kpdnQAAABM"]
[Fri Jan 02 21:01:16.727630 2026] [:error] [pid 63100:tid 63166] [client 20.205.113.164:16923] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aVfBnDuUXUKd3KTnKl9OlgAAAIU"]
[Fri Jan 02 21:01:16.961660 2026] [:error] [pid 63098:tid 63124] [client 20.205.113.164:16989] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aVfBnMez9k78gUs48kpdoAAAABE"]
[Fri Jan 02 21:01:17.206176 2026] [:error] [pid 29316:tid 29325] [client 20.205.113.164:14322] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aVfBndfT9ty-7jZmgf-twAAAAQc"]
[Fri Jan 02 21:01:17.446716 2026] [:error] [pid 63208:tid 63226] [client 20.205.113.164:17000] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aVfBnXKLI9INGPLzfndG9wAAAM8"]
[Fri Jan 02 21:01:17.716575 2026] [:error] [pid 63208:tid 63233] [client 20.205.113.164:16905] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aVfBnXKLI9INGPLzfndG-gAAANY"]
[Fri Jan 02 21:01:17.980728 2026] [:error] [pid 63098:tid 63110] [client 20.205.113.164:16999] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aVfBncez9k78gUs48kpdowAAAAM"]
[Fri Jan 02 21:01:18.230168 2026] [:error] [pid 29316:tid 29333] [client 20.205.113.164:16947] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aVfBntfT9ty-7jZmgf-twQAAAQ8"]
[Fri Jan 02 21:01:18.466329 2026] [:error] [pid 63098:tid 63127] [client 20.205.113.164:17014] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aVfBnsez9k78gUs48kpdpgAAABQ"]
[Fri Jan 02 21:01:18.719527 2026] [:error] [pid 63099:tid 63158] [client 20.205.113.164:16992] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/af32.php"] [unique_id "aVfBnsmCZokRPYUhzvi9EAAAAFg"]
[Fri Jan 02 21:01:18.967872 2026] [:error] [pid 50046:tid 50068] [client 20.205.113.164:17006] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aVfBnizv7fgIiwkQYNCu3AAAAVQ"]
[Fri Jan 02 21:01:19.204107 2026] [:error] [pid 50186:tid 50194] [client 20.205.113.164:16928] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aVfBn1XqK_iX4f-S70J13QAAAYY"]
[Fri Jan 02 21:01:19.450314 2026] [:error] [pid 63100:tid 63170] [client 20.205.113.164:14276] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aVfBnzuUXUKd3KTnKl9OnAAAAIk"]
[Fri Jan 02 21:01:19.687204 2026] [:error] [pid 63098:tid 63117] [client 20.205.113.164:16976] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rz.php"] [unique_id "aVfBn8ez9k78gUs48kpdqwAAAAo"]
[Fri Jan 02 21:01:19.931027 2026] [:error] [pid 50046:tid 50054] [client 20.205.113.164:14274] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aVfBnyzv7fgIiwkQYNCu3wAAAUY"]
[Fri Jan 02 21:01:20.180236 2026] [:error] [pid 29316:tid 29328] [client 20.205.113.164:16920] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aVfBoNfT9ty-7jZmgf-twgAAAQo"]
[Fri Jan 02 21:01:20.444991 2026] [:error] [pid 29316:tid 29335] [client 20.205.113.164:16997] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aVfBoNfT9ty-7jZmgf-twwAAARE"]
[Fri Jan 02 21:01:20.685081 2026] [:error] [pid 63208:tid 63223] [client 20.205.113.164:16896] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hugo.php"] [unique_id "aVfBoHKLI9INGPLzfndHAAAAAMw"]
[Fri Jan 02 21:01:20.921895 2026] [:error] [pid 63098:tid 63126] [client 20.205.113.164:17004] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aVfBoMez9k78gUs48kpdsAAAABM"]
[Fri Jan 02 21:01:21.176091 2026] [:error] [pid 63099:tid 63142] [client 20.205.113.164:16978] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aVfBocmCZokRPYUhzvi9EgAAAEg"]
[Fri Jan 02 21:01:21.414468 2026] [:error] [pid 43358:tid 43371] [client 20.205.113.164:14307] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aVfBoQncbHK9auzvrA9W9QAAAcs"]
[Fri Jan 02 21:01:21.742049 2026] [:error] [pid 50186:tid 50208] [client 20.205.113.164:14301] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aVfBoVXqK_iX4f-S70J14QAAAZQ"]
[Fri Jan 02 21:01:22.018692 2026] [:error] [pid 63208:tid 63219] [client 20.205.113.164:17013] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aVfBonKLI9INGPLzfndHBQAAAMg"]
[Fri Jan 02 21:01:22.262084 2026] [:error] [pid 63100:tid 63163] [client 20.205.113.164:16909] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aVfBojuUXUKd3KTnKl9OnQAAAII"]
[Fri Jan 02 21:01:22.536495 2026] [:error] [pid 63208:tid 63224] [client 20.205.113.164:16926] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aVfBonKLI9INGPLzfndHCQAAAM0"]
[Fri Jan 02 21:01:22.771262 2026] [:error] [pid 43358:tid 43362] [client 20.205.113.164:16954] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lzyrj.php"] [unique_id "aVfBogncbHK9auzvrA9W9gAAAcI"]
[Fri Jan 02 21:01:23.021674 2026] [:error] [pid 43358:tid 43374] [client 20.205.113.164:14303] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aVfBowncbHK9auzvrA9W9wAAAc4"]
[Fri Jan 02 21:01:23.284629 2026] [:error] [pid 50186:tid 50201] [client 20.205.113.164:17007] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aVfBo1XqK_iX4f-S70J16wAAAY0"]
[Fri Jan 02 21:01:23.540066 2026] [:error] [pid 63099:tid 63146] [client 20.205.113.164:16897] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aVfBo8mCZokRPYUhzvi9EwAAAEw"]
[Fri Jan 02 21:01:23.774193 2026] [:error] [pid 63098:tid 63120] [client 20.205.113.164:17016] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/laudq.php"] [unique_id "aVfBo8ez9k78gUs48kpdsgAAAA0"]
[Fri Jan 02 21:01:24.012232 2026] [:error] [pid 50046:tid 50062] [client 20.205.113.164:16907] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aVfBpCzv7fgIiwkQYNCu5wAAAU4"]
[Fri Jan 02 21:01:24.245634 2026] [:error] [pid 63098:tid 63124] [client 20.205.113.164:14320] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aVfBpMez9k78gUs48kpdswAAABE"]
[Fri Jan 02 21:01:24.489056 2026] [:error] [pid 29316:tid 29339] [client 20.205.113.164:16918] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aVfBpNfT9ty-7jZmgf-tyQAAARU"]
[Fri Jan 02 21:01:24.761451 2026] [:error] [pid 63099:tid 63140] [client 20.205.113.164:14282] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anjay.php"] [unique_id "aVfBpMmCZokRPYUhzvi9FAAAAEY"]
[Fri Jan 02 21:01:25.003051 2026] [:error] [pid 63099:tid 63138] [client 20.205.113.164:14312] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aVfBpcmCZokRPYUhzvi9FgAAAEQ"]
[Fri Jan 02 21:01:25.254540 2026] [:error] [pid 63099:tid 63135] [client 20.205.113.164:14232] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aVfBpcmCZokRPYUhzvi9GAAAAEE"]
[Fri Jan 02 21:01:25.487842 2026] [:error] [pid 50186:tid 50203] [client 20.205.113.164:14304] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aVfBpVXqK_iX4f-S70J17wAAAY8"]
[Fri Jan 02 21:01:25.723397 2026] [:error] [pid 50186:tid 50206] [client 20.205.113.164:16939] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/let.php"] [unique_id "aVfBpVXqK_iX4f-S70J18wAAAZI"]
[Fri Jan 02 21:01:25.958296 2026] [:error] [pid 63100:tid 63175] [client 20.205.113.164:14259] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVfBpTuUXUKd3KTnKl9OnwAAAI4"]
[Fri Jan 02 21:01:26.201872 2026] [:error] [pid 43358:tid 43375] [client 20.205.113.164:17019] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVfBpgncbHK9auzvrA9W-QAAAc8"]
[Fri Jan 02 21:01:26.456588 2026] [:error] [pid 63208:tid 63223] [client 20.205.113.164:17015] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVfBpnKLI9INGPLzfndHEAAAAMw"]
[Fri Jan 02 21:01:26.699736 2026] [:error] [pid 63100:tid 63161] [client 20.205.113.164:16979] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVfBpjuUXUKd3KTnKl9OoQAAAIA"]
[Fri Jan 02 21:01:26.979295 2026] [:error] [pid 43358:tid 43373] [client 20.205.113.164:16931] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aVfBpgncbHK9auzvrA9W-gAAAc0"]
[Fri Jan 02 21:01:27.217395 2026] [:error] [pid 43358:tid 43379] [client 20.205.113.164:14214] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aVfBpwncbHK9auzvrA9W-wAAAdM"]
[Fri Jan 02 21:01:27.451950 2026] [:error] [pid 43358:tid 43363] [client 20.205.113.164:16970] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aVfBpwncbHK9auzvrA9W_AAAAcM"]
[Fri Jan 02 21:01:27.721051 2026] [:error] [pid 43358:tid 43383] [client 20.205.113.164:14302] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aVfBpwncbHK9auzvrA9W_QAAAdc"]
[Fri Jan 02 21:01:27.959977 2026] [:error] [pid 50046:tid 50069] [client 20.205.113.164:16945] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aVfBpyzv7fgIiwkQYNCu6wAAAVU"]
[Fri Jan 02 21:01:28.196471 2026] [:error] [pid 63099:tid 63154] [client 20.205.113.164:16944] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aVfBqMmCZokRPYUhzvi9GgAAAFQ"]
[Fri Jan 02 21:01:28.433482 2026] [:error] [pid 63100:tid 63177] [client 20.205.113.164:16950] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aVfBqDuUXUKd3KTnKl9OogAAAJA"]
[Fri Jan 02 21:01:28.667033 2026] [:error] [pid 29316:tid 29337] [client 20.205.113.164:16930] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aVfBqNfT9ty-7jZmgf-t2QAAARM"]
[Fri Jan 02 21:01:28.905292 2026] [:error] [pid 50046:tid 50061] [client 20.205.113.164:14279] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aVfBqCzv7fgIiwkQYNCu7QAAAU0"]
[Fri Jan 02 21:01:29.139645 2026] [:error] [pid 50046:tid 50071] [client 20.205.113.164:14329] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aVfBqSzv7fgIiwkQYNCu8QAAAVc"]
[Fri Jan 02 21:01:29.373445 2026] [:error] [pid 50046:tid 50057] [client 20.205.113.164:16925] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aVfBqSzv7fgIiwkQYNCu9AAAAUk"]
[Fri Jan 02 21:01:29.669824 2026] [:error] [pid 63098:tid 63123] [client 20.205.113.164:14230] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aVfBqcez9k78gUs48kpduAAAABA"]
[Fri Jan 02 21:01:29.904244 2026] [:error] [pid 63208:tid 63221] [client 20.205.113.164:14313] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aVfBqXKLI9INGPLzfndHFQAAAMo"]
[Fri Jan 02 21:01:30.139339 2026] [:error] [pid 43358:tid 43366] [client 20.205.113.164:16935] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aVfBqgncbHK9auzvrA9XAQAAAcY"]
[Fri Jan 02 21:01:30.374028 2026] [:error] [pid 43358:tid 43367] [client 20.205.113.164:14226] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aVfBqgncbHK9auzvrA9XAgAAAcc"]
[Fri Jan 02 21:01:30.613922 2026] [:error] [pid 63208:tid 63225] [client 20.205.113.164:16973] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aVfBqnKLI9INGPLzfndHGQAAAM4"]
[Fri Jan 02 21:01:30.857827 2026] [:error] [pid 50186:tid 50212] [client 20.205.113.164:16964] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aVfBqlXqK_iX4f-S70J1_gAAAZg"]
[Fri Jan 02 21:01:31.094125 2026] [:error] [pid 63099:tid 63150] [client 20.205.113.164:16948] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aVfBq8mCZokRPYUhzvi9HQAAAFA"]
[Fri Jan 02 21:01:31.363463 2026] [:error] [pid 43358:tid 43368] [client 20.205.113.164:14318] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aVfBqwncbHK9auzvrA9XAwAAAcg"]
[Fri Jan 02 21:01:31.602370 2026] [:error] [pid 63098:tid 63112] [client 20.205.113.164:14287] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aVfBq8ez9k78gUs48kpdvAAAAAU"]
[Fri Jan 02 21:01:31.854129 2026] [:error] [pid 63098:tid 63117] [client 20.205.113.164:14308] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aVfBq8ez9k78gUs48kpdvQAAAAo"]
[Fri Jan 02 21:01:32.088786 2026] [:error] [pid 63098:tid 63121] [client 20.205.113.164:16904] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aVfBrMez9k78gUs48kpdvgAAAA4"]
[Fri Jan 02 21:01:32.324690 2026] [:error] [pid 63100:tid 63184] [client 20.205.113.164:16908] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aVfBrDuUXUKd3KTnKl9OpwAAAJc"]
[Fri Jan 02 21:01:32.577214 2026] [:error] [pid 63098:tid 63109] [client 20.205.113.164:16919] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aVfBrMez9k78gUs48kpdwgAAAAI"]
[Fri Jan 02 21:01:32.862814 2026] [:error] [pid 50186:tid 50192] [client 20.205.113.164:14309] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVfBrFXqK_iX4f-S70J2BwAAAYQ"]
[Fri Jan 02 21:01:33.097473 2026] [:error] [pid 50186:tid 50201] [client 20.205.113.164:14334] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVfBrVXqK_iX4f-S70J2CwAAAY0"]
[Fri Jan 02 21:01:33.341028 2026] [:error] [pid 50186:tid 50208] [client 20.205.113.164:14293] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVfBrVXqK_iX4f-S70J2DQAAAZQ"]
[Fri Jan 02 21:01:33.608066 2026] [:error] [pid 50046:tid 50058] [client 20.205.113.164:16934] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVfBrSzv7fgIiwkQYNCu9gAAAUo"]
[Fri Jan 02 21:01:33.875308 2026] [:error] [pid 43358:tid 43364] [client 20.205.113.164:14323] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aVfBrQncbHK9auzvrA9XBQAAAcQ"]
[Fri Jan 02 21:01:34.124684 2026] [:error] [pid 43358:tid 43365] [client 20.205.113.164:17003] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aVfBrgncbHK9auzvrA9XCAAAAcU"]
[Fri Jan 02 21:01:34.358326 2026] [:error] [pid 50186:tid 50212] [client 20.205.113.164:16991] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aVfBrlXqK_iX4f-S70J2EQAAAZg"]
[Fri Jan 02 21:01:34.595758 2026] [:error] [pid 63098:tid 63126] [client 20.205.113.164:14328] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cloud.php"] [unique_id "aVfBrsez9k78gUs48kpdwwAAABM"]
[Fri Jan 02 21:01:34.837245 2026] [:error] [pid 50186:tid 50193] [client 20.205.113.164:16968] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfBrlXqK_iX4f-S70J2EwAAAYU"]
[Fri Jan 02 21:01:35.090872 2026] [:error] [pid 50186:tid 50210] [client 20.205.113.164:16912] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfBr1XqK_iX4f-S70J2FQAAAZY"]
[Fri Jan 02 21:01:35.345903 2026] [:error] [pid 29316:tid 29318] [client 20.205.113.164:14252] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfBr9fT9ty-7jZmgf-t3gAAAQA"]
[Fri Jan 02 21:01:35.580457 2026] [:error] [pid 63100:tid 63167] [client 20.205.113.164:16951] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfBrzuUXUKd3KTnKl9OqwAAAIY"]
[Fri Jan 02 21:01:35.834035 2026] [:error] [pid 50186:tid 50192] [client 20.205.113.164:14212] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVfBr1XqK_iX4f-S70J2GQAAAYQ"]
[Fri Jan 02 21:01:36.076221 2026] [:error] [pid 63099:tid 63157] [client 20.205.113.164:14225] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVfBsMmCZokRPYUhzvi9JwAAAFc"]
[Fri Jan 02 21:01:36.314861 2026] [:error] [pid 63099:tid 63146] [client 20.205.113.164:16899] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVfBsMmCZokRPYUhzvi9KQAAAEw"]
[Fri Jan 02 21:01:36.553086 2026] [:error] [pid 50046:tid 50070] [client 20.205.113.164:16913] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVfBsCzv7fgIiwkQYNCu-AAAAVY"]
[Fri Jan 02 21:01:36.789664 2026] [:error] [pid 63099:tid 63140] [client 20.205.113.164:14296] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVfBsMmCZokRPYUhzvi9KgAAAEY"]
[Fri Jan 02 21:01:37.025314 2026] [:error] [pid 63100:tid 63176] [client 20.205.113.164:14249] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVfBsTuUXUKd3KTnKl9OrQAAAI8"]
[Fri Jan 02 21:01:37.270599 2026] [:error] [pid 63098:tid 63111] [client 20.205.113.164:17008] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVfBscez9k78gUs48kpdxAAAAAQ"]
[Fri Jan 02 21:01:37.512449 2026] [:error] [pid 29316:tid 29340] [client 20.205.113.164:16960] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVfBsdfT9ty-7jZmgf-t4QAAARY"]
[Fri Jan 02 21:01:37.745920 2026] [:error] [pid 43358:tid 43375] [client 20.205.113.164:14283] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aVfBsQncbHK9auzvrA9XDAAAAc8"]
[Fri Jan 02 21:01:37.987641 2026] [:error] [pid 43358:tid 43379] [client 20.205.113.164:16987] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aVfBsQncbHK9auzvrA9XDgAAAdM"]
[Fri Jan 02 21:01:38.222018 2026] [:error] [pid 50186:tid 50205] [client 20.205.113.164:14273] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aVfBslXqK_iX4f-S70J2IAAAAZE"]
[Fri Jan 02 21:01:38.484764 2026] [:error] [pid 63099:tid 63134] [client 20.205.113.164:14239] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aVfBssmCZokRPYUhzvi9LwAAAEA"]
[Fri Jan 02 21:01:38.718395 2026] [:error] [pid 63098:tid 63129] [client 20.205.113.164:14280] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVfBssez9k78gUs48kpdyAAAABY"]
[Fri Jan 02 21:01:39.003768 2026] [:error] [pid 63099:tid 63150] [client 20.205.113.164:14289] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVfBs8mCZokRPYUhzvi9MAAAAFA"]
[Fri Jan 02 21:01:39.242671 2026] [:error] [pid 50186:tid 50194] [client 20.205.113.164:14314] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVfBs1XqK_iX4f-S70J2IgAAAYY"]
[Fri Jan 02 21:01:39.494564 2026] [:error] [pid 50186:tid 50206] [client 20.205.113.164:16938] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVfBs1XqK_iX4f-S70J2JQAAAZI"]
[Fri Jan 02 21:01:39.740971 2026] [:error] [pid 50186:tid 50192] [client 20.205.113.164:14290] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVfBs1XqK_iX4f-S70J2JgAAAYQ"]
[Fri Jan 02 21:01:40.012771 2026] [:error] [pid 50186:tid 50199] [client 20.205.113.164:14305] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVfBtFXqK_iX4f-S70J2KwAAAYs"]
[Fri Jan 02 21:01:40.250908 2026] [:error] [pid 63100:tid 63177] [client 20.205.113.164:14261] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVfBtDuUXUKd3KTnKl9OsgAAAJA"]
[Fri Jan 02 21:01:40.489261 2026] [:error] [pid 43358:tid 43378] [client 20.205.113.164:14208] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVfBtAncbHK9auzvrA9XEQAAAdI"]
[Fri Jan 02 21:01:40.736583 2026] [:error] [pid 50186:tid 50211] [client 20.205.113.164:16996] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aVfBtFXqK_iX4f-S70J2LgAAAZc"]
[Fri Jan 02 21:01:40.970787 2026] [:error] [pid 63100:tid 63169] [client 20.205.113.164:16898] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aVfBtDuUXUKd3KTnKl9OswAAAIg"]
[Fri Jan 02 21:01:41.222481 2026] [:error] [pid 43358:tid 43368] [client 20.205.113.164:16932] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aVfBtQncbHK9auzvrA9XEgAAAcg"]
[Fri Jan 02 21:01:41.479112 2026] [:error] [pid 63100:tid 63185] [client 20.205.113.164:14217] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aVfBtTuUXUKd3KTnKl9OtAAAAJg"]
[Fri Jan 02 21:01:41.715585 2026] [:error] [pid 43358:tid 43360] [client 20.205.113.164:14268] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aVfBtQncbHK9auzvrA9XEwAAAcA"]
[Fri Jan 02 21:01:41.948942 2026] [:error] [pid 63100:tid 63184] [client 20.205.113.164:14312] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aVfBtTuUXUKd3KTnKl9OtgAAAJc"]
[Fri Jan 02 21:01:42.182395 2026] [:error] [pid 29316:tid 29334] [client 20.205.113.164:14221] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aVfBttfT9ty-7jZmgf-t6AAAARA"]
[Fri Jan 02 21:01:42.418635 2026] [:error] [pid 50046:tid 50061] [client 20.205.113.164:14251] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aVfBtizv7fgIiwkQYNCvAAAAAU0"]
[Fri Jan 02 21:01:42.668081 2026] [:error] [pid 50186:tid 50207] [client 20.205.113.164:14316] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVfBtlXqK_iX4f-S70J2MAAAAZM"]
[Fri Jan 02 21:01:42.901103 2026] [:error] [pid 43358:tid 43376] [client 20.205.113.164:14277] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVfBtgncbHK9auzvrA9XFAAAAdA"]
[Fri Jan 02 21:01:43.157334 2026] [:error] [pid 43358:tid 43364] [client 20.205.113.164:14306] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVfBtwncbHK9auzvrA9XFgAAAcQ"]
[Fri Jan 02 21:01:43.406573 2026] [:error] [pid 50186:tid 50198] [client 20.205.113.164:14257] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVfBt1XqK_iX4f-S70J2MQAAAYo"]
[Fri Jan 02 21:01:43.654808 2026] [:error] [pid 63100:tid 63176] [client 20.205.113.164:16933] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aVfBtzuUXUKd3KTnKl9OvQAAAI8"]
[Fri Jan 02 21:01:43.901700 2026] [:error] [pid 63100:tid 63181] [client 20.205.113.164:14310] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aVfBtzuUXUKd3KTnKl9OvwAAAJQ"]
[Fri Jan 02 21:01:44.135099 2026] [:error] [pid 50046:tid 50051] [client 20.205.113.164:14260] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aVfBuCzv7fgIiwkQYNCvAgAAAUM"]
[Fri Jan 02 21:01:44.395992 2026] [:error] [pid 43358:tid 43361] [client 20.205.113.164:14281] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aVfBuAncbHK9auzvrA9XGAAAAcE"]
[Fri Jan 02 21:01:44.642403 2026] [:error] [pid 63100:tid 63163] [client 20.205.113.164:17021] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aVfBuDuUXUKd3KTnKl9OwQAAAII"]
[Fri Jan 02 21:01:44.881526 2026] [:error] [pid 29316:tid 29339] [client 20.205.113.164:14317] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aVfBuNfT9ty-7jZmgf-t6wAAARU"]
[Fri Jan 02 21:01:45.153761 2026] [:error] [pid 50046:tid 50059] [client 20.205.113.164:14297] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aVfBuSzv7fgIiwkQYNCvCAAAAUs"]
[Fri Jan 02 21:01:45.393981 2026] [:error] [pid 50186:tid 50204] [client 20.205.113.164:14222] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aVfBuVXqK_iX4f-S70J2NAAAAZA"]
[Fri Jan 02 21:01:45.626760 2026] [:error] [pid 63098:tid 63121] [client 20.205.113.164:17012] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aVfBucez9k78gUs48kpdzgAAAA4"]
[Fri Jan 02 21:01:45.860072 2026] [:error] [pid 50186:tid 50196] [client 20.205.113.164:16946] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aVfBuVXqK_iX4f-S70J2NgAAAYg"]
[Fri Jan 02 21:01:46.142693 2026] [:error] [pid 50186:tid 50192] [client 20.205.113.164:14319] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aVfBulXqK_iX4f-S70J2OAAAAYQ"]
[Fri Jan 02 21:01:46.384251 2026] [:error] [pid 50186:tid 50209] [client 20.205.113.164:14144] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uana.php"] [unique_id "aVfBulXqK_iX4f-S70J2OgAAAZU"]
[Fri Jan 02 21:01:46.620791 2026] [:error] [pid 50186:tid 50199] [client 20.205.113.164:14174] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aVfBulXqK_iX4f-S70J2PQAAAYs"]
[Fri Jan 02 21:01:46.854688 2026] [:error] [pid 63208:tid 63228] [client 20.205.113.164:14264] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aVfBunKLI9INGPLzfndHIAAAANE"]
[Fri Jan 02 21:01:47.092683 2026] [:error] [pid 43358:tid 43378] [client 20.205.113.164:14292] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aVfBuwncbHK9auzvrA9XIgAAAdI"]
[Fri Jan 02 21:01:47.333642 2026] [:error] [pid 63098:tid 63126] [client 20.205.113.164:14213] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aVfBu8ez9k78gUs48kpd1AAAABM"]
[Fri Jan 02 21:01:47.583958 2026] [:error] [pid 50186:tid 50201] [client 20.205.113.164:14331] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aVfBu1XqK_iX4f-S70J2QQAAAY0"]
[Fri Jan 02 21:01:47.853477 2026] [:error] [pid 63098:tid 63111] [client 20.205.113.164:14216] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aVfBu8ez9k78gUs48kpd1gAAAAQ"]
[Fri Jan 02 21:01:48.162786 2026] [:error] [pid 50186:tid 50211] [client 20.205.113.164:16941] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aVfBvFXqK_iX4f-S70J2QwAAAZc"]
[Fri Jan 02 21:01:48.424672 2026] [:error] [pid 29316:tid 29341] [client 20.205.113.164:16942] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aVfBvNfT9ty-7jZmgf-t7wAAARc"]
[Fri Jan 02 21:01:48.661714 2026] [:error] [pid 43358:tid 43377] [client 20.205.113.164:14224] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aVfBvAncbHK9auzvrA9XKAAAAdE"]
[Fri Jan 02 21:01:48.908032 2026] [:error] [pid 63100:tid 63173] [client 20.205.113.164:14335] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aVfBvDuUXUKd3KTnKl9OyQAAAIw"]
[Fri Jan 02 21:01:49.159897 2026] [:error] [pid 50186:tid 50200] [client 20.205.113.164:14311] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aVfBvVXqK_iX4f-S70J2SAAAAYw"]
[Fri Jan 02 21:01:49.426259 2026] [:error] [pid 63100:tid 63166] [client 20.205.113.164:14332] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aVfBvTuUXUKd3KTnKl9OzQAAAIU"]
[Fri Jan 02 21:01:49.695505 2026] [:error] [pid 63098:tid 63128] [client 20.205.113.164:14333] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aVfBvcez9k78gUs48kpd3QAAABU"]
[Fri Jan 02 21:01:49.936498 2026] [:error] [pid 63098:tid 63127] [client 20.205.113.164:14278] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aVfBvcez9k78gUs48kpd3gAAABQ"]
[Fri Jan 02 21:01:50.177780 2026] [:error] [pid 63098:tid 63108] [client 20.205.113.164:16911] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aVfBvsez9k78gUs48kpd4AAAAAE"]
[Fri Jan 02 21:01:50.416523 2026] [:error] [pid 63100:tid 63174] [client 20.205.113.164:14244] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aVfBvjuUXUKd3KTnKl9OzwAAAI0"]
[Fri Jan 02 21:01:50.677249 2026] [:error] [pid 63098:tid 63121] [client 20.205.113.164:16966] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aVfBvsez9k78gUs48kpd4wAAAA4"]
[Fri Jan 02 21:01:50.918220 2026] [:error] [pid 63098:tid 63118] [client 20.205.113.164:14326] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aVfBvsez9k78gUs48kpd5gAAAAs"]
[Fri Jan 02 21:01:51.176880 2026] [:error] [pid 29316:tid 29329] [client 20.205.113.164:16969] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aVfBv9fT9ty-7jZmgf-t9AAAAQs"]
[Fri Jan 02 21:01:51.422959 2026] [:error] [pid 50186:tid 50203] [client 20.205.113.164:14153] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aVfBv1XqK_iX4f-S70J2TQAAAY8"]
[Fri Jan 02 21:01:51.656058 2026] [:error] [pid 63098:tid 63113] [client 20.205.113.164:16959] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVfBv8ez9k78gUs48kpd6wAAAAY"]
[Fri Jan 02 21:01:51.891697 2026] [:error] [pid 50186:tid 50192] [client 20.205.113.164:14315] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVfBv1XqK_iX4f-S70J2TgAAAYQ"]
[Fri Jan 02 21:01:52.135161 2026] [:error] [pid 63098:tid 63123] [client 20.205.113.164:14324] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVfBwMez9k78gUs48kpd8QAAABA"]
[Fri Jan 02 21:01:52.393684 2026] [:error] [pid 29316:tid 29325] [client 20.205.113.164:14240] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVfBwNfT9ty-7jZmgf-t-QAAAQc"]
[Fri Jan 02 21:01:52.642441 2026] [:error] [pid 43358:tid 43371] [client 20.205.113.164:14330] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aVfBwAncbHK9auzvrA9XLAAAAcs"]
[Fri Jan 02 21:01:52.875008 2026] [:error] [pid 50186:tid 50209] [client 20.205.113.164:14152] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aVfBwFXqK_iX4f-S70J2UAAAAZU"]
[Fri Jan 02 21:01:53.132329 2026] [:error] [pid 50186:tid 50199] [client 20.205.113.164:14235] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aVfBwVXqK_iX4f-S70J2UgAAAYs"]
[Fri Jan 02 21:01:53.420020 2026] [:error] [pid 63100:tid 63167] [client 20.205.113.164:14149] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aVfBwTuUXUKd3KTnKl9O0wAAAIY"]
[Fri Jan 02 21:01:53.666065 2026] [:error] [pid 50186:tid 50188] [client 20.205.113.164:14219] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aVfBwVXqK_iX4f-S70J2VAAAAYA"]
[Fri Jan 02 21:01:53.899171 2026] [:error] [pid 50186:tid 50201] [client 20.205.113.164:14300] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aVfBwVXqK_iX4f-S70J2VQAAAY0"]
[Fri Jan 02 21:01:54.132739 2026] [:error] [pid 50186:tid 50197] [client 20.205.113.164:16975] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aVfBwlXqK_iX4f-S70J2WAAAAYk"]
[Fri Jan 02 21:01:54.415735 2026] [:error] [pid 63098:tid 63109] [client 20.205.113.164:14231] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aVfBwsez9k78gUs48kpd9wAAAAI"]
[Fri Jan 02 21:01:54.680225 2026] [:error] [pid 29316:tid 29321] [client 20.205.113.164:14242] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warm.PhP7"] [unique_id "aVfBwtfT9ty-7jZmgf-t_AAAAQM"]
[Fri Jan 02 21:01:54.915777 2026] [:error] [pid 63098:tid 63113] [client 20.205.113.164:14156] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warm.PhP7"] [unique_id "aVfBwsez9k78gUs48kpd-wAAAAY"]
[Fri Jan 02 21:01:55.157319 2026] [:error] [pid 29316:tid 29328] [client 20.205.113.164:14246] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warm.PhP7"] [unique_id "aVfBw9fT9ty-7jZmgf-t_QAAAQo"]
[Fri Jan 02 21:01:55.407505 2026] [:error] [pid 63100:tid 63163] [client 20.205.113.164:14263] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warm.PhP7"] [unique_id "aVfBwzuUXUKd3KTnKl9O1gAAAII"]
[Fri Jan 02 21:01:55.659451 2026] [:error] [pid 63100:tid 63175] [client 20.205.113.164:14237] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php7"] [unique_id "aVfBwzuUXUKd3KTnKl9O1wAAAI4"]
[Fri Jan 02 21:01:55.907348 2026] [:error] [pid 63098:tid 63116] [client 20.205.113.164:14298] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php7"] [unique_id "aVfBw8ez9k78gUs48kpd_QAAAAk"]
[Fri Jan 02 21:01:56.190052 2026] [:error] [pid 63100:tid 63161] [client 20.205.113.164:14291] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php7"] [unique_id "aVfBxDuUXUKd3KTnKl9O2QAAAIA"]
[Fri Jan 02 21:01:56.440986 2026] [:error] [pid 63100:tid 63171] [client 20.205.113.164:14151] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php7"] [unique_id "aVfBxDuUXUKd3KTnKl9O2gAAAIo"]
[Fri Jan 02 21:01:56.737805 2026] [:error] [pid 63100:tid 63169] [client 20.205.113.164:14206] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rss.php"] [unique_id "aVfBxDuUXUKd3KTnKl9O3AAAAIg"]
[Fri Jan 02 21:01:57.119285 2026] [:error] [pid 63099:tid 63157] [client 20.205.113.164:14299] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rss.php"] [unique_id "aVfBxcmCZokRPYUhzvi9QwAAAFc"]
[Fri Jan 02 21:01:57.443699 2026] [:error] [pid 63098:tid 63127] [client 20.205.113.164:14247] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rss.php"] [unique_id "aVfBxcez9k78gUs48kpd_gAAABQ"]
[Fri Jan 02 21:01:57.739212 2026] [:error] [pid 63099:tid 63140] [client 20.205.113.164:14081] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rss.php"] [unique_id "aVfBxcmCZokRPYUhzvi9RgAAAEY"]
[Fri Jan 02 21:02:40.019315 2026] [:error] [pid 63098:tid 63124] [client 20.205.113.164:14194] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aVfB8Mez9k78gUs48kpeXAAAABE"]
[Fri Jan 02 21:02:40.252244 2026] [:error] [pid 29316:tid 29333] [client 20.205.113.164:14327] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aVfB8NfT9ty-7jZmgf-uMQAAAQ8"]
[Fri Jan 02 21:02:40.506958 2026] [:error] [pid 63100:tid 63184] [client 20.205.113.164:14163] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aVfB8DuUXUKd3KTnKl9PJwAAAJc"]
[Fri Jan 02 21:02:40.750956 2026] [:error] [pid 63100:tid 63185] [client 20.205.113.164:14218] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ios.php"] [unique_id "aVfB8DuUXUKd3KTnKl9PKAAAAJg"]
[Fri Jan 02 21:02:40.990654 2026] [:error] [pid 63208:tid 63214] [client 20.205.113.164:14245] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVfB8HKLI9INGPLzfndHWwAAAMM"]
[Fri Jan 02 21:02:41.254362 2026] [:error] [pid 63098:tid 63114] [client 20.205.113.164:14190] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVfB8cez9k78gUs48kpeXQAAAAc"]
[Fri Jan 02 21:02:41.487009 2026] [:error] [pid 63098:tid 63126] [client 20.205.113.164:14170] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVfB8cez9k78gUs48kpeXgAAABM"]
[Fri Jan 02 21:02:41.720976 2026] [:error] [pid 63098:tid 63116] [client 20.205.113.164:14176] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVfB8cez9k78gUs48kpeYAAAAAk"]
[Fri Jan 02 21:02:41.992298 2026] [:error] [pid 63098:tid 63128] [client 20.205.113.164:16940] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aVfB8cez9k78gUs48kpeYwAAABU"]
[Fri Jan 02 21:02:42.227134 2026] [:error] [pid 29316:tid 29339] [client 20.205.113.164:14215] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aVfB8tfT9ty-7jZmgf-uOAAAARU"]
[Fri Jan 02 21:02:42.461790 2026] [:error] [pid 63099:tid 63134] [client 20.205.113.164:16952] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aVfB8smCZokRPYUhzvi9fgAAAEA"]
[Fri Jan 02 21:02:42.718167 2026] [:error] [pid 29316:tid 29332] [client 20.205.113.164:14241] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aVfB8tfT9ty-7jZmgf-uOQAAAQ4"]
[Fri Jan 02 21:02:42.951457 2026] [:error] [pid 63098:tid 63121] [client 20.205.113.164:14168] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVfB8sez9k78gUs48kpeZgAAAA4"]
[Fri Jan 02 21:02:43.187312 2026] [:error] [pid 63099:tid 63152] [client 20.205.113.164:14325] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVfB88mCZokRPYUhzvi9ggAAAFI"]
[Fri Jan 02 21:02:43.420367 2026] [:error] [pid 63099:tid 63150] [client 20.205.113.164:14164] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVfB88mCZokRPYUhzvi9hAAAAFA"]
[Fri Jan 02 21:02:43.679229 2026] [:error] [pid 63098:tid 63112] [client 20.205.113.164:14229] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aVfB88ez9k78gUs48kpeaAAAAAU"]
[Fri Jan 02 21:02:43.919470 2026] [:error] [pid 63098:tid 63129] [client 20.205.113.164:14271] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVfB88ez9k78gUs48kpeagAAABY"]
[Fri Jan 02 21:02:44.153571 2026] [:error] [pid 50186:tid 50203] [client 20.205.113.164:14202] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVfB9FXqK_iX4f-S70J2vQAAAY8"]
[Fri Jan 02 21:02:44.387856 2026] [:error] [pid 63098:tid 63111] [client 20.205.113.164:16916] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVfB9Mez9k78gUs48kpebgAAAAQ"]
[Fri Jan 02 21:02:44.624713 2026] [:error] [pid 43358:tid 43374] [client 20.205.113.164:14087] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVfB9AncbHK9auzvrA9XZgAAAc4"]
[Fri Jan 02 21:02:44.858971 2026] [:error] [pid 63098:tid 63122] [client 20.205.113.164:14195] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aVfB9Mez9k78gUs48kpecQAAAA8"]
[Fri Jan 02 21:02:45.097481 2026] [:error] [pid 63098:tid 63116] [client 20.205.113.164:14167] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aVfB9cez9k78gUs48kpecwAAAAk"]
[Fri Jan 02 21:02:45.331158 2026] [:error] [pid 63100:tid 63174] [client 20.205.113.164:14238] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aVfB9TuUXUKd3KTnKl9PLAAAAI0"]
[Fri Jan 02 21:02:45.574832 2026] [:error] [pid 63098:tid 63131] [client 20.205.113.164:14269] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aVfB9cez9k78gUs48kpedQAAABg"]
[Fri Jan 02 21:02:45.812558 2026] [:error] [pid 63098:tid 63120] [client 20.205.113.164:14248] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aVfB9cez9k78gUs48kpedwAAAA0"]
[Fri Jan 02 21:02:46.049288 2026] [:error] [pid 63099:tid 63139] [client 20.205.113.164:14227] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aVfB9smCZokRPYUhzvi9hwAAAEU"]
[Fri Jan 02 21:02:46.304841 2026] [:error] [pid 63098:tid 63123] [client 20.205.113.164:14285] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aVfB9sez9k78gUs48kpeegAAABA"]
[Fri Jan 02 21:02:46.549177 2026] [:error] [pid 63098:tid 63107] [client 20.205.113.164:14166] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "aVfB9sez9k78gUs48kpeewAAAAA"]
[Fri Jan 02 21:02:46.785810 2026] [:error] [pid 63098:tid 63129] [client 20.205.113.164:14220] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aVfB9sez9k78gUs48kpefAAAABY"]
[Fri Jan 02 21:02:47.019302 2026] [:error] [pid 63098:tid 63110] [client 20.205.113.164:14034] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aVfB98ez9k78gUs48kpefgAAAAM"]
[Fri Jan 02 21:02:47.257167 2026] [:error] [pid 63098:tid 63115] [client 20.205.113.164:14207] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aVfB98ez9k78gUs48kpefwAAAAg"]
[Fri Jan 02 21:02:47.494487 2026] [:error] [pid 63098:tid 63111] [client 20.205.113.164:14123] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aVfB98ez9k78gUs48kpegAAAAAQ"]
[Fri Jan 02 21:02:47.734031 2026] [:error] [pid 63100:tid 63166] [client 20.205.113.164:14161] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aVfB9zuUXUKd3KTnKl9PMgAAAIU"]
[Fri Jan 02 21:02:47.969651 2026] [:error] [pid 29316:tid 29329] [client 20.205.113.164:14083] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aVfB99fT9ty-7jZmgf-uQQAAAQs"]
[Fri Jan 02 21:02:48.205956 2026] [:error] [pid 50046:tid 50070] [client 20.205.113.164:14267] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aVfB-Czv7fgIiwkQYNCvPwAAAVY"]
[Fri Jan 02 21:02:48.473831 2026] [:error] [pid 43358:tid 43378] [client 20.205.113.164:14150] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aVfB-AncbHK9auzvrA9XagAAAdI"]
[Fri Jan 02 21:02:48.738361 2026] [:error] [pid 50186:tid 50195] [client 20.205.113.164:14329] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aVfB-FXqK_iX4f-S70J2wgAAAYc"]
[Fri Jan 02 21:02:48.985817 2026] [:error] [pid 63098:tid 63109] [client 20.205.113.164:14108] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aVfB-Mez9k78gUs48kpeggAAAAI"]
[Fri Jan 02 21:02:49.222060 2026] [:error] [pid 63099:tid 63154] [client 20.205.113.164:16967] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aVfB-cmCZokRPYUhzvi9jwAAAFQ"]
[Fri Jan 02 21:02:49.463790 2026] [:error] [pid 63099:tid 63142] [client 20.205.113.164:14295] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aVfB-cmCZokRPYUhzvi9kAAAAEg"]
[Fri Jan 02 21:02:49.736624 2026] [:error] [pid 63098:tid 63116] [client 20.205.113.164:14165] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVfB-cez9k78gUs48kpehQAAAAk"]
[Fri Jan 02 21:02:49.985719 2026] [:error] [pid 43358:tid 43364] [client 20.205.113.164:14210] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVfB-QncbHK9auzvrA9XbAAAAcQ"]
[Fri Jan 02 21:02:50.225098 2026] [:error] [pid 29316:tid 29331] [client 20.205.113.164:14094] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVfB-tfT9ty-7jZmgf-uRAAAAQ0"]
[Fri Jan 02 21:02:50.471955 2026] [:error] [pid 63208:tid 63232] [client 20.205.113.164:14265] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVfB-nKLI9INGPLzfndHZgAAANU"]
[Fri Jan 02 21:02:50.743162 2026] [:error] [pid 50186:tid 50190] [client 20.205.113.164:14254] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aVfB-lXqK_iX4f-S70J2xgAAAYI"]
[Fri Jan 02 21:02:50.990109 2026] [:error] [pid 63100:tid 63178] [client 20.205.113.164:14233] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aVfB-juUXUKd3KTnKl9PNQAAAJE"]
[Fri Jan 02 21:02:51.224752 2026] [:error] [pid 63099:tid 63152] [client 20.205.113.164:14147] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aVfB-8mCZokRPYUhzvi9kQAAAFI"]
[Fri Jan 02 21:02:51.465516 2026] [:error] [pid 63100:tid 63164] [client 20.205.113.164:14171] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "aVfB-zuUXUKd3KTnKl9PNgAAAIM"]
[Fri Jan 02 21:02:51.740437 2026] [:error] [pid 63098:tid 63107] [client 20.205.113.164:14262] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfB-8ez9k78gUs48kpejAAAAAA"]
[Fri Jan 02 21:02:52.000347 2026] [:error] [pid 63098:tid 63108] [client 20.205.113.164:14162] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfB-8ez9k78gUs48kpejwAAAAE"]
[Fri Jan 02 21:02:52.239414 2026] [:error] [pid 63098:tid 63130] [client 20.205.113.164:14205] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfB_Mez9k78gUs48kpekgAAABc"]
[Fri Jan 02 21:02:52.476385 2026] [:error] [pid 43358:tid 43360] [client 20.205.113.164:14092] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aVfB_AncbHK9auzvrA9XbQAAAcA"]
[Fri Jan 02 21:02:52.714931 2026] [:error] [pid 63098:tid 63126] [client 20.205.113.164:14154] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aVfB_Mez9k78gUs48kpelAAAABM"]
[Fri Jan 02 21:02:52.957542 2026] [:error] [pid 29316:tid 29335] [client 20.205.113.164:14272] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aVfB_NfT9ty-7jZmgf-uSQAAARE"]
[Fri Jan 02 21:02:53.191408 2026] [:error] [pid 50186:tid 50206] [client 20.205.113.164:14099] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aVfB_VXqK_iX4f-S70J2xwAAAZI"]
[Fri Jan 02 21:02:53.426283 2026] [:error] [pid 63099:tid 63149] [client 20.205.113.164:14158] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vv.php"] [unique_id "aVfB_cmCZokRPYUhzvi9kwAAAE8"]
[Fri Jan 02 21:02:53.677365 2026] [:error] [pid 29316:tid 29329] [client 20.205.113.164:14139] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aVfB_dfT9ty-7jZmgf-uTwAAAQs"]
[Fri Jan 02 21:02:53.939056 2026] [:error] [pid 63100:tid 63173] [client 20.205.113.164:14321] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aVfB_TuUXUKd3KTnKl9PNwAAAIw"]
[Fri Jan 02 21:02:54.176415 2026] [:error] [pid 63098:tid 63116] [client 20.205.113.164:14127] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aVfB_sez9k78gUs48kpelgAAAAk"]
[Fri Jan 02 21:02:54.416905 2026] [:error] [pid 29316:tid 29318] [client 20.205.113.164:14182] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aVfB_tfT9ty-7jZmgf-uUgAAAQA"]
[Fri Jan 02 21:02:54.654488 2026] [:error] [pid 63208:tid 63225] [client 20.205.113.164:14188] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aVfB_nKLI9INGPLzfndHbwAAAM4"]
[Fri Jan 02 21:02:54.897686 2026] [:error] [pid 29316:tid 29324] [client 20.205.113.164:14189] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aVfB_tfT9ty-7jZmgf-uUwAAAQY"]
[Fri Jan 02 21:02:55.136803 2026] [:error] [pid 63099:tid 63137] [client 20.205.113.164:14177] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aVfB_8mCZokRPYUhzvi9lwAAAEM"]
[Fri Jan 02 21:02:55.377499 2026] [:error] [pid 63099:tid 63144] [client 20.205.113.164:13966] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aVfB_8mCZokRPYUhzvi9mAAAAEo"]
[Fri Jan 02 21:02:55.645132 2026] [:error] [pid 50186:tid 50189] [client 20.205.113.164:14253] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aVfB_1XqK_iX4f-S70J2ygAAAYE"]
[Fri Jan 02 21:02:55.886617 2026] [:error] [pid 50186:tid 50205] [client 20.205.113.164:14146] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aVfB_1XqK_iX4f-S70J2zAAAAZE"]
[Fri Jan 02 21:02:56.148864 2026] [:error] [pid 50186:tid 50211] [client 20.205.113.164:14114] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aVfCAFXqK_iX4f-S70J2zgAAAZc"]
[Fri Jan 02 21:02:56.382216 2026] [:error] [pid 63208:tid 63220] [client 20.205.113.164:14250] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aVfCAHKLI9INGPLzfndHcwAAAMk"]
[Fri Jan 02 21:02:56.618011 2026] [:error] [pid 63098:tid 63123] [client 20.205.113.164:14047] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aVfCAMez9k78gUs48kpenQAAABA"]
[Fri Jan 02 21:02:56.868925 2026] [:error] [pid 50186:tid 50209] [client 20.205.113.164:14084] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aVfCAFXqK_iX4f-S70J20AAAAZU"]
[Fri Jan 02 21:02:57.124091 2026] [:error] [pid 50186:tid 50210] [client 20.205.113.164:14211] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aVfCAVXqK_iX4f-S70J20gAAAZY"]
[Fri Jan 02 21:02:57.371788 2026] [:error] [pid 50186:tid 50201] [client 20.205.113.164:14209] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aVfCAVXqK_iX4f-S70J21wAAAY0"]
[Fri Jan 02 21:02:57.605349 2026] [:error] [pid 50186:tid 50199] [client 20.205.113.164:14095] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVfCAVXqK_iX4f-S70J22QAAAYs"]
[Fri Jan 02 21:02:57.845190 2026] [:error] [pid 50186:tid 50190] [client 20.205.113.164:14096] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVfCAVXqK_iX4f-S70J23QAAAYI"]
[Fri Jan 02 21:02:58.093905 2026] [:error] [pid 63098:tid 63112] [client 20.205.113.164:14223] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVfCAsez9k78gUs48kpengAAAAU"]
[Fri Jan 02 21:02:58.329320 2026] [:error] [pid 63099:tid 63146] [client 20.205.113.164:14255] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVfCAsmCZokRPYUhzvi9ngAAAEw"]
[Fri Jan 02 21:02:58.567712 2026] [:error] [pid 63098:tid 63125] [client 20.205.113.164:14193] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aVfCAsez9k78gUs48kpeoAAAABI"]
[Fri Jan 02 21:02:58.839067 2026] [:error] [pid 63208:tid 63226] [client 20.205.113.164:14243] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aVfCAnKLI9INGPLzfndHeAAAAM8"]
[Fri Jan 02 21:02:59.081133 2026] [:error] [pid 63098:tid 63126] [client 20.205.113.164:14204] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aVfCA8ez9k78gUs48kpepgAAABM"]
[Fri Jan 02 21:02:59.322688 2026] [:error] [pid 63208:tid 63214] [client 20.205.113.164:14102] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aVfCA3KLI9INGPLzfndHegAAAMM"]
[Fri Jan 02 21:02:59.555310 2026] [:error] [pid 50186:tid 50196] [client 20.205.113.164:14181] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVfCA1XqK_iX4f-S70J25AAAAYg"]
[Fri Jan 02 21:02:59.803896 2026] [:error] [pid 50186:tid 50203] [client 20.205.113.164:14055] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVfCA1XqK_iX4f-S70J25QAAAY8"]
[Fri Jan 02 21:03:00.114485 2026] [:error] [pid 63208:tid 63224] [client 20.205.113.164:14022] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVfCBHKLI9INGPLzfndHfgAAAM0"]
[Fri Jan 02 21:03:00.350510 2026] [:error] [pid 43358:tid 43370] [client 20.205.113.164:14098] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVfCBAncbHK9auzvrA9XbgAAAco"]
[Fri Jan 02 21:03:00.612017 2026] [:error] [pid 63099:tid 63155] [client 20.205.113.164:16956] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aVfCBMmCZokRPYUhzvi9ogAAAFU"]
[Fri Jan 02 21:03:00.848170 2026] [:error] [pid 29316:tid 29321] [client 20.205.113.164:14185] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aVfCBNfT9ty-7jZmgf-uVAAAAQM"]
[Fri Jan 02 21:03:01.105928 2026] [:error] [pid 29316:tid 29330] [client 20.205.113.164:14035] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aVfCBdfT9ty-7jZmgf-uVgAAAQw"]
[Fri Jan 02 21:03:01.352678 2026] [:error] [pid 63098:tid 63114] [client 20.205.113.164:14258] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aVfCBcez9k78gUs48kpeqQAAAAc"]
[Fri Jan 02 21:03:01.586762 2026] [:error] [pid 29316:tid 29328] [client 20.205.113.164:14118] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aVfCBdfT9ty-7jZmgf-uWgAAAQo"]
[Fri Jan 02 21:03:01.841630 2026] [:error] [pid 29316:tid 29326] [client 20.205.113.164:14122] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aVfCBdfT9ty-7jZmgf-uWwAAAQg"]
[Fri Jan 02 21:03:02.085817 2026] [:error] [pid 63100:tid 63172] [client 20.205.113.164:14169] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aVfCBjuUXUKd3KTnKl9PPQAAAIs"]
[Fri Jan 02 21:03:02.328479 2026] [:error] [pid 63099:tid 63150] [client 20.205.113.164:14179] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/go.php"] [unique_id "aVfCBsmCZokRPYUhzvi9pAAAAFA"]
[Fri Jan 02 21:03:02.565668 2026] [:error] [pid 63208:tid 63229] [client 20.205.113.164:14191] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aVfCBnKLI9INGPLzfndHiAAAANI"]
[Fri Jan 02 21:03:02.838161 2026] [:error] [pid 63100:tid 63170] [client 20.205.113.164:14093] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aVfCBjuUXUKd3KTnKl9PPwAAAIk"]
[Fri Jan 02 21:03:03.101621 2026] [:error] [pid 63100:tid 63176] [client 20.205.113.164:14137] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aVfCBzuUXUKd3KTnKl9PQAAAAI8"]
[Fri Jan 02 21:03:03.339518 2026] [:error] [pid 63208:tid 63223] [client 20.205.113.164:13995] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aVfCB3KLI9INGPLzfndHiwAAAMw"]
[Fri Jan 02 21:03:03.576806 2026] [:error] [pid 63100:tid 63175] [client 20.205.113.164:14028] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aVfCBzuUXUKd3KTnKl9PRgAAAI4"]
[Fri Jan 02 21:03:03.816387 2026] [:error] [pid 63100:tid 63173] [client 20.205.113.164:14129] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aVfCBzuUXUKd3KTnKl9PSgAAAIw"]
[Fri Jan 02 21:03:04.075645 2026] [:error] [pid 63100:tid 63185] [client 20.205.113.164:14120] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aVfCCDuUXUKd3KTnKl9PUAAAAJg"]
[Fri Jan 02 21:03:04.314684 2026] [:error] [pid 63208:tid 63214] [client 20.205.113.164:14121] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aVfCCHKLI9INGPLzfndHjAAAAMM"]
[Fri Jan 02 21:03:04.551942 2026] [:error] [pid 29316:tid 29329] [client 20.205.113.164:14178] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aVfCCNfT9ty-7jZmgf-uXgAAAQs"]
[Fri Jan 02 21:03:04.790226 2026] [:error] [pid 29316:tid 29333] [client 20.205.113.164:14236] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aVfCCNfT9ty-7jZmgf-uYQAAAQ8"]
[Fri Jan 02 21:03:05.051288 2026] [:error] [pid 63100:tid 63162] [client 20.205.113.164:14148] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aVfCCTuUXUKd3KTnKl9PUwAAAIE"]
[Fri Jan 02 21:03:05.285424 2026] [:error] [pid 63100:tid 63167] [client 20.205.113.164:14186] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aVfCCTuUXUKd3KTnKl9PVAAAAIY"]
[Fri Jan 02 21:03:05.524464 2026] [:error] [pid 63098:tid 63112] [client 20.205.113.164:14270] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aVfCCcez9k78gUs48kperQAAAAU"]
[Fri Jan 02 21:03:05.767782 2026] [:error] [pid 63099:tid 63140] [client 20.205.113.164:14256] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aVfCCcmCZokRPYUhzvi9qgAAAEY"]
[Fri Jan 02 21:03:06.023149 2026] [:error] [pid 29316:tid 29334] [client 20.205.113.164:14286] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aVfCCtfT9ty-7jZmgf-uZgAAARA"]
[Fri Jan 02 21:03:06.257409 2026] [:error] [pid 29316:tid 29339] [client 20.205.113.164:14143] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aVfCCtfT9ty-7jZmgf-uaAAAARU"]
[Fri Jan 02 21:03:06.501632 2026] [:error] [pid 63099:tid 63153] [client 20.205.113.164:14266] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aVfCCsmCZokRPYUhzvi9rQAAAFM"]
[Fri Jan 02 21:03:06.748852 2026] [:error] [pid 63099:tid 63142] [client 20.205.113.164:13976] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aVfCCsmCZokRPYUhzvi9rwAAAEg"]
[Fri Jan 02 21:03:06.980953 2026] [:error] [pid 50046:tid 50055] [client 20.205.113.164:14288] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aVfCCizv7fgIiwkQYNCvRQAAAUc"]
[Fri Jan 02 21:03:07.217052 2026] [:error] [pid 63098:tid 63125] [client 20.205.113.164:14124] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asas.php"] [unique_id "aVfCC8ez9k78gUs48kperwAAABI"]
[Fri Jan 02 21:03:07.450351 2026] [:error] [pid 29316:tid 29328] [client 20.205.113.164:14103] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfCC9fT9ty-7jZmgf-ubgAAAQo"]
[Fri Jan 02 21:03:07.687955 2026] [:error] [pid 63100:tid 63166] [client 20.205.113.164:14187] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfCCzuUXUKd3KTnKl9PVwAAAIU"]
[Fri Jan 02 21:03:07.924891 2026] [:error] [pid 29316:tid 29327] [client 20.205.113.164:14199] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfCC9fT9ty-7jZmgf-ucQAAAQk"]
[Fri Jan 02 21:03:08.164066 2026] [:error] [pid 29316:tid 29341] [client 20.205.113.164:14023] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfCDNfT9ty-7jZmgf-ucgAAARc"]
[Fri Jan 02 21:03:08.423614 2026] [:error] [pid 29316:tid 29319] [client 20.205.113.164:14330] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aVfCDNfT9ty-7jZmgf-udAAAAQE"]
[Fri Jan 02 21:03:08.669099 2026] [:error] [pid 63098:tid 63107] [client 20.205.113.164:14198] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aVfCDMez9k78gUs48kpetAAAAAA"]
[Fri Jan 02 21:03:08.910842 2026] [:error] [pid 63100:tid 63180] [client 20.205.113.164:13958] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aVfCDDuUXUKd3KTnKl9PWgAAAJM"]
[Fri Jan 02 21:03:09.143703 2026] [:error] [pid 50046:tid 50054] [client 20.205.113.164:14133] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aVfCDSzv7fgIiwkQYNCvSAAAAUY"]
[Fri Jan 02 21:03:09.379954 2026] [:error] [pid 29316:tid 29322] [client 20.205.113.164:14201] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aVfCDdfT9ty-7jZmgf-uegAAAQQ"]
[Fri Jan 02 21:03:09.626180 2026] [:error] [pid 63098:tid 63108] [client 20.205.113.164:14126] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aVfCDcez9k78gUs48kpetQAAAAE"]
[Fri Jan 02 21:03:09.861567 2026] [:error] [pid 63098:tid 63131] [client 20.205.113.164:14072] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aVfCDcez9k78gUs48kpeuAAAABg"]
[Fri Jan 02 21:03:10.140422 2026] [:error] [pid 29316:tid 29342] [client 20.205.113.164:14119] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aVfCDtfT9ty-7jZmgf-ufQAAARg"]
[Fri Jan 02 21:03:10.383122 2026] [:error] [pid 63098:tid 63117] [client 20.205.113.164:14173] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aVfCDsez9k78gUs48kpeuwAAAAo"]
[Fri Jan 02 21:03:10.618963 2026] [:error] [pid 29316:tid 29338] [client 20.205.113.164:14116] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aVfCDtfT9ty-7jZmgf-ugQAAARQ"]
[Fri Jan 02 21:03:10.871878 2026] [:error] [pid 29316:tid 29323] [client 20.205.113.164:14062] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aVfCDtfT9ty-7jZmgf-uggAAAQU"]
[Fri Jan 02 21:03:11.144494 2026] [:error] [pid 50046:tid 50057] [client 20.205.113.164:14131] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aVfCDyzv7fgIiwkQYNCvSwAAAUk"]
[Fri Jan 02 21:03:11.403278 2026] [:error] [pid 29316:tid 29329] [client 20.205.113.164:14172] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aVfCD9fT9ty-7jZmgf-uhQAAAQs"]
[Fri Jan 02 21:03:11.685620 2026] [:error] [pid 63098:tid 63121] [client 20.205.113.164:14128] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aVfCD8ez9k78gUs48kpevwAAAA4"]
[Fri Jan 02 21:03:11.999800 2026] [:error] [pid 50046:tid 50059] [client 20.205.113.164:14107] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aVfCDyzv7fgIiwkQYNCvTAAAAUs"]
[Fri Jan 02 21:03:12.318479 2026] [:error] [pid 29316:tid 29325] [client 20.205.113.164:14145] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aVfCENfT9ty-7jZmgf-uiQAAAQc"]
[Fri Jan 02 21:03:12.678292 2026] [:error] [pid 29316:tid 29331] [client 20.205.113.164:14040] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aVfCENfT9ty-7jZmgf-ujAAAAQ0"]
[Fri Jan 02 21:03:13.030103 2026] [:error] [pid 29316:tid 29330] [client 20.205.113.164:14027] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aVfCEdfT9ty-7jZmgf-ujgAAAQw"]
[Fri Jan 02 21:03:13.820491 2026] [:error] [pid 50046:tid 50068] [client 20.205.113.164:14016] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aVfCESzv7fgIiwkQYNCvTgAAAVQ"]
[Fri Jan 02 21:03:14.181245 2026] [:error] [pid 63100:tid 63179] [client 20.205.113.164:14091] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aVfCEjuUXUKd3KTnKl9PYQAAAJI"]
[Fri Jan 02 21:03:14.493662 2026] [:error] [pid 50046:tid 50065] [client 20.205.113.164:14157] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "aVfCEizv7fgIiwkQYNCvUQAAAVE"]
[Fri Jan 02 21:03:14.777971 2026] [:error] [pid 63098:tid 63129] [client 20.205.113.164:16995] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "aVfCEsez9k78gUs48kpexQAAABY"]
[Fri Jan 02 21:03:15.013297 2026] [:error] [pid 63100:tid 63172] [client 20.205.113.164:14159] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "aVfCEzuUXUKd3KTnKl9PYwAAAIs"]
[Fri Jan 02 21:03:15.256506 2026] [:error] [pid 63100:tid 63170] [client 20.205.113.164:14140] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "aVfCEzuUXUKd3KTnKl9PZAAAAIk"]
[Fri Jan 02 21:03:15.488623 2026] [:error] [pid 63208:tid 63217] [client 20.205.113.164:13962] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aVfCE3KLI9INGPLzfndHlQAAAMY"]
[Fri Jan 02 21:03:15.722798 2026] [:error] [pid 63100:tid 63176] [client 20.205.113.164:13978] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aVfCEzuUXUKd3KTnKl9PZQAAAI8"]
[Fri Jan 02 21:03:15.970582 2026] [:error] [pid 29316:tid 29332] [client 20.205.113.164:14142] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aVfCE9fT9ty-7jZmgf-ukQAAAQ4"]
[Fri Jan 02 21:03:16.214385 2026] [:error] [pid 29316:tid 29335] [client 20.205.113.164:14031] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aVfCFNfT9ty-7jZmgf-ukgAAARE"]
[Fri Jan 02 21:03:16.466067 2026] [:error] [pid 63099:tid 63155] [client 20.205.113.164:16992] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aVfCFMmCZokRPYUhzvi9sgAAAFU"]
[Fri Jan 02 21:03:16.715815 2026] [:error] [pid 63099:tid 63135] [client 20.205.113.164:14037] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aVfCFMmCZokRPYUhzvi9swAAAEE"]
[Fri Jan 02 21:03:16.969177 2026] [:error] [pid 63208:tid 63228] [client 20.205.113.164:13894] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aVfCFHKLI9INGPLzfndHlgAAANE"]
[Fri Jan 02 21:03:17.211221 2026] [:error] [pid 63099:tid 63149] [client 20.205.113.164:14090] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aVfCFcmCZokRPYUhzvi9tAAAAE8"]
[Fri Jan 02 21:03:17.492037 2026] [:error] [pid 29316:tid 29326] [client 20.205.113.164:14112] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aVfCFdfT9ty-7jZmgf-ukwAAAQg"]
[Fri Jan 02 21:03:17.742911 2026] [:error] [pid 63100:tid 63163] [client 20.205.113.164:14046] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aVfCFTuUXUKd3KTnKl9PaAAAAII"]
[Fri Jan 02 21:03:17.976365 2026] [:error] [pid 29316:tid 29327] [client 20.205.113.164:14101] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aVfCFdfT9ty-7jZmgf-ulgAAAQk"]
[Fri Jan 02 21:03:18.210462 2026] [:error] [pid 63100:tid 63175] [client 20.205.113.164:14250] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aVfCFjuUXUKd3KTnKl9PaQAAAI4"]
[Fri Jan 02 21:03:18.456822 2026] [:error] [pid 63100:tid 63166] [client 20.205.113.164:14234] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aVfCFjuUXUKd3KTnKl9PagAAAIU"]
[Fri Jan 02 21:03:18.714220 2026] [:error] [pid 29316:tid 29341] [client 20.205.113.164:14085] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aVfCFtfT9ty-7jZmgf-umAAAARc"]
[Fri Jan 02 21:03:18.966441 2026] [:error] [pid 50046:tid 50053] [client 20.205.113.164:14113] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aVfCFizv7fgIiwkQYNCvVQAAAUU"]
[Fri Jan 02 21:03:19.241824 2026] [:error] [pid 63100:tid 63173] [client 20.205.113.164:14160] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/321.php"] [unique_id "aVfCFzuUXUKd3KTnKl9PbAAAAIw"]
[Fri Jan 02 21:03:19.506439 2026] [:error] [pid 63100:tid 63171] [client 20.205.113.164:14183] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVfCFzuUXUKd3KTnKl9PbQAAAIo"]
[Fri Jan 02 21:03:19.786110 2026] [:error] [pid 43358:tid 43362] [client 20.205.113.164:14078] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVfCFwncbHK9auzvrA9XcgAAAcI"]
[Fri Jan 02 21:03:20.042013 2026] [:error] [pid 50186:tid 50206] [client 20.205.113.164:14138] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVfCGFXqK_iX4f-S70J28AAAAZI"]
[Fri Jan 02 21:03:20.326222 2026] [:error] [pid 63099:tid 63145] [client 20.205.113.164:14029] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVfCGMmCZokRPYUhzvi9uQAAAEs"]
[Fri Jan 02 21:03:20.599094 2026] [:error] [pid 63208:tid 63233] [client 20.205.113.164:14192] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfCGHKLI9INGPLzfndHmQAAANY"]
[Fri Jan 02 21:03:20.887547 2026] [:error] [pid 63098:tid 63108] [client 20.205.113.164:14041] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfCGMez9k78gUs48kpexgAAAAE"]
[Fri Jan 02 21:03:21.184780 2026] [:error] [pid 63208:tid 63223] [client 20.205.113.164:14141] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfCGXKLI9INGPLzfndHmgAAAMw"]
[Fri Jan 02 21:03:21.465308 2026] [:error] [pid 63098:tid 63109] [client 20.205.113.164:14111] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfCGcez9k78gUs48kpeyAAAAAI"]
[Fri Jan 02 21:03:21.732966 2026] [:error] [pid 63098:tid 63116] [client 20.205.113.164:14021] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aVfCGcez9k78gUs48kpeyQAAAAk"]
[Fri Jan 02 21:03:22.007093 2026] [:error] [pid 63098:tid 63128] [client 20.205.113.164:14275] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aVfCGsez9k78gUs48kpeywAAABU"]
[Fri Jan 02 21:03:22.315375 2026] [:error] [pid 29316:tid 29332] [client 20.205.113.164:14063] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aVfCGtfT9ty-7jZmgf-unwAAAQ4"]
[Fri Jan 02 21:03:22.630845 2026] [:error] [pid 63208:tid 63224] [client 20.205.113.164:14065] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/al.php"] [unique_id "aVfCGnKLI9INGPLzfndHngAAAM0"]
[Fri Jan 02 21:03:22.864390 2026] [:error] [pid 29316:tid 29326] [client 20.205.113.164:14018] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVfCGtfT9ty-7jZmgf-uoQAAAQg"]
[Fri Jan 02 21:03:23.098543 2026] [:error] [pid 63208:tid 63234] [client 20.205.113.164:14026] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVfCG3KLI9INGPLzfndHnwAAANc"]
[Fri Jan 02 21:03:23.341025 2026] [:error] [pid 63208:tid 63230] [client 20.205.113.164:14074] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVfCG3KLI9INGPLzfndHoAAAANM"]
[Fri Jan 02 21:03:23.605466 2026] [:error] [pid 29316:tid 29338] [client 20.205.113.164:14104] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVfCG9fT9ty-7jZmgf-upAAAARQ"]
[Fri Jan 02 21:03:23.870126 2026] [:error] [pid 63208:tid 63211] [client 20.205.113.164:14048] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aVfCG3KLI9INGPLzfndHoQAAAMA"]
[Fri Jan 02 21:03:24.107364 2026] [:error] [pid 63208:tid 63219] [client 20.205.113.164:14097] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aVfCHHKLI9INGPLzfndHogAAAMg"]
[Fri Jan 02 21:03:24.344050 2026] [:error] [pid 63208:tid 63220] [client 20.205.113.164:14210] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aVfCHHKLI9INGPLzfndHowAAAMk"]
[Fri Jan 02 21:03:24.594670 2026] [:error] [pid 63208:tid 63215] [client 20.205.113.164:14110] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aVfCHHKLI9INGPLzfndHpAAAAMQ"]
[Fri Jan 02 21:03:24.863349 2026] [:error] [pid 63208:tid 63213] [client 20.205.113.164:14036] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aVfCHHKLI9INGPLzfndHpQAAAMI"]
[Fri Jan 02 21:03:25.171280 2026] [:error] [pid 63208:tid 63217] [client 20.205.113.164:14017] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aVfCHXKLI9INGPLzfndHpgAAAMY"]
[Fri Jan 02 21:03:25.478847 2026] [:error] [pid 63098:tid 63124] [client 20.205.113.164:14180] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aVfCHcez9k78gUs48kpezgAAABE"]
[Fri Jan 02 21:03:25.774993 2026] [:error] [pid 63208:tid 63227] [client 20.205.113.164:13997] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aVfCHXKLI9INGPLzfndHqgAAANA"]
[Fri Jan 02 21:03:26.091056 2026] [:error] [pid 29316:tid 29333] [client 20.205.113.164:13954] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aVfCHtfT9ty-7jZmgf-upwAAAQ8"]
[Fri Jan 02 21:03:27.441884 2026] [:error] [pid 29316:tid 29330] [client 20.205.113.164:14197] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aVfCH9fT9ty-7jZmgf-urAAAAQw"]
[Fri Jan 02 21:03:27.760397 2026] [:error] [pid 63208:tid 63231] [client 20.205.113.164:14184] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aVfCH3KLI9INGPLzfndHrAAAANQ"]
[Fri Jan 02 21:03:28.078158 2026] [:error] [pid 63098:tid 63125] [client 20.205.113.164:13901] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aVfCIMez9k78gUs48kpe0gAAABI"]
[Fri Jan 02 21:03:28.394365 2026] [:error] [pid 29316:tid 29339] [client 20.205.113.164:14069] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aVfCINfT9ty-7jZmgf-urgAAARU"]
[Fri Jan 02 21:03:28.727624 2026] [:error] [pid 63099:tid 63146] [client 20.205.113.164:14200] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aVfCIMmCZokRPYUhzvi9vAAAAEw"]
[Fri Jan 02 21:03:29.066298 2026] [:error] [pid 63098:tid 63118] [client 20.205.113.164:13952] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aVfCIcez9k78gUs48kpe1AAAAAs"]
[Fri Jan 02 21:03:29.369244 2026] [:error] [pid 63098:tid 63107] [client 20.205.113.164:14088] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aVfCIcez9k78gUs48kpe1gAAAAA"]
[Fri Jan 02 21:03:29.691267 2026] [:error] [pid 29316:tid 29332] [client 20.205.113.164:14155] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aVfCIdfT9ty-7jZmgf-urwAAAQ4"]
[Fri Jan 02 21:03:29.988048 2026] [:error] [pid 50046:tid 50060] [client 20.205.113.164:14068] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aVfCISzv7fgIiwkQYNCvWgAAAUw"]
[Fri Jan 02 21:03:30.333157 2026] [:error] [pid 63099:tid 63148] [client 20.205.113.164:13970] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aVfCIsmCZokRPYUhzvi9wAAAAE4"]
[Fri Jan 02 21:03:30.650784 2026] [:error] [pid 63098:tid 63108] [client 20.205.113.164:14003] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aVfCIsez9k78gUs48kpe1wAAAAE"]
[Fri Jan 02 21:03:30.961186 2026] [:error] [pid 50046:tid 50059] [client 20.205.113.164:14064] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aVfCIizv7fgIiwkQYNCvXQAAAUs"]
[Fri Jan 02 21:03:31.276186 2026] [:error] [pid 63098:tid 63109] [client 20.205.113.164:14019] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aVfCI8ez9k78gUs48kpe2AAAAAI"]
[Fri Jan 02 21:03:31.586354 2026] [:error] [pid 63098:tid 63128] [client 20.205.113.164:13920] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aVfCI8ez9k78gUs48kpe2gAAABU"]
[Fri Jan 02 21:03:31.876813 2026] [:error] [pid 63098:tid 63126] [client 20.205.113.164:14015] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c.php"] [unique_id "aVfCI8ez9k78gUs48kpe3AAAABM"]
[Fri Jan 02 21:03:32.160861 2026] [:error] [pid 63098:tid 63120] [client 20.205.113.164:14044] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aVfCJMez9k78gUs48kpe3QAAAA0"]
[Fri Jan 02 21:03:32.455665 2026] [:error] [pid 63099:tid 63156] [client 20.205.113.164:14196] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aVfCJMmCZokRPYUhzvi9xQAAAFY"]
[Fri Jan 02 21:03:32.770868 2026] [:error] [pid 63098:tid 63122] [client 20.205.113.164:14106] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aVfCJMez9k78gUs48kpe3wAAAA8"]
[Fri Jan 02 21:03:33.096044 2026] [:error] [pid 50186:tid 50196] [client 20.205.113.164:13983] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xo.php"] [unique_id "aVfCJVXqK_iX4f-S70J29AAAAYg"]
[Fri Jan 02 21:03:33.404266 2026] [:error] [pid 63098:tid 63110] [client 20.205.113.164:14016] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aVfCJcez9k78gUs48kpe4AAAAAM"]
[Fri Jan 02 21:03:33.695969 2026] [:error] [pid 50186:tid 50192] [client 20.205.113.164:13915] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aVfCJVXqK_iX4f-S70J29gAAAYQ"]
[Fri Jan 02 21:03:33.990087 2026] [:error] [pid 43358:tid 43372] [client 20.205.113.164:14135] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aVfCJQncbHK9auzvrA9XdQAAAcw"]
[Fri Jan 02 21:03:34.271763 2026] [:error] [pid 43358:tid 43374] [client 20.205.113.164:14134] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dlu.php"] [unique_id "aVfCJgncbHK9auzvrA9XdgAAAc4"]
[Fri Jan 02 21:03:34.550883 2026] [:error] [pid 63208:tid 63234] [client 20.205.113.164:14075] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aVfCJnKLI9INGPLzfndHsQAAANc"]
[Fri Jan 02 21:03:34.791402 2026] [:error] [pid 43358:tid 43384] [client 20.205.113.164:13993] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aVfCJgncbHK9auzvrA9XegAAAdg"]
[Fri Jan 02 21:03:35.024477 2026] [:error] [pid 50046:tid 50070] [client 20.205.113.164:14082] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aVfCJyzv7fgIiwkQYNCvXwAAAVY"]
[Fri Jan 02 21:03:35.262660 2026] [:error] [pid 63099:tid 63157] [client 20.205.113.164:14125] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rk2.php"] [unique_id "aVfCJ8mCZokRPYUhzvi9yQAAAFc"]
[Fri Jan 02 21:03:35.496267 2026] [:error] [pid 63100:tid 63178] [client 20.205.113.164:14086] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aVfCJzuUXUKd3KTnKl9PcQAAAJE"]
[Fri Jan 02 21:03:35.748415 2026] [:error] [pid 63100:tid 63179] [client 20.205.113.164:14042] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aVfCJzuUXUKd3KTnKl9PcgAAAJI"]
[Fri Jan 02 21:03:36.002374 2026] [:error] [pid 50186:tid 50204] [client 20.205.113.164:13971] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aVfCKFXqK_iX4f-S70J2-QAAAZA"]
[Fri Jan 02 21:03:36.236142 2026] [:error] [pid 50046:tid 50063] [client 20.205.113.164:13953] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aVfCKCzv7fgIiwkQYNCvYQAAAU8"]
[Fri Jan 02 21:03:36.473839 2026] [:error] [pid 50186:tid 50200] [client 20.205.113.164:14148] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aVfCKFXqK_iX4f-S70J2-wAAAYw"]
[Fri Jan 02 21:03:36.709070 2026] [:error] [pid 50046:tid 50062] [client 20.205.113.164:14117] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aVfCKCzv7fgIiwkQYNCvYgAAAU4"]
[Fri Jan 02 21:03:36.950179 2026] [:error] [pid 50186:tid 50189] [client 20.205.113.164:13982] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aVfCKFXqK_iX4f-S70J2_AAAAYE"]
[Fri Jan 02 21:03:37.191426 2026] [:error] [pid 50046:tid 50053] [client 20.205.113.164:13979] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aVfCKSzv7fgIiwkQYNCvZAAAAUU"]
[Fri Jan 02 21:03:37.431872 2026] [:error] [pid 50186:tid 50205] [client 20.205.113.164:14130] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aVfCKVXqK_iX4f-S70J2_wAAAZE"]
[Fri Jan 02 21:03:37.665061 2026] [:error] [pid 50186:tid 50206] [client 20.205.113.164:14203] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aVfCKVXqK_iX4f-S70J3AAAAAZI"]
[Fri Jan 02 21:03:37.921696 2026] [:error] [pid 63100:tid 63168] [client 20.205.113.164:14053] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aVfCKTuUXUKd3KTnKl9PdAAAAIc"]
[Fri Jan 02 21:04:10.301636 2026] [:error] [pid 63099:tid 63145] [client 20.205.113.164:14105] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aVfCSsmCZokRPYUhzvi96gAAAEs"]
[Fri Jan 02 21:04:10.538643 2026] [:error] [pid 63208:tid 63219] [client 20.205.113.164:16983] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aVfCSnKLI9INGPLzfndHwAAAAMg"]
[Fri Jan 02 21:04:10.781859 2026] [:error] [pid 63098:tid 63110] [client 20.205.113.164:14050] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aVfCSsez9k78gUs48kpfAAAAAAM"]
[Fri Jan 02 21:04:11.039874 2026] [:error] [pid 50186:tid 50192] [client 20.205.113.164:13899] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "aVfCS1XqK_iX4f-S70J3QQAAAYQ"]
[Fri Jan 02 21:04:11.285379 2026] [:error] [pid 63100:tid 63184] [client 20.205.113.164:14004] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aVfCSzuUXUKd3KTnKl9PhwAAAJc"]
[Fri Jan 02 21:04:11.529252 2026] [:error] [pid 50186:tid 50190] [client 20.205.113.164:13955] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aVfCS1XqK_iX4f-S70J3QwAAAYI"]
[Fri Jan 02 21:04:11.767899 2026] [:error] [pid 50186:tid 50195] [client 20.205.113.164:14038] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aVfCS1XqK_iX4f-S70J3RgAAAYc"]
[Fri Jan 02 21:04:12.001433 2026] [:error] [pid 63100:tid 63181] [client 20.205.113.164:13910] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "aVfCTDuUXUKd3KTnKl9PiAAAAJQ"]
[Fri Jan 02 21:04:12.234037 2026] [:error] [pid 63100:tid 63185] [client 20.205.113.164:14059] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aVfCTDuUXUKd3KTnKl9PiQAAAJg"]
[Fri Jan 02 21:04:12.495683 2026] [:error] [pid 63208:tid 63235] [client 20.205.113.164:14045] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aVfCTHKLI9INGPLzfndHwwAAANg"]
[Fri Jan 02 21:04:12.752609 2026] [:error] [pid 63100:tid 63178] [client 20.205.113.164:13844] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aVfCTDuUXUKd3KTnKl9PjAAAAJE"]
[Fri Jan 02 21:04:13.000901 2026] [:error] [pid 63100:tid 63179] [client 20.205.113.164:14052] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aVfCTDuUXUKd3KTnKl9PjQAAAJI"]
[Fri Jan 02 21:04:13.234222 2026] [:error] [pid 29316:tid 29334] [client 20.205.113.164:14058] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aVfCTdfT9ty-7jZmgf-uzwAAARA"]
[Fri Jan 02 21:04:13.466820 2026] [:error] [pid 29316:tid 29318] [client 20.205.113.164:13967] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aVfCTdfT9ty-7jZmgf-u0AAAAQA"]
[Fri Jan 02 21:04:13.709796 2026] [:error] [pid 50046:tid 50061] [client 20.205.113.164:14099] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aVfCTSzv7fgIiwkQYNCvfgAAAU0"]
[Fri Jan 02 21:04:13.943007 2026] [:error] [pid 63208:tid 63232] [client 20.205.113.164:13973] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aVfCTXKLI9INGPLzfndHxQAAANU"]
[Fri Jan 02 21:04:14.175797 2026] [:error] [pid 63100:tid 63172] [client 20.205.113.164:14109] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aVfCTjuUXUKd3KTnKl9PjwAAAIs"]
[Fri Jan 02 21:04:14.449604 2026] [:error] [pid 63208:tid 63223] [client 20.205.113.164:13980] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aVfCTnKLI9INGPLzfndHyQAAAMw"]
[Fri Jan 02 21:04:14.687780 2026] [:error] [pid 50186:tid 50206] [client 20.205.113.164:14033] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aVfCTlXqK_iX4f-S70J3SQAAAZI"]
[Fri Jan 02 21:04:14.923400 2026] [:error] [pid 63098:tid 63113] [client 20.205.113.164:13974] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aVfCTsez9k78gUs48kpfAwAAAAY"]
[Fri Jan 02 21:04:15.165559 2026] [:error] [pid 63098:tid 63112] [client 20.205.113.164:13989] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aVfCT8ez9k78gUs48kpfBAAAAAU"]
[Fri Jan 02 21:04:15.399284 2026] [:error] [pid 50186:tid 50191] [client 20.205.113.164:14009] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aVfCT1XqK_iX4f-S70J3TAAAAYM"]
[Fri Jan 02 21:04:15.679051 2026] [:error] [pid 43358:tid 43373] [client 20.205.113.164:13991] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aVfCTwncbHK9auzvrA9XoQAAAc0"]
[Fri Jan 02 21:04:15.924969 2026] [:error] [pid 43358:tid 43375] [client 20.205.113.164:14020] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpc.php"] [unique_id "aVfCTwncbHK9auzvrA9XowAAAc8"]
[Fri Jan 02 21:04:16.159682 2026] [:error] [pid 29316:tid 29332] [client 20.205.113.164:13825] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aVfCUNfT9ty-7jZmgf-u0gAAAQ4"]
[Fri Jan 02 21:04:16.397040 2026] [:error] [pid 29316:tid 29323] [client 20.205.113.164:14071] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aVfCUNfT9ty-7jZmgf-u1AAAAQU"]
[Fri Jan 02 21:04:16.630139 2026] [:error] [pid 63098:tid 63121] [client 20.205.113.164:13902] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aVfCUMez9k78gUs48kpfBQAAAA4"]
[Fri Jan 02 21:04:16.871508 2026] [:error] [pid 50046:tid 50059] [client 20.205.113.164:14132] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aVfCUCzv7fgIiwkQYNCvhgAAAUs"]
[Fri Jan 02 21:04:17.110212 2026] [:error] [pid 50046:tid 50051] [client 20.205.113.164:14066] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aVfCUSzv7fgIiwkQYNCviAAAAUM"]
[Fri Jan 02 21:04:17.367713 2026] [:error] [pid 63100:tid 63180] [client 20.205.113.164:14100] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aVfCUTuUXUKd3KTnKl9PlwAAAJM"]
[Fri Jan 02 21:04:17.622231 2026] [:error] [pid 63098:tid 63130] [client 20.205.113.164:14049] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aVfCUcez9k78gUs48kpfBwAAABc"]
[Fri Jan 02 21:04:17.856313 2026] [:error] [pid 50186:tid 50210] [client 20.205.113.164:14175] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mlex.php"] [unique_id "aVfCUVXqK_iX4f-S70J3TgAAAZY"]
[Fri Jan 02 21:04:18.090663 2026] [:error] [pid 63098:tid 63115] [client 20.205.113.164:14039] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aVfCUsez9k78gUs48kpfCgAAAAg"]
[Fri Jan 02 21:04:18.333324 2026] [:error] [pid 63098:tid 63129] [client 20.205.113.164:14006] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aVfCUsez9k78gUs48kpfCwAAABY"]
[Fri Jan 02 21:04:18.589104 2026] [:error] [pid 63208:tid 63212] [client 20.205.113.164:14061] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aVfCUnKLI9INGPLzfndHzgAAAME"]
[Fri Jan 02 21:04:18.842493 2026] [:error] [pid 29316:tid 29321] [client 20.205.113.164:14070] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aVfCUtfT9ty-7jZmgf-u2AAAAQM"]
[Fri Jan 02 21:04:19.078024 2026] [:error] [pid 63100:tid 63181] [client 20.205.113.164:13937] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aVfCUzuUXUKd3KTnKl9PmQAAAJQ"]
[Fri Jan 02 21:04:19.312130 2026] [:error] [pid 63208:tid 63216] [client 20.205.113.164:13998] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aVfCU3KLI9INGPLzfndH0AAAAMU"]
[Fri Jan 02 21:04:19.550630 2026] [:error] [pid 63100:tid 63185] [client 20.205.113.164:13969] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aVfCUzuUXUKd3KTnKl9PmgAAAJg"]
[Fri Jan 02 21:04:19.789582 2026] [:error] [pid 63208:tid 63215] [client 20.205.113.164:13931] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aVfCU3KLI9INGPLzfndH0wAAAMQ"]
[Fri Jan 02 21:04:20.022329 2026] [:error] [pid 29316:tid 29337] [client 20.205.113.164:13999] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aVfCVNfT9ty-7jZmgf-u2QAAARM"]
[Fri Jan 02 21:04:20.271357 2026] [:error] [pid 50186:tid 50200] [client 20.205.113.164:13944] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aVfCVFXqK_iX4f-S70J3VwAAAYw"]
[Fri Jan 02 21:04:20.563060 2026] [:error] [pid 63099:tid 63146] [client 20.205.113.164:14089] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aVfCVMmCZokRPYUhzvi97gAAAEw"]
[Fri Jan 02 21:04:20.831723 2026] [:error] [pid 63099:tid 63158] [client 20.205.113.164:13959] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpvloi.php"] [unique_id "aVfCVMmCZokRPYUhzvi98QAAAFg"]
[Fri Jan 02 21:04:21.064914 2026] [:error] [pid 29316:tid 29328] [client 20.205.113.164:13890] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aVfCVdfT9ty-7jZmgf-u2wAAAQo"]
[Fri Jan 02 21:04:21.311511 2026] [:error] [pid 50186:tid 50194] [client 20.205.113.164:13895] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aVfCVVXqK_iX4f-S70J3WQAAAYY"]
[Fri Jan 02 21:04:21.572125 2026] [:error] [pid 29316:tid 29322] [client 20.205.113.164:13965] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aVfCVdfT9ty-7jZmgf-u3QAAAQQ"]
[Fri Jan 02 21:04:21.811224 2026] [:error] [pid 63099:tid 63147] [client 20.205.113.164:13897] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v1.php"] [unique_id "aVfCVcmCZokRPYUhzvi99QAAAE0"]
[Fri Jan 02 21:04:22.084345 2026] [:error] [pid 43358:tid 43384] [client 20.205.113.164:14077] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aVfCVgncbHK9auzvrA9XpwAAAdg"]
[Fri Jan 02 21:04:22.389238 2026] [:error] [pid 50186:tid 50198] [client 20.205.113.164:13992] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aVfCVlXqK_iX4f-S70J3XQAAAYo"]
[Fri Jan 02 21:04:22.726193 2026] [:error] [pid 63098:tid 63127] [client 20.205.113.164:13960] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aVfCVsez9k78gUs48kpfEQAAABQ"]
[Fri Jan 02 21:04:23.006705 2026] [:error] [pid 63098:tid 63110] [client 20.205.113.164:14011] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aVfCV8ez9k78gUs48kpfEwAAAAM"]
[Fri Jan 02 21:04:23.315487 2026] [:error] [pid 63208:tid 63232] [client 20.205.113.164:14001] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aVfCV3KLI9INGPLzfndH2QAAANU"]
[Fri Jan 02 21:04:23.620493 2026] [:error] [pid 50046:tid 50069] [client 20.205.113.164:13923] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aVfCVyzv7fgIiwkQYNCvkAAAAVU"]
[Fri Jan 02 21:04:23.940789 2026] [:error] [pid 63208:tid 63233] [client 20.205.113.164:13986] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aVfCV3KLI9INGPLzfndH2gAAANY"]
[Fri Jan 02 21:04:24.240495 2026] [:error] [pid 63208:tid 63231] [client 20.205.113.164:13916] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aVfCWHKLI9INGPLzfndH3QAAANQ"]
[Fri Jan 02 21:04:24.586934 2026] [:error] [pid 63099:tid 63140] [client 20.205.113.164:14073] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aVfCWMmCZokRPYUhzvi9_QAAAEY"]
[Fri Jan 02 21:04:24.918439 2026] [:error] [pid 63098:tid 63119] [client 20.205.113.164:13972] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aVfCWMez9k78gUs48kpfGQAAAAw"]
[Fri Jan 02 21:04:25.225638 2026] [:error] [pid 63099:tid 63158] [client 20.205.113.164:13963] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aVfCWcmCZokRPYUhzvi-AQAAAFg"]
[Fri Jan 02 21:04:25.540434 2026] [:error] [pid 63098:tid 63115] [client 20.205.113.164:14025] [client 20.205.113.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/angelV2.php"] [unique_id "aVfCWcez9k78gUs48kpfGwAAAAg"]
[Fri Jan 02 21:50:26.333644 2026] [autoindex:error] [pid 43358:tid 43367] [client 161.35.183.115:51840] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 02 22:01:22.132892 2026] [:error] [pid 63098:tid 63130] [client 20.42.209.194:22803] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oo.php"] [unique_id "aVfPssez9k78gUs48kpwowAAABc"]
[Fri Jan 02 22:01:22.251977 2026] [:error] [pid 29316:tid 29329] [client 20.42.209.194:16901] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oo.php"] [unique_id "aVfPstfT9ty-7jZmgf-8xAAAAQs"]
[Fri Jan 02 22:01:22.306231 2026] [:error] [pid 50046:tid 50054] [client 20.42.209.194:22815] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oo.php"] [unique_id "aVfPsizv7fgIiwkQYNC5AAAAAUY"]
[Fri Jan 02 22:01:22.443606 2026] [:error] [pid 63208:tid 63214] [client 20.42.209.194:22831] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oo.php"] [unique_id "aVfPsnKLI9INGPLzfndQ8QAAAMM"]
[Fri Jan 02 22:01:22.489531 2026] [:error] [pid 29316:tid 29333] [client 20.42.209.194:22791] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s11.php"] [unique_id "aVfPstfT9ty-7jZmgf-8xQAAAQ8"]
[Fri Jan 02 22:01:22.533381 2026] [:error] [pid 63100:tid 63176] [client 20.42.209.194:16925] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s11.php"] [unique_id "aVfPsjuUXUKd3KTnKl9a3QAAAI8"]
[Fri Jan 02 22:01:22.770262 2026] [:error] [pid 63098:tid 63127] [client 20.42.209.194:16908] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s11.php"] [unique_id "aVfPssez9k78gUs48kpwpQAAABQ"]
[Fri Jan 02 22:01:22.926661 2026] [:error] [pid 50186:tid 50200] [client 20.42.209.194:22828] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s11.php"] [unique_id "aVfPslXqK_iX4f-S70KGXgAAAYw"]
[Fri Jan 02 22:01:23.040829 2026] [:error] [pid 63208:tid 63212] [client 20.42.209.194:22824] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dir.php"] [unique_id "aVfPs3KLI9INGPLzfndQ8wAAAME"]
[Fri Jan 02 22:01:23.171633 2026] [:error] [pid 63100:tid 63179] [client 20.42.209.194:22825] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dir.php"] [unique_id "aVfPszuUXUKd3KTnKl9a3gAAAJI"]
[Fri Jan 02 22:01:23.311741 2026] [:error] [pid 63100:tid 63173] [client 20.42.209.194:16911] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dir.php"] [unique_id "aVfPszuUXUKd3KTnKl9a3wAAAIw"]
[Fri Jan 02 22:01:23.652412 2026] [:error] [pid 50046:tid 50072] [client 20.42.209.194:22795] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dir.php"] [unique_id "aVfPsyzv7fgIiwkQYNC5AgAAAVg"]
[Fri Jan 02 22:01:24.051558 2026] [:error] [pid 43358:tid 43363] [client 20.42.209.194:22812] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aqw.php"] [unique_id "aVfPtAncbHK9auzvrA9i8AAAAcM"]
[Fri Jan 02 22:01:24.170387 2026] [:error] [pid 63099:tid 63142] [client 20.42.209.194:16933] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aqw.php"] [unique_id "aVfPtMmCZokRPYUhzvjHMwAAAEg"]
[Fri Jan 02 22:01:24.326565 2026] [:error] [pid 63099:tid 63136] [client 20.42.209.194:22837] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aqw.php"] [unique_id "aVfPtMmCZokRPYUhzvjHNAAAAEI"]
[Fri Jan 02 22:01:24.470917 2026] [:error] [pid 43358:tid 43380] [client 20.42.209.194:22814] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aqw.php"] [unique_id "aVfPtAncbHK9auzvrA9i8QAAAdQ"]
[Fri Jan 02 22:01:24.644877 2026] [:error] [pid 63099:tid 63148] [client 20.42.209.194:22797] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ca1.php"] [unique_id "aVfPtMmCZokRPYUhzvjHNQAAAE4"]
[Fri Jan 02 22:01:24.781516 2026] [:error] [pid 63100:tid 63168] [client 20.42.209.194:22806] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ca1.php"] [unique_id "aVfPtDuUXUKd3KTnKl9a5AAAAIc"]
[Fri Jan 02 22:01:25.002680 2026] [:error] [pid 29316:tid 29325] [client 20.42.209.194:16923] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ca1.php"] [unique_id "aVfPtdfT9ty-7jZmgf-8zgAAAQc"]
[Fri Jan 02 22:01:25.187888 2026] [:error] [pid 50186:tid 50201] [client 20.42.209.194:22810] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ca1.php"] [unique_id "aVfPtVXqK_iX4f-S70KGYQAAAY0"]
[Fri Jan 02 22:01:25.348670 2026] [:error] [pid 63099:tid 63140] [client 20.42.209.194:22819] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file51.php"] [unique_id "aVfPtcmCZokRPYUhzvjHNwAAAEY"]
[Fri Jan 02 22:01:25.429097 2026] [:error] [pid 63099:tid 63156] [client 20.42.209.194:16919] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file51.php"] [unique_id "aVfPtcmCZokRPYUhzvjHOAAAAFY"]
[Fri Jan 02 22:01:25.518156 2026] [:error] [pid 63099:tid 63139] [client 20.42.209.194:22844] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file51.php"] [unique_id "aVfPtcmCZokRPYUhzvjHOQAAAEU"]
[Fri Jan 02 22:01:25.638615 2026] [:error] [pid 50186:tid 50206] [client 20.42.209.194:16932] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file51.php"] [unique_id "aVfPtVXqK_iX4f-S70KGZAAAAZI"]
[Fri Jan 02 22:01:25.678547 2026] [:error] [pid 50186:tid 50203] [client 20.42.209.194:16910] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abouta.php"] [unique_id "aVfPtVXqK_iX4f-S70KGZQAAAY8"]
[Fri Jan 02 22:01:25.737509 2026] [:error] [pid 63098:tid 63107] [client 20.42.209.194:22800] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abouta.php"] [unique_id "aVfPtcez9k78gUs48kpwqgAAAAA"]
[Fri Jan 02 22:01:25.919622 2026] [:error] [pid 63098:tid 63108] [client 20.42.209.194:22822] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abouta.php"] [unique_id "aVfPtcez9k78gUs48kpwrAAAAAE"]
[Fri Jan 02 22:01:26.005205 2026] [:error] [pid 63098:tid 63131] [client 20.42.209.194:22835] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abouta.php"] [unique_id "aVfPtsez9k78gUs48kpwrQAAABg"]
[Fri Jan 02 22:01:26.067036 2026] [:error] [pid 63098:tid 63111] [client 20.42.209.194:16902] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fclas.php"] [unique_id "aVfPtsez9k78gUs48kpwrgAAAAQ"]
[Fri Jan 02 22:01:26.137653 2026] [:error] [pid 63098:tid 63118] [client 20.42.209.194:22843] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fclas.php"] [unique_id "aVfPtsez9k78gUs48kpwrwAAAAs"]
[Fri Jan 02 22:01:26.264946 2026] [:error] [pid 50186:tid 50195] [client 20.42.209.194:16931] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fclas.php"] [unique_id "aVfPtlXqK_iX4f-S70KGaAAAAYc"]
[Fri Jan 02 22:01:26.340639 2026] [:error] [pid 50186:tid 50193] [client 20.42.209.194:22842] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fclas.php"] [unique_id "aVfPtlXqK_iX4f-S70KGaQAAAYU"]
[Fri Jan 02 22:01:26.616137 2026] [:error] [pid 63098:tid 63122] [client 20.42.209.194:22816] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/File.php"] [unique_id "aVfPtsez9k78gUs48kpwsgAAAA8"]
[Fri Jan 02 22:01:26.683906 2026] [:error] [pid 63099:tid 63149] [client 20.42.209.194:16935] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/File.php"] [unique_id "aVfPtsmCZokRPYUhzvjHPAAAAE8"]
[Fri Jan 02 22:01:26.760642 2026] [:error] [pid 50186:tid 50188] [client 20.42.209.194:16950] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/File.php"] [unique_id "aVfPtlXqK_iX4f-S70KGawAAAYA"]
[Fri Jan 02 22:01:26.875076 2026] [:error] [pid 50186:tid 50212] [client 20.42.209.194:16968] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/File.php"] [unique_id "aVfPtlXqK_iX4f-S70KGbQAAAZg"]
[Fri Jan 02 22:01:26.945052 2026] [:error] [pid 50186:tid 50211] [client 20.42.209.194:16930] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/all.php"] [unique_id "aVfPtlXqK_iX4f-S70KGbgAAAZc"]
[Fri Jan 02 22:01:27.146116 2026] [:error] [pid 63098:tid 63120] [client 20.42.209.194:22784] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/all.php"] [unique_id "aVfPt8ez9k78gUs48kpwtgAAAA0"]
[Fri Jan 02 22:01:27.454770 2026] [:error] [pid 50186:tid 50197] [client 20.42.209.194:16916] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/all.php"] [unique_id "aVfPt1XqK_iX4f-S70KGcAAAAYk"]
[Fri Jan 02 22:01:27.564560 2026] [:error] [pid 63208:tid 63235] [client 20.42.209.194:22821] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/all.php"] [unique_id "aVfPt3KLI9INGPLzfndQ-QAAANg"]
[Fri Jan 02 22:01:27.681693 2026] [:error] [pid 29316:tid 29335] [client 20.42.209.194:22807] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bbn.php"] [unique_id "aVfPt9fT9ty-7jZmgf-80wAAARE"]
[Fri Jan 02 22:01:27.802540 2026] [:error] [pid 63208:tid 63227] [client 20.42.209.194:16927] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bbn.php"] [unique_id "aVfPt3KLI9INGPLzfndQ-wAAANA"]
[Fri Jan 02 22:01:27.960342 2026] [:error] [pid 50186:tid 50209] [client 20.42.209.194:16958] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bbn.php"] [unique_id "aVfPt1XqK_iX4f-S70KGcgAAAZU"]
[Fri Jan 02 22:01:28.103691 2026] [:error] [pid 63099:tid 63145] [client 20.42.209.194:16915] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bbn.php"] [unique_id "aVfPuMmCZokRPYUhzvjHPQAAAEs"]
[Fri Jan 02 22:01:28.193205 2026] [:error] [pid 29316:tid 29323] [client 20.42.209.194:16913] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/berlin.php"] [unique_id "aVfPuNfT9ty-7jZmgf-81AAAAQU"]
[Fri Jan 02 22:01:28.365872 2026] [:error] [pid 43358:tid 43364] [client 20.42.209.194:16984] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/berlin.php"] [unique_id "aVfPuAncbHK9auzvrA9i-AAAAcQ"]
[Fri Jan 02 22:01:28.423146 2026] [:error] [pid 63099:tid 63146] [client 20.42.209.194:16998] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/berlin.php"] [unique_id "aVfPuMmCZokRPYUhzvjHPwAAAEw"]
[Fri Jan 02 22:01:28.498720 2026] [:error] [pid 63099:tid 63153] [client 20.42.209.194:22796] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/berlin.php"] [unique_id "aVfPuMmCZokRPYUhzvjHQAAAAFM"]
[Fri Jan 02 22:01:28.836166 2026] [:error] [pid 50046:tid 50060] [client 20.42.209.194:22841] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aVfPuCzv7fgIiwkQYNC5BQAAAUw"]
[Fri Jan 02 22:01:29.006696 2026] [:error] [pid 50186:tid 50191] [client 20.42.209.194:16904] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aVfPuVXqK_iX4f-S70KGeAAAAYM"]
[Fri Jan 02 22:01:29.141487 2026] [:error] [pid 50186:tid 50207] [client 20.42.209.194:16976] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aVfPuVXqK_iX4f-S70KGewAAAZM"]
[Fri Jan 02 22:01:29.428366 2026] [:error] [pid 50186:tid 50189] [client 20.42.209.194:22830] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aVfPuVXqK_iX4f-S70KGfgAAAYE"]
[Fri Jan 02 22:01:29.501858 2026] [:error] [pid 50186:tid 50193] [client 20.42.209.194:16929] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xz89.php"] [unique_id "aVfPuVXqK_iX4f-S70KGgAAAAYU"]
[Fri Jan 02 22:01:29.693380 2026] [:error] [pid 50186:tid 50208] [client 20.42.209.194:22799] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xz89.php"] [unique_id "aVfPuVXqK_iX4f-S70KGggAAAZQ"]
[Fri Jan 02 22:01:29.850246 2026] [:error] [pid 50186:tid 50194] [client 20.42.209.194:22790] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xz89.php"] [unique_id "aVfPuVXqK_iX4f-S70KGhAAAAYY"]
[Fri Jan 02 22:01:30.022343 2026] [:error] [pid 50186:tid 50192] [client 20.42.209.194:22818] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xz89.php"] [unique_id "aVfPulXqK_iX4f-S70KGhgAAAYQ"]
[Fri Jan 02 22:01:30.303599 2026] [:error] [pid 63100:tid 63161] [client 20.42.209.194:16963] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thai.php"] [unique_id "aVfPujuUXUKd3KTnKl9a5QAAAIA"]
[Fri Jan 02 22:01:30.755836 2026] [:error] [pid 63098:tid 63124] [client 20.42.209.194:22798] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thai.php"] [unique_id "aVfPusez9k78gUs48kpwvQAAABE"]
[Fri Jan 02 22:01:31.214346 2026] [:error] [pid 63208:tid 63233] [client 20.42.209.194:22833] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thai.php"] [unique_id "aVfPu3KLI9INGPLzfndRAQAAANY"]
[Fri Jan 02 22:01:31.479359 2026] [:error] [pid 50186:tid 50205] [client 20.42.209.194:16898] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thai.php"] [unique_id "aVfPu1XqK_iX4f-S70KGjAAAAZE"]
[Fri Jan 02 22:01:31.710103 2026] [:error] [pid 50186:tid 50203] [client 20.42.209.194:22789] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lopst.php"] [unique_id "aVfPu1XqK_iX4f-S70KGjgAAAY8"]
[Fri Jan 02 22:01:31.776302 2026] [:error] [pid 50046:tid 50056] [client 20.42.209.194:16905] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lopst.php"] [unique_id "aVfPuyzv7fgIiwkQYNC5CgAAAUg"]
[Fri Jan 02 22:01:31.888171 2026] [:error] [pid 63208:tid 63214] [client 20.42.209.194:16974] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lopst.php"] [unique_id "aVfPu3KLI9INGPLzfndRAwAAAMM"]
[Fri Jan 02 22:01:32.076599 2026] [:error] [pid 50186:tid 50189] [client 20.42.209.194:16964] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lopst.php"] [unique_id "aVfPvFXqK_iX4f-S70KGkAAAAYE"]
[Fri Jan 02 22:01:32.661012 2026] [:error] [pid 63208:tid 63212] [client 20.42.209.194:16956] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wft.php"] [unique_id "aVfPvHKLI9INGPLzfndRBQAAAME"]
[Fri Jan 02 22:01:32.870473 2026] [:error] [pid 29316:tid 29330] [client 20.42.209.194:22832] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wft.php"] [unique_id "aVfPvNfT9ty-7jZmgf-81wAAAQw"]
[Fri Jan 02 22:01:32.951284 2026] [:error] [pid 63098:tid 63110] [client 20.42.209.194:17019] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wft.php"] [unique_id "aVfPvMez9k78gUs48kpwvwAAAAM"]
[Fri Jan 02 22:01:32.994494 2026] [:error] [pid 63208:tid 63213] [client 20.42.209.194:16921] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wft.php"] [unique_id "aVfPvHKLI9INGPLzfndRCAAAAMI"]
[Fri Jan 02 22:01:33.138629 2026] [:error] [pid 63098:tid 63128] [client 20.42.209.194:16994] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws28.php"] [unique_id "aVfPvcez9k78gUs48kpwwQAAABU"]
[Fri Jan 02 22:01:33.460566 2026] [:error] [pid 63099:tid 63143] [client 20.42.209.194:22823] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws28.php"] [unique_id "aVfPvcmCZokRPYUhzvjHQwAAAEk"]
[Fri Jan 02 22:01:33.844890 2026] [:error] [pid 50046:tid 50053] [client 20.42.209.194:22787] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws28.php"] [unique_id "aVfPvSzv7fgIiwkQYNC5DgAAAUU"]
[Fri Jan 02 22:01:33.965050 2026] [:error] [pid 63099:tid 63152] [client 20.42.209.194:22826] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws28.php"] [unique_id "aVfPvcmCZokRPYUhzvjHRgAAAFI"]
[Fri Jan 02 22:01:34.262366 2026] [:error] [pid 63208:tid 63229] [client 20.42.209.194:16928] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsvvs.php"] [unique_id "aVfPvnKLI9INGPLzfndRDAAAANI"]
[Fri Jan 02 22:01:34.715335 2026] [:error] [pid 63098:tid 63125] [client 20.42.209.194:16971] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsvvs.php"] [unique_id "aVfPvsez9k78gUs48kpwyAAAABI"]
[Fri Jan 02 22:01:35.100645 2026] [:error] [pid 63098:tid 63121] [client 20.42.209.194:17022] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsvvs.php"] [unique_id "aVfPv8ez9k78gUs48kpwzAAAAA4"]
[Fri Jan 02 22:01:35.405783 2026] [:error] [pid 50186:tid 50192] [client 20.42.209.194:22813] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsvvs.php"] [unique_id "aVfPv1XqK_iX4f-S70KGlQAAAYQ"]
[Fri Jan 02 22:01:35.582385 2026] [:error] [pid 43358:tid 43369] [client 20.42.209.194:16934] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vbbn.php"] [unique_id "aVfPvwncbHK9auzvrA9i-wAAAck"]
[Fri Jan 02 22:01:35.763795 2026] [:error] [pid 63099:tid 63158] [client 20.42.209.194:22804] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vbbn.php"] [unique_id "aVfPv8mCZokRPYUhzvjHSAAAAFg"]
[Fri Jan 02 22:01:35.857100 2026] [:error] [pid 43358:tid 43381] [client 20.42.209.194:16951] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vbbn.php"] [unique_id "aVfPvwncbHK9auzvrA9i_wAAAdU"]
[Fri Jan 02 22:01:35.982593 2026] [:error] [pid 43358:tid 43384] [client 20.42.209.194:22794] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vbbn.php"] [unique_id "aVfPvwncbHK9auzvrA9jAAAAAdg"]
[Fri Jan 02 22:01:36.052830 2026] [:error] [pid 63098:tid 63131] [client 20.42.209.194:16959] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pn.php"] [unique_id "aVfPwMez9k78gUs48kpwzQAAABg"]
[Fri Jan 02 22:01:36.286636 2026] [:error] [pid 63098:tid 63111] [client 20.42.209.194:22793] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pn.php"] [unique_id "aVfPwMez9k78gUs48kpwzwAAAAQ"]
[Fri Jan 02 22:01:36.423648 2026] [:error] [pid 29316:tid 29325] [client 20.42.209.194:22827] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pn.php"] [unique_id "aVfPwNfT9ty-7jZmgf-83gAAAQc"]
[Fri Jan 02 22:01:36.579919 2026] [:error] [pid 29316:tid 29336] [client 20.42.209.194:16876] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pn.php"] [unique_id "aVfPwNfT9ty-7jZmgf-83wAAARI"]
[Fri Jan 02 22:01:36.636863 2026] [:error] [pid 63208:tid 63225] [client 20.42.209.194:17017] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fz.php"] [unique_id "aVfPwHKLI9INGPLzfndRFAAAAM4"]
[Fri Jan 02 22:01:36.696605 2026] [:error] [pid 63208:tid 63214] [client 20.42.209.194:16926] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fz.php"] [unique_id "aVfPwHKLI9INGPLzfndRFgAAAMM"]
[Fri Jan 02 22:01:36.782359 2026] [:error] [pid 29316:tid 29327] [client 20.42.209.194:16952] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fz.php"] [unique_id "aVfPwNfT9ty-7jZmgf-84AAAAQk"]
[Fri Jan 02 22:01:37.059244 2026] [:error] [pid 50186:tid 50203] [client 20.42.209.194:16989] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fz.php"] [unique_id "aVfPwVXqK_iX4f-S70KGngAAAY8"]
[Fri Jan 02 22:01:37.248453 2026] [:error] [pid 50186:tid 50189] [client 20.42.209.194:16939] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sang.php"] [unique_id "aVfPwVXqK_iX4f-S70KGoQAAAYE"]
[Fri Jan 02 22:01:37.496653 2026] [:error] [pid 50186:tid 50193] [client 20.42.209.194:16945] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sang.php"] [unique_id "aVfPwVXqK_iX4f-S70KGowAAAYU"]
[Fri Jan 02 22:01:37.677688 2026] [:error] [pid 50186:tid 50208] [client 20.42.209.194:16924] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sang.php"] [unique_id "aVfPwVXqK_iX4f-S70KGpAAAAZQ"]
[Fri Jan 02 22:01:37.739866 2026] [:error] [pid 63208:tid 63212] [client 20.42.209.194:22847] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sang.php"] [unique_id "aVfPwXKLI9INGPLzfndRGAAAAME"]
[Fri Jan 02 22:01:37.879454 2026] [:error] [pid 43358:tid 43382] [client 20.42.209.194:16914] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0o0.php"] [unique_id "aVfPwQncbHK9auzvrA9jAQAAAdY"]
[Fri Jan 02 22:01:38.006243 2026] [:error] [pid 50186:tid 50204] [client 20.42.209.194:22829] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0o0.php"] [unique_id "aVfPwlXqK_iX4f-S70KGpgAAAZA"]
[Fri Jan 02 22:01:38.056555 2026] [:error] [pid 63099:tid 63140] [client 20.42.209.194:16991] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0o0.php"] [unique_id "aVfPwsmCZokRPYUhzvjHSwAAAEY"]
[Fri Jan 02 22:01:38.111449 2026] [:error] [pid 50186:tid 50201] [client 20.42.209.194:16960] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0o0.php"] [unique_id "aVfPwlXqK_iX4f-S70KGpwAAAY0"]
[Fri Jan 02 22:01:38.184496 2026] [:error] [pid 50186:tid 50194] [client 20.42.209.194:16938] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxl.php"] [unique_id "aVfPwlXqK_iX4f-S70KGqAAAAYY"]
[Fri Jan 02 22:01:38.233366 2026] [:error] [pid 50186:tid 50192] [client 20.42.209.194:22811] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxl.php"] [unique_id "aVfPwlXqK_iX4f-S70KGqQAAAYQ"]
[Fri Jan 02 22:01:38.367648 2026] [:error] [pid 29316:tid 29335] [client 20.42.209.194:22805] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxl.php"] [unique_id "aVfPwtfT9ty-7jZmgf-84gAAARE"]
[Fri Jan 02 22:01:38.428012 2026] [:error] [pid 63208:tid 63234] [client 20.42.209.194:16922] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zxl.php"] [unique_id "aVfPwnKLI9INGPLzfndRGgAAANc"]
[Fri Jan 02 22:01:38.657634 2026] [:error] [pid 63100:tid 63175] [client 20.42.209.194:17010] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwso.php"] [unique_id "aVfPwjuUXUKd3KTnKl9a6AAAAI4"]
[Fri Jan 02 22:01:38.753057 2026] [:error] [pid 63099:tid 63139] [client 20.42.209.194:16900] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwso.php"] [unique_id "aVfPwsmCZokRPYUhzvjHTgAAAEU"]
[Fri Jan 02 22:01:38.887724 2026] [:error] [pid 63099:tid 63134] [client 20.42.209.194:22820] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwso.php"] [unique_id "aVfPwsmCZokRPYUhzvjHTwAAAEA"]
[Fri Jan 02 22:01:39.111473 2026] [:error] [pid 63100:tid 63171] [client 20.42.209.194:16925] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwso.php"] [unique_id "aVfPwzuUXUKd3KTnKl9a6gAAAIo"]
[Fri Jan 02 22:01:39.291664 2026] [:error] [pid 29316:tid 29320] [client 20.42.209.194:16882] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVfPw9fT9ty-7jZmgf-85QAAAQI"]
[Fri Jan 02 22:01:39.379911 2026] [:error] [pid 50186:tid 50199] [client 20.42.209.194:16978] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVfPw1XqK_iX4f-S70KGrAAAAYs"]
[Fri Jan 02 22:01:39.470481 2026] [:error] [pid 63100:tid 63172] [client 20.42.209.194:16878] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVfPwzuUXUKd3KTnKl9a7AAAAIs"]
[Fri Jan 02 22:01:39.549411 2026] [:error] [pid 63099:tid 63141] [client 20.42.209.194:16863] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVfPw8mCZokRPYUhzvjHUgAAAEc"]
[Fri Jan 02 22:01:39.698195 2026] [:error] [pid 29316:tid 29342] [client 20.42.209.194:22788] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aVfPw9fT9ty-7jZmgf-85gAAARg"]
[Fri Jan 02 22:01:39.843450 2026] [:error] [pid 63099:tid 63135] [client 20.42.209.194:22840] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aVfPw8mCZokRPYUhzvjHUwAAAEE"]
[Fri Jan 02 22:01:39.957566 2026] [:error] [pid 29316:tid 29341] [client 20.42.209.194:16837] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aVfPw9fT9ty-7jZmgf-86QAAARc"]
[Fri Jan 02 22:01:40.001285 2026] [:error] [pid 29316:tid 29340] [client 20.42.209.194:16917] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aVfPxNfT9ty-7jZmgf-86gAAARY"]
[Fri Jan 02 22:01:40.223970 2026] [:error] [pid 63099:tid 63146] [client 20.42.209.194:16948] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aVfPxMmCZokRPYUhzvjHVAAAAEw"]
[Fri Jan 02 22:01:40.556655 2026] [:error] [pid 63100:tid 63179] [client 20.42.209.194:22809] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aVfPxDuUXUKd3KTnKl9a7wAAAJI"]
[Fri Jan 02 22:01:40.756803 2026] [:error] [pid 63098:tid 63119] [client 20.42.209.194:16896] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aVfPxMez9k78gUs48kpw1QAAAAw"]
[Fri Jan 02 22:01:40.959244 2026] [:error] [pid 50186:tid 50198] [client 20.42.209.194:17003] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aVfPxFXqK_iX4f-S70KGsgAAAYo"]
[Fri Jan 02 22:01:41.079916 2026] [:error] [pid 63100:tid 63164] [client 20.42.209.194:22846] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aVfPxTuUXUKd3KTnKl9a8wAAAIM"]
[Fri Jan 02 22:01:41.183648 2026] [:error] [pid 63099:tid 63143] [client 20.42.209.194:16985] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aVfPxcmCZokRPYUhzvjHVwAAAEk"]
[Fri Jan 02 22:01:41.388059 2026] [:error] [pid 50186:tid 50189] [client 20.42.209.194:16941] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aVfPxVXqK_iX4f-S70KGswAAAYE"]
[Fri Jan 02 22:01:41.636464 2026] [:error] [pid 50186:tid 50205] [client 20.42.209.194:17004] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aVfPxVXqK_iX4f-S70KGtAAAAZE"]
[Fri Jan 02 22:01:41.826659 2026] [:error] [pid 50186:tid 50195] [client 20.42.209.194:17001] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aVfPxVXqK_iX4f-S70KGtgAAAYc"]
[Fri Jan 02 22:01:41.980234 2026] [:error] [pid 63098:tid 63125] [client 20.42.209.194:16920] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aVfPxcez9k78gUs48kpw2AAAABI"]
[Fri Jan 02 22:01:42.341795 2026] [:error] [pid 50186:tid 50188] [client 20.42.209.194:22838] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aVfPxlXqK_iX4f-S70KGuQAAAYA"]
[Fri Jan 02 22:01:42.638829 2026] [:error] [pid 29316:tid 29327] [client 20.42.209.194:22802] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aVfPxtfT9ty-7jZmgf-88QAAAQk"]
[Fri Jan 02 22:01:42.831376 2026] [:error] [pid 50046:tid 50059] [client 20.42.209.194:16912] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fwe.php"] [unique_id "aVfPxizv7fgIiwkQYNC5EAAAAUs"]
[Fri Jan 02 22:01:43.064586 2026] [:error] [pid 43358:tid 43378] [client 20.42.209.194:16992] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fwe.php"] [unique_id "aVfPxwncbHK9auzvrA9jAgAAAdI"]
[Fri Jan 02 22:01:43.293577 2026] [:error] [pid 29316:tid 29320] [client 20.42.209.194:16947] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fwe.php"] [unique_id "aVfPx9fT9ty-7jZmgf-88wAAAQI"]
[Fri Jan 02 22:01:43.430100 2026] [:error] [pid 50186:tid 50210] [client 20.42.209.194:16899] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fwe.php"] [unique_id "aVfPx1XqK_iX4f-S70KGvgAAAZY"]
[Fri Jan 02 22:01:43.591887 2026] [:error] [pid 50186:tid 50200] [client 20.42.209.194:16859] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "aVfPx1XqK_iX4f-S70KGvwAAAYw"]
[Fri Jan 02 22:01:43.730235 2026] [:error] [pid 43358:tid 43380] [client 20.42.209.194:17018] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "aVfPxwncbHK9auzvrA9jBQAAAdQ"]
[Fri Jan 02 22:01:44.037230 2026] [:error] [pid 63098:tid 63107] [client 20.42.209.194:16937] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "aVfPyMez9k78gUs48kpw2gAAAAA"]
[Fri Jan 02 22:01:44.135746 2026] [:error] [pid 63098:tid 63121] [client 20.42.209.194:16972] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "aVfPyMez9k78gUs48kpw3AAAAA4"]
[Fri Jan 02 22:01:44.293614 2026] [:error] [pid 63098:tid 63131] [client 20.42.209.194:16996] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx1.php"] [unique_id "aVfPyMez9k78gUs48kpw3QAAABg"]
[Fri Jan 02 22:01:44.485252 2026] [:error] [pid 63098:tid 63124] [client 20.42.209.194:16957] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx1.php"] [unique_id "aVfPyMez9k78gUs48kpw3gAAABE"]
[Fri Jan 02 22:01:44.687638 2026] [:error] [pid 50186:tid 50207] [client 20.42.209.194:16866] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx1.php"] [unique_id "aVfPyFXqK_iX4f-S70KGwgAAAZM"]
[Fri Jan 02 22:01:45.033429 2026] [:error] [pid 63100:tid 63175] [client 20.42.209.194:16832] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx1.php"] [unique_id "aVfPyTuUXUKd3KTnKl9a-QAAAI4"]
[Fri Jan 02 22:01:45.260022 2026] [:error] [pid 29316:tid 29318] [client 20.42.209.194:16970] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xv.php"] [unique_id "aVfPydfT9ty-7jZmgf-89gAAAQA"]
[Fri Jan 02 22:01:45.666052 2026] [:error] [pid 63099:tid 63134] [client 20.42.209.194:16907] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xv.php"] [unique_id "aVfPycmCZokRPYUhzvjHYwAAAEA"]
[Fri Jan 02 22:01:45.919604 2026] [:error] [pid 63099:tid 63145] [client 20.42.209.194:16909] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xv.php"] [unique_id "aVfPycmCZokRPYUhzvjHZQAAAEs"]
[Fri Jan 02 22:01:46.030603 2026] [:error] [pid 43358:tid 43360] [client 20.42.209.194:16961] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xv.php"] [unique_id "aVfPygncbHK9auzvrA9jCAAAAcA"]
[Fri Jan 02 22:01:46.088999 2026] [:error] [pid 29316:tid 29340] [client 20.42.209.194:16990] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/htaccess.php"] [unique_id "aVfPytfT9ty-7jZmgf-89wAAARY"]
[Fri Jan 02 22:01:46.146396 2026] [:error] [pid 43358:tid 43365] [client 20.42.209.194:17014] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/htaccess.php"] [unique_id "aVfPygncbHK9auzvrA9jCQAAAcU"]
[Fri Jan 02 22:01:46.344598 2026] [:error] [pid 43358:tid 43364] [client 20.42.209.194:16914] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/htaccess.php"] [unique_id "aVfPygncbHK9auzvrA9jDAAAAcQ"]
[Fri Jan 02 22:01:46.457820 2026] [:error] [pid 29316:tid 29326] [client 20.42.209.194:17011] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/htaccess.php"] [unique_id "aVfPytfT9ty-7jZmgf-8-QAAAQg"]
[Fri Jan 02 22:01:46.570231 2026] [:error] [pid 29316:tid 29323] [client 20.42.209.194:22792] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fv.php"] [unique_id "aVfPytfT9ty-7jZmgf-8-gAAAQU"]
[Fri Jan 02 22:01:46.638031 2026] [:error] [pid 29316:tid 29339] [client 20.42.209.194:22817] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fv.php"] [unique_id "aVfPytfT9ty-7jZmgf-8-wAAARU"]
[Fri Jan 02 22:01:46.763493 2026] [:error] [pid 29316:tid 29331] [client 20.42.209.194:17359] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fv.php"] [unique_id "aVfPytfT9ty-7jZmgf-8_QAAAQ0"]
[Fri Jan 02 22:01:46.948381 2026] [:error] [pid 29316:tid 29332] [client 20.42.209.194:17015] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fv.php"] [unique_id "aVfPytfT9ty-7jZmgf-9AAAAAQ4"]
[Fri Jan 02 22:01:47.013447 2026] [:error] [pid 29316:tid 29334] [client 20.42.209.194:16874] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aVfPy9fT9ty-7jZmgf-9AQAAARA"]
[Fri Jan 02 22:01:47.182125 2026] [:error] [pid 63100:tid 63171] [client 20.42.209.194:22834] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aVfPyzuUXUKd3KTnKl9a-gAAAIo"]
[Fri Jan 02 22:01:47.676982 2026] [:error] [pid 29316:tid 29325] [client 20.42.209.194:16864] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aVfPy9fT9ty-7jZmgf-9AgAAAQc"]
[Fri Jan 02 22:01:47.868612 2026] [:error] [pid 29316:tid 29324] [client 20.42.209.194:16975] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aVfPy9fT9ty-7jZmgf-9AwAAAQY"]
[Fri Jan 02 22:01:48.002441 2026] [:error] [pid 50186:tid 50189] [client 20.42.209.194:22836] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lsd.php"] [unique_id "aVfPzFXqK_iX4f-S70KGxgAAAYE"]
[Fri Jan 02 22:01:48.118902 2026] [:error] [pid 50186:tid 50205] [client 20.42.209.194:16889] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lsd.php"] [unique_id "aVfPzFXqK_iX4f-S70KGxwAAAZE"]
[Fri Jan 02 22:01:48.388326 2026] [:error] [pid 63100:tid 63169] [client 20.42.209.194:16903] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lsd.php"] [unique_id "aVfPzDuUXUKd3KTnKl9a_gAAAIg"]
[Fri Jan 02 22:01:48.645761 2026] [:error] [pid 63098:tid 63110] [client 20.42.209.194:16839] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lsd.php"] [unique_id "aVfPzMez9k78gUs48kpw4QAAAAM"]
[Fri Jan 02 22:01:48.840175 2026] [:error] [pid 29316:tid 29342] [client 20.42.209.194:16858] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "aVfPzNfT9ty-7jZmgf-9CgAAARg"]
[Fri Jan 02 22:01:48.921863 2026] [:error] [pid 29316:tid 29333] [client 20.42.209.194:16966] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "aVfPzNfT9ty-7jZmgf-9CwAAAQ8"]
[Fri Jan 02 22:01:48.979885 2026] [:error] [pid 29316:tid 29338] [client 20.42.209.194:16999] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "aVfPzNfT9ty-7jZmgf-9DAAAARQ"]
[Fri Jan 02 22:01:49.068342 2026] [:error] [pid 50186:tid 50196] [client 20.42.209.194:16973] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "aVfPzVXqK_iX4f-S70KGyAAAAYg"]
[Fri Jan 02 22:01:49.408258 2026] [:error] [pid 29316:tid 29340] [client 20.42.209.194:16987] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsd.php"] [unique_id "aVfPzdfT9ty-7jZmgf-9DgAAARY"]
[Fri Jan 02 22:01:50.008908 2026] [:error] [pid 63100:tid 63178] [client 20.42.209.194:17006] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsd.php"] [unique_id "aVfPzjuUXUKd3KTnKl9bAQAAAJE"]
[Fri Jan 02 22:01:50.352052 2026] [:error] [pid 63208:tid 63228] [client 20.42.209.194:16856] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsd.php"] [unique_id "aVfPznKLI9INGPLzfndRJQAAANE"]
[Fri Jan 02 22:01:50.854095 2026] [:error] [pid 50186:tid 50202] [client 20.42.209.194:16969] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsd.php"] [unique_id "aVfPzlXqK_iX4f-S70KG0AAAAY4"]
[Fri Jan 02 22:01:51.415601 2026] [:error] [pid 50186:tid 50190] [client 20.42.209.194:16852] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gtc.php"] [unique_id "aVfPz1XqK_iX4f-S70KG1AAAAYI"]
[Fri Jan 02 22:01:51.640639 2026] [:error] [pid 43358:tid 43370] [client 20.42.209.194:16980] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gtc.php"] [unique_id "aVfPzwncbHK9auzvrA9jDwAAAco"]
[Fri Jan 02 22:01:51.683577 2026] [:error] [pid 50186:tid 50212] [client 20.42.209.194:16879] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gtc.php"] [unique_id "aVfPz1XqK_iX4f-S70KG1gAAAZg"]
[Fri Jan 02 22:01:51.777322 2026] [:error] [pid 63098:tid 63119] [client 20.42.209.194:16894] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gtc.php"] [unique_id "aVfPz8ez9k78gUs48kpw6QAAAAw"]
[Fri Jan 02 22:01:51.957020 2026] [:error] [pid 63098:tid 63123] [client 20.42.209.194:16862] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/atx.php"] [unique_id "aVfPz8ez9k78gUs48kpw6wAAABA"]
[Fri Jan 02 22:01:52.048409 2026] [:error] [pid 50186:tid 50207] [client 20.42.209.194:16860] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/atx.php"] [unique_id "aVfP0FXqK_iX4f-S70KG1wAAAZM"]
[Fri Jan 02 22:01:52.141399 2026] [:error] [pid 63098:tid 63125] [client 20.42.209.194:17350] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/atx.php"] [unique_id "aVfP0Mez9k78gUs48kpw7QAAABI"]
[Fri Jan 02 22:01:52.215060 2026] [:error] [pid 50186:tid 50206] [client 20.42.209.194:16936] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/atx.php"] [unique_id "aVfP0FXqK_iX4f-S70KG2AAAAZI"]
[Fri Jan 02 22:01:52.603485 2026] [:error] [pid 63098:tid 63127] [client 20.42.209.194:16835] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z60.php"] [unique_id "aVfP0Mez9k78gUs48kpw7wAAABQ"]
[Fri Jan 02 22:01:52.960421 2026] [:error] [pid 63208:tid 63213] [client 20.42.209.194:16946] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z60.php"] [unique_id "aVfP0HKLI9INGPLzfndRLQAAAMI"]
[Fri Jan 02 22:01:53.228623 2026] [:error] [pid 63208:tid 63217] [client 20.42.209.194:17364] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z60.php"] [unique_id "aVfP0XKLI9INGPLzfndRLwAAAMY"]
[Fri Jan 02 22:01:54.180772 2026] [:error] [pid 63208:tid 63228] [client 20.42.209.194:16942] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z60.php"] [unique_id "aVfP0nKLI9INGPLzfndRNgAAANE"]
[Fri Jan 02 22:01:54.349330 2026] [:error] [pid 29316:tid 29322] [client 20.42.209.194:16849] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aVfP0tfT9ty-7jZmgf-9EwAAAQQ"]
[Fri Jan 02 22:01:54.412499 2026] [:error] [pid 29316:tid 29325] [client 20.42.209.194:17008] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aVfP0tfT9ty-7jZmgf-9FAAAAQc"]
[Fri Jan 02 22:01:54.446149 2026] [:error] [pid 29316:tid 29324] [client 20.42.209.194:16949] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aVfP0tfT9ty-7jZmgf-9FQAAAQY"]
[Fri Jan 02 22:01:54.514141 2026] [:error] [pid 63098:tid 63107] [client 20.42.209.194:16906] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aVfP0sez9k78gUs48kpw8QAAAAA"]
[Fri Jan 02 22:01:54.573786 2026] [:error] [pid 29316:tid 29336] [client 20.42.209.194:19978] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/themes.php"] [unique_id "aVfP0tfT9ty-7jZmgf-9FwAAARI"]
[Fri Jan 02 22:01:54.644301 2026] [:error] [pid 50186:tid 50193] [client 20.42.209.194:16883] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/themes.php"] [unique_id "aVfP0lXqK_iX4f-S70KG3gAAAYU"]
[Fri Jan 02 22:01:54.773430 2026] [:error] [pid 29316:tid 29327] [client 20.42.209.194:22839] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/themes.php"] [unique_id "aVfP0tfT9ty-7jZmgf-9GQAAAQk"]
[Fri Jan 02 22:01:54.893699 2026] [:error] [pid 63208:tid 63218] [client 20.42.209.194:16918] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/themes.php"] [unique_id "aVfP0nKLI9INGPLzfndROQAAAMc"]
[Fri Jan 02 22:01:55.193813 2026] [:error] [pid 50046:tid 50069] [client 20.42.209.194:17395] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVfP0yzv7fgIiwkQYNC5GwAAAVU"]
[Fri Jan 02 22:01:55.292806 2026] [:error] [pid 63208:tid 63220] [client 20.42.209.194:16846] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVfP03KLI9INGPLzfndRPAAAAMk"]
[Fri Jan 02 22:01:55.473871 2026] [:error] [pid 29316:tid 29341] [client 20.42.209.194:17365] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVfP09fT9ty-7jZmgf-9GgAAARc"]
[Fri Jan 02 22:01:55.538892 2026] [:error] [pid 63208:tid 63224] [client 20.42.209.194:16869] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVfP03KLI9INGPLzfndRPQAAAM0"]
[Fri Jan 02 22:01:55.721329 2026] [:error] [pid 50186:tid 50188] [client 20.42.209.194:16881] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVfP01XqK_iX4f-S70KG4QAAAYA"]
[Fri Jan 02 22:01:55.835905 2026] [:error] [pid 63208:tid 63212] [client 20.42.209.194:16840] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVfP03KLI9INGPLzfndRPwAAAME"]
[Fri Jan 02 22:01:55.926219 2026] [:error] [pid 50046:tid 50049] [client 20.42.209.194:16997] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVfP0yzv7fgIiwkQYNC5HgAAAUE"]
[Fri Jan 02 22:01:56.134739 2026] [:error] [pid 63208:tid 63216] [client 20.42.209.194:17396] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVfP1HKLI9INGPLzfndRQAAAAMU"]
[Fri Jan 02 22:01:56.200786 2026] [:error] [pid 63208:tid 63234] [client 20.42.209.194:16944] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/click.php"] [unique_id "aVfP1HKLI9INGPLzfndRQQAAANc"]
[Fri Jan 02 22:01:56.337739 2026] [:error] [pid 63100:tid 63180] [client 20.42.209.194:16954] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/click.php"] [unique_id "aVfP1DuUXUKd3KTnKl9bCQAAAJM"]
[Fri Jan 02 22:01:56.493925 2026] [:error] [pid 29316:tid 29326] [client 20.42.209.194:17012] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/click.php"] [unique_id "aVfP1NfT9ty-7jZmgf-9HgAAAQg"]
[Fri Jan 02 22:01:56.598471 2026] [:error] [pid 29316:tid 29319] [client 20.42.209.194:16897] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/click.php"] [unique_id "aVfP1NfT9ty-7jZmgf-9HwAAAQE"]
[Fri Jan 02 22:01:56.656242 2026] [:error] [pid 29316:tid 29329] [client 20.42.209.194:22786] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "aVfP1NfT9ty-7jZmgf-9IAAAAQs"]
[Fri Jan 02 22:01:56.829207 2026] [:error] [pid 63099:tid 63151] [client 20.42.209.194:17349] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "aVfP1MmCZokRPYUhzvjHaQAAAFE"]
[Fri Jan 02 22:01:57.138113 2026] [:error] [pid 29316:tid 29323] [client 20.42.209.194:16993] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "aVfP1dfT9ty-7jZmgf-9IQAAAQU"]
[Fri Jan 02 22:01:57.246204 2026] [:error] [pid 50186:tid 50199] [client 20.42.209.194:16850] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "aVfP1VXqK_iX4f-S70KG5AAAAYs"]
[Fri Jan 02 22:01:57.461197 2026] [:error] [pid 63100:tid 63165] [client 20.42.209.194:17355] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "aVfP1TuUXUKd3KTnKl9bCwAAAIQ"]
[Fri Jan 02 22:01:57.614448 2026] [:error] [pid 63100:tid 63162] [client 20.42.209.194:16844] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "aVfP1TuUXUKd3KTnKl9bDAAAAIE"]
[Fri Jan 02 22:01:57.747600 2026] [:error] [pid 63208:tid 63222] [client 20.42.209.194:17020] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "aVfP1XKLI9INGPLzfndRQwAAAMs"]
[Fri Jan 02 22:01:57.902744 2026] [:error] [pid 29316:tid 29328] [client 20.42.209.194:16967] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "aVfP1dfT9ty-7jZmgf-9IgAAAQo"]
[Fri Jan 02 22:01:57.979291 2026] [:error] [pid 29316:tid 29321] [client 20.42.209.194:16848] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aVfP1dfT9ty-7jZmgf-9IwAAAQM"]
[Fri Jan 02 22:01:58.054367 2026] [:error] [pid 50186:tid 50209] [client 20.42.209.194:22845] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aVfP1lXqK_iX4f-S70KG5QAAAZU"]
[Fri Jan 02 22:01:58.180346 2026] [:error] [pid 29316:tid 29331] [client 20.42.209.194:16833] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aVfP1tfT9ty-7jZmgf-9JAAAAQ0"]
[Fri Jan 02 22:01:58.299053 2026] [:error] [pid 50186:tid 50212] [client 20.42.209.194:16943] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aVfP1lXqK_iX4f-S70KG5gAAAZg"]
[Fri Jan 02 22:01:58.385485 2026] [:error] [pid 29316:tid 29330] [client 20.42.209.194:22785] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cong.php"] [unique_id "aVfP1tfT9ty-7jZmgf-9JgAAAQw"]
[Fri Jan 02 22:01:58.627403 2026] [:error] [pid 50186:tid 50207] [client 20.42.209.194:16986] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cong.php"] [unique_id "aVfP1lXqK_iX4f-S70KG6AAAAZM"]
[Fri Jan 02 22:01:58.922047 2026] [:error] [pid 29316:tid 29325] [client 20.42.209.194:17007] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cong.php"] [unique_id "aVfP1tfT9ty-7jZmgf-9KQAAAQc"]
[Fri Jan 02 22:01:59.139045 2026] [:error] [pid 50186:tid 50198] [client 20.42.209.194:16979] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cong.php"] [unique_id "aVfP11XqK_iX4f-S70KG6gAAAYo"]
[Fri Jan 02 22:01:59.324961 2026] [:error] [pid 29316:tid 29335] [client 20.42.209.194:17404] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVfP19fT9ty-7jZmgf-9KwAAARE"]
[Fri Jan 02 22:01:59.389335 2026] [:error] [pid 50186:tid 50197] [client 20.42.209.194:16893] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w.php"] [unique_id "aVfP11XqK_iX4f-S70KG6wAAAYk"]
[Fri Jan 02 22:01:59.492337 2026] [:error] [pid 63100:tid 63172] [client 20.42.209.194:19971] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w.php"] [unique_id "aVfP1zuUXUKd3KTnKl9bDQAAAIs"]
[Fri Jan 02 22:01:59.574502 2026] [:error] [pid 63100:tid 63174] [client 20.42.209.194:16853] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w.php"] [unique_id "aVfP1zuUXUKd3KTnKl9bDgAAAI0"]
[Fri Jan 02 22:01:59.621025 2026] [:error] [pid 50046:tid 50051] [client 20.42.209.194:17351] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w.php"] [unique_id "aVfP1yzv7fgIiwkQYNC5JAAAAUM"]
[Fri Jan 02 22:01:59.806145 2026] [:error] [pid 50046:tid 50068] [client 20.42.209.194:16873] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aVfP1yzv7fgIiwkQYNC5JQAAAVQ"]
[Fri Jan 02 22:01:59.927612 2026] [:error] [pid 50046:tid 50063] [client 20.42.209.194:17377] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aVfP1yzv7fgIiwkQYNC5JgAAAU8"]
[Fri Jan 02 22:01:59.965515 2026] [:error] [pid 50046:tid 50058] [client 20.42.209.194:16940] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aVfP1yzv7fgIiwkQYNC5KAAAAUo"]
[Fri Jan 02 22:02:00.080818 2026] [:error] [pid 63208:tid 63230] [client 20.42.209.194:16845] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aVfP2HKLI9INGPLzfndRRAAAANM"]
[Fri Jan 02 22:02:00.349336 2026] [:error] [pid 63098:tid 63111] [client 20.42.209.194:17363] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfP2Mez9k78gUs48kpw9AAAAAQ"]
[Fri Jan 02 22:02:00.511192 2026] [:error] [pid 50046:tid 50052] [client 20.42.209.194:16953] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfP2Czv7fgIiwkQYNC5KQAAAUQ"]
[Fri Jan 02 22:02:00.607513 2026] [:error] [pid 63208:tid 63211] [client 20.42.209.194:16867] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfP2HKLI9INGPLzfndRRgAAAMA"]
[Fri Jan 02 22:02:00.666706 2026] [:error] [pid 29316:tid 29318] [client 20.42.209.194:16887] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfP2NfT9ty-7jZmgf-9LwAAAQA"]
[Fri Jan 02 22:02:00.760024 2026] [:error] [pid 63098:tid 63117] [client 20.42.209.194:19968] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x.php"] [unique_id "aVfP2Mez9k78gUs48kpw9QAAAAo"]
[Fri Jan 02 22:02:00.838434 2026] [:error] [pid 63100:tid 63169] [client 20.42.209.194:17390] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x.php"] [unique_id "aVfP2DuUXUKd3KTnKl9bDwAAAIg"]
[Fri Jan 02 22:02:00.925885 2026] [:error] [pid 63099:tid 63137] [client 20.42.209.194:16855] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x.php"] [unique_id "aVfP2MmCZokRPYUhzvjHbAAAAEM"]
[Fri Jan 02 22:02:01.064843 2026] [:error] [pid 63208:tid 63226] [client 20.42.209.194:17016] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x.php"] [unique_id "aVfP2XKLI9INGPLzfndRRwAAAM8"]
[Fri Jan 02 22:02:01.387169 2026] [:error] [pid 63100:tid 63170] [client 20.42.209.194:17398] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aVfP2TuUXUKd3KTnKl9bEAAAAIk"]
[Fri Jan 02 22:02:01.648510 2026] [:error] [pid 63100:tid 63164] [client 20.42.209.194:17368] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aVfP2TuUXUKd3KTnKl9bEwAAAIM"]
[Fri Jan 02 22:02:01.957664 2026] [:error] [pid 29316:tid 29319] [client 20.42.209.194:16888] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aVfP2dfT9ty-7jZmgf-9MgAAAQE"]
[Fri Jan 02 22:02:02.115767 2026] [:error] [pid 50046:tid 50048] [client 20.42.209.194:17353] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css.php"] [unique_id "aVfP2izv7fgIiwkQYNC5KgAAAUA"]
[Fri Jan 02 22:02:02.284218 2026] [:error] [pid 63100:tid 63182] [client 20.42.209.194:17358] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aVfP2juUXUKd3KTnKl9bFQAAAJU"]
[Fri Jan 02 22:02:02.416013 2026] [:error] [pid 63099:tid 63158] [client 20.42.209.194:17366] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aVfP2smCZokRPYUhzvjHbgAAAFg"]
[Fri Jan 02 22:02:02.597075 2026] [:error] [pid 50186:tid 50194] [client 20.42.209.194:17378] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aVfP2lXqK_iX4f-S70KG7gAAAYY"]
[Fri Jan 02 22:02:02.701102 2026] [:error] [pid 63099:tid 63142] [client 20.42.209.194:20020] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aVfP2smCZokRPYUhzvjHbwAAAEg"]
[Fri Jan 02 22:02:02.878709 2026] [:error] [pid 29316:tid 29321] [client 20.42.209.194:19985] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVfP2tfT9ty-7jZmgf-9NQAAAQM"]
[Fri Jan 02 22:02:02.956976 2026] [:error] [pid 50046:tid 50057] [client 20.42.209.194:19972] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVfP2izv7fgIiwkQYNC5LAAAAUk"]
[Fri Jan 02 22:02:03.043366 2026] [:error] [pid 50186:tid 50211] [client 20.42.209.194:16944] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVfP21XqK_iX4f-S70KG7wAAAZc"]
[Fri Jan 02 22:02:03.173873 2026] [:error] [pid 63098:tid 63128] [client 20.42.209.194:19979] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVfP28ez9k78gUs48kpw9gAAABU"]
[Fri Jan 02 22:02:03.299319 2026] [:error] [pid 63098:tid 63114] [client 20.42.209.194:16875] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aVfP28ez9k78gUs48kpw-AAAAAc"]
[Fri Jan 02 22:02:03.405654 2026] [:error] [pid 63099:tid 63148] [client 20.42.209.194:16870] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aVfP28mCZokRPYUhzvjHcQAAAE4"]
[Fri Jan 02 22:02:03.728924 2026] [:error] [pid 63099:tid 63156] [client 20.42.209.194:16854] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aVfP28mCZokRPYUhzvjHcgAAAFY"]
[Fri Jan 02 22:02:03.847851 2026] [:error] [pid 50046:tid 50069] [client 20.42.209.194:17346] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aVfP2yzv7fgIiwkQYNC5LQAAAVU"]
[Fri Jan 02 22:02:04.001959 2026] [:error] [pid 63100:tid 63163] [client 20.42.209.194:16965] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVfP3DuUXUKd3KTnKl9bFwAAAII"]
[Fri Jan 02 22:02:05.173537 2026] [:error] [pid 63100:tid 63175] [client 20.42.209.194:20029] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVfP3TuUXUKd3KTnKl9bGgAAAI4"]
[Fri Jan 02 22:02:05.389886 2026] [:error] [pid 63098:tid 63120] [client 20.42.209.194:17373] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVfP3cez9k78gUs48kpw-gAAAA0"]
[Fri Jan 02 22:02:05.551350 2026] [:error] [pid 63098:tid 63116] [client 20.42.209.194:16880] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVfP3cez9k78gUs48kpw-wAAAAk"]
[Fri Jan 02 22:02:05.704636 2026] [:error] [pid 63098:tid 63119] [client 20.42.209.194:19992] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfP3cez9k78gUs48kpw_AAAAAw"]
[Fri Jan 02 22:02:06.842913 2026] [:error] [pid 63100:tid 63171] [client 20.42.209.194:17021] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfP3juUXUKd3KTnKl9bHAAAAIo"]
[Fri Jan 02 22:02:06.960722 2026] [:error] [pid 63100:tid 63185] [client 20.42.209.194:16892] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfP3juUXUKd3KTnKl9bHQAAAJg"]
[Fri Jan 02 22:02:07.081299 2026] [:error] [pid 63098:tid 63125] [client 20.42.209.194:16872] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfP38ez9k78gUs48kpw_wAAABI"]
[Fri Jan 02 22:02:07.141853 2026] [:error] [pid 63098:tid 63115] [client 20.42.209.194:19994] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "aVfP38ez9k78gUs48kpxAAAAAAg"]
[Fri Jan 02 22:02:07.291386 2026] [:error] [pid 63098:tid 63126] [client 20.42.209.194:22827] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "aVfP38ez9k78gUs48kpxAgAAABM"]
[Fri Jan 02 22:02:07.397425 2026] [:error] [pid 63098:tid 63108] [client 20.42.209.194:16995] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "aVfP38ez9k78gUs48kpxAwAAAAE"]
[Fri Jan 02 22:02:07.476040 2026] [:error] [pid 63098:tid 63121] [client 20.42.209.194:20002] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "aVfP38ez9k78gUs48kpxBAAAAA4"]
[Fri Jan 02 22:02:07.607077 2026] [:error] [pid 63098:tid 63124] [client 20.42.209.194:17389] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVfP38ez9k78gUs48kpxBQAAABE"]
[Fri Jan 02 22:02:07.766428 2026] [:error] [pid 43358:tid 43381] [client 20.42.209.194:22886] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVfP3wncbHK9auzvrA9jEQAAAdU"]
[Fri Jan 02 22:02:09.932198 2026] [:error] [pid 29316:tid 29323] [client 20.42.209.194:17374] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVfP4dfT9ty-7jZmgf-9RwAAAQU"]
[Fri Jan 02 22:02:10.191240 2026] [:error] [pid 50186:tid 50199] [client 20.42.209.194:17371] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVfP4lXqK_iX4f-S70KG8gAAAYs"]
[Fri Jan 02 22:02:10.370143 2026] [:error] [pid 29316:tid 29324] [client 20.42.209.194:20019] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aVfP4tfT9ty-7jZmgf-9TQAAAQY"]
[Fri Jan 02 22:02:10.470436 2026] [:error] [pid 63208:tid 63225] [client 20.42.209.194:16895] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aVfP4nKLI9INGPLzfndRTAAAAM4"]
[Fri Jan 02 22:02:10.585217 2026] [:error] [pid 63208:tid 63218] [client 20.42.209.194:17000] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aVfP4nKLI9INGPLzfndRTQAAAMc"]
[Fri Jan 02 22:02:10.724175 2026] [:error] [pid 63098:tid 63129] [client 20.42.209.194:17369] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aVfP4sez9k78gUs48kpxCwAAABY"]
[Fri Jan 02 22:02:10.811694 2026] [:error] [pid 63208:tid 63224] [client 20.42.209.194:16836] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about3.php"] [unique_id "aVfP4nKLI9INGPLzfndRTwAAAM0"]
[Fri Jan 02 22:02:10.949158 2026] [:error] [pid 50186:tid 50200] [client 20.42.209.194:17403] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about3.php"] [unique_id "aVfP4lXqK_iX4f-S70KG9AAAAYw"]
[Fri Jan 02 22:02:11.019733 2026] [:error] [pid 63208:tid 63212] [client 20.42.209.194:17375] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about3.php"] [unique_id "aVfP43KLI9INGPLzfndRUQAAAME"]
[Fri Jan 02 22:02:11.156933 2026] [:error] [pid 63208:tid 63234] [client 20.42.209.194:16981] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about3.php"] [unique_id "aVfP43KLI9INGPLzfndRUgAAANc"]
[Fri Jan 02 22:02:11.231237 2026] [:error] [pid 50186:tid 50212] [client 20.42.209.194:16705] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVfP41XqK_iX4f-S70KG9gAAAZg"]
[Fri Jan 02 22:02:11.286797 2026] [:error] [pid 43358:tid 43384] [client 20.42.209.194:19983] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVfP4wncbHK9auzvrA9jEgAAAdg"]
[Fri Jan 02 22:02:11.494332 2026] [:error] [pid 50186:tid 50190] [client 20.42.209.194:17344] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVfP41XqK_iX4f-S70KG-AAAAYI"]
[Fri Jan 02 22:02:11.975343 2026] [:error] [pid 50186:tid 50191] [client 20.42.209.194:17362] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVfP41XqK_iX4f-S70KG-QAAAYM"]
[Fri Jan 02 22:02:12.158986 2026] [:error] [pid 63208:tid 63213] [client 20.42.209.194:16861] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVfP5HKLI9INGPLzfndRVgAAAMI"]
[Fri Jan 02 22:02:12.261740 2026] [:error] [pid 63098:tid 63115] [client 20.42.209.194:16841] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVfP5Mez9k78gUs48kpxDQAAAAg"]
[Fri Jan 02 22:02:12.405308 2026] [:error] [pid 43358:tid 43380] [client 20.42.209.194:17348] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVfP5AncbHK9auzvrA9jFgAAAdQ"]
[Fri Jan 02 22:02:12.500600 2026] [:error] [pid 63208:tid 63235] [client 20.42.209.194:17002] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVfP5HKLI9INGPLzfndRVwAAANg"]
[Fri Jan 02 22:02:12.580435 2026] [:error] [pid 50046:tid 50055] [client 20.42.209.194:17023] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVfP5Czv7fgIiwkQYNC5LgAAAUc"]
[Fri Jan 02 22:02:12.633001 2026] [:error] [pid 63208:tid 63217] [client 20.42.209.194:19987] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVfP5HKLI9INGPLzfndRWAAAAMY"]
[Fri Jan 02 22:02:12.709973 2026] [:error] [pid 63098:tid 63126] [client 20.42.209.194:16977] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVfP5Mez9k78gUs48kpxDgAAABM"]
[Fri Jan 02 22:02:12.936188 2026] [:error] [pid 63098:tid 63121] [client 20.42.209.194:16851] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVfP5Mez9k78gUs48kpxDwAAAA4"]
[Fri Jan 02 22:02:13.140779 2026] [:error] [pid 63100:tid 63172] [client 20.42.209.194:20018] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVfP5TuUXUKd3KTnKl9bHgAAAIs"]
[Fri Jan 02 22:02:13.365044 2026] [:error] [pid 43358:tid 43363] [client 20.42.209.194:17357] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVfP5QncbHK9auzvrA9jGAAAAcM"]
[Fri Jan 02 22:02:13.482315 2026] [:error] [pid 29316:tid 29323] [client 20.42.209.194:17361] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVfP5dfT9ty-7jZmgf-9VgAAAQU"]
[Fri Jan 02 22:02:13.628792 2026] [:error] [pid 43358:tid 43376] [client 20.42.209.194:22874] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVfP5QncbHK9auzvrA9jGQAAAdA"]
[Fri Jan 02 22:02:13.794445 2026] [:error] [pid 43358:tid 43360] [client 20.42.209.194:17405] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/manager.php"] [unique_id "aVfP5QncbHK9auzvrA9jGgAAAcA"]
[Fri Jan 02 22:02:13.951949 2026] [:error] [pid 63098:tid 63128] [client 20.42.209.194:16971] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/manager.php"] [unique_id "aVfP5cez9k78gUs48kpxEwAAABU"]
[Fri Jan 02 22:02:14.122213 2026] [:error] [pid 50186:tid 50189] [client 20.42.209.194:22865] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/manager.php"] [unique_id "aVfP5lXqK_iX4f-S70KG_QAAAYE"]
[Fri Jan 02 22:02:14.362408 2026] [:error] [pid 29316:tid 29332] [client 20.42.209.194:20007] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/manager.php"] [unique_id "aVfP5tfT9ty-7jZmgf-9YAAAAQ4"]
[Fri Jan 02 22:02:14.658100 2026] [:error] [pid 29316:tid 29327] [client 20.42.209.194:17383] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/item.php"] [unique_id "aVfP5tfT9ty-7jZmgf-9YwAAAQk"]
[Fri Jan 02 22:02:14.924295 2026] [:error] [pid 50186:tid 50204] [client 20.42.209.194:19996] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/item.php"] [unique_id "aVfP5lXqK_iX4f-S70KHAAAAAZA"]
[Fri Jan 02 22:02:15.084819 2026] [:error] [pid 29316:tid 29341] [client 20.42.209.194:17005] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/item.php"] [unique_id "aVfP59fT9ty-7jZmgf-9ZwAAARc"]
[Fri Jan 02 22:02:15.196268 2026] [:error] [pid 29316:tid 29337] [client 20.42.209.194:17372] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/item.php"] [unique_id "aVfP59fT9ty-7jZmgf-9aAAAARM"]
[Fri Jan 02 22:02:15.408635 2026] [:error] [pid 63208:tid 63228] [client 20.42.209.194:20005] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aVfP53KLI9INGPLzfndRWwAAANE"]
[Fri Jan 02 22:02:15.516113 2026] [:error] [pid 63099:tid 63157] [client 20.42.209.194:16834] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aVfP58mCZokRPYUhzvjHdQAAAFc"]
[Fri Jan 02 22:02:15.739974 2026] [:error] [pid 29316:tid 29318] [client 20.42.209.194:17377] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aVfP59fT9ty-7jZmgf-9agAAAQA"]
[Fri Jan 02 22:02:16.082730 2026] [:error] [pid 50186:tid 50211] [client 20.42.209.194:22901] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aVfP6FXqK_iX4f-S70KHAQAAAZc"]
[Fri Jan 02 22:02:16.215907 2026] [:error] [pid 50186:tid 50201] [client 20.42.209.194:16891] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVfP6FXqK_iX4f-S70KHAgAAAY0"]
[Fri Jan 02 22:02:16.320048 2026] [:error] [pid 50186:tid 50202] [client 20.42.209.194:19974] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVfP6FXqK_iX4f-S70KHBQAAAY4"]
[Fri Jan 02 22:02:16.370215 2026] [:error] [pid 50186:tid 50196] [client 20.42.209.194:17387] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVfP6FXqK_iX4f-S70KHBgAAAYg"]
[Fri Jan 02 22:02:16.485911 2026] [:error] [pid 50186:tid 50199] [client 20.42.209.194:20008] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVfP6FXqK_iX4f-S70KHBwAAAYs"]
[Fri Jan 02 22:02:16.551299 2026] [:error] [pid 63208:tid 63224] [client 20.42.209.194:22857] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sx.php"] [unique_id "aVfP6HKLI9INGPLzfndRXgAAAM0"]
[Fri Jan 02 22:02:16.713534 2026] [:error] [pid 29316:tid 29329] [client 20.42.209.194:17345] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sx.php"] [unique_id "aVfP6NfT9ty-7jZmgf-9bwAAAQs"]
[Fri Jan 02 22:02:16.806355 2026] [:error] [pid 63098:tid 63110] [client 20.42.209.194:17352] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sx.php"] [unique_id "aVfP6Mez9k78gUs48kpxFgAAAAM"]
[Fri Jan 02 22:02:16.868165 2026] [:error] [pid 29316:tid 29328] [client 20.42.209.194:16983] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sx.php"] [unique_id "aVfP6NfT9ty-7jZmgf-9cgAAAQo"]
[Fri Jan 02 22:02:17.025509 2026] [:error] [pid 50186:tid 50212] [client 20.42.209.194:17347] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVfP6VXqK_iX4f-S70KHCQAAAZg"]
[Fri Jan 02 22:02:17.398857 2026] [:error] [pid 50186:tid 50207] [client 20.42.209.194:22858] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVfP6VXqK_iX4f-S70KHCgAAAZM"]
[Fri Jan 02 22:02:17.537024 2026] [:error] [pid 63099:tid 63146] [client 20.42.209.194:20004] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVfP6cmCZokRPYUhzvjHeQAAAEw"]
[Fri Jan 02 22:02:17.663955 2026] [:error] [pid 63208:tid 63216] [client 20.42.209.194:17381] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVfP6XKLI9INGPLzfndRYQAAAMU"]
[Fri Jan 02 22:02:17.761439 2026] [:error] [pid 63208:tid 63221] [client 20.42.209.194:16886] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "aVfP6XKLI9INGPLzfndRYwAAAMo"]
[Fri Jan 02 22:02:18.991660 2026] [:error] [pid 29316:tid 29335] [client 20.42.209.194:16847] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "aVfP6tfT9ty-7jZmgf-9eQAAARE"]
[Fri Jan 02 22:02:19.156525 2026] [:error] [pid 50186:tid 50198] [client 20.42.209.194:16890] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "aVfP61XqK_iX4f-S70KHDgAAAYo"]
[Fri Jan 02 22:02:19.298869 2026] [:error] [pid 50186:tid 50205] [client 20.42.209.194:22854] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "aVfP61XqK_iX4f-S70KHDwAAAZE"]
[Fri Jan 02 22:02:19.519513 2026] [:error] [pid 29316:tid 29318] [client 20.42.209.194:17009] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aVfP69fT9ty-7jZmgf-9fQAAAQA"]
[Fri Jan 02 22:02:19.675338 2026] [:error] [pid 29316:tid 29340] [client 20.42.209.194:16857] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aVfP69fT9ty-7jZmgf-9fwAAARY"]
[Fri Jan 02 22:02:19.854677 2026] [:error] [pid 63098:tid 63123] [client 20.42.209.194:16941] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aVfP68ez9k78gUs48kpxGwAAABA"]
[Fri Jan 02 22:02:30.215977 2026] [autoindex:error] [pid 29316:tid 29334] [client 20.42.209.194:22809] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 22:02:36.574232 2026] [:error] [pid 63100:tid 63169] [client 20.42.209.194:16868] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVfP_DuUXUKd3KTnKl9bSwAAAIg"]
[Fri Jan 02 22:02:41.693472 2026] [:error] [pid 63100:tid 63161] [client 20.42.209.194:17397] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVfQATuUXUKd3KTnKl9bagAAAIA"]
[Fri Jan 02 22:02:47.947425 2026] [:error] [pid 43358:tid 43382] [client 20.42.209.194:19981] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVfQBwncbHK9auzvrA9jRAAAAdY"]
[Fri Jan 02 22:02:52.911330 2026] [:error] [pid 63208:tid 63223] [client 20.42.209.194:22859] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVfQDHKLI9INGPLzfndRmwAAAMw"]
[Fri Jan 02 22:03:08.065811 2026] [proxy_fcgi:error] [pid 63208:tid 63231] [client 20.42.209.194:16877] AH01071: Got error 'Primary script unknown'
[Fri Jan 02 22:03:17.773882 2026] [:error] [pid 63208:tid 63223] [client 20.42.209.194:16877] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVfQJXKLI9INGPLzfndR4gAAAMw"]
[Fri Jan 02 22:03:17.872078 2026] [:error] [pid 50186:tid 50191] [client 20.42.209.194:22909] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVfQJVXqK_iX4f-S70KHjAAAAYM"]
[Fri Jan 02 22:03:19.229601 2026] [:error] [pid 43358:tid 43363] [client 20.42.209.194:22896] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVfQJwncbHK9auzvrA9jYwAAAcM"]
[Fri Jan 02 22:03:20.309918 2026] [:error] [pid 63098:tid 63126] [client 20.42.209.194:22879] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVfQKMez9k78gUs48kpxbQAAABM"]
[Fri Jan 02 22:03:32.891907 2026] [:error] [pid 50046:tid 50068] [client 20.42.209.194:22881] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVfQNCzv7fgIiwkQYNC5bQAAAVQ"]
[Fri Jan 02 22:03:32.974909 2026] [:error] [pid 63099:tid 63147] [client 20.42.209.194:19997] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVfQNMmCZokRPYUhzvjH3QAAAE0"]
[Fri Jan 02 22:03:33.006182 2026] [:error] [pid 50046:tid 50050] [client 20.42.209.194:19988] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVfQNSzv7fgIiwkQYNC5bgAAAUI"]
[Fri Jan 02 22:03:33.110430 2026] [:error] [pid 63208:tid 63229] [client 20.42.209.194:17382] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVfQNXKLI9INGPLzfndR5wAAANI"]
[Fri Jan 02 22:03:33.216760 2026] [:error] [pid 50046:tid 50058] [client 20.42.209.194:22801] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVfQNSzv7fgIiwkQYNC5bwAAAUo"]
[Fri Jan 02 22:03:33.323515 2026] [:error] [pid 50046:tid 50063] [client 20.42.209.194:19989] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVfQNSzv7fgIiwkQYNC5cAAAAU8"]
[Fri Jan 02 22:03:33.412415 2026] [:error] [pid 43358:tid 43369] [client 20.42.209.194:17392] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVfQNQncbHK9auzvrA9jaAAAAck"]
[Fri Jan 02 22:03:33.531499 2026] [:error] [pid 50046:tid 50064] [client 20.42.209.194:20026] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVfQNSzv7fgIiwkQYNC5cgAAAVA"]
[Fri Jan 02 22:03:33.683329 2026] [:error] [pid 63208:tid 63232] [client 20.42.209.194:17391] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVfQNXKLI9INGPLzfndR6AAAANU"]
[Fri Jan 02 22:03:33.772984 2026] [:error] [pid 50186:tid 50203] [client 20.42.209.194:17402] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVfQNVXqK_iX4f-S70KHmAAAAY8"]
[Fri Jan 02 22:03:33.869846 2026] [:error] [pid 50186:tid 50192] [client 20.42.209.194:16988] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVfQNVXqK_iX4f-S70KHmQAAAYQ"]
[Fri Jan 02 22:03:33.929779 2026] [:error] [pid 50186:tid 50193] [client 20.42.209.194:16884] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVfQNVXqK_iX4f-S70KHmgAAAYU"]
[Fri Jan 02 22:03:34.067254 2026] [:error] [pid 50186:tid 50200] [client 20.42.209.194:22898] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVfQNlXqK_iX4f-S70KHmwAAAYw"]
[Fri Jan 02 22:03:34.192922 2026] [:error] [pid 50186:tid 50195] [client 20.42.209.194:17386] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfQNlXqK_iX4f-S70KHnQAAAYc"]
[Fri Jan 02 22:03:34.326579 2026] [:error] [pid 63208:tid 63222] [client 20.42.209.194:20014] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfQNnKLI9INGPLzfndR6gAAAMs"]
[Fri Jan 02 22:03:34.430287 2026] [:error] [pid 63098:tid 63125] [client 20.42.209.194:17354] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfQNsez9k78gUs48kpxiwAAABI"]
[Fri Jan 02 22:03:34.590299 2026] [:error] [pid 63100:tid 63178] [client 20.42.209.194:16842] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfQNjuUXUKd3KTnKl9bnQAAAJE"]
[Fri Jan 02 22:03:34.756587 2026] [:error] [pid 63100:tid 63180] [client 20.42.209.194:20000] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVfQNjuUXUKd3KTnKl9bngAAAJM"]
[Fri Jan 02 22:03:34.834237 2026] [:error] [pid 63100:tid 63164] [client 20.42.209.194:22868] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVfQNjuUXUKd3KTnKl9bnwAAAIM"]
[Fri Jan 02 22:03:34.991215 2026] [:error] [pid 63098:tid 63111] [client 20.42.209.194:17406] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVfQNsez9k78gUs48kpxjgAAAAQ"]
[Fri Jan 02 22:03:35.354651 2026] [:error] [pid 63100:tid 63169] [client 20.42.209.194:17407] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVfQNzuUXUKd3KTnKl9boQAAAIg"]
[Fri Jan 02 22:03:35.471423 2026] [:error] [pid 50186:tid 50204] [client 20.42.209.194:19969] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVfQN1XqK_iX4f-S70KHoAAAAZA"]
[Fri Jan 02 22:03:35.597784 2026] [:error] [pid 63208:tid 63219] [client 20.42.209.194:19990] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVfQN3KLI9INGPLzfndR6wAAAMg"]
[Fri Jan 02 22:03:35.692513 2026] [:error] [pid 50186:tid 50196] [client 20.42.209.194:22890] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVfQN1XqK_iX4f-S70KHoQAAAYg"]
[Fri Jan 02 22:03:35.822649 2026] [:error] [pid 63098:tid 63121] [client 20.42.209.194:17385] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVfQN8ez9k78gUs48kpxkQAAAA4"]
[Fri Jan 02 22:03:35.885079 2026] [:error] [pid 50046:tid 50057] [client 20.42.209.194:22904] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVfQNyzv7fgIiwkQYNC5cwAAAUk"]
[Fri Jan 02 22:03:36.057239 2026] [:error] [pid 63098:tid 63124] [client 20.42.209.194:16982] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVfQOMez9k78gUs48kpxkwAAABE"]
[Fri Jan 02 22:03:36.174091 2026] [:error] [pid 63100:tid 63168] [client 20.42.209.194:20012] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVfQODuUXUKd3KTnKl9bogAAAIc"]
[Fri Jan 02 22:03:36.268360 2026] [:error] [pid 63100:tid 63170] [client 20.42.209.194:16843] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVfQODuUXUKd3KTnKl9bowAAAIk"]
[Fri Jan 02 22:03:36.402299 2026] [:error] [pid 63208:tid 63224] [client 20.42.209.194:17393] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVfQOHKLI9INGPLzfndR7AAAAM0"]
[Fri Jan 02 22:03:37.635759 2026] [:error] [pid 63099:tid 63139] [client 20.42.209.194:19986] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVfQOcmCZokRPYUhzvjH4QAAAEU"]
[Fri Jan 02 22:03:38.131490 2026] [:error] [pid 43358:tid 43375] [client 20.42.209.194:17384] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVfQOgncbHK9auzvrA9jawAAAc8"]
[Fri Jan 02 22:03:38.236577 2026] [:error] [pid 63100:tid 63182] [client 20.42.209.194:17013] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVfQOjuUXUKd3KTnKl9bqwAAAJU"]
[Fri Jan 02 22:03:38.485236 2026] [:error] [pid 63100:tid 63167] [client 20.42.209.194:20003] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class.php"] [unique_id "aVfQOjuUXUKd3KTnKl9brgAAAIY"]
[Fri Jan 02 22:03:39.218818 2026] [:error] [pid 63208:tid 63228] [client 20.42.209.194:22905] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class.php"] [unique_id "aVfQO3KLI9INGPLzfndR7QAAANE"]
[Fri Jan 02 22:03:39.390150 2026] [:error] [pid 63208:tid 63217] [client 20.42.209.194:16838] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class.php"] [unique_id "aVfQO3KLI9INGPLzfndR7gAAAMY"]
[Fri Jan 02 22:03:39.546814 2026] [:error] [pid 43358:tid 43384] [client 20.42.209.194:22908] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class.php"] [unique_id "aVfQOwncbHK9auzvrA9jbAAAAdg"]
[Fri Jan 02 22:03:39.853776 2026] [:error] [pid 50046:tid 50048] [client 20.42.209.194:19984] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless5.php"] [unique_id "aVfQOyzv7fgIiwkQYNC5dgAAAUA"]
[Fri Jan 02 22:03:40.181258 2026] [:error] [pid 29316:tid 29319] [client 20.42.209.194:17399] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless5.php"] [unique_id "aVfQPNfT9ty-7jZmgf--GQAAAQE"]
[Fri Jan 02 22:03:40.787316 2026] [:error] [pid 50046:tid 50056] [client 20.42.209.194:22856] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless5.php"] [unique_id "aVfQPCzv7fgIiwkQYNC5eAAAAUg"]
[Fri Jan 02 22:03:41.052127 2026] [:error] [pid 63100:tid 63185] [client 20.42.209.194:20022] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless5.php"] [unique_id "aVfQPTuUXUKd3KTnKl9btAAAAJg"]
[Fri Jan 02 22:03:41.292939 2026] [:error] [pid 50186:tid 50194] [client 20.42.209.194:16710] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock360.php"] [unique_id "aVfQPVXqK_iX4f-S70KHpgAAAYY"]
[Fri Jan 02 22:03:41.459565 2026] [:error] [pid 50046:tid 50067] [client 20.42.209.194:19976] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock360.php"] [unique_id "aVfQPSzv7fgIiwkQYNC5eQAAAVM"]
[Fri Jan 02 22:03:41.773215 2026] [:error] [pid 50046:tid 50072] [client 20.42.209.194:16962] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock360.php"] [unique_id "aVfQPSzv7fgIiwkQYNC5fQAAAVg"]
[Fri Jan 02 22:03:41.991957 2026] [:error] [pid 63100:tid 63174] [client 20.42.209.194:22851] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock360.php"] [unique_id "aVfQPTuUXUKd3KTnKl9btwAAAI0"]
[Fri Jan 02 22:03:42.050298 2026] [:error] [pid 50186:tid 50199] [client 20.42.209.194:17401] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "aVfQPlXqK_iX4f-S70KHqAAAAYs"]
[Fri Jan 02 22:03:42.207689 2026] [:error] [pid 50186:tid 50209] [client 20.42.209.194:20021] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "aVfQPlXqK_iX4f-S70KHqgAAAZU"]
[Fri Jan 02 22:03:42.332524 2026] [:error] [pid 63100:tid 63184] [client 20.42.209.194:16726] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "aVfQPjuUXUKd3KTnKl9buQAAAJc"]
[Fri Jan 02 22:03:42.523347 2026] [:error] [pid 50186:tid 50206] [client 20.42.209.194:19977] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "aVfQPlXqK_iX4f-S70KHqwAAAZI"]
[Fri Jan 02 22:03:42.648357 2026] [:error] [pid 50046:tid 50068] [client 20.42.209.194:17376] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVfQPizv7fgIiwkQYNC5gAAAAVQ"]
[Fri Jan 02 22:03:42.808946 2026] [:error] [pid 63208:tid 63223] [client 20.42.209.194:19975] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVfQPnKLI9INGPLzfndR8gAAAMw"]
[Fri Jan 02 22:03:43.093449 2026] [:error] [pid 29316:tid 29339] [client 20.42.209.194:16765] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVfQP9fT9ty-7jZmgf--HAAAARU"]
[Fri Jan 02 22:03:43.354173 2026] [:error] [pid 50046:tid 50052] [client 20.42.209.194:17380] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVfQPyzv7fgIiwkQYNC5ggAAAUQ"]
[Fri Jan 02 22:03:43.642513 2026] [:error] [pid 50186:tid 50190] [client 20.42.209.194:20047] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ha.php"] [unique_id "aVfQP1XqK_iX4f-S70KHrwAAAYI"]
[Fri Jan 02 22:03:44.035997 2026] [:error] [pid 63208:tid 63231] [client 20.42.209.194:17400] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ha.php"] [unique_id "aVfQQHKLI9INGPLzfndR9AAAANQ"]
[Fri Jan 02 22:03:44.414651 2026] [:error] [pid 50186:tid 50204] [client 20.42.209.194:19982] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ha.php"] [unique_id "aVfQQFXqK_iX4f-S70KHswAAAZA"]
[Fri Jan 02 22:03:44.965049 2026] [:error] [pid 50186:tid 50211] [client 20.42.209.194:22852] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ha.php"] [unique_id "aVfQQFXqK_iX4f-S70KHtgAAAZc"]
[Fri Jan 02 22:03:45.143884 2026] [:error] [pid 50186:tid 50194] [client 20.42.209.194:22900] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gg.php"] [unique_id "aVfQQVXqK_iX4f-S70KHtwAAAYY"]
[Fri Jan 02 22:03:45.237726 2026] [:error] [pid 63208:tid 63225] [client 20.42.209.194:22906] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gg.php"] [unique_id "aVfQQXKLI9INGPLzfndR9QAAAM4"]
[Fri Jan 02 22:03:45.318506 2026] [:error] [pid 50186:tid 50197] [client 20.42.209.194:17379] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gg.php"] [unique_id "aVfQQVXqK_iX4f-S70KHuAAAAYk"]
[Fri Jan 02 22:03:45.491655 2026] [:error] [pid 29316:tid 29331] [client 20.42.209.194:17388] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gg.php"] [unique_id "aVfQQdfT9ty-7jZmgf--HwAAAQ0"]
[Fri Jan 02 22:03:45.571682 2026] [:error] [pid 29316:tid 29330] [client 20.42.209.194:22850] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aVfQQdfT9ty-7jZmgf--IAAAAQw"]
[Fri Jan 02 22:03:45.724642 2026] [:error] [pid 29316:tid 29335] [client 20.42.209.194:22875] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aVfQQdfT9ty-7jZmgf--IQAAARE"]
[Fri Jan 02 22:03:45.798055 2026] [:error] [pid 43358:tid 43360] [client 20.42.209.194:22848] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aVfQQQncbHK9auzvrA9jcAAAAcA"]
[Fri Jan 02 22:03:45.861281 2026] [:error] [pid 63100:tid 63173] [client 20.42.209.194:17373] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aVfQQTuUXUKd3KTnKl9bvwAAAIw"]
[Fri Jan 02 22:03:46.209778 2026] [:error] [pid 43358:tid 43373] [client 20.42.209.194:19991] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x.php"] [unique_id "aVfQQgncbHK9auzvrA9jcQAAAc0"]
[Fri Jan 02 22:03:46.457509 2026] [:error] [pid 63098:tid 63116] [client 20.42.209.194:16755] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x.php"] [unique_id "aVfQQsez9k78gUs48kpxnAAAAAk"]
[Fri Jan 02 22:03:46.628694 2026] [:error] [pid 63208:tid 63232] [client 20.42.209.194:16871] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x.php"] [unique_id "aVfQQnKLI9INGPLzfndR9gAAANU"]
[Fri Jan 02 22:03:46.821277 2026] [:error] [pid 63208:tid 63234] [client 20.42.209.194:16737] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x.php"] [unique_id "aVfQQnKLI9INGPLzfndR-QAAANc"]
[Fri Jan 02 22:03:47.327702 2026] [:error] [pid 43358:tid 43363] [client 20.42.209.194:16714] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aVfQQwncbHK9auzvrA9jcwAAAcM"]
[Fri Jan 02 22:03:47.775906 2026] [:error] [pid 50046:tid 50055] [client 20.42.209.194:16731] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aVfQQyzv7fgIiwkQYNC5hAAAAUc"]
[Fri Jan 02 22:03:48.036751 2026] [:error] [pid 63099:tid 63136] [client 20.42.209.194:17360] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aVfQRMmCZokRPYUhzvjH6AAAAEI"]
[Fri Jan 02 22:03:48.179399 2026] [:error] [pid 29316:tid 29340] [client 20.42.209.194:22864] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aVfQRNfT9ty-7jZmgf--IgAAARY"]
[Fri Jan 02 22:03:48.303787 2026] [:error] [pid 63098:tid 63112] [client 20.42.209.194:20001] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVfQRMez9k78gUs48kpxngAAAAU"]
[Fri Jan 02 22:03:48.461170 2026] [:error] [pid 63098:tid 63126] [client 20.42.209.194:22867] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVfQRMez9k78gUs48kpxnwAAABM"]
[Fri Jan 02 22:03:48.610274 2026] [:error] [pid 50186:tid 50192] [client 20.42.209.194:22892] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVfQRFXqK_iX4f-S70KHwAAAAYQ"]
[Fri Jan 02 22:03:48.723089 2026] [:error] [pid 63208:tid 63219] [client 20.42.209.194:17370] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVfQRHKLI9INGPLzfndR-gAAAMg"]
[Fri Jan 02 22:03:48.846789 2026] [:error] [pid 63208:tid 63224] [client 20.42.209.194:17356] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/radio.php"] [unique_id "aVfQRHKLI9INGPLzfndR-wAAAM0"]
[Fri Jan 02 22:03:48.979991 2026] [:error] [pid 63208:tid 63217] [client 20.42.209.194:20031] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/radio.php"] [unique_id "aVfQRHKLI9INGPLzfndR_AAAAMY"]
[Fri Jan 02 22:03:49.143419 2026] [:error] [pid 63208:tid 63235] [client 20.42.209.194:20046] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/radio.php"] [unique_id "aVfQRXKLI9INGPLzfndR_QAAANg"]
[Fri Jan 02 22:03:49.219801 2026] [:error] [pid 63098:tid 63124] [client 20.42.209.194:16725] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/radio.php"] [unique_id "aVfQRcez9k78gUs48kpxoAAAABE"]
[Fri Jan 02 22:03:49.303430 2026] [:error] [pid 43358:tid 43380] [client 20.42.209.194:16964] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blurbs15.php"] [unique_id "aVfQRQncbHK9auzvrA9jdAAAAdQ"]
[Fri Jan 02 22:03:49.393535 2026] [:error] [pid 63208:tid 63215] [client 20.42.209.194:20025] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blurbs15.php"] [unique_id "aVfQRXKLI9INGPLzfndSAAAAAMQ"]
[Fri Jan 02 22:03:49.534396 2026] [:error] [pid 63098:tid 63122] [client 20.42.209.194:19998] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blurbs15.php"] [unique_id "aVfQRcez9k78gUs48kpxogAAAA8"]
[Fri Jan 02 22:03:49.726400 2026] [:error] [pid 63098:tid 63129] [client 20.42.209.194:22880] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blurbs15.php"] [unique_id "aVfQRcez9k78gUs48kpxowAAABY"]
[Fri Jan 02 22:03:49.973187 2026] [:error] [pid 63098:tid 63110] [client 20.42.209.194:17394] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVfQRcez9k78gUs48kpxpAAAAAM"]
[Fri Jan 02 22:03:50.103532 2026] [:error] [pid 29316:tid 29320] [client 20.42.209.194:16747] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVfQRtfT9ty-7jZmgf--JQAAAQI"]
[Fri Jan 02 22:03:50.493945 2026] [:error] [pid 63099:tid 63137] [client 20.42.209.194:19980] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVfQRsmCZokRPYUhzvjH6gAAAEM"]
[Fri Jan 02 22:03:50.730860 2026] [:error] [pid 43358:tid 43383] [client 20.42.209.194:16921] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVfQRgncbHK9auzvrA9jdQAAAdc"]
[Fri Jan 02 22:03:51.087273 2026] [:error] [pid 63098:tid 63120] [client 20.42.209.194:22853] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVfQR8ez9k78gUs48kpxpQAAAA0"]
[Fri Jan 02 22:03:51.268336 2026] [:error] [pid 63100:tid 63161] [client 20.42.209.194:22877] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVfQRzuUXUKd3KTnKl9bwwAAAIA"]
[Fri Jan 02 22:03:51.625848 2026] [:error] [pid 29316:tid 29326] [client 20.42.209.194:22882] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVfQR9fT9ty-7jZmgf--KAAAAQg"]
[Fri Jan 02 22:03:52.047737 2026] [:error] [pid 63098:tid 63127] [client 20.42.209.194:20009] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVfQSMez9k78gUs48kpxpgAAABQ"]
[Fri Jan 02 22:03:52.277798 2026] [:error] [pid 63098:tid 63131] [client 20.42.209.194:22889] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nox.php"] [unique_id "aVfQSMez9k78gUs48kpxpwAAABg"]
[Fri Jan 02 22:03:52.539383 2026] [:error] [pid 63098:tid 63108] [client 20.42.209.194:16716] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nox.php"] [unique_id "aVfQSMez9k78gUs48kpxqAAAAAE"]
[Fri Jan 02 22:03:53.526836 2026] [:error] [pid 63098:tid 63125] [client 20.42.209.194:20055] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nox.php"] [unique_id "aVfQScez9k78gUs48kpxrQAAABI"]
[Fri Jan 02 22:03:53.804647 2026] [:error] [pid 63099:tid 63155] [client 20.42.209.194:20015] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nox.php"] [unique_id "aVfQScmCZokRPYUhzvjH7gAAAFU"]
[Fri Jan 02 22:03:53.913164 2026] [:error] [pid 50186:tid 50201] [client 20.42.209.194:20013] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file48.php"] [unique_id "aVfQSVXqK_iX4f-S70KHywAAAY0"]
[Fri Jan 02 22:03:54.135729 2026] [:error] [pid 50186:tid 50197] [client 20.42.209.194:22870] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file48.php"] [unique_id "aVfQSlXqK_iX4f-S70KHzAAAAYk"]
[Fri Jan 02 22:03:54.258114 2026] [:error] [pid 50046:tid 50063] [client 20.42.209.194:16885] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file48.php"] [unique_id "aVfQSizv7fgIiwkQYNC5jAAAAU8"]
[Fri Jan 02 22:03:54.481741 2026] [:error] [pid 63208:tid 63216] [client 20.42.209.194:20085] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file48.php"] [unique_id "aVfQSnKLI9INGPLzfndSAgAAAMU"]
[Fri Jan 02 22:03:54.567193 2026] [:error] [pid 43358:tid 43372] [client 20.42.209.194:22862] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/info.php"] [unique_id "aVfQSgncbHK9auzvrA9jdgAAAcw"]
[Fri Jan 02 22:03:54.616603 2026] [:error] [pid 63208:tid 63230] [client 20.42.209.194:16713] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/info.php"] [unique_id "aVfQSnKLI9INGPLzfndSAwAAANM"]
[Fri Jan 02 22:03:54.808363 2026] [:error] [pid 63099:tid 63146] [client 20.42.209.194:20039] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/info.php"] [unique_id "aVfQSsmCZokRPYUhzvjH8AAAAEw"]
[Fri Jan 02 22:03:54.977277 2026] [:error] [pid 43358:tid 43379] [client 20.42.209.194:22861] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/info.php"] [unique_id "aVfQSgncbHK9auzvrA9jeAAAAdM"]
[Fri Jan 02 22:03:55.075349 2026] [:error] [pid 29316:tid 29338] [client 20.42.209.194:20081] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aVfQS9fT9ty-7jZmgf--LAAAARQ"]
[Fri Jan 02 22:03:55.240043 2026] [:error] [pid 29316:tid 29342] [client 20.42.209.194:17382] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aVfQS9fT9ty-7jZmgf--LgAAARg"]
[Fri Jan 02 22:03:55.392745 2026] [:error] [pid 29316:tid 29323] [client 20.42.209.194:16741] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aVfQS9fT9ty-7jZmgf--LwAAAQU"]
[Fri Jan 02 22:03:55.517618 2026] [:error] [pid 63100:tid 63178] [client 20.42.209.194:16730] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aVfQSzuUXUKd3KTnKl9byAAAAJE"]
[Fri Jan 02 22:03:55.646990 2026] [:error] [pid 50046:tid 50071] [client 20.42.209.194:22866] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/la.php"] [unique_id "aVfQSyzv7fgIiwkQYNC5jQAAAVc"]
[Fri Jan 02 22:03:55.808352 2026] [:error] [pid 63208:tid 63218] [client 20.42.209.194:22863] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/la.php"] [unique_id "aVfQS3KLI9INGPLzfndSBQAAAMc"]
[Fri Jan 02 22:03:55.987338 2026] [:error] [pid 63208:tid 63232] [client 20.42.209.194:20040] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/la.php"] [unique_id "aVfQS3KLI9INGPLzfndSBgAAANU"]
[Fri Jan 02 22:03:56.361145 2026] [:error] [pid 50046:tid 50052] [client 20.42.209.194:17367] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/la.php"] [unique_id "aVfQTCzv7fgIiwkQYNC5kQAAAUQ"]
[Fri Jan 02 22:03:56.541367 2026] [:error] [pid 43358:tid 43369] [client 20.42.209.194:22878] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless11.php"] [unique_id "aVfQTAncbHK9auzvrA9jegAAAck"]
[Fri Jan 02 22:03:56.721615 2026] [:error] [pid 63099:tid 63141] [client 20.42.209.194:22895] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless11.php"] [unique_id "aVfQTMmCZokRPYUhzvjH8QAAAEc"]
[Fri Jan 02 22:03:56.922987 2026] [:error] [pid 50186:tid 50191] [client 20.42.209.194:20011] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless11.php"] [unique_id "aVfQTFXqK_iX4f-S70KHzwAAAYM"]
[Fri Jan 02 22:03:57.206389 2026] [:error] [pid 50046:tid 50055] [client 20.42.209.194:19970] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless11.php"] [unique_id "aVfQTSzv7fgIiwkQYNC5kwAAAUc"]
[Fri Jan 02 22:03:57.512682 2026] [:error] [pid 50186:tid 50203] [client 20.42.209.194:19999] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aVfQTVXqK_iX4f-S70KH0QAAAY8"]
[Fri Jan 02 22:03:57.774163 2026] [:error] [pid 63099:tid 63153] [client 20.42.209.194:16729] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aVfQTcmCZokRPYUhzvjH8wAAAFM"]
[Fri Jan 02 22:03:58.121879 2026] [:error] [pid 50186:tid 50192] [client 20.42.209.194:22834] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aVfQTlXqK_iX4f-S70KH0gAAAYQ"]
[Fri Jan 02 22:03:58.179051 2026] [:error] [pid 63098:tid 63109] [client 20.42.209.194:22808] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aVfQTsez9k78gUs48kpxsAAAAAI"]
[Fri Jan 02 22:03:58.251753 2026] [:error] [pid 63099:tid 63143] [client 20.42.209.194:16761] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aVfQTsmCZokRPYUhzvjH9QAAAEk"]
[Fri Jan 02 22:03:58.516165 2026] [:error] [pid 43358:tid 43375] [client 20.42.209.194:20030] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aVfQTgncbHK9auzvrA9jfAAAAc8"]
[Fri Jan 02 22:03:58.680641 2026] [:error] [pid 63100:tid 63180] [client 20.42.209.194:20023] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aVfQTjuUXUKd3KTnKl9bzQAAAJM"]
[Fri Jan 02 22:03:58.809255 2026] [:error] [pid 63099:tid 63158] [client 20.42.209.194:16763] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aVfQTsmCZokRPYUhzvjH9wAAAFg"]
[Fri Jan 02 22:03:59.208608 2026] [:error] [pid 63099:tid 63151] [client 20.42.209.194:19995] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ac.php"] [unique_id "aVfQT8mCZokRPYUhzvjH-AAAAFE"]
[Fri Jan 02 22:03:59.581891 2026] [:error] [pid 50186:tid 50193] [client 20.42.209.194:22910] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ac.php"] [unique_id "aVfQT1XqK_iX4f-S70KH1AAAAYU"]
[Fri Jan 02 22:03:59.853544 2026] [:error] [pid 63099:tid 63140] [client 20.42.209.194:20032] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ac.php"] [unique_id "aVfQT8mCZokRPYUhzvjH-gAAAEY"]
[Fri Jan 02 22:04:00.001261 2026] [:error] [pid 63098:tid 63124] [client 20.42.209.194:20027] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ac.php"] [unique_id "aVfQUMez9k78gUs48kpxsgAAABE"]
[Fri Jan 02 22:04:00.221298 2026] [:error] [pid 63098:tid 63114] [client 20.42.209.194:16733] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/az.php"] [unique_id "aVfQUMez9k78gUs48kpxswAAAAc"]
[Fri Jan 02 22:04:00.664862 2026] [:error] [pid 43358:tid 43368] [client 20.42.209.194:16723] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/az.php"] [unique_id "aVfQUAncbHK9auzvrA9jfwAAAcg"]
[Fri Jan 02 22:04:01.169219 2026] [:error] [pid 63098:tid 63120] [client 20.42.209.194:16955] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/az.php"] [unique_id "aVfQUcez9k78gUs48kpxtwAAAA0"]
[Fri Jan 02 22:04:01.489297 2026] [:error] [pid 63098:tid 63113] [client 20.42.209.194:20061] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/az.php"] [unique_id "aVfQUcez9k78gUs48kpxuAAAAAY"]
[Fri Jan 02 22:04:01.615842 2026] [:error] [pid 50046:tid 50067] [client 20.42.209.194:22876] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/galex.php"] [unique_id "aVfQUSzv7fgIiwkQYNC5lgAAAVM"]
[Fri Jan 02 22:04:01.677360 2026] [:error] [pid 63098:tid 63115] [client 20.42.209.194:16993] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/galex.php"] [unique_id "aVfQUcez9k78gUs48kpxuwAAAAg"]
[Fri Jan 02 22:04:01.818615 2026] [:error] [pid 43358:tid 43371] [client 20.42.209.194:20006] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/galex.php"] [unique_id "aVfQUQncbHK9auzvrA9jgAAAAcs"]
[Fri Jan 02 22:04:01.874506 2026] [:error] [pid 63098:tid 63123] [client 20.42.209.194:22860] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/galex.php"] [unique_id "aVfQUcez9k78gUs48kpxvAAAABA"]
[Fri Jan 02 22:04:01.961187 2026] [:error] [pid 63098:tid 63118] [client 20.42.209.194:16738] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xb.php"] [unique_id "aVfQUcez9k78gUs48kpxvgAAAAs"]
[Fri Jan 02 22:04:02.106088 2026] [:error] [pid 63098:tid 63109] [client 20.42.209.194:16756] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xb.php"] [unique_id "aVfQUsez9k78gUs48kpxwAAAAAI"]
[Fri Jan 02 22:04:02.247378 2026] [:error] [pid 50046:tid 50051] [client 20.42.209.194:20079] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xb.php"] [unique_id "aVfQUizv7fgIiwkQYNC5lwAAAUM"]
[Fri Jan 02 22:04:02.520717 2026] [:error] [pid 50186:tid 50189] [client 20.42.209.194:20056] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xb.php"] [unique_id "aVfQUlXqK_iX4f-S70KH1QAAAYE"]
[Fri Jan 02 22:04:02.784131 2026] [:error] [pid 63099:tid 63155] [client 20.42.209.194:16865] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aVfQUsmCZokRPYUhzvjH_gAAAFU"]
[Fri Jan 02 22:04:03.099165 2026] [:error] [pid 43358:tid 43362] [client 20.42.209.194:16732] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aVfQUwncbHK9auzvrA9jgwAAAcI"]
[Fri Jan 02 22:04:03.362444 2026] [:error] [pid 63098:tid 63126] [client 20.42.209.194:20053] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aVfQU8ez9k78gUs48kpxwgAAABM"]
[Fri Jan 02 22:04:03.833616 2026] [:error] [pid 50046:tid 50066] [client 20.42.209.194:20054] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aVfQUyzv7fgIiwkQYNC5mgAAAVI"]
[Fri Jan 02 22:04:04.138027 2026] [:error] [pid 63208:tid 63211] [client 20.42.209.194:20044] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rh.php"] [unique_id "aVfQVHKLI9INGPLzfndSCAAAAMA"]
[Fri Jan 02 22:04:04.245766 2026] [:error] [pid 63098:tid 63128] [client 20.42.209.194:20035] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rh.php"] [unique_id "aVfQVMez9k78gUs48kpxxQAAABU"]
[Fri Jan 02 22:04:04.505631 2026] [:error] [pid 63098:tid 63110] [client 20.42.209.194:16709] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rh.php"] [unique_id "aVfQVMez9k78gUs48kpxxwAAAAM"]
[Fri Jan 02 22:04:04.690226 2026] [:error] [pid 63208:tid 63213] [client 20.42.209.194:17157] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rh.php"] [unique_id "aVfQVHKLI9INGPLzfndSCQAAAMI"]
[Fri Jan 02 22:04:04.863812 2026] [:error] [pid 63098:tid 63113] [client 20.42.209.194:20063] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aVfQVMez9k78gUs48kpxyQAAAAY"]
[Fri Jan 02 22:04:04.982896 2026] [:error] [pid 63208:tid 63222] [client 20.42.209.194:20087] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aVfQVHKLI9INGPLzfndSCwAAAMs"]
[Fri Jan 02 22:04:05.360189 2026] [:error] [pid 63098:tid 63131] [client 20.42.209.194:16719] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aVfQVcez9k78gUs48kpxzAAAABg"]
[Fri Jan 02 22:04:05.767663 2026] [:error] [pid 63098:tid 63111] [client 20.42.209.194:22907] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aVfQVcez9k78gUs48kpx0gAAAAQ"]
[Fri Jan 02 22:04:05.947172 2026] [:error] [pid 63098:tid 63109] [client 20.42.209.194:20016] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVfQVcez9k78gUs48kpx1AAAAAI"]
[Fri Jan 02 22:04:06.104745 2026] [:error] [pid 43358:tid 43372] [client 20.42.209.194:16745] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVfQVgncbHK9auzvrA9jhgAAAcw"]
[Fri Jan 02 22:04:06.161180 2026] [:error] [pid 50186:tid 50198] [client 20.42.209.194:20078] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVfQVlXqK_iX4f-S70KH2QAAAYo"]
[Fri Jan 02 22:04:06.442513 2026] [:error] [pid 43358:tid 43379] [client 20.42.209.194:20077] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVfQVgncbHK9auzvrA9jhwAAAdM"]
[Fri Jan 02 22:04:06.729823 2026] [:error] [pid 63208:tid 63217] [client 20.42.209.194:22879] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aVfQVnKLI9INGPLzfndSDQAAAMY"]
[Fri Jan 02 22:04:06.920923 2026] [:error] [pid 63208:tid 63235] [client 20.42.209.194:22855] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aVfQVnKLI9INGPLzfndSDgAAANg"]
[Fri Jan 02 22:04:07.130934 2026] [:error] [pid 43358:tid 43365] [client 20.42.209.194:16712] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aVfQVwncbHK9auzvrA9jiQAAAcU"]
[Fri Jan 02 22:04:07.179982 2026] [:error] [pid 50186:tid 50201] [client 20.42.209.194:22884] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aVfQV1XqK_iX4f-S70KH2wAAAY0"]
[Fri Jan 02 22:04:07.281502 2026] [:error] [pid 63208:tid 63228] [client 20.42.209.194:16757] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xse25.php"] [unique_id "aVfQV3KLI9INGPLzfndSDwAAANE"]
[Fri Jan 02 22:04:07.350141 2026] [:error] [pid 50046:tid 50058] [client 20.42.209.194:19993] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xse25.php"] [unique_id "aVfQVyzv7fgIiwkQYNC5nQAAAUo"]
[Fri Jan 02 22:04:07.546832 2026] [:error] [pid 43358:tid 43366] [client 20.42.209.194:20033] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xse25.php"] [unique_id "aVfQVwncbHK9auzvrA9jigAAAcY"]
[Fri Jan 02 22:04:08.138417 2026] [:error] [pid 50186:tid 50197] [client 20.42.209.194:16718] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xse25.php"] [unique_id "aVfQWFXqK_iX4f-S70KH3gAAAYk"]
[Fri Jan 02 22:04:08.474680 2026] [:error] [pid 43358:tid 43367] [client 20.42.209.194:16746] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aVfQWAncbHK9auzvrA9jjgAAAcc"]
[Fri Jan 02 22:04:08.599155 2026] [:error] [pid 50186:tid 50194] [client 20.42.209.194:17183] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aVfQWFXqK_iX4f-S70KH3wAAAYY"]
[Fri Jan 02 22:04:08.892918 2026] [:error] [pid 63098:tid 63129] [client 20.42.209.194:20086] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aVfQWMez9k78gUs48kpx1wAAABY"]
[Fri Jan 02 22:04:09.252837 2026] [:error] [pid 29316:tid 29332] [client 20.42.209.194:20043] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aVfQWdfT9ty-7jZmgf--PwAAAQ4"]
[Fri Jan 02 22:04:09.399894 2026] [:error] [pid 63098:tid 63131] [client 20.42.209.194:22883] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVfQWcez9k78gUs48kpx2QAAABg"]
[Fri Jan 02 22:04:09.497666 2026] [:error] [pid 63099:tid 63148] [client 20.42.209.194:20092] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aVfQWcmCZokRPYUhzvjICAAAAE4"]
[Fri Jan 02 22:04:09.669002 2026] [:error] [pid 63208:tid 63216] [client 20.42.209.194:20042] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aVfQWXKLI9INGPLzfndSFQAAAMU"]
[Fri Jan 02 22:04:09.875066 2026] [:error] [pid 63098:tid 63125] [client 20.42.209.194:16744] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aVfQWcez9k78gUs48kpx2gAAABI"]
[Fri Jan 02 22:04:10.238516 2026] [:error] [pid 50186:tid 50192] [client 20.42.209.194:20028] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aVfQWlXqK_iX4f-S70KH5QAAAYQ"]
[Fri Jan 02 22:04:10.401760 2026] [:error] [pid 63100:tid 63170] [client 20.42.209.194:22871] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shoyo.php"] [unique_id "aVfQWjuUXUKd3KTnKl9b0gAAAIk"]
[Fri Jan 02 22:04:10.628137 2026] [:error] [pid 43358:tid 43371] [client 20.42.209.194:16750] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shoyo.php"] [unique_id "aVfQWgncbHK9auzvrA9jkgAAAcs"]
[Fri Jan 02 22:04:10.892742 2026] [:error] [pid 29316:tid 29337] [client 20.42.209.194:16722] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shoyo.php"] [unique_id "aVfQWtfT9ty-7jZmgf--QAAAARM"]
[Fri Jan 02 22:04:11.246981 2026] [:error] [pid 63208:tid 63212] [client 20.42.209.194:16748] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shoyo.php"] [unique_id "aVfQW3KLI9INGPLzfndSGwAAAME"]
[Fri Jan 02 22:04:11.633305 2026] [:error] [pid 50186:tid 50200] [client 20.42.209.194:16742] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower.php"] [unique_id "aVfQW1XqK_iX4f-S70KH6AAAAYw"]
[Fri Jan 02 22:04:11.939110 2026] [:error] [pid 63100:tid 63161] [client 20.42.209.194:16758] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower.php"] [unique_id "aVfQWzuUXUKd3KTnKl9b1AAAAIA"]
[Fri Jan 02 22:04:12.288274 2026] [:error] [pid 50186:tid 50210] [client 20.42.209.194:16721] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower.php"] [unique_id "aVfQXFXqK_iX4f-S70KH6wAAAZY"]
[Fri Jan 02 22:04:12.691125 2026] [:error] [pid 63098:tid 63110] [client 20.42.209.194:16749] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower.php"] [unique_id "aVfQXMez9k78gUs48kpx6AAAAAM"]
[Fri Jan 02 22:04:13.038338 2026] [:error] [pid 50046:tid 50057] [client 20.42.209.194:22893] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/waq.php"] [unique_id "aVfQXSzv7fgIiwkQYNC5ogAAAUk"]
[Fri Jan 02 22:04:13.435178 2026] [:error] [pid 43358:tid 43362] [client 20.42.209.194:20075] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/waq.php"] [unique_id "aVfQXQncbHK9auzvrA9jlAAAAcI"]
[Fri Jan 02 22:04:13.564659 2026] [:error] [pid 43358:tid 43374] [client 20.42.209.194:20062] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/waq.php"] [unique_id "aVfQXQncbHK9auzvrA9jlQAAAc4"]
[Fri Jan 02 22:04:13.722244 2026] [:error] [pid 43358:tid 43363] [client 20.42.209.194:22888] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/waq.php"] [unique_id "aVfQXQncbHK9auzvrA9jlwAAAcM"]
[Fri Jan 02 22:04:13.900596 2026] [:error] [pid 63100:tid 63162] [client 20.42.209.194:20088] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wakak.php"] [unique_id "aVfQXTuUXUKd3KTnKl9b2AAAAIE"]
[Fri Jan 02 22:04:14.225257 2026] [:error] [pid 63100:tid 63182] [client 20.42.209.194:20068] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wakak.php"] [unique_id "aVfQXjuUXUKd3KTnKl9b2QAAAJU"]
[Fri Jan 02 22:04:14.384432 2026] [:error] [pid 63208:tid 63217] [client 20.42.209.194:16715] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wakak.php"] [unique_id "aVfQXnKLI9INGPLzfndSIQAAAMY"]
[Fri Jan 02 22:04:14.447812 2026] [:error] [pid 63208:tid 63235] [client 20.42.209.194:20074] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wakak.php"] [unique_id "aVfQXnKLI9INGPLzfndSIgAAANg"]
[Fri Jan 02 22:04:14.579532 2026] [:error] [pid 63100:tid 63180] [client 20.42.209.194:16743] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aVfQXjuUXUKd3KTnKl9b2gAAAJM"]
[Fri Jan 02 22:04:14.740800 2026] [:error] [pid 43358:tid 43377] [client 20.42.209.194:20045] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aVfQXgncbHK9auzvrA9jmQAAAdE"]
[Fri Jan 02 22:04:14.935788 2026] [:error] [pid 63099:tid 63144] [client 20.42.209.194:20017] [client 20.42.209.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aVfQXsmCZokRPYUhzvjIEQAAAEo"]
[Fri Jan 02 22:04:21.091172 2026] [:error] [pid 50046:tid 50064] [client 20.42.209.194:17229] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVfQZSzv7fgIiwkQYNC5swAAAVA"]
[Fri Jan 02 22:04:21.667775 2026] [:error] [pid 63098:tid 63112] [client 20.42.209.194:20083] [client 20.42.209.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aVfQZcez9k78gUs48kpyBgAAAAU"]
[Sat Jan 03 03:31:27.524739 2026] [:error] [pid 1931:tid 1993] [client 135.235.168.239:40994] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an8.php"] [unique_id "aVgdDx8Tyw7ZoIdXlcbbNgAAAIA"]
[Sat Jan 03 03:31:28.864941 2026] [:error] [pid 1931:tid 2034] [client 135.235.168.239:56296] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an8.php"] [unique_id "aVgdEB8Tyw7ZoIdXlcbbNwAAAIo"]
[Sat Jan 03 03:31:30.355278 2026] [:error] [pid 1931:tid 2039] [client 135.235.168.239:41008] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an8.php"] [unique_id "aVgdEh8Tyw7ZoIdXlcbbOgAAAI8"]
[Sat Jan 03 03:31:31.732099 2026] [:error] [pid 1931:tid 2042] [client 135.235.168.239:45910] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an8.php"] [unique_id "aVgdEx8Tyw7ZoIdXlcbbPQAAAJI"]
[Sat Jan 03 03:31:33.754803 2026] [:error] [pid 1929:tid 1948] [client 135.235.168.239:56307] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/esp.php"] [unique_id "aVgdFecFqdpu6TNsuWqyQQAAAAo"]
[Sat Jan 03 03:31:36.409640 2026] [:error] [pid 2083:tid 2103] [client 135.235.168.239:56315] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/esp.php"] [unique_id "aVgdGDVlR_BmlMPnhV6dXQAAANI"]
[Sat Jan 03 03:31:38.630609 2026] [:error] [pid 1931:tid 2040] [client 135.235.168.239:56301] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/esp.php"] [unique_id "aVgdGh8Tyw7ZoIdXlcbbRQAAAJA"]
[Sat Jan 03 03:31:39.495529 2026] [:error] [pid 2083:tid 2090] [client 135.235.168.239:41001] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/esp.php"] [unique_id "aVgdGzVlR_BmlMPnhV6dYQAAAMU"]
[Sat Jan 03 03:31:40.254039 2026] [:error] [pid 1931:tid 1999] [client 135.235.168.239:40965] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/21x.php"] [unique_id "aVgdHB8Tyw7ZoIdXlcbbTQAAAIM"]
[Sat Jan 03 03:31:41.903583 2026] [:error] [pid 1930:tid 1980] [client 135.235.168.239:40987] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/21x.php"] [unique_id "aVgdHZP-6mqhfUDa89y66gAAAE4"]
[Sat Jan 03 03:31:45.671747 2026] [:error] [pid 1930:tid 1972] [client 135.235.168.239:56309] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/21x.php"] [unique_id "aVgdIZP-6mqhfUDa89y67wAAAEY"]
[Sat Jan 03 03:31:47.728180 2026] [:error] [pid 1930:tid 1990] [client 135.235.168.239:56268] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/21x.php"] [unique_id "aVgdI5P-6mqhfUDa89y68QAAAFg"]
[Sat Jan 03 03:31:49.245623 2026] [:error] [pid 1929:tid 1945] [client 135.235.168.239:40971] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/out.php"] [unique_id "aVgdJecFqdpu6TNsuWqyRwAAAAc"]
[Sat Jan 03 03:31:49.855686 2026] [:error] [pid 1929:tid 1939] [client 135.235.168.239:56288] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/out.php"] [unique_id "aVgdJecFqdpu6TNsuWqySQAAAAE"]
[Sat Jan 03 03:31:50.823169 2026] [:error] [pid 1930:tid 1983] [client 135.235.168.239:56293] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/out.php"] [unique_id "aVgdJpP-6mqhfUDa89y69gAAAFE"]
[Sat Jan 03 03:31:51.823589 2026] [:error] [pid 2083:tid 2089] [client 135.235.168.239:56270] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/out.php"] [unique_id "aVgdJzVlR_BmlMPnhV6ddAAAAMQ"]
[Sat Jan 03 03:31:54.012377 2026] [:error] [pid 1931:tid 2044] [client 135.235.168.239:45937] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower2.php"] [unique_id "aVgdKh8Tyw7ZoIdXlcbbUgAAAJQ"]
[Sat Jan 03 03:31:54.639933 2026] [:error] [pid 1929:tid 1941] [client 135.235.168.239:56272] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower2.php"] [unique_id "aVgdKucFqdpu6TNsuWqyXwAAAAM"]
[Sat Jan 03 03:31:56.481021 2026] [:error] [pid 2083:tid 2094] [client 135.235.168.239:40998] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower2.php"] [unique_id "aVgdLDVlR_BmlMPnhV6dfgAAAMk"]
[Sat Jan 03 03:31:57.809731 2026] [:error] [pid 1929:tid 1941] [client 135.235.168.239:56302] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower2.php"] [unique_id "aVgdLecFqdpu6TNsuWqyaQAAAAM"]
[Sat Jan 03 03:31:58.603919 2026] [:error] [pid 2083:tid 2101] [client 135.235.168.239:56285] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/family.php"] [unique_id "aVgdLjVlR_BmlMPnhV6dggAAANA"]
[Sat Jan 03 03:31:58.990758 2026] [:error] [pid 2083:tid 2086] [client 135.235.168.239:56300] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/family.php"] [unique_id "aVgdLjVlR_BmlMPnhV6dgwAAAME"]
[Sat Jan 03 03:32:00.517293 2026] [:error] [pid 1929:tid 1939] [client 135.235.168.239:41004] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/family.php"] [unique_id "aVgdMOcFqdpu6TNsuWqybAAAAAE"]
[Sat Jan 03 03:32:01.741826 2026] [:error] [pid 1931:tid 2048] [client 135.235.168.239:45889] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/family.php"] [unique_id "aVgdMR8Tyw7ZoIdXlcbbWwAAAJg"]
[Sat Jan 03 03:32:02.959422 2026] [:error] [pid 2083:tid 2099] [client 135.235.168.239:40992] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "aVgdMjVlR_BmlMPnhV6diQAAAM4"]
[Sat Jan 03 03:32:03.966275 2026] [:error] [pid 2083:tid 2102] [client 135.235.168.239:56283] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "aVgdMzVlR_BmlMPnhV6djgAAANE"]
[Sat Jan 03 03:32:05.206313 2026] [:error] [pid 2083:tid 2091] [client 135.235.168.239:40982] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "aVgdNTVlR_BmlMPnhV6dlAAAAMY"]
[Sat Jan 03 03:32:06.872701 2026] [:error] [pid 1931:tid 2045] [client 135.235.168.239:56317] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "aVgdNh8Tyw7ZoIdXlcbbZAAAAJU"]
[Sat Jan 03 03:32:07.925772 2026] [:error] [pid 1930:tid 1982] [client 135.235.168.239:45892] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ma.php"] [unique_id "aVgdN5P-6mqhfUDa89y7FQAAAFA"]
[Sat Jan 03 03:32:08.593640 2026] [:error] [pid 1930:tid 1973] [client 135.235.168.239:40970] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ma.php"] [unique_id "aVgdOJP-6mqhfUDa89y7GAAAAEc"]
[Sat Jan 03 03:32:09.171468 2026] [:error] [pid 1931:tid 2046] [client 135.235.168.239:40978] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ma.php"] [unique_id "aVgdOR8Tyw7ZoIdXlcbbqAAAAJY"]
[Sat Jan 03 03:32:09.979493 2026] [:error] [pid 2083:tid 2088] [client 135.235.168.239:40961] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ma.php"] [unique_id "aVgdOTVlR_BmlMPnhV6dnQAAAMM"]
[Sat Jan 03 03:32:10.462080 2026] [:error] [pid 1930:tid 1975] [client 135.235.168.239:45925] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aVgdOpP-6mqhfUDa89y7GwAAAEk"]
[Sat Jan 03 03:32:11.625993 2026] [:error] [pid 2083:tid 2096] [client 135.235.168.239:56261] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aVgdOzVlR_BmlMPnhV6doAAAAMs"]
[Sat Jan 03 03:32:12.967298 2026] [:error] [pid 1931:tid 1994] [client 135.235.168.239:56316] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aVgdPB8Tyw7ZoIdXlcbbzQAAAIE"]
[Sat Jan 03 03:32:13.768181 2026] [:error] [pid 1930:tid 1985] [client 135.235.168.239:40993] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aVgdPZP-6mqhfUDa89y7HwAAAFM"]
[Sat Jan 03 03:32:14.588603 2026] [:error] [pid 1931:tid 2033] [client 135.235.168.239:56292] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lanz.php"] [unique_id "aVgdPh8Tyw7ZoIdXlcbbzgAAAIk"]
[Sat Jan 03 03:32:15.636766 2026] [:error] [pid 1931:tid 2027] [client 135.235.168.239:40963] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lanz.php"] [unique_id "aVgdPx8Tyw7ZoIdXlcbbzwAAAIQ"]
[Sat Jan 03 03:32:17.323266 2026] [:error] [pid 1931:tid 1993] [client 135.235.168.239:56303] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lanz.php"] [unique_id "aVgdQR8Tyw7ZoIdXlcbb0AAAAIA"]
[Sat Jan 03 03:32:17.855283 2026] [:error] [pid 2083:tid 2106] [client 135.235.168.239:40974] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lanz.php"] [unique_id "aVgdQTVlR_BmlMPnhV6d6wAAANU"]
[Sat Jan 03 03:32:19.762621 2026] [:error] [pid 1929:tid 1945] [client 135.235.168.239:40975] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xeeex.php"] [unique_id "aVgdQ-cFqdpu6TNsuWqydwAAAAc"]
[Sat Jan 03 03:32:20.606415 2026] [:error] [pid 1929:tid 1941] [client 135.235.168.239:40996] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xeeex.php"] [unique_id "aVgdROcFqdpu6TNsuWqyeAAAAAM"]
[Sat Jan 03 03:32:21.398721 2026] [:error] [pid 1929:tid 1938] [client 135.235.168.239:40969] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xeeex.php"] [unique_id "aVgdRecFqdpu6TNsuWqyegAAAAA"]
[Sat Jan 03 03:32:22.400169 2026] [:error] [pid 2083:tid 2107] [client 135.235.168.239:40988] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xeeex.php"] [unique_id "aVgdRjVlR_BmlMPnhV6d8gAAANY"]
[Sat Jan 03 03:32:22.956430 2026] [:error] [pid 1931:tid 2031] [client 135.235.168.239:56280] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tons.php"] [unique_id "aVgdRh8Tyw7ZoIdXlcbb1gAAAIc"]
[Sat Jan 03 03:32:24.812203 2026] [:error] [pid 2083:tid 2090] [client 135.235.168.239:56311] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tons.php"] [unique_id "aVgdSDVlR_BmlMPnhV6d9gAAAMU"]
[Sat Jan 03 03:33:08.972419 2026] [:error] [pid 1929:tid 1960] [client 135.235.168.239:45909] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aVgddOcFqdpu6TNsuWqyuQAAABY"]
[Sat Jan 03 03:33:09.619880 2026] [:error] [pid 1931:tid 1999] [client 135.235.168.239:41012] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aVgddR8Tyw7ZoIdXlcbb6gAAAIM"]
[Sat Jan 03 03:33:11.900771 2026] [:error] [pid 1930:tid 1989] [client 135.235.168.239:45921] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aVgdd5P-6mqhfUDa89y7YQAAAFc"]
[Sat Jan 03 03:33:13.338498 2026] [:error] [pid 2083:tid 2101] [client 135.235.168.239:40960] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aVgdeTVlR_BmlMPnhV6eOQAAANA"]
[Sat Jan 03 03:33:14.334788 2026] [:error] [pid 2083:tid 2085] [client 135.235.168.239:56287] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aVgdejVlR_BmlMPnhV6ePQAAAMA"]
[Sat Jan 03 03:33:14.638243 2026] [:error] [pid 1930:tid 1979] [client 135.235.168.239:41007] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aVgdepP-6mqhfUDa89y7YgAAAE0"]
[Sat Jan 03 03:33:15.541482 2026] [:error] [pid 1930:tid 1978] [client 135.235.168.239:45898] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aVgde5P-6mqhfUDa89y7YwAAAEw"]
[Sat Jan 03 03:33:16.273083 2026] [:error] [pid 1930:tid 1970] [client 135.235.168.239:56275] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aVgdfJP-6mqhfUDa89y7ZAAAAEQ"]
[Sat Jan 03 04:18:05.794128 2026] [:error] [pid 1930:tid 1976] [client 98.70.103.76:21476] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVgn_ZP-6mqhfUDa89zJEwAAAEo"]
[Sat Jan 03 04:18:08.302821 2026] [:error] [pid 34260:tid 34281] [client 98.70.103.76:21377] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVgoAEWWhyvZ0O9KNVR-yAAAARM"]
[Sat Jan 03 04:18:09.986655 2026] [:error] [pid 1931:tid 1999] [client 98.70.103.76:21500] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVgoAR8Tyw7ZoIdXlcbrMQAAAIM"]
[Sat Jan 03 04:18:11.741084 2026] [:error] [pid 1929:tid 1942] [client 98.70.103.76:21394] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aVgoA-cFqdpu6TNsuWrAQQAAAAQ"]
[Sat Jan 03 04:18:12.610245 2026] [:error] [pid 1930:tid 1969] [client 98.70.103.76:21430] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aVgoBJP-6mqhfUDa89zJIgAAAEM"]
[Sat Jan 03 04:18:15.662472 2026] [:error] [pid 2083:tid 2097] [client 98.70.103.76:21494] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aVgoBzVlR_BmlMPnhV6ungAAAMw"]
[Sat Jan 03 04:18:17.329886 2026] [:error] [pid 1929:tid 1945] [client 98.70.103.76:21489] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aVgoCecFqdpu6TNsuWrARwAAAAc"]
[Sat Jan 03 04:18:22.175209 2026] [:error] [pid 34260:tid 34267] [client 98.70.103.76:21462] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aVgoDkWWhyvZ0O9KNVR-8AAAAQU"]
[Sat Jan 03 04:18:23.644723 2026] [:error] [pid 34260:tid 34285] [client 98.70.103.76:21384] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVgoD0WWhyvZ0O9KNVR-9wAAARc"]
[Sat Jan 03 04:18:24.281305 2026] [:error] [pid 1931:tid 2044] [client 98.70.103.76:21457] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVgoEB8Tyw7ZoIdXlcbrSgAAAJQ"]
[Sat Jan 03 04:18:25.538297 2026] [:error] [pid 1930:tid 1972] [client 98.70.103.76:21316] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVgoEZP-6mqhfUDa89zJNgAAAEY"]
[Sat Jan 03 04:18:26.141607 2026] [:error] [pid 1931:tid 2040] [client 98.70.103.76:21451] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVgoEh8Tyw7ZoIdXlcbrUwAAAJA"]
[Sat Jan 03 04:18:26.843515 2026] [:error] [pid 34260:tid 34276] [client 98.70.103.76:21484] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgoEkWWhyvZ0O9KNVR_AgAAAQ4"]
[Sat Jan 03 04:18:29.630939 2026] [:error] [pid 1929:tid 1954] [client 98.70.103.76:21481] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgoFecFqdpu6TNsuWrAWwAAABA"]
[Sat Jan 03 04:18:30.457353 2026] [:error] [pid 1931:tid 1996] [client 98.70.103.76:21480] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgoFh8Tyw7ZoIdXlcbrXwAAAII"]
[Sat Jan 03 04:18:33.927717 2026] [:error] [pid 2083:tid 2103] [client 98.70.103.76:21490] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgoGTVlR_BmlMPnhV6uuAAAANI"]
[Sat Jan 03 04:18:59.093446 2026] [:error] [pid 1929:tid 1945] [client 98.70.103.76:21482] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aVgoM-cFqdpu6TNsuWrAcAAAAAc"]
[Sat Jan 03 04:19:02.572017 2026] [:error] [pid 1930:tid 1969] [client 98.70.103.76:21456] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aVgoNpP-6mqhfUDa89zJTAAAAEM"]
[Sat Jan 03 04:19:14.946647 2026] [:error] [pid 1930:tid 1983] [client 98.70.103.76:21385] [client 98.70.103.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.70.103.76, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVgoQpP-6mqhfUDa89zJXgAAAFE"]
[Sat Jan 03 04:19:28.056698 2026] [:error] [pid 1930:tid 1978] [client 98.70.103.76:21385] [client 98.70.103.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aVgoUJP-6mqhfUDa89zJaAAAAEw"]
[Sat Jan 03 04:20:07.657876 2026] [:error] [pid 1930:tid 1969] [client 98.70.103.76:21471] [client 98.70.103.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.70.103.76, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVgod5P-6mqhfUDa89zJlwAAAEM"]
[Sat Jan 03 04:20:22.294097 2026] [:error] [pid 1930:tid 1984] [client 98.70.103.76:21382] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVgohpP-6mqhfUDa89zJpwAAAFI"]
[Sat Jan 03 04:20:23.102204 2026] [:error] [pid 1930:tid 1969] [client 98.70.103.76:21383] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVgoh5P-6mqhfUDa89zJqAAAAEM"]
[Sat Jan 03 04:20:24.285650 2026] [:error] [pid 2083:tid 2089] [client 98.70.103.76:21395] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVgoiDVlR_BmlMPnhV6vdQAAAMQ"]
[Sat Jan 03 04:20:25.327143 2026] [:error] [pid 2083:tid 2097] [client 98.70.103.76:21408] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVgoiTVlR_BmlMPnhV6vdgAAAMw"]
[Sat Jan 03 04:20:27.354825 2026] [:error] [pid 34260:tid 34276] [client 98.70.103.76:21404] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVgoi0WWhyvZ0O9KNVSAXwAAAQ4"]
[Sat Jan 03 04:20:27.813684 2026] [:error] [pid 2083:tid 2094] [client 98.70.103.76:21495] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVgoizVlR_BmlMPnhV6vegAAAMk"]
[Sat Jan 03 04:20:30.188663 2026] [:error] [pid 2083:tid 2103] [client 98.70.103.76:21411] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVgojjVlR_BmlMPnhV6vfAAAANI"]
[Sat Jan 03 04:20:31.534454 2026] [:error] [pid 1931:tid 2030] [client 98.70.103.76:21380] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVgojx8Tyw7ZoIdXlcbsAQAAAIY"]
[Sat Jan 03 04:20:32.812528 2026] [:error] [pid 2083:tid 2109] [client 98.70.103.76:21496] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "aVgokDVlR_BmlMPnhV6vgQAAANg"]
[Sat Jan 03 04:20:35.361022 2026] [:error] [pid 1930:tid 1966] [client 98.70.103.76:21405] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "aVgok5P-6mqhfUDa89zJtQAAAEA"]
[Sat Jan 03 04:20:36.519388 2026] [:error] [pid 2083:tid 2102] [client 98.70.103.76:21323] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "aVgolDVlR_BmlMPnhV6vjAAAANE"]
[Sat Jan 03 04:20:38.489078 2026] [:error] [pid 1931:tid 2046] [client 98.70.103.76:21455] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "aVgolh8Tyw7ZoIdXlcbsDAAAAJY"]
[Sat Jan 03 04:20:40.362454 2026] [:error] [pid 1929:tid 1940] [client 98.70.103.76:21452] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aVgomOcFqdpu6TNsuWrAuQAAAAI"]
[Sat Jan 03 04:20:41.477529 2026] [:error] [pid 1931:tid 2045] [client 98.70.103.76:21314] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aVgomR8Tyw7ZoIdXlcbsDwAAAJU"]
[Sat Jan 03 04:20:43.419904 2026] [:error] [pid 1929:tid 1953] [client 98.70.103.76:21446] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aVgom-cFqdpu6TNsuWrAvgAAAA8"]
[Sat Jan 03 04:20:48.654098 2026] [:error] [pid 1929:tid 1944] [client 98.70.103.76:21440] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aVgooOcFqdpu6TNsuWrAwwAAAAY"]
[Sat Jan 03 04:20:50.055718 2026] [:error] [pid 2083:tid 2101] [client 98.70.103.76:21376] [client 98.70.103.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php"] [unique_id "aVgoojVlR_BmlMPnhV6vlwAAANA"]
[Sat Jan 03 04:20:51.752245 2026] [:error] [pid 34260:tid 34286] [client 98.70.103.76:21433] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manage.php"] [unique_id "aVgoo0WWhyvZ0O9KNVSAkwAAARg"]
[Sat Jan 03 04:20:53.520849 2026] [:error] [pid 1931:tid 2047] [client 98.70.103.76:21464] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manage.php"] [unique_id "aVgopR8Tyw7ZoIdXlcbsHgAAAJc"]
[Sat Jan 03 04:20:54.516387 2026] [:error] [pid 1931:tid 2042] [client 98.70.103.76:21444] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manage.php"] [unique_id "aVgoph8Tyw7ZoIdXlcbsIgAAAJI"]
[Sat Jan 03 04:20:57.186860 2026] [:error] [pid 1931:tid 2031] [client 98.70.103.76:21441] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manage.php"] [unique_id "aVgoqR8Tyw7ZoIdXlcbsKQAAAIc"]
[Sat Jan 03 04:20:58.416187 2026] [:error] [pid 1931:tid 2030] [client 98.70.103.76:21379] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aVgoqh8Tyw7ZoIdXlcbsLgAAAIY"]
[Sat Jan 03 04:20:59.380879 2026] [:error] [pid 1931:tid 2042] [client 98.70.103.76:21337] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aVgoqx8Tyw7ZoIdXlcbsMQAAAJI"]
[Sat Jan 03 04:21:01.513881 2026] [:error] [pid 2083:tid 2106] [client 98.70.103.76:21475] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aVgorTVlR_BmlMPnhV6vpgAAANU"]
[Sat Jan 03 04:21:03.596669 2026] [:error] [pid 1930:tid 1984] [client 98.70.103.76:21450] [client 98.70.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aVgor5P-6mqhfUDa89zJ1gAAAFI"]
[Sun Jan 04 00:47:39.634822 2026] [proxy_fcgi:error] [pid 49229:tid 49266] [client 103.4.122.14:42484] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1767458859.3755109310150146484375', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Sun Jan 04 17:47:28.517348 2026] [autoindex:error] [pid 4427:tid 4480] [client 138.197.13.155:50289] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 04 20:03:45.931609 2026] [:error] [pid 11994:tid 12049] [client 20.205.40.94:8145] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oo.php"] [unique_id "aVpXITzmfB9_P7JmZ-MU8gAAA1g"]
[Sun Jan 04 20:03:46.389163 2026] [:error] [pid 58433:tid 58488] [client 20.205.40.94:8167] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oo.php"] [unique_id "aVpXIk5m7bkw35zhUNbomAAAARg"]
[Sun Jan 04 20:03:47.207676 2026] [:error] [pid 1297:tid 1303] [client 20.205.40.94:8183] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oo.php"] [unique_id "aVpXIxf98x0RBG23PjfV8gAAAAQ"]
[Sun Jan 04 20:03:47.544375 2026] [:error] [pid 58433:tid 58472] [client 20.205.40.94:8144] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oo.php"] [unique_id "aVpXI05m7bkw35zhUNbomwAAAQg"]
[Sun Jan 04 20:03:48.197662 2026] [:error] [pid 11994:tid 12027] [client 20.205.40.94:8160] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "aVpXJDzmfB9_P7JmZ-MU-gAAA0I"]
[Sun Jan 04 20:03:48.641335 2026] [:error] [pid 5661:tid 5712] [client 20.205.40.94:8170] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "aVpXJLsKeIMjMZCmSEn3UAAAAhY"]
[Sun Jan 04 20:03:49.111372 2026] [:error] [pid 5661:tid 5710] [client 20.205.40.94:8182] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "aVpXJbsKeIMjMZCmSEn3UgAAAhQ"]
[Sun Jan 04 20:03:49.474908 2026] [:error] [pid 5010:tid 5062] [client 20.205.40.94:8158] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "aVpXJbV9sNJtnPnkkz-YBQAAApU"]
[Sun Jan 04 20:03:50.160299 2026] [:error] [pid 11993:tid 12016] [client 20.205.40.94:8064] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lisa.php"] [unique_id "aVpXJvoqPNcIA-YgSRmM7gAAAtI"]
[Sun Jan 04 20:03:50.615714 2026] [:error] [pid 11931:tid 11938] [client 20.205.40.94:8086] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lisa.php"] [unique_id "aVpXJoEqfZyxESsOcB10PQAAAcQ"]
[Sun Jan 04 20:03:51.225528 2026] [:error] [pid 1328:tid 1332] [client 20.205.40.94:8130] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lisa.php"] [unique_id "aVpXJ0_-FkByL1SGKiTTcwAAAUE"]
[Sun Jan 04 20:03:51.723981 2026] [:error] [pid 1328:tid 1345] [client 20.205.40.94:8139] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lisa.php"] [unique_id "aVpXJ0_-FkByL1SGKiTTdAAAAU4"]
[Sun Jan 04 20:03:52.052968 2026] [:error] [pid 5727:tid 5770] [client 20.205.40.94:8082] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aVpXKOw4wd_I9FHn6_-wtQAAAws"]
[Sun Jan 04 20:03:52.466506 2026] [:error] [pid 5727:tid 5764] [client 20.205.40.94:8074] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aVpXKOw4wd_I9FHn6_-wtgAAAwU"]
[Sun Jan 04 20:03:52.936015 2026] [:error] [pid 58433:tid 58483] [client 20.205.40.94:8138] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aVpXKE5m7bkw35zhUNboowAAARM"]
[Sun Jan 04 20:03:53.259308 2026] [:error] [pid 1328:tid 1344] [client 20.205.40.94:8111] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aVpXKU_-FkByL1SGKiTTeAAAAU0"]
[Sun Jan 04 20:03:54.312635 2026] [:error] [pid 5727:tid 5774] [client 20.205.40.94:8132] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "aVpXKuw4wd_I9FHn6_-wuwAAAw8"]
[Sun Jan 04 20:03:54.757657 2026] [:error] [pid 1328:tid 1339] [client 20.205.40.94:8187] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "aVpXKk_-FkByL1SGKiTTegAAAUg"]
[Sun Jan 04 20:03:55.364389 2026] [:error] [pid 5727:tid 5781] [client 20.205.40.94:8157] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "aVpXK-w4wd_I9FHn6_-wvQAAAxY"]
[Sun Jan 04 20:03:55.966578 2026] [:error] [pid 11993:tid 12015] [client 20.205.40.94:8184] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "aVpXK_oqPNcIA-YgSRmM8wAAAtE"]
[Sun Jan 04 20:03:56.476642 2026] [:error] [pid 11993:tid 12020] [client 20.205.40.94:8161] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless14.php"] [unique_id "aVpXLPoqPNcIA-YgSRmM9AAAAtY"]
[Sun Jan 04 20:03:56.787765 2026] [:error] [pid 5010:tid 5054] [client 20.205.40.94:8101] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless14.php"] [unique_id "aVpXLLV9sNJtnPnkkz-YDgAAAo0"]
[Sun Jan 04 20:03:57.716263 2026] [:error] [pid 5727:tid 5778] [client 20.205.40.94:8098] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless14.php"] [unique_id "aVpXLew4wd_I9FHn6_-wvwAAAxM"]
[Sun Jan 04 20:03:58.693689 2026] [:error] [pid 5661:tid 5703] [client 20.205.40.94:8178] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless14.php"] [unique_id "aVpXLrsKeIMjMZCmSEn3WQAAAg0"]
[Sun Jan 04 20:03:59.129943 2026] [:error] [pid 5661:tid 5699] [client 20.205.40.94:8189] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/87.php"] [unique_id "aVpXL7sKeIMjMZCmSEn3WwAAAgk"]
[Sun Jan 04 20:03:59.594477 2026] [:error] [pid 11994:tid 12028] [client 20.205.40.94:8135] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/87.php"] [unique_id "aVpXLzzmfB9_P7JmZ-MVAgAAA0M"]
[Sun Jan 04 20:04:00.913029 2026] [:error] [pid 5661:tid 5698] [client 20.205.40.94:8080] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/87.php"] [unique_id "aVpXMLsKeIMjMZCmSEn3XgAAAgg"]
[Sun Jan 04 20:04:01.562894 2026] [:error] [pid 5661:tid 5697] [client 20.205.40.94:8065] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/87.php"] [unique_id "aVpXMbsKeIMjMZCmSEn3XwAAAgc"]
[Sun Jan 04 20:04:01.936771 2026] [:error] [pid 5661:tid 5712] [client 20.205.40.94:8078] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nox.php"] [unique_id "aVpXMbsKeIMjMZCmSEn3YAAAAhY"]
[Sun Jan 04 20:04:02.803444 2026] [:error] [pid 11994:tid 12042] [client 20.205.40.94:8133] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nox.php"] [unique_id "aVpXMjzmfB9_P7JmZ-MVCwAAA1E"]
[Sun Jan 04 20:04:03.279825 2026] [:error] [pid 5661:tid 5702] [client 20.205.40.94:8075] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nox.php"] [unique_id "aVpXM7sKeIMjMZCmSEn3YQAAAgw"]
[Sun Jan 04 20:04:03.717723 2026] [:error] [pid 5661:tid 5700] [client 20.205.40.94:8186] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nox.php"] [unique_id "aVpXM7sKeIMjMZCmSEn3YgAAAgo"]
[Sun Jan 04 20:04:04.400917 2026] [:error] [pid 11994:tid 12049] [client 20.205.40.94:8143] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aVpXNDzmfB9_P7JmZ-MVDQAAA1g"]
[Sun Jan 04 20:04:04.831378 2026] [:error] [pid 11994:tid 12031] [client 20.205.40.94:8150] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aVpXNDzmfB9_P7JmZ-MVDwAAA0Y"]
[Sun Jan 04 20:04:05.164036 2026] [:error] [pid 11931:tid 11949] [client 20.205.40.94:8085] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aVpXNYEqfZyxESsOcB10TwAAAc8"]
[Sun Jan 04 20:04:05.570812 2026] [:error] [pid 11994:tid 12034] [client 20.205.40.94:8070] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aVpXNTzmfB9_P7JmZ-MVEgAAA0k"]
[Sun Jan 04 20:04:06.143248 2026] [:error] [pid 11993:tid 12004] [client 20.205.40.94:8112] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acwfihfh.php"] [unique_id "aVpXNvoqPNcIA-YgSRmNBQAAAsY"]
[Sun Jan 04 20:04:06.753983 2026] [:error] [pid 11993:tid 12022] [client 20.205.40.94:8010] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acwfihfh.php"] [unique_id "aVpXNvoqPNcIA-YgSRmNBwAAAtg"]
[Sun Jan 04 20:04:07.816017 2026] [:error] [pid 5661:tid 5704] [client 20.205.40.94:8126] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acwfihfh.php"] [unique_id "aVpXN7sKeIMjMZCmSEn3YwAAAg4"]
[Sun Jan 04 20:04:08.610857 2026] [:error] [pid 1297:tid 1299] [client 20.205.40.94:8169] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acwfihfh.php"] [unique_id "aVpXOBf98x0RBG23PjfV-AAAAAA"]
[Sun Jan 04 20:04:09.072453 2026] [:error] [pid 11994:tid 12040] [client 20.205.40.94:8176] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bras.php"] [unique_id "aVpXOTzmfB9_P7JmZ-MVFQAAA08"]
[Sun Jan 04 20:04:09.792791 2026] [:error] [pid 11994:tid 12039] [client 20.205.40.94:8171] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bras.php"] [unique_id "aVpXOTzmfB9_P7JmZ-MVFwAAA04"]
[Sun Jan 04 20:04:10.575608 2026] [:error] [pid 11931:tid 11941] [client 20.205.40.94:8134] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bras.php"] [unique_id "aVpXOoEqfZyxESsOcB10VgAAAcc"]
[Sun Jan 04 20:04:11.310714 2026] [:error] [pid 5629:tid 5644] [client 20.205.40.94:8136] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bras.php"] [unique_id "aVpXO55cwu3wbyCj4doRfQAAAI0"]
[Sun Jan 04 20:04:12.168783 2026] [:error] [pid 5629:tid 5639] [client 20.205.40.94:8152] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an8.php"] [unique_id "aVpXPJ5cwu3wbyCj4doRfwAAAIg"]
[Sun Jan 04 20:04:12.576902 2026] [:error] [pid 11931:tid 11949] [client 20.205.40.94:8081] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an8.php"] [unique_id "aVpXPIEqfZyxESsOcB10VwAAAc8"]
[Sun Jan 04 20:04:13.409474 2026] [:error] [pid 11994:tid 12045] [client 20.205.40.94:8148] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an8.php"] [unique_id "aVpXPTzmfB9_P7JmZ-MVHQAAA1Q"]
[Sun Jan 04 20:04:13.831635 2026] [:error] [pid 1297:tid 1307] [client 20.205.40.94:8159] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an8.php"] [unique_id "aVpXPRf98x0RBG23PjfV-QAAAAg"]
[Sun Jan 04 20:04:14.763320 2026] [:error] [pid 11993:tid 12006] [client 20.205.40.94:8166] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/esp.php"] [unique_id "aVpXPvoqPNcIA-YgSRmNDQAAAsg"]
[Sun Jan 04 20:04:15.370365 2026] [:error] [pid 1328:tid 1331] [client 20.205.40.94:8154] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/esp.php"] [unique_id "aVpXP0_-FkByL1SGKiTTiQAAAUA"]
[Sun Jan 04 20:04:16.411236 2026] [:error] [pid 5010:tid 5051] [client 20.205.40.94:8071] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/esp.php"] [unique_id "aVpXQLV9sNJtnPnkkz-YFgAAAoo"]
[Sun Jan 04 20:04:17.067494 2026] [:error] [pid 11994:tid 12038] [client 20.205.40.94:8181] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/esp.php"] [unique_id "aVpXQTzmfB9_P7JmZ-MVIQAAA00"]
[Sun Jan 04 20:04:17.550709 2026] [:error] [pid 58433:tid 58471] [client 20.205.40.94:8175] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/21x.php"] [unique_id "aVpXQU5m7bkw35zhUNborAAAAQc"]
[Sun Jan 04 20:04:18.110011 2026] [:error] [pid 1297:tid 1310] [client 20.205.40.94:8179] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/21x.php"] [unique_id "aVpXQhf98x0RBG23PjfV_AAAAAs"]
[Sun Jan 04 20:04:18.633113 2026] [:error] [pid 1297:tid 1303] [client 20.205.40.94:8087] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/21x.php"] [unique_id "aVpXQhf98x0RBG23PjfV_gAAAAQ"]
[Sun Jan 04 20:04:18.905039 2026] [:error] [pid 5727:tid 5770] [client 20.205.40.94:8104] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/21x.php"] [unique_id "aVpXQuw4wd_I9FHn6_-wzwAAAws"]
[Sun Jan 04 20:04:19.365353 2026] [:error] [pid 58433:tid 58475] [client 20.205.40.94:8164] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/out.php"] [unique_id "aVpXQ05m7bkw35zhUNbosAAAAQs"]
[Sun Jan 04 20:04:19.724486 2026] [:error] [pid 11994:tid 12033] [client 20.205.40.94:8188] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/out.php"] [unique_id "aVpXQzzmfB9_P7JmZ-MVJQAAA0g"]
[Sun Jan 04 20:04:20.427191 2026] [:error] [pid 1297:tid 1309] [client 20.205.40.94:8113] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/out.php"] [unique_id "aVpXRBf98x0RBG23PjfWAAAAAAo"]
[Sun Jan 04 20:04:21.190397 2026] [:error] [pid 11931:tid 11939] [client 20.205.40.94:8029] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/out.php"] [unique_id "aVpXRYEqfZyxESsOcB10XgAAAcU"]
[Sun Jan 04 20:04:21.801865 2026] [:error] [pid 11931:tid 11953] [client 20.205.40.94:8140] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower2.php"] [unique_id "aVpXRYEqfZyxESsOcB10YQAAAdM"]
[Sun Jan 04 20:04:22.132856 2026] [:error] [pid 11993:tid 12005] [client 20.205.40.94:8146] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower2.php"] [unique_id "aVpXRvoqPNcIA-YgSRmNEQAAAsc"]
[Sun Jan 04 20:04:22.478133 2026] [:error] [pid 5727:tid 5773] [client 20.205.40.94:8151] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower2.php"] [unique_id "aVpXRuw4wd_I9FHn6_-w1gAAAw4"]
[Sun Jan 04 20:04:23.196689 2026] [:error] [pid 11931:tid 11949] [client 20.205.40.94:8089] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/flower2.php"] [unique_id "aVpXR4EqfZyxESsOcB10YgAAAc8"]
[Sun Jan 04 20:04:23.695939 2026] [:error] [pid 11931:tid 11937] [client 20.205.40.94:8000] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/family.php"] [unique_id "aVpXR4EqfZyxESsOcB10ZwAAAcM"]
[Sun Jan 04 20:04:24.066897 2026] [:error] [pid 11931:tid 11955] [client 20.205.40.94:8068] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/family.php"] [unique_id "aVpXSIEqfZyxESsOcB10aAAAAdU"]
[Sun Jan 04 20:04:24.566081 2026] [:error] [pid 11994:tid 12028] [client 20.205.40.94:8103] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/family.php"] [unique_id "aVpXSDzmfB9_P7JmZ-MVKQAAA0M"]
[Sun Jan 04 20:04:25.274402 2026] [:error] [pid 11994:tid 12041] [client 20.205.40.94:8044] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/family.php"] [unique_id "aVpXSTzmfB9_P7JmZ-MVLQAAA1A"]
[Sun Jan 04 20:04:25.839564 2026] [:error] [pid 11994:tid 12039] [client 20.205.40.94:8190] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asf.php"] [unique_id "aVpXSTzmfB9_P7JmZ-MVMAAAA04"]
[Sun Jan 04 20:04:26.490678 2026] [:error] [pid 11994:tid 12036] [client 20.205.40.94:8100] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asf.php"] [unique_id "aVpXSjzmfB9_P7JmZ-MVMgAAA0s"]
[Sun Jan 04 20:04:26.952874 2026] [:error] [pid 5661:tid 5713] [client 20.205.40.94:8084] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asf.php"] [unique_id "aVpXSrsKeIMjMZCmSEn3bgAAAhc"]
[Sun Jan 04 20:04:28.057521 2026] [:error] [pid 11994:tid 12038] [client 20.205.40.94:8142] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asf.php"] [unique_id "aVpXTDzmfB9_P7JmZ-MVRAAAA00"]
[Sun Jan 04 20:04:28.388021 2026] [:error] [pid 1328:tid 1353] [client 20.205.40.94:8156] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lanz.php"] [unique_id "aVpXTE_-FkByL1SGKiTTrQAAAVY"]
[Sun Jan 04 20:04:28.864494 2026] [:error] [pid 1328:tid 1337] [client 20.205.40.94:8185] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lanz.php"] [unique_id "aVpXTE_-FkByL1SGKiTTrgAAAUY"]
[Sun Jan 04 20:04:29.594537 2026] [:error] [pid 11931:tid 11957] [client 20.205.40.94:8005] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lanz.php"] [unique_id "aVpXTYEqfZyxESsOcB10dQAAAdc"]
[Sun Jan 04 20:04:30.387627 2026] [:error] [pid 11931:tid 11942] [client 20.205.40.94:8002] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lanz.php"] [unique_id "aVpXToEqfZyxESsOcB10dwAAAcg"]
[Sun Jan 04 20:04:30.861089 2026] [:error] [pid 5629:tid 5635] [client 20.205.40.94:8191] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeeex.php"] [unique_id "aVpXTp5cwu3wbyCj4doRkwAAAIQ"]
[Sun Jan 04 20:04:31.487938 2026] [:error] [pid 1297:tid 1314] [client 20.205.40.94:8031] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeeex.php"] [unique_id "aVpXTxf98x0RBG23PjfWAgAAAA8"]
[Sun Jan 04 20:04:31.974712 2026] [:error] [pid 11993:tid 12014] [client 20.205.40.94:8106] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeeex.php"] [unique_id "aVpXT_oqPNcIA-YgSRmNFQAAAtA"]
[Sun Jan 04 20:04:32.476633 2026] [:error] [pid 5629:tid 5645] [client 20.205.40.94:8008] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeeex.php"] [unique_id "aVpXUJ5cwu3wbyCj4doRlAAAAI4"]
[Sun Jan 04 20:04:32.982027 2026] [:error] [pid 1297:tid 1299] [client 20.205.40.94:8117] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tons.php"] [unique_id "aVpXUBf98x0RBG23PjfWBAAAAAA"]
[Sun Jan 04 20:04:33.786640 2026] [:error] [pid 11931:tid 11937] [client 20.205.40.94:8168] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tons.php"] [unique_id "aVpXUYEqfZyxESsOcB10egAAAcM"]
[Sun Jan 04 20:04:34.238199 2026] [:error] [pid 5010:tid 5052] [client 20.205.40.94:8001] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tons.php"] [unique_id "aVpXUrV9sNJtnPnkkz-YIQAAAos"]
[Sun Jan 04 20:04:35.261663 2026] [:error] [pid 5661:tid 5701] [client 20.205.40.94:8072] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tons.php"] [unique_id "aVpXU7sKeIMjMZCmSEn3dQAAAgs"]
[Sun Jan 04 20:04:35.878855 2026] [:error] [pid 11993:tid 12006] [client 20.205.40.94:8131] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpup.php"] [unique_id "aVpXU_oqPNcIA-YgSRmNGAAAAsg"]
[Sun Jan 04 20:04:36.257999 2026] [:error] [pid 11931:tid 11936] [client 20.205.40.94:8165] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpup.php"] [unique_id "aVpXVIEqfZyxESsOcB10fwAAAcI"]
[Sun Jan 04 20:04:36.746567 2026] [:error] [pid 5629:tid 5640] [client 20.205.40.94:8069] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpup.php"] [unique_id "aVpXVJ5cwu3wbyCj4doRmQAAAIk"]
[Sun Jan 04 20:04:37.140612 2026] [:error] [pid 58433:tid 58482] [client 20.205.40.94:8099] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpup.php"] [unique_id "aVpXVU5m7bkw35zhUNboyQAAARI"]
[Sun Jan 04 20:04:37.832994 2026] [:error] [pid 5010:tid 5045] [client 20.205.40.94:8004] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f2f.php"] [unique_id "aVpXVbV9sNJtnPnkkz-YKQAAAoQ"]
[Sun Jan 04 20:04:38.411624 2026] [:error] [pid 11993:tid 11998] [client 20.205.40.94:8092] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f2f.php"] [unique_id "aVpXVvoqPNcIA-YgSRmNGwAAAsA"]
[Sun Jan 04 20:04:38.945306 2026] [:error] [pid 1297:tid 1307] [client 20.205.40.94:8040] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f2f.php"] [unique_id "aVpXVhf98x0RBG23PjfWCQAAAAg"]
[Sun Jan 04 20:04:39.395626 2026] [:error] [pid 11994:tid 12048] [client 20.205.40.94:8120] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f2f.php"] [unique_id "aVpXVzzmfB9_P7JmZ-MVVQAAA1c"]
[Sun Jan 04 20:04:39.898456 2026] [:error] [pid 58433:tid 58487] [client 20.205.40.94:8037] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ths.php"] [unique_id "aVpXV05m7bkw35zhUNboywAAARc"]
[Sun Jan 04 20:04:40.496762 2026] [:error] [pid 5661:tid 5702] [client 20.205.40.94:8122] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ths.php"] [unique_id "aVpXWLsKeIMjMZCmSEn3fAAAAgw"]
[Sun Jan 04 20:04:41.002456 2026] [:error] [pid 5629:tid 5646] [client 20.205.40.94:8027] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ths.php"] [unique_id "aVpXWZ5cwu3wbyCj4doRnAAAAI8"]
[Sun Jan 04 20:04:41.638360 2026] [:error] [pid 11994:tid 12027] [client 20.205.40.94:8115] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ths.php"] [unique_id "aVpXWTzmfB9_P7JmZ-MVWwAAA0I"]
[Sun Jan 04 20:04:41.942478 2026] [:error] [pid 5629:tid 5655] [client 20.205.40.94:8155] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "aVpXWZ5cwu3wbyCj4doRngAAAJg"]
[Sun Jan 04 20:04:42.467807 2026] [:error] [pid 58433:tid 58468] [client 20.205.40.94:8093] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "aVpXWk5m7bkw35zhUNbozgAAAQQ"]
[Sun Jan 04 20:04:42.929645 2026] [:error] [pid 5727:tid 5766] [client 20.205.40.94:8023] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "aVpXWuw4wd_I9FHn6_-w3wAAAwc"]
[Sun Jan 04 20:04:43.448002 2026] [:error] [pid 11931:tid 11955] [client 20.205.40.94:8036] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "aVpXW4EqfZyxESsOcB10hQAAAdU"]
[Sun Jan 04 20:04:43.969362 2026] [:error] [pid 5727:tid 5774] [client 20.205.40.94:8030] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aVpXW-w4wd_I9FHn6_-w4AAAAw8"]
[Sun Jan 04 20:05:46.626979 2026] [:error] [pid 11994:tid 12035] [client 20.205.40.94:8148] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yyy.php"] [unique_id "aVpXmjzmfB9_P7JmZ-MV6AAAA0o"]
[Sun Jan 04 20:05:47.380523 2026] [:error] [pid 5661:tid 5703] [client 20.205.40.94:8178] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yyy.php"] [unique_id "aVpXm7sKeIMjMZCmSEn3rwAAAg0"]
[Sun Jan 04 20:05:48.100742 2026] [:error] [pid 5629:tid 5642] [client 20.205.40.94:8184] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yyy.php"] [unique_id "aVpXnJ5cwu3wbyCj4doR0gAAAIs"]
[Sun Jan 04 20:05:49.006249 2026] [:error] [pid 58433:tid 58487] [client 20.205.40.94:8138] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yyy.php"] [unique_id "aVpXnU5m7bkw35zhUNbpFAAAARc"]
[Sun Jan 04 20:05:49.122941 2026] [:error] [pid 11994:tid 12045] [client 20.205.40.94:8095] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h8h9.php"] [unique_id "aVpXnTzmfB9_P7JmZ-MV6wAAA1Q"]
[Sun Jan 04 20:05:49.854803 2026] [:error] [pid 11993:tid 12006] [client 20.205.40.94:8054] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h8h9.php"] [unique_id "aVpXnfoqPNcIA-YgSRmNjwAAAsg"]
[Sun Jan 04 20:05:50.381929 2026] [:error] [pid 5629:tid 5650] [client 20.205.40.94:8016] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h8h9.php"] [unique_id "aVpXnp5cwu3wbyCj4doR0wAAAJM"]
[Sun Jan 04 20:05:50.814616 2026] [:error] [pid 1328:tid 1345] [client 20.205.40.94:8051] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h8h9.php"] [unique_id "aVpXnk_-FkByL1SGKiTT6QAAAU4"]
[Sun Jan 04 20:05:51.487454 2026] [:error] [pid 5661:tid 5694] [client 20.205.40.94:8053] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/past.php"] [unique_id "aVpXn7sKeIMjMZCmSEn3tAAAAgQ"]
[Sun Jan 04 20:05:52.119209 2026] [:error] [pid 11994:tid 12039] [client 20.205.40.94:8124] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/past.php"] [unique_id "aVpXoDzmfB9_P7JmZ-MV9wAAA04"]
[Sun Jan 04 20:05:52.555359 2026] [:error] [pid 5010:tid 5062] [client 20.205.40.94:8014] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/past.php"] [unique_id "aVpXoLV9sNJtnPnkkz-YYgAAApU"]
[Sun Jan 04 20:05:52.885488 2026] [:error] [pid 58433:tid 58483] [client 20.205.40.94:8003] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/past.php"] [unique_id "aVpXoE5m7bkw35zhUNbpHAAAARM"]
[Sun Jan 04 20:05:53.245495 2026] [:error] [pid 5661:tid 5698] [client 20.205.40.94:7985] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vxrl.php"] [unique_id "aVpXobsKeIMjMZCmSEn3tgAAAgg"]
[Sun Jan 04 20:05:53.880892 2026] [:error] [pid 5727:tid 5773] [client 20.205.40.94:7954] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vxrl.php"] [unique_id "aVpXoew4wd_I9FHn6_-xGgAAAw4"]
[Sun Jan 04 20:05:54.474175 2026] [:error] [pid 11994:tid 12042] [client 20.205.40.94:7960] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vxrl.php"] [unique_id "aVpXojzmfB9_P7JmZ-MWAQAAA1E"]
[Sun Jan 04 20:05:55.023491 2026] [:error] [pid 1328:tid 1340] [client 20.205.40.94:8123] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vxrl.php"] [unique_id "aVpXo0_-FkByL1SGKiTT7gAAAUk"]
[Sun Jan 04 20:05:55.455101 2026] [:error] [pid 11994:tid 12035] [client 20.205.40.94:8063] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aVpXozzmfB9_P7JmZ-MWAwAAA0o"]
[Sun Jan 04 20:05:57.060526 2026] [:error] [pid 1328:tid 1338] [client 20.205.40.94:8042] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aVpXpU_-FkByL1SGKiTT8QAAAUc"]
[Sun Jan 04 20:05:57.808764 2026] [:error] [pid 1297:tid 1309] [client 20.205.40.94:8045] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aVpXpRf98x0RBG23PjfWQQAAAAo"]
[Sun Jan 04 20:05:58.285215 2026] [:error] [pid 5727:tid 5779] [client 20.205.40.94:8172] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aVpXpuw4wd_I9FHn6_-xHQAAAxQ"]
[Sun Jan 04 20:05:59.114157 2026] [:error] [pid 5629:tid 5647] [client 20.205.40.94:8079] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/berm.php"] [unique_id "aVpXp55cwu3wbyCj4doR2gAAAJA"]
[Sun Jan 04 20:05:59.763037 2026] [:error] [pid 5010:tid 5053] [client 20.205.40.94:8034] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/berm.php"] [unique_id "aVpXp7V9sNJtnPnkkz-YZgAAAow"]
[Sun Jan 04 20:06:00.331025 2026] [:error] [pid 5629:tid 5636] [client 20.205.40.94:8105] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/berm.php"] [unique_id "aVpXqJ5cwu3wbyCj4doR2wAAAIU"]
[Sun Jan 04 20:06:01.054106 2026] [:error] [pid 5010:tid 5047] [client 20.205.40.94:8073] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/berm.php"] [unique_id "aVpXqbV9sNJtnPnkkz-YagAAAoY"]
[Sun Jan 04 20:06:01.502957 2026] [:error] [pid 5661:tid 5692] [client 20.205.40.94:8121] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/led.php"] [unique_id "aVpXqbsKeIMjMZCmSEn3uwAAAgI"]
[Sun Jan 04 20:06:01.981510 2026] [:error] [pid 11994:tid 12030] [client 20.205.40.94:8067] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/led.php"] [unique_id "aVpXqTzmfB9_P7JmZ-MWFgAAA0U"]
[Sun Jan 04 20:06:02.639368 2026] [:error] [pid 11931:tid 11946] [client 20.205.40.94:8013] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/led.php"] [unique_id "aVpXqoEqfZyxESsOcB10xwAAAcw"]
[Sun Jan 04 20:06:03.259913 2026] [:error] [pid 1328:tid 1348] [client 20.205.40.94:8020] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/led.php"] [unique_id "aVpXq0_-FkByL1SGKiTT9AAAAVE"]
[Sun Jan 04 20:06:03.781250 2026] [:error] [pid 11994:tid 12027] [client 20.205.40.94:8049] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pn.php"] [unique_id "aVpXqzzmfB9_P7JmZ-MWGwAAA0I"]
[Sun Jan 04 20:06:04.426641 2026] [:error] [pid 11993:tid 12020] [client 20.205.40.94:8066] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pn.php"] [unique_id "aVpXrPoqPNcIA-YgSRmNmAAAAtY"]
[Sun Jan 04 20:06:05.521684 2026] [:error] [pid 11993:tid 11999] [client 20.205.40.94:8118] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pn.php"] [unique_id "aVpXrfoqPNcIA-YgSRmNmgAAAsE"]
[Sun Jan 04 20:06:06.088378 2026] [:error] [pid 11994:tid 12031] [client 20.205.40.94:7936] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pn.php"] [unique_id "aVpXrjzmfB9_P7JmZ-MWIgAAA0Y"]
[Sun Jan 04 20:06:06.654295 2026] [:error] [pid 11994:tid 12026] [client 20.205.40.94:8043] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aVpXrjzmfB9_P7JmZ-MWJgAAA0E"]
[Sun Jan 04 20:06:07.226998 2026] [:error] [pid 1328:tid 1351] [client 20.205.40.94:7892] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aVpXr0_-FkByL1SGKiTT9QAAAVQ"]
[Sun Jan 04 20:06:07.868638 2026] [:error] [pid 1328:tid 1354] [client 20.205.40.94:7964] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aVpXr0_-FkByL1SGKiTT9gAAAVc"]
[Sun Jan 04 20:06:08.304003 2026] [:error] [pid 5010:tid 5061] [client 20.205.40.94:8129] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7f8c8.php"] [unique_id "aVpXsLV9sNJtnPnkkz-YbgAAApQ"]
[Sun Jan 04 20:06:08.997425 2026] [:error] [pid 11931:tid 11947] [client 20.205.40.94:8040] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tua.php"] [unique_id "aVpXsIEqfZyxESsOcB102gAAAc0"]
[Sun Jan 04 20:06:09.810600 2026] [:error] [pid 11993:tid 12003] [client 20.205.40.94:8107] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tua.php"] [unique_id "aVpXsfoqPNcIA-YgSRmNpAAAAsU"]
[Sun Jan 04 20:06:10.406091 2026] [:error] [pid 58433:tid 58465] [client 20.205.40.94:8083] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tua.php"] [unique_id "aVpXsk5m7bkw35zhUNbpNwAAAQE"]
[Sun Jan 04 20:06:10.878188 2026] [:error] [pid 11994:tid 12027] [client 20.205.40.94:8141] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tua.php"] [unique_id "aVpXsjzmfB9_P7JmZ-MWNAAAA0I"]
[Sun Jan 04 20:06:11.693380 2026] [:error] [pid 1328:tid 1344] [client 20.205.40.94:8109] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-db.php"] [unique_id "aVpXs0_-FkByL1SGKiTT-QAAAU0"]
[Sun Jan 04 20:06:12.279860 2026] [:error] [pid 11994:tid 12044] [client 20.205.40.94:8019] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-db.php"] [unique_id "aVpXtDzmfB9_P7JmZ-MWNgAAA1M"]
[Sun Jan 04 20:06:13.832624 2026] [:error] [pid 11931:tid 11951] [client 20.205.40.94:8177] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-db.php"] [unique_id "aVpXtYEqfZyxESsOcB104QAAAdE"]
[Sun Jan 04 20:06:14.529893 2026] [:error] [pid 5010:tid 5056] [client 20.205.40.94:8033] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-db.php"] [unique_id "aVpXtrV9sNJtnPnkkz-YdwAAAo8"]
[Sun Jan 04 20:06:15.020874 2026] [:error] [pid 5661:tid 5706] [client 20.205.40.94:8007] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/set.php"] [unique_id "aVpXt7sKeIMjMZCmSEn3wgAAAhA"]
[Sun Jan 04 20:06:15.627245 2026] [:error] [pid 1328:tid 1347] [client 20.205.40.94:8163] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/set.php"] [unique_id "aVpXt0_-FkByL1SGKiTT_gAAAVA"]
[Sun Jan 04 20:06:16.002787 2026] [:error] [pid 11931:tid 11949] [client 20.205.40.94:8088] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/set.php"] [unique_id "aVpXuIEqfZyxESsOcB104gAAAc8"]
[Sun Jan 04 20:06:16.709086 2026] [:error] [pid 5661:tid 5698] [client 20.205.40.94:8018] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/set.php"] [unique_id "aVpXuLsKeIMjMZCmSEn3xAAAAgg"]
[Sun Jan 04 20:06:17.241972 2026] [:error] [pid 11993:tid 12021] [client 20.205.40.94:8076] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aVpXufoqPNcIA-YgSRmNqQAAAtc"]
[Sun Jan 04 20:06:17.703653 2026] [:error] [pid 58433:tid 58473] [client 20.205.40.94:7957] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aVpXuU5m7bkw35zhUNbpQwAAAQk"]
[Sun Jan 04 20:06:18.689132 2026] [:error] [pid 11931:tid 11955] [client 20.205.40.94:7990] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aVpXuoEqfZyxESsOcB105AAAAdU"]
[Sun Jan 04 20:06:19.188942 2026] [:error] [pid 5661:tid 5710] [client 20.205.40.94:8091] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gmo.php"] [unique_id "aVpXu7sKeIMjMZCmSEn3ygAAAhQ"]
[Sun Jan 04 20:06:20.073213 2026] [:error] [pid 5010:tid 5054] [client 20.205.40.94:8077] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aVpXvLV9sNJtnPnkkz-YfAAAAo0"]
[Sun Jan 04 20:06:20.723438 2026] [:error] [pid 5010:tid 5065] [client 20.205.40.94:8012] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aVpXvLV9sNJtnPnkkz-YfgAAApg"]
[Sun Jan 04 20:06:21.297420 2026] [:error] [pid 11994:tid 12038] [client 20.205.40.94:8119] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aVpXvTzmfB9_P7JmZ-MWRAAAA00"]
[Sun Jan 04 20:06:22.027166 2026] [:error] [pid 11993:tid 12005] [client 20.205.40.94:7950] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aVpXvvoqPNcIA-YgSRmNrwAAAsc"]
[Sun Jan 04 20:06:22.384444 2026] [:error] [pid 5629:tid 5642] [client 20.205.40.94:7951] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aVpXvp5cwu3wbyCj4doR6AAAAIs"]
[Sun Jan 04 20:06:23.054140 2026] [:error] [pid 11993:tid 11999] [client 20.205.40.94:8090] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aVpXv_oqPNcIA-YgSRmNsgAAAsE"]
[Sun Jan 04 20:06:23.865327 2026] [:error] [pid 11994:tid 12033] [client 20.205.40.94:7975] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aVpXvzzmfB9_P7JmZ-MWUAAAA0g"]
[Sun Jan 04 20:06:24.935104 2026] [:error] [pid 5727:tid 5759] [client 20.205.40.94:8153] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aVpXwOw4wd_I9FHn6_-xLQAAAwA"]
[Sun Jan 04 20:06:25.554522 2026] [:error] [pid 11993:tid 12018] [client 20.205.40.94:7940] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zil.php"] [unique_id "aVpXwfoqPNcIA-YgSRmNtgAAAtQ"]
[Sun Jan 04 20:06:25.892198 2026] [:error] [pid 5661:tid 5700] [client 20.205.40.94:7947] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zil.php"] [unique_id "aVpXwbsKeIMjMZCmSEn31wAAAgo"]
[Sun Jan 04 20:06:26.938800 2026] [:error] [pid 1297:tid 1302] [client 20.205.40.94:8114] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zil.php"] [unique_id "aVpXwhf98x0RBG23PjfWSAAAAAM"]
[Sun Jan 04 20:06:27.395366 2026] [:error] [pid 11994:tid 12040] [client 20.205.40.94:8125] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zil.php"] [unique_id "aVpXwzzmfB9_P7JmZ-MWYgAAA08"]
[Sun Jan 04 20:06:28.139071 2026] [:error] [pid 58433:tid 58482] [client 20.205.40.94:8174] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/l.php"] [unique_id "aVpXxE5m7bkw35zhUNbpSgAAARI"]
[Sun Jan 04 20:06:28.611687 2026] [:error] [pid 11994:tid 12033] [client 20.205.40.94:7948] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/l.php"] [unique_id "aVpXxDzmfB9_P7JmZ-MWZAAAA0g"]
[Sun Jan 04 20:06:28.994680 2026] [:error] [pid 11994:tid 12029] [client 20.205.40.94:7976] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/l.php"] [unique_id "aVpXxDzmfB9_P7JmZ-MWZQAAA0Q"]
[Sun Jan 04 20:06:29.422118 2026] [:error] [pid 5010:tid 5054] [client 20.205.40.94:7939] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/l.php"] [unique_id "aVpXxbV9sNJtnPnkkz-YiQAAAo0"]
[Sun Jan 04 20:06:29.937833 2026] [:error] [pid 5010:tid 5057] [client 20.205.40.94:8102] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Eva.php"] [unique_id "aVpXxbV9sNJtnPnkkz-YigAAApA"]
[Sun Jan 04 20:06:30.534481 2026] [:error] [pid 5629:tid 5631] [client 20.205.40.94:7961] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Eva.php"] [unique_id "aVpXxp5cwu3wbyCj4doR7wAAAIA"]
[Sun Jan 04 20:06:30.944288 2026] [:error] [pid 58433:tid 58469] [client 20.205.40.94:7996] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Eva.php"] [unique_id "aVpXxk5m7bkw35zhUNbpTgAAAQU"]
[Sun Jan 04 20:06:31.305990 2026] [:error] [pid 1297:tid 1318] [client 20.205.40.94:7938] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Eva.php"] [unique_id "aVpXxxf98x0RBG23PjfWSwAAABM"]
[Sun Jan 04 20:06:31.808567 2026] [:error] [pid 1297:tid 1309] [client 20.205.40.94:8050] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dop.php"] [unique_id "aVpXxxf98x0RBG23PjfWTQAAAAo"]
[Sun Jan 04 20:06:32.584438 2026] [:error] [pid 1297:tid 1311] [client 20.205.40.94:8046] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dop.php"] [unique_id "aVpXyBf98x0RBG23PjfWTgAAAAw"]
[Sun Jan 04 20:06:32.864980 2026] [:error] [pid 5727:tid 5773] [client 20.205.40.94:8017] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dop.php"] [unique_id "aVpXyOw4wd_I9FHn6_-xNQAAAw4"]
[Sun Jan 04 20:06:33.322136 2026] [:error] [pid 11993:tid 12002] [client 20.205.40.94:8028] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dop.php"] [unique_id "aVpXyfoqPNcIA-YgSRmNwQAAAsQ"]
[Sun Jan 04 20:06:33.751414 2026] [:error] [pid 11994:tid 12039] [client 20.205.40.94:8096] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ula.php"] [unique_id "aVpXyTzmfB9_P7JmZ-MWaQAAA04"]
[Sun Jan 04 20:06:34.227491 2026] [:error] [pid 1328:tid 1345] [client 20.205.40.94:8180] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ula.php"] [unique_id "aVpXyk_-FkByL1SGKiTUAgAAAU4"]
[Sun Jan 04 20:06:34.896592 2026] [:error] [pid 5727:tid 5782] [client 20.205.40.94:8052] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ula.php"] [unique_id "aVpXyuw4wd_I9FHn6_-xNwAAAxc"]
[Sun Jan 04 20:06:35.591426 2026] [:error] [pid 5727:tid 5775] [client 20.205.40.94:8048] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ula.php"] [unique_id "aVpXy-w4wd_I9FHn6_-xOAAAAxA"]
[Sun Jan 04 20:06:35.907114 2026] [:error] [pid 5727:tid 5769] [client 20.205.40.94:8035] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/n3.php"] [unique_id "aVpXy-w4wd_I9FHn6_-xOgAAAwo"]
[Sun Jan 04 20:06:36.438841 2026] [:error] [pid 11931:tid 11937] [client 20.205.40.94:7977] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/n3.php"] [unique_id "aVpXzIEqfZyxESsOcB10-AAAAcM"]
[Sun Jan 04 20:06:36.914336 2026] [:error] [pid 11993:tid 12021] [client 20.205.40.94:8022] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/n3.php"] [unique_id "aVpXzPoqPNcIA-YgSRmNwgAAAtc"]
[Sun Jan 04 20:06:37.439427 2026] [:error] [pid 1328:tid 1342] [client 20.205.40.94:8060] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/n3.php"] [unique_id "aVpXzU_-FkByL1SGKiTUAwAAAUs"]
[Sun Jan 04 20:06:37.796158 2026] [:error] [pid 11931:tid 11952] [client 20.205.40.94:8094] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/card.php"] [unique_id "aVpXzYEqfZyxESsOcB10_gAAAdI"]
[Sun Jan 04 20:06:38.235176 2026] [:error] [pid 11931:tid 11957] [client 20.205.40.94:8038] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/card.php"] [unique_id "aVpXzoEqfZyxESsOcB11AQAAAdc"]
[Sun Jan 04 20:06:38.553511 2026] [:error] [pid 11931:tid 11941] [client 20.205.40.94:7876] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/card.php"] [unique_id "aVpXzoEqfZyxESsOcB11BAAAAcc"]
[Sun Jan 04 20:06:39.016635 2026] [:error] [pid 11931:tid 11946] [client 20.205.40.94:7879] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/card.php"] [unique_id "aVpXz4EqfZyxESsOcB11CAAAAcw"]
[Sun Jan 04 20:06:39.479129 2026] [:error] [pid 11994:tid 12032] [client 20.205.40.94:7971] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hum.php"] [unique_id "aVpXzzzmfB9_P7JmZ-MWbgAAA0c"]
[Sun Jan 04 20:06:39.750482 2026] [:error] [pid 5010:tid 5042] [client 20.205.40.94:7943] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hum.php"] [unique_id "aVpXz7V9sNJtnPnkkz-YlgAAAoE"]
[Sun Jan 04 20:06:40.210459 2026] [:error] [pid 11931:tid 11954] [client 20.205.40.94:7949] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hum.php"] [unique_id "aVpX0IEqfZyxESsOcB11CgAAAdQ"]
[Sun Jan 04 20:06:40.510372 2026] [:error] [pid 58433:tid 58473] [client 20.205.40.94:8026] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hum.php"] [unique_id "aVpX0E5m7bkw35zhUNbpWwAAAQk"]
[Sun Jan 04 20:06:40.824187 2026] [:error] [pid 1297:tid 1304] [client 20.205.40.94:7995] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bq.php"] [unique_id "aVpX0Bf98x0RBG23PjfWVAAAAAU"]
[Sun Jan 04 20:06:41.248407 2026] [:error] [pid 5661:tid 5699] [client 20.205.40.94:7918] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bq.php"] [unique_id "aVpX0bsKeIMjMZCmSEn33AAAAgk"]
[Sun Jan 04 20:06:41.618926 2026] [:error] [pid 11931:tid 11935] [client 20.205.40.94:8116] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bq.php"] [unique_id "aVpX0YEqfZyxESsOcB11DAAAAcE"]
[Sun Jan 04 20:06:42.101498 2026] [:error] [pid 11993:tid 12005] [client 20.205.40.94:7874] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bq.php"] [unique_id "aVpX0voqPNcIA-YgSRmNygAAAsc"]
[Sun Jan 04 20:06:42.492809 2026] [:error] [pid 1297:tid 1307] [client 20.205.40.94:7984] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xm.php"] [unique_id "aVpX0hf98x0RBG23PjfWVwAAAAg"]
[Sun Jan 04 20:06:42.879564 2026] [:error] [pid 5629:tid 5634] [client 20.205.40.94:8108] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xm.php"] [unique_id "aVpX0p5cwu3wbyCj4doR-AAAAIM"]
[Sun Jan 04 20:07:46.120926 2026] [:error] [pid 11931:tid 11945] [client 20.205.40.94:8106] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/re.php"] [unique_id "aVpYEoEqfZyxESsOcB11YgAAAcs"]
[Sun Jan 04 20:07:46.743064 2026] [:error] [pid 11931:tid 11944] [client 20.205.40.94:8176] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/re.php"] [unique_id "aVpYEoEqfZyxESsOcB11YwAAAco"]
[Sun Jan 04 20:07:47.533999 2026] [:error] [pid 5010:tid 5060] [client 20.205.40.94:8080] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/re.php"] [unique_id "aVpYE7V9sNJtnPnkkz-YzgAAApM"]
[Sun Jan 04 20:07:48.139573 2026] [:error] [pid 11931:tid 11941] [client 20.205.40.94:8065] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/re.php"] [unique_id "aVpYFIEqfZyxESsOcB11ZwAAAcc"]
[Sun Jan 04 20:07:48.306274 2026] [:error] [pid 11993:tid 12012] [client 20.205.40.94:7941] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/twso.php"] [unique_id "aVpYFPoqPNcIA-YgSRmOFQAAAs4"]
[Sun Jan 04 20:07:48.683068 2026] [:error] [pid 5727:tid 5762] [client 20.205.40.94:7945] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/twso.php"] [unique_id "aVpYFOw4wd_I9FHn6_-xcwAAAwM"]
[Sun Jan 04 20:07:49.123897 2026] [:error] [pid 5727:tid 5776] [client 20.205.40.94:7966] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/twso.php"] [unique_id "aVpYFew4wd_I9FHn6_-xdQAAAxE"]
[Sun Jan 04 20:07:49.655472 2026] [:error] [pid 11993:tid 12018] [client 20.205.40.94:7967] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/twso.php"] [unique_id "aVpYFfoqPNcIA-YgSRmOGgAAAtQ"]
[Sun Jan 04 20:07:50.037200 2026] [:error] [pid 5629:tid 5651] [client 20.205.40.94:7889] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pes.php"] [unique_id "aVpYFp5cwu3wbyCj4doSDQAAAJQ"]
[Sun Jan 04 20:07:50.582417 2026] [:error] [pid 11993:tid 12013] [client 20.205.40.94:8015] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pes.php"] [unique_id "aVpYFvoqPNcIA-YgSRmOHAAAAs8"]
[Sun Jan 04 20:07:50.865101 2026] [:error] [pid 11994:tid 12044] [client 20.205.40.94:8006] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pes.php"] [unique_id "aVpYFjzmfB9_P7JmZ-MW2AAAA1M"]
[Sun Jan 04 20:07:51.341318 2026] [:error] [pid 11931:tid 11947] [client 20.205.40.94:7872] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pes.php"] [unique_id "aVpYF4EqfZyxESsOcB11aQAAAc0"]
[Sun Jan 04 20:07:51.762057 2026] [:error] [pid 5629:tid 5646] [client 20.205.40.94:7952] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file30.php"] [unique_id "aVpYF55cwu3wbyCj4doSEQAAAI8"]
[Sun Jan 04 20:07:52.171606 2026] [:error] [pid 5629:tid 5647] [client 20.205.40.94:7882] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file30.php"] [unique_id "aVpYGJ5cwu3wbyCj4doSEwAAAJA"]
[Sun Jan 04 20:07:52.627228 2026] [:error] [pid 11993:tid 12004] [client 20.205.40.94:7908] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file30.php"] [unique_id "aVpYGPoqPNcIA-YgSRmOHwAAAsY"]
[Sun Jan 04 20:07:52.933565 2026] [:error] [pid 11993:tid 12021] [client 20.205.40.94:7962] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file30.php"] [unique_id "aVpYGPoqPNcIA-YgSRmOIAAAAtc"]
[Sun Jan 04 20:07:53.359994 2026] [:error] [pid 5661:tid 5706] [client 20.205.40.94:8097] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-cliner.php"] [unique_id "aVpYGbsKeIMjMZCmSEn4AgAAAhA"]
[Sun Jan 04 20:07:53.739393 2026] [:error] [pid 5727:tid 5783] [client 20.205.40.94:7972] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-cliner.php"] [unique_id "aVpYGew4wd_I9FHn6_-xeQAAAxg"]
[Sun Jan 04 20:07:54.793072 2026] [:error] [pid 5661:tid 5698] [client 20.205.40.94:8137] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-cliner.php"] [unique_id "aVpYGrsKeIMjMZCmSEn4BQAAAgg"]
[Sun Jan 04 20:07:55.170755 2026] [:error] [pid 11993:tid 12000] [client 20.205.40.94:7895] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-cliner.php"] [unique_id "aVpYG_oqPNcIA-YgSRmOIwAAAsI"]
[Sun Jan 04 20:07:55.631008 2026] [:error] [pid 11993:tid 12008] [client 20.205.40.94:7991] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kdrex.php"] [unique_id "aVpYG_oqPNcIA-YgSRmOJAAAAso"]
[Sun Jan 04 20:07:56.067299 2026] [:error] [pid 5010:tid 5047] [client 20.205.40.94:8058] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kdrex.php"] [unique_id "aVpYHLV9sNJtnPnkkz-Y0wAAAoY"]
[Sun Jan 04 20:07:56.528736 2026] [:error] [pid 5661:tid 5711] [client 20.205.40.94:8041] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kdrex.php"] [unique_id "aVpYHLsKeIMjMZCmSEn4BgAAAhU"]
[Sun Jan 04 20:07:57.013666 2026] [:error] [pid 5661:tid 5702] [client 20.205.40.94:8055] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kdrex.php"] [unique_id "aVpYHbsKeIMjMZCmSEn4CAAAAgw"]
[Sun Jan 04 20:07:57.648442 2026] [:error] [pid 5010:tid 5062] [client 20.205.40.94:7904] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypltspd.php"] [unique_id "aVpYHbV9sNJtnPnkkz-Y1gAAApU"]
[Sun Jan 04 20:07:58.352897 2026] [:error] [pid 5010:tid 5058] [client 20.205.40.94:7968] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypltspd.php"] [unique_id "aVpYHrV9sNJtnPnkkz-Y1wAAApE"]
[Sun Jan 04 20:07:59.085927 2026] [:error] [pid 5010:tid 5060] [client 20.205.40.94:8057] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypltspd.php"] [unique_id "aVpYH7V9sNJtnPnkkz-Y2QAAApM"]
[Sun Jan 04 20:08:00.019497 2026] [:error] [pid 5010:tid 5048] [client 20.205.40.94:8147] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypltspd.php"] [unique_id "aVpYILV9sNJtnPnkkz-Y2wAAAoc"]
[Sun Jan 04 20:08:00.774778 2026] [:error] [pid 5010:tid 5052] [client 20.205.40.94:7906] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aVpYILV9sNJtnPnkkz-Y3wAAAos"]
[Sun Jan 04 20:08:01.284926 2026] [:error] [pid 1297:tid 1319] [client 20.205.40.94:7970] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aVpYIRf98x0RBG23PjfWqwAAABQ"]
[Sun Jan 04 20:08:01.816990 2026] [:error] [pid 5010:tid 5043] [client 20.205.40.94:7873] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aVpYIbV9sNJtnPnkkz-Y4gAAAoI"]
[Sun Jan 04 20:08:02.360790 2026] [:error] [pid 1297:tid 1299] [client 20.205.40.94:8047] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aVpYIhf98x0RBG23PjfWrAAAAAA"]
[Sun Jan 04 20:08:02.783396 2026] [:error] [pid 5661:tid 5691] [client 20.205.40.94:8024] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moo.php"] [unique_id "aVpYIrsKeIMjMZCmSEn4CgAAAgE"]
[Sun Jan 04 20:08:03.330030 2026] [:error] [pid 13576:tid 13582] [client 20.205.40.94:7986] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moo.php"] [unique_id "aVpYI9O7CLv7nZyxcqAXxgAAAEQ"]
[Sun Jan 04 20:08:04.011265 2026] [:error] [pid 5010:tid 5051] [client 20.205.40.94:7992] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moo.php"] [unique_id "aVpYJLV9sNJtnPnkkz-Y_AAAAoo"]
[Sun Jan 04 20:08:05.267767 2026] [:error] [pid 5010:tid 5048] [client 20.205.40.94:7884] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moo.php"] [unique_id "aVpYJbV9sNJtnPnkkz-ZGQAAAoc"]
[Sun Jan 04 20:08:06.764463 2026] [:error] [pid 11994:tid 12039] [client 20.205.40.94:8162] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haf.php"] [unique_id "aVpYJjzmfB9_P7JmZ-MXYgAAA04"]
[Sun Jan 04 20:08:08.126791 2026] [:error] [pid 1328:tid 1352] [client 20.205.40.94:7965] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haf.php"] [unique_id "aVpYKE_-FkByL1SGKiTUzAAAAVU"]
[Sun Jan 04 20:08:09.348273 2026] [:error] [pid 5629:tid 5644] [client 20.205.40.94:8127] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haf.php"] [unique_id "aVpYKZ5cwu3wbyCj4doS3QAAAI0"]
[Sun Jan 04 20:08:10.117304 2026] [:error] [pid 13664:tid 13680] [client 20.205.40.94:7878] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haf.php"] [unique_id "aVpYKk31yRVtZRejOhYyuQAAAkc"]
[Sun Jan 04 20:08:10.404608 2026] [:error] [pid 1297:tid 1303] [client 20.205.40.94:7915] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ave.php"] [unique_id "aVpYKhf98x0RBG23PjfXgAAAAAQ"]
[Sun Jan 04 20:08:10.774320 2026] [:error] [pid 11931:tid 11937] [client 20.205.40.94:8039] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ave.php"] [unique_id "aVpYKoEqfZyxESsOcB12PwAAAcM"]
[Sun Jan 04 20:08:11.286101 2026] [:error] [pid 13666:tid 13741] [client 20.205.40.94:7973] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ave.php"] [unique_id "aVpYKxL0lKHtsjsG3fy7vAAAA84"]
[Sun Jan 04 20:08:12.161673 2026] [:error] [pid 5661:tid 5709] [client 20.205.40.94:7978] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ave.php"] [unique_id "aVpYLLsKeIMjMZCmSEn4twAAAhM"]
[Sun Jan 04 20:08:12.776232 2026] [:error] [pid 58433:tid 58465] [client 20.205.40.94:7997] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sec.php"] [unique_id "aVpYLE5m7bkw35zhUNbqOgAAAQE"]
[Sun Jan 04 20:08:13.268090 2026] [:error] [pid 13665:tid 13715] [client 20.205.40.94:7911] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sec.php"] [unique_id "aVpYLStV68J6JMFbIQB-ugAAA48"]
[Sun Jan 04 20:08:14.105523 2026] [:error] [pid 1297:tid 1311] [client 20.205.40.94:7956] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sec.php"] [unique_id "aVpYLhf98x0RBG23PjfXgwAAAAw"]
[Sun Jan 04 20:08:15.134092 2026] [:error] [pid 13606:tid 13622] [client 20.205.40.94:7917] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sec.php"] [unique_id "aVpYL-YGV0Z2JafR7r3oYQAAAMw"]
[Sun Jan 04 20:08:15.787310 2026] [:error] [pid 11993:tid 12004] [client 20.205.40.94:7959] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gul.php"] [unique_id "aVpYL_oqPNcIA-YgSRmPGwAAAsY"]
[Sun Jan 04 20:08:16.427011 2026] [:error] [pid 11993:tid 12011] [client 20.205.40.94:8011] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gul.php"] [unique_id "aVpYMPoqPNcIA-YgSRmPHQAAAs0"]
[Sun Jan 04 20:08:17.088784 2026] [:error] [pid 13576:tid 13597] [client 20.205.40.94:7890] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gul.php"] [unique_id "aVpYMdO7CLv7nZyxcqAYpwAAAFM"]
[Sun Jan 04 20:08:17.997202 2026] [:error] [pid 13576:tid 13578] [client 20.205.40.94:7907] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gul.php"] [unique_id "aVpYMdO7CLv7nZyxcqAYqAAAAEA"]
[Sun Jan 04 20:08:18.531580 2026] [:error] [pid 13664:tid 13689] [client 20.205.40.94:8032] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1a.php"] [unique_id "aVpYMk31yRVtZRejOhYywwAAAlA"]
[Sun Jan 04 20:08:18.922262 2026] [:error] [pid 13664:tid 13677] [client 20.205.40.94:7935] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1a.php"] [unique_id "aVpYMk31yRVtZRejOhYyxQAAAkQ"]
[Sun Jan 04 20:08:19.244691 2026] [:error] [pid 5010:tid 5052] [client 20.205.40.94:7896] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1a.php"] [unique_id "aVpYM7V9sNJtnPnkkz-ZnwAAAos"]
[Sun Jan 04 20:08:19.861356 2026] [:error] [pid 13607:tid 13659] [client 20.205.40.94:8061] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1a.php"] [unique_id "aVpYM8gtHIw0wt4bHzlEDgAAAZY"]
[Sun Jan 04 20:08:20.186544 2026] [:error] [pid 11993:tid 12006] [client 20.205.40.94:8056] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nbr.php"] [unique_id "aVpYNPoqPNcIA-YgSRmPHgAAAsg"]
[Sun Jan 04 20:08:20.541372 2026] [:error] [pid 1297:tid 1307] [client 20.205.40.94:7850] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nbr.php"] [unique_id "aVpYNBf98x0RBG23PjfXhAAAAAg"]
[Sun Jan 04 20:08:21.038378 2026] [:error] [pid 13607:tid 13650] [client 20.205.40.94:7942] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nbr.php"] [unique_id "aVpYNcgtHIw0wt4bHzlEEQAAAY0"]
[Sun Jan 04 20:08:21.457856 2026] [:error] [pid 13606:tid 13621] [client 20.205.40.94:7893] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nbr.php"] [unique_id "aVpYNeYGV0Z2JafR7r3oZQAAAMs"]
[Sun Jan 04 20:08:21.947268 2026] [:error] [pid 13606:tid 13624] [client 20.205.40.94:8182] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2index.php"] [unique_id "aVpYNeYGV0Z2JafR7r3oZwAAAM4"]
[Sun Jan 04 20:08:22.279732 2026] [:error] [pid 5727:tid 5761] [client 20.205.40.94:7815] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2index.php"] [unique_id "aVpYNuw4wd_I9FHn6_-yUQAAAwI"]
[Sun Jan 04 20:08:22.753075 2026] [:error] [pid 5010:tid 5053] [client 20.205.40.94:7905] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2index.php"] [unique_id "aVpYNrV9sNJtnPnkkz-ZogAAAow"]
[Sun Jan 04 20:08:23.060608 2026] [:error] [pid 13666:tid 13751] [client 20.205.40.94:7983] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2index.php"] [unique_id "aVpYNxL0lKHtsjsG3fy7vgAAA9g"]
[Sun Jan 04 20:08:24.038284 2026] [:error] [pid 13664:tid 13685] [client 20.205.40.94:7877] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aVpYOE31yRVtZRejOhYyygAAAkw"]
[Sun Jan 04 20:08:24.460057 2026] [:error] [pid 13664:tid 13674] [client 20.205.40.94:7875] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aVpYOE31yRVtZRejOhYyywAAAkE"]
[Sun Jan 04 20:08:24.953381 2026] [:error] [pid 13576:tid 13598] [client 20.205.40.94:8082] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aVpYONO7CLv7nZyxcqAYsQAAAFQ"]
[Sun Jan 04 20:08:25.395194 2026] [:error] [pid 13576:tid 13597] [client 20.205.40.94:7894] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aVpYOdO7CLv7nZyxcqAYsgAAAFM"]
[Sun Jan 04 20:08:25.784221 2026] [:error] [pid 11993:tid 12008] [client 20.205.40.94:7933] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awh77.php"] [unique_id "aVpYOfoqPNcIA-YgSRmPIQAAAso"]
[Sun Jan 04 20:08:26.104743 2026] [:error] [pid 11993:tid 12012] [client 20.205.40.94:7909] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awh77.php"] [unique_id "aVpYOvoqPNcIA-YgSRmPIgAAAs4"]
[Sun Jan 04 20:08:26.389165 2026] [:error] [pid 13664:tid 13693] [client 20.205.40.94:8021] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awh77.php"] [unique_id "aVpYOk31yRVtZRejOhYyzQAAAlQ"]
[Sun Jan 04 20:08:26.756545 2026] [:error] [pid 13607:tid 13660] [client 20.205.40.94:7880] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awh77.php"] [unique_id "aVpYOsgtHIw0wt4bHzlEFQAAAZc"]
[Sun Jan 04 20:08:27.065229 2026] [:error] [pid 13664:tid 13677] [client 20.205.40.94:8144] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aVpYO031yRVtZRejOhYyzwAAAkQ"]
[Sun Jan 04 20:08:27.422191 2026] [:error] [pid 13607:tid 13641] [client 20.205.40.94:7963] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aVpYO8gtHIw0wt4bHzlEFwAAAYQ"]
[Sun Jan 04 20:08:27.845543 2026] [:error] [pid 13664:tid 13675] [client 20.205.40.94:7885] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aVpYO031yRVtZRejOhYy0QAAAkI"]
[Sun Jan 04 20:08:28.197813 2026] [:error] [pid 5727:tid 5769] [client 20.205.40.94:7923] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aVpYPOw4wd_I9FHn6_-yXAAAAwo"]
[Sun Jan 04 20:08:28.547940 2026] [:error] [pid 13664:tid 13694] [client 20.205.40.94:7974] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sow.php"] [unique_id "aVpYPE31yRVtZRejOhYy1AAAAlU"]
[Sun Jan 04 20:08:28.918247 2026] [:error] [pid 13664:tid 13696] [client 20.205.40.94:8160] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sow.php"] [unique_id "aVpYPE31yRVtZRejOhYy1QAAAlc"]
[Sun Jan 04 20:08:29.281230 2026] [:error] [pid 13664:tid 13691] [client 20.205.40.94:7958] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sow.php"] [unique_id "aVpYPU31yRVtZRejOhYy1gAAAlI"]
[Sun Jan 04 20:08:29.636347 2026] [:error] [pid 13664:tid 13680] [client 20.205.40.94:7987] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sow.php"] [unique_id "aVpYPU31yRVtZRejOhYy1wAAAkc"]
[Sun Jan 04 20:08:29.987588 2026] [:error] [pid 5727:tid 5783] [client 20.205.40.94:7833] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hgm.php"] [unique_id "aVpYPew4wd_I9FHn6_-yZgAAAxg"]
[Sun Jan 04 20:08:30.567008 2026] [:error] [pid 5727:tid 5772] [client 20.205.40.94:7907] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hgm.php"] [unique_id "aVpYPuw4wd_I9FHn6_-yagAAAw0"]
[Sun Jan 04 20:08:30.952619 2026] [:error] [pid 5727:tid 5781] [client 20.205.40.94:7899] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hgm.php"] [unique_id "aVpYPuw4wd_I9FHn6_-ybAAAAxY"]
[Sun Jan 04 20:08:31.359831 2026] [:error] [pid 13664:tid 13690] [client 20.205.40.94:7902] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hgm.php"] [unique_id "aVpYP031yRVtZRejOhYy2QAAAlE"]
[Sun Jan 04 20:08:31.852349 2026] [:error] [pid 5661:tid 5700] [client 20.205.40.94:7969] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/agdew.php"] [unique_id "aVpYP7sKeIMjMZCmSEn4vQAAAgo"]
[Sun Jan 04 20:08:32.216563 2026] [:error] [pid 13664:tid 13679] [client 20.205.40.94:7989] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/agdew.php"] [unique_id "aVpYQE31yRVtZRejOhYy2wAAAkY"]
[Sun Jan 04 20:08:32.539036 2026] [:error] [pid 11931:tid 11945] [client 20.205.40.94:8161] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/agdew.php"] [unique_id "aVpYQIEqfZyxESsOcB12RgAAAcs"]
[Sun Jan 04 20:08:32.947745 2026] [:error] [pid 13664:tid 13673] [client 20.205.40.94:7981] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/agdew.php"] [unique_id "aVpYQE31yRVtZRejOhYy3gAAAkA"]
[Sun Jan 04 20:08:33.382178 2026] [:error] [pid 13666:tid 13745] [client 20.205.40.94:8167] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ker.php"] [unique_id "aVpYQRL0lKHtsjsG3fy7wAAAA9I"]
[Sun Jan 04 20:08:33.808467 2026] [:error] [pid 13576:tid 13579] [client 20.205.40.94:7953] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ker.php"] [unique_id "aVpYQdO7CLv7nZyxcqAYtwAAAEE"]
[Sun Jan 04 20:08:34.110308 2026] [:error] [pid 13576:tid 13587] [client 20.205.40.94:7988] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ker.php"] [unique_id "aVpYQtO7CLv7nZyxcqAYugAAAEk"]
[Sun Jan 04 20:08:34.745767 2026] [:error] [pid 13664:tid 13674] [client 20.205.40.94:7829] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ker.php"] [unique_id "aVpYQk31yRVtZRejOhYy5QAAAkE"]
[Sun Jan 04 20:08:35.270527 2026] [:error] [pid 13666:tid 13734] [client 20.205.40.94:7819] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efa4f.php"] [unique_id "aVpYQxL0lKHtsjsG3fy7wgAAA8c"]
[Sun Jan 04 20:08:35.797243 2026] [:error] [pid 13664:tid 13679] [client 20.205.40.94:7825] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efa4f.php"] [unique_id "aVpYQ031yRVtZRejOhYy5wAAAkY"]
[Sun Jan 04 20:08:36.173204 2026] [:error] [pid 13607:tid 13655] [client 20.205.40.94:8064] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efa4f.php"] [unique_id "aVpYRMgtHIw0wt4bHzlEHAAAAZI"]
[Sun Jan 04 20:08:36.845407 2026] [:error] [pid 11931:tid 11937] [client 20.205.40.94:7955] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/efa4f.php"] [unique_id "aVpYRIEqfZyxESsOcB12RwAAAcM"]
[Sun Jan 04 20:08:37.180752 2026] [:error] [pid 13664:tid 13673] [client 20.205.40.94:7994] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zuk.php"] [unique_id "aVpYRU31yRVtZRejOhYy7gAAAkA"]
[Sun Jan 04 20:08:37.689589 2026] [:error] [pid 5727:tid 5766] [client 20.205.40.94:8132] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zuk.php"] [unique_id "aVpYRew4wd_I9FHn6_-ydAAAAwc"]
[Sun Jan 04 20:08:38.027941 2026] [:error] [pid 13576:tid 13587] [client 20.205.40.94:8135] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zuk.php"] [unique_id "aVpYRtO7CLv7nZyxcqAYyAAAAEk"]
[Sun Jan 04 20:08:38.558982 2026] [:error] [pid 13576:tid 13582] [client 20.205.40.94:8149] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zuk.php"] [unique_id "aVpYRtO7CLv7nZyxcqAYzwAAAEQ"]
[Sun Jan 04 20:08:38.968767 2026] [:error] [pid 13664:tid 13695] [client 20.205.40.94:8074] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tro.php"] [unique_id "aVpYRk31yRVtZRejOhYy8QAAAlY"]
[Sun Jan 04 20:08:39.287217 2026] [:error] [pid 5727:tid 5761] [client 20.205.40.94:8098] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tro.php"] [unique_id "aVpYR-w4wd_I9FHn6_-yeQAAAwI"]
[Sun Jan 04 20:08:39.566527 2026] [:error] [pid 13607:tid 13638] [client 20.205.40.94:7838] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tro.php"] [unique_id "aVpYR8gtHIw0wt4bHzlEHQAAAYE"]
[Sun Jan 04 20:08:39.957475 2026] [:error] [pid 13606:tid 13626] [client 20.205.40.94:7816] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tro.php"] [unique_id "aVpYR-YGV0Z2JafR7r3obQAAANA"]
[Sun Jan 04 20:08:40.421077 2026] [:error] [pid 13664:tid 13676] [client 20.205.40.94:7921] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/skj.php"] [unique_id "aVpYSE31yRVtZRejOhYy9wAAAkM"]
[Sun Jan 04 20:08:40.763121 2026] [:error] [pid 13664:tid 13677] [client 20.205.40.94:7900] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/skj.php"] [unique_id "aVpYSE31yRVtZRejOhYy-gAAAkQ"]
[Sun Jan 04 20:08:41.110253 2026] [:error] [pid 13576:tid 13595] [client 20.205.40.94:8080] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/skj.php"] [unique_id "aVpYSdO7CLv7nZyxcqAY0wAAAFE"]
[Sun Jan 04 20:09:41.983041 2026] [:error] [pid 13606:tid 13610] [client 20.205.40.94:8081] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wui.php"] [unique_id "aVpYheYGV0Z2JafR7r3oqwAAAMA"]
[Sun Jan 04 20:09:42.454184 2026] [:error] [pid 5010:tid 5064] [client 20.205.40.94:8136] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wui.php"] [unique_id "aVpYhrV9sNJtnPnkkz-ZyAAAApc"]
[Sun Jan 04 20:09:42.964489 2026] [:error] [pid 58433:tid 58480] [client 20.205.40.94:8151] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wui.php"] [unique_id "aVpYhk5m7bkw35zhUNbqXwAAARA"]
[Sun Jan 04 20:09:43.520336 2026] [:error] [pid 13606:tid 13617] [client 20.205.40.94:8070] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wui.php"] [unique_id "aVpYh-YGV0Z2JafR7r3osAAAAMc"]
[Sun Jan 04 20:09:43.937292 2026] [:error] [pid 13664:tid 13683] [client 20.205.40.94:8169] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/des.php"] [unique_id "aVpYh031yRVtZRejOhYzIQAAAko"]
[Sun Jan 04 20:09:44.782906 2026] [:error] [pid 13664:tid 13697] [client 20.205.40.94:8148] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/des.php"] [unique_id "aVpYiE31yRVtZRejOhYzIwAAAlg"]
[Sun Jan 04 20:09:45.053201 2026] [:error] [pid 13607:tid 13648] [client 20.205.40.94:8133] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/des.php"] [unique_id "aVpYicgtHIw0wt4bHzlEZgAAAYs"]
[Sun Jan 04 20:09:45.433505 2026] [:error] [pid 13607:tid 13655] [client 20.205.40.94:8166] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/des.php"] [unique_id "aVpYicgtHIw0wt4bHzlEZwAAAZI"]
[Sun Jan 04 20:09:45.842027 2026] [:error] [pid 5010:tid 5065] [client 20.205.40.94:8078] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ryuk.php"] [unique_id "aVpYibV9sNJtnPnkkz-ZygAAApg"]
[Sun Jan 04 20:09:46.214994 2026] [:error] [pid 5010:tid 5048] [client 20.205.40.94:8171] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ryuk.php"] [unique_id "aVpYirV9sNJtnPnkkz-ZywAAAoc"]
[Sun Jan 04 20:09:46.526708 2026] [:error] [pid 13664:tid 13696] [client 20.205.40.94:8120] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ryuk.php"] [unique_id "aVpYik31yRVtZRejOhYzJAAAAlc"]
[Sun Jan 04 20:09:46.815968 2026] [:error] [pid 13664:tid 13684] [client 20.205.40.94:8165] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ryuk.php"] [unique_id "aVpYik31yRVtZRejOhYzJQAAAks"]
[Sun Jan 04 20:09:47.257422 2026] [:error] [pid 5727:tid 5780] [client 20.205.40.94:8189] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoro.php"] [unique_id "aVpYi-w4wd_I9FHn6_-ytAAAAxU"]
[Sun Jan 04 20:09:47.628246 2026] [:error] [pid 13576:tid 13590] [client 20.205.40.94:8140] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoro.php"] [unique_id "aVpYi9O7CLv7nZyxcqAZBgAAAEw"]
[Sun Jan 04 20:09:48.039835 2026] [:error] [pid 11931:tid 11958] [client 20.205.40.94:8190] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoro.php"] [unique_id "aVpYjIEqfZyxESsOcB12awAAAdg"]
[Sun Jan 04 20:09:48.340243 2026] [:error] [pid 5727:tid 5775] [client 20.205.40.94:8023] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoro.php"] [unique_id "aVpYjOw4wd_I9FHn6_-ytQAAAxA"]
[Sun Jan 04 20:09:48.813147 2026] [:error] [pid 13664:tid 13681] [client 20.205.40.94:8183] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kal.php"] [unique_id "aVpYjE31yRVtZRejOhYzLAAAAkg"]
[Sun Jan 04 20:09:49.238660 2026] [:error] [pid 5010:tid 5061] [client 20.205.40.94:8131] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kal.php"] [unique_id "aVpYjbV9sNJtnPnkkz-ZzAAAApQ"]
[Sun Jan 04 20:09:49.532499 2026] [:error] [pid 13664:tid 13695] [client 20.205.40.94:7836] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kal.php"] [unique_id "aVpYjU31yRVtZRejOhYzLgAAAlY"]
[Sun Jan 04 20:09:50.079882 2026] [:error] [pid 11931:tid 11955] [client 20.205.40.94:7844] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kal.php"] [unique_id "aVpYjoEqfZyxESsOcB12bQAAAdU"]
[Sun Jan 04 20:09:50.470878 2026] [:error] [pid 5010:tid 5049] [client 20.205.40.94:8106] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0.php"] [unique_id "aVpYjrV9sNJtnPnkkz-ZzgAAAog"]
[Sun Jan 04 20:09:50.788535 2026] [:error] [pid 13606:tid 13617] [client 20.205.40.94:8069] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0.php"] [unique_id "aVpYjuYGV0Z2JafR7r3owAAAAMc"]
[Sun Jan 04 20:09:51.121651 2026] [:error] [pid 13607:tid 13649] [client 20.205.40.94:8115] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0.php"] [unique_id "aVpYj8gtHIw0wt4bHzlEaQAAAYw"]
[Sun Jan 04 20:09:51.367499 2026] [:error] [pid 13607:tid 13656] [client 20.205.40.94:7926] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0.php"] [unique_id "aVpYj8gtHIw0wt4bHzlEagAAAZM"]
[Sun Jan 04 20:09:51.645638 2026] [:error] [pid 13665:tid 13714] [client 20.205.40.94:8099] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/racs3.php"] [unique_id "aVpYjytV68J6JMFbIQB-6AAAA44"]
[Sun Jan 04 20:09:52.270272 2026] [:error] [pid 13665:tid 13719] [client 20.205.40.94:8134] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/racs3.php"] [unique_id "aVpYkCtV68J6JMFbIQB-6QAAA5M"]
[Sun Jan 04 20:09:52.715009 2026] [:error] [pid 13607:tid 13652] [client 20.205.40.94:8154] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/racs3.php"] [unique_id "aVpYkMgtHIw0wt4bHzlEbQAAAY8"]
[Sun Jan 04 20:09:53.116225 2026] [:error] [pid 13576:tid 13586] [client 20.205.40.94:8092] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/racs3.php"] [unique_id "aVpYkdO7CLv7nZyxcqAZCgAAAEg"]
[Sun Jan 04 20:09:53.521730 2026] [:error] [pid 13576:tid 13602] [client 20.205.40.94:8158] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ed35f.php"] [unique_id "aVpYkdO7CLv7nZyxcqAZCwAAAFg"]
[Sun Jan 04 20:09:53.862361 2026] [:error] [pid 5010:tid 5051] [client 20.205.40.94:8027] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ed35f.php"] [unique_id "aVpYkbV9sNJtnPnkkz-Z0AAAAoo"]
[Sun Jan 04 20:09:54.169245 2026] [:error] [pid 13607:tid 13637] [client 20.205.40.94:8191] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ed35f.php"] [unique_id "aVpYksgtHIw0wt4bHzlEcQAAAYA"]
[Sun Jan 04 20:09:54.474204 2026] [:error] [pid 5010:tid 5055] [client 20.205.40.94:8093] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ed35f.php"] [unique_id "aVpYkrV9sNJtnPnkkz-Z0gAAAo4"]
[Sun Jan 04 20:09:54.839279 2026] [:error] [pid 58433:tid 58471] [client 20.205.40.94:8179] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fresh3.php"] [unique_id "aVpYkk5m7bkw35zhUNbqaQAAAQc"]
[Sun Jan 04 20:09:55.303727 2026] [:error] [pid 13606:tid 13613] [client 20.205.40.94:8138] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fresh3.php"] [unique_id "aVpYk-YGV0Z2JafR7r3o8wAAAMM"]
[Sun Jan 04 20:09:55.648435 2026] [:error] [pid 13576:tid 13597] [client 20.205.40.94:8065] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fresh3.php"] [unique_id "aVpYk9O7CLv7nZyxcqAZDQAAAFM"]
[Sun Jan 04 20:09:56.177775 2026] [:error] [pid 13606:tid 13630] [client 20.205.40.94:8155] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fresh3.php"] [unique_id "aVpYlOYGV0Z2JafR7r3o9AAAANQ"]
[Sun Jan 04 20:09:56.517054 2026] [:error] [pid 11931:tid 11945] [client 20.205.40.94:8128] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nope.php"] [unique_id "aVpYlIEqfZyxESsOcB12jAAAAcs"]
[Sun Jan 04 20:09:56.787145 2026] [:error] [pid 13576:tid 13578] [client 20.205.40.94:8175] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nope.php"] [unique_id "aVpYlNO7CLv7nZyxcqAZDgAAAEA"]
[Sun Jan 04 20:09:57.130211 2026] [:error] [pid 1297:tid 1318] [client 20.205.40.94:8145] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nope.php"] [unique_id "aVpYlRf98x0RBG23PjfXzAAAABM"]
[Sun Jan 04 20:09:57.429495 2026] [:error] [pid 1297:tid 1301] [client 20.205.40.94:8025] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nope.php"] [unique_id "aVpYlRf98x0RBG23PjfXzQAAAAI"]
[Sun Jan 04 20:09:57.723561 2026] [:error] [pid 13576:tid 13581] [client 20.205.40.94:8084] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hey.php"] [unique_id "aVpYldO7CLv7nZyxcqAZDwAAAEM"]
[Sun Jan 04 20:09:57.987230 2026] [:error] [pid 58433:tid 58478] [client 20.205.40.94:8010] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hey.php"] [unique_id "aVpYlU5m7bkw35zhUNbqbgAAAQ4"]
[Sun Jan 04 20:09:58.256387 2026] [:error] [pid 11931:tid 11936] [client 20.205.40.94:7818] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hey.php"] [unique_id "aVpYloEqfZyxESsOcB12jQAAAcI"]
[Sun Jan 04 20:09:58.651526 2026] [:error] [pid 13607:tid 13655] [client 20.205.40.94:7886] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hey.php"] [unique_id "aVpYlsgtHIw0wt4bHzlEdQAAAZI"]
[Sun Jan 04 20:09:59.016321 2026] [:error] [pid 5010:tid 5058] [client 20.205.40.94:8184] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/suy.php"] [unique_id "aVpYl7V9sNJtnPnkkz-Z2gAAApE"]
[Sun Jan 04 20:09:59.337707 2026] [:error] [pid 13576:tid 13600] [client 20.205.40.94:8100] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/suy.php"] [unique_id "aVpYl9O7CLv7nZyxcqAZEgAAAFY"]
[Sun Jan 04 20:09:59.633004 2026] [:error] [pid 11931:tid 11950] [client 20.205.40.94:7834] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/suy.php"] [unique_id "aVpYl4EqfZyxESsOcB12jwAAAdA"]
[Sun Jan 04 20:09:59.911749 2026] [:error] [pid 13664:tid 13696] [client 20.205.40.94:8071] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/suy.php"] [unique_id "aVpYl031yRVtZRejOhYzWwAAAlc"]
[Sun Jan 04 20:10:00.300369 2026] [:error] [pid 11931:tid 11957] [client 20.205.40.94:8186] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/giclass.php"] [unique_id "aVpYmIEqfZyxESsOcB12kAAAAdc"]
[Sun Jan 04 20:10:00.624353 2026] [:error] [pid 13665:tid 13710] [client 20.205.40.94:7887] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/giclass.php"] [unique_id "aVpYmCtV68J6JMFbIQB-9gAAA4o"]
[Sun Jan 04 20:10:00.984593 2026] [:error] [pid 13576:tid 13599] [client 20.205.40.94:8146] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/giclass.php"] [unique_id "aVpYmNO7CLv7nZyxcqAZEwAAAFU"]
[Sun Jan 04 20:10:01.360729 2026] [:error] [pid 13606:tid 13634] [client 20.205.40.94:8110] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/giclass.php"] [unique_id "aVpYmeYGV0Z2JafR7r3o9wAAANg"]
[Sun Jan 04 20:10:01.759331 2026] [:error] [pid 13576:tid 13593] [client 20.205.40.94:8068] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/exhitrgp.php"] [unique_id "aVpYmdO7CLv7nZyxcqAZFQAAAE8"]
[Sun Jan 04 20:10:02.068453 2026] [:error] [pid 5010:tid 5057] [client 20.205.40.94:8122] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/exhitrgp.php"] [unique_id "aVpYmrV9sNJtnPnkkz-Z3gAAApA"]
[Sun Jan 04 20:10:02.454838 2026] [:error] [pid 13606:tid 13629] [client 20.205.40.94:8001] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/exhitrgp.php"] [unique_id "aVpYmuYGV0Z2JafR7r3o-AAAANM"]
[Sun Jan 04 20:10:02.813625 2026] [:error] [pid 13606:tid 13625] [client 20.205.40.94:8112] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/exhitrgp.php"] [unique_id "aVpYmuYGV0Z2JafR7r3o-QAAAM8"]
[Sun Jan 04 20:10:03.078795 2026] [:error] [pid 5727:tid 5761] [client 20.205.40.94:8150] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nas.php"] [unique_id "aVpYm-w4wd_I9FHn6_-yvAAAAwI"]
[Sun Jan 04 20:10:03.356339 2026] [:error] [pid 13607:tid 13640] [client 20.205.40.94:8086] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nas.php"] [unique_id "aVpYm8gtHIw0wt4bHzlEfgAAAYM"]
[Sun Jan 04 20:10:03.914491 2026] [:error] [pid 13664:tid 13674] [client 20.205.40.94:8029] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nas.php"] [unique_id "aVpYm031yRVtZRejOhYzXQAAAkE"]
[Sun Jan 04 20:10:04.342995 2026] [:error] [pid 58433:tid 58469] [client 20.205.40.94:8089] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nas.php"] [unique_id "aVpYnE5m7bkw35zhUNbqcQAAAQU"]
[Sun Jan 04 20:10:04.600197 2026] [:error] [pid 58433:tid 58483] [client 20.205.40.94:8008] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/reyha.php"] [unique_id "aVpYnE5m7bkw35zhUNbqcgAAARM"]
[Sun Jan 04 20:10:04.958185 2026] [:error] [pid 58433:tid 58464] [client 20.205.40.94:7928] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/reyha.php"] [unique_id "aVpYnE5m7bkw35zhUNbqcwAAAQA"]
[Sun Jan 04 20:10:05.423488 2026] [:error] [pid 5727:tid 5780] [client 20.205.40.94:7753] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/reyha.php"] [unique_id "aVpYnew4wd_I9FHn6_-yvgAAAxU"]
[Sun Jan 04 20:10:05.958970 2026] [:error] [pid 13664:tid 13689] [client 20.205.40.94:8152] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/reyha.php"] [unique_id "aVpYnU31yRVtZRejOhYzYAAAAlA"]
[Sun Jan 04 20:10:06.283742 2026] [:error] [pid 5010:tid 5041] [client 20.205.40.94:8164] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shorw.php"] [unique_id "aVpYnrV9sNJtnPnkkz-Z3wAAAoA"]
[Sun Jan 04 20:10:06.848890 2026] [:error] [pid 13664:tid 13692] [client 20.205.40.94:7934] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shorw.php"] [unique_id "aVpYnk31yRVtZRejOhYzYwAAAlM"]
[Sun Jan 04 20:10:07.165348 2026] [:error] [pid 13664:tid 13675] [client 20.205.40.94:8156] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shorw.php"] [unique_id "aVpYn031yRVtZRejOhYzZQAAAkI"]
[Sun Jan 04 20:10:07.632966 2026] [:error] [pid 13664:tid 13681] [client 20.205.40.94:8157] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shorw.php"] [unique_id "aVpYn031yRVtZRejOhYzZgAAAkg"]
[Sun Jan 04 20:10:08.062650 2026] [:error] [pid 11931:tid 11951] [client 20.205.40.94:8104] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/law.php"] [unique_id "aVpYoIEqfZyxESsOcB12kQAAAdE"]
[Sun Jan 04 20:10:08.528626 2026] [:error] [pid 5727:tid 5768] [client 20.205.40.94:7979] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/law.php"] [unique_id "aVpYoOw4wd_I9FHn6_-ywgAAAwk"]
[Sun Jan 04 20:10:08.993055 2026] [:error] [pid 5010:tid 5059] [client 20.205.40.94:8062] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/law.php"] [unique_id "aVpYoLV9sNJtnPnkkz-Z5gAAApI"]
[Sun Jan 04 20:10:09.331743 2026] [:error] [pid 13607:tid 13647] [client 20.205.40.94:7813] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/law.php"] [unique_id "aVpYocgtHIw0wt4bHzlEgAAAAYo"]
[Sun Jan 04 20:10:09.708925 2026] [:error] [pid 13607:tid 13639] [client 20.205.40.94:8176] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admi.php"] [unique_id "aVpYocgtHIw0wt4bHzlEgwAAAYI"]
[Sun Jan 04 20:10:10.338243 2026] [:error] [pid 13664:tid 13673] [client 20.205.40.94:8072] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admi.php"] [unique_id "aVpYok31yRVtZRejOhYzaAAAAkA"]
[Sun Jan 04 20:10:10.633587 2026] [:error] [pid 13664:tid 13697] [client 20.205.40.94:8188] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admi.php"] [unique_id "aVpYok31yRVtZRejOhYzbAAAAlg"]
[Sun Jan 04 20:10:11.218420 2026] [:error] [pid 13664:tid 13684] [client 20.205.40.94:7810] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admi.php"] [unique_id "aVpYo031yRVtZRejOhYzcAAAAks"]
[Sun Jan 04 20:10:11.483361 2026] [:error] [pid 13607:tid 13648] [client 20.205.40.94:7809] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nok.php"] [unique_id "aVpYo8gtHIw0wt4bHzlEhgAAAYs"]
[Sun Jan 04 20:10:11.790743 2026] [:error] [pid 13665:tid 13706] [client 20.205.40.94:8113] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nok.php"] [unique_id "aVpYoytV68J6JMFbIQB-_AAAA4Y"]
[Sun Jan 04 20:10:12.077895 2026] [:error] [pid 13576:tid 13601] [client 20.205.40.94:7853] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nok.php"] [unique_id "aVpYpNO7CLv7nZyxcqAZHAAAAFc"]
[Sun Jan 04 20:10:12.651820 2026] [:error] [pid 13665:tid 13705] [client 20.205.40.94:8111] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nok.php"] [unique_id "aVpYpCtV68J6JMFbIQB-_gAAA4U"]
[Sun Jan 04 20:10:13.055455 2026] [:error] [pid 13607:tid 13652] [client 20.205.40.94:7920] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/c451f.php"] [unique_id "aVpYpcgtHIw0wt4bHzlEigAAAY8"]
[Sun Jan 04 20:10:13.453153 2026] [:error] [pid 1297:tid 1321] [client 20.205.40.94:7842] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/c451f.php"] [unique_id "aVpYpRf98x0RBG23PjfX0AAAABY"]
[Sun Jan 04 20:10:13.867785 2026] [:error] [pid 5727:tid 5763] [client 20.205.40.94:7772] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/c451f.php"] [unique_id "aVpYpew4wd_I9FHn6_-yxAAAAwQ"]
[Sun Jan 04 20:10:14.231675 2026] [:error] [pid 13664:tid 13692] [client 20.205.40.94:7891] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/c451f.php"] [unique_id "aVpYpk31yRVtZRejOhYzdQAAAlM"]
[Sun Jan 04 20:10:14.518440 2026] [:error] [pid 13607:tid 13650] [client 20.205.40.94:7916] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zasd.php"] [unique_id "aVpYpsgtHIw0wt4bHzlEkQAAAY0"]
[Sun Jan 04 20:10:15.091856 2026] [:error] [pid 13664:tid 13685] [client 20.205.40.94:8044] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zasd.php"] [unique_id "aVpYp031yRVtZRejOhYzdgAAAkw"]
[Sun Jan 04 20:10:15.398142 2026] [:error] [pid 5727:tid 5779] [client 20.205.40.94:8178] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zasd.php"] [unique_id "aVpYp-w4wd_I9FHn6_-yxgAAAxQ"]
[Sun Jan 04 20:10:15.891721 2026] [:error] [pid 13607:tid 13645] [client 20.205.40.94:8185] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zasd.php"] [unique_id "aVpYp8gtHIw0wt4bHzlElQAAAYg"]
[Sun Jan 04 20:10:16.210629 2026] [:error] [pid 1297:tid 1318] [client 20.205.40.94:7762] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xml.php"] [unique_id "aVpYqBf98x0RBG23PjfX2AAAABM"]
[Sun Jan 04 20:10:16.477908 2026] [:error] [pid 13664:tid 13691] [client 20.205.40.94:7770] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xml.php"] [unique_id "aVpYqE31yRVtZRejOhYzfQAAAlI"]
[Sun Jan 04 20:10:16.823256 2026] [:error] [pid 1297:tid 1322] [client 20.205.40.94:8173] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xml.php"] [unique_id "aVpYqBf98x0RBG23PjfX2wAAABc"]
[Sun Jan 04 20:10:17.119721 2026] [:error] [pid 13665:tid 13709] [client 20.205.40.94:7922] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xml.php"] [unique_id "aVpYqStV68J6JMFbIQB_AwAAA4k"]
[Sun Jan 04 20:10:17.730662 2026] [:error] [pid 1297:tid 1302] [client 20.205.40.94:8117] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aVpYqRf98x0RBG23PjfX3wAAAAM"]
[Sun Jan 04 20:10:18.404653 2026] [:error] [pid 13665:tid 13714] [client 20.205.40.94:8103] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aVpYqitV68J6JMFbIQB_BgAAA44"]
[Sun Jan 04 20:10:18.733183 2026] [:error] [pid 1297:tid 1323] [client 20.205.40.94:8139] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aVpYqhf98x0RBG23PjfX5AAAABg"]
[Sun Jan 04 20:10:19.047776 2026] [:error] [pid 13607:tid 13657] [client 20.205.40.94:7808] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aVpYq8gtHIw0wt4bHzlEngAAAZQ"]
[Sun Jan 04 20:10:19.348506 2026] [:error] [pid 1297:tid 1316] [client 20.205.40.94:7881] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zcxb.php"] [unique_id "aVpYqxf98x0RBG23PjfX5wAAABE"]
[Sun Jan 04 20:10:19.734106 2026] [:error] [pid 13576:tid 13595] [client 20.205.40.94:8126] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zcxb.php"] [unique_id "aVpYq9O7CLv7nZyxcqAZHgAAAFE"]
[Sun Jan 04 20:10:20.053325 2026] [:error] [pid 13606:tid 13624] [client 20.205.40.94:7910] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zcxb.php"] [unique_id "aVpYrOYGV0Z2JafR7r3o_wAAAM4"]
[Sun Jan 04 20:10:20.561931 2026] [:error] [pid 13607:tid 13645] [client 20.205.40.94:8000] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zcxb.php"] [unique_id "aVpYrMgtHIw0wt4bHzlEoQAAAYg"]
[Sun Jan 04 20:10:20.961153 2026] [:error] [pid 58433:tid 58472] [client 20.205.40.94:8005] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thoms.php"] [unique_id "aVpYrE5m7bkw35zhUNbqeQAAAQg"]
[Sun Jan 04 20:10:21.468663 2026] [:error] [pid 58433:tid 58471] [client 20.205.40.94:7778] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thoms.php"] [unique_id "aVpYrU5m7bkw35zhUNbqegAAAQc"]
[Sun Jan 04 20:10:22.023389 2026] [:error] [pid 13665:tid 13724] [client 20.205.40.94:7786] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thoms.php"] [unique_id "aVpYritV68J6JMFbIQB_DwAAA5g"]
[Sun Jan 04 20:10:22.615923 2026] [:error] [pid 13665:tid 13700] [client 20.205.40.94:7830] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thoms.php"] [unique_id "aVpYritV68J6JMFbIQB_EAAAA4A"]
[Sun Jan 04 20:10:22.975008 2026] [:error] [pid 13665:tid 13701] [client 20.205.40.94:7822] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ink.php"] [unique_id "aVpYritV68J6JMFbIQB_FAAAA4E"]
[Sun Jan 04 20:10:23.341230 2026] [:error] [pid 13607:tid 13658] [client 20.205.40.94:8130] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ink.php"] [unique_id "aVpYr8gtHIw0wt4bHzlEqwAAAZU"]
[Sun Jan 04 20:10:23.829863 2026] [:error] [pid 13665:tid 13706] [client 20.205.40.94:7865] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ink.php"] [unique_id "aVpYrytV68J6JMFbIQB_FwAAA4Y"]
[Sun Jan 04 20:10:24.152104 2026] [:error] [pid 13607:tid 13642] [client 20.205.40.94:8101] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ink.php"] [unique_id "aVpYsMgtHIw0wt4bHzlErQAAAYU"]
[Sun Jan 04 20:10:24.548893 2026] [:error] [pid 11931:tid 11946] [client 20.205.40.94:8087] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpc1.php"] [unique_id "aVpYsIEqfZyxESsOcB12lAAAAcw"]
[Sun Jan 04 20:10:25.418486 2026] [:error] [pid 13664:tid 13686] [client 20.205.40.94:7845] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpc1.php"] [unique_id "aVpYsU31yRVtZRejOhYzlAAAAk0"]
[Sun Jan 04 20:10:25.806728 2026] [:error] [pid 13665:tid 13711] [client 20.205.40.94:8181] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpc1.php"] [unique_id "aVpYsStV68J6JMFbIQB_HgAAA4s"]
[Sun Jan 04 20:10:26.321878 2026] [:error] [pid 13665:tid 13715] [client 20.205.40.94:8168] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpc1.php"] [unique_id "aVpYsitV68J6JMFbIQB_IAAAA48"]
[Sun Jan 04 20:10:26.627044 2026] [:error] [pid 13576:tid 13582] [client 20.205.40.94:7946] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/G6.php"] [unique_id "aVpYstO7CLv7nZyxcqAZIgAAAEQ"]
[Sun Jan 04 20:10:26.960051 2026] [:error] [pid 13665:tid 13722] [client 20.205.40.94:7932] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/G6.php"] [unique_id "aVpYsitV68J6JMFbIQB_JQAAA5Y"]
[Sun Jan 04 20:10:27.271278 2026] [:error] [pid 11931:tid 11944] [client 20.205.40.94:8031] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/G6.php"] [unique_id "aVpYs4EqfZyxESsOcB12mQAAAco"]
[Sun Jan 04 20:10:27.832068 2026] [:error] [pid 13664:tid 13681] [client 20.205.40.94:7802] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/G6.php"] [unique_id "aVpYs031yRVtZRejOhYznQAAAkg"]
[Sun Jan 04 20:10:28.253041 2026] [:error] [pid 1297:tid 1318] [client 20.205.40.94:8085] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xrp.php"] [unique_id "aVpYtBf98x0RBG23PjfX_AAAABM"]
[Sun Jan 04 20:10:28.725146 2026] [:error] [pid 13576:tid 13599] [client 20.205.40.94:7847] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xrp.php"] [unique_id "aVpYtNO7CLv7nZyxcqAZIwAAAFU"]
[Sun Jan 04 20:10:29.567410 2026] [:error] [pid 13664:tid 13674] [client 20.205.40.94:7922] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xrp.php"] [unique_id "aVpYtU31yRVtZRejOhYzoQAAAkE"]
[Sun Jan 04 20:10:30.097563 2026] [:error] [pid 58433:tid 58483] [client 20.205.40.94:7744] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xrp.php"] [unique_id "aVpYtk5m7bkw35zhUNbqfwAAARM"]
[Sun Jan 04 20:10:30.585147 2026] [:error] [pid 13664:tid 13684] [client 20.205.40.94:8014] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xex.php"] [unique_id "aVpYtk31yRVtZRejOhYzogAAAks"]
[Sun Jan 04 20:10:31.006718 2026] [:error] [pid 5010:tid 5041] [client 20.205.40.94:7982] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xex.php"] [unique_id "aVpYt7V9sNJtnPnkkz-Z9QAAAoA"]
[Sun Jan 04 20:10:32.087938 2026] [:error] [pid 13607:tid 13639] [client 20.205.40.94:8124] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xex.php"] [unique_id "aVpYuMgtHIw0wt4bHzlEuwAAAYI"]
[Sun Jan 04 20:10:32.553136 2026] [:error] [pid 1297:tid 1302] [client 20.205.40.94:8075] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xex.php"] [unique_id "aVpYuBf98x0RBG23PjfX_gAAAAM"]
[Sun Jan 04 20:10:33.044228 2026] [:error] [pid 58433:tid 58467] [client 20.205.40.94:7912] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/log.php"] [unique_id "aVpYuU5m7bkw35zhUNbqjQAAAQM"]
[Sun Jan 04 20:10:33.684446 2026] [:error] [pid 13606:tid 13625] [client 20.205.40.94:7848] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/log.php"] [unique_id "aVpYueYGV0Z2JafR7r3pDQAAAM8"]
[Sun Jan 04 20:10:34.246163 2026] [:error] [pid 58433:tid 58466] [client 20.205.40.94:8004] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/log.php"] [unique_id "aVpYuk5m7bkw35zhUNbqkAAAAQI"]
[Sun Jan 04 20:10:35.257171 2026] [:error] [pid 13664:tid 13694] [client 20.205.40.94:7929] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/log.php"] [unique_id "aVpYu031yRVtZRejOhYzpgAAAlU"]
[Sun Jan 04 20:10:36.148452 2026] [:error] [pid 13664:tid 13697] [client 20.205.40.94:7839] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tarc.php"] [unique_id "aVpYvE31yRVtZRejOhYzqAAAAlg"]
[Sun Jan 04 20:10:36.566534 2026] [:error] [pid 1297:tid 1304] [client 20.205.40.94:8036] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tarc.php"] [unique_id "aVpYvBf98x0RBG23PjfYAQAAAAU"]
[Sun Jan 04 20:10:37.047734 2026] [:error] [pid 1297:tid 1316] [client 20.205.40.94:8042] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tarc.php"] [unique_id "aVpYvRf98x0RBG23PjfYAwAAABE"]
[Sun Jan 04 20:10:37.497653 2026] [:error] [pid 5010:tid 5043] [client 20.205.40.94:8159] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tarc.php"] [unique_id "aVpYvbV9sNJtnPnkkz-Z-wAAAoI"]
[Sun Jan 04 20:10:37.949241 2026] [:error] [pid 13607:tid 13660] [client 20.205.40.94:7930] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpls.php"] [unique_id "aVpYvcgtHIw0wt4bHzlEwgAAAZc"]
[Sun Jan 04 20:10:38.425317 2026] [:error] [pid 13607:tid 13642] [client 20.205.40.94:7924] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpls.php"] [unique_id "aVpYvsgtHIw0wt4bHzlExAAAAYU"]
[Sun Jan 04 20:10:38.944284 2026] [:error] [pid 13606:tid 13632] [client 20.205.40.94:7998] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpls.php"] [unique_id "aVpYvuYGV0Z2JafR7r3pEAAAANY"]
[Sun Jan 04 20:10:39.298660 2026] [:error] [pid 13607:tid 13638] [client 20.205.40.94:7814] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpls.php"] [unique_id "aVpYv8gtHIw0wt4bHzlEyAAAAYE"]
[Sun Jan 04 20:10:39.845354 2026] [:error] [pid 5010:tid 5053] [client 20.205.40.94:8034] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lov.php"] [unique_id "aVpYv7V9sNJtnPnkkz-Z_QAAAow"]
[Sun Jan 04 20:11:39.253550 2026] [:error] [pid 5010:tid 5063] [client 20.205.40.94:8049] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/skk.php"] [unique_id "aVpY-7V9sNJtnPnkkz-aQAAAApY"]
[Sun Jan 04 20:11:39.916660 2026] [:error] [pid 13576:tid 13581] [client 20.205.40.94:8067] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/skk.php"] [unique_id "aVpY-9O7CLv7nZyxcqAZaQAAAEM"]
[Sun Jan 04 20:11:41.343189 2026] [:error] [pid 13664:tid 13675] [client 20.205.40.94:8018] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/skk.php"] [unique_id "aVpY_U31yRVtZRejOhYz6AAAAkI"]
[Sun Jan 04 20:11:41.815415 2026] [:error] [pid 13664:tid 13679] [client 20.205.40.94:8083] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/skk.php"] [unique_id "aVpY_U31yRVtZRejOhYz6wAAAkY"]
[Sun Jan 04 20:11:42.191532 2026] [:error] [pid 13576:tid 13583] [client 20.205.40.94:7949] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/testas.php"] [unique_id "aVpY_tO7CLv7nZyxcqAZbwAAAEU"]
[Sun Jan 04 20:11:42.684283 2026] [:error] [pid 5010:tid 5051] [client 20.205.40.94:8066] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/testas.php"] [unique_id "aVpY_rV9sNJtnPnkkz-aRQAAAoo"]
[Sun Jan 04 20:11:43.308642 2026] [:error] [pid 5727:tid 5769] [client 20.205.40.94:8038] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/testas.php"] [unique_id "aVpY_-w4wd_I9FHn6_-zIQAAAwo"]
[Sun Jan 04 20:11:43.672962 2026] [:error] [pid 5727:tid 5783] [client 20.205.40.94:7839] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/testas.php"] [unique_id "aVpY_-w4wd_I9FHn6_-zIgAAAxg"]
[Sun Jan 04 20:11:43.976188 2026] [:error] [pid 1297:tid 1323] [client 20.205.40.94:8079] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ma1.php"] [unique_id "aVpY_xf98x0RBG23PjfYNAAAABg"]
[Sun Jan 04 20:11:44.406631 2026] [:error] [pid 5727:tid 5767] [client 20.205.40.94:7898] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ma1.php"] [unique_id "aVpZAOw4wd_I9FHn6_-zIwAAAwg"]
[Sun Jan 04 20:11:44.886258 2026] [:error] [pid 5010:tid 5050] [client 20.205.40.94:7817] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ma1.php"] [unique_id "aVpZALV9sNJtnPnkkz-aSQAAAok"]
[Sun Jan 04 20:11:45.443005 2026] [:error] [pid 58433:tid 58476] [client 20.205.40.94:7948] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ma1.php"] [unique_id "aVpZAU5m7bkw35zhUNbqzgAAAQw"]
[Sun Jan 04 20:11:45.951695 2026] [:error] [pid 13607:tid 13657] [client 20.205.40.94:8060] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/loi.php"] [unique_id "aVpZAcgtHIw0wt4bHzlFGwAAAZQ"]
[Sun Jan 04 20:11:46.502804 2026] [:error] [pid 13576:tid 13579] [client 20.205.40.94:8163] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/loi.php"] [unique_id "aVpZAtO7CLv7nZyxcqAZdAAAAEE"]
[Sun Jan 04 20:11:47.064431 2026] [:error] [pid 13606:tid 13620] [client 20.205.40.94:8114] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/loi.php"] [unique_id "aVpZA-YGV0Z2JafR7r3pOwAAAMo"]
[Sun Jan 04 20:11:47.485034 2026] [:error] [pid 58433:tid 58473] [client 20.205.40.94:8033] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/loi.php"] [unique_id "aVpZA05m7bkw35zhUNbq0AAAAQk"]
[Sun Jan 04 20:11:47.856732 2026] [:error] [pid 5010:tid 5056] [client 20.205.40.94:8003] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv2.php"] [unique_id "aVpZA7V9sNJtnPnkkz-aSwAAAo8"]
[Sun Jan 04 20:11:48.336031 2026] [:error] [pid 13664:tid 13679] [client 20.205.40.94:8125] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv2.php"] [unique_id "aVpZBE31yRVtZRejOhYz8wAAAkY"]
[Sun Jan 04 20:11:48.754055 2026] [:error] [pid 13664:tid 13685] [client 20.205.40.94:7976] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv2.php"] [unique_id "aVpZBE31yRVtZRejOhYz9AAAAkw"]
[Sun Jan 04 20:11:49.330741 2026] [:error] [pid 13607:tid 13654] [client 20.205.40.94:7947] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wolv2.php"] [unique_id "aVpZBcgtHIw0wt4bHzlFHQAAAZE"]
[Sun Jan 04 20:11:49.752039 2026] [:error] [pid 13664:tid 13695] [client 20.205.40.94:8090] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "aVpZBU31yRVtZRejOhYz9QAAAlY"]
[Sun Jan 04 20:11:50.530049 2026] [:error] [pid 1297:tid 1322] [client 20.205.40.94:8119] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "aVpZBhf98x0RBG23PjfYPgAAABc"]
[Sun Jan 04 20:11:51.182415 2026] [:error] [pid 13664:tid 13680] [client 20.205.40.94:8107] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "aVpZB031yRVtZRejOhYz9gAAAkc"]
[Sun Jan 04 20:11:51.680842 2026] [:error] [pid 5727:tid 5778] [client 20.205.40.94:8105] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "aVpZB-w4wd_I9FHn6_-zKAAAAxM"]
[Sun Jan 04 20:11:52.101595 2026] [:error] [pid 13607:tid 13640] [client 20.205.40.94:8012] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4ff11.php"] [unique_id "aVpZCMgtHIw0wt4bHzlFIAAAAYM"]
[Sun Jan 04 20:11:52.625238 2026] [:error] [pid 13607:tid 13653] [client 20.205.40.94:8123] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4ff11.php"] [unique_id "aVpZCMgtHIw0wt4bHzlFIgAAAZA"]
[Sun Jan 04 20:11:53.382030 2026] [:error] [pid 13606:tid 13618] [client 20.205.40.94:8177] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4ff11.php"] [unique_id "aVpZCeYGV0Z2JafR7r3pPwAAAMg"]
[Sun Jan 04 20:11:53.942457 2026] [:error] [pid 5010:tid 5055] [client 20.205.40.94:8030] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4ff11.php"] [unique_id "aVpZCbV9sNJtnPnkkz-aUQAAAo4"]
[Sun Jan 04 20:11:54.605455 2026] [:error] [pid 11931:tid 11946] [client 20.205.40.94:7832] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kla.php"] [unique_id "aVpZCoEqfZyxESsOcB12wgAAAcw"]
[Sun Jan 04 20:11:55.488538 2026] [:error] [pid 58433:tid 58472] [client 20.205.40.94:8187] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kla.php"] [unique_id "aVpZC05m7bkw35zhUNbq1wAAAQg"]
[Sun Jan 04 20:11:56.197223 2026] [:error] [pid 58433:tid 58485] [client 20.205.40.94:7977] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kla.php"] [unique_id "aVpZDE5m7bkw35zhUNbq2AAAARU"]
[Sun Jan 04 20:11:56.937458 2026] [:error] [pid 13664:tid 13673] [client 20.205.40.94:8043] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kla.php"] [unique_id "aVpZDE31yRVtZRejOhYz_QAAAkA"]
[Sun Jan 04 20:11:57.225635 2026] [:error] [pid 13664:tid 13675] [client 20.205.40.94:8109] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hzz.php"] [unique_id "aVpZDU31yRVtZRejOhYz_wAAAkI"]
[Sun Jan 04 20:11:57.772229 2026] [:error] [pid 5727:tid 5776] [client 20.205.40.94:8022] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hzz.php"] [unique_id "aVpZDew4wd_I9FHn6_-zKwAAAxE"]
[Sun Jan 04 20:11:58.191896 2026] [:error] [pid 5727:tid 5769] [client 20.205.40.94:7938] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hzz.php"] [unique_id "aVpZDuw4wd_I9FHn6_-zLQAAAwo"]
[Sun Jan 04 20:11:58.639254 2026] [:error] [pid 13607:tid 13639] [client 20.205.40.94:7827] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hzz.php"] [unique_id "aVpZDsgtHIw0wt4bHzlFKQAAAYI"]
[Sun Jan 04 20:11:58.986313 2026] [:error] [pid 5727:tid 5783] [client 20.205.40.94:8142] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mtvcrew.php"] [unique_id "aVpZDuw4wd_I9FHn6_-zLgAAAxg"]
[Sun Jan 04 20:11:59.354251 2026] [:error] [pid 13576:tid 13596] [client 20.205.40.94:8091] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mtvcrew.php"] [unique_id "aVpZD9O7CLv7nZyxcqAZfAAAAFI"]
[Sun Jan 04 20:11:59.816967 2026] [:error] [pid 58433:tid 58473] [client 20.205.40.94:8170] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mtvcrew.php"] [unique_id "aVpZD05m7bkw35zhUNbq2wAAAQk"]
[Sun Jan 04 20:12:00.353919 2026] [:error] [pid 58433:tid 58465] [client 20.205.40.94:7943] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mtvcrew.php"] [unique_id "aVpZEE5m7bkw35zhUNbq3AAAAQE"]
[Sun Jan 04 20:12:01.016286 2026] [:error] [pid 13576:tid 13597] [client 20.205.40.94:8121] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z58.php"] [unique_id "aVpZEdO7CLv7nZyxcqAZfwAAAFM"]
[Sun Jan 04 20:12:01.461013 2026] [:error] [pid 13606:tid 13628] [client 20.205.40.94:8095] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z58.php"] [unique_id "aVpZEeYGV0Z2JafR7r3pQwAAANI"]
[Sun Jan 04 20:12:02.253506 2026] [:error] [pid 13607:tid 13659] [client 20.205.40.94:8017] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z58.php"] [unique_id "aVpZEsgtHIw0wt4bHzlFMgAAAZY"]
[Sun Jan 04 20:12:02.943411 2026] [:error] [pid 13607:tid 13661] [client 20.205.40.94:8019] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z58.php"] [unique_id "aVpZEsgtHIw0wt4bHzlFMwAAAZg"]
[Sun Jan 04 20:12:03.361661 2026] [:error] [pid 13607:tid 13645] [client 20.205.40.94:8009] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wle.php"] [unique_id "aVpZE8gtHIw0wt4bHzlFOAAAAYg"]
[Sun Jan 04 20:12:03.730271 2026] [:error] [pid 13664:tid 13678] [client 20.205.40.94:8077] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wle.php"] [unique_id "aVpZE031yRVtZRejOhY0BAAAAkU"]
[Sun Jan 04 20:12:04.082222 2026] [:error] [pid 5010:tid 5062] [client 20.205.40.94:7789] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wle.php"] [unique_id "aVpZFLV9sNJtnPnkkz-aVQAAApU"]
[Sun Jan 04 20:12:04.512358 2026] [:error] [pid 13607:tid 13650] [client 20.205.40.94:8040] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wle.php"] [unique_id "aVpZFMgtHIw0wt4bHzlFOwAAAY0"]
[Sun Jan 04 20:12:05.012400 2026] [:error] [pid 13607:tid 13651] [client 20.205.40.94:7828] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aVpZFcgtHIw0wt4bHzlFPQAAAY4"]
[Sun Jan 04 20:12:05.675425 2026] [:error] [pid 5010:tid 5047] [client 20.205.40.94:7779] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aVpZFbV9sNJtnPnkkz-aWQAAAoY"]
[Sun Jan 04 20:12:05.979638 2026] [:error] [pid 13607:tid 13649] [client 20.205.40.94:8013] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aVpZFcgtHIw0wt4bHzlFPgAAAYw"]
[Sun Jan 04 20:12:06.323356 2026] [:error] [pid 13607:tid 13652] [client 20.205.40.94:8034] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aVpZFsgtHIw0wt4bHzlFPwAAAY8"]
[Sun Jan 04 20:12:06.607188 2026] [:error] [pid 5727:tid 5766] [client 20.205.40.94:8024] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/09fa6.php"] [unique_id "aVpZFuw4wd_I9FHn6_-zMAAAAwc"]
[Sun Jan 04 20:12:06.975399 2026] [:error] [pid 5727:tid 5762] [client 20.205.40.94:8129] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/09fa6.php"] [unique_id "aVpZFuw4wd_I9FHn6_-zMQAAAwM"]
[Sun Jan 04 20:12:07.284789 2026] [:error] [pid 13664:tid 13696] [client 20.205.40.94:7957] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/09fa6.php"] [unique_id "aVpZF031yRVtZRejOhY0CgAAAlc"]
[Sun Jan 04 20:12:07.599721 2026] [:error] [pid 13576:tid 13596] [client 20.205.40.94:7841] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/09fa6.php"] [unique_id "aVpZF9O7CLv7nZyxcqAZjQAAAFI"]
[Sun Jan 04 20:12:08.319474 2026] [:error] [pid 13607:tid 13661] [client 20.205.40.94:7711] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/89.php"] [unique_id "aVpZGMgtHIw0wt4bHzlFVAAAAZg"]
[Sun Jan 04 20:12:08.724000 2026] [:error] [pid 5727:tid 5770] [client 20.205.40.94:8108] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/89.php"] [unique_id "aVpZGOw4wd_I9FHn6_-zNQAAAws"]
[Sun Jan 04 20:12:09.112335 2026] [:error] [pid 13576:tid 13594] [client 20.205.40.94:7892] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/89.php"] [unique_id "aVpZGdO7CLv7nZyxcqAZmwAAAFA"]
[Sun Jan 04 20:12:09.439303 2026] [:error] [pid 5727:tid 5772] [client 20.205.40.94:8002] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/89.php"] [unique_id "aVpZGew4wd_I9FHn6_-zNwAAAw0"]
[Sun Jan 04 20:12:09.739736 2026] [:error] [pid 13665:tid 13710] [client 20.205.40.94:7857] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tox.php"] [unique_id "aVpZGStV68J6JMFbIQB_bgAAA4o"]
[Sun Jan 04 20:12:10.019261 2026] [:error] [pid 13664:tid 13688] [client 20.205.40.94:7971] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tox.php"] [unique_id "aVpZGk31yRVtZRejOhY0DwAAAk8"]
[Sun Jan 04 20:12:10.477921 2026] [:error] [pid 5010:tid 5045] [client 20.205.40.94:8094] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tox.php"] [unique_id "aVpZGrV9sNJtnPnkkz-abwAAAoQ"]
[Sun Jan 04 20:12:10.789559 2026] [:error] [pid 13664:tid 13681] [client 20.205.40.94:8054] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tox.php"] [unique_id "aVpZGk31yRVtZRejOhY0EgAAAkg"]
[Sun Jan 04 20:12:11.142442 2026] [:error] [pid 13606:tid 13613] [client 20.205.40.94:7858] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/has.php"] [unique_id "aVpZG-YGV0Z2JafR7r3pRgAAAMM"]
[Sun Jan 04 20:12:11.551780 2026] [:error] [pid 13576:tid 13590] [client 20.205.40.94:8046] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/has.php"] [unique_id "aVpZG9O7CLv7nZyxcqAZnQAAAEw"]
[Sun Jan 04 20:12:11.890325 2026] [:error] [pid 5727:tid 5760] [client 20.205.40.94:7879] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/has.php"] [unique_id "aVpZG-w4wd_I9FHn6_-zOgAAAwE"]
[Sun Jan 04 20:12:12.198847 2026] [:error] [pid 1297:tid 1305] [client 20.205.40.94:7826] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/has.php"] [unique_id "aVpZHBf98x0RBG23PjfYbwAAAAY"]
[Sun Jan 04 20:12:12.981435 2026] [:error] [pid 5010:tid 5057] [client 20.205.40.94:8028] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nax.php"] [unique_id "aVpZHLV9sNJtnPnkkz-acgAAApA"]
[Sun Jan 04 20:12:13.606463 2026] [:error] [pid 11931:tid 11947] [client 20.205.40.94:7746] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nax.php"] [unique_id "aVpZHYEqfZyxESsOcB12ywAAAc0"]
[Sun Jan 04 20:12:13.943433 2026] [:error] [pid 13576:tid 13581] [client 20.205.40.94:7984] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nax.php"] [unique_id "aVpZHdO7CLv7nZyxcqAZogAAAEM"]
[Sun Jan 04 20:12:14.563895 2026] [:error] [pid 13576:tid 13579] [client 20.205.40.94:8026] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nax.php"] [unique_id "aVpZHtO7CLv7nZyxcqAZpQAAAEE"]
[Sun Jan 04 20:12:15.104813 2026] [:error] [pid 11931:tid 11951] [client 20.205.40.94:7824] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ooj.php"] [unique_id "aVpZH4EqfZyxESsOcB12zQAAAdE"]
[Sun Jan 04 20:12:15.507453 2026] [:error] [pid 13664:tid 13674] [client 20.205.40.94:7937] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ooj.php"] [unique_id "aVpZH031yRVtZRejOhY0FAAAAkE"]
[Sun Jan 04 20:12:16.046302 2026] [:error] [pid 1297:tid 1319] [client 20.205.40.94:7980] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ooj.php"] [unique_id "aVpZIBf98x0RBG23PjfYcwAAABQ"]
[Sun Jan 04 20:12:16.557781 2026] [:error] [pid 1297:tid 1323] [client 20.205.40.94:8143] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ooj.php"] [unique_id "aVpZIBf98x0RBG23PjfYdQAAABg"]
[Sun Jan 04 20:12:17.237197 2026] [:error] [pid 13607:tid 13654] [client 20.205.40.94:8141] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/orm.php"] [unique_id "aVpZIcgtHIw0wt4bHzlFYAAAAZE"]
[Sun Jan 04 20:12:17.623107 2026] [:error] [pid 13606:tid 13625] [client 20.205.40.94:7961] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/orm.php"] [unique_id "aVpZIeYGV0Z2JafR7r3pSgAAAM8"]
[Sun Jan 04 20:12:18.015511 2026] [:error] [pid 58433:tid 58471] [client 20.205.40.94:7876] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/orm.php"] [unique_id "aVpZIk5m7bkw35zhUNbq-QAAAQc"]
[Sun Jan 04 20:12:18.602714 2026] [:error] [pid 58433:tid 58479] [client 20.205.40.94:8007] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/orm.php"] [unique_id "aVpZIk5m7bkw35zhUNbq-gAAAQ8"]
[Sun Jan 04 20:12:19.028865 2026] [:error] [pid 13665:tid 13709] [client 20.205.40.94:7985] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mo.php"] [unique_id "aVpZIytV68J6JMFbIQB_dQAAA4k"]
[Sun Jan 04 20:12:19.387633 2026] [:error] [pid 11931:tid 11948] [client 20.205.40.94:7754] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mo.php"] [unique_id "aVpZI4EqfZyxESsOcB12zwAAAc4"]
[Sun Jan 04 20:12:19.843419 2026] [:error] [pid 58433:tid 58476] [client 20.205.40.94:8102] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mo.php"] [unique_id "aVpZI05m7bkw35zhUNbq_AAAAQw"]
[Sun Jan 04 20:12:20.125193 2026] [:error] [pid 13665:tid 13708] [client 20.205.40.94:8076] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mo.php"] [unique_id "aVpZJCtV68J6JMFbIQB_eQAAA4g"]
[Sun Jan 04 20:12:20.537290 2026] [:error] [pid 13606:tid 13628] [client 20.205.40.94:8035] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yep.php"] [unique_id "aVpZJOYGV0Z2JafR7r3pSwAAANI"]
[Sun Jan 04 20:12:21.237348 2026] [:error] [pid 13607:tid 13656] [client 20.205.40.94:7783] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yep.php"] [unique_id "aVpZJcgtHIw0wt4bHzlFYgAAAZM"]
[Sun Jan 04 20:12:21.602505 2026] [:error] [pid 13576:tid 13590] [client 20.205.40.94:7760] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yep.php"] [unique_id "aVpZJdO7CLv7nZyxcqAZqQAAAEw"]
[Sun Jan 04 20:12:22.034412 2026] [:error] [pid 5727:tid 5774] [client 20.205.40.94:7901] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yep.php"] [unique_id "aVpZJuw4wd_I9FHn6_-zQAAAAw8"]
[Sun Jan 04 20:12:22.317276 2026] [:error] [pid 13576:tid 13586] [client 20.205.40.94:7749] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x3.php"] [unique_id "aVpZJtO7CLv7nZyxcqAZqgAAAEg"]
[Sun Jan 04 20:12:22.720982 2026] [:error] [pid 13607:tid 13640] [client 20.205.40.94:8020] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x3.php"] [unique_id "aVpZJsgtHIw0wt4bHzlFZAAAAYM"]
[Sun Jan 04 20:12:23.140037 2026] [:error] [pid 1297:tid 1313] [client 20.205.40.94:7812] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x3.php"] [unique_id "aVpZJxf98x0RBG23PjfYegAAAA4"]
[Sun Jan 04 20:12:23.517295 2026] [:error] [pid 1297:tid 1301] [client 20.205.40.94:8088] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x3.php"] [unique_id "aVpZJxf98x0RBG23PjfYfAAAAAI"]
[Sun Jan 04 20:12:23.934778 2026] [:error] [pid 13665:tid 13714] [client 20.205.40.94:8116] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6erg.php"] [unique_id "aVpZJytV68J6JMFbIQB_fAAAA44"]
[Sun Jan 04 20:12:24.256177 2026] [:error] [pid 5727:tid 5760] [client 20.205.40.94:8153] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6erg.php"] [unique_id "aVpZKOw4wd_I9FHn6_-zQgAAAwE"]
[Sun Jan 04 20:12:24.698159 2026] [:error] [pid 13576:tid 13601] [client 20.205.40.94:7939] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6erg.php"] [unique_id "aVpZKNO7CLv7nZyxcqAZsAAAAFc"]
[Sun Jan 04 20:12:25.181022 2026] [:error] [pid 13607:tid 13646] [client 20.205.40.94:7990] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6erg.php"] [unique_id "aVpZKcgtHIw0wt4bHzlFZwAAAYk"]
[Sun Jan 04 20:12:25.602408 2026] [:error] [pid 13665:tid 13724] [client 20.205.40.94:7975] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggfi.php"] [unique_id "aVpZKStV68J6JMFbIQB_gAAAA5g"]
[Sun Jan 04 20:12:26.271677 2026] [:error] [pid 13665:tid 13707] [client 20.205.40.94:7996] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggfi.php"] [unique_id "aVpZKitV68J6JMFbIQB_hQAAA4c"]
[Sun Jan 04 20:12:26.687133 2026] [:error] [pid 13665:tid 13710] [client 20.205.40.94:7759] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggfi.php"] [unique_id "aVpZKitV68J6JMFbIQB_hgAAA4o"]
[Sun Jan 04 20:12:27.196807 2026] [:error] [pid 5727:tid 5781] [client 20.205.40.94:7940] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggfi.php"] [unique_id "aVpZK-w4wd_I9FHn6_-zRAAAAxY"]
[Sun Jan 04 20:12:27.792762 2026] [:error] [pid 13576:tid 13591] [client 20.205.40.94:7861] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wrt.php"] [unique_id "aVpZK9O7CLv7nZyxcqAZuwAAAE0"]
[Sun Jan 04 20:12:28.256905 2026] [:error] [pid 13607:tid 13643] [client 20.205.40.94:7856] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wrt.php"] [unique_id "aVpZLMgtHIw0wt4bHzlFaQAAAYY"]
[Sun Jan 04 20:12:28.943408 2026] [:error] [pid 13576:tid 13578] [client 20.205.40.94:7680] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wrt.php"] [unique_id "aVpZLNO7CLv7nZyxcqAZwQAAAEA"]
[Sun Jan 04 20:12:29.512848 2026] [:error] [pid 5010:tid 5052] [client 20.205.40.94:7871] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wrt.php"] [unique_id "aVpZLbV9sNJtnPnkkz-agAAAAos"]
[Sun Jan 04 20:12:29.885298 2026] [:error] [pid 5010:tid 5056] [client 20.205.40.94:7950] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aVpZLbV9sNJtnPnkkz-aggAAAo8"]
[Sun Jan 04 20:12:30.186564 2026] [:error] [pid 5010:tid 5061] [client 20.205.40.94:7897] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aVpZLrV9sNJtnPnkkz-ahAAAApQ"]
[Sun Jan 04 20:12:30.521482 2026] [:error] [pid 13665:tid 13712] [client 20.205.40.94:7763] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aVpZLitV68J6JMFbIQB_jQAAA4w"]
[Sun Jan 04 20:12:30.947241 2026] [:error] [pid 13665:tid 13708] [client 20.205.40.94:8037] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aVpZLitV68J6JMFbIQB_jgAAA4g"]
[Sun Jan 04 20:12:31.555077 2026] [:error] [pid 13607:tid 13644] [client 20.205.40.94:7731] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jju.php"] [unique_id "aVpZL8gtHIw0wt4bHzlFbAAAAYc"]
[Sun Jan 04 20:12:32.093167 2026] [:error] [pid 13606:tid 13626] [client 20.205.40.94:7821] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jju.php"] [unique_id "aVpZMOYGV0Z2JafR7r3pUQAAANA"]
[Sun Jan 04 20:12:32.525712 2026] [:error] [pid 13606:tid 13616] [client 20.205.40.94:7951] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jju.php"] [unique_id "aVpZMOYGV0Z2JafR7r3pUwAAAMY"]
[Sun Jan 04 20:12:32.869513 2026] [:error] [pid 58433:tid 58481] [client 20.205.40.94:7798] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jju.php"] [unique_id "aVpZME5m7bkw35zhUNbrAQAAARE"]
[Sun Jan 04 20:12:33.330310 2026] [:error] [pid 13664:tid 13685] [client 20.205.40.94:7925] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rsnu.php"] [unique_id "aVpZMU31yRVtZRejOhY0GQAAAkw"]
[Sun Jan 04 20:12:33.840229 2026] [:error] [pid 13664:tid 13695] [client 20.205.40.94:8118] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rsnu.php"] [unique_id "aVpZMU31yRVtZRejOhY0HAAAAlY"]
[Sun Jan 04 20:12:34.616275 2026] [:error] [pid 1297:tid 1303] [client 20.205.40.94:7765] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rsnu.php"] [unique_id "aVpZMhf98x0RBG23PjfYggAAAAQ"]
[Sun Jan 04 20:12:35.184342 2026] [:error] [pid 13665:tid 13704] [client 20.205.40.94:8174] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rsnu.php"] [unique_id "aVpZMytV68J6JMFbIQB_kQAAA4Q"]
[Sun Jan 04 20:12:35.707528 2026] [:error] [pid 5727:tid 5773] [client 20.205.40.94:8016] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aVpZM-w4wd_I9FHn6_-zSQAAAw4"]
[Sun Jan 04 20:12:36.066461 2026] [:error] [pid 13606:tid 13610] [client 20.205.40.94:7889] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aVpZNOYGV0Z2JafR7r3pWAAAAMA"]
[Sun Jan 04 20:12:36.599063 2026] [:error] [pid 5727:tid 5761] [client 20.205.40.94:7773] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aVpZNOw4wd_I9FHn6_-zSwAAAwI"]
[Sun Jan 04 20:13:40.351848 2026] [:error] [pid 13607:tid 13647] [client 20.205.40.94:7993] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1aa.php"] [unique_id "aVpZdMgtHIw0wt4bHzlGAgAAAYo"]
[Sun Jan 04 20:13:40.695684 2026] [:error] [pid 13607:tid 13656] [client 20.205.40.94:8080] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1aa.php"] [unique_id "aVpZdMgtHIw0wt4bHzlGBAAAAZM"]
[Sun Jan 04 20:13:40.960811 2026] [:error] [pid 5010:tid 5064] [client 20.205.40.94:8039] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1aa.php"] [unique_id "aVpZdLV9sNJtnPnkkz-atwAAApc"]
[Sun Jan 04 20:13:41.304746 2026] [:error] [pid 13664:tid 13691] [client 20.205.40.94:8011] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1aa.php"] [unique_id "aVpZdU31yRVtZRejOhY0QgAAAlI"]
[Sun Jan 04 20:13:41.831172 2026] [:error] [pid 13607:tid 13660] [client 20.205.40.94:8055] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/she.php"] [unique_id "aVpZdcgtHIw0wt4bHzlGBgAAAZc"]
[Sun Jan 04 20:13:42.126819 2026] [:error] [pid 13607:tid 13637] [client 20.205.40.94:7872] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/she.php"] [unique_id "aVpZdsgtHIw0wt4bHzlGBwAAAYA"]
[Sun Jan 04 20:13:42.396784 2026] [:error] [pid 5727:tid 5760] [client 20.205.40.94:7902] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/she.php"] [unique_id "aVpZduw4wd_I9FHn6_-zfAAAAwE"]
[Sun Jan 04 20:13:42.722565 2026] [:error] [pid 13607:tid 13657] [client 20.205.40.94:7991] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/she.php"] [unique_id "aVpZdsgtHIw0wt4bHzlGCQAAAZQ"]
[Sun Jan 04 20:13:42.990231 2026] [:error] [pid 13576:tid 13585] [client 20.205.40.94:8182] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aVpZdtO7CLv7nZyxcqAZ9wAAAEc"]
[Sun Jan 04 20:13:43.267195 2026] [:error] [pid 13665:tid 13703] [client 20.205.40.94:7963] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aVpZdytV68J6JMFbIQB_tAAAA4M"]
[Sun Jan 04 20:13:43.742330 2026] [:error] [pid 13607:tid 13661] [client 20.205.40.94:8074] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aVpZd8gtHIw0wt4bHzlGCwAAAZg"]
[Sun Jan 04 20:13:44.502023 2026] [:error] [pid 13607:tid 13659] [client 20.205.40.94:7952] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aVpZeMgtHIw0wt4bHzlGDAAAAZY"]
[Sun Jan 04 20:13:44.864952 2026] [:error] [pid 13664:tid 13679] [client 20.205.40.94:8162] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/excel.php"] [unique_id "aVpZeE31yRVtZRejOhY0RQAAAkY"]
[Sun Jan 04 20:13:45.251476 2026] [:error] [pid 11931:tid 11944] [client 20.205.40.94:7942] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/excel.php"] [unique_id "aVpZeYEqfZyxESsOcB12_AAAAco"]
[Sun Jan 04 20:13:45.685349 2026] [:error] [pid 11931:tid 11934] [client 20.205.40.94:8097] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/excel.php"] [unique_id "aVpZeYEqfZyxESsOcB12_gAAAcA"]
[Sun Jan 04 20:13:46.096866 2026] [:error] [pid 13606:tid 13614] [client 20.205.40.94:8096] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/excel.php"] [unique_id "aVpZeuYGV0Z2JafR7r3piQAAAMQ"]
[Sun Jan 04 20:13:46.394775 2026] [:error] [pid 11931:tid 11937] [client 20.205.40.94:7878] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aVpZeoEqfZyxESsOcB13AAAAAcM"]
[Sun Jan 04 20:13:46.778178 2026] [:error] [pid 13607:tid 13638] [client 20.205.40.94:8127] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aVpZesgtHIw0wt4bHzlGEQAAAYE"]
[Sun Jan 04 20:13:47.141586 2026] [:error] [pid 13607:tid 13654] [client 20.205.40.94:7944] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aVpZe8gtHIw0wt4bHzlGFAAAAZE"]
[Sun Jan 04 20:13:47.721012 2026] [:error] [pid 13607:tid 13658] [client 20.205.40.94:7945] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ar.php"] [unique_id "aVpZe8gtHIw0wt4bHzlGFgAAAZU"]
[Sun Jan 04 20:13:48.013617 2026] [:error] [pid 13664:tid 13686] [client 20.205.40.94:8137] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ap.php"] [unique_id "aVpZfE31yRVtZRejOhY0RgAAAk0"]
[Sun Jan 04 20:13:48.389620 2026] [:error] [pid 13606:tid 13622] [client 20.205.40.94:7884] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ap.php"] [unique_id "aVpZfOYGV0Z2JafR7r3pjgAAAMw"]
[Sun Jan 04 20:13:48.814221 2026] [:error] [pid 1297:tid 1311] [client 20.205.40.94:8052] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ap.php"] [unique_id "aVpZfBf98x0RBG23PjfYygAAAAw"]
[Sun Jan 04 20:13:49.146193 2026] [:error] [pid 13607:tid 13648] [client 20.205.40.94:8063] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ap.php"] [unique_id "aVpZfcgtHIw0wt4bHzlGGgAAAYs"]
[Sun Jan 04 20:13:49.502105 2026] [:error] [pid 13607:tid 13637] [client 20.205.40.94:7833] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nc4.php"] [unique_id "aVpZfcgtHIw0wt4bHzlGGwAAAYA"]
[Sun Jan 04 20:13:49.931430 2026] [:error] [pid 13664:tid 13688] [client 20.205.40.94:8147] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nc4.php"] [unique_id "aVpZfU31yRVtZRejOhY0SQAAAk8"]
[Sun Jan 04 20:13:50.265089 2026] [:error] [pid 13576:tid 13597] [client 20.205.40.94:7936] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nc4.php"] [unique_id "aVpZftO7CLv7nZyxcqAZ-gAAAFM"]
[Sun Jan 04 20:13:50.569149 2026] [:error] [pid 5727:tid 5772] [client 20.205.40.94:7873] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nc4.php"] [unique_id "aVpZfuw4wd_I9FHn6_-zgQAAAw0"]
[Sun Jan 04 20:13:51.267099 2026] [:error] [pid 13607:tid 13659] [client 20.205.40.94:7966] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/love.php"] [unique_id "aVpZf8gtHIw0wt4bHzlGHwAAAZY"]
[Sun Jan 04 20:13:51.784386 2026] [:error] [pid 13607:tid 13643] [client 20.205.40.94:8059] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/love.php"] [unique_id "aVpZf8gtHIw0wt4bHzlGIAAAAYY"]
[Sun Jan 04 20:13:52.274134 2026] [:error] [pid 13665:tid 13714] [client 20.205.40.94:8132] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/love.php"] [unique_id "aVpZgCtV68J6JMFbIQB_uAAAA44"]
[Sun Jan 04 20:13:52.743787 2026] [:error] [pid 5727:tid 5770] [client 20.205.40.94:8041] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/love.php"] [unique_id "aVpZgOw4wd_I9FHn6_-zggAAAws"]
[Sun Jan 04 20:13:53.137269 2026] [:error] [pid 13664:tid 13696] [client 20.205.40.94:8061] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wso3.php"] [unique_id "aVpZgU31yRVtZRejOhY0TwAAAlc"]
[Sun Jan 04 20:13:53.596115 2026] [:error] [pid 5010:tid 5051] [client 20.205.40.94:7986] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wso3.php"] [unique_id "aVpZgbV9sNJtnPnkkz-avgAAAoo"]
[Sun Jan 04 20:13:53.878704 2026] [:error] [pid 1297:tid 1305] [client 20.205.40.94:7960] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wso3.php"] [unique_id "aVpZgRf98x0RBG23PjfYzQAAAAY"]
[Sun Jan 04 20:13:54.212234 2026] [:error] [pid 13665:tid 13706] [client 20.205.40.94:8058] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wso3.php"] [unique_id "aVpZgitV68J6JMFbIQB_uQAAA4Y"]
[Sun Jan 04 20:13:54.671621 2026] [:error] [pid 13576:tid 13584] [client 20.205.40.94:8050] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x7.php"] [unique_id "aVpZgtO7CLv7nZyxcqAaBQAAAEY"]
[Sun Jan 04 20:13:54.974985 2026] [:error] [pid 13606:tid 13629] [client 20.205.40.94:8160] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x7.php"] [unique_id "aVpZguYGV0Z2JafR7r3pkQAAANM"]
[Sun Jan 04 20:13:55.264097 2026] [:error] [pid 5010:tid 5044] [client 20.205.40.94:8135] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x7.php"] [unique_id "aVpZg7V9sNJtnPnkkz-awAAAAoM"]
[Sun Jan 04 20:13:55.845246 2026] [:error] [pid 5010:tid 5052] [client 20.205.40.94:8098] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x7.php"] [unique_id "aVpZg7V9sNJtnPnkkz-awQAAAos"]
[Sun Jan 04 20:13:56.399178 2026] [:error] [pid 58433:tid 58468] [client 20.205.40.94:8006] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxl.php"] [unique_id "aVpZhE5m7bkw35zhUNbrPQAAAQQ"]
[Sun Jan 04 20:13:56.722601 2026] [:error] [pid 13665:tid 13718] [client 20.205.40.94:8073] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxl.php"] [unique_id "aVpZhCtV68J6JMFbIQB_vgAAA5I"]
[Sun Jan 04 20:13:57.206801 2026] [:error] [pid 58433:tid 58476] [client 20.205.40.94:8167] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxl.php"] [unique_id "aVpZhU5m7bkw35zhUNbrPgAAAQw"]
[Sun Jan 04 20:13:57.547441 2026] [:error] [pid 13665:tid 13702] [client 20.205.40.94:7921] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxl.php"] [unique_id "aVpZhStV68J6JMFbIQB_wgAAA4I"]
[Sun Jan 04 20:13:57.920715 2026] [:error] [pid 58433:tid 58466] [client 20.205.40.94:7954] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aVpZhU5m7bkw35zhUNbrQgAAAQI"]
[Sun Jan 04 20:13:58.242330 2026] [:error] [pid 1297:tid 1306] [client 20.205.40.94:7953] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aVpZhhf98x0RBG23PjfY1QAAAAc"]
[Sun Jan 04 20:13:58.826876 2026] [:error] [pid 13606:tid 13623] [client 20.205.40.94:7999] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aVpZhuYGV0Z2JafR7r3plwAAAM0"]
[Sun Jan 04 20:13:59.151855 2026] [:error] [pid 5010:tid 5043] [client 20.205.40.94:7816] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aVpZh7V9sNJtnPnkkz-axwAAAoI"]
[Sun Jan 04 20:13:59.509751 2026] [:error] [pid 5010:tid 5055] [client 20.205.40.94:8144] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "aVpZh7V9sNJtnPnkkz-ayQAAAo4"]
[Sun Jan 04 20:14:00.050663 2026] [:error] [pid 1297:tid 1304] [client 20.205.40.94:8053] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "aVpZiBf98x0RBG23PjfY1wAAAAU"]
[Sun Jan 04 20:14:00.513905 2026] [:error] [pid 5727:tid 5765] [client 20.205.40.94:8048] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "aVpZiOw4wd_I9FHn6_-zjwAAAwY"]
[Sun Jan 04 20:14:00.866259 2026] [:error] [pid 13606:tid 13619] [client 20.205.40.94:8161] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "aVpZiOYGV0Z2JafR7r3pmwAAAMk"]
[Sun Jan 04 20:14:01.184598 2026] [:error] [pid 5010:tid 5057] [client 20.205.40.94:7972] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lc.php"] [unique_id "aVpZibV9sNJtnPnkkz-azgAAApA"]
[Sun Jan 04 20:14:01.529893 2026] [:error] [pid 13665:tid 13707] [client 20.205.40.94:8045] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lc.php"] [unique_id "aVpZiStV68J6JMFbIQB_xQAAA4c"]
[Sun Jan 04 20:14:02.007899 2026] [:error] [pid 58433:tid 58470] [client 20.205.40.94:7843] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lc.php"] [unique_id "aVpZik5m7bkw35zhUNbrSAAAAQY"]
[Sun Jan 04 20:14:02.251879 2026] [:error] [pid 13607:tid 13647] [client 20.205.40.94:7970] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lc.php"] [unique_id "aVpZisgtHIw0wt4bHzlGLQAAAYo"]
[Sun Jan 04 20:14:02.581316 2026] [:error] [pid 1297:tid 1307] [client 20.205.40.94:7914] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfile.php"] [unique_id "aVpZihf98x0RBG23PjfY2QAAAAg"]
[Sun Jan 04 20:14:03.049701 2026] [:error] [pid 5727:tid 5774] [client 20.205.40.94:7811] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfile.php"] [unique_id "aVpZi-w4wd_I9FHn6_-zkAAAAw8"]
[Sun Jan 04 20:14:03.371520 2026] [:error] [pid 5727:tid 5773] [client 20.205.40.94:8047] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfile.php"] [unique_id "aVpZi-w4wd_I9FHn6_-zkgAAAw4"]
[Sun Jan 04 20:14:03.856130 2026] [:error] [pid 13665:tid 13722] [client 20.205.40.94:7965] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfile.php"] [unique_id "aVpZiytV68J6JMFbIQB_xwAAA5Y"]
[Sun Jan 04 20:14:04.309737 2026] [:error] [pid 13576:tid 13581] [client 20.205.40.94:7874] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gold.php"] [unique_id "aVpZjNO7CLv7nZyxcqAaDQAAAEM"]
[Sun Jan 04 20:14:04.752620 2026] [:error] [pid 13664:tid 13685] [client 20.205.40.94:7906] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gold.php"] [unique_id "aVpZjE31yRVtZRejOhY0VgAAAkw"]
[Sun Jan 04 20:14:05.618968 2026] [:error] [pid 5010:tid 5061] [client 20.205.40.94:7956] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gold.php"] [unique_id "aVpZjbV9sNJtnPnkkz-a2gAAApQ"]
[Sun Jan 04 20:14:06.022458 2026] [:error] [pid 13664:tid 13683] [client 20.205.40.94:7850] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gold.php"] [unique_id "aVpZjk31yRVtZRejOhY0XQAAAko"]
[Sun Jan 04 20:14:06.572064 2026] [:error] [pid 13576:tid 13578] [client 20.205.40.94:7903] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aua.php"] [unique_id "aVpZjtO7CLv7nZyxcqAaEAAAAEA"]
[Sun Jan 04 20:14:06.977952 2026] [:error] [pid 13607:tid 13648] [client 20.205.40.94:7829] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aua.php"] [unique_id "aVpZjsgtHIw0wt4bHzlGMQAAAYs"]
[Sun Jan 04 20:14:07.355389 2026] [:error] [pid 13607:tid 13643] [client 20.205.40.94:7882] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aua.php"] [unique_id "aVpZj8gtHIw0wt4bHzlGNQAAAYY"]
[Sun Jan 04 20:14:07.639884 2026] [:error] [pid 58433:tid 58477] [client 20.205.40.94:7969] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aua.php"] [unique_id "aVpZj05m7bkw35zhUNbrTQAAAQ0"]
[Sun Jan 04 20:14:08.074559 2026] [:error] [pid 1297:tid 1320] [client 20.205.40.94:7815] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aVpZkBf98x0RBG23PjfY3AAAABU"]
[Sun Jan 04 20:14:08.464669 2026] [:error] [pid 13665:tid 13709] [client 20.205.40.94:7978] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aVpZkCtV68J6JMFbIQB_zAAAA4k"]
[Sun Jan 04 20:14:09.181107 2026] [:error] [pid 13607:tid 13658] [client 20.205.40.94:7716] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aVpZkcgtHIw0wt4bHzlGOwAAAZU"]
[Sun Jan 04 20:14:09.566987 2026] [:error] [pid 13665:tid 13716] [client 20.205.40.94:7923] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aVpZkStV68J6JMFbIQB_zwAAA5A"]
[Sun Jan 04 20:14:10.021972 2026] [:error] [pid 13607:tid 13637] [client 20.205.40.94:8172] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/great.php"] [unique_id "aVpZksgtHIw0wt4bHzlGQwAAAYA"]
[Sun Jan 04 20:14:10.506160 2026] [:error] [pid 13665:tid 13701] [client 20.205.40.94:8051] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/great.php"] [unique_id "aVpZkitV68J6JMFbIQB_0gAAA4E"]
[Sun Jan 04 20:14:10.830031 2026] [:error] [pid 13607:tid 13658] [client 20.205.40.94:7931] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/great.php"] [unique_id "aVpZksgtHIw0wt4bHzlGSwAAAZU"]
[Sun Jan 04 20:14:11.171712 2026] [:error] [pid 13665:tid 13720] [client 20.205.40.94:7840] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/great.php"] [unique_id "aVpZkytV68J6JMFbIQB_1AAAA5Q"]
[Sun Jan 04 20:14:11.544095 2026] [:error] [pid 11931:tid 11950] [client 20.205.40.94:8015] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aVpZk4EqfZyxESsOcB13IwAAAdA"]
[Sun Jan 04 20:14:11.926885 2026] [:error] [pid 13607:tid 13640] [client 20.205.40.94:7968] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aVpZk8gtHIw0wt4bHzlGWAAAAYM"]
[Sun Jan 04 20:14:13.288461 2026] [:error] [pid 5010:tid 5047] [client 20.205.40.94:8064] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aVpZlbV9sNJtnPnkkz-a4QAAAoY"]
[Sun Jan 04 20:14:13.615865 2026] [:error] [pid 5010:tid 5053] [client 20.205.40.94:7720] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aVpZlbV9sNJtnPnkkz-a4gAAAow"]
[Sun Jan 04 20:14:14.030907 2026] [:error] [pid 13606:tid 13628] [client 20.205.40.94:7880] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pass.php"] [unique_id "aVpZluYGV0Z2JafR7r3psAAAANI"]
[Sun Jan 04 20:14:14.281615 2026] [:error] [pid 13606:tid 13632] [client 20.205.40.94:7775] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pass.php"] [unique_id "aVpZluYGV0Z2JafR7r3psgAAANY"]
[Sun Jan 04 20:14:14.678914 2026] [:error] [pid 13606:tid 13616] [client 20.205.40.94:7883] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pass.php"] [unique_id "aVpZluYGV0Z2JafR7r3pswAAAMY"]
[Sun Jan 04 20:14:15.024177 2026] [:error] [pid 13606:tid 13612] [client 20.205.40.94:7958] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pass.php"] [unique_id "aVpZl-YGV0Z2JafR7r3ptgAAAMI"]
[Sun Jan 04 20:14:15.588780 2026] [:error] [pid 13606:tid 13613] [client 20.205.40.94:7962] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ot.php"] [unique_id "aVpZl-YGV0Z2JafR7r3ptwAAAMM"]
[Sun Jan 04 20:14:16.015444 2026] [:error] [pid 13606:tid 13617] [client 20.205.40.94:7988] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ot.php"] [unique_id "aVpZmOYGV0Z2JafR7r3pugAAAMc"]
[Sun Jan 04 20:14:16.337389 2026] [:error] [pid 13606:tid 13630] [client 20.205.40.94:8021] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ot.php"] [unique_id "aVpZmOYGV0Z2JafR7r3pvAAAANQ"]
[Sun Jan 04 20:14:16.809371 2026] [:error] [pid 13665:tid 13712] [client 20.205.40.94:8082] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ot.php"] [unique_id "aVpZmCtV68J6JMFbIQB_2gAAA4w"]
[Sun Jan 04 20:14:17.176124 2026] [:error] [pid 13665:tid 13713] [client 20.205.40.94:7825] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/witmm.php"] [unique_id "aVpZmStV68J6JMFbIQB_3AAAA40"]
[Sun Jan 04 20:14:17.623234 2026] [:error] [pid 13664:tid 13683] [client 20.205.40.94:7864] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/witmm.php"] [unique_id "aVpZmU31yRVtZRejOhY0aAAAAko"]
[Sun Jan 04 20:14:17.995098 2026] [:error] [pid 13606:tid 13620] [client 20.205.40.94:7894] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/witmm.php"] [unique_id "aVpZmeYGV0Z2JafR7r3pvgAAAMo"]
[Sun Jan 04 20:14:18.442230 2026] [:error] [pid 13606:tid 13624] [client 20.205.40.94:7851] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/witmm.php"] [unique_id "aVpZmuYGV0Z2JafR7r3pvwAAAM4"]
[Sun Jan 04 20:14:18.833368 2026] [:error] [pid 5727:tid 5768] [client 20.205.40.94:7983] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rxzx.php"] [unique_id "aVpZmuw4wd_I9FHn6_-zlgAAAwk"]
[Sun Jan 04 20:14:19.314359 2026] [:error] [pid 13665:tid 13723] [client 20.205.40.94:7777] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rxzx.php"] [unique_id "aVpZmytV68J6JMFbIQB_3gAAA5c"]
[Sun Jan 04 20:14:19.737105 2026] [:error] [pid 58433:tid 58469] [client 20.205.40.94:7767] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rxzx.php"] [unique_id "aVpZm05m7bkw35zhUNbrWAAAAQU"]
[Sun Jan 04 20:14:20.016272 2026] [:error] [pid 13606:tid 13611] [client 20.205.40.94:7974] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rxzx.php"] [unique_id "aVpZnOYGV0Z2JafR7r3pxgAAAME"]
[Sun Jan 04 20:14:20.305213 2026] [:error] [pid 11931:tid 11957] [client 20.205.40.94:7896] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ocxla.php"] [unique_id "aVpZnIEqfZyxESsOcB13JQAAAdc"]
[Sun Jan 04 20:14:20.650153 2026] [:error] [pid 13665:tid 13708] [client 20.205.40.94:7973] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ocxla.php"] [unique_id "aVpZnCtV68J6JMFbIQB_4QAAA4g"]
[Sun Jan 04 20:14:21.130086 2026] [:error] [pid 1297:tid 1317] [client 20.205.40.94:8032] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ocxla.php"] [unique_id "aVpZnRf98x0RBG23PjfY4AAAABI"]
[Sun Jan 04 20:14:21.569149 2026] [:error] [pid 13664:tid 13677] [client 20.205.40.94:7955] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ocxla.php"] [unique_id "aVpZnU31yRVtZRejOhY0bwAAAkQ"]
[Sun Jan 04 20:14:21.860314 2026] [:error] [pid 13576:tid 13579] [client 20.205.40.94:7918] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "aVpZndO7CLv7nZyxcqAaGQAAAEE"]
[Sun Jan 04 20:14:22.230771 2026] [:error] [pid 13607:tid 13656] [client 20.205.40.94:7964] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "aVpZnsgtHIw0wt4bHzlGYgAAAZM"]
[Sun Jan 04 20:14:22.680061 2026] [:error] [pid 13606:tid 13627] [client 20.205.40.94:7819] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "aVpZnuYGV0Z2JafR7r3pygAAANE"]
[Sun Jan 04 20:14:23.000407 2026] [:error] [pid 13576:tid 13578] [client 20.205.40.94:8056] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "aVpZntO7CLv7nZyxcqAaHwAAAEA"]
[Sun Jan 04 20:14:23.454055 2026] [:error] [pid 13576:tid 13596] [client 20.205.40.94:7782] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aVpZn9O7CLv7nZyxcqAaIwAAAFI"]
[Sun Jan 04 20:14:24.168186 2026] [:error] [pid 58433:tid 58464] [client 20.205.40.94:7987] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aVpZoE5m7bkw35zhUNbrWwAAAQA"]
[Sun Jan 04 20:14:24.509383 2026] [:error] [pid 13576:tid 13598] [client 20.205.40.94:7769] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aVpZoNO7CLv7nZyxcqAaKAAAAFQ"]
[Sun Jan 04 20:14:24.858990 2026] [:error] [pid 13576:tid 13585] [client 20.205.40.94:8081] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aVpZoNO7CLv7nZyxcqAaKQAAAEc"]
[Sun Jan 04 20:14:25.106320 2026] [:error] [pid 13576:tid 13600] [client 20.205.40.94:8180] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/resp.php"] [unique_id "aVpZodO7CLv7nZyxcqAaKwAAAFY"]
[Sun Jan 04 20:14:25.455603 2026] [:error] [pid 13576:tid 13581] [client 20.205.40.94:8169] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/resp.php"] [unique_id "aVpZodO7CLv7nZyxcqAaLgAAAEM"]
[Sun Jan 04 20:14:25.823971 2026] [:error] [pid 13576:tid 13584] [client 20.205.40.94:8165] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/resp.php"] [unique_id "aVpZodO7CLv7nZyxcqAaMAAAAEY"]
[Sun Jan 04 20:14:26.101052 2026] [:error] [pid 13664:tid 13680] [client 20.205.40.94:7846] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/resp.php"] [unique_id "aVpZok31yRVtZRejOhY0dgAAAkc"]
[Sun Jan 04 20:14:26.402453 2026] [:error] [pid 13576:tid 13599] [client 20.205.40.94:7793] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.kb.php"] [unique_id "aVpZotO7CLv7nZyxcqAaNAAAAFU"]
[Sun Jan 04 20:14:26.939216 2026] [:error] [pid 11931:tid 11954] [client 20.205.40.94:7959] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.kb.php"] [unique_id "aVpZooEqfZyxESsOcB13KwAAAdQ"]
[Sun Jan 04 20:14:27.218599 2026] [:error] [pid 13665:tid 13715] [client 20.205.40.94:7905] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.kb.php"] [unique_id "aVpZoytV68J6JMFbIQB_4gAAA48"]
[Sun Jan 04 20:14:27.572025 2026] [:error] [pid 13665:tid 13704] [client 20.205.40.94:7863] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.kb.php"] [unique_id "aVpZoytV68J6JMFbIQB_5AAAA4Q"]
[Sun Jan 04 20:14:27.864570 2026] [:error] [pid 13607:tid 13660] [client 20.205.40.94:7681] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gec.php"] [unique_id "aVpZo8gtHIw0wt4bHzlGZAAAAZc"]
[Sun Jan 04 20:14:28.175989 2026] [:error] [pid 13664:tid 13682] [client 20.205.40.94:7870] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gec.php"] [unique_id "aVpZpE31yRVtZRejOhY0ewAAAkk"]
[Sun Jan 04 20:14:28.454544 2026] [:error] [pid 13664:tid 13676] [client 20.205.40.94:7745] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gec.php"] [unique_id "aVpZpE31yRVtZRejOhY0fAAAAkM"]
[Sun Jan 04 20:14:28.719251 2026] [:error] [pid 13606:tid 13634] [client 20.205.40.94:8136] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gec.php"] [unique_id "aVpZpOYGV0Z2JafR7r3pzQAAANg"]
[Sun Jan 04 20:14:29.028752 2026] [:error] [pid 13664:tid 13686] [client 20.205.40.94:7995] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wqqs.php"] [unique_id "aVpZpU31yRVtZRejOhY0fgAAAk0"]
[Sun Jan 04 20:14:29.428179 2026] [:error] [pid 58433:tid 58486] [client 20.205.40.94:7788] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wqqs.php"] [unique_id "aVpZpU5m7bkw35zhUNbrYAAAARY"]
[Sun Jan 04 20:14:29.805919 2026] [:error] [pid 58433:tid 58484] [client 20.205.40.94:7747] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wqqs.php"] [unique_id "aVpZpU5m7bkw35zhUNbrYgAAARQ"]
[Sun Jan 04 20:14:30.097118 2026] [:error] [pid 5727:tid 5782] [client 20.205.40.94:7888] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wqqs.php"] [unique_id "aVpZpuw4wd_I9FHn6_-zngAAAxc"]
[Sun Jan 04 20:14:30.444564 2026] [:error] [pid 11931:tid 11937] [client 20.205.40.94:8171] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwq13.php"] [unique_id "aVpZpoEqfZyxESsOcB13LAAAAcM"]
[Sun Jan 04 20:14:30.832631 2026] [:error] [pid 13665:tid 13707] [client 20.205.40.94:8140] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwq13.php"] [unique_id "aVpZpitV68J6JMFbIQB_5wAAA4c"]
[Sun Jan 04 20:14:31.191200 2026] [:error] [pid 13664:tid 13678] [client 20.205.40.94:7981] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwq13.php"] [unique_id "aVpZp031yRVtZRejOhY0fwAAAkU"]
[Sun Jan 04 20:14:31.489544 2026] [:error] [pid 58433:tid 58483] [client 20.205.40.94:7820] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwq13.php"] [unique_id "aVpZp05m7bkw35zhUNbrZgAAARM"]
[Sun Jan 04 20:14:31.828658 2026] [:error] [pid 5010:tid 5046] [client 20.205.40.94:7915] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rtx.php"] [unique_id "aVpZp7V9sNJtnPnkkz-a7AAAAoU"]
[Sun Jan 04 20:14:32.203652 2026] [:error] [pid 13607:tid 13637] [client 20.205.40.94:8070] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rtx.php"] [unique_id "aVpZqMgtHIw0wt4bHzlGawAAAYA"]
[Sun Jan 04 20:14:32.631125 2026] [:error] [pid 5010:tid 5049] [client 20.205.40.94:7852] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rtx.php"] [unique_id "aVpZqLV9sNJtnPnkkz-a7gAAAog"]
[Sun Jan 04 20:14:32.953338 2026] [:error] [pid 5010:tid 5057] [client 20.205.40.94:8131] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rtx.php"] [unique_id "aVpZqLV9sNJtnPnkkz-a7wAAApA"]
[Sun Jan 04 20:14:33.336149 2026] [:error] [pid 58433:tid 58466] [client 20.205.40.94:7690] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1index.php"] [unique_id "aVpZqU5m7bkw35zhUNbraAAAAQI"]
[Sun Jan 04 20:14:33.611633 2026] [:error] [pid 58433:tid 58477] [client 20.205.40.94:8191] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1index.php"] [unique_id "aVpZqU5m7bkw35zhUNbraQAAAQ0"]
[Sun Jan 04 20:14:34.011370 2026] [:error] [pid 13607:tid 13650] [client 20.205.40.94:8189] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1index.php"] [unique_id "aVpZqsgtHIw0wt4bHzlGbQAAAY0"]
[Sun Jan 04 20:14:34.347517 2026] [:error] [pid 58433:tid 58488] [client 20.205.40.94:7725] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1index.php"] [unique_id "aVpZqk5m7bkw35zhUNbrcAAAARg"]
[Sun Jan 04 20:14:34.710296 2026] [:error] [pid 58433:tid 58470] [client 20.205.40.94:7927] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs6.php"] [unique_id "aVpZqk5m7bkw35zhUNbrdAAAAQY"]
[Sun Jan 04 20:14:35.072993 2026] [:error] [pid 58433:tid 58474] [client 20.205.40.94:7933] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs6.php"] [unique_id "aVpZq05m7bkw35zhUNbreAAAAQo"]
[Sun Jan 04 20:14:35.709378 2026] [:error] [pid 5727:tid 5759] [client 20.205.40.94:8179] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs6.php"] [unique_id "aVpZq-w4wd_I9FHn6_-zqQAAAwA"]
[Sun Jan 04 20:14:36.038529 2026] [:error] [pid 5727:tid 5762] [client 20.205.40.94:7794] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs6.php"] [unique_id "aVpZrOw4wd_I9FHn6_-zqwAAAwM"]
[Sun Jan 04 20:14:36.387625 2026] [:error] [pid 58433:tid 58473] [client 20.205.40.94:8148] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byp.php"] [unique_id "aVpZrE5m7bkw35zhUNbrjAAAAQk"]
[Sun Jan 04 20:14:36.746393 2026] [:error] [pid 13607:tid 13650] [client 20.205.40.94:7838] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byp.php"] [unique_id "aVpZrMgtHIw0wt4bHzlGegAAAY0"]
[Sun Jan 04 20:14:37.285831 2026] [:error] [pid 13607:tid 13642] [client 20.205.40.94:7941] [client 20.205.40.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byp.php"] [unique_id "aVpZrcgtHIw0wt4bHzlGgQAAAYU"]
[Sun Jan 04 20:51:02.020426 2026] [:error] [pid 21753:tid 21770] [client 20.205.97.96:34930] [client 20.205.97.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVpiNl4xwAtqKablc078ugAAAk4"]
[Sun Jan 04 22:20:30.735495 2026] [:error] [pid 50229:tid 50250] [client 136.118.153.225:57024] [client 136.118.153.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.153.225, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVp3LqhKBHGV8WZnitt2vAAAANI"]
[Sun Jan 04 22:20:36.107932 2026] [:error] [pid 50229:tid 50234] [client 136.118.153.225:57024] [client 136.118.153.225] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVp3NKhKBHGV8WZnitt2xQAAAMI"]
[Sun Jan 04 22:20:38.390644 2026] [:error] [pid 50229:tid 50256] [client 136.118.153.225:57024] [client 136.118.153.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.153.225, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVp3NqhKBHGV8WZnitt2yQAAANg"]
[Sun Jan 04 23:38:14.640347 2026] [:error] [pid 45949:tid 45972] [client 104.215.4.80:49382] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnn_.php"] [unique_id "aVqJZqWUhIYCdxgkhpBZhwAAAhI"]
[Sun Jan 04 23:38:15.744491 2026] [:error] [pid 45863:tid 45882] [client 104.215.4.80:49401] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnn_.php"] [unique_id "aVqJZ1Gr1mgeue1bWvTiVQAAABE"]
[Sun Jan 04 23:38:16.209939 2026] [:error] [pid 50288:tid 50365] [client 104.215.4.80:49364] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnn_.php"] [unique_id "aVqJaK_n0RHxRx0wErHdhQAAA9U"]
[Sun Jan 04 23:38:16.753805 2026] [:error] [pid 42666:tid 42701] [client 104.215.4.80:39400] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnn_.php"] [unique_id "aVqJaPc221c7vwWrOjceIQAAAwQ"]
[Sun Jan 04 23:38:17.250966 2026] [:error] [pid 42666:tid 42712] [client 104.215.4.80:35582] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aVqJafc221c7vwWrOjceIgAAAw8"]
[Sun Jan 04 23:38:17.606091 2026] [:error] [pid 50286:tid 50312] [client 104.215.4.80:47725] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aVqJaYsZ42BFbcA1SgEQcgAAAlY"]
[Sun Jan 04 23:38:17.877584 2026] [:error] [pid 48633:tid 48649] [client 104.215.4.80:47816] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aVqJaXpmEoQIuLH2aWhUPwAAAE4"]
[Sun Jan 04 23:38:18.161436 2026] [:error] [pid 50288:tid 50361] [client 104.215.4.80:34586] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aVqJaq_n0RHxRx0wErHdiwAAA9E"]
[Sun Jan 04 23:38:18.776475 2026] [:error] [pid 50288:tid 50357] [client 104.215.4.80:39403] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file66.php"] [unique_id "aVqJaq_n0RHxRx0wErHdjAAAA80"]
[Sun Jan 04 23:38:19.068009 2026] [:error] [pid 50286:tid 50291] [client 104.215.4.80:49348] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file66.php"] [unique_id "aVqJa4sZ42BFbcA1SgEQcwAAAkE"]
[Sun Jan 04 23:38:19.398271 2026] [:error] [pid 50288:tid 50358] [client 104.215.4.80:35528] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file66.php"] [unique_id "aVqJa6_n0RHxRx0wErHdjQAAA84"]
[Sun Jan 04 23:38:19.964942 2026] [:error] [pid 50229:tid 50244] [client 104.215.4.80:39384] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file66.php"] [unique_id "aVqJa6hKBHGV8WZnituDYAAAAMw"]
[Sun Jan 04 23:38:20.595264 2026] [:error] [pid 50288:tid 50355] [client 104.215.4.80:49358] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kure.php"] [unique_id "aVqJbK_n0RHxRx0wErHdkAAAA8s"]
[Sun Jan 04 23:38:21.233224 2026] [:error] [pid 50288:tid 50365] [client 104.215.4.80:37926] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kure.php"] [unique_id "aVqJba_n0RHxRx0wErHdkQAAA9U"]
[Sun Jan 04 23:38:21.575471 2026] [:error] [pid 45863:tid 45887] [client 104.215.4.80:47863] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kure.php"] [unique_id "aVqJbVGr1mgeue1bWvTiWgAAABY"]
[Sun Jan 04 23:38:22.442287 2026] [:error] [pid 48667:tid 48705] [client 104.215.4.80:49398] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kure.php"] [unique_id "aVqJbnO6aihVIlrNAPgDNQAAAQg"]
[Sun Jan 04 23:38:23.055897 2026] [:error] [pid 48633:tid 48640] [client 104.215.4.80:37891] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gaje.php"] [unique_id "aVqJb3pmEoQIuLH2aWhUQgAAAEU"]
[Sun Jan 04 23:38:23.448473 2026] [:error] [pid 50229:tid 50238] [client 104.215.4.80:49407] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gaje.php"] [unique_id "aVqJb6hKBHGV8WZnituDZAAAAMY"]
[Sun Jan 04 23:38:23.817693 2026] [:error] [pid 50229:tid 50245] [client 104.215.4.80:49392] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gaje.php"] [unique_id "aVqJb6hKBHGV8WZnituDZgAAAM0"]
[Sun Jan 04 23:38:24.140796 2026] [:error] [pid 45863:tid 45867] [client 104.215.4.80:39388] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gaje.php"] [unique_id "aVqJcFGr1mgeue1bWvTiXQAAAAI"]
[Sun Jan 04 23:38:24.426278 2026] [:error] [pid 50229:tid 50251] [client 104.215.4.80:47866] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "aVqJcKhKBHGV8WZnituDaAAAANM"]
[Sun Jan 04 23:38:24.826256 2026] [:error] [pid 45949:tid 45974] [client 104.215.4.80:35565] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "aVqJcKWUhIYCdxgkhpBZiQAAAhQ"]
[Sun Jan 04 23:38:25.407137 2026] [:error] [pid 42666:tid 42715] [client 104.215.4.80:37890] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "aVqJcfc221c7vwWrOjceJgAAAxI"]
[Sun Jan 04 23:38:26.092464 2026] [:error] [pid 48633:tid 48656] [client 104.215.4.80:34586] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "aVqJcnpmEoQIuLH2aWhURAAAAFU"]
[Sun Jan 04 23:38:26.513834 2026] [:error] [pid 45949:tid 45955] [client 104.215.4.80:6528] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fgd.php"] [unique_id "aVqJcqWUhIYCdxgkhpBZjAAAAgE"]
[Sun Jan 04 23:38:26.909911 2026] [:error] [pid 50229:tid 50241] [client 104.215.4.80:39405] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fgd.php"] [unique_id "aVqJcqhKBHGV8WZnituDagAAAMk"]
[Sun Jan 04 23:38:27.769961 2026] [:error] [pid 45949:tid 45956] [client 104.215.4.80:6554] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fgd.php"] [unique_id "aVqJc6WUhIYCdxgkhpBZjgAAAgI"]
[Sun Jan 04 23:38:28.083670 2026] [:error] [pid 45949:tid 45959] [client 104.215.4.80:37906] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fgd.php"] [unique_id "aVqJdKWUhIYCdxgkhpBZkAAAAgU"]
[Sun Jan 04 23:38:28.396879 2026] [:error] [pid 48633:tid 48653] [client 104.215.4.80:49360] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/msy.php"] [unique_id "aVqJdHpmEoQIuLH2aWhURQAAAFI"]
[Sun Jan 04 23:38:28.677079 2026] [:error] [pid 42666:tid 42710] [client 104.215.4.80:47736] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/msy.php"] [unique_id "aVqJdPc221c7vwWrOjceJwAAAw0"]
[Sun Jan 04 23:38:29.026257 2026] [:error] [pid 50229:tid 50252] [client 104.215.4.80:6558] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/msy.php"] [unique_id "aVqJdahKBHGV8WZnituDawAAANQ"]
[Sun Jan 04 23:38:29.305480 2026] [:error] [pid 48727:tid 48773] [client 104.215.4.80:6575] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/msy.php"] [unique_id "aVqJdfgJtUs-E_QT0ibmigAAA1A"]
[Sun Jan 04 23:38:29.938678 2026] [:error] [pid 45863:tid 45879] [client 104.215.4.80:35520] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alog.php"] [unique_id "aVqJdVGr1mgeue1bWvTiXgAAAA4"]
[Sun Jan 04 23:38:30.288332 2026] [:error] [pid 48667:tid 48720] [client 104.215.4.80:47817] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alog.php"] [unique_id "aVqJdnO6aihVIlrNAPgDOAAAARc"]
[Sun Jan 04 23:38:30.811542 2026] [:error] [pid 48633:tid 48658] [client 104.215.4.80:6533] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alog.php"] [unique_id "aVqJdnpmEoQIuLH2aWhURgAAAFc"]
[Sun Jan 04 23:38:31.321423 2026] [:error] [pid 45949:tid 45966] [client 104.215.4.80:47734] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alog.php"] [unique_id "aVqJd6WUhIYCdxgkhpBZkwAAAgw"]
[Sun Jan 04 23:38:31.610989 2026] [:error] [pid 45949:tid 45964] [client 104.215.4.80:47716] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7T6.php"] [unique_id "aVqJd6WUhIYCdxgkhpBZlAAAAgo"]
[Sun Jan 04 23:38:31.939339 2026] [:error] [pid 48633:tid 48635] [client 104.215.4.80:35572] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7T6.php"] [unique_id "aVqJd3pmEoQIuLH2aWhURwAAAEA"]
[Sun Jan 04 23:38:32.409535 2026] [:error] [pid 42666:tid 42713] [client 104.215.4.80:47728] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7T6.php"] [unique_id "aVqJePc221c7vwWrOjceKgAAAxA"]
[Sun Jan 04 23:38:32.777016 2026] [:error] [pid 50229:tid 50246] [client 104.215.4.80:47702] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7T6.php"] [unique_id "aVqJeKhKBHGV8WZnituDcAAAAM4"]
[Sun Jan 04 23:38:33.132448 2026] [:error] [pid 48633:tid 48643] [client 104.215.4.80:49388] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aVqJeXpmEoQIuLH2aWhUSgAAAEg"]
[Sun Jan 04 23:38:33.666620 2026] [:error] [pid 48727:tid 48762] [client 104.215.4.80:39387] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aVqJefgJtUs-E_QT0ibmiwAAA0U"]
[Sun Jan 04 23:38:33.989522 2026] [:error] [pid 50286:tid 50307] [client 104.215.4.80:37914] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aVqJeYsZ42BFbcA1SgEQdgAAAlE"]
[Sun Jan 04 23:38:34.315616 2026] [:error] [pid 50286:tid 50305] [client 104.215.4.80:39416] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aVqJeosZ42BFbcA1SgEQdwAAAk8"]
[Sun Jan 04 23:38:34.742930 2026] [:error] [pid 42666:tid 42706] [client 104.215.4.80:37908] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Rk41.php"] [unique_id "aVqJevc221c7vwWrOjceKwAAAwk"]
[Sun Jan 04 23:38:35.062978 2026] [:error] [pid 48667:tid 48717] [client 104.215.4.80:6566] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Rk41.php"] [unique_id "aVqJe3O6aihVIlrNAPgDOQAAARQ"]
[Sun Jan 04 23:38:35.451423 2026] [:error] [pid 45863:tid 45866] [client 104.215.4.80:6578] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Rk41.php"] [unique_id "aVqJe1Gr1mgeue1bWvTiYQAAAAE"]
[Sun Jan 04 23:38:35.783144 2026] [:error] [pid 45949:tid 45971] [client 104.215.4.80:47861] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Rk41.php"] [unique_id "aVqJe6WUhIYCdxgkhpBZlgAAAhE"]
[Sun Jan 04 23:38:36.061226 2026] [:error] [pid 50198:tid 50222] [client 104.215.4.80:34580] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ztv.php"] [unique_id "aVqJfGdhZ-F4hMTchPgZbQAAAJY"]
[Sun Jan 04 23:38:36.510710 2026] [:error] [pid 50198:tid 50200] [client 104.215.4.80:35546] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ztv.php"] [unique_id "aVqJfGdhZ-F4hMTchPgZbgAAAIA"]
[Sun Jan 04 23:38:36.936391 2026] [:error] [pid 45863:tid 45888] [client 104.215.4.80:35559] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ztv.php"] [unique_id "aVqJfFGr1mgeue1bWvTiYwAAABc"]
[Sun Jan 04 23:38:37.230374 2026] [:error] [pid 48667:tid 48712] [client 104.215.4.80:47870] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ztv.php"] [unique_id "aVqJfXO6aihVIlrNAPgDOgAAAQ8"]
[Sun Jan 04 23:38:37.628656 2026] [:error] [pid 48667:tid 48699] [client 104.215.4.80:47730] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sef.php"] [unique_id "aVqJfXO6aihVIlrNAPgDOwAAAQI"]
[Sun Jan 04 23:38:37.911950 2026] [:error] [pid 42666:tid 42704] [client 104.215.4.80:35553] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sef.php"] [unique_id "aVqJffc221c7vwWrOjceLwAAAwc"]
[Sun Jan 04 23:38:38.335606 2026] [:error] [pid 42666:tid 42707] [client 104.215.4.80:6533] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sef.php"] [unique_id "aVqJfvc221c7vwWrOjceMQAAAwo"]
[Sun Jan 04 23:38:38.708393 2026] [:error] [pid 45949:tid 45965] [client 104.215.4.80:47720] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sef.php"] [unique_id "aVqJfqWUhIYCdxgkhpBZmAAAAgs"]
[Sun Jan 04 23:38:39.034466 2026] [:error] [pid 45949:tid 45955] [client 104.215.4.80:47742] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aVqJf6WUhIYCdxgkhpBZmQAAAgE"]
[Sun Jan 04 23:38:39.512922 2026] [:error] [pid 45863:tid 45882] [client 104.215.4.80:47697] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aVqJf1Gr1mgeue1bWvTiZAAAABE"]
[Sun Jan 04 23:38:39.841896 2026] [:error] [pid 45949:tid 45957] [client 104.215.4.80:47703] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aVqJf6WUhIYCdxgkhpBZmgAAAgM"]
[Sun Jan 04 23:38:40.220510 2026] [:error] [pid 45949:tid 45967] [client 104.215.4.80:47723] [client 104.215.4.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aVqJgKWUhIYCdxgkhpBZmwAAAg0"]
[Mon Jan 05 17:53:23.340377 2026] [:error] [pid 5536:tid 5612] [client 130.33.50.68:23019] [client 130.33.50.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws35.php"] [unique_id "aVuKEwRtMZNG6xI8yDy7BwAAAI8"]
[Mon Jan 05 17:53:23.899292 2026] [:error] [pid 5632:tid 5660] [client 130.33.50.68:22921] [client 130.33.50.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws35.php"] [unique_id "aVuKE4N3ZWvlOh-nbt-iCwAAANA"]
[Mon Jan 05 17:53:24.350759 2026] [:error] [pid 54081:tid 54101] [client 130.33.50.68:22919] [client 130.33.50.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws35.php"] [unique_id "aVuKFFL4jLgtF-b9w4dhewAAAVE"]
[Mon Jan 05 17:53:24.973660 2026] [:error] [pid 28407:tid 28426] [client 130.33.50.68:22997] [client 130.33.50.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws35.php"] [unique_id "aVuKFNercd3ptydUzM0h4AAAAY8"]
[Mon Jan 05 21:06:39.718420 2026] [:error] [pid 5536:tid 5601] [client 83.229.107.129:37977] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVu3XwRtMZNG6xI8yDz6mgAAAIQ"]
[Mon Jan 05 21:06:39.749510 2026] [:error] [pid 5536:tid 5604] [client 83.229.107.129:43861] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVu3XwRtMZNG6xI8yDz6mwAAAIc"]
[Mon Jan 05 21:06:39.753725 2026] [:error] [pid 5536:tid 5605] [client 83.229.107.129:41285] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVu3XwRtMZNG6xI8yDz6nAAAAIg"]
[Mon Jan 05 21:06:40.223206 2026] [:error] [pid 5536:tid 5613] [client 83.229.107.129:41917] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVu3YARtMZNG6xI8yDz6nwAAAJA"]
[Mon Jan 05 21:07:56.873448 2026] [:error] [pid 5534:tid 5545] [client 83.229.107.129:32861] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aVu3rJNs9XmbR6unB0zfwwAAAAI"]
[Mon Jan 05 21:39:17.211006 2026] [:error] [pid 5536:tid 5600] [client 35.189.242.99:52927] [client 35.189.242.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.189.242.99, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVu_BQRtMZNG6xI8yDwIngAAAIM"]
[Mon Jan 05 21:39:22.872147 2026] [:error] [pid 5536:tid 5597] [client 35.189.242.99:52927] [client 35.189.242.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVu_CgRtMZNG6xI8yDwIqgAAAIA"]
[Mon Jan 05 21:39:24.920881 2026] [:error] [pid 5536:tid 5612] [client 35.189.242.99:52927] [client 35.189.242.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.189.242.99, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVu_DARtMZNG6xI8yDwIrAAAAI8"]
[Mon Jan 05 23:39:59.610279 2026] [:error] [pid 5534:tid 5548] [client 20.205.14.136:15952] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cheka.php"] [unique_id "aVvbT5Ns9XmbR6unB0wi4wAAAAU"]
[Mon Jan 05 23:40:00.576991 2026] [:error] [pid 5535:tid 5576] [client 20.205.14.136:15993] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cheka.php"] [unique_id "aVvbUGnkedMjhVX0PTWncAAAAEY"]
[Mon Jan 05 23:40:01.903022 2026] [:error] [pid 54081:tid 54095] [client 20.205.14.136:15887] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cheka.php"] [unique_id "aVvbUVL4jLgtF-b9w4e7YwAAAUs"]
[Mon Jan 05 23:40:02.623372 2026] [:error] [pid 28407:tid 28428] [client 20.205.14.136:15975] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cheka.php"] [unique_id "aVvbUtercd3ptydUzM2KeQAAAZE"]
[Mon Jan 05 23:40:02.740205 2026] [:error] [pid 54081:tid 54105] [client 20.205.14.136:15902] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "aVvbUlL4jLgtF-b9w4e7aAAAAVU"]
[Mon Jan 05 23:40:03.375530 2026] [:error] [pid 5534:tid 5547] [client 20.205.14.136:15997] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "aVvbU5Ns9XmbR6unB0wi7AAAAAQ"]
[Mon Jan 05 23:40:04.231276 2026] [:error] [pid 6680:tid 6697] [client 20.205.14.136:15994] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "aVvbVKE58uNoazzTmx0zdwAAAQ8"]
[Mon Jan 05 23:40:04.683622 2026] [:error] [pid 5535:tid 5584] [client 20.205.14.136:15875] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "aVvbVGnkedMjhVX0PTWnegAAAE4"]
[Mon Jan 05 23:40:05.396705 2026] [:error] [pid 5534:tid 5567] [client 20.205.14.136:15890] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aVvbVZNs9XmbR6unB0wi8QAAABg"]
[Mon Jan 05 23:40:06.361076 2026] [:error] [pid 54081:tid 54095] [client 20.205.14.136:15967] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aVvbVlL4jLgtF-b9w4e7cAAAAUs"]
[Mon Jan 05 23:40:07.320509 2026] [:error] [pid 28407:tid 28416] [client 20.205.14.136:15896] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aVvbV9ercd3ptydUzM2KgAAAAYY"]
[Mon Jan 05 23:40:07.928115 2026] [:error] [pid 54081:tid 54084] [client 20.205.14.136:15941] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aVvbV1L4jLgtF-b9w4e7dAAAAUA"]
[Mon Jan 05 23:40:08.329005 2026] [:error] [pid 54081:tid 54094] [client 20.205.14.136:15960] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsz.php"] [unique_id "aVvbWFL4jLgtF-b9w4e7ewAAAUo"]
[Mon Jan 05 23:40:08.793097 2026] [:error] [pid 5632:tid 5657] [client 20.205.14.136:15988] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsz.php"] [unique_id "aVvbWIN3ZWvlOh-nbt__LwAAAM0"]
[Mon Jan 05 23:40:09.272871 2026] [:error] [pid 5536:tid 5620] [client 20.205.14.136:15992] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsz.php"] [unique_id "aVvbWQRtMZNG6xI8yDwsCwAAAJc"]
[Mon Jan 05 23:40:10.017093 2026] [:error] [pid 28407:tid 28425] [client 20.205.14.136:15884] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsz.php"] [unique_id "aVvbWtercd3ptydUzM2KigAAAY4"]
[Mon Jan 05 23:40:10.383036 2026] [:error] [pid 54081:tid 54091] [client 20.205.14.136:15939] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kaza.php"] [unique_id "aVvbWlL4jLgtF-b9w4e7hgAAAUc"]
[Mon Jan 05 23:40:10.679411 2026] [:error] [pid 5632:tid 5665] [client 20.205.14.136:15980] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kaza.php"] [unique_id "aVvbWoN3ZWvlOh-nbt__NQAAANU"]
[Mon Jan 05 23:40:11.253925 2026] [:error] [pid 5536:tid 5611] [client 20.205.14.136:15938] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kaza.php"] [unique_id "aVvbWwRtMZNG6xI8yDwsEAAAAI4"]
[Mon Jan 05 23:40:11.643657 2026] [:error] [pid 5632:tid 5658] [client 20.205.14.136:11221] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kaza.php"] [unique_id "aVvbW4N3ZWvlOh-nbt__OAAAAM4"]
[Mon Jan 05 23:40:12.034208 2026] [:error] [pid 6680:tid 6702] [client 20.205.14.136:15993] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "aVvbXKE58uNoazzTmx0zggAAARQ"]
[Mon Jan 05 23:40:12.418154 2026] [:error] [pid 54081:tid 54093] [client 20.205.14.136:15878] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "aVvbXFL4jLgtF-b9w4e7jQAAAUk"]
[Mon Jan 05 23:40:12.857985 2026] [:error] [pid 6680:tid 6693] [client 20.205.14.136:15900] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "aVvbXKE58uNoazzTmx0zhAAAAQs"]
[Mon Jan 05 23:40:13.248889 2026] [:error] [pid 5536:tid 5600] [client 20.205.14.136:15904] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "aVvbXQRtMZNG6xI8yDwsEQAAAIM"]
[Mon Jan 05 23:40:13.688052 2026] [:error] [pid 5536:tid 5618] [client 20.205.14.136:15916] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bby.php"] [unique_id "aVvbXQRtMZNG6xI8yDwsEgAAAJU"]
[Mon Jan 05 23:40:14.720092 2026] [:error] [pid 5534:tid 5544] [client 20.205.14.136:15944] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bby.php"] [unique_id "aVvbXpNs9XmbR6unB0wi9wAAAAE"]
[Mon Jan 05 23:40:15.159632 2026] [:error] [pid 5632:tid 5659] [client 20.205.14.136:15894] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bby.php"] [unique_id "aVvbX4N3ZWvlOh-nbt__RAAAAM8"]
[Mon Jan 05 23:40:16.232244 2026] [:error] [pid 5536:tid 5617] [client 20.205.14.136:15951] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bby.php"] [unique_id "aVvbYARtMZNG6xI8yDwsGQAAAJQ"]
[Mon Jan 05 23:40:16.857489 2026] [:error] [pid 5536:tid 5616] [client 20.205.14.136:15943] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/get.php"] [unique_id "aVvbYARtMZNG6xI8yDwsGgAAAJM"]
[Mon Jan 05 23:40:17.481756 2026] [:error] [pid 6680:tid 6694] [client 20.205.14.136:15968] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/get.php"] [unique_id "aVvbYaE58uNoazzTmx0ziQAAAQw"]
[Mon Jan 05 23:40:18.511742 2026] [:error] [pid 28407:tid 28424] [client 20.205.14.136:15933] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/get.php"] [unique_id "aVvbYtercd3ptydUzM2KmwAAAY0"]
[Mon Jan 05 23:40:19.279589 2026] [:error] [pid 28407:tid 28429] [client 20.205.14.136:15897] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/get.php"] [unique_id "aVvbY9ercd3ptydUzM2KnwAAAZI"]
[Mon Jan 05 23:40:19.600952 2026] [:error] [pid 28407:tid 28430] [client 20.205.14.136:15970] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtride.php"] [unique_id "aVvbY9ercd3ptydUzM2KoQAAAZM"]
[Mon Jan 05 23:40:19.903665 2026] [:error] [pid 5535:tid 5570] [client 20.205.14.136:15966] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtride.php"] [unique_id "aVvbY2nkedMjhVX0PTWnigAAAEA"]
[Mon Jan 05 23:40:20.334041 2026] [:error] [pid 5632:tid 5665] [client 20.205.14.136:15920] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtride.php"] [unique_id "aVvbZIN3ZWvlOh-nbt__WQAAANU"]
[Mon Jan 05 23:40:21.371889 2026] [:error] [pid 5536:tid 5602] [client 20.205.14.136:15986] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtride.php"] [unique_id "aVvbZQRtMZNG6xI8yDwsIwAAAIU"]
[Mon Jan 05 23:40:22.779905 2026] [:error] [pid 6680:tid 6697] [client 20.205.14.136:15991] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws29.php"] [unique_id "aVvbZqE58uNoazzTmx0zkAAAAQ8"]
[Mon Jan 05 23:40:23.486438 2026] [:error] [pid 28407:tid 28426] [client 20.205.14.136:15977] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws29.php"] [unique_id "aVvbZ9ercd3ptydUzM2KpAAAAY8"]
[Mon Jan 05 23:40:24.062978 2026] [:error] [pid 28407:tid 28428] [client 20.205.14.136:15886] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws29.php"] [unique_id "aVvbaNercd3ptydUzM2KpgAAAZE"]
[Mon Jan 05 23:40:24.358115 2026] [:error] [pid 5534:tid 5550] [client 20.205.14.136:15982] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws29.php"] [unique_id "aVvbaJNs9XmbR6unB0wi_wAAAAc"]
[Mon Jan 05 23:40:24.762131 2026] [:error] [pid 5536:tid 5599] [client 20.205.14.136:11220] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oo.php"] [unique_id "aVvbaARtMZNG6xI8yDwsKQAAAII"]
[Mon Jan 05 23:40:25.951750 2026] [:error] [pid 6680:tid 6685] [client 20.205.14.136:11241] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oo.php"] [unique_id "aVvbaaE58uNoazzTmx0zlwAAAQM"]
[Mon Jan 05 23:40:27.010032 2026] [:error] [pid 6680:tid 6696] [client 20.205.14.136:15995] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oo.php"] [unique_id "aVvba6E58uNoazzTmx0zmwAAAQ4"]
[Mon Jan 05 23:40:28.382624 2026] [:error] [pid 5534:tid 5543] [client 20.205.14.136:15958] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oo.php"] [unique_id "aVvbbJNs9XmbR6unB0wjCwAAAAA"]
[Mon Jan 05 23:40:28.989388 2026] [:error] [pid 5632:tid 5657] [client 20.205.14.136:15872] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s11.php"] [unique_id "aVvbbIN3ZWvlOh-nbt__YAAAAM0"]
[Mon Jan 05 23:40:29.466541 2026] [:error] [pid 5536:tid 5600] [client 20.205.14.136:11216] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s11.php"] [unique_id "aVvbbQRtMZNG6xI8yDwsNgAAAIM"]
[Mon Jan 05 23:40:29.747669 2026] [:error] [pid 5536:tid 5605] [client 20.205.14.136:15895] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s11.php"] [unique_id "aVvbbQRtMZNG6xI8yDwsNwAAAIg"]
[Mon Jan 05 23:40:30.138510 2026] [:error] [pid 28407:tid 28433] [client 20.205.14.136:15962] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s11.php"] [unique_id "aVvbbtercd3ptydUzM2KrwAAAZY"]
[Mon Jan 05 23:40:30.542337 2026] [:error] [pid 54081:tid 54090] [client 20.205.14.136:15887] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dir.php"] [unique_id "aVvbblL4jLgtF-b9w4e7rwAAAUY"]
[Mon Jan 05 23:40:31.072529 2026] [:error] [pid 5534:tid 5565] [client 20.205.14.136:15882] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dir.php"] [unique_id "aVvbb5Ns9XmbR6unB0wjDwAAABY"]
[Mon Jan 05 23:40:31.466263 2026] [:error] [pid 5632:tid 5644] [client 20.205.14.136:15901] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dir.php"] [unique_id "aVvbb4N3ZWvlOh-nbt__YwAAAMA"]
[Mon Jan 05 23:40:32.039254 2026] [:error] [pid 5534:tid 5559] [client 20.205.14.136:15874] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dir.php"] [unique_id "aVvbcJNs9XmbR6unB0wjEwAAABA"]
[Mon Jan 05 23:40:32.454035 2026] [:error] [pid 5536:tid 5607] [client 20.205.14.136:15881] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aqw.php"] [unique_id "aVvbcARtMZNG6xI8yDwsPwAAAIo"]
[Mon Jan 05 23:40:33.089035 2026] [:error] [pid 6680:tid 6702] [client 20.205.14.136:15927] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aqw.php"] [unique_id "aVvbcaE58uNoazzTmx0zpQAAARQ"]
[Mon Jan 05 23:40:33.446815 2026] [:error] [pid 5534:tid 5551] [client 20.205.14.136:15879] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aqw.php"] [unique_id "aVvbcZNs9XmbR6unB0wjGwAAAAg"]
[Mon Jan 05 23:40:33.905707 2026] [:error] [pid 6680:tid 6701] [client 20.205.14.136:15889] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aqw.php"] [unique_id "aVvbcaE58uNoazzTmx0zqAAAARM"]
[Mon Jan 05 23:40:34.363527 2026] [:error] [pid 5536:tid 5603] [client 20.205.14.136:15893] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ca1.php"] [unique_id "aVvbcgRtMZNG6xI8yDwsQwAAAIY"]
[Mon Jan 05 23:40:34.778516 2026] [:error] [pid 5536:tid 5611] [client 20.205.14.136:15949] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ca1.php"] [unique_id "aVvbcgRtMZNG6xI8yDwsRQAAAI4"]
[Mon Jan 05 23:40:35.204505 2026] [:error] [pid 5536:tid 5619] [client 20.205.14.136:15974] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ca1.php"] [unique_id "aVvbcwRtMZNG6xI8yDwsSAAAAJY"]
[Mon Jan 05 23:40:35.753861 2026] [:error] [pid 28407:tid 28417] [client 20.205.14.136:15952] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ca1.php"] [unique_id "aVvbc9ercd3ptydUzM2KtQAAAYc"]
[Mon Jan 05 23:40:36.152641 2026] [:error] [pid 28407:tid 28432] [client 20.205.14.136:15940] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file51.php"] [unique_id "aVvbdNercd3ptydUzM2KtwAAAZU"]
[Mon Jan 05 23:40:36.531034 2026] [:error] [pid 5534:tid 5565] [client 20.205.14.136:15918] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file51.php"] [unique_id "aVvbdJNs9XmbR6unB0wjIwAAABY"]
[Mon Jan 05 23:40:36.830238 2026] [:error] [pid 5632:tid 5653] [client 20.205.14.136:15935] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file51.php"] [unique_id "aVvbdIN3ZWvlOh-nbt__ZgAAAMk"]
[Mon Jan 05 23:40:37.195617 2026] [:error] [pid 54081:tid 54086] [client 20.205.14.136:11236] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file51.php"] [unique_id "aVvbdVL4jLgtF-b9w4e7twAAAUI"]
[Mon Jan 05 23:40:37.696999 2026] [:error] [pid 5536:tid 5616] [client 20.205.14.136:15950] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abouta.php"] [unique_id "aVvbdQRtMZNG6xI8yDwsUQAAAJM"]
[Mon Jan 05 23:40:38.175510 2026] [:error] [pid 6680:tid 6696] [client 20.205.14.136:15987] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abouta.php"] [unique_id "aVvbdqE58uNoazzTmx0zrAAAAQ4"]
[Mon Jan 05 23:40:38.825264 2026] [:error] [pid 54081:tid 54099] [client 20.205.14.136:11204] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abouta.php"] [unique_id "aVvbdlL4jLgtF-b9w4e7vAAAAU8"]
[Mon Jan 05 23:40:39.411756 2026] [:error] [pid 5632:tid 5662] [client 20.205.14.136:15898] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abouta.php"] [unique_id "aVvbd4N3ZWvlOh-nbt__aQAAANI"]
[Mon Jan 05 23:40:39.932797 2026] [:error] [pid 5632:tid 5658] [client 20.205.14.136:15990] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fclas.php"] [unique_id "aVvbd4N3ZWvlOh-nbt__bAAAAM4"]
[Mon Jan 05 23:40:40.673569 2026] [:error] [pid 5534:tid 5553] [client 20.205.14.136:15999] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fclas.php"] [unique_id "aVvbeJNs9XmbR6unB0wjKAAAAAo"]
[Mon Jan 05 23:40:41.149348 2026] [:error] [pid 6680:tid 6702] [client 20.205.14.136:15877] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fclas.php"] [unique_id "aVvbeaE58uNoazzTmx0ztwAAARQ"]
[Mon Jan 05 23:40:41.806496 2026] [:error] [pid 5632:tid 5660] [client 20.205.14.136:15956] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fclas.php"] [unique_id "aVvbeYN3ZWvlOh-nbt__dAAAANA"]
[Mon Jan 05 23:40:42.514764 2026] [:error] [pid 5632:tid 5653] [client 20.205.14.136:15925] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/File.php"] [unique_id "aVvbeoN3ZWvlOh-nbt__eQAAAMk"]
[Mon Jan 05 23:40:43.193027 2026] [:error] [pid 5536:tid 5618] [client 20.205.14.136:15908] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/File.php"] [unique_id "aVvbewRtMZNG6xI8yDwsWgAAAJU"]
[Mon Jan 05 23:40:43.810118 2026] [:error] [pid 5535:tid 5587] [client 20.205.14.136:15984] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/File.php"] [unique_id "aVvbe2nkedMjhVX0PTWnlwAAAFE"]
[Mon Jan 05 23:40:44.288478 2026] [:error] [pid 5632:tid 5655] [client 20.205.14.136:15888] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/File.php"] [unique_id "aVvbfIN3ZWvlOh-nbt__fQAAAMs"]
[Mon Jan 05 23:40:44.724207 2026] [:error] [pid 5632:tid 5645] [client 20.205.14.136:15953] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/all.php"] [unique_id "aVvbfIN3ZWvlOh-nbt__ggAAAME"]
[Mon Jan 05 23:40:45.079476 2026] [:error] [pid 5632:tid 5648] [client 20.205.14.136:15975] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/all.php"] [unique_id "aVvbfYN3ZWvlOh-nbt__gwAAAMQ"]
[Mon Jan 05 23:40:45.437276 2026] [:error] [pid 6680:tid 6699] [client 20.205.14.136:11146] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/all.php"] [unique_id "aVvbfaE58uNoazzTmx0zwQAAARE"]
[Mon Jan 05 23:40:45.713439 2026] [:error] [pid 6680:tid 6693] [client 20.205.14.136:11262] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/all.php"] [unique_id "aVvbfaE58uNoazzTmx0zxAAAAQs"]
[Mon Jan 05 23:40:46.287057 2026] [:error] [pid 6680:tid 6685] [client 20.205.14.136:11252] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbn.php"] [unique_id "aVvbfqE58uNoazzTmx0zyAAAAQM"]
[Mon Jan 05 23:40:46.595933 2026] [:error] [pid 5535:tid 5590] [client 20.205.14.136:15946] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbn.php"] [unique_id "aVvbfmnkedMjhVX0PTWnnwAAAFQ"]
[Mon Jan 05 23:40:47.136865 2026] [:error] [pid 28407:tid 28426] [client 20.205.14.136:15929] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbn.php"] [unique_id "aVvbf9ercd3ptydUzM2KwQAAAY8"]
[Mon Jan 05 23:40:47.915608 2026] [:error] [pid 6680:tid 6690] [client 20.205.14.136:11256] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbn.php"] [unique_id "aVvbf6E58uNoazzTmx0zzwAAAQg"]
[Mon Jan 05 23:40:48.254832 2026] [:error] [pid 6680:tid 6700] [client 20.205.14.136:15955] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aVvbgKE58uNoazzTmx0z0wAAARI"]
[Mon Jan 05 23:40:48.653178 2026] [:error] [pid 5534:tid 5549] [client 20.205.14.136:11201] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aVvbgJNs9XmbR6unB0wjLQAAAAY"]
[Mon Jan 05 23:40:48.993945 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:15998] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aVvbgJNs9XmbR6unB0wjMQAAAAM"]
[Mon Jan 05 23:40:49.760619 2026] [:error] [pid 54081:tid 54108] [client 20.205.14.136:11228] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aVvbgVL4jLgtF-b9w4e70wAAAVg"]
[Mon Jan 05 23:40:50.503873 2026] [:error] [pid 54081:tid 54091] [client 20.205.14.136:11234] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aVvbglL4jLgtF-b9w4e72AAAAUc"]
[Mon Jan 05 23:40:50.815793 2026] [:error] [pid 5536:tid 5609] [client 20.205.14.136:11138] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aVvbggRtMZNG6xI8yDwsZwAAAIw"]
[Mon Jan 05 23:40:51.948164 2026] [:error] [pid 5534:tid 5552] [client 20.205.14.136:15959] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aVvbg5Ns9XmbR6unB0wjNgAAAAk"]
[Mon Jan 05 23:40:52.245346 2026] [:error] [pid 5536:tid 5614] [client 20.205.14.136:15903] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aVvbhARtMZNG6xI8yDwscAAAAJE"]
[Mon Jan 05 23:40:52.533913 2026] [:error] [pid 5534:tid 5553] [client 20.205.14.136:15973] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xz89.php"] [unique_id "aVvbhJNs9XmbR6unB0wjOQAAAAo"]
[Mon Jan 05 23:40:52.890588 2026] [:error] [pid 5535:tid 5591] [client 20.205.14.136:15961] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xz89.php"] [unique_id "aVvbhGnkedMjhVX0PTWnogAAAFU"]
[Mon Jan 05 23:41:17.372631 2026] [:error] [pid 5535:tid 5573] [client 20.205.14.136:15917] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vbbn.php"] [unique_id "aVvbnWnkedMjhVX0PTWnygAAAEM"]
[Mon Jan 05 23:41:18.394796 2026] [:error] [pid 54081:tid 54107] [client 20.205.14.136:15972] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vbbn.php"] [unique_id "aVvbnlL4jLgtF-b9w4e8HgAAAVc"]
[Mon Jan 05 23:41:18.925378 2026] [:error] [pid 54081:tid 54086] [client 20.205.14.136:15964] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vbbn.php"] [unique_id "aVvbnlL4jLgtF-b9w4e8IAAAAUI"]
[Mon Jan 05 23:41:19.415877 2026] [:error] [pid 54081:tid 54106] [client 20.205.14.136:15981] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vbbn.php"] [unique_id "aVvbn1L4jLgtF-b9w4e8IQAAAVY"]
[Mon Jan 05 23:41:19.799737 2026] [:error] [pid 54081:tid 54102] [client 20.205.14.136:15996] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aVvbn1L4jLgtF-b9w4e8IwAAAVI"]
[Mon Jan 05 23:41:20.227646 2026] [:error] [pid 6680:tid 6701] [client 20.205.14.136:11212] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aVvboKE58uNoazzTmx0z-wAAARM"]
[Mon Jan 05 23:41:20.578738 2026] [:error] [pid 5536:tid 5604] [client 20.205.14.136:11207] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aVvboARtMZNG6xI8yDwsnwAAAIc"]
[Mon Jan 05 23:41:21.008158 2026] [:error] [pid 5536:tid 5598] [client 20.205.14.136:15911] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pn.php"] [unique_id "aVvboQRtMZNG6xI8yDwsoQAAAIE"]
[Mon Jan 05 23:41:21.575926 2026] [:error] [pid 5536:tid 5609] [client 20.205.14.136:15876] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fz.php"] [unique_id "aVvboQRtMZNG6xI8yDwspQAAAIw"]
[Mon Jan 05 23:41:22.022253 2026] [:error] [pid 54081:tid 54101] [client 20.205.14.136:15892] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fz.php"] [unique_id "aVvbolL4jLgtF-b9w4e8LQAAAVE"]
[Mon Jan 05 23:41:22.900085 2026] [:error] [pid 5535:tid 5571] [client 20.205.14.136:15945] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fz.php"] [unique_id "aVvbomnkedMjhVX0PTWn0QAAAEE"]
[Mon Jan 05 23:41:23.641414 2026] [:error] [pid 6680:tid 6691] [client 20.205.14.136:11230] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fz.php"] [unique_id "aVvbo6E58uNoazzTmx00BgAAAQk"]
[Mon Jan 05 23:41:24.124641 2026] [:error] [pid 5632:tid 5666] [client 20.205.14.136:11219] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sang.php"] [unique_id "aVvbpIN3ZWvlOh-nbt__sAAAANY"]
[Mon Jan 05 23:41:24.667725 2026] [:error] [pid 54081:tid 54092] [client 20.205.14.136:11240] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sang.php"] [unique_id "aVvbpFL4jLgtF-b9w4e8MgAAAUg"]
[Mon Jan 05 23:41:25.567317 2026] [:error] [pid 54081:tid 54106] [client 20.205.14.136:11229] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sang.php"] [unique_id "aVvbpVL4jLgtF-b9w4e8NQAAAVY"]
[Mon Jan 05 23:41:25.879513 2026] [:error] [pid 54081:tid 54084] [client 20.205.14.136:15983] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sang.php"] [unique_id "aVvbpVL4jLgtF-b9w4e8NwAAAUA"]
[Mon Jan 05 23:41:26.530517 2026] [:error] [pid 28407:tid 28413] [client 20.205.14.136:11211] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0o0.php"] [unique_id "aVvbptercd3ptydUzM2LEAAAAYM"]
[Mon Jan 05 23:41:27.205508 2026] [:error] [pid 5632:tid 5644] [client 20.205.14.136:11225] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0o0.php"] [unique_id "aVvbp4N3ZWvlOh-nbt__twAAAMA"]
[Mon Jan 05 23:41:27.612717 2026] [:error] [pid 5632:tid 5647] [client 20.205.14.136:15947] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0o0.php"] [unique_id "aVvbp4N3ZWvlOh-nbt__uAAAAMM"]
[Mon Jan 05 23:41:28.730612 2026] [:error] [pid 5632:tid 5651] [client 20.205.14.136:15891] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0o0.php"] [unique_id "aVvbqIN3ZWvlOh-nbt__uQAAAMc"]
[Mon Jan 05 23:41:31.040298 2026] [:error] [pid 54081:tid 54100] [client 20.205.14.136:15915] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aVvbq1L4jLgtF-b9w4e8RAAAAVA"]
[Mon Jan 05 23:41:33.248672 2026] [:error] [pid 5535:tid 5585] [client 20.205.14.136:15923] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aVvbrWnkedMjhVX0PTWn7gAAAE8"]
[Mon Jan 05 23:41:33.788710 2026] [:error] [pid 6680:tid 6705] [client 20.205.14.136:11213] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aVvbraE58uNoazzTmx00HQAAARc"]
[Mon Jan 05 23:41:35.019837 2026] [:error] [pid 5632:tid 5659] [client 20.205.14.136:11164] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxl.php"] [unique_id "aVvbr4N3ZWvlOh-nbt__yAAAAM8"]
[Mon Jan 05 23:41:36.637610 2026] [:error] [pid 54081:tid 54097] [client 20.205.14.136:15910] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aVvbsFL4jLgtF-b9w4e8SwAAAU0"]
[Mon Jan 05 23:41:38.969652 2026] [:error] [pid 6680:tid 6688] [client 20.205.14.136:11247] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aVvbsqE58uNoazzTmx00LQAAAQY"]
[Mon Jan 05 23:41:40.766430 2026] [:error] [pid 6680:tid 6691] [client 20.205.14.136:11203] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aVvbtKE58uNoazzTmx00LwAAAQk"]
[Mon Jan 05 23:41:43.317694 2026] [:error] [pid 5536:tid 5616] [client 20.205.14.136:11215] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aVvbtwRtMZNG6xI8yDwsywAAAJM"]
[Mon Jan 05 23:41:44.445322 2026] [:error] [pid 5632:tid 5655] [client 20.205.14.136:11254] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVvbuIN3ZWvlOh-nbt__2wAAAMs"]
[Mon Jan 05 23:41:45.772499 2026] [:error] [pid 5632:tid 5649] [client 20.205.14.136:15905] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVvbuYN3ZWvlOh-nbt__3wAAAMU"]
[Mon Jan 05 23:41:46.728331 2026] [:error] [pid 54081:tid 54084] [client 20.205.14.136:15930] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVvbulL4jLgtF-b9w4e8XwAAAUA"]
[Mon Jan 05 23:41:48.025073 2026] [:error] [pid 5632:tid 5645] [client 20.205.14.136:11244] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVvbvIN3ZWvlOh-nbt__4gAAAME"]
[Mon Jan 05 23:41:48.724028 2026] [:error] [pid 54081:tid 54107] [client 20.205.14.136:11147] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aVvbvFL4jLgtF-b9w4e8ZgAAAVc"]
[Mon Jan 05 23:41:49.057053 2026] [:error] [pid 5534:tid 5564] [client 20.205.14.136:11210] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aVvbvZNs9XmbR6unB0wjvAAAABU"]
[Mon Jan 05 23:41:50.027785 2026] [:error] [pid 54081:tid 54106] [client 20.205.14.136:11217] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aVvbvlL4jLgtF-b9w4e8aQAAAVY"]
[Mon Jan 05 23:41:50.878870 2026] [:error] [pid 5534:tid 5561] [client 20.205.14.136:11153] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aVvbvpNs9XmbR6unB0wjwgAAABI"]
[Mon Jan 05 23:41:52.161493 2026] [:error] [pid 28407:tid 28433] [client 20.205.14.136:11231] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aVvbwNercd3ptydUzM2LPAAAAZY"]
[Mon Jan 05 23:41:53.392229 2026] [:error] [pid 6680:tid 6685] [client 20.205.14.136:15873] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aVvbwaE58uNoazzTmx00QwAAAQM"]
[Mon Jan 05 23:41:53.897634 2026] [:error] [pid 5534:tid 5563] [client 20.205.14.136:11223] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aVvbwZNs9XmbR6unB0wjyAAAABQ"]
[Mon Jan 05 23:41:54.795641 2026] [:error] [pid 5632:tid 5660] [client 20.205.14.136:15963] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aVvbwoN3ZWvlOh-nbt__5gAAANA"]
[Mon Jan 05 23:41:56.451160 2026] [:error] [pid 5536:tid 5612] [client 20.205.14.136:11222] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVvbxARtMZNG6xI8yDws7wAAAI8"]
[Mon Jan 05 23:41:58.042080 2026] [:error] [pid 5632:tid 5649] [client 20.205.14.136:15914] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVvbxoN3ZWvlOh-nbt__6QAAAMU"]
[Mon Jan 05 23:41:59.572838 2026] [:error] [pid 5534:tid 5556] [client 20.205.14.136:15968] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVvbx5Ns9XmbR6unB0wj0QAAAA0"]
[Mon Jan 05 23:42:00.679675 2026] [:error] [pid 5632:tid 5654] [client 20.205.14.136:15880] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aVvbyIN3ZWvlOh-nbt__7QAAAMo"]
[Mon Jan 05 23:42:02.202630 2026] [:error] [pid 5534:tid 5565] [client 20.205.14.136:15978] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aVvbypNs9XmbR6unB0wj2QAAABY"]
[Mon Jan 05 23:42:03.993843 2026] [:error] [pid 5534:tid 5566] [client 20.205.14.136:15954] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aVvby5Ns9XmbR6unB0wj2wAAABc"]
[Mon Jan 05 23:42:05.315741 2026] [:error] [pid 5535:tid 5594] [client 20.205.14.136:15885] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aVvbzWnkedMjhVX0PTWoGQAAAFg"]
[Mon Jan 05 23:42:06.279523 2026] [:error] [pid 5534:tid 5552] [client 20.205.14.136:11202] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php"] [unique_id "aVvbzpNs9XmbR6unB0wj4gAAAAk"]
[Mon Jan 05 23:42:06.666337 2026] [:error] [pid 5535:tid 5574] [client 20.205.14.136:11141] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aVvbzmnkedMjhVX0PTWoHQAAAEQ"]
[Mon Jan 05 23:42:08.339173 2026] [:error] [pid 5536:tid 5600] [client 20.205.14.136:11151] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aVvb0ARtMZNG6xI8yDws-QAAAIM"]
[Mon Jan 05 23:42:08.823681 2026] [:error] [pid 5536:tid 5609] [client 20.205.14.136:11185] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aVvb0ARtMZNG6xI8yDws-wAAAIw"]
[Mon Jan 05 23:42:09.846468 2026] [:error] [pid 5535:tid 5587] [client 20.205.14.136:15931] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aVvb0WnkedMjhVX0PTWoJAAAAFE"]
[Mon Jan 05 23:42:10.654488 2026] [:error] [pid 5534:tid 5563] [client 20.205.14.136:15906] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aVvb0pNs9XmbR6unB0wj4wAAABQ"]
[Mon Jan 05 23:42:12.343873 2026] [:error] [pid 5536:tid 5597] [client 20.205.14.136:15985] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aVvb1ARtMZNG6xI8yDwtAAAAAIA"]
[Mon Jan 05 23:42:38.657759 2026] [:error] [pid 5535:tid 5571] [client 20.205.14.136:15969] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aVvb7mnkedMjhVX0PTWoYAAAAEE"]
[Mon Jan 05 23:42:39.742248 2026] [:error] [pid 5536:tid 5615] [client 20.205.14.136:11261] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aVvb7wRtMZNG6xI8yDwtFAAAAJI"]
[Mon Jan 05 23:42:40.773784 2026] [:error] [pid 5534:tid 5551] [client 20.205.14.136:15926] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aVvb8JNs9XmbR6unB0wkMwAAAAg"]
[Mon Jan 05 23:42:41.629684 2026] [:error] [pid 28407:tid 28411] [client 20.205.14.136:11154] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aVvb8dercd3ptydUzM2LggAAAYE"]
[Mon Jan 05 23:42:42.072501 2026] [:error] [pid 5534:tid 5549] [client 20.205.14.136:15950] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVvb8pNs9XmbR6unB0wkNQAAAAY"]
[Mon Jan 05 23:42:42.683141 2026] [:error] [pid 5535:tid 5592] [client 20.205.14.136:11145] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVvb8mnkedMjhVX0PTWoYgAAAFY"]
[Mon Jan 05 23:42:43.002438 2026] [:error] [pid 6680:tid 6700] [client 20.205.14.136:11148] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVvb86E58uNoazzTmx00dQAAARI"]
[Mon Jan 05 23:42:44.261634 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:11226] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aVvb9JNs9XmbR6unB0wkOQAAAAM"]
[Mon Jan 05 23:42:45.079769 2026] [:error] [pid 5632:tid 5653] [client 20.205.14.136:11150] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aVvb9YN3ZWvlOh-nbt8AHgAAAMk"]
[Mon Jan 05 23:42:45.784903 2026] [:error] [pid 5536:tid 5608] [client 20.205.14.136:15913] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aVvb9QRtMZNG6xI8yDwtFwAAAIs"]
[Mon Jan 05 23:42:46.140821 2026] [:error] [pid 5534:tid 5550] [client 20.205.14.136:11162] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aVvb9pNs9XmbR6unB0wkPgAAAAc"]
[Mon Jan 05 23:42:46.868551 2026] [:error] [pid 5535:tid 5585] [client 20.205.14.136:11180] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aVvb9mnkedMjhVX0PTWoaAAAAE8"]
[Mon Jan 05 23:42:47.325173 2026] [:error] [pid 5534:tid 5544] [client 20.205.14.136:11199] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aVvb95Ns9XmbR6unB0wkPwAAAAE"]
[Mon Jan 05 23:42:47.652058 2026] [:error] [pid 5534:tid 5545] [client 20.205.14.136:11246] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aVvb95Ns9XmbR6unB0wkRAAAAAI"]
[Mon Jan 05 23:42:48.425153 2026] [:error] [pid 5535:tid 5594] [client 20.205.14.136:15932] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aVvb-GnkedMjhVX0PTWobAAAAFg"]
[Mon Jan 05 23:42:48.950639 2026] [:error] [pid 5534:tid 5554] [client 20.205.14.136:15924] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aVvb-JNs9XmbR6unB0wkSQAAAAs"]
[Mon Jan 05 23:42:49.645915 2026] [:error] [pid 5632:tid 5648] [client 20.205.14.136:11206] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aVvb-YN3ZWvlOh-nbt8AIgAAAMQ"]
[Mon Jan 05 23:42:50.027537 2026] [:error] [pid 5534:tid 5561] [client 20.205.14.136:11157] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aVvb-pNs9XmbR6unB0wkTwAAABI"]
[Mon Jan 05 23:42:50.515658 2026] [:error] [pid 5534:tid 5544] [client 20.205.14.136:11253] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aVvb-pNs9XmbR6unB0wkUQAAAAE"]
[Mon Jan 05 23:42:51.067882 2026] [:error] [pid 6680:tid 6685] [client 20.205.14.136:11250] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aVvb-6E58uNoazzTmx00eQAAAQM"]
[Mon Jan 05 23:42:51.559862 2026] [:error] [pid 6680:tid 6703] [client 20.205.14.136:11177] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aVvb-6E58uNoazzTmx00ewAAARU"]
[Mon Jan 05 23:42:51.927970 2026] [:error] [pid 6680:tid 6693] [client 20.205.14.136:11214] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aVvb-6E58uNoazzTmx00fQAAAQs"]
[Mon Jan 05 23:42:52.312002 2026] [:error] [pid 6680:tid 6691] [client 20.205.14.136:15883] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aVvb_KE58uNoazzTmx00fwAAAQk"]
[Mon Jan 05 23:42:54.919368 2026] [:error] [pid 28407:tid 28434] [client 20.205.14.136:11135] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aVvb_tercd3ptydUzM2LhwAAAZc"]
[Mon Jan 05 23:42:55.410596 2026] [:error] [pid 5535:tid 5580] [client 20.205.14.136:15948] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVvb_2nkedMjhVX0PTWobwAAAEo"]
[Mon Jan 05 23:42:55.841632 2026] [:error] [pid 28407:tid 28428] [client 20.205.14.136:11183] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVvb_9ercd3ptydUzM2LiAAAAZE"]
[Mon Jan 05 23:42:56.285655 2026] [:error] [pid 54081:tid 54086] [client 20.205.14.136:15922] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVvcAFL4jLgtF-b9w4e8zwAAAUI"]
[Mon Jan 05 23:42:56.998895 2026] [:error] [pid 5534:tid 5557] [client 20.205.14.136:11224] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVvcAJNs9XmbR6unB0wkWQAAAA4"]
[Mon Jan 05 23:42:57.393540 2026] [:error] [pid 5535:tid 5591] [client 20.205.14.136:11163] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aVvcAWnkedMjhVX0PTWocgAAAFU"]
[Mon Jan 05 23:42:58.137527 2026] [:error] [pid 6680:tid 6682] [client 20.205.14.136:11200] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aVvcAqE58uNoazzTmx00ggAAAQA"]
[Mon Jan 05 23:42:58.779830 2026] [:error] [pid 6680:tid 6686] [client 20.205.14.136:11190] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aVvcAqE58uNoazzTmx00gwAAAQQ"]
[Mon Jan 05 23:42:59.247726 2026] [:error] [pid 28407:tid 28424] [client 20.205.14.136:15907] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aVvcA9ercd3ptydUzM2LjQAAAY0"]
[Mon Jan 05 23:42:59.578352 2026] [:error] [pid 5536:tid 5607] [client 20.205.14.136:11237] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVvcAwRtMZNG6xI8yDwtKgAAAIo"]
[Mon Jan 05 23:43:00.060013 2026] [:error] [pid 54081:tid 54107] [client 20.205.14.136:11196] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVvcBFL4jLgtF-b9w4e80QAAAVc"]
[Mon Jan 05 23:43:01.190530 2026] [:error] [pid 54081:tid 54094] [client 20.205.14.136:11186] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVvcBVL4jLgtF-b9w4e81AAAAUo"]
[Mon Jan 05 23:43:02.354029 2026] [:error] [pid 6680:tid 6697] [client 20.205.14.136:11097] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVvcBqE58uNoazzTmx00iQAAAQ8"]
[Mon Jan 05 23:43:03.186771 2026] [:error] [pid 5632:tid 5653] [client 20.205.14.136:15989] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVvcB4N3ZWvlOh-nbt8ANgAAAMk"]
[Mon Jan 05 23:43:04.046321 2026] [:error] [pid 5536:tid 5600] [client 20.205.14.136:11152] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVvcCARtMZNG6xI8yDwtLQAAAIM"]
[Mon Jan 05 23:43:04.771314 2026] [:error] [pid 5536:tid 5610] [client 20.205.14.136:15883] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVvcCARtMZNG6xI8yDwtMAAAAI0"]
[Mon Jan 05 23:43:05.221499 2026] [:error] [pid 6680:tid 6700] [client 20.205.14.136:15976] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVvcCaE58uNoazzTmx00igAAARI"]
[Mon Jan 05 23:43:05.877118 2026] [:error] [pid 6680:tid 6693] [client 20.205.14.136:11227] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVvcCaE58uNoazzTmx00iwAAAQs"]
[Mon Jan 05 23:43:06.231224 2026] [:error] [pid 28407:tid 28410] [client 20.205.14.136:15935] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVvcCtercd3ptydUzM2LkwAAAYA"]
[Mon Jan 05 23:43:06.693927 2026] [:error] [pid 5535:tid 5586] [client 20.205.14.136:15921] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVvcCmnkedMjhVX0PTWofgAAAFA"]
[Mon Jan 05 23:43:07.373050 2026] [:error] [pid 5536:tid 5619] [client 20.205.14.136:15909] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aVvcCwRtMZNG6xI8yDwtNwAAAJY"]
[Mon Jan 05 23:43:07.658092 2026] [:error] [pid 5535:tid 5591] [client 20.205.14.136:11205] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aVvcC2nkedMjhVX0PTWogAAAAFU"]
[Mon Jan 05 23:43:08.155989 2026] [:error] [pid 5535:tid 5575] [client 20.205.14.136:11187] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aVvcDGnkedMjhVX0PTWoggAAAEU"]
[Mon Jan 05 23:43:08.527884 2026] [:error] [pid 54081:tid 54098] [client 20.205.14.136:11098] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aVvcDFL4jLgtF-b9w4e83gAAAU4"]
[Mon Jan 05 23:43:08.914304 2026] [:error] [pid 5632:tid 5661] [client 20.205.14.136:11242] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aVvcDIN3ZWvlOh-nbt8AQAAAANE"]
[Mon Jan 05 23:43:09.592130 2026] [:error] [pid 5632:tid 5668] [client 20.205.14.136:15899] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVvcDYN3ZWvlOh-nbt8AQgAAANg"]
[Mon Jan 05 23:43:10.305533 2026] [:error] [pid 54081:tid 54087] [client 20.205.14.136:11249] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVvcDlL4jLgtF-b9w4e84AAAAUM"]
[Mon Jan 05 23:43:10.909327 2026] [:error] [pid 28407:tid 28425] [client 20.205.14.136:15937] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVvcDtercd3ptydUzM2LmgAAAY4"]
[Mon Jan 05 23:43:11.865722 2026] [:error] [pid 5534:tid 5562] [client 20.205.14.136:11167] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aVvcD5Ns9XmbR6unB0wkbAAAABM"]
[Mon Jan 05 23:43:12.326081 2026] [:error] [pid 28407:tid 28412] [client 20.205.14.136:11182] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVvcENercd3ptydUzM2LnQAAAYI"]
[Mon Jan 05 23:43:12.688313 2026] [:error] [pid 5536:tid 5620] [client 20.205.14.136:11088] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVvcEARtMZNG6xI8yDwtQgAAAJc"]
[Mon Jan 05 23:43:13.229157 2026] [:error] [pid 5632:tid 5656] [client 20.205.14.136:11110] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVvcEYN3ZWvlOh-nbt8ASgAAAMw"]
[Mon Jan 05 23:43:13.573118 2026] [:error] [pid 5536:tid 5607] [client 20.205.14.136:11016] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVvcEQRtMZNG6xI8yDwtRwAAAIo"]
[Mon Jan 05 23:43:14.167728 2026] [:error] [pid 5536:tid 5618] [client 20.205.14.136:11189] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVvcEgRtMZNG6xI8yDwtTwAAAJU"]
[Mon Jan 05 23:43:14.597445 2026] [:error] [pid 5534:tid 5553] [client 20.205.14.136:11209] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVvcEpNs9XmbR6unB0wkdgAAAAo"]
[Mon Jan 05 23:43:15.297641 2026] [:error] [pid 28407:tid 28423] [client 20.205.14.136:11193] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVvcE9ercd3ptydUzM2LpwAAAYw"]
[Mon Jan 05 23:43:15.935148 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:11082] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aVvcE5Ns9XmbR6unB0wkewAAAAM"]
[Mon Jan 05 23:43:16.434530 2026] [:error] [pid 5632:tid 5661] [client 20.205.14.136:11251] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVvcFIN3ZWvlOh-nbt8ATAAAANE"]
[Mon Jan 05 23:43:16.859702 2026] [:error] [pid 54081:tid 54105] [client 20.205.14.136:11092] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVvcFFL4jLgtF-b9w4e85AAAAVU"]
[Mon Jan 05 23:43:18.063732 2026] [:error] [pid 6680:tid 6693] [client 20.205.14.136:11178] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVvcFqE58uNoazzTmx00lAAAAQs"]
[Mon Jan 05 23:43:18.525504 2026] [:error] [pid 5632:tid 5650] [client 20.205.14.136:11218] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aVvcFoN3ZWvlOh-nbt8ATwAAAMY"]
[Mon Jan 05 23:43:19.049737 2026] [:error] [pid 28407:tid 28432] [client 20.205.14.136:11155] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVvcF9ercd3ptydUzM2LrQAAAZU"]
[Mon Jan 05 23:43:20.109845 2026] [:error] [pid 5534:tid 5561] [client 20.205.14.136:11232] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVvcGJNs9XmbR6unB0wkgQAAABI"]
[Mon Jan 05 23:43:21.136365 2026] [:error] [pid 5535:tid 5573] [client 20.205.14.136:15965] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVvcGWnkedMjhVX0PTWojAAAAEM"]
[Mon Jan 05 23:43:22.238668 2026] [:error] [pid 5534:tid 5562] [client 20.205.14.136:11159] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVvcGpNs9XmbR6unB0wkhAAAABM"]
[Mon Jan 05 23:43:22.969880 2026] [:error] [pid 5535:tid 5587] [client 20.205.14.136:11259] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVvcGmnkedMjhVX0PTWokQAAAFE"]
[Mon Jan 05 23:43:23.661579 2026] [:error] [pid 6680:tid 6686] [client 20.205.14.136:11099] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVvcG6E58uNoazzTmx00mgAAAQQ"]
[Mon Jan 05 23:43:24.306456 2026] [:error] [pid 5535:tid 5586] [client 20.205.14.136:11168] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVvcHGnkedMjhVX0PTWolAAAAFA"]
[Mon Jan 05 23:43:25.308636 2026] [:error] [pid 5534:tid 5547] [client 20.205.14.136:11140] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aVvcHZNs9XmbR6unB0wkjAAAAAQ"]
[Mon Jan 05 23:43:26.339372 2026] [:error] [pid 5534:tid 5558] [client 20.205.14.136:11136] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aVvcHpNs9XmbR6unB0wkkAAAAA8"]
[Mon Jan 05 23:43:27.107843 2026] [:error] [pid 5536:tid 5616] [client 20.205.14.136:15912] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aVvcHwRtMZNG6xI8yDwtWwAAAJM"]
[Mon Jan 05 23:43:27.779130 2026] [:error] [pid 5534:tid 5550] [client 20.205.14.136:11072] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aVvcH5Ns9XmbR6unB0wkkgAAAAc"]
[Mon Jan 05 23:43:28.474087 2026] [:error] [pid 5534:tid 5543] [client 20.205.14.136:11235] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aVvcIJNs9XmbR6unB0wklQAAAAA"]
[Mon Jan 05 23:43:29.248892 2026] [:error] [pid 5536:tid 5599] [client 20.205.14.136:11156] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVvcIQRtMZNG6xI8yDwtXwAAAII"]
[Mon Jan 05 23:43:29.902358 2026] [:error] [pid 5536:tid 5602] [client 20.205.14.136:11243] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVvcIQRtMZNG6xI8yDwtYQAAAIU"]
[Mon Jan 05 23:43:30.364317 2026] [:error] [pid 54081:tid 54084] [client 20.205.14.136:11197] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVvcIlL4jLgtF-b9w4e8_QAAAUA"]
[Mon Jan 05 23:43:30.972933 2026] [:error] [pid 54081:tid 54104] [client 20.205.14.136:15919] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aVvcIlL4jLgtF-b9w4e8_gAAAVQ"]
[Mon Jan 05 23:43:31.527325 2026] [:error] [pid 5632:tid 5666] [client 20.205.14.136:11161] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aVvcI4N3ZWvlOh-nbt8AXQAAANY"]
[Mon Jan 05 23:43:31.955493 2026] [:error] [pid 5534:tid 5561] [client 20.205.14.136:10950] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aVvcI5Ns9XmbR6unB0wklwAAABI"]
[Mon Jan 05 23:43:32.482235 2026] [:error] [pid 54081:tid 54092] [client 20.205.14.136:11160] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aVvcJFL4jLgtF-b9w4e9AgAAAUg"]
[Mon Jan 05 23:43:32.829123 2026] [:error] [pid 28407:tid 28422] [client 20.205.14.136:11158] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aVvcJNercd3ptydUzM2LugAAAYs"]
[Mon Jan 05 23:43:33.526412 2026] [:error] [pid 5632:tid 5651] [client 20.205.14.136:11113] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVvcJYN3ZWvlOh-nbt8AYwAAAMc"]
[Mon Jan 05 23:43:34.006687 2026] [:error] [pid 5632:tid 5653] [client 20.205.14.136:11195] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVvcJoN3ZWvlOh-nbt8AZAAAAMk"]
[Mon Jan 05 23:43:34.558426 2026] [:error] [pid 28407:tid 28413] [client 20.205.14.136:11091] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVvcJtercd3ptydUzM2LvgAAAYM"]
[Mon Jan 05 23:43:34.915331 2026] [:error] [pid 5632:tid 5659] [client 20.205.14.136:11233] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aVvcJoN3ZWvlOh-nbt8AZwAAAM8"]
[Mon Jan 05 23:43:39.021842 2026] [:error] [pid 28407:tid 28435] [client 20.205.14.136:11165] [client 20.205.14.136] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.67.97.39_2307265f90098b359841da55a913ea329447e5fb"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/index.php"] [unique_id "aVvcJ9ercd3ptydUzM2LwAAAAZg"]
[Mon Jan 05 23:44:24.816265 2026] [:error] [pid 28407:tid 28412] [client 20.205.14.136:11165] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVvcWNercd3ptydUzM2MKwAAAYI"]
[Mon Jan 05 23:44:25.146865 2026] [:error] [pid 5536:tid 5597] [client 20.205.14.136:11079] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVvcWQRtMZNG6xI8yDwtnwAAAIA"]
[Mon Jan 05 23:44:25.498516 2026] [:error] [pid 6680:tid 6693] [client 20.205.14.136:11245] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVvcWaE58uNoazzTmx003AAAAQs"]
[Mon Jan 05 23:44:26.008522 2026] [:error] [pid 5536:tid 5618] [client 20.205.14.136:11166] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aVvcWgRtMZNG6xI8yDwtogAAAJU"]
[Mon Jan 05 23:44:26.436845 2026] [:error] [pid 28407:tid 28429] [client 20.205.14.136:11094] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aVvcWtercd3ptydUzM2MLwAAAZI"]
[Mon Jan 05 23:44:26.971289 2026] [:error] [pid 28407:tid 28424] [client 20.205.14.136:11257] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aVvcWtercd3ptydUzM2MMAAAAY0"]
[Mon Jan 05 23:44:27.585389 2026] [:error] [pid 5535:tid 5571] [client 20.205.14.136:11086] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aVvcW2nkedMjhVX0PTWoyAAAAEE"]
[Mon Jan 05 23:44:28.098158 2026] [:error] [pid 54081:tid 54098] [client 20.205.14.136:11078] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aVvcXFL4jLgtF-b9w4e9cwAAAU4"]
[Mon Jan 05 23:44:28.537272 2026] [:error] [pid 5534:tid 5560] [client 20.205.14.136:11144] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVvcXJNs9XmbR6unB0wk1wAAABE"]
[Mon Jan 05 23:44:28.922868 2026] [:error] [pid 28407:tid 28425] [client 20.205.14.136:15928] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVvcXNercd3ptydUzM2MNAAAAY4"]
[Mon Jan 05 23:44:29.450288 2026] [:error] [pid 5534:tid 5553] [client 20.205.14.136:11123] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVvcXZNs9XmbR6unB0wk2gAAAAo"]
[Mon Jan 05 23:44:30.244570 2026] [:error] [pid 5534:tid 5565] [client 20.205.14.136:11090] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aVvcXpNs9XmbR6unB0wk3wAAABY"]
[Mon Jan 05 23:44:31.127019 2026] [:error] [pid 5535:tid 5570] [client 20.205.14.136:11018] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVvcX2nkedMjhVX0PTWoywAAAEA"]
[Mon Jan 05 23:44:31.971639 2026] [:error] [pid 5535:tid 5574] [client 20.205.14.136:11043] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVvcX2nkedMjhVX0PTWozAAAAEQ"]
[Mon Jan 05 23:44:32.281893 2026] [:error] [pid 54081:tid 54104] [client 20.205.14.136:11011] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVvcYFL4jLgtF-b9w4e9dgAAAVQ"]
[Mon Jan 05 23:44:32.665567 2026] [:error] [pid 5536:tid 5619] [client 20.205.14.136:11080] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVvcYARtMZNG6xI8yDwtpAAAAJY"]
[Mon Jan 05 23:44:33.331507 2026] [:error] [pid 28407:tid 28428] [client 20.205.14.136:11084] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aVvcYdercd3ptydUzM2MPQAAAZE"]
[Mon Jan 05 23:44:34.620559 2026] [:error] [pid 5534:tid 5564] [client 20.205.14.136:11024] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aVvcYpNs9XmbR6unB0wk6QAAABU"]
[Mon Jan 05 23:44:35.188831 2026] [:error] [pid 5632:tid 5654] [client 20.205.14.136:11042] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aVvcY4N3ZWvlOh-nbt8ApAAAAMo"]
[Mon Jan 05 23:44:35.706316 2026] [:error] [pid 6680:tid 6695] [client 20.205.14.136:11238] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aVvcY6E58uNoazzTmx005gAAAQ0"]
[Mon Jan 05 23:44:36.303836 2026] [:error] [pid 5534:tid 5554] [client 20.205.14.136:11107] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVvcZJNs9XmbR6unB0wk7gAAAAs"]
[Mon Jan 05 23:44:36.576885 2026] [:error] [pid 5535:tid 5572] [client 20.205.14.136:11191] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVvcZGnkedMjhVX0PTWo0QAAAEI"]
[Mon Jan 05 23:44:37.190008 2026] [:error] [pid 5534:tid 5544] [client 20.205.14.136:11246] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVvcZZNs9XmbR6unB0wk8AAAAAE"]
[Mon Jan 05 23:44:37.567352 2026] [:error] [pid 54081:tid 54086] [client 20.205.14.136:11132] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVvcZVL4jLgtF-b9w4e9fQAAAUI"]
[Mon Jan 05 23:44:38.137293 2026] [:error] [pid 6680:tid 6702] [client 20.205.14.136:11208] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVvcZqE58uNoazzTmx006AAAARQ"]
[Mon Jan 05 23:44:39.180273 2026] [:error] [pid 6680:tid 6686] [client 20.205.14.136:10961] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVvcZ6E58uNoazzTmx006gAAAQQ"]
[Mon Jan 05 23:44:39.886537 2026] [:error] [pid 5535:tid 5590] [client 20.205.14.136:11125] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVvcZ2nkedMjhVX0PTWo1wAAAFQ"]
[Mon Jan 05 23:44:40.597432 2026] [:error] [pid 5535:tid 5577] [client 20.205.14.136:15928] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aVvcaGnkedMjhVX0PTWo2AAAAEc"]
[Mon Jan 05 23:44:41.457069 2026] [:error] [pid 5534:tid 5548] [client 20.205.14.136:11194] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aVvcaZNs9XmbR6unB0wk9AAAAAU"]
[Mon Jan 05 23:44:41.969977 2026] [:error] [pid 5534:tid 5544] [client 20.205.14.136:11172] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aVvcaZNs9XmbR6unB0wk9gAAAAE"]
[Mon Jan 05 23:44:42.532730 2026] [:error] [pid 5536:tid 5607] [client 20.205.14.136:11087] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aVvcagRtMZNG6xI8yDwtrAAAAIo"]
[Mon Jan 05 23:44:43.146085 2026] [:error] [pid 5535:tid 5584] [client 20.205.14.136:11170] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aVvca2nkedMjhVX0PTWo3wAAAE4"]
[Mon Jan 05 23:44:43.469130 2026] [:error] [pid 5535:tid 5593] [client 20.205.14.136:11239] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aVvca2nkedMjhVX0PTWo4QAAAFc"]
[Mon Jan 05 23:44:43.902917 2026] [:error] [pid 5534:tid 5559] [client 20.205.14.136:11077] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aVvca5Ns9XmbR6unB0wk-gAAABA"]
[Mon Jan 05 23:44:44.278515 2026] [:error] [pid 5632:tid 5657] [client 20.205.14.136:11149] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aVvcbIN3ZWvlOh-nbt8ArAAAAM0"]
[Mon Jan 05 23:44:44.941243 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:11158] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aVvcbJNs9XmbR6unB0wk-wAAAAM"]
[Mon Jan 05 23:44:45.443282 2026] [:error] [pid 5534:tid 5562] [client 20.205.14.136:11248] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVvcbZNs9XmbR6unB0wk_gAAABM"]
[Mon Jan 05 23:44:46.278831 2026] [:error] [pid 5536:tid 5608] [client 20.205.14.136:11093] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVvcbgRtMZNG6xI8yDwtrgAAAIs"]
[Mon Jan 05 23:44:46.843643 2026] [:error] [pid 28407:tid 28429] [client 20.205.14.136:11034] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVvcbtercd3ptydUzM2MRQAAAZI"]
[Mon Jan 05 23:44:47.417222 2026] [:error] [pid 54081:tid 54106] [client 20.205.14.136:11075] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVvcb1L4jLgtF-b9w4e9hwAAAVY"]
[Mon Jan 05 23:44:48.000895 2026] [:error] [pid 54081:tid 54095] [client 20.205.14.136:15994] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVvcb1L4jLgtF-b9w4e9iAAAAUs"]
[Mon Jan 05 23:44:48.427914 2026] [:error] [pid 5536:tid 5620] [client 20.205.14.136:11059] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aVvccARtMZNG6xI8yDwttwAAAJc"]
[Mon Jan 05 23:44:49.231726 2026] [:error] [pid 5534:tid 5555] [client 20.205.14.136:15942] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aVvccZNs9XmbR6unB0wlCgAAAAw"]
[Mon Jan 05 23:44:50.108484 2026] [:error] [pid 54081:tid 54090] [client 20.205.14.136:11258] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aVvcclL4jLgtF-b9w4e9jAAAAUY"]
[Mon Jan 05 23:44:50.903291 2026] [:error] [pid 5632:tid 5661] [client 20.205.14.136:15875] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aVvccoN3ZWvlOh-nbt8ArwAAANE"]
[Mon Jan 05 23:44:51.338502 2026] [:error] [pid 5535:tid 5591] [client 20.205.14.136:11143] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVvcc2nkedMjhVX0PTWo8wAAAFU"]
[Mon Jan 05 23:44:51.984999 2026] [:error] [pid 5536:tid 5621] [client 20.205.14.136:15971] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVvccwRtMZNG6xI8yDwtugAAAJg"]
[Mon Jan 05 23:44:52.665761 2026] [:error] [pid 5535:tid 5587] [client 20.205.14.136:15992] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVvcdGnkedMjhVX0PTWo9gAAAFE"]
[Mon Jan 05 23:44:53.216695 2026] [:error] [pid 6680:tid 6688] [client 20.205.14.136:11181] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVvcdaE58uNoazzTmx008gAAAQY"]
[Mon Jan 05 23:44:53.727534 2026] [:error] [pid 5632:tid 5644] [client 20.205.14.136:15957] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVvcdYN3ZWvlOh-nbt8AtQAAAMA"]
[Mon Jan 05 23:44:54.370099 2026] [:error] [pid 5535:tid 5584] [client 20.205.14.136:11036] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVvcdmnkedMjhVX0PTWo_AAAAE4"]
[Mon Jan 05 23:44:54.815053 2026] [:error] [pid 5535:tid 5593] [client 20.205.14.136:11171] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVvcdmnkedMjhVX0PTWo_wAAAFc"]
[Mon Jan 05 23:44:56.608451 2026] [:error] [pid 5535:tid 5579] [client 20.205.14.136:11184] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVvceGnkedMjhVX0PTWpBwAAAEk"]
[Mon Jan 05 23:44:56.931963 2026] [:error] [pid 5534:tid 5560] [client 20.205.14.136:11025] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVvceJNs9XmbR6unB0wlGgAAABE"]
[Mon Jan 05 23:44:57.277626 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:15967] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVvceZNs9XmbR6unB0wlHAAAAAM"]
[Mon Jan 05 23:44:57.661761 2026] [:error] [pid 5535:tid 5586] [client 20.205.14.136:11255] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVvceWnkedMjhVX0PTWpCQAAAFA"]
[Mon Jan 05 23:44:57.931597 2026] [:error] [pid 54081:tid 54098] [client 20.205.14.136:11175] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVvceVL4jLgtF-b9w4e9mQAAAU4"]
[Mon Jan 05 23:44:58.238157 2026] [:error] [pid 5534:tid 5548] [client 20.205.14.136:15878] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVvcepNs9XmbR6unB0wlIQAAAAU"]
[Mon Jan 05 23:44:59.021609 2026] [:error] [pid 5534:tid 5566] [client 20.205.14.136:15933] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVvce5Ns9XmbR6unB0wlJAAAABc"]
[Mon Jan 05 23:44:59.578390 2026] [:error] [pid 5536:tid 5601] [client 20.205.14.136:15980] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aVvcewRtMZNG6xI8yDwtvQAAAIQ"]
[Mon Jan 05 23:44:59.880282 2026] [:error] [pid 28407:tid 28411] [client 20.205.14.136:11174] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aVvce9ercd3ptydUzM2MUgAAAYE"]
[Mon Jan 05 23:45:00.894263 2026] [:error] [pid 54081:tid 54090] [client 20.205.14.136:11076] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aVvcfFL4jLgtF-b9w4e9nQAAAUY"]
[Mon Jan 05 23:45:02.275634 2026] [:error] [pid 54081:tid 54107] [client 20.205.14.136:11111] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aVvcflL4jLgtF-b9w4e9nwAAAVc"]
[Mon Jan 05 23:45:03.078982 2026] [:error] [pid 5536:tid 5597] [client 20.205.14.136:15966] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aVvcfwRtMZNG6xI8yDwtwwAAAIA"]
[Mon Jan 05 23:45:03.906442 2026] [:error] [pid 54081:tid 54093] [client 20.205.14.136:15993] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aVvcf1L4jLgtF-b9w4e9oQAAAUk"]
[Mon Jan 05 23:45:05.081694 2026] [:error] [pid 5632:tid 5652] [client 20.205.14.136:11050] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aVvcgYN3ZWvlOh-nbt8AuQAAAMg"]
[Mon Jan 05 23:45:05.802749 2026] [:error] [pid 6680:tid 6695] [client 20.205.14.136:15939] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aVvcgaE58uNoazzTmx00-QAAAQ0"]
[Mon Jan 05 23:45:06.350935 2026] [:error] [pid 5535:tid 5581] [client 20.205.14.136:15988] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aVvcgmnkedMjhVX0PTWpDwAAAEs"]
[Mon Jan 05 23:45:07.002770 2026] [:error] [pid 5632:tid 5650] [client 20.205.14.136:11169] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aVvcg4N3ZWvlOh-nbt8AuwAAAMY"]
[Mon Jan 05 23:45:07.339592 2026] [:error] [pid 5534:tid 5549] [client 20.205.14.136:11017] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aVvcg5Ns9XmbR6unB0wlMQAAAAY"]
[Mon Jan 05 23:45:07.703100 2026] [:error] [pid 5534:tid 5556] [client 20.205.14.136:11085] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVvcg5Ns9XmbR6unB0wlNAAAAA0"]
[Mon Jan 05 23:45:08.196009 2026] [:error] [pid 54081:tid 54105] [client 20.205.14.136:15887] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVvchFL4jLgtF-b9w4e9pQAAAVU"]
[Mon Jan 05 23:45:08.526598 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:11216] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVvchJNs9XmbR6unB0wlNwAAAAM"]
[Mon Jan 05 23:45:09.017164 2026] [:error] [pid 5534:tid 5551] [client 20.205.14.136:15982] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVvchZNs9XmbR6unB0wlPAAAAAg"]
[Mon Jan 05 23:45:09.646946 2026] [:error] [pid 5632:tid 5659] [client 20.205.14.136:15890] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVvchYN3ZWvlOh-nbt8AvgAAAM8"]
[Mon Jan 05 23:45:10.393883 2026] [:error] [pid 5536:tid 5609] [client 20.205.14.136:11056] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVvchgRtMZNG6xI8yDwtyQAAAIw"]
[Mon Jan 05 23:45:11.004997 2026] [:error] [pid 5632:tid 5644] [client 20.205.14.136:15893] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVvch4N3ZWvlOh-nbt8AvwAAAMA"]
[Mon Jan 05 23:45:11.360076 2026] [:error] [pid 5536:tid 5621] [client 20.205.14.136:15916] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVvchwRtMZNG6xI8yDwtzgAAAJg"]
[Mon Jan 05 23:45:11.699870 2026] [:error] [pid 5632:tid 5658] [client 20.205.14.136:11021] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aVvch4N3ZWvlOh-nbt8AxAAAAM4"]
[Mon Jan 05 23:45:12.107449 2026] [:error] [pid 5536:tid 5598] [client 20.205.14.136:15986] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aVvciARtMZNG6xI8yDwt0QAAAIE"]
[Mon Jan 05 23:45:12.581024 2026] [:error] [pid 5632:tid 5648] [client 20.205.14.136:10965] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aVvciIN3ZWvlOh-nbt8AxQAAAMQ"]
[Mon Jan 05 23:45:12.965349 2026] [:error] [pid 5632:tid 5663] [client 20.205.14.136:15958] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aVvciIN3ZWvlOh-nbt8AxgAAANM"]
[Mon Jan 05 23:45:13.527136 2026] [:error] [pid 5536:tid 5600] [client 20.205.14.136:11083] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVvciQRtMZNG6xI8yDwt1AAAAIM"]
[Mon Jan 05 23:45:14.074828 2026] [:error] [pid 5632:tid 5645] [client 20.205.14.136:15904] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVvcioN3ZWvlOh-nbt8AyAAAAME"]
[Mon Jan 05 23:45:14.419113 2026] [:error] [pid 5536:tid 5610] [client 20.205.14.136:11131] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVvcigRtMZNG6xI8yDwt1wAAAI0"]
[Mon Jan 05 23:45:15.066691 2026] [:error] [pid 5632:tid 5650] [client 20.205.14.136:15995] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVvci4N3ZWvlOh-nbt8AzAAAAMY"]
[Mon Jan 05 23:45:15.580403 2026] [:error] [pid 5632:tid 5661] [client 20.205.14.136:11112] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVvci4N3ZWvlOh-nbt8AzgAAANE"]
[Mon Jan 05 23:45:16.265519 2026] [:error] [pid 6680:tid 6682] [client 20.205.14.136:11116] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVvcjKE58uNoazzTmx01AAAAAQA"]
[Mon Jan 05 23:45:16.823133 2026] [:error] [pid 5535:tid 5580] [client 20.205.14.136:11032] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVvcjGnkedMjhVX0PTWpFQAAAEo"]
[Mon Jan 05 23:45:17.384578 2026] [:error] [pid 5632:tid 5645] [client 20.205.14.136:15886] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVvcjYN3ZWvlOh-nbt8A0wAAAME"]
[Mon Jan 05 23:45:18.177939 2026] [:error] [pid 5534:tid 5555] [client 20.205.14.136:15901] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVvcjpNs9XmbR6unB0wlRAAAAAw"]
[Mon Jan 05 23:45:18.700724 2026] [:error] [pid 5632:tid 5650] [client 20.205.14.136:11106] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVvcjoN3ZWvlOh-nbt8A1QAAAMY"]
[Mon Jan 05 23:45:19.198254 2026] [:error] [pid 54081:tid 54095] [client 20.205.14.136:15977] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVvcj1L4jLgtF-b9w4e9sQAAAUs"]
[Mon Jan 05 23:45:20.392100 2026] [:error] [pid 5534:tid 5549] [client 20.205.14.136:11105] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVvckJNs9XmbR6unB0wlSQAAAAY"]
[Mon Jan 05 23:45:21.479077 2026] [:error] [pid 5534:tid 5548] [client 20.205.14.136:15897] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVvckZNs9XmbR6unB0wlTQAAAAU"]
[Mon Jan 05 23:45:21.821951 2026] [:error] [pid 6680:tid 6699] [client 20.205.14.136:11071] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVvckaE58uNoazzTmx01CgAAARE"]
[Mon Jan 05 23:45:30.295234 2026] [autoindex:error] [pid 28407:tid 28428] [client 20.205.14.136:15874] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 23:46:07.818912 2026] [:error] [pid 5534:tid 5567] [client 20.205.14.136:10955] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aVvcv5Ns9XmbR6unB0wligAAABg"]
[Mon Jan 05 23:46:08.172634 2026] [:error] [pid 5632:tid 5662] [client 20.205.14.136:15979] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aVvcwIN3ZWvlOh-nbt8BAwAAANI"]
[Mon Jan 05 23:46:09.185071 2026] [:error] [pid 28407:tid 28414] [client 20.205.14.136:11108] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aVvcwdercd3ptydUzM2MpQAAAYQ"]
[Mon Jan 05 23:46:09.935431 2026] [:error] [pid 28407:tid 28421] [client 20.205.14.136:15987] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aVvcwdercd3ptydUzM2MqQAAAYo"]
[Mon Jan 05 23:46:10.392478 2026] [:error] [pid 54081:tid 54088] [client 20.205.14.136:15900] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVvcwlL4jLgtF-b9w4e93wAAAUQ"]
[Mon Jan 05 23:46:10.771673 2026] [:error] [pid 6680:tid 6693] [client 20.205.14.136:15934] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVvcwqE58uNoazzTmx01SAAAAQs"]
[Mon Jan 05 23:46:11.185417 2026] [:error] [pid 5536:tid 5617] [client 20.205.14.136:15972] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVvcwwRtMZNG6xI8yDwuDwAAAJQ"]
[Mon Jan 05 23:46:11.767355 2026] [:error] [pid 6680:tid 6702] [client 20.205.14.136:15903] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aVvcw6E58uNoazzTmx01SQAAARQ"]
[Mon Jan 05 23:46:12.335159 2026] [:error] [pid 5536:tid 5605] [client 20.205.14.136:11219] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVvcxARtMZNG6xI8yDwuEgAAAIg"]
[Mon Jan 05 23:46:12.925693 2026] [:error] [pid 28407:tid 28413] [client 20.205.14.136:15947] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVvcxNercd3ptydUzM2MsQAAAYM"]
[Mon Jan 05 23:46:13.690612 2026] [:error] [pid 5536:tid 5608] [client 20.205.14.136:15898] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVvcxQRtMZNG6xI8yDwuFAAAAIs"]
[Mon Jan 05 23:46:14.133379 2026] [:error] [pid 6680:tid 6685] [client 20.205.14.136:15877] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aVvcxqE58uNoazzTmx01TgAAAQM"]
[Mon Jan 05 23:46:14.612499 2026] [:error] [pid 5534:tid 5550] [client 20.205.14.136:15915] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVvcxpNs9XmbR6unB0wljQAAAAc"]
[Mon Jan 05 23:46:15.620176 2026] [:error] [pid 54081:tid 54108] [client 20.205.14.136:11019] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVvcx1L4jLgtF-b9w4e95wAAAVg"]
[Mon Jan 05 23:46:16.189407 2026] [:error] [pid 5534:tid 5559] [client 20.205.14.136:11247] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVvcyJNs9XmbR6unB0wlkAAAABA"]
[Mon Jan 05 23:46:16.722426 2026] [:error] [pid 5534:tid 5566] [client 20.205.14.136:15889] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aVvcyJNs9XmbR6unB0wlkQAAABc"]
[Mon Jan 05 23:46:17.483111 2026] [:error] [pid 5632:tid 5666] [client 20.205.14.136:15951] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs15.php"] [unique_id "aVvcyYN3ZWvlOh-nbt8BBwAAANY"]
[Mon Jan 05 23:46:17.962814 2026] [:error] [pid 6680:tid 6690] [client 20.205.14.136:15983] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs15.php"] [unique_id "aVvcyaE58uNoazzTmx01UwAAAQg"]
[Mon Jan 05 23:46:18.491001 2026] [:error] [pid 28407:tid 28417] [client 20.205.14.136:15984] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs15.php"] [unique_id "aVvcytercd3ptydUzM2MuAAAAYc"]
[Mon Jan 05 23:46:19.556708 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:15955] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs15.php"] [unique_id "aVvcy5Ns9XmbR6unB0wllgAAAAM"]
[Mon Jan 05 23:46:20.624454 2026] [:error] [pid 54081:tid 54106] [client 20.205.14.136:15940] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVvczFL4jLgtF-b9w4e9-QAAAVY"]
[Mon Jan 05 23:46:21.253471 2026] [:error] [pid 5535:tid 5576] [client 20.205.14.136:15911] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVvczWnkedMjhVX0PTWpVAAAAEY"]
[Mon Jan 05 23:46:21.824277 2026] [:error] [pid 5534:tid 5567] [client 20.205.14.136:11101] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVvczZNs9XmbR6unB0wlmQAAABg"]
[Mon Jan 05 23:46:22.330196 2026] [:error] [pid 5534:tid 5564] [client 20.205.14.136:15998] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aVvczpNs9XmbR6unB0wlnQAAABU"]
[Mon Jan 05 23:46:23.320689 2026] [:error] [pid 6680:tid 6688] [client 20.205.14.136:15956] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVvcz6E58uNoazzTmx01WQAAAQY"]
[Mon Jan 05 23:46:24.068901 2026] [:error] [pid 54081:tid 54093] [client 20.205.14.136:15894] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVvc0FL4jLgtF-b9w4e9_gAAAUk"]
[Mon Jan 05 23:46:24.562696 2026] [:error] [pid 5534:tid 5543] [client 20.205.14.136:11073] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVvc0JNs9XmbR6unB0wloQAAAAA"]
[Mon Jan 05 23:46:25.380800 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:11072] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVvc0ZNs9XmbR6unB0wlowAAAAM"]
[Mon Jan 05 23:46:26.181774 2026] [:error] [pid 6680:tid 6686] [client 20.205.14.136:11207] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aVvc0qE58uNoazzTmx01XgAAAQQ"]
[Mon Jan 05 23:46:27.176306 2026] [:error] [pid 5535:tid 5592] [client 20.205.14.136:15891] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aVvc02nkedMjhVX0PTWpXgAAAFY"]
[Mon Jan 05 23:46:28.543621 2026] [:error] [pid 5536:tid 5607] [client 20.205.14.136:15888] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aVvc1ARtMZNG6xI8yDwuJwAAAIo"]
[Mon Jan 05 23:46:30.306241 2026] [:error] [pid 5632:tid 5666] [client 20.205.14.136:15895] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aVvc1oN3ZWvlOh-nbt8BEAAAANY"]
[Mon Jan 05 23:46:31.728222 2026] [:error] [pid 28407:tid 28419] [client 20.205.14.136:15999] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aVvc19ercd3ptydUzM2MyAAAAYg"]
[Mon Jan 05 23:46:32.156079 2026] [:error] [pid 54081:tid 54101] [client 20.205.14.136:15872] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aVvc2FL4jLgtF-b9w4e-CwAAAVE"]
[Mon Jan 05 23:46:32.518430 2026] [:error] [pid 6680:tid 6696] [client 20.205.14.136:15943] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aVvc2KE58uNoazzTmx01ZAAAAQ4"]
[Mon Jan 05 23:46:33.041415 2026] [:error] [pid 5534:tid 5563] [client 20.205.14.136:15920] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aVvc2ZNs9XmbR6unB0wlrQAAABQ"]
[Mon Jan 05 23:46:34.490652 2026] [:error] [pid 28407:tid 28415] [client 20.205.14.136:11192] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVvc2tercd3ptydUzM2MzwAAAYU"]
[Mon Jan 05 23:46:35.139534 2026] [:error] [pid 5632:tid 5659] [client 20.205.14.136:11023] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVvc24N3ZWvlOh-nbt8BGwAAAM8"]
[Mon Jan 05 23:46:35.759163 2026] [:error] [pid 5535:tid 5592] [client 20.205.14.136:15905] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVvc22nkedMjhVX0PTWpaAAAAFY"]
[Mon Jan 05 23:46:36.115464 2026] [:error] [pid 54081:tid 54085] [client 20.205.14.136:15914] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aVvc3FL4jLgtF-b9w4e-EAAAAUE"]
[Mon Jan 05 23:46:36.812052 2026] [:error] [pid 28407:tid 28422] [client 20.205.14.136:11147] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aVvc3Nercd3ptydUzM2M1AAAAYs"]
[Mon Jan 05 23:46:37.294990 2026] [:error] [pid 5632:tid 5666] [client 20.205.14.136:11118] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aVvc3YN3ZWvlOh-nbt8BHAAAANY"]
[Mon Jan 05 23:46:37.923584 2026] [:error] [pid 5632:tid 5656] [client 20.205.14.136:15880] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aVvc3YN3ZWvlOh-nbt8BHQAAAMw"]
[Mon Jan 05 23:46:38.615388 2026] [:error] [pid 54081:tid 54104] [client 20.205.14.136:11234] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aVvc3lL4jLgtF-b9w4e-FgAAAVQ"]
[Mon Jan 05 23:46:39.344917 2026] [:error] [pid 5534:tid 5563] [client 20.205.14.136:15879] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aVvc35Ns9XmbR6unB0wltwAAABQ"]
[Mon Jan 05 23:46:39.894153 2026] [:error] [pid 5535:tid 5576] [client 20.205.14.136:11211] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aVvc32nkedMjhVX0PTWpdAAAAEY"]
[Mon Jan 05 23:46:40.386664 2026] [:error] [pid 54081:tid 54089] [client 20.205.14.136:11027] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aVvc4FL4jLgtF-b9w4e-GwAAAUU"]
[Mon Jan 05 23:46:41.060946 2026] [:error] [pid 5536:tid 5606] [client 20.205.14.136:15941] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aVvc4QRtMZNG6xI8yDwuSgAAAIk"]
[Mon Jan 05 23:46:41.543626 2026] [:error] [pid 28407:tid 28427] [client 20.205.14.136:11213] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aVvc4dercd3ptydUzM2M2wAAAZA"]
[Mon Jan 05 23:46:42.085228 2026] [:error] [pid 5535:tid 5593] [client 20.205.14.136:15876] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aVvc4mnkedMjhVX0PTWpdgAAAFc"]
[Mon Jan 05 23:46:42.493567 2026] [:error] [pid 5535:tid 5581] [client 20.205.14.136:15929] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aVvc4mnkedMjhVX0PTWpeAAAAEs"]
[Mon Jan 05 23:46:42.987580 2026] [:error] [pid 5535:tid 5585] [client 20.205.14.136:15908] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aVvc4mnkedMjhVX0PTWpegAAAE8"]
[Mon Jan 05 23:46:43.715781 2026] [:error] [pid 5534:tid 5558] [client 20.205.14.136:11217] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVvc45Ns9XmbR6unB0wlvQAAAA8"]
[Mon Jan 05 23:46:44.241075 2026] [:error] [pid 54081:tid 54105] [client 20.205.14.136:11095] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVvc5FL4jLgtF-b9w4e-JAAAAVU"]
[Mon Jan 05 23:46:45.174251 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:11141] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVvc5ZNs9XmbR6unB0wlwAAAAAM"]
[Mon Jan 05 23:46:45.459523 2026] [:error] [pid 5632:tid 5644] [client 20.205.14.136:11176] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aVvc5YN3ZWvlOh-nbt8BIgAAAMA"]
[Mon Jan 05 23:46:45.935132 2026] [:error] [pid 28407:tid 28434] [client 20.205.14.136:15873] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aVvc5dercd3ptydUzM2M3wAAAZc"]
[Mon Jan 05 23:46:46.913684 2026] [:error] [pid 5534:tid 5544] [client 20.205.14.136:11134] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aVvc5pNs9XmbR6unB0wlxwAAAAE"]
[Mon Jan 05 23:46:48.151435 2026] [:error] [pid 5534:tid 5558] [client 20.205.14.136:15985] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aVvc6JNs9XmbR6unB0wlyQAAAA8"]
[Mon Jan 05 23:46:49.520193 2026] [:error] [pid 54081:tid 54090] [client 20.205.14.136:11179] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aVvc6VL4jLgtF-b9w4e-KQAAAUY"]
[Mon Jan 05 23:46:50.418280 2026] [:error] [pid 5632:tid 5666] [client 20.205.14.136:15876] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aVvc6oN3ZWvlOh-nbt8BJwAAANY"]
[Mon Jan 05 23:46:51.371734 2026] [:error] [pid 6680:tid 6682] [client 20.205.14.136:15938] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aVvc66E58uNoazzTmx01gQAAAQA"]
[Mon Jan 05 23:46:52.401377 2026] [:error] [pid 28407:tid 28434] [client 20.205.14.136:11229] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aVvc7Nercd3ptydUzM2M6QAAAZc"]
[Mon Jan 05 23:46:53.114124 2026] [:error] [pid 6680:tid 6703] [client 20.205.14.136:11164] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aVvc7aE58uNoazzTmx01hgAAARU"]
[Mon Jan 05 23:46:53.612467 2026] [:error] [pid 6680:tid 6694] [client 20.205.14.136:11139] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aVvc7aE58uNoazzTmx01hwAAAQw"]
[Mon Jan 05 23:46:54.099065 2026] [:error] [pid 6680:tid 6684] [client 20.205.14.136:11212] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aVvc7qE58uNoazzTmx01iQAAAQI"]
[Mon Jan 05 23:46:54.975079 2026] [:error] [pid 5536:tid 5602] [client 20.205.14.136:15892] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aVvc7gRtMZNG6xI8yDwuWQAAAIU"]
[Mon Jan 05 23:46:55.439695 2026] [:error] [pid 5536:tid 5609] [client 20.205.14.136:15944] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aVvc7wRtMZNG6xI8yDwuWgAAAIw"]
[Mon Jan 05 23:46:55.902840 2026] [:error] [pid 54081:tid 54108] [client 20.205.14.136:15961] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aVvc71L4jLgtF-b9w4e-LgAAAVg"]
[Mon Jan 05 23:46:56.550357 2026] [:error] [pid 5534:tid 5562] [client 20.205.14.136:11223] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aVvc8JNs9XmbR6unB0wl4gAAABM"]
[Mon Jan 05 23:46:58.384031 2026] [:error] [pid 28407:tid 28415] [client 20.205.14.136:15997] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aVvc8tercd3ptydUzM2M7AAAAYU"]
[Mon Jan 05 23:46:58.688882 2026] [:error] [pid 28407:tid 28430] [client 20.205.14.136:11115] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aVvc8tercd3ptydUzM2M7QAAAZM"]
[Mon Jan 05 23:46:59.503888 2026] [:error] [pid 5534:tid 5546] [client 20.205.14.136:15923] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aVvc85Ns9XmbR6unB0wl5wAAAAM"]
[Mon Jan 05 23:47:00.574384 2026] [:error] [pid 5632:tid 5665] [client 20.205.14.136:11228] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aVvc9IN3ZWvlOh-nbt8BLgAAANU"]
[Mon Jan 05 23:47:01.399978 2026] [:error] [pid 5536:tid 5618] [client 20.205.14.136:11035] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aVvc9QRtMZNG6xI8yDwuYAAAAJU"]
[Mon Jan 05 23:47:02.889518 2026] [:error] [pid 6680:tid 6688] [client 20.205.14.136:15996] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aVvc9qE58uNoazzTmx01kQAAAQY"]
[Mon Jan 05 23:47:03.432684 2026] [:error] [pid 54081:tid 54086] [client 20.205.14.136:11202] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aVvc91L4jLgtF-b9w4e-QQAAAUI"]
[Mon Jan 05 23:47:04.520543 2026] [:error] [pid 5632:tid 5666] [client 20.205.14.136:15882] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aVvc-IN3ZWvlOh-nbt8BMgAAANY"]
[Mon Jan 05 23:47:17.615765 2026] [:error] [pid 5536:tid 5611] [client 20.205.14.136:11066] [client 20.205.14.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.205.14.136, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVvdBQRtMZNG6xI8yDwucAAAAI4"]
[Mon Jan 05 23:47:17.619988 2026] [proxy_fcgi:error] [pid 5536:tid 5611] [client 20.205.14.136:11066] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 23:47:25.280827 2026] [:error] [pid 5536:tid 5600] [client 20.205.14.136:11066] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVvdDQRtMZNG6xI8yDwuegAAAIM"]
[Mon Jan 05 23:47:44.273496 2026] [:error] [pid 5536:tid 5602] [client 20.205.14.136:11146] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aVvdIARtMZNG6xI8yDwumwAAAIU"]
[Mon Jan 05 23:47:45.040631 2026] [:error] [pid 54081:tid 54090] [client 20.205.14.136:11214] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aVvdIVL4jLgtF-b9w4e-gAAAAUY"]
[Mon Jan 05 23:47:45.864736 2026] [:error] [pid 5632:tid 5662] [client 20.205.14.136:15883] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aVvdIYN3ZWvlOh-nbt8BXwAAANI"]
[Mon Jan 05 23:47:46.704149 2026] [:error] [pid 5534:tid 5564] [client 20.205.14.136:15946] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aVvdIpNs9XmbR6unB0wmOAAAABU"]
[Mon Jan 05 23:47:47.737559 2026] [:error] [pid 6680:tid 6688] [client 20.205.14.136:11221] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVvdI6E58uNoazzTmx01ugAAAQY"]
[Mon Jan 05 23:47:48.419710 2026] [:error] [pid 5535:tid 5593] [client 20.205.14.136:15884] [client 20.205.14.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aVvdJGnkedMjhVX0PTWprgAAAFc"]
[Mon Jan 05 23:47:49.385945 2026] [:error] [pid 28407:tid 28428] [client 20.205.14.136:15918] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aVvdJdercd3ptydUzM2NJAAAAZE"]
[Mon Jan 05 23:47:50.088763 2026] [:error] [pid 5534:tid 5543] [client 20.205.14.136:11203] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aVvdJpNs9XmbR6unB0wmPAAAAAA"]
[Mon Jan 05 23:47:50.620590 2026] [:error] [pid 28407:tid 28432] [client 20.205.14.136:15874] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aVvdJtercd3ptydUzM2NJgAAAZU"]
[Mon Jan 05 23:47:51.530320 2026] [:error] [pid 5534:tid 5549] [client 20.205.14.136:15935] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aVvdJ5Ns9XmbR6unB0wmQQAAAAY"]
[Mon Jan 05 23:47:52.220565 2026] [:error] [pid 5535:tid 5576] [client 20.205.14.136:11205] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aVvdKGnkedMjhVX0PTWpsgAAAEY"]
[Mon Jan 05 23:47:52.588937 2026] [:error] [pid 5536:tid 5619] [client 20.205.14.136:11250] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aVvdKARtMZNG6xI8yDwuowAAAJY"]
[Mon Jan 05 23:47:53.470563 2026] [:error] [pid 28407:tid 28426] [client 20.205.14.136:11138] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aVvdKdercd3ptydUzM2NKQAAAY8"]
[Mon Jan 05 23:47:53.987698 2026] [:error] [pid 28407:tid 28425] [client 20.205.14.136:15975] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aVvdKdercd3ptydUzM2NKwAAAY4"]
[Mon Jan 05 23:47:54.810225 2026] [:error] [pid 5535:tid 5572] [client 20.205.14.136:11237] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah24.php"] [unique_id "aVvdKmnkedMjhVX0PTWptQAAAEI"]
[Mon Jan 05 23:47:55.454236 2026] [:error] [pid 5534:tid 5558] [client 20.205.14.136:11240] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah24.php"] [unique_id "aVvdK5Ns9XmbR6unB0wmRQAAAA8"]
[Mon Jan 05 23:47:56.058920 2026] [:error] [pid 5536:tid 5604] [client 20.205.14.136:15906] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah24.php"] [unique_id "aVvdLARtMZNG6xI8yDwupgAAAIc"]
[Mon Jan 05 23:47:57.247732 2026] [:error] [pid 5535:tid 5585] [client 20.205.14.136:11244] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah24.php"] [unique_id "aVvdLWnkedMjhVX0PTWpuwAAAE8"]
[Mon Jan 05 23:47:57.994872 2026] [:error] [pid 5535:tid 5575] [client 20.205.14.136:11148] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rtx.php"] [unique_id "aVvdLWnkedMjhVX0PTWpvgAAAEU"]
[Mon Jan 05 23:47:58.567191 2026] [:error] [pid 5534:tid 5549] [client 20.205.14.136:11200] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rtx.php"] [unique_id "aVvdLpNs9XmbR6unB0wmTAAAAAY"]
[Mon Jan 05 23:47:59.067150 2026] [:error] [pid 5536:tid 5606] [client 20.205.14.136:15974] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rtx.php"] [unique_id "aVvdLwRtMZNG6xI8yDwutAAAAIk"]
[Mon Jan 05 23:47:59.574113 2026] [:error] [pid 5536:tid 5620] [client 20.205.14.136:11145] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rtx.php"] [unique_id "aVvdLwRtMZNG6xI8yDwutgAAAJc"]
[Mon Jan 05 23:48:00.534868 2026] [:error] [pid 28407:tid 28426] [client 20.205.14.136:11100] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bipas.php"] [unique_id "aVvdMNercd3ptydUzM2NNQAAAY8"]
[Mon Jan 05 23:48:01.950259 2026] [:error] [pid 5535:tid 5574] [client 20.205.14.136:15881] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bipas.php"] [unique_id "aVvdMWnkedMjhVX0PTWpxQAAAEQ"]
[Mon Jan 05 23:48:02.411037 2026] [:error] [pid 54081:tid 54102] [client 20.205.14.136:11254] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bipas.php"] [unique_id "aVvdMlL4jLgtF-b9w4e-kgAAAVI"]
[Mon Jan 05 23:48:03.018239 2026] [:error] [pid 28407:tid 28410] [client 20.205.14.136:15902] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bipas.php"] [unique_id "aVvdM9ercd3ptydUzM2NOAAAAYA"]
[Mon Jan 05 23:48:03.324548 2026] [:error] [pid 6680:tid 6699] [client 20.205.14.136:11151] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conte.php"] [unique_id "aVvdM6E58uNoazzTmx01xwAAARE"]
[Mon Jan 05 23:48:03.619712 2026] [:error] [pid 5536:tid 5597] [client 20.205.14.136:11180] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conte.php"] [unique_id "aVvdMwRtMZNG6xI8yDwuvAAAAIA"]
[Mon Jan 05 23:48:04.031747 2026] [:error] [pid 5536:tid 5615] [client 20.205.14.136:11220] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conte.php"] [unique_id "aVvdNARtMZNG6xI8yDwuvgAAAJI"]
[Mon Jan 05 23:48:05.027412 2026] [:error] [pid 5534:tid 5551] [client 20.205.14.136:15989] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conte.php"] [unique_id "aVvdNZNs9XmbR6unB0wmUQAAAAg"]
[Mon Jan 05 23:48:05.958614 2026] [:error] [pid 5535:tid 5589] [client 20.205.14.136:11222] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class3.php"] [unique_id "aVvdNWnkedMjhVX0PTWpywAAAFM"]
[Mon Jan 05 23:48:06.484339 2026] [:error] [pid 6680:tid 6687] [client 20.205.14.136:11224] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class3.php"] [unique_id "aVvdNqE58uNoazzTmx01ygAAAQU"]
[Mon Jan 05 23:48:07.036933 2026] [:error] [pid 5536:tid 5608] [client 20.205.14.136:15907] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class3.php"] [unique_id "aVvdNwRtMZNG6xI8yDwuwgAAAIs"]
[Mon Jan 05 23:48:07.709567 2026] [:error] [pid 28407:tid 28419] [client 20.205.14.136:11159] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class3.php"] [unique_id "aVvdN9ercd3ptydUzM2NTwAAAYg"]
[Mon Jan 05 23:48:08.152844 2026] [:error] [pid 5534:tid 5544] [client 20.205.14.136:15922] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs18.php"] [unique_id "aVvdOJNs9XmbR6unB0wmVQAAAAE"]
[Mon Jan 05 23:48:09.083655 2026] [:error] [pid 5534:tid 5557] [client 20.205.14.136:15899] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs18.php"] [unique_id "aVvdOZNs9XmbR6unB0wmVwAAAA4"]
[Mon Jan 05 23:48:09.862255 2026] [:error] [pid 5536:tid 5600] [client 20.205.14.136:15959] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs18.php"] [unique_id "aVvdOQRtMZNG6xI8yDwuxgAAAIM"]
[Mon Jan 05 23:48:10.916442 2026] [:error] [pid 54081:tid 54090] [client 20.205.14.136:15896] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs18.php"] [unique_id "aVvdOlL4jLgtF-b9w4e-mAAAAUY"]
[Mon Jan 05 23:48:11.889980 2026] [:error] [pid 28407:tid 28417] [client 20.205.14.136:11140] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/claa.php"] [unique_id "aVvdO9ercd3ptydUzM2NWQAAAYc"]
[Mon Jan 05 23:48:12.412096 2026] [:error] [pid 5632:tid 5646] [client 20.205.14.136:11226] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/claa.php"] [unique_id "aVvdPIN3ZWvlOh-nbt8BfAAAAMI"]
[Mon Jan 05 23:48:13.225330 2026] [:error] [pid 5536:tid 5617] [client 20.205.14.136:15912] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/claa.php"] [unique_id "aVvdPQRtMZNG6xI8yDwuzQAAAJQ"]
[Mon Jan 05 23:48:13.941753 2026] [:error] [pid 5632:tid 5655] [client 20.205.14.136:11189] [client 20.205.14.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/claa.php"] [unique_id "aVvdPYN3ZWvlOh-nbt8BfgAAAMs"]
[Tue Jan 06 01:21:53.025619 2026] [:error] [pid 29187:tid 29196] [client 35.245.153.125:55365] [client 35.245.153.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.153.125, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVvzMYSYYRtfmMXGZCqSegAAAAc"]
[Tue Jan 06 01:21:58.441166 2026] [:error] [pid 29187:tid 29211] [client 35.245.153.125:55365] [client 35.245.153.125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVvzNoSYYRtfmMXGZCqSfgAAABY"]
[Tue Jan 06 01:22:00.392099 2026] [:error] [pid 29187:tid 29213] [client 35.245.153.125:55365] [client 35.245.153.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.153.125, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVvzOISYYRtfmMXGZCqSgQAAABg"]
[Tue Jan 06 01:35:26.905613 2026] [:error] [pid 60510:tid 60562] [client 34.187.226.119:64368] [client 34.187.226.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.226.119, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVv2Xm3HNEkuMRrTL0IVpQAAAI4"]
[Tue Jan 06 01:35:32.268129 2026] [:error] [pid 60510:tid 60561] [client 34.187.226.119:64368] [client 34.187.226.119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVv2ZG3HNEkuMRrTL0IVqQAAAI0"]
[Tue Jan 06 01:35:34.137988 2026] [:error] [pid 60510:tid 60556] [client 34.187.226.119:64368] [client 34.187.226.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.226.119, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aVv2Zm3HNEkuMRrTL0IVqwAAAIg"]
[Tue Jan 06 22:57:56.905368 2026] [:error] [pid 45959:tid 45979] [client 34.56.111.168:50678] [client 34.56.111.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.56.111.168, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aV0i9Fajdn8P3hjgMYwQ6wAAAVE"]
[Tue Jan 06 22:58:02.326410 2026] [:error] [pid 45959:tid 45978] [client 34.56.111.168:50678] [client 34.56.111.168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV0i-lajdn8P3hjgMYwQ9gAAAVA"]
[Tue Jan 06 22:58:04.582887 2026] [:error] [pid 45959:tid 45970] [client 34.56.111.168:50678] [client 34.56.111.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.56.111.168, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aV0i_Fajdn8P3hjgMYwQ_AAAAUg"]
[Tue Jan 06 23:19:39.577528 2026] [:error] [pid 44903:tid 44927] [client 4.247.167.136:4596] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oC9hHqjs38zbkQPA9jAAAABQ"]
[Tue Jan 06 23:19:42.057581 2026] [:error] [pid 44903:tid 44925] [client 4.247.167.136:4105] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oDthHqjs38zbkQPA9pwAAABI"]
[Tue Jan 06 23:19:51.182516 2026] [:error] [pid 44904:tid 44941] [client 4.247.167.136:5109] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFztieuI1BJEZcvdaFAAAAEA"]
[Wed Jan 07 01:10:23.982013 2026] [proxy_fcgi:error] [pid 44903:tid 44920] [client 103.4.122.14:58126] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Jan 07 01:49:52.196186 2026] [:error] [pid 45012:tid 45021] [client 34.86.112.86:53411] [client 34.86.112.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.112.86, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1LQBaMAxCuju1d0uZnngAAAMc"]
[Wed Jan 07 01:49:57.998168 2026] [:error] [pid 45012:tid 45023] [client 34.86.112.86:53411] [client 34.86.112.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV1LRRaMAxCuju1d0uZnsQAAAMk"]
[Wed Jan 07 01:49:59.929299 2026] [:error] [pid 45012:tid 45025] [client 34.86.112.86:53411] [client 34.86.112.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.112.86, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1LRxaMAxCuju1d0uZntAAAAMs"]
[Wed Jan 07 02:02:08.648694 2026] [:error] [pid 44904:tid 44949] [client 34.73.92.201:64178] [client 34.73.92.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.92.201, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1OIDtieuI1BJEZcvePzQAAAEg"]
[Wed Jan 07 02:02:14.335255 2026] [:error] [pid 44904:tid 44957] [client 34.73.92.201:64178] [client 34.73.92.201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV1OJjtieuI1BJEZcveP3gAAAFA"]
[Wed Jan 07 02:02:16.222054 2026] [:error] [pid 44904:tid 44955] [client 34.73.92.201:64178] [client 34.73.92.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.92.201, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aV1OKDtieuI1BJEZcveP4QAAAE4"]
[Wed Jan 07 09:48:23.368517 2026] [:error] [pid 30634:tid 30710] [client 195.178.110.161:33102] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aV27Z4CIPBibObtmZttkAAAAANQ"]
[Wed Jan 07 10:13:01.661033 2026] [proxy_fcgi:error] [pid 58330:tid 58336] [client 207.246.255.44:37331] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('itsec-lock-scheduling', '1767751983', 'auto') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, ITSEC_Core->continue_init, ITSEC_Core->shared_init, ITSEC_Modules::run_active_modules, ITSEC_Modules::load_module_file, include_once('/plugins/ithemes-security-pro/core/modules/security-check-pro/active.php'), ITSEC_Security_Check_Pro->run, ITSEC_Security_Check_Pro_Utility::handle_scan_request, ITSEC_Modules::set_settings, ITSEC_Settings->set_all, iThemesSecurity\\Config_Settings->after_save, ITSEC_Scheduler->register_events_for_config, ITSEC...'
[Wed Jan 07 12:24:44.587032 2026] [:error] [pid 30633:tid 30667] [client 195.178.110.161:40168] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aV3gDPZiVWlF7303nMhH8gAAAEQ"]
[Wed Jan 07 19:06:44.147406 2026] [:error] [pid 30632:tid 30641] [client 167.71.90.72:53720] [client 167.71.90.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aV4-ROd3_LCpBJzo02fwYQAAAAU"], referer: binance.com
[Wed Jan 07 22:16:43.829622 2026] [:error] [pid 50838:tid 50847] [client 182.253.238.235:54748] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aV5qy7SweZ27JIN4H8vXsQAAAcc"]
[Wed Jan 07 22:16:44.441227 2026] [:error] [pid 50936:tid 50942] [client 182.253.238.235:55050] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aV5qzLDlg80QUdd5qc4aoAAAAoQ"]
[Thu Jan 08 01:32:20.539304 2026] [:error] [pid 58294:tid 58306] [client 138.197.32.240:61669] [client 138.197.32.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aV6YpFfzA7c0ITpf3nFiNQAAAIo"], referer: binance.com
[Thu Jan 08 21:21:51.554149 2026] [:error] [pid 2424:tid 2434] [client 172.192.48.213:38486] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/avtst.php"] [unique_id "aV-vb7TDJR8aofkBk9Qv_AAAAQg"]
[Thu Jan 08 21:21:52.593349 2026] [:error] [pid 15358:tid 15381] [client 172.192.48.213:33049] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/avtst.php"] [unique_id "aV-vcCoRk9xWJ3toSBKEtAAAAMs"]
[Thu Jan 08 21:21:53.915482 2026] [:error] [pid 2424:tid 2437] [client 172.192.48.213:41197] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/avtst.php"] [unique_id "aV-vcbTDJR8aofkBk9Qv_QAAAQs"]
[Thu Jan 08 21:21:55.589946 2026] [:error] [pid 7586:tid 7592] [client 172.192.48.213:33047] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/avtst.php"] [unique_id "aV-vc8Jyk37GdXP5TmVyrQAAAcQ"]
[Thu Jan 08 21:21:57.406629 2026] [:error] [pid 15358:tid 15375] [client 172.192.48.213:43513] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inde.php"] [unique_id "aV-vdSoRk9xWJ3toSBKEuAAAAMU"]
[Thu Jan 08 21:21:59.129368 2026] [:error] [pid 2484:tid 2493] [client 172.192.48.213:45006] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inde.php"] [unique_id "aV-vdziDlnlaQQK_AEOTCgAAAUY"]
[Thu Jan 08 21:22:00.487266 2026] [:error] [pid 2484:tid 2491] [client 172.192.48.213:35909] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inde.php"] [unique_id "aV-veDiDlnlaQQK_AEOTCwAAAUU"]
[Thu Jan 08 21:22:01.939105 2026] [:error] [pid 15263:tid 15291] [client 172.192.48.213:33033] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inde.php"] [unique_id "aV-vedv61bxum7WG_e8JZQAAABM"]
[Thu Jan 08 21:22:02.715832 2026] [:error] [pid 15358:tid 15392] [client 172.192.48.213:36549] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aV-veioRk9xWJ3toSBKEvwAAANY"]
[Thu Jan 08 21:22:03.288601 2026] [:error] [pid 15265:tid 15338] [client 172.192.48.213:33055] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aV-ve6E6VBKhew2LTFRRCwAAAIw"]
[Thu Jan 08 21:22:04.105257 2026] [:error] [pid 17404:tid 17430] [client 172.192.48.213:43476] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aV-vfGVd_oH193N6AnXEUQAAAZg"]
[Thu Jan 08 21:22:05.295216 2026] [:error] [pid 2484:tid 2507] [client 172.192.48.213:33032] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aV-vfTiDlnlaQQK_AEOTEQAAAVM"]
[Thu Jan 08 21:22:06.163806 2026] [:error] [pid 2484:tid 2505] [client 172.192.48.213:36563] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lx.php"] [unique_id "aV-vfjiDlnlaQQK_AEOTFgAAAVE"]
[Thu Jan 08 21:22:07.538000 2026] [:error] [pid 17404:tid 17417] [client 172.192.48.213:34244] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lx.php"] [unique_id "aV-vf2Vd_oH193N6AnXEVQAAAYs"]
[Thu Jan 08 21:22:08.181151 2026] [:error] [pid 2424:tid 2426] [client 172.192.48.213:32568] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lx.php"] [unique_id "aV-vgLTDJR8aofkBk9QwBQAAAQA"]
[Thu Jan 08 21:22:10.436365 2026] [:error] [pid 2424:tid 2447] [client 172.192.48.213:34294] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lx.php"] [unique_id "aV-vgrTDJR8aofkBk9QwCQAAARU"]
[Thu Jan 08 21:22:12.488182 2026] [:error] [pid 15265:tid 15349] [client 172.192.48.213:31255] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/die.php"] [unique_id "aV-vhKE6VBKhew2LTFRRTAAAAJc"]
[Thu Jan 08 21:22:13.047668 2026] [:error] [pid 15358:tid 15392] [client 172.192.48.213:34303] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/die.php"] [unique_id "aV-vhSoRk9xWJ3toSBKEywAAANY"]
[Thu Jan 08 21:22:14.583360 2026] [:error] [pid 15265:tid 15347] [client 172.192.48.213:35910] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/die.php"] [unique_id "aV-vhqE6VBKhew2LTFRRVQAAAJU"]
[Thu Jan 08 21:22:16.671972 2026] [:error] [pid 15265:tid 15333] [client 172.192.48.213:33435] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/die.php"] [unique_id "aV-viKE6VBKhew2LTFRRWAAAAIc"]
[Thu Jan 08 21:22:20.236913 2026] [:error] [pid 2424:tid 2442] [client 172.192.48.213:34263] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaaa.php"] [unique_id "aV-vjLTDJR8aofkBk9QwOQAAARA"]
[Thu Jan 08 21:22:22.301055 2026] [:error] [pid 17404:tid 17423] [client 172.192.48.213:33418] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaaa.php"] [unique_id "aV-vjmVd_oH193N6AnXEWgAAAZE"]
[Thu Jan 08 21:22:23.594609 2026] [:error] [pid 17404:tid 17409] [client 172.192.48.213:45111] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaaa.php"] [unique_id "aV-vj2Vd_oH193N6AnXEXQAAAYM"]
[Thu Jan 08 21:22:25.652634 2026] [:error] [pid 2484:tid 2491] [client 172.192.48.213:31978] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaaa.php"] [unique_id "aV-vkTiDlnlaQQK_AEOTJgAAAUU"]
[Thu Jan 08 21:22:27.147697 2026] [:error] [pid 7586:tid 7591] [client 172.192.48.213:45093] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbbb.php"] [unique_id "aV-vk8Jyk37GdXP5TmVyvQAAAcM"]
[Thu Jan 08 21:22:28.202162 2026] [:error] [pid 15263:tid 15285] [client 172.192.48.213:33437] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbbb.php"] [unique_id "aV-vlNv61bxum7WG_e8JcQAAAA0"]
[Thu Jan 08 21:22:30.420220 2026] [:error] [pid 17404:tid 17424] [client 172.192.48.213:31945] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbbb.php"] [unique_id "aV-vlmVd_oH193N6AnXEYwAAAZI"]
[Thu Jan 08 21:22:32.295075 2026] [:error] [pid 15264:tid 15315] [client 172.192.48.213:32560] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbbb.php"] [unique_id "aV-vmIov6_kvS0Owh-oW8wAAAFA"]
[Thu Jan 08 21:22:34.317312 2026] [:error] [pid 2424:tid 2428] [client 172.192.48.213:32535] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cccc.php"] [unique_id "aV-vmrTDJR8aofkBk9QwRQAAAQI"]
[Thu Jan 08 21:22:35.848717 2026] [:error] [pid 17404:tid 17425] [client 172.192.48.213:33451] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cccc.php"] [unique_id "aV-vm2Vd_oH193N6AnXEbwAAAZM"]
[Thu Jan 08 21:22:39.051862 2026] [:error] [pid 2424:tid 2449] [client 172.192.48.213:33433] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cccc.php"] [unique_id "aV-vn7TDJR8aofkBk9QwSQAAARc"]
[Thu Jan 08 21:22:40.915072 2026] [:error] [pid 17404:tid 17407] [client 172.192.48.213:32564] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cccc.php"] [unique_id "aV-voGVd_oH193N6AnXEdgAAAYE"]
[Thu Jan 08 21:22:43.380392 2026] [:error] [pid 2424:tid 2435] [client 172.192.48.213:34281] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aV-vo7TDJR8aofkBk9QwSwAAAQk"]
[Thu Jan 08 21:22:44.845475 2026] [:error] [pid 15263:tid 15276] [client 172.192.48.213:45061] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aV-vpNv61bxum7WG_e8JdgAAAAQ"]
[Thu Jan 08 21:22:46.067667 2026] [:error] [pid 15265:tid 15343] [client 172.192.48.213:52409] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aV-vpqE6VBKhew2LTFRRfwAAAJE"]
[Thu Jan 08 21:22:46.675439 2026] [:error] [pid 15265:tid 15341] [client 172.192.48.213:47409] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aV-vpqE6VBKhew2LTFRRgQAAAI8"]
[Thu Jan 08 21:22:47.682028 2026] [:error] [pid 15358:tid 15370] [client 172.192.48.213:46120] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aV-vpyoRk9xWJ3toSBKE2gAAAMA"]
[Thu Jan 08 21:22:48.265538 2026] [:error] [pid 2484:tid 2503] [client 172.192.48.213:31984] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aV-vqDiDlnlaQQK_AEOTQgAAAU8"]
[Thu Jan 08 21:23:30.522493 2026] [:error] [pid 2484:tid 2511] [client 172.192.48.213:12582] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/963e.php"] [unique_id "aV-v0jiDlnlaQQK_AEOTcwAAAVc"]
[Thu Jan 08 21:23:31.644830 2026] [:error] [pid 2424:tid 2446] [client 172.192.48.213:46059] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/963e.php"] [unique_id "aV-v07TDJR8aofkBk9QwkwAAARQ"]
[Thu Jan 08 21:23:32.279021 2026] [:error] [pid 2484:tid 2497] [client 172.192.48.213:41621] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/963e.php"] [unique_id "aV-v1DiDlnlaQQK_AEOTdgAAAUo"]
[Thu Jan 08 21:23:32.639075 2026] [:error] [pid 2484:tid 2503] [client 172.192.48.213:46034] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/963e.php"] [unique_id "aV-v1DiDlnlaQQK_AEOTeAAAAU8"]
[Thu Jan 08 21:23:33.726134 2026] [:error] [pid 7586:tid 7597] [client 172.192.48.213:12306] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hk.php"] [unique_id "aV-v1cJyk37GdXP5TmVy9QAAAck"]
[Thu Jan 08 21:23:34.302828 2026] [:error] [pid 15263:tid 15279] [client 172.192.48.213:41630] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hk.php"] [unique_id "aV-v1tv61bxum7WG_e8JkwAAAAc"]
[Thu Jan 08 21:23:35.028494 2026] [:error] [pid 7586:tid 7589] [client 172.192.48.213:42825] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hk.php"] [unique_id "aV-v18Jyk37GdXP5TmVy-AAAAcE"]
[Thu Jan 08 21:23:36.194738 2026] [:error] [pid 7586:tid 7606] [client 172.192.48.213:41615] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hk.php"] [unique_id "aV-v2MJyk37GdXP5TmVy-QAAAdA"]
[Thu Jan 08 21:23:37.712863 2026] [:error] [pid 2484:tid 2502] [client 172.192.48.213:36501] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cjfuns.php"] [unique_id "aV-v2TiDlnlaQQK_AEOTgQAAAU4"]
[Thu Jan 08 21:23:39.618758 2026] [:error] [pid 17404:tid 17427] [client 172.192.48.213:13207] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cjfuns.php"] [unique_id "aV-v22Vd_oH193N6AnXEqgAAAZU"]
[Thu Jan 08 21:23:40.626560 2026] [:error] [pid 2484:tid 2504] [client 172.192.48.213:37845] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cjfuns.php"] [unique_id "aV-v3DiDlnlaQQK_AEOThAAAAVA"]
[Thu Jan 08 21:23:41.998514 2026] [:error] [pid 2424:tid 2443] [client 172.192.48.213:12303] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cjfuns.php"] [unique_id "aV-v3bTDJR8aofkBk9QwpgAAARE"]
[Thu Jan 08 21:23:43.056622 2026] [:error] [pid 2424:tid 2436] [client 172.192.48.213:36481] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akk.php"] [unique_id "aV-v37TDJR8aofkBk9QwpwAAAQo"]
[Thu Jan 08 21:23:43.550105 2026] [:error] [pid 2484:tid 2499] [client 172.192.48.213:13184] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akk.php"] [unique_id "aV-v3ziDlnlaQQK_AEOThgAAAUw"]
[Thu Jan 08 21:23:44.136389 2026] [:error] [pid 15263:tid 15274] [client 172.192.48.213:37140] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akk.php"] [unique_id "aV-v4Nv61bxum7WG_e8JrgAAAAI"]
[Thu Jan 08 21:23:44.780985 2026] [:error] [pid 7586:tid 7605] [client 172.192.48.213:45713] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akk.php"] [unique_id "aV-v4MJyk37GdXP5TmVzBQAAAc8"]
[Thu Jan 08 21:23:46.125429 2026] [:error] [pid 2424:tid 2440] [client 172.192.48.213:24189] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpa.php"] [unique_id "aV-v4rTDJR8aofkBk9QwrwAAAQ4"]
[Thu Jan 08 21:23:46.822751 2026] [:error] [pid 7586:tid 7593] [client 172.192.48.213:24168] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpa.php"] [unique_id "aV-v4sJyk37GdXP5TmVzCgAAAcU"]
[Thu Jan 08 21:23:47.668193 2026] [:error] [pid 15265:tid 15339] [client 172.192.48.213:46035] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpa.php"] [unique_id "aV-v46E6VBKhew2LTFRRrgAAAI0"]
[Thu Jan 08 21:23:49.225608 2026] [:error] [pid 15265:tid 15335] [client 172.192.48.213:37875] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpa.php"] [unique_id "aV-v5aE6VBKhew2LTFRRsAAAAIk"]
[Thu Jan 08 21:23:50.253696 2026] [:error] [pid 15358:tid 15379] [client 172.192.48.213:45712] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rrr.php"] [unique_id "aV-v5ioRk9xWJ3toSBKFCwAAAMk"]
[Thu Jan 08 21:23:50.820913 2026] [:error] [pid 2484:tid 2497] [client 172.192.48.213:37837] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rrr.php"] [unique_id "aV-v5jiDlnlaQQK_AEOTkgAAAUo"]
[Thu Jan 08 21:23:51.783966 2026] [:error] [pid 2424:tid 2427] [client 172.192.48.213:56214] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rrr.php"] [unique_id "aV-v57TDJR8aofkBk9QwuQAAAQE"]
[Thu Jan 08 21:23:52.420415 2026] [:error] [pid 15358:tid 15390] [client 172.192.48.213:37852] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rrr.php"] [unique_id "aV-v6CoRk9xWJ3toSBKFDQAAANQ"]
[Thu Jan 08 21:23:53.306465 2026] [:error] [pid 15265:tid 15350] [client 172.192.48.213:13259] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "aV-v6aE6VBKhew2LTFRRuQAAAJg"]
[Thu Jan 08 21:23:54.221427 2026] [:error] [pid 17404:tid 17420] [client 172.192.48.213:37871] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "aV-v6mVd_oH193N6AnXEuQAAAY4"]
[Thu Jan 08 21:23:54.897669 2026] [:error] [pid 2424:tid 2450] [client 172.192.48.213:12831] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "aV-v6rTDJR8aofkBk9QwxQAAARg"]
[Thu Jan 08 21:23:55.696776 2026] [:error] [pid 2424:tid 2429] [client 172.192.48.213:30704] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "aV-v67TDJR8aofkBk9QwyQAAAQM"]
[Thu Jan 08 21:23:56.083627 2026] [:error] [pid 15264:tid 15313] [client 172.192.48.213:37121] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x0x.php"] [unique_id "aV-v7Iov6_kvS0Owh-oXIAAAAE4"]
[Thu Jan 08 21:23:56.843347 2026] [:error] [pid 15264:tid 15319] [client 172.192.48.213:12823] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x0x.php"] [unique_id "aV-v7Iov6_kvS0Owh-oXJAAAAFQ"]
[Thu Jan 08 21:23:58.354544 2026] [:error] [pid 17404:tid 17430] [client 172.192.48.213:24131] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x0x.php"] [unique_id "aV-v7mVd_oH193N6AnXEvQAAAZg"]
[Thu Jan 08 21:23:59.282411 2026] [:error] [pid 2484:tid 2487] [client 172.192.48.213:30678] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x0x.php"] [unique_id "aV-v7ziDlnlaQQK_AEOTmgAAAUE"]
[Thu Jan 08 21:24:00.910900 2026] [:error] [pid 15265:tid 15337] [client 172.192.48.213:56252] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aV-v8KE6VBKhew2LTFRRwQAAAIs"]
[Thu Jan 08 21:24:01.876631 2026] [:error] [pid 15264:tid 15304] [client 172.192.48.213:30712] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aV-v8Yov6_kvS0Owh-oXMAAAAEU"]
[Thu Jan 08 21:24:03.183421 2026] [:error] [pid 2424:tid 2443] [client 172.192.48.213:41726] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aV-v87TDJR8aofkBk9Qw1QAAARE"]
[Thu Jan 08 21:24:04.340063 2026] [:error] [pid 2424:tid 2450] [client 172.192.48.213:30692] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aV-v9LTDJR8aofkBk9Qw1gAAARg"]
[Thu Jan 08 21:24:05.092418 2026] [:error] [pid 2484:tid 2493] [client 172.192.48.213:24189] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aV-v9TiDlnlaQQK_AEOTowAAAUY"]
[Thu Jan 08 21:24:06.445029 2026] [:error] [pid 2484:tid 2487] [client 172.192.48.213:28247] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aV-v9jiDlnlaQQK_AEOTqQAAAUE"]
[Thu Jan 08 21:24:08.047288 2026] [:error] [pid 17404:tid 17428] [client 172.192.48.213:13308] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aV-v-GVd_oH193N6AnXE0wAAAZY"]
[Thu Jan 08 21:24:09.160722 2026] [:error] [pid 17404:tid 17409] [client 172.192.48.213:41701] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aV-v-WVd_oH193N6AnXE2gAAAYM"]
[Thu Jan 08 21:24:12.105366 2026] [:error] [pid 2424:tid 2446] [client 172.192.48.213:28236] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aV-v_LTDJR8aofkBk9Qw5wAAARQ"]
[Thu Jan 08 21:24:13.968907 2026] [:error] [pid 15263:tid 15295] [client 172.192.48.213:13257] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aV-v_dv61bxum7WG_e8JyAAAABc"]
[Thu Jan 08 21:24:16.264281 2026] [:error] [pid 2424:tid 2440] [client 172.192.48.213:30618] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aV-wALTDJR8aofkBk9Qw8QAAAQ4"]
[Thu Jan 08 21:24:18.173935 2026] [:error] [pid 2424:tid 2427] [client 172.192.48.213:28220] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aV-wArTDJR8aofkBk9Qw9AAAAQE"]
[Thu Jan 08 21:24:19.648022 2026] [:error] [pid 2424:tid 2437] [client 172.192.48.213:30622] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aV-wA7TDJR8aofkBk9Qw9wAAAQs"]
[Thu Jan 08 21:24:21.468014 2026] [:error] [pid 2424:tid 2445] [client 172.192.48.213:34693] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aV-wBbTDJR8aofkBk9Qw-QAAARM"]
[Thu Jan 08 21:24:22.279824 2026] [:error] [pid 2424:tid 2441] [client 172.192.48.213:30638] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aV-wBrTDJR8aofkBk9Qw-wAAAQ8"]
[Thu Jan 08 21:24:22.955981 2026] [:error] [pid 2424:tid 2440] [client 172.192.48.213:40680] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aV-wBrTDJR8aofkBk9Qw_QAAAQ4"]
[Thu Jan 08 21:24:23.746581 2026] [:error] [pid 15264:tid 15307] [client 172.192.48.213:30636] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/031.php"] [unique_id "aV-wB4ov6_kvS0Owh-oXOAAAAEg"]
[Thu Jan 08 21:24:25.425660 2026] [:error] [pid 15265:tid 15346] [client 172.192.48.213:31879] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/031.php"] [unique_id "aV-wCaE6VBKhew2LTFRR0AAAAJQ"]
[Thu Jan 08 21:24:25.842712 2026] [:error] [pid 7586:tid 7605] [client 172.192.48.213:40666] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/031.php"] [unique_id "aV-wCcJyk37GdXP5TmVzJQAAAc8"]
[Thu Jan 08 21:24:27.005604 2026] [:error] [pid 7586:tid 7589] [client 172.192.48.213:43543] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/031.php"] [unique_id "aV-wC8Jyk37GdXP5TmVzJwAAAcE"]
[Thu Jan 08 21:24:31.133079 2026] [:error] [pid 7586:tid 7588] [client 172.192.48.213:43533] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aV-wD8Jyk37GdXP5TmVzLwAAAcA"]
[Thu Jan 08 21:24:32.251126 2026] [:error] [pid 2484:tid 2511] [client 172.192.48.213:40668] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aV-wEDiDlnlaQQK_AEOTugAAAVc"]
[Thu Jan 08 21:24:34.077539 2026] [:error] [pid 15358:tid 15383] [client 172.192.48.213:13100] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aV-wEioRk9xWJ3toSBKFJgAAAM0"]
[Thu Jan 08 21:24:35.897879 2026] [:error] [pid 2424:tid 2433] [client 172.192.48.213:43547] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aV-wE7TDJR8aofkBk9QxDAAAAQc"]
[Thu Jan 08 21:24:36.613559 2026] [:error] [pid 2484:tid 2508] [client 172.192.48.213:26026] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aV-wFDiDlnlaQQK_AEOTvgAAAVQ"]
[Thu Jan 08 21:24:37.553356 2026] [:error] [pid 15263:tid 15282] [client 172.192.48.213:43559] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aV-wFdv61bxum7WG_e8J4QAAAAo"]
[Thu Jan 08 21:24:39.405006 2026] [:error] [pid 7586:tid 7588] [client 172.192.48.213:26502] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aV-wF8Jyk37GdXP5TmVzOwAAAcA"]
[Thu Jan 08 21:24:39.741470 2026] [:error] [pid 7586:tid 7613] [client 172.192.48.213:26497] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aV-wF8Jyk37GdXP5TmVzPQAAAdc"]
[Thu Jan 08 21:24:40.307471 2026] [:error] [pid 7586:tid 7599] [client 172.192.48.213:42234] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aV-wGMJyk37GdXP5TmVzPwAAAcs"]
[Thu Jan 08 21:24:41.293852 2026] [:error] [pid 15264:tid 15315] [client 172.192.48.213:26029] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aV-wGYov6_kvS0Owh-oXSwAAAFA"]
[Thu Jan 08 21:24:42.337634 2026] [:error] [pid 15263:tid 15284] [client 172.192.48.213:43544] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aV-wGtv61bxum7WG_e8J5wAAAAw"]
[Thu Jan 08 21:24:44.325958 2026] [:error] [pid 2484:tid 2507] [client 172.192.48.213:26540] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aV-wHDiDlnlaQQK_AEOTwQAAAVM"]
[Thu Jan 08 21:24:46.501373 2026] [:error] [pid 15263:tid 15296] [client 172.192.48.213:33145] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell1.php"] [unique_id "aV-wHtv61bxum7WG_e8J7QAAABg"]
[Thu Jan 08 21:24:48.065428 2026] [:error] [pid 15263:tid 15274] [client 172.192.48.213:26551] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell1.php"] [unique_id "aV-wINv61bxum7WG_e8J7wAAAAI"]
[Thu Jan 08 21:24:52.053784 2026] [:error] [pid 2424:tid 2442] [client 172.192.48.213:42185] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell1.php"] [unique_id "aV-wJLTDJR8aofkBk9QxHgAAARA"]
[Thu Jan 08 21:24:53.532100 2026] [:error] [pid 15265:tid 15341] [client 172.192.48.213:12972] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell1.php"] [unique_id "aV-wJaE6VBKhew2LTFRR5wAAAI8"]
[Thu Jan 08 21:24:55.184173 2026] [:error] [pid 2484:tid 2510] [client 172.192.48.213:26557] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aV-wJziDlnlaQQK_AEOT0wAAAVY"]
[Thu Jan 08 21:24:56.174992 2026] [:error] [pid 2484:tid 2491] [client 172.192.48.213:12379] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aV-wKDiDlnlaQQK_AEOT2gAAAUU"]
[Thu Jan 08 21:24:57.744103 2026] [:error] [pid 15264:tid 15313] [client 172.192.48.213:32594] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aV-wKYov6_kvS0Owh-oXXAAAAE4"]
[Thu Jan 08 21:24:58.430092 2026] [:error] [pid 15358:tid 15378] [client 172.192.48.213:12365] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aV-wKioRk9xWJ3toSBKFOwAAAMg"]
[Thu Jan 08 21:25:00.464434 2026] [:error] [pid 7586:tid 7589] [client 172.192.48.213:12937] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "aV-wLMJyk37GdXP5TmVzRQAAAcE"]
[Thu Jan 08 21:25:02.077457 2026] [:error] [pid 15263:tid 15273] [client 172.192.48.213:42204] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "aV-wLtv61bxum7WG_e8KBQAAAAE"]
[Thu Jan 08 21:25:03.374990 2026] [:error] [pid 15264:tid 15308] [client 172.192.48.213:42189] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "aV-wL4ov6_kvS0Owh-oXYgAAAEk"]
[Thu Jan 08 21:25:04.654540 2026] [:error] [pid 15264:tid 15300] [client 172.192.48.213:32591] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "aV-wMIov6_kvS0Owh-oXZgAAAEE"]
[Thu Jan 08 21:25:05.995061 2026] [:error] [pid 2484:tid 2510] [client 172.192.48.213:27745] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hexx.php"] [unique_id "aV-wMTiDlnlaQQK_AEOT7QAAAVY"]
[Thu Jan 08 21:25:07.333151 2026] [:error] [pid 7586:tid 7614] [client 172.192.48.213:25174] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hexx.php"] [unique_id "aV-wM8Jyk37GdXP5TmVzTwAAAdg"]
[Thu Jan 08 21:25:08.549496 2026] [:error] [pid 15358:tid 15387] [client 172.192.48.213:27723] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hexx.php"] [unique_id "aV-wNCoRk9xWJ3toSBKFSQAAANE"]
[Thu Jan 08 21:25:09.428690 2026] [:error] [pid 7586:tid 7609] [client 172.192.48.213:38420] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hexx.php"] [unique_id "aV-wNcJyk37GdXP5TmVzUQAAAdM"]
[Thu Jan 08 21:25:10.965741 2026] [:error] [pid 15265:tid 15339] [client 172.192.48.213:28681] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/444.php"] [unique_id "aV-wNqE6VBKhew2LTFRR-QAAAI0"]
[Thu Jan 08 21:25:11.810658 2026] [:error] [pid 15265:tid 15328] [client 172.192.48.213:45681] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/444.php"] [unique_id "aV-wN6E6VBKhew2LTFRR_QAAAII"]
[Thu Jan 08 21:25:13.168213 2026] [:error] [pid 2424:tid 2441] [client 172.192.48.213:38431] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/444.php"] [unique_id "aV-wObTDJR8aofkBk9QxQwAAAQ8"]
[Thu Jan 08 21:25:13.901467 2026] [:error] [pid 15263:tid 15290] [client 172.192.48.213:24680] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/444.php"] [unique_id "aV-wOdv61bxum7WG_e8KEAAAABI"]
[Thu Jan 08 21:25:14.646463 2026] [:error] [pid 2484:tid 2491] [client 172.192.48.213:45684] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aV-wOjiDlnlaQQK_AEOT_wAAAUU"]
[Thu Jan 08 21:25:15.393805 2026] [:error] [pid 17404:tid 17429] [client 172.192.48.213:24686] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aV-wO2Vd_oH193N6AnXFMgAAAZc"]
[Thu Jan 08 21:25:16.008020 2026] [:error] [pid 17404:tid 17413] [client 172.192.48.213:25201] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aV-wPGVd_oH193N6AnXFNAAAAYc"]
[Thu Jan 08 21:25:18.702508 2026] [:error] [pid 7586:tid 7591] [client 172.192.48.213:28722] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aV-wPsJyk37GdXP5TmVzVQAAAcM"]
[Thu Jan 08 21:25:21.573829 2026] [:error] [pid 17404:tid 17409] [client 172.192.48.213:24673] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aV-wQWVd_oH193N6AnXFPAAAAYM"]
[Thu Jan 08 21:25:23.318885 2026] [:error] [pid 17404:tid 17418] [client 172.192.48.213:25217] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aV-wQ2Vd_oH193N6AnXFQgAAAYw"]
[Thu Jan 08 21:25:25.171885 2026] [:error] [pid 15265:tid 15350] [client 172.192.48.213:27249] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aV-wRaE6VBKhew2LTFRSBwAAAJg"]
[Thu Jan 08 21:25:26.885738 2026] [:error] [pid 15358:tid 15383] [client 172.192.48.213:27247] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aV-wRioRk9xWJ3toSBKFaQAAAM0"]
[Thu Jan 08 21:25:27.268769 2026] [:error] [pid 17404:tid 17409] [client 172.192.48.213:27248] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aV-wR2Vd_oH193N6AnXFTQAAAYM"]
[Thu Jan 08 21:25:28.009049 2026] [:error] [pid 2484:tid 2508] [client 172.192.48.213:24658] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aV-wSDiDlnlaQQK_AEOUDQAAAVQ"]
[Thu Jan 08 21:25:48.238343 2026] [:error] [pid 15358:tid 15392] [client 172.192.48.213:25200] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aV-wXCoRk9xWJ3toSBKFgQAAANY"]
[Thu Jan 08 21:25:50.155545 2026] [:error] [pid 15265:tid 15332] [client 172.192.48.213:24684] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aV-wXqE6VBKhew2LTFRSIwAAAIY"]
[Thu Jan 08 21:25:51.405607 2026] [:error] [pid 15265:tid 15341] [client 172.192.48.213:12673] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aV-wX6E6VBKhew2LTFRSJwAAAI8"]
[Thu Jan 08 21:25:52.502779 2026] [:error] [pid 2484:tid 2510] [client 172.192.48.213:12723] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zfile.php"] [unique_id "aV-wYDiDlnlaQQK_AEOUKwAAAVY"]
[Thu Jan 08 21:25:53.535201 2026] [:error] [pid 17404:tid 17412] [client 172.192.48.213:46948] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aV-wYWVd_oH193N6AnXFYQAAAYY"]
[Thu Jan 08 21:25:55.257058 2026] [:error] [pid 2484:tid 2486] [client 172.192.48.213:28715] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aV-wYziDlnlaQQK_AEOUMgAAAUA"]
[Thu Jan 08 21:25:56.728713 2026] [:error] [pid 2484:tid 2496] [client 172.192.48.213:28687] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aV-wZDiDlnlaQQK_AEOUNQAAAUk"]
[Thu Jan 08 21:25:58.401868 2026] [:error] [pid 7586:tid 7608] [client 172.192.48.213:46945] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/conflg.php"] [unique_id "aV-wZsJyk37GdXP5TmVzagAAAdI"]
[Thu Jan 08 21:25:59.765775 2026] [:error] [pid 15264:tid 15316] [client 172.192.48.213:37201] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aV-wZ4ov6_kvS0Owh-oXmAAAAFE"]
[Thu Jan 08 21:26:00.916284 2026] [:error] [pid 15358:tid 15381] [client 172.192.48.213:29379] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aV-waCoRk9xWJ3toSBKFhgAAAMs"]
[Thu Jan 08 21:26:02.371082 2026] [:error] [pid 15263:tid 15296] [client 172.192.48.213:33493] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aV-watv61bxum7WG_e8KOQAAABg"]
[Thu Jan 08 21:26:04.334677 2026] [:error] [pid 15265:tid 15326] [client 172.192.48.213:34210] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aV-wbKE6VBKhew2LTFRSUgAAAIA"]
[Thu Jan 08 21:26:05.390067 2026] [:error] [pid 2484:tid 2503] [client 172.192.48.213:25158] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aV-wbTiDlnlaQQK_AEOUdAAAAU8"]
[Thu Jan 08 21:26:06.353087 2026] [:error] [pid 2424:tid 2440] [client 172.192.48.213:33499] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aV-wbrTDJR8aofkBk9QxYgAAAQ4"]
[Thu Jan 08 21:26:08.485235 2026] [:error] [pid 15358:tid 15391] [client 172.192.48.213:34182] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aV-wcCoRk9xWJ3toSBKFjgAAANU"]
[Thu Jan 08 21:26:09.651335 2026] [:error] [pid 15358:tid 15382] [client 172.192.48.213:24205] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aV-wcSoRk9xWJ3toSBKFkAAAAMw"]
[Thu Jan 08 21:26:10.311951 2026] [:error] [pid 2484:tid 2489] [client 172.192.48.213:27248] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aV-wcjiDlnlaQQK_AEOUdwAAAUM"]
[Thu Jan 08 21:26:11.182856 2026] [:error] [pid 2484:tid 2505] [client 172.192.48.213:24721] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aV-wcziDlnlaQQK_AEOUeAAAAVE"]
[Thu Jan 08 21:26:12.419099 2026] [:error] [pid 15265:tid 15345] [client 172.192.48.213:27692] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aV-wdKE6VBKhew2LTFRSWAAAAJM"]
[Thu Jan 08 21:26:13.444938 2026] [:error] [pid 15264:tid 15314] [client 172.192.48.213:27700] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aV-wdYov6_kvS0Owh-oXngAAAE8"]
[Thu Jan 08 21:26:14.693949 2026] [:error] [pid 15265:tid 15346] [client 172.192.48.213:34176] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aV-wdqE6VBKhew2LTFRSXQAAAJQ"]
[Thu Jan 08 21:26:15.744964 2026] [:error] [pid 15265:tid 15340] [client 172.192.48.213:24227] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aV-wd6E6VBKhew2LTFRSYQAAAI4"]
[Thu Jan 08 21:26:16.702732 2026] [:error] [pid 15265:tid 15326] [client 172.192.48.213:29397] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aV-weKE6VBKhew2LTFRSYgAAAIA"]
[Thu Jan 08 21:26:17.982789 2026] [:error] [pid 15264:tid 15315] [client 172.192.48.213:34204] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "aV-weYov6_kvS0Owh-oXowAAAFA"]
[Thu Jan 08 21:26:18.442648 2026] [:error] [pid 15265:tid 15343] [client 172.192.48.213:24681] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/406.php"] [unique_id "aV-weqE6VBKhew2LTFRSZAAAAJE"]
[Thu Jan 08 21:26:19.387243 2026] [:error] [pid 15265:tid 15333] [client 172.192.48.213:25182] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/406.php"] [unique_id "aV-we6E6VBKhew2LTFRSaQAAAIc"]
[Thu Jan 08 21:26:20.873313 2026] [:error] [pid 15265:tid 15339] [client 172.192.48.213:25190] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/406.php"] [unique_id "aV-wfKE6VBKhew2LTFRSawAAAI0"]
[Thu Jan 08 21:26:22.179158 2026] [:error] [pid 15358:tid 15387] [client 172.192.48.213:27687] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/406.php"] [unique_id "aV-wfioRk9xWJ3toSBKFlwAAANE"]
[Thu Jan 08 21:26:23.885638 2026] [:error] [pid 15264:tid 15322] [client 172.192.48.213:26483] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aV-wf4ov6_kvS0Owh-oXpgAAAFc"]
[Thu Jan 08 21:26:24.886622 2026] [:error] [pid 15263:tid 15272] [client 172.192.48.213:45013] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aV-wgNv61bxum7WG_e8KQQAAAAA"]
[Thu Jan 08 21:26:25.237640 2026] [:error] [pid 15265:tid 15350] [client 172.192.48.213:29420] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aV-wgaE6VBKhew2LTFRSdAAAAJg"]
[Thu Jan 08 21:26:26.212628 2026] [:error] [pid 15263:tid 15284] [client 172.192.48.213:25203] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r.php"] [unique_id "aV-wgtv61bxum7WG_e8KRAAAAAw"]
[Thu Jan 08 21:26:27.875602 2026] [:error] [pid 7586:tid 7597] [client 172.192.48.213:24647] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aV-wg8Jyk37GdXP5TmVzrQAAAck"]
[Thu Jan 08 21:26:29.806146 2026] [:error] [pid 2424:tid 2426] [client 172.192.48.213:24689] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aV-whbTDJR8aofkBk9QxqgAAAQA"]
[Thu Jan 08 21:26:30.719011 2026] [:error] [pid 2484:tid 2508] [client 172.192.48.213:29386] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aV-whjiDlnlaQQK_AEOUggAAAVQ"]
[Thu Jan 08 21:26:31.780327 2026] [:error] [pid 17404:tid 17411] [client 172.192.48.213:28711] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aV-wh2Vd_oH193N6AnXFjgAAAYU"]
[Thu Jan 08 21:26:33.145124 2026] [:error] [pid 15265:tid 15347] [client 172.192.48.213:29399] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aV-wiaE6VBKhew2LTFRSfAAAAJU"]
[Thu Jan 08 21:26:34.431391 2026] [:error] [pid 15358:tid 15378] [client 172.192.48.213:31296] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aV-wiioRk9xWJ3toSBKF4QAAAMg"]
[Thu Jan 08 21:26:35.423650 2026] [:error] [pid 15358:tid 15379] [client 172.192.48.213:41170] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aV-wiyoRk9xWJ3toSBKF4gAAAMk"]
[Thu Jan 08 21:26:37.008159 2026] [:error] [pid 15263:tid 15286] [client 172.192.48.213:24659] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aV-wjdv61bxum7WG_e8KVQAAAA4"]
[Thu Jan 08 21:26:38.671062 2026] [:error] [pid 2484:tid 2507] [client 172.192.48.213:26450] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aV-wjjiDlnlaQQK_AEOUiAAAAVM"]
[Thu Jan 08 21:26:40.827916 2026] [:error] [pid 2484:tid 2497] [client 172.192.48.213:24204] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aV-wkDiDlnlaQQK_AEOUjQAAAUo"]
[Thu Jan 08 21:26:41.572370 2026] [:error] [pid 15263:tid 15279] [client 172.192.48.213:36552] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aV-wkdv61bxum7WG_e8KVgAAAAc"]
[Thu Jan 08 21:26:42.736655 2026] [:error] [pid 7586:tid 7608] [client 172.192.48.213:36556] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aV-wksJyk37GdXP5TmVzswAAAdI"]
[Thu Jan 08 21:26:44.574498 2026] [:error] [pid 2484:tid 2487] [client 172.192.48.213:25199] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aV-wlDiDlnlaQQK_AEOUkwAAAUE"]
[Thu Jan 08 21:27:58.845601 2026] [:error] [pid 2424:tid 2440] [client 172.192.48.213:40081] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aV-w3rTDJR8aofkBk9QyBQAAAQ4"]
[Thu Jan 08 21:28:01.164445 2026] [:error] [pid 15358:tid 15394] [client 172.192.48.213:13240] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aV-w4SoRk9xWJ3toSBKGMwAAANg"]
[Thu Jan 08 21:28:02.151007 2026] [:error] [pid 15264:tid 15304] [client 172.192.48.213:12867] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aV-w4oov6_kvS0Owh-oYDQAAAEU"]
[Thu Jan 08 21:28:03.814170 2026] [:error] [pid 7586:tid 7590] [client 172.192.48.213:12448] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aV-w48Jyk37GdXP5TmVz6QAAAcI"]
[Thu Jan 08 21:28:04.932077 2026] [:error] [pid 15358:tid 15371] [client 172.192.48.213:40095] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aV-w5CoRk9xWJ3toSBKGOgAAAME"]
[Thu Jan 08 21:28:05.871268 2026] [:error] [pid 15263:tid 15277] [client 172.192.48.213:46088] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aV-w5dv61bxum7WG_e8KhgAAAAU"]
[Thu Jan 08 21:28:07.090719 2026] [:error] [pid 2424:tid 2444] [client 172.192.48.213:12442] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aV-w57TDJR8aofkBk9QyDgAAARI"]
[Thu Jan 08 21:28:08.462857 2026] [:error] [pid 2424:tid 2432] [client 172.192.48.213:13227] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aV-w6LTDJR8aofkBk9QyEAAAAQY"]
[Thu Jan 08 21:28:09.600030 2026] [:error] [pid 2424:tid 2436] [client 172.192.48.213:12510] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aV-w6bTDJR8aofkBk9QyEQAAAQo"]
[Thu Jan 08 21:28:10.728715 2026] [:error] [pid 17404:tid 17429] [client 172.192.48.213:40111] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aV-w6mVd_oH193N6AnXFzAAAAZc"]
[Thu Jan 08 21:28:11.734216 2026] [:error] [pid 2484:tid 2501] [client 172.192.48.213:37147] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aV-w6ziDlnlaQQK_AEOVIgAAAU0"]
[Thu Jan 08 21:28:14.000087 2026] [:error] [pid 15358:tid 15387] [client 172.192.48.213:42868] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aV-w7SoRk9xWJ3toSBKGTAAAANE"]
[Thu Jan 08 21:28:15.671778 2026] [:error] [pid 15358:tid 15372] [client 172.192.48.213:12870] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aV-w7yoRk9xWJ3toSBKGUgAAAMI"]
[Thu Jan 08 21:28:17.016100 2026] [:error] [pid 15263:tid 15284] [client 172.192.48.213:24174] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aV-w8dv61bxum7WG_e8KnQAAAAw"]
[Thu Jan 08 21:28:18.774985 2026] [:error] [pid 17404:tid 17410] [client 172.192.48.213:24144] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aV-w8mVd_oH193N6AnXF3wAAAYQ"]
[Thu Jan 08 21:28:20.069047 2026] [:error] [pid 2484:tid 2497] [client 172.192.48.213:12332] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aV-w9DiDlnlaQQK_AEOVPAAAAUo"]
[Thu Jan 08 21:28:21.081092 2026] [:error] [pid 17404:tid 17409] [client 172.192.48.213:24175] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aV-w9WVd_oH193N6AnXF5gAAAYM"]
[Thu Jan 08 21:28:21.805286 2026] [:error] [pid 15264:tid 15311] [client 172.192.48.213:36513] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aV-w9Yov6_kvS0Owh-oYJAAAAEw"]
[Thu Jan 08 21:28:22.555211 2026] [:error] [pid 2484:tid 2509] [client 172.192.48.213:30691] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aV-w9jiDlnlaQQK_AEOVQgAAAVU"]
[Thu Jan 08 21:28:23.601699 2026] [:error] [pid 15358:tid 15393] [client 172.192.48.213:13153] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aV-w9yoRk9xWJ3toSBKGZgAAANc"]
[Thu Jan 08 21:28:24.359988 2026] [:error] [pid 15358:tid 15390] [client 172.192.48.213:30667] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aV-w-CoRk9xWJ3toSBKGaQAAANQ"]
[Thu Jan 08 21:28:25.025561 2026] [:error] [pid 15265:tid 15334] [client 172.192.48.213:24178] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aV-w-aE6VBKhew2LTFRS-AAAAIg"]
[Thu Jan 08 21:28:25.844899 2026] [:error] [pid 2424:tid 2438] [client 172.192.48.213:13256] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aV-w-bTDJR8aofkBk9QyIwAAAQw"]
[Thu Jan 08 21:28:27.727204 2026] [:error] [pid 2424:tid 2433] [client 172.192.48.213:12339] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aV-w-7TDJR8aofkBk9QyJwAAAQc"]
[Thu Jan 08 21:28:28.172504 2026] [:error] [pid 15263:tid 15293] [client 172.192.48.213:36543] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aV-w_Nv61bxum7WG_e8KsAAAABU"]
[Thu Jan 08 21:28:29.452816 2026] [:error] [pid 2424:tid 2431] [client 172.192.48.213:36494] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aV-w_bTDJR8aofkBk9QyKAAAAQU"]
[Thu Jan 08 21:29:18.303782 2026] [:error] [pid 15263:tid 15293] [client 172.192.48.213:30596] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "aV-xLtv61bxum7WG_e8K7AAAABU"]
[Thu Jan 08 21:29:19.405892 2026] [:error] [pid 7586:tid 7591] [client 172.192.48.213:43538] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "aV-xL8Jyk37GdXP5TmV0OgAAAcM"]
[Thu Jan 08 21:29:20.406392 2026] [:error] [pid 7586:tid 7588] [client 172.192.48.213:12840] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "aV-xMMJyk37GdXP5TmV0PgAAAcA"]
[Thu Jan 08 21:29:22.117495 2026] [:error] [pid 2484:tid 2501] [client 172.192.48.213:28252] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "aV-xMjiDlnlaQQK_AEOVnAAAAU0"]
[Thu Jan 08 21:29:23.208832 2026] [:error] [pid 7586:tid 7610] [client 172.192.48.213:40580] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aV-xM8Jyk37GdXP5TmV0RQAAAdQ"]
[Thu Jan 08 21:29:23.915838 2026] [:error] [pid 15265:tid 15346] [client 172.192.48.213:24144] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aV-xM6E6VBKhew2LTFRTSgAAAJQ"]
[Thu Jan 08 21:29:25.427904 2026] [:error] [pid 2484:tid 2502] [client 172.192.48.213:40655] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aV-xNTiDlnlaQQK_AEOVqAAAAU4"]
[Thu Jan 08 21:29:26.455761 2026] [:error] [pid 2424:tid 2428] [client 172.192.48.213:43582] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aV-xNrTDJR8aofkBk9QybgAAAQI"]
[Thu Jan 08 21:29:26.925276 2026] [:error] [pid 2424:tid 2444] [client 172.192.48.213:40582] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aV-xNrTDJR8aofkBk9QybwAAARI"]
[Thu Jan 08 21:29:27.527126 2026] [:error] [pid 15358:tid 15379] [client 172.192.48.213:12831] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aV-xNyoRk9xWJ3toSBKGmgAAAMk"]
[Thu Jan 08 21:29:28.155280 2026] [:error] [pid 15358:tid 15391] [client 172.192.48.213:13100] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aV-xOCoRk9xWJ3toSBKGnAAAANU"]
[Thu Jan 08 21:29:28.895754 2026] [:error] [pid 2424:tid 2443] [client 172.192.48.213:40609] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aV-xOLTDJR8aofkBk9QycQAAARE"]
[Thu Jan 08 21:29:30.148204 2026] [:error] [pid 15358:tid 15378] [client 172.192.48.213:13084] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aV-xOioRk9xWJ3toSBKGnQAAAMg"]
[Thu Jan 08 21:29:30.532934 2026] [:error] [pid 7586:tid 7594] [client 172.192.48.213:12932] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aV-xOsJyk37GdXP5TmV0SwAAAcY"]
[Thu Jan 08 21:29:31.216430 2026] [:error] [pid 15265:tid 15335] [client 172.192.48.213:40637] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aV-xO6E6VBKhew2LTFRTUAAAAIk"]
[Thu Jan 08 21:29:32.220870 2026] [:error] [pid 2484:tid 2493] [client 172.192.48.213:43581] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aV-xPDiDlnlaQQK_AEOVtwAAAUY"]
[Thu Jan 08 21:29:32.959264 2026] [:error] [pid 15265:tid 15326] [client 172.192.48.213:40587] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aV-xPKE6VBKhew2LTFRTUgAAAIA"]
[Thu Jan 08 21:29:35.011366 2026] [:error] [pid 2484:tid 2488] [client 172.192.48.213:13095] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aV-xPziDlnlaQQK_AEOVwQAAAUI"]
[Thu Jan 08 21:29:35.921758 2026] [:error] [pid 2484:tid 2493] [client 172.192.48.213:31895] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aV-xPziDlnlaQQK_AEOVxgAAAUY"]
[Thu Jan 08 21:29:36.380809 2026] [:error] [pid 15265:tid 15332] [client 172.192.48.213:39004] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aV-xQKE6VBKhew2LTFRTWAAAAIY"]
[Thu Jan 08 21:29:37.439710 2026] [:error] [pid 2484:tid 2504] [client 172.192.48.213:45705] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w-1.php"] [unique_id "aV-xQTiDlnlaQQK_AEOVyAAAAVA"]
[Thu Jan 08 21:29:39.048765 2026] [:error] [pid 2484:tid 2494] [client 172.192.48.213:12959] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w-1.php"] [unique_id "aV-xQziDlnlaQQK_AEOVzgAAAUc"]
[Thu Jan 08 21:29:40.409329 2026] [:error] [pid 17404:tid 17425] [client 172.192.48.213:31872] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w-1.php"] [unique_id "aV-xRGVd_oH193N6AnXGEgAAAZM"]
[Thu Jan 08 21:29:41.761366 2026] [:error] [pid 2424:tid 2436] [client 172.192.48.213:12981] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w-1.php"] [unique_id "aV-xRbTDJR8aofkBk9QygwAAAQo"]
[Thu Jan 08 21:29:42.444429 2026] [:error] [pid 15263:tid 15282] [client 172.192.48.213:27713] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aV-xRtv61bxum7WG_e8K8wAAAAo"]
[Thu Jan 08 21:29:43.055439 2026] [:error] [pid 15263:tid 15296] [client 172.192.48.213:27719] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aV-xR9v61bxum7WG_e8K9QAAABg"]
[Thu Jan 08 21:29:44.231250 2026] [:error] [pid 2424:tid 2449] [client 172.192.48.213:27221] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aV-xSLTDJR8aofkBk9QyhwAAARc"]
[Thu Jan 08 21:29:45.163042 2026] [:error] [pid 15358:tid 15377] [client 172.192.48.213:12943] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aV-xSSoRk9xWJ3toSBKGsAAAAMc"]
[Thu Jan 08 21:29:47.892912 2026] [:error] [pid 15264:tid 15320] [client 172.192.48.213:45751] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aV-xS4ov6_kvS0Owh-oYbwAAAFU"]
[Thu Jan 08 21:29:49.050198 2026] [:error] [pid 15358:tid 15375] [client 172.192.48.213:27209] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aV-xTSoRk9xWJ3toSBKGuAAAAMU"]
[Thu Jan 08 21:29:49.829253 2026] [:error] [pid 2484:tid 2498] [client 172.192.48.213:27729] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aV-xTTiDlnlaQQK_AEOV5gAAAUs"]
[Thu Jan 08 21:29:50.773281 2026] [:error] [pid 15264:tid 15318] [client 172.192.48.213:27229] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aV-xToov6_kvS0Owh-oYcQAAAFM"]
[Thu Jan 08 21:29:51.800363 2026] [:error] [pid 2484:tid 2512] [client 172.192.48.213:27251] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aV-xTziDlnlaQQK_AEOV7gAAAVg"]
[Thu Jan 08 21:29:53.899273 2026] [:error] [pid 15358:tid 15388] [client 172.192.48.213:43581] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aV-xUSoRk9xWJ3toSBKGvgAAANI"]
[Thu Jan 08 21:29:56.175757 2026] [:error] [pid 2484:tid 2507] [client 172.192.48.213:32600] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aV-xVDiDlnlaQQK_AEOV9AAAAVM"]
[Thu Jan 08 21:29:56.594429 2026] [:error] [pid 7586:tid 7594] [client 172.192.48.213:25244] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aV-xVMJyk37GdXP5TmV0ZwAAAcY"]
[Thu Jan 08 21:29:57.858396 2026] [:error] [pid 15263:tid 15277] [client 172.192.48.213:32615] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aV-xVdv61bxum7WG_e8LAAAAAAU"]
[Thu Jan 08 21:29:59.554432 2026] [:error] [pid 2484:tid 2508] [client 172.192.48.213:38461] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aV-xVziDlnlaQQK_AEOV-gAAAVQ"]
[Thu Jan 08 21:30:02.180856 2026] [:error] [pid 17404:tid 17418] [client 172.192.48.213:12372] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aV-xWmVd_oH193N6AnXGIgAAAYw"]
[Thu Jan 08 21:30:03.773169 2026] [:error] [pid 17404:tid 17424] [client 172.192.48.213:25234] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aV-xW2Vd_oH193N6AnXGJQAAAZI"]
[Thu Jan 08 21:30:04.869038 2026] [:error] [pid 15265:tid 15326] [client 172.192.48.213:32604] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-widgets.php"] [unique_id "aV-xXKE6VBKhew2LTFRTbwAAAIA"]
[Thu Jan 08 21:30:05.750775 2026] [:error] [pid 15263:tid 15291] [client 172.192.48.213:25251] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-widgets.php"] [unique_id "aV-xXdv61bxum7WG_e8LBwAAABM"]
[Thu Jan 08 21:30:08.646439 2026] [:error] [pid 15264:tid 15299] [client 172.192.48.213:27220] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-widgets.php"] [unique_id "aV-xYIov6_kvS0Owh-oYgQAAAEA"]
[Thu Jan 08 21:30:09.070825 2026] [:error] [pid 15264:tid 15301] [client 172.192.48.213:25253] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-widgets.php"] [unique_id "aV-xYYov6_kvS0Owh-oYhAAAAEI"]
[Thu Jan 08 21:30:09.457879 2026] [:error] [pid 15264:tid 15302] [client 172.192.48.213:26540] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpupex.php"] [unique_id "aV-xYYov6_kvS0Owh-oYhgAAAEM"]
[Thu Jan 08 21:30:10.809998 2026] [:error] [pid 2484:tid 2501] [client 172.192.48.213:32633] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpupex.php"] [unique_id "aV-xYjiDlnlaQQK_AEOWCgAAAU0"]
[Thu Jan 08 21:30:11.544298 2026] [:error] [pid 15264:tid 15308] [client 172.192.48.213:39605] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpupex.php"] [unique_id "aV-xY4ov6_kvS0Owh-oYiQAAAEk"]
[Thu Jan 08 21:30:12.964218 2026] [:error] [pid 7586:tid 7607] [client 172.192.48.213:26525] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpupex.php"] [unique_id "aV-xZMJyk37GdXP5TmV0fgAAAdE"]
[Thu Jan 08 21:30:14.659653 2026] [:error] [pid 15264:tid 15306] [client 172.192.48.213:32609] [client 172.192.48.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/first.php"] [unique_id "aV-xZoov6_kvS0Owh-oYjQAAAEc"]
[Thu Jan 08 21:48:14.555500 2026] [:error] [pid 15358:tid 15383] [client 4.194.190.226:22554] [client 4.194.190.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV-1nioRk9xWJ3toSBKKXQAAAM0"]
[Thu Jan 08 21:48:15.731095 2026] [:error] [pid 2424:tid 2450] [client 4.194.190.226:24154] [client 4.194.190.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV-1n7TDJR8aofkBk9Q4EgAAARg"]
[Thu Jan 08 21:48:16.841581 2026] [:error] [pid 2424:tid 2427] [client 4.194.190.226:24181] [client 4.194.190.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV-1oLTDJR8aofkBk9Q4FgAAAQE"]
[Fri Jan 09 04:38:55.087482 2026] [:error] [pid 35812:tid 35890] [client 104.28.235.60:48359] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aWAV30Ass1qSj44c-n3dxgAAAJA"]
[Fri Jan 09 04:39:15.117687 2026] [:error] [pid 35916:tid 35921] [client 104.28.161.188:33551] [client 104.28.161.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/style.php"] [unique_id "aWAV8_nSLfzabNjOjwyBvgAAAMM"]
[Fri Jan 09 11:19:05.204439 2026] [:error] [pid 30019:tid 30032] [client 143.244.141.160:50097] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aWBzqUz3igHGwX5f7Ip-CAAAAAg"], referer: binance.com
[Fri Jan 09 23:54:43.000900 2026] [:error] [pid 44848:tid 44867] [client 4.194.88.198:9490] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aWEkwqjajoTJAbEk87z2SAAAAFE"]
[Fri Jan 09 23:54:43.234632 2026] [:error] [pid 14770:tid 14776] [client 4.194.88.198:9590] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aWEkwx5QbaVZ-6newJZcMAAAAgQ"]
[Fri Jan 09 23:54:43.434900 2026] [:error] [pid 30020:tid 30074] [client 4.194.88.198:9581] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aWEkw8rjc66qOisG6L32nQAAAJQ"]
[Fri Jan 09 23:54:43.670281 2026] [:error] [pid 44848:tid 44852] [client 4.194.88.198:9558] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aWEkw6jajoTJAbEk87z2SgAAAEI"]
[Fri Jan 09 23:54:43.869690 2026] [:error] [pid 30021:tid 30092] [client 4.194.88.198:9588] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aWEkww_M8aRtsTog5J_EGQAAAMs"]
[Fri Jan 09 23:54:44.046786 2026] [:error] [pid 30021:tid 30098] [client 4.194.88.198:9474] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aWEkxA_M8aRtsTog5J_EGgAAANE"]
[Fri Jan 09 23:54:44.258407 2026] [:error] [pid 44848:tid 44857] [client 4.194.88.198:9543] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aWEkxKjajoTJAbEk87z2SwAAAEc"]
[Fri Jan 09 23:54:44.452795 2026] [:error] [pid 30021:tid 30089] [client 4.194.88.198:9492] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aWEkxA_M8aRtsTog5J_EGwAAAMg"]
[Fri Jan 09 23:54:44.636738 2026] [:error] [pid 44848:tid 44854] [client 4.194.88.198:9484] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aWEkxKjajoTJAbEk87z2TgAAAEQ"]
[Fri Jan 09 23:54:44.891274 2026] [:error] [pid 14801:tid 14827] [client 4.194.88.198:9531] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aWEkxN8UWXrz_OQYgF2DKgAAAlg"]
[Fri Jan 09 23:54:45.071085 2026] [:error] [pid 14831:tid 14840] [client 4.194.88.198:9481] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aWEkxfaKOMCmJcAyBm1YqwAAAoc"]
[Fri Jan 09 23:54:45.250848 2026] [:error] [pid 1366:tid 1389] [client 4.194.88.198:9595] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aWEkxRmasveKu8_ec1WldwAAAZQ"]
[Fri Jan 09 23:54:45.448750 2026] [:error] [pid 14831:tid 14844] [client 4.194.88.198:9598] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aWEkxfaKOMCmJcAyBm1YrAAAAos"]
[Fri Jan 09 23:54:45.621974 2026] [:error] [pid 1366:tid 1371] [client 4.194.88.198:9539] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aWEkxRmasveKu8_ec1WleQAAAYM"]
[Fri Jan 09 23:54:45.796253 2026] [:error] [pid 14801:tid 14812] [client 4.194.88.198:9597] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aWEkxd8UWXrz_OQYgF2DKwAAAkk"]
[Fri Jan 09 23:54:45.987003 2026] [:error] [pid 1366:tid 1376] [client 4.194.88.198:9555] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aWEkxRmasveKu8_ec1WlewAAAYc"]
[Fri Jan 09 23:54:46.160962 2026] [:error] [pid 44848:tid 44858] [client 4.194.88.198:9583] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aWEkxqjajoTJAbEk87z2UgAAAEg"]
[Fri Jan 09 23:54:46.349665 2026] [:error] [pid 1366:tid 1381] [client 4.194.88.198:9562] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aWEkxhmasveKu8_ec1WlfQAAAYw"]
[Fri Jan 09 23:54:46.527927 2026] [:error] [pid 14801:tid 14816] [client 4.194.88.198:9551] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aWEkxt8UWXrz_OQYgF2DLAAAAk0"]
[Fri Jan 09 23:54:46.743499 2026] [:error] [pid 1366:tid 1368] [client 4.194.88.198:9526] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aWEkxhmasveKu8_ec1WlfgAAAYA"]
[Fri Jan 09 23:54:46.961735 2026] [:error] [pid 14872:tid 14890] [client 4.194.88.198:9585] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aWEkxqIUELhgYLNp1sZaLAAAAtA"]
[Fri Jan 09 23:54:47.136120 2026] [:error] [pid 14872:tid 14894] [client 4.194.88.198:9574] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aWEkx6IUELhgYLNp1sZaLQAAAtQ"]
[Fri Jan 09 23:54:47.321271 2026] [:error] [pid 1366:tid 1374] [client 4.194.88.198:9525] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aWEkxxmasveKu8_ec1WlgAAAAYU"]
[Fri Jan 09 23:54:47.505390 2026] [:error] [pid 1366:tid 1391] [client 4.194.88.198:9575] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aWEkxxmasveKu8_ec1WlgQAAAZY"]
[Fri Jan 09 23:54:47.679066 2026] [:error] [pid 1366:tid 1379] [client 4.194.88.198:9522] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aWEkxxmasveKu8_ec1WlggAAAYo"]
[Fri Jan 09 23:54:47.898687 2026] [:error] [pid 30021:tid 30086] [client 4.194.88.198:9537] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aWEkxw_M8aRtsTog5J_EHQAAAMU"]
[Fri Jan 09 23:54:48.085165 2026] [:error] [pid 1366:tid 1375] [client 4.194.88.198:9547] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aWEkyBmasveKu8_ec1WlhAAAAYY"]
[Fri Jan 09 23:54:48.259119 2026] [:error] [pid 1366:tid 1373] [client 4.194.88.198:9534] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aWEkyBmasveKu8_ec1WlhQAAAYQ"]
[Fri Jan 09 23:54:48.467081 2026] [:error] [pid 1366:tid 1378] [client 4.194.88.198:9548] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aWEkyBmasveKu8_ec1WlhwAAAYk"]
[Fri Jan 09 23:54:48.653171 2026] [:error] [pid 1366:tid 1392] [client 4.194.88.198:9565] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aWEkyBmasveKu8_ec1WliAAAAZc"]
[Fri Jan 09 23:54:48.828038 2026] [:error] [pid 1366:tid 1389] [client 4.194.88.198:9580] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aWEkyBmasveKu8_ec1WliQAAAZQ"]
[Fri Jan 09 23:54:49.038495 2026] [:error] [pid 1366:tid 1382] [client 4.194.88.198:9578] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aWEkyRmasveKu8_ec1WligAAAY0"]
[Fri Jan 09 23:54:49.219213 2026] [:error] [pid 14831:tid 14842] [client 4.194.88.198:9491] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aWEkyfaKOMCmJcAyBm1YrQAAAok"]
[Fri Jan 09 23:54:49.431580 2026] [:error] [pid 1366:tid 1376] [client 4.194.88.198:9560] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aWEkyRmasveKu8_ec1WliwAAAYc"]
[Fri Jan 09 23:54:49.627941 2026] [:error] [pid 1366:tid 1381] [client 4.194.88.198:9542] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aWEkyRmasveKu8_ec1WljAAAAYw"]
[Fri Jan 09 23:54:49.835303 2026] [:error] [pid 1366:tid 1385] [client 4.194.88.198:9562] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aWEkyRmasveKu8_ec1WljgAAAZA"]
[Fri Jan 09 23:54:50.071451 2026] [:error] [pid 1366:tid 1386] [client 4.194.88.198:9591] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aWEkyhmasveKu8_ec1WlkAAAAZE"]
[Fri Jan 09 23:54:50.254292 2026] [:error] [pid 14770:tid 14790] [client 4.194.88.198:9566] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aWEkyh5QbaVZ-6newJZcNAAAAhI"]
[Fri Jan 09 23:54:50.511752 2026] [:error] [pid 30021:tid 30097] [client 4.194.88.198:9568] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aWEkyg_M8aRtsTog5J_EHgAAANA"]
[Fri Jan 09 23:54:50.706379 2026] [:error] [pid 30021:tid 30096] [client 4.194.88.198:1990] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aWEkyg_M8aRtsTog5J_EHwAAAM8"]
[Fri Jan 09 23:54:50.885291 2026] [:error] [pid 1366:tid 1368] [client 4.194.88.198:9556] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aWEkyhmasveKu8_ec1WlkQAAAYA"]
[Fri Jan 09 23:54:51.109262 2026] [:error] [pid 30020:tid 30055] [client 4.194.88.198:2011] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aWEky8rjc66qOisG6L32oAAAAIE"]
[Fri Jan 09 23:54:51.281266 2026] [:error] [pid 44848:tid 44863] [client 4.194.88.198:9564] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aWEky6jajoTJAbEk87z2WQAAAE0"]
[Fri Jan 09 23:54:51.522268 2026] [:error] [pid 44848:tid 44867] [client 4.194.88.198:9475] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aWEky6jajoTJAbEk87z2WgAAAFE"]
[Fri Jan 09 23:54:51.741072 2026] [:error] [pid 14770:tid 14784] [client 4.194.88.198:9561] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aWEkyx5QbaVZ-6newJZcNgAAAgw"]
[Fri Jan 09 23:54:51.915852 2026] [:error] [pid 1366:tid 1369] [client 4.194.88.198:9524] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aWEkyxmasveKu8_ec1WllAAAAYE"]
[Fri Jan 09 23:54:52.173207 2026] [:error] [pid 14770:tid 14791] [client 4.194.88.198:1993] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aWEkzB5QbaVZ-6newJZcNwAAAhM"]
[Fri Jan 09 23:54:52.360346 2026] [:error] [pid 30021:tid 30083] [client 4.194.88.198:9523] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aWEkzA_M8aRtsTog5J_EIAAAAMI"]
[Fri Jan 09 23:54:52.554537 2026] [:error] [pid 1366:tid 1380] [client 4.194.88.198:2006] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aWEkzBmasveKu8_ec1WllQAAAYs"]
[Fri Jan 09 23:54:52.759837 2026] [:error] [pid 1366:tid 1392] [client 4.194.88.198:9493] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aWEkzBmasveKu8_ec1WllgAAAZc"]
[Fri Jan 09 23:54:52.940128 2026] [:error] [pid 1366:tid 1376] [client 4.194.88.198:9499] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aWEkzBmasveKu8_ec1WlmAAAAYc"]
[Fri Jan 09 23:54:53.136516 2026] [:error] [pid 1366:tid 1393] [client 4.194.88.198:9592] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aWEkzRmasveKu8_ec1WlmQAAAZg"]
[Fri Jan 09 23:54:53.341069 2026] [:error] [pid 1366:tid 1378] [client 4.194.88.198:9476] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aWEkzRmasveKu8_ec1WlnAAAAYk"]
[Fri Jan 09 23:54:53.584323 2026] [:error] [pid 1366:tid 1386] [client 4.194.88.198:9473] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aWEkzRmasveKu8_ec1WlngAAAZE"]
[Fri Jan 09 23:54:53.783231 2026] [:error] [pid 14770:tid 14786] [client 4.194.88.198:9501] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aWEkzR5QbaVZ-6newJZcOAAAAg4"]
[Fri Jan 09 23:54:53.957515 2026] [:error] [pid 14770:tid 14775] [client 4.194.88.198:9485] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aWEkzR5QbaVZ-6newJZcOQAAAgM"]
[Fri Jan 09 23:54:54.130214 2026] [:error] [pid 1366:tid 1387] [client 4.194.88.198:9495] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aWEkzhmasveKu8_ec1WloAAAAZI"]
[Fri Jan 09 23:54:54.313269 2026] [:error] [pid 1366:tid 1374] [client 4.194.88.198:9517] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aWEkzhmasveKu8_ec1WloQAAAYU"]
[Fri Jan 09 23:54:54.499138 2026] [:error] [pid 14801:tid 14819] [client 4.194.88.198:2024] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aWEkzt8UWXrz_OQYgF2DMAAAAlA"]
[Fri Jan 09 23:54:54.709665 2026] [:error] [pid 14801:tid 14814] [client 4.194.88.198:9472] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aWEkzt8UWXrz_OQYgF2DMQAAAks"]
[Fri Jan 09 23:54:54.943447 2026] [:error] [pid 1366:tid 1369] [client 4.194.88.198:2015] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aWEkzhmasveKu8_ec1WlowAAAYE"]
[Fri Jan 09 23:54:55.130894 2026] [:error] [pid 14801:tid 14818] [client 4.194.88.198:9582] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aWEkz98UWXrz_OQYgF2DMgAAAk8"]
[Fri Jan 09 23:54:55.310587 2026] [:error] [pid 1366:tid 1373] [client 4.194.88.198:9529] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aWEkzxmasveKu8_ec1WlpAAAAYQ"]
[Fri Jan 09 23:54:55.495929 2026] [:error] [pid 1366:tid 1390] [client 4.194.88.198:9523] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aWEkzxmasveKu8_ec1WlpQAAAZU"]
[Fri Jan 09 23:54:55.691929 2026] [:error] [pid 1366:tid 1392] [client 4.194.88.198:2001] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWEkzxmasveKu8_ec1WlpgAAAZc"]
[Fri Jan 09 23:54:55.873143 2026] [:error] [pid 14831:tid 14841] [client 4.194.88.198:9563] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWEkz_aKOMCmJcAyBm1YrgAAAog"]
[Fri Jan 09 23:54:56.068139 2026] [:error] [pid 1366:tid 1382] [client 4.194.88.198:9486] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWEk0BmasveKu8_ec1WlpwAAAY0"]
[Fri Jan 09 23:54:56.298817 2026] [:error] [pid 44848:tid 44853] [client 4.194.88.198:9503] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWEk0KjajoTJAbEk87z2XwAAAEM"]
[Fri Jan 09 23:54:56.495167 2026] [:error] [pid 44848:tid 44861] [client 4.194.88.198:2007] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWEk0KjajoTJAbEk87z2YAAAAEs"]
[Fri Jan 09 23:54:56.700156 2026] [:error] [pid 44848:tid 44873] [client 4.194.88.198:2000] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWEk0KjajoTJAbEk87z2YQAAAFc"]
[Fri Jan 09 23:54:56.896928 2026] [:error] [pid 44848:tid 44858] [client 4.194.88.198:2004] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWEk0KjajoTJAbEk87z2YgAAAEg"]
[Fri Jan 09 23:54:57.083589 2026] [:error] [pid 44848:tid 44874] [client 4.194.88.198:1997] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWEk0ajajoTJAbEk87z2ZAAAAFg"]
[Fri Jan 09 23:54:57.282186 2026] [:error] [pid 14801:tid 14817] [client 4.194.88.198:9496] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aWEk0d8UWXrz_OQYgF2DNAAAAk4"]
[Fri Jan 09 23:54:57.475514 2026] [:error] [pid 14831:tid 14851] [client 4.194.88.198:1988] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aWEk0faKOMCmJcAyBm1YsAAAApI"]
[Fri Jan 09 23:54:57.665902 2026] [:error] [pid 30019:tid 30041] [client 4.194.88.198:1963] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aWEk0Uz3igHGwX5f7IoN5gAAABE"]
[Fri Jan 09 23:54:57.870783 2026] [:error] [pid 14872:tid 14880] [client 4.194.88.198:9478] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aWEk0aIUELhgYLNp1sZaLwAAAsY"]
[Fri Jan 09 23:54:58.050541 2026] [:error] [pid 14872:tid 14888] [client 4.194.88.198:9483] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aWEk0qIUELhgYLNp1sZaMAAAAs4"]
[Fri Jan 09 23:54:58.305060 2026] [:error] [pid 44848:tid 44869] [client 4.194.88.198:9573] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aWEk0qjajoTJAbEk87z2ZwAAAFM"]
[Fri Jan 09 23:54:58.572619 2026] [:error] [pid 14831:tid 14852] [client 4.194.88.198:9494] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aWEk0vaKOMCmJcAyBm1YsQAAApM"]
[Fri Jan 09 23:54:58.824159 2026] [:error] [pid 14739:tid 14742] [client 4.194.88.198:2034] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aWEk0l63M6_PkLt_IJKGWQAAAcE"]
[Fri Jan 09 23:54:59.061416 2026] [:error] [pid 1366:tid 1376] [client 4.194.88.198:9518] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aWEk0xmasveKu8_ec1WlqAAAAYc"]
[Fri Jan 09 23:54:59.263810 2026] [:error] [pid 1366:tid 1375] [client 4.194.88.198:9510] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aWEk0xmasveKu8_ec1WlqQAAAYY"]
[Fri Jan 09 23:54:59.524712 2026] [:error] [pid 30019:tid 30048] [client 4.194.88.198:9572] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aWEk00z3igHGwX5f7IoN5wAAABg"]
[Fri Jan 09 23:54:59.697948 2026] [:error] [pid 1366:tid 1389] [client 4.194.88.198:9599] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aWEk0xmasveKu8_ec1WlqgAAAZQ"]
[Fri Jan 09 23:54:59.903466 2026] [:error] [pid 1366:tid 1378] [client 4.194.88.198:9489] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aWEk0xmasveKu8_ec1WlqwAAAYk"]
[Fri Jan 09 23:55:00.082830 2026] [:error] [pid 44848:tid 44870] [client 4.194.88.198:1985] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aWEk1KjajoTJAbEk87z2aQAAAFQ"]
[Fri Jan 09 23:55:00.269536 2026] [:error] [pid 14872:tid 14881] [client 4.194.88.198:2022] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aWEk1KIUELhgYLNp1sZaMQAAAsc"]
[Fri Jan 09 23:55:00.478285 2026] [:error] [pid 1366:tid 1384] [client 4.194.88.198:9589] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aWEk1BmasveKu8_ec1WlrAAAAY8"]
[Fri Jan 09 23:55:00.657878 2026] [:error] [pid 30020:tid 30064] [client 4.194.88.198:9594] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aWEk1Mrjc66qOisG6L32oQAAAIo"]
[Fri Jan 09 23:55:00.867188 2026] [:error] [pid 30020:tid 30066] [client 4.194.88.198:2018] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aWEk1Mrjc66qOisG6L32ogAAAIw"]
[Fri Jan 09 23:55:01.042317 2026] [:error] [pid 30021:tid 30103] [client 4.194.88.198:9520] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aWEk1Q_M8aRtsTog5J_EIwAAANY"]
[Fri Jan 09 23:55:01.262654 2026] [:error] [pid 14801:tid 14810] [client 4.194.88.198:1927] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aWEk1d8UWXrz_OQYgF2DNgAAAkc"]
[Fri Jan 09 23:55:01.492108 2026] [:error] [pid 30020:tid 30077] [client 4.194.88.198:1933] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aWEk1crjc66qOisG6L32owAAAJc"]
[Fri Jan 09 23:55:01.689157 2026] [:error] [pid 14770:tid 14772] [client 4.194.88.198:9502] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aWEk1R5QbaVZ-6newJZcPgAAAgA"]
[Fri Jan 09 23:55:01.907139 2026] [:error] [pid 14801:tid 14806] [client 4.194.88.198:2030] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aWEk1d8UWXrz_OQYgF2DNwAAAkM"]
[Fri Jan 09 23:55:02.088340 2026] [:error] [pid 30020:tid 30067] [client 4.194.88.198:9498] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aWEk1srjc66qOisG6L32pAAAAI0"]
[Fri Jan 09 23:55:02.290992 2026] [:error] [pid 30019:tid 30030] [client 4.194.88.198:1953] [client 4.194.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aWEk1kz3igHGwX5f7IoN6AAAAAY"]
[Fri Jan 09 23:55:02.537802 2026] [:error] [pid 14770:tid 14796] [client 4.194.88.198:9497] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aWEk1h5QbaVZ-6newJZcPwAAAhg"]
[Fri Jan 09 23:55:02.720233 2026] [:error] [pid 14872:tid 14879] [client 4.194.88.198:2026] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aWEk1qIUELhgYLNp1sZaMgAAAsU"]
[Fri Jan 09 23:55:02.928917 2026] [:error] [pid 44848:tid 44872] [client 4.194.88.198:9485] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aWEk1qjajoTJAbEk87z2agAAAFY"]
[Fri Jan 09 23:55:03.115725 2026] [:error] [pid 14831:tid 14846] [client 4.194.88.198:9596] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aWEk1_aKOMCmJcAyBm1YsgAAAo0"]
[Fri Jan 09 23:55:03.305053 2026] [:error] [pid 30020:tid 30056] [client 4.194.88.198:9554] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aWEk18rjc66qOisG6L32pQAAAII"]
[Fri Jan 09 23:55:03.502913 2026] [:error] [pid 14739:tid 14743] [client 4.194.88.198:9535] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aWEk1163M6_PkLt_IJKGWgAAAcI"]
[Fri Jan 09 23:55:03.706724 2026] [:error] [pid 44848:tid 44863] [client 4.194.88.198:1962] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aWEk16jajoTJAbEk87z2bAAAAE0"]
[Fri Jan 09 23:55:03.883831 2026] [:error] [pid 30020:tid 30076] [client 4.194.88.198:9571] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aWEk18rjc66qOisG6L32pgAAAJY"]
[Fri Jan 09 23:55:04.058368 2026] [:error] [pid 14831:tid 14848] [client 4.194.88.198:9500] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWEk2PaKOMCmJcAyBm1YswAAAo8"]
[Fri Jan 09 23:55:04.280257 2026] [:error] [pid 30020:tid 30057] [client 4.194.88.198:9479] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWEk2Mrjc66qOisG6L32qAAAAIM"]
[Fri Jan 09 23:55:04.541712 2026] [:error] [pid 30021:tid 30082] [client 4.194.88.198:1925] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWEk2A_M8aRtsTog5J_EJQAAAME"]
[Fri Jan 09 23:55:04.745542 2026] [:error] [pid 30021:tid 30091] [client 4.194.88.198:9542] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWEk2A_M8aRtsTog5J_EJgAAAMo"]
[Fri Jan 09 23:55:04.921462 2026] [:error] [pid 30019:tid 30043] [client 4.194.88.198:9533] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aWEk2Ez3igHGwX5f7IoN6gAAABM"]
[Fri Jan 09 23:55:05.109291 2026] [:error] [pid 14831:tid 14838] [client 4.194.88.198:9584] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aWEk2faKOMCmJcAyBm1YtQAAAoU"]
[Fri Jan 09 23:55:05.372121 2026] [:error] [pid 14801:tid 14827] [client 4.194.88.198:9559] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aWEk2d8UWXrz_OQYgF2DOQAAAlg"]
[Fri Jan 09 23:55:05.575458 2026] [:error] [pid 14801:tid 14812] [client 4.194.88.198:9487] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aWEk2d8UWXrz_OQYgF2DOgAAAkk"]
[Fri Jan 09 23:55:05.783622 2026] [:error] [pid 1366:tid 1377] [client 4.194.88.198:2037] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aWEk2RmasveKu8_ec1WlsQAAAYg"]
[Fri Jan 09 23:55:05.994401 2026] [:error] [pid 14872:tid 14887] [client 4.194.88.198:2046] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aWEk2aIUELhgYLNp1sZaNQAAAs0"]
[Fri Jan 09 23:55:06.198338 2026] [:error] [pid 30021:tid 30101] [client 4.194.88.198:1975] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aWEk2g_M8aRtsTog5J_EKAAAANQ"]
[Fri Jan 09 23:55:06.388213 2026] [:error] [pid 1366:tid 1374] [client 4.194.88.198:1986] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aWEk2hmasveKu8_ec1WlsgAAAYU"]
[Fri Jan 09 23:55:06.572785 2026] [:error] [pid 14801:tid 14803] [client 4.194.88.198:1928] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aWEk2t8UWXrz_OQYgF2DOwAAAkA"]
[Fri Jan 09 23:55:06.775089 2026] [:error] [pid 14739:tid 14762] [client 4.194.88.198:9514] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aWEk2l63M6_PkLt_IJKGXAAAAdU"]
[Fri Jan 09 23:55:06.961850 2026] [:error] [pid 30019:tid 30034] [client 4.194.88.198:1987] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aWEk2kz3igHGwX5f7IoN7AAAAAo"]
[Fri Jan 09 23:55:07.169079 2026] [:error] [pid 14872:tid 14883] [client 4.194.88.198:1935] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aWEk26IUELhgYLNp1sZaNwAAAsk"]
[Fri Jan 09 23:55:07.377198 2026] [:error] [pid 30019:tid 30026] [client 4.194.88.198:2020] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aWEk20z3igHGwX5f7IoN7QAAAAI"]
[Fri Jan 09 23:55:07.560823 2026] [:error] [pid 14801:tid 14823] [client 4.194.88.198:9532] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aWEk298UWXrz_OQYgF2DPAAAAlQ"]
[Fri Jan 09 23:55:07.794724 2026] [:error] [pid 14801:tid 14815] [client 4.194.88.198:9521] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aWEk298UWXrz_OQYgF2DPwAAAkw"]
[Fri Jan 09 23:55:07.990515 2026] [:error] [pid 30019:tid 30031] [client 4.194.88.198:9519] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aWEk20z3igHGwX5f7IoN7wAAAAc"]
[Fri Jan 09 23:55:08.167638 2026] [:error] [pid 14872:tid 14885] [client 4.194.88.198:2033] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aWEk3KIUELhgYLNp1sZaOAAAAss"]
[Fri Jan 09 23:55:08.358211 2026] [:error] [pid 14801:tid 14814] [client 4.194.88.198:9508] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aWEk3N8UWXrz_OQYgF2DQQAAAks"]
[Fri Jan 09 23:55:08.547660 2026] [:error] [pid 14801:tid 14818] [client 4.194.88.198:1969] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aWEk3N8UWXrz_OQYgF2DQgAAAk8"]
[Fri Jan 09 23:55:08.766054 2026] [:error] [pid 14801:tid 14807] [client 4.194.88.198:2012] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aWEk3N8UWXrz_OQYgF2DQwAAAkQ"]
[Fri Jan 09 23:55:08.947237 2026] [:error] [pid 14801:tid 14817] [client 4.194.88.198:1991] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aWEk3N8UWXrz_OQYgF2DRAAAAk4"]
[Fri Jan 09 23:55:09.131318 2026] [:error] [pid 14801:tid 14825] [client 4.194.88.198:9477] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aWEk3d8UWXrz_OQYgF2DRQAAAlY"]
[Fri Jan 09 23:55:09.311734 2026] [:error] [pid 14801:tid 14822] [client 4.194.88.198:1896] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aWEk3d8UWXrz_OQYgF2DRgAAAlM"]
[Fri Jan 09 23:55:09.529651 2026] [:error] [pid 14801:tid 14809] [client 4.194.88.198:9540] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aWEk3d8UWXrz_OQYgF2DSAAAAkY"]
[Fri Jan 09 23:55:09.708057 2026] [:error] [pid 14872:tid 14895] [client 4.194.88.198:9550] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWEk3aIUELhgYLNp1sZaPAAAAtU"]
[Fri Jan 09 23:55:09.914013 2026] [:error] [pid 1366:tid 1381] [client 4.194.88.198:9579] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWEk3RmasveKu8_ec1WlswAAAYw"]
[Fri Jan 09 23:55:10.087680 2026] [:error] [pid 30021:tid 30093] [client 4.194.88.198:2042] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWEk3g_M8aRtsTog5J_EKgAAAMw"]
[Fri Jan 09 23:55:10.376825 2026] [:error] [pid 30021:tid 30087] [client 4.194.88.198:9577] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWEk3g_M8aRtsTog5J_EKwAAAMY"]
[Fri Jan 09 23:55:10.563867 2026] [:error] [pid 30019:tid 30047] [client 4.194.88.198:2028] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aWEk3kz3igHGwX5f7IoN8QAAABc"]
[Fri Jan 09 23:55:10.772518 2026] [:error] [pid 14739:tid 14749] [client 4.194.88.198:1995] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aWEk3l63M6_PkLt_IJKGXQAAAcg"]
[Fri Jan 09 23:55:10.959905 2026] [:error] [pid 1366:tid 1373] [client 4.194.88.198:9593] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aWEk3hmasveKu8_ec1WltQAAAYQ"]
[Fri Jan 09 23:55:11.145301 2026] [:error] [pid 1366:tid 1380] [client 4.194.88.198:9527] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aWEk3xmasveKu8_ec1WltgAAAYs"]
[Fri Jan 09 23:55:11.339350 2026] [:error] [pid 14872:tid 14890] [client 4.194.88.198:9505] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aWEk36IUELhgYLNp1sZaPwAAAtA"]
[Fri Jan 09 23:55:11.529048 2026] [:error] [pid 14801:tid 14813] [client 4.194.88.198:1926] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aWEk398UWXrz_OQYgF2DSQAAAko"]
[Fri Jan 09 23:55:11.749162 2026] [:error] [pid 14872:tid 14881] [client 4.194.88.198:9557] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aWEk36IUELhgYLNp1sZaQQAAAsc"]
[Fri Jan 09 23:55:11.926194 2026] [:error] [pid 30019:tid 30025] [client 4.194.88.198:1921] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aWEk30z3igHGwX5f7IoN8gAAAAE"]
[Fri Jan 09 23:55:12.109162 2026] [:error] [pid 14872:tid 14875] [client 4.194.88.198:1989] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWEk4KIUELhgYLNp1sZaQgAAAsE"]
[Fri Jan 09 23:55:12.346011 2026] [:error] [pid 14872:tid 14882] [client 4.194.88.198:9506] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWEk4KIUELhgYLNp1sZaRQAAAsg"]
[Fri Jan 09 23:55:12.541310 2026] [:error] [pid 30019:tid 30044] [client 4.194.88.198:9545] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWEk4Ez3igHGwX5f7IoN8wAAABQ"]
[Fri Jan 09 23:55:12.729333 2026] [:error] [pid 14831:tid 14836] [client 4.194.88.198:2032] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWEk4PaKOMCmJcAyBm1YtgAAAoM"]
[Fri Jan 09 23:55:12.915477 2026] [:error] [pid 1366:tid 1390] [client 4.194.88.198:9513] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aWEk4BmasveKu8_ec1WltwAAAZU"]
[Fri Jan 09 23:55:13.109358 2026] [:error] [pid 1366:tid 1392] [client 4.194.88.198:2016] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aWEk4RmasveKu8_ec1WluAAAAZc"]
[Fri Jan 09 23:55:13.287931 2026] [:error] [pid 14872:tid 14883] [client 4.194.88.198:9515] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aWEk4aIUELhgYLNp1sZaSAAAAsk"]
[Fri Jan 09 23:55:13.462517 2026] [:error] [pid 44848:tid 44873] [client 4.194.88.198:1941] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aWEk4ajajoTJAbEk87z2cQAAAFc"]
[Fri Jan 09 23:55:13.663817 2026] [:error] [pid 14831:tid 14853] [client 4.194.88.198:9544] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aWEk4faKOMCmJcAyBm1YtwAAApQ"]
[Fri Jan 09 23:55:13.894033 2026] [:error] [pid 44848:tid 44871] [client 4.194.88.198:1955] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aWEk4ajajoTJAbEk87z2cwAAAFU"]
[Fri Jan 09 23:55:14.109941 2026] [:error] [pid 14770:tid 14776] [client 4.194.88.198:9576] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aWEk4h5QbaVZ-6newJZcQQAAAgQ"]
[Fri Jan 09 23:55:14.359362 2026] [:error] [pid 14801:tid 14811] [client 4.194.88.198:2047] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aWEk4t8UWXrz_OQYgF2DSgAAAkg"]
[Fri Jan 09 23:55:14.569137 2026] [:error] [pid 14872:tid 14885] [client 4.194.88.198:2040] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aWEk4qIUELhgYLNp1sZaSgAAAss"]
[Fri Jan 09 23:55:14.819155 2026] [:error] [pid 14872:tid 14878] [client 4.194.88.198:2014] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aWEk4qIUELhgYLNp1sZaSwAAAsQ"]
[Fri Jan 09 23:55:15.014948 2026] [:error] [pid 14872:tid 14874] [client 4.194.88.198:1999] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aWEk46IUELhgYLNp1sZaTQAAAsA"]
[Fri Jan 09 23:55:15.248057 2026] [:error] [pid 14872:tid 14895] [client 4.194.88.198:9570] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aWEk46IUELhgYLNp1sZaTgAAAtU"]
[Fri Jan 09 23:55:15.421761 2026] [:error] [pid 30020:tid 30068] [client 4.194.88.198:1938] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWEk48rjc66qOisG6L32qwAAAI4"]
[Fri Jan 09 23:55:15.623130 2026] [:error] [pid 1366:tid 1382] [client 4.194.88.198:1992] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWEk4xmasveKu8_ec1WluQAAAY0"]
[Fri Jan 09 23:55:15.801669 2026] [:error] [pid 30021:tid 30088] [client 4.194.88.198:1945] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWEk4w_M8aRtsTog5J_ELgAAAMc"]
[Fri Jan 09 23:55:16.033251 2026] [:error] [pid 14872:tid 14876] [client 4.194.88.198:9536] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWEk5KIUELhgYLNp1sZaUQAAAsI"]
[Fri Jan 09 23:55:16.207743 2026] [:error] [pid 30021:tid 30086] [client 4.194.88.198:2023] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWEk5A_M8aRtsTog5J_ELwAAAMU"]
[Fri Jan 09 23:55:16.401465 2026] [:error] [pid 14872:tid 14891] [client 4.194.88.198:2029] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWEk5KIUELhgYLNp1sZaUgAAAtE"]
[Fri Jan 09 23:55:16.575506 2026] [:error] [pid 30019:tid 30027] [client 4.194.88.198:2021] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWEk5Ez3igHGwX5f7IoN9QAAAAM"]
[Fri Jan 09 23:55:16.753519 2026] [:error] [pid 14770:tid 14793] [client 4.194.88.198:1959] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWEk5B5QbaVZ-6newJZcQgAAAhU"]
[Fri Jan 09 23:55:16.933755 2026] [:error] [pid 1366:tid 1375] [client 4.194.88.198:9586] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWEk5BmasveKu8_ec1WluwAAAYY"]
[Fri Jan 09 23:55:17.112463 2026] [:error] [pid 1366:tid 1393] [client 4.194.88.198:9553] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWEk5RmasveKu8_ec1WlvAAAAZg"]
[Fri Jan 09 23:55:17.288978 2026] [:error] [pid 14739:tid 14744] [client 4.194.88.198:9584] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWEk5V63M6_PkLt_IJKGYAAAAcM"]
[Fri Jan 09 23:55:17.467843 2026] [:error] [pid 14831:tid 14834] [client 4.194.88.198:1951] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWEk5faKOMCmJcAyBm1YuQAAAoE"]
[Fri Jan 09 23:55:17.643170 2026] [:error] [pid 14739:tid 14752] [client 4.194.88.198:9512] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWEk5V63M6_PkLt_IJKGYQAAAcs"]
[Fri Jan 09 23:55:17.816737 2026] [:error] [pid 14831:tid 14835] [client 4.194.88.198:9587] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWEk5faKOMCmJcAyBm1YugAAAoI"]
[Fri Jan 09 23:55:17.990869 2026] [:error] [pid 1366:tid 1389] [client 4.194.88.198:2013] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWEk5RmasveKu8_ec1WlvQAAAZQ"]
[Fri Jan 09 23:55:18.168868 2026] [:error] [pid 14872:tid 14879] [client 4.194.88.198:2003] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWEk5qIUELhgYLNp1sZaVAAAAsU"]
[Fri Jan 09 23:55:18.351258 2026] [:error] [pid 14739:tid 14748] [client 4.194.88.198:1878] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aWEk5l63M6_PkLt_IJKGYgAAAcc"]
[Fri Jan 09 23:55:18.533152 2026] [:error] [pid 1366:tid 1378] [client 4.194.88.198:1945] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aWEk5hmasveKu8_ec1WlvwAAAYk"]
[Fri Jan 09 23:55:18.713189 2026] [:error] [pid 1366:tid 1384] [client 4.194.88.198:1971] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aWEk5hmasveKu8_ec1WlwAAAAY8"]
[Fri Jan 09 23:55:18.893263 2026] [:error] [pid 14872:tid 14880] [client 4.194.88.198:9536] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aWEk5qIUELhgYLNp1sZaVgAAAsY"]
[Fri Jan 09 23:55:19.071324 2026] [:error] [pid 14872:tid 14888] [client 4.194.88.198:9509] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aWEk56IUELhgYLNp1sZaVwAAAs4"]
[Fri Jan 09 23:55:19.254385 2026] [:error] [pid 14872:tid 14882] [client 4.194.88.198:9511] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aWEk56IUELhgYLNp1sZaWAAAAsg"]
[Fri Jan 09 23:55:19.447634 2026] [:error] [pid 14739:tid 14764] [client 4.194.88.198:1944] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aWEk5163M6_PkLt_IJKGYwAAAdc"]
[Fri Jan 09 23:55:19.625366 2026] [:error] [pid 14770:tid 14780] [client 4.194.88.198:9482] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aWEk5x5QbaVZ-6newJZcRgAAAgg"]
[Fri Jan 09 23:55:19.809818 2026] [:error] [pid 1366:tid 1388] [client 4.194.88.198:1924] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWEk5xmasveKu8_ec1WlwQAAAZM"]
[Fri Jan 09 23:55:19.982120 2026] [:error] [pid 1366:tid 1368] [client 4.194.88.198:1998] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWEk5xmasveKu8_ec1WlwwAAAYA"]
[Fri Jan 09 23:55:20.191907 2026] [:error] [pid 1366:tid 1391] [client 4.194.88.198:1890] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWEk6BmasveKu8_ec1WlxAAAAZY"]
[Fri Jan 09 23:55:20.396827 2026] [:error] [pid 14770:tid 14790] [client 4.194.88.198:2045] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWEk6B5QbaVZ-6newJZcRwAAAhI"]
[Fri Jan 09 23:55:20.578343 2026] [:error] [pid 1366:tid 1371] [client 4.194.88.198:1994] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWEk6BmasveKu8_ec1WlxQAAAYM"]
[Fri Jan 09 23:55:20.762008 2026] [:error] [pid 1366:tid 1387] [client 4.194.88.198:2038] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWEk6BmasveKu8_ec1WlxgAAAZI"]
[Fri Jan 09 23:55:20.935486 2026] [:error] [pid 14739:tid 14757] [client 4.194.88.198:1937] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWEk6F63M6_PkLt_IJKGZAAAAdA"]
[Fri Jan 09 23:55:21.118095 2026] [:error] [pid 1366:tid 1374] [client 4.194.88.198:1923] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWEk6RmasveKu8_ec1WlxwAAAYU"]
[Fri Jan 09 23:55:21.291839 2026] [:error] [pid 14739:tid 14750] [client 4.194.88.198:9480] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aWEk6V63M6_PkLt_IJKGZQAAAck"]
[Fri Jan 09 23:55:21.482328 2026] [:error] [pid 14770:tid 14784] [client 4.194.88.198:1870] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aWEk6R5QbaVZ-6newJZcSQAAAgw"]
[Fri Jan 09 23:55:21.668166 2026] [:error] [pid 14831:tid 14857] [client 4.194.88.198:1934] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aWEk6faKOMCmJcAyBm1YuwAAApg"]
[Fri Jan 09 23:55:21.845018 2026] [:error] [pid 14831:tid 14856] [client 4.194.88.198:1878] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aWEk6faKOMCmJcAyBm1YvAAAApc"]
[Fri Jan 09 23:55:22.022909 2026] [:error] [pid 1366:tid 1369] [client 4.194.88.198:2041] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aWEk6hmasveKu8_ec1WlygAAAYE"]
[Fri Jan 09 23:55:22.199913 2026] [:error] [pid 14770:tid 14775] [client 4.194.88.198:1940] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aWEk6h5QbaVZ-6newJZcSwAAAgM"]
[Fri Jan 09 23:55:22.372652 2026] [:error] [pid 14739:tid 14746] [client 4.194.88.198:1899] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aWEk6l63M6_PkLt_IJKGZwAAAcU"]
[Fri Jan 09 23:55:22.552779 2026] [:error] [pid 14872:tid 14887] [client 4.194.88.198:2017] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aWEk6qIUELhgYLNp1sZaWwAAAs0"]
[Fri Jan 09 23:55:22.743434 2026] [:error] [pid 14770:tid 14794] [client 4.194.88.198:1944] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aWEk6h5QbaVZ-6newJZcTQAAAhY"]
[Fri Jan 09 23:55:22.924964 2026] [:error] [pid 14770:tid 14788] [client 4.194.88.198:1871] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aWEk6h5QbaVZ-6newJZcTgAAAhA"]
[Fri Jan 09 23:55:23.107356 2026] [:error] [pid 14739:tid 14760] [client 4.194.88.198:2019] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aWEk6163M6_PkLt_IJKGaAAAAdM"]
[Fri Jan 09 23:55:23.289389 2026] [:error] [pid 14770:tid 14777] [client 4.194.88.198:1931] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aWEk6x5QbaVZ-6newJZcTwAAAgU"]
[Fri Jan 09 23:55:23.462681 2026] [:error] [pid 1366:tid 1390] [client 4.194.88.198:9507] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aWEk6xmasveKu8_ec1WlzAAAAZU"]
[Fri Jan 09 23:55:23.645322 2026] [:error] [pid 14739:tid 14742] [client 4.194.88.198:1858] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aWEk6163M6_PkLt_IJKGbAAAAcE"]
[Fri Jan 09 23:55:23.821037 2026] [:error] [pid 14739:tid 14765] [client 4.194.88.198:9538] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aWEk6163M6_PkLt_IJKGbgAAAdg"]
[Fri Jan 09 23:55:23.998800 2026] [:error] [pid 14770:tid 14785] [client 4.194.88.198:9516] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aWEk6x5QbaVZ-6newJZcUAAAAg0"]
[Fri Jan 09 23:55:24.191970 2026] [:error] [pid 30019:tid 30045] [client 4.194.88.198:1968] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aWEk7Ez3igHGwX5f7IoN9gAAABU"]
[Fri Jan 09 23:55:24.377234 2026] [:error] [pid 44848:tid 44852] [client 4.194.88.198:1948] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aWEk7KjajoTJAbEk87z2fwAAAEI"]
[Fri Jan 09 23:55:24.566863 2026] [:error] [pid 14739:tid 14756] [client 4.194.88.198:1984] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aWEk7F63M6_PkLt_IJKGcAAAAc8"]
[Fri Jan 09 23:55:24.744890 2026] [:error] [pid 30021:tid 30096] [client 4.194.88.198:1964] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aWEk7A_M8aRtsTog5J_EMgAAAM8"]
[Fri Jan 09 23:55:24.934373 2026] [:error] [pid 1366:tid 1382] [client 4.194.88.198:2035] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWEk7BmasveKu8_ec1WlzgAAAY0"]
[Fri Jan 09 23:55:25.109712 2026] [:error] [pid 1366:tid 1375] [client 4.194.88.198:1865] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWEk7RmasveKu8_ec1WlzwAAAYY"]
[Fri Jan 09 23:55:25.289225 2026] [:error] [pid 1366:tid 1393] [client 4.194.88.198:1939] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWEk7RmasveKu8_ec1Wl0AAAAZg"]
[Fri Jan 09 23:55:25.463079 2026] [:error] [pid 1366:tid 1389] [client 4.194.88.198:2002] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWEk7RmasveKu8_ec1Wl0QAAAZQ"]
[Fri Jan 09 23:55:25.641096 2026] [:error] [pid 1366:tid 1378] [client 4.194.88.198:2008] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aWEk7RmasveKu8_ec1Wl0gAAAYk"]
[Fri Jan 09 23:55:25.837657 2026] [:error] [pid 14739:tid 14762] [client 4.194.88.198:1876] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aWEk7V63M6_PkLt_IJKGcgAAAdU"]
[Fri Jan 09 23:55:26.034794 2026] [:error] [pid 14801:tid 14816] [client 4.194.88.198:1886] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aWEk7t8UWXrz_OQYgF2DTAAAAk0"]
[Fri Jan 09 23:55:26.208304 2026] [:error] [pid 14739:tid 14749] [client 4.194.88.198:9528] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aWEk7l63M6_PkLt_IJKGcwAAAcg"]
[Fri Jan 09 23:55:26.399242 2026] [:error] [pid 1366:tid 1388] [client 4.194.88.198:1922] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aWEk7hmasveKu8_ec1Wl1QAAAZM"]
[Fri Jan 09 23:55:26.574839 2026] [:error] [pid 1366:tid 1386] [client 4.194.88.198:2025] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aWEk7hmasveKu8_ec1Wl1gAAAZE"]
[Fri Jan 09 23:55:26.825598 2026] [:error] [pid 14831:tid 14855] [client 4.194.88.198:1882] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aWEk7vaKOMCmJcAyBm1YvgAAApY"]
[Fri Jan 09 23:55:27.010064 2026] [:error] [pid 1366:tid 1370] [client 4.194.88.198:1888] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aWEk7xmasveKu8_ec1Wl2AAAAYI"]
[Fri Jan 09 23:55:27.192096 2026] [:error] [pid 14831:tid 14833] [client 4.194.88.198:1859] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aWEk7_aKOMCmJcAyBm1YvwAAAoA"]
[Fri Jan 09 23:55:27.374223 2026] [:error] [pid 14739:tid 14761] [client 4.194.88.198:2043] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aWEk7163M6_PkLt_IJKGdQAAAdQ"]
[Fri Jan 09 23:55:27.570079 2026] [:error] [pid 14739:tid 14755] [client 4.194.88.198:1844] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aWEk7163M6_PkLt_IJKGdgAAAc4"]
[Fri Jan 09 23:55:27.743508 2026] [:error] [pid 14770:tid 14796] [client 4.194.88.198:1961] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aWEk7x5QbaVZ-6newJZcUgAAAhg"]
[Fri Jan 09 23:55:27.937169 2026] [:error] [pid 14770:tid 14781] [client 4.194.88.198:1974] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWEk7x5QbaVZ-6newJZcVAAAAgk"]
[Fri Jan 09 23:55:28.122042 2026] [:error] [pid 14872:tid 14885] [client 4.194.88.198:1957] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWEk8KIUELhgYLNp1sZaXgAAAss"]
[Fri Jan 09 23:55:28.295155 2026] [:error] [pid 14770:tid 14773] [client 4.194.88.198:1884] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWEk8B5QbaVZ-6newJZcVQAAAgE"]
[Fri Jan 09 23:55:28.498946 2026] [:error] [pid 14770:tid 14795] [client 4.194.88.198:1881] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWEk8B5QbaVZ-6newJZcWwAAAhc"]
[Fri Jan 09 23:55:28.673880 2026] [:error] [pid 14770:tid 14789] [client 4.194.88.198:1920] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWEk8B5QbaVZ-6newJZcXwAAAhE"]
[Fri Jan 09 23:55:28.860193 2026] [:error] [pid 14770:tid 14792] [client 4.194.88.198:9549] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWEk8B5QbaVZ-6newJZcYgAAAhQ"]
[Fri Jan 09 23:55:29.044851 2026] [:error] [pid 14770:tid 14791] [client 4.194.88.198:1982] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWEk8R5QbaVZ-6newJZcZQAAAhM"]
[Fri Jan 09 23:55:29.218102 2026] [:error] [pid 44848:tid 44862] [client 4.194.88.198:1798] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWEk8ajajoTJAbEk87z2gQAAAEw"]
[Fri Jan 09 23:55:29.391343 2026] [:error] [pid 1366:tid 1373] [client 4.194.88.198:9530] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aWEk8RmasveKu8_ec1Wl4QAAAYQ"]
[Fri Jan 09 23:55:29.567837 2026] [:error] [pid 30019:tid 30041] [client 4.194.88.198:1908] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aWEk8Uz3igHGwX5f7IoN9wAAABE"]
[Fri Jan 09 23:55:29.747949 2026] [:error] [pid 14872:tid 14875] [client 4.194.88.198:1891] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aWEk8aIUELhgYLNp1sZaawAAAsE"]
[Fri Jan 09 23:55:29.928545 2026] [:error] [pid 30019:tid 30048] [client 4.194.88.198:1965] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aWEk8Uz3igHGwX5f7IoN-AAAABg"]
[Fri Jan 09 23:55:30.102716 2026] [:error] [pid 30020:tid 30074] [client 4.194.88.198:1856] [client 4.194.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWEk8srjc66qOisG6L32sQAAAJQ"]
[Fri Jan 09 23:55:30.277657 2026] [:error] [pid 14770:tid 14793] [client 4.194.88.198:1950] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aWEk8h5QbaVZ-6newJZcbwAAAhU"]
[Fri Jan 09 23:55:30.485188 2026] [:error] [pid 30019:tid 30035] [client 4.194.88.198:1996] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aWEk8kz3igHGwX5f7IoN-gAAAAs"]
[Fri Jan 09 23:55:30.660821 2026] [:error] [pid 14872:tid 14887] [client 4.194.88.198:1930] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aWEk8qIUELhgYLNp1sZacQAAAs0"]
[Fri Jan 09 23:55:30.849736 2026] [:error] [pid 30020:tid 30075] [client 4.194.88.198:9552] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aWEk8srjc66qOisG6L32sgAAAJU"]
[Fri Jan 09 23:55:31.047567 2026] [:error] [pid 44848:tid 44854] [client 4.194.88.198:1956] [client 4.194.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aWEk86jajoTJAbEk87z2gwAAAEQ"]
[Fri Jan 09 23:55:31.234604 2026] [:error] [pid 14831:tid 14842] [client 4.194.88.198:1797] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWEk8_aKOMCmJcAyBm1YwQAAAok"]
[Fri Jan 09 23:55:31.407726 2026] [:error] [pid 30020:tid 30055] [client 4.194.88.198:1929] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWEk88rjc66qOisG6L32swAAAIE"]
[Fri Jan 09 23:55:31.610584 2026] [:error] [pid 30020:tid 30072] [client 4.194.88.198:1875] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWEk88rjc66qOisG6L32tAAAAJI"]
[Fri Jan 09 23:55:31.784604 2026] [:error] [pid 30019:tid 30029] [client 4.194.88.198:1912] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWEk80z3igHGwX5f7IoN_QAAAAU"]
[Fri Jan 09 23:55:31.966200 2026] [:error] [pid 30020:tid 30077] [client 4.194.88.198:1833] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWEk88rjc66qOisG6L32twAAAJc"]
[Fri Jan 09 23:55:32.143190 2026] [:error] [pid 30020:tid 30056] [client 4.194.88.198:1942] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWEk9Mrjc66qOisG6L32uAAAAII"]
[Fri Jan 09 23:55:32.321340 2026] [:error] [pid 30020:tid 30067] [client 4.194.88.198:1860] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWEk9Mrjc66qOisG6L32ugAAAI0"]
[Fri Jan 09 23:55:32.497402 2026] [:error] [pid 30020:tid 30057] [client 4.194.88.198:1861] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWEk9Mrjc66qOisG6L32uwAAAIM"]
[Fri Jan 09 23:55:32.674600 2026] [:error] [pid 30020:tid 30070] [client 4.194.88.198:1868] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWEk9Mrjc66qOisG6L32vAAAAJA"]
[Fri Jan 09 23:55:32.851660 2026] [:error] [pid 30020:tid 30060] [client 4.194.88.198:1859] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWEk9Mrjc66qOisG6L32vQAAAIY"]
[Fri Jan 09 23:55:33.032005 2026] [:error] [pid 1366:tid 1393] [client 4.194.88.198:9504] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWEk9RmasveKu8_ec1Wl5QAAAZg"]
[Fri Jan 09 23:55:33.211972 2026] [:error] [pid 1366:tid 1385] [client 4.194.88.198:1818] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWEk9RmasveKu8_ec1Wl5wAAAZA"]
[Fri Jan 09 23:55:33.392692 2026] [:error] [pid 1366:tid 1388] [client 4.194.88.198:9567] [client 4.194.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aWEk9RmasveKu8_ec1Wl6AAAAZM"]
[Fri Jan 09 23:55:33.566908 2026] [:error] [pid 30020:tid 30065] [client 4.194.88.198:2010] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aWEk9crjc66qOisG6L32wQAAAIs"]
[Fri Jan 09 23:55:33.747244 2026] [:error] [pid 1366:tid 1384] [client 4.194.88.198:1806] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aWEk9RmasveKu8_ec1Wl6QAAAY8"]
[Fri Jan 09 23:55:33.920680 2026] [:error] [pid 1366:tid 1370] [client 4.194.88.198:2039] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aWEk9RmasveKu8_ec1Wl6wAAAYI"]
[Fri Jan 09 23:55:34.099892 2026] [:error] [pid 30021:tid 30084] [client 4.194.88.198:1936] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWEk9g_M8aRtsTog5J_ENQAAAMM"]
[Fri Jan 09 23:55:34.273681 2026] [:error] [pid 30021:tid 30103] [client 4.194.88.198:1980] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWEk9g_M8aRtsTog5J_ENgAAANY"]
[Fri Jan 09 23:55:34.447126 2026] [:error] [pid 30020:tid 30073] [client 4.194.88.198:1815] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWEk9srjc66qOisG6L32wwAAAJM"]
[Fri Jan 09 23:55:34.643205 2026] [:error] [pid 30020:tid 30061] [client 4.194.88.198:1866] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWEk9srjc66qOisG6L32xAAAAIc"]
[Fri Jan 09 23:55:34.822963 2026] [:error] [pid 14801:tid 14805] [client 4.194.88.198:1854] [client 4.194.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aWEk9t8UWXrz_OQYgF2DTwAAAkI"]
[Fri Jan 09 23:55:35.013047 2026] [:error] [pid 1366:tid 1374] [client 4.194.88.198:1901] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aWEk9xmasveKu8_ec1Wl7QAAAYU"]
[Fri Jan 09 23:55:35.196675 2026] [:error] [pid 1366:tid 1381] [client 4.194.88.198:1900] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aWEk9xmasveKu8_ec1Wl7gAAAYw"]
[Fri Jan 09 23:55:35.370849 2026] [:error] [pid 30021:tid 30099] [client 4.194.88.198:1949] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aWEk9w_M8aRtsTog5J_EOAAAANI"]
[Fri Jan 09 23:55:35.560306 2026] [:error] [pid 1366:tid 1379] [client 4.194.88.198:1867] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aWEk9xmasveKu8_ec1Wl8AAAAYo"]
[Fri Jan 09 23:55:35.736462 2026] [:error] [pid 1366:tid 1377] [client 4.194.88.198:1877] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aWEk9xmasveKu8_ec1Wl8gAAAYg"]
[Fri Jan 09 23:55:35.909283 2026] [:error] [pid 30021:tid 30091] [client 4.194.88.198:1802] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aWEk9w_M8aRtsTog5J_EOQAAAMo"]
[Fri Jan 09 23:55:36.097663 2026] [:error] [pid 14770:tid 14789] [client 4.194.88.198:1932] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aWEk-B5QbaVZ-6newJZccwAAAhE"]
[Fri Jan 09 23:55:36.271375 2026] [:error] [pid 30021:tid 30101] [client 4.194.88.198:1984] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aWEk-A_M8aRtsTog5J_EOgAAANQ"]
[Fri Jan 09 23:55:36.455139 2026] [:error] [pid 30021:tid 30102] [client 4.194.88.198:1840] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aWEk-A_M8aRtsTog5J_EOwAAANU"]
[Fri Jan 09 23:55:36.640299 2026] [:error] [pid 14831:tid 14851] [client 4.194.88.198:1873] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aWEk-PaKOMCmJcAyBm1YwwAAApI"]
[Fri Jan 09 23:55:36.826346 2026] [:error] [pid 30021:tid 30093] [client 4.194.88.198:1976] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aWEk-A_M8aRtsTog5J_EPQAAAMw"]
[Fri Jan 09 23:55:36.999228 2026] [:error] [pid 30021:tid 30087] [client 4.194.88.198:1843] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWEk-A_M8aRtsTog5J_EPwAAAMY"]
[Fri Jan 09 23:55:37.193734 2026] [:error] [pid 14831:tid 14850] [client 4.194.88.198:1816] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWEk-faKOMCmJcAyBm1YxAAAApE"]
[Fri Jan 09 23:55:37.373677 2026] [:error] [pid 14831:tid 14846] [client 4.194.88.198:1826] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWEk-faKOMCmJcAyBm1YxQAAAo0"]
[Fri Jan 09 23:55:37.553410 2026] [:error] [pid 1366:tid 1392] [client 4.194.88.198:1887] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWEk-RmasveKu8_ec1Wl9AAAAZc"]
[Fri Jan 09 23:55:37.742227 2026] [:error] [pid 14739:tid 14764] [client 4.194.88.198:1819] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWEk-V63M6_PkLt_IJKGeAAAAdc"]
[Fri Jan 09 23:55:37.914424 2026] [:error] [pid 14739:tid 14753] [client 4.194.88.198:9540] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWEk-V63M6_PkLt_IJKGeQAAAcw"]
[Fri Jan 09 23:55:38.087576 2026] [:error] [pid 14739:tid 14747] [client 4.194.88.198:1821] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWEk-l63M6_PkLt_IJKGegAAAcY"]
[Fri Jan 09 23:55:38.269791 2026] [:error] [pid 14770:tid 14775] [client 4.194.88.198:2031] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWEk-h5QbaVZ-6newJZcdQAAAgM"]
[Fri Jan 09 23:55:38.445635 2026] [:error] [pid 44848:tid 44866] [client 4.194.88.198:1805] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aWEk-qjajoTJAbEk87z2hgAAAFA"]
[Fri Jan 09 23:55:38.619591 2026] [:error] [pid 30019:tid 30039] [client 4.194.88.198:1799] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aWEk-kz3igHGwX5f7IoN_gAAAA8"]
[Fri Jan 09 23:55:38.805914 2026] [:error] [pid 14739:tid 14746] [client 4.194.88.198:1746] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aWEk-l63M6_PkLt_IJKGfAAAAcU"]
[Fri Jan 09 23:55:38.981743 2026] [:error] [pid 44848:tid 44851] [client 4.194.88.198:1902] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aWEk-qjajoTJAbEk87z2iAAAAEE"]
[Fri Jan 09 23:55:39.155751 2026] [:error] [pid 14801:tid 14814] [client 4.194.88.198:1802] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWEk-98UWXrz_OQYgF2DUAAAAks"]
[Fri Jan 09 23:55:39.356607 2026] [:error] [pid 44848:tid 44869] [client 4.194.88.198:9569] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWEk-6jajoTJAbEk87z2iQAAAFM"]
[Fri Jan 09 23:55:39.539966 2026] [:error] [pid 44848:tid 44850] [client 4.194.88.198:1979] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWEk-6jajoTJAbEk87z2iwAAAEA"]
[Fri Jan 09 23:55:39.712443 2026] [:error] [pid 44848:tid 44872] [client 4.194.88.198:1970] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWEk-6jajoTJAbEk87z2jQAAAFY"]
[Fri Jan 09 23:55:39.891029 2026] [:error] [pid 44848:tid 44862] [client 4.194.88.198:1824] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWEk-6jajoTJAbEk87z2jwAAAEw"]
[Fri Jan 09 23:55:40.075945 2026] [:error] [pid 14831:tid 14838] [client 4.194.88.198:1885] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWEk_PaKOMCmJcAyBm1YxwAAAoU"]
[Fri Jan 09 23:55:40.260671 2026] [:error] [pid 14739:tid 14760] [client 4.194.88.198:1892] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWEk_F63M6_PkLt_IJKGfQAAAdM"]
[Fri Jan 09 23:55:40.435925 2026] [:error] [pid 44848:tid 44854] [client 4.194.88.198:1903] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWEk_KjajoTJAbEk87z2kgAAAEQ"]
[Fri Jan 09 23:55:40.611261 2026] [:error] [pid 14801:tid 14821] [client 4.194.88.198:1904] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWEk_N8UWXrz_OQYgF2DUgAAAlI"]
[Fri Jan 09 23:55:40.787245 2026] [:error] [pid 1366:tid 1393] [client 4.194.88.198:1911] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWEk_BmasveKu8_ec1Wl9QAAAZg"]
[Fri Jan 09 23:55:40.960779 2026] [:error] [pid 1366:tid 1389] [client 4.194.88.198:1841] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWEk_BmasveKu8_ec1Wl9wAAAZQ"]
[Fri Jan 09 23:55:45.398805 2026] [:error] [pid 1366:tid 1378] [client 4.194.88.198:9488] [client 4.194.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aWElARmasveKu8_ec1WmBgAAAYk"]
[Fri Jan 09 23:55:52.253937 2026] [autoindex:error] [pid 14831:tid 14835] [client 4.194.88.198:9540] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 09 23:56:10.238009 2026] [:error] [pid 30020:tid 30055] [client 4.194.88.198:1906] [client 4.194.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWElGsrjc66qOisG6L323wAAAIE"]
[Fri Jan 09 23:56:10.420137 2026] [:error] [pid 14739:tid 14760] [client 4.194.88.198:1947] [client 4.194.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aWElGl63M6_PkLt_IJKGiwAAAdM"]
[Fri Jan 09 23:56:25.377631 2026] [:error] [pid 1366:tid 1385] [client 4.194.88.198:2027] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aWElKRmasveKu8_ec1WmJwAAAZA"]
[Fri Jan 09 23:56:25.560880 2026] [:error] [pid 44848:tid 44857] [client 4.194.88.198:1943] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aWElKajajoTJAbEk87z2sgAAAEc"]
[Fri Jan 09 23:56:25.751472 2026] [:error] [pid 14831:tid 14846] [client 4.194.88.198:1821] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aWElKfaKOMCmJcAyBm1Y5gAAAo0"]
[Fri Jan 09 23:56:25.927902 2026] [:error] [pid 14831:tid 14837] [client 4.194.88.198:1864] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aWElKfaKOMCmJcAyBm1Y5wAAAoQ"]
[Fri Jan 09 23:56:26.119652 2026] [:error] [pid 1366:tid 1387] [client 4.194.88.198:1820] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aWElKhmasveKu8_ec1WmKAAAAZI"]
[Fri Jan 09 23:56:26.299029 2026] [:error] [pid 14770:tid 14776] [client 4.194.88.198:1857] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aWElKh5QbaVZ-6newJZciwAAAgQ"]
[Fri Jan 09 23:56:26.481266 2026] [:error] [pid 30020:tid 30073] [client 4.194.88.198:9581] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aWElKsrjc66qOisG6L327AAAAJM"]
[Fri Jan 09 23:56:26.701356 2026] [:error] [pid 14831:tid 14838] [client 4.194.88.198:1863] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aWElKvaKOMCmJcAyBm1Y6gAAAoU"]
[Fri Jan 09 23:56:26.879883 2026] [:error] [pid 30020:tid 30077] [client 4.194.88.198:1874] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aWElKsrjc66qOisG6L327QAAAJc"]
[Fri Jan 09 23:56:27.078997 2026] [:error] [pid 14801:tid 14808] [client 4.194.88.198:1810] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aWElK98UWXrz_OQYgF2DYQAAAkU"]
[Fri Jan 09 23:56:27.265971 2026] [:error] [pid 30019:tid 30035] [client 4.194.88.198:1895] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aWElK0z3igHGwX5f7IoOFQAAAAs"]
[Fri Jan 09 23:56:27.439670 2026] [:error] [pid 30019:tid 30043] [client 4.194.88.198:1918] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aWElK0z3igHGwX5f7IoOFgAAABM"]
[Fri Jan 09 23:56:27.614220 2026] [:error] [pid 30019:tid 30037] [client 4.194.88.198:1848] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aWElK0z3igHGwX5f7IoOFwAAAA0"]
[Fri Jan 09 23:56:27.790510 2026] [:error] [pid 44848:tid 44852] [client 4.194.88.198:1729] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aWElK6jajoTJAbEk87z2tAAAAEI"]
[Fri Jan 09 23:56:27.969620 2026] [:error] [pid 44848:tid 44854] [client 4.194.88.198:1913] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aWElK6jajoTJAbEk87z2tQAAAEQ"]
[Fri Jan 09 23:56:28.148033 2026] [:error] [pid 14831:tid 14839] [client 4.194.88.198:1829] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aWElLPaKOMCmJcAyBm1Y7AAAAoY"]
[Fri Jan 09 23:56:28.320860 2026] [:error] [pid 14770:tid 14777] [client 4.194.88.198:1919] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aWElLB5QbaVZ-6newJZcjQAAAgU"]
[Fri Jan 09 23:56:28.501290 2026] [:error] [pid 14770:tid 14780] [client 4.194.88.198:1966] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aWElLB5QbaVZ-6newJZcjgAAAgg"]
[Fri Jan 09 23:56:28.682138 2026] [:error] [pid 30020:tid 30074] [client 4.194.88.198:1977] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aWElLMrjc66qOisG6L328QAAAJQ"]
[Fri Jan 09 23:56:28.855254 2026] [:error] [pid 30020:tid 30067] [client 4.194.88.198:1849] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aWElLMrjc66qOisG6L328gAAAI0"]
[Fri Jan 09 23:56:29.059826 2026] [:error] [pid 14770:tid 14778] [client 4.194.88.198:1946] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aWElLR5QbaVZ-6newJZcjwAAAgY"]
[Fri Jan 09 23:56:29.306125 2026] [:error] [pid 14872:tid 14887] [client 4.194.88.198:1764] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aWElLaIUELhgYLNp1sZanQAAAs0"]
[Fri Jan 09 23:56:29.480712 2026] [:error] [pid 14801:tid 14806] [client 4.194.88.198:1845] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aWElLd8UWXrz_OQYgF2DZQAAAkM"]
[Fri Jan 09 23:56:29.700220 2026] [:error] [pid 30021:tid 30096] [client 4.194.88.198:1981] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aWElLQ_M8aRtsTog5J_ETQAAAM8"]
[Fri Jan 09 23:56:29.874016 2026] [:error] [pid 44848:tid 44873] [client 4.194.88.198:2009] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aWElLajajoTJAbEk87z2tgAAAFc"]
[Fri Jan 09 23:56:30.049642 2026] [:error] [pid 44848:tid 44871] [client 4.194.88.198:1893] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aWElLqjajoTJAbEk87z2twAAAFU"]
[Fri Jan 09 23:56:30.222730 2026] [:error] [pid 44848:tid 44851] [client 4.194.88.198:1915] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aWElLqjajoTJAbEk87z2uAAAAEE"]
[Fri Jan 09 23:56:30.403995 2026] [:error] [pid 14770:tid 14795] [client 4.194.88.198:1916] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aWElLh5QbaVZ-6newJZckQAAAhc"]
[Fri Jan 09 23:56:30.579081 2026] [:error] [pid 1366:tid 1388] [client 4.194.88.198:1883] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aWElLhmasveKu8_ec1WmKQAAAZM"]
[Fri Jan 09 23:56:30.773313 2026] [:error] [pid 14770:tid 14789] [client 4.194.88.198:1813] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aWElLh5QbaVZ-6newJZckgAAAhE"]
[Fri Jan 09 23:56:30.955106 2026] [:error] [pid 30021:tid 30083] [client 4.194.88.198:1794] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aWElLg_M8aRtsTog5J_ETwAAAMI"]
[Fri Jan 09 23:56:31.133546 2026] [:error] [pid 30020:tid 30069] [client 4.194.88.198:9541] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aWElL8rjc66qOisG6L329AAAAI8"]
[Fri Jan 09 23:56:31.321295 2026] [:error] [pid 30021:tid 30100] [client 4.194.88.198:1803] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aWElLw_M8aRtsTog5J_EUAAAANM"]
[Fri Jan 09 23:56:31.506140 2026] [:error] [pid 44848:tid 44868] [client 4.194.88.198:2005] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aWElL6jajoTJAbEk87z2uQAAAFI"]
[Fri Jan 09 23:56:31.683853 2026] [:error] [pid 14831:tid 14843] [client 4.194.88.198:1742] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aWElL_aKOMCmJcAyBm1Y9QAAAoo"]
[Fri Jan 09 23:56:31.893983 2026] [:error] [pid 30021:tid 30085] [client 4.194.88.198:1880] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aWElLw_M8aRtsTog5J_EUgAAAMQ"]
[Fri Jan 09 23:56:32.079849 2026] [:error] [pid 14831:tid 14840] [client 4.194.88.198:1855] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aWElMPaKOMCmJcAyBm1Y9gAAAoc"]
[Fri Jan 09 23:56:32.266781 2026] [:error] [pid 14739:tid 14747] [client 4.194.88.198:1958] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aWElMF63M6_PkLt_IJKGlgAAAcY"]
[Fri Jan 09 23:56:32.448969 2026] [:error] [pid 1366:tid 1381] [client 4.194.88.198:1791] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aWElMBmasveKu8_ec1WmLAAAAYw"]
[Fri Jan 09 23:56:32.632979 2026] [:error] [pid 14770:tid 14792] [client 4.194.88.198:1801] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aWElMB5QbaVZ-6newJZclQAAAhQ"]
[Fri Jan 09 23:56:32.806816 2026] [:error] [pid 1366:tid 1374] [client 4.194.88.198:1825] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aWElMBmasveKu8_ec1WmLgAAAYU"]
[Fri Jan 09 23:56:32.985732 2026] [:error] [pid 44848:tid 44865] [client 4.194.88.198:1830] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aWElMKjajoTJAbEk87z2ugAAAE8"]
[Fri Jan 09 23:56:33.167998 2026] [:error] [pid 1366:tid 1383] [client 4.194.88.198:1909] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aWElMRmasveKu8_ec1WmLwAAAY4"]
[Fri Jan 09 23:56:33.340930 2026] [:error] [pid 30021:tid 30082] [client 4.194.88.198:1811] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aWElMQ_M8aRtsTog5J_EVQAAAME"]
[Fri Jan 09 23:56:33.515351 2026] [:error] [pid 30021:tid 30091] [client 4.194.88.198:1788] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aWElMQ_M8aRtsTog5J_EVgAAAMo"]
[Fri Jan 09 23:56:33.715069 2026] [:error] [pid 14801:tid 14804] [client 4.194.88.198:1893] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aWElMd8UWXrz_OQYgF2DawAAAkE"]
[Fri Jan 09 23:56:33.889743 2026] [:error] [pid 14831:tid 14841] [client 4.194.88.198:1907] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aWElMfaKOMCmJcAyBm1Y-QAAAog"]
[Fri Jan 09 23:56:34.073968 2026] [:error] [pid 14872:tid 14878] [client 4.194.88.198:1952] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aWElMqIUELhgYLNp1sZanwAAAsQ"]
[Fri Jan 09 23:56:34.252519 2026] [:error] [pid 14831:tid 14848] [client 4.194.88.198:1897] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aWElMvaKOMCmJcAyBm1Y_AAAAo8"]
[Fri Jan 09 23:56:34.435763 2026] [:error] [pid 1366:tid 1393] [client 4.194.88.198:1792] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aWElMhmasveKu8_ec1WmMwAAAZg"]
[Fri Jan 09 23:56:34.616964 2026] [:error] [pid 44848:tid 44859] [client 4.194.88.198:1983] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aWElMqjajoTJAbEk87z2vgAAAEk"]
[Fri Jan 09 23:56:34.794565 2026] [:error] [pid 14872:tid 14895] [client 4.194.88.198:1832] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aWElMqIUELhgYLNp1sZaoQAAAtU"]
[Fri Jan 09 23:56:35.006132 2026] [:error] [pid 44848:tid 44856] [client 4.194.88.198:1852] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aWElM6jajoTJAbEk87z2vwAAAEY"]
[Fri Jan 09 23:56:35.181720 2026] [:error] [pid 1366:tid 1378] [client 4.194.88.198:1829] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aWElMxmasveKu8_ec1WmNQAAAYk"]
[Fri Jan 09 23:56:35.355718 2026] [:error] [pid 30020:tid 30062] [client 4.194.88.198:1783] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aWElM8rjc66qOisG6L32-gAAAIg"]
[Fri Jan 09 23:56:35.529175 2026] [:error] [pid 1366:tid 1391] [client 4.194.88.198:1761] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aWElMxmasveKu8_ec1WmNgAAAZY"]
[Fri Jan 09 23:56:35.702494 2026] [:error] [pid 1366:tid 1371] [client 4.194.88.198:1846] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aWElMxmasveKu8_ec1WmOAAAAYM"]
[Fri Jan 09 23:56:35.889983 2026] [:error] [pid 14739:tid 14756] [client 4.194.88.198:1972] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aWElM163M6_PkLt_IJKGmQAAAc8"]
[Fri Jan 09 23:56:36.073498 2026] [:error] [pid 14739:tid 14757] [client 4.194.88.198:1978] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aWElNF63M6_PkLt_IJKGmgAAAdA"]
[Fri Jan 09 23:56:36.254937 2026] [:error] [pid 14770:tid 14786] [client 4.194.88.198:1879] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aWElNB5QbaVZ-6newJZcmAAAAg4"]
[Fri Jan 09 23:56:36.438413 2026] [:error] [pid 44848:tid 44867] [client 4.194.88.198:1822] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aWElNKjajoTJAbEk87z2wgAAAFE"]
[Fri Jan 09 23:56:36.623203 2026] [:error] [pid 44848:tid 44863] [client 4.194.88.198:1744] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aWElNKjajoTJAbEk87z2xAAAAE0"]
[Fri Jan 09 23:56:36.805301 2026] [:error] [pid 14872:tid 14890] [client 4.194.88.198:1851] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aWElNKIUELhgYLNp1sZaowAAAtA"]
[Fri Jan 09 23:56:37.009515 2026] [:error] [pid 44848:tid 44855] [client 4.194.88.198:1814] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aWElNajajoTJAbEk87z2xwAAAEU"]
[Fri Jan 09 23:56:37.187913 2026] [:error] [pid 44848:tid 44852] [client 4.194.88.198:1728] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aWElNajajoTJAbEk87z2yAAAAEI"]
[Fri Jan 09 23:56:37.391109 2026] [:error] [pid 30021:tid 30090] [client 4.194.88.198:1842] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aWElNQ_M8aRtsTog5J_EWAAAAMk"]
[Fri Jan 09 23:56:37.570490 2026] [:error] [pid 14739:tid 14741] [client 4.194.88.198:1733] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aWElNV63M6_PkLt_IJKGngAAAcA"]
[Fri Jan 09 23:56:37.759492 2026] [:error] [pid 30019:tid 30040] [client 4.194.88.198:1776] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aWElNUz3igHGwX5f7IoOGwAAABA"]
[Fri Jan 09 23:56:37.934653 2026] [:error] [pid 14872:tid 14889] [client 4.194.88.198:1749] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aWElNaIUELhgYLNp1sZapAAAAs8"]
[Fri Jan 09 23:56:38.148387 2026] [:error] [pid 44848:tid 44870] [client 4.194.88.198:1731] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aWElNqjajoTJAbEk87z2yQAAAFQ"]
[Fri Jan 09 23:56:38.321083 2026] [:error] [pid 44848:tid 44873] [client 4.194.88.198:1762] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aWElNqjajoTJAbEk87z2ygAAAFc"]
[Fri Jan 09 23:56:38.495947 2026] [:error] [pid 30019:tid 30028] [client 4.194.88.198:1756] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aWElNkz3igHGwX5f7IoOHQAAAAQ"]
[Fri Jan 09 23:56:38.679501 2026] [:error] [pid 30020:tid 30058] [client 4.194.88.198:1642] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWElNsrjc66qOisG6L32_AAAAIQ"]
[Fri Jan 09 23:56:38.860889 2026] [:error] [pid 14801:tid 14819] [client 4.194.88.198:1763] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWElNt8UWXrz_OQYgF2DcQAAAlA"]
[Fri Jan 09 23:56:39.035066 2026] [:error] [pid 30021:tid 30095] [client 4.194.88.198:1785] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWElNw_M8aRtsTog5J_EWwAAAM4"]
[Fri Jan 09 23:56:39.214250 2026] [:error] [pid 30021:tid 30088] [client 4.194.88.198:1837] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWElNw_M8aRtsTog5J_EXQAAAMc"]
[Fri Jan 09 23:56:39.387759 2026] [:error] [pid 30021:tid 30086] [client 4.194.88.198:1817] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aWElNw_M8aRtsTog5J_EXgAAAMU"]
[Fri Jan 09 23:56:39.573779 2026] [:error] [pid 30019:tid 30025] [client 4.194.88.198:1898] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aWElN0z3igHGwX5f7IoOHgAAAAE"]
[Fri Jan 09 23:56:39.752796 2026] [:error] [pid 30021:tid 30089] [client 4.194.88.198:1770] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aWElNw_M8aRtsTog5J_EYAAAAMg"]
[Fri Jan 09 23:56:39.931591 2026] [:error] [pid 1366:tid 1369] [client 4.194.88.198:1834] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aWElNxmasveKu8_ec1WmOwAAAYE"]
[Fri Jan 09 23:56:40.140216 2026] [:error] [pid 14872:tid 14893] [client 4.194.88.198:1823] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aWElOKIUELhgYLNp1sZapgAAAtM"]
[Fri Jan 09 23:56:40.322438 2026] [:error] [pid 44848:tid 44859] [client 4.194.88.198:1766] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aWElOKjajoTJAbEk87z20AAAAEk"]
[Fri Jan 09 23:56:40.496730 2026] [:error] [pid 44848:tid 44874] [client 4.194.88.198:1828] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aWElOKjajoTJAbEk87z20QAAAFg"]
[Fri Jan 09 23:56:40.688165 2026] [:error] [pid 44848:tid 44872] [client 4.194.88.198:1954] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aWElOKjajoTJAbEk87z20gAAAFY"]
[Fri Jan 09 23:56:40.864832 2026] [:error] [pid 30020:tid 30065] [client 4.194.88.198:1680] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aWElOMrjc66qOisG6L32_gAAAIs"]
[Fri Jan 09 23:56:41.047125 2026] [:error] [pid 30019:tid 30047] [client 4.194.88.198:1715] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aWElOUz3igHGwX5f7IoOHwAAABc"]
[Fri Jan 09 23:56:41.254278 2026] [:error] [pid 14739:tid 14749] [client 4.194.88.198:1743] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aWElOV63M6_PkLt_IJKGoAAAAcg"]
[Fri Jan 09 23:56:41.429650 2026] [:error] [pid 30019:tid 30036] [client 4.194.88.198:1807] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aWElOUz3igHGwX5f7IoOIAAAAAw"]
[Fri Jan 09 23:56:41.607727 2026] [:error] [pid 1366:tid 1386] [client 4.194.88.198:1673] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aWElORmasveKu8_ec1WmPQAAAZE"]
[Fri Jan 09 23:56:41.786466 2026] [:error] [pid 44848:tid 44855] [client 4.194.88.198:1777] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aWElOajajoTJAbEk87z21QAAAEU"]
[Fri Jan 09 23:56:41.962463 2026] [:error] [pid 14872:tid 14880] [client 4.194.88.198:2036] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aWElOaIUELhgYLNp1sZaqQAAAsY"]
[Fri Jan 09 23:56:42.142417 2026] [:error] [pid 30021:tid 30096] [client 4.194.88.198:1862] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aWElOg_M8aRtsTog5J_EYQAAAM8"]
[Fri Jan 09 23:56:42.315943 2026] [:error] [pid 30021:tid 30097] [client 4.194.88.198:1839] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aWElOg_M8aRtsTog5J_EYgAAANA"]
[Fri Jan 09 23:56:42.499688 2026] [:error] [pid 14739:tid 14752] [client 4.194.88.198:1973] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aWElOl63M6_PkLt_IJKGogAAAcs"]
[Fri Jan 09 23:56:42.696835 2026] [:error] [pid 44848:tid 44852] [client 4.194.88.198:1835] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aWElOqjajoTJAbEk87z21gAAAEI"]
[Fri Jan 09 23:56:42.881244 2026] [:error] [pid 30021:tid 30100] [client 4.194.88.198:1812] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aWElOg_M8aRtsTog5J_EYwAAANM"]
[Fri Jan 09 23:56:43.076592 2026] [:error] [pid 1366:tid 1368] [client 4.194.88.198:1831] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aWElOxmasveKu8_ec1WmQwAAAYA"]
[Fri Jan 09 23:56:43.261889 2026] [:error] [pid 14801:tid 14822] [client 4.194.88.198:1752] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aWElO98UWXrz_OQYgF2DdQAAAlM"]
[Fri Jan 09 23:56:43.434575 2026] [:error] [pid 14770:tid 14780] [client 4.194.88.198:1772] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aWElOx5QbaVZ-6newJZcnQAAAgg"]
[Fri Jan 09 23:56:43.637475 2026] [:error] [pid 30019:tid 30043] [client 4.194.88.198:1847] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aWElO0z3igHGwX5f7IoOJAAAABM"]
[Fri Jan 09 23:56:43.829892 2026] [:error] [pid 44848:tid 44871] [client 4.194.88.198:1669] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aWElO6jajoTJAbEk87z22gAAAFU"]
[Fri Jan 09 23:56:44.004984 2026] [:error] [pid 1366:tid 1382] [client 4.194.88.198:1804] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aWElPBmasveKu8_ec1WmSQAAAY0"]
[Fri Jan 09 23:56:44.178193 2026] [:error] [pid 14770:tid 14778] [client 4.194.88.198:1754] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aWElPB5QbaVZ-6newJZcngAAAgY"]
[Fri Jan 09 23:56:44.372172 2026] [:error] [pid 14872:tid 14877] [client 4.194.88.198:1682] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aWElPKIUELhgYLNp1sZaqwAAAsM"]
[Fri Jan 09 23:56:44.546003 2026] [:error] [pid 30021:tid 30099] [client 4.194.88.198:1850] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aWElPA_M8aRtsTog5J_EaQAAANI"]
[Fri Jan 09 23:56:44.719483 2026] [:error] [pid 14770:tid 14790] [client 4.194.88.198:1683] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aWElPB5QbaVZ-6newJZcnwAAAhI"]
[Fri Jan 09 23:56:45.001466 2026] [:error] [pid 14739:tid 14759] [client 4.194.88.198:1745] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aWElPV63M6_PkLt_IJKGpAAAAdI"]
[Fri Jan 09 23:56:45.181721 2026] [:error] [pid 14770:tid 14795] [client 4.194.88.198:1741] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aWElPR5QbaVZ-6newJZcoAAAAhc"]
[Fri Jan 09 23:56:45.357783 2026] [:error] [pid 30019:tid 30038] [client 4.194.88.198:1767] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aWElPUz3igHGwX5f7IoOKQAAAA4"]
[Fri Jan 09 23:56:45.582577 2026] [:error] [pid 14770:tid 14789] [client 4.194.88.198:1735] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aWElPR5QbaVZ-6newJZcoQAAAhE"]
[Fri Jan 09 23:56:45.760880 2026] [:error] [pid 30019:tid 30039] [client 4.194.88.198:1967] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aWElPUz3igHGwX5f7IoOKgAAAA8"]
[Fri Jan 09 23:56:45.970073 2026] [:error] [pid 1366:tid 1383] [client 4.194.88.198:9546] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aWElPRmasveKu8_ec1WmTgAAAY4"]
[Fri Jan 09 23:56:46.143932 2026] [:error] [pid 14739:tid 14750] [client 4.194.88.198:1747] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aWElPl63M6_PkLt_IJKGpgAAAck"]
[Fri Jan 09 23:56:46.329872 2026] [:error] [pid 14770:tid 14775] [client 4.194.88.198:1784] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aWElPh5QbaVZ-6newJZcogAAAgM"]
[Fri Jan 09 23:56:46.548600 2026] [:error] [pid 14739:tid 14751] [client 4.194.88.198:1872] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aWElPl63M6_PkLt_IJKGqAAAAco"]
[Fri Jan 09 23:56:46.741176 2026] [:error] [pid 44848:tid 44858] [client 4.194.88.198:1789] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aWElPqjajoTJAbEk87z23QAAAEg"]
[Fri Jan 09 23:56:46.924735 2026] [:error] [pid 14770:tid 14782] [client 4.194.88.198:1796] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aWElPh5QbaVZ-6newJZcowAAAgo"]
[Fri Jan 09 23:56:47.103122 2026] [:error] [pid 1366:tid 1368] [client 4.194.88.198:1686] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aWElPxmasveKu8_ec1WmTwAAAYA"]
[Fri Jan 09 23:56:47.278712 2026] [:error] [pid 14831:tid 14840] [client 4.194.88.198:1672] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aWElP_aKOMCmJcAyBm1ZBQAAAoc"]
[Fri Jan 09 23:56:47.475801 2026] [:error] [pid 14831:tid 14851] [client 4.194.88.198:1738] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aWElP_aKOMCmJcAyBm1ZBgAAApI"]
[Fri Jan 09 23:56:47.650641 2026] [:error] [pid 14770:tid 14788] [client 4.194.88.198:1889] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aWElPx5QbaVZ-6newJZcpAAAAhA"]
[Fri Jan 09 23:56:47.826619 2026] [:error] [pid 30021:tid 30095] [client 4.194.88.198:1687] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aWElPw_M8aRtsTog5J_EbgAAAM4"]
[Fri Jan 09 23:56:48.063395 2026] [:error] [pid 14770:tid 14794] [client 4.194.88.198:1750] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aWElQB5QbaVZ-6newJZcpQAAAhY"]
[Fri Jan 09 23:56:48.237589 2026] [:error] [pid 14770:tid 14784] [client 4.194.88.198:1771] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aWElQB5QbaVZ-6newJZcpwAAAgw"]
[Fri Jan 09 23:56:48.416161 2026] [:error] [pid 30021:tid 30089] [client 4.194.88.198:1779] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aWElQA_M8aRtsTog5J_EcgAAAMg"]
[Fri Jan 09 23:56:48.593571 2026] [:error] [pid 30020:tid 30056] [client 4.194.88.198:1719] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aWElQMrjc66qOisG6L33BQAAAII"]
[Fri Jan 09 23:56:48.774823 2026] [:error] [pid 14831:tid 14837] [client 4.194.88.198:1548] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aWElQPaKOMCmJcAyBm1ZCAAAAoQ"]
[Fri Jan 09 23:56:48.965685 2026] [:error] [pid 1366:tid 1393] [client 4.194.88.198:1734] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aWElQBmasveKu8_ec1WmUAAAAZg"]
[Fri Jan 09 23:56:49.140155 2026] [:error] [pid 1366:tid 1376] [client 4.194.88.198:1602] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aWElQRmasveKu8_ec1WmUQAAAYc"]
[Fri Jan 09 23:56:49.333366 2026] [:error] [pid 1366:tid 1391] [client 4.194.88.198:1701] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aWElQRmasveKu8_ec1WmUgAAAZY"]
[Fri Jan 09 23:56:49.523131 2026] [:error] [pid 14831:tid 14848] [client 4.194.88.198:1704] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aWElQfaKOMCmJcAyBm1ZCwAAAo8"]
[Fri Jan 09 23:56:49.702627 2026] [:error] [pid 1366:tid 1371] [client 4.194.88.198:1640] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aWElQRmasveKu8_ec1WmVQAAAYM"]
[Fri Jan 09 23:56:49.882347 2026] [:error] [pid 14770:tid 14785] [client 4.194.88.198:1679] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aWElQR5QbaVZ-6newJZcqgAAAg0"]
[Fri Jan 09 23:56:50.081892 2026] [:error] [pid 30021:tid 30097] [client 4.194.88.198:1691] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aWElQg_M8aRtsTog5J_EdAAAANA"]
[Fri Jan 09 23:56:50.259612 2026] [:error] [pid 30020:tid 30068] [client 4.194.88.198:1769] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aWElQsrjc66qOisG6L33CQAAAI4"]
[Fri Jan 09 23:56:50.439793 2026] [:error] [pid 44848:tid 44859] [client 4.194.88.198:1759] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aWElQqjajoTJAbEk87z24AAAAEk"]
[Fri Jan 09 23:56:50.643058 2026] [:error] [pid 14801:tid 14827] [client 4.194.88.198:1836] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aWElQt8UWXrz_OQYgF2DeQAAAlg"]
[Fri Jan 09 23:56:50.815908 2026] [:error] [pid 30020:tid 30058] [client 4.194.88.198:1720] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aWElQsrjc66qOisG6L33CgAAAIQ"]
[Fri Jan 09 23:56:51.003392 2026] [:error] [pid 30020:tid 30063] [client 4.194.88.198:1667] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aWElQ8rjc66qOisG6L33CwAAAIk"]
[Fri Jan 09 23:56:51.183858 2026] [:error] [pid 1366:tid 1387] [client 4.194.88.198:9528] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aWElQxmasveKu8_ec1WmWAAAAZI"]
[Fri Jan 09 23:56:51.359320 2026] [:error] [pid 14831:tid 14849] [client 4.194.88.198:1828] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aWElQ_aKOMCmJcAyBm1ZDAAAApA"]
[Fri Jan 09 23:56:51.542322 2026] [:error] [pid 30021:tid 30091] [client 4.194.88.198:1674] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aWElQw_M8aRtsTog5J_EdgAAAMo"]
[Fri Jan 09 23:56:51.717928 2026] [:error] [pid 14831:tid 14836] [client 4.194.88.198:1737] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aWElQ_aKOMCmJcAyBm1ZDwAAAoM"]
[Fri Jan 09 23:56:51.935340 2026] [:error] [pid 1366:tid 1375] [client 4.194.88.198:1694] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aWElQxmasveKu8_ec1WmWwAAAYY"]
[Fri Jan 09 23:56:52.188120 2026] [:error] [pid 14831:tid 14834] [client 4.194.88.198:1782] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aWElRPaKOMCmJcAyBm1ZEAAAAoE"]
[Fri Jan 09 23:56:52.366846 2026] [:error] [pid 14831:tid 14853] [client 4.194.88.198:1778] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aWElRPaKOMCmJcAyBm1ZEQAAApQ"]
[Fri Jan 09 23:56:52.547968 2026] [:error] [pid 44848:tid 44856] [client 4.194.88.198:1894] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aWElRKjajoTJAbEk87z24QAAAEY"]
[Fri Jan 09 23:56:52.735063 2026] [:error] [pid 30019:tid 30025] [client 4.194.88.198:1800] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aWElREz3igHGwX5f7IoOLAAAAAE"]
[Fri Jan 09 23:56:52.940665 2026] [:error] [pid 14831:tid 14844] [client 4.194.88.198:1608] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aWElRPaKOMCmJcAyBm1ZEwAAAos"]
[Fri Jan 09 23:56:53.139038 2026] [:error] [pid 30019:tid 30036] [client 4.194.88.198:1748] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aWElRUz3igHGwX5f7IoOLQAAAAw"]
[Fri Jan 09 23:56:53.371443 2026] [:error] [pid 14801:tid 14812] [client 4.194.88.198:1722] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aWElRd8UWXrz_OQYgF2DegAAAkk"]
[Fri Jan 09 23:56:53.589877 2026] [:error] [pid 14831:tid 14856] [client 4.194.88.198:1666] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aWElRfaKOMCmJcAyBm1ZFAAAApc"]
[Fri Jan 09 23:56:53.774182 2026] [:error] [pid 14831:tid 14840] [client 4.194.88.198:1740] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aWElRfaKOMCmJcAyBm1ZFQAAAoc"]
[Fri Jan 09 23:56:53.997390 2026] [:error] [pid 44848:tid 44864] [client 4.194.88.198:1681] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aWElRajajoTJAbEk87z24wAAAE4"]
[Fri Jan 09 23:56:54.210931 2026] [:error] [pid 14831:tid 14851] [client 4.194.88.198:1757] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aWElRvaKOMCmJcAyBm1ZFgAAApI"]
[Fri Jan 09 23:56:54.423537 2026] [:error] [pid 14831:tid 14837] [client 4.194.88.198:1721] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aWElRvaKOMCmJcAyBm1ZFwAAAoQ"]
[Fri Jan 09 23:56:54.664189 2026] [:error] [pid 14872:tid 14884] [client 4.194.88.198:1910] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aWElRqIUELhgYLNp1sZarAAAAso"]
[Fri Jan 09 23:56:54.839700 2026] [:error] [pid 14801:tid 14816] [client 4.194.88.198:1604] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aWElRt8UWXrz_OQYgF2DewAAAk0"]
[Fri Jan 09 23:56:55.022910 2026] [:error] [pid 14872:tid 14892] [client 4.194.88.198:1723] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aWElR6IUELhgYLNp1sZarQAAAtI"]
[Fri Jan 09 23:56:55.251103 2026] [:error] [pid 14801:tid 14823] [client 4.194.88.198:1780] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aWElR98UWXrz_OQYgF2DfAAAAlQ"]
[Fri Jan 09 23:56:55.449337 2026] [:error] [pid 14770:tid 14774] [client 4.194.88.198:1697] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aWElRx5QbaVZ-6newJZcrgAAAgI"]
[Fri Jan 09 23:56:55.631371 2026] [:error] [pid 14801:tid 14803] [client 4.194.88.198:1651] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aWElR98UWXrz_OQYgF2DfQAAAkA"]
[Fri Jan 09 23:56:55.843170 2026] [:error] [pid 14831:tid 14855] [client 4.194.88.198:1709] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aWElR_aKOMCmJcAyBm1ZGQAAApY"]
[Fri Jan 09 23:56:56.020326 2026] [:error] [pid 44848:tid 44867] [client 4.194.88.198:1753] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aWElSKjajoTJAbEk87z25AAAAFE"]
[Fri Jan 09 23:56:56.224012 2026] [:error] [pid 44848:tid 44863] [client 4.194.88.198:1689] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aWElSKjajoTJAbEk87z25QAAAE0"]
[Fri Jan 09 23:56:56.409744 2026] [:error] [pid 44848:tid 44862] [client 4.194.88.198:1609] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aWElSKjajoTJAbEk87z25gAAAEw"]
[Fri Jan 09 23:56:56.592216 2026] [:error] [pid 14872:tid 14887] [client 4.194.88.198:1699] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aWElSKIUELhgYLNp1sZargAAAs0"]
[Fri Jan 09 23:56:56.781527 2026] [:error] [pid 14770:tid 14789] [client 4.194.88.198:1688] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aWElSB5QbaVZ-6newJZcsQAAAhE"]
[Fri Jan 09 23:56:56.955619 2026] [:error] [pid 14801:tid 14805] [client 4.194.88.198:1765] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aWElSN8UWXrz_OQYgF2DfwAAAkI"]
[Fri Jan 09 23:56:57.131470 2026] [:error] [pid 14872:tid 14894] [client 4.194.88.198:1700] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aWElSaIUELhgYLNp1sZarwAAAtQ"]
[Fri Jan 09 23:56:57.353868 2026] [:error] [pid 14801:tid 14824] [client 4.194.88.198:1690] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aWElSd8UWXrz_OQYgF2DgAAAAlU"]
[Fri Jan 09 23:56:57.590507 2026] [:error] [pid 14801:tid 14819] [client 4.194.88.198:1726] [client 4.194.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aWElSd8UWXrz_OQYgF2DgQAAAlA"]
[Sat Jan 10 00:54:51.792054 2026] [proxy_fcgi:error] [pid 44848:tid 44859] [client 103.4.122.14:58502] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Jan 10 00:54:56.833210 2026] [proxy_fcgi:error] [pid 30021:tid 30083] [client 103.4.122.14:58648] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Jan 10 01:46:29.224912 2026] [:error] [pid 14831:tid 14843] [client 4.197.168.41:4063] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6y7t.php"] [unique_id "aWE-9faKOMCmJcAyBm1nbAAAAoo"]
[Sat Jan 10 01:46:29.275647 2026] [:error] [pid 1366:tid 1370] [client 4.197.168.41:3982] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6y7t.php"] [unique_id "aWE-9RmasveKu8_ec1XF7gAAAYI"]
[Sat Jan 10 01:46:29.366897 2026] [:error] [pid 30019:tid 30030] [client 4.197.168.41:3997] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6y7t.php"] [unique_id "aWE-9Uz3igHGwX5f7IohAwAAAAY"]
[Sat Jan 10 01:46:29.501680 2026] [:error] [pid 30020:tid 30072] [client 4.197.168.41:4064] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6y7t.php"] [unique_id "aWE-9crjc66qOisG6L0DugAAAJI"]
[Sat Jan 10 01:46:29.704848 2026] [:error] [pid 30019:tid 30032] [client 4.197.168.41:3984] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/monso.php"] [unique_id "aWE-9Uz3igHGwX5f7IohBgAAAAg"]
[Sat Jan 10 01:46:29.998384 2026] [:error] [pid 1366:tid 1380] [client 4.197.168.41:4050] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/monso.php"] [unique_id "aWE-9RmasveKu8_ec1XF7wAAAYs"]
[Sat Jan 10 01:46:30.080445 2026] [:error] [pid 14770:tid 14774] [client 4.197.168.41:4033] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/monso.php"] [unique_id "aWE-9h5QbaVZ-6newJZrLgAAAgI"]
[Sat Jan 10 01:46:30.191913 2026] [:error] [pid 30020:tid 30058] [client 4.197.168.41:4089] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/monso.php"] [unique_id "aWE-9srjc66qOisG6L0DuwAAAIQ"]
[Sat Jan 10 01:46:30.344070 2026] [:error] [pid 30021:tid 30102] [client 4.197.168.41:3981] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnnof6.php"] [unique_id "aWE-9g_M8aRtsTog5J_VzwAAANU"]
[Sat Jan 10 01:46:30.406170 2026] [:error] [pid 44848:tid 44864] [client 4.197.168.41:4061] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnnof6.php"] [unique_id "aWE-9qjajoTJAbEk87wL6wAAAE4"]
[Sat Jan 10 01:46:30.520944 2026] [:error] [pid 14770:tid 14778] [client 4.197.168.41:4071] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnnof6.php"] [unique_id "aWE-9h5QbaVZ-6newJZrLwAAAgY"]
[Sat Jan 10 01:46:30.645319 2026] [:error] [pid 30020:tid 30061] [client 4.197.168.41:3988] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnnof6.php"] [unique_id "aWE-9srjc66qOisG6L0DvAAAAIc"]
[Sat Jan 10 01:46:30.769342 2026] [:error] [pid 14872:tid 14890] [client 4.197.168.41:4091] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/str.php"] [unique_id "aWE-9qIUELhgYLNp1sZp-AAAAtA"]
[Sat Jan 10 01:46:30.902014 2026] [:error] [pid 1366:tid 1373] [client 4.197.168.41:4066] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/str.php"] [unique_id "aWE-9hmasveKu8_ec1XF8AAAAYQ"]
[Sat Jan 10 01:46:31.019208 2026] [:error] [pid 1366:tid 1381] [client 4.197.168.41:4052] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/str.php"] [unique_id "aWE-9xmasveKu8_ec1XF8gAAAYw"]
[Sat Jan 10 01:46:31.105114 2026] [:error] [pid 1366:tid 1392] [client 4.197.168.41:4058] [client 4.197.168.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/str.php"] [unique_id "aWE-9xmasveKu8_ec1XF8wAAAZc"]
[Sat Jan 10 01:58:27.266158 2026] [:error] [pid 14801:tid 14818] [client 34.125.212.143:62382] [client 34.125.212.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.125.212.143, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aWFBw98UWXrz_OQYgF2T9AAAAk8"]
[Sat Jan 10 01:58:33.196827 2026] [:error] [pid 14801:tid 14809] [client 34.125.212.143:62382] [client 34.125.212.143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWFByd8UWXrz_OQYgF2T_gAAAkY"]
[Sat Jan 10 01:58:35.122601 2026] [:error] [pid 14801:tid 14826] [client 34.125.212.143:62382] [client 34.125.212.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.125.212.143, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aWFBy98UWXrz_OQYgF2UAQAAAlc"]
[Sat Jan 10 02:30:34.505182 2026] [:error] [pid 1366:tid 1371] [client 34.23.205.65:49337] [client 34.23.205.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.205.65, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aWFJShmasveKu8_ec1XRVwAAAYM"]
[Sat Jan 10 02:30:40.109016 2026] [:error] [pid 1366:tid 1368] [client 34.23.205.65:49337] [client 34.23.205.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWFJUBmasveKu8_ec1XRXQAAAYA"]
[Sat Jan 10 02:30:42.007158 2026] [:error] [pid 1366:tid 1382] [client 34.23.205.65:49337] [client 34.23.205.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.205.65, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aWFJUhmasveKu8_ec1XRXwAAAY0"]
[Sat Jan 10 03:38:43.261999 2026] [:error] [pid 17547:tid 17647] [client 185.128.227.63:51400] [client 185.128.227.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.128.227.63, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWFZQ6B_6q4XA1ESkTA1pQAAAEc"]
[Sat Jan 10 03:38:50.933145 2026] [:error] [pid 17540:tid 17632] [client 185.128.227.63:57765] [client 185.128.227.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.128.227.63, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWFZSlTFfdUDol-SSuNvvQAAABQ"]
[Sat Jan 10 09:02:32.566758 2026] [:error] [pid 20647:tid 20696] [client 83.229.107.129:39533] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWGlKKvb0x69MarUHzDFfgAAAE4"]
[Sat Jan 10 09:02:32.569405 2026] [:error] [pid 20646:tid 20662] [client 83.229.107.129:44293] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWGlKCKwdq_UhOM64b7K8QAAAAc"]
[Sat Jan 10 09:02:32.579564 2026] [:error] [pid 31369:tid 31392] [client 83.229.107.129:35393] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWGlKLgqeMKgT1uTxuIc0gAAAVU"]
[Sat Jan 10 09:02:32.584474 2026] [:error] [pid 31369:tid 31389] [client 83.229.107.129:37191] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWGlKLgqeMKgT1uTxuIc0wAAAVI"]
[Sat Jan 10 09:03:46.995419 2026] [:error] [pid 20744:tid 20781] [client 83.229.107.129:42435] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWGlckA8oR5jvkFpcP-NWQAAANg"]
[Sat Jan 10 09:50:30.441723 2026] [:error] [pid 31369:tid 31382] [client 159.223.72.96:63967] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.72.96, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aWGwZrgqeMKgT1uTxuIoHAAAAUs"]
[Sat Jan 10 09:50:33.053725 2026] [:error] [pid 31369:tid 31379] [client 159.223.72.96:63967] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.72.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWGwabgqeMKgT1uTxuIoHQAAAUg"]
[Sat Jan 10 18:54:06.260348 2026] [:error] [pid 1125:tid 1129] [client 143.244.141.160:58715] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aWIvznqAWYc4UwRgeOdk8wAAAEI"], referer: binance.com
[Sat Jan 10 23:02:31.058000 2026] [:error] [pid 1249:tid 1257] [client 138.197.13.155:55593] [client 138.197.13.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aWJqB0td4KGpcdnrDZWy8QAAAMU"], referer: binance.com
[Sun Jan 11 08:38:00.572050 2026] [:error] [pid 35977:tid 36004] [client 167.99.190.136:63598] [client 167.99.190.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.190.136, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWLw6LDST5RMqStLeP3-pAAAAhg"]
[Sun Jan 11 11:00:27.839329 2026] [:error] [pid 35730:tid 35747] [client 194.87.252.108:55950] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/usr/local/www/.git/config"] [unique_id "aWMSSzi7U_mfHtESQHn4AgAAAc8"]
[Sun Jan 11 11:00:28.809021 2026] [:error] [pid 35977:tid 35994] [client 194.87.252.108:51794] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/repo/.git/config"] [unique_id "aWMSTLDST5RMqStLeP0WTAAAAg4"]
[Sun Jan 11 11:00:28.809038 2026] [:error] [pid 5272:tid 5281] [client 194.87.252.108:52610] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/htdocs/.git/config"] [unique_id "aWMSTFp55bCsukUvYGYCFQAAAMc"]
[Sun Jan 11 11:00:28.811684 2026] [:error] [pid 5155:tid 5226] [client 194.87.252.108:52778] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/html/.git/config"] [unique_id "aWMSTFgEKFpNs0_zLGnIqgAAAIo"]
[Sun Jan 11 11:00:28.813108 2026] [:error] [pid 35977:tid 35986] [client 194.87.252.108:52405] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/home/.git/config"] [unique_id "aWMSTLDST5RMqStLeP0WTQAAAgY"]
[Sun Jan 11 11:00:28.814290 2026] [:error] [pid 35977:tid 36003] [client 194.87.252.108:52281] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/application/.git/config"] [unique_id "aWMSTLDST5RMqStLeP0WTgAAAhc"]
[Sun Jan 11 11:00:28.818089 2026] [:error] [pid 5272:tid 5288] [client 194.87.252.108:51797] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.git/config"] [unique_id "aWMSTFp55bCsukUvYGYCFgAAAM4"]
[Sun Jan 11 11:00:28.820457 2026] [:error] [pid 5272:tid 5287] [client 194.87.252.108:51995] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wwwroot/.git/config"] [unique_id "aWMSTFp55bCsukUvYGYCFwAAAM0"]
[Sun Jan 11 11:00:28.820889 2026] [:error] [pid 35977:tid 35993] [client 194.87.252.108:52612] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/home/www/.git/config"] [unique_id "aWMSTLDST5RMqStLeP0WTwAAAg0"]
[Sun Jan 11 11:00:28.821978 2026] [:error] [pid 35977:tid 35983] [client 194.87.252.108:51931] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/project/.git/config"] [unique_id "aWMSTLDST5RMqStLeP0WUAAAAgM"]
[Sun Jan 11 11:00:28.822242 2026] [:error] [pid 35977:tid 36000] [client 194.87.252.108:52505] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/html/.git/config"] [unique_id "aWMSTLDST5RMqStLeP0WUQAAAhQ"]
[Sun Jan 11 11:00:28.823354 2026] [:error] [pid 5155:tid 5216] [client 194.87.252.108:51894] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.git/config"] [unique_id "aWMSTFgEKFpNs0_zLGnIqwAAAIA"]
[Sun Jan 11 11:00:28.824013 2026] [:error] [pid 35977:tid 36001] [client 194.87.252.108:51893] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/www/.git/config"] [unique_id "aWMSTLDST5RMqStLeP0WUgAAAhU"]
[Sun Jan 11 11:00:28.824485 2026] [:error] [pid 35977:tid 35998] [client 194.87.252.108:51933] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/.git/config"] [unique_id "aWMSTLDST5RMqStLeP0WUwAAAhI"]
[Sun Jan 11 11:00:28.824885 2026] [:error] [pid 5155:tid 5240] [client 194.87.252.108:51792] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/site/.git/config"] [unique_id "aWMSTFgEKFpNs0_zLGnIrAAAAJg"]
[Sun Jan 11 11:00:28.825667 2026] [:error] [pid 5272:tid 5278] [client 194.87.252.108:51929] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/src/.git/config"] [unique_id "aWMSTFp55bCsukUvYGYCGAAAAMQ"]
[Sun Jan 11 11:00:28.826873 2026] [:error] [pid 5155:tid 5232] [client 194.87.252.108:51895] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public_html/.git/config"] [unique_id "aWMSTFgEKFpNs0_zLGnIrQAAAJA"]
[Sun Jan 11 11:00:28.827518 2026] [:error] [pid 5155:tid 5230] [client 194.87.252.108:51781] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aWMSTFgEKFpNs0_zLGnIrgAAAI4"]
[Sun Jan 11 11:00:28.828384 2026] [:error] [pid 5155:tid 5223] [client 194.87.252.108:51772] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/home/public_html/.git/config"] [unique_id "aWMSTFgEKFpNs0_zLGnIrwAAAIc"]
[Sun Jan 11 11:00:28.836499 2026] [:error] [pid 5272:tid 5298] [client 194.87.252.108:51795] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.git/config"] [unique_id "aWMSTFp55bCsukUvYGYCGQAAANg"]
[Sun Jan 11 11:00:29.127106 2026] [:error] [pid 35977:tid 35981] [client 194.87.252.108:56482] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/srv/www/.git/config"] [unique_id "aWMSTbDST5RMqStLeP0WVAAAAgE"]
[Sun Jan 11 11:00:30.100720 2026] [:error] [pid 35977:tid 35993] [client 194.87.252.108:50781] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/laravel/.git/config"] [unique_id "aWMSTrDST5RMqStLeP0WVQAAAg0"]
[Sun Jan 11 11:00:30.102989 2026] [:error] [pid 40191:tid 40209] [client 194.87.252.108:50779] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-content/.git/config"] [unique_id "aWMSTkm2BH1CV1p0EUGFPAAAAtA"]
[Sun Jan 11 11:00:30.107278 2026] [:error] [pid 5152:tid 5171] [client 194.87.252.108:50786] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/symfony/.git/config"] [unique_id "aWMSThm0axGMFrpuXHBaWwAAAAk"]
[Sun Jan 11 11:00:30.107499 2026] [:error] [pid 5272:tid 5290] [client 194.87.252.108:50780] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-admin/.git/config"] [unique_id "aWMSTlp55bCsukUvYGYCHwAAANA"]
[Sun Jan 11 11:00:30.110179 2026] [:error] [pid 5272:tid 5280] [client 194.87.252.108:50782] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/cms/.git/config"] [unique_id "aWMSTlp55bCsukUvYGYCIAAAAMY"]
[Sun Jan 11 11:00:30.114024 2026] [:error] [pid 5272:tid 5288] [client 194.87.252.108:50776] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp/.git/config"] [unique_id "aWMSTlp55bCsukUvYGYCIQAAAM4"]
[Sun Jan 11 11:00:30.114144 2026] [:error] [pid 5272:tid 5281] [client 194.87.252.108:50778] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wordpress/.git/config"] [unique_id "aWMSTlp55bCsukUvYGYCIgAAAMc"]
[Sun Jan 11 11:00:30.114654 2026] [:error] [pid 5152:tid 5178] [client 194.87.252.108:50798] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/v2/.git/config"] [unique_id "aWMSThm0axGMFrpuXHBaXAAAABA"]
[Sun Jan 11 11:00:30.116388 2026] [:error] [pid 5152:tid 5163] [client 194.87.252.108:50858] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/administrator/.git/config"] [unique_id "aWMSThm0axGMFrpuXHBaXQAAAAE"]
[Sun Jan 11 11:00:30.116718 2026] [:error] [pid 5153:tid 5197] [client 194.87.252.108:50808] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/frontend/.git/config"] [unique_id "aWMSTs1QbNSPD9bRi76KxAAAAEg"]
[Sun Jan 11 11:00:30.119803 2026] [:error] [pid 11748:tid 11792] [client 194.87.252.108:50784] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/magento/.git/config"] [unique_id "aWMSTgC5xybrWOCNnoa2BgAAAY4"]
[Sun Jan 11 11:00:30.120342 2026] [:error] [pid 11748:tid 11780] [client 194.87.252.108:50789] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/shopify/.git/config"] [unique_id "aWMSTgC5xybrWOCNnoa2BwAAAYI"]
[Sun Jan 11 11:00:30.122048 2026] [:error] [pid 35977:tid 35983] [client 194.87.252.108:50788] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/prestashop/.git/config"] [unique_id "aWMSTrDST5RMqStLeP0WVgAAAgM"]
[Sun Jan 11 11:00:30.124049 2026] [:error] [pid 11748:tid 11789] [client 194.87.252.108:50783] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/drupal/.git/config"] [unique_id "aWMSTgC5xybrWOCNnoa2CAAAAYs"]
[Sun Jan 11 11:00:30.124063 2026] [:error] [pid 11748:tid 11798] [client 194.87.252.108:50855] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.git/config"] [unique_id "aWMSTgC5xybrWOCNnoa2CQAAAZQ"]
[Sun Jan 11 11:00:30.124274 2026] [:error] [pid 5272:tid 5287] [client 194.87.252.108:50785] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/joomla/.git/config"] [unique_id "aWMSTlp55bCsukUvYGYCIwAAAM0"]
[Sun Jan 11 11:00:30.126821 2026] [:error] [pid 5155:tid 5231] [client 194.87.252.108:50809] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.git/config"] [unique_id "aWMSTlgEKFpNs0_zLGnIsgAAAI8"]
[Sun Jan 11 11:00:30.132119 2026] [:error] [pid 5152:tid 5180] [client 194.87.252.108:50790] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.git/config"] [unique_id "aWMSThm0axGMFrpuXHBaXgAAABI"]
[Sun Jan 11 11:00:30.133964 2026] [:error] [pid 11748:tid 11790] [client 194.87.252.108:50805] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/v1/.git/config"] [unique_id "aWMSTgC5xybrWOCNnoa2CgAAAYw"]
[Sun Jan 11 11:00:30.441308 2026] [:error] [pid 35730:tid 35743] [client 194.87.252.108:54877] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/dashboard/.git/config"] [unique_id "aWMSTji7U_mfHtESQHn4AwAAAcs"]
[Sun Jan 11 11:00:31.385916 2026] [:error] [pid 5272:tid 5279] [client 194.87.252.108:59019] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/panel/.git/config"] [unique_id "aWMST1p55bCsukUvYGYCJgAAAMU"]
[Sun Jan 11 11:00:31.396426 2026] [:error] [pid 5272:tid 5297] [client 194.87.252.108:59239] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/r/.git/config"] [unique_id "aWMST1p55bCsukUvYGYCJwAAANc"]
[Sun Jan 11 11:00:31.397373 2026] [:error] [pid 11747:tid 11763] [client 194.87.252.108:59654] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/v2/.git/config"] [unique_id "aWMST6RFw84LNpZSk7mfegAAAUw"]
[Sun Jan 11 11:00:31.398830 2026] [:error] [pid 5155:tid 5218] [client 194.87.252.108:59212] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/git/.git/config"] [unique_id "aWMST1gEKFpNs0_zLGnIswAAAII"]
[Sun Jan 11 11:00:31.400068 2026] [:error] [pid 11747:tid 11767] [client 194.87.252.108:59209] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/control/.git/config"] [unique_id "aWMST6RFw84LNpZSk7mfewAAAVA"]
[Sun Jan 11 11:00:31.408072 2026] [:error] [pid 5155:tid 5224] [client 194.87.252.108:59734] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/version/.git/config"] [unique_id "aWMST1gEKFpNs0_zLGnItAAAAIg"]
[Sun Jan 11 11:00:31.409588 2026] [:error] [pid 11748:tid 11802] [client 194.87.252.108:59733] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/versions/.git/config"] [unique_id "aWMSTwC5xybrWOCNnoa2CwAAAZg"]
[Sun Jan 11 11:00:31.410130 2026] [:error] [pid 5155:tid 5227] [client 194.87.252.108:59640] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/v1/.git/config"] [unique_id "aWMST1gEKFpNs0_zLGnItQAAAIs"]
[Sun Jan 11 11:00:31.412587 2026] [:error] [pid 40191:tid 40194] [client 194.87.252.108:59215] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/g/.git/config"] [unique_id "aWMST0m2BH1CV1p0EUGFPQAAAsE"]
[Sun Jan 11 11:00:31.413009 2026] [:error] [pid 11747:tid 11774] [client 194.87.252.108:59478] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/repo/.git/config"] [unique_id "aWMST6RFw84LNpZSk7mffAAAAVc"]
[Sun Jan 11 11:00:31.413450 2026] [:error] [pid 5155:tid 5226] [client 194.87.252.108:59655] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/deploy/.git/config"] [unique_id "aWMST1gEKFpNs0_zLGnItgAAAIo"]
[Sun Jan 11 11:00:31.414197 2026] [:error] [pid 5153:tid 5210] [client 194.87.252.108:59595] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/c/.git/config"] [unique_id "aWMST81QbNSPD9bRi76KxQAAAFU"]
[Sun Jan 11 11:00:31.414406 2026] [:error] [pid 5155:tid 5216] [client 194.87.252.108:59868] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/deployment/.git/config"] [unique_id "aWMST1gEKFpNs0_zLGnItwAAAIA"]
[Sun Jan 11 11:00:31.415184 2026] [:error] [pid 35977:tid 36004] [client 194.87.252.108:59996] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/stage/.git/config"] [unique_id "aWMST7DST5RMqStLeP0WVwAAAhg"]
[Sun Jan 11 11:00:31.419953 2026] [:error] [pid 11748:tid 11787] [client 194.87.252.108:59618] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/code/.git/config"] [unique_id "aWMSTwC5xybrWOCNnoa2DAAAAYk"]
[Sun Jan 11 11:00:31.420256 2026] [:error] [pid 40191:tid 40214] [client 194.87.252.108:59807] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/prod/.git/config"] [unique_id "aWMST0m2BH1CV1p0EUGFPgAAAtU"]
[Sun Jan 11 11:00:31.428813 2026] [:error] [pid 40191:tid 40205] [client 194.87.252.108:59976] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/staging/.git/config"] [unique_id "aWMST0m2BH1CV1p0EUGFPwAAAsw"]
[Sun Jan 11 11:00:31.428847 2026] [:error] [pid 35977:tid 35984] [client 194.87.252.108:59906] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/production/.git/config"] [unique_id "aWMST7DST5RMqStLeP0WWAAAAgQ"]
[Sun Jan 11 11:00:31.430286 2026] [:error] [pid 40191:tid 40201] [client 194.87.252.108:59981] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/dev/.git/config"] [unique_id "aWMST0m2BH1CV1p0EUGFQAAAAsg"]
[Sun Jan 11 11:00:31.734750 2026] [:error] [pid 5155:tid 5240] [client 194.87.252.108:64506] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/development/.git/config"] [unique_id "aWMST1gEKFpNs0_zLGnIuQAAAJg"]
[Sun Jan 11 11:00:32.679768 2026] [:error] [pid 36611:tid 36632] [client 194.87.252.108:56529] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/testing/.git/config"] [unique_id "aWMSUD8oZoZHsoTdjhgcCwAAAlM"]
[Sun Jan 11 11:00:32.683106 2026] [:error] [pid 36611:tid 36625] [client 194.87.252.108:56527] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/test/.git/config"] [unique_id "aWMSUD8oZoZHsoTdjhgcDAAAAkw"]
[Sun Jan 11 11:00:32.683515 2026] [:error] [pid 5152:tid 5164] [client 194.87.252.108:56690] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/static/.git/config"] [unique_id "aWMSUBm0axGMFrpuXHBaXwAAAAI"]
[Sun Jan 11 11:00:32.693374 2026] [:error] [pid 5152:tid 5174] [client 194.87.252.108:56531] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/demo1/.git/config"] [unique_id "aWMSUBm0axGMFrpuXHBaYAAAAAw"]
[Sun Jan 11 11:00:32.696885 2026] [:error] [pid 5152:tid 5165] [client 194.87.252.108:56762] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/files/.git/config"] [unique_id "aWMSUBm0axGMFrpuXHBaYQAAAAM"]
[Sun Jan 11 11:00:32.697059 2026] [:error] [pid 35977:tid 35995] [client 194.87.252.108:57072] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/uploads/.git/config"] [unique_id "aWMSULDST5RMqStLeP0WWgAAAg8"]
[Sun Jan 11 11:00:32.697806 2026] [:error] [pid 5152:tid 5185] [client 194.87.252.108:56975] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/media/.git/config"] [unique_id "aWMSUBm0axGMFrpuXHBaYgAAABc"]
[Sun Jan 11 11:00:32.697975 2026] [:error] [pid 40191:tid 40203] [client 194.87.252.108:56660] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/assets/.git/config"] [unique_id "aWMSUEm2BH1CV1p0EUGFQgAAAso"]
[Sun Jan 11 11:00:32.698899 2026] [:error] [pid 40191:tid 40208] [client 194.87.252.108:56604] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/demo2/.git/config"] [unique_id "aWMSUEm2BH1CV1p0EUGFQwAAAs8"]
[Sun Jan 11 11:00:32.700263 2026] [:error] [pid 5152:tid 5182] [client 194.87.252.108:56528] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/demo/.git/config"] [unique_id "aWMSUBm0axGMFrpuXHBaYwAAABQ"]
[Sun Jan 11 11:00:32.700897 2026] [:error] [pid 36611:tid 36627] [client 194.87.252.108:57078] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/downloads/.git/config"] [unique_id "aWMSUD8oZoZHsoTdjhgcDQAAAk4"]
[Sun Jan 11 11:00:32.701639 2026] [:error] [pid 36611:tid 36619] [client 194.87.252.108:57082] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/cache/.git/config"] [unique_id "aWMSUD8oZoZHsoTdjhgcDgAAAkY"]
[Sun Jan 11 11:00:32.701785 2026] [:error] [pid 5152:tid 5183] [client 194.87.252.108:56607] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/content/.git/config"] [unique_id "aWMSUBm0axGMFrpuXHBaZAAAABU"]
[Sun Jan 11 11:00:32.709932 2026] [:error] [pid 36611:tid 36631] [client 194.87.252.108:57080] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/temp/.git/config"] [unique_id "aWMSUD8oZoZHsoTdjhgcDwAAAlI"]
[Sun Jan 11 11:00:32.714171 2026] [:error] [pid 36611:tid 36623] [client 194.87.252.108:57079] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/tmp/.git/config"] [unique_id "aWMSUD8oZoZHsoTdjhgcEAAAAko"]
[Sun Jan 11 11:00:32.721652 2026] [:error] [pid 35977:tid 35980] [client 194.87.252.108:57064] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/images/.git/config"] [unique_id "aWMSULDST5RMqStLeP0WWwAAAgA"]
[Sun Jan 11 11:00:32.727217 2026] [:error] [pid 36611:tid 36635] [client 194.87.252.108:57089] [client 194.87.252.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/logs/.git/config"] [unique_id "aWMSUD8oZoZHsoTdjhgcEQAAAlY"]
[Sun Jan 11 14:47:57.310811 2026] [:error] [pid 40191:tid 40201] [client 4.199.143.143:5146] [client 4.199.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWNHnUm2BH1CV1p0EUGgwwAAAsg"]
[Sun Jan 11 14:47:57.492675 2026] [:error] [pid 11748:tid 11779] [client 4.199.143.143:5147] [client 4.199.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWNHnQC5xybrWOCNnobQngAAAYE"]
[Sun Jan 11 14:48:38.704558 2026] [:error] [pid 35730:tid 35747] [client 194.193.147.15:39816] [client 194.193.147.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.193.147.15, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWNHxji7U_mfHtESQHkN3wAAAc8"]
[Sun Jan 11 22:42:40.743672 2026] [autoindex:error] [pid 5153:tid 5195] [client 194.163.170.99:53335] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Jan 12 02:00:15.330578 2026] [:error] [pid 5155:tid 5232] [client 20.78.177.148:3964] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWPlL1gEKFpNs0_zLGlITQAAAJA"]
[Mon Jan 12 02:00:18.264484 2026] [:error] [pid 60999:tid 61008] [client 20.78.177.148:3909] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWPlMlqLNvGnTVjR-ZVxrQAAAoc"]
[Mon Jan 12 02:00:23.639372 2026] [:error] [pid 5272:tid 5286] [client 20.78.177.148:2626] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWPlN1p55bCsukUvYGanYgAAAMw"]
[Mon Jan 12 02:00:27.186847 2026] [:error] [pid 5153:tid 5213] [client 20.78.177.148:21609] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWPlO81QbNSPD9bRi7737AAAAFg"]
[Mon Jan 12 02:00:28.839995 2026] [:error] [pid 55541:tid 55636] [client 20.78.177.148:27261] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/check.php"] [unique_id "aWPlPMfkoYofAPYb0XYR4wAAARg"]
[Mon Jan 12 02:00:31.146426 2026] [:error] [pid 5153:tid 5201] [client 20.78.177.148:2678] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/check.php"] [unique_id "aWPlP81QbNSPD9bRi7737QAAAEw"]
[Mon Jan 12 02:00:31.836102 2026] [:error] [pid 5153:tid 5193] [client 20.78.177.148:21616] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/check.php"] [unique_id "aWPlP81QbNSPD9bRi7737wAAAEQ"]
[Mon Jan 12 02:00:35.161748 2026] [:error] [pid 5153:tid 5195] [client 20.78.177.148:30183] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/check.php"] [unique_id "aWPlQ81QbNSPD9bRi7738wAAAEY"]
[Mon Jan 12 02:00:35.950358 2026] [:error] [pid 5152:tid 5174] [client 20.78.177.148:21533] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aWPlQxm0axGMFrpuXHDG2AAAAAw"]
[Mon Jan 12 02:00:59.927939 2026] [:error] [pid 5153:tid 5211] [client 20.78.177.148:30203] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inject.php"] [unique_id "aWPlW81QbNSPD9bRi774CQAAAFY"]
[Mon Jan 12 02:01:04.119446 2026] [:error] [pid 36611:tid 36617] [client 20.78.177.148:35054] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inject.php"] [unique_id "aWPlYD8oZoZHsoTdjhiPwgAAAkQ"]
[Mon Jan 12 02:02:14.215393 2026] [:error] [pid 5272:tid 5279] [client 20.78.177.148:3356] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aWPlplp55bCsukUvYGantwAAAMU"]
[Mon Jan 12 02:02:23.617736 2026] [:error] [pid 5155:tid 5220] [client 20.78.177.148:3812] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aWPlr1gEKFpNs0_zLGlInQAAAIQ"]
[Mon Jan 12 02:02:43.286059 2026] [:error] [pid 36611:tid 36630] [client 20.78.177.148:3244] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aWPlwz8oZoZHsoTdjhiQJwAAAlE"]
[Mon Jan 12 02:02:59.896267 2026] [:error] [pid 55541:tid 55625] [client 20.78.177.148:26684] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/999.php"] [unique_id "aWPl08fkoYofAPYb0XYSVQAAAQ0"]
[Mon Jan 12 02:03:02.240703 2026] [:error] [pid 36611:tid 36616] [client 20.78.177.148:23121] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/999.php"] [unique_id "aWPl1j8oZoZHsoTdjhiQPgAAAkM"]
[Mon Jan 12 02:03:06.427572 2026] [:error] [pid 35977:tid 36004] [client 20.78.177.148:2574] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/999.php"] [unique_id "aWPl2rDST5RMqStLeP2koQAAAhg"]
[Mon Jan 12 02:03:07.939398 2026] [:error] [pid 35730:tid 35743] [client 20.78.177.148:21001] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/999.php"] [unique_id "aWPl2zi7U_mfHtESQHmOrwAAAcs"]
[Mon Jan 12 02:03:09.241842 2026] [:error] [pid 35730:tid 35750] [client 20.78.177.148:11931] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "aWPl3Ti7U_mfHtESQHmOsQAAAdI"]
[Mon Jan 12 02:03:10.925227 2026] [:error] [pid 60999:tid 61018] [client 20.78.177.148:11932] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "aWPl3lqLNvGnTVjR-ZVyJgAAApE"]
[Mon Jan 12 02:04:23.438112 2026] [:error] [pid 5153:tid 5209] [client 20.78.177.148:22084] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aWPmJ81QbNSPD9bRi774zwAAAFQ"]
[Mon Jan 12 02:04:31.146458 2026] [:error] [pid 35977:tid 35999] [client 20.78.177.148:36375] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aWPmL7DST5RMqStLeP2kzgAAAhM"]
[Mon Jan 12 02:04:33.167516 2026] [:error] [pid 36611:tid 36627] [client 20.78.177.148:36404] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aWPmMT8oZoZHsoTdjhiQmAAAAk4"]
[Mon Jan 12 02:04:35.831455 2026] [:error] [pid 55541:tid 55626] [client 20.78.177.148:3995] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aWPmM8fkoYofAPYb0XYSngAAAQ4"]
[Mon Jan 12 02:04:39.858137 2026] [:error] [pid 60999:tid 61020] [client 20.78.177.148:35743] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aWPmN1qLNvGnTVjR-ZVyeAAAApM"]
[Mon Jan 12 02:04:44.512841 2026] [:error] [pid 5155:tid 5229] [client 20.78.177.148:35736] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aWPmPFgEKFpNs0_zLGlJBQAAAI0"]
[Mon Jan 12 02:04:47.954529 2026] [:error] [pid 5155:tid 5226] [client 20.78.177.148:3437] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aWPmP1gEKFpNs0_zLGlJCAAAAIo"]
[Mon Jan 12 02:04:52.139018 2026] [:error] [pid 60999:tid 61004] [client 20.78.177.148:33821] [client 20.78.177.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.exe"] [unique_id "aWPmRFqLNvGnTVjR-ZVyfQAAAoM"]
[Mon Jan 12 02:05:54.547935 2026] [:error] [pid 55541:tid 55633] [client 20.78.177.148:48597] [client 20.78.177.148] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".phpquebecoils.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWPmgsfkoYofAPYb0XYSugAAARU"]
[Mon Jan 12 19:20:02.011828 2026] [authz_core:error] [pid 51897:tid 51936] [client 137.184.231.59:65077] AH01630: client denied by server configuration: /home/makifimc/public_html/readme.html
[Mon Jan 12 19:20:02.425385 2026] [:error] [pid 51986:tid 52018] [client 137.184.231.59:63623] [client 137.184.231.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.231.59, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aWTY4hiI5CoFGIbwGZZiFgAAA0M"]
[Mon Jan 12 19:20:05.616394 2026] [:error] [pid 51986:tid 52028] [client 137.184.231.59:53879] [client 137.184.231.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.231.59, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aWTY5RiI5CoFGIbwGZZiGAAAA00"]
[Mon Jan 12 20:03:22.440079 2026] [:error] [pid 48105:tid 48141] [client 167.172.235.216:60706] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aWTjCjbe4SdLfSmtJe2K-wAAAEE"], referer: binance.com
[Tue Jan 13 02:15:09.317252 2026] [proxy_fcgi:error] [pid 48213:tid 48234] [client 103.4.122.14:42624] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/league/oauth2-client/src/OptionProvider/PostAuthOptionProvider.php', 'opensource.org', '', '\xc3\xd1\x1d\xda'),('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/league/oauth2-client/src/OptionProvider/PostAuthOptionProvider.php', 'thephpleague.com', '', '\xa4\x8f;\xa4'),('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/league/oauth2-client/src/OptionProvider/PostAuthOptionProvider.php', 'packagist.org', '', ',wqM') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Net/SCP.php', 'php.net', '', '\xed\x8b7+'),('wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Net/SCP.php', 'www.opensource.org', '', '\xcf\xbb\xd4\xcb'),('wp-content/plugins/updraftplus/vendor/phpseclib/phpseclib/phpseclib/Net/SCP.php', 'phpseclib.sourceforge.net', '', 'a)\x01\x0c') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/google/auth/src/Iam.php', 'www.apache.org', '', '\xa6i\xdc:'),('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/google/auth/src/Iam.php', 'cloud.google.com', '', 'D/\x9a\xd4'),('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/google/auth/src/Iam.php', 'iamcredentials.googleapis.com', '', '\xfaE\xe5\x91') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWrite'
[Tue Jan 13 02:18:18.768047 2026] [proxy_fcgi:error] [pid 51637:tid 51648] [client 103.4.122.14:43212] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Jan 13 02:18:26.593559 2026] [proxy_fcgi:error] [pid 51897:tid 51934] [client 103.4.122.14:43310] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Jan 14 00:32:14.362611 2026] [:error] [pid 63844:tid 63909] [client 162.158.95.192:13708] [client 162.158.95.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aWZzjkL9rjD8EK1UiLkESQAAAMg"]
[Wed Jan 14 00:34:37.799348 2026] [:error] [pid 63842:tid 63850] [client 85.203.23.23:35069] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-confiq.php"] [unique_id "aWZ0HW0zPTD54ET7u1kdpwAAAUQ"]
[Wed Jan 14 00:34:38.160474 2026] [:error] [pid 63843:tid 63890] [client 85.203.23.10:33647] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aWZ0HoqxEwB7D1-DxXfR5AAAAJA"]
[Wed Jan 14 00:34:38.527450 2026] [:error] [pid 63844:tid 63910] [client 85.203.23.11:63829] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aWZ0HkL9rjD8EK1UiLkErAAAAMk"]
[Wed Jan 14 00:34:38.886725 2026] [:error] [pid 63843:tid 63881] [client 85.203.23.2:60085] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aWZ0HoqxEwB7D1-DxXfR5gAAAIc"]
[Wed Jan 14 00:34:39.244648 2026] [:error] [pid 63843:tid 63874] [client 85.203.23.7:59709] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aWZ0H4qxEwB7D1-DxXfR6AAAAIA"]
[Wed Jan 14 00:34:39.610161 2026] [:error] [pid 63931:tid 63951] [client 85.203.23.53:64539] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/form.php"] [unique_id "aWZ0H9VnG0cQj3cwmW82TQAAABI"]
[Wed Jan 14 00:34:39.971116 2026] [:error] [pid 63842:tid 63855] [client 85.203.23.29:59623] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aWZ0H20zPTD54ET7u1kdqAAAAUk"]
[Wed Jan 14 00:34:40.336140 2026] [:error] [pid 63931:tid 63944] [client 85.203.23.52:50809] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aWZ0INVnG0cQj3cwmW82TwAAAAs"]
[Wed Jan 14 00:34:40.702263 2026] [:error] [pid 63931:tid 63936] [client 85.203.23.29:34321] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aWZ0INVnG0cQj3cwmW82UAAAAAM"]
[Wed Jan 14 00:34:41.063011 2026] [:error] [pid 63842:tid 63870] [client 85.203.23.36:26403] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aWZ0IW0zPTD54ET7u1kdqgAAAVg"]
[Wed Jan 14 00:34:41.428378 2026] [:error] [pid 63931:tid 63942] [client 85.203.23.45:44791] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aWZ0IdVnG0cQj3cwmW82UgAAAAk"]
[Wed Jan 14 00:34:41.790625 2026] [:error] [pid 63931:tid 63945] [client 85.203.23.2:46133] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aWZ0IdVnG0cQj3cwmW82UwAAAAw"]
[Wed Jan 14 00:34:42.156643 2026] [:error] [pid 63931:tid 63943] [client 85.203.23.32:52999] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/shell.php"] [unique_id "aWZ0ItVnG0cQj3cwmW82VAAAAAo"]
[Wed Jan 14 00:34:42.515795 2026] [:error] [pid 63844:tid 63913] [client 85.203.23.12:64787] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aWZ0IkL9rjD8EK1UiLkEsQAAAMw"]
[Wed Jan 14 00:34:42.874219 2026] [:error] [pid 63844:tid 63923] [client 85.203.23.27:62823] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aWZ0IkL9rjD8EK1UiLkEswAAANY"]
[Wed Jan 14 00:34:43.233732 2026] [:error] [pid 63842:tid 63854] [client 85.203.23.7:25873] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "aWZ0I20zPTD54ET7u1kdrwAAAUg"]
[Wed Jan 14 00:34:43.634007 2026] [:error] [pid 63931:tid 63951] [client 85.203.23.20:26731] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aWZ0I9VnG0cQj3cwmW82VQAAABI"]
[Wed Jan 14 00:34:43.992396 2026] [:error] [pid 63842:tid 63850] [client 85.203.23.15:29769] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aWZ0I20zPTD54ET7u1kdsgAAAUQ"]
[Wed Jan 14 00:34:44.358261 2026] [:error] [pid 25809:tid 25824] [client 85.203.23.35:20513] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aWZ0JI9SDqNJ9R9VfZDqjAAAAE0"]
[Wed Jan 14 00:34:46.159279 2026] [:error] [pid 63842:tid 63846] [client 85.203.23.9:52969] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aWZ0Jm0zPTD54ET7u1kdswAAAUA"]
[Wed Jan 14 00:34:46.524041 2026] [:error] [pid 63931:tid 63953] [client 85.203.23.14:58843] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aWZ0JtVnG0cQj3cwmW82VwAAABQ"]
[Wed Jan 14 00:34:46.888530 2026] [:error] [pid 25809:tid 25828] [client 85.203.23.22:27525] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aWZ0Jo9SDqNJ9R9VfZDqkAAAAFE"]
[Wed Jan 14 00:34:47.249987 2026] [:error] [pid 25809:tid 25822] [client 85.203.23.10:43943] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aWZ0J49SDqNJ9R9VfZDqkgAAAEs"]
[Wed Jan 14 00:34:47.615619 2026] [:error] [pid 63931:tid 63956] [client 85.203.23.32:45009] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "aWZ0J9VnG0cQj3cwmW82WQAAABc"]
[Wed Jan 14 00:34:47.976848 2026] [:error] [pid 25809:tid 25812] [client 85.203.23.13:53691] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aWZ0J49SDqNJ9R9VfZDqkwAAAEE"]
[Wed Jan 14 00:34:48.336420 2026] [:error] [pid 63843:tid 63885] [client 85.203.23.9:57371] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "aWZ0KIqxEwB7D1-DxXfR7QAAAIs"]
[Wed Jan 14 00:34:48.701954 2026] [:error] [pid 63843:tid 63893] [client 85.203.23.12:23813] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aWZ0KIqxEwB7D1-DxXfR7gAAAJM"]
[Wed Jan 14 00:34:49.062956 2026] [:error] [pid 63842:tid 63851] [client 85.203.23.28:51311] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aWZ0KW0zPTD54ET7u1kdtQAAAUU"]
[Wed Jan 14 00:34:49.423008 2026] [:error] [pid 63842:tid 63860] [client 85.203.23.21:38925] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aWZ0KW0zPTD54ET7u1kdtgAAAU4"]
[Wed Jan 14 00:34:49.781169 2026] [:error] [pid 63843:tid 63897] [client 85.203.23.53:36241] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWZ0KYqxEwB7D1-DxXfR8QAAAJc"]
[Wed Jan 14 00:34:50.147513 2026] [:error] [pid 63843:tid 63878] [client 85.203.23.37:55587] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aWZ0KoqxEwB7D1-DxXfR8gAAAIQ"]
[Wed Jan 14 00:34:50.507148 2026] [:error] [pid 63931:tid 63946] [client 85.203.23.17:42625] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aWZ0KtVnG0cQj3cwmW82XQAAAA0"]
[Wed Jan 14 00:34:50.874598 2026] [:error] [pid 63844:tid 63920] [client 85.203.23.23:43003] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aWZ0KkL9rjD8EK1UiLkEvQAAANM"]
[Wed Jan 14 00:34:51.240240 2026] [:error] [pid 63931:tid 63937] [client 85.203.23.29:28827] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aWZ0K9VnG0cQj3cwmW82XgAAAAQ"]
[Wed Jan 14 00:34:51.601771 2026] [:error] [pid 63842:tid 63849] [client 85.203.23.19:58581] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWZ0K20zPTD54ET7u1kduAAAAUM"]
[Wed Jan 14 00:34:51.969457 2026] [:error] [pid 63844:tid 63903] [client 85.203.23.47:47659] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css.php"] [unique_id "aWZ0K0L9rjD8EK1UiLkEvgAAAMI"]
[Wed Jan 14 00:34:52.334619 2026] [:error] [pid 25809:tid 25821] [client 85.203.23.25:22185] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aWZ0LI9SDqNJ9R9VfZDqmAAAAEo"]
[Wed Jan 14 00:34:52.699378 2026] [:error] [pid 63931:tid 63934] [client 85.203.23.48:35395] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/lock360.php"] [unique_id "aWZ0LNVnG0cQj3cwmW82YQAAAAE"]
[Wed Jan 14 00:34:53.064268 2026] [:error] [pid 25809:tid 25830] [client 85.203.23.39:46449] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aWZ0LY9SDqNJ9R9VfZDqmgAAAFM"]
[Wed Jan 14 00:34:53.423102 2026] [:error] [pid 63842:tid 63866] [client 85.203.23.10:46429] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updates.php"] [unique_id "aWZ0LW0zPTD54ET7u1kduQAAAVQ"]
[Wed Jan 14 00:34:53.788936 2026] [:error] [pid 63842:tid 63863] [client 85.203.23.4:28427] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aWZ0LW0zPTD54ET7u1kdugAAAVE"]
[Wed Jan 14 00:34:54.156637 2026] [:error] [pid 63844:tid 63904] [client 85.203.23.9:57763] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aWZ0LkL9rjD8EK1UiLkEwAAAAMM"]
[Wed Jan 14 00:34:54.515354 2026] [:error] [pid 63844:tid 63918] [client 85.203.23.53:64123] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aWZ0LkL9rjD8EK1UiLkEwgAAANE"]
[Wed Jan 14 00:34:54.874924 2026] [:error] [pid 25809:tid 25825] [client 85.203.23.27:31067] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aWZ0Lo9SDqNJ9R9VfZDqmwAAAE4"]
[Wed Jan 14 00:34:55.241632 2026] [:error] [pid 63931:tid 63935] [client 85.203.23.32:24171] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "aWZ0L9VnG0cQj3cwmW82ZQAAAAI"]
[Wed Jan 14 00:34:55.601061 2026] [:error] [pid 25809:tid 25812] [client 85.203.23.32:52667] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class.api.php"] [unique_id "aWZ0L49SDqNJ9R9VfZDqnAAAAEE"]
[Wed Jan 14 00:34:55.967454 2026] [:error] [pid 25809:tid 25827] [client 85.203.23.49:31999] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aWZ0L49SDqNJ9R9VfZDqnQAAAFA"]
[Wed Jan 14 00:34:56.333438 2026] [:error] [pid 63844:tid 63910] [client 85.203.23.3:54781] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aWZ0MEL9rjD8EK1UiLkExQAAAMk"]
[Wed Jan 14 00:34:56.699267 2026] [:error] [pid 25809:tid 25818] [client 85.203.23.26:51623] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/"] [unique_id "aWZ0MI9SDqNJ9R9VfZDqngAAAEc"]
[Wed Jan 14 00:34:57.060747 2026] [:error] [pid 63844:tid 63902] [client 85.203.23.8:61891] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aWZ0MUL9rjD8EK1UiLkExgAAAME"]
[Wed Jan 14 00:34:57.426633 2026] [:error] [pid 63843:tid 63885] [client 85.203.23.42:41785] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aWZ0MYqxEwB7D1-DxXfR9QAAAIs"]
[Wed Jan 14 00:34:57.792146 2026] [:error] [pid 63843:tid 63893] [client 85.203.23.47:25295] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aWZ0MYqxEwB7D1-DxXfR9gAAAJM"]
[Wed Jan 14 00:34:58.158062 2026] [:error] [pid 63844:tid 63909] [client 85.203.23.42:62351] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aWZ0MkL9rjD8EK1UiLkEyAAAAMg"]
[Wed Jan 14 00:34:58.524392 2026] [:error] [pid 63842:tid 63847] [client 85.203.23.19:28177] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aWZ0Mm0zPTD54ET7u1kduwAAAUE"]
[Wed Jan 14 00:34:58.889683 2026] [:error] [pid 63842:tid 63860] [client 85.203.23.50:30489] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aWZ0Mm0zPTD54ET7u1kdvQAAAU4"]
[Wed Jan 14 00:34:59.256632 2026] [:error] [pid 63842:tid 63865] [client 85.203.23.33:41207] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aWZ0M20zPTD54ET7u1kdvwAAAVM"]
[Wed Jan 14 00:34:59.615484 2026] [:error] [pid 63844:tid 63911] [client 85.203.23.52:30943] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "aWZ0M0L9rjD8EK1UiLkEywAAAMo"]
[Wed Jan 14 00:34:59.976301 2026] [:error] [pid 63842:tid 63862] [client 85.203.23.11:62639] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aWZ0M20zPTD54ET7u1kdwAAAAVA"]
[Wed Jan 14 00:35:00.335982 2026] [:error] [pid 63844:tid 63924] [client 85.203.23.25:53191] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aWZ0NEL9rjD8EK1UiLkEzgAAANc"]
[Wed Jan 14 00:35:00.703318 2026] [:error] [pid 63842:tid 63850] [client 85.203.23.27:41503] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aWZ0NG0zPTD54ET7u1kdwQAAAUQ"]
[Wed Jan 14 00:35:01.069528 2026] [:error] [pid 63842:tid 63852] [client 85.203.23.8:52119] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "aWZ0NW0zPTD54ET7u1kdwgAAAUY"]
[Wed Jan 14 00:35:01.430492 2026] [:error] [pid 25809:tid 25820] [client 85.203.23.37:28969] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aWZ0NY9SDqNJ9R9VfZDqnwAAAEk"]
[Wed Jan 14 00:35:01.790035 2026] [:error] [pid 63843:tid 63894] [client 85.203.23.15:54515] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aWZ0NYqxEwB7D1-DxXfR-QAAAJQ"]
[Wed Jan 14 00:35:02.154989 2026] [:error] [pid 25809:tid 25819] [client 85.203.23.30:21711] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aWZ0No9SDqNJ9R9VfZDqoAAAAEg"]
[Wed Jan 14 00:35:02.514576 2026] [:error] [pid 25809:tid 25831] [client 85.203.23.18:39245] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aWZ0No9SDqNJ9R9VfZDqowAAAFQ"]
[Wed Jan 14 00:35:02.881375 2026] [:error] [pid 63931:tid 63955] [client 85.203.23.52:55617] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/"] [unique_id "aWZ0NtVnG0cQj3cwmW82aQAAABY"]
[Wed Jan 14 00:35:03.241486 2026] [:error] [pid 63931:tid 63936] [client 85.203.23.22:32477] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aWZ0N9VnG0cQj3cwmW82awAAAAM"]
[Wed Jan 14 00:35:03.606725 2026] [:error] [pid 63931:tid 63954] [client 85.203.23.10:31359] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aWZ0N9VnG0cQj3cwmW82bwAAABU"]
[Wed Jan 14 00:35:03.965717 2026] [:error] [pid 25809:tid 25825] [client 85.203.23.44:55629] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aWZ0N49SDqNJ9R9VfZDqqQAAAE4"]
[Wed Jan 14 00:35:05.769220 2026] [:error] [pid 25809:tid 25833] [client 85.203.23.29:63931] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "aWZ0OY9SDqNJ9R9VfZDqrQAAAFY"]
[Wed Jan 14 00:35:06.128211 2026] [:error] [pid 63844:tid 63919] [client 85.203.23.52:50185] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "aWZ0OkL9rjD8EK1UiLkE4wAAANI"]
[Wed Jan 14 00:35:06.487905 2026] [:error] [pid 63931:tid 63949] [client 85.203.23.35:27151] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aWZ0OtVnG0cQj3cwmW82dQAAABA"]
[Wed Jan 14 00:35:06.845592 2026] [:error] [pid 63931:tid 63953] [client 85.203.23.30:49391] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/network_xo.php"] [unique_id "aWZ0OtVnG0cQj3cwmW82dgAAABQ"]
[Wed Jan 14 00:35:07.211113 2026] [:error] [pid 25809:tid 25834] [client 85.203.23.12:20017] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aWZ0O49SDqNJ9R9VfZDqsQAAAFc"]
[Wed Jan 14 00:35:07.577958 2026] [:error] [pid 63843:tid 63881] [client 85.203.23.21:24115] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aWZ0O4qxEwB7D1-DxXfSBwAAAIc"]
[Wed Jan 14 00:35:07.937493 2026] [:error] [pid 25809:tid 25829] [client 85.203.23.44:30643] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aWZ0O49SDqNJ9R9VfZDqsgAAAFI"]
[Wed Jan 14 00:35:08.296935 2026] [:error] [pid 25809:tid 25826] [client 85.203.23.7:20685] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aWZ0PI9SDqNJ9R9VfZDqswAAAE8"]
[Wed Jan 14 00:35:08.658452 2026] [:error] [pid 25809:tid 25817] [client 85.203.23.14:45751] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aWZ0PI9SDqNJ9R9VfZDqtQAAAEY"]
[Wed Jan 14 00:35:09.028000 2026] [:error] [pid 25809:tid 25825] [client 85.203.23.37:40085] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aWZ0PY9SDqNJ9R9VfZDqtgAAAE4"]
[Wed Jan 14 00:35:09.397270 2026] [:error] [pid 25809:tid 25827] [client 85.203.23.19:58931] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function/function.php"] [unique_id "aWZ0PY9SDqNJ9R9VfZDquAAAAFA"]
[Wed Jan 14 00:35:09.763246 2026] [:error] [pid 25809:tid 25835] [client 85.203.23.38:33217] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aWZ0PY9SDqNJ9R9VfZDqvAAAAFg"]
[Wed Jan 14 00:35:10.129400 2026] [:error] [pid 25809:tid 25831] [client 85.203.23.24:64217] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aWZ0Po9SDqNJ9R9VfZDqvgAAAFQ"]
[Wed Jan 14 00:35:10.495887 2026] [:error] [pid 63931:tid 63956] [client 85.203.23.34:53921] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/areak1.php"] [unique_id "aWZ0PtVnG0cQj3cwmW82fAAAABc"]
[Wed Jan 14 00:35:10.861331 2026] [:error] [pid 63843:tid 63896] [client 85.203.23.51:44367] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aWZ0PoqxEwB7D1-DxXfSCwAAAJY"]
[Wed Jan 14 00:35:11.227164 2026] [:error] [pid 25809:tid 25832] [client 85.203.23.44:33091] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ufbngowues/main.php"] [unique_id "aWZ0P49SDqNJ9R9VfZDqwgAAAFU"]
[Wed Jan 14 00:35:11.587747 2026] [:error] [pid 63844:tid 63914] [client 85.203.23.27:48477] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell3.php"] [unique_id "aWZ0P0L9rjD8EK1UiLkE6AAAAM0"]
[Wed Jan 14 00:35:11.954812 2026] [:error] [pid 63931:tid 63943] [client 85.203.23.7:63781] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aWZ0P9VnG0cQj3cwmW82fwAAAAo"]
[Wed Jan 14 00:35:12.324279 2026] [:error] [pid 25809:tid 25813] [client 85.203.23.43:36387] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aWZ0QI9SDqNJ9R9VfZDqxgAAAEI"]
[Wed Jan 14 00:35:12.754192 2026] [:error] [pid 63844:tid 63912] [client 85.203.23.19:48269] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aWZ0QEL9rjD8EK1UiLkE6wAAAMs"]
[Wed Jan 14 00:35:13.216535 2026] [:error] [pid 63843:tid 63886] [client 85.203.23.11:24599] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aWZ0QYqxEwB7D1-DxXfSDgAAAIw"]
[Wed Jan 14 00:35:13.650129 2026] [:error] [pid 63844:tid 63916] [client 85.203.23.8:27313] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aWZ0QUL9rjD8EK1UiLkE7AAAAM8"]
[Wed Jan 14 00:35:14.084582 2026] [:error] [pid 63931:tid 63937] [client 85.203.23.21:31611] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "aWZ0QtVnG0cQj3cwmW82hQAAAAQ"]
[Wed Jan 14 00:35:14.513747 2026] [:error] [pid 25809:tid 25814] [client 85.203.23.12:36177] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aWZ0Qo9SDqNJ9R9VfZDqywAAAEM"]
[Wed Jan 14 00:35:14.965525 2026] [:error] [pid 63843:tid 63892] [client 85.203.23.4:50271] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aWZ0QoqxEwB7D1-DxXfSEQAAAJI"]
[Wed Jan 14 00:35:15.412485 2026] [:error] [pid 63842:tid 63870] [client 85.203.23.42:27315] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aWZ0Q20zPTD54ET7u1kdyQAAAVg"]
[Wed Jan 14 00:35:15.814054 2026] [:error] [pid 63843:tid 63890] [client 85.203.23.13:51901] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aWZ0Q4qxEwB7D1-DxXfSFAAAAJA"]
[Wed Jan 14 00:35:16.200825 2026] [:error] [pid 63844:tid 63914] [client 85.203.23.24:36339] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aWZ0REL9rjD8EK1UiLkE9AAAAM0"]
[Wed Jan 14 00:35:16.574307 2026] [:error] [pid 63931:tid 63944] [client 85.203.23.46:36725] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "aWZ0RNVnG0cQj3cwmW82igAAAAs"]
[Wed Jan 14 00:35:16.941425 2026] [:error] [pid 63844:tid 63912] [client 85.203.23.46:62131] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "aWZ0REL9rjD8EK1UiLkE_AAAAMs"]
[Wed Jan 14 00:35:17.305247 2026] [:error] [pid 63842:tid 63867] [client 85.203.23.25:22043] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/222.php"] [unique_id "aWZ0RW0zPTD54ET7u1kdywAAAVU"]
[Wed Jan 14 00:35:17.670874 2026] [:error] [pid 63842:tid 63854] [client 85.203.23.36:58651] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aWZ0RW0zPTD54ET7u1kdzAAAAUg"]
[Wed Jan 14 00:35:18.037802 2026] [:error] [pid 63842:tid 63868] [client 85.203.23.6:44435] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-conflg.php"] [unique_id "aWZ0Rm0zPTD54ET7u1kdzQAAAVY"]
[Wed Jan 14 00:35:18.405856 2026] [:error] [pid 63844:tid 63909] [client 85.203.23.17:63167] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aWZ0RkL9rjD8EK1UiLkFAQAAAMg"]
[Wed Jan 14 00:35:18.772398 2026] [:error] [pid 63931:tid 63933] [client 85.203.23.22:53851] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aWZ0RtVnG0cQj3cwmW82jwAAAAA"]
[Wed Jan 14 00:35:19.143111 2026] [:error] [pid 63931:tid 63957] [client 85.203.23.3:53835] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aWZ0R9VnG0cQj3cwmW82kAAAABg"]
[Wed Jan 14 00:35:19.508965 2026] [:error] [pid 63843:tid 63874] [client 85.203.23.17:60423] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aWZ0R4qxEwB7D1-DxXfSGAAAAIA"]
[Wed Jan 14 00:35:21.343959 2026] [:error] [pid 63842:tid 63846] [client 85.203.23.37:23585] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aWZ0SW0zPTD54ET7u1kd0wAAAUA"]
[Wed Jan 14 00:35:21.710886 2026] [:error] [pid 63931:tid 63954] [client 85.203.23.44:56241] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aWZ0SdVnG0cQj3cwmW82lQAAABU"]
[Wed Jan 14 00:35:22.077612 2026] [:error] [pid 63843:tid 63889] [client 85.203.23.16:36493] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aWZ0SoqxEwB7D1-DxXfSHQAAAI8"]
[Wed Jan 14 00:35:22.454543 2026] [:error] [pid 63842:tid 63866] [client 85.203.23.43:61469] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aWZ0Sm0zPTD54ET7u1kd1QAAAVQ"]
[Wed Jan 14 00:35:22.824637 2026] [:error] [pid 25809:tid 25831] [client 85.203.23.41:32263] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aWZ0So9SDqNJ9R9VfZDq3wAAAFQ"]
[Wed Jan 14 00:35:23.193646 2026] [:error] [pid 63931:tid 63947] [client 85.203.23.46:27007] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aWZ0S9VnG0cQj3cwmW82mAAAAA4"]
[Wed Jan 14 00:35:23.555358 2026] [:error] [pid 63842:tid 63858] [client 85.203.23.25:32471] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aWZ0S20zPTD54ET7u1kd2gAAAUw"]
[Wed Jan 14 00:35:23.921227 2026] [:error] [pid 63843:tid 63895] [client 85.203.23.35:48225] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aWZ0S4qxEwB7D1-DxXfSHwAAAJU"]
[Wed Jan 14 00:35:24.286277 2026] [:error] [pid 63843:tid 63887] [client 85.203.23.52:48013] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aWZ0TIqxEwB7D1-DxXfSIAAAAI0"]
[Wed Jan 14 00:35:24.653247 2026] [:error] [pid 25809:tid 25832] [client 85.203.23.4:57139] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aWZ0TI9SDqNJ9R9VfZDq4wAAAFU"]
[Wed Jan 14 00:35:25.011985 2026] [:error] [pid 63931:tid 63946] [client 85.203.23.12:60399] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aWZ0TdVnG0cQj3cwmW82ngAAAA0"]
[Wed Jan 14 00:35:25.371506 2026] [:error] [pid 63844:tid 63908] [client 85.203.23.35:52359] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aWZ0TUL9rjD8EK1UiLkFFQAAAMc"]
[Wed Jan 14 00:35:25.738108 2026] [:error] [pid 25809:tid 25813] [client 85.203.23.36:64131] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aWZ0TY9SDqNJ9R9VfZDq5QAAAEI"]
[Wed Jan 14 00:35:26.097965 2026] [:error] [pid 25809:tid 25824] [client 85.203.23.33:41673] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/"] [unique_id "aWZ0To9SDqNJ9R9VfZDq6AAAAE0"]
[Wed Jan 14 00:35:26.464518 2026] [:error] [pid 63844:tid 63916] [client 85.203.23.47:35295] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aWZ0TkL9rjD8EK1UiLkFGwAAAM8"]
[Wed Jan 14 00:35:26.834673 2026] [:error] [pid 63844:tid 63920] [client 85.203.23.12:43721] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aWZ0TkL9rjD8EK1UiLkFHwAAANM"]
[Wed Jan 14 00:35:27.196663 2026] [:error] [pid 63844:tid 63902] [client 85.203.23.45:29879] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aWZ0T0L9rjD8EK1UiLkFIQAAAME"]
[Wed Jan 14 00:35:27.578757 2026] [:error] [pid 63842:tid 63859] [client 85.203.23.15:32253] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "aWZ0T20zPTD54ET7u1kd4gAAAU0"]
[Wed Jan 14 00:35:27.968989 2026] [:error] [pid 25809:tid 25831] [client 85.203.23.30:24859] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aWZ0T49SDqNJ9R9VfZDq6wAAAFQ"]
[Wed Jan 14 00:35:28.344268 2026] [:error] [pid 63842:tid 63854] [client 85.203.23.20:34753] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aWZ0UG0zPTD54ET7u1kd4wAAAUg"]
[Wed Jan 14 00:35:28.731648 2026] [:error] [pid 25809:tid 25815] [client 85.203.23.39:39801] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aWZ0UI9SDqNJ9R9VfZDq7wAAAEQ"]
[Wed Jan 14 00:35:29.112666 2026] [:error] [pid 25809:tid 25817] [client 85.203.23.4:47245] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aWZ0UY9SDqNJ9R9VfZDq8QAAAEY"]
[Wed Jan 14 00:35:29.487594 2026] [:error] [pid 63844:tid 63907] [client 85.203.23.27:60253] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aWZ0UUL9rjD8EK1UiLkFKAAAAMY"]
[Wed Jan 14 00:35:29.853143 2026] [:error] [pid 63931:tid 63934] [client 85.203.23.17:62111] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/"] [unique_id "aWZ0UdVnG0cQj3cwmW82pgAAAAE"]
[Wed Jan 14 00:35:30.211790 2026] [:error] [pid 63931:tid 63939] [client 85.203.23.38:58449] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/"] [unique_id "aWZ0UtVnG0cQj3cwmW82pwAAAAY"]
[Wed Jan 14 00:35:30.577129 2026] [:error] [pid 63931:tid 63957] [client 85.203.23.13:46681] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aWZ0UtVnG0cQj3cwmW82qQAAABg"]
[Wed Jan 14 00:35:30.983879 2026] [:error] [pid 63842:tid 63867] [client 85.203.23.28:22975] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aWZ0Um0zPTD54ET7u1kd5QAAAVU"]
[Wed Jan 14 00:35:31.349378 2026] [:error] [pid 63842:tid 63861] [client 85.203.23.22:56089] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aWZ0U20zPTD54ET7u1kd5wAAAU8"]
[Wed Jan 14 00:35:31.717234 2026] [:error] [pid 25809:tid 25821] [client 85.203.23.49:26205] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aWZ0U49SDqNJ9R9VfZDq-gAAAEo"]
[Wed Jan 14 00:35:32.082445 2026] [:error] [pid 25809:tid 25832] [client 85.203.23.4:26515] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aWZ0VI9SDqNJ9R9VfZDq_QAAAFU"]
[Wed Jan 14 00:35:32.458096 2026] [:error] [pid 25809:tid 25822] [client 85.203.23.50:53909] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aWZ0VI9SDqNJ9R9VfZDrAAAAAEs"]
[Wed Jan 14 00:35:32.826842 2026] [:error] [pid 63931:tid 63955] [client 85.203.23.42:65023] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aWZ0VNVnG0cQj3cwmW82rAAAABY"]
[Wed Jan 14 00:35:33.192097 2026] [:error] [pid 63931:tid 63953] [client 85.203.23.24:54017] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aWZ0VdVnG0cQj3cwmW82rwAAABQ"]
[Wed Jan 14 00:35:33.557523 2026] [:error] [pid 63931:tid 63948] [client 85.203.23.34:42633] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aWZ0VdVnG0cQj3cwmW82sQAAAA8"]
[Wed Jan 14 00:35:33.926687 2026] [:error] [pid 63842:tid 63860] [client 85.203.23.32:44231] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aWZ0VW0zPTD54ET7u1kd7QAAAU4"]
[Wed Jan 14 00:35:34.297307 2026] [:error] [pid 63842:tid 63853] [client 85.203.23.8:22429] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aWZ0Vm0zPTD54ET7u1kd7gAAAUc"]
[Wed Jan 14 00:35:34.659670 2026] [:error] [pid 63931:tid 63947] [client 85.203.23.4:38811] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aWZ0VtVnG0cQj3cwmW82tQAAAA4"]
[Wed Jan 14 00:35:35.025157 2026] [:error] [pid 63844:tid 63924] [client 85.203.23.30:48001] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aWZ0V0L9rjD8EK1UiLkFNQAAANc"]
[Wed Jan 14 00:35:35.391685 2026] [:error] [pid 63844:tid 63906] [client 85.203.23.31:20395] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aWZ0V0L9rjD8EK1UiLkFNwAAAMU"]
[Wed Jan 14 00:35:35.752639 2026] [:error] [pid 25809:tid 25827] [client 85.203.23.11:41531] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWZ0V49SDqNJ9R9VfZDrBAAAAFA"]
[Wed Jan 14 00:35:36.117972 2026] [:error] [pid 63931:tid 63938] [client 85.203.23.8:39397] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aWZ0WNVnG0cQj3cwmW82uQAAAAU"]
[Wed Jan 14 00:35:36.483714 2026] [:error] [pid 63931:tid 63946] [client 85.203.23.4:49257] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aWZ0WNVnG0cQj3cwmW82uwAAAA0"]
[Wed Jan 14 00:35:36.854395 2026] [:error] [pid 63931:tid 63953] [client 85.203.23.23:20819] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aWZ0WNVnG0cQj3cwmW82vgAAABQ"]
[Wed Jan 14 00:35:37.221296 2026] [:error] [pid 63931:tid 63948] [client 85.203.23.47:30711] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aWZ0WdVnG0cQj3cwmW82wQAAAA8"]
[Wed Jan 14 00:35:37.588629 2026] [:error] [pid 63843:tid 63890] [client 85.203.23.5:51303] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content.php"] [unique_id "aWZ0WYqxEwB7D1-DxXfSNAAAAJA"]
[Wed Jan 14 00:35:37.955427 2026] [:error] [pid 63842:tid 63856] [client 85.203.23.34:32083] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "aWZ0WW0zPTD54ET7u1kd9wAAAUo"]
[Wed Jan 14 00:35:38.321043 2026] [:error] [pid 25809:tid 25826] [client 85.203.23.29:45367] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWZ0Wo9SDqNJ9R9VfZDrCQAAAE8"]
[Wed Jan 14 00:35:38.680771 2026] [:error] [pid 63843:tid 63884] [client 85.203.23.39:47633] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aWZ0WoqxEwB7D1-DxXfSOAAAAIo"]
[Wed Jan 14 00:35:39.039147 2026] [:error] [pid 63844:tid 63906] [client 85.203.23.53:42827] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aWZ0W0L9rjD8EK1UiLkFRQAAAMU"]
[Wed Jan 14 00:35:39.399410 2026] [:error] [pid 63844:tid 63911] [client 85.203.23.50:22627] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aWZ0W0L9rjD8EK1UiLkFSAAAAMo"]
[Wed Jan 14 00:35:39.759416 2026] [:error] [pid 63844:tid 63903] [client 85.203.23.15:48955] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aWZ0W0L9rjD8EK1UiLkFSwAAAMI"]
[Wed Jan 14 00:35:40.122639 2026] [:error] [pid 63842:tid 63857] [client 85.203.23.13:64795] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aWZ0XG0zPTD54ET7u1kd-wAAAUs"]
[Wed Jan 14 00:35:40.488293 2026] [:error] [pid 63842:tid 63851] [client 85.203.23.28:20339] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aWZ0XG0zPTD54ET7u1kd_QAAAUU"]
[Wed Jan 14 00:35:40.847090 2026] [:error] [pid 63931:tid 63939] [client 85.203.23.51:33153] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aWZ0XNVnG0cQj3cwmW821QAAAAY"]
[Wed Jan 14 00:35:41.207712 2026] [:error] [pid 63931:tid 63947] [client 85.203.23.33:52741] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aWZ0XdVnG0cQj3cwmW827AAAAA4"]
[Wed Jan 14 00:35:41.573856 2026] [:error] [pid 63842:tid 63848] [client 85.203.23.16:25995] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aWZ0XW0zPTD54ET7u1kd_gAAAUI"]
[Wed Jan 14 00:35:41.942968 2026] [:error] [pid 63844:tid 63904] [client 85.203.23.2:42179] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aWZ0XUL9rjD8EK1UiLkFWQAAAMM"]
[Wed Jan 14 00:35:42.302915 2026] [:error] [pid 63843:tid 63880] [client 85.203.23.38:21185] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-domain.php"] [unique_id "aWZ0XoqxEwB7D1-DxXfSOQAAAIY"]
[Wed Jan 14 00:35:42.661499 2026] [:error] [pid 63843:tid 63897] [client 85.203.23.17:60289] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aWZ0XoqxEwB7D1-DxXfSOgAAAJc"]
[Wed Jan 14 00:35:43.027721 2026] [:error] [pid 63842:tid 63856] [client 85.203.23.33:44415] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aWZ0X20zPTD54ET7u1keAQAAAUo"]
[Wed Jan 14 00:35:43.414051 2026] [:error] [pid 63842:tid 63869] [client 85.203.23.25:22803] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aWZ0X20zPTD54ET7u1keAgAAAVc"]
[Wed Jan 14 00:35:43.780429 2026] [:error] [pid 63843:tid 63882] [client 85.203.23.41:61863] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aWZ0X4qxEwB7D1-DxXfSPgAAAIg"]
[Wed Jan 14 00:35:44.146425 2026] [:error] [pid 63842:tid 63854] [client 85.203.23.35:22837] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/styles/typography/"] [unique_id "aWZ0YG0zPTD54ET7u1keBwAAAUg"]
[Wed Jan 14 00:35:44.519074 2026] [:error] [pid 63931:tid 63945] [client 85.203.23.53:64109] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aWZ0YNVnG0cQj3cwmW83AgAAAAw"]
[Wed Jan 14 00:35:44.883980 2026] [:error] [pid 63843:tid 63890] [client 85.203.23.4:57577] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aWZ0YIqxEwB7D1-DxXfSQwAAAJA"]
[Wed Jan 14 00:35:45.245007 2026] [:error] [pid 63931:tid 63940] [client 85.203.23.47:20663] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aWZ0YdVnG0cQj3cwmW83AwAAAAc"]
[Wed Jan 14 00:35:45.603945 2026] [:error] [pid 63844:tid 63921] [client 85.203.23.38:21247] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aWZ0YUL9rjD8EK1UiLkFbQAAANQ"]
[Wed Jan 14 00:35:45.972112 2026] [:error] [pid 63843:tid 63895] [client 85.203.23.39:35235] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/cache/et/"] [unique_id "aWZ0YYqxEwB7D1-DxXfSRQAAAJU"]
[Wed Jan 14 00:35:46.337813 2026] [:error] [pid 63843:tid 63891] [client 85.203.23.7:54485] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aWZ0YoqxEwB7D1-DxXfSRgAAAJE"]
[Wed Jan 14 00:35:46.696402 2026] [:error] [pid 63842:tid 63852] [client 85.203.23.47:56613] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aWZ0Ym0zPTD54ET7u1keCwAAAUY"]
[Wed Jan 14 00:35:47.061229 2026] [:error] [pid 63931:tid 63953] [client 85.203.23.33:31083] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aWZ0Y9VnG0cQj3cwmW83BgAAABQ"]
[Wed Jan 14 00:35:47.422659 2026] [:error] [pid 63931:tid 63949] [client 85.203.23.9:35585] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aWZ0Y9VnG0cQj3cwmW83CAAAABA"]
[Wed Jan 14 00:35:47.802751 2026] [:error] [pid 63844:tid 63921] [client 85.203.23.22:51367] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aWZ0Y0L9rjD8EK1UiLkFdQAAANQ"]
[Wed Jan 14 00:35:48.204096 2026] [:error] [pid 63931:tid 63955] [client 85.203.23.40:61211] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "aWZ0ZNVnG0cQj3cwmW83DAAAABY"]
[Wed Jan 14 00:35:48.630067 2026] [:error] [pid 63843:tid 63882] [client 85.203.23.48:54663] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aWZ0ZIqxEwB7D1-DxXfSTAAAAIg"]
[Wed Jan 14 00:35:49.027233 2026] [:error] [pid 25809:tid 25831] [client 85.203.23.46:51809] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aWZ0ZY9SDqNJ9R9VfZDrFQAAAFQ"]
[Wed Jan 14 00:35:49.392995 2026] [:error] [pid 63842:tid 63867] [client 85.203.23.6:26615] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWZ0ZW0zPTD54ET7u1keDAAAAVU"]
[Wed Jan 14 00:35:49.758449 2026] [:error] [pid 63844:tid 63901] [client 85.203.23.19:56215] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aWZ0ZUL9rjD8EK1UiLkFfQAAAMA"]
[Wed Jan 14 00:35:50.123141 2026] [:error] [pid 63844:tid 63907] [client 85.203.23.6:31335] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/"] [unique_id "aWZ0ZkL9rjD8EK1UiLkFgAAAAMY"]
[Wed Jan 14 00:35:50.488504 2026] [:error] [pid 63844:tid 63919] [client 85.203.23.3:60005] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aWZ0ZkL9rjD8EK1UiLkFgwAAANI"]
[Wed Jan 14 00:35:50.852867 2026] [:error] [pid 63843:tid 63887] [client 85.203.23.50:39999] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aWZ0ZoqxEwB7D1-DxXfSTgAAAI0"]
[Wed Jan 14 00:35:51.219820 2026] [:error] [pid 25809:tid 25835] [client 85.203.23.21:30489] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aWZ0Z49SDqNJ9R9VfZDrFwAAAFg"]
[Wed Jan 14 00:35:51.584868 2026] [:error] [pid 63844:tid 63918] [client 85.203.23.40:53181] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/m.php"] [unique_id "aWZ0Z0L9rjD8EK1UiLkFhwAAANE"]
[Wed Jan 14 00:35:51.950428 2026] [:error] [pid 25809:tid 25826] [client 85.203.23.40:38073] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/fm.php"] [unique_id "aWZ0Z49SDqNJ9R9VfZDrHAAAAE8"]
[Wed Jan 14 00:35:52.316634 2026] [:error] [pid 63843:tid 63888] [client 85.203.23.52:54687] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aWZ0aIqxEwB7D1-DxXfSUAAAAI4"]
[Wed Jan 14 00:35:52.683908 2026] [:error] [pid 63843:tid 63891] [client 85.203.23.20:63167] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aWZ0aIqxEwB7D1-DxXfSUgAAAJE"]
[Wed Jan 14 00:35:53.042146 2026] [:error] [pid 63931:tid 63951] [client 85.203.23.4:41671] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aWZ0adVnG0cQj3cwmW83DQAAABI"]
[Wed Jan 14 00:35:53.403141 2026] [:error] [pid 63842:tid 63864] [client 85.203.23.44:23231] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aWZ0aW0zPTD54ET7u1keFAAAAVI"]
[Wed Jan 14 00:35:53.763308 2026] [:error] [pid 63842:tid 63859] [client 85.203.23.31:40297] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aWZ0aW0zPTD54ET7u1keFwAAAU0"]
[Wed Jan 14 00:35:54.136506 2026] [:error] [pid 63842:tid 63852] [client 85.203.23.14:34339] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aWZ0am0zPTD54ET7u1keGgAAAUY"]
[Wed Jan 14 00:35:54.504014 2026] [:error] [pid 63842:tid 63867] [client 85.203.23.31:32591] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aWZ0am0zPTD54ET7u1keHwAAAVU"]
[Wed Jan 14 00:35:54.868736 2026] [:error] [pid 25809:tid 25812] [client 85.203.23.45:63067] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aWZ0ao9SDqNJ9R9VfZDrIAAAAEE"]
[Wed Jan 14 00:35:55.235357 2026] [:error] [pid 63842:tid 63855] [client 85.203.23.7:54171] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aWZ0a20zPTD54ET7u1keIAAAAUk"]
[Wed Jan 14 00:35:55.593873 2026] [:error] [pid 25809:tid 25816] [client 85.203.23.22:59251] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aWZ0a49SDqNJ9R9VfZDrJAAAAEU"]
[Wed Jan 14 00:35:55.951260 2026] [:error] [pid 63931:tid 63949] [client 85.203.23.35:59427] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aWZ0a9VnG0cQj3cwmW83FQAAABA"]
[Wed Jan 14 00:35:56.317943 2026] [:error] [pid 63842:tid 63869] [client 85.203.23.18:35861] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aWZ0bG0zPTD54ET7u1keIgAAAVc"]
[Wed Jan 14 00:35:56.683489 2026] [:error] [pid 63843:tid 63885] [client 85.203.23.32:41583] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/"] [unique_id "aWZ0bIqxEwB7D1-DxXfSWgAAAIs"]
[Wed Jan 14 00:35:57.049491 2026] [:error] [pid 63844:tid 63912] [client 85.203.23.27:21869] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/database.php"] [unique_id "aWZ0bUL9rjD8EK1UiLkFkQAAAMs"]
[Wed Jan 14 00:35:57.407037 2026] [:error] [pid 63842:tid 63864] [client 85.203.23.37:54155] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/vudel/list.php"] [unique_id "aWZ0bW0zPTD54ET7u1keJQAAAVI"]
[Wed Jan 14 00:35:57.764932 2026] [:error] [pid 63931:tid 63947] [client 85.203.23.12:62069] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aWZ0bdVnG0cQj3cwmW83GQAAAA4"]
[Wed Jan 14 00:35:58.124181 2026] [:error] [pid 63843:tid 63879] [client 85.203.23.50:28287] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hello-elementor/assets/css/lightbox.php"] [unique_id "aWZ0boqxEwB7D1-DxXfSXgAAAIU"]
[Wed Jan 14 00:35:58.490246 2026] [:error] [pid 25809:tid 25821] [client 85.203.23.41:64621] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-custom-fields/includes/walkers/about.php"] [unique_id "aWZ0bo9SDqNJ9R9VfZDrPwAAAEo"]
[Wed Jan 14 00:35:58.860538 2026] [:error] [pid 63931:tid 63940] [client 85.203.23.17:56717] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/includes/controls/about.php"] [unique_id "aWZ0btVnG0cQj3cwmW83HAAAAAc"]
[Wed Jan 14 00:35:59.219047 2026] [:error] [pid 63844:tid 63916] [client 85.203.23.15:51419] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aWZ0b0L9rjD8EK1UiLkFlgAAAM8"]
[Wed Jan 14 00:35:59.590390 2026] [:error] [pid 63844:tid 63924] [client 85.203.23.50:23129] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/well-known/acme-challenge/c/e/about.php"] [unique_id "aWZ0b0L9rjD8EK1UiLkFmAAAANc"]
[Wed Jan 14 00:35:59.948991 2026] [:error] [pid 63844:tid 63901] [client 85.203.23.39:55593] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aWZ0b0L9rjD8EK1UiLkFmgAAAMA"]
[Wed Jan 14 00:36:00.316946 2026] [:error] [pid 25809:tid 25835] [client 85.203.23.47:58189] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aWZ0cI9SDqNJ9R9VfZDrUwAAAFg"]
[Wed Jan 14 00:36:00.681462 2026] [:error] [pid 25809:tid 25830] [client 85.203.23.15:48089] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aWZ0cI9SDqNJ9R9VfZDrWAAAAFM"]
[Wed Jan 14 00:36:01.047461 2026] [:error] [pid 63931:tid 63953] [client 85.203.23.2:23045] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/222.php"] [unique_id "aWZ0cdVnG0cQj3cwmW83HwAAABQ"]
[Wed Jan 14 00:36:01.406997 2026] [:error] [pid 25809:tid 25819] [client 85.203.23.48:57757] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "aWZ0cY9SDqNJ9R9VfZDrXgAAAEg"]
[Wed Jan 14 00:36:01.774560 2026] [:error] [pid 63843:tid 63880] [client 85.203.23.29:57115] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/zoom1.php"] [unique_id "aWZ0cYqxEwB7D1-DxXfSYwAAAIY"]
[Wed Jan 14 00:36:02.134803 2026] [:error] [pid 63843:tid 63877] [client 85.203.23.35:23047] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/astra/inc/compatibility/lifterlms/customizer/sections/"] [unique_id "aWZ0coqxEwB7D1-DxXfSZQAAAIM"]
[Wed Jan 14 00:36:02.494779 2026] [:error] [pid 63844:tid 63915] [client 85.203.23.28:55363] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/js/unminified/"] [unique_id "aWZ0ckL9rjD8EK1UiLkFowAAAM4"]
[Wed Jan 14 00:36:02.854331 2026] [:error] [pid 63844:tid 63916] [client 85.203.23.25:55337] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/css/minified/"] [unique_id "aWZ0ckL9rjD8EK1UiLkFpAAAAM8"]
[Wed Jan 14 00:36:03.213171 2026] [:error] [pid 63843:tid 63898] [client 85.203.23.2:63571] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/astra/assets/js/"] [unique_id "aWZ0c4qxEwB7D1-DxXfScAAAAJg"]
[Wed Jan 14 00:36:03.578692 2026] [:error] [pid 63843:tid 63888] [client 85.203.23.35:36779] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/astra-addon/"] [unique_id "aWZ0c4qxEwB7D1-DxXfSdAAAAI4"]
[Wed Jan 14 00:36:03.937856 2026] [:error] [pid 63931:tid 63947] [client 85.203.23.45:37495] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-mails.php"] [unique_id "aWZ0c9VnG0cQj3cwmW83IAAAAA4"]
[Wed Jan 14 00:36:04.297038 2026] [:error] [pid 63931:tid 63945] [client 85.203.23.48:62963] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/new.php"] [unique_id "aWZ0dNVnG0cQj3cwmW83IQAAAAw"]
[Wed Jan 14 00:36:04.666944 2026] [:error] [pid 63844:tid 63907] [client 85.203.23.46:44761] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aWZ0dEL9rjD8EK1UiLkFqwAAAMY"]
[Wed Jan 14 00:36:05.027816 2026] [:error] [pid 63844:tid 63917] [client 85.203.23.12:34413] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/js/crd/admin.php"] [unique_id "aWZ0dUL9rjD8EK1UiLkFrQAAANA"]
[Wed Jan 14 00:36:05.396803 2026] [:error] [pid 25809:tid 25814] [client 85.203.23.50:36177] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/uploads/isc/"] [unique_id "aWZ0dY9SDqNJ9R9VfZDrZQAAAEM"]
[Wed Jan 14 00:36:05.765381 2026] [:error] [pid 63843:tid 63893] [client 85.203.23.2:58429] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/thickbox/img/docs/includes/data/tmp/klo/aawl/"] [unique_id "aWZ0dYqxEwB7D1-DxXfSdgAAAJM"]
[Wed Jan 14 00:36:06.125101 2026] [:error] [pid 63843:tid 63877] [client 85.203.23.2:54117] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aWZ0doqxEwB7D1-DxXfSdwAAAIM"]
[Wed Jan 14 00:36:06.485495 2026] [:error] [pid 63842:tid 63858] [client 85.203.23.26:38563] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aWZ0dm0zPTD54ET7u1keMgAAAUw"]
[Wed Jan 14 00:36:06.850984 2026] [:error] [pid 63931:tid 63942] [client 85.203.23.46:49713] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aWZ0dtVnG0cQj3cwmW83JgAAAAk"]
[Wed Jan 14 00:36:07.221566 2026] [:error] [pid 25809:tid 25825] [client 85.203.23.14:27057] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aWZ0d49SDqNJ9R9VfZDrbQAAAE4"]
[Wed Jan 14 00:36:07.581612 2026] [:error] [pid 25809:tid 25817] [client 85.203.23.27:56573] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/list/"] [unique_id "aWZ0d49SDqNJ9R9VfZDrbwAAAEY"]
[Wed Jan 14 00:36:07.942100 2026] [:error] [pid 63931:tid 63957] [client 85.203.23.36:44659] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aWZ0d9VnG0cQj3cwmW83KQAAABg"]
[Wed Jan 14 00:36:08.308758 2026] [:error] [pid 25809:tid 25827] [client 85.203.23.43:50385] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/audio/go.php"] [unique_id "aWZ0eI9SDqNJ9R9VfZDrcwAAAFA"]
[Wed Jan 14 00:36:08.667643 2026] [:error] [pid 25809:tid 25835] [client 85.203.23.4:24141] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/imagess.php"] [unique_id "aWZ0eI9SDqNJ9R9VfZDrdgAAAFg"]
[Wed Jan 14 00:36:09.026773 2026] [:error] [pid 25809:tid 25828] [client 85.203.23.18:53147] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/imagess.php"] [unique_id "aWZ0eY9SDqNJ9R9VfZDreAAAAFE"]
[Wed Jan 14 00:36:09.393793 2026] [:error] [pid 25809:tid 25834] [client 85.203.23.46:38427] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/let.php"] [unique_id "aWZ0eY9SDqNJ9R9VfZDrfQAAAFc"]
[Wed Jan 14 00:36:09.752878 2026] [:error] [pid 63843:tid 63894] [client 85.203.23.28:56817] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/go.php"] [unique_id "aWZ0eYqxEwB7D1-DxXfSewAAAJQ"]
[Wed Jan 14 00:36:10.120008 2026] [:error] [pid 63843:tid 63878] [client 85.203.23.22:39873] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/huan.php"] [unique_id "aWZ0eoqxEwB7D1-DxXfSfQAAAIQ"]
[Wed Jan 14 00:36:10.483838 2026] [:error] [pid 63842:tid 63863] [client 85.203.23.14:53397] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aWZ0em0zPTD54ET7u1keMwAAAVE"]
[Wed Jan 14 00:36:10.842916 2026] [:error] [pid 25809:tid 25813] [client 85.203.23.29:37489] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aWZ0eo9SDqNJ9R9VfZDrhAAAAEI"]
[Wed Jan 14 00:36:11.202673 2026] [:error] [pid 63931:tid 63940] [client 85.203.23.44:20341] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "aWZ0e9VnG0cQj3cwmW83LgAAAAc"]
[Wed Jan 14 00:36:11.567326 2026] [:error] [pid 63843:tid 63891] [client 85.203.23.24:30965] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aWZ0e4qxEwB7D1-DxXfSgwAAAJE"]
[Wed Jan 14 00:36:11.928371 2026] [:error] [pid 63844:tid 63906] [client 85.203.23.38:48283] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/loarrfh/"] [unique_id "aWZ0e0L9rjD8EK1UiLkFwQAAAMU"]
[Wed Jan 14 00:36:12.294437 2026] [:error] [pid 63844:tid 63910] [client 85.203.23.33:54323] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/foogallery/foogallery.php"] [unique_id "aWZ0fEL9rjD8EK1UiLkFxAAAAMk"]
[Wed Jan 14 00:36:12.660111 2026] [:error] [pid 25809:tid 25821] [client 85.203.23.22:22867] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/404-solution/404-solution.php"] [unique_id "aWZ0fI9SDqNJ9R9VfZDrhgAAAEo"]
[Wed Jan 14 00:36:13.025759 2026] [:error] [pid 25809:tid 25824] [client 85.203.23.52:32609] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/duplicator/src/moon.php"] [unique_id "aWZ0fY9SDqNJ9R9VfZDriAAAAE0"]
[Wed Jan 14 00:36:13.392961 2026] [:error] [pid 63843:tid 63880] [client 85.203.23.48:60527] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin-menu-search/admin-menu-search.php"] [unique_id "aWZ0fYqxEwB7D1-DxXfShQAAAIY"]
[Wed Jan 14 00:36:13.757379 2026] [:error] [pid 25809:tid 25813] [client 85.203.23.5:43527] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin-site-enhancements/admin-site-enhancements.php"] [unique_id "aWZ0fY9SDqNJ9R9VfZDrjAAAAEI"]
[Wed Jan 14 00:36:14.116389 2026] [:error] [pid 63931:tid 63956] [client 85.203.23.43:56529] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/members/members.php"] [unique_id "aWZ0ftVnG0cQj3cwmW83MAAAABc"]
[Wed Jan 14 00:36:14.483491 2026] [:error] [pid 63842:tid 63865] [client 85.203.23.52:48613] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/performance-lab/load.php"] [unique_id "aWZ0fm0zPTD54ET7u1kePQAAAVM"]
[Wed Jan 14 00:36:14.849955 2026] [:error] [pid 63843:tid 63882] [client 85.203.23.37:52937] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/performance-lab/includes/admin/tags.php"] [unique_id "aWZ0foqxEwB7D1-DxXfShwAAAIg"]
[Wed Jan 14 00:36:15.209215 2026] [:error] [pid 63842:tid 63853] [client 85.203.23.42:39163] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/tinymce-advanced/tinymce-advanced.php"] [unique_id "aWZ0f20zPTD54ET7u1keQQAAAUc"]
[Wed Jan 14 00:36:15.573015 2026] [:error] [pid 63843:tid 63879] [client 85.203.23.44:34591] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/fitnessbase/inc/customizer/al.php"] [unique_id "aWZ0f4qxEwB7D1-DxXfSiwAAAIU"]
[Wed Jan 14 00:36:15.931751 2026] [:error] [pid 63842:tid 63846] [client 85.203.23.15:37129] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aWZ0f20zPTD54ET7u1keQgAAAUA"]
[Wed Jan 14 00:36:16.300802 2026] [:error] [pid 63844:tid 63906] [client 85.203.23.28:59083] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hello-elementor/new.php"] [unique_id "aWZ0gEL9rjD8EK1UiLkF0QAAAMU"]
[Wed Jan 14 00:36:16.661283 2026] [:error] [pid 63842:tid 63856] [client 85.203.23.26:32467] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aWZ0gG0zPTD54ET7u1keQwAAAUo"]
[Wed Jan 14 00:36:17.020369 2026] [:error] [pid 63842:tid 63868] [client 85.203.23.33:22367] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aWZ0gW0zPTD54ET7u1keRAAAAVY"]
[Wed Jan 14 00:36:17.386053 2026] [:error] [pid 63844:tid 63918] [client 85.203.23.21:32309] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aWZ0gUL9rjD8EK1UiLkF2AAAANE"]
[Wed Jan 14 00:36:17.744151 2026] [:error] [pid 63842:tid 63854] [client 85.203.23.27:40273] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/zczv.php"] [unique_id "aWZ0gW0zPTD54ET7u1keRwAAAUg"]
[Wed Jan 14 00:36:18.102509 2026] [:error] [pid 25809:tid 25831] [client 85.203.23.42:53203] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/woocommerce_uploads/about.php"] [unique_id "aWZ0go9SDqNJ9R9VfZDrlgAAAFQ"]
[Wed Jan 14 00:36:18.467296 2026] [:error] [pid 63844:tid 63922] [client 85.203.23.4:45719] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aWZ0gkL9rjD8EK1UiLkF4AAAANU"]
[Wed Jan 14 00:36:18.834239 2026] [:error] [pid 63843:tid 63897] [client 85.203.23.34:40153] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/adca.php"] [unique_id "aWZ0goqxEwB7D1-DxXfSjwAAAJc"]
[Wed Jan 14 00:36:19.193609 2026] [:error] [pid 63842:tid 63865] [client 85.203.23.46:25279] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/maintenance/bolt.php"] [unique_id "aWZ0g20zPTD54ET7u1keSwAAAVM"]
[Wed Jan 14 00:36:19.552059 2026] [:error] [pid 63844:tid 63918] [client 85.203.23.30:43431] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/html-api/about.php"] [unique_id "aWZ0g0L9rjD8EK1UiLkF5QAAANE"]
[Wed Jan 14 00:36:19.918473 2026] [:error] [pid 63843:tid 63885] [client 85.203.23.50:58529] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/interactivity-api/"] [unique_id "aWZ0g4qxEwB7D1-DxXfSkwAAAIs"]
[Wed Jan 14 00:36:20.284744 2026] [:error] [pid 63931:tid 63940] [client 85.203.23.48:33611] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/siteorigin-panels/"] [unique_id "aWZ0hNVnG0cQj3cwmW83NwAAAAc"]
[Wed Jan 14 00:36:20.649955 2026] [:error] [pid 25809:tid 25833] [client 85.203.23.36:41701] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/nav-menu-trigger.php"] [unique_id "aWZ0hI9SDqNJ9R9VfZDrnwAAAFY"]
[Wed Jan 14 00:36:21.018278 2026] [:error] [pid 63843:tid 63879] [client 85.203.23.15:63595] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aWZ0hYqxEwB7D1-DxXfSlgAAAIU"]
[Wed Jan 14 00:36:21.377225 2026] [:error] [pid 63931:tid 63944] [client 85.203.23.10:34869] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hello-elementor/assets/"] [unique_id "aWZ0hdVnG0cQj3cwmW83OQAAAAs"]
[Wed Jan 14 00:36:21.736649 2026] [:error] [pid 25809:tid 25816] [client 85.203.23.37:33767] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aWZ0hY9SDqNJ9R9VfZDrpwAAAEU"]
[Wed Jan 14 00:36:22.094664 2026] [:error] [pid 25809:tid 25831] [client 85.203.23.16:27151] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aWZ0ho9SDqNJ9R9VfZDrqgAAAFQ"]
[Wed Jan 14 00:36:22.461085 2026] [:error] [pid 63844:tid 63907] [client 85.203.23.47:55285] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aWZ0hkL9rjD8EK1UiLkF7gAAAMY"]
[Wed Jan 14 00:36:22.826223 2026] [:error] [pid 63931:tid 63949] [client 85.203.23.37:37345] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/lock.php"] [unique_id "aWZ0htVnG0cQj3cwmW83PAAAABA"]
[Wed Jan 14 00:36:23.185826 2026] [:error] [pid 63931:tid 63936] [client 85.203.23.48:54765] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/style-rtl.min_42.php"] [unique_id "aWZ0h9VnG0cQj3cwmW83PQAAAAM"]
[Wed Jan 14 00:36:23.551298 2026] [:error] [pid 63842:tid 63864] [client 85.203.23.42:56115] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aWZ0h20zPTD54ET7u1keWgAAAVI"]
[Wed Jan 14 00:36:23.917726 2026] [:error] [pid 63931:tid 63945] [client 85.203.23.7:26001] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Credit_74.php"] [unique_id "aWZ0h9VnG0cQj3cwmW83QQAAAAw"]
[Wed Jan 14 00:36:24.290255 2026] [:error] [pid 63844:tid 63911] [client 85.203.23.37:58303] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/_40.php"] [unique_id "aWZ0iEL9rjD8EK1UiLkF8QAAAMo"]
[Wed Jan 14 00:36:24.659957 2026] [:error] [pid 63931:tid 63950] [client 85.203.23.13:25313] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aWZ0iNVnG0cQj3cwmW83QwAAABE"]
[Wed Jan 14 00:36:25.024142 2026] [:error] [pid 63931:tid 63951] [client 85.203.23.49:25651] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aWZ0idVnG0cQj3cwmW83RAAAABI"]
[Wed Jan 14 00:36:25.383923 2026] [:error] [pid 63844:tid 63914] [client 85.203.23.29:32715] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aWZ0iUL9rjD8EK1UiLkF9QAAAM0"]
[Wed Jan 14 00:36:25.750488 2026] [:error] [pid 63844:tid 63922] [client 85.203.23.22:31337] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aWZ0iUL9rjD8EK1UiLkF-AAAANU"]
[Wed Jan 14 00:36:26.109238 2026] [:error] [pid 63844:tid 63913] [client 85.203.23.23:29365] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/video/"] [unique_id "aWZ0ikL9rjD8EK1UiLkF-QAAAMw"]
[Wed Jan 14 00:36:26.467940 2026] [:error] [pid 63843:tid 63884] [client 85.203.23.41:40391] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aWZ0ioqxEwB7D1-DxXfSmwAAAIo"]
[Wed Jan 14 00:36:26.834283 2026] [:error] [pid 63842:tid 63848] [client 85.203.23.30:52461] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aWZ0im0zPTD54ET7u1keZAAAAUI"]
[Wed Jan 14 00:36:27.200292 2026] [:error] [pid 63842:tid 63849] [client 85.203.23.52:51125] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/classwithtostring.php"] [unique_id "aWZ0i20zPTD54ET7u1keZgAAAUM"]
[Wed Jan 14 00:36:27.559366 2026] [:error] [pid 63844:tid 63918] [client 85.203.23.47:24227] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/theme-editor-class.php"] [unique_id "aWZ0i0L9rjD8EK1UiLkF_QAAANE"]
[Wed Jan 14 00:36:27.924990 2026] [:error] [pid 63931:tid 63935] [client 85.203.23.33:36515] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/LayerSlider/assets/static/codemirror/addon/hint/about.php"] [unique_id "aWZ0i9VnG0cQj3cwmW83SAAAAAI"]
[Wed Jan 14 00:36:28.284470 2026] [:error] [pid 63844:tid 63911] [client 85.203.23.31:45621] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/LayerSlider/assets/static/layerslider/skins/carousel/about.php"] [unique_id "aWZ0jEL9rjD8EK1UiLkGAAAAAMo"]
[Wed Jan 14 00:36:28.651067 2026] [:error] [pid 25809:tid 25824] [client 85.203.23.11:43395] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fusion-core/css/about.php"] [unique_id "aWZ0jI9SDqNJ9R9VfZDrtAAAAE0"]
[Wed Jan 14 00:36:29.012485 2026] [:error] [pid 63842:tid 63855] [client 85.203.23.35:63375] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/themely/img/about.php"] [unique_id "aWZ0jW0zPTD54ET7u1keagAAAUk"]
[Wed Jan 14 00:36:29.371900 2026] [:error] [pid 63844:tid 63903] [client 85.203.23.43:61715] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/page-list-item/lock.php"] [unique_id "aWZ0jUL9rjD8EK1UiLkGBQAAAMI"]
[Wed Jan 14 00:36:29.737374 2026] [:error] [pid 25809:tid 25812] [client 85.203.23.42:45897] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/amp/vendor/ampproject/amp-toolbox/src/Validator/Spec/DescendantTagList/HeaRk.php"] [unique_id "aWZ0jY9SDqNJ9R9VfZDruAAAAEE"]
[Wed Jan 14 00:36:30.103497 2026] [:error] [pid 25809:tid 25826] [client 85.203.23.12:32083] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/sql.php"] [unique_id "aWZ0jo9SDqNJ9R9VfZDrvgAAAE8"]
[Wed Jan 14 00:36:30.462483 2026] [:error] [pid 63931:tid 63938] [client 85.203.23.28:51349] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/chosen.php"] [unique_id "aWZ0jtVnG0cQj3cwmW83SQAAAAU"]
[Wed Jan 14 00:36:30.829840 2026] [:error] [pid 25809:tid 25832] [client 85.203.23.30:25527] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/prayer_intentions.php"] [unique_id "aWZ0jo9SDqNJ9R9VfZDrxAAAAFU"]
[Wed Jan 14 00:36:31.188089 2026] [:error] [pid 25809:tid 25823] [client 85.203.23.37:34917] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/data.php"] [unique_id "aWZ0j49SDqNJ9R9VfZDrxwAAAEw"]
[Wed Jan 14 00:36:31.547072 2026] [:error] [pid 63844:tid 63915] [client 85.203.23.35:37995] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aWZ0j0L9rjD8EK1UiLkGCAAAAM4"]
[Wed Jan 14 00:36:31.912299 2026] [:error] [pid 63844:tid 63923] [client 85.203.23.33:64953] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aWZ0j0L9rjD8EK1UiLkGCgAAANY"]
[Wed Jan 14 00:36:32.278445 2026] [:error] [pid 63843:tid 63892] [client 85.203.23.31:46503] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/v3/dist/build/build/cache.php"] [unique_id "aWZ0kIqxEwB7D1-DxXfSogAAAJI"]
[Wed Jan 14 00:36:32.646959 2026] [:error] [pid 63931:tid 63945] [client 85.203.23.47:25649] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/post-views-counter/"] [unique_id "aWZ0kNVnG0cQj3cwmW83SwAAAAw"]
[Wed Jan 14 00:36:33.006125 2026] [:error] [pid 63931:tid 63937] [client 85.203.23.29:28201] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/media/dwv/admin.php"] [unique_id "aWZ0kdVnG0cQj3cwmW83TQAAAAQ"]
[Wed Jan 14 00:36:33.365699 2026] [:error] [pid 63844:tid 63917] [client 85.203.23.31:53631] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/zoom1.php"] [unique_id "aWZ0kUL9rjD8EK1UiLkGDwAAANA"]
[Wed Jan 14 00:36:33.724493 2026] [:error] [pid 63844:tid 63925] [client 85.203.23.49:20383] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/roboto/wp-admins.php"] [unique_id "aWZ0kUL9rjD8EK1UiLkGEQAAANg"]
[Wed Jan 14 00:36:34.090024 2026] [:error] [pid 63843:tid 63897] [client 85.203.23.5:50265] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/flatsome/wp-kgg.php"] [unique_id "aWZ0koqxEwB7D1-DxXfSqQAAAJc"]
[Wed Jan 14 00:36:34.455147 2026] [:error] [pid 25809:tid 25819] [client 85.203.23.22:56229] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aWZ0ko9SDqNJ9R9VfZDrzgAAAEg"]
[Wed Jan 14 00:36:34.820084 2026] [:error] [pid 63931:tid 63951] [client 85.203.23.38:42173] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aWZ0ktVnG0cQj3cwmW83UQAAABI"]
[Wed Jan 14 00:36:35.179306 2026] [:error] [pid 25809:tid 25830] [client 85.203.23.23:20217] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aWZ0k49SDqNJ9R9VfZDr1QAAAFM"]
[Wed Jan 14 00:36:35.545212 2026] [:error] [pid 63931:tid 63952] [client 85.203.23.28:36545] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/buy.php"] [unique_id "aWZ0k9VnG0cQj3cwmW83VgAAABM"]
[Wed Jan 14 00:36:35.903816 2026] [:error] [pid 63844:tid 63912] [client 85.203.23.4:28969] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/spacious-pro/js/theia-sticky-sidebar/"] [unique_id "aWZ0k0L9rjD8EK1UiLkGFQAAAMs"]
[Wed Jan 14 00:36:36.263437 2026] [:error] [pid 25809:tid 25817] [client 85.203.23.8:61071] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/zxasd.php"] [unique_id "aWZ0lI9SDqNJ9R9VfZDr2gAAAEY"]
[Wed Jan 14 00:36:36.622809 2026] [:error] [pid 25809:tid 25828] [client 85.203.23.17:35041] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/database.php"] [unique_id "aWZ0lI9SDqNJ9R9VfZDr3QAAAFE"]
[Wed Jan 14 00:36:36.981335 2026] [:error] [pid 25809:tid 25812] [client 85.203.23.17:58333] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/sql.php"] [unique_id "aWZ0lI9SDqNJ9R9VfZDr3gAAAEE"]
[Wed Jan 14 00:36:37.341101 2026] [:error] [pid 63843:tid 63898] [client 85.203.23.21:42271] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/ty.php"] [unique_id "aWZ0lYqxEwB7D1-DxXfSsAAAAJg"]
[Wed Jan 14 00:36:37.707200 2026] [:error] [pid 63844:tid 63909] [client 85.203.23.28:49343] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/ty.php"] [unique_id "aWZ0lUL9rjD8EK1UiLkGGQAAAMg"]
[Wed Jan 14 00:36:38.065660 2026] [:error] [pid 63931:tid 63950] [client 85.203.23.12:38469] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/ty.php"] [unique_id "aWZ0ltVnG0cQj3cwmW83XQAAABE"]
[Wed Jan 14 00:36:38.431984 2026] [:error] [pid 63843:tid 63893] [client 85.203.23.48:41807] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/a1cord.php"] [unique_id "aWZ0loqxEwB7D1-DxXfSswAAAJM"]
[Wed Jan 14 00:36:38.792390 2026] [:error] [pid 63931:tid 63948] [client 85.203.23.41:49403] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aWZ0ltVnG0cQj3cwmW83YgAAAA8"]
[Wed Jan 14 00:36:39.158026 2026] [:error] [pid 63844:tid 63903] [client 85.203.23.32:35535] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xex.php"] [unique_id "aWZ0l0L9rjD8EK1UiLkGHAAAAMI"]
[Wed Jan 14 00:36:39.519058 2026] [:error] [pid 63843:tid 63874] [client 85.203.23.51:29605] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aWZ0l4qxEwB7D1-DxXfSuQAAAIA"]
[Wed Jan 14 00:36:39.882810 2026] [:error] [pid 63843:tid 63886] [client 85.203.23.40:61989] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp_helper_bimfl/shell.php"] [unique_id "aWZ0l4qxEwB7D1-DxXfSuwAAAIw"]
[Wed Jan 14 00:36:40.242491 2026] [:error] [pid 25809:tid 25815] [client 85.203.23.35:50813] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp_helper_avcdl/shell.php"] [unique_id "aWZ0mI9SDqNJ9R9VfZDr5wAAAEQ"]
[Wed Jan 14 00:36:40.602886 2026] [:error] [pid 63842:tid 63862] [client 85.203.23.37:31575] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp_helper_rrvvo/shell.php"] [unique_id "aWZ0mG0zPTD54ET7u1kemwAAAVA"]
[Wed Jan 14 00:36:40.968708 2026] [:error] [pid 25809:tid 25824] [client 85.203.23.26:36659] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aWZ0mI9SDqNJ9R9VfZDr7AAAAE0"]
[Wed Jan 14 00:36:41.353908 2026] [:error] [pid 63842:tid 63859] [client 85.203.23.36:46053] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp_theme_ahewl/shell.php"] [unique_id "aWZ0mW0zPTD54ET7u1kengAAAU0"]
[Wed Jan 14 00:36:41.720173 2026] [:error] [pid 63842:tid 63865] [client 85.203.23.2:33331] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aWZ0mW0zPTD54ET7u1keoAAAAVM"]
[Wed Jan 14 00:36:42.092219 2026] [:error] [pid 63842:tid 63863] [client 85.203.23.13:60961] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "aWZ0mm0zPTD54ET7u1keowAAAVE"]
[Wed Jan 14 00:36:42.455078 2026] [:error] [pid 63931:tid 63942] [client 85.203.23.49:49585] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/tx20.php"] [unique_id "aWZ0mtVnG0cQj3cwmW83awAAAAk"]
[Wed Jan 14 00:36:42.825327 2026] [:error] [pid 63844:tid 63901] [client 85.203.23.21:57789] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ah22.php"] [unique_id "aWZ0mkL9rjD8EK1UiLkGJgAAAMA"]
[Wed Jan 14 00:36:43.194162 2026] [:error] [pid 63843:tid 63880] [client 85.203.23.40:36887] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/ooo.php"] [unique_id "aWZ0m4qxEwB7D1-DxXfSvwAAAIY"]
[Wed Jan 14 00:36:43.553063 2026] [:error] [pid 63844:tid 63919] [client 85.203.23.46:33375] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/dist/content/pmdwx/xfe/admin.php"] [unique_id "aWZ0m0L9rjD8EK1UiLkGKAAAANI"]
[Wed Jan 14 00:36:43.917751 2026] [:error] [pid 63931:tid 63946] [client 85.203.23.25:52035] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/resources/dist/includes/img/alw/"] [unique_id "aWZ0m9VnG0cQj3cwmW83cAAAAA0"]
[Wed Jan 14 00:36:44.287993 2026] [:error] [pid 63843:tid 63892] [client 85.203.23.13:55809] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/cache/assets/v3/v3/files/akami/admin.php"] [unique_id "aWZ0nIqxEwB7D1-DxXfSwwAAAJI"]
[Wed Jan 14 00:36:44.694720 2026] [:error] [pid 63843:tid 63887] [client 85.203.23.8:59563] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/datate.php"] [unique_id "aWZ0nIqxEwB7D1-DxXfSxAAAAI0"]
[Wed Jan 14 00:36:45.103629 2026] [:error] [pid 25809:tid 25813] [client 85.203.23.18:39333] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aWZ0nY9SDqNJ9R9VfZDr-AAAAEI"]
[Wed Jan 14 00:36:45.515700 2026] [:error] [pid 63931:tid 63941] [client 85.203.23.19:24197] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aWZ0ndVnG0cQj3cwmW83cgAAAAg"]
[Wed Jan 14 00:36:45.923169 2026] [:error] [pid 63842:tid 63862] [client 85.203.23.19:41589] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/call-now-button/admin.php"] [unique_id "aWZ0nW0zPTD54ET7u1keqwAAAVA"]
[Wed Jan 14 00:36:46.343913 2026] [:error] [pid 63842:tid 63858] [client 85.203.23.47:55073] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/rank-math/mmm.php"] [unique_id "aWZ0nm0zPTD54ET7u1kergAAAUw"]
[Wed Jan 14 00:36:46.781271 2026] [:error] [pid 63842:tid 63870] [client 85.203.23.11:25343] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/maintenance/assets/mmm.php"] [unique_id "aWZ0nm0zPTD54ET7u1kesAAAAVg"]
[Wed Jan 14 00:36:47.193806 2026] [:error] [pid 25809:tid 25823] [client 85.203.23.19:46809] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/menu.php"] [unique_id "aWZ0n49SDqNJ9R9VfZDsAQAAAEw"]
[Wed Jan 14 00:36:47.553457 2026] [:error] [pid 63931:tid 63957] [client 85.203.23.26:47987] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/menu.php"] [unique_id "aWZ0n9VnG0cQj3cwmW83dAAAABg"]
[Wed Jan 14 00:36:47.920048 2026] [:error] [pid 25809:tid 25834] [client 85.203.23.26:48799] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/todpIbcm.php"] [unique_id "aWZ0n49SDqNJ9R9VfZDsBAAAAFc"]
[Wed Jan 14 00:36:48.278780 2026] [:error] [pid 25809:tid 25824] [client 85.203.23.25:40053] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "aWZ0oI9SDqNJ9R9VfZDsBgAAAE0"]
[Wed Jan 14 00:36:48.644366 2026] [:error] [pid 63843:tid 63877] [client 85.203.23.45:57903] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aWZ0oIqxEwB7D1-DxXfSygAAAIM"]
[Wed Jan 14 00:36:49.009806 2026] [:error] [pid 63842:tid 63869] [client 85.203.23.51:29755] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about/autoload_classmap.php"] [unique_id "aWZ0oW0zPTD54ET7u1keuAAAAVc"]
[Wed Jan 14 00:36:49.375273 2026] [:error] [pid 63842:tid 63849] [client 85.203.23.16:50163] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/new/update/chosen.php"] [unique_id "aWZ0oW0zPTD54ET7u1keuQAAAUM"]
[Wed Jan 14 00:36:49.741019 2026] [:error] [pid 63842:tid 63858] [client 85.203.23.10:47561] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/new/wp-2019.php"] [unique_id "aWZ0oW0zPTD54ET7u1kevAAAAUw"]
[Wed Jan 14 00:36:50.106731 2026] [:error] [pid 63844:tid 63915] [client 85.203.23.37:48329] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-2019.php"] [unique_id "aWZ0okL9rjD8EK1UiLkGLQAAAM4"]
[Wed Jan 14 00:36:50.474647 2026] [:error] [pid 63842:tid 63850] [client 85.203.23.44:43123] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/zczv.php"] [unique_id "aWZ0om0zPTD54ET7u1kevgAAAUQ"]
[Wed Jan 14 00:36:50.840313 2026] [:error] [pid 63843:tid 63898] [client 85.203.23.9:42991] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/as/classwithtostring.php"] [unique_id "aWZ0ooqxEwB7D1-DxXfSzgAAAJg"]
[Wed Jan 14 00:36:51.198780 2026] [:error] [pid 63931:tid 63950] [client 85.203.23.13:54753] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-rocket-config/V.php"] [unique_id "aWZ0o9VnG0cQj3cwmW83fAAAABE"]
[Wed Jan 14 00:36:51.564167 2026] [:error] [pid 63842:tid 63868] [client 85.203.23.9:54581] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/wp-conflg.php"] [unique_id "aWZ0o20zPTD54ET7u1kewQAAAVY"]
[Wed Jan 14 00:36:51.932643 2026] [:error] [pid 63843:tid 63888] [client 85.203.23.34:28427] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aWZ0o4qxEwB7D1-DxXfSzwAAAI4"]
[Wed Jan 14 00:36:52.294127 2026] [:error] [pid 63842:tid 63849] [client 85.203.23.32:56165] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aWZ0pG0zPTD54ET7u1kexQAAAUM"]
[Wed Jan 14 00:36:52.653065 2026] [:error] [pid 63931:tid 63937] [client 85.203.23.5:31861] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/v.php"] [unique_id "aWZ0pNVnG0cQj3cwmW83gQAAAAQ"]
[Wed Jan 14 00:36:53.011199 2026] [:error] [pid 63844:tid 63908] [client 85.203.23.29:20857] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/chosen.php"] [unique_id "aWZ0pUL9rjD8EK1UiLkGMAAAAMc"]
[Wed Jan 14 00:36:53.376045 2026] [:error] [pid 63842:tid 63850] [client 85.203.23.19:49759] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aWZ0pW0zPTD54ET7u1keyQAAAUQ"]
[Wed Jan 14 00:36:53.735460 2026] [:error] [pid 63843:tid 63882] [client 85.203.23.27:30447] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/page.php"] [unique_id "aWZ0pYqxEwB7D1-DxXfS0gAAAIg"]
[Wed Jan 14 00:36:54.105057 2026] [:error] [pid 63843:tid 63886] [client 85.203.23.37:34673] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "aWZ0poqxEwB7D1-DxXfS1QAAAIw"]
[Wed Jan 14 00:36:54.470213 2026] [:error] [pid 63842:tid 63847] [client 85.203.23.42:20263] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/webix.php"] [unique_id "aWZ0pm0zPTD54ET7u1kezAAAAUE"]
[Wed Jan 14 00:36:54.829136 2026] [:error] [pid 63844:tid 63920] [client 85.203.23.7:39103] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aWZ0pkL9rjD8EK1UiLkGNQAAANM"]
[Wed Jan 14 00:36:55.197231 2026] [:error] [pid 63842:tid 63857] [client 85.203.23.15:28123] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/wp-conflg.php"] [unique_id "aWZ0p20zPTD54ET7u1kezgAAAUs"]
[Wed Jan 14 00:36:55.564104 2026] [:error] [pid 25809:tid 25824] [client 85.203.23.22:32365] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aWZ0p49SDqNJ9R9VfZDsDgAAAE0"]
[Wed Jan 14 00:36:55.924722 2026] [:error] [pid 63842:tid 63851] [client 85.203.23.7:63675] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/info.php"] [unique_id "aWZ0p20zPTD54ET7u1ke0QAAAUU"]
[Wed Jan 14 00:36:56.291052 2026] [:error] [pid 25809:tid 25814] [client 85.203.23.23:39003] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-style.php"] [unique_id "aWZ0qI9SDqNJ9R9VfZDsEQAAAEM"]
[Wed Jan 14 00:36:56.650585 2026] [:error] [pid 63844:tid 63907] [client 85.203.23.52:49665] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/xp.php"] [unique_id "aWZ0qEL9rjD8EK1UiLkGOAAAAMY"]
[Wed Jan 14 00:36:57.019005 2026] [:error] [pid 63842:tid 63870] [client 85.203.23.31:59017] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/admin/skin/base/mixins/about.php"] [unique_id "aWZ0qW0zPTD54ET7u1ke0wAAAVg"]
[Wed Jan 14 00:36:57.385193 2026] [:error] [pid 25809:tid 25833] [client 85.203.23.46:22771] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Content/"] [unique_id "aWZ0qY9SDqNJ9R9VfZDsEgAAAFY"]
[Wed Jan 14 00:36:57.752805 2026] [:error] [pid 63843:tid 63892] [client 85.203.23.18:60985] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aWZ0qYqxEwB7D1-DxXfS5QAAAJI"]
[Wed Jan 14 00:36:58.114822 2026] [:error] [pid 63842:tid 63866] [client 85.203.23.52:33359] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/min.php"] [unique_id "aWZ0qm0zPTD54ET7u1ke1QAAAVQ"]
[Wed Jan 14 00:36:58.473731 2026] [:error] [pid 25809:tid 25816] [client 85.203.23.49:51161] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aWZ0qo9SDqNJ9R9VfZDsFwAAAEU"]
[Wed Jan 14 00:36:58.841694 2026] [:error] [pid 25809:tid 25812] [client 85.203.23.36:29061] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aWZ0qo9SDqNJ9R9VfZDsHQAAAEE"]
[Wed Jan 14 00:36:59.202327 2026] [:error] [pid 63844:tid 63905] [client 85.203.23.16:30589] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aWZ0q0L9rjD8EK1UiLkGRAAAAMQ"]
[Wed Jan 14 00:36:59.561270 2026] [:error] [pid 63844:tid 63922] [client 85.203.23.18:32337] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aWZ0q0L9rjD8EK1UiLkGRQAAANU"]
[Wed Jan 14 00:36:59.921157 2026] [:error] [pid 63842:tid 63868] [client 85.203.23.45:56877] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/"] [unique_id "aWZ0q20zPTD54ET7u1ke1wAAAVY"]
[Wed Jan 14 00:37:00.287413 2026] [:error] [pid 25809:tid 25835] [client 85.203.23.2:56233] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/datate.php"] [unique_id "aWZ0rI9SDqNJ9R9VfZDsMQAAAFg"]
[Wed Jan 14 00:37:00.646188 2026] [:error] [pid 63931:tid 63933] [client 85.203.23.27:40257] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/lock360.php"] [unique_id "aWZ0rNVnG0cQj3cwmW83jgAAAAA"]
[Wed Jan 14 00:37:01.011217 2026] [:error] [pid 63843:tid 63883] [client 85.203.23.24:44039] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-work.php"] [unique_id "aWZ0rYqxEwB7D1-DxXfS8gAAAIk"]
[Wed Jan 14 00:37:01.376566 2026] [:error] [pid 63842:tid 63851] [client 85.203.23.20:40325] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/search/admin.php"] [unique_id "aWZ0rW0zPTD54ET7u1ke2QAAAUU"]
[Wed Jan 14 00:37:01.735669 2026] [:error] [pid 63843:tid 63891] [client 85.203.23.28:28149] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/lifeempore/content-"] [unique_id "aWZ0rYqxEwB7D1-DxXfS9gAAAJE"]
[Wed Jan 14 00:37:02.100408 2026] [:error] [pid 63844:tid 63903] [client 85.203.23.32:50227] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/lifeempore-v1/content-"] [unique_id "aWZ0rkL9rjD8EK1UiLkGVQAAAMI"]
[Wed Jan 14 00:37:02.459755 2026] [:error] [pid 63843:tid 63876] [client 85.203.23.22:21715] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/lifeempore-v2/content-"] [unique_id "aWZ0roqxEwB7D1-DxXfS-QAAAII"]
[Wed Jan 14 00:37:02.831003 2026] [:error] [pid 63931:tid 63954] [client 85.203.23.15:21941] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "aWZ0rtVnG0cQj3cwmW83lAAAABU"]
[Wed Jan 14 00:37:03.190353 2026] [:error] [pid 25809:tid 25825] [client 85.203.23.25:33383] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-excerpt-constructor.php"] [unique_id "aWZ0r49SDqNJ9R9VfZDsRAAAAE4"]
[Wed Jan 14 00:37:03.548668 2026] [:error] [pid 63842:tid 63848] [client 85.203.23.6:57649] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aWZ0r20zPTD54ET7u1ke3AAAAUI"]
[Wed Jan 14 00:37:03.913968 2026] [:error] [pid 63842:tid 63865] [client 85.203.23.18:33621] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/class-ftp-sockets-more.php"] [unique_id "aWZ0r20zPTD54ET7u1ke3QAAAVM"]
[Wed Jan 14 00:37:04.278492 2026] [:error] [pid 63842:tid 63850] [client 85.203.23.3:44817] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options-privacy-pic.php"] [unique_id "aWZ0sG0zPTD54ET7u1ke3gAAAUQ"]
[Wed Jan 14 00:37:04.637020 2026] [:error] [pid 63844:tid 63918] [client 85.203.23.16:40829] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/post-template-soap.php"] [unique_id "aWZ0sEL9rjD8EK1UiLkGXQAAANE"]
[Wed Jan 14 00:37:04.998025 2026] [:error] [pid 63842:tid 63866] [client 85.203.23.36:32455] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aWZ0sG0zPTD54ET7u1ke3wAAAVQ"]
[Wed Jan 14 00:37:05.364643 2026] [:error] [pid 63931:tid 63952] [client 85.203.23.8:45581] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/privacy-beta.php"] [unique_id "aWZ0sdVnG0cQj3cwmW83nwAAABM"]
[Wed Jan 14 00:37:05.725595 2026] [:error] [pid 63842:tid 63867] [client 85.203.23.26:50259] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/revslider/templates/particle-effect-three/"] [unique_id "aWZ0sW0zPTD54ET7u1ke4QAAAVU"]
[Wed Jan 14 00:37:06.084936 2026] [:error] [pid 25809:tid 25835] [client 85.203.23.45:29537] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aWZ0so9SDqNJ9R9VfZDsTAAAAFg"]
[Wed Jan 14 00:37:06.444281 2026] [:error] [pid 63842:tid 63860] [client 85.203.23.23:60363] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/revslider/templates/landing-page-hero/"] [unique_id "aWZ0sm0zPTD54ET7u1ke4gAAAU4"]
[Wed Jan 14 00:37:06.812655 2026] [:error] [pid 63842:tid 63868] [client 85.203.23.33:51951] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/revslider/templates/le-chef-la-carte/"] [unique_id "aWZ0sm0zPTD54ET7u1ke4wAAAVY"]
[Wed Jan 14 00:37:07.172797 2026] [:error] [pid 63842:tid 63849] [client 85.203.23.37:62883] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aWZ0s20zPTD54ET7u1ke5AAAAUM"]
[Wed Jan 14 00:37:07.539008 2026] [:error] [pid 63842:tid 63851] [client 85.203.23.16:30167] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/flatco/framework/"] [unique_id "aWZ0s20zPTD54ET7u1ke5QAAAUU"]
[Wed Jan 14 00:37:07.898063 2026] [:error] [pid 25809:tid 25819] [client 85.203.23.34:39869] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aWZ0s49SDqNJ9R9VfZDsUwAAAEg"]
[Wed Jan 14 00:37:08.269378 2026] [:error] [pid 63844:tid 63923] [client 85.203.23.7:34933] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Avada/includes/recaptcha/src/ReCaptcha/"] [unique_id "aWZ0tEL9rjD8EK1UiLkGbAAAANY"]
[Wed Jan 14 00:37:08.629254 2026] [:error] [pid 63844:tid 63912] [client 85.203.23.42:57967] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/target/admin/"] [unique_id "aWZ0tEL9rjD8EK1UiLkGbwAAAMs"]
[Wed Jan 14 00:37:08.988763 2026] [:error] [pid 63842:tid 63861] [client 85.203.23.6:44157] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/dt-the7/inc/extensions/options-framework/js/"] [unique_id "aWZ0tG0zPTD54ET7u1ke5wAAAU8"]
[Wed Jan 14 00:37:09.350998 2026] [:error] [pid 63931:tid 63933] [client 85.203.23.11:46349] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aWZ0tdVnG0cQj3cwmW83sgAAAAA"]
[Wed Jan 14 00:37:09.718274 2026] [:error] [pid 63931:tid 63953] [client 85.203.23.27:41085] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aWZ0tdVnG0cQj3cwmW83swAAABQ"]
[Wed Jan 14 00:37:10.077357 2026] [:error] [pid 63844:tid 63913] [client 85.203.23.6:65531] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aWZ0tkL9rjD8EK1UiLkGcAAAAMw"]
[Wed Jan 14 00:37:10.441529 2026] [:error] [pid 63844:tid 63905] [client 85.203.23.8:21595] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aWZ0tkL9rjD8EK1UiLkGcQAAAMQ"]
[Wed Jan 14 00:37:10.800305 2026] [:error] [pid 63931:tid 63939] [client 85.203.23.52:27943] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-includes.php"] [unique_id "aWZ0ttVnG0cQj3cwmW83tQAAAAY"]
[Wed Jan 14 00:37:11.166071 2026] [:error] [pid 63843:tid 63879] [client 85.203.23.41:37637] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-rocket-config/wp-login.php"] [unique_id "aWZ0t4qxEwB7D1-DxXfTJAAAAIU"]
[Wed Jan 14 00:37:11.532065 2026] [:error] [pid 63842:tid 63858] [client 85.203.23.13:50879] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/moon.php"] [unique_id "aWZ0t20zPTD54ET7u1ke6AAAAUw"]
[Wed Jan 14 00:37:11.893440 2026] [:error] [pid 63842:tid 63865] [client 85.203.23.52:55503] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/cloud.php"] [unique_id "aWZ0t20zPTD54ET7u1ke6wAAAVM"]
[Wed Jan 14 00:37:12.253533 2026] [:error] [pid 63931:tid 63940] [client 85.203.23.6:22819] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/termps.php"] [unique_id "aWZ0uNVnG0cQj3cwmW83uAAAAAc"]
[Wed Jan 14 00:37:12.616943 2026] [:error] [pid 63842:tid 63866] [client 85.203.23.53:37321] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/404.php"] [unique_id "aWZ0uG0zPTD54ET7u1ke7AAAAVQ"]
[Wed Jan 14 00:37:12.975623 2026] [:error] [pid 25809:tid 25813] [client 85.203.23.10:30673] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/social-links/atomlib.php"] [unique_id "aWZ0uI9SDqNJ9R9VfZDsWAAAAEI"]
[Wed Jan 14 00:37:13.342051 2026] [:error] [pid 63844:tid 63918] [client 85.203.23.13:58747] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/man.php"] [unique_id "aWZ0uUL9rjD8EK1UiLkGdwAAANE"]
[Wed Jan 14 00:37:13.702108 2026] [:error] [pid 25809:tid 25835] [client 85.203.23.31:25429] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/1.php"] [unique_id "aWZ0uY9SDqNJ9R9VfZDsWgAAAFg"]
[Wed Jan 14 00:37:14.060769 2026] [:error] [pid 63843:tid 63894] [client 85.203.23.30:57967] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/cherry-plugin-master/includes/makeasmtp.php"] [unique_id "aWZ0uoqxEwB7D1-DxXfTKgAAAJQ"]
[Wed Jan 14 00:37:14.426597 2026] [:error] [pid 63842:tid 63846] [client 85.203.23.38:45661] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aWZ0um0zPTD54ET7u1ke7wAAAUA"]
[Wed Jan 14 00:37:14.785979 2026] [:error] [pid 63931:tid 63952] [client 85.203.23.24:33841] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aWZ0utVnG0cQj3cwmW83ugAAABM"]
[Wed Jan 14 00:37:15.164955 2026] [:error] [pid 63843:tid 63893] [client 85.203.23.26:28909] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aWZ0u4qxEwB7D1-DxXfTLQAAAJM"]
[Wed Jan 14 00:37:15.529653 2026] [:error] [pid 25809:tid 25825] [client 85.203.23.34:42043] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aWZ0u49SDqNJ9R9VfZDsWwAAAE4"]
[Wed Jan 14 00:37:15.892100 2026] [:error] [pid 25809:tid 25820] [client 85.203.23.15:44795] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pgaas/"] [unique_id "aWZ0u49SDqNJ9R9VfZDsXAAAAEk"]
[Wed Jan 14 00:37:16.258247 2026] [:error] [pid 63931:tid 63939] [client 85.203.23.8:50425] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mtodm/"] [unique_id "aWZ0vNVnG0cQj3cwmW83vQAAAAY"]
[Wed Jan 14 00:37:16.626273 2026] [:error] [pid 63842:tid 63861] [client 85.203.23.16:55411] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aWZ0vG0zPTD54ET7u1ke8gAAAU8"]
[Wed Jan 14 00:37:16.993442 2026] [:error] [pid 63842:tid 63847] [client 85.203.23.34:64817] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aWZ0vG0zPTD54ET7u1ke8wAAAUE"]
[Wed Jan 14 00:37:17.352593 2026] [:error] [pid 63931:tid 63941] [client 85.203.23.2:20815] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-maiI.php"] [unique_id "aWZ0vdVnG0cQj3cwmW83vwAAAAg"]
[Wed Jan 14 00:37:17.721328 2026] [:error] [pid 63842:tid 63858] [client 85.203.23.12:27367] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aWZ0vW0zPTD54ET7u1ke9AAAAUw"]
[Wed Jan 14 00:37:18.080503 2026] [:error] [pid 63842:tid 63850] [client 85.203.23.25:40127] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wophq/"] [unique_id "aWZ0vm0zPTD54ET7u1ke9QAAAUQ"]
[Wed Jan 14 00:37:18.440840 2026] [:error] [pid 63931:tid 63936] [client 85.203.23.46:35073] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wadd-wp-bookls.php"] [unique_id "aWZ0vtVnG0cQj3cwmW83wQAAAAM"]
[Wed Jan 14 00:37:18.809009 2026] [:error] [pid 63931:tid 63948] [client 85.203.23.18:54975] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo-extended/admin/views/admin.php"] [unique_id "aWZ0vtVnG0cQj3cwmW83wwAAAA8"]
[Wed Jan 14 00:37:19.168040 2026] [:error] [pid 25809:tid 25824] [client 85.203.23.36:39475] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-walker-page-dropdown-first.php"] [unique_id "aWZ0v49SDqNJ9R9VfZDsYgAAAE0"]
[Wed Jan 14 00:37:19.528520 2026] [:error] [pid 63844:tid 63922] [client 85.203.23.23:23151] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-tag-cloud-new.php"] [unique_id "aWZ0v0L9rjD8EK1UiLkGewAAANU"]
[Wed Jan 14 00:37:19.888356 2026] [:error] [pid 25809:tid 25811] [client 85.203.23.40:56565] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/zer.php"] [unique_id "aWZ0v49SDqNJ9R9VfZDsYwAAAEA"]
[Wed Jan 14 00:37:20.255706 2026] [:error] [pid 63844:tid 63902] [client 85.203.23.40:39169] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aWZ0wEL9rjD8EK1UiLkGfAAAAME"]
[Wed Jan 14 00:37:20.621198 2026] [:error] [pid 63844:tid 63907] [client 85.203.23.16:50635] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/screen-event.php"] [unique_id "aWZ0wEL9rjD8EK1UiLkGfgAAAMY"]
[Wed Jan 14 00:37:20.987560 2026] [:error] [pid 63844:tid 63914] [client 85.203.23.6:49727] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/site-info-client.php"] [unique_id "aWZ0wEL9rjD8EK1UiLkGfwAAAM0"]
[Wed Jan 14 00:37:21.357924 2026] [:error] [pid 63842:tid 63868] [client 85.203.23.52:38891] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-mails.php"] [unique_id "aWZ0wW0zPTD54ET7u1ke-AAAAVY"]
[Wed Jan 14 00:37:21.716462 2026] [:error] [pid 25809:tid 25829] [client 85.203.23.31:41817] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aWZ0wY9SDqNJ9R9VfZDsZAAAAFI"]
[Wed Jan 14 00:37:22.082050 2026] [:error] [pid 63931:tid 63945] [client 85.203.23.12:35553] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/dofault.php"] [unique_id "aWZ0wtVnG0cQj3cwmW83ywAAAAw"]
[Wed Jan 14 00:37:22.441286 2026] [:error] [pid 63844:tid 63906] [client 85.203.23.6:36291] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/file-manager.php"] [unique_id "aWZ0wkL9rjD8EK1UiLkGggAAAMU"]
[Wed Jan 14 00:37:22.806681 2026] [:error] [pid 25809:tid 25822] [client 85.203.23.17:43767] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "aWZ0wo9SDqNJ9R9VfZDsZQAAAEs"]
[Wed Jan 14 00:37:23.171875 2026] [:error] [pid 25809:tid 25819] [client 85.203.23.46:39125] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aWZ0w49SDqNJ9R9VfZDsZwAAAEg"]
[Wed Jan 14 00:37:23.530655 2026] [:error] [pid 63842:tid 63862] [client 85.203.23.3:27787] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/zczv.php"] [unique_id "aWZ0w20zPTD54ET7u1ke-gAAAVA"]
[Wed Jan 14 00:37:23.890934 2026] [:error] [pid 25809:tid 25817] [client 85.203.23.20:39127] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aWZ0w49SDqNJ9R9VfZDsaAAAAEY"]
[Wed Jan 14 00:37:24.250500 2026] [:error] [pid 25809:tid 25831] [client 85.203.23.26:21175] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/selam.php"] [unique_id "aWZ0xI9SDqNJ9R9VfZDsaQAAAFQ"]
[Wed Jan 14 00:37:24.615268 2026] [:error] [pid 63931:tid 63947] [client 85.203.23.44:59681] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aWZ0xNVnG0cQj3cwmW830AAAAA4"]
[Wed Jan 14 00:37:24.990037 2026] [:error] [pid 63931:tid 63942] [client 85.203.23.27:42969] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aWZ0xNVnG0cQj3cwmW830QAAAAk"]
[Thu Jan 15 02:09:27.207030 2026] [autoindex:error] [pid 36071:tid 36080] [client 38.242.213.228:49396] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 16 03:15:05.613186 2026] [proxy_fcgi:error] [pid 5389:tid 5411] [client 103.4.122.14:39592] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Jan 16 03:15:15.428699 2026] [proxy_fcgi:error] [pid 21666:tid 21684] [client 103.4.122.14:39688] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Jan 16 06:06:07.391102 2026] [authz_core:error] [pid 43435:tid 43459] [client 101.198.0.151:54222] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/simply-gallery-block/readme.txt
[Fri Jan 16 06:06:08.417807 2026] [authz_core:error] [pid 4656:tid 4702] [client 101.198.0.155:36642] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/photo-gallery/readme.txt
[Fri Jan 16 06:06:09.397397 2026] [authz_core:error] [pid 4752:tid 4766] [client 101.198.0.187:41888] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/contact-form-7/readme.txt
[Fri Jan 16 06:06:11.732396 2026] [authz_core:error] [pid 4655:tid 4684] [client 101.198.0.150:18240] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/wp-rocket/readme.txt
[Fri Jan 16 06:06:13.089095 2026] [authz_core:error] [pid 43435:tid 43453] [client 101.198.0.135:27759] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/themes/Your-Generated-Divi-child-theme-template-by-DiviCake/readme.txt
[Fri Jan 16 06:06:16.329471 2026] [authz_core:error] [pid 4657:tid 4720] [client 101.198.0.133:27931] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/themes/Divi/readme.txt
[Fri Jan 16 17:02:29.831293 2026] [:error] [pid 54008:tid 54029] [client 84.247.169.220:60967] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aWn-pceowS6CyLOmCzOjwgAAAJM"]
[Fri Jan 16 17:02:31.188362 2026] [:error] [pid 30866:tid 30900] [client 84.247.169.220:61077] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-pyfb83E1Tbd0nr9ryAAAAAU"]
[Fri Jan 16 17:02:32.531608 2026] [:error] [pid 30866:tid 30904] [client 84.247.169.220:61221] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-qCfb83E1Tbd0nr9rzwAAAAk"]
[Fri Jan 16 17:02:33.949070 2026] [:error] [pid 30865:tid 30892] [client 84.247.169.220:61413] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-qRCR_HCYGnC3FS-zxQAAAVg"]
[Fri Jan 16 17:02:35.207032 2026] [:error] [pid 30866:tid 30900] [client 84.247.169.220:61512] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-qyfb83E1Tbd0nr9r0wAAAAU"]
[Fri Jan 16 20:21:35.299695 2026] [autoindex:error] [pid 30865:tid 30882] [client 5.182.17.127:58685] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 18 19:35:44.117155 2026] [:error] [pid 33494:tid 33516] [client 34.138.86.186:63905] [client 34.138.86.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.86.186, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aWzFkLxmLR_50TtKxDIZLwAAARI"]
[Sun Jan 18 19:35:49.567616 2026] [:error] [pid 33494:tid 33498] [client 34.138.86.186:63905] [client 34.138.86.186] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWzFlbxmLR_50TtKxDIZOgAAAQA"]
[Sun Jan 18 19:35:51.688745 2026] [:error] [pid 33494:tid 33515] [client 34.138.86.186:63905] [client 34.138.86.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.86.186, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aWzFl7xmLR_50TtKxDIZPQAAARE"]
[Mon Jan 19 03:52:09.853839 2026] [:error] [pid 55093:tid 55136] [client 35.196.202.209:55347] [client 35.196.202.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.202.209, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aW056VvejPZGx2OquyXuggAAAEc"]
[Mon Jan 19 03:52:15.466844 2026] [:error] [pid 55093:tid 55151] [client 35.196.202.209:55347] [client 35.196.202.209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aW0571vejPZGx2OquyXuiQAAAFY"]
[Mon Jan 19 03:52:17.652559 2026] [:error] [pid 55093:tid 55138] [client 35.196.202.209:55347] [client 35.196.202.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.202.209, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aW058VvejPZGx2OquyXujgAAAEk"]
[Mon Jan 19 04:08:22.272033 2026] [proxy_fcgi:error] [pid 55092:tid 55102] [client 103.4.122.14:45258] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Jan 19 08:45:07.417705 2026] [autoindex:error] [pid 55203:tid 55224] [client 89.117.61.39:59932] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Jan 19 10:06:10.555716 2026] [:error] [pid 1541:tid 1580] [client 173.214.167.46:57230] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aW2RkkYFhTurKCJuQsZ9vgAAAEY"]
[Tue Jan 20 22:59:16.513455 2026] [:error] [pid 54259:tid 54293] [client 64.225.8.2:61332] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW-YRA2q1USrePnOoFQJqAAAAJA"]
[Tue Jan 20 22:59:37.228252 2026] [:error] [pid 56360:tid 56380] [client 64.225.8.2:57693] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/sftp-config.json"] [unique_id "aW-YWU1J8CD1rR-wXXtueQAAARI"]
[Wed Jan 21 18:56:50.123722 2026] [:error] [pid 21456:tid 21521] [client 20.205.96.233:11433] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aXCw8gKyVQ9Ob2YxRApzBAAAAIM"]
[Wed Jan 21 18:56:50.482970 2026] [:error] [pid 59863:tid 59884] [client 20.205.96.233:51213] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aXCw8rHQ1zVZ4yLuI-y_AAAAARE"]
[Wed Jan 21 18:56:50.755524 2026] [:error] [pid 21563:tid 21572] [client 20.205.96.233:30326] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aXCw8hZq__dTorabEox1dgAAAMc"]
[Wed Jan 21 18:56:51.009313 2026] [:error] [pid 59863:tid 59880] [client 20.205.96.233:33545] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ffile.php"] [unique_id "aXCw87HQ1zVZ4yLuI-y_AgAAAQ0"]
[Wed Jan 21 18:56:51.545422 2026] [:error] [pid 21454:tid 21473] [client 20.205.96.233:23238] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aXCw8zwp5UZmMFzY2boyngAAAAk"]
[Wed Jan 21 18:56:51.850658 2026] [:error] [pid 56352:tid 56374] [client 20.205.96.233:30274] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aXCw89WN6wYNPTU3efUBHwAAAVQ"]
[Wed Jan 21 18:56:52.631291 2026] [:error] [pid 21454:tid 21469] [client 20.205.96.233:35529] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aXCw9Dwp5UZmMFzY2boynwAAAAU"]
[Wed Jan 21 18:56:52.955323 2026] [:error] [pid 21456:tid 21540] [client 20.205.96.233:23287] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aXCw9AKyVQ9Ob2YxRApzCQAAAJY"]
[Wed Jan 21 18:56:53.410697 2026] [:error] [pid 21456:tid 21523] [client 20.205.96.233:23267] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aXCw9QKyVQ9Ob2YxRApzDAAAAIU"]
[Wed Jan 21 18:56:53.745222 2026] [:error] [pid 59863:tid 59878] [client 20.205.96.233:35527] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aXCw9bHQ1zVZ4yLuI-y_BgAAAQs"]
[Wed Jan 21 18:56:54.105104 2026] [:error] [pid 21456:tid 21518] [client 20.205.96.233:27298] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aXCw9gKyVQ9Ob2YxRApzDgAAAIA"]
[Wed Jan 21 18:56:54.492842 2026] [:error] [pid 21456:tid 21528] [client 20.205.96.233:23277] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "aXCw9gKyVQ9Ob2YxRApzDwAAAIo"]
[Wed Jan 21 18:56:54.802198 2026] [:error] [pid 56352:tid 56371] [client 20.205.96.233:23249] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aXCw9tWN6wYNPTU3efUBIQAAAVE"]
[Wed Jan 21 18:56:55.141825 2026] [:error] [pid 56352:tid 56362] [client 20.205.96.233:2137] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aXCw99WN6wYNPTU3efUBIgAAAUg"]
[Wed Jan 21 18:56:55.964843 2026] [:error] [pid 4382:tid 4390] [client 20.205.96.233:10890] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aXCw95Hg0falVG3JFbA-GwAAAYY"]
[Wed Jan 21 18:56:56.452520 2026] [:error] [pid 56352:tid 56359] [client 20.205.96.233:30296] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/403.php"] [unique_id "aXCw-NWN6wYNPTU3efUBJQAAAUU"]
[Wed Jan 21 18:56:56.800847 2026] [:error] [pid 21455:tid 21497] [client 20.205.96.233:2146] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aXCw-IpOKALCSo1URZEX7QAAAEY"]
[Wed Jan 21 18:56:57.243492 2026] [:error] [pid 21455:tid 21496] [client 20.205.96.233:23272] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aXCw-YpOKALCSo1URZEX7gAAAEU"]
[Wed Jan 21 18:56:57.502525 2026] [:error] [pid 4382:tid 4407] [client 20.205.96.233:30287] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aXCw-ZHg0falVG3JFbA-HAAAAZc"]
[Wed Jan 21 18:56:57.820517 2026] [:error] [pid 21454:tid 21476] [client 20.205.96.233:23257] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aXCw-Twp5UZmMFzY2boyogAAAAw"]
[Wed Jan 21 18:56:58.312211 2026] [:error] [pid 21454:tid 21472] [client 20.205.96.233:8948] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lol.php"] [unique_id "aXCw-jwp5UZmMFzY2boyowAAAAg"]
[Wed Jan 21 18:56:58.676291 2026] [:error] [pid 21454:tid 21482] [client 20.205.96.233:30313] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lol.php"] [unique_id "aXCw-jwp5UZmMFzY2boypAAAABI"]
[Wed Jan 21 18:56:59.402475 2026] [:error] [pid 21455:tid 21503] [client 20.205.96.233:34890] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lol.php"] [unique_id "aXCw-4pOKALCSo1URZEX9AAAAEw"]
[Wed Jan 21 18:56:59.870343 2026] [:error] [pid 59863:tid 59883] [client 20.205.96.233:23241] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lol.php"] [unique_id "aXCw-7HQ1zVZ4yLuI-y_DAAAARA"]
[Wed Jan 21 18:57:00.135374 2026] [:error] [pid 21455:tid 21512] [client 20.205.96.233:2156] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cc.php"] [unique_id "aXCw_IpOKALCSo1URZEX9wAAAFU"]
[Wed Jan 21 18:57:00.524161 2026] [:error] [pid 4382:tid 4397] [client 20.205.96.233:50365] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cc.php"] [unique_id "aXCw_JHg0falVG3JFbA-HQAAAY0"]
[Wed Jan 21 18:57:00.864776 2026] [:error] [pid 56352:tid 56360] [client 20.205.96.233:30286] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cc.php"] [unique_id "aXCw_NWN6wYNPTU3efUBKgAAAUY"]
[Wed Jan 21 18:57:01.226112 2026] [:error] [pid 21455:tid 21513] [client 20.205.96.233:33540] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cc.php"] [unique_id "aXCw_YpOKALCSo1URZEX-AAAAFY"]
[Wed Jan 21 18:57:01.770357 2026] [:error] [pid 21456:tid 21521] [client 20.205.96.233:30323] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/o.php"] [unique_id "aXCw_QKyVQ9Ob2YxRApzFAAAAIM"]
[Wed Jan 21 18:57:02.165892 2026] [:error] [pid 59863:tid 59889] [client 20.205.96.233:7336] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/o.php"] [unique_id "aXCw_rHQ1zVZ4yLuI-y_DgAAARY"]
[Wed Jan 21 18:57:02.470778 2026] [:error] [pid 21456:tid 21522] [client 20.205.96.233:10924] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/o.php"] [unique_id "aXCw_gKyVQ9Ob2YxRApzFgAAAIQ"]
[Wed Jan 21 18:57:02.844746 2026] [:error] [pid 59863:tid 59868] [client 20.205.96.233:10880] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/o.php"] [unique_id "aXCw_rHQ1zVZ4yLuI-y_EAAAAQE"]
[Wed Jan 21 18:57:03.270072 2026] [:error] [pid 21454:tid 21464] [client 20.205.96.233:2115] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "aXCw_zwp5UZmMFzY2boyrAAAAAA"]
[Wed Jan 21 18:57:03.511106 2026] [:error] [pid 4382:tid 4393] [client 20.205.96.233:35561] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "aXCw_5Hg0falVG3JFbA-HgAAAYk"]
[Wed Jan 21 18:57:03.763361 2026] [:error] [pid 56352:tid 56358] [client 20.205.96.233:10941] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "aXCw_9WN6wYNPTU3efUBLgAAAUQ"]
[Wed Jan 21 18:57:04.170017 2026] [:error] [pid 56352:tid 56378] [client 20.205.96.233:51260] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "aXCxANWN6wYNPTU3efUBLwAAAVg"]
[Wed Jan 21 18:57:04.650444 2026] [:error] [pid 56352:tid 56369] [client 20.205.96.233:33536] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/n.php"] [unique_id "aXCxANWN6wYNPTU3efUBMQAAAU8"]
[Wed Jan 21 18:57:05.206758 2026] [:error] [pid 21454:tid 21482] [client 20.205.96.233:23288] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/n.php"] [unique_id "aXCxATwp5UZmMFzY2boyrwAAABI"]
[Wed Jan 21 18:57:05.531142 2026] [:error] [pid 21454:tid 21478] [client 20.205.96.233:23260] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/n.php"] [unique_id "aXCxATwp5UZmMFzY2boysAAAAA4"]
[Wed Jan 21 18:57:05.895870 2026] [:error] [pid 56352:tid 56362] [client 20.205.96.233:23263] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/n.php"] [unique_id "aXCxAdWN6wYNPTU3efUBNAAAAUg"]
[Wed Jan 21 18:57:06.443367 2026] [:error] [pid 21454:tid 21481] [client 20.205.96.233:10891] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aXCxAjwp5UZmMFzY2boyswAAABE"]
[Wed Jan 21 18:57:06.782153 2026] [:error] [pid 21563:tid 21568] [client 20.205.96.233:16618] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aXCxAhZq__dTorabEox1dwAAAMM"]
[Wed Jan 21 18:57:07.057029 2026] [:error] [pid 21455:tid 21503] [client 20.205.96.233:10909] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aXCxA4pOKALCSo1URZEX-gAAAEw"]
[Wed Jan 21 18:57:07.344468 2026] [:error] [pid 4382:tid 4404] [client 20.205.96.233:2166] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aXCxA5Hg0falVG3JFbA-JQAAAZQ"]
[Wed Jan 21 18:57:08.020565 2026] [:error] [pid 56352:tid 56375] [client 20.205.96.233:2461] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fileas.php"] [unique_id "aXCxBNWN6wYNPTU3efUBOAAAAVU"]
[Wed Jan 21 18:57:08.419154 2026] [:error] [pid 21563:tid 21566] [client 20.205.96.233:35526] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fileas.php"] [unique_id "aXCxBBZq__dTorabEox1eQAAAME"]
[Wed Jan 21 18:57:09.119417 2026] [:error] [pid 21454:tid 21471] [client 20.205.96.233:2143] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fileas.php"] [unique_id "aXCxBTwp5UZmMFzY2boyvAAAAAc"]
[Wed Jan 21 18:57:09.783377 2026] [:error] [pid 21455:tid 21500] [client 20.205.96.233:35535] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fileas.php"] [unique_id "aXCxBYpOKALCSo1URZEX_AAAAEk"]
[Wed Jan 21 18:57:10.102111 2026] [:error] [pid 59863:tid 59879] [client 20.205.96.233:2121] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cccc.php"] [unique_id "aXCxBrHQ1zVZ4yLuI-y_GQAAAQw"]
[Wed Jan 21 18:57:10.529983 2026] [:error] [pid 4382:tid 4397] [client 20.205.96.233:2480] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cccc.php"] [unique_id "aXCxBpHg0falVG3JFbA-MAAAAY0"]
[Wed Jan 21 18:57:10.862150 2026] [:error] [pid 21563:tid 21578] [client 20.205.96.233:16608] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cccc.php"] [unique_id "aXCxBhZq__dTorabEox1fQAAAM0"]
[Wed Jan 21 18:57:11.394909 2026] [:error] [pid 21455:tid 21507] [client 20.205.96.233:35544] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cccc.php"] [unique_id "aXCxB4pOKALCSo1URZEX_gAAAFA"]
[Wed Jan 21 18:57:11.744445 2026] [:error] [pid 21456:tid 21535] [client 20.205.96.233:2120] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/CLA.php"] [unique_id "aXCxBwKyVQ9Ob2YxRApzTwAAAJE"]
[Wed Jan 21 18:57:12.012205 2026] [:error] [pid 21455:tid 21505] [client 20.205.96.233:2172] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/CLA.php"] [unique_id "aXCxCIpOKALCSo1URZEYAAAAAE4"]
[Wed Jan 21 18:57:12.294166 2026] [:error] [pid 21456:tid 21531] [client 20.205.96.233:35542] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/CLA.php"] [unique_id "aXCxCAKyVQ9Ob2YxRApzVQAAAI0"]
[Wed Jan 21 18:57:12.574310 2026] [:error] [pid 59863:tid 59885] [client 20.205.96.233:10942] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/CLA.php"] [unique_id "aXCxCLHQ1zVZ4yLuI-y_GwAAARI"]
[Wed Jan 21 18:57:12.846728 2026] [:error] [pid 21456:tid 21542] [client 20.205.96.233:15710] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aXCxCAKyVQ9Ob2YxRApzWQAAAJg"]
[Wed Jan 21 18:57:13.514803 2026] [:error] [pid 21455:tid 21497] [client 20.205.96.233:16580] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aXCxCYpOKALCSo1URZEYAQAAAEY"]
[Wed Jan 21 18:57:13.877218 2026] [:error] [pid 56352:tid 56370] [client 20.205.96.233:2456] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aXCxCdWN6wYNPTU3efUBOwAAAVA"]
[Wed Jan 21 18:57:14.287335 2026] [:error] [pid 56352:tid 56371] [client 20.205.96.233:16619] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wfile.php"] [unique_id "aXCxCtWN6wYNPTU3efUBPAAAAVE"]
[Wed Jan 21 18:57:14.590654 2026] [:error] [pid 21454:tid 21482] [client 20.205.96.233:49237] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "aXCxCjwp5UZmMFzY2boyygAAABI"]
[Wed Jan 21 18:57:14.928808 2026] [:error] [pid 21454:tid 21470] [client 20.205.96.233:49224] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "aXCxCjwp5UZmMFzY2boyzAAAAAY"]
[Wed Jan 21 18:57:15.233036 2026] [:error] [pid 21456:tid 21521] [client 20.205.96.233:2127] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "aXCxCwKyVQ9Ob2YxRApzdAAAAIM"]
[Wed Jan 21 18:57:15.753101 2026] [:error] [pid 21456:tid 21518] [client 20.205.96.233:35538] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "aXCxCwKyVQ9Ob2YxRApzeQAAAIA"]
[Wed Jan 21 18:57:16.568738 2026] [:error] [pid 21563:tid 21571] [client 20.205.96.233:16623] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wb.php"] [unique_id "aXCxDBZq__dTorabEox1gQAAAMY"]
[Wed Jan 21 18:57:16.849383 2026] [:error] [pid 21454:tid 21479] [client 20.205.96.233:51258] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wb.php"] [unique_id "aXCxDDwp5UZmMFzY2boy0QAAAA8"]
[Wed Jan 21 18:57:17.161265 2026] [:error] [pid 21455:tid 21503] [client 20.205.96.233:49231] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wb.php"] [unique_id "aXCxDYpOKALCSo1URZEYBQAAAEw"]
[Wed Jan 21 18:57:17.643079 2026] [:error] [pid 21455:tid 21509] [client 20.205.96.233:51229] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wb.php"] [unique_id "aXCxDYpOKALCSo1URZEYBgAAAFI"]
[Wed Jan 21 18:57:17.910813 2026] [:error] [pid 4382:tid 4398] [client 20.205.96.233:49221] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mds.php"] [unique_id "aXCxDZHg0falVG3JFbA-PwAAAY4"]
[Wed Jan 21 18:57:18.235485 2026] [:error] [pid 59863:tid 59887] [client 20.205.96.233:2455] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mds.php"] [unique_id "aXCxDrHQ1zVZ4yLuI-y_HgAAARQ"]
[Wed Jan 21 18:57:18.542440 2026] [:error] [pid 59863:tid 59886] [client 20.205.96.233:16595] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mds.php"] [unique_id "aXCxDrHQ1zVZ4yLuI-y_HwAAARM"]
[Wed Jan 21 18:57:18.857605 2026] [:error] [pid 21563:tid 21570] [client 20.205.96.233:35543] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mds.php"] [unique_id "aXCxDhZq__dTorabEox1gwAAAMU"]
[Wed Jan 21 18:57:19.301820 2026] [:error] [pid 21456:tid 21534] [client 20.205.96.233:10897] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mlex.php"] [unique_id "aXCxDwKyVQ9Ob2YxRApzjQAAAJA"]
[Wed Jan 21 18:57:19.664136 2026] [:error] [pid 59863:tid 59871] [client 20.205.96.233:49251] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mlex.php"] [unique_id "aXCxD7HQ1zVZ4yLuI-y_IAAAAQQ"]
[Wed Jan 21 18:57:19.918723 2026] [:error] [pid 21563:tid 21578] [client 20.205.96.233:2163] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mlex.php"] [unique_id "aXCxDxZq__dTorabEox1hAAAAM0"]
[Wed Jan 21 18:57:20.241436 2026] [:error] [pid 21456:tid 21523] [client 20.205.96.233:16634] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mlex.php"] [unique_id "aXCxEAKyVQ9Ob2YxRApzjwAAAIU"]
[Wed Jan 21 18:57:20.521956 2026] [:error] [pid 21455:tid 21505] [client 20.205.96.233:2133] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a.php"] [unique_id "aXCxEIpOKALCSo1URZEYCgAAAE4"]
[Wed Jan 21 18:57:20.836836 2026] [:error] [pid 4382:tid 4385] [client 20.205.96.233:16606] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a.php"] [unique_id "aXCxEJHg0falVG3JFbA-QgAAAYE"]
[Wed Jan 21 18:57:21.167383 2026] [:error] [pid 21455:tid 21510] [client 20.205.96.233:51246] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a.php"] [unique_id "aXCxEYpOKALCSo1URZEYDAAAAFM"]
[Wed Jan 21 18:57:21.415023 2026] [:error] [pid 21454:tid 21484] [client 20.205.96.233:2444] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a.php"] [unique_id "aXCxETwp5UZmMFzY2boy1gAAABQ"]
[Wed Jan 21 18:57:21.789587 2026] [:error] [pid 21454:tid 21476] [client 20.205.96.233:15720] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aXCxETwp5UZmMFzY2boy1wAAAAw"]
[Wed Jan 21 18:57:22.047547 2026] [:error] [pid 21454:tid 21477] [client 20.205.96.233:27308] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aXCxEjwp5UZmMFzY2boy2QAAAA0"]
[Wed Jan 21 18:57:22.291989 2026] [:error] [pid 21456:tid 21540] [client 20.205.96.233:50353] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aXCxEgKyVQ9Ob2YxRApzlQAAAJY"]
[Wed Jan 21 18:57:22.576537 2026] [:error] [pid 21563:tid 21587] [client 20.205.96.233:19935] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aXCxEhZq__dTorabEox1hgAAANY"]
[Wed Jan 21 18:57:22.874291 2026] [:error] [pid 59863:tid 59875] [client 20.205.96.233:42379] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aXCxErHQ1zVZ4yLuI-y_IgAAAQg"]
[Wed Jan 21 18:57:23.323866 2026] [:error] [pid 21455:tid 21508] [client 20.205.96.233:2457] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aXCxE4pOKALCSo1URZEYDgAAAFE"]
[Wed Jan 21 18:57:23.772651 2026] [:error] [pid 21454:tid 21466] [client 20.205.96.233:35580] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aXCxEzwp5UZmMFzY2boy2wAAAAI"]
[Wed Jan 21 18:57:24.220459 2026] [:error] [pid 56352:tid 56361] [client 20.205.96.233:16628] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aXCxFNWN6wYNPTU3efUBSgAAAUc"]
[Wed Jan 21 18:57:25.061985 2026] [:error] [pid 21455:tid 21495] [client 20.205.96.233:42407] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inde.php"] [unique_id "aXCxFYpOKALCSo1URZEYDwAAAEQ"]
[Wed Jan 21 18:57:25.761690 2026] [:error] [pid 21454:tid 21471] [client 20.205.96.233:10763] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inde.php"] [unique_id "aXCxFTwp5UZmMFzY2boy3AAAAAc"]
[Wed Jan 21 18:57:26.174273 2026] [:error] [pid 21456:tid 21528] [client 20.205.96.233:16583] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inde.php"] [unique_id "aXCxFgKyVQ9Ob2YxRApzmwAAAIo"]
[Wed Jan 21 18:57:26.718147 2026] [:error] [pid 59863:tid 59870] [client 20.205.96.233:16626] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inde.php"] [unique_id "aXCxFrHQ1zVZ4yLuI-y_JwAAAQM"]
[Wed Jan 21 18:57:27.329170 2026] [:error] [pid 21563:tid 21588] [client 20.205.96.233:35558] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aXCxFxZq__dTorabEox1iwAAANc"]
[Wed Jan 21 18:57:27.696565 2026] [:error] [pid 21455:tid 21512] [client 20.205.96.233:16592] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aXCxF4pOKALCSo1URZEYEgAAAFU"]
[Wed Jan 21 18:57:28.245425 2026] [:error] [pid 59863:tid 59880] [client 20.205.96.233:16622] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aXCxGLHQ1zVZ4yLuI-y_KQAAAQ0"]
[Wed Jan 21 18:57:28.550646 2026] [:error] [pid 59863:tid 59876] [client 20.205.96.233:35536] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aXCxGLHQ1zVZ4yLuI-y_KwAAAQk"]
[Wed Jan 21 18:57:28.898255 2026] [:error] [pid 21455:tid 21513] [client 20.205.96.233:10811] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "aXCxGIpOKALCSo1URZEYFAAAAFY"]
[Wed Jan 21 18:57:29.693371 2026] [:error] [pid 56352:tid 56360] [client 20.205.96.233:49227] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "aXCxGdWN6wYNPTU3efUBUAAAAUY"]
[Wed Jan 21 18:57:30.206398 2026] [:error] [pid 56352:tid 56364] [client 20.205.96.233:50753] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "aXCxGtWN6wYNPTU3efUBUgAAAUo"]
[Wed Jan 21 18:57:30.633957 2026] [:error] [pid 59863:tid 59881] [client 20.205.96.233:50780] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "aXCxGrHQ1zVZ4yLuI-y_LAAAAQ4"]
[Wed Jan 21 18:57:31.158885 2026] [:error] [pid 21454:tid 21479] [client 20.205.96.233:10780] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wcas.php"] [unique_id "aXCxGzwp5UZmMFzY2boy3gAAAA8"]
[Wed Jan 21 18:57:31.486609 2026] [:error] [pid 21454:tid 21480] [client 20.205.96.233:10782] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wcas.php"] [unique_id "aXCxGzwp5UZmMFzY2boy4QAAABA"]
[Wed Jan 21 18:57:31.870904 2026] [:error] [pid 59863:tid 59887] [client 20.205.96.233:50775] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wcas.php"] [unique_id "aXCxG7HQ1zVZ4yLuI-y_LQAAARQ"]
[Wed Jan 21 18:57:32.202194 2026] [:error] [pid 21455:tid 21497] [client 20.205.96.233:10758] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wcas.php"] [unique_id "aXCxHIpOKALCSo1URZEYGAAAAEY"]
[Wed Jan 21 18:57:32.736088 2026] [:error] [pid 21456:tid 21529] [client 20.205.96.233:50779] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aXCxHAKyVQ9Ob2YxRApzpAAAAIs"]
[Wed Jan 21 18:57:33.199956 2026] [:error] [pid 59863:tid 59875] [client 20.205.96.233:5097] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aXCxHbHQ1zVZ4yLuI-y_LwAAAQg"]
[Wed Jan 21 18:57:33.498421 2026] [:error] [pid 59863:tid 59882] [client 20.205.96.233:7536] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aXCxHbHQ1zVZ4yLuI-y_MAAAAQ8"]
[Wed Jan 21 18:57:33.817742 2026] [:error] [pid 21456:tid 21533] [client 20.205.96.233:42412] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aXCxHQKyVQ9Ob2YxRApzqAAAAI8"]
[Wed Jan 21 18:57:34.319932 2026] [:error] [pid 59863:tid 59885] [client 20.205.96.233:49224] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/finny.php"] [unique_id "aXCxHrHQ1zVZ4yLuI-y_MgAAARI"]
[Wed Jan 21 18:57:34.624352 2026] [:error] [pid 21454:tid 21466] [client 20.205.96.233:10812] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/finny.php"] [unique_id "aXCxHjwp5UZmMFzY2boy5wAAAAI"]
[Wed Jan 21 18:57:35.023818 2026] [:error] [pid 21455:tid 21501] [client 20.205.96.233:7503] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/finny.php"] [unique_id "aXCxH4pOKALCSo1URZEYGwAAAEo"]
[Wed Jan 21 18:57:35.478688 2026] [:error] [pid 21455:tid 21508] [client 20.205.96.233:16867] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/finny.php"] [unique_id "aXCxH4pOKALCSo1URZEYHAAAAFE"]
[Wed Jan 21 18:57:35.785159 2026] [:error] [pid 21455:tid 21496] [client 20.205.96.233:10788] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws45.php"] [unique_id "aXCxH4pOKALCSo1URZEYHQAAAEU"]
[Wed Jan 21 18:57:36.417275 2026] [:error] [pid 21456:tid 21526] [client 20.205.96.233:5094] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws45.php"] [unique_id "aXCxIAKyVQ9Ob2YxRApzqgAAAIg"]
[Wed Jan 21 18:57:36.746335 2026] [:error] [pid 59863:tid 59870] [client 20.205.96.233:7540] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws45.php"] [unique_id "aXCxILHQ1zVZ4yLuI-y_MwAAAQM"]
[Wed Jan 21 18:57:37.029662 2026] [:error] [pid 59863:tid 59873] [client 20.205.96.233:16883] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws45.php"] [unique_id "aXCxIbHQ1zVZ4yLuI-y_NAAAAQY"]
[Wed Jan 21 18:57:37.476970 2026] [:error] [pid 21456:tid 21522] [client 20.205.96.233:7531] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/build.php"] [unique_id "aXCxIQKyVQ9Ob2YxRApzrAAAAIQ"]
[Wed Jan 21 18:57:37.791166 2026] [:error] [pid 21456:tid 21539] [client 20.205.96.233:16879] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/build.php"] [unique_id "aXCxIQKyVQ9Ob2YxRApzrQAAAJU"]
[Wed Jan 21 18:57:38.334923 2026] [:error] [pid 21456:tid 21518] [client 20.205.96.233:10765] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/build.php"] [unique_id "aXCxIgKyVQ9Ob2YxRApzrgAAAIA"]
[Wed Jan 21 18:57:38.930971 2026] [:error] [pid 21454:tid 21481] [client 20.205.96.233:7527] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/build.php"] [unique_id "aXCxIjwp5UZmMFzY2boy7AAAABE"]
[Wed Jan 21 18:57:39.224290 2026] [:error] [pid 21454:tid 21480] [client 20.205.96.233:50806] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws33.php"] [unique_id "aXCxIzwp5UZmMFzY2boy7QAAABA"]
[Wed Jan 21 18:57:39.666765 2026] [:error] [pid 21454:tid 21487] [client 20.205.96.233:4105] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws33.php"] [unique_id "aXCxIzwp5UZmMFzY2boy7gAAABc"]
[Wed Jan 21 18:57:40.044160 2026] [:error] [pid 21455:tid 21505] [client 20.205.96.233:33211] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws33.php"] [unique_id "aXCxJIpOKALCSo1URZEYIwAAAE4"]
[Wed Jan 21 18:57:40.416155 2026] [:error] [pid 21456:tid 21532] [client 20.205.96.233:13219] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws33.php"] [unique_id "aXCxJAKyVQ9Ob2YxRApztAAAAI4"]
[Wed Jan 21 18:57:40.951591 2026] [:error] [pid 21456:tid 21520] [client 20.205.96.233:1259] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/klex.php"] [unique_id "aXCxJAKyVQ9Ob2YxRApztwAAAII"]
[Wed Jan 21 18:57:41.211267 2026] [:error] [pid 56352:tid 56377] [client 20.205.96.233:33172] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/klex.php"] [unique_id "aXCxJdWN6wYNPTU3efUBXAAAAVc"]
[Wed Jan 21 18:57:41.470361 2026] [:error] [pid 21455:tid 21502] [client 20.205.96.233:7508] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/klex.php"] [unique_id "aXCxJYpOKALCSo1URZEYJQAAAEs"]
[Wed Jan 21 18:57:41.826429 2026] [:error] [pid 21456:tid 21531] [client 20.205.96.233:33161] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/klex.php"] [unique_id "aXCxJQKyVQ9Ob2YxRApzuQAAAI0"]
[Wed Jan 21 18:57:42.140079 2026] [:error] [pid 21456:tid 21534] [client 20.205.96.233:21098] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws34.php"] [unique_id "aXCxJgKyVQ9Ob2YxRApzugAAAJA"]
[Wed Jan 21 18:57:42.606634 2026] [:error] [pid 21456:tid 21522] [client 20.205.96.233:33212] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws34.php"] [unique_id "aXCxJgKyVQ9Ob2YxRApzuwAAAIQ"]
[Wed Jan 21 18:57:43.108742 2026] [:error] [pid 21455:tid 21496] [client 20.205.96.233:21117] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws34.php"] [unique_id "aXCxJ4pOKALCSo1URZEYJwAAAEU"]
[Wed Jan 21 18:57:43.349421 2026] [:error] [pid 56352:tid 56376] [client 20.205.96.233:1231] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws34.php"] [unique_id "aXCxJ9WN6wYNPTU3efUBXQAAAVY"]
[Wed Jan 21 18:57:43.654139 2026] [:error] [pid 56352:tid 56369] [client 20.205.96.233:50763] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alpa.php"] [unique_id "aXCxJ9WN6wYNPTU3efUBXgAAAU8"]
[Wed Jan 21 18:57:43.993786 2026] [:error] [pid 59863:tid 59890] [client 20.205.96.233:33160] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alpa.php"] [unique_id "aXCxJ7HQ1zVZ4yLuI-y_NwAAARc"]
[Wed Jan 21 18:57:44.262507 2026] [:error] [pid 21455:tid 21514] [client 20.205.96.233:4118] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alpa.php"] [unique_id "aXCxKIpOKALCSo1URZEYKwAAAFc"]
[Wed Jan 21 18:57:44.517633 2026] [:error] [pid 59863:tid 59887] [client 20.205.96.233:33190] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alpa.php"] [unique_id "aXCxKLHQ1zVZ4yLuI-y_OAAAARQ"]
[Wed Jan 21 18:57:44.789048 2026] [:error] [pid 59863:tid 59872] [client 20.205.96.233:26570] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file2.php"] [unique_id "aXCxKLHQ1zVZ4yLuI-y_OQAAAQU"]
[Wed Jan 21 18:57:45.097490 2026] [:error] [pid 21456:tid 21519] [client 20.205.96.233:21119] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file2.php"] [unique_id "aXCxKQKyVQ9Ob2YxRApzvwAAAIE"]
[Wed Jan 21 18:57:45.339324 2026] [:error] [pid 21455:tid 21498] [client 20.205.96.233:33192] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file2.php"] [unique_id "aXCxKYpOKALCSo1URZEYLgAAAEc"]
[Wed Jan 21 18:57:45.585332 2026] [:error] [pid 21563:tid 21579] [client 20.205.96.233:26587] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file2.php"] [unique_id "aXCxKRZq__dTorabEox1kQAAAM4"]
[Wed Jan 21 18:57:45.890855 2026] [:error] [pid 21563:tid 21580] [client 20.205.96.233:23801] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/444.php"] [unique_id "aXCxKRZq__dTorabEox1kgAAAM8"]
[Wed Jan 21 18:57:46.217793 2026] [:error] [pid 56352:tid 56374] [client 20.205.96.233:21062] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/444.php"] [unique_id "aXCxKtWN6wYNPTU3efUBYQAAAVQ"]
[Wed Jan 21 18:57:46.505723 2026] [:error] [pid 21455:tid 21497] [client 20.205.96.233:26576] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/444.php"] [unique_id "aXCxKopOKALCSo1URZEYNAAAAEY"]
[Wed Jan 21 18:57:46.803530 2026] [:error] [pid 56352:tid 56371] [client 20.205.96.233:50797] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/444.php"] [unique_id "aXCxKtWN6wYNPTU3efUBYgAAAVE"]
[Wed Jan 21 18:57:47.114625 2026] [:error] [pid 21456:tid 21540] [client 20.205.96.233:33206] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "aXCxKwKyVQ9Ob2YxRApzwgAAAJY"]
[Wed Jan 21 18:57:47.360354 2026] [:error] [pid 21455:tid 21500] [client 20.205.96.233:33200] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "aXCxK4pOKALCSo1URZEYNgAAAEk"]
[Wed Jan 21 18:57:47.627216 2026] [:error] [pid 21563:tid 21588] [client 20.205.96.233:33153] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "aXCxKxZq__dTorabEox1lQAAANc"]
[Wed Jan 21 18:57:47.953519 2026] [:error] [pid 21563:tid 21571] [client 20.205.96.233:33209] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "aXCxKxZq__dTorabEox1lgAAAMY"]
[Wed Jan 21 18:58:47.166093 2026] [:error] [pid 56352:tid 56368] [client 20.205.96.233:33181] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws37.php"] [unique_id "aXCxZ9WN6wYNPTU3efUBlgAAAU4"]
[Wed Jan 21 18:58:47.405721 2026] [:error] [pid 21455:tid 21492] [client 20.205.96.233:8924] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws37.php"] [unique_id "aXCxZ4pOKALCSo1URZEYgQAAAEE"]
[Wed Jan 21 18:58:47.639247 2026] [:error] [pid 21456:tid 21527] [client 20.205.96.233:8906] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws37.php"] [unique_id "aXCxZwKyVQ9Ob2YxRAp0IQAAAIk"]
[Wed Jan 21 18:58:47.898625 2026] [:error] [pid 59863:tid 59889] [client 20.205.96.233:10513] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws37.php"] [unique_id "aXCxZ7HQ1zVZ4yLuI-y_dQAAARY"]
[Wed Jan 21 18:58:48.131829 2026] [:error] [pid 21454:tid 21464] [client 20.205.96.233:13434] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geck.php"] [unique_id "aXCxaDwp5UZmMFzY2bozOgAAAAA"]
[Wed Jan 21 18:58:48.367472 2026] [:error] [pid 59863:tid 59868] [client 20.205.96.233:8809] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geck.php"] [unique_id "aXCxaLHQ1zVZ4yLuI-y_dgAAAQE"]
[Wed Jan 21 18:58:48.632875 2026] [:error] [pid 59863:tid 59881] [client 20.205.96.233:8784] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geck.php"] [unique_id "aXCxaLHQ1zVZ4yLuI-y_eAAAAQ4"]
[Wed Jan 21 18:58:48.893729 2026] [:error] [pid 56352:tid 56363] [client 20.205.96.233:8772] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geck.php"] [unique_id "aXCxaNWN6wYNPTU3efUBlwAAAUk"]
[Wed Jan 21 18:58:49.134177 2026] [:error] [pid 21455:tid 21504] [client 20.205.96.233:7414] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nfile.php"] [unique_id "aXCxaYpOKALCSo1URZEYggAAAE0"]
[Wed Jan 21 18:58:49.385306 2026] [:error] [pid 21563:tid 21586] [client 20.205.96.233:15723] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nfile.php"] [unique_id "aXCxaRZq__dTorabEox1zwAAANU"]
[Wed Jan 21 18:58:49.637971 2026] [:error] [pid 21455:tid 21508] [client 20.205.96.233:25467] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nfile.php"] [unique_id "aXCxaYpOKALCSo1URZEYgwAAAFE"]
[Wed Jan 21 18:58:49.872572 2026] [:error] [pid 21455:tid 21502] [client 20.205.96.233:15707] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nfile.php"] [unique_id "aXCxaYpOKALCSo1URZEYhAAAAEs"]
[Wed Jan 21 18:58:50.149664 2026] [:error] [pid 21455:tid 21507] [client 20.205.96.233:10554] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file32.php"] [unique_id "aXCxaopOKALCSo1URZEYhQAAAFA"]
[Wed Jan 21 18:58:50.383649 2026] [:error] [pid 59863:tid 59872] [client 20.205.96.233:15718] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file32.php"] [unique_id "aXCxarHQ1zVZ4yLuI-y_ewAAAQU"]
[Wed Jan 21 18:58:50.617843 2026] [:error] [pid 21563:tid 21583] [client 20.205.96.233:7417] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file32.php"] [unique_id "aXCxahZq__dTorabEox10AAAANI"]
[Wed Jan 21 18:58:50.871368 2026] [:error] [pid 21455:tid 21513] [client 20.205.96.233:7406] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file32.php"] [unique_id "aXCxaopOKALCSo1URZEYhgAAAFY"]
[Wed Jan 21 18:58:51.165118 2026] [:error] [pid 4382:tid 4388] [client 20.205.96.233:13212] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aXCxa5Hg0falVG3JFbA-iwAAAYQ"]
[Wed Jan 21 18:58:51.415384 2026] [:error] [pid 21456:tid 21532] [client 20.205.96.233:44115] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aXCxawKyVQ9Ob2YxRAp0JwAAAI4"]
[Wed Jan 21 18:58:51.651613 2026] [:error] [pid 21455:tid 21501] [client 20.205.96.233:13382] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aXCxa4pOKALCSo1URZEYiAAAAEo"]
[Wed Jan 21 18:58:51.928919 2026] [:error] [pid 21456:tid 21534] [client 20.205.96.233:15742] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class9.php"] [unique_id "aXCxawKyVQ9Ob2YxRAp0KgAAAJA"]
[Wed Jan 21 18:58:52.167411 2026] [:error] [pid 21563:tid 21579] [client 20.205.96.233:13208] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/031.php"] [unique_id "aXCxbBZq__dTorabEox10QAAAM4"]
[Wed Jan 21 18:58:52.416034 2026] [:error] [pid 21455:tid 21491] [client 20.205.96.233:44129] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/031.php"] [unique_id "aXCxbIpOKALCSo1URZEYiQAAAEA"]
[Wed Jan 21 18:58:52.651083 2026] [:error] [pid 4382:tid 4384] [client 20.205.96.233:44120] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/031.php"] [unique_id "aXCxbJHg0falVG3JFbA-jAAAAYA"]
[Wed Jan 21 18:58:53.031515 2026] [:error] [pid 21563:tid 21576] [client 20.205.96.233:10539] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/031.php"] [unique_id "aXCxbRZq__dTorabEox10wAAAMs"]
[Wed Jan 21 18:58:53.267874 2026] [:error] [pid 21455:tid 21499] [client 20.205.96.233:10538] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aXCxbYpOKALCSo1URZEYigAAAEg"]
[Wed Jan 21 18:58:53.528739 2026] [:error] [pid 59863:tid 59875] [client 20.205.96.233:10553] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aXCxbbHQ1zVZ4yLuI-y_fgAAAQg"]
[Wed Jan 21 18:58:53.774224 2026] [:error] [pid 21456:tid 21529] [client 20.205.96.233:10519] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aXCxbQKyVQ9Ob2YxRAp0LAAAAIs"]
[Wed Jan 21 18:58:54.112437 2026] [:error] [pid 21563:tid 21566] [client 20.205.96.233:8777] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file4.php"] [unique_id "aXCxbhZq__dTorabEox11AAAAME"]
[Wed Jan 21 18:58:54.351801 2026] [:error] [pid 21563:tid 21584] [client 20.205.96.233:8947] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file5.php"] [unique_id "aXCxbhZq__dTorabEox11QAAANM"]
[Wed Jan 21 18:58:54.607835 2026] [:error] [pid 21563:tid 21588] [client 20.205.96.233:10522] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file5.php"] [unique_id "aXCxbhZq__dTorabEox11gAAANc"]
[Wed Jan 21 18:58:54.885968 2026] [:error] [pid 21456:tid 21522] [client 20.205.96.233:25446] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file5.php"] [unique_id "aXCxbgKyVQ9Ob2YxRAp0LgAAAIQ"]
[Wed Jan 21 18:58:55.163253 2026] [:error] [pid 21456:tid 21540] [client 20.205.96.233:8896] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file5.php"] [unique_id "aXCxbwKyVQ9Ob2YxRAp0MAAAAJY"]
[Wed Jan 21 18:58:55.408686 2026] [:error] [pid 21456:tid 21530] [client 20.205.96.233:10516] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx38.php"] [unique_id "aXCxbwKyVQ9Ob2YxRAp0MQAAAIw"]
[Wed Jan 21 18:58:55.641668 2026] [:error] [pid 21454:tid 21477] [client 20.205.96.233:44157] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx38.php"] [unique_id "aXCxbzwp5UZmMFzY2bozPAAAAA0"]
[Wed Jan 21 18:58:55.885416 2026] [:error] [pid 4382:tid 4399] [client 20.205.96.233:44123] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx38.php"] [unique_id "aXCxb5Hg0falVG3JFbA-kQAAAY8"]
[Wed Jan 21 18:58:56.143404 2026] [:error] [pid 21455:tid 21503] [client 20.205.96.233:44127] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx38.php"] [unique_id "aXCxcIpOKALCSo1URZEYiwAAAEw"]
[Wed Jan 21 18:58:56.624272 2026] [:error] [pid 4382:tid 4404] [client 20.205.96.233:8938] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aXCxcJHg0falVG3JFbA-kwAAAZQ"]
[Wed Jan 21 18:58:56.857342 2026] [:error] [pid 56352:tid 56371] [client 20.205.96.233:10525] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aXCxcNWN6wYNPTU3efUBmwAAAVE"]
[Wed Jan 21 18:58:57.118559 2026] [:error] [pid 56352:tid 56378] [client 20.205.96.233:8937] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aXCxcdWN6wYNPTU3efUBnAAAAVg"]
[Wed Jan 21 18:58:57.371636 2026] [:error] [pid 21456:tid 21534] [client 20.205.96.233:8793] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/404.php"] [unique_id "aXCxcQKyVQ9Ob2YxRAp0NQAAAJA"]
[Wed Jan 21 18:58:57.604516 2026] [:error] [pid 59863:tid 59889] [client 20.205.96.233:13209] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless3.php"] [unique_id "aXCxcbHQ1zVZ4yLuI-y_ggAAARY"]
[Wed Jan 21 18:58:57.883988 2026] [:error] [pid 21563:tid 21574] [client 20.205.96.233:15739] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless3.php"] [unique_id "aXCxcRZq__dTorabEox11wAAAMk"]
[Wed Jan 21 18:58:58.160849 2026] [:error] [pid 21563:tid 21567] [client 20.205.96.233:44128] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless3.php"] [unique_id "aXCxchZq__dTorabEox12QAAAMI"]
[Wed Jan 21 18:58:58.422735 2026] [:error] [pid 21454:tid 21474] [client 20.205.96.233:8807] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless3.php"] [unique_id "aXCxcjwp5UZmMFzY2bozPQAAAAo"]
[Wed Jan 21 18:58:58.719372 2026] [:error] [pid 21456:tid 21518] [client 20.205.96.233:15741] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "aXCxcgKyVQ9Ob2YxRAp0OgAAAIA"]
[Wed Jan 21 18:58:58.964224 2026] [:error] [pid 21563:tid 21585] [client 20.205.96.233:25431] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "aXCxchZq__dTorabEox12gAAANQ"]
[Wed Jan 21 18:58:59.221249 2026] [:error] [pid 21456:tid 21521] [client 20.205.96.233:19141] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "aXCxcwKyVQ9Ob2YxRAp0PQAAAIM"]
[Wed Jan 21 18:58:59.506216 2026] [:error] [pid 21456:tid 21522] [client 20.205.96.233:8914] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "aXCxcwKyVQ9Ob2YxRAp0PgAAAIQ"]
[Wed Jan 21 18:58:59.740460 2026] [:error] [pid 4382:tid 4390] [client 20.205.96.233:8923] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/akk.php"] [unique_id "aXCxc5Hg0falVG3JFbA-lAAAAYY"]
[Wed Jan 21 18:58:59.977444 2026] [:error] [pid 59863:tid 59880] [client 20.205.96.233:8828] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/akk.php"] [unique_id "aXCxc7HQ1zVZ4yLuI-y_gwAAAQ0"]
[Wed Jan 21 18:59:00.269810 2026] [:error] [pid 21456:tid 21530] [client 20.205.96.233:13223] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/akk.php"] [unique_id "aXCxdAKyVQ9Ob2YxRAp0QAAAAIw"]
[Wed Jan 21 18:59:00.579801 2026] [:error] [pid 56352:tid 56364] [client 20.205.96.233:8903] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/akk.php"] [unique_id "aXCxdNWN6wYNPTU3efUBnwAAAUo"]
[Wed Jan 21 18:59:00.839829 2026] [:error] [pid 21563:tid 21577] [client 20.205.96.233:25422] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aXCxdBZq__dTorabEox13QAAAMw"]
[Wed Jan 21 18:59:01.078163 2026] [:error] [pid 21455:tid 21500] [client 20.205.96.233:10530] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aXCxdYpOKALCSo1URZEYjAAAAEk"]
[Wed Jan 21 18:59:01.333033 2026] [:error] [pid 21456:tid 21525] [client 20.205.96.233:15716] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aXCxdQKyVQ9Ob2YxRAp0QgAAAIc"]
[Wed Jan 21 18:59:01.597452 2026] [:error] [pid 56352:tid 56363] [client 20.205.96.233:15715] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aXCxddWN6wYNPTU3efUBogAAAUk"]
[Wed Jan 21 18:59:01.845906 2026] [:error] [pid 21455:tid 21493] [client 20.205.96.233:44152] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x7.php"] [unique_id "aXCxdYpOKALCSo1URZEYjgAAAEI"]
[Wed Jan 21 18:59:02.089118 2026] [:error] [pid 56352:tid 56373] [client 20.205.96.233:25415] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x7.php"] [unique_id "aXCxdtWN6wYNPTU3efUBpAAAAVM"]
[Wed Jan 21 18:59:02.336118 2026] [:error] [pid 4382:tid 4394] [client 20.205.96.233:15705] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x7.php"] [unique_id "aXCxdpHg0falVG3JFbA-lwAAAYo"]
[Wed Jan 21 18:59:02.584457 2026] [:error] [pid 21563:tid 21583] [client 20.205.96.233:15714] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x7.php"] [unique_id "aXCxdhZq__dTorabEox14AAAANI"]
[Wed Jan 21 18:59:02.827722 2026] [:error] [pid 56352:tid 56354] [client 20.205.96.233:44138] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws36.php"] [unique_id "aXCxdtWN6wYNPTU3efUBpQAAAUA"]
[Wed Jan 21 18:59:03.096824 2026] [:error] [pid 21454:tid 21471] [client 20.205.96.233:13225] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws36.php"] [unique_id "aXCxdzwp5UZmMFzY2bozPgAAAAc"]
[Wed Jan 21 18:59:03.359999 2026] [:error] [pid 21456:tid 21531] [client 20.205.96.233:10549] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws36.php"] [unique_id "aXCxdwKyVQ9Ob2YxRAp0RgAAAI0"]
[Wed Jan 21 18:59:03.669587 2026] [:error] [pid 21455:tid 21511] [client 20.205.96.233:13226] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws36.php"] [unique_id "aXCxd4pOKALCSo1URZEYkAAAAFQ"]
[Wed Jan 21 18:59:03.932241 2026] [:error] [pid 21456:tid 21518] [client 20.205.96.233:4816] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x0x.php"] [unique_id "aXCxdwKyVQ9Ob2YxRAp0RwAAAIA"]
[Wed Jan 21 18:59:04.235740 2026] [:error] [pid 4382:tid 4393] [client 20.205.96.233:15724] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x0x.php"] [unique_id "aXCxeJHg0falVG3JFbA-mQAAAYk"]
[Wed Jan 21 18:59:04.473152 2026] [:error] [pid 21455:tid 21506] [client 20.205.96.233:44107] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x0x.php"] [unique_id "aXCxeIpOKALCSo1URZEYkgAAAE8"]
[Wed Jan 21 18:59:04.711517 2026] [:error] [pid 21455:tid 21505] [client 20.205.96.233:7349] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/0x0x.php"] [unique_id "aXCxeIpOKALCSo1URZEYkwAAAE4"]
[Wed Jan 21 18:59:04.953764 2026] [:error] [pid 59863:tid 59886] [client 20.205.96.233:9002] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aXCxeLHQ1zVZ4yLuI-y_hgAAARM"]
[Wed Jan 21 18:59:05.190177 2026] [:error] [pid 56352:tid 56356] [client 20.205.96.233:8781] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aXCxedWN6wYNPTU3efUBpgAAAUI"]
[Wed Jan 21 18:59:05.431989 2026] [:error] [pid 21454:tid 21488] [client 20.205.96.233:50822] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aXCxeTwp5UZmMFzY2bozQAAAABg"]
[Wed Jan 21 18:59:05.670878 2026] [:error] [pid 56352:tid 56367] [client 20.205.96.233:50844] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aXCxedWN6wYNPTU3efUBpwAAAU0"]
[Wed Jan 21 18:59:05.919479 2026] [:error] [pid 56352:tid 56357] [client 20.205.96.233:41324] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aXCxedWN6wYNPTU3efUBqAAAAUM"]
[Wed Jan 21 18:59:06.168881 2026] [:error] [pid 56352:tid 56360] [client 20.205.96.233:50848] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aXCxetWN6wYNPTU3efUBqgAAAUY"]
[Wed Jan 21 18:59:06.420774 2026] [:error] [pid 21563:tid 21584] [client 20.205.96.233:4802] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aXCxehZq__dTorabEox14wAAANM"]
[Wed Jan 21 18:59:06.696529 2026] [:error] [pid 21454:tid 21476] [client 20.205.96.233:50662] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aXCxejwp5UZmMFzY2bozQQAAAAw"]
[Wed Jan 21 18:59:06.931947 2026] [:error] [pid 59863:tid 59877] [client 20.205.96.233:7001] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/card.php"] [unique_id "aXCxerHQ1zVZ4yLuI-y_iAAAAQo"]
[Wed Jan 21 18:59:07.169886 2026] [:error] [pid 21563:tid 21568] [client 20.205.96.233:13189] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/card.php"] [unique_id "aXCxexZq__dTorabEox15gAAAMM"]
[Wed Jan 21 18:59:07.427384 2026] [:error] [pid 21456:tid 21539] [client 20.205.96.233:50857] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/card.php"] [unique_id "aXCxewKyVQ9Ob2YxRAp0TQAAAJU"]
[Wed Jan 21 18:59:07.670200 2026] [:error] [pid 21455:tid 21508] [client 20.205.96.233:50335] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/card.php"] [unique_id "aXCxe4pOKALCSo1URZEYlgAAAFE"]
[Wed Jan 21 18:59:07.909015 2026] [:error] [pid 21456:tid 21528] [client 20.205.96.233:50652] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/size.php"] [unique_id "aXCxewKyVQ9Ob2YxRAp0TgAAAIo"]
[Wed Jan 21 18:59:08.159806 2026] [:error] [pid 21456:tid 21532] [client 20.205.96.233:50873] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/size.php"] [unique_id "aXCxfAKyVQ9Ob2YxRAp0UAAAAI4"]
[Wed Jan 21 18:59:08.394436 2026] [:error] [pid 4382:tid 4387] [client 20.205.96.233:7011] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/size.php"] [unique_id "aXCxfJHg0falVG3JFbA-nQAAAYM"]
[Wed Jan 21 18:59:08.634009 2026] [:error] [pid 4382:tid 4401] [client 20.205.96.233:50847] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/size.php"] [unique_id "aXCxfJHg0falVG3JFbA-ngAAAZE"]
[Wed Jan 21 18:59:08.872358 2026] [:error] [pid 21455:tid 21507] [client 20.205.96.233:50638] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class629.php"] [unique_id "aXCxfIpOKALCSo1URZEYlwAAAFA"]
[Wed Jan 21 18:59:09.107529 2026] [:error] [pid 59863:tid 59876] [client 20.205.96.233:13210] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class629.php"] [unique_id "aXCxfbHQ1zVZ4yLuI-y_igAAAQk"]
[Wed Jan 21 18:59:09.368075 2026] [:error] [pid 21563:tid 21587] [client 20.205.96.233:50841] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class629.php"] [unique_id "aXCxfRZq__dTorabEox16AAAANY"]
[Wed Jan 21 18:59:09.611312 2026] [:error] [pid 21454:tid 21470] [client 20.205.96.233:35414] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class629.php"] [unique_id "aXCxfTwp5UZmMFzY2bozQwAAAAY"]
[Wed Jan 21 18:59:09.852395 2026] [:error] [pid 59863:tid 59874] [client 20.205.96.233:35405] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aXCxfbHQ1zVZ4yLuI-y_iwAAAQc"]
[Wed Jan 21 18:59:10.103972 2026] [:error] [pid 4382:tid 4390] [client 20.205.96.233:13229] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aXCxfpHg0falVG3JFbA-oAAAAYY"]
[Wed Jan 21 18:59:10.348033 2026] [:error] [pid 4382:tid 4407] [client 20.205.96.233:50628] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aXCxfpHg0falVG3JFbA-oQAAAZc"]
[Wed Jan 21 18:59:10.601287 2026] [:error] [pid 21455:tid 21512] [client 20.205.96.233:50672] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file9.php"] [unique_id "aXCxfopOKALCSo1URZEYmQAAAFU"]
[Wed Jan 21 18:59:10.840207 2026] [:error] [pid 4382:tid 4391] [client 20.205.96.233:50681] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon.php"] [unique_id "aXCxfpHg0falVG3JFbA-ogAAAYc"]
[Wed Jan 21 18:59:11.082162 2026] [:error] [pid 59863:tid 59867] [client 20.205.96.233:50663] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon.php"] [unique_id "aXCxf7HQ1zVZ4yLuI-y_jQAAAQA"]
[Wed Jan 21 18:59:11.318597 2026] [:error] [pid 21455:tid 21491] [client 20.205.96.233:35415] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon.php"] [unique_id "aXCxf4pOKALCSo1URZEYmgAAAEA"]
[Wed Jan 21 18:59:11.570718 2026] [:error] [pid 4382:tid 4395] [client 20.205.96.233:35440] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon.php"] [unique_id "aXCxf5Hg0falVG3JFbA-pAAAAYs"]
[Wed Jan 21 18:59:11.841195 2026] [:error] [pid 59863:tid 59880] [client 20.205.96.233:35441] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aXCxf7HQ1zVZ4yLuI-y_jwAAAQ0"]
[Wed Jan 21 18:59:12.080020 2026] [:error] [pid 4382:tid 4384] [client 20.205.96.233:50262] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aXCxgJHg0falVG3JFbA-pgAAAYA"]
[Wed Jan 21 18:59:12.332803 2026] [:error] [pid 21455:tid 21495] [client 20.205.96.233:50640] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aXCxgIpOKALCSo1URZEYmwAAAEQ"]
[Wed Jan 21 18:59:12.571831 2026] [:error] [pid 21563:tid 21584] [client 20.205.96.233:50854] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aXCxgBZq__dTorabEox17AAAANM"]
[Wed Jan 21 18:59:12.826959 2026] [:error] [pid 21456:tid 21541] [client 20.205.96.233:35420] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file21.php"] [unique_id "aXCxgAKyVQ9Ob2YxRAp0UgAAAJc"]
[Wed Jan 21 18:59:13.063330 2026] [:error] [pid 4382:tid 4400] [client 20.205.96.233:13417] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file21.php"] [unique_id "aXCxgZHg0falVG3JFbA-qQAAAZA"]
[Wed Jan 21 18:59:13.306403 2026] [:error] [pid 59863:tid 59884] [client 20.205.96.233:13192] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file21.php"] [unique_id "aXCxgbHQ1zVZ4yLuI-y_kQAAARE"]
[Wed Jan 21 18:59:13.576348 2026] [:error] [pid 21454:tid 21482] [client 20.205.96.233:34660] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file21.php"] [unique_id "aXCxgTwp5UZmMFzY2bozRAAAABI"]
[Wed Jan 21 18:59:13.835763 2026] [:error] [pid 21563:tid 21568] [client 20.205.96.233:50243] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "aXCxgRZq__dTorabEox17gAAAMM"]
[Wed Jan 21 18:59:14.092689 2026] [:error] [pid 4382:tid 4398] [client 20.205.96.233:13227] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "aXCxgpHg0falVG3JFbA-qgAAAY4"]
[Wed Jan 21 18:59:14.334252 2026] [:error] [pid 21563:tid 21569] [client 20.205.96.233:13236] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "aXCxghZq__dTorabEox17wAAAMQ"]
[Wed Jan 21 18:59:14.574839 2026] [:error] [pid 21455:tid 21511] [client 20.205.96.233:12749] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "aXCxgopOKALCSo1URZEYngAAAFQ"]
[Wed Jan 21 18:59:14.810844 2026] [:error] [pid 21456:tid 21539] [client 20.205.96.233:50668] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/racs3.php"] [unique_id "aXCxggKyVQ9Ob2YxRAp0VQAAAJU"]
[Wed Jan 21 18:59:15.071831 2026] [:error] [pid 21454:tid 21480] [client 20.205.96.233:50656] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/racs3.php"] [unique_id "aXCxgzwp5UZmMFzY2bozRgAAABA"]
[Wed Jan 21 18:59:15.318902 2026] [:error] [pid 21563:tid 21573] [client 20.205.96.233:7005] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/racs3.php"] [unique_id "aXCxgxZq__dTorabEox18AAAAMg"]
[Wed Jan 21 18:59:15.618491 2026] [:error] [pid 21454:tid 21487] [client 20.205.96.233:13404] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/racs3.php"] [unique_id "aXCxgzwp5UZmMFzY2bozRwAAABc"]
[Wed Jan 21 18:59:15.877604 2026] [:error] [pid 21563:tid 21587] [client 20.205.96.233:35397] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsd.php"] [unique_id "aXCxgxZq__dTorabEox18QAAANY"]
[Wed Jan 21 18:59:16.138793 2026] [:error] [pid 21563:tid 21571] [client 20.205.96.233:12791] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsd.php"] [unique_id "aXCxhBZq__dTorabEox18gAAAMY"]
[Wed Jan 21 18:59:16.396054 2026] [:error] [pid 21454:tid 21464] [client 20.205.96.233:34671] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsd.php"] [unique_id "aXCxhDwp5UZmMFzY2bozSAAAAAA"]
[Wed Jan 21 18:59:16.719383 2026] [:error] [pid 59863:tid 59890] [client 20.205.96.233:13228] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsd.php"] [unique_id "aXCxhLHQ1zVZ4yLuI-y_lAAAARc"]
[Wed Jan 21 18:59:17.019833 2026] [:error] [pid 21455:tid 21505] [client 20.205.96.233:7014] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/333.php"] [unique_id "aXCxhYpOKALCSo1URZEYoAAAAE4"]
[Wed Jan 21 18:59:17.294809 2026] [:error] [pid 21455:tid 21492] [client 20.205.96.233:13241] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/333.php"] [unique_id "aXCxhYpOKALCSo1URZEYoQAAAEE"]
[Wed Jan 21 18:59:17.561594 2026] [:error] [pid 59863:tid 59886] [client 20.205.96.233:50649] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/333.php"] [unique_id "aXCxhbHQ1zVZ4yLuI-y_lQAAARM"]
[Wed Jan 21 18:59:17.853180 2026] [:error] [pid 21456:tid 21540] [client 20.205.96.233:35404] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/333.php"] [unique_id "aXCxhQKyVQ9Ob2YxRAp0VwAAAJY"]
[Wed Jan 21 18:59:18.091052 2026] [:error] [pid 21454:tid 21486] [client 20.205.96.233:17293] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aXCxhjwp5UZmMFzY2bozSgAAABY"]
[Wed Jan 21 18:59:18.331954 2026] [:error] [pid 4382:tid 4385] [client 20.205.96.233:50632] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aXCxhpHg0falVG3JFbA-rwAAAYE"]
[Wed Jan 21 18:59:18.570617 2026] [:error] [pid 56352:tid 56355] [client 20.205.96.233:27264] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aXCxhtWN6wYNPTU3efUBrgAAAUE"]
[Wed Jan 21 18:59:18.827315 2026] [:error] [pid 4382:tid 4390] [client 20.205.96.233:17298] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/12.php"] [unique_id "aXCxhpHg0falVG3JFbA-sQAAAYY"]
[Wed Jan 21 18:59:19.073326 2026] [:error] [pid 4382:tid 4407] [client 20.205.96.233:13238] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon3.php"] [unique_id "aXCxh5Hg0falVG3JFbA-sgAAAZc"]
[Wed Jan 21 18:59:19.330459 2026] [:error] [pid 21456:tid 21537] [client 20.205.96.233:12796] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon3.php"] [unique_id "aXCxhwKyVQ9Ob2YxRAp0WgAAAJM"]
[Wed Jan 21 18:59:19.593238 2026] [:error] [pid 56352:tid 56366] [client 20.205.96.233:17291] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon3.php"] [unique_id "aXCxh9WN6wYNPTU3efUBsQAAAUw"]
[Wed Jan 21 18:59:19.836143 2026] [:error] [pid 21455:tid 21510] [client 20.205.96.233:17338] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon3.php"] [unique_id "aXCxh4pOKALCSo1URZEYowAAAFM"]
[Wed Jan 21 18:59:20.093744 2026] [:error] [pid 21455:tid 21513] [client 20.205.96.233:34684] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tor.php"] [unique_id "aXCxiIpOKALCSo1URZEYpAAAAFY"]
[Wed Jan 21 18:59:20.339109 2026] [:error] [pid 21456:tid 21521] [client 20.205.96.233:32237] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tor.php"] [unique_id "aXCxiAKyVQ9Ob2YxRAp0XQAAAIM"]
[Wed Jan 21 18:59:20.581040 2026] [:error] [pid 21563:tid 21582] [client 20.205.96.233:17317] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tor.php"] [unique_id "aXCxiBZq__dTorabEox18wAAANE"]
[Wed Jan 21 18:59:20.821326 2026] [:error] [pid 56352:tid 56356] [client 20.205.96.233:50250] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tor.php"] [unique_id "aXCxiNWN6wYNPTU3efUBsgAAAUI"]
[Wed Jan 21 18:59:21.059402 2026] [:error] [pid 56352:tid 56358] [client 20.205.96.233:3371] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haa.php"] [unique_id "aXCxidWN6wYNPTU3efUBtAAAAUQ"]
[Wed Jan 21 18:59:21.302518 2026] [:error] [pid 21456:tid 21522] [client 20.205.96.233:32229] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haa.php"] [unique_id "aXCxiQKyVQ9Ob2YxRAp0YQAAAIQ"]
[Wed Jan 21 18:59:21.549776 2026] [:error] [pid 21455:tid 21501] [client 20.205.96.233:17314] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haa.php"] [unique_id "aXCxiYpOKALCSo1URZEYpQAAAEo"]
[Wed Jan 21 18:59:21.848962 2026] [:error] [pid 21454:tid 21474] [client 20.205.96.233:25826] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/haa.php"] [unique_id "aXCxiTwp5UZmMFzY2bozSwAAAAo"]
[Wed Jan 21 18:59:22.103520 2026] [:error] [pid 21454:tid 21467] [client 20.205.96.233:3377] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "aXCxijwp5UZmMFzY2bozTAAAAAM"]
[Wed Jan 21 18:59:22.365347 2026] [:error] [pid 4382:tid 4397] [client 20.205.96.233:17342] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "aXCxipHg0falVG3JFbA-tgAAAY0"]
[Wed Jan 21 18:59:22.613263 2026] [:error] [pid 21454:tid 21488] [client 20.205.96.233:50654] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "aXCxijwp5UZmMFzY2bozTwAAABg"]
[Wed Jan 21 18:59:22.878715 2026] [:error] [pid 21454:tid 21479] [client 20.205.96.233:1371] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "aXCxijwp5UZmMFzY2bozUAAAAA8"]
[Wed Jan 21 18:59:23.113609 2026] [:error] [pid 21454:tid 21466] [client 20.205.96.233:25821] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asas.php"] [unique_id "aXCxizwp5UZmMFzY2bozUgAAAAI"]
[Wed Jan 21 18:59:23.392054 2026] [:error] [pid 4382:tid 4396] [client 20.205.96.233:50242] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asas.php"] [unique_id "aXCxi5Hg0falVG3JFbA-uAAAAYw"]
[Wed Jan 21 18:59:23.650638 2026] [:error] [pid 4382:tid 4406] [client 20.205.96.233:1381] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asas.php"] [unique_id "aXCxi5Hg0falVG3JFbA-uQAAAZY"]
[Wed Jan 21 18:59:23.890205 2026] [:error] [pid 4382:tid 4393] [client 20.205.96.233:50274] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asas.php"] [unique_id "aXCxi5Hg0falVG3JFbA-ugAAAYk"]
[Wed Jan 21 18:59:24.134596 2026] [:error] [pid 4382:tid 4386] [client 20.205.96.233:50252] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x.php"] [unique_id "aXCxjJHg0falVG3JFbA-vAAAAYI"]
[Wed Jan 21 18:59:24.381752 2026] [:error] [pid 21563:tid 21589] [client 20.205.96.233:32250] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x.php"] [unique_id "aXCxjBZq__dTorabEox19gAAANg"]
[Wed Jan 21 18:59:24.624120 2026] [:error] [pid 56352:tid 56361] [client 20.205.96.233:25813] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x.php"] [unique_id "aXCxjNWN6wYNPTU3efUBtgAAAUc"]
[Wed Jan 21 18:59:24.911630 2026] [:error] [pid 21456:tid 21540] [client 20.205.96.233:17290] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x.php"] [unique_id "aXCxjAKyVQ9Ob2YxRAp0ZQAAAJY"]
[Wed Jan 21 18:59:25.218012 2026] [:error] [pid 21456:tid 21526] [client 20.205.96.233:32218] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "aXCxjQKyVQ9Ob2YxRAp0ZgAAAIg"]
[Wed Jan 21 18:59:25.464772 2026] [:error] [pid 4382:tid 4385] [client 20.205.96.233:25825] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "aXCxjZHg0falVG3JFbA-vgAAAYE"]
[Wed Jan 21 18:59:25.705287 2026] [:error] [pid 56352:tid 56373] [client 20.205.96.233:32248] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "aXCxjdWN6wYNPTU3efUBuAAAAVM"]
[Wed Jan 21 18:59:26.010641 2026] [:error] [pid 56352:tid 56364] [client 20.205.96.233:32221] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "aXCxjtWN6wYNPTU3efUBuQAAAUo"]
[Wed Jan 21 18:59:26.260791 2026] [:error] [pid 21455:tid 21496] [client 20.205.96.233:1402] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ton.php"] [unique_id "aXCxjopOKALCSo1URZEYpwAAAEU"]
[Wed Jan 21 18:59:26.521685 2026] [:error] [pid 21456:tid 21523] [client 20.205.96.233:17261] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ton.php"] [unique_id "aXCxjgKyVQ9Ob2YxRAp0aQAAAIU"]
[Wed Jan 21 18:59:26.765660 2026] [:error] [pid 21563:tid 21565] [client 20.205.96.233:32241] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ton.php"] [unique_id "aXCxjhZq__dTorabEox1-AAAAMA"]
[Wed Jan 21 18:59:27.046809 2026] [:error] [pid 21454:tid 21485] [client 20.205.96.233:17233] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ton.php"] [unique_id "aXCxjzwp5UZmMFzY2bozUwAAABU"]
[Wed Jan 21 18:59:27.294547 2026] [:error] [pid 21455:tid 21500] [client 20.205.96.233:17853] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v1.php"] [unique_id "aXCxj4pOKALCSo1URZEYqQAAAEk"]
[Wed Jan 21 18:59:27.533235 2026] [:error] [pid 21456:tid 21520] [client 20.205.96.233:2287] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v1.php"] [unique_id "aXCxjwKyVQ9Ob2YxRAp0agAAAII"]
[Wed Jan 21 18:59:27.788138 2026] [:error] [pid 21455:tid 21493] [client 20.205.96.233:25836] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v1.php"] [unique_id "aXCxj4pOKALCSo1URZEYqgAAAEI"]
[Wed Jan 21 18:59:28.055841 2026] [:error] [pid 21563:tid 21567] [client 20.205.96.233:3366] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v1.php"] [unique_id "aXCxkBZq__dTorabEox1-gAAAMI"]
[Wed Jan 21 18:59:28.298676 2026] [:error] [pid 21456:tid 21524] [client 20.205.96.233:17267] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/111.php"] [unique_id "aXCxkAKyVQ9Ob2YxRAp0awAAAIY"]
[Wed Jan 21 18:59:28.554808 2026] [:error] [pid 21456:tid 21542] [client 20.205.96.233:25835] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/111.php"] [unique_id "aXCxkAKyVQ9Ob2YxRAp0bAAAAJg"]
[Wed Jan 21 18:59:28.799975 2026] [:error] [pid 21455:tid 21505] [client 20.205.96.233:25800] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/111.php"] [unique_id "aXCxkIpOKALCSo1URZEYrAAAAE4"]
[Wed Jan 21 18:59:29.060573 2026] [:error] [pid 21455:tid 21492] [client 20.205.96.233:32217] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/111.php"] [unique_id "aXCxkYpOKALCSo1URZEYrQAAAEE"]
[Wed Jan 21 18:59:29.329302 2026] [:error] [pid 21455:tid 21508] [client 20.205.96.233:25817] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an7.php"] [unique_id "aXCxkYpOKALCSo1URZEYrgAAAFE"]
[Wed Jan 21 18:59:29.574003 2026] [:error] [pid 4382:tid 4397] [client 20.205.96.233:1369] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an7.php"] [unique_id "aXCxkZHg0falVG3JFbA-wgAAAY0"]
[Wed Jan 21 18:59:29.829234 2026] [:error] [pid 21563:tid 21585] [client 20.205.96.233:25850] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an7.php"] [unique_id "aXCxkRZq__dTorabEox1_AAAANQ"]
[Wed Jan 21 18:59:30.067497 2026] [:error] [pid 21563:tid 21572] [client 20.205.96.233:25829] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an7.php"] [unique_id "aXCxkhZq__dTorabEox1_QAAAMc"]
[Wed Jan 21 18:59:30.343979 2026] [:error] [pid 56352:tid 56354] [client 20.205.96.233:17285] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeqdlun.php"] [unique_id "aXCxktWN6wYNPTU3efUBwQAAAUA"]
[Wed Jan 21 18:59:30.593092 2026] [:error] [pid 21454:tid 21481] [client 20.205.96.233:32244] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeqdlun.php"] [unique_id "aXCxkjwp5UZmMFzY2bozVwAAABE"]
[Wed Jan 21 18:59:30.835783 2026] [:error] [pid 21454:tid 21474] [client 20.205.96.233:3390] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeqdlun.php"] [unique_id "aXCxkjwp5UZmMFzY2bozWQAAAAo"]
[Wed Jan 21 18:59:31.089009 2026] [:error] [pid 21563:tid 21571] [client 20.205.96.233:3342] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeqdlun.php"] [unique_id "aXCxkxZq__dTorabEox1_gAAAMY"]
[Wed Jan 21 18:59:31.339084 2026] [:error] [pid 21454:tid 21467] [client 20.205.96.233:12570] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aXCxkzwp5UZmMFzY2bozWwAAAAM"]
[Wed Jan 21 18:59:31.573035 2026] [:error] [pid 21456:tid 21537] [client 20.205.96.233:3375] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aXCxkwKyVQ9Ob2YxRAp0cQAAAJM"]
[Wed Jan 21 18:59:31.838694 2026] [:error] [pid 21563:tid 21583] [client 20.205.96.233:32234] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aXCxkxZq__dTorabEox1_wAAANI"]
[Wed Jan 21 18:59:32.089202 2026] [:error] [pid 21454:tid 21469] [client 20.205.96.233:51852] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "aXCxlDwp5UZmMFzY2bozXAAAAAU"]
[Wed Jan 21 18:59:32.328493 2026] [:error] [pid 21455:tid 21510] [client 20.205.96.233:51873] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yellow.php"] [unique_id "aXCxlIpOKALCSo1URZEYswAAAFM"]
[Wed Jan 21 18:59:32.603691 2026] [:error] [pid 21563:tid 21586] [client 20.205.96.233:32255] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yellow.php"] [unique_id "aXCxlBZq__dTorabEox2AgAAANU"]
[Wed Jan 21 18:59:32.848249 2026] [:error] [pid 4382:tid 4405] [client 20.205.96.233:32228] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yellow.php"] [unique_id "aXCxlJHg0falVG3JFbA-xwAAAZU"]
[Wed Jan 21 18:59:33.089896 2026] [:error] [pid 21456:tid 21521] [client 20.205.96.233:32193] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yellow.php"] [unique_id "aXCxlQKyVQ9Ob2YxRAp0cwAAAIM"]
[Wed Jan 21 18:59:33.323440 2026] [:error] [pid 59863:tid 59884] [client 20.205.96.233:51894] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lala.php"] [unique_id "aXCxlbHQ1zVZ4yLuI-y_mgAAARE"]
[Wed Jan 21 18:59:33.591215 2026] [:error] [pid 59863:tid 59882] [client 20.205.96.233:32209] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lala.php"] [unique_id "aXCxlbHQ1zVZ4yLuI-y_mwAAAQ8"]
[Wed Jan 21 18:59:33.846183 2026] [:error] [pid 21456:tid 21520] [client 20.205.96.233:17800] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lala.php"] [unique_id "aXCxlQKyVQ9Ob2YxRAp0dAAAAII"]
[Wed Jan 21 18:59:34.140628 2026] [:error] [pid 59863:tid 59890] [client 20.205.96.233:2258] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lala.php"] [unique_id "aXCxlrHQ1zVZ4yLuI-y_nAAAARc"]
[Wed Jan 21 18:59:34.412607 2026] [:error] [pid 59863:tid 59885] [client 20.205.96.233:17309] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file3.php"] [unique_id "aXCxlrHQ1zVZ4yLuI-y_nQAAARI"]
[Wed Jan 21 18:59:34.774478 2026] [:error] [pid 21455:tid 21512] [client 20.205.96.233:32196] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file3.php"] [unique_id "aXCxlopOKALCSo1URZEYuAAAAFU"]
[Wed Jan 21 18:59:35.026492 2026] [:error] [pid 21455:tid 21500] [client 20.205.96.233:17287] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file3.php"] [unique_id "aXCxl4pOKALCSo1URZEYuwAAAEk"]
[Wed Jan 21 18:59:35.279998 2026] [:error] [pid 21455:tid 21511] [client 20.205.96.233:50241] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file3.php"] [unique_id "aXCxl4pOKALCSo1URZEYvAAAAFQ"]
[Wed Jan 21 18:59:35.583810 2026] [:error] [pid 21456:tid 21522] [client 20.205.96.233:17311] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aXCxlwKyVQ9Ob2YxRAp0eQAAAIQ"]
[Wed Jan 21 18:59:35.920872 2026] [:error] [pid 21454:tid 21482] [client 20.205.96.233:3381] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aXCxlzwp5UZmMFzY2bozYAAAABI"]
[Wed Jan 21 18:59:36.211583 2026] [:error] [pid 4382:tid 4389] [client 20.205.96.233:25798] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aXCxmJHg0falVG3JFbA-ywAAAYU"]
[Wed Jan 21 18:59:36.479282 2026] [:error] [pid 21456:tid 21535] [client 20.205.96.233:2241] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file17.php"] [unique_id "aXCxmAKyVQ9Ob2YxRAp0ewAAAJE"]
[Wed Jan 21 18:59:36.716742 2026] [:error] [pid 21455:tid 21514] [client 20.205.96.233:24402] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "aXCxmIpOKALCSo1URZEYvgAAAFc"]
[Wed Jan 21 18:59:36.987064 2026] [:error] [pid 21563:tid 21588] [client 20.205.96.233:24385] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "aXCxmBZq__dTorabEox2BgAAANc"]
[Wed Jan 21 18:59:37.247592 2026] [:error] [pid 59863:tid 59876] [client 20.205.96.233:25852] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "aXCxmbHQ1zVZ4yLuI-y_oAAAAQk"]
[Wed Jan 21 18:59:37.517353 2026] [:error] [pid 21455:tid 21506] [client 20.205.96.233:25831] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "aXCxmYpOKALCSo1URZEYvwAAAE8"]
[Wed Jan 21 18:59:37.872489 2026] [:error] [pid 21455:tid 21494] [client 20.205.96.233:24426] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file15.php"] [unique_id "aXCxmYpOKALCSo1URZEYwQAAAEM"]
[Wed Jan 21 18:59:38.141492 2026] [:error] [pid 21455:tid 21498] [client 20.205.96.233:51856] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file15.php"] [unique_id "aXCxmopOKALCSo1URZEYwgAAAEc"]
[Wed Jan 21 18:59:38.459370 2026] [:error] [pid 21563:tid 21573] [client 20.205.96.233:25827] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file15.php"] [unique_id "aXCxmhZq__dTorabEox2CQAAAMg"]
[Wed Jan 21 18:59:38.730463 2026] [:error] [pid 59863:tid 59874] [client 20.205.96.233:34652] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file15.php"] [unique_id "aXCxmrHQ1zVZ4yLuI-y_ogAAAQc"]
[Wed Jan 21 18:59:39.008911 2026] [:error] [pid 56352:tid 56359] [client 20.205.96.233:8843] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file30.php"] [unique_id "aXCxm9WN6wYNPTU3efUBxgAAAUU"]
[Wed Jan 21 18:59:39.263008 2026] [:error] [pid 21456:tid 21537] [client 20.205.96.233:37942] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file30.php"] [unique_id "aXCxmwKyVQ9Ob2YxRAp0gQAAAJM"]
[Wed Jan 21 18:59:39.508727 2026] [:error] [pid 59863:tid 59873] [client 20.205.96.233:37904] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file30.php"] [unique_id "aXCxm7HQ1zVZ4yLuI-y_pAAAAQY"]
[Wed Jan 21 18:59:39.748702 2026] [:error] [pid 21456:tid 21523] [client 20.205.96.233:17243] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file30.php"] [unique_id "aXCxmwKyVQ9Ob2YxRAp0ggAAAIU"]
[Wed Jan 21 18:59:40.025156 2026] [:error] [pid 59863:tid 59888] [client 20.205.96.233:2265] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless5.php"] [unique_id "aXCxnLHQ1zVZ4yLuI-y_pQAAARU"]
[Wed Jan 21 18:59:40.271978 2026] [:error] [pid 59863:tid 59880] [client 20.205.96.233:51898] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless5.php"] [unique_id "aXCxnLHQ1zVZ4yLuI-y_pgAAAQ0"]
[Wed Jan 21 18:59:40.526936 2026] [:error] [pid 21455:tid 21500] [client 20.205.96.233:34464] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless5.php"] [unique_id "aXCxnIpOKALCSo1URZEYxAAAAEk"]
[Wed Jan 21 18:59:40.775751 2026] [:error] [pid 21456:tid 21541] [client 20.205.96.233:8872] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless5.php"] [unique_id "aXCxnAKyVQ9Ob2YxRAp0hQAAAJc"]
[Wed Jan 21 18:59:41.017071 2026] [:error] [pid 21454:tid 21473] [client 20.205.96.233:8849] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-is.php"] [unique_id "aXCxnTwp5UZmMFzY2bozZgAAAAk"]
[Wed Jan 21 18:59:41.308980 2026] [:error] [pid 21455:tid 21514] [client 20.205.96.233:34660] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-is.php"] [unique_id "aXCxnYpOKALCSo1URZEYxgAAAFc"]
[Wed Jan 21 18:59:41.557684 2026] [:error] [pid 21455:tid 21509] [client 20.205.96.233:37939] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-is.php"] [unique_id "aXCxnYpOKALCSo1URZEYxwAAAFI"]
[Wed Jan 21 18:59:41.810637 2026] [:error] [pid 21454:tid 21476] [client 20.205.96.233:2290] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-is.php"] [unique_id "aXCxnTwp5UZmMFzY2bozZwAAAAw"]
[Wed Jan 21 18:59:42.104849 2026] [:error] [pid 21563:tid 21580] [client 20.205.96.233:2278] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hook.php"] [unique_id "aXCxnhZq__dTorabEox2DAAAAM8"]
[Wed Jan 21 18:59:42.342238 2026] [:error] [pid 21456:tid 21533] [client 20.205.96.233:34484] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hook.php"] [unique_id "aXCxngKyVQ9Ob2YxRAp0iAAAAI8"]
[Wed Jan 21 18:59:42.588349 2026] [:error] [pid 21456:tid 21518] [client 20.205.96.233:34489] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hook.php"] [unique_id "aXCxngKyVQ9Ob2YxRAp0iQAAAIA"]
[Wed Jan 21 18:59:42.831531 2026] [:error] [pid 21455:tid 21506] [client 20.205.96.233:24438] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hook.php"] [unique_id "aXCxnopOKALCSo1URZEYyQAAAE8"]
[Wed Jan 21 18:59:43.106382 2026] [:error] [pid 21455:tid 21508] [client 20.205.96.233:37925] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aXCxn4pOKALCSo1URZEYywAAAFE"]
[Wed Jan 21 18:59:43.355852 2026] [:error] [pid 21454:tid 21479] [client 20.205.96.233:34473] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aXCxnzwp5UZmMFzY2bozbAAAAA8"]
[Wed Jan 21 18:59:43.602145 2026] [:error] [pid 56352:tid 56364] [client 20.205.96.233:51880] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aXCxn9WN6wYNPTU3efUBygAAAUo"]
[Wed Jan 21 18:59:43.836604 2026] [:error] [pid 21456:tid 21537] [client 20.205.96.233:24387] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aXCxnwKyVQ9Ob2YxRAp0jwAAAJM"]
[Wed Jan 21 18:59:44.098287 2026] [:error] [pid 21456:tid 21523] [client 20.205.96.233:34472] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aXCxoAKyVQ9Ob2YxRAp0kQAAAIU"]
[Wed Jan 21 18:59:44.336910 2026] [:error] [pid 21456:tid 21538] [client 20.205.96.233:2249] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aXCxoAKyVQ9Ob2YxRAp0kwAAAJQ"]
[Wed Jan 21 18:59:44.583176 2026] [:error] [pid 4382:tid 4400] [client 20.205.96.233:24421] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aXCxoJHg0falVG3JFbA-zQAAAZA"]
[Wed Jan 21 18:59:44.826359 2026] [:error] [pid 59863:tid 59887] [client 20.205.96.233:2272] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aXCxoLHQ1zVZ4yLuI-y_qgAAARQ"]
[Wed Jan 21 19:00:45.669623 2026] [:error] [pid 21563:tid 21577] [client 20.205.96.233:24437] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aXCx3RZq__dTorabEox2UwAAAMw"]
[Wed Jan 21 19:00:45.969493 2026] [:error] [pid 21456:tid 21521] [client 20.205.96.233:23439] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aXCx3QKyVQ9Ob2YxRAp03QAAAIM"]
[Wed Jan 21 19:00:46.241586 2026] [:error] [pid 21454:tid 21474] [client 20.205.96.233:2406] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aXCx3jwp5UZmMFzY2bozwwAAAAo"]
[Wed Jan 21 19:00:46.533703 2026] [:error] [pid 56352:tid 56362] [client 20.205.96.233:19526] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aXCx3tWN6wYNPTU3efUB-AAAAUg"]
[Wed Jan 21 19:00:46.831907 2026] [:error] [pid 59863:tid 59878] [client 20.205.96.233:33424] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aXCx3rHQ1zVZ4yLuI-zAgAAAAQs"]
[Wed Jan 21 19:00:47.165659 2026] [:error] [pid 21454:tid 21476] [client 20.205.96.233:33412] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aXCx3zwp5UZmMFzY2bozxQAAAAw"]
[Wed Jan 21 19:00:47.521427 2026] [:error] [pid 21455:tid 21501] [client 20.205.96.233:3625] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aXCx34pOKALCSo1URZEZOwAAAEo"]
[Wed Jan 21 19:00:47.857960 2026] [:error] [pid 21456:tid 21519] [client 20.205.96.233:49931] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aXCx3wKyVQ9Ob2YxRAp03gAAAIE"]
[Wed Jan 21 19:00:48.119016 2026] [:error] [pid 56352:tid 56364] [client 20.205.96.233:3609] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/33.php"] [unique_id "aXCx4NWN6wYNPTU3efUB-wAAAUo"]
[Wed Jan 21 19:00:48.541775 2026] [:error] [pid 56352:tid 56359] [client 20.205.96.233:32241] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/33.php"] [unique_id "aXCx4NWN6wYNPTU3efUB_AAAAUU"]
[Wed Jan 21 19:00:49.073014 2026] [:error] [pid 56352:tid 56375] [client 20.205.96.233:23428] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/33.php"] [unique_id "aXCx4dWN6wYNPTU3efUB_gAAAVU"]
[Wed Jan 21 19:00:49.451599 2026] [:error] [pid 21455:tid 21508] [client 20.205.96.233:3624] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/33.php"] [unique_id "aXCx4YpOKALCSo1URZEZPAAAAFE"]
[Wed Jan 21 19:00:49.928530 2026] [:error] [pid 56352:tid 56372] [client 20.205.96.233:27296] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v2.php"] [unique_id "aXCx4dWN6wYNPTU3efUCAgAAAVI"]
[Wed Jan 21 19:00:50.265740 2026] [:error] [pid 21455:tid 21495] [client 20.205.96.233:23431] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v2.php"] [unique_id "aXCx4opOKALCSo1URZEZPQAAAEQ"]
[Wed Jan 21 19:00:50.576990 2026] [:error] [pid 56352:tid 56371] [client 20.205.96.233:49925] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v2.php"] [unique_id "aXCx4tWN6wYNPTU3efUCAwAAAVE"]
[Wed Jan 21 19:00:50.974761 2026] [:error] [pid 59863:tid 59877] [client 20.205.96.233:3592] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v2.php"] [unique_id "aXCx4rHQ1zVZ4yLuI-zAgwAAAQo"]
[Wed Jan 21 19:00:51.354665 2026] [:error] [pid 21456:tid 21532] [client 20.205.96.233:3614] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aXCx4wKyVQ9Ob2YxRAp03wAAAI4"]
[Wed Jan 21 19:00:51.740869 2026] [:error] [pid 21456:tid 21537] [client 20.205.96.233:41865] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aXCx4wKyVQ9Ob2YxRAp04AAAAJM"]
[Wed Jan 21 19:00:52.111421 2026] [:error] [pid 21454:tid 21470] [client 20.205.96.233:33436] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aXCx5Dwp5UZmMFzY2bozyQAAAAY"]
[Wed Jan 21 19:00:52.423536 2026] [:error] [pid 56352:tid 56366] [client 20.205.96.233:3615] [client 20.205.96.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aXCx5NWN6wYNPTU3efUCBQAAAUw"]
[Thu Jan 22 01:14:21.265048 2026] [:error] [pid 4382:tid 4407] [client 85.203.23.201:54521] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aXEJbZHg0falVG3JFbCH2AAAAZc"]
[Thu Jan 22 01:14:21.840599 2026] [:error] [pid 21456:tid 21535] [client 85.203.23.224:50303] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aXEJbQKyVQ9Ob2YxRArOWwAAAJE"]
[Thu Jan 22 01:14:22.854670 2026] [:error] [pid 21454:tid 21482] [client 85.203.23.196:59429] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/image/5PJcpMFsD8B.php"] [unique_id "aXEJbjwp5UZmMFzY2bp75QAAABI"]
[Thu Jan 22 01:14:29.462564 2026] [:error] [pid 21454:tid 21467] [client 85.203.23.186:48717] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/network_xo.php"] [unique_id "aXEJdTwp5UZmMFzY2bp77wAAAAM"]
[Thu Jan 22 01:14:55.462418 2026] [:error] [pid 59863:tid 59880] [client 85.203.23.224:41775] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/makeasmtp.php"] [unique_id "aXEJj7HQ1zVZ4yLuI-wMsQAAAQ0"]
[Thu Jan 22 01:15:12.354926 2026] [:error] [pid 21563:tid 21569] [client 85.203.23.196:34933] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updates.php"] [unique_id "aXEJoBZq__dTorabEozMgwAAAMQ"]
[Thu Jan 22 01:15:17.759562 2026] [:error] [pid 56352:tid 56359] [client 85.203.23.216:26657] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/form.php"] [unique_id "aXEJpdWN6wYNPTU3efVC9wAAAUU"]
[Thu Jan 22 01:15:18.448504 2026] [:error] [pid 56352:tid 56358] [client 85.203.23.222:39529] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "aXEJptWN6wYNPTU3efVC-QAAAUQ"]
[Thu Jan 22 01:15:29.569435 2026] [:error] [pid 21563:tid 21581] [client 85.203.23.166:61473] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/aback.php"] [unique_id "aXEJsRZq__dTorabEozMjQAAANA"]
[Thu Jan 22 01:15:30.952353 2026] [:error] [pid 59863:tid 59884] [client 85.203.23.196:55025] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aXEJsrHQ1zVZ4yLuI-wMywAAARE"]
[Thu Jan 22 01:15:36.540498 2026] [:error] [pid 4382:tid 4393] [client 85.203.23.200:54639] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moderation.php"] [unique_id "aXEJuJHg0falVG3JFbCIDgAAAYk"]
[Thu Jan 22 01:15:52.259428 2026] [:error] [pid 21563:tid 21573] [client 85.203.23.186:36627] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/jindex.php"] [unique_id "aXEJyBZq__dTorabEozMogAAAMg"]
[Thu Jan 22 01:16:08.147491 2026] [:error] [pid 56352:tid 56378] [client 85.203.23.185:53873] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/leaf.php"] [unique_id "aXEJ2NWN6wYNPTU3efVDGQAAAVg"]
[Thu Jan 22 01:16:08.855532 2026] [:error] [pid 4382:tid 4407] [client 85.203.23.195:60285] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/past.php"] [unique_id "aXEJ2JHg0falVG3JFbCIIQAAAZc"]
[Thu Jan 22 01:16:09.746755 2026] [:error] [pid 21454:tid 21466] [client 85.203.23.195:61015] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "aXEJ2Twp5UZmMFzY2bp8SQAAAAI"]
[Thu Jan 22 01:17:10.666489 2026] [:error] [pid 21456:tid 21538] [client 85.203.23.216:38739] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aXEKFgKyVQ9Ob2YxRArOzAAAAJQ"]
[Thu Jan 22 01:17:26.071637 2026] [:error] [pid 59863:tid 59880] [client 85.203.23.216:27161] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aXEKJrHQ1zVZ4yLuI-wNOgAAAQ0"]
[Thu Jan 22 01:17:27.556225 2026] [:error] [pid 4382:tid 4388] [client 85.203.23.201:34399] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/back.php"] [unique_id "aXEKJ5Hg0falVG3JFbCITgAAAYQ"]
[Thu Jan 22 01:17:38.458861 2026] [:error] [pid 21454:tid 21464] [client 85.203.23.166:53117] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aXEKMjwp5UZmMFzY2bp8ygAAAAA"]
[Thu Jan 22 01:18:01.855419 2026] [:error] [pid 21563:tid 21578] [client 85.203.23.216:58657] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aXEKSRZq__dTorabEozM4gAAAM0"]
[Thu Jan 22 01:18:02.762879 2026] [:error] [pid 21456:tid 21528] [client 85.203.23.196:50187] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-l0gin.php"] [unique_id "aXEKSgKyVQ9Ob2YxRArO8gAAAIo"]
[Thu Jan 22 01:18:03.660744 2026] [:error] [pid 59863:tid 59886] [client 85.203.23.195:35303] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aXEKS7HQ1zVZ4yLuI-wNagAAARM"]
[Thu Jan 22 01:18:39.742931 2026] [:error] [pid 21455:tid 21508] [client 85.203.23.191:58463] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aXEKb4pOKALCSo1URZFuGgAAAFE"]
[Thu Jan 22 01:18:55.758029 2026] [:error] [pid 56352:tid 56377] [client 85.203.23.222:49749] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aXEKf9WN6wYNPTU3efVD4gAAAVc"]
[Thu Jan 22 01:19:11.255705 2026] [:error] [pid 21563:tid 21572] [client 85.203.23.195:51277] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/nf_tracking.php"] [unique_id "aXEKjxZq__dTorabEozNVgAAAMc"]
[Thu Jan 22 01:20:02.156687 2026] [:error] [pid 59863:tid 59868] [client 85.203.23.200:31959] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aXEKwrHQ1zVZ4yLuI-wODQAAAQE"]
[Thu Jan 22 01:20:18.662636 2026] [:error] [pid 21563:tid 21576] [client 85.203.23.183:22129] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aXEK0hZq__dTorabEozNiwAAAMs"]
[Thu Jan 22 01:20:39.455764 2026] [:error] [pid 4382:tid 4400] [client 85.203.23.201:52859] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aXEK55Hg0falVG3JFbCJfQAAAZA"]
[Thu Jan 22 01:20:45.146383 2026] [:error] [pid 4382:tid 4386] [client 85.203.23.196:56801] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aXEK7ZHg0falVG3JFbCJgQAAAYI"]
[Thu Jan 22 01:20:47.237061 2026] [:error] [pid 56352:tid 56373] [client 85.203.23.166:63507] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aXEK79WN6wYNPTU3efVEQwAAAVM"]
[Thu Jan 22 01:20:58.341738 2026] [:error] [pid 21455:tid 21506] [client 85.203.23.200:55109] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aXEK-opOKALCSo1URZFu0QAAAE8"]
[Thu Jan 22 01:20:59.052963 2026] [:error] [pid 4382:tid 4393] [client 85.203.23.201:62921] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function/function.php"] [unique_id "aXEK-5Hg0falVG3JFbCJigAAAYk"]
[Thu Jan 22 01:21:04.760647 2026] [:error] [pid 21454:tid 21478] [client 85.203.23.201:48551] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aXELADwp5UZmMFzY2bp-MQAAAA4"]
[Thu Jan 22 01:21:35.745458 2026] [:error] [pid 21563:tid 21572] [client 85.203.23.183:26193] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aXELHxZq__dTorabEozNwAAAAMc"]
[Thu Jan 22 01:21:36.159152 2026] [:error] [pid 21456:tid 21524] [client 85.203.23.216:53691] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aXELIAKyVQ9Ob2YxRArP_wAAAIY"]
[Thu Jan 22 01:21:41.752316 2026] [:error] [pid 4382:tid 4384] [client 85.203.23.183:57049] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aXELJZHg0falVG3JFbCJqwAAAYA"]
[Thu Jan 22 01:21:47.447833 2026] [:error] [pid 21455:tid 21500] [client 85.203.23.200:23415] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aXELK4pOKALCSo1URZFu6AAAAEk"]
[Thu Jan 22 01:22:28.346241 2026] [:error] [pid 4382:tid 4386] [client 85.203.23.195:50849] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aXELVJHg0falVG3JFbCJwgAAAYI"]
[Thu Jan 22 01:22:29.157055 2026] [:error] [pid 21454:tid 21470] [client 85.203.23.224:44663] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/uploads/"] [unique_id "aXELVTwp5UZmMFzY2bp-cQAAAAY"]
[Thu Jan 22 01:22:30.569011 2026] [:error] [pid 59863:tid 59887] [client 85.203.23.191:48161] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentyfifteen/shell3.php"] [unique_id "aXELVrHQ1zVZ4yLuI-wOVQAAARQ"]
[Thu Jan 22 01:22:36.662748 2026] [:error] [pid 4382:tid 4397] [client 85.203.23.201:44517] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aXELXJHg0falVG3JFbCJygAAAY0"]
[Thu Jan 22 01:23:37.566173 2026] [:error] [pid 4382:tid 4402] [client 85.203.23.196:34013] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aXELmZHg0falVG3JFbCKCQAAAZI"]
[Thu Jan 22 01:24:18.557696 2026] [:error] [pid 4382:tid 4397] [client 85.203.23.183:64287] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aXELwpHg0falVG3JFbCKNAAAAY0"]
[Thu Jan 22 01:24:24.358131 2026] [:error] [pid 59863:tid 59883] [client 85.203.23.195:25179] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aXELyLHQ1zVZ4yLuI-wOqwAAARA"]
[Thu Jan 22 01:25:10.256230 2026] [:error] [pid 21455:tid 21505] [client 85.203.23.191:20749] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aXEL9opOKALCSo1URZFvegAAAE4"]
[Thu Jan 22 01:25:12.054274 2026] [:error] [pid 4382:tid 4393] [client 85.203.23.196:39681] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aXEL-JHg0falVG3JFbCKXwAAAYk"]
[Thu Jan 22 01:25:17.953638 2026] [:error] [pid 21454:tid 21479] [client 85.203.23.201:30611] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aXEL_Twp5UZmMFzY2bp-_wAAAA8"]
[Thu Jan 22 01:25:23.853775 2026] [:error] [pid 56352:tid 56365] [client 85.203.23.224:27481] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aXEMA9WN6wYNPTU3efVFCQAAAUs"]
[Thu Jan 22 01:26:00.151141 2026] [:error] [pid 21563:tid 21567] [client 85.203.23.201:23711] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/fm.php/sts.php"] [unique_id "aXEMKBZq__dTorabEozOgwAAAMI"]
[Thu Jan 22 01:27:51.357871 2026] [:error] [pid 21455:tid 21505] [client 85.203.23.195:29261] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aXEMl4pOKALCSo1URZFv1QAAAE4"]
[Thu Jan 22 01:28:33.044325 2026] [:error] [pid 21456:tid 21541] [client 85.203.23.195:63917] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aXEMwQKyVQ9Ob2YxRArRJQAAAJc"]
[Thu Jan 22 01:28:39.060866 2026] [:error] [pid 4382:tid 4398] [client 85.203.23.185:56387] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/m.php"] [unique_id "aXEMx5Hg0falVG3JFbCLUwAAAY4"]
[Thu Jan 22 01:30:00.353628 2026] [:error] [pid 56352:tid 56356] [client 85.203.23.222:54139] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aXENGNWN6wYNPTU3efVF9gAAAUI"]
[Thu Jan 22 01:30:06.055161 2026] [:error] [pid 21454:tid 21465] [client 85.203.23.176:37447] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aXENHjwp5UZmMFzY2bqAeAAAAAE"]
[Thu Jan 22 01:30:57.957164 2026] [:error] [pid 59863:tid 59879] [client 85.203.23.222:51911] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aXENUbHQ1zVZ4yLuI-wQPgAAAQw"]
[Thu Jan 22 01:31:23.757808 2026] [:error] [pid 21563:tid 21577] [client 85.203.23.201:45253] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aXENaxZq__dTorabEozPiwAAAMw"]
[Thu Jan 22 01:31:24.660139 2026] [:error] [pid 21454:tid 21473] [client 85.203.23.196:65231] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aXENbDwp5UZmMFzY2bqBYQAAAAk"]
[Thu Jan 22 01:31:26.251175 2026] [:error] [pid 21563:tid 21585] [client 85.203.23.196:30291] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aXENbhZq__dTorabEozPkAAAANQ"]
[Thu Jan 22 01:32:42.166056 2026] [:error] [pid 21563:tid 21565] [client 85.203.23.222:51677] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aXENuhZq__dTorabEozQGQAAAMA"]
[Thu Jan 22 01:32:48.461846 2026] [:error] [pid 21455:tid 21512] [client 85.203.23.196:35931] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aXENwIpOKALCSo1URZFw7AAAAFU"]
[Thu Jan 22 01:32:50.161250 2026] [:error] [pid 59863:tid 59875] [client 85.203.23.196:59899] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aXENwrHQ1zVZ4yLuI-wQyAAAAQg"]
[Thu Jan 22 01:33:06.149140 2026] [:error] [pid 21455:tid 21494] [client 85.203.23.222:64407] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aXEN0opOKALCSo1URZFw_gAAAEM"]
[Thu Jan 22 01:33:48.753489 2026] [:error] [pid 21455:tid 21504] [client 85.203.23.196:55619] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "aXEN_IpOKALCSo1URZFxRwAAAE0"]
[Thu Jan 22 01:33:51.366699 2026] [:error] [pid 4382:tid 4402] [client 85.203.23.166:28419] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aXEN_5Hg0falVG3JFbCNQAAAAZI"]
[Thu Jan 22 01:34:00.052289 2026] [:error] [pid 56352:tid 56372] [client 85.203.23.222:49721] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aXEOCNWN6wYNPTU3efVHXwAAAVI"]
[Thu Jan 22 01:34:28.440840 2026] [:error] [pid 21455:tid 21503] [client 85.203.23.216:61715] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aXEOJIpOKALCSo1URZFxfwAAAEw"]
[Thu Jan 22 01:34:35.755916 2026] [:error] [pid 4382:tid 4406] [client 85.203.23.191:54507] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aXEOK5Hg0falVG3JFbCNegAAAZY"]
[Thu Jan 22 01:34:37.859414 2026] [:error] [pid 21454:tid 21488] [client 85.203.23.185:60327] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aXEOLTwp5UZmMFzY2bqC0AAAABg"]
[Thu Jan 22 01:35:20.755810 2026] [:error] [pid 21563:tid 21587] [client 85.203.23.200:64915] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aXEOWBZq__dTorabEozQqQAAANY"]
[Thu Jan 22 01:35:28.552150 2026] [:error] [pid 21454:tid 21487] [client 85.203.23.185:20905] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aXEOYDwp5UZmMFzY2bqDAQAAABc"]
[Thu Jan 22 01:35:46.361468 2026] [:error] [pid 21563:tid 21576] [client 85.203.23.185:40497] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shelp.php"] [unique_id "aXEOchZq__dTorabEozQxAAAAMs"]
[Thu Jan 22 01:35:48.745128 2026] [:error] [pid 21456:tid 21524] [client 85.203.23.166:51461] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXEOdAKyVQ9Ob2YxRArTBAAAAIY"]
[Thu Jan 22 01:35:50.353269 2026] [:error] [pid 21455:tid 21512] [client 85.203.23.185:49537] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aXEOdopOKALCSo1URZFxrQAAAFU"]
[Thu Jan 22 01:36:37.672478 2026] [:error] [pid 21454:tid 21477] [client 85.203.23.191:57147] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aXEOpTwp5UZmMFzY2bqDcQAAAA0"]
[Thu Jan 22 01:36:39.259307 2026] [:error] [pid 21455:tid 21508] [client 85.203.23.195:31639] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/directionality/"] [unique_id "aXEOp4pOKALCSo1URZFx1gAAAFE"]
[Thu Jan 22 01:37:16.443745 2026] [:error] [pid 21455:tid 21512] [client 85.203.23.191:29719] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aXEOzIpOKALCSo1URZFx7wAAAFU"]
[Thu Jan 22 01:37:18.259165 2026] [:error] [pid 21563:tid 21584] [client 85.203.23.183:32943] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aXEOzhZq__dTorabEozRLwAAANM"]
[Thu Jan 22 01:38:19.063132 2026] [:error] [pid 59863:tid 59879] [client 85.203.23.186:27241] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aXEPC7HQ1zVZ4yLuI-wSAgAAAQw"]
[Thu Jan 22 01:38:25.253784 2026] [:error] [pid 59863:tid 59885] [client 85.203.23.183:65357] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aXEPEbHQ1zVZ4yLuI-wSBgAAARI"]
[Thu Jan 22 01:38:51.437457 2026] [:error] [pid 4382:tid 4396] [client 85.203.23.224:36315] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aXEPK5Hg0falVG3JFbCOXgAAAYw"]
[Thu Jan 22 01:39:02.466347 2026] [:error] [pid 56352:tid 56368] [client 85.203.23.222:21825] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/update/function.php"] [unique_id "aXEPNtWN6wYNPTU3efVIgAAAAU4"]
[Thu Jan 22 01:39:07.947153 2026] [:error] [pid 4382:tid 4391] [client 85.203.23.222:47503] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/spacer/about.php"] [unique_id "aXEPO5Hg0falVG3JFbCOZgAAAYc"]
[Thu Jan 22 01:39:09.367127 2026] [:error] [pid 21454:tid 21478] [client 85.203.23.224:43629] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aXEPPTwp5UZmMFzY2bqERwAAAA4"]
[Thu Jan 22 01:39:10.155314 2026] [:error] [pid 56352:tid 56359] [client 85.203.23.191:60729] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXEPPtWN6wYNPTU3efVIhAAAAUU"]
[Thu Jan 22 01:39:10.951326 2026] [:error] [pid 56352:tid 56357] [client 85.203.23.222:41891] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-pagination/"] [unique_id "aXEPPtWN6wYNPTU3efVIiAAAAUM"]
[Thu Jan 22 01:39:22.343836 2026] [:error] [pid 56352:tid 56366] [client 85.203.23.186:61869] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-trackback.php"] [unique_id "aXEPStWN6wYNPTU3efVIlQAAAUw"]
[Thu Jan 22 01:39:22.950019 2026] [:error] [pid 59863:tid 59878] [client 85.203.23.185:40731] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/elish.php"] [unique_id "aXEPSrHQ1zVZ4yLuI-wSGAAAAQs"]
[Thu Jan 22 01:39:33.744567 2026] [:error] [pid 21454:tid 21471] [client 85.203.23.166:62917] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aXEPVTwp5UZmMFzY2bqEVwAAAAc"]
[Thu Jan 22 01:39:46.351750 2026] [:error] [pid 21563:tid 21565] [client 85.203.23.195:41619] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/popularfx/template-parts/"] [unique_id "aXEPYhZq__dTorabEozRiwAAAMA"]
[Thu Jan 22 01:39:52.249295 2026] [:error] [pid 59863:tid 59877] [client 85.203.23.185:23833] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aXEPaLHQ1zVZ4yLuI-wSNgAAAQo"]
[Thu Jan 22 01:39:52.959912 2026] [:error] [pid 21456:tid 21526] [client 85.203.23.216:61249] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aXEPaAKyVQ9Ob2YxRArTiQAAAIg"]
[Thu Jan 22 01:40:14.057119 2026] [:error] [pid 21454:tid 21479] [client 85.203.23.200:40425] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aXEPfjwp5UZmMFzY2bqEfQAAAA8"]
[Thu Jan 22 01:40:14.668082 2026] [:error] [pid 21454:tid 21468] [client 85.203.23.222:41265] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aXEPfjwp5UZmMFzY2bqEfwAAAAQ"]
[Thu Jan 22 01:40:45.668747 2026] [:error] [pid 4382:tid 4395] [client 85.203.23.166:60829] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aXEPnZHg0falVG3JFbCOvwAAAYs"]
[Thu Jan 22 01:40:46.063057 2026] [:error] [pid 21455:tid 21498] [client 85.203.23.176:57881] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils/"] [unique_id "aXEPnopOKALCSo1URZFyhgAAAEc"]
[Thu Jan 22 01:40:52.162219 2026] [:error] [pid 21563:tid 21584] [client 85.203.23.183:61151] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/thickbox/"] [unique_id "aXEPpBZq__dTorabEozRtQAAANM"]
[Thu Jan 22 01:40:52.762075 2026] [:error] [pid 4382:tid 4385] [client 85.203.23.222:55499] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aXEPpJHg0falVG3JFbCOzwAAAYE"]
[Thu Jan 22 01:41:24.049625 2026] [:error] [pid 21455:tid 21506] [client 85.203.23.222:34459] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aXEPxIpOKALCSo1URZFyqAAAAE8"]
[Thu Jan 22 01:41:34.855504 2026] [:error] [pid 59863:tid 59878] [client 85.203.23.224:27359] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aXEPzrHQ1zVZ4yLuI-wSwwAAAQs"]
[Thu Jan 22 01:41:55.758928 2026] [:error] [pid 21456:tid 21532] [client 85.203.23.201:23415] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXEP4wKyVQ9Ob2YxRArUEAAAAI4"]
[Thu Jan 22 01:42:36.257615 2026] [:error] [pid 4382:tid 4401] [client 85.203.23.183:28151] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aXEQDJHg0falVG3JFbCPYQAAAZE"]
[Thu Jan 22 01:43:32.248108 2026] [:error] [pid 56352:tid 56356] [client 85.203.23.195:28185] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/22x.php"] [unique_id "aXEQRNWN6wYNPTU3efVJeQAAAUI"]
[Thu Jan 22 01:43:33.553090 2026] [:error] [pid 21456:tid 21542] [client 85.203.23.191:29585] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wolf.php"] [unique_id "aXEQRQKyVQ9Ob2YxRArUagAAAJg"]
[Thu Jan 22 01:43:34.268732 2026] [:error] [pid 4382:tid 4399] [client 85.203.23.201:31191] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/files/admin.php"] [unique_id "aXEQRpHg0falVG3JFbCPqQAAAY8"]
[Thu Jan 22 01:44:04.964349 2026] [:error] [pid 59863:tid 59871] [client 85.203.23.196:20557] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aXEQZLHQ1zVZ4yLuI-wTEQAAAQQ"]
[Thu Jan 22 01:44:05.669049 2026] [:error] [pid 21456:tid 21520] [client 85.203.23.166:64411] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bbn.php"] [unique_id "aXEQZQKyVQ9Ob2YxRArUfgAAAII"]
[Thu Jan 22 01:44:11.559597 2026] [:error] [pid 21454:tid 21470] [client 85.203.23.185:57475] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/easy-bootstrap-shortcode-pro/1.php"] [unique_id "aXEQazwp5UZmMFzY2bqFcgAAAAY"]
[Thu Jan 22 01:44:37.440238 2026] [:error] [pid 21456:tid 21520] [client 85.203.23.222:33933] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aXEQhQKyVQ9Ob2YxRArUmQAAAII"]
[Thu Jan 22 01:44:53.058340 2026] [:error] [pid 21454:tid 21474] [client 85.203.23.200:58101] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/et-pagebuilder/about.php"] [unique_id "aXEQlTwp5UZmMFzY2bqFlgAAAAo"]
[Thu Jan 22 01:44:58.754248 2026] [:error] [pid 21455:tid 21509] [client 85.203.23.195:40625] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/portfolio/seton/about.php"] [unique_id "aXEQmopOKALCSo1URZFzUwAAAFI"]
[Thu Jan 22 01:45:30.955232 2026] [:error] [pid 21563:tid 21582] [client 85.203.23.166:29365] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sql.php"] [unique_id "aXEQuhZq__dTorabEozS0gAAANE"]
[Thu Jan 22 01:45:41.948114 2026] [:error] [pid 21454:tid 21469] [client 85.203.23.191:26379] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aXEQxTwp5UZmMFzY2bqF3wAAAAU"]
[Thu Jan 22 01:45:47.439952 2026] [:error] [pid 21454:tid 21479] [client 85.203.23.166:35555] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/sss.php"] [unique_id "aXEQyzwp5UZmMFzY2bqF6gAAAA8"]
[Thu Jan 22 01:45:48.164412 2026] [:error] [pid 59863:tid 59884] [client 85.203.23.183:36543] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aXEQzLHQ1zVZ4yLuI-wTRgAAARE"]
[Thu Jan 22 01:45:53.967864 2026] [:error] [pid 21454:tid 21469] [client 85.203.23.196:31481] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aXEQ0Twp5UZmMFzY2bqF8wAAAAU"]
[Thu Jan 22 01:45:59.858089 2026] [:error] [pid 4382:tid 4398] [client 85.203.23.195:39515] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/database.php"] [unique_id "aXEQ15Hg0falVG3JFbCQGQAAAY4"]
[Thu Jan 22 01:46:15.864827 2026] [:error] [pid 59863:tid 59883] [client 85.203.23.222:28175] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aXEQ57HQ1zVZ4yLuI-wTVQAAARA"]
[Thu Jan 22 01:46:26.258487 2026] [:error] [pid 4382:tid 4384] [client 85.203.23.224:62549] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aXEQ8pHg0falVG3JFbCQKAAAAYA"]
[Thu Jan 22 01:46:32.063468 2026] [:error] [pid 21456:tid 21528] [client 85.203.23.195:37863] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Decode/ahax.php"] [unique_id "aXEQ-AKyVQ9Ob2YxRArVBAAAAIo"]
[Thu Jan 22 01:47:17.760991 2026] [:error] [pid 21456:tid 21519] [client 85.203.23.201:57153] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aXERJQKyVQ9Ob2YxRArVHQAAAIE"]
[Thu Jan 22 01:47:46.348691 2026] [:error] [pid 56352:tid 56360] [client 85.203.23.191:56567] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aXERQtWN6wYNPTU3efVKPQAAAUY"]
[Thu Jan 22 01:47:49.154010 2026] [:error] [pid 21455:tid 21507] [client 85.203.23.224:55027] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aXERRYpOKALCSo1URZFzvAAAAFA"]
[Thu Jan 22 01:48:04.646436 2026] [:error] [pid 21454:tid 21475] [client 85.203.23.185:31545] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpfilemangersobject/"] [unique_id "aXERVDwp5UZmMFzY2bqGeAAAAAs"]
[Thu Jan 22 01:48:10.845040 2026] [:error] [pid 21563:tid 21575] [client 85.203.23.195:49767] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aXERWhZq__dTorabEozTLQAAAMo"]
[Thu Jan 22 01:48:38.550397 2026] [:error] [pid 21454:tid 21485] [client 85.203.23.186:32647] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mainhosting/past.php"] [unique_id "aXERdjwp5UZmMFzY2bqGoQAAABU"]
[Thu Jan 22 02:44:37.562797 2026] [proxy_fcgi:error] [pid 21454:tid 21464] [client 103.4.122.14:37856] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Jan 22 22:32:38.910916 2026] [:error] [pid 36083:tid 36091] [client 35.247.69.80:41228] [client 35.247.69.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aXI1BpCng2nQoR5iqwq9JgAAAUU"]
[Thu Jan 22 22:35:04.385361 2026] [:error] [pid 34321:tid 34337] [client 95.216.63.67:53878] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aXI1mBLMkukwqSCtKrC3lgAAAc0"], referer: www.google.com
[Thu Jan 22 23:47:19.022232 2026] [:error] [pid 20418:tid 20445] [client 95.216.63.67:53902] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aXJGhxahoKEa6eS4cSqeQwAAAZc"], referer: www.google.com
[Fri Jan 23 21:37:40.017734 2026] [:error] [pid 11608:tid 11695] [client 196.177.114.215:56330] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aXN5pL4alK6RZLlMctrWoQAAAJc"]
[Fri Jan 23 21:37:40.050026 2026] [:error] [pid 62368:tid 62393] [client 196.177.114.215:56333] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aXN5pCeMzKRnyYLMANOfpwAAARY"]
[Sat Jan 24 09:10:33.063213 2026] [:error] [pid 41009:tid 41029] [client 170.205.31.138:53171] [client 170.205.31.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-confiq.php"] [unique_id "aXQcCWrewfoFUDD3TM3CEQAAANI"]
[Sat Jan 24 22:29:43.173563 2026] [:error] [pid 14976:tid 14999] [client 94.247.172.129:26071] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "aXTXV2vdigydYOB2KS-BRQAAAZU"]
[Sun Jan 25 00:57:05.943220 2026] [:error] [pid 22900:tid 22914] [client 64.89.163.25:58875] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXT54Vr6h1PpdlYV7gUxegAAAQs"]
[Sun Jan 25 00:57:06.580762 2026] [:error] [pid 60761:tid 60788] [client 64.89.163.25:59101] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXT54lZQvxLvEbXXh9KgfAAAAVg"]
[Sun Jan 25 00:57:07.216136 2026] [:error] [pid 22900:tid 22909] [client 64.89.163.25:59339] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXT541r6h1PpdlYV7gUx0gAAAQY"]
[Sun Jan 25 00:57:07.854203 2026] [:error] [pid 60761:tid 60765] [client 64.89.163.25:59567] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXT541ZQvxLvEbXXh9KgtwAAAUE"]
[Sun Jan 25 00:57:08.491968 2026] [:error] [pid 60761:tid 60774] [client 64.89.163.25:59782] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXT55FZQvxLvEbXXh9Kg0QAAAUo"]
[Sun Jan 25 04:47:07.681953 2026] [proxy_fcgi:error] [pid 33687:tid 33692] [client 103.4.122.14:51666] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Sun Jan 25 04:48:37.356564 2026] [proxy_fcgi:error] [pid 33687:tid 33702] [client 103.4.122.14:52094] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/league/oauth2-client/src/Tool/ArrayAccessorTrait.php', 'opensource.org', '', '\xc3\xd1\x1d\xda'),('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/league/oauth2-client/src/Tool/ArrayAccessorTrait.php', 'thephpleague.com', '', '\xa4\x8f;\xa4'),('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/league/oauth2-client/src/Tool/ArrayAccessorTrait.php', 'packagist.org', '', ',wqM') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/ithemes-security-pro/core/packages/style-guide/src/assets/light_gray_shield.svg', 'www.w3.org', '', '\\Z.6\xcc') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/themes/Divi/core/admin/js/portability.js', 'www.php.net', '', '\xd24|\xad') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/themes/Divi/core/components/api/email/Aweber.php', 'auth.aweber.com', '', 'l\x92\x1f$'),('wp-content/themes/Divi/core/components/api/email/Aweber.php', 'api.aweber.com', '', '\x19X\xe1x') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWrite'
[Sun Jan 25 05:01:43.470979 2026] [proxy_fcgi:error] [pid 53419:tid 53452] [client 103.4.122.14:55926] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Jan 25 06:43:23.982191 2026] [autoindex:error] [pid 33687:tid 33693] [client 164.68.99.221:59929] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 25 12:45:33.701424 2026] [autoindex:error] [pid 9070:tid 9096] [client 159.203.171.52:50474] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 25 16:52:51.770489 2026] [:error] [pid 9070:tid 9091] [client 138.199.35.5:60248] [client 138.199.35.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.5, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXZ47LNl7Vxe1mYetE4mAAAAVM"]
[Sun Jan 25 16:53:00.391301 2026] [:error] [pid 9070:tid 9080] [client 138.199.35.5:60248] [client 138.199.35.5] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXXZ7LLNl7Vxe1mYetE4ogAAAUg"]
[Sun Jan 25 16:53:03.126883 2026] [:error] [pid 9070:tid 9079] [client 138.199.35.5:60248] [client 138.199.35.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.5, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXZ77LNl7Vxe1mYetE4pAAAAUc"]
[Sun Jan 25 16:53:06.926918 2026] [:error] [pid 33687:tid 33706] [client 138.199.35.5:36364] [client 138.199.35.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.5, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXZ8oc6VUyZP5DZSy5_RQAAARA"]
[Sun Jan 25 16:53:09.813437 2026] [:error] [pid 53421:tid 53503] [client 138.199.35.5:36370] [client 138.199.35.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.5, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXZ9ZKP_6Rogdk6hdFlkgAAAJQ"]
[Sun Jan 25 16:53:12.807873 2026] [:error] [pid 9070:tid 9074] [client 138.199.35.5:36384] [client 138.199.35.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.5, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXZ-LLNl7Vxe1mYetE4tQAAAUI"]
[Sun Jan 25 16:53:15.749485 2026] [:error] [pid 9070:tid 9093] [client 138.199.35.5:53794] [client 138.199.35.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.5, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXZ-7LNl7Vxe1mYetE4ugAAAVU"]
[Sun Jan 25 16:53:15.749644 2026] [:error] [pid 9070:tid 9093] [client 138.199.35.5:53794] [client 138.199.35.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 138.199.35.5, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXXZ-7LNl7Vxe1mYetE4ugAAAVU"]
[Mon Jan 26 05:48:56.658081 2026] [:error] [pid 61286:tid 61298] [client 45.138.16.159:55345] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aXaPyMnVt687wYGMPn9U1QAAAUg"]
[Mon Jan 26 05:48:57.261429 2026] [:error] [pid 24557:tid 24596] [client 45.138.16.159:55436] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/style.php"] [unique_id "aXaPyerlG7Vm9pxV14xTzQAAAEI"]
[Mon Jan 26 05:48:57.867130 2026] [:error] [pid 61286:tid 61291] [client 45.138.16.159:55534] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aXaPycnVt687wYGMPn9U2QAAAUE"]
[Mon Jan 26 05:48:58.459702 2026] [:error] [pid 24556:tid 24587] [client 45.138.16.159:55626] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/style.php"] [unique_id "aXaPykyDW1_EbgDa3XJW3QAAABY"]
[Mon Jan 26 05:48:59.053857 2026] [:error] [pid 61286:tid 61310] [client 45.138.16.159:55752] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style.php"] [unique_id "aXaPy8nVt687wYGMPn9U3QAAAVQ"]
[Mon Jan 26 05:48:59.647727 2026] [:error] [pid 24558:tid 24621] [client 45.138.16.159:55850] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aXaPywo1PXqeJqIMTQb7HQAAAIA"]
[Mon Jan 26 05:49:00.247227 2026] [:error] [pid 24557:tid 24609] [client 45.138.16.159:55936] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aXaPzOrlG7Vm9pxV14xT0AAAAE8"]
[Mon Jan 26 05:49:00.851473 2026] [:error] [pid 61287:tid 61336] [client 45.138.16.159:56035] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "aXaPzNimZOwAM64CfR52EAAAAZM"]
[Mon Jan 26 05:49:01.486630 2026] [:error] [pid 61287:tid 61338] [client 45.138.16.159:56128] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aXaPzdimZOwAM64CfR52FAAAAZU"]
[Mon Jan 26 05:49:02.089968 2026] [:error] [pid 61286:tid 61291] [client 45.138.16.159:56237] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aXaPzsnVt687wYGMPn9U4gAAAUE"]
[Mon Jan 26 05:49:02.683656 2026] [:error] [pid 24556:tid 24586] [client 45.138.16.159:56332] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aXaPzkyDW1_EbgDa3XJW3wAAABU"]
[Mon Jan 26 05:49:03.278001 2026] [:error] [pid 24556:tid 24576] [client 45.138.16.159:56422] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/blurbs.php"] [unique_id "aXaPz0yDW1_EbgDa3XJW4AAAAAs"]
[Mon Jan 26 05:49:03.877826 2026] [:error] [pid 61286:tid 61299] [client 45.138.16.159:56511] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aXaPz8nVt687wYGMPn9U5wAAAUk"]
[Mon Jan 26 05:49:04.480773 2026] [:error] [pid 61286:tid 61294] [client 45.138.16.159:56617] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aXaP0MnVt687wYGMPn9U6AAAAUQ"]
[Mon Jan 26 05:49:05.099157 2026] [:error] [pid 61287:tid 61337] [client 45.138.16.159:56724] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/aku.php"] [unique_id "aXaP0dimZOwAM64CfR52FwAAAZQ"]
[Mon Jan 26 05:49:05.692467 2026] [:error] [pid 61286:tid 61291] [client 45.138.16.159:56826] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "aXaP0cnVt687wYGMPn9U7QAAAUE"]
[Mon Jan 26 05:49:06.287201 2026] [:error] [pid 61286:tid 61309] [client 45.138.16.159:56913] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "aXaP0snVt687wYGMPn9U7wAAAVM"]
[Mon Jan 26 05:49:06.887288 2026] [:error] [pid 24556:tid 24574] [client 45.138.16.159:57002] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aXaP0kyDW1_EbgDa3XJW4wAAAAk"]
[Mon Jan 26 05:49:07.510956 2026] [:error] [pid 61286:tid 61303] [client 45.138.16.159:57083] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aXaP08nVt687wYGMPn9U8gAAAU0"]
[Mon Jan 26 05:49:08.117702 2026] [:error] [pid 24666:tid 24691] [client 45.138.16.159:57183] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aXaP1JmH-L0_jbK3i9ESPwAAANc"]
[Mon Jan 26 05:49:08.710959 2026] [:error] [pid 24558:tid 24625] [client 45.138.16.159:57266] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aXaP1Ao1PXqeJqIMTQb7IgAAAIQ"]
[Mon Jan 26 05:49:09.323307 2026] [:error] [pid 24556:tid 24584] [client 45.138.16.159:57328] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aXaP1UyDW1_EbgDa3XJW5wAAABM"]
[Mon Jan 26 05:49:09.926126 2026] [:error] [pid 24666:tid 24679] [client 45.138.16.159:57412] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aXaP1ZmH-L0_jbK3i9ESQwAAAMs"]
[Mon Jan 26 05:49:10.523121 2026] [:error] [pid 61286:tid 61308] [client 45.138.16.159:57492] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shlo.php"] [unique_id "aXaP1snVt687wYGMPn9U9wAAAVI"]
[Mon Jan 26 05:49:11.138689 2026] [:error] [pid 61287:tid 61324] [client 45.138.16.159:57562] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/133.php"] [unique_id "aXaP19imZOwAM64CfR52HgAAAYc"]
[Mon Jan 26 05:49:11.738464 2026] [:error] [pid 24556:tid 24573] [client 45.138.16.159:57629] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aXaP10yDW1_EbgDa3XJW6gAAAAg"]
[Mon Jan 26 05:49:12.345478 2026] [:error] [pid 61286:tid 61292] [client 45.138.16.159:57711] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wpssl.php"] [unique_id "aXaP2MnVt687wYGMPn9U_QAAAUI"]
[Mon Jan 26 05:49:12.968880 2026] [:error] [pid 24666:tid 24669] [client 45.138.16.159:57844] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/witmm.php"] [unique_id "aXaP2JmH-L0_jbK3i9ESSgAAAME"]
[Mon Jan 26 05:49:13.633110 2026] [:error] [pid 24666:tid 24673] [client 45.138.16.159:57952] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aXaP2ZmH-L0_jbK3i9ESTAAAAMU"]
[Mon Jan 26 05:49:14.237282 2026] [:error] [pid 61287:tid 61319] [client 45.138.16.159:58045] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aXaP2timZOwAM64CfR52JQAAAYI"]
[Mon Jan 26 05:49:14.851418 2026] [:error] [pid 61252:tid 61274] [client 45.138.16.159:58141] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aXaP2rrGlf8FG2etxUC6mQAAARQ"]
[Mon Jan 26 05:49:15.450386 2026] [:error] [pid 24558:tid 24622] [client 45.138.16.159:58235] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aXaP2wo1PXqeJqIMTQb7JwAAAIE"]
[Mon Jan 26 05:49:16.042909 2026] [:error] [pid 61252:tid 61271] [client 45.138.16.159:58327] [client 45.138.16.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-editor.php"] [unique_id "aXaP3LrGlf8FG2etxUC6mwAAARE"]
[Mon Jan 26 07:08:44.012130 2026] [:error] [pid 61287:tid 61321] [client 37.77.150.124:49491] [client 37.77.150.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.150.124, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXaie9imZOwAM64CfR6QXQAAAYQ"], referer: https://makifim.com.au/wp-login.php
[Mon Jan 26 07:09:05.993107 2026] [:error] [pid 61252:tid 61262] [client 37.77.150.124:50940] [client 37.77.150.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.77.150.124, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXaikbrGlf8FG2etxUDO5gAAAQg"], referer: https://makifim.com.au/xmlrpc.php
[Mon Jan 26 07:09:12.909786 2026] [:error] [pid 61286:tid 61303] [client 37.77.150.124:51437] [client 37.77.150.124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXaimMnVt687wYGMPn9tFAAAAU0"], referer: https://makifim.com.au/
[Mon Jan 26 11:41:05.230099 2026] [:error] [pid 61287:tid 61330] [client 193.37.32.68:26279] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aXbiUdimZOwAM64CfR728AAAAY0"]
[Mon Jan 26 11:41:05.974362 2026] [:error] [pid 24666:tid 24671] [client 193.37.32.63:59175] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aXbiUZmH-L0_jbK3i9FnpwAAAMM"]
[Mon Jan 26 11:41:06.512815 2026] [:error] [pid 24558:tid 24625] [client 193.37.32.103:39569] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aXbiUgo1PXqeJqIMTQZMqAAAAIQ"]
[Mon Jan 26 11:41:07.068245 2026] [:error] [pid 61287:tid 61329] [client 193.37.32.76:49081] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aXbiU9imZOwAM64CfR729wAAAYw"]
[Mon Jan 26 11:41:07.430872 2026] [:error] [pid 24558:tid 24621] [client 193.37.32.79:35939] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/image/5PJcpMFsD8B.php"] [unique_id "aXbiUwo1PXqeJqIMTQZMqgAAAIA"]
[Mon Jan 26 11:41:07.788061 2026] [:error] [pid 24557:tid 24595] [client 193.37.32.70:45395] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/export.php"] [unique_id "aXbiU-rlG7Vm9pxV14yg2wAAAEE"]
[Mon Jan 26 11:41:08.148266 2026] [:error] [pid 24666:tid 24669] [client 193.37.32.81:20455] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/network_xo.php"] [unique_id "aXbiVJmH-L0_jbK3i9FnqgAAAME"]
[Mon Jan 26 11:41:08.566106 2026] [:error] [pid 61287:tid 61335] [client 193.37.32.90:28063] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aXbiVNimZOwAM64CfR72-gAAAZI"]
[Mon Jan 26 11:41:08.923624 2026] [:error] [pid 61252:tid 61277] [client 193.37.32.64:55133] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aXbiVLrGlf8FG2etxUAdUgAAARc"]
[Mon Jan 26 11:41:09.280541 2026] [:error] [pid 24666:tid 24672] [client 193.37.32.87:27129] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aXbiVZmH-L0_jbK3i9FnrAAAAMQ"]
[Mon Jan 26 11:41:09.638812 2026] [:error] [pid 24666:tid 24684] [client 193.37.32.81:20387] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aXbiVZmH-L0_jbK3i9FnrgAAANA"]
[Mon Jan 26 11:41:10.012611 2026] [:error] [pid 24557:tid 24594] [client 193.37.32.62:59147] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aXbiVurlG7Vm9pxV14yg3gAAAEA"]
[Mon Jan 26 11:41:10.369777 2026] [:error] [pid 24556:tid 24586] [client 193.37.32.90:49259] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/makeasmtp.php"] [unique_id "aXbiVkyDW1_EbgDa3XKoBAAAABU"]
[Mon Jan 26 11:41:10.893264 2026] [:error] [pid 61286:tid 61291] [client 193.37.32.100:37845] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aXbiVsnVt687wYGMPn_BWAAAAUE"]
[Mon Jan 26 11:41:11.327113 2026] [:error] [pid 61252:tid 61265] [client 193.37.32.82:40991] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/222.php"] [unique_id "aXbiV7rGlf8FG2etxUAdVwAAAQs"]
[Mon Jan 26 11:41:11.738453 2026] [:error] [pid 24558:tid 24635] [client 193.37.32.102:23023] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aXbiVwo1PXqeJqIMTQZMrQAAAI4"]
[Mon Jan 26 11:41:12.087632 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.85:44961] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updates.php"] [unique_id "aXbiWEyDW1_EbgDa3XKoDQAAABM"]
[Mon Jan 26 11:41:12.435275 2026] [:error] [pid 61286:tid 61298] [client 193.37.32.81:22001] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aXbiWMnVt687wYGMPn_BZAAAAUg"]
[Mon Jan 26 11:41:12.792223 2026] [:error] [pid 61287:tid 61317] [client 193.37.32.74:58229] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/form.php"] [unique_id "aXbiWNimZOwAM64CfR73BAAAAYA"]
[Mon Jan 26 11:41:13.149206 2026] [:error] [pid 24666:tid 24673] [client 193.37.32.74:20635] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "aXbiWZmH-L0_jbK3i9FnxgAAAMU"]
[Mon Jan 26 11:41:13.546665 2026] [:error] [pid 61287:tid 61323] [client 193.37.32.58:52119] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php"] [unique_id "aXbiWdimZOwAM64CfR73CQAAAYY"]
[Mon Jan 26 11:41:13.949787 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.100:36069] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/asasx.php"] [unique_id "aXbiWUyDW1_EbgDa3XKoJAAAABM"]
[Mon Jan 26 11:41:14.330888 2026] [:error] [pid 61252:tid 61258] [client 193.37.32.94:54749] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/aback.php"] [unique_id "aXbiWrrGlf8FG2etxUAdXAAAAQQ"]
[Mon Jan 26 11:41:14.713713 2026] [:error] [pid 61287:tid 61320] [client 193.37.32.73:28199] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aXbiWtimZOwAM64CfR73DQAAAYM"]
[Mon Jan 26 11:41:15.475792 2026] [:error] [pid 61286:tid 61306] [client 193.37.32.79:36689] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "aXbiW8nVt687wYGMPn_BhgAAAVA"]
[Mon Jan 26 11:41:15.894589 2026] [:error] [pid 24556:tid 24589] [client 193.37.32.67:55411] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moderation.php"] [unique_id "aXbiW0yDW1_EbgDa3XKoLwAAABg"]
[Mon Jan 26 11:41:16.299457 2026] [:error] [pid 24558:tid 24639] [client 193.37.32.88:21687] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aXbiXAo1PXqeJqIMTQZMtAAAAJI"]
[Mon Jan 26 11:41:16.671909 2026] [:error] [pid 61252:tid 61275] [client 193.37.32.68:34985] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "aXbiXLrGlf8FG2etxUAdXgAAARU"]
[Mon Jan 26 11:41:17.145020 2026] [:error] [pid 61252:tid 61276] [client 193.37.32.96:61479] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aXbiXbrGlf8FG2etxUAdXwAAARY"]
[Mon Jan 26 11:41:17.550766 2026] [:error] [pid 61286:tid 61294] [client 193.37.32.63:57465] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/jindex.php"] [unique_id "aXbiXcnVt687wYGMPn_BkAAAAUQ"]
[Mon Jan 26 11:41:17.918798 2026] [:error] [pid 61286:tid 61312] [client 193.37.32.63:40167] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aXbiXcnVt687wYGMPn_BkwAAAVY"]
[Mon Jan 26 11:41:18.301116 2026] [:error] [pid 61287:tid 61333] [client 193.37.32.81:24105] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aXbiXtimZOwAM64CfR73FAAAAZA"]
[Mon Jan 26 11:41:18.791912 2026] [:error] [pid 61286:tid 61303] [client 193.37.32.86:53041] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aXbiXsnVt687wYGMPn_BlgAAAU0"]
[Mon Jan 26 11:41:19.152419 2026] [:error] [pid 61287:tid 61337] [client 193.37.32.98:43567] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/leaf.php"] [unique_id "aXbiX9imZOwAM64CfR73FwAAAZQ"]
[Mon Jan 26 11:41:19.547312 2026] [:error] [pid 61287:tid 61321] [client 193.37.32.55:58149] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/past.php"] [unique_id "aXbiX9imZOwAM64CfR73GAAAAYQ"]
[Mon Jan 26 11:41:19.907576 2026] [:error] [pid 24557:tid 24605] [client 193.37.32.97:27389] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "aXbiX-rlG7Vm9pxV14yg_wAAAEs"]
[Mon Jan 26 11:41:20.260373 2026] [:error] [pid 24556:tid 24583] [client 193.37.32.100:39673] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aXbiYEyDW1_EbgDa3XKoNgAAABI"]
[Mon Jan 26 11:41:20.622212 2026] [:error] [pid 24666:tid 24671] [client 193.37.32.65:23579] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aXbiYJmH-L0_jbK3i9FnzgAAAMM"]
[Mon Jan 26 11:41:20.977342 2026] [:error] [pid 24557:tid 24603] [client 193.37.32.99:56077] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aXbiYOrlG7Vm9pxV14yhAQAAAEk"]
[Mon Jan 26 11:41:21.480510 2026] [:error] [pid 24557:tid 24598] [client 193.37.32.55:21937] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aXbiYerlG7Vm9pxV14yhAgAAAEQ"]
[Mon Jan 26 11:41:21.989364 2026] [:error] [pid 24557:tid 24606] [client 193.37.32.105:29799] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aXbiYerlG7Vm9pxV14yhBQAAAEw"]
[Mon Jan 26 11:41:22.366458 2026] [:error] [pid 24556:tid 24581] [client 193.37.32.101:38795] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aXbiYkyDW1_EbgDa3XKoOAAAABA"]
[Mon Jan 26 11:41:23.068021 2026] [:error] [pid 24557:tid 24597] [client 193.37.32.81:50935] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sim.php"] [unique_id "aXbiY-rlG7Vm9pxV14yhCQAAAEM"]
[Mon Jan 26 11:41:23.436950 2026] [:error] [pid 24558:tid 24634] [client 193.37.32.88:25611] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aXbiYwo1PXqeJqIMTQZMvAAAAI0"]
[Mon Jan 26 11:41:24.066583 2026] [:error] [pid 61252:tid 61270] [client 193.37.32.60:52739] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aXbiZLrGlf8FG2etxUAdZQAAARA"]
[Mon Jan 26 11:41:24.434669 2026] [:error] [pid 61286:tid 61313] [client 193.37.32.98:50749] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aXbiZMnVt687wYGMPn_BmgAAAVc"]
[Mon Jan 26 11:41:24.829688 2026] [:error] [pid 24666:tid 24673] [client 193.37.32.62:58549] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXbiZJmH-L0_jbK3i9Fn3QAAAMU"]
[Mon Jan 26 11:41:25.248251 2026] [:error] [pid 24558:tid 24638] [client 193.37.32.56:22009] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xml.php"] [unique_id "aXbiZQo1PXqeJqIMTQZMwAAAAJE"]
[Mon Jan 26 11:41:25.663319 2026] [:error] [pid 24556:tid 24572] [client 193.37.32.105:61567] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aXbiZUyDW1_EbgDa3XKoPwAAAAc"]
[Mon Jan 26 11:41:26.028942 2026] [:error] [pid 24557:tid 24599] [client 193.37.32.102:60761] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/class-config.php"] [unique_id "aXbiZurlG7Vm9pxV14yhDwAAAEU"]
[Mon Jan 26 11:41:27.457034 2026] [:error] [pid 61252:tid 61276] [client 193.37.32.82:40619] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aXbiZ7rGlf8FG2etxUAdaQAAARY"]
[Mon Jan 26 11:41:28.000703 2026] [:error] [pid 61286:tid 61312] [client 193.37.32.95:51891] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "aXbiZ8nVt687wYGMPn_BoQAAAVY"]
[Mon Jan 26 11:41:28.417031 2026] [:error] [pid 24557:tid 24602] [client 193.37.32.57:23829] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aXbiaOrlG7Vm9pxV14yhFAAAAEg"]
[Mon Jan 26 11:41:28.781314 2026] [:error] [pid 61287:tid 61333] [client 193.37.32.61:20253] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/back.php"] [unique_id "aXbiaNimZOwAM64CfR73KQAAAZA"]
[Mon Jan 26 11:41:29.179594 2026] [:error] [pid 61287:tid 61328] [client 193.37.32.93:25627] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aXbiadimZOwAM64CfR73KgAAAYs"]
[Mon Jan 26 11:41:29.561872 2026] [:error] [pid 24666:tid 24676] [client 193.37.32.93:59985] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aXbiaZmH-L0_jbK3i9Fn4wAAAMg"]
[Mon Jan 26 11:41:29.926653 2026] [:error] [pid 24556:tid 24574] [client 193.37.32.105:41527] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aXbiaUyDW1_EbgDa3XKoSgAAAAk"]
[Mon Jan 26 11:41:30.355473 2026] [:error] [pid 24557:tid 24613] [client 193.37.32.74:25217] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aXbiaurlG7Vm9pxV14yhGAAAAFM"]
[Mon Jan 26 11:41:30.719927 2026] [:error] [pid 24666:tid 24691] [client 193.37.32.70:34517] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aXbiapmH-L0_jbK3i9Fn5gAAANc"]
[Mon Jan 26 11:41:31.085914 2026] [:error] [pid 24557:tid 24606] [client 193.37.32.86:33095] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/up.php"] [unique_id "aXbia-rlG7Vm9pxV14yhHQAAAEw"]
[Mon Jan 26 11:41:31.608879 2026] [:error] [pid 24557:tid 24600] [client 193.37.32.101:60503] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wsa.php"] [unique_id "aXbia-rlG7Vm9pxV14yhIQAAAEY"]
[Mon Jan 26 11:41:31.963876 2026] [:error] [pid 61287:tid 61338] [client 193.37.32.72:58479] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aXbia9imZOwAM64CfR73MAAAAZU"]
[Mon Jan 26 11:41:32.405537 2026] [:error] [pid 24666:tid 24690] [client 193.37.32.96:20769] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-l0gin.php"] [unique_id "aXbibJmH-L0_jbK3i9Fn7QAAANY"]
[Mon Jan 26 11:41:32.773186 2026] [:error] [pid 24557:tid 24610] [client 193.37.32.58:23399] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aXbibOrlG7Vm9pxV14yhKAAAAFA"]
[Mon Jan 26 11:41:33.219855 2026] [:error] [pid 24556:tid 24588] [client 193.37.32.68:60809] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aXbibUyDW1_EbgDa3XKoUQAAABc"]
[Mon Jan 26 11:41:33.581974 2026] [:error] [pid 24666:tid 24676] [client 193.37.32.82:52247] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aXbibZmH-L0_jbK3i9Fn8wAAAMg"]
[Mon Jan 26 11:41:33.932366 2026] [:error] [pid 24558:tid 24633] [client 193.37.32.103:59341] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aXbibQo1PXqeJqIMTQZM0QAAAIw"]
[Mon Jan 26 11:41:34.442935 2026] [:error] [pid 61252:tid 61254] [client 193.37.32.61:48651] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aXbibrrGlf8FG2etxUAddgAAAQA"]
[Mon Jan 26 11:41:34.829410 2026] [:error] [pid 24558:tid 24641] [client 193.37.32.102:28745] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap/function.php"] [unique_id "aXbibgo1PXqeJqIMTQZM0wAAAJQ"]
[Mon Jan 26 11:41:35.290106 2026] [:error] [pid 24557:tid 24616] [client 193.37.32.71:62419] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXbib-rlG7Vm9pxV14yhMwAAAFY"]
[Mon Jan 26 11:41:35.687659 2026] [:error] [pid 24557:tid 24608] [client 193.37.32.99:34689] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/"] [unique_id "aXbib-rlG7Vm9pxV14yhOQAAAE4"]
[Mon Jan 26 11:41:36.106460 2026] [:error] [pid 24557:tid 24611] [client 193.37.32.82:52955] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aXbicOrlG7Vm9pxV14yhOwAAAFE"]
[Mon Jan 26 11:41:36.473546 2026] [:error] [pid 24556:tid 24579] [client 193.37.32.76:30813] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aXbicEyDW1_EbgDa3XKoYgAAAA4"]
[Mon Jan 26 11:41:36.846094 2026] [:error] [pid 24557:tid 24606] [client 193.37.32.74:27161] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aXbicOrlG7Vm9pxV14yhQAAAAEw"]
[Mon Jan 26 11:41:37.280764 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.56:42679] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aXbicUyDW1_EbgDa3XKoagAAABM"]
[Mon Jan 26 11:41:37.663315 2026] [:error] [pid 24666:tid 24673] [client 193.37.32.69:32949] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aXbicZmH-L0_jbK3i9FoBwAAAMU"]
[Mon Jan 26 11:41:38.028733 2026] [:error] [pid 61287:tid 61340] [client 193.37.32.88:64863] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aXbictimZOwAM64CfR73NgAAAZc"]
[Mon Jan 26 11:41:38.410272 2026] [:error] [pid 24556:tid 24565] [client 193.37.32.74:57849] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aXbickyDW1_EbgDa3XKocgAAAAA"]
[Mon Jan 26 11:41:38.937671 2026] [:error] [pid 24556:tid 24577] [client 193.37.32.73:40437] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aXbickyDW1_EbgDa3XKodQAAAAw"]
[Mon Jan 26 11:41:40.310382 2026] [:error] [pid 24556:tid 24579] [client 193.37.32.68:48251] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/nf_tracking.php"] [unique_id "aXbidEyDW1_EbgDa3XKogQAAAA4"]
[Mon Jan 26 11:41:40.667061 2026] [:error] [pid 61287:tid 61327] [client 193.37.32.74:51217] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "aXbidNimZOwAM64CfR73OQAAAYo"]
[Mon Jan 26 11:41:41.025189 2026] [:error] [pid 24557:tid 24609] [client 193.37.32.75:57059] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aXbiderlG7Vm9pxV14yhUwAAAE8"]
[Mon Jan 26 11:41:42.840391 2026] [:error] [pid 61286:tid 61305] [client 193.37.32.83:61471] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments/"] [unique_id "aXbidsnVt687wYGMPn_BxQAAAU8"]
[Mon Jan 26 11:41:43.195497 2026] [:error] [pid 24557:tid 24604] [client 193.37.32.82:44189] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "aXbid-rlG7Vm9pxV14yhYAAAAEo"]
[Mon Jan 26 11:41:43.575863 2026] [:error] [pid 24558:tid 24637] [client 193.37.32.97:53855] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/natural.php"] [unique_id "aXbidwo1PXqeJqIMTQZM7AAAAJA"]
[Mon Jan 26 11:41:49.071986 2026] [:error] [pid 61286:tid 61298] [client 193.37.32.98:52121] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aXbifcnVt687wYGMPn_B1AAAAUg"]
[Mon Jan 26 11:41:49.446881 2026] [:error] [pid 61286:tid 61311] [client 193.37.32.64:41033] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aXbifcnVt687wYGMPn_B1gAAAVU"]
[Mon Jan 26 11:41:49.824058 2026] [:error] [pid 24666:tid 24681] [client 193.37.32.63:30779] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aXbifZmH-L0_jbK3i9FoPAAAAM0"]
[Mon Jan 26 11:41:50.187229 2026] [:error] [pid 24556:tid 24581] [client 193.37.32.104:32209] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aXbifkyDW1_EbgDa3XKowQAAABA"]
[Mon Jan 26 11:41:50.552268 2026] [:error] [pid 61286:tid 61304] [client 193.37.32.74:27267] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aXbifsnVt687wYGMPn_B2QAAAU4"]
[Mon Jan 26 11:41:50.913079 2026] [:error] [pid 61252:tid 61274] [client 193.37.32.82:40183] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "aXbifrrGlf8FG2etxUAdiwAAARQ"]
[Mon Jan 26 11:41:51.338648 2026] [:error] [pid 61286:tid 61312] [client 193.37.32.83:23235] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "aXbif8nVt687wYGMPn_B2gAAAVY"]
[Mon Jan 26 11:41:51.707701 2026] [:error] [pid 24666:tid 24668] [client 193.37.32.83:53199] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aXbif5mH-L0_jbK3i9FoRAAAAMA"]
[Mon Jan 26 11:41:52.076796 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.54:43493] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aXbigEyDW1_EbgDa3XKoxwAAABM"]
[Mon Jan 26 11:41:52.473286 2026] [:error] [pid 24666:tid 24688] [client 193.37.32.57:43199] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/function.php"] [unique_id "aXbigJmH-L0_jbK3i9FoSQAAANQ"]
[Mon Jan 26 11:41:52.846955 2026] [:error] [pid 24557:tid 24609] [client 193.37.32.83:63919] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXbigOrlG7Vm9pxV14yhiAAAAE8"]
[Mon Jan 26 11:41:53.287183 2026] [:error] [pid 24557:tid 24597] [client 193.37.32.88:38113] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aXbigerlG7Vm9pxV14yhigAAAEM"]
[Mon Jan 26 11:41:53.860596 2026] [:error] [pid 24556:tid 24578] [client 193.37.32.96:48021] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/fast.php"] [unique_id "aXbigUyDW1_EbgDa3XKo0QAAAA0"]
[Mon Jan 26 11:41:54.217635 2026] [:error] [pid 24556:tid 24582] [client 193.37.32.73:21535] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aXbigkyDW1_EbgDa3XKo1gAAABE"]
[Mon Jan 26 11:41:54.599733 2026] [:error] [pid 24558:tid 24643] [client 193.37.32.98:44995] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aXbiggo1PXqeJqIMTQZNDAAAAJY"]
[Mon Jan 26 11:41:54.957376 2026] [:error] [pid 24556:tid 24579] [client 193.37.32.66:26385] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aXbigkyDW1_EbgDa3XKo3AAAAA4"]
[Mon Jan 26 11:41:55.338157 2026] [:error] [pid 61286:tid 61299] [client 193.37.32.100:23309] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aXbig8nVt687wYGMPn_B5wAAAUk"]
[Mon Jan 26 11:41:55.751000 2026] [:error] [pid 24557:tid 24617] [client 193.37.32.103:35955] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ioxi002.PhP7"] [unique_id "aXbig-rlG7Vm9pxV14yhmgAAAFc"]
[Mon Jan 26 11:41:56.115870 2026] [:error] [pid 61252:tid 61272] [client 193.37.32.101:29199] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/about.php7"] [unique_id "aXbihLrGlf8FG2etxUAdlQAAARI"]
[Mon Jan 26 11:41:56.470819 2026] [:error] [pid 61286:tid 61300] [client 193.37.32.100:31723] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aXbihMnVt687wYGMPn_B7QAAAUo"]
[Mon Jan 26 11:41:56.822490 2026] [:error] [pid 61252:tid 61264] [client 193.37.32.105:32209] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function/function.php"] [unique_id "aXbihLrGlf8FG2etxUAdmQAAAQo"]
[Mon Jan 26 11:41:57.207522 2026] [:error] [pid 24556:tid 24572] [client 193.37.32.76:43431] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aXbihUyDW1_EbgDa3XKo7QAAAAc"]
[Mon Jan 26 11:41:57.582263 2026] [:error] [pid 61286:tid 61297] [client 193.37.32.71:29419] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aXbihcnVt687wYGMPn_B8gAAAUc"]
[Mon Jan 26 11:41:57.929410 2026] [:error] [pid 61252:tid 61254] [client 193.37.32.54:48539] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aXbihbrGlf8FG2etxUAdmwAAAQA"]
[Mon Jan 26 11:41:58.288771 2026] [:error] [pid 61286:tid 61298] [client 193.37.32.65:46209] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aXbihsnVt687wYGMPn_B9gAAAUg"]
[Mon Jan 26 11:41:58.685897 2026] [:error] [pid 24556:tid 24583] [client 193.37.32.104:48999] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXbihkyDW1_EbgDa3XKo-wAAABI"]
[Mon Jan 26 11:41:59.033708 2026] [:error] [pid 61286:tid 61304] [client 193.37.32.69:29785] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-"] [unique_id "aXbih8nVt687wYGMPn_B-QAAAU4"]
[Mon Jan 26 11:41:59.401090 2026] [:error] [pid 61286:tid 61306] [client 193.37.32.66:63209] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-error.php"] [unique_id "aXbih8nVt687wYGMPn_B_AAAAVA"]
[Mon Jan 26 11:42:00.033457 2026] [:error] [pid 24557:tid 24598] [client 193.37.32.71:25829] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aXbiiOrlG7Vm9pxV14yhsgAAAEQ"]
[Mon Jan 26 11:42:02.525483 2026] [:error] [pid 61287:tid 61337] [client 193.37.32.59:27979] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aXbiitimZOwAM64CfR73TwAAAZQ"]
[Mon Jan 26 11:42:02.874634 2026] [:error] [pid 61286:tid 61309] [client 193.37.32.86:37131] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aXbiisnVt687wYGMPn_CBAAAAVM"]
[Mon Jan 26 11:42:03.241359 2026] [:error] [pid 24556:tid 24571] [client 193.37.32.82:33663] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xc.php"] [unique_id "aXbii0yDW1_EbgDa3XKpHgAAAAY"]
[Mon Jan 26 11:42:03.635060 2026] [:error] [pid 24666:tid 24679] [client 193.37.32.58:25531] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aXbii5mH-L0_jbK3i9FoeQAAAMs"]
[Mon Jan 26 11:42:04.002651 2026] [:error] [pid 24557:tid 24594] [client 193.37.32.90:27451] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aXbijOrlG7Vm9pxV14yhyAAAAEA"]
[Mon Jan 26 11:42:04.355244 2026] [:error] [pid 24557:tid 24616] [client 193.37.32.66:38299] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aXbijOrlG7Vm9pxV14yhygAAAFY"]
[Mon Jan 26 11:42:04.736223 2026] [:error] [pid 61287:tid 61330] [client 193.37.32.64:58461] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aXbijNimZOwAM64CfR73UwAAAY0"]
[Mon Jan 26 11:42:05.095759 2026] [:error] [pid 24666:tid 24683] [client 193.37.32.56:34343] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aXbijZmH-L0_jbK3i9FofwAAAM8"]
[Mon Jan 26 11:42:05.599040 2026] [:error] [pid 24556:tid 24569] [client 193.37.32.54:61559] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/load.php"] [unique_id "aXbijUyDW1_EbgDa3XKpJQAAAAQ"]
[Mon Jan 26 11:42:05.971396 2026] [:error] [pid 24558:tid 24626] [client 193.37.32.59:49055] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aXbijQo1PXqeJqIMTQZNMwAAAIU"]
[Mon Jan 26 11:42:06.355837 2026] [:error] [pid 61252:tid 61258] [client 193.37.32.74:38697] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aXbijrrGlf8FG2etxUAdqgAAAQQ"]
[Mon Jan 26 11:42:06.766776 2026] [:error] [pid 61286:tid 61301] [client 193.37.32.59:57559] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xmrlpc.php"] [unique_id "aXbijsnVt687wYGMPn_CDgAAAUs"]
[Mon Jan 26 11:42:07.128868 2026] [:error] [pid 24558:tid 24644] [client 193.37.32.96:52411] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aXbijwo1PXqeJqIMTQZNOgAAAJc"]
[Mon Jan 26 11:42:07.513093 2026] [:error] [pid 61286:tid 61307] [client 193.37.32.82:49337] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aXbij8nVt687wYGMPn_CEQAAAVE"]
[Mon Jan 26 11:42:07.879943 2026] [:error] [pid 61286:tid 61295] [client 193.37.32.74:39011] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aXbij8nVt687wYGMPn_CEgAAAUU"]
[Mon Jan 26 11:42:08.254147 2026] [:error] [pid 24558:tid 24634] [client 193.37.32.73:43023] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/uploads/"] [unique_id "aXbikAo1PXqeJqIMTQZNPgAAAI0"]
[Mon Jan 26 11:42:08.631274 2026] [:error] [pid 24556:tid 24573] [client 193.37.32.78:23559] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentyfifteen/shell3.php"] [unique_id "aXbikEyDW1_EbgDa3XKpNgAAAAg"]
[Mon Jan 26 11:42:08.994513 2026] [:error] [pid 24557:tid 24594] [client 193.37.32.88:25973] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aXbikOrlG7Vm9pxV14yh3wAAAEA"]
[Mon Jan 26 11:42:09.350914 2026] [:error] [pid 61252:tid 61274] [client 193.37.32.75:29543] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aXbikbrGlf8FG2etxUAdsQAAARQ"]
[Mon Jan 26 11:42:09.799565 2026] [:error] [pid 61286:tid 61305] [client 193.37.32.64:33437] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXbikcnVt687wYGMPn_CGwAAAU8"]
[Mon Jan 26 11:42:10.170594 2026] [:error] [pid 61286:tid 61307] [client 193.37.32.58:62201] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aXbiksnVt687wYGMPn_CHwAAAVE"]
[Mon Jan 26 11:42:10.542043 2026] [:error] [pid 24557:tid 24598] [client 193.37.32.56:23095] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aXbikurlG7Vm9pxV14yh4QAAAEQ"]
[Mon Jan 26 11:42:11.899114 2026] [:error] [pid 61287:tid 61329] [client 193.37.32.95:52329] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "aXbik9imZOwAM64CfR73XwAAAYw"]
[Mon Jan 26 11:42:17.257054 2026] [:error] [pid 24666:tid 24687] [client 193.37.32.82:51989] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aXbimZmH-L0_jbK3i9FomgAAANM"]
[Mon Jan 26 11:42:17.611087 2026] [:error] [pid 61252:tid 61267] [client 193.37.32.93:49101] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/"] [unique_id "aXbimbrGlf8FG2etxUAdxAAAAQ0"]
[Mon Jan 26 11:42:17.968790 2026] [:error] [pid 24556:tid 24576] [client 193.37.32.58:52269] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aXbimUyDW1_EbgDa3XKpbgAAAAs"]
[Mon Jan 26 11:42:18.348144 2026] [:error] [pid 61252:tid 61277] [client 193.37.32.73:54377] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "aXbimrrGlf8FG2etxUAdxgAAARc"]
[Mon Jan 26 11:42:18.702380 2026] [:error] [pid 61252:tid 61260] [client 193.37.32.100:65145] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aXbimrrGlf8FG2etxUAdxwAAAQY"]
[Mon Jan 26 11:42:19.050206 2026] [:error] [pid 61252:tid 61256] [client 193.37.32.80:31601] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/"] [unique_id "aXbim7rGlf8FG2etxUAdyQAAAQI"]
[Mon Jan 26 11:42:19.407846 2026] [:error] [pid 61286:tid 61295] [client 193.37.32.55:47203] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "aXbim8nVt687wYGMPn_CSgAAAUU"]
[Mon Jan 26 11:42:19.819652 2026] [:error] [pid 24556:tid 24572] [client 193.37.32.85:40071] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aXbim0yDW1_EbgDa3XKpeAAAAAc"]
[Mon Jan 26 11:42:20.195233 2026] [:error] [pid 61286:tid 61298] [client 193.37.32.86:54879] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aXbinMnVt687wYGMPn_CUwAAAUg"]
[Mon Jan 26 11:42:20.548792 2026] [:error] [pid 24558:tid 24639] [client 193.37.32.105:41909] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/"] [unique_id "aXbinAo1PXqeJqIMTQZNqQAAAJI"]
[Mon Jan 26 11:42:20.896567 2026] [:error] [pid 61287:tid 61327] [client 193.37.32.80:60781] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class.api.php"] [unique_id "aXbinNimZOwAM64CfR73ZwAAAYo"]
[Mon Jan 26 11:42:21.249305 2026] [:error] [pid 24666:tid 24682] [client 193.37.32.77:29129] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aXbinZmH-L0_jbK3i9FoogAAAM4"]
[Mon Jan 26 11:42:21.605698 2026] [:error] [pid 24556:tid 24575] [client 193.37.32.102:63577] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aXbinUyDW1_EbgDa3XKpfgAAAAo"]
[Mon Jan 26 11:42:21.970535 2026] [:error] [pid 61287:tid 61331] [client 193.37.32.68:58489] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/selam.php"] [unique_id "aXbindimZOwAM64CfR73awAAAY4"]
[Mon Jan 26 11:42:22.319643 2026] [:error] [pid 24557:tid 24594] [client 193.37.32.62:55983] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aXbinurlG7Vm9pxV14yh8wAAAEA"]
[Mon Jan 26 11:42:22.695507 2026] [:error] [pid 24557:tid 24595] [client 193.37.32.99:50335] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aXbinurlG7Vm9pxV14yh9QAAAEE"]
[Mon Jan 26 11:42:23.048406 2026] [:error] [pid 24666:tid 24676] [client 193.37.32.84:27919] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aXbin5mH-L0_jbK3i9FopgAAAMg"]
[Mon Jan 26 11:42:28.419473 2026] [:error] [pid 61252:tid 61273] [client 193.37.32.82:33401] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aXbipLrGlf8FG2etxUAd1AAAARM"]
[Mon Jan 26 11:42:28.772603 2026] [:error] [pid 24556:tid 24577] [client 193.37.32.83:27967] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css/"] [unique_id "aXbipEyDW1_EbgDa3XKpjgAAAAw"]
[Mon Jan 26 11:42:29.128803 2026] [:error] [pid 24556:tid 24576] [client 193.37.32.76:33689] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aXbipUyDW1_EbgDa3XKpjwAAAAs"]
[Mon Jan 26 11:42:29.487412 2026] [:error] [pid 61287:tid 61334] [client 193.37.32.69:20353] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aXbipdimZOwAM64CfR73dQAAAZE"]
[Mon Jan 26 11:42:29.838884 2026] [:error] [pid 61287:tid 61319] [client 193.37.32.73:32299] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aXbipdimZOwAM64CfR73dgAAAYI"]
[Mon Jan 26 11:42:30.196517 2026] [:error] [pid 24557:tid 24604] [client 193.37.32.86:59531] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-conflg/function.php"] [unique_id "aXbipurlG7Vm9pxV14yh_QAAAEo"]
[Mon Jan 26 11:42:30.562161 2026] [:error] [pid 24556:tid 24575] [client 193.37.32.58:58081] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aXbipkyDW1_EbgDa3XKpkwAAAAo"]
[Mon Jan 26 11:42:30.915081 2026] [:error] [pid 61287:tid 61320] [client 193.37.32.105:63637] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aXbiptimZOwAM64CfR73eAAAAYM"]
[Mon Jan 26 11:42:31.285508 2026] [:error] [pid 61287:tid 61330] [client 193.37.32.71:36263] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aXbip9imZOwAM64CfR73eQAAAY0"]
[Mon Jan 26 11:42:32.648713 2026] [:error] [pid 24666:tid 24684] [client 193.37.32.91:62301] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aXbiqJmH-L0_jbK3i9FosQAAANA"]
[Mon Jan 26 11:42:33.043985 2026] [:error] [pid 24666:tid 24690] [client 193.37.32.94:47691] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aXbiqZmH-L0_jbK3i9FoswAAANY"]
[Mon Jan 26 11:42:33.418412 2026] [:error] [pid 61252:tid 61266] [client 193.37.32.85:38267] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aXbiqbrGlf8FG2etxUAd5AAAAQw"]
[Mon Jan 26 11:42:33.777912 2026] [:error] [pid 24556:tid 24565] [client 193.37.32.75:64021] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "aXbiqUyDW1_EbgDa3XKpnwAAAAA"]
[Mon Jan 26 11:42:34.136273 2026] [:error] [pid 61252:tid 61257] [client 193.37.32.86:20859] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aXbiqrrGlf8FG2etxUAd7wAAAQM"]
[Mon Jan 26 11:42:34.603604 2026] [:error] [pid 24556:tid 24574] [client 193.37.32.77:38185] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-conflg.php"] [unique_id "aXbiqkyDW1_EbgDa3XKpogAAAAk"]
[Mon Jan 26 11:42:35.321950 2026] [:error] [pid 61252:tid 61275] [client 193.37.32.68:21419] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aXbiq7rGlf8FG2etxUAd9AAAARU"]
[Mon Jan 26 11:42:35.837008 2026] [:error] [pid 61287:tid 61332] [client 193.37.32.97:29007] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aXbiq9imZOwAM64CfR73ewAAAY8"]
[Mon Jan 26 11:42:36.218497 2026] [:error] [pid 61252:tid 61266] [client 193.37.32.104:20703] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aXbirLrGlf8FG2etxUAd9QAAAQw"]
[Mon Jan 26 11:42:36.880397 2026] [:error] [pid 61286:tid 61308] [client 193.37.32.77:64719] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/"] [unique_id "aXbirMnVt687wYGMPn_CfAAAAVI"]
[Mon Jan 26 11:42:37.231702 2026] [:error] [pid 61252:tid 61271] [client 193.37.32.105:21381] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aXbirbrGlf8FG2etxUAd-AAAARE"]
[Mon Jan 26 11:42:37.597626 2026] [:error] [pid 24557:tid 24612] [client 193.37.32.81:40721] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aXbirerlG7Vm9pxV14yiBwAAAFI"]
[Mon Jan 26 11:42:37.953181 2026] [:error] [pid 24557:tid 24611] [client 193.37.32.93:38965] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aXbirerlG7Vm9pxV14yiCAAAAFE"]
[Mon Jan 26 11:42:38.304751 2026] [:error] [pid 61252:tid 61261] [client 193.37.32.86:21109] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/admin.php"] [unique_id "aXbirrrGlf8FG2etxUAd-wAAAQc"]
[Mon Jan 26 11:42:38.695600 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.64:45163] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/fm.php/sts.php"] [unique_id "aXbirkyDW1_EbgDa3XKpsAAAABM"]
[Mon Jan 26 11:42:39.052361 2026] [:error] [pid 24666:tid 24682] [client 193.37.32.76:27469] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXbir5mH-L0_jbK3i9FoxwAAAM4"]
[Mon Jan 26 11:42:39.408479 2026] [:error] [pid 24558:tid 24637] [client 193.37.32.88:55925] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aXbirwo1PXqeJqIMTQZNxwAAAJA"]
[Mon Jan 26 11:42:39.770207 2026] [:error] [pid 24557:tid 24610] [client 193.37.32.56:20279] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aXbir-rlG7Vm9pxV14yiCgAAAFA"]
[Mon Jan 26 11:42:40.123034 2026] [:error] [pid 24556:tid 24566] [client 193.37.32.97:37493] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aXbisEyDW1_EbgDa3XKpsgAAAAE"]
[Mon Jan 26 11:42:40.485431 2026] [:error] [pid 24557:tid 24617] [client 193.37.32.66:21171] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aXbisOrlG7Vm9pxV14yiCwAAAFc"]
[Mon Jan 26 11:42:40.892711 2026] [:error] [pid 61287:tid 61325] [client 193.37.32.73:47987] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aXbisNimZOwAM64CfR73gAAAAYg"]
[Mon Jan 26 11:42:41.250857 2026] [:error] [pid 24556:tid 24575] [client 193.37.32.60:63885] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXbisUyDW1_EbgDa3XKpswAAAAo"]
[Mon Jan 26 11:42:41.634940 2026] [:error] [pid 61287:tid 61340] [client 193.37.32.62:53259] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aXbisdimZOwAM64CfR73ggAAAZc"]
[Mon Jan 26 11:42:42.004343 2026] [:error] [pid 24556:tid 24569] [client 193.37.32.102:24147] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aXbiskyDW1_EbgDa3XKptQAAAAQ"]
[Mon Jan 26 11:42:42.359967 2026] [:error] [pid 61287:tid 61327] [client 193.37.32.102:34349] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aXbistimZOwAM64CfR73gwAAAYo"]
[Mon Jan 26 11:42:42.711244 2026] [:error] [pid 61287:tid 61333] [client 193.37.32.104:32711] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXbistimZOwAM64CfR73hQAAAZA"]
[Mon Jan 26 11:42:43.059858 2026] [:error] [pid 24558:tid 24627] [client 193.37.32.76:23545] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aXbiswo1PXqeJqIMTQZNywAAAIY"]
[Mon Jan 26 11:42:43.415377 2026] [:error] [pid 24557:tid 24615] [client 193.37.32.69:26381] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/acxx.php"] [unique_id "aXbis-rlG7Vm9pxV14yiDAAAAFU"]
[Mon Jan 26 11:42:43.766091 2026] [:error] [pid 24556:tid 24583] [client 193.37.32.78:63581] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aXbis0yDW1_EbgDa3XKptwAAABI"]
[Mon Jan 26 11:42:44.118485 2026] [:error] [pid 61287:tid 61317] [client 193.37.32.70:60633] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/an.php"] [unique_id "aXbitNimZOwAM64CfR73hgAAAYA"]
[Mon Jan 26 11:42:44.476159 2026] [:error] [pid 61286:tid 61296] [client 193.37.32.56:24535] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aXbitMnVt687wYGMPn_ChwAAAUY"]
[Mon Jan 26 11:42:44.826818 2026] [:error] [pid 24558:tid 24624] [client 193.37.32.81:35483] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aXbitAo1PXqeJqIMTQZNzgAAAIM"]
[Mon Jan 26 11:42:45.178517 2026] [:error] [pid 24666:tid 24672] [client 193.37.32.54:22683] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aXbitZmH-L0_jbK3i9FozgAAAMQ"]
[Mon Jan 26 11:42:45.539672 2026] [:error] [pid 61287:tid 61318] [client 193.37.32.92:46975] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aXbitdimZOwAM64CfR73iAAAAYE"]
[Mon Jan 26 11:42:45.895242 2026] [:error] [pid 61252:tid 61266] [client 193.37.32.73:40181] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aXbitbrGlf8FG2etxUAeBgAAAQw"]
[Mon Jan 26 11:42:46.251505 2026] [:error] [pid 61287:tid 61326] [client 193.37.32.62:21553] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aXbittimZOwAM64CfR73iwAAAYk"]
[Mon Jan 26 11:42:46.618931 2026] [:error] [pid 24558:tid 24630] [client 193.37.32.58:46085] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aXbitgo1PXqeJqIMTQZN1AAAAIk"]
[Mon Jan 26 11:42:46.975536 2026] [:error] [pid 24556:tid 24589] [client 193.37.32.67:37233] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aXbitkyDW1_EbgDa3XKpuQAAABg"]
[Mon Jan 26 11:42:47.341049 2026] [:error] [pid 61286:tid 61292] [client 193.37.32.56:31723] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/"] [unique_id "aXbit8nVt687wYGMPn_CiwAAAUI"]
[Mon Jan 26 11:42:47.699348 2026] [:error] [pid 24666:tid 24669] [client 193.37.32.77:38777] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aXbit5mH-L0_jbK3i9Fo1AAAAME"]
[Mon Jan 26 11:42:48.057732 2026] [:error] [pid 24666:tid 24677] [client 193.37.32.61:46143] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content.php"] [unique_id "aXbiuJmH-L0_jbK3i9Fo1gAAAMk"]
[Mon Jan 26 11:42:48.415945 2026] [:error] [pid 61287:tid 61334] [client 193.37.32.101:27605] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aXbiuNimZOwAM64CfR73jgAAAZE"]
[Mon Jan 26 11:42:48.766437 2026] [:error] [pid 24556:tid 24577] [client 193.37.32.80:48235] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXbiuEyDW1_EbgDa3XKpxAAAAAw"]
[Mon Jan 26 11:42:50.454583 2026] [:error] [pid 61252:tid 61266] [client 193.37.32.75:31035] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "aXbiurrGlf8FG2etxUAeEQAAAQw"]
[Mon Jan 26 11:42:50.809377 2026] [:error] [pid 61287:tid 61338] [client 193.37.32.95:41163] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signup.php"] [unique_id "aXbiutimZOwAM64CfR73kQAAAZU"]
[Mon Jan 26 11:42:51.156788 2026] [:error] [pid 24557:tid 24594] [client 193.37.32.101:57175] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aXbiu-rlG7Vm9pxV14yiFwAAAEA"]
[Mon Jan 26 11:42:51.505984 2026] [:error] [pid 61252:tid 61257] [client 193.37.32.87:32837] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aXbiu7rGlf8FG2etxUAeEwAAAQM"]
[Mon Jan 26 11:42:51.857220 2026] [:error] [pid 24666:tid 24674] [client 193.37.32.78:30549] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aXbiu5mH-L0_jbK3i9Fo2wAAAMY"]
[Mon Jan 26 11:42:52.206798 2026] [:error] [pid 24666:tid 24684] [client 193.37.32.57:61079] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/m.php"] [unique_id "aXbivJmH-L0_jbK3i9Fo3gAAANA"]
[Mon Jan 26 11:42:53.558591 2026] [:error] [pid 61252:tid 61260] [client 193.37.32.65:43161] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aXbivbrGlf8FG2etxUAeFwAAAQY"]
[Mon Jan 26 11:42:53.914786 2026] [:error] [pid 24558:tid 24636] [client 193.37.32.68:21903] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aXbivQo1PXqeJqIMTQZN4AAAAI8"]
[Mon Jan 26 11:42:54.266222 2026] [:error] [pid 61286:tid 61300] [client 193.37.32.76:42329] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/f.php"] [unique_id "aXbivsnVt687wYGMPn_ClwAAAUo"]
[Mon Jan 26 11:42:54.621681 2026] [:error] [pid 24557:tid 24603] [client 193.37.32.80:62613] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aXbivurlG7Vm9pxV14yiGQAAAEk"]
[Mon Jan 26 11:42:54.971372 2026] [:error] [pid 24558:tid 24621] [client 193.37.32.58:32739] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/"] [unique_id "aXbivgo1PXqeJqIMTQZN4QAAAIA"]
[Mon Jan 26 11:42:55.326224 2026] [:error] [pid 24666:tid 24686] [client 193.37.32.63:54729] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aXbiv5mH-L0_jbK3i9Fo4gAAANI"]
[Mon Jan 26 11:42:55.677114 2026] [:error] [pid 61252:tid 61255] [client 193.37.32.65:60027] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell3.php"] [unique_id "aXbiv7rGlf8FG2etxUAeHgAAAQE"]
[Mon Jan 26 11:42:56.029426 2026] [:error] [pid 61252:tid 61254] [client 193.37.32.67:37871] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aXbiwLrGlf8FG2etxUAeIQAAAQA"]
[Mon Jan 26 11:42:56.380693 2026] [:error] [pid 61252:tid 61275] [client 193.37.32.104:41163] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aXbiwLrGlf8FG2etxUAeJQAAARU"]
[Mon Jan 26 11:42:56.734929 2026] [:error] [pid 61252:tid 61274] [client 193.37.32.85:20037] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/wp-good.php"] [unique_id "aXbiwLrGlf8FG2etxUAeKQAAARQ"]
[Mon Jan 26 11:42:57.108674 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.88:59247] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aXbiwUyDW1_EbgDa3XKpzgAAABM"]
[Mon Jan 26 11:42:57.465647 2026] [:error] [pid 24556:tid 24569] [client 193.37.32.103:27319] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aXbiwUyDW1_EbgDa3XKpzwAAAAQ"]
[Mon Jan 26 11:42:57.820968 2026] [:error] [pid 24558:tid 24638] [client 193.37.32.79:58859] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aXbiwQo1PXqeJqIMTQZN6QAAAJE"]
[Mon Jan 26 11:42:58.169108 2026] [:error] [pid 24558:tid 24636] [client 193.37.32.87:48715] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aXbiwgo1PXqeJqIMTQZN6gAAAI8"]
[Mon Jan 26 11:42:58.517994 2026] [:error] [pid 61252:tid 61278] [client 193.37.32.89:48267] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aXbiwrrGlf8FG2etxUAeLAAAARg"]
[Mon Jan 26 11:42:58.867998 2026] [:error] [pid 24666:tid 24674] [client 193.37.32.81:49665] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bk/"] [unique_id "aXbiwpmH-L0_jbK3i9Fo5AAAAMY"]
[Mon Jan 26 11:42:59.258275 2026] [:error] [pid 61286:tid 61299] [client 193.37.32.103:25913] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aXbiw8nVt687wYGMPn_CnAAAAUk"]
[Mon Jan 26 11:42:59.623382 2026] [:error] [pid 24557:tid 24617] [client 193.37.32.67:35785] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aXbiw-rlG7Vm9pxV14yiHgAAAFc"]
[Mon Jan 26 11:42:59.976655 2026] [:error] [pid 61286:tid 61306] [client 193.37.32.67:45901] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aXbiw8nVt687wYGMPn_CnQAAAVA"]
[Mon Jan 26 11:43:00.343468 2026] [:error] [pid 24557:tid 24596] [client 193.37.32.81:48337] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aXbixOrlG7Vm9pxV14yiKAAAAEI"]
[Mon Jan 26 11:43:00.754287 2026] [:error] [pid 24557:tid 24603] [client 193.37.32.61:44267] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aXbixOrlG7Vm9pxV14yiQgAAAEk"]
[Mon Jan 26 11:43:01.152834 2026] [:error] [pid 24558:tid 24635] [client 193.37.32.97:43021] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aXbixQo1PXqeJqIMTQZN6wAAAI4"]
[Mon Jan 26 11:43:01.528109 2026] [:error] [pid 24666:tid 24671] [client 193.37.32.79:59759] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aXbixZmH-L0_jbK3i9Fo7AAAAMM"]
[Mon Jan 26 11:43:01.907754 2026] [:error] [pid 24666:tid 24685] [client 193.37.32.66:37321] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXbixZmH-L0_jbK3i9Fo7QAAANE"]
[Mon Jan 26 11:43:02.311071 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.89:61521] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aXbixkyDW1_EbgDa3XKp4AAAABM"]
[Mon Jan 26 11:43:02.679368 2026] [:error] [pid 24556:tid 24566] [client 193.37.32.69:53371] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen/function.php"] [unique_id "aXbixkyDW1_EbgDa3XKp4QAAAAE"]
[Mon Jan 26 11:43:03.089716 2026] [:error] [pid 61286:tid 61297] [client 193.37.32.54:23425] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aXbix8nVt687wYGMPn_CoQAAAUc"]
[Mon Jan 26 11:43:03.730944 2026] [:error] [pid 24557:tid 24598] [client 193.37.32.62:64489] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aXbix-rlG7Vm9pxV14yiVAAAAEQ"]
[Mon Jan 26 11:43:04.457257 2026] [:error] [pid 61286:tid 61307] [client 193.37.32.85:25735] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aXbiyMnVt687wYGMPn_CogAAAVE"]
[Mon Jan 26 11:43:05.313743 2026] [:error] [pid 24557:tid 24618] [client 193.37.32.67:63799] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aXbiyerlG7Vm9pxV14yiVgAAAFg"]
[Mon Jan 26 11:43:05.689046 2026] [:error] [pid 24558:tid 24626] [client 193.37.32.77:28515] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aXbiyQo1PXqeJqIMTQZN7QAAAIU"]
[Mon Jan 26 11:43:06.085975 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.91:22751] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aXbiykyDW1_EbgDa3XKp6gAAABM"]
[Mon Jan 26 11:43:06.448947 2026] [:error] [pid 24556:tid 24572] [client 193.37.32.80:64439] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aXbiykyDW1_EbgDa3XKp7AAAAAc"]
[Mon Jan 26 11:43:06.850361 2026] [:error] [pid 24666:tid 24680] [client 193.37.32.68:53467] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options.php"] [unique_id "aXbiypmH-L0_jbK3i9Fo8AAAAMw"]
[Mon Jan 26 11:43:07.255298 2026] [:error] [pid 24558:tid 24632] [client 193.37.32.79:47419] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-files.php"] [unique_id "aXbiywo1PXqeJqIMTQZN8AAAAIs"]
[Mon Jan 26 11:43:07.613398 2026] [:error] [pid 61252:tid 61277] [client 193.37.32.75:53759] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aXbiy7rGlf8FG2etxUAeOAAAARc"]
[Mon Jan 26 11:43:07.977185 2026] [:error] [pid 24556:tid 24574] [client 193.37.32.88:25755] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aXbiy0yDW1_EbgDa3XKp9QAAAAk"]
[Mon Jan 26 11:43:08.336513 2026] [:error] [pid 24556:tid 24573] [client 193.37.32.92:32019] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aXbizEyDW1_EbgDa3XKp9wAAAAg"]
[Mon Jan 26 11:43:08.848726 2026] [:error] [pid 61252:tid 61259] [client 193.37.32.54:50645] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aXbizLrGlf8FG2etxUAePAAAAQU"]
[Mon Jan 26 11:43:09.207590 2026] [:error] [pid 24556:tid 24587] [client 193.37.32.72:44653] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXbizUyDW1_EbgDa3XKp-QAAABY"]
[Mon Jan 26 11:43:09.585946 2026] [:error] [pid 24557:tid 24606] [client 193.37.32.91:53533] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aXbizerlG7Vm9pxV14yiWQAAAEw"]
[Mon Jan 26 11:43:09.945003 2026] [:error] [pid 24557:tid 24609] [client 193.37.32.84:51469] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aXbizerlG7Vm9pxV14yiWgAAAE8"]
[Mon Jan 26 11:43:15.372648 2026] [:error] [pid 24666:tid 24675] [client 193.37.32.73:33587] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aXbi05mH-L0_jbK3i9FpAAAAAMc"]
[Mon Jan 26 11:43:15.776493 2026] [:error] [pid 24666:tid 24683] [client 193.37.32.97:39177] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXbi05mH-L0_jbK3i9FpAQAAAM8"]
[Mon Jan 26 11:43:16.143247 2026] [:error] [pid 24557:tid 24611] [client 193.37.32.64:38025] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aXbi1OrlG7Vm9pxV14yiXgAAAFE"]
[Mon Jan 26 11:43:16.496335 2026] [:error] [pid 24557:tid 24607] [client 193.37.32.82:34523] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/function.php"] [unique_id "aXbi1OrlG7Vm9pxV14yiXwAAAE0"]
[Mon Jan 26 11:43:16.854706 2026] [:error] [pid 24557:tid 24617] [client 193.37.32.92:54125] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aXbi1OrlG7Vm9pxV14yiYAAAAFc"]
[Mon Jan 26 11:43:17.210349 2026] [:error] [pid 24666:tid 24677] [client 193.37.32.101:55493] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-header.php"] [unique_id "aXbi1ZmH-L0_jbK3i9FpBAAAAMk"]
[Mon Jan 26 11:43:17.567299 2026] [:error] [pid 24556:tid 24569] [client 193.37.32.96:51589] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index2.php"] [unique_id "aXbi1UyDW1_EbgDa3XKqBwAAAAQ"]
[Mon Jan 26 11:43:17.954832 2026] [:error] [pid 61286:tid 61298] [client 193.37.32.83:36023] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aXbi1cnVt687wYGMPn_CrAAAAUg"]
[Mon Jan 26 11:43:18.502164 2026] [:error] [pid 24557:tid 24616] [client 193.37.32.93:45543] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aXbi1urlG7Vm9pxV14yiYgAAAFY"]
[Mon Jan 26 11:43:18.872286 2026] [:error] [pid 24557:tid 24618] [client 193.37.32.94:32747] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "aXbi1urlG7Vm9pxV14yiYwAAAFg"]
[Mon Jan 26 11:43:19.238269 2026] [:error] [pid 24666:tid 24681] [client 193.37.32.78:27103] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aXbi15mH-L0_jbK3i9FpBgAAAM0"]
[Mon Jan 26 11:43:19.598012 2026] [:error] [pid 24666:tid 24670] [client 193.37.32.75:49481] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aXbi15mH-L0_jbK3i9FpCQAAAMI"]
[Mon Jan 26 11:43:19.977261 2026] [:error] [pid 61287:tid 61331] [client 193.37.32.83:38801] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aXbi19imZOwAM64CfR73rgAAAY4"]
[Mon Jan 26 11:43:20.331858 2026] [:error] [pid 24557:tid 24596] [client 193.37.32.94:60291] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aXbi2OrlG7Vm9pxV14yiZQAAAEI"]
[Mon Jan 26 11:43:20.678874 2026] [:error] [pid 24556:tid 24571] [client 193.37.32.73:32421] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/buy.php"] [unique_id "aXbi2EyDW1_EbgDa3XKqCgAAAAY"]
[Mon Jan 26 11:43:21.035608 2026] [:error] [pid 61287:tid 61317] [client 193.37.32.80:55217] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aXbi2dimZOwAM64CfR73sgAAAYA"]
[Mon Jan 26 11:43:21.399340 2026] [:error] [pid 24556:tid 24581] [client 193.37.32.79:36481] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aXbi2UyDW1_EbgDa3XKqDAAAABA"]
[Mon Jan 26 11:43:21.747037 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.67:32149] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aXbi2UyDW1_EbgDa3XKqDQAAABM"]
[Mon Jan 26 11:43:22.093297 2026] [:error] [pid 24556:tid 24589] [client 193.37.32.93:20381] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/chosen.php"] [unique_id "aXbi2kyDW1_EbgDa3XKqDgAAABg"]
[Mon Jan 26 11:43:22.450420 2026] [:error] [pid 61252:tid 61266] [client 193.37.32.79:49555] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/"] [unique_id "aXbi2rrGlf8FG2etxUAeTAAAAQw"]
[Mon Jan 26 11:43:22.800507 2026] [:error] [pid 61287:tid 61329] [client 193.37.32.81:26231] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aXbi2timZOwAM64CfR73tgAAAYw"]
[Mon Jan 26 11:43:23.173723 2026] [:error] [pid 24557:tid 24607] [client 193.37.32.93:31745] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aXbi2-rlG7Vm9pxV14yiagAAAE0"]
[Mon Jan 26 11:43:23.525924 2026] [:error] [pid 24557:tid 24600] [client 193.37.32.90:31915] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aXbi2-rlG7Vm9pxV14yiawAAAEY"]
[Mon Jan 26 11:43:23.886676 2026] [:error] [pid 24557:tid 24613] [client 193.37.32.103:23743] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/product.php"] [unique_id "aXbi2-rlG7Vm9pxV14yibgAAAFM"]
[Mon Jan 26 11:43:24.252894 2026] [:error] [pid 24557:tid 24609] [client 193.37.32.83:37921] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXbi3OrlG7Vm9pxV14yicAAAAE8"]
[Mon Jan 26 11:43:24.611156 2026] [:error] [pid 24666:tid 24669] [client 193.37.32.83:64739] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aXbi3JmH-L0_jbK3i9FpDQAAAME"]
[Mon Jan 26 11:43:24.970117 2026] [:error] [pid 61252:tid 61269] [client 193.37.32.69:46655] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "aXbi3LrGlf8FG2etxUAeTgAAAQ8"]
[Mon Jan 26 11:43:25.377386 2026] [:error] [pid 61252:tid 61261] [client 193.37.32.63:32349] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aXbi3brGlf8FG2etxUAeTwAAAQc"]
[Mon Jan 26 11:43:25.734118 2026] [:error] [pid 61252:tid 61272] [client 193.37.32.81:46335] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aXbi3brGlf8FG2etxUAeUAAAARI"]
[Mon Jan 26 11:43:26.085818 2026] [:error] [pid 24558:tid 24645] [client 193.37.32.69:45945] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aXbi3go1PXqeJqIMTQZN_AAAAJg"]
[Mon Jan 26 11:43:26.443259 2026] [:error] [pid 24558:tid 24629] [client 193.37.32.55:63195] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aXbi3go1PXqeJqIMTQZN_wAAAIg"]
[Mon Jan 26 11:43:26.793714 2026] [:error] [pid 24556:tid 24580] [client 193.37.32.66:45627] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/error.php"] [unique_id "aXbi3kyDW1_EbgDa3XKqFQAAAA8"]
[Mon Jan 26 11:43:27.198649 2026] [:error] [pid 24556:tid 24584] [client 193.37.32.87:33975] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aXbi30yDW1_EbgDa3XKqFgAAABM"]
[Mon Jan 26 11:43:27.555784 2026] [:error] [pid 24556:tid 24566] [client 193.37.32.103:20833] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aXbi30yDW1_EbgDa3XKqGAAAAAE"]
[Mon Jan 26 11:43:28.273492 2026] [:error] [pid 24557:tid 24600] [client 193.37.32.98:33471] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "aXbi4OrlG7Vm9pxV14yidQAAAEY"]
[Mon Jan 26 11:43:28.664804 2026] [:error] [pid 24557:tid 24603] [client 193.37.32.104:33521] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aXbi4OrlG7Vm9pxV14yidwAAAEk"]
[Mon Jan 26 11:43:29.140998 2026] [:error] [pid 24556:tid 24585] [client 193.37.32.57:20431] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/"] [unique_id "aXbi4UyDW1_EbgDa3XKqGwAAABQ"]
[Mon Jan 26 11:43:29.493830 2026] [:error] [pid 61252:tid 61256] [client 193.37.32.56:41577] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aXbi4brGlf8FG2etxUAeVAAAAQI"]
[Mon Jan 26 11:43:29.872678 2026] [:error] [pid 24557:tid 24611] [client 193.37.32.85:61669] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aXbi4erlG7Vm9pxV14yifQAAAFE"]
[Mon Jan 26 11:43:30.238882 2026] [:error] [pid 61252:tid 61257] [client 193.37.32.68:36219] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aXbi4rrGlf8FG2etxUAeVgAAAQM"]
[Mon Jan 26 11:43:30.664782 2026] [:error] [pid 24557:tid 24604] [client 193.37.32.97:20631] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aXbi4urlG7Vm9pxV14yifwAAAEo"]
[Mon Jan 26 11:43:31.113730 2026] [:error] [pid 61252:tid 61268] [client 193.37.32.81:64213] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aXbi47rGlf8FG2etxUAeVwAAAQ4"]
[Mon Jan 26 11:43:32.853842 2026] [:error] [pid 61252:tid 61269] [client 193.37.32.82:58725] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aXbi5LrGlf8FG2etxUAeWgAAAQ8"]
[Mon Jan 26 11:43:33.204493 2026] [:error] [pid 61252:tid 61263] [client 193.37.32.57:30007] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/post.php"] [unique_id "aXbi5brGlf8FG2etxUAeXQAAAQk"]
[Mon Jan 26 11:43:33.561790 2026] [:error] [pid 24556:tid 24573] [client 193.37.32.99:58755] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aXbi5UyDW1_EbgDa3XKqJQAAAAg"]
[Mon Jan 26 11:43:33.909958 2026] [:error] [pid 24666:tid 24691] [client 193.37.32.97:22631] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/option-old.php"] [unique_id "aXbi5ZmH-L0_jbK3i9FpEQAAANc"]
[Mon Jan 26 11:43:34.332425 2026] [:error] [pid 24666:tid 24690] [client 193.37.32.96:48471] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aXbi5pmH-L0_jbK3i9FpEgAAANY"]
[Mon Jan 26 11:43:34.689369 2026] [:error] [pid 61252:tid 61267] [client 193.37.32.101:21059] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aXbi5rrGlf8FG2etxUAeYAAAAQ0"]
[Mon Jan 26 11:43:35.043672 2026] [:error] [pid 24557:tid 24597] [client 193.37.32.78:34201] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/about.php"] [unique_id "aXbi5-rlG7Vm9pxV14yiiQAAAEM"]
[Mon Jan 26 11:43:35.399421 2026] [:error] [pid 24556:tid 24577] [client 193.37.32.91:25725] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aXbi50yDW1_EbgDa3XKqKwAAAAw"]
[Mon Jan 26 11:43:37.078765 2026] [:error] [pid 24556:tid 24576] [client 193.37.32.75:53527] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/woh.php"] [unique_id "aXbi6UyDW1_EbgDa3XKqLwAAAAs"]
[Mon Jan 26 11:43:37.461622 2026] [:error] [pid 24556:tid 24578] [client 193.37.32.104:20479] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/navigation/"] [unique_id "aXbi6UyDW1_EbgDa3XKqMwAAAA0"]
[Mon Jan 26 11:43:37.879969 2026] [:error] [pid 61286:tid 61297] [client 193.37.32.65:48227] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aXbi6cnVt687wYGMPn_CugAAAUc"]
[Mon Jan 26 11:43:38.275961 2026] [:error] [pid 24556:tid 24580] [client 193.37.32.84:21967] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shelp.php"] [unique_id "aXbi6kyDW1_EbgDa3XKqOAAAAA8"]
[Mon Jan 26 11:43:38.737407 2026] [:error] [pid 61286:tid 61301] [client 193.37.32.84:28031] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXbi6snVt687wYGMPn_CvAAAAUs"]
[Mon Jan 26 11:43:39.246208 2026] [:error] [pid 24666:tid 24678] [client 193.37.32.95:56937] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aXbi65mH-L0_jbK3i9FpFgAAAMo"]
[Mon Jan 26 11:43:39.738844 2026] [:error] [pid 61286:tid 61311] [client 193.37.32.85:61283] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aXbi68nVt687wYGMPn_CwAAAAVU"]
[Mon Jan 26 11:43:40.098765 2026] [:error] [pid 24557:tid 24602] [client 193.37.32.105:36839] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aXbi7OrlG7Vm9pxV14yijQAAAEg"]
[Mon Jan 26 11:43:40.458495 2026] [:error] [pid 61286:tid 61312] [client 193.37.32.105:30943] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aXbi7MnVt687wYGMPn_CwgAAAVY"]
[Mon Jan 26 11:43:40.858524 2026] [:error] [pid 24556:tid 24566] [client 193.37.32.62:49175] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aXbi7EyDW1_EbgDa3XKqQQAAAAE"]
[Mon Jan 26 11:43:41.221791 2026] [:error] [pid 24557:tid 24604] [client 193.37.32.87:25261] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aXbi7erlG7Vm9pxV14yijgAAAEo"]
[Mon Jan 26 11:43:41.577866 2026] [:error] [pid 61287:tid 61334] [client 193.37.32.100:64027] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aXbi7dimZOwAM64CfR73xAAAAZE"]
[Mon Jan 26 11:43:41.957158 2026] [:error] [pid 24558:tid 24627] [client 193.37.32.99:43247] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aXbi7Qo1PXqeJqIMTQZOCQAAAIY"]
[Mon Jan 26 11:43:42.316127 2026] [:error] [pid 61252:tid 61274] [client 193.37.32.70:56657] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aXbi7rrGlf8FG2etxUAeZwAAARQ"]
[Mon Jan 26 11:43:42.841743 2026] [:error] [pid 61252:tid 61271] [client 193.37.32.58:28609] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aXbi7rrGlf8FG2etxUAeaAAAARE"]
[Mon Jan 26 11:43:43.266529 2026] [:error] [pid 61252:tid 61278] [client 193.37.32.87:24233] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aXbi77rGlf8FG2etxUAeaQAAARg"]
[Mon Jan 26 11:43:43.681299 2026] [:error] [pid 24556:tid 24586] [client 193.37.32.65:23563] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/directionality/"] [unique_id "aXbi70yDW1_EbgDa3XKqRgAAABU"]
[Mon Jan 26 11:43:44.055901 2026] [:error] [pid 24556:tid 24581] [client 193.37.32.57:63329] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aXbi8EyDW1_EbgDa3XKqSAAAABA"]
[Mon Jan 26 11:43:44.523959 2026] [:error] [pid 24558:tid 24626] [client 193.37.32.58:30531] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aXbi8Ao1PXqeJqIMTQZODAAAAIU"]
[Mon Jan 26 11:43:44.971885 2026] [:error] [pid 24666:tid 24669] [client 193.37.32.84:62311] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-content.php"] [unique_id "aXbi8JmH-L0_jbK3i9FpIgAAAME"]
[Mon Jan 26 11:43:45.339794 2026] [:error] [pid 61287:tid 61321] [client 193.37.32.83:56817] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aXbi8dimZOwAM64CfR73yQAAAYQ"]
[Mon Jan 26 11:43:45.708131 2026] [:error] [pid 24558:tid 24642] [client 193.37.32.85:38363] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aXbi8Qo1PXqeJqIMTQZODwAAAJU"]
[Mon Jan 26 11:43:46.149869 2026] [:error] [pid 61252:tid 61260] [client 193.37.32.95:23823] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "aXbi8rrGlf8FG2etxUAebgAAAQY"]
[Mon Jan 26 11:43:46.510632 2026] [:error] [pid 61287:tid 61329] [client 193.37.32.105:49475] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aXbi8timZOwAM64CfR73zAAAAYw"]
[Mon Jan 26 11:43:47.009312 2026] [:error] [pid 24666:tid 24671] [client 193.37.32.95:28973] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aXbi85mH-L0_jbK3i9FpJQAAAMM"]
[Mon Jan 26 11:43:47.364665 2026] [:error] [pid 24558:tid 24623] [client 193.37.32.87:29323] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aXbi8wo1PXqeJqIMTQZOEgAAAII"]
[Mon Jan 26 11:43:47.740153 2026] [:error] [pid 61252:tid 61277] [client 193.37.32.86:24709] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aXbi87rGlf8FG2etxUAecAAAARc"]
[Mon Jan 26 11:43:48.146118 2026] [:error] [pid 61252:tid 61254] [client 193.37.32.70:23509] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aXbi9LrGlf8FG2etxUAecQAAAQA"]
[Mon Jan 26 11:43:48.501026 2026] [:error] [pid 61287:tid 61323] [client 193.37.32.66:40445] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aXbi9NimZOwAM64CfR730QAAAYY"]
[Mon Jan 26 11:43:48.857519 2026] [:error] [pid 24556:tid 24578] [client 193.37.32.65:27359] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aXbi9EyDW1_EbgDa3XKqTwAAAA0"]
[Mon Jan 26 11:43:49.214165 2026] [:error] [pid 61287:tid 61331] [client 193.37.32.75:36033] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aXbi9dimZOwAM64CfR730wAAAY4"]
[Mon Jan 26 11:43:49.572914 2026] [:error] [pid 24557:tid 24615] [client 193.37.32.62:65199] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/more/about.php"] [unique_id "aXbi9erlG7Vm9pxV14yilQAAAFU"]
[Mon Jan 26 11:43:49.980091 2026] [:error] [pid 24666:tid 24692] [client 193.37.32.62:64255] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aXbi9ZmH-L0_jbK3i9FpKAAAANg"]
[Mon Jan 26 11:43:50.335584 2026] [:error] [pid 61252:tid 61264] [client 193.37.32.101:30233] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aXbi9rrGlf8FG2etxUAedQAAAQo"]
[Mon Jan 26 11:43:50.698865 2026] [:error] [pid 24666:tid 24669] [client 193.37.32.78:28609] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aXbi9pmH-L0_jbK3i9FpKgAAAME"]
[Mon Jan 26 11:43:51.058324 2026] [:error] [pid 61287:tid 61318] [client 193.37.32.60:39773] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/search/"] [unique_id "aXbi99imZOwAM64CfR731wAAAYE"]
[Mon Jan 26 11:43:51.419673 2026] [:error] [pid 61286:tid 61292] [client 193.37.32.92:22987] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/"] [unique_id "aXbi98nVt687wYGMPn_CzAAAAUI"]
[Mon Jan 26 11:43:51.774330 2026] [:error] [pid 24557:tid 24595] [client 193.37.32.55:63641] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aXbi9-rlG7Vm9pxV14yimgAAAEE"]
[Mon Jan 26 11:43:52.122453 2026] [:error] [pid 24666:tid 24677] [client 193.37.32.94:61347] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aXbi-JmH-L0_jbK3i9FpKwAAAMk"]
[Mon Jan 26 11:43:52.470523 2026] [:error] [pid 24556:tid 24568] [client 193.37.32.105:26911] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/site-title/about.php"] [unique_id "aXbi-EyDW1_EbgDa3XKqVQAAAAM"]
[Mon Jan 26 11:43:52.819663 2026] [:error] [pid 24666:tid 24668] [client 193.37.32.94:60413] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aXbi-JmH-L0_jbK3i9FpLQAAAMA"]
[Mon Jan 26 11:43:53.201489 2026] [:error] [pid 24666:tid 24672] [client 193.37.32.90:45037] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aXbi-ZmH-L0_jbK3i9FpLwAAAMQ"]
[Mon Jan 26 11:43:53.557934 2026] [:error] [pid 24666:tid 24681] [client 193.37.32.104:28665] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aXbi-ZmH-L0_jbK3i9FpMQAAAM0"]
[Mon Jan 26 11:43:53.913209 2026] [:error] [pid 24666:tid 24691] [client 193.37.32.77:45695] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aXbi-ZmH-L0_jbK3i9FpMwAAANc"]
[Mon Jan 26 11:43:54.293609 2026] [:error] [pid 24558:tid 24637] [client 193.37.32.92:53873] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aXbi-go1PXqeJqIMTQZOFwAAAJA"]
[Mon Jan 26 11:43:54.649882 2026] [:error] [pid 24556:tid 24570] [client 193.37.32.62:34883] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aXbi-kyDW1_EbgDa3XKqYgAAAAU"]
[Mon Jan 26 11:43:54.999597 2026] [:error] [pid 24558:tid 24645] [client 193.37.32.86:62393] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aXbi-go1PXqeJqIMTQZOGQAAAJg"]
[Mon Jan 26 11:43:55.347377 2026] [:error] [pid 61286:tid 61308] [client 193.37.32.80:25593] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aXbi-8nVt687wYGMPn_CzgAAAVI"]
[Mon Jan 26 11:43:55.706410 2026] [:error] [pid 61252:tid 61272] [client 193.37.32.69:26757] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aXbi-7rGlf8FG2etxUAeewAAARI"]
[Mon Jan 26 11:43:56.065570 2026] [:error] [pid 24557:tid 24605] [client 193.37.32.94:40099] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/update/function.php"] [unique_id "aXbi_OrlG7Vm9pxV14yingAAAEs"]
[Mon Jan 26 11:43:56.414361 2026] [:error] [pid 24556:tid 24565] [client 193.37.32.57:20085] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/_inc/img/about.php"] [unique_id "aXbi_EyDW1_EbgDa3XKqZQAAAAA"]
[Mon Jan 26 11:43:56.771933 2026] [:error] [pid 24558:tid 24621] [client 193.37.32.91:38445] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/spacer/about.php"] [unique_id "aXbi_Ao1PXqeJqIMTQZOHQAAAIA"]
[Mon Jan 26 11:43:57.149467 2026] [:error] [pid 24556:tid 24567] [client 193.37.32.96:43013] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-configs.php"] [unique_id "aXbi_UyDW1_EbgDa3XKqZwAAAAI"]
[Mon Jan 26 11:43:57.526122 2026] [:error] [pid 24558:tid 24627] [client 193.37.32.99:32505] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXbi_Qo1PXqeJqIMTQZOIQAAAIY"]
[Mon Jan 26 11:43:57.894114 2026] [:error] [pid 24557:tid 24608] [client 193.37.32.62:51759] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-pagination/"] [unique_id "aXbi_erlG7Vm9pxV14yinwAAAE4"]
[Mon Jan 26 11:43:58.256376 2026] [:error] [pid 24556:tid 24587] [client 193.37.32.64:26485] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/public_html/404.php"] [unique_id "aXbi_kyDW1_EbgDa3XKqaQAAABY"]
[Mon Jan 26 11:43:58.621814 2026] [:error] [pid 24556:tid 24570] [client 193.37.32.88:54719] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/database.php"] [unique_id "aXbi_kyDW1_EbgDa3XKqagAAAAU"]
[Mon Jan 26 11:43:58.977058 2026] [:error] [pid 24666:tid 24678] [client 193.37.32.79:23769] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-trackback.php"] [unique_id "aXbi_pmH-L0_jbK3i9FpOAAAAMo"]
[Mon Jan 26 11:43:59.336492 2026] [:error] [pid 61287:tid 61334] [client 193.37.32.83:31711] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/elish.php"] [unique_id "aXbi_9imZOwAM64CfR735QAAAZE"]
[Mon Jan 26 11:43:59.696944 2026] [:error] [pid 61287:tid 61317] [client 193.37.32.72:64691] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/enum.php"] [unique_id "aXbi_9imZOwAM64CfR735gAAAYA"]
[Mon Jan 26 11:44:00.064683 2026] [:error] [pid 24556:tid 24576] [client 193.37.32.56:42547] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aXbjAEyDW1_EbgDa3XKqbgAAAAs"]
[Mon Jan 26 11:44:00.494479 2026] [:error] [pid 61286:tid 61300] [client 193.37.32.70:58045] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aXbjAMnVt687wYGMPn_C0wAAAUo"]
[Mon Jan 26 11:44:00.852997 2026] [:error] [pid 24556:tid 24580] [client 193.37.32.84:26661] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/query/"] [unique_id "aXbjAEyDW1_EbgDa3XKqcAAAAA8"]
[Mon Jan 26 11:44:02.225736 2026] [:error] [pid 24666:tid 24673] [client 193.37.32.90:21937] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/wp-admin.php"] [unique_id "aXbjApmH-L0_jbK3i9FpOQAAAMU"]
[Mon Jan 26 11:44:02.580533 2026] [:error] [pid 61252:tid 61275] [client 193.37.32.61:40323] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/popularfx/template-parts/"] [unique_id "aXbjArrGlf8FG2etxUAegwAAARU"]
[Mon Jan 26 11:44:02.941803 2026] [:error] [pid 24558:tid 24636] [client 193.37.32.87:27555] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about-cong.php"] [unique_id "aXbjAgo1PXqeJqIMTQZOJAAAAI8"]
[Mon Jan 26 11:44:03.306973 2026] [:error] [pid 61252:tid 61267] [client 193.37.32.89:59037] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aXbjA7rGlf8FG2etxUAehAAAAQ0"]
[Mon Jan 26 11:44:03.655672 2026] [:error] [pid 24666:tid 24669] [client 193.37.32.82:34587] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aXbjA5mH-L0_jbK3i9FpPAAAAME"]
[Mon Jan 26 11:44:04.011598 2026] [:error] [pid 24558:tid 24643] [client 193.37.32.91:43773] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp.php"] [unique_id "aXbjBAo1PXqeJqIMTQZOJQAAAJY"]
[Mon Jan 26 11:44:04.409831 2026] [:error] [pid 24558:tid 24629] [client 193.37.32.82:38623] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-rocket-config/"] [unique_id "aXbjBAo1PXqeJqIMTQZOJgAAAIg"]
[Mon Jan 26 11:44:09.768259 2026] [:error] [pid 24666:tid 24674] [client 193.37.32.79:34929] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aXbjCZmH-L0_jbK3i9FpSAAAAMY"]
[Mon Jan 26 11:44:10.124746 2026] [:error] [pid 24557:tid 24596] [client 193.37.32.84:26749] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aXbjCurlG7Vm9pxV14yivAAAAEI"]
[Mon Jan 26 11:44:10.491888 2026] [:error] [pid 24556:tid 24573] [client 193.37.32.62:21383] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aXbjCkyDW1_EbgDa3XKqiwAAAAg"]
[Mon Jan 26 11:44:10.902656 2026] [:error] [pid 24558:tid 24631] [client 193.37.32.54:39337] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aXbjCgo1PXqeJqIMTQZOLQAAAIo"]
[Mon Jan 26 11:44:11.258520 2026] [:error] [pid 61252:tid 61268] [client 193.37.32.64:24283] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aXbjC7rGlf8FG2etxUAemwAAAQ4"]
[Mon Jan 26 11:44:11.650826 2026] [:error] [pid 24557:tid 24609] [client 193.37.32.99:39451] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aXbjC-rlG7Vm9pxV14yiwQAAAE8"]
[Mon Jan 26 11:44:12.021467 2026] [:error] [pid 24557:tid 24614] [client 193.37.32.92:44819] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aXbjDOrlG7Vm9pxV14yixAAAAFQ"]
[Mon Jan 26 11:44:12.506005 2026] [:error] [pid 24556:tid 24568] [client 193.37.32.75:25611] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "aXbjDEyDW1_EbgDa3XKqkAAAAAM"]
[Mon Jan 26 11:44:12.858706 2026] [:error] [pid 24558:tid 24623] [client 193.37.32.80:32299] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sama.php"] [unique_id "aXbjDAo1PXqeJqIMTQZOLwAAAII"]
[Mon Jan 26 11:44:13.241100 2026] [:error] [pid 61286:tid 61294] [client 193.37.32.78:28691] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aXbjDcnVt687wYGMPn_C9QAAAUQ"]
[Mon Jan 26 11:44:13.704473 2026] [:error] [pid 61286:tid 61311] [client 193.37.32.56:37421] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils/"] [unique_id "aXbjDcnVt687wYGMPn_C9gAAAVU"]
[Mon Jan 26 11:44:14.061297 2026] [:error] [pid 61252:tid 61274] [client 193.37.32.94:30195] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/gosmtp/"] [unique_id "aXbjDrrGlf8FG2etxUAenQAAARQ"]
[Mon Jan 26 11:44:14.480361 2026] [:error] [pid 61286:tid 61308] [client 193.37.32.87:21801] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/thickbox/"] [unique_id "aXbjDsnVt687wYGMPn_C9wAAAVI"]
[Mon Jan 26 11:44:14.863114 2026] [:error] [pid 24557:tid 24618] [client 193.37.32.67:43043] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aXbjDurlG7Vm9pxV14yiyQAAAFg"]
[Mon Jan 26 11:44:15.214891 2026] [:error] [pid 61287:tid 61328] [client 193.37.32.87:55715] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/plex1.php"] [unique_id "aXbjD9imZOwAM64CfR74AwAAAYs"]
[Mon Jan 26 11:44:15.564423 2026] [:error] [pid 61252:tid 61278] [client 193.37.32.84:22489] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/mlex.php"] [unique_id "aXbjD7rGlf8FG2etxUAenwAAARg"]
[Mon Jan 26 11:44:15.920266 2026] [:error] [pid 61287:tid 61336] [client 193.37.32.92:23891] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aXbjD9imZOwAM64CfR74BgAAAZM"]
[Mon Jan 26 11:44:17.277079 2026] [:error] [pid 24558:tid 24626] [client 193.37.32.65:30877] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aXbjEQo1PXqeJqIMTQZONQAAAIU"]
[Mon Jan 26 11:44:17.635600 2026] [:error] [pid 61287:tid 61341] [client 193.37.32.76:64055] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Noname6.php"] [unique_id "aXbjEdimZOwAM64CfR74CgAAAZg"]
[Mon Jan 26 11:44:17.993416 2026] [:error] [pid 61252:tid 61277] [client 193.37.32.91:31545] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/configYFW/about.php"] [unique_id "aXbjEbrGlf8FG2etxUAeogAAARc"]
[Mon Jan 26 11:44:18.353950 2026] [:error] [pid 61252:tid 61263] [client 193.37.32.92:30949] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aXbjErrGlf8FG2etxUAepAAAAQk"]
[Mon Jan 26 11:44:18.719912 2026] [:error] [pid 61287:tid 61335] [client 193.37.32.102:29497] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Transport/about.php"] [unique_id "aXbjEtimZOwAM64CfR74EgAAAZI"]
[Mon Jan 26 11:44:19.076939 2026] [:error] [pid 61287:tid 61322] [client 193.37.32.80:48421] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/about.php"] [unique_id "aXbjE9imZOwAM64CfR74FAAAAYU"]
[Mon Jan 26 11:44:19.448746 2026] [:error] [pid 61286:tid 61308] [client 193.37.32.86:27751] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aXbjE8nVt687wYGMPn_C_QAAAVI"]
[Mon Jan 26 11:44:19.826892 2026] [:error] [pid 61286:tid 61301] [client 193.37.32.81:61707] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-navigation-link/admin.php"] [unique_id "aXbjE8nVt687wYGMPn_C_gAAAUs"]
[Mon Jan 26 11:44:20.204978 2026] [:error] [pid 61286:tid 61305] [client 193.37.32.71:61977] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-site/about.php"] [unique_id "aXbjFMnVt687wYGMPn_C_wAAAU8"]
[Mon Jan 26 11:44:21.955483 2026] [:error] [pid 24556:tid 24577] [client 193.37.32.96:57245] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php"] [unique_id "aXbjFUyDW1_EbgDa3XKqlQAAAAw"]
[Mon Jan 26 11:44:22.313168 2026] [:error] [pid 61286:tid 61304] [client 193.37.32.105:30783] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/about.php"] [unique_id "aXbjFsnVt687wYGMPn_DAwAAAU4"]
[Mon Jan 26 11:44:22.700341 2026] [:error] [pid 61287:tid 61337] [client 193.37.32.80:46945] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXbjFtimZOwAM64CfR74GgAAAZQ"]
[Mon Jan 26 11:44:23.057609 2026] [:error] [pid 24558:tid 24637] [client 193.37.32.67:57793] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aXbjFwo1PXqeJqIMTQZOPAAAAJA"]
[Mon Jan 26 11:44:23.411478 2026] [:error] [pid 24556:tid 24580] [client 193.37.32.90:48629] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/acxx.php"] [unique_id "aXbjF0yDW1_EbgDa3XKqlgAAAA8"]
[Mon Jan 26 11:44:23.935866 2026] [:error] [pid 24556:tid 24575] [client 193.37.32.61:38977] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/newuser.php"] [unique_id "aXbjF0yDW1_EbgDa3XKqlwAAAAo"]
[Mon Jan 26 11:44:24.292967 2026] [:error] [pid 24557:tid 24615] [client 193.37.32.59:48219] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/Exception/"] [unique_id "aXbjGOrlG7Vm9pxV14yi1QAAAFU"]
[Mon Jan 26 11:44:24.665100 2026] [:error] [pid 24557:tid 24607] [client 193.37.32.90:48173] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aXbjGOrlG7Vm9pxV14yi1gAAAE0"]
[Mon Jan 26 11:44:25.013435 2026] [:error] [pid 24557:tid 24605] [client 193.37.32.104:21017] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/ty.php"] [unique_id "aXbjGerlG7Vm9pxV14yi2QAAAEs"]
[Mon Jan 26 11:44:25.386892 2026] [:error] [pid 24558:tid 24631] [client 193.37.32.66:49963] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "aXbjGQo1PXqeJqIMTQZOQgAAAIo"]
[Mon Jan 26 11:44:25.790061 2026] [:error] [pid 24556:tid 24581] [client 193.37.32.89:63811] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-date/"] [unique_id "aXbjGUyDW1_EbgDa3XKqmwAAABA"]
[Mon Jan 26 11:44:26.138820 2026] [:error] [pid 24556:tid 24576] [client 193.37.32.55:34093] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aXbjGkyDW1_EbgDa3XKqnAAAAAs"]
[Mon Jan 26 11:44:26.509855 2026] [:error] [pid 61252:tid 61266] [client 193.37.32.102:63555] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aXbjGrrGlf8FG2etxUAeswAAAQw"]
[Mon Jan 26 11:44:26.868435 2026] [:error] [pid 24557:tid 24600] [client 193.37.32.97:53657] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aXbjGurlG7Vm9pxV14yi3AAAAEY"]
[Mon Jan 26 11:44:27.228358 2026] [:error] [pid 24556:tid 24572] [client 193.37.32.68:34601] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXbjG0yDW1_EbgDa3XKqogAAAAc"]
[Mon Jan 26 11:44:27.592611 2026] [:error] [pid 24666:tid 24680] [client 193.37.32.92:33297] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aXbjG5mH-L0_jbK3i9FpUwAAAMw"]
[Mon Jan 26 11:44:27.945941 2026] [:error] [pid 61252:tid 61265] [client 193.37.32.102:24781] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/styles/blocks/"] [unique_id "aXbjG7rGlf8FG2etxUAetgAAAQs"]
[Mon Jan 26 11:44:28.341095 2026] [:error] [pid 61286:tid 61314] [client 193.37.32.58:55153] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/assets/fonts/ibm-plex-mono/"] [unique_id "aXbjHMnVt687wYGMPn_DBgAAAVg"]
[Mon Jan 26 11:44:28.722872 2026] [:error] [pid 61287:tid 61318] [client 193.37.32.54:54547] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Auth/admin.php"] [unique_id "aXbjHNimZOwAM64CfR74IQAAAYE"]
[Mon Jan 26 11:44:29.134127 2026] [:error] [pid 61287:tid 61332] [client 193.37.32.55:65163] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/filester/assets/css/cc.php"] [unique_id "aXbjHdimZOwAM64CfR74IgAAAY8"]
[Mon Jan 26 11:44:29.532918 2026] [:error] [pid 24556:tid 24575] [client 193.37.32.83:28575] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/modern/assets/images/"] [unique_id "aXbjHUyDW1_EbgDa3XKqpwAAAAo"]
[Mon Jan 26 11:44:29.885798 2026] [:error] [pid 61286:tid 61296] [client 193.37.32.85:61465] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/modern/includes/setup/config-setup.php"] [unique_id "aXbjHcnVt687wYGMPn_DCgAAAUY"]
[Mon Jan 26 11:44:30.234630 2026] [:error] [pid 61287:tid 61335] [client 193.37.32.57:51631] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Utility/admin.php"] [unique_id "aXbjHtimZOwAM64CfR74JAAAAZI"]
[Mon Jan 26 11:44:30.583757 2026] [:error] [pid 24558:tid 24639] [client 193.37.32.54:52413] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-pridmag/22x.php"] [unique_id "aXbjHgo1PXqeJqIMTQZORAAAAJI"]
[Mon Jan 26 11:44:30.942404 2026] [:error] [pid 61252:tid 61278] [client 193.37.32.55:32891] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wolf.php"] [unique_id "aXbjHrrGlf8FG2etxUAeugAAARg"]
[Mon Jan 26 11:44:31.370615 2026] [:error] [pid 24558:tid 24624] [client 193.37.32.103:39185] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/files/admin.php"] [unique_id "aXbjHwo1PXqeJqIMTQZORQAAAIM"]
[Mon Jan 26 11:44:31.741126 2026] [:error] [pid 61287:tid 61322] [client 193.37.32.61:21919] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aXbjH9imZOwAM64CfR74KAAAAYU"]
[Mon Jan 26 11:44:32.105781 2026] [:error] [pid 24556:tid 24574] [client 193.37.32.67:31333] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/plupload/"] [unique_id "aXbjIEyDW1_EbgDa3XKqrAAAAAk"]
[Mon Jan 26 11:44:32.469228 2026] [:error] [pid 61286:tid 61292] [client 193.37.32.87:21081] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/1.php"] [unique_id "aXbjIMnVt687wYGMPn_DDgAAAUI"]
[Mon Jan 26 11:44:32.829074 2026] [:error] [pid 24666:tid 24680] [client 193.37.32.94:38409] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aXbjIJmH-L0_jbK3i9FpWwAAAMw"]
[Mon Jan 26 11:44:34.201215 2026] [:error] [pid 24556:tid 24570] [client 193.37.32.102:56491] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aXbjIkyDW1_EbgDa3XKqrwAAAAU"]
[Mon Jan 26 11:44:34.554700 2026] [:error] [pid 24557:tid 24606] [client 193.37.32.70:55101] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/Mencintai.php"] [unique_id "aXbjIurlG7Vm9pxV14yi6QAAAEw"]
[Mon Jan 26 11:44:34.929645 2026] [:error] [pid 24557:tid 24595] [client 193.37.32.91:45121] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aXbjIurlG7Vm9pxV14yi7wAAAEE"]
[Mon Jan 26 11:44:35.325692 2026] [:error] [pid 24556:tid 24566] [client 193.37.32.103:44789] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bbn.php"] [unique_id "aXbjI0yDW1_EbgDa3XKqswAAAAE"]
[Mon Jan 26 11:44:35.685044 2026] [:error] [pid 24556:tid 24580] [client 193.37.32.96:43925] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/1.php"] [unique_id "aXbjI0yDW1_EbgDa3XKqtAAAAA8"]
[Mon Jan 26 11:44:36.041073 2026] [:error] [pid 24556:tid 24565] [client 193.37.32.73:53235] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/easy-bootstrap-shortcode-pro/1.php"] [unique_id "aXbjJEyDW1_EbgDa3XKqtQAAAAA"]
[Mon Jan 26 11:44:36.412286 2026] [:error] [pid 24556:tid 24571] [client 193.37.32.64:22861] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/really-simple-captcha/tmp/1.php"] [unique_id "aXbjJEyDW1_EbgDa3XKqtwAAAAY"]
[Mon Jan 26 11:44:36.771064 2026] [:error] [pid 24558:tid 24644] [client 193.37.32.87:64657] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aXbjJAo1PXqeJqIMTQZOTAAAAJc"]
[Mon Jan 26 11:44:37.128766 2026] [:error] [pid 24557:tid 24596] [client 193.37.32.95:60805] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aXbjJerlG7Vm9pxV14yi9AAAAEI"]
[Mon Jan 26 11:44:37.493928 2026] [:error] [pid 24556:tid 24572] [client 193.37.32.83:51911] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/public/admin.php"] [unique_id "aXbjJUyDW1_EbgDa3XKqvQAAAAc"]
[Mon Jan 26 11:44:37.862386 2026] [:error] [pid 24556:tid 24583] [client 193.37.32.55:56721] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/web/shell.php"] [unique_id "aXbjJUyDW1_EbgDa3XKqvgAAABI"]
[Mon Jan 26 11:44:38.260942 2026] [:error] [pid 24557:tid 24602] [client 193.37.32.65:53895] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aXbjJurlG7Vm9pxV14yi9gAAAEg"]
[Mon Jan 26 11:44:38.631083 2026] [:error] [pid 24666:tid 24670] [client 193.37.32.100:59027] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpai-woocommerce-add-on/models/import/about.php"] [unique_id "aXbjJpmH-L0_jbK3i9FpYwAAAMI"]
[Mon Jan 26 11:44:38.999655 2026] [:error] [pid 61252:tid 61256] [client 193.37.32.92:43009] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/public_html/admin.php"] [unique_id "aXbjJrrGlf8FG2etxUAezAAAAQI"]
[Mon Jan 26 11:44:39.376847 2026] [:error] [pid 61286:tid 61300] [client 193.37.32.61:32517] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aXbjJ8nVt687wYGMPn_DFwAAAUo"]
[Mon Jan 26 11:44:39.737733 2026] [:error] [pid 24556:tid 24586] [client 193.37.32.105:20441] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/et-pagebuilder/about.php"] [unique_id "aXbjJ0yDW1_EbgDa3XKqxAAAABU"]
[Mon Jan 26 11:44:40.114070 2026] [:error] [pid 24556:tid 24573] [client 193.37.32.91:28065] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aXbjKEyDW1_EbgDa3XKqxgAAAAg"]
[Mon Jan 26 11:44:41.545244 2026] [:error] [pid 24666:tid 24679] [client 193.37.32.58:58863] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/portfolio/seton/about.php"] [unique_id "aXbjKZmH-L0_jbK3i9FpaQAAAMs"]
[Mon Jan 26 11:44:41.907020 2026] [:error] [pid 24666:tid 24669] [client 193.37.32.71:62381] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/portfolio/about.php"] [unique_id "aXbjKZmH-L0_jbK3i9FpagAAAME"]
[Mon Jan 26 11:44:42.261294 2026] [:error] [pid 24556:tid 24582] [client 193.37.32.69:27369] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/single/about.php"] [unique_id "aXbjKkyDW1_EbgDa3XKqzQAAABE"]
[Mon Jan 26 11:44:42.631956 2026] [:error] [pid 61287:tid 61339] [client 193.37.32.56:35227] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/full/admin.php"] [unique_id "aXbjKtimZOwAM64CfR74MgAAAZY"]
[Mon Jan 26 11:44:48.106281 2026] [:error] [pid 61252:tid 61254] [client 193.37.32.93:21097] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-install.php"] [unique_id "aXbjMLrGlf8FG2etxUAe1wAAAQA"]
[Mon Jan 26 11:44:48.466824 2026] [:error] [pid 61287:tid 61328] [client 193.37.32.63:29073] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/405.php"] [unique_id "aXbjMNimZOwAM64CfR74OwAAAYs"]
[Mon Jan 26 11:44:48.842136 2026] [:error] [pid 24556:tid 24578] [client 193.37.32.84:50857] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sql.php"] [unique_id "aXbjMEyDW1_EbgDa3XKq2wAAAA0"]
[Mon Jan 26 11:44:49.197611 2026] [:error] [pid 24557:tid 24601] [client 193.37.32.71:36331] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/service.php"] [unique_id "aXbjMerlG7Vm9pxV14yjAwAAAEc"]
[Mon Jan 26 11:44:49.566616 2026] [:error] [pid 24666:tid 24676] [client 193.37.32.97:58761] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/nux.php"] [unique_id "aXbjMZmH-L0_jbK3i9FpcwAAAMg"]
[Mon Jan 26 11:44:49.923220 2026] [:error] [pid 61287:tid 61331] [client 193.37.32.60:53333] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aXbjMdimZOwAM64CfR74PQAAAY4"]
[Mon Jan 26 11:44:50.304372 2026] [:error] [pid 24666:tid 24681] [client 193.37.32.69:33929] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin/3d-flipbook-dflip-lite/3d-flipbook-dflip-lite.php"] [unique_id "aXbjMpmH-L0_jbK3i9FpdgAAAM0"]
[Mon Jan 26 11:44:50.686058 2026] [:error] [pid 24556:tid 24572] [client 193.37.32.94:47167] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/sss.php"] [unique_id "aXbjMkyDW1_EbgDa3XKq3gAAAAc"]
[Mon Jan 26 11:44:51.052993 2026] [:error] [pid 61252:tid 61272] [client 193.37.32.94:53121] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aXbjM7rGlf8FG2etxUAe2wAAARI"]
[Mon Jan 26 11:44:51.417746 2026] [:error] [pid 61252:tid 61257] [client 193.37.32.67:63881] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/buy.php"] [unique_id "aXbjM7rGlf8FG2etxUAe3QAAAQM"]
[Mon Jan 26 11:44:51.767959 2026] [:error] [pid 24666:tid 24670] [client 193.37.32.56:27155] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aXbjM5mH-L0_jbK3i9FpeQAAAMI"]
[Mon Jan 26 11:44:52.287529 2026] [:error] [pid 61252:tid 61262] [client 193.37.32.62:59923] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aXbjNLrGlf8FG2etxUAe4AAAAQg"]
[Mon Jan 26 11:44:52.640193 2026] [:error] [pid 24556:tid 24587] [client 193.37.32.86:46095] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/database.php"] [unique_id "aXbjNEyDW1_EbgDa3XKq4gAAABY"]
[Mon Jan 26 11:44:53.002493 2026] [:error] [pid 61252:tid 61254] [client 193.37.32.79:38337] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/obfuscate.php"] [unique_id "aXbjNbrGlf8FG2etxUAe4gAAAQA"]
[Mon Jan 26 11:44:53.359051 2026] [:error] [pid 24666:tid 24668] [client 193.37.32.104:33703] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/mabar88/inc/assets/images/lock.php"] [unique_id "aXbjNZmH-L0_jbK3i9FpegAAAMA"]
[Mon Jan 26 11:44:53.716369 2026] [:error] [pid 24666:tid 24674] [client 193.37.32.61:61413] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aXbjNZmH-L0_jbK3i9FpewAAAMY"]
[Mon Jan 26 11:44:54.067771 2026] [:error] [pid 61252:tid 61264] [client 193.37.32.55:55765] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aXbjNrrGlf8FG2etxUAe5AAAAQo"]
[Mon Jan 26 11:44:54.422456 2026] [:error] [pid 24556:tid 24573] [client 193.37.32.95:40681] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aXbjNkyDW1_EbgDa3XKq5QAAAAg"]
[Mon Jan 26 11:44:54.786852 2026] [:error] [pid 61287:tid 61319] [client 193.37.32.92:38805] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aXbjNtimZOwAM64CfR74QwAAAYI"]
[Mon Jan 26 11:44:55.148307 2026] [:error] [pid 61287:tid 61328] [client 193.37.32.70:31879] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aXbjN9imZOwAM64CfR74RQAAAYs"]
[Mon Jan 26 11:44:55.505872 2026] [:error] [pid 61286:tid 61309] [client 193.37.32.76:31527] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aXbjN8nVt687wYGMPn_DIAAAAVM"]
[Mon Jan 26 11:44:55.854810 2026] [:error] [pid 24557:tid 24595] [client 193.37.32.59:50767] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Decode/ahax.php"] [unique_id "aXbjN-rlG7Vm9pxV14yjEAAAAEE"]
[Mon Jan 26 11:44:56.202812 2026] [:error] [pid 24557:tid 24599] [client 193.37.32.104:40353] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/connects.php"] [unique_id "aXbjOOrlG7Vm9pxV14yjEwAAAEU"]
[Mon Jan 26 11:44:56.567222 2026] [:error] [pid 24557:tid 24613] [client 193.37.32.98:53387] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/alfa.php"] [unique_id "aXbjOOrlG7Vm9pxV14yjFQAAAFM"]
[Mon Jan 26 11:44:56.920163 2026] [:error] [pid 24557:tid 24617] [client 193.37.32.103:62707] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/css.php"] [unique_id "aXbjOOrlG7Vm9pxV14yjGAAAAFc"]
[Mon Jan 26 11:44:57.285763 2026] [:error] [pid 24557:tid 24606] [client 193.37.32.69:50957] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/hexa.php"] [unique_id "aXbjOerlG7Vm9pxV14yjGQAAAEw"]
[Mon Jan 26 11:44:57.639434 2026] [:error] [pid 61252:tid 61268] [client 193.37.32.57:41181] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aXbjObrGlf8FG2etxUAe6gAAAQ4"]
[Mon Jan 26 11:44:57.997716 2026] [:error] [pid 24557:tid 24603] [client 193.37.32.71:42041] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aXbjOerlG7Vm9pxV14yjGgAAAEk"]
[Mon Jan 26 11:44:59.364437 2026] [:error] [pid 24557:tid 24601] [client 193.37.32.96:20475] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aXbjO-rlG7Vm9pxV14yjHQAAAEc"]
[Mon Jan 26 11:44:59.722110 2026] [:error] [pid 24556:tid 24588] [client 193.37.32.87:51589] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/class-json.php"] [unique_id "aXbjO0yDW1_EbgDa3XKq8gAAABc"]
[Mon Jan 26 11:45:00.079444 2026] [:error] [pid 24556:tid 24567] [client 193.37.32.57:31483] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aXbjPEyDW1_EbgDa3XKq9AAAAAI"]
[Mon Jan 26 11:45:05.579534 2026] [:error] [pid 24666:tid 24671] [client 193.37.32.96:23205] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aXbjQZmH-L0_jbK3i9FphAAAAMM"]
[Mon Jan 26 11:45:06.035586 2026] [:error] [pid 24666:tid 24680] [client 193.37.32.66:41845] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aXbjQpmH-L0_jbK3i9FphgAAAMw"]
[Mon Jan 26 11:45:06.460201 2026] [:error] [pid 24558:tid 24627] [client 193.37.32.67:28311] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aXbjQgo1PXqeJqIMTQZOWAAAAIY"]
[Mon Jan 26 11:45:06.892228 2026] [:error] [pid 61286:tid 61299] [client 193.37.32.90:44371] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/checkout-for-woocommerce/templates/glass/about.php"] [unique_id "aXbjQsnVt687wYGMPn_DKQAAAUk"]
[Mon Jan 26 11:45:07.347229 2026] [:error] [pid 61287:tid 61337] [client 193.37.32.104:48401] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php"] [unique_id "aXbjQ9imZOwAM64CfR74TwAAAZQ"]
[Mon Jan 26 11:45:07.922637 2026] [:error] [pid 24558:tid 24631] [client 193.37.32.61:50191] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aXbjQwo1PXqeJqIMTQZOXQAAAIo"]
[Mon Jan 26 11:45:08.381334 2026] [:error] [pid 61286:tid 61310] [client 193.37.32.104:48905] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aXbjRMnVt687wYGMPn_DMAAAAVQ"]
[Mon Jan 26 11:45:08.773844 2026] [:error] [pid 24557:tid 24614] [client 193.37.32.99:23537] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options-privacy-part.php"] [unique_id "aXbjROrlG7Vm9pxV14yjKgAAAFQ"]
[Mon Jan 26 11:45:09.142653 2026] [:error] [pid 24666:tid 24690] [client 193.37.32.96:60689] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/link-template-variable.php"] [unique_id "aXbjRZmH-L0_jbK3i9FpigAAANY"]
[Mon Jan 26 11:45:09.676909 2026] [:error] [pid 24558:tid 24635] [client 193.37.32.78:45229] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php"] [unique_id "aXbjRQo1PXqeJqIMTQZOYgAAAI4"]
[Mon Jan 26 11:45:10.032458 2026] [:error] [pid 24557:tid 24618] [client 193.37.32.75:52079] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpfilemangersobject/"] [unique_id "aXbjRurlG7Vm9pxV14yjMgAAAFg"]
[Mon Jan 26 11:45:10.406689 2026] [:error] [pid 24558:tid 24627] [client 193.37.32.67:59303] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/media-text-double.php"] [unique_id "aXbjRgo1PXqeJqIMTQZOZwAAAIY"]
[Mon Jan 26 11:45:10.767930 2026] [:error] [pid 61287:tid 61330] [client 193.37.32.68:35909] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aXbjRtimZOwAM64CfR74WQAAAY0"]
[Mon Jan 26 11:45:11.147759 2026] [:error] [pid 24557:tid 24610] [client 193.37.32.90:26287] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/link-manager-first.php"] [unique_id "aXbjR-rlG7Vm9pxV14yjNQAAAFA"]
[Mon Jan 26 11:45:11.566633 2026] [:error] [pid 61287:tid 61318] [client 193.37.32.93:54143] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/miansha.php"] [unique_id "aXbjR9imZOwAM64CfR74WgAAAYE"]
[Mon Jan 26 11:45:11.913962 2026] [:error] [pid 24557:tid 24612] [client 193.37.32.98:38857] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/user.php"] [unique_id "aXbjR-rlG7Vm9pxV14yjNgAAAFI"]
[Mon Jan 26 11:45:12.288442 2026] [:error] [pid 61252:tid 61277] [client 193.37.32.72:39287] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xax.php"] [unique_id "aXbjSLrGlf8FG2etxUAe_QAAARc"]
[Mon Jan 26 11:45:12.638134 2026] [:error] [pid 24556:tid 24568] [client 193.37.32.103:31671] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/nodeinfo/theme.php"] [unique_id "aXbjSEyDW1_EbgDa3XKrAAAAAAM"]
[Mon Jan 26 11:45:13.001491 2026] [:error] [pid 61286:tid 61299] [client 193.37.32.69:23415] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mainhosting/past.php"] [unique_id "aXbjScnVt687wYGMPn_DNQAAAUk"]
[Mon Jan 26 11:45:13.382491 2026] [:error] [pid 24556:tid 24575] [client 193.37.32.79:51319] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/load.php"] [unique_id "aXbjSUyDW1_EbgDa3XKrAwAAAAo"]
[Mon Jan 26 11:45:13.732664 2026] [:error] [pid 24556:tid 24570] [client 193.37.32.70:46327] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aXbjSUyDW1_EbgDa3XKrBQAAAAU"]
[Mon Jan 26 11:45:14.123672 2026] [:error] [pid 24556:tid 24582] [client 193.37.32.89:53423] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/"] [unique_id "aXbjSkyDW1_EbgDa3XKrCAAAABE"]
[Mon Jan 26 22:53:35.852779 2026] [:error] [pid 24558:tid 24629] [client 196.51.204.106:38897] [client 196.51.204.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.51.204.106, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXd_7wo1PXqeJqIMTQa_hwAAAIg"], referer: https://makifim.com.au/
[Mon Jan 26 22:53:42.828068 2026] [:error] [pid 61252:tid 61261] [client 196.51.204.106:37881] [client 196.51.204.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.51.204.106, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXd_9rrGlf8FG2etxUCwCgAAAQc"], referer: https://makifim.com.au/
[Mon Jan 26 23:14:20.165600 2026] [:error] [pid 61287:tid 61340] [client 45.133.5.74:59227] [client 45.133.5.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.74, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXeEzNimZOwAM64CfR5y1QAAAZc"]
[Tue Jan 27 10:41:36.587079 2026] [autoindex:error] [pid 48445:tid 48452] [client 109.205.179.242:63546] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 27 11:43:00.217295 2026] [:error] [pid 48662:tid 48691] [client 64.225.49.30:51126] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aXg0ROD8iESUP9uRiROzLwAAApY"], referer: binance.com
[Tue Jan 27 13:10:34.285364 2026] [:error] [pid 48631:tid 48640] [client 93.123.109.175:56394] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aXhIyiN5eesHzEogX0wHfgAAAkc"]
[Tue Jan 27 17:53:49.588419 2026] [autoindex:error] [pid 7561:tid 7566] [client 167.99.118.47:64497] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 27 19:36:19.734413 2026] [:error] [pid 48662:tid 48691] [client 83.229.107.129:37535] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXijM-D8iESUP9uRiRPtJQAAApY"]
[Tue Jan 27 19:36:19.734429 2026] [:error] [pid 48528:tid 48548] [client 83.229.107.129:43923] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXijMwOGRrquT9N7CZpvfwAAAhI"]
[Tue Jan 27 19:36:19.734710 2026] [:error] [pid 48662:tid 48676] [client 83.229.107.129:44087] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXijM-D8iESUP9uRiRPtJgAAAog"]
[Tue Jan 27 19:36:23.193301 2026] [:error] [pid 48528:tid 48551] [client 83.229.107.129:36791] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXijNwOGRrquT9N7CZpvggAAAhU"]
[Tue Jan 27 19:37:38.063473 2026] [:error] [pid 39016:tid 39031] [client 83.229.107.129:40321] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXijgvB6_y9crthwy8qlAAAAAso"]
[Wed Jan 28 01:49:59.773704 2026] [:error] [pid 24425:tid 24454] [client 93.123.109.175:48920] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aXj6xx_qUCA3SusVe0uMXgAAARg"]
[Wed Jan 28 04:52:37.506020 2026] [proxy_fcgi:error] [pid 58254:tid 58256] [client 103.4.122.14:45724] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Jan 28 04:53:31.333824 2026] [proxy_fcgi:error] [pid 58254:tid 58277] [client 103.4.122.14:45956] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/updraftplus/includes/Google/Service/Manager.php', 'www.apache.org', '', '\xa6i\xdc:'),('wp-content/plugins/updraftplus/includes/Google/Service/Manager.php', 'developers.google.com', '', '\\Z}{E'),('wp-content/plugins/updraftplus/includes/Google/Service/Manager.php', 'www.googleapis.com', '', 'O\x10\x1f\x89') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWritePHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfhoover (owner, host, path, hostKey) VALUES ('wp-content/plugins/wp-mail-smtp-pro/vendor_prefixed/google/apiclient-services/src/Gmail/CseIdentity.php', 'www.apache.org', '', '\xa6i\xdc:') made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine->doScan, wfScanEngine->scan_fileContents_main, wordfenceScanner->scan, wordfenceURLHoover->hoover, wordfenceURLHoover->writeHosts, wfDB->queryWrite'
[Wed Jan 28 04:57:47.159617 2026] [proxy_fcgi:error] [pid 58254:tid 58260] [client 103.4.122.14:47054] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Jan 28 05:17:51.707243 2026] [autoindex:error] [pid 17425:tid 17476] [client 45.154.138.8:35175] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:17:52.187929 2026] [autoindex:error] [pid 17425:tid 17463] [client 45.154.138.8:35175] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:17:52.664208 2026] [autoindex:error] [pid 17425:tid 17480] [client 45.154.138.8:35175] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 17:35:43.066636 2026] [proxy_fcgi:error] [pid 33491:tid 33572] [client 94.103.87.20:48368] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1769592942.8719909191131591796875', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Wed Jan 28 17:37:45.709268 2026] [proxy_fcgi:error] [pid 2625:tid 2634] [client 94.103.87.20:51790] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1769593065.6772420406341552734375', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Wed Jan 28 17:38:33.254599 2026] [:error] [pid 24452:tid 24478] [client 94.103.87.20:51848] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXnZGf0RQOh_GmqmVyY8xgAAAZg"]
[Wed Jan 28 17:38:54.979742 2026] [:error] [pid 42740:tid 42747] [client 94.103.87.20:39414] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXnZLlnjAS34srJlXgR9aAAAAIU"]
[Wed Jan 28 17:48:20.012715 2026] [:error] [pid 33580:tid 33588] [client 94.103.87.20:59114] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXnbZJlb0QJtwfka8l475wAAAQE"]
[Wed Jan 28 17:48:41.544180 2026] [:error] [pid 33489:tid 33503] [client 94.103.87.20:59816] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B8%AD%E0%B9%80%E0%B8%A1%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2.aspx"] [unique_id "aXnbeRZrVZwQUFWC7_8tfgAAAAo"]
[Wed Jan 28 17:58:06.268957 2026] [:error] [pid 33636:tid 33655] [client 94.103.87.20:59546] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/allslot888.aspx"] [unique_id "aXndrtIVZAudQH0BSC4aMAAAAhE"]
[Wed Jan 28 17:58:27.880928 2026] [:error] [pid 33490:tid 33547] [client 94.103.87.20:33342] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoslot.aspx"] [unique_id "aXndw2jexcy58gsBPJF00gAAAFc"]
[Wed Jan 28 18:07:52.844661 2026] [:error] [pid 2625:tid 2647] [client 94.103.87.20:56434] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXnf-FZhY64HvuPd7w1BnQAAAVA"]
[Wed Jan 28 18:08:14.381190 2026] [:error] [pid 33490:tid 33533] [client 94.103.87.20:49208] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXngDmjexcy58gsBPJF3cAAAAEk"]
[Wed Jan 28 18:17:39.175256 2026] [:error] [pid 2625:tid 2642] [client 94.103.87.20:36474] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXniQ1ZhY64HvuPd7w1DlwAAAUs"]
[Wed Jan 28 18:18:00.766645 2026] [:error] [pid 24452:tid 24471] [client 94.103.87.20:32814] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wow%20slot%20%E0%B8%A1%E0%B8%B2%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXniWP0RQOh_GmqmVyZHVwAAAZE"]
[Wed Jan 28 23:15:50.475041 2026] [:error] [pid 24452:tid 24464] [client 213.209.159.151:45102] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXooJv0RQOh_GmqmVyagcAAAAYo"]
[Thu Jan 29 01:37:39.608759 2026] [:error] [pid 30729:tid 30798] [client 188.165.217.198:32776] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXpJY4HlkRFkYwysACcsJgAAAMo"]
[Thu Jan 29 01:38:24.010782 2026] [:error] [pid 32451:tid 32453] [client 188.165.217.198:54190] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXpJkBnhmSN6e0P4d6s_QAAAAUA"]
[Thu Jan 29 01:42:07.821321 2026] [:error] [pid 30817:tid 30824] [client 188.165.217.198:53542] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpKb5kL00co11SGgyo0lwAAAIQ"]
[Thu Jan 29 01:45:55.106964 2026] [:error] [pid 32302:tid 32326] [client 188.165.217.198:55600] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m24%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpLU86l7zUXFnfUB7UiCgAAARY"]
[Thu Jan 29 01:46:32.795923 2026] [:error] [pid 32598:tid 32615] [client 188.165.217.198:47838] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/magnum%204d%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%20%E0%B8%A1%E0%B8%B2%E0%B9%80%E0%B8%A5%20%E0%B8%A2%E0%B9%8C%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXpLeFY4u2FXFuCu0C4R0wAAAY8"]
[Thu Jan 29 01:50:22.079972 2026] [:error] [pid 33151:tid 33214] [client 188.165.217.198:48532] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aXpMXmtRH8LcJJ0AyU6s6wAAAlA"]
[Thu Jan 29 01:55:31.133778 2026] [:error] [pid 30729:tid 30808] [client 188.165.217.198:51880] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXpNk4HlkRFkYwysACcvtgAAANQ"]
[Thu Jan 29 03:22:28.356648 2026] [:error] [pid 64076:tid 64102] [client 52.141.6.155:52441] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aXph9MgWS9sk7GfiNFedOAAAApg"]
[Thu Jan 29 03:22:29.372246 2026] [:error] [pid 32895:tid 32906] [client 52.141.6.155:52483] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aXph9XQ85pgihG9SXurbYwAAAgk"]
[Thu Jan 29 03:22:31.585313 2026] [:error] [pid 33151:tid 33204] [client 52.141.6.155:60725] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aXph92tRH8LcJJ0AyU7IhgAAAkc"]
[Thu Jan 29 03:22:33.450452 2026] [:error] [pid 32895:tid 32898] [client 52.141.6.155:60714] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aXph-XQ85pgihG9SXurbZwAAAgE"]
[Thu Jan 29 03:22:34.434445 2026] [:error] [pid 64139:tid 64142] [client 52.141.6.155:60678] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aXph-k8_llMXywnNBzhZqAAAAwE"]
[Thu Jan 29 03:22:37.027869 2026] [:error] [pid 32747:tid 32749] [client 52.141.6.155:57112] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aXph_f0et-wQsmVMWlk2BwAAAcA"]
[Thu Jan 29 03:22:37.723299 2026] [:error] [pid 32598:tid 32602] [client 52.141.6.155:53980] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aXph_VY4u2FXFuCu0C4m5AAAAYI"]
[Thu Jan 29 03:22:39.438032 2026] [:error] [pid 30817:tid 30842] [client 52.141.6.155:51890] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aXph_5kL00co11SGgypMSgAAAJY"]
[Thu Jan 29 03:22:40.137701 2026] [:error] [pid 32451:tid 32471] [client 52.141.6.155:54029] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geaitasa.php"] [unique_id "aXpiABnhmSN6e0P4d6ta-wAAAVI"]
[Thu Jan 29 03:22:45.312593 2026] [:error] [pid 32598:tid 32604] [client 52.141.6.155:53998] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geaitasa.php"] [unique_id "aXpiBVY4u2FXFuCu0C4m6AAAAYQ"]
[Thu Jan 29 03:22:46.114424 2026] [:error] [pid 64139:tid 64165] [client 52.141.6.155:56701] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geaitasa.php"] [unique_id "aXpiBk8_llMXywnNBzhZswAAAxg"]
[Thu Jan 29 03:23:05.465272 2026] [:error] [pid 30727:tid 30739] [client 52.141.6.155:58179] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-cc.php"] [unique_id "aXpiGZ6XAsWrB4DloY_etAAAAAg"]
[Thu Jan 29 03:23:08.192396 2026] [:error] [pid 30817:tid 30822] [client 52.141.6.155:7513] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-cc.php"] [unique_id "aXpiHJkL00co11SGgypMZQAAAII"]
[Thu Jan 29 03:23:09.177029 2026] [:error] [pid 32895:tid 32902] [client 52.141.6.155:64008] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-cc.php"] [unique_id "aXpiHXQ85pgihG9SXurbggAAAgU"]
[Thu Jan 29 03:23:10.620819 2026] [:error] [pid 32598:tid 32624] [client 52.141.6.155:59424] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-cc.php"] [unique_id "aXpiHlY4u2FXFuCu0C4nCgAAAZg"]
[Thu Jan 29 03:23:14.651079 2026] [:error] [pid 33151:tid 33204] [client 52.141.6.155:61644] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aXpiImtRH8LcJJ0AyU7IyQAAAkc"]
[Thu Jan 29 03:23:19.569760 2026] [:error] [pid 33151:tid 33222] [client 52.141.6.155:59409] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aXpiJ2tRH8LcJJ0AyU7IzQAAAlg"]
[Thu Jan 29 03:23:20.048125 2026] [:error] [pid 64076:tid 64097] [client 52.141.6.155:63977] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aXpiKMgWS9sk7GfiNFedVQAAApM"]
[Thu Jan 29 03:24:14.931152 2026] [:error] [pid 64139:tid 64146] [client 52.141.6.155:56548] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzzaq.php"] [unique_id "aXpiXk8_llMXywnNBzhaEAAAAwU"]
[Thu Jan 29 03:24:17.576801 2026] [:error] [pid 30727:tid 30745] [client 52.141.6.155:60855] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzzaq.php"] [unique_id "aXpiYZ6XAsWrB4DloY_e_AAAAA4"]
[Thu Jan 29 03:24:21.251119 2026] [:error] [pid 30817:tid 30822] [client 52.141.6.155:54365] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzzaq.php"] [unique_id "aXpiZZkL00co11SGgypM2QAAAII"]
[Thu Jan 29 03:24:24.460317 2026] [:error] [pid 32895:tid 32910] [client 52.141.6.155:60805] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzzaq.php"] [unique_id "aXpiaHQ85pgihG9SXurb3gAAAg0"]
[Thu Jan 29 03:24:26.147614 2026] [:error] [pid 32451:tid 32461] [client 52.141.6.155:40584] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abtpn.php"] [unique_id "aXpiahnhmSN6e0P4d6tbdgAAAUg"]
[Thu Jan 29 03:24:31.009738 2026] [:error] [pid 33151:tid 33220] [client 52.141.6.155:56604] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abtpn.php"] [unique_id "aXpib2tRH8LcJJ0AyU7JZgAAAlY"]
[Thu Jan 29 03:24:33.225622 2026] [:error] [pid 30817:tid 30841] [client 52.141.6.155:61117] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abtpn.php"] [unique_id "aXpicZkL00co11SGgypM-AAAAJU"]
[Thu Jan 29 03:24:34.723726 2026] [:error] [pid 30729:tid 30795] [client 52.141.6.155:40618] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abtpn.php"] [unique_id "aXpicoHlkRFkYwysACdCRAAAAMc"]
[Thu Jan 29 03:24:35.378711 2026] [:error] [pid 32598:tid 32612] [client 52.141.6.155:64489] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my1.php"] [unique_id "aXpic1Y4u2FXFuCu0C4nfQAAAYw"]
[Thu Jan 29 03:24:38.764182 2026] [:error] [pid 32598:tid 32601] [client 52.141.6.155:64461] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my1.php"] [unique_id "aXpidlY4u2FXFuCu0C4nggAAAYE"]
[Thu Jan 29 03:24:41.580413 2026] [:error] [pid 32598:tid 32603] [client 52.141.6.155:40626] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my1.php"] [unique_id "aXpieVY4u2FXFuCu0C4nhwAAAYM"]
[Thu Jan 29 03:24:42.737958 2026] [:error] [pid 32598:tid 32611] [client 52.141.6.155:40628] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my1.php"] [unique_id "aXpielY4u2FXFuCu0C4niAAAAYs"]
[Thu Jan 29 03:24:46.076216 2026] [:error] [pid 33151:tid 33220] [client 52.141.6.155:60994] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/taktak.php"] [unique_id "aXpifmtRH8LcJJ0AyU7JeQAAAlY"]
[Thu Jan 29 03:24:49.502598 2026] [:error] [pid 32451:tid 32470] [client 52.141.6.155:40591] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/taktak.php"] [unique_id "aXpigRnhmSN6e0P4d6tbjQAAAVE"]
[Thu Jan 29 03:24:55.218724 2026] [:error] [pid 32747:tid 32769] [client 52.141.6.155:7324] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/taktak.php"] [unique_id "aXpih_0et-wQsmVMWlk2ywAAAdQ"]
[Thu Jan 29 03:24:56.453230 2026] [:error] [pid 30729:tid 30797] [client 52.141.6.155:37985] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/taktak.php"] [unique_id "aXpiiIHlkRFkYwysACdCWAAAAMk"]
[Thu Jan 29 03:24:57.211456 2026] [:error] [pid 64139:tid 64142] [client 52.141.6.155:7629] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aXpiiU8_llMXywnNBzhaOQAAAwE"]
[Thu Jan 29 03:24:58.488768 2026] [:error] [pid 30727:tid 30754] [client 52.141.6.155:54354] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aXpiip6XAsWrB4DloY_fHgAAABc"]
[Thu Jan 29 03:24:59.657417 2026] [:error] [pid 30817:tid 30830] [client 52.141.6.155:61022] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aXpii5kL00co11SGgypNMwAAAIo"]
[Thu Jan 29 03:25:01.634276 2026] [:error] [pid 30729:tid 30811] [client 52.141.6.155:8066] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aXpijYHlkRFkYwysACdCYQAAANc"]
[Thu Jan 29 03:25:03.219836 2026] [:error] [pid 64139:tid 64154] [client 52.141.6.155:7314] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ypukprhr.php"] [unique_id "aXpij08_llMXywnNBzhaPgAAAw0"]
[Thu Jan 29 03:25:04.948527 2026] [:error] [pid 33151:tid 33201] [client 52.141.6.155:7734] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ypukprhr.php"] [unique_id "aXpikGtRH8LcJJ0AyU7JnQAAAkQ"]
[Thu Jan 29 03:25:07.407151 2026] [:error] [pid 30727:tid 30752] [client 52.141.6.155:7742] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ypukprhr.php"] [unique_id "aXpik56XAsWrB4DloY_fKwAAABU"]
[Thu Jan 29 03:25:11.911498 2026] [:error] [pid 33151:tid 33209] [client 52.141.6.155:7954] [client 52.141.6.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ypukprhr.php"] [unique_id "aXpil2tRH8LcJJ0AyU7JqAAAAkw"]
[Thu Jan 29 03:33:52.630753 2026] [:error] [pid 16050:tid 16060] [client 47.90.227.150:53906] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXpkoOFPpSEbViHfa9KQgwAAAMY"]
[Thu Jan 29 03:33:53.066184 2026] [:error] [pid 15950:tid 16031] [client 47.90.227.150:57864] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXpkoYJOXwUqBC55abQrpgAAAIw"]
[Thu Jan 29 08:37:59.671075 2026] [autoindex:error] [pid 20486:tid 20493] [client 164.68.99.221:53946] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 29 16:36:56.165954 2026] [:error] [pid 20519:tid 20558] [client 62.84.185.60:61894] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXscKAo4s4fyROrkyRm20gAAAYo"]
[Thu Jan 29 16:37:17.406385 2026] [:error] [pid 20579:tid 20645] [client 62.84.185.60:35710] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg.aspx"] [unique_id "aXscPTVXNopcNyjJc9XrvgAAAkQ"]
[Thu Jan 29 16:46:19.414329 2026] [:error] [pid 20519:tid 20554] [client 62.84.185.60:30222] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXseWwo4s4fyROrkyRm4vwAAAYY"]
[Thu Jan 29 16:46:40.552145 2026] [:error] [pid 20486:tid 20509] [client 62.84.185.60:8748] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pk789%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXsecHgqSZb6GBx5nnPCOgAAARQ"]
[Thu Jan 29 16:55:41.713014 2026] [:error] [pid 20579:tid 20659] [client 62.84.185.60:39438] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aXsgjTVXNopcNyjJc9Xu3QAAAlI"]
[Thu Jan 29 16:56:02.697678 2026] [:error] [pid 20578:tid 20635] [client 62.84.185.60:59874] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ruay.%20org%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXsgog6UX7yOMwQFiycINAAAAhY"]
[Thu Jan 29 17:05:03.505452 2026] [:error] [pid 20579:tid 20646] [client 62.84.185.60:32282] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXsivzVXNopcNyjJc9XwHwAAAkU"]
[Thu Jan 29 17:05:24.568160 2026] [:error] [pid 19069:tid 19089] [client 62.84.185.60:10302] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXsi1PDHsRM4BJ9a4QsUYgAAAAs"]
[Thu Jan 29 17:10:11.386048 2026] [:error] [pid 20580:tid 20676] [client 103.4.122.14:39444] [client 103.4.122.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "94.23.188.219_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aXsj8JCZ5HHdXPmeL5_1kwAAAog"]
[Thu Jan 29 17:14:26.532982 2026] [:error] [pid 20578:tid 20630] [client 62.84.185.60:44862] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXsk8g6UX7yOMwQFiycLOAAAAhE"]
[Thu Jan 29 17:14:47.621761 2026] [:error] [pid 20486:tid 20503] [client 62.84.185.60:32464] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXslB3gqSZb6GBx5nnPH6AAAAQ4"]
[Thu Jan 29 17:23:50.984879 2026] [:error] [pid 20579:tid 20647] [client 62.84.185.60:5176] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/slotpg.aspx"] [unique_id "aXsnJjVXNopcNyjJc9XzpQAAAkY"]
[Thu Jan 29 17:24:12.134810 2026] [:error] [pid 19069:tid 19087] [client 62.84.185.60:27240] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aXsnPPDHsRM4BJ9a4QsbTAAAAAk"]
[Thu Jan 29 17:37:35.756667 2026] [:error] [pid 19177:tid 19184] [client 62.84.185.60:28012] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXsqX3ipGz0PT8TrQv5uSwAAAMU"]
[Thu Jan 29 17:37:56.932059 2026] [:error] [pid 19069:tid 19082] [client 62.84.185.60:45816] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2031%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXsqdPDHsRM4BJ9a4QsgAQAAAAQ"]
[Thu Jan 29 17:46:58.247669 2026] [:error] [pid 19069:tid 19091] [client 62.84.185.60:27590] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufa356%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXsskvDHsRM4BJ9a4QsiBQAAAA0"]
[Thu Jan 29 17:47:19.502738 2026] [:error] [pid 20519:tid 20567] [client 62.84.185.60:39642] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufa369%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXsspwo4s4fyROrkyRnDEgAAAZM"]
[Thu Jan 29 17:56:20.578336 2026] [:error] [pid 19069:tid 19098] [client 62.84.185.60:46384] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXsuxPDHsRM4BJ9a4QslcAAAABQ"]
[Thu Jan 29 17:56:41.792697 2026] [:error] [pid 20578:tid 20615] [client 62.84.185.60:37622] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20168.aspx"] [unique_id "aXsu2Q6UX7yOMwQFiycTNgAAAgI"]
[Thu Jan 29 17:59:25.327005 2026] [:error] [pid 19177:tid 19194] [client 62.84.185.60:36316] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXsvfXipGz0PT8TrQv5yDwAAAM8"]
[Thu Jan 29 17:59:46.496108 2026] [:error] [pid 20519:tid 20564] [client 62.84.185.60:38732] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXsvkgo4s4fyROrkyRnFrQAAAZA"]
[Thu Jan 29 18:00:07.644191 2026] [:error] [pid 20486:tid 20506] [client 62.84.185.60:37718] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXsvp3gqSZb6GBx5nnPSewAAARE"]
[Thu Jan 29 18:05:13.222049 2026] [:error] [pid 20580:tid 20678] [client 62.84.185.60:27796] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet1212%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXsw2ZCZ5HHdXPmeL58FBAAAAoo"]
[Thu Jan 29 18:05:34.227426 2026] [:error] [pid 19177:tid 19196] [client 62.84.185.60:57184] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet168%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXsw7nipGz0PT8TrQv5zZQAAANE"]
[Thu Jan 29 18:05:55.292641 2026] [:error] [pid 20486:tid 20511] [client 62.84.185.60:4170] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet168.aspx"] [unique_id "aXsxA3gqSZb6GBx5nnPUJAAAARY"]
[Thu Jan 29 18:06:39.777893 2026] [:error] [pid 19071:tid 19137] [client 62.84.185.60:10282] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet1688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXsxL5fa8Ix5wWmtmJxlNQAAAIQ"]
[Thu Jan 29 18:07:00.856988 2026] [:error] [pid 20486:tid 20490] [client 62.84.185.60:7940] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet289.aspx"] [unique_id "aXsxRHgqSZb6GBx5nnPUYwAAAQE"]
[Thu Jan 29 18:07:46.596635 2026] [:error] [pid 20580:tid 20678] [client 62.84.185.60:12020] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet365%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXsxcpCZ5HHdXPmeL58FmgAAAoo"]
[Thu Jan 29 18:08:07.683303 2026] [:error] [pid 20578:tid 20617] [client 62.84.185.60:16280] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet777.aspx"] [unique_id "aXsxhw6UX7yOMwQFiycV6wAAAgQ"]
[Thu Jan 29 18:08:28.809708 2026] [:error] [pid 20519:tid 20559] [client 62.84.185.60:5080] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ufabet789.aspx"] [unique_id "aXsxnAo4s4fyROrkyRnHhQAAAYs"]
[Thu Jan 29 19:25:24.272074 2026] [:error] [pid 20579:tid 20659] [client 147.135.212.217:43170] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXtDpDVXNopcNyjJc9UMBwAAAlI"]
[Thu Jan 29 19:25:45.245780 2026] [:error] [pid 19069:tid 19097] [client 147.135.212.217:51742] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtDufDHsRM4BJ9a4QtFgAAAABM"]
[Thu Jan 29 19:34:42.078897 2026] [:error] [pid 20579:tid 20657] [client 147.135.212.217:46192] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXtF0jVXNopcNyjJc9UN5gAAAlA"]
[Thu Jan 29 19:35:03.120827 2026] [:error] [pid 20578:tid 20618] [client 147.135.212.217:37126] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXtF5w6UX7yOMwQFiycm4gAAAgU"]
[Thu Jan 29 19:43:57.830751 2026] [:error] [pid 20486:tid 20500] [client 147.135.212.217:55618] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXtH_XgqSZb6GBx5nnPr2wAAAQs"]
[Thu Jan 29 19:44:18.756033 2026] [:error] [pid 19177:tid 19196] [client 147.135.212.217:55124] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20k9win.aspx"] [unique_id "aXtIEnipGz0PT8TrQv6GXQAAANE"]
[Thu Jan 29 19:53:15.454851 2026] [:error] [pid 19070:tid 19122] [client 147.135.212.217:53258] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXtKK7ou83lIon_aKgbd8QAAAFA"]
[Thu Jan 29 19:53:36.389205 2026] [:error] [pid 19069:tid 19097] [client 147.135.212.217:38488] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%2030.aspx"] [unique_id "aXtKQPDHsRM4BJ9a4QtQKQAAABM"]
[Thu Jan 29 20:02:31.698481 2026] [:error] [pid 20579:tid 20648] [client 147.135.212.217:43902] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtMVzVXNopcNyjJc9UUjgAAAkc"]
[Thu Jan 29 20:02:52.534159 2026] [:error] [pid 20486:tid 20502] [client 147.135.212.217:49870] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXtMbHgqSZb6GBx5nnPw7AAAAQ0"]
[Thu Jan 29 20:15:14.411865 2026] [:error] [pid 19070:tid 19125] [client 147.135.212.217:57142] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtPUrou83lIon_aKgbilQAAAFM"]
[Thu Jan 29 20:15:35.388320 2026] [:error] [pid 20579:tid 20651] [client 147.135.212.217:36084] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtPZzVXNopcNyjJc9UW1AAAAko"]
[Thu Jan 29 20:33:10.825301 2026] [:error] [pid 19071:tid 19156] [client 147.135.212.217:50486] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXtThpfa8Ix5wWmtmJyG4AAAAJc"]
[Thu Jan 29 20:33:31.769824 2026] [:error] [pid 20519:tid 20570] [client 147.135.212.217:49578] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtTmwo4s4fyROrkyRnhpwAAAZY"]
[Thu Jan 29 20:42:29.142530 2026] [:error] [pid 19069:tid 19092] [client 147.135.212.217:37936] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81.aspx"] [unique_id "aXtVtfDHsRM4BJ9a4Qth5gAAAA4"]
[Thu Jan 29 20:42:50.150660 2026] [:error] [pid 20486:tid 20502] [client 147.135.212.217:47260] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXtVyngqSZb6GBx5nnP6vQAAAQ0"]
[Thu Jan 29 20:51:45.948845 2026] [:error] [pid 19070:tid 19114] [client 147.135.212.217:36544] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aXtX4bou83lIon_aKgbqEwAAAEg"]
[Thu Jan 29 20:52:06.874591 2026] [:error] [pid 20576:tid 20599] [client 147.135.212.217:45366] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXtX9irDZws_FlQGi9dzxQAAAc0"]
[Thu Jan 29 21:01:02.981112 2026] [:error] [pid 20519:tid 20567] [client 147.135.212.217:51198] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtaDgo4s4fyROrkyRnnIAAAAZM"]
[Thu Jan 29 21:01:23.903419 2026] [:error] [pid 19069:tid 19088] [client 147.135.212.217:41082] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%81%E0%B8%97%E0%B9%88%E0%B8%87%E0%B8%AB%E0%B8%A7%E0%B8%A224%20net%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtaI_DHsRM4BJ9a4QtpNgAAAAo"]
[Thu Jan 29 21:10:20.870777 2026] [:error] [pid 20576:tid 20609] [client 147.135.212.217:48474] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx"] [unique_id "aXtcPCrDZws_FlQGi9d3GwAAAdc"]
[Thu Jan 29 21:10:41.839862 2026] [:error] [pid 20576:tid 20588] [client 147.135.212.217:57850] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z16%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtcUSrDZws_FlQGi9d3LgAAAcI"]
[Thu Jan 29 22:28:25.622064 2026] [:error] [pid 20579:tid 20658] [client 47.90.227.150:37954] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXtuiTVXNopcNyjJc9UxyAAAAlE"]
[Thu Jan 29 22:28:26.031432 2026] [:error] [pid 20580:tid 20681] [client 47.90.227.150:36960] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aXtuipCZ5HHdXPmeL59NhAAAAo0"]
[Thu Jan 29 22:59:15.930173 2026] [:error] [pid 20519:tid 20563] [client 185.231.100.76:33212] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B9%84%E0%B8%94%E0%B9%89100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXt1wwo4s4fyROrkyRkHZQAAAY8"]
[Thu Jan 29 22:59:37.049651 2026] [:error] [pid 20580:tid 20689] [client 185.231.100.76:38492] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXt12ZCZ5HHdXPmeL59UjAAAApU"]
[Thu Jan 29 23:08:40.002065 2026] [:error] [pid 20580:tid 20675] [client 185.231.100.76:46680] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXt3-JCZ5HHdXPmeL59WEQAAAoc"]
[Thu Jan 29 23:09:01.185700 2026] [:error] [pid 20486:tid 20493] [client 185.231.100.76:56712] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXt4DXgqSZb6GBx5nnMeogAAAQQ"]
[Thu Jan 29 23:18:02.738064 2026] [:error] [pid 20576:tid 20599] [client 185.231.100.76:34812] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXt6KirDZws_FlQGi9eR8AAAAc0"]
[Thu Jan 29 23:18:23.720888 2026] [:error] [pid 39863:tid 39885] [client 185.231.100.76:47912] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXt6P7sHJJGGu8set58e_gAAAVM"]
[Thu Jan 29 23:32:18.953252 2026] [:error] [pid 39863:tid 39883] [client 185.231.100.76:55664] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXt9grsHJJGGu8set58ikgAAAVE"]
[Thu Jan 29 23:32:39.879636 2026] [:error] [pid 20579:tid 20653] [client 185.231.100.76:54044] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87888.aspx"] [unique_id "aXt9lzVXNopcNyjJc9U9OAAAAkw"]
[Thu Jan 29 23:41:39.574701 2026] [:error] [pid 19071:tid 19153] [client 185.231.100.76:47826] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXt_s5fa8Ix5wWmtmJy4zAAAAJQ"]
[Thu Jan 29 23:42:00.898136 2026] [:error] [pid 20578:tid 20625] [client 185.231.100.76:51238] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%9B%E0%B8%A310%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXt_yA6UX7yOMwQFiydXwgAAAgw"]
[Thu Jan 29 23:51:02.548685 2026] [:error] [pid 20486:tid 20513] [client 185.231.100.76:58462] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXuB5ngqSZb6GBx5nnMmiwAAARg"]
[Thu Jan 29 23:51:23.753703 2026] [:error] [pid 39863:tid 39869] [client 185.231.100.76:56626] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXuB-7sHJJGGu8set58m6gAAAUM"]
[Fri Jan 30 00:00:24.080795 2026] [:error] [pid 20519:tid 20567] [client 185.231.100.76:58524] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXuEGAo4s4fyROrkyRkU8wAAAZM"]
[Fri Jan 30 00:00:45.250238 2026] [:error] [pid 20519:tid 20551] [client 185.231.100.76:46628] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1234%20slot.aspx"] [unique_id "aXuELQo4s4fyROrkyRkVDQAAAYM"]
[Fri Jan 30 00:09:40.361624 2026] [:error] [pid 39501:tid 39527] [client 103.4.251.253:54832] [client 103.4.251.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.251.253, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/https%3A/makifim.com.au/xmlrpc.php"] [unique_id "aXuGRC_BLgXFo3daaZihCQAAABI"]
[Fri Jan 30 00:09:42.186047 2026] [:error] [pid 39501:tid 39524] [client 103.4.251.253:54984] [client 103.4.251.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.251.253, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/https%3A/makifim.com.au/xmlrpc.php%3Frsd"] [unique_id "aXuGRi_BLgXFo3daaZihEQAAAA8"]
[Fri Jan 30 00:09:51.254735 2026] [:error] [pid 39813:tid 39828] [client 185.231.100.76:48046] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXuGT9_AaZSBkqpNK022qAAAAU0"]
[Fri Jan 30 00:10:12.356047 2026] [:error] [pid 39813:tid 39833] [client 185.231.100.76:34664] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aXuGZN_AaZSBkqpNK022ywAAAVI"]
[Fri Jan 30 00:19:21.992835 2026] [:error] [pid 39813:tid 39820] [client 185.231.100.76:60522] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/99mb%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXuIid_AaZSBkqpNK027bgAAAUU"]
[Fri Jan 30 00:19:42.965354 2026] [:error] [pid 39502:tid 39546] [client 185.231.100.76:40326] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/all%20slot.aspx"] [unique_id "aXuIngCUcXwXieepEYjXWgAAAIo"]
[Fri Jan 30 00:28:47.760396 2026] [:error] [pid 39502:tid 39548] [client 185.231.100.76:35304] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m98%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXuKvwCUcXwXieepEYjaNAAAAIw"]
[Fri Jan 30 00:29:08.770919 2026] [:error] [pid 39503:tid 39579] [client 185.231.100.76:41416] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m98%20bet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXuK1DzoHqvQcupFdnbgAgAAARA"]
[Fri Jan 30 00:38:22.947278 2026] [:error] [pid 39501:tid 39514] [client 185.231.100.76:53980] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nagaway%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXuM_i_BLgXFo3daaZiqtQAAAAU"]
[Fri Jan 30 00:38:43.987133 2026] [:error] [pid 39501:tid 39525] [client 185.231.100.76:42396] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXuNEy_BLgXFo3daaZiq1wAAABA"]
[Fri Jan 30 01:16:29.457271 2026] [:error] [pid 39503:tid 39579] [client 154.28.229.86:18052] [client 154.28.229.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.28.229.86, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/https%3A/makifim.com.au/xmlrpc.php"] [unique_id "aXuV7TzoHqvQcupFdnbyhAAAARA"]
[Fri Jan 30 01:16:32.806448 2026] [:error] [pid 39592:tid 39611] [client 154.28.229.86:53696] [client 154.28.229.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.28.229.86, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/https%3A/makifim.com.au/xmlrpc.php%3Frsd"] [unique_id "aXuV8JlnGYODSsJUyHlBUwAAAM4"]
[Fri Jan 30 01:16:37.800795 2026] [:error] [pid 39783:tid 39797] [client 154.28.229.86:53852] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/https%3A/makifim.com.au/%23our-team"] [unique_id "aXuV9a51RNfzhKG5ppPCoAAAAEw"]
[Fri Jan 30 01:16:37.856420 2026] [:error] [pid 39813:tid 39817] [client 154.28.229.86:53864] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/https%3A/makifim.com.au/%23our-services"] [unique_id "aXuV9d_AaZSBkqpNK03gEAAAAUI"]
[Fri Jan 30 01:16:38.459724 2026] [:error] [pid 39501:tid 39528] [client 154.28.229.86:53874] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/https%3A/makifim.com.au/%23case-study"] [unique_id "aXuV9i_BLgXFo3daaZi9DwAAABM"]
[Fri Jan 30 01:16:38.734387 2026] [:error] [pid 39783:tid 39794] [client 154.28.229.86:53892] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/https%3A/makifim.com.au/%23contact-us"] [unique_id "aXuV9q51RNfzhKG5ppPCowAAAEk"]
[Fri Jan 30 01:16:38.830022 2026] [:error] [pid 39783:tid 39801] [client 154.28.229.86:53908] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/https%3A/www.linkedin.com/company/makifim-consulting/%20"] [unique_id "aXuV9q51RNfzhKG5ppPCpQAAAFA"]
[Fri Jan 30 01:16:39.130747 2026] [:error] [pid 39592:tid 39610] [client 154.28.229.86:60962] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/https%3A/commtogether.com.au/"] [unique_id "aXuV95lnGYODSsJUyHlBXwAAAM0"]
[Fri Jan 30 01:16:39.662250 2026] [:error] [pid 39503:tid 39586] [client 154.28.229.86:60976] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aXuV9zzoHqvQcupFdnbymQAAARc"]
[Fri Jan 30 01:16:39.825795 2026] [:error] [pid 39501:tid 39529] [client 154.28.229.86:61000] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aXuV9y_BLgXFo3daaZi9FwAAABQ"]
[Fri Jan 30 01:16:39.842979 2026] [:error] [pid 39503:tid 39564] [client 154.28.229.86:60986] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/photo-gallery/booster"] [unique_id "aXuV9zzoHqvQcupFdnbymgAAAQE"]
[Fri Jan 30 01:16:39.979029 2026] [:error] [pid 39503:tid 39580] [client 154.28.229.86:61002] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/images"] [unique_id "aXuV9zzoHqvQcupFdnbymwAAARE"]
[Fri Jan 30 01:16:39.979706 2026] [:error] [pid 39501:tid 39525] [client 154.28.229.86:61010] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/includes/builder/images"] [unique_id "aXuV9y_BLgXFo3daaZi9GAAAABA"]
[Fri Jan 30 01:16:40.153672 2026] [:error] [pid 39592:tid 39599] [client 154.28.229.86:61020] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors"] [unique_id "aXuV-JlnGYODSsJUyHlBYwAAAMI"]
[Fri Jan 30 01:16:40.209621 2026] [:error] [pid 39503:tid 39578] [client 154.28.229.86:61030] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "aXuV-DzoHqvQcupFdnbynQAAAQ8"]
[Fri Jan 30 01:16:41.920804 2026] [:error] [pid 39502:tid 39550] [client 154.28.229.86:61136] [client 154.28.229.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/core/admin/js/common.js"] [unique_id "aXuV-QCUcXwXieepEYjtcwAAAI4"]
[Fri Jan 30 02:18:09.920164 2026] [:error] [pid 13797:tid 13803] [client 209.38.241.38:57565] [client 209.38.241.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.241.38, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aXukYUZz78bylh5pU4SB9gAAAcQ"]
[Fri Jan 30 02:29:10.422456 2026] [:error] [pid 39783:tid 39809] [client 185.93.89.120:54985] [client 185.93.89.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aXum9q51RNfzhKG5ppPakgAAAFg"]
[Fri Jan 30 03:17:45.072772 2026] [:error] [pid 26945:tid 26979] [client 216.73.216.158:40660] [client 216.73.216.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXuyWQW-EMYAck0PyR43IgAAAlY"]
[Fri Jan 30 05:30:56.280148 2026] [:error] [pid 38980:tid 38989] [client 20.196.201.42:9870] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aXvRkLYByxUZEaKXdHrd1gAAAgI"]
[Fri Jan 30 05:30:56.712917 2026] [:error] [pid 46912:tid 46930] [client 20.196.201.42:9921] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aXvRkD6yiVW7A9NwFFkB9QAAAAY"]
[Fri Jan 30 05:30:57.163883 2026] [:error] [pid 46913:tid 46967] [client 20.196.201.42:9944] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aXvRkTMWmKL8hOfC3uQTiwAAAFA"]
[Fri Jan 30 05:30:57.617339 2026] [:error] [pid 38980:tid 38995] [client 20.196.201.42:9857] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aXvRkbYByxUZEaKXdHrd1wAAAgg"]
[Fri Jan 30 05:30:57.991014 2026] [:error] [pid 47021:tid 47028] [client 20.196.201.42:9941] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geaitasa.php"] [unique_id "aXvRkdap1k13UdZUNSQ2qwAAAMU"]
[Fri Jan 30 05:30:58.804104 2026] [:error] [pid 24712:tid 24758] [client 20.196.201.42:9961] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geaitasa.php"] [unique_id "aXvRkoRLQrFiQF3h9-tR5AAAAZA"]
[Fri Jan 30 05:30:59.269894 2026] [:error] [pid 24711:tid 24728] [client 20.196.201.42:9937] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geaitasa.php"] [unique_id "aXvRk65Gwh4var6T23JAbwAAAU4"]
[Fri Jan 30 05:31:00.028773 2026] [:error] [pid 24712:tid 24766] [client 20.196.201.42:9897] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geaitasa.php"] [unique_id "aXvRlIRLQrFiQF3h9-tR5wAAAZg"]
[Fri Jan 30 05:31:00.957484 2026] [:error] [pid 46913:tid 46960] [client 20.196.201.42:9877] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-cc.php"] [unique_id "aXvRlDMWmKL8hOfC3uQTkQAAAEk"]
[Fri Jan 30 05:31:01.930707 2026] [:error] [pid 46913:tid 46957] [client 20.196.201.42:9859] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-cc.php"] [unique_id "aXvRlTMWmKL8hOfC3uQTlQAAAEY"]
[Fri Jan 30 05:31:02.774808 2026] [:error] [pid 46913:tid 46965] [client 20.196.201.42:9861] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-cc.php"] [unique_id "aXvRljMWmKL8hOfC3uQTlwAAAE4"]
[Fri Jan 30 05:31:03.890773 2026] [:error] [pid 46914:tid 47002] [client 20.196.201.42:9876] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-cc.php"] [unique_id "aXvRl1gSfJ4kZxNKlb-yBwAAAJg"]
[Fri Jan 30 05:31:04.368642 2026] [:error] [pid 46913:tid 46964] [client 20.196.201.42:9933] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aXvRmDMWmKL8hOfC3uQTmgAAAE0"]
[Fri Jan 30 05:31:04.960302 2026] [:error] [pid 24712:tid 24754] [client 20.196.201.42:9879] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aXvRmIRLQrFiQF3h9-tR6wAAAY0"]
[Fri Jan 30 05:31:05.639090 2026] [:error] [pid 46914:tid 46984] [client 20.196.201.42:9974] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aXvRmVgSfJ4kZxNKlb-yCwAAAIY"]
[Fri Jan 30 05:31:05.985065 2026] [:error] [pid 47021:tid 47042] [client 20.196.201.42:9957] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aXvRmdap1k13UdZUNSQ2swAAANM"]
[Fri Jan 30 05:31:06.584522 2026] [:error] [pid 38686:tid 38706] [client 20.196.201.42:9883] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11092null.php"] [unique_id "aXvRmgoE8BAjgw1_sAWLfAAAAdA"]
[Fri Jan 30 05:31:07.110166 2026] [:error] [pid 38686:tid 38709] [client 20.196.201.42:9936] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11092null.php"] [unique_id "aXvRmwoE8BAjgw1_sAWLfQAAAdM"]
[Fri Jan 30 05:31:07.561358 2026] [:error] [pid 24712:tid 24752] [client 20.196.201.42:9858] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11092null.php"] [unique_id "aXvRm4RLQrFiQF3h9-tR7gAAAYs"]
[Fri Jan 30 05:31:08.080351 2026] [:error] [pid 46914:tid 46992] [client 20.196.201.42:9867] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11092null.php"] [unique_id "aXvRnFgSfJ4kZxNKlb-yEAAAAI4"]
[Fri Jan 30 05:31:08.614164 2026] [:error] [pid 24681:tid 24707] [client 20.196.201.42:9932] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvRnIE368IXQpahn0K0iAAAARg"]
[Fri Jan 30 05:31:09.428263 2026] [:error] [pid 47021:tid 47023] [client 20.196.201.42:9881] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvRndap1k13UdZUNSQ2vAAAAMA"]
[Fri Jan 30 05:31:09.962733 2026] [:error] [pid 47021:tid 47024] [client 20.196.201.42:9963] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvRndap1k13UdZUNSQ2vgAAAME"]
[Fri Jan 30 05:31:10.401239 2026] [:error] [pid 47021:tid 47028] [client 20.196.201.42:9953] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o2.php"] [unique_id "aXvRntap1k13UdZUNSQ2vwAAAMU"]
[Fri Jan 30 05:31:10.874094 2026] [:error] [pid 24681:tid 24702] [client 20.196.201.42:9962] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aXvRnoE368IXQpahn0K0iwAAARM"]
[Fri Jan 30 05:31:11.618155 2026] [:error] [pid 24681:tid 24683] [client 20.196.201.42:9956] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aXvRn4E368IXQpahn0K0jQAAAQA"]
[Fri Jan 30 05:31:12.011745 2026] [:error] [pid 47021:tid 47025] [client 20.196.201.42:9866] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aXvRoNap1k13UdZUNSQ2xAAAAMI"]
[Fri Jan 30 05:31:12.483771 2026] [:error] [pid 24681:tid 24696] [client 20.196.201.42:9955] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aXvRoIE368IXQpahn0K0jgAAAQ0"]
[Fri Jan 30 05:31:12.844800 2026] [:error] [pid 38686:tid 38700] [client 20.196.201.42:9873] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/by.php"] [unique_id "aXvRoAoE8BAjgw1_sAWLhAAAAco"]
[Fri Jan 30 05:31:13.527264 2026] [:error] [pid 38980:tid 38989] [client 20.196.201.42:9874] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/by.php"] [unique_id "aXvRobYByxUZEaKXdHrd3gAAAgI"]
[Fri Jan 30 05:31:14.048759 2026] [:error] [pid 24711:tid 24737] [client 20.196.201.42:9969] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/by.php"] [unique_id "aXvRoq5Gwh4var6T23JAfwAAAVc"]
[Fri Jan 30 05:31:14.483621 2026] [:error] [pid 38980:tid 38993] [client 20.196.201.42:9863] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/by.php"] [unique_id "aXvRorYByxUZEaKXdHrd3wAAAgY"]
[Fri Jan 30 05:31:15.536036 2026] [:error] [pid 24681:tid 24701] [client 20.196.201.42:9869] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "aXvRo4E368IXQpahn0K0kAAAARI"]
[Fri Jan 30 05:31:16.357118 2026] [:error] [pid 24681:tid 24688] [client 20.196.201.42:9959] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "aXvRpIE368IXQpahn0K0kwAAAQU"]
[Fri Jan 30 05:31:16.694886 2026] [:error] [pid 38686:tid 38708] [client 20.196.201.42:9980] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "aXvRpAoE8BAjgw1_sAWLhQAAAdI"]
[Fri Jan 30 05:31:17.214949 2026] [:error] [pid 24711:tid 24730] [client 20.196.201.42:5082] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "aXvRpa5Gwh4var6T23JAhQAAAVA"]
[Fri Jan 30 05:31:18.476388 2026] [:error] [pid 46913:tid 46955] [client 20.196.201.42:9880] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "aXvRpjMWmKL8hOfC3uQTpgAAAEQ"]
[Fri Jan 30 05:31:19.561061 2026] [:error] [pid 38980:tid 38990] [client 20.196.201.42:9945] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "aXvRp7YByxUZEaKXdHrd6AAAAgM"]
[Fri Jan 30 05:31:20.643688 2026] [:error] [pid 47021:tid 47043] [client 20.196.201.42:9864] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "aXvRqNap1k13UdZUNSQ23gAAANQ"]
[Fri Jan 30 05:31:21.339851 2026] [:error] [pid 46913:tid 46965] [client 20.196.201.42:9908] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "aXvRqTMWmKL8hOfC3uQTqwAAAE4"]
[Fri Jan 30 05:31:21.694496 2026] [:error] [pid 46913:tid 46964] [client 20.196.201.42:9973] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah21.php"] [unique_id "aXvRqTMWmKL8hOfC3uQTrAAAAE0"]
[Fri Jan 30 05:31:22.122939 2026] [:error] [pid 24712:tid 24766] [client 20.196.201.42:9931] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah21.php"] [unique_id "aXvRqoRLQrFiQF3h9-tSAQAAAZg"]
[Fri Jan 30 05:31:22.686974 2026] [:error] [pid 46912:tid 46936] [client 20.196.201.42:9898] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah21.php"] [unique_id "aXvRqj6yiVW7A9NwFFkCBAAAAAw"]
[Fri Jan 30 05:31:23.348933 2026] [:error] [pid 46912:tid 46942] [client 20.196.201.42:9923] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah21.php"] [unique_id "aXvRqz6yiVW7A9NwFFkCBQAAABI"]
[Fri Jan 30 05:31:23.703114 2026] [:error] [pid 24712:tid 24762] [client 20.196.201.42:9935] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah22.php"] [unique_id "aXvRq4RLQrFiQF3h9-tSBAAAAZQ"]
[Fri Jan 30 05:31:24.182879 2026] [:error] [pid 47021:tid 47030] [client 20.196.201.42:5095] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah22.php"] [unique_id "aXvRrNap1k13UdZUNSQ24gAAAMc"]
[Fri Jan 30 05:31:24.545375 2026] [:error] [pid 46912:tid 46926] [client 20.196.201.42:5061] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah22.php"] [unique_id "aXvRrD6yiVW7A9NwFFkCBgAAAAI"]
[Fri Jan 30 05:31:25.123089 2026] [:error] [pid 24681:tid 24686] [client 20.196.201.42:5061] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah22.php"] [unique_id "aXvRrYE368IXQpahn0K0oAAAAQM"]
[Fri Jan 30 05:31:25.504547 2026] [:error] [pid 38980:tid 38992] [client 20.196.201.42:9875] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws38.php"] [unique_id "aXvRrbYByxUZEaKXdHrd6gAAAgU"]
[Fri Jan 30 05:31:25.865793 2026] [:error] [pid 46912:tid 46948] [client 20.196.201.42:9907] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws38.php"] [unique_id "aXvRrT6yiVW7A9NwFFkCCAAAABg"]
[Fri Jan 30 05:31:26.238657 2026] [:error] [pid 24712:tid 24758] [client 20.196.201.42:9925] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws38.php"] [unique_id "aXvRroRLQrFiQF3h9-tSBgAAAZA"]
[Fri Jan 30 05:31:26.673852 2026] [:error] [pid 38686:tid 38700] [client 20.196.201.42:5071] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws38.php"] [unique_id "aXvRrgoE8BAjgw1_sAWLmgAAAco"]
[Fri Jan 30 05:31:27.128491 2026] [:error] [pid 24712:tid 24761] [client 20.196.201.42:5085] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvRr4RLQrFiQF3h9-tSCAAAAZM"]
[Fri Jan 30 05:31:27.486215 2026] [:error] [pid 47021:tid 47031] [client 20.196.201.42:9968] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvRr9ap1k13UdZUNSQ27QAAAMg"]
[Fri Jan 30 05:31:27.934660 2026] [:error] [pid 38980:tid 39011] [client 20.196.201.42:9860] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvRr7YByxUZEaKXdHrd7QAAAhg"]
[Fri Jan 30 05:31:28.468031 2026] [:error] [pid 24681:tid 24705] [client 20.196.201.42:9886] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvRsIE368IXQpahn0K0owAAARY"]
[Fri Jan 30 05:31:29.403980 2026] [:error] [pid 46913:tid 46957] [client 20.196.201.42:9872] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvRsTMWmKL8hOfC3uQTsgAAAEY"]
[Fri Jan 30 05:31:29.978367 2026] [:error] [pid 24712:tid 24759] [client 20.196.201.42:9910] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvRsYRLQrFiQF3h9-tSCwAAAZE"]
[Fri Jan 30 05:31:30.442202 2026] [:error] [pid 24711:tid 24721] [client 20.196.201.42:9942] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvRsq5Gwh4var6T23JAkgAAAUc"]
[Fri Jan 30 05:31:31.042015 2026] [:error] [pid 38686:tid 38701] [client 20.196.201.42:5059] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploaxa1.php"] [unique_id "aXvRswoE8BAjgw1_sAWLogAAAcs"]
[Fri Jan 30 05:31:31.562352 2026] [:error] [pid 38686:tid 38708] [client 20.196.201.42:9970] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-su.php"] [unique_id "aXvRswoE8BAjgw1_sAWLpAAAAdI"]
[Fri Jan 30 05:31:31.938841 2026] [:error] [pid 47021:tid 47032] [client 20.196.201.42:9939] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-su.php"] [unique_id "aXvRs9ap1k13UdZUNSQ28gAAAMk"]
[Fri Jan 30 05:31:32.769546 2026] [:error] [pid 47021:tid 47024] [client 20.196.201.42:5064] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-su.php"] [unique_id "aXvRtNap1k13UdZUNSQ29QAAAME"]
[Fri Jan 30 05:31:33.305824 2026] [:error] [pid 24712:tid 24743] [client 20.196.201.42:5086] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-su.php"] [unique_id "aXvRtYRLQrFiQF3h9-tSEAAAAYI"]
[Fri Jan 30 05:31:33.676564 2026] [:error] [pid 46912:tid 46940] [client 20.196.201.42:9927] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzzaq.php"] [unique_id "aXvRtT6yiVW7A9NwFFkCDwAAABA"]
[Fri Jan 30 05:31:34.359083 2026] [:error] [pid 24712:tid 24746] [client 20.196.201.42:5087] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzzaq.php"] [unique_id "aXvRtoRLQrFiQF3h9-tSEgAAAYU"]
[Fri Jan 30 05:31:35.100936 2026] [:error] [pid 24711:tid 24732] [client 20.196.201.42:9967] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzzaq.php"] [unique_id "aXvRt65Gwh4var6T23JAlwAAAVI"]
[Fri Jan 30 05:31:35.731594 2026] [:error] [pid 47021:tid 47031] [client 20.196.201.42:9971] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzzaq.php"] [unique_id "aXvRt9ap1k13UdZUNSQ29wAAAMg"]
[Fri Jan 30 05:31:36.453920 2026] [:error] [pid 47021:tid 47043] [client 20.196.201.42:9947] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abtpn.php"] [unique_id "aXvRuNap1k13UdZUNSQ2-AAAANQ"]
[Fri Jan 30 05:31:36.812973 2026] [:error] [pid 46914:tid 47001] [client 20.196.201.42:9926] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abtpn.php"] [unique_id "aXvRuFgSfJ4kZxNKlb-yNQAAAJc"]
[Fri Jan 30 05:31:37.483082 2026] [:error] [pid 38686:tid 38694] [client 20.196.201.42:9899] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abtpn.php"] [unique_id "aXvRuQoE8BAjgw1_sAWLqwAAAcQ"]
[Fri Jan 30 05:31:37.935534 2026] [:error] [pid 24711:tid 24724] [client 20.196.201.42:5094] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abtpn.php"] [unique_id "aXvRua5Gwh4var6T23JAmwAAAUo"]
[Fri Jan 30 05:31:38.405034 2026] [:error] [pid 24681:tid 24696] [client 20.196.201.42:9940] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my1.php"] [unique_id "aXvRuoE368IXQpahn0K0rAAAAQ0"]
[Fri Jan 30 05:31:38.812849 2026] [:error] [pid 47021:tid 47039] [client 20.196.201.42:9895] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my1.php"] [unique_id "aXvRutap1k13UdZUNSQ2-gAAANA"]
[Fri Jan 30 05:31:39.375427 2026] [:error] [pid 24681:tid 24694] [client 20.196.201.42:9904] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my1.php"] [unique_id "aXvRu4E368IXQpahn0K0rwAAAQs"]
[Fri Jan 30 05:31:39.797261 2026] [:error] [pid 24711:tid 24714] [client 20.196.201.42:9862] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my1.php"] [unique_id "aXvRu65Gwh4var6T23JAnAAAAUA"]
[Fri Jan 30 05:31:40.167843 2026] [:error] [pid 46912:tid 46932] [client 20.196.201.42:9896] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/taktak.php"] [unique_id "aXvRvD6yiVW7A9NwFFkCGAAAAAg"]
[Fri Jan 30 05:31:40.930951 2026] [:error] [pid 38980:tid 38994] [client 20.196.201.42:9964] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/taktak.php"] [unique_id "aXvRvLYByxUZEaKXdHrd8QAAAgc"]
[Fri Jan 30 05:31:41.805727 2026] [:error] [pid 24681:tid 24704] [client 20.196.201.42:5115] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/taktak.php"] [unique_id "aXvRvYE368IXQpahn0K0tAAAARU"]
[Fri Jan 30 05:31:42.377757 2026] [:error] [pid 38980:tid 39007] [client 20.196.201.42:5063] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/taktak.php"] [unique_id "aXvRvrYByxUZEaKXdHrd8wAAAhQ"]
[Fri Jan 30 05:31:43.101227 2026] [:error] [pid 46914:tid 47002] [client 20.196.201.42:5075] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aXvRv1gSfJ4kZxNKlb-yOwAAAJg"]
[Fri Jan 30 05:31:44.103721 2026] [:error] [pid 46913:tid 46957] [client 20.196.201.42:9917] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aXvRwDMWmKL8hOfC3uQTvAAAAEY"]
[Fri Jan 30 05:31:44.718140 2026] [:error] [pid 46913:tid 46963] [client 20.196.201.42:9909] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aXvRwDMWmKL8hOfC3uQTvwAAAEw"]
[Fri Jan 30 05:31:45.528135 2026] [:error] [pid 47021:tid 47026] [client 20.196.201.42:9950] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sfcl.php"] [unique_id "aXvRwdap1k13UdZUNSQ3BQAAAMM"]
[Fri Jan 30 05:31:46.181666 2026] [:error] [pid 38686:tid 38708] [client 20.196.201.42:5102] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvRwgoE8BAjgw1_sAWLsgAAAdI"]
[Fri Jan 30 05:31:46.805698 2026] [:error] [pid 38686:tid 38699] [client 20.196.201.42:9943] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvRwgoE8BAjgw1_sAWLswAAAck"]
[Fri Jan 30 05:31:47.389334 2026] [:error] [pid 46913:tid 46972] [client 20.196.201.42:9888] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvRwzMWmKL8hOfC3uQTxAAAAFU"]
[Fri Jan 30 05:31:47.793227 2026] [:error] [pid 46914:tid 46994] [client 20.196.201.42:5088] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ypukprhr.php"] [unique_id "aXvRw1gSfJ4kZxNKlb-yQgAAAJA"]
[Fri Jan 30 05:31:48.564706 2026] [:error] [pid 24681:tid 24687] [client 20.196.201.42:9916] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcnyz.php"] [unique_id "aXvRxIE368IXQpahn0K0twAAAQQ"]
[Fri Jan 30 05:31:49.603452 2026] [:error] [pid 38686:tid 38712] [client 20.196.201.42:5109] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcnyz.php"] [unique_id "aXvRxQoE8BAjgw1_sAWLuAAAAdY"]
[Fri Jan 30 05:31:50.530845 2026] [:error] [pid 47021:tid 47047] [client 20.196.201.42:5098] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcnyz.php"] [unique_id "aXvRxtap1k13UdZUNSQ3DAAAANg"]
[Fri Jan 30 05:31:51.237946 2026] [:error] [pid 24681:tid 24695] [client 20.196.201.42:9891] [client 20.196.201.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcnyz.php"] [unique_id "aXvRx4E368IXQpahn0K0vAAAAQw"]
[Fri Jan 30 06:06:27.875628 2026] [autoindex:error] [pid 47021:tid 47046] [client 164.90.142.198:64994] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 30 12:30:37.785629 2026] [:error] [pid 38686:tid 38700] [client 3.129.43.95:55496] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aXwz7QoE8BAjgw1_sAULfAAAAco"], referer: https://www.google.com/
[Fri Jan 30 12:30:38.311183 2026] [:error] [pid 24681:tid 24685] [client 3.129.43.95:55510] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/credentials"] [unique_id "aXwz7oE368IXQpahn0IntQAAAQI"], referer: https://www.google.com/
[Fri Jan 30 12:30:38.907528 2026] [:error] [pid 46914:tid 46986] [client 3.129.43.95:55516] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aXwz7lgSfJ4kZxNKlb82KwAAAIg"], referer: https://www.google.com/
[Fri Jan 30 12:30:39.398151 2026] [:error] [pid 38686:tid 38712] [client 3.129.43.95:55526] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aXwz7woE8BAjgw1_sAULgAAAAdY"], referer: https://www.google.com/
[Fri Jan 30 12:30:39.918891 2026] [:error] [pid 24711:tid 24728] [client 3.129.43.95:55532] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aXwz765Gwh4var6T23LgIQAAAU4"], referer: https://www.google.com/
[Fri Jan 30 12:30:40.569455 2026] [:error] [pid 46912:tid 46936] [client 3.129.43.95:55544] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aXwz8D6yiVW7A9NwFFl1qgAAAAw"], referer: https://www.google.com/
[Fri Jan 30 12:30:41.064685 2026] [:error] [pid 24681:tid 24692] [client 3.129.43.95:55552] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aXwz8YE368IXQpahn0InuQAAAQk"], referer: https://www.google.com/
[Fri Jan 30 12:30:41.532340 2026] [:error] [pid 38686:tid 38695] [client 3.129.43.95:59930] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aXwz8QoE8BAjgw1_sAULhQAAAcU"], referer: https://www.google.com/
[Fri Jan 30 12:30:42.113365 2026] [:error] [pid 46912:tid 46941] [client 3.129.43.95:59940] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "aXwz8j6yiVW7A9NwFFl1sAAAABE"], referer: https://www.google.com/
[Fri Jan 30 12:30:42.630653 2026] [:error] [pid 46914:tid 46998] [client 3.129.43.95:59944] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "aXwz8lgSfJ4kZxNKlb82LQAAAJQ"], referer: https://www.google.com/
[Fri Jan 30 12:30:43.110520 2026] [:error] [pid 46914:tid 47000] [client 3.129.43.95:59956] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aXwz81gSfJ4kZxNKlb82MAAAAJY"], referer: https://www.google.com/
[Fri Jan 30 12:30:43.517906 2026] [:error] [pid 38686:tid 38698] [client 3.129.43.95:59966] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aXwz8woE8BAjgw1_sAULhwAAAcg"], referer: https://www.google.com/
[Fri Jan 30 12:30:44.059092 2026] [:error] [pid 24712:tid 24765] [client 3.129.43.95:59972] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aXwz9IRLQrFiQF3h9-vJGQAAAZc"], referer: https://www.google.com/
[Fri Jan 30 12:30:44.600816 2026] [:error] [pid 46914:tid 47001] [client 3.129.43.95:59988] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aXwz9FgSfJ4kZxNKlb82NgAAAJc"], referer: https://www.google.com/
[Fri Jan 30 12:30:45.078166 2026] [:error] [pid 47021:tid 47039] [client 3.129.43.95:59998] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aXwz9dap1k13UdZUNSTT7AAAANA"], referer: https://www.google.com/
[Fri Jan 30 12:30:45.679198 2026] [:error] [pid 47663:tid 47677] [client 3.129.43.95:60002] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "aXwz9UHGTrgIKCqEYbVDugAAAkw"], referer: https://www.google.com/
[Fri Jan 30 12:30:46.150801 2026] [:error] [pid 24712:tid 24747] [client 3.129.43.95:60008] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aXwz9oRLQrFiQF3h9-vJGgAAAYY"], referer: https://www.google.com/
[Fri Jan 30 12:30:46.669046 2026] [:error] [pid 47021:tid 47024] [client 3.129.43.95:60016] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "aXwz9tap1k13UdZUNSTT8AAAAME"], referer: https://www.google.com/
[Fri Jan 30 12:30:47.239971 2026] [:error] [pid 24681:tid 24698] [client 3.129.43.95:60024] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod.local"] [unique_id "aXwz94E368IXQpahn0InvgAAAQ8"], referer: https://www.google.com/
[Fri Jan 30 12:30:47.794278 2026] [:error] [pid 24712:tid 24748] [client 3.129.43.95:60026] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev.local"] [unique_id "aXwz94RLQrFiQF3h9-vJGwAAAYc"], referer: https://www.google.com/
[Fri Jan 30 12:30:48.285972 2026] [:error] [pid 24681:tid 24703] [client 3.129.43.95:60038] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.remote"] [unique_id "aXwz-IE368IXQpahn0InwQAAARQ"], referer: https://www.google.com/
[Fri Jan 30 12:30:48.867039 2026] [:error] [pid 47021:tid 47033] [client 3.129.43.95:60042] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.1"] [unique_id "aXwz-Nap1k13UdZUNSTT8wAAAMo"], referer: https://www.google.com/
[Fri Jan 30 12:30:49.450776 2026] [:error] [pid 46913:tid 46960] [client 3.129.43.95:60054] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.2"] [unique_id "aXwz-TMWmKL8hOfC3uR2QAAAAEk"], referer: https://www.google.com/
[Fri Jan 30 12:30:49.955995 2026] [:error] [pid 38686:tid 38691] [client 3.129.43.95:60060] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "aXwz-QoE8BAjgw1_sAULjgAAAcE"], referer: https://www.google.com/
[Fri Jan 30 12:30:50.582822 2026] [:error] [pid 47021:tid 47041] [client 3.129.43.95:60064] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/v1/.env"] [unique_id "aXwz-tap1k13UdZUNSTT-AAAANI"], referer: https://www.google.com/
[Fri Jan 30 12:30:51.044407 2026] [:error] [pid 46912:tid 46922] [client 3.129.43.95:60066] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/v2/.env"] [unique_id "aXwz-z6yiVW7A9NwFFl1uQAAAAA"], referer: https://www.google.com/
[Fri Jan 30 12:30:51.491514 2026] [:error] [pid 46914:tid 46982] [client 3.129.43.95:51870] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "aXwz-1gSfJ4kZxNKlb82PQAAAIQ"], referer: https://www.google.com/
[Fri Jan 30 12:30:51.962545 2026] [:error] [pid 47663:tid 47682] [client 3.129.43.95:51876] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/server/.env"] [unique_id "aXwz-0HGTrgIKCqEYbVDvwAAAlE"], referer: https://www.google.com/
[Fri Jan 30 12:30:52.514392 2026] [:error] [pid 24711:tid 24718] [client 3.129.43.95:51886] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "aXwz_K5Gwh4var6T23LgMgAAAUQ"], referer: https://www.google.com/
[Fri Jan 30 12:30:52.997711 2026] [:error] [pid 24681:tid 24704] [client 3.129.43.95:51896] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/core/.env"] [unique_id "aXwz_IE368IXQpahn0InxAAAARU"], referer: https://www.google.com/
[Fri Jan 30 12:30:53.498482 2026] [:error] [pid 38686:tid 38714] [client 3.129.43.95:51900] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/laravel/.env"] [unique_id "aXwz_QoE8BAjgw1_sAULkAAAAdg"], referer: https://www.google.com/
[Fri Jan 30 12:30:54.028425 2026] [:error] [pid 46914:tid 46989] [client 3.129.43.95:51916] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "aXwz_lgSfJ4kZxNKlb82PwAAAIs"], referer: https://www.google.com/
[Fri Jan 30 12:30:54.635744 2026] [:error] [pid 46913:tid 46956] [client 3.129.43.95:51930] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "aXwz_jMWmKL8hOfC3uR2RQAAAEU"], referer: https://www.google.com/
[Fri Jan 30 12:30:55.255478 2026] [:error] [pid 46913:tid 46953] [client 3.129.43.95:51938] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/src/.env"] [unique_id "aXwz_zMWmKL8hOfC3uR2RgAAAEI"], referer: https://www.google.com/
[Fri Jan 30 12:30:55.765561 2026] [:error] [pid 24712:tid 24745] [client 3.129.43.95:51940] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/storage/.env"] [unique_id "aXwz_4RLQrFiQF3h9-vJIQAAAYQ"], referer: https://www.google.com/
[Fri Jan 30 12:30:56.314360 2026] [:error] [pid 46914:tid 46990] [client 3.129.43.95:51946] [client 3.129.43.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/vendor/.env"] [unique_id "aXw0AFgSfJ4kZxNKlb82QgAAAIw"], referer: https://www.google.com/
[Fri Jan 30 14:16:09.040190 2026] [:error] [pid 24681:tid 24696] [client 54.85.158.54:32864] [client 54.85.158.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aXxMqYE368IXQpahn0I-ygAAAQ0"]
[Fri Jan 30 15:26:53.063462 2026] [:error] [pid 24711:tid 24735] [client 38.242.239.223:38946] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXxdPa5Gwh4var6T23IoZAAAAVU"]
[Fri Jan 30 15:27:14.306415 2026] [:error] [pid 24711:tid 24734] [client 38.242.239.223:52078] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXxdUq5Gwh4var6T23IolgAAAVQ"]
[Fri Jan 30 15:36:47.460736 2026] [:error] [pid 38686:tid 38694] [client 38.242.239.223:38308] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXxfjwoE8BAjgw1_sAUzRQAAAcQ"]
[Fri Jan 30 15:37:10.879925 2026] [:error] [pid 47021:tid 47024] [client 38.242.239.223:45212] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXxfptap1k13UdZUNSQC2wAAAME"]
[Fri Jan 30 15:46:50.013819 2026] [:error] [pid 24711:tid 24734] [client 38.242.239.223:50960] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXxh6q5Gwh4var6T23IvDwAAAVQ"]
[Fri Jan 30 15:47:11.491543 2026] [:error] [pid 24711:tid 24725] [client 38.242.239.223:59002] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20777.aspx"] [unique_id "aXxh_65Gwh4var6T23IvKgAAAUs"]
[Fri Jan 30 16:05:11.236598 2026] [:error] [pid 24712:tid 24745] [client 38.242.239.223:54428] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXxmN4RLQrFiQF3h9-sE_wAAAYQ"]
[Fri Jan 30 16:05:33.486048 2026] [:error] [pid 38686:tid 38703] [client 38.242.239.223:37176] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXxmTQoE8BAjgw1_sAU4aQAAAc0"]
[Fri Jan 30 16:15:28.445379 2026] [:error] [pid 38980:tid 39004] [client 38.242.239.223:60130] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXxooLYByxUZEaKXdHpypgAAAhE"]
[Fri Jan 30 16:15:49.749459 2026] [:error] [pid 47663:tid 47683] [client 38.242.239.223:59440] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXxotUHGTrgIKCqEYbVtpgAAAlI"]
[Fri Jan 30 16:28:38.800342 2026] [:error] [pid 38686:tid 38694] [client 54.85.158.54:44906] [client 54.85.158.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aXxrtgoE8BAjgw1_sAU8TgAAAcQ"]
[Fri Jan 30 16:42:36.875950 2026] [:error] [pid 24711:tid 24738] [client 38.242.239.223:57730] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/789%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXxu_K5Gwh4var6T23JDlgAAAVg"]
[Fri Jan 30 16:42:59.305245 2026] [:error] [pid 24712:tid 24752] [client 38.242.239.223:50504] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/789%20slot.aspx"] [unique_id "aXxvE4RLQrFiQF3h9-sOKQAAAYs"]
[Fri Jan 30 16:52:44.175681 2026] [:error] [pid 24711:tid 24719] [client 38.242.239.223:60576] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsm99%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXxxXK5Gwh4var6T23JHAwAAAUU"]
[Fri Jan 30 16:53:06.193359 2026] [:error] [pid 24711:tid 24715] [client 38.242.239.223:37494] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m24%20wallet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXxxcq5Gwh4var6T23JHEAAAAUE"]
[Fri Jan 30 17:02:43.890655 2026] [:error] [pid 46914:tid 46985] [client 38.242.239.223:32802] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXxzs1gSfJ4kZxNKlb-M7QAAAIc"]
[Fri Jan 30 17:03:05.813006 2026] [:error] [pid 24711:tid 24724] [client 38.242.239.223:53382] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mm88rich%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXxzya5Gwh4var6T23JK6AAAAUo"]
[Fri Jan 30 17:20:24.826155 2026] [:error] [pid 24712:tid 24748] [client 38.242.239.223:46394] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aXx32IRLQrFiQF3h9-sWgQAAAYc"]
[Fri Jan 30 18:33:23.489065 2026] [:error] [pid 24681:tid 24689] [client 93.218.126.133:60446] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXyI84E368IXQpahn0Jp5gAAAQY"]
[Fri Jan 30 18:33:24.133877 2026] [:error] [pid 46914:tid 46983] [client 93.218.126.133:60454] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXyI9FgSfJ4kZxNKlb-kGAAAAIU"]
[Fri Jan 30 18:33:46.151503 2026] [:error] [pid 47021:tid 47026] [client 93.218.126.133:60713] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXyJCtap1k13UdZUNSQpZAAAAMM"]
[Fri Jan 30 18:33:46.844118 2026] [:error] [pid 46914:tid 46996] [client 93.218.126.133:60724] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXyJClgSfJ4kZxNKlb-kNAAAAJI"]
[Fri Jan 30 18:42:53.950677 2026] [:error] [pid 46914:tid 47002] [client 93.218.126.133:65510] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20888%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXyLLVgSfJ4kZxNKlb-mcgAAAJg"]
[Fri Jan 30 18:42:54.593770 2026] [:error] [pid 24712:tid 24759] [client 93.218.126.133:65512] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20888%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXyLLoRLQrFiQF3h9-splgAAAZE"]
[Fri Jan 30 18:43:15.946446 2026] [:error] [pid 46914:tid 46979] [client 93.218.126.133:49172] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXyLQ1gSfJ4kZxNKlb-mgQAAAIE"]
[Fri Jan 30 18:43:16.633887 2026] [:error] [pid 24712:tid 24748] [client 93.218.126.133:49175] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXyLRIRLQrFiQF3h9-sprwAAAYc"]
[Fri Jan 30 18:52:25.612384 2026] [:error] [pid 46912:tid 46927] [client 93.218.126.133:49909] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B9%80%E0%B8%87%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%82.aspx"] [unique_id "aXyNaT6yiVW7A9NwFFnJJAAAAAM"]
[Fri Jan 30 18:52:26.256306 2026] [:error] [pid 38980:tid 38988] [client 93.218.126.133:49911] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B9%80%E0%B8%87%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%82.aspx"] [unique_id "aXyNarYByxUZEaKXdHqNzQAAAgE"]
[Fri Jan 30 18:52:47.526255 2026] [:error] [pid 38980:tid 39000] [client 93.218.126.133:49923] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXyNf7YByxUZEaKXdHqN2wAAAg0"]
[Fri Jan 30 18:52:48.169847 2026] [:error] [pid 24711:tid 24721] [client 93.218.126.133:49924] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXyNgK5Gwh4var6T23JshgAAAUc"]
[Fri Jan 30 19:02:03.811642 2026] [:error] [pid 24711:tid 24714] [client 93.218.126.133:63967] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXyPq65Gwh4var6T23Jv5gAAAUA"]
[Fri Jan 30 19:02:04.464814 2026] [:error] [pid 24711:tid 24737] [client 93.218.126.133:52027] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXyPrK5Gwh4var6T23Jv6AAAAVc"]
[Fri Jan 30 19:02:25.796866 2026] [:error] [pid 47663:tid 47676] [client 93.218.126.133:52257] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXyPwUHGTrgIKCqEYbWG7gAAAks"]
[Fri Jan 30 19:02:26.485638 2026] [:error] [pid 24681:tid 24684] [client 93.218.126.133:52266] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXyPwoE368IXQpahn0Jt0AAAAQE"]
[Fri Jan 30 19:15:39.805070 2026] [:error] [pid 47663:tid 47668] [client 93.218.126.133:59315] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXyS20HGTrgIKCqEYbWJMwAAAkM"]
[Fri Jan 30 19:15:40.449426 2026] [:error] [pid 24681:tid 24705] [client 93.218.126.133:59321] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXyS3IE368IXQpahn0JwswAAARY"]
[Fri Jan 30 19:16:01.753121 2026] [:error] [pid 24681:tid 24691] [client 93.218.126.133:59402] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXyS8YE368IXQpahn0JwtwAAAQg"]
[Fri Jan 30 19:16:02.440361 2026] [:error] [pid 24712:tid 24763] [client 93.218.126.133:59405] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXyS8oRLQrFiQF3h9-sxsQAAAZU"]
[Fri Jan 30 19:25:12.646645 2026] [:error] [pid 24711:tid 24728] [client 93.218.126.133:60643] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aXyVGK5Gwh4var6T23J4ugAAAU4"]
[Fri Jan 30 19:25:13.425781 2026] [:error] [pid 24711:tid 24738] [client 93.218.126.133:60645] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aXyVGa5Gwh4var6T23J4vQAAAVg"]
[Fri Jan 30 19:25:34.637697 2026] [:error] [pid 38980:tid 38997] [client 93.218.126.133:60667] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXyVLrYByxUZEaKXdHqTrAAAAgo"]
[Fri Jan 30 19:25:35.324153 2026] [:error] [pid 47663:tid 47679] [client 93.218.126.133:60669] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXyVL0HGTrgIKCqEYbWKbAAAAk4"]
[Fri Jan 30 19:34:18.557993 2026] [:error] [pid 24712:tid 24742] [client 34.41.3.69:64229] [client 34.41.3.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.3.69, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXyXOoRLQrFiQF3h9-s1-QAAAYE"]
[Fri Jan 30 19:34:24.547117 2026] [:error] [pid 24712:tid 24750] [client 34.41.3.69:64229] [client 34.41.3.69] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXyXQIRLQrFiQF3h9-s2AQAAAYk"]
[Fri Jan 30 19:34:26.574277 2026] [:error] [pid 24712:tid 24745] [client 34.41.3.69:64229] [client 34.41.3.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.3.69, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXyXQoRLQrFiQF3h9-s2BAAAAYQ"]
[Fri Jan 30 19:34:41.729166 2026] [:error] [pid 46913:tid 46964] [client 93.218.126.133:61217] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aXyXUTMWmKL8hOfC3uTBjAAAAE0"]
[Fri Jan 30 19:34:42.372436 2026] [:error] [pid 24681:tid 24707] [client 93.218.126.133:61218] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aXyXUoE368IXQpahn0JzTQAAARg"]
[Fri Jan 30 19:35:03.506868 2026] [:error] [pid 24711:tid 24728] [client 93.218.126.133:61242] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aXyXZ65Gwh4var6T23J7tgAAAU4"]
[Fri Jan 30 19:35:04.150623 2026] [:error] [pid 47021:tid 47031] [client 93.218.126.133:61243] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aXyXaNap1k13UdZUNSQ10AAAAMg"]
[Fri Jan 30 20:02:29.107827 2026] [:error] [pid 24711:tid 24733] [client 93.218.126.133:56480] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l86.com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXyd1a5Gwh4var6T23KD-wAAAVM"]
[Fri Jan 30 20:02:29.750996 2026] [:error] [pid 24681:tid 24704] [client 93.218.126.133:56482] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l86.com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXyd1YE368IXQpahn0J3cQAAARU"]
[Fri Jan 30 20:02:50.978426 2026] [:error] [pid 46912:tid 46932] [client 93.218.126.133:56530] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/las%20vegas%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXyd6j6yiVW7A9NwFFnXngAAAAg"]
[Fri Jan 30 20:02:51.623011 2026] [:error] [pid 24711:tid 24715] [client 93.218.126.133:56532] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/las%20vegas%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXyd665Gwh4var6T23KEHwAAAUE"]
[Fri Jan 30 20:11:54.909071 2026] [:error] [pid 24711:tid 24715] [client 93.218.126.133:57438] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXygCq5Gwh4var6T23KH6wAAAUE"]
[Fri Jan 30 20:11:55.594270 2026] [:error] [pid 47021:tid 47038] [client 93.218.126.133:57439] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXygC9ap1k13UdZUNSQ9TgAAAM8"]
[Fri Jan 30 20:12:16.692172 2026] [:error] [pid 24712:tid 24764] [client 93.218.126.133:57472] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXygIIRLQrFiQF3h9-s--wAAAZY"]
[Fri Jan 30 20:12:17.335810 2026] [:error] [pid 46913:tid 46962] [client 93.218.126.133:57473] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXygITMWmKL8hOfC3uTHdQAAAEs"]
[Fri Jan 30 20:22:02.568757 2026] [:error] [pid 46913:tid 46975] [client 93.218.126.133:51730] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warpufa.aspx"] [unique_id "aXyiajMWmKL8hOfC3uTIwQAAAFg"]
[Fri Jan 30 20:22:06.392095 2026] [:error] [pid 47663:tid 47688] [client 93.218.126.133:51734] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/warpufa.aspx"] [unique_id "aXyibkHGTrgIKCqEYbWSlQAAAlc"]
[Fri Jan 30 20:22:27.581851 2026] [:error] [pid 46913:tid 46955] [client 93.218.126.133:52129] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aXyigzMWmKL8hOfC3uTI1AAAAEQ"]
[Fri Jan 30 20:22:28.243177 2026] [:error] [pid 38980:tid 38994] [client 93.218.126.133:52135] [client 93.218.126.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aXyihLYByxUZEaKXdHqdVwAAAgc"]
[Fri Jan 30 22:50:55.211328 2026] [:error] [pid 24711:tid 24716] [client 136.116.10.33:58215] [client 136.116.10.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.10.33, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzFT65Gwh4var6T23LQsQAAAUI"]
[Fri Jan 30 22:50:55.978406 2026] [:error] [pid 38980:tid 38992] [client 136.116.10.33:58621] [client 136.116.10.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.10.33, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzFT7YByxUZEaKXdHrISAAAAgU"]
[Fri Jan 30 22:51:01.552455 2026] [:error] [pid 38980:tid 38995] [client 136.116.10.33:58621] [client 136.116.10.33] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXzFVbYByxUZEaKXdHrISwAAAgg"]
[Fri Jan 30 22:51:02.369947 2026] [:error] [pid 24711:tid 24728] [client 136.116.10.33:58215] [client 136.116.10.33] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXzFVq5Gwh4var6T23LQvwAAAU4"]
[Fri Jan 30 22:51:03.622616 2026] [:error] [pid 38980:tid 39001] [client 136.116.10.33:58621] [client 136.116.10.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.10.33, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzFV7YByxUZEaKXdHrITQAAAg4"]
[Fri Jan 30 22:51:04.407891 2026] [:error] [pid 24711:tid 24731] [client 136.116.10.33:58215] [client 136.116.10.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.10.33, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzFWK5Gwh4var6T23LQwgAAAVE"]
[Fri Jan 30 22:57:46.695362 2026] [:error] [pid 24681:tid 24693] [client 69.5.22.189:59442] [client 69.5.22.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/"] [unique_id "aXzG6oE368IXQpahn0KkSwAAAQo"]
[Fri Jan 30 22:57:47.444601 2026] [:error] [pid 24711:tid 24714] [client 69.5.22.189:59454] [client 69.5.22.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aXzG665Gwh4var6T23LSwQAAAUA"]
[Sat Jan 31 01:02:09.522488 2026] [proxy_fcgi:error] [pid 59661:tid 59705] [client 103.4.122.14:59660] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Jan 31 02:04:56.288560 2026] [:error] [pid 10752:tid 10764] [client 20.203.132.68:44604] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nlvbr.php"] [unique_id "aXzyyNnA3-xSNwP9jig2IwAAA4Y"]
[Sat Jan 31 02:04:59.048053 2026] [:error] [pid 60001:tid 60010] [client 20.203.132.68:35875] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nlvbr.php"] [unique_id "aXzyy6M2ziQ7JN4IjDxb5AAAAQc"]
[Sat Jan 31 02:05:02.096303 2026] [:error] [pid 8197:tid 8207] [client 20.203.132.68:26636] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nlvbr.php"] [unique_id "aXzyzlig9fZft2KGBffmnwAAAUY"]
[Sat Jan 31 02:05:24.947719 2026] [:error] [pid 59660:tid 59680] [client 20.203.132.68:28320] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aXzy5CwTX33V6TPUqxP_xwAAABA"]
[Sat Jan 31 02:05:25.741441 2026] [:error] [pid 10752:tid 10762] [client 20.203.132.68:9211] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aXzy5dnA3-xSNwP9jig2TQAAA4Q"]
[Sat Jan 31 02:05:38.903502 2026] [:error] [pid 59660:tid 59683] [client 20.203.132.68:25878] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/icoxp.php"] [unique_id "aXzy8iwTX33V6TPUqxP_5QAAABM"]
[Sat Jan 31 02:05:41.356621 2026] [:error] [pid 59662:tid 59728] [client 20.203.132.68:37342] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/icoxp.php"] [unique_id "aXzy9Q7k73dlTgySEchh4wAAAIo"]
[Sat Jan 31 02:05:42.588775 2026] [:error] [pid 60001:tid 60024] [client 20.203.132.68:8708] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/icoxp.php"] [unique_id "aXzy9qM2ziQ7JN4IjDxcDgAAARU"]
[Sat Jan 31 02:05:44.807116 2026] [:error] [pid 10752:tid 10766] [client 20.203.132.68:30661] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/icoxp.php"] [unique_id "aXzy-NnA3-xSNwP9jig2bwAAA4g"]
[Sat Jan 31 02:05:51.837396 2026] [:error] [pid 59660:tid 59681] [client 20.203.132.68:25917] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-set.php"] [unique_id "aXzy_ywTX33V6TPUqxMAAAAAABE"]
[Sat Jan 31 02:06:56.313239 2026] [:error] [pid 8197:tid 8211] [client 20.203.132.68:33375] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXzzQFig9fZft2KGBffnQAAAAUo"]
[Sat Jan 31 02:07:04.461229 2026] [:error] [pid 59748:tid 59772] [client 20.203.132.68:44094] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXzzSGlxTen-ziDxotSOrwAAANU"]
[Sat Jan 31 02:07:10.848966 2026] [:error] [pid 10754:tid 10797] [client 20.203.132.68:27909] [client 20.203.132.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXzzTuUua7wHT-0pjVRZTwAAA8w"]
[Sat Jan 31 02:21:56.124078 2026] [:error] [pid 10752:tid 10758] [client 217.182.195.233:33188] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXz2xNnA3-xSNwP9jig5ngAAA4A"]
[Sat Jan 31 02:22:17.058223 2026] [:error] [pid 8354:tid 8369] [client 217.182.195.233:55904] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2088.aspx"] [unique_id "aXz22d27IpxWjEJXCd8gFAAAAY0"]
[Sat Jan 31 02:31:13.236442 2026] [:error] [pid 10720:tid 10728] [client 217.182.195.233:47322] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aXz48Umcu3PWs0UerXLMZwAAA0Y"]
[Sat Jan 31 02:31:34.163421 2026] [:error] [pid 8386:tid 8392] [client 217.182.195.233:36666] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aXz5BtZVZWDVqOkRRiJgdQAAAcQ"]
[Sat Jan 31 07:14:53.709632 2026] [:error] [pid 52484:tid 52508] [client 2.57.122.173:38656] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aX07bUpwiaulxucQh7XOBgAAAhY"]
[Sat Jan 31 12:52:55.123776 2026] [autoindex:error] [pid 39339:tid 39351] [client 207.180.246.239:55031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 31 13:38:01.951028 2026] [:error] [pid 59438:tid 59457] [client 51.83.237.175:50536] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX2VOZbUN6UcGMChdB3rhwAAApE"]
[Sat Jan 31 13:38:05.576116 2026] [:error] [pid 52415:tid 52441] [client 51.83.237.175:52648] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX2VPZ-DUxb_li2fU6KZVAAAAZg"]
[Sat Jan 31 13:38:10.734697 2026] [:error] [pid 59438:tid 59443] [client 51.83.237.175:32970] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX2VQpbUN6UcGMChdB3rmQAAAoM"]
[Sat Jan 31 13:38:20.796056 2026] [:error] [pid 59524:tid 59569] [client 51.83.237.175:47376] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aX2VTAuUXfC6-Gd4497krgAAA08"]
[Sat Jan 31 13:38:23.056114 2026] [:error] [pid 59438:tid 59464] [client 51.83.237.175:47390] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX2VT5bUN6UcGMChdB3rsAAAApg"]
[Sat Jan 31 13:38:26.835492 2026] [:error] [pid 39339:tid 39342] [client 51.83.237.175:47404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX2VUsWi-IjigR3oHY4QdwAAAME"]
[Sat Jan 31 13:38:32.344574 2026] [:error] [pid 20836:tid 20861] [client 51.83.237.175:58192] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX2VWIACllgWRWVrYIRcjwAAAVQ"]
[Sat Jan 31 13:38:41.775686 2026] [:error] [pid 39339:tid 39352] [client 51.83.237.175:51418] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX2VYcWi-IjigR3oHY4QjQAAAMs"]
[Sat Jan 31 13:38:44.710020 2026] [:error] [pid 39339:tid 39357] [client 51.83.237.175:51428] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX2VZMWi-IjigR3oHY4QwwAAANA"]
[Sat Jan 31 13:38:48.709056 2026] [:error] [pid 52451:tid 52474] [client 51.83.237.175:50790] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX2VaHubVy7MGYWM2NaHZQAAAdQ"]
[Sat Jan 31 13:38:54.853148 2026] [:error] [pid 39339:tid 39351] [client 51.83.237.175:50792] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX2VbsWi-IjigR3oHY4QyAAAAMo"]
[Sat Jan 31 17:55:07.834812 2026] [:error] [pid 18803:tid 18828] [client 106.192.33.253:1646] [client 106.192.33.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.33.253, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aX3Rey2kTcRk9EBIxOFqawAAAhY"]
[Sat Jan 31 17:55:08.799331 2026] [:error] [pid 39242:tid 39259] [client 106.192.33.253:1604] [client 106.192.33.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.33.253, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aX3RfNOgXnkKGGSSCIMcswAAAAU"]
[Sat Jan 31 17:55:12.112715 2026] [:error] [pid 44532:tid 44560] [client 106.192.33.253:5905] [client 106.192.33.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.33.253, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aX3RgMH-68uYbAtfrZ1tVAAAAVg"]
[Sat Jan 31 17:55:14.278535 2026] [:error] [pid 31430:tid 31447] [client 106.192.33.253:9022] [client 106.192.33.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.33.253, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aX3Rgscb14YPxXg_g5EwMgAAAE0"]
[Sun Feb 01 11:33:31.081528 2026] [autoindex:error] [pid 10509:tid 10585] [client 149.88.19.87:47232] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:31.928500 2026] [autoindex:error] [pid 10509:tid 10580] [client 149.88.19.87:47232] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:32.871471 2026] [autoindex:error] [pid 10509:tid 10575] [client 149.88.19.87:47232] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:33.433683 2026] [autoindex:error] [pid 10509:tid 10582] [client 149.88.19.87:47232] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:34.128739 2026] [autoindex:error] [pid 10509:tid 10577] [client 149.88.19.87:47232] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:34.708598 2026] [autoindex:error] [pid 10509:tid 10576] [client 149.88.19.87:47232] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:57.244967 2026] [autoindex:error] [pid 2033:tid 2056] [client 149.88.19.87:56622] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:58.400313 2026] [autoindex:error] [pid 2033:tid 2053] [client 149.88.19.87:56622] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:58.719894 2026] [autoindex:error] [pid 2033:tid 2048] [client 149.88.19.87:56622] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:59.524669 2026] [autoindex:error] [pid 2033:tid 2044] [client 149.88.19.87:56622] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:33:59.931345 2026] [autoindex:error] [pid 2033:tid 2051] [client 149.88.19.87:56622] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:34:00.419510 2026] [autoindex:error] [pid 2033:tid 2042] [client 149.88.19.87:56622] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:34:11.774401 2026] [autoindex:error] [pid 2033:tid 2047] [client 149.88.19.87:56622] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:34:31.286762 2026] [:error] [pid 2033:tid 2053] [client 149.88.19.87:56622] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/"] [unique_id "aX7Jx_F7B4oR5nK3T_ODFAAAARI"]
[Sun Feb 01 11:34:31.922139 2026] [:error] [pid 10506:tid 10533] [client 149.88.19.87:49908] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/"] [unique_id "aX7Jx632IC2Db4uwFyP7HwAAABE"]
[Sun Feb 01 11:34:32.534885 2026] [:error] [pid 51610:tid 51633] [client 149.88.19.87:49924] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/"] [unique_id "aX7JyN7GFdNFAqImMQCNxgAAAVM"]
[Sun Feb 01 11:34:33.292628 2026] [:error] [pid 10616:tid 10637] [client 149.88.19.87:49932] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/"] [unique_id "aX7JyWd8pZdmVx6pUp5h1gAAANE"]
[Sun Feb 01 11:34:34.031132 2026] [:error] [pid 10508:tid 10566] [client 149.88.19.87:49944] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "aX7JygFwdoMQv5EWp9vBpAAAAFY"]
[Sun Feb 01 11:34:34.805779 2026] [:error] [pid 10506:tid 10522] [client 149.88.19.87:49956] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "aX7Jyq32IC2Db4uwFyP7KAAAAAY"]
[Sun Feb 01 11:34:35.421913 2026] [:error] [pid 10509:tid 10580] [client 149.88.19.87:49962] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "aX7Jy1MNpJBihOJgwVtI8QAAAIk"]
[Sun Feb 01 11:34:36.019274 2026] [:error] [pid 10509:tid 10581] [client 149.88.19.87:49976] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "aX7JzFMNpJBihOJgwVtI8gAAAIo"]
[Sun Feb 01 11:34:36.618454 2026] [:error] [pid 2033:tid 2042] [client 149.88.19.87:59708] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/"] [unique_id "aX7JzPF7B4oR5nK3T_ODGQAAAQc"]
[Sun Feb 01 11:34:37.268732 2026] [:error] [pid 10508:tid 10562] [client 149.88.19.87:59716] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/"] [unique_id "aX7JzQFwdoMQv5EWp9vBpwAAAFI"]
[Sun Feb 01 11:34:37.921818 2026] [:error] [pid 51610:tid 51617] [client 149.88.19.87:59730] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/"] [unique_id "aX7Jzd7GFdNFAqImMQCNywAAAUM"]
[Sun Feb 01 11:34:38.816619 2026] [:error] [pid 51610:tid 51614] [client 149.88.19.87:59738] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/"] [unique_id "aX7Jzt7GFdNFAqImMQCN0AAAAUA"]
[Sun Feb 01 11:34:39.506741 2026] [:error] [pid 10508:tid 10553] [client 149.88.19.87:59746] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Admin/uploads/"] [unique_id "aX7JzwFwdoMQv5EWp9vBqwAAAEk"]
[Sun Feb 01 11:34:40.315097 2026] [:error] [pid 10509:tid 10571] [client 149.88.19.87:59752] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Admin/uploads/"] [unique_id "aX7J0FMNpJBihOJgwVtI-QAAAIA"]
[Sun Feb 01 11:34:40.992749 2026] [:error] [pid 51610:tid 51630] [client 149.88.19.87:59764] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Admin/uploads/"] [unique_id "aX7J0N7GFdNFAqImMQCN1wAAAVA"]
[Sun Feb 01 11:34:41.678440 2026] [:error] [pid 10508:tid 10563] [client 149.88.19.87:59772] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Admin/uploads/"] [unique_id "aX7J0QFwdoMQv5EWp9vBrQAAAFM"]
[Sun Feb 01 11:34:42.381873 2026] [:error] [pid 10509:tid 10573] [client 149.88.19.87:59782] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aX7J0lMNpJBihOJgwVtI_AAAAII"]
[Sun Feb 01 11:34:43.578574 2026] [:error] [pid 10508:tid 10544] [client 149.88.19.87:59784] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aX7J0wFwdoMQv5EWp9vBsQAAAEA"]
[Sun Feb 01 11:34:44.252327 2026] [:error] [pid 10616:tid 10622] [client 149.88.19.87:59798] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aX7J1Gd8pZdmVx6pUp5h4gAAAMI"]
[Sun Feb 01 11:34:44.911656 2026] [:error] [pid 10509:tid 10577] [client 149.88.19.87:59810] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aX7J1FMNpJBihOJgwVtJAgAAAIY"]
[Sun Feb 01 11:34:45.542104 2026] [:error] [pid 2033:tid 2056] [client 149.88.19.87:59822] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aX7J1fF7B4oR5nK3T_ODIQAAARM"]
[Sun Feb 01 11:34:46.196874 2026] [:error] [pid 10508:tid 10551] [client 149.88.19.87:59828] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aX7J1gFwdoMQv5EWp9vBvAAAAEc"]
[Sun Feb 01 11:34:46.944862 2026] [:error] [pid 2033:tid 2047] [client 149.88.19.87:38538] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aX7J1vF7B4oR5nK3T_ODIwAAAQw"]
[Sun Feb 01 11:34:47.849375 2026] [:error] [pid 10616:tid 10631] [client 149.88.19.87:38540] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aX7J12d8pZdmVx6pUp5h5AAAAMs"]
[Sun Feb 01 11:34:48.442372 2026] [:error] [pid 10509:tid 10579] [client 149.88.19.87:38546] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aX7J2FMNpJBihOJgwVtJBwAAAIg"]
[Sun Feb 01 11:34:49.110816 2026] [:error] [pid 2033:tid 2039] [client 149.88.19.87:38554] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aX7J2fF7B4oR5nK3T_ODKgAAAQQ"]
[Sun Feb 01 11:34:49.791726 2026] [:error] [pid 10506:tid 10519] [client 149.88.19.87:38564] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aX7J2a32IC2Db4uwFyP7MwAAAAM"]
[Sun Feb 01 11:34:50.600884 2026] [:error] [pid 10616:tid 10644] [client 149.88.19.87:38576] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aX7J2md8pZdmVx6pUp5h5QAAANg"]
[Sun Feb 01 11:34:51.776821 2026] [:error] [pid 10616:tid 10641] [client 149.88.19.87:38582] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aX7J22d8pZdmVx6pUp5h6AAAANU"]
[Sun Feb 01 11:34:52.416135 2026] [:error] [pid 10508:tid 10551] [client 149.88.19.87:38598] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aX7J3AFwdoMQv5EWp9vBxQAAAEc"]
[Sun Feb 01 11:34:53.123615 2026] [:error] [pid 51610:tid 51621] [client 149.88.19.87:38610] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aX7J3d7GFdNFAqImMQCN4AAAAUc"]
[Sun Feb 01 11:34:53.812107 2026] [:error] [pid 10509:tid 10580] [client 149.88.19.87:38626] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aX7J3VMNpJBihOJgwVtJDwAAAIk"]
[Sun Feb 01 11:34:54.486316 2026] [:error] [pid 2033:tid 2042] [client 149.88.19.87:38640] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aX7J3vF7B4oR5nK3T_ODMwAAAQc"]
[Sun Feb 01 11:34:55.122577 2026] [:error] [pid 2033:tid 2060] [client 149.88.19.87:38652] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aX7J3_F7B4oR5nK3T_ODNAAAARU"]
[Sun Feb 01 11:34:55.835650 2026] [:error] [pid 10508:tid 10567] [client 149.88.19.87:38662] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aX7J3wFwdoMQv5EWp9vBxgAAAFc"]
[Sun Feb 01 11:34:56.454188 2026] [:error] [pid 51610:tid 51630] [client 149.88.19.87:46042] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aX7J4N7GFdNFAqImMQCN5AAAAVA"]
[Sun Feb 01 11:34:57.048452 2026] [:error] [pid 10506:tid 10525] [client 149.88.19.87:46048] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aX7J4a32IC2Db4uwFyP7OwAAAAk"]
[Sun Feb 01 11:34:57.686926 2026] [:error] [pid 51610:tid 51627] [client 149.88.19.87:46056] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aX7J4d7GFdNFAqImMQCN6AAAAU0"]
[Sun Feb 01 11:34:58.338815 2026] [:error] [pid 10616:tid 10640] [client 149.88.19.87:46062] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aX7J4md8pZdmVx6pUp5h7QAAANQ"]
[Sun Feb 01 11:34:58.951376 2026] [:error] [pid 10506:tid 10527] [client 149.88.19.87:46064] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aX7J4q32IC2Db4uwFyP7QAAAAAs"]
[Sun Feb 01 11:34:59.543869 2026] [:error] [pid 10508:tid 10563] [client 149.88.19.87:46072] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aX7J4wFwdoMQv5EWp9vBzwAAAFM"]
[Sun Feb 01 11:35:00.461209 2026] [:error] [pid 51610:tid 51618] [client 149.88.19.87:46080] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aX7J5N7GFdNFAqImMQCN8AAAAUQ"]
[Sun Feb 01 11:35:01.126938 2026] [:error] [pid 10616:tid 10644] [client 149.88.19.87:46092] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aX7J5Wd8pZdmVx6pUp5h7wAAANg"]
[Sun Feb 01 11:35:01.816246 2026] [:error] [pid 10509:tid 10580] [client 149.88.19.87:46094] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aX7J5VMNpJBihOJgwVtJFQAAAIk"]
[Sun Feb 01 11:35:02.841253 2026] [:error] [pid 10616:tid 10638] [client 149.88.19.87:46100] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aX7J5md8pZdmVx6pUp5h8gAAANI"]
[Sun Feb 01 11:35:03.556420 2026] [:error] [pid 10616:tid 10621] [client 149.88.19.87:46112] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aX7J52d8pZdmVx6pUp5h9gAAAME"]
[Sun Feb 01 11:35:04.229165 2026] [:error] [pid 10616:tid 10636] [client 149.88.19.87:46128] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aX7J6Gd8pZdmVx6pUp5h-QAAANA"]
[Sun Feb 01 11:35:04.883961 2026] [:error] [pid 10616:tid 10639] [client 149.88.19.87:46132] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aX7J6Gd8pZdmVx6pUp5h-wAAANM"]
[Sun Feb 01 11:35:05.557935 2026] [:error] [pid 10509:tid 10585] [client 149.88.19.87:46144] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aX7J6VMNpJBihOJgwVtJFwAAAI4"]
[Sun Feb 01 11:35:06.237862 2026] [:error] [pid 10616:tid 10638] [client 149.88.19.87:46152] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aX7J6md8pZdmVx6pUp5iAgAAANI"]
[Sun Feb 01 11:35:06.925830 2026] [:error] [pid 2033:tid 2049] [client 149.88.19.87:40822] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aX7J6vF7B4oR5nK3T_ODPgAAAQ4"]
[Sun Feb 01 11:35:07.520871 2026] [:error] [pid 10616:tid 10635] [client 149.88.19.87:40838] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aX7J62d8pZdmVx6pUp5iBAAAAM8"]
[Sun Feb 01 11:35:08.150665 2026] [:error] [pid 10616:tid 10639] [client 149.88.19.87:40846] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aX7J7Gd8pZdmVx6pUp5iBwAAANM"]
[Sun Feb 01 11:35:08.803134 2026] [:error] [pid 10616:tid 10626] [client 149.88.19.87:40854] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aX7J7Gd8pZdmVx6pUp5iDgAAAMY"]
[Sun Feb 01 11:35:09.412163 2026] [:error] [pid 10508:tid 10559] [client 149.88.19.87:40858] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aX7J7QFwdoMQv5EWp9vB1gAAAE8"]
[Sun Feb 01 11:35:10.000974 2026] [:error] [pid 51610:tid 51624] [client 149.88.19.87:40862] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aX7J7d7GFdNFAqImMQCN_AAAAUo"]
[Sun Feb 01 11:35:10.732707 2026] [:error] [pid 2033:tid 2064] [client 149.88.19.87:40872] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aX7J7vF7B4oR5nK3T_ODRAAAARc"]
[Sun Feb 01 11:35:11.470352 2026] [:error] [pid 2033:tid 2043] [client 149.88.19.87:40886] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aX7J7_F7B4oR5nK3T_ODSAAAAQg"]
[Sun Feb 01 11:35:12.096533 2026] [:error] [pid 10616:tid 10641] [client 149.88.19.87:40888] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aX7J8Gd8pZdmVx6pUp5iGAAAANU"]
[Sun Feb 01 11:35:12.719494 2026] [:error] [pid 10616:tid 10630] [client 149.88.19.87:40896] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aX7J8Gd8pZdmVx6pUp5iGgAAAMo"]
[Sun Feb 01 11:35:13.567030 2026] [:error] [pid 10616:tid 10643] [client 149.88.19.87:40912] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aX7J8Wd8pZdmVx6pUp5iIQAAANc"]
[Sun Feb 01 11:35:14.440807 2026] [:error] [pid 2033:tid 2044] [client 149.88.19.87:40928] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aX7J8vF7B4oR5nK3T_ODTAAAAQk"]
[Sun Feb 01 11:35:15.373776 2026] [:error] [pid 10616:tid 10624] [client 149.88.19.87:40936] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aX7J82d8pZdmVx6pUp5iKAAAAMQ"]
[Sun Feb 01 11:35:16.032355 2026] [:error] [pid 10616:tid 10639] [client 149.88.19.87:40938] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aX7J9Gd8pZdmVx6pUp5iKwAAANM"]
[Sun Feb 01 11:35:16.713877 2026] [:error] [pid 10616:tid 10641] [client 149.88.19.87:54696] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aX7J9Gd8pZdmVx6pUp5iLgAAANU"]
[Sun Feb 01 11:35:17.632267 2026] [:error] [pid 10506:tid 10529] [client 149.88.19.87:54698] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aX7J9a32IC2Db4uwFyP7SgAAAA0"]
[Sun Feb 01 11:35:18.490920 2026] [:error] [pid 10506:tid 10536] [client 149.88.19.87:54704] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aX7J9q32IC2Db4uwFyP7TAAAABQ"]
[Sun Feb 01 11:35:19.390642 2026] [:error] [pid 10509:tid 10581] [client 149.88.19.87:54710] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aX7J91MNpJBihOJgwVtJIwAAAIo"]
[Sun Feb 01 11:35:20.010961 2026] [:error] [pid 2033:tid 2047] [client 149.88.19.87:54712] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aX7J-PF7B4oR5nK3T_ODUAAAAQw"]
[Sun Feb 01 11:35:21.116267 2026] [:error] [pid 10616:tid 10624] [client 149.88.19.87:54724] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aX7J-Wd8pZdmVx6pUp5iPQAAAMQ"]
[Sun Feb 01 11:35:21.727423 2026] [:error] [pid 51610:tid 51635] [client 149.88.19.87:54728] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aX7J-d7GFdNFAqImMQCOAgAAAVU"]
[Sun Feb 01 11:35:22.474469 2026] [:error] [pid 51610:tid 51638] [client 149.88.19.87:54740] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aX7J-t7GFdNFAqImMQCOBAAAAVg"]
[Sun Feb 01 11:35:23.218673 2026] [:error] [pid 51610:tid 51623] [client 149.88.19.87:54756] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aX7J-97GFdNFAqImMQCOBgAAAUk"]
[Sun Feb 01 11:35:23.840735 2026] [:error] [pid 10509:tid 10592] [client 149.88.19.87:54770] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aX7J-1MNpJBihOJgwVtJKgAAAJU"]
[Sun Feb 01 11:35:24.538712 2026] [:error] [pid 10509:tid 10585] [client 149.88.19.87:54786] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aX7J_FMNpJBihOJgwVtJLQAAAI4"]
[Sun Feb 01 11:35:25.344596 2026] [:error] [pid 51610:tid 51626] [client 149.88.19.87:54798] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aX7J_d7GFdNFAqImMQCOEAAAAUw"]
[Sun Feb 01 11:35:26.049506 2026] [:error] [pid 10616:tid 10628] [client 149.88.19.87:54808] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aX7J_md8pZdmVx6pUp5iQgAAAMg"]
[Sun Feb 01 11:35:26.677831 2026] [:error] [pid 10508:tid 10561] [client 149.88.19.87:34808] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aX7J_gFwdoMQv5EWp9vB6AAAAFE"]
[Sun Feb 01 11:35:27.273172 2026] [:error] [pid 10616:tid 10634] [client 149.88.19.87:34818] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aX7J_2d8pZdmVx6pUp5iQwAAAM4"]
[Sun Feb 01 11:35:57.495559 2026] [autoindex:error] [pid 10508:tid 10564] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:02.763426 2026] [autoindex:error] [pid 10508:tid 10552] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:03.189957 2026] [autoindex:error] [pid 10508:tid 10557] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:08.351472 2026] [autoindex:error] [pid 10508:tid 10545] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:08.821335 2026] [autoindex:error] [pid 10508:tid 10565] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:09.473432 2026] [autoindex:error] [pid 10508:tid 10558] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:10.032431 2026] [autoindex:error] [pid 10508:tid 10546] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:11.119079 2026] [autoindex:error] [pid 10508:tid 10548] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:11.754954 2026] [autoindex:error] [pid 10508:tid 10547] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:12.354140 2026] [autoindex:error] [pid 10508:tid 10567] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:13.928885 2026] [autoindex:error] [pid 10508:tid 10553] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:20.455033 2026] [autoindex:error] [pid 10508:tid 10564] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:20.928254 2026] [autoindex:error] [pid 10508:tid 10568] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:21.818282 2026] [autoindex:error] [pid 10508:tid 10548] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:22.350627 2026] [autoindex:error] [pid 10508:tid 10553] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:23.530077 2026] [autoindex:error] [pid 10508:tid 10566] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:23.986825 2026] [autoindex:error] [pid 10508:tid 10563] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:24.479483 2026] [autoindex:error] [pid 10508:tid 10561] [client 149.88.19.87:34832] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 11:36:35.399604 2026] [:error] [pid 10508:tid 10550] [client 149.88.19.87:34832] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sites/default/files/"] [unique_id "aX7KQwFwdoMQv5EWp9vCYwAAAEY"]
[Sun Feb 01 11:36:36.232195 2026] [:error] [pid 10506:tid 10521] [client 149.88.19.87:55630] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sites/default/files/"] [unique_id "aX7KRK32IC2Db4uwFyP73wAAAAU"]
[Sun Feb 01 11:36:37.149917 2026] [:error] [pid 10506:tid 10534] [client 149.88.19.87:51968] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sites/default/files/"] [unique_id "aX7KRa32IC2Db4uwFyP75QAAABI"]
[Sun Feb 01 11:36:37.935739 2026] [:error] [pid 10509:tid 10585] [client 149.88.19.87:51970] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sites/default/files/"] [unique_id "aX7KRVMNpJBihOJgwVtJkgAAAI4"]
[Sun Feb 01 11:36:38.788700 2026] [:error] [pid 10616:tid 10643] [client 149.88.19.87:51980] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aX7KRmd8pZdmVx6pUp5itwAAANc"]
[Sun Feb 01 11:36:39.544888 2026] [:error] [pid 10616:tid 10630] [client 149.88.19.87:51996] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aX7KR2d8pZdmVx6pUp5iuQAAAMo"]
[Sun Feb 01 11:36:40.522385 2026] [:error] [pid 51610:tid 51636] [client 149.88.19.87:52010] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aX7KSN7GFdNFAqImMQCOjQAAAVY"]
[Sun Feb 01 11:36:41.183161 2026] [:error] [pid 10616:tid 10633] [client 149.88.19.87:52024] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aX7KSWd8pZdmVx6pUp5ivQAAAM0"]
[Sun Feb 01 11:36:41.852849 2026] [:error] [pid 10508:tid 10549] [client 149.88.19.87:52030] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aX7KSQFwdoMQv5EWp9vCZQAAAEU"]
[Sun Feb 01 11:36:42.848716 2026] [:error] [pid 10616:tid 10637] [client 149.88.19.87:52038] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aX7KSmd8pZdmVx6pUp5iwQAAANE"]
[Sun Feb 01 11:36:43.512162 2026] [:error] [pid 10616:tid 10625] [client 149.88.19.87:52054] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aX7KS2d8pZdmVx6pUp5ixgAAAMU"]
[Sun Feb 01 11:36:44.105311 2026] [:error] [pid 2033:tid 2064] [client 149.88.19.87:52064] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aX7KTPF7B4oR5nK3T_OD_QAAARc"]
[Sun Feb 01 11:36:44.786894 2026] [:error] [pid 10508:tid 10566] [client 149.88.19.87:52078] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/components/"] [unique_id "aX7KTAFwdoMQv5EWp9vCaAAAAFY"]
[Sun Feb 01 11:36:45.470774 2026] [:error] [pid 51610:tid 51616] [client 149.88.19.87:52090] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/components/"] [unique_id "aX7KTd7GFdNFAqImMQCOmAAAAUI"]
[Sun Feb 01 11:36:46.213696 2026] [:error] [pid 2033:tid 2039] [client 149.88.19.87:52094] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/components/"] [unique_id "aX7KTvF7B4oR5nK3T_OEAAAAAQQ"]
[Sun Feb 01 11:36:46.809996 2026] [:error] [pid 51610:tid 51624] [client 149.88.19.87:36038] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/components/"] [unique_id "aX7KTt7GFdNFAqImMQCOnQAAAUo"]
[Sun Feb 01 11:36:47.425340 2026] [:error] [pid 10508:tid 10562] [client 149.88.19.87:36048] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/images/"] [unique_id "aX7KTwFwdoMQv5EWp9vCbAAAAFI"]
[Sun Feb 01 11:36:48.054904 2026] [:error] [pid 51610:tid 51617] [client 149.88.19.87:36050] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/images/"] [unique_id "aX7KUN7GFdNFAqImMQCOnwAAAUM"]
[Sun Feb 01 11:36:48.725235 2026] [:error] [pid 10508:tid 10564] [client 149.88.19.87:36056] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/images/"] [unique_id "aX7KUAFwdoMQv5EWp9vCbgAAAFQ"]
[Sun Feb 01 11:36:52.377650 2026] [:error] [pid 10508:tid 10548] [client 149.88.19.87:36072] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/uploads/images/"] [unique_id "aX7KVAFwdoMQv5EWp9vCcgAAAEQ"]
[Sun Feb 01 11:36:53.054343 2026] [:error] [pid 10616:tid 10628] [client 149.88.19.87:36082] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aX7KVWd8pZdmVx6pUp5i2AAAAMg"]
[Sun Feb 01 11:36:53.712663 2026] [:error] [pid 2033:tid 2046] [client 149.88.19.87:36094] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aX7KVfF7B4oR5nK3T_OECgAAAQs"]
[Sun Feb 01 11:36:54.589744 2026] [:error] [pid 10506:tid 10517] [client 149.88.19.87:36106] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aX7KVq32IC2Db4uwFyP8BwAAAAE"]
[Sun Feb 01 11:36:55.392478 2026] [:error] [pid 10508:tid 10563] [client 149.88.19.87:36114] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aX7KVwFwdoMQv5EWp9vCdAAAAFM"]
[Sun Feb 01 11:36:56.224425 2026] [:error] [pid 10506:tid 10525] [client 149.88.19.87:36116] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/"] [unique_id "aX7KWK32IC2Db4uwFyP8DgAAAAk"]
[Sun Feb 01 11:36:57.296621 2026] [:error] [pid 10508:tid 10559] [client 149.88.19.87:41644] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/"] [unique_id "aX7KWQFwdoMQv5EWp9vCeAAAAE8"]
[Sun Feb 01 11:36:58.198764 2026] [:error] [pid 10509:tid 10592] [client 149.88.19.87:41648] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/"] [unique_id "aX7KWlMNpJBihOJgwVtJogAAAJU"]
[Sun Feb 01 11:36:59.067897 2026] [:error] [pid 51610:tid 51635] [client 149.88.19.87:41650] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/"] [unique_id "aX7KW97GFdNFAqImMQCOrwAAAVU"]
[Sun Feb 01 11:37:00.219624 2026] [:error] [pid 10508:tid 10545] [client 149.88.19.87:41654] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aX7KXAFwdoMQv5EWp9vCfQAAAEE"]
[Sun Feb 01 11:37:00.988597 2026] [:error] [pid 2033:tid 2044] [client 149.88.19.87:41658] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aX7KXPF7B4oR5nK3T_OEEgAAAQk"]
[Sun Feb 01 11:37:01.667415 2026] [:error] [pid 10616:tid 10644] [client 149.88.19.87:41668] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aX7KXWd8pZdmVx6pUp5i2gAAANg"]
[Sun Feb 01 11:37:02.310810 2026] [:error] [pid 51610:tid 51624] [client 149.88.19.87:41684] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aX7KXt7GFdNFAqImMQCOugAAAUo"]
[Sun Feb 01 11:37:02.933616 2026] [:error] [pid 2033:tid 2035] [client 149.88.19.87:41686] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aX7KXvF7B4oR5nK3T_OEFgAAAQA"]
[Sun Feb 01 11:37:03.627822 2026] [:error] [pid 10509:tid 10578] [client 149.88.19.87:41696] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aX7KX1MNpJBihOJgwVtJqAAAAIc"]
[Sun Feb 01 11:37:04.290301 2026] [:error] [pid 51610:tid 51632] [client 149.88.19.87:41704] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aX7KYN7GFdNFAqImMQCOwAAAAVI"]
[Sun Feb 01 11:37:04.968810 2026] [:error] [pid 10509:tid 10574] [client 149.88.19.87:41720] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aX7KYFMNpJBihOJgwVtJqwAAAIM"]
[Sun Feb 01 11:37:05.723081 2026] [:error] [pid 10509:tid 10573] [client 149.88.19.87:41728] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/"] [unique_id "aX7KYVMNpJBihOJgwVtJrwAAAII"]
[Sun Feb 01 11:37:06.349357 2026] [:error] [pid 10509:tid 10572] [client 149.88.19.87:47214] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/"] [unique_id "aX7KYlMNpJBihOJgwVtJswAAAIE"]
[Sun Feb 01 11:37:07.107804 2026] [:error] [pid 10509:tid 10579] [client 149.88.19.87:47228] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/"] [unique_id "aX7KY1MNpJBihOJgwVtJtwAAAIg"]
[Sun Feb 01 11:37:07.893682 2026] [:error] [pid 10508:tid 10561] [client 149.88.19.87:47234] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/"] [unique_id "aX7KYwFwdoMQv5EWp9vChAAAAFE"]
[Sun Feb 01 11:37:08.587147 2026] [:error] [pid 10506:tid 10525] [client 149.88.19.87:47250] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aX7KZK32IC2Db4uwFyP8HAAAAAk"]
[Sun Feb 01 11:37:09.760767 2026] [:error] [pid 10508:tid 10554] [client 149.88.19.87:47258] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aX7KZQFwdoMQv5EWp9vChQAAAEo"]
[Sun Feb 01 11:37:10.351487 2026] [:error] [pid 10508:tid 10548] [client 149.88.19.87:47270] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aX7KZgFwdoMQv5EWp9vChwAAAEQ"]
[Sun Feb 01 11:37:10.981380 2026] [:error] [pid 10509:tid 10585] [client 149.88.19.87:47286] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aX7KZlMNpJBihOJgwVtJuQAAAI4"]
[Sun Feb 01 11:37:11.652173 2026] [:error] [pid 10616:tid 10620] [client 149.88.19.87:47288] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aX7KZ2d8pZdmVx6pUp5i7wAAAMA"]
[Sun Feb 01 11:37:12.248478 2026] [:error] [pid 2033:tid 2069] [client 149.88.19.87:47304] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aX7KaPF7B4oR5nK3T_OEIgAAARg"]
[Sun Feb 01 11:37:12.857116 2026] [:error] [pid 10506:tid 10522] [client 149.88.19.87:47320] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aX7KaK32IC2Db4uwFyP8KAAAAAY"]
[Sun Feb 01 11:37:13.519683 2026] [:error] [pid 10616:tid 10630] [client 149.88.19.87:47330] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aX7KaWd8pZdmVx6pUp5i8wAAAMo"]
[Sun Feb 01 11:37:14.165384 2026] [:error] [pid 10508:tid 10556] [client 149.88.19.87:47334] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aX7KagFwdoMQv5EWp9vCjwAAAEw"]
[Sun Feb 01 11:37:14.838408 2026] [:error] [pid 10616:tid 10621] [client 149.88.19.87:47336] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aX7Kamd8pZdmVx6pUp5i9QAAAME"]
[Sun Feb 01 11:37:15.535658 2026] [:error] [pid 10616:tid 10632] [client 149.88.19.87:47344] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aX7Ka2d8pZdmVx6pUp5i-gAAAMw"]
[Sun Feb 01 11:37:16.341964 2026] [:error] [pid 10509:tid 10589] [client 149.88.19.87:47012] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aX7KbFMNpJBihOJgwVtJuwAAAJI"]
[Sun Feb 01 11:37:17.125328 2026] [:error] [pid 10508:tid 10548] [client 149.88.19.87:47020] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/"] [unique_id "aX7KbQFwdoMQv5EWp9vClgAAAEQ"]
[Sun Feb 01 11:37:17.745838 2026] [:error] [pid 10509:tid 10581] [client 149.88.19.87:47024] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/"] [unique_id "aX7KbVMNpJBihOJgwVtJwAAAAIo"]
[Sun Feb 01 11:37:18.368534 2026] [:error] [pid 51610:tid 51623] [client 149.88.19.87:47028] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/"] [unique_id "aX7Kbt7GFdNFAqImMQCOxwAAAUk"]
[Sun Feb 01 11:37:19.110628 2026] [:error] [pid 51610:tid 51634] [client 149.88.19.87:47030] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js/"] [unique_id "aX7Kb97GFdNFAqImMQCOyQAAAVQ"]
[Sun Feb 01 11:37:19.805895 2026] [:error] [pid 10508:tid 10559] [client 149.88.19.87:47042] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aX7KbwFwdoMQv5EWp9vCmgAAAE8"]
[Sun Feb 01 11:37:20.687991 2026] [:error] [pid 51610:tid 51622] [client 149.88.19.87:47058] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aX7KcN7GFdNFAqImMQCOzQAAAUg"]
[Sun Feb 01 11:37:21.387494 2026] [:error] [pid 10509:tid 10571] [client 149.88.19.87:47060] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aX7KcVMNpJBihOJgwVtJxgAAAIA"]
[Sun Feb 01 11:37:22.044134 2026] [:error] [pid 2033:tid 2041] [client 149.88.19.87:47074] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aX7KcvF7B4oR5nK3T_OEKQAAAQY"]
[Sun Feb 01 11:37:22.644635 2026] [:error] [pid 10509:tid 10579] [client 149.88.19.87:47076] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aX7KclMNpJBihOJgwVtJywAAAIg"]
[Sun Feb 01 11:37:23.364729 2026] [:error] [pid 10616:tid 10643] [client 149.88.19.87:47090] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aX7Kc2d8pZdmVx6pUp5jAgAAANc"]
[Sun Feb 01 11:37:23.989290 2026] [:error] [pid 2033:tid 2040] [client 149.88.19.87:47096] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aX7Kc_F7B4oR5nK3T_OELgAAAQU"]
[Sun Feb 01 11:37:24.587285 2026] [:error] [pid 10616:tid 10623] [client 149.88.19.87:47110] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aX7KdGd8pZdmVx6pUp5jBgAAAMM"]
[Sun Feb 01 11:37:25.313803 2026] [:error] [pid 10506:tid 10522] [client 149.88.19.87:47114] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aX7Kda32IC2Db4uwFyP8NgAAAAY"]
[Sun Feb 01 11:37:26.231750 2026] [:error] [pid 51610:tid 51629] [client 149.88.19.87:47130] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aX7Kdt7GFdNFAqImMQCO1QAAAU8"]
[Sun Feb 01 11:37:26.905786 2026] [:error] [pid 10506:tid 10535] [client 149.88.19.87:59924] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aX7Kdq32IC2Db4uwFyP8PQAAABM"]
[Sun Feb 01 11:37:27.493956 2026] [:error] [pid 10616:tid 10638] [client 149.88.19.87:59932] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aX7Kd2d8pZdmVx6pUp5jCQAAANI"]
[Sun Feb 01 11:37:28.340062 2026] [:error] [pid 10506:tid 10528] [client 149.88.19.87:59940] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aX7KeK32IC2Db4uwFyP8QgAAAAw"]
[Sun Feb 01 11:37:29.041314 2026] [:error] [pid 10508:tid 10556] [client 149.88.19.87:59942] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aX7KeQFwdoMQv5EWp9vCpAAAAEw"]
[Sun Feb 01 11:37:29.718518 2026] [:error] [pid 10616:tid 10632] [client 149.88.19.87:59952] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aX7KeWd8pZdmVx6pUp5jEQAAAMw"]
[Sun Feb 01 11:37:30.435500 2026] [:error] [pid 10616:tid 10642] [client 149.88.19.87:59960] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aX7Kemd8pZdmVx6pUp5jEgAAANY"]
[Sun Feb 01 11:37:31.121122 2026] [:error] [pid 10509:tid 10572] [client 149.88.19.87:59962] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aX7Ke1MNpJBihOJgwVtJ0AAAAIE"]
[Sun Feb 01 11:37:31.798268 2026] [:error] [pid 10508:tid 10550] [client 149.88.19.87:59968] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aX7KewFwdoMQv5EWp9vCpQAAAEY"]
[Sun Feb 01 11:37:32.442914 2026] [:error] [pid 10616:tid 10630] [client 149.88.19.87:59970] [client 149.88.19.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aX7KfGd8pZdmVx6pUp5jGAAAAMo"]
[Sun Feb 01 11:37:51.369073 2026] [autoindex:error] [pid 10616:tid 10638] [client 149.88.19.87:59972] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 01 16:04:18.541368 2026] [autoindex:error] [pid 10616:tid 10640] [client 38.242.152.104:64504] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 01 17:17:13.205226 2026] [:error] [pid 2033:tid 2069] [client 185.233.100.23:36828] [client 185.233.100.23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/weekly.sql"] [unique_id "aX8aGfF7B4oR5nK3T_PjUAAAARg"]
[Sun Feb 01 17:17:27.579945 2026] [:error] [pid 51610:tid 51617] [client 192.159.99.21:21180] [client 192.159.99.21] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/back.sql"] [unique_id "aX8aJ97GFdNFAqImMQDxNgAAAUM"]
[Mon Feb 02 02:41:18.876082 2026] [:error] [pid 2033:tid 2053] [client 159.223.82.39:53642] [client 159.223.82.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.82.39, incrementing brute counter"] [hostname "www.makifim.com.au"] [uri "/wp-login.php"] [unique_id "aX-eTvF7B4oR5nK3T_NapwAAARI"], referer: https://www.google.com/search?q=wordpress
[Mon Feb 02 02:41:39.792900 2026] [:error] [pid 10616:tid 10624] [client 159.223.82.39:56777] [client 159.223.82.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.82.39, incrementing brute counter"] [hostname "www.makifim.com.au"] [uri "/wp-login.php"] [unique_id "aX-eY2d8pZdmVx6pUp49ewAAAMQ"]
[Mon Feb 02 04:47:48.888107 2026] [:error] [pid 63032:tid 63067] [client 45.130.83.179:58051] [client 45.130.83.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 45.130.83.179, counter = 6"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aX-79HyEQ1PkpebvdRgOywAAAAQ"]
[Mon Feb 02 04:47:59.013085 2026] [:error] [pid 63153:tid 63180] [client 45.130.83.151:31697] [client 45.130.83.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aX-7_3C9GXHnmLkdgdmjbgAAANM"]
[Mon Feb 02 08:23:06.203391 2026] [:error] [pid 62826:tid 62837] [client 52.141.3.29:9671] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aX_uaoF6vPvg_C5dUL-2jgAAAYk"]
[Mon Feb 02 08:23:09.227541 2026] [:error] [pid 63034:tid 63127] [client 52.141.3.29:50816] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aX_ubeKXlgw75_wfbHpEAgAAAIk"]
[Mon Feb 02 08:23:14.076106 2026] [:error] [pid 63034:tid 63140] [client 52.141.3.29:25334] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aX_ucuKXlgw75_wfbHpECAAAAJY"]
[Mon Feb 02 08:23:18.375669 2026] [:error] [pid 63153:tid 63175] [client 52.141.3.29:37341] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aX_udnC9GXHnmLkdgdnsogAAAM4"]
[Mon Feb 02 08:23:20.055244 2026] [:error] [pid 33612:tid 33624] [client 52.141.3.29:25131] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws53.php"] [unique_id "aX_ueMtFn80qQEmo5QpvKwAAAQo"]
[Mon Feb 02 08:23:20.687927 2026] [:error] [pid 63033:tid 63112] [client 52.141.3.29:34094] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws53.php"] [unique_id "aX_uePeMX2QyIh3K16pRNwAAAFU"]
[Mon Feb 02 08:23:21.972904 2026] [:error] [pid 8507:tid 8528] [client 52.141.3.29:25137] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws53.php"] [unique_id "aX_uedk9kluqaCHoCymW6wAAAdM"]
[Mon Feb 02 08:23:23.092022 2026] [:error] [pid 46008:tid 46026] [client 52.141.3.29:33898] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws53.php"] [unique_id "aX_ueyRa52iYn7SlSMkFOAAAAU8"]
[Mon Feb 02 08:23:25.834645 2026] [:error] [pid 8507:tid 8525] [client 52.141.3.29:34713] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "aX_ufdk9kluqaCHoCymW8gAAAdA"]
[Mon Feb 02 08:23:28.627212 2026] [:error] [pid 63153:tid 63172] [client 52.141.3.29:33918] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "aX_ugHC9GXHnmLkdgdnsqAAAAMs"]
[Mon Feb 02 08:23:40.624170 2026] [:error] [pid 46008:tid 46029] [client 52.141.3.29:50629] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/soniau.php"] [unique_id "aX_ujCRa52iYn7SlSMkFRQAAAVI"]
[Mon Feb 02 08:23:49.801956 2026] [:error] [pid 46008:tid 46029] [client 52.141.3.29:37324] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/soniau.php"] [unique_id "aX_ulSRa52iYn7SlSMkFTQAAAVI"]
[Mon Feb 02 08:23:56.142557 2026] [:error] [pid 63032:tid 63087] [client 52.141.3.29:25294] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws55.php"] [unique_id "aX_unHyEQ1PkpebvdRg_cQAAABg"]
[Mon Feb 02 08:23:59.060629 2026] [:error] [pid 46008:tid 46024] [client 52.141.3.29:52856] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws55.php"] [unique_id "aX_unyRa52iYn7SlSMkFXQAAAU0"]
[Mon Feb 02 08:24:00.648023 2026] [:error] [pid 63032:tid 63082] [client 52.141.3.29:52852] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws55.php"] [unique_id "aX_uoHyEQ1PkpebvdRg_egAAABM"]
[Mon Feb 02 08:24:01.279111 2026] [:error] [pid 8507:tid 8525] [client 52.141.3.29:16858] [client 52.141.3.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws55.php"] [unique_id "aX_uodk9kluqaCHoCymXKAAAAdA"]
[Tue Feb 03 00:34:58.142861 2026] [:error] [pid 63153:tid 63179] [client 20.89.111.141:63284] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "aYDSMnC9GXHnmLkdgdnWzwAAANI"]
[Tue Feb 03 00:35:01.559777 2026] [:error] [pid 46008:tid 46021] [client 20.89.111.141:28574] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "aYDSNSRa52iYn7SlSMnOigAAAUo"]
[Tue Feb 03 00:35:03.731776 2026] [:error] [pid 57022:tid 57067] [client 20.89.111.141:33557] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "aYDSNxnEgLMzfcurxflxHAAAAo8"]
[Tue Feb 03 00:35:04.573052 2026] [:error] [pid 63034:tid 63124] [client 20.89.111.141:34954] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "aYDSOOKXlgw75_wfbHoL-gAAAIY"]
[Tue Feb 03 00:35:06.885332 2026] [:error] [pid 63153:tid 63180] [client 20.89.111.141:30244] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qasu.php"] [unique_id "aYDSOnC9GXHnmLkdgdnW0wAAANM"]
[Tue Feb 03 00:35:09.248117 2026] [:error] [pid 56989:tid 57000] [client 20.89.111.141:39713] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qasu.php"] [unique_id "aYDSPUp44HnChN-GZlhH8QAAAgk"]
[Tue Feb 03 00:35:10.146097 2026] [:error] [pid 56989:tid 56997] [client 20.89.111.141:32620] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qasu.php"] [unique_id "aYDSPkp44HnChN-GZlhH8wAAAgY"]
[Tue Feb 03 00:35:13.715627 2026] [:error] [pid 63153:tid 63174] [client 20.89.111.141:29602] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qasu.php"] [unique_id "aYDSQXC9GXHnmLkdgdnW4QAAAM0"]
[Tue Feb 03 00:35:14.596005 2026] [:error] [pid 56989:tid 56995] [client 20.89.111.141:34971] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Gi8.php"] [unique_id "aYDSQkp44HnChN-GZlhH-wAAAgQ"]
[Tue Feb 03 00:35:16.418306 2026] [:error] [pid 57081:tid 57121] [client 20.89.111.141:42378] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Gi8.php"] [unique_id "aYDSRGvouJ2Jkm6HfBhpJwAAAwY"]
[Tue Feb 03 00:35:19.162299 2026] [:error] [pid 63153:tid 63182] [client 20.89.111.141:37909] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Gi8.php"] [unique_id "aYDSR3C9GXHnmLkdgdnW4wAAANU"]
[Tue Feb 03 00:35:20.272924 2026] [:error] [pid 63153:tid 63179] [client 20.89.111.141:6865] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Gi8.php"] [unique_id "aYDSSHC9GXHnmLkdgdnW5gAAANI"]
[Tue Feb 03 00:35:22.384795 2026] [:error] [pid 63153:tid 63168] [client 20.89.111.141:31189] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admiin.php"] [unique_id "aYDSSnC9GXHnmLkdgdnW6AAAAMc"]
[Tue Feb 03 00:35:25.357879 2026] [:error] [pid 57080:tid 57096] [client 20.89.111.141:33558] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admiin.php"] [unique_id "aYDSTY9Utn0ZlfnF10OA3AAAAsk"]
[Tue Feb 03 00:35:27.790644 2026] [:error] [pid 63153:tid 63171] [client 20.89.111.141:45241] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admiin.php"] [unique_id "aYDST3C9GXHnmLkdgdnW9QAAAMo"]
[Tue Feb 03 00:35:28.931633 2026] [:error] [pid 56989:tid 57011] [client 20.89.111.141:45235] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admiin.php"] [unique_id "aYDSUEp44HnChN-GZlhIFgAAAhQ"]
[Tue Feb 03 00:35:29.561169 2026] [:error] [pid 33612:tid 33614] [client 20.89.111.141:34967] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aYDSUctFn80qQEmo5QorJwAAAQA"]
[Tue Feb 03 00:35:31.262697 2026] [:error] [pid 63032:tid 63067] [client 20.89.111.141:33544] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aYDSU3yEQ1PkpebvdRgWmwAAAAQ"]
[Tue Feb 03 00:35:32.147511 2026] [:error] [pid 63153:tid 63171] [client 20.89.111.141:33594] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aYDSVHC9GXHnmLkdgdnW-gAAAMo"]
[Tue Feb 03 00:35:34.123371 2026] [:error] [pid 63032:tid 63074] [client 20.89.111.141:34958] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aYDSVnyEQ1PkpebvdRgWnwAAAAs"]
[Tue Feb 03 00:35:34.988634 2026] [:error] [pid 56989:tid 57007] [client 20.89.111.141:30208] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aYDSVkp44HnChN-GZlhIIAAAAhA"]
[Tue Feb 03 00:35:43.188880 2026] [:error] [pid 57021:tid 57029] [client 20.89.111.141:33574] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aYDSX_7AEpx7VcmYK3Ej7QAAAkQ"]
[Tue Feb 03 00:35:45.002518 2026] [:error] [pid 56989:tid 57000] [client 20.89.111.141:34969] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aYDSYUp44HnChN-GZlhIOwAAAgk"]
[Tue Feb 03 00:35:46.606450 2026] [:error] [pid 63153:tid 63166] [client 20.89.111.141:37925] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jmfi2.php"] [unique_id "aYDSYnC9GXHnmLkdgdnXDAAAAMU"]
[Tue Feb 03 00:35:47.645022 2026] [:error] [pid 56989:tid 56992] [client 20.89.111.141:34991] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ez.php"] [unique_id "aYDSY0p44HnChN-GZlhIPgAAAgE"]
[Tue Feb 03 00:35:51.638749 2026] [:error] [pid 57081:tid 57125] [client 20.89.111.141:33071] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ez.php"] [unique_id "aYDSZ2vouJ2Jkm6HfBhpNQAAAwo"]
[Tue Feb 03 00:35:52.469059 2026] [:error] [pid 56989:tid 57013] [client 20.89.111.141:34956] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ez.php"] [unique_id "aYDSaEp44HnChN-GZlhIQgAAAhY"]
[Tue Feb 03 00:35:54.534874 2026] [:error] [pid 57080:tid 57093] [client 20.89.111.141:63162] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ez.php"] [unique_id "aYDSao9Utn0ZlfnF10OA4gAAAsY"]
[Tue Feb 03 00:37:10.754109 2026] [:error] [pid 57021:tid 57034] [client 20.89.111.141:33078] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYDStv7AEpx7VcmYK3EkMAAAAkk"]
[Tue Feb 03 00:37:17.220523 2026] [:error] [pid 63032:tid 63075] [client 20.89.111.141:33079] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYDSvXyEQ1PkpebvdRgW1wAAAAw"]
[Tue Feb 03 00:37:18.690725 2026] [:error] [pid 57021:tid 57030] [client 20.89.111.141:46779] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYDSvv7AEpx7VcmYK3EkNgAAAkU"]
[Tue Feb 03 00:37:20.301094 2026] [:error] [pid 46008:tid 46010] [client 20.89.111.141:35762] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYDSwCRa52iYn7SlSMnO1wAAAUA"]
[Tue Feb 03 00:37:22.435625 2026] [:error] [pid 33612:tid 33620] [client 20.89.111.141:6328] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aYDSwstFn80qQEmo5QorcgAAAQY"]
[Tue Feb 03 00:37:23.625943 2026] [:error] [pid 63153:tid 63166] [client 20.89.111.141:46776] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aYDSw3C9GXHnmLkdgdnXgQAAAMU"]
[Tue Feb 03 00:37:25.435492 2026] [:error] [pid 56989:tid 57010] [client 20.89.111.141:33070] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aYDSxUp44HnChN-GZlhInQAAAhM"]
[Tue Feb 03 00:37:27.231070 2026] [:error] [pid 57022:tid 57060] [client 20.89.111.141:33040] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aYDSxxnEgLMzfcurxflxdgAAAog"]
[Tue Feb 03 00:37:28.308883 2026] [:error] [pid 56989:tid 57012] [client 20.89.111.141:6958] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsback.php"] [unique_id "aYDSyEp44HnChN-GZlhIogAAAhU"]
[Tue Feb 03 00:37:30.363892 2026] [:error] [pid 33612:tid 33614] [client 20.89.111.141:35724] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsback.php"] [unique_id "aYDSystFn80qQEmo5QoregAAAQA"]
[Tue Feb 03 00:37:32.946612 2026] [:error] [pid 33612:tid 33624] [client 20.89.111.141:33067] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsback.php"] [unique_id "aYDSzMtFn80qQEmo5QorfgAAAQo"]
[Tue Feb 03 00:37:33.882409 2026] [:error] [pid 56989:tid 57001] [client 20.89.111.141:45690] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsback.php"] [unique_id "aYDSzUp44HnChN-GZlhIqAAAAgo"]
[Tue Feb 03 00:37:39.926877 2026] [:error] [pid 63153:tid 63170] [client 20.89.111.141:31675] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm.php"] [unique_id "aYDS03C9GXHnmLkdgdnXmgAAAMk"]
[Tue Feb 03 00:37:40.979751 2026] [:error] [pid 57022:tid 57074] [client 20.89.111.141:31677] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm.php"] [unique_id "aYDS1BnEgLMzfcurxflxiAAAApY"]
[Tue Feb 03 00:37:41.687952 2026] [:error] [pid 57021:tid 57048] [client 20.89.111.141:33084] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm.php"] [unique_id "aYDS1f7AEpx7VcmYK3EkQQAAAlc"]
[Tue Feb 03 00:37:42.563812 2026] [:error] [pid 56989:tid 57006] [client 20.89.111.141:41555] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm.php"] [unique_id "aYDS1kp44HnChN-GZlhItgAAAg8"]
[Tue Feb 03 00:37:45.922760 2026] [:error] [pid 63034:tid 63123] [client 20.89.111.141:31633] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aYDS2eKXlgw75_wfbHoMYQAAAIU"]
[Tue Feb 03 00:37:46.432118 2026] [:error] [pid 63153:tid 63174] [client 20.89.111.141:46730] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aYDS2nC9GXHnmLkdgdnXpwAAAM0"]
[Tue Feb 03 00:37:48.401373 2026] [:error] [pid 33612:tid 33623] [client 20.89.111.141:6933] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aYDS3MtFn80qQEmo5QorjAAAAQk"]
[Tue Feb 03 00:37:54.767157 2026] [:error] [pid 57021:tid 57045] [client 20.89.111.141:41301] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aYDS4v7AEpx7VcmYK3EkUwAAAlQ"]
[Tue Feb 03 00:37:56.229724 2026] [:error] [pid 63034:tid 63120] [client 20.89.111.141:31679] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trd.php"] [unique_id "aYDS5OKXlgw75_wfbHoMcAAAAII"]
[Tue Feb 03 00:37:57.454830 2026] [:error] [pid 56989:tid 57006] [client 20.89.111.141:61189] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trd.php"] [unique_id "aYDS5Up44HnChN-GZlhIyAAAAg8"]
[Tue Feb 03 00:37:58.466350 2026] [:error] [pid 63034:tid 63122] [client 20.89.111.141:31617] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trd.php"] [unique_id "aYDS5uKXlgw75_wfbHoMdAAAAIQ"]
[Tue Feb 03 00:37:58.844181 2026] [:error] [pid 63034:tid 63132] [client 20.89.111.141:42368] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trd.php"] [unique_id "aYDS5uKXlgw75_wfbHoMdQAAAI4"]
[Tue Feb 03 00:37:59.321392 2026] [:error] [pid 63034:tid 63129] [client 20.89.111.141:6947] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/past.php"] [unique_id "aYDS5-KXlgw75_wfbHoMdwAAAIs"]
[Tue Feb 03 00:38:00.576761 2026] [:error] [pid 63153:tid 63176] [client 20.89.111.141:30152] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/past.php"] [unique_id "aYDS6HC9GXHnmLkdgdnXuwAAAM8"]
[Tue Feb 03 00:38:02.413635 2026] [:error] [pid 57081:tid 57134] [client 20.89.111.141:45703] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/past.php"] [unique_id "aYDS6mvouJ2Jkm6HfBhpnQAAAxM"]
[Tue Feb 03 00:38:02.820012 2026] [:error] [pid 63153:tid 63178] [client 20.89.111.141:41320] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/past.php"] [unique_id "aYDS6nC9GXHnmLkdgdnXwAAAANE"]
[Tue Feb 03 00:38:03.479220 2026] [:error] [pid 63034:tid 63142] [client 20.89.111.141:61240] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prv8.php"] [unique_id "aYDS6-KXlgw75_wfbHoMfQAAAJg"]
[Tue Feb 03 00:38:04.262954 2026] [:error] [pid 63032:tid 63064] [client 20.89.111.141:6233] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prv8.php"] [unique_id "aYDS7HyEQ1PkpebvdRgXEQAAAAE"]
[Tue Feb 03 00:38:05.082441 2026] [:error] [pid 33612:tid 33623] [client 20.89.111.141:31659] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prv8.php"] [unique_id "aYDS7ctFn80qQEmo5QorlAAAAQk"]
[Tue Feb 03 00:38:31.271674 2026] [:error] [pid 46008:tid 46025] [client 20.89.111.141:62242] [client 20.89.111.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.89.111.141, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDTByRa52iYn7SlSMnPDwAAAU4"]
[Tue Feb 03 00:38:45.391675 2026] [proxy_fcgi:error] [pid 57080:tid 57105] [client 103.4.122.14:48032] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Tue Feb 03 00:39:27.135625 2026] [:error] [pid 56989:tid 56993] [client 20.89.111.141:42979] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-gr.php"] [unique_id "aYDTP0p44HnChN-GZlhJQgAAAgI"]
[Tue Feb 03 00:39:27.950558 2026] [:error] [pid 63153:tid 63163] [client 20.89.111.141:47401] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-gr.php"] [unique_id "aYDTP3C9GXHnmLkdgdnYbQAAAMI"]
[Tue Feb 03 00:39:29.217297 2026] [:error] [pid 63153:tid 63173] [client 20.89.111.141:38362] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-gr.php"] [unique_id "aYDTQXC9GXHnmLkdgdnYdwAAAMw"]
[Tue Feb 03 00:39:31.586342 2026] [:error] [pid 63032:tid 63068] [client 20.89.111.141:33622] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-gr.php"] [unique_id "aYDTQ3yEQ1PkpebvdRgXbgAAAAU"]
[Tue Feb 03 00:39:31.971508 2026] [:error] [pid 56989:tid 57001] [client 20.89.111.141:47297] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcp.php"] [unique_id "aYDTQ0p44HnChN-GZlhJSwAAAgo"]
[Tue Feb 03 00:39:32.622049 2026] [:error] [pid 57080:tid 57090] [client 20.89.111.141:32554] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcp.php"] [unique_id "aYDTRI9Utn0ZlfnF10OBiwAAAsM"]
[Tue Feb 03 00:39:35.410251 2026] [:error] [pid 57081:tid 57131] [client 20.89.111.141:36191] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcp.php"] [unique_id "aYDTR2vouJ2Jkm6HfBhqEQAAAxA"]
[Tue Feb 03 00:39:37.160096 2026] [:error] [pid 56989:tid 56992] [client 20.89.111.141:40611] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcp.php"] [unique_id "aYDTSUp44HnChN-GZlhJfwAAAgE"]
[Tue Feb 03 00:39:38.561257 2026] [:error] [pid 33612:tid 33615] [client 20.89.111.141:40639] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aYDTSstFn80qQEmo5Qor-AAAAQE"]
[Tue Feb 03 00:39:43.780891 2026] [:error] [pid 57080:tid 57109] [client 20.89.111.141:28605] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aYDTT49Utn0ZlfnF10OBqAAAAtY"]
[Tue Feb 03 00:39:44.213262 2026] [:error] [pid 63032:tid 63063] [client 20.89.111.141:36170] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aYDTUHyEQ1PkpebvdRgXjAAAAAA"]
[Tue Feb 03 00:39:44.788909 2026] [:error] [pid 63032:tid 63080] [client 20.89.111.141:38354] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aYDTUHyEQ1PkpebvdRgXkgAAABE"]
[Tue Feb 03 00:39:55.071459 2026] [:error] [pid 57080:tid 57101] [client 20.89.111.141:34543] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex3.php"] [unique_id "aYDTW49Utn0ZlfnF10OBsAAAAs4"]
[Tue Feb 03 00:39:55.656390 2026] [:error] [pid 57080:tid 57096] [client 20.89.111.141:40587] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex3.php"] [unique_id "aYDTW49Utn0ZlfnF10OBsQAAAsk"]
[Tue Feb 03 00:39:56.658753 2026] [:error] [pid 57021:tid 57034] [client 20.89.111.141:35797] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex3.php"] [unique_id "aYDTXP7AEpx7VcmYK3EkzwAAAkk"]
[Tue Feb 03 00:39:57.734847 2026] [:error] [pid 46008:tid 46026] [client 20.89.111.141:37742] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex3.php"] [unique_id "aYDTXSRa52iYn7SlSMnPYgAAAU8"]
[Tue Feb 03 00:39:59.207635 2026] [:error] [pid 46008:tid 46024] [client 20.89.111.141:37749] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aYDTXyRa52iYn7SlSMnPZAAAAU0"]
[Tue Feb 03 00:40:01.767528 2026] [:error] [pid 56989:tid 56998] [client 20.89.111.141:40585] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aYDTYUp44HnChN-GZlhJqQAAAgc"]
[Tue Feb 03 00:40:08.015964 2026] [:error] [pid 57080:tid 57101] [client 20.89.111.141:34528] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aYDTaI9Utn0ZlfnF10OBuQAAAs4"]
[Tue Feb 03 00:40:08.986618 2026] [:error] [pid 46008:tid 46011] [client 20.89.111.141:6881] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aYDTaCRa52iYn7SlSMnPdAAAAUE"]
[Tue Feb 03 00:40:10.035150 2026] [:error] [pid 33612:tid 33626] [client 20.89.111.141:46193] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aYDTastFn80qQEmo5QosDQAAAQw"]
[Tue Feb 03 00:40:18.093276 2026] [:error] [pid 63032:tid 63068] [client 20.89.111.141:46144] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aYDTcnyEQ1PkpebvdRgXxgAAAAU"]
[Tue Feb 03 00:40:18.977893 2026] [:error] [pid 57022:tid 57073] [client 20.89.111.141:7075] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aYDTchnEgLMzfcurxflyKQAAApU"]
[Tue Feb 03 00:40:19.847522 2026] [:error] [pid 63153:tid 63185] [client 20.89.111.141:7024] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aYDTc3C9GXHnmLkdgdnYyAAAANg"]
[Tue Feb 03 00:40:21.009185 2026] [:error] [pid 56989:tid 57007] [client 20.89.111.141:19681] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aYDTdUp44HnChN-GZlhJ0QAAAhA"]
[Tue Feb 03 00:40:22.010413 2026] [:error] [pid 57081:tid 57116] [client 20.89.111.141:46163] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aYDTdmvouJ2Jkm6HfBhqLQAAAwE"]
[Tue Feb 03 00:40:23.634748 2026] [:error] [pid 57021:tid 57031] [client 20.89.111.141:19696] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aYDTd_7AEpx7VcmYK3Ek8QAAAkY"]
[Tue Feb 03 00:41:36.028953 2026] [:error] [pid 63153:tid 63161] [client 20.89.111.141:63228] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aYDTwHC9GXHnmLkdgdnZIAAAAMA"]
[Tue Feb 03 00:41:38.558689 2026] [:error] [pid 57022:tid 57069] [client 20.89.111.141:46707] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aYDTwhnEgLMzfcurxflycgAAApE"]
[Tue Feb 03 00:41:39.166130 2026] [:error] [pid 33612:tid 33629] [client 20.89.111.141:34998] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aYDTw8tFn80qQEmo5QosUAAAAQ8"]
[Tue Feb 03 00:41:40.585895 2026] [:error] [pid 46008:tid 46030] [client 20.89.111.141:32621] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file17.php"] [unique_id "aYDTxCRa52iYn7SlSMnP4QAAAVM"]
[Tue Feb 03 00:41:41.998191 2026] [:error] [pid 57081:tid 57133] [client 20.89.111.141:46714] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aYDTxWvouJ2Jkm6HfBhqaQAAAxI"]
[Tue Feb 03 00:41:42.956365 2026] [:error] [pid 63034:tid 63136] [client 20.89.111.141:32623] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aYDTxuKXlgw75_wfbHoNZwAAAJI"]
[Tue Feb 03 00:41:43.825663 2026] [:error] [pid 33612:tid 33616] [client 20.89.111.141:37669] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aYDTx8tFn80qQEmo5QosUgAAAQI"]
[Tue Feb 03 00:41:45.666409 2026] [:error] [pid 57081:tid 57126] [client 20.89.111.141:29629] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aYDTyWvouJ2Jkm6HfBhqcQAAAws"]
[Tue Feb 03 00:41:46.172690 2026] [:error] [pid 63032:tid 63081] [client 20.89.111.141:46717] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aYDTynyEQ1PkpebvdRgYMwAAABI"]
[Tue Feb 03 00:41:47.258811 2026] [:error] [pid 63153:tid 63161] [client 20.89.111.141:39722] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aYDTy3C9GXHnmLkdgdnZLgAAAMA"]
[Tue Feb 03 00:41:48.203960 2026] [:error] [pid 57080:tid 57104] [client 20.89.111.141:40126] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aYDTzI9Utn0ZlfnF10OB-wAAAtE"]
[Tue Feb 03 00:41:49.011610 2026] [:error] [pid 56989:tid 56995] [client 20.89.111.141:46691] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aYDTzUp44HnChN-GZlhKTAAAAgQ"]
[Tue Feb 03 00:41:49.724074 2026] [:error] [pid 33612:tid 33633] [client 20.89.111.141:46719] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "aYDTzctFn80qQEmo5QosWwAAARM"]
[Tue Feb 03 00:41:51.033623 2026] [:error] [pid 63153:tid 63164] [client 20.89.111.141:6223] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "aYDTz3C9GXHnmLkdgdnZOQAAAMM"]
[Tue Feb 03 00:41:51.654701 2026] [:error] [pid 56989:tid 57000] [client 20.89.111.141:41585] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "aYDTz0p44HnChN-GZlhKVQAAAgk"]
[Tue Feb 03 00:41:52.121917 2026] [:error] [pid 46008:tid 46021] [client 20.89.111.141:40102] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "aYDT0CRa52iYn7SlSMnP6gAAAUo"]
[Tue Feb 03 00:41:53.305703 2026] [:error] [pid 57022:tid 57056] [client 20.89.111.141:40127] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aYDT0RnEgLMzfcurxflyfgAAAoQ"]
[Tue Feb 03 00:41:54.124631 2026] [:error] [pid 46008:tid 46020] [client 20.89.111.141:6222] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aYDT0iRa52iYn7SlSMnP7QAAAUk"]
[Tue Feb 03 00:41:55.605183 2026] [:error] [pid 63153:tid 63169] [client 20.89.111.141:39717] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aYDT03C9GXHnmLkdgdnZQgAAAMg"]
[Tue Feb 03 00:41:56.474752 2026] [:error] [pid 56989:tid 57013] [client 20.89.111.141:40086] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "aYDT1Ep44HnChN-GZlhKXAAAAhY"]
[Tue Feb 03 00:41:57.039720 2026] [:error] [pid 63032:tid 63078] [client 20.89.111.141:31216] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aYDT1XyEQ1PkpebvdRgYOwAAAA8"]
[Tue Feb 03 00:41:58.592239 2026] [:error] [pid 63153:tid 63176] [client 20.89.111.141:46701] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aYDT1nC9GXHnmLkdgdnZSAAAAM8"]
[Tue Feb 03 00:42:00.139296 2026] [:error] [pid 57021:tid 57040] [client 20.89.111.141:29622] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aYDT2P7AEpx7VcmYK3ElOQAAAk8"]
[Tue Feb 03 00:42:01.373242 2026] [:error] [pid 63153:tid 63163] [client 20.89.111.141:37644] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aYDT2XC9GXHnmLkdgdnZTwAAAMI"]
[Tue Feb 03 00:42:01.839776 2026] [:error] [pid 56989:tid 57003] [client 20.89.111.141:31209] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aYDT2Up44HnChN-GZlhKeQAAAgw"]
[Tue Feb 03 00:42:02.898426 2026] [:error] [pid 63153:tid 63178] [client 20.89.111.141:36947] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aYDT2nC9GXHnmLkdgdnZUgAAANE"]
[Tue Feb 03 00:42:06.343356 2026] [:error] [pid 33612:tid 33627] [client 20.89.111.141:37653] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aYDT3stFn80qQEmo5QosaQAAAQ0"]
[Tue Feb 03 00:42:10.704406 2026] [:error] [pid 57080:tid 57097] [client 20.89.111.141:33077] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aYDT4o9Utn0ZlfnF10OCEgAAAso"]
[Tue Feb 03 00:42:11.826806 2026] [:error] [pid 63032:tid 63068] [client 20.89.111.141:31184] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aYDT43yEQ1PkpebvdRgYXgAAAAU"]
[Tue Feb 03 00:42:13.213569 2026] [:error] [pid 63032:tid 63064] [client 20.89.111.141:42380] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aYDT5XyEQ1PkpebvdRgYYAAAAAE"]
[Tue Feb 03 00:42:14.101992 2026] [:error] [pid 63034:tid 63141] [client 20.89.111.141:30174] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aYDT5uKXlgw75_wfbHoNiwAAAJc"]
[Tue Feb 03 00:42:16.120329 2026] [:error] [pid 46008:tid 46030] [client 20.89.111.141:41295] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aYDT6CRa52iYn7SlSMnQLQAAAVM"]
[Tue Feb 03 00:42:16.956416 2026] [:error] [pid 57080:tid 57088] [client 20.89.111.141:31726] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aYDT6I9Utn0ZlfnF10OCHQAAAsE"]
[Tue Feb 03 00:42:19.893342 2026] [:error] [pid 33612:tid 33624] [client 20.89.111.141:41310] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aYDT68tFn80qQEmo5QoshAAAAQo"]
[Tue Feb 03 00:42:22.330995 2026] [:error] [pid 57021:tid 57042] [client 20.89.111.141:31663] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aYDT7v7AEpx7VcmYK3ElTAAAAlE"]
[Tue Feb 03 00:42:23.381003 2026] [:error] [pid 57081:tid 57131] [client 20.89.111.141:34086] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aYDT72vouJ2Jkm6HfBhqkwAAAxA"]
[Tue Feb 03 00:42:24.539761 2026] [:error] [pid 57022:tid 57074] [client 20.89.111.141:31653] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYDT8BnEgLMzfcurxflylwAAApY"]
[Tue Feb 03 00:42:25.562892 2026] [:error] [pid 56989:tid 56994] [client 20.89.111.141:41326] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYDT8Up44HnChN-GZlhKoQAAAgM"]
[Tue Feb 03 00:42:28.053229 2026] [:error] [pid 63032:tid 63079] [client 20.89.111.141:31674] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYDT9HyEQ1PkpebvdRgYaQAAABA"]
[Tue Feb 03 00:42:28.678087 2026] [:error] [pid 63032:tid 63084] [client 20.89.111.141:34068] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYDT9HyEQ1PkpebvdRgYagAAABU"]
[Tue Feb 03 00:42:30.757382 2026] [:error] [pid 57081:tid 57132] [client 20.89.111.141:6500] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aYDT9mvouJ2Jkm6HfBhqnQAAAxE"]
[Tue Feb 03 00:42:31.509630 2026] [:error] [pid 33612:tid 33628] [client 20.89.111.141:61866] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aYDT98tFn80qQEmo5QoskQAAAQ4"]
[Tue Feb 03 00:42:32.514373 2026] [:error] [pid 56989:tid 57004] [client 20.89.111.141:39248] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aYDT-Ep44HnChN-GZlhKpQAAAg0"]
[Tue Feb 03 00:43:30.845084 2026] [:error] [pid 63034:tid 63130] [client 20.89.111.141:33144] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYDUMuKXlgw75_wfbHoN8QAAAIw"]
[Tue Feb 03 00:43:41.141328 2026] [:error] [pid 63032:tid 63068] [client 20.89.111.141:42783] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aYDUPXyEQ1PkpebvdRgYowAAAAU"]
[Tue Feb 03 00:43:42.490348 2026] [:error] [pid 56989:tid 57011] [client 20.89.111.141:30684] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aYDUPkp44HnChN-GZlhLBAAAAhQ"]
[Tue Feb 03 00:43:43.466100 2026] [:error] [pid 63034:tid 63136] [client 20.89.111.141:6745] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aYDUP-KXlgw75_wfbHoN_gAAAJI"]
[Tue Feb 03 00:43:44.574167 2026] [:error] [pid 57081:tid 57126] [client 20.89.111.141:63289] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aYDUQGvouJ2Jkm6HfBhq2QAAAws"]
[Tue Feb 03 00:43:45.997636 2026] [:error] [pid 63032:tid 63084] [client 20.89.111.141:62882] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aYDUQXyEQ1PkpebvdRgYrQAAABU"]
[Tue Feb 03 00:43:47.572329 2026] [:error] [pid 57022:tid 57059] [client 20.89.111.141:42794] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aYDUQxnEgLMzfcurxfly1gAAAoc"]
[Tue Feb 03 00:43:49.828069 2026] [:error] [pid 56989:tid 57015] [client 20.89.111.141:33615] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aYDURUp44HnChN-GZlhLDwAAAhg"]
[Tue Feb 03 00:43:51.389776 2026] [:error] [pid 63034:tid 63129] [client 20.89.111.141:47336] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aYDUR-KXlgw75_wfbHoOCwAAAIs"]
[Tue Feb 03 00:43:52.877606 2026] [:error] [pid 33612:tid 33638] [client 20.89.111.141:6616] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aYDUSMtFn80qQEmo5Qos1AAAARg"]
[Tue Feb 03 00:43:56.017461 2026] [:error] [pid 63032:tid 63070] [client 20.89.111.141:61596] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aYDUTHyEQ1PkpebvdRgYvwAAAAc"]
[Tue Feb 03 00:43:56.897464 2026] [:error] [pid 63153:tid 63179] [client 20.89.111.141:47372] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aYDUTHC9GXHnmLkdgdnaEgAAANI"]
[Tue Feb 03 00:43:57.881224 2026] [:error] [pid 57080:tid 57088] [client 20.89.111.141:39669] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aYDUTY9Utn0ZlfnF10OCVgAAAsE"]
[Tue Feb 03 00:43:59.011983 2026] [:error] [pid 56989:tid 57003] [client 20.89.111.141:43470] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aYDUT0p44HnChN-GZlhLGQAAAgw"]
[Tue Feb 03 00:43:59.531041 2026] [:error] [pid 56989:tid 57001] [client 20.89.111.141:61585] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aYDUT0p44HnChN-GZlhLGgAAAgo"]
[Tue Feb 03 00:44:01.201606 2026] [:error] [pid 63034:tid 63140] [client 20.89.111.141:63354] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aYDUUeKXlgw75_wfbHoODwAAAJY"]
[Tue Feb 03 00:44:02.069168 2026] [:error] [pid 57080:tid 57096] [client 20.89.111.141:36170] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aYDUUo9Utn0ZlfnF10OCWwAAAsk"]
[Tue Feb 03 00:44:07.153011 2026] [:error] [pid 57021:tid 57034] [client 20.89.111.141:34126] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aYDUV_7AEpx7VcmYK3ElvgAAAkk"]
[Tue Feb 03 00:44:08.760092 2026] [:error] [pid 63032:tid 63080] [client 20.89.111.141:38397] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aYDUWHyEQ1PkpebvdRgYyQAAABE"]
[Tue Feb 03 00:44:09.946475 2026] [:error] [pid 56989:tid 57001] [client 20.89.111.141:38395] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aYDUWUp44HnChN-GZlhLMgAAAgo"]
[Tue Feb 03 00:44:10.668156 2026] [:error] [pid 56989:tid 57006] [client 20.89.111.141:36205] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aYDUWkp44HnChN-GZlhLMwAAAg8"]
[Tue Feb 03 00:44:12.402865 2026] [:error] [pid 57021:tid 57045] [client 20.89.111.141:62655] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/styll.php"] [unique_id "aYDUXP7AEpx7VcmYK3ElwAAAAlQ"]
[Tue Feb 03 00:44:13.134033 2026] [:error] [pid 57022:tid 57052] [client 20.89.111.141:6609] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/styll.php"] [unique_id "aYDUXRnEgLMzfcurxfly4QAAAoA"]
[Tue Feb 03 00:44:13.522741 2026] [:error] [pid 57022:tid 57071] [client 20.89.111.141:40610] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/styll.php"] [unique_id "aYDUXRnEgLMzfcurxfly4wAAApM"]
[Tue Feb 03 00:44:17.783960 2026] [:error] [pid 33612:tid 33627] [client 20.89.111.141:62615] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/styll.php"] [unique_id "aYDUYctFn80qQEmo5Qos5gAAAQ0"]
[Tue Feb 03 00:44:18.181365 2026] [:error] [pid 57022:tid 57067] [client 20.89.111.141:62625] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7.php"] [unique_id "aYDUYhnEgLMzfcurxfly5wAAAo8"]
[Tue Feb 03 00:44:19.306679 2026] [:error] [pid 57080:tid 57092] [client 20.89.111.141:38384] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7.php"] [unique_id "aYDUY49Utn0ZlfnF10OCZgAAAsU"]
[Tue Feb 03 00:44:23.227229 2026] [:error] [pid 46008:tid 46026] [client 20.89.111.141:62630] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7.php"] [unique_id "aYDUZyRa52iYn7SlSMnQeQAAAU8"]
[Tue Feb 03 00:44:24.602657 2026] [:error] [pid 46008:tid 46018] [client 20.89.111.141:63326] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7.php"] [unique_id "aYDUaCRa52iYn7SlSMnQfwAAAUc"]
[Tue Feb 03 00:44:26.535882 2026] [:error] [pid 57021:tid 57036] [client 20.89.111.141:35819] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thebe.php"] [unique_id "aYDUav7AEpx7VcmYK3ElygAAAks"]
[Tue Feb 03 00:44:27.443229 2026] [:error] [pid 57081:tid 57134] [client 20.89.111.141:6864] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thebe.php"] [unique_id "aYDUa2vouJ2Jkm6HfBhrCQAAAxM"]
[Tue Feb 03 00:44:31.436788 2026] [:error] [pid 57021:tid 57035] [client 20.89.111.141:28596] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thebe.php"] [unique_id "aYDUb_7AEpx7VcmYK3El0QAAAko"]
[Tue Feb 03 00:44:32.773687 2026] [:error] [pid 63153:tid 63184] [client 20.89.111.141:38356] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thebe.php"] [unique_id "aYDUcHC9GXHnmLkdgdnaOwAAANc"]
[Tue Feb 03 00:44:33.646290 2026] [:error] [pid 63034:tid 63133] [client 20.89.111.141:62592] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddd.php"] [unique_id "aYDUceKXlgw75_wfbHoOMgAAAI8"]
[Tue Feb 03 00:44:35.115521 2026] [:error] [pid 46008:tid 46016] [client 20.89.111.141:37753] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddd.php"] [unique_id "aYDUcyRa52iYn7SlSMnQhgAAAUY"]
[Tue Feb 03 00:45:49.492346 2026] [:error] [pid 63032:tid 63080] [client 20.89.111.141:44009] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aYDUvXyEQ1PkpebvdRgZMwAAABE"]
[Tue Feb 03 00:45:50.461376 2026] [:error] [pid 57021:tid 57028] [client 20.89.111.141:35403] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aYDUvv7AEpx7VcmYK3EmGQAAAkM"]
[Tue Feb 03 00:45:50.792636 2026] [:error] [pid 46008:tid 46012] [client 20.89.111.141:30211] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aYDUviRa52iYn7SlSMnQowAAAUI"]
[Tue Feb 03 00:45:51.493702 2026] [:error] [pid 33612:tid 33637] [client 20.89.111.141:42350] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aYDUv8tFn80qQEmo5QotOgAAARc"]
[Tue Feb 03 00:45:52.225479 2026] [:error] [pid 57081:tid 57138] [client 20.89.111.141:42319] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYDUwGvouJ2Jkm6HfBhrSQAAAxc"]
[Tue Feb 03 00:45:53.850988 2026] [:error] [pid 63153:tid 63172] [client 20.89.111.141:45202] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYDUwXC9GXHnmLkdgdnaxgAAAMs"]
[Tue Feb 03 00:45:54.204249 2026] [:error] [pid 33612:tid 33634] [client 20.89.111.141:37940] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYDUwstFn80qQEmo5QotPAAAARQ"]
[Tue Feb 03 00:45:57.187883 2026] [:error] [pid 46008:tid 46018] [client 20.89.111.141:34994] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYDUxSRa52iYn7SlSMnQpgAAAUc"]
[Tue Feb 03 00:45:57.662212 2026] [:error] [pid 57080:tid 57100] [client 20.89.111.141:32600] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYDUxY9Utn0ZlfnF10OCpgAAAs0"]
[Tue Feb 03 00:46:01.653685 2026] [:error] [pid 63034:tid 63142] [client 20.89.111.141:34984] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYDUyeKXlgw75_wfbHoOggAAAJg"]
[Tue Feb 03 00:46:02.846463 2026] [:error] [pid 63153:tid 63166] [client 20.89.111.141:35453] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYDUynC9GXHnmLkdgdna5QAAAMU"]
[Tue Feb 03 00:46:04.903633 2026] [:error] [pid 33612:tid 33626] [client 20.89.111.141:40074] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYDUzMtFn80qQEmo5QotQAAAAQw"]
[Tue Feb 03 00:46:07.400636 2026] [:error] [pid 56989:tid 57012] [client 20.89.111.141:40117] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aYDUz0p44HnChN-GZlhLwQAAAhU"]
[Tue Feb 03 00:46:08.404652 2026] [:error] [pid 63034:tid 63126] [client 20.89.111.141:35445] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aYDU0OKXlgw75_wfbHoOkAAAAIg"]
[Tue Feb 03 00:46:09.598274 2026] [:error] [pid 57080:tid 57102] [client 20.89.111.141:46667] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aYDU0Y9Utn0ZlfnF10OCvAAAAs8"]
[Tue Feb 03 00:46:12.128948 2026] [:error] [pid 63032:tid 63076] [client 20.89.111.141:31222] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aYDU1HyEQ1PkpebvdRgZPAAAAA0"]
[Tue Feb 03 00:46:13.473499 2026] [:error] [pid 57080:tid 57088] [client 20.89.111.141:35005] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aYDU1Y9Utn0ZlfnF10OCwgAAAsE"]
[Tue Feb 03 00:46:14.215776 2026] [:error] [pid 57081:tid 57129] [client 20.89.111.141:41585] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aYDU1mvouJ2Jkm6HfBhrYQAAAw4"]
[Tue Feb 03 00:46:15.627262 2026] [:error] [pid 57022:tid 57073] [client 20.89.111.141:29610] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aYDU1xnEgLMzfcurxflzOwAAApU"]
[Tue Feb 03 00:46:16.710770 2026] [:error] [pid 63034:tid 63142] [client 20.89.111.141:31200] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aYDU2OKXlgw75_wfbHoOmQAAAJg"]
[Tue Feb 03 00:46:17.701502 2026] [:error] [pid 63153:tid 63176] [client 20.89.111.141:29624] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aYDU2XC9GXHnmLkdgdna9wAAAM8"]
[Tue Feb 03 00:46:18.189342 2026] [:error] [pid 56989:tid 56997] [client 20.89.111.141:46764] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aYDU2kp44HnChN-GZlhLzAAAAgY"]
[Tue Feb 03 00:46:20.565873 2026] [:error] [pid 63032:tid 63072] [client 20.89.111.141:33085] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aYDU3HyEQ1PkpebvdRgZQwAAAAk"]
[Tue Feb 03 00:46:21.942511 2026] [:error] [pid 56989:tid 57010] [client 20.89.111.141:63122] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aYDU3Up44HnChN-GZlhL0AAAAhM"]
[Tue Feb 03 00:46:22.870422 2026] [:error] [pid 57022:tid 57067] [client 20.89.111.141:6282] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss1.php"] [unique_id "aYDU3hnEgLMzfcurxflzPwAAAo8"]
[Tue Feb 03 00:46:29.885044 2026] [:error] [pid 33612:tid 33631] [client 20.89.111.141:63165] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss1.php"] [unique_id "aYDU5ctFn80qQEmo5QotTgAAARE"]
[Tue Feb 03 00:46:32.481671 2026] [:error] [pid 56989:tid 57006] [client 20.89.111.141:31180] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss1.php"] [unique_id "aYDU6Ep44HnChN-GZlhL3wAAAg8"]
[Tue Feb 03 00:46:35.506951 2026] [:error] [pid 63153:tid 63172] [client 20.89.111.141:39718] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss1.php"] [unique_id "aYDU63C9GXHnmLkdgdnbDwAAAMs"]
[Tue Feb 03 00:46:36.084448 2026] [:error] [pid 63034:tid 63131] [client 20.89.111.141:6212] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aYDU7OKXlgw75_wfbHoOpQAAAI0"]
[Tue Feb 03 00:46:38.731232 2026] [:error] [pid 56989:tid 56999] [client 20.89.111.141:6332] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aYDU7kp44HnChN-GZlhL8gAAAgg"]
[Tue Feb 03 00:46:40.298726 2026] [:error] [pid 63153:tid 63184] [client 20.89.111.141:40121] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aYDU8HC9GXHnmLkdgdnbFwAAANc"]
[Tue Feb 03 00:46:41.053900 2026] [:error] [pid 63153:tid 63180] [client 20.89.111.141:6224] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aYDU8XC9GXHnmLkdgdnbGgAAANM"]
[Tue Feb 03 00:46:43.372787 2026] [:error] [pid 57081:tid 57122] [client 20.89.111.141:39695] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aYDU82vouJ2Jkm6HfBhrcgAAAwc"]
[Tue Feb 03 00:46:44.201558 2026] [:error] [pid 46008:tid 46020] [client 20.89.111.141:46737] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aYDU9CRa52iYn7SlSMnQyQAAAUk"]
[Tue Feb 03 00:46:53.502451 2026] [autoindex:error] [pid 63153:tid 63178] [client 20.89.111.141:40095] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 00:47:02.270194 2026] [autoindex:error] [pid 57081:tid 57136] [client 20.89.111.141:31176] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 00:47:51.680581 2026] [autoindex:error] [pid 63034:tid 63141] [client 20.89.111.141:32220] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 00:47:51.800149 2026] [autoindex:error] [pid 63034:tid 63125] [client 20.89.111.141:32220] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 00:48:01.834421 2026] [:error] [pid 57021:tid 57033] [client 20.89.111.141:40086] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYDVQf7AEpx7VcmYK3EmfAAAAkg"]
[Tue Feb 03 00:48:08.389412 2026] [:error] [pid 63153:tid 63180] [client 20.89.111.141:46697] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jane.php"] [unique_id "aYDVSHC9GXHnmLkdgdnbdwAAANM"]
[Tue Feb 03 00:48:10.716611 2026] [:error] [pid 63034:tid 63133] [client 20.89.111.141:6249] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jane.php"] [unique_id "aYDVSuKXlgw75_wfbHoO2AAAAI8"]
[Tue Feb 03 00:48:12.073012 2026] [:error] [pid 63153:tid 63173] [client 20.89.111.141:63105] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jane.php"] [unique_id "aYDVTHC9GXHnmLkdgdnbewAAAMw"]
[Tue Feb 03 00:48:17.647570 2026] [:error] [pid 63153:tid 63164] [client 20.89.111.141:6229] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jane.php"] [unique_id "aYDVUXC9GXHnmLkdgdnbfwAAAMM"]
[Tue Feb 03 00:48:18.069603 2026] [:error] [pid 46008:tid 46013] [client 20.89.111.141:46689] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aYDVUiRa52iYn7SlSMnRAwAAAUM"]
[Tue Feb 03 00:48:18.419907 2026] [:error] [pid 57081:tid 57136] [client 20.89.111.141:41583] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aYDVUmvouJ2Jkm6HfBhrsAAAAxU"]
[Tue Feb 03 00:48:21.807687 2026] [:error] [pid 33612:tid 33635] [client 20.89.111.141:31188] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aYDVVctFn80qQEmo5QotkwAAARU"]
[Tue Feb 03 00:48:22.556756 2026] [:error] [pid 57080:tid 57105] [client 20.89.111.141:29607] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aYDVVo9Utn0ZlfnF10ODBAAAAtI"]
[Tue Feb 03 00:48:23.925505 2026] [:error] [pid 57021:tid 57044] [client 20.89.111.141:32197] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aYDVV_7AEpx7VcmYK3EmjgAAAlM"]
[Tue Feb 03 00:48:27.967733 2026] [:error] [pid 57021:tid 57027] [client 20.89.111.141:32215] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aYDVW_7AEpx7VcmYK3EmjwAAAkI"]
[Tue Feb 03 00:48:28.795943 2026] [:error] [pid 63153:tid 63177] [client 20.89.111.141:46676] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aYDVXHC9GXHnmLkdgdnbiwAAANA"]
[Tue Feb 03 00:48:29.874334 2026] [:error] [pid 56989:tid 57005] [client 20.89.111.141:6257] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aYDVXUp44HnChN-GZlhMRgAAAg4"]
[Tue Feb 03 00:48:32.783991 2026] [:error] [pid 63153:tid 63175] [client 20.89.111.141:46674] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aYDVYHC9GXHnmLkdgdnbkAAAAM4"]
[Tue Feb 03 00:48:33.173556 2026] [:error] [pid 57080:tid 57091] [client 20.89.111.141:46690] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aYDVYY9Utn0ZlfnF10ODDgAAAsQ"]
[Tue Feb 03 00:48:34.845434 2026] [:error] [pid 63034:tid 63124] [client 20.89.111.141:6214] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aYDVYuKXlgw75_wfbHoO4wAAAIY"]
[Tue Feb 03 00:48:35.535937 2026] [:error] [pid 57022:tid 57076] [client 20.89.111.141:46663] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aYDVYxnEgLMzfcurxflzigAAApg"]
[Tue Feb 03 00:48:39.170895 2026] [:error] [pid 57081:tid 57134] [client 20.89.111.141:63154] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aYDVZ2vouJ2Jkm6HfBhrvAAAAxM"]
[Tue Feb 03 00:48:40.144929 2026] [:error] [pid 63032:tid 63064] [client 20.89.111.141:31209] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aYDVaHyEQ1PkpebvdRgZsAAAAAE"]
[Tue Feb 03 00:48:44.073192 2026] [:error] [pid 57080:tid 57096] [client 20.89.111.141:39709] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aYDVbI9Utn0ZlfnF10ODEwAAAsk"]
[Tue Feb 03 00:48:45.914386 2026] [:error] [pid 33612:tid 33618] [client 20.89.111.141:46698] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aYDVbctFn80qQEmo5QotogAAAQQ"]
[Tue Feb 03 00:48:46.598432 2026] [:error] [pid 57080:tid 57108] [client 20.89.111.141:32582] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxx.php"] [unique_id "aYDVbo9Utn0ZlfnF10ODFgAAAtU"]
[Tue Feb 03 00:48:47.795498 2026] [:error] [pid 57080:tid 57111] [client 20.89.111.141:41536] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxx.php"] [unique_id "aYDVb49Utn0ZlfnF10ODFwAAAtg"]
[Tue Feb 03 00:48:51.038761 2026] [:error] [pid 63034:tid 63142] [client 20.89.111.141:63141] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxx.php"] [unique_id "aYDVc-KXlgw75_wfbHoO9AAAAJg"]
[Tue Feb 03 00:48:52.989934 2026] [:error] [pid 57021:tid 57045] [client 20.89.111.141:31226] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxx.php"] [unique_id "aYDVdP7AEpx7VcmYK3EmnAAAAlQ"]
[Tue Feb 03 00:48:53.635486 2026] [:error] [pid 57080:tid 57095] [client 20.89.111.141:39701] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aYDVdY9Utn0ZlfnF10ODHgAAAsg"]
[Tue Feb 03 00:48:54.443144 2026] [:error] [pid 56989:tid 56995] [client 20.89.111.141:46712] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aYDVdkp44HnChN-GZlhMXwAAAgQ"]
[Tue Feb 03 00:48:58.623323 2026] [:error] [pid 63034:tid 63121] [client 20.89.111.141:46700] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aYDVeuKXlgw75_wfbHoO-QAAAIM"]
[Tue Feb 03 00:49:01.281016 2026] [:error] [pid 63153:tid 63180] [client 20.89.111.141:6219] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aYDVfXC9GXHnmLkdgdnbtAAAANM"]
[Tue Feb 03 00:49:01.959660 2026] [:error] [pid 57081:tid 57117] [client 20.89.111.141:29629] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aYDVfWvouJ2Jkm6HfBhrzAAAAwI"]
[Tue Feb 03 00:49:02.421889 2026] [:error] [pid 33612:tid 33626] [client 20.89.111.141:31194] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aYDVfstFn80qQEmo5QotsQAAAQw"]
[Tue Feb 03 00:50:05.331341 2026] [:error] [pid 56989:tid 57014] [client 20.89.111.141:63167] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYDVvUp44HnChN-GZlhMswAAAhc"]
[Tue Feb 03 00:50:31.688609 2026] [:error] [pid 63153:tid 63182] [client 20.89.111.141:44514] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aYDV13C9GXHnmLkdgdncJAAAANU"]
[Tue Feb 03 00:50:34.973017 2026] [:error] [pid 63153:tid 63174] [client 20.89.111.141:40022] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aYDV2nC9GXHnmLkdgdncKgAAAM0"]
[Tue Feb 03 00:50:37.658149 2026] [:error] [pid 56989:tid 56992] [client 20.89.111.141:37936] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aYDV3Up44HnChN-GZlhM1wAAAgE"]
[Tue Feb 03 00:50:39.983500 2026] [:error] [pid 56989:tid 57006] [client 20.89.111.141:35409] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aYDV30p44HnChN-GZlhM3wAAAg8"]
[Tue Feb 03 00:50:40.663701 2026] [:error] [pid 57021:tid 57042] [client 20.89.111.141:35736] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYDV4P7AEpx7VcmYK3Em2AAAAlE"]
[Tue Feb 03 00:50:42.955144 2026] [:error] [pid 63153:tid 63178] [client 20.89.111.141:36495] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYDV4nC9GXHnmLkdgdncOAAAANE"]
[Tue Feb 03 00:50:45.357656 2026] [:error] [pid 57081:tid 57126] [client 20.89.111.141:44520] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYDV5WvouJ2Jkm6HfBhsAgAAAws"]
[Tue Feb 03 00:50:46.459370 2026] [:error] [pid 57080:tid 57099] [client 20.89.111.141:35745] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYDV5o9Utn0ZlfnF10ODZgAAAsw"]
[Tue Feb 03 00:50:48.827971 2026] [:error] [pid 46008:tid 46016] [client 20.89.111.141:37888] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aYDV6CRa52iYn7SlSMnRWQAAAUY"]
[Tue Feb 03 00:50:51.539879 2026] [:error] [pid 63153:tid 63177] [client 20.89.111.141:37935] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aYDV63C9GXHnmLkdgdncQAAAANA"]
[Tue Feb 03 00:50:52.319506 2026] [:error] [pid 46008:tid 46014] [client 20.89.111.141:35406] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aYDV7CRa52iYn7SlSMnRXgAAAUQ"]
[Tue Feb 03 00:50:58.149303 2026] [:error] [pid 33612:tid 33636] [client 20.89.111.141:35448] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aYDV8stFn80qQEmo5QouAQAAARY"]
[Tue Feb 03 00:50:59.304290 2026] [:error] [pid 56989:tid 57001] [client 20.89.111.141:36497] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aYDV80p44HnChN-GZlhM8gAAAgo"]
[Tue Feb 03 00:51:03.152747 2026] [:error] [pid 63032:tid 63065] [client 20.89.111.141:36960] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aYDV93yEQ1PkpebvdRgaLwAAAAI"]
[Tue Feb 03 00:51:06.375865 2026] [:error] [pid 57081:tid 57127] [client 20.89.111.141:35427] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aYDV-mvouJ2Jkm6HfBhsGwAAAww"]
[Tue Feb 03 00:51:07.463602 2026] [:error] [pid 33612:tid 33617] [client 20.89.111.141:36491] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aYDV-8tFn80qQEmo5QouCwAAAQM"]
[Tue Feb 03 00:51:09.555712 2026] [:error] [pid 57080:tid 57095] [client 20.89.111.141:40037] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "aYDV_Y9Utn0ZlfnF10ODeAAAAsg"]
[Tue Feb 03 00:51:12.654978 2026] [:error] [pid 57080:tid 57105] [client 20.89.111.141:37923] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "aYDWAI9Utn0ZlfnF10ODeQAAAtI"]
[Tue Feb 03 00:51:13.169860 2026] [:error] [pid 57022:tid 57075] [client 20.89.111.141:36535] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "aYDWARnEgLMzfcurxflz2gAAApc"]
[Tue Feb 03 00:51:14.086984 2026] [:error] [pid 63153:tid 63185] [client 20.89.111.141:44492] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "aYDWAnC9GXHnmLkdgdncUwAAANg"]
[Tue Feb 03 00:51:15.291683 2026] [:error] [pid 63034:tid 63122] [client 20.89.111.141:36965] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aYDWA-KXlgw75_wfbHoPWAAAAIQ"]
[Tue Feb 03 00:51:17.882014 2026] [:error] [pid 56989:tid 56995] [client 20.89.111.141:30257] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aYDWBUp44HnChN-GZlhNAgAAAgQ"]
[Tue Feb 03 00:51:20.478797 2026] [:error] [pid 63153:tid 63166] [client 20.89.111.141:33055] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aYDWCHC9GXHnmLkdgdncWwAAAMU"]
[Tue Feb 03 00:51:21.430487 2026] [:error] [pid 63032:tid 63083] [client 20.89.111.141:36985] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aYDWCXyEQ1PkpebvdRgaRgAAABQ"]
[Tue Feb 03 00:51:23.312023 2026] [:error] [pid 33612:tid 33625] [client 20.89.111.141:35446] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aYDWC8tFn80qQEmo5QouGwAAAQs"]
[Tue Feb 03 00:51:25.741810 2026] [:error] [pid 46008:tid 46027] [client 20.89.111.141:43992] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aYDWDSRa52iYn7SlSMnRfQAAAVA"]
[Tue Feb 03 00:51:53.578935 2026] [proxy_fcgi:error] [pid 56989:tid 57007] [client 103.4.122.14:52230] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Feb 03 00:52:32.265417 2026] [:error] [pid 56989:tid 56997] [client 20.89.111.141:47328] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYDWUEp44HnChN-GZlhNWAAAAgY"]
[Tue Feb 03 00:52:38.785715 2026] [:error] [pid 63032:tid 63068] [client 20.89.111.141:61676] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nyan.php"] [unique_id "aYDWVnyEQ1PkpebvdRgakQAAAAU"]
[Tue Feb 03 00:52:40.433483 2026] [:error] [pid 63153:tid 63182] [client 20.89.111.141:41374] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nyan.php"] [unique_id "aYDWWHC9GXHnmLkdgdnc6wAAANU"]
[Tue Feb 03 00:52:41.816054 2026] [:error] [pid 63034:tid 63135] [client 20.89.111.141:45157] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nyan.php"] [unique_id "aYDWWeKXlgw75_wfbHoPlgAAAJE"]
[Tue Feb 03 00:52:42.468827 2026] [:error] [pid 63153:tid 63183] [client 20.89.111.141:37959] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nyan.php"] [unique_id "aYDWWnC9GXHnmLkdgdnc8AAAANY"]
[Tue Feb 03 00:52:43.303814 2026] [:error] [pid 63153:tid 63169] [client 20.89.111.141:34457] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aYDWW3C9GXHnmLkdgdnc8gAAAMg"]
[Tue Feb 03 00:52:44.254450 2026] [:error] [pid 57081:tid 57133] [client 20.89.111.141:41403] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aYDWXGvouJ2Jkm6HfBhsYQAAAxI"]
[Tue Feb 03 00:52:45.862655 2026] [:error] [pid 57022:tid 57060] [client 20.89.111.141:43562] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aYDWXRnEgLMzfcurxfl0GwAAAog"]
[Tue Feb 03 00:52:46.611693 2026] [:error] [pid 57081:tid 57128] [client 20.89.111.141:40995] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aYDWXmvouJ2Jkm6HfBhsZAAAAw0"]
[Tue Feb 03 00:52:47.439852 2026] [:error] [pid 63153:tid 63175] [client 20.89.111.141:29092] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/admin.php"] [unique_id "aYDWX3C9GXHnmLkdgdnc-AAAAM4"]
[Tue Feb 03 00:52:48.967469 2026] [:error] [pid 56989:tid 57004] [client 20.89.111.141:41003] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/admin.php"] [unique_id "aYDWYEp44HnChN-GZlhNZwAAAg0"]
[Tue Feb 03 00:52:50.023196 2026] [:error] [pid 63153:tid 63168] [client 20.89.111.141:45129] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/admin.php"] [unique_id "aYDWYnC9GXHnmLkdgdnc_AAAAMc"]
[Tue Feb 03 00:52:50.582604 2026] [:error] [pid 63032:tid 63073] [client 20.89.111.141:34493] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/admin.php"] [unique_id "aYDWYnyEQ1PkpebvdRgamQAAAAo"]
[Tue Feb 03 01:18:28.763328 2026] [:error] [pid 57022:tid 57072] [client 40.74.65.231:17986] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aYDcZBnEgLMzfcurxfl3VQAAApQ"]
[Tue Feb 03 01:18:32.724029 2026] [:error] [pid 56989:tid 57006] [client 40.74.65.231:12875] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aYDcaEp44HnChN-GZlhTAQAAAg8"]
[Tue Feb 03 01:19:10.458485 2026] [:error] [pid 57081:tid 57126] [client 40.74.65.231:18026] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aYDcjmvouJ2Jkm6HfBhwCgAAAws"]
[Tue Feb 03 01:21:14.849092 2026] [:error] [pid 57021:tid 57027] [client 40.74.65.231:20693] [client 40.74.65.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYDdCv7AEpx7VcmYK3EqNwAAAkI"]
[Tue Feb 03 01:21:24.188335 2026] [:error] [pid 33612:tid 33633] [client 40.74.65.231:13960] [client 40.74.65.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aYDdFMtFn80qQEmo5Qox3QAAARM"]
[Tue Feb 03 01:22:57.178713 2026] [:error] [pid 56989:tid 56997] [client 40.74.65.231:14163] [client 40.74.65.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.74.65.231, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDdcUp44HnChN-GZlhTygAAAgY"]
[Tue Feb 03 01:23:36.705044 2026] [:error] [pid 56989:tid 57009] [client 40.74.65.231:14163] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aYDdmEp44HnChN-GZlhUEgAAAhI"]
[Tue Feb 03 01:23:45.177067 2026] [:error] [pid 46008:tid 46030] [client 40.74.65.231:15266] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aYDdoSRa52iYn7SlSMnVqwAAAVM"]
[Tue Feb 03 01:23:46.842337 2026] [:error] [pid 33612:tid 33630] [client 40.74.65.231:15202] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aYDdostFn80qQEmo5QoyOwAAARA"]
[Tue Feb 03 01:23:55.583611 2026] [:error] [pid 46008:tid 46018] [client 40.74.65.231:16640] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file56.php"] [unique_id "aYDdqyRa52iYn7SlSMnVuQAAAUc"]
[Tue Feb 03 01:23:57.297078 2026] [:error] [pid 57080:tid 57099] [client 40.74.65.231:15295] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file56.php"] [unique_id "aYDdrY9Utn0ZlfnF10OHbQAAAsw"]
[Tue Feb 03 01:24:03.727096 2026] [:error] [pid 33612:tid 33626] [client 40.74.65.231:17179] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file56.php"] [unique_id "aYDds8tFn80qQEmo5QoyRwAAAQw"]
[Tue Feb 03 01:24:05.902662 2026] [:error] [pid 63034:tid 63128] [client 40.74.65.231:13852] [client 40.74.65.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file56.php"] [unique_id "aYDdteKXlgw75_wfbHoUcQAAAIo"]
[Tue Feb 03 11:58:53.269104 2026] [:error] [pid 5229:tid 5241] [client 192.236.146.241:55872] [client 192.236.146.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aYFyfUKmEgmJub93yUorYQAAAYo"]
[Wed Feb 04 04:16:26.725703 2026] [autoindex:error] [pid 47676:tid 47678] [client 5.182.17.127:64724] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Feb 04 17:48:24.163280 2026] [:error] [pid 55160:tid 55180] [client 34.11.242.165:43044] [client 34.11.242.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aYMV6OTAiAYDLSDaxdcFQQAAAZI"]
[Thu Feb 05 02:56:06.622044 2026] [:error] [pid 3156:tid 3164] [client 217.77.10.74:57348] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYOWRmFkBP84nEvT5IhY2gAAAYM"]
[Thu Feb 05 05:35:32.210782 2026] [:error] [pid 12287:tid 12309] [client 104.234.19.98:53049] [client 104.234.19.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.98, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aYO7pDOXzeBKhB81n7reMQAAANI"]
[Thu Feb 05 05:35:35.188670 2026] [:error] [pid 12287:tid 12313] [client 104.234.19.98:53049] [client 104.234.19.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.98, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aYO7pzOXzeBKhB81n7reOAAAANY"]
[Fri Feb 06 00:43:02.617079 2026] [:error] [pid 64116:tid 64128] [client 34.172.87.158:56084] [client 34.172.87.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.87.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYTIlrq-pUXYJUX2oz_sHAAAAMU"]
[Fri Feb 06 00:43:08.263126 2026] [:error] [pid 64116:tid 64136] [client 34.172.87.158:56084] [client 34.172.87.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYTInLq-pUXYJUX2oz_sLwAAAM0"]
[Fri Feb 06 00:43:10.818841 2026] [:error] [pid 64116:tid 64127] [client 34.172.87.158:56084] [client 34.172.87.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.87.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYTInrq-pUXYJUX2oz_sNQAAAMQ"]
[Fri Feb 06 01:57:24.359363 2026] [:error] [pid 39858:tid 39883] [client 37.27.119.185:57489] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYTaBPNde7AItnr98t3wIQAAAVU"], referer: https://www.amazon.com
[Fri Feb 06 01:57:24.960138 2026] [:error] [pid 39858:tid 39876] [client 37.27.119.185:58939] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYTaBPNde7AItnr98t3wIwAAAU4"], referer: https://www.bbc.com
[Fri Feb 06 01:57:26.550215 2026] [:error] [pid 11459:tid 11514] [client 37.27.119.185:59953] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYTaBpn3t_QGiBnEMgMZ1gAAAEQ"], referer: https://www.tripadvisor.com
[Fri Feb 06 01:57:27.147291 2026] [:error] [pid 64116:tid 64146] [client 37.27.119.185:63018] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYTaB7q-pUXYJUX2oz8O8gAAANc"], referer: https://www.apple.com
[Fri Feb 06 06:58:56.376328 2026] [:error] [pid 13650:tid 13665] [client 40.70.128.177:2048] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xx.php"] [unique_id "aYUgsBoU-_lpgnGeX7V-EQAAAU0"]
[Fri Feb 06 06:59:26.253613 2026] [:error] [pid 1664:tid 1723] [client 40.70.128.177:2151] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aYUgzu_0lM6yA3VnvQW52AAAAFc"]
[Fri Feb 06 06:59:30.092877 2026] [:error] [pid 1665:tid 1742] [client 40.70.128.177:2161] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aYUg0jYZLE6gThXvZMrlLgAAAI8"]
[Fri Feb 06 06:59:31.239163 2026] [:error] [pid 1663:tid 1678] [client 40.70.128.177:2164] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aYUg019EQrJaKkABjK_oSwAAAAU"]
[Fri Feb 06 06:59:32.088481 2026] [:error] [pid 13650:tid 13662] [client 40.70.128.177:2169] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aYUg1BoU-_lpgnGeX7V-OgAAAUo"]
[Fri Feb 06 06:59:38.766325 2026] [:error] [pid 13650:tid 13655] [client 40.70.128.177:2060] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/"] [unique_id "aYUg2hoU-_lpgnGeX7V-VgAAAUM"]
[Fri Feb 06 06:59:52.569358 2026] [:error] [pid 13650:tid 13670] [client 40.70.128.177:2070] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oxse.php"] [unique_id "aYUg6BoU-_lpgnGeX7V-wAAAAVI"]
[Fri Feb 06 07:00:49.014736 2026] [:error] [pid 1663:tid 1688] [client 40.70.128.177:2160] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/za2.php"] [unique_id "aYUhIV9EQrJaKkABjK_ougAAAA8"]
[Fri Feb 06 07:00:51.374531 2026] [:error] [pid 1665:tid 1739] [client 40.70.128.177:2068] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/za2.php"] [unique_id "aYUhIzYZLE6gThXvZMrldAAAAIw"]
[Fri Feb 06 07:00:55.322151 2026] [:error] [pid 13650:tid 13657] [client 40.70.128.177:2115] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/za2.php"] [unique_id "aYUhJxoU-_lpgnGeX7V_IQAAAUU"]
[Fri Feb 06 07:01:01.754615 2026] [:error] [pid 1665:tid 1742] [client 40.70.128.177:2030] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/za2.php"] [unique_id "aYUhLTYZLE6gThXvZMrlgwAAAI8"]
[Fri Feb 06 07:01:06.738007 2026] [:error] [pid 1663:tid 1690] [client 40.70.128.177:2135] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "aYUhMl9EQrJaKkABjK_oxQAAABE"]
[Fri Feb 06 07:01:10.486325 2026] [:error] [pid 1665:tid 1737] [client 40.70.128.177:2142] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "aYUhNjYZLE6gThXvZMrliwAAAIo"]
[Fri Feb 06 07:01:15.630184 2026] [:error] [pid 1663:tid 1697] [client 40.70.128.177:2059] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "aYUhO19EQrJaKkABjK_oywAAABg"]
[Fri Feb 06 07:01:19.078764 2026] [:error] [pid 13650:tid 13671] [client 40.70.128.177:2016] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmanz.php"] [unique_id "aYUhPxoU-_lpgnGeX7V_XgAAAVM"]
[Fri Feb 06 07:01:24.563111 2026] [:error] [pid 13650:tid 13666] [client 40.70.128.177:2157] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmanz.php"] [unique_id "aYUhRBoU-_lpgnGeX7V_gwAAAU4"]
[Fri Feb 06 07:01:28.161142 2026] [:error] [pid 13650:tid 13656] [client 40.70.128.177:2112] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmanz.php"] [unique_id "aYUhSBoU-_lpgnGeX7V_jwAAAUQ"]
[Fri Feb 06 07:01:35.999516 2026] [:error] [pid 34582:tid 34602] [client 40.70.128.177:2076] [client 40.70.128.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zzz.php"] [unique_id "aYUhT-DeJq1JGssYG6zW1wAAARE"]
[Fri Feb 06 07:02:22.207301 2026] [:error] [pid 1665:tid 1740] [client 40.70.128.177:2067] [client 40.70.128.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aYUhfjYZLE6gThXvZMrl4QAAAI0"]
[Fri Feb 06 07:02:27.279160 2026] [autoindex:error] [pid 1773:tid 1800] [client 40.70.128.177:2130] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 06 07:02:27.479968 2026] [:error] [pid 1773:tid 1798] [client 40.70.128.177:2130] [client 40.70.128.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/shlo.php"] [unique_id "aYUhgzYbySBHYmKOdJ_30wAAAM8"]
[Fri Feb 06 21:45:07.651167 2026] [:error] [pid 3477:tid 3492] [client 85.203.21.238:38423] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aYXwY7L0Hdh40C7HYgV7ggAAAM0"]
[Fri Feb 06 21:45:07.996061 2026] [:error] [pid 3382:tid 3453] [client 85.203.21.156:30009] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/"] [unique_id "aYXwY8IgU1HR0rhYrE9gtwAAAI0"]
[Fri Feb 06 21:45:08.351909 2026] [:error] [pid 46432:tid 46455] [client 85.203.21.235:28301] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aYXwZAbwJwu_od0kZjMwPgAAAlU"]
[Fri Feb 06 21:45:23.699926 2026] [:error] [pid 15821:tid 15843] [client 85.203.21.188:42351] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aYXwc3ARQa67J4c772kToAAAARI"]
[Fri Feb 06 21:45:29.046993 2026] [:error] [pid 37019:tid 37035] [client 85.203.21.176:52049] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aYXweQkAjqd3bcgYBrtskQAAAg4"]
[Fri Feb 06 21:45:34.407769 2026] [:error] [pid 46432:tid 46435] [client 85.203.21.188:45103] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYXwfgbwJwu_od0kZjMwRwAAAkE"]
[Fri Feb 06 21:45:34.757818 2026] [:error] [pid 46432:tid 46445] [client 85.203.21.188:22999] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aYXwfgbwJwu_od0kZjMwSAAAAks"]
[Fri Feb 06 21:45:35.104956 2026] [:error] [pid 3513:tid 3530] [client 85.203.21.54:27219] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aYXwfzSw3-HAlzpqSxzYJAAAAU8"]
[Fri Feb 06 21:45:45.452510 2026] [:error] [pid 3380:tid 3385] [client 85.203.21.184:39183] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/user.php"] [unique_id "aYXwiRFAlUvBGSBK2jdsJwAAAAE"]
[Fri Feb 06 21:45:45.799122 2026] [:error] [pid 36857:tid 36862] [client 85.203.21.228:57885] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aYXwiZVQwfj7Kp4Dd0H26AAAAYM"]
[Fri Feb 06 21:45:46.153172 2026] [:error] [pid 3513:tid 3522] [client 85.203.21.161:43391] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "aYXwijSw3-HAlzpqSxzYJwAAAUc"]
[Fri Feb 06 21:45:56.500722 2026] [:error] [pid 37019:tid 37034] [client 85.203.21.221:23049] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aYXwlAkAjqd3bcgYBrtsqgAAAg0"]
[Fri Feb 06 21:45:56.848416 2026] [:error] [pid 46432:tid 46446] [client 85.203.21.188:57047] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aYXwlAbwJwu_od0kZjMwYQAAAkw"]
[Fri Feb 06 21:46:02.195964 2026] [:error] [pid 3381:tid 3429] [client 85.203.21.161:34927] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aYXwmi81zqRg96ZREghz6wAAAFA"]
[Fri Feb 06 21:46:12.542778 2026] [:error] [pid 15821:tid 15836] [client 85.203.21.161:34741] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aYXwpHARQa67J4c772kTuwAAAQs"]
[Fri Feb 06 21:46:17.890655 2026] [:error] [pid 3382:tid 3450] [client 85.203.21.193:30385] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aYXwqcIgU1HR0rhYrE9g6QAAAIo"]
[Fri Feb 06 21:46:23.240085 2026] [:error] [pid 36928:tid 36936] [client 85.203.21.161:56753] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aYXwr5s7fyU8D36r-Op2MQAAAcQ"]
[Fri Feb 06 21:46:33.588889 2026] [:error] [pid 3477:tid 3503] [client 85.203.21.156:45807] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aYXwubL0Hdh40C7HYgV7vQAAANg"]
[Fri Feb 06 21:46:33.935759 2026] [:error] [pid 3477:tid 3481] [client 85.203.21.221:55937] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/shell.php"] [unique_id "aYXwubL0Hdh40C7HYgV7wAAAAMI"]
[Fri Feb 06 21:46:34.282738 2026] [:error] [pid 36928:tid 36956] [client 85.203.21.193:28387] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "aYXwups7fyU8D36r-Op2QAAAAdg"]
[Fri Feb 06 21:46:34.633632 2026] [:error] [pid 3382:tid 3455] [client 85.203.21.162:59639] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aYXwusIgU1HR0rhYrE9g_AAAAI8"]
[Fri Feb 06 21:46:34.981491 2026] [:error] [pid 37019:tid 37040] [client 85.203.21.52:52275] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aYXwugkAjqd3bcgYBrtsyAAAAhM"]
[Fri Feb 06 21:46:35.330738 2026] [:error] [pid 36928:tid 36935] [client 85.203.21.172:26397] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aYXwu5s7fyU8D36r-Op2QQAAAcM"]
[Fri Feb 06 21:46:55.677820 2026] [:error] [pid 15821:tid 15828] [client 85.203.21.207:23247] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYXwz3ARQa67J4c772kT2wAAAQM"]
[Fri Feb 06 21:46:56.025357 2026] [:error] [pid 15821:tid 15825] [client 85.203.21.228:34107] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aYXw0HARQa67J4c772kT3QAAAQA"]
[Fri Feb 06 21:46:56.373763 2026] [:error] [pid 46432:tid 46456] [client 85.203.21.213:52483] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/selam.php"] [unique_id "aYXw0AbwJwu_od0kZjMwgQAAAlY"]
[Fri Feb 06 21:47:01.723625 2026] [:error] [pid 3382:tid 3448] [client 85.203.21.58:44993] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "aYXw1cIgU1HR0rhYrE9hEwAAAIg"]
[Fri Feb 06 21:47:02.072584 2026] [:error] [pid 3513:tid 3517] [client 85.203.21.155:37623] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "aYXw1jSw3-HAlzpqSxzYQgAAAUI"]
[Fri Feb 06 21:47:02.420870 2026] [:error] [pid 3477:tid 3491] [client 85.203.21.162:56957] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/"] [unique_id "aYXw1rL0Hdh40C7HYgV79wAAAMw"]
[Fri Feb 06 21:47:02.769946 2026] [:error] [pid 3382:tid 3444] [client 85.203.21.192:60151] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aYXw1sIgU1HR0rhYrE9hFQAAAIQ"]
[Fri Feb 06 21:47:03.116515 2026] [:error] [pid 3380:tid 3402] [client 85.203.21.157:25283] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aYXw1xFAlUvBGSBK2jdsXgAAABI"]
[Fri Feb 06 21:47:18.466218 2026] [:error] [pid 36928:tid 36932] [client 85.203.21.206:27395] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aYXw5ps7fyU8D36r-Op2SwAAAcA"]
[Fri Feb 06 21:47:18.815143 2026] [:error] [pid 3382:tid 3461] [client 85.203.21.183:31259] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aYXw5sIgU1HR0rhYrE9hJAAAAJU"]
[Fri Feb 06 21:47:19.164002 2026] [:error] [pid 36928:tid 36952] [client 85.203.21.228:21303] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aYXw55s7fyU8D36r-Op2TAAAAdQ"]
[Fri Feb 06 21:47:19.513793 2026] [:error] [pid 3381:tid 3421] [client 85.203.21.207:59835] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell3.php"] [unique_id "aYXw5y81zqRg96ZREgh0KwAAAEg"]
[Fri Feb 06 21:47:19.863387 2026] [:error] [pid 37019:tid 37025] [client 85.203.21.52:62323] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aYXw5wkAjqd3bcgYBrts3wAAAgQ"]
[Fri Feb 06 21:47:25.212237 2026] [:error] [pid 3381:tid 3430] [client 85.203.21.157:38853] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aYXw7S81zqRg96ZREgh0LgAAAFE"]
[Fri Feb 06 21:47:25.563704 2026] [:error] [pid 3381:tid 3417] [client 85.203.21.210:51121] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aYXw7S81zqRg96ZREgh0LwAAAEQ"]
[Fri Feb 06 21:47:25.913587 2026] [:error] [pid 3380:tid 3402] [client 85.203.21.157:47213] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "aYXw7RFAlUvBGSBK2jdsZAAAABI"]
[Fri Feb 06 21:47:36.263022 2026] [:error] [pid 3382:tid 3444] [client 85.203.21.157:48817] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aYXw-MIgU1HR0rhYrE9hOgAAAIQ"]
[Fri Feb 06 21:47:36.608284 2026] [:error] [pid 3382:tid 3463] [client 85.203.21.157:54287] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aYXw-MIgU1HR0rhYrE9hPQAAAJc"]
[Fri Feb 06 21:47:46.960996 2026] [:error] [pid 3382:tid 3444] [client 85.203.21.195:48309] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aYXxAsIgU1HR0rhYrE9hXwAAAIQ"]
[Fri Feb 06 21:47:47.309229 2026] [:error] [pid 36928:tid 36939] [client 85.203.21.192:32555] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function/function.php"] [unique_id "aYXxA5s7fyU8D36r-Op2XwAAAcc"]
[Fri Feb 06 21:47:47.655938 2026] [:error] [pid 3382:tid 3440] [client 85.203.21.156:55977] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aYXxA8IgU1HR0rhYrE9hYAAAAIA"]
[Fri Feb 06 21:47:48.003711 2026] [:error] [pid 3380:tid 3388] [client 85.203.21.202:65033] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aYXxBBFAlUvBGSBK2jdsbgAAAAQ"]
[Fri Feb 06 21:47:48.351106 2026] [:error] [pid 3381:tid 3436] [client 85.203.21.45:32073] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aYXxBC81zqRg96ZREgh0QgAAAFc"]
[Fri Feb 06 21:47:48.697139 2026] [:error] [pid 3381:tid 3420] [client 85.203.21.57:37139] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aYXxBC81zqRg96ZREgh0RAAAAEc"]
[Fri Feb 06 21:47:49.046210 2026] [:error] [pid 3380:tid 3408] [client 85.203.21.167:37639] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aYXxBRFAlUvBGSBK2jdsbwAAABg"]
[Fri Feb 06 21:47:54.393429 2026] [:error] [pid 3477:tid 3486] [client 85.203.21.41:27809] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "aYXxCrL0Hdh40C7HYgV8JwAAAMc"]
[Fri Feb 06 21:47:54.739738 2026] [:error] [pid 3477:tid 3489] [client 85.203.21.221:38169] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aYXxCrL0Hdh40C7HYgV8KQAAAMo"]
[Fri Feb 06 21:47:55.086690 2026] [:error] [pid 3380:tid 3401] [client 85.203.21.195:43501] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aYXxCxFAlUvBGSBK2jdscQAAABE"]
[Fri Feb 06 21:47:55.437456 2026] [:error] [pid 3382:tid 3451] [client 85.203.21.202:62601] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aYXxC8IgU1HR0rhYrE9hbAAAAIs"]
[Fri Feb 06 21:47:55.785632 2026] [:error] [pid 3477:tid 3502] [client 85.203.21.52:36807] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aYXxC7L0Hdh40C7HYgV8KwAAANc"]
[Fri Feb 06 21:48:01.135075 2026] [:error] [pid 3382:tid 3460] [client 85.203.21.207:44047] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updates.php"] [unique_id "aYXxEcIgU1HR0rhYrE9hdwAAAJQ"]
[Fri Feb 06 21:48:06.485201 2026] [:error] [pid 3382:tid 3445] [client 85.203.21.208:45181] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "aYXxFsIgU1HR0rhYrE9hiQAAAIU"]
[Fri Feb 06 21:48:11.831471 2026] [:error] [pid 15821:tid 15829] [client 85.203.21.156:33909] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYXxG3ARQa67J4c772kUDAAAAQQ"]
[Fri Feb 06 21:48:12.177701 2026] [:error] [pid 3381:tid 3423] [client 85.203.21.164:26487] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aYXxHC81zqRg96ZREgh0WQAAAEo"]
[Fri Feb 06 21:48:17.527974 2026] [:error] [pid 3513:tid 3515] [client 85.203.21.184:59611] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aYXxITSw3-HAlzpqSxzYqAAAAUA"]
[Fri Feb 06 21:48:32.881936 2026] [:error] [pid 3513:tid 3520] [client 85.203.21.235:48577] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aYXxMDSw3-HAlzpqSxzYtQAAAUU"]
[Fri Feb 06 21:48:33.229947 2026] [:error] [pid 3513:tid 3526] [client 85.203.21.210:37235] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYXxMTSw3-HAlzpqSxzYtwAAAUs"]
[Fri Feb 06 21:48:33.577143 2026] [:error] [pid 3513:tid 3528] [client 85.203.21.193:46821] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aYXxMTSw3-HAlzpqSxzYuAAAAU0"]
[Fri Feb 06 21:48:33.924633 2026] [:error] [pid 36928:tid 36933] [client 85.203.21.176:28205] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aYXxMZs7fyU8D36r-Op2bgAAAcE"]
[Fri Feb 06 21:48:34.270442 2026] [:error] [pid 3513:tid 3539] [client 85.203.21.208:44773] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYXxMjSw3-HAlzpqSxzYuQAAAVg"]
[Fri Feb 06 21:48:39.617988 2026] [:error] [pid 36928:tid 36949] [client 85.203.21.208:39855] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aYXxN5s7fyU8D36r-Op2cQAAAdE"]
[Fri Feb 06 21:48:39.964835 2026] [:error] [pid 15821:tid 15839] [client 85.203.21.208:47925] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/buy.php"] [unique_id "aYXxN3ARQa67J4c772kUQAAAAQ4"]
[Fri Feb 06 21:48:40.314429 2026] [:error] [pid 36928:tid 36932] [client 85.203.21.238:31229] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aYXxOJs7fyU8D36r-Op2cgAAAcA"]
[Fri Feb 06 21:48:40.661356 2026] [:error] [pid 36928:tid 36940] [client 85.203.21.221:50687] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aYXxOJs7fyU8D36r-Op2cwAAAcg"]
[Fri Feb 06 21:48:41.008795 2026] [:error] [pid 36928:tid 36937] [client 85.203.21.238:31467] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aYXxOZs7fyU8D36r-Op2dQAAAcU"]
[Fri Feb 06 21:48:41.355910 2026] [:error] [pid 3381:tid 3431] [client 85.203.21.161:48099] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aYXxOS81zqRg96ZREgh0awAAAFI"]
[Fri Feb 06 21:48:46.702817 2026] [:error] [pid 15821:tid 15843] [client 85.203.21.206:50395] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "aYXxPnARQa67J4c772kURgAAARI"]
[Fri Feb 06 21:48:47.050833 2026] [:error] [pid 36857:tid 36874] [client 85.203.21.227:57481] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aYXxP5VQwfj7Kp4Dd0H3kwAAAY8"]
[Fri Feb 06 21:48:47.398619 2026] [:error] [pid 36928:tid 36946] [client 85.203.21.155:39133] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aYXxP5s7fyU8D36r-Op2fwAAAc4"]
[Fri Feb 06 21:48:47.746741 2026] [:error] [pid 15821:tid 15832] [client 85.203.21.161:32725] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings"] [unique_id "aYXxP3ARQa67J4c772kUSAAAAQc"]
[Fri Feb 06 21:48:48.095640 2026] [:error] [pid 3382:tid 3455] [client 85.203.21.238:23411] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aYXxQMIgU1HR0rhYrE9h0wAAAI8"]
[Fri Feb 06 21:48:48.443440 2026] [:error] [pid 15821:tid 15844] [client 85.203.21.184:21497] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aYXxQHARQa67J4c772kUSQAAARM"]
[Fri Feb 06 21:49:08.783699 2026] [:error] [pid 3382:tid 3455] [client 85.203.21.157:61273] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aYXxVMIgU1HR0rhYrE9h8gAAAI8"]
[Fri Feb 06 21:49:19.134414 2026] [:error] [pid 15821:tid 15839] [client 85.203.21.45:49045] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "aYXxX3ARQa67J4c772kUWgAAAQ4"]
[Fri Feb 06 21:49:19.482939 2026] [:error] [pid 3382:tid 3460] [client 85.203.21.58:45133] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aYXxX8IgU1HR0rhYrE9h9wAAAJQ"]
[Fri Feb 06 21:49:19.830828 2026] [:error] [pid 3382:tid 3449] [client 85.203.21.195:39079] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aYXxX8IgU1HR0rhYrE9h-AAAAIk"]
[Fri Feb 06 21:49:20.180595 2026] [:error] [pid 3513:tid 3519] [client 85.203.21.228:62269] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aYXxYDSw3-HAlzpqSxzY0wAAAUQ"]
[Fri Feb 06 21:49:20.528821 2026] [:error] [pid 15821:tid 15844] [client 85.203.21.162:46579] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gecko-new.php"] [unique_id "aYXxYHARQa67J4c772kUXAAAARM"]
[Fri Feb 06 21:49:20.875965 2026] [:error] [pid 3513:tid 3520] [client 85.203.21.223:36889] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aYXxYDSw3-HAlzpqSxzY1AAAAUU"]
[Fri Feb 06 21:49:21.226076 2026] [:error] [pid 15821:tid 15846] [client 85.203.21.157:40143] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aYXxYXARQa67J4c772kUXQAAARU"]
[Fri Feb 06 21:49:21.583728 2026] [:error] [pid 15821:tid 15826] [client 85.203.21.45:58127] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aYXxYXARQa67J4c772kUXgAAAQE"]
[Fri Feb 06 21:49:26.952721 2026] [:error] [pid 3382:tid 3449] [client 85.203.21.183:50735] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aYXxZsIgU1HR0rhYrE9iBAAAAIk"]
[Fri Feb 06 21:49:37.301904 2026] [:error] [pid 15821:tid 15834] [client 85.203.21.54:35211] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aYXxcXARQa67J4c772kUcAAAAQk"]
[Fri Feb 06 21:49:47.650114 2026] [:error] [pid 3513:tid 3518] [client 85.203.21.58:63905] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ma.php"] [unique_id "aYXxezSw3-HAlzpqSxzY7gAAAUM"]
[Fri Feb 06 21:49:47.997304 2026] [:error] [pid 3382:tid 3440] [client 85.203.21.192:20117] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aYXxe8IgU1HR0rhYrE9iGAAAAIA"]
[Fri Feb 06 21:50:03.345459 2026] [:error] [pid 46432:tid 46445] [client 85.203.21.190:44791] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aYXxiwbwJwu_od0kZjMxAgAAAks"]
[Fri Feb 06 21:50:03.693785 2026] [:error] [pid 36928:tid 36954] [client 85.203.21.207:34163] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/k.php"] [unique_id "aYXxi5s7fyU8D36r-Op2mgAAAdY"]
[Fri Feb 06 21:50:14.040955 2026] [:error] [pid 3477:tid 3489] [client 85.203.21.45:34081] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aYXxlrL0Hdh40C7HYgV8iAAAAMo"]
[Fri Feb 06 21:50:14.387605 2026] [:error] [pid 36928:tid 36951] [client 85.203.21.183:27725] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aYXxlps7fyU8D36r-Op2rgAAAdM"]
[Fri Feb 06 21:50:19.735326 2026] [:error] [pid 3513:tid 3523] [client 85.203.21.57:44417] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "aYXxmzSw3-HAlzpqSxzZDAAAAUg"]
[Fri Feb 06 21:50:20.082542 2026] [:error] [pid 3513:tid 3529] [client 85.203.21.221:59583] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYXxnDSw3-HAlzpqSxzZDQAAAU4"]
[Fri Feb 06 21:50:25.431186 2026] [:error] [pid 3380:tid 3393] [client 85.203.21.164:46697] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/deepseek_d.php"] [unique_id "aYXxoRFAlUvBGSBK2jdsxQAAAAk"]
[Fri Feb 06 21:50:25.777920 2026] [:error] [pid 3380:tid 3387] [client 85.203.21.45:31491] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aYXxoRFAlUvBGSBK2jdsxgAAAAM"]
[Fri Feb 06 21:50:31.130116 2026] [:error] [pid 3380:tid 3405] [client 85.203.21.213:37891] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aYXxpxFAlUvBGSBK2jdszwAAABU"]
[Fri Feb 06 21:50:31.477328 2026] [:error] [pid 15821:tid 15830] [client 85.203.21.190:50353] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aYXxp3ARQa67J4c772kUsAAAAQU"]
[Fri Feb 06 21:50:31.826076 2026] [:error] [pid 46432:tid 46444] [client 85.203.21.162:32305] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aYXxpwbwJwu_od0kZjMxEQAAAko"]
[Fri Feb 06 21:50:32.172231 2026] [:error] [pid 3380:tid 3396] [client 85.203.21.167:55875] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "aYXxqBFAlUvBGSBK2jds0gAAAAw"]
[Fri Feb 06 21:50:32.520132 2026] [:error] [pid 46432:tid 46455] [client 85.203.21.52:33313] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/help.php"] [unique_id "aYXxqAbwJwu_od0kZjMxEwAAAlU"]
[Fri Feb 06 21:50:32.867831 2026] [:error] [pid 46432:tid 46441] [client 85.203.21.221:29655] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aYXxqAbwJwu_od0kZjMxFQAAAkc"]
[Fri Feb 06 21:50:33.216227 2026] [:error] [pid 15821:tid 15826] [client 85.203.21.184:20223] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aYXxqXARQa67J4c772kUsgAAAQE"]
[Fri Feb 06 21:50:43.564856 2026] [:error] [pid 3380:tid 3407] [client 85.203.21.183:37585] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/video/"] [unique_id "aYXxsxFAlUvBGSBK2jds2wAAABc"]
[Fri Feb 06 21:50:43.911517 2026] [:error] [pid 37019:tid 37038] [client 85.203.21.227:56693] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aYXxswkAjqd3bcgYBrttPgAAAhE"]
[Fri Feb 06 21:50:44.257185 2026] [:error] [pid 3382:tid 3441] [client 85.203.21.202:63635] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aYXxtMIgU1HR0rhYrE9iWQAAAIE"]
[Fri Feb 06 21:50:44.601503 2026] [:error] [pid 36928:tid 36935] [client 85.203.21.221:59781] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aYXxtJs7fyU8D36r-Op2uQAAAcM"]
[Fri Feb 06 21:50:44.948348 2026] [:error] [pid 37019:tid 37039] [client 85.203.21.202:49777] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aYXxtAkAjqd3bcgYBrttPwAAAhI"]
[Fri Feb 06 21:50:45.293670 2026] [:error] [pid 3380:tid 3384] [client 85.203.21.238:26531] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "aYXxtRFAlUvBGSBK2jds3gAAAAA"]
[Fri Feb 06 21:50:45.640537 2026] [:error] [pid 3477:tid 3483] [client 85.203.21.57:21963] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aYXxtbL0Hdh40C7HYgV8pgAAAMQ"]
[Fri Feb 06 21:50:50.987205 2026] [:error] [pid 46432:tid 46454] [client 85.203.21.195:65071] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aYXxugbwJwu_od0kZjMxJQAAAlQ"]
[Fri Feb 06 21:50:51.334542 2026] [:error] [pid 3382:tid 3440] [client 85.203.21.193:38275] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.tresh/"] [unique_id "aYXxu8IgU1HR0rhYrE9iWwAAAIA"]
[Fri Feb 06 21:50:51.681639 2026] [:error] [pid 3381:tid 3413] [client 85.203.21.57:35601] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "aYXxuy81zqRg96ZREgh0rwAAAEA"]
[Fri Feb 06 21:50:52.030903 2026] [:error] [pid 3513:tid 3539] [client 85.203.21.161:21573] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYXxvDSw3-HAlzpqSxzZIAAAAVg"]
[Fri Feb 06 21:50:57.377820 2026] [:error] [pid 3513:tid 3529] [client 85.203.21.190:26761] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aYXxwTSw3-HAlzpqSxzZJQAAAU4"]
[Fri Feb 06 21:50:57.724919 2026] [:error] [pid 3382:tid 3446] [client 85.203.21.188:42911] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYXxwcIgU1HR0rhYrE9iXgAAAIY"]
[Fri Feb 06 21:50:58.071629 2026] [:error] [pid 37019:tid 37023] [client 85.203.21.221:24137] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aYXxwgkAjqd3bcgYBrttRwAAAgI"]
[Fri Feb 06 21:50:58.471735 2026] [:error] [pid 3513:tid 3522] [client 85.203.21.58:58329] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-user.php"] [unique_id "aYXxwjSw3-HAlzpqSxzZJgAAAUc"]
[Fri Feb 06 21:50:58.819676 2026] [:error] [pid 46432:tid 46435] [client 85.203.21.208:38431] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/gv0eai61i0kwhxf2w28z/nrhogjyecktixbal0fnt5Cdefault.php"] [unique_id "aYXxwgbwJwu_od0kZjMxLQAAAkE"]
[Fri Feb 06 21:50:59.164986 2026] [:error] [pid 3477:tid 3481] [client 85.203.21.227:36281] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aYXxw7L0Hdh40C7HYgV8rwAAAMI"]
[Fri Feb 06 21:50:59.511416 2026] [:error] [pid 3382:tid 3442] [client 85.203.21.167:36417] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content.php"] [unique_id "aYXxw8IgU1HR0rhYrE9iYAAAAII"]
[Fri Feb 06 21:51:04.857714 2026] [:error] [pid 3380:tid 3392] [client 85.203.21.221:59017] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aYXxyBFAlUvBGSBK2jds6wAAAAg"]
[Fri Feb 06 21:51:30.205320 2026] [:error] [pid 3382:tid 3459] [client 85.203.21.235:45175] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aYXx4sIgU1HR0rhYrE9ifQAAAJM"]
[Fri Feb 06 21:51:35.554005 2026] [:error] [pid 15821:tid 15829] [client 85.203.21.223:27051] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/bk/"] [unique_id "aYXx53ARQa67J4c772kU8wAAAQQ"]
[Fri Feb 06 21:51:35.901957 2026] [:error] [pid 3382:tid 3463] [client 85.203.21.190:37649] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wa/"] [unique_id "aYXx58IgU1HR0rhYrE9ihAAAAJc"]
[Fri Feb 06 21:51:51.263881 2026] [:error] [pid 37019:tid 37038] [client 85.203.21.176:58511] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "aYXx9wkAjqd3bcgYBrtthgAAAhE"]
[Fri Feb 06 21:51:51.611052 2026] [:error] [pid 3513:tid 3522] [client 85.203.21.176:27291] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aYXx9zSw3-HAlzpqSxzZRQAAAUc"]
[Fri Feb 06 21:51:51.956127 2026] [:error] [pid 3382:tid 3453] [client 85.203.21.162:36457] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aYXx98IgU1HR0rhYrE9ilAAAAI0"]
[Fri Feb 06 21:51:52.302281 2026] [:error] [pid 3382:tid 3463] [client 85.203.21.213:63421] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYXx-MIgU1HR0rhYrE9ilQAAAJc"]
[Fri Feb 06 21:51:52.650695 2026] [:error] [pid 37019:tid 37025] [client 85.203.21.206:61739] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aYXx-AkAjqd3bcgYBrttiAAAAgQ"]
[Fri Feb 06 21:51:57.997121 2026] [:error] [pid 3513:tid 3520] [client 85.203.21.228:50329] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aYXx_TSw3-HAlzpqSxzZSwAAAUU"]
[Fri Feb 06 21:52:08.343811 2026] [:error] [pid 3382:tid 3450] [client 85.203.21.172:41451] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aYXyCMIgU1HR0rhYrE9ipAAAAIo"]
[Fri Feb 06 21:52:18.690356 2026] [:error] [pid 3477:tid 3495] [client 85.203.21.235:34509] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aYXyErL0Hdh40C7HYgV9IAAAANA"]
[Fri Feb 06 21:52:24.039600 2026] [:error] [pid 3382:tid 3456] [client 85.203.21.176:27341] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aYXyGMIgU1HR0rhYrE9iswAAAJA"]
[Fri Feb 06 21:52:24.386640 2026] [:error] [pid 3382:tid 3463] [client 85.203.21.164:20677] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "aYXyGMIgU1HR0rhYrE9itAAAAJc"]
[Fri Feb 06 21:52:39.738050 2026] [:error] [pid 46432:tid 46438] [client 85.203.21.228:61719] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYXyJwbwJwu_od0kZjMxjAAAAkQ"]
[Fri Feb 06 21:52:50.085241 2026] [:error] [pid 36928:tid 36933] [client 85.203.21.155:57193] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYXyMps7fyU8D36r-Op26gAAAcE"]
[Fri Feb 06 21:52:55.431029 2026] [:error] [pid 3382:tid 3450] [client 85.203.21.184:30455] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aYXyN8IgU1HR0rhYrE9izAAAAIo"]
[Fri Feb 06 21:52:55.806726 2026] [:error] [pid 15821:tid 15828] [client 85.203.21.227:34565] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aYXyN3ARQa67J4c772kVHwAAAQM"]
[Fri Feb 06 21:53:06.167612 2026] [:error] [pid 3381:tid 3426] [client 85.203.21.161:59733] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aYXyQi81zqRg96ZREgh1HwAAAE0"]
[Fri Feb 06 21:53:06.511656 2026] [:error] [pid 3381:tid 3416] [client 85.203.21.41:41873] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aYXyQi81zqRg96ZREgh1IQAAAEM"]
[Fri Feb 06 21:53:06.859734 2026] [:error] [pid 46432:tid 46451] [client 85.203.21.160:40711] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "aYXyQgbwJwu_od0kZjMxrAAAAlE"]
[Fri Feb 06 21:53:12.208070 2026] [:error] [pid 3382:tid 3448] [client 85.203.21.57:32863] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/datate.php"] [unique_id "aYXySMIgU1HR0rhYrE9i7AAAAIg"]
[Fri Feb 06 21:53:12.554933 2026] [:error] [pid 3382:tid 3461] [client 85.203.21.193:39977] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aYXySMIgU1HR0rhYrE9i7gAAAJU"]
[Fri Feb 06 21:53:17.900748 2026] [:error] [pid 3513:tid 3523] [client 85.203.21.207:28137] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aYXyTTSw3-HAlzpqSxzZagAAAUg"]
[Fri Feb 06 21:53:18.248114 2026] [:error] [pid 36857:tid 36865] [client 85.203.21.184:53873] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aYXyTpVQwfj7Kp4Dd0H4FQAAAYY"]
[Fri Feb 06 21:53:23.594696 2026] [:error] [pid 36857:tid 36866] [client 85.203.21.228:24477] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aYXyU5VQwfj7Kp4Dd0H4GgAAAYc"]
[Fri Feb 06 21:53:23.942449 2026] [:error] [pid 3381:tid 3431] [client 85.203.21.183:60639] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads"] [unique_id "aYXyUy81zqRg96ZREgh1LQAAAFI"]
[Fri Feb 06 21:53:29.291282 2026] [:error] [pid 3477:tid 3490] [client 85.203.21.57:24281] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/hplfuns.php"] [unique_id "aYXyWbL0Hdh40C7HYgV9WQAAAMs"]
[Fri Feb 06 21:53:34.641027 2026] [:error] [pid 3513:tid 3535] [client 85.203.21.192:34101] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aYXyXjSw3-HAlzpqSxzZdQAAAVQ"]
[Fri Feb 06 21:53:39.992328 2026] [:error] [pid 3380:tid 3393] [client 85.203.21.190:48685] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aYXyYxFAlUvBGSBK2jdtNwAAAAk"]
[Fri Feb 06 21:53:55.339270 2026] [:error] [pid 3381:tid 3424] [client 85.203.21.172:28587] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "aYXycy81zqRg96ZREgh1UwAAAEs"]
[Fri Feb 06 21:53:55.687108 2026] [:error] [pid 3380:tid 3393] [client 85.203.21.57:22615] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "aYXycxFAlUvBGSBK2jdtQwAAAAk"]
[Fri Feb 06 21:53:56.042987 2026] [:error] [pid 3382:tid 3459] [client 85.203.21.223:35235] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aYXydMIgU1HR0rhYrE9jMgAAAJM"]
[Fri Feb 06 21:53:56.390588 2026] [:error] [pid 3382:tid 3449] [client 85.203.21.164:54043] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aYXydMIgU1HR0rhYrE9jMwAAAIk"]
[Fri Feb 06 21:54:01.737619 2026] [:error] [pid 3477:tid 3488] [client 85.203.21.221:60993] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "aYXyebL0Hdh40C7HYgV9hAAAAMk"]
[Fri Feb 06 21:54:02.087111 2026] [:error] [pid 3477:tid 3501] [client 85.203.21.57:26921] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/"] [unique_id "aYXyerL0Hdh40C7HYgV9hQAAANY"]
[Fri Feb 06 21:54:07.433798 2026] [:error] [pid 37019:tid 37042] [client 85.203.21.183:47255] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/php.php"] [unique_id "aYXyfwkAjqd3bcgYBrtuSQAAAhU"]
[Fri Feb 06 21:54:17.781868 2026] [:error] [pid 36928:tid 36948] [client 85.203.21.57:39255] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/"] [unique_id "aYXyiZs7fyU8D36r-Op3GwAAAdA"]
[Fri Feb 06 21:54:23.129698 2026] [:error] [pid 3380:tid 3400] [client 85.203.21.206:39307] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "aYXyjxFAlUvBGSBK2jdtUwAAABA"]
[Fri Feb 06 21:54:23.477701 2026] [:error] [pid 3380:tid 3395] [client 85.203.21.157:62603] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYXyjxFAlUvBGSBK2jdtVQAAAAs"]
[Fri Feb 06 21:54:23.842072 2026] [:error] [pid 3477:tid 3483] [client 85.203.21.57:57473] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp.php"] [unique_id "aYXyj7L0Hdh40C7HYgV9nAAAAMQ"]
[Fri Feb 06 21:54:24.190613 2026] [:error] [pid 15821:tid 15827] [client 85.203.21.213:22105] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aYXykHARQa67J4c772kVhgAAAQI"]
[Fri Feb 06 21:54:24.537098 2026] [:error] [pid 36857:tid 36877] [client 85.203.21.172:41449] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aYXykJVQwfj7Kp4Dd0H4TQAAAZI"]
[Fri Feb 06 21:54:24.661280 2026] [:error] [pid 3477:tid 3485] [client 159.89.169.104:63241] [client 159.89.169.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.169.104, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aYXykLL0Hdh40C7HYgV9nQAAAMY"]
[Fri Feb 06 21:54:24.882653 2026] [:error] [pid 37019:tid 37040] [client 85.203.21.161:40593] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aYXykAkAjqd3bcgYBrtuUAAAAhM"]
[Fri Feb 06 21:54:25.233015 2026] [:error] [pid 36928:tid 36938] [client 85.203.21.41:45177] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aYXykZs7fyU8D36r-Op3HQAAAcY"]
[Fri Feb 06 21:54:25.580543 2026] [:error] [pid 37019:tid 37022] [client 85.203.21.162:26015] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/file.php"] [unique_id "aYXykQkAjqd3bcgYBrtuUwAAAgE"]
[Fri Feb 06 21:54:25.927446 2026] [:error] [pid 36928:tid 36950] [client 85.203.21.210:57491] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aYXykZs7fyU8D36r-Op3HgAAAdI"]
[Fri Feb 06 21:54:27.362153 2026] [:error] [pid 3477:tid 3491] [client 159.89.169.104:63241] [client 159.89.169.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.169.104, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aYXyk7L0Hdh40C7HYgV9nwAAAMw"]
[Fri Feb 06 21:54:36.276717 2026] [:error] [pid 15821:tid 15825] [client 85.203.21.58:24241] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYXynHARQa67J4c772kVjgAAAQA"]
[Fri Feb 06 21:54:41.193188 2026] [:error] [pid 36857:tid 36868] [client 146.70.250.132:57212] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYXyoZVQwfj7Kp4Dd0H4awAAAYk"]
[Fri Feb 06 21:54:41.626506 2026] [:error] [pid 36928:tid 36935] [client 85.203.21.155:27091] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/ws29.php"] [unique_id "aYXyoZs7fyU8D36r-Op3OAAAAcM"]
[Fri Feb 06 21:54:41.980355 2026] [:error] [pid 3513:tid 3515] [client 85.203.21.164:42839] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aYXyoTSw3-HAlzpqSxzZzQAAAUA"]
[Fri Feb 06 21:54:52.328636 2026] [:error] [pid 3477:tid 3496] [client 85.203.21.202:32133] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/"] [unique_id "aYXyrLL0Hdh40C7HYgV9zQAAANE"]
[Fri Feb 06 21:54:52.679801 2026] [:error] [pid 36857:tid 36877] [client 85.203.21.155:20689] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aYXyrJVQwfj7Kp4Dd0H4ewAAAZI"]
[Fri Feb 06 21:54:53.027983 2026] [:error] [pid 15821:tid 15837] [client 85.203.21.213:20655] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/shel.php"] [unique_id "aYXyrXARQa67J4c772kVxQAAAQw"]
[Fri Feb 06 21:54:53.374650 2026] [:error] [pid 37019:tid 37024] [client 85.203.21.188:38151] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-wlx.php"] [unique_id "aYXyrQkAjqd3bcgYBrtufAAAAgM"]
[Fri Feb 06 21:54:53.726705 2026] [:error] [pid 3477:tid 3482] [client 85.203.21.45:35595] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updraft/emptydir/"] [unique_id "aYXyrbL0Hdh40C7HYgV9zgAAAMM"]
[Fri Feb 06 21:54:59.074373 2026] [:error] [pid 3380:tid 3397] [client 85.203.21.160:47493] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/aounq/"] [unique_id "aYXysxFAlUvBGSBK2jdtcgAAAA0"]
[Fri Feb 06 21:55:04.425045 2026] [:error] [pid 37019:tid 37038] [client 85.203.21.155:23661] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "aYXyuAkAjqd3bcgYBrtugQAAAhE"]
[Fri Feb 06 21:55:04.772997 2026] [:error] [pid 3380:tid 3392] [client 85.203.21.228:20131] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "aYXyuBFAlUvBGSBK2jdtdgAAAAg"]
[Fri Feb 06 21:55:05.119693 2026] [:error] [pid 3513:tid 3519] [client 85.203.21.213:46825] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "aYXyuTSw3-HAlzpqSxzZ2gAAAUQ"]
[Fri Feb 06 21:55:10.469027 2026] [:error] [pid 36857:tid 36879] [client 85.203.21.58:32459] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/image/"] [unique_id "aYXyvpVQwfj7Kp4Dd0H4gQAAAZQ"]
[Fri Feb 06 21:55:10.814757 2026] [:error] [pid 36857:tid 36863] [client 85.203.21.235:55373] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "aYXyvpVQwfj7Kp4Dd0H4gwAAAYQ"]
[Fri Feb 06 21:55:11.161298 2026] [:error] [pid 3381:tid 3434] [client 85.203.21.58:36511] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/categories/admin.php"] [unique_id "aYXyvy81zqRg96ZREgh1rwAAAFU"]
[Fri Feb 06 21:55:11.511463 2026] [:error] [pid 15821:tid 15836] [client 85.203.21.223:49109] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/list-item/test.php"] [unique_id "aYXyv3ARQa67J4c772kV0AAAAQs"]
[Fri Feb 06 21:55:11.857789 2026] [:error] [pid 37019:tid 37031] [client 85.203.21.164:43103] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/abb.php"] [unique_id "aYXyvwkAjqd3bcgYBrtujQAAAgo"]
[Fri Feb 06 21:55:12.204000 2026] [:error] [pid 3380:tid 3395] [client 85.203.21.54:56353] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/sql.php"] [unique_id "aYXywBFAlUvBGSBK2jdtgAAAAAs"]
[Fri Feb 06 21:55:12.552221 2026] [:error] [pid 3382:tid 3462] [client 85.203.21.176:57401] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/tag-cloud/wp-load.php"] [unique_id "aYXywMIgU1HR0rhYrE9jhAAAAJY"]
[Fri Feb 06 21:55:12.898514 2026] [:error] [pid 36857:tid 36875] [client 85.203.21.207:53725] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/includ.php"] [unique_id "aYXywJVQwfj7Kp4Dd0H4hAAAAZA"]
[Fri Feb 06 21:55:13.245865 2026] [:error] [pid 3380:tid 3394] [client 85.203.21.208:21275] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-xxx.php"] [unique_id "aYXywRFAlUvBGSBK2jdtggAAAAo"]
[Fri Feb 06 21:55:13.592694 2026] [:error] [pid 36928:tid 36956] [client 85.203.21.213:62955] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-xxx.php"] [unique_id "aYXywZs7fyU8D36r-Op3ZwAAAdg"]
[Fri Feb 06 21:55:13.941693 2026] [:error] [pid 3382:tid 3446] [client 85.203.21.228:47845] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aYXywcIgU1HR0rhYrE9jiAAAAIY"]
[Fri Feb 06 21:55:14.286802 2026] [:error] [pid 3382:tid 3456] [client 85.203.21.54:34593] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/categories/chosen.php"] [unique_id "aYXywsIgU1HR0rhYrE9jiQAAAJA"]
[Fri Feb 06 21:55:14.634249 2026] [:error] [pid 3382:tid 3445] [client 85.203.21.54:49285] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/celuapuestas-theme/inc/functions/frontend/g0znuk/upload.php"] [unique_id "aYXywsIgU1HR0rhYrE9jiwAAAIU"]
[Fri Feb 06 21:55:14.980745 2026] [:error] [pid 3382:tid 3454] [client 85.203.21.162:56389] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils/ntucbd/doc.php"] [unique_id "aYXywsIgU1HR0rhYrE9jjAAAAI4"]
[Fri Feb 06 21:55:15.328999 2026] [:error] [pid 46432:tid 46449] [client 85.203.21.52:44159] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYXywwbwJwu_od0kZjMyVgAAAk8"]
[Fri Feb 06 21:55:15.673348 2026] [:error] [pid 37019:tid 37022] [client 85.203.21.183:22997] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/database.php"] [unique_id "aYXywwkAjqd3bcgYBrtukQAAAgE"]
[Fri Feb 06 21:55:21.021033 2026] [:error] [pid 36928:tid 36946] [client 85.203.21.193:48041] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-ver.php"] [unique_id "aYXyyZs7fyU8D36r-Op3fgAAAc4"]
[Fri Feb 06 21:55:21.368786 2026] [:error] [pid 36928:tid 36956] [client 85.203.21.221:25685] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/acxx.php"] [unique_id "aYXyyZs7fyU8D36r-Op3gAAAAdg"]
[Fri Feb 06 21:55:21.715285 2026] [:error] [pid 3381:tid 3423] [client 85.203.21.155:62755] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/gettest.php"] [unique_id "aYXyyS81zqRg96ZREgh1sgAAAEo"]
[Fri Feb 06 21:55:22.062940 2026] [:error] [pid 46432:tid 46436] [client 85.203.21.52:39461] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentysixteen/includez.php"] [unique_id "aYXyygbwJwu_od0kZjMyWgAAAkI"]
[Fri Feb 06 21:55:22.412539 2026] [:error] [pid 3381:tid 3431] [client 85.203.21.54:58709] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentynineteen/sass/mixins/scss.php"] [unique_id "aYXyyi81zqRg96ZREgh1tAAAAFI"]
[Fri Feb 06 21:55:47.763543 2026] [:error] [pid 15821:tid 15838] [client 85.203.21.164:45829] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-social-elf.php"] [unique_id "aYXy43ARQa67J4c772kV8gAAAQ0"]
[Fri Feb 06 21:55:53.111931 2026] [:error] [pid 3382:tid 3450] [client 85.203.21.176:45749] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ectoplasm/moon.php"] [unique_id "aYXy6cIgU1HR0rhYrE9jpwAAAIo"]
[Fri Feb 06 21:55:53.457377 2026] [:error] [pid 3382:tid 3445] [client 85.203.21.208:60079] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/"] [unique_id "aYXy6cIgU1HR0rhYrE9jqAAAAIU"]
[Fri Feb 06 21:55:53.805410 2026] [:error] [pid 3380:tid 3396] [client 85.203.21.192:26345] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Decode/"] [unique_id "aYXy6RFAlUvBGSBK2jdtkwAAAAw"]
[Fri Feb 06 21:56:09.154210 2026] [:error] [pid 3380:tid 3389] [client 85.203.21.193:57403] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/page-list/"] [unique_id "aYXy-RFAlUvBGSBK2jdtmAAAAAU"]
[Fri Feb 06 21:56:09.499197 2026] [:error] [pid 3513:tid 3532] [client 85.203.21.54:50643] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "aYXy-TSw3-HAlzpqSxzaAgAAAVE"]
[Fri Feb 06 21:56:14.846990 2026] [:error] [pid 46432:tid 46452] [client 85.203.21.210:61115] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/template-singl-portfolio.php"] [unique_id "aYXy_gbwJwu_od0kZjMydAAAAlI"]
[Fri Feb 06 21:56:15.197606 2026] [:error] [pid 36857:tid 36882] [client 85.203.21.54:29785] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/zczv.php"] [unique_id "aYXy_5VQwfj7Kp4Dd0H4pgAAAZc"]
[Fri Feb 06 21:56:20.545502 2026] [:error] [pid 46432:tid 46447] [client 85.203.21.157:33171] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/locks.php"] [unique_id "aYXzBAbwJwu_od0kZjMyegAAAk0"]
[Fri Feb 06 21:56:25.896151 2026] [:error] [pid 46432:tid 46448] [client 85.203.21.223:60431] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aYXzCQbwJwu_od0kZjMygQAAAk4"]
[Fri Feb 06 21:56:26.243800 2026] [:error] [pid 36928:tid 36946] [client 85.203.21.202:56331] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/light/wxeagnaY.php"] [unique_id "aYXzCps7fyU8D36r-Op31QAAAc4"]
[Fri Feb 06 21:56:31.599332 2026] [:error] [pid 36928:tid 36949] [client 85.203.21.221:44407] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin/no/panel/main_panel.php"] [unique_id "aYXzD5s7fyU8D36r-Op39wAAAdE"]
[Fri Feb 06 21:56:31.948426 2026] [:error] [pid 3513:tid 3537] [client 85.203.21.52:35117] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/views/cmd.php"] [unique_id "aYXzDzSw3-HAlzpqSxzaDAAAAVY"]
[Fri Feb 06 21:56:32.297617 2026] [:error] [pid 36928:tid 36948] [client 85.203.21.193:58439] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aYXzEJs7fyU8D36r-Op3-gAAAdA"]
[Fri Feb 06 21:56:32.646812 2026] [:error] [pid 3381:tid 3428] [client 85.203.21.221:43575] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aYXzEC81zqRg96ZREgh1-gAAAE8"]
[Fri Feb 06 21:56:37.988240 2026] [:error] [pid 3382:tid 3444] [client 85.203.21.206:20701] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aYXzFcIgU1HR0rhYrE9j2AAAAIQ"]
[Fri Feb 06 21:56:38.334707 2026] [:error] [pid 3380:tid 3392] [client 85.203.21.45:59159] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/customize-widgets/about.php"] [unique_id "aYXzFhFAlUvBGSBK2jdtpgAAAAg"]
[Fri Feb 06 21:56:43.693398 2026] [:error] [pid 3381:tid 3416] [client 85.203.21.184:63633] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/ubermenu/pro/updates/updatechecker/js/about.php"] [unique_id "aYXzGy81zqRg96ZREgh2BQAAAEM"]
[Fri Feb 06 21:56:44.038903 2026] [:error] [pid 3381:tid 3421] [client 85.203.21.157:38179] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/modules/notes/about.php"] [unique_id "aYXzHC81zqRg96ZREgh2BgAAAEg"]
[Fri Feb 06 21:56:49.382042 2026] [:error] [pid 3381:tid 3413] [client 85.203.21.207:64895] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-custom-fields-pro/includes/admin/views/upgrade/about.php"] [unique_id "aYXzIS81zqRg96ZREgh2DgAAAEA"]
[Fri Feb 06 21:56:49.729806 2026] [:error] [pid 3382:tid 3442] [client 85.203.21.54:49169] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/submission.php"] [unique_id "aYXzIcIgU1HR0rhYrE9j5AAAAII"]
[Fri Feb 06 21:56:50.076390 2026] [:error] [pid 3381:tid 3421] [client 85.203.21.193:64055] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/test2.php"] [unique_id "aYXzIi81zqRg96ZREgh2DwAAAEg"]
[Fri Feb 06 21:56:55.425191 2026] [:error] [pid 3381:tid 3427] [client 85.203.21.156:48421] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/includes/builder/plugin-compat/styles/"] [unique_id "aYXzJy81zqRg96ZREgh2FQAAAE4"]
[Fri Feb 06 21:56:55.772307 2026] [:error] [pid 36928:tid 36942] [client 85.203.21.54:42989] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/ai-app/"] [unique_id "aYXzJ5s7fyU8D36r-Op4CwAAAco"]
[Fri Feb 06 21:56:56.118795 2026] [:error] [pid 36928:tid 36954] [client 85.203.21.228:57883] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/cache/gfhfv.php"] [unique_id "aYXzKJs7fyU8D36r-Op4DQAAAdY"]
[Fri Feb 06 21:56:56.464838 2026] [:error] [pid 3382:tid 3463] [client 85.203.21.45:58023] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/cpo_temp/services.php"] [unique_id "aYXzKMIgU1HR0rhYrE9j8gAAAJc"]
[Fri Feb 06 21:57:01.813006 2026] [:error] [pid 3382:tid 3462] [client 85.203.21.155:28675] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/investor-relations/block-directory/"] [unique_id "aYXzLcIgU1HR0rhYrE9j9gAAAJY"]
[Fri Feb 06 21:57:07.176170 2026] [:error] [pid 3513:tid 3527] [client 85.203.21.193:44457] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/chosen.php"] [unique_id "aYXzMzSw3-HAlzpqSxzaHAAAAUw"]
[Fri Feb 06 21:57:07.523732 2026] [:error] [pid 3380:tid 3404] [client 85.203.21.221:51893] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aYXzMxFAlUvBGSBK2jdttAAAABQ"]
[Fri Feb 06 21:57:07.870463 2026] [:error] [pid 3513:tid 3533] [client 85.203.21.238:30333] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/image/chosen.php"] [unique_id "aYXzMzSw3-HAlzpqSxzaHwAAAVI"]
[Fri Feb 06 21:57:13.219817 2026] [:error] [pid 3382:tid 3440] [client 85.203.21.207:28499] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aYXzOcIgU1HR0rhYrE9j_QAAAIA"]
[Fri Feb 06 21:57:18.567704 2026] [:error] [pid 15821:tid 15849] [client 85.203.21.221:52237] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/settings/gfhfv.php"] [unique_id "aYXzPnARQa67J4c772kWPgAAARg"]
[Fri Feb 06 21:57:18.916339 2026] [:error] [pid 3380:tid 3389] [client 85.203.21.195:29721] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/akses.php"] [unique_id "aYXzPhFAlUvBGSBK2jdttQAAAAU"]
[Fri Feb 06 21:57:19.264153 2026] [:error] [pid 3513:tid 3536] [client 85.203.21.213:26795] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/gfhfv.php"] [unique_id "aYXzPzSw3-HAlzpqSxzaIwAAAVU"]
[Fri Feb 06 21:57:24.616460 2026] [:error] [pid 3380:tid 3402] [client 85.203.21.54:49149] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/tilnzqc/"] [unique_id "aYXzRBFAlUvBGSBK2jdtwAAAABI"]
[Fri Feb 06 21:57:44.964485 2026] [:error] [pid 3381:tid 3434] [client 85.203.21.156:45015] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aYXzWC81zqRg96ZREgh2MQAAAFU"]
[Fri Feb 06 21:57:45.311049 2026] [:error] [pid 3381:tid 3430] [client 85.203.21.162:23101] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wordpress/wp-includes/blocks/accordion/"] [unique_id "aYXzWS81zqRg96ZREgh2MgAAAFE"]
[Fri Feb 06 21:57:45.656231 2026] [:error] [pid 3513:tid 3520] [client 85.203.21.238:51469] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-mails.php"] [unique_id "aYXzWTSw3-HAlzpqSxzaMgAAAUU"]
[Fri Feb 06 21:57:46.001644 2026] [:error] [pid 15821:tid 15849] [client 85.203.21.45:61335] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/Curve25519/wp-cron.php"] [unique_id "aYXzWnARQa67J4c772kWTAAAARg"]
[Fri Feb 06 21:57:46.348538 2026] [:error] [pid 3382:tid 3459] [client 85.203.21.190:41593] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/network.php"] [unique_id "aYXzWsIgU1HR0rhYrE9kGAAAAJM"]
[Fri Feb 06 21:57:51.695355 2026] [:error] [pid 3381:tid 3426] [client 85.203.21.172:20963] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-widget-table.php"] [unique_id "aYXzXy81zqRg96ZREgh2NAAAAE0"]
[Fri Feb 06 21:57:52.044736 2026] [:error] [pid 3381:tid 3435] [client 85.203.21.156:35337] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/config.php"] [unique_id "aYXzYC81zqRg96ZREgh2NQAAAFY"]
[Fri Feb 06 21:58:07.402265 2026] [:error] [pid 3513:tid 3537] [client 85.203.21.228:63953] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/dlloduv/about.php"] [unique_id "aYXzbzSw3-HAlzpqSxzaOQAAAVY"]
[Fri Feb 06 21:58:07.751038 2026] [:error] [pid 36857:tid 36881] [client 85.203.21.227:37239] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/wp-ait.php"] [unique_id "aYXzb5VQwfj7Kp4Dd0H4zwAAAZY"]
[Fri Feb 06 21:58:13.100226 2026] [:error] [pid 37019:tid 37022] [client 85.203.21.213:37665] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aYXzdQkAjqd3bcgYBrtu0wAAAgE"]
[Fri Feb 06 21:58:13.449638 2026] [:error] [pid 36928:tid 36941] [client 85.203.21.164:55359] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpvivid-backuprestore/error/"] [unique_id "aYXzdZs7fyU8D36r-Op4PAAAAck"]
[Fri Feb 06 21:58:18.798530 2026] [:error] [pid 3513:tid 3523] [client 85.203.21.52:54751] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/wp-d1h2k6v9z7.php"] [unique_id "aYXzejSw3-HAlzpqSxzaPgAAAUg"]
[Fri Feb 06 21:58:19.146425 2026] [:error] [pid 3381:tid 3430] [client 85.203.21.221:42093] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-terms/vx.php"] [unique_id "aYXzey81zqRg96ZREgh2SQAAAFE"]
[Fri Feb 06 21:58:19.492668 2026] [:error] [pid 36857:tid 36872] [client 85.203.21.228:49717] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aYXze5VQwfj7Kp4Dd0H40gAAAY0"]
[Fri Feb 06 21:58:19.839738 2026] [:error] [pid 37019:tid 37029] [client 85.203.21.193:26461] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-includes/blocks/columns/about.php"] [unique_id "aYXzewkAjqd3bcgYBrtu2QAAAgg"]
[Fri Feb 06 21:58:25.186643 2026] [:error] [pid 36928:tid 36943] [client 85.203.21.184:40417] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-includes/css/dist/commands/fonts/"] [unique_id "aYXzgZs7fyU8D36r-Op4UgAAAcs"]
[Fri Feb 06 21:58:30.534476 2026] [:error] [pid 36928:tid 36940] [client 85.203.21.184:20891] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/v3.php"] [unique_id "aYXzhps7fyU8D36r-Op4VgAAAcg"]
[Fri Feb 06 21:58:35.883518 2026] [:error] [pid 3382:tid 3454] [client 85.203.21.156:37741] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-content/uploads/rank-math/about.php"] [unique_id "aYXzi8IgU1HR0rhYrE9kUgAAAI4"]
[Fri Feb 06 21:58:36.231312 2026] [:error] [pid 46432:tid 46455] [client 85.203.21.58:57351] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-content/themes/kadence/assets/images/icons/smilies/"] [unique_id "aYXzjAbwJwu_od0kZjMy2gAAAlU"]
[Fri Feb 06 21:58:36.586326 2026] [:error] [pid 3381:tid 3436] [client 85.203.21.195:29605] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-content/ai1wm-backups/block-patterns/"] [unique_id "aYXzjC81zqRg96ZREgh2ZwAAAFc"]
[Fri Feb 06 21:58:36.932896 2026] [:error] [pid 15821:tid 15849] [client 85.203.21.213:21249] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-content/plugins/file52.php"] [unique_id "aYXzjHARQa67J4c772kWWQAAARg"]
[Fri Feb 06 21:58:42.279973 2026] [:error] [pid 37019:tid 37025] [client 85.203.21.176:53385] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-includes/PHPMailer/widgets/"] [unique_id "aYXzkgkAjqd3bcgYBrtu3wAAAgQ"]
[Fri Feb 06 21:58:42.627061 2026] [:error] [pid 15821:tid 15846] [client 85.203.21.221:45411] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-includes/fonts/maint/"] [unique_id "aYXzknARQa67J4c772kWXQAAARU"]
[Fri Feb 06 21:58:42.974440 2026] [:error] [pid 3477:tid 3481] [client 85.203.21.238:52613] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-includes/block-patterns/upgrade/"] [unique_id "aYXzkrL0Hdh40C7HYgV-RgAAAMI"]
[Fri Feb 06 21:58:48.322967 2026] [:error] [pid 36857:tid 36883] [client 85.203.21.228:31781] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-includes/html-api/PHPMailer/"] [unique_id "aYXzmJVQwfj7Kp4Dd0H42wAAAZg"]
[Fri Feb 06 21:58:48.667232 2026] [:error] [pid 36857:tid 36882] [client 85.203.21.188:42639] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-includes/theme-compat/input/"] [unique_id "aYXzmJVQwfj7Kp4Dd0H43AAAAZc"]
[Fri Feb 06 21:58:49.015943 2026] [:error] [pid 3513:tid 3518] [client 85.203.21.227:45089] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-admin/network/about.php"] [unique_id "aYXzmTSw3-HAlzpqSxzaTAAAAUM"]
[Fri Feb 06 21:58:49.363351 2026] [:error] [pid 36857:tid 36872] [client 85.203.21.161:44909] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-admin/network/includes/"] [unique_id "aYXzmZVQwfj7Kp4Dd0H43QAAAY0"]
[Fri Feb 06 21:58:54.708961 2026] [:error] [pid 15821:tid 15849] [client 85.203.21.228:32507] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-admin/maint/l10n/"] [unique_id "aYXznnARQa67J4c772kWZQAAARg"]
[Fri Feb 06 21:58:55.055939 2026] [:error] [pid 36928:tid 36936] [client 85.203.21.206:42871] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-admin/css/colors/pomo/"] [unique_id "aYXzn5s7fyU8D36r-Op4fAAAAcQ"]
[Fri Feb 06 21:58:55.400751 2026] [:error] [pid 36928:tid 36935] [client 85.203.21.45:47389] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-admin/css/colors/blue/network/"] [unique_id "aYXzn5s7fyU8D36r-Op4fwAAAcM"]
[Fri Feb 06 21:58:55.746293 2026] [:error] [pid 3382:tid 3462] [client 85.203.21.52:41847] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-admin/includes/media1.php"] [unique_id "aYXzn8IgU1HR0rhYrE9kWgAAAJY"]
[Fri Feb 06 21:58:56.091756 2026] [:error] [pid 15821:tid 15834] [client 85.203.21.156:52995] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-admin/network/icons/"] [unique_id "aYXzoHARQa67J4c772kWaAAAAQk"]
[Fri Feb 06 21:59:01.440776 2026] [:error] [pid 36857:tid 36867] [client 85.203.21.192:58847] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/search/images/"] [unique_id "aYXzpZVQwfj7Kp4Dd0H44QAAAYg"]
[Fri Feb 06 21:59:06.791660 2026] [:error] [pid 15821:tid 15831] [client 85.203.21.202:38299] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/fonts/"] [unique_id "aYXzqnARQa67J4c772kWawAAAQY"]
[Fri Feb 06 21:59:07.138274 2026] [:error] [pid 36928:tid 36932] [client 85.203.21.184:55001] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/customize/"] [unique_id "aYXzq5s7fyU8D36r-Op4hQAAAcA"]
[Fri Feb 06 21:59:07.484347 2026] [:error] [pid 36857:tid 36874] [client 85.203.21.228:58985] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/woocommerce/"] [unique_id "aYXzq5VQwfj7Kp4Dd0H45gAAAY8"]
[Fri Feb 06 21:59:12.833704 2026] [:error] [pid 36928:tid 36936] [client 85.203.21.156:61513] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/ast-block-templates-json/search/"] [unique_id "aYXzsJs7fyU8D36r-Op4hwAAAcQ"]
[Fri Feb 06 21:59:13.183581 2026] [:error] [pid 36928:tid 36950] [client 85.203.21.157:48635] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/maintenance/assets/fonts/widgets/"] [unique_id "aYXzsZs7fyU8D36r-Op4iQAAAdI"]
[Fri Feb 06 21:59:18.530733 2026] [:error] [pid 3382:tid 3459] [client 85.203.21.223:30371] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "aYXztsIgU1HR0rhYrE9kaAAAAJM"]
[Fri Feb 06 21:59:18.877244 2026] [:error] [pid 15821:tid 15826] [client 85.203.21.176:27609] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/providers/"] [unique_id "aYXztnARQa67J4c772kWcAAAAQE"]
[Fri Feb 06 21:59:19.222586 2026] [:error] [pid 3477:tid 3497] [client 85.203.21.58:44209] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "aYXzt7L0Hdh40C7HYgV-WgAAANI"]
[Fri Feb 06 21:59:19.566768 2026] [:error] [pid 37019:tid 37040] [client 85.203.21.183:20407] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/colors/"] [unique_id "aYXztwkAjqd3bcgYBrtu5wAAAhM"]
[Fri Feb 06 21:59:19.912384 2026] [:error] [pid 37019:tid 37028] [client 85.203.21.156:40847] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "aYXztwkAjqd3bcgYBrtu6QAAAgc"]
[Fri Feb 06 21:59:20.261528 2026] [:error] [pid 3477:tid 3481] [client 85.203.21.58:38909] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "aYXzuLL0Hdh40C7HYgV-XAAAAMI"]
[Fri Feb 06 21:59:25.609909 2026] [:error] [pid 3381:tid 3413] [client 85.203.21.235:54921] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aYXzvS81zqRg96ZREgh2fQAAAEA"]
[Fri Feb 06 21:59:25.955493 2026] [:error] [pid 37019:tid 37022] [client 85.203.21.221:33459] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-signin.php"] [unique_id "aYXzvQkAjqd3bcgYBrtu6gAAAgE"]
[Fri Feb 06 21:59:31.302980 2026] [:error] [pid 3380:tid 3406] [client 85.203.21.164:41479] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aYXzwxFAlUvBGSBK2jdt6AAAABY"]
[Fri Feb 06 21:59:36.650259 2026] [:error] [pid 3382:tid 3445] [client 85.203.21.54:43079] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-edit-link/about.php"] [unique_id "aYXzyMIgU1HR0rhYrE9kdQAAAIU"]
[Fri Feb 06 21:59:41.999093 2026] [:error] [pid 36928:tid 36946] [client 85.203.21.156:46699] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aYXzzZs7fyU8D36r-Op4lgAAAc4"]
[Fri Feb 06 21:59:47.348039 2026] [:error] [pid 36928:tid 36953] [client 85.203.21.183:51535] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/about.php"] [unique_id "aYXz05s7fyU8D36r-Op4nAAAAdU"]
[Fri Feb 06 21:59:47.693508 2026] [:error] [pid 3513:tid 3524] [client 85.203.21.167:53277] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/search/search/about.php"] [unique_id "aYXz0zSw3-HAlzpqSxzabAAAAUk"]
[Fri Feb 06 21:59:49.576007 2026] [:error] [pid 46432:tid 46436] [client 85.203.21.184:42277] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/consultstreet/about.php"] [unique_id "aYXz1QbwJwu_od0kZjMy-wAAAkI"]
[Fri Feb 06 21:59:54.922261 2026] [:error] [pid 3381:tid 3437] [client 85.203.21.156:53581] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/acucozo/file.php"] [unique_id "aYXz2i81zqRg96ZREgh2jwAAAFg"]
[Fri Feb 06 21:59:55.267467 2026] [:error] [pid 3380:tid 3401] [client 85.203.21.228:62103] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/query-monitor/collectors/about.php"] [unique_id "aYXz2xFAlUvBGSBK2jdt8QAAABE"]
[Fri Feb 06 21:59:55.614150 2026] [:error] [pid 3381:tid 3428] [client 85.203.21.207:20401] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/x/wp-classs-editor.php"] [unique_id "aYXz2y81zqRg96ZREgh2kAAAAE8"]
[Fri Feb 06 22:00:00.966370 2026] [:error] [pid 3477:tid 3490] [client 85.203.21.54:52855] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pixelyoursite/vendor/glenscott/about.php"] [unique_id "aYXz4LL0Hdh40C7HYgV-bgAAAMs"]
[Fri Feb 06 22:00:01.314277 2026] [:error] [pid 3513:tid 3536] [client 85.203.21.223:63891] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/mailpoet/vendor/composer/about.php"] [unique_id "aYXz4TSw3-HAlzpqSxzacwAAAVU"]
[Fri Feb 06 22:00:11.664816 2026] [:error] [pid 46432:tid 46454] [client 85.203.21.235:43795] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/images/"] [unique_id "aYXz6wbwJwu_od0kZjMzBQAAAlQ"]
[Fri Feb 06 22:00:17.011752 2026] [:error] [pid 46432:tid 46447] [client 85.203.21.155:54389] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updraft/fonts/"] [unique_id "aYXz8QbwJwu_od0kZjMzEQAAAk0"]
[Fri Feb 06 22:00:17.361152 2026] [:error] [pid 37019:tid 37022] [client 85.203.21.190:56363] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wpvivid_uploads/Isolate/error/"] [unique_id "aYXz8QkAjqd3bcgYBrtvCwAAAgE"]
[Fri Feb 06 22:00:32.712860 2026] [:error] [pid 36928:tid 36944] [client 85.203.21.52:62745] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pretty-link/app/wp-cron.php"] [unique_id "aYX0AJs7fyU8D36r-Op4uwAAAcw"]
[Fri Feb 06 22:00:33.061091 2026] [:error] [pid 3477:tid 3494] [client 85.203.21.192:43055] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/webp-express/radio.php"] [unique_id "aYX0AbL0Hdh40C7HYgV-oAAAAM8"]
[Fri Feb 06 22:00:33.409308 2026] [:error] [pid 36928:tid 36941] [client 85.203.21.208:35735] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/webp-express/webp-images-bigger-than-source/providers/"] [unique_id "aYX0AZs7fyU8D36r-Op4vAAAAck"]
[Fri Feb 06 22:00:33.754649 2026] [:error] [pid 36857:tid 36866] [client 85.203.21.172:52781] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "aYX0AZVQwfj7Kp4Dd0H5FQAAAYc"]
[Fri Feb 06 22:00:34.102178 2026] [:error] [pid 36928:tid 36948] [client 85.203.21.54:55735] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/customize/"] [unique_id "aYX0Aps7fyU8D36r-Op4vwAAAdA"]
[Fri Feb 06 22:00:34.449742 2026] [:error] [pid 3380:tid 3389] [client 85.203.21.184:64597] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/theme-compat/"] [unique_id "aYX0AhFAlUvBGSBK2jduAQAAAAU"]
[Fri Feb 06 22:00:34.797889 2026] [:error] [pid 15821:tid 15845] [client 85.203.21.227:30715] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/network/"] [unique_id "aYX0AnARQa67J4c772kWswAAARQ"]
[Fri Feb 06 22:00:40.149285 2026] [:error] [pid 3477:tid 3479] [client 85.203.21.41:41979] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/block-patterns/"] [unique_id "aYX0CLL0Hdh40C7HYgV-owAAAMA"]
[Fri Feb 06 22:00:45.496526 2026] [:error] [pid 36928:tid 36948] [client 85.203.21.161:27461] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/dancing-script/about.php"] [unique_id "aYX0DZs7fyU8D36r-Op4ygAAAdA"]
[Fri Feb 06 22:00:45.842065 2026] [:error] [pid 46432:tid 46439] [client 85.203.21.192:38159] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/webp-express/webp-images/sitemap_index.xml/"] [unique_id "aYX0DQbwJwu_od0kZjMzLQAAAkU"]
[Fri Feb 06 22:00:46.194006 2026] [:error] [pid 37019:tid 37028] [client 85.203.21.190:46673] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/assets/"] [unique_id "aYX0DgkAjqd3bcgYBrtvGQAAAgc"]
[Fri Feb 06 22:00:46.540851 2026] [:error] [pid 3382:tid 3459] [client 85.203.21.238:32057] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/block-patterns/"] [unique_id "aYX0DsIgU1HR0rhYrE9kiwAAAJM"]
[Fri Feb 06 22:01:01.889471 2026] [:error] [pid 15821:tid 15847] [client 85.203.21.228:54029] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYX0HXARQa67J4c772kWwAAAARY"]
[Fri Feb 06 22:01:07.235661 2026] [:error] [pid 36857:tid 36862] [client 85.203.21.188:38731] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/radio.php"] [unique_id "aYX0I5VQwfj7Kp4Dd0H5JAAAAYM"]
[Fri Feb 06 22:01:07.582973 2026] [:error] [pid 36928:tid 36941] [client 85.203.21.206:22013] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aYX0I5s7fyU8D36r-Op44QAAAck"]
[Fri Feb 06 22:01:32.934636 2026] [:error] [pid 36928:tid 36942] [client 85.203.21.207:24659] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/ui/nsuebz/"] [unique_id "aYX0PJs7fyU8D36r-Op49QAAAco"]
[Fri Feb 06 22:01:33.282063 2026] [:error] [pid 3381:tid 3424] [client 85.203.21.41:29037] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/000.php"] [unique_id "aYX0PS81zqRg96ZREgh3BQAAAEs"]
[Fri Feb 06 22:01:38.629809 2026] [:error] [pid 3477:tid 3497] [client 85.203.21.207:23593] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/drive.php"] [unique_id "aYX0QrL0Hdh40C7HYgV-vwAAANI"]
[Fri Feb 06 22:01:43.977248 2026] [:error] [pid 36928:tid 36956] [client 85.203.21.160:41401] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aYX0R5s7fyU8D36r-Op4_gAAAdg"]
[Fri Feb 06 22:01:44.327823 2026] [:error] [pid 3513:tid 3525] [client 85.203.21.160:43635] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/anskrit.php"] [unique_id "aYX0SDSw3-HAlzpqSxzajgAAAUo"]
[Fri Feb 06 22:01:44.675690 2026] [:error] [pid 3380:tid 3396] [client 85.203.21.228:31651] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/backoffice-Stopped/admin/assets/flags/4x3/"] [unique_id "aYX0SBFAlUvBGSBK2jduNAAAAAw"]
[Fri Feb 06 22:01:45.022021 2026] [:error] [pid 36928:tid 36932] [client 85.203.21.167:49915] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/backoffice-Stopped/management/assets/assets/images/"] [unique_id "aYX0SZs7fyU8D36r-Op5AAAAAcA"]
[Fri Feb 06 22:01:45.365983 2026] [:error] [pid 3513:tid 3532] [client 85.203.21.193:20765] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/fonts/"] [unique_id "aYX0STSw3-HAlzpqSxzajwAAAVE"]
[Fri Feb 06 22:01:45.711527 2026] [:error] [pid 3380:tid 3386] [client 85.203.21.206:25883] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/about/"] [unique_id "aYX0SRFAlUvBGSBK2jduNwAAAAI"]
[Fri Feb 06 22:02:16.059683 2026] [:error] [pid 36857:tid 36883] [client 85.203.21.190:45139] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/reception1/includes/tcpdf/examples/config/"] [unique_id "aYX0aJVQwfj7Kp4Dd0H5RwAAAZg"]
[Fri Feb 06 22:02:21.407046 2026] [:error] [pid 3381:tid 3430] [client 85.203.21.184:20499] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/reception/includes/tcpdf/config/"] [unique_id "aYX0bS81zqRg96ZREgh3IgAAAFE"]
[Fri Feb 06 22:02:31.753552 2026] [:error] [pid 3381:tid 3428] [client 85.203.21.41:50495] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/rxzx.php"] [unique_id "aYX0dy81zqRg96ZREgh3LQAAAE8"]
[Fri Feb 06 22:02:32.100947 2026] [:error] [pid 3381:tid 3433] [client 85.203.21.184:28707] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/file-manager.php"] [unique_id "aYX0eC81zqRg96ZREgh3MQAAAFQ"]
[Fri Feb 06 22:02:32.445697 2026] [:error] [pid 15821:tid 15836] [client 85.203.21.52:23435] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "aYX0eHARQa67J4c772kW-AAAAQs"]
[Fri Feb 06 22:02:32.791527 2026] [:error] [pid 3513:tid 3523] [client 85.203.21.206:56567] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/ftde.php"] [unique_id "aYX0eDSw3-HAlzpqSxzaowAAAUg"]
[Fri Feb 06 22:02:38.138663 2026] [:error] [pid 3477:tid 3501] [client 85.203.21.206:46027] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/zczv.php"] [unique_id "aYX0frL0Hdh40C7HYgV-6gAAANY"]
[Fri Feb 06 22:52:38.199785 2026] [:error] [pid 15821:tid 15849] [client 206.189.142.246:59068] [client 206.189.142.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.142.246, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aYYANnARQa67J4c772kc6AAAARg"]
[Fri Feb 06 22:52:39.860394 2026] [:error] [pid 15821:tid 15838] [client 206.189.142.246:59068] [client 206.189.142.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.142.246, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aYYAN3ARQa67J4c772kc6QAAAQ0"]
[Sat Feb 07 03:31:32.206518 2026] [:error] [pid 50671:tid 50691] [client 68.221.137.26:60946] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aYZBlLvqLohWBI_mqBO2TgAAAAs"]
[Sat Feb 07 03:31:32.876834 2026] [:error] [pid 50780:tid 50804] [client 68.221.137.26:57060] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aYZBlOtUmIu2JHM2CrttsAAAANY"]
[Sat Feb 07 03:31:33.548723 2026] [:error] [pid 50671:tid 50688] [client 68.221.137.26:65346] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aYZBlbvqLohWBI_mqBO2TwAAAAg"]
[Sat Feb 07 03:31:34.638778 2026] [:error] [pid 50780:tid 50802] [client 68.221.137.26:62611] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "aYZBlutUmIu2JHM2CrttuQAAANQ"]
[Sat Feb 07 03:31:35.262695 2026] [:error] [pid 50780:tid 50801] [client 68.221.137.26:64387] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aYZBl-tUmIu2JHM2CrttvQAAANM"]
[Sat Feb 07 03:31:35.977390 2026] [:error] [pid 50672:tid 50723] [client 68.221.137.26:57061] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aYZBlw9o0jq1XS8Nv7NTkwAAAE8"]
[Sat Feb 07 03:31:36.611941 2026] [:error] [pid 50780:tid 50799] [client 68.221.137.26:63840] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aYZBmOtUmIu2JHM2CrttxAAAANE"]
[Sat Feb 07 03:31:37.108506 2026] [:error] [pid 50780:tid 50794] [client 68.221.137.26:58858] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aYZBmetUmIu2JHM2CrttyAAAAMw"]
[Sat Feb 07 03:31:37.841265 2026] [:error] [pid 50671:tid 50680] [client 68.221.137.26:59035] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp.php"] [unique_id "aYZBmbvqLohWBI_mqBO2UQAAAAA"]
[Sat Feb 07 03:31:38.425925 2026] [:error] [pid 50672:tid 50715] [client 68.221.137.26:61275] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp.php"] [unique_id "aYZBmg9o0jq1XS8Nv7NTmwAAAEc"]
[Sat Feb 07 03:31:39.110803 2026] [:error] [pid 50672:tid 50720] [client 68.221.137.26:57065] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp.php"] [unique_id "aYZBmw9o0jq1XS8Nv7NTnQAAAEw"]
[Sat Feb 07 03:31:39.645193 2026] [:error] [pid 50673:tid 50738] [client 68.221.137.26:58291] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp.php"] [unique_id "aYZBm2VwLsaZ7aKO2cnOXAAAAIM"]
[Sat Feb 07 03:31:40.274382 2026] [:error] [pid 50673:tid 50744] [client 68.221.137.26:54826] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/555.php"] [unique_id "aYZBnGVwLsaZ7aKO2cnOYQAAAIk"]
[Sat Feb 07 03:31:40.920516 2026] [:error] [pid 50671:tid 50686] [client 68.221.137.26:58253] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/555.php"] [unique_id "aYZBnLvqLohWBI_mqBO2VgAAAAY"]
[Sat Feb 07 03:31:41.504467 2026] [:error] [pid 50673:tid 50737] [client 68.221.137.26:62602] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/555.php"] [unique_id "aYZBnWVwLsaZ7aKO2cnOaAAAAII"]
[Sat Feb 07 03:31:41.987724 2026] [:error] [pid 50780:tid 50791] [client 68.221.137.26:6602] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/555.php"] [unique_id "aYZBnetUmIu2JHM2Crtt0AAAAMk"]
[Sat Feb 07 03:31:42.517218 2026] [:error] [pid 50672:tid 50715] [client 68.221.137.26:54786] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aYZBng9o0jq1XS8Nv7NTowAAAEc"]
[Sat Feb 07 03:31:43.071345 2026] [:error] [pid 50671:tid 50697] [client 68.221.137.26:58266] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aYZBn7vqLohWBI_mqBO2WwAAABE"]
[Sat Feb 07 03:31:43.632176 2026] [:error] [pid 50671:tid 50681] [client 68.221.137.26:65365] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aYZBn7vqLohWBI_mqBO2XQAAAAE"]
[Sat Feb 07 03:31:44.359808 2026] [:error] [pid 50780:tid 50796] [client 68.221.137.26:62267] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aYZBoOtUmIu2JHM2Crtt0gAAAM4"]
[Sat Feb 07 03:31:45.283816 2026] [:error] [pid 50780:tid 50786] [client 68.221.137.26:58135] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aYZBoetUmIu2JHM2Crtt1gAAAMQ"]
[Sat Feb 07 03:31:46.104865 2026] [:error] [pid 50671:tid 50688] [client 68.221.137.26:63824] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aYZBorvqLohWBI_mqBO2YQAAAAg"]
[Sat Feb 07 03:31:46.803380 2026] [:error] [pid 50672:tid 50723] [client 68.221.137.26:64276] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aYZBog9o0jq1XS8Nv7NTsQAAAE8"]
[Sat Feb 07 03:31:47.473016 2026] [:error] [pid 50672:tid 50713] [client 68.221.137.26:55620] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aYZBow9o0jq1XS8Nv7NTtQAAAEU"]
[Sat Feb 07 03:31:48.235675 2026] [:error] [pid 50671:tid 50694] [client 68.221.137.26:63817] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aYZBpLvqLohWBI_mqBO2YwAAAA4"]
[Sat Feb 07 03:31:48.827417 2026] [:error] [pid 50672:tid 50723] [client 68.221.137.26:64298] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aYZBpA9o0jq1XS8Nv7NTvwAAAE8"]
[Sat Feb 07 03:31:49.393883 2026] [:error] [pid 50780:tid 50783] [client 68.221.137.26:62238] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aYZBpetUmIu2JHM2Crtt3wAAAME"]
[Sat Feb 07 03:31:49.989646 2026] [:error] [pid 50673:tid 50747] [client 68.221.137.26:59604] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aYZBpWVwLsaZ7aKO2cnOdQAAAIw"]
[Sat Feb 07 03:31:50.526657 2026] [:error] [pid 50671:tid 50683] [client 68.221.137.26:58285] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aYZBprvqLohWBI_mqBO2ZAAAAAM"]
[Sat Feb 07 03:31:51.826230 2026] [:error] [pid 50780:tid 50789] [client 68.221.137.26:58153] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aYZBp-tUmIu2JHM2Crtt5QAAAMc"]
[Sat Feb 07 03:31:53.097778 2026] [:error] [pid 50673:tid 50744] [client 68.221.137.26:58170] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aYZBqWVwLsaZ7aKO2cnOeQAAAIk"]
[Sat Feb 07 03:31:55.187723 2026] [:error] [pid 50673:tid 50757] [client 68.221.137.26:6618] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aYZBq2VwLsaZ7aKO2cnOfwAAAJY"]
[Sat Feb 07 03:31:57.559987 2026] [:error] [pid 50780:tid 50806] [client 68.221.137.26:55663] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file15.php"] [unique_id "aYZBretUmIu2JHM2Crtt8gAAANg"]
[Sat Feb 07 03:31:59.243727 2026] [:error] [pid 50673:tid 50755] [client 68.221.137.26:62222] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file15.php"] [unique_id "aYZBr2VwLsaZ7aKO2cnOhgAAAJQ"]
[Sat Feb 07 03:32:02.312478 2026] [:error] [pid 50673:tid 50741] [client 68.221.137.26:55635] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file15.php"] [unique_id "aYZBsmVwLsaZ7aKO2cnOjwAAAIY"]
[Sat Feb 07 03:32:03.510034 2026] [:error] [pid 50671:tid 50696] [client 68.221.137.26:7083] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file15.php"] [unique_id "aYZBs7vqLohWBI_mqBO2hwAAABA"]
[Sat Feb 07 03:32:04.874112 2026] [:error] [pid 50673:tid 50742] [client 68.221.137.26:63102] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hk.php"] [unique_id "aYZBtGVwLsaZ7aKO2cnOlwAAAIc"]
[Sat Feb 07 03:32:05.632410 2026] [:error] [pid 50671:tid 50682] [client 68.221.137.26:64619] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hk.php"] [unique_id "aYZBtbvqLohWBI_mqBO2jQAAAAI"]
[Sat Feb 07 03:32:06.296232 2026] [:error] [pid 50672:tid 50715] [client 68.221.137.26:59911] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hk.php"] [unique_id "aYZBtg9o0jq1XS8Nv7NT0gAAAEc"]
[Sat Feb 07 03:32:07.002105 2026] [:error] [pid 50672:tid 50731] [client 68.221.137.26:64252] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hk.php"] [unique_id "aYZBtw9o0jq1XS8Nv7NT1AAAAFc"]
[Sat Feb 07 03:32:08.174672 2026] [:error] [pid 50673:tid 50739] [client 68.221.137.26:63261] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpa.php"] [unique_id "aYZBuGVwLsaZ7aKO2cnOnAAAAIQ"]
[Sat Feb 07 03:32:09.094844 2026] [:error] [pid 50673:tid 50748] [client 68.221.137.26:54809] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpa.php"] [unique_id "aYZBuWVwLsaZ7aKO2cnOnwAAAI0"]
[Sat Feb 07 03:32:10.127986 2026] [:error] [pid 50671:tid 50704] [client 68.221.137.26:64004] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpa.php"] [unique_id "aYZBurvqLohWBI_mqBO2kwAAABg"]
[Sat Feb 07 03:32:10.929465 2026] [:error] [pid 50671:tid 50696] [client 68.221.137.26:61485] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpa.php"] [unique_id "aYZBurvqLohWBI_mqBO2lwAAABA"]
[Sat Feb 07 03:32:11.714899 2026] [:error] [pid 50672:tid 50713] [client 68.221.137.26:64227] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aYZBuw9o0jq1XS8Nv7NT4QAAAEU"]
[Sat Feb 07 03:32:12.975686 2026] [:error] [pid 50672:tid 50728] [client 68.221.137.26:64209] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aYZBvA9o0jq1XS8Nv7NT6AAAAFQ"]
[Sat Feb 07 03:32:14.518426 2026] [:error] [pid 50671:tid 50682] [client 68.221.137.26:59413] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aYZBvrvqLohWBI_mqBO2nAAAAAI"]
[Sat Feb 07 03:32:15.772457 2026] [:error] [pid 50671:tid 50703] [client 68.221.137.26:6844] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aYZBv7vqLohWBI_mqBO2oAAAABc"]
[Sat Feb 07 03:32:16.313321 2026] [:error] [pid 50780:tid 50801] [client 68.221.137.26:6811] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ssss.php"] [unique_id "aYZBwOtUmIu2JHM2CrtuJgAAANM"]
[Sat Feb 07 03:32:16.824025 2026] [:error] [pid 50673:tid 50752] [client 68.221.137.26:64576] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ssss.php"] [unique_id "aYZBwGVwLsaZ7aKO2cnOrgAAAJE"]
[Sat Feb 07 03:32:17.477747 2026] [:error] [pid 50780:tid 50798] [client 68.221.137.26:60165] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ssss.php"] [unique_id "aYZBwetUmIu2JHM2CrtuKgAAANA"]
[Sat Feb 07 03:32:18.129631 2026] [:error] [pid 50780:tid 50789] [client 68.221.137.26:61535] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ssss.php"] [unique_id "aYZBwutUmIu2JHM2CrtuLwAAAMc"]
[Sat Feb 07 03:32:18.900101 2026] [:error] [pid 50673:tid 50754] [client 68.221.137.26:61532] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ut.php"] [unique_id "aYZBwmVwLsaZ7aKO2cnOtAAAAJM"]
[Sat Feb 07 03:32:19.541985 2026] [:error] [pid 50780:tid 50782] [client 68.221.137.26:59734] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ut.php"] [unique_id "aYZBw-tUmIu2JHM2CrtuNQAAAMA"]
[Sat Feb 07 03:32:20.591466 2026] [:error] [pid 50673:tid 50753] [client 68.221.137.26:60173] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ut.php"] [unique_id "aYZBxGVwLsaZ7aKO2cnOvgAAAJI"]
[Sat Feb 07 03:32:21.329786 2026] [:error] [pid 50673:tid 50739] [client 68.221.137.26:62345] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ut.php"] [unique_id "aYZBxWVwLsaZ7aKO2cnOwgAAAIQ"]
[Sat Feb 07 03:32:22.048500 2026] [:error] [pid 50780:tid 50789] [client 68.221.137.26:63294] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inde.php"] [unique_id "aYZBxutUmIu2JHM2CrtuOwAAAMc"]
[Sat Feb 07 03:32:22.794120 2026] [:error] [pid 50671:tid 50684] [client 68.221.137.26:6602] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inde.php"] [unique_id "aYZBxrvqLohWBI_mqBO2qQAAAAQ"]
[Sat Feb 07 03:32:23.304774 2026] [:error] [pid 50671:tid 50682] [client 68.221.137.26:62386] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inde.php"] [unique_id "aYZBx7vqLohWBI_mqBO2qwAAAAI"]
[Sat Feb 07 03:32:24.509328 2026] [:error] [pid 50673:tid 50752] [client 68.221.137.26:64604] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inde.php"] [unique_id "aYZByGVwLsaZ7aKO2cnOxAAAAJE"]
[Sat Feb 07 03:32:25.283514 2026] [:error] [pid 50671:tid 50702] [client 68.221.137.26:6837] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aYZBybvqLohWBI_mqBO2sQAAABY"]
[Sat Feb 07 03:32:26.125054 2026] [:error] [pid 50671:tid 50686] [client 68.221.137.26:7079] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aYZByrvqLohWBI_mqBO2twAAAAY"]
[Sat Feb 07 03:32:27.340065 2026] [:error] [pid 50673:tid 50754] [client 68.221.137.26:7103] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aYZBy2VwLsaZ7aKO2cnOyQAAAJM"]
[Sat Feb 07 03:32:27.964935 2026] [:error] [pid 50673:tid 50749] [client 68.221.137.26:62962] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "aYZBy2VwLsaZ7aKO2cnOzAAAAI4"]
[Sat Feb 07 03:32:28.916792 2026] [:error] [pid 50671:tid 50682] [client 68.221.137.26:60323] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/030.php"] [unique_id "aYZBzLvqLohWBI_mqBO2vQAAAAI"]
[Sat Feb 07 03:33:46.968693 2026] [:error] [pid 50780:tid 50806] [client 68.221.137.26:62004] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aYZCGutUmIu2JHM2CrturAAAANg"]
[Sat Feb 07 03:33:48.957877 2026] [:error] [pid 50671:tid 50698] [client 68.221.137.26:56191] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aYZCHLvqLohWBI_mqBO3MgAAABI"]
[Sat Feb 07 03:33:50.145032 2026] [:error] [pid 50780:tid 50787] [client 68.221.137.26:62421] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aYZCHutUmIu2JHM2CrtuswAAAMU"]
[Sat Feb 07 03:33:52.249628 2026] [:error] [pid 50672:tid 50730] [client 68.221.137.26:61330] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aYZCIA9o0jq1XS8Nv7NUSgAAAFY"]
[Sat Feb 07 03:33:53.528895 2026] [:error] [pid 50672:tid 50720] [client 68.221.137.26:62275] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/build.php"] [unique_id "aYZCIQ9o0jq1XS8Nv7NUTAAAAEw"]
[Sat Feb 07 03:33:54.596922 2026] [:error] [pid 50780:tid 50784] [client 68.221.137.26:61344] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/build.php"] [unique_id "aYZCIutUmIu2JHM2CrtutgAAAMI"]
[Sat Feb 07 03:33:55.558901 2026] [:error] [pid 50780:tid 50782] [client 68.221.137.26:57528] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/build.php"] [unique_id "aYZCI-tUmIu2JHM2CrtuuAAAAMA"]
[Sat Feb 07 03:33:56.429792 2026] [:error] [pid 50672:tid 50731] [client 68.221.137.26:56612] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/build.php"] [unique_id "aYZCJA9o0jq1XS8Nv7NUUwAAAFc"]
[Sat Feb 07 03:33:57.486916 2026] [:error] [pid 50672:tid 50719] [client 68.221.137.26:62749] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aYZCJQ9o0jq1XS8Nv7NUWAAAAEs"]
[Sat Feb 07 03:33:58.021770 2026] [:error] [pid 50780:tid 50785] [client 68.221.137.26:54189] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aYZCJutUmIu2JHM2CrtuvAAAAMM"]
[Sat Feb 07 03:33:58.822197 2026] [:error] [pid 50672:tid 50725] [client 68.221.137.26:56592] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aYZCJg9o0jq1XS8Nv7NUXgAAAFE"]
[Sat Feb 07 03:33:59.513808 2026] [:error] [pid 50780:tid 50802] [client 68.221.137.26:54255] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aYZCJ-tUmIu2JHM2CrtuwQAAANQ"]
[Sat Feb 07 03:34:00.684017 2026] [:error] [pid 50672:tid 50723] [client 68.221.137.26:54201] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/usep.php"] [unique_id "aYZCKA9o0jq1XS8Nv7NUZAAAAE8"]
[Sat Feb 07 03:34:01.421917 2026] [:error] [pid 50672:tid 50708] [client 68.221.137.26:56361] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/usep.php"] [unique_id "aYZCKQ9o0jq1XS8Nv7NUaAAAAEA"]
[Sat Feb 07 03:34:02.021091 2026] [:error] [pid 50780:tid 50782] [client 68.221.137.26:58803] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/usep.php"] [unique_id "aYZCKutUmIu2JHM2CrtuxQAAAMA"]
[Sat Feb 07 03:34:03.151316 2026] [:error] [pid 50780:tid 50804] [client 68.221.137.26:58814] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/usep.php"] [unique_id "aYZCK-tUmIu2JHM2CrtuygAAANY"]
[Sat Feb 07 03:34:03.808869 2026] [:error] [pid 50780:tid 50791] [client 68.221.137.26:60673] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wa.php"] [unique_id "aYZCK-tUmIu2JHM2CrtuzQAAAMk"]
[Sat Feb 07 03:34:04.743270 2026] [:error] [pid 50673:tid 50757] [client 68.221.137.26:54152] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wa.php"] [unique_id "aYZCLGVwLsaZ7aKO2cnPRwAAAJY"]
[Sat Feb 07 03:34:06.928904 2026] [:error] [pid 50671:tid 50703] [client 68.221.137.26:61039] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wa.php"] [unique_id "aYZCLrvqLohWBI_mqBO3RQAAABc"]
[Sat Feb 07 03:34:07.815757 2026] [:error] [pid 50672:tid 50729] [client 68.221.137.26:60089] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wa.php"] [unique_id "aYZCLw9o0jq1XS8Nv7NUcgAAAFU"]
[Sat Feb 07 03:34:08.780217 2026] [:error] [pid 50673:tid 50753] [client 68.221.137.26:61315] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wb.php"] [unique_id "aYZCMGVwLsaZ7aKO2cnPUAAAAJI"]
[Sat Feb 07 03:34:09.603030 2026] [:error] [pid 50780:tid 50800] [client 68.221.137.26:57487] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wb.php"] [unique_id "aYZCMetUmIu2JHM2Crtu1QAAANI"]
[Sat Feb 07 03:34:10.318629 2026] [:error] [pid 50780:tid 50802] [client 68.221.137.26:54207] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wb.php"] [unique_id "aYZCMutUmIu2JHM2Crtu2gAAANQ"]
[Sat Feb 07 03:34:12.083400 2026] [:error] [pid 50671:tid 50686] [client 68.221.137.26:60473] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wb.php"] [unique_id "aYZCNLvqLohWBI_mqBO3TQAAAAY"]
[Sat Feb 07 03:34:13.212985 2026] [:error] [pid 50780:tid 50803] [client 68.221.137.26:54153] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aYZCNetUmIu2JHM2Crtu4AAAANU"]
[Sat Feb 07 03:34:14.028038 2026] [:error] [pid 50671:tid 50701] [client 68.221.137.26:61025] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aYZCNrvqLohWBI_mqBO3UgAAABU"]
[Sat Feb 07 03:34:16.626517 2026] [:error] [pid 50671:tid 50689] [client 68.221.137.26:64750] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aYZCOLvqLohWBI_mqBO3VQAAAAk"]
[Sat Feb 07 03:34:18.838010 2026] [:error] [pid 50780:tid 50802] [client 68.221.137.26:57624] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file1.php"] [unique_id "aYZCOutUmIu2JHM2Crtu7QAAANQ"]
[Sat Feb 07 03:34:19.823403 2026] [:error] [pid 50780:tid 50784] [client 68.221.137.26:63228] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aYZCO-tUmIu2JHM2Crtu7wAAAMI"]
[Sat Feb 07 03:34:20.794448 2026] [:error] [pid 50673:tid 50756] [client 68.221.137.26:59545] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aYZCPGVwLsaZ7aKO2cnPZgAAAJU"]
[Sat Feb 07 03:34:21.991129 2026] [:error] [pid 50672:tid 50724] [client 68.221.137.26:54163] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aYZCPQ9o0jq1XS8Nv7NUeAAAAFA"]
[Sat Feb 07 03:34:22.811273 2026] [:error] [pid 50671:tid 50702] [client 68.221.137.26:63207] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aYZCPrvqLohWBI_mqBO3ZwAAABY"]
[Sat Feb 07 03:34:23.691147 2026] [:error] [pid 50671:tid 50694] [client 68.221.137.26:57640] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aYZCP7vqLohWBI_mqBO3bQAAAA4"]
[Sat Feb 07 03:34:24.479209 2026] [:error] [pid 50672:tid 50731] [client 68.221.137.26:61026] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aYZCQA9o0jq1XS8Nv7NUgwAAAFc"]
[Sat Feb 07 03:34:25.327643 2026] [:error] [pid 50780:tid 50789] [client 68.221.137.26:63173] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aYZCQetUmIu2JHM2CrtvCgAAAMc"]
[Sat Feb 07 03:34:26.071794 2026] [:error] [pid 50780:tid 50793] [client 68.221.137.26:7151] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aYZCQutUmIu2JHM2CrtvEQAAAMs"]
[Sat Feb 07 03:34:27.738373 2026] [:error] [pid 50780:tid 50803] [client 68.221.137.26:54199] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aYZCQ-tUmIu2JHM2CrtvJAAAANU"]
[Sat Feb 07 03:34:28.983106 2026] [:error] [pid 50673:tid 50749] [client 68.221.137.26:7126] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aYZCRGVwLsaZ7aKO2cnPqgAAAI4"]
[Sat Feb 07 03:34:29.966777 2026] [:error] [pid 50780:tid 50793] [client 68.221.137.26:56667] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aYZCRetUmIu2JHM2CrtvJQAAAMs"]
[Sat Feb 07 03:34:30.778083 2026] [:error] [pid 50672:tid 50722] [client 68.221.137.26:56110] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aYZCRg9o0jq1XS8Nv7NUmQAAAE4"]
[Sat Feb 07 03:34:32.738799 2026] [:error] [pid 50672:tid 50716] [client 68.221.137.26:57600] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aYZCSA9o0jq1XS8Nv7NUngAAAEg"]
[Sat Feb 07 03:34:33.750307 2026] [:error] [pid 50780:tid 50802] [client 68.221.137.26:60853] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aYZCSetUmIu2JHM2CrtvKAAAANQ"]
[Sat Feb 07 03:34:35.045273 2026] [:error] [pid 50780:tid 50782] [client 68.221.137.26:64729] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aYZCS-tUmIu2JHM2CrtvKwAAAMA"]
[Sat Feb 07 03:34:36.183415 2026] [:error] [pid 50671:tid 50682] [client 68.221.137.26:56696] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aYZCTLvqLohWBI_mqBO3mAAAAAI"]
[Sat Feb 07 03:34:37.071231 2026] [:error] [pid 50673:tid 50740] [client 68.221.137.26:7114] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aYZCTWVwLsaZ7aKO2cnPtQAAAIU"]
[Sat Feb 07 03:34:37.850854 2026] [:error] [pid 50780:tid 50805] [client 68.221.137.26:7143] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aYZCTetUmIu2JHM2CrtvMAAAANc"]
[Sat Feb 07 03:34:39.147956 2026] [:error] [pid 50672:tid 50728] [client 68.221.137.26:60823] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aYZCTw9o0jq1XS8Nv7NUrgAAAFQ"]
[Sat Feb 07 03:34:40.484041 2026] [:error] [pid 50780:tid 50799] [client 68.221.137.26:56090] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aYZCUOtUmIu2JHM2CrtvOAAAANE"]
[Sat Feb 07 03:34:41.339891 2026] [:error] [pid 50672:tid 50708] [client 68.221.137.26:7122] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aYZCUQ9o0jq1XS8Nv7NUsQAAAEA"]
[Sat Feb 07 03:34:42.154861 2026] [:error] [pid 50780:tid 50797] [client 68.221.137.26:28488] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aYZCUutUmIu2JHM2CrtvPQAAAM8"]
[Sat Feb 07 03:35:58.474590 2026] [:error] [pid 50673:tid 50741] [client 68.221.137.26:7295] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geck.php"] [unique_id "aYZCnmVwLsaZ7aKO2cnQowAAAIY"]
[Sat Feb 07 03:35:59.759309 2026] [:error] [pid 50671:tid 50680] [client 68.221.137.26:61583] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geck.php"] [unique_id "aYZCn7vqLohWBI_mqBO4YgAAAAA"]
[Sat Feb 07 03:36:00.508960 2026] [:error] [pid 50780:tid 50803] [client 68.221.137.26:57918] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geck.php"] [unique_id "aYZCoOtUmIu2JHM2CrtwQAAAANU"]
[Sat Feb 07 03:36:02.311297 2026] [:error] [pid 50780:tid 50791] [client 68.221.137.26:61051] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geck.php"] [unique_id "aYZCoutUmIu2JHM2CrtwSQAAAMk"]
[Sat Feb 07 03:36:03.540862 2026] [:error] [pid 50672:tid 50718] [client 68.221.137.26:62152] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aYZCow9o0jq1XS8Nv7NVbQAAAEo"]
[Sat Feb 07 03:36:04.444853 2026] [:error] [pid 50672:tid 50712] [client 68.221.137.26:61612] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aYZCpA9o0jq1XS8Nv7NVcgAAAEQ"]
[Sat Feb 07 03:36:05.416489 2026] [:error] [pid 50671:tid 50682] [client 68.221.137.26:62261] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aYZCpbvqLohWBI_mqBO4aQAAAAI"]
[Sat Feb 07 03:36:06.084351 2026] [:error] [pid 50673:tid 50735] [client 68.221.137.26:64431] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gm.php"] [unique_id "aYZCpmVwLsaZ7aKO2cnQqQAAAIA"]
[Sat Feb 07 03:36:06.662337 2026] [:error] [pid 50673:tid 50750] [client 68.221.137.26:60037] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aYZCpmVwLsaZ7aKO2cnQrAAAAI8"]
[Sat Feb 07 03:36:07.201607 2026] [:error] [pid 50673:tid 50748] [client 68.221.137.26:61601] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aYZCp2VwLsaZ7aKO2cnQrgAAAI0"]
[Sat Feb 07 03:36:07.736779 2026] [:error] [pid 50671:tid 50686] [client 68.221.137.26:63910] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aYZCp7vqLohWBI_mqBO4cAAAAAY"]
[Sat Feb 07 03:36:08.475059 2026] [:error] [pid 50780:tid 50804] [client 68.221.137.26:62211] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aYZCqOtUmIu2JHM2CrtwUgAAANY"]
[Sat Feb 07 03:36:09.208955 2026] [:error] [pid 50780:tid 50785] [client 68.221.137.26:7288] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cccc.php"] [unique_id "aYZCqetUmIu2JHM2CrtwVQAAAMM"]
[Sat Feb 07 03:36:09.758746 2026] [:error] [pid 50780:tid 50805] [client 68.221.137.26:62598] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cccc.php"] [unique_id "aYZCqetUmIu2JHM2CrtwVgAAANc"]
[Sat Feb 07 03:36:10.276921 2026] [:error] [pid 50673:tid 50737] [client 68.221.137.26:28509] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cccc.php"] [unique_id "aYZCqmVwLsaZ7aKO2cnQtAAAAII"]
[Sat Feb 07 03:36:10.860111 2026] [:error] [pid 50780:tid 50782] [client 68.221.137.26:63913] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cccc.php"] [unique_id "aYZCqutUmIu2JHM2CrtwWgAAAMA"]
[Sat Feb 07 03:36:11.758494 2026] [:error] [pid 50780:tid 50792] [client 68.221.137.26:60076] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "aYZCq-tUmIu2JHM2CrtwXQAAAMo"]
[Sat Feb 07 03:36:12.462898 2026] [:error] [pid 50672:tid 50715] [client 68.221.137.26:63878] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "aYZCrA9o0jq1XS8Nv7NVfgAAAEc"]
[Sat Feb 07 03:36:13.493396 2026] [:error] [pid 50671:tid 50694] [client 68.221.137.26:63883] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "aYZCrbvqLohWBI_mqBO4eAAAAA4"]
[Sat Feb 07 03:36:14.536122 2026] [:error] [pid 50671:tid 50693] [client 68.221.137.26:59639] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "aYZCrrvqLohWBI_mqBO4eQAAAA0"]
[Sat Feb 07 03:36:15.127144 2026] [:error] [pid 50780:tid 50784] [client 68.221.137.26:59637] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aYZCr-tUmIu2JHM2CrtwagAAAMI"]
[Sat Feb 07 03:36:16.235094 2026] [:error] [pid 50673:tid 50756] [client 68.221.137.26:54514] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aYZCsGVwLsaZ7aKO2cnQtwAAAJU"]
[Sat Feb 07 03:36:17.192051 2026] [:error] [pid 50672:tid 50721] [client 68.221.137.26:56880] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aYZCsQ9o0jq1XS8Nv7NViwAAAE0"]
[Sat Feb 07 03:36:18.516423 2026] [:error] [pid 50672:tid 50711] [client 68.221.137.26:28485] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aYZCsg9o0jq1XS8Nv7NVjQAAAEM"]
[Sat Feb 07 03:36:19.546225 2026] [:error] [pid 50780:tid 50787] [client 68.221.137.26:7428] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aYZCs-tUmIu2JHM2CrtwdwAAAMU"]
[Sat Feb 07 03:36:20.238655 2026] [:error] [pid 50673:tid 50758] [client 68.221.137.26:57907] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aYZCtGVwLsaZ7aKO2cnQvAAAAJc"]
[Sat Feb 07 03:36:20.953035 2026] [:error] [pid 50672:tid 50716] [client 68.221.137.26:57928] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aYZCtA9o0jq1XS8Nv7NVkgAAAEg"]
[Sat Feb 07 03:36:22.102930 2026] [:error] [pid 50780:tid 50797] [client 68.221.137.26:56855] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CLA.php"] [unique_id "aYZCtutUmIu2JHM2CrtwfQAAAM8"]
[Sat Feb 07 03:36:23.297338 2026] [:error] [pid 50780:tid 50799] [client 68.221.137.26:61591] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aYZCt-tUmIu2JHM2CrtwgAAAANE"]
[Sat Feb 07 03:36:24.979063 2026] [:error] [pid 50672:tid 50708] [client 68.221.137.26:56013] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aYZCuA9o0jq1XS8Nv7NVmwAAAEA"]
[Sat Feb 07 03:36:26.055380 2026] [:error] [pid 50672:tid 50717] [client 68.221.137.26:61483] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aYZCug9o0jq1XS8Nv7NVngAAAEk"]
[Sat Feb 07 03:36:27.230673 2026] [:error] [pid 50673:tid 50735] [client 68.221.137.26:6693] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aYZCu2VwLsaZ7aKO2cnQywAAAIA"]
[Sat Feb 07 03:36:28.585805 2026] [:error] [pid 50780:tid 50802] [client 68.221.137.26:62799] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ffile.php"] [unique_id "aYZCvOtUmIu2JHM2CrtwigAAANQ"]
[Sat Feb 07 03:36:29.496609 2026] [:error] [pid 50671:tid 50682] [client 68.221.137.26:60065] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ffile.php"] [unique_id "aYZCvbvqLohWBI_mqBO4igAAAAI"]
[Sat Feb 07 03:36:30.542695 2026] [:error] [pid 50673:tid 50758] [client 68.221.137.26:62834] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ffile.php"] [unique_id "aYZCvmVwLsaZ7aKO2cnQ0gAAAJc"]
[Sat Feb 07 03:36:31.546476 2026] [:error] [pid 50780:tid 50795] [client 68.221.137.26:62489] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ffile.php"] [unique_id "aYZCv-tUmIu2JHM2CrtwkAAAAM0"]
[Sat Feb 07 03:36:32.504338 2026] [:error] [pid 50671:tid 50680] [client 68.221.137.26:62504] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aYZCwLvqLohWBI_mqBO4jAAAAAA"]
[Sat Feb 07 03:36:33.197754 2026] [:error] [pid 50780:tid 50799] [client 68.221.137.26:57041] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aYZCwetUmIu2JHM2CrtwlQAAANE"]
[Sat Feb 07 03:36:33.850930 2026] [:error] [pid 50671:tid 50693] [client 68.221.137.26:7241] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aYZCwbvqLohWBI_mqBO4jQAAAA0"]
[Sat Feb 07 03:36:34.822298 2026] [:error] [pid 50671:tid 50702] [client 68.221.137.26:63282] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aYZCwrvqLohWBI_mqBO4kQAAABY"]
[Sat Feb 07 03:36:35.524003 2026] [:error] [pid 50673:tid 50756] [client 68.221.137.26:57068] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYZCw2VwLsaZ7aKO2cnQ2QAAAJU"]
[Sat Feb 07 03:36:36.655532 2026] [:error] [pid 50673:tid 50742] [client 68.221.137.26:63261] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYZCxGVwLsaZ7aKO2cnQ3wAAAIc"]
[Sat Feb 07 03:36:37.657774 2026] [:error] [pid 50672:tid 50722] [client 68.221.137.26:63928] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYZCxQ9o0jq1XS8Nv7NVugAAAE4"]
[Sat Feb 07 03:36:38.594026 2026] [:error] [pid 50780:tid 50790] [client 68.221.137.26:63893] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aYZCxutUmIu2JHM2CrtwpAAAAMg"]
[Sat Feb 07 03:36:39.237001 2026] [:error] [pid 50780:tid 50793] [client 68.221.137.26:7550] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYZCx-tUmIu2JHM2CrtwqAAAAMs"]
[Sat Feb 07 03:36:39.800490 2026] [:error] [pid 50673:tid 50745] [client 68.221.137.26:56843] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYZCx2VwLsaZ7aKO2cnQ5gAAAIo"]
[Sat Feb 07 03:36:40.598819 2026] [:error] [pid 50673:tid 50742] [client 68.221.137.26:63876] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYZCyGVwLsaZ7aKO2cnQ6AAAAIc"]
[Sat Feb 07 03:36:41.202962 2026] [:error] [pid 50673:tid 50743] [client 68.221.137.26:58930] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aYZCyWVwLsaZ7aKO2cnQ7AAAAIg"]
[Sat Feb 07 03:36:41.749301 2026] [:error] [pid 50673:tid 50738] [client 68.221.137.26:56781] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aYZCyWVwLsaZ7aKO2cnQ8AAAAIM"]
[Sat Feb 07 03:36:42.824958 2026] [:error] [pid 50672:tid 50729] [client 68.221.137.26:7543] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aYZCyg9o0jq1XS8Nv7NVwQAAAFU"]
[Sat Feb 07 03:36:44.020978 2026] [:error] [pid 50780:tid 50804] [client 68.221.137.26:62823] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aYZCzOtUmIu2JHM2CrtwrQAAANY"]
[Sat Feb 07 03:36:44.839989 2026] [:error] [pid 50671:tid 50699] [client 68.221.137.26:63927] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfile.php"] [unique_id "aYZCzLvqLohWBI_mqBO4oAAAABM"]
[Sat Feb 07 03:36:45.706456 2026] [:error] [pid 50780:tid 50796] [client 68.221.137.26:63826] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex3.php"] [unique_id "aYZCzetUmIu2JHM2CrtwsQAAAM4"]
[Sat Feb 07 03:36:46.228980 2026] [:error] [pid 50673:tid 50750] [client 68.221.137.26:60581] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex3.php"] [unique_id "aYZCzmVwLsaZ7aKO2cnQ_QAAAI8"]
[Sat Feb 07 03:36:46.859007 2026] [:error] [pid 50780:tid 50795] [client 68.221.137.26:62037] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex3.php"] [unique_id "aYZCzutUmIu2JHM2CrtwtgAAAM0"]
[Sat Feb 07 03:36:47.768680 2026] [:error] [pid 50673:tid 50738] [client 68.221.137.26:63902] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex3.php"] [unique_id "aYZCz2VwLsaZ7aKO2cnRBAAAAIM"]
[Sat Feb 07 03:36:48.398639 2026] [:error] [pid 50780:tid 50792] [client 68.221.137.26:64010] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aYZC0OtUmIu2JHM2CrtwugAAAMo"]
[Sat Feb 07 03:36:49.812640 2026] [:error] [pid 50671:tid 50681] [client 68.221.137.26:56851] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aYZC0bvqLohWBI_mqBO4qwAAAAE"]
[Sat Feb 07 03:36:51.316372 2026] [:error] [pid 50673:tid 50738] [client 68.221.137.26:7257] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aYZC02VwLsaZ7aKO2cnRDAAAAIM"]
[Sat Feb 07 03:36:53.528605 2026] [:error] [pid 50780:tid 50795] [client 68.221.137.26:62057] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/des.php"] [unique_id "aYZC1etUmIu2JHM2CrtwwgAAAM0"]
[Sat Feb 07 03:38:24.643911 2026] [:error] [pid 50671:tid 50695] [client 68.221.137.26:57194] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aYZDMLvqLohWBI_mqBO5ZwAAAA8"]
[Sat Feb 07 03:38:25.803655 2026] [:error] [pid 50673:tid 50747] [client 68.221.137.26:62726] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aYZDMWVwLsaZ7aKO2cnRzAAAAIw"]
[Sat Feb 07 03:38:26.843924 2026] [:error] [pid 50780:tid 50794] [client 68.221.137.26:61975] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aYZDMutUmIu2JHM2CrtxngAAAMw"]
[Sat Feb 07 03:38:28.302163 2026] [:error] [pid 50672:tid 50710] [client 68.221.137.26:56296] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aYZDNA9o0jq1XS8Nv7NWjQAAAEI"]
[Sat Feb 07 03:38:29.170261 2026] [:error] [pid 50780:tid 50802] [client 68.221.137.26:64674] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYZDNetUmIu2JHM2CrtxpQAAANQ"]
[Sat Feb 07 03:38:29.812954 2026] [:error] [pid 50673:tid 50751] [client 68.221.137.26:54426] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYZDNWVwLsaZ7aKO2cnR0AAAAJA"]
[Sat Feb 07 03:38:30.831927 2026] [:error] [pid 50672:tid 50729] [client 68.221.137.26:62769] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYZDNg9o0jq1XS8Nv7NWkwAAAFU"]
[Sat Feb 07 03:38:31.451844 2026] [:error] [pid 50671:tid 50683] [client 68.221.137.26:62755] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYZDN7vqLohWBI_mqBO5bQAAAAM"]
[Sat Feb 07 03:38:32.603903 2026] [:error] [pid 50780:tid 50790] [client 68.221.137.26:57593] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYZDOOtUmIu2JHM2CrtxqQAAAMg"]
[Sat Feb 07 03:38:33.804066 2026] [:error] [pid 50673:tid 50754] [client 68.221.137.26:56274] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYZDOWVwLsaZ7aKO2cnR1wAAAJM"]
[Sat Feb 07 03:38:35.435891 2026] [:error] [pid 50780:tid 50793] [client 68.221.137.26:7208] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYZDO-tUmIu2JHM2CrtxrAAAAMs"]
[Sat Feb 07 03:38:37.894035 2026] [:error] [pid 50673:tid 50737] [client 68.221.137.26:63873] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYZDPWVwLsaZ7aKO2cnR2gAAAII"]
[Sat Feb 07 03:38:38.973448 2026] [:error] [pid 50780:tid 50802] [client 68.221.137.26:7183] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/image.php"] [unique_id "aYZDPutUmIu2JHM2CrtxsgAAANQ"]
[Sat Feb 07 03:38:40.165764 2026] [:error] [pid 55157:tid 55177] [client 68.221.137.26:62870] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/image.php"] [unique_id "aYZDQH36JdtTn2bTEoyUsQAAAQ8"]
[Sat Feb 07 03:38:41.203954 2026] [:error] [pid 50672:tid 50727] [client 68.221.137.26:61925] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/image.php"] [unique_id "aYZDQQ9o0jq1XS8Nv7NWoQAAAFM"]
[Sat Feb 07 03:38:42.020586 2026] [:error] [pid 50673:tid 50748] [client 68.221.137.26:54114] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/image.php"] [unique_id "aYZDQmVwLsaZ7aKO2cnR4AAAAI0"]
[Sat Feb 07 03:38:42.806666 2026] [:error] [pid 50780:tid 50784] [client 68.221.137.26:58698] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYZDQutUmIu2JHM2CrtxtwAAAMI"]
[Sat Feb 07 03:38:44.204671 2026] [:error] [pid 55157:tid 55183] [client 68.221.137.26:60703] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYZDRH36JdtTn2bTEoyUtgAAARU"]
[Sat Feb 07 03:38:45.118137 2026] [:error] [pid 55157:tid 55174] [client 68.221.137.26:62902] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYZDRX36JdtTn2bTEoyUtwAAAQw"]
[Sat Feb 07 03:38:47.057983 2026] [:error] [pid 50673:tid 50753] [client 68.221.137.26:60761] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYZDR2VwLsaZ7aKO2cnR5gAAAJI"]
[Sat Feb 07 03:38:47.912738 2026] [:error] [pid 50671:tid 50696] [client 68.221.137.26:7174] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aYZDR7vqLohWBI_mqBO5fgAAABA"]
[Sat Feb 07 03:38:49.005276 2026] [:error] [pid 50671:tid 50681] [client 68.221.137.26:54108] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aYZDSbvqLohWBI_mqBO5fwAAAAE"]
[Sat Feb 07 03:38:50.379850 2026] [:error] [pid 50780:tid 50798] [client 68.221.137.26:54671] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aYZDSutUmIu2JHM2CrtxuwAAANA"]
[Sat Feb 07 03:38:51.314608 2026] [:error] [pid 50673:tid 50755] [client 68.221.137.26:56893] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aYZDS2VwLsaZ7aKO2cnR7wAAAJQ"]
[Sat Feb 07 03:38:52.094494 2026] [:error] [pid 50673:tid 50750] [client 68.221.137.26:58705] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aYZDTGVwLsaZ7aKO2cnR8QAAAI8"]
[Sat Feb 07 03:38:52.660947 2026] [:error] [pid 50672:tid 50731] [client 68.221.137.26:54693] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aYZDTA9o0jq1XS8Nv7NWtwAAAFc"]
[Sat Feb 07 03:38:53.620607 2026] [:error] [pid 50672:tid 50719] [client 68.221.137.26:7532] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aYZDTQ9o0jq1XS8Nv7NWuQAAAEs"]
[Sat Feb 07 03:38:54.298006 2026] [:error] [pid 50672:tid 50717] [client 68.221.137.26:54081] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aYZDTg9o0jq1XS8Nv7NWuwAAAEk"]
[Sat Feb 07 03:38:55.411221 2026] [:error] [pid 50672:tid 50724] [client 68.221.137.26:60132] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aYZDTw9o0jq1XS8Nv7NWvQAAAFA"]
[Sat Feb 07 03:38:56.051847 2026] [:error] [pid 50672:tid 50715] [client 68.221.137.26:62571] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aYZDUA9o0jq1XS8Nv7NWwQAAAEc"]
[Sat Feb 07 03:38:56.862125 2026] [:error] [pid 50671:tid 50683] [client 68.221.137.26:56834] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aYZDULvqLohWBI_mqBO5jAAAAAM"]
[Sat Feb 07 03:38:57.503601 2026] [:error] [pid 50780:tid 50801] [client 68.221.137.26:60116] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "aYZDUetUmIu2JHM2CrtxwQAAANM"]
[Sat Feb 07 03:38:58.677490 2026] [:error] [pid 50780:tid 50803] [client 68.221.137.26:56954] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "aYZDUutUmIu2JHM2CrtxxAAAANU"]
[Sat Feb 07 03:38:59.355636 2026] [:error] [pid 55157:tid 55168] [client 68.221.137.26:62564] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "aYZDU336JdtTn2bTEoyU1wAAAQY"]
[Sat Feb 07 03:39:00.186469 2026] [:error] [pid 50671:tid 50697] [client 68.221.137.26:57488] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "aYZDVLvqLohWBI_mqBO5kgAAABE"]
[Sat Feb 07 03:39:02.544633 2026] [:error] [pid 55157:tid 55170] [client 68.221.137.26:60100] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "aYZDVn36JdtTn2bTEoyU3gAAAQg"]
[Sat Feb 07 03:39:03.984386 2026] [:error] [pid 50780:tid 50797] [client 68.221.137.26:54222] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpxct.php"] [unique_id "aYZDV-tUmIu2JHM2CrtxzgAAAM8"]
[Sat Feb 07 03:39:04.786869 2026] [:error] [pid 50672:tid 50725] [client 68.221.137.26:56841] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpxct.php"] [unique_id "aYZDWA9o0jq1XS8Nv7NWzQAAAFE"]
[Sat Feb 07 03:39:05.436970 2026] [:error] [pid 50672:tid 50716] [client 68.221.137.26:60514] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpxct.php"] [unique_id "aYZDWQ9o0jq1XS8Nv7NWzgAAAEg"]
[Sat Feb 07 03:39:06.181383 2026] [:error] [pid 50780:tid 50788] [client 68.221.137.26:7516] [client 68.221.137.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mpxct.php"] [unique_id "aYZDWutUmIu2JHM2Crtx0QAAAMY"]
[Sat Feb 07 08:26:57.850926 2026] [autoindex:error] [pid 55157:tid 55186] [client 20.46.120.47:6572] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 08:26:57.978779 2026] [autoindex:error] [pid 55157:tid 55168] [client 20.46.120.47:6572] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 08:27:04.786858 2026] [autoindex:error] [pid 55157:tid 55169] [client 20.46.120.47:6572] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 08:27:08.228381 2026] [autoindex:error] [pid 55157:tid 55164] [client 20.46.120.47:6572] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 08:27:08.358857 2026] [autoindex:error] [pid 55157:tid 55165] [client 20.46.120.47:6572] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 08:27:08.614662 2026] [autoindex:error] [pid 55157:tid 55185] [client 20.46.120.47:6572] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 08:27:15.688277 2026] [:error] [pid 55157:tid 55185] [client 20.46.120.47:6572] [client 20.46.120.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYaG4336JdtTn2bTEowgLwAAARc"]
[Sat Feb 07 08:27:16.163659 2026] [:error] [pid 50780:tid 50788] [client 20.46.120.47:6689] [client 20.46.120.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYaG5OtUmIu2JHM2CrvZOAAAAMY"]
[Sat Feb 07 08:27:16.653608 2026] [:error] [pid 50673:tid 50749] [client 20.46.120.47:3541] [client 20.46.120.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYaG5GVwLsaZ7aKO2cks5wAAAI4"]
[Sat Feb 07 08:27:17.118785 2026] [:error] [pid 50673:tid 50746] [client 20.46.120.47:3530] [client 20.46.120.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aYaG5WVwLsaZ7aKO2cks6AAAAIs"]
[Sat Feb 07 22:08:22.383915 2026] [autoindex:error] [pid 58058:tid 58077] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:22.871027 2026] [autoindex:error] [pid 58058:tid 58073] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:23.387369 2026] [autoindex:error] [pid 58058:tid 58076] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:23.870229 2026] [autoindex:error] [pid 58058:tid 58077] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:32.057630 2026] [autoindex:error] [pid 58058:tid 58075] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:33.035118 2026] [autoindex:error] [pid 58058:tid 58081] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:33.514279 2026] [autoindex:error] [pid 58058:tid 58062] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:34.028626 2026] [autoindex:error] [pid 58058:tid 58084] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:34.524118 2026] [autoindex:error] [pid 58058:tid 58083] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:35.504613 2026] [autoindex:error] [pid 58058:tid 58072] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:08:41.936806 2026] [autoindex:error] [pid 58058:tid 58084] [client 31.171.130.162:38197] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 23:06:51.476300 2026] [autoindex:error] [pid 43182:tid 43194] [client 164.68.99.221:49447] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 08 19:17:15.890781 2026] [autoindex:error] [pid 54609:tid 54616] [client 161.97.90.153:51140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 08 21:33:22.402331 2026] [:error] [pid 58631:tid 58650] [client 136.107.72.51:54254] [client 136.107.72.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.72.51, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYiQon-r9Xz6zi7KqKyVmgAAAdE"]
[Sun Feb 08 21:33:28.480513 2026] [:error] [pid 58631:tid 58644] [client 136.107.72.51:54254] [client 136.107.72.51] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYiQqH-r9Xz6zi7KqKyVqgAAAcs"]
[Sun Feb 08 21:33:30.576477 2026] [:error] [pid 58631:tid 58645] [client 136.107.72.51:54254] [client 136.107.72.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.72.51, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYiQqn-r9Xz6zi7KqKyVrAAAAcw"]
[Mon Feb 09 02:52:46.580583 2026] [proxy_fcgi:error] [pid 43900:tid 43927] [client 103.4.122.14:57186] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Feb 09 02:52:52.200316 2026] [proxy_fcgi:error] [pid 24530:tid 24534] [client 103.4.122.14:57242] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Feb 09 10:39:31.111753 2026] [:error] [pid 47937:tid 47951] [client 74.7.242.22:53374] [client 74.7.242.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.22, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYlI484Fd42MP2DhNrV5DQAAAAU"], referer: https://makifim.com.au/
[Mon Feb 09 10:39:47.277929 2026] [:error] [pid 60589:tid 60600] [client 74.7.242.22:38634] [client 74.7.242.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.22, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYlI8zIJyhPWC0JyMLwGJwAAAck"], referer: https://makifim.com.au/
[Mon Feb 09 11:59:49.017683 2026] [:error] [pid 60679:tid 60769] [client 45.92.1.94:62962] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aYlbtcixhoT1e6Iv6g-JpQAAA1M"]
[Mon Feb 09 11:59:49.635717 2026] [:error] [pid 60589:tid 60607] [client 45.92.1.94:63455] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aYlbtTIJyhPWC0JyMLwYlwAAAdA"]
[Mon Feb 09 11:59:50.250445 2026] [:error] [pid 60589:tid 60591] [client 45.92.1.94:63696] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aYlbtjIJyhPWC0JyMLwYmQAAAcA"]
[Mon Feb 09 11:59:53.617844 2026] [:error] [pid 60679:tid 60734] [client 45.92.1.94:65304] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aYlbucixhoT1e6Iv6g-JqwAAA0Q"]
[Mon Feb 09 22:40:13.113728 2026] [:error] [pid 60619:tid 60648] [client 34.75.43.247:50045] [client 34.75.43.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.43.247, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYnxzXEpg0UoeR8kJ-1jgQAAAkc"]
[Tue Feb 10 02:08:00.572471 2026] [:error] [pid 34044:tid 34072] [client 167.86.83.231:65155] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aYoigHKt48XODNt-cM-HogAAABg"], referer: binance.com
[Tue Feb 10 07:07:41.010797 2026] [:error] [pid 47937:tid 47962] [client 85.203.21.6:35463] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/deepseek_d.php"] [unique_id "aYpovcpqXpC2CvJ3fOO1AQAAANc"]
[Tue Feb 10 07:07:56.262454 2026] [:error] [pid 47831:tid 47873] [client 85.203.21.8:56377] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/pu9.php"] [unique_id "aYpozCdxbZYarWVkiABqhwAAAEA"]
[Tue Feb 10 07:08:11.521237 2026] [:error] [pid 47937:tid 47955] [client 85.203.21.15:44037] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aYpo28pqXpC2CvJ3fOO1KQAAANA"]
[Tue Feb 10 07:08:16.781188 2026] [:error] [pid 47837:tid 47909] [client 85.203.21.69:23355] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aYpo4HFY8KYFPX79Z4kGbAAAAIk"]
[Tue Feb 10 07:08:27.054972 2026] [:error] [pid 30054:tid 30068] [client 85.203.21.36:27105] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file_content_657f93f532f3b/"] [unique_id "aYpo62ecgOOXCu-GgYVRrgAAAQw"]
[Tue Feb 10 07:08:27.315608 2026] [:error] [pid 47831:tid 47886] [client 85.203.21.36:61883] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "aYpo6ydxbZYarWVkiABqvAAAAE0"]
[Tue Feb 10 07:08:47.576189 2026] [:error] [pid 47831:tid 47875] [client 85.203.21.8:39379] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "aYpo_ydxbZYarWVkiABq5gAAAEI"]
[Tue Feb 10 07:08:57.833587 2026] [:error] [pid 30054:tid 30062] [client 85.203.21.12:27967] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aYppCWecgOOXCu-GgYVR7AAAAQY"]
[Tue Feb 10 07:08:58.089692 2026] [:error] [pid 47937:tid 47950] [client 85.203.21.12:52853] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aYppCspqXpC2CvJ3fOO1zwAAAMs"]
[Tue Feb 10 07:09:13.350414 2026] [:error] [pid 47837:tid 47910] [client 85.203.21.53:53755] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aYppGXFY8KYFPX79Z4kHBwAAAIo"]
[Tue Feb 10 07:09:13.612930 2026] [:error] [pid 30054:tid 30065] [client 85.203.21.6:30203] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "aYppGWecgOOXCu-GgYVSFAAAAQk"]
[Tue Feb 10 07:09:13.872035 2026] [:error] [pid 47831:tid 47897] [client 85.203.21.6:59897] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-confiq.php"] [unique_id "aYppGSdxbZYarWVkiABrFAAAAFg"]
[Tue Feb 10 07:09:19.130980 2026] [:error] [pid 30054:tid 30068] [client 85.203.21.62:61911] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aYppH2ecgOOXCu-GgYVSKAAAAQw"]
[Tue Feb 10 07:09:29.390313 2026] [:error] [pid 47837:tid 47907] [client 85.203.21.59:22289] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aYppKXFY8KYFPX79Z4kHJQAAAIc"]
[Tue Feb 10 07:09:34.649661 2026] [:error] [pid 30054:tid 30066] [client 85.203.21.26:20935] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aYppLmecgOOXCu-GgYVSaQAAAQo"]
[Tue Feb 10 07:09:34.909410 2026] [:error] [pid 47831:tid 47891] [client 85.203.21.67:45025] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aYppLidxbZYarWVkiABrQgAAAFI"]
[Tue Feb 10 07:09:40.170919 2026] [:error] [pid 30054:tid 30071] [client 85.203.21.60:62901] [client 85.203.21.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aYppNGecgOOXCu-GgYVSdQAAAQ8"]
[Tue Feb 10 07:09:40.433766 2026] [:error] [pid 47830:tid 47849] [client 85.203.21.37:47065] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aYppNEco45BZs8e301BZKgAAAAM"]
[Tue Feb 10 07:09:45.692872 2026] [:error] [pid 30054:tid 30071] [client 85.203.21.22:24173] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aYppOWecgOOXCu-GgYVSfAAAAQ8"]
[Tue Feb 10 07:10:10.959646 2026] [:error] [pid 47831:tid 47879] [client 85.203.21.60:54099] [client 85.203.21.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aYppUidxbZYarWVkiABrugAAAEY"]
[Tue Feb 10 07:10:51.221742 2026] [:error] [pid 47831:tid 47883] [client 85.203.21.36:29883] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aYppeydxbZYarWVkiABsJAAAAEo"]
[Tue Feb 10 07:11:01.486068 2026] [:error] [pid 30054:tid 30080] [client 85.203.21.53:35853] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aYpphWecgOOXCu-GgYVToAAAARg"]
[Tue Feb 10 07:11:36.762254 2026] [:error] [pid 47937:tid 47961] [client 85.203.21.22:60553] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aYppqMpqXpC2CvJ3fOO3YQAAANY"]
[Tue Feb 10 07:11:47.022630 2026] [:error] [pid 47837:tid 47907] [client 85.203.21.15:44295] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aYpps3FY8KYFPX79Z4kIXQAAAIc"]
[Tue Feb 10 07:11:57.294658 2026] [:error] [pid 47831:tid 47879] [client 85.203.21.12:21825] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aYppvSdxbZYarWVkiABszAAAAEY"]
[Tue Feb 10 07:12:22.554909 2026] [:error] [pid 47837:tid 47922] [client 85.203.21.5:64765] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "aYpp1nFY8KYFPX79Z4kIkgAAAJY"]
[Tue Feb 10 07:12:32.816224 2026] [:error] [pid 47837:tid 47915] [client 85.203.21.67:59867] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "aYpp4HFY8KYFPX79Z4kInwAAAI8"]
[Tue Feb 10 07:12:38.078327 2026] [:error] [pid 47831:tid 47882] [client 85.203.21.12:38837] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aYpp5idxbZYarWVkiABtFgAAAEk"]
[Tue Feb 10 07:12:38.340014 2026] [:error] [pid 47937:tid 47956] [client 85.203.21.12:45395] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aYpp5spqXpC2CvJ3fOO3vAAAANE"]
[Tue Feb 10 07:12:53.599284 2026] [:error] [pid 47830:tid 47851] [client 85.203.21.36:28127] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aYpp9Uco45BZs8e301BanQAAAAU"]
[Tue Feb 10 07:12:53.859644 2026] [:error] [pid 47837:tid 47910] [client 85.203.21.62:41193] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aYpp9XFY8KYFPX79Z4kIrgAAAIo"]
[Tue Feb 10 07:12:54.121504 2026] [:error] [pid 47830:tid 47854] [client 85.203.21.12:34435] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aYpp9kco45BZs8e301BangAAAAg"]
[Tue Feb 10 07:13:04.380461 2026] [:error] [pid 30054:tid 30071] [client 85.203.21.15:31919] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aYpqAGecgOOXCu-GgYVUzwAAAQ8"]
[Tue Feb 10 07:13:19.642319 2026] [:error] [pid 47937:tid 47961] [client 85.203.21.67:43681] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "aYpqD8pqXpC2CvJ3fOO36QAAANY"]
[Tue Feb 10 07:13:49.904994 2026] [:error] [pid 47831:tid 47893] [client 85.203.21.8:27029] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aYpqLSdxbZYarWVkiABtgwAAAFQ"]
[Tue Feb 10 07:14:00.168463 2026] [:error] [pid 47831:tid 47873] [client 85.203.21.8:23747] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "aYpqOCdxbZYarWVkiABtlAAAAEA"]
[Tue Feb 10 07:14:00.432518 2026] [:error] [pid 47837:tid 47923] [client 85.203.21.37:38945] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aYpqOHFY8KYFPX79Z4kJFwAAAJc"]
[Tue Feb 10 07:14:05.692232 2026] [:error] [pid 47837:tid 47912] [client 85.203.21.37:60785] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aYpqPXFY8KYFPX79Z4kJHwAAAIw"]
[Tue Feb 10 07:14:15.965125 2026] [:error] [pid 47937:tid 47952] [client 85.203.21.26:49301] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aYpqR8pqXpC2CvJ3fOO4PgAAAM0"]
[Tue Feb 10 07:14:31.255895 2026] [:error] [pid 30054:tid 30071] [client 85.203.21.37:45293] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "aYpqV2ecgOOXCu-GgYVVZgAAAQ8"]
[Tue Feb 10 07:15:16.518753 2026] [:error] [pid 47831:tid 47888] [client 85.203.21.5:33421] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aYpqhCdxbZYarWVkiABuQgAAAE8"]
[Tue Feb 10 07:15:16.777783 2026] [:error] [pid 30054:tid 30076] [client 85.203.21.22:49477] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aYpqhGecgOOXCu-GgYVWHgAAARQ"]
[Tue Feb 10 07:15:27.048039 2026] [:error] [pid 47937:tid 47952] [client 85.203.21.36:41513] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/network_xo.php"] [unique_id "aYpqj8pqXpC2CvJ3fOO4rgAAAM0"]
[Tue Feb 10 07:16:12.314343 2026] [:error] [pid 47937:tid 47941] [client 85.203.21.8:61751] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aYpqvMpqXpC2CvJ3fOO43AAAAMI"]
[Tue Feb 10 07:16:12.577613 2026] [:error] [pid 47830:tid 47867] [client 85.203.21.67:30687] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aYpqvEco45BZs8e301Bb7AAAABU"]
[Tue Feb 10 07:16:12.838402 2026] [:error] [pid 47831:tid 47893] [client 85.203.21.15:31555] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "aYpqvCdxbZYarWVkiABujQAAAFQ"]
[Tue Feb 10 07:16:18.099328 2026] [:error] [pid 47937:tid 47939] [client 85.203.21.8:21391] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aYpqwspqXpC2CvJ3fOO45wAAAMA"]
[Tue Feb 10 07:16:33.361965 2026] [:error] [pid 47837:tid 47923] [client 85.203.21.26:56847] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aYpq0XFY8KYFPX79Z4kKFwAAAJc"]
[Tue Feb 10 07:17:13.625703 2026] [:error] [pid 30054:tid 30067] [client 85.203.21.67:22687] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aYpq-WecgOOXCu-GgYVXkwAAAQs"]
[Tue Feb 10 07:17:23.879470 2026] [:error] [pid 30054:tid 30060] [client 85.203.21.8:50753] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aYprA2ecgOOXCu-GgYVXnQAAAQQ"]
[Tue Feb 10 07:17:29.138495 2026] [:error] [pid 30054:tid 30079] [client 85.203.21.53:46857] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aYprCWecgOOXCu-GgYVXwQAAARc"]
[Tue Feb 10 07:17:54.402225 2026] [:error] [pid 47937:tid 47940] [client 85.203.21.43:55037] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aYprIspqXpC2CvJ3fOO5twAAAME"]
[Tue Feb 10 07:17:54.660717 2026] [:error] [pid 47830:tid 47863] [client 85.203.21.8:51969] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aYprIkco45BZs8e301BcvAAAABE"]
[Tue Feb 10 07:17:59.923458 2026] [:error] [pid 47831:tid 47888] [client 85.203.21.6:37631] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aYprJydxbZYarWVkiABwAAAAAE8"]
[Tue Feb 10 07:18:10.186661 2026] [:error] [pid 47831:tid 47893] [client 85.203.21.59:25719] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aYprMidxbZYarWVkiABwDQAAAFQ"]
[Tue Feb 10 07:18:15.448330 2026] [:error] [pid 47837:tid 47913] [client 85.203.21.47:54593] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/"] [unique_id "aYprN3FY8KYFPX79Z4kK1gAAAI0"]
[Tue Feb 10 07:18:25.713882 2026] [:error] [pid 47937:tid 47961] [client 85.203.21.43:25721] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aYprQcpqXpC2CvJ3fOO55AAAANY"]
[Tue Feb 10 07:18:25.972485 2026] [:error] [pid 47831:tid 47895] [client 85.203.21.62:55285] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aYprQSdxbZYarWVkiABwMAAAAFY"]
[Tue Feb 10 07:18:26.231388 2026] [:error] [pid 47830:tid 47867] [client 85.203.21.60:32829] [client 85.203.21.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aYprQkco45BZs8e301Bc2QAAABU"]
[Tue Feb 10 07:19:11.495614 2026] [:error] [pid 30054:tid 30068] [client 85.203.21.36:59721] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aYprb2ecgOOXCu-GgYVYwQAAAQw"]
[Tue Feb 10 07:19:21.755622 2026] [:error] [pid 47937:tid 47961] [client 85.203.21.62:26497] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/"] [unique_id "aYprecpqXpC2CvJ3fOO6TwAAANY"]
[Tue Feb 10 07:19:27.013222 2026] [:error] [pid 30054:tid 30070] [client 85.203.21.60:34763] [client 85.203.21.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aYprf2ecgOOXCu-GgYVY1wAAAQ4"]
[Tue Feb 10 07:20:27.281945 2026] [:error] [pid 47837:tid 47912] [client 85.203.21.37:44653] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYpru3FY8KYFPX79Z4kLdwAAAIw"]
[Tue Feb 10 07:20:37.542421 2026] [:error] [pid 47937:tid 47952] [client 85.203.21.8:51703] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aYprxcpqXpC2CvJ3fOO65gAAAM0"]
[Tue Feb 10 07:20:47.806825 2026] [:error] [pid 47937:tid 47941] [client 85.203.21.36:39953] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYprz8pqXpC2CvJ3fOO68gAAAMI"]
[Tue Feb 10 07:21:03.070475 2026] [:error] [pid 47831:tid 47892] [client 85.203.21.12:24847] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aYpr3ydxbZYarWVkiABxRwAAAFM"]
[Tue Feb 10 07:21:08.380440 2026] [:error] [pid 47837:tid 47904] [client 85.203.21.36:30117] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aYpr5HFY8KYFPX79Z4kLrgAAAIQ"]
[Tue Feb 10 07:21:08.642688 2026] [:error] [pid 47831:tid 47883] [client 85.203.21.37:44541] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aYpr5CdxbZYarWVkiABxUwAAAEo"]
[Tue Feb 10 07:21:08.900629 2026] [:error] [pid 47937:tid 47940] [client 85.203.21.22:46513] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aYpr5MpqXpC2CvJ3fOO7KQAAAME"]
[Tue Feb 10 07:21:09.160322 2026] [:error] [pid 47831:tid 47877] [client 85.203.21.5:33793] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aYpr5SdxbZYarWVkiABxWAAAAEQ"]
[Tue Feb 10 07:21:19.418589 2026] [:error] [pid 47937:tid 47948] [client 85.203.21.59:59431] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aYpr78pqXpC2CvJ3fOO7UQAAAMk"]
[Tue Feb 10 07:21:19.675822 2026] [:error] [pid 47837:tid 47923] [client 85.203.21.22:20125] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aYpr73FY8KYFPX79Z4kLxgAAAJc"]
[Tue Feb 10 07:21:24.933353 2026] [:error] [pid 47831:tid 47896] [client 85.203.21.6:36469] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "aYpr9CdxbZYarWVkiABxfgAAAFc"]
[Tue Feb 10 07:21:30.195017 2026] [:error] [pid 47937:tid 47942] [client 85.203.21.6:32899] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aYpr-spqXpC2CvJ3fOO7ZwAAAMM"]
[Tue Feb 10 07:21:55.463013 2026] [:error] [pid 47837:tid 47901] [client 85.203.21.36:27529] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/datate.php"] [unique_id "aYpsE3FY8KYFPX79Z4kMAgAAAIE"]
[Tue Feb 10 07:22:05.722648 2026] [:error] [pid 47937:tid 47948] [client 85.203.21.43:52203] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aYpsHcpqXpC2CvJ3fOO7qwAAAMk"]
[Tue Feb 10 07:22:15.980060 2026] [:error] [pid 47831:tid 47873] [client 85.203.21.22:21257] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aYpsJydxbZYarWVkiAByLgAAAEA"]
[Tue Feb 10 07:22:16.239273 2026] [:error] [pid 30054:tid 30076] [client 85.203.21.47:41967] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aYpsKGecgOOXCu-GgYVa_AAAARQ"]
[Tue Feb 10 07:22:16.518308 2026] [:error] [pid 47831:tid 47885] [client 85.203.21.15:49221] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYpsKCdxbZYarWVkiAByLwAAAEw"]
[Tue Feb 10 07:22:21.782396 2026] [:error] [pid 47831:tid 47877] [client 85.203.21.62:41201] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/"] [unique_id "aYpsLSdxbZYarWVkiAByNgAAAEQ"]
[Tue Feb 10 07:22:27.039045 2026] [:error] [pid 47937:tid 47960] [client 85.203.21.5:21297] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aYpsM8pqXpC2CvJ3fOO7wQAAANU"]
[Tue Feb 10 07:22:27.296251 2026] [:error] [pid 47831:tid 47889] [client 85.203.21.67:59569] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aYpsMydxbZYarWVkiAByQQAAAFA"]
[Tue Feb 10 07:22:27.554113 2026] [:error] [pid 47837:tid 47902] [client 85.203.21.69:48779] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aYpsM3FY8KYFPX79Z4kMNwAAAII"]
[Tue Feb 10 07:22:32.811149 2026] [:error] [pid 47831:tid 47893] [client 85.203.21.62:46485] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aYpsOCdxbZYarWVkiAByRgAAAFQ"]
[Tue Feb 10 07:22:38.069347 2026] [:error] [pid 47831:tid 47884] [client 85.203.21.69:51269] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aYpsPidxbZYarWVkiAByTQAAAEs"]
[Tue Feb 10 07:22:43.329919 2026] [:error] [pid 47831:tid 47887] [client 85.203.21.26:40459] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aYpsQydxbZYarWVkiAByVQAAAE4"]
[Tue Feb 10 07:22:58.596252 2026] [:error] [pid 47937:tid 47961] [client 85.203.21.8:34139] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index.html"] [unique_id "aYpsUspqXpC2CvJ3fOO7_QAAANY"]
[Tue Feb 10 07:23:08.856995 2026] [:error] [pid 47837:tid 47906] [client 85.203.21.62:53703] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "aYpsXHFY8KYFPX79Z4kMcAAAAIY"]
[Tue Feb 10 07:23:09.117028 2026] [:error] [pid 47830:tid 47848] [client 85.203.21.26:45487] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/hplfuns.php"] [unique_id "aYpsXUco45BZs8e301BelAAAAAI"]
[Tue Feb 10 07:23:14.378995 2026] [:error] [pid 47937:tid 47947] [client 85.203.21.5:36101] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "aYpsYspqXpC2CvJ3fOO8FQAAAMg"]
[Tue Feb 10 07:23:19.628186 2026] [:error] [pid 47837:tid 47912] [client 85.203.21.22:52601] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/14bcjywsujyrjjwqegeCdefault.php"] [unique_id "aYpsZ3FY8KYFPX79Z4kMgAAAAIw"]
[Tue Feb 10 07:23:34.888715 2026] [:error] [pid 47837:tid 47900] [client 85.203.21.12:37785] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYpsdnFY8KYFPX79Z4kMoQAAAIA"]
[Tue Feb 10 07:23:45.148609 2026] [:error] [pid 47831:tid 47888] [client 85.203.21.5:22259] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/php.php"] [unique_id "aYpsgSdxbZYarWVkiAByrQAAAE8"]
[Tue Feb 10 07:23:50.410364 2026] [:error] [pid 47937:tid 47939] [client 85.203.21.47:34173] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aYpshspqXpC2CvJ3fOO8QwAAAMA"]
[Tue Feb 10 07:23:55.672640 2026] [:error] [pid 47937:tid 47939] [client 85.203.21.36:48787] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aYpsi8pqXpC2CvJ3fOO8TgAAAMA"]
[Tue Feb 10 07:23:55.932232 2026] [:error] [pid 47837:tid 47907] [client 85.203.21.8:33953] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "aYpsi3FY8KYFPX79Z4kMvwAAAIc"]
[Tue Feb 10 07:24:01.193998 2026] [:error] [pid 47837:tid 47902] [client 85.203.21.47:54283] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aYpskXFY8KYFPX79Z4kMwwAAAII"]
[Tue Feb 10 07:24:26.456172 2026] [:error] [pid 47831:tid 47873] [client 85.203.21.15:34561] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue"] [unique_id "aYpsqidxbZYarWVkiABy1QAAAEA"]
[Tue Feb 10 07:24:36.717090 2026] [:error] [pid 47830:tid 47848] [client 85.203.21.6:52761] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aYpstEco45BZs8e301BfUgAAAAI"]
[Tue Feb 10 07:24:36.975117 2026] [:error] [pid 47837:tid 47909] [client 85.203.21.62:40629] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aYpstHFY8KYFPX79Z4kNAQAAAIk"]
[Tue Feb 10 07:24:42.235636 2026] [:error] [pid 47831:tid 47874] [client 85.203.21.69:50757] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aYpsuidxbZYarWVkiABzKAAAAEE"]
[Tue Feb 10 07:25:12.500876 2026] [:error] [pid 30054:tid 30078] [client 85.203.21.36:20087] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/g3brivy5d2ox733srcpl/4z5enevnessqqjdcxuCdefault.php"] [unique_id "aYps2GecgOOXCu-GgYVcbAAAARY"]
[Tue Feb 10 07:25:12.765614 2026] [:error] [pid 30054:tid 30064] [client 85.203.21.43:61279] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYps2GecgOOXCu-GgYVcbQAAAQg"]
[Tue Feb 10 07:25:28.027741 2026] [:error] [pid 47831:tid 47890] [client 85.203.21.36:37417] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aYps6CdxbZYarWVkiABzsgAAAFE"]
[Tue Feb 10 07:25:33.290310 2026] [:error] [pid 47830:tid 47854] [client 85.203.21.59:48133] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aYps7Uco45BZs8e301BfuwAAAAg"]
[Tue Feb 10 07:25:43.554038 2026] [:error] [pid 47937:tid 47951] [client 85.203.21.22:50003] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/pwhb0t2cy9txbiga4ckhfrdsCakc.php"] [unique_id "aYps98pqXpC2CvJ3fOO9IgAAAMw"]
[Tue Feb 10 07:25:48.812387 2026] [:error] [pid 30054:tid 30057] [client 85.203.21.12:30629] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "aYps_GecgOOXCu-GgYVc9gAAAQE"]
[Tue Feb 10 07:25:49.072867 2026] [:error] [pid 47830:tid 47866] [client 85.203.21.8:40315] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aYps_Uco45BZs8e301Bf1QAAABQ"]
[Tue Feb 10 07:25:59.333758 2026] [:error] [pid 47831:tid 47874] [client 85.203.21.62:36459] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aYptBydxbZYarWVkiAB0RQAAAEE"]
[Tue Feb 10 07:26:04.596734 2026] [:error] [pid 47937:tid 47942] [client 85.203.21.53:20409] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aYptDMpqXpC2CvJ3fOO9dQAAAMM"]
[Tue Feb 10 07:26:04.858520 2026] [:error] [pid 30054:tid 30069] [client 85.203.21.69:60515] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css/admin.php"] [unique_id "aYptDGecgOOXCu-GgYVdJgAAAQ0"]
[Tue Feb 10 07:26:30.112947 2026] [:error] [pid 47837:tid 47900] [client 85.203.21.53:37663] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings"] [unique_id "aYptJnFY8KYFPX79Z4kN1wAAAIA"]
[Tue Feb 10 07:26:30.374970 2026] [:error] [pid 47837:tid 47914] [client 85.203.21.15:38441] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aYptJnFY8KYFPX79Z4kN2QAAAI4"]
[Tue Feb 10 07:26:30.635199 2026] [:error] [pid 47830:tid 47850] [client 85.203.21.6:20931] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYptJkco45BZs8e301BgbwAAAAQ"]
[Tue Feb 10 07:26:30.890052 2026] [:error] [pid 30054:tid 30079] [client 85.203.21.69:40459] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aYptJmecgOOXCu-GgYVdVgAAARc"]
[Tue Feb 10 07:26:36.149331 2026] [:error] [pid 47837:tid 47913] [client 85.203.21.5:27905] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "aYptLHFY8KYFPX79Z4kN6AAAAI0"]
[Tue Feb 10 07:27:01.419603 2026] [:error] [pid 47937:tid 47953] [client 85.203.21.22:40329] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "aYptRcpqXpC2CvJ3fOO-MQAAAM4"]
[Tue Feb 10 07:27:06.681588 2026] [:error] [pid 47837:tid 47910] [client 85.203.21.26:53779] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/"] [unique_id "aYptSnFY8KYFPX79Z4kOGQAAAIo"]
[Tue Feb 10 07:27:36.953392 2026] [:error] [pid 30054:tid 30070] [client 85.203.21.22:63389] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYptaGecgOOXCu-GgYVeFAAAAQ4"]
[Tue Feb 10 07:27:47.223168 2026] [:error] [pid 47937:tid 47957] [client 85.203.21.47:25335] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/rk2.php"] [unique_id "aYptc8pqXpC2CvJ3fOO-iwAAANI"]
[Tue Feb 10 07:27:57.481594 2026] [:error] [pid 30054:tid 30079] [client 85.203.21.26:47621] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aYptfWecgOOXCu-GgYVeXwAAARc"]
[Tue Feb 10 07:28:17.740693 2026] [:error] [pid 47830:tid 47850] [client 85.203.21.62:26247] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/private/"] [unique_id "aYptkUco45BZs8e301BhkAAAAAQ"]
[Tue Feb 10 07:28:17.999510 2026] [:error] [pid 47830:tid 47847] [client 85.203.21.43:54845] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aYptkUco45BZs8e301BhkgAAAAE"]
[Tue Feb 10 07:28:23.260241 2026] [:error] [pid 30054:tid 30062] [client 85.203.21.5:37857] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYptl2ecgOOXCu-GgYVekgAAAQY"]
[Tue Feb 10 07:28:28.519946 2026] [:error] [pid 47831:tid 47881] [client 85.203.21.62:55443] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/1m5mvlb6d1iq7yog17r4/14bcjywsujyrjjwqegeCdefault.php"] [unique_id "aYptnCdxbZYarWVkiAB12gAAAEg"]
[Tue Feb 10 07:28:28.778020 2026] [:error] [pid 47831:tid 47886] [client 85.203.21.59:61575] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content"] [unique_id "aYptnCdxbZYarWVkiAB12wAAAE0"]
[Tue Feb 10 07:28:39.035976 2026] [:error] [pid 30054:tid 30076] [client 85.203.21.47:34059] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/api.php"] [unique_id "aYptp2ecgOOXCu-GgYVe7AAAARQ"]
[Tue Feb 10 07:28:39.294677 2026] [:error] [pid 47830:tid 47864] [client 85.203.21.59:28869] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-2019.php"] [unique_id "aYptp0co45BZs8e301BhuAAAABI"]
[Tue Feb 10 07:28:39.553135 2026] [:error] [pid 47937:tid 47956] [client 85.203.21.69:60987] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "aYptp8pqXpC2CvJ3fOO-6AAAANE"]
[Tue Feb 10 07:28:44.810815 2026] [:error] [pid 47831:tid 47876] [client 85.203.21.5:31817] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ma.php"] [unique_id "aYptrCdxbZYarWVkiAB17QAAAEM"]
[Tue Feb 10 07:28:45.069695 2026] [:error] [pid 47830:tid 47849] [client 85.203.21.12:40949] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors"] [unique_id "aYptrUco45BZs8e301BhwwAAAAM"]
[Tue Feb 10 07:29:45.342414 2026] [:error] [pid 47831:tid 47894] [client 85.203.21.69:56083] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "aYpt6SdxbZYarWVkiAB2PQAAAFU"]
[Tue Feb 10 07:29:45.606720 2026] [:error] [pid 47837:tid 47912] [client 85.203.21.12:20425] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-user.php"] [unique_id "aYpt6XFY8KYFPX79Z4kPEAAAAIw"]
[Tue Feb 10 07:29:55.867821 2026] [:error] [pid 47830:tid 47849] [client 85.203.21.47:62119] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/file-manager.php"] [unique_id "aYpt80co45BZs8e301BiDgAAAAM"]
[Tue Feb 10 07:29:56.128642 2026] [:error] [pid 30054:tid 30068] [client 85.203.21.53:47513] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-signin.php"] [unique_id "aYpt9GecgOOXCu-GgYVfaAAAAQw"]
[Tue Feb 10 07:30:01.393420 2026] [:error] [pid 30054:tid 30080] [client 85.203.21.62:49587] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/sx.php"] [unique_id "aYpt-WecgOOXCu-GgYVfbwAAARg"]
[Tue Feb 10 07:30:06.655528 2026] [:error] [pid 30054:tid 30061] [client 85.203.21.47:23965] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/gettest.php"] [unique_id "aYpt_mecgOOXCu-GgYVfcwAAAQU"]
[Tue Feb 10 07:30:11.915616 2026] [:error] [pid 47937:tid 47945] [client 85.203.21.59:39335] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/gfhfv.php"] [unique_id "aYpuA8pqXpC2CvJ3fOO_TwAAAMY"]
[Tue Feb 10 07:30:12.176705 2026] [:error] [pid 47831:tid 47895] [client 85.203.21.12:40867] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/config.php"] [unique_id "aYpuBCdxbZYarWVkiAB2YgAAAFY"]
[Tue Feb 10 07:30:22.438967 2026] [:error] [pid 30054:tid 30060] [client 85.203.21.6:59215] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "aYpuDmecgOOXCu-GgYVfkQAAAQQ"]
[Tue Feb 10 07:30:22.698093 2026] [:error] [pid 30054:tid 30065] [client 85.203.21.22:63633] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/000.php"] [unique_id "aYpuDmecgOOXCu-GgYVfkgAAAQk"]
[Tue Feb 10 07:30:22.956735 2026] [:error] [pid 47937:tid 47947] [client 85.203.21.60:23311] [client 85.203.21.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/k.php"] [unique_id "aYpuDspqXpC2CvJ3fOO_XwAAAMg"]
[Tue Feb 10 07:30:33.217116 2026] [:error] [pid 30054:tid 30076] [client 85.203.21.62:61607] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aYpuGWecgOOXCu-GgYVfpgAAARQ"]
[Tue Feb 10 07:30:53.483674 2026] [:error] [pid 47830:tid 47859] [client 85.203.21.67:48889] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/revslider/templates/rockable-lineup-2/index.php"] [unique_id "aYpuLUco45BZs8e301BikAAAAA0"]
[Tue Feb 10 07:30:53.742513 2026] [:error] [pid 47830:tid 47869] [client 85.203.21.22:60255] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wcdp-uploads/temp/xxc/stuff/wp-class.php"] [unique_id "aYpuLUco45BZs8e301BikQAAABc"]
[Tue Feb 10 07:31:04.005056 2026] [:error] [pid 30054:tid 30068] [client 85.203.21.59:51947] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wpvivid_uploads/Isolate/error/index.php"] [unique_id "aYpuOGecgOOXCu-GgYVf-wAAAQw"]
[Tue Feb 10 07:31:04.265411 2026] [:error] [pid 47837:tid 47902] [client 85.203.21.22:61659] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updraft/emptydir/index.php"] [unique_id "aYpuOHFY8KYFPX79Z4kPiwAAAII"]
[Tue Feb 10 07:31:09.527047 2026] [:error] [pid 47830:tid 47857] [client 85.203.21.69:53289] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/file.php"] [unique_id "aYpuPUco45BZs8e301BjGQAAAAs"]
[Tue Feb 10 07:31:09.789355 2026] [:error] [pid 47831:tid 47890] [client 85.203.21.22:40735] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aYpuPSdxbZYarWVkiAB2uwAAAFE"]
[Tue Feb 10 07:31:15.048653 2026] [:error] [pid 47837:tid 47916] [client 85.203.21.15:52391] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/views/cmd.php"] [unique_id "aYpuQ3FY8KYFPX79Z4kPngAAAJA"]
[Tue Feb 10 07:31:40.311822 2026] [:error] [pid 47937:tid 47957] [client 85.203.21.6:47891] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/tilnzqc/index.php"] [unique_id "aYpuXMpqXpC2CvJ3fOO_8gAAANI"]
[Tue Feb 10 07:31:50.570643 2026] [:error] [pid 47937:tid 47963] [client 85.203.21.5:57843] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/ftde.php"] [unique_id "aYpuZspqXpC2CvJ3fOPACQAAANg"]
[Tue Feb 10 07:31:55.829628 2026] [:error] [pid 47837:tid 47900] [client 85.203.21.67:60735] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aYpua3FY8KYFPX79Z4kPwAAAAIA"]
[Tue Feb 10 07:32:21.101501 2026] [:error] [pid 47837:tid 47900] [client 85.203.21.60:51979] [client 85.203.21.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aYpuhXFY8KYFPX79Z4kP2wAAAIA"]
[Tue Feb 10 07:32:36.365049 2026] [:error] [pid 47830:tid 47849] [client 85.203.21.69:41235] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "aYpulEco45BZs8e301BjggAAAAM"]
[Tue Feb 10 07:32:36.625069 2026] [:error] [pid 47831:tid 47889] [client 85.203.21.6:53415] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/drive.php"] [unique_id "aYpulCdxbZYarWVkiAB3jgAAAFA"]
[Tue Feb 10 07:32:36.884958 2026] [:error] [pid 47830:tid 47862] [client 85.203.21.47:36227] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aYpulEco45BZs8e301BjhAAAABA"]
[Tue Feb 10 07:32:37.143951 2026] [:error] [pid 47831:tid 47894] [client 85.203.21.59:22577] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/image/chosen.php"] [unique_id "aYpulSdxbZYarWVkiAB3kAAAAFU"]
[Tue Feb 10 07:32:47.403972 2026] [:error] [pid 47837:tid 47920] [client 85.203.21.62:40217] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-content/plugins/file52.php"] [unique_id "aYpun3FY8KYFPX79Z4kQIQAAAJQ"]
[Tue Feb 10 07:32:52.662197 2026] [:error] [pid 47831:tid 47890] [client 85.203.21.43:21195] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-content/mu-plugins/ID3/index.php"] [unique_id "aYpupCdxbZYarWVkiAB3pgAAAFE"]
[Tue Feb 10 07:33:07.925442 2026] [:error] [pid 47937:tid 47961] [client 85.203.21.26:29031] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/bk/wp-includes/PHPMailer/widgets/index.php"] [unique_id "aYpus8pqXpC2CvJ3fOPAhQAAANY"]
[Tue Feb 10 07:33:13.182738 2026] [:error] [pid 47830:tid 47866] [client 85.203.21.6:52643] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-admin/user/colors/index.php"] [unique_id "aYpuuUco45BZs8e301BjtAAAABQ"]
[Tue Feb 10 07:33:13.443086 2026] [:error] [pid 47937:tid 47956] [client 85.203.21.5:34245] [client 85.203.21.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/s/wp-content/litespeed/debug/maint/index.php"] [unique_id "aYpuucpqXpC2CvJ3fOPAjwAAANE"]
[Tue Feb 10 07:33:18.703529 2026] [:error] [pid 30054:tid 30080] [client 85.203.21.60:41873] [client 85.203.21.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/comments/feed/index.php"] [unique_id "aYpuvmecgOOXCu-GgYViGAAAARg"]
[Tue Feb 10 07:33:28.964569 2026] [:error] [pid 47830:tid 47861] [client 85.203.21.59:39765] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/webp-express/radio.php"] [unique_id "aYpuyEco45BZs8e301BjzQAAAA8"]
[Tue Feb 10 07:33:34.226581 2026] [:error] [pid 30054:tid 30059] [client 85.203.21.26:40493] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/settings/gfhfv.php"] [unique_id "aYpuzmecgOOXCu-GgYVicwAAAQM"]
[Tue Feb 10 07:33:34.487954 2026] [:error] [pid 30054:tid 30069] [client 85.203.21.67:47423] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/drive.php"] [unique_id "aYpuzmecgOOXCu-GgYVidwAAAQ0"]
[Tue Feb 10 07:33:39.746735 2026] [:error] [pid 47830:tid 47867] [client 85.203.21.67:58353] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/v3.php"] [unique_id "aYpu00co45BZs8e301BkAQAAABU"]
[Tue Feb 10 07:33:45.007410 2026] [:error] [pid 47831:tid 47897] [client 85.203.21.26:61665] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aYpu2SdxbZYarWVkiAB4SgAAAFg"]
[Tue Feb 10 08:06:24.546105 2026] [:error] [pid 47937:tid 47959] [client 144.91.126.77:51944] [client 144.91.126.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.126.77, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aYp2gMpqXpC2CvJ3fOPQUwAAANQ"]
[Tue Feb 10 12:06:26.735904 2026] [autoindex:error] [pid 47830:tid 47869] [client 62.171.170.202:60179] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 10 20:27:53.672625 2026] [:error] [pid 59544:tid 59557] [client 62.72.41.205:59310] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYskSaZySR9mFY4Bain3ngAAAYk"]
[Tue Feb 10 20:27:54.063942 2026] [:error] [pid 59407:tid 59422] [client 62.72.41.205:51550] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aYskSmLlhBXE3qmX-JkjnQAAAU0"]
[Tue Feb 10 20:27:54.429347 2026] [:error] [pid 47830:tid 47864] [client 62.72.41.205:57611] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/media/system/js/core.js"] [unique_id "aYskSkco45BZs8e301B_lAAAABI"]
[Wed Feb 11 06:20:43.190826 2026] [:error] [pid 22570:tid 22605] [client 217.77.10.74:65105] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aYuvOyE5uSe043FXwQqT7AAAAcU"]
[Wed Feb 11 12:16:44.927125 2026] [:error] [pid 22537:tid 22544] [client 151.242.30.243:60626] [client 151.242.30.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aYwCrCfg2TagwM3bvQOKhAAAAUU"]
[Wed Feb 11 15:51:50.057650 2026] [:error] [pid 27964:tid 27977] [client 194.5.82.160:38161] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYw1Fsp0XgWYHLcQtEiF3QAAAAI"]
[Wed Feb 11 15:52:00.268436 2026] [autoindex:error] [pid 27964:tid 27978] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:04.079335 2026] [autoindex:error] [pid 27964:tid 27998] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:04.196243 2026] [autoindex:error] [pid 27964:tid 27995] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:05.811693 2026] [autoindex:error] [pid 27964:tid 27986] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:05.914774 2026] [autoindex:error] [pid 27964:tid 27994] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:06.023784 2026] [autoindex:error] [pid 27964:tid 27988] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:06.236052 2026] [autoindex:error] [pid 27964:tid 27981] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:06.334739 2026] [autoindex:error] [pid 27964:tid 27977] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:08.308609 2026] [autoindex:error] [pid 27964:tid 27998] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:08.408065 2026] [autoindex:error] [pid 27964:tid 27995] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:10.222465 2026] [autoindex:error] [pid 27964:tid 27980] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:10.321537 2026] [autoindex:error] [pid 27964:tid 27975] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:12.356875 2026] [autoindex:error] [pid 27964:tid 27985] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:12.456949 2026] [autoindex:error] [pid 27964:tid 27987] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:12.559067 2026] [autoindex:error] [pid 27964:tid 27992] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:12.658838 2026] [autoindex:error] [pid 27964:tid 27981] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:14.858204 2026] [autoindex:error] [pid 27964:tid 27985] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:14.961125 2026] [autoindex:error] [pid 27964:tid 27987] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:15.061728 2026] [autoindex:error] [pid 27964:tid 27996] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:18.944658 2026] [autoindex:error] [pid 27964:tid 27982] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:19.051637 2026] [autoindex:error] [pid 27964:tid 27980] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:22.817778 2026] [autoindex:error] [pid 27964:tid 27983] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:22.920901 2026] [autoindex:error] [pid 27964:tid 27978] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:24.335151 2026] [autoindex:error] [pid 27964:tid 27981] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:24.435254 2026] [autoindex:error] [pid 27964:tid 27988] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:26.440271 2026] [autoindex:error] [pid 27964:tid 27994] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:28.418879 2026] [autoindex:error] [pid 27964:tid 27989] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:30.431493 2026] [autoindex:error] [pid 27964:tid 27981] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:30.531435 2026] [autoindex:error] [pid 27964:tid 27988] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:30.630501 2026] [autoindex:error] [pid 27964:tid 27996] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:32.590130 2026] [autoindex:error] [pid 27964:tid 27975] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:37.921752 2026] [autoindex:error] [pid 27964:tid 27996] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:38.026264 2026] [autoindex:error] [pid 27964:tid 27994] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:39.811798 2026] [autoindex:error] [pid 27964:tid 27977] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:39.916637 2026] [autoindex:error] [pid 27964:tid 27976] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:41.684224 2026] [autoindex:error] [pid 27964:tid 27997] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:44.831405 2026] [autoindex:error] [pid 27964:tid 27979] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:46.646008 2026] [autoindex:error] [pid 27964:tid 27980] [client 194.5.82.138:60909] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:48.535531 2026] [autoindex:error] [pid 27964:tid 27990] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:50.526851 2026] [autoindex:error] [pid 27964:tid 27999] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:50.630383 2026] [autoindex:error] [pid 27964:tid 27991] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:50.736386 2026] [autoindex:error] [pid 27964:tid 27989] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:52.573777 2026] [autoindex:error] [pid 27964:tid 27982] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:52.716671 2026] [autoindex:error] [pid 27964:tid 27977] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:52.824983 2026] [autoindex:error] [pid 27964:tid 27987] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:52.933466 2026] [autoindex:error] [pid 27964:tid 27986] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:53.032918 2026] [autoindex:error] [pid 27964:tid 27997] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:53.134356 2026] [autoindex:error] [pid 27964:tid 27991] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:54.966446 2026] [autoindex:error] [pid 27964:tid 27982] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:52:56.931013 2026] [autoindex:error] [pid 27964:tid 27992] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/swfupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:01.865047 2026] [autoindex:error] [pid 27964:tid 27988] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:01.967974 2026] [autoindex:error] [pid 27964:tid 27979] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:02.109750 2026] [autoindex:error] [pid 27964:tid 27998] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:03.978347 2026] [autoindex:error] [pid 27964:tid 27977] [client 194.5.82.138:60909] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:16.021688 2026] [autoindex:error] [pid 28073:tid 28090] [client 194.5.82.152:22959] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:16.114430 2026] [:error] [pid 28073:tid 28079] [client 194.5.82.152:22959] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager"] [unique_id "aYw1bIeHYIlOlF-DsMxoNAAAAMQ"]
[Wed Feb 11 15:53:19.826255 2026] [autoindex:error] [pid 28073:tid 28093] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:19.925514 2026] [autoindex:error] [pid 28073:tid 28087] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:27.148244 2026] [autoindex:error] [pid 28073:tid 28094] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:29.084303 2026] [autoindex:error] [pid 28073:tid 28093] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:31.066243 2026] [autoindex:error] [pid 28073:tid 28084] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:31.177111 2026] [autoindex:error] [pid 28073:tid 28087] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:35.018711 2026] [autoindex:error] [pid 28073:tid 28083] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:35.130258 2026] [autoindex:error] [pid 28073:tid 28089] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:39.272905 2026] [autoindex:error] [pid 28073:tid 28093] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/site-logo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:41.217313 2026] [autoindex:error] [pid 28073:tid 28085] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/mediaelement/renderers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:43.205355 2026] [autoindex:error] [pid 28073:tid 28081] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:52.114262 2026] [autoindex:error] [pid 28073:tid 28094] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:53.946691 2026] [autoindex:error] [pid 28073:tid 28080] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/lightgray/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:54.055398 2026] [autoindex:error] [pid 28073:tid 28090] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:53:54.153906 2026] [autoindex:error] [pid 28073:tid 28095] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:01.524505 2026] [autoindex:error] [pid 28073:tid 28088] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:03.623342 2026] [autoindex:error] [pid 28073:tid 28098] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:03.727494 2026] [autoindex:error] [pid 28073:tid 28097] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:05.283459 2026] [autoindex:error] [pid 28073:tid 28078] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:07.058424 2026] [autoindex:error] [pid 28073:tid 28076] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:08.872131 2026] [autoindex:error] [pid 28073:tid 28099] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:09.007275 2026] [autoindex:error] [pid 28073:tid 28079] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:09.235728 2026] [autoindex:error] [pid 28073:tid 28084] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:09.434330 2026] [autoindex:error] [pid 28073:tid 28080] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:54:11.227206 2026] [autoindex:error] [pid 28073:tid 28094] [client 194.5.82.107:40527] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/latest-comments/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 20:39:48.977834 2026] [:error] [pid 22537:tid 22552] [client 136.111.214.0:49265] [client 136.111.214.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.214.0, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYx4lCfg2TagwM3bvQMCGQAAAU0"]
[Wed Feb 11 20:39:57.007897 2026] [:error] [pid 22537:tid 22548] [client 136.111.214.0:49265] [client 136.111.214.0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYx4nSfg2TagwM3bvQMCHgAAAUk"]
[Wed Feb 11 20:39:59.349565 2026] [:error] [pid 22537:tid 22547] [client 136.111.214.0:49265] [client 136.111.214.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.214.0, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYx4nyfg2TagwM3bvQMCIAAAAUg"]
[Wed Feb 11 21:47:15.869818 2026] [:error] [pid 27964:tid 27997] [client 4.245.188.94:5271] [client 4.245.188.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aYyIY8p0XgWYHLcQtEj7kQAAABY"]
[Wed Feb 11 21:47:16.896351 2026] [:error] [pid 27966:tid 28032] [client 4.245.188.94:5308] [client 4.245.188.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aYyIZF8HJ9ydyf0SPu7PHwAAAII"]
[Wed Feb 11 21:47:17.933549 2026] [:error] [pid 17401:tid 17415] [client 4.245.188.94:5323] [client 4.245.188.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aYyIZQ0lHeayTY40t358JwAAAQw"]
[Wed Feb 11 21:47:18.975462 2026] [:error] [pid 17401:tid 17411] [client 4.245.188.94:5275] [client 4.245.188.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aYyIZg0lHeayTY40t358KQAAAQg"]
[Thu Feb 12 01:01:07.729753 2026] [:error] [pid 49180:tid 49200] [client 136.113.193.208:51773] [client 136.113.193.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.193.208, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYy103D8wAezUtqGiU5a-gAAAVI"]
[Thu Feb 12 01:01:15.549929 2026] [:error] [pid 49180:tid 49197] [client 136.113.193.208:51773] [client 136.113.193.208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYy123D8wAezUtqGiU5bEgAAAU8"]
[Thu Feb 12 01:01:17.689409 2026] [:error] [pid 49180:tid 49194] [client 136.113.193.208:51773] [client 136.113.193.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.193.208, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYy13XD8wAezUtqGiU5bFwAAAUw"]
[Thu Feb 12 01:17:47.220043 2026] [proxy_fcgi:error] [pid 49093:tid 49108] [client 103.4.122.14:48800] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Feb 12 03:42:39.031668 2026] [:error] [pid 57532:tid 57557] [client 34.27.228.32:53623] [client 34.27.228.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.228.32, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYzbr4fDW9Kql6FLJIMsmgAAAA8"]
[Thu Feb 12 03:42:45.167710 2026] [:error] [pid 57532:tid 57552] [client 34.27.228.32:53623] [client 34.27.228.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYzbtYfDW9Kql6FLJIMspAAAAAo"]
[Thu Feb 12 03:42:47.214228 2026] [:error] [pid 57532:tid 57558] [client 34.27.228.32:53623] [client 34.27.228.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.228.32, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aYzbt4fDW9Kql6FLJIMsqQAAABA"]
[Thu Feb 12 12:28:49.691987 2026] [autoindex:error] [pid 50254:tid 50272] [client 37.60.228.196:55621] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 12 20:57:59.097565 2026] [:error] [pid 65064:tid 65087] [client 72.146.8.4:18014] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aY3OVxOvRgscTcqsMBn9cwAAANQ"]
[Thu Feb 12 20:58:00.506964 2026] [:error] [pid 46718:tid 46732] [client 72.146.8.4:22375] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aY3OWEdfX45LelQwruQWPwAAAcs"]
[Thu Feb 12 20:58:02.062680 2026] [:error] [pid 65064:tid 65072] [client 72.146.8.4:16933] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aY3OWhOvRgscTcqsMBn9dAAAAMU"]
[Thu Feb 12 20:58:03.691009 2026] [:error] [pid 65064:tid 65070] [client 72.146.8.4:16947] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aY3OWxOvRgscTcqsMBn9egAAAMM"]
[Thu Feb 12 20:58:04.908610 2026] [:error] [pid 46603:tid 46613] [client 72.146.8.4:21388] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aY3OXPEi6O39v05JNJd2rQAAAQg"]
[Thu Feb 12 20:58:07.426125 2026] [:error] [pid 63418:tid 63482] [client 72.146.8.4:28254] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aY3OX9zjh-bbJnStPZLq9AAAAIY"]
[Thu Feb 12 20:58:08.608600 2026] [:error] [pid 46718:tid 46727] [client 72.146.8.4:28237] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aY3OYEdfX45LelQwruQWSAAAAcY"]
[Thu Feb 12 20:58:09.536613 2026] [:error] [pid 46603:tid 46628] [client 72.146.8.4:25869] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aY3OYfEi6O39v05JNJd2swAAARc"]
[Thu Feb 12 20:58:10.911579 2026] [:error] [pid 46603:tid 46627] [client 72.146.8.4:25877] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aY3OYvEi6O39v05JNJd2uAAAARY"]
[Thu Feb 12 20:58:12.687513 2026] [:error] [pid 65064:tid 65076] [client 72.146.8.4:22381] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aY3OZBOvRgscTcqsMBn9gAAAAMk"]
[Thu Feb 12 20:58:14.764845 2026] [:error] [pid 65064:tid 65083] [client 72.146.8.4:22373] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aY3OZhOvRgscTcqsMBn9gwAAANA"]
[Thu Feb 12 20:58:17.332764 2026] [:error] [pid 63416:tid 63445] [client 72.146.8.4:25862] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aY3Oab2wmecPaCHcM2_L2AAAAZg"]
[Thu Feb 12 20:58:19.457071 2026] [:error] [pid 46718:tid 46734] [client 72.146.8.4:26198] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aY3Oa0dfX45LelQwruQWYAAAAc0"]
[Thu Feb 12 20:58:21.341427 2026] [:error] [pid 63417:tid 63465] [client 72.146.8.4:26214] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aY3Obf8gSb97qRMtXCLvRgAAAFA"]
[Thu Feb 12 20:58:24.541234 2026] [:error] [pid 65064:tid 65070] [client 72.146.8.4:4384] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aY3OcBOvRgscTcqsMBn9lAAAAMM"]
[Thu Feb 12 20:58:26.329455 2026] [:error] [pid 46675:tid 46679] [client 72.146.8.4:26641] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aY3OcjuaQILPonWFiQloOwAAAUE"]
[Thu Feb 12 20:58:28.674842 2026] [:error] [pid 46718:tid 46731] [client 72.146.8.4:20976] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aY3OdEdfX45LelQwruQWbgAAAco"]
[Thu Feb 12 20:58:30.043899 2026] [:error] [pid 46675:tid 46681] [client 72.146.8.4:26203] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aY3OdjuaQILPonWFiQloQgAAAUM"]
[Thu Feb 12 20:58:32.028259 2026] [:error] [pid 63416:tid 63423] [client 72.146.8.4:20930] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aY3OeL2wmecPaCHcM2_L6QAAAYI"]
[Thu Feb 12 20:58:34.034190 2026] [:error] [pid 63511:tid 63517] [client 72.146.8.4:26190] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aY3OeqQCQbD5BgeyIk0ikAAAAAQ"]
[Thu Feb 12 20:58:38.323624 2026] [:error] [pid 46675:tid 46688] [client 72.146.8.4:4304] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aY3OfjuaQILPonWFiQloUQAAAUo"]
[Thu Feb 12 20:58:39.462355 2026] [:error] [pid 46603:tid 46628] [client 72.146.8.4:20488] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aY3Of_Ei6O39v05JNJd25gAAARc"]
[Thu Feb 12 20:58:40.949795 2026] [:error] [pid 46675:tid 46687] [client 72.146.8.4:26205] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aY3OgDuaQILPonWFiQloWAAAAUk"]
[Thu Feb 12 20:58:42.751529 2026] [:error] [pid 46675:tid 46680] [client 72.146.8.4:25589] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aY3OgjuaQILPonWFiQloXwAAAUI"]
[Thu Feb 12 20:58:45.819627 2026] [:error] [pid 46675:tid 46684] [client 72.146.8.4:28241] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aY3OhTuaQILPonWFiQloZwAAAUY"]
[Thu Feb 12 20:58:48.728289 2026] [:error] [pid 65064:tid 65069] [client 72.146.8.4:4374] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aY3OiBOvRgscTcqsMBn9vQAAAMI"]
[Thu Feb 12 20:58:49.574933 2026] [:error] [pid 63418:tid 63500] [client 72.146.8.4:25875] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aY3Oidzjh-bbJnStPZLrHwAAAJg"]
[Thu Feb 12 20:58:50.991793 2026] [:error] [pid 63418:tid 63498] [client 72.146.8.4:4324] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aY3Oitzjh-bbJnStPZLrIgAAAJY"]
[Thu Feb 12 20:58:51.673448 2026] [:error] [pid 46718:tid 46727] [client 72.146.8.4:4321] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aY3Oi0dfX45LelQwruQWlwAAAcY"]
[Thu Feb 12 20:58:52.585197 2026] [:error] [pid 65064:tid 65086] [client 72.146.8.4:4289] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aY3OjBOvRgscTcqsMBn9wwAAANM"]
[Thu Feb 12 20:58:54.711347 2026] [:error] [pid 63417:tid 63472] [client 72.146.8.4:4376] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aY3Ojv8gSb97qRMtXCLvjQAAAFc"]
[Thu Feb 12 20:59:50.022740 2026] [:error] [pid 63511:tid 63530] [client 72.146.8.4:24690] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aY3OxqQCQbD5BgeyIk0i0gAAABE"]
[Thu Feb 12 20:59:51.455267 2026] [:error] [pid 46675:tid 46697] [client 72.146.8.4:26868] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aY3OxzuaQILPonWFiQlougAAAVM"]
[Thu Feb 12 20:59:53.592385 2026] [:error] [pid 46718:tid 46742] [client 72.146.8.4:21921] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aY3OyUdfX45LelQwruQXGQAAAdU"]
[Thu Feb 12 20:59:54.729483 2026] [:error] [pid 46675:tid 46682] [client 72.146.8.4:7998] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aY3OyjuaQILPonWFiQlouwAAAUQ"]
[Thu Feb 12 20:59:56.010966 2026] [:error] [pid 46675:tid 46698] [client 72.146.8.4:24244] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aY3OzDuaQILPonWFiQlowAAAAVQ"]
[Thu Feb 12 20:59:57.016902 2026] [:error] [pid 46675:tid 46684] [client 72.146.8.4:26979] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aY3OzTuaQILPonWFiQloxQAAAUY"]
[Thu Feb 12 20:59:58.199115 2026] [:error] [pid 63417:tid 63459] [client 72.146.8.4:24221] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aY3Ozv8gSb97qRMtXCLv0QAAAEo"]
[Thu Feb 12 20:59:59.754766 2026] [:error] [pid 63511:tid 63534] [client 72.146.8.4:21926] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aY3Oz6QCQbD5BgeyIk0i1AAAABU"]
[Thu Feb 12 21:00:01.464716 2026] [:error] [pid 63511:tid 63514] [client 72.146.8.4:26830] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aY3O0aQCQbD5BgeyIk0i2QAAAAE"]
[Thu Feb 12 21:00:04.057150 2026] [:error] [pid 63418:tid 63500] [client 72.146.8.4:21916] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aY3O1Nzjh-bbJnStPZLreAAAAJg"]
[Thu Feb 12 21:00:05.577809 2026] [:error] [pid 46718:tid 46725] [client 72.146.8.4:27115] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aY3O1UdfX45LelQwruQXMQAAAcQ"]
[Thu Feb 12 21:00:07.495697 2026] [:error] [pid 46718:tid 46731] [client 72.146.8.4:26622] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aY3O10dfX45LelQwruQXNgAAAco"]
[Thu Feb 12 21:00:09.610516 2026] [:error] [pid 46675:tid 46679] [client 72.146.8.4:4977] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aY3O2TuaQILPonWFiQlo0AAAAUE"]
[Thu Feb 12 21:00:12.864865 2026] [:error] [pid 46675:tid 46682] [client 72.146.8.4:26986] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aY3O3DuaQILPonWFiQlo1AAAAUQ"]
[Thu Feb 12 21:00:14.077297 2026] [:error] [pid 63511:tid 63533] [client 72.146.8.4:26506] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aY3O3qQCQbD5BgeyIk0i4wAAABQ"]
[Thu Feb 12 21:00:15.633500 2026] [:error] [pid 63417:tid 63454] [client 72.146.8.4:4965] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aY3O3_8gSb97qRMtXCLv3AAAAEU"]
[Thu Feb 12 21:00:16.155592 2026] [:error] [pid 46718:tid 46732] [client 172.213.218.254:14103] [client 172.213.218.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aY3O4EdfX45LelQwruQXVgAAAcs"]
[Thu Feb 12 21:00:16.617602 2026] [:error] [pid 46718:tid 46734] [client 72.146.8.4:4455] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aY3O4EdfX45LelQwruQXWAAAAc0"]
[Thu Feb 12 21:00:17.125969 2026] [:error] [pid 46603:tid 46621] [client 172.213.218.254:4817] [client 172.213.218.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aY3O4fEi6O39v05JNJd3hQAAARA"]
[Thu Feb 12 21:00:17.965742 2026] [:error] [pid 46603:tid 46609] [client 72.146.8.4:4457] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aY3O4fEi6O39v05JNJd3hgAAAQQ"]
[Thu Feb 12 21:00:18.083332 2026] [:error] [pid 46718:tid 46733] [client 172.213.218.254:4495] [client 172.213.218.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aY3O4kdfX45LelQwruQXYAAAAcw"]
[Thu Feb 12 21:00:19.050208 2026] [:error] [pid 65064:tid 65077] [client 172.213.218.254:15177] [client 172.213.218.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aY3O4xOvRgscTcqsMBn-MgAAAMo"]
[Thu Feb 12 21:00:19.236309 2026] [:error] [pid 46718:tid 46723] [client 72.146.8.4:4954] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aY3O40dfX45LelQwruQXYwAAAcI"]
[Thu Feb 12 21:00:20.683338 2026] [:error] [pid 46675:tid 46682] [client 72.146.8.4:24579] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aY3O5DuaQILPonWFiQlo3QAAAUQ"]
[Thu Feb 12 21:00:21.915163 2026] [:error] [pid 46718:tid 46723] [client 72.146.8.4:4928] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aY3O5UdfX45LelQwruQXbwAAAcI"]
[Thu Feb 12 21:00:23.542037 2026] [:error] [pid 46675:tid 46695] [client 72.146.8.4:26158] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aY3O5zuaQILPonWFiQlo5gAAAVE"]
[Thu Feb 12 21:00:24.918164 2026] [:error] [pid 65064:tid 65067] [client 72.146.8.4:22152] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aY3O6BOvRgscTcqsMBn-OQAAAMA"]
[Thu Feb 12 21:00:26.445138 2026] [:error] [pid 63416:tid 63421] [client 72.146.8.4:20715] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aY3O6r2wmecPaCHcM2_MTQAAAYA"]
[Thu Feb 12 21:00:28.089242 2026] [:error] [pid 63416:tid 63438] [client 72.146.8.4:20686] [client 72.146.8.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aY3O7L2wmecPaCHcM2_MUAAAAZE"]
[Thu Feb 12 21:00:28.987610 2026] [:error] [pid 65064:tid 65085] [client 72.146.8.4:4935] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aY3O7BOvRgscTcqsMBn-QQAAANI"]
[Thu Feb 12 21:00:30.201444 2026] [:error] [pid 46718:tid 46734] [client 72.146.8.4:25931] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aY3O7kdfX45LelQwruQXfgAAAc0"]
[Thu Feb 12 21:00:31.401672 2026] [:error] [pid 46718:tid 46733] [client 72.146.8.4:4142] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aY3O70dfX45LelQwruQXggAAAcw"]
[Thu Feb 12 21:00:32.158606 2026] [:error] [pid 63418:tid 63487] [client 72.146.8.4:4957] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aY3O8Nzjh-bbJnStPZLrhgAAAIs"]
[Thu Feb 12 21:00:33.398938 2026] [:error] [pid 46718:tid 46735] [client 72.146.8.4:20683] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aY3O8UdfX45LelQwruQXhAAAAc4"]
[Thu Feb 12 21:00:34.282978 2026] [:error] [pid 46718:tid 46722] [client 72.146.8.4:20729] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aY3O8kdfX45LelQwruQXiAAAAcE"]
[Thu Feb 12 21:00:35.837246 2026] [:error] [pid 63416:tid 63431] [client 72.146.8.4:4101] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aY3O872wmecPaCHcM2_MWAAAAYo"]
[Thu Feb 12 21:00:36.972635 2026] [:error] [pid 46603:tid 46608] [client 72.146.8.4:26496] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aY3O9PEi6O39v05JNJd3owAAAQM"]
[Thu Feb 12 21:00:37.784052 2026] [:error] [pid 46603:tid 46614] [client 72.146.8.4:25037] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aY3O9fEi6O39v05JNJd3pAAAAQk"]
[Thu Feb 12 21:00:40.037082 2026] [:error] [pid 63417:tid 63453] [client 72.146.8.4:20717] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aY3O-P8gSb97qRMtXCLv5wAAAEQ"]
[Thu Feb 12 21:00:40.618794 2026] [:error] [pid 46718:tid 46743] [client 72.146.8.4:22486] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aY3O-EdfX45LelQwruQXlgAAAdY"]
[Thu Feb 12 21:00:42.323999 2026] [:error] [pid 65064:tid 65076] [client 72.146.8.4:4180] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aY3O-hOvRgscTcqsMBn-SgAAAMk"]
[Thu Feb 12 21:00:43.107160 2026] [:error] [pid 65064:tid 65085] [client 72.146.8.4:22526] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aY3O-xOvRgscTcqsMBn-TAAAANI"]
[Thu Feb 12 21:00:44.603878 2026] [:error] [pid 63416:tid 63426] [client 72.146.8.4:6823] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aY3O_L2wmecPaCHcM2_MYAAAAYU"]
[Thu Feb 12 21:00:45.896327 2026] [:error] [pid 63416:tid 63431] [client 72.146.8.4:27230] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aY3O_b2wmecPaCHcM2_MYgAAAYo"]
[Thu Feb 12 21:01:42.567677 2026] [:error] [pid 46675:tid 46683] [client 72.146.8.4:27255] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aY3PNjuaQILPonWFiQlpbQAAAUU"]
[Thu Feb 12 21:01:43.661488 2026] [:error] [pid 46603:tid 46606] [client 72.146.8.4:27366] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aY3PN_Ei6O39v05JNJd33QAAAQE"]
[Thu Feb 12 21:01:44.688518 2026] [:error] [pid 46603:tid 46628] [client 72.146.8.4:4919] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aY3POPEi6O39v05JNJd33wAAARc"]
[Thu Feb 12 21:01:45.627417 2026] [:error] [pid 46603:tid 46620] [client 72.146.8.4:26246] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aY3POfEi6O39v05JNJd34gAAAQ8"]
[Thu Feb 12 21:01:47.739988 2026] [:error] [pid 46718:tid 46728] [client 72.146.8.4:26265] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY3PO0dfX45LelQwruQYEQAAAcc"]
[Thu Feb 12 21:01:49.212315 2026] [:error] [pid 63418:tid 63498] [client 72.146.8.4:4682] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY3PPdzjh-bbJnStPZLruQAAAJY"]
[Thu Feb 12 21:01:50.521159 2026] [:error] [pid 46675:tid 46695] [client 72.146.8.4:27374] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY3PPjuaQILPonWFiQlpdgAAAVE"]
[Thu Feb 12 21:01:51.304285 2026] [:error] [pid 46718:tid 46745] [client 72.146.8.4:4710] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aY3PP0dfX45LelQwruQYFgAAAdg"]
[Thu Feb 12 21:01:51.970386 2026] [:error] [pid 63511:tid 63533] [client 72.146.8.4:28174] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3PP6QCQbD5BgeyIk0jMgAAABQ"]
[Thu Feb 12 21:01:52.770428 2026] [:error] [pid 46603:tid 46610] [client 72.146.8.4:4885] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3PQPEi6O39v05JNJd38QAAAQU"]
[Thu Feb 12 21:01:53.775213 2026] [:error] [pid 63418:tid 63477] [client 72.146.8.4:18034] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3PQdzjh-bbJnStPZLrvgAAAIE"]
[Thu Feb 12 21:01:54.664665 2026] [:error] [pid 65064:tid 65071] [client 72.146.8.4:27343] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3PQhOvRgscTcqsMBn-owAAAMQ"]
[Thu Feb 12 21:01:55.238671 2026] [:error] [pid 65064:tid 65089] [client 72.146.8.4:6245] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY3PQxOvRgscTcqsMBn-pwAAANY"]
[Thu Feb 12 21:01:56.223992 2026] [:error] [pid 46675:tid 46693] [client 72.146.8.4:27372] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY3PRDuaQILPonWFiQlpgQAAAU8"]
[Thu Feb 12 21:01:57.720732 2026] [:error] [pid 65064:tid 65073] [client 72.146.8.4:25987] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY3PRROvRgscTcqsMBn-rAAAAMY"]
[Thu Feb 12 21:01:59.155374 2026] [:error] [pid 46675:tid 46678] [client 72.146.8.4:25994] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aY3PRzuaQILPonWFiQlphwAAAUA"]
[Thu Feb 12 21:02:00.009699 2026] [:error] [pid 63418:tid 63483] [client 72.146.8.4:21008] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY3PSNzjh-bbJnStPZLrwgAAAIc"]
[Thu Feb 12 21:02:01.163254 2026] [:error] [pid 46675:tid 46693] [client 72.146.8.4:4734] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY3PSTuaQILPonWFiQlpjAAAAU8"]
[Thu Feb 12 21:02:02.525527 2026] [:error] [pid 46675:tid 46690] [client 72.146.8.4:21046] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY3PSjuaQILPonWFiQlpjQAAAUw"]
[Thu Feb 12 21:02:03.311638 2026] [:error] [pid 46675:tid 46701] [client 72.146.8.4:27360] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aY3PSzuaQILPonWFiQlpjgAAAVc"]
[Thu Feb 12 21:02:04.431643 2026] [:error] [pid 46718:tid 46731] [client 72.146.8.4:6210] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aY3PTEdfX45LelQwruQYMAAAAco"]
[Thu Feb 12 21:02:06.146656 2026] [:error] [pid 46718:tid 46742] [client 72.146.8.4:4722] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aY3PTkdfX45LelQwruQYOAAAAdU"]
[Thu Feb 12 21:02:07.123360 2026] [:error] [pid 46675:tid 46694] [client 72.146.8.4:26001] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aY3PTzuaQILPonWFiQlplQAAAVA"]
[Thu Feb 12 21:02:07.856534 2026] [:error] [pid 46675:tid 46702] [client 72.146.8.4:4672] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aY3PTzuaQILPonWFiQlplgAAAVg"]
[Thu Feb 12 21:02:09.588747 2026] [:error] [pid 63418:tid 63476] [client 72.146.8.4:4906] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aY3PUdzjh-bbJnStPZLrxQAAAIA"]
[Thu Feb 12 21:02:11.990946 2026] [:error] [pid 46675:tid 46680] [client 72.146.8.4:4896] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aY3PUzuaQILPonWFiQlpnAAAAUI"]
[Thu Feb 12 21:02:15.146131 2026] [:error] [pid 46603:tid 46627] [client 72.146.8.4:26287] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aY3PV_Ei6O39v05JNJd4DQAAARY"]
[Thu Feb 12 21:02:17.185714 2026] [:error] [pid 46675:tid 46682] [client 72.146.8.4:6238] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aY3PWTuaQILPonWFiQlpnwAAAUQ"]
[Thu Feb 12 21:02:18.331673 2026] [:error] [pid 63417:tid 63455] [client 72.146.8.4:24489] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY3PWv8gSb97qRMtXCLwKwAAAEY"]
[Thu Feb 12 21:02:19.789091 2026] [:error] [pid 46718:tid 46744] [client 72.146.8.4:6261] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY3PW0dfX45LelQwruQYQQAAAdc"]
[Thu Feb 12 21:02:22.347624 2026] [:error] [pid 46718:tid 46723] [client 72.146.8.4:18040] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY3PXkdfX45LelQwruQYRwAAAcI"]
[Thu Feb 12 21:02:24.067077 2026] [:error] [pid 46603:tid 46608] [client 72.146.8.4:26296] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aY3PYPEi6O39v05JNJd4GAAAAQM"]
[Thu Feb 12 21:02:25.456702 2026] [:error] [pid 65064:tid 65069] [client 72.146.8.4:6260] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aY3PYROvRgscTcqsMBn-vwAAAMI"]
[Thu Feb 12 21:02:27.250998 2026] [:error] [pid 63416:tid 63426] [client 72.146.8.4:26264] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aY3PY72wmecPaCHcM2_MogAAAYU"]
[Thu Feb 12 21:02:28.426930 2026] [:error] [pid 46603:tid 46612] [client 72.146.8.4:21053] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aY3PZPEi6O39v05JNJd4GwAAAQc"]
[Thu Feb 12 21:02:29.555455 2026] [:error] [pid 46718:tid 46730] [client 72.146.8.4:26277] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aY3PZUdfX45LelQwruQYTgAAAck"]
[Thu Feb 12 21:02:30.971261 2026] [:error] [pid 46675:tid 46699] [client 72.146.8.4:24083] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aY3PZjuaQILPonWFiQlpuAAAAVU"]
[Thu Feb 12 21:02:32.186703 2026] [:error] [pid 65064:tid 65074] [client 72.146.8.4:4707] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aY3PaBOvRgscTcqsMBn-xgAAAMc"]
[Thu Feb 12 21:02:33.090450 2026] [:error] [pid 63418:tid 63491] [client 72.146.8.4:28176] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aY3Padzjh-bbJnStPZLr4gAAAI8"]
[Thu Feb 12 21:02:34.059188 2026] [:error] [pid 65064:tid 65085] [client 72.146.8.4:17991] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aY3PahOvRgscTcqsMBn-xwAAANI"]
[Thu Feb 12 21:02:35.987741 2026] [:error] [pid 63417:tid 63453] [client 72.146.8.4:6247] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3Pa_8gSb97qRMtXCLwOwAAAEQ"]
[Thu Feb 12 21:02:37.206063 2026] [:error] [pid 46718:tid 46728] [client 72.146.8.4:26275] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3PbUdfX45LelQwruQYVwAAAcc"]
[Thu Feb 12 21:02:38.421320 2026] [:error] [pid 46675:tid 46702] [client 72.146.8.4:26035] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3PbjuaQILPonWFiQlpxAAAAVg"]
[Thu Feb 12 21:02:39.887934 2026] [:error] [pid 46675:tid 46698] [client 72.146.8.4:4859] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3PbzuaQILPonWFiQlpyAAAAVQ"]
[Thu Feb 12 21:03:20.763307 2026] [autoindex:error] [pid 46718:tid 46724] [client 72.146.8.4:26037] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 21:03:38.976121 2026] [:error] [pid 63418:tid 63497] [client 72.146.8.4:20541] [client 72.146.8.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY3Pqtzjh-bbJnStPZLsJQAAAJU"]
[Thu Feb 12 21:03:48.486010 2026] [:error] [pid 63511:tid 63516] [client 72.146.8.4:20726] [client 72.146.8.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aY3PtKQCQbD5BgeyIk0jeAAAAAM"]
[Thu Feb 12 21:03:58.949932 2026] [:error] [pid 46675:tid 46682] [client 72.146.8.4:4134] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY3PvjuaQILPonWFiQlqJgAAAUQ"]
[Thu Feb 12 21:03:59.905996 2026] [:error] [pid 46675:tid 46687] [client 72.146.8.4:26502] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY3PvzuaQILPonWFiQlqKQAAAUk"]
[Thu Feb 12 21:04:00.707127 2026] [:error] [pid 63511:tid 63514] [client 72.146.8.4:23942] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY3PwKQCQbD5BgeyIk0jhgAAAAE"]
[Thu Feb 12 21:04:01.477110 2026] [:error] [pid 63417:tid 63461] [client 72.146.8.4:25955] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY3Pwf8gSb97qRMtXCLwnwAAAEw"]
[Thu Feb 12 21:04:02.320992 2026] [:error] [pid 46675:tid 46689] [client 72.146.8.4:26553] [client 72.146.8.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aY3PwjuaQILPonWFiQlqLgAAAUs"]
[Thu Feb 12 21:04:03.195312 2026] [:error] [pid 63418:tid 63477] [client 72.146.8.4:26525] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aY3Pw9zjh-bbJnStPZLsOgAAAIE"]
[Thu Feb 12 21:04:03.830682 2026] [:error] [pid 46603:tid 46620] [client 72.146.8.4:26515] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aY3Pw_Ei6O39v05JNJd4mgAAAQ8"]
[Thu Feb 12 21:04:05.506246 2026] [:error] [pid 46718:tid 46726] [client 72.146.8.4:27145] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aY3PxUdfX45LelQwruQY1AAAAcU"]
[Thu Feb 12 21:04:06.631660 2026] [:error] [pid 65064:tid 65078] [client 72.146.8.4:24602] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aY3PxhOvRgscTcqsMBn_IgAAAMs"]
[Thu Feb 12 21:04:07.624731 2026] [:error] [pid 65064:tid 65070] [client 72.146.8.4:7975] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY3PxxOvRgscTcqsMBn_IwAAAMM"]
[Thu Feb 12 21:04:08.576533 2026] [:error] [pid 65064:tid 65068] [client 72.146.8.4:24636] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY3PyBOvRgscTcqsMBn_JAAAAME"]
[Thu Feb 12 21:04:09.784215 2026] [:error] [pid 63417:tid 63457] [client 72.146.8.4:27169] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY3Pyf8gSb97qRMtXCLwrAAAAEg"]
[Thu Feb 12 21:04:11.215808 2026] [:error] [pid 63511:tid 63513] [client 72.146.8.4:22874] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aY3Py6QCQbD5BgeyIk0jnQAAAAA"]
[Thu Feb 12 21:04:12.503328 2026] [:error] [pid 63418:tid 63485] [client 72.146.8.4:22169] [client 72.146.8.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aY3PzNzjh-bbJnStPZLsQQAAAIk"]
[Thu Feb 12 21:04:14.135887 2026] [:error] [pid 63418:tid 63490] [client 72.146.8.4:26171] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aY3Pztzjh-bbJnStPZLsRAAAAI4"]
[Thu Feb 12 21:04:16.170954 2026] [:error] [pid 63417:tid 63463] [client 72.146.8.4:27168] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aY3P0P8gSb97qRMtXCLwuAAAAE4"]
[Thu Feb 12 21:04:17.080238 2026] [:error] [pid 63511:tid 63517] [client 72.146.8.4:27190] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aY3P0aQCQbD5BgeyIk0jpwAAAAQ"]
[Thu Feb 12 21:04:18.200223 2026] [:error] [pid 46718:tid 46733] [client 72.146.8.4:22610] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aY3P0kdfX45LelQwruQY5QAAAcw"]
[Thu Feb 12 21:04:20.424592 2026] [:error] [pid 46603:tid 46626] [client 72.146.8.4:4147] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aY3P1PEi6O39v05JNJd4sgAAARU"]
[Thu Feb 12 21:04:21.813678 2026] [:error] [pid 63511:tid 63536] [client 72.146.8.4:20191] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aY3P1aQCQbD5BgeyIk0jsQAAABc"]
[Thu Feb 12 21:04:22.747704 2026] [:error] [pid 63511:tid 63535] [client 72.146.8.4:21580] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aY3P1qQCQbD5BgeyIk0juwAAABY"]
[Thu Feb 12 21:04:23.948425 2026] [:error] [pid 46718:tid 46732] [client 72.146.8.4:26894] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aY3P10dfX45LelQwruQY7gAAAcs"]
[Thu Feb 12 21:04:24.731941 2026] [:error] [pid 46718:tid 46745] [client 72.146.8.4:23937] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aY3P2EdfX45LelQwruQY9gAAAdg"]
[Thu Feb 12 21:04:25.771402 2026] [:error] [pid 65064:tid 65074] [client 72.146.8.4:20426] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aY3P2ROvRgscTcqsMBn_QQAAAMc"]
[Thu Feb 12 21:04:27.147364 2026] [:error] [pid 63511:tid 63520] [client 72.146.8.4:27468] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aY3P26QCQbD5BgeyIk0jzAAAAAc"]
[Thu Feb 12 21:04:28.596613 2026] [:error] [pid 63416:tid 63423] [client 72.146.8.4:26167] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aY3P3L2wmecPaCHcM2_NCQAAAYI"]
[Thu Feb 12 21:04:29.679653 2026] [:error] [pid 63418:tid 63483] [client 72.146.8.4:20768] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY3P3dzjh-bbJnStPZLsUgAAAIc"]
[Thu Feb 12 21:04:30.934713 2026] [:error] [pid 63416:tid 63429] [client 72.146.8.4:26900] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY3P3r2wmecPaCHcM2_NCwAAAYg"]
[Thu Feb 12 21:04:32.484194 2026] [:error] [pid 63416:tid 63442] [client 72.146.8.4:26831] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY3P4L2wmecPaCHcM2_NDgAAAZU"]
[Thu Feb 12 21:04:33.708473 2026] [:error] [pid 46675:tid 46692] [client 72.146.8.4:22451] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY3P4TuaQILPonWFiQlqXQAAAU4"]
[Thu Feb 12 21:04:35.772963 2026] [:error] [pid 63418:tid 63499] [client 72.146.8.4:20179] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY3P49zjh-bbJnStPZLsYwAAAJc"]
[Thu Feb 12 21:04:36.775016 2026] [:error] [pid 63511:tid 63520] [client 72.146.8.4:26972] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY3P5KQCQbD5BgeyIk0j0wAAAAc"]
[Thu Feb 12 21:04:37.799420 2026] [:error] [pid 63418:tid 63488] [client 72.146.8.4:26851] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY3P5dzjh-bbJnStPZLsZgAAAIw"]
[Thu Feb 12 21:04:39.394829 2026] [:error] [pid 46675:tid 46687] [client 72.146.8.4:24295] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aY3P5zuaQILPonWFiQlqbAAAAUk"]
[Thu Feb 12 21:04:40.755683 2026] [:error] [pid 46718:tid 46742] [client 72.146.8.4:9411] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aY3P6EdfX45LelQwruQZEQAAAdU"]
[Thu Feb 12 21:04:44.417360 2026] [:error] [pid 46603:tid 46611] [client 72.146.8.4:4756] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aY3P7PEi6O39v05JNJd4yQAAAQY"]
[Thu Feb 12 21:04:45.156470 2026] [:error] [pid 63418:tid 63489] [client 72.146.8.4:4460] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aY3P7dzjh-bbJnStPZLsdgAAAI0"]
[Thu Feb 12 21:04:46.117578 2026] [:error] [pid 63511:tid 63514] [client 72.146.8.4:23367] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aY3P7qQCQbD5BgeyIk0j4wAAAAE"]
[Thu Feb 12 21:04:47.093881 2026] [:error] [pid 46675:tid 46682] [client 72.146.8.4:4247] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY3P7zuaQILPonWFiQlqdgAAAUQ"]
[Thu Feb 12 21:04:47.893089 2026] [:error] [pid 63417:tid 63450] [client 72.146.8.4:4474] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY3P7_8gSb97qRMtXCLw1AAAAEE"]
[Thu Feb 12 21:04:49.531391 2026] [:error] [pid 63417:tid 63463] [client 72.146.8.4:22448] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY3P8f8gSb97qRMtXCLw1wAAAE4"]
[Thu Feb 12 21:04:51.025227 2026] [:error] [pid 46675:tid 46695] [client 72.146.8.4:4257] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY3P8zuaQILPonWFiQlqfQAAAVE"]
[Thu Feb 12 21:04:52.226425 2026] [:error] [pid 46718:tid 46745] [client 72.146.8.4:18696] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY3P9EdfX45LelQwruQZHQAAAdg"]
[Thu Feb 12 21:04:53.765101 2026] [:error] [pid 46718:tid 46734] [client 72.146.8.4:18725] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY3P9UdfX45LelQwruQZIwAAAc0"]
[Thu Feb 12 21:05:06.882745 2026] [:error] [pid 65064:tid 65083] [client 72.146.8.4:4952] [client 72.146.8.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY3QAhOvRgscTcqsMBn_bgAAANA"]
[Thu Feb 12 21:05:15.927654 2026] [autoindex:error] [pid 46718:tid 46733] [client 72.146.8.4:4255] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 21:05:36.836852 2026] [:error] [pid 63417:tid 63450] [client 72.146.8.4:21678] [client 72.146.8.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY3QIP8gSb97qRMtXCLxKAAAAEE"]
[Thu Feb 12 21:05:39.315753 2026] [:error] [pid 63416:tid 63428] [client 72.146.8.4:22695] [client 72.146.8.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY3QI72wmecPaCHcM2_NWQAAAYc"]
[Thu Feb 12 21:05:57.631856 2026] [:error] [pid 46675:tid 46678] [client 72.146.8.4:20410] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aY3QNTuaQILPonWFiQlq9QAAAUA"]
[Thu Feb 12 21:05:58.796543 2026] [:error] [pid 65064:tid 65070] [client 72.146.8.4:17156] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aY3QNhOvRgscTcqsMBn_owAAAMM"]
[Thu Feb 12 21:06:02.096926 2026] [:error] [pid 46675:tid 46686] [client 72.146.8.4:24130] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aY3QOjuaQILPonWFiQlq_AAAAUg"]
[Thu Feb 12 21:06:03.814692 2026] [:error] [pid 46603:tid 46619] [client 72.146.8.4:24019] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aY3QO_Ei6O39v05JNJd5NgAAAQ4"]
[Thu Feb 12 21:06:05.878961 2026] [:error] [pid 46718:tid 46734] [client 72.146.8.4:24809] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aY3QPUdfX45LelQwruQZzQAAAc0"]
[Thu Feb 12 21:06:08.212040 2026] [:error] [pid 63417:tid 63469] [client 72.146.8.4:26768] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aY3QQP8gSb97qRMtXCLxhAAAAFQ"]
[Thu Feb 12 21:06:11.912354 2026] [:error] [pid 63416:tid 63445] [client 72.146.8.4:24804] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aY3QQ72wmecPaCHcM2_NewAAAZg"]
[Thu Feb 12 21:06:16.933362 2026] [:error] [pid 65064:tid 65071] [client 72.146.8.4:27885] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aY3QSBOvRgscTcqsMBn_vwAAAMQ"]
[Thu Feb 12 21:06:17.860184 2026] [:error] [pid 63511:tid 63532] [client 72.146.8.4:20290] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aY3QSaQCQbD5BgeyIk0keQAAABM"]
[Thu Feb 12 21:06:19.688226 2026] [:error] [pid 46718:tid 46721] [client 72.146.8.4:24178] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aY3QS0dfX45LelQwruQZ5QAAAcA"]
[Thu Feb 12 21:06:21.529052 2026] [:error] [pid 65064:tid 65073] [client 72.146.8.4:26771] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aY3QTROvRgscTcqsMBn_wwAAAMY"]
[Thu Feb 12 21:06:22.279960 2026] [:error] [pid 63417:tid 63449] [client 72.146.8.4:24778] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aY3QTv8gSb97qRMtXCLxoAAAAEA"]
[Thu Feb 12 21:06:23.028315 2026] [:error] [pid 46603:tid 46615] [client 72.146.8.4:4480] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aY3QT_Ei6O39v05JNJd5RwAAAQo"]
[Thu Feb 12 21:06:24.117330 2026] [:error] [pid 46718:tid 46741] [client 72.146.8.4:20329] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aY3QUEdfX45LelQwruQZ-gAAAdQ"]
[Thu Feb 12 21:06:25.372455 2026] [:error] [pid 46675:tid 46701] [client 72.146.8.4:24188] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aY3QUTuaQILPonWFiQlrHQAAAVc"]
[Thu Feb 12 21:06:26.731798 2026] [:error] [pid 63511:tid 63532] [client 72.146.8.4:20292] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aY3QUqQCQbD5BgeyIk0kgwAAABM"]
[Thu Feb 12 21:06:27.976237 2026] [:error] [pid 46675:tid 46681] [client 72.146.8.4:22697] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aY3QUzuaQILPonWFiQlrIgAAAUM"]
[Thu Feb 12 21:06:29.220312 2026] [:error] [pid 65064:tid 65080] [client 72.146.8.4:4504] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aY3QVROvRgscTcqsMBn_xwAAAM0"]
[Thu Feb 12 21:06:30.334971 2026] [:error] [pid 63418:tid 63497] [client 72.146.8.4:20330] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aY3QVtzjh-bbJnStPZLs3QAAAJU"]
[Thu Feb 12 21:06:31.527775 2026] [:error] [pid 46675:tid 46698] [client 72.146.8.4:4481] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aY3QVzuaQILPonWFiQlrLAAAAVQ"]
[Thu Feb 12 21:06:33.993886 2026] [:error] [pid 46675:tid 46691] [client 72.146.8.4:26752] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aY3QWTuaQILPonWFiQlrLgAAAU0"]
[Thu Feb 12 21:06:36.306205 2026] [:error] [pid 46675:tid 46688] [client 72.146.8.4:27810] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aY3QXDuaQILPonWFiQlrNAAAAUo"]
[Thu Feb 12 21:06:38.233458 2026] [:error] [pid 46675:tid 46690] [client 72.146.8.4:27890] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aY3QXjuaQILPonWFiQlrOAAAAUw"]
[Thu Feb 12 21:06:39.977006 2026] [:error] [pid 46675:tid 46689] [client 72.146.8.4:27792] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aY3QXzuaQILPonWFiQlrOQAAAUs"]
[Thu Feb 12 21:06:40.862396 2026] [:error] [pid 46718:tid 46737] [client 72.146.8.4:27780] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aY3QYEdfX45LelQwruQaMAAAAdA"]
[Thu Feb 12 21:06:42.887056 2026] [:error] [pid 63418:tid 63496] [client 72.146.8.4:20341] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aY3QYtzjh-bbJnStPZLs6AAAAJQ"]
[Thu Feb 12 21:06:43.741637 2026] [:error] [pid 65064:tid 65071] [client 72.146.8.4:24164] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aY3QYxOvRgscTcqsMBn_6wAAAMQ"]
[Thu Feb 12 21:06:44.788987 2026] [:error] [pid 63418:tid 63498] [client 72.146.8.4:26399] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aY3QZNzjh-bbJnStPZLs7AAAAJY"]
[Thu Feb 12 21:06:45.892987 2026] [:error] [pid 46718:tid 46745] [client 72.146.8.4:24454] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aY3QZUdfX45LelQwruQaQgAAAdg"]
[Thu Feb 12 21:06:46.486244 2026] [:error] [pid 46675:tid 46680] [client 72.146.8.4:24496] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aY3QZjuaQILPonWFiQlrSgAAAUI"]
[Thu Feb 12 21:06:47.855055 2026] [:error] [pid 65064:tid 65070] [client 72.146.8.4:27833] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aY3QZxOvRgscTcqsMBn_9QAAAMM"]
[Thu Feb 12 21:06:49.982019 2026] [:error] [pid 46603:tid 46605] [client 72.146.8.4:25504] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aY3QafEi6O39v05JNJd5YQAAAQA"]
[Thu Feb 12 21:06:52.099789 2026] [:error] [pid 46718:tid 46743] [client 72.146.8.4:4726] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aY3QbEdfX45LelQwruQaUgAAAdY"]
[Thu Feb 12 21:06:53.883112 2026] [:error] [pid 65064:tid 65091] [client 72.146.8.4:24920] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aY3QbROvRgscTcqsMBkADgAAANg"]
[Thu Feb 12 21:07:45.717072 2026] [:error] [pid 46718:tid 46728] [client 72.146.8.4:25524] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3QoUdfX45LelQwruQa0gAAAcc"]
[Thu Feb 12 21:07:47.217694 2026] [:error] [pid 46718:tid 46734] [client 72.146.8.4:12129] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3Qo0dfX45LelQwruQa1AAAAc0"]
[Thu Feb 12 21:07:48.005895 2026] [:error] [pid 46603:tid 46606] [client 72.146.8.4:16910] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3QpPEi6O39v05JNJd5mgAAAQE"]
[Thu Feb 12 21:07:48.660093 2026] [:error] [pid 65064:tid 65083] [client 72.146.8.4:4334] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3QpBOvRgscTcqsMBkAxAAAANA"]
[Thu Feb 12 21:07:50.607673 2026] [:error] [pid 46718:tid 46727] [client 72.146.8.4:21427] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aY3QpkdfX45LelQwruQa3gAAAcY"]
[Thu Feb 12 21:07:51.869396 2026] [:error] [pid 46675:tid 46697] [client 72.146.8.4:21394] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aY3QpzuaQILPonWFiQlrsgAAAVM"]
[Thu Feb 12 21:07:52.924880 2026] [:error] [pid 46675:tid 46702] [client 72.146.8.4:24130] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aY3QqDuaQILPonWFiQlrtAAAAVg"]
[Thu Feb 12 21:07:53.853882 2026] [:error] [pid 63416:tid 63439] [client 72.146.8.4:26241] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aY3Qqb2wmecPaCHcM2_NvQAAAZI"]
[Thu Feb 12 21:07:55.352371 2026] [:error] [pid 63416:tid 63437] [client 72.146.8.4:12118] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aY3Qq72wmecPaCHcM2_NwAAAAZA"]
[Thu Feb 12 21:07:56.437134 2026] [:error] [pid 63416:tid 63443] [client 72.146.8.4:4318] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aY3QrL2wmecPaCHcM2_NwgAAAZY"]
[Thu Feb 12 21:07:57.749893 2026] [:error] [pid 46603:tid 46608] [client 72.146.8.4:28214] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aY3QrfEi6O39v05JNJd5tgAAAQM"]
[Thu Feb 12 21:07:59.383873 2026] [:error] [pid 63418:tid 63494] [client 72.146.8.4:26194] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aY3Qr9zjh-bbJnStPZLtLwAAAJI"]
[Thu Feb 12 21:08:00.413603 2026] [:error] [pid 63418:tid 63484] [client 72.146.8.4:4411] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aY3QsNzjh-bbJnStPZLtMQAAAIg"]
[Thu Feb 12 21:08:02.355622 2026] [:error] [pid 46718:tid 46730] [client 72.146.8.4:12119] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aY3QskdfX45LelQwruQa6QAAAck"]
[Thu Feb 12 21:08:03.572909 2026] [:error] [pid 46675:tid 46678] [client 72.146.8.4:28227] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aY3QszuaQILPonWFiQlrxQAAAUA"]
[Thu Feb 12 21:08:05.099209 2026] [:error] [pid 46718:tid 46732] [client 72.146.8.4:28229] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aY3QtUdfX45LelQwruQa7gAAAcs"]
[Thu Feb 12 21:08:05.945966 2026] [:error] [pid 65064:tid 65089] [client 72.146.8.4:26208] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aY3QtROvRgscTcqsMBkA1gAAANY"]
[Thu Feb 12 21:08:07.236010 2026] [:error] [pid 65064:tid 65074] [client 72.146.8.4:28165] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aY3QtxOvRgscTcqsMBkA2AAAAMc"]
[Thu Feb 12 21:08:08.653334 2026] [:error] [pid 46675:tid 46696] [client 72.146.8.4:26458] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aY3QuDuaQILPonWFiQlr3wAAAVI"]
[Thu Feb 12 21:08:10.046150 2026] [:error] [pid 63511:tid 63523] [client 72.146.8.4:26433] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aY3QuqQCQbD5BgeyIk0k-wAAAAo"]
[Thu Feb 12 21:08:10.942160 2026] [:error] [pid 63416:tid 63433] [client 72.146.8.4:25073] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aY3Qur2wmecPaCHcM2_NyAAAAYw"]
[Thu Feb 12 21:08:12.380052 2026] [:error] [pid 63416:tid 63425] [client 72.146.8.4:20712] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aY3QvL2wmecPaCHcM2_NzwAAAYQ"]
[Thu Feb 12 21:08:13.262669 2026] [:error] [pid 46603:tid 46608] [client 72.146.8.4:4385] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aY3QvfEi6O39v05JNJd51QAAAQM"]
[Thu Feb 12 21:08:14.479181 2026] [:error] [pid 63511:tid 63524] [client 72.146.8.4:22886] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aY3QvqQCQbD5BgeyIk0k_wAAAAs"]
[Thu Feb 12 21:08:16.528475 2026] [:error] [pid 63511:tid 63517] [client 72.146.8.4:4118] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aY3QwKQCQbD5BgeyIk0lBAAAAAQ"]
[Thu Feb 12 21:08:18.067995 2026] [:error] [pid 63416:tid 63433] [client 72.146.8.4:25057] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aY3Qwr2wmecPaCHcM2_N1QAAAYw"]
[Thu Feb 12 21:08:19.500157 2026] [:error] [pid 46718:tid 46726] [client 72.146.8.4:22881] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aY3Qw0dfX45LelQwruQbBQAAAcU"]
[Thu Feb 12 21:08:20.265180 2026] [:error] [pid 65064:tid 65082] [client 72.146.8.4:26462] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aY3QxBOvRgscTcqsMBkA9gAAAM8"]
[Thu Feb 12 21:08:21.490886 2026] [:error] [pid 63416:tid 63445] [client 72.146.8.4:26358] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aY3Qxb2wmecPaCHcM2_N2AAAAZg"]
[Thu Feb 12 21:08:22.669425 2026] [:error] [pid 63511:tid 63518] [client 72.146.8.4:20698] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aY3QxqQCQbD5BgeyIk0lCgAAAAU"]
[Thu Feb 12 21:08:24.139173 2026] [:error] [pid 63511:tid 63514] [client 72.146.8.4:26514] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aY3QyKQCQbD5BgeyIk0lCwAAAAE"]
[Thu Feb 12 21:08:25.759204 2026] [:error] [pid 46675:tid 46690] [client 72.146.8.4:26336] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aY3QyTuaQILPonWFiQlr9AAAAUw"]
[Thu Feb 12 21:08:26.582011 2026] [:error] [pid 63417:tid 63453] [client 72.146.8.4:26492] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aY3Qyv8gSb97qRMtXCLycQAAAEQ"]
[Thu Feb 12 21:08:28.033664 2026] [:error] [pid 63418:tid 63476] [client 72.146.8.4:22641] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aY3QzNzjh-bbJnStPZLtQAAAAIA"]
[Thu Feb 12 21:08:29.680763 2026] [:error] [pid 65064:tid 65079] [client 72.146.8.4:4321] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aY3QzROvRgscTcqsMBkBDAAAAMw"]
[Thu Feb 12 21:08:31.503477 2026] [:error] [pid 63511:tid 63532] [client 72.146.8.4:25036] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aY3Qz6QCQbD5BgeyIk0lFQAAABM"]
[Thu Feb 12 21:08:32.727728 2026] [:error] [pid 46675:tid 46702] [client 72.146.8.4:22626] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aY3Q0DuaQILPonWFiQlr-gAAAVg"]
[Thu Feb 12 21:08:34.003257 2026] [:error] [pid 63418:tid 63488] [client 72.146.8.4:4124] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aY3Q0tzjh-bbJnStPZLtRQAAAIw"]
[Thu Feb 12 21:08:35.832207 2026] [:error] [pid 65064:tid 65075] [client 72.146.8.4:23959] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aY3Q0xOvRgscTcqsMBkBFAAAAMg"]
[Thu Feb 12 21:08:37.584844 2026] [:error] [pid 63417:tid 63464] [client 72.146.8.4:27497] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aY3Q1f8gSb97qRMtXCLyewAAAE8"]
[Thu Feb 12 21:08:38.707941 2026] [:error] [pid 63511:tid 63536] [client 72.146.8.4:27492] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aY3Q1qQCQbD5BgeyIk0lIwAAABc"]
[Thu Feb 12 21:08:41.223867 2026] [:error] [pid 65064:tid 65067] [client 72.146.8.4:22145] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aY3Q2ROvRgscTcqsMBkBGgAAAMA"]
[Thu Feb 12 21:08:42.392973 2026] [:error] [pid 46675:tid 46698] [client 72.146.8.4:25932] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aY3Q2juaQILPonWFiQlsCAAAAVQ"]
[Thu Feb 12 21:09:32.567786 2026] [:error] [pid 63511:tid 63530] [client 72.146.8.4:26853] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aY3RDKQCQbD5BgeyIk0lhgAAABE"]
[Thu Feb 12 21:09:33.764471 2026] [:error] [pid 65064:tid 65067] [client 72.146.8.4:21661] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aY3RDROvRgscTcqsMBkBUwAAAMA"]
[Thu Feb 12 21:09:34.528131 2026] [:error] [pid 46603:tid 46607] [client 72.146.8.4:4967] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aY3RDvEi6O39v05JNJd6OgAAAQI"]
[Thu Feb 12 21:09:35.588490 2026] [:error] [pid 46718:tid 46734] [client 72.146.8.4:15508] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aY3RD0dfX45LelQwruQbkwAAAc0"]
[Thu Feb 12 21:09:37.084137 2026] [:error] [pid 63417:tid 63464] [client 72.146.8.4:4738] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aY3REf8gSb97qRMtXCLyrgAAAE8"]
[Thu Feb 12 21:09:38.962477 2026] [:error] [pid 63418:tid 63500] [client 72.146.8.4:4209] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aY3REtzjh-bbJnStPZLtiQAAAJg"]
[Thu Feb 12 21:09:40.576472 2026] [:error] [pid 46603:tid 46618] [client 72.146.8.4:5104] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aY3RFPEi6O39v05JNJd6QAAAAQ0"]
[Thu Feb 12 21:09:42.453440 2026] [:error] [pid 63418:tid 63478] [client 72.146.8.4:21916] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aY3RFtzjh-bbJnStPZLtkAAAAII"]
[Thu Feb 12 21:09:44.985467 2026] [:error] [pid 63511:tid 63533] [client 72.146.8.4:4208] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aY3RGKQCQbD5BgeyIk0ljwAAABQ"]
[Thu Feb 12 21:09:46.174385 2026] [:error] [pid 63511:tid 63516] [client 72.146.8.4:4931] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aY3RGqQCQbD5BgeyIk0lkQAAAAM"]
[Thu Feb 12 21:09:47.503407 2026] [:error] [pid 65064:tid 65086] [client 72.146.8.4:5080] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aY3RGxOvRgscTcqsMBkBYQAAANM"]
[Thu Feb 12 21:09:48.866654 2026] [:error] [pid 63418:tid 63477] [client 72.146.8.4:4205] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aY3RHNzjh-bbJnStPZLtnQAAAIE"]
[Thu Feb 12 21:09:49.984941 2026] [:error] [pid 46718:tid 46726] [client 72.146.8.4:4971] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aY3RHUdfX45LelQwruQbrAAAAcU"]
[Thu Feb 12 21:09:51.676544 2026] [:error] [pid 65064:tid 65071] [client 72.146.8.4:4755] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aY3RHxOvRgscTcqsMBkBZAAAAMQ"]
[Thu Feb 12 21:09:53.367514 2026] [:error] [pid 46603:tid 46612] [client 72.146.8.4:15490] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aY3RIfEi6O39v05JNJd6VwAAAQc"]
[Thu Feb 12 21:09:54.481807 2026] [:error] [pid 63416:tid 63435] [client 72.146.8.4:24276] [client 72.146.8.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aY3RIr2wmecPaCHcM2_ORAAAAY4"]
[Thu Feb 12 22:05:26.492224 2026] [:error] [pid 65064:tid 65082] [client 20.111.48.18:4123] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY3eJhOvRgscTcqsMBkQWAAAAM8"]
[Thu Feb 12 22:05:37.964738 2026] [autoindex:error] [pid 65064:tid 65072] [client 20.111.48.18:10516] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 22:06:07.483795 2026] [:error] [pid 63417:tid 63470] [client 20.111.48.18:10695] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY3eT_8gSb97qRMtXCIAUAAAAFU"]
[Thu Feb 12 22:06:10.647935 2026] [:error] [pid 63511:tid 63531] [client 20.111.48.18:11621] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY3eUqQCQbD5BgeyIk0zzAAAABI"]
[Thu Feb 12 22:06:11.550232 2026] [:error] [pid 63511:tid 63520] [client 20.111.48.18:51457] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY3eU6QCQbD5BgeyIk0zzgAAAAc"]
[Thu Feb 12 22:06:12.277126 2026] [:error] [pid 63418:tid 63491] [client 20.111.48.18:40035] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY3eVNzjh-bbJnStPZL68AAAAI8"]
[Thu Feb 12 22:06:14.800773 2026] [:error] [pid 65064:tid 65087] [client 20.111.48.18:6743] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY3eVhOvRgscTcqsMBkQnQAAANQ"]
[Thu Feb 12 22:06:16.230389 2026] [:error] [pid 63417:tid 63454] [client 20.111.48.18:15573] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY3eWP8gSb97qRMtXCIAUwAAAEU"]
[Thu Feb 12 22:06:17.992065 2026] [:error] [pid 65064:tid 65086] [client 20.111.48.18:14304] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aY3eWROvRgscTcqsMBkQpQAAANM"]
[Thu Feb 12 22:06:19.197376 2026] [:error] [pid 46718:tid 46741] [client 20.111.48.18:14292] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aY3eW0dfX45LelQwruQyGgAAAdQ"]
[Thu Feb 12 22:06:20.536633 2026] [:error] [pid 63417:tid 63464] [client 20.111.48.18:24748] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aY3eXP8gSb97qRMtXCIAVgAAAE8"]
[Thu Feb 12 22:06:21.962495 2026] [:error] [pid 46718:tid 46735] [client 20.111.48.18:51467] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aY3eXUdfX45LelQwruQyHQAAAc4"]
[Thu Feb 12 22:06:24.186877 2026] [:error] [pid 46675:tid 46698] [client 20.111.48.18:39227] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aY3eYDuaQILPonWFiQl8twAAAVQ"]
[Thu Feb 12 22:06:25.300091 2026] [:error] [pid 46718:tid 46724] [client 20.111.48.18:6756] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aY3eYUdfX45LelQwruQyJAAAAcM"]
[Thu Feb 12 22:06:26.563433 2026] [:error] [pid 46718:tid 46744] [client 20.111.48.18:15572] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aY3eYkdfX45LelQwruQyKQAAAdc"]
[Thu Feb 12 22:06:28.913188 2026] [:error] [pid 65064:tid 65073] [client 20.111.48.18:6759] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aY3eZBOvRgscTcqsMBkQpwAAAMY"]
[Thu Feb 12 22:06:30.942134 2026] [:error] [pid 65064:tid 65086] [client 20.111.48.18:9152] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aY3eZhOvRgscTcqsMBkQqwAAANM"]
[Thu Feb 12 22:06:32.472799 2026] [:error] [pid 46675:tid 46691] [client 20.111.48.18:15572] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aY3eaDuaQILPonWFiQl8wAAAAU0"]
[Thu Feb 12 22:06:34.593787 2026] [:error] [pid 63511:tid 63532] [client 20.111.48.18:40053] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aY3eaqQCQbD5BgeyIk0z6QAAABM"]
[Thu Feb 12 22:06:37.625376 2026] [:error] [pid 46718:tid 46745] [client 20.111.48.18:39200] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aY3ebUdfX45LelQwruQyOgAAAdg"]
[Thu Feb 12 22:06:39.005851 2026] [:error] [pid 65064:tid 65072] [client 20.111.48.18:23554] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aY3ebxOvRgscTcqsMBkQtAAAAMU"]
[Thu Feb 12 22:06:40.458224 2026] [:error] [pid 63418:tid 63497] [client 20.111.48.18:8676] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aY3ecNzjh-bbJnStPZL7AgAAAJU"]
[Thu Feb 12 22:06:41.338371 2026] [:error] [pid 63416:tid 63438] [client 20.111.48.18:17625] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aY3ecb2wmecPaCHcM2_ZjgAAAZE"]
[Thu Feb 12 22:06:42.442667 2026] [:error] [pid 63418:tid 63478] [client 20.111.48.18:8669] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aY3ectzjh-bbJnStPZL7CAAAAII"]
[Thu Feb 12 22:06:43.467402 2026] [:error] [pid 46675:tid 46695] [client 20.111.48.18:7885] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aY3eczuaQILPonWFiQl8ygAAAVE"]
[Thu Feb 12 22:06:44.767117 2026] [:error] [pid 46603:tid 46622] [client 20.111.48.18:17605] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aY3edPEi6O39v05JNJeLZgAAARE"]
[Thu Feb 12 22:06:46.583509 2026] [:error] [pid 63417:tid 63473] [client 20.111.48.18:20617] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aY3edv8gSb97qRMtXCIAbAAAAFg"]
[Thu Feb 12 22:06:47.714382 2026] [:error] [pid 63511:tid 63516] [client 20.111.48.18:9191] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aY3ed6QCQbD5BgeyIk0z9QAAAAM"]
[Thu Feb 12 22:06:48.735128 2026] [:error] [pid 46603:tid 46610] [client 20.111.48.18:11064] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aY3eePEi6O39v05JNJeLbQAAAQU"]
[Thu Feb 12 22:06:49.525314 2026] [:error] [pid 46603:tid 46617] [client 20.111.48.18:7275] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aY3eefEi6O39v05JNJeLbwAAAQw"]
[Thu Feb 12 22:06:50.392347 2026] [:error] [pid 46675:tid 46688] [client 20.111.48.18:7237] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aY3eejuaQILPonWFiQl83AAAAUo"]
[Thu Feb 12 22:06:51.100249 2026] [:error] [pid 63418:tid 63497] [client 20.111.48.18:40036] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aY3ee9zjh-bbJnStPZL7DgAAAJU"]
[Thu Feb 12 22:06:52.053515 2026] [:error] [pid 63511:tid 63515] [client 20.111.48.18:6765] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aY3efKQCQbD5BgeyIk0z_QAAAAI"]
[Thu Feb 12 22:06:52.999898 2026] [:error] [pid 46603:tid 46624] [client 20.111.48.18:11011] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aY3efPEi6O39v05JNJeLdgAAARM"]
[Thu Feb 12 22:06:56.444892 2026] [:error] [pid 46603:tid 46607] [client 20.111.48.18:35256] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aY3egPEi6O39v05JNJeLfAAAAQI"]
[Thu Feb 12 22:06:59.708143 2026] [:error] [pid 46718:tid 46742] [client 20.111.48.18:7898] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aY3eg0dfX45LelQwruQyaAAAAdU"]
[Thu Feb 12 22:09:08.369747 2026] [:error] [pid 63417:tid 63460] [client 20.111.48.18:4425] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aY3fBP8gSb97qRMtXCIA_gAAAEs"]
[Thu Feb 12 22:09:10.434514 2026] [:error] [pid 63416:tid 63423] [client 20.111.48.18:14248] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aY3fBr2wmecPaCHcM2_aGAAAAYI"]
[Thu Feb 12 22:09:13.220439 2026] [:error] [pid 46603:tid 46622] [client 20.111.48.18:8262] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aY3fCfEi6O39v05JNJeMGQAAARE"]
[Thu Feb 12 22:09:15.211602 2026] [:error] [pid 63418:tid 63495] [client 20.111.48.18:8262] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aY3fC9zjh-bbJnStPZL7ogAAAJM"]
[Thu Feb 12 22:09:16.618157 2026] [:error] [pid 65064:tid 65073] [client 20.111.48.18:7677] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aY3fDBOvRgscTcqsMBkRRgAAAMY"]
[Thu Feb 12 22:09:19.585686 2026] [:error] [pid 63511:tid 63519] [client 20.111.48.18:17584] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aY3fD6QCQbD5BgeyIk00jwAAAAY"]
[Thu Feb 12 22:09:21.286129 2026] [:error] [pid 63416:tid 63444] [client 20.111.48.18:14230] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aY3fEb2wmecPaCHcM2_aHQAAAZc"]
[Thu Feb 12 22:09:22.687498 2026] [:error] [pid 46675:tid 46681] [client 20.111.48.18:19701] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aY3fEjuaQILPonWFiQl95wAAAUM"]
[Thu Feb 12 22:09:24.018748 2026] [:error] [pid 46603:tid 46606] [client 20.111.48.18:21709] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aY3fFPEi6O39v05JNJeMJQAAAQE"]
[Thu Feb 12 22:09:25.857493 2026] [:error] [pid 63511:tid 63533] [client 20.111.48.18:11339] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aY3fFaQCQbD5BgeyIk00lwAAABQ"]
[Thu Feb 12 22:09:28.086949 2026] [:error] [pid 65064:tid 65081] [client 20.111.48.18:8317] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aY3fGBOvRgscTcqsMBkRUQAAAM4"]
[Thu Feb 12 22:09:29.638136 2026] [:error] [pid 46603:tid 46610] [client 20.111.48.18:11338] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aY3fGfEi6O39v05JNJeMLAAAAQU"]
[Thu Feb 12 22:09:31.399319 2026] [:error] [pid 63417:tid 63466] [client 20.111.48.18:24237] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aY3fG_8gSb97qRMtXCIBGwAAAFE"]
[Thu Feb 12 22:09:32.221463 2026] [:error] [pid 65064:tid 65068] [client 20.111.48.18:51393] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aY3fHBOvRgscTcqsMBkRWAAAAME"]
[Thu Feb 12 22:09:33.080145 2026] [:error] [pid 46675:tid 46697] [client 20.111.48.18:11384] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aY3fHTuaQILPonWFiQl98QAAAVM"]
[Thu Feb 12 22:09:33.926253 2026] [:error] [pid 63418:tid 63477] [client 20.111.48.18:6876] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aY3fHdzjh-bbJnStPZL7sgAAAIE"]
[Thu Feb 12 22:09:34.996461 2026] [:error] [pid 63416:tid 63432] [client 20.111.48.18:14231] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aY3fHr2wmecPaCHcM2_aNAAAAYs"]
[Thu Feb 12 22:09:36.959854 2026] [:error] [pid 65064:tid 65072] [client 20.111.48.18:9890] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aY3fIBOvRgscTcqsMBkRZQAAAMU"]
[Thu Feb 12 22:09:37.922445 2026] [:error] [pid 63416:tid 63427] [client 20.111.48.18:11369] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aY3fIb2wmecPaCHcM2_aOAAAAYY"]
[Thu Feb 12 22:09:39.578838 2026] [:error] [pid 46718:tid 46725] [client 20.111.48.18:51448] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aY3fI0dfX45LelQwruQzXAAAAcQ"]
[Thu Feb 12 22:09:40.544348 2026] [:error] [pid 63418:tid 63478] [client 20.111.48.18:16043] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aY3fJNzjh-bbJnStPZL7uQAAAII"]
[Thu Feb 12 22:09:41.788397 2026] [:error] [pid 63418:tid 63494] [client 20.111.48.18:9871] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aY3fJdzjh-bbJnStPZL7vQAAAJI"]
[Thu Feb 12 22:09:42.896651 2026] [:error] [pid 63418:tid 63481] [client 20.111.48.18:8020] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aY3fJtzjh-bbJnStPZL7wgAAAIU"]
[Thu Feb 12 22:09:44.015730 2026] [:error] [pid 46603:tid 46605] [client 20.111.48.18:10669] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aY3fKPEi6O39v05JNJeMOQAAAQA"]
[Thu Feb 12 22:09:46.858926 2026] [:error] [pid 63416:tid 63425] [client 20.111.48.18:16022] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aY3fKr2wmecPaCHcM2_aQAAAAYQ"]
[Thu Feb 12 22:09:51.490285 2026] [:error] [pid 46675:tid 46694] [client 20.111.48.18:10678] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aY3fLzuaQILPonWFiQl-BwAAAVA"]
[Thu Feb 12 22:09:57.204059 2026] [:error] [pid 63418:tid 63490] [client 20.111.48.18:8057] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aY3fNdzjh-bbJnStPZL7zgAAAI4"]
[Thu Feb 12 22:09:58.612847 2026] [:error] [pid 63417:tid 63449] [client 20.111.48.18:8382] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aY3fNv8gSb97qRMtXCIBMAAAAEA"]
[Thu Feb 12 22:09:59.790682 2026] [:error] [pid 63416:tid 63424] [client 20.111.48.18:18082] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aY3fN72wmecPaCHcM2_aSwAAAYM"]
[Thu Feb 12 22:10:00.829982 2026] [:error] [pid 65064:tid 65071] [client 20.111.48.18:34536] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aY3fOBOvRgscTcqsMBkRjQAAAMQ"]
[Thu Feb 12 22:10:03.377870 2026] [:error] [pid 46718:tid 46744] [client 20.111.48.18:21195] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aY3fO0dfX45LelQwruQzZAAAAdc"]
[Thu Feb 12 22:11:19.005716 2026] [:error] [pid 46675:tid 46683] [client 20.111.48.18:37306] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aY3fhzuaQILPonWFiQl-dwAAAUU"]
[Thu Feb 12 22:11:19.673855 2026] [:error] [pid 46675:tid 46701] [client 20.111.48.18:6999] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aY3fhzuaQILPonWFiQl-ewAAAVc"]
[Thu Feb 12 22:11:20.346182 2026] [:error] [pid 63416:tid 63432] [client 20.111.48.18:10527] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aY3fiL2wmecPaCHcM2_anQAAAYs"]
[Thu Feb 12 22:11:21.539511 2026] [:error] [pid 63418:tid 63491] [client 20.111.48.18:4721] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aY3fidzjh-bbJnStPZL8PAAAAI8"]
[Thu Feb 12 22:11:22.368613 2026] [:error] [pid 63418:tid 63490] [client 20.111.48.18:4726] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aY3fitzjh-bbJnStPZL8PQAAAI4"]
[Thu Feb 12 22:11:23.426629 2026] [:error] [pid 63416:tid 63442] [client 20.111.48.18:10552] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aY3fi72wmecPaCHcM2_aoAAAAZU"]
[Thu Feb 12 22:11:24.513836 2026] [:error] [pid 46603:tid 46619] [client 20.111.48.18:9405] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aY3fjPEi6O39v05JNJeMyQAAAQ4"]
[Thu Feb 12 22:11:25.862115 2026] [:error] [pid 46603:tid 46607] [client 20.111.48.18:51563] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aY3fjfEi6O39v05JNJeMzQAAAQI"]
[Thu Feb 12 22:11:26.629460 2026] [:error] [pid 46718:tid 46736] [client 20.111.48.18:12142] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aY3fjkdfX45LelQwruQz-QAAAc8"]
[Thu Feb 12 22:11:27.166516 2026] [:error] [pid 46675:tid 46694] [client 20.111.48.18:46167] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aY3fjzuaQILPonWFiQl-jAAAAVA"]
[Thu Feb 12 22:11:27.986901 2026] [:error] [pid 63416:tid 63435] [client 20.111.48.18:51577] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aY3fj72wmecPaCHcM2_apQAAAY4"]
[Thu Feb 12 22:11:29.183418 2026] [:error] [pid 63416:tid 63439] [client 20.111.48.18:51077] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aY3fkb2wmecPaCHcM2_apwAAAZI"]
[Fri Feb 13 03:27:24.481871 2026] [:error] [pid 45250:tid 45255] [client 136.116.230.218:54100] [client 136.116.230.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.230.218, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4pnLlDmsiM40CtoXvK0gAAAMM"]
[Fri Feb 13 03:27:31.479167 2026] [:error] [pid 45250:tid 45264] [client 136.116.230.218:54100] [client 136.116.230.218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY4po7lDmsiM40CtoXvK5QAAAMw"]
[Fri Feb 13 03:27:33.841038 2026] [:error] [pid 45250:tid 45272] [client 136.116.230.218:54100] [client 136.116.230.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.230.218, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4ppblDmsiM40CtoXvK8wAAANQ"]
[Fri Feb 13 13:58:43.772776 2026] [:error] [pid 46821:tid 46840] [client 37.140.223.46:52265] [client 37.140.223.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.46, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aY69k46G1N5YSq0J0gfL_gAAAVE"]
[Sat Feb 14 00:33:00.292506 2026] [:error] [pid 47358:tid 47384] [client 34.45.84.24:58998] [client 34.45.84.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.84.24, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aY9SPMQFBuVVUQTESUxBwQAAApI"]
[Sat Feb 14 00:33:06.630348 2026] [:error] [pid 47358:tid 47382] [client 34.45.84.24:58998] [client 34.45.84.24] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY9SQsQFBuVVUQTESUxBxgAAApA"]
[Sat Feb 14 00:33:09.167515 2026] [:error] [pid 47358:tid 47387] [client 34.45.84.24:58998] [client 34.45.84.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.84.24, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aY9SRcQFBuVVUQTESUxBywAAApU"]
[Sat Feb 14 02:41:15.094896 2026] [:error] [pid 47080:tid 47103] [client 34.57.107.167:65356] [client 34.57.107.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.57.107.167, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aY9wS0bWJwYCVF39z6u2VgAAAc8"]
[Sat Feb 14 02:41:20.420598 2026] [:error] [pid 47080:tid 47105] [client 34.57.107.167:65356] [client 34.57.107.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY9wUEbWJwYCVF39z6u2WQAAAdE"]
[Sat Feb 14 02:41:22.275523 2026] [:error] [pid 47080:tid 47088] [client 34.57.107.167:65356] [client 34.57.107.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.57.107.167, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aY9wUkbWJwYCVF39z6u2WwAAAcA"]
[Sat Feb 14 12:33:34.963869 2026] [autoindex:error] [pid 28853:tid 28860] [client 139.59.24.163:60728] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 15:09:29.386256 2026] [autoindex:error] [pid 63325:tid 63345] [client 37.60.228.196:63421] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 22:18:53.004679 2026] [core:error] [pid 11705:tid 11711] [client 216.218.141.227:32558] AH10244: invalid URI path (/linear-gradient(rgb(232,%2078,%20156)%200%,%20rgb(232,%2078,%20156)%2070%)), referer: https://makifim.com.au/
[Sat Feb 14 22:18:53.004679 2026] [core:error] [pid 11705:tid 11731] [client 216.218.141.227:32548] AH10244: invalid URI path (/linear-gradient(rgb(40,%2037,%2096)%2015%,%20rgba(40,%2037,%2096,%200.52)%20100%),%20https://makifim.com.au/wp-content/uploads/2023/02/makfim-ourteam.jpg), referer: https://makifim.com.au/
[Sat Feb 14 22:18:53.004868 2026] [core:error] [pid 11705:tid 11722] [client 216.218.141.227:32524] AH10244: invalid URI path (/linear-gradient(rgb(232,%2037,%20134)%200%,%20rgb(232,%2078,%20156)%2070%)), referer: https://makifim.com.au/
[Sat Feb 14 22:18:53.005252 2026] [core:error] [pid 11705:tid 11718] [client 216.218.141.227:32572] AH10244: invalid URI path (/linear-gradient(rgb(232,%20134,%20183)%200%,%20rgba(232,%2078,%20156,%200.91)%2070%)), referer: https://makifim.com.au/
[Sat Feb 14 22:18:53.005596 2026] [core:error] [pid 11705:tid 11711] [client 216.218.141.227:32526] AH10244: invalid URI path (/linear-gradient(rgb(232,%2037,%20134)%200%,%20rgba(232,%2078,%20156,%200.85)%2070%)), referer: https://makifim.com.au/
[Sun Feb 15 02:28:28.440892 2026] [proxy_fcgi:error] [pid 27826:tid 27837] [client 103.4.122.14:52402] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Sun Feb 15 02:33:33.085726 2026] [proxy_fcgi:error] [pid 28511:tid 28527] [client 103.4.122.14:53194] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Feb 16 02:41:57.120602 2026] [autoindex:error] [pid 35497:tid 35542] [client 207.180.241.56:60603] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 16:25:53.516764 2026] [autoindex:error] [pid 26648:tid 26663] [client 164.68.99.221:57514] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 20:13:21.332540 2026] [:error] [pid 4349:tid 4424] [client 192.126.253.240:58952] [client 192.126.253.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.126.253.240, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZMJ4crbZYafUL_3Qfz3kAAAAII"], referer: https://makifim.com.au/
[Mon Feb 16 20:13:33.608265 2026] [:error] [pid 4347:tid 4382] [client 192.126.253.240:47455] [client 192.126.253.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.126.253.240, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZMJ7TFcjv6pEAnSEifGsQAAAA4"], referer: https://makifim.com.au/
[Mon Feb 16 22:55:59.956713 2026] [:error] [pid 4348:tid 4411] [client 83.229.107.129:46669] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZMv_3xbK-cCGKg9ayvhuwAAAFA"]
[Mon Feb 16 22:55:59.968953 2026] [:error] [pid 4349:tid 4433] [client 83.229.107.129:43095] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZMv_8rbZYafUL_3QfwgJgAAAIs"]
[Mon Feb 16 22:55:59.969422 2026] [:error] [pid 37004:tid 37025] [client 83.229.107.129:44987] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZMv_1XWqA9gxE5oGmZQdgAAARM"]
[Mon Feb 16 22:55:59.972567 2026] [:error] [pid 4347:tid 4386] [client 83.229.107.129:44233] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZMv_zFcjv6pEAnSEicGzwAAABI"]
[Mon Feb 16 22:57:36.426930 2026] [:error] [pid 37004:tid 37020] [client 83.229.107.129:45985] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZMwYFXWqA9gxE5oGmZQyQAAAQ4"]
[Tue Feb 17 01:03:34.302246 2026] [:error] [pid 4349:tid 4446] [client 54.244.40.200:43910] [client 54.244.40.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.244.40.200, incrementing brute counter"] [hostname "www.makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZNN5srbZYafUL_3Qfw75AAAAJg"]
[Tue Feb 17 03:47:27.483681 2026] [:error] [pid 27964:tid 27980] [client 20.111.62.157:11085] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aZN0T_S-dhXE6m2l6kotPwAAAMo"]
[Tue Feb 17 03:47:30.308529 2026] [:error] [pid 27870:tid 27939] [client 20.111.62.157:22863] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aZN0UioN52Bm26pGxYcN5wAAAIU"]
[Tue Feb 17 03:47:34.538388 2026] [:error] [pid 27869:tid 27916] [client 20.111.62.157:17135] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aZN0Vp8_4UtMM21TSptzzQAAAEk"]
[Tue Feb 17 03:47:38.296279 2026] [:error] [pid 27869:tid 27923] [client 20.111.62.157:24788] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aZN0Wp8_4UtMM21TSptz2gAAAFA"]
[Tue Feb 17 03:47:51.327701 2026] [:error] [pid 27870:tid 27945] [client 20.111.62.157:11563] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aZN0ZyoN52Bm26pGxYcOAwAAAIs"]
[Tue Feb 17 03:47:57.174872 2026] [:error] [pid 27869:tid 27907] [client 20.111.62.157:6929] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZN0bZ8_4UtMM21TSpt0GgAAAEA"]
[Tue Feb 17 03:47:59.001790 2026] [:error] [pid 27870:tid 27935] [client 20.111.62.157:6915] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZN0byoN52Bm26pGxYcOFwAAAIE"]
[Tue Feb 17 03:48:03.156933 2026] [:error] [pid 27964:tid 27971] [client 20.111.62.157:19429] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZN0c_S-dhXE6m2l6kotlQAAAME"]
[Tue Feb 17 03:48:15.933185 2026] [:error] [pid 27964:tid 27978] [client 20.111.62.157:21714] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aZN0f_S-dhXE6m2l6kotuQAAAMg"]
[Tue Feb 17 03:49:18.260503 2026] [:error] [pid 27868:tid 27894] [client 20.111.62.157:15770] [client 20.111.62.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZN0vsmsq3ZqqoPlDc0tuwAAAA4"]
[Tue Feb 17 10:10:18.296101 2026] [:error] [pid 58551:tid 58570] [client 20.166.38.178:24708] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aZPOCq1t8eWr-MgFsprUTgAAAAo"]
[Tue Feb 17 10:10:19.061223 2026] [:error] [pid 58558:tid 58636] [client 20.166.38.178:7600] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aZPOCymIxlfUL2nViZwk6wAAAI4"]
[Tue Feb 17 10:10:22.029615 2026] [:error] [pid 58659:tid 58673] [client 20.166.38.178:31828] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aZPODsDX32iTEO4jt29uLAAAAMw"]
[Tue Feb 17 10:10:26.235215 2026] [:error] [pid 32790:tid 32808] [client 20.166.38.178:32483] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aZPOEns3HJP9ozPHsN50_gAAAQ4"]
[Tue Feb 17 10:10:40.291931 2026] [:error] [pid 58659:tid 58669] [client 20.166.38.178:64475] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aZPOIMDX32iTEO4jt29uUgAAAMg"]
[Tue Feb 17 10:10:41.946058 2026] [:error] [pid 58552:tid 58606] [client 20.166.38.178:7087] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPOITBHVJP2Oz3yR5dSXgAAAEs"]
[Tue Feb 17 10:10:43.245606 2026] [:error] [pid 58558:tid 58632] [client 20.166.38.178:7597] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPOIymIxlfUL2nViZwlCwAAAIo"]
[Tue Feb 17 10:10:44.660358 2026] [:error] [pid 58659:tid 58668] [client 20.166.38.178:24721] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPOJMDX32iTEO4jt29uVgAAAMc"]
[Tue Feb 17 10:10:45.690410 2026] [:error] [pid 58659:tid 58683] [client 20.166.38.178:24061] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPOJcDX32iTEO4jt29uWQAAANY"]
[Tue Feb 17 10:10:47.487698 2026] [:error] [pid 32790:tid 32796] [client 20.166.38.178:28338] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aZPOJ3s3HJP9ozPHsN51IQAAAQI"]
[Tue Feb 17 10:10:50.151327 2026] [:error] [pid 58552:tid 58610] [client 20.166.38.178:24038] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aZPOKjBHVJP2Oz3yR5dScAAAAE8"]
[Tue Feb 17 10:11:04.794400 2026] [:error] [pid 58659:tid 58669] [client 20.166.38.178:34312] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZPOOMDX32iTEO4jt29udgAAAMg"]
[Tue Feb 17 10:11:15.093508 2026] [:error] [pid 58659:tid 58668] [client 20.166.38.178:32801] [client 20.166.38.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZPOQ8DX32iTEO4jt29uiQAAAMc"]
[Tue Feb 17 10:11:42.109452 2026] [:error] [pid 32790:tid 32806] [client 20.166.38.178:6212] [client 20.166.38.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZPOXns3HJP9ozPHsN51dAAAAQw"]
[Wed Feb 18 06:34:21.382288 2026] [proxy_fcgi:error] [pid 21847:tid 21861] [client 103.4.122.14:44850] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('currentCronKey', '', 'yes') ON DUPLICATE KEY UPDATE val = '', autoload = 'yes' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::setPHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Wed Feb 18 06:36:19.371260 2026] [proxy_fcgi:error] [pid 21961:tid 21981] [client 103.4.122.14:45158] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Feb 18 07:44:22.440345 2026] [:error] [pid 21848:tid 21893] [client 68.219.113.135:13676] [client 68.219.113.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZT9VvbG91VRkVidT5dHEgAAAEQ"]
[Wed Feb 18 07:45:51.863705 2026] [:error] [pid 21849:tid 21933] [client 68.219.113.135:16448] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aZT9r7x9a1XrfTYnuzKX6wAAAJE"]
[Wed Feb 18 07:45:53.957353 2026] [:error] [pid 57014:tid 57017] [client 68.219.113.135:9949] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aZT9sRNZnhS5qKtVIMIhWwAAAQA"]
[Wed Feb 18 07:45:55.606247 2026] [:error] [pid 21847:tid 21869] [client 68.219.113.135:3743] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aZT9s_y9A5wy4LuXmJ3qtgAAAAs"]
[Wed Feb 18 07:46:01.378233 2026] [:error] [pid 21847:tid 21872] [client 68.219.113.135:8532] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aZT9ufy9A5wy4LuXmJ3q3AAAAA4"]
[Wed Feb 18 07:46:09.937824 2026] [:error] [pid 21847:tid 21858] [client 68.219.113.135:8535] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aZT9wfy9A5wy4LuXmJ3rCAAAAAA"]
[Wed Feb 18 07:46:11.936030 2026] [:error] [pid 57014:tid 57037] [client 68.219.113.135:8623] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aZT9wxNZnhS5qKtVIMIhcwAAARQ"]
[Wed Feb 18 07:46:12.938265 2026] [:error] [pid 57014:tid 57040] [client 68.219.113.135:14573] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aZT9xBNZnhS5qKtVIMIheAAAARc"]
[Wed Feb 18 07:46:16.175197 2026] [:error] [pid 57014:tid 57021] [client 68.219.113.135:9927] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file6.php"] [unique_id "aZT9yBNZnhS5qKtVIMIhewAAAQQ"]
[Wed Feb 18 07:46:23.268903 2026] [:error] [pid 57014:tid 57037] [client 68.219.113.135:14061] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aZT9zxNZnhS5qKtVIMIhgAAAARQ"]
[Wed Feb 18 07:46:46.749190 2026] [:error] [pid 57014:tid 57039] [client 68.219.113.135:3858] [client 68.219.113.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aZT95hNZnhS5qKtVIMIhsAAAARY"]
[Wed Feb 18 08:50:35.323895 2026] [:error] [pid 57014:tid 57019] [client 45.67.97.54:57477] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/O-Simple.php"] [unique_id "aZUM2xNZnhS5qKtVIMI_qwAAAQI"]
[Wed Feb 18 08:51:04.106831 2026] [:error] [pid 21847:tid 21872] [client 45.67.97.52:41443] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aZUM-Py9A5wy4LuXmJ0SAgAAAA4"]
[Wed Feb 18 08:51:19.920833 2026] [:error] [pid 5561:tid 5571] [client 45.67.97.54:49691] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aZUNB0oQssCZYQ4NexYY6gAAAUc"]
[Wed Feb 18 14:05:04.526416 2026] [:error] [pid 5561:tid 5576] [client 34.76.218.158:56887] [client 34.76.218.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.218.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVWkEoQssCZYQ4NexZ8GAAAAUw"]
[Wed Feb 18 14:05:11.192177 2026] [:error] [pid 5561:tid 5565] [client 34.76.218.158:56887] [client 34.76.218.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZVWl0oQssCZYQ4NexZ8HgAAAUE"]
[Wed Feb 18 14:05:13.373483 2026] [:error] [pid 5561:tid 5576] [client 34.76.218.158:56887] [client 34.76.218.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.218.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVWmUoQssCZYQ4NexZ8IgAAAUw"]
[Wed Feb 18 14:44:25.052825 2026] [:error] [pid 5561:tid 5582] [client 34.26.93.59:58028] [client 34.26.93.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.93.59, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVfyUoQssCZYQ4NexaGzwAAAVI"]
[Wed Feb 18 14:44:30.967846 2026] [:error] [pid 5561:tid 5575] [client 34.26.93.59:58028] [client 34.26.93.59] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZVfzkoQssCZYQ4NexaG2AAAAUs"]
[Wed Feb 18 14:44:32.931643 2026] [:error] [pid 5561:tid 5574] [client 34.26.93.59:58028] [client 34.26.93.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.93.59, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVf0EoQssCZYQ4NexaG3QAAAUo"]
[Wed Feb 18 20:04:22.333493 2026] [autoindex:error] [pid 11610:tid 11677] [client 207.180.224.115:51186] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 19 04:24:05.368848 2026] [:error] [pid 48901:tid 48920] [client 20.89.40.149:6945] [client 20.89.40.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.89.40.149, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZYf5cixYz-lHbN0WBKqXgAAAAo"]
[Thu Feb 19 04:24:21.359089 2026] [:error] [pid 48901:tid 48918] [client 20.89.40.149:6945] [client 20.89.40.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-conten/upload/"] [unique_id "aZYf9cixYz-lHbN0WBKqewAAAAg"]
[Thu Feb 19 04:24:21.867298 2026] [:error] [pid 15513:tid 15523] [client 20.89.40.149:6915] [client 20.89.40.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-conten/upload/"] [unique_id "aZYf9cGTRTE022JWg196hgAAAQg"]
[Thu Feb 19 04:24:22.358484 2026] [:error] [pid 48902:tid 48941] [client 20.89.40.149:6570] [client 20.89.40.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-conten/upload/"] [unique_id "aZYf9mcJ-6aYRpRRFsUsyAAAAEM"]
[Thu Feb 19 04:24:23.016372 2026] [:error] [pid 48902:tid 48949] [client 20.89.40.149:6965] [client 20.89.40.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-conten/upload/"] [unique_id "aZYf92cJ-6aYRpRRFsUsywAAAEs"]
[Thu Feb 19 18:16:24.330475 2026] [:error] [pid 48901:tid 48927] [client 74.7.227.179:48136] [client 74.7.227.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.179, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZbi-MixYz-lHbN0WBKfeAAAABE"], referer: https://makifim.com.au/
[Sat Feb 21 05:15:50.294167 2026] [proxy_fcgi:error] [pid 40758:tid 40844] [client 103.4.122.14:42826] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Feb 21 05:15:54.390137 2026] [proxy_fcgi:error] [pid 40756:tid 40771] [client 103.4.122.14:42894] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Feb 21 08:59:11.103630 2026] [:error] [pid 40871:tid 40883] [client 185.193.157.163:35536] [client 185.193.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.163, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZkDXzqDikjdiOZeJyUJ2QAAAMo"]
[Sat Feb 21 08:59:18.767422 2026] [:error] [pid 40871:tid 40888] [client 185.193.157.163:35536] [client 185.193.157.163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZkDZjqDikjdiOZeJyUJ4AAAAM8"]
[Sat Feb 21 08:59:21.352963 2026] [:error] [pid 40871:tid 40873] [client 185.193.157.163:35536] [client 185.193.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.163, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZkDaTqDikjdiOZeJyUJ4wAAAMA"]
[Sun Feb 22 03:38:50.198289 2026] [:error] [pid 2227:tid 2237] [client 52.141.18.191:1347] [client 52.141.18.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.141.18.191, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZoJyuszznV67RYGQqfFXgAAAAU"]
[Sun Feb 22 03:39:07.683577 2026] [:error] [pid 2227:tid 2253] [client 52.141.18.191:1347] [client 52.141.18.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aZoJ2-szznV67RYGQqfFgAAAABU"]
[Sun Feb 22 03:39:08.267094 2026] [:error] [pid 2229:tid 2301] [client 52.141.18.191:1366] [client 52.141.18.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aZoJ3Nkw2fU5El6IvZ8PPgAAAI0"]
[Sun Feb 22 03:39:08.826463 2026] [:error] [pid 2401:tid 2416] [client 52.141.18.191:1363] [client 52.141.18.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aZoJ3C0pQdwhaUk_TfSYNAAAAMw"]
[Sun Feb 22 03:39:09.432423 2026] [:error] [pid 2228:tid 2265] [client 52.141.18.191:1375] [client 52.141.18.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aZoJ3S972GKOCFPFJg0UXAAAAEU"]
[Sun Feb 22 10:13:14.562980 2026] [:error] [pid 9589:tid 9674] [client 20.203.129.217:30002] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aZpmOtr-1mylR_FoXQWXHQAAAJc"]
[Sun Feb 22 10:13:15.041761 2026] [:error] [pid 12501:tid 12504] [client 20.203.129.217:31459] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aZpmO5icztrbvinWGXM7aQAAAUE"]
[Sun Feb 22 10:13:15.514255 2026] [:error] [pid 12501:tid 12507] [client 20.203.129.217:25945] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aZpmO5icztrbvinWGXM7bAAAAUQ"]
[Sun Feb 22 10:13:15.992504 2026] [:error] [pid 12501:tid 12520] [client 20.203.129.217:27000] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aZpmO5icztrbvinWGXM7bQAAAVE"]
[Sun Feb 22 10:13:16.466046 2026] [:error] [pid 9588:tid 9641] [client 20.203.129.217:29244] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aZpmPGjNBsxseiTcElnHOgAAAFE"]
[Sun Feb 22 10:13:16.943593 2026] [:error] [pid 10537:tid 10552] [client 20.203.129.217:26964] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aZpmPLgCiSojLQQBckhnqwAAAQ0"]
[Sun Feb 22 10:13:17.419596 2026] [:error] [pid 9589:tid 9668] [client 20.203.129.217:46469] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aZpmPdr-1mylR_FoXQWXIgAAAJE"]
[Sun Feb 22 10:13:17.896992 2026] [:error] [pid 10537:tid 10551] [client 20.203.129.217:25934] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aZpmPbgCiSojLQQBckhnrQAAAQw"]
[Sun Feb 22 10:13:18.369563 2026] [:error] [pid 9588:tid 9644] [client 20.203.129.217:32603] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aZpmPmjNBsxseiTcElnHOwAAAFQ"]
[Sun Feb 22 10:13:18.852504 2026] [:error] [pid 9695:tid 9716] [client 20.203.129.217:29967] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aZpmPlpPqolBNLmJ4eqyuQAAANM"]
[Sun Feb 22 10:13:19.324907 2026] [:error] [pid 10537:tid 10550] [client 20.203.129.217:15354] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aZpmP7gCiSojLQQBckhnrgAAAQs"]
[Sun Feb 22 10:13:19.796947 2026] [:error] [pid 10537:tid 10554] [client 20.203.129.217:15358] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aZpmP7gCiSojLQQBckhnsAAAAQ8"]
[Sun Feb 22 10:13:20.286951 2026] [:error] [pid 9589:tid 9662] [client 20.203.129.217:3047] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aZpmQNr-1mylR_FoXQWXJgAAAIs"]
[Sun Feb 22 10:13:20.763137 2026] [:error] [pid 10537:tid 10548] [client 20.203.129.217:43847] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aZpmQLgCiSojLQQBckhntQAAAQk"]
[Sun Feb 22 10:13:21.239013 2026] [:error] [pid 9588:tid 9648] [client 20.203.129.217:8411] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aZpmQWjNBsxseiTcElnHQAAAAFg"]
[Sun Feb 22 10:13:21.711003 2026] [:error] [pid 9589:tid 9672] [client 20.203.129.217:33984] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aZpmQdr-1mylR_FoXQWXKgAAAJU"]
[Sun Feb 22 10:13:22.184564 2026] [:error] [pid 10537:tid 10544] [client 20.203.129.217:9695] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a332.php"] [unique_id "aZpmQrgCiSojLQQBckhnuQAAAQU"]
[Sun Feb 22 10:13:22.666961 2026] [:error] [pid 10537:tid 10553] [client 20.203.129.217:32614] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a332.php"] [unique_id "aZpmQrgCiSojLQQBckhnugAAAQ4"]
[Sun Feb 22 10:13:23.139891 2026] [:error] [pid 12501:tid 12505] [client 20.203.129.217:34021] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a332.php"] [unique_id "aZpmQ5icztrbvinWGXM7fAAAAUI"]
[Sun Feb 22 10:13:23.611787 2026] [:error] [pid 12501:tid 12518] [client 20.203.129.217:33952] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a332.php"] [unique_id "aZpmQ5icztrbvinWGXM7fQAAAU8"]
[Sun Feb 22 10:13:24.085417 2026] [:error] [pid 10537:tid 10556] [client 20.203.129.217:3054] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "aZpmRLgCiSojLQQBckhnvQAAARE"]
[Sun Feb 22 10:13:24.558722 2026] [:error] [pid 12501:tid 12523] [client 20.203.129.217:34004] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "aZpmRJicztrbvinWGXM7fwAAAVQ"]
[Sun Feb 22 10:13:25.033595 2026] [:error] [pid 9588:tid 9631] [client 20.203.129.217:33989] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "aZpmRWjNBsxseiTcElnHQwAAAEc"]
[Sun Feb 22 10:13:25.507181 2026] [:error] [pid 9695:tid 9717] [client 20.203.129.217:46519] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "aZpmRVpPqolBNLmJ4eqywgAAANQ"]
[Sun Feb 22 10:13:25.982425 2026] [:error] [pid 9695:tid 9716] [client 20.203.129.217:34010] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f2.php"] [unique_id "aZpmRVpPqolBNLmJ4eqyxQAAANM"]
[Sun Feb 22 10:13:26.455503 2026] [:error] [pid 10537:tid 10541] [client 20.203.129.217:32377] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f2.php"] [unique_id "aZpmRrgCiSojLQQBckhnwwAAAQI"]
[Sun Feb 22 10:13:26.933195 2026] [:error] [pid 9695:tid 9721] [client 20.203.129.217:2432] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f2.php"] [unique_id "aZpmRlpPqolBNLmJ4eqyyQAAANg"]
[Sun Feb 22 10:13:27.410962 2026] [:error] [pid 9695:tid 9709] [client 20.203.129.217:8429] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f2.php"] [unique_id "aZpmR1pPqolBNLmJ4eqyzAAAAMw"]
[Sun Feb 22 10:13:27.885880 2026] [:error] [pid 12501:tid 12521] [client 20.203.129.217:46468] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "aZpmR5icztrbvinWGXM7gwAAAVI"]
[Sun Feb 22 10:13:28.388604 2026] [:error] [pid 9589:tid 9655] [client 20.203.129.217:33950] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "aZpmSNr-1mylR_FoXQWXNwAAAIQ"]
[Sun Feb 22 10:13:28.863767 2026] [:error] [pid 9695:tid 9703] [client 20.203.129.217:8429] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "aZpmSFpPqolBNLmJ4eqy1gAAAMY"]
[Sun Feb 22 10:13:29.353826 2026] [:error] [pid 10537:tid 10563] [client 20.203.129.217:17644] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "aZpmSbgCiSojLQQBckhnxgAAARg"]
[Sun Feb 22 10:13:29.826203 2026] [:error] [pid 10537:tid 10539] [client 20.203.129.217:14480] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aZpmSbgCiSojLQQBckhnyQAAAQA"]
[Sun Feb 22 10:13:30.303168 2026] [:error] [pid 10537:tid 10544] [client 20.203.129.217:8446] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aZpmSrgCiSojLQQBckhnywAAAQU"]
[Sun Feb 22 10:13:30.778144 2026] [:error] [pid 9695:tid 9719] [client 20.203.129.217:23059] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aZpmSlpPqolBNLmJ4eqy2gAAANY"]
[Sun Feb 22 10:13:31.267646 2026] [:error] [pid 9695:tid 9712] [client 20.203.129.217:18155] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aZpmS1pPqolBNLmJ4eqy3AAAAM8"]
[Sun Feb 22 10:13:31.740301 2026] [:error] [pid 10537:tid 10543] [client 20.203.129.217:14503] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thui.php"] [unique_id "aZpmS7gCiSojLQQBckhnzQAAAQQ"]
[Sun Feb 22 10:13:32.219689 2026] [:error] [pid 9589:tid 9655] [client 20.203.129.217:2486] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thui.php"] [unique_id "aZpmTNr-1mylR_FoXQWXSAAAAIQ"]
[Sun Feb 22 10:13:32.692715 2026] [:error] [pid 10537:tid 10561] [client 20.203.129.217:8404] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thui.php"] [unique_id "aZpmTLgCiSojLQQBckhnzgAAARY"]
[Sun Feb 22 10:13:33.166970 2026] [:error] [pid 12501:tid 12504] [client 20.203.129.217:2893] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thui.php"] [unique_id "aZpmTZicztrbvinWGXM7iQAAAUE"]
[Sun Feb 22 10:13:33.654516 2026] [:error] [pid 9695:tid 9717] [client 20.203.129.217:12329] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/selesai.php"] [unique_id "aZpmTVpPqolBNLmJ4eqy5gAAANQ"]
[Sun Feb 22 10:13:34.139542 2026] [:error] [pid 12501:tid 12526] [client 20.203.129.217:2436] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/selesai.php"] [unique_id "aZpmTpicztrbvinWGXM7jAAAAVc"]
[Sun Feb 22 10:13:34.619747 2026] [:error] [pid 9588:tid 9647] [client 20.203.129.217:38629] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/selesai.php"] [unique_id "aZpmTmjNBsxseiTcElnHSQAAAFc"]
[Sun Feb 22 10:13:35.095909 2026] [:error] [pid 9588:tid 9642] [client 20.203.129.217:14988] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/selesai.php"] [unique_id "aZpmT2jNBsxseiTcElnHSwAAAFI"]
[Sun Feb 22 10:13:35.572923 2026] [:error] [pid 9588:tid 9628] [client 20.203.129.217:2470] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aZpmT2jNBsxseiTcElnHTgAAAEQ"]
[Sun Feb 22 10:13:36.056831 2026] [:error] [pid 9695:tid 9710] [client 20.203.129.217:15866] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aZpmUFpPqolBNLmJ4eqy7wAAAM0"]
[Sun Feb 22 10:13:36.549768 2026] [:error] [pid 12501:tid 12519] [client 20.203.129.217:22753] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aZpmUJicztrbvinWGXM7jwAAAVA"]
[Sun Feb 22 10:13:37.020811 2026] [:error] [pid 12501:tid 12510] [client 20.203.129.217:15065] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aZpmUZicztrbvinWGXM7kgAAAUc"]
[Sun Feb 22 10:13:37.501018 2026] [:error] [pid 9588:tid 9643] [client 20.203.129.217:2722] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aZpmUWjNBsxseiTcElnHUQAAAFM"]
[Sun Feb 22 10:13:37.986293 2026] [:error] [pid 10537:tid 10547] [client 20.203.129.217:22734] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aZpmUbgCiSojLQQBckhn0wAAAQg"]
[Sun Feb 22 10:13:38.458338 2026] [:error] [pid 9695:tid 9703] [client 20.203.129.217:11301] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aZpmUlpPqolBNLmJ4eqy9AAAAMY"]
[Sun Feb 22 10:13:38.933760 2026] [:error] [pid 12501:tid 12512] [client 20.203.129.217:15052] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aZpmUpicztrbvinWGXM7lQAAAUk"]
[Sun Feb 22 10:13:39.418754 2026] [:error] [pid 9589:tid 9654] [client 20.203.129.217:11298] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aZpmU9r-1mylR_FoXQWXWAAAAIM"]
[Sun Feb 22 10:13:39.905610 2026] [:error] [pid 10537:tid 10550] [client 20.203.129.217:9203] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aZpmU7gCiSojLQQBckhn2AAAAQs"]
[Sun Feb 22 10:13:40.379605 2026] [:error] [pid 9695:tid 9707] [client 20.203.129.217:2943] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aZpmVFpPqolBNLmJ4eqy-QAAAMo"]
[Sun Feb 22 10:13:40.868379 2026] [:error] [pid 9588:tid 9631] [client 20.203.129.217:11313] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aZpmVGjNBsxseiTcElnHVwAAAEc"]
[Sun Feb 22 10:13:41.341505 2026] [:error] [pid 9588:tid 9625] [client 20.203.129.217:15594] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php"] [unique_id "aZpmVWjNBsxseiTcElnHWAAAAEE"]
[Sun Feb 22 10:13:41.816129 2026] [:error] [pid 10537:tid 10555] [client 20.203.129.217:12043] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php"] [unique_id "aZpmVbgCiSojLQQBckhn2wAAARA"]
[Sun Feb 22 10:13:42.290352 2026] [:error] [pid 9589:tid 9674] [client 20.203.129.217:15585] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ak.php"] [unique_id "aZpmVtr-1mylR_FoXQWXXQAAAJc"]
[Sun Feb 22 10:13:42.765052 2026] [:error] [pid 9589:tid 9663] [client 20.203.129.217:20777] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-style.php"] [unique_id "aZpmVtr-1mylR_FoXQWXYAAAAIw"]
[Sun Feb 22 10:13:43.236958 2026] [:error] [pid 9589:tid 9671] [client 20.203.129.217:13440] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-style.php"] [unique_id "aZpmV9r-1mylR_FoXQWXYQAAAJQ"]
[Sun Feb 22 10:13:43.708595 2026] [:error] [pid 10537:tid 10543] [client 20.203.129.217:20790] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-style.php"] [unique_id "aZpmV7gCiSojLQQBckhn4AAAAQQ"]
[Sun Feb 22 10:13:44.183589 2026] [:error] [pid 12501:tid 12520] [client 20.203.129.217:2499] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-style.php"] [unique_id "aZpmWJicztrbvinWGXM7mwAAAVE"]
[Sun Feb 22 10:13:44.676931 2026] [:error] [pid 10537:tid 10556] [client 20.203.129.217:2542] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x0x.php"] [unique_id "aZpmWLgCiSojLQQBckhn4wAAARE"]
[Sun Feb 22 10:13:45.149341 2026] [:error] [pid 12501:tid 12504] [client 20.203.129.217:13502] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x0x.php"] [unique_id "aZpmWZicztrbvinWGXM7nAAAAUE"]
[Sun Feb 22 10:13:45.623145 2026] [:error] [pid 9588:tid 9644] [client 20.203.129.217:22307] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x0x.php"] [unique_id "aZpmWWjNBsxseiTcElnHYAAAAFQ"]
[Sun Feb 22 10:13:46.095773 2026] [:error] [pid 10537:tid 10551] [client 20.203.129.217:13480] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x0x.php"] [unique_id "aZpmWrgCiSojLQQBckhn5AAAAQw"]
[Sun Feb 22 10:13:46.571616 2026] [:error] [pid 9695:tid 9715] [client 20.203.129.217:11350] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/knmt.php"] [unique_id "aZpmWlpPqolBNLmJ4eqzAwAAANI"]
[Sun Feb 22 10:13:47.043157 2026] [:error] [pid 9589:tid 9662] [client 20.203.129.217:13737] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/knmt.php"] [unique_id "aZpmW9r-1mylR_FoXQWXZQAAAIs"]
[Sun Feb 22 10:13:47.517714 2026] [:error] [pid 9587:tid 9606] [client 20.203.129.217:24068] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/knmt.php"] [unique_id "aZpmW-hqt7NXCp-NupFRlAAAAAo"]
[Sun Feb 22 10:13:47.991986 2026] [:error] [pid 9695:tid 9708] [client 20.203.129.217:30329] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/knmt.php"] [unique_id "aZpmW1pPqolBNLmJ4eqzBgAAAMs"]
[Sun Feb 22 10:13:48.464701 2026] [:error] [pid 9589:tid 9654] [client 20.203.129.217:11280] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aZpmXNr-1mylR_FoXQWXaAAAAIM"]
[Sun Feb 22 10:13:48.939797 2026] [:error] [pid 9588:tid 9629] [client 20.203.129.217:2501] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aZpmXGjNBsxseiTcElnHaAAAAEU"]
[Sun Feb 22 10:13:49.421675 2026] [:error] [pid 9695:tid 9706] [client 20.203.129.217:2513] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZpmXVpPqolBNLmJ4eqzDQAAAMk"]
[Sun Feb 22 10:13:49.896618 2026] [:error] [pid 10537:tid 10549] [client 20.203.129.217:12041] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZpmXbgCiSojLQQBckhn6QAAAQo"]
[Sun Feb 22 10:13:50.367478 2026] [:error] [pid 9589:tid 9663] [client 20.203.129.217:11542] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZpmXtr-1mylR_FoXQWXbwAAAIw"]
[Sun Feb 22 10:13:50.838729 2026] [:error] [pid 9588:tid 9646] [client 20.203.129.217:13566] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZpmXmjNBsxseiTcElnHaQAAAFY"]
[Sun Feb 22 10:13:51.311986 2026] [:error] [pid 10537:tid 10555] [client 20.203.129.217:24116] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZpmX7gCiSojLQQBckhn6wAAARA"]
[Sun Feb 22 10:13:51.789200 2026] [:error] [pid 9589:tid 9670] [client 20.203.129.217:2313] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZpmX9r-1mylR_FoXQWXdAAAAJM"]
[Sun Feb 22 10:13:52.263081 2026] [:error] [pid 9589:tid 9673] [client 20.203.129.217:21678] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZpmYNr-1mylR_FoXQWXdgAAAJY"]
[Sun Feb 22 10:13:52.736942 2026] [:error] [pid 9589:tid 9665] [client 20.203.129.217:21652] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZpmYNr-1mylR_FoXQWXewAAAI4"]
[Sun Feb 22 10:13:53.208944 2026] [:error] [pid 9589:tid 9653] [client 20.203.129.217:21672] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aZpmYdr-1mylR_FoXQWXgAAAAII"]
[Sun Feb 22 10:13:53.680956 2026] [:error] [pid 9587:tid 9606] [client 20.203.129.217:11575] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aZpmYehqt7NXCp-NupFRqAAAAAo"]
[Sun Feb 22 10:13:54.153618 2026] [:error] [pid 9695:tid 9710] [client 20.203.129.217:19250] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aZpmYlpPqolBNLmJ4eqzHwAAAM0"]
[Sun Feb 22 10:13:54.628202 2026] [:error] [pid 9589:tid 9672] [client 20.203.129.217:2306] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aZpmYtr-1mylR_FoXQWXmwAAAJU"]
[Sun Feb 22 10:13:55.102575 2026] [:error] [pid 9589:tid 9655] [client 20.203.129.217:31976] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/easy.php"] [unique_id "aZpmY9r-1mylR_FoXQWXngAAAIQ"]
[Sun Feb 22 10:13:55.574603 2026] [:error] [pid 10537:tid 10556] [client 20.203.129.217:13553] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/easy.php"] [unique_id "aZpmY7gCiSojLQQBckhn7wAAARE"]
[Sun Feb 22 10:13:56.064704 2026] [:error] [pid 9588:tid 9635] [client 20.203.129.217:16025] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/easy.php"] [unique_id "aZpmZGjNBsxseiTcElnHmQAAAEs"]
[Sun Feb 22 10:13:56.566722 2026] [:error] [pid 9589:tid 9651] [client 20.203.129.217:13522] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "aZpmZNr-1mylR_FoXQWXowAAAIA"]
[Sun Feb 22 10:13:57.041310 2026] [:error] [pid 12501:tid 12507] [client 20.203.129.217:20778] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "aZpmZZicztrbvinWGXM71gAAAUQ"]
[Sun Feb 22 10:13:57.540239 2026] [:error] [pid 9588:tid 9634] [client 20.203.129.217:19808] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shlo.php"] [unique_id "aZpmZWjNBsxseiTcElnHnQAAAEo"]
[Sun Feb 22 10:13:58.013442 2026] [:error] [pid 10537:tid 10551] [client 20.203.129.217:16268] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shlo.php"] [unique_id "aZpmZrgCiSojLQQBckhn8QAAAQw"]
[Sun Feb 22 10:13:58.497127 2026] [:error] [pid 9587:tid 9605] [client 20.203.129.217:51847] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZpmZuhqt7NXCp-NupFR5QAAAAk"]
[Sun Feb 22 10:13:58.969405 2026] [:error] [pid 12501:tid 12510] [client 20.203.129.217:40597] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZpmZpicztrbvinWGXM72gAAAUc"]
[Sun Feb 22 10:13:59.443339 2026] [:error] [pid 9587:tid 9616] [client 20.203.129.217:20743] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZpmZ-hqt7NXCp-NupFR6AAAABQ"]
[Sun Feb 22 10:13:59.915957 2026] [:error] [pid 10537:tid 10546] [client 20.203.129.217:17362] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZpmZ7gCiSojLQQBckhn9AAAAQc"]
[Sun Feb 22 10:14:00.391104 2026] [:error] [pid 9587:tid 9615] [client 20.203.129.217:24071] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aZpmaOhqt7NXCp-NupFR7AAAABM"]
[Sun Feb 22 10:14:00.891756 2026] [:error] [pid 12501:tid 12524] [client 20.203.129.217:51879] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aZpmaJicztrbvinWGXM73wAAAVU"]
[Sun Feb 22 10:14:01.368632 2026] [:error] [pid 9695:tid 9706] [client 20.203.129.217:17353] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aZpmaVpPqolBNLmJ4eqzMgAAAMk"]
[Sun Feb 22 10:14:01.844332 2026] [:error] [pid 12501:tid 12510] [client 20.203.129.217:18946] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mar.php"] [unique_id "aZpmaZicztrbvinWGXM75wAAAUc"]
[Sun Feb 22 10:14:02.316638 2026] [:error] [pid 12501:tid 12519] [client 20.203.129.217:34595] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws69.php"] [unique_id "aZpmapicztrbvinWGXM76QAAAVA"]
[Sun Feb 22 10:14:02.800203 2026] [:error] [pid 9589:tid 9657] [client 20.203.129.217:39281] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws69.php"] [unique_id "aZpmatr-1mylR_FoXQWXqQAAAIY"]
[Sun Feb 22 10:14:03.273529 2026] [:error] [pid 10537:tid 10559] [client 20.203.129.217:56514] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws69.php"] [unique_id "aZpma7gCiSojLQQBckhn-AAAARQ"]
[Sun Feb 22 10:14:03.748453 2026] [:error] [pid 9589:tid 9675] [client 20.203.129.217:2436] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws69.php"] [unique_id "aZpma9r-1mylR_FoXQWXqgAAAJg"]
[Sun Feb 22 10:14:04.229024 2026] [:error] [pid 9588:tid 9629] [client 20.203.129.217:16264] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "aZpmbGjNBsxseiTcElnHoQAAAEU"]
[Sun Feb 22 10:14:04.703583 2026] [:error] [pid 12501:tid 12518] [client 20.203.129.217:13187] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "aZpmbJicztrbvinWGXM78QAAAU8"]
[Sun Feb 22 10:14:05.182469 2026] [:error] [pid 9589:tid 9668] [client 20.203.129.217:32563] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "aZpmbdr-1mylR_FoXQWXrgAAAJE"]
[Sun Feb 22 10:14:05.653954 2026] [:error] [pid 10537:tid 10557] [client 20.203.129.217:16308] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "aZpmbbgCiSojLQQBckhn-gAAARI"]
[Sun Feb 22 10:14:06.142786 2026] [:error] [pid 9588:tid 9633] [client 20.203.129.217:13043] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aZpmbmjNBsxseiTcElnHqQAAAEk"]
[Sun Feb 22 10:14:06.615145 2026] [:error] [pid 9695:tid 9707] [client 20.203.129.217:13012] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aZpmblpPqolBNLmJ4eqzPQAAAMo"]
[Sun Feb 22 10:14:07.087884 2026] [:error] [pid 9695:tid 9719] [client 20.203.129.217:2358] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aZpmb1pPqolBNLmJ4eqzPwAAANY"]
[Sun Feb 22 10:14:07.565179 2026] [:error] [pid 9587:tid 9611] [client 20.203.129.217:51855] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aZpmb-hqt7NXCp-NupFR-wAAAA8"]
[Sun Feb 22 10:14:08.041764 2026] [:error] [pid 9587:tid 9604] [client 20.203.129.217:34612] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aZpmcOhqt7NXCp-NupFR_QAAAAg"]
[Sun Feb 22 10:14:08.514123 2026] [:error] [pid 9695:tid 9715] [client 20.203.129.217:13008] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZpmcFpPqolBNLmJ4eqzRQAAANI"]
[Sun Feb 22 10:14:08.985995 2026] [:error] [pid 9587:tid 9605] [client 20.203.129.217:21641] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZpmcOhqt7NXCp-NupFSAQAAAAk"]
[Sun Feb 22 10:14:09.458036 2026] [:error] [pid 9588:tid 9640] [client 20.203.129.217:37102] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZpmcWjNBsxseiTcElnHqwAAAFA"]
[Sun Feb 22 10:14:09.934312 2026] [:error] [pid 9695:tid 9712] [client 20.203.129.217:13218] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZpmcVpPqolBNLmJ4eqzRwAAAM8"]
[Sun Feb 22 10:14:10.407207 2026] [:error] [pid 9695:tid 9704] [client 20.203.129.217:12999] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-link10.php"] [unique_id "aZpmclpPqolBNLmJ4eqzSQAAAMc"]
[Sun Feb 22 10:14:10.894581 2026] [:error] [pid 9695:tid 9719] [client 20.203.129.217:40592] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-link10.php"] [unique_id "aZpmclpPqolBNLmJ4eqzUAAAANY"]
[Sun Feb 22 10:14:11.366439 2026] [:error] [pid 9589:tid 9673] [client 20.203.129.217:19825] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-link10.php"] [unique_id "aZpmc9r-1mylR_FoXQWXsAAAAJY"]
[Sun Feb 22 10:14:11.838523 2026] [:error] [pid 9589:tid 9654] [client 20.203.129.217:26308] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-link10.php"] [unique_id "aZpmc9r-1mylR_FoXQWXsQAAAIM"]
[Sun Feb 22 10:14:42.752636 2026] [:error] [pid 12501:tid 12503] [client 20.203.129.217:19781] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aZpmkpicztrbvinWGXM8QAAAAUA"]
[Sun Feb 22 10:14:43.704720 2026] [:error] [pid 10537:tid 10548] [client 20.203.129.217:27869] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aZpmk7gCiSojLQQBckhoGgAAAQk"]
[Sun Feb 22 10:14:44.651046 2026] [:error] [pid 12501:tid 12523] [client 20.203.129.217:39660] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aZpmlJicztrbvinWGXM8RQAAAVQ"]
[Sun Feb 22 10:14:45.599396 2026] [:error] [pid 10537:tid 10551] [client 20.203.129.217:32275] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aZpmlbgCiSojLQQBckhoHQAAAQw"]
[Sun Feb 22 10:14:45.837038 2026] [:error] [pid 9588:tid 9627] [client 20.203.129.217:32531] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aZpmlWjNBsxseiTcElnH_wAAAEM"]
[Sun Feb 22 10:14:46.310663 2026] [:error] [pid 9587:tid 9618] [client 20.203.129.217:16611] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aZpmluhqt7NXCp-NupFSKwAAABY"]
[Sun Feb 22 10:14:46.790566 2026] [:error] [pid 9587:tid 9617] [client 20.203.129.217:2599] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aZpmluhqt7NXCp-NupFSMQAAABU"]
[Sun Feb 22 10:14:47.269928 2026] [:error] [pid 10537:tid 10547] [client 20.203.129.217:41151] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2a2ck.php"] [unique_id "aZpml7gCiSojLQQBckhoHwAAAQg"]
[Sun Feb 22 10:14:47.742130 2026] [:error] [pid 12501:tid 12510] [client 20.203.129.217:39617] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cytyr.php"] [unique_id "aZpml5icztrbvinWGXM8SwAAAUc"]
[Sun Feb 22 10:14:48.219480 2026] [:error] [pid 10537:tid 10542] [client 20.203.129.217:41100] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cytyr.php"] [unique_id "aZpmmLgCiSojLQQBckhoIQAAAQM"]
[Sun Feb 22 10:14:48.691815 2026] [:error] [pid 12501:tid 12524] [client 20.203.129.217:30507] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cytyr.php"] [unique_id "aZpmmJicztrbvinWGXM8UwAAAVU"]
[Sun Feb 22 10:14:49.178545 2026] [:error] [pid 9588:tid 9635] [client 20.203.129.217:16793] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cytyr.php"] [unique_id "aZpmmWjNBsxseiTcElnIAwAAAEs"]
[Sun Feb 22 10:14:49.650593 2026] [:error] [pid 9587:tid 9620] [client 20.203.129.217:27819] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "aZpmmehqt7NXCp-NupFSNgAAABg"]
[Sun Feb 22 10:14:50.134075 2026] [:error] [pid 9695:tid 9698] [client 20.203.129.217:16821] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "aZpmmlpPqolBNLmJ4eqznQAAAME"]
[Sun Feb 22 10:14:50.606687 2026] [:error] [pid 9695:tid 9708] [client 20.203.129.217:16771] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "aZpmmlpPqolBNLmJ4eqznwAAAMs"]
[Sun Feb 22 10:14:51.084895 2026] [:error] [pid 12501:tid 12519] [client 20.203.129.217:17098] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "aZpmm5icztrbvinWGXM8WAAAAVA"]
[Sun Feb 22 10:14:51.556874 2026] [:error] [pid 12501:tid 12520] [client 20.203.129.217:14811] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aZpmm5icztrbvinWGXM8WQAAAVE"]
[Sun Feb 22 10:14:52.030221 2026] [:error] [pid 9588:tid 9642] [client 20.203.129.217:28664] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aZpmnGjNBsxseiTcElnICQAAAFI"]
[Sun Feb 22 10:14:52.518700 2026] [:error] [pid 9695:tid 9705] [client 20.203.129.217:28662] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aZpmnFpPqolBNLmJ4eqzpgAAAMg"]
[Sun Feb 22 10:14:52.990743 2026] [:error] [pid 12501:tid 12522] [client 20.203.129.217:28638] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aZpmnJicztrbvinWGXM8XQAAAVM"]
[Sun Feb 22 10:14:53.485686 2026] [:error] [pid 9695:tid 9721] [client 20.203.129.217:28612] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aZpmnVpPqolBNLmJ4eqzqgAAANg"]
[Sun Feb 22 10:14:53.972568 2026] [:error] [pid 9695:tid 9720] [client 20.203.129.217:26687] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aZpmnVpPqolBNLmJ4eqzrwAAANc"]
[Sun Feb 22 10:14:54.445695 2026] [:error] [pid 9588:tid 9629] [client 20.203.129.217:26676] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aZpmnmjNBsxseiTcElnIDQAAAEU"]
[Sun Feb 22 10:14:54.918665 2026] [:error] [pid 9587:tid 9608] [client 20.203.129.217:2579] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aZpmnuhqt7NXCp-NupFSUQAAAAw"]
[Sun Feb 22 10:14:55.391067 2026] [:error] [pid 9588:tid 9630] [client 20.203.129.217:26680] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aZpmn2jNBsxseiTcElnIDwAAAEY"]
[Sun Feb 22 10:14:55.863529 2026] [:error] [pid 9588:tid 9627] [client 20.203.129.217:10862] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aZpmn2jNBsxseiTcElnIEAAAAEM"]
[Sun Feb 22 10:14:56.335986 2026] [:error] [pid 9589:tid 9665] [client 20.203.129.217:17110] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aZpmoNr-1mylR_FoXQWYIwAAAI4"]
[Sun Feb 22 10:14:56.809568 2026] [:error] [pid 9588:tid 9646] [client 20.203.129.217:27450] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "aZpmoGjNBsxseiTcElnIFQAAAFY"]
[Sun Feb 22 10:14:57.285245 2026] [:error] [pid 9695:tid 9697] [client 20.203.129.217:11029] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aZpmoVpPqolBNLmJ4eqzsQAAAMA"]
[Sun Feb 22 10:14:57.757671 2026] [:error] [pid 9695:tid 9698] [client 20.203.129.217:34680] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aZpmoVpPqolBNLmJ4eqzswAAAME"]
[Sun Feb 22 10:14:58.238459 2026] [:error] [pid 9587:tid 9612] [client 20.203.129.217:14821] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aZpmouhqt7NXCp-NupFSVQAAABA"]
[Sun Feb 22 10:14:58.714194 2026] [:error] [pid 9588:tid 9629] [client 20.203.129.217:30471] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aZpmomjNBsxseiTcElnIHgAAAEU"]
[Sun Feb 22 10:14:59.188882 2026] [:error] [pid 9695:tid 9714] [client 20.203.129.217:14736] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws68.php"] [unique_id "aZpmo1pPqolBNLmJ4eqzuAAAANE"]
[Sun Feb 22 10:14:59.665631 2026] [:error] [pid 10537:tid 10553] [client 20.203.129.217:2192] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws68.php"] [unique_id "aZpmo7gCiSojLQQBckhoMwAAAQ4"]
[Sun Feb 22 10:15:00.137694 2026] [:error] [pid 9589:tid 9662] [client 20.203.129.217:2102] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws68.php"] [unique_id "aZpmpNr-1mylR_FoXQWYJgAAAIs"]
[Sun Feb 22 10:15:00.618222 2026] [:error] [pid 12501:tid 12525] [client 20.203.129.217:14784] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws68.php"] [unique_id "aZpmpJicztrbvinWGXM8bAAAAVY"]
[Sun Feb 22 10:15:01.093767 2026] [:error] [pid 12501:tid 12513] [client 20.203.129.217:20322] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w1px.php"] [unique_id "aZpmpZicztrbvinWGXM8bQAAAUo"]
[Sun Feb 22 10:15:01.573012 2026] [:error] [pid 10537:tid 10546] [client 20.203.129.217:14557] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w1px.php"] [unique_id "aZpmpbgCiSojLQQBckhoNQAAAQc"]
[Sun Feb 22 10:15:02.046630 2026] [:error] [pid 9589:tid 9670] [client 20.203.129.217:2234] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w1px.php"] [unique_id "aZpmptr-1mylR_FoXQWYKgAAAJM"]
[Sun Feb 22 10:15:02.522428 2026] [:error] [pid 9588:tid 9646] [client 20.203.129.217:7456] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w1px.php"] [unique_id "aZpmpmjNBsxseiTcElnIJAAAAFY"]
[Sun Feb 22 10:15:02.994224 2026] [:error] [pid 10537:tid 10560] [client 20.203.129.217:20244] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aZpmprgCiSojLQQBckhoOgAAARU"]
[Sun Feb 22 10:15:03.472456 2026] [:error] [pid 12501:tid 12507] [client 20.203.129.217:7477] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galer.php"] [unique_id "aZpmp5icztrbvinWGXM8cAAAAUQ"]
[Sun Feb 22 10:15:03.944420 2026] [:error] [pid 10537:tid 10554] [client 20.203.129.217:20261] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galer.php"] [unique_id "aZpmp7gCiSojLQQBckhoPAAAAQ8"]
[Sun Feb 22 10:15:04.418217 2026] [:error] [pid 10537:tid 10562] [client 20.203.129.217:20263] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galer.php"] [unique_id "aZpmqLgCiSojLQQBckhoPgAAARc"]
[Sun Feb 22 10:15:04.891634 2026] [:error] [pid 10537:tid 10544] [client 20.203.129.217:16786] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galer.php"] [unique_id "aZpmqLgCiSojLQQBckhoQQAAAQU"]
[Sun Feb 22 10:15:05.363248 2026] [:error] [pid 10537:tid 10540] [client 20.203.129.217:9646] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aZpmqbgCiSojLQQBckhoRQAAAQE"]
[Sun Feb 22 10:15:05.835799 2026] [:error] [pid 9589:tid 9674] [client 20.203.129.217:14589] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aZpmqdr-1mylR_FoXQWYLgAAAJc"]
[Sun Feb 22 10:15:06.315262 2026] [:error] [pid 9587:tid 9617] [client 20.203.129.217:7443] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aZpmquhqt7NXCp-NupFSYwAAABU"]
[Sun Feb 22 10:15:06.789702 2026] [:error] [pid 12501:tid 12512] [client 20.203.129.217:20281] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aZpmqpicztrbvinWGXM8dgAAAUk"]
[Sun Feb 22 10:15:07.262798 2026] [:error] [pid 9695:tid 9705] [client 20.203.129.217:10840] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aZpmq1pPqolBNLmJ4eqzwgAAAMg"]
[Sun Feb 22 10:15:07.735768 2026] [:error] [pid 9587:tid 9603] [client 20.203.129.217:36361] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aZpmq-hqt7NXCp-NupFSZgAAAAc"]
[Sun Feb 22 10:15:08.211165 2026] [:error] [pid 10537:tid 10562] [client 20.203.129.217:19993] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aZpmrLgCiSojLQQBckhoUAAAARc"]
[Sun Feb 22 10:15:08.686129 2026] [:error] [pid 9588:tid 9627] [client 20.203.129.217:14536] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aZpmrGjNBsxseiTcElnILAAAAEM"]
[Sun Feb 22 10:15:09.160737 2026] [:error] [pid 9587:tid 9619] [client 20.203.129.217:34649] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aZpmrehqt7NXCp-NupFSZwAAABc"]
[Sun Feb 22 10:15:09.636701 2026] [:error] [pid 9695:tid 9720] [client 20.203.129.217:27394] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aZpmrVpPqolBNLmJ4eqzygAAANc"]
[Sun Feb 22 10:15:10.119112 2026] [:error] [pid 10537:tid 10551] [client 20.203.129.217:37852] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aZpmrrgCiSojLQQBckhoVQAAAQw"]
[Sun Feb 22 10:15:10.590375 2026] [:error] [pid 10537:tid 10553] [client 20.203.129.217:33536] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aZpmrrgCiSojLQQBckhoVwAAAQ4"]
[Sun Feb 22 10:15:11.061866 2026] [:error] [pid 10537:tid 10552] [client 20.203.129.217:2186] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/global.php"] [unique_id "aZpmr7gCiSojLQQBckhoWgAAAQ0"]
[Sun Feb 22 10:15:11.533398 2026] [:error] [pid 9589:tid 9673] [client 20.203.129.217:34676] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/global.php"] [unique_id "aZpmr9r-1mylR_FoXQWYOQAAAJY"]
[Sun Feb 22 10:15:12.006717 2026] [:error] [pid 9588:tid 9640] [client 20.203.129.217:37826] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/global.php"] [unique_id "aZpmsGjNBsxseiTcElnIMgAAAFA"]
[Sun Feb 22 10:15:12.479298 2026] [:error] [pid 9695:tid 9715] [client 20.203.129.217:7453] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/global.php"] [unique_id "aZpmsFpPqolBNLmJ4eqz3AAAANI"]
[Sun Feb 22 10:15:12.955438 2026] [:error] [pid 9588:tid 9648] [client 20.203.129.217:19522] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aZpmsGjNBsxseiTcElnINAAAAFg"]
[Sun Feb 22 10:15:13.426486 2026] [:error] [pid 9589:tid 9670] [client 20.203.129.217:31923] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aZpmsdr-1mylR_FoXQWYOwAAAJM"]
[Sun Feb 22 10:15:13.901536 2026] [:error] [pid 12501:tid 12520] [client 20.203.129.217:9643] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aZpmsZicztrbvinWGXM8fQAAAVE"]
[Sun Feb 22 10:15:14.372887 2026] [:error] [pid 9695:tid 9718] [client 20.203.129.217:34650] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aZpmslpPqolBNLmJ4eqz4AAAANU"]
[Sun Feb 22 10:26:47.992157 2026] [autoindex:error] [pid 9589:tid 9674] [client 37.60.228.196:55534] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 22 14:27:37.039470 2026] [:error] [pid 9589:tid 9672] [client 34.11.45.86:53984] [client 34.11.45.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.45.86, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZqh2dr-1mylR_FoXQXhGgAAAJU"]
[Sun Feb 22 14:27:42.388418 2026] [:error] [pid 9589:tid 9665] [client 34.11.45.86:53984] [client 34.11.45.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZqh3tr-1mylR_FoXQXhIgAAAI4"]
[Sun Feb 22 14:27:44.280072 2026] [:error] [pid 9589:tid 9657] [client 34.11.45.86:53984] [client 34.11.45.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.45.86, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZqh4Nr-1mylR_FoXQXhJQAAAIY"]
[Sun Feb 22 18:03:35.460003 2026] [:error] [pid 10537:tid 10551] [client 34.182.94.104:50707] [client 34.182.94.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.94.104, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZrUd7gCiSojLQQBckjbKgAAAQw"]
[Sun Feb 22 18:03:42.162886 2026] [:error] [pid 10537:tid 10543] [client 34.182.94.104:50707] [client 34.182.94.104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZrUfrgCiSojLQQBckjbLwAAAQQ"]
[Sun Feb 22 18:03:44.048679 2026] [:error] [pid 10537:tid 10544] [client 34.182.94.104:50707] [client 34.182.94.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.94.104, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZrUgLgCiSojLQQBckjbMQAAAQU"]
[Sun Feb 22 18:21:20.560013 2026] [autoindex:error] [pid 9589:tid 9674] [client 161.97.90.16:55951] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 22 19:08:23.528532 2026] [:error] [pid 9589:tid 9675] [client 136.107.8.142:59322] [client 136.107.8.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.8.142, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZrjp9r-1mylR_FoXQUqpwAAAJg"]
[Sun Feb 22 19:08:29.066756 2026] [:error] [pid 9589:tid 9671] [client 136.107.8.142:59322] [client 136.107.8.142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZrjrdr-1mylR_FoXQUqzAAAAJQ"]
[Sun Feb 22 19:08:31.119651 2026] [:error] [pid 9589:tid 9663] [client 136.107.8.142:59322] [client 136.107.8.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.8.142, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZrjr9r-1mylR_FoXQUq7QAAAIw"]
[Mon Feb 23 02:06:49.942048 2026] [:error] [pid 4806:tid 4820] [client 20.92.234.66:6452] [client 20.92.234.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.92.234.66, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZtFufFTHI_ud-cTYbQNAQAAAQw"]
[Mon Feb 23 02:07:02.532500 2026] [:error] [pid 4806:tid 4820] [client 20.92.234.66:6452] [client 20.92.234.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aZtFxvFTHI_ud-cTYbQNKQAAAQw"]
[Mon Feb 23 02:07:02.597139 2026] [:error] [pid 28558:tid 28564] [client 20.92.234.66:16101] [client 20.92.234.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aZtFxidFHR5e1Gd10veTVgAAAMQ"]
[Mon Feb 23 02:07:02.661522 2026] [:error] [pid 4806:tid 4828] [client 20.92.234.66:16084] [client 20.92.234.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aZtFxvFTHI_ud-cTYbQNLAAAARQ"]
[Mon Feb 23 02:07:02.755751 2026] [:error] [pid 28424:tid 28433] [client 20.92.234.66:7105] [client 20.92.234.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aZtFxgBAZT_BJOxE-Z46WwAAAAU"]
[Mon Feb 23 04:16:15.260253 2026] [:error] [pid 56133:tid 56158] [client 20.97.243.26:11586] [client 20.97.243.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-fmfile.php"] [unique_id "aZtkD9hBvtDnaqF5Ql7fhgAAARc"]
[Mon Feb 23 04:16:16.103311 2026] [:error] [pid 54381:tid 54452] [client 20.97.243.26:22564] [client 20.97.243.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-fmfile.php"] [unique_id "aZtkELZA3T28ex6RStpREQAAAIo"]
[Mon Feb 23 04:16:16.932460 2026] [:error] [pid 54381:tid 54451] [client 20.97.243.26:23191] [client 20.97.243.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-fmfile.php"] [unique_id "aZtkELZA3T28ex6RStpRFQAAAIk"]
[Mon Feb 23 04:16:17.761087 2026] [:error] [pid 56133:tid 56146] [client 20.97.243.26:41416] [client 20.97.243.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-fmfile.php"] [unique_id "aZtkEdhBvtDnaqF5Ql7fiwAAAQs"]
[Mon Feb 23 23:02:14.825556 2026] [:error] [pid 39504:tid 39514] [client 152.232.49.113:39588] [client 152.232.49.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.232.49.113, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZxr9nLcHpOlI9gwwJonHgAAAUg"], referer: https://makifim.com.au/
[Mon Feb 23 23:02:32.441826 2026] [:error] [pid 25380:tid 25387] [client 152.232.49.113:34988] [client 152.232.49.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.232.49.113, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aZxsCKKrc8yFQ8fy78pqGQAAAMU"], referer: https://makifim.com.au/
[Tue Feb 24 00:37:14.671485 2026] [proxy_fcgi:error] [pid 29424:tid 29441] [client 103.4.122.14:59248] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES ('wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriComparator.php','/home/makifimc/public_html/wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriComparator.php',UNHEX('4155875da0f2c0586cb3d47007005cc2'),0,UNHEX('7C1FE9F70FBCC859706F057A3974E075'),UNHEX('244CBCA8AE16313B7A71BD8CAD2A66BF9BBA01F44F709334C6A0177C7B139EDA')),('wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriNormalizer.php','/home/makifimc/public_html/wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriNormalizer.php',UNHEX('0ac1ff14fe8307130c4d3fd88e451dab'),0,UNHEX('616C825A8DB2462D081E45A97A4B3949'),UNHEX('20C5B9FF692FE5EFB978FA4D4B347F9FAF2F2F3B2B1B630C387D0E2B6BA26CFF')),('wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriResolver.php','/home/makifimc/public_html/wp-content/plugins/updraftp...PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('lastScanCompleted', 'Insert query failed: INSERT INTO wp_wffilemods (filename,real_path,filenameMD5,knownFile,newMD5,SHAC) VALUES (\\'wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriComparator.php\\',\\'/home/makifimc/public_html/wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriComparator.php\\',UNHEX(\\'4155875da0f2c0586cb3d47007005cc2\\'),0,UNHEX(\\'7C1FE9F70FBCC859706F057A3974E075\\'),UNHEX(\\'244CBCA8AE16313B7A71BD8CAD2A66BF9BBA01F44F709334C6A0177C7B139EDA\\')),(\\'wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriNormalizer.php\\',\\'/home/makifimc/public_html/wp-content/plugins/updraftplus/vendor/guzzlehttp/psr7/src/UriNormalizer.php\\',UNHEX(\\'0ac1ff14fe8307130c4d3fd88e451dab\\'),0,UNHEX(\\'616C825A8DB2462D081E45A97A4B3949\\'),UNHEX(\\'20C5B9FF692FE5EFB978FA4D4B347F9FAF2F2F3B2B1B630C387D0E2B6BA26CFF\\')),(\\'wp-content/p...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE wp_wfnotifications SET priority = 502, ctime = 1771864633, html = '<a href=\\"https://makifim.com.au/wp-admin/admin.php?page=WordfenceScan\\">1 issue found in most recent scan</a>', links = '[]' WHERE id = 'site-AEAAAAA' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfScanEngine->go, wfScanEngine::refreshScanNotification, wfNotification->__construct'
[Tue Feb 24 02:13:03.167197 2026] [:error] [pid 29424:tid 29431] [client 94.247.172.129:49578] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "aZyYr_gElGDq6B8YX7BqyQAAAMU"]
[Tue Feb 24 02:54:27.887480 2026] [:error] [pid 60063:tid 60069] [client 2.58.56.178:60113] [client 2.58.56.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aZyiY0_6t1uQomVVdUOQRAAAAQQ"]
[Tue Feb 24 02:54:28.509857 2026] [:error] [pid 29289:tid 29310] [client 2.58.56.178:64910] [client 2.58.56.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aZyiZPSAX3I9FAhm7jnTjAAAABE"]
[Tue Feb 24 02:54:29.466169 2026] [:error] [pid 29424:tid 29443] [client 2.58.56.178:60144] [client 2.58.56.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aZyiZfgElGDq6B8YX7B_JAAAANE"]
[Tue Feb 24 02:54:32.363424 2026] [:error] [pid 29290:tid 29371] [client 2.58.56.178:49526] [client 2.58.56.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aZyiaCURJ6Xg7pEW8XYrbgAAAE0"]
[Tue Feb 24 02:56:21.505971 2026] [authz_core:error] [pid 60063:tid 60071] [client 101.198.0.151:48332] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/photo-gallery/readme.txt
[Tue Feb 24 08:42:27.398457 2026] [autoindex:error] [pid 41188:tid 41205] [client 84.247.187.54:55866] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 24 12:28:52.906791 2026] [:error] [pid 37539:tid 37589] [client 194.26.192.238:56572] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aZ0pBHEnr46jUQep9z8TMAAAAE4"]
[Tue Feb 24 12:28:53.557133 2026] [:error] [pid 41188:tid 41207] [client 194.26.192.238:53283] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aZ0pBQWRg7szIRhA0Wj7wQAAAVA"]
[Tue Feb 24 12:28:54.163893 2026] [:error] [pid 37538:tid 37567] [client 194.26.192.238:60426] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aZ0pBiynTiHZ9J0Y2naaaAAAABM"]
[Tue Feb 24 12:28:56.742131 2026] [:error] [pid 34175:tid 34187] [client 194.26.192.238:58794] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aZ0pCHNLnkJcHQ-bNtVgSgAAAYo"]
[Tue Feb 24 19:14:59.985064 2026] [autoindex:error] [pid 34750:tid 34804] [client 161.97.90.153:52647] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 24 20:03:25.646868 2026] [:error] [pid 16867:tid 16881] [client 173.239.214.48:39077] [client 173.239.214.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZ2TjdTc72Oc9LHzeyJ60gAAA4s"]
[Tue Feb 24 20:03:31.255230 2026] [:error] [pid 16805:tid 16818] [client 173.239.214.72:39671] [client 173.239.214.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZ2Tk6YuGciBkyQZTxUOzQAAAws"]
[Tue Feb 24 20:03:42.362490 2026] [:error] [pid 16867:tid 16881] [client 173.239.214.51:54285] [client 173.239.214.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZ2TntTc72Oc9LHzeyJ65QAAA4s"]
[Tue Feb 24 20:03:50.669109 2026] [:error] [pid 16868:tid 16916] [client 173.239.214.30:48305] [client 173.239.214.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZ2TpidEecEcYKsh8PTqIQAAA9M"]
[Tue Feb 24 20:04:02.052874 2026] [:error] [pid 16868:tid 16899] [client 173.239.214.64:64907] [client 173.239.214.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZ2TsidEecEcYKsh8PTqLwAAA8I"]
[Tue Feb 24 20:04:05.209404 2026] [:error] [pid 16776:tid 16778] [client 173.239.214.34:31675] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZ2TtdimHlyQNis9RPva-gAAAsA"]
[Tue Feb 24 20:04:05.818400 2026] [:error] [pid 16868:tid 16911] [client 173.239.214.34:60369] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZ2TtSdEecEcYKsh8PTqMwAAA84"]
[Tue Feb 24 20:04:07.860488 2026] [:error] [pid 34751:tid 34824] [client 173.239.214.69:32609] [client 173.239.214.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZ2Tt87SW-lfeVKMPq80mgAAAdA"]
[Tue Feb 24 20:04:08.449238 2026] [:error] [pid 16805:tid 16820] [client 173.239.214.74:61037] [client 173.239.214.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZ2TuKYuGciBkyQZTxUO5wAAAw0"]
[Tue Feb 24 20:04:08.998755 2026] [:error] [pid 16805:tid 16830] [client 173.239.214.74:20797] [client 173.239.214.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZ2TuKYuGciBkyQZTxUO6gAAAxc"]
[Tue Feb 24 20:04:12.133336 2026] [:error] [pid 16805:tid 16823] [client 173.239.214.58:38877] [client 173.239.214.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZ2TvKYuGciBkyQZTxUO8QAAAxA"]
[Tue Feb 24 20:04:15.459589 2026] [:error] [pid 16805:tid 16830] [client 173.239.214.36:36681] [client 173.239.214.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aZ2Tv6YuGciBkyQZTxUO9AAAAxc"]
[Tue Feb 24 20:04:21.179524 2026] [:error] [pid 34750:tid 34788] [client 173.239.214.38:46565] [client 173.239.214.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZ2TxeaZ-Iv_wvbRkKIWiAAAAUc"]
[Tue Feb 24 20:04:23.836896 2026] [:error] [pid 34751:tid 34830] [client 173.239.214.67:42177] [client 173.239.214.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZ2Tx87SW-lfeVKMPq80nQAAAdY"]
[Tue Feb 24 20:04:26.901926 2026] [:error] [pid 16868:tid 16915] [client 173.239.214.40:33421] [client 173.239.214.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZ2TyidEecEcYKsh8PTqRQAAA9I"]
[Tue Feb 24 20:04:39.253130 2026] [:error] [pid 16776:tid 16779] [client 45.131.195.219:20745] [client 45.131.195.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZ2T19imHlyQNis9RPvbDAAAAsE"]
[Tue Feb 24 20:04:42.279103 2026] [:error] [pid 16868:tid 16915] [client 173.239.214.35:35137] [client 173.239.214.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZ2T2idEecEcYKsh8PTqWwAAA9I"]
[Tue Feb 24 20:04:45.824475 2026] [:error] [pid 34751:tid 34809] [client 173.239.214.37:33711] [client 173.239.214.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZ2T3c7SW-lfeVKMPq80oQAAAcE"]
[Tue Feb 24 20:04:48.955293 2026] [:error] [pid 16868:tid 16913] [client 173.239.214.31:39599] [client 173.239.214.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZ2T4CdEecEcYKsh8PTqZwAAA9A"]
[Tue Feb 24 20:04:59.338088 2026] [:error] [pid 16805:tid 16823] [client 173.239.214.56:51737] [client 173.239.214.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ2T66YuGciBkyQZTxUPGgAAAxA"]
[Tue Feb 24 20:05:02.150930 2026] [:error] [pid 16868:tid 16911] [client 173.239.214.37:62643] [client 173.239.214.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZ2T7idEecEcYKsh8PTqdgAAA84"]
[Tue Feb 24 20:05:05.326444 2026] [:error] [pid 16805:tid 16819] [client 173.239.214.42:31319] [client 173.239.214.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZ2T8aYuGciBkyQZTxUPHgAAAww"]
[Tue Feb 24 20:05:06.945357 2026] [:error] [pid 16867:tid 16879] [client 173.239.214.33:62703] [client 173.239.214.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZ2T8tTc72Oc9LHzeyJ7HAAAA4k"]
[Tue Feb 24 20:05:07.448167 2026] [:error] [pid 37873:tid 37894] [client 173.239.214.34:53427] [client 173.239.214.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ2T80625ION6Syu4d45cAAAANM"]
[Tue Feb 24 20:05:15.838183 2026] [:error] [pid 16805:tid 16826] [client 173.239.214.65:28685] [client 173.239.214.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZ2T-6YuGciBkyQZTxUPKAAAAxM"]
[Tue Feb 24 20:05:16.353782 2026] [:error] [pid 16805:tid 16816] [client 173.239.214.69:23879] [client 173.239.214.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZ2T_KYuGciBkyQZTxUPKgAAAwk"]
[Tue Feb 24 20:05:16.889269 2026] [:error] [pid 16805:tid 16822] [client 173.239.214.54:36571] [client 173.239.214.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ2T_KYuGciBkyQZTxUPLAAAAw8"]
[Tue Feb 24 20:05:38.863364 2026] [:error] [pid 16805:tid 16819] [client 173.239.214.73:23939] [client 173.239.214.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZ2UEqYuGciBkyQZTxUPQwAAAww"]
[Tue Feb 24 20:05:44.324190 2026] [:error] [pid 16868:tid 16908] [client 173.239.214.66:57469] [client 173.239.214.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.66, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZ2UGCdEecEcYKsh8PTqlgAAA8s"]
[Tue Feb 24 20:06:11.162166 2026] [:error] [pid 16868:tid 16919] [client 173.239.214.66:57469] [client 173.239.214.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZ2UMydEecEcYKsh8PTqtgAAA9Y"]
[Tue Feb 24 20:06:17.063225 2026] [:error] [pid 16776:tid 16793] [client 173.239.214.61:42617] [client 173.239.214.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.61, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZ2UOdimHlyQNis9RPvbMgAAAs8"]
[Tue Feb 24 20:06:21.688290 2026] [:error] [pid 16776:tid 16778] [client 173.239.214.61:42617] [client 173.239.214.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZ2UPdimHlyQNis9RPvbNAAAAsA"]
[Tue Feb 24 20:06:40.293957 2026] [:error] [pid 37873:tid 37898] [client 173.239.214.67:39319] [client 173.239.214.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZ2UUE625ION6Syu4d45lAAAANc"]
[Tue Feb 24 20:06:56.428835 2026] [:error] [pid 16867:tid 16873] [client 173.239.214.67:31631] [client 173.239.214.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ2UYNTc72Oc9LHzeyJ7igAAA4M"]
[Tue Feb 24 20:07:02.116184 2026] [:error] [pid 16867:tid 16881] [client 173.239.214.75:60713] [client 173.239.214.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZ2UZtTc72Oc9LHzeyJ7mQAAA4s"]
[Tue Feb 24 20:07:08.156836 2026] [:error] [pid 16868:tid 16917] [client 173.239.214.70:35023] [client 173.239.214.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.70, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZ2UbCdEecEcYKsh8PTqzwAAA9Q"]
[Tue Feb 24 20:07:10.318675 2026] [:error] [pid 16868:tid 16897] [client 173.239.214.70:35023] [client 173.239.214.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZ2UbidEecEcYKsh8PTq0AAAA8A"]
[Tue Feb 24 20:07:43.525200 2026] [:error] [pid 37095:tid 37098] [client 173.239.214.40:26635] [client 173.239.214.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZ2UjyX8qkGqxKHLt3uWswAAAIE"]
[Tue Feb 24 20:07:49.282538 2026] [:error] [pid 16805:tid 16823] [client 173.239.214.60:59873] [client 173.239.214.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.60, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZ2UlaYuGciBkyQZTxUPcAAAAxA"]
[Tue Feb 24 20:07:59.210604 2026] [:error] [pid 16805:tid 16814] [client 173.239.214.60:59873] [client 173.239.214.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZ2Un6YuGciBkyQZTxUPfAAAAwc"]
[Tue Feb 24 20:08:02.286085 2026] [:error] [pid 16867:tid 16870] [client 173.239.214.69:37383] [client 173.239.214.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aZ2UotTc72Oc9LHzeyJ75wAAA4A"]
[Tue Feb 24 20:08:07.511527 2026] [:error] [pid 16805:tid 16818] [client 173.239.214.33:25141] [client 173.239.214.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZ2Up6YuGciBkyQZTxUPhwAAAws"]
[Tue Feb 24 20:08:15.841010 2026] [:error] [pid 16776:tid 16799] [client 173.239.214.45:44405] [client 173.239.214.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZ2Ur9imHlyQNis9RPvbqAAAAtU"]
[Tue Feb 24 20:08:16.328860 2026] [:error] [pid 16867:tid 16884] [client 45.131.195.212:25777] [client 45.131.195.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZ2UsNTc72Oc9LHzeyJ8FwAAA44"]
[Tue Feb 24 20:08:26.696003 2026] [:error] [pid 16868:tid 16919] [client 173.239.214.71:42301] [client 173.239.214.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZ2UuidEecEcYKsh8PTrFgAAA9Y"]
[Tue Feb 24 20:08:28.324877 2026] [:error] [pid 16805:tid 16819] [client 173.239.214.53:29033] [client 173.239.214.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZ2UvKYuGciBkyQZTxUPngAAAww"]
[Tue Feb 24 20:08:36.445697 2026] [:error] [pid 37095:tid 37103] [client 173.239.214.44:26183] [client 173.239.214.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aZ2UxCX8qkGqxKHLt3uW0wAAAIY"]
[Tue Feb 24 20:08:44.653692 2026] [:error] [pid 16716:tid 16727] [client 173.239.214.44:63619] [client 173.239.214.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZ2UzMD67Ke7uCRSQazXagAAAkk"]
[Tue Feb 24 20:08:51.321803 2026] [:error] [pid 16623:tid 16634] [client 173.239.214.49:44053] [client 173.239.214.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "aZ2U0xjs4U6vkg740_GoZwAAAQk"]
[Tue Feb 24 20:08:58.744144 2026] [:error] [pid 16716:tid 16720] [client 173.239.214.41:64173] [client 173.239.214.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZ2U2sD67Ke7uCRSQazXdgAAAkI"]
[Tue Feb 24 20:09:14.362077 2026] [:error] [pid 16776:tid 16800] [client 173.239.214.42:31357] [client 173.239.214.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZ2U6timHlyQNis9RPvbxQAAAtY"]
[Tue Feb 24 20:09:14.933482 2026] [:error] [pid 16867:tid 16887] [client 173.239.214.58:50867] [client 173.239.214.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aZ2U6tTc72Oc9LHzeyJ8awAAA5E"]
[Tue Feb 24 20:09:15.502289 2026] [:error] [pid 16867:tid 16875] [client 173.239.214.59:50289] [client 173.239.214.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZ2U69Tc72Oc9LHzeyJ8bgAAA4U"]
[Tue Feb 24 20:09:16.070259 2026] [:error] [pid 34751:tid 34820] [client 173.239.214.70:39719] [client 173.239.214.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZ2U7M7SW-lfeVKMPq805AAAAcw"]
[Tue Feb 24 20:09:19.250018 2026] [:error] [pid 16623:tid 16632] [client 173.239.214.45:44527] [client 173.239.214.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZ2U7xjs4U6vkg740_GobQAAAQc"]
[Tue Feb 24 20:09:20.818235 2026] [:error] [pid 16868:tid 16905] [client 45.131.195.98:61659] [client 45.131.195.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ2U8CdEecEcYKsh8PTrPwAAA8g"]
[Tue Feb 24 20:09:26.434259 2026] [:error] [pid 16868:tid 16915] [client 173.239.214.56:21321] [client 173.239.214.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ2U9idEecEcYKsh8PTrSAAAA9I"]
[Tue Feb 24 20:09:26.951613 2026] [:error] [pid 16867:tid 16891] [client 173.239.214.73:40793] [client 173.239.214.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZ2U9tTc72Oc9LHzeyJ8fwAAA5U"]
[Tue Feb 24 20:09:27.480854 2026] [:error] [pid 16867:tid 16872] [client 173.239.214.71:60055] [client 173.239.214.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZ2U99Tc72Oc9LHzeyJ8gwAAA4I"]
[Tue Feb 24 20:09:28.038880 2026] [:error] [pid 16868:tid 16918] [client 45.131.195.212:21627] [client 45.131.195.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZ2U-CdEecEcYKsh8PTrSQAAA9U"]
[Tue Feb 24 20:09:28.852990 2026] [:error] [pid 16776:tid 16787] [client 173.239.214.69:34997] [client 173.239.214.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZ2U-NimHlyQNis9RPvbyAAAAsk"]
[Tue Feb 24 20:09:30.219568 2026] [:error] [pid 16776:tid 16785] [client 173.239.214.30:30607] [client 173.239.214.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZ2U-timHlyQNis9RPvbywAAAsc"]
[Tue Feb 24 20:09:40.206407 2026] [:error] [pid 37095:tid 37121] [client 173.239.214.50:43863] [client 173.239.214.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZ2VBCX8qkGqxKHLt3uW5QAAAJg"]
[Tue Feb 24 20:09:57.413299 2026] [:error] [pid 16867:tid 16889] [client 173.239.214.53:30153] [client 173.239.214.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aZ2VFdTc72Oc9LHzeyJ8yAAAA5M"]
[Tue Feb 24 20:10:01.285543 2026] [:error] [pid 16868:tid 16919] [client 173.239.214.67:28777] [client 173.239.214.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZ2VGSdEecEcYKsh8PTrlgAAA9Y"]
[Tue Feb 24 20:10:01.922096 2026] [:error] [pid 16623:tid 16636] [client 173.239.214.68:36311] [client 173.239.214.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZ2VGRjs4U6vkg740_GoggAAAQs"]
[Tue Feb 24 20:10:10.081847 2026] [:error] [pid 16623:tid 16626] [client 173.239.214.35:40111] [client 173.239.214.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ2VIhjs4U6vkg740_GolAAAAQE"]
[Tue Feb 24 20:10:15.856152 2026] [proxy_fcgi:error] [pid 16805:tid 16830] [client 173.239.214.73:44475] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 20:10:16.119009 2026] [proxy_fcgi:error] [pid 16805:tid 16817] [client 173.239.214.73:44475] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 20:10:16.406687 2026] [proxy_fcgi:error] [pid 16805:tid 16819] [client 173.239.214.73:44475] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 20:10:17.770184 2026] [:error] [pid 16805:tid 16829] [client 173.239.214.73:44475] [client 173.239.214.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ2VKaYuGciBkyQZTxUP8QAAAxY"]
[Tue Feb 24 20:10:18.296471 2026] [:error] [pid 16805:tid 16831] [client 173.239.214.73:41573] [client 173.239.214.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZ2VKqYuGciBkyQZTxUP9AAAAxg"]
[Tue Feb 24 20:10:18.837706 2026] [:error] [pid 16776:tid 16788] [client 173.239.214.53:21795] [client 173.239.214.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZ2VKtimHlyQNis9RPvb4wAAAso"]
[Tue Feb 24 20:10:19.380684 2026] [:error] [pid 16776:tid 16798] [client 173.239.214.37:58413] [client 173.239.214.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZ2VK9imHlyQNis9RPvb5QAAAtQ"]
[Tue Feb 24 20:10:19.836072 2026] [:error] [pid 16868:tid 16915] [client 173.239.214.44:52209] [client 173.239.214.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZ2VKydEecEcYKsh8PTroAAAA9I"]
[Tue Feb 24 20:10:20.384914 2026] [:error] [pid 16868:tid 16921] [client 173.239.214.55:27803] [client 173.239.214.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZ2VLCdEecEcYKsh8PTrogAAA9g"]
[Tue Feb 24 20:10:23.068210 2026] [:error] [pid 16868:tid 16911] [client 173.239.214.55:52663] [client 173.239.214.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aZ2VLydEecEcYKsh8PTrqQAAA84"]
[Tue Feb 24 20:10:23.635579 2026] [:error] [pid 16868:tid 16907] [client 173.239.214.53:40319] [client 173.239.214.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aZ2VLydEecEcYKsh8PTrqwAAA8o"]
[Tue Feb 24 20:10:24.173142 2026] [:error] [pid 16868:tid 16900] [client 173.239.214.52:58765] [client 173.239.214.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aZ2VMCdEecEcYKsh8PTrrAAAA8M"]
[Tue Feb 24 20:10:24.768837 2026] [:error] [pid 16868:tid 16915] [client 173.239.214.74:65467] [client 173.239.214.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aZ2VMCdEecEcYKsh8PTrrQAAA9I"]
[Tue Feb 24 20:10:27.979208 2026] [:error] [pid 16868:tid 16920] [client 173.239.214.30:63585] [client 173.239.214.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aZ2VMydEecEcYKsh8PTrsQAAA9c"]
[Tue Feb 24 20:10:28.831626 2026] [:error] [pid 16776:tid 16780] [client 173.239.214.47:23341] [client 173.239.214.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZ2VNNimHlyQNis9RPvb6QAAAsI"]
[Tue Feb 24 20:10:34.495624 2026] [:error] [pid 34750:tid 34799] [client 173.239.214.67:24281] [client 173.239.214.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aZ2VOuaZ-Iv_wvbRkKIWxAAAAVI"]
[Tue Feb 24 20:10:38.158303 2026] [:error] [pid 16868:tid 16906] [client 173.239.214.67:63969] [client 173.239.214.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZ2VPidEecEcYKsh8PTrwgAAA8k"]
[Tue Feb 24 20:10:46.238813 2026] [:error] [pid 16868:tid 16912] [client 173.239.214.73:36827] [client 173.239.214.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZ2VRidEecEcYKsh8PTr0AAAA88"]
[Tue Feb 24 20:10:57.111863 2026] [:error] [pid 16623:tid 16639] [client 173.239.214.31:58609] [client 173.239.214.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZ2VURjs4U6vkg740_GoowAAAQ4"]
[Tue Feb 24 20:11:00.676205 2026] [:error] [pid 16805:tid 16815] [client 173.239.214.78:42043] [client 173.239.214.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aZ2VVKYuGciBkyQZTxUQFAAAAwg"]
[Tue Feb 24 20:11:36.603895 2026] [:error] [pid 16867:tid 16887] [client 173.239.214.33:38693] [client 173.239.214.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aZ2VeNTc72Oc9LHzeyJ9lQAAA5E"]
[Tue Feb 24 20:11:47.172047 2026] [autoindex:error] [pid 16868:tid 16913] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:47.447304 2026] [autoindex:error] [pid 16868:tid 16921] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:47.760814 2026] [autoindex:error] [pid 16868:tid 16899] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:48.022858 2026] [autoindex:error] [pid 16868:tid 16911] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:50.866371 2026] [autoindex:error] [pid 16868:tid 16909] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:51.416659 2026] [autoindex:error] [pid 16868:tid 16916] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:51.682353 2026] [autoindex:error] [pid 16868:tid 16920] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:52.008630 2026] [autoindex:error] [pid 16868:tid 16907] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:52.241024 2026] [autoindex:error] [pid 16868:tid 16910] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:52.730721 2026] [autoindex:error] [pid 16868:tid 16921] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:11:55.182009 2026] [autoindex:error] [pid 16868:tid 16902] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:00.844561 2026] [autoindex:error] [pid 16868:tid 16911] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:01.448766 2026] [autoindex:error] [pid 16868:tid 16900] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:01.830135 2026] [autoindex:error] [pid 16868:tid 16915] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:07.272214 2026] [autoindex:error] [pid 16868:tid 16903] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:10.154775 2026] [autoindex:error] [pid 16868:tid 16911] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:15.059031 2026] [autoindex:error] [pid 16868:tid 16898] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:15.322002 2026] [autoindex:error] [pid 16868:tid 16901] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:15.571059 2026] [autoindex:error] [pid 16868:tid 16906] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:30.702564 2026] [autoindex:error] [pid 16868:tid 16915] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:33.439967 2026] [autoindex:error] [pid 16868:tid 16901] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:33.991754 2026] [autoindex:error] [pid 16868:tid 16907] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:34.794882 2026] [autoindex:error] [pid 16868:tid 16919] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:36.159724 2026] [autoindex:error] [pid 16868:tid 16905] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:12:36.426542 2026] [autoindex:error] [pid 16868:tid 16911] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:13:52.589337 2026] [autoindex:error] [pid 16868:tid 16909] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:13:52.830528 2026] [autoindex:error] [pid 16868:tid 16901] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:13:53.101456 2026] [autoindex:error] [pid 16868:tid 16911] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:13:53.374111 2026] [autoindex:error] [pid 16868:tid 16919] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:13:59.714676 2026] [autoindex:error] [pid 16868:tid 16917] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:14:02.703466 2026] [autoindex:error] [pid 16868:tid 16898] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:14:02.966683 2026] [autoindex:error] [pid 16868:tid 16913] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:14:03.295988 2026] [autoindex:error] [pid 16868:tid 16909] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:14:06.086006 2026] [autoindex:error] [pid 16868:tid 16910] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:14:06.343182 2026] [autoindex:error] [pid 16868:tid 16916] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:14:06.620351 2026] [autoindex:error] [pid 16868:tid 16906] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:14:06.887212 2026] [autoindex:error] [pid 16868:tid 16903] [client 173.239.214.33:50463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:15:06.103086 2026] [autoindex:error] [pid 16805:tid 16815] [client 173.239.214.78:33465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:15:39.190876 2026] [autoindex:error] [pid 16868:tid 16920] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:15:49.521835 2026] [autoindex:error] [pid 16868:tid 16915] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:15:49.806436 2026] [autoindex:error] [pid 16868:tid 16909] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:00.249013 2026] [autoindex:error] [pid 16868:tid 16915] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:00.532642 2026] [autoindex:error] [pid 16868:tid 16903] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:00.850569 2026] [autoindex:error] [pid 16868:tid 16897] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:01.157994 2026] [autoindex:error] [pid 16868:tid 16909] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:01.410722 2026] [autoindex:error] [pid 16868:tid 16901] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:01.821695 2026] [autoindex:error] [pid 16868:tid 16907] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:02.101868 2026] [autoindex:error] [pid 16868:tid 16905] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:02.380012 2026] [autoindex:error] [pid 16868:tid 16899] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:48.542569 2026] [autoindex:error] [pid 16868:tid 16908] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 20:16:53.859078 2026] [autoindex:error] [pid 16868:tid 16919] [client 173.239.214.33:42979] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 02:47:43.803840 2026] [:error] [pid 26872:tid 26885] [client 4.193.97.168:4322] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aZ3yT3xLbzvRGuzwKjkWkAAAAEs"]
[Wed Feb 25 02:47:44.173704 2026] [:error] [pid 26872:tid 26877] [client 4.193.97.168:4298] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aZ3yUHxLbzvRGuzwKjkWlQAAAEM"]
[Wed Feb 25 02:47:45.106359 2026] [:error] [pid 18850:tid 18876] [client 4.193.97.168:4311] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aZ3yUeDBmHucoAJRnqkggwAAABg"]
[Wed Feb 25 02:47:45.467248 2026] [:error] [pid 26872:tid 26888] [client 4.193.97.168:4314] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aZ3yUXxLbzvRGuzwKjkWmgAAAE4"]
[Wed Feb 25 20:07:36.215324 2026] [:error] [pid 5556:tid 5588] [client 149.102.230.119:6440] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aZ7mCKOrYeaTyh7lGRVU5gAAAcE"]
[Wed Feb 25 20:07:37.266055 2026] [:error] [pid 5556:tid 5598] [client 149.102.230.119:6444] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aZ7mCaOrYeaTyh7lGRVU6QAAAcs"]
[Wed Feb 25 20:07:38.300898 2026] [:error] [pid 60387:tid 60478] [client 149.102.230.118:6034] [client 149.102.230.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aZ7mCoHL0QH7Sr13X0JtSwAAAoY"]
[Wed Feb 25 20:07:39.321320 2026] [:error] [pid 60500:tid 60584] [client 149.102.230.119:6454] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aZ7mC_Y9avxuno9KAT9RKgAAA0M"]
[Wed Feb 25 20:07:40.345235 2026] [:error] [pid 5556:tid 5607] [client 149.102.230.118:6036] [client 149.102.230.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aZ7mDKOrYeaTyh7lGRVU9QAAAdQ"]
[Wed Feb 25 20:07:41.374348 2026] [:error] [pid 20659:tid 20706] [client 149.102.230.119:6458] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aZ7mDT_THK_HtK-Q44IiMAAAAEs"]
[Wed Feb 25 20:07:42.395851 2026] [:error] [pid 20659:tid 20696] [client 149.102.230.118:6038] [client 149.102.230.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aZ7mDj_THK_HtK-Q44IiMwAAAEE"]
[Wed Feb 25 23:06:14.969865 2026] [:error] [pid 20659:tid 20696] [client 193.32.176.86:36478] [client 193.32.176.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "aZ8P5j_THK_HtK-Q44JSoQAAAEE"]
[Thu Feb 26 00:26:02.305492 2026] [:error] [pid 49770:tid 49838] [client 45.94.31.242:64999] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aZ8imi7xhdZV4TFeNysYMgAAAIw"]
[Thu Feb 26 00:26:03.177890 2026] [:error] [pid 49770:tid 49830] [client 45.94.31.242:51342] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aZ8imy7xhdZV4TFeNysYNQAAAIQ"]
[Thu Feb 26 00:26:03.960817 2026] [:error] [pid 49556:tid 49642] [client 45.94.31.242:59356] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aZ8im5jk27yQt3CGcmhtewAAAMY"]
[Thu Feb 26 00:26:06.654510 2026] [:error] [pid 49555:tid 49685] [client 45.94.31.242:62474] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aZ8intw3_NsD2xC15Ya7lwAAAFY"]
[Thu Feb 26 03:22:28.758184 2026] [:error] [pid 42713:tid 42738] [client 4.204.200.32:61783] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZ9L9GDBTJe-yzGeFDgDXgAAABQ"]
[Thu Feb 26 03:22:29.798136 2026] [:error] [pid 42715:tid 42797] [client 4.204.200.32:61800] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZ9L9eFX6j3o5EJ_kZXBsAAAAJg"]
[Thu Feb 26 03:22:30.882774 2026] [:error] [pid 42811:tid 42825] [client 4.204.200.32:61124] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZ9L9tZ_nGbT8KCNcCAN4gAAAMs"]
[Thu Feb 26 03:22:31.566888 2026] [:error] [pid 42713:tid 42721] [client 4.204.200.32:61727] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZ9L92DBTJe-yzGeFDgDYQAAAAM"]
[Thu Feb 26 03:22:32.614357 2026] [:error] [pid 42811:tid 42826] [client 4.204.200.32:61810] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aZ9L-NZ_nGbT8KCNcCAN5wAAAMw"]
[Thu Feb 26 03:22:33.433019 2026] [:error] [pid 42811:tid 42820] [client 4.204.200.32:61140] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aZ9L-dZ_nGbT8KCNcCAN6gAAAMY"]
[Thu Feb 26 03:22:34.362746 2026] [:error] [pid 42811:tid 42819] [client 4.204.200.32:61762] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aZ9L-tZ_nGbT8KCNcCAN7wAAAMU"]
[Thu Feb 26 03:22:35.073321 2026] [:error] [pid 42714:tid 42757] [client 4.204.200.32:61135] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aZ9L-0QQVhM0bD4pOiQJNgAAAEs"]
[Thu Feb 26 03:22:35.918992 2026] [:error] [pid 42714:tid 42768] [client 4.204.200.32:61129] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aZ9L-0QQVhM0bD4pOiQJOwAAAFY"]
[Thu Feb 26 03:22:36.761292 2026] [:error] [pid 42714:tid 42767] [client 4.204.200.32:61717] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aZ9L_EQQVhM0bD4pOiQJPgAAAFU"]
[Thu Feb 26 03:22:37.635881 2026] [:error] [pid 42715:tid 42797] [client 4.204.200.32:61728] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aZ9L_eFX6j3o5EJ_kZXBwQAAAJg"]
[Thu Feb 26 03:22:38.842774 2026] [:error] [pid 42811:tid 42820] [client 4.204.200.32:61752] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aZ9L_tZ_nGbT8KCNcCAN_AAAAMY"]
[Thu Feb 26 03:22:39.849563 2026] [:error] [pid 42715:tid 42785] [client 4.204.200.32:61707] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aZ9L_-FX6j3o5EJ_kZXBxwAAAIw"]
[Thu Feb 26 03:22:40.887292 2026] [:error] [pid 42713:tid 42729] [client 4.204.200.32:61789] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aZ9MAGDBTJe-yzGeFDgDcgAAAAs"]
[Thu Feb 26 03:22:42.075593 2026] [:error] [pid 42811:tid 42837] [client 4.204.200.32:61703] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aZ9MAtZ_nGbT8KCNcCAOBwAAANc"]
[Thu Feb 26 03:22:45.653897 2026] [:error] [pid 42715:tid 42776] [client 4.204.200.32:61149] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aZ9MBeFX6j3o5EJ_kZXB1gAAAIM"]
[Thu Feb 26 03:22:46.877510 2026] [:error] [pid 42714:tid 42752] [client 4.204.200.32:61148] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "aZ9MBkQQVhM0bD4pOiQJXgAAAEY"]
[Thu Feb 26 03:22:47.945318 2026] [:error] [pid 42713:tid 42720] [client 4.204.200.32:61801] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "aZ9MB2DBTJe-yzGeFDgDfQAAAAI"]
[Thu Feb 26 03:22:49.264333 2026] [:error] [pid 42713:tid 42724] [client 4.204.200.32:61761] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "aZ9MCWDBTJe-yzGeFDgDgQAAAAY"]
[Thu Feb 26 03:22:50.061100 2026] [:error] [pid 42715:tid 42775] [client 4.204.200.32:61142] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "aZ9MCuFX6j3o5EJ_kZXB4gAAAII"]
[Thu Feb 26 03:22:50.713035 2026] [:error] [pid 42714:tid 42753] [client 4.204.200.32:61709] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samiri.php"] [unique_id "aZ9MCkQQVhM0bD4pOiQJaQAAAEc"]
[Thu Feb 26 03:22:51.833012 2026] [:error] [pid 42714:tid 42755] [client 4.204.200.32:61697] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samiri.php"] [unique_id "aZ9MC0QQVhM0bD4pOiQJbgAAAEk"]
[Thu Feb 26 03:22:52.846874 2026] [:error] [pid 42714:tid 42766] [client 4.204.200.32:61804] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samiri.php"] [unique_id "aZ9MDEQQVhM0bD4pOiQJcwAAAFQ"]
[Thu Feb 26 03:22:53.417163 2026] [:error] [pid 42811:tid 42823] [client 4.204.200.32:61704] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samiri.php"] [unique_id "aZ9MDdZ_nGbT8KCNcCAOKgAAAMk"]
[Thu Feb 26 03:22:54.229778 2026] [:error] [pid 42811:tid 42830] [client 4.204.200.32:61724] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aZ9MDtZ_nGbT8KCNcCAOLAAAANA"]
[Thu Feb 26 03:22:55.111365 2026] [:error] [pid 42713:tid 42722] [client 4.204.200.32:61111] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aZ9MD2DBTJe-yzGeFDgDjwAAAAQ"]
[Thu Feb 26 03:22:57.235515 2026] [:error] [pid 42811:tid 42816] [client 4.204.200.32:61130] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aZ9MEdZ_nGbT8KCNcCAONAAAAMI"]
[Thu Feb 26 03:22:58.442259 2026] [:error] [pid 42714:tid 42767] [client 4.204.200.32:61134] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aZ9MEkQQVhM0bD4pOiQJjAAAAFU"]
[Thu Feb 26 03:22:59.244782 2026] [:error] [pid 42715:tid 42791] [client 4.204.200.32:61136] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aZ9ME-FX6j3o5EJ_kZXCAgAAAJI"]
[Thu Feb 26 03:23:00.099297 2026] [:error] [pid 42713:tid 42737] [client 4.204.200.32:61733] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aZ9MFGDBTJe-yzGeFDgDqQAAABM"]
[Thu Feb 26 03:23:01.031524 2026] [:error] [pid 42715:tid 42793] [client 4.204.200.32:61720] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aZ9MFeFX6j3o5EJ_kZXCCQAAAJQ"]
[Thu Feb 26 03:23:02.108223 2026] [:error] [pid 42811:tid 42829] [client 4.204.200.32:61808] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aZ9MFtZ_nGbT8KCNcCAOPwAAAM8"]
[Thu Feb 26 03:23:02.731028 2026] [:error] [pid 42713:tid 42734] [client 4.204.200.32:61735] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aZ9MFmDBTJe-yzGeFDgDrQAAABA"]
[Thu Feb 26 03:23:04.203322 2026] [:error] [pid 42714:tid 42768] [client 4.204.200.32:61793] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aZ9MGEQQVhM0bD4pOiQJqQAAAFY"]
[Thu Feb 26 03:23:05.082193 2026] [:error] [pid 42713:tid 42736] [client 4.204.200.32:61743] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aZ9MGWDBTJe-yzGeFDgDtAAAABI"]
[Thu Feb 26 03:23:06.331251 2026] [:error] [pid 42713:tid 42720] [client 4.204.200.32:61772] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aZ9MGmDBTJe-yzGeFDgDugAAAAI"]
[Thu Feb 26 03:23:07.057449 2026] [:error] [pid 42811:tid 42838] [client 4.204.200.32:61146] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZ9MG9Z_nGbT8KCNcCAOUwAAANg"]
[Thu Feb 26 03:23:07.614278 2026] [:error] [pid 42811:tid 42817] [client 4.204.200.32:61775] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZ9MG9Z_nGbT8KCNcCAOVQAAAMM"]
[Thu Feb 26 03:23:08.327560 2026] [:error] [pid 42715:tid 42783] [client 4.204.200.32:61806] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZ9MHOFX6j3o5EJ_kZXCEQAAAIo"]
[Thu Feb 26 03:23:09.803856 2026] [:error] [pid 42715:tid 42792] [client 4.204.200.32:61127] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZ9MHeFX6j3o5EJ_kZXCFQAAAJM"]
[Thu Feb 26 03:23:10.427637 2026] [:error] [pid 42811:tid 42818] [client 4.204.200.32:61131] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aZ9MHtZ_nGbT8KCNcCAOXwAAAMQ"]
[Thu Feb 26 03:23:11.250485 2026] [:error] [pid 42713:tid 42742] [client 4.204.200.32:61763] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aZ9MH2DBTJe-yzGeFDgDxAAAABg"]
[Thu Feb 26 03:23:11.878714 2026] [:error] [pid 42811:tid 42826] [client 4.204.200.32:61746] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aZ9MH9Z_nGbT8KCNcCAOZQAAAMw"]
[Thu Feb 26 03:23:13.244225 2026] [:error] [pid 42811:tid 42838] [client 4.204.200.32:61145] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aZ9MIdZ_nGbT8KCNcCAOcAAAANg"]
[Thu Feb 26 03:23:13.873037 2026] [:error] [pid 42715:tid 42788] [client 4.204.200.32:61147] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ9MIeFX6j3o5EJ_kZXCJQAAAI8"]
[Thu Feb 26 03:23:14.800914 2026] [:error] [pid 42811:tid 42836] [client 4.204.200.32:61165] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ9MItZ_nGbT8KCNcCAOegAAANY"]
[Thu Feb 26 03:23:15.678341 2026] [:error] [pid 42811:tid 42821] [client 4.204.200.32:61702] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ9MI9Z_nGbT8KCNcCAOfgAAAMc"]
[Thu Feb 26 03:23:16.745056 2026] [:error] [pid 42714:tid 42757] [client 4.204.200.32:61771] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ9MJEQQVhM0bD4pOiQJ3gAAAEs"]
[Thu Feb 26 03:23:17.242661 2026] [:error] [pid 42714:tid 42759] [client 4.204.200.32:61744] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shas.php"] [unique_id "aZ9MJUQQVhM0bD4pOiQJ4AAAAE0"]
[Thu Feb 26 03:23:17.879493 2026] [:error] [pid 42715:tid 42776] [client 4.204.200.32:61137] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shas.php"] [unique_id "aZ9MJeFX6j3o5EJ_kZXCKgAAAIM"]
[Thu Feb 26 03:23:19.013893 2026] [:error] [pid 42811:tid 42820] [client 4.204.200.32:61757] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shas.php"] [unique_id "aZ9MJ9Z_nGbT8KCNcCAOjQAAAMY"]
[Thu Feb 26 03:23:19.871634 2026] [:error] [pid 42715:tid 42773] [client 4.204.200.32:61795] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shas.php"] [unique_id "aZ9MJ-FX6j3o5EJ_kZXCMAAAAIA"]
[Thu Feb 26 03:23:20.872532 2026] [:error] [pid 42811:tid 42831] [client 4.204.200.32:61742] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aZ9MKNZ_nGbT8KCNcCAOmwAAANE"]
[Thu Feb 26 03:23:21.514892 2026] [:error] [pid 42811:tid 42832] [client 4.204.200.32:61092] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aZ9MKdZ_nGbT8KCNcCAOpAAAANI"]
[Thu Feb 26 03:23:22.067716 2026] [:error] [pid 42715:tid 42789] [client 4.204.200.32:61745] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aZ9MKuFX6j3o5EJ_kZXCMgAAAJA"]
[Thu Feb 26 03:23:22.612959 2026] [:error] [pid 42714:tid 42747] [client 4.204.200.32:61822] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aZ9MKkQQVhM0bD4pOiQJ7AAAAEE"]
[Thu Feb 26 03:23:23.314519 2026] [:error] [pid 42713:tid 42734] [client 4.204.200.32:61138] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aZ9MK2DBTJe-yzGeFDgDywAAABA"]
[Thu Feb 26 03:23:23.978778 2026] [:error] [pid 42714:tid 42752] [client 4.204.200.32:61122] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aZ9MK0QQVhM0bD4pOiQJ9AAAAEY"]
[Thu Feb 26 03:23:24.513409 2026] [:error] [pid 42715:tid 42784] [client 4.204.200.32:61706] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aZ9MLOFX6j3o5EJ_kZXCOwAAAIs"]
[Thu Feb 26 03:23:25.155878 2026] [:error] [pid 42714:tid 42765] [client 4.204.200.32:61143] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aZ9MLUQQVhM0bD4pOiQJ_QAAAFM"]
[Thu Feb 26 03:23:25.765809 2026] [:error] [pid 42811:tid 42831] [client 4.204.200.32:61125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aZ9MLdZ_nGbT8KCNcCAOugAAANE"]
[Thu Feb 26 03:24:10.328974 2026] [:error] [pid 42811:tid 42814] [client 4.204.200.32:61719] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aZ9MWtZ_nGbT8KCNcCAPcAAAAMA"]
[Thu Feb 26 03:24:11.214985 2026] [:error] [pid 42811:tid 42821] [client 4.204.200.32:61796] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aZ9MW9Z_nGbT8KCNcCAPcwAAAMc"]
[Thu Feb 26 03:24:11.953951 2026] [:error] [pid 42811:tid 42823] [client 4.204.200.32:61725] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aZ9MW9Z_nGbT8KCNcCAPewAAAMk"]
[Thu Feb 26 03:24:12.552574 2026] [:error] [pid 42715:tid 42795] [client 4.204.200.32:61156] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aZ9MXOFX6j3o5EJ_kZXCvgAAAJY"]
[Thu Feb 26 03:24:13.350792 2026] [:error] [pid 42811:tid 42832] [client 4.204.200.32:60528] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aZ9MXdZ_nGbT8KCNcCAPgAAAANI"]
[Thu Feb 26 03:24:14.156491 2026] [:error] [pid 42811:tid 42826] [client 4.204.200.32:61721] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aZ9MXtZ_nGbT8KCNcCAPhgAAAMw"]
[Thu Feb 26 03:24:14.703978 2026] [:error] [pid 42715:tid 42773] [client 4.204.200.32:61121] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aZ9MXuFX6j3o5EJ_kZXCxAAAAIA"]
[Thu Feb 26 03:24:15.331218 2026] [:error] [pid 42715:tid 42789] [client 4.204.200.32:61126] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aZ9MX-FX6j3o5EJ_kZXCxwAAAJA"]
[Thu Feb 26 03:24:15.906679 2026] [:error] [pid 42715:tid 42785] [client 4.204.200.32:61787] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aZ9MX-FX6j3o5EJ_kZXCyQAAAIw"]
[Thu Feb 26 03:24:16.561897 2026] [:error] [pid 42713:tid 42727] [client 4.204.200.32:61786] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aZ9MYGDBTJe-yzGeFDgEDQAAAAk"]
[Thu Feb 26 03:24:17.074377 2026] [:error] [pid 42713:tid 42742] [client 4.204.200.32:61183] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aZ9MYWDBTJe-yzGeFDgEDwAAABg"]
[Thu Feb 26 03:24:17.651705 2026] [:error] [pid 42715:tid 42786] [client 4.204.200.32:61174] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aZ9MYeFX6j3o5EJ_kZXC0AAAAI0"]
[Thu Feb 26 03:24:18.177816 2026] [:error] [pid 42715:tid 42790] [client 4.204.200.32:61809] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/login8.php"] [unique_id "aZ9MYuFX6j3o5EJ_kZXC1AAAAJE"]
[Thu Feb 26 03:24:18.875365 2026] [:error] [pid 42715:tid 42783] [client 4.204.200.32:61085] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/login8.php"] [unique_id "aZ9MYuFX6j3o5EJ_kZXC2QAAAIo"]
[Thu Feb 26 03:24:19.626442 2026] [:error] [pid 42715:tid 42791] [client 4.204.200.32:61710] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/login8.php"] [unique_id "aZ9MY-FX6j3o5EJ_kZXC3AAAAJI"]
[Thu Feb 26 03:24:20.171417 2026] [:error] [pid 42714:tid 42759] [client 4.204.200.32:61098] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/login8.php"] [unique_id "aZ9MZEQQVhM0bD4pOiQKXQAAAE0"]
[Thu Feb 26 03:24:20.818816 2026] [:error] [pid 42713:tid 42733] [client 4.204.200.32:61812] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nnyvn.php"] [unique_id "aZ9MZGDBTJe-yzGeFDgEEwAAAA8"]
[Thu Feb 26 03:24:21.532998 2026] [:error] [pid 42811:tid 42816] [client 4.204.200.32:61063] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nnyvn.php"] [unique_id "aZ9MZdZ_nGbT8KCNcCAPowAAAMI"]
[Thu Feb 26 03:24:22.218568 2026] [:error] [pid 42715:tid 42783] [client 4.204.200.32:61123] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nnyvn.php"] [unique_id "aZ9MZuFX6j3o5EJ_kZXC6AAAAIo"]
[Thu Feb 26 03:24:22.879794 2026] [:error] [pid 42811:tid 42831] [client 4.204.200.32:61705] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nnyvn.php"] [unique_id "aZ9MZtZ_nGbT8KCNcCAPqgAAANE"]
[Thu Feb 26 03:24:23.546360 2026] [:error] [pid 42811:tid 42820] [client 4.204.200.32:61179] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aZ9MZ9Z_nGbT8KCNcCAPrQAAAMY"]
[Thu Feb 26 03:24:24.261985 2026] [:error] [pid 42714:tid 42749] [client 4.204.200.32:61759] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aZ9MaEQQVhM0bD4pOiQKYwAAAEM"]
[Thu Feb 26 03:24:24.847514 2026] [:error] [pid 42714:tid 42769] [client 4.204.200.32:61069] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aZ9MaEQQVhM0bD4pOiQKZQAAAFc"]
[Thu Feb 26 03:24:25.493844 2026] [:error] [pid 42714:tid 42767] [client 4.204.200.32:61799] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aZ9MaUQQVhM0bD4pOiQKZwAAAFU"]
[Thu Feb 26 03:24:26.077108 2026] [:error] [pid 42811:tid 42814] [client 4.204.200.32:61081] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aZ9MatZ_nGbT8KCNcCAPuQAAAMA"]
[Thu Feb 26 03:24:26.571929 2026] [:error] [pid 42811:tid 42820] [client 4.204.200.32:61163] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aZ9MatZ_nGbT8KCNcCAPvwAAAMY"]
[Thu Feb 26 03:24:27.154734 2026] [:error] [pid 42714:tid 42758] [client 4.204.200.32:61750] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aZ9Ma0QQVhM0bD4pOiQKbAAAAEw"]
[Thu Feb 26 03:24:27.781859 2026] [:error] [pid 42715:tid 42795] [client 4.204.200.32:61737] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aZ9Ma-FX6j3o5EJ_kZXC9wAAAJY"]
[Thu Feb 26 03:24:28.558096 2026] [:error] [pid 42714:tid 42764] [client 4.204.200.32:61766] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aZ9MbEQQVhM0bD4pOiQKcgAAAFI"]
[Thu Feb 26 03:24:29.278868 2026] [:error] [pid 42714:tid 42752] [client 4.204.200.32:61712] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aZ9MbUQQVhM0bD4pOiQKdwAAAEY"]
[Thu Feb 26 03:24:29.863282 2026] [:error] [pid 42714:tid 42747] [client 4.204.200.32:61090] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aZ9MbUQQVhM0bD4pOiQKewAAAEE"]
[Thu Feb 26 03:24:30.454700 2026] [:error] [pid 42714:tid 42756] [client 4.204.200.32:61107] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aZ9MbkQQVhM0bD4pOiQKfgAAAEo"]
[Thu Feb 26 03:24:31.092880 2026] [:error] [pid 42811:tid 42815] [client 4.204.200.32:60500] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aZ9Mb9Z_nGbT8KCNcCAP1gAAAME"]
[Thu Feb 26 03:24:31.609562 2026] [:error] [pid 42714:tid 42754] [client 4.204.200.32:61794] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aZ9Mb0QQVhM0bD4pOiQKhQAAAEg"]
[Thu Feb 26 03:24:32.119103 2026] [:error] [pid 42714:tid 42762] [client 4.204.200.32:61716] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aZ9McEQQVhM0bD4pOiQKhgAAAFA"]
[Thu Feb 26 03:24:32.642376 2026] [:error] [pid 42714:tid 42767] [client 4.204.200.32:60418] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aZ9McEQQVhM0bD4pOiQKiQAAAFU"]
[Thu Feb 26 03:24:33.214996 2026] [:error] [pid 42715:tid 42793] [client 4.204.200.32:61818] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ya.php"] [unique_id "aZ9MceFX6j3o5EJ_kZXDAgAAAJQ"]
[Thu Feb 26 03:24:34.223469 2026] [:error] [pid 42714:tid 42760] [client 4.204.200.32:61813] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ya.php"] [unique_id "aZ9MckQQVhM0bD4pOiQKkQAAAE4"]
[Thu Feb 26 03:24:34.739992 2026] [:error] [pid 42714:tid 42765] [client 4.204.200.32:61711] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ya.php"] [unique_id "aZ9MckQQVhM0bD4pOiQKkgAAAFM"]
[Thu Feb 26 03:24:35.377862 2026] [:error] [pid 42713:tid 42720] [client 4.204.200.32:61170] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ya.php"] [unique_id "aZ9Mc2DBTJe-yzGeFDgEIQAAAAI"]
[Thu Feb 26 03:24:35.939495 2026] [:error] [pid 42714:tid 42763] [client 4.204.200.32:61065] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZ9Mc0QQVhM0bD4pOiQKmAAAAFE"]
[Thu Feb 26 03:24:36.382675 2026] [:error] [pid 42715:tid 42794] [client 4.204.200.32:61730] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZ9MdOFX6j3o5EJ_kZXDCwAAAJU"]
[Thu Feb 26 03:24:37.020290 2026] [:error] [pid 42713:tid 42723] [client 4.204.200.32:61778] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZ9MdWDBTJe-yzGeFDgEIwAAAAU"]
[Thu Feb 26 03:24:37.894719 2026] [:error] [pid 42715:tid 42787] [client 4.204.200.32:61155] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZ9MdeFX6j3o5EJ_kZXDEAAAAI4"]
[Thu Feb 26 03:24:38.457319 2026] [:error] [pid 42714:tid 42765] [client 4.204.200.32:61754] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aZ9MdkQQVhM0bD4pOiQKnQAAAFM"]
[Thu Feb 26 03:24:39.329079 2026] [:error] [pid 42713:tid 42726] [client 4.204.200.32:61708] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aZ9Md2DBTJe-yzGeFDgEKwAAAAg"]
[Thu Feb 26 03:24:39.834881 2026] [:error] [pid 42713:tid 42729] [client 4.204.200.32:61103] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aZ9Md2DBTJe-yzGeFDgELgAAAAs"]
[Thu Feb 26 03:24:40.363990 2026] [:error] [pid 42713:tid 42732] [client 4.204.200.32:61128] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aZ9MeGDBTJe-yzGeFDgEMAAAAA4"]
[Thu Feb 26 03:24:40.882387 2026] [:error] [pid 42713:tid 42720] [client 4.204.200.32:61154] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aZ9MeGDBTJe-yzGeFDgENAAAAAI"]
[Thu Feb 26 03:24:41.474964 2026] [:error] [pid 42715:tid 42792] [client 4.204.200.32:61739] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aZ9MeeFX6j3o5EJ_kZXDIQAAAJM"]
[Thu Feb 26 03:24:42.074429 2026] [:error] [pid 42811:tid 42818] [client 4.204.200.32:61067] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aZ9MetZ_nGbT8KCNcCAP8QAAAMQ"]
[Thu Feb 26 03:24:42.762467 2026] [:error] [pid 42811:tid 42832] [client 4.204.200.32:60517] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aZ9MetZ_nGbT8KCNcCAP9wAAANI"]
[Thu Feb 26 03:24:43.392092 2026] [:error] [pid 42811:tid 42819] [client 4.204.200.32:60444] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aZ9Me9Z_nGbT8KCNcCAP_AAAAMU"]
[Thu Feb 26 03:24:43.986355 2026] [:error] [pid 42811:tid 42830] [client 4.204.200.32:61748] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aZ9Me9Z_nGbT8KCNcCAQAQAAANA"]
[Thu Feb 26 03:24:44.451374 2026] [:error] [pid 42713:tid 42729] [client 4.204.200.32:61820] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aZ9MfGDBTJe-yzGeFDgEQQAAAAs"]
[Thu Feb 26 03:24:45.015817 2026] [:error] [pid 42713:tid 42732] [client 4.204.200.32:61734] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aZ9MfWDBTJe-yzGeFDgERQAAAA4"]
[Thu Feb 26 03:24:45.494449 2026] [:error] [pid 42714:tid 42766] [client 4.204.200.32:61097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aZ9MfUQQVhM0bD4pOiQKqAAAAFQ"]
[Thu Feb 26 03:24:45.983889 2026] [:error] [pid 42713:tid 42741] [client 4.204.200.32:61061] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aZ9MfWDBTJe-yzGeFDgESAAAABc"]
[Thu Feb 26 03:24:46.572847 2026] [:error] [pid 42714:tid 42749] [client 4.204.200.32:61139] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aZ9MfkQQVhM0bD4pOiQKrgAAAEM"]
[Thu Feb 26 03:24:47.087943 2026] [:error] [pid 42714:tid 42748] [client 4.204.200.32:61749] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aZ9Mf0QQVhM0bD4pOiQKsQAAAEI"]
[Thu Feb 26 03:24:47.680763 2026] [:error] [pid 42713:tid 42725] [client 4.204.200.32:60436] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aZ9Mf2DBTJe-yzGeFDgESwAAAAc"]
[Thu Feb 26 03:24:48.250576 2026] [:error] [pid 42714:tid 42746] [client 4.204.200.32:60441] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aZ9MgEQQVhM0bD4pOiQKugAAAEA"]
[Thu Feb 26 03:24:49.346089 2026] [:error] [pid 42811:tid 42834] [client 4.204.200.32:61741] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aZ9MgdZ_nGbT8KCNcCAQHAAAANQ"]
[Thu Feb 26 03:24:50.522971 2026] [:error] [pid 42713:tid 42729] [client 4.204.200.32:61093] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aZ9MgmDBTJe-yzGeFDgEVAAAAAs"]
[Thu Feb 26 03:24:51.094287 2026] [:error] [pid 42714:tid 42755] [client 4.204.200.32:61157] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aZ9Mg0QQVhM0bD4pOiQKxQAAAEk"]
[Thu Feb 26 03:24:51.614084 2026] [:error] [pid 42715:tid 42784] [client 4.204.200.32:61160] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aZ9Mg-FX6j3o5EJ_kZXDPAAAAIs"]
[Thu Feb 26 03:24:52.313242 2026] [:error] [pid 42713:tid 42741] [client 4.204.200.32:61057] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aZ9MhGDBTJe-yzGeFDgEWAAAABc"]
[Thu Feb 26 03:24:52.845439 2026] [:error] [pid 42715:tid 42776] [client 4.204.200.32:61086] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aZ9MhOFX6j3o5EJ_kZXDRQAAAIM"]
[Thu Feb 26 03:24:53.385599 2026] [:error] [pid 42715:tid 42784] [client 4.204.200.32:61074] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aZ9MheFX6j3o5EJ_kZXDSwAAAIs"]
[Thu Feb 26 03:24:53.867639 2026] [:error] [pid 42811:tid 42831] [client 4.204.200.32:61718] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aZ9MhdZ_nGbT8KCNcCAQKQAAANE"]
[Thu Feb 26 03:24:54.481141 2026] [:error] [pid 42811:tid 42826] [client 4.204.200.32:61178] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aZ9MhtZ_nGbT8KCNcCAQLwAAAMw"]
[Thu Feb 26 03:24:55.058469 2026] [:error] [pid 42715:tid 42786] [client 4.204.200.32:61144] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aZ9Mh-FX6j3o5EJ_kZXDUAAAAI0"]
[Thu Feb 26 03:24:55.671126 2026] [:error] [pid 42811:tid 42832] [client 4.204.200.32:60486] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aZ9Mh9Z_nGbT8KCNcCAQPwAAANI"]
[Thu Feb 26 03:24:56.313026 2026] [:error] [pid 42811:tid 42834] [client 4.204.200.32:61159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aZ9MiNZ_nGbT8KCNcCAQRgAAANQ"]
[Thu Feb 26 03:24:56.953963 2026] [:error] [pid 42713:tid 42721] [client 4.204.200.32:61816] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aZ9MiGDBTJe-yzGeFDgEYgAAAAM"]
[Thu Feb 26 03:24:57.789683 2026] [:error] [pid 42713:tid 42739] [client 4.204.200.32:61722] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aZ9MiWDBTJe-yzGeFDgEbAAAABU"]
[Thu Feb 26 03:24:58.371045 2026] [:error] [pid 42811:tid 42832] [client 4.204.200.32:61161] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aZ9MitZ_nGbT8KCNcCAQTQAAANI"]
[Thu Feb 26 03:24:59.020264 2026] [:error] [pid 42713:tid 42721] [client 4.204.200.32:61068] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aZ9Mi2DBTJe-yzGeFDgEcwAAAAM"]
[Thu Feb 26 03:24:59.558801 2026] [:error] [pid 42811:tid 42836] [client 4.204.200.32:61758] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aZ9Mi9Z_nGbT8KCNcCAQVQAAANY"]
[Thu Feb 26 03:25:00.125619 2026] [:error] [pid 42811:tid 42827] [client 4.204.200.32:61176] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aZ9MjNZ_nGbT8KCNcCAQWQAAAM0"]
[Thu Feb 26 03:25:00.765104 2026] [:error] [pid 42715:tid 42797] [client 4.204.200.32:60483] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aZ9MjOFX6j3o5EJ_kZXDVQAAAJg"]
[Thu Feb 26 03:25:01.455055 2026] [:error] [pid 42715:tid 42792] [client 4.204.200.32:60523] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aZ9MjeFX6j3o5EJ_kZXDXAAAAJM"]
[Thu Feb 26 03:25:01.999249 2026] [:error] [pid 42714:tid 42762] [client 4.204.200.32:61742] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aZ9MjUQQVhM0bD4pOiQK8QAAAFA"]
[Thu Feb 26 03:25:02.640787 2026] [:error] [pid 42811:tid 42814] [client 4.204.200.32:60484] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aZ9MjtZ_nGbT8KCNcCAQZAAAAMA"]
[Thu Feb 26 03:25:03.211545 2026] [:error] [pid 42715:tid 42796] [client 4.204.200.32:61802] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aZ9Mj-FX6j3o5EJ_kZXDbQAAAJc"]
[Thu Feb 26 03:25:04.338080 2026] [:error] [pid 42714:tid 42757] [client 4.204.200.32:61768] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aZ9MkEQQVhM0bD4pOiQK-QAAAEs"]
[Thu Feb 26 03:25:05.023182 2026] [:error] [pid 42811:tid 42814] [client 4.204.200.32:61730] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aZ9MkdZ_nGbT8KCNcCAQdQAAAMA"]
[Thu Feb 26 03:25:05.553002 2026] [:error] [pid 42715:tid 42777] [client 4.204.200.32:60516] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aZ9MkeFX6j3o5EJ_kZXDdAAAAIQ"]
[Thu Feb 26 03:25:06.582129 2026] [:error] [pid 42811:tid 42814] [client 4.204.200.32:61817] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aZ9MktZ_nGbT8KCNcCAQgQAAAMA"]
[Thu Feb 26 03:25:07.389816 2026] [:error] [pid 42811:tid 42826] [client 4.204.200.32:61714] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aZ9Mk9Z_nGbT8KCNcCAQhAAAAMw"]
[Thu Feb 26 03:25:07.959938 2026] [:error] [pid 42713:tid 42725] [client 4.204.200.32:61151] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aZ9Mk2DBTJe-yzGeFDgEeAAAAAc"]
[Thu Feb 26 04:14:41.311260 2026] [:error] [pid 9702:tid 9728] [client 20.104.206.236:13258] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9YMZvL1wp7EOGdeswjnwAAANY"]
[Thu Feb 26 04:14:41.842684 2026] [:error] [pid 9702:tid 9716] [client 20.104.206.236:13260] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9YMZvL1wp7EOGdeswjogAAAMo"]
[Thu Feb 26 04:14:42.374257 2026] [:error] [pid 9587:tid 9619] [client 20.104.206.236:13264] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9YMviLfyuakov_VlAergAAABY"]
[Thu Feb 26 04:14:42.818118 2026] [:error] [pid 9702:tid 9728] [client 20.104.206.236:13271] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9YMpvL1wp7EOGdeswjrQAAANY"]
[Thu Feb 26 05:17:43.383070 2026] [:error] [pid 9702:tid 9725] [client 20.220.146.242:43980] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aZ9m95vL1wp7EOGdesxJbgAAANM"]
[Thu Feb 26 05:17:45.124819 2026] [:error] [pid 9589:tid 9653] [client 20.220.146.242:43985] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aZ9m-aBuBxYiI1p-njS8NQAAAIA"]
[Thu Feb 26 05:17:46.504734 2026] [:error] [pid 9587:tid 9621] [client 20.220.146.242:44019] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aZ9m-viLfyuakov_VlAu1QAAABg"]
[Thu Feb 26 05:17:49.063977 2026] [:error] [pid 9589:tid 9671] [client 20.220.146.242:44014] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aZ9m_aBuBxYiI1p-njS8OQAAAJI"]
[Thu Feb 26 05:17:50.478204 2026] [:error] [pid 9588:tid 9648] [client 20.220.146.242:43916] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aZ9m_uSfsVC0YxizsTvE7AAAAFY"]
[Thu Feb 26 05:17:51.152713 2026] [:error] [pid 9588:tid 9646] [client 20.220.146.242:43918] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aZ9m_-SfsVC0YxizsTvE7QAAAFQ"]
[Thu Feb 26 05:17:51.830784 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:43907] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aZ9m_4QfAzdrpgft075OygAAAQo"]
[Thu Feb 26 05:17:52.663843 2026] [:error] [pid 6071:tid 6086] [client 20.220.146.242:44021] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aZ9nAIQfAzdrpgft075OzgAAAQw"]
[Thu Feb 26 05:17:53.670224 2026] [:error] [pid 9588:tid 9628] [client 20.220.146.242:43915] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aZ9nAeSfsVC0YxizsTvE8AAAAEI"]
[Thu Feb 26 05:17:55.258173 2026] [:error] [pid 9588:tid 9626] [client 20.220.146.242:44030] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aZ9nA-SfsVC0YxizsTvE8wAAAEA"]
[Thu Feb 26 05:17:56.871734 2026] [:error] [pid 9702:tid 9710] [client 20.220.146.242:44003] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aZ9nBJvL1wp7EOGdesxJfwAAAMQ"]
[Thu Feb 26 05:17:58.093278 2026] [:error] [pid 6071:tid 6075] [client 20.220.146.242:43976] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aZ9nBoQfAzdrpgft075O2AAAAQE"]
[Thu Feb 26 05:17:59.100358 2026] [:error] [pid 9589:tid 9653] [client 20.220.146.242:43909] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aZ9nB6BuBxYiI1p-njS8PgAAAIA"]
[Thu Feb 26 05:17:59.978179 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:43979] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aZ9nB4QfAzdrpgft075O3gAAARQ"]
[Thu Feb 26 05:18:01.668925 2026] [:error] [pid 6071:tid 6096] [client 20.220.146.242:43920] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aZ9nCYQfAzdrpgft075O5AAAARY"]
[Thu Feb 26 05:18:02.366911 2026] [:error] [pid 9588:tid 9638] [client 20.220.146.242:43914] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aZ9nCuSfsVC0YxizsTvE-QAAAEw"]
[Thu Feb 26 05:18:03.251152 2026] [:error] [pid 9587:tid 9615] [client 20.220.146.242:43997] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aZ9nC_iLfyuakov_VlAu2gAAABI"]
[Thu Feb 26 05:18:03.931802 2026] [:error] [pid 6071:tid 6082] [client 20.220.146.242:43860] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aZ9nC4QfAzdrpgft075O7AAAAQg"]
[Thu Feb 26 05:18:05.065627 2026] [:error] [pid 9702:tid 9723] [client 20.220.146.242:43923] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aZ9nDZvL1wp7EOGdesxJggAAANE"]
[Thu Feb 26 05:18:05.645547 2026] [:error] [pid 6071:tid 6098] [client 20.220.146.242:44022] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aZ9nDYQfAzdrpgft075O7gAAARg"]
[Thu Feb 26 05:18:06.593469 2026] [:error] [pid 9588:tid 9645] [client 20.220.146.242:44010] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aZ9nDuSfsVC0YxizsTvFAQAAAFM"]
[Thu Feb 26 05:18:07.595578 2026] [:error] [pid 9588:tid 9641] [client 20.220.146.242:43994] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aZ9nD-SfsVC0YxizsTvFBAAAAE8"]
[Thu Feb 26 05:18:08.636450 2026] [:error] [pid 9588:tid 9637] [client 20.220.146.242:43911] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aZ9nEOSfsVC0YxizsTvFCAAAAEs"]
[Thu Feb 26 05:18:09.277130 2026] [:error] [pid 9588:tid 9633] [client 20.220.146.242:43851] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aZ9nEeSfsVC0YxizsTvFCQAAAEc"]
[Thu Feb 26 05:18:10.731421 2026] [:error] [pid 9588:tid 9631] [client 20.220.146.242:43919] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aZ9nEuSfsVC0YxizsTvFDAAAAEU"]
[Thu Feb 26 05:18:12.006404 2026] [:error] [pid 9587:tid 9607] [client 20.220.146.242:43975] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aZ9nFPiLfyuakov_VlAu3wAAAAo"]
[Thu Feb 26 05:18:13.159653 2026] [:error] [pid 9587:tid 9621] [client 20.220.146.242:43950] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aZ9nFfiLfyuakov_VlAu4wAAABg"]
[Thu Feb 26 05:18:14.177599 2026] [:error] [pid 9702:tid 9730] [client 20.220.146.242:43847] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aZ9nFpvL1wp7EOGdesxJkQAAANg"]
[Thu Feb 26 05:18:15.506484 2026] [:error] [pid 9588:tid 9634] [client 20.220.146.242:43986] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aZ9nF-SfsVC0YxizsTvFFQAAAEg"]
[Thu Feb 26 05:18:16.485466 2026] [:error] [pid 9702:tid 9708] [client 20.220.146.242:43982] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aZ9nGJvL1wp7EOGdesxJlgAAAMI"]
[Thu Feb 26 05:18:16.968696 2026] [:error] [pid 6071:tid 6083] [client 20.220.146.242:43912] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aZ9nGIQfAzdrpgft075O-AAAAQk"]
[Thu Feb 26 05:18:17.670165 2026] [:error] [pid 6071:tid 6098] [client 20.220.146.242:43993] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aZ9nGYQfAzdrpgft075O_AAAARg"]
[Thu Feb 26 05:18:18.322992 2026] [:error] [pid 6071:tid 6089] [client 20.220.146.242:44002] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aZ9nGoQfAzdrpgft075O_QAAAQ8"]
[Thu Feb 26 05:18:18.940765 2026] [:error] [pid 9589:tid 9671] [client 20.220.146.242:44024] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aZ9nGqBuBxYiI1p-njS8RQAAAJI"]
[Thu Feb 26 05:18:19.816754 2026] [:error] [pid 9702:tid 9729] [client 20.220.146.242:44013] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aZ9nG5vL1wp7EOGdesxJmQAAANc"]
[Thu Feb 26 05:18:20.481665 2026] [:error] [pid 6071:tid 6077] [client 20.220.146.242:44009] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aZ9nHIQfAzdrpgft075O_wAAAQM"]
[Thu Feb 26 05:18:21.387265 2026] [:error] [pid 9588:tid 9631] [client 20.220.146.242:43906] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aZ9nHeSfsVC0YxizsTvFJAAAAEU"]
[Thu Feb 26 05:18:22.485917 2026] [:error] [pid 6071:tid 6075] [client 20.220.146.242:43913] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aZ9nHoQfAzdrpgft075PBgAAAQE"]
[Thu Feb 26 05:18:23.531325 2026] [:error] [pid 9702:tid 9728] [client 20.220.146.242:43845] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aZ9nH5vL1wp7EOGdesxJsAAAANY"]
[Thu Feb 26 05:18:24.363012 2026] [:error] [pid 9702:tid 9726] [client 20.220.146.242:44023] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aZ9nIJvL1wp7EOGdesxJtQAAANQ"]
[Thu Feb 26 05:18:25.258100 2026] [:error] [pid 9589:tid 9676] [client 20.220.146.242:43989] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aZ9nIaBuBxYiI1p-njS8RwAAAJc"]
[Thu Feb 26 05:18:26.043171 2026] [:error] [pid 6071:tid 6085] [client 20.220.146.242:43926] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aZ9nIoQfAzdrpgft075PCQAAAQs"]
[Thu Feb 26 05:18:26.881529 2026] [:error] [pid 9589:tid 9668] [client 20.220.146.242:43988] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aZ9nIqBuBxYiI1p-njS8SAAAAI8"]
[Thu Feb 26 05:18:27.395157 2026] [:error] [pid 9589:tid 9672] [client 20.220.146.242:43999] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aZ9nI6BuBxYiI1p-njS8SgAAAJM"]
[Thu Feb 26 05:18:28.465573 2026] [:error] [pid 9702:tid 9729] [client 20.220.146.242:43992] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aZ9nJJvL1wp7EOGdesxJugAAANc"]
[Thu Feb 26 05:18:29.174073 2026] [:error] [pid 6071:tid 6080] [client 20.220.146.242:44020] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aZ9nJYQfAzdrpgft075PDwAAAQY"]
[Thu Feb 26 05:18:29.907111 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:44007] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aZ9nJYQfAzdrpgft075PEgAAAQo"]
[Thu Feb 26 05:18:31.000981 2026] [:error] [pid 6071:tid 6088] [client 20.220.146.242:43998] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aZ9nJoQfAzdrpgft075PFQAAAQ4"]
[Thu Feb 26 05:18:31.816220 2026] [:error] [pid 6071:tid 6092] [client 20.220.146.242:43990] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aZ9nJ4QfAzdrpgft075PGAAAARI"]
[Thu Feb 26 05:18:33.009987 2026] [:error] [pid 9702:tid 9722] [client 20.220.146.242:43934] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aZ9nKZvL1wp7EOGdesxJwgAAANA"]
[Thu Feb 26 05:18:33.583033 2026] [:error] [pid 9702:tid 9715] [client 20.220.146.242:43939] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aZ9nKZvL1wp7EOGdesxJxAAAAMk"]
[Thu Feb 26 05:18:34.343247 2026] [:error] [pid 9588:tid 9646] [client 20.220.146.242:44008] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aZ9nKuSfsVC0YxizsTvFNgAAAFQ"]
[Thu Feb 26 05:18:35.151430 2026] [:error] [pid 6071:tid 6097] [client 20.220.146.242:43972] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aZ9nK4QfAzdrpgft075PIQAAARc"]
[Thu Feb 26 05:18:36.216848 2026] [:error] [pid 6071:tid 6081] [client 20.220.146.242:43922] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aZ9nLIQfAzdrpgft075PJgAAAQc"]
[Thu Feb 26 05:18:37.422250 2026] [:error] [pid 6071:tid 6079] [client 20.220.146.242:43873] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aZ9nLYQfAzdrpgft075PLQAAAQU"]
[Thu Feb 26 05:18:38.819946 2026] [:error] [pid 6071:tid 6093] [client 20.220.146.242:43956] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aZ9nLoQfAzdrpgft075PMQAAARM"]
[Thu Feb 26 05:18:39.536001 2026] [:error] [pid 6071:tid 6092] [client 20.220.146.242:43987] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aZ9nL4QfAzdrpgft075PNQAAARI"]
[Thu Feb 26 05:18:40.146094 2026] [:error] [pid 9588:tid 9647] [client 20.220.146.242:43928] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aZ9nMOSfsVC0YxizsTvFOQAAAFU"]
[Thu Feb 26 05:19:30.806612 2026] [:error] [pid 9589:tid 9653] [client 20.220.146.242:43921] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ9nYqBuBxYiI1p-njS8vQAAAIA"]
[Thu Feb 26 05:19:35.857237 2026] [:error] [pid 9702:tid 9710] [client 20.220.146.242:44017] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aZ9nZ5vL1wp7EOGdesxKPwAAAMQ"]
[Thu Feb 26 05:19:36.424574 2026] [:error] [pid 6071:tid 6090] [client 20.220.146.242:43996] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aZ9naIQfAzdrpgft075PggAAARA"]
[Thu Feb 26 05:19:37.262166 2026] [:error] [pid 6071:tid 6098] [client 20.220.146.242:43971] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aZ9naYQfAzdrpgft075PhgAAARg"]
[Thu Feb 26 05:19:37.851295 2026] [:error] [pid 9702:tid 9714] [client 20.220.146.242:43932] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aZ9naZvL1wp7EOGdesxKQAAAAMg"]
[Thu Feb 26 05:19:38.346823 2026] [:error] [pid 9702:tid 9718] [client 20.220.146.242:43852] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aZ9napvL1wp7EOGdesxKRwAAAMw"]
[Thu Feb 26 05:19:39.102204 2026] [:error] [pid 6071:tid 6095] [client 20.220.146.242:44001] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aZ9na4QfAzdrpgft075PiQAAARU"]
[Thu Feb 26 05:19:39.783292 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:43924] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aZ9na4QfAzdrpgft075PjwAAAQo"]
[Thu Feb 26 05:19:40.377456 2026] [:error] [pid 9589:tid 9663] [client 20.220.146.242:43983] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aZ9nbKBuBxYiI1p-njS8wQAAAIo"]
[Thu Feb 26 05:19:41.231080 2026] [:error] [pid 9589:tid 9662] [client 20.220.146.242:43908] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aZ9nbaBuBxYiI1p-njS8wgAAAIk"]
[Thu Feb 26 05:19:41.847509 2026] [:error] [pid 9702:tid 9723] [client 20.220.146.242:44025] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aZ9nbZvL1wp7EOGdesxKSwAAANE"]
[Thu Feb 26 05:19:42.536402 2026] [:error] [pid 9702:tid 9716] [client 20.220.146.242:43977] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aZ9nbpvL1wp7EOGdesxKTQAAAMo"]
[Thu Feb 26 05:19:43.340124 2026] [:error] [pid 9702:tid 9710] [client 20.220.146.242:44029] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aZ9nb5vL1wp7EOGdesxKTwAAAMQ"]
[Thu Feb 26 05:19:44.176983 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:43991] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aZ9ncIQfAzdrpgft075PmQAAAQo"]
[Thu Feb 26 05:19:45.863333 2026] [:error] [pid 9587:tid 9613] [client 20.220.146.242:44015] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aZ9ncfiLfyuakov_VlAvGAAAABA"]
[Thu Feb 26 05:19:47.758079 2026] [:error] [pid 6071:tid 6075] [client 20.220.146.242:43853] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aZ9nc4QfAzdrpgft075PpQAAAQE"]
[Thu Feb 26 05:19:48.304317 2026] [:error] [pid 6071:tid 6092] [client 20.220.146.242:44027] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aZ9ndIQfAzdrpgft075PqAAAARI"]
[Thu Feb 26 05:19:48.960623 2026] [:error] [pid 6071:tid 6095] [client 20.220.146.242:43884] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aZ9ndIQfAzdrpgft075PsQAAARU"]
[Thu Feb 26 05:19:50.338362 2026] [:error] [pid 6071:tid 6090] [client 20.220.146.242:44031] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aZ9ndoQfAzdrpgft075PwwAAARA"]
[Thu Feb 26 05:19:50.982632 2026] [:error] [pid 6071:tid 6077] [client 20.220.146.242:43938] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aZ9ndoQfAzdrpgft075PyQAAAQM"]
[Thu Feb 26 05:19:51.593571 2026] [:error] [pid 9588:tid 9637] [client 20.220.146.242:43946] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aZ9nd-SfsVC0YxizsTvFdwAAAEs"]
[Thu Feb 26 05:19:52.346193 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:43910] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ9neIQfAzdrpgft075PzQAAARQ"]
[Thu Feb 26 05:19:53.363601 2026] [:error] [pid 9588:tid 9642] [client 20.220.146.242:43872] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ9neeSfsVC0YxizsTvFegAAAFA"]
[Thu Feb 26 05:19:53.868198 2026] [:error] [pid 6071:tid 6082] [client 20.220.146.242:43952] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ9neYQfAzdrpgft075P0QAAAQg"]
[Thu Feb 26 05:19:54.738841 2026] [:error] [pid 9589:tid 9659] [client 20.220.146.242:43973] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ9neqBuBxYiI1p-njS8zQAAAIY"]
[Thu Feb 26 05:19:55.776707 2026] [:error] [pid 9702:tid 9717] [client 20.220.146.242:43945] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aZ9ne5vL1wp7EOGdesxKbQAAAMs"]
[Thu Feb 26 05:19:56.613833 2026] [:error] [pid 9702:tid 9720] [client 20.220.146.242:43944] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aZ9nfJvL1wp7EOGdesxKcAAAAM4"]
[Thu Feb 26 05:19:57.950936 2026] [:error] [pid 6071:tid 6081] [client 20.220.146.242:43940] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aZ9nfYQfAzdrpgft075P3AAAAQc"]
[Thu Feb 26 05:19:58.862770 2026] [:error] [pid 6071:tid 6075] [client 20.220.146.242:43951] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aZ9nfoQfAzdrpgft075P4gAAAQE"]
[Thu Feb 26 05:19:59.395344 2026] [:error] [pid 6071:tid 6092] [client 20.220.146.242:44000] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZ9nf4QfAzdrpgft075P5gAAARI"]
[Thu Feb 26 05:20:00.129015 2026] [:error] [pid 6071:tid 6085] [client 20.220.146.242:43904] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZ9ngIQfAzdrpgft075P6QAAAQs"]
[Thu Feb 26 05:20:01.188217 2026] [:error] [pid 6071:tid 6098] [client 20.220.146.242:44011] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZ9ngYQfAzdrpgft075P7QAAARg"]
[Thu Feb 26 05:20:01.865734 2026] [:error] [pid 9588:tid 9638] [client 20.220.146.242:43888] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aZ9ngeSfsVC0YxizsTvFjAAAAEw"]
[Thu Feb 26 05:20:02.390639 2026] [:error] [pid 6071:tid 6083] [client 20.220.146.242:43941] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ9ngoQfAzdrpgft075P8wAAAQk"]
[Thu Feb 26 05:20:03.001969 2026] [:error] [pid 9587:tid 9600] [client 20.220.146.242:43947] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ9ng_iLfyuakov_VlAvHgAAAAM"]
[Thu Feb 26 05:20:03.571378 2026] [:error] [pid 9589:tid 9674] [client 20.220.146.242:44012] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ9ng6BuBxYiI1p-njS81AAAAJU"]
[Thu Feb 26 05:20:04.071824 2026] [:error] [pid 9589:tid 9666] [client 20.220.146.242:43854] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aZ9nhKBuBxYiI1p-njS81gAAAI0"]
[Thu Feb 26 05:20:04.680062 2026] [:error] [pid 9589:tid 9654] [client 20.220.146.242:44005] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aZ9nhKBuBxYiI1p-njS82QAAAIE"]
[Thu Feb 26 05:20:05.265315 2026] [:error] [pid 9588:tid 9634] [client 20.220.146.242:44006] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aZ9nheSfsVC0YxizsTvFkwAAAEg"]
[Thu Feb 26 05:20:05.907425 2026] [:error] [pid 9587:tid 9598] [client 20.220.146.242:43848] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aZ9nhfiLfyuakov_VlAvJAAAAAE"]
[Thu Feb 26 05:20:06.712503 2026] [:error] [pid 9588:tid 9632] [client 20.220.146.242:43902] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aZ9nhuSfsVC0YxizsTvFlQAAAEY"]
[Thu Feb 26 05:20:07.206959 2026] [:error] [pid 9589:tid 9673] [client 20.220.146.242:43842] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZ9nh6BuBxYiI1p-njS82wAAAJQ"]
[Thu Feb 26 05:20:07.910218 2026] [:error] [pid 9702:tid 9709] [client 20.220.146.242:43871] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZ9nh5vL1wp7EOGdesxKggAAAMM"]
[Thu Feb 26 05:20:08.494836 2026] [:error] [pid 9702:tid 9716] [client 20.220.146.242:43969] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZ9niJvL1wp7EOGdesxKhgAAAMo"]
[Thu Feb 26 05:20:09.630768 2026] [:error] [pid 9588:tid 9637] [client 20.220.146.242:43931] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZ9nieSfsVC0YxizsTvFmAAAAEs"]
[Thu Feb 26 05:20:10.422000 2026] [:error] [pid 9702:tid 9715] [client 20.220.146.242:43881] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aZ9nipvL1wp7EOGdesxKkAAAAMk"]
[Thu Feb 26 05:20:11.221551 2026] [:error] [pid 9588:tid 9642] [client 20.220.146.242:43981] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aZ9ni-SfsVC0YxizsTvFmgAAAFA"]
[Thu Feb 26 05:20:12.052428 2026] [:error] [pid 9702:tid 9709] [client 20.220.146.242:43917] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aZ9njJvL1wp7EOGdesxKqgAAAMM"]
[Thu Feb 26 05:20:12.605621 2026] [:error] [pid 9702:tid 9721] [client 20.220.146.242:43962] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aZ9njJvL1wp7EOGdesxKrwAAAM8"]
[Thu Feb 26 05:20:13.406300 2026] [:error] [pid 9588:tid 9638] [client 20.220.146.242:44028] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aZ9njeSfsVC0YxizsTvFnQAAAEw"]
[Thu Feb 26 05:20:13.898721 2026] [:error] [pid 9702:tid 9714] [client 20.220.146.242:43995] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aZ9njZvL1wp7EOGdesxKtQAAAMg"]
[Thu Feb 26 05:20:14.541559 2026] [:error] [pid 9702:tid 9713] [client 20.220.146.242:43957] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aZ9njpvL1wp7EOGdesxKugAAAMc"]
[Thu Feb 26 05:20:15.067898 2026] [:error] [pid 9702:tid 9727] [client 20.220.146.242:43890] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aZ9nj5vL1wp7EOGdesxKvAAAANU"]
[Thu Feb 26 05:20:15.758004 2026] [:error] [pid 9587:tid 9598] [client 20.220.146.242:43933] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aZ9nj_iLfyuakov_VlAvMgAAAAE"]
[Thu Feb 26 05:20:16.573883 2026] [:error] [pid 9702:tid 9729] [client 20.220.146.242:43959] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aZ9nkJvL1wp7EOGdesxKvwAAANc"]
[Thu Feb 26 05:20:17.286029 2026] [:error] [pid 9587:tid 9607] [client 20.220.146.242:43840] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aZ9nkfiLfyuakov_VlAvNAAAAAo"]
[Thu Feb 26 05:20:17.857027 2026] [:error] [pid 9588:tid 9637] [client 20.220.146.242:43937] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aZ9nkeSfsVC0YxizsTvFqgAAAEs"]
[Thu Feb 26 05:20:18.621397 2026] [:error] [pid 9588:tid 9638] [client 20.220.146.242:43905] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZ9nkuSfsVC0YxizsTvFsAAAAEw"]
[Thu Feb 26 05:20:19.368175 2026] [:error] [pid 9588:tid 9631] [client 20.220.146.242:43925] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZ9nk-SfsVC0YxizsTvFsgAAAEU"]
[Thu Feb 26 05:20:20.184170 2026] [:error] [pid 6071:tid 6080] [client 20.220.146.242:43967] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZ9nlIQfAzdrpgft075P_wAAAQY"]
[Thu Feb 26 05:20:20.788918 2026] [:error] [pid 9702:tid 9726] [client 20.220.146.242:43960] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZ9nlJvL1wp7EOGdesxKxwAAANQ"]
[Thu Feb 26 05:20:21.463048 2026] [:error] [pid 9702:tid 9711] [client 20.220.146.242:43779] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ9nlZvL1wp7EOGdesxKyAAAAMU"]
[Thu Feb 26 05:20:22.088549 2026] [:error] [pid 6071:tid 6091] [client 20.220.146.242:43935] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ9nloQfAzdrpgft075QBgAAARE"]
[Thu Feb 26 05:20:22.784914 2026] [:error] [pid 9702:tid 9709] [client 20.220.146.242:43943] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ9nlpvL1wp7EOGdesxKzAAAAMM"]
[Thu Feb 26 05:20:23.561963 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:43970] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ9nl4QfAzdrpgft075QDAAAARQ"]
[Thu Feb 26 05:20:24.384918 2026] [:error] [pid 6071:tid 6083] [client 20.220.146.242:43891] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZ9nmIQfAzdrpgft075QDwAAAQk"]
[Thu Feb 26 05:20:25.174631 2026] [:error] [pid 9702:tid 9729] [client 20.220.146.242:43806] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZ9nmZvL1wp7EOGdesxK0gAAANc"]
[Thu Feb 26 05:20:26.000867 2026] [:error] [pid 9588:tid 9637] [client 20.220.146.242:43864] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZ9nmeSfsVC0YxizsTvFvAAAAEs"]
[Thu Feb 26 05:20:26.654533 2026] [:error] [pid 9702:tid 9724] [client 20.220.146.242:43849] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZ9nmpvL1wp7EOGdesxK2wAAANI"]
[Thu Feb 26 05:20:27.163112 2026] [:error] [pid 6071:tid 6087] [client 20.220.146.242:43789] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZ9nm4QfAzdrpgft075QFgAAAQ0"]
[Thu Feb 26 05:20:27.778799 2026] [:error] [pid 9588:tid 9638] [client 20.220.146.242:43955] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZ9nm-SfsVC0YxizsTvFvQAAAEw"]
[Thu Feb 26 05:20:28.426178 2026] [:error] [pid 9702:tid 9708] [client 20.220.146.242:43723] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZ9nnJvL1wp7EOGdesxK4gAAAMI"]
[Thu Feb 26 05:20:29.047667 2026] [:error] [pid 9702:tid 9712] [client 20.220.146.242:43862] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZ9nnZvL1wp7EOGdesxK5gAAAMY"]
[Thu Feb 26 05:20:29.754147 2026] [:error] [pid 9589:tid 9669] [client 20.220.146.242:43886] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aZ9nnaBuBxYiI1p-njS88QAAAJA"]
[Thu Feb 26 05:20:30.205276 2026] [:error] [pid 9587:tid 9616] [client 20.220.146.242:43930] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aZ9nnviLfyuakov_VlAvOwAAABM"]
[Thu Feb 26 05:20:30.735887 2026] [:error] [pid 9587:tid 9620] [client 20.220.146.242:43885] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aZ9nnviLfyuakov_VlAvPQAAABc"]
[Thu Feb 26 05:20:31.190704 2026] [:error] [pid 9589:tid 9653] [client 20.220.146.242:43868] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aZ9nn6BuBxYiI1p-njS89QAAAIA"]
[Thu Feb 26 05:20:31.700669 2026] [:error] [pid 9702:tid 9718] [client 20.220.146.242:43846] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aZ9nn5vL1wp7EOGdesxK6gAAAMw"]
[Thu Feb 26 05:20:32.236220 2026] [:error] [pid 6071:tid 6078] [client 20.220.146.242:43953] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aZ9noIQfAzdrpgft075QHQAAAQQ"]
[Thu Feb 26 05:20:32.729590 2026] [:error] [pid 9587:tid 9610] [client 20.220.146.242:43865] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aZ9noPiLfyuakov_VlAvQQAAAA0"]
[Thu Feb 26 05:21:23.798919 2026] [autoindex:error] [pid 9589:tid 9667] [client 20.220.146.242:44011] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 05:21:29.499509 2026] [:error] [pid 9702:tid 9724] [client 20.220.146.242:43857] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ9n2ZvL1wp7EOGdesxLOAAAANI"]
[Thu Feb 26 05:21:30.190831 2026] [:error] [pid 6071:tid 6098] [client 20.220.146.242:43819] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ9n2oQfAzdrpgft075QqAAAARg"]
[Thu Feb 26 05:21:30.677143 2026] [:error] [pid 6071:tid 6093] [client 20.220.146.242:43903] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ9n2oQfAzdrpgft075QqQAAARM"]
[Thu Feb 26 05:21:31.363700 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:43844] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ9n24QfAzdrpgft075QrAAAARQ"]
[Thu Feb 26 05:21:31.919393 2026] [:error] [pid 6071:tid 6096] [client 20.220.146.242:43777] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aZ9n24QfAzdrpgft075QrgAAARY"]
[Thu Feb 26 05:21:32.714997 2026] [:error] [pid 9587:tid 9616] [client 20.220.146.242:43880] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aZ9n3PiLfyuakov_VlAvWgAAABM"]
[Thu Feb 26 05:21:33.233081 2026] [:error] [pid 9587:tid 9620] [client 20.220.146.242:43901] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aZ9n3fiLfyuakov_VlAvXAAAABc"]
[Thu Feb 26 05:21:33.711515 2026] [:error] [pid 9702:tid 9706] [client 20.220.146.242:43787] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aZ9n3ZvL1wp7EOGdesxLPAAAAMA"]
[Thu Feb 26 05:21:34.367990 2026] [:error] [pid 9588:tid 9635] [client 20.220.146.242:43812] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ9n3uSfsVC0YxizsTvF9gAAAEk"]
[Thu Feb 26 05:21:34.887970 2026] [:error] [pid 6071:tid 6078] [client 20.220.146.242:43797] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aZ9n3oQfAzdrpgft075QtAAAAQQ"]
[Thu Feb 26 05:21:35.454367 2026] [:error] [pid 9588:tid 9633] [client 20.220.146.242:43855] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aZ9n3-SfsVC0YxizsTvF9wAAAEc"]
[Thu Feb 26 05:21:36.158086 2026] [:error] [pid 9589:tid 9670] [client 20.220.146.242:43866] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aZ9n4KBuBxYiI1p-njS9JwAAAJE"]
[Thu Feb 26 05:21:36.766317 2026] [:error] [pid 9589:tid 9655] [client 20.220.146.242:43929] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aZ9n4KBuBxYiI1p-njS9KAAAAII"]
[Thu Feb 26 05:21:37.338611 2026] [:error] [pid 9588:tid 9639] [client 20.220.146.242:43861] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZ9n4eSfsVC0YxizsTvF-QAAAE0"]
[Thu Feb 26 05:21:38.078352 2026] [:error] [pid 9702:tid 9727] [client 20.220.146.242:43859] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ9n4pvL1wp7EOGdesxLPwAAANU"]
[Thu Feb 26 05:21:38.892978 2026] [:error] [pid 9589:tid 9674] [client 20.220.146.242:43883] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ9n4qBuBxYiI1p-njS9KwAAAJU"]
[Thu Feb 26 05:21:39.630019 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:43954] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ9n44QfAzdrpgft075QvwAAAQo"]
[Thu Feb 26 05:21:40.386660 2026] [:error] [pid 9588:tid 9637] [client 20.220.146.242:43936] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ9n5OSfsVC0YxizsTvF_QAAAEs"]
[Thu Feb 26 05:21:41.280112 2026] [:error] [pid 9588:tid 9643] [client 20.220.146.242:43894] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aZ9n5eSfsVC0YxizsTvF_gAAAFE"]
[Thu Feb 26 05:21:42.185987 2026] [:error] [pid 9588:tid 9644] [client 20.220.146.242:43897] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aZ9n5uSfsVC0YxizsTvF_wAAAFI"]
[Thu Feb 26 05:21:43.152455 2026] [:error] [pid 9702:tid 9726] [client 20.220.146.242:43968] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aZ9n55vL1wp7EOGdesxLQAAAANQ"]
[Thu Feb 26 05:21:43.649602 2026] [:error] [pid 9589:tid 9669] [client 20.220.146.242:43841] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aZ9n56BuBxYiI1p-njS9NwAAAJA"]
[Thu Feb 26 05:21:44.316219 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:44004] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ9n6IQfAzdrpgft075Q0AAAAQo"]
[Thu Feb 26 05:21:45.010240 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:43889] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ9n6YQfAzdrpgft075Q1wAAARQ"]
[Thu Feb 26 05:21:45.688213 2026] [:error] [pid 9702:tid 9730] [client 20.220.146.242:43865] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ9n6ZvL1wp7EOGdesxLQQAAANg"]
[Thu Feb 26 05:21:46.254552 2026] [:error] [pid 9588:tid 9635] [client 20.220.146.242:43875] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ9n6uSfsVC0YxizsTvGHwAAAEk"]
[Thu Feb 26 05:21:47.056788 2026] [:error] [pid 9588:tid 9648] [client 20.220.146.242:43828] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZ9n6-SfsVC0YxizsTvGIAAAAFY"]
[Thu Feb 26 05:21:47.948024 2026] [:error] [pid 6071:tid 6093] [client 20.220.146.242:43867] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aZ9n64QfAzdrpgft075Q4wAAARM"]
[Thu Feb 26 05:21:48.568033 2026] [:error] [pid 9702:tid 9708] [client 20.220.146.242:43978] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aZ9n7JvL1wp7EOGdesxLQgAAAMI"]
[Thu Feb 26 05:21:49.083204 2026] [:error] [pid 9702:tid 9721] [client 20.220.146.242:43811] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aZ9n7ZvL1wp7EOGdesxLRAAAAM8"]
[Thu Feb 26 05:21:49.703127 2026] [:error] [pid 9587:tid 9605] [client 20.220.146.242:43728] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aZ9n7fiLfyuakov_VlAvYwAAAAg"]
[Thu Feb 26 05:21:50.510025 2026] [:error] [pid 6071:tid 6089] [client 20.220.146.242:43799] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZ9n7oQfAzdrpgft075Q6AAAAQ8"]
[Thu Feb 26 05:21:51.065574 2026] [:error] [pid 6071:tid 6085] [client 20.220.146.242:43961] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZ9n74QfAzdrpgft075Q6gAAAQs"]
[Thu Feb 26 05:21:51.757946 2026] [:error] [pid 6071:tid 6093] [client 20.220.146.242:43879] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZ9n74QfAzdrpgft075Q7gAAARM"]
[Thu Feb 26 05:21:52.380176 2026] [:error] [pid 6071:tid 6075] [client 20.220.146.242:43800] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZ9n8IQfAzdrpgft075Q8QAAAQE"]
[Thu Feb 26 05:21:53.490676 2026] [:error] [pid 9702:tid 9722] [client 20.220.146.242:43876] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZ9n8ZvL1wp7EOGdesxLSQAAANA"]
[Thu Feb 26 05:21:54.446709 2026] [:error] [pid 6071:tid 6082] [client 20.220.146.242:43843] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aZ9n8oQfAzdrpgft075Q9QAAAQg"]
[Thu Feb 26 05:21:55.116075 2026] [:error] [pid 6071:tid 6076] [client 20.220.146.242:43984] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aZ9n84QfAzdrpgft075Q-AAAAQI"]
[Thu Feb 26 05:21:55.631218 2026] [:error] [pid 9588:tid 9650] [client 20.220.146.242:43776] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aZ9n8-SfsVC0YxizsTvGJAAAAFg"]
[Thu Feb 26 05:21:56.308929 2026] [:error] [pid 9587:tid 9618] [client 20.220.146.242:43863] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aZ9n9PiLfyuakov_VlAvZAAAABU"]
[Thu Feb 26 05:21:56.754000 2026] [:error] [pid 9702:tid 9715] [client 20.220.146.242:43780] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aZ9n9JvL1wp7EOGdesxLTgAAAMk"]
[Thu Feb 26 05:21:57.307911 2026] [:error] [pid 9702:tid 9726] [client 20.220.146.242:43824] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aZ9n9ZvL1wp7EOGdesxLUAAAANQ"]
[Thu Feb 26 05:21:57.868113 2026] [:error] [pid 6071:tid 6075] [client 20.220.146.242:43718] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aZ9n9YQfAzdrpgft075Q-wAAAQE"]
[Thu Feb 26 05:21:58.475024 2026] [:error] [pid 6071:tid 6083] [client 20.220.146.242:44018] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aZ9n9oQfAzdrpgft075Q_AAAAQk"]
[Thu Feb 26 05:21:58.944900 2026] [:error] [pid 6071:tid 6096] [client 20.220.146.242:43892] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aZ9n9oQfAzdrpgft075Q_wAAARY"]
[Thu Feb 26 05:21:59.778633 2026] [:error] [pid 9702:tid 9708] [client 20.220.146.242:43794] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aZ9n95vL1wp7EOGdesxLUQAAAMI"]
[Thu Feb 26 05:22:00.430249 2026] [:error] [pid 9588:tid 9639] [client 20.220.146.242:43974] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aZ9n-OSfsVC0YxizsTvGLQAAAE0"]
[Thu Feb 26 05:22:01.161147 2026] [:error] [pid 6071:tid 6097] [client 20.220.146.242:43965] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ9n-YQfAzdrpgft075RAwAAARc"]
[Thu Feb 26 05:22:01.960502 2026] [:error] [pid 9702:tid 9723] [client 20.220.146.242:43831] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ9n-ZvL1wp7EOGdesxLUgAAANE"]
[Thu Feb 26 05:22:02.448208 2026] [:error] [pid 6071:tid 6080] [client 20.220.146.242:43836] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ9n-oQfAzdrpgft075RBgAAAQY"]
[Thu Feb 26 05:22:02.973673 2026] [:error] [pid 9702:tid 9711] [client 20.220.146.242:43830] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ9n-pvL1wp7EOGdesxLUwAAAMU"]
[Thu Feb 26 05:22:03.829556 2026] [:error] [pid 6071:tid 6075] [client 20.220.146.242:43816] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aZ9n-4QfAzdrpgft075RCAAAAQE"]
[Thu Feb 26 05:22:04.359212 2026] [:error] [pid 9589:tid 9675] [client 20.220.146.242:43790] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aZ9n_KBuBxYiI1p-njS9SgAAAJY"]
[Thu Feb 26 05:22:04.936732 2026] [:error] [pid 6071:tid 6087] [client 20.220.146.242:43805] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aZ9n_IQfAzdrpgft075RCQAAAQ0"]
[Thu Feb 26 05:22:05.485531 2026] [:error] [pid 9702:tid 9710] [client 20.220.146.242:43803] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aZ9n_ZvL1wp7EOGdesxLVAAAAMQ"]
[Thu Feb 26 05:22:06.084328 2026] [:error] [pid 9702:tid 9722] [client 20.220.146.242:43801] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aZ9n_pvL1wp7EOGdesxLVwAAANA"]
[Thu Feb 26 05:22:06.711419 2026] [:error] [pid 6071:tid 6098] [client 20.220.146.242:43915] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aZ9n_oQfAzdrpgft075RDAAAARg"]
[Thu Feb 26 05:22:07.423131 2026] [:error] [pid 6071:tid 6088] [client 20.220.146.242:43804] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aZ9n_4QfAzdrpgft075RDQAAAQ4"]
[Thu Feb 26 05:22:08.245709 2026] [:error] [pid 9702:tid 9728] [client 20.220.146.242:43966] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aZ9oAJvL1wp7EOGdesxLWwAAANY"]
[Thu Feb 26 05:22:08.981383 2026] [:error] [pid 6071:tid 6092] [client 20.220.146.242:43783] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZ9oAIQfAzdrpgft075RDwAAARI"]
[Thu Feb 26 05:22:09.561219 2026] [:error] [pid 9588:tid 9637] [client 20.220.146.242:43858] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZ9oAeSfsVC0YxizsTvGXAAAAEs"]
[Thu Feb 26 05:22:10.216897 2026] [:error] [pid 6071:tid 6095] [client 20.220.146.242:43958] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZ9oAoQfAzdrpgft075REAAAARU"]
[Thu Feb 26 05:22:10.769396 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:43877] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZ9oAoQfAzdrpgft075REgAAAQo"]
[Thu Feb 26 05:22:11.469204 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:43796] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZ9oA4QfAzdrpgft075RFAAAARQ"]
[Thu Feb 26 05:22:12.223249 2026] [:error] [pid 9702:tid 9727] [client 20.220.146.242:43786] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZ9oBJvL1wp7EOGdesxLXgAAANU"]
[Thu Feb 26 05:22:12.909237 2026] [:error] [pid 9588:tid 9643] [client 20.220.146.242:43785] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZ9oBOSfsVC0YxizsTvGcQAAAFE"]
[Thu Feb 26 05:22:13.469700 2026] [:error] [pid 9589:tid 9673] [client 20.220.146.242:43927] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZ9oBaBuBxYiI1p-njS9TwAAAJQ"]
[Thu Feb 26 05:22:14.564920 2026] [:error] [pid 6071:tid 6080] [client 20.220.146.242:43724] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZ9oBoQfAzdrpgft075RFgAAAQY"]
[Thu Feb 26 05:22:15.487648 2026] [:error] [pid 6071:tid 6091] [client 20.220.146.242:43856] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZ9oB4QfAzdrpgft075RGwAAARE"]
[Thu Feb 26 05:22:16.179219 2026] [:error] [pid 9702:tid 9708] [client 20.220.146.242:43832] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZ9oCJvL1wp7EOGdesxLYAAAAMI"]
[Thu Feb 26 05:22:16.882790 2026] [:error] [pid 6071:tid 6085] [client 20.220.146.242:43923] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZ9oCIQfAzdrpgft075RHAAAAQs"]
[Thu Feb 26 05:22:17.622772 2026] [:error] [pid 6071:tid 6092] [client 20.220.146.242:43817] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ9oCYQfAzdrpgft075RHgAAARI"]
[Thu Feb 26 05:22:18.206494 2026] [:error] [pid 6071:tid 6097] [client 20.220.146.242:43784] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZ9oCoQfAzdrpgft075RIAAAARc"]
[Thu Feb 26 05:22:18.888645 2026] [:error] [pid 9588:tid 9630] [client 20.220.146.242:43810] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZ9oCuSfsVC0YxizsTvGeAAAAEQ"]
[Thu Feb 26 05:22:19.370937 2026] [:error] [pid 9589:tid 9677] [client 20.220.146.242:43895] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZ9oC6BuBxYiI1p-njS9UAAAAJg"]
[Thu Feb 26 05:22:19.871193 2026] [:error] [pid 9587:tid 9606] [client 20.220.146.242:43809] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aZ9oC_iLfyuakov_VlAvagAAAAk"]
[Thu Feb 26 05:22:20.322407 2026] [:error] [pid 9588:tid 9647] [client 20.220.146.242:43833] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ9oDOSfsVC0YxizsTvGewAAAFU"]
[Thu Feb 26 05:22:20.870427 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:43918] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ9oDIQfAzdrpgft075RIQAAARQ"]
[Thu Feb 26 05:22:21.371792 2026] [:error] [pid 6071:tid 6078] [client 20.220.146.242:43920] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ9oDYQfAzdrpgft075RIgAAAQQ"]
[Thu Feb 26 05:22:21.836445 2026] [:error] [pid 6071:tid 6083] [client 20.220.146.242:43839] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ9oDYQfAzdrpgft075RJQAAAQk"]
[Thu Feb 26 05:22:22.357908 2026] [:error] [pid 9589:tid 9658] [client 20.220.146.242:43893] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZ9oDqBuBxYiI1p-njS9UQAAAIU"]
[Thu Feb 26 05:22:22.882410 2026] [:error] [pid 9588:tid 9639] [client 20.220.146.242:44030] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZ9oDuSfsVC0YxizsTvGfQAAAE0"]
[Thu Feb 26 05:22:23.398804 2026] [:error] [pid 9589:tid 9672] [client 20.220.146.242:44026] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZ9oD6BuBxYiI1p-njS9UgAAAJM"]
[Thu Feb 26 05:22:24.018159 2026] [:error] [pid 9587:tid 9598] [client 20.220.146.242:43742] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZ9oEPiLfyuakov_VlAvbgAAAAE"]
[Thu Feb 26 05:22:24.542550 2026] [:error] [pid 9587:tid 9611] [client 20.220.146.242:43815] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ9oEPiLfyuakov_VlAvcAAAAA4"]
[Thu Feb 26 05:22:25.009915 2026] [:error] [pid 9587:tid 9605] [client 20.220.146.242:43914] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ9oEfiLfyuakov_VlAvcQAAAAg"]
[Thu Feb 26 05:22:25.495513 2026] [:error] [pid 9587:tid 9604] [client 20.220.146.242:43802] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ9oEfiLfyuakov_VlAvcgAAAAc"]
[Thu Feb 26 05:22:26.066978 2026] [:error] [pid 9589:tid 9670] [client 20.220.146.242:43994] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ9oEqBuBxYiI1p-njS9VAAAAJE"]
[Thu Feb 26 05:22:26.552990 2026] [:error] [pid 9589:tid 9664] [client 20.220.146.242:43899] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ9oEqBuBxYiI1p-njS9VgAAAIs"]
[Thu Feb 26 05:22:43.131088 2026] [:error] [pid 9589:tid 9655] [client 20.220.146.242:43818] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZ9oI6BuBxYiI1p-njS9ZAAAAII"]
[Thu Feb 26 05:22:43.693180 2026] [:error] [pid 9588:tid 9647] [client 20.220.146.242:44010] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aZ9oI-SfsVC0YxizsTvGhgAAAFU"]
[Thu Feb 26 05:23:18.345228 2026] [:error] [pid 9702:tid 9710] [client 20.220.146.242:43988] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aZ9oRpvL1wp7EOGdesxLpgAAAMQ"]
[Thu Feb 26 05:23:19.423831 2026] [:error] [pid 9588:tid 9628] [client 20.220.146.242:43950] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aZ9oR-SfsVC0YxizsTvGswAAAEI"]
[Thu Feb 26 05:23:21.447593 2026] [:error] [pid 9588:tid 9646] [client 20.220.146.242:44022] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aZ9oSeSfsVC0YxizsTvGtgAAAFQ"]
[Thu Feb 26 05:23:22.516835 2026] [:error] [pid 9588:tid 9632] [client 20.220.146.242:43997] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aZ9oSuSfsVC0YxizsTvGuAAAAEY"]
[Thu Feb 26 05:23:23.377242 2026] [:error] [pid 9588:tid 9650] [client 20.220.146.242:43822] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aZ9oS-SfsVC0YxizsTvGuQAAAFg"]
[Thu Feb 26 05:23:23.861453 2026] [:error] [pid 6071:tid 6090] [client 20.220.146.242:43869] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aZ9oS4QfAzdrpgft075RrQAAARA"]
[Thu Feb 26 05:23:24.750648 2026] [:error] [pid 9588:tid 9641] [client 20.220.146.242:43835] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aZ9oTOSfsVC0YxizsTvGugAAAE8"]
[Thu Feb 26 05:23:25.823930 2026] [:error] [pid 9589:tid 9663] [client 20.220.146.242:43782] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aZ9oTaBuBxYiI1p-njS92wAAAIo"]
[Thu Feb 26 05:23:26.868779 2026] [:error] [pid 9587:tid 9605] [client 20.220.146.242:43768] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aZ9oTviLfyuakov_VlAv8QAAAAg"]
[Thu Feb 26 05:23:28.323281 2026] [:error] [pid 17651:tid 17666] [client 20.220.146.242:43900] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aZ9oUJ5mQDz5cec8gk4wmwAAAU0"]
[Thu Feb 26 05:23:29.002624 2026] [:error] [pid 6071:tid 6091] [client 20.220.146.242:43907] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aZ9oUYQfAzdrpgft075RrwAAARE"]
[Thu Feb 26 05:23:29.570581 2026] [:error] [pid 17651:tid 17668] [client 20.220.146.242:43753] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aZ9oUZ5mQDz5cec8gk4wnQAAAU8"]
[Thu Feb 26 05:23:30.287628 2026] [:error] [pid 9588:tid 9631] [client 20.220.146.242:43873] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aZ9oUuSfsVC0YxizsTvGvAAAAEU"]
[Thu Feb 26 05:23:30.825083 2026] [:error] [pid 9702:tid 9730] [client 20.220.146.242:43999] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aZ9oUpvL1wp7EOGdesxLrgAAANg"]
[Thu Feb 26 05:23:31.495630 2026] [:error] [pid 9588:tid 9639] [client 20.220.146.242:43649] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aZ9oU-SfsVC0YxizsTvGvwAAAE0"]
[Thu Feb 26 05:23:32.258590 2026] [:error] [pid 9702:tid 9720] [client 20.220.146.242:43860] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aZ9oVJvL1wp7EOGdesxLtAAAAM4"]
[Thu Feb 26 05:23:32.958343 2026] [:error] [pid 6071:tid 6080] [client 20.220.146.242:44009] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aZ9oVIQfAzdrpgft075RsAAAAQY"]
[Thu Feb 26 05:23:33.668157 2026] [:error] [pid 9702:tid 9714] [client 20.220.146.242:44019] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aZ9oVZvL1wp7EOGdesxLtQAAAMg"]
[Thu Feb 26 05:23:34.761546 2026] [:error] [pid 9589:tid 9653] [client 20.220.146.242:43827] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aZ9oVqBuBxYiI1p-njS93wAAAIA"]
[Thu Feb 26 05:23:35.910326 2026] [:error] [pid 9589:tid 9673] [client 20.220.146.242:43980] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aZ9oV6BuBxYiI1p-njS94QAAAJQ"]
[Thu Feb 26 05:23:36.892864 2026] [:error] [pid 9589:tid 9667] [client 20.220.146.242:43911] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aZ9oWKBuBxYiI1p-njS94wAAAI4"]
[Thu Feb 26 05:23:37.386018 2026] [:error] [pid 9587:tid 9608] [client 20.220.146.242:44014] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aZ9oWfiLfyuakov_VlAv9AAAAAs"]
[Thu Feb 26 05:23:38.179333 2026] [:error] [pid 9589:tid 9677] [client 20.220.146.242:43982] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aZ9oWqBuBxYiI1p-njS95gAAAJg"]
[Thu Feb 26 05:23:38.698844 2026] [:error] [pid 17651:tid 17655] [client 20.220.146.242:44003] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aZ9oWp5mQDz5cec8gk4wowAAAUI"]
[Thu Feb 26 05:23:39.778240 2026] [:error] [pid 17651:tid 17658] [client 20.220.146.242:43906] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aZ9oW55mQDz5cec8gk4wpQAAAUU"]
[Thu Feb 26 05:23:40.400509 2026] [:error] [pid 17651:tid 17660] [client 20.220.146.242:43750] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aZ9oXJ5mQDz5cec8gk4wqAAAAUc"]
[Thu Feb 26 05:23:40.950534 2026] [:error] [pid 17651:tid 17661] [client 20.220.146.242:43939] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aZ9oXJ5mQDz5cec8gk4wqQAAAUg"]
[Thu Feb 26 05:23:41.822575 2026] [:error] [pid 6071:tid 6092] [client 20.220.146.242:43934] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aZ9oXYQfAzdrpgft075RswAAARI"]
[Thu Feb 26 05:23:42.628328 2026] [:error] [pid 9587:tid 9616] [client 20.220.146.242:43823] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aZ9oXviLfyuakov_VlAv-AAAABM"]
[Thu Feb 26 05:23:43.258871 2026] [:error] [pid 9587:tid 9618] [client 20.220.146.242:43922] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aZ9oX_iLfyuakov_VlAv-wAAABU"]
[Thu Feb 26 05:23:43.816937 2026] [:error] [pid 9587:tid 9611] [client 20.220.146.242:43722] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aZ9oX_iLfyuakov_VlAv_QAAAA4"]
[Thu Feb 26 05:23:44.373383 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:43909] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aZ9oYIQfAzdrpgft075RuAAAAQo"]
[Thu Feb 26 05:23:45.284139 2026] [:error] [pid 9587:tid 9619] [client 20.220.146.242:43887] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aZ9oYfiLfyuakov_VlAwAgAAABY"]
[Thu Feb 26 05:23:45.835076 2026] [:error] [pid 9589:tid 9663] [client 20.220.146.242:43993] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aZ9oYaBuBxYiI1p-njS96QAAAIo"]
[Thu Feb 26 05:23:46.589152 2026] [:error] [pid 9588:tid 9627] [client 20.220.146.242:44007] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aZ9oYuSfsVC0YxizsTvGwwAAAEE"]
[Thu Feb 26 05:23:47.137280 2026] [:error] [pid 9587:tid 9616] [client 20.220.146.242:43850] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aZ9oY_iLfyuakov_VlAwCAAAABM"]
[Thu Feb 26 05:23:47.740078 2026] [:error] [pid 9587:tid 9617] [client 20.220.146.242:43963] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aZ9oY_iLfyuakov_VlAwCQAAABQ"]
[Thu Feb 26 05:23:48.341207 2026] [:error] [pid 9587:tid 9620] [client 20.220.146.242:44024] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aZ9oZPiLfyuakov_VlAwDgAAABc"]
[Thu Feb 26 05:23:48.847479 2026] [:error] [pid 9589:tid 9655] [client 20.220.146.242:43986] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aZ9oZKBuBxYiI1p-njS96gAAAII"]
[Thu Feb 26 05:23:49.792521 2026] [:error] [pid 9587:tid 9615] [client 20.220.146.242:44013] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aZ9oZfiLfyuakov_VlAwDwAAABI"]
[Thu Feb 26 05:23:50.460592 2026] [:error] [pid 9587:tid 9599] [client 20.220.146.242:43979] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aZ9oZviLfyuakov_VlAwEwAAAAI"]
[Thu Feb 26 05:23:50.913844 2026] [:error] [pid 9587:tid 9616] [client 20.220.146.242:43992] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aZ9oZviLfyuakov_VlAwFgAAABM"]
[Thu Feb 26 05:23:51.599969 2026] [:error] [pid 9589:tid 9676] [client 20.220.146.242:43919] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aZ9oZ6BuBxYiI1p-njS97AAAAJc"]
[Thu Feb 26 05:23:52.222812 2026] [:error] [pid 9587:tid 9609] [client 20.220.146.242:43821] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aZ9oaPiLfyuakov_VlAwGQAAAAw"]
[Thu Feb 26 05:23:52.827794 2026] [:error] [pid 6071:tid 6086] [client 20.220.146.242:43977] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aZ9oaIQfAzdrpgft075RvQAAAQw"]
[Thu Feb 26 05:23:53.467838 2026] [:error] [pid 9588:tid 9636] [client 20.220.146.242:43793] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aZ9oaeSfsVC0YxizsTvGxAAAAEo"]
[Thu Feb 26 05:23:54.095467 2026] [:error] [pid 9587:tid 9597] [client 20.220.146.242:43989] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aZ9oaviLfyuakov_VlAwHwAAAAA"]
[Thu Feb 26 05:23:54.949301 2026] [:error] [pid 9587:tid 9617] [client 20.220.146.242:43845] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aZ9oaviLfyuakov_VlAwIAAAABQ"]
[Thu Feb 26 05:23:55.594654 2026] [:error] [pid 9589:tid 9656] [client 20.220.146.242:43882] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aZ9oa6BuBxYiI1p-njS97wAAAIM"]
[Thu Feb 26 05:23:56.150246 2026] [:error] [pid 9588:tid 9646] [client 20.220.146.242:43898] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aZ9obOSfsVC0YxizsTvGxgAAAFQ"]
[Thu Feb 26 05:23:56.898790 2026] [:error] [pid 9589:tid 9662] [client 20.220.146.242:44029] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aZ9obKBuBxYiI1p-njS98AAAAIk"]
[Thu Feb 26 05:23:57.504268 2026] [:error] [pid 9587:tid 9604] [client 20.220.146.242:43765] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aZ9obfiLfyuakov_VlAwIgAAAAc"]
[Thu Feb 26 05:23:58.022861 2026] [:error] [pid 9589:tid 9674] [client 20.220.146.242:44017] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZ9obqBuBxYiI1p-njS98QAAAJU"]
[Thu Feb 26 05:23:58.561471 2026] [:error] [pid 9589:tid 9677] [client 20.220.146.242:43820] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZ9obqBuBxYiI1p-njS98wAAAJg"]
[Thu Feb 26 05:23:59.075930 2026] [:error] [pid 9589:tid 9666] [client 20.220.146.242:44002] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZ9ob6BuBxYiI1p-njS99QAAAI0"]
[Thu Feb 26 05:23:59.760127 2026] [:error] [pid 9589:tid 9659] [client 20.220.146.242:43829] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aZ9ob6BuBxYiI1p-njS9-AAAAIY"]
[Thu Feb 26 05:24:00.550445 2026] [:error] [pid 17651:tid 17676] [client 20.220.146.242:44031] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aZ9ocJ5mQDz5cec8gk4wrwAAAVc"]
[Thu Feb 26 05:24:01.272664 2026] [:error] [pid 9587:tid 9613] [client 20.220.146.242:43913] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aZ9ocfiLfyuakov_VlAwJQAAABA"]
[Thu Feb 26 05:24:02.186930 2026] [:error] [pid 9589:tid 9664] [client 20.220.146.242:43949] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aZ9ocqBuBxYiI1p-njS9-gAAAIs"]
[Thu Feb 26 05:24:02.923733 2026] [:error] [pid 9587:tid 9618] [client 20.220.146.242:43739] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aZ9ocviLfyuakov_VlAwKAAAABU"]
[Thu Feb 26 05:24:03.638373 2026] [:error] [pid 6071:tid 6077] [client 20.220.146.242:43719] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aZ9oc4QfAzdrpgft075RwgAAAQM"]
[Thu Feb 26 05:24:04.178596 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:43932] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aZ9odIQfAzdrpgft075RwwAAAQo"]
[Thu Feb 26 05:24:04.760331 2026] [:error] [pid 6071:tid 6083] [client 20.220.146.242:44008] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aZ9odIQfAzdrpgft075RxAAAAQk"]
[Thu Feb 26 05:24:05.722114 2026] [:error] [pid 9587:tid 9598] [client 20.220.146.242:43852] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aZ9odfiLfyuakov_VlAwKQAAAAE"]
[Thu Feb 26 05:24:06.532413 2026] [:error] [pid 17651:tid 17654] [client 20.220.146.242:44015] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aZ9odp5mQDz5cec8gk4wswAAAUE"]
[Thu Feb 26 05:24:06.993347 2026] [:error] [pid 9587:tid 9621] [client 20.220.146.242:43910] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aZ9odviLfyuakov_VlAwLQAAABg"]
[Thu Feb 26 05:24:07.632079 2026] [:error] [pid 9587:tid 9609] [client 20.220.146.242:44016] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aZ9od_iLfyuakov_VlAwMQAAAAw"]
[Thu Feb 26 05:24:08.076631 2026] [:error] [pid 9587:tid 9604] [client 20.220.146.242:43757] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aZ9oePiLfyuakov_VlAwNAAAAAc"]
[Thu Feb 26 05:24:08.549927 2026] [:error] [pid 9587:tid 9620] [client 20.220.146.242:43695] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aZ9oePiLfyuakov_VlAwNwAAABc"]
[Thu Feb 26 05:24:10.014797 2026] [:error] [pid 9587:tid 9601] [client 20.220.146.242:43951] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aZ9oeviLfyuakov_VlAwPgAAAAQ"]
[Thu Feb 26 05:24:10.566007 2026] [:error] [pid 9587:tid 9614] [client 20.220.146.242:43921] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aZ9oeviLfyuakov_VlAwQwAAABE"]
[Thu Feb 26 05:24:11.137300 2026] [:error] [pid 9588:tid 9626] [client 20.220.146.242:43798] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aZ9oe-SfsVC0YxizsTvGyQAAAEA"]
[Thu Feb 26 05:24:12.082141 2026] [:error] [pid 9587:tid 9604] [client 20.220.146.242:43652] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aZ9ofPiLfyuakov_VlAwSwAAAAc"]
[Thu Feb 26 05:24:12.554643 2026] [:error] [pid 9588:tid 9629] [client 20.220.146.242:43898] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aZ9ofOSfsVC0YxizsTvGygAAAEM"]
[Thu Feb 26 05:24:13.319788 2026] [:error] [pid 6071:tid 6089] [client 20.220.146.242:43872] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aZ9ofYQfAzdrpgft075RyAAAAQ8"]
[Thu Feb 26 05:24:14.063261 2026] [:error] [pid 9589:tid 9665] [client 20.220.146.242:44000] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aZ9ofqBuBxYiI1p-njS-AAAAAIw"]
[Thu Feb 26 05:24:14.751135 2026] [:error] [pid 9589:tid 9676] [client 20.220.146.242:44025] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aZ9ofqBuBxYiI1p-njS-CQAAAJc"]
[Thu Feb 26 05:24:15.362464 2026] [:error] [pid 6071:tid 6098] [client 20.220.146.242:43998] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aZ9of4QfAzdrpgft075RzAAAARg"]
[Thu Feb 26 05:24:15.967754 2026] [:error] [pid 6071:tid 6080] [client 20.220.146.242:43904] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aZ9of4QfAzdrpgft075RzgAAAQY"]
[Thu Feb 26 05:25:04.899042 2026] [:error] [pid 6071:tid 6084] [client 20.220.146.242:43792] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aZ9osIQfAzdrpgft075R8gAAAQo"]
[Thu Feb 26 05:25:05.487834 2026] [:error] [pid 9589:tid 9660] [client 20.220.146.242:43944] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aZ9osaBuBxYiI1p-njS-IAAAAIc"]
[Thu Feb 26 05:25:06.073516 2026] [:error] [pid 9587:tid 9606] [client 20.220.146.242:43945] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aZ9osviLfyuakov_VlAwwAAAAAk"]
[Thu Feb 26 05:25:07.480371 2026] [:error] [pid 9587:tid 9604] [client 20.220.146.242:44005] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aZ9os_iLfyuakov_VlAwxAAAAAc"]
[Thu Feb 26 05:25:08.822013 2026] [:error] [pid 9587:tid 9605] [client 20.220.146.242:43946] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aZ9otPiLfyuakov_VlAwxwAAAAg"]
[Thu Feb 26 05:25:09.457090 2026] [:error] [pid 9587:tid 9613] [client 20.220.146.242:43746] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aZ9otfiLfyuakov_VlAwygAAABA"]
[Thu Feb 26 05:25:10.001552 2026] [:error] [pid 17651:tid 17653] [client 20.220.146.242:43995] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aZ9otp5mQDz5cec8gk4w2QAAAUA"]
[Thu Feb 26 05:25:10.474207 2026] [:error] [pid 9702:tid 9715] [client 20.220.146.242:43842] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aZ9otpvL1wp7EOGdesxLzAAAAMk"]
[Thu Feb 26 05:25:11.231291 2026] [:error] [pid 9587:tid 9606] [client 20.220.146.242:43953] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aZ9ot_iLfyuakov_VlAwzgAAAAk"]
[Thu Feb 26 05:25:11.699036 2026] [:error] [pid 9587:tid 9614] [client 20.220.146.242:43734] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aZ9ot_iLfyuakov_VlAw0AAAABE"]
[Thu Feb 26 05:25:12.258077 2026] [:error] [pid 9587:tid 9621] [client 20.220.146.242:43987] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aZ9ouPiLfyuakov_VlAw0QAAABg"]
[Thu Feb 26 05:25:12.818712 2026] [:error] [pid 9589:tid 9664] [client 20.220.146.242:44001] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aZ9ouKBuBxYiI1p-njS-KAAAAIs"]
[Thu Feb 26 05:25:13.377092 2026] [:error] [pid 9587:tid 9604] [client 20.220.146.242:43942] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aZ9oufiLfyuakov_VlAw0wAAAAc"]
[Thu Feb 26 05:25:14.009761 2026] [:error] [pid 9702:tid 9727] [client 20.220.146.242:43931] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aZ9oupvL1wp7EOGdesxLzQAAANU"]
[Thu Feb 26 05:25:14.512861 2026] [:error] [pid 6071:tid 6090] [client 20.220.146.242:43940] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aZ9ouoQfAzdrpgft075R9gAAARA"]
[Thu Feb 26 05:25:15.052168 2026] [:error] [pid 6071:tid 6086] [client 20.220.146.242:43807] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aZ9ou4QfAzdrpgft075R9wAAAQw"]
[Thu Feb 26 05:25:15.673402 2026] [:error] [pid 9587:tid 9605] [client 20.220.146.242:43916] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aZ9ou_iLfyuakov_VlAw1wAAAAg"]
[Thu Feb 26 05:25:16.198492 2026] [:error] [pid 9702:tid 9720] [client 20.220.146.242:43854] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aZ9ovJvL1wp7EOGdesxL0QAAAM4"]
[Thu Feb 26 05:25:16.992408 2026] [:error] [pid 6071:tid 6097] [client 20.220.146.242:43714] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aZ9ovIQfAzdrpgft075R-gAAARc"]
[Thu Feb 26 05:25:17.893295 2026] [:error] [pid 9588:tid 9646] [client 20.220.146.242:43941] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aZ9oveSfsVC0YxizsTvG3gAAAFQ"]
[Thu Feb 26 05:25:18.465386 2026] [:error] [pid 9588:tid 9634] [client 20.220.146.242:43912] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aZ9ovuSfsVC0YxizsTvG3wAAAEg"]
[Thu Feb 26 05:25:19.161756 2026] [:error] [pid 9589:tid 9670] [client 20.220.146.242:43917] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aZ9ov6BuBxYiI1p-njS-QwAAAJE"]
[Thu Feb 26 05:25:19.811112 2026] [:error] [pid 6071:tid 6085] [client 20.220.146.242:43962] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aZ9ov4QfAzdrpgft075SBQAAAQs"]
[Thu Feb 26 05:25:20.380290 2026] [:error] [pid 6071:tid 6091] [client 20.220.146.242:43969] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aZ9owIQfAzdrpgft075SIQAAARE"]
[Thu Feb 26 05:25:20.945207 2026] [:error] [pid 6071:tid 6077] [client 20.220.146.242:43952] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZ9owIQfAzdrpgft075SOAAAAQM"]
[Thu Feb 26 05:25:21.849476 2026] [:error] [pid 9587:tid 9613] [client 20.220.146.242:43943] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZ9owfiLfyuakov_VlAw7wAAABA"]
[Thu Feb 26 05:25:22.359049 2026] [:error] [pid 9702:tid 9708] [client 20.220.146.242:44012] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZ9owpvL1wp7EOGdesxL9wAAAMI"]
[Thu Feb 26 05:25:22.863406 2026] [:error] [pid 9702:tid 9730] [client 20.220.146.242:43975] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aZ9owpvL1wp7EOGdesxL-AAAANg"]
[Thu Feb 26 05:25:23.299410 2026] [:error] [pid 6071:tid 6080] [client 20.220.146.242:43959] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aZ9ow4QfAzdrpgft075SZwAAAQY"]
[Thu Feb 26 05:25:23.870874 2026] [:error] [pid 6071:tid 6085] [client 20.220.146.242:43955] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aZ9ow4QfAzdrpgft075ScwAAAQs"]
[Thu Feb 26 05:25:24.469036 2026] [:error] [pid 9587:tid 9609] [client 20.220.146.242:43926] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aZ9oxPiLfyuakov_VlAw_QAAAAw"]
[Thu Feb 26 05:25:25.101305 2026] [:error] [pid 9587:tid 9612] [client 20.220.146.242:43930] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aZ9oxfiLfyuakov_VlAw_gAAAA8"]
[Thu Feb 26 05:25:25.788765 2026] [:error] [pid 6071:tid 6098] [client 20.220.146.242:43983] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZ9oxYQfAzdrpgft075SegAAARg"]
[Thu Feb 26 05:25:26.309073 2026] [:error] [pid 9587:tid 9621] [client 20.220.146.242:43864] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aZ9oxviLfyuakov_VlAxAQAAABg"]
[Thu Feb 26 05:25:26.905978 2026] [:error] [pid 9587:tid 9598] [client 20.220.146.242:43838] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aZ9oxviLfyuakov_VlAxBQAAAAE"]
[Thu Feb 26 05:25:27.427486 2026] [:error] [pid 9589:tid 9659] [client 20.220.146.242:43846] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aZ9ox6BuBxYiI1p-njS-ZwAAAIY"]
[Thu Feb 26 05:25:27.951635 2026] [:error] [pid 9589:tid 9660] [client 20.220.146.242:43933] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spip.php"] [unique_id "aZ9ox6BuBxYiI1p-njS-bAAAAIc"]
[Thu Feb 26 05:25:28.458746 2026] [:error] [pid 9589:tid 9663] [client 20.220.146.242:43772] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spip.php"] [unique_id "aZ9oyKBuBxYiI1p-njS-bwAAAIo"]
[Thu Feb 26 05:25:28.996434 2026] [:error] [pid 9588:tid 9645] [client 20.220.146.242:43706] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spip.php"] [unique_id "aZ9oyOSfsVC0YxizsTvG5gAAAFM"]
[Thu Feb 26 05:25:29.529035 2026] [:error] [pid 9589:tid 9659] [client 20.220.146.242:43723] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spip.php"] [unique_id "aZ9oyaBuBxYiI1p-njS-dAAAAIY"]
[Thu Feb 26 05:25:30.170993 2026] [:error] [pid 17651:tid 17665] [client 20.220.146.242:43862] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/scripts/wpup.php"] [unique_id "aZ9oyp5mQDz5cec8gk4xBQAAAUw"]
[Thu Feb 26 05:25:30.646856 2026] [:error] [pid 17651:tid 17673] [client 20.220.146.242:43814] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/scripts/wpup.php"] [unique_id "aZ9oyp5mQDz5cec8gk4xBwAAAVQ"]
[Thu Feb 26 05:25:31.145595 2026] [:error] [pid 9589:tid 9656] [client 20.220.146.242:43847] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/scripts/wpup.php"] [unique_id "aZ9oy6BuBxYiI1p-njS-fAAAAIM"]
[Thu Feb 26 05:25:31.642353 2026] [:error] [pid 9588:tid 9643] [client 20.220.146.242:43868] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/scripts/wpup.php"] [unique_id "aZ9oy-SfsVC0YxizsTvG6gAAAFE"]
[Thu Feb 26 05:25:32.361317 2026] [:error] [pid 9587:tid 9621] [client 20.220.146.242:43735] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aZ9ozPiLfyuakov_VlAxEQAAABg"]
[Thu Feb 26 05:25:33.024504 2026] [:error] [pid 9589:tid 9661] [client 20.220.146.242:43884] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aZ9ozaBuBxYiI1p-njS-hAAAAIg"]
[Thu Feb 26 05:25:33.615959 2026] [:error] [pid 9587:tid 9612] [client 20.220.146.242:43851] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aZ9ozfiLfyuakov_VlAxGgAAAA8"]
[Thu Feb 26 05:25:34.044691 2026] [:error] [pid 9587:tid 9606] [client 20.220.146.242:43890] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aZ9ozviLfyuakov_VlAxHgAAAAk"]
[Thu Feb 26 05:25:34.594995 2026] [:error] [pid 9587:tid 9599] [client 20.220.146.242:43664] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ho/wpup.php"] [unique_id "aZ9ozviLfyuakov_VlAxIQAAAAI"]
[Thu Feb 26 05:25:35.202974 2026] [:error] [pid 9587:tid 9614] [client 20.220.146.242:43853] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ho/wpup.php"] [unique_id "aZ9oz_iLfyuakov_VlAxJQAAABE"]
[Thu Feb 26 05:25:35.705544 2026] [:error] [pid 9587:tid 9617] [client 20.220.146.242:43896] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ho/wpup.php"] [unique_id "aZ9oz_iLfyuakov_VlAxKQAAABQ"]
[Thu Feb 26 05:25:36.327615 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:44011] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ho/wpup.php"] [unique_id "aZ9o0IQfAzdrpgft075SlQAAARQ"]
[Thu Feb 26 05:25:36.840179 2026] [:error] [pid 9589:tid 9664] [client 20.220.146.242:43720] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZ9o0KBuBxYiI1p-njS-lQAAAIs"]
[Thu Feb 26 05:25:37.413100 2026] [:error] [pid 9587:tid 9619] [client 20.220.146.242:43745] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZ9o0fiLfyuakov_VlAxMAAAABY"]
[Thu Feb 26 05:25:37.921405 2026] [:error] [pid 9589:tid 9653] [client 20.220.146.242:43976] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZ9o0aBuBxYiI1p-njS-mwAAAIA"]
[Thu Feb 26 05:25:38.528485 2026] [:error] [pid 9702:tid 9724] [client 20.220.146.242:43990] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZ9o0pvL1wp7EOGdesxL_QAAANI"]
[Thu Feb 26 05:25:39.037206 2026] [:error] [pid 6071:tid 6075] [client 20.220.146.242:43902] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aZ9o04QfAzdrpgft075SogAAAQE"]
[Thu Feb 26 05:25:39.484756 2026] [:error] [pid 9589:tid 9662] [client 20.220.146.242:43928] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aZ9o06BuBxYiI1p-njS-pgAAAIk"]
[Thu Feb 26 05:25:39.996407 2026] [:error] [pid 9702:tid 9730] [client 20.220.146.242:43848] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aZ9o05vL1wp7EOGdesxMBQAAANg"]
[Thu Feb 26 05:25:40.441261 2026] [:error] [pid 9589:tid 9663] [client 20.220.146.242:43692] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aZ9o1KBuBxYiI1p-njS-qAAAAIo"]
[Thu Feb 26 05:25:40.987885 2026] [:error] [pid 9587:tid 9610] [client 20.220.146.242:43849] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myy.php"] [unique_id "aZ9o1PiLfyuakov_VlAxNgAAAA0"]
[Thu Feb 26 05:25:41.566982 2026] [:error] [pid 9587:tid 9619] [client 20.220.146.242:43779] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myy.php"] [unique_id "aZ9o1fiLfyuakov_VlAxOQAAABY"]
[Thu Feb 26 05:25:42.075819 2026] [:error] [pid 6071:tid 6083] [client 20.220.146.242:43956] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myy.php"] [unique_id "aZ9o1oQfAzdrpgft075SsgAAAQk"]
[Thu Feb 26 05:25:42.621729 2026] [:error] [pid 9587:tid 9612] [client 20.220.146.242:43925] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myy.php"] [unique_id "aZ9o1viLfyuakov_VlAxQAAAAA8"]
[Thu Feb 26 05:25:43.073268 2026] [:error] [pid 9587:tid 9598] [client 20.220.146.242:44028] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/halo.php"] [unique_id "aZ9o1_iLfyuakov_VlAxQQAAAAE"]
[Thu Feb 26 05:25:43.736109 2026] [:error] [pid 9587:tid 9600] [client 20.220.146.242:43885] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/halo.php"] [unique_id "aZ9o1_iLfyuakov_VlAxQwAAAAM"]
[Thu Feb 26 05:25:44.591426 2026] [:error] [pid 6071:tid 6094] [client 20.220.146.242:43866] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/halo.php"] [unique_id "aZ9o2IQfAzdrpgft075SuQAAARQ"]
[Thu Feb 26 05:25:45.143994 2026] [:error] [pid 9589:tid 9654] [client 20.220.146.242:43826] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/halo.php"] [unique_id "aZ9o2aBuBxYiI1p-njS-sQAAAIE"]
[Thu Feb 26 05:25:45.805163 2026] [:error] [pid 9588:tid 9641] [client 20.220.146.242:43878] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aZ9o2eSfsVC0YxizsTvG7wAAAE8"]
[Thu Feb 26 05:25:46.259694 2026] [:error] [pid 9588:tid 9647] [client 20.220.146.242:44006] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aZ9o2uSfsVC0YxizsTvG8AAAAFU"]
[Thu Feb 26 05:25:46.824251 2026] [:error] [pid 6071:tid 6095] [client 20.220.146.242:43791] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aZ9o2oQfAzdrpgft075SwQAAARU"]
[Thu Feb 26 05:25:47.374714 2026] [:error] [pid 9588:tid 9626] [client 20.220.146.242:43690] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aZ9o2-SfsVC0YxizsTvG8gAAAEA"]
[Thu Feb 26 05:25:47.938748 2026] [:error] [pid 17651:tid 17654] [client 20.220.146.242:43855] [client 20.220.146.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/upload.php"] [unique_id "aZ9o255mQDz5cec8gk4xFAAAAUE"]
[Thu Feb 26 05:25:48.496357 2026] [:error] [pid 17651:tid 17665] [client 20.220.146.242:43730] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aZ9o3J5mQDz5cec8gk4xFgAAAUw"]
[Thu Feb 26 05:25:49.005201 2026] [:error] [pid 9587:tid 9603] [client 20.220.146.242:43935] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aZ9o3fiLfyuakov_VlAxVgAAAAY"]
[Thu Feb 26 05:25:49.586661 2026] [:error] [pid 9587:tid 9599] [client 20.220.146.242:43886] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aZ9o3fiLfyuakov_VlAxXAAAAAI"]
[Thu Feb 26 05:25:50.113656 2026] [:error] [pid 9587:tid 9620] [client 20.220.146.242:43871] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZ9o3viLfyuakov_VlAxYwAAABc"]
[Thu Feb 26 05:25:50.735051 2026] [:error] [pid 9587:tid 9610] [client 20.220.146.242:43957] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZ9o3viLfyuakov_VlAxaAAAAA0"]
[Thu Feb 26 05:25:51.374547 2026] [:error] [pid 9587:tid 9601] [client 20.220.146.242:44020] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZ9o3_iLfyuakov_VlAxcAAAAAQ"]
[Thu Feb 26 05:25:52.088132 2026] [:error] [pid 9587:tid 9614] [client 20.220.146.242:44021] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZ9o4PiLfyuakov_VlAxcwAAABE"]
[Thu Feb 26 05:25:52.710206 2026] [:error] [pid 9589:tid 9668] [client 20.220.146.242:43766] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dapa.php"] [unique_id "aZ9o4KBuBxYiI1p-njS-tgAAAI8"]
[Thu Feb 26 05:25:53.258247 2026] [:error] [pid 9587:tid 9603] [client 20.220.146.242:43707] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dapa.php"] [unique_id "aZ9o4fiLfyuakov_VlAxfAAAAAY"]
[Thu Feb 26 05:25:53.781317 2026] [:error] [pid 6071:tid 6081] [client 20.220.146.242:43901] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dapa.php"] [unique_id "aZ9o4YQfAzdrpgft075SyAAAAQc"]
[Thu Feb 26 05:25:54.487399 2026] [:error] [pid 9589:tid 9659] [client 20.220.146.242:43751] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dapa.php"] [unique_id "aZ9o4qBuBxYiI1p-njS-vAAAAIY"]
[Thu Feb 26 12:41:46.658109 2026] [:error] [pid 55618:tid 55624] [client 94.26.106.114:57115] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZ_PCh61Vrh12f_8oWRnEAAAAQM"], referer: https://wordpress.org/
[Thu Feb 26 12:41:57.254253 2026] [:error] [pid 3883:tid 3903] [client 94.26.106.114:63584] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZ_PFeA33x90V6yYHahKUwAAAVE"], referer: https://t.co/
[Thu Feb 26 13:10:24.087022 2026] [:error] [pid 55051:tid 55064] [client 158.94.208.134:57080] [client 158.94.208.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.94.208.134, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZ_VwAmK1w2kZvh5eLHg9QAAAIo"], referer: https://www.reddit.com/
[Thu Feb 26 13:10:32.047351 2026] [:error] [pid 55051:tid 55056] [client 158.94.208.134:62395] [client 158.94.208.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.94.208.134, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZ_VyAmK1w2kZvh5eLHhBAAAAII"]
[Thu Feb 26 13:44:56.338009 2026] [:error] [pid 55051:tid 55066] [client 193.34.212.68:62586] [client 193.34.212.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.34.212.68, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZ_d2AmK1w2kZvh5eLHm4gAAAIw"]
[Thu Feb 26 14:14:40.753859 2026] [:error] [pid 55618:tid 55631] [client 20.163.110.166:11667] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZ_k0B61Vrh12f_8oWSMAgAAAQo"]
[Thu Feb 26 14:14:41.065060 2026] [:error] [pid 54990:tid 54996] [client 20.163.110.166:11652] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZ_k0Xtr2qmt_mBhH2zifQAAAAM"]
[Thu Feb 26 14:14:41.376375 2026] [:error] [pid 55051:tid 55054] [client 20.163.110.166:12615] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aZ_k0QmK1w2kZvh5eLHr-wAAAIA"]
[Thu Feb 26 14:14:41.688291 2026] [:error] [pid 55051:tid 55063] [client 20.163.110.166:12614] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aZ_k0QmK1w2kZvh5eLHr_AAAAIk"]
[Thu Feb 26 14:14:42.033051 2026] [:error] [pid 55122:tid 55135] [client 20.163.110.166:11648] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aZ_k0oLiR0OfjFxvcN_KIgAAAMs"]
[Thu Feb 26 14:14:42.347451 2026] [:error] [pid 55051:tid 55071] [client 20.163.110.166:12663] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aZ_k0gmK1w2kZvh5eLHr_wAAAJE"]
[Thu Feb 26 14:14:42.672765 2026] [:error] [pid 25311:tid 25335] [client 20.163.110.166:11654] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aZ_k0tfdM__yZAgJFSv58wAAAZU"]
[Thu Feb 26 14:14:42.989561 2026] [:error] [pid 55051:tid 55056] [client 20.163.110.166:12621] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aZ_k0gmK1w2kZvh5eLHsAQAAAII"]
[Thu Feb 26 14:14:43.304890 2026] [:error] [pid 25311:tid 25325] [client 20.163.110.166:12625] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aZ_k09fdM__yZAgJFSv59QAAAYs"]
[Thu Feb 26 14:14:43.622866 2026] [:error] [pid 25311:tid 25317] [client 20.163.110.166:12628] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aZ_k09fdM__yZAgJFSv59wAAAYM"]
[Thu Feb 26 14:14:43.935089 2026] [:error] [pid 55618:tid 55639] [client 20.163.110.166:12649] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aZ_k0x61Vrh12f_8oWSMBAAAARI"]
[Thu Feb 26 14:14:44.313145 2026] [:error] [pid 55122:tid 55136] [client 20.163.110.166:12661] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aZ_k1ILiR0OfjFxvcN_KJAAAAMw"]
[Thu Feb 26 14:14:44.627420 2026] [:error] [pid 55618:tid 55644] [client 20.163.110.166:12610] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aZ_k1B61Vrh12f_8oWSMBgAAARc"]
[Thu Feb 26 14:14:44.941750 2026] [:error] [pid 55618:tid 55622] [client 20.163.110.166:12609] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aZ_k1B61Vrh12f_8oWSMCQAAAQE"]
[Thu Feb 26 14:14:45.257664 2026] [:error] [pid 55618:tid 55628] [client 20.163.110.166:11659] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aZ_k1R61Vrh12f_8oWSMCgAAAQc"]
[Thu Feb 26 14:14:45.574760 2026] [:error] [pid 55618:tid 55637] [client 20.163.110.166:12650] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aZ_k1R61Vrh12f_8oWSMCwAAARA"]
[Thu Feb 26 14:14:45.892655 2026] [:error] [pid 55618:tid 55630] [client 20.163.110.166:12623] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aZ_k1R61Vrh12f_8oWSMEQAAAQk"]
[Thu Feb 26 14:14:46.202999 2026] [:error] [pid 55618:tid 55624] [client 20.163.110.166:12652] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aZ_k1h61Vrh12f_8oWSMEwAAAQM"]
[Thu Feb 26 14:14:46.519925 2026] [:error] [pid 3883:tid 3901] [client 20.163.110.166:12612] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aZ_k1uA33x90V6yYHah7PQAAAU8"]
[Thu Feb 26 14:14:46.842052 2026] [:error] [pid 54990:tid 54998] [client 20.163.110.166:12112] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aZ_k1ntr2qmt_mBhH2zifwAAAAU"]
[Thu Feb 26 14:14:47.152886 2026] [:error] [pid 3883:tid 3888] [client 20.163.110.166:11651] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aZ_k1-A33x90V6yYHah7PgAAAUI"]
[Thu Feb 26 14:14:47.493201 2026] [:error] [pid 25311:tid 25320] [client 20.163.110.166:12639] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aZ_k19fdM__yZAgJFSv5-gAAAYY"]
[Thu Feb 26 14:14:47.805541 2026] [:error] [pid 25311:tid 25315] [client 20.163.110.166:12626] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aZ_k19fdM__yZAgJFSv5_QAAAYE"]
[Thu Feb 26 14:14:48.120695 2026] [:error] [pid 25311:tid 25319] [client 20.163.110.166:11682] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aZ_k2NfdM__yZAgJFSv5_gAAAYU"]
[Thu Feb 26 14:14:48.459564 2026] [:error] [pid 55618:tid 55644] [client 20.163.110.166:12657] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aZ_k2B61Vrh12f_8oWSMIQAAARc"]
[Thu Feb 26 14:14:48.772027 2026] [:error] [pid 55618:tid 55640] [client 20.163.110.166:11668] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aZ_k2B61Vrh12f_8oWSMJAAAARM"]
[Thu Feb 26 14:14:49.090461 2026] [:error] [pid 55618:tid 55624] [client 20.163.110.166:11660] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aZ_k2R61Vrh12f_8oWSMJwAAAQM"]
[Thu Feb 26 14:14:49.408322 2026] [:error] [pid 55618:tid 55627] [client 20.163.110.166:12643] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aZ_k2R61Vrh12f_8oWSMKQAAAQY"]
[Thu Feb 26 14:14:49.720449 2026] [:error] [pid 54991:tid 55031] [client 20.163.110.166:11698] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aZ_k2d4Zx-mJ8gbRB2iTzQAAAEs"]
[Thu Feb 26 14:14:50.037712 2026] [:error] [pid 3883:tid 3909] [client 20.163.110.166:12624] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aZ_k2uA33x90V6yYHah7QQAAAVc"]
[Thu Feb 26 14:14:50.348860 2026] [:error] [pid 55618:tid 55634] [client 20.163.110.166:11649] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aZ_k2h61Vrh12f_8oWSMLgAAAQ0"]
[Thu Feb 26 14:14:50.783345 2026] [:error] [pid 55618:tid 55632] [client 20.163.110.166:12662] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aZ_k2h61Vrh12f_8oWSMMQAAAQs"]
[Thu Feb 26 14:14:51.093985 2026] [:error] [pid 25311:tid 25337] [client 20.163.110.166:11693] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aZ_k29fdM__yZAgJFSv6AQAAAZc"]
[Thu Feb 26 14:14:51.411099 2026] [:error] [pid 55618:tid 55639] [client 20.163.110.166:12638] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aZ_k2x61Vrh12f_8oWSMNgAAARI"]
[Thu Feb 26 14:14:51.722403 2026] [:error] [pid 25311:tid 25323] [client 20.163.110.166:11690] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aZ_k29fdM__yZAgJFSv6AwAAAYk"]
[Thu Feb 26 14:14:52.035349 2026] [:error] [pid 55618:tid 55636] [client 20.163.110.166:12668] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aZ_k3B61Vrh12f_8oWSMPgAAAQ8"]
[Thu Feb 26 14:14:52.346889 2026] [:error] [pid 55051:tid 55063] [client 20.163.110.166:12659] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aZ_k3AmK1w2kZvh5eLHsEQAAAIk"]
[Thu Feb 26 14:14:52.693918 2026] [:error] [pid 25311:tid 25318] [client 20.163.110.166:11653] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/async.php"] [unique_id "aZ_k3NfdM__yZAgJFSv6BQAAAYQ"]
[Thu Feb 26 14:14:53.006650 2026] [:error] [pid 25311:tid 25327] [client 20.163.110.166:11655] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aZ_k3dfdM__yZAgJFSv6BwAAAY0"]
[Thu Feb 26 14:14:53.322092 2026] [:error] [pid 25311:tid 25317] [client 20.163.110.166:11666] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aZ_k3dfdM__yZAgJFSv6CAAAAYM"]
[Thu Feb 26 14:14:53.634129 2026] [:error] [pid 55051:tid 55071] [client 20.163.110.166:12659] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ_k3QmK1w2kZvh5eLHsEgAAAJE"]
[Thu Feb 26 14:14:53.951030 2026] [:error] [pid 55618:tid 55631] [client 20.163.110.166:12660] [client 20.163.110.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZ_k3R61Vrh12f_8oWSMQwAAAQo"]
[Thu Feb 26 14:14:54.263621 2026] [:error] [pid 55618:tid 55637] [client 20.163.110.166:12644] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aZ_k3h61Vrh12f_8oWSMRAAAARA"]
[Thu Feb 26 14:14:54.578838 2026] [:error] [pid 55618:tid 55644] [client 20.163.110.166:11703] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aZ_k3h61Vrh12f_8oWSMSAAAARc"]
[Thu Feb 26 14:14:54.969104 2026] [:error] [pid 55618:tid 55630] [client 20.163.110.166:12645] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddd.php"] [unique_id "aZ_k3h61Vrh12f_8oWSMTwAAAQk"]
[Thu Feb 26 14:14:55.282067 2026] [:error] [pid 55051:tid 55074] [client 20.163.110.166:12656] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddd.php"] [unique_id "aZ_k3wmK1w2kZvh5eLHsGAAAAJQ"]
[Thu Feb 26 14:14:55.603218 2026] [:error] [pid 3883:tid 3887] [client 20.163.110.166:11650] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aZ_k3-A33x90V6yYHah7SAAAAUE"]
[Thu Feb 26 14:14:55.922933 2026] [:error] [pid 25311:tid 25332] [client 20.163.110.166:11701] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aZ_k39fdM__yZAgJFSv6CwAAAZI"]
[Thu Feb 26 14:14:56.239087 2026] [:error] [pid 25311:tid 25322] [client 20.163.110.166:11679] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aZ_k4NfdM__yZAgJFSv6DAAAAYg"]
[Thu Feb 26 14:14:56.553019 2026] [:error] [pid 55618:tid 55626] [client 20.163.110.166:11658] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aZ_k4B61Vrh12f_8oWSMXAAAAQU"]
[Thu Feb 26 14:14:56.924107 2026] [:error] [pid 55618:tid 55635] [client 20.163.110.166:11710] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ_k4B61Vrh12f_8oWSMXwAAAQ4"]
[Thu Feb 26 14:14:57.235200 2026] [:error] [pid 25311:tid 25331] [client 20.163.110.166:12654] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ_k4dfdM__yZAgJFSv6DgAAAZE"]
[Thu Feb 26 14:14:57.547353 2026] [:error] [pid 3883:tid 3902] [client 20.163.110.166:12648] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ_k4eA33x90V6yYHah7SwAAAVA"]
[Thu Feb 26 14:14:57.862099 2026] [:error] [pid 25311:tid 25315] [client 20.163.110.166:12629] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "aZ_k4dfdM__yZAgJFSv6DwAAAYE"]
[Thu Feb 26 14:14:58.175961 2026] [:error] [pid 55618:tid 55621] [client 20.163.110.166:12667] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aZ_k4h61Vrh12f_8oWSMZAAAAQA"]
[Thu Feb 26 14:14:58.503433 2026] [:error] [pid 25311:tid 25334] [client 20.163.110.166:11656] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aZ_k4tfdM__yZAgJFSv6EgAAAZQ"]
[Thu Feb 26 14:14:58.814873 2026] [:error] [pid 25311:tid 25333] [client 20.163.110.166:11687] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aZ_k4tfdM__yZAgJFSv6EwAAAZM"]
[Thu Feb 26 14:14:59.129332 2026] [:error] [pid 54991:tid 55022] [client 20.163.110.166:11696] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aZ_k494Zx-mJ8gbRB2iULQAAAEI"]
[Thu Feb 26 14:14:59.442280 2026] [:error] [pid 54991:tid 55044] [client 20.163.110.166:12633] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aZ_k494Zx-mJ8gbRB2iULwAAAFg"]
[Thu Feb 26 14:14:59.761287 2026] [:error] [pid 54991:tid 55026] [client 20.163.110.166:12119] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aZ_k494Zx-mJ8gbRB2iUMgAAAEY"]
[Thu Feb 26 14:15:00.099968 2026] [:error] [pid 54991:tid 55035] [client 20.163.110.166:11656] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ_k5N4Zx-mJ8gbRB2iUNQAAAE8"]
[Thu Feb 26 14:15:00.413267 2026] [:error] [pid 55122:tid 55141] [client 20.163.110.166:12651] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aZ_k5ILiR0OfjFxvcN_KRgAAANE"]
[Thu Feb 26 14:15:00.725704 2026] [:error] [pid 55618:tid 55626] [client 20.163.110.166:12618] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs18.php"] [unique_id "aZ_k5B61Vrh12f_8oWSMaQAAAQU"]
[Thu Feb 26 14:15:01.037617 2026] [:error] [pid 55618:tid 55638] [client 20.163.110.166:11684] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs18.php"] [unique_id "aZ_k5R61Vrh12f_8oWSMagAAARE"]
[Thu Feb 26 14:15:01.349738 2026] [:error] [pid 55618:tid 55630] [client 20.163.110.166:11711] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blurbs18.php"] [unique_id "aZ_k5R61Vrh12f_8oWSMawAAAQk"]
[Thu Feb 26 14:15:01.664051 2026] [:error] [pid 25311:tid 25330] [client 20.163.110.166:12630] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ_k5dfdM__yZAgJFSv6FwAAAZA"]
[Thu Feb 26 14:15:01.979787 2026] [:error] [pid 55618:tid 55641] [client 20.163.110.166:12101] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ_k5R61Vrh12f_8oWSMbQAAARQ"]
[Thu Feb 26 14:15:02.290602 2026] [:error] [pid 55618:tid 55634] [client 20.163.110.166:12634] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ_k5h61Vrh12f_8oWSMbgAAAQ0"]
[Thu Feb 26 14:15:02.601894 2026] [:error] [pid 55618:tid 55621] [client 20.163.110.166:11275] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ_k5h61Vrh12f_8oWSMcwAAAQA"]
[Thu Feb 26 14:15:02.912224 2026] [:error] [pid 55618:tid 55623] [client 20.163.110.166:12608] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ_k5h61Vrh12f_8oWSMdgAAAQI"]
[Thu Feb 26 14:15:03.266556 2026] [:error] [pid 55122:tid 55138] [client 20.163.110.166:12631] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ_k54LiR0OfjFxvcN_KRwAAAM4"]
[Thu Feb 26 14:15:03.578455 2026] [:error] [pid 54991:tid 55023] [client 20.163.110.166:12653] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZ_k594Zx-mJ8gbRB2iUOAAAAEM"]
[Thu Feb 26 14:15:03.903253 2026] [:error] [pid 55122:tid 55132] [client 20.163.110.166:12655] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aZ_k54LiR0OfjFxvcN_KSAAAAMg"]
[Thu Feb 26 14:15:04.215422 2026] [:error] [pid 25311:tid 25325] [client 20.163.110.166:12116] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aZ_k6NfdM__yZAgJFSv6HAAAAYs"]
[Thu Feb 26 14:15:04.528096 2026] [:error] [pid 25311:tid 25322] [client 20.163.110.166:12138] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aZ_k6NfdM__yZAgJFSv6IAAAAYg"]
[Thu Feb 26 14:15:04.844143 2026] [:error] [pid 25311:tid 25320] [client 20.163.110.166:11707] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aZ_k6NfdM__yZAgJFSv6IgAAAYY"]
[Thu Feb 26 14:15:05.155774 2026] [:error] [pid 54990:tid 55008] [client 20.163.110.166:12106] [client 20.163.110.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aZ_k6Xtr2qmt_mBhH2zigQAAAA8"]
[Thu Feb 26 14:51:18.134566 2026] [:error] [pid 20419:tid 20426] [client 62.60.130.228:58257] [client 62.60.130.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.228, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZ_tZu3DVDvMfTYYUBW5uQAAAcQ"]
[Thu Feb 26 14:51:25.895623 2026] [:error] [pid 54990:tid 55003] [client 62.60.130.228:61275] [client 62.60.130.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.228, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aZ_tbXtr2qmt_mBhH2zligAAAAo"], referer: https://www.bing.com/
[Thu Feb 26 16:20:24.939721 2026] [:error] [pid 3883:tid 3889] [client 20.151.2.242:18431] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aaACSOA33x90V6yYHajOXwAAAUM"]
[Thu Feb 26 16:20:25.489010 2026] [:error] [pid 55618:tid 55638] [client 20.151.2.242:18315] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aaACSR61Vrh12f_8oWSsUQAAARE"]
[Thu Feb 26 16:20:26.084985 2026] [:error] [pid 3883:tid 3891] [client 20.151.2.242:18389] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aaACSuA33x90V6yYHajOYAAAAUU"]
[Thu Feb 26 16:20:26.712461 2026] [:error] [pid 25311:tid 25317] [client 20.151.2.242:18406] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/re.php"] [unique_id "aaACStfdM__yZAgJFSs9YQAAAYM"]
[Thu Feb 26 16:20:27.207910 2026] [:error] [pid 54991:tid 55033] [client 20.151.2.242:18311] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aaACS94Zx-mJ8gbRB2ikiQAAAE0"]
[Thu Feb 26 16:20:27.728452 2026] [:error] [pid 55051:tid 55057] [client 20.151.2.242:18395] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aaACSwmK1w2kZvh5eLEA_AAAAIM"]
[Thu Feb 26 16:20:28.367522 2026] [:error] [pid 20419:tid 20427] [client 20.151.2.242:18407] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aaACTO3DVDvMfTYYUBXdBwAAAcU"]
[Thu Feb 26 16:20:28.904980 2026] [:error] [pid 20419:tid 20423] [client 20.151.2.242:18404] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aaACTO3DVDvMfTYYUBXdCwAAAcE"]
[Thu Feb 26 16:20:29.521866 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:18391] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aaACTdfdM__yZAgJFSs9aAAAAZg"]
[Thu Feb 26 16:20:30.168904 2026] [:error] [pid 55051:tid 55077] [client 20.151.2.242:18372] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aaACTgmK1w2kZvh5eLEA_wAAAJc"]
[Thu Feb 26 16:20:30.703288 2026] [:error] [pid 55122:tid 55147] [client 20.151.2.242:18377] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aaACToLiR0OfjFxvcN_iyAAAANc"]
[Thu Feb 26 16:20:31.341088 2026] [:error] [pid 55051:tid 55070] [client 20.151.2.242:18304] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aaACTwmK1w2kZvh5eLEBAQAAAJA"]
[Thu Feb 26 16:20:32.050179 2026] [:error] [pid 3883:tid 3909] [client 20.151.2.242:18374] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/in.php"] [unique_id "aaACUOA33x90V6yYHajObgAAAVc"]
[Thu Feb 26 16:20:32.881652 2026] [:error] [pid 3883:tid 3899] [client 20.151.2.242:18317] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/in.php"] [unique_id "aaACUOA33x90V6yYHajOdQAAAU0"]
[Thu Feb 26 16:20:33.413878 2026] [:error] [pid 54991:tid 55037] [client 20.151.2.242:18396] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/in.php"] [unique_id "aaACUd4Zx-mJ8gbRB2ikjwAAAFE"]
[Thu Feb 26 16:20:34.068674 2026] [:error] [pid 25311:tid 25323] [client 20.151.2.242:18385] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/in.php"] [unique_id "aaACUtfdM__yZAgJFSs9cgAAAYk"]
[Thu Feb 26 16:20:34.560542 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:18321] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aaACUuA33x90V6yYHajOgAAAAVg"]
[Thu Feb 26 16:20:34.996009 2026] [:error] [pid 55051:tid 55060] [client 20.151.2.242:18368] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aaACUgmK1w2kZvh5eLEBBQAAAIY"]
[Thu Feb 26 16:20:35.418782 2026] [:error] [pid 55051:tid 55055] [client 20.151.2.242:18403] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aaACUwmK1w2kZvh5eLEBBgAAAIE"]
[Thu Feb 26 16:20:36.015878 2026] [:error] [pid 25311:tid 25335] [client 20.151.2.242:18371] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aaACVNfdM__yZAgJFSs9dQAAAZU"]
[Thu Feb 26 16:20:36.505661 2026] [:error] [pid 55122:tid 55136] [client 20.151.2.242:18383] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aaACVILiR0OfjFxvcN_iygAAAMw"]
[Thu Feb 26 16:20:37.207438 2026] [:error] [pid 3883:tid 3893] [client 20.151.2.242:18394] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aaACVeA33x90V6yYHajOhwAAAUc"]
[Thu Feb 26 16:20:37.726358 2026] [:error] [pid 55122:tid 55146] [client 20.151.2.242:18337] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aaACVYLiR0OfjFxvcN_izAAAANY"]
[Thu Feb 26 16:20:38.389233 2026] [:error] [pid 3883:tid 3890] [client 20.151.2.242:18384] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aaACVuA33x90V6yYHajOkgAAAUQ"]
[Thu Feb 26 16:20:38.857752 2026] [:error] [pid 55618:tid 55624] [client 20.151.2.242:18370] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aaACVh61Vrh12f_8oWSsYAAAAQM"]
[Thu Feb 26 16:20:39.567763 2026] [:error] [pid 55051:tid 55054] [client 20.151.2.242:18417] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aaACVwmK1w2kZvh5eLEBDAAAAIA"]
[Thu Feb 26 16:20:40.179988 2026] [:error] [pid 55618:tid 55630] [client 20.151.2.242:18420] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aaACWB61Vrh12f_8oWSsYQAAAQk"]
[Thu Feb 26 16:20:40.986219 2026] [:error] [pid 3883:tid 3899] [client 20.151.2.242:18255] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aaACWOA33x90V6yYHajOnwAAAU0"]
[Thu Feb 26 16:20:41.579331 2026] [:error] [pid 55051:tid 55072] [client 20.151.2.242:18380] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aaACWQmK1w2kZvh5eLEBFAAAAJI"]
[Thu Feb 26 16:20:42.131774 2026] [:error] [pid 25311:tid 25316] [client 20.151.2.242:18415] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aaACWtfdM__yZAgJFSs9gQAAAYI"]
[Thu Feb 26 16:20:42.734190 2026] [:error] [pid 25311:tid 25329] [client 20.151.2.242:18366] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aaACWtfdM__yZAgJFSs9hgAAAY8"]
[Thu Feb 26 16:20:43.195625 2026] [:error] [pid 25311:tid 25330] [client 20.151.2.242:18319] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aaACW9fdM__yZAgJFSs9iwAAAZA"]
[Thu Feb 26 16:20:43.982826 2026] [:error] [pid 55051:tid 55070] [client 20.151.2.242:18405] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prv8.php"] [unique_id "aaACWwmK1w2kZvh5eLEBFwAAAJA"]
[Thu Feb 26 16:20:44.454176 2026] [:error] [pid 25311:tid 25331] [client 20.151.2.242:18418] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prv8.php"] [unique_id "aaACXNfdM__yZAgJFSs9lgAAAZE"]
[Thu Feb 26 16:20:45.156919 2026] [:error] [pid 55051:tid 55069] [client 20.151.2.242:18422] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prv8.php"] [unique_id "aaACXQmK1w2kZvh5eLEBGgAAAI8"]
[Thu Feb 26 16:20:45.676541 2026] [:error] [pid 54991:tid 55030] [client 20.151.2.242:18324] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prv8.php"] [unique_id "aaACXd4Zx-mJ8gbRB2iklAAAAEo"]
[Thu Feb 26 16:20:46.391955 2026] [:error] [pid 20419:tid 20446] [client 20.151.2.242:18429] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i.php"] [unique_id "aaACXu3DVDvMfTYYUBXdFAAAAdg"]
[Thu Feb 26 16:20:47.111733 2026] [:error] [pid 25311:tid 25314] [client 20.151.2.242:18312] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i.php"] [unique_id "aaACX9fdM__yZAgJFSs9pgAAAYA"]
[Thu Feb 26 16:20:48.010196 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:18425] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i.php"] [unique_id "aaACYAmK1w2kZvh5eLEBHgAAAJM"]
[Thu Feb 26 16:20:48.801186 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:18428] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i.php"] [unique_id "aaACYNfdM__yZAgJFSs9rwAAAZg"]
[Thu Feb 26 16:20:49.443352 2026] [:error] [pid 55122:tid 55137] [client 20.151.2.242:18423] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aaACYYLiR0OfjFxvcN_i3wAAAM0"]
[Thu Feb 26 16:20:50.307309 2026] [:error] [pid 55051:tid 55075] [client 20.151.2.242:18386] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aaACYgmK1w2kZvh5eLEBJgAAAJU"]
[Thu Feb 26 16:20:51.116162 2026] [:error] [pid 55122:tid 55135] [client 20.151.2.242:18376] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aaACY4LiR0OfjFxvcN_i6QAAAMs"]
[Thu Feb 26 16:20:51.862701 2026] [:error] [pid 55122:tid 55131] [client 20.151.2.242:18399] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "aaACY4LiR0OfjFxvcN_i7QAAAMc"]
[Thu Feb 26 16:20:52.888352 2026] [:error] [pid 20419:tid 20427] [client 20.151.2.242:18349] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaACZO3DVDvMfTYYUBXdGwAAAcU"]
[Thu Feb 26 16:20:53.438960 2026] [:error] [pid 20419:tid 20423] [client 20.151.2.242:18421] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaACZe3DVDvMfTYYUBXdHAAAAcE"]
[Thu Feb 26 16:20:54.428533 2026] [:error] [pid 20419:tid 20424] [client 20.151.2.242:18326] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaACZu3DVDvMfTYYUBXdJAAAAcI"]
[Thu Feb 26 16:20:55.197704 2026] [:error] [pid 3883:tid 3886] [client 20.151.2.242:18375] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaACZ-A33x90V6yYHajOtgAAAUA"]
[Thu Feb 26 16:20:55.984126 2026] [:error] [pid 20419:tid 20445] [client 20.151.2.242:18340] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aw.php"] [unique_id "aaACZ-3DVDvMfTYYUBXdKgAAAdc"]
[Thu Feb 26 16:20:56.469560 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:18320] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aw.php"] [unique_id "aaACaOA33x90V6yYHajOtwAAAUw"]
[Thu Feb 26 16:20:57.281348 2026] [:error] [pid 54990:tid 55001] [client 20.151.2.242:18360] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aw.php"] [unique_id "aaACaXtr2qmt_mBhH2zxXwAAAAg"]
[Thu Feb 26 16:20:58.038666 2026] [:error] [pid 25311:tid 25333] [client 20.151.2.242:18306] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aw.php"] [unique_id "aaACatfdM__yZAgJFSs9vAAAAZM"]
[Thu Feb 26 16:20:58.576998 2026] [:error] [pid 55122:tid 55143] [client 20.151.2.242:18249] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaACaoLiR0OfjFxvcN_i9AAAANM"]
[Thu Feb 26 16:20:59.241135 2026] [:error] [pid 20419:tid 20441] [client 20.151.2.242:18269] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaACa-3DVDvMfTYYUBXdMwAAAdM"]
[Thu Feb 26 16:20:59.769020 2026] [:error] [pid 20419:tid 20438] [client 20.151.2.242:18342] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaACa-3DVDvMfTYYUBXdNQAAAdA"]
[Thu Feb 26 16:21:00.283199 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:18373] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaACbOA33x90V6yYHajOxAAAAVY"]
[Thu Feb 26 16:21:00.755853 2026] [:error] [pid 55618:tid 55628] [client 20.151.2.242:18322] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaACbB61Vrh12f_8oWSscgAAAQc"]
[Thu Feb 26 16:21:01.326694 2026] [:error] [pid 55618:tid 55644] [client 20.151.2.242:18339] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaACbR61Vrh12f_8oWSsdAAAARc"]
[Thu Feb 26 16:21:01.808747 2026] [:error] [pid 25311:tid 25335] [client 20.151.2.242:18331] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaACbdfdM__yZAgJFSs9vgAAAZU"]
[Thu Feb 26 16:21:02.257840 2026] [:error] [pid 3883:tid 3891] [client 20.151.2.242:18390] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaACbuA33x90V6yYHajO0QAAAUU"]
[Thu Feb 26 16:21:02.773544 2026] [:error] [pid 55051:tid 55066] [client 20.151.2.242:18350] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcp.php"] [unique_id "aaACbgmK1w2kZvh5eLEBLgAAAIw"]
[Thu Feb 26 16:21:03.258468 2026] [:error] [pid 3883:tid 3904] [client 20.151.2.242:18314] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcp.php"] [unique_id "aaACb-A33x90V6yYHajO0wAAAVI"]
[Thu Feb 26 16:21:03.826159 2026] [:error] [pid 55122:tid 55146] [client 20.151.2.242:18316] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcp.php"] [unique_id "aaACb4LiR0OfjFxvcN_i-AAAANY"]
[Thu Feb 26 16:21:04.394690 2026] [:error] [pid 20419:tid 20426] [client 20.151.2.242:18419] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tcp.php"] [unique_id "aaACcO3DVDvMfTYYUBXdQgAAAcQ"]
[Thu Feb 26 16:21:04.875196 2026] [:error] [pid 55051:tid 55056] [client 20.151.2.242:18267] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aaACcAmK1w2kZvh5eLEBLwAAAII"]
[Thu Feb 26 16:21:05.385795 2026] [:error] [pid 55618:tid 55645] [client 20.151.2.242:18427] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aaACcR61Vrh12f_8oWSsgwAAARg"]
[Thu Feb 26 16:21:05.875560 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:18268] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aaACcdfdM__yZAgJFSs9xQAAAYs"]
[Thu Feb 26 16:21:06.413443 2026] [:error] [pid 25311:tid 25337] [client 20.151.2.242:18358] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aaACctfdM__yZAgJFSs9xgAAAZc"]
[Thu Feb 26 16:21:06.889691 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:18369] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaACctfdM__yZAgJFSs9yQAAAZg"]
[Thu Feb 26 16:21:07.467168 2026] [:error] [pid 25311:tid 25319] [client 20.151.2.242:18240] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaACc9fdM__yZAgJFSs9zAAAAYU"]
[Thu Feb 26 16:21:07.997022 2026] [:error] [pid 20419:tid 20436] [client 20.151.2.242:18305] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaACc-3DVDvMfTYYUBXdSwAAAc4"]
[Thu Feb 26 16:21:08.530409 2026] [:error] [pid 20419:tid 20422] [client 20.151.2.242:18190] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaACdO3DVDvMfTYYUBXdTgAAAcA"]
[Thu Feb 26 16:21:09.062980 2026] [:error] [pid 25311:tid 25315] [client 20.151.2.242:18323] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaACddfdM__yZAgJFSs90gAAAYE"]
[Thu Feb 26 16:21:09.620850 2026] [:error] [pid 25311:tid 25329] [client 20.151.2.242:18397] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaACddfdM__yZAgJFSs91QAAAY8"]
[Thu Feb 26 16:21:10.124091 2026] [:error] [pid 55051:tid 55054] [client 20.151.2.242:18412] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaACdgmK1w2kZvh5eLEBNgAAAIA"]
[Thu Feb 26 16:21:10.620501 2026] [:error] [pid 54991:tid 55031] [client 20.151.2.242:18262] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaACdt4Zx-mJ8gbRB2ikogAAAEs"]
[Thu Feb 26 16:21:11.117657 2026] [:error] [pid 55122:tid 55144] [client 20.151.2.242:18424] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aaACd4LiR0OfjFxvcN_i_gAAANQ"]
[Thu Feb 26 16:21:11.719944 2026] [:error] [pid 20419:tid 20440] [client 20.151.2.242:18408] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aaACd-3DVDvMfTYYUBXdUwAAAdI"]
[Thu Feb 26 16:21:12.148297 2026] [:error] [pid 20419:tid 20425] [client 20.151.2.242:18402] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aaACeO3DVDvMfTYYUBXdVwAAAcM"]
[Thu Feb 26 16:21:12.754731 2026] [:error] [pid 3883:tid 3889] [client 20.151.2.242:18310] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aaACeOA33x90V6yYHajO3QAAAUM"]
[Thu Feb 26 16:21:13.208295 2026] [:error] [pid 25311:tid 25322] [client 20.151.2.242:18361] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ov.php"] [unique_id "aaACedfdM__yZAgJFSs92gAAAYg"]
[Thu Feb 26 16:21:13.796281 2026] [:error] [pid 3883:tid 3906] [client 20.151.2.242:18398] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ov.php"] [unique_id "aaACeeA33x90V6yYHajO4QAAAVQ"]
[Thu Feb 26 16:21:14.371954 2026] [:error] [pid 55051:tid 55068] [client 20.151.2.242:18401] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ov.php"] [unique_id "aaACegmK1w2kZvh5eLEBOAAAAI4"]
[Thu Feb 26 16:21:14.841959 2026] [:error] [pid 54990:tid 55004] [client 20.151.2.242:18251] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ov.php"] [unique_id "aaACentr2qmt_mBhH2zxZgAAAAs"]
[Thu Feb 26 16:21:15.393640 2026] [:error] [pid 54990:tid 54999] [client 20.151.2.242:18292] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaACe3tr2qmt_mBhH2zxZwAAAAY"]
[Thu Feb 26 16:21:15.944647 2026] [:error] [pid 55051:tid 55069] [client 20.151.2.242:18287] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaACewmK1w2kZvh5eLEBPwAAAI8"]
[Thu Feb 26 16:21:16.419718 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:18430] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaACfOA33x90V6yYHajO6gAAAUw"]
[Thu Feb 26 16:21:16.947007 2026] [:error] [pid 25311:tid 25336] [client 20.151.2.242:18247] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaACfNfdM__yZAgJFSs93QAAAZY"]
[Thu Feb 26 16:21:17.529727 2026] [:error] [pid 55618:tid 55641] [client 20.151.2.242:18321] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aaACfR61Vrh12f_8oWSsmAAAARQ"]
[Thu Feb 26 16:21:17.965799 2026] [:error] [pid 25311:tid 25315] [client 20.151.2.242:18336] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aaACfdfdM__yZAgJFSs93wAAAYE"]
[Thu Feb 26 16:21:18.416135 2026] [:error] [pid 55618:tid 55639] [client 20.151.2.242:18393] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aaACfh61Vrh12f_8oWSsnwAAARI"]
[Thu Feb 26 16:21:18.942548 2026] [:error] [pid 25311:tid 25331] [client 20.151.2.242:18245] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "aaACftfdM__yZAgJFSs94QAAAZE"]
[Thu Feb 26 16:21:19.447957 2026] [:error] [pid 55122:tid 55140] [client 20.151.2.242:18181] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaACf4LiR0OfjFxvcN_jCwAAANA"]
[Thu Feb 26 16:21:19.914162 2026] [:error] [pid 25311:tid 25323] [client 20.151.2.242:18307] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaACf9fdM__yZAgJFSs95QAAAYk"]
[Thu Feb 26 16:21:20.380112 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:18325] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaACgOA33x90V6yYHajO7gAAAUY"]
[Thu Feb 26 16:21:21.152457 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:18201] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaACgeA33x90V6yYHajO8QAAAVM"]
[Thu Feb 26 16:21:21.915303 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:18381] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aaACgeA33x90V6yYHajO9gAAAVg"]
[Thu Feb 26 16:21:51.596177 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:18410] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aaACn-A33x90V6yYHajPZwAAAVY"]
[Thu Feb 26 16:22:08.222454 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:18334] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/miansha.php"] [unique_id "aaACsNfdM__yZAgJFSs-NgAAAYw"]
[Thu Feb 26 16:22:08.827620 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:18388] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/miansha.php"] [unique_id "aaACsOA33x90V6yYHajPnwAAAVY"]
[Thu Feb 26 16:22:09.523923 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:18346] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/miansha.php"] [unique_id "aaACseA33x90V6yYHajPoQAAAUw"]
[Thu Feb 26 16:22:10.101299 2026] [:error] [pid 3883:tid 3895] [client 20.151.2.242:18261] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/miansha.php"] [unique_id "aaACsuA33x90V6yYHajPpgAAAUk"]
[Thu Feb 26 16:22:10.752536 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:18265] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaACsgmK1w2kZvh5eLEBYwAAAJM"]
[Thu Feb 26 16:22:11.331384 2026] [:error] [pid 55122:tid 55127] [client 20.151.2.242:18333] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c99.php"] [unique_id "aaACs4LiR0OfjFxvcN_jSAAAAMM"]
[Thu Feb 26 16:22:11.869582 2026] [:error] [pid 25311:tid 25320] [client 20.151.2.242:18413] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c99.php"] [unique_id "aaACs9fdM__yZAgJFSs-PQAAAYY"]
[Thu Feb 26 16:22:12.472910 2026] [:error] [pid 55051:tid 55071] [client 20.151.2.242:18179] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c99.php"] [unique_id "aaACtAmK1w2kZvh5eLEBZAAAAJE"]
[Thu Feb 26 16:22:13.078934 2026] [:error] [pid 54990:tid 54996] [client 20.151.2.242:18184] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aaACtXtr2qmt_mBhH2zxjwAAAAM"]
[Thu Feb 26 16:22:13.578374 2026] [:error] [pid 55051:tid 55062] [client 20.151.2.242:18318] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aaACtQmK1w2kZvh5eLEBZwAAAIg"]
[Thu Feb 26 16:22:14.139511 2026] [:error] [pid 55618:tid 55638] [client 20.151.2.242:18379] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aaACth61Vrh12f_8oWStDgAAARE"]
[Thu Feb 26 16:22:14.700563 2026] [:error] [pid 54991:tid 55020] [client 20.151.2.242:18348] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aaACtt4Zx-mJ8gbRB2ikvgAAAEA"]
[Thu Feb 26 16:22:15.346588 2026] [:error] [pid 55618:tid 55622] [client 20.151.2.242:18300] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaACtx61Vrh12f_8oWStEQAAAQE"]
[Thu Feb 26 16:22:16.136520 2026] [:error] [pid 55051:tid 55057] [client 20.151.2.242:18241] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaACuAmK1w2kZvh5eLEBbAAAAIM"]
[Thu Feb 26 16:22:16.635156 2026] [:error] [pid 55618:tid 55624] [client 20.151.2.242:18352] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaACuB61Vrh12f_8oWStFgAAAQM"]
[Thu Feb 26 16:22:17.110200 2026] [:error] [pid 20419:tid 20428] [client 20.151.2.242:18263] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaACue3DVDvMfTYYUBXdsAAAAcY"]
[Thu Feb 26 16:22:17.971675 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:18258] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "aaACueA33x90V6yYHajPtwAAAVg"]
[Thu Feb 26 16:22:18.479743 2026] [:error] [pid 55122:tid 55148] [client 20.151.2.242:18330] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "aaACuoLiR0OfjFxvcN_jUgAAANg"]
[Thu Feb 26 16:22:18.978102 2026] [:error] [pid 25311:tid 25329] [client 20.151.2.242:18180] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "aaACutfdM__yZAgJFSs-RQAAAY8"]
[Thu Feb 26 16:22:19.730681 2026] [:error] [pid 25311:tid 25317] [client 20.151.2.242:18364] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "aaACu9fdM__yZAgJFSs-TQAAAYM"]
[Thu Feb 26 16:22:20.394475 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:18289] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x12.php"] [unique_id "aaACvOA33x90V6yYHajPvQAAAUg"]
[Thu Feb 26 16:22:21.001527 2026] [:error] [pid 3883:tid 3896] [client 20.151.2.242:18254] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x12.php"] [unique_id "aaACveA33x90V6yYHajPwgAAAUo"]
[Thu Feb 26 16:22:21.578533 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:18243] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x12.php"] [unique_id "aaACveA33x90V6yYHajPxwAAAVY"]
[Thu Feb 26 16:22:22.214277 2026] [:error] [pid 55122:tid 55138] [client 20.151.2.242:18288] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x12.php"] [unique_id "aaACvoLiR0OfjFxvcN_jVQAAAM4"]
[Thu Feb 26 16:22:22.840628 2026] [:error] [pid 20419:tid 20434] [client 20.151.2.242:18244] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "aaACvu3DVDvMfTYYUBXdtAAAAcw"]
[Thu Feb 26 16:22:23.498299 2026] [:error] [pid 20419:tid 20440] [client 20.151.2.242:18191] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "aaACv-3DVDvMfTYYUBXduQAAAdI"]
[Thu Feb 26 16:22:24.064847 2026] [:error] [pid 20419:tid 20429] [client 20.151.2.242:18277] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "aaACwO3DVDvMfTYYUBXdugAAAcc"]
[Thu Feb 26 16:22:24.787792 2026] [:error] [pid 25311:tid 25320] [client 20.151.2.242:18224] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "aaACwNfdM__yZAgJFSs-UAAAAYY"]
[Thu Feb 26 16:22:25.450634 2026] [:error] [pid 54991:tid 55043] [client 20.151.2.242:18332] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad2.php"] [unique_id "aaACwd4Zx-mJ8gbRB2ikxQAAAFc"]
[Thu Feb 26 16:22:26.049961 2026] [:error] [pid 54991:tid 55044] [client 20.151.2.242:18280] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad2.php"] [unique_id "aaACwt4Zx-mJ8gbRB2ikyAAAAFg"]
[Thu Feb 26 16:22:26.591942 2026] [:error] [pid 54990:tid 55010] [client 20.151.2.242:18301] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad2.php"] [unique_id "aaACwntr2qmt_mBhH2zxkwAAABE"]
[Thu Feb 26 16:22:27.418827 2026] [:error] [pid 55122:tid 55130] [client 20.151.2.242:18338] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad2.php"] [unique_id "aaACw4LiR0OfjFxvcN_jXwAAAMY"]
[Thu Feb 26 16:22:27.948855 2026] [:error] [pid 3883:tid 3901] [client 20.151.2.242:18260] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8rd1.php"] [unique_id "aaACw-A33x90V6yYHajPyQAAAU8"]
[Thu Feb 26 16:22:28.589729 2026] [:error] [pid 55618:tid 55639] [client 20.151.2.242:18250] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8rd1.php"] [unique_id "aaACxB61Vrh12f_8oWStHQAAARI"]
[Thu Feb 26 16:22:29.116269 2026] [:error] [pid 55122:tid 55142] [client 20.151.2.242:18118] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8rd1.php"] [unique_id "aaACxYLiR0OfjFxvcN_jYgAAANI"]
[Thu Feb 26 16:22:29.804217 2026] [:error] [pid 55122:tid 55145] [client 20.151.2.242:18271] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8rd1.php"] [unique_id "aaACxYLiR0OfjFxvcN_jZgAAANU"]
[Thu Feb 26 16:22:30.426723 2026] [:error] [pid 20419:tid 20440] [client 20.151.2.242:18313] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aaACxu3DVDvMfTYYUBXdzwAAAdI"]
[Thu Feb 26 16:22:31.077040 2026] [:error] [pid 55122:tid 55139] [client 20.151.2.242:18266] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aaACx4LiR0OfjFxvcN_jaAAAAM8"]
[Thu Feb 26 16:22:31.717117 2026] [:error] [pid 20419:tid 20436] [client 20.151.2.242:18426] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aaACx-3DVDvMfTYYUBXd1AAAAc4"]
[Thu Feb 26 16:22:32.259217 2026] [:error] [pid 20419:tid 20441] [client 20.151.2.242:18354] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aaACyO3DVDvMfTYYUBXd1wAAAdM"]
[Thu Feb 26 16:22:32.921148 2026] [:error] [pid 20419:tid 20439] [client 20.151.2.242:18188] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6s2.php"] [unique_id "aaACyO3DVDvMfTYYUBXd3QAAAdE"]
[Thu Feb 26 16:22:33.510965 2026] [:error] [pid 3883:tid 3904] [client 20.151.2.242:18387] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6s2.php"] [unique_id "aaACyeA33x90V6yYHajP0gAAAVI"]
[Thu Feb 26 16:22:34.041498 2026] [:error] [pid 3883:tid 3902] [client 20.151.2.242:18355] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6s2.php"] [unique_id "aaACyuA33x90V6yYHajP1QAAAVA"]
[Thu Feb 26 16:22:34.671636 2026] [:error] [pid 3883:tid 3887] [client 20.151.2.242:18362] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6s2.php"] [unique_id "aaACyuA33x90V6yYHajP3QAAAUE"]
[Thu Feb 26 16:22:35.391007 2026] [:error] [pid 55051:tid 55062] [client 20.151.2.242:18236] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aaACywmK1w2kZvh5eLEBewAAAIg"]
[Thu Feb 26 16:22:35.954310 2026] [:error] [pid 3883:tid 3900] [client 20.151.2.242:18327] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aaACy-A33x90V6yYHajP7QAAAU4"]
[Thu Feb 26 16:22:36.459662 2026] [:error] [pid 3883:tid 3886] [client 20.151.2.242:18281] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aaACzOA33x90V6yYHajP9wAAAUA"]
[Thu Feb 26 16:22:36.915596 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:18283] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aaACzOA33x90V6yYHajP_QAAAVM"]
[Thu Feb 26 16:22:37.482140 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:18347] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaACzeA33x90V6yYHajQBgAAAUg"]
[Thu Feb 26 16:22:38.036117 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:18211] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaACzuA33x90V6yYHajQCgAAAVU"]
[Thu Feb 26 16:22:38.561760 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:18367] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaACzuA33x90V6yYHajQDQAAAUw"]
[Thu Feb 26 16:22:39.145430 2026] [:error] [pid 20419:tid 20441] [client 20.151.2.242:18308] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaACz-3DVDvMfTYYUBXd5gAAAdM"]
[Thu Feb 26 16:22:39.654105 2026] [:error] [pid 20419:tid 20440] [client 20.151.2.242:18356] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaACz-3DVDvMfTYYUBXd6AAAAdI"]
[Thu Feb 26 16:22:40.196837 2026] [:error] [pid 20419:tid 20425] [client 20.151.2.242:18357] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaAC0O3DVDvMfTYYUBXd7gAAAcM"]
[Thu Feb 26 16:22:40.730515 2026] [:error] [pid 3883:tid 3897] [client 20.151.2.242:18239] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaAC0OA33x90V6yYHajQEwAAAUs"]
[Thu Feb 26 16:22:41.386768 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:18223] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaAC0eA33x90V6yYHajQGAAAAVM"]
[Thu Feb 26 16:22:41.849920 2026] [:error] [pid 3883:tid 3902] [client 20.151.2.242:18256] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaAC0eA33x90V6yYHajQGwAAAVA"]
[Thu Feb 26 16:22:42.411669 2026] [:error] [pid 55051:tid 55077] [client 20.151.2.242:18213] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaAC0gmK1w2kZvh5eLEBgwAAAJc"]
[Thu Feb 26 16:22:42.909063 2026] [:error] [pid 55122:tid 55131] [client 20.151.2.242:18219] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaAC0oLiR0OfjFxvcN_jawAAAMc"]
[Thu Feb 26 16:22:43.459291 2026] [:error] [pid 55618:tid 55632] [client 20.151.2.242:18382] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaAC0x61Vrh12f_8oWStKAAAAQs"]
[Thu Feb 26 16:22:43.944440 2026] [:error] [pid 20419:tid 20441] [client 20.151.2.242:18285] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mon.php"] [unique_id "aaAC0-3DVDvMfTYYUBXd9wAAAdM"]
[Thu Feb 26 16:22:44.491200 2026] [:error] [pid 20419:tid 20437] [client 20.151.2.242:18329] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mon.php"] [unique_id "aaAC1O3DVDvMfTYYUBXd-wAAAc8"]
[Thu Feb 26 16:22:44.981108 2026] [:error] [pid 25311:tid 25337] [client 20.151.2.242:18409] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mon.php"] [unique_id "aaAC1NfdM__yZAgJFSs-awAAAZc"]
[Thu Feb 26 16:22:45.535514 2026] [:error] [pid 55051:tid 55070] [client 20.151.2.242:18178] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mon.php"] [unique_id "aaAC1QmK1w2kZvh5eLEBhgAAAJA"]
[Thu Feb 26 16:22:46.224086 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:18363] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaAC1uA33x90V6yYHajQIAAAAVU"]
[Thu Feb 26 16:22:46.772136 2026] [:error] [pid 3883:tid 3902] [client 20.151.2.242:18214] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaAC1uA33x90V6yYHajQIgAAAVA"]
[Thu Feb 26 16:22:47.239946 2026] [:error] [pid 20419:tid 20423] [client 20.151.2.242:18235] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaAC1-3DVDvMfTYYUBXeBQAAAcE"]
[Thu Feb 26 16:22:47.853655 2026] [:error] [pid 55618:tid 55633] [client 20.151.2.242:18193] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaAC1x61Vrh12f_8oWStKgAAAQw"]
[Thu Feb 26 16:22:48.439981 2026] [:error] [pid 25311:tid 25316] [client 20.151.2.242:18378] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aaAC2NfdM__yZAgJFSs-bwAAAYI"]
[Thu Feb 26 16:22:48.955974 2026] [:error] [pid 54990:tid 54999] [client 20.151.2.242:18272] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/product.php"] [unique_id "aaAC2Htr2qmt_mBhH2zxnQAAAAY"]
[Thu Feb 26 16:22:49.467924 2026] [:error] [pid 20419:tid 20439] [client 20.151.2.242:18400] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaAC2e3DVDvMfTYYUBXeDAAAAdE"]
[Thu Feb 26 16:22:50.041901 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:18297] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaAC2uA33x90V6yYHajQMAAAAVg"]
[Thu Feb 26 16:22:50.600455 2026] [:error] [pid 3883:tid 3896] [client 20.151.2.242:18335] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaAC2uA33x90V6yYHajQNAAAAUo"]
[Thu Feb 26 16:22:51.239860 2026] [:error] [pid 3883:tid 3900] [client 20.151.2.242:18284] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-setting.php"] [unique_id "aaAC2-A33x90V6yYHajQOQAAAU4"]
[Thu Feb 26 16:22:51.708235 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:18273] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-setting.php"] [unique_id "aaAC2-A33x90V6yYHajQPwAAAVY"]
[Thu Feb 26 16:22:52.307977 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:18197] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-setting.php"] [unique_id "aaAC3OA33x90V6yYHajQQwAAAVU"]
[Thu Feb 26 16:22:52.831294 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:18416] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-setting.php"] [unique_id "aaAC3AmK1w2kZvh5eLEBiwAAAJM"]
[Thu Feb 26 16:22:53.422407 2026] [:error] [pid 20419:tid 20422] [client 20.151.2.242:18291] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaAC3e3DVDvMfTYYUBXeGAAAAcA"]
[Thu Feb 26 16:22:53.927663 2026] [:error] [pid 54991:tid 55032] [client 20.151.2.242:18252] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaAC3d4Zx-mJ8gbRB2ikzQAAAEw"]
[Thu Feb 26 16:22:54.403579 2026] [:error] [pid 54991:tid 55028] [client 20.151.2.242:18296] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaAC3t4Zx-mJ8gbRB2ikzgAAAEg"]
[Thu Feb 26 16:22:55.098221 2026] [:error] [pid 3883:tid 3904] [client 20.151.2.242:18295] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaAC3-A33x90V6yYHajQTwAAAVI"]
[Thu Feb 26 16:22:55.570871 2026] [:error] [pid 54991:tid 55035] [client 20.151.2.242:18253] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logs.php"] [unique_id "aaAC394Zx-mJ8gbRB2ikzwAAAE8"]
[Thu Feb 26 16:22:56.059223 2026] [:error] [pid 54991:tid 55033] [client 20.151.2.242:18200] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logs.php"] [unique_id "aaAC4N4Zx-mJ8gbRB2ik0AAAAE0"]
[Thu Feb 26 16:22:56.565837 2026] [:error] [pid 55051:tid 55078] [client 20.151.2.242:18286] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logs.php"] [unique_id "aaAC4AmK1w2kZvh5eLEBjgAAAJg"]
[Thu Feb 26 16:22:57.089721 2026] [:error] [pid 20419:tid 20430] [client 20.151.2.242:18220] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logs.php"] [unique_id "aaAC4e3DVDvMfTYYUBXeIAAAAcg"]
[Thu Feb 26 16:22:57.550065 2026] [:error] [pid 20419:tid 20426] [client 20.151.2.242:18195] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aaAC4e3DVDvMfTYYUBXeIQAAAcQ"]
[Thu Feb 26 16:22:58.024152 2026] [:error] [pid 20419:tid 20427] [client 20.151.2.242:18202] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aaAC4u3DVDvMfTYYUBXeJAAAAcU"]
[Thu Feb 26 16:22:58.576789 2026] [:error] [pid 20419:tid 20428] [client 20.151.2.242:18212] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aaAC4u3DVDvMfTYYUBXeKgAAAcY"]
[Thu Feb 26 16:22:59.144317 2026] [:error] [pid 55051:tid 55064] [client 20.151.2.242:18359] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aaAC4wmK1w2kZvh5eLEBkAAAAIo"]
[Thu Feb 26 16:22:59.664476 2026] [:error] [pid 54991:tid 55021] [client 20.151.2.242:18208] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/term.php"] [unique_id "aaAC494Zx-mJ8gbRB2ik1AAAAEE"]
[Thu Feb 26 16:23:00.121854 2026] [:error] [pid 25311:tid 25322] [client 20.151.2.242:18365] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/term.php"] [unique_id "aaAC5NfdM__yZAgJFSs-dQAAAYg"]
[Thu Feb 26 16:23:00.610352 2026] [:error] [pid 25311:tid 25314] [client 20.151.2.242:18194] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/term.php"] [unique_id "aaAC5NfdM__yZAgJFSs-ewAAAYA"]
[Thu Feb 26 16:23:01.141269 2026] [:error] [pid 20419:tid 20430] [client 20.151.2.242:18343] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/term.php"] [unique_id "aaAC5e3DVDvMfTYYUBXeMwAAAcg"]
[Thu Feb 26 16:23:01.636135 2026] [:error] [pid 54991:tid 55040] [client 20.151.2.242:18279] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaAC5d4Zx-mJ8gbRB2ik1wAAAFQ"]
[Thu Feb 26 16:23:02.152978 2026] [:error] [pid 55618:tid 55628] [client 20.151.2.242:18344] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaAC5h61Vrh12f_8oWStMgAAAQc"]
[Thu Feb 26 16:23:02.651218 2026] [:error] [pid 55618:tid 55642] [client 20.151.2.242:18353] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaAC5h61Vrh12f_8oWStMwAAARU"]
[Thu Feb 26 16:23:03.092442 2026] [:error] [pid 25311:tid 25334] [client 20.151.2.242:18328] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaAC59fdM__yZAgJFSs-gQAAAZQ"]
[Thu Feb 26 16:23:03.644824 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:18274] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webdb.php"] [unique_id "aaAC59fdM__yZAgJFSs-ggAAAYw"]
[Thu Feb 26 16:23:04.058533 2026] [:error] [pid 54991:tid 55025] [client 20.151.2.242:18229] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webdb.php"] [unique_id "aaAC6N4Zx-mJ8gbRB2ik2QAAAEU"]
[Thu Feb 26 16:23:04.570430 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:18198] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webdb.php"] [unique_id "aaAC6OA33x90V6yYHajQbgAAAUg"]
[Thu Feb 26 16:23:38.675804 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:18128] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaADCtfdM__yZAgJFSs-1QAAAYs"]
[Thu Feb 26 16:23:39.277895 2026] [:error] [pid 20419:tid 20430] [client 20.151.2.242:18264] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aaADC-3DVDvMfTYYUBXeXwAAAcg"]
[Thu Feb 26 16:23:43.750837 2026] [:error] [pid 25311:tid 25318] [client 20.151.2.242:18246] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaADD9fdM__yZAgJFSs-5AAAAYQ"]
[Thu Feb 26 16:23:52.282201 2026] [:error] [pid 3883:tid 3887] [client 20.151.2.242:18112] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/upfile.php"] [unique_id "aaADGOA33x90V6yYHajQ3gAAAUE"]
[Thu Feb 26 16:23:52.801226 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:18148] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/upfile.php"] [unique_id "aaADGOA33x90V6yYHajQ3wAAAUY"]
[Thu Feb 26 16:23:53.228724 2026] [:error] [pid 20419:tid 20429] [client 20.151.2.242:18177] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/upfile.php"] [unique_id "aaADGe3DVDvMfTYYUBXeaAAAAcc"]
[Thu Feb 26 16:23:53.764764 2026] [:error] [pid 20419:tid 20441] [client 20.151.2.242:18154] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/upfile.php"] [unique_id "aaADGe3DVDvMfTYYUBXeaQAAAdM"]
[Thu Feb 26 16:23:54.255588 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:18185] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/payment.php"] [unique_id "aaADGtfdM__yZAgJFSs--QAAAYw"]
[Thu Feb 26 16:23:54.710324 2026] [:error] [pid 3883:tid 3893] [client 20.151.2.242:18248] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/payment.php"] [unique_id "aaADGuA33x90V6yYHajQ5gAAAUc"]
[Thu Feb 26 16:23:55.145977 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:18216] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/payment.php"] [unique_id "aaADG-A33x90V6yYHajQ6wAAAVY"]
[Thu Feb 26 16:23:55.605337 2026] [:error] [pid 55618:tid 55631] [client 20.151.2.242:18293] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/payment.php"] [unique_id "aaADGx61Vrh12f_8oWStjAAAAQo"]
[Thu Feb 26 16:23:56.115103 2026] [:error] [pid 55051:tid 55063] [client 20.151.2.242:18210] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aaADHAmK1w2kZvh5eLEBrgAAAIk"]
[Thu Feb 26 16:23:56.557909 2026] [:error] [pid 55051:tid 55068] [client 20.151.2.242:18115] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aaADHAmK1w2kZvh5eLEBrwAAAI4"]
[Thu Feb 26 16:23:57.073131 2026] [:error] [pid 55051:tid 55067] [client 20.151.2.242:18276] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aaADHQmK1w2kZvh5eLEBsgAAAI0"]
[Thu Feb 26 16:23:57.634150 2026] [:error] [pid 55051:tid 55070] [client 20.151.2.242:18239] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "aaADHQmK1w2kZvh5eLEBtAAAAJA"]
[Thu Feb 26 16:23:58.073829 2026] [:error] [pid 55122:tid 55127] [client 20.151.2.242:18278] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaADHoLiR0OfjFxvcN_jnQAAAMM"]
[Thu Feb 26 16:23:58.501567 2026] [:error] [pid 25311:tid 25316] [client 20.151.2.242:18203] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaADHtfdM__yZAgJFSs-_wAAAYI"]
[Thu Feb 26 16:23:58.946228 2026] [:error] [pid 25311:tid 25323] [client 20.151.2.242:18290] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaADHtfdM__yZAgJFSs_AAAAAYk"]
[Thu Feb 26 16:23:59.429651 2026] [:error] [pid 3883:tid 3902] [client 20.151.2.242:18257] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaADH-A33x90V6yYHajQ8AAAAVA"]
[Thu Feb 26 16:23:59.990172 2026] [:error] [pid 3883:tid 3886] [client 20.151.2.242:18282] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kill.php"] [unique_id "aaADH-A33x90V6yYHajQ9AAAAUA"]
[Thu Feb 26 16:24:00.519044 2026] [:error] [pid 3883:tid 3897] [client 20.151.2.242:18294] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kill.php"] [unique_id "aaADIOA33x90V6yYHajQ9wAAAUs"]
[Thu Feb 26 16:24:01.022934 2026] [:error] [pid 3883:tid 3903] [client 20.151.2.242:18299] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kill.php"] [unique_id "aaADIeA33x90V6yYHajQ-gAAAVE"]
[Thu Feb 26 16:24:01.506069 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:18232] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kill.php"] [unique_id "aaADIeA33x90V6yYHajQ_wAAAVM"]
[Thu Feb 26 16:24:02.023843 2026] [:error] [pid 55618:tid 55634] [client 20.151.2.242:18228] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/wp-login.php"] [unique_id "aaADIh61Vrh12f_8oWStlgAAAQ0"]
[Thu Feb 26 16:24:02.533338 2026] [:error] [pid 55618:tid 55626] [client 20.151.2.242:18217] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aaADIh61Vrh12f_8oWStmQAAAQU"]
[Thu Feb 26 16:24:03.055972 2026] [:error] [pid 3883:tid 3909] [client 20.151.2.242:18242] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aaADI-A33x90V6yYHajRBgAAAVc"]
[Thu Feb 26 16:24:03.551261 2026] [:error] [pid 3883:tid 3901] [client 20.151.2.242:18177] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aaADI-A33x90V6yYHajRCQAAAU8"]
[Thu Feb 26 16:24:04.011933 2026] [:error] [pid 20419:tid 20423] [client 20.151.2.242:18136] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/lsd.php"] [unique_id "aaADJO3DVDvMfTYYUBXebQAAAcE"]
[Thu Feb 26 16:24:04.513886 2026] [:error] [pid 54991:tid 55037] [client 20.151.2.242:18124] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/lsd.php"] [unique_id "aaADJN4Zx-mJ8gbRB2ilGAAAAFE"]
[Thu Feb 26 16:24:05.034570 2026] [:error] [pid 54990:tid 55014] [client 20.151.2.242:18139] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/lsd.php"] [unique_id "aaADJXtr2qmt_mBhH2zxyQAAABU"]
[Thu Feb 26 16:24:05.484709 2026] [:error] [pid 54991:tid 55024] [client 20.151.2.242:18052] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/lsd.php"] [unique_id "aaADJd4Zx-mJ8gbRB2ilGgAAAEQ"]
[Thu Feb 26 16:24:05.972283 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:18159] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/text.php"] [unique_id "aaADJeA33x90V6yYHajRDgAAAVU"]
[Thu Feb 26 16:24:06.434464 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:18341] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/text.php"] [unique_id "aaADJuA33x90V6yYHajREgAAAUY"]
[Thu Feb 26 16:24:06.979859 2026] [:error] [pid 55051:tid 55078] [client 20.151.2.242:18238] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/text.php"] [unique_id "aaADJgmK1w2kZvh5eLEBuQAAAJg"]
[Thu Feb 26 16:24:07.496723 2026] [:error] [pid 55051:tid 55065] [client 20.151.2.242:18117] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/text.php"] [unique_id "aaADJwmK1w2kZvh5eLEBugAAAIs"]
[Thu Feb 26 16:24:08.115237 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:18176] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaADKOA33x90V6yYHajRHQAAAVU"]
[Thu Feb 26 16:24:08.642716 2026] [:error] [pid 55618:tid 55642] [client 20.151.2.242:18231] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaADKB61Vrh12f_8oWStnAAAARU"]
[Thu Feb 26 16:24:09.202231 2026] [:error] [pid 25311:tid 25324] [client 20.151.2.242:18120] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaADKdfdM__yZAgJFSs_DAAAAYo"]
[Thu Feb 26 16:24:09.668778 2026] [:error] [pid 20419:tid 20438] [client 20.151.2.242:18182] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaADKe3DVDvMfTYYUBXecQAAAdA"]
[Thu Feb 26 16:24:10.186589 2026] [:error] [pid 55618:tid 55624] [client 20.151.2.242:18207] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aaADKh61Vrh12f_8oWStnwAAAQM"]
[Thu Feb 26 16:24:10.639867 2026] [:error] [pid 20419:tid 20422] [client 20.151.2.242:18068] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aaADKu3DVDvMfTYYUBXecwAAAcA"]
[Thu Feb 26 16:24:11.149788 2026] [:error] [pid 25311:tid 25321] [client 20.151.2.242:18168] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aaADK9fdM__yZAgJFSs_EAAAAYc"]
[Thu Feb 26 16:24:11.633867 2026] [:error] [pid 55051:tid 55056] [client 20.151.2.242:18369] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aaADKwmK1w2kZvh5eLEB0gAAAII"]
[Thu Feb 26 16:24:12.074522 2026] [:error] [pid 55122:tid 55142] [client 20.151.2.242:18166] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaADLILiR0OfjFxvcN_juAAAANI"]
[Thu Feb 26 16:24:12.674147 2026] [:error] [pid 54990:tid 55010] [client 20.151.2.242:18183] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaADLHtr2qmt_mBhH2zx2wAAABE"]
[Thu Feb 26 16:24:13.157304 2026] [:error] [pid 55618:tid 55622] [client 20.151.2.242:18113] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaADLR61Vrh12f_8oWStrAAAAQE"]
[Thu Feb 26 16:24:13.609661 2026] [:error] [pid 3883:tid 3902] [client 20.151.2.242:18141] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaADLeA33x90V6yYHajRMQAAAVA"]
[Thu Feb 26 16:24:14.074669 2026] [:error] [pid 3883:tid 3899] [client 20.151.2.242:18126] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aaADLuA33x90V6yYHajRMgAAAU0"]
[Thu Feb 26 16:24:14.507527 2026] [:error] [pid 55122:tid 55129] [client 20.151.2.242:18275] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aaADLoLiR0OfjFxvcN_jvQAAAMU"]
[Thu Feb 26 16:24:14.943671 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:18226] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aaADLuA33x90V6yYHajRNwAAAUg"]
[Thu Feb 26 16:24:15.366134 2026] [:error] [pid 55122:tid 55127] [client 20.151.2.242:18414] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aaADL4LiR0OfjFxvcN_jvwAAAMM"]
[Thu Feb 26 16:24:15.883586 2026] [:error] [pid 20419:tid 20428] [client 20.151.2.242:18205] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaADL-3DVDvMfTYYUBXekQAAAcY"]
[Thu Feb 26 16:24:16.361672 2026] [:error] [pid 25311:tid 25318] [client 20.151.2.242:18234] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aaADMNfdM__yZAgJFSs_OQAAAYQ"]
[Thu Feb 26 16:24:16.835817 2026] [:error] [pid 54990:tid 55012] [client 20.151.2.242:18187] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aaADMHtr2qmt_mBhH2zx3QAAABM"]
[Thu Feb 26 16:24:17.279511 2026] [:error] [pid 25311:tid 25323] [client 20.151.2.242:18072] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aaADMdfdM__yZAgJFSs_PgAAAYk"]
[Thu Feb 26 16:24:17.907511 2026] [:error] [pid 54991:tid 55041] [client 20.151.2.242:18134] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/123.php"] [unique_id "aaADMd4Zx-mJ8gbRB2ilMQAAAFU"]
[Thu Feb 26 16:24:18.343264 2026] [:error] [pid 55051:tid 55061] [client 20.151.2.242:18233] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options-discussion.php"] [unique_id "aaADMgmK1w2kZvh5eLEB1wAAAIc"]
[Thu Feb 26 16:24:18.865534 2026] [:error] [pid 54990:tid 55016] [client 20.151.2.242:18218] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options-discussion.php"] [unique_id "aaADMntr2qmt_mBhH2zx3gAAABc"]
[Thu Feb 26 16:24:19.295022 2026] [:error] [pid 55122:tid 55148] [client 20.151.2.242:18204] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options-discussion.php"] [unique_id "aaADM4LiR0OfjFxvcN_jwgAAANg"]
[Thu Feb 26 16:24:19.787105 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:18140] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options-discussion.php"] [unique_id "aaADM9fdM__yZAgJFSs_QwAAAYs"]
[Thu Feb 26 16:24:20.234782 2026] [:error] [pid 55051:tid 55076] [client 20.151.2.242:18298] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aaADNAmK1w2kZvh5eLEB2AAAAJY"]
[Thu Feb 26 16:24:20.766868 2026] [:error] [pid 3883:tid 3901] [client 20.151.2.242:18222] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aaADNOA33x90V6yYHajRQQAAAU8"]
[Thu Feb 26 16:24:21.203034 2026] [:error] [pid 3883:tid 3900] [client 20.151.2.242:18221] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aaADNeA33x90V6yYHajRQgAAAU4"]
[Thu Feb 26 16:24:21.631979 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:18172] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aaADNeA33x90V6yYHajRRQAAAUY"]
[Thu Feb 26 16:24:22.066089 2026] [:error] [pid 3883:tid 3891] [client 20.151.2.242:18125] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaADNuA33x90V6yYHajRSgAAAUU"]
[Thu Feb 26 16:24:22.564619 2026] [:error] [pid 3883:tid 3902] [client 20.151.2.242:18227] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaADNuA33x90V6yYHajRTwAAAVA"]
[Thu Feb 26 16:24:22.992456 2026] [:error] [pid 25311:tid 25318] [client 20.151.2.242:18215] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaADNtfdM__yZAgJFSs_RQAAAYQ"]
[Thu Feb 26 16:24:23.472202 2026] [:error] [pid 55122:tid 55125] [client 20.151.2.242:18270] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaADN4LiR0OfjFxvcN_jxQAAAME"]
[Thu Feb 26 16:24:23.970376 2026] [:error] [pid 20419:tid 20445] [client 20.151.2.242:17986] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "aaADN-3DVDvMfTYYUBXelAAAAdc"]
[Thu Feb 26 16:24:24.448733 2026] [:error] [pid 25311:tid 25321] [client 20.151.2.242:18259] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "aaADONfdM__yZAgJFSs_TAAAAYc"]
[Thu Feb 26 16:24:25.007920 2026] [:error] [pid 25311:tid 25314] [client 20.151.2.242:18411] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "aaADOdfdM__yZAgJFSs_TwAAAYA"]
[Thu Feb 26 16:24:25.469204 2026] [:error] [pid 55122:tid 55135] [client 20.151.2.242:18049] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "aaADOYLiR0OfjFxvcN_jxgAAAMs"]
[Thu Feb 26 16:24:26.167631 2026] [:error] [pid 3883:tid 3909] [client 20.151.2.242:18122] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aaADOuA33x90V6yYHajRWgAAAVc"]
[Thu Feb 26 16:24:26.749595 2026] [:error] [pid 55618:tid 55627] [client 20.151.2.242:18230] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/credits.php"] [unique_id "aaADOh61Vrh12f_8oWStrgAAAQY"]
[Thu Feb 26 16:24:27.337967 2026] [:error] [pid 25311:tid 25327] [client 20.151.2.242:18186] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/credits.php"] [unique_id "aaADO9fdM__yZAgJFSs_VAAAAY0"]
[Thu Feb 26 16:24:27.798484 2026] [:error] [pid 54991:tid 55031] [client 20.151.2.242:18142] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/credits.php"] [unique_id "aaADO94Zx-mJ8gbRB2ilNgAAAEs"]
[Thu Feb 26 16:24:28.236078 2026] [:error] [pid 25311:tid 25316] [client 20.151.2.242:18100] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/credits.php"] [unique_id "aaADPNfdM__yZAgJFSs_WQAAAYI"]
[Thu Feb 26 16:24:28.808313 2026] [:error] [pid 25311:tid 25328] [client 20.151.2.242:18082] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaADPNfdM__yZAgJFSs_XAAAAY4"]
[Thu Feb 26 16:24:29.465147 2026] [:error] [pid 55618:tid 55631] [client 20.151.2.242:18155] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaADPR61Vrh12f_8oWStsQAAAQo"]
[Thu Feb 26 16:24:29.975695 2026] [:error] [pid 20419:tid 20422] [client 20.151.2.242:18131] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaADPe3DVDvMfTYYUBXemAAAAcA"]
[Thu Feb 26 16:24:30.549065 2026] [:error] [pid 55618:tid 55633] [client 20.151.2.242:18162] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaADPh61Vrh12f_8oWSttQAAAQw"]
[Thu Feb 26 16:24:31.230863 2026] [:error] [pid 3883:tid 3896] [client 20.151.2.242:18237] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaADP-A33x90V6yYHajRYAAAAUo"]
[Thu Feb 26 16:24:31.767063 2026] [:error] [pid 3883:tid 3902] [client 20.151.2.242:17991] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaADP-A33x90V6yYHajRYgAAAVA"]
[Thu Feb 26 16:24:32.225773 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:18196] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaADQOA33x90V6yYHajRaAAAAUw"]
[Thu Feb 26 16:24:32.731802 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:18146] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaADQOA33x90V6yYHajRaQAAAVY"]
[Thu Feb 26 16:24:33.183135 2026] [:error] [pid 3883:tid 3893] [client 20.151.2.242:18165] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aaADQeA33x90V6yYHajRagAAAUc"]
[Thu Feb 26 16:24:33.611991 2026] [:error] [pid 20419:tid 20444] [client 20.151.2.242:18119] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aaADQe3DVDvMfTYYUBXenQAAAdY"]
[Thu Feb 26 16:24:34.088114 2026] [:error] [pid 3883:tid 3895] [client 20.151.2.242:18315] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aaADQuA33x90V6yYHajRbwAAAUk"]
[Thu Feb 26 16:24:34.531228 2026] [:error] [pid 3883:tid 3900] [client 20.151.2.242:18092] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aaADQuA33x90V6yYHajRcAAAAU4"]
[Thu Feb 26 16:24:34.951238 2026] [:error] [pid 55618:tid 55624] [client 20.151.2.242:18070] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aaADQh61Vrh12f_8oWStuAAAAQM"]
[Thu Feb 26 16:24:35.395131 2026] [:error] [pid 3883:tid 3891] [client 20.151.2.242:18163] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aaADQ-A33x90V6yYHajRcgAAAUU"]
[Thu Feb 26 16:24:35.820893 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:18066] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aaADQwmK1w2kZvh5eLEB3AAAAJM"]
[Thu Feb 26 16:24:36.351027 2026] [:error] [pid 3883:tid 3903] [client 20.151.2.242:18309] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aaADROA33x90V6yYHajRdwAAAVE"]
[Thu Feb 26 16:24:36.959969 2026] [:error] [pid 55618:tid 55634] [client 20.151.2.242:18137] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aaADRB61Vrh12f_8oWStuwAAAQ0"]
[Thu Feb 26 16:24:37.428550 2026] [:error] [pid 3883:tid 3895] [client 20.151.2.242:18079] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aaADReA33x90V6yYHajRegAAAUk"]
[Thu Feb 26 16:24:37.959686 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:18114] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aaADReA33x90V6yYHajRewAAAUY"]
[Thu Feb 26 16:24:38.466291 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:18160] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "aaADRuA33x90V6yYHajRfwAAAUg"]
[Thu Feb 26 16:24:38.946546 2026] [:error] [pid 55051:tid 55078] [client 20.151.2.242:18206] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaADRgmK1w2kZvh5eLEB3gAAAJg"]
[Thu Feb 26 16:24:39.382796 2026] [:error] [pid 55618:tid 55621] [client 20.151.2.242:18304] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aaADRx61Vrh12f_8oWStvAAAAQA"]
[Thu Feb 26 16:24:39.885650 2026] [:error] [pid 3883:tid 3897] [client 20.151.2.242:18153] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aaADR-A33x90V6yYHajRhQAAAUs"]
[Thu Feb 26 16:24:40.301456 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:18057] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aaADSNfdM__yZAgJFSs_ZgAAAYw"]
[Thu Feb 26 16:24:40.717749 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:18069] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aaADSOA33x90V6yYHajRjQAAAUg"]
[Thu Feb 26 16:24:41.162482 2026] [:error] [pid 25311:tid 25318] [client 20.151.2.242:18407] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aaADSdfdM__yZAgJFSs_ZwAAAYQ"]
[Thu Feb 26 16:24:41.578649 2026] [:error] [pid 20419:tid 20436] [client 20.151.2.242:18209] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aaADSe3DVDvMfTYYUBXeowAAAc4"]
[Thu Feb 26 16:24:42.023762 2026] [:error] [pid 3883:tid 3904] [client 20.151.2.242:18389] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aaADSuA33x90V6yYHajRkQAAAVI"]
[Thu Feb 26 16:24:42.448569 2026] [:error] [pid 3883:tid 3901] [client 20.151.2.242:17989] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaADSuA33x90V6yYHajRlQAAAU8"]
[Thu Feb 26 16:24:42.968480 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:18157] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaADSuA33x90V6yYHajRmAAAAVM"]
[Thu Feb 26 16:24:43.422294 2026] [:error] [pid 3883:tid 3900] [client 20.151.2.242:18060] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaADS-A33x90V6yYHajRmQAAAU4"]
[Thu Feb 26 16:24:43.875054 2026] [:error] [pid 20419:tid 20443] [client 20.151.2.242:18403] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaADS-3DVDvMfTYYUBXeqQAAAdU"]
[Thu Feb 26 16:24:44.355947 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:18129] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaADTNfdM__yZAgJFSs_awAAAYs"]
[Thu Feb 26 16:24:44.769471 2026] [:error] [pid 25311:tid 25324] [client 20.151.2.242:18174] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaADTNfdM__yZAgJFSs_bAAAAYo"]
[Thu Feb 26 16:24:45.315088 2026] [:error] [pid 20419:tid 20444] [client 20.151.2.242:18101] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaADTe3DVDvMfTYYUBXeqwAAAdY"]
[Thu Feb 26 16:24:45.732133 2026] [:error] [pid 54991:tid 55027] [client 20.151.2.242:18048] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaADTd4Zx-mJ8gbRB2ilOwAAAEc"]
[Thu Feb 26 16:24:46.270622 2026] [:error] [pid 20419:tid 20429] [client 20.151.2.242:17996] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cmdo.php"] [unique_id "aaADTu3DVDvMfTYYUBXergAAAcc"]
[Thu Feb 26 16:24:46.710376 2026] [:error] [pid 54990:tid 55000] [client 20.151.2.242:18111] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cmdo.php"] [unique_id "aaADTntr2qmt_mBhH2zx6AAAAAc"]
[Thu Feb 26 16:24:47.198601 2026] [:error] [pid 55051:tid 55054] [client 20.151.2.242:18391] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cmdo.php"] [unique_id "aaADTwmK1w2kZvh5eLEB4wAAAIA"]
[Thu Feb 26 16:24:47.651560 2026] [:error] [pid 54990:tid 54994] [client 20.151.2.242:18317] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cmdo.php"] [unique_id "aaADT3tr2qmt_mBhH2zx7gAAAAE"]
[Thu Feb 26 16:24:48.167760 2026] [:error] [pid 54990:tid 55017] [client 20.151.2.242:18116] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lkui.php"] [unique_id "aaADUHtr2qmt_mBhH2zx8QAAABg"]
[Thu Feb 26 16:24:48.614485 2026] [:error] [pid 20419:tid 20446] [client 20.151.2.242:18054] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lkui.php"] [unique_id "aaADUO3DVDvMfTYYUBXesQAAAdg"]
[Thu Feb 26 16:24:49.050243 2026] [:error] [pid 54990:tid 55014] [client 20.151.2.242:18018] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lkui.php"] [unique_id "aaADUXtr2qmt_mBhH2zx8gAAABU"]
[Thu Feb 26 16:24:49.655873 2026] [:error] [pid 3883:tid 3893] [client 20.151.2.242:18147] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lkui.php"] [unique_id "aaADUeA33x90V6yYHajRqAAAAUc"]
[Thu Feb 26 16:25:39.751378 2026] [:error] [pid 3883:tid 3889] [client 20.151.2.242:18319] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media-upload.php"] [unique_id "aaADg-A33x90V6yYHajSYAAAAUM"]
[Thu Feb 26 16:25:40.465970 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:18370] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media-upload.php"] [unique_id "aaADhAmK1w2kZvh5eLECRAAAAJM"]
[Thu Feb 26 16:25:41.237020 2026] [:error] [pid 25311:tid 25328] [client 20.151.2.242:18393] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media-upload.php"] [unique_id "aaADhdfdM__yZAgJFSs_sAAAAY4"]
[Thu Feb 26 16:25:41.901022 2026] [:error] [pid 3883:tid 3886] [client 20.151.2.242:18429] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media-upload.php"] [unique_id "aaADheA33x90V6yYHajSagAAAUA"]
[Thu Feb 26 16:25:42.540221 2026] [:error] [pid 3883:tid 3890] [client 20.151.2.242:18415] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sc.php"] [unique_id "aaADhuA33x90V6yYHajSbQAAAUQ"]
[Thu Feb 26 16:25:43.052778 2026] [:error] [pid 3883:tid 3895] [client 20.151.2.242:18424] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sc.php"] [unique_id "aaADh-A33x90V6yYHajSbwAAAUk"]
[Thu Feb 26 16:25:43.824871 2026] [:error] [pid 55051:tid 55062] [client 20.151.2.242:18323] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sc.php"] [unique_id "aaADhwmK1w2kZvh5eLECTAAAAIg"]
[Thu Feb 26 16:25:45.020467 2026] [:error] [pid 55122:tid 55132] [client 20.151.2.242:18123] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sc.php"] [unique_id "aaADiYLiR0OfjFxvcN_j5wAAAMg"]
[Thu Feb 26 16:25:45.718311 2026] [:error] [pid 55051:tid 55063] [client 20.151.2.242:18053] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aaADiQmK1w2kZvh5eLECTwAAAIk"]
[Thu Feb 26 16:25:46.537582 2026] [:error] [pid 55051:tid 55077] [client 20.151.2.242:18428] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aaADigmK1w2kZvh5eLECUAAAAJc"]
[Thu Feb 26 16:25:47.466806 2026] [:error] [pid 55618:tid 55632] [client 20.151.2.242:18430] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aaADix61Vrh12f_8oWSt2wAAAQs"]
[Thu Feb 26 16:25:48.211561 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:18109] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aaADjOA33x90V6yYHajSfgAAAUY"]
[Thu Feb 26 16:25:48.885452 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:18321] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aaADjOA33x90V6yYHajSgQAAAUg"]
[Thu Feb 26 16:25:49.811967 2026] [:error] [pid 25311:tid 25329] [client 20.151.2.242:18417] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aaADjdfdM__yZAgJFSs_wAAAAY8"]
[Thu Feb 26 16:25:50.646119 2026] [:error] [pid 20419:tid 20438] [client 20.151.2.242:18418] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aaADju3DVDvMfTYYUBXe3QAAAdA"]
[Thu Feb 26 16:25:51.267292 2026] [:error] [pid 20419:tid 20440] [client 20.151.2.242:18425] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aaADj-3DVDvMfTYYUBXe4QAAAdI"]
[Thu Feb 26 16:25:51.874304 2026] [:error] [pid 54990:tid 54997] [client 20.151.2.242:18340] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaADj3tr2qmt_mBhH2zyGQAAAAQ"]
[Thu Feb 26 16:25:52.473690 2026] [:error] [pid 3883:tid 3886] [client 20.151.2.242:18412] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaADkOA33x90V6yYHajSiQAAAUA"]
[Thu Feb 26 16:25:53.046176 2026] [:error] [pid 55618:tid 55623] [client 20.151.2.242:18381] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaADkR61Vrh12f_8oWSt3wAAAQI"]
[Thu Feb 26 16:25:53.552856 2026] [:error] [pid 55051:tid 55070] [client 20.151.2.242:18171] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaADkQmK1w2kZvh5eLECVwAAAJA"]
[Thu Feb 26 16:25:54.353521 2026] [:error] [pid 25311:tid 25330] [client 20.151.2.242:18374] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaADktfdM__yZAgJFSs_xgAAAZA"]
[Thu Feb 26 16:25:55.171068 2026] [:error] [pid 55051:tid 55056] [client 20.151.2.242:18406] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaADkwmK1w2kZvh5eLECYQAAAII"]
[Thu Feb 26 16:25:55.886652 2026] [:error] [pid 55051:tid 55069] [client 20.151.2.242:18396] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaADkwmK1w2kZvh5eLECZAAAAI8"]
[Thu Feb 26 16:25:56.411548 2026] [:error] [pid 55051:tid 55078] [client 20.151.2.242:18080] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaADlAmK1w2kZvh5eLECZgAAAJg"]
[Thu Feb 26 16:25:57.049973 2026] [:error] [pid 55051:tid 55066] [client 20.151.2.242:18383] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/widgets.php"] [unique_id "aaADlQmK1w2kZvh5eLECagAAAIw"]
[Thu Feb 26 16:25:57.608383 2026] [:error] [pid 55051:tid 55071] [client 20.151.2.242:18431] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/widgets.php"] [unique_id "aaADlQmK1w2kZvh5eLECbAAAAJE"]
[Thu Feb 26 16:25:58.125071 2026] [:error] [pid 25311:tid 25327] [client 20.151.2.242:18368] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/widgets.php"] [unique_id "aaADltfdM__yZAgJFSs_xwAAAY0"]
[Thu Feb 26 16:25:58.651582 2026] [:error] [pid 3883:tid 3906] [client 20.151.2.242:18361] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/widgets.php"] [unique_id "aaADluA33x90V6yYHajSkQAAAVQ"]
[Thu Feb 26 16:25:59.291955 2026] [:error] [pid 55051:tid 55058] [client 20.151.2.242:18377] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aaADlwmK1w2kZvh5eLECbgAAAIQ"]
[Thu Feb 26 16:25:59.889088 2026] [:error] [pid 55051:tid 55072] [client 20.151.2.242:18423] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aaADlwmK1w2kZvh5eLECcgAAAJI"]
[Thu Feb 26 16:26:00.531181 2026] [:error] [pid 55122:tid 55141] [client 20.151.2.242:18175] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aaADmILiR0OfjFxvcN_j8wAAANE"]
[Thu Feb 26 16:26:01.237232 2026] [:error] [pid 55051:tid 55076] [client 20.151.2.242:18336] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aaADmQmK1w2kZvh5eLECdwAAAJY"]
[Thu Feb 26 16:26:01.752553 2026] [:error] [pid 25311:tid 25319] [client 20.151.2.242:18279] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/freedoms.php"] [unique_id "aaADmdfdM__yZAgJFSs_yQAAAYU"]
[Thu Feb 26 16:26:02.299408 2026] [:error] [pid 20419:tid 20446] [client 20.151.2.242:18394] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/freedoms.php"] [unique_id "aaADmu3DVDvMfTYYUBXe9gAAAdg"]
[Thu Feb 26 16:26:02.833853 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:18199] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/freedoms.php"] [unique_id "aaADmtfdM__yZAgJFSs_zAAAAYs"]
[Thu Feb 26 16:26:03.400226 2026] [:error] [pid 25311:tid 25323] [client 20.151.2.242:18310] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/freedoms.php"] [unique_id "aaADm9fdM__yZAgJFSs_zgAAAYk"]
[Thu Feb 26 16:26:03.896754 2026] [:error] [pid 54991:tid 55022] [client 20.151.2.242:17987] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaADm94Zx-mJ8gbRB2ilawAAAEI"]
[Thu Feb 26 16:26:04.398417 2026] [:error] [pid 54991:tid 55021] [client 20.151.2.242:18371] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaADnN4Zx-mJ8gbRB2ilbAAAAEE"]
[Thu Feb 26 16:26:04.859549 2026] [:error] [pid 54991:tid 55026] [client 20.151.2.242:18390] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaADnN4Zx-mJ8gbRB2ilbQAAAEY"]
[Thu Feb 26 16:26:05.373886 2026] [:error] [pid 55618:tid 55645] [client 20.151.2.242:18395] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaADnR61Vrh12f_8oWSt7AAAARg"]
[Thu Feb 26 16:26:05.830727 2026] [:error] [pid 54991:tid 55020] [client 20.151.2.242:18373] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaADnd4Zx-mJ8gbRB2ilbgAAAEA"]
[Thu Feb 26 16:26:06.397316 2026] [:error] [pid 55618:tid 55641] [client 20.151.2.242:18427] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaADnh61Vrh12f_8oWSt7wAAARQ"]
[Thu Feb 26 16:26:06.832733 2026] [:error] [pid 55122:tid 55127] [client 20.151.2.242:18311] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaADnoLiR0OfjFxvcN_j9QAAAMM"]
[Thu Feb 26 16:26:07.279229 2026] [:error] [pid 25311:tid 25329] [client 20.151.2.242:18098] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaADn9fdM__yZAgJFSs_0gAAAY8"]
[Thu Feb 26 16:26:07.804176 2026] [:error] [pid 25311:tid 25322] [client 20.151.2.242:18255] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaADn9fdM__yZAgJFSs_0wAAAYg"]
[Thu Feb 26 16:26:08.371848 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:18316] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaADoNfdM__yZAgJFSs_1AAAAZg"]
[Thu Feb 26 16:26:08.816142 2026] [:error] [pid 54991:tid 55032] [client 20.151.2.242:18358] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaADoN4Zx-mJ8gbRB2ildAAAAEw"]
[Thu Feb 26 16:26:09.268763 2026] [:error] [pid 25311:tid 25332] [client 20.151.2.242:18302] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaADodfdM__yZAgJFSs_1gAAAZI"]
[Thu Feb 26 16:26:09.843541 2026] [:error] [pid 20419:tid 20426] [client 20.151.2.242:18380] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjq.php"] [unique_id "aaADoe3DVDvMfTYYUBXe_gAAAcQ"]
[Thu Feb 26 16:26:10.355130 2026] [:error] [pid 55122:tid 55143] [client 20.151.2.242:18419] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjq.php"] [unique_id "aaADooLiR0OfjFxvcN_j9wAAANM"]
[Thu Feb 26 16:26:10.832314 2026] [:error] [pid 55051:tid 55078] [client 20.151.2.242:18322] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjq.php"] [unique_id "aaADogmK1w2kZvh5eLECfAAAAJg"]
[Thu Feb 26 16:26:11.265405 2026] [:error] [pid 55051:tid 55055] [client 20.151.2.242:18173] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjq.php"] [unique_id "aaADowmK1w2kZvh5eLECfQAAAIE"]
[Thu Feb 26 16:26:11.814577 2026] [:error] [pid 55051:tid 55065] [client 20.151.2.242:18033] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/71.php"] [unique_id "aaADowmK1w2kZvh5eLECgAAAAIs"]
[Thu Feb 26 16:26:12.272279 2026] [:error] [pid 54991:tid 55034] [client 20.151.2.242:18305] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/71.php"] [unique_id "aaADpN4Zx-mJ8gbRB2ildgAAAE4"]
[Thu Feb 26 16:26:12.690320 2026] [:error] [pid 55618:tid 55625] [client 20.151.2.242:18132] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/71.php"] [unique_id "aaADpB61Vrh12f_8oWSt8QAAAQQ"]
[Thu Feb 26 16:26:13.211567 2026] [:error] [pid 55618:tid 55621] [client 20.151.2.242:18144] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/71.php"] [unique_id "aaADpR61Vrh12f_8oWSt8wAAAQA"]
[Thu Feb 26 16:26:13.660675 2026] [:error] [pid 25311:tid 25331] [client 20.151.2.242:18324] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aaADpdfdM__yZAgJFSs_2gAAAZE"]
[Thu Feb 26 16:26:14.095135 2026] [:error] [pid 55051:tid 55074] [client 20.151.2.242:18339] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aaADpgmK1w2kZvh5eLEChwAAAJQ"]
[Thu Feb 26 16:26:14.589430 2026] [:error] [pid 55122:tid 55130] [client 20.151.2.242:18081] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aaADpoLiR0OfjFxvcN_j-QAAAMY"]
[Thu Feb 26 16:26:15.091967 2026] [:error] [pid 55618:tid 55633] [client 20.151.2.242:18345] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock.php"] [unique_id "aaADpx61Vrh12f_8oWSt-AAAAQw"]
[Thu Feb 26 16:26:15.507041 2026] [:error] [pid 55618:tid 55639] [client 20.151.2.242:18320] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aaADpx61Vrh12f_8oWSt-QAAARI"]
[Thu Feb 26 16:26:16.006176 2026] [:error] [pid 54990:tid 55011] [client 20.151.2.242:18064] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aaADqHtr2qmt_mBhH2zyIwAAABI"]
[Thu Feb 26 16:26:16.446712 2026] [:error] [pid 55122:tid 55147] [client 20.151.2.242:18267] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aaADqILiR0OfjFxvcN_j_QAAANc"]
[Thu Feb 26 16:26:16.909711 2026] [:error] [pid 55051:tid 55061] [client 20.151.2.242:18420] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "aaADqAmK1w2kZvh5eLECiwAAAIc"]
[Thu Feb 26 16:26:17.329406 2026] [:error] [pid 55051:tid 55060] [client 20.151.2.242:18101] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaADqQmK1w2kZvh5eLECjQAAAIY"]
[Thu Feb 26 16:26:17.767244 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:18386] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaADqeA33x90V6yYHajSmwAAAUw"]
[Thu Feb 26 16:26:18.197120 2026] [:error] [pid 54991:tid 55028] [client 20.151.2.242:18011] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaADqt4Zx-mJ8gbRB2ileQAAAEg"]
[Thu Feb 26 16:26:18.653356 2026] [:error] [pid 55122:tid 55146] [client 20.151.2.242:18349] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaADqoLiR0OfjFxvcN_j_gAAANY"]
[Thu Feb 26 16:26:19.088566 2026] [:error] [pid 25311:tid 25314] [client 20.151.2.242:18268] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-header.php"] [unique_id "aaADq9fdM__yZAgJFSs_2wAAAYA"]
[Thu Feb 26 16:26:19.525603 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:18360] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-header.php"] [unique_id "aaADq9fdM__yZAgJFSs_4AAAAYs"]
[Thu Feb 26 16:26:19.961254 2026] [:error] [pid 25311:tid 25324] [client 20.151.2.242:18061] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-header.php"] [unique_id "aaADq9fdM__yZAgJFSs_4QAAAYo"]
[Thu Feb 26 16:26:20.400586 2026] [:error] [pid 25311:tid 25318] [client 20.151.2.242:18001] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-header.php"] [unique_id "aaADrNfdM__yZAgJFSs_4wAAAYQ"]
[Thu Feb 26 16:26:20.830899 2026] [:error] [pid 54991:tid 55040] [client 20.151.2.242:18388] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaADrN4Zx-mJ8gbRB2ilewAAAFQ"]
[Thu Feb 26 16:26:21.268613 2026] [:error] [pid 54991:tid 55043] [client 20.151.2.242:18331] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaADrd4Zx-mJ8gbRB2ilfAAAAFc"]
[Thu Feb 26 16:26:21.709867 2026] [:error] [pid 25311:tid 25321] [client 20.151.2.242:18314] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaADrdfdM__yZAgJFSs_5AAAAYc"]
[Thu Feb 26 16:26:22.173742 2026] [:error] [pid 20419:tid 20441] [client 20.151.2.242:18016] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaADru3DVDvMfTYYUBXfAwAAAdM"]
[Thu Feb 26 16:26:22.608708 2026] [:error] [pid 55618:tid 55636] [client 20.151.2.242:18245] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aaADrh61Vrh12f_8oWSt_QAAAQ8"]
[Thu Feb 26 16:26:23.052559 2026] [:error] [pid 20419:tid 20439] [client 20.151.2.242:18326] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aaADr-3DVDvMfTYYUBXfBAAAAdE"]
[Thu Feb 26 16:26:23.512747 2026] [:error] [pid 55618:tid 55638] [client 20.151.2.242:18192] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aaADrx61Vrh12f_8oWSt_gAAARE"]
[Thu Feb 26 16:26:23.949597 2026] [:error] [pid 3883:tid 3904] [client 20.151.2.242:18397] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aaADr-A33x90V6yYHajSoAAAAVI"]
[Thu Feb 26 16:26:24.415780 2026] [:error] [pid 55618:tid 55621] [client 20.151.2.242:17935] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin.php"] [unique_id "aaADsB61Vrh12f_8oWSuBgAAAQA"]
[Thu Feb 26 16:26:24.848697 2026] [:error] [pid 3883:tid 3900] [client 20.151.2.242:18170] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin.php"] [unique_id "aaADsOA33x90V6yYHajSogAAAU4"]
[Thu Feb 26 16:26:25.295900 2026] [:error] [pid 55618:tid 55639] [client 20.151.2.242:18312] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin.php"] [unique_id "aaADsR61Vrh12f_8oWSuDwAAARI"]
[Thu Feb 26 16:26:25.786678 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:17920] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin.php"] [unique_id "aaADseA33x90V6yYHajSpAAAAVU"]
[Thu Feb 26 16:26:26.240377 2026] [:error] [pid 25311:tid 25322] [client 20.151.2.242:18342] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aaADstfdM__yZAgJFSs_5gAAAYg"]
[Thu Feb 26 16:26:26.707718 2026] [:error] [pid 20419:tid 20446] [client 20.151.2.242:18249] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aaADsu3DVDvMfTYYUBXfCQAAAdg"]
[Thu Feb 26 16:26:27.140537 2026] [:error] [pid 55051:tid 55077] [client 20.151.2.242:18307] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aaADswmK1w2kZvh5eLEClgAAAJc"]
[Thu Feb 26 16:26:27.588811 2026] [:error] [pid 55051:tid 55058] [client 20.151.2.242:18352] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "aaADswmK1w2kZvh5eLECmAAAAIQ"]
[Thu Feb 26 16:26:28.094849 2026] [:error] [pid 55051:tid 55056] [client 20.151.2.242:18402] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaADtAmK1w2kZvh5eLECmgAAAII"]
[Thu Feb 26 16:26:28.528432 2026] [:error] [pid 54990:tid 54998] [client 20.151.2.242:18287] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaADtHtr2qmt_mBhH2zyKAAAAAU"]
[Thu Feb 26 16:26:28.998815 2026] [:error] [pid 55122:tid 55131] [client 20.151.2.242:18375] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaADtILiR0OfjFxvcN_kAQAAAMc"]
[Thu Feb 26 16:26:29.450429 2026] [:error] [pid 55051:tid 55061] [client 20.151.2.242:18087] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaADtQmK1w2kZvh5eLECnQAAAIc"]
[Thu Feb 26 16:26:29.912254 2026] [:error] [pid 55051:tid 55057] [client 20.151.2.242:18376] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeng.php"] [unique_id "aaADtQmK1w2kZvh5eLECnwAAAIM"]
[Thu Feb 26 16:26:30.387326 2026] [:error] [pid 55051:tid 55078] [client 20.151.2.242:18348] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeng.php"] [unique_id "aaADtgmK1w2kZvh5eLECoQAAAJg"]
[Thu Feb 26 16:26:30.823773 2026] [:error] [pid 25311:tid 25316] [client 20.151.2.242:18189] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeng.php"] [unique_id "aaADttfdM__yZAgJFSs_6AAAAYI"]
[Thu Feb 26 16:26:31.433670 2026] [:error] [pid 55618:tid 55622] [client 20.151.2.242:18241] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeng.php"] [unique_id "aaADtx61Vrh12f_8oWSuFAAAAQE"]
[Thu Feb 26 16:26:31.873626 2026] [:error] [pid 55051:tid 55075] [client 20.151.2.242:18243] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaADtwmK1w2kZvh5eLECpAAAAJU"]
[Thu Feb 26 16:26:32.322207 2026] [:error] [pid 3883:tid 3887] [client 20.151.2.242:18127] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaADuOA33x90V6yYHajSrQAAAUE"]
[Thu Feb 26 16:26:32.817695 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:18269] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaADuOA33x90V6yYHajSrgAAAUY"]
[Thu Feb 26 16:26:33.248143 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:17993] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaADueA33x90V6yYHajSsAAAAUw"]
[Thu Feb 26 16:26:33.682645 2026] [:error] [pid 55051:tid 55063] [client 20.151.2.242:18422] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/checkbex.php"] [unique_id "aaADuQmK1w2kZvh5eLECqAAAAIk"]
[Thu Feb 26 16:26:34.147943 2026] [:error] [pid 25311:tid 25320] [client 20.151.2.242:18180] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/checkbex.php"] [unique_id "aaADutfdM__yZAgJFSs_6QAAAYY"]
[Thu Feb 26 16:26:34.582642 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:18384] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/checkbex.php"] [unique_id "aaADugmK1w2kZvh5eLECqgAAAJM"]
[Thu Feb 26 16:26:35.012132 2026] [:error] [pid 55051:tid 55071] [client 20.151.2.242:18338] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/checkbex.php"] [unique_id "aaADuwmK1w2kZvh5eLECqwAAAJE"]
[Thu Feb 26 16:26:35.452473 2026] [:error] [pid 55051:tid 55056] [client 20.151.2.242:18318] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaADuwmK1w2kZvh5eLECsAAAAII"]
[Thu Feb 26 16:26:36.082269 2026] [:error] [pid 55051:tid 55060] [client 20.151.2.242:18201] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaADvAmK1w2kZvh5eLECtAAAAIY"]
[Thu Feb 26 16:26:36.584282 2026] [:error] [pid 55618:tid 55634] [client 20.151.2.242:18103] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaADvB61Vrh12f_8oWSuGQAAAQ0"]
[Thu Feb 26 16:26:43.646041 2026] [:error] [pid 55618:tid 55633] [client 20.151.2.242:18398] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaADwx61Vrh12f_8oWSuIwAAAQw"]
[Thu Feb 26 16:46:15.773807 2026] [:error] [pid 25311:tid 25321] [client 40.80.89.74:17438] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.tmb/dropdown.php"] [unique_id "aaAIV9fdM__yZAgJFStGYAAAAYc"]
[Thu Feb 26 16:46:16.330288 2026] [:error] [pid 20419:tid 20426] [client 40.80.89.74:5595] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.tmb/dropdown.php"] [unique_id "aaAIWO3DVDvMfTYYUBXlZwAAAcQ"]
[Thu Feb 26 16:46:16.901698 2026] [:error] [pid 20419:tid 20446] [client 40.80.89.74:17416] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.tmb/dropdown.php"] [unique_id "aaAIWO3DVDvMfTYYUBXlaAAAAdg"]
[Thu Feb 26 16:46:17.453736 2026] [:error] [pid 20419:tid 20436] [client 40.80.89.74:5585] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.tmb/dropdown.php"] [unique_id "aaAIWe3DVDvMfTYYUBXlaQAAAc4"]
[Thu Feb 26 17:30:43.177445 2026] [:error] [pid 55051:tid 55065] [client 45.132.115.220:23433] [client 45.132.115.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.220, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaASwwmK1w2kZvh5eLEnnwAAAIs"]
[Thu Feb 26 17:39:32.883316 2026] [:error] [pid 55051:tid 55065] [client 20.63.98.207:31701] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaAU1AmK1w2kZvh5eLEsNQAAAIs"]
[Thu Feb 26 17:39:33.819738 2026] [:error] [pid 3883:tid 3904] [client 20.63.98.207:31627] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaAU1eA33x90V6yYHagETQAAAVI"]
[Thu Feb 26 17:39:34.656252 2026] [:error] [pid 55122:tid 55145] [client 20.63.98.207:31743] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaAU1oLiR0OfjFxvcN_yPQAAANU"]
[Thu Feb 26 17:39:35.498165 2026] [:error] [pid 20419:tid 20442] [client 20.63.98.207:31719] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaAU1-3DVDvMfTYYUBX2FQAAAdQ"]
[Thu Feb 26 17:39:35.702929 2026] [:error] [pid 3883:tid 3886] [client 20.63.98.207:31631] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaAU1-A33x90V6yYHagEVQAAAUA"]
[Thu Feb 26 17:39:36.146625 2026] [:error] [pid 3883:tid 3899] [client 20.63.98.207:31707] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaAU2OA33x90V6yYHagEVwAAAU0"]
[Thu Feb 26 17:39:36.570718 2026] [:error] [pid 3883:tid 3888] [client 20.63.98.207:31692] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaAU2OA33x90V6yYHagEWwAAAUI"]
[Thu Feb 26 17:39:37.020263 2026] [:error] [pid 55051:tid 55073] [client 20.63.98.207:31734] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaAU2QmK1w2kZvh5eLEsWQAAAJM"]
[Thu Feb 26 17:39:37.440998 2026] [:error] [pid 25311:tid 25321] [client 20.63.98.207:31743] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaAU2dfdM__yZAgJFStbcwAAAYc"]
[Thu Feb 26 17:39:37.860797 2026] [:error] [pid 54991:tid 55022] [client 20.63.98.207:31708] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaAU2d4Zx-mJ8gbRB2ix1QAAAEI"]
[Thu Feb 26 17:39:38.292660 2026] [:error] [pid 3883:tid 3894] [client 20.63.98.207:31729] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaAU2uA33x90V6yYHagEXwAAAUg"]
[Thu Feb 26 17:39:38.713601 2026] [:error] [pid 55618:tid 55629] [client 20.63.98.207:31705] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaAU2h61Vrh12f_8oWS-iwAAAQg"]
[Thu Feb 26 17:39:39.155673 2026] [:error] [pid 55618:tid 55640] [client 20.63.98.207:31617] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "aaAU2x61Vrh12f_8oWS-jAAAARM"]
[Thu Feb 26 17:39:39.580741 2026] [:error] [pid 25311:tid 25335] [client 20.63.98.207:31704] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "aaAU29fdM__yZAgJFStbeAAAAZU"]
[Thu Feb 26 17:39:40.023652 2026] [:error] [pid 25311:tid 25324] [client 20.63.98.207:31742] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "aaAU3NfdM__yZAgJFStbegAAAYo"]
[Thu Feb 26 17:39:40.476729 2026] [:error] [pid 54991:tid 55037] [client 20.63.98.207:31724] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "aaAU3N4Zx-mJ8gbRB2ix2QAAAFE"]
[Thu Feb 26 17:39:40.898100 2026] [:error] [pid 54991:tid 55038] [client 20.63.98.207:31637] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aaAU3N4Zx-mJ8gbRB2ix2gAAAFI"]
[Thu Feb 26 17:39:41.356249 2026] [:error] [pid 25311:tid 25316] [client 20.63.98.207:31709] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aaAU3dfdM__yZAgJFStbfwAAAYI"]
[Thu Feb 26 17:39:41.785690 2026] [:error] [pid 25311:tid 25328] [client 20.63.98.207:31645] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aaAU3dfdM__yZAgJFStbhQAAAY4"]
[Thu Feb 26 17:39:42.250209 2026] [:error] [pid 3883:tid 3903] [client 20.63.98.207:31719] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aaAU3uA33x90V6yYHagEaQAAAVE"]
[Thu Feb 26 17:39:42.684566 2026] [:error] [pid 3883:tid 3894] [client 20.63.98.207:31621] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aaAU3uA33x90V6yYHagEbgAAAUg"]
[Thu Feb 26 17:39:43.138852 2026] [:error] [pid 3883:tid 3886] [client 20.63.98.207:31684] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aaAU3-A33x90V6yYHagEdgAAAUA"]
[Thu Feb 26 17:39:43.639541 2026] [:error] [pid 3883:tid 3898] [client 20.63.98.207:31639] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aaAU3-A33x90V6yYHagEgwAAAUw"]
[Thu Feb 26 17:39:44.117706 2026] [:error] [pid 25311:tid 25337] [client 20.63.98.207:31710] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aaAU4NfdM__yZAgJFStbiAAAAZc"]
[Thu Feb 26 17:39:44.545115 2026] [:error] [pid 3883:tid 3910] [client 20.63.98.207:31699] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaAU4OA33x90V6yYHagEiQAAAVg"]
[Thu Feb 26 17:39:45.009171 2026] [:error] [pid 3883:tid 3898] [client 20.63.98.207:31695] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaAU4eA33x90V6yYHagEjAAAAUw"]
[Thu Feb 26 17:39:45.452847 2026] [:error] [pid 55122:tid 55129] [client 20.63.98.207:31626] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaAU4YLiR0OfjFxvcN_yTAAAAMU"]
[Thu Feb 26 17:39:45.926305 2026] [:error] [pid 20419:tid 20426] [client 20.63.98.207:31638] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaAU4e3DVDvMfTYYUBX2KAAAAcQ"]
[Thu Feb 26 17:39:46.380030 2026] [:error] [pid 3883:tid 3894] [client 20.63.98.207:31632] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aaAU4uA33x90V6yYHagEmwAAAUg"]
[Thu Feb 26 17:39:46.829187 2026] [:error] [pid 3883:tid 3907] [client 20.63.98.207:31618] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aaAU4uA33x90V6yYHagEqQAAAVU"]
[Thu Feb 26 17:39:47.322012 2026] [:error] [pid 25311:tid 25329] [client 20.63.98.207:31737] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aaAU49fdM__yZAgJFStbjwAAAY8"]
[Thu Feb 26 17:39:47.807948 2026] [:error] [pid 3883:tid 3893] [client 20.63.98.207:31572] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "aaAU4-A33x90V6yYHagErgAAAUc"]
[Thu Feb 26 17:39:48.238198 2026] [:error] [pid 25311:tid 25333] [client 20.63.98.207:31727] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaAU5NfdM__yZAgJFStbkgAAAZM"]
[Thu Feb 26 17:39:48.705762 2026] [:error] [pid 55618:tid 55621] [client 20.63.98.207:31730] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaAU5B61Vrh12f_8oWS-mQAAAQA"]
[Thu Feb 26 17:39:49.181230 2026] [:error] [pid 55051:tid 55055] [client 20.63.98.207:31674] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaAU5QmK1w2kZvh5eLEsrwAAAIE"]
[Thu Feb 26 17:39:49.752705 2026] [:error] [pid 3883:tid 3900] [client 20.63.98.207:31663] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaAU5eA33x90V6yYHagEsgAAAU4"]
[Thu Feb 26 17:39:50.227252 2026] [:error] [pid 55051:tid 55070] [client 20.63.98.207:31627] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ff1.php"] [unique_id "aaAU5gmK1w2kZvh5eLEstAAAAJA"]
[Thu Feb 26 17:39:50.655946 2026] [:error] [pid 55122:tid 55148] [client 20.63.98.207:31625] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ff1.php"] [unique_id "aaAU5oLiR0OfjFxvcN_yUAAAANg"]
[Thu Feb 26 17:39:51.137710 2026] [:error] [pid 54991:tid 55030] [client 20.63.98.207:31735] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ff1.php"] [unique_id "aaAU594Zx-mJ8gbRB2ix7gAAAEo"]
[Thu Feb 26 17:39:51.586883 2026] [:error] [pid 25311:tid 25336] [client 20.63.98.207:31733] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ff1.php"] [unique_id "aaAU59fdM__yZAgJFStbowAAAZY"]
[Thu Feb 26 17:39:52.014506 2026] [:error] [pid 55051:tid 55071] [client 20.63.98.207:31722] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aaAU6AmK1w2kZvh5eLEswQAAAJE"]
[Thu Feb 26 17:39:52.460101 2026] [:error] [pid 55051:tid 55060] [client 20.63.98.207:31681] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aaAU6AmK1w2kZvh5eLEsxgAAAIY"]
[Thu Feb 26 17:39:52.882147 2026] [:error] [pid 25311:tid 25324] [client 20.63.98.207:31728] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aaAU6NfdM__yZAgJFStbpQAAAYo"]
[Thu Feb 26 17:39:53.296100 2026] [:error] [pid 25311:tid 25332] [client 20.63.98.207:31697] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aaAU6dfdM__yZAgJFStbqQAAAZI"]
[Thu Feb 26 17:39:53.725145 2026] [:error] [pid 25311:tid 25329] [client 20.63.98.207:31569] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaAU6dfdM__yZAgJFStbqwAAAY8"]
[Thu Feb 26 17:39:54.139657 2026] [:error] [pid 3883:tid 3900] [client 20.63.98.207:31739] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaAU6uA33x90V6yYHagEvQAAAU4"]
[Thu Feb 26 17:39:54.566330 2026] [:error] [pid 3883:tid 3886] [client 20.63.98.207:31736] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaAU6uA33x90V6yYHagEwgAAAUA"]
[Thu Feb 26 17:39:54.991499 2026] [:error] [pid 20419:tid 20446] [client 20.63.98.207:31685] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaAU6u3DVDvMfTYYUBX2NAAAAdg"]
[Thu Feb 26 17:39:55.412161 2026] [:error] [pid 3883:tid 3905] [client 20.63.98.207:31706] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaAU6-A33x90V6yYHagEywAAAVM"]
[Thu Feb 26 17:39:55.888714 2026] [:error] [pid 3883:tid 3909] [client 20.63.98.207:31629] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaAU6-A33x90V6yYHagE0gAAAVc"]
[Thu Feb 26 17:39:56.341101 2026] [:error] [pid 25311:tid 25326] [client 20.63.98.207:31720] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaAU7NfdM__yZAgJFStbrgAAAYw"]
[Thu Feb 26 17:39:56.765850 2026] [:error] [pid 55051:tid 55058] [client 20.63.98.207:31642] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaAU7AmK1w2kZvh5eLEs2QAAAIQ"]
[Thu Feb 26 17:39:57.193261 2026] [:error] [pid 25311:tid 25337] [client 20.63.98.207:31694] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aaAU7dfdM__yZAgJFStbsQAAAZc"]
[Thu Feb 26 17:39:57.675730 2026] [:error] [pid 55122:tid 55131] [client 20.63.98.207:31690] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aaAU7YLiR0OfjFxvcN_yXQAAAMc"]
[Thu Feb 26 17:39:58.142183 2026] [:error] [pid 3883:tid 3896] [client 20.63.98.207:31585] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aaAU7uA33x90V6yYHagE2gAAAUo"]
[Thu Feb 26 17:39:58.658948 2026] [:error] [pid 3883:tid 3899] [client 20.63.98.207:31666] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new4.php"] [unique_id "aaAU7uA33x90V6yYHagE3gAAAU0"]
[Thu Feb 26 17:39:59.203825 2026] [:error] [pid 3883:tid 3906] [client 20.63.98.207:31580] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "aaAU7-A33x90V6yYHagE5QAAAVQ"]
[Thu Feb 26 17:39:59.624908 2026] [:error] [pid 3883:tid 3892] [client 20.63.98.207:31716] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "aaAU7-A33x90V6yYHagE8QAAAUY"]
[Thu Feb 26 17:40:00.051930 2026] [:error] [pid 55051:tid 55060] [client 20.63.98.207:31643] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "aaAU8AmK1w2kZvh5eLEs5gAAAIY"]
[Thu Feb 26 17:40:00.488298 2026] [:error] [pid 3883:tid 3907] [client 20.63.98.207:31636] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "aaAU8OA33x90V6yYHagE-gAAAVU"]
[Thu Feb 26 17:40:00.905630 2026] [:error] [pid 3883:tid 3892] [client 20.63.98.207:31732] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaAU8OA33x90V6yYHagFAQAAAUY"]
[Thu Feb 26 17:40:01.342031 2026] [:error] [pid 3883:tid 3894] [client 20.63.98.207:31686] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaAU8eA33x90V6yYHagFBAAAAUg"]
[Thu Feb 26 17:40:01.759449 2026] [:error] [pid 3883:tid 3902] [client 20.63.98.207:31712] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaAU8eA33x90V6yYHagFCQAAAVA"]
[Thu Feb 26 17:40:02.198894 2026] [:error] [pid 3883:tid 3895] [client 20.63.98.207:31641] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaAU8uA33x90V6yYHagFDgAAAUk"]
[Thu Feb 26 17:40:02.634353 2026] [:error] [pid 55051:tid 55075] [client 20.63.98.207:31622] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaAU8gmK1w2kZvh5eLEs6wAAAJU"]
[Thu Feb 26 17:40:03.096354 2026] [:error] [pid 55051:tid 55077] [client 20.63.98.207:31559] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaAU8wmK1w2kZvh5eLEs7QAAAJc"]
[Thu Feb 26 17:40:03.559292 2026] [:error] [pid 25311:tid 25334] [client 20.63.98.207:31669] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaAU89fdM__yZAgJFStbwAAAAZQ"]
[Thu Feb 26 17:40:04.009262 2026] [:error] [pid 54990:tid 55017] [client 20.63.98.207:31630] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaAU9Htr2qmt_mBhH2z7-AAAABg"]
[Thu Feb 26 17:40:04.457184 2026] [:error] [pid 55122:tid 55127] [client 20.63.98.207:31566] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/work.php"] [unique_id "aaAU9ILiR0OfjFxvcN_yYAAAAMM"]
[Thu Feb 26 17:40:04.955428 2026] [:error] [pid 3883:tid 3889] [client 20.63.98.207:31649] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/work.php"] [unique_id "aaAU9OA33x90V6yYHagFGQAAAUM"]
[Thu Feb 26 17:40:05.435789 2026] [:error] [pid 3883:tid 3887] [client 20.63.98.207:31619] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/work.php"] [unique_id "aaAU9eA33x90V6yYHagFHAAAAUE"]
[Thu Feb 26 17:40:05.871601 2026] [:error] [pid 25311:tid 25328] [client 20.63.98.207:31633] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/work.php"] [unique_id "aaAU9dfdM__yZAgJFStbwgAAAY4"]
[Thu Feb 26 17:40:06.453314 2026] [:error] [pid 25311:tid 25321] [client 20.63.98.207:31675] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/06.php"] [unique_id "aaAU9tfdM__yZAgJFStbwwAAAYc"]
[Thu Feb 26 17:40:06.937698 2026] [:error] [pid 55618:tid 55633] [client 20.63.98.207:31635] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/06.php"] [unique_id "aaAU9h61Vrh12f_8oWS-tAAAAQw"]
[Thu Feb 26 17:40:07.352707 2026] [:error] [pid 25311:tid 25337] [client 20.63.98.207:31647] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/06.php"] [unique_id "aaAU99fdM__yZAgJFStbyAAAAZc"]
[Thu Feb 26 17:40:07.796564 2026] [:error] [pid 55618:tid 55623] [client 20.63.98.207:31659] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/06.php"] [unique_id "aaAU9x61Vrh12f_8oWS-uQAAAQI"]
[Thu Feb 26 17:40:08.209708 2026] [:error] [pid 55051:tid 55055] [client 20.63.98.207:31620] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/god.php"] [unique_id "aaAU-AmK1w2kZvh5eLEs9wAAAIE"]
[Thu Feb 26 17:40:08.645800 2026] [:error] [pid 55051:tid 55054] [client 20.63.98.207:31644] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/god.php"] [unique_id "aaAU-AmK1w2kZvh5eLEs-gAAAIA"]
[Thu Feb 26 17:40:09.105762 2026] [:error] [pid 25311:tid 25336] [client 20.63.98.207:31698] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/god.php"] [unique_id "aaAU-dfdM__yZAgJFStbzAAAAZY"]
[Thu Feb 26 17:40:09.536472 2026] [:error] [pid 55618:tid 55625] [client 20.63.98.207:31651] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/god.php"] [unique_id "aaAU-R61Vrh12f_8oWS-xAAAAQQ"]
[Thu Feb 26 17:40:09.966503 2026] [:error] [pid 20419:tid 20437] [client 20.63.98.207:31661] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaAU-e3DVDvMfTYYUBX2TAAAAc8"]
[Thu Feb 26 17:40:10.389972 2026] [:error] [pid 54990:tid 54997] [client 20.63.98.207:31679] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaAU-ntr2qmt_mBhH2z7-QAAAAQ"]
[Thu Feb 26 17:40:10.880418 2026] [:error] [pid 20419:tid 20439] [client 20.63.98.207:31700] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaAU-u3DVDvMfTYYUBX2TQAAAdE"]
[Thu Feb 26 17:40:11.295073 2026] [:error] [pid 54991:tid 55031] [client 20.63.98.207:31689] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaAU-94Zx-mJ8gbRB2ix-AAAAEs"]
[Thu Feb 26 17:40:11.735554 2026] [:error] [pid 55051:tid 55055] [client 20.63.98.207:31560] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugins.php"] [unique_id "aaAU-wmK1w2kZvh5eLEtCgAAAIE"]
[Thu Feb 26 17:40:12.166653 2026] [:error] [pid 55051:tid 55058] [client 20.63.98.207:31676] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugins.php"] [unique_id "aaAU_AmK1w2kZvh5eLEtDAAAAIQ"]
[Thu Feb 26 17:40:12.590260 2026] [:error] [pid 55051:tid 55076] [client 20.63.98.207:31591] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugins.php"] [unique_id "aaAU_AmK1w2kZvh5eLEtEQAAAJY"]
[Thu Feb 26 17:40:13.048506 2026] [:error] [pid 20419:tid 20423] [client 20.63.98.207:31555] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugins.php"] [unique_id "aaAU_e3DVDvMfTYYUBX2VAAAAcE"]
[Thu Feb 26 17:40:13.464682 2026] [:error] [pid 20419:tid 20442] [client 20.63.98.207:31740] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seetox.php"] [unique_id "aaAU_e3DVDvMfTYYUBX2WAAAAdQ"]
[Thu Feb 26 17:40:13.877367 2026] [:error] [pid 55051:tid 55056] [client 20.63.98.207:31670] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seetox.php"] [unique_id "aaAU_QmK1w2kZvh5eLEtFgAAAII"]
[Thu Feb 26 17:40:14.291305 2026] [:error] [pid 55051:tid 55062] [client 20.63.98.207:31723] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seetox.php"] [unique_id "aaAU_gmK1w2kZvh5eLEtHAAAAIg"]
[Thu Feb 26 17:40:14.700962 2026] [:error] [pid 25311:tid 25328] [client 20.63.98.207:31713] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seetox.php"] [unique_id "aaAU_tfdM__yZAgJFStb1QAAAY4"]
[Thu Feb 26 17:40:15.126132 2026] [:error] [pid 25311:tid 25322] [client 20.63.98.207:31691] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAU_9fdM__yZAgJFStb3AAAAYg"]
[Thu Feb 26 17:40:15.540072 2026] [:error] [pid 25311:tid 25338] [client 20.63.98.207:31693] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAU_9fdM__yZAgJFStb3wAAAZg"]
[Thu Feb 26 17:40:15.953573 2026] [:error] [pid 20419:tid 20424] [client 20.63.98.207:31652] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAU_-3DVDvMfTYYUBX2XQAAAcI"]
[Thu Feb 26 17:40:16.441994 2026] [:error] [pid 54991:tid 55039] [client 20.63.98.207:31584] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAVAN4Zx-mJ8gbRB2ix_gAAAFM"]
[Thu Feb 26 17:40:16.893099 2026] [:error] [pid 55618:tid 55622] [client 20.63.98.207:31552] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaAVAB61Vrh12f_8oWS-0gAAAQE"]
[Thu Feb 26 17:40:17.325174 2026] [:error] [pid 54990:tid 54993] [client 20.63.98.207:31738] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaAVAXtr2qmt_mBhH2z8AQAAAAA"]
[Thu Feb 26 17:40:17.747083 2026] [:error] [pid 3883:tid 3886] [client 20.63.98.207:31571] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaAVAeA33x90V6yYHagFOgAAAUA"]
[Thu Feb 26 17:40:18.173126 2026] [:error] [pid 25311:tid 25314] [client 20.63.98.207:31672] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaAVAtfdM__yZAgJFStb4wAAAYA"]
[Thu Feb 26 17:40:18.592840 2026] [:error] [pid 3883:tid 3890] [client 20.63.98.207:31667] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "aaAVAuA33x90V6yYHagFQgAAAUQ"]
[Thu Feb 26 17:40:19.018785 2026] [:error] [pid 3883:tid 3908] [client 20.63.98.207:31616] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "aaAVA-A33x90V6yYHagFRAAAAVY"]
[Thu Feb 26 17:40:19.437735 2026] [:error] [pid 20419:tid 20428] [client 20.63.98.207:31561] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "aaAVA-3DVDvMfTYYUBX2ZAAAAcY"]
[Thu Feb 26 17:40:19.861481 2026] [:error] [pid 20419:tid 20438] [client 20.63.98.207:31558] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "aaAVA-3DVDvMfTYYUBX2ZgAAAdA"]
[Thu Feb 26 17:40:20.288193 2026] [:error] [pid 55051:tid 55075] [client 20.63.98.207:31607] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/un.php"] [unique_id "aaAVBAmK1w2kZvh5eLEtLgAAAJU"]
[Thu Feb 26 17:40:20.716833 2026] [:error] [pid 54991:tid 55030] [client 20.63.98.207:31493] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/un.php"] [unique_id "aaAVBN4Zx-mJ8gbRB2iyDgAAAEo"]
[Thu Feb 26 17:40:21.137013 2026] [:error] [pid 3883:tid 3886] [client 20.63.98.207:31696] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/un.php"] [unique_id "aaAVBeA33x90V6yYHagFTQAAAUA"]
[Thu Feb 26 17:40:21.582833 2026] [:error] [pid 55051:tid 55069] [client 20.63.98.207:31587] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/un.php"] [unique_id "aaAVBQmK1w2kZvh5eLEtRAAAAI8"]
[Thu Feb 26 17:40:22.021617 2026] [:error] [pid 55051:tid 55067] [client 20.63.98.207:31701] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/erty.php"] [unique_id "aaAVBgmK1w2kZvh5eLEtRwAAAI0"]
[Thu Feb 26 17:40:22.441812 2026] [:error] [pid 55051:tid 55074] [client 20.63.98.207:31725] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/erty.php"] [unique_id "aaAVBgmK1w2kZvh5eLEtSwAAAJQ"]
[Thu Feb 26 17:40:22.858632 2026] [:error] [pid 25311:tid 25315] [client 20.63.98.207:31718] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/erty.php"] [unique_id "aaAVBtfdM__yZAgJFStb8wAAAYE"]
[Thu Feb 26 17:40:23.280797 2026] [:error] [pid 55051:tid 55057] [client 20.63.98.207:31604] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/erty.php"] [unique_id "aaAVBwmK1w2kZvh5eLEtVQAAAIM"]
[Thu Feb 26 17:40:23.733855 2026] [:error] [pid 25311:tid 25325] [client 20.63.98.207:31575] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fot.php"] [unique_id "aaAVB9fdM__yZAgJFStb-gAAAYs"]
[Thu Feb 26 17:40:24.151964 2026] [:error] [pid 55618:tid 55623] [client 20.63.98.207:31590] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fot.php"] [unique_id "aaAVCB61Vrh12f_8oWS-4gAAAQI"]
[Thu Feb 26 17:40:24.635640 2026] [:error] [pid 55618:tid 55641] [client 20.63.98.207:31665] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fot.php"] [unique_id "aaAVCB61Vrh12f_8oWS-4wAAARQ"]
[Thu Feb 26 17:40:25.068480 2026] [:error] [pid 55122:tid 55147] [client 20.63.98.207:31703] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fot.php"] [unique_id "aaAVCYLiR0OfjFxvcN_yfAAAANc"]
[Thu Feb 26 18:41:38.311971 2026] [:error] [pid 55051:tid 55072] [client 4.204.200.32:61261] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaAjYgmK1w2kZvh5eLFO7AAAAJI"]
[Thu Feb 26 18:41:39.033785 2026] [:error] [pid 55051:tid 55078] [client 4.204.200.32:61265] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaAjYwmK1w2kZvh5eLFO9wAAAJg"]
[Thu Feb 26 18:41:40.180014 2026] [:error] [pid 3883:tid 3904] [client 4.204.200.32:61292] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaAjZOA33x90V6yYHagzoQAAAVI"]
[Thu Feb 26 18:41:40.787193 2026] [:error] [pid 55051:tid 55065] [client 4.204.200.32:61212] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaAjZAmK1w2kZvh5eLFPAgAAAIs"]
[Thu Feb 26 18:41:41.473808 2026] [:error] [pid 3883:tid 3894] [client 4.204.200.32:61211] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aaAjZeA33x90V6yYHagzsQAAAUg"]
[Thu Feb 26 18:41:42.018392 2026] [:error] [pid 3883:tid 3906] [client 4.204.200.32:61291] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aaAjZuA33x90V6yYHagzugAAAVQ"]
[Thu Feb 26 18:41:42.505487 2026] [:error] [pid 3883:tid 3904] [client 4.204.200.32:61210] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aaAjZuA33x90V6yYHagzwwAAAVI"]
[Thu Feb 26 18:41:43.225411 2026] [:error] [pid 3883:tid 3899] [client 4.204.200.32:61299] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aaAjZ-A33x90V6yYHagzzwAAAU0"]
[Thu Feb 26 18:41:43.980639 2026] [:error] [pid 55051:tid 55073] [client 4.204.200.32:61284] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aaAjZwmK1w2kZvh5eLFPBQAAAJM"]
[Thu Feb 26 18:41:45.519234 2026] [:error] [pid 55051:tid 55070] [client 4.204.200.32:61266] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aaAjaQmK1w2kZvh5eLFPCwAAAJA"]
[Thu Feb 26 18:41:46.112289 2026] [:error] [pid 55051:tid 55075] [client 4.204.200.32:61188] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aaAjagmK1w2kZvh5eLFPDwAAAJU"]
[Thu Feb 26 18:41:46.700949 2026] [:error] [pid 3883:tid 3887] [client 4.204.200.32:61257] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aaAjauA33x90V6yYHagz3gAAAUE"]
[Thu Feb 26 18:41:47.391810 2026] [:error] [pid 55051:tid 55067] [client 4.204.200.32:61298] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aaAjawmK1w2kZvh5eLFPEgAAAI0"]
[Thu Feb 26 18:41:48.300916 2026] [:error] [pid 55051:tid 55063] [client 4.204.200.32:61207] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aaAjbAmK1w2kZvh5eLFPFAAAAIk"]
[Thu Feb 26 18:41:49.227406 2026] [:error] [pid 3883:tid 3892] [client 4.204.200.32:61268] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aaAjbeA33x90V6yYHagz6QAAAUY"]
[Thu Feb 26 18:41:50.544509 2026] [:error] [pid 3883:tid 3899] [client 4.204.200.32:61203] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dom.php"] [unique_id "aaAjbuA33x90V6yYHagz-AAAAU0"]
[Thu Feb 26 18:41:51.877713 2026] [:error] [pid 54990:tid 55007] [client 4.204.200.32:61280] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "aaAjb3tr2qmt_mBhH2wGoQAAAA4"]
[Thu Feb 26 18:41:52.708921 2026] [:error] [pid 54991:tid 55023] [client 4.204.200.32:61293] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "aaAjcN4Zx-mJ8gbRB2i9MQAAAEM"]
[Thu Feb 26 18:41:53.177838 2026] [:error] [pid 55618:tid 55639] [client 4.204.200.32:61303] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "aaAjcR61Vrh12f_8oWTOUgAAARI"]
[Thu Feb 26 18:41:54.081508 2026] [:error] [pid 3883:tid 3904] [client 4.204.200.32:61309] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "aaAjcuA33x90V6yYHag0DQAAAVI"]
[Thu Feb 26 18:41:55.007865 2026] [:error] [pid 3883:tid 3904] [client 4.204.200.32:61206] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samiri.php"] [unique_id "aaAjc-A33x90V6yYHag0GQAAAVI"]
[Thu Feb 26 18:41:55.731908 2026] [:error] [pid 3883:tid 3905] [client 4.204.200.32:61278] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samiri.php"] [unique_id "aaAjc-A33x90V6yYHag0HwAAAVM"]
[Thu Feb 26 18:41:56.836334 2026] [:error] [pid 3883:tid 3902] [client 4.204.200.32:61279] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samiri.php"] [unique_id "aaAjdOA33x90V6yYHag0JgAAAVA"]
[Thu Feb 26 18:41:57.842222 2026] [:error] [pid 3883:tid 3886] [client 4.204.200.32:61242] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samiri.php"] [unique_id "aaAjdeA33x90V6yYHag0KwAAAUA"]
[Thu Feb 26 18:41:59.110128 2026] [:error] [pid 55051:tid 55062] [client 4.204.200.32:61306] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaAjdwmK1w2kZvh5eLFPKwAAAIg"]
[Thu Feb 26 18:41:59.810242 2026] [:error] [pid 54990:tid 55001] [client 4.204.200.32:61209] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaAjd3tr2qmt_mBhH2wGowAAAAg"]
[Thu Feb 26 18:42:00.543803 2026] [:error] [pid 55051:tid 55054] [client 4.204.200.32:61249] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaAjeAmK1w2kZvh5eLFPNgAAAIA"]
[Thu Feb 26 18:42:01.173600 2026] [:error] [pid 54991:tid 55024] [client 4.204.200.32:61300] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaAjed4Zx-mJ8gbRB2i9OAAAAEQ"]
[Thu Feb 26 18:42:01.724910 2026] [:error] [pid 55618:tid 55635] [client 4.204.200.32:61234] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aaAjeR61Vrh12f_8oWTOWAAAAQ4"]
[Thu Feb 26 18:42:02.371405 2026] [:error] [pid 54991:tid 55032] [client 4.204.200.32:61307] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aaAjet4Zx-mJ8gbRB2i9OwAAAEw"]
[Thu Feb 26 18:42:03.290198 2026] [:error] [pid 3883:tid 3910] [client 4.204.200.32:61276] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aaAje-A33x90V6yYHag0QwAAAVg"]
[Thu Feb 26 18:42:03.931101 2026] [:error] [pid 55618:tid 55625] [client 4.204.200.32:61305] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aaAjex61Vrh12f_8oWTOXQAAAQQ"]
[Thu Feb 26 18:42:04.922663 2026] [:error] [pid 3883:tid 3904] [client 4.204.200.32:61308] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaAjfOA33x90V6yYHag0RwAAAVI"]
[Thu Feb 26 18:42:05.466217 2026] [:error] [pid 3883:tid 3890] [client 4.204.200.32:61282] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaAjfeA33x90V6yYHag0TAAAAUQ"]
[Thu Feb 26 18:42:05.992036 2026] [:error] [pid 3883:tid 3893] [client 4.204.200.32:45005] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaAjfeA33x90V6yYHag0TwAAAUc"]
[Thu Feb 26 18:42:06.512815 2026] [:error] [pid 3883:tid 3891] [client 4.204.200.32:61235] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaAjfuA33x90V6yYHag0UwAAAUU"]
[Thu Feb 26 18:42:07.156078 2026] [:error] [pid 3883:tid 3910] [client 4.204.200.32:61197] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaAjf-A33x90V6yYHag0VwAAAVg"]
[Thu Feb 26 18:42:07.853668 2026] [:error] [pid 3883:tid 3890] [client 4.204.200.32:61205] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaAjf-A33x90V6yYHag0XAAAAUQ"]
[Thu Feb 26 18:42:08.501885 2026] [:error] [pid 55122:tid 55135] [client 4.204.200.32:61263] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaAjgILiR0OfjFxvcN_-ZQAAAMs"]
[Thu Feb 26 18:42:09.549375 2026] [:error] [pid 3883:tid 3892] [client 4.204.200.32:61202] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaAjgeA33x90V6yYHag0cAAAAUY"]
[Thu Feb 26 18:42:10.180745 2026] [:error] [pid 20419:tid 20427] [client 4.204.200.32:61216] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaAjgu3DVDvMfTYYUBUJzwAAAcU"]
[Thu Feb 26 18:42:11.188361 2026] [:error] [pid 3883:tid 3892] [client 4.204.200.32:45034] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaAjg-A33x90V6yYHag0jQAAAUY"]
[Thu Feb 26 18:42:11.863084 2026] [:error] [pid 25311:tid 25316] [client 4.204.200.32:61213] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaAjg9fdM__yZAgJFSt0ogAAAYI"]
[Thu Feb 26 18:42:12.767347 2026] [:error] [pid 20419:tid 20438] [client 4.204.200.32:61204] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaAjhO3DVDvMfTYYUBUJ1gAAAdA"]
[Thu Feb 26 18:42:13.613639 2026] [:error] [pid 55051:tid 55073] [client 4.204.200.32:61283] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAjhQmK1w2kZvh5eLFPYQAAAJM"]
[Thu Feb 26 18:42:14.201488 2026] [:error] [pid 3883:tid 3909] [client 4.204.200.32:61272] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAjhuA33x90V6yYHag0qQAAAVc"]
[Thu Feb 26 18:42:15.082247 2026] [:error] [pid 3883:tid 3907] [client 4.204.200.32:61262] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAjh-A33x90V6yYHag0swAAAVU"]
[Thu Feb 26 18:42:15.848600 2026] [:error] [pid 3883:tid 3900] [client 4.204.200.32:61255] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAjh-A33x90V6yYHag0wAAAAU4"]
[Thu Feb 26 18:42:16.808811 2026] [:error] [pid 3883:tid 3900] [client 4.204.200.32:61297] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shas.php"] [unique_id "aaAjiOA33x90V6yYHag0ywAAAU4"]
[Thu Feb 26 18:42:17.656149 2026] [:error] [pid 3883:tid 3887] [client 4.204.200.32:61260] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shas.php"] [unique_id "aaAjieA33x90V6yYHag02QAAAUE"]
[Thu Feb 26 18:42:18.425661 2026] [:error] [pid 55618:tid 55637] [client 4.204.200.32:61304] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shas.php"] [unique_id "aaAjih61Vrh12f_8oWTObgAAARA"]
[Thu Feb 26 18:42:19.150400 2026] [:error] [pid 3883:tid 3901] [client 4.204.200.32:61267] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shas.php"] [unique_id "aaAji-A33x90V6yYHag06QAAAU8"]
[Thu Feb 26 18:42:19.722786 2026] [:error] [pid 55051:tid 55062] [client 4.204.200.32:61193] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaAjiwmK1w2kZvh5eLFPaQAAAIg"]
[Thu Feb 26 18:42:20.257610 2026] [:error] [pid 3883:tid 3910] [client 4.204.200.32:61274] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaAjjOA33x90V6yYHag09QAAAVg"]
[Thu Feb 26 18:42:20.819739 2026] [:error] [pid 3883:tid 3896] [client 4.204.200.32:45024] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaAjjOA33x90V6yYHag1BgAAAUo"]
[Thu Feb 26 18:42:21.750089 2026] [:error] [pid 25311:tid 25332] [client 4.204.200.32:61241] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaAjjdfdM__yZAgJFSt0rwAAAZI"]
[Thu Feb 26 18:42:22.506769 2026] [:error] [pid 3883:tid 3888] [client 4.204.200.32:61273] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aaAjjuA33x90V6yYHag1KQAAAUI"]
[Thu Feb 26 18:42:23.031263 2026] [:error] [pid 3883:tid 3889] [client 4.204.200.32:61254] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aaAjj-A33x90V6yYHag1MwAAAUM"]
[Thu Feb 26 18:42:23.654296 2026] [:error] [pid 20419:tid 20435] [client 4.204.200.32:61239] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aaAjj-3DVDvMfTYYUBUJ8AAAAc0"]
[Thu Feb 26 18:42:24.279997 2026] [:error] [pid 3883:tid 3897] [client 4.204.200.32:61251] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aaAjkOA33x90V6yYHag1QAAAAUs"]
[Thu Feb 26 18:42:24.926405 2026] [:error] [pid 20419:tid 20441] [client 4.204.200.32:45000] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aaAjkO3DVDvMfTYYUBUJ_gAAAdM"]
[Thu Feb 26 18:42:25.940290 2026] [:error] [pid 20419:tid 20429] [client 4.204.200.32:61285] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aaAjke3DVDvMfTYYUBUKBgAAAcc"]
[Thu Feb 26 18:42:26.624037 2026] [:error] [pid 20419:tid 20436] [client 4.204.200.32:61302] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aaAjku3DVDvMfTYYUBUKCwAAAc4"]
[Thu Feb 26 18:42:27.281500 2026] [:error] [pid 55051:tid 55064] [client 4.204.200.32:61222] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aaAjkwmK1w2kZvh5eLFPlwAAAIo"]
[Thu Feb 26 18:42:28.492944 2026] [:error] [pid 3883:tid 3903] [client 4.204.200.32:45012] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fault.php"] [unique_id "aaAjlOA33x90V6yYHag1iAAAAVE"]
[Thu Feb 26 18:42:29.435587 2026] [:error] [pid 55051:tid 55069] [client 4.204.200.32:45017] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fault.php"] [unique_id "aaAjlQmK1w2kZvh5eLFPsgAAAI8"]
[Thu Feb 26 18:42:30.332296 2026] [:error] [pid 55051:tid 55074] [client 4.204.200.32:61218] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fault.php"] [unique_id "aaAjlgmK1w2kZvh5eLFPygAAAJQ"]
[Thu Feb 26 18:42:31.164251 2026] [:error] [pid 20419:tid 20443] [client 4.204.200.32:61190] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fault.php"] [unique_id "aaAjl-3DVDvMfTYYUBUKKAAAAdU"]
[Thu Feb 26 18:42:33.178541 2026] [:error] [pid 55051:tid 55065] [client 4.204.200.32:61233] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaAjmQmK1w2kZvh5eLFP-gAAAIs"]
[Thu Feb 26 18:42:34.001555 2026] [:error] [pid 3883:tid 3896] [client 4.204.200.32:44996] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaAjmuA33x90V6yYHag1ugAAAUo"]
[Thu Feb 26 18:42:34.700409 2026] [:error] [pid 3883:tid 3906] [client 4.204.200.32:44956] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaAjmuA33x90V6yYHag1yQAAAVQ"]
[Thu Feb 26 18:42:35.216218 2026] [:error] [pid 3883:tid 3894] [client 4.204.200.32:44999] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaAjm-A33x90V6yYHag11AAAAUg"]
[Thu Feb 26 18:42:35.859477 2026] [:error] [pid 20419:tid 20439] [client 4.204.200.32:61192] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aaAjm-3DVDvMfTYYUBUKZgAAAdE"]
[Thu Feb 26 18:44:03.876619 2026] [:error] [pid 25311:tid 25332] [client 4.204.200.32:61311] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nnyvn.php"] [unique_id "aaAj89fdM__yZAgJFSt29gAAAZI"]
[Thu Feb 26 18:44:04.975457 2026] [:error] [pid 25311:tid 25318] [client 4.204.200.32:61199] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nnyvn.php"] [unique_id "aaAj9NfdM__yZAgJFSt2_wAAAYQ"]
[Thu Feb 26 18:44:05.825860 2026] [:error] [pid 20419:tid 20430] [client 4.204.200.32:45028] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nnyvn.php"] [unique_id "aaAj9e3DVDvMfTYYUBUMqQAAAcg"]
[Thu Feb 26 18:44:06.379656 2026] [:error] [pid 25311:tid 25336] [client 4.204.200.32:61238] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aaAj9tfdM__yZAgJFSt3DwAAAZY"]
[Thu Feb 26 18:44:06.952401 2026] [:error] [pid 55051:tid 55068] [client 4.204.200.32:61277] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aaAj9gmK1w2kZvh5eLFS3AAAAI4"]
[Thu Feb 26 18:44:07.622106 2026] [:error] [pid 55051:tid 55073] [client 4.204.200.32:61225] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aaAj9wmK1w2kZvh5eLFS3wAAAJM"]
[Thu Feb 26 18:44:08.141325 2026] [:error] [pid 20419:tid 20434] [client 4.204.200.32:61243] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aaAj-O3DVDvMfTYYUBUMxQAAAcw"]
[Thu Feb 26 18:44:08.940084 2026] [:error] [pid 25311:tid 25324] [client 4.204.200.32:45031] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aaAj-NfdM__yZAgJFSt3KwAAAYo"]
[Thu Feb 26 18:44:09.808078 2026] [:error] [pid 20419:tid 20436] [client 4.204.200.32:61296] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aaAj-e3DVDvMfTYYUBUMzwAAAc4"]
[Thu Feb 26 18:44:10.459896 2026] [:error] [pid 54991:tid 55042] [client 4.204.200.32:61184] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aaAj-t4Zx-mJ8gbRB2i9_wAAAFY"]
[Thu Feb 26 18:44:10.985509 2026] [:error] [pid 25311:tid 25318] [client 4.204.200.32:61196] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lul.php"] [unique_id "aaAj-tfdM__yZAgJFSt3QgAAAYQ"]
[Thu Feb 26 18:44:11.579523 2026] [:error] [pid 25311:tid 25315] [client 4.204.200.32:61270] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaAj-9fdM__yZAgJFSt3SAAAAYE"]
[Thu Feb 26 18:44:12.403292 2026] [:error] [pid 3883:tid 3900] [client 4.204.200.32:61248] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaAj_OA33x90V6yYHag6vQAAAU4"]
[Thu Feb 26 18:44:12.859110 2026] [:error] [pid 3883:tid 3895] [client 4.204.200.32:61208] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaAj_OA33x90V6yYHag6yAAAAUk"]
[Thu Feb 26 18:44:13.496300 2026] [:error] [pid 3883:tid 3897] [client 4.204.200.32:61214] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaAj_eA33x90V6yYHag61AAAAUs"]
[Thu Feb 26 18:44:14.320433 2026] [:error] [pid 55618:tid 55634] [client 4.204.200.32:44936] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaAj_h61Vrh12f_8oWTPewAAAQ0"]
[Thu Feb 26 18:44:15.011430 2026] [:error] [pid 25311:tid 25315] [client 4.204.200.32:44995] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaAj_9fdM__yZAgJFSt3XwAAAYE"]
[Thu Feb 26 18:44:15.771490 2026] [:error] [pid 55051:tid 55070] [client 4.204.200.32:61201] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaAj_wmK1w2kZvh5eLFTIQAAAJA"]
[Thu Feb 26 18:44:16.617659 2026] [:error] [pid 20419:tid 20428] [client 4.204.200.32:45030] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaAkAO3DVDvMfTYYUBUM5wAAAcY"]
[Thu Feb 26 18:44:17.369871 2026] [:error] [pid 55051:tid 55057] [client 4.204.200.32:45021] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ya.php"] [unique_id "aaAkAQmK1w2kZvh5eLFTQwAAAIM"]
[Thu Feb 26 18:44:18.057503 2026] [:error] [pid 55618:tid 55627] [client 4.204.200.32:61185] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ya.php"] [unique_id "aaAkAh61Vrh12f_8oWTPfAAAAQY"]
[Thu Feb 26 18:44:18.681339 2026] [:error] [pid 25311:tid 25331] [client 4.204.200.32:45001] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ya.php"] [unique_id "aaAkAtfdM__yZAgJFSt3fQAAAZE"]
[Thu Feb 26 18:44:19.308972 2026] [:error] [pid 3883:tid 3906] [client 4.204.200.32:61217] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ya.php"] [unique_id "aaAkA-A33x90V6yYHag7AgAAAVQ"]
[Thu Feb 26 18:44:20.100470 2026] [:error] [pid 20419:tid 20430] [client 4.204.200.32:61256] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaAkBO3DVDvMfTYYUBUM7gAAAcg"]
[Thu Feb 26 18:44:21.080570 2026] [:error] [pid 55618:tid 55632] [client 4.204.200.32:44992] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaAkBR61Vrh12f_8oWTPiQAAAQs"]
[Thu Feb 26 18:44:21.853532 2026] [:error] [pid 55051:tid 55064] [client 4.204.200.32:61269] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaAkBQmK1w2kZvh5eLFTZQAAAIo"]
[Thu Feb 26 18:44:22.904043 2026] [:error] [pid 54991:tid 55034] [client 4.204.200.32:44947] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaAkBt4Zx-mJ8gbRB2i-DwAAAE4"]
[Thu Feb 26 18:44:23.559763 2026] [:error] [pid 55122:tid 55143] [client 4.204.200.32:61221] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaAkB4LiR0OfjFxvcN__VQAAANM"]
[Thu Feb 26 18:44:24.231030 2026] [:error] [pid 55051:tid 55069] [client 4.204.200.32:45003] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaAkCAmK1w2kZvh5eLFTeAAAAI8"]
[Thu Feb 26 18:44:24.707920 2026] [:error] [pid 20419:tid 20435] [client 4.204.200.32:44885] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaAkCO3DVDvMfTYYUBUNCwAAAc0"]
[Thu Feb 26 18:44:25.816333 2026] [:error] [pid 3883:tid 3896] [client 4.204.200.32:45035] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaAkCeA33x90V6yYHag7JQAAAUo"]
[Thu Feb 26 18:44:26.281732 2026] [:error] [pid 20419:tid 20425] [client 4.204.200.32:61301] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaAkCu3DVDvMfTYYUBUNEAAAAcM"]
[Thu Feb 26 18:44:26.837923 2026] [:error] [pid 25311:tid 25329] [client 4.204.200.32:61271] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaAkCtfdM__yZAgJFSt3wgAAAY8"]
[Thu Feb 26 18:44:27.417835 2026] [:error] [pid 20419:tid 20442] [client 4.204.200.32:45009] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaAkC-3DVDvMfTYYUBUNJwAAAdQ"]
[Thu Feb 26 18:44:27.890678 2026] [:error] [pid 20419:tid 20442] [client 4.204.200.32:61250] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaAkC-3DVDvMfTYYUBUNNwAAAdQ"]
[Thu Feb 26 18:44:28.606173 2026] [:error] [pid 3883:tid 3909] [client 4.204.200.32:61264] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaAkDOA33x90V6yYHag7NQAAAVc"]
[Thu Feb 26 18:44:29.354712 2026] [:error] [pid 25311:tid 25336] [client 4.204.200.32:61287] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaAkDdfdM__yZAgJFSt3yQAAAZY"]
[Thu Feb 26 18:44:29.948287 2026] [:error] [pid 55618:tid 55633] [client 4.204.200.32:61195] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaAkDR61Vrh12f_8oWTPpAAAAQw"]
[Thu Feb 26 18:44:30.656345 2026] [:error] [pid 3883:tid 3901] [client 4.204.200.32:45043] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaAkDuA33x90V6yYHag7SwAAAU8"]
[Thu Feb 26 18:44:31.244282 2026] [:error] [pid 55051:tid 55075] [client 4.204.200.32:61186] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaAkDwmK1w2kZvh5eLFTlwAAAJU"]
[Thu Feb 26 18:44:32.042671 2026] [:error] [pid 20419:tid 20444] [client 4.204.200.32:45013] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaAkEO3DVDvMfTYYUBUNUwAAAdY"]
[Thu Feb 26 18:44:32.483981 2026] [:error] [pid 3883:tid 3907] [client 4.204.200.32:61229] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaAkEOA33x90V6yYHag7WgAAAVU"]
[Thu Feb 26 18:44:33.097827 2026] [:error] [pid 55051:tid 55062] [client 4.204.200.32:45010] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaAkEQmK1w2kZvh5eLFTqQAAAIg"]
[Thu Feb 26 18:44:33.643950 2026] [:error] [pid 55122:tid 55141] [client 4.204.200.32:45036] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaAkEYLiR0OfjFxvcN__ZwAAANE"]
[Thu Feb 26 18:44:34.472666 2026] [:error] [pid 55122:tid 55135] [client 4.204.200.32:61215] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaAkEoLiR0OfjFxvcN__aAAAAMs"]
[Thu Feb 26 18:44:35.326103 2026] [:error] [pid 55122:tid 55143] [client 4.204.200.32:61289] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaAkE4LiR0OfjFxvcN__aQAAANM"]
[Thu Feb 26 18:44:36.073003 2026] [:error] [pid 20419:tid 20428] [client 4.204.200.32:61200] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaAkFO3DVDvMfTYYUBUNcAAAAcY"]
[Thu Feb 26 18:44:36.736210 2026] [:error] [pid 25311:tid 25321] [client 4.204.200.32:45019] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaAkFNfdM__yZAgJFSt36wAAAYc"]
[Thu Feb 26 18:44:37.252009 2026] [:error] [pid 55051:tid 55077] [client 4.204.200.32:61219] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaAkFQmK1w2kZvh5eLFTywAAAJc"]
[Thu Feb 26 18:44:37.940210 2026] [:error] [pid 55051:tid 55073] [client 4.204.200.32:61230] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaAkFQmK1w2kZvh5eLFT0wAAAJM"]
[Thu Feb 26 18:44:38.747435 2026] [:error] [pid 55051:tid 55065] [client 4.204.200.32:45014] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaAkFgmK1w2kZvh5eLFT4QAAAIs"]
[Thu Feb 26 18:44:39.591567 2026] [:error] [pid 3883:tid 3892] [client 4.204.200.32:61290] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaAkF-A33x90V6yYHag7eAAAAUY"]
[Thu Feb 26 18:44:40.636621 2026] [:error] [pid 55051:tid 55054] [client 4.204.200.32:44994] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaAkGAmK1w2kZvh5eLFT_AAAAIA"]
[Thu Feb 26 18:44:42.011459 2026] [:error] [pid 3883:tid 3895] [client 4.204.200.32:61224] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaAkGuA33x90V6yYHag7kQAAAUk"]
[Thu Feb 26 18:44:42.748445 2026] [:error] [pid 54990:tid 54994] [client 4.204.200.32:44993] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaAkGntr2qmt_mBhH2wHDQAAAAE"]
[Thu Feb 26 18:44:43.902226 2026] [:error] [pid 54991:tid 55022] [client 4.204.200.32:44969] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aaAkG94Zx-mJ8gbRB2i-VAAAAEI"]
[Thu Feb 26 18:44:44.809971 2026] [:error] [pid 54990:tid 55004] [client 4.204.200.32:44983] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aaAkHHtr2qmt_mBhH2wHDwAAAAs"]
[Thu Feb 26 18:44:45.442203 2026] [:error] [pid 3883:tid 3907] [client 4.204.200.32:45027] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aaAkHeA33x90V6yYHag7-wAAAVU"]
[Thu Feb 26 18:44:46.204159 2026] [:error] [pid 25311:tid 25318] [client 4.204.200.32:45041] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aaAkHtfdM__yZAgJFSt4IwAAAYQ"]
[Thu Feb 26 18:44:46.864479 2026] [:error] [pid 55051:tid 55077] [client 4.204.200.32:45050] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aaAkHgmK1w2kZvh5eLFUOwAAAJc"]
[Thu Feb 26 18:44:47.370483 2026] [:error] [pid 55618:tid 55623] [client 4.204.200.32:45052] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aaAkHx61Vrh12f_8oWTP8AAAAQI"]
[Thu Feb 26 18:44:47.998564 2026] [:error] [pid 55618:tid 55622] [client 4.204.200.32:61236] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aaAkHx61Vrh12f_8oWTP8gAAAQE"]
[Thu Feb 26 18:44:49.028762 2026] [:error] [pid 55051:tid 55056] [client 4.204.200.32:45018] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aaAkIQmK1w2kZvh5eLFUUAAAAII"]
[Thu Feb 26 18:44:49.867096 2026] [:error] [pid 55051:tid 55062] [client 4.204.200.32:61198] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaAkIQmK1w2kZvh5eLFUYAAAAIg"]
[Thu Feb 26 18:44:50.829656 2026] [:error] [pid 55051:tid 55054] [client 4.204.200.32:61252] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaAkIgmK1w2kZvh5eLFUfAAAAIA"]
[Thu Feb 26 18:44:52.095002 2026] [:error] [pid 55051:tid 55069] [client 4.204.200.32:44952] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaAkJAmK1w2kZvh5eLFUnQAAAI8"]
[Thu Feb 26 18:44:53.276236 2026] [:error] [pid 3883:tid 3908] [client 4.204.200.32:44954] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaAkJeA33x90V6yYHag8IwAAAVY"]
[Thu Feb 26 18:44:53.900438 2026] [:error] [pid 20419:tid 20429] [client 4.204.200.32:45023] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaAkJe3DVDvMfTYYUBUNqgAAAcc"]
[Thu Feb 26 18:44:54.807281 2026] [:error] [pid 25311:tid 25336] [client 4.204.200.32:45037] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaAkJtfdM__yZAgJFSt4WgAAAZY"]
[Thu Feb 26 18:44:55.441087 2026] [:error] [pid 25311:tid 25337] [client 4.204.200.32:44991] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaAkJ9fdM__yZAgJFSt4cQAAAZc"]
[Thu Feb 26 18:44:56.093932 2026] [:error] [pid 54991:tid 55020] [client 4.204.200.32:44946] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaAkKN4Zx-mJ8gbRB2i-bwAAAEA"]
[Thu Feb 26 18:44:56.737486 2026] [:error] [pid 3883:tid 3908] [client 4.204.200.32:44874] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aaAkKOA33x90V6yYHag8MwAAAVY"]
[Thu Feb 26 18:58:55.356757 2026] [autoindex:error] [pid 3883:tid 3901] [client 193.37.32.16:36939] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:58:55.561009 2026] [autoindex:error] [pid 3883:tid 3894] [client 193.37.32.16:36939] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:58:55.732529 2026] [autoindex:error] [pid 3883:tid 3906] [client 193.37.32.16:36939] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:58:55.901298 2026] [autoindex:error] [pid 3883:tid 3906] [client 193.37.32.16:36939] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 20:59:14.427802 2026] [:error] [pid 3883:tid 3906] [client 54.215.238.21:56067] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaBDouA33x90V6yYHajctwAAAVQ"]
[Thu Feb 26 20:59:21.569351 2026] [:error] [pid 55618:tid 55637] [client 54.215.238.21:56335] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaBDqR61Vrh12f_8oWQIBAAAARA"]
[Thu Feb 26 22:01:44.125349 2026] [:error] [pid 44444:tid 44455] [client 157.245.196.99:50048] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSSG2sMNmj-yekUk09vAAAAgU"]
[Thu Feb 26 22:28:32.780466 2026] [:error] [pid 20419:tid 20426] [client 83.229.107.129:38967] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaBYkO3DVDvMfTYYUBVp1AAAAcQ"]
[Thu Feb 26 22:28:32.830565 2026] [:error] [pid 20419:tid 20428] [client 83.229.107.129:39523] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaBYkO3DVDvMfTYYUBVp1QAAAcY"]
[Thu Feb 26 22:28:32.838152 2026] [:error] [pid 20419:tid 20444] [client 83.229.107.129:33421] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaBYkO3DVDvMfTYYUBVp1gAAAdY"]
[Thu Feb 26 22:28:32.870502 2026] [:error] [pid 3883:tid 3896] [client 83.229.107.129:46565] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaBYkOA33x90V6yYHaj3jgAAAUo"]
[Thu Feb 26 22:29:50.295342 2026] [:error] [pid 55051:tid 55063] [client 83.229.107.129:38237] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaBY3gmK1w2kZvh5eLHSZQAAAIk"]
[Thu Feb 26 23:57:41.645068 2026] [:error] [pid 44444:tid 44456] [client 2.58.56.91:64546] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aaBtdW2sMNmj-yekUk2LUgAAAgY"]
[Thu Feb 26 23:57:42.149051 2026] [:error] [pid 54991:tid 55040] [client 2.58.56.91:64831] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aaBtdt4Zx-mJ8gbRB2ggjgAAAFQ"]
[Thu Feb 26 23:57:42.654767 2026] [:error] [pid 54991:tid 55023] [client 2.58.56.91:65164] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aaBtdt4Zx-mJ8gbRB2ggkwAAAEM"]
[Thu Feb 26 23:57:44.800496 2026] [:error] [pid 55051:tid 55063] [client 2.58.56.91:49883] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aaBteAmK1w2kZvh5eLH8EQAAAIk"]
[Fri Feb 27 00:43:31.455492 2026] [:error] [pid 19020:tid 19038] [client 20.151.224.126:18431] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaB4M7N3kp7wL6QzPnUF7AAAAVA"]
[Fri Feb 27 00:46:03.022555 2026] [:error] [pid 18831:tid 18927] [client 20.151.224.126:20434] [client 20.151.224.126] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "54.215.238.21_819adb323fe6ce4a9d08353b8b257c052e42b375"): Internal error (specific information not available) [hostname "www.makifim.com.au"] [uri "/index.php"] [unique_id "aaB4x_5KHTHUIuWRG2a58gAAAE4"]
[Fri Feb 27 00:51:22.646953 2026] [proxy_fcgi:error] [pid 19020:tid 19032] [client 103.4.122.14:36230] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Feb 27 00:51:26.654820 2026] [autoindex:error] [pid 20059:tid 20125] [client 20.151.224.126:48106] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 00:52:24.769623 2026] [:error] [pid 19020:tid 19031] [client 20.151.224.126:48680] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaB6SLN3kp7wL6QzPnULBAAAAUk"]
[Fri Feb 27 00:52:43.961124 2026] [:error] [pid 18831:tid 18915] [client 20.151.224.126:31283] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaB6W_5KHTHUIuWRG2a8QAAAAEI"]
[Fri Feb 27 00:53:16.992026 2026] [:error] [pid 18843:tid 18940] [client 20.151.224.126:21506] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaB6fCuD2bhSYSowPs3t_AAAAQA"]
[Fri Feb 27 00:53:47.596656 2026] [:error] [pid 19020:tid 19028] [client 20.151.224.126:7633] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaB6m7N3kp7wL6QzPnULugAAAUY"]
[Fri Feb 27 00:54:45.032207 2026] [proxy_fcgi:error] [pid 19020:tid 19022] [client 20.151.224.126:25683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 00:56:06.467569 2026] [:error] [pid 18843:tid 18946] [client 20.151.224.126:53103] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaB7JiuD2bhSYSowPs3vIAAAAQY"]
[Fri Feb 27 00:58:31.895195 2026] [:error] [pid 18843:tid 18957] [client 20.151.224.126:48450] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaB7tyuD2bhSYSowPs3v1QAAARE"]
[Fri Feb 27 00:58:35.885548 2026] [:error] [pid 18843:tid 18962] [client 20.151.224.126:35386] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaB7uyuD2bhSYSowPs3v2gAAARY"]
[Fri Feb 27 01:07:14.467645 2026] [:error] [pid 19020:tid 19044] [client 20.151.224.126:43333] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1aa.php"] [unique_id "aaB9wrN3kp7wL6QzPnUS2QAAAVY"]
[Fri Feb 27 01:07:21.075992 2026] [:error] [pid 18831:tid 18920] [client 20.151.224.126:42915] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1aa.php"] [unique_id "aaB9yf5KHTHUIuWRG2bA4wAAAEc"]
[Fri Feb 27 01:07:26.395596 2026] [:error] [pid 20059:tid 20120] [client 20.151.224.126:30031] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1aa.php"] [unique_id "aaB9zpZBS5wIa_Nsqsjx9AAAAdI"]
[Fri Feb 27 01:07:37.304734 2026] [:error] [pid 19020:tid 19044] [client 20.151.224.126:34709] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/elp.php"] [unique_id "aaB92bN3kp7wL6QzPnUTZgAAAVY"]
[Fri Feb 27 01:07:50.655162 2026] [:error] [pid 20059:tid 20122] [client 20.151.224.126:7476] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wtz.php"] [unique_id "aaB95pZBS5wIa_NsqsjyaQAAAdQ"]
[Fri Feb 27 01:07:55.282209 2026] [:error] [pid 18818:tid 18901] [client 20.151.224.126:52957] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wtz.php"] [unique_id "aaB96xhPgqk2SeS_W826-wAAABE"]
[Fri Feb 27 01:08:00.331651 2026] [:error] [pid 20059:tid 20103] [client 20.151.224.126:7584] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wtz.php"] [unique_id "aaB98JZBS5wIa_NsqsjyggAAAcE"]
[Fri Feb 27 01:08:04.317529 2026] [:error] [pid 18843:tid 18957] [client 20.151.224.126:37865] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/galex.php"] [unique_id "aaB99CuD2bhSYSowPs30KwAAARE"]
[Fri Feb 27 01:08:08.300424 2026] [:error] [pid 18831:tid 18925] [client 20.151.224.126:20966] [client 20.151.224.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/galex.php"] [unique_id "aaB9-P5KHTHUIuWRG2bBNwAAAEw"]
[Fri Feb 27 01:09:27.011183 2026] [:error] [pid 18831:tid 18915] [client 20.151.224.126:55439] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaB-R_5KHTHUIuWRG2bBmQAAAEI"]
[Fri Feb 27 01:10:42.788705 2026] [autoindex:error] [pid 19020:tid 19028] [client 20.151.224.126:37933] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 01:11:26.753887 2026] [:error] [pid 20059:tid 20109] [client 20.151.224.126:7966] [client 20.151.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/Requests/library/upload.php"] [unique_id "aaB-vpZBS5wIa_Nsqsj1IwAAAcc"]
[Fri Feb 27 01:28:50.103253 2026] [:error] [pid 18843:tid 18954] [client 85.11.167.108:24090] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaCC0iuD2bhSYSowPs369gAAAQ4"]
[Fri Feb 27 02:35:59.770594 2026] [:error] [pid 18818:tid 18897] [client 20.78.169.245:1279] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaCSjxhPgqk2SeS_W83RRAAAAA0"]
[Fri Feb 27 02:36:00.300666 2026] [:error] [pid 18818:tid 18892] [client 20.78.169.245:1275] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaCSkBhPgqk2SeS_W83RSAAAAAg"]
[Fri Feb 27 02:36:00.812447 2026] [:error] [pid 20059:tid 20117] [client 20.78.169.245:1264] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaCSkJZBS5wIa_Nsqsg-UgAAAc8"]
[Fri Feb 27 02:36:01.389327 2026] [:error] [pid 18818:tid 18894] [client 20.78.169.245:1246] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaCSkRhPgqk2SeS_W83RTAAAAAo"]
[Fri Feb 27 05:08:48.046303 2026] [:error] [pid 42658:tid 42664] [client 20.151.11.238:17841] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaC2YIzcoYl3nRbu1jZlpgAAAgQ"]
[Fri Feb 27 05:08:49.878457 2026] [:error] [pid 42658:tid 42680] [client 20.151.11.238:17600] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaC2YYzcoYl3nRbu1jZlqQAAAhQ"]
[Fri Feb 27 05:08:52.636699 2026] [:error] [pid 5365:tid 5379] [client 20.151.11.238:5157] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaC2ZJYAa8J3tYxdG3wwfgAAAQw"]
[Fri Feb 27 05:08:55.552438 2026] [:error] [pid 42658:tid 42679] [client 20.151.11.238:18157] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaC2Z4zcoYl3nRbu1jZlsgAAAhM"]
[Fri Feb 27 05:08:58.588351 2026] [:error] [pid 42658:tid 42667] [client 20.151.11.238:23881] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaC2aozcoYl3nRbu1jZluwAAAgc"]
[Fri Feb 27 05:09:02.190607 2026] [:error] [pid 5365:tid 5383] [client 20.151.11.238:21136] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaC2bpYAa8J3tYxdG3wwmgAAARA"]
[Fri Feb 27 05:09:04.579283 2026] [:error] [pid 5365:tid 5389] [client 20.151.11.238:16676] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaC2cJYAa8J3tYxdG3wwoAAAARY"]
[Fri Feb 27 05:09:07.233105 2026] [:error] [pid 5365:tid 5379] [client 20.151.11.238:21062] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaC2c5YAa8J3tYxdG3wwpQAAAQw"]
[Fri Feb 27 05:09:09.866769 2026] [:error] [pid 5365:tid 5384] [client 20.151.11.238:6100] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaC2dZYAa8J3tYxdG3wwsgAAARE"]
[Fri Feb 27 05:09:11.470340 2026] [:error] [pid 42435:tid 42440] [client 20.151.11.238:17907] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaC2dx5hHLnaukp_y9-IaQAAAYA"]
[Fri Feb 27 05:09:13.006141 2026] [:error] [pid 42658:tid 42675] [client 20.151.11.238:4932] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaC2eYzcoYl3nRbu1jZl4QAAAg8"]
[Fri Feb 27 05:09:14.557905 2026] [:error] [pid 5365:tid 5380] [client 20.151.11.238:4956] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaC2epYAa8J3tYxdG3wwvwAAAQ0"]
[Fri Feb 27 05:09:15.928218 2026] [:error] [pid 5365:tid 5384] [client 20.151.11.238:23842] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaC2e5YAa8J3tYxdG3wwxwAAARE"]
[Fri Feb 27 05:09:17.676744 2026] [:error] [pid 42435:tid 42455] [client 20.151.11.238:9095] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaC2fR5hHLnaukp_y9-IbQAAAY8"]
[Fri Feb 27 05:09:19.179908 2026] [:error] [pid 3975:tid 4018] [client 20.151.11.238:9102] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaC2fxMVp0-T2hD76b2-fgAAAIg"]
[Fri Feb 27 05:09:22.359321 2026] [:error] [pid 42658:tid 42671] [client 20.151.11.238:12848] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaC2gozcoYl3nRbu1jZl6AAAAgs"]
[Fri Feb 27 05:09:23.757636 2026] [:error] [pid 21329:tid 21400] [client 20.151.11.238:15042] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaC2g5vQWnde-MjcQ1FcjQAAAVE"]
[Fri Feb 27 05:09:25.733192 2026] [:error] [pid 42435:tid 42448] [client 20.151.11.238:9113] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaC2hR5hHLnaukp_y9-IdgAAAYg"]
[Fri Feb 27 05:09:27.513335 2026] [:error] [pid 42435:tid 42447] [client 20.151.11.238:4441] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaC2hx5hHLnaukp_y9-IdwAAAYc"]
[Fri Feb 27 05:09:28.664819 2026] [:error] [pid 42563:tid 42590] [client 20.151.11.238:18145] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaC2iHKL5BclZy73IRHBkAAAAdQ"]
[Fri Feb 27 05:09:30.635032 2026] [:error] [pid 5365:tid 5371] [client 20.151.11.238:4228] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaC2ipYAa8J3tYxdG3ww4QAAAQQ"]
[Fri Feb 27 05:09:32.337811 2026] [:error] [pid 21329:tid 21393] [client 20.151.11.238:9111] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaC2jJvQWnde-MjcQ1FclAAAAUo"]
[Fri Feb 27 05:09:37.928098 2026] [:error] [pid 42563:tid 42572] [client 20.151.11.238:10216] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaC2kXKL5BclZy73IRHBmQAAAcQ"]
[Fri Feb 27 05:09:38.724691 2026] [:error] [pid 42658:tid 42671] [client 20.151.11.238:10227] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaC2kozcoYl3nRbu1jZl9QAAAgs"]
[Fri Feb 27 05:09:39.346483 2026] [:error] [pid 5365:tid 5372] [client 20.151.11.238:23825] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaC2k5YAa8J3tYxdG3ww-AAAAQU"]
[Fri Feb 27 05:09:41.667741 2026] [:error] [pid 42658:tid 42669] [client 20.151.11.238:4433] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaC2lYzcoYl3nRbu1jZl-AAAAgk"]
[Fri Feb 27 05:10:46.316328 2026] [:error] [pid 5365:tid 5367] [client 20.151.11.238:16677] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaC21pYAa8J3tYxdG3wxnwAAAQA"]
[Fri Feb 27 05:10:47.622314 2026] [:error] [pid 42658:tid 42667] [client 20.151.11.238:14474] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaC214zcoYl3nRbu1jZmtAAAAgc"]
[Fri Feb 27 05:10:49.907061 2026] [:error] [pid 42658:tid 42665] [client 20.151.11.238:16664] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaC22YzcoYl3nRbu1jZmvAAAAgU"]
[Fri Feb 27 05:10:51.375135 2026] [:error] [pid 4081:tid 4097] [client 20.151.11.238:16689] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaC22w55mnr35z8h7t3ihgAAAM4"]
[Fri Feb 27 05:10:53.709149 2026] [:error] [pid 42658:tid 42673] [client 20.151.11.238:17662] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaC23YzcoYl3nRbu1jZmwwAAAg0"]
[Fri Feb 27 05:10:55.628461 2026] [:error] [pid 42563:tid 42589] [client 20.151.11.238:6105] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaC233KL5BclZy73IRHB4QAAAdM"]
[Fri Feb 27 05:10:56.680960 2026] [:error] [pid 42435:tid 42446] [client 20.151.11.238:12420] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaC24B5hHLnaukp_y9-IqAAAAYY"]
[Fri Feb 27 05:10:58.214083 2026] [:error] [pid 42435:tid 42440] [client 20.151.11.238:17651] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaC24h5hHLnaukp_y9-IrgAAAYA"]
[Fri Feb 27 05:11:00.061514 2026] [:error] [pid 5365:tid 5387] [client 20.151.11.238:12427] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaC25JYAa8J3tYxdG3wxowAAARQ"]
[Fri Feb 27 05:11:01.386372 2026] [:error] [pid 5365:tid 5383] [client 20.151.11.238:7245] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaC25ZYAa8J3tYxdG3wxpAAAARA"]
[Fri Feb 27 05:11:02.336948 2026] [:error] [pid 5365:tid 5374] [client 20.151.11.238:15904] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaC25pYAa8J3tYxdG3wxpgAAAQc"]
[Fri Feb 27 05:11:03.830915 2026] [:error] [pid 5365:tid 5376] [client 20.151.11.238:9509] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaC255YAa8J3tYxdG3wxqwAAAQk"]
[Fri Feb 27 05:11:04.865554 2026] [:error] [pid 5365:tid 5367] [client 20.151.11.238:4604] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaC26JYAa8J3tYxdG3wxrgAAAQA"]
[Fri Feb 27 05:11:05.886810 2026] [:error] [pid 5365:tid 5373] [client 20.151.11.238:15883] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaC26ZYAa8J3tYxdG3wxsAAAAQY"]
[Fri Feb 27 05:11:07.443302 2026] [:error] [pid 5365:tid 5383] [client 20.151.11.238:5169] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaC265YAa8J3tYxdG3wxswAAARA"]
[Fri Feb 27 05:11:10.087705 2026] [:error] [pid 42658:tid 42672] [client 20.151.11.238:16691] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaC27ozcoYl3nRbu1jZm0QAAAgw"]
[Fri Feb 27 05:11:11.721559 2026] [:error] [pid 3973:tid 3989] [client 20.151.11.238:18769] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaC274JZsftwqmUaaLP6twAAAAY"]
[Fri Feb 27 05:11:12.992504 2026] [:error] [pid 42435:tid 42448] [client 20.151.11.238:12055] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaC28B5hHLnaukp_y9-ItQAAAYg"]
[Fri Feb 27 05:11:14.267118 2026] [:error] [pid 5365:tid 5381] [client 20.151.11.238:10208] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaC28pYAa8J3tYxdG3wxuAAAAQ4"]
[Fri Feb 27 05:11:15.285221 2026] [:error] [pid 42435:tid 42456] [client 20.151.11.238:18761] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaC28x5hHLnaukp_y9-ItgAAAZA"]
[Fri Feb 27 05:11:18.792743 2026] [:error] [pid 42658:tid 42676] [client 20.151.11.238:10926] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaC29ozcoYl3nRbu1jZm1wAAAhA"]
[Fri Feb 27 05:11:20.984985 2026] [:error] [pid 5365:tid 5377] [client 20.151.11.238:10132] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaC2-JYAa8J3tYxdG3wxvwAAAQo"]
[Fri Feb 27 05:11:25.437334 2026] [:error] [pid 42435:tid 42447] [client 20.151.11.238:6593] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaC2_R5hHLnaukp_y9-IwQAAAYc"]
[Fri Feb 27 05:11:28.597176 2026] [:error] [pid 5365:tid 5367] [client 20.151.11.238:22282] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaC3AJYAa8J3tYxdG3wx2QAAAQA"]
[Fri Feb 27 05:11:31.477689 2026] [:error] [pid 4081:tid 4100] [client 20.151.11.238:5126] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaC3Aw55mnr35z8h7t3ikwAAANE"]
[Fri Feb 27 05:11:33.139892 2026] [:error] [pid 3975:tid 4012] [client 20.151.11.238:8416] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaC3BRMVp0-T2hD76b2-jAAAAII"]
[Fri Feb 27 05:11:35.028286 2026] [:error] [pid 4081:tid 4106] [client 20.151.11.238:22178] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaC3Bw55mnr35z8h7t3ilwAAANc"]
[Fri Feb 27 05:11:38.692848 2026] [:error] [pid 5365:tid 5378] [client 20.151.11.238:8060] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaC3CpYAa8J3tYxdG3wx6AAAAQs"]
[Fri Feb 27 05:11:42.402667 2026] [:error] [pid 42658:tid 42677] [client 20.151.11.238:7724] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaC3DozcoYl3nRbu1jZm-wAAAhE"]
[Fri Feb 27 05:11:43.655637 2026] [:error] [pid 42563:tid 42577] [client 20.151.11.238:4752] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaC3D3KL5BclZy73IRHB7wAAAcg"]
[Fri Feb 27 05:12:35.052183 2026] [:error] [pid 42435:tid 42459] [client 20.151.11.238:7295] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaC3Qx5hHLnaukp_y9-JDgAAAZM"]
[Fri Feb 27 05:12:36.082778 2026] [:error] [pid 42563:tid 42570] [client 20.151.11.238:17343] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaC3RHKL5BclZy73IRHCLgAAAcI"]
[Fri Feb 27 05:12:38.028165 2026] [:error] [pid 5365:tid 5389] [client 20.151.11.238:7679] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaC3RpYAa8J3tYxdG3wyJwAAARY"]
[Fri Feb 27 05:12:39.312268 2026] [:error] [pid 3974:tid 4035] [client 20.151.11.238:20545] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaC3R3p-fQtdOYjkuFvdqQAAAEE"]
[Fri Feb 27 05:12:40.620738 2026] [:error] [pid 5365:tid 5375] [client 20.151.11.238:20548] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaC3SJYAa8J3tYxdG3wyLgAAAQg"]
[Fri Feb 27 05:12:42.900535 2026] [:error] [pid 3974:tid 4033] [client 20.151.11.238:20598] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaC3Snp-fQtdOYjkuFvdrQAAAEA"]
[Fri Feb 27 05:12:44.931648 2026] [:error] [pid 3974:tid 4045] [client 20.151.11.238:7675] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaC3THp-fQtdOYjkuFvdrwAAAEg"]
[Fri Feb 27 05:12:46.481950 2026] [:error] [pid 3973:tid 4006] [client 20.151.11.238:4344] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaC3ToJZsftwqmUaaLP68AAAABc"]
[Fri Feb 27 05:12:48.076168 2026] [:error] [pid 5365:tid 5389] [client 20.151.11.238:4846] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaC3UJYAa8J3tYxdG3wyNgAAARY"]
[Fri Feb 27 05:12:49.420941 2026] [:error] [pid 5365:tid 5371] [client 20.151.11.238:19655] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaC3UZYAa8J3tYxdG3wyOQAAAQQ"]
[Fri Feb 27 05:12:50.646114 2026] [:error] [pid 5365:tid 5370] [client 20.151.11.238:4305] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaC3UpYAa8J3tYxdG3wyPgAAAQM"]
[Fri Feb 27 05:12:51.638742 2026] [:error] [pid 4081:tid 4095] [client 20.151.11.238:17323] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaC3Uw55mnr35z8h7t3isQAAAMw"]
[Fri Feb 27 05:12:52.498722 2026] [:error] [pid 42563:tid 42585] [client 20.151.11.238:5201] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaC3VHKL5BclZy73IRHCbQAAAc8"]
[Fri Feb 27 05:12:54.749044 2026] [:error] [pid 42658:tid 42665] [client 20.151.11.238:20603] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaC3VozcoYl3nRbu1jZnUwAAAgU"]
[Fri Feb 27 05:12:56.159855 2026] [:error] [pid 5365:tid 5370] [client 20.151.11.238:20573] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaC3WJYAa8J3tYxdG3wySgAAAQM"]
[Fri Feb 27 05:12:58.310928 2026] [:error] [pid 5365:tid 5378] [client 20.151.11.238:19711] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaC3WpYAa8J3tYxdG3wyTgAAAQs"]
[Fri Feb 27 05:12:59.295919 2026] [:error] [pid 5365:tid 5389] [client 20.151.11.238:5198] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaC3W5YAa8J3tYxdG3wyUwAAARY"]
[Fri Feb 27 05:13:00.927989 2026] [:error] [pid 42563:tid 42580] [client 20.151.11.238:4292] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaC3XHKL5BclZy73IRHCfQAAAco"]
[Fri Feb 27 05:13:01.945984 2026] [:error] [pid 5365:tid 5377] [client 20.151.11.238:4492] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaC3XZYAa8J3tYxdG3wyVQAAAQo"]
[Fri Feb 27 05:13:03.769527 2026] [:error] [pid 5365:tid 5369] [client 20.151.11.238:4295] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaC3X5YAa8J3tYxdG3wyWwAAAQI"]
[Fri Feb 27 05:13:05.475616 2026] [:error] [pid 3975:tid 4015] [client 20.151.11.238:17339] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaC3YRMVp0-T2hD76b2-oAAAAIU"]
[Fri Feb 27 05:13:07.114598 2026] [:error] [pid 21329:tid 21402] [client 20.151.11.238:4332] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaC3Y5vQWnde-MjcQ1FdLAAAAVM"]
[Fri Feb 27 05:13:08.951766 2026] [:error] [pid 42563:tid 42575] [client 20.151.11.238:6283] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaC3ZHKL5BclZy73IRHChgAAAcc"]
[Fri Feb 27 05:13:10.186429 2026] [:error] [pid 4081:tid 4104] [client 20.151.11.238:5221] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaC3Zg55mnr35z8h7t3itQAAANU"]
[Fri Feb 27 05:13:11.289018 2026] [:error] [pid 42563:tid 42585] [client 20.151.11.238:5222] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaC3Z3KL5BclZy73IRHCjAAAAc8"]
[Fri Feb 27 05:13:12.523232 2026] [:error] [pid 3973:tid 3986] [client 20.151.11.238:20586] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaC3aIJZsftwqmUaaLP6-AAAAAM"]
[Fri Feb 27 05:13:13.274664 2026] [:error] [pid 3974:tid 4046] [client 20.151.11.238:5188] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaC3aXp-fQtdOYjkuFvdtAAAAEk"]
[Fri Feb 27 05:13:16.488072 2026] [:error] [pid 42658:tid 42660] [client 20.151.11.238:23800] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaC3bIzcoYl3nRbu1jZnYwAAAgA"]
[Fri Feb 27 05:13:19.596752 2026] [:error] [pid 3975:tid 4032] [client 20.151.11.238:4864] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaC3bxMVp0-T2hD76b2-pgAAAJU"]
[Fri Feb 27 05:13:20.909565 2026] [:error] [pid 42658:tid 42681] [client 20.151.11.238:17314] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaC3cIzcoYl3nRbu1jZnagAAAhU"]
[Fri Feb 27 05:13:22.696964 2026] [:error] [pid 42435:tid 42441] [client 20.151.11.238:5219] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaC3ch5hHLnaukp_y9-JGQAAAYE"]
[Fri Feb 27 05:13:25.108166 2026] [:error] [pid 42658:tid 42663] [client 20.151.11.238:4351] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaC3dYzcoYl3nRbu1jZncQAAAgM"]
[Fri Feb 27 05:13:26.809978 2026] [:error] [pid 5365:tid 5381] [client 20.151.11.238:17329] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaC3dpYAa8J3tYxdG3wyfAAAAQ4"]
[Fri Feb 27 05:13:28.189940 2026] [:error] [pid 5365:tid 5381] [client 20.151.11.238:15018] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaC3eJYAa8J3tYxdG3wyjQAAAQ4"]
[Fri Feb 27 05:13:30.034956 2026] [:error] [pid 42658:tid 42670] [client 20.151.11.238:15000] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaC3eozcoYl3nRbu1jZndQAAAgo"]
[Fri Feb 27 05:14:30.346869 2026] [:error] [pid 5365:tid 5370] [client 20.151.11.238:19705] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aaC3tpYAa8J3tYxdG3wzZAAAAQM"]
[Fri Feb 27 05:14:32.204078 2026] [:error] [pid 42563:tid 42575] [client 20.151.11.238:21169] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aaC3uHKL5BclZy73IRHDDwAAAcc"]
[Fri Feb 27 05:14:33.482733 2026] [:error] [pid 3974:tid 4033] [client 20.151.11.238:21175] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aaC3uXp-fQtdOYjkuFvdygAAAEA"]
[Fri Feb 27 05:14:34.521014 2026] [:error] [pid 42563:tid 42580] [client 20.151.11.238:5761] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aaC3unKL5BclZy73IRHDHwAAAco"]
[Fri Feb 27 05:14:35.429485 2026] [:error] [pid 42563:tid 42572] [client 20.151.11.238:5817] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaC3u3KL5BclZy73IRHDIQAAAcQ"]
[Fri Feb 27 05:14:36.656063 2026] [:error] [pid 3974:tid 4038] [client 20.151.11.238:7190] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaC3vHp-fQtdOYjkuFvdzgAAAEI"]
[Fri Feb 27 05:14:38.286750 2026] [:error] [pid 21329:tid 21404] [client 20.151.11.238:4257] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaC3vpvQWnde-MjcQ1FdjQAAAVU"]
[Fri Feb 27 05:14:39.321800 2026] [:error] [pid 42563:tid 42584] [client 20.151.11.238:4256] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaC3v3KL5BclZy73IRHDNgAAAc4"]
[Fri Feb 27 05:14:40.973194 2026] [:error] [pid 42658:tid 42675] [client 20.151.11.238:7567] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaC3wIzcoYl3nRbu1jZn8gAAAg8"]
[Fri Feb 27 05:14:42.031726 2026] [:error] [pid 21329:tid 21388] [client 20.151.11.238:6237] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaC3wpvQWnde-MjcQ1FdkgAAAUU"]
[Fri Feb 27 05:14:43.998773 2026] [:error] [pid 5365:tid 5390] [client 20.151.11.238:7585] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaC3w5YAa8J3tYxdG3wzfgAAARc"]
[Fri Feb 27 05:14:45.199353 2026] [:error] [pid 5365:tid 5374] [client 20.151.11.238:5973] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaC3xZYAa8J3tYxdG3wzhQAAAQc"]
[Fri Feb 27 05:14:46.420063 2026] [:error] [pid 5365:tid 5386] [client 20.151.11.238:17919] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aaC3xpYAa8J3tYxdG3wzjAAAARM"]
[Fri Feb 27 05:14:47.406906 2026] [:error] [pid 5365:tid 5382] [client 20.151.11.238:5986] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aaC3x5YAa8J3tYxdG3wzjQAAAQ8"]
[Fri Feb 27 05:14:48.433834 2026] [:error] [pid 42563:tid 42594] [client 20.151.11.238:17887] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aaC3yHKL5BclZy73IRHDUQAAAdg"]
[Fri Feb 27 05:14:49.540040 2026] [:error] [pid 3975:tid 4025] [client 20.151.11.238:6224] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aaC3yRMVp0-T2hD76b2-wwAAAI8"]
[Fri Feb 27 05:14:50.603399 2026] [:error] [pid 42435:tid 42441] [client 20.151.11.238:4277] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaC3yh5hHLnaukp_y9-JVgAAAYE"]
[Fri Feb 27 05:14:51.460683 2026] [:error] [pid 42435:tid 42458] [client 20.151.11.238:12926] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaC3yx5hHLnaukp_y9-JWAAAAZI"]
[Fri Feb 27 05:14:52.372547 2026] [:error] [pid 4081:tid 4096] [client 20.151.11.238:9146] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaC3zA55mnr35z8h7t3i6gAAAM0"]
[Fri Feb 27 05:14:54.887500 2026] [:error] [pid 5365:tid 5388] [client 20.151.11.238:6255] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaC3zpYAa8J3tYxdG3wzmAAAARU"]
[Fri Feb 27 05:14:56.189100 2026] [:error] [pid 42658:tid 42670] [client 20.151.11.238:20901] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaC30IzcoYl3nRbu1jZn-QAAAgo"]
[Fri Feb 27 05:14:57.690080 2026] [:error] [pid 42658:tid 42678] [client 20.151.11.238:7568] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaC30YzcoYl3nRbu1jZn-wAAAhI"]
[Fri Feb 27 05:14:59.080464 2026] [:error] [pid 42658:tid 42669] [client 20.151.11.238:12883] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaC304zcoYl3nRbu1jZn_gAAAgk"]
[Fri Feb 27 05:15:00.918728 2026] [:error] [pid 42658:tid 42662] [client 20.151.11.238:20890] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaC31IzcoYl3nRbu1jZoBQAAAgI"]
[Fri Feb 27 05:15:02.062259 2026] [:error] [pid 4081:tid 4091] [client 20.151.11.238:16281] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaC31g55mnr35z8h7t3i7gAAAMg"]
[Fri Feb 27 05:15:03.148585 2026] [:error] [pid 3973:tid 3997] [client 20.151.11.238:5730] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaC314JZsftwqmUaaLP7LAAAAA4"]
[Fri Feb 27 05:15:04.256592 2026] [:error] [pid 3974:tid 4048] [client 20.151.11.238:9200] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaC32Hp-fQtdOYjkuFvd1wAAAEs"]
[Fri Feb 27 05:15:05.039814 2026] [:error] [pid 3975:tid 4036] [client 20.151.11.238:9169] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaC32RMVp0-T2hD76b2-yQAAAJc"]
[Fri Feb 27 05:15:05.785599 2026] [:error] [pid 3974:tid 4051] [client 20.151.11.238:5721] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaC32Xp-fQtdOYjkuFvd2QAAAE4"]
[Fri Feb 27 05:15:06.446628 2026] [:error] [pid 3974:tid 4055] [client 20.151.11.238:17633] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaC32np-fQtdOYjkuFvd2wAAAFI"]
[Fri Feb 27 05:15:08.304370 2026] [:error] [pid 4081:tid 4089] [client 20.151.11.238:15495] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaC33A55mnr35z8h7t3i8QAAAMY"]
[Fri Feb 27 05:15:08.868021 2026] [:error] [pid 3975:tid 4011] [client 20.151.11.238:19123] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaC33BMVp0-T2hD76b2-zAAAAIE"]
[Fri Feb 27 05:15:10.448701 2026] [:error] [pid 4081:tid 4100] [client 20.151.11.238:6082] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaC33g55mnr35z8h7t3i8gAAANE"]
[Fri Feb 27 05:15:12.064728 2026] [:error] [pid 21329:tid 21389] [client 20.151.11.238:5022] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaC34JvQWnde-MjcQ1FdnAAAAUY"]
[Fri Feb 27 05:15:13.878242 2026] [:error] [pid 21329:tid 21403] [client 20.151.11.238:15525] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaC34ZvQWnde-MjcQ1FdnQAAAVQ"]
[Fri Feb 27 05:15:15.123024 2026] [:error] [pid 3973:tid 4004] [client 20.151.11.238:23916] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aaC344JZsftwqmUaaLP7NAAAABU"]
[Fri Feb 27 05:15:16.843021 2026] [:error] [pid 3975:tid 4016] [client 20.151.11.238:17643] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aaC35BMVp0-T2hD76b2-2QAAAIY"]
[Fri Feb 27 05:15:17.939835 2026] [:error] [pid 3975:tid 4026] [client 20.151.11.238:9516] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aaC35RMVp0-T2hD76b2-2wAAAJA"]
[Fri Feb 27 05:15:19.448348 2026] [:error] [pid 42658:tid 42671] [client 20.151.11.238:5306] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aaC354zcoYl3nRbu1jZoDwAAAgs"]
[Fri Feb 27 05:15:21.126309 2026] [:error] [pid 5365:tid 5367] [client 20.151.11.238:4568] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaC36ZYAa8J3tYxdG3wzoAAAAQA"]
[Fri Feb 27 05:15:23.213397 2026] [:error] [pid 4081:tid 4085] [client 20.151.11.238:16695] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaC36w55mnr35z8h7t3i9gAAAMI"]
[Fri Feb 27 05:15:24.640402 2026] [:error] [pid 42563:tid 42585] [client 20.151.11.238:12032] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaC37HKL5BclZy73IRHDeAAAAc8"]
[Fri Feb 27 05:15:26.113042 2026] [:error] [pid 42563:tid 42584] [client 20.151.11.238:9483] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaC37nKL5BclZy73IRHDfAAAAc4"]
[Fri Feb 27 05:15:27.697846 2026] [:error] [pid 42435:tid 42457] [client 20.151.11.238:7618] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaC37x5hHLnaukp_y9-JaAAAAZE"]
[Fri Feb 27 05:15:46.462861 2026] [proxy_fcgi:error] [pid 42435:tid 42462] [client 20.151.11.238:10155] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 05:16:20.051980 2026] [:error] [pid 42658:tid 42675] [client 20.151.11.238:21085] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaC4JIzcoYl3nRbu1jZoZwAAAg8"]
[Fri Feb 27 05:16:31.301143 2026] [autoindex:error] [pid 42435:tid 42453] [client 20.151.11.238:5921] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 05:16:36.320681 2026] [:error] [pid 3974:tid 4045] [client 20.151.11.238:6159] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaC4NHp-fQtdOYjkuFvd8AAAAEg"]
[Fri Feb 27 05:16:37.361650 2026] [:error] [pid 5365:tid 5372] [client 20.151.11.238:6199] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaC4NZYAa8J3tYxdG3w0XAAAAQU"]
[Fri Feb 27 05:16:38.865211 2026] [:error] [pid 3974:tid 4046] [client 20.151.11.238:21106] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaC4Nnp-fQtdOYjkuFvd8gAAAEk"]
[Fri Feb 27 05:16:40.144973 2026] [:error] [pid 3973:tid 4007] [client 20.151.11.238:21092] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaC4OIJZsftwqmUaaLP7RQAAABg"]
[Fri Feb 27 05:16:41.767682 2026] [:error] [pid 42658:tid 42669] [client 20.151.11.238:5891] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaC4OYzcoYl3nRbu1jZohgAAAgk"]
[Fri Feb 27 05:16:42.809826 2026] [:error] [pid 5365:tid 5384] [client 20.151.11.238:5948] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaC4OpYAa8J3tYxdG3w0ZgAAARE"]
[Fri Feb 27 05:16:44.928612 2026] [:error] [pid 42435:tid 42447] [client 20.151.11.238:12802] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaC4PB5hHLnaukp_y9-JmgAAAYc"]
[Fri Feb 27 05:16:45.917857 2026] [:error] [pid 42658:tid 42676] [client 20.151.11.238:12857] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaC4PYzcoYl3nRbu1jZojQAAAhA"]
[Fri Feb 27 05:16:47.137863 2026] [:error] [pid 3974:tid 4059] [client 20.151.11.238:21101] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaC4P3p-fQtdOYjkuFvd9QAAAFY"]
[Fri Feb 27 05:16:49.036472 2026] [:error] [pid 42658:tid 42681] [client 20.151.11.238:12822] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaC4QYzcoYl3nRbu1jZokwAAAhU"]
[Fri Feb 27 05:16:50.746654 2026] [:error] [pid 42658:tid 42677] [client 20.151.11.238:21057] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaC4QozcoYl3nRbu1jZomwAAAhE"]
[Fri Feb 27 05:16:52.816848 2026] [:error] [pid 42658:tid 42663] [client 20.151.11.238:17553] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaC4RIzcoYl3nRbu1jZopAAAAgM"]
[Fri Feb 27 05:16:54.109913 2026] [:error] [pid 21329:tid 21395] [client 20.151.11.238:9516] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaC4RpvQWnde-MjcQ1FdxgAAAUw"]
[Fri Feb 27 05:16:55.098100 2026] [:error] [pid 5365:tid 5371] [client 20.151.11.238:5931] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaC4R5YAa8J3tYxdG3w0dwAAAQQ"]
[Fri Feb 27 05:16:56.385218 2026] [:error] [pid 42658:tid 42682] [client 20.151.11.238:4813] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaC4SIzcoYl3nRbu1jZosAAAAhY"]
[Fri Feb 27 05:16:57.162476 2026] [:error] [pid 42563:tid 42590] [client 20.151.11.238:4831] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaC4SXKL5BclZy73IRHDtQAAAdQ"]
[Fri Feb 27 05:16:59.050040 2026] [:error] [pid 42435:tid 42458] [client 20.151.11.238:4806] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaC4Sx5hHLnaukp_y9-JqwAAAZI"]
[Fri Feb 27 05:16:59.965791 2026] [:error] [pid 21329:tid 21400] [client 20.151.11.238:15965] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaC4S5vQWnde-MjcQ1FdxwAAAVE"]
[Fri Feb 27 05:17:00.850154 2026] [:error] [pid 42435:tid 42445] [client 20.151.11.238:20802] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaC4TB5hHLnaukp_y9-JtQAAAYU"]
[Fri Feb 27 05:17:02.026655 2026] [:error] [pid 42435:tid 42455] [client 20.151.11.238:5326] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaC4Th5hHLnaukp_y9-JvQAAAY8"]
[Fri Feb 27 05:17:04.004863 2026] [:error] [pid 5365:tid 5382] [client 20.151.11.238:5900] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaC4UJYAa8J3tYxdG3w0fwAAAQ8"]
[Fri Feb 27 05:17:06.806606 2026] [:error] [pid 42435:tid 42447] [client 20.151.11.238:5106] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaC4Uh5hHLnaukp_y9-JyAAAAYc"]
[Fri Feb 27 05:17:07.986527 2026] [:error] [pid 5365:tid 5372] [client 20.151.11.238:5118] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaC4U5YAa8J3tYxdG3w0iwAAAQU"]
[Fri Feb 27 05:17:09.542955 2026] [:error] [pid 5365:tid 5388] [client 20.151.11.238:6173] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaC4VZYAa8J3tYxdG3w0kgAAARU"]
[Fri Feb 27 05:17:11.824465 2026] [:error] [pid 42563:tid 42572] [client 20.151.11.238:5894] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaC4V3KL5BclZy73IRHDwgAAAcQ"]
[Fri Feb 27 05:17:14.783544 2026] [:error] [pid 5365:tid 5374] [client 20.151.11.238:24718] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaC4WpYAa8J3tYxdG3w0mQAAAQc"]
[Fri Feb 27 05:17:15.540571 2026] [:error] [pid 5365:tid 5387] [client 20.151.11.238:20854] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaC4W5YAa8J3tYxdG3w0nwAAARQ"]
[Fri Feb 27 05:17:17.642773 2026] [:error] [pid 5365:tid 5381] [client 20.151.11.238:5346] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaC4XZYAa8J3tYxdG3w0oQAAAQ4"]
[Fri Feb 27 05:17:19.253528 2026] [:error] [pid 5365:tid 5372] [client 20.151.11.238:5320] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaC4X5YAa8J3tYxdG3w0pgAAAQU"]
[Fri Feb 27 05:17:22.213901 2026] [:error] [pid 21329:tid 21401] [client 20.151.11.238:23975] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaC4YpvQWnde-MjcQ1Fd3QAAAVI"]
[Fri Feb 27 05:17:23.266855 2026] [:error] [pid 5365:tid 5377] [client 20.151.11.238:12817] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaC4Y5YAa8J3tYxdG3w0rwAAAQo"]
[Fri Feb 27 05:17:24.174947 2026] [:error] [pid 5365:tid 5371] [client 20.151.11.238:23989] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaC4ZJYAa8J3tYxdG3w0swAAAQQ"]
[Fri Feb 27 05:17:26.414688 2026] [:error] [pid 5365:tid 5374] [client 20.151.11.238:15943] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaC4ZpYAa8J3tYxdG3w0uwAAAQc"]
[Fri Feb 27 05:17:28.322806 2026] [:error] [pid 5365:tid 5385] [client 20.151.11.238:4903] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaC4aJYAa8J3tYxdG3w0wQAAARI"]
[Fri Feb 27 05:17:29.087783 2026] [:error] [pid 5365:tid 5369] [client 20.151.11.238:5059] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaC4aZYAa8J3tYxdG3w0xQAAAQI"]
[Fri Feb 27 05:17:30.394501 2026] [:error] [pid 5365:tid 5376] [client 20.151.11.238:23972] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaC4apYAa8J3tYxdG3w0yQAAAQk"]
[Fri Feb 27 05:17:32.050449 2026] [:error] [pid 42435:tid 42451] [client 20.151.11.238:4817] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaC4bB5hHLnaukp_y9-JzwAAAYs"]
[Fri Feb 27 05:18:27.317047 2026] [:error] [pid 42435:tid 42445] [client 20.151.11.238:4893] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aaC4ox5hHLnaukp_y9-KHgAAAYU"]
[Fri Feb 27 05:18:28.739477 2026] [:error] [pid 42658:tid 42663] [client 20.151.11.238:20843] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aaC4pIzcoYl3nRbu1jZpNwAAAgM"]
[Fri Feb 27 05:18:30.439445 2026] [:error] [pid 42563:tid 42568] [client 20.151.11.238:6179] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aaC4pnKL5BclZy73IRHEEgAAAcA"]
[Fri Feb 27 05:18:32.154078 2026] [:error] [pid 42563:tid 42582] [client 20.151.11.238:6180] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aaC4qHKL5BclZy73IRHEFQAAAcw"]
[Fri Feb 27 05:18:34.718637 2026] [:error] [pid 4081:tid 4088] [client 20.151.11.238:5912] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aaC4qg55mnr35z8h7t3jMAAAAMU"]
[Fri Feb 27 05:18:35.587101 2026] [:error] [pid 4081:tid 4087] [client 20.151.11.238:8060] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aaC4qw55mnr35z8h7t3jMgAAAMQ"]
[Fri Feb 27 05:18:36.583854 2026] [:error] [pid 42658:tid 42667] [client 20.151.11.238:12841] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aaC4rIzcoYl3nRbu1jZpPAAAAgc"]
[Fri Feb 27 05:18:38.141887 2026] [:error] [pid 42563:tid 42585] [client 20.151.11.238:21097] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aaC4rnKL5BclZy73IRHEJgAAAc8"]
[Fri Feb 27 05:18:42.395354 2026] [:error] [pid 21329:tid 21404] [client 20.151.11.238:5321] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aaC4spvQWnde-MjcQ1Fd-gAAAVU"]
[Fri Feb 27 05:18:44.310661 2026] [:error] [pid 42435:tid 42462] [client 20.151.11.238:8061] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aaC4tB5hHLnaukp_y9-KbwAAAZY"]
[Fri Feb 27 05:18:45.886503 2026] [:error] [pid 42658:tid 42681] [client 20.151.11.238:19901] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aaC4tYzcoYl3nRbu1jZpUwAAAhU"]
[Fri Feb 27 05:18:49.683676 2026] [:error] [pid 21329:tid 21391] [client 20.151.11.238:6622] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aaC4uZvQWnde-MjcQ1FeBQAAAUg"]
[Fri Feb 27 05:18:52.238877 2026] [:error] [pid 42563:tid 42571] [client 20.151.11.238:19865] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aaC4vHKL5BclZy73IRHEMwAAAcM"]
[Fri Feb 27 05:18:53.679498 2026] [:error] [pid 42563:tid 42585] [client 20.151.11.238:11377] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aaC4vXKL5BclZy73IRHENwAAAc8"]
[Fri Feb 27 05:18:55.279611 2026] [:error] [pid 5365:tid 5380] [client 20.151.11.238:10151] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aaC4v5YAa8J3tYxdG3w1XQAAAQ0"]
[Fri Feb 27 05:18:56.596724 2026] [:error] [pid 3975:tid 4023] [client 20.151.11.238:16700] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "aaC4wBMVp0-T2hD76b2_GAAAAI0"]
[Fri Feb 27 05:18:57.598264 2026] [:error] [pid 42563:tid 42581] [client 20.151.11.238:16658] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aaC4wXKL5BclZy73IRHEQQAAAcs"]
[Fri Feb 27 05:18:59.226710 2026] [:error] [pid 3973:tid 3986] [client 20.151.11.238:12433] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aaC4w4JZsftwqmUaaLP7vgAAAAM"]
[Fri Feb 27 05:19:00.375249 2026] [:error] [pid 42563:tid 42580] [client 20.151.11.238:5272] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aaC4xHKL5BclZy73IRHETwAAAco"]
[Fri Feb 27 05:19:02.027047 2026] [:error] [pid 3974:tid 4042] [client 20.151.11.238:5027] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aaC4xnp-fQtdOYjkuFveEQAAAEU"]
[Fri Feb 27 05:19:03.605736 2026] [:error] [pid 4081:tid 4085] [client 20.151.11.238:6122] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaC4xw55mnr35z8h7t3jPAAAAMI"]
[Fri Feb 27 05:19:04.835980 2026] [:error] [pid 5365:tid 5383] [client 20.151.11.238:17860] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaC4yJYAa8J3tYxdG3w1ZgAAARA"]
[Fri Feb 27 05:19:07.101373 2026] [:error] [pid 42658:tid 42683] [client 20.151.11.238:5953] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaC4y4zcoYl3nRbu1jZpeAAAAhc"]
[Fri Feb 27 05:19:08.851244 2026] [:error] [pid 42658:tid 42675] [client 20.151.11.238:7598] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaC4zIzcoYl3nRbu1jZpggAAAg8"]
[Fri Feb 27 05:19:10.707605 2026] [:error] [pid 42563:tid 42584] [client 20.151.11.238:5460] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaC4znKL5BclZy73IRHEZAAAAc4"]
[Fri Feb 27 05:19:12.265875 2026] [:error] [pid 42435:tid 42455] [client 20.151.11.238:4359] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaC40B5hHLnaukp_y9-KzQAAAY8"]
[Fri Feb 27 05:19:14.375244 2026] [:error] [pid 42563:tid 42591] [client 20.151.11.238:21146] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaC40nKL5BclZy73IRHEagAAAdU"]
[Fri Feb 27 05:19:16.270289 2026] [:error] [pid 21329:tid 21395] [client 20.151.11.238:5491] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaC41JvQWnde-MjcQ1FeEwAAAUw"]
[Fri Feb 27 05:19:17.517995 2026] [:error] [pid 21329:tid 21402] [client 20.151.11.238:4493] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaC41ZvQWnde-MjcQ1FeFQAAAVM"]
[Fri Feb 27 05:19:18.770454 2026] [:error] [pid 42658:tid 42677] [client 20.151.11.238:5773] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaC41ozcoYl3nRbu1jZpjAAAAhE"]
[Fri Feb 27 05:19:21.628626 2026] [:error] [pid 4081:tid 4092] [client 20.151.11.238:5769] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaC42Q55mnr35z8h7t3jQAAAAMk"]
[Fri Feb 27 05:19:23.347212 2026] [:error] [pid 4081:tid 4087] [client 20.151.11.238:6352] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaC42w55mnr35z8h7t3jQQAAAMQ"]
[Fri Feb 27 05:20:28.996587 2026] [:error] [pid 5365:tid 5380] [client 20.151.11.238:6210] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaC5HJYAa8J3tYxdG3w1_QAAAQ0"]
[Fri Feb 27 05:20:30.397126 2026] [:error] [pid 42435:tid 42461] [client 20.151.11.238:5724] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaC5Hh5hHLnaukp_y9-LMgAAAZU"]
[Fri Feb 27 05:20:32.665091 2026] [:error] [pid 5365:tid 5375] [client 20.151.11.238:18429] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaC5IJYAa8J3tYxdG3w2AwAAAQg"]
[Fri Feb 27 05:20:35.834070 2026] [:error] [pid 42563:tid 42590] [client 20.151.11.238:20907] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaC5I3KL5BclZy73IRHEvAAAAdQ"]
[Fri Feb 27 05:20:38.020163 2026] [:error] [pid 42435:tid 42461] [client 20.151.11.238:15505] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaC5Jh5hHLnaukp_y9-LQQAAAZU"]
[Fri Feb 27 05:20:39.902149 2026] [:error] [pid 21329:tid 21396] [client 20.151.11.238:20916] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaC5J5vQWnde-MjcQ1FeXAAAAU0"]
[Fri Feb 27 05:20:40.804182 2026] [:error] [pid 42435:tid 42442] [client 20.151.11.238:7224] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaC5KB5hHLnaukp_y9-LSQAAAYI"]
[Fri Feb 27 05:20:42.116907 2026] [:error] [pid 42435:tid 42458] [client 20.151.11.238:7217] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaC5Kh5hHLnaukp_y9-LTQAAAZI"]
[Fri Feb 27 05:20:43.505946 2026] [:error] [pid 42658:tid 42678] [client 20.151.11.238:6268] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaC5K4zcoYl3nRbu1jZp2wAAAhI"]
[Fri Feb 27 05:20:44.775907 2026] [:error] [pid 42658:tid 42661] [client 20.151.11.238:20881] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaC5LIzcoYl3nRbu1jZp3gAAAgE"]
[Fri Feb 27 05:20:46.129917 2026] [:error] [pid 5365:tid 5387] [client 20.151.11.238:7215] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaC5LpYAa8J3tYxdG3w2EgAAARQ"]
[Fri Feb 27 05:20:48.738643 2026] [:error] [pid 42563:tid 42574] [client 20.151.11.238:7214] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaC5MHKL5BclZy73IRHEwQAAAcY"]
[Fri Feb 27 05:20:51.119315 2026] [:error] [pid 3974:tid 4041] [client 20.151.11.238:5718] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaC5M3p-fQtdOYjkuFveQwAAAEQ"]
[Fri Feb 27 05:20:52.133076 2026] [:error] [pid 42563:tid 42589] [client 20.151.11.238:7187] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaC5NHKL5BclZy73IRHExgAAAdM"]
[Fri Feb 27 05:20:53.377223 2026] [:error] [pid 42563:tid 42594] [client 20.151.11.238:24653] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaC5NXKL5BclZy73IRHEyQAAAdg"]
[Fri Feb 27 05:20:54.411711 2026] [:error] [pid 21329:tid 21400] [client 20.151.11.238:23925] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaC5NpvQWnde-MjcQ1FeYwAAAVE"]
[Fri Feb 27 05:20:56.023222 2026] [:error] [pid 21329:tid 21397] [client 20.151.11.238:6264] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aaC5OJvQWnde-MjcQ1FeZAAAAU4"]
[Fri Feb 27 05:20:57.077524 2026] [:error] [pid 42658:tid 42661] [client 20.151.11.238:24671] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aaC5OYzcoYl3nRbu1jZp7QAAAgE"]
[Fri Feb 27 05:20:58.057970 2026] [:error] [pid 3974:tid 4050] [client 20.151.11.238:18788] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aaC5Onp-fQtdOYjkuFveSAAAAE0"]
[Fri Feb 27 05:20:59.394811 2026] [:error] [pid 42658:tid 42664] [client 20.151.11.238:19076] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aaC5O4zcoYl3nRbu1jZp8QAAAgQ"]
[Fri Feb 27 05:21:01.210161 2026] [:error] [pid 5365:tid 5377] [client 20.151.11.238:15525] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aaC5PZYAa8J3tYxdG3w2LgAAAQo"]
[Fri Feb 27 05:21:02.540714 2026] [:error] [pid 42435:tid 42445] [client 20.151.11.238:7219] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aaC5Ph5hHLnaukp_y9-LYwAAAYU"]
[Fri Feb 27 05:21:03.287868 2026] [:error] [pid 4081:tid 4093] [client 20.151.11.238:19107] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aaC5Pw55mnr35z8h7t3jhwAAAMo"]
[Fri Feb 27 05:21:04.780935 2026] [:error] [pid 42435:tid 42458] [client 20.151.11.238:7209] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aaC5QB5hHLnaukp_y9-LbQAAAZI"]
[Fri Feb 27 05:21:05.875471 2026] [:error] [pid 3973:tid 3997] [client 20.151.11.238:12901] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aaC5QYJZsftwqmUaaLP8BwAAAA4"]
[Fri Feb 27 05:21:07.597924 2026] [:error] [pid 4081:tid 4106] [client 20.151.11.238:15518] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aaC5Qw55mnr35z8h7t3jkgAAANc"]
[Fri Feb 27 05:21:09.600627 2026] [:error] [pid 21329:tid 21397] [client 20.151.11.238:24649] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aaC5RZvQWnde-MjcQ1FedwAAAU4"]
[Fri Feb 27 05:21:10.526896 2026] [:error] [pid 42658:tid 42663] [client 20.151.11.238:15522] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aaC5RozcoYl3nRbu1jZp_AAAAgM"]
[Fri Feb 27 05:21:11.910446 2026] [:error] [pid 42435:tid 42440] [client 20.151.11.238:24663] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aaC5Rx5hHLnaukp_y9-LcQAAAYA"]
[Fri Feb 27 05:21:12.577636 2026] [:error] [pid 42658:tid 42678] [client 20.151.11.238:12924] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aaC5SIzcoYl3nRbu1jZqCQAAAhI"]
[Fri Feb 27 05:21:13.662055 2026] [:error] [pid 3974:tid 4053] [client 20.151.11.238:24691] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aaC5SXp-fQtdOYjkuFveUgAAAFA"]
[Fri Feb 27 05:21:14.357160 2026] [:error] [pid 3974:tid 4043] [client 20.151.11.238:18775] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aaC5Snp-fQtdOYjkuFveVAAAAEY"]
[Fri Feb 27 05:21:15.535822 2026] [:error] [pid 3975:tid 4011] [client 20.151.11.238:15532] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aaC5SxMVp0-T2hD76b2_VQAAAIE"]
[Fri Feb 27 05:21:16.234827 2026] [:error] [pid 21329:tid 21405] [client 20.151.11.238:23889] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aaC5TJvQWnde-MjcQ1FefwAAAVY"]
[Fri Feb 27 05:21:16.808029 2026] [:error] [pid 42563:tid 42585] [client 20.151.11.238:18773] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aaC5THKL5BclZy73IRHE3AAAAc8"]
[Fri Feb 27 05:21:17.912883 2026] [:error] [pid 42658:tid 42684] [client 20.151.11.238:24684] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aaC5TYzcoYl3nRbu1jZqDwAAAhg"]
[Fri Feb 27 05:21:20.097111 2026] [:error] [pid 3974:tid 4058] [client 20.151.11.238:12871] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aaC5UHp-fQtdOYjkuFveYQAAAFU"]
[Fri Feb 27 05:21:21.611458 2026] [:error] [pid 42563:tid 42582] [client 20.151.11.238:24695] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aaC5UXKL5BclZy73IRHE7QAAAcw"]
[Fri Feb 27 05:21:22.623803 2026] [:error] [pid 5365:tid 5384] [client 20.151.11.238:12926] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aaC5UpYAa8J3tYxdG3w2UAAAARE"]
[Fri Feb 27 05:21:24.270774 2026] [:error] [pid 3975:tid 4014] [client 20.151.11.238:6835] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aaC5VBMVp0-T2hD76b2_XgAAAIQ"]
[Fri Feb 27 05:21:25.988259 2026] [:error] [pid 21329:tid 21395] [client 20.151.11.238:12866] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aaC5VZvQWnde-MjcQ1FeiQAAAUw"]
[Fri Feb 27 06:20:25.552412 2026] [:error] [pid 21329:tid 21407] [client 20.43.27.35:49012] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaDHKZvQWnde-MjcQ1FozwAAAVg"]
[Fri Feb 27 06:20:26.709467 2026] [:error] [pid 42658:tid 42667] [client 20.43.27.35:48767] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaDHKozcoYl3nRbu1jaBkwAAAgc"]
[Fri Feb 27 06:20:27.849992 2026] [:error] [pid 42435:tid 42456] [client 20.43.27.35:48743] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaDHKx5hHLnaukp_y9-YSwAAAZA"]
[Fri Feb 27 06:20:29.063480 2026] [:error] [pid 42658:tid 42668] [client 20.43.27.35:48749] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaDHLYzcoYl3nRbu1jaBlwAAAgg"]
[Fri Feb 27 07:33:45.747049 2026] [:error] [pid 42435:tid 42464] [client 20.220.232.101:8078] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaDYWR5hHLnaukp_y9-oRwAAAZg"]
[Fri Feb 27 07:33:48.086329 2026] [:error] [pid 3973:tid 4004] [client 20.220.232.101:8131] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaDYXIJZsftwqmUaaLMDxQAAABU"]
[Fri Feb 27 07:33:49.949079 2026] [:error] [pid 42658:tid 42669] [client 20.220.232.101:8128] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaDYXYzcoYl3nRbu1jaliQAAAgk"]
[Fri Feb 27 07:33:52.237944 2026] [:error] [pid 42658:tid 42663] [client 20.220.232.101:8163] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaDYYIzcoYl3nRbu1jalmQAAAgM"]
[Fri Feb 27 08:11:56.643529 2026] [:error] [pid 21329:tid 21401] [client 20.43.27.35:48692] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaDhTJvQWnde-MjcQ1F8igAAAVI"]
[Fri Feb 27 08:11:57.490654 2026] [:error] [pid 4081:tid 4099] [client 20.43.27.35:48412] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaDhTQ55mnr35z8h7t36aQAAANA"]
[Fri Feb 27 08:11:58.349602 2026] [:error] [pid 4081:tid 4107] [client 20.43.27.35:48673] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaDhTg55mnr35z8h7t36bAAAANg"]
[Fri Feb 27 08:11:59.195497 2026] [:error] [pid 42435:tid 42463] [client 20.43.27.35:48693] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaDhTx5hHLnaukp_y9-yWgAAAZc"]
[Fri Feb 27 09:39:05.552903 2026] [:error] [pid 54102:tid 54149] [client 20.48.233.148:54886] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaD1uXi74D4fiYUm_GffRwAAAIU"]
[Fri Feb 27 09:39:08.567567 2026] [proxy_fcgi:error] [pid 54102:tid 54161] [client 20.48.233.148:54896] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 09:39:25.644189 2026] [:error] [pid 54102:tid 54155] [client 20.48.233.148:54896] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaD1zXi74D4fiYUm_GffZAAAAIs"]
[Fri Feb 27 09:39:33.450668 2026] [:error] [pid 62998:tid 63011] [client 20.48.233.148:12996] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aaD11VQeueXZDUmoLonnjwAAAQk"]
[Fri Feb 27 09:39:45.799855 2026] [:error] [pid 54101:tid 54131] [client 20.48.233.148:59243] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD14VY5qgRktcYTGFvDbAAAAdc"]
[Fri Feb 27 09:39:48.400613 2026] [:error] [pid 62998:tid 63024] [client 20.48.233.148:59238] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD15FQeueXZDUmoLonn1QAAARY"]
[Fri Feb 27 09:39:49.709014 2026] [:error] [pid 62998:tid 63007] [client 20.48.233.148:12867] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD15VQeueXZDUmoLonn2gAAAQU"]
[Fri Feb 27 09:39:50.830738 2026] [:error] [pid 54103:tid 54175] [client 20.48.233.148:12960] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD15uvG4MPCmE0B2sD9GgAAAMQ"]
[Fri Feb 27 09:47:48.655712 2026] [:error] [pid 54101:tid 54131] [client 20.48.233.148:16513] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaD3xFY5qgRktcYTGFvFKQAAAdc"]
[Fri Feb 27 09:47:49.950061 2026] [proxy_fcgi:error] [pid 54102:tid 54152] [client 20.48.233.148:16567] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 09:48:08.451437 2026] [:error] [pid 54102:tid 54164] [client 20.48.233.148:16567] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaD32Hi74D4fiYUm_Gfh0wAAAJQ"]
[Fri Feb 27 09:48:16.739609 2026] [:error] [pid 62998:tid 63013] [client 20.48.233.148:54231] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aaD34FQeueXZDUmoLonyOAAAAQs"]
[Fri Feb 27 09:48:30.041120 2026] [:error] [pid 62998:tid 63022] [client 20.48.233.148:53524] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD37lQeueXZDUmoLonyaQAAARQ"]
[Fri Feb 27 09:48:30.926878 2026] [:error] [pid 56075:tid 56082] [client 20.48.233.148:53514] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD37sKBhrfI6KNv9Rg9LAAAAAU"]
[Fri Feb 27 09:48:33.474056 2026] [:error] [pid 56075:tid 56081] [client 20.48.233.148:53525] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD38cKBhrfI6KNv9Rg9PwAAAAQ"]
[Fri Feb 27 09:48:35.790326 2026] [:error] [pid 54103:tid 54170] [client 20.48.233.148:16822] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD38-vG4MPCmE0B2sD_vwAAAMA"]
[Fri Feb 27 13:15:14.945003 2026] [:error] [pid 54102:tid 54166] [client 143.44.165.253:4306] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaEoYni74D4fiYUm_GczqwAAAJY"]
[Fri Feb 27 13:15:19.253086 2026] [:error] [pid 62998:tid 63004] [client 143.44.165.253:4589] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaEoZ1QeueXZDUmoLonBswAAAQI"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend
[Fri Feb 27 13:15:24.218848 2026] [autoindex:error] [pid 49306:tid 49310] [client 103.4.122.14:52026] AH01276: Cannot serve directory /home/makifimc/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 14:06:11.654248 2026] [:error] [pid 52073:tid 52089] [client 121.127.34.140:19118] [client 121.127.34.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.127.34.140, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaE0U4a650YPyxXVeRYHdwAAAY0"]
[Fri Feb 27 15:26:52.063195 2026] [:error] [pid 54103:tid 54182] [client 20.78.169.245:7921] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFHPOvG4MPCmE0B2sBuBwAAAMs"]
[Fri Feb 27 15:26:52.607508 2026] [:error] [pid 62998:tid 63026] [client 20.78.169.245:14629] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFHPFQeueXZDUmoLoni9QAAARg"]
[Fri Feb 27 15:26:53.180564 2026] [:error] [pid 56075:tid 56080] [client 20.78.169.245:1602] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFHPcKBhrfI6KNv9RgXygAAAAM"]
[Fri Feb 27 15:26:53.734716 2026] [:error] [pid 52073:tid 52099] [client 20.78.169.245:2340] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFHPYa650YPyxXVeRZERAAAAZc"]
[Fri Feb 27 15:47:34.682501 2026] [:error] [pid 52073:tid 52092] [client 34.142.251.255:60510] [client 34.142.251.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.142.251.255, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaFMFoa650YPyxXVeRZWmAAAAZA"]
[Fri Feb 27 16:55:38.881152 2026] [:error] [pid 52073:tid 52080] [client 40.80.83.34:2766] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFcCoa650YPyxXVeRaCuAAAAYQ"]
[Fri Feb 27 16:55:39.459471 2026] [:error] [pid 56075:tid 56084] [client 40.80.83.34:13129] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFcC8KBhrfI6KNv9Rg0TwAAAAc"]
[Fri Feb 27 16:55:40.425679 2026] [:error] [pid 56075:tid 56086] [client 40.80.83.34:13148] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFcDMKBhrfI6KNv9Rg0VAAAAAk"]
[Fri Feb 27 16:55:41.021192 2026] [:error] [pid 54102:tid 54157] [client 40.80.83.34:14700] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFcDXi74D4fiYUm_GdLSAAAAI0"]
[Fri Feb 27 18:04:07.994882 2026] [:error] [pid 52073:tid 52085] [client 20.104.81.240:15542] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFsF4a650YPyxXVeRaxGQAAAYk"]
[Fri Feb 27 18:04:08.956094 2026] [:error] [pid 49306:tid 49318] [client 20.104.81.240:15545] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFsGPnSUDZue59Px9utYAAAAUo"]
[Fri Feb 27 18:04:09.938266 2026] [:error] [pid 52073:tid 52088] [client 20.104.81.240:16015] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFsGYa650YPyxXVeRaxHwAAAYw"]
[Fri Feb 27 18:04:10.904890 2026] [:error] [pid 52073:tid 52090] [client 20.104.81.240:15541] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaFsGoa650YPyxXVeRaxJAAAAY4"]
[Fri Feb 27 19:28:28.679330 2026] [:error] [pid 62998:tid 63015] [client 20.220.8.221:16578] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaF_3FQeueXZDUmoLokfpgAAAQ0"]
[Fri Feb 27 19:28:29.521035 2026] [:error] [pid 52073:tid 52080] [client 20.220.8.221:16598] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaF_3Ya650YPyxXVeRb5ogAAAYQ"]
[Fri Feb 27 19:28:30.343998 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:16591] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaF_3lQeueXZDUmoLokfqAAAARA"]
[Fri Feb 27 19:28:31.171710 2026] [:error] [pid 49306:tid 49325] [client 20.220.8.221:16603] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaF_3_nSUDZue59Px9veDwAAAVE"]
[Fri Feb 27 19:56:03.040800 2026] [:error] [pid 52073:tid 52082] [client 20.104.81.240:60899] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaGGU4a650YPyxXVeRYP5QAAAYY"]
[Fri Feb 27 19:56:03.899008 2026] [:error] [pid 54103:tid 54193] [client 20.104.81.240:60916] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaGGU-vG4MPCmE0B2sCTmgAAANY"]
[Fri Feb 27 19:56:04.731208 2026] [:error] [pid 52073:tid 52079] [client 20.104.81.240:60925] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaGGVIa650YPyxXVeRYP8gAAAYM"]
[Fri Feb 27 19:56:05.572570 2026] [:error] [pid 62998:tid 63021] [client 20.104.81.240:60554] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaGGVVQeueXZDUmoLokm8AAAARM"]
[Fri Feb 27 21:33:22.406325 2026] [autoindex:error] [pid 62998:tid 63023] [client 209.87.169.174:55433] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:22.703952 2026] [autoindex:error] [pid 62998:tid 63001] [client 209.87.169.174:55433] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:23.020647 2026] [autoindex:error] [pid 62998:tid 63005] [client 209.87.169.174:55433] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:23.264909 2026] [autoindex:error] [pid 62998:tid 63007] [client 209.87.169.174:55433] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 23:12:00.913173 2026] [:error] [pid 49306:tid 49322] [client 52.138.31.241:60289] [client 52.138.31.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaG0QPnSUDZue59Px9tsjgAAAU4"]
[Fri Feb 27 23:12:01.395931 2026] [:error] [pid 56075:tid 56098] [client 52.138.31.241:60312] [client 52.138.31.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaG0QcKBhrfI6KNv9RhdzAAAABQ"]
[Fri Feb 27 23:12:02.111185 2026] [:error] [pid 54102:tid 54153] [client 52.138.31.241:60295] [client 52.138.31.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaG0Qni74D4fiYUm_GeTHgAAAIk"]
[Fri Feb 27 23:12:02.786302 2026] [:error] [pid 62998:tid 63001] [client 52.138.31.241:58817] [client 52.138.31.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaG0QlQeueXZDUmoLomIhwAAAQA"]
[Sat Feb 28 00:32:51.121228 2026] [:error] [pid 15240:tid 15260] [client 4.205.9.11:15195] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHHMy1iKL_41Rk9A9NSxQAAABI"]
[Sat Feb 28 00:32:52.919544 2026] [:error] [pid 15098:tid 15130] [client 4.205.9.11:60261] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHHNMkFqny8dQQbmTkV1AAAAJg"]
[Sat Feb 28 00:32:58.368705 2026] [:error] [pid 15100:tid 15166] [client 4.205.9.11:32418] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHHOkOEbzcINan_ctKrYQAAAEY"]
[Sat Feb 28 00:32:59.234856 2026] [:error] [pid 15098:tid 15108] [client 4.205.9.11:56335] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHHO8kFqny8dQQbmTkV7gAAAIM"]
[Sat Feb 28 00:50:04.625483 2026] [:error] [pid 38620:tid 38643] [client 20.220.8.221:16905] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaHLPAP6I7SRqrhh7RrZggAAAVU"]
[Sat Feb 28 00:50:05.457211 2026] [:error] [pid 15240:tid 15255] [client 20.220.8.221:16935] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaHLPS1iKL_41Rk9A9NfsAAAAA0"]
[Sat Feb 28 00:50:06.279523 2026] [:error] [pid 38620:tid 38623] [client 20.220.8.221:16931] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaHLPgP6I7SRqrhh7RrZjAAAAUE"]
[Sat Feb 28 00:50:07.108967 2026] [:error] [pid 38586:tid 38596] [client 20.220.8.221:16954] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaHLP7_i6nvKNhjFW7UlrQAAAQc"]
[Sat Feb 28 01:08:55.874858 2026] [:error] [pid 15240:tid 15266] [client 146.190.160.27:61836] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHPpy1iKL_41Rk9A9NqGwAAABg"]
[Sat Feb 28 01:09:08.341303 2026] [:error] [pid 15240:tid 15247] [client 146.190.160.27:61836] [client 146.190.160.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaHPtC1iKL_41Rk9A9NqQAAAAAU"]
[Sat Feb 28 01:09:11.284890 2026] [:error] [pid 15240:tid 15263] [client 146.190.160.27:61836] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHPty1iKL_41Rk9A9NqTAAAABU"]
[Sat Feb 28 01:09:11.289934 2026] [:error] [pid 15240:tid 15263] [client 146.190.160.27:61836] [client 146.190.160.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 146.190.160.27 (0+1 hits since last alert)|makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHPty1iKL_41Rk9A9NqTAAAABU"]
[Sat Feb 28 04:24:32.160191 2026] [:error] [pid 39292:tid 39303] [client 20.78.169.245:1446] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaH9gKIAO5fN7BxyqcHwigAAAMk"]
[Sat Feb 28 04:24:32.698309 2026] [:error] [pid 39185:tid 39248] [client 20.78.169.245:1416] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaH9gBVE-FfM89u7BQYTMQAAAII"]
[Sat Feb 28 04:24:33.179100 2026] [:error] [pid 39292:tid 39311] [client 20.78.169.245:6133] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaH9gaIAO5fN7BxyqcHwngAAANE"]
[Sat Feb 28 04:24:33.664988 2026] [:error] [pid 39185:tid 39263] [client 20.78.169.245:1489] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaH9gRVE-FfM89u7BQYTMwAAAJE"]
[Sat Feb 28 09:48:05.029548 2026] [:error] [pid 22194:tid 22199] [client 20.220.232.101:13446] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/m.php"] [unique_id "aaJJVX6mbajs3bzQGysEIQAAAUM"]
[Sat Feb 28 09:48:05.908431 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.101:13380] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/m.php"] [unique_id "aaJJVRVE-FfM89u7BQYB-AAAAJI"]
[Sat Feb 28 09:48:06.847196 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.101:13464] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/m.php"] [unique_id "aaJJVmuX5e1Q32gqxH2qqQAAAQo"]
[Sat Feb 28 09:48:07.771985 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:13495] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/m.php"] [unique_id "aaJJV2uX5e1Q32gqxH2qrgAAAQU"]
[Sat Feb 28 09:48:07.986984 2026] [:error] [pid 39185:tid 39256] [client 20.220.232.101:13384] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aaJJVxVE-FfM89u7BQYCAgAAAIo"]
[Sat Feb 28 09:48:08.509545 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.101:13385] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aaJJWLLWOogAgHGh62Ru2gAAAZY"]
[Sat Feb 28 09:48:08.939718 2026] [:error] [pid 52460:tid 52483] [client 20.220.232.101:13446] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aaJJWLLWOogAgHGh62Ru3wAAAZQ"]
[Sat Feb 28 09:48:09.421121 2026] [:error] [pid 11791:tid 11814] [client 20.220.232.101:13396] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aaJJWWuX5e1Q32gqxH2qsAAAARU"]
[Sat Feb 28 09:48:09.853313 2026] [:error] [pid 39184:tid 39240] [client 20.220.232.101:13389] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aaJJWVtZF9Zd_U7easCtKwAAAFU"]
[Sat Feb 28 09:48:10.475534 2026] [:error] [pid 39184:tid 39229] [client 20.220.232.101:13491] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aaJJWltZF9Zd_U7easCtLAAAAEo"]
[Sat Feb 28 09:48:10.997540 2026] [:error] [pid 39184:tid 39236] [client 20.220.232.101:13395] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aaJJWltZF9Zd_U7easCtLgAAAFE"]
[Sat Feb 28 09:48:11.495820 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.101:13453] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx1.php"] [unique_id "aaJJW7LWOogAgHGh62Ru9wAAAYY"]
[Sat Feb 28 09:48:12.092459 2026] [:error] [pid 22194:tid 22219] [client 20.220.232.101:13466] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaJJXH6mbajs3bzQGysEKwAAAVc"]
[Sat Feb 28 09:48:12.867679 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.101:13480] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaJJXLLWOogAgHGh62Ru-QAAAZI"]
[Sat Feb 28 09:48:13.356476 2026] [:error] [pid 22194:tid 22217] [client 20.220.232.101:13489] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaJJXX6mbajs3bzQGysELAAAAVU"]
[Sat Feb 28 09:48:14.003621 2026] [:error] [pid 39184:tid 39221] [client 20.220.232.101:13381] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaJJXltZF9Zd_U7easCtNQAAAEI"]
[Sat Feb 28 09:48:14.605708 2026] [:error] [pid 39292:tid 39296] [client 20.220.232.101:13388] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaJJXqIAO5fN7BxyqcGGCQAAAMI"]
[Sat Feb 28 09:48:15.103953 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.101:13465] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaJJX7LWOogAgHGh62RvCwAAAYE"]
[Sat Feb 28 09:48:15.604922 2026] [:error] [pid 52460:tid 52482] [client 20.220.232.101:13459] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaJJX7LWOogAgHGh62RvDwAAAZM"]
[Sat Feb 28 09:48:16.099679 2026] [:error] [pid 39183:tid 39198] [client 20.220.232.101:13499] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaJJYBCf4HvhVePw3LbEbAAAAAY"]
[Sat Feb 28 09:48:16.605418 2026] [:error] [pid 52460:tid 52480] [client 20.220.232.101:13379] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaJJYLLWOogAgHGh62RvEwAAAZE"]
[Sat Feb 28 09:48:17.149687 2026] [:error] [pid 39184:tid 39230] [client 20.220.232.101:13451] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaJJYVtZF9Zd_U7easCtPgAAAEs"]
[Sat Feb 28 09:48:17.587618 2026] [:error] [pid 52460:tid 52479] [client 20.220.232.101:13438] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaJJYbLWOogAgHGh62RvGgAAAZA"]
[Sat Feb 28 09:48:18.189279 2026] [:error] [pid 39184:tid 39220] [client 20.220.232.101:13492] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaJJYltZF9Zd_U7easCtRQAAAEE"]
[Sat Feb 28 09:48:18.723654 2026] [:error] [pid 39184:tid 39225] [client 20.220.232.101:13461] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaJJYltZF9Zd_U7easCtRwAAAEY"]
[Sat Feb 28 09:48:19.318099 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.101:13482] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaJJY7LWOogAgHGh62RvJAAAAY0"]
[Sat Feb 28 09:48:19.752442 2026] [:error] [pid 52460:tid 52470] [client 20.220.232.101:13380] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaJJY7LWOogAgHGh62RvKwAAAYc"]
[Sat Feb 28 09:48:20.330790 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.101:13468] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaJJZGuX5e1Q32gqxH2qvQAAAQI"]
[Sat Feb 28 09:48:20.908195 2026] [:error] [pid 39292:tid 39312] [client 20.220.232.101:13391] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaJJZKIAO5fN7BxyqcGGEAAAANI"]
[Sat Feb 28 09:48:21.418496 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.101:13474] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaJJZbLWOogAgHGh62RvOAAAAYs"]
[Sat Feb 28 09:48:21.852893 2026] [:error] [pid 39292:tid 39303] [client 20.220.232.101:13486] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaJJZaIAO5fN7BxyqcGGEwAAAMk"]
[Sat Feb 28 09:48:22.352503 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:13422] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaJJZhVE-FfM89u7BQYCJgAAAIg"]
[Sat Feb 28 09:48:23.013133 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.101:13488] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaJJZxVE-FfM89u7BQYCKwAAAIM"]
[Sat Feb 28 09:48:23.558246 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.101:13393] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaJJZxVE-FfM89u7BQYCMwAAAJQ"]
[Sat Feb 28 09:48:24.048107 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:13496] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaJJaBVE-FfM89u7BQYCNQAAAJU"]
[Sat Feb 28 09:48:24.728313 2026] [:error] [pid 39292:tid 39316] [client 20.220.232.101:13377] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaJJaKIAO5fN7BxyqcGGFQAAANY"]
[Sat Feb 28 09:48:25.157044 2026] [:error] [pid 11791:tid 11817] [client 20.220.232.101:13498] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaJJaWuX5e1Q32gqxH2qxAAAARg"]
[Sat Feb 28 09:48:25.622450 2026] [:error] [pid 52460:tid 52482] [client 20.220.232.101:13386] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaJJabLWOogAgHGh62RvSAAAAZM"]
[Sat Feb 28 09:48:26.222593 2026] [:error] [pid 39183:tid 39210] [client 20.220.232.101:13460] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaJJahCf4HvhVePw3LbEeAAAABI"]
[Sat Feb 28 09:48:26.674310 2026] [:error] [pid 39185:tid 39256] [client 20.220.232.101:13406] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaJJahVE-FfM89u7BQYCPAAAAIo"]
[Sat Feb 28 09:48:27.224314 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.101:13494] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aaJJaxVE-FfM89u7BQYCPwAAAJg"]
[Sat Feb 28 09:48:27.781721 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:14301] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aaJJaxVE-FfM89u7BQYCRQAAAIg"]
[Sat Feb 28 09:48:28.245681 2026] [:error] [pid 22194:tid 22208] [client 20.220.232.101:13435] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aaJJbH6mbajs3bzQGysEOwAAAUw"]
[Sat Feb 28 09:48:28.801155 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:13456] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aaJJbBVE-FfM89u7BQYCUAAAAI4"]
[Sat Feb 28 09:48:29.289299 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.101:13452] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aaJJbRVE-FfM89u7BQYCUwAAAJg"]
[Sat Feb 28 09:48:29.932923 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.101:13382] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aaJJbbLWOogAgHGh62RvWAAAAYg"]
[Sat Feb 28 09:48:30.500747 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:13495] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aaJJbmuX5e1Q32gqxH2q0AAAAQU"]
[Sat Feb 28 09:48:31.025361 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:13394] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aaJJbxVE-FfM89u7BQYCXgAAAI4"]
[Sat Feb 28 09:48:31.677565 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:13401] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aaJJbxVE-FfM89u7BQYCYgAAAIY"]
[Sat Feb 28 09:48:32.217116 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:14284] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aaJJcBVE-FfM89u7BQYCaAAAAJU"]
[Sat Feb 28 09:48:32.827944 2026] [:error] [pid 11791:tid 11800] [client 20.220.232.101:13483] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aaJJcGuX5e1Q32gqxH2q1wAAAQc"]
[Sat Feb 28 09:48:33.392872 2026] [:error] [pid 39185:tid 39258] [client 20.220.232.101:13470] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aaJJcRVE-FfM89u7BQYCcAAAAIw"]
[Sat Feb 28 09:48:33.904978 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.101:13450] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aaJJcaIAO5fN7BxyqcGGHgAAAMY"]
[Sat Feb 28 09:48:34.378243 2026] [:error] [pid 11791:tid 11805] [client 20.220.232.101:13402] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aaJJcmuX5e1Q32gqxH2q4wAAAQw"]
[Sat Feb 28 09:48:34.846832 2026] [:error] [pid 11791:tid 11810] [client 20.220.232.101:13392] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aaJJcmuX5e1Q32gqxH2q5AAAARE"]
[Sat Feb 28 09:48:35.421931 2026] [:error] [pid 11791:tid 11812] [client 20.220.232.101:14302] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aaJJc2uX5e1Q32gqxH2q5gAAARM"]
[Sat Feb 28 09:48:35.890111 2026] [:error] [pid 39292:tid 39312] [client 20.220.232.101:13475] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aaJJc6IAO5fN7BxyqcGGIwAAANI"]
[Sat Feb 28 09:48:36.430084 2026] [:error] [pid 52460:tid 52482] [client 20.220.232.101:13487] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aaJJdLLWOogAgHGh62RvaAAAAZM"]
[Sat Feb 28 09:48:37.037313 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.101:13421] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aaJJdWuX5e1Q32gqxH2q8AAAAQE"]
[Sat Feb 28 09:48:37.844784 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.101:13490] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aaJJdbLWOogAgHGh62RvegAAAYg"]
[Sat Feb 28 09:48:38.544367 2026] [:error] [pid 39184:tid 39232] [client 20.220.232.101:13493] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aaJJdltZF9Zd_U7easCtWQAAAE0"]
[Sat Feb 28 09:48:39.370770 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:13449] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aaJJd7LWOogAgHGh62RvigAAAYQ"]
[Sat Feb 28 09:48:40.057126 2026] [:error] [pid 52460:tid 52473] [client 20.220.232.101:13415] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aaJJeLLWOogAgHGh62RvkAAAAYo"]
[Sat Feb 28 09:48:40.730233 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:14285] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aaJJeBVE-FfM89u7BQYCmAAAAIE"]
[Sat Feb 28 09:48:41.542456 2026] [:error] [pid 52460:tid 52477] [client 20.220.232.101:13376] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaJJebLWOogAgHGh62RvmQAAAY4"]
[Sat Feb 28 09:48:42.384715 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.101:13426] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaJJehVE-FfM89u7BQYCnQAAAIs"]
[Sat Feb 28 09:48:43.053421 2026] [:error] [pid 39292:tid 39307] [client 20.220.232.101:13398] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaJJe6IAO5fN7BxyqcGGLAAAAM0"]
[Sat Feb 28 09:48:44.579522 2026] [:error] [pid 11791:tid 11793] [client 20.220.232.101:13424] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaJJfGuX5e1Q32gqxH2rCQAAAQA"]
[Sat Feb 28 09:48:45.111995 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:14293] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aaJJfRVE-FfM89u7BQYCsQAAAIY"]
[Sat Feb 28 09:48:45.630408 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.101:13497] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aaJJfWuX5e1Q32gqxH2rDQAAAQs"]
[Sat Feb 28 09:48:46.140235 2026] [:error] [pid 39185:tid 39269] [client 20.220.232.101:13443] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aaJJfhVE-FfM89u7BQYCtwAAAJc"]
[Sat Feb 28 09:48:46.751845 2026] [:error] [pid 39292:tid 39297] [client 20.220.232.101:13455] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aaJJfqIAO5fN7BxyqcGGMQAAAMM"]
[Sat Feb 28 09:48:47.318739 2026] [:error] [pid 39184:tid 39225] [client 20.220.232.101:13501] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aaJJf1tZF9Zd_U7easCtWwAAAEY"]
[Sat Feb 28 09:48:47.994675 2026] [:error] [pid 39292:tid 39304] [client 20.220.232.101:13436] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aaJJf6IAO5fN7BxyqcGGNgAAAMo"]
[Sat Feb 28 09:48:48.511180 2026] [:error] [pid 11791:tid 11814] [client 20.220.232.101:13430] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aaJJgGuX5e1Q32gqxH2rFwAAARU"]
[Sat Feb 28 09:48:48.975058 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.101:14281] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aaJJgLLWOogAgHGh62RvqwAAAZU"]
[Sat Feb 28 09:48:49.407797 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:13390] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaJJgRVE-FfM89u7BQYCxwAAAI0"]
[Sat Feb 28 09:48:49.981819 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:13485] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaJJgRVE-FfM89u7BQYCzwAAAIE"]
[Sat Feb 28 09:48:50.528195 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.101:13457] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaJJghVE-FfM89u7BQYC1AAAAII"]
[Sat Feb 28 09:48:51.005741 2026] [:error] [pid 39183:tid 39206] [client 20.220.232.101:13378] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaJJgxCf4HvhVePw3LbEgwAAAA4"]
[Sat Feb 28 09:48:51.573877 2026] [:error] [pid 39292:tid 39308] [client 20.220.232.101:14272] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaJJg6IAO5fN7BxyqcGGOQAAAM4"]
[Sat Feb 28 09:48:52.022945 2026] [:error] [pid 22194:tid 22209] [client 20.220.232.101:13467] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaJJhH6mbajs3bzQGysESQAAAU0"]
[Sat Feb 28 09:48:52.815887 2026] [:error] [pid 39184:tid 39241] [client 20.220.232.101:14309] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaJJhFtZF9Zd_U7easCtYQAAAFY"]
[Sat Feb 28 09:48:53.400878 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:13472] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaJJhVtZF9Zd_U7easCtZgAAAFQ"]
[Sat Feb 28 09:48:53.980454 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.101:13462] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaJJhWuX5e1Q32gqxH2rKwAAAQs"]
[Sat Feb 28 09:48:54.639970 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:13481] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaJJhhVE-FfM89u7BQYC6gAAAI0"]
[Sat Feb 28 09:48:55.271301 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.101:13454] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaJJhxVE-FfM89u7BQYC8AAAAJI"]
[Sat Feb 28 09:48:55.735128 2026] [:error] [pid 39292:tid 39315] [client 20.220.232.101:14320] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaJJh6IAO5fN7BxyqcGGPAAAANU"]
[Sat Feb 28 09:48:56.184599 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.101:14335] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaJJiBVE-FfM89u7BQYC-AAAAII"]
[Sat Feb 28 09:48:56.902280 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:14311] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaJJiBVE-FfM89u7BQYC-wAAAJA"]
[Sat Feb 28 09:48:57.360285 2026] [:error] [pid 52460:tid 52472] [client 20.220.232.101:13408] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaJJibLWOogAgHGh62RvtQAAAYk"]
[Sat Feb 28 09:48:57.930046 2026] [:error] [pid 39185:tid 39269] [client 20.220.232.101:14299] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaJJiRVE-FfM89u7BQYC_AAAAJc"]
[Sat Feb 28 09:48:58.786416 2026] [:error] [pid 39183:tid 39213] [client 20.220.232.101:14288] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaJJihCf4HvhVePw3LbEjAAAABU"]
[Sat Feb 28 09:48:59.364088 2026] [:error] [pid 22194:tid 22200] [client 20.220.232.101:13418] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaJJi36mbajs3bzQGysEVQAAAUQ"]
[Sat Feb 28 09:48:59.856230 2026] [:error] [pid 22194:tid 22201] [client 20.220.232.101:13476] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaJJi36mbajs3bzQGysEWQAAAUU"]
[Sat Feb 28 09:49:00.348237 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.101:14239] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaJJjGuX5e1Q32gqxH2rOwAAAQs"]
[Sat Feb 28 09:49:01.029256 2026] [:error] [pid 39184:tid 39225] [client 20.220.232.101:13403] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaJJjVtZF9Zd_U7easCtbAAAAEY"]
[Sat Feb 28 09:49:01.499328 2026] [:error] [pid 39292:tid 39303] [client 20.220.232.101:13387] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaJJjaIAO5fN7BxyqcGGQwAAAMk"]
[Sat Feb 28 09:49:02.153500 2026] [:error] [pid 39183:tid 39196] [client 20.220.232.101:13439] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaJJjhCf4HvhVePw3LbEkAAAAAQ"]
[Sat Feb 28 09:49:02.672425 2026] [:error] [pid 39184:tid 39228] [client 20.220.232.101:13500] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaJJjltZF9Zd_U7easCtcQAAAEk"]
[Sat Feb 28 09:49:03.314037 2026] [:error] [pid 22194:tid 22215] [client 20.220.232.101:14292] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJj36mbajs3bzQGysEYgAAAVM"]
[Sat Feb 28 09:49:03.984510 2026] [:error] [pid 52460:tid 52479] [client 20.220.232.101:13411] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJj7LWOogAgHGh62RvwAAAAZA"]
[Sat Feb 28 09:49:07.598293 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.101:13469] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJkxVE-FfM89u7BQYC_wAAAJI"]
[Sat Feb 28 09:49:08.636698 2026] [:error] [pid 39292:tid 39295] [client 20.220.232.101:13503] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJlKIAO5fN7BxyqcGGTgAAAME"]
[Sat Feb 28 09:49:09.578975 2026] [:error] [pid 39183:tid 39207] [client 20.220.232.101:13498] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJlRCf4HvhVePw3LbEmAAAAA8"]
[Sat Feb 28 09:49:10.558649 2026] [:error] [pid 39184:tid 39228] [client 20.220.232.101:13460] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJlltZF9Zd_U7easCtgwAAAEk"]
[Sat Feb 28 09:49:10.772344 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.101:13410] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaJJlrLWOogAgHGh62RvygAAAYw"]
[Sat Feb 28 09:49:11.326897 2026] [:error] [pid 52460:tid 52483] [client 20.220.232.101:14222] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaJJl7LWOogAgHGh62RvywAAAZQ"]
[Sat Feb 28 09:49:11.793302 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:14287] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaJJlxVE-FfM89u7BQYDCQAAAIY"]
[Sat Feb 28 09:49:12.293671 2026] [:error] [pid 11791:tid 11814] [client 20.220.232.101:13409] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaJJmGuX5e1Q32gqxH2rTAAAARU"]
[Sat Feb 28 09:49:12.710443 2026] [:error] [pid 39185:tid 39253] [client 20.220.232.101:14325] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaJJmBVE-FfM89u7BQYDEgAAAIc"]
[Sat Feb 28 09:49:13.248499 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.101:13383] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaJJmRVE-FfM89u7BQYDFgAAAJg"]
[Sat Feb 28 09:49:13.817577 2026] [:error] [pid 22194:tid 22211] [client 20.220.232.101:14308] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaJJmX6mbajs3bzQGysEcAAAAU8"]
[Sat Feb 28 09:49:14.337599 2026] [:error] [pid 22194:tid 22215] [client 20.220.232.101:14295] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "aaJJmn6mbajs3bzQGysEcgAAAVM"]
[Sat Feb 28 09:49:14.912281 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:13399] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aaJJmhVE-FfM89u7BQYDGQAAAJA"]
[Sat Feb 28 09:49:15.505956 2026] [:error] [pid 39185:tid 39251] [client 20.220.232.101:13471] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aaJJmxVE-FfM89u7BQYDHAAAAIU"]
[Sat Feb 28 09:49:15.989350 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:13428] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aaJJmxVE-FfM89u7BQYDIgAAAI0"]
[Sat Feb 28 09:49:16.514515 2026] [:error] [pid 52460:tid 52487] [client 20.220.232.101:14279] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "aaJJnLLWOogAgHGh62Rv1QAAAZg"]
[Sat Feb 28 09:49:17.161605 2026] [:error] [pid 22194:tid 22217] [client 20.220.232.101:13416] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaJJnX6mbajs3bzQGysEdQAAAVU"]
[Sat Feb 28 09:49:17.776524 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.101:14327] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaJJnbLWOogAgHGh62Rv5QAAAZU"]
[Sat Feb 28 09:49:18.249966 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.101:13431] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaJJnrLWOogAgHGh62Rv6wAAAYg"]
[Sat Feb 28 09:49:18.761149 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.101:13445] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaJJnrLWOogAgHGh62Rv7wAAAYE"]
[Sat Feb 28 09:49:19.271269 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.101:13447] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaJJn7LWOogAgHGh62Rv8wAAAYY"]
[Sat Feb 28 09:49:19.790367 2026] [:error] [pid 39184:tid 39232] [client 20.220.232.101:13432] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaJJn1tZF9Zd_U7easCtigAAAE0"]
[Sat Feb 28 09:49:20.339293 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.101:13502] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaJJoLLWOogAgHGh62Rv_AAAAZI"]
[Sat Feb 28 09:49:20.782007 2026] [:error] [pid 39292:tid 39302] [client 20.220.232.101:14289] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaJJoKIAO5fN7BxyqcGGWAAAAMg"]
[Sat Feb 28 09:49:21.252479 2026] [:error] [pid 39292:tid 39296] [client 20.220.232.101:13484] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaJJoaIAO5fN7BxyqcGGWwAAAMI"]
[Sat Feb 28 09:49:21.906097 2026] [:error] [pid 39185:tid 39251] [client 20.220.232.101:13473] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaJJoRVE-FfM89u7BQYDKgAAAIU"]
[Sat Feb 28 09:49:22.649713 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.101:14319] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaJJorLWOogAgHGh62RwBQAAAZY"]
[Sat Feb 28 09:49:23.177932 2026] [:error] [pid 39183:tid 39200] [client 20.220.232.101:13417] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaJJoxCf4HvhVePw3LbEoAAAAAg"]
[Sat Feb 28 09:49:23.590189 2026] [:error] [pid 11791:tid 11809] [client 20.220.232.101:13427] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJo2uX5e1Q32gqxH2rWAAAARA"]
[Sat Feb 28 09:49:24.169188 2026] [:error] [pid 11791:tid 11814] [client 20.220.232.101:13463] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJpGuX5e1Q32gqxH2rWgAAARU"]
[Sat Feb 28 09:49:24.701356 2026] [:error] [pid 39185:tid 39269] [client 20.220.232.101:14306] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJpBVE-FfM89u7BQYDQgAAAJc"]
[Sat Feb 28 09:49:25.223232 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.101:14317] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaJJpRVE-FfM89u7BQYDRQAAAIs"]
[Sat Feb 28 09:49:25.676184 2026] [:error] [pid 11791:tid 11810] [client 20.220.232.101:13412] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaJJpWuX5e1Q32gqxH2rXwAAARE"]
[Sat Feb 28 09:49:26.442354 2026] [:error] [pid 39184:tid 39241] [client 20.220.232.101:13433] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaJJpltZF9Zd_U7easCtjAAAAFY"]
[Sat Feb 28 09:49:27.226564 2026] [:error] [pid 39185:tid 39256] [client 20.220.232.101:14226] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaJJpxVE-FfM89u7BQYDSwAAAIo"]
[Sat Feb 28 09:49:27.706357 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:13429] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaJJpxVE-FfM89u7BQYDUAAAAIQ"]
[Sat Feb 28 09:49:28.234277 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.101:14249] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aaJJqLLWOogAgHGh62RwKQAAAZY"]
[Sat Feb 28 09:49:28.938226 2026] [:error] [pid 39185:tid 39269] [client 20.220.232.101:13458] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aaJJqBVE-FfM89u7BQYDVQAAAJc"]
[Sat Feb 28 09:49:29.542314 2026] [:error] [pid 11791:tid 11806] [client 20.220.232.101:14282] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aaJJqWuX5e1Q32gqxH2rZgAAAQ0"]
[Sat Feb 28 09:49:30.100116 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.101:13407] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aaJJqrLWOogAgHGh62RwSAAAAYw"]
[Sat Feb 28 09:49:30.636053 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.101:13423] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aaJJqrLWOogAgHGh62RwUAAAAYU"]
[Sat Feb 28 09:49:31.133609 2026] [:error] [pid 39183:tid 39216] [client 20.220.232.101:13405] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aaJJqxCf4HvhVePw3LbEqgAAABg"]
[Sat Feb 28 09:49:31.655218 2026] [:error] [pid 52460:tid 52483] [client 20.220.232.101:14291] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aaJJq7LWOogAgHGh62RwWgAAAZQ"]
[Sat Feb 28 09:49:32.131849 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.101:14280] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aaJJrLLWOogAgHGh62RwXgAAAZU"]
[Sat Feb 28 09:49:32.654405 2026] [:error] [pid 11791:tid 11814] [client 20.220.232.101:14278] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaJJrGuX5e1Q32gqxH2rbQAAARU"]
[Sat Feb 28 09:49:33.208899 2026] [:error] [pid 39185:tid 39255] [client 20.220.232.101:14283] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaJJrRVE-FfM89u7BQYDXQAAAIk"]
[Sat Feb 28 09:49:33.695379 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.101:13478] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaJJrbLWOogAgHGh62RwZgAAAZY"]
[Sat Feb 28 09:49:34.181840 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:14296] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaJJrhVE-FfM89u7BQYDZQAAAI4"]
[Sat Feb 28 09:49:34.673458 2026] [:error] [pid 11791:tid 11808] [client 20.220.232.101:14294] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaJJrmuX5e1Q32gqxH2rcQAAAQ8"]
[Sat Feb 28 09:49:35.111664 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.101:14328] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaJJr7LWOogAgHGh62RwagAAAYs"]
[Sat Feb 28 09:49:35.709083 2026] [:error] [pid 11791:tid 11802] [client 20.220.232.101:14242] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaJJr2uX5e1Q32gqxH2rdAAAAQk"]
[Sat Feb 28 09:49:36.222794 2026] [:error] [pid 39184:tid 39225] [client 20.220.232.101:14300] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaJJsFtZF9Zd_U7easCtjgAAAEY"]
[Sat Feb 28 09:49:36.742184 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.101:13503] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaJJsLLWOogAgHGh62RwcwAAAYY"]
[Sat Feb 28 09:49:37.212059 2026] [:error] [pid 39184:tid 39231] [client 20.220.232.101:14228] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaJJsVtZF9Zd_U7easCtjwAAAEw"]
[Sat Feb 28 09:49:37.915349 2026] [:error] [pid 52460:tid 52472] [client 20.220.232.101:14329] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaJJsbLWOogAgHGh62RwgQAAAYk"]
[Sat Feb 28 09:49:38.409640 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.101:13479] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaJJsrLWOogAgHGh62RwhwAAAYE"]
[Sat Feb 28 09:49:38.878644 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.101:14277] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaJJsrLWOogAgHGh62RwigAAAYU"]
[Sat Feb 28 09:49:39.386100 2026] [:error] [pid 39185:tid 39256] [client 20.220.232.101:14210] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaJJsxVE-FfM89u7BQYDbwAAAIo"]
[Sat Feb 28 09:49:39.855291 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:13414] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaJJs7LWOogAgHGh62RwkAAAAYQ"]
[Sat Feb 28 09:49:40.383326 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.101:14303] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaJJtLLWOogAgHGh62RwlAAAAYY"]
[Sat Feb 28 09:49:40.847120 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:14315] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaJJtBVE-FfM89u7BQYDdQAAAI4"]
[Sat Feb 28 09:49:41.323233 2026] [:error] [pid 11791:tid 11806] [client 20.220.232.101:14216] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaJJtWuX5e1Q32gqxH2rhQAAAQ0"]
[Sat Feb 28 09:49:41.830195 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:14213] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaJJtWuX5e1Q32gqxH2rhwAAAQU"]
[Sat Feb 28 09:49:42.351615 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.101:13425] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaJJthVE-FfM89u7BQYDfAAAAJI"]
[Sat Feb 28 09:49:42.863672 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.101:14305] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaJJthVE-FfM89u7BQYDfgAAAIs"]
[Sat Feb 28 09:49:43.397531 2026] [:error] [pid 52460:tid 52479] [client 20.220.232.101:14326] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaJJt7LWOogAgHGh62RwmwAAAZA"]
[Sat Feb 28 09:49:43.912855 2026] [:error] [pid 22194:tid 22201] [client 20.220.232.101:14316] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaJJt36mbajs3bzQGysEjwAAAUU"]
[Sat Feb 28 09:49:44.360056 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.101:14246] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaJJuBVE-FfM89u7BQYDhwAAAJg"]
[Sat Feb 28 09:49:44.815261 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.101:14298] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaJJuLLWOogAgHGh62RwoAAAAY0"]
[Sat Feb 28 09:49:45.256477 2026] [:error] [pid 52460:tid 52480] [client 20.220.232.101:13441] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaJJubLWOogAgHGh62RwogAAAZE"]
[Sat Feb 28 09:49:45.906117 2026] [:error] [pid 39292:tid 39310] [client 20.220.232.101:14236] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaJJuaIAO5fN7BxyqcGGegAAANA"]
[Sat Feb 28 09:49:46.431415 2026] [:error] [pid 11791:tid 11796] [client 20.220.232.101:14227] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaJJumuX5e1Q32gqxH2rjwAAAQM"]
[Sat Feb 28 09:49:46.983408 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:14238] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaJJultZF9Zd_U7easCtkgAAAFQ"]
[Sat Feb 28 09:49:47.542630 2026] [:error] [pid 39292:tid 39311] [client 20.220.232.101:14290] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaJJu6IAO5fN7BxyqcGGfQAAANE"]
[Sat Feb 28 09:49:48.040043 2026] [:error] [pid 11791:tid 11807] [client 20.220.232.101:14234] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaJJvGuX5e1Q32gqxH2rkQAAAQ4"]
[Sat Feb 28 09:49:48.838697 2026] [:error] [pid 39184:tid 39243] [client 20.220.232.101:14322] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaJJvFtZF9Zd_U7easCtlQAAAFg"]
[Sat Feb 28 09:49:49.375675 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.101:13413] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaJJvbLWOogAgHGh62RwqQAAAZU"]
[Sat Feb 28 09:49:49.955421 2026] [:error] [pid 39292:tid 39313] [client 20.220.232.101:14167] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaJJvaIAO5fN7BxyqcGGgQAAANM"]
[Sat Feb 28 09:49:50.503708 2026] [:error] [pid 39183:tid 39213] [client 20.220.232.101:14330] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaJJvhCf4HvhVePw3LbEtgAAABU"]
[Sat Feb 28 09:49:51.025706 2026] [:error] [pid 52460:tid 52487] [client 20.220.232.101:14215] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaJJv7LWOogAgHGh62RwrAAAAZg"]
[Sat Feb 28 09:49:51.717016 2026] [:error] [pid 39292:tid 39299] [client 20.220.232.101:13477] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaJJv6IAO5fN7BxyqcGGigAAAMU"]
[Sat Feb 28 09:49:52.280203 2026] [:error] [pid 39183:tid 39214] [client 20.220.232.101:14157] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaJJwBCf4HvhVePw3LbEugAAABY"]
[Sat Feb 28 09:49:52.898573 2026] [:error] [pid 39183:tid 39202] [client 20.220.232.101:13404] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaJJwBCf4HvhVePw3LbEvwAAAAo"]
[Sat Feb 28 09:49:53.322946 2026] [:error] [pid 39292:tid 39311] [client 20.220.232.101:14254] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaJJwaIAO5fN7BxyqcGGkwAAANE"]
[Sat Feb 28 09:49:53.748178 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.101:13464] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaJJwRVE-FfM89u7BQYDkgAAAJM"]
[Sat Feb 28 09:49:54.192926 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:14221] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaJJwhVE-FfM89u7BQYDlAAAAJU"]
[Sat Feb 28 09:49:54.653874 2026] [:error] [pid 39185:tid 39256] [client 20.220.232.101:14253] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaJJwhVE-FfM89u7BQYDlgAAAIo"]
[Sat Feb 28 09:49:55.319620 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.101:14240] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaJJw7LWOogAgHGh62RwsQAAAZc"]
[Sat Feb 28 09:49:55.853587 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:13434] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaJJwxVE-FfM89u7BQYDngAAAIE"]
[Sat Feb 28 09:49:56.373918 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.101:14321] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaJJxLLWOogAgHGh62RwtAAAAYY"]
[Sat Feb 28 09:49:56.803960 2026] [:error] [pid 52460:tid 52483] [client 20.220.232.101:14286] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaJJxLLWOogAgHGh62RwuAAAAZQ"]
[Sat Feb 28 09:49:57.235107 2026] [:error] [pid 39292:tid 39302] [client 20.220.232.101:14245] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaJJxaIAO5fN7BxyqcGGmAAAAMg"]
[Sat Feb 28 09:49:57.795502 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.101:14169] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaJJxbLWOogAgHGh62RwwwAAAZI"]
[Sat Feb 28 09:49:58.297782 2026] [:error] [pid 52460:tid 52465] [client 20.220.232.101:13420] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaJJxrLWOogAgHGh62RwxQAAAYI"]
[Sat Feb 28 09:49:58.829362 2026] [:error] [pid 52460:tid 52470] [client 20.220.232.101:14161] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaJJxrLWOogAgHGh62RwyQAAAYc"]
[Sat Feb 28 09:49:59.506940 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.101:14201] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaJJx7LWOogAgHGh62RwzQAAAYU"]
[Sat Feb 28 09:50:00.024461 2026] [:error] [pid 39292:tid 39299] [client 20.220.232.101:14274] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaJJyKIAO5fN7BxyqcGGngAAAMU"]
[Sat Feb 28 09:50:00.587922 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.101:14263] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaJJyGuX5e1Q32gqxH2rqAAAAQI"]
[Sat Feb 28 09:50:01.075891 2026] [:error] [pid 39292:tid 39317] [client 20.220.232.101:14147] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaJJyaIAO5fN7BxyqcGGogAAANc"]
[Sat Feb 28 09:50:01.525666 2026] [:error] [pid 39292:tid 39305] [client 20.220.232.101:14219] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaJJyaIAO5fN7BxyqcGGpgAAAMs"]
[Sat Feb 28 09:50:02.074649 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.101:13397] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaJJyhVE-FfM89u7BQYDrgAAAJQ"]
[Sat Feb 28 09:50:02.880637 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:14273] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaJJyhVE-FfM89u7BQYDtQAAAJA"]
[Sat Feb 28 09:50:03.322825 2026] [:error] [pid 39184:tid 39219] [client 20.220.232.101:14304] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaJJy1tZF9Zd_U7easCtnQAAAEA"]
[Sat Feb 28 09:50:03.836922 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.101:14332] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaJJyxVE-FfM89u7BQYDugAAAIs"]
[Sat Feb 28 09:50:04.324301 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:14312] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aaJJzBVE-FfM89u7BQYDvAAAAIQ"]
[Sat Feb 28 09:50:04.831837 2026] [:error] [pid 39292:tid 39298] [client 20.220.232.101:14314] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aaJJzKIAO5fN7BxyqcGGqQAAAMQ"]
[Sat Feb 28 09:50:05.364317 2026] [:error] [pid 39184:tid 39233] [client 20.220.232.101:14224] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aaJJzVtZF9Zd_U7easCtogAAAE4"]
[Sat Feb 28 09:50:05.907409 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:14193] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aaJJzRVE-FfM89u7BQYDwgAAAIg"]
[Sat Feb 28 09:50:06.410138 2026] [:error] [pid 39292:tid 39302] [client 20.220.232.101:14146] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaJJzqIAO5fN7BxyqcGGrwAAAMg"]
[Sat Feb 28 09:50:06.883272 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.101:13407] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaJJzmuX5e1Q32gqxH2rrwAAAQo"]
[Sat Feb 28 09:50:10.986849 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.101:13474] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aaJJ0hVE-FfM89u7BQYD2AAAAIM"]
[Sat Feb 28 09:50:11.842482 2026] [:error] [pid 39292:tid 39306] [client 20.220.232.101:13499] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aaJJ06IAO5fN7BxyqcGGuQAAAMw"]
[Sat Feb 28 09:50:12.800736 2026] [:error] [pid 39292:tid 39294] [client 20.220.232.101:13491] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aaJJ1KIAO5fN7BxyqcGGvAAAAMA"]
[Sat Feb 28 09:50:13.888067 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.101:13455] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aaJJ1RVE-FfM89u7BQYD8AAAAJI"]
[Sat Feb 28 09:50:14.098079 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.101:14229] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaJJ1rLWOogAgHGh62Rw4wAAAZY"]
[Sat Feb 28 09:50:14.646945 2026] [:error] [pid 39185:tid 39253] [client 20.220.232.101:14235] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaJJ1hVE-FfM89u7BQYD-gAAAIc"]
[Sat Feb 28 09:50:15.092204 2026] [:error] [pid 39185:tid 39255] [client 20.220.232.101:14181] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaJJ1xVE-FfM89u7BQYD_QAAAIk"]
[Sat Feb 28 09:50:15.789364 2026] [:error] [pid 39292:tid 39302] [client 20.220.232.101:14257] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaJJ16IAO5fN7BxyqcGGvgAAAMg"]
[Sat Feb 28 09:50:16.399906 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.101:14324] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaJJ2LLWOogAgHGh62Rw6QAAAYA"]
[Sat Feb 28 09:50:17.065992 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.101:14243] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaJJ2aIAO5fN7BxyqcGGwQAAAMY"]
[Sat Feb 28 09:50:17.521192 2026] [:error] [pid 11791:tid 11813] [client 20.220.232.101:14218] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaJJ2WuX5e1Q32gqxH2r0AAAARQ"]
[Sat Feb 28 09:50:18.064437 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.101:13469] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaJJ2rLWOogAgHGh62Rw7gAAAYM"]
[Sat Feb 28 09:50:18.701744 2026] [:error] [pid 39292:tid 39313] [client 20.220.232.101:14211] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaJJ2qIAO5fN7BxyqcGGwwAAANM"]
[Sat Feb 28 09:50:19.208764 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:14307] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaJJ2xVE-FfM89u7BQYECwAAAIE"]
[Sat Feb 28 09:50:19.747623 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.101:14153] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaJJ27LWOogAgHGh62Rw8QAAAYs"]
[Sat Feb 28 09:50:20.371981 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.101:14334] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaJJ3BVE-FfM89u7BQYEEAAAAIM"]
[Sat Feb 28 09:50:20.820496 2026] [:error] [pid 39185:tid 39258] [client 20.220.232.101:14231] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaJJ3BVE-FfM89u7BQYEEwAAAIw"]
[Sat Feb 28 09:50:21.269151 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:14259] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaJJ3RVE-FfM89u7BQYEFwAAAIY"]
[Sat Feb 28 09:50:21.851070 2026] [:error] [pid 11791:tid 11815] [client 20.220.232.101:14230] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaJJ3WuX5e1Q32gqxH2r2AAAARY"]
[Sat Feb 28 09:50:22.397184 2026] [:error] [pid 39292:tid 39295] [client 20.220.232.101:13400] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaJJ3qIAO5fN7BxyqcGGxwAAAME"]
[Sat Feb 28 09:50:22.921271 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:14184] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aaJJ3hVE-FfM89u7BQYEHgAAAIg"]
[Sat Feb 28 09:50:23.509387 2026] [:error] [pid 11791:tid 11808] [client 20.220.232.101:14331] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aaJJ32uX5e1Q32gqxH2r3gAAAQ8"]
[Sat Feb 28 09:50:23.963530 2026] [:error] [pid 22194:tid 22209] [client 20.220.232.101:14275] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aaJJ336mbajs3bzQGysEsAAAAU0"]
[Sat Feb 28 09:50:24.519157 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.101:13394] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "aaJJ4GuX5e1Q32gqxH2r4gAAAQE"]
[Sat Feb 28 09:50:25.021769 2026] [:error] [pid 11791:tid 11799] [client 20.220.232.101:14252] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aaJJ4WuX5e1Q32gqxH2r5QAAAQY"]
[Sat Feb 28 09:50:25.459167 2026] [:error] [pid 11791:tid 11806] [client 20.220.232.101:14244] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aaJJ4WuX5e1Q32gqxH2r5wAAAQ0"]
[Sat Feb 28 09:50:26.048796 2026] [:error] [pid 39292:tid 39311] [client 20.220.232.101:14152] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aaJJ4qIAO5fN7BxyqcGG1gAAANE"]
[Sat Feb 28 09:50:26.638950 2026] [:error] [pid 39292:tid 39297] [client 20.220.232.101:14225] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "aaJJ4qIAO5fN7BxyqcGG3gAAAMM"]
[Sat Feb 28 09:50:27.159651 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.101:14248] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaJJ47LWOogAgHGh62Rw_QAAAYA"]
[Sat Feb 28 09:50:27.654685 2026] [:error] [pid 52460:tid 52465] [client 20.220.232.101:14332] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaJJ47LWOogAgHGh62Rw_wAAAYI"]
[Sat Feb 28 09:50:28.322001 2026] [:error] [pid 39292:tid 39305] [client 20.220.232.101:14266] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaJJ5KIAO5fN7BxyqcGG8QAAAMs"]
[Sat Feb 28 09:50:28.762474 2026] [:error] [pid 39184:tid 39221] [client 20.220.232.101:14233] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaJJ5FtZF9Zd_U7easCtswAAAEI"]
[Sat Feb 28 09:50:29.205883 2026] [:error] [pid 39184:tid 39235] [client 20.220.232.101:14217] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaJJ5VtZF9Zd_U7easCttAAAAFA"]
[Sat Feb 28 09:50:29.926061 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.101:14209] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaJJ5bLWOogAgHGh62RxAwAAAYs"]
[Sat Feb 28 09:50:30.452038 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:14119] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaJJ5muX5e1Q32gqxH2r9wAAAQU"]
[Sat Feb 28 09:50:30.919302 2026] [:error] [pid 39292:tid 39318] [client 20.220.232.101:14223] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaJJ5qIAO5fN7BxyqcGHAQAAANg"]
[Sat Feb 28 09:50:31.360468 2026] [:error] [pid 39292:tid 39306] [client 20.220.232.101:14260] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aaJJ56IAO5fN7BxyqcGHBQAAAMw"]
[Sat Feb 28 09:50:31.862267 2026] [:error] [pid 39292:tid 39299] [client 20.220.232.101:14203] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aaJJ56IAO5fN7BxyqcGHCAAAAMU"]
[Sat Feb 28 09:50:32.404356 2026] [:error] [pid 39183:tid 39206] [client 20.220.232.101:14262] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aaJJ6BCf4HvhVePw3LbFFwAAAA4"]
[Sat Feb 28 09:50:32.878853 2026] [:error] [pid 39292:tid 39312] [client 20.220.232.101:13419] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "aaJJ6KIAO5fN7BxyqcGHDwAAANI"]
[Sat Feb 28 09:50:33.343042 2026] [:error] [pid 22194:tid 22219] [client 20.220.232.101:14276] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaJJ6X6mbajs3bzQGysEugAAAVc"]
[Sat Feb 28 09:50:33.826807 2026] [:error] [pid 39185:tid 39269] [client 20.220.232.101:14118] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaJJ6RVE-FfM89u7BQYELQAAAJc"]
[Sat Feb 28 09:50:34.378900 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:14160] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaJJ6hVE-FfM89u7BQYENAAAAI0"]
[Sat Feb 28 09:50:34.884674 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.101:14318] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaJJ6qIAO5fN7BxyqcGHEgAAAMY"]
[Sat Feb 28 09:50:35.432023 2026] [:error] [pid 39184:tid 39230] [client 20.220.232.101:13440] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaJJ61tZF9Zd_U7easCtugAAAEs"]
[Sat Feb 28 09:50:35.970633 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:14189] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaJJ6xVE-FfM89u7BQYEOwAAAI4"]
[Sat Feb 28 09:50:36.463611 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.101:14190] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaJJ7BVE-FfM89u7BQYERAAAAII"]
[Sat Feb 28 09:50:36.948564 2026] [:error] [pid 39292:tid 39314] [client 20.220.232.101:14250] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaJJ7KIAO5fN7BxyqcGHFwAAANQ"]
[Sat Feb 28 09:50:37.515291 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.101:14271] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaJJ7bLWOogAgHGh62RxBgAAAZc"]
[Sat Feb 28 09:50:38.146797 2026] [:error] [pid 22194:tid 22200] [client 20.220.232.101:14258] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaJJ7n6mbajs3bzQGysEuwAAAUQ"]
[Sat Feb 28 09:50:38.696523 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:14251] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaJJ7hVE-FfM89u7BQYEbgAAAIE"]
[Sat Feb 28 09:50:39.149550 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.101:14204] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaJJ7xVE-FfM89u7BQYEbwAAAII"]
[Sat Feb 28 09:50:39.632386 2026] [:error] [pid 39185:tid 39268] [client 20.220.232.101:14164] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaJJ7xVE-FfM89u7BQYEcgAAAJY"]
[Sat Feb 28 09:50:40.092519 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.101:14086] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaJJ8LLWOogAgHGh62RxCwAAAYE"]
[Sat Feb 28 09:50:40.616208 2026] [:error] [pid 52460:tid 52487] [client 20.220.232.101:14195] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaJJ8LLWOogAgHGh62RxDwAAAZg"]
[Sat Feb 28 09:50:41.141859 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:14270] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaJJ8bLWOogAgHGh62RxEAAAAYQ"]
[Sat Feb 28 09:50:41.691635 2026] [:error] [pid 22194:tid 22205] [client 20.220.232.101:14212] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaJJ8X6mbajs3bzQGysEvgAAAUk"]
[Sat Feb 28 09:50:42.211446 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.101:13437] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaJJ8rLWOogAgHGh62RxFQAAAYs"]
[Sat Feb 28 09:50:42.640674 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.101:14220] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaJJ8rLWOogAgHGh62RxGAAAAZc"]
[Sat Feb 28 09:50:43.221593 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:14149] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aaJJ81tZF9Zd_U7easCtxwAAAFQ"]
[Sat Feb 28 09:50:43.762398 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.101:14323] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aaJJ87LWOogAgHGh62RxHAAAAYA"]
[Sat Feb 28 09:50:44.384303 2026] [:error] [pid 22194:tid 22201] [client 20.220.232.101:14155] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "aaJJ9H6mbajs3bzQGysEwgAAAUU"]
[Sat Feb 28 09:50:44.823952 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:13381] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaJJ9LLWOogAgHGh62RxIAAAAYQ"]
[Sat Feb 28 09:50:45.405677 2026] [:error] [pid 22194:tid 22202] [client 20.220.232.101:14103] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaJJ9X6mbajs3bzQGysEwwAAAUY"]
[Sat Feb 28 09:50:45.876488 2026] [:error] [pid 39184:tid 39226] [client 20.220.232.101:14268] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaJJ9VtZF9Zd_U7easCtyQAAAEc"]
[Sat Feb 28 09:50:46.372447 2026] [:error] [pid 39185:tid 39268] [client 20.220.232.101:14241] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaJJ9hVE-FfM89u7BQYEiwAAAJY"]
[Sat Feb 28 09:50:47.159753 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:14313] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaJJ9xVE-FfM89u7BQYEkAAAAJE"]
[Sat Feb 28 09:50:47.612735 2026] [:error] [pid 39184:tid 39222] [client 20.220.232.101:14172] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aaJJ91tZF9Zd_U7easCtygAAAEM"]
[Sat Feb 28 09:50:48.205779 2026] [:error] [pid 39292:tid 39311] [client 20.220.232.101:14168] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aaJJ-KIAO5fN7BxyqcGHJAAAANE"]
[Sat Feb 28 09:50:48.882119 2026] [:error] [pid 39292:tid 39314] [client 20.220.232.101:14306] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "aaJJ-KIAO5fN7BxyqcGHJwAAANQ"]
[Sat Feb 28 09:50:49.648734 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:14166] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aaJJ-RVE-FfM89u7BQYEmQAAAI0"]
[Sat Feb 28 09:50:50.215481 2026] [:error] [pid 22194:tid 22197] [client 20.220.232.101:14255] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aaJJ-n6mbajs3bzQGysEywAAAUE"]
[Sat Feb 28 09:50:50.669067 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.101:14248] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aaJJ-hVE-FfM89u7BQYEnAAAAJM"]
[Sat Feb 28 09:50:51.125181 2026] [:error] [pid 39185:tid 39258] [client 20.220.232.101:14163] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "aaJJ-xVE-FfM89u7BQYEnwAAAIw"]
[Sat Feb 28 09:50:51.584512 2026] [:error] [pid 22194:tid 22211] [client 20.220.232.101:14265] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aaJJ-36mbajs3bzQGysEzQAAAU8"]
[Sat Feb 28 09:50:52.016962 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.101:14256] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aaJJ_BVE-FfM89u7BQYEpAAAAIs"]
[Sat Feb 28 09:50:52.663968 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:14178] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aaJJ_BVE-FfM89u7BQYEqgAAAI4"]
[Sat Feb 28 09:50:53.128606 2026] [:error] [pid 39292:tid 39305] [client 20.220.232.101:14264] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aaJJ_aIAO5fN7BxyqcGHNwAAAMs"]
[Sat Feb 28 09:50:53.633026 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.101:14247] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaJJ_RVE-FfM89u7BQYEsQAAAJM"]
[Sat Feb 28 09:50:54.055799 2026] [:error] [pid 39185:tid 39258] [client 20.220.232.101:14310] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaJJ_hVE-FfM89u7BQYEswAAAIw"]
[Sat Feb 28 09:50:54.545588 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:14177] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaJJ_hVE-FfM89u7BQYEuAAAAI4"]
[Sat Feb 28 09:50:55.071911 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.101:14150] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaJJ_7LWOogAgHGh62RxOQAAAZc"]
[Sat Feb 28 09:50:55.594284 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:14206] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaJJ_xVE-FfM89u7BQYEvgAAAJA"]
[Sat Feb 28 09:50:56.117855 2026] [:error] [pid 52460:tid 52483] [client 20.220.232.101:14197] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaJKALLWOogAgHGh62RxPgAAAZQ"]
[Sat Feb 28 09:50:56.838070 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.101:14156] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaJKALLWOogAgHGh62RxQQAAAZY"]
[Sat Feb 28 09:50:57.271503 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.101:14194] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaJKARVE-FfM89u7BQYEyAAAAJQ"]
[Sat Feb 28 09:50:58.233941 2026] [:error] [pid 52460:tid 52479] [client 20.220.232.101:13444] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aaJKArLWOogAgHGh62RxRwAAAZA"]
[Sat Feb 28 09:50:58.780740 2026] [:error] [pid 11791:tid 11813] [client 20.220.232.101:14151] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aaJKAmuX5e1Q32gqxH2sAQAAARQ"]
[Sat Feb 28 09:50:59.264844 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.101:14200] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aaJKA7LWOogAgHGh62RxSgAAAYU"]
[Sat Feb 28 09:50:59.819278 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:14191] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aaJKAxVE-FfM89u7BQYE0QAAAJE"]
[Sat Feb 28 09:51:00.367202 2026] [:error] [pid 39292:tid 39309] [client 20.220.232.101:14114] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaJKBKIAO5fN7BxyqcGHOwAAAM8"]
[Sat Feb 28 09:51:00.871288 2026] [:error] [pid 11791:tid 11805] [client 20.220.232.101:14232] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaJKBGuX5e1Q32gqxH2sAgAAAQw"]
[Sat Feb 28 09:51:01.540072 2026] [:error] [pid 39292:tid 39312] [client 20.220.232.101:14179] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaJKBaIAO5fN7BxyqcGHPAAAANI"]
[Sat Feb 28 09:51:02.068178 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.101:14080] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaJKBrLWOogAgHGh62RxTgAAAYM"]
[Sat Feb 28 09:51:02.560881 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:14175] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJKBrLWOogAgHGh62RxUQAAAYQ"]
[Sat Feb 28 09:51:03.073330 2026] [:error] [pid 11791:tid 11802] [client 20.220.232.101:14261] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJKB2uX5e1Q32gqxH2sCQAAAQk"]
[Sat Feb 28 09:51:03.618491 2026] [:error] [pid 39184:tid 39237] [client 20.220.232.101:14188] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJKB1tZF9Zd_U7easCtzwAAAFI"]
[Sat Feb 28 09:51:04.191563 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.101:14187] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaJKCLLWOogAgHGh62RxXQAAAZY"]
[Sat Feb 28 09:51:04.798806 2026] [:error] [pid 39292:tid 39297] [client 20.220.232.101:14121] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaJKCKIAO5fN7BxyqcGHRQAAAMM"]
[Sat Feb 28 09:51:05.224990 2026] [:error] [pid 11791:tid 11796] [client 20.220.232.101:14162] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaJKCWuX5e1Q32gqxH2sDwAAAQM"]
[Sat Feb 28 09:51:05.893030 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:14148] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaJKCRVE-FfM89u7BQYE3gAAAIY"]
[Sat Feb 28 09:51:06.675117 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.101:14084] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaJKCrLWOogAgHGh62RxZwAAAYE"]
[Sat Feb 28 09:51:07.248130 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:13442] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaJKCxVE-FfM89u7BQYE3wAAAJE"]
[Sat Feb 28 09:51:07.967798 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.101:14154] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaJKC7LWOogAgHGh62RxcgAAAZc"]
[Sat Feb 28 09:51:08.772527 2026] [:error] [pid 11791:tid 11802] [client 20.220.232.101:14203] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaJKDGuX5e1Q32gqxH2sGgAAAQk"]
[Sat Feb 28 09:51:15.741247 2026] [:error] [pid 39185:tid 39253] [client 20.220.232.101:14202] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaJKExVE-FfM89u7BQYE_QAAAIc"]
[Sat Feb 28 09:51:16.263493 2026] [:error] [pid 22194:tid 22199] [client 20.220.232.101:14174] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaJKFH6mbajs3bzQGysE4AAAAUM"]
[Sat Feb 28 09:51:16.935338 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.101:14208] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaJKFLLWOogAgHGh62RxoAAAAZI"]
[Sat Feb 28 09:51:17.483868 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.101:14100] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaJKFWuX5e1Q32gqxH2sOgAAAQI"]
[Sat Feb 28 09:51:18.018770 2026] [:error] [pid 52460:tid 52479] [client 20.220.232.101:14185] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaJKFrLWOogAgHGh62RxpAAAAZA"]
[Sat Feb 28 09:51:18.912568 2026] [:error] [pid 52460:tid 52473] [client 20.220.232.101:14135] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaJKFrLWOogAgHGh62RxpwAAAYo"]
[Sat Feb 28 09:51:19.584162 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:14088] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaJKFxVE-FfM89u7BQYFBgAAAJA"]
[Sat Feb 28 09:51:20.079284 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.101:14237] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaJKGBVE-FfM89u7BQYFDAAAAJM"]
[Sat Feb 28 09:51:20.767673 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.101:13464] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaJKGLLWOogAgHGh62RxrQAAAY8"]
[Sat Feb 28 09:51:21.194402 2026] [:error] [pid 39292:tid 39295] [client 20.220.232.101:14127] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaJKGaIAO5fN7BxyqcGHcQAAAME"]
[Sat Feb 28 09:51:22.021816 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:14082] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaJKGhVE-FfM89u7BQYFFAAAAIE"]
[Sat Feb 28 09:51:22.581338 2026] [:error] [pid 39184:tid 39232] [client 20.220.232.101:14093] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaJKGltZF9Zd_U7easCt1AAAAE0"]
[Sat Feb 28 09:51:23.387461 2026] [:error] [pid 39184:tid 39233] [client 20.220.232.101:13481] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaJKG1tZF9Zd_U7easCt1wAAAE4"]
[Sat Feb 28 09:51:23.931645 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:14199] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaJKGxVE-FfM89u7BQYFGwAAAJU"]
[Sat Feb 28 09:51:24.473220 2026] [:error] [pid 39292:tid 39306] [client 20.220.232.101:14099] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaJKHKIAO5fN7BxyqcGHdwAAAMw"]
[Sat Feb 28 09:51:24.946727 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:14158] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaJKHBVE-FfM89u7BQYFIAAAAJE"]
[Sat Feb 28 09:51:25.575193 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.101:14105] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaJKHRVE-FfM89u7BQYFJwAAAII"]
[Sat Feb 28 09:51:26.144546 2026] [:error] [pid 39184:tid 39225] [client 20.220.232.101:14083] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaJKHltZF9Zd_U7easCt2QAAAEY"]
[Sat Feb 28 09:51:26.923090 2026] [:error] [pid 39183:tid 39203] [client 20.220.232.101:14106] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaJKHhCf4HvhVePw3LbFVQAAAAs"]
[Sat Feb 28 09:51:27.465255 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.101:14115] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaJKH7LWOogAgHGh62RxuAAAAYU"]
[Sat Feb 28 09:51:27.934155 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.101:14089] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaJKH7LWOogAgHGh62RxugAAAY0"]
[Sat Feb 28 09:51:28.587033 2026] [:error] [pid 39292:tid 39304] [client 20.220.232.101:14173] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaJKIKIAO5fN7BxyqcGHfQAAAMo"]
[Sat Feb 28 09:51:29.202886 2026] [:error] [pid 11791:tid 11812] [client 20.220.232.101:14059] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaJKIWuX5e1Q32gqxH2sTQAAARM"]
[Sat Feb 28 09:51:29.760131 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.101:14094] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaJKIWuX5e1Q32gqxH2sTwAAAQs"]
[Sat Feb 28 09:51:30.371544 2026] [:error] [pid 39183:tid 39205] [client 20.220.232.101:14036] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaJKIhCf4HvhVePw3LbFWAAAAA0"]
[Sat Feb 28 09:51:30.908975 2026] [:error] [pid 39292:tid 39305] [client 20.220.232.101:14040] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaJKIqIAO5fN7BxyqcGHfwAAAMs"]
[Sat Feb 28 09:51:31.753938 2026] [:error] [pid 39292:tid 39295] [client 20.220.232.101:14138] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaJKI6IAO5fN7BxyqcGHggAAAME"]
[Sat Feb 28 09:51:32.261965 2026] [:error] [pid 11791:tid 11802] [client 20.220.232.101:14165] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaJKJGuX5e1Q32gqxH2sVQAAAQk"]
[Sat Feb 28 09:51:32.732630 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.101:14113] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaJKJLLWOogAgHGh62RxwAAAAYs"]
[Sat Feb 28 09:51:33.213293 2026] [:error] [pid 52460:tid 52480] [client 20.220.232.101:14214] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaJKJbLWOogAgHGh62RxwQAAAZE"]
[Sat Feb 28 09:51:33.913985 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.101:14104] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaJKJWuX5e1Q32gqxH2sWwAAAQo"]
[Sat Feb 28 09:51:34.487736 2026] [:error] [pid 52460:tid 52470] [client 20.220.232.101:14109] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaJKJrLWOogAgHGh62RxxQAAAYc"]
[Sat Feb 28 09:51:35.085487 2026] [:error] [pid 52460:tid 52465] [client 20.220.232.101:14205] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaJKJ7LWOogAgHGh62RxyAAAAYI"]
[Sat Feb 28 09:51:35.759625 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.101:14081] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaJKJ7LWOogAgHGh62RxzAAAAZI"]
[Sat Feb 28 09:51:36.297149 2026] [:error] [pid 39292:tid 39308] [client 20.220.232.101:14117] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaJKKKIAO5fN7BxyqcGHhgAAAM4"]
[Sat Feb 28 09:51:36.763896 2026] [:error] [pid 39184:tid 39238] [client 20.220.232.101:14333] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaJKKFtZF9Zd_U7easCt3AAAAFM"]
[Sat Feb 28 09:51:37.212534 2026] [:error] [pid 39185:tid 39246] [client 20.220.232.101:14091] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaJKKRVE-FfM89u7BQYFPgAAAIA"]
[Sat Feb 28 09:51:37.679937 2026] [:error] [pid 22194:tid 22205] [client 20.220.232.101:14267] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaJKKX6mbajs3bzQGysE7gAAAUk"]
[Sat Feb 28 09:51:38.262901 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.101:14180] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaJKKrLWOogAgHGh62Rx1QAAAYs"]
[Sat Feb 28 09:51:39.065190 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.101:14297] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaJKK2uX5e1Q32gqxH2sZAAAAQs"]
[Sat Feb 28 09:51:39.832114 2026] [:error] [pid 22194:tid 22208] [client 20.220.232.101:14269] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaJKK36mbajs3bzQGysE8wAAAUw"]
[Sat Feb 28 09:51:40.352113 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:14028] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaJKLBVE-FfM89u7BQYFQwAAAIQ"]
[Sat Feb 28 09:51:40.989938 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:14098] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaJKLBVE-FfM89u7BQYFRgAAAI0"]
[Sat Feb 28 09:51:41.472401 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.101:14102] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaJKLRVE-FfM89u7BQYFSQAAAJM"]
[Sat Feb 28 09:51:41.985806 2026] [:error] [pid 22194:tid 22196] [client 20.220.232.101:14143] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaJKLX6mbajs3bzQGysE_AAAAUA"]
[Sat Feb 28 09:51:42.670817 2026] [:error] [pid 39183:tid 39196] [client 20.220.232.101:14132] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aaJKLhCf4HvhVePw3LbFZAAAAAQ"]
[Sat Feb 28 09:51:43.388869 2026] [:error] [pid 39292:tid 39306] [client 20.220.232.101:14050] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aaJKL6IAO5fN7BxyqcGHiQAAAMw"]
[Sat Feb 28 09:51:44.009554 2026] [:error] [pid 11791:tid 11802] [client 20.220.232.101:14198] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aaJKMGuX5e1Q32gqxH2saAAAAQk"]
[Sat Feb 28 09:51:44.714911 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.101:14120] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aaJKMGuX5e1Q32gqxH2sbAAAAQI"]
[Sat Feb 28 09:51:45.184173 2026] [:error] [pid 22194:tid 22216] [client 20.220.232.101:14130] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aaJKMX6mbajs3bzQGysFBQAAAVQ"]
[Sat Feb 28 09:51:45.721621 2026] [:error] [pid 39184:tid 39240] [client 20.220.232.101:14129] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aaJKMVtZF9Zd_U7easCt4gAAAFU"]
[Sat Feb 28 09:51:46.227775 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.101:14046] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aaJKMrLWOogAgHGh62Rx4AAAAYE"]
[Sat Feb 28 09:51:46.852158 2026] [:error] [pid 39183:tid 39192] [client 20.220.232.101:14032] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aaJKMhCf4HvhVePw3LbFZwAAAAA"]
[Sat Feb 28 09:51:47.345303 2026] [:error] [pid 52460:tid 52487] [client 20.220.232.101:14145] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aaJKM7LWOogAgHGh62Rx4wAAAZg"]
[Sat Feb 28 09:51:47.807151 2026] [:error] [pid 39183:tid 39205] [client 20.220.232.101:14107] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aaJKMxCf4HvhVePw3LbFawAAAA0"]
[Sat Feb 28 09:51:48.266314 2026] [:error] [pid 39183:tid 39204] [client 20.220.232.101:14019] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aaJKNBCf4HvhVePw3LbFbQAAAAw"]
[Sat Feb 28 09:51:48.760796 2026] [:error] [pid 22194:tid 22199] [client 20.220.232.101:14057] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aaJKNH6mbajs3bzQGysFHwAAAUM"]
[Sat Feb 28 09:51:49.324078 2026] [:error] [pid 39183:tid 39210] [client 20.220.232.101:14122] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aaJKNRCf4HvhVePw3LbFcAAAABI"]
[Sat Feb 28 09:51:49.963934 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.101:14186] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aaJKNbLWOogAgHGh62Rx6wAAAYM"]
[Sat Feb 28 09:51:50.853192 2026] [:error] [pid 52460:tid 52480] [client 20.220.232.101:14128] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aaJKNrLWOogAgHGh62Rx7AAAAZE"]
[Sat Feb 28 09:51:51.409027 2026] [:error] [pid 39185:tid 39268] [client 20.220.232.101:13959] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aaJKNxVE-FfM89u7BQYFVAAAAJY"]
[Sat Feb 28 09:51:52.143621 2026] [:error] [pid 39184:tid 39229] [client 20.220.232.101:14116] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aaJKOFtZF9Zd_U7easCt5wAAAEo"]
[Sat Feb 28 09:51:52.670502 2026] [:error] [pid 39183:tid 39196] [client 20.220.232.101:14034] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aaJKOBCf4HvhVePw3LbFdwAAAAQ"]
[Sat Feb 28 09:51:53.334794 2026] [:error] [pid 22194:tid 22202] [client 20.220.232.101:14076] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aaJKOX6mbajs3bzQGysFIwAAAUY"]
[Sat Feb 28 09:51:54.014676 2026] [:error] [pid 52460:tid 52473] [client 20.220.232.101:14133] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aaJKOrLWOogAgHGh62Rx8gAAAYo"]
[Sat Feb 28 09:51:54.513321 2026] [:error] [pid 11791:tid 11807] [client 20.220.232.101:14207] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aaJKOmuX5e1Q32gqxH2sbwAAAQ4"]
[Sat Feb 28 09:51:55.077045 2026] [:error] [pid 11791:tid 11796] [client 20.220.232.101:14053] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aaJKO2uX5e1Q32gqxH2scQAAAQM"]
[Sat Feb 28 09:51:55.573506 2026] [:error] [pid 11791:tid 11800] [client 20.220.232.101:14144] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aaJKO2uX5e1Q32gqxH2scgAAAQc"]
[Sat Feb 28 09:51:56.170093 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.101:14090] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "aaJKPGuX5e1Q32gqxH2sdQAAAQs"]
[Sat Feb 28 09:51:56.757307 2026] [:error] [pid 11791:tid 11793] [client 20.220.232.101:14096] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aaJKPGuX5e1Q32gqxH2segAAAQA"]
[Sat Feb 28 09:51:57.293196 2026] [:error] [pid 22194:tid 22214] [client 20.220.232.101:14176] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aaJKPX6mbajs3bzQGysFJAAAAVI"]
[Sat Feb 28 09:51:57.755063 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:14087] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aaJKPRVE-FfM89u7BQYFXAAAAIY"]
[Sat Feb 28 09:51:58.549742 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:14038] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "aaJKPhVE-FfM89u7BQYFZAAAAI4"]
[Sat Feb 28 09:51:58.999245 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:14070] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aaJKPhVE-FfM89u7BQYFaQAAAIQ"]
[Sat Feb 28 09:51:59.672413 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:14024] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aaJKPxVE-FfM89u7BQYFbwAAAI0"]
[Sat Feb 28 09:52:00.456121 2026] [:error] [pid 11791:tid 11816] [client 20.220.232.101:13967] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aaJKQGuX5e1Q32gqxH2shgAAARc"]
[Sat Feb 28 09:52:01.030714 2026] [:error] [pid 11791:tid 11801] [client 20.220.232.101:14097] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "aaJKQWuX5e1Q32gqxH2sigAAAQg"]
[Sat Feb 28 09:52:01.490431 2026] [:error] [pid 11791:tid 11813] [client 20.220.232.101:14067] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aaJKQWuX5e1Q32gqxH2sjwAAARQ"]
[Sat Feb 28 09:52:01.985022 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.101:14112] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aaJKQaIAO5fN7BxyqcGHkwAAAMY"]
[Sat Feb 28 09:52:02.441948 2026] [:error] [pid 39292:tid 39298] [client 20.220.232.101:14043] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aaJKQqIAO5fN7BxyqcGHlAAAAMQ"]
[Sat Feb 28 09:52:02.955846 2026] [:error] [pid 39184:tid 39241] [client 20.220.232.101:14017] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "aaJKQltZF9Zd_U7easCt7QAAAFY"]
[Sat Feb 28 09:52:03.375577 2026] [:error] [pid 52460:tid 52479] [client 20.220.232.101:14022] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aaJKQ7LWOogAgHGh62RyFAAAAZA"]
[Sat Feb 28 09:52:03.951816 2026] [:error] [pid 11791:tid 11810] [client 20.220.232.101:14054] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aaJKQ2uX5e1Q32gqxH2skQAAARE"]
[Sat Feb 28 09:52:04.469148 2026] [:error] [pid 11791:tid 11815] [client 20.220.232.101:14062] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aaJKRGuX5e1Q32gqxH2skgAAARY"]
[Sat Feb 28 09:52:04.939182 2026] [:error] [pid 11791:tid 11796] [client 20.220.232.101:13956] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aaJKRGuX5e1Q32gqxH2slAAAAQM"]
[Sat Feb 28 09:52:05.489906 2026] [:error] [pid 22194:tid 22196] [client 20.220.232.101:14111] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aaJKRX6mbajs3bzQGysFJwAAAUA"]
[Sat Feb 28 09:52:05.962559 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:14034] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aaJKRRVE-FfM89u7BQYFdwAAAJA"]
[Sat Feb 28 09:52:06.456410 2026] [:error] [pid 52460:tid 52465] [client 20.220.232.101:13957] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aaJKRrLWOogAgHGh62RyIgAAAYI"]
[Sat Feb 28 09:52:06.943628 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:14134] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "aaJKRhVE-FfM89u7BQYFfgAAAJU"]
[Sat Feb 28 09:52:07.623925 2026] [:error] [pid 52460:tid 52472] [client 20.220.232.101:14068] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aaJKR7LWOogAgHGh62RyIwAAAYk"]
[Sat Feb 28 09:52:08.190756 2026] [:error] [pid 39183:tid 39204] [client 20.220.232.101:14110] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aaJKSBCf4HvhVePw3LbFkAAAAAw"]
[Sat Feb 28 09:52:08.641801 2026] [:error] [pid 39292:tid 39314] [client 20.220.232.101:14045] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aaJKSKIAO5fN7BxyqcGHmwAAANQ"]
[Sat Feb 28 09:52:09.250972 2026] [:error] [pid 39292:tid 39315] [client 20.220.232.101:14196] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "aaJKSaIAO5fN7BxyqcGHogAAANU"]
[Sat Feb 28 09:52:09.843693 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:14078] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aaJKSRVE-FfM89u7BQYFjgAAAIY"]
[Sat Feb 28 09:52:10.656497 2026] [:error] [pid 39183:tid 39208] [client 20.220.232.101:14039] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aaJKShCf4HvhVePw3LbFlgAAABA"]
[Sat Feb 28 09:52:11.123107 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:13448] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aaJKSxVE-FfM89u7BQYFkgAAAJE"]
[Sat Feb 28 09:52:11.769984 2026] [:error] [pid 22194:tid 22201] [client 20.220.232.101:14023] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "aaJKS36mbajs3bzQGysFLQAAAUU"]
[Sat Feb 28 09:52:20.046405 2026] [:error] [pid 22194:tid 22202] [client 20.220.232.101:13450] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aaJKVH6mbajs3bzQGysFNQAAAUY"]
[Sat Feb 28 09:52:20.990200 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.101:13409] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aaJKVLLWOogAgHGh62RyUQAAAY8"]
[Sat Feb 28 09:52:22.004631 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.101:13440] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aaJKVrLWOogAgHGh62RyWQAAAYY"]
[Sat Feb 28 09:52:22.887626 2026] [:error] [pid 52460:tid 52473] [client 20.220.232.101:13487] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "aaJKVrLWOogAgHGh62RyXwAAAYo"]
[Sat Feb 28 09:52:23.092871 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.101:14159] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaJKVxVE-FfM89u7BQYFwwAAAJg"]
[Sat Feb 28 09:52:23.549967 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.101:14131] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaJKVxVE-FfM89u7BQYFxQAAAJM"]
[Sat Feb 28 09:52:24.030344 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:14030] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaJKWGuX5e1Q32gqxH2svwAAAQU"]
[Sat Feb 28 09:52:24.495784 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:13379] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaJKWBVE-FfM89u7BQYFyAAAAJA"]
[Sat Feb 28 09:52:25.044545 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:13451] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaJKWRVE-FfM89u7BQYFzQAAAIQ"]
[Sat Feb 28 09:52:25.705960 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.101:14041] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaJKWbLWOogAgHGh62RybwAAAYM"]
[Sat Feb 28 09:52:26.134182 2026] [:error] [pid 39185:tid 39268] [client 20.220.232.101:13983] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaJKWhVE-FfM89u7BQYF0QAAAJY"]
[Sat Feb 28 09:52:26.601131 2026] [:error] [pid 52460:tid 52487] [client 20.220.232.101:13972] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaJKWrLWOogAgHGh62RydQAAAZg"]
[Sat Feb 28 09:52:27.741450 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:14092] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaJKWxVE-FfM89u7BQYF3wAAAIQ"]
[Sat Feb 28 09:52:28.237433 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:13492] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaJKXBVE-FfM89u7BQYF5AAAAI0"]
[Sat Feb 28 09:52:28.705086 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.101:13482] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaJKXBVE-FfM89u7BQYF5wAAAIM"]
[Sat Feb 28 09:52:29.427145 2026] [:error] [pid 22194:tid 22217] [client 20.220.232.101:13395] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaJKXX6mbajs3bzQGysFOwAAAVU"]
[Sat Feb 28 09:52:29.935408 2026] [:error] [pid 39184:tid 39228] [client 20.220.232.101:14052] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaJKXVtZF9Zd_U7easCuDAAAAEk"]
[Sat Feb 28 09:52:30.501940 2026] [:error] [pid 11791:tid 11808] [client 20.220.232.101:13489] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaJKXmuX5e1Q32gqxH2s1QAAAQ8"]
[Sat Feb 28 09:52:31.128969 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:13952] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaJKX7LWOogAgHGh62RyhAAAAYQ"]
[Sat Feb 28 09:52:31.703094 2026] [:error] [pid 52460:tid 52465] [client 20.220.232.101:13958] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaJKX7LWOogAgHGh62RyigAAAYI"]
[Sat Feb 28 09:52:32.169370 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.101:13976] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaJKYLLWOogAgHGh62RyjAAAAYA"]
[Sat Feb 28 09:52:32.649980 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.101:14170] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaJKYLLWOogAgHGh62RykAAAAZc"]
[Sat Feb 28 09:52:33.196484 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.101:14020] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaJKYRVE-FfM89u7BQYF8gAAAII"]
[Sat Feb 28 09:52:33.635458 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:13496] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaJKYRVE-FfM89u7BQYF9gAAAJE"]
[Sat Feb 28 09:52:34.249140 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:14033] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aaJKYhVE-FfM89u7BQYF_QAAAJU"]
[Sat Feb 28 09:52:34.677199 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:13388] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aaJKYhVE-FfM89u7BQYGAwAAAI4"]
[Sat Feb 28 09:52:35.169847 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.101:13998] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aaJKYxVE-FfM89u7BQYGBwAAAJM"]
[Sat Feb 28 09:52:35.828585 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.101:14182] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aaJKY7LWOogAgHGh62RymwAAAY0"]
[Sat Feb 28 09:52:36.380705 2026] [:error] [pid 39184:tid 39233] [client 20.220.232.101:13406] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aaJKZFtZF9Zd_U7easCuHwAAAE4"]
[Sat Feb 28 09:52:37.005225 2026] [:error] [pid 39183:tid 39201] [client 20.220.232.101:13495] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aaJKZRCf4HvhVePw3LbFrwAAAAk"]
[Sat Feb 28 09:52:37.586207 2026] [:error] [pid 39185:tid 39261] [client 20.220.232.101:13438] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aaJKZRVE-FfM89u7BQYGEwAAAI8"]
[Sat Feb 28 09:52:38.260225 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.101:13396] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aaJKZmuX5e1Q32gqxH2s4AAAAQU"]
[Sat Feb 28 09:52:38.688985 2026] [:error] [pid 39292:tid 39310] [client 20.220.232.101:14026] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaJKZqIAO5fN7BxyqcGHxQAAANA"]
[Sat Feb 28 09:52:39.271049 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.101:14009] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaJKZ7LWOogAgHGh62RyqwAAAZc"]
[Sat Feb 28 09:52:39.995418 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:13435] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaJKZxVE-FfM89u7BQYGHAAAAIg"]
[Sat Feb 28 09:52:40.475787 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:13386] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaJKaBVE-FfM89u7BQYGHgAAAJU"]
[Sat Feb 28 09:52:41.215129 2026] [:error] [pid 39292:tid 39303] [client 20.220.232.101:13491] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aaJKaaIAO5fN7BxyqcGHzQAAAMk"]
[Sat Feb 28 09:52:41.694740 2026] [:error] [pid 22194:tid 22208] [client 20.220.232.101:13470] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aaJKaX6mbajs3bzQGysFagAAAUw"]
[Sat Feb 28 09:52:42.225929 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.101:14035] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aaJKarLWOogAgHGh62RyuAAAAY0"]
[Sat Feb 28 09:52:42.927424 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.101:13393] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aaJKarLWOogAgHGh62RyuwAAAZU"]
[Sat Feb 28 09:52:43.807230 2026] [:error] [pid 39184:tid 39223] [client 20.220.232.101:14069] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aaJKa1tZF9Zd_U7easCuLQAAAEQ"]
[Sat Feb 28 09:52:44.700788 2026] [:error] [pid 39183:tid 39207] [client 20.220.232.101:13401] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aaJKbBCf4HvhVePw3LbFswAAAA8"]
[Sat Feb 28 09:52:45.228627 2026] [:error] [pid 22194:tid 22200] [client 20.220.232.101:13453] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aaJKbX6mbajs3bzQGysFeAAAAUQ"]
[Sat Feb 28 09:52:45.857027 2026] [:error] [pid 39185:tid 39268] [client 20.220.232.101:13382] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aaJKbRVE-FfM89u7BQYGNAAAAJY"]
[Sat Feb 28 09:52:46.663833 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.101:13963] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aaJKbrLWOogAgHGh62RyyAAAAYM"]
[Sat Feb 28 09:52:47.606520 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.101:13460] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aaJKb7LWOogAgHGh62RyygAAAZc"]
[Sat Feb 28 09:52:48.347371 2026] [:error] [pid 52460:tid 52480] [client 20.220.232.101:13488] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aaJKcLLWOogAgHGh62Ry0gAAAZE"]
[Sat Feb 28 09:52:48.881759 2026] [:error] [pid 39183:tid 39195] [client 20.220.232.101:14051] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aaJKcBCf4HvhVePw3LbFtQAAAAM"]
[Sat Feb 28 09:52:49.484320 2026] [:error] [pid 39185:tid 39255] [client 20.220.232.101:14301] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaJKcRVE-FfM89u7BQYGUgAAAIk"]
[Sat Feb 28 09:52:49.934528 2026] [:error] [pid 39292:tid 39297] [client 20.220.232.101:14000] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaJKcaIAO5fN7BxyqcGH2QAAAMM"]
[Sat Feb 28 09:52:50.458704 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.101:13461] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaJKchVE-FfM89u7BQYGYAAAAIM"]
[Sat Feb 28 09:52:51.114049 2026] [:error] [pid 11791:tid 11812] [client 20.220.232.101:13483] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaJKc2uX5e1Q32gqxH2s6AAAARM"]
[Sat Feb 28 09:52:51.748432 2026] [:error] [pid 11791:tid 11809] [client 20.220.232.101:14047] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aaJKc2uX5e1Q32gqxH2s6wAAARA"]
[Sat Feb 28 09:52:52.225632 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:13389] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aaJKdBVE-FfM89u7BQYGdwAAAI0"]
[Sat Feb 28 09:52:52.777708 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.101:13452] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aaJKdBVE-FfM89u7BQYGgwAAAIM"]
[Sat Feb 28 09:52:53.399762 2026] [:error] [pid 11791:tid 11793] [client 20.220.232.101:13468] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aaJKdWuX5e1Q32gqxH2s8wAAAQA"]
[Sat Feb 28 09:52:54.005170 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:13449] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaJKdrLWOogAgHGh62RzAQAAAYQ"]
[Sat Feb 28 09:52:54.578372 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.101:14214] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaJKdrLWOogAgHGh62RzBwAAAYA"]
[Sat Feb 28 09:52:55.224159 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.101:13466] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaJKd7LWOogAgHGh62RzDwAAAYQ"]
[Sat Feb 28 09:52:55.722262 2026] [:error] [pid 39185:tid 39269] [client 20.220.232.101:14029] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaJKdxVE-FfM89u7BQYGmQAAAJc"]
[Sat Feb 28 09:52:56.233463 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:13970] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaJKeBVE-FfM89u7BQYGpAAAAIQ"]
[Sat Feb 28 09:52:56.843442 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:13497] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaJKeBVE-FfM89u7BQYGrwAAAIE"]
[Sat Feb 28 09:52:57.325160 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.101:13969] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaJKeRVE-FfM89u7BQYGuQAAAIY"]
[Sat Feb 28 09:52:57.827487 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:13475] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaJKeRVE-FfM89u7BQYGxQAAAI4"]
[Sat Feb 28 09:52:58.427764 2026] [:error] [pid 11791:tid 11809] [client 20.220.232.101:13436] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaJKemuX5e1Q32gqxH2s-wAAARA"]
[Sat Feb 28 09:52:59.544482 2026] [:error] [pid 52460:tid 52473] [client 20.220.232.101:14073] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaJKe7LWOogAgHGh62RzHwAAAYo"]
[Sat Feb 28 09:53:00.422316 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:13391] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaJKfBVE-FfM89u7BQYG4wAAAJU"]
[Sat Feb 28 09:53:00.991661 2026] [:error] [pid 39185:tid 39268] [client 20.220.232.101:13467] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaJKfBVE-FfM89u7BQYG7QAAAJY"]
[Sat Feb 28 09:53:01.455349 2026] [:error] [pid 39184:tid 39230] [client 20.220.232.101:13415] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaJKfVtZF9Zd_U7easCuOAAAAEs"]
[Sat Feb 28 09:53:01.916799 2026] [:error] [pid 22194:tid 22214] [client 20.220.232.101:13421] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaJKfX6mbajs3bzQGysFkgAAAVI"]
[Sat Feb 28 09:53:02.364119 2026] [:error] [pid 22194:tid 22206] [client 20.220.232.101:13487] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaJKfn6mbajs3bzQGysFkwAAAUo"]
[Sat Feb 28 09:53:02.935738 2026] [:error] [pid 39292:tid 39313] [client 20.220.232.101:14171] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaJKfqIAO5fN7BxyqcGH7wAAANM"]
[Sat Feb 28 09:53:03.491616 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.101:13971] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaJKfxVE-FfM89u7BQYHCgAAAIE"]
[Sat Feb 28 09:53:04.013534 2026] [:error] [pid 39185:tid 39269] [client 20.220.232.101:13443] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaJKgBVE-FfM89u7BQYHFAAAAJc"]
[Sat Feb 28 09:53:04.703203 2026] [:error] [pid 39185:tid 39251] [client 20.220.232.101:14058] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaJKgBVE-FfM89u7BQYHHQAAAIU"]
[Sat Feb 28 09:53:05.170957 2026] [:error] [pid 52460:tid 52473] [client 20.220.232.101:13980] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pop.php"] [unique_id "aaJKgbLWOogAgHGh62RzMAAAAYo"]
[Sat Feb 28 09:53:05.779996 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:13408] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aaJKgRVE-FfM89u7BQYHLwAAAJA"]
[Sat Feb 28 09:53:06.436060 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:13486] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aaJKghVE-FfM89u7BQYHOgAAAJE"]
[Sat Feb 28 09:53:06.995549 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.101:14023] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aaJKghVE-FfM89u7BQYHQQAAAJg"]
[Sat Feb 28 09:53:07.836331 2026] [:error] [pid 22194:tid 22208] [client 20.220.232.101:13968] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "aaJKg36mbajs3bzQGysFmQAAAUw"]
[Sat Feb 28 09:53:08.299704 2026] [:error] [pid 11791:tid 11796] [client 20.220.232.101:13986] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aaJKhGuX5e1Q32gqxH2tHAAAAQM"]
[Sat Feb 28 09:53:08.867625 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.101:13422] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aaJKhBVE-FfM89u7BQYHTQAAAII"]
[Sat Feb 28 09:53:09.404406 2026] [:error] [pid 39185:tid 39258] [client 20.220.232.101:13377] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aaJKhRVE-FfM89u7BQYHVAAAAIw"]
[Sat Feb 28 09:53:10.017876 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.101:13990] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "aaJKhhVE-FfM89u7BQYHXwAAAIg"]
[Sat Feb 28 09:53:10.679121 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:14272] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aaJKhhVE-FfM89u7BQYHaQAAAJU"]
[Sat Feb 28 09:53:11.365336 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.101:13499] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aaJKhxVE-FfM89u7BQYHdgAAAI4"]
[Sat Feb 28 09:53:11.988410 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:14037] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aaJKhxVE-FfM89u7BQYHfwAAAI0"]
[Sat Feb 28 09:53:12.491239 2026] [:error] [pid 39184:tid 39239] [client 20.220.232.101:14101] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "aaJKiFtZF9Zd_U7easCuRAAAAFQ"]
[Sat Feb 28 09:53:13.164470 2026] [:error] [pid 22194:tid 22204] [client 20.220.232.101:13403] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aaJKiX6mbajs3bzQGysFmgAAAUg"]
[Sat Feb 28 09:53:13.674787 2026] [:error] [pid 39185:tid 39255] [client 20.220.232.101:13446] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aaJKiRVE-FfM89u7BQYHlwAAAIk"]
[Sat Feb 28 09:53:14.136913 2026] [:error] [pid 39185:tid 39253] [client 20.220.232.101:13378] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aaJKihVE-FfM89u7BQYHoAAAAIc"]
[Sat Feb 28 09:53:14.746028 2026] [:error] [pid 39185:tid 39261] [client 20.220.232.101:13385] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "aaJKihVE-FfM89u7BQYHqgAAAI8"]
[Sat Feb 28 09:53:15.252797 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.101:13450] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aaJKixVE-FfM89u7BQYHswAAAJI"]
[Sat Feb 28 09:53:16.050050 2026] [:error] [pid 39185:tid 39251] [client 20.220.232.101:13380] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aaJKjBVE-FfM89u7BQYHxAAAAIU"]
[Sat Feb 28 09:53:17.019571 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:13430] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aaJKjRVE-FfM89u7BQYHywAAAIQ"]
[Sat Feb 28 09:53:18.105746 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.101:13387] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aaJKjmuX5e1Q32gqxH2tKgAAAQo"]
[Sat Feb 28 09:53:18.631301 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:14063] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "aaJKjhVE-FfM89u7BQYH2gAAAJE"]
[Sat Feb 28 09:53:25.642409 2026] [:error] [pid 39292:tid 39304] [client 20.220.232.101:13376] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aaJKlaIAO5fN7BxyqcGIDQAAAMo"]
[Sat Feb 28 09:53:26.440571 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.101:14260] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aaJKlrLWOogAgHGh62RzlwAAAY0"]
[Sat Feb 28 09:53:26.935153 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.101:13502] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aaJKlhVE-FfM89u7BQYIGAAAAIs"]
[Sat Feb 28 09:53:27.594939 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.101:13454] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "aaJKlxVE-FfM89u7BQYIGwAAAIQ"]
[Sat Feb 28 09:53:28.484624 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.101:13402] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aaJKmLLWOogAgHGh62RzpAAAAYE"]
[Sat Feb 28 09:53:29.249547 2026] [:error] [pid 39185:tid 39258] [client 20.220.232.101:13498] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aaJKmRVE-FfM89u7BQYIKwAAAIw"]
[Sat Feb 28 09:53:30.315971 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.101:13472] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aaJKmhVE-FfM89u7BQYIOAAAAJE"]
[Sat Feb 28 09:53:31.089014 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.101:13432] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "aaJKmxVE-FfM89u7BQYIQAAAAI0"]
[Sat Feb 28 09:53:31.701770 2026] [:error] [pid 39185:tid 39246] [client 20.220.232.101:14325] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aaJKmxVE-FfM89u7BQYISQAAAIA"]
[Sat Feb 28 09:53:32.870136 2026] [:error] [pid 39292:tid 39314] [client 20.220.232.101:13462] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aaJKnKIAO5fN7BxyqcGIEwAAANQ"]
[Sat Feb 28 09:53:34.002205 2026] [:error] [pid 11791:tid 11817] [client 20.220.232.101:14295] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aaJKnmuX5e1Q32gqxH2tQwAAARg"]
[Sat Feb 28 09:53:35.173295 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.101:14183] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "aaJKnxVE-FfM89u7BQYIXQAAAJU"]
[Sat Feb 28 09:53:36.476733 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.101:14140] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaJKoLLWOogAgHGh62Rz3QAAAYs"]
[Sat Feb 28 09:53:37.718383 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.101:13399] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaJKoRVE-FfM89u7BQYIYwAAAIM"]
[Sat Feb 28 09:53:38.962483 2026] [:error] [pid 11791:tid 11812] [client 20.220.232.101:13424] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaJKomuX5e1Q32gqxH2tTgAAARM"]
[Sat Feb 28 09:53:39.921826 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.101:14311] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaJKoxVE-FfM89u7BQYIbgAAAJA"]
[Sat Feb 28 09:53:41.113334 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.101:13405] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aaJKpRVE-FfM89u7BQYIcAAAAJQ"]
[Sat Feb 28 09:53:42.756532 2026] [:error] [pid 11791:tid 11815] [client 20.220.232.101:13457] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aaJKpmuX5e1Q32gqxH2tVwAAARY"]
[Sat Feb 28 09:53:44.254919 2026] [:error] [pid 11791:tid 11809] [client 20.220.232.101:13426] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aaJKqGuX5e1Q32gqxH2tXwAAARA"]
[Sat Feb 28 09:53:45.525673 2026] [:error] [pid 11791:tid 11806] [client 20.220.232.101:14279] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aaJKqWuX5e1Q32gqxH2tYwAAAQ0"]
[Sat Feb 28 10:26:14.450912 2026] [:error] [pid 39292:tid 39302] [client 20.220.61.156:6491] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJSRqIAO5fN7BxyqcGVfwAAAMg"]
[Sat Feb 28 10:26:14.888059 2026] [:error] [pid 39185:tid 39260] [client 20.220.61.156:7114] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJSRhVE-FfM89u7BQYxpAAAAI4"]
[Sat Feb 28 10:26:15.637579 2026] [:error] [pid 22194:tid 22202] [client 20.220.61.156:6522] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJSR36mbajs3bzQGysPCwAAAUY"]
[Sat Feb 28 10:26:16.137567 2026] [:error] [pid 22194:tid 22217] [client 20.220.61.156:7118] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJSSH6mbajs3bzQGysPDAAAAVU"]
[Sat Feb 28 12:29:08.867199 2026] [:error] [pid 52460:tid 52479] [client 167.86.118.77:57408] [client 167.86.118.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 167.86.118.77, counter = 32"] [hostname "www.makifim.com.au"] [uri "/wp-admin/"] [unique_id "aaJvFLLWOogAgHGh62QPNgAAAZA"], referer: binance.com
[Sat Feb 28 12:37:27.995358 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:4890] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aaJxB7LWOogAgHGh62QY0wAAAYs"]
[Sat Feb 28 12:37:28.410944 2026] [:error] [pid 39183:tid 39212] [client 4.205.9.11:4883] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aaJxCBCf4HvhVePw3Lbk9gAAABQ"]
[Sat Feb 28 12:37:28.826214 2026] [:error] [pid 39184:tid 39221] [client 4.205.9.11:4904] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aaJxCFtZF9Zd_U7easDUogAAAEI"]
[Sat Feb 28 12:37:29.239784 2026] [:error] [pid 22194:tid 22196] [client 4.205.9.11:4912] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aaJxCX6mbajs3bzQGys4qQAAAUA"]
[Sat Feb 28 12:37:29.657089 2026] [:error] [pid 22194:tid 22207] [client 4.205.9.11:4901] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cxxuv.php"] [unique_id "aaJxCX6mbajs3bzQGys4qgAAAUs"]
[Sat Feb 28 12:37:30.069177 2026] [:error] [pid 22194:tid 22202] [client 4.205.9.11:5062] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cxxuv.php"] [unique_id "aaJxCn6mbajs3bzQGys4qwAAAUY"]
[Sat Feb 28 12:37:30.483745 2026] [:error] [pid 52460:tid 52485] [client 4.205.9.11:4875] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cxxuv.php"] [unique_id "aaJxCrLWOogAgHGh62QY2wAAAZY"]
[Sat Feb 28 12:37:30.922493 2026] [:error] [pid 52460:tid 52476] [client 4.205.9.11:5071] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cxxuv.php"] [unique_id "aaJxCrLWOogAgHGh62QY3AAAAY0"]
[Sat Feb 28 12:37:31.336890 2026] [:error] [pid 52460:tid 52478] [client 4.205.9.11:5072] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaJxC7LWOogAgHGh62QY4AAAAY8"]
[Sat Feb 28 12:37:31.756987 2026] [:error] [pid 52460:tid 52479] [client 4.205.9.11:4877] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaJxC7LWOogAgHGh62QY4wAAAZA"]
[Sat Feb 28 12:37:32.167235 2026] [:error] [pid 52460:tid 52472] [client 4.205.9.11:4866] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaJxDLLWOogAgHGh62QY5QAAAYk"]
[Sat Feb 28 12:37:32.607702 2026] [:error] [pid 39292:tid 39310] [client 4.205.9.11:4923] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaJxDKIAO5fN7BxyqcHIIAAAANA"]
[Sat Feb 28 12:37:33.030460 2026] [:error] [pid 39185:tid 39253] [client 4.205.9.11:4908] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aaJxDRVE-FfM89u7BQakvwAAAIc"]
[Sat Feb 28 12:37:33.440288 2026] [:error] [pid 39184:tid 39241] [client 4.205.9.11:4887] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aaJxDVtZF9Zd_U7easDUpQAAAFY"]
[Sat Feb 28 12:37:33.857134 2026] [:error] [pid 11791:tid 11802] [client 4.205.9.11:5075] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aaJxDWuX5e1Q32gqxH0KowAAAQk"]
[Sat Feb 28 12:37:34.270023 2026] [:error] [pid 22194:tid 22220] [client 4.205.9.11:5068] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aaJxDn6mbajs3bzQGys4rgAAAVg"]
[Sat Feb 28 12:37:34.681823 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:5116] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJxDrLWOogAgHGh62QY6AAAAZM"]
[Sat Feb 28 12:37:35.099267 2026] [:error] [pid 52460:tid 52480] [client 4.205.9.11:4874] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJxD7LWOogAgHGh62QY6gAAAZE"]
[Sat Feb 28 12:37:35.539489 2026] [:error] [pid 39292:tid 39301] [client 4.205.9.11:4896] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJxD6IAO5fN7BxyqcHIIwAAAMc"]
[Sat Feb 28 12:37:35.996383 2026] [:error] [pid 39292:tid 39305] [client 4.205.9.11:5081] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJxD6IAO5fN7BxyqcHIJQAAAMs"]
[Sat Feb 28 12:37:36.407799 2026] [:error] [pid 39292:tid 39311] [client 4.205.9.11:4881] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJxEKIAO5fN7BxyqcHIJgAAANE"]
[Sat Feb 28 12:37:36.825286 2026] [:error] [pid 52460:tid 52478] [client 4.205.9.11:4924] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJxELLWOogAgHGh62QY8AAAAY8"]
[Sat Feb 28 12:37:37.237082 2026] [:error] [pid 39184:tid 39235] [client 4.205.9.11:5084] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJxEVtZF9Zd_U7easDUqgAAAFA"]
[Sat Feb 28 12:37:37.650566 2026] [:error] [pid 11791:tid 11816] [client 4.205.9.11:4891] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJxEWuX5e1Q32gqxH0KqQAAARc"]
[Sat Feb 28 12:37:38.063521 2026] [:error] [pid 39185:tid 39252] [client 4.205.9.11:4876] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws75.php"] [unique_id "aaJxEhVE-FfM89u7BQak1AAAAIY"]
[Sat Feb 28 12:37:38.476412 2026] [:error] [pid 39185:tid 39267] [client 4.205.9.11:5089] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws75.php"] [unique_id "aaJxEhVE-FfM89u7BQak2QAAAJU"]
[Sat Feb 28 12:37:38.919370 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:5056] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws75.php"] [unique_id "aaJxErLWOogAgHGh62QY-QAAAZM"]
[Sat Feb 28 12:37:39.358405 2026] [:error] [pid 39185:tid 39250] [client 4.205.9.11:4993] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws75.php"] [unique_id "aaJxExVE-FfM89u7BQak3wAAAIQ"]
[Sat Feb 28 12:37:39.773156 2026] [:error] [pid 52460:tid 52464] [client 4.205.9.11:5010] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "aaJxE7LWOogAgHGh62QY_wAAAYE"]
[Sat Feb 28 12:37:40.185251 2026] [:error] [pid 22194:tid 22208] [client 4.205.9.11:5063] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "aaJxFH6mbajs3bzQGys4tAAAAUw"]
[Sat Feb 28 12:37:40.598304 2026] [:error] [pid 22194:tid 22219] [client 4.205.9.11:4897] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "aaJxFH6mbajs3bzQGys4twAAAVc"]
[Sat Feb 28 12:37:41.031401 2026] [:error] [pid 52460:tid 52481] [client 4.205.9.11:5095] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "aaJxFbLWOogAgHGh62QZAgAAAZI"]
[Sat Feb 28 12:37:41.440735 2026] [:error] [pid 39183:tid 39206] [client 4.205.9.11:5109] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaJxFRCf4HvhVePw3Lbk-AAAAA4"]
[Sat Feb 28 12:37:41.895931 2026] [:error] [pid 39292:tid 39312] [client 4.205.9.11:4867] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaJxFaIAO5fN7BxyqcHIKAAAANI"]
[Sat Feb 28 12:37:42.317741 2026] [:error] [pid 39185:tid 39269] [client 4.205.9.11:5066] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaJxFhVE-FfM89u7BQak8wAAAJc"]
[Sat Feb 28 12:37:42.779672 2026] [:error] [pid 52460:tid 52463] [client 4.205.9.11:4868] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaJxFrLWOogAgHGh62QZCAAAAYA"]
[Sat Feb 28 12:37:43.237530 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:4895] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJxF7LWOogAgHGh62QZCwAAAZc"]
[Sat Feb 28 12:37:43.663477 2026] [:error] [pid 11791:tid 11805] [client 4.205.9.11:4914] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJxF2uX5e1Q32gqxH0KrwAAAQw"]
[Sat Feb 28 12:37:44.205584 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:4898] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJxGBVE-FfM89u7BQak-wAAAIw"]
[Sat Feb 28 12:37:44.735968 2026] [:error] [pid 39292:tid 39315] [client 4.205.9.11:5065] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJxGKIAO5fN7BxyqcHIKgAAANU"]
[Sat Feb 28 12:37:45.463315 2026] [:error] [pid 52460:tid 52483] [client 4.205.9.11:4886] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-f.php"] [unique_id "aaJxGbLWOogAgHGh62QZEgAAAZQ"]
[Sat Feb 28 12:37:46.230698 2026] [:error] [pid 52460:tid 52481] [client 4.205.9.11:4889] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-f.php"] [unique_id "aaJxGrLWOogAgHGh62QZFAAAAZI"]
[Sat Feb 28 12:37:46.951516 2026] [:error] [pid 52460:tid 52472] [client 4.205.9.11:5069] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-f.php"] [unique_id "aaJxGrLWOogAgHGh62QZHAAAAYk"]
[Sat Feb 28 12:37:47.495315 2026] [:error] [pid 52460:tid 52474] [client 4.205.9.11:5058] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-f.php"] [unique_id "aaJxG7LWOogAgHGh62QZHgAAAYs"]
[Sat Feb 28 12:37:48.207344 2026] [:error] [pid 52460:tid 52469] [client 4.205.9.11:4910] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaJxHLLWOogAgHGh62QZIgAAAYY"]
[Sat Feb 28 12:37:48.681637 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:5074] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaJxHLLWOogAgHGh62QZJgAAAY4"]
[Sat Feb 28 12:37:49.243833 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:4869] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaJxHbLWOogAgHGh62QZJwAAAYI"]
[Sat Feb 28 12:37:49.763665 2026] [:error] [pid 52460:tid 52485] [client 4.205.9.11:4902] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaJxHbLWOogAgHGh62QZKQAAAZY"]
[Sat Feb 28 12:37:50.311691 2026] [:error] [pid 39185:tid 39247] [client 4.205.9.11:4918] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "aaJxHhVE-FfM89u7BQalCQAAAIE"]
[Sat Feb 28 12:37:50.922068 2026] [:error] [pid 39185:tid 39260] [client 4.205.9.11:4872] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "aaJxHhVE-FfM89u7BQalDAAAAI4"]
[Sat Feb 28 12:37:51.474382 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:5035] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "aaJxH7LWOogAgHGh62QZLgAAAZc"]
[Sat Feb 28 12:37:51.947625 2026] [:error] [pid 39185:tid 39267] [client 4.205.9.11:4894] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "aaJxHxVE-FfM89u7BQalFAAAAJU"]
[Sat Feb 28 12:37:52.381163 2026] [:error] [pid 52460:tid 52480] [client 4.205.9.11:5067] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJxILLWOogAgHGh62QZMgAAAZE"]
[Sat Feb 28 12:37:52.808468 2026] [:error] [pid 52460:tid 52481] [client 4.205.9.11:5076] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJxILLWOogAgHGh62QZOAAAAZI"]
[Sat Feb 28 12:37:53.291346 2026] [:error] [pid 22194:tid 22212] [client 4.205.9.11:4865] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJxIX6mbajs3bzQGys4vQAAAVA"]
[Sat Feb 28 12:37:53.742987 2026] [:error] [pid 52460:tid 52485] [client 4.205.9.11:4906] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJxIbLWOogAgHGh62QZOgAAAZY"]
[Sat Feb 28 12:37:54.202688 2026] [:error] [pid 11791:tid 11804] [client 4.205.9.11:4882] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJxImuX5e1Q32gqxH0KxAAAAQs"]
[Sat Feb 28 12:37:54.629473 2026] [:error] [pid 52460:tid 52479] [client 4.205.9.11:5092] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJxIrLWOogAgHGh62QZQwAAAZA"]
[Sat Feb 28 12:37:55.145230 2026] [:error] [pid 39184:tid 39223] [client 4.205.9.11:5059] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJxI1tZF9Zd_U7easDUsAAAAEQ"]
[Sat Feb 28 12:37:55.659445 2026] [:error] [pid 22194:tid 22220] [client 4.205.9.11:5101] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJxI36mbajs3bzQGys4vwAAAVg"]
[Sat Feb 28 12:37:56.083185 2026] [:error] [pid 52460:tid 52470] [client 4.205.9.11:4888] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aaJxJLLWOogAgHGh62QZSgAAAYc"]
[Sat Feb 28 12:37:56.572635 2026] [:error] [pid 39185:tid 39247] [client 4.205.9.11:4903] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aaJxJBVE-FfM89u7BQalHAAAAIE"]
[Sat Feb 28 12:37:57.039785 2026] [:error] [pid 52460:tid 52475] [client 4.205.9.11:4915] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aaJxJbLWOogAgHGh62QZTwAAAYw"]
[Sat Feb 28 12:37:57.480388 2026] [:error] [pid 39185:tid 39262] [client 4.205.9.11:5096] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aaJxJRVE-FfM89u7BQalHgAAAJA"]
[Sat Feb 28 12:37:57.892363 2026] [:error] [pid 22194:tid 22214] [client 4.205.9.11:5108] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aaJxJX6mbajs3bzQGys4wQAAAVI"]
[Sat Feb 28 12:37:58.326354 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:5027] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aaJxJrLWOogAgHGh62QZWAAAAYI"]
[Sat Feb 28 12:37:58.850821 2026] [:error] [pid 52460:tid 52466] [client 4.205.9.11:5119] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aaJxJrLWOogAgHGh62QZXQAAAYM"]
[Sat Feb 28 12:37:59.309307 2026] [:error] [pid 22194:tid 22206] [client 4.205.9.11:5115] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aaJxJ36mbajs3bzQGys4wgAAAUo"]
[Sat Feb 28 12:37:59.747537 2026] [:error] [pid 39292:tid 39300] [client 4.205.9.11:5070] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aaJxJ6IAO5fN7BxyqcHIMQAAAMY"]
[Sat Feb 28 12:38:00.161348 2026] [:error] [pid 39292:tid 39310] [client 4.205.9.11:5080] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aaJxKKIAO5fN7BxyqcHIMwAAANA"]
[Sat Feb 28 12:38:00.689321 2026] [:error] [pid 39185:tid 39263] [client 4.205.9.11:4893] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aaJxKBVE-FfM89u7BQalIwAAAJE"]
[Sat Feb 28 12:38:01.196878 2026] [:error] [pid 39292:tid 39296] [client 4.205.9.11:4871] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aaJxKaIAO5fN7BxyqcHINgAAAMI"]
[Sat Feb 28 12:38:01.678722 2026] [:error] [pid 39185:tid 39259] [client 4.205.9.11:4927] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaJxKRVE-FfM89u7BQalKAAAAI0"]
[Sat Feb 28 12:38:02.166232 2026] [:error] [pid 11791:tid 11815] [client 4.205.9.11:5088] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaJxKmuX5e1Q32gqxH0KxQAAARY"]
[Sat Feb 28 12:38:02.576340 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:5061] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaJxKrLWOogAgHGh62QZZwAAAYI"]
[Sat Feb 28 12:38:02.998536 2026] [:error] [pid 39185:tid 39251] [client 4.205.9.11:5039] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaJxKhVE-FfM89u7BQalKgAAAIU"]
[Sat Feb 28 12:38:03.414821 2026] [:error] [pid 11791:tid 11796] [client 4.205.9.11:4864] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "aaJxK2uX5e1Q32gqxH0KywAAAQM"]
[Sat Feb 28 12:38:03.837246 2026] [:error] [pid 39184:tid 39219] [client 4.205.9.11:5105] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "aaJxK1tZF9Zd_U7easDUtwAAAEA"]
[Sat Feb 28 12:38:04.248131 2026] [:error] [pid 39185:tid 39266] [client 4.205.9.11:4913] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "aaJxLBVE-FfM89u7BQalLwAAAJQ"]
[Sat Feb 28 12:38:04.685781 2026] [:error] [pid 52460:tid 52480] [client 4.205.9.11:5117] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "aaJxLLLWOogAgHGh62QZbAAAAZE"]
[Sat Feb 28 12:38:05.110296 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:5060] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJxLbLWOogAgHGh62QZbQAAAY4"]
[Sat Feb 28 12:38:05.520637 2026] [:error] [pid 39292:tid 39314] [client 4.205.9.11:5111] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJxLaIAO5fN7BxyqcHIRQAAANQ"]
[Sat Feb 28 12:38:05.932504 2026] [:error] [pid 11791:tid 11806] [client 4.205.9.11:5087] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJxLWuX5e1Q32gqxH0KzgAAAQ0"]
[Sat Feb 28 12:38:06.345263 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:4880] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJxLrLWOogAgHGh62QZcwAAAZM"]
[Sat Feb 28 12:38:06.777539 2026] [:error] [pid 39292:tid 39317] [client 4.205.9.11:5077] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdf.php"] [unique_id "aaJxLqIAO5fN7BxyqcHISgAAANc"]
[Sat Feb 28 12:38:07.192299 2026] [:error] [pid 39184:tid 39225] [client 4.205.9.11:4892] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdf.php"] [unique_id "aaJxL1tZF9Zd_U7easDUugAAAEY"]
[Sat Feb 28 12:38:07.604366 2026] [:error] [pid 39185:tid 39251] [client 4.205.9.11:5004] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdf.php"] [unique_id "aaJxLxVE-FfM89u7BQalQAAAAIU"]
[Sat Feb 28 12:38:08.019567 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:4899] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdf.php"] [unique_id "aaJxMLLWOogAgHGh62QZegAAAYI"]
[Sat Feb 28 12:38:08.430496 2026] [:error] [pid 52460:tid 52473] [client 4.205.9.11:5007] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJxMLLWOogAgHGh62QZfQAAAYo"]
[Sat Feb 28 12:38:08.840628 2026] [:error] [pid 39185:tid 39248] [client 4.205.9.11:5073] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJxMBVE-FfM89u7BQalRAAAAII"]
[Sat Feb 28 12:38:09.250613 2026] [:error] [pid 39185:tid 39266] [client 4.205.9.11:4922] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJxMRVE-FfM89u7BQalRgAAAJQ"]
[Sat Feb 28 12:38:09.665457 2026] [:error] [pid 39185:tid 39260] [client 4.205.9.11:4999] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJxMRVE-FfM89u7BQalSgAAAI4"]
[Sat Feb 28 12:38:10.089095 2026] [:error] [pid 11791:tid 11800] [client 4.205.9.11:4921] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJxMmuX5e1Q32gqxH0K6AAAAQc"]
[Sat Feb 28 12:38:10.504139 2026] [:error] [pid 52460:tid 52483] [client 4.205.9.11:4926] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJxMrLWOogAgHGh62QZggAAAZQ"]
[Sat Feb 28 12:38:10.925873 2026] [:error] [pid 39292:tid 39316] [client 4.205.9.11:5079] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJxMqIAO5fN7BxyqcHIcAAAANY"]
[Sat Feb 28 12:38:11.337945 2026] [:error] [pid 22194:tid 22204] [client 4.205.9.11:5099] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJxM36mbajs3bzQGys4yAAAAUg"]
[Sat Feb 28 12:38:11.746715 2026] [:error] [pid 39185:tid 39248] [client 4.205.9.11:4884] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJxMxVE-FfM89u7BQalcgAAAII"]
[Sat Feb 28 12:38:12.157327 2026] [:error] [pid 52460:tid 52485] [client 4.205.9.11:4998] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJxNLLWOogAgHGh62QZhQAAAZY"]
[Sat Feb 28 12:38:12.580112 2026] [:error] [pid 39185:tid 39265] [client 4.205.9.11:4920] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJxNBVE-FfM89u7BQalfgAAAJM"]
[Sat Feb 28 12:38:13.005688 2026] [:error] [pid 22194:tid 22197] [client 4.205.9.11:5012] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJxNX6mbajs3bzQGys4ygAAAUE"]
[Sat Feb 28 12:38:13.453437 2026] [:error] [pid 39183:tid 39214] [client 4.205.9.11:5043] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "aaJxNRCf4HvhVePw3LblBQAAABY"]
[Sat Feb 28 12:38:13.952350 2026] [:error] [pid 39184:tid 39234] [client 4.205.9.11:5031] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "aaJxNVtZF9Zd_U7easDUwAAAAE8"]
[Sat Feb 28 12:38:14.371841 2026] [:error] [pid 39183:tid 39212] [client 4.205.9.11:5086] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "aaJxNhCf4HvhVePw3LblCgAAABQ"]
[Sat Feb 28 12:38:14.811305 2026] [:error] [pid 52460:tid 52481] [client 4.205.9.11:5003] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "aaJxNrLWOogAgHGh62QZkAAAAZI"]
[Sat Feb 28 12:38:15.267164 2026] [:error] [pid 52460:tid 52483] [client 4.205.9.11:5114] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJxN7LWOogAgHGh62QZlAAAAZQ"]
[Sat Feb 28 12:38:15.704551 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:4933] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJxN7LWOogAgHGh62QZmQAAAZc"]
[Sat Feb 28 12:38:16.171816 2026] [:error] [pid 39185:tid 39262] [client 4.205.9.11:5083] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJxOBVE-FfM89u7BQaliwAAAJA"]
[Sat Feb 28 12:38:16.612844 2026] [:error] [pid 11791:tid 11806] [client 4.205.9.11:4992] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJxOGuX5e1Q32gqxH0LJgAAAQ0"]
[Sat Feb 28 12:57:47.158234 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:22467] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaJ1y2uX5e1Q32gqxH0U-QAAAQA"]
[Sat Feb 28 12:57:47.684034 2026] [:error] [pid 39184:tid 39229] [client 158.158.96.194:28062] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaJ1y1tZF9Zd_U7easDZPgAAAEo"]
[Sat Feb 28 12:57:48.232226 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:32759] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaJ1zGuX5e1Q32gqxH0U_wAAAQU"]
[Sat Feb 28 12:57:49.042924 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:13416] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaJ1zWuX5e1Q32gqxH0VBAAAAQ8"]
[Sat Feb 28 12:57:49.863585 2026] [:error] [pid 39184:tid 39227] [client 158.158.96.194:23219] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon3.php"] [unique_id "aaJ1zVtZF9Zd_U7easDZRAAAAEg"]
[Sat Feb 28 12:57:50.520833 2026] [:error] [pid 39184:tid 39225] [client 158.158.96.194:39083] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon3.php"] [unique_id "aaJ1zltZF9Zd_U7easDZRgAAAEY"]
[Sat Feb 28 12:57:51.082845 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:32730] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon3.php"] [unique_id "aaJ1z6IAO5fN7BxyqcHPuwAAANU"]
[Sat Feb 28 12:57:51.766911 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:39042] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon3.php"] [unique_id "aaJ1z2uX5e1Q32gqxH0VCAAAARM"]
[Sat Feb 28 12:57:52.303679 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:33192] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thui.php"] [unique_id "aaJ10GuX5e1Q32gqxH0VCgAAAQ0"]
[Sat Feb 28 12:57:52.831783 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:33201] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thui.php"] [unique_id "aaJ10LLWOogAgHGh62QphwAAAZQ"]
[Sat Feb 28 12:57:53.618632 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:15982] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thui.php"] [unique_id "aaJ10RVE-FfM89u7BQa4MAAAAJM"]
[Sat Feb 28 12:57:54.270802 2026] [:error] [pid 11791:tid 11797] [client 158.158.96.194:1370] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thui.php"] [unique_id "aaJ10muX5e1Q32gqxH0VDgAAAQQ"]
[Sat Feb 28 12:57:55.019111 2026] [:error] [pid 52460:tid 52467] [client 158.158.96.194:15378] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJ107LWOogAgHGh62QpkgAAAYQ"]
[Sat Feb 28 12:57:55.810682 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:14510] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJ106IAO5fN7BxyqcHPwwAAANM"]
[Sat Feb 28 12:57:56.519693 2026] [:error] [pid 39185:tid 39252] [client 158.158.96.194:33179] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJ11BVE-FfM89u7BQa4QgAAAIY"]
[Sat Feb 28 12:57:57.326261 2026] [:error] [pid 11791:tid 11797] [client 158.158.96.194:28053] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJ11WuX5e1Q32gqxH0VHwAAAQQ"]
[Sat Feb 28 12:57:57.872440 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:40766] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/snq.php"] [unique_id "aaJ11RVE-FfM89u7BQa4UwAAAJY"]
[Sat Feb 28 12:57:58.601023 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:28133] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/snq.php"] [unique_id "aaJ11qIAO5fN7BxyqcHPxgAAANg"]
[Sat Feb 28 12:57:59.219188 2026] [:error] [pid 39292:tid 39296] [client 158.158.96.194:19260] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/snq.php"] [unique_id "aaJ116IAO5fN7BxyqcHPygAAAMI"]
[Sat Feb 28 12:57:59.840327 2026] [:error] [pid 11791:tid 11804] [client 158.158.96.194:15940] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/snq.php"] [unique_id "aaJ112uX5e1Q32gqxH0VKwAAAQs"]
[Sat Feb 28 12:58:00.339474 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:15366] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mcs.php"] [unique_id "aaJ12GuX5e1Q32gqxH0VLAAAARg"]
[Sat Feb 28 12:58:00.908749 2026] [:error] [pid 11791:tid 11794] [client 158.158.96.194:15373] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mcs.php"] [unique_id "aaJ12GuX5e1Q32gqxH0VLgAAAQE"]
[Sat Feb 28 12:58:01.863963 2026] [:error] [pid 39183:tid 39200] [client 158.158.96.194:19221] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mcs.php"] [unique_id "aaJ12RCf4HvhVePw3LboCgAAAAg"]
[Sat Feb 28 12:58:02.574557 2026] [:error] [pid 39184:tid 39227] [client 158.158.96.194:35660] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mcs.php"] [unique_id "aaJ12ltZF9Zd_U7easDZVQAAAEg"]
[Sat Feb 28 12:58:03.308700 2026] [:error] [pid 39183:tid 39195] [client 158.158.96.194:40726] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaJ12xCf4HvhVePw3LboDAAAAAM"]
[Sat Feb 28 12:58:04.021328 2026] [:error] [pid 11791:tid 11794] [client 158.158.96.194:28099] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaJ13GuX5e1Q32gqxH0VPAAAAQE"]
[Sat Feb 28 12:58:04.649471 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:1395] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaJ13LLWOogAgHGh62QprgAAAYI"]
[Sat Feb 28 12:58:05.317060 2026] [:error] [pid 39184:tid 39236] [client 158.158.96.194:15361] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaJ13VtZF9Zd_U7easDZWAAAAFE"]
[Sat Feb 28 12:58:06.207181 2026] [:error] [pid 52460:tid 52480] [client 158.158.96.194:18993] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aaJ13rLWOogAgHGh62QptgAAAZE"]
[Sat Feb 28 12:58:06.950906 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:40756] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aaJ13hVE-FfM89u7BQa4gAAAAI8"]
[Sat Feb 28 12:58:07.977447 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:35700] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aaJ13xVE-FfM89u7BQa4vAAAAIs"]
[Sat Feb 28 12:58:08.852911 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:16264] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "aaJ14BVE-FfM89u7BQa4xQAAAIo"]
[Sat Feb 28 12:58:09.651953 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:40760] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aaJ14bLWOogAgHGh62Qp1QAAAYY"]
[Sat Feb 28 12:58:10.495213 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:35650] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aaJ14hVE-FfM89u7BQa40wAAAJI"]
[Sat Feb 28 12:58:12.121980 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:15144] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aaJ15BVE-FfM89u7BQa43gAAAJA"]
[Sat Feb 28 12:58:13.205276 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:14971] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aaJ15RVE-FfM89u7BQa46gAAAIw"]
[Sat Feb 28 12:58:13.957971 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:14940] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJ15RVE-FfM89u7BQa47wAAAJg"]
[Sat Feb 28 12:58:14.910729 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:14954] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJ15hVE-FfM89u7BQa48QAAAIo"]
[Sat Feb 28 12:58:15.701590 2026] [:error] [pid 11791:tid 11814] [client 158.158.96.194:23103] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJ152uX5e1Q32gqxH0VVQAAARU"]
[Sat Feb 28 12:58:16.449753 2026] [:error] [pid 39292:tid 39297] [client 158.158.96.194:23044] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJ16KIAO5fN7BxyqcHP6QAAAMM"]
[Sat Feb 28 12:58:17.239658 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:48241] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaJ16WuX5e1Q32gqxH0VWAAAAQ0"]
[Sat Feb 28 12:58:17.792394 2026] [:error] [pid 11791:tid 11794] [client 158.158.96.194:31643] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaJ16WuX5e1Q32gqxH0VXAAAAQE"]
[Sat Feb 28 12:58:18.382747 2026] [:error] [pid 39184:tid 39228] [client 158.158.96.194:49912] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaJ16ltZF9Zd_U7easDZYwAAAEk"]
[Sat Feb 28 12:58:18.905043 2026] [:error] [pid 39184:tid 39243] [client 158.158.96.194:31244] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaJ16ltZF9Zd_U7easDZaAAAAFg"]
[Sat Feb 28 12:58:19.399216 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:25275] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaJ16xVE-FfM89u7BQa4-QAAAJA"]
[Sat Feb 28 12:58:20.222275 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:19722] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaJ17BVE-FfM89u7BQa4-gAAAIU"]
[Sat Feb 28 12:58:20.739014 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:31939] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaJ17LLWOogAgHGh62Qp9QAAAZQ"]
[Sat Feb 28 12:58:21.368923 2026] [:error] [pid 39292:tid 39309] [client 158.158.96.194:35515] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaJ17aIAO5fN7BxyqcHP8AAAAM8"]
[Sat Feb 28 12:58:21.950318 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:64960] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmpls.php"] [unique_id "aaJ17bLWOogAgHGh62Qp-AAAAYU"]
[Sat Feb 28 12:58:22.481378 2026] [:error] [pid 52460:tid 52479] [client 158.158.96.194:31975] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmpls.php"] [unique_id "aaJ17rLWOogAgHGh62Qp-wAAAZA"]
[Sat Feb 28 12:58:23.493211 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:40142] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmpls.php"] [unique_id "aaJ17xVE-FfM89u7BQa5AQAAAJc"]
[Sat Feb 28 12:58:24.267229 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:25233] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmpls.php"] [unique_id "aaJ18LLWOogAgHGh62QqAQAAAYg"]
[Sat Feb 28 12:58:25.457968 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:24004] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaJ18RVE-FfM89u7BQa5CwAAAIU"]
[Sat Feb 28 12:58:26.621499 2026] [:error] [pid 39184:tid 39219] [client 158.158.96.194:24043] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaJ18ltZF9Zd_U7easDZdwAAAEA"]
[Sat Feb 28 12:58:28.319329 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:9107] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaJ19BVE-FfM89u7BQa5HgAAAIw"]
[Sat Feb 28 12:58:29.237301 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:27612] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaJ19bLWOogAgHGh62QqCAAAAY4"]
[Sat Feb 28 12:58:30.104950 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:40175] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaJ19hVE-FfM89u7BQa5JwAAAIU"]
[Sat Feb 28 12:58:30.941271 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:33473] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaJ19hVE-FfM89u7BQa5LwAAAJc"]
[Sat Feb 28 12:58:32.511507 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:28574] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaJ1-BVE-FfM89u7BQa5OQAAAIM"]
[Sat Feb 28 12:58:33.586633 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:64694] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaJ1-RVE-FfM89u7BQa5QQAAAIw"]
[Sat Feb 28 12:58:34.428493 2026] [:error] [pid 39184:tid 39234] [client 158.158.96.194:17136] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws61.php"] [unique_id "aaJ1-ltZF9Zd_U7easDZeAAAAE8"]
[Sat Feb 28 12:58:35.064995 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:24048] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws61.php"] [unique_id "aaJ1-6IAO5fN7BxyqcHP-wAAANc"]
[Sat Feb 28 12:58:36.303045 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:64679] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws61.php"] [unique_id "aaJ1_BVE-FfM89u7BQa5VwAAAIg"]
[Sat Feb 28 12:58:36.875619 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:19412] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws61.php"] [unique_id "aaJ1_KIAO5fN7BxyqcHP_QAAANU"]
[Sat Feb 28 12:58:37.539456 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:40680] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaJ1_aIAO5fN7BxyqcHQAQAAAMc"]
[Sat Feb 28 12:58:38.082716 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:24548] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaJ1_rLWOogAgHGh62QqEAAAAYg"]
[Sat Feb 28 12:58:38.688299 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:40997] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaJ1_hVE-FfM89u7BQa5YgAAAJI"]
[Sat Feb 28 12:58:39.380453 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:40988] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaJ1_2uX5e1Q32gqxH0VhAAAAQw"]
[Sat Feb 28 12:58:40.058011 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:32811] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aaJ2ABVE-FfM89u7BQa5aAAAAIk"]
[Sat Feb 28 12:58:40.665241 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:28555] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aaJ2AKIAO5fN7BxyqcHQDAAAAMk"]
[Sat Feb 28 12:58:41.210688 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:28605] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aaJ2ARVE-FfM89u7BQa5cAAAAJE"]
[Sat Feb 28 12:58:42.215068 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:23669] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "aaJ2ArLWOogAgHGh62QqFQAAAYM"]
[Sat Feb 28 12:58:42.876063 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:21344] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws59.php"] [unique_id "aaJ2ArLWOogAgHGh62QqFwAAAYk"]
[Sat Feb 28 12:58:43.507118 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:32791] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws59.php"] [unique_id "aaJ2AxVE-FfM89u7BQa5fwAAAIQ"]
[Sat Feb 28 12:58:44.039039 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:28923] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws59.php"] [unique_id "aaJ2BLLWOogAgHGh62QqGQAAAZM"]
[Sat Feb 28 12:58:44.723267 2026] [:error] [pid 39184:tid 39241] [client 158.158.96.194:35157] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws59.php"] [unique_id "aaJ2BFtZF9Zd_U7easDZfAAAAFY"]
[Sat Feb 28 12:59:34.176760 2026] [:error] [pid 11791:tid 11794] [client 158.158.96.194:21339] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ze.php"] [unique_id "aaJ2NmuX5e1Q32gqxH0V-wAAAQE"]
[Sat Feb 28 12:59:34.820377 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:25329] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ze.php"] [unique_id "aaJ2NrLWOogAgHGh62Qq_AAAAYA"]
[Sat Feb 28 12:59:35.483484 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:35272] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ze.php"] [unique_id "aaJ2NxVE-FfM89u7BQa6tQAAAI4"]
[Sat Feb 28 12:59:36.227381 2026] [:error] [pid 39183:tid 39209] [client 158.158.96.194:25324] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ze.php"] [unique_id "aaJ2OBCf4HvhVePw3LboNAAAABE"]
[Sat Feb 28 12:59:36.966022 2026] [:error] [pid 39184:tid 39229] [client 158.158.96.194:35153] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file52.php"] [unique_id "aaJ2OFtZF9Zd_U7easDZnQAAAEo"]
[Sat Feb 28 12:59:37.506722 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:25297] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file52.php"] [unique_id "aaJ2OX6mbajs3bzQGys-QQAAAVg"]
[Sat Feb 28 12:59:38.247725 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:14082] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file52.php"] [unique_id "aaJ2On6mbajs3bzQGys-QwAAAVM"]
[Sat Feb 28 12:59:38.917366 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:23679] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file52.php"] [unique_id "aaJ2OhVE-FfM89u7BQa6wAAAAJE"]
[Sat Feb 28 12:59:39.575362 2026] [:error] [pid 39184:tid 39237] [client 158.158.96.194:35139] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tax.php"] [unique_id "aaJ2O1tZF9Zd_U7easDZpgAAAFI"]
[Sat Feb 28 12:59:40.590214 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:28888] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tax.php"] [unique_id "aaJ2PBVE-FfM89u7BQa6xgAAAI8"]
[Sat Feb 28 12:59:41.197152 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:33592] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tax.php"] [unique_id "aaJ2PRVE-FfM89u7BQa6ygAAAJc"]
[Sat Feb 28 12:59:41.747028 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:19031] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tax.php"] [unique_id "aaJ2PbLWOogAgHGh62QrGgAAAZY"]
[Sat Feb 28 12:59:42.444590 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:35192] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "aaJ2PhVE-FfM89u7BQa6zQAAAJM"]
[Sat Feb 28 12:59:43.096673 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:28557] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "aaJ2PxVE-FfM89u7BQa60gAAAJQ"]
[Sat Feb 28 12:59:43.837935 2026] [:error] [pid 22194:tid 22198] [client 158.158.96.194:44331] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "aaJ2P36mbajs3bzQGys-SAAAAUI"]
[Sat Feb 28 12:59:44.394667 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:32434] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "aaJ2QBVE-FfM89u7BQa63wAAAIM"]
[Sat Feb 28 12:59:45.078172 2026] [:error] [pid 52460:tid 52486] [client 158.158.96.194:21343] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aaJ2QbLWOogAgHGh62QrJQAAAZc"]
[Sat Feb 28 12:59:45.834911 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:2036] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aaJ2QbLWOogAgHGh62QrLgAAAZI"]
[Sat Feb 28 12:59:46.915586 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:28600] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aaJ2QmuX5e1Q32gqxH0WEwAAAQA"]
[Sat Feb 28 12:59:47.753157 2026] [:error] [pid 22194:tid 22203] [client 158.158.96.194:35162] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ty.php"] [unique_id "aaJ2Q36mbajs3bzQGys-UwAAAUc"]
[Sat Feb 28 12:59:48.590680 2026] [:error] [pid 22194:tid 22210] [client 158.158.96.194:40999] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/brc.php"] [unique_id "aaJ2RH6mbajs3bzQGys-WwAAAU4"]
[Sat Feb 28 12:59:49.277537 2026] [:error] [pid 22194:tid 22216] [client 158.158.96.194:32016] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/brc.php"] [unique_id "aaJ2RX6mbajs3bzQGys-YwAAAVQ"]
[Sat Feb 28 12:59:49.992702 2026] [:error] [pid 22194:tid 22217] [client 158.158.96.194:28587] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/brc.php"] [unique_id "aaJ2RX6mbajs3bzQGys-ZwAAAVU"]
[Sat Feb 28 12:59:50.850507 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:27627] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/brc.php"] [unique_id "aaJ2RmuX5e1Q32gqxH0WGwAAAQw"]
[Sat Feb 28 12:59:51.528910 2026] [:error] [pid 11791:tid 11800] [client 158.158.96.194:41016] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaJ2R2uX5e1Q32gqxH0WIAAAAQc"]
[Sat Feb 28 12:59:52.313360 2026] [:error] [pid 39292:tid 39299] [client 158.158.96.194:2016] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaJ2SKIAO5fN7BxyqcHQVgAAAMU"]
[Sat Feb 28 12:59:53.001722 2026] [:error] [pid 22194:tid 22200] [client 158.158.96.194:33496] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaJ2SX6mbajs3bzQGys-bAAAAUQ"]
[Sat Feb 28 12:59:53.871133 2026] [:error] [pid 22194:tid 22210] [client 158.158.96.194:24052] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaJ2SX6mbajs3bzQGys-bwAAAU4"]
[Sat Feb 28 12:59:54.508552 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:28560] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "aaJ2SrLWOogAgHGh62QrUwAAAZQ"]
[Sat Feb 28 12:59:55.230783 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:24526] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "aaJ2S7LWOogAgHGh62QrWwAAAYs"]
[Sat Feb 28 12:59:55.909714 2026] [:error] [pid 52460:tid 52476] [client 158.158.96.194:17126] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "aaJ2S7LWOogAgHGh62QrYQAAAY0"]
[Sat Feb 28 12:59:56.553262 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:35496] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "aaJ2TLLWOogAgHGh62QraAAAAZI"]
[Sat Feb 28 12:59:57.048402 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:27622] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fr/ms.php"] [unique_id "aaJ2TbLWOogAgHGh62QrbAAAAYs"]
[Sat Feb 28 12:59:57.574308 2026] [:error] [pid 11791:tid 11811] [client 158.158.96.194:42968] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fr/ms.php"] [unique_id "aaJ2TWuX5e1Q32gqxH0WLAAAARI"]
[Sat Feb 28 12:59:58.068931 2026] [:error] [pid 39292:tid 39302] [client 158.158.96.194:28583] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fr/ms.php"] [unique_id "aaJ2TqIAO5fN7BxyqcHQYwAAAMg"]
[Sat Feb 28 12:59:58.823200 2026] [:error] [pid 52460:tid 52479] [client 158.158.96.194:19449] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fr/ms.php"] [unique_id "aaJ2TrLWOogAgHGh62QrdQAAAZA"]
[Sat Feb 28 12:59:59.367883 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:42975] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaJ2T7LWOogAgHGh62QreAAAAYI"]
[Sat Feb 28 12:59:59.965497 2026] [:error] [pid 39183:tid 39197] [client 158.158.96.194:9104] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaJ2TxCf4HvhVePw3LboPwAAAAU"]
[Sat Feb 28 13:00:00.463668 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:42966] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaJ2UKIAO5fN7BxyqcHQZwAAANY"]
[Sat Feb 28 13:00:01.219436 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:19751] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaJ2UbLWOogAgHGh62QrgwAAAY8"]
[Sat Feb 28 13:00:01.798220 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:9128] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aaJ2UbLWOogAgHGh62QriAAAAYI"]
[Sat Feb 28 13:00:02.437954 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:19725] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aaJ2UrLWOogAgHGh62QrjgAAAYU"]
[Sat Feb 28 13:00:03.009554 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:40157] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aaJ2U7LWOogAgHGh62QrkwAAAYo"]
[Sat Feb 28 13:00:03.560237 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:31958] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aaJ2U6IAO5fN7BxyqcHQagAAANU"]
[Sat Feb 28 13:00:04.174683 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:19363] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaJ2VLLWOogAgHGh62QrmQAAAY4"]
[Sat Feb 28 13:00:04.841764 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:29808] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaJ2VLLWOogAgHGh62QrngAAAY8"]
[Sat Feb 28 13:00:05.494485 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:25240] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaJ2VbLWOogAgHGh62QrogAAAYo"]
[Sat Feb 28 13:00:06.130754 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:1978] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaJ2VhVE-FfM89u7BQa6_AAAAI4"]
[Sat Feb 28 13:00:06.734013 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:31289] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mans.php"] [unique_id "aaJ2VhVE-FfM89u7BQa6_gAAAJU"]
[Sat Feb 28 13:00:07.338674 2026] [:error] [pid 22194:tid 22200] [client 158.158.96.194:23273] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mans.php"] [unique_id "aaJ2V36mbajs3bzQGys-egAAAUQ"]
[Sat Feb 28 13:00:07.907662 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:31200] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mans.php"] [unique_id "aaJ2VxVE-FfM89u7BQa7BAAAAI8"]
[Sat Feb 28 13:00:08.405988 2026] [:error] [pid 39183:tid 39195] [client 158.158.96.194:29332] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mans.php"] [unique_id "aaJ2WBCf4HvhVePw3LboQQAAAAM"]
[Sat Feb 28 13:00:09.335568 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:15887] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rum.php"] [unique_id "aaJ2WWuX5e1Q32gqxH0WQQAAARg"]
[Sat Feb 28 13:00:10.072690 2026] [:error] [pid 39184:tid 39240] [client 158.158.96.194:14927] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rum.php"] [unique_id "aaJ2WltZF9Zd_U7easDZvQAAAFU"]
[Sat Feb 28 13:00:10.888062 2026] [:error] [pid 39185:tid 39252] [client 158.158.96.194:48192] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rum.php"] [unique_id "aaJ2WhVE-FfM89u7BQa7DwAAAIY"]
[Sat Feb 28 13:00:11.694167 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:15875] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rum.php"] [unique_id "aaJ2WxVE-FfM89u7BQa7EwAAAIk"]
[Sat Feb 28 13:00:12.310630 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:31633] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaJ2XBVE-FfM89u7BQa7GgAAAJY"]
[Sat Feb 28 13:00:12.995930 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:43315] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaJ2XGuX5e1Q32gqxH0WRAAAARM"]
[Sat Feb 28 13:00:13.748806 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:34959] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaJ2XRVE-FfM89u7BQa7JQAAAI8"]
[Sat Feb 28 13:00:14.891232 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:22829] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaJ2XhVE-FfM89u7BQa7LgAAAIk"]
[Sat Feb 28 13:00:15.699767 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:48202] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wio.php"] [unique_id "aaJ2XxVE-FfM89u7BQa7MAAAAIA"]
[Sat Feb 28 13:00:16.316106 2026] [:error] [pid 39185:tid 39253] [client 158.158.96.194:22788] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wio.php"] [unique_id "aaJ2YBVE-FfM89u7BQa7NgAAAIc"]
[Sat Feb 28 13:00:16.895482 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:29403] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wio.php"] [unique_id "aaJ2YBVE-FfM89u7BQa7OQAAAIs"]
[Sat Feb 28 13:00:17.511990 2026] [:error] [pid 11791:tid 11815] [client 158.158.96.194:31623] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wio.php"] [unique_id "aaJ2YWuX5e1Q32gqxH0WSQAAARY"]
[Sat Feb 28 13:00:18.106995 2026] [:error] [pid 22194:tid 22202] [client 158.158.96.194:22811] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clasa99.php"] [unique_id "aaJ2Yn6mbajs3bzQGys-gQAAAUY"]
[Sat Feb 28 13:00:18.850131 2026] [:error] [pid 39292:tid 39295] [client 158.158.96.194:15167] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clasa99.php"] [unique_id "aaJ2YqIAO5fN7BxyqcHQdAAAAME"]
[Sat Feb 28 13:00:19.642623 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:34970] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clasa99.php"] [unique_id "aaJ2Y7LWOogAgHGh62QrwwAAAYo"]
[Sat Feb 28 13:00:20.353471 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:15107] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clasa99.php"] [unique_id "aaJ2ZLLWOogAgHGh62QrxwAAAYk"]
[Sat Feb 28 13:00:20.913471 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:31630] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJ2ZBVE-FfM89u7BQa7QgAAAIo"]
[Sat Feb 28 13:00:21.519542 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:41801] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJ2ZRVE-FfM89u7BQa7RAAAAII"]
[Sat Feb 28 13:00:22.326850 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:65081] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJ2ZhVE-FfM89u7BQa7RwAAAJA"]
[Sat Feb 28 13:00:23.049247 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:26294] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJ2ZxVE-FfM89u7BQa7TAAAAIw"]
[Sat Feb 28 13:00:23.572609 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:49859] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws62.php"] [unique_id "aaJ2ZxVE-FfM89u7BQa7VgAAAJA"]
[Sat Feb 28 13:00:24.201890 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:26301] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws62.php"] [unique_id "aaJ2aLLWOogAgHGh62Qr1wAAAY8"]
[Sat Feb 28 13:00:24.765336 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:25953] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws62.php"] [unique_id "aaJ2aBVE-FfM89u7BQa7XwAAAIA"]
[Sat Feb 28 13:00:25.400854 2026] [:error] [pid 52460:tid 52479] [client 158.158.96.194:18291] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws62.php"] [unique_id "aaJ2abLWOogAgHGh62Qr2gAAAZA"]
[Sat Feb 28 13:00:25.973764 2026] [:error] [pid 52460:tid 52480] [client 158.158.96.194:26263] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaJ2abLWOogAgHGh62Qr2wAAAZE"]
[Sat Feb 28 13:00:26.506588 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:25970] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaJ2ahVE-FfM89u7BQa7bAAAAIA"]
[Sat Feb 28 13:00:27.170926 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:41827] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaJ2axVE-FfM89u7BQa7cgAAAJM"]
[Sat Feb 28 13:00:27.746066 2026] [:error] [pid 52460:tid 52486] [client 158.158.96.194:41799] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaJ2a7LWOogAgHGh62Qr4QAAAZc"]
[Sat Feb 28 13:00:28.268658 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:17087] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaJ2bBVE-FfM89u7BQa7fAAAAIM"]
[Sat Feb 28 13:00:28.888410 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:27658] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaJ2bBVE-FfM89u7BQa7hgAAAJU"]
[Sat Feb 28 13:00:29.703620 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:39480] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaJ2bWuX5e1Q32gqxH0WXgAAAQU"]
[Sat Feb 28 13:00:30.333473 2026] [:error] [pid 11791:tid 11797] [client 158.158.96.194:17024] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaJ2bmuX5e1Q32gqxH0WXwAAAQQ"]
[Sat Feb 28 13:00:31.245935 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:26584] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aaJ2bxVE-FfM89u7BQa7lQAAAI8"]
[Sat Feb 28 13:00:31.847097 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:18534] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "aaJ2bxVE-FfM89u7BQa7mQAAAII"]
[Sat Feb 28 13:01:27.308847 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:18297] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aaJ2pxVE-FfM89u7BQa8uwAAAIA"]
[Sat Feb 28 13:01:28.142359 2026] [:error] [pid 22194:tid 22209] [client 158.158.96.194:25925] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aaJ2qH6mbajs3bzQGys-wgAAAU0"]
[Sat Feb 28 13:01:28.922983 2026] [:error] [pid 39292:tid 39305] [client 158.158.96.194:15697] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aaJ2qKIAO5fN7BxyqcHQrwAAAMs"]
[Sat Feb 28 13:01:29.591469 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:35969] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "aaJ2qbLWOogAgHGh62QsSgAAAYg"]
[Sat Feb 28 13:01:30.224730 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:16941] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaJ2qhVE-FfM89u7BQa8xAAAAIE"]
[Sat Feb 28 13:01:31.331469 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:27652] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaJ2q7LWOogAgHGh62QsTgAAAYo"]
[Sat Feb 28 13:01:31.927994 2026] [:error] [pid 52460:tid 52464] [client 158.158.96.194:18262] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaJ2q7LWOogAgHGh62QsUAAAAYE"]
[Sat Feb 28 13:01:32.785011 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:15688] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaJ2rBVE-FfM89u7BQa8zwAAAJE"]
[Sat Feb 28 13:01:33.535642 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:15715] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c4.php"] [unique_id "aaJ2rbLWOogAgHGh62QsVgAAAYs"]
[Sat Feb 28 13:01:34.259645 2026] [:error] [pid 52460:tid 52480] [client 158.158.96.194:20155] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c4.php"] [unique_id "aaJ2rrLWOogAgHGh62QsVwAAAZE"]
[Sat Feb 28 13:01:34.990966 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:16912] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c4.php"] [unique_id "aaJ2rhVE-FfM89u7BQa80wAAAJg"]
[Sat Feb 28 13:01:35.636967 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:29389] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/c4.php"] [unique_id "aaJ2rxVE-FfM89u7BQa81wAAAIM"]
[Sat Feb 28 13:01:36.429106 2026] [:error] [pid 52460:tid 52467] [client 158.158.96.194:16923] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eauu.php"] [unique_id "aaJ2sLLWOogAgHGh62QsYgAAAYQ"]
[Sat Feb 28 13:01:37.325667 2026] [:error] [pid 39184:tid 39238] [client 158.158.96.194:27694] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eauu.php"] [unique_id "aaJ2sVtZF9Zd_U7easDZ4wAAAFM"]
[Sat Feb 28 13:01:37.959154 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:29433] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eauu.php"] [unique_id "aaJ2sRVE-FfM89u7BQa85AAAAIw"]
[Sat Feb 28 13:01:38.629883 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:65026] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eauu.php"] [unique_id "aaJ2shVE-FfM89u7BQa86QAAAIs"]
[Sat Feb 28 13:01:39.542811 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:65032] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fasx.php"] [unique_id "aaJ2s7LWOogAgHGh62QsaQAAAZQ"]
[Sat Feb 28 13:01:40.268150 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:65031] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fasx.php"] [unique_id "aaJ2tBVE-FfM89u7BQa88QAAAIs"]
[Sat Feb 28 13:01:40.907045 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:1131] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fasx.php"] [unique_id "aaJ2tBVE-FfM89u7BQa89AAAAIg"]
[Sat Feb 28 13:01:41.739234 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:22217] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fasx.php"] [unique_id "aaJ2tRVE-FfM89u7BQa89gAAAIM"]
[Sat Feb 28 13:01:42.447559 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:17845] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "aaJ2thVE-FfM89u7BQa8-QAAAIw"]
[Sat Feb 28 13:01:43.260993 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:17831] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "aaJ2txVE-FfM89u7BQa8-wAAAIQ"]
[Sat Feb 28 13:01:44.090271 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:17850] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "aaJ2uBVE-FfM89u7BQa8_QAAAJU"]
[Sat Feb 28 13:01:44.640049 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:20128] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "aaJ2uGuX5e1Q32gqxH0WwgAAARM"]
[Sat Feb 28 13:01:45.337655 2026] [:error] [pid 22194:tid 22200] [client 158.158.96.194:17848] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nzv.php"] [unique_id "aaJ2uX6mbajs3bzQGys-zQAAAUQ"]
[Sat Feb 28 13:01:45.916845 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:15718] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nzv.php"] [unique_id "aaJ2ubLWOogAgHGh62QsdgAAAYg"]
[Sat Feb 28 13:01:46.692919 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:27671] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nzv.php"] [unique_id "aaJ2urLWOogAgHGh62QseAAAAZY"]
[Sat Feb 28 13:01:47.193226 2026] [:error] [pid 11791:tid 11794] [client 158.158.96.194:1805] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nzv.php"] [unique_id "aaJ2u2uX5e1Q32gqxH0WxgAAAQE"]
[Sat Feb 28 13:01:47.944045 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:20149] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaJ2u7LWOogAgHGh62QsewAAAYI"]
[Sat Feb 28 13:01:48.755453 2026] [:error] [pid 22194:tid 22216] [client 158.158.96.194:29069] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaJ2vH6mbajs3bzQGys-0wAAAVQ"]
[Sat Feb 28 13:01:49.513279 2026] [:error] [pid 39183:tid 39202] [client 158.158.96.194:27670] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaJ2vRCf4HvhVePw3LbobAAAAAo"]
[Sat Feb 28 13:01:50.587089 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:23257] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaJ2vhVE-FfM89u7BQa9BgAAAJU"]
[Sat Feb 28 13:01:51.315249 2026] [:error] [pid 39184:tid 39229] [client 158.158.96.194:29399] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aaJ2v1tZF9Zd_U7easDZ5gAAAEo"]
[Sat Feb 28 13:01:52.034018 2026] [:error] [pid 52460:tid 52476] [client 158.158.96.194:29418] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aaJ2wLLWOogAgHGh62QsgwAAAY0"]
[Sat Feb 28 13:01:52.951042 2026] [:error] [pid 11791:tid 11802] [client 158.158.96.194:17814] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aaJ2wGuX5e1Q32gqxH0W1gAAAQk"]
[Sat Feb 28 13:01:53.598732 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:1794] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aaJ2wbLWOogAgHGh62QshgAAAZQ"]
[Sat Feb 28 13:01:54.108461 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:1118] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nhr.php"] [unique_id "aaJ2wmuX5e1Q32gqxH0W2QAAAQ4"]
[Sat Feb 28 13:01:54.608222 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:17838] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nhr.php"] [unique_id "aaJ2wrLWOogAgHGh62QsiwAAAYs"]
[Sat Feb 28 13:01:55.116068 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:65058] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nhr.php"] [unique_id "aaJ2w2uX5e1Q32gqxH0W3wAAAQ0"]
[Sat Feb 28 13:01:55.744508 2026] [:error] [pid 39292:tid 39306] [client 158.158.96.194:15720] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nhr.php"] [unique_id "aaJ2w6IAO5fN7BxyqcHQzAAAAMw"]
[Sat Feb 28 13:01:56.295686 2026] [:error] [pid 52460:tid 52479] [client 158.158.96.194:65043] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaJ2xLLWOogAgHGh62QsoAAAAZA"]
[Sat Feb 28 13:01:56.847590 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:29074] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaJ2xBVE-FfM89u7BQa9FAAAAIg"]
[Sat Feb 28 13:01:57.572771 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:29406] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaJ2xRVE-FfM89u7BQa9FgAAAJM"]
[Sat Feb 28 13:01:58.329570 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:29411] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaJ2xrLWOogAgHGh62QspwAAAZI"]
[Sat Feb 28 13:01:58.902002 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:22263] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "aaJ2xhVE-FfM89u7BQa9GgAAAIQ"]
[Sat Feb 28 13:01:59.564878 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:35982] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "aaJ2x2uX5e1Q32gqxH0W6QAAARM"]
[Sat Feb 28 13:02:00.327181 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:29401] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "aaJ2yBVE-FfM89u7BQa9IwAAAI8"]
[Sat Feb 28 13:02:00.886527 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:17834] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "aaJ2yLLWOogAgHGh62QsqQAAAZI"]
[Sat Feb 28 13:02:01.411590 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:22210] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1061.php"] [unique_id "aaJ2ybLWOogAgHGh62QsrAAAAYU"]
[Sat Feb 28 13:02:01.994692 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:1088] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1061.php"] [unique_id "aaJ2ybLWOogAgHGh62QsrwAAAYI"]
[Sat Feb 28 13:02:03.472984 2026] [:error] [pid 39185:tid 39253] [client 158.158.96.194:65057] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1061.php"] [unique_id "aaJ2yxVE-FfM89u7BQa9KwAAAIc"]
[Sat Feb 28 13:02:04.290176 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:65062] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1061.php"] [unique_id "aaJ2zLLWOogAgHGh62QsuQAAAYU"]
[Sat Feb 28 13:02:04.985722 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:16958] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq13.php"] [unique_id "aaJ2zLLWOogAgHGh62QsvQAAAZI"]
[Sat Feb 28 13:02:05.694605 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:27664] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq13.php"] [unique_id "aaJ2zRVE-FfM89u7BQa9OgAAAI4"]
[Sat Feb 28 13:02:06.638406 2026] [:error] [pid 39184:tid 39235] [client 158.158.96.194:17829] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq13.php"] [unique_id "aaJ2zltZF9Zd_U7easDZ7QAAAFA"]
[Sat Feb 28 13:02:07.407176 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:18288] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq13.php"] [unique_id "aaJ2z7LWOogAgHGh62QsxgAAAY8"]
[Sat Feb 28 13:02:07.983512 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:22208] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hello.php"] [unique_id "aaJ2zxVE-FfM89u7BQa9QwAAAJA"]
[Sat Feb 28 13:02:08.570201 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:65056] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hello.php"] [unique_id "aaJ20BVE-FfM89u7BQa9RwAAAIA"]
[Sat Feb 28 13:02:09.199020 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:1125] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hello.php"] [unique_id "aaJ20RVE-FfM89u7BQa9SwAAAJA"]
[Sat Feb 28 13:02:09.740427 2026] [:error] [pid 22194:tid 22211] [client 158.158.96.194:15705] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hello.php"] [unique_id "aaJ20X6mbajs3bzQGys-2wAAAU8"]
[Sat Feb 28 13:02:10.349297 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:29432] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/05.php"] [unique_id "aaJ20n6mbajs3bzQGys-3QAAAVM"]
[Sat Feb 28 13:02:10.906053 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:16943] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/05.php"] [unique_id "aaJ20muX5e1Q32gqxH0W9gAAARQ"]
[Sat Feb 28 13:02:11.775964 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:27649] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/05.php"] [unique_id "aaJ202uX5e1Q32gqxH0W-gAAAQA"]
[Sat Feb 28 13:02:13.271300 2026] [:error] [pid 22194:tid 22216] [client 158.158.96.194:18282] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/05.php"] [unique_id "aaJ21X6mbajs3bzQGys-5wAAAVQ"]
[Sat Feb 28 13:02:14.061286 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:1837] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxin.php"] [unique_id "aaJ21muX5e1Q32gqxH0XCQAAAQY"]
[Sat Feb 28 13:02:15.053193 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:20107] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxin.php"] [unique_id "aaJ216IAO5fN7BxyqcHQ2gAAANc"]
[Sat Feb 28 13:02:15.833521 2026] [:error] [pid 22194:tid 22199] [client 158.158.96.194:1828] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxin.php"] [unique_id "aaJ2136mbajs3bzQGys-6QAAAUM"]
[Sat Feb 28 13:02:16.498888 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:22242] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zxin.php"] [unique_id "aaJ22LLWOogAgHGh62Qs2QAAAZM"]
[Sat Feb 28 13:02:17.441624 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:20144] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaJ22bLWOogAgHGh62Qs3wAAAYs"]
[Sat Feb 28 13:02:18.286096 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:1089] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaJ22hVE-FfM89u7BQa9VwAAAIs"]
[Sat Feb 28 13:02:18.884853 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:23256] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaJ22muX5e1Q32gqxH0XFQAAAQY"]
[Sat Feb 28 13:02:19.525720 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:16910] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaJ227LWOogAgHGh62Qs6AAAAZU"]
[Sat Feb 28 13:02:20.107659 2026] [:error] [pid 39183:tid 39215] [client 158.158.96.194:18261] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaJ23BCf4HvhVePw3LbodAAAABc"]
[Sat Feb 28 13:02:20.719309 2026] [:error] [pid 22194:tid 22206] [client 158.158.96.194:29390] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaJ23H6mbajs3bzQGys-6gAAAUo"]
[Sat Feb 28 13:02:21.429723 2026] [:error] [pid 39292:tid 39304] [client 158.158.96.194:29424] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaJ23aIAO5fN7BxyqcHQ5AAAAMo"]
[Sat Feb 28 13:02:22.296003 2026] [:error] [pid 39292:tid 39312] [client 158.158.96.194:49874] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaJ23qIAO5fN7BxyqcHQ5gAAANI"]
[Sat Feb 28 13:02:23.107017 2026] [:error] [pid 11791:tid 11801] [client 158.158.96.194:1141] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaJ232uX5e1Q32gqxH0XJwAAAQg"]
[Sat Feb 28 13:02:23.708075 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:1840] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaJ23xVE-FfM89u7BQa9XQAAAJc"]
[Sat Feb 28 13:03:19.540652 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:1806] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaJ3FxVE-FfM89u7BQa-egAAAIw"]
[Sat Feb 28 13:03:20.358813 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:21921] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaJ3GLLWOogAgHGh62QtegAAAZI"]
[Sat Feb 28 13:03:20.903433 2026] [:error] [pid 22194:tid 22196] [client 158.158.96.194:31587] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaJ3GH6mbajs3bzQGys_SwAAAUA"]
[Sat Feb 28 13:03:21.580471 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:21944] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaJ3GWuX5e1Q32gqxH0XvwAAAQw"]
[Sat Feb 28 13:03:22.374681 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:20136] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaJ3GrLWOogAgHGh62QtkAAAAYw"]
[Sat Feb 28 13:03:22.888547 2026] [:error] [pid 52460:tid 52467] [client 158.158.96.194:1138] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaJ3GrLWOogAgHGh62QtmAAAAYQ"]
[Sat Feb 28 13:03:23.609813 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:31606] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaJ3GxVE-FfM89u7BQa-hgAAAJM"]
[Sat Feb 28 13:03:24.760127 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:15713] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaJ3HBVE-FfM89u7BQa-kQAAAJQ"]
[Sat Feb 28 13:03:25.791273 2026] [:error] [pid 22194:tid 22203] [client 158.158.96.194:1969] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rpk.php"] [unique_id "aaJ3HX6mbajs3bzQGys_WAAAAUc"]
[Sat Feb 28 13:03:26.635614 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:1953] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rpk.php"] [unique_id "aaJ3HhVE-FfM89u7BQa-lwAAAIU"]
[Sat Feb 28 13:03:27.484276 2026] [:error] [pid 39184:tid 39222] [client 158.158.96.194:15739] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rpk.php"] [unique_id "aaJ3H1tZF9Zd_U7easDaNgAAAEM"]
[Sat Feb 28 13:03:28.305134 2026] [:error] [pid 39292:tid 39312] [client 158.158.96.194:17412] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rpk.php"] [unique_id "aaJ3IKIAO5fN7BxyqcHRYAAAANI"]
[Sat Feb 28 13:03:29.312265 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:14160] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaJ3IRVE-FfM89u7BQa-pQAAAJA"]
[Sat Feb 28 13:03:30.562201 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:17847] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaJ3IrLWOogAgHGh62QtuQAAAZY"]
[Sat Feb 28 13:03:31.243857 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:17450] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaJ3IxVE-FfM89u7BQa-sgAAAIw"]
[Sat Feb 28 13:03:31.998738 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:14853] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaJ3IxVE-FfM89u7BQa-uAAAAIE"]
[Sat Feb 28 13:03:33.180383 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:21936] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaJ3JRVE-FfM89u7BQa-wwAAAII"]
[Sat Feb 28 13:03:34.057792 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:22215] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaJ3JqIAO5fN7BxyqcHRZgAAAM0"]
[Sat Feb 28 13:03:34.837274 2026] [:error] [pid 39185:tid 39259] [client 158.158.96.194:17423] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaJ3JhVE-FfM89u7BQa-yQAAAI0"]
[Sat Feb 28 13:03:35.455050 2026] [:error] [pid 39183:tid 39205] [client 158.158.96.194:1844] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaJ3JxCf4HvhVePw3Lbo0AAAAA0"]
[Sat Feb 28 13:03:36.045371 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:31577] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e.php"] [unique_id "aaJ3KGuX5e1Q32gqxH0X2QAAAQ8"]
[Sat Feb 28 13:03:36.720008 2026] [:error] [pid 39292:tid 39309] [client 158.158.96.194:1116] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e.php"] [unique_id "aaJ3KKIAO5fN7BxyqcHRbQAAAM8"]
[Sat Feb 28 13:03:37.369988 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:16919] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e.php"] [unique_id "aaJ3KX6mbajs3bzQGys_bwAAAVg"]
[Sat Feb 28 13:03:38.254370 2026] [:error] [pid 52460:tid 52470] [client 158.158.96.194:31575] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e.php"] [unique_id "aaJ3KrLWOogAgHGh62QtzwAAAYc"]
[Sat Feb 28 13:03:38.791548 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:1147] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaJ3KrLWOogAgHGh62Qt2AAAAZU"]
[Sat Feb 28 13:03:39.350652 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:14859] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaJ3K7LWOogAgHGh62Qt2wAAAZQ"]
[Sat Feb 28 13:03:39.871595 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:28610] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaJ3KxVE-FfM89u7BQa-zwAAAIg"]
[Sat Feb 28 13:03:40.379556 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:17796] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaJ3LBVE-FfM89u7BQa-0wAAAI4"]
[Sat Feb 28 13:03:40.906028 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:39549] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "aaJ3LBVE-FfM89u7BQa-2AAAAIk"]
[Sat Feb 28 13:03:41.518627 2026] [:error] [pid 39184:tid 39225] [client 158.158.96.194:17835] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "aaJ3LVtZF9Zd_U7easDaRQAAAEY"]
[Sat Feb 28 13:03:42.123571 2026] [:error] [pid 11791:tid 11794] [client 158.158.96.194:1979] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "aaJ3LmuX5e1Q32gqxH0X5AAAAQE"]
[Sat Feb 28 13:03:42.616025 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:31576] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "aaJ3LhVE-FfM89u7BQa-4QAAAJU"]
[Sat Feb 28 13:03:43.130448 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:62125] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaJ3L7LWOogAgHGh62Qt7AAAAY8"]
[Sat Feb 28 13:03:43.710124 2026] [:error] [pid 39185:tid 39259] [client 158.158.96.194:20116] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaJ3LxVE-FfM89u7BQa-7wAAAI0"]
[Sat Feb 28 13:03:44.262638 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:25570] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaJ3MLLWOogAgHGh62Qt9QAAAY4"]
[Sat Feb 28 13:03:44.767322 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:1106] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaJ3MGuX5e1Q32gqxH0X6gAAAQU"]
[Sat Feb 28 13:03:45.262458 2026] [:error] [pid 39184:tid 39242] [client 158.158.96.194:28619] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/get.php"] [unique_id "aaJ3MVtZF9Zd_U7easDaSgAAAFc"]
[Sat Feb 28 13:03:45.753083 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:14177] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/get.php"] [unique_id "aaJ3MbLWOogAgHGh62Qt-gAAAYw"]
[Sat Feb 28 13:03:46.294795 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:25599] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/get.php"] [unique_id "aaJ3MhVE-FfM89u7BQa-9gAAAIA"]
[Sat Feb 28 13:03:46.865433 2026] [:error] [pid 11791:tid 11802] [client 158.158.96.194:21941] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/get.php"] [unique_id "aaJ3MmuX5e1Q32gqxH0X8wAAAQk"]
[Sat Feb 28 13:03:47.560079 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:14906] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaJ3M2uX5e1Q32gqxH0X-gAAAQY"]
[Sat Feb 28 13:03:48.130598 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:25545] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaJ3NLLWOogAgHGh62QuAAAAAYY"]
[Sat Feb 28 13:03:48.632770 2026] [:error] [pid 39184:tid 39241] [client 158.158.96.194:25563] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaJ3NFtZF9Zd_U7easDaTwAAAFY"]
[Sat Feb 28 13:03:49.257742 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:62117] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aaJ3NbLWOogAgHGh62QuCwAAAZU"]
[Sat Feb 28 13:03:50.007920 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:17456] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaJ3NhVE-FfM89u7BQa_BQAAAJA"]
[Sat Feb 28 13:03:50.573754 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:25300] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaJ3NmuX5e1Q32gqxH0YAwAAARc"]
[Sat Feb 28 13:03:51.115640 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:1149] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaJ3N7LWOogAgHGh62QuIQAAAZU"]
[Sat Feb 28 13:03:51.634482 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:28867] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaJ3N7LWOogAgHGh62QuKgAAAYo"]
[Sat Feb 28 13:03:52.183184 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:35158] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaJ3OLLWOogAgHGh62QuLQAAAY4"]
[Sat Feb 28 13:03:52.725493 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:25579] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaJ3OBVE-FfM89u7BQa_FAAAAJE"]
[Sat Feb 28 13:03:53.231302 2026] [:error] [pid 39184:tid 39220] [client 158.158.96.194:44324] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaJ3OVtZF9Zd_U7easDaUgAAAEE"]
[Sat Feb 28 13:03:53.900213 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:32778] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaJ3ORVE-FfM89u7BQa_HQAAAJQ"]
[Sat Feb 28 13:03:54.398214 2026] [:error] [pid 11791:tid 11803] [client 158.158.96.194:32440] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/raw.php"] [unique_id "aaJ3OmuX5e1Q32gqxH0YFgAAAQo"]
[Sat Feb 28 13:03:54.943218 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:35180] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/raw.php"] [unique_id "aaJ3OhVE-FfM89u7BQa_JwAAAIk"]
[Sat Feb 28 13:03:55.542006 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:35137] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/raw.php"] [unique_id "aaJ3OxVE-FfM89u7BQa_LgAAAJg"]
[Sat Feb 28 13:03:56.095570 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:28637] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/raw.php"] [unique_id "aaJ3PBVE-FfM89u7BQa_NgAAAIo"]
[Sat Feb 28 13:03:56.807995 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:2008] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aaJ3PLLWOogAgHGh62QuNQAAAYM"]
[Sat Feb 28 13:03:57.289447 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:32820] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aaJ3PWuX5e1Q32gqxH0YGgAAARc"]
[Sat Feb 28 13:03:57.880941 2026] [:error] [pid 22194:tid 22200] [client 158.158.96.194:2014] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aaJ3PX6mbajs3bzQGys_dQAAAUQ"]
[Sat Feb 28 13:03:58.369823 2026] [:error] [pid 11791:tid 11809] [client 158.158.96.194:14089] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aaJ3PmuX5e1Q32gqxH0YHwAAARA"]
[Sat Feb 28 13:03:58.950918 2026] [:error] [pid 39185:tid 39253] [client 158.158.96.194:35154] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rtx.php"] [unique_id "aaJ3PhVE-FfM89u7BQa_QgAAAIc"]
[Sat Feb 28 13:03:59.600847 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:32423] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rtx.php"] [unique_id "aaJ3P2uX5e1Q32gqxH0YIQAAAQY"]
[Sat Feb 28 13:04:00.204154 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:40681] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rtx.php"] [unique_id "aaJ3QBVE-FfM89u7BQa_SwAAAIA"]
[Sat Feb 28 13:04:00.770506 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:32799] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rtx.php"] [unique_id "aaJ3QLLWOogAgHGh62QuPgAAAZU"]
[Sat Feb 28 13:04:01.380796 2026] [:error] [pid 11791:tid 11814] [client 158.158.96.194:28926] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aaJ3QWuX5e1Q32gqxH0YLQAAARU"]
[Sat Feb 28 13:04:01.989003 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:44345] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aaJ3QbLWOogAgHGh62QuRAAAAYg"]
[Sat Feb 28 13:04:02.482028 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:23626] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aaJ3QqIAO5fN7BxyqcHRlgAAANQ"]
[Sat Feb 28 13:04:02.967771 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:35139] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "aaJ3QhVE-FfM89u7BQa_YAAAAJc"]
[Sat Feb 28 13:04:03.516199 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:24009] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaJ3QxVE-FfM89u7BQa_ZAAAAJI"]
[Sat Feb 28 13:04:04.082940 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:64656] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaJ3RBVE-FfM89u7BQa_aAAAAJE"]
[Sat Feb 28 13:04:04.627645 2026] [:error] [pid 52460:tid 52476] [client 158.158.96.194:21373] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaJ3RLLWOogAgHGh62QuTgAAAY0"]
[Sat Feb 28 13:04:05.236304 2026] [:error] [pid 11791:tid 11815] [client 158.158.96.194:40974] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaJ3RWuX5e1Q32gqxH0YMwAAARY"]
[Sat Feb 28 13:04:05.726947 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:43007] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaJ3RWuX5e1Q32gqxH0YNgAAAQU"]
[Sat Feb 28 13:04:06.215848 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:64670] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaJ3RrLWOogAgHGh62QuWgAAAYI"]
[Sat Feb 28 13:04:06.753202 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:24536] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaJ3RrLWOogAgHGh62QuXgAAAZM"]
[Sat Feb 28 13:04:07.845910 2026] [:error] [pid 39183:tid 39216] [client 158.158.96.194:42982] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaJ3RxCf4HvhVePw3Lbo4QAAABg"]
[Sat Feb 28 13:04:08.494134 2026] [:error] [pid 39183:tid 39210] [client 158.158.96.194:24011] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aaJ3SBCf4HvhVePw3Lbo4wAAABI"]
[Sat Feb 28 13:04:09.394465 2026] [:error] [pid 22194:tid 22206] [client 158.158.96.194:19398] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aaJ3SX6mbajs3bzQGys_fAAAAUo"]
[Sat Feb 28 13:04:10.248686 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:35466] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aaJ3Sn6mbajs3bzQGys_gAAAAVg"]
[Sat Feb 28 13:04:11.200891 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:42947] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "aaJ3SxVE-FfM89u7BQa_jgAAAIw"]
[Sat Feb 28 13:04:12.123223 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:20957] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aaJ3TBVE-FfM89u7BQa_mwAAAIE"]
[Sat Feb 28 13:04:12.622134 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:27621] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aaJ3TLLWOogAgHGh62QudQAAAZM"]
[Sat Feb 28 13:04:13.231260 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:33496] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aaJ3TWuX5e1Q32gqxH0YTAAAAQw"]
[Sat Feb 28 13:04:14.144588 2026] [:error] [pid 39183:tid 39199] [client 158.158.96.194:19445] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aaJ3ThCf4HvhVePw3Lbo6gAAAAc"]
[Sat Feb 28 13:04:14.697107 2026] [:error] [pid 52460:tid 52470] [client 158.158.96.194:25239] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "aaJ3TrLWOogAgHGh62QueQAAAYc"]
[Sat Feb 28 13:04:15.462742 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:19421] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "aaJ3T7LWOogAgHGh62QufgAAAYM"]
[Sat Feb 28 13:04:16.337426 2026] [:error] [pid 52460:tid 52487] [client 158.158.96.194:35480] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "aaJ3ULLWOogAgHGh62QugwAAAZg"]
[Sat Feb 28 13:05:14.529763 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:19745] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaJ3imuX5e1Q32gqxH0ZLQAAARM"]
[Sat Feb 28 13:05:15.265020 2026] [:error] [pid 39183:tid 39210] [client 158.158.96.194:15639] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaJ3ixCf4HvhVePw3LbpCwAAABI"]
[Sat Feb 28 13:05:16.238312 2026] [:error] [pid 39183:tid 39206] [client 158.158.96.194:22418] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaJ3jBCf4HvhVePw3LbpDgAAAA4"]
[Sat Feb 28 13:05:16.836002 2026] [:error] [pid 39183:tid 39197] [client 158.158.96.194:62069] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaJ3jBCf4HvhVePw3LbpEgAAAAU"]
[Sat Feb 28 13:05:18.059846 2026] [:error] [pid 52460:tid 52487] [client 158.158.96.194:13818] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJ3jrLWOogAgHGh62QvhQAAAZg"]
[Sat Feb 28 13:05:18.822610 2026] [:error] [pid 39184:tid 39242] [client 158.158.96.194:18799] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJ3jltZF9Zd_U7easDakwAAAFc"]
[Sat Feb 28 13:05:19.457594 2026] [:error] [pid 39184:tid 39228] [client 158.158.96.194:14544] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJ3j1tZF9Zd_U7easDalgAAAEk"]
[Sat Feb 28 13:05:20.290366 2026] [:error] [pid 39292:tid 39312] [client 158.158.96.194:18207] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJ3kKIAO5fN7BxyqcHSNwAAANI"]
[Sat Feb 28 13:05:20.939813 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:18791] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aaJ3kLLWOogAgHGh62QvhgAAAYY"]
[Sat Feb 28 13:05:21.680191 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:20582] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aaJ3kRVE-FfM89u7BQbBZQAAAII"]
[Sat Feb 28 13:05:22.395633 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:1898] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aaJ3khVE-FfM89u7BQbBbgAAAJY"]
[Sat Feb 28 13:05:23.025330 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:15678] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aaJ3k7LWOogAgHGh62QviQAAAY4"]
[Sat Feb 28 13:05:23.540659 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:29151] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.kb.php"] [unique_id "aaJ3k6IAO5fN7BxyqcHSPQAAAMc"]
[Sat Feb 28 13:05:24.168376 2026] [:error] [pid 39292:tid 39308] [client 158.158.96.194:15629] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.kb.php"] [unique_id "aaJ3lKIAO5fN7BxyqcHSQAAAAM4"]
[Sat Feb 28 13:05:24.768887 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:20506] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.kb.php"] [unique_id "aaJ3lBVE-FfM89u7BQbBgQAAAIU"]
[Sat Feb 28 13:05:26.166736 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:34023] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.kb.php"] [unique_id "aaJ3lhVE-FfM89u7BQbBkQAAAJM"]
[Sat Feb 28 13:05:27.233398 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:29736] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aaJ3lxVE-FfM89u7BQbBngAAAJc"]
[Sat Feb 28 13:05:27.921358 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:14534] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aaJ3l2uX5e1Q32gqxH0ZTQAAARc"]
[Sat Feb 28 13:05:28.695477 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:34042] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aaJ3mBVE-FfM89u7BQbBrgAAAIM"]
[Sat Feb 28 13:05:29.689748 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:20576] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aaJ3mbLWOogAgHGh62QvkQAAAZM"]
[Sat Feb 28 13:35:22.659543 2026] [:error] [pid 39185:tid 39264] [client 45.153.34.31:53770] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aaJ-mhVE-FfM89u7BQbeyQAAAJI"]
[Sat Feb 28 15:13:15.978248 2026] [:error] [pid 39185:tid 39255] [client 20.251.116.241:35300] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file59.php"] [unique_id "aaKVixVE-FfM89u7BQZDsQAAAIk"]
[Sat Feb 28 15:13:18.526330 2026] [:error] [pid 11791:tid 11810] [client 20.251.116.241:50654] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file59.php"] [unique_id "aaKVjmuX5e1Q32gqxH1ZgwAAARE"]
[Sat Feb 28 15:13:20.501530 2026] [:error] [pid 22194:tid 22204] [client 20.251.116.241:41263] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file59.php"] [unique_id "aaKVkH6mbajs3bzQGytjVQAAAUg"]
[Sat Feb 28 15:13:22.442911 2026] [:error] [pid 39292:tid 39297] [client 20.251.116.241:47458] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file59.php"] [unique_id "aaKVkqIAO5fN7BxyqcH7awAAAMM"]
[Sat Feb 28 15:13:25.507556 2026] [:error] [pid 39185:tid 39266] [client 20.251.116.241:47459] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fff.php"] [unique_id "aaKVlRVE-FfM89u7BQZD3gAAAJQ"]
[Sat Feb 28 15:13:26.946085 2026] [:error] [pid 22194:tid 22214] [client 20.251.116.241:31958] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fff.php"] [unique_id "aaKVln6mbajs3bzQGytjWQAAAVI"]
[Sat Feb 28 15:13:28.630520 2026] [:error] [pid 39292:tid 39310] [client 20.251.116.241:40395] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fff.php"] [unique_id "aaKVmKIAO5fN7BxyqcH7cwAAANA"]
[Sat Feb 28 15:13:30.828876 2026] [:error] [pid 52460:tid 52467] [client 20.251.116.241:43103] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fff.php"] [unique_id "aaKVmrLWOogAgHGh62SKfQAAAYQ"]
[Sat Feb 28 15:13:31.663649 2026] [:error] [pid 39292:tid 39294] [client 20.251.116.241:50640] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaKVm6IAO5fN7BxyqcH7eAAAAMA"]
[Sat Feb 28 15:13:35.533827 2026] [:error] [pid 39184:tid 39230] [client 20.251.116.241:40603] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaKVn1tZF9Zd_U7easD2DgAAAEs"]
[Sat Feb 28 15:13:44.005210 2026] [:error] [pid 39184:tid 39234] [client 20.251.116.241:35318] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaKVqFtZF9Zd_U7easD2IgAAAE8"]
[Sat Feb 28 15:13:47.929132 2026] [:error] [pid 39292:tid 39305] [client 20.251.116.241:48852] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaKVq6IAO5fN7BxyqcH7pgAAAMs"]
[Sat Feb 28 15:13:50.149361 2026] [:error] [pid 52460:tid 52478] [client 20.251.116.241:37239] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaKVrrLWOogAgHGh62SKpAAAAY8"]
[Sat Feb 28 15:13:52.277726 2026] [:error] [pid 39184:tid 39236] [client 20.251.116.241:31984] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaKVsFtZF9Zd_U7easD2LwAAAFE"]
[Sat Feb 28 15:13:55.245448 2026] [:error] [pid 52460:tid 52465] [client 20.251.116.241:39594] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaKVs7LWOogAgHGh62SKugAAAYI"]
[Sat Feb 28 15:13:56.418060 2026] [:error] [pid 39184:tid 39234] [client 20.251.116.241:35277] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpver.php"] [unique_id "aaKVtFtZF9Zd_U7easD2NgAAAE8"]
[Sat Feb 28 15:13:58.843163 2026] [:error] [pid 39184:tid 39228] [client 20.251.116.241:40694] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpver.php"] [unique_id "aaKVtltZF9Zd_U7easD2OgAAAEk"]
[Sat Feb 28 15:14:03.712061 2026] [:error] [pid 39185:tid 39266] [client 20.251.116.241:33743] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpver.php"] [unique_id "aaKVuxVE-FfM89u7BQZEegAAAJQ"]
[Sat Feb 28 15:14:05.965567 2026] [:error] [pid 52460:tid 52468] [client 20.251.116.241:44007] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpver.php"] [unique_id "aaKVvbLWOogAgHGh62SK5gAAAYU"]
[Sat Feb 28 15:14:07.793359 2026] [:error] [pid 52460:tid 52475] [client 20.251.116.241:35295] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/hi.php"] [unique_id "aaKVv7LWOogAgHGh62SK8wAAAYw"]
[Sat Feb 28 15:14:15.808933 2026] [:error] [pid 39185:tid 39267] [client 20.251.116.241:35292] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/hi.php"] [unique_id "aaKVxxVE-FfM89u7BQZEwQAAAJU"]
[Sat Feb 28 15:14:17.340063 2026] [:error] [pid 39185:tid 39247] [client 20.251.116.241:47998] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/hi.php"] [unique_id "aaKVyRVE-FfM89u7BQZEzQAAAIE"]
[Sat Feb 28 15:14:20.111281 2026] [:error] [pid 11791:tid 11802] [client 20.251.116.241:40666] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/hi.php"] [unique_id "aaKVzGuX5e1Q32gqxH1ahAAAAQk"]
[Sat Feb 28 15:14:23.785650 2026] [:error] [pid 39185:tid 39267] [client 20.251.116.241:40445] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z.php"] [unique_id "aaKVzxVE-FfM89u7BQZE5QAAAJU"]
[Sat Feb 28 15:14:26.485979 2026] [:error] [pid 39185:tid 39248] [client 20.251.116.241:35582] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z.php"] [unique_id "aaKV0hVE-FfM89u7BQZE_gAAAII"]
[Sat Feb 28 15:14:27.464257 2026] [:error] [pid 39185:tid 39268] [client 20.251.116.241:50646] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z.php"] [unique_id "aaKV0xVE-FfM89u7BQZFBwAAAJY"]
[Sat Feb 28 15:14:29.065976 2026] [:error] [pid 39292:tid 39300] [client 20.251.116.241:35524] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/z.php"] [unique_id "aaKV1aIAO5fN7BxyqcH73wAAAMY"]
[Sat Feb 28 15:14:29.975351 2026] [:error] [pid 39185:tid 39255] [client 20.251.116.241:43777] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aaKV1RVE-FfM89u7BQZFEgAAAIk"]
[Sat Feb 28 15:14:31.347828 2026] [:error] [pid 52460:tid 52464] [client 20.251.116.241:34748] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aaKV17LWOogAgHGh62SLUAAAAYE"]
[Sat Feb 28 15:14:34.138061 2026] [:error] [pid 52460:tid 52463] [client 20.251.116.241:48824] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aaKV2rLWOogAgHGh62SLYAAAAYA"]
[Sat Feb 28 15:14:35.555956 2026] [:error] [pid 52460:tid 52485] [client 20.251.116.241:32135] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aaKV27LWOogAgHGh62SLZgAAAZY"]
[Sat Feb 28 15:14:36.807652 2026] [:error] [pid 39185:tid 39259] [client 20.251.116.241:50658] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wqqs.php"] [unique_id "aaKV3BVE-FfM89u7BQZFGgAAAI0"]
[Sat Feb 28 15:14:41.336956 2026] [:error] [pid 52460:tid 52479] [client 20.251.116.241:51039] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wqqs.php"] [unique_id "aaKV4bLWOogAgHGh62SLfQAAAZA"]
[Sat Feb 28 15:14:43.633113 2026] [:error] [pid 52460:tid 52479] [client 20.251.116.241:42577] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wqqs.php"] [unique_id "aaKV47LWOogAgHGh62SLjAAAAZA"]
[Sat Feb 28 15:14:45.842940 2026] [:error] [pid 11791:tid 11795] [client 20.251.116.241:51009] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wqqs.php"] [unique_id "aaKV5WuX5e1Q32gqxH1arAAAAQI"]
[Sat Feb 28 15:14:49.851762 2026] [:error] [pid 39185:tid 39262] [client 20.251.116.241:34713] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-318.php"] [unique_id "aaKV6RVE-FfM89u7BQZFNQAAAJA"]
[Sat Feb 28 15:14:54.462446 2026] [:error] [pid 11791:tid 11810] [client 20.251.116.241:19652] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-318.php"] [unique_id "aaKV7muX5e1Q32gqxH1atAAAARE"]
[Sat Feb 28 15:15:03.126367 2026] [:error] [pid 52460:tid 52473] [client 20.251.116.241:50616] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dom.php"] [unique_id "aaKV97LWOogAgHGh62SL1AAAAYo"]
[Sat Feb 28 15:15:05.299404 2026] [:error] [pid 39292:tid 39312] [client 20.251.116.241:42247] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dom.php"] [unique_id "aaKV-aIAO5fN7BxyqcH8CQAAANI"]
[Sat Feb 28 15:15:06.836325 2026] [:error] [pid 39292:tid 39310] [client 20.251.116.241:42262] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dom.php"] [unique_id "aaKV-qIAO5fN7BxyqcH8CgAAANA"]
[Sat Feb 28 15:15:07.904651 2026] [:error] [pid 52460:tid 52473] [client 20.251.116.241:42296] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dom.php"] [unique_id "aaKV-7LWOogAgHGh62SL4QAAAYo"]
[Sat Feb 28 15:15:08.950528 2026] [:error] [pid 52460:tid 52484] [client 20.251.116.241:46558] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaKV_LLWOogAgHGh62SL6AAAAZU"]
[Sat Feb 28 15:15:11.827053 2026] [:error] [pid 52460:tid 52472] [client 20.251.116.241:41720] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaKV_7LWOogAgHGh62SL_QAAAYk"]
[Sat Feb 28 15:15:20.269335 2026] [:error] [pid 39184:tid 39231] [client 20.251.116.241:41704] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaKWCFtZF9Zd_U7easD2eAAAAEw"]
[Sat Feb 28 15:15:27.521354 2026] [:error] [pid 39292:tid 39302] [client 20.251.116.241:46555] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon3.php"] [unique_id "aaKWD6IAO5fN7BxyqcH8GgAAAMg"]
[Sat Feb 28 15:15:29.339991 2026] [:error] [pid 52460:tid 52485] [client 20.251.116.241:39416] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon3.php"] [unique_id "aaKWEbLWOogAgHGh62SMWgAAAZY"]
[Sat Feb 28 15:15:33.809947 2026] [:error] [pid 39292:tid 39300] [client 20.251.116.241:41704] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon3.php"] [unique_id "aaKWFaIAO5fN7BxyqcH8IQAAAMY"]
[Sat Feb 28 15:15:35.063233 2026] [:error] [pid 52460:tid 52465] [client 20.251.116.241:42976] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moon3.php"] [unique_id "aaKWF7LWOogAgHGh62SMcAAAAYI"]
[Sat Feb 28 15:15:36.344738 2026] [:error] [pid 52460:tid 52482] [client 20.251.116.241:42350] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thui.php"] [unique_id "aaKWGLLWOogAgHGh62SMfgAAAZM"]
[Sat Feb 28 15:15:38.420472 2026] [:error] [pid 52460:tid 52467] [client 20.251.116.241:46437] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thui.php"] [unique_id "aaKWGrLWOogAgHGh62SMiwAAAYQ"]
[Sat Feb 28 15:15:43.380448 2026] [:error] [pid 11791:tid 11805] [client 20.251.116.241:39376] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thui.php"] [unique_id "aaKWH2uX5e1Q32gqxH1a-gAAAQw"]
[Sat Feb 28 15:15:46.324497 2026] [:error] [pid 52460:tid 52472] [client 20.251.116.241:46433] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/thui.php"] [unique_id "aaKWIrLWOogAgHGh62SMtQAAAYk"]
[Sat Feb 28 15:16:00.289593 2026] [:error] [pid 22194:tid 22218] [client 20.251.116.241:46938] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaKWMH6mbajs3bzQGytj0wAAAVY"]
[Sat Feb 28 15:16:04.332002 2026] [:error] [pid 11791:tid 11802] [client 20.251.116.241:2478] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/snq.php"] [unique_id "aaKWNGuX5e1Q32gqxH1bLQAAAQk"]
[Sat Feb 28 15:16:08.208967 2026] [:error] [pid 52460:tid 52479] [client 20.251.116.241:33666] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/snq.php"] [unique_id "aaKWOLLWOogAgHGh62SNSwAAAZA"]
[Sat Feb 28 15:16:13.013556 2026] [:error] [pid 39185:tid 39246] [client 20.251.116.241:42544] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/snq.php"] [unique_id "aaKWPRVE-FfM89u7BQZGLQAAAIA"]
[Sat Feb 28 15:16:14.584061 2026] [:error] [pid 39184:tid 39236] [client 20.251.116.241:33035] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/snq.php"] [unique_id "aaKWPltZF9Zd_U7easD2qgAAAFE"]
[Sat Feb 28 15:16:40.848305 2026] [:error] [pid 39185:tid 39247] [client 20.251.116.241:49786] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ok.php"] [unique_id "aaKWWBVE-FfM89u7BQZG3gAAAIE"]
[Sat Feb 28 15:16:48.698482 2026] [:error] [pid 39185:tid 39251] [client 20.251.116.241:36416] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xleet.php"] [unique_id "aaKWYBVE-FfM89u7BQZHEwAAAIU"]
[Sat Feb 28 15:17:02.045619 2026] [:error] [pid 52460:tid 52486] [client 20.251.116.241:47822] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xleet.php"] [unique_id "aaKWbrLWOogAgHGh62SOHAAAAZc"]
[Sat Feb 28 15:17:04.035727 2026] [:error] [pid 22194:tid 22204] [client 20.251.116.241:42755] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aaKWcH6mbajs3bzQGytkNQAAAUg"]
[Sat Feb 28 15:17:06.462161 2026] [:error] [pid 52460:tid 52486] [client 20.251.116.241:47830] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aaKWcrLWOogAgHGh62SOMAAAAZc"]
[Sat Feb 28 15:17:08.264199 2026] [:error] [pid 39292:tid 39316] [client 20.251.116.241:50378] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aaKWdKIAO5fN7BxyqcH8zwAAANY"]
[Sat Feb 28 15:17:13.442609 2026] [:error] [pid 52460:tid 52471] [client 20.251.116.241:47869] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aaKWebLWOogAgHGh62SOPQAAAYg"]
[Sat Feb 28 15:17:17.052067 2026] [:error] [pid 11791:tid 11797] [client 20.251.116.241:49195] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaKWfWuX5e1Q32gqxH1cSAAAAQQ"]
[Sat Feb 28 15:17:25.641812 2026] [:error] [pid 39185:tid 39251] [client 20.251.116.241:38060] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaKWhRVE-FfM89u7BQZHsAAAAIU"]
[Sat Feb 28 15:17:28.154590 2026] [:error] [pid 39185:tid 39262] [client 20.251.116.241:38140] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaKWiBVE-FfM89u7BQZHuQAAAJA"]
[Sat Feb 28 15:17:29.379716 2026] [:error] [pid 11791:tid 11797] [client 20.251.116.241:34754] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaKWiWuX5e1Q32gqxH1cXQAAAQQ"]
[Sat Feb 28 15:17:33.791383 2026] [:error] [pid 39185:tid 39258] [client 20.251.116.241:2379] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaKWjRVE-FfM89u7BQZH5gAAAIw"]
[Sat Feb 28 15:17:35.622129 2026] [:error] [pid 11791:tid 11804] [client 20.251.116.241:38463] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaKWj2uX5e1Q32gqxH1cawAAAQs"]
[Sat Feb 28 15:17:39.377125 2026] [:error] [pid 39185:tid 39252] [client 20.251.116.241:43385] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaKWkxVE-FfM89u7BQZIBAAAAIY"]
[Sat Feb 28 15:17:41.251880 2026] [:error] [pid 11791:tid 11812] [client 20.251.116.241:2837] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaKWlWuX5e1Q32gqxH1ceAAAARM"]
[Sat Feb 28 15:17:43.584110 2026] [:error] [pid 52460:tid 52484] [client 20.251.116.241:44608] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaKWl7LWOogAgHGh62SOsgAAAZU"]
[Sat Feb 28 15:17:45.494269 2026] [:error] [pid 22194:tid 22209] [client 20.251.116.241:34773] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaKWmX6mbajs3bzQGytkaQAAAU0"]
[Sat Feb 28 15:17:48.592064 2026] [:error] [pid 39185:tid 39266] [client 20.251.116.241:45085] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaKWnBVE-FfM89u7BQZILQAAAJQ"]
[Sat Feb 28 15:17:50.779074 2026] [:error] [pid 52460:tid 52476] [client 20.251.116.241:31855] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tmpls.php"] [unique_id "aaKWnrLWOogAgHGh62SOwwAAAY0"]
[Sat Feb 28 15:17:52.730815 2026] [:error] [pid 39185:tid 39260] [client 20.251.116.241:3056] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tmpls.php"] [unique_id "aaKWoBVE-FfM89u7BQZITQAAAI4"]
[Sat Feb 28 15:17:54.409362 2026] [:error] [pid 39184:tid 39220] [client 20.251.116.241:46498] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tmpls.php"] [unique_id "aaKWoltZF9Zd_U7easD3cwAAAEE"]
[Sat Feb 28 15:17:55.640245 2026] [:error] [pid 52460:tid 52465] [client 20.251.116.241:35765] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tmpls.php"] [unique_id "aaKWo7LWOogAgHGh62SOyAAAAYI"]
[Sat Feb 28 15:18:04.619023 2026] [:error] [pid 39185:tid 39247] [client 34.142.251.255:34124] [client 34.142.251.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.142.251.255, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKWrBVE-FfM89u7BQZIdgAAAIE"]
[Sat Feb 28 15:18:14.621019 2026] [:error] [pid 11791:tid 11814] [client 20.251.116.241:41278] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaKWtmuX5e1Q32gqxH1c_AAAARU"]
[Sat Feb 28 15:18:17.217758 2026] [:error] [pid 11791:tid 11794] [client 20.251.116.241:48012] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaKWuWuX5e1Q32gqxH1dFwAAAQE"]
[Sat Feb 28 15:18:18.949800 2026] [:error] [pid 39292:tid 39312] [client 20.251.116.241:46613] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaKWuqIAO5fN7BxyqcH9SgAAANI"]
[Sat Feb 28 15:18:20.963219 2026] [:error] [pid 39185:tid 39250] [client 20.251.116.241:2282] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pouhg.php"] [unique_id "aaKWvBVE-FfM89u7BQZIwQAAAIQ"]
[Sat Feb 28 15:18:24.999078 2026] [:error] [pid 22194:tid 22210] [client 20.251.116.241:31834] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws61.php"] [unique_id "aaKWwH6mbajs3bzQGytklQAAAU4"]
[Sat Feb 28 15:18:30.003865 2026] [:error] [pid 11791:tid 11795] [client 20.251.116.241:44026] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws61.php"] [unique_id "aaKWxmuX5e1Q32gqxH1dUgAAAQI"]
[Sat Feb 28 15:18:36.311220 2026] [:error] [pid 39185:tid 39266] [client 20.251.116.241:43994] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws61.php"] [unique_id "aaKWzBVE-FfM89u7BQZJkQAAAJQ"]
[Sat Feb 28 15:18:37.635827 2026] [:error] [pid 11791:tid 11806] [client 20.251.116.241:49603] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKWzWuX5e1Q32gqxH1dYwAAAQ0"]
[Sat Feb 28 15:18:39.409637 2026] [:error] [pid 52460:tid 52484] [client 20.251.116.241:44015] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKWz7LWOogAgHGh62SPnAAAAZU"]
[Sat Feb 28 15:18:43.981973 2026] [:error] [pid 39183:tid 39199] [client 20.251.116.241:2179] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKW0xCf4HvhVePw3LYARgAAAAc"]
[Sat Feb 28 15:18:48.118489 2026] [:error] [pid 39183:tid 39211] [client 20.251.116.241:31950] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKW2BCf4HvhVePw3LYASQAAABM"]
[Sat Feb 28 15:18:51.243087 2026] [:error] [pid 39185:tid 39263] [client 20.251.116.241:32231] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/app.php"] [unique_id "aaKW2xVE-FfM89u7BQZJ4wAAAJE"]
[Sat Feb 28 15:18:54.302530 2026] [:error] [pid 39292:tid 39299] [client 20.251.116.241:34256] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/app.php"] [unique_id "aaKW3qIAO5fN7BxyqcH9hAAAAMU"]
[Sat Feb 28 15:18:56.230464 2026] [:error] [pid 52460:tid 52486] [client 20.251.116.241:34217] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/app.php"] [unique_id "aaKW4LLWOogAgHGh62SP0gAAAZc"]
[Sat Feb 28 15:19:04.224737 2026] [:error] [pid 39183:tid 39195] [client 20.251.116.241:47437] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws59.php"] [unique_id "aaKW6BCf4HvhVePw3LYAZAAAAAM"]
[Sat Feb 28 15:19:05.780138 2026] [:error] [pid 39184:tid 39219] [client 20.251.116.241:40620] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws59.php"] [unique_id "aaKW6VtZF9Zd_U7easD3oQAAAEA"]
[Sat Feb 28 15:19:08.054429 2026] [:error] [pid 11791:tid 11801] [client 20.251.116.241:40409] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws59.php"] [unique_id "aaKW7GuX5e1Q32gqxH1dvAAAAQg"]
[Sat Feb 28 15:19:11.675334 2026] [:error] [pid 39185:tid 39267] [client 20.251.116.241:34221] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws59.php"] [unique_id "aaKW7xVE-FfM89u7BQZKRgAAAJU"]
[Sat Feb 28 15:19:13.037194 2026] [:error] [pid 39185:tid 39269] [client 20.251.116.241:48868] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaKW8RVE-FfM89u7BQZKUAAAAJc"]
[Sat Feb 28 15:19:15.535927 2026] [:error] [pid 11791:tid 11799] [client 20.251.116.241:39055] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaKW82uX5e1Q32gqxH1d1AAAAQY"]
[Sat Feb 28 15:19:17.895232 2026] [:error] [pid 11791:tid 11794] [client 20.251.116.241:34725] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaKW9WuX5e1Q32gqxH1d3gAAAQE"]
[Sat Feb 28 15:19:19.958835 2026] [:error] [pid 39183:tid 39206] [client 20.251.116.241:50658] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aaKW9xCf4HvhVePw3LYAbwAAAA4"]
[Sat Feb 28 15:19:21.403468 2026] [:error] [pid 52460:tid 52487] [client 20.251.116.241:42622] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mamzi.php"] [unique_id "aaKW-bLWOogAgHGh62SQUgAAAZg"]
[Sat Feb 28 15:19:25.482790 2026] [:error] [pid 39292:tid 39298] [client 20.251.116.241:42577] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mamzi.php"] [unique_id "aaKW_aIAO5fN7BxyqcH9xgAAAMQ"]
[Sat Feb 28 15:22:44.501576 2026] [:error] [pid 52460:tid 52472] [client 20.251.116.241:37581] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ty.php"] [unique_id "aaKXxLLWOogAgHGh62STMwAAAYk"]
[Sat Feb 28 15:22:46.230948 2026] [:error] [pid 39184:tid 39220] [client 20.251.116.241:39338] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ty.php"] [unique_id "aaKXxltZF9Zd_U7easD4hgAAAEE"]
[Sat Feb 28 15:22:47.853767 2026] [:error] [pid 39292:tid 39316] [client 20.251.116.241:46496] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ty.php"] [unique_id "aaKXx6IAO5fN7BxyqcH_XQAAANY"]
[Sat Feb 28 15:22:49.530269 2026] [:error] [pid 39292:tid 39310] [client 20.251.116.241:37604] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ty.php"] [unique_id "aaKXyaIAO5fN7BxyqcH_YQAAANA"]
[Sat Feb 28 15:22:50.504175 2026] [:error] [pid 39183:tid 39193] [client 20.251.116.241:2501] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/brc.php"] [unique_id "aaKXyhCf4HvhVePw3LYBIgAAAAE"]
[Sat Feb 28 15:22:52.373732 2026] [:error] [pid 39292:tid 39317] [client 20.251.116.241:40160] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/brc.php"] [unique_id "aaKXzKIAO5fN7BxyqcH_aQAAANc"]
[Sat Feb 28 15:22:55.393966 2026] [:error] [pid 11791:tid 11809] [client 20.251.116.241:44632] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/brc.php"] [unique_id "aaKXz2uX5e1Q32gqxH1gLgAAARA"]
[Sat Feb 28 15:23:15.191378 2026] [:error] [pid 39292:tid 39302] [client 20.251.116.241:47592] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/koiy.php"] [unique_id "aaKX46IAO5fN7BxyqcH_iQAAAMg"]
[Sat Feb 28 15:23:16.523622 2026] [:error] [pid 11791:tid 11801] [client 20.251.116.241:45942] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/koiy.php"] [unique_id "aaKX5GuX5e1Q32gqxH1gZAAAAQg"]
[Sat Feb 28 15:23:20.869151 2026] [:error] [pid 11791:tid 11804] [client 20.251.116.241:39347] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/koiy.php"] [unique_id "aaKX6GuX5e1Q32gqxH1gagAAAQs"]
[Sat Feb 28 15:23:21.984974 2026] [:error] [pid 39292:tid 39316] [client 20.251.116.241:48993] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/koiy.php"] [unique_id "aaKX6aIAO5fN7BxyqcH_kwAAANY"]
[Sat Feb 28 15:23:28.052377 2026] [:error] [pid 39185:tid 39259] [client 20.251.116.241:44608] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "aaKX8BVE-FfM89u7BQZPhQAAAI0"]
[Sat Feb 28 15:23:29.731250 2026] [:error] [pid 39292:tid 39309] [client 20.251.116.241:2417] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "aaKX8aIAO5fN7BxyqcH_nwAAAM8"]
[Sat Feb 28 15:23:31.322892 2026] [:error] [pid 39183:tid 39201] [client 20.251.116.241:40147] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "aaKX8xCf4HvhVePw3LYBXQAAAAk"]
[Sat Feb 28 15:23:32.514992 2026] [:error] [pid 52460:tid 52468] [client 20.251.116.241:44634] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "aaKX9LLWOogAgHGh62STygAAAYU"]
[Sat Feb 28 15:26:30.574273 2026] [:error] [pid 52460:tid 52485] [client 20.251.116.241:46505] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/co.php"] [unique_id "aaKYprLWOogAgHGh62SWKQAAAZY"]
[Sat Feb 28 15:26:33.860753 2026] [:error] [pid 52460:tid 52486] [client 20.251.116.241:42371] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/co.php"] [unique_id "aaKYqbLWOogAgHGh62SWMgAAAZc"]
[Sat Feb 28 15:26:36.526174 2026] [:error] [pid 52460:tid 52483] [client 20.251.116.241:49533] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/co.php"] [unique_id "aaKYrLLWOogAgHGh62SWPAAAAZQ"]
[Sat Feb 28 15:26:40.259566 2026] [:error] [pid 11791:tid 11816] [client 20.251.116.241:42545] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/co.php"] [unique_id "aaKYsGuX5e1Q32gqxH1imAAAARc"]
[Sat Feb 28 15:26:41.999151 2026] [:error] [pid 39185:tid 39253] [client 20.251.116.241:42354] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cxc.php"] [unique_id "aaKYsRVE-FfM89u7BQZTfgAAAIc"]
[Sat Feb 28 15:26:42.889326 2026] [:error] [pid 39185:tid 39257] [client 20.251.116.241:42364] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cxc.php"] [unique_id "aaKYshVE-FfM89u7BQZTiQAAAIs"]
[Sat Feb 28 15:26:43.977755 2026] [:error] [pid 22194:tid 22203] [client 20.251.116.241:43005] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cxc.php"] [unique_id "aaKYs36mbajs3bzQGytnRQAAAUc"]
[Sat Feb 28 15:26:45.161366 2026] [:error] [pid 52460:tid 52470] [client 20.251.116.241:42358] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cxc.php"] [unique_id "aaKYtbLWOogAgHGh62SWaAAAAYc"]
[Sat Feb 28 15:26:46.203344 2026] [:error] [pid 39185:tid 39255] [client 20.251.116.241:39862] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gjm.php"] [unique_id "aaKYthVE-FfM89u7BQZTswAAAIk"]
[Sat Feb 28 15:26:48.371928 2026] [:error] [pid 39185:tid 39266] [client 20.251.116.241:48275] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gjm.php"] [unique_id "aaKYuBVE-FfM89u7BQZTvgAAAJQ"]
[Sat Feb 28 15:26:50.737861 2026] [:error] [pid 39292:tid 39313] [client 20.251.116.241:32157] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gjm.php"] [unique_id "aaKYuqIAO5fN7BxyqcEA0gAAANM"]
[Sat Feb 28 15:26:53.089788 2026] [:error] [pid 39184:tid 39241] [client 20.251.116.241:42303] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gjm.php"] [unique_id "aaKYvVtZF9Zd_U7easD5xAAAAFY"]
[Sat Feb 28 15:26:59.243217 2026] [:error] [pid 11791:tid 11795] [client 20.251.116.241:50668] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ex.php"] [unique_id "aaKYw2uX5e1Q32gqxH1iwgAAAQI"]
[Sat Feb 28 15:27:03.414160 2026] [:error] [pid 39185:tid 39261] [client 20.251.116.241:42621] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ex.php"] [unique_id "aaKYxxVE-FfM89u7BQZUJAAAAI8"]
[Sat Feb 28 15:27:07.041518 2026] [:error] [pid 52460:tid 52480] [client 20.251.116.241:39058] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ex.php"] [unique_id "aaKYy7LWOogAgHGh62SWxQAAAZE"]
[Sat Feb 28 15:27:11.668849 2026] [:error] [pid 39292:tid 39316] [client 20.251.116.241:35568] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/post.php"] [unique_id "aaKYz6IAO5fN7BxyqcEBCAAAANY"]
[Sat Feb 28 15:27:15.845694 2026] [:error] [pid 39184:tid 39236] [client 20.251.116.241:41988] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/post.php"] [unique_id "aaKY01tZF9Zd_U7easD56wAAAFE"]
[Sat Feb 28 15:27:20.893450 2026] [:error] [pid 11791:tid 11799] [client 20.251.116.241:48814] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/post.php"] [unique_id "aaKY2GuX5e1Q32gqxH1i2wAAAQY"]
[Sat Feb 28 15:27:22.542095 2026] [:error] [pid 39185:tid 39247] [client 20.251.116.241:34698] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/post.php"] [unique_id "aaKY2hVE-FfM89u7BQZUkQAAAIE"]
[Sat Feb 28 15:27:25.861264 2026] [:error] [pid 39185:tid 39246] [client 20.251.116.241:42591] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wpo.php"] [unique_id "aaKY3RVE-FfM89u7BQZUoAAAAIA"]
[Sat Feb 28 15:31:21.370955 2026] [:error] [pid 39185:tid 39256] [client 20.251.116.241:2367] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws79.php"] [unique_id "aaKZyRVE-FfM89u7BQZbkwAAAIo"]
[Sat Feb 28 15:31:24.555993 2026] [:error] [pid 39185:tid 39264] [client 20.251.116.241:48706] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws79.php"] [unique_id "aaKZzBVE-FfM89u7BQZbsgAAAJI"]
[Sat Feb 28 15:31:27.144357 2026] [:error] [pid 52460:tid 52487] [client 20.251.116.241:41976] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws79.php"] [unique_id "aaKZz7LWOogAgHGh62SdgAAAAZg"]
[Sat Feb 28 15:31:29.716044 2026] [:error] [pid 52460:tid 52475] [client 20.251.116.241:44686] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws79.php"] [unique_id "aaKZ0bLWOogAgHGh62SdlgAAAYw"]
[Sat Feb 28 15:31:41.103446 2026] [:error] [pid 39292:tid 39302] [client 20.251.116.241:33785] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1061.php"] [unique_id "aaKZ3aIAO5fN7BxyqcEENgAAAMg"]
[Sat Feb 28 15:31:43.304842 2026] [:error] [pid 49763:tid 49773] [client 20.251.116.241:47439] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1061.php"] [unique_id "aaKZ37THSOG_yf2PpqG11AAAAcc"]
[Sat Feb 28 15:31:49.144849 2026] [:error] [pid 49763:tid 49785] [client 20.251.116.241:34184] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwq13.php"] [unique_id "aaKZ5bTHSOG_yf2PpqG15AAAAdM"]
[Sat Feb 28 15:31:51.110666 2026] [:error] [pid 49763:tid 49778] [client 20.251.116.241:34260] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwq13.php"] [unique_id "aaKZ57THSOG_yf2PpqG18gAAAcw"]
[Sat Feb 28 15:31:56.471542 2026] [:error] [pid 39184:tid 39235] [client 20.251.116.241:2828] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwq13.php"] [unique_id "aaKZ7FtZF9Zd_U7easD7sgAAAFA"]
[Sat Feb 28 15:31:57.970199 2026] [:error] [pid 39184:tid 39225] [client 20.251.116.241:31809] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zwq13.php"] [unique_id "aaKZ7VtZF9Zd_U7easD7uAAAAEY"]
[Sat Feb 28 15:32:02.644909 2026] [:error] [pid 39184:tid 39233] [client 20.251.116.241:46632] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "aaKZ8ltZF9Zd_U7easD7zgAAAE4"]
[Sat Feb 28 15:32:06.445766 2026] [:error] [pid 52460:tid 52485] [client 20.251.116.241:32520] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "aaKZ9rLWOogAgHGh62SdwwAAAZY"]
[Sat Feb 28 15:32:09.021006 2026] [:error] [pid 39292:tid 39295] [client 20.251.116.241:37193] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "aaKZ-aIAO5fN7BxyqcEEggAAAME"]
[Sat Feb 28 15:32:11.956593 2026] [:error] [pid 39183:tid 39200] [client 20.251.116.241:43968] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "aaKZ-xCf4HvhVePw3LYEEQAAAAg"]
[Sat Feb 28 15:35:02.727095 2026] [:error] [pid 49763:tid 49790] [client 20.251.116.241:42502] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/not_found"] [unique_id "aaKaprTHSOG_yf2PpqG36QAAAdg"]
[Sat Feb 28 15:35:03.653933 2026] [:error] [pid 11791:tid 11808] [client 20.251.116.241:36767] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/not_found"] [unique_id "aaKap2uX5e1Q32gqxH1ncgAAAQ8"]
[Sat Feb 28 15:35:05.952730 2026] [:error] [pid 39184:tid 39227] [client 20.251.116.241:39924] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/not_found"] [unique_id "aaKaqVtZF9Zd_U7easD9iAAAAEg"]
[Sat Feb 28 15:35:06.953073 2026] [:error] [pid 39185:tid 39257] [client 20.251.116.241:47247] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/not_found"] [unique_id "aaKaqhVE-FfM89u7BQZc6QAAAIs"]
[Sat Feb 28 15:35:15.009266 2026] [:error] [pid 39184:tid 39242] [client 20.251.116.241:35057] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaKas1tZF9Zd_U7easD9uQAAAFc"]
[Sat Feb 28 15:35:16.655080 2026] [:error] [pid 39184:tid 39229] [client 20.251.116.241:2554] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaKatFtZF9Zd_U7easD9vAAAAEo"]
[Sat Feb 28 15:35:18.361920 2026] [:error] [pid 39184:tid 39243] [client 20.251.116.241:35061] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaKatltZF9Zd_U7easD9vwAAAFg"]
[Sat Feb 28 15:35:20.758264 2026] [:error] [pid 49763:tid 49785] [client 20.251.116.241:36030] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaKauLTHSOG_yf2PpqG3_wAAAdM"]
[Sat Feb 28 15:35:26.009891 2026] [:error] [pid 49763:tid 49773] [client 20.251.116.241:33104] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaKavrTHSOG_yf2PpqG4DgAAAcc"]
[Sat Feb 28 15:35:27.759941 2026] [:error] [pid 49763:tid 49789] [client 20.251.116.241:49688] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaKav7THSOG_yf2PpqG4OwAAAdc"]
[Sat Feb 28 15:35:31.764478 2026] [:error] [pid 39185:tid 39257] [client 20.251.116.241:36136] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaKawxVE-FfM89u7BQZc-gAAAIs"]
[Sat Feb 28 15:35:32.982428 2026] [:error] [pid 39292:tid 39314] [client 20.251.116.241:38512] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaKaxKIAO5fN7BxyqcEGGAAAANQ"]
[Sat Feb 28 15:35:34.495570 2026] [:error] [pid 39184:tid 39230] [client 20.251.116.241:36458] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rpk.php"] [unique_id "aaKaxltZF9Zd_U7easD98gAAAEs"]
[Sat Feb 28 15:35:36.483571 2026] [:error] [pid 49763:tid 49787] [client 20.251.116.241:47391] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rpk.php"] [unique_id "aaKayLTHSOG_yf2PpqG4iQAAAdU"]
[Sat Feb 28 15:35:37.620208 2026] [:error] [pid 52460:tid 52476] [client 20.251.116.241:36437] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rpk.php"] [unique_id "aaKaybLWOogAgHGh62SehAAAAY0"]
[Sat Feb 28 15:35:41.285880 2026] [:error] [pid 49763:tid 49786] [client 20.251.116.241:42566] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rpk.php"] [unique_id "aaKazbTHSOG_yf2PpqG4mwAAAdQ"]
[Sat Feb 28 15:35:43.182889 2026] [:error] [pid 11791:tid 11800] [client 20.251.116.241:31913] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aaKaz2uX5e1Q32gqxH1nkwAAAQc"]
[Sat Feb 28 15:35:45.094797 2026] [:error] [pid 39183:tid 39200] [client 20.251.116.241:39056] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aaKa0RCf4HvhVePw3LYGDwAAAAg"]
[Sat Feb 28 15:35:49.317816 2026] [:error] [pid 39184:tid 39228] [client 20.251.116.241:38501] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aaKa1VtZF9Zd_U7easD-FQAAAEk"]
[Sat Feb 28 15:35:50.067406 2026] [:error] [pid 52460:tid 52474] [client 20.251.116.241:34761] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aaKa1rLWOogAgHGh62SejwAAAYs"]
[Sat Feb 28 15:35:55.431034 2026] [:error] [pid 39183:tid 39200] [client 20.251.116.241:42570] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aaKa2xCf4HvhVePw3LYGMQAAAAg"]
[Sat Feb 28 15:35:57.198317 2026] [:error] [pid 39183:tid 39213] [client 20.251.116.241:42613] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aaKa3RCf4HvhVePw3LYGOAAAABU"]
[Sat Feb 28 15:35:58.932432 2026] [:error] [pid 39184:tid 39240] [client 20.251.116.241:42614] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aaKa3ltZF9Zd_U7easD-MQAAAFU"]
[Sat Feb 28 15:37:30.890403 2026] [autoindex:error] [pid 49763:tid 49773] [client 62.171.170.202:62021] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 15:40:01.932044 2026] [:error] [pid 39183:tid 39202] [client 20.251.116.241:47211] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gec.php"] [unique_id "aaKb0RCf4HvhVePw3LYIfAAAAAo"]
[Sat Feb 28 15:40:04.594287 2026] [:error] [pid 49763:tid 49783] [client 20.251.116.241:49041] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gec.php"] [unique_id "aaKb1LTHSOG_yf2PpqG72AAAAdE"]
[Sat Feb 28 15:40:08.384750 2026] [:error] [pid 49763:tid 49772] [client 20.251.116.241:46866] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gec.php"] [unique_id "aaKb2LTHSOG_yf2PpqG7-QAAAcY"]
[Sat Feb 28 15:40:09.534989 2026] [:error] [pid 22194:tid 22215] [client 20.251.116.241:43045] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "aaKb2X6mbajs3bzQGytqrAAAAVM"]
[Sat Feb 28 15:40:12.103745 2026] [:error] [pid 49763:tid 49770] [client 20.251.116.241:50369] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "aaKb3LTHSOG_yf2PpqG8awAAAcQ"]
[Sat Feb 28 15:40:13.704119 2026] [:error] [pid 39184:tid 39221] [client 20.251.116.241:33725] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "aaKb3VtZF9Zd_U7easABOgAAAEI"]
[Sat Feb 28 15:40:16.235429 2026] [:error] [pid 39184:tid 39233] [client 20.251.116.241:50471] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "aaKb4FtZF9Zd_U7easABRQAAAE4"]
[Sat Feb 28 15:40:21.674011 2026] [:error] [pid 39184:tid 39242] [client 20.251.116.241:35316] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "aaKb5VtZF9Zd_U7easABXgAAAFc"]
[Sat Feb 28 15:40:43.135059 2026] [:error] [pid 39184:tid 39239] [client 20.251.116.241:33695] [client 20.251.116.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "aaKb-1tZF9Zd_U7easABsgAAAFQ"]
[Sat Feb 28 16:59:53.866466 2026] [:error] [pid 39184:tid 39234] [client 185.193.156.145:53312] [client 185.193.156.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.156.145, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKuiVtZF9Zd_U7easAylwAAAE8"]
[Sat Feb 28 17:00:01.628717 2026] [:error] [pid 39184:tid 39231] [client 185.193.156.145:53312] [client 185.193.156.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaKukVtZF9Zd_U7easAyrQAAAEw"]
[Sat Feb 28 17:00:04.909567 2026] [:error] [pid 39184:tid 39228] [client 185.193.156.145:53312] [client 185.193.156.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.156.145, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKulFtZF9Zd_U7easAyrwAAAEk"]
[Sat Feb 28 17:18:04.005543 2026] [:error] [pid 39183:tid 39211] [client 20.78.169.245:10294] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaKyzBCf4HvhVePw3LY6cgAAABM"]
[Sat Feb 28 17:18:04.517973 2026] [:error] [pid 22194:tid 22208] [client 20.78.169.245:3490] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaKyzH6mbajs3bzQGyt48QAAAUw"]
[Sat Feb 28 17:18:05.029582 2026] [:error] [pid 52460:tid 52477] [client 20.78.169.245:3501] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaKyzbLWOogAgHGh62SytAAAAY4"]
[Sat Feb 28 17:18:05.536928 2026] [:error] [pid 52460:tid 52470] [client 20.78.169.245:3497] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaKyzbLWOogAgHGh62SytQAAAYc"]
[Sat Feb 28 18:21:05.982796 2026] [autoindex:error] [pid 52460:tid 52483] [client 194.146.12.7:60673] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 18:33:25.254997 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:3014] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/index.php"] [unique_id "aaLEdRCf4HvhVePw3LaG7gAAABM"]
[Sat Feb 28 18:33:35.993326 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:2954] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/termps.php"] [unique_id "aaLEf7LWOogAgHGh62QB2AAAAZI"]
[Sat Feb 28 18:33:50.926473 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:2951] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/capabilities1.php"] [unique_id "aaLEjrTHSOG_yf2PpqFiXgAAAcY"]
[Sat Feb 28 18:33:59.961835 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:3032] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/preferences/admin-ajax.php"] [unique_id "aaLEl7THSOG_yf2PpqFi5AAAAcE"]
[Sat Feb 28 18:34:09.483710 2026] [:error] [pid 39184:tid 39231] [client 13.71.191.191:3034] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/ourLB.php"] [unique_id "aaLEoVtZF9Zd_U7easBmUgAAAEw"]
[Sat Feb 28 18:34:10.196007 2026] [:error] [pid 49763:tid 49790] [client 13.71.191.191:3025] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaLEorTHSOG_yf2PpqFjIwAAAdg"]
[Sat Feb 28 18:34:11.864614 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:3052] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaLEo7LWOogAgHGh62QCSQAAAZA"]
[Sat Feb 28 18:34:12.862985 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:2952] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaLEpLTHSOG_yf2PpqFjNQAAAcY"]
[Sat Feb 28 18:34:13.545181 2026] [:error] [pid 49763:tid 49780] [client 13.71.191.191:3050] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaLEpbTHSOG_yf2PpqFjPwAAAc4"]
[Sat Feb 28 18:34:14.199611 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:3065] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaLEprLWOogAgHGh62QCTQAAAYY"]
[Sat Feb 28 18:34:14.901853 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:3020] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaLEphVE-FfM89u7BQZ-RQAAAIw"]
[Sat Feb 28 18:34:15.440628 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:3022] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaLEp7LWOogAgHGh62QCUQAAAYg"]
[Sat Feb 28 18:34:15.887370 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:2955] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaLEp7LWOogAgHGh62QCVQAAAZc"]
[Sat Feb 28 18:34:16.427728 2026] [:error] [pid 49763:tid 49785] [client 13.71.191.191:3069] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sundax.Php"] [unique_id "aaLEqLTHSOG_yf2PpqFjVQAAAdM"]
[Sat Feb 28 18:34:16.876638 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:2953] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sundax.Php"] [unique_id "aaLEqLTHSOG_yf2PpqFjXQAAAdE"]
[Sat Feb 28 18:34:17.603532 2026] [:error] [pid 22194:tid 22205] [client 13.71.191.191:2968] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sundax.Php"] [unique_id "aaLEqX6mbajs3bzQGyuFNAAAAUk"]
[Sat Feb 28 18:34:18.313307 2026] [:error] [pid 39183:tid 39201] [client 13.71.191.191:3030] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sundax.Php"] [unique_id "aaLEqhCf4HvhVePw3LaIUwAAAAk"]
[Sat Feb 28 18:34:18.883253 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:3015] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaLEqhVE-FfM89u7BQZ-SAAAAJg"]
[Sat Feb 28 18:34:19.346731 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:3021] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaLEqxCf4HvhVePw3LaIXwAAABQ"]
[Sat Feb 28 18:34:19.895750 2026] [:error] [pid 39184:tid 39221] [client 13.71.191.191:2961] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaLEq1tZF9Zd_U7easBmagAAAEI"]
[Sat Feb 28 18:34:20.507801 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:3037] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaLErH6mbajs3bzQGyuFNgAAAUY"]
[Sat Feb 28 18:34:21.022771 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:3024] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaLErRVE-FfM89u7BQZ-TAAAAJA"]
[Sat Feb 28 18:34:21.530565 2026] [:error] [pid 49763:tid 49776] [client 13.71.191.191:2904] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaLErbTHSOG_yf2PpqFjiwAAAco"]
[Sat Feb 28 18:34:22.000010 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:3047] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaLErbTHSOG_yf2PpqFjkgAAAcw"]
[Sat Feb 28 18:34:22.486824 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:3008] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaLErrLWOogAgHGh62QCZgAAAYA"]
[Sat Feb 28 18:34:22.988062 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:2944] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaLErhCf4HvhVePw3LaIbAAAABQ"]
[Sat Feb 28 18:34:23.487617 2026] [:error] [pid 39292:tid 39310] [client 13.71.191.191:3040] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaLEr6IAO5fN7BxyqcFD5QAAANA"]
[Sat Feb 28 18:34:23.968060 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:3035] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaLEr6IAO5fN7BxyqcFD5wAAAMY"]
[Sat Feb 28 18:34:24.629339 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:3044] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaLEsBCf4HvhVePw3LaIeQAAABc"]
[Sat Feb 28 18:34:25.202347 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:3039] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaLEsRCf4HvhVePw3LaIggAAABQ"]
[Sat Feb 28 18:34:25.909715 2026] [:error] [pid 39184:tid 39238] [client 13.71.191.191:3061] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaLEsVtZF9Zd_U7easBmeQAAAFM"]
[Sat Feb 28 18:34:26.540768 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:3018] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaLEsmuX5e1Q32gqxH2XngAAAQk"]
[Sat Feb 28 18:34:27.188154 2026] [:error] [pid 39184:tid 39226] [client 13.71.191.191:3055] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaLEs1tZF9Zd_U7easBmfQAAAEc"]
[Sat Feb 28 18:34:28.477218 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:3056] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms.php"] [unique_id "aaLEtGuX5e1Q32gqxH2XoQAAARY"]
[Sat Feb 28 18:34:29.554111 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:2959] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms.php"] [unique_id "aaLEtaIAO5fN7BxyqcFD-QAAAMo"]
[Sat Feb 28 18:34:30.284399 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:3012] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms.php"] [unique_id "aaLEtqIAO5fN7BxyqcFD_wAAANI"]
[Sat Feb 28 18:34:31.548760 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:3027] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms.php"] [unique_id "aaLEtxCf4HvhVePw3LaIoAAAAAE"]
[Sat Feb 28 18:34:34.353567 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:3038] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maint/jp.php"] [unique_id "aaLEuhVE-FfM89u7BQZ-WQAAAIw"]
[Sat Feb 28 18:34:35.915200 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:2964] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maint/jp.php"] [unique_id "aaLEu7THSOG_yf2PpqFj3QAAAdA"]
[Sat Feb 28 18:34:36.987332 2026] [:error] [pid 39183:tid 39207] [client 13.71.191.191:3054] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maint/jp.php"] [unique_id "aaLEvBCf4HvhVePw3LaIugAAAA8"]
[Sat Feb 28 18:34:39.131591 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:2950] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maint/jp.php"] [unique_id "aaLEv7THSOG_yf2PpqFkBQAAAcg"]
[Sat Feb 28 18:34:40.274868 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:3071] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaLEwBCf4HvhVePw3LaIywAAAAs"]
[Sat Feb 28 18:34:41.339314 2026] [:error] [pid 11791:tid 11808] [client 13.71.191.191:2967] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaLEwWuX5e1Q32gqxH2XswAAAQ8"]
[Sat Feb 28 18:34:42.835993 2026] [:error] [pid 49763:tid 49785] [client 13.71.191.191:3049] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaLEwrTHSOG_yf2PpqFkQgAAAdM"]
[Sat Feb 28 18:34:44.674778 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:2978] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaLExLTHSOG_yf2PpqFkZQAAAcg"]
[Sat Feb 28 18:34:45.756283 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:3068] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/commands/webix.php"] [unique_id "aaLExbLWOogAgHGh62QChgAAAYY"]
[Sat Feb 28 18:34:46.903272 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:3064] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaLExrTHSOG_yf2PpqFkiQAAAdQ"]
[Sat Feb 28 18:34:47.872541 2026] [:error] [pid 39184:tid 39226] [client 13.71.191.191:2974] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaLEx1tZF9Zd_U7easBmjwAAAEc"]
[Sat Feb 28 18:34:49.392838 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:3067] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaLEyRCf4HvhVePw3LaI2wAAABU"]
[Sat Feb 28 18:34:50.268263 2026] [:error] [pid 39292:tid 39310] [client 13.71.191.191:2948] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaLEyqIAO5fN7BxyqcFEFgAAANA"]
[Sat Feb 28 18:34:51.783821 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:3041] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaLEy2uX5e1Q32gqxH2XuwAAAQU"]
[Sat Feb 28 18:34:53.501316 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:3051] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaLEzRVE-FfM89u7BQZ-XwAAAIo"]
[Sat Feb 28 18:34:54.227349 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:2960] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaLEzrLWOogAgHGh62QCngAAAZM"]
[Sat Feb 28 18:34:54.833469 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:3028] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaLEzrLWOogAgHGh62QCowAAAZY"]
[Sat Feb 28 18:34:56.211305 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:2958] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaLE0LLWOogAgHGh62QCpQAAAY8"]
[Sat Feb 28 18:34:56.794409 2026] [:error] [pid 49763:tid 49766] [client 13.71.191.191:2945] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaLE0LTHSOG_yf2PpqFk2wAAAcA"]
[Sat Feb 28 18:34:57.584247 2026] [:error] [pid 49763:tid 49784] [client 13.71.191.191:2896] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaLE0bTHSOG_yf2PpqFk4wAAAdI"]
[Sat Feb 28 18:34:58.433032 2026] [:error] [pid 39184:tid 39237] [client 13.71.191.191:2972] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaLE0ltZF9Zd_U7easBmtAAAAFI"]
[Sat Feb 28 18:34:58.993407 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:2981] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaLE0rTHSOG_yf2PpqFk8gAAAdQ"]
[Sat Feb 28 18:34:59.823835 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:2979] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaLE0xCf4HvhVePw3LaI_gAAAAQ"]
[Sat Feb 28 18:35:00.669044 2026] [:error] [pid 49763:tid 49779] [client 13.71.191.191:3048] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaLE1LTHSOG_yf2PpqFk_QAAAc0"]
[Sat Feb 28 18:35:01.662979 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:3045] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaLE1bTHSOG_yf2PpqFlCAAAAcM"]
[Sat Feb 28 18:35:02.599507 2026] [:error] [pid 49763:tid 49784] [client 13.71.191.191:3063] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaLE1rTHSOG_yf2PpqFlEAAAAdI"]
[Sat Feb 28 18:35:03.525456 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:3009] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaLE17LWOogAgHGh62QCswAAAYE"]
[Sat Feb 28 18:35:04.363005 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:2906] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaLE2H6mbajs3bzQGyuFTQAAAU4"]
[Sat Feb 28 18:35:05.007541 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:2986] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaLE2RCf4HvhVePw3LaJDQAAAAQ"]
[Sat Feb 28 18:35:05.932316 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:2895] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/gif.php"] [unique_id "aaLE2VtZF9Zd_U7easBm3gAAAEo"]
[Sat Feb 28 18:35:07.211936 2026] [:error] [pid 49763:tid 49784] [client 13.71.191.191:3062] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/moon.php"] [unique_id "aaLE27THSOG_yf2PpqFlLAAAAdI"]
[Sat Feb 28 18:35:08.496491 2026] [:error] [pid 49763:tid 49769] [client 40.85.218.222:22743] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaLE3LTHSOG_yf2PpqFlMQAAAcM"]
[Sat Feb 28 18:35:09.329890 2026] [:error] [pid 52460:tid 52478] [client 40.85.218.222:22752] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaLE3bLWOogAgHGh62QCzAAAAY8"]
[Sat Feb 28 18:35:10.209939 2026] [:error] [pid 39185:tid 39246] [client 40.85.218.222:22728] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaLE3hVE-FfM89u7BQZ-ZwAAAIA"]
[Sat Feb 28 18:35:11.078569 2026] [:error] [pid 39184:tid 39219] [client 40.85.218.222:22722] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaLE31tZF9Zd_U7easBm8wAAAEA"]
[Sat Feb 28 18:35:21.029597 2026] [:error] [pid 49763:tid 49777] [client 13.71.191.191:3059] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/class.engine.php"] [unique_id "aaLE6bTHSOG_yf2PpqFljAAAAcs"]
[Sat Feb 28 18:35:22.422976 2026] [:error] [pid 49763:tid 49777] [client 13.71.191.191:3036] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/format-library/admin.php"] [unique_id "aaLE6rTHSOG_yf2PpqFlmQAAAcs"]
[Sat Feb 28 18:35:55.801295 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:3042] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/editor/tinyfilemanager.php"] [unique_id "aaLFCxCf4HvhVePw3LaKNgAAAAQ"]
[Sat Feb 28 18:35:56.588958 2026] [:error] [pid 39184:tid 39236] [client 13.71.191.191:2957] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/404.php"] [unique_id "aaLFDFtZF9Zd_U7easBnegAAAFE"]
[Sat Feb 28 18:36:03.885454 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:2956] [client 13.71.191.191] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.86.200.230_7db4a16e2f6cf1de571ce2a1d0ad67c8b5eeb6b1"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaLFERVE-FfM89u7BQZ-igAAAIs"]
[Sat Feb 28 18:36:08.177665 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:2956] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaLFGBVE-FfM89u7BQZ-kAAAAIM"]
[Sat Feb 28 18:36:09.349886 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:3011] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaLFGbLWOogAgHGh62QDxgAAAZE"]
[Sat Feb 28 18:36:10.612648 2026] [:error] [pid 52460:tid 52468] [client 13.71.191.191:2969] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaLFGrLWOogAgHGh62QDzQAAAYU"]
[Sat Feb 28 18:36:11.490037 2026] [:error] [pid 52460:tid 52483] [client 13.71.191.191:2976] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaLFG7LWOogAgHGh62QDzwAAAZQ"]
[Sat Feb 28 18:36:12.201731 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:2962] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaLFHLLWOogAgHGh62QD0gAAAY4"]
[Sat Feb 28 18:36:12.901180 2026] [:error] [pid 39184:tid 39222] [client 13.71.191.191:3026] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaLFHFtZF9Zd_U7easBntgAAAEM"]
[Sat Feb 28 18:36:13.412331 2026] [:error] [pid 39183:tid 39204] [client 13.71.191.191:3019] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaLFHRCf4HvhVePw3LaKcgAAAAw"]
[Sat Feb 28 18:36:14.107430 2026] [:error] [pid 39184:tid 39226] [client 13.71.191.191:3003] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaLFHltZF9Zd_U7easBnugAAAEc"]
[Sat Feb 28 18:36:14.762825 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:2963] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aaLFHrLWOogAgHGh62QD4wAAAYo"]
[Sat Feb 28 18:36:15.239709 2026] [:error] [pid 49763:tid 49785] [client 13.71.191.191:2977] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aaLFH7THSOG_yf2PpqFnggAAAdM"]
[Sat Feb 28 18:36:15.973287 2026] [:error] [pid 39184:tid 39219] [client 13.71.191.191:2883] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aaLFH1tZF9Zd_U7easBnxgAAAEA"]
[Sat Feb 28 18:36:16.622342 2026] [:error] [pid 39183:tid 39204] [client 13.71.191.191:2992] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs.php"] [unique_id "aaLFIBCf4HvhVePw3LaKlgAAAAw"]
[Sat Feb 28 18:36:17.078721 2026] [:error] [pid 11791:tid 11801] [client 13.71.191.191:2991] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aaLFIWuX5e1Q32gqxH2YFwAAAQg"]
[Sat Feb 28 18:36:17.697569 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:2998] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaLFIbTHSOG_yf2PpqFn9gAAAdc"]
[Sat Feb 28 18:36:18.319085 2026] [:error] [pid 49763:tid 49784] [client 13.71.191.191:2835] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaLFIrTHSOG_yf2PpqFn-gAAAdI"]
[Sat Feb 28 18:36:18.790580 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:2899] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaLFIhCf4HvhVePw3LaKogAAAAY"]
[Sat Feb 28 18:36:19.283609 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:2915] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaLFI7THSOG_yf2PpqFoAwAAAcU"]
[Sat Feb 28 18:36:19.859436 2026] [:error] [pid 39183:tid 39210] [client 13.71.191.191:2881] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaLFIxCf4HvhVePw3LaKqAAAABI"]
[Sat Feb 28 18:36:20.481189 2026] [:error] [pid 39183:tid 39197] [client 13.71.191.191:2891] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaLFJBCf4HvhVePw3LaKrgAAAAU"]
[Sat Feb 28 18:36:21.020674 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:3007] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaLFJbLWOogAgHGh62QEAAAAAZY"]
[Sat Feb 28 18:36:21.477084 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:2971] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaLFJRCf4HvhVePw3LaKtAAAABM"]
[Sat Feb 28 18:36:21.938821 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:2987] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaLFJbLWOogAgHGh62QEDQAAAYo"]
[Sat Feb 28 18:36:22.473045 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:2930] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaLFJqIAO5fN7BxyqcFEiwAAAMU"]
[Sat Feb 28 18:36:23.158207 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:3006] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaLFJ7THSOG_yf2PpqFoEwAAAcg"]
[Sat Feb 28 18:36:23.798530 2026] [:error] [pid 39184:tid 39232] [client 13.71.191.191:2989] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaLFJ1tZF9Zd_U7easBoAQAAAE0"]
[Sat Feb 28 18:36:24.378912 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:2882] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oload_classmap.php"] [unique_id "aaLFKLLWOogAgHGh62QEIwAAAYw"]
[Sat Feb 28 18:36:24.910710 2026] [:error] [pid 39183:tid 39205] [client 13.71.191.191:3029] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oload_classmap.php"] [unique_id "aaLFKBCf4HvhVePw3LaLBQAAAA0"]
[Sat Feb 28 18:36:25.943682 2026] [:error] [pid 39183:tid 39208] [client 13.71.191.191:3043] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oload_classmap.php"] [unique_id "aaLFKRCf4HvhVePw3LaLGQAAABA"]
[Sat Feb 28 18:36:26.476514 2026] [:error] [pid 39183:tid 39195] [client 13.71.191.191:2916] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oload_classmap.php"] [unique_id "aaLFKhCf4HvhVePw3LaLIAAAAAM"]
[Sat Feb 28 18:36:27.272508 2026] [:error] [pid 39183:tid 39199] [client 13.71.191.191:2911] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaLFKxCf4HvhVePw3LaLKwAAAAc"]
[Sat Feb 28 18:36:28.009130 2026] [:error] [pid 49763:tid 49784] [client 13.71.191.191:2994] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaLFLLTHSOG_yf2PpqFoKwAAAdI"]
[Sat Feb 28 18:36:28.698435 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:2884] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaLFLLLWOogAgHGh62QEOQAAAYA"]
[Sat Feb 28 18:36:29.434344 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:3001] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaLFLbTHSOG_yf2PpqFoNwAAAcg"]
[Sat Feb 28 18:36:29.973027 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:3016] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize//parx.php"] [unique_id "aaLFLbLWOogAgHGh62QEOwAAAZA"]
[Sat Feb 28 18:36:31.134812 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:2983] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/IXR/network.php"] [unique_id "aaLFLxCf4HvhVePw3LaLRwAAAAI"]
[Sat Feb 28 18:36:33.267237 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:2931] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/IXR/network.php"] [unique_id "aaLFMbTHSOG_yf2PpqFoWgAAAcM"]
[Sat Feb 28 18:36:34.225033 2026] [:error] [pid 39184:tid 39230] [client 13.71.191.191:3033] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/IXR/network.php"] [unique_id "aaLFMltZF9Zd_U7easBoLQAAAEs"]
[Sat Feb 28 18:36:35.352133 2026] [:error] [pid 39292:tid 39317] [client 13.71.191.191:2908] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/IXR/network.php"] [unique_id "aaLFM6IAO5fN7BxyqcFEqwAAANc"]
[Sat Feb 28 18:36:36.292233 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:2949] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaLFNKIAO5fN7BxyqcFErQAAANU"]
[Sat Feb 28 18:36:36.800504 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:2913] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaLFNLTHSOG_yf2PpqFoagAAAcw"]
[Sat Feb 28 18:36:37.532720 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:3017] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaLFNaIAO5fN7BxyqcFEsQAAAMg"]
[Sat Feb 28 18:36:38.368799 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:2946] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaLFNhCf4HvhVePw3LaLZgAAAAI"]
[Sat Feb 28 18:36:40.631998 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:2984] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/transaction_history.php"] [unique_id "aaLFOLLWOogAgHGh62QEXwAAAYA"]
[Sat Feb 28 18:36:41.764196 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:2903] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/transaction_history.php"] [unique_id "aaLFORVE-FfM89u7BQZ-twAAAJU"]
[Sat Feb 28 18:36:42.886477 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:2940] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/transaction_history.php"] [unique_id "aaLFOhCf4HvhVePw3LaLdwAAABY"]
[Sat Feb 28 18:36:44.170705 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:3046] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/transaction_history.php"] [unique_id "aaLFPLLWOogAgHGh62QEawAAAYg"]
[Sat Feb 28 18:36:46.610086 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:2822] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaLFPhVE-FfM89u7BQZ-1wAAAIQ"]
[Sat Feb 28 18:36:47.839855 2026] [:error] [pid 49763:tid 49785] [client 13.71.191.191:2892] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaLFP7THSOG_yf2PpqFojgAAAdM"]
[Sat Feb 28 18:36:49.787965 2026] [:error] [pid 52460:tid 52483] [client 13.71.191.191:2966] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaLFQbLWOogAgHGh62QEdwAAAZQ"]
[Sat Feb 28 18:36:50.918237 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:2980] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaLFQrLWOogAgHGh62QEfgAAAYA"]
[Sat Feb 28 18:36:56.099917 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:2846] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaLFSLTHSOG_yf2PpqFoygAAAcM"]
[Sat Feb 28 18:36:59.554833 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:2924] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaLFS1tZF9Zd_U7easBovQAAAEo"]
[Sat Feb 28 18:37:01.133548 2026] [:error] [pid 39183:tid 39199] [client 13.71.191.191:2925] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaLFTRCf4HvhVePw3LaLwQAAAAc"]
[Sat Feb 28 18:37:02.564050 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:2898] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaLFTrTHSOG_yf2PpqFo-wAAAcU"]
[Sat Feb 28 18:37:03.853510 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:2920] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaLFT7LWOogAgHGh62QElQAAAYY"]
[Sat Feb 28 18:37:04.985874 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:2888] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaLFUH6mbajs3bzQGyuFxgAAAUU"]
[Sat Feb 28 18:37:13.410154 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:2897] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/input.php"] [unique_id "aaLFWbTHSOG_yf2PpqFpSQAAAcE"]
[Sat Feb 28 18:37:59.843740 2026] [:error] [pid 49763:tid 49780] [client 13.71.191.191:2847] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaLFh7THSOG_yf2PpqFrIgAAAc4"]
[Sat Feb 28 18:38:00.638724 2026] [:error] [pid 39183:tid 39207] [client 13.71.191.191:2985] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaLFiBCf4HvhVePw3LaMsAAAAA8"]
[Sat Feb 28 18:38:02.549002 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:2938] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaLFirTHSOG_yf2PpqFrKgAAAdE"]
[Sat Feb 28 18:38:03.503819 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:2921] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaLFixCf4HvhVePw3LaMwAAAAA4"]
[Sat Feb 28 18:38:04.113270 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:2928] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaLFjLTHSOG_yf2PpqFrOgAAAcY"]
[Sat Feb 28 18:38:04.649479 2026] [:error] [pid 49763:tid 49766] [client 13.71.191.191:2934] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaLFjLTHSOG_yf2PpqFrPwAAAcA"]
[Sat Feb 28 18:38:05.556631 2026] [:error] [pid 49763:tid 49766] [client 13.71.191.191:2900] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaLFjbTHSOG_yf2PpqFrSgAAAcA"]
[Sat Feb 28 18:38:06.758014 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:2843] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaLFjltZF9Zd_U7easBqAgAAAFU"]
[Sat Feb 28 18:38:07.750597 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:3032] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aaLFj7LWOogAgHGh62QFbwAAAYE"]
[Sat Feb 28 18:38:09.002260 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:2836] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aaLFkbTHSOG_yf2PpqFrXQAAAcg"]
[Sat Feb 28 18:38:09.682157 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:3057] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aaLFkbTHSOG_yf2PpqFrYgAAAcM"]
[Sat Feb 28 18:38:10.898083 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:2973] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "aaLFkrTHSOG_yf2PpqFrcwAAAdA"]
[Sat Feb 28 18:38:11.641121 2026] [:error] [pid 39183:tid 39210] [client 13.71.191.191:2886] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaLFkxCf4HvhVePw3LaM-gAAABI"]
[Sat Feb 28 18:38:12.343406 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:3013] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaLFlBCf4HvhVePw3LaNAQAAAAY"]
[Sat Feb 28 18:38:12.767043 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:2999] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaLFlLTHSOG_yf2PpqFrhQAAAcw"]
[Sat Feb 28 18:38:13.307529 2026] [:error] [pid 49763:tid 49775] [client 13.71.191.191:2893] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaLFlbTHSOG_yf2PpqFriwAAAck"]
[Sat Feb 28 18:38:13.928537 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:2894] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms.php"] [unique_id "aaLFlRCf4HvhVePw3LaNEAAAAAY"]
[Sat Feb 28 18:38:14.506540 2026] [:error] [pid 49763:tid 49770] [client 13.71.191.191:3014] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms.php"] [unique_id "aaLFlrTHSOG_yf2PpqFrnAAAAcQ"]
[Sat Feb 28 18:38:15.247663 2026] [:error] [pid 39183:tid 39199] [client 13.71.191.191:2907] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms.php"] [unique_id "aaLFlxCf4HvhVePw3LaNEwAAAAc"]
[Sat Feb 28 18:38:15.934211 2026] [:error] [pid 39183:tid 39210] [client 13.71.191.191:2887] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms.php"] [unique_id "aaLFlxCf4HvhVePw3LaNGAAAABI"]
[Sat Feb 28 18:38:16.689585 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:2827] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aaLFmFtZF9Zd_U7easBqGgAAAFQ"]
[Sat Feb 28 18:38:17.824262 2026] [:error] [pid 49763:tid 49775] [client 13.71.191.191:2918] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aaLFmbTHSOG_yf2PpqFrxQAAAck"]
[Sat Feb 28 18:38:18.983246 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:2856] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aaLFmhCf4HvhVePw3LaNOAAAABM"]
[Sat Feb 28 18:38:19.562524 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:2820] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aaLFm7THSOG_yf2PpqFr2QAAAdE"]
[Sat Feb 28 18:38:20.025591 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:2923] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/duck.php"] [unique_id "aaLFnLLWOogAgHGh62QFjQAAAYc"]
[Sat Feb 28 18:38:20.486342 2026] [:error] [pid 49763:tid 49784] [client 13.71.191.191:2851] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/duck.php"] [unique_id "aaLFnLTHSOG_yf2PpqFr4wAAAdI"]
[Sat Feb 28 18:38:20.949232 2026] [:error] [pid 52460:tid 52483] [client 13.71.191.191:3022] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/duck.php"] [unique_id "aaLFnLLWOogAgHGh62QFjwAAAZQ"]
[Sat Feb 28 18:38:21.418977 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:2902] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/duck.php"] [unique_id "aaLFnbTHSOG_yf2PpqFr7QAAAcE"]
[Sat Feb 28 18:38:21.987045 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:2885] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaLFnbTHSOG_yf2PpqFr8wAAAcU"]
[Sat Feb 28 18:38:22.613673 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:2890] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaLFnhCf4HvhVePw3LaNRgAAABg"]
[Sat Feb 28 18:38:23.038643 2026] [:error] [pid 49763:tid 49773] [client 13.71.191.191:2855] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaLFn7THSOG_yf2PpqFr_wAAAcc"]
[Sat Feb 28 18:38:23.551758 2026] [:error] [pid 39183:tid 39210] [client 13.71.191.191:2968] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaLFnxCf4HvhVePw3LaNTQAAABI"]
[Sat Feb 28 18:38:24.134173 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:2951] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaLFoGuX5e1Q32gqxH2YcQAAAQU"]
[Sat Feb 28 18:38:24.552321 2026] [:error] [pid 39184:tid 39237] [client 13.71.191.191:2952] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaLFoFtZF9Zd_U7easBqKwAAAFI"]
[Sat Feb 28 18:38:25.059893 2026] [:error] [pid 52460:tid 52466] [client 13.71.191.191:2858] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaLFobLWOogAgHGh62QFlAAAAYM"]
[Sat Feb 28 18:38:25.605752 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:2996] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaLFoRVE-FfM89u7BQZ_DAAAAJI"]
[Sat Feb 28 19:08:16.115823 2026] [:error] [pid 52460:tid 52467] [client 45.153.34.31:33904] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aaLMoLLWOogAgHGh62Qe4AAAAYQ"]
[Sat Feb 28 19:39:13.663375 2026] [:error] [pid 39183:tid 39193] [client 91.92.242.216:50220] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaLT4RCf4HvhVePw3LbYMwAAAAE"]
[Sat Feb 28 19:39:20.450387 2026] [:error] [pid 52460:tid 52485] [client 91.92.242.216:57223] [client 91.92.242.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.216, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaLT6LLWOogAgHGh62Q5LwAAAZY"], referer: https://www.google.com/
[Sat Feb 28 19:40:46.013263 2026] [autoindex:error] [pid 39183:tid 39194] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:46.277507 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:46.546279 2026] [autoindex:error] [pid 39183:tid 39196] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:46.821684 2026] [autoindex:error] [pid 39183:tid 39203] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:50.168427 2026] [autoindex:error] [pid 39183:tid 39197] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:50.684423 2026] [autoindex:error] [pid 39183:tid 39213] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:50.910664 2026] [autoindex:error] [pid 39183:tid 39202] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:52.527702 2026] [autoindex:error] [pid 39183:tid 39193] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:52.810673 2026] [autoindex:error] [pid 39183:tid 39199] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:53.349947 2026] [autoindex:error] [pid 39183:tid 39212] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:40:55.831683 2026] [autoindex:error] [pid 39183:tid 39208] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:01.700841 2026] [autoindex:error] [pid 39183:tid 39211] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:02.334277 2026] [autoindex:error] [pid 39183:tid 39208] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:02.740660 2026] [autoindex:error] [pid 39183:tid 39209] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:08.628790 2026] [autoindex:error] [pid 39183:tid 39202] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:11.604939 2026] [autoindex:error] [pid 39183:tid 39198] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:16.673869 2026] [autoindex:error] [pid 39183:tid 39205] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:16.922671 2026] [autoindex:error] [pid 39183:tid 39198] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:17.189623 2026] [autoindex:error] [pid 39183:tid 39211] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:32.405659 2026] [autoindex:error] [pid 39183:tid 39214] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:35.196770 2026] [autoindex:error] [pid 39183:tid 39206] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:35.490564 2026] [autoindex:error] [pid 39183:tid 39198] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:36.253511 2026] [autoindex:error] [pid 39183:tid 39196] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:36.520750 2026] [autoindex:error] [pid 39183:tid 39206] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:41:37.924574 2026] [autoindex:error] [pid 39183:tid 39205] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:42:56.881482 2026] [autoindex:error] [pid 39183:tid 39205] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:42:57.118664 2026] [autoindex:error] [pid 39183:tid 39193] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:42:57.385332 2026] [autoindex:error] [pid 39183:tid 39199] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:42:57.719490 2026] [autoindex:error] [pid 39183:tid 39206] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:43:04.013633 2026] [autoindex:error] [pid 39183:tid 39207] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:43:06.819178 2026] [autoindex:error] [pid 39183:tid 39193] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:43:07.085345 2026] [autoindex:error] [pid 39183:tid 39194] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:43:07.369414 2026] [autoindex:error] [pid 39183:tid 39213] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:43:10.389979 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:43:10.629765 2026] [autoindex:error] [pid 39183:tid 39210] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:43:10.902515 2026] [autoindex:error] [pid 39183:tid 39207] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:43:11.150791 2026] [autoindex:error] [pid 39183:tid 39196] [client 185.198.240.181:29689] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:44:12.947616 2026] [autoindex:error] [pid 11791:tid 11811] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:44:41.955706 2026] [autoindex:error] [pid 11791:tid 11817] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:44:52.576972 2026] [autoindex:error] [pid 11791:tid 11805] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:44:52.825495 2026] [autoindex:error] [pid 11791:tid 11802] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:03.967951 2026] [autoindex:error] [pid 11791:tid 11797] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:04.267166 2026] [autoindex:error] [pid 11791:tid 11794] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:04.539936 2026] [autoindex:error] [pid 11791:tid 11816] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:04.812473 2026] [autoindex:error] [pid 11791:tid 11803] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:05.116096 2026] [autoindex:error] [pid 11791:tid 11800] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:05.408167 2026] [autoindex:error] [pid 11791:tid 11806] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:05.676669 2026] [autoindex:error] [pid 11791:tid 11807] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:05.951616 2026] [autoindex:error] [pid 11791:tid 11805] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:45:56.081282 2026] [autoindex:error] [pid 11791:tid 11797] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:46:01.898682 2026] [autoindex:error] [pid 11791:tid 11809] [client 209.87.169.164:32739] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:52:33.273769 2026] [:error] [pid 11791:tid 11799] [client 20.220.212.70:30244] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaLXAWuX5e1Q32gqxH2vGQAAAQY"]
[Sat Feb 28 19:52:34.127588 2026] [:error] [pid 39184:tid 39224] [client 20.220.212.70:30209] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaLXAltZF9Zd_U7easCTigAAAEU"]
[Sat Feb 28 19:52:34.976204 2026] [:error] [pid 49763:tid 49774] [client 20.220.212.70:30253] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaLXArTHSOG_yf2PpqHpWQAAAcg"]
[Sat Feb 28 19:52:35.815456 2026] [:error] [pid 39185:tid 39267] [client 20.220.212.70:30222] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaLXAxVE-FfM89u7BQaPFgAAAJU"]
[Sat Feb 28 20:34:21.244369 2026] [:error] [pid 49763:tid 49779] [client 20.220.196.236:64786] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLgzbTHSOG_yf2PpqEurQAAAc0"]
[Sat Feb 28 20:34:22.668281 2026] [:error] [pid 22194:tid 22198] [client 20.220.196.236:64848] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLgzn6mbajs3bzQGyua9gAAAUI"]
[Sat Feb 28 20:34:24.073030 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:64775] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLg0BVE-FfM89u7BQaXuwAAAI8"]
[Sat Feb 28 20:34:25.496293 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:64855] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/boots.php"] [unique_id "aaLg0RCf4HvhVePw3LYYmwAAAA8"]
[Sat Feb 28 20:34:26.918045 2026] [:error] [pid 49763:tid 49769] [client 20.220.196.236:64858] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/boots.php"] [unique_id "aaLg0rTHSOG_yf2PpqEutwAAAcM"]
[Sat Feb 28 20:34:28.343899 2026] [:error] [pid 39184:tid 39232] [client 20.220.196.236:65520] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/boots.php"] [unique_id "aaLg1FtZF9Zd_U7easCsGAAAAE0"]
[Sat Feb 28 20:34:29.755877 2026] [:error] [pid 39183:tid 39215] [client 20.220.196.236:65457] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/boots.php"] [unique_id "aaLg1RCf4HvhVePw3LYYpAAAABc"]
[Sat Feb 28 20:34:31.171782 2026] [:error] [pid 39183:tid 39205] [client 20.220.196.236:65455] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logi.php"] [unique_id "aaLg1xCf4HvhVePw3LYYrgAAAA0"]
[Sat Feb 28 20:34:32.588465 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:64820] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logi.php"] [unique_id "aaLg2LTHSOG_yf2PpqEuvgAAAcg"]
[Sat Feb 28 20:34:34.012615 2026] [:error] [pid 52460:tid 52464] [client 20.220.196.236:64890] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logi.php"] [unique_id "aaLg2rLWOogAgHGh62RlMwAAAYE"]
[Sat Feb 28 20:34:35.423003 2026] [:error] [pid 11791:tid 11796] [client 20.220.196.236:64851] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/logi.php"] [unique_id "aaLg22uX5e1Q32gqxH25jwAAAQM"]
[Sat Feb 28 20:34:36.847417 2026] [:error] [pid 39292:tid 39301] [client 20.220.196.236:64832] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLg3KIAO5fN7BxyqcFtRAAAAMc"]
[Sat Feb 28 20:34:38.276708 2026] [:error] [pid 39184:tid 39219] [client 20.220.196.236:65409] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLg3ltZF9Zd_U7easCsKAAAAEA"]
[Sat Feb 28 20:34:39.690616 2026] [:error] [pid 39292:tid 39309] [client 20.220.196.236:65482] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLg36IAO5fN7BxyqcFtRQAAAM8"]
[Sat Feb 28 20:34:41.110991 2026] [:error] [pid 39292:tid 39313] [client 20.220.196.236:65432] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLg4aIAO5fN7BxyqcFtSgAAANM"]
[Sat Feb 28 20:34:42.533193 2026] [:error] [pid 52460:tid 52472] [client 20.220.196.236:64849] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samfa.php"] [unique_id "aaLg4rLWOogAgHGh62RlQgAAAYk"]
[Sat Feb 28 20:34:43.980567 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:64785] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samfa.php"] [unique_id "aaLg47LWOogAgHGh62RlRwAAAY0"]
[Sat Feb 28 20:34:45.393266 2026] [:error] [pid 39184:tid 39233] [client 20.220.196.236:65474] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samfa.php"] [unique_id "aaLg5VtZF9Zd_U7easCsPgAAAE4"]
[Sat Feb 28 20:34:46.815423 2026] [:error] [pid 39183:tid 39206] [client 20.220.196.236:65427] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samfa.php"] [unique_id "aaLg5hCf4HvhVePw3LYYyQAAAA4"]
[Sat Feb 28 20:34:48.237347 2026] [:error] [pid 39184:tid 39237] [client 20.220.196.236:64879] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLg6FtZF9Zd_U7easCsQgAAAFI"]
[Sat Feb 28 20:34:49.645257 2026] [:error] [pid 39292:tid 39296] [client 20.220.196.236:65442] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLg6aIAO5fN7BxyqcFtUwAAAMI"]
[Sat Feb 28 20:34:51.068829 2026] [:error] [pid 39292:tid 39300] [client 20.220.196.236:65503] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLg66IAO5fN7BxyqcFtWgAAAMY"]
[Sat Feb 28 20:34:52.492455 2026] [:error] [pid 52460:tid 52473] [client 20.220.196.236:64845] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLg7LLWOogAgHGh62RlYAAAAYo"]
[Sat Feb 28 20:34:53.912474 2026] [:error] [pid 52460:tid 52481] [client 20.220.196.236:65484] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLg7bLWOogAgHGh62RlZQAAAZI"]
[Sat Feb 28 20:34:55.322475 2026] [:error] [pid 11791:tid 11808] [client 20.220.196.236:65430] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLg72uX5e1Q32gqxH25mwAAAQ8"]
[Sat Feb 28 20:34:56.742813 2026] [:error] [pid 11791:tid 11810] [client 20.220.196.236:64866] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLg8GuX5e1Q32gqxH25nAAAARE"]
[Sat Feb 28 20:34:58.166497 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:64827] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLg8rTHSOG_yf2PpqEvDwAAAdE"]
[Sat Feb 28 20:34:59.589467 2026] [:error] [pid 39184:tid 39220] [client 20.220.196.236:65461] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaLg81tZF9Zd_U7easCsdgAAAEE"]
[Sat Feb 28 20:35:01.010730 2026] [:error] [pid 52460:tid 52478] [client 20.220.196.236:64844] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaLg9bLWOogAgHGh62RleQAAAY8"]
[Sat Feb 28 20:35:02.451781 2026] [:error] [pid 39292:tid 39308] [client 20.220.196.236:64779] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaLg9qIAO5fN7BxyqcFtZwAAAM4"]
[Sat Feb 28 20:35:03.871809 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:65460] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaLg97LWOogAgHGh62RligAAAYU"]
[Sat Feb 28 20:35:05.298271 2026] [:error] [pid 39185:tid 39257] [client 20.220.196.236:64170] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaLg-RVE-FfM89u7BQaX4gAAAIs"]
[Sat Feb 28 20:35:06.718732 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:64868] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaLg-rTHSOG_yf2PpqEvXgAAAdE"]
[Sat Feb 28 20:35:08.141080 2026] [:error] [pid 49763:tid 49789] [client 20.220.196.236:64813] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaLg_LTHSOG_yf2PpqEvbwAAAdc"]
[Sat Feb 28 20:35:09.563464 2026] [:error] [pid 49763:tid 49784] [client 20.220.196.236:64768] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaLg_bTHSOG_yf2PpqEvegAAAdI"]
[Sat Feb 28 20:35:10.985326 2026] [:error] [pid 49763:tid 49766] [client 20.220.196.236:65425] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaLg_rTHSOG_yf2PpqEvhgAAAcA"]
[Sat Feb 28 20:35:12.406712 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:63607] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaLhABCf4HvhVePw3LYY_wAAABE"]
[Sat Feb 28 20:35:13.829590 2026] [:error] [pid 39183:tid 39200] [client 20.220.196.236:65498] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaLhARCf4HvhVePw3LYZCAAAAAg"]
[Sat Feb 28 20:35:15.251865 2026] [:error] [pid 49763:tid 49788] [client 20.220.196.236:65419] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaLhA7THSOG_yf2PpqEvoQAAAdY"]
[Sat Feb 28 20:35:58.259892 2026] [:error] [pid 22194:tid 22212] [client 20.220.196.236:65459] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLhLn6mbajs3bzQGyubHAAAAVA"]
[Sat Feb 28 20:35:59.682381 2026] [:error] [pid 11791:tid 11813] [client 20.220.196.236:64828] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLhL2uX5e1Q32gqxH25xQAAARQ"]
[Sat Feb 28 20:36:01.104562 2026] [:error] [pid 39292:tid 39304] [client 20.220.196.236:64148] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLhMaIAO5fN7BxyqcFtlwAAAMo"]
[Sat Feb 28 20:36:02.524185 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:64807] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLhMrLWOogAgHGh62RmOwAAAYY"]
[Sat Feb 28 20:36:03.946213 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:64215] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaLhM7THSOG_yf2PpqEw4QAAAdE"]
[Sat Feb 28 20:36:05.369494 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:65421] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaLhNRCf4HvhVePw3LYZrQAAABE"]
[Sat Feb 28 20:36:06.793369 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:64252] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaLhNrTHSOG_yf2PpqExBgAAAcg"]
[Sat Feb 28 20:36:08.214601 2026] [:error] [pid 39292:tid 39310] [client 20.220.196.236:64887] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaLhOKIAO5fN7BxyqcFtpQAAANA"]
[Sat Feb 28 20:36:09.642931 2026] [:error] [pid 39183:tid 39208] [client 20.220.196.236:64893] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLhORCf4HvhVePw3LYZtwAAABA"]
[Sat Feb 28 20:36:11.061586 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:64809] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLhOxCf4HvhVePw3LYZxwAAAAU"]
[Sat Feb 28 20:36:12.481603 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:64790] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLhPLLWOogAgHGh62RmZQAAAYY"]
[Sat Feb 28 20:36:13.907900 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:64840] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLhPRCf4HvhVePw3LYZ5gAAAA8"]
[Sat Feb 28 20:36:15.326888 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:65422] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLhPxCf4HvhVePw3LYZ_AAAAAo"]
[Sat Feb 28 20:36:16.748003 2026] [:error] [pid 49763:tid 49771] [client 20.220.196.236:63555] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLhQLTHSOG_yf2PpqExQAAAAcU"]
[Sat Feb 28 20:36:18.208882 2026] [:error] [pid 39184:tid 39233] [client 20.220.196.236:64850] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLhQltZF9Zd_U7easCtEAAAAE4"]
[Sat Feb 28 20:36:19.625053 2026] [:error] [pid 49763:tid 49789] [client 20.220.196.236:65509] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLhQ7THSOG_yf2PpqExSwAAAdc"]
[Sat Feb 28 20:36:21.050167 2026] [:error] [pid 39183:tid 39200] [client 20.220.196.236:64880] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/special.php"] [unique_id "aaLhRRCf4HvhVePw3LYaMwAAAAg"]
[Sat Feb 28 20:36:22.470328 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:64770] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/special.php"] [unique_id "aaLhRhVE-FfM89u7BQaYWgAAAIo"]
[Sat Feb 28 20:36:23.893245 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:64216] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/special.php"] [unique_id "aaLhR7LWOogAgHGh62RmoAAAAY0"]
[Sat Feb 28 20:36:25.315431 2026] [:error] [pid 39183:tid 39200] [client 20.220.196.236:64877] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/special.php"] [unique_id "aaLhSRCf4HvhVePw3LYaXwAAAAg"]
[Sat Feb 28 20:36:26.738653 2026] [:error] [pid 39292:tid 39300] [client 20.220.196.236:63593] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaLhSqIAO5fN7BxyqcFtswAAAMY"]
[Sat Feb 28 20:36:28.160257 2026] [:error] [pid 39183:tid 39200] [client 20.220.196.236:62955] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaLhTBCf4HvhVePw3LYabwAAAAg"]
[Sat Feb 28 20:36:29.583183 2026] [:error] [pid 39184:tid 39243] [client 20.220.196.236:64885] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaLhTVtZF9Zd_U7easCtNQAAAFg"]
[Sat Feb 28 20:36:31.008509 2026] [:error] [pid 39183:tid 39193] [client 20.220.196.236:64789] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaLhTxCf4HvhVePw3LYafwAAAAE"]
[Sat Feb 28 20:36:32.427799 2026] [:error] [pid 11791:tid 11814] [client 20.220.196.236:64841] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaLhUGuX5e1Q32gqxH253QAAARU"]
[Sat Feb 28 20:36:33.849548 2026] [:error] [pid 39185:tid 39258] [client 20.220.196.236:64782] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaLhURVE-FfM89u7BQaYcAAAAIw"]
[Sat Feb 28 20:36:35.273079 2026] [:error] [pid 52460:tid 52466] [client 20.220.196.236:65418] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaLhU7LWOogAgHGh62Rm9gAAAYM"]
[Sat Feb 28 20:36:36.694164 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:65507] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaLhVBCf4HvhVePw3LYargAAAA8"]
[Sat Feb 28 20:36:38.115469 2026] [:error] [pid 39185:tid 39260] [client 20.220.196.236:64787] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLhVhVE-FfM89u7BQaYdwAAAI4"]
[Sat Feb 28 20:36:39.539170 2026] [:error] [pid 49763:tid 49768] [client 20.220.196.236:64867] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLhV7THSOG_yf2PpqEx1gAAAcI"]
[Sat Feb 28 20:36:40.960299 2026] [:error] [pid 49763:tid 49768] [client 20.220.196.236:65486] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLhWLTHSOG_yf2PpqEx6wAAAcI"]
[Sat Feb 28 20:36:42.387891 2026] [:error] [pid 39184:tid 39242] [client 20.220.196.236:64888] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLhWltZF9Zd_U7easCtVAAAAFc"]
[Sat Feb 28 20:36:43.824608 2026] [:error] [pid 49763:tid 49775] [client 20.220.196.236:64235] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLhW7THSOG_yf2PpqEyHAAAAck"]
[Sat Feb 28 20:36:45.247826 2026] [:error] [pid 49763:tid 49778] [client 20.220.196.236:64823] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLhXbTHSOG_yf2PpqEyLgAAAcw"]
[Sat Feb 28 20:36:46.669832 2026] [:error] [pid 39184:tid 39240] [client 20.220.196.236:64172] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLhXltZF9Zd_U7easCtYgAAAFU"]
[Sat Feb 28 20:36:48.091394 2026] [:error] [pid 39184:tid 39225] [client 20.220.196.236:65490] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLhYFtZF9Zd_U7easCtZgAAAEY"]
[Sat Feb 28 20:36:49.511292 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:65513] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-monamon.php"] [unique_id "aaLhYbTHSOG_yf2PpqEyYAAAAcg"]
[Sat Feb 28 20:36:50.935300 2026] [:error] [pid 39183:tid 39194] [client 20.220.196.236:64250] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-monamon.php"] [unique_id "aaLhYhCf4HvhVePw3LYbMwAAAAI"]
[Sat Feb 28 20:36:52.359907 2026] [:error] [pid 39184:tid 39238] [client 20.220.196.236:65428] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-monamon.php"] [unique_id "aaLhZFtZF9Zd_U7easCtcwAAAFM"]
[Sat Feb 28 20:36:53.787163 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:65465] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-monamon.php"] [unique_id "aaLhZbLWOogAgHGh62RnIAAAAYY"]
[Sat Feb 28 20:36:55.217345 2026] [:error] [pid 39184:tid 39219] [client 20.220.196.236:64852] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaLhZ1tZF9Zd_U7easCtfAAAAEA"]
[Sat Feb 28 20:36:56.639623 2026] [:error] [pid 52460:tid 52477] [client 20.220.196.236:64129] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaLhaLLWOogAgHGh62RnJwAAAY4"]
[Sat Feb 28 20:36:58.067642 2026] [autoindex:error] [pid 11791:tid 11807] [client 20.220.196.236:64244] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 20:36:58.278624 2026] [autoindex:error] [pid 11791:tid 11802] [client 20.220.196.236:64244] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 20:37:29.640743 2026] [:error] [pid 39185:tid 39246] [client 20.220.196.236:64846] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aaLhiRVE-FfM89u7BQaYyAAAAIA"]
[Sat Feb 28 20:37:31.077345 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:64874] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aaLhi7THSOG_yf2PpqEzMQAAAdU"]
[Sat Feb 28 20:37:32.501657 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:65412] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aaLhjLTHSOG_yf2PpqEzPgAAAdU"]
[Sat Feb 28 20:37:33.924554 2026] [:error] [pid 52460:tid 52479] [client 20.220.196.236:64804] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zsec.php"] [unique_id "aaLhjbLWOogAgHGh62RoFgAAAZA"]
[Sat Feb 28 20:37:35.386809 2026] [:error] [pid 49763:tid 49782] [client 20.220.196.236:64772] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLhj7THSOG_yf2PpqEzUgAAAdA"]
[Sat Feb 28 20:37:36.800240 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:65423] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLhkBCf4HvhVePw3LYcEgAAABE"]
[Sat Feb 28 20:37:38.223785 2026] [:error] [pid 39184:tid 39235] [client 20.220.196.236:64862] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLhkltZF9Zd_U7easCuNAAAAFA"]
[Sat Feb 28 20:37:39.646586 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:64806] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLhk7THSOG_yf2PpqEzcAAAAcs"]
[Sat Feb 28 20:37:41.076799 2026] [:error] [pid 49763:tid 49771] [client 20.220.196.236:65491] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hi.php"] [unique_id "aaLhlbTHSOG_yf2PpqEzfQAAAcU"]
[Sat Feb 28 20:37:42.505439 2026] [:error] [pid 52460:tid 52486] [client 20.220.196.236:65433] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hi.php"] [unique_id "aaLhlrLWOogAgHGh62RoOgAAAZc"]
[Sat Feb 28 20:37:43.927997 2026] [:error] [pid 39292:tid 39308] [client 20.220.196.236:64134] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hi.php"] [unique_id "aaLhl6IAO5fN7BxyqcFuEgAAAM4"]
[Sat Feb 28 20:37:45.350803 2026] [:error] [pid 39292:tid 39309] [client 20.220.196.236:64872] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hi.php"] [unique_id "aaLhmaIAO5fN7BxyqcFuGAAAAM8"]
[Sat Feb 28 20:37:46.773221 2026] [:error] [pid 11791:tid 11811] [client 20.220.196.236:65488] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaLhmmuX5e1Q32gqxH26JwAAARI"]
[Sat Feb 28 20:37:48.195951 2026] [:error] [pid 49763:tid 49785] [client 20.220.196.236:65510] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaLhnLTHSOG_yf2PpqEzoQAAAdM"]
[Sat Feb 28 20:37:49.637283 2026] [:error] [pid 39292:tid 39313] [client 20.220.196.236:64199] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaLhnaIAO5fN7BxyqcFuHQAAANM"]
[Sat Feb 28 20:37:51.055863 2026] [:error] [pid 39292:tid 39301] [client 20.220.196.236:65500] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaLhn6IAO5fN7BxyqcFuHwAAAMc"]
[Sat Feb 28 20:37:52.478372 2026] [:error] [pid 39185:tid 39265] [client 20.220.196.236:64776] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aaLhoBVE-FfM89u7BQaZFQAAAJM"]
[Sat Feb 28 20:37:53.914711 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:64799] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aaLhobTHSOG_yf2PpqEzzAAAAdU"]
[Sat Feb 28 20:37:55.337839 2026] [:error] [pid 49763:tid 49781] [client 20.220.196.236:64781] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aaLho7THSOG_yf2PpqEz3QAAAc8"]
[Sat Feb 28 20:37:56.771329 2026] [:error] [pid 49763:tid 49772] [client 20.220.196.236:64819] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "aaLhpLTHSOG_yf2PpqEz7QAAAcY"]
[Sat Feb 28 20:37:58.186006 2026] [:error] [pid 49763:tid 49775] [client 20.220.196.236:64857] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.wp/wso.php"] [unique_id "aaLhprTHSOG_yf2PpqEz9gAAAck"]
[Sat Feb 28 20:37:59.605283 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:65481] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.wp/wso.php"] [unique_id "aaLhp7THSOG_yf2PpqE0BgAAAcs"]
[Sat Feb 28 20:38:01.027965 2026] [:error] [pid 52460:tid 52479] [client 20.220.196.236:63572] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.wp/wso.php"] [unique_id "aaLhqbLWOogAgHGh62RobgAAAZA"]
[Sat Feb 28 20:38:02.450236 2026] [:error] [pid 39292:tid 39307] [client 20.220.196.236:65454] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.wp/wso.php"] [unique_id "aaLhqqIAO5fN7BxyqcFuLwAAAM0"]
[Sat Feb 28 20:38:03.872461 2026] [:error] [pid 39183:tid 39211] [client 20.220.196.236:65471] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLhqxCf4HvhVePw3LYcwQAAABM"]
[Sat Feb 28 20:38:05.295349 2026] [:error] [pid 11791:tid 11810] [client 20.220.196.236:64878] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLhrWuX5e1Q32gqxH26QAAAARE"]
[Sat Feb 28 20:38:06.731149 2026] [:error] [pid 39183:tid 39193] [client 20.220.196.236:65523] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLhrhCf4HvhVePw3LYc2AAAAAE"]
[Sat Feb 28 20:38:08.142736 2026] [:error] [pid 39292:tid 39296] [client 20.220.196.236:64891] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLhsKIAO5fN7BxyqcFuQAAAAMI"]
[Sat Feb 28 20:38:09.806054 2026] [:error] [pid 49763:tid 49775] [client 20.220.196.236:64792] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLhsbTHSOG_yf2PpqE0HwAAAck"]
[Sat Feb 28 20:38:11.226769 2026] [:error] [pid 39183:tid 39216] [client 20.220.196.236:64784] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLhsxCf4HvhVePw3LYc-AAAABg"]
[Sat Feb 28 20:38:12.645589 2026] [:error] [pid 39185:tid 39252] [client 20.220.196.236:64839] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLhtBVE-FfM89u7BQaZIAAAAIY"]
[Sat Feb 28 20:38:14.070309 2026] [:error] [pid 49763:tid 49771] [client 20.220.196.236:64180] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLhtrTHSOG_yf2PpqE0LAAAAcU"]
[Sat Feb 28 20:38:15.492020 2026] [:error] [pid 49763:tid 49768] [client 20.220.196.236:63570] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaLht7THSOG_yf2PpqE0OAAAAcI"]
[Sat Feb 28 20:38:16.917106 2026] [:error] [pid 22194:tid 22199] [client 20.220.196.236:65426] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "aaLhuH6mbajs3bzQGyubnwAAAUM"]
[Sat Feb 28 20:38:18.336265 2026] [:error] [pid 49763:tid 49769] [client 20.220.196.236:64189] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "aaLhurTHSOG_yf2PpqE0RAAAAcM"]
[Sat Feb 28 20:38:19.758400 2026] [:error] [pid 49763:tid 49772] [client 20.220.196.236:64798] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "aaLhu7THSOG_yf2PpqE0UQAAAcY"]
[Sat Feb 28 20:38:21.180842 2026] [:error] [pid 52460:tid 52470] [client 20.220.196.236:64829] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new/index.php"] [unique_id "aaLhvbLWOogAgHGh62Ro7AAAAYc"]
[Sat Feb 28 20:38:22.604678 2026] [:error] [pid 49763:tid 49786] [client 20.220.196.236:64818] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new/index.php"] [unique_id "aaLhvrTHSOG_yf2PpqE0ZAAAAdQ"]
[Sat Feb 28 20:38:24.028062 2026] [:error] [pid 39184:tid 39241] [client 20.220.196.236:64240] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new/index.php"] [unique_id "aaLhwFtZF9Zd_U7easCufQAAAFY"]
[Sat Feb 28 20:38:57.833228 2026] [:error] [pid 52460:tid 52472] [client 20.220.196.236:65515] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLh4bLWOogAgHGh62RpcQAAAYk"]
[Sat Feb 28 20:38:59.259007 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:64884] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLh4xCf4HvhVePw3LYd3AAAAA8"]
[Sat Feb 28 20:39:00.680232 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:64157] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLh5BCf4HvhVePw3LYd6wAAAAw"]
[Sat Feb 28 20:39:02.105148 2026] [:error] [pid 49763:tid 49768] [client 20.220.196.236:65512] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLh5rTHSOG_yf2PpqE1pAAAAcI"]
[Sat Feb 28 20:39:03.550282 2026] [:error] [pid 11791:tid 11810] [client 20.220.196.236:65458] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLh52uX5e1Q32gqxH26kwAAARE"]
[Sat Feb 28 20:39:04.995958 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:64178] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLh6LTHSOG_yf2PpqE1sgAAAcg"]
[Sat Feb 28 20:39:06.414281 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:64785] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLh6rTHSOG_yf2PpqE1zAAAAcs"]
[Sat Feb 28 20:39:07.837238 2026] [:error] [pid 39184:tid 39227] [client 20.220.196.236:65505] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLh61tZF9Zd_U7easCvCAAAAEg"]
[Sat Feb 28 20:39:09.309943 2026] [:error] [pid 39184:tid 39238] [client 20.220.196.236:64845] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wc49.php"] [unique_id "aaLh7VtZF9Zd_U7easCvDQAAAFM"]
[Sat Feb 28 20:39:10.771832 2026] [:error] [pid 11791:tid 11814] [client 20.220.196.236:64837] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wc49.php"] [unique_id "aaLh7muX5e1Q32gqxH26nwAAARU"]
[Sat Feb 28 20:39:12.187017 2026] [:error] [pid 52460:tid 52484] [client 20.220.196.236:64822] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wc49.php"] [unique_id "aaLh8LLWOogAgHGh62RppQAAAZU"]
[Sat Feb 28 20:39:13.605834 2026] [:error] [pid 39183:tid 39195] [client 20.220.196.236:64854] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wc49.php"] [unique_id "aaLh8RCf4HvhVePw3LYeewAAAAM"]
[Sat Feb 28 20:39:15.015433 2026] [:error] [pid 49763:tid 49773] [client 20.220.196.236:64892] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/TL.php"] [unique_id "aaLh87THSOG_yf2PpqE2FQAAAcc"]
[Sat Feb 28 20:39:16.442319 2026] [:error] [pid 22194:tid 22209] [client 20.220.196.236:64783] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/TL.php"] [unique_id "aaLh9H6mbajs3bzQGyucQwAAAU0"]
[Sat Feb 28 20:39:17.862585 2026] [:error] [pid 39183:tid 39203] [client 20.220.196.236:64803] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/TL.php"] [unique_id "aaLh9RCf4HvhVePw3LYesQAAAAs"]
[Sat Feb 28 20:39:19.280409 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:65450] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/TL.php"] [unique_id "aaLh97LWOogAgHGh62Rp1gAAAYU"]
[Sat Feb 28 20:39:20.701691 2026] [:error] [pid 39185:tid 39254] [client 20.220.196.236:65443] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "aaLh-BVE-FfM89u7BQaZkQAAAIg"]
[Sat Feb 28 20:39:22.126756 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:64886] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "aaLh-hVE-FfM89u7BQaZlQAAAIE"]
[Sat Feb 28 20:39:23.574557 2026] [:error] [pid 39183:tid 39199] [client 20.220.196.236:65503] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "aaLh-xCf4HvhVePw3LYe1QAAAAc"]
[Sat Feb 28 20:39:24.985539 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:65417] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "aaLh_BVE-FfM89u7BQaZngAAAIo"]
[Sat Feb 28 20:39:26.409385 2026] [:error] [pid 11791:tid 11808] [client 20.220.196.236:65502] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fck.php"] [unique_id "aaLh_muX5e1Q32gqxH26vgAAAQ8"]
[Sat Feb 28 20:39:27.836999 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:64848] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fck.php"] [unique_id "aaLh_7LWOogAgHGh62Rp_QAAAY0"]
[Sat Feb 28 20:39:29.256198 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:64813] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fck.php"] [unique_id "aaLiAbTHSOG_yf2PpqE2uwAAAcg"]
[Sat Feb 28 20:39:30.678189 2026] [:error] [pid 49763:tid 49775] [client 20.220.196.236:64842] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fck.php"] [unique_id "aaLiArTHSOG_yf2PpqE2zQAAAck"]
[Sat Feb 28 20:39:32.099675 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:63502] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaLiBLTHSOG_yf2PpqE23AAAAco"]
[Sat Feb 28 20:39:33.520925 2026] [:error] [pid 39183:tid 39199] [client 20.220.196.236:64859] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaLiBRCf4HvhVePw3LYe-wAAAAc"]
[Sat Feb 28 20:39:34.952737 2026] [:error] [pid 39185:tid 39262] [client 20.220.196.236:65470] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaLiBhVE-FfM89u7BQaZpgAAAJA"]
[Sat Feb 28 20:39:36.398963 2026] [:error] [pid 11791:tid 11800] [client 20.220.196.236:64793] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaLiCGuX5e1Q32gqxH260QAAAQc"]
[Sat Feb 28 20:39:37.813103 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:64883] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aaLiCbTHSOG_yf2PpqE3BAAAAdE"]
[Sat Feb 28 20:39:39.229830 2026] [:error] [pid 49763:tid 49786] [client 20.220.196.236:64774] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aaLiC7THSOG_yf2PpqE3HwAAAdQ"]
[Sat Feb 28 20:39:40.659570 2026] [:error] [pid 39183:tid 39201] [client 20.220.196.236:64788] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aaLiDBCf4HvhVePw3LYfEwAAAAk"]
[Sat Feb 28 20:39:42.071847 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:64176] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aaLiDrLWOogAgHGh62RqUgAAAYQ"]
[Sat Feb 28 20:39:43.495915 2026] [:error] [pid 22194:tid 22213] [client 20.220.196.236:64128] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw2.php"] [unique_id "aaLiD36mbajs3bzQGyucqQAAAVE"]
[Sat Feb 28 20:39:44.915835 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:64834] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw2.php"] [unique_id "aaLiELLWOogAgHGh62RqawAAAYs"]
[Sat Feb 28 20:39:46.349162 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:63566] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw2.php"] [unique_id "aaLiErTHSOG_yf2PpqE3TwAAAdE"]
[Sat Feb 28 20:39:47.771373 2026] [:error] [pid 39292:tid 39297] [client 20.220.196.236:64779] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw2.php"] [unique_id "aaLiE6IAO5fN7BxyqcFu7QAAAMM"]
[Sat Feb 28 20:39:49.186282 2026] [:error] [pid 52460:tid 52480] [client 20.220.196.236:65461] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blackmini.php"] [unique_id "aaLiFbLWOogAgHGh62RqggAAAZE"]
[Sat Feb 28 20:39:50.606776 2026] [:error] [pid 39183:tid 39211] [client 20.220.196.236:64768] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blackmini.php"] [unique_id "aaLiFhCf4HvhVePw3LYfRAAAABM"]
[Sat Feb 28 20:39:52.014331 2026] [:error] [pid 39292:tid 39301] [client 20.220.196.236:64866] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blackmini.php"] [unique_id "aaLiGKIAO5fN7BxyqcFu-wAAAMc"]
[Sat Feb 28 20:40:16.738852 2026] [:error] [pid 39292:tid 39318] [client 20.220.196.236:65492] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/F1.php"] [unique_id "aaLiMKIAO5fN7BxyqcFvMgAAANg"]
[Sat Feb 28 20:40:18.575172 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:64850] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/F1.php"] [unique_id "aaLiMhCf4HvhVePw3LYfwAAAAAU"]
[Sat Feb 28 20:40:20.409442 2026] [:error] [pid 39184:tid 39222] [client 20.220.196.236:64805] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/F1.php"] [unique_id "aaLiNFtZF9Zd_U7easCwGQAAAEM"]
[Sat Feb 28 20:40:22.244920 2026] [:error] [pid 39292:tid 39308] [client 20.220.196.236:65491] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/F1.php"] [unique_id "aaLiNqIAO5fN7BxyqcFvOwAAAM4"]
[Sat Feb 28 20:40:22.448923 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:64858] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaLiNhCf4HvhVePw3LYf0wAAAAo"]
[Sat Feb 28 20:40:23.863456 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:64778] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaLiNxCf4HvhVePw3LYf2AAAAA8"]
[Sat Feb 28 20:40:25.286551 2026] [:error] [pid 11791:tid 11807] [client 20.220.196.236:64832] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaLiOWuX5e1Q32gqxH27LQAAAQ4"]
[Sat Feb 28 20:40:26.721460 2026] [:error] [pid 49763:tid 49778] [client 20.220.196.236:65409] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaLiOrTHSOG_yf2PpqE4SwAAAcw"]
[Sat Feb 28 20:40:28.133617 2026] [:error] [pid 11791:tid 11800] [client 20.220.196.236:65439] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaLiPGuX5e1Q32gqxH27MQAAAQc"]
[Sat Feb 28 20:40:29.554537 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:64876] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaLiPRCf4HvhVePw3LYf9gAAABQ"]
[Sat Feb 28 20:40:30.979322 2026] [:error] [pid 39183:tid 39206] [client 20.220.196.236:64830] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaLiPhCf4HvhVePw3LYgBQAAAA4"]
[Sat Feb 28 20:40:32.400054 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:64833] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaLiQBCf4HvhVePw3LYgEAAAAA8"]
[Sat Feb 28 20:40:33.831369 2026] [:error] [pid 49763:tid 49772] [client 20.220.196.236:64795] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4h.php"] [unique_id "aaLiQbTHSOG_yf2PpqE4hAAAAcY"]
[Sat Feb 28 20:40:35.270414 2026] [:error] [pid 49763:tid 49779] [client 20.220.196.236:65527] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4h.php"] [unique_id "aaLiQ7THSOG_yf2PpqE4kQAAAc0"]
[Sat Feb 28 20:40:36.682831 2026] [:error] [pid 49763:tid 49771] [client 20.220.196.236:64808] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4h.php"] [unique_id "aaLiRLTHSOG_yf2PpqE4pAAAAcU"]
[Sat Feb 28 20:40:38.109184 2026] [:error] [pid 39184:tid 39239] [client 20.220.196.236:64868] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4h.php"] [unique_id "aaLiRltZF9Zd_U7easCwbwAAAFQ"]
[Sat Feb 28 20:40:39.525790 2026] [:error] [pid 22194:tid 22218] [client 20.220.196.236:63614] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yussef.php"] [unique_id "aaLiR36mbajs3bzQGyuc_AAAAVY"]
[Sat Feb 28 20:40:40.959555 2026] [:error] [pid 49763:tid 49779] [client 20.220.196.236:64890] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yussef.php"] [unique_id "aaLiSLTHSOG_yf2PpqE4vAAAAc0"]
[Sat Feb 28 20:40:42.370616 2026] [:error] [pid 39183:tid 39194] [client 20.220.196.236:64249] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yussef.php"] [unique_id "aaLiShCf4HvhVePw3LYgJgAAAAI"]
[Sat Feb 28 20:40:43.793111 2026] [:error] [pid 39183:tid 39195] [client 20.220.196.236:65493] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yussef.php"] [unique_id "aaLiSxCf4HvhVePw3LYgLAAAAAM"]
[Sat Feb 28 20:40:45.215660 2026] [:error] [pid 39184:tid 39229] [client 20.220.196.236:64811] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aaLiTVtZF9Zd_U7easCwhAAAAEo"]
[Sat Feb 28 20:40:46.649400 2026] [:error] [pid 39292:tid 39302] [client 20.220.196.236:64826] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aaLiTqIAO5fN7BxyqcFvWgAAAMg"]
[Sat Feb 28 20:40:48.061575 2026] [:error] [pid 11791:tid 11811] [client 20.220.196.236:64160] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aaLiUGuX5e1Q32gqxH27WwAAARI"]
[Sat Feb 28 20:40:49.483349 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:65455] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aaLiUbLWOogAgHGh62RsAQAAAY0"]
[Sat Feb 28 20:40:50.907711 2026] [:error] [pid 52460:tid 52475] [client 20.220.196.236:64827] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaLiUrLWOogAgHGh62RsBgAAAYw"]
[Sat Feb 28 20:40:52.338855 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:64775] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaLiVBCf4HvhVePw3LYgMgAAAAw"]
[Sat Feb 28 20:40:53.750442 2026] [:error] [pid 39292:tid 39294] [client 20.220.196.236:63555] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaLiVaIAO5fN7BxyqcFvZAAAAMA"]
[Sat Feb 28 20:40:55.172186 2026] [:error] [pid 49763:tid 49782] [client 20.220.196.236:65485] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaLiV7THSOG_yf2PpqE5LAAAAdA"]
[Sat Feb 28 20:40:56.595607 2026] [:error] [pid 11791:tid 11799] [client 20.220.196.236:64212] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aaLiWGuX5e1Q32gqxH27cgAAAQY"]
[Sat Feb 28 20:40:58.016321 2026] [:error] [pid 39184:tid 39229] [client 20.220.196.236:64213] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aaLiWltZF9Zd_U7easCwpAAAAEo"]
[Sat Feb 28 20:40:59.443319 2026] [:error] [pid 39183:tid 39210] [client 20.220.196.236:63612] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aaLiWxCf4HvhVePw3LYgWgAAABI"]
[Sat Feb 28 20:41:00.862542 2026] [:error] [pid 22194:tid 22220] [client 20.220.196.236:64873] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aaLiXH6mbajs3bzQGyudCQAAAVg"]
[Sat Feb 28 20:41:02.284217 2026] [:error] [pid 52460:tid 52483] [client 20.220.196.236:64801] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aaLiXrLWOogAgHGh62RsIAAAAZQ"]
[Sat Feb 28 20:41:03.706287 2026] [:error] [pid 39292:tid 39303] [client 20.220.196.236:65469] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aaLiX6IAO5fN7BxyqcFvcQAAAMk"]
[Sat Feb 28 20:41:05.140258 2026] [:error] [pid 39292:tid 39301] [client 20.220.196.236:64791] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aaLiYaIAO5fN7BxyqcFvcwAAAMc"]
[Sat Feb 28 20:41:06.553060 2026] [:error] [pid 49763:tid 49781] [client 20.220.196.236:64169] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aaLiYrTHSOG_yf2PpqE5bwAAAc8"]
[Sat Feb 28 20:41:07.975033 2026] [:error] [pid 22194:tid 22203] [client 20.220.196.236:64200] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "aaLiY36mbajs3bzQGyudFwAAAUc"]
[Sat Feb 28 20:41:09.398209 2026] [:error] [pid 39184:tid 39225] [client 20.220.196.236:62952] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "aaLiZVtZF9Zd_U7easCwxwAAAEY"]
[Sat Feb 28 20:41:10.819594 2026] [:error] [pid 39183:tid 39199] [client 20.220.196.236:65440] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "aaLiZhCf4HvhVePw3LYgjQAAAAc"]
[Sat Feb 28 20:41:12.242431 2026] [:error] [pid 49763:tid 49773] [client 20.220.196.236:65422] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "aaLiaLTHSOG_yf2PpqE5ogAAAcc"]
[Sat Feb 28 20:41:13.665311 2026] [:error] [pid 49763:tid 49785] [client 20.220.196.236:64881] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aaLiabTHSOG_yf2PpqE5tgAAAdM"]
[Sat Feb 28 20:41:35.829313 2026] [:error] [pid 52460:tid 52481] [client 20.220.196.236:64782] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aaLif7LWOogAgHGh62RtYQAAAZI"]
[Sat Feb 28 20:41:37.239373 2026] [:error] [pid 52460:tid 52475] [client 20.220.196.236:64233] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aaLigbLWOogAgHGh62RtbAAAAYw"]
[Sat Feb 28 20:41:38.653460 2026] [:error] [pid 52460:tid 52484] [client 20.220.196.236:65436] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aaLigrLWOogAgHGh62RtfAAAAZU"]
[Sat Feb 28 20:41:40.073264 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:64800] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aaLihBCf4HvhVePw3LYhAgAAAAU"]
[Sat Feb 28 20:41:41.496984 2026] [:error] [pid 39183:tid 39198] [client 20.220.196.236:64773] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaLihRCf4HvhVePw3LYhCQAAAAY"]
[Sat Feb 28 20:41:42.918297 2026] [:error] [pid 39183:tid 39206] [client 20.220.196.236:64780] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaLihhCf4HvhVePw3LYhEgAAAA4"]
[Sat Feb 28 20:41:44.342174 2026] [:error] [pid 39183:tid 39210] [client 20.220.196.236:64188] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaLiiBCf4HvhVePw3LYhGgAAABI"]
[Sat Feb 28 20:41:45.763384 2026] [:error] [pid 39184:tid 39233] [client 20.220.196.236:64875] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaLiiVtZF9Zd_U7easCxIAAAAE4"]
[Sat Feb 28 20:41:47.197612 2026] [:error] [pid 39292:tid 39301] [client 20.220.196.236:65423] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aaLii6IAO5fN7BxyqcFvqgAAAMc"]
[Sat Feb 28 20:41:48.609660 2026] [:error] [pid 49763:tid 49773] [client 20.220.196.236:64814] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aaLijLTHSOG_yf2PpqE6XwAAAcc"]
[Sat Feb 28 20:41:50.031279 2026] [:error] [pid 39292:tid 39296] [client 20.220.196.236:65494] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aaLijqIAO5fN7BxyqcFvrAAAAMI"]
[Sat Feb 28 20:41:51.455135 2026] [:error] [pid 49763:tid 49767] [client 20.220.196.236:64194] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xoot.php"] [unique_id "aaLij7THSOG_yf2PpqE6ZgAAAcE"]
[Sat Feb 28 20:41:52.885725 2026] [:error] [pid 39184:tid 39239] [client 20.220.196.236:64887] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaLikFtZF9Zd_U7easCxOQAAAFQ"]
[Sat Feb 28 20:41:54.298846 2026] [:error] [pid 39184:tid 39240] [client 20.220.196.236:65456] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaLikltZF9Zd_U7easCxPQAAAFU"]
[Sat Feb 28 20:41:55.724005 2026] [:error] [pid 39184:tid 39243] [client 20.220.196.236:64889] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaLik1tZF9Zd_U7easCxQwAAAFg"]
[Sat Feb 28 20:41:57.153327 2026] [:error] [pid 39292:tid 39295] [client 20.220.196.236:64847] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaLilaIAO5fN7BxyqcFvtAAAAME"]
[Sat Feb 28 20:41:58.597360 2026] [:error] [pid 39184:tid 39241] [client 20.220.196.236:65408] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaLilltZF9Zd_U7easCxSAAAAFY"]
[Sat Feb 28 20:42:00.043956 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:63574] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaLimBCf4HvhVePw3LYhfAAAABQ"]
[Sat Feb 28 20:42:01.490672 2026] [:error] [pid 39292:tid 39303] [client 20.220.196.236:65499] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaLimaIAO5fN7BxyqcFvugAAAMk"]
[Sat Feb 28 20:42:02.911328 2026] [:error] [pid 52460:tid 52479] [client 20.220.196.236:65513] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaLimrLWOogAgHGh62RuFAAAAZA"]
[Sat Feb 28 20:42:04.335086 2026] [:error] [pid 11791:tid 11798] [client 20.220.196.236:63513] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLinGuX5e1Q32gqxH28BwAAAQU"]
[Sat Feb 28 20:42:05.767463 2026] [:error] [pid 49763:tid 49769] [client 20.220.196.236:65521] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLinbTHSOG_yf2PpqE6fgAAAcM"]
[Sat Feb 28 20:42:07.188428 2026] [:error] [pid 39183:tid 39203] [client 20.220.196.236:64786] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLinxCf4HvhVePw3LYhkQAAAAs"]
[Sat Feb 28 20:42:08.602374 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:64201] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLioLTHSOG_yf2PpqE6jwAAAcs"]
[Sat Feb 28 20:42:10.025464 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:64229] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaLiohCf4HvhVePw3LYhlgAAAAo"]
[Sat Feb 28 20:42:11.446177 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:65518] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaLio7THSOG_yf2PpqE6pQAAAco"]
[Sat Feb 28 20:42:12.880640 2026] [:error] [pid 49763:tid 49786] [client 20.220.196.236:65510] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaLipLTHSOG_yf2PpqE6uwAAAdQ"]
[Sat Feb 28 20:42:14.307173 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:65509] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaLiphCf4HvhVePw3LYhnwAAABE"]
[Sat Feb 28 20:42:15.732548 2026] [:error] [pid 49763:tid 49773] [client 20.220.196.236:64844] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aaLip7THSOG_yf2PpqE65QAAAcc"]
[Sat Feb 28 20:42:17.154696 2026] [:error] [pid 22194:tid 22218] [client 20.220.196.236:65433] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aaLiqX6mbajs3bzQGyudsgAAAVY"]
[Sat Feb 28 20:42:18.577190 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:65478] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aaLiqrTHSOG_yf2PpqE7CgAAAdE"]
[Sat Feb 28 20:42:19.999008 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:64776] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/er.php"] [unique_id "aaLiq7LWOogAgHGh62RuKQAAAYQ"]
[Sat Feb 28 20:42:21.436331 2026] [:error] [pid 39184:tid 39237] [client 20.220.196.236:65435] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fault.php"] [unique_id "aaLirVtZF9Zd_U7easCxXQAAAFI"]
[Sat Feb 28 20:42:22.859402 2026] [:error] [pid 11791:tid 11807] [client 20.220.196.236:64221] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fault.php"] [unique_id "aaLirmuX5e1Q32gqxH28KgAAAQ4"]
[Sat Feb 28 20:42:24.290512 2026] [:error] [pid 39184:tid 39243] [client 20.220.196.236:64772] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fault.php"] [unique_id "aaLisFtZF9Zd_U7easCxZAAAAFg"]
[Sat Feb 28 20:42:25.702611 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:64787] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fault.php"] [unique_id "aaLisRCf4HvhVePw3LYhwAAAAA8"]
[Sat Feb 28 20:42:27.125244 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:64895] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaLisxCf4HvhVePw3LYhyAAAAAw"]
[Sat Feb 28 20:42:28.557209 2026] [:error] [pid 39184:tid 39241] [client 20.220.196.236:64840] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaLitFtZF9Zd_U7easCxaQAAAFY"]
[Sat Feb 28 20:42:29.969687 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:63575] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaLitRCf4HvhVePw3LYh0AAAAA8"]
[Sat Feb 28 20:42:31.387766 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:65418] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aaLit7THSOG_yf2PpqE75AAAAdU"]
[Sat Feb 28 20:42:32.846454 2026] [:error] [pid 49763:tid 49779] [client 20.220.196.236:64161] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aaLiuLTHSOG_yf2PpqE78AAAAc0"]
[Sat Feb 28 20:42:57.415379 2026] [:error] [pid 52460:tid 52483] [client 20.220.196.236:64795] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kolda.php"] [unique_id "aaLi0bLWOogAgHGh62RuqwAAAZQ"]
[Sat Feb 28 20:42:59.245840 2026] [:error] [pid 52460:tid 52470] [client 20.220.196.236:65490] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kolda.php"] [unique_id "aaLi07LWOogAgHGh62RutQAAAYc"]
[Sat Feb 28 20:43:01.075634 2026] [:error] [pid 22194:tid 22212] [client 20.220.196.236:65456] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kolda.php"] [unique_id "aaLi1X6mbajs3bzQGyudygAAAVA"]
[Sat Feb 28 20:43:02.930106 2026] [:error] [pid 39292:tid 39301] [client 20.220.196.236:65464] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kolda.php"] [unique_id "aaLi1qIAO5fN7BxyqcFv8gAAAMc"]
[Sat Feb 28 20:43:04.348478 2026] [:error] [pid 39183:tid 39201] [client 20.220.196.236:65524] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "aaLi2BCf4HvhVePw3LYifgAAAAk"]
[Sat Feb 28 20:43:05.768014 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:64192] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "aaLi2RCf4HvhVePw3LYihQAAAAo"]
[Sat Feb 28 20:43:07.190343 2026] [:error] [pid 39183:tid 39216] [client 20.220.196.236:64841] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "aaLi2xCf4HvhVePw3LYilQAAABg"]
[Sat Feb 28 20:43:08.619348 2026] [:error] [pid 22194:tid 22210] [client 20.220.196.236:64792] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "aaLi3H6mbajs3bzQGyudzQAAAU4"]
[Sat Feb 28 20:43:10.034063 2026] [:error] [pid 39184:tid 39225] [client 20.220.196.236:64884] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaLi3ltZF9Zd_U7easCxsQAAAEY"]
[Sat Feb 28 20:43:11.456249 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:63558] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaLi37THSOG_yf2PpqE87QAAAco"]
[Sat Feb 28 20:43:12.879878 2026] [:error] [pid 52460:tid 52475] [client 20.220.196.236:65446] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaLi4LLWOogAgHGh62Ru0QAAAYw"]
[Sat Feb 28 20:43:14.301897 2026] [:error] [pid 49763:tid 49780] [client 20.220.196.236:64138] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaLi4rTHSOG_yf2PpqE89gAAAc4"]
[Sat Feb 28 20:43:15.724321 2026] [:error] [pid 49763:tid 49775] [client 20.220.196.236:64246] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aaLi47THSOG_yf2PpqE9DQAAAck"]
[Sat Feb 28 20:43:17.156080 2026] [:error] [pid 49763:tid 49767] [client 20.220.196.236:64171] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aaLi5bTHSOG_yf2PpqE9KgAAAcE"]
[Sat Feb 28 20:43:18.583827 2026] [:error] [pid 11791:tid 11804] [client 20.220.196.236:65471] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aaLi5muX5e1Q32gqxH28fAAAAQs"]
[Sat Feb 28 20:43:20.008601 2026] [:error] [pid 39185:tid 39258] [client 20.220.196.236:64798] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aaLi6BVE-FfM89u7BQaavAAAAIw"]
[Sat Feb 28 20:43:21.432285 2026] [:error] [pid 39183:tid 39210] [client 20.220.196.236:64857] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aaLi6RCf4HvhVePw3LYi3AAAABI"]
[Sat Feb 28 20:43:22.852335 2026] [:error] [pid 39183:tid 39201] [client 20.220.196.236:64797] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aaLi6hCf4HvhVePw3LYi5gAAAAk"]
[Sat Feb 28 20:43:24.276822 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:65450] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aaLi7BCf4HvhVePw3LYi6wAAABQ"]
[Sat Feb 28 20:43:25.699740 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:65490] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/un.php"] [unique_id "aaLi7bTHSOG_yf2PpqE9UgAAAcs"]
[Sat Feb 28 20:43:27.120630 2026] [:error] [pid 39184:tid 39243] [client 20.220.196.236:63564] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaLi71tZF9Zd_U7easCxvQAAAFg"]
[Sat Feb 28 20:43:28.542046 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:65459] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaLi8LTHSOG_yf2PpqE9YwAAAcs"]
[Sat Feb 28 20:43:30.006664 2026] [:error] [pid 39184:tid 39222] [client 20.220.196.236:64855] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaLi8ltZF9Zd_U7easCxxgAAAEM"]
[Sat Feb 28 20:43:31.427711 2026] [:error] [pid 39184:tid 39227] [client 20.220.196.236:65516] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaLi81tZF9Zd_U7easCx0gAAAEg"]
[Sat Feb 28 20:43:32.843791 2026] [:error] [pid 39184:tid 39226] [client 20.220.196.236:65496] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaLi9FtZF9Zd_U7easCx3AAAAEc"]
[Sat Feb 28 20:43:34.265460 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:64888] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaLi9rLWOogAgHGh62Ru7AAAAYs"]
[Sat Feb 28 20:43:35.696570 2026] [:error] [pid 49763:tid 49781] [client 20.220.196.236:64849] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaLi97THSOG_yf2PpqE9eQAAAc8"]
[Sat Feb 28 20:43:37.129000 2026] [:error] [pid 49763:tid 49771] [client 20.220.196.236:64871] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaLi-bTHSOG_yf2PpqE9ggAAAcU"]
[Sat Feb 28 20:43:38.548366 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:64892] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aaLi-rTHSOG_yf2PpqE9iQAAAcs"]
[Sat Feb 28 20:43:39.969219 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:64818] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aaLi-7THSOG_yf2PpqE9jgAAAcg"]
[Sat Feb 28 20:43:41.391687 2026] [:error] [pid 49763:tid 49781] [client 20.220.196.236:64870] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aaLi_bTHSOG_yf2PpqE9mQAAAc8"]
[Sat Feb 28 20:43:42.814606 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:65451] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aaLi_rLWOogAgHGh62RvBAAAAYs"]
[Sat Feb 28 20:43:44.236441 2026] [:error] [pid 49763:tid 49788] [client 20.220.196.236:62299] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaLjALTHSOG_yf2PpqE9qwAAAdY"]
[Sat Feb 28 20:43:45.669559 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:64182] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaLjAbTHSOG_yf2PpqE9tQAAAco"]
[Sat Feb 28 20:43:47.089169 2026] [:error] [pid 39184:tid 39234] [client 20.220.196.236:65472] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaLjA1tZF9Zd_U7easCx6QAAAE8"]
[Sat Feb 28 20:43:48.503008 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:65427] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "aaLjBLTHSOG_yf2PpqE9vwAAAdE"]
[Sat Feb 28 20:43:49.936864 2026] [:error] [pid 49763:tid 49770] [client 20.220.196.236:64872] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaLjBbTHSOG_yf2PpqE9xwAAAcQ"]
[Sat Feb 28 20:43:51.386013 2026] [:error] [pid 39292:tid 39299] [client 20.220.196.236:65452] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaLjB6IAO5fN7BxyqcFwJwAAAMU"]
[Sat Feb 28 20:43:52.802963 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:64799] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaLjCLLWOogAgHGh62RvDwAAAYQ"]
[Sat Feb 28 20:43:54.227068 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:64869] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaLjChCf4HvhVePw3LYjhQAAAAo"]
[Sat Feb 28 20:44:18.838599 2026] [:error] [pid 39183:tid 39198] [client 20.220.196.236:64891] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaLjIhCf4HvhVePw3LYj2gAAAAY"]
[Sat Feb 28 20:44:20.693660 2026] [:error] [pid 39185:tid 39263] [client 20.220.196.236:65443] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaLjJBVE-FfM89u7BQaa8AAAAJE"]
[Sat Feb 28 20:44:22.538370 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:64823] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaLjJhCf4HvhVePw3LYj4wAAAAU"]
[Sat Feb 28 20:44:24.395556 2026] [:error] [pid 39292:tid 39306] [client 20.220.196.236:65527] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1vx.php"] [unique_id "aaLjKKIAO5fN7BxyqcFwpAAAAMw"]
[Sat Feb 28 20:44:25.830584 2026] [:error] [pid 49763:tid 49781] [client 20.220.196.236:65465] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaLjKbTHSOG_yf2PpqE-dwAAAc8"]
[Sat Feb 28 20:44:27.260599 2026] [:error] [pid 52460:tid 52483] [client 20.220.196.236:64245] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaLjK7LWOogAgHGh62RvpQAAAZQ"]
[Sat Feb 28 20:44:28.680929 2026] [:error] [pid 22194:tid 22199] [client 20.220.196.236:64819] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaLjLH6mbajs3bzQGyueCAAAAUM"]
[Sat Feb 28 20:44:30.103426 2026] [:error] [pid 39184:tid 39220] [client 20.220.196.236:65417] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaLjLltZF9Zd_U7easCyDwAAAEE"]
[Sat Feb 28 20:44:31.526639 2026] [:error] [pid 49763:tid 49785] [client 20.220.196.236:65424] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaLjL7THSOG_yf2PpqE-nQAAAdM"]
[Sat Feb 28 20:44:32.959281 2026] [:error] [pid 39183:tid 39198] [client 20.220.196.236:64815] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaLjMBCf4HvhVePw3LYkAAAAAAY"]
[Sat Feb 28 20:44:34.372840 2026] [:error] [pid 52460:tid 52473] [client 20.220.196.236:62966] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaLjMrLWOogAgHGh62RvtAAAAYo"]
[Sat Feb 28 20:44:35.794101 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:64770] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaLjMxCf4HvhVePw3LYkLgAAABE"]
[Sat Feb 28 20:44:37.217075 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:65525] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaLjNbTHSOG_yf2PpqE-twAAAdU"]
[Sat Feb 28 20:44:38.649294 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:64241] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaLjNhVE-FfM89u7BQaa-AAAAIk"]
[Sat Feb 28 20:44:40.061785 2026] [:error] [pid 39292:tid 39305] [client 20.220.196.236:65438] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaLjOKIAO5fN7BxyqcFwyQAAAMs"]
[Sat Feb 28 20:44:41.484759 2026] [:error] [pid 49763:tid 49790] [client 20.220.196.236:65520] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaLjObTHSOG_yf2PpqE-zAAAAdg"]
[Sat Feb 28 20:44:42.907341 2026] [:error] [pid 52460:tid 52464] [client 20.220.196.236:64189] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLjOrLWOogAgHGh62Rv2AAAAYE"]
[Sat Feb 28 20:44:44.384105 2026] [:error] [pid 39183:tid 39205] [client 20.220.196.236:64771] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLjPBCf4HvhVePw3LYkXwAAAA0"]
[Sat Feb 28 20:44:45.814018 2026] [:error] [pid 49763:tid 49768] [client 20.220.196.236:64854] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLjPbTHSOG_yf2PpqE-2wAAAcI"]
[Sat Feb 28 20:44:47.247324 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:65488] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLjPxCf4HvhVePw3LYkeAAAABE"]
[Sat Feb 28 20:44:48.660280 2026] [:error] [pid 49763:tid 49770] [client 20.220.196.236:65412] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aaLjQLTHSOG_yf2PpqE-8gAAAcQ"]
[Sat Feb 28 20:44:50.082910 2026] [:error] [pid 49763:tid 49778] [client 20.220.196.236:64806] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aaLjQrTHSOG_yf2PpqE--QAAAcw"]
[Sat Feb 28 20:44:51.504215 2026] [:error] [pid 39183:tid 39205] [client 20.220.196.236:64239] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aaLjQxCf4HvhVePw3LYklAAAAA0"]
[Sat Feb 28 20:44:52.927035 2026] [:error] [pid 49763:tid 49767] [client 20.220.196.236:65441] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fot.php"] [unique_id "aaLjRLTHSOG_yf2PpqE_FQAAAcE"]
[Sat Feb 28 20:44:54.348662 2026] [:error] [pid 49763:tid 49766] [client 20.220.196.236:65501] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aaLjRrTHSOG_yf2PpqE_JgAAAcA"]
[Sat Feb 28 20:44:55.771060 2026] [:error] [pid 49763:tid 49772] [client 20.220.196.236:64805] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aaLjR7THSOG_yf2PpqE_OgAAAcY"]
[Sat Feb 28 20:44:57.194128 2026] [:error] [pid 52460:tid 52487] [client 20.220.196.236:64132] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aaLjSbLWOogAgHGh62Rv5wAAAZg"]
[Sat Feb 28 20:44:58.616534 2026] [:error] [pid 39183:tid 39214] [client 20.220.196.236:64153] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "aaLjShCf4HvhVePw3LYkzwAAABY"]
[Sat Feb 28 20:45:00.049868 2026] [:error] [pid 39183:tid 39215] [client 20.220.196.236:65487] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaLjTBCf4HvhVePw3LYk4wAAABc"]
[Sat Feb 28 20:45:01.461840 2026] [:error] [pid 39183:tid 39199] [client 20.220.196.236:64839] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaLjTRCf4HvhVePw3LYk7gAAAAc"]
[Sat Feb 28 20:45:02.889705 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:65517] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaLjThCf4HvhVePw3LYk-AAAAAo"]
[Sat Feb 28 20:45:04.305680 2026] [:error] [pid 39292:tid 39309] [client 20.220.196.236:64878] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "aaLjUKIAO5fN7BxyqcFw8QAAAM8"]
[Sat Feb 28 20:45:05.731137 2026] [:error] [pid 11791:tid 11805] [client 20.220.196.236:64789] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaLjUWuX5e1Q32gqxH29MwAAAQw"]
[Sat Feb 28 20:45:07.152268 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:65453] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaLjUxCf4HvhVePw3LYlAQAAAAU"]
[Sat Feb 28 20:45:08.574843 2026] [:error] [pid 39184:tid 39232] [client 20.220.196.236:64778] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaLjVFtZF9Zd_U7easCyOAAAAE0"]
[Sat Feb 28 20:45:09.996764 2026] [:error] [pid 11791:tid 11802] [client 20.220.196.236:64829] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaLjVWuX5e1Q32gqxH29NwAAAQk"]
[Sat Feb 28 20:45:11.430338 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:65527] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aaLjV7THSOG_yf2PpqE_gQAAAdE"]
[Sat Feb 28 20:45:12.841481 2026] [:error] [pid 39292:tid 39318] [client 20.220.196.236:65511] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aaLjWKIAO5fN7BxyqcFw_gAAANg"]
[Sat Feb 28 20:45:14.266205 2026] [:error] [pid 39292:tid 39313] [client 20.220.196.236:63500] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aaLjWqIAO5fN7BxyqcFxDAAAANM"]
[Sat Feb 28 20:45:15.689060 2026] [:error] [pid 39184:tid 39239] [client 20.220.196.236:64808] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev1s.php"] [unique_id "aaLjW1tZF9Zd_U7easCyRwAAAFQ"]
[Sat Feb 28 20:45:40.278283 2026] [:error] [pid 52460:tid 52470] [client 20.220.196.236:65500] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aaLjdLLWOogAgHGh62RwJAAAAYc"]
[Sat Feb 28 20:45:42.120456 2026] [:error] [pid 11791:tid 11802] [client 20.220.196.236:64772] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aaLjdmuX5e1Q32gqxH29VgAAAQk"]
[Sat Feb 28 20:45:43.965723 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:64827] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aaLjdxCf4HvhVePw3LYlwgAAAAw"]
[Sat Feb 28 20:45:45.802571 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:64835] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aaLjebLWOogAgHGh62RwSwAAAY0"]
[Sat Feb 28 20:45:47.214050 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:64873] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aaLjexVE-FfM89u7BQabHAAAAIM"]
[Sat Feb 28 20:45:48.624750 2026] [:error] [pid 39184:tid 39226] [client 20.220.196.236:64810] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aaLjfFtZF9Zd_U7easCyjQAAAEc"]
[Sat Feb 28 20:45:50.046406 2026] [:error] [pid 49763:tid 49769] [client 20.220.196.236:64825] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aaLjfrTHSOG_yf2PpqE_6QAAAcM"]
[Sat Feb 28 20:45:51.479231 2026] [:error] [pid 39292:tid 39318] [client 20.220.196.236:63615] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aaLjf6IAO5fN7BxyqcFxHAAAANg"]
[Sat Feb 28 20:45:52.903035 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:63534] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aaLjgLLWOogAgHGh62RwZgAAAYs"]
[Sat Feb 28 20:45:54.314779 2026] [:error] [pid 39184:tid 39238] [client 20.220.196.236:65462] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aaLjgltZF9Zd_U7easCyowAAAFM"]
[Sat Feb 28 20:45:55.735982 2026] [:error] [pid 39184:tid 39225] [client 20.220.196.236:64225] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aaLjg1tZF9Zd_U7easCyrQAAAEY"]
[Sat Feb 28 20:45:57.158839 2026] [:error] [pid 22194:tid 22203] [client 20.220.196.236:64881] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "aaLjhX6mbajs3bzQGyueqAAAAUc"]
[Sat Feb 28 20:45:58.583848 2026] [:error] [pid 11791:tid 11817] [client 20.220.196.236:64821] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLjhmuX5e1Q32gqxH29awAAARg"]
[Sat Feb 28 20:46:00.005993 2026] [:error] [pid 39184:tid 39240] [client 20.220.196.236:64846] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLjiFtZF9Zd_U7easCyxgAAAFU"]
[Sat Feb 28 20:46:01.425903 2026] [:error] [pid 11791:tid 11797] [client 20.220.196.236:64875] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLjiWuX5e1Q32gqxH29cAAAAQQ"]
[Sat Feb 28 20:46:02.864957 2026] [:error] [pid 11791:tid 11803] [client 20.220.196.236:64861] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLjimuX5e1Q32gqxH29dQAAAQo"]
[Sat Feb 28 20:46:04.288229 2026] [:error] [pid 39183:tid 39198] [client 20.220.196.236:62969] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aaLjjBCf4HvhVePw3LYl_QAAAAY"]
[Sat Feb 28 20:46:05.709341 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:64811] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aaLjjbLWOogAgHGh62RwdwAAAYI"]
[Sat Feb 28 20:46:07.142153 2026] [:error] [pid 49763:tid 49784] [client 20.220.196.236:65408] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aaLjj7THSOG_yf2PpqFADQAAAdI"]
[Sat Feb 28 20:46:08.575694 2026] [:error] [pid 52460:tid 52483] [client 20.220.196.236:64887] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vxrl.php"] [unique_id "aaLjkLLWOogAgHGh62RwiQAAAZQ"]
[Sat Feb 28 20:46:09.993405 2026] [:error] [pid 39185:tid 39260] [client 20.220.196.236:64814] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/in.php"] [unique_id "aaLjkRVE-FfM89u7BQabQAAAAI4"]
[Sat Feb 28 20:46:11.414277 2026] [:error] [pid 11791:tid 11801] [client 20.220.196.236:64866] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/in.php"] [unique_id "aaLjk2uX5e1Q32gqxH29fwAAAQg"]
[Sat Feb 28 20:46:12.836266 2026] [:error] [pid 49763:tid 49773] [client 20.220.196.236:65495] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/in.php"] [unique_id "aaLjlLTHSOG_yf2PpqFAGgAAAcc"]
[Sat Feb 28 20:46:14.275847 2026] [:error] [pid 49763:tid 49786] [client 20.220.196.236:64793] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/in.php"] [unique_id "aaLjlrTHSOG_yf2PpqFAdgAAAdQ"]
[Sat Feb 28 20:46:15.697579 2026] [:error] [pid 49763:tid 49784] [client 20.220.196.236:64227] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aaLjl7THSOG_yf2PpqFAoAAAAdI"]
[Sat Feb 28 20:46:17.120598 2026] [:error] [pid 49763:tid 49782] [client 20.220.196.236:64835] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aaLjmbTHSOG_yf2PpqFAqAAAAdA"]
[Sat Feb 28 20:46:18.538366 2026] [:error] [pid 39292:tid 39316] [client 20.220.196.236:64826] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aaLjmqIAO5fN7BxyqcFxTwAAANY"]
[Sat Feb 28 20:46:19.952186 2026] [:error] [pid 39183:tid 39198] [client 20.220.196.236:64837] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aaLjmxCf4HvhVePw3LYmXQAAAAY"]
[Sat Feb 28 20:46:21.372159 2026] [:error] [pid 11791:tid 11816] [client 20.220.196.236:65484] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aaLjnWuX5e1Q32gqxH29jQAAARc"]
[Sat Feb 28 20:46:22.793202 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:64800] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aaLjnrLWOogAgHGh62RwqAAAAYY"]
[Sat Feb 28 20:46:24.202065 2026] [:error] [pid 49763:tid 49772] [client 20.220.196.236:64838] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aaLjoLTHSOG_yf2PpqFAuwAAAcY"]
[Sat Feb 28 20:46:25.622897 2026] [:error] [pid 49763:tid 49780] [client 20.220.196.236:64195] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aaLjobTHSOG_yf2PpqFAxgAAAc4"]
[Sat Feb 28 20:46:27.048081 2026] [:error] [pid 49763:tid 49770] [client 20.220.196.236:64868] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aaLjo7THSOG_yf2PpqFAywAAAcQ"]
[Sat Feb 28 20:46:28.469047 2026] [:error] [pid 49763:tid 49773] [client 20.220.196.236:65432] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aaLjpLTHSOG_yf2PpqFA2wAAAcc"]
[Sat Feb 28 20:46:29.891308 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:64851] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aaLjpbTHSOG_yf2PpqFA6gAAAco"]
[Sat Feb 28 20:46:31.316777 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:64823] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aaLjp7THSOG_yf2PpqFA_AAAAco"]
[Sat Feb 28 20:46:32.739703 2026] [:error] [pid 39185:tid 39266] [client 20.220.196.236:65482] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aaLjqBVE-FfM89u7BQabXgAAAJQ"]
[Sat Feb 28 20:46:34.158942 2026] [:error] [pid 39184:tid 39227] [client 20.220.196.236:65410] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aaLjqltZF9Zd_U7easCzLgAAAEg"]
[Sat Feb 28 20:46:35.580943 2026] [:error] [pid 39183:tid 39199] [client 20.220.196.236:65411] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/karak.php"] [unique_id "aaLjqxCf4HvhVePw3LYmbwAAAAc"]
[Sat Feb 28 20:46:57.721766 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:64883] [client 20.220.196.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.220.196.236, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLjwRVE-FfM89u7BQabawAAAJc"]
[Sat Feb 28 20:47:04.589927 2026] [:error] [pid 11791:tid 11814] [client 20.220.196.236:65459] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev.php"] [unique_id "aaLjyGuX5e1Q32gqxH29vgAAARU"]
[Sat Feb 28 20:47:06.428885 2026] [:error] [pid 11791:tid 11801] [client 20.220.196.236:65429] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev.php"] [unique_id "aaLjymuX5e1Q32gqxH29xQAAAQg"]
[Sat Feb 28 20:47:08.249505 2026] [:error] [pid 52460:tid 52483] [client 20.220.196.236:64793] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev.php"] [unique_id "aaLjzLLWOogAgHGh62RxMAAAAZQ"]
[Sat Feb 28 20:47:10.339071 2026] [:error] [pid 39292:tid 39307] [client 20.220.196.236:65497] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev.php"] [unique_id "aaLjzqIAO5fN7BxyqcFxogAAAM0"]
[Sat Feb 28 20:47:11.757752 2026] [:error] [pid 11791:tid 11797] [client 20.220.196.236:65442] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaLjz2uX5e1Q32gqxH29zAAAAQQ"]
[Sat Feb 28 20:47:13.191478 2026] [:error] [pid 39292:tid 39299] [client 20.220.196.236:64772] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaLj0aIAO5fN7BxyqcFxpQAAAMU"]
[Sat Feb 28 20:47:14.614240 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:64147] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaLj0rTHSOG_yf2PpqFB6QAAAco"]
[Sat Feb 28 20:47:16.028993 2026] [:error] [pid 39184:tid 39220] [client 20.220.196.236:65457] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaLj1FtZF9Zd_U7easCzeAAAAEE"]
[Sat Feb 28 20:47:17.447686 2026] [:error] [pid 11791:tid 11812] [client 20.220.196.236:64812] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaLj1WuX5e1Q32gqxH296gAAARM"]
[Sat Feb 28 20:47:18.873609 2026] [:error] [pid 39184:tid 39243] [client 20.220.196.236:65512] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaLj1ltZF9Zd_U7easCzfgAAAFg"]
[Sat Feb 28 20:47:20.321887 2026] [:error] [pid 39184:tid 39231] [client 20.220.196.236:64882] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaLj2FtZF9Zd_U7easCzgwAAAEw"]
[Sat Feb 28 20:47:21.746357 2026] [:error] [pid 49763:tid 49779] [client 20.220.196.236:65513] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "aaLj2bTHSOG_yf2PpqFB9wAAAc0"]
[Sat Feb 28 20:47:23.177992 2026] [:error] [pid 39183:tid 39214] [client 20.220.196.236:65509] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaLj2xCf4HvhVePw3LYm6QAAABY"]
[Sat Feb 28 20:47:24.621698 2026] [:error] [pid 39185:tid 39254] [client 20.220.196.236:65422] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaLj3BVE-FfM89u7BQabtwAAAIg"]
[Sat Feb 28 20:47:26.077282 2026] [:error] [pid 39183:tid 39193] [client 20.220.196.236:64176] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaLj3hCf4HvhVePw3LYm9gAAAAE"]
[Sat Feb 28 20:47:27.525312 2026] [:error] [pid 22194:tid 22199] [client 20.220.196.236:65492] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaLj336mbajs3bzQGyufKgAAAUM"]
[Sat Feb 28 20:47:28.972834 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:65435] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aaLj4LLWOogAgHGh62RxdwAAAYI"]
[Sat Feb 28 20:47:30.393172 2026] [:error] [pid 39184:tid 39227] [client 20.220.196.236:65508] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aaLj4ltZF9Zd_U7easCzmQAAAEg"]
[Sat Feb 28 20:47:31.815686 2026] [:error] [pid 22194:tid 22213] [client 20.220.196.236:64178] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aaLj436mbajs3bzQGyufNAAAAVE"]
[Sat Feb 28 20:47:33.237208 2026] [:error] [pid 39183:tid 39192] [client 20.220.196.236:65437] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ext.php"] [unique_id "aaLj5RCf4HvhVePw3LYnCQAAAAA"]
[Sat Feb 28 20:47:34.660128 2026] [:error] [pid 39292:tid 39307] [client 20.220.196.236:65446] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLj5qIAO5fN7BxyqcFxxAAAAM0"]
[Sat Feb 28 20:47:36.093145 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:63589] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLj6LLWOogAgHGh62RxjgAAAZY"]
[Sat Feb 28 20:47:37.606267 2026] [:error] [pid 49763:tid 49770] [client 20.220.196.236:63561] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLj6bTHSOG_yf2PpqFCRAAAAcQ"]
[Sat Feb 28 20:47:39.046545 2026] [:error] [pid 49763:tid 49790] [client 20.220.196.236:64199] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLj67THSOG_yf2PpqFCSgAAAdg"]
[Sat Feb 28 20:47:40.469457 2026] [:error] [pid 49763:tid 49786] [client 20.220.196.236:64845] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaLj7LTHSOG_yf2PpqFCVwAAAdQ"]
[Sat Feb 28 20:47:41.881998 2026] [:error] [pid 49763:tid 49785] [client 20.220.196.236:64874] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaLj7bTHSOG_yf2PpqFCbQAAAdM"]
[Sat Feb 28 20:47:43.304476 2026] [:error] [pid 39183:tid 39192] [client 20.220.196.236:64866] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaLj7xCf4HvhVePw3LYnLAAAAAA"]
[Sat Feb 28 20:47:44.730948 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:64864] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaLj8BCf4HvhVePw3LYnMgAAAAo"]
[Sat Feb 28 20:47:46.157418 2026] [:error] [pid 39183:tid 39194] [client 20.220.196.236:64194] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aaLj8hCf4HvhVePw3LYnNQAAAAI"]
[Sat Feb 28 20:47:47.572985 2026] [:error] [pid 39183:tid 39207] [client 20.220.196.236:64867] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aaLj8xCf4HvhVePw3LYnPgAAAA8"]
[Sat Feb 28 20:47:48.996060 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:64214] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aaLj9BVE-FfM89u7BQab8QAAAIM"]
[Sat Feb 28 20:47:50.418953 2026] [:error] [pid 49763:tid 49781] [client 20.220.196.236:65499] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aaLj9rTHSOG_yf2PpqFCfQAAAc8"]
[Sat Feb 28 20:47:51.903519 2026] [:error] [pid 22194:tid 22204] [client 20.220.196.236:64133] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ov.php"] [unique_id "aaLj936mbajs3bzQGyufRAAAAUg"]
[Sat Feb 28 20:47:53.334873 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:65425] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ov.php"] [unique_id "aaLj-bTHSOG_yf2PpqFCjQAAAcs"]
[Sat Feb 28 20:47:54.750044 2026] [:error] [pid 52460:tid 52471] [client 20.220.196.236:64202] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ov.php"] [unique_id "aaLj-rLWOogAgHGh62RxtAAAAYg"]
[Sat Feb 28 20:47:56.170386 2026] [:error] [pid 49763:tid 49773] [client 20.220.196.236:65526] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ov.php"] [unique_id "aaLj_LTHSOG_yf2PpqFCnwAAAcc"]
[Sat Feb 28 20:47:57.594125 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:65485] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLj_RVE-FfM89u7BQab9wAAAIo"]
[Sat Feb 28 20:47:59.018625 2026] [:error] [pid 39292:tid 39300] [client 20.220.196.236:64828] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLj_6IAO5fN7BxyqcFyCQAAAMY"]
[Sat Feb 28 20:48:00.451597 2026] [:error] [pid 22194:tid 22205] [client 20.220.196.236:64179] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLkAH6mbajs3bzQGyufTQAAAUk"]
[Sat Feb 28 20:48:01.905875 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:64210] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLkARCf4HvhVePw3LYnfwAAAAU"]
[Sat Feb 28 20:48:27.592313 2026] [:error] [pid 49763:tid 49767] [client 20.220.196.236:65512] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aaLkG7THSOG_yf2PpqFDCQAAAcE"]
[Sat Feb 28 20:48:29.523260 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:65438] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aaLkHbTHSOG_yf2PpqFDDwAAAcs"]
[Sat Feb 28 20:48:31.487493 2026] [:error] [pid 11791:tid 11796] [client 20.220.196.236:64873] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aaLkH2uX5e1Q32gqxH2-ZwAAAQM"]
[Sat Feb 28 20:48:33.400524 2026] [:error] [pid 49763:tid 49781] [client 20.220.196.236:64788] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.1.php"] [unique_id "aaLkIbTHSOG_yf2PpqFDKAAAAc8"]
[Sat Feb 28 20:48:34.892333 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:64891] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/async.php"] [unique_id "aaLkIrTHSOG_yf2PpqFDMwAAAcg"]
[Sat Feb 28 20:48:36.306310 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:64774] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/async.php"] [unique_id "aaLkJBVE-FfM89u7BQacFQAAAIM"]
[Sat Feb 28 20:48:37.730539 2026] [:error] [pid 39184:tid 39243] [client 20.220.196.236:64870] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/async.php"] [unique_id "aaLkJVtZF9Zd_U7easCz_wAAAFg"]
[Sat Feb 28 20:48:39.163028 2026] [:error] [pid 52460:tid 52482] [client 20.220.196.236:65465] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/async.php"] [unique_id "aaLkJ7LWOogAgHGh62RylQAAAZM"]
[Sat Feb 28 20:48:40.589900 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:64794] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aaLkKBCf4HvhVePw3LYnwQAAAAw"]
[Sat Feb 28 20:48:42.027832 2026] [:error] [pid 39292:tid 39301] [client 20.220.196.236:64865] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aaLkKqIAO5fN7BxyqcFyVQAAAMc"]
[Sat Feb 28 20:48:43.454752 2026] [:error] [pid 49763:tid 49780] [client 20.220.196.236:65429] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aaLkK7THSOG_yf2PpqFDWQAAAc4"]
[Sat Feb 28 20:48:44.873326 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:65502] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff.php"] [unique_id "aaLkLLTHSOG_yf2PpqFDZAAAAdU"]
[Sat Feb 28 20:48:46.293212 2026] [:error] [pid 39183:tid 39213] [client 20.220.196.236:64871] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLkLhCf4HvhVePw3LYn0gAAABU"]
[Sat Feb 28 20:48:47.716448 2026] [:error] [pid 11791:tid 11817] [client 20.220.196.236:64769] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLkL2uX5e1Q32gqxH2-cgAAARg"]
[Sat Feb 28 20:48:49.126094 2026] [:error] [pid 39292:tid 39304] [client 20.220.196.236:64866] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLkMaIAO5fN7BxyqcFyWAAAAMo"]
[Sat Feb 28 20:48:50.544886 2026] [:error] [pid 49763:tid 49775] [client 20.220.196.236:65424] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLkMrTHSOG_yf2PpqFDgAAAAck"]
[Sat Feb 28 20:48:51.971218 2026] [:error] [pid 22194:tid 22209] [client 20.220.196.236:64208] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaLkM36mbajs3bzQGyufegAAAU0"]
[Sat Feb 28 20:48:53.390040 2026] [:error] [pid 39184:tid 39240] [client 20.220.196.236:64151] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaLkNVtZF9Zd_U7easC0GQAAAFU"]
[Sat Feb 28 20:48:54.813680 2026] [:error] [pid 39183:tid 39213] [client 20.220.196.236:64894] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaLkNhCf4HvhVePw3LYn4AAAABU"]
[Sat Feb 28 20:48:56.237170 2026] [:error] [pid 49763:tid 49784] [client 20.220.196.236:63570] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaLkOLTHSOG_yf2PpqFDlAAAAdI"]
[Sat Feb 28 20:48:57.658699 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:64143] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aaLkObTHSOG_yf2PpqFDnAAAAco"]
[Sat Feb 28 20:48:59.083502 2026] [:error] [pid 39184:tid 39236] [client 20.220.196.236:65464] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aaLkO1tZF9Zd_U7easC0IgAAAFE"]
[Sat Feb 28 20:49:00.504831 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:65524] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aaLkPBVE-FfM89u7BQacLwAAAJc"]
[Sat Feb 28 20:49:01.926002 2026] [:error] [pid 39292:tid 39306] [client 20.220.196.236:65448] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aaLkPaIAO5fN7BxyqcFyaAAAAMw"]
[Sat Feb 28 20:49:03.347403 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:64781] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaLkP7LWOogAgHGh62Ry8wAAAYQ"]
[Sat Feb 28 20:49:04.772292 2026] [:error] [pid 39184:tid 39221] [client 20.220.196.236:65469] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaLkQFtZF9Zd_U7easC0KwAAAEI"]
[Sat Feb 28 20:49:06.194042 2026] [:error] [pid 49763:tid 49770] [client 20.220.196.236:64777] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaLkQrTHSOG_yf2PpqFDtQAAAcQ"]
[Sat Feb 28 20:49:07.617143 2026] [:error] [pid 49763:tid 49768] [client 20.220.196.236:64879] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaLkQ7THSOG_yf2PpqFDxAAAAcI"]
[Sat Feb 28 20:49:09.037346 2026] [:error] [pid 39185:tid 39250] [client 20.220.196.236:64193] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aaLkRRVE-FfM89u7BQacNAAAAIQ"]
[Sat Feb 28 20:49:10.468769 2026] [:error] [pid 11791:tid 11796] [client 20.220.196.236:65487] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aaLkRmuX5e1Q32gqxH2-iwAAAQM"]
[Sat Feb 28 20:49:11.882633 2026] [:error] [pid 52460:tid 52479] [client 20.220.196.236:64816] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aaLkR7LWOogAgHGh62Ry_gAAAZA"]
[Sat Feb 28 20:49:13.314790 2026] [:error] [pid 39183:tid 39206] [client 20.220.196.236:64877] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lc.php"] [unique_id "aaLkSRCf4HvhVePw3LYn5AAAAA4"]
[Sat Feb 28 20:49:14.752863 2026] [:error] [pid 11791:tid 11807] [client 20.220.196.236:64778] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cbrfo.php"] [unique_id "aaLkSmuX5e1Q32gqxH2-lQAAAQ4"]
[Sat Feb 28 20:49:16.165448 2026] [:error] [pid 39185:tid 39253] [client 20.220.196.236:65419] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cbrfo.php"] [unique_id "aaLkTBVE-FfM89u7BQacRAAAAIc"]
[Sat Feb 28 20:49:17.589099 2026] [:error] [pid 39184:tid 39225] [client 20.220.196.236:65426] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cbrfo.php"] [unique_id "aaLkTVtZF9Zd_U7easC0TAAAAEY"]
[Sat Feb 28 20:49:19.011580 2026] [:error] [pid 39185:tid 39246] [client 20.220.196.236:65479] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cbrfo.php"] [unique_id "aaLkTxVE-FfM89u7BQacSQAAAIA"]
[Sat Feb 28 20:49:20.444248 2026] [:error] [pid 39292:tid 39313] [client 20.220.196.236:64141] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aaLkUKIAO5fN7BxyqcFyggAAANM"]
[Sat Feb 28 20:49:21.891583 2026] [:error] [pid 39183:tid 39192] [client 20.220.196.236:65501] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aaLkURCf4HvhVePw3LYn8AAAAAA"]
[Sat Feb 28 20:49:23.310438 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:64844] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inc.php"] [unique_id "aaLkUxCf4HvhVePw3LYn9QAAAAo"]
[Sat Feb 28 20:49:45.319202 2026] [:error] [pid 52460:tid 52466] [client 20.220.196.236:64152] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLkabLWOogAgHGh62RzcAAAAYM"]
[Sat Feb 28 20:49:46.743811 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:65470] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaLkahCf4HvhVePw3LYoWwAAABQ"]
[Sat Feb 28 20:49:48.156579 2026] [:error] [pid 39292:tid 39313] [client 20.220.196.236:65438] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaLkbKIAO5fN7BxyqcFyoAAAANM"]
[Sat Feb 28 20:49:49.578757 2026] [:error] [pid 49763:tid 49781] [client 20.220.196.236:64768] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaLkbbTHSOG_yf2PpqFEawAAAc8"]
[Sat Feb 28 20:49:51.001997 2026] [:error] [pid 39183:tid 39206] [client 20.220.196.236:65522] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aaLkbxCf4HvhVePw3LYocgAAAA4"]
[Sat Feb 28 20:49:52.424732 2026] [:error] [pid 39184:tid 39228] [client 20.220.196.236:65468] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aaLkcFtZF9Zd_U7easC0rwAAAEk"]
[Sat Feb 28 20:49:53.846840 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:65475] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aaLkcbTHSOG_yf2PpqFEkAAAAcs"]
[Sat Feb 28 20:49:55.269582 2026] [:error] [pid 49763:tid 49777] [client 20.220.196.236:64808] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aaLkc7THSOG_yf2PpqFEnwAAAcs"]
[Sat Feb 28 20:49:56.691692 2026] [:error] [pid 39183:tid 39213] [client 20.220.196.236:64783] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aaLkdBCf4HvhVePw3LYofwAAABU"]
[Sat Feb 28 20:49:58.115269 2026] [:error] [pid 49763:tid 49766] [client 20.220.196.236:64771] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aaLkdrTHSOG_yf2PpqFEwgAAAcA"]
[Sat Feb 28 20:49:59.536039 2026] [:error] [pid 49763:tid 49768] [client 20.220.196.236:65456] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aaLkd7THSOG_yf2PpqFEygAAAcI"]
[Sat Feb 28 20:50:00.968828 2026] [:error] [pid 49763:tid 49784] [client 20.220.196.236:65527] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aaLkeLTHSOG_yf2PpqFE3gAAAdI"]
[Sat Feb 28 20:50:02.385331 2026] [:error] [pid 39183:tid 39203] [client 20.220.196.236:64854] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aaLkehCf4HvhVePw3LYokAAAAAs"]
[Sat Feb 28 20:50:03.802955 2026] [:error] [pid 39183:tid 39208] [client 20.220.196.236:64212] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aaLkexCf4HvhVePw3LYomAAAABA"]
[Sat Feb 28 20:50:05.227805 2026] [:error] [pid 39183:tid 39216] [client 20.220.196.236:64803] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aaLkfRCf4HvhVePw3LYooAAAABg"]
[Sat Feb 28 20:50:06.657554 2026] [:error] [pid 11791:tid 11805] [client 20.220.196.236:65472] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/reze.php"] [unique_id "aaLkfmuX5e1Q32gqxH2-xgAAAQw"]
[Sat Feb 28 20:50:08.072507 2026] [:error] [pid 52460:tid 52484] [client 20.220.196.236:65490] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/styll.php"] [unique_id "aaLkgLLWOogAgHGh62RzjwAAAZU"]
[Sat Feb 28 20:50:09.493773 2026] [:error] [pid 39292:tid 39305] [client 20.220.196.236:64833] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/styll.php"] [unique_id "aaLkgaIAO5fN7BxyqcFytwAAAMs"]
[Sat Feb 28 20:50:10.930861 2026] [:error] [pid 52460:tid 52463] [client 20.220.196.236:65476] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/styll.php"] [unique_id "aaLkgrLWOogAgHGh62RzmwAAAYA"]
[Sat Feb 28 20:50:12.382353 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:65473] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/styll.php"] [unique_id "aaLkhBCf4HvhVePw3LYougAAABQ"]
[Sat Feb 28 20:50:13.858760 2026] [:error] [pid 49763:tid 49778] [client 20.220.196.236:64219] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7.php"] [unique_id "aaLkhbTHSOG_yf2PpqFFLwAAAcw"]
[Sat Feb 28 20:50:15.286473 2026] [:error] [pid 39292:tid 39306] [client 20.220.196.236:65447] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7.php"] [unique_id "aaLkh6IAO5fN7BxyqcFyvQAAAMw"]
[Sat Feb 28 20:50:16.703494 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:65516] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7.php"] [unique_id "aaLkiLLWOogAgHGh62RzsAAAAYs"]
[Sat Feb 28 20:50:18.121099 2026] [:error] [pid 22194:tid 22219] [client 20.220.196.236:64792] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7.php"] [unique_id "aaLkin6mbajs3bzQGyufsgAAAVc"]
[Sat Feb 28 20:50:19.566000 2026] [:error] [pid 22194:tid 22213] [client 20.220.196.236:65449] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thebe.php"] [unique_id "aaLki36mbajs3bzQGyuftAAAAVE"]
[Sat Feb 28 20:50:20.982138 2026] [:error] [pid 39183:tid 39213] [client 20.220.196.236:64861] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thebe.php"] [unique_id "aaLkjBCf4HvhVePw3LYo5AAAABU"]
[Sat Feb 28 20:50:22.405101 2026] [:error] [pid 49763:tid 49786] [client 20.220.196.236:64229] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thebe.php"] [unique_id "aaLkjrTHSOG_yf2PpqFFWAAAAdQ"]
[Sat Feb 28 20:50:23.829813 2026] [:error] [pid 39184:tid 39236] [client 20.220.196.236:64823] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/thebe.php"] [unique_id "aaLkj1tZF9Zd_U7easC0vAAAAFE"]
[Sat Feb 28 20:50:25.249292 2026] [:error] [pid 49763:tid 49769] [client 20.220.196.236:64819] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddd.php"] [unique_id "aaLkkbTHSOG_yf2PpqFFYQAAAcM"]
[Sat Feb 28 20:50:26.671636 2026] [:error] [pid 49763:tid 49780] [client 20.220.196.236:63555] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddd.php"] [unique_id "aaLkkrTHSOG_yf2PpqFFZAAAAc4"]
[Sat Feb 28 20:50:28.093630 2026] [:error] [pid 39185:tid 39262] [client 20.220.196.236:64846] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddd.php"] [unique_id "aaLklBVE-FfM89u7BQachQAAAJA"]
[Sat Feb 28 20:50:29.521716 2026] [:error] [pid 39184:tid 39225] [client 20.220.196.236:62934] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddd.php"] [unique_id "aaLklVtZF9Zd_U7easC02gAAAEY"]
[Sat Feb 28 20:50:30.940792 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:64775] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLklrTHSOG_yf2PpqFFbwAAAco"]
[Sat Feb 28 20:50:32.373402 2026] [:error] [pid 22194:tid 22212] [client 20.220.196.236:65525] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLkmH6mbajs3bzQGyufwwAAAVA"]
[Sat Feb 28 20:50:33.808242 2026] [:error] [pid 39184:tid 39223] [client 20.220.196.236:65519] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLkmVtZF9Zd_U7easC09wAAAEQ"]
[Sat Feb 28 20:50:35.246254 2026] [:error] [pid 49763:tid 49786] [client 20.220.196.236:65445] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLkm7THSOG_yf2PpqFFewAAAdQ"]
[Sat Feb 28 20:50:36.694763 2026] [:error] [pid 49763:tid 49767] [client 20.220.196.236:64776] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaLknLTHSOG_yf2PpqFFhgAAAcE"]
[Sat Feb 28 20:50:38.128992 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:64817] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaLknhCf4HvhVePw3LYpDgAAABE"]
[Sat Feb 28 20:50:39.572130 2026] [:error] [pid 11791:tid 11795] [client 20.220.196.236:65488] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaLkn2uX5e1Q32gqxH2_IwAAAQI"]
[Sat Feb 28 20:50:40.992075 2026] [:error] [pid 39184:tid 39243] [client 20.220.196.236:65412] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi.php"] [unique_id "aaLkoFtZF9Zd_U7easC1HQAAAFg"]
[Sat Feb 28 20:50:42.413994 2026] [:error] [pid 39183:tid 39208] [client 20.220.196.236:64840] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "aaLkohCf4HvhVePw3LYpLgAAABA"]
[Sat Feb 28 20:50:43.840891 2026] [:error] [pid 39184:tid 39242] [client 20.220.196.236:64892] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "aaLko1tZF9Zd_U7easC1KQAAAFc"]
[Sat Feb 28 20:51:14.718305 2026] [:error] [pid 49763:tid 49790] [client 20.220.196.236:65417] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "aaLkwrTHSOG_yf2PpqFF3gAAAdg"]
[Sat Feb 28 20:51:16.140824 2026] [:error] [pid 49763:tid 49775] [client 20.220.196.236:65511] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "aaLkxLTHSOG_yf2PpqFF6QAAAck"]
[Sat Feb 28 20:51:17.629491 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:65453] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "aaLkxbLWOogAgHGh62R0TAAAAYU"]
[Sat Feb 28 20:51:19.048476 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:65471] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "aaLkx7LWOogAgHGh62R0VQAAAYY"]
[Sat Feb 28 20:51:20.471627 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:65420] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLkyBCf4HvhVePw3LYpvgAAABQ"]
[Sat Feb 28 20:51:21.894734 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:64832] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLkybTHSOG_yf2PpqFGEQAAAdU"]
[Sat Feb 28 20:51:23.328044 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:65480] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLky7LWOogAgHGh62R0bwAAAYU"]
[Sat Feb 28 20:51:24.757763 2026] [:error] [pid 49763:tid 49790] [client 20.220.196.236:64827] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLkzLTHSOG_yf2PpqFGGwAAAdg"]
[Sat Feb 28 20:51:26.188088 2026] [:error] [pid 49763:tid 49789] [client 20.220.196.236:64800] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLkzrTHSOG_yf2PpqFGHwAAAdc"]
[Sat Feb 28 20:51:27.610167 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:64186] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLkz7LWOogAgHGh62R0eQAAAY0"]
[Sat Feb 28 20:51:29.033064 2026] [:error] [pid 39183:tid 39193] [client 20.220.196.236:65434] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLk0RCf4HvhVePw3LYp-QAAAAE"]
[Sat Feb 28 20:51:30.454816 2026] [:error] [pid 49763:tid 49767] [client 20.220.196.236:64241] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLk0rTHSOG_yf2PpqFGMwAAAcE"]
[Sat Feb 28 20:51:31.867657 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:64807] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLk0xCf4HvhVePw3LYqFgAAABQ"]
[Sat Feb 28 20:51:33.306128 2026] [:error] [pid 52460:tid 52478] [client 20.220.196.236:64848] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLk1bLWOogAgHGh62R0gQAAAY8"]
[Sat Feb 28 20:51:34.728790 2026] [:error] [pid 39183:tid 39208] [client 20.220.196.236:62915] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLk1hCf4HvhVePw3LYqMwAAABA"]
[Sat Feb 28 20:51:36.181759 2026] [:error] [pid 52460:tid 52481] [client 20.220.196.236:64847] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLk2LLWOogAgHGh62R0iQAAAZI"]
[Sat Feb 28 20:51:37.605540 2026] [:error] [pid 52460:tid 52480] [client 20.220.196.236:65520] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaLk2bLWOogAgHGh62R0jgAAAZE"]
[Sat Feb 28 20:51:39.026730 2026] [:error] [pid 52460:tid 52487] [client 20.220.196.236:64796] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaLk27LWOogAgHGh62R0kgAAAZg"]
[Sat Feb 28 20:51:40.448861 2026] [:error] [pid 52460:tid 52464] [client 20.220.196.236:64213] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaLk3LLWOogAgHGh62R0kwAAAYE"]
[Sat Feb 28 20:51:41.873608 2026] [:error] [pid 39185:tid 39263] [client 20.220.196.236:64885] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaLk3RVE-FfM89u7BQadGAAAAJE"]
[Sat Feb 28 20:51:43.306348 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:65418] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaLk3xVE-FfM89u7BQadIwAAAI8"]
[Sat Feb 28 20:51:44.727227 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:65482] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaLk4LTHSOG_yf2PpqFGWQAAAdU"]
[Sat Feb 28 20:51:46.140231 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:65462] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaLk4hVE-FfM89u7BQadLQAAAJg"]
[Sat Feb 28 20:51:47.568544 2026] [:error] [pid 22194:tid 22206] [client 20.220.196.236:64869] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaLk436mbajs3bzQGyugsgAAAUo"]
[Sat Feb 28 20:51:48.984571 2026] [:error] [pid 11791:tid 11807] [client 20.220.196.236:64805] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aaLk5GuX5e1Q32gqxH2_igAAAQ4"]
[Sat Feb 28 20:51:50.405424 2026] [:error] [pid 11791:tid 11800] [client 20.220.196.236:63611] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aaLk5muX5e1Q32gqxH2_jgAAAQc"]
[Sat Feb 28 20:51:51.829299 2026] [:error] [pid 11791:tid 11808] [client 20.220.196.236:65441] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aaLk52uX5e1Q32gqxH2_kAAAAQ8"]
[Sat Feb 28 20:51:53.357044 2026] [:error] [pid 52460:tid 52478] [client 20.220.196.236:65491] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "aaLk6bLWOogAgHGh62R0pQAAAY8"]
[Sat Feb 28 20:51:54.775270 2026] [:error] [pid 49763:tid 49767] [client 20.220.196.236:65478] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaLk6rTHSOG_yf2PpqFGZgAAAcE"]
[Sat Feb 28 20:51:56.192939 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:64889] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaLk7BCf4HvhVePw3LYqaQAAAAU"]
[Sat Feb 28 20:51:57.632114 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:63517] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaLk7RCf4HvhVePw3LYqeAAAAAw"]
[Sat Feb 28 20:51:59.051579 2026] [:error] [pid 39183:tid 39203] [client 20.220.196.236:65492] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaLk7xCf4HvhVePw3LYqggAAAAs"]
[Sat Feb 28 20:52:00.473813 2026] [:error] [pid 52460:tid 52480] [client 20.220.196.236:64782] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aaLk8LLWOogAgHGh62R0rgAAAZE"]
[Sat Feb 28 20:52:01.930263 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:64822] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aaLk8bLWOogAgHGh62R0uAAAAYI"]
[Sat Feb 28 20:52:03.342655 2026] [:error] [pid 39292:tid 39308] [client 20.220.196.236:64841] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aaLk86IAO5fN7BxyqcFzFAAAAM4"]
[Sat Feb 28 20:52:04.756358 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:64834] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aaLk9LLWOogAgHGh62R0wgAAAYU"]
[Sat Feb 28 20:52:06.179476 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:65454] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaLk9rLWOogAgHGh62R0zwAAAYY"]
[Sat Feb 28 20:52:07.608075 2026] [:error] [pid 39183:tid 39216] [client 20.220.196.236:65508] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaLk9xCf4HvhVePw3LYqmwAAABg"]
[Sat Feb 28 20:52:09.025022 2026] [:error] [pid 11791:tid 11793] [client 20.220.196.236:64837] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaLk-WuX5e1Q32gqxH2_kwAAAQA"]
[Sat Feb 28 20:52:10.446125 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:64858] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaLk-hCf4HvhVePw3LYqqQAAABE"]
[Sat Feb 28 20:53:02.575304 2026] [autoindex:error] [pid 22194:tid 22209] [client 20.220.196.236:65498] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 20:53:02.786937 2026] [autoindex:error] [pid 22194:tid 22199] [client 20.220.196.236:65498] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 20:53:02.991486 2026] [:error] [pid 22194:tid 22204] [client 20.220.196.236:65498] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLlLn6mbajs3bzQGyug-wAAAUg"]
[Sat Feb 28 20:53:35.295732 2026] [:error] [pid 39183:tid 39216] [client 20.220.196.236:64890] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxx.php"] [unique_id "aaLlTxCf4HvhVePw3LYsaQAAABg"]
[Sat Feb 28 20:53:36.707702 2026] [:error] [pid 39183:tid 39198] [client 20.220.196.236:65442] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxx.php"] [unique_id "aaLlUBCf4HvhVePw3LYsbAAAAAY"]
[Sat Feb 28 20:53:38.130702 2026] [:error] [pid 52460:tid 52471] [client 20.220.196.236:64807] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxx.php"] [unique_id "aaLlUrLWOogAgHGh62R1jgAAAYg"]
[Sat Feb 28 20:53:39.552712 2026] [:error] [pid 39183:tid 39213] [client 20.220.196.236:64816] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxxx.php"] [unique_id "aaLlUxCf4HvhVePw3LYscAAAABU"]
[Sat Feb 28 20:53:40.972703 2026] [:error] [pid 39183:tid 39206] [client 20.220.196.236:65483] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaLlVBCf4HvhVePw3LYscQAAAA4"]
[Sat Feb 28 20:53:42.394989 2026] [:error] [pid 52460:tid 52477] [client 20.220.196.236:64828] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaLlVrLWOogAgHGh62R1sQAAAY4"]
[Sat Feb 28 20:53:43.819097 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:64868] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaLlV7THSOG_yf2PpqFIRwAAAcg"]
[Sat Feb 28 20:53:45.240376 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:64192] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaLlWbLWOogAgHGh62R1vQAAAYs"]
[Sat Feb 28 20:53:46.662448 2026] [:error] [pid 49763:tid 49783] [client 20.220.196.236:64891] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaLlWrTHSOG_yf2PpqFIYAAAAdE"]
[Sat Feb 28 20:53:48.083931 2026] [:error] [pid 49763:tid 49782] [client 20.220.196.236:64812] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaLlXLTHSOG_yf2PpqFIagAAAdA"]
[Sat Feb 28 20:53:49.507310 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:65505] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaLlXRVE-FfM89u7BQadoAAAAIo"]
[Sat Feb 28 20:53:50.929789 2026] [:error] [pid 49763:tid 49787] [client 20.220.196.236:63589] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaLlXrTHSOG_yf2PpqFIdwAAAdU"]
[Sat Feb 28 20:53:52.350884 2026] [:error] [pid 49763:tid 49784] [client 20.220.196.236:64184] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaLlYLTHSOG_yf2PpqFIgwAAAdI"]
[Sat Feb 28 20:53:53.774577 2026] [:error] [pid 39185:tid 39258] [client 20.220.196.236:64806] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaLlYRVE-FfM89u7BQadpwAAAIw"]
[Sat Feb 28 20:53:55.195854 2026] [:error] [pid 49763:tid 49772] [client 20.220.196.236:65439] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaLlY7THSOG_yf2PpqFIigAAAcY"]
[Sat Feb 28 20:53:56.631778 2026] [:error] [pid 39184:tid 39229] [client 20.220.196.236:65433] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaLlZFtZF9Zd_U7easC2uwAAAEo"]
[Sat Feb 28 20:53:58.040705 2026] [:error] [pid 49763:tid 49769] [client 20.220.196.236:64232] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aaLlZrTHSOG_yf2PpqFIjQAAAcM"]
[Sat Feb 28 20:53:59.464945 2026] [:error] [pid 11791:tid 11806] [client 20.220.196.236:64152] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aaLlZ2uX5e1Q32gqxH3AAwAAAQ0"]
[Sat Feb 28 20:54:00.888235 2026] [:error] [pid 11791:tid 11812] [client 20.220.196.236:65486] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aaLlaGuX5e1Q32gqxH3ACQAAARM"]
[Sat Feb 28 20:54:02.307022 2026] [:error] [pid 11791:tid 11815] [client 20.220.196.236:64773] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aaLlamuX5e1Q32gqxH3ADQAAARY"]
[Sat Feb 28 20:54:03.736294 2026] [:error] [pid 39184:tid 39228] [client 20.220.196.236:64829] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaLla1tZF9Zd_U7easC2zAAAAEk"]
[Sat Feb 28 20:54:05.162353 2026] [:error] [pid 49763:tid 49785] [client 20.220.196.236:65408] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaLlbbTHSOG_yf2PpqFIrAAAAdM"]
[Sat Feb 28 20:54:06.574839 2026] [:error] [pid 39184:tid 39221] [client 20.220.196.236:63556] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaLlbltZF9Zd_U7easC20AAAAEI"]
[Sat Feb 28 20:54:07.997971 2026] [:error] [pid 39183:tid 39205] [client 20.220.196.236:64216] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaLlbxCf4HvhVePw3LYsrAAAAA0"]
[Sat Feb 28 20:54:09.421295 2026] [:error] [pid 49763:tid 49772] [client 20.220.196.236:65502] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aaLlcbTHSOG_yf2PpqFIvAAAAcY"]
[Sat Feb 28 20:54:10.840855 2026] [:error] [pid 39292:tid 39313] [client 20.220.196.236:65497] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aaLlcqIAO5fN7BxyqcFz4QAAANM"]
[Sat Feb 28 20:54:12.265034 2026] [:error] [pid 39292:tid 39315] [client 20.220.196.236:64835] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aaLldKIAO5fN7BxyqcFz6QAAANU"]
[Sat Feb 28 20:54:13.696886 2026] [:error] [pid 39183:tid 39214] [client 20.220.196.236:64779] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aaLldRCf4HvhVePw3LYsvwAAABY"]
[Sat Feb 28 20:54:15.109783 2026] [:error] [pid 49763:tid 49774] [client 20.220.196.236:65440] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaLld7THSOG_yf2PpqFIzwAAAcg"]
[Sat Feb 28 20:54:16.531848 2026] [:error] [pid 39185:tid 39259] [client 20.220.196.236:65411] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaLleBVE-FfM89u7BQadtAAAAI0"]
[Sat Feb 28 20:54:17.955717 2026] [:error] [pid 52460:tid 52481] [client 20.220.196.236:64132] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaLlebLWOogAgHGh62R2FQAAAZI"]
[Sat Feb 28 20:54:19.387846 2026] [:error] [pid 52460:tid 52486] [client 20.220.196.236:65499] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaLle7LWOogAgHGh62R2HAAAAZc"]
[Sat Feb 28 20:54:20.807348 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:64243] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaLlfLLWOogAgHGh62R2JQAAAZY"]
[Sat Feb 28 20:54:22.224484 2026] [:error] [pid 49763:tid 49778] [client 20.220.196.236:65490] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaLlfrTHSOG_yf2PpqFJAQAAAcw"]
[Sat Feb 28 20:54:23.646258 2026] [:error] [pid 39183:tid 39193] [client 20.220.196.236:64771] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaLlfxCf4HvhVePw3LYs2gAAAAE"]
[Sat Feb 28 20:54:25.066560 2026] [:error] [pid 49763:tid 49788] [client 20.220.196.236:65516] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaLlgbTHSOG_yf2PpqFJEQAAAdY"]
[Sat Feb 28 20:54:26.489821 2026] [:error] [pid 49763:tid 49766] [client 20.220.196.236:63493] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLlgrTHSOG_yf2PpqFJHgAAAcA"]
[Sat Feb 28 20:54:27.916160 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:64838] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLlg7LWOogAgHGh62R2OgAAAYQ"]
[Sat Feb 28 20:54:29.338888 2026] [:error] [pid 39185:tid 39251] [client 20.220.196.236:65484] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLlhRVE-FfM89u7BQadwgAAAIU"]
[Sat Feb 28 20:54:30.755299 2026] [:error] [pid 39292:tid 39313] [client 20.220.196.236:64884] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLlhqIAO5fN7BxyqcF0HAAAANM"]
[Sat Feb 28 20:54:40.397260 2026] [:error] [pid 49763:tid 49780] [client 20.220.196.236:64802] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaLlkLTHSOG_yf2PpqFJTAAAAc4"]
[Sat Feb 28 20:55:54.358354 2026] [:error] [pid 49763:tid 49789] [client 20.220.196.236:65517] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aaLl2rTHSOG_yf2PpqFLkgAAAdc"]
[Sat Feb 28 20:55:55.781228 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:64820] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aaLl27THSOG_yf2PpqFLnQAAAco"]
[Sat Feb 28 20:55:57.193922 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:64832] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aaLl3RCf4HvhVePw3LYuIQAAAAo"]
[Sat Feb 28 20:55:58.618604 2026] [:error] [pid 52460:tid 52470] [client 20.220.196.236:65416] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aaLl3rLWOogAgHGh62R3LQAAAYc"]
[Sat Feb 28 20:56:00.038655 2026] [:error] [pid 52460:tid 52473] [client 20.220.196.236:64861] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "aaLl4LLWOogAgHGh62R3NQAAAYo"]
[Sat Feb 28 20:56:01.460610 2026] [:error] [pid 49763:tid 49776] [client 20.220.196.236:65430] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "aaLl4bTHSOG_yf2PpqFLuAAAAco"]
[Sat Feb 28 20:56:02.883789 2026] [:error] [pid 39183:tid 39200] [client 20.220.196.236:64854] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "aaLl4hCf4HvhVePw3LYuLwAAAAg"]
[Sat Feb 28 20:56:04.307908 2026] [:error] [pid 49763:tid 49775] [client 20.220.196.236:64204] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "aaLl5LTHSOG_yf2PpqFLygAAAck"]
[Sat Feb 28 20:56:05.728762 2026] [:error] [pid 49763:tid 49773] [client 20.220.196.236:65506] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aaLl5bTHSOG_yf2PpqFL2AAAAcc"]
[Sat Feb 28 20:56:07.151607 2026] [:error] [pid 49763:tid 49780] [client 20.220.196.236:64224] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aaLl57THSOG_yf2PpqFL4AAAAc4"]
[Sat Feb 28 20:56:08.588129 2026] [:error] [pid 52460:tid 52479] [client 20.220.196.236:65496] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aaLl6LLWOogAgHGh62R3TAAAAZA"]
[Sat Feb 28 20:56:10.011042 2026] [:error] [pid 39184:tid 39241] [client 20.220.196.236:64883] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aaLl6ltZF9Zd_U7easC3ZwAAAFY"]
[Sat Feb 28 20:56:11.435672 2026] [:error] [pid 39183:tid 39192] [client 20.220.196.236:65463] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aaLl6xCf4HvhVePw3LYuPgAAAAA"]
[Sat Feb 28 20:56:12.859977 2026] [:error] [pid 39184:tid 39227] [client 20.220.196.236:63597] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aaLl7FtZF9Zd_U7easC3agAAAEg"]
[Sat Feb 28 20:56:14.278155 2026] [:error] [pid 39184:tid 39220] [client 20.220.196.236:65518] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aaLl7ltZF9Zd_U7easC3awAAAEE"]
[Sat Feb 28 20:56:15.701791 2026] [:error] [pid 39292:tid 39299] [client 20.220.196.236:64853] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aaLl76IAO5fN7BxyqcF0zAAAAMU"]
[Sat Feb 28 20:56:17.132340 2026] [:error] [pid 11791:tid 11794] [client 20.220.196.236:64886] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLl8WuX5e1Q32gqxH3AgQAAAQE"]
[Sat Feb 28 20:56:18.563410 2026] [:error] [pid 49763:tid 49789] [client 20.220.196.236:64810] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aaLl8rTHSOG_yf2PpqFMIgAAAdc"]
[Sat Feb 28 20:56:19.984134 2026] [:error] [pid 39183:tid 39201] [client 20.220.196.236:65493] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aaLl8xCf4HvhVePw3LYuTwAAAAk"]
[Sat Feb 28 20:56:21.407262 2026] [:error] [pid 22194:tid 22214] [client 20.220.196.236:65466] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jsond.php"] [unique_id "aaLl9X6mbajs3bzQGyuh5AAAAVI"]
[Sat Feb 28 20:56:22.830448 2026] [:error] [pid 49763:tid 49784] [client 20.220.196.236:64880] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aaLl9rTHSOG_yf2PpqFMOgAAAdI"]
[Sat Feb 28 20:56:24.252667 2026] [:error] [pid 39184:tid 39225] [client 20.220.196.236:65450] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aaLl-FtZF9Zd_U7easC3ggAAAEY"]
[Sat Feb 28 20:56:25.676329 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:64870] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aaLl-bLWOogAgHGh62R3iAAAAZY"]
[Sat Feb 28 20:56:27.096922 2026] [:error] [pid 52460:tid 52472] [client 20.220.196.236:64840] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aaLl-7LWOogAgHGh62R3jQAAAYk"]
[Sat Feb 28 20:59:26.905003 2026] [:error] [pid 49763:tid 49773] [client 20.104.19.195:3398] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynz.PhP7"] [unique_id "aaLmrrTHSOG_yf2PpqFPWAAAAcc"]
[Sat Feb 28 20:59:27.365239 2026] [:error] [pid 52460:tid 52473] [client 20.104.19.195:15003] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynz.PhP7"] [unique_id "aaLmr7LWOogAgHGh62R5dgAAAYo"]
[Sat Feb 28 20:59:27.778328 2026] [:error] [pid 49763:tid 49785] [client 20.104.19.195:16606] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynz.PhP7"] [unique_id "aaLmr7THSOG_yf2PpqFPXQAAAdM"]
[Sat Feb 28 20:59:28.201491 2026] [:error] [pid 39183:tid 39213] [client 20.104.19.195:2781] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynz.PhP7"] [unique_id "aaLmsBCf4HvhVePw3LYxdgAAABU"]
[Sat Feb 28 20:59:28.619669 2026] [:error] [pid 39185:tid 39256] [client 20.104.19.195:9377] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaLmsBVE-FfM89u7BQaeSQAAAIo"]
[Sat Feb 28 20:59:29.044582 2026] [:error] [pid 39183:tid 39200] [client 20.104.19.195:4769] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaLmsRCf4HvhVePw3LYxegAAAAg"]
[Sat Feb 28 20:59:29.462509 2026] [:error] [pid 39183:tid 39195] [client 20.104.19.195:15492] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaLmsRCf4HvhVePw3LYxggAAAAM"]
[Sat Feb 28 20:59:29.877975 2026] [:error] [pid 39183:tid 39199] [client 20.104.19.195:16594] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaLmsRCf4HvhVePw3LYxhgAAAAc"]
[Sat Feb 28 20:59:30.298531 2026] [:error] [pid 39183:tid 39198] [client 20.104.19.195:9386] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packed.php"] [unique_id "aaLmshCf4HvhVePw3LYxjQAAAAY"]
[Sat Feb 28 20:59:30.728215 2026] [:error] [pid 11791:tid 11810] [client 20.104.19.195:21643] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packed.php"] [unique_id "aaLmsmuX5e1Q32gqxH3BSQAAARE"]
[Sat Feb 28 20:59:31.143407 2026] [:error] [pid 39184:tid 39228] [client 20.104.19.195:9385] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packed.php"] [unique_id "aaLms1tZF9Zd_U7easC4rQAAAEk"]
[Sat Feb 28 20:59:31.563212 2026] [:error] [pid 39183:tid 39192] [client 20.104.19.195:17213] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packed.php"] [unique_id "aaLmsxCf4HvhVePw3LYxlwAAAAA"]
[Sat Feb 28 20:59:31.985761 2026] [:error] [pid 39183:tid 39210] [client 20.104.19.195:5620] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaLmsxCf4HvhVePw3LYxmgAAABI"]
[Sat Feb 28 20:59:32.439194 2026] [:error] [pid 49763:tid 49787] [client 20.104.19.195:18256] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaLmtLTHSOG_yf2PpqFPbQAAAdU"]
[Sat Feb 28 20:59:32.884879 2026] [:error] [pid 49763:tid 49785] [client 20.104.19.195:2795] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaLmtLTHSOG_yf2PpqFPbwAAAdM"]
[Sat Feb 28 20:59:33.342365 2026] [:error] [pid 39184:tid 39229] [client 20.104.19.195:17197] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaLmtVtZF9Zd_U7easC4sgAAAEo"]
[Sat Feb 28 20:59:33.804975 2026] [:error] [pid 39185:tid 39246] [client 20.104.19.195:18240] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaLmtRVE-FfM89u7BQaeTAAAAIA"]
[Sat Feb 28 20:59:34.300182 2026] [:error] [pid 39184:tid 39227] [client 20.104.19.195:18263] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaLmtltZF9Zd_U7easC4swAAAEg"]
[Sat Feb 28 20:59:34.765427 2026] [:error] [pid 39292:tid 39312] [client 20.104.19.195:14944] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaLmtqIAO5fN7BxyqcF1bQAAANI"]
[Sat Feb 28 20:59:35.200214 2026] [:error] [pid 39292:tid 39316] [client 20.104.19.195:5630] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "aaLmt6IAO5fN7BxyqcF1cQAAANY"]
[Sat Feb 28 20:59:35.645969 2026] [:error] [pid 39185:tid 39259] [client 20.104.19.195:12407] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aaLmtxVE-FfM89u7BQaeTQAAAI0"]
[Sat Feb 28 20:59:36.092622 2026] [:error] [pid 11791:tid 11794] [client 20.104.19.195:20978] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aaLmuGuX5e1Q32gqxH3BTgAAAQE"]
[Sat Feb 28 20:59:36.625774 2026] [:error] [pid 11791:tid 11812] [client 20.104.19.195:14974] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aaLmuGuX5e1Q32gqxH3BTwAAARM"]
[Sat Feb 28 20:59:37.140004 2026] [:error] [pid 39183:tid 39196] [client 20.104.19.195:21289] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aaLmuRCf4HvhVePw3LYxtwAAAAQ"]
[Sat Feb 28 20:59:37.653579 2026] [:error] [pid 39184:tid 39232] [client 20.104.19.195:21274] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass.php"] [unique_id "aaLmuVtZF9Zd_U7easC4uQAAAE0"]
[Sat Feb 28 20:59:38.119919 2026] [:error] [pid 39184:tid 39231] [client 20.104.19.195:17185] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass.php"] [unique_id "aaLmultZF9Zd_U7easC4vQAAAEw"]
[Sat Feb 28 20:59:38.555769 2026] [:error] [pid 39184:tid 39222] [client 20.104.19.195:17196] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass.php"] [unique_id "aaLmultZF9Zd_U7easC4vwAAAEM"]
[Sat Feb 28 20:59:38.991640 2026] [:error] [pid 52460:tid 52482] [client 20.104.19.195:12376] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass.php"] [unique_id "aaLmurLWOogAgHGh62R5iwAAAZM"]
[Sat Feb 28 20:59:39.436449 2026] [:error] [pid 39183:tid 39203] [client 20.104.19.195:12562] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaLmuxCf4HvhVePw3LYxxwAAAAs"]
[Sat Feb 28 20:59:39.909902 2026] [:error] [pid 39183:tid 39194] [client 20.104.19.195:5592] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaLmuxCf4HvhVePw3LYx0AAAAAI"]
[Sat Feb 28 20:59:40.353487 2026] [:error] [pid 39292:tid 39304] [client 20.104.19.195:21275] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaLmvKIAO5fN7BxyqcF1fwAAAMo"]
[Sat Feb 28 20:59:40.805345 2026] [:error] [pid 39292:tid 39301] [client 20.104.19.195:5611] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "aaLmvKIAO5fN7BxyqcF1gwAAAMc"]
[Sat Feb 28 21:26:32.271157 2026] [:error] [pid 52460:tid 52474] [client 52.169.148.186:4732] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLtCLLWOogAgHGh62SOQwAAAYs"]
[Sat Feb 28 21:26:32.771981 2026] [:error] [pid 52460:tid 52476] [client 52.169.148.186:11269] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLtCLLWOogAgHGh62SORAAAAY0"]
[Sat Feb 28 21:26:33.268787 2026] [:error] [pid 49763:tid 49782] [client 52.169.148.186:7536] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLtCbTHSOG_yf2PpqFy1wAAAdA"]
[Sat Feb 28 21:26:33.768975 2026] [:error] [pid 39292:tid 39309] [client 52.169.148.186:14798] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaLtCaIAO5fN7BxyqcGAtQAAAM8"]
[Sat Feb 28 21:26:34.281789 2026] [:error] [pid 49763:tid 49788] [client 52.169.148.186:2843] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaLtCrTHSOG_yf2PpqFy3QAAAdY"]
[Sat Feb 28 21:26:34.810637 2026] [:error] [pid 39292:tid 39294] [client 52.169.148.186:12362] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaLtCqIAO5fN7BxyqcGAuQAAAMA"]
[Sat Feb 28 21:26:35.355981 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:14845] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaLtC7THSOG_yf2PpqFy7wAAAck"]
[Sat Feb 28 21:26:35.904664 2026] [:error] [pid 39183:tid 39193] [client 52.169.148.186:10828] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaLtCxCf4HvhVePw3LZM_AAAAAE"]
[Sat Feb 28 21:26:36.409926 2026] [:error] [pid 49763:tid 49773] [client 52.169.148.186:11004] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.PhP7"] [unique_id "aaLtDLTHSOG_yf2PpqFy-QAAAcc"]
[Sat Feb 28 21:26:36.909529 2026] [:error] [pid 49763:tid 49787] [client 52.169.148.186:3491] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.PhP7"] [unique_id "aaLtDLTHSOG_yf2PpqFy_gAAAdU"]
[Sat Feb 28 21:26:37.410742 2026] [:error] [pid 49763:tid 49773] [client 52.169.148.186:2850] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.PhP7"] [unique_id "aaLtDbTHSOG_yf2PpqFzBwAAAcc"]
[Sat Feb 28 21:26:37.912733 2026] [:error] [pid 49763:tid 49781] [client 52.169.148.186:2748] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f.PhP7"] [unique_id "aaLtDbTHSOG_yf2PpqFzEQAAAc8"]
[Sat Feb 28 21:26:38.414445 2026] [:error] [pid 49763:tid 49769] [client 52.169.148.186:3223] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aaLtDrTHSOG_yf2PpqFzGwAAAcM"]
[Sat Feb 28 21:26:38.914981 2026] [:error] [pid 52460:tid 52485] [client 52.169.148.186:7538] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aaLtDrLWOogAgHGh62SOUQAAAZY"]
[Sat Feb 28 21:26:39.417436 2026] [:error] [pid 39184:tid 39219] [client 52.169.148.186:14787] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aaLtD1tZF9Zd_U7easDGyQAAAEA"]
[Sat Feb 28 21:26:39.920178 2026] [:error] [pid 39184:tid 39221] [client 52.169.148.186:12366] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aaLtD1tZF9Zd_U7easDG0AAAAEI"]
[Sat Feb 28 21:26:40.430549 2026] [:error] [pid 49763:tid 49781] [client 52.169.148.186:4808] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aaLtELTHSOG_yf2PpqFzIwAAAc8"]
[Sat Feb 28 21:26:40.937433 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:4532] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aaLtELTHSOG_yf2PpqFzLAAAAck"]
[Sat Feb 28 21:26:41.436387 2026] [:error] [pid 49763:tid 49780] [client 52.169.148.186:4680] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aaLtEbTHSOG_yf2PpqFzNgAAAc4"]
[Sat Feb 28 21:26:41.936445 2026] [:error] [pid 49763:tid 49789] [client 52.169.148.186:14994] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aaLtEbTHSOG_yf2PpqFzQQAAAdc"]
[Sat Feb 28 21:26:42.442488 2026] [:error] [pid 49763:tid 49783] [client 52.169.148.186:4522] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aaLtErTHSOG_yf2PpqFzTAAAAdE"]
[Sat Feb 28 21:26:42.942721 2026] [:error] [pid 49763:tid 49781] [client 52.169.148.186:3236] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aaLtErTHSOG_yf2PpqFzUgAAAc8"]
[Sat Feb 28 21:26:43.448295 2026] [:error] [pid 39183:tid 39214] [client 52.169.148.186:7547] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aaLtExCf4HvhVePw3LZNDgAAABY"]
[Sat Feb 28 21:26:43.948323 2026] [:error] [pid 49763:tid 49777] [client 52.169.148.186:7551] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "aaLtE7THSOG_yf2PpqFzVQAAAcs"]
[Sat Feb 28 21:26:44.449088 2026] [:error] [pid 39183:tid 39192] [client 52.169.148.186:10863] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "aaLtFBCf4HvhVePw3LZNEQAAAAA"]
[Sat Feb 28 21:26:44.949712 2026] [:error] [pid 39183:tid 39206] [client 52.169.148.186:14283] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "aaLtFBCf4HvhVePw3LZNFgAAAA4"]
[Sat Feb 28 21:26:45.453589 2026] [:error] [pid 49763:tid 49783] [client 52.169.148.186:3526] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "aaLtFbTHSOG_yf2PpqFzXAAAAdE"]
[Sat Feb 28 21:26:45.951689 2026] [:error] [pid 39183:tid 39195] [client 52.169.148.186:3488] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "aaLtFRCf4HvhVePw3LZNGQAAAAM"]
[Sat Feb 28 21:26:46.452805 2026] [:error] [pid 39292:tid 39309] [client 52.169.148.186:10742] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aaLtFqIAO5fN7BxyqcGAywAAAM8"]
[Sat Feb 28 21:26:46.951526 2026] [:error] [pid 39184:tid 39240] [client 52.169.148.186:10722] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aaLtFltZF9Zd_U7easDG_AAAAFU"]
[Sat Feb 28 21:26:47.454280 2026] [:error] [pid 11791:tid 11803] [client 52.169.148.186:2975] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aaLtF2uX5e1Q32gqxH3I8wAAAQo"]
[Sat Feb 28 21:26:47.955722 2026] [:error] [pid 49763:tid 49788] [client 52.169.148.186:12931] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aaLtF7THSOG_yf2PpqFzZwAAAdY"]
[Sat Feb 28 21:26:48.455624 2026] [:error] [pid 39184:tid 39224] [client 52.169.148.186:4852] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/advanc.php"] [unique_id "aaLtGFtZF9Zd_U7easDHCgAAAEU"]
[Sat Feb 28 21:26:48.958696 2026] [:error] [pid 39292:tid 39302] [client 52.169.148.186:4860] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/advanc.php"] [unique_id "aaLtGKIAO5fN7BxyqcGA1AAAAMg"]
[Sat Feb 28 21:26:49.459470 2026] [:error] [pid 39183:tid 39213] [client 52.169.148.186:4488] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/advanc.php"] [unique_id "aaLtGRCf4HvhVePw3LZNJQAAABU"]
[Sat Feb 28 21:26:49.958062 2026] [:error] [pid 39183:tid 39202] [client 52.169.148.186:3260] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/advanc.php"] [unique_id "aaLtGRCf4HvhVePw3LZNKwAAAAo"]
[Sat Feb 28 21:26:50.458052 2026] [:error] [pid 52460:tid 52484] [client 52.169.148.186:10700] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLtGrLWOogAgHGh62SObQAAAZU"]
[Sat Feb 28 21:26:50.958011 2026] [:error] [pid 11791:tid 11806] [client 52.169.148.186:7546] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLtGmuX5e1Q32gqxH3I-AAAAQ0"]
[Sat Feb 28 21:26:51.457959 2026] [:error] [pid 11791:tid 11809] [client 52.169.148.186:15034] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLtG2uX5e1Q32gqxH3JAwAAARA"]
[Sat Feb 28 21:26:51.956610 2026] [:error] [pid 52460:tid 52468] [client 52.169.148.186:14274] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLtG7LWOogAgHGh62SObwAAAYU"]
[Sat Feb 28 21:26:52.456148 2026] [:error] [pid 52460:tid 52469] [client 52.169.148.186:14310] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ftyude.php"] [unique_id "aaLtHLLWOogAgHGh62SOcQAAAYY"]
[Sat Feb 28 21:26:52.956642 2026] [:error] [pid 39183:tid 39207] [client 52.169.148.186:17716] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ftyude.php"] [unique_id "aaLtHBCf4HvhVePw3LZNNwAAAA8"]
[Sat Feb 28 21:26:53.455262 2026] [:error] [pid 39183:tid 39204] [client 52.169.148.186:2964] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ftyude.php"] [unique_id "aaLtHRCf4HvhVePw3LZNPAAAAAw"]
[Sat Feb 28 21:26:53.954242 2026] [:error] [pid 11791:tid 11799] [client 52.169.148.186:4494] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ftyude.php"] [unique_id "aaLtHWuX5e1Q32gqxH3JDgAAAQY"]
[Sat Feb 28 21:26:54.452475 2026] [:error] [pid 49763:tid 49779] [client 52.169.148.186:12928] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xy.php"] [unique_id "aaLtHrTHSOG_yf2PpqFzeQAAAc0"]
[Sat Feb 28 21:26:54.951008 2026] [:error] [pid 39183:tid 39205] [client 52.169.148.186:10968] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xy.php"] [unique_id "aaLtHhCf4HvhVePw3LZNRgAAAA0"]
[Sat Feb 28 21:26:55.455319 2026] [:error] [pid 39183:tid 39216] [client 52.169.148.186:11304] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xy.php"] [unique_id "aaLtHxCf4HvhVePw3LZNSQAAABg"]
[Sat Feb 28 21:26:55.955976 2026] [:error] [pid 39183:tid 39196] [client 52.169.148.186:12354] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xy.php"] [unique_id "aaLtHxCf4HvhVePw3LZNSwAAAAQ"]
[Sat Feb 28 21:26:56.455726 2026] [:error] [pid 39184:tid 39242] [client 52.169.148.186:11301] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tox.php"] [unique_id "aaLtIFtZF9Zd_U7easDHEgAAAFc"]
[Sat Feb 28 21:26:56.954501 2026] [:error] [pid 22194:tid 22205] [client 52.169.148.186:11177] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tox.php"] [unique_id "aaLtIH6mbajs3bzQGyunngAAAUk"]
[Sat Feb 28 21:26:57.454345 2026] [:error] [pid 52460:tid 52476] [client 52.169.148.186:11179] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tox.php"] [unique_id "aaLtIbLWOogAgHGh62SOfQAAAY0"]
[Sat Feb 28 21:26:57.954086 2026] [:error] [pid 49763:tid 49767] [client 52.169.148.186:3243] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tox.php"] [unique_id "aaLtIbTHSOG_yf2PpqFzigAAAcE"]
[Sat Feb 28 21:26:58.452830 2026] [:error] [pid 39292:tid 39316] [client 52.169.148.186:10991] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vgtyu.php"] [unique_id "aaLtIqIAO5fN7BxyqcGA3AAAANY"]
[Sat Feb 28 21:26:58.953207 2026] [:error] [pid 39292:tid 39311] [client 52.169.148.186:3003] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vgtyu.php"] [unique_id "aaLtIqIAO5fN7BxyqcGA4QAAANE"]
[Sat Feb 28 21:26:59.452554 2026] [:error] [pid 39183:tid 39214] [client 52.169.148.186:10723] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vgtyu.php"] [unique_id "aaLtIxCf4HvhVePw3LZNUQAAABY"]
[Sat Feb 28 21:26:59.950368 2026] [:error] [pid 22194:tid 22209] [client 52.169.148.186:14275] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vgtyu.php"] [unique_id "aaLtI36mbajs3bzQGyunpQAAAU0"]
[Sat Feb 28 21:27:00.450598 2026] [:error] [pid 49763:tid 49772] [client 52.169.148.186:3146] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "aaLtJLTHSOG_yf2PpqFzjAAAAcY"]
[Sat Feb 28 21:27:00.950340 2026] [:error] [pid 49763:tid 49768] [client 52.169.148.186:11199] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "aaLtJLTHSOG_yf2PpqFzjQAAAcI"]
[Sat Feb 28 21:27:01.448959 2026] [:error] [pid 39184:tid 39227] [client 52.169.148.186:12789] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "aaLtJVtZF9Zd_U7easDHKQAAAEg"]
[Sat Feb 28 21:27:01.947977 2026] [:error] [pid 39292:tid 39316] [client 52.169.148.186:4681] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "aaLtJaIAO5fN7BxyqcGA9AAAANY"]
[Sat Feb 28 21:27:02.448109 2026] [:error] [pid 39184:tid 39236] [client 52.169.148.186:12405] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-x.php"] [unique_id "aaLtJltZF9Zd_U7easDHLQAAAFE"]
[Sat Feb 28 21:27:02.947507 2026] [:error] [pid 52460:tid 52478] [client 52.169.148.186:4689] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-x.php"] [unique_id "aaLtJrLWOogAgHGh62SOkwAAAY8"]
[Sat Feb 28 21:27:03.449585 2026] [:error] [pid 52460:tid 52470] [client 52.169.148.186:12799] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-x.php"] [unique_id "aaLtJ7LWOogAgHGh62SOlQAAAYc"]
[Sat Feb 28 21:27:03.949047 2026] [:error] [pid 39184:tid 39230] [client 52.169.148.186:11277] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-x.php"] [unique_id "aaLtJ1tZF9Zd_U7easDHNwAAAEs"]
[Sat Feb 28 21:27:04.448295 2026] [:error] [pid 39184:tid 39236] [client 52.169.148.186:10973] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aaLtKFtZF9Zd_U7easDHQAAAAFE"]
[Sat Feb 28 21:27:04.951505 2026] [:error] [pid 52460:tid 52481] [client 52.169.148.186:2732] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aaLtKLLWOogAgHGh62SOmgAAAZI"]
[Sat Feb 28 21:27:05.452065 2026] [:error] [pid 52460:tid 52487] [client 52.169.148.186:10970] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aaLtKbLWOogAgHGh62SOnwAAAZg"]
[Sat Feb 28 21:27:05.950953 2026] [:error] [pid 11791:tid 11796] [client 52.169.148.186:7521] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aaLtKWuX5e1Q32gqxH3JGgAAAQM"]
[Sat Feb 28 21:27:06.449659 2026] [:error] [pid 49763:tid 49785] [client 52.169.148.186:7759] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "aaLtKrTHSOG_yf2PpqFznQAAAdM"]
[Sat Feb 28 21:27:06.949257 2026] [:error] [pid 39292:tid 39309] [client 52.169.148.186:4728] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "aaLtKqIAO5fN7BxyqcGBEwAAAM8"]
[Sat Feb 28 21:27:07.454931 2026] [:error] [pid 11791:tid 11816] [client 52.169.148.186:3574] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "aaLtK2uX5e1Q32gqxH3JHQAAARc"]
[Sat Feb 28 21:27:07.954186 2026] [:error] [pid 39185:tid 39263] [client 52.169.148.186:1520] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "aaLtKxVE-FfM89u7BQakFQAAAJE"]
[Sat Feb 28 21:27:08.454643 2026] [:error] [pid 11791:tid 11795] [client 52.169.148.186:7793] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zr.php"] [unique_id "aaLtLGuX5e1Q32gqxH3JIAAAAQI"]
[Sat Feb 28 21:27:08.954564 2026] [:error] [pid 39292:tid 39313] [client 52.169.148.186:11327] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zr.php"] [unique_id "aaLtLKIAO5fN7BxyqcGBGAAAANM"]
[Sat Feb 28 21:27:09.454243 2026] [:error] [pid 39183:tid 39195] [client 52.169.148.186:17608] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zr.php"] [unique_id "aaLtLRCf4HvhVePw3LZNYgAAAAM"]
[Sat Feb 28 21:27:09.961555 2026] [:error] [pid 39183:tid 39208] [client 52.169.148.186:14302] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zr.php"] [unique_id "aaLtLRCf4HvhVePw3LZNaQAAABA"]
[Sat Feb 28 21:27:10.472487 2026] [:error] [pid 39185:tid 39250] [client 52.169.148.186:3194] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaLtLhVE-FfM89u7BQakGgAAAIQ"]
[Sat Feb 28 21:27:10.978079 2026] [:error] [pid 39183:tid 39215] [client 52.169.148.186:17625] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaLtLhCf4HvhVePw3LZNcQAAABc"]
[Sat Feb 28 21:27:11.477868 2026] [:error] [pid 39183:tid 39209] [client 52.169.148.186:2637] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaLtLxCf4HvhVePw3LZNdQAAABE"]
[Sat Feb 28 21:27:11.980304 2026] [:error] [pid 39292:tid 39310] [client 52.169.148.186:11311] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aaLtL6IAO5fN7BxyqcGBIAAAANA"]
[Sat Feb 28 21:27:12.478846 2026] [:error] [pid 39292:tid 39301] [client 52.169.148.186:7801] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "aaLtMKIAO5fN7BxyqcGBIwAAAMc"]
[Sat Feb 28 21:27:12.976798 2026] [:error] [pid 49763:tid 49778] [client 52.169.148.186:1482] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "aaLtMLTHSOG_yf2PpqFztQAAAcw"]
[Sat Feb 28 21:27:13.477251 2026] [:error] [pid 39185:tid 39270] [client 52.169.148.186:17636] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "aaLtMRVE-FfM89u7BQakHQAAAJg"]
[Sat Feb 28 21:27:13.979400 2026] [:error] [pid 39183:tid 39196] [client 52.169.148.186:10980] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "aaLtMRCf4HvhVePw3LZNgQAAAAQ"]
[Sat Feb 28 21:27:14.478352 2026] [:error] [pid 39183:tid 39206] [client 52.169.148.186:19052] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aaLtMhCf4HvhVePw3LZNggAAAA4"]
[Sat Feb 28 21:27:14.979192 2026] [:error] [pid 52460:tid 52475] [client 52.169.148.186:14462] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aaLtMrLWOogAgHGh62SOuwAAAYw"]
[Sat Feb 28 21:27:15.479431 2026] [:error] [pid 39184:tid 39224] [client 52.169.148.186:7768] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aaLtM1tZF9Zd_U7easDHVQAAAEU"]
[Sat Feb 28 21:27:15.977470 2026] [:error] [pid 39183:tid 39199] [client 52.169.148.186:17661] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "aaLtMxCf4HvhVePw3LZNhwAAAAc"]
[Sat Feb 28 21:27:16.484907 2026] [:error] [pid 39292:tid 39308] [client 52.169.148.186:14988] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/leu.php"] [unique_id "aaLtNKIAO5fN7BxyqcGBNQAAAM4"]
[Sat Feb 28 21:27:16.985553 2026] [:error] [pid 52460:tid 52473] [client 52.169.148.186:2673] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/leu.php"] [unique_id "aaLtNLLWOogAgHGh62SOwQAAAYo"]
[Sat Feb 28 21:27:17.487769 2026] [:error] [pid 39183:tid 39214] [client 52.169.148.186:16847] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/leu.php"] [unique_id "aaLtNRCf4HvhVePw3LZNjwAAABY"]
[Sat Feb 28 21:27:17.989696 2026] [:error] [pid 52460:tid 52480] [client 52.169.148.186:11148] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/leu.php"] [unique_id "aaLtNbLWOogAgHGh62SOyQAAAZE"]
[Sat Feb 28 21:27:18.489105 2026] [:error] [pid 49763:tid 49778] [client 52.169.148.186:11137] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aaLtNrTHSOG_yf2PpqFzwgAAAcw"]
[Sat Feb 28 21:27:18.990316 2026] [:error] [pid 39183:tid 39199] [client 52.169.148.186:10898] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aaLtNhCf4HvhVePw3LZNmQAAAAc"]
[Sat Feb 28 21:27:19.490831 2026] [:error] [pid 39184:tid 39224] [client 52.169.148.186:15008] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aaLtN1tZF9Zd_U7easDHaAAAAEU"]
[Sat Feb 28 21:27:19.989778 2026] [:error] [pid 39183:tid 39212] [client 52.169.148.186:6611] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aaLtNxCf4HvhVePw3LZNnQAAABQ"]
[Sat Feb 28 21:27:20.494058 2026] [:error] [pid 49763:tid 49774] [client 52.169.148.186:17643] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaLtOLTHSOG_yf2PpqFzywAAAcg"]
[Sat Feb 28 21:27:21.003266 2026] [:error] [pid 49763:tid 49767] [client 52.169.148.186:16851] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaLtObTHSOG_yf2PpqFz0AAAAcE"]
[Sat Feb 28 21:27:21.502208 2026] [:error] [pid 39183:tid 39192] [client 52.169.148.186:14415] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaLtORCf4HvhVePw3LZNqgAAAAA"]
[Sat Feb 28 21:27:21.999834 2026] [:error] [pid 39183:tid 39207] [client 52.169.148.186:15015] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaLtORCf4HvhVePw3LZNqwAAAA8"]
[Sat Feb 28 21:27:22.498113 2026] [:error] [pid 39185:tid 39261] [client 52.169.148.186:14454] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mon.php"] [unique_id "aaLtOhVE-FfM89u7BQakLAAAAI8"]
[Sat Feb 28 21:27:22.997809 2026] [:error] [pid 39183:tid 39212] [client 52.169.148.186:12738] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mon.php"] [unique_id "aaLtOhCf4HvhVePw3LZNsAAAABQ"]
[Sat Feb 28 21:27:23.495587 2026] [:error] [pid 39183:tid 39195] [client 52.169.148.186:9908] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mon.php"] [unique_id "aaLtOxCf4HvhVePw3LZNugAAAAM"]
[Sat Feb 28 21:27:23.994397 2026] [:error] [pid 49763:tid 49772] [client 52.169.148.186:12229] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mon.php"] [unique_id "aaLtO7THSOG_yf2PpqFz2wAAAcY"]
[Sat Feb 28 21:27:24.506708 2026] [:error] [pid 39183:tid 39206] [client 52.169.148.186:7405] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "aaLtPBCf4HvhVePw3LZNxgAAAA4"]
[Sat Feb 28 21:27:25.009295 2026] [:error] [pid 39183:tid 39203] [client 52.169.148.186:12357] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "aaLtPRCf4HvhVePw3LZNzAAAAAs"]
[Sat Feb 28 21:27:25.522707 2026] [:error] [pid 52460:tid 52471] [client 52.169.148.186:10736] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "aaLtPbLWOogAgHGh62SO1AAAAYg"]
[Sat Feb 28 21:27:26.032340 2026] [:error] [pid 39184:tid 39242] [client 52.169.148.186:11180] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "aaLtPltZF9Zd_U7easDHbgAAAFc"]
[Sat Feb 28 21:27:26.544820 2026] [:error] [pid 52460:tid 52475] [client 52.169.148.186:15038] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aaLtPrLWOogAgHGh62SO2gAAAYw"]
[Sat Feb 28 21:27:27.043676 2026] [:error] [pid 39292:tid 39306] [client 52.169.148.186:3172] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aaLtP6IAO5fN7BxyqcGBVQAAAMw"]
[Sat Feb 28 21:27:27.543494 2026] [:error] [pid 39184:tid 39238] [client 52.169.148.186:14402] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aaLtP1tZF9Zd_U7easDHcQAAAFM"]
[Sat Feb 28 21:27:28.046057 2026] [:error] [pid 39184:tid 39239] [client 52.169.148.186:3139] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aaLtQFtZF9Zd_U7easDHcwAAAFQ"]
[Sat Feb 28 21:27:28.550524 2026] [:error] [pid 39183:tid 39202] [client 52.169.148.186:16880] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aaLtQBCf4HvhVePw3LZN3gAAAAo"]
[Sat Feb 28 21:28:25.975362 2026] [:error] [pid 39183:tid 39203] [client 52.169.148.186:12242] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aaLteRCf4HvhVePw3LZPIAAAAAs"]
[Sat Feb 28 21:28:26.474682 2026] [:error] [pid 39183:tid 39206] [client 52.169.148.186:8542] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aaLtehCf4HvhVePw3LZPJQAAAA4"]
[Sat Feb 28 21:28:26.973186 2026] [:error] [pid 49763:tid 49777] [client 52.169.148.186:4967] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aaLterTHSOG_yf2PpqF1ggAAAcs"]
[Sat Feb 28 21:28:27.472218 2026] [:error] [pid 49763:tid 49773] [client 52.169.148.186:10810] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aaLte7THSOG_yf2PpqF1iQAAAcc"]
[Sat Feb 28 21:28:27.971627 2026] [:error] [pid 52460:tid 52479] [client 52.169.148.186:1403] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x12.php"] [unique_id "aaLte7LWOogAgHGh62SPIgAAAZA"]
[Sat Feb 28 21:28:28.470972 2026] [:error] [pid 39184:tid 39229] [client 52.169.148.186:8540] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x12.php"] [unique_id "aaLtfFtZF9Zd_U7easDHngAAAEo"]
[Sat Feb 28 21:28:28.972467 2026] [:error] [pid 39184:tid 39239] [client 52.169.148.186:2419] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x12.php"] [unique_id "aaLtfFtZF9Zd_U7easDHogAAAFQ"]
[Sat Feb 28 21:28:29.473194 2026] [:error] [pid 39184:tid 39228] [client 52.169.148.186:8560] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x12.php"] [unique_id "aaLtfVtZF9Zd_U7easDHqAAAAEk"]
[Sat Feb 28 21:28:29.979262 2026] [:error] [pid 39183:tid 39199] [client 52.169.148.186:14010] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fz.php"] [unique_id "aaLtfRCf4HvhVePw3LZPOwAAAAc"]
[Sat Feb 28 21:28:30.481223 2026] [:error] [pid 22194:tid 22205] [client 52.169.148.186:8522] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fz.php"] [unique_id "aaLtfn6mbajs3bzQGyun1AAAAUk"]
[Sat Feb 28 21:28:30.981460 2026] [:error] [pid 52460:tid 52466] [client 52.169.148.186:19698] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fz.php"] [unique_id "aaLtfrLWOogAgHGh62SPJgAAAYM"]
[Sat Feb 28 21:28:31.483615 2026] [:error] [pid 39184:tid 39222] [client 52.169.148.186:13485] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fz.php"] [unique_id "aaLtf1tZF9Zd_U7easDHrwAAAEM"]
[Sat Feb 28 21:28:31.984462 2026] [:error] [pid 49763:tid 49788] [client 52.169.148.186:7239] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aaLtf7THSOG_yf2PpqF1rgAAAdY"]
[Sat Feb 28 21:28:32.483466 2026] [:error] [pid 22194:tid 22198] [client 52.169.148.186:15500] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aaLtgH6mbajs3bzQGyun2AAAAUI"]
[Sat Feb 28 21:28:32.982995 2026] [:error] [pid 52460:tid 52485] [client 52.169.148.186:5279] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aaLtgLLWOogAgHGh62SPMAAAAZY"]
[Sat Feb 28 21:28:33.481278 2026] [:error] [pid 11791:tid 11812] [client 52.169.148.186:3647] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aaLtgWuX5e1Q32gqxH3JOQAAARM"]
[Sat Feb 28 21:28:33.983201 2026] [:error] [pid 52460:tid 52471] [client 52.169.148.186:8740] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8o82nc.php"] [unique_id "aaLtgbLWOogAgHGh62SPNgAAAYg"]
[Sat Feb 28 21:28:34.485806 2026] [:error] [pid 49763:tid 49790] [client 52.169.148.186:3421] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8o82nc.php"] [unique_id "aaLtgrTHSOG_yf2PpqF1wwAAAdg"]
[Sat Feb 28 21:28:34.988340 2026] [:error] [pid 49763:tid 49786] [client 52.169.148.186:1807] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8o82nc.php"] [unique_id "aaLtgrTHSOG_yf2PpqF1zQAAAdQ"]
[Sat Feb 28 21:28:35.495252 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:10378] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8o82nc.php"] [unique_id "aaLtg7THSOG_yf2PpqF12AAAAck"]
[Sat Feb 28 21:28:35.995769 2026] [:error] [pid 49763:tid 49787] [client 52.169.148.186:5258] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aaLtg7THSOG_yf2PpqF13QAAAdU"]
[Sat Feb 28 21:28:36.496544 2026] [:error] [pid 52460:tid 52484] [client 52.169.148.186:5294] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aaLthLLWOogAgHGh62SPOQAAAZU"]
[Sat Feb 28 21:28:36.998030 2026] [:error] [pid 52460:tid 52483] [client 52.169.148.186:3410] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aaLthLLWOogAgHGh62SPOwAAAZQ"]
[Sat Feb 28 21:28:37.505802 2026] [:error] [pid 39183:tid 39209] [client 52.169.148.186:1161] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "aaLthRCf4HvhVePw3LZPYgAAABE"]
[Sat Feb 28 21:28:38.007667 2026] [:error] [pid 39183:tid 39194] [client 52.169.148.186:5085] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opotv.php"] [unique_id "aaLthhCf4HvhVePw3LZPagAAAAI"]
[Sat Feb 28 21:28:38.508346 2026] [:error] [pid 49763:tid 49774] [client 52.169.148.186:12333] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opotv.php"] [unique_id "aaLthrTHSOG_yf2PpqF19QAAAcg"]
[Sat Feb 28 21:28:39.011339 2026] [:error] [pid 39183:tid 39198] [client 52.169.148.186:11491] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opotv.php"] [unique_id "aaLthxCf4HvhVePw3LZPcQAAAAY"]
[Sat Feb 28 21:28:39.511939 2026] [:error] [pid 39184:tid 39226] [client 52.169.148.186:6541] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opotv.php"] [unique_id "aaLth1tZF9Zd_U7easDHuQAAAEc"]
[Sat Feb 28 21:28:40.016445 2026] [:error] [pid 49763:tid 49777] [client 52.169.148.186:6567] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pu9.php"] [unique_id "aaLtiLTHSOG_yf2PpqF1_wAAAcs"]
[Sat Feb 28 21:28:40.520003 2026] [:error] [pid 52460:tid 52485] [client 52.169.148.186:18463] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pu9.php"] [unique_id "aaLtiLLWOogAgHGh62SPRAAAAZY"]
[Sat Feb 28 21:28:41.026762 2026] [:error] [pid 39183:tid 39200] [client 52.169.148.186:1170] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pu9.php"] [unique_id "aaLtiRCf4HvhVePw3LZPgQAAAAg"]
[Sat Feb 28 21:28:41.533744 2026] [:error] [pid 52460:tid 52476] [client 52.169.148.186:18476] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pu9.php"] [unique_id "aaLtibLWOogAgHGh62SPRgAAAY0"]
[Sat Feb 28 21:28:42.037708 2026] [:error] [pid 49763:tid 49770] [client 52.169.148.186:14035] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qoepq.php"] [unique_id "aaLtirTHSOG_yf2PpqF2CwAAAcQ"]
[Sat Feb 28 21:28:42.537222 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:1662] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qoepq.php"] [unique_id "aaLtirTHSOG_yf2PpqF2DQAAAck"]
[Sat Feb 28 21:28:43.037823 2026] [:error] [pid 52460:tid 52470] [client 52.169.148.186:5970] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qoepq.php"] [unique_id "aaLti7LWOogAgHGh62SPTwAAAYc"]
[Sat Feb 28 21:28:43.537326 2026] [:error] [pid 49763:tid 49776] [client 52.169.148.186:11457] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qoepq.php"] [unique_id "aaLti7THSOG_yf2PpqF2EwAAAco"]
[Sat Feb 28 21:28:44.037046 2026] [:error] [pid 39292:tid 39296] [client 52.169.148.186:5974] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fodds.php"] [unique_id "aaLtjKIAO5fN7BxyqcGBqAAAAMI"]
[Sat Feb 28 21:28:44.554807 2026] [:error] [pid 39292:tid 39294] [client 52.169.148.186:5585] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fodds.php"] [unique_id "aaLtjKIAO5fN7BxyqcGBqQAAAMA"]
[Sat Feb 28 21:28:45.056485 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:2775] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fodds.php"] [unique_id "aaLtjbTHSOG_yf2PpqF2HwAAAck"]
[Sat Feb 28 21:28:45.555436 2026] [:error] [pid 39183:tid 39204] [client 52.169.148.186:14055] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fodds.php"] [unique_id "aaLtjRCf4HvhVePw3LZPnQAAAAw"]
[Sat Feb 28 21:28:46.055814 2026] [:error] [pid 49763:tid 49780] [client 52.169.148.186:9485] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gaigu.php"] [unique_id "aaLtjrTHSOG_yf2PpqF2KAAAAc4"]
[Sat Feb 28 21:28:46.555712 2026] [:error] [pid 52460:tid 52473] [client 52.169.148.186:5981] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gaigu.php"] [unique_id "aaLtjrLWOogAgHGh62SPZgAAAYo"]
[Sat Feb 28 21:28:47.055308 2026] [:error] [pid 52460:tid 52484] [client 52.169.148.186:7720] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gaigu.php"] [unique_id "aaLtj7LWOogAgHGh62SPbgAAAZU"]
[Sat Feb 28 21:28:47.554536 2026] [:error] [pid 49763:tid 49784] [client 52.169.148.186:5600] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gaigu.php"] [unique_id "aaLtj7THSOG_yf2PpqF2NwAAAdI"]
[Sat Feb 28 21:28:48.058733 2026] [:error] [pid 49763:tid 49779] [client 52.169.148.186:18953] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad2.php"] [unique_id "aaLtkLTHSOG_yf2PpqF2QAAAAc0"]
[Sat Feb 28 21:28:48.561787 2026] [:error] [pid 39183:tid 39215] [client 52.169.148.186:3363] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad2.php"] [unique_id "aaLtkBCf4HvhVePw3LZPpQAAABc"]
[Sat Feb 28 21:28:49.061639 2026] [:error] [pid 49763:tid 49766] [client 52.169.148.186:7712] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad2.php"] [unique_id "aaLtkbTHSOG_yf2PpqF2TAAAAcA"]
[Sat Feb 28 21:28:49.562484 2026] [:error] [pid 39183:tid 39193] [client 52.169.148.186:1168] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad2.php"] [unique_id "aaLtkRCf4HvhVePw3LZPqgAAAAE"]
[Sat Feb 28 21:28:50.062215 2026] [:error] [pid 39184:tid 39224] [client 52.169.148.186:7722] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8rd1.php"] [unique_id "aaLtkltZF9Zd_U7easDHxAAAAEU"]
[Sat Feb 28 21:28:50.561178 2026] [:error] [pid 22194:tid 22199] [client 52.169.148.186:9256] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8rd1.php"] [unique_id "aaLtkn6mbajs3bzQGyun3wAAAUM"]
[Sat Feb 28 21:28:51.062561 2026] [:error] [pid 39185:tid 39266] [client 52.169.148.186:10298] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8rd1.php"] [unique_id "aaLtkxVE-FfM89u7BQakbwAAAJQ"]
[Sat Feb 28 21:28:51.561494 2026] [:error] [pid 52460:tid 52463] [client 52.169.148.186:19128] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8rd1.php"] [unique_id "aaLtk7LWOogAgHGh62SPiQAAAYA"]
[Sat Feb 28 21:28:52.063226 2026] [:error] [pid 49763:tid 49770] [client 52.169.148.186:10248] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLtlLTHSOG_yf2PpqF2XAAAAcQ"]
[Sat Feb 28 21:28:52.564103 2026] [:error] [pid 49763:tid 49767] [client 52.169.148.186:7743] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLtlLTHSOG_yf2PpqF2YQAAAcE"]
[Sat Feb 28 21:28:53.062332 2026] [:error] [pid 49763:tid 49783] [client 52.169.148.186:10442] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLtlbTHSOG_yf2PpqF2ZwAAAdE"]
[Sat Feb 28 21:28:53.561458 2026] [:error] [pid 49763:tid 49779] [client 52.169.148.186:7743] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLtlbTHSOG_yf2PpqF2aQAAAc0"]
[Sat Feb 28 21:28:54.060555 2026] [:error] [pid 49763:tid 49772] [client 52.169.148.186:2257] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asix.php"] [unique_id "aaLtlrTHSOG_yf2PpqF2bQAAAcY"]
[Sat Feb 28 21:28:54.561460 2026] [:error] [pid 11791:tid 11807] [client 52.169.148.186:9510] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asix.php"] [unique_id "aaLtlmuX5e1Q32gqxH3JQgAAAQ4"]
[Sat Feb 28 21:28:55.063958 2026] [:error] [pid 11791:tid 11795] [client 52.169.148.186:19074] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asix.php"] [unique_id "aaLtl2uX5e1Q32gqxH3JQwAAAQI"]
[Sat Feb 28 21:28:55.564783 2026] [:error] [pid 39183:tid 39216] [client 52.169.148.186:18985] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asix.php"] [unique_id "aaLtlxCf4HvhVePw3LZPuQAAABg"]
[Sat Feb 28 21:28:56.064178 2026] [:error] [pid 49763:tid 49776] [client 52.169.148.186:12566] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gems.php"] [unique_id "aaLtmLTHSOG_yf2PpqF2dgAAAco"]
[Sat Feb 28 21:28:56.561592 2026] [:error] [pid 52460:tid 52483] [client 52.169.148.186:12419] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gems.php"] [unique_id "aaLtmLLWOogAgHGh62SPmQAAAZQ"]
[Sat Feb 28 21:28:57.060912 2026] [:error] [pid 52460:tid 52463] [client 52.169.148.186:9496] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gems.php"] [unique_id "aaLtmbLWOogAgHGh62SPnAAAAYA"]
[Sat Feb 28 21:28:57.560857 2026] [:error] [pid 49763:tid 49767] [client 52.169.148.186:19076] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gems.php"] [unique_id "aaLtmbTHSOG_yf2PpqF2ewAAAcE"]
[Sat Feb 28 21:28:58.059026 2026] [:error] [pid 11791:tid 11804] [client 52.169.148.186:12423] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxd.php"] [unique_id "aaLtmmuX5e1Q32gqxH3JSAAAAQs"]
[Sat Feb 28 21:28:58.559125 2026] [:error] [pid 39185:tid 39246] [client 52.169.148.186:3926] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxd.php"] [unique_id "aaLtmhVE-FfM89u7BQakhgAAAIA"]
[Sat Feb 28 21:28:59.058469 2026] [:error] [pid 39292:tid 39300] [client 52.169.148.186:9275] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxd.php"] [unique_id "aaLtm6IAO5fN7BxyqcGBugAAAMY"]
[Sat Feb 28 21:28:59.559988 2026] [:error] [pid 49763:tid 49789] [client 52.169.148.186:2768] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxd.php"] [unique_id "aaLtm7THSOG_yf2PpqF2iAAAAdc"]
[Sat Feb 28 21:29:00.062092 2026] [:error] [pid 49763:tid 49766] [client 52.169.148.186:2258] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2sx.php"] [unique_id "aaLtnLTHSOG_yf2PpqF2jQAAAcA"]
[Sat Feb 28 21:29:00.562850 2026] [:error] [pid 22194:tid 22196] [client 52.169.148.186:14163] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2sx.php"] [unique_id "aaLtnH6mbajs3bzQGyun4gAAAUA"]
[Sat Feb 28 21:29:01.066024 2026] [:error] [pid 39184:tid 39220] [client 52.169.148.186:12425] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2sx.php"] [unique_id "aaLtnVtZF9Zd_U7easDH0wAAAEE"]
[Sat Feb 28 21:29:01.567262 2026] [:error] [pid 39292:tid 39304] [client 52.169.148.186:12572] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2sx.php"] [unique_id "aaLtnaIAO5fN7BxyqcGBvQAAAMo"]
[Sat Feb 28 21:29:02.069398 2026] [:error] [pid 49763:tid 49787] [client 52.169.148.186:10440] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaq.php"] [unique_id "aaLtnrTHSOG_yf2PpqF2mQAAAdU"]
[Sat Feb 28 21:29:02.574927 2026] [:error] [pid 49763:tid 49788] [client 52.169.148.186:14206] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaq.php"] [unique_id "aaLtnrTHSOG_yf2PpqF2nQAAAdY"]
[Sat Feb 28 21:29:03.102480 2026] [:error] [pid 11791:tid 11813] [client 52.169.148.186:18491] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaq.php"] [unique_id "aaLtn2uX5e1Q32gqxH3JTgAAARQ"]
[Sat Feb 28 21:29:03.602581 2026] [:error] [pid 11791:tid 11811] [client 52.169.148.186:12558] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaq.php"] [unique_id "aaLtn2uX5e1Q32gqxH3JUAAAARI"]
[Sat Feb 28 21:29:04.109412 2026] [:error] [pid 52460:tid 52467] [client 52.169.148.186:19114] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aaLtoLLWOogAgHGh62SPrAAAAYQ"]
[Sat Feb 28 21:29:04.608671 2026] [:error] [pid 52460:tid 52463] [client 52.169.148.186:18994] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aaLtoLLWOogAgHGh62SPsQAAAYA"]
[Sat Feb 28 21:29:05.109058 2026] [:error] [pid 39184:tid 39232] [client 52.169.148.186:10438] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aaLtoVtZF9Zd_U7easDH4wAAAE0"]
[Sat Feb 28 21:29:05.608347 2026] [:error] [pid 22194:tid 22197] [client 52.169.148.186:10448] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aaLtoX6mbajs3bzQGyun6gAAAUE"]
[Sat Feb 28 21:29:06.107933 2026] [:error] [pid 39184:tid 39220] [client 52.169.148.186:7703] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aaLtoltZF9Zd_U7easDH5gAAAEE"]
[Sat Feb 28 21:29:06.618647 2026] [:error] [pid 39183:tid 39201] [client 52.169.148.186:19075] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aaLtohCf4HvhVePw3LZPzgAAAAk"]
[Sat Feb 28 21:29:07.118928 2026] [:error] [pid 22194:tid 22198] [client 52.169.148.186:7836] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aaLto36mbajs3bzQGyun7AAAAUI"]
[Sat Feb 28 21:29:07.626786 2026] [:error] [pid 11791:tid 11799] [client 52.169.148.186:14151] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aaLto2uX5e1Q32gqxH3JVAAAAQY"]
[Sat Feb 28 21:29:08.125202 2026] [:error] [pid 39183:tid 39207] [client 52.169.148.186:10256] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aaLtpBCf4HvhVePw3LZP0AAAAA8"]
[Sat Feb 28 21:29:08.624225 2026] [:error] [pid 39183:tid 39204] [client 52.169.148.186:9314] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aaLtpBCf4HvhVePw3LZP1AAAAAw"]
[Sat Feb 28 21:29:09.127287 2026] [:error] [pid 39183:tid 39203] [client 52.169.148.186:9331] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aaLtpRCf4HvhVePw3LZP2QAAAAs"]
[Sat Feb 28 21:29:09.626481 2026] [:error] [pid 39183:tid 39206] [client 52.169.148.186:4440] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aaLtpRCf4HvhVePw3LZP3QAAAA4"]
[Sat Feb 28 21:29:10.128817 2026] [:error] [pid 52460:tid 52484] [client 52.169.148.186:10484] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6s2.php"] [unique_id "aaLtprLWOogAgHGh62SPvwAAAZU"]
[Sat Feb 28 21:29:10.645287 2026] [:error] [pid 39183:tid 39202] [client 52.169.148.186:2279] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6s2.php"] [unique_id "aaLtphCf4HvhVePw3LZP4QAAAAo"]
[Sat Feb 28 21:29:11.145262 2026] [:error] [pid 39183:tid 39204] [client 52.169.148.186:10033] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6s2.php"] [unique_id "aaLtpxCf4HvhVePw3LZP5QAAAAw"]
[Sat Feb 28 21:29:11.649666 2026] [:error] [pid 49763:tid 49786] [client 52.169.148.186:6453] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6s2.php"] [unique_id "aaLtp7THSOG_yf2PpqF24AAAAdQ"]
[Sat Feb 28 21:29:12.165736 2026] [:error] [pid 49763:tid 49790] [client 52.169.148.186:10027] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aki.php"] [unique_id "aaLtqLTHSOG_yf2PpqF26gAAAdg"]
[Sat Feb 28 21:29:12.675299 2026] [:error] [pid 49763:tid 49788] [client 52.169.148.186:17848] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aki.php"] [unique_id "aaLtqLTHSOG_yf2PpqF28AAAAdY"]
[Sat Feb 28 21:29:13.174081 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:6417] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aki.php"] [unique_id "aaLtqbTHSOG_yf2PpqF29wAAAck"]
[Sat Feb 28 21:29:13.677905 2026] [:error] [pid 39183:tid 39193] [client 52.169.148.186:2813] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aki.php"] [unique_id "aaLtqRCf4HvhVePw3LZP7QAAAAE"]
[Sat Feb 28 21:29:14.192330 2026] [:error] [pid 49763:tid 49780] [client 52.169.148.186:7707] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaLtqrTHSOG_yf2PpqF3BgAAAc4"]
[Sat Feb 28 21:29:14.697001 2026] [:error] [pid 49763:tid 49774] [client 52.169.148.186:19118] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaLtqrTHSOG_yf2PpqF3DAAAAcg"]
[Sat Feb 28 21:29:15.207051 2026] [:error] [pid 49763:tid 49780] [client 52.169.148.186:12424] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaLtq7THSOG_yf2PpqF3EwAAAc4"]
[Sat Feb 28 21:29:15.710518 2026] [:error] [pid 52460:tid 52479] [client 52.169.148.186:6114] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/R57.php"] [unique_id "aaLtq7LWOogAgHGh62SP0AAAAZA"]
[Sat Feb 28 21:29:16.212707 2026] [:error] [pid 39183:tid 39214] [client 52.169.148.186:2798] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aaLtrBCf4HvhVePw3LZP8QAAABY"]
[Sat Feb 28 21:29:16.713347 2026] [:error] [pid 39183:tid 39198] [client 52.169.148.186:18495] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aaLtrBCf4HvhVePw3LZP8wAAAAY"]
[Sat Feb 28 21:29:17.213694 2026] [:error] [pid 39183:tid 39195] [client 52.169.148.186:2808] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aaLtrRCf4HvhVePw3LZP9gAAAAM"]
[Sat Feb 28 21:29:17.715118 2026] [:error] [pid 39183:tid 39215] [client 52.169.148.186:2288] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pepe.php"] [unique_id "aaLtrRCf4HvhVePw3LZP-wAAABc"]
[Sat Feb 28 21:29:18.223427 2026] [:error] [pid 49763:tid 49789] [client 52.169.148.186:14184] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaLtrrTHSOG_yf2PpqF3NQAAAdc"]
[Sat Feb 28 21:29:18.726037 2026] [:error] [pid 39183:tid 39201] [client 52.169.148.186:13691] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaLtrhCf4HvhVePw3LZQAwAAAAk"]
[Sat Feb 28 21:29:19.226451 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:4398] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaLtr7THSOG_yf2PpqF3RAAAAck"]
[Sat Feb 28 21:29:19.727026 2026] [:error] [pid 49763:tid 49790] [client 52.169.148.186:5293] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "aaLtr7THSOG_yf2PpqF3SAAAAdg"]
[Sat Feb 28 21:29:20.232213 2026] [:error] [pid 39183:tid 39212] [client 52.169.148.186:9285] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaLtsBCf4HvhVePw3LZQDwAAABQ"]
[Sat Feb 28 21:29:20.731123 2026] [:error] [pid 39183:tid 39207] [client 52.169.148.186:2801] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaLtsBCf4HvhVePw3LZQFQAAAA8"]
[Sat Feb 28 21:29:21.232792 2026] [:error] [pid 49763:tid 49778] [client 52.169.148.186:4446] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaLtsbTHSOG_yf2PpqF3UQAAAcw"]
[Sat Feb 28 21:29:21.730893 2026] [:error] [pid 49763:tid 49769] [client 52.169.148.186:9290] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaLtsbTHSOG_yf2PpqF3VgAAAcM"]
[Sat Feb 28 21:29:22.235330 2026] [:error] [pid 49763:tid 49766] [client 52.169.148.186:6925] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLtsrTHSOG_yf2PpqF3WwAAAcA"]
[Sat Feb 28 21:29:22.734770 2026] [:error] [pid 49763:tid 49786] [client 52.169.148.186:7733] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLtsrTHSOG_yf2PpqF3YgAAAdQ"]
[Sat Feb 28 21:30:17.104366 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:10040] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaLt6bTHSOG_yf2PpqF5dwAAAck"]
[Sat Feb 28 21:30:17.603074 2026] [:error] [pid 49763:tid 49778] [client 52.169.148.186:10321] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaLt6bTHSOG_yf2PpqF5gQAAAcw"]
[Sat Feb 28 21:30:18.101916 2026] [:error] [pid 39184:tid 39225] [client 52.169.148.186:13640] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaLt6ltZF9Zd_U7easDIfgAAAEY"]
[Sat Feb 28 21:30:18.603078 2026] [:error] [pid 39183:tid 39194] [client 52.169.148.186:13359] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaLt6hCf4HvhVePw3LZRYAAAAAI"]
[Sat Feb 28 21:30:19.107488 2026] [:error] [pid 49763:tid 49769] [client 52.169.148.186:6032] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaLt67THSOG_yf2PpqF5kgAAAcM"]
[Sat Feb 28 21:30:19.611812 2026] [:error] [pid 39184:tid 39222] [client 52.169.148.186:6423] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaLt61tZF9Zd_U7easDIgQAAAEM"]
[Sat Feb 28 21:30:20.122940 2026] [:error] [pid 39184:tid 39232] [client 52.169.148.186:8689] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaLt7FtZF9Zd_U7easDIggAAAE0"]
[Sat Feb 28 21:30:20.624650 2026] [:error] [pid 49763:tid 49786] [client 52.169.148.186:2611] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaLt7LTHSOG_yf2PpqF5pAAAAdQ"]
[Sat Feb 28 21:30:21.126331 2026] [:error] [pid 49763:tid 49767] [client 52.169.148.186:13331] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaLt7bTHSOG_yf2PpqF5qQAAAcE"]
[Sat Feb 28 21:30:32.651861 2026] [:error] [pid 39183:tid 39208] [client 52.169.148.186:19309] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/backup.php"] [unique_id "aaLt-BCf4HvhVePw3LZRvgAAABA"]
[Sat Feb 28 21:30:33.157877 2026] [:error] [pid 22194:tid 22205] [client 52.169.148.186:10343] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/backup.php"] [unique_id "aaLt-X6mbajs3bzQGyuoFAAAAUk"]
[Sat Feb 28 21:30:33.657219 2026] [:error] [pid 11791:tid 11808] [client 52.169.148.186:10327] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/backup.php"] [unique_id "aaLt-WuX5e1Q32gqxH3JpgAAAQ8"]
[Sat Feb 28 21:30:34.155570 2026] [:error] [pid 39184:tid 39231] [client 52.169.148.186:5283] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/backup.php"] [unique_id "aaLt-ltZF9Zd_U7easDInAAAAEw"]
[Sat Feb 28 21:30:34.657704 2026] [:error] [pid 39184:tid 39238] [client 52.169.148.186:19266] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "aaLt-ltZF9Zd_U7easDIoQAAAFM"]
[Sat Feb 28 21:30:35.156207 2026] [:error] [pid 39184:tid 39229] [client 52.169.148.186:9904] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "aaLt-1tZF9Zd_U7easDIpgAAAEo"]
[Sat Feb 28 21:30:35.657055 2026] [:error] [pid 52460:tid 52479] [client 52.169.148.186:6937] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "aaLt-7LWOogAgHGh62SRGQAAAZA"]
[Sat Feb 28 21:30:36.157648 2026] [:error] [pid 39292:tid 39306] [client 52.169.148.186:8672] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "aaLt_KIAO5fN7BxyqcGCIAAAAMw"]
[Sat Feb 28 21:30:36.655758 2026] [:error] [pid 49763:tid 49788] [client 52.169.148.186:9869] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aaLt_LTHSOG_yf2PpqF54gAAAdY"]
[Sat Feb 28 21:30:37.156790 2026] [:error] [pid 49763:tid 49776] [client 52.169.148.186:13328] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aaLt_bTHSOG_yf2PpqF56wAAAco"]
[Sat Feb 28 21:30:37.656348 2026] [:error] [pid 49763:tid 49783] [client 52.169.148.186:9914] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aaLt_bTHSOG_yf2PpqF59QAAAdE"]
[Sat Feb 28 21:30:38.156067 2026] [:error] [pid 11791:tid 11800] [client 52.169.148.186:4377] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aaLt_muX5e1Q32gqxH3JrwAAAQc"]
[Sat Feb 28 21:30:38.654535 2026] [:error] [pid 52460:tid 52487] [client 52.169.148.186:13659] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaLt_rLWOogAgHGh62SRJAAAAZg"]
[Sat Feb 28 21:30:39.154688 2026] [:error] [pid 49763:tid 49787] [client 52.169.148.186:6039] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaLt_7THSOG_yf2PpqF6CAAAAdU"]
[Sat Feb 28 21:30:39.655966 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:7081] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaLt_7THSOG_yf2PpqF6CwAAAck"]
[Sat Feb 28 21:30:40.158168 2026] [:error] [pid 39183:tid 39192] [client 52.169.148.186:18532] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaLuABCf4HvhVePw3LZR1AAAAAA"]
[Sat Feb 28 21:30:40.658906 2026] [:error] [pid 49763:tid 49787] [client 52.169.148.186:10331] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aaLuALTHSOG_yf2PpqF6FgAAAdU"]
[Sat Feb 28 21:30:41.160341 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:2587] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aaLuAbTHSOG_yf2PpqF6HgAAAck"]
[Sat Feb 28 21:30:41.660561 2026] [:error] [pid 49763:tid 49777] [client 52.169.148.186:18502] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aaLuAbTHSOG_yf2PpqF6JwAAAcs"]
[Sat Feb 28 21:30:42.170207 2026] [:error] [pid 39183:tid 39196] [client 52.169.148.186:3876] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "aaLuAhCf4HvhVePw3LZR6gAAAAQ"]
[Sat Feb 28 21:30:42.670925 2026] [:error] [pid 52460:tid 52474] [client 52.169.148.186:6417] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLuArLWOogAgHGh62SRLQAAAYs"]
[Sat Feb 28 21:30:43.181872 2026] [:error] [pid 39183:tid 39212] [client 52.169.148.186:4395] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLuAxCf4HvhVePw3LZR8wAAABQ"]
[Sat Feb 28 21:30:43.681709 2026] [:error] [pid 39183:tid 39207] [client 52.169.148.186:5219] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLuAxCf4HvhVePw3LZR9gAAAA8"]
[Sat Feb 28 21:30:44.193328 2026] [:error] [pid 49763:tid 49783] [client 52.169.148.186:13662] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLuBLTHSOG_yf2PpqF6LAAAAdE"]
[Sat Feb 28 21:30:44.693640 2026] [:error] [pid 49763:tid 49766] [client 52.169.148.186:7087] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-atom.php"] [unique_id "aaLuBLTHSOG_yf2PpqF6MgAAAcA"]
[Sat Feb 28 21:30:45.209444 2026] [:error] [pid 49763:tid 49790] [client 52.169.148.186:5200] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-atom.php"] [unique_id "aaLuBbTHSOG_yf2PpqF6NwAAAdg"]
[Sat Feb 28 21:30:45.708925 2026] [:error] [pid 39185:tid 39267] [client 52.169.148.186:6037] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-atom.php"] [unique_id "aaLuBRVE-FfM89u7BQalFQAAAJU"]
[Sat Feb 28 21:30:46.207861 2026] [:error] [pid 49763:tid 49781] [client 52.169.148.186:2608] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-atom.php"] [unique_id "aaLuBrTHSOG_yf2PpqF6PwAAAc8"]
[Sat Feb 28 21:30:46.715654 2026] [:error] [pid 49763:tid 49766] [client 52.169.148.186:13346] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaLuBrTHSOG_yf2PpqF6QwAAAcA"]
[Sat Feb 28 21:30:47.212844 2026] [:error] [pid 52460:tid 52475] [client 52.169.148.186:9329] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaLuB7LWOogAgHGh62SRUwAAAYw"]
[Sat Feb 28 21:30:47.710833 2026] [:error] [pid 39184:tid 39228] [client 52.169.148.186:10037] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaLuB1tZF9Zd_U7easDIxAAAAEk"]
[Sat Feb 28 21:30:48.213516 2026] [:error] [pid 39185:tid 39249] [client 52.169.148.186:13043] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaLuCBVE-FfM89u7BQalGAAAAIM"]
[Sat Feb 28 21:30:48.713820 2026] [:error] [pid 39183:tid 39197] [client 52.169.148.186:10043] [client 52.169.148.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaLuCBCf4HvhVePw3LZSAQAAAAU"]
[Sat Feb 28 21:30:49.222020 2026] [:error] [pid 39183:tid 39201] [client 52.169.148.186:10020] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aaLuCRCf4HvhVePw3LZSBQAAAAk"]
[Sat Feb 28 21:30:49.720787 2026] [:error] [pid 39183:tid 39195] [client 52.169.148.186:10323] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aaLuCRCf4HvhVePw3LZSCgAAAAM"]
[Sat Feb 28 21:30:50.230274 2026] [:error] [pid 22194:tid 22217] [client 52.169.148.186:13321] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aaLuCn6mbajs3bzQGyuoLgAAAVU"]
[Sat Feb 28 21:30:50.729246 2026] [:error] [pid 39292:tid 39301] [client 52.169.148.186:17839] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaLuCqIAO5fN7BxyqcGCTQAAAMc"]
[Sat Feb 28 21:30:51.230887 2026] [:error] [pid 11791:tid 11802] [client 52.169.148.186:5223] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaLuC2uX5e1Q32gqxH3JuAAAAQk"]
[Sat Feb 28 21:30:51.734009 2026] [:error] [pid 52460:tid 52480] [client 52.169.148.186:9891] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaLuC7LWOogAgHGh62SRYAAAAZE"]
[Sat Feb 28 21:30:52.251180 2026] [:error] [pid 49763:tid 49775] [client 52.169.148.186:5220] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat.php"] [unique_id "aaLuDLTHSOG_yf2PpqF6XAAAAck"]
[Sat Feb 28 21:30:52.750520 2026] [:error] [pid 49763:tid 49771] [client 52.169.148.186:6950] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaLuDLTHSOG_yf2PpqF6YAAAAcU"]
[Sat Feb 28 21:30:53.253060 2026] [:error] [pid 49763:tid 49788] [client 52.169.148.186:5260] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaLuDbTHSOG_yf2PpqF6ZQAAAdY"]
[Sat Feb 28 21:30:53.752639 2026] [:error] [pid 52460:tid 52472] [client 52.169.148.186:8649] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaLuDbLWOogAgHGh62SRZwAAAYk"]
[Sat Feb 28 21:30:54.259501 2026] [:error] [pid 49763:tid 49781] [client 52.169.148.186:10013] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaLuDrTHSOG_yf2PpqF6bwAAAc8"]
[Sat Feb 28 21:30:54.763177 2026] [:error] [pid 49763:tid 49769] [client 52.169.148.186:7521] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aaLuDrTHSOG_yf2PpqF6dQAAAcM"]
[Sat Feb 28 21:30:55.267339 2026] [:error] [pid 49763:tid 49782] [client 52.169.148.186:6029] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aaLuD7THSOG_yf2PpqF6fAAAAdA"]
[Sat Feb 28 21:30:55.781488 2026] [:error] [pid 52460:tid 52486] [client 52.169.148.186:6068] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aaLuD7LWOogAgHGh62SRbQAAAZc"]
[Sat Feb 28 21:30:56.280983 2026] [:error] [pid 49763:tid 49785] [client 52.169.148.186:10309] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aaLuELTHSOG_yf2PpqF6gQAAAdM"]
[Sat Feb 28 21:30:56.788636 2026] [:error] [pid 39183:tid 39204] [client 52.169.148.186:4410] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aaLuEBCf4HvhVePw3LZSHwAAAAw"]
[Sat Feb 28 21:30:57.287488 2026] [:error] [pid 39183:tid 39213] [client 52.169.148.186:2583] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aaLuERCf4HvhVePw3LZSIwAAABU"]
[Sat Feb 28 21:30:57.803187 2026] [:error] [pid 22194:tid 22210] [client 52.169.148.186:13042] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aaLuEX6mbajs3bzQGyuoNQAAAU4"]
[Sat Feb 28 21:30:58.309560 2026] [:error] [pid 49763:tid 49785] [client 52.169.148.186:9325] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aaLuErTHSOG_yf2PpqF6jgAAAdM"]
[Sat Feb 28 21:30:58.809351 2026] [:error] [pid 49763:tid 49769] [client 52.169.148.186:8694] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaLuErTHSOG_yf2PpqF6lAAAAcM"]
[Sat Feb 28 21:30:59.308562 2026] [:error] [pid 49763:tid 49782] [client 52.169.148.186:13670] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaLuE7THSOG_yf2PpqF6nAAAAdA"]
[Sat Feb 28 21:30:59.809223 2026] [:error] [pid 49763:tid 49777] [client 52.169.148.186:3884] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaLuE7THSOG_yf2PpqF6oQAAAcs"]
[Sat Feb 28 21:31:00.313840 2026] [:error] [pid 52460:tid 52486] [client 52.169.148.186:8687] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaLuFLLWOogAgHGh62SRkwAAAZc"]
[Sat Feb 28 21:31:00.811743 2026] [:error] [pid 52460:tid 52481] [client 52.169.148.186:6918] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaLuFLLWOogAgHGh62SRlgAAAZI"]
[Sat Feb 28 21:31:01.311524 2026] [:error] [pid 11791:tid 11802] [client 52.169.148.186:17829] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaLuFWuX5e1Q32gqxH3JzwAAAQk"]
[Sat Feb 28 21:31:01.822174 2026] [:error] [pid 49763:tid 49782] [client 52.169.148.186:6036] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaLuFbTHSOG_yf2PpqF6tgAAAdA"]
[Sat Feb 28 21:31:02.325170 2026] [:error] [pid 39184:tid 39233] [client 52.169.148.186:18558] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaLuFltZF9Zd_U7easDJBQAAAE4"]
[Sat Feb 28 21:31:02.828345 2026] [:error] [pid 52460:tid 52477] [client 52.169.148.186:10042] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaLuFrLWOogAgHGh62SRnwAAAY4"]
[Sat Feb 28 21:31:03.328983 2026] [:error] [pid 52460:tid 52479] [client 52.169.148.186:2580] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaLuF7LWOogAgHGh62SRpQAAAZA"]
[Sat Feb 28 21:31:03.847424 2026] [:error] [pid 39184:tid 39239] [client 52.169.148.186:10355] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaLuF1tZF9Zd_U7easDJCgAAAFQ"]
[Sat Feb 28 21:31:04.346735 2026] [:error] [pid 49763:tid 49784] [client 52.169.148.186:18519] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaLuGLTHSOG_yf2PpqF6zAAAAdI"]
[Sat Feb 28 21:31:04.859964 2026] [:error] [pid 52460:tid 52471] [client 52.169.148.186:3856] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaLuGLLWOogAgHGh62SRrQAAAYg"]
[Sat Feb 28 21:31:05.360182 2026] [:error] [pid 52460:tid 52483] [client 52.169.148.186:10328] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaLuGbLWOogAgHGh62SRsQAAAZQ"]
[Sat Feb 28 21:31:05.861929 2026] [:error] [pid 39184:tid 39221] [client 52.169.148.186:6415] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaLuGVtZF9Zd_U7easDJEAAAAEI"]
[Sat Feb 28 21:31:06.380049 2026] [:error] [pid 49763:tid 49774] [client 52.169.148.186:19315] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aaLuGrTHSOG_yf2PpqF63QAAAcg"]
[Sat Feb 28 21:31:06.882272 2026] [:error] [pid 39183:tid 39209] [client 52.169.148.186:6406] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaLuGhCf4HvhVePw3LZSJwAAABE"]
[Sat Feb 28 21:31:07.380494 2026] [:error] [pid 39183:tid 39195] [client 52.169.148.186:13352] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaLuGxCf4HvhVePw3LZSLAAAAAM"]
[Sat Feb 28 21:31:07.894709 2026] [:error] [pid 49763:tid 49774] [client 52.169.148.186:17801] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaLuG7THSOG_yf2PpqF66QAAAcg"]
[Sat Feb 28 21:31:08.393538 2026] [:error] [pid 39184:tid 39219] [client 52.169.148.186:5208] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaLuHFtZF9Zd_U7easDJFQAAAEA"]
[Sat Feb 28 21:31:08.892139 2026] [:error] [pid 39185:tid 39261] [client 52.169.148.186:3873] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my.php"] [unique_id "aaLuHBVE-FfM89u7BQalNwAAAI8"]
[Sat Feb 28 21:31:09.399786 2026] [:error] [pid 49763:tid 49788] [client 52.169.148.186:4561] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my.php"] [unique_id "aaLuHbTHSOG_yf2PpqF67wAAAdY"]
[Sat Feb 28 21:31:09.900561 2026] [:error] [pid 39183:tid 39194] [client 52.169.148.186:5187] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my.php"] [unique_id "aaLuHRCf4HvhVePw3LZSMQAAAAI"]
[Sat Feb 28 21:31:10.403127 2026] [:error] [pid 49763:tid 49772] [client 52.169.148.186:8355] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/my.php"] [unique_id "aaLuHrTHSOG_yf2PpqF69gAAAcY"]
[Sat Feb 28 21:31:10.905805 2026] [:error] [pid 49763:tid 49777] [client 52.169.148.186:4359] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLuHrTHSOG_yf2PpqF6-gAAAcs"]
[Sat Feb 28 21:31:11.406834 2026] [:error] [pid 39184:tid 39240] [client 52.169.148.186:8381] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLuH1tZF9Zd_U7easDJHAAAAFU"]
[Sat Feb 28 21:31:11.906957 2026] [:error] [pid 11791:tid 11805] [client 52.169.148.186:19305] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLuH2uX5e1Q32gqxH3J1AAAAQw"]
[Sat Feb 28 21:31:12.418411 2026] [:error] [pid 39183:tid 39212] [client 52.169.148.186:8357] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLuIBCf4HvhVePw3LZSOQAAABQ"]
[Sat Feb 28 21:31:12.918277 2026] [:error] [pid 39183:tid 39209] [client 52.169.148.186:6943] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aaLuIBCf4HvhVePw3LZSOgAAABE"]
[Sat Feb 28 21:31:13.418717 2026] [:error] [pid 49763:tid 49772] [client 52.169.148.186:6041] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aaLuIbTHSOG_yf2PpqF7GQAAAcY"]
[Sat Feb 28 21:31:13.917968 2026] [:error] [pid 39183:tid 39208] [client 52.169.148.186:6018] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aaLuIRCf4HvhVePw3LZSPQAAABA"]
[Sat Feb 28 21:31:14.417782 2026] [:error] [pid 39184:tid 39232] [client 52.169.148.186:7098] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aaLuIltZF9Zd_U7easDJHQAAAE0"]
[Sat Feb 28 21:31:14.922010 2026] [:error] [pid 49763:tid 49784] [client 52.169.148.186:13663] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaLuIrTHSOG_yf2PpqF7KAAAAdI"]
[Sat Feb 28 21:31:15.422518 2026] [:error] [pid 49763:tid 49771] [client 52.169.148.186:7072] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaLuI7THSOG_yf2PpqF7LwAAAcU"]
[Sat Feb 28 21:31:15.928541 2026] [:error] [pid 49763:tid 49781] [client 52.169.148.186:8681] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaLuI7THSOG_yf2PpqF7NQAAAc8"]
[Sat Feb 28 21:31:16.430328 2026] [:error] [pid 49763:tid 49771] [client 52.169.148.186:13022] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaLuJLTHSOG_yf2PpqF7PAAAAcU"]
[Sat Feb 28 21:31:16.930028 2026] [:error] [pid 39183:tid 39202] [client 52.169.148.186:13695] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLuJBCf4HvhVePw3LZSSgAAAAo"]
[Sat Feb 28 21:31:17.440867 2026] [:error] [pid 49763:tid 49774] [client 52.169.148.186:6916] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLuJbTHSOG_yf2PpqF7TAAAAcg"]
[Sat Feb 28 21:31:17.941004 2026] [:error] [pid 39183:tid 39192] [client 52.169.148.186:13024] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLuJRCf4HvhVePw3LZSTAAAAAA"]
[Sat Feb 28 21:31:18.453296 2026] [:error] [pid 39183:tid 39199] [client 52.169.148.186:8346] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aaLuJhCf4HvhVePw3LZSUAAAAAc"]
[Sat Feb 28 21:31:18.962198 2026] [:error] [pid 52460:tid 52469] [client 52.169.148.186:2613] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-setting.php"] [unique_id "aaLuJrLWOogAgHGh62SR4gAAAYY"]
[Sat Feb 28 21:31:19.486496 2026] [:error] [pid 52460:tid 52464] [client 52.169.148.186:3875] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-setting.php"] [unique_id "aaLuJ7LWOogAgHGh62SR7gAAAYE"]
[Sat Feb 28 21:31:19.997613 2026] [:error] [pid 49763:tid 49779] [client 52.169.148.186:13344] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-setting.php"] [unique_id "aaLuJ7THSOG_yf2PpqF7YAAAAc0"]
[Sat Feb 28 21:31:20.504493 2026] [:error] [pid 39185:tid 39265] [client 52.169.148.186:13365] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-setting.php"] [unique_id "aaLuKBVE-FfM89u7BQalPgAAAJM"]
[Sat Feb 28 21:31:21.009834 2026] [:error] [pid 39185:tid 39264] [client 52.169.148.186:3854] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaLuKRVE-FfM89u7BQalQQAAAJI"]
[Sat Feb 28 21:31:21.512334 2026] [:error] [pid 39185:tid 39251] [client 52.169.148.186:13318] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaLuKRVE-FfM89u7BQalQgAAAIU"]
[Sat Feb 28 21:31:22.030541 2026] [:error] [pid 52460:tid 52476] [client 52.169.148.186:13014] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaLuKrLWOogAgHGh62SSAQAAAY0"]
[Sat Feb 28 21:31:22.539885 2026] [:error] [pid 11791:tid 11797] [client 52.169.148.186:19273] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaLuKmuX5e1Q32gqxH3J2AAAAQQ"]
[Sat Feb 28 21:31:23.043814 2026] [:error] [pid 52460:tid 52478] [client 52.169.148.186:5211] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaLuK7LWOogAgHGh62SSBgAAAY8"]
[Sat Feb 28 21:31:23.546706 2026] [:error] [pid 52460:tid 52481] [client 52.169.148.186:9897] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaLuK7LWOogAgHGh62SSDQAAAZI"]
[Sat Feb 28 21:31:24.056235 2026] [:error] [pid 52460:tid 52467] [client 52.169.148.186:6043] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaLuLLLWOogAgHGh62SSFgAAAYQ"]
[Sat Feb 28 21:31:24.561227 2026] [:error] [pid 52460:tid 52469] [client 52.169.148.186:19312] [client 52.169.148.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaLuLLLWOogAgHGh62SSHgAAAYY"]
[Sat Feb 28 22:18:09.634968 2026] [:error] [pid 52460:tid 52468] [client 20.151.205.221:13451] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaL5IbLWOogAgHGh62S0rAAAAYU"]
[Sat Feb 28 22:18:10.467480 2026] [:error] [pid 49763:tid 49777] [client 20.151.205.221:13359] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaL5IrTHSOG_yf2PpqG95AAAAcs"]
[Sat Feb 28 22:18:11.299250 2026] [:error] [pid 39183:tid 39207] [client 20.151.205.221:13367] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaL5IxCf4HvhVePw3LaCNgAAAA8"]
[Sat Feb 28 22:18:12.139302 2026] [:error] [pid 52460:tid 52467] [client 20.151.205.221:13315] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaL5JLLWOogAgHGh62S0sgAAAYQ"]
[Sat Feb 28 22:28:27.042868 2026] [:error] [pid 49763:tid 49778] [client 40.85.218.222:22762] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaL7i7THSOG_yf2PpqHPJgAAAcw"]
[Sat Feb 28 22:28:27.890546 2026] [:error] [pid 49763:tid 49770] [client 40.85.218.222:22743] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaL7i7THSOG_yf2PpqHPMAAAAcQ"]
[Sat Feb 28 22:28:28.741903 2026] [:error] [pid 52460:tid 52477] [client 40.85.218.222:23487] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaL7jLLWOogAgHGh62S9BQAAAY4"]
[Sat Feb 28 22:28:29.577677 2026] [:error] [pid 52460:tid 52465] [client 40.85.218.222:22767] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaL7jbLWOogAgHGh62S9CwAAAYI"]
[Sat Feb 28 23:20:32.908126 2026] [:error] [pid 52460:tid 52476] [client 89.187.187.69:39878] [client 89.187.187.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.187.187.69, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMHwLLWOogAgHGh62TikQAAAY0"]
[Sat Feb 28 23:20:40.510652 2026] [:error] [pid 52460:tid 52484] [client 89.187.187.69:39878] [client 89.187.187.69] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaMHyLLWOogAgHGh62TiogAAAZU"]
[Sat Feb 28 23:20:43.400961 2026] [:error] [pid 52460:tid 52465] [client 89.187.187.69:39878] [client 89.187.187.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.187.187.69, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMHy7LWOogAgHGh62TirAAAAYI"]
[Sat Feb 28 23:27:30.430360 2026] [:error] [pid 39183:tid 39198] [client 62.60.130.210:62831] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaMJYhCf4HvhVePw3LblvgAAAAY"], referer: https://www.reddit.com/
[Sat Feb 28 23:27:37.244860 2026] [:error] [pid 49763:tid 49783] [client 62.60.130.210:65370] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaMJabTHSOG_yf2PpqEOLwAAAdE"], referer: https://twitter.com/
[Sun Mar 01 00:20:05.320050 2026] [:error] [pid 30797:tid 30884] [client 52.169.119.118:5885] [client 52.169.119.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaMVtfQmcmSQL-3rvLD19gAAAE0"]
[Sun Mar 01 00:20:58.211015 2026] [:error] [pid 30797:tid 30872] [client 52.169.119.118:2092] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaMV6vQmcmSQL-3rvLD2igAAAEE"]
[Sun Mar 01 00:20:58.709173 2026] [:error] [pid 30797:tid 30891] [client 52.169.119.118:15465] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaMV6vQmcmSQL-3rvLD2iwAAAFQ"]
[Sun Mar 01 00:20:59.208273 2026] [:error] [pid 30798:tid 30907] [client 52.169.119.118:5988] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaMV68BkD73gO8wTonY3IQAAAIg"]
[Sun Mar 01 00:20:59.705323 2026] [:error] [pid 30795:tid 30827] [client 52.169.119.118:9142] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaMV62uI44IL94Zgti-g4AAAABM"]
[Sun Mar 01 00:21:00.209283 2026] [:error] [pid 30797:tid 30879] [client 52.169.119.118:17307] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaMV7PQmcmSQL-3rvLD2lAAAAEg"]
[Sun Mar 01 00:21:00.721493 2026] [:error] [pid 30795:tid 30824] [client 52.169.119.118:12369] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaMV7GuI44IL94Zgti-g6gAAABA"]
[Sun Mar 01 00:21:01.235680 2026] [:error] [pid 31190:tid 31214] [client 52.169.119.118:17116] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaMV7RfvwGOholYpM1E3bwAAAMg"]
[Sun Mar 01 00:21:01.734134 2026] [:error] [pid 31190:tid 31208] [client 52.169.119.118:14487] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaMV7RfvwGOholYpM1E3cwAAAMI"]
[Sun Mar 01 00:21:02.234155 2026] [:error] [pid 30795:tid 30829] [client 52.169.119.118:2014] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaMV7muI44IL94Zgti-g9gAAABU"]
[Sun Mar 01 00:21:02.734522 2026] [:error] [pid 30795:tid 30825] [client 52.169.119.118:8736] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaMV7muI44IL94Zgti-g-AAAABE"]
[Sun Mar 01 00:21:03.250264 2026] [:error] [pid 31190:tid 31227] [client 52.169.119.118:8751] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaMV7xfvwGOholYpM1E3hgAAANU"]
[Sun Mar 01 00:21:03.751944 2026] [:error] [pid 30795:tid 30821] [client 52.169.119.118:13495] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaMV72uI44IL94Zgti-hAQAAAA0"]
[Sun Mar 01 00:21:04.253612 2026] [:error] [pid 30795:tid 30824] [client 52.169.119.118:16715] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaMV8GuI44IL94Zgti-hBwAAABA"]
[Sun Mar 01 00:21:04.762218 2026] [:error] [pid 31190:tid 31215] [client 52.169.119.118:15211] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaMV8BfvwGOholYpM1E3jgAAAMk"]
[Sun Mar 01 00:21:05.270186 2026] [:error] [pid 30795:tid 30819] [client 52.169.119.118:2006] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaMV8WuI44IL94Zgti-hDQAAAAs"]
[Sun Mar 01 00:21:05.768622 2026] [:error] [pid 30797:tid 30880] [client 52.169.119.118:2041] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaMV8fQmcmSQL-3rvLD2oAAAAEk"]
[Sun Mar 01 00:21:06.271683 2026] [:error] [pid 31190:tid 31213] [client 52.169.119.118:12362] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaMV8hfvwGOholYpM1E3nwAAAMc"]
[Sun Mar 01 00:21:06.769876 2026] [:error] [pid 30795:tid 30816] [client 52.169.119.118:13465] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaMV8muI44IL94Zgti-hHAAAAAg"]
[Sun Mar 01 00:21:07.271747 2026] [:error] [pid 30795:tid 30832] [client 52.169.119.118:12394] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaMV82uI44IL94Zgti-hIAAAABg"]
[Sun Mar 01 00:21:07.782675 2026] [:error] [pid 30798:tid 30912] [client 52.169.119.118:2440] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaMV88BkD73gO8wTonY3NQAAAI0"]
[Sun Mar 01 00:55:46.446209 2026] [:error] [pid 11920:tid 11939] [client 45.86.200.223:38009] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaMeEizLNJUKxvBorrBy7gAAAY8"]
[Sun Mar 01 00:55:52.937932 2026] [:error] [pid 11920:tid 11946] [client 185.82.72.179:31435] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaMeGCzLNJUKxvBorrBzLgAAAZY"]
[Sun Mar 01 00:56:04.370509 2026] [:error] [pid 30798:tid 30922] [client 45.86.200.220:55297] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaMeJMBkD73gO8wTonZLPQAAAJY"]
[Sun Mar 01 00:56:14.096071 2026] [:error] [pid 11920:tid 11948] [client 185.82.72.111:61119] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaMeLizLNJUKxvBorrBzzAAAAZg"]
[Sun Mar 01 00:56:23.708976 2026] [:error] [pid 30798:tid 30915] [client 45.86.200.217:58965] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaMeN8BkD73gO8wTonZLyAAAAJA"]
[Sun Mar 01 00:56:26.735339 2026] [:error] [pid 11920:tid 11946] [client 185.82.72.107:64993] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaMeOizLNJUKxvBorrB0JwAAAZY"]
[Sun Mar 01 00:56:27.402607 2026] [:error] [pid 30798:tid 30917] [client 45.86.200.216:31237] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaMeO8BkD73gO8wTonZL2QAAAJI"]
[Sun Mar 01 00:56:27.970083 2026] [:error] [pid 31190:tid 31208] [client 45.86.200.235:64527] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaMeOxfvwGOholYpM1FeUAAAAMI"]
[Sun Mar 01 00:56:28.629195 2026] [:error] [pid 30798:tid 30918] [client 45.86.200.214:62591] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaMePMBkD73gO8wTonZL5wAAAJM"]
[Sun Mar 01 00:56:29.725261 2026] [:error] [pid 30798:tid 30900] [client 45.86.200.242:60433] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaMePcBkD73gO8wTonZL8wAAAIE"]
[Sun Mar 01 00:56:32.648037 2026] [:error] [pid 31190:tid 31218] [client 45.86.200.238:26271] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaMeQBfvwGOholYpM1FeZgAAAMw"]
[Sun Mar 01 00:56:36.154580 2026] [:error] [pid 11920:tid 11932] [client 45.86.200.244:49865] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aaMeRCzLNJUKxvBorrB0UQAAAYg"]
[Sun Mar 01 00:56:41.384160 2026] [:error] [pid 31190:tid 31218] [client 45.86.200.243:50019] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaMeSRfvwGOholYpM1FeogAAAMw"]
[Sun Mar 01 00:56:44.486209 2026] [:error] [pid 30798:tid 30918] [client 45.86.200.241:62399] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaMeTMBkD73gO8wTonZMKQAAAJM"]
[Sun Mar 01 00:56:47.632607 2026] [:error] [pid 30798:tid 30914] [client 185.82.72.10:52893] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaMeT8BkD73gO8wTonZMQAAAAI8"]
[Sun Mar 01 00:57:00.449506 2026] [:error] [pid 30797:tid 30883] [client 45.86.200.239:28733] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaMeXPQmcmSQL-3rvLABYwAAAEw"]
[Sun Mar 01 00:57:03.250797 2026] [:error] [pid 31190:tid 31227] [client 45.86.200.226:57683] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaMeXxfvwGOholYpM1Fe8wAAANU"]
[Sun Mar 01 00:57:06.196283 2026] [:error] [pid 31190:tid 31229] [client 45.86.200.236:54757] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaMeYhfvwGOholYpM1FfAAAAANc"]
[Sun Mar 01 00:57:09.065428 2026] [:error] [pid 11920:tid 11936] [client 45.86.200.216:49819] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaMeZSzLNJUKxvBorrB1PwAAAYw"]
[Sun Mar 01 00:57:18.727406 2026] [:error] [pid 11920:tid 11943] [client 185.82.72.206:40885] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaMebizLNJUKxvBorrB1iwAAAZM"]
[Sun Mar 01 00:57:22.658874 2026] [:error] [pid 11920:tid 11926] [client 185.82.72.102:34629] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaMecizLNJUKxvBorrB13AAAAYI"]
[Sun Mar 01 00:57:25.502331 2026] [:error] [pid 11920:tid 11925] [client 45.86.200.248:36435] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaMedSzLNJUKxvBorrB2AQAAAYE"]
[Sun Mar 01 00:57:26.092001 2026] [:error] [pid 31190:tid 31211] [client 45.86.200.249:38149] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaMedhfvwGOholYpM1FfOQAAAMU"]
[Sun Mar 01 00:57:26.892212 2026] [:error] [pid 11920:tid 11946] [client 45.86.200.232:38963] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaMedizLNJUKxvBorrB2DQAAAZY"]
[Sun Mar 01 00:57:33.977870 2026] [:error] [pid 30798:tid 30918] [client 185.82.72.111:38453] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaMefcBkD73gO8wTonZNeAAAAJM"]
[Sun Mar 01 00:57:34.639837 2026] [:error] [pid 53600:tid 53610] [client 45.86.200.232:41853] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaMefg2UMRAYWtDB23TNKQAAAQc"]
[Sun Mar 01 00:57:35.288677 2026] [:error] [pid 53600:tid 53608] [client 45.86.200.237:35707] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMefw2UMRAYWtDB23TNLAAAAQU"]
[Sun Mar 01 00:57:52.133345 2026] [:error] [pid 11920:tid 11944] [client 45.86.200.233:63577] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaMekCzLNJUKxvBorrB2wgAAAZQ"]
[Sun Mar 01 00:57:57.409630 2026] [:error] [pid 11920:tid 11945] [client 45.86.200.245:37919] [client 45.86.200.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.245, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaMelSzLNJUKxvBorrB26AAAAZU"]
[Sun Mar 01 00:58:29.048950 2026] [:error] [pid 11920:tid 11940] [client 45.86.200.245:37919] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaMetSzLNJUKxvBorrB3igAAAZA"]
[Sun Mar 01 00:58:32.026491 2026] [:error] [pid 53600:tid 53609] [client 20.63.83.162:10006] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaMeuA2UMRAYWtDB23TNzAAAAQY"]
[Sun Mar 01 00:58:32.850013 2026] [:error] [pid 7644:tid 7664] [client 20.63.83.162:10026] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaMeuPqeDUGmVAHX7VCQQwAAAVI"]
[Sun Mar 01 00:58:33.686926 2026] [:error] [pid 11920:tid 11935] [client 20.63.83.162:9538] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaMeuSzLNJUKxvBorrB3ngAAAYs"]
[Sun Mar 01 00:58:34.517911 2026] [:error] [pid 30795:tid 30823] [client 20.63.83.162:9545] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aaMeumuI44IL94Zgti-4MAAAAA8"]
[Sun Mar 01 00:58:36.246410 2026] [:error] [pid 30798:tid 30906] [client 45.86.200.230:60137] [client 45.86.200.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.230, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaMevMBkD73gO8wTonZO1gAAAIc"]
[Sun Mar 01 00:58:40.452166 2026] [:error] [pid 30798:tid 30913] [client 45.86.200.230:60137] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaMewMBkD73gO8wTonZO6QAAAI4"]
[Sun Mar 01 00:58:56.432963 2026] [:error] [pid 30798:tid 30912] [client 45.86.200.238:47683] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaMe0MBkD73gO8wTonZPLwAAAI0"]
[Sun Mar 01 00:59:10.504023 2026] [:error] [pid 31190:tid 31228] [client 185.82.72.206:43889] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaMe3hfvwGOholYpM1FhCQAAANY"]
[Sun Mar 01 00:59:17.100718 2026] [:error] [pid 11920:tid 11941] [client 45.86.200.250:22203] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaMe5SzLNJUKxvBorrB4kQAAAZE"]
[Sun Mar 01 00:59:23.323203 2026] [:error] [pid 30798:tid 30902] [client 45.86.200.245:35537] [client 45.86.200.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.245, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaMe68BkD73gO8wTonZPvwAAAIM"]
[Sun Mar 01 00:59:25.037543 2026] [:error] [pid 30798:tid 30918] [client 45.86.200.245:35537] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaMe7cBkD73gO8wTonZPwwAAAJM"]
[Sun Mar 01 00:59:57.098499 2026] [:error] [pid 7644:tid 7654] [client 45.86.200.233:57613] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaMfDfqeDUGmVAHX7VCQvgAAAUg"]
[Sun Mar 01 01:00:03.917300 2026] [:error] [pid 53600:tid 53626] [client 185.82.72.206:24135] [client 185.82.72.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.206, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaMfEw2UMRAYWtDB23TOaAAAARc"]
[Sun Mar 01 01:00:12.457088 2026] [:error] [pid 53600:tid 53614] [client 185.82.72.206:24135] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaMfHA2UMRAYWtDB23TOhAAAAQs"]
[Sun Mar 01 01:00:16.040032 2026] [:error] [pid 53600:tid 53626] [client 45.86.200.226:39705] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaMfIA2UMRAYWtDB23TOkwAAARc"]
[Sun Mar 01 01:00:21.649951 2026] [:error] [pid 30797:tid 30873] [client 45.86.200.248:42925] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaMfJfQmcmSQL-3rvLABxwAAAEI"]
[Sun Mar 01 01:00:31.229836 2026] [:error] [pid 11920:tid 11932] [client 45.86.200.242:46681] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaMfLyzLNJUKxvBorrB6UgAAAYg"]
[Sun Mar 01 01:00:31.873961 2026] [:error] [pid 31190:tid 31221] [client 185.82.72.9:50785] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaMfLxfvwGOholYpM1FiUwAAAM8"]
[Sun Mar 01 01:00:40.825636 2026] [:error] [pid 30798:tid 30924] [client 185.82.72.109:37705] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaMfOMBkD73gO8wTonZRMQAAAJg"]
[Sun Mar 01 01:00:41.745320 2026] [:error] [pid 11920:tid 11931] [client 45.86.200.216:54425] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMfOSzLNJUKxvBorrB6lwAAAYc"]
[Sun Mar 01 01:00:49.883463 2026] [:error] [pid 11920:tid 11925] [client 45.86.200.218:32065] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaMfQSzLNJUKxvBorrB60gAAAYE"]
[Sun Mar 01 01:00:58.952159 2026] [:error] [pid 31190:tid 31215] [client 45.86.200.243:61167] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaMfShfvwGOholYpM1FixAAAAMk"]
[Sun Mar 01 01:01:04.640768 2026] [:error] [pid 30798:tid 30923] [client 45.86.200.239:27839] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaMfUMBkD73gO8wTonZRxQAAAJc"]
[Sun Mar 01 01:01:13.425131 2026] [:error] [pid 7644:tid 7670] [client 45.86.200.226:34551] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaMfWfqeDUGmVAHX7VCRIwAAAVg"]
[Sun Mar 01 01:01:30.609658 2026] [:error] [pid 31190:tid 31226] [client 45.86.200.222:63835] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaMfahfvwGOholYpM1FjlwAAANQ"]
[Sun Mar 01 01:01:31.327018 2026] [:error] [pid 31190:tid 31217] [client 45.86.200.236:41445] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaMfaxfvwGOholYpM1FjnwAAAMs"]
[Sun Mar 01 01:01:32.112474 2026] [:error] [pid 11920:tid 11933] [client 45.86.200.232:31717] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaMfbCzLNJUKxvBorrB7vgAAAYk"]
[Sun Mar 01 01:01:32.779029 2026] [:error] [pid 7644:tid 7665] [client 185.82.72.111:52123] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaMfbPqeDUGmVAHX7VCRRQAAAVM"]
[Sun Mar 01 01:01:35.885065 2026] [:error] [pid 7644:tid 7655] [client 45.86.200.229:31813] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaMfb_qeDUGmVAHX7VCRSwAAAUk"]
[Sun Mar 01 01:01:36.539234 2026] [:error] [pid 30798:tid 30914] [client 45.86.200.214:58803] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaMfcMBkD73gO8wTonZSUAAAAI8"]
[Sun Mar 01 01:01:41.972406 2026] [:error] [pid 31190:tid 31222] [client 45.86.200.251:23681] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaMfdRfvwGOholYpM1Fj0AAAANA"]
[Sun Mar 01 01:01:42.653948 2026] [:error] [pid 53600:tid 53622] [client 45.86.200.240:62563] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaMfdg2UMRAYWtDB23TPaAAAARM"]
[Sun Mar 01 01:01:43.282878 2026] [:error] [pid 30797:tid 30879] [client 185.82.72.104:55377] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaMfd_QmcmSQL-3rvLAB5AAAAEg"]
[Sun Mar 01 01:01:44.008041 2026] [:error] [pid 11920:tid 11940] [client 45.86.200.215:20781] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaMfeCzLNJUKxvBorrB7-wAAAZA"]
[Sun Mar 01 01:01:45.106064 2026] [:error] [pid 11920:tid 11930] [client 45.86.200.232:63605] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaMfeSzLNJUKxvBorrB8BgAAAYY"]
[Sun Mar 01 01:01:46.823334 2026] [:error] [pid 30798:tid 30917] [client 45.86.200.218:52347] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaMfesBkD73gO8wTonZSlAAAAJI"]
[Sun Mar 01 01:01:54.657444 2026] [:error] [pid 30798:tid 30921] [client 45.86.200.233:65437] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaMfgsBkD73gO8wTonZSugAAAJU"]
[Sun Mar 01 01:02:08.497343 2026] [:error] [pid 31190:tid 31227] [client 45.86.200.225:29813] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaMfkBfvwGOholYpM1FkPwAAANU"]
[Sun Mar 01 01:02:12.354907 2026] [:error] [pid 11920:tid 11928] [client 45.86.200.218:43785] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaMflCzLNJUKxvBorrB8lAAAAYQ"]
[Sun Mar 01 01:02:13.129116 2026] [:error] [pid 11920:tid 11930] [client 45.86.200.233:30789] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaMflSzLNJUKxvBorrB8lwAAAYY"]
[Sun Mar 01 01:02:19.797835 2026] [:error] [pid 30798:tid 30901] [client 185.82.72.109:44445] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaMfm8BkD73gO8wTonZTUQAAAII"]
[Sun Mar 01 01:02:26.848638 2026] [proxy_fcgi:error] [pid 11920:tid 11931] [client 45.86.200.240:29737] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:02:27.505855 2026] [proxy_fcgi:error] [pid 11920:tid 11946] [client 45.86.200.240:29737] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:02:27.908009 2026] [proxy_fcgi:error] [pid 11920:tid 11926] [client 45.86.200.240:29737] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:02:29.985022 2026] [:error] [pid 11920:tid 11944] [client 45.86.200.240:29737] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaMfpSzLNJUKxvBorrB9DgAAAZQ"]
[Sun Mar 01 01:02:30.736496 2026] [:error] [pid 30798:tid 30908] [client 45.86.200.214:24999] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaMfpsBkD73gO8wTonZTegAAAIk"]
[Sun Mar 01 01:02:31.822292 2026] [:error] [pid 30798:tid 30902] [client 45.86.200.225:53217] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaMfp8BkD73gO8wTonZTiAAAAIM"]
[Sun Mar 01 01:02:32.556798 2026] [:error] [pid 30798:tid 30924] [client 45.86.200.219:60275] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaMfqMBkD73gO8wTonZTkgAAAJg"]
[Sun Mar 01 01:02:33.221081 2026] [:error] [pid 30795:tid 30826] [client 185.82.72.182:29267] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaMfqWuI44IL94Zgti-5QgAAABI"]
[Sun Mar 01 01:02:33.869672 2026] [:error] [pid 53600:tid 53616] [client 45.86.200.246:30435] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaMfqQ2UMRAYWtDB23TP-AAAAQ0"]
[Sun Mar 01 01:02:36.365424 2026] [:error] [pid 31190:tid 31215] [client 45.86.200.240:56077] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaMfrBfvwGOholYpM1FklwAAAMk"]
[Sun Mar 01 01:02:37.011661 2026] [:error] [pid 11920:tid 11938] [client 185.82.72.108:22089] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaMfrSzLNJUKxvBorrB9IQAAAY4"]
[Sun Mar 01 01:02:37.822109 2026] [:error] [pid 11920:tid 11944] [client 185.82.72.9:20167] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaMfrSzLNJUKxvBorrB9JQAAAZQ"]
[Sun Mar 01 01:02:38.413902 2026] [:error] [pid 31190:tid 31209] [client 45.86.200.238:34275] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaMfrhfvwGOholYpM1FknwAAAMM"]
[Sun Mar 01 01:02:41.113548 2026] [:error] [pid 11920:tid 11941] [client 45.86.200.224:28709] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaMfsSzLNJUKxvBorrB9SAAAAZE"]
[Sun Mar 01 01:02:42.161724 2026] [:error] [pid 30797:tid 30893] [client 45.86.200.230:51547] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaMfsvQmcmSQL-3rvLAB-wAAAFY"]
[Sun Mar 01 01:02:48.530726 2026] [:error] [pid 31190:tid 31214] [client 45.86.200.222:63305] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaMfuBfvwGOholYpM1FkvwAAAMg"]
[Sun Mar 01 01:02:51.595405 2026] [:error] [pid 30798:tid 30924] [client 185.82.72.179:48213] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaMfu8BkD73gO8wTonZT9AAAAJg"]
[Sun Mar 01 01:02:59.149378 2026] [:error] [pid 30798:tid 30911] [client 185.82.72.206:53305] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaMfw8BkD73gO8wTonZUHAAAAIw"]
[Sun Mar 01 01:03:08.306934 2026] [:error] [pid 30795:tid 30826] [client 45.86.200.239:61181] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaMfzGuI44IL94Zgti-5ZAAAABI"]
[Sun Mar 01 01:03:11.391604 2026] [:error] [pid 31190:tid 31216] [client 45.86.200.235:31539] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaMfzxfvwGOholYpM1FlJgAAAMo"]
[Sun Mar 01 01:03:48.330001 2026] [:error] [pid 30797:tid 30885] [client 45.86.200.236:27117] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaMf9PQmcmSQL-3rvLACSwAAAE4"]
[Sun Mar 01 01:03:49.254769 2026] [:error] [pid 31190:tid 31223] [client 45.86.200.220:55743] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaMf9RfvwGOholYpM1FlpgAAANE"]
[Sun Mar 01 01:03:49.900086 2026] [:error] [pid 53600:tid 53605] [client 45.86.200.238:28971] [client 45.86.200.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.238, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaMf9Q2UMRAYWtDB23TQoAAAAQI"]
[Sun Mar 01 01:03:53.480612 2026] [:error] [pid 53600:tid 53616] [client 45.86.200.238:28971] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaMf-Q2UMRAYWtDB23TQqQAAAQ0"]
[Sun Mar 01 01:03:57.803732 2026] [:error] [pid 53600:tid 53627] [client 185.82.72.182:31819] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaMf_Q2UMRAYWtDB23TQwgAAARg"]
[Sun Mar 01 01:03:58.538636 2026] [:error] [pid 31190:tid 31222] [client 45.86.200.219:58743] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaMf_hfvwGOholYpM1Fl0gAAANA"]
[Sun Mar 01 01:04:05.668089 2026] [:error] [pid 11920:tid 11927] [client 45.86.200.241:36019] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaMgBSzLNJUKxvBorrB_HAAAAYM"]
[Sun Mar 01 01:04:06.445810 2026] [:error] [pid 11920:tid 11946] [client 185.82.72.103:38123] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aaMgBizLNJUKxvBorrB_IgAAAZY"]
[Sun Mar 01 01:04:18.020910 2026] [:error] [pid 11920:tid 11934] [client 45.86.200.241:32811] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaMgEizLNJUKxvBorrB_dAAAAYo"]
[Sun Mar 01 01:04:21.287517 2026] [proxy_fcgi:error] [pid 31190:tid 31226] [client 45.86.200.232:48983] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:04:23.243087 2026] [:error] [pid 31190:tid 31227] [client 45.86.200.232:48983] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaMgFxfvwGOholYpM1FmEQAAANU"]
[Sun Mar 01 01:04:23.888366 2026] [:error] [pid 53600:tid 53604] [client 185.82.72.104:30623] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaMgFw2UMRAYWtDB23TREAAAAQE"]
[Sun Mar 01 01:04:27.035285 2026] [:error] [pid 11920:tid 11948] [client 45.86.200.230:38159] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaMgGyzLNJUKxvBorrB_tAAAAZg"]
[Sun Mar 01 01:04:27.924938 2026] [:error] [pid 11920:tid 11926] [client 185.82.72.9:63625] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaMgGyzLNJUKxvBorrB_vAAAAYI"]
[Sun Mar 01 01:04:41.999219 2026] [:error] [pid 30798:tid 30909] [client 45.86.200.230:64305] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaMgKcBkD73gO8wTonZVsAAAAIo"]
[Sun Mar 01 01:04:42.724803 2026] [:error] [pid 30798:tid 30900] [client 45.86.200.239:29521] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaMgKsBkD73gO8wTonZVtQAAAIE"]
[Sun Mar 01 01:04:50.531866 2026] [:error] [pid 11920:tid 11937] [client 45.86.200.226:26289] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaMgMizLNJUKxvBorrCAKQAAAY0"]
[Sun Mar 01 01:04:51.625472 2026] [:error] [pid 31190:tid 31209] [client 45.86.200.243:45151] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaMgMxfvwGOholYpM1FmfgAAAMM"]
[Sun Mar 01 01:04:52.250268 2026] [:error] [pid 30798:tid 30922] [client 185.82.72.109:63281] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaMgNMBkD73gO8wTonZV2gAAAJY"]
[Sun Mar 01 01:05:01.067227 2026] [:error] [pid 31190:tid 31222] [client 45.86.200.248:23529] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaMgPRfvwGOholYpM1FmtwAAANA"]
[Sun Mar 01 01:05:03.234479 2026] [:error] [pid 30797:tid 30875] [client 185.82.72.106:39159] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaMgP_QmcmSQL-3rvLACdQAAAEQ"]
[Sun Mar 01 01:05:14.162716 2026] [:error] [pid 30798:tid 30920] [client 45.86.200.231:27049] [client 45.86.200.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.231, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/js/wp-login.php"] [unique_id "aaMgSsBkD73gO8wTonZWGQAAAJQ"]
[Sun Mar 01 01:05:26.118218 2026] [:error] [pid 30798:tid 30902] [client 45.86.200.231:27049] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaMgVsBkD73gO8wTonZWkwAAAIM"]
[Sun Mar 01 01:05:27.303590 2026] [:error] [pid 11920:tid 11942] [client 45.86.200.233:41595] [client 45.86.200.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.233, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaMgVyzLNJUKxvBorrCA6QAAAZI"]
[Sun Mar 01 01:05:44.488472 2026] [proxy_fcgi:error] [pid 11920:tid 11931] [client 45.86.200.233:41595] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:06:08.071340 2026] [:error] [pid 11920:tid 11939] [client 45.86.200.233:41595] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaMggCzLNJUKxvBorrCCPgAAAY8"]
[Sun Mar 01 01:06:14.517297 2026] [:error] [pid 30795:tid 30828] [client 185.82.72.9:48625] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaMghmuI44IL94Zgti-6VQAAABQ"]
[Sun Mar 01 01:06:19.047452 2026] [:error] [pid 30798:tid 30912] [client 45.86.200.216:55573] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaMgi8BkD73gO8wTonZXXwAAAI0"]
[Sun Mar 01 01:06:38.020044 2026] [:error] [pid 11920:tid 11926] [client 185.82.72.10:61529] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaMgnizLNJUKxvBorrCDGwAAAYI"]
[Sun Mar 01 01:06:42.872852 2026] [:error] [pid 11920:tid 11935] [client 45.86.200.238:22913] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaMgoizLNJUKxvBorrCDPQAAAYs"]
[Sun Mar 01 01:06:45.442250 2026] [:error] [pid 11920:tid 11931] [client 45.86.200.229:28921] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaMgpSzLNJUKxvBorrCDTwAAAYc"]
[Sun Mar 01 01:06:51.735506 2026] [proxy_fcgi:error] [pid 11920:tid 11943] [client 185.82.72.103:21341] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:06:52.143038 2026] [proxy_fcgi:error] [pid 11920:tid 11934] [client 185.82.72.103:21341] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:06:52.463573 2026] [:error] [pid 11920:tid 11938] [client 185.82.72.103:21341] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaMgrCzLNJUKxvBorrCDhAAAAY4"]
[Sun Mar 01 01:06:53.228344 2026] [:error] [pid 30795:tid 30821] [client 185.82.72.103:46229] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaMgrWuI44IL94Zgti-6agAAAA0"]
[Sun Mar 01 01:07:03.366029 2026] [:error] [pid 31190:tid 31215] [client 185.82.72.9:53793] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaMgtxfvwGOholYpM1FoUAAAAMk"]
[Sun Mar 01 01:07:05.479848 2026] [:error] [pid 11920:tid 11932] [client 45.86.200.241:25223] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aaMguSzLNJUKxvBorrCD2gAAAYg"]
[Sun Mar 01 01:07:11.615858 2026] [:error] [pid 30798:tid 30914] [client 45.86.200.236:20757] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaMgv8BkD73gO8wTonZYbwAAAI8"]
[Sun Mar 01 01:07:23.175098 2026] [:error] [pid 11920:tid 11936] [client 45.86.200.215:22919] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaMgyyzLNJUKxvBorrCEOgAAAYw"]
[Sun Mar 01 01:07:23.791582 2026] [proxy_fcgi:error] [pid 31190:tid 31208] [client 45.86.200.234:51365] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:07:24.763732 2026] [:error] [pid 31190:tid 31209] [client 45.86.200.234:51365] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaMgzBfvwGOholYpM1FotgAAAMM"]
[Sun Mar 01 01:07:31.834456 2026] [proxy_fcgi:error] [pid 30798:tid 30908] [client 45.86.200.242:41167] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:07:33.709532 2026] [:error] [pid 30798:tid 30912] [client 45.86.200.242:41167] [client 45.86.200.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.242, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaMg1cBkD73gO8wTonZZJAAAAI0"]
[Sun Mar 01 01:07:41.884407 2026] [:error] [pid 30798:tid 30907] [client 45.86.200.242:41167] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaMg3cBkD73gO8wTonZZdgAAAIg"]
[Sun Mar 01 01:07:44.586493 2026] [:error] [pid 11920:tid 11939] [client 45.86.200.218:59503] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaMg4CzLNJUKxvBorrCEzAAAAY8"]
[Sun Mar 01 01:07:50.538499 2026] [:error] [pid 7644:tid 7650] [client 45.86.200.250:44713] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaMg5vqeDUGmVAHX7VCTKwAAAUQ"]
[Sun Mar 01 01:07:59.411161 2026] [:error] [pid 31190:tid 31225] [client 45.86.200.243:38431] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaMg7xfvwGOholYpM1FpOgAAANM"]
[Sun Mar 01 01:08:02.351490 2026] [:error] [pid 30798:tid 30908] [client 185.82.72.206:25315] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaMg8sBkD73gO8wTonZZywAAAIk"]
[Sun Mar 01 01:08:08.961600 2026] [:error] [pid 30797:tid 30887] [client 45.86.200.232:39995] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaMg-PQmcmSQL-3rvLADagAAAFA"]
[Sun Mar 01 01:08:14.434504 2026] [proxy_fcgi:error] [pid 53600:tid 53619] [client 45.86.200.236:33029] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:08:14.727560 2026] [:error] [pid 53600:tid 53617] [client 45.86.200.236:33029] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaMg_g2UMRAYWtDB23TTQAAAAQ4"]
[Sun Mar 01 01:08:15.613802 2026] [:error] [pid 31190:tid 31216] [client 45.86.200.248:60023] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaMg_xfvwGOholYpM1FpcwAAAMo"]
[Sun Mar 01 01:08:16.232947 2026] [:error] [pid 31190:tid 31228] [client 45.86.200.231:53957] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaMhABfvwGOholYpM1FpeAAAANY"]
[Sun Mar 01 01:08:16.872307 2026] [:error] [pid 11920:tid 11946] [client 45.86.200.244:62333] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaMhACzLNJUKxvBorrCF0wAAAZY"]
[Sun Mar 01 01:08:17.473643 2026] [:error] [pid 30798:tid 30916] [client 45.86.200.228:24011] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaMhAcBkD73gO8wTonZaHAAAAJE"]
[Sun Mar 01 01:08:18.114601 2026] [:error] [pid 7644:tid 7649] [client 45.86.200.222:64217] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaMhAvqeDUGmVAHX7VCTawAAAUM"]
[Sun Mar 01 01:08:18.741263 2026] [:error] [pid 11920:tid 11945] [client 45.86.200.239:48255] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaMhAizLNJUKxvBorrCF3AAAAZU"]
[Sun Mar 01 01:08:23.083994 2026] [:error] [pid 53600:tid 53608] [client 45.86.200.216:40187] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaMhBw2UMRAYWtDB23TTTgAAAQU"]
[Sun Mar 01 01:08:23.698932 2026] [:error] [pid 30798:tid 30906] [client 45.86.200.236:26247] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaMhB8BkD73gO8wTonZaUAAAAIc"]
[Sun Mar 01 01:08:24.320611 2026] [:error] [pid 30798:tid 30899] [client 45.86.200.216:36949] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaMhCMBkD73gO8wTonZaVwAAAIA"]
[Sun Mar 01 01:08:27.156184 2026] [:error] [pid 30798:tid 30904] [client 185.82.72.106:41751] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaMhC8BkD73gO8wTonZadQAAAIU"]
[Sun Mar 01 01:08:32.284114 2026] [:error] [pid 11920:tid 11932] [client 45.86.200.242:37447] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaMhECzLNJUKxvBorrCGIQAAAYg"]
[Sun Mar 01 01:08:32.976016 2026] [proxy_fcgi:error] [pid 11920:tid 11939] [client 45.86.200.215:53523] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:08:38.443568 2026] [:error] [pid 11920:tid 11925] [client 45.86.200.215:53523] [client 45.86.200.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.215, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaMhFizLNJUKxvBorrCGUAAAAYE"]
[Sun Mar 01 01:08:45.110602 2026] [:error] [pid 11920:tid 11929] [client 45.86.200.215:53523] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaMhHSzLNJUKxvBorrCGkAAAAYU"]
[Sun Mar 01 01:08:46.166013 2026] [:error] [pid 11920:tid 11932] [client 185.82.72.179:36917] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaMhHizLNJUKxvBorrCGlQAAAYg"]
[Sun Mar 01 01:09:16.602408 2026] [:error] [pid 7644:tid 7660] [client 45.86.200.251:55429] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaMhPPqeDUGmVAHX7VCTzQAAAU4"]
[Sun Mar 01 01:09:17.211386 2026] [:error] [pid 11920:tid 11936] [client 45.86.200.219:37479] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaMhPSzLNJUKxvBorrCHOwAAAYw"]
[Sun Mar 01 01:09:17.891976 2026] [:error] [pid 31190:tid 31229] [client 45.86.200.224:41969] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaMhPRfvwGOholYpM1FqPQAAANc"]
[Sun Mar 01 01:09:30.350813 2026] [:error] [pid 31190:tid 31230] [client 45.86.200.246:62875] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaMhShfvwGOholYpM1FqgwAAANg"]
[Sun Mar 01 01:09:30.941599 2026] [:error] [pid 30798:tid 30922] [client 45.86.200.215:38261] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaMhSsBkD73gO8wTonZbnwAAAJY"]
[Sun Mar 01 01:09:31.557626 2026] [:error] [pid 11920:tid 11930] [client 185.82.72.103:56711] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaMhSyzLNJUKxvBorrCHsgAAAYY"]
[Sun Mar 01 01:09:38.229626 2026] [:error] [pid 31190:tid 31211] [client 185.82.72.179:24473] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaMhUhfvwGOholYpM1FquAAAAMU"]
[Sun Mar 01 01:09:40.969181 2026] [:error] [pid 30797:tid 30874] [client 45.86.200.215:51729] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaMhVPQmcmSQL-3rvLADoQAAAEM"]
[Sun Mar 01 01:09:46.025190 2026] [:error] [pid 11920:tid 11933] [client 45.86.200.232:65399] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaMhWizLNJUKxvBorrCH4QAAAYk"]
[Sun Mar 01 01:10:00.973366 2026] [:error] [pid 30798:tid 30911] [client 185.82.72.104:45113] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaMhaMBkD73gO8wTonZckgAAAIw"]
[Sun Mar 01 01:10:05.695648 2026] [:error] [pid 11920:tid 11934] [client 45.86.200.238:21523] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaMhbSzLNJUKxvBorrCILwAAAYo"]
[Sun Mar 01 01:10:17.724267 2026] [:error] [pid 30798:tid 30907] [client 45.86.200.241:35671] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaMhecBkD73gO8wTonZdIAAAAIg"]
[Sun Mar 01 01:10:23.181252 2026] [:error] [pid 31190:tid 31222] [client 45.86.200.236:52229] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaMhfxfvwGOholYpM1FrXgAAANA"]
[Sun Mar 01 01:10:31.947962 2026] [:error] [pid 11920:tid 11937] [client 45.86.200.224:59511] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaMhhyzLNJUKxvBorrCJFgAAAY0"]
[Sun Mar 01 01:10:41.768993 2026] [:error] [pid 30798:tid 30923] [client 185.82.72.107:31383] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaMhkcBkD73gO8wTonZd8AAAAJc"]
[Sun Mar 01 01:10:46.526694 2026] [:error] [pid 11920:tid 11924] [client 45.86.200.240:59217] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaMhlizLNJUKxvBorrCJggAAAYA"]
[Sun Mar 01 01:10:47.466763 2026] [:error] [pid 30798:tid 30918] [client 45.86.200.223:53313] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaMhl8BkD73gO8wTonZeIgAAAJM"]
[Sun Mar 01 01:10:57.094276 2026] [:error] [pid 11920:tid 11942] [client 45.86.200.246:32125] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaMhoSzLNJUKxvBorrCKEgAAAZI"]
[Sun Mar 01 01:11:07.511974 2026] [:error] [pid 31190:tid 31213] [client 45.86.200.216:37709] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaMhqxfvwGOholYpM1FrvwAAAMc"]
[Sun Mar 01 01:11:16.040766 2026] [:error] [pid 11920:tid 11936] [client 45.86.200.213:27677] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaMhtCzLNJUKxvBorrCLIwAAAYw"]
[Sun Mar 01 01:11:16.643350 2026] [:error] [pid 30798:tid 30909] [client 45.86.200.232:41901] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaMhtMBkD73gO8wTonZerQAAAIo"]
[Sun Mar 01 01:11:21.222269 2026] [:error] [pid 11920:tid 11944] [client 45.86.200.223:30547] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaMhuSzLNJUKxvBorrCLWwAAAZQ"]
[Sun Mar 01 01:11:26.248952 2026] [:error] [pid 30797:tid 30878] [client 45.86.200.222:40009] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaMhvvQmcmSQL-3rvLADxgAAAEc"]
[Sun Mar 01 01:11:26.883277 2026] [:error] [pid 11920:tid 11926] [client 185.82.72.206:45055] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaMhvizLNJUKxvBorrCLngAAAYI"]
[Sun Mar 01 01:11:37.374598 2026] [:error] [pid 11920:tid 11947] [client 185.82.72.206:56019] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaMhySzLNJUKxvBorrCMAwAAAZc"]
[Sun Mar 01 01:11:42.505750 2026] [:error] [pid 31190:tid 31210] [client 45.86.200.224:39063] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaMhzhfvwGOholYpM1FsFQAAAMQ"]
[Sun Mar 01 01:11:43.130878 2026] [:error] [pid 11920:tid 11944] [client 45.86.200.225:42139] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaMhzyzLNJUKxvBorrCMLwAAAZQ"]
[Sun Mar 01 01:11:48.064100 2026] [:error] [pid 31190:tid 31218] [client 45.86.200.217:63915] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaMh1BfvwGOholYpM1FsIAAAAMw"]
[Sun Mar 01 01:11:53.077589 2026] [:error] [pid 30798:tid 30923] [client 185.82.72.10:25697] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaMh2cBkD73gO8wTonZfNQAAAJc"]
[Sun Mar 01 01:12:05.186504 2026] [:error] [pid 11920:tid 11930] [client 45.86.200.246:57595] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaMh5SzLNJUKxvBorrCNKQAAAYY"]
[Sun Mar 01 01:12:08.031772 2026] [:error] [pid 31190:tid 31217] [client 185.82.72.179:57699] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaMh6BfvwGOholYpM1FsVQAAAMs"]
[Sun Mar 01 01:12:12.200849 2026] [:error] [pid 30798:tid 30900] [client 45.86.200.227:45301] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaMh7MBkD73gO8wTonZfZwAAAIE"]
[Sun Mar 01 01:12:14.734209 2026] [:error] [pid 53600:tid 53619] [client 45.86.200.230:61621] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaMh7g2UMRAYWtDB23TUoAAAARA"]
[Sun Mar 01 01:12:17.176750 2026] [:error] [pid 11920:tid 11932] [client 45.86.200.251:41879] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaMh8SzLNJUKxvBorrCNvgAAAYg"]
[Sun Mar 01 01:12:18.202367 2026] [:error] [pid 53600:tid 53623] [client 45.86.200.224:56081] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaMh8g2UMRAYWtDB23TUoQAAARQ"]
[Sun Mar 01 01:12:18.873582 2026] [:error] [pid 31190:tid 31225] [client 185.82.72.111:29725] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaMh8hfvwGOholYpM1FsiQAAANM"]
[Sun Mar 01 01:12:30.587995 2026] [:error] [pid 11920:tid 11935] [client 185.82.72.102:63697] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaMh_izLNJUKxvBorrCOGwAAAYs"]
[Sun Mar 01 01:12:35.849859 2026] [:error] [pid 30797:tid 30889] [client 185.82.72.182:62247] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaMiA_QmcmSQL-3rvLAD8QAAAFI"]
[Sun Mar 01 01:12:42.177690 2026] [:error] [pid 11920:tid 11935] [client 45.86.200.240:22447] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaMiCizLNJUKxvBorrCOZgAAAYs"]
[Sun Mar 01 01:12:45.562113 2026] [:error] [pid 7644:tid 7648] [client 45.86.200.244:27897] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaMiDfqeDUGmVAHX7VCUmQAAAUI"]
[Sun Mar 01 01:12:56.696061 2026] [:error] [pid 30798:tid 30921] [client 45.86.200.243:60425] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaMiGMBkD73gO8wTonZgcAAAAJU"]
[Sun Mar 01 01:12:57.788715 2026] [:error] [pid 53600:tid 53612] [client 45.86.200.248:52971] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaMiGQ2UMRAYWtDB23TU3QAAAQk"]
[Sun Mar 01 01:12:58.768677 2026] [:error] [pid 11920:tid 11947] [client 185.82.72.108:47377] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaMiGizLNJUKxvBorrCOqAAAAZc"]
[Sun Mar 01 01:13:02.912892 2026] [:error] [pid 31190:tid 31208] [client 45.86.200.250:57591] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaMiHhfvwGOholYpM1FtDAAAAMI"]
[Sun Mar 01 01:13:14.620856 2026] [:error] [pid 11920:tid 11931] [client 45.86.200.237:21441] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaMiKizLNJUKxvBorrCO_wAAAYc"]
[Sun Mar 01 01:13:15.431562 2026] [:error] [pid 31190:tid 31211] [client 45.86.200.238:44017] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaMiKxfvwGOholYpM1FtHwAAAMU"]
[Sun Mar 01 01:13:21.165669 2026] [:error] [pid 30798:tid 30912] [client 45.86.200.249:22135] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaMiMcBkD73gO8wTonZg5gAAAI0"]
[Sun Mar 01 01:13:21.813901 2026] [:error] [pid 31190:tid 31224] [client 185.82.72.179:41213] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaMiMRfvwGOholYpM1FtQwAAANI"]
[Sun Mar 01 01:13:24.209224 2026] [:error] [pid 11920:tid 11927] [client 45.86.200.218:58681] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaMiNCzLNJUKxvBorrCPJQAAAYM"]
[Sun Mar 01 01:13:24.910261 2026] [:error] [pid 30798:tid 30917] [client 185.82.72.109:59265] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaMiNMBkD73gO8wTonZg8wAAAJI"]
[Sun Mar 01 01:13:25.507510 2026] [:error] [pid 30798:tid 30909] [client 45.86.200.215:43747] [client 45.86.200.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.215, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaMiNcBkD73gO8wTonZg-AAAAIo"]
[Sun Mar 01 01:13:25.511909 2026] [proxy_fcgi:error] [pid 30798:tid 30909] [client 45.86.200.215:43747] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:13:26.888981 2026] [:error] [pid 30798:tid 30899] [client 45.86.200.215:43747] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaMiNsBkD73gO8wTonZhBgAAAIA"]
[Sun Mar 01 01:13:33.832374 2026] [:error] [pid 30797:tid 30871] [client 45.86.200.219:62543] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaMiPfQmcmSQL-3rvLAEFAAAAEA"]
[Sun Mar 01 01:13:34.539178 2026] [:error] [pid 11920:tid 11931] [client 45.86.200.221:23947] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaMiPizLNJUKxvBorrCPdgAAAYc"]
[Sun Mar 01 01:13:44.087163 2026] [:error] [pid 30795:tid 30828] [client 45.86.200.228:23315] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaMiSGuI44IL94Zgti-8TgAAABQ"]
[Sun Mar 01 01:13:44.726494 2026] [:error] [pid 31190:tid 31223] [client 45.86.200.215:22515] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaMiSBfvwGOholYpM1FtbAAAANE"]
[Sun Mar 01 01:13:49.062010 2026] [:error] [pid 31190:tid 31224] [client 45.86.200.240:56607] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaMiTRfvwGOholYpM1FtfQAAANI"]
[Sun Mar 01 01:13:49.657497 2026] [:error] [pid 30798:tid 30900] [client 45.86.200.236:37665] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaMiTcBkD73gO8wTonZhLwAAAIE"]
[Sun Mar 01 01:13:50.265318 2026] [proxy_fcgi:error] [pid 7644:tid 7670] [client 45.86.200.224:48451] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:13:50.667878 2026] [:error] [pid 7644:tid 7665] [client 45.86.200.224:48451] [client 45.86.200.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.224, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaMiTvqeDUGmVAHX7VCVEQAAAVM"]
[Sun Mar 01 01:13:54.347953 2026] [:error] [pid 7644:tid 7656] [client 45.86.200.224:48451] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaMiUvqeDUGmVAHX7VCVHgAAAUo"]
[Sun Mar 01 01:14:00.352504 2026] [:error] [pid 31190:tid 31230] [client 185.82.72.104:62107] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaMiWBfvwGOholYpM1FtpAAAANg"]
[Sun Mar 01 01:14:02.983189 2026] [:error] [pid 30798:tid 30908] [client 45.86.200.234:29005] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaMiWsBkD73gO8wTonZhVwAAAIk"]
[Sun Mar 01 01:14:03.590126 2026] [:error] [pid 11920:tid 11946] [client 185.82.72.9:30623] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaMiWyzLNJUKxvBorrCP_wAAAZY"]
[Sun Mar 01 01:14:08.020704 2026] [:error] [pid 11920:tid 11926] [client 185.82.72.106:26995] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaMiYCzLNJUKxvBorrCQEgAAAYI"]
[Sun Mar 01 01:14:11.583057 2026] [:error] [pid 30798:tid 30917] [client 45.86.200.250:64741] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaMiY8BkD73gO8wTonZhbgAAAJI"]
[Sun Mar 01 01:14:20.443251 2026] [:error] [pid 11920:tid 11931] [client 45.86.200.220:41855] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaMibCzLNJUKxvBorrCQVAAAAYc"]
[Sun Mar 01 01:14:20.996159 2026] [:error] [pid 11920:tid 11943] [client 185.82.72.109:56831] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaMibCzLNJUKxvBorrCQVgAAAZM"]
[Sun Mar 01 01:14:23.605119 2026] [:error] [pid 11920:tid 11932] [client 45.86.200.230:44531] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaMibyzLNJUKxvBorrCQawAAAYg"]
[Sun Mar 01 01:14:35.774672 2026] [:error] [pid 31190:tid 31218] [client 45.86.200.216:42167] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaMiexfvwGOholYpM1Ft0gAAAMw"]
[Sun Mar 01 01:14:40.120076 2026] [:error] [pid 53600:tid 53620] [client 45.86.200.213:65321] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "makifim.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaMigA2UMRAYWtDB23TWHQAAARE"]
[Sun Mar 01 01:14:40.469434 2026] [:error] [pid 53600:tid 53604] [client 45.86.200.213:65321] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaMigA2UMRAYWtDB23TWIgAAAQE"]
[Sun Mar 01 01:14:45.862171 2026] [:error] [pid 30798:tid 30901] [client 185.82.72.104:52481] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaMihcBkD73gO8wTonZh5AAAAII"]
[Sun Mar 01 01:14:46.460083 2026] [:error] [pid 11920:tid 11947] [client 45.86.200.230:63245] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaMihizLNJUKxvBorrCRSAAAAZc"]
[Sun Mar 01 01:14:55.498284 2026] [:error] [pid 30798:tid 30924] [client 45.86.200.239:35733] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaMij8BkD73gO8wTonZiHAAAAJg"]
[Sun Mar 01 01:14:58.393684 2026] [:error] [pid 30795:tid 30816] [client 45.86.200.217:23933] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaMikmuI44IL94Zgti-8kgAAAAg"]
[Sun Mar 01 01:15:01.451008 2026] [:error] [pid 30798:tid 30903] [client 45.86.200.247:38257] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaMilcBkD73gO8wTonZiJgAAAIQ"]
[Sun Mar 01 01:15:10.178466 2026] [:error] [pid 53600:tid 53617] [client 45.86.200.235:22709] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaMing2UMRAYWtDB23TWqAAAAQ4"]
[Sun Mar 01 01:15:12.592096 2026] [:error] [pid 30797:tid 30886] [client 185.82.72.206:45903] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaMioPQmcmSQL-3rvLAElAAAAE8"]
[Sun Mar 01 01:15:15.246760 2026] [:error] [pid 30795:tid 30809] [client 185.82.72.104:39467] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaMio2uI44IL94Zgti-8rgAAAAE"]
[Sun Mar 01 01:15:15.863275 2026] [:error] [pid 11920:tid 11933] [client 45.86.200.247:48907] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaMioyzLNJUKxvBorrCRsgAAAYk"]
[Sun Mar 01 01:15:17.423146 2026] [:error] [pid 31190:tid 31224] [client 45.86.200.239:45185] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaMipRfvwGOholYpM1FuNQAAANI"]
[Sun Mar 01 01:15:25.702449 2026] [:error] [pid 30798:tid 30922] [client 45.86.200.223:25415] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaMircBkD73gO8wTonZicAAAAJY"]
[Sun Mar 01 01:15:26.361868 2026] [:error] [pid 53600:tid 53613] [client 45.86.200.230:48493] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaMirg2UMRAYWtDB23TWsgAAAQo"]
[Sun Mar 01 01:15:36.248663 2026] [:error] [pid 30798:tid 30900] [client 45.86.200.235:35891] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaMiuMBkD73gO8wTonZiqgAAAIE"]
[Sun Mar 01 01:15:39.366888 2026] [:error] [pid 11920:tid 11928] [client 45.86.200.229:55589] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaMiuyzLNJUKxvBorrCR7QAAAYQ"]
[Sun Mar 01 01:15:44.314094 2026] [:error] [pid 31190:tid 31222] [client 45.86.200.231:34591] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaMiwBfvwGOholYpM1FujgAAANA"]
[Sun Mar 01 01:15:45.013794 2026] [:error] [pid 11920:tid 11925] [client 185.82.72.107:57525] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaMiwSzLNJUKxvBorrCSEgAAAYE"]
[Sun Mar 01 01:15:47.856863 2026] [:error] [pid 30798:tid 30912] [client 45.86.200.234:23411] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaMiw8BkD73gO8wTonZiyAAAAI0"]
[Sun Mar 01 01:15:53.505291 2026] [:error] [pid 11920:tid 11942] [client 45.86.200.245:55961] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaMiySzLNJUKxvBorrCSTQAAAZI"]
[Sun Mar 01 01:15:56.903812 2026] [:error] [pid 30798:tid 30911] [client 45.86.200.242:31543] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaMizMBkD73gO8wTonZi1QAAAIw"]
[Sun Mar 01 01:15:57.532003 2026] [:error] [pid 30798:tid 30904] [client 185.82.72.103:52507] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaMizcBkD73gO8wTonZi2gAAAIU"]
[Sun Mar 01 01:16:00.137690 2026] [:error] [pid 11920:tid 11928] [client 185.82.72.109:61865] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaMi0CzLNJUKxvBorrCScwAAAYQ"]
[Sun Mar 01 01:16:00.758403 2026] [:error] [pid 31190:tid 31214] [client 45.86.200.247:35195] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aaMi0BfvwGOholYpM1FurwAAAMg"]
[Sun Mar 01 01:16:04.644135 2026] [:error] [pid 53600:tid 53615] [client 185.82.72.109:23865] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaMi1A2UMRAYWtDB23TXQgAAAQw"]
[Sun Mar 01 01:16:07.429759 2026] [:error] [pid 11920:tid 11932] [client 45.86.200.231:50633] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaMi1yzLNJUKxvBorrCSjwAAAYg"]
[Sun Mar 01 01:16:08.556512 2026] [:error] [pid 30795:tid 30817] [client 45.86.200.250:50035] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaMi2GuI44IL94Zgti-86QAAAAk"]
[Sun Mar 01 01:16:09.186741 2026] [:error] [pid 53600:tid 53620] [client 45.86.200.240:60203] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaMi2Q2UMRAYWtDB23TXSQAAARE"]
[Sun Mar 01 01:16:13.483185 2026] [:error] [pid 7644:tid 7651] [client 185.82.72.102:44045] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaMi3fqeDUGmVAHX7VCW1QAAAUU"]
[Sun Mar 01 01:16:18.633944 2026] [:error] [pid 7644:tid 7649] [client 45.86.200.214:64541] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaMi4vqeDUGmVAHX7VCW3gAAAUM"]
[Sun Mar 01 01:16:21.876135 2026] [:error] [pid 30798:tid 30899] [client 45.86.200.226:27417] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaMi5cBkD73gO8wTonZjHAAAAIA"]
[Sun Mar 01 01:16:22.795799 2026] [:error] [pid 30798:tid 30900] [client 185.82.72.109:36867] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaMi5sBkD73gO8wTonZjIQAAAIE"]
[Sun Mar 01 01:16:33.695739 2026] [:error] [pid 30798:tid 30902] [client 185.82.72.182:48957] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaMi8cBkD73gO8wTonZjQAAAAIM"]
[Sun Mar 01 01:16:34.328702 2026] [:error] [pid 30798:tid 30922] [client 185.82.72.109:47165] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaMi8sBkD73gO8wTonZjQwAAAJY"]
[Sun Mar 01 01:16:38.854241 2026] [:error] [pid 11920:tid 11932] [client 45.86.200.226:30263] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaMi9izLNJUKxvBorrCTWwAAAYg"]
[Sun Mar 01 01:16:47.819029 2026] [:error] [pid 30798:tid 30901] [client 45.86.200.234:52879] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaMi_8BkD73gO8wTonZjbAAAAII"]
[Sun Mar 01 01:16:52.803745 2026] [:error] [pid 53600:tid 53621] [client 45.86.200.231:30499] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaMjBA2UMRAYWtDB23TXawAAARI"]
[Sun Mar 01 01:16:56.176767 2026] [:error] [pid 53600:tid 53615] [client 45.86.200.222:33319] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaMjCA2UMRAYWtDB23TXbgAAAQw"]
[Sun Mar 01 01:16:58.726832 2026] [:error] [pid 11920:tid 11927] [client 45.86.200.231:53223] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaMjCizLNJUKxvBorrCTwgAAAYM"]
[Sun Mar 01 01:16:59.672293 2026] [:error] [pid 11920:tid 11942] [client 45.86.200.230:32359] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaMjCyzLNJUKxvBorrCT0AAAAZI"]
[Sun Mar 01 01:17:08.185683 2026] [:error] [pid 31190:tid 31222] [client 185.82.72.107:28843] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaMjFBfvwGOholYpM1Fu6AAAANA"]
[Sun Mar 01 01:17:13.205502 2026] [:error] [pid 30798:tid 30915] [client 45.86.200.239:25923] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaMjGcBkD73gO8wTonZjlgAAAJA"]
[Sun Mar 01 01:17:13.994058 2026] [proxy_fcgi:error] [pid 11920:tid 11937] [client 45.86.200.229:42715] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 01:17:14.313477 2026] [:error] [pid 11920:tid 11924] [client 45.86.200.229:42715] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaMjGizLNJUKxvBorrCUQgAAAYA"]
[Sun Mar 01 01:17:14.901382 2026] [:error] [pid 11920:tid 11937] [client 45.86.200.220:50569] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaMjGizLNJUKxvBorrCUSgAAAY0"]
[Sun Mar 01 01:17:19.064685 2026] [:error] [pid 30798:tid 30908] [client 185.82.72.102:36773] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaMjH8BkD73gO8wTonZjnwAAAIk"]
[Sun Mar 01 01:17:19.859721 2026] [:error] [pid 53600:tid 53604] [client 45.86.200.235:39463] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaMjHw2UMRAYWtDB23TXkQAAAQE"]
[Sun Mar 01 01:17:31.065342 2026] [:error] [pid 11920:tid 11945] [client 185.82.72.179:47587] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaMjKyzLNJUKxvBorrCUxQAAAZU"]
[Sun Mar 01 01:17:31.665227 2026] [:error] [pid 11920:tid 11934] [client 185.82.72.103:44357] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaMjKyzLNJUKxvBorrCUzQAAAYo"]
[Sun Mar 01 01:17:34.258995 2026] [:error] [pid 31190:tid 31210] [client 45.86.200.246:44323] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/log.php"] [unique_id "aaMjLhfvwGOholYpM1FvBQAAAMQ"]
[Sun Mar 01 01:17:34.970685 2026] [:error] [pid 11920:tid 11931] [client 45.86.200.236:42619] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaMjLizLNJUKxvBorrCU4QAAAYc"]
[Sun Mar 01 01:17:35.614131 2026] [:error] [pid 11920:tid 11925] [client 185.82.72.108:46865] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaMjLyzLNJUKxvBorrCU5gAAAYE"]
[Sun Mar 01 01:17:36.275733 2026] [:error] [pid 11920:tid 11929] [client 45.86.200.228:42309] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aaMjMCzLNJUKxvBorrCU7QAAAYU"]
[Sun Mar 01 01:17:43.397951 2026] [:error] [pid 30798:tid 30916] [client 45.86.200.245:49965] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaMjN8BkD73gO8wTonZj0QAAAJE"]
[Sun Mar 01 01:17:44.068525 2026] [:error] [pid 31190:tid 31230] [client 185.82.72.111:25293] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aaMjOBfvwGOholYpM1FvHQAAANg"]
[Sun Mar 01 01:17:48.834791 2026] [:error] [pid 31190:tid 31223] [client 45.86.200.220:54475] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaMjPBfvwGOholYpM1FvKgAAANE"]
[Sun Mar 01 01:17:49.436009 2026] [:error] [pid 11920:tid 11925] [client 45.86.200.235:43957] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaMjPSzLNJUKxvBorrCVJwAAAYE"]
[Sun Mar 01 01:17:53.812477 2026] [:error] [pid 11920:tid 11942] [client 45.86.200.238:44609] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aaMjQSzLNJUKxvBorrCVTgAAAZI"]
[Sun Mar 01 01:17:54.407792 2026] [:error] [pid 53600:tid 53621] [client 45.86.200.217:34495] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaMjQg2UMRAYWtDB23TXxgAAARI"]
[Sun Mar 01 01:18:04.836310 2026] [:error] [pid 53600:tid 53619] [client 185.82.72.102:46041] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aaMjTA2UMRAYWtDB23TX3QAAARA"]
[Sun Mar 01 01:18:05.497811 2026] [:error] [pid 53600:tid 53606] [client 45.86.200.225:23609] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaMjTQ2UMRAYWtDB23TX3gAAAQM"]
[Sun Mar 01 01:18:09.484322 2026] [:error] [pid 11920:tid 11931] [client 45.86.200.213:25913] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaMjUSzLNJUKxvBorrCVwwAAAYc"]
[Sun Mar 01 01:18:12.202171 2026] [:error] [pid 11920:tid 11928] [client 45.86.200.248:55535] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaMjVCzLNJUKxvBorrCV4gAAAYQ"]
[Sun Mar 01 01:18:16.383132 2026] [:error] [pid 7644:tid 7657] [client 45.86.200.250:24839] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/load.php"] [unique_id "aaMjWPqeDUGmVAHX7VCXaQAAAUs"]
[Sun Mar 01 01:18:17.035832 2026] [:error] [pid 7644:tid 7647] [client 45.86.200.228:33325] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaMjWfqeDUGmVAHX7VCXbQAAAUE"]
[Sun Mar 01 01:18:17.668848 2026] [:error] [pid 31190:tid 31213] [client 45.86.200.240:29669] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaMjWRfvwGOholYpM1FvTQAAAMc"]
[Sun Mar 01 01:18:21.779327 2026] [:error] [pid 7644:tid 7648] [client 45.86.200.223:39155] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaMjXfqeDUGmVAHX7VCXigAAAUI"]
[Sun Mar 01 01:18:24.358278 2026] [:error] [pid 30798:tid 30914] [client 45.86.200.240:48417] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaMjYMBkD73gO8wTonZkFgAAAI8"]
[Sun Mar 01 01:18:29.873976 2026] [:error] [pid 7644:tid 7661] [client 185.82.72.182:65471] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaMjZfqeDUGmVAHX7VCXpAAAAU8"]
[Sun Mar 01 01:18:30.504851 2026] [:error] [pid 31190:tid 31230] [client 45.86.200.225:52755] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaMjZhfvwGOholYpM1FvbgAAANg"]
[Sun Mar 01 01:18:33.190149 2026] [:error] [pid 31190:tid 31208] [client 45.86.200.223:42717] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaMjaRfvwGOholYpM1FvegAAAMI"]
[Sun Mar 01 01:18:44.796988 2026] [:error] [pid 30797:tid 30872] [client 20.151.205.221:13472] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaMjdPQmcmSQL-3rvLAE4AAAAEE"]
[Sun Mar 01 01:18:45.643636 2026] [:error] [pid 11920:tid 11943] [client 20.151.205.221:13954] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaMjdSzLNJUKxvBorrCWXAAAAZM"]
[Sun Mar 01 01:18:46.477319 2026] [:error] [pid 53600:tid 53609] [client 20.151.205.221:13493] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaMjdg2UMRAYWtDB23TYEgAAAQY"]
[Sun Mar 01 01:18:47.325037 2026] [:error] [pid 30798:tid 30921] [client 20.151.205.221:13470] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaMjd8BkD73gO8wTonZkZgAAAJU"]
[Sun Mar 01 01:18:49.406407 2026] [:error] [pid 30798:tid 30909] [client 185.82.72.104:49397] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aaMjecBkD73gO8wTonZkbQAAAIo"]
[Sun Mar 01 01:18:51.968069 2026] [:error] [pid 30798:tid 30901] [client 185.82.72.107:60913] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaMje8BkD73gO8wTonZkdwAAAII"]
[Sun Mar 01 01:18:54.962036 2026] [:error] [pid 7644:tid 7664] [client 45.86.200.237:61527] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaMjfvqeDUGmVAHX7VCX7wAAAVI"]
[Sun Mar 01 01:18:55.684035 2026] [:error] [pid 11920:tid 11937] [client 185.82.72.109:33113] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaMjfyzLNJUKxvBorrCWggAAAY0"]
[Sun Mar 01 01:18:56.309143 2026] [:error] [pid 30798:tid 30901] [client 45.86.200.247:56959] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaMjgMBkD73gO8wTonZkggAAAII"]
[Sun Mar 01 01:18:59.321478 2026] [autoindex:error] [pid 11920:tid 11945] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:18:59.655202 2026] [autoindex:error] [pid 11920:tid 11946] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:00.007112 2026] [autoindex:error] [pid 11920:tid 11925] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:00.352477 2026] [autoindex:error] [pid 11920:tid 11924] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:03.042236 2026] [autoindex:error] [pid 11920:tid 11935] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:03.712223 2026] [autoindex:error] [pid 11920:tid 11940] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:04.102030 2026] [autoindex:error] [pid 11920:tid 11937] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:04.463230 2026] [autoindex:error] [pid 11920:tid 11938] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:04.940594 2026] [autoindex:error] [pid 11920:tid 11942] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:05.619620 2026] [autoindex:error] [pid 11920:tid 11928] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:07.371298 2026] [autoindex:error] [pid 11920:tid 11925] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:11.721240 2026] [autoindex:error] [pid 11920:tid 11939] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:12.420128 2026] [autoindex:error] [pid 11920:tid 11938] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:12.746035 2026] [autoindex:error] [pid 11920:tid 11943] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:16.836685 2026] [autoindex:error] [pid 11920:tid 11934] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:19.445814 2026] [autoindex:error] [pid 11920:tid 11930] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:24.375167 2026] [autoindex:error] [pid 11920:tid 11948] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:24.690830 2026] [autoindex:error] [pid 11920:tid 11944] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:25.010023 2026] [autoindex:error] [pid 11920:tid 11926] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:36.745736 2026] [autoindex:error] [pid 11920:tid 11924] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:39.103648 2026] [autoindex:error] [pid 11920:tid 11946] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:39.535606 2026] [autoindex:error] [pid 11920:tid 11934] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:40.563514 2026] [autoindex:error] [pid 11920:tid 11926] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:40.902025 2026] [autoindex:error] [pid 11920:tid 11944] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:19:41.375105 2026] [autoindex:error] [pid 11920:tid 11941] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:43.320724 2026] [autoindex:error] [pid 11920:tid 11945] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:43.712533 2026] [autoindex:error] [pid 11920:tid 11924] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:44.086461 2026] [autoindex:error] [pid 11920:tid 11943] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:44.404926 2026] [autoindex:error] [pid 11920:tid 11947] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:49.597600 2026] [autoindex:error] [pid 11920:tid 11941] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:51.844935 2026] [autoindex:error] [pid 11920:tid 11942] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:52.144993 2026] [autoindex:error] [pid 11920:tid 11947] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:52.454215 2026] [autoindex:error] [pid 11920:tid 11935] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:54.591208 2026] [autoindex:error] [pid 11920:tid 11930] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:54.921053 2026] [autoindex:error] [pid 11920:tid 11926] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:55.263340 2026] [autoindex:error] [pid 11920:tid 11947] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:20:55.586211 2026] [autoindex:error] [pid 11920:tid 11934] [client 45.86.200.232:31783] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:21:42.148684 2026] [autoindex:error] [pid 30798:tid 30922] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:04.882564 2026] [autoindex:error] [pid 30798:tid 30907] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:13.904654 2026] [autoindex:error] [pid 30798:tid 30907] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:14.246641 2026] [autoindex:error] [pid 30798:tid 30918] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:23.772083 2026] [autoindex:error] [pid 30798:tid 30921] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:24.108866 2026] [autoindex:error] [pid 30798:tid 30899] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:24.406200 2026] [autoindex:error] [pid 30798:tid 30908] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:24.742536 2026] [autoindex:error] [pid 30798:tid 30912] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:25.056593 2026] [autoindex:error] [pid 30798:tid 30900] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:25.393152 2026] [autoindex:error] [pid 30798:tid 30905] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:25.858698 2026] [autoindex:error] [pid 30798:tid 30920] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:22:27.316939 2026] [autoindex:error] [pid 30798:tid 30922] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:23:05.849405 2026] [autoindex:error] [pid 30798:tid 30921] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:23:11.113536 2026] [autoindex:error] [pid 30798:tid 30899] [client 45.86.200.242:49955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 01:28:50.771340 2026] [:error] [pid 11920:tid 11944] [client 144.91.119.214:55574] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaMl0izLNJUKxvBorrClQgAAAZQ"]
[Sun Mar 01 01:28:57.693447 2026] [:error] [pid 30798:tid 30907] [client 144.91.119.214:59920] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaMl2cBkD73gO8wTonZtCwAAAIg"], referer: https://www.linkedin.com/
[Sun Mar 01 01:41:38.485646 2026] [:error] [pid 30798:tid 30906] [client 20.205.120.43:1778] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaMo0sBkD73gO8wTonZ7OwAAAIc"]
[Sun Mar 01 01:41:38.986196 2026] [:error] [pid 53600:tid 53613] [client 20.205.120.43:1818] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaMo0g2UMRAYWtDB23Ti8wAAAQo"]
[Sun Mar 01 01:41:39.472579 2026] [:error] [pid 11920:tid 11933] [client 20.205.120.43:1822] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaMo0yzLNJUKxvBorrC9-AAAAYk"]
[Sun Mar 01 01:41:40.004092 2026] [:error] [pid 7644:tid 7670] [client 20.205.120.43:1815] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaMo1PqeDUGmVAHX7VCfOQAAAVg"]
[Sun Mar 01 04:21:53.014341 2026] [:error] [pid 21263:tid 21276] [client 20.151.205.221:13522] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaNOYdAxjzLvN1upBhmtkgAAAMk"]
[Sun Mar 01 04:22:01.930331 2026] [:error] [pid 21263:tid 21270] [client 20.151.205.221:13522] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaNOadAxjzLvN1upBhmtyAAAAMM"]
[Sun Mar 01 04:22:06.767197 2026] [:error] [pid 21263:tid 21291] [client 20.151.205.221:13522] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.205.221, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNObtAxjzLvN1upBhmt1wAAANg"]
[Sun Mar 01 04:22:15.407180 2026] [:error] [pid 21263:tid 21287] [client 20.151.205.221:13522] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/login.php"] [unique_id "aaNOd9AxjzLvN1upBhmt_wAAANQ"]
[Sun Mar 01 04:22:16.243570 2026] [:error] [pid 21159:tid 21235] [client 20.151.205.221:13541] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/login.php"] [unique_id "aaNOeOLi3ouy1NZIkgr_xwAAAI4"]
[Sun Mar 01 04:22:17.079292 2026] [:error] [pid 21158:tid 21212] [client 20.151.205.221:13554] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/login.php"] [unique_id "aaNOeTriSIe3-pWnbPbGDgAAAFM"]
[Sun Mar 01 04:22:17.931884 2026] [:error] [pid 21263:tid 21277] [client 20.151.205.221:13553] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/login.php"] [unique_id "aaNOedAxjzLvN1upBhmuCwAAAMo"]
[Sun Mar 01 04:56:07.162230 2026] [:error] [pid 21159:tid 21227] [client 74.243.251.125:13518] [client 74.243.251.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaNWZ-Li3ouy1NZIkgoVegAAAIY"]
[Sun Mar 01 04:56:51.425677 2026] [:error] [pid 21156:tid 21180] [client 74.243.251.125:13851] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaNWk6saG_9IkG8N2p3hhwAAAA4"]
[Sun Mar 01 04:56:51.748366 2026] [:error] [pid 21263:tid 21268] [client 74.243.251.125:13564] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaNWk9AxjzLvN1upBhnQMAAAAME"]
[Sun Mar 01 04:56:52.071280 2026] [:error] [pid 21156:tid 21174] [client 74.243.251.125:13885] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaNWlKsaG_9IkG8N2p3hiAAAAAg"]
[Sun Mar 01 04:56:52.402849 2026] [:error] [pid 21263:tid 21276] [client 74.243.251.125:13854] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaNWlNAxjzLvN1upBhnQOwAAAMk"]
[Sun Mar 01 04:56:52.726455 2026] [:error] [pid 21159:tid 21224] [client 74.243.251.125:13824] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaNWlOLi3ouy1NZIkgoV3gAAAIM"]
[Sun Mar 01 04:56:53.048929 2026] [:error] [pid 21156:tid 21188] [client 74.243.251.125:13829] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaNWlasaG_9IkG8N2p3higAAABY"]
[Sun Mar 01 04:56:53.378228 2026] [:error] [pid 21159:tid 21238] [client 74.243.251.125:13860] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaNWleLi3ouy1NZIkgoV3wAAAJE"]
[Sun Mar 01 04:56:53.701607 2026] [:error] [pid 21263:tid 21289] [client 74.243.251.125:13514] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaNWldAxjzLvN1upBhnQPwAAANY"]
[Sun Mar 01 04:56:54.024318 2026] [:error] [pid 21263:tid 21287] [client 74.243.251.125:13505] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaNWltAxjzLvN1upBhnQQgAAANQ"]
[Sun Mar 01 04:56:54.346949 2026] [:error] [pid 21263:tid 21276] [client 74.243.251.125:13506] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaNWltAxjzLvN1upBhnQSwAAAMk"]
[Sun Mar 01 04:56:54.670128 2026] [:error] [pid 21263:tid 21282] [client 74.243.251.125:13520] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaNWltAxjzLvN1upBhnQUQAAAM8"]
[Sun Mar 01 04:56:54.994045 2026] [:error] [pid 21263:tid 21272] [client 74.243.251.125:13837] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaNWltAxjzLvN1upBhnQVgAAAMU"]
[Sun Mar 01 04:56:55.318001 2026] [:error] [pid 21263:tid 21291] [client 74.243.251.125:13533] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaNWl9AxjzLvN1upBhnQXAAAANg"]
[Sun Mar 01 04:56:55.640912 2026] [:error] [pid 21159:tid 21236] [client 74.243.251.125:13512] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaNWl-Li3ouy1NZIkgoV5AAAAI8"]
[Sun Mar 01 04:56:55.965055 2026] [:error] [pid 21158:tid 21212] [client 74.243.251.125:13562] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaNWlzriSIe3-pWnbPbW2gAAAFM"]
[Sun Mar 01 04:56:56.340196 2026] [:error] [pid 21159:tid 21231] [client 74.243.251.125:13869] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaNWmOLi3ouy1NZIkgoV5gAAAIo"]
[Sun Mar 01 04:56:56.664003 2026] [:error] [pid 21158:tid 21213] [client 74.243.251.125:13839] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaNWmDriSIe3-pWnbPbW3QAAAFQ"]
[Sun Mar 01 04:56:56.987649 2026] [:error] [pid 21158:tid 21203] [client 74.243.251.125:13554] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaNWmDriSIe3-pWnbPbW4QAAAEo"]
[Sun Mar 01 04:56:57.311863 2026] [:error] [pid 21156:tid 21183] [client 74.243.251.125:13861] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaNWmasaG_9IkG8N2p3hjgAAABE"]
[Sun Mar 01 04:56:57.634623 2026] [:error] [pid 21156:tid 21172] [client 74.243.251.125:13838] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaNWmasaG_9IkG8N2p3hkAAAAAY"]
[Sun Mar 01 11:18:45.492852 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:10214] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aaOwFeLi3ouy1NZIkgpP6AAAAI4"]
[Sun Mar 01 11:18:46.929136 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:10183] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aaOwFnPFxpCIhHW6XmmpfAAAApQ"]
[Sun Mar 01 11:18:47.774121 2026] [:error] [pid 33539:tid 33546] [client 20.104.206.150:10220] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aaOwF9CsLwBYg4s018u80QAAAcE"]
[Sun Mar 01 11:18:49.114202 2026] [:error] [pid 21158:tid 21206] [client 20.104.206.150:10190] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aaOwGTriSIe3-pWnbPYKmAAAAE0"]
[Sun Mar 01 11:18:50.390276 2026] [:error] [pid 35060:tid 35071] [client 20.104.206.150:10235] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cjfuns.php"] [unique_id "aaOwGpL8JPoS_tq-tiUFjgAAA0k"]
[Sun Mar 01 11:18:52.290682 2026] [:error] [pid 35060:tid 35068] [client 20.104.206.150:10151] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cjfuns.php"] [unique_id "aaOwHJL8JPoS_tq-tiUFlAAAA0Y"]
[Sun Mar 01 11:18:52.837006 2026] [:error] [pid 21263:tid 21270] [client 20.104.206.150:10128] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cjfuns.php"] [unique_id "aaOwHNAxjzLvN1upBhkeVwAAAMM"]
[Sun Mar 01 11:18:55.150053 2026] [:error] [pid 33229:tid 33253] [client 20.104.206.150:10208] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cjfuns.php"] [unique_id "aaOwH3zT4c9ddlGE6FxafgAAAZY"]
[Sun Mar 01 11:18:56.442955 2026] [:error] [pid 21263:tid 21270] [client 20.104.206.150:10131] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aaOwINAxjzLvN1upBhkeXwAAAMM"]
[Sun Mar 01 11:18:56.978228 2026] [:error] [pid 21263:tid 21270] [client 20.104.206.150:10059] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aaOwINAxjzLvN1upBhkeYwAAAMM"]
[Sun Mar 01 11:18:57.677076 2026] [:error] [pid 35060:tid 35068] [client 20.104.206.150:10203] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aaOwIZL8JPoS_tq-tiUFnwAAA0Y"]
[Sun Mar 01 11:18:58.292750 2026] [:error] [pid 34286:tid 34288] [client 20.104.206.150:10209] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aaOwInPFxpCIhHW6XmmpigAAAoA"]
[Sun Mar 01 11:18:58.951887 2026] [:error] [pid 33229:tid 33253] [client 20.104.206.150:10181] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xmlmp.php"] [unique_id "aaOwInzT4c9ddlGE6FxagwAAAZY"]
[Sun Mar 01 11:18:59.971905 2026] [:error] [pid 34785:tid 34796] [client 20.104.206.150:10207] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xmlmp.php"] [unique_id "aaOwI4C4dBNEGEcJx-N_nQAAAwk"]
[Sun Mar 01 11:19:00.586623 2026] [:error] [pid 34286:tid 34288] [client 20.104.206.150:10167] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xmlmp.php"] [unique_id "aaOwJHPFxpCIhHW6XmmpkAAAAoA"]
[Sun Mar 01 11:19:01.065674 2026] [:error] [pid 34552:tid 34562] [client 20.104.206.150:10239] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xmlmp.php"] [unique_id "aaOwJXBlU_DRqGi4yvsSXAAAAsc"]
[Sun Mar 01 11:19:01.807715 2026] [:error] [pid 33976:tid 33983] [client 20.104.206.150:10232] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aaOwJQUyU3c4Xm_xpMTD4gAAAkU"]
[Sun Mar 01 11:19:02.377475 2026] [:error] [pid 34286:tid 34288] [client 20.104.206.150:10210] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aaOwJnPFxpCIhHW6XmmpkwAAAoA"]
[Sun Mar 01 11:19:03.613537 2026] [:error] [pid 24576:tid 24582] [client 20.104.206.150:10191] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aaOwJ4vfb5CnctJh071EnQAAAQM"]
[Sun Mar 01 11:19:04.504055 2026] [:error] [pid 21263:tid 21270] [client 20.104.206.150:10186] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "aaOwKNAxjzLvN1upBhkeaQAAAMM"]
[Sun Mar 01 11:19:05.066212 2026] [:error] [pid 33229:tid 33253] [client 20.104.206.150:10201] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configssss.php"] [unique_id "aaOwKXzT4c9ddlGE6FxaiAAAAZY"]
[Sun Mar 01 11:19:05.586167 2026] [:error] [pid 8688:tid 8711] [client 20.104.206.150:10126] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configssss.php"] [unique_id "aaOwKTHJ4Nn-RvulD0rexAAAAVU"]
[Sun Mar 01 11:19:06.627790 2026] [:error] [pid 21263:tid 21285] [client 20.104.206.150:10127] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configssss.php"] [unique_id "aaOwKtAxjzLvN1upBhkeagAAANI"]
[Sun Mar 01 11:19:07.605648 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:10120] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configssss.php"] [unique_id "aaOwK3PFxpCIhHW6XmmpmAAAApQ"]
[Sun Mar 01 11:19:08.196730 2026] [:error] [pid 34785:tid 34802] [client 20.104.206.150:10115] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configss1.php"] [unique_id "aaOwLIC4dBNEGEcJx-N_0QAAAw8"]
[Sun Mar 01 11:19:09.010222 2026] [:error] [pid 35060:tid 35071] [client 20.104.206.150:10221] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configss1.php"] [unique_id "aaOwLZL8JPoS_tq-tiUFrgAAA0k"]
[Sun Mar 01 11:19:09.593298 2026] [:error] [pid 34785:tid 34796] [client 20.104.206.150:10211] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configss1.php"] [unique_id "aaOwLYC4dBNEGEcJx-N_1wAAAwk"]
[Sun Mar 01 11:19:10.876495 2026] [:error] [pid 33229:tid 33232] [client 20.104.206.150:10192] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configss1.php"] [unique_id "aaOwLnzT4c9ddlGE6FxalgAAAYE"]
[Sun Mar 01 11:19:11.540563 2026] [:error] [pid 34785:tid 34796] [client 20.104.206.150:10192] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ngif.php"] [unique_id "aaOwL4C4dBNEGEcJx-N_6AAAAwk"]
[Sun Mar 01 11:19:12.029353 2026] [:error] [pid 21263:tid 21270] [client 20.104.206.150:10125] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ngif.php"] [unique_id "aaOwMNAxjzLvN1upBhkebAAAAMM"]
[Sun Mar 01 11:19:12.813328 2026] [:error] [pid 33976:tid 33983] [client 20.104.206.150:10231] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ngif.php"] [unique_id "aaOwMAUyU3c4Xm_xpMTD6QAAAkU"]
[Sun Mar 01 11:19:13.785924 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:10195] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ngif.php"] [unique_id "aaOwMeLi3ouy1NZIkgpQSAAAAJY"]
[Sun Mar 01 11:19:14.760772 2026] [:error] [pid 35350:tid 35368] [client 20.104.206.150:10124] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configss.php"] [unique_id "aaOwMoqZbPJ_JGYY1RT6GgAAA5A"]
[Sun Mar 01 11:19:15.620410 2026] [:error] [pid 33976:tid 33998] [client 20.104.206.150:10234] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configss.php"] [unique_id "aaOwMwUyU3c4Xm_xpMTD9AAAAlQ"]
[Sun Mar 01 11:19:16.349902 2026] [:error] [pid 33767:tid 33785] [client 20.104.206.150:10228] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configss.php"] [unique_id "aaOwNEGyeKe3MWsxvBgPqAAAAg8"]
[Sun Mar 01 11:19:16.953852 2026] [:error] [pid 34552:tid 34575] [client 20.104.206.150:10196] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-configss.php"] [unique_id "aaOwNHBlU_DRqGi4yvsSbgAAAtQ"]
[Sun Mar 01 11:19:17.442714 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:10188] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "aaOwNeLi3ouy1NZIkgpQTAAAAJY"]
[Sun Mar 01 11:19:18.151292 2026] [:error] [pid 21158:tid 21207] [client 20.104.206.150:10158] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "aaOwNjriSIe3-pWnbPYKvgAAAE4"]
[Sun Mar 01 11:19:18.714620 2026] [:error] [pid 35060:tid 35074] [client 20.104.206.150:10117] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "aaOwNpL8JPoS_tq-tiUFzAAAA0w"]
[Sun Mar 01 11:19:19.278167 2026] [:error] [pid 34286:tid 34288] [client 20.104.206.150:10150] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "aaOwN3PFxpCIhHW6XmmpogAAAoA"]
[Sun Mar 01 11:19:19.894537 2026] [:error] [pid 8688:tid 8713] [client 20.104.206.150:10130] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.phpa"] [unique_id "aaOwNzHJ4Nn-RvulD0re7gAAAVc"]
[Sun Mar 01 11:19:20.492450 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:10215] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.phpa"] [unique_id "aaOwOOLi3ouy1NZIkgpQVQAAAI4"]
[Sun Mar 01 11:19:20.922703 2026] [:error] [pid 34286:tid 34288] [client 20.104.206.150:10142] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.phpa"] [unique_id "aaOwOHPFxpCIhHW6XmmppgAAAoA"]
[Sun Mar 01 11:19:21.436668 2026] [:error] [pid 33767:tid 33785] [client 20.104.206.150:10078] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.phpa"] [unique_id "aaOwOUGyeKe3MWsxvBgPuwAAAg8"]
[Sun Mar 01 11:19:21.887347 2026] [:error] [pid 8688:tid 8702] [client 20.104.206.150:10116] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aaOwOTHJ4Nn-RvulD0re8QAAAUw"]
[Sun Mar 01 11:19:22.365507 2026] [:error] [pid 33767:tid 33776] [client 20.104.206.150:10177] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aaOwOkGyeKe3MWsxvBgPwAAAAgY"]
[Sun Mar 01 11:19:22.835802 2026] [:error] [pid 34785:tid 34797] [client 20.104.206.150:10217] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aaOwOoC4dBNEGEcJx-N__AAAAwo"]
[Sun Mar 01 11:19:23.351501 2026] [:error] [pid 33767:tid 33788] [client 20.104.206.150:10053] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aaOwO0GyeKe3MWsxvBgPyQAAAhI"]
[Sun Mar 01 11:19:23.928634 2026] [:error] [pid 35060:tid 35068] [client 20.104.206.150:10149] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/im.php"] [unique_id "aaOwO5L8JPoS_tq-tiUF5QAAA0Y"]
[Sun Mar 01 11:19:24.907510 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:10226] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/im.php"] [unique_id "aaOwPHPFxpCIhHW6XmmpqAAAApQ"]
[Sun Mar 01 11:19:25.511328 2026] [:error] [pid 33976:tid 33991] [client 20.104.206.150:10121] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/im.php"] [unique_id "aaOwPQUyU3c4Xm_xpMTEBgAAAk0"]
[Sun Mar 01 11:19:26.730335 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:10071] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/im.php"] [unique_id "aaOwPuLi3ouy1NZIkgpQXgAAAI4"]
[Sun Mar 01 11:19:27.562711 2026] [:error] [pid 33767:tid 33773] [client 20.104.206.150:10206] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaOwP0GyeKe3MWsxvBgP7AAAAgM"]
[Sun Mar 01 11:19:28.883138 2026] [:error] [pid 34552:tid 34565] [client 20.104.206.150:10198] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaOwQHBlU_DRqGi4yvsSzwAAAso"]
[Sun Mar 01 11:19:29.524342 2026] [:error] [pid 21158:tid 21206] [client 20.104.206.150:10119] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaOwQTriSIe3-pWnbPYKzwAAAE0"]
[Sun Mar 01 11:19:31.209012 2026] [:error] [pid 33976:tid 33988] [client 20.104.206.150:10129] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaOwQwUyU3c4Xm_xpMTEJwAAAko"]
[Sun Mar 01 11:19:32.566657 2026] [:error] [pid 24576:tid 24582] [client 20.104.206.150:10204] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache-compat.php"] [unique_id "aaOwRIvfb5CnctJh071EsgAAAQM"]
[Sun Mar 01 11:19:34.641168 2026] [:error] [pid 33976:tid 33993] [client 20.104.206.150:10159] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache-compat.php"] [unique_id "aaOwRgUyU3c4Xm_xpMTENgAAAk8"]
[Sun Mar 01 11:19:35.970046 2026] [:error] [pid 33539:tid 33563] [client 20.104.206.150:10136] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache-compat.php"] [unique_id "aaOwR9CsLwBYg4s018u85QAAAdE"]
[Sun Mar 01 11:19:37.133860 2026] [:error] [pid 33539:tid 33546] [client 20.104.206.150:10189] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache-compat.php"] [unique_id "aaOwSdCsLwBYg4s018u86AAAAcE"]
[Sun Mar 01 11:19:38.124676 2026] [:error] [pid 33767:tid 33773] [client 20.104.206.150:10229] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaOwSkGyeKe3MWsxvBgQCAAAAgM"]
[Sun Mar 01 11:19:40.327846 2026] [:error] [pid 34785:tid 34797] [client 20.104.206.150:10134] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaOwTIC4dBNEGEcJx-OASgAAAwo"]
[Sun Mar 01 11:19:41.482377 2026] [:error] [pid 33976:tid 33979] [client 20.104.206.150:10237] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaOwTQUyU3c4Xm_xpMTERAAAAkE"]
[Sun Mar 01 11:20:42.470113 2026] [:error] [pid 34552:tid 34566] [client 20.104.206.150:10224] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aaOwinBlU_DRqGi4yvsTQQAAAss"]
[Sun Mar 01 11:21:01.321922 2026] [:error] [pid 33767:tid 33773] [client 20.104.206.150:10176] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lufix.php"] [unique_id "aaOwnUGyeKe3MWsxvBgQewAAAgM"]
[Sun Mar 01 11:21:02.193964 2026] [:error] [pid 21263:tid 21285] [client 20.104.206.150:10202] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lufix.php"] [unique_id "aaOwntAxjzLvN1upBhke5gAAANI"]
[Sun Mar 01 11:21:03.111071 2026] [:error] [pid 35654:tid 35663] [client 20.104.206.150:10145] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lufix.php"] [unique_id "aaOwn0IPeuEwCTirofKLQwAAA8U"]
[Sun Mar 01 11:21:03.772312 2026] [:error] [pid 33539:tid 33546] [client 20.104.206.150:10205] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lufix.php"] [unique_id "aaOwn9CsLwBYg4s018u9SQAAAcE"]
[Sun Mar 01 11:21:04.695511 2026] [:error] [pid 33767:tid 33785] [client 20.104.206.150:10187] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax-actions.php"] [unique_id "aaOwoEGyeKe3MWsxvBgQhwAAAg8"]
[Sun Mar 01 11:21:05.827779 2026] [:error] [pid 21263:tid 21285] [client 20.104.206.150:10223] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax-actions.php"] [unique_id "aaOwodAxjzLvN1upBhke7gAAANI"]
[Sun Mar 01 11:21:06.705631 2026] [:error] [pid 33767:tid 33785] [client 20.104.206.150:10139] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax-actions.php"] [unique_id "aaOwokGyeKe3MWsxvBgQkgAAAg8"]
[Sun Mar 01 11:21:08.513299 2026] [:error] [pid 33767:tid 33773] [client 20.104.206.150:10137] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax-actions.php"] [unique_id "aaOwpEGyeKe3MWsxvBgQoAAAAgM"]
[Sun Mar 01 11:21:09.051195 2026] [:error] [pid 35060:tid 35071] [client 20.104.206.150:10168] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaOwpZL8JPoS_tq-tiUGswAAA0k"]
[Sun Mar 01 11:21:09.558474 2026] [:error] [pid 33976:tid 33993] [client 20.104.206.150:10197] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaOwpQUyU3c4Xm_xpMTEuwAAAk8"]
[Sun Mar 01 11:21:10.054781 2026] [:error] [pid 33539:tid 33563] [client 20.104.206.150:10123] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaOwptCsLwBYg4s018u9SgAAAdE"]
[Sun Mar 01 11:21:10.582662 2026] [:error] [pid 34785:tid 34809] [client 20.104.206.150:10225] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaOwpoC4dBNEGEcJx-OA_QAAAxY"]
[Sun Mar 01 11:21:11.250919 2026] [:error] [pid 24576:tid 24582] [client 20.104.206.150:10173] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aaOwp4vfb5CnctJh071FRAAAAQM"]
[Sun Mar 01 11:21:11.790633 2026] [:error] [pid 21158:tid 21207] [client 20.104.206.150:10219] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aaOwpzriSIe3-pWnbPYLOQAAAE4"]
[Sun Mar 01 11:21:12.509305 2026] [:error] [pid 35654:tid 35675] [client 20.104.206.150:10113] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aaOwqEIPeuEwCTirofKLTAAAA9E"]
[Sun Mar 01 11:21:12.949079 2026] [:error] [pid 35060:tid 35074] [client 20.104.206.150:10135] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aaOwqJL8JPoS_tq-tiUGugAAA0w"]
[Sun Mar 01 11:21:13.487140 2026] [:error] [pid 34785:tid 34796] [client 20.104.206.150:10218] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aaOwqYC4dBNEGEcJx-OBCAAAAwk"]
[Sun Mar 01 11:21:14.155505 2026] [:error] [pid 34785:tid 34798] [client 20.104.206.150:10122] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aaOwqoC4dBNEGEcJx-OBCwAAAws"]
[Sun Mar 01 11:21:14.706885 2026] [:error] [pid 21263:tid 21274] [client 20.104.206.150:10064] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aaOwqtAxjzLvN1upBhkfBgAAAMc"]
[Sun Mar 01 11:21:15.461190 2026] [:error] [pid 34785:tid 34798] [client 20.104.206.150:10152] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aaOwq4C4dBNEGEcJx-OBDwAAAws"]
[Sun Mar 01 11:21:16.255322 2026] [:error] [pid 34785:tid 34798] [client 20.104.206.150:10164] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aaOwrIC4dBNEGEcJx-OBEQAAAws"]
[Sun Mar 01 11:21:16.933902 2026] [:error] [pid 35060:tid 35084] [client 20.104.206.150:10162] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aaOwrJL8JPoS_tq-tiUGwAAAA1Y"]
[Sun Mar 01 11:21:17.725828 2026] [:error] [pid 35060:tid 35071] [client 20.104.206.150:10233] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aaOwrZL8JPoS_tq-tiUGwQAAA0k"]
[Sun Mar 01 11:21:18.508599 2026] [:error] [pid 24576:tid 24582] [client 20.104.206.150:10216] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aaOwrovfb5CnctJh071FWwAAAQM"]
[Sun Mar 01 11:21:19.222196 2026] [:error] [pid 24576:tid 24582] [client 20.104.206.150:10070] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aaOwr4vfb5CnctJh071FXQAAAQM"]
[Sun Mar 01 11:21:19.987099 2026] [:error] [pid 24576:tid 24582] [client 20.104.206.150:10213] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aaOwr4vfb5CnctJh071FYAAAAQM"]
[Sun Mar 01 11:21:20.532726 2026] [:error] [pid 35654:tid 35663] [client 20.104.206.150:10081] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aaOwsEIPeuEwCTirofKLUAAAA8U"]
[Sun Mar 01 11:21:21.082441 2026] [:error] [pid 35350:tid 35368] [client 20.104.206.150:10170] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aaOwsYqZbPJ_JGYY1RT6JgAAA5A"]
[Sun Mar 01 11:21:21.740260 2026] [:error] [pid 33767:tid 33788] [client 20.104.206.150:10169] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaOwsUGyeKe3MWsxvBgQzAAAAhI"]
[Sun Mar 01 11:21:22.246337 2026] [:error] [pid 35350:tid 35370] [client 20.104.206.150:10056] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaOwsoqZbPJ_JGYY1RT6KwAAA5I"]
[Sun Mar 01 11:21:22.752101 2026] [:error] [pid 35350:tid 35368] [client 20.104.206.150:10194] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaOwsoqZbPJ_JGYY1RT6LQAAA5A"]
[Sun Mar 01 11:21:23.431295 2026] [:error] [pid 21263:tid 21285] [client 20.104.206.150:10185] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaOws9AxjzLvN1upBhkfDgAAANI"]
[Sun Mar 01 11:21:24.770523 2026] [:error] [pid 35060:tid 35074] [client 20.104.206.150:10227] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aaOwtJL8JPoS_tq-tiUG3QAAA0w"]
[Sun Mar 01 11:21:25.812664 2026] [:error] [pid 33767:tid 33788] [client 20.104.206.150:10180] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aaOwtUGyeKe3MWsxvBgQ1QAAAhI"]
[Sun Mar 01 11:21:26.665661 2026] [:error] [pid 35060:tid 35071] [client 20.104.206.150:10079] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aaOwtpL8JPoS_tq-tiUG5QAAA0k"]
[Sun Mar 01 11:21:27.130237 2026] [:error] [pid 34785:tid 34802] [client 20.104.206.150:10004] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aaOwt4C4dBNEGEcJx-OBJQAAAw8"]
[Sun Mar 01 11:21:27.708007 2026] [:error] [pid 35654:tid 35663] [client 20.104.206.150:10050] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aaOwt0IPeuEwCTirofKLWAAAA8U"]
[Sun Mar 01 11:21:28.358505 2026] [:error] [pid 33767:tid 33782] [client 20.104.206.150:10236] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aaOwuEGyeKe3MWsxvBgQ3AAAAgw"]
[Sun Mar 01 11:21:29.019202 2026] [:error] [pid 35060:tid 35071] [client 20.104.206.150:10076] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aaOwuZL8JPoS_tq-tiUG8QAAA0k"]
[Sun Mar 01 11:21:29.758527 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:10140] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aaOwueLi3ouy1NZIkgpQ7wAAAI4"]
[Sun Mar 01 11:21:31.154485 2026] [:error] [pid 34785:tid 34796] [client 20.104.206.150:10141] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upgrade.php"] [unique_id "aaOwu4C4dBNEGEcJx-OBKQAAAwk"]
[Sun Mar 01 11:21:31.962820 2026] [:error] [pid 33539:tid 33546] [client 20.104.206.150:9994] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upgrade.php"] [unique_id "aaOwu9CsLwBYg4s018u9XwAAAcE"]
[Sun Mar 01 11:21:32.867279 2026] [:error] [pid 21263:tid 21274] [client 20.104.206.150:10179] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upgrade.php"] [unique_id "aaOwvNAxjzLvN1upBhkfHwAAAMc"]
[Sun Mar 01 11:21:33.997221 2026] [:error] [pid 21263:tid 21274] [client 20.104.206.150:10155] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upgrade.php"] [unique_id "aaOwvdAxjzLvN1upBhkfIgAAAMc"]
[Sun Mar 01 14:29:32.793981 2026] [:error] [pid 44644:tid 44657] [client 62.60.131.218:62219] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aaPczJ3RJaXMcw3y9V9vQwAAAAo"]
[Sun Mar 01 15:25:11.566153 2026] [:error] [pid 38034:tid 38054] [client 20.205.120.43:3531] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaPp1wxtfZjwlJok9K-sDwAAARA"]
[Sun Mar 01 15:25:12.079777 2026] [:error] [pid 38034:tid 38039] [client 20.205.120.43:4514] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaPp2AxtfZjwlJok9K-sEgAAAQM"]
[Sun Mar 01 15:25:12.597130 2026] [:error] [pid 44644:tid 44669] [client 20.205.120.43:1743] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaPp2J3RJaXMcw3y9V-hvwAAABY"]
[Sun Mar 01 15:25:13.074121 2026] [:error] [pid 42619:tid 42641] [client 20.205.120.43:1742] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaPp2R_zUXcYaZE4AOePyAAAAVQ"]
[Sun Mar 01 15:40:08.543526 2026] [:error] [pid 41967:tid 41969] [client 85.11.167.108:51523] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaPtWIO1bqY181I02eGQTQAAAIA"], referer: https://www.bing.com/
[Sun Mar 01 16:13:15.314307 2026] [:error] [pid 40750:tid 40757] [client 45.86.202.157:37133] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaP1GwfBuk03yQKDyqvRKAAAAcQ"]
[Sun Mar 01 16:13:19.733501 2026] [:error] [pid 7133:tid 7142] [client 45.86.202.189:34091] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaP1H_Ctubh8pR64qB_M5QAAAEc"]
[Sun Mar 01 16:13:28.320617 2026] [:error] [pid 40750:tid 40753] [client 45.86.202.201:35115] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaP1KAfBuk03yQKDyqvRoAAAAcA"]
[Sun Mar 01 16:13:34.655890 2026] [:error] [pid 38241:tid 38266] [client 45.86.202.168:60851] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaP1LvKRPk6YnJBxw_xpQgAAANY"]
[Sun Mar 01 16:13:43.817294 2026] [:error] [pid 41967:tid 41984] [client 45.86.202.182:36009] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaP1N4O1bqY181I02eGVrAAAAI8"]
[Sun Mar 01 16:13:46.367225 2026] [:error] [pid 38241:tid 38258] [client 45.86.202.200:61619] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaP1OvKRPk6YnJBxw_xpagAAAM4"]
[Sun Mar 01 16:13:46.907545 2026] [:error] [pid 41342:tid 41364] [client 45.86.202.200:51103] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaP1Oo4iJ6RAS5CatDlMbQAAAhM"]
[Sun Mar 01 16:13:47.515003 2026] [:error] [pid 7133:tid 7142] [client 45.86.202.159:39527] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaP1O_Ctubh8pR64qB_NeAAAAEc"]
[Sun Mar 01 16:13:48.224098 2026] [:error] [pid 41967:tid 41972] [client 45.86.202.162:60627] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaP1PIO1bqY181I02eGVtgAAAIM"]
[Sun Mar 01 16:13:48.822007 2026] [:error] [pid 41967:tid 41982] [client 45.86.202.196:59849] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaP1PIO1bqY181I02eGVuAAAAI0"]
[Sun Mar 01 16:13:51.436486 2026] [:error] [pid 38241:tid 38255] [client 45.86.202.192:37615] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaP1P_KRPk6YnJBxw_xpiQAAAMs"]
[Sun Mar 01 16:13:54.098241 2026] [:error] [pid 7165:tid 7187] [client 45.86.202.200:45585] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aaP1QhRjCrA8qWBjgG88cwAAAlQ"]
[Sun Mar 01 16:13:58.474966 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.175:54693] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaP1RvKRPk6YnJBxw_xprgAAANU"]
[Sun Mar 01 16:14:00.748965 2026] [:error] [pid 7165:tid 7174] [client 45.86.202.159:46839] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaP1SBRjCrA8qWBjgG88jAAAAkc"]
[Sun Mar 01 16:14:03.297290 2026] [:error] [pid 41967:tid 41972] [client 45.86.202.191:31287] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaP1S4O1bqY181I02eGV2AAAAIM"]
[Sun Mar 01 16:14:12.757662 2026] [:error] [pid 40750:tid 40763] [client 45.86.202.173:60645] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaP1VAfBuk03yQKDyqvSVQAAAco"]
[Sun Mar 01 16:14:15.457886 2026] [:error] [pid 7133:tid 7158] [client 45.86.202.170:48777] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaP1V_Ctubh8pR64qB_N_QAAAFc"]
[Sun Mar 01 16:14:18.363482 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.192:47483] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaP1WvKRPk6YnJBxw_xp9AAAAMI"]
[Sun Mar 01 16:14:20.957834 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.162:23353] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaP1XAxtfZjwlJok9K_WxwAAARA"]
[Sun Mar 01 16:14:29.978013 2026] [:error] [pid 38241:tid 38252] [client 45.86.202.193:58651] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaP1ZfKRPk6YnJBxw_xqOAAAAMg"]
[Sun Mar 01 16:14:31.980829 2026] [:error] [pid 7133:tid 7142] [client 45.86.202.163:61777] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaP1Z_Ctubh8pR64qB_OFQAAAEc"]
[Sun Mar 01 16:14:34.401505 2026] [:error] [pid 40750:tid 40770] [client 45.86.202.225:46691] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaP1agfBuk03yQKDyqvSowAAAdE"]
[Sun Mar 01 16:14:35.033697 2026] [:error] [pid 7133:tid 7156] [client 45.86.202.198:26251] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaP1a_Ctubh8pR64qB_OIgAAAFU"]
[Sun Mar 01 16:14:35.616946 2026] [:error] [pid 7133:tid 7147] [client 45.86.202.194:64005] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaP1a_Ctubh8pR64qB_OJAAAAEw"]
[Sun Mar 01 16:14:41.712319 2026] [:error] [pid 7165:tid 7188] [client 45.86.202.196:52379] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaP1cRRjCrA8qWBjgG89JAAAAlU"]
[Sun Mar 01 16:14:42.262776 2026] [:error] [pid 38241:tid 38255] [client 45.86.202.190:64483] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaP1cvKRPk6YnJBxw_xqVwAAAMs"]
[Sun Mar 01 16:14:42.850037 2026] [:error] [pid 7133:tid 7156] [client 45.86.202.164:39381] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaP1cvCtubh8pR64qB_OLgAAAFU"]
[Sun Mar 01 16:15:02.602399 2026] [:error] [pid 7165:tid 7175] [client 45.86.202.186:32747] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaP1hhRjCrA8qWBjgG89dQAAAkg"]
[Sun Mar 01 16:15:07.672008 2026] [:error] [pid 42619:tid 42635] [client 45.86.202.178:28345] [client 45.86.202.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.178, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaP1ix_zUXcYaZE4AOeYkAAAAU4"]
[Sun Mar 01 16:15:28.289856 2026] [:error] [pid 42619:tid 42628] [client 45.86.202.178:28345] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaP1oB_zUXcYaZE4AOeYnQAAAUc"]
[Sun Mar 01 16:15:32.804515 2026] [:error] [pid 38241:tid 38263] [client 45.86.202.189:51203] [client 45.86.202.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.189, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaP1pPKRPk6YnJBxw_xrIAAAANM"]
[Sun Mar 01 16:15:36.085590 2026] [:error] [pid 38241:tid 38260] [client 45.86.202.189:51203] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaP1qPKRPk6YnJBxw_xrKQAAANA"]
[Sun Mar 01 16:15:49.176428 2026] [:error] [pid 41967:tid 41969] [client 45.86.202.171:36611] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaP1tYO1bqY181I02eGWiAAAAIA"]
[Sun Mar 01 16:16:01.417316 2026] [:error] [pid 7165:tid 7181] [client 45.86.202.182:25415] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaP1wRRjCrA8qWBjgG8-mwAAAk4"]
[Sun Mar 01 16:16:05.832576 2026] [:error] [pid 7165:tid 7174] [client 45.86.202.184:37999] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaP1xRRjCrA8qWBjgG8-uwAAAkc"]
[Sun Mar 01 16:16:10.678608 2026] [:error] [pid 7165:tid 7175] [client 45.86.202.163:35051] [client 45.86.202.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.163, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaP1yhRjCrA8qWBjgG8-8QAAAkg"]
[Sun Mar 01 16:16:12.175756 2026] [:error] [pid 7165:tid 7187] [client 45.86.202.163:35051] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaP1zBRjCrA8qWBjgG8--AAAAlQ"]
[Sun Mar 01 16:16:37.048361 2026] [:error] [pid 40750:tid 40761] [client 45.86.202.225:24727] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaP15QfBuk03yQKDyqvUswAAAcg"]
[Sun Mar 01 16:16:41.885105 2026] [:error] [pid 33822:tid 33843] [client 45.86.202.168:26575] [client 45.86.202.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.168, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaP16W6W3ygu1YVssubL3gAAApM"]
[Sun Mar 01 16:16:49.088695 2026] [:error] [pid 33822:tid 33835] [client 45.86.202.168:26575] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaP18W6W3ygu1YVssubL5QAAAos"]
[Sun Mar 01 16:16:51.679583 2026] [:error] [pid 41967:tid 41986] [client 45.86.202.180:50599] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaP184O1bqY181I02eGXIwAAAJE"]
[Sun Mar 01 16:16:57.150735 2026] [:error] [pid 7165:tid 7182] [client 45.86.202.163:49657] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaP1-RRjCrA8qWBjgG8_ygAAAk8"]
[Sun Mar 01 16:17:04.104084 2026] [:error] [pid 40750:tid 40773] [client 45.86.202.164:23873] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaP2AAfBuk03yQKDyqvU4QAAAdQ"]
[Sun Mar 01 16:17:04.810605 2026] [:error] [pid 41967:tid 41969] [client 45.86.202.192:20533] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaP2AIO1bqY181I02eGXawAAAIA"]
[Sun Mar 01 16:17:13.246021 2026] [:error] [pid 7165:tid 7182] [client 45.86.202.193:45221] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaP2CRRjCrA8qWBjgG9AEgAAAk8"]
[Sun Mar 01 16:17:14.158925 2026] [:error] [pid 33822:tid 33833] [client 45.86.202.205:46695] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaP2Cm6W3ygu1YVssubL8gAAAok"]
[Sun Mar 01 16:17:20.271953 2026] [:error] [pid 38034:tid 38049] [client 45.86.202.156:58553] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaP2EAxtfZjwlJok9K_XFgAAAQs"]
[Sun Mar 01 16:17:26.648172 2026] [:error] [pid 40750:tid 40769] [client 45.86.202.194:27375] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaP2FgfBuk03yQKDyqvVSQAAAdA"]
[Sun Mar 01 16:17:30.539460 2026] [:error] [pid 40750:tid 40754] [client 45.86.202.169:33295] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaP2GgfBuk03yQKDyqvVXAAAAcE"]
[Sun Mar 01 16:17:35.915500 2026] [:error] [pid 7165:tid 7172] [client 45.86.202.176:47913] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaP2HxRjCrA8qWBjgG9AbQAAAkU"]
[Sun Mar 01 16:17:48.926238 2026] [:error] [pid 7165:tid 7191] [client 45.86.202.198:44381] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaP2LBRjCrA8qWBjgG9AlgAAAlg"]
[Sun Mar 01 16:17:50.847429 2026] [:error] [pid 7165:tid 7187] [client 45.86.202.186:51397] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaP2LhRjCrA8qWBjgG9AogAAAlQ"]
[Sun Mar 01 16:17:52.390929 2026] [:error] [pid 40750:tid 40762] [client 45.86.202.199:35047] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaP2MAfBuk03yQKDyqvV9AAAAck"]
[Sun Mar 01 16:17:53.897464 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.198:63655] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaP2Meu0U4o7eSImsVRURgAAAY8"]
[Sun Mar 01 16:17:59.202260 2026] [:error] [pid 40750:tid 40774] [client 45.86.202.158:31651] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaP2NwfBuk03yQKDyqvWEwAAAdU"]
[Sun Mar 01 16:17:59.774712 2026] [:error] [pid 40750:tid 40756] [client 45.86.202.181:45875] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaP2NwfBuk03yQKDyqvWFgAAAcM"]
[Sun Mar 01 16:18:04.665799 2026] [:error] [pid 40750:tid 40766] [client 45.86.202.182:26687] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaP2PAfBuk03yQKDyqvWJwAAAc0"]
[Sun Mar 01 16:18:05.301160 2026] [:error] [pid 7133:tid 7143] [client 45.86.202.159:49431] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaP2PfCtubh8pR64qB_O9AAAAEg"]
[Sun Mar 01 16:18:05.948759 2026] [:error] [pid 38241:tid 38261] [client 45.86.202.190:43127] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaP2PfKRPk6YnJBxw_xsogAAANE"]
[Sun Mar 01 16:18:06.587743 2026] [:error] [pid 7165:tid 7182] [client 45.86.202.191:50739] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaP2PhRjCrA8qWBjgG9A4AAAAk8"]
[Sun Mar 01 16:18:07.552352 2026] [:error] [pid 33822:tid 33836] [client 45.86.202.195:48001] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaP2P26W3ygu1YVssubMhgAAAow"]
[Sun Mar 01 16:18:08.917261 2026] [:error] [pid 42619:tid 42638] [client 45.86.202.171:40143] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaP2QB_zUXcYaZE4AOeYvwAAAVE"]
[Sun Mar 01 16:18:17.216290 2026] [:error] [pid 40750:tid 40760] [client 45.86.202.187:47097] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaP2SQfBuk03yQKDyqvWOgAAAcc"]
[Sun Mar 01 16:18:30.229563 2026] [:error] [pid 33822:tid 33828] [client 45.86.202.162:55121] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaP2Vm6W3ygu1YVssubMswAAAoQ"]
[Sun Mar 01 16:18:33.547896 2026] [:error] [pid 40750:tid 40776] [client 45.86.202.191:34739] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaP2WQfBuk03yQKDyqvWhgAAAdc"]
[Sun Mar 01 16:18:34.117012 2026] [:error] [pid 40750:tid 40754] [client 45.86.202.187:58229] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaP2WgfBuk03yQKDyqvWigAAAcE"]
[Sun Mar 01 16:18:40.420007 2026] [:error] [pid 7133:tid 7141] [client 45.86.202.177:20523] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaP2YPCtubh8pR64qB_PIwAAAEY"]
[Sun Mar 01 16:18:45.768531 2026] [proxy_fcgi:error] [pid 40750:tid 40772] [client 45.86.202.159:50189] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 16:18:46.116746 2026] [proxy_fcgi:error] [pid 40750:tid 40774] [client 45.86.202.159:50189] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 16:18:46.395086 2026] [proxy_fcgi:error] [pid 40750:tid 40755] [client 45.86.202.159:50189] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 16:18:47.972373 2026] [:error] [pid 40750:tid 40761] [client 45.86.202.159:50189] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaP2ZwfBuk03yQKDyqvW8wAAAcg"]
[Sun Mar 01 16:18:48.557234 2026] [:error] [pid 40750:tid 40755] [client 45.86.202.200:52375] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaP2aAfBuk03yQKDyqvW-QAAAcI"]
[Sun Mar 01 16:18:49.153629 2026] [:error] [pid 40750:tid 40768] [client 45.86.202.173:59287] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaP2aQfBuk03yQKDyqvW-wAAAc8"]
[Sun Mar 01 16:18:49.694331 2026] [:error] [pid 7165:tid 7191] [client 45.86.202.179:30655] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaP2aRRjCrA8qWBjgG9BVQAAAlg"]
[Sun Mar 01 16:18:50.317667 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.204:58459] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaP2avKRPk6YnJBxw_xs5gAAAMI"]
[Sun Mar 01 16:18:51.020412 2026] [:error] [pid 7165:tid 7173] [client 45.86.202.193:43897] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaP2axRjCrA8qWBjgG9BXQAAAkY"]
[Sun Mar 01 16:18:53.422978 2026] [:error] [pid 7165:tid 7175] [client 45.86.202.162:32087] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaP2bRRjCrA8qWBjgG9BcQAAAkg"]
[Sun Mar 01 16:18:54.045111 2026] [:error] [pid 40750:tid 40753] [client 45.86.202.193:40797] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaP2bgfBuk03yQKDyqvXEAAAAcA"]
[Sun Mar 01 16:18:54.714314 2026] [:error] [pid 7165:tid 7170] [client 45.86.202.190:43397] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaP2bhRjCrA8qWBjgG9BdgAAAkM"]
[Sun Mar 01 16:18:55.341717 2026] [:error] [pid 40750:tid 40769] [client 45.86.202.186:57743] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaP2bwfBuk03yQKDyqvXHgAAAdA"]
[Sun Mar 01 16:18:58.156171 2026] [:error] [pid 38241:tid 38255] [client 45.86.202.204:62051] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaP2cvKRPk6YnJBxw_xs8gAAAMs"]
[Sun Mar 01 16:18:59.281786 2026] [:error] [pid 7133:tid 7156] [client 45.86.202.185:45991] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaP2c_Ctubh8pR64qB_PLgAAAFU"]
[Sun Mar 01 16:19:04.517540 2026] [:error] [pid 7165:tid 7179] [client 45.86.202.169:53887] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaP2eBRjCrA8qWBjgG9BiwAAAkw"]
[Sun Mar 01 16:19:07.622753 2026] [:error] [pid 7165:tid 7189] [client 45.86.202.173:62661] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaP2exRjCrA8qWBjgG9BlgAAAlY"]
[Sun Mar 01 16:19:14.129408 2026] [:error] [pid 37032:tid 37040] [client 45.86.202.172:62989] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaP2guu0U4o7eSImsVRUTQAAAYY"]
[Sun Mar 01 16:19:23.175236 2026] [:error] [pid 38241:tid 38252] [client 45.86.202.163:29335] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaP2i_KRPk6YnJBxw_xtPgAAAMg"]
[Sun Mar 01 16:19:25.718417 2026] [:error] [pid 7165:tid 7179] [client 45.86.202.197:43719] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaP2jRRjCrA8qWBjgG9BqwAAAkw"]
[Sun Mar 01 16:19:52.641797 2026] [:error] [pid 40750:tid 40769] [client 45.86.202.159:56767] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaP2qAfBuk03yQKDyqvX7gAAAdA"]
[Sun Mar 01 16:19:53.457646 2026] [:error] [pid 7133:tid 7143] [client 45.86.202.165:57657] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaP2qfCtubh8pR64qB_PiQAAAEg"]
[Sun Mar 01 16:19:54.024371 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.190:44965] [client 45.86.202.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.190, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaP2qvKRPk6YnJBxw_xtfAAAAM8"]
[Sun Mar 01 16:19:57.640447 2026] [:error] [pid 38241:tid 38263] [client 45.86.202.190:44965] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaP2rfKRPk6YnJBxw_xtiAAAANM"]
[Sun Mar 01 16:20:01.976757 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.203:39903] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaP2sfKRPk6YnJBxw_xtogAAAMI"]
[Sun Mar 01 16:20:03.049280 2026] [:error] [pid 7165:tid 7177] [client 45.86.202.201:35961] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaP2sxRjCrA8qWBjgG9CGQAAAko"]
[Sun Mar 01 16:20:09.665819 2026] [:error] [pid 7165:tid 7172] [client 45.86.202.160:37397] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaP2uRRjCrA8qWBjgG9CRgAAAkU"]
[Sun Mar 01 16:20:10.370444 2026] [:error] [pid 38241:tid 38252] [client 45.86.202.181:23297] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aaP2uvKRPk6YnJBxw_xtwAAAAMg"]
[Sun Mar 01 16:20:21.029035 2026] [:error] [pid 7165:tid 7187] [client 45.86.202.163:24689] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaP2xRRjCrA8qWBjgG9CjAAAAlQ"]
[Sun Mar 01 16:20:24.206485 2026] [proxy_fcgi:error] [pid 7165:tid 7187] [client 45.86.202.173:40033] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 16:20:26.159634 2026] [:error] [pid 7165:tid 7185] [client 45.86.202.173:40033] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaP2yhRjCrA8qWBjgG9CpQAAAlI"]
[Sun Mar 01 16:20:27.015913 2026] [:error] [pid 40750:tid 40773] [client 45.86.202.163:26093] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaP2ywfBuk03yQKDyqvYSgAAAdQ"]
[Sun Mar 01 16:20:31.381841 2026] [:error] [pid 40750:tid 40756] [client 45.86.202.161:21115] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaP2zwfBuk03yQKDyqvYYwAAAcM"]
[Sun Mar 01 16:20:32.091700 2026] [:error] [pid 38241:tid 38244] [client 45.86.202.169:36151] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaP20PKRPk6YnJBxw_xt6wAAAMA"]
[Sun Mar 01 16:20:44.905987 2026] [:error] [pid 7165:tid 7181] [client 45.86.202.156:62667] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaP23BRjCrA8qWBjgG9C7gAAAk4"]
[Sun Mar 01 16:20:45.502614 2026] [:error] [pid 40750:tid 40767] [client 45.86.202.198:56303] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaP23QfBuk03yQKDyqvYrAAAAc4"]
[Sun Mar 01 16:20:53.515069 2026] [:error] [pid 40750:tid 40756] [client 45.86.202.192:64473] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaP25QfBuk03yQKDyqvY5AAAAcM"]
[Sun Mar 01 16:20:54.148308 2026] [:error] [pid 7165:tid 7174] [client 45.86.202.198:59761] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaP25hRjCrA8qWBjgG9DDQAAAkc"]
[Sun Mar 01 16:20:54.903061 2026] [:error] [pid 40750:tid 40765] [client 45.86.202.203:47121] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaP25gfBuk03yQKDyqvY7gAAAcw"]
[Sun Mar 01 16:21:03.519705 2026] [:error] [pid 40750:tid 40771] [client 45.86.202.169:22223] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaP27wfBuk03yQKDyqvZFQAAAdI"]
[Sun Mar 01 16:21:05.793370 2026] [:error] [pid 40750:tid 40775] [client 45.86.202.193:59059] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaP28QfBuk03yQKDyqvZIAAAAdY"]
[Sun Mar 01 16:21:16.692279 2026] [:error] [pid 41780:tid 41785] [client 45.86.202.164:21153] [client 45.86.202.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.164, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/js/wp-login.php"] [unique_id "aaP2_MONkVoocLIqzy0UZwAAA8I"]
[Sun Mar 01 16:21:30.197488 2026] [:error] [pid 41780:tid 41792] [client 45.86.202.164:21153] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaP3CsONkVoocLIqzy0UbgAAA8k"]
[Sun Mar 01 16:21:30.844613 2026] [:error] [pid 37032:tid 37043] [client 45.86.202.165:51955] [client 45.86.202.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.165, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaP3Cuu0U4o7eSImsVRUgwAAAYk"]
[Sun Mar 01 16:21:50.231540 2026] [proxy_fcgi:error] [pid 37032:tid 37048] [client 45.86.202.165:51955] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 16:22:14.027793 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.165:51955] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaP3Nuu0U4o7eSImsVRUwwAAAYI"]
[Sun Mar 01 16:22:20.349906 2026] [:error] [pid 40750:tid 40755] [client 45.86.202.205:38389] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaP3PAfBuk03yQKDyqvbIgAAAcI"]
[Sun Mar 01 16:22:25.333586 2026] [:error] [pid 40750:tid 40755] [client 45.86.202.197:54497] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaP3QQfBuk03yQKDyqvbeAAAAcI"]
[Sun Mar 01 16:22:36.104623 2026] [autoindex:error] [pid 40750:tid 40765] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:36.398365 2026] [autoindex:error] [pid 40750:tid 40761] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:36.738406 2026] [autoindex:error] [pid 40750:tid 40768] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:37.048015 2026] [autoindex:error] [pid 40750:tid 40762] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:39.950985 2026] [autoindex:error] [pid 40750:tid 40774] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:40.579090 2026] [autoindex:error] [pid 40750:tid 40769] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:40.879404 2026] [autoindex:error] [pid 40750:tid 40761] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:42.338429 2026] [autoindex:error] [pid 40750:tid 40761] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:42.734769 2026] [autoindex:error] [pid 40750:tid 40767] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:43.401499 2026] [autoindex:error] [pid 40750:tid 40767] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:45.276320 2026] [autoindex:error] [pid 40750:tid 40767] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:49.577092 2026] [autoindex:error] [pid 40750:tid 40774] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:50.231634 2026] [autoindex:error] [pid 40750:tid 40771] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:50.542470 2026] [autoindex:error] [pid 40750:tid 40756] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:56.130614 2026] [autoindex:error] [pid 40750:tid 40768] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:22:58.260298 2026] [autoindex:error] [pid 40750:tid 40767] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:02.100137 2026] [autoindex:error] [pid 40750:tid 40769] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:02.510107 2026] [autoindex:error] [pid 40750:tid 40755] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:02.911560 2026] [autoindex:error] [pid 40750:tid 40769] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:15.466600 2026] [autoindex:error] [pid 40750:tid 40772] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:17.830625 2026] [autoindex:error] [pid 40750:tid 40756] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:18.171150 2026] [autoindex:error] [pid 40750:tid 40774] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:19.393760 2026] [autoindex:error] [pid 40750:tid 40766] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:19.705822 2026] [autoindex:error] [pid 40750:tid 40759] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:23:19.979253 2026] [autoindex:error] [pid 40750:tid 40764] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:16.623949 2026] [autoindex:error] [pid 40750:tid 40759] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:16.929916 2026] [autoindex:error] [pid 40750:tid 40772] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:17.229423 2026] [autoindex:error] [pid 40750:tid 40775] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:17.518352 2026] [autoindex:error] [pid 40750:tid 40776] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:22.653079 2026] [autoindex:error] [pid 40750:tid 40753] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:24.840047 2026] [autoindex:error] [pid 40750:tid 40760] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:25.135468 2026] [autoindex:error] [pid 40750:tid 40775] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:26.708782 2026] [autoindex:error] [pid 40750:tid 40757] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:29.021713 2026] [autoindex:error] [pid 40750:tid 40775] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:29.324270 2026] [autoindex:error] [pid 40750:tid 40774] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:29.617492 2026] [autoindex:error] [pid 40750:tid 40770] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:24:29.903517 2026] [autoindex:error] [pid 40750:tid 40764] [client 45.86.202.183:44907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:14.287586 2026] [autoindex:error] [pid 38034:tid 38045] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:36.134660 2026] [autoindex:error] [pid 38034:tid 38058] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:44.897917 2026] [autoindex:error] [pid 38034:tid 38056] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:45.263512 2026] [autoindex:error] [pid 38034:tid 38043] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:53.177124 2026] [autoindex:error] [pid 38034:tid 38057] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:53.458676 2026] [autoindex:error] [pid 38034:tid 38039] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:53.764256 2026] [autoindex:error] [pid 38034:tid 38062] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:54.078592 2026] [autoindex:error] [pid 38034:tid 38058] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:54.469811 2026] [autoindex:error] [pid 38034:tid 38055] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:54.779401 2026] [autoindex:error] [pid 38034:tid 38040] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:55.077509 2026] [autoindex:error] [pid 38034:tid 38037] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:25:55.354569 2026] [autoindex:error] [pid 38034:tid 38061] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:26:31.695363 2026] [autoindex:error] [pid 38034:tid 38045] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:26:36.187696 2026] [autoindex:error] [pid 38034:tid 38054] [client 45.86.202.173:59449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 17:20:40.591503 2026] [autoindex:error] [pid 7165:tid 7186] [client 213.199.39.130:53987] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 01 17:28:53.664289 2026] [:error] [pid 40750:tid 40767] [client 20.220.232.101:17365] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaQG1QfBuk03yQKDyqsv-QAAAc4"]
[Sun Mar 01 17:28:54.099836 2026] [:error] [pid 7165:tid 7184] [client 20.220.232.101:17291] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaQG1hRjCrA8qWBjgG-ALwAAAlE"]
[Sun Mar 01 17:28:54.763380 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17354] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaQG1hRjCrA8qWBjgG-ANAAAAlQ"]
[Sun Mar 01 17:28:55.229948 2026] [:error] [pid 7165:tid 7168] [client 20.220.232.101:17390] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aaQG1xRjCrA8qWBjgG-APQAAAkE"]
[Sun Mar 01 17:28:56.003684 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:17362] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaQG2BRjCrA8qWBjgG-AQgAAAkQ"]
[Sun Mar 01 17:28:56.633936 2026] [:error] [pid 40750:tid 40776] [client 20.220.232.101:17382] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaQG2AfBuk03yQKDyqswCQAAAdc"]
[Sun Mar 01 17:28:57.319005 2026] [:error] [pid 38241:tid 38257] [client 20.220.232.101:17369] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaQG2fKRPk6YnJBxw_yYHgAAAM0"]
[Sun Mar 01 17:28:58.024802 2026] [:error] [pid 33822:tid 33841] [client 20.220.232.101:17298] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "aaQG2m6W3ygu1YVssubg8wAAApE"]
[Sun Mar 01 17:28:58.554368 2026] [:error] [pid 7165:tid 7174] [client 20.220.232.101:17367] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaQG2hRjCrA8qWBjgG-ATAAAAkc"]
[Sun Mar 01 17:28:59.093775 2026] [:error] [pid 40750:tid 40757] [client 20.220.232.101:17384] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaQG2wfBuk03yQKDyqswEQAAAcQ"]
[Sun Mar 01 17:28:59.606093 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:17402] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaQG2wfBuk03yQKDyqswGAAAAcc"]
[Sun Mar 01 17:29:00.119480 2026] [:error] [pid 40750:tid 40771] [client 20.220.232.101:17292] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aaQG3AfBuk03yQKDyqswHwAAAdI"]
[Sun Mar 01 17:29:00.804245 2026] [:error] [pid 40750:tid 40765] [client 20.220.232.101:17372] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaQG3AfBuk03yQKDyqswKgAAAcw"]
[Sun Mar 01 17:29:01.407676 2026] [:error] [pid 7165:tid 7190] [client 20.220.232.101:17286] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaQG3RRjCrA8qWBjgG-AUQAAAlc"]
[Sun Mar 01 17:29:02.244962 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17356] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaQG3gfBuk03yQKDyqswPQAAAcI"]
[Sun Mar 01 17:29:02.839881 2026] [:error] [pid 40750:tid 40761] [client 20.220.232.101:17231] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "aaQG3gfBuk03yQKDyqswRAAAAcg"]
[Sun Mar 01 17:29:03.496279 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:17370] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaQG3wfBuk03yQKDyqswSQAAAcM"]
[Sun Mar 01 17:29:04.075087 2026] [:error] [pid 38241:tid 38245] [client 20.220.232.101:17374] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaQG4PKRPk6YnJBxw_yYNAAAAME"]
[Sun Mar 01 17:29:04.548791 2026] [:error] [pid 7133:tid 7153] [client 20.220.232.101:17300] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaQG4PCtubh8pR64qB_sEAAAAFI"]
[Sun Mar 01 17:29:05.185160 2026] [:error] [pid 40750:tid 40759] [client 20.220.232.101:17350] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aaQG4QfBuk03yQKDyqswVQAAAcY"]
[Sun Mar 01 17:29:05.675574 2026] [:error] [pid 7133:tid 7144] [client 20.220.232.101:17235] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaQG4fCtubh8pR64qB_sGAAAAEk"]
[Sun Mar 01 17:29:06.842029 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:17363] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaQG4vKRPk6YnJBxw_yYRAAAANA"]
[Sun Mar 01 17:29:08.371363 2026] [:error] [pid 40750:tid 40775] [client 20.220.232.101:17352] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaQG5AfBuk03yQKDyqswYwAAAdY"]
[Sun Mar 01 17:29:09.346667 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17380] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aaQG5QfBuk03yQKDyqswbAAAAcI"]
[Sun Mar 01 17:29:10.104086 2026] [:error] [pid 7165:tid 7190] [client 20.220.232.101:17403] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaQG5hRjCrA8qWBjgG-AXgAAAlc"]
[Sun Mar 01 17:29:10.909757 2026] [:error] [pid 37032:tid 37034] [client 20.220.232.101:17349] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaQG5uu0U4o7eSImsVRgVwAAAYA"]
[Sun Mar 01 17:29:11.414828 2026] [:error] [pid 38241:tid 38261] [client 20.220.232.101:17280] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaQG5_KRPk6YnJBxw_yYXQAAANE"]
[Sun Mar 01 17:29:12.015510 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:17290] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aaQG6BRjCrA8qWBjgG-AaAAAAk0"]
[Sun Mar 01 17:29:12.687562 2026] [:error] [pid 38241:tid 38253] [client 20.220.232.101:17345] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aaQG6PKRPk6YnJBxw_yYYwAAAMk"]
[Sun Mar 01 17:29:13.140542 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:17375] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aaQG6QfBuk03yQKDyqswhgAAAc8"]
[Sun Mar 01 17:29:13.739362 2026] [:error] [pid 7165:tid 7181] [client 20.220.232.101:17346] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aaQG6RRjCrA8qWBjgG-AbAAAAk4"]
[Sun Mar 01 17:29:14.539060 2026] [:error] [pid 33822:tid 33845] [client 20.220.232.101:17379] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aaQG6m6W3ygu1YVssubg_gAAApU"]
[Sun Mar 01 17:29:15.101725 2026] [:error] [pid 7133:tid 7155] [client 20.220.232.101:17299] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aaQG6_Ctubh8pR64qB_sIwAAAFQ"]
[Sun Mar 01 17:29:15.965658 2026] [:error] [pid 41342:tid 41355] [client 20.220.232.101:17388] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aaQG644iJ6RAS5CatDlRnAAAAgo"]
[Sun Mar 01 17:29:16.562187 2026] [:error] [pid 38034:tid 38062] [client 20.220.232.101:17216] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aaQG7AxtfZjwlJok9K_nlAAAARg"]
[Sun Mar 01 17:29:17.385868 2026] [:error] [pid 7133:tid 7148] [client 20.220.232.101:17303] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aaQG7fCtubh8pR64qB_sKQAAAE0"]
[Sun Mar 01 17:29:18.029406 2026] [:error] [pid 41342:tid 41353] [client 20.220.232.101:17399] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aaQG7o4iJ6RAS5CatDlRnwAAAgg"]
[Sun Mar 01 17:29:18.536373 2026] [:error] [pid 38241:tid 38247] [client 20.220.232.101:17308] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aaQG7vKRPk6YnJBxw_yYcwAAAMM"]
[Sun Mar 01 17:29:19.580360 2026] [:error] [pid 7165:tid 7182] [client 20.220.232.101:17218] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aaQG7xRjCrA8qWBjgG-AeAAAAk8"]
[Sun Mar 01 17:29:20.317984 2026] [:error] [pid 7133:tid 7153] [client 20.220.232.101:17395] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aaQG8PCtubh8pR64qB_sMwAAAFI"]
[Sun Mar 01 17:29:21.079267 2026] [:error] [pid 7165:tid 7186] [client 20.220.232.101:17404] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aaQG8RRjCrA8qWBjgG-AgQAAAlM"]
[Sun Mar 01 17:29:21.664711 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:17378] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aaQG8fKRPk6YnJBxw_yYfgAAANM"]
[Sun Mar 01 17:29:22.457861 2026] [:error] [pid 33822:tid 33840] [client 20.220.232.101:17387] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aaQG8m6W3ygu1YVssubhBAAAApA"]
[Sun Mar 01 17:29:23.335498 2026] [:error] [pid 7165:tid 7176] [client 20.220.232.101:17333] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "aaQG8xRjCrA8qWBjgG-AkwAAAkk"]
[Sun Mar 01 17:29:24.257453 2026] [:error] [pid 38034:tid 38052] [client 20.220.232.101:17371] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aaQG9AxtfZjwlJok9K_nnAAAAQ4"]
[Sun Mar 01 17:29:24.909852 2026] [:error] [pid 7165:tid 7179] [client 20.220.232.101:17401] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aaQG9BRjCrA8qWBjgG-AngAAAkw"]
[Sun Mar 01 17:29:25.509049 2026] [:error] [pid 7165:tid 7176] [client 20.220.232.101:17287] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aaQG9RRjCrA8qWBjgG-AogAAAkk"]
[Sun Mar 01 17:29:25.996289 2026] [:error] [pid 7165:tid 7168] [client 20.220.232.101:17397] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aaQG9RRjCrA8qWBjgG-AqAAAAkE"]
[Sun Mar 01 17:29:26.635613 2026] [:error] [pid 40750:tid 40769] [client 20.220.232.101:17293] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aaQG9gfBuk03yQKDyqswpQAAAdA"]
[Sun Mar 01 17:29:27.499668 2026] [:error] [pid 38241:tid 38259] [client 20.220.232.101:17288] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aaQG9_KRPk6YnJBxw_yYiAAAAM8"]
[Sun Mar 01 17:29:28.211124 2026] [:error] [pid 38241:tid 38251] [client 20.220.232.101:17338] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aaQG-PKRPk6YnJBxw_yYjgAAAMc"]
[Sun Mar 01 17:29:28.973970 2026] [:error] [pid 38241:tid 38246] [client 20.220.232.101:17285] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "aaQG-PKRPk6YnJBxw_yYkwAAAMI"]
[Sun Mar 01 17:29:29.682194 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:17304] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaQG-QfBuk03yQKDyqswvgAAAcM"]
[Sun Mar 01 17:29:30.320733 2026] [:error] [pid 40750:tid 40769] [client 20.220.232.101:17289] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaQG-gfBuk03yQKDyqswywAAAdA"]
[Sun Mar 01 17:29:30.826958 2026] [:error] [pid 7133:tid 7150] [client 20.220.232.101:17302] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaQG-vCtubh8pR64qB_sSAAAAE8"]
[Sun Mar 01 17:29:31.270063 2026] [:error] [pid 7133:tid 7136] [client 20.220.232.101:17393] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaQG-_Ctubh8pR64qB_sSwAAAEE"]
[Sun Mar 01 17:29:31.833827 2026] [:error] [pid 40750:tid 40775] [client 20.220.232.101:17246] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aaQG-wfBuk03yQKDyqsw4AAAAdY"]
[Sun Mar 01 17:29:32.592703 2026] [:error] [pid 7165:tid 7168] [client 20.220.232.101:17319] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aaQG_BRjCrA8qWBjgG-AvwAAAkE"]
[Sun Mar 01 17:29:33.112670 2026] [:error] [pid 38241:tid 38253] [client 20.220.232.101:17317] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aaQG_fKRPk6YnJBxw_yYoQAAAMk"]
[Sun Mar 01 17:29:34.189734 2026] [:error] [pid 40750:tid 40762] [client 20.220.232.101:17281] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "aaQG_gfBuk03yQKDyqsw_gAAAck"]
[Sun Mar 01 17:29:35.084042 2026] [:error] [pid 7165:tid 7175] [client 20.220.232.101:17334] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aaQG_xRjCrA8qWBjgG-A0AAAAkg"]
[Sun Mar 01 17:29:35.561909 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17168] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aaQG_xRjCrA8qWBjgG-A1wAAAlQ"]
[Sun Mar 01 17:29:36.005625 2026] [:error] [pid 7165:tid 7191] [client 20.220.232.101:17305] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aaQHABRjCrA8qWBjgG-A2gAAAlg"]
[Sun Mar 01 17:29:36.457584 2026] [:error] [pid 7165:tid 7174] [client 20.220.232.101:17312] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aaQHABRjCrA8qWBjgG-A3wAAAkc"]
[Sun Mar 01 17:29:37.138127 2026] [:error] [pid 7165:tid 7174] [client 20.220.232.101:17309] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaQHARRjCrA8qWBjgG-A7QAAAkc"]
[Sun Mar 01 17:29:37.905310 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17339] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaQHAQfBuk03yQKDyqsxDgAAAcI"]
[Sun Mar 01 17:29:38.792872 2026] [:error] [pid 7133:tid 7157] [client 20.220.232.101:17360] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaQHAvCtubh8pR64qB_sUwAAAFY"]
[Sun Mar 01 17:29:39.352743 2026] [:error] [pid 7133:tid 7159] [client 20.220.232.101:17297] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaQHA_Ctubh8pR64qB_sVQAAAFg"]
[Sun Mar 01 17:29:39.957718 2026] [:error] [pid 38241:tid 38246] [client 20.220.232.101:17301] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaQHA_KRPk6YnJBxw_yYtAAAAMI"]
[Sun Mar 01 17:29:40.450729 2026] [:error] [pid 38034:tid 38061] [client 20.220.232.101:17313] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaQHBAxtfZjwlJok9K_nqQAAARc"]
[Sun Mar 01 17:29:40.919077 2026] [:error] [pid 7133:tid 7140] [client 20.220.232.101:17306] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaQHBPCtubh8pR64qB_sWAAAAEU"]
[Sun Mar 01 17:29:41.412719 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:17361] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaQHBQfBuk03yQKDyqsxHAAAAcc"]
[Sun Mar 01 17:29:41.972731 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:17385] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaQHBQfBuk03yQKDyqsxHgAAAco"]
[Sun Mar 01 17:29:42.495658 2026] [:error] [pid 38034:tid 38056] [client 20.220.232.101:17407] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaQHBgxtfZjwlJok9K_nqwAAARI"]
[Sun Mar 01 17:29:42.941902 2026] [:error] [pid 38034:tid 38038] [client 20.220.232.101:17311] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaQHBgxtfZjwlJok9K_nrQAAAQI"]
[Sun Mar 01 17:29:43.396303 2026] [:error] [pid 38034:tid 38043] [client 20.220.232.101:17228] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "aaQHBwxtfZjwlJok9K_nrwAAAQU"]
[Sun Mar 01 17:29:43.919193 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17255] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaQHBxRjCrA8qWBjgG-BCwAAAlQ"]
[Sun Mar 01 17:29:44.436686 2026] [:error] [pid 38034:tid 38057] [client 20.220.232.101:17238] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaQHCAxtfZjwlJok9K_nsAAAARM"]
[Sun Mar 01 17:29:45.010903 2026] [:error] [pid 37032:tid 37035] [client 20.220.232.101:17340] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaQHCeu0U4o7eSImsVRgYgAAAYE"]
[Sun Mar 01 17:29:45.498018 2026] [:error] [pid 40750:tid 40769] [client 20.220.232.101:17396] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "aaQHCQfBuk03yQKDyqsxLwAAAdA"]
[Sun Mar 01 17:29:46.076824 2026] [:error] [pid 38241:tid 38247] [client 20.220.232.101:17225] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaQHCvKRPk6YnJBxw_yYyAAAAMM"]
[Sun Mar 01 17:29:46.627678 2026] [:error] [pid 40750:tid 40773] [client 20.220.232.101:17283] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaQHCgfBuk03yQKDyqsxMgAAAdQ"]
[Sun Mar 01 17:29:47.216406 2026] [:error] [pid 38241:tid 38262] [client 20.220.232.101:17240] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaQHC_KRPk6YnJBxw_yYywAAANI"]
[Sun Mar 01 17:29:47.679298 2026] [:error] [pid 40750:tid 40764] [client 20.220.232.101:17282] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "aaQHCwfBuk03yQKDyqsxNwAAAcs"]
[Sun Mar 01 17:29:48.168353 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:17264] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaQHDAfBuk03yQKDyqsxQgAAAdM"]
[Sun Mar 01 17:29:48.773542 2026] [:error] [pid 40750:tid 40764] [client 20.220.232.101:17250] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaQHDAfBuk03yQKDyqsxSwAAAcs"]
[Sun Mar 01 17:29:49.431264 2026] [:error] [pid 7165:tid 7175] [client 20.220.232.101:17405] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaQHDRRjCrA8qWBjgG-BJwAAAkg"]
[Sun Mar 01 17:29:50.195988 2026] [:error] [pid 38241:tid 38267] [client 20.220.232.101:17381] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aaQHDvKRPk6YnJBxw_yY1gAAANc"]
[Sun Mar 01 17:29:50.732504 2026] [:error] [pid 38241:tid 38253] [client 20.220.232.101:17351] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "aaQHDvKRPk6YnJBxw_yY2AAAAMk"]
[Sun Mar 01 17:30:02.435721 2026] [:error] [pid 37032:tid 37036] [client 20.220.232.101:17227] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaQHGuu0U4o7eSImsVRgbwAAAYI"]
[Sun Mar 01 17:30:42.308327 2026] [:error] [pid 7165:tid 7186] [client 20.220.232.101:17328] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaQHQhRjCrA8qWBjgG-CNwAAAlM"]
[Sun Mar 01 17:30:43.203658 2026] [:error] [pid 7133:tid 7135] [client 20.220.232.101:17368] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaQHQ_Ctubh8pR64qB_syAAAAEA"]
[Sun Mar 01 17:30:44.176976 2026] [:error] [pid 38034:tid 38048] [client 20.220.232.101:17294] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaQHRAxtfZjwlJok9K_n6wAAAQo"]
[Sun Mar 01 17:30:44.883332 2026] [:error] [pid 7133:tid 7145] [client 20.220.232.101:17223] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aaQHRPCtubh8pR64qB_syQAAAEo"]
[Sun Mar 01 17:30:45.710628 2026] [:error] [pid 7133:tid 7138] [client 20.220.232.101:17406] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaQHRfCtubh8pR64qB_s0AAAAEM"]
[Sun Mar 01 17:30:46.277904 2026] [:error] [pid 41780:tid 41791] [client 20.220.232.101:17327] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaQHRsONkVoocLIqzy0a7gAAA8g"]
[Sun Mar 01 17:30:46.892138 2026] [:error] [pid 37032:tid 37048] [client 20.220.232.101:17275] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaQHRuu0U4o7eSImsVRghAAAAY4"]
[Sun Mar 01 17:30:47.389886 2026] [:error] [pid 7165:tid 7178] [client 20.220.232.101:17391] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aaQHRxRjCrA8qWBjgG-COgAAAks"]
[Sun Mar 01 17:30:47.931578 2026] [:error] [pid 40750:tid 40754] [client 20.220.232.101:17156] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQHRwfBuk03yQKDyqsyXQAAAcE"]
[Sun Mar 01 17:30:48.532848 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:17392] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQHSAfBuk03yQKDyqsyZQAAAcU"]
[Sun Mar 01 17:30:49.240661 2026] [:error] [pid 7165:tid 7176] [client 20.220.232.101:17226] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQHSRRjCrA8qWBjgG-CPgAAAkk"]
[Sun Mar 01 17:30:49.689766 2026] [:error] [pid 7165:tid 7181] [client 20.220.232.101:17336] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQHSRRjCrA8qWBjgG-CQAAAAk4"]
[Sun Mar 01 17:30:50.379446 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:17220] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaQHShRjCrA8qWBjgG-CRQAAAk0"]
[Sun Mar 01 17:30:50.991236 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:17374] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaQHShRjCrA8qWBjgG-CRwAAAkQ"]
[Sun Mar 01 17:30:51.571933 2026] [:error] [pid 7165:tid 7189] [client 20.220.232.101:17251] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaQHSxRjCrA8qWBjgG-CSwAAAlY"]
[Sun Mar 01 17:30:52.035000 2026] [:error] [pid 7165:tid 7190] [client 20.220.232.101:17376] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaQHTBRjCrA8qWBjgG-CTQAAAlc"]
[Sun Mar 01 17:30:52.707621 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:17170] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaQHTBRjCrA8qWBjgG-CUwAAAk0"]
[Sun Mar 01 17:30:53.485536 2026] [:error] [pid 7165:tid 7174] [client 20.220.232.101:17310] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaQHTRRjCrA8qWBjgG-CXAAAAkc"]
[Sun Mar 01 17:30:54.153975 2026] [:error] [pid 7165:tid 7183] [client 20.220.232.101:17321] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaQHThRjCrA8qWBjgG-CYAAAAlA"]
[Sun Mar 01 17:30:54.985162 2026] [:error] [pid 7133:tid 7144] [client 20.220.232.101:17332] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aaQHTvCtubh8pR64qB_s5AAAAEk"]
[Sun Mar 01 17:30:55.515240 2026] [:error] [pid 41780:tid 41796] [client 20.220.232.101:17261] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaQHT8ONkVoocLIqzy0a8gAAA80"]
[Sun Mar 01 17:30:56.159060 2026] [:error] [pid 40750:tid 40766] [client 20.220.232.101:17276] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaQHUAfBuk03yQKDyqsygAAAAc0"]
[Sun Mar 01 17:30:56.798824 2026] [:error] [pid 41780:tid 41790] [client 20.220.232.101:17178] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaQHUMONkVoocLIqzy0a9AAAA8c"]
[Sun Mar 01 17:30:57.438951 2026] [:error] [pid 40750:tid 40765] [client 20.220.232.101:17257] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaQHUQfBuk03yQKDyqsykAAAAcw"]
[Sun Mar 01 17:30:58.043812 2026] [:error] [pid 40750:tid 40760] [client 20.220.232.101:17314] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaQHUgfBuk03yQKDyqsykwAAAcc"]
[Sun Mar 01 17:30:58.790874 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:17316] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaQHUvKRPk6YnJBxw_yZoAAAANA"]
[Sun Mar 01 17:30:59.624755 2026] [:error] [pid 33822:tid 33835] [client 20.220.232.101:17155] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaQHU26W3ygu1YVssubhagAAAos"]
[Sun Mar 01 17:31:00.246748 2026] [:error] [pid 33822:tid 33825] [client 20.220.232.101:17398] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaQHVG6W3ygu1YVssubhbAAAAoE"]
[Sun Mar 01 17:31:01.212241 2026] [:error] [pid 33822:tid 33830] [client 20.220.232.101:17247] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaQHVW6W3ygu1YVssubhbwAAAoY"]
[Sun Mar 01 17:31:02.195214 2026] [:error] [pid 7165:tid 7177] [client 20.220.232.101:17307] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaQHVhRjCrA8qWBjgG-CdAAAAko"]
[Sun Mar 01 17:31:03.312777 2026] [:error] [pid 7133:tid 7151] [client 20.220.232.101:17262] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaQHV_Ctubh8pR64qB_s9wAAAFA"]
[Sun Mar 01 17:31:04.176824 2026] [:error] [pid 38034:tid 38058] [client 20.220.232.101:17157] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaQHWAxtfZjwlJok9K_n-wAAARQ"]
[Sun Mar 01 17:31:05.154259 2026] [:error] [pid 33822:tid 33847] [client 20.220.232.101:17232] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaQHWW6W3ygu1YVssubhdAAAApc"]
[Sun Mar 01 17:31:05.896986 2026] [:error] [pid 33822:tid 33829] [client 20.220.232.101:17331] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaQHWW6W3ygu1YVssubhdQAAAoU"]
[Sun Mar 01 17:31:06.561929 2026] [:error] [pid 7133:tid 7149] [client 20.220.232.101:17266] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaQHWvCtubh8pR64qB_s_wAAAE4"]
[Sun Mar 01 17:31:07.108995 2026] [:error] [pid 40750:tid 40771] [client 20.220.232.101:17268] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaQHWwfBuk03yQKDyqsyuwAAAdI"]
[Sun Mar 01 17:31:07.701090 2026] [:error] [pid 40750:tid 40762] [client 20.220.232.101:17394] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaQHWwfBuk03yQKDyqsywQAAAck"]
[Sun Mar 01 17:31:08.155784 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:17203] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaQHXAfBuk03yQKDyqsyxgAAAc8"]
[Sun Mar 01 17:31:09.621299 2026] [:error] [pid 7133:tid 7141] [client 20.220.232.101:17166] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaQHXfCtubh8pR64qB_tAQAAAEY"]
[Sun Mar 01 17:31:10.131503 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:17329] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaQHXgfBuk03yQKDyqsy0wAAAcU"]
[Sun Mar 01 17:31:10.648754 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:17358] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaQHXgfBuk03yQKDyqsy1AAAAcM"]
[Sun Mar 01 17:31:11.422919 2026] [:error] [pid 38241:tid 38244] [client 20.220.232.101:17366] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaQHX_KRPk6YnJBxw_yZuQAAAMA"]
[Sun Mar 01 17:31:12.421758 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:17241] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaQHYPKRPk6YnJBxw_yZwwAAANM"]
[Sun Mar 01 17:31:12.872302 2026] [:error] [pid 38241:tid 38261] [client 20.220.232.101:17165] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "aaQHYPKRPk6YnJBxw_yZyAAAANE"]
[Sun Mar 01 17:31:13.323740 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17295] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaQHYRRjCrA8qWBjgG-CjwAAAlQ"]
[Sun Mar 01 17:31:13.836518 2026] [:error] [pid 7165:tid 7173] [client 20.220.232.101:17161] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaQHYRRjCrA8qWBjgG-CkgAAAkY"]
[Sun Mar 01 17:31:14.332602 2026] [:error] [pid 38241:tid 38255] [client 20.220.232.101:17324] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaQHYvKRPk6YnJBxw_yZzgAAAMs"]
[Sun Mar 01 17:31:14.983717 2026] [:error] [pid 33822:tid 33845] [client 20.220.232.101:17092] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "aaQHYm6W3ygu1YVssubheAAAApU"]
[Sun Mar 01 17:31:15.613913 2026] [:error] [pid 38241:tid 38258] [client 20.220.232.101:17234] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaQHY_KRPk6YnJBxw_yZ2AAAAM4"]
[Sun Mar 01 17:31:16.109781 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:17090] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaQHZAfBuk03yQKDyqsy5QAAAcM"]
[Sun Mar 01 17:31:16.607791 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:17240] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaQHZBRjCrA8qWBjgG-CmwAAAkA"]
[Sun Mar 01 17:31:17.142837 2026] [:error] [pid 40750:tid 40771] [client 20.220.232.101:17169] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaQHZQfBuk03yQKDyqsy6gAAAdI"]
[Sun Mar 01 17:31:17.708283 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:17335] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaQHZQfBuk03yQKDyqsy7wAAAco"]
[Sun Mar 01 17:31:18.273809 2026] [:error] [pid 40750:tid 40776] [client 20.220.232.101:17342] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaQHZgfBuk03yQKDyqsy-AAAAdc"]
[Sun Mar 01 17:31:19.099367 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:17154] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaQHZwfBuk03yQKDyqsy_QAAAco"]
[Sun Mar 01 17:31:19.699439 2026] [:error] [pid 33822:tid 33846] [client 20.220.232.101:17172] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaQHZ26W3ygu1YVssubhewAAApY"]
[Sun Mar 01 17:31:20.268848 2026] [:error] [pid 38034:tid 38048] [client 20.220.232.101:17271] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aaQHaAxtfZjwlJok9K_oBQAAAQo"]
[Sun Mar 01 17:31:20.756594 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:17344] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aaQHaPKRPk6YnJBxw_yZ4QAAANA"]
[Sun Mar 01 17:31:21.379708 2026] [:error] [pid 7165:tid 7185] [client 20.220.232.101:17315] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aaQHaRRjCrA8qWBjgG-CpwAAAlI"]
[Sun Mar 01 17:31:22.030618 2026] [:error] [pid 7165:tid 7178] [client 20.220.232.101:17088] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "aaQHahRjCrA8qWBjgG-CqQAAAks"]
[Sun Mar 01 17:31:22.596772 2026] [:error] [pid 7133:tid 7144] [client 20.220.232.101:17284] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaQHavCtubh8pR64qB_tCQAAAEk"]
[Sun Mar 01 17:31:23.214359 2026] [:error] [pid 7165:tid 7169] [client 20.220.232.101:17341] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaQHaxRjCrA8qWBjgG-CsgAAAkI"]
[Sun Mar 01 17:31:23.721100 2026] [:error] [pid 7165:tid 7170] [client 20.220.232.101:17318] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaQHaxRjCrA8qWBjgG-CtQAAAkM"]
[Sun Mar 01 17:31:25.088706 2026] [:error] [pid 38241:tid 38256] [client 20.220.232.101:17237] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaQHbfKRPk6YnJBxw_yZ6wAAAMw"]
[Sun Mar 01 17:31:25.665580 2026] [:error] [pid 7165:tid 7185] [client 20.220.232.101:17259] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aaQHbRRjCrA8qWBjgG-CtwAAAlI"]
[Sun Mar 01 17:31:26.290924 2026] [:error] [pid 7133:tid 7154] [client 20.220.232.101:17260] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aaQHbvCtubh8pR64qB_tEwAAAFM"]
[Sun Mar 01 17:31:26.816781 2026] [:error] [pid 7165:tid 7178] [client 20.220.232.101:17207] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aaQHbhRjCrA8qWBjgG-CuwAAAks"]
[Sun Mar 01 17:31:27.370443 2026] [:error] [pid 7165:tid 7179] [client 20.220.232.101:17343] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "aaQHbxRjCrA8qWBjgG-CvwAAAkw"]
[Sun Mar 01 17:31:27.923373 2026] [:error] [pid 37032:tid 37057] [client 20.220.232.101:17236] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQHb-u0U4o7eSImsVRglgAAAZc"]
[Sun Mar 01 17:31:28.574339 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:17373] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQHcAfBuk03yQKDyqszEwAAAcM"]
[Sun Mar 01 17:31:29.379545 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17263] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQHcQfBuk03yQKDyqszFQAAAcI"]
[Sun Mar 01 17:31:30.143617 2026] [:error] [pid 7133:tid 7135] [client 20.220.232.101:17258] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQHcvCtubh8pR64qB_tGgAAAEA"]
[Sun Mar 01 17:31:31.006689 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:17347] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaQHcwfBuk03yQKDyqszHwAAAc8"]
[Sun Mar 01 17:31:31.578596 2026] [:error] [pid 7133:tid 7139] [client 20.220.232.101:17279] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaQHc_Ctubh8pR64qB_tGwAAAEQ"]
[Sun Mar 01 17:31:32.282319 2026] [:error] [pid 40750:tid 40762] [client 20.220.232.101:17221] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaQHdAfBuk03yQKDyqszKgAAAck"]
[Sun Mar 01 17:31:32.823451 2026] [:error] [pid 7133:tid 7140] [client 20.220.232.101:17253] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "aaQHdPCtubh8pR64qB_tHQAAAEU"]
[Sun Mar 01 17:31:33.488351 2026] [:error] [pid 40750:tid 40770] [client 20.220.232.101:17359] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaQHdQfBuk03yQKDyqszLgAAAdE"]
[Sun Mar 01 17:31:33.999533 2026] [:error] [pid 41780:tid 41794] [client 20.220.232.101:17277] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaQHdcONkVoocLIqzy0a-QAAA8s"]
[Sun Mar 01 17:31:34.437480 2026] [:error] [pid 37032:tid 37034] [client 20.220.232.101:17152] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaQHduu0U4o7eSImsVRgmgAAAYA"]
[Sun Mar 01 17:31:35.072667 2026] [:error] [pid 41342:tid 41349] [client 20.220.232.101:17348] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaQHd44iJ6RAS5CatDlRtQAAAgQ"]
[Sun Mar 01 17:31:36.241124 2026] [:error] [pid 44644:tid 44670] [client 20.220.232.101:17177] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaQHeJ3RJaXMcw3y9V_E0AAAABc"]
[Sun Mar 01 17:31:36.890966 2026] [:error] [pid 44644:tid 44660] [client 20.220.232.101:17195] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaQHeJ3RJaXMcw3y9V_E0wAAAA0"]
[Sun Mar 01 17:31:37.632899 2026] [:error] [pid 44644:tid 44668] [client 20.220.232.101:17153] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaQHeZ3RJaXMcw3y9V_E1gAAABU"]
[Sun Mar 01 17:31:38.192880 2026] [:error] [pid 44644:tid 44649] [client 20.220.232.101:17386] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "aaQHep3RJaXMcw3y9V_E2AAAAAI"]
[Sun Mar 01 17:31:48.076304 2026] [autoindex:error] [pid 38241:tid 38252] [client 20.220.232.101:17406] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 17:32:04.704291 2026] [:error] [pid 38241:tid 38252] [client 20.220.232.101:17217] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaQHlPKRPk6YnJBxw_yaKgAAAMg"]
[Sun Mar 01 17:32:11.510359 2026] [:error] [pid 7133:tid 7137] [client 20.220.232.101:17252] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaQHm_Ctubh8pR64qB_tRwAAAEI"]
[Sun Mar 01 17:32:22.190441 2026] [:error] [pid 38241:tid 38244] [client 20.220.232.101:17245] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaQHpvKRPk6YnJBxw_yaRAAAAMA"]
[Sun Mar 01 17:32:30.816337 2026] [:error] [pid 40750:tid 40757] [client 20.220.232.101:17204] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaQHrgfBuk03yQKDyqs0HQAAAcQ"]
[Sun Mar 01 17:32:39.242897 2026] [:error] [pid 7133:tid 7143] [client 20.220.232.101:17191] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aaQHt_Ctubh8pR64qB_tcQAAAEg"]
[Sun Mar 01 17:32:39.871207 2026] [:error] [pid 40750:tid 40774] [client 20.220.232.101:17139] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aaQHtwfBuk03yQKDyqs0RwAAAdU"]
[Sun Mar 01 17:32:40.455131 2026] [:error] [pid 37032:tid 37041] [client 20.220.232.101:17163] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aaQHuOu0U4o7eSImsVRgqgAAAYc"]
[Sun Mar 01 17:32:41.035311 2026] [:error] [pid 7133:tid 7158] [client 20.220.232.101:17353] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "aaQHufCtubh8pR64qB_tcwAAAFc"]
[Sun Mar 01 17:32:41.550368 2026] [:error] [pid 7165:tid 7179] [client 20.220.232.101:17256] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaQHuRRjCrA8qWBjgG-DtAAAAkw"]
[Sun Mar 01 17:32:42.036352 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:17129] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaQHuhRjCrA8qWBjgG-DtwAAAkA"]
[Sun Mar 01 17:32:42.580808 2026] [:error] [pid 7133:tid 7137] [client 20.220.232.101:17162] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaQHuvCtubh8pR64qB_tdwAAAEI"]
[Sun Mar 01 17:32:43.077098 2026] [:error] [pid 40750:tid 40764] [client 20.220.232.101:17224] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaQHuwfBuk03yQKDyqs0VgAAAcs"]
[Sun Mar 01 17:32:43.933204 2026] [:error] [pid 38034:tid 38047] [client 20.220.232.101:17233] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaQHuwxtfZjwlJok9K_oJgAAAQk"]
[Sun Mar 01 17:32:44.549587 2026] [:error] [pid 38241:tid 38257] [client 20.220.232.101:17167] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaQHvPKRPk6YnJBxw_yaYwAAAM0"]
[Sun Mar 01 17:32:45.326961 2026] [:error] [pid 38034:tid 38058] [client 20.220.232.101:17089] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaQHvQxtfZjwlJok9K_oKAAAARQ"]
[Sun Mar 01 17:32:45.809839 2026] [:error] [pid 41780:tid 41796] [client 20.220.232.101:17320] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaQHvcONkVoocLIqzy0bAQAAA80"]
[Sun Mar 01 17:32:46.278360 2026] [:error] [pid 38034:tid 38055] [client 20.220.232.101:17323] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aaQHvgxtfZjwlJok9K_oKQAAARE"]
[Sun Mar 01 17:32:46.929536 2026] [:error] [pid 40750:tid 40753] [client 20.220.232.101:17160] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aaQHvgfBuk03yQKDyqs0aQAAAcA"]
[Sun Mar 01 17:32:47.373705 2026] [:error] [pid 7165:tid 7182] [client 20.220.232.101:17113] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aaQHvxRjCrA8qWBjgG-DzQAAAk8"]
[Sun Mar 01 17:32:47.868053 2026] [:error] [pid 41780:tid 41799] [client 20.220.232.101:17213] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "aaQHv8ONkVoocLIqzy0bAgAAA9A"]
[Sun Mar 01 17:32:48.455659 2026] [:error] [pid 38241:tid 38247] [client 20.220.232.101:17171] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaQHwPKRPk6YnJBxw_yaeQAAAMM"]
[Sun Mar 01 17:32:49.072546 2026] [:error] [pid 7165:tid 7173] [client 20.220.232.101:17389] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaQHwRRjCrA8qWBjgG-D2AAAAkY"]
[Sun Mar 01 17:32:49.704769 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:17267] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaQHwQfBuk03yQKDyqs0cgAAAco"]
[Sun Mar 01 17:32:50.202144 2026] [:error] [pid 7165:tid 7182] [client 20.220.232.101:17164] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaQHwhRjCrA8qWBjgG-D3wAAAk8"]
[Sun Mar 01 17:32:50.672529 2026] [:error] [pid 7165:tid 7188] [client 20.220.232.101:17322] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaQHwhRjCrA8qWBjgG-D4gAAAlU"]
[Sun Mar 01 17:32:51.181705 2026] [:error] [pid 7165:tid 7177] [client 20.220.232.101:17151] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaQHwxRjCrA8qWBjgG-D5QAAAko"]
[Sun Mar 01 17:32:51.645534 2026] [:error] [pid 38034:tid 38050] [client 20.220.232.101:17400] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaQHwwxtfZjwlJok9K_oKwAAAQw"]
[Sun Mar 01 17:32:52.152222 2026] [:error] [pid 7133:tid 7141] [client 20.220.232.101:17190] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaQHxPCtubh8pR64qB_tgwAAAEY"]
[Sun Mar 01 17:32:52.614934 2026] [:error] [pid 37032:tid 37039] [client 20.220.232.101:17239] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaQHxOu0U4o7eSImsVRgsAAAAYU"]
[Sun Mar 01 17:32:53.115508 2026] [:error] [pid 7133:tid 7151] [client 20.220.232.101:17219] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaQHxfCtubh8pR64qB_tjgAAAFA"]
[Sun Mar 01 17:32:53.699798 2026] [:error] [pid 40750:tid 40759] [client 20.220.232.101:17222] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaQHxQfBuk03yQKDyqs0fwAAAcY"]
[Sun Mar 01 17:32:54.213725 2026] [:error] [pid 38241:tid 38257] [client 20.220.232.101:17179] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaQHxvKRPk6YnJBxw_yaiQAAAM0"]
[Sun Mar 01 17:32:54.859513 2026] [:error] [pid 7165:tid 7191] [client 20.220.232.101:17180] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaQHxhRjCrA8qWBjgG-D7gAAAlg"]
[Sun Mar 01 17:32:55.351027 2026] [:error] [pid 40750:tid 40765] [client 20.220.232.101:17174] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaQHxwfBuk03yQKDyqs0jAAAAcw"]
[Sun Mar 01 17:32:55.931866 2026] [:error] [pid 7165:tid 7172] [client 20.220.232.101:17189] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaQHxxRjCrA8qWBjgG-D9QAAAkU"]
[Sun Mar 01 17:32:56.558274 2026] [:error] [pid 7165:tid 7183] [client 20.220.232.101:17243] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaQHyBRjCrA8qWBjgG-D9wAAAlA"]
[Sun Mar 01 17:32:57.044798 2026] [:error] [pid 7165:tid 7190] [client 20.220.232.101:17096] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaQHyRRjCrA8qWBjgG-D_QAAAlc"]
[Sun Mar 01 17:32:57.564863 2026] [:error] [pid 7165:tid 7185] [client 20.220.232.101:17202] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaQHyRRjCrA8qWBjgG-EAgAAAlI"]
[Sun Mar 01 17:32:57.981594 2026] [:error] [pid 40750:tid 40764] [client 20.220.232.101:17205] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaQHyQfBuk03yQKDyqs0mgAAAcs"]
[Sun Mar 01 17:32:58.522452 2026] [:error] [pid 38241:tid 38267] [client 20.220.232.101:17147] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaQHyvKRPk6YnJBxw_yajwAAANc"]
[Sun Mar 01 17:32:59.028475 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:17140] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaQHyxRjCrA8qWBjgG-EDAAAAkQ"]
[Sun Mar 01 17:32:59.713648 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:17249] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaQHyxRjCrA8qWBjgG-EFQAAAkA"]
[Sun Mar 01 17:33:00.469179 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:17296] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaQHzBRjCrA8qWBjgG-EGwAAAkQ"]
[Sun Mar 01 17:33:01.246434 2026] [:error] [pid 7165:tid 7181] [client 20.220.232.101:17368] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaQHzRRjCrA8qWBjgG-EHgAAAk4"]
[Sun Mar 01 17:33:01.790320 2026] [:error] [pid 38241:tid 38254] [client 20.220.232.101:17254] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaQHzfKRPk6YnJBxw_yamwAAAMo"]
[Sun Mar 01 17:33:02.286173 2026] [:error] [pid 38241:tid 38245] [client 20.220.232.101:17200] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaQHzvKRPk6YnJBxw_yanwAAAME"]
[Sun Mar 01 17:33:02.933133 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:17094] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaQHzvKRPk6YnJBxw_yapQAAANA"]
[Sun Mar 01 17:33:03.898377 2026] [:error] [pid 41780:tid 41785] [client 20.220.232.101:17230] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaQHz8ONkVoocLIqzy0bBAAAA8I"]
[Sun Mar 01 17:33:04.394990 2026] [:error] [pid 7133:tid 7159] [client 20.220.232.101:17199] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaQH0PCtubh8pR64qB_tlwAAAFg"]
[Sun Mar 01 17:33:04.838630 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:17115] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaQH0PKRPk6YnJBxw_yaswAAANA"]
[Sun Mar 01 17:33:05.391349 2026] [:error] [pid 7133:tid 7147] [client 20.220.232.101:17248] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaQH0fCtubh8pR64qB_tnAAAAEw"]
[Sun Mar 01 17:33:05.849840 2026] [:error] [pid 33822:tid 33845] [client 20.220.232.101:17382] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaQH0W6W3ygu1YVssubhowAAApU"]
[Sun Mar 01 17:33:06.408672 2026] [:error] [pid 38034:tid 38061] [client 20.220.232.101:17242] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaQH0gxtfZjwlJok9K_oNAAAARc"]
[Sun Mar 01 17:33:07.049289 2026] [:error] [pid 38034:tid 38058] [client 20.220.232.101:17175] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaQH0wxtfZjwlJok9K_oNQAAARQ"]
[Sun Mar 01 17:33:07.589205 2026] [:error] [pid 38034:tid 38043] [client 20.220.232.101:17326] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaQH0wxtfZjwlJok9K_oNwAAAQU"]
[Sun Mar 01 17:33:08.144226 2026] [:error] [pid 7165:tid 7181] [client 20.220.232.101:17099] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaQH1BRjCrA8qWBjgG-EKwAAAk4"]
[Sun Mar 01 17:33:08.717843 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:17270] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaQH1PKRPk6YnJBxw_yauwAAANM"]
[Sun Mar 01 17:33:09.384881 2026] [:error] [pid 41780:tid 41789] [client 20.220.232.101:17173] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaQH1cONkVoocLIqzy0bBQAAA8Y"]
[Sun Mar 01 17:33:10.627389 2026] [:error] [pid 41342:tid 41353] [client 20.220.232.101:17372] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaQH1o4iJ6RAS5CatDlRvAAAAgg"]
[Sun Mar 01 17:33:11.079057 2026] [:error] [pid 7165:tid 7174] [client 20.220.232.101:17176] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "aaQH1xRjCrA8qWBjgG-ENAAAAkc"]
[Sun Mar 01 17:33:11.622404 2026] [:error] [pid 41780:tid 41807] [client 20.220.232.101:17402] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaQH18ONkVoocLIqzy0bCAAAA9g"]
[Sun Mar 01 17:33:12.079772 2026] [:error] [pid 7133:tid 7148] [client 20.220.232.101:17206] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaQH2PCtubh8pR64qB_tpwAAAE0"]
[Sun Mar 01 17:33:12.693700 2026] [:error] [pid 38034:tid 38048] [client 20.220.232.101:17188] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaQH2AxtfZjwlJok9K_oPwAAAQo"]
[Sun Mar 01 17:33:13.150875 2026] [:error] [pid 38241:tid 38248] [client 20.220.232.101:17138] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "aaQH2fKRPk6YnJBxw_yawwAAAMQ"]
[Sun Mar 01 17:33:13.647444 2026] [:error] [pid 33822:tid 33833] [client 20.220.232.101:17182] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaQH2W6W3ygu1YVssubhrwAAAok"]
[Sun Mar 01 17:33:14.385802 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:17298] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaQH2vKRPk6YnJBxw_yaygAAANM"]
[Sun Mar 01 17:33:14.827546 2026] [:error] [pid 7133:tid 7149] [client 20.220.232.101:17369] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaQH2vCtubh8pR64qB_trAAAAE4"]
[Sun Mar 01 17:33:15.263821 2026] [:error] [pid 38241:tid 38259] [client 20.220.232.101:17083] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless5.php"] [unique_id "aaQH2_KRPk6YnJBxw_yazQAAAM8"]
[Sun Mar 01 17:33:15.879996 2026] [:error] [pid 38241:tid 38244] [client 20.220.232.101:17350] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaQH2_KRPk6YnJBxw_ya1AAAAMA"]
[Sun Mar 01 17:33:16.423210 2026] [:error] [pid 33822:tid 33827] [client 20.220.232.101:17029] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaQH3G6W3ygu1YVssubhtQAAAoM"]
[Sun Mar 01 17:33:16.927879 2026] [:error] [pid 33822:tid 33842] [client 20.220.232.101:17101] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaQH3G6W3ygu1YVssubhuwAAApI"]
[Sun Mar 01 17:33:17.409235 2026] [:error] [pid 7133:tid 7155] [client 20.220.232.101:17325] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaQH3fCtubh8pR64qB_tuwAAAFQ"]
[Sun Mar 01 17:33:18.100082 2026] [:error] [pid 7133:tid 7148] [client 20.220.232.101:17142] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaQH3vCtubh8pR64qB_txgAAAE0"]
[Sun Mar 01 17:33:18.562955 2026] [:error] [pid 7165:tid 7168] [client 20.220.232.101:17133] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aaQH3hRjCrA8qWBjgG-ESgAAAkE"]
[Sun Mar 01 17:33:19.007593 2026] [:error] [pid 7165:tid 7171] [client 20.220.232.101:17118] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaQH3xRjCrA8qWBjgG-ETQAAAkQ"]
[Sun Mar 01 17:33:19.491819 2026] [:error] [pid 7165:tid 7188] [client 20.220.232.101:17123] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaQH3xRjCrA8qWBjgG-EUwAAAlU"]
[Sun Mar 01 17:33:20.178813 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17158] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaQH4BRjCrA8qWBjgG-EVwAAAlQ"]
[Sun Mar 01 17:33:20.723554 2026] [:error] [pid 40750:tid 40766] [client 20.220.232.101:17082] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aaQH4AfBuk03yQKDyqs0wQAAAc0"]
[Sun Mar 01 17:33:21.274916 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17356] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaQH4RRjCrA8qWBjgG-EZgAAAlQ"]
[Sun Mar 01 17:33:21.794401 2026] [:error] [pid 7165:tid 7180] [client 20.220.232.101:17390] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaQH4RRjCrA8qWBjgG-EbgAAAk0"]
[Sun Mar 01 17:33:22.274091 2026] [:error] [pid 7165:tid 7184] [client 20.220.232.101:17380] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaQH4hRjCrA8qWBjgG-EcwAAAlE"]
[Sun Mar 01 17:33:22.906885 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:17384] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaQH4gfBuk03yQKDyqs0xwAAAco"]
[Sun Mar 01 17:33:23.483738 2026] [:error] [pid 40750:tid 40765] [client 20.220.232.101:17291] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aaQH4wfBuk03yQKDyqs0ywAAAcw"]
[Sun Mar 01 17:33:24.102101 2026] [:error] [pid 33822:tid 33838] [client 20.220.232.101:17104] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aaQH5G6W3ygu1YVssubhvwAAAo4"]
[Sun Mar 01 17:33:24.704270 2026] [:error] [pid 38034:tid 38056] [client 20.220.232.101:17159] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aaQH5AxtfZjwlJok9K_oQgAAARI"]
[Sun Mar 01 17:33:25.235837 2026] [:error] [pid 38241:tid 38246] [client 20.220.232.101:17229] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "aaQH5fKRPk6YnJBxw_ya4gAAAMI"]
[Sun Mar 01 17:33:25.945035 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:17103] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aaQH5fKRPk6YnJBxw_ya5gAAANM"]
[Sun Mar 01 17:33:26.595218 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17214] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aaQH5gfBuk03yQKDyqs02wAAAcI"]
[Sun Mar 01 17:33:27.252793 2026] [:error] [pid 38241:tid 38252] [client 20.220.232.101:17292] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aaQH5_KRPk6YnJBxw_ya7AAAAMg"]
[Sun Mar 01 17:33:27.856799 2026] [:error] [pid 7133:tid 7138] [client 20.220.232.101:17212] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "aaQH5_Ctubh8pR64qB_tzwAAAEM"]
[Sun Mar 01 17:33:28.556846 2026] [:error] [pid 38034:tid 38057] [client 20.220.232.101:17299] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aaQH6AxtfZjwlJok9K_oQwAAARM"]
[Sun Mar 01 17:33:29.062217 2026] [:error] [pid 7133:tid 7150] [client 20.220.232.101:17216] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aaQH6fCtubh8pR64qB_t0AAAAE8"]
[Sun Mar 01 17:33:29.742106 2026] [:error] [pid 38241:tid 38262] [client 20.220.232.101:17388] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aaQH6fKRPk6YnJBxw_ya9gAAANI"]
[Sun Mar 01 17:33:30.760527 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:17231] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "aaQH6vKRPk6YnJBxw_ya-wAAANA"]
[Sun Mar 01 17:33:31.680126 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:17290] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aaQH6wfBuk03yQKDyqs08AAAAc8"]
[Sun Mar 01 17:33:32.246451 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17144] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aaQH7AfBuk03yQKDyqs09wAAAcI"]
[Sun Mar 01 17:33:32.709930 2026] [:error] [pid 40750:tid 40763] [client 20.220.232.101:17095] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aaQH7AfBuk03yQKDyqs0-QAAAco"]
[Sun Mar 01 17:33:33.311136 2026] [:error] [pid 7133:tid 7136] [client 20.220.232.101:17116] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "aaQH7fCtubh8pR64qB_t1wAAAEE"]
[Sun Mar 01 17:33:34.126413 2026] [:error] [pid 38241:tid 38250] [client 20.220.232.101:17346] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aaQH7vKRPk6YnJBxw_ybAgAAAMY"]
[Sun Mar 01 17:33:34.563151 2026] [:error] [pid 40750:tid 40774] [client 20.220.232.101:17198] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aaQH7gfBuk03yQKDyqs1AgAAAdU"]
[Sun Mar 01 17:33:35.224026 2026] [:error] [pid 38034:tid 38043] [client 20.220.232.101:17210] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "aaQH7wxtfZjwlJok9K_oRgAAAQU"]
[Sun Mar 01 17:34:23.938491 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:17308] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaQIHwfBuk03yQKDyqs2XQAAAcU"]
[Sun Mar 01 17:34:24.849269 2026] [:error] [pid 33822:tid 33833] [client 20.220.232.101:17186] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaQIIG6W3ygu1YVssubh7wAAAok"]
[Sun Mar 01 17:34:25.381591 2026] [:error] [pid 7133:tid 7145] [client 20.220.232.101:17393] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaQIIfCtubh8pR64qB_uSAAAAEo"]
[Sun Mar 01 17:34:25.870965 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:17371] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "aaQIIQfBuk03yQKDyqs2ewAAAcU"]
[Sun Mar 01 17:34:26.386501 2026] [:error] [pid 7165:tid 7191] [client 20.220.232.101:17244] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaQIIhRjCrA8qWBjgG-FDwAAAlg"]
[Sun Mar 01 17:34:27.334756 2026] [:error] [pid 40750:tid 40770] [client 20.220.232.101:17355] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaQIIwfBuk03yQKDyqs2lAAAAdE"]
[Sun Mar 01 17:34:28.330674 2026] [:error] [pid 33822:tid 33836] [client 20.220.232.101:17304] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaQIJG6W3ygu1YVssubiAQAAAow"]
[Sun Mar 01 17:34:28.922035 2026] [:error] [pid 40750:tid 40770] [client 20.220.232.101:17399] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "aaQIJAfBuk03yQKDyqs2rwAAAdE"]
[Sun Mar 01 17:34:29.571492 2026] [:error] [pid 33822:tid 33838] [client 20.220.232.101:17367] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaQIJW6W3ygu1YVssubiBwAAAo4"]
[Sun Mar 01 17:34:30.435468 2026] [:error] [pid 40750:tid 40764] [client 20.220.232.101:17280] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaQIJgfBuk03yQKDyqs2vAAAAcs"]
[Sun Mar 01 17:34:31.456917 2026] [:error] [pid 40750:tid 40766] [client 20.220.232.101:17168] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaQIJwfBuk03yQKDyqs2wgAAAc0"]
[Sun Mar 01 17:34:32.893351 2026] [:error] [pid 38241:tid 38250] [client 20.220.232.101:17312] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "aaQIKPKRPk6YnJBxw_ybjwAAAMY"]
[Sun Mar 01 17:34:33.734733 2026] [:error] [pid 38034:tid 38048] [client 20.220.232.101:17120] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaQIKQxtfZjwlJok9K_oYAAAAQo"]
[Sun Mar 01 17:34:34.478276 2026] [:error] [pid 40750:tid 40753] [client 20.220.232.101:17405] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaQIKgfBuk03yQKDyqs2zwAAAcA"]
[Sun Mar 01 17:34:35.126994 2026] [:error] [pid 41780:tid 41799] [client 20.220.232.101:17148] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaQIK8ONkVoocLIqzy0bEQAAA9A"]
[Sun Mar 01 17:34:35.717265 2026] [:error] [pid 40750:tid 40761] [client 20.220.232.101:17319] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaQIKwfBuk03yQKDyqs21gAAAcg"]
[Sun Mar 01 17:34:36.618736 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17146] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaQILAfBuk03yQKDyqs23AAAAcI"]
[Sun Mar 01 17:34:37.818879 2026] [:error] [pid 7165:tid 7167] [client 20.220.232.101:17370] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaQILRRjCrA8qWBjgG-FUQAAAkA"]
[Sun Mar 01 17:34:38.711818 2026] [:error] [pid 40750:tid 40756] [client 20.220.232.101:17354] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaQILgfBuk03yQKDyqs26gAAAcM"]
[Sun Mar 01 17:34:40.001802 2026] [:error] [pid 7165:tid 7170] [client 20.220.232.101:17360] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaQIMBRjCrA8qWBjgG-FVAAAAkM"]
[Sun Mar 01 17:34:40.484615 2026] [:error] [pid 38241:tid 38245] [client 20.220.232.101:17383] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aaQIMPKRPk6YnJBxw_yblwAAAME"]
[Sun Mar 01 17:34:41.190112 2026] [:error] [pid 38241:tid 38254] [client 20.220.232.101:17305] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aaQIMfKRPk6YnJBxw_ybmAAAAMo"]
[Sun Mar 01 17:34:41.786778 2026] [:error] [pid 7165:tid 7182] [client 20.220.232.101:17282] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aaQIMRRjCrA8qWBjgG-FWgAAAk8"]
[Sun Mar 01 17:34:42.290271 2026] [:error] [pid 7165:tid 7183] [client 20.220.232.101:17100] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "aaQIMhRjCrA8qWBjgG-FXgAAAlA"]
[Sun Mar 01 17:34:43.139343 2026] [:error] [pid 38241:tid 38251] [client 20.220.232.101:17352] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aaQIM_KRPk6YnJBxw_ybmwAAAMc"]
[Sun Mar 01 17:34:44.663019 2026] [:error] [pid 7133:tid 7152] [client 20.220.232.101:17349] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aaQINPCtubh8pR64qB_ucAAAAFE"]
[Sun Mar 01 17:34:45.536713 2026] [:error] [pid 38241:tid 38248] [client 20.220.232.101:17255] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aaQINfKRPk6YnJBxw_ybowAAAMQ"]
[Sun Mar 01 17:34:46.252908 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17337] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aaQINhRjCrA8qWBjgG-FaAAAAlQ"]
[Sun Mar 01 17:34:46.976476 2026] [:error] [pid 7165:tid 7183] [client 20.220.232.101:17091] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaQINhRjCrA8qWBjgG-FawAAAlA"]
[Sun Mar 01 17:34:48.105218 2026] [:error] [pid 7165:tid 7179] [client 20.220.232.101:17309] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaQIOBRjCrA8qWBjgG-FbQAAAkw"]
[Sun Mar 01 17:34:50.334916 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17313] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaQIOgfBuk03yQKDyqs3BwAAAcI"]
[Sun Mar 01 17:34:52.165950 2026] [:error] [pid 40750:tid 40773] [client 20.220.232.101:17149] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaQIPAfBuk03yQKDyqs3EwAAAdQ"]
[Sun Mar 01 17:34:55.762230 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:17289] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aaQIPwfBuk03yQKDyqs3KAAAAdM"]
[Sun Mar 01 17:34:57.629637 2026] [:error] [pid 38241:tid 38260] [client 20.220.232.101:17328] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aaQIQfKRPk6YnJBxw_ybrwAAANA"]
[Sun Mar 01 17:34:58.804964 2026] [:error] [pid 37032:tid 37045] [client 20.220.232.101:17340] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aaQIQuu0U4o7eSImsVRg2AAAAYs"]
[Sun Mar 01 17:34:59.949822 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17404] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "aaQIQxRjCrA8qWBjgG-FdwAAAlQ"]
[Sun Mar 01 17:35:00.524901 2026] [:error] [pid 40750:tid 40772] [client 20.220.232.101:17272] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aaQIRAfBuk03yQKDyqs3NAAAAdM"]
[Sun Mar 01 17:35:01.155200 2026] [:error] [pid 7165:tid 7183] [client 20.220.232.101:17406] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aaQIRRRjCrA8qWBjgG-FeQAAAlA"]
[Sun Mar 01 17:35:01.744562 2026] [:error] [pid 40750:tid 40777] [client 20.220.232.101:17351] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aaQIRQfBuk03yQKDyqs3OQAAAdg"]
[Sun Mar 01 17:35:02.321130 2026] [:error] [pid 38034:tid 38050] [client 20.220.232.101:17227] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "aaQIRgxtfZjwlJok9K_obAAAAQw"]
[Sun Mar 01 17:35:03.196961 2026] [:error] [pid 7165:tid 7191] [client 20.220.232.101:17378] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aaQIRxRjCrA8qWBjgG-FfAAAAlg"]
[Sun Mar 01 17:35:03.660678 2026] [:error] [pid 7165:tid 7177] [client 20.220.232.101:17392] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aaQIRxRjCrA8qWBjgG-FfgAAAko"]
[Sun Mar 01 17:35:04.150702 2026] [:error] [pid 38034:tid 38060] [client 20.220.232.101:17215] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aaQISAxtfZjwlJok9K_obwAAARY"]
[Sun Mar 01 17:35:04.781616 2026] [:error] [pid 44644:tid 44658] [client 20.220.232.101:17401] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "aaQISJ3RJaXMcw3y9V_FDwAAAAs"]
[Sun Mar 01 17:35:05.479988 2026] [:error] [pid 7165:tid 7178] [client 20.220.232.101:17226] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaQISRRjCrA8qWBjgG-FgQAAAks"]
[Sun Mar 01 17:35:06.264139 2026] [:error] [pid 33822:tid 33836] [client 20.220.232.101:17303] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaQISm6W3ygu1YVssubiHwAAAow"]
[Sun Mar 01 17:35:06.840436 2026] [:error] [pid 40750:tid 40773] [client 20.220.232.101:17377] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaQISgfBuk03yQKDyqs3SwAAAdQ"]
[Sun Mar 01 17:35:07.457559 2026] [:error] [pid 40750:tid 40758] [client 20.220.232.101:17228] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "aaQISwfBuk03yQKDyqs3UQAAAcU"]
[Sun Mar 01 17:35:08.017031 2026] [:error] [pid 7165:tid 7187] [client 20.220.232.101:17184] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aaQITBRjCrA8qWBjgG-FhQAAAlQ"]
[Sun Mar 01 17:35:08.673735 2026] [:error] [pid 40750:tid 40768] [client 20.220.232.101:17108] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aaQITAfBuk03yQKDyqs3WAAAAc8"]
[Sun Mar 01 17:35:09.234457 2026] [:error] [pid 7165:tid 7179] [client 20.220.232.101:17397] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aaQITRRjCrA8qWBjgG-FiAAAAkw"]
[Sun Mar 01 17:35:09.998614 2026] [:error] [pid 38241:tid 38262] [client 20.220.232.101:17183] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "aaQITfKRPk6YnJBxw_ybzQAAANI"]
[Sun Mar 01 17:35:11.557327 2026] [:error] [pid 40750:tid 40753] [client 20.220.232.101:17287] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaQITwfBuk03yQKDyqs3ZwAAAcA"]
[Sun Mar 01 17:35:12.023421 2026] [:error] [pid 40750:tid 40759] [client 20.220.232.101:17357] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaQIUAfBuk03yQKDyqs3agAAAcY"]
[Sun Mar 01 17:35:12.977037 2026] [:error] [pid 44644:tid 44651] [client 20.220.232.101:17317] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaQIUJ3RJaXMcw3y9V_FEQAAAAQ"]
[Sun Mar 01 17:35:13.638270 2026] [:error] [pid 38241:tid 38246] [client 20.220.232.101:17331] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "aaQIUfKRPk6YnJBxw_yb1QAAAMI"]
[Sun Mar 01 17:35:14.305453 2026] [:error] [pid 38034:tid 38049] [client 20.220.232.101:17302] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaQIUgxtfZjwlJok9K_ocwAAAQs"]
[Sun Mar 01 17:35:15.336592 2026] [:error] [pid 33822:tid 33824] [client 20.220.232.101:17050] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaQIU26W3ygu1YVssubiIwAAAoA"]
[Sun Mar 01 17:35:15.950891 2026] [:error] [pid 38241:tid 38250] [client 20.220.232.101:17281] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaQIU_KRPk6YnJBxw_yb3AAAAMY"]
[Sun Mar 01 17:35:16.845398 2026] [:error] [pid 7165:tid 7188] [client 20.220.232.101:17381] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "aaQIVBRjCrA8qWBjgG-FxwAAAlU"]
[Sun Mar 01 17:35:17.730144 2026] [:error] [pid 33822:tid 33827] [client 20.220.232.101:17220] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaQIVW6W3ygu1YVssubiJwAAAoM"]
[Sun Mar 01 17:35:18.435255 2026] [:error] [pid 37032:tid 37044] [client 20.220.232.101:17264] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaQIVuu0U4o7eSImsVRg4gAAAYo"]
[Sun Mar 01 17:35:19.298631 2026] [:error] [pid 38241:tid 38263] [client 20.220.232.101:17285] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaQIV_KRPk6YnJBxw_yb6gAAANM"]
[Sun Mar 01 17:35:20.083462 2026] [:error] [pid 38241:tid 38249] [client 20.220.232.101:17336] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ac.php"] [unique_id "aaQIWPKRPk6YnJBxw_yb7AAAAMU"]
[Sun Mar 01 17:36:06.511858 2026] [:error] [pid 7165:tid 7184] [client 20.220.232.101:17297] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaQIhhRjCrA8qWBjgG-GFAAAAlE"]
[Sun Mar 01 17:36:07.130691 2026] [:error] [pid 40750:tid 40755] [client 20.220.232.101:17396] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaQIhwfBuk03yQKDyqs4EQAAAcI"]
[Sun Mar 01 17:36:08.680474 2026] [:error] [pid 41342:tid 41357] [client 20.220.232.101:17365] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaQIiI4iJ6RAS5CatDlR2QAAAgw"]
[Sun Mar 01 17:36:09.532860 2026] [:error] [pid 41780:tid 41795] [client 20.220.232.101:17294] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaQIicONkVoocLIqzy0bHgAAA8w"]
[Sun Mar 01 17:36:10.700378 2026] [:error] [pid 38241:tid 38249] [client 20.220.232.101:17293] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aaQIivKRPk6YnJBxw_ycVAAAAMU"]
[Sun Mar 01 17:36:11.464964 2026] [:error] [pid 41780:tid 41797] [client 20.220.232.101:17310] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aaQIi8ONkVoocLIqzy0bIQAAA84"]
[Sun Mar 01 17:36:12.098712 2026] [:error] [pid 38241:tid 38266] [client 20.220.232.101:17221] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aaQIjPKRPk6YnJBxw_ycYwAAANY"]
[Sun Mar 01 17:36:12.771704 2026] [:error] [pid 38034:tid 38052] [client 20.220.232.101:17395] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aaQIjAxtfZjwlJok9K_omgAAAQ4"]
[Sun Mar 01 18:18:00.315873 2026] [:error] [pid 38241:tid 38251] [client 204.76.203.25:58002] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aaQSWPKRPk6YnJBxw_yy8wAAAMc"]
[Sun Mar 01 19:56:37.970315 2026] [:error] [pid 40750:tid 40769] [client 40.85.219.62:53027] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaQpdQfBuk03yQKDyqvmyQAAAdA"]
[Sun Mar 01 19:56:45.025402 2026] [autoindex:error] [pid 7133:tid 7135] [client 40.85.219.62:51925] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:56:45.249099 2026] [proxy_fcgi:error] [pid 7133:tid 7144] [client 40.85.219.62:51925] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 19:56:45.470285 2026] [autoindex:error] [pid 7133:tid 7138] [client 40.85.219.62:51925] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:56:45.688444 2026] [autoindex:error] [pid 7133:tid 7147] [client 40.85.219.62:51925] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:56:45.898217 2026] [:error] [pid 7133:tid 7141] [client 40.85.219.62:51925] [client 40.85.219.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.85.219.62, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQpffCtubh8pR64qB8odgAAAEY"]
[Sun Mar 01 19:56:51.517873 2026] [autoindex:error] [pid 7133:tid 7159] [client 40.85.219.62:51925] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 19:56:51.941666 2026] [:error] [pid 7133:tid 7154] [client 40.85.219.62:51925] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaQpg_Ctubh8pR64qB8ofgAAAFM"]
[Sun Mar 01 19:56:52.780746 2026] [:error] [pid 7133:tid 7142] [client 40.85.219.62:53013] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaQphPCtubh8pR64qB8ogQAAAEc"]
[Sun Mar 01 19:57:05.241114 2026] [:error] [pid 7165:tid 7176] [client 40.85.219.62:53015] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aaQpkRRjCrA8qWBjgG8FYQAAAkk"]
[Sun Mar 01 19:57:06.108382 2026] [:error] [pid 33822:tid 33837] [client 40.85.219.62:51906] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aaQpkm6W3ygu1YVssuYLiAAAAo0"]
[Sun Mar 01 19:57:06.962120 2026] [:error] [pid 38241:tid 38254] [client 40.85.219.62:51933] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aaQpkvKRPk6YnJBxw_ztDwAAAMo"]
[Sun Mar 01 19:57:07.835931 2026] [:error] [pid 7165:tid 7178] [client 40.85.219.62:51914] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "aaQpkxRjCrA8qWBjgG8FZgAAAks"]
[Sun Mar 01 21:56:21.767111 2026] [:error] [pid 40750:tid 40756] [client 20.223.198.174:6183] [client 20.223.198.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaRFhQfBuk03yQKDyqtcswAAAcM"]
[Sun Mar 01 21:57:12.143437 2026] [:error] [pid 33822:tid 33844] [client 20.223.198.174:6806] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaRFuG6W3ygu1YVssuYoQwAAApQ"]
[Sun Mar 01 21:57:12.642578 2026] [:error] [pid 40750:tid 40765] [client 20.223.198.174:11542] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaRFuAfBuk03yQKDyqtdYgAAAcw"]
[Sun Mar 01 21:57:13.140144 2026] [:error] [pid 7165:tid 7182] [client 20.223.198.174:14540] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaRFuRRjCrA8qWBjgG9fBgAAAk8"]
[Sun Mar 01 21:57:13.637424 2026] [:error] [pid 7165:tid 7179] [client 20.223.198.174:13422] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaRFuRRjCrA8qWBjgG9fCAAAAkw"]
[Sun Mar 01 21:57:14.135457 2026] [:error] [pid 7165:tid 7173] [client 20.223.198.174:13009] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaRFuhRjCrA8qWBjgG9fCwAAAkY"]
[Sun Mar 01 21:57:14.632878 2026] [:error] [pid 7165:tid 7174] [client 20.223.198.174:10641] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaRFuhRjCrA8qWBjgG9fDwAAAkc"]
[Sun Mar 01 21:57:15.131145 2026] [:error] [pid 40750:tid 40766] [client 20.223.198.174:1682] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaRFuwfBuk03yQKDyqtdagAAAc0"]
[Sun Mar 01 21:57:15.629538 2026] [:error] [pid 38034:tid 38040] [client 20.223.198.174:10030] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaRFuwxtfZjwlJok9K8d6wAAAQQ"]
[Sun Mar 01 21:57:16.128428 2026] [:error] [pid 7133:tid 7151] [client 20.223.198.174:5710] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaRFvPCtubh8pR64qB9TJQAAAFA"]
[Sun Mar 01 21:57:16.629427 2026] [:error] [pid 7133:tid 7152] [client 20.223.198.174:5742] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaRFvPCtubh8pR64qB9TKwAAAFE"]
[Sun Mar 01 21:57:17.130637 2026] [:error] [pid 40750:tid 40767] [client 20.223.198.174:3132] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaRFvQfBuk03yQKDyqtddgAAAc4"]
[Sun Mar 01 21:57:17.628246 2026] [:error] [pid 7165:tid 7184] [client 20.223.198.174:13432] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaRFvRRjCrA8qWBjgG9fIAAAAlE"]
[Sun Mar 01 21:57:18.128354 2026] [:error] [pid 7165:tid 7175] [client 20.223.198.174:4800] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaRFvhRjCrA8qWBjgG9fJgAAAkg"]
[Sun Mar 01 21:57:18.627006 2026] [:error] [pid 40750:tid 40765] [client 20.223.198.174:5443] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaRFvgfBuk03yQKDyqtdhQAAAcw"]
[Sun Mar 01 21:57:19.125591 2026] [:error] [pid 37032:tid 37048] [client 20.223.198.174:12660] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaRFv-u0U4o7eSImsVSFUAAAAY4"]
[Sun Mar 01 21:57:19.624054 2026] [:error] [pid 38241:tid 38258] [client 20.223.198.174:5733] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaRFv_KRPk6YnJBxw_wmNAAAAM4"]
[Sun Mar 01 21:57:20.122688 2026] [:error] [pid 7165:tid 7170] [client 20.223.198.174:12323] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaRFwBRjCrA8qWBjgG9fMQAAAkM"]
[Sun Mar 01 21:57:20.621856 2026] [:error] [pid 37032:tid 37058] [client 20.223.198.174:12422] [client 20.223.198.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaRFwOu0U4o7eSImsVSFVAAAAZg"]
[Sun Mar 01 22:05:42.072042 2026] [:error] [pid 41780:tid 41793] [client 20.220.162.180:12309] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaRHtsONkVoocLIqzy0vlQAAA8o"]
[Sun Mar 01 22:05:42.902537 2026] [:error] [pid 33822:tid 33828] [client 20.220.162.180:12740] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaRHtm6W3ygu1YVssuYr8AAAAoQ"]
[Sun Mar 01 22:05:43.737884 2026] [:error] [pid 7165:tid 7171] [client 20.220.162.180:12304] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaRHtxRjCrA8qWBjgG9maQAAAkQ"]
[Sun Mar 01 22:05:44.564298 2026] [:error] [pid 38241:tid 38257] [client 20.220.162.180:12756] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaRHuPKRPk6YnJBxw_wp4wAAAM0"]
[Sun Mar 01 22:09:46.088666 2026] [:error] [pid 33822:tid 33824] [client 34.173.69.187:54307] [client 34.173.69.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.69.187, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRIqm6W3ygu1YVssuYsyAAAAoA"]
[Sun Mar 01 22:09:51.791897 2026] [:error] [pid 33822:tid 33842] [client 34.173.69.187:54307] [client 34.173.69.187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaRIr26W3ygu1YVssuYs1QAAApI"]
[Sun Mar 01 22:09:54.331699 2026] [:error] [pid 33822:tid 33844] [client 34.173.69.187:54307] [client 34.173.69.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.69.187, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRIsm6W3ygu1YVssuYs2AAAApQ"]
[Sun Mar 01 22:13:28.807529 2026] [:error] [pid 40750:tid 40772] [client 34.136.193.55:62330] [client 34.136.193.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.193.55, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRJiAfBuk03yQKDyqtoBgAAAdM"]
[Sun Mar 01 22:13:35.117921 2026] [:error] [pid 40750:tid 40755] [client 34.136.193.55:62330] [client 34.136.193.55] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaRJjwfBuk03yQKDyqtoGwAAAcI"]
[Sun Mar 01 22:13:37.341774 2026] [:error] [pid 40750:tid 40756] [client 34.136.193.55:62330] [client 34.136.193.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.193.55, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRJkQfBuk03yQKDyqtoHQAAAcM"]
[Sun Mar 01 22:29:20.733033 2026] [:error] [pid 33822:tid 33824] [client 34.136.193.55:61249] [client 34.136.193.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.193.55, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRNQG6W3ygu1YVssuYyOAAAAoA"]
[Sun Mar 01 22:29:26.289280 2026] [:error] [pid 33822:tid 33832] [client 34.136.193.55:61249] [client 34.136.193.55] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaRNRm6W3ygu1YVssuYySAAAAog"]
[Sun Mar 01 22:29:28.487984 2026] [:error] [pid 33822:tid 33833] [client 34.136.193.55:61249] [client 34.136.193.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.193.55, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRNSG6W3ygu1YVssuYyVgAAAok"]
[Sun Mar 01 22:49:50.852812 2026] [:error] [pid 7165:tid 7177] [client 40.85.219.62:36295] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRSDhRjCrA8qWBjgG-SbgAAAko"]
[Sun Mar 01 22:49:51.672054 2026] [:error] [pid 38241:tid 38247] [client 40.85.219.62:36325] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRSD_KRPk6YnJBxw_w_WgAAAMM"]
[Sun Mar 01 22:49:52.498069 2026] [:error] [pid 41780:tid 41790] [client 40.85.219.62:36212] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRSEMONkVoocLIqzy0zMgAAA8c"]
[Sun Mar 01 22:49:53.321708 2026] [:error] [pid 40750:tid 40760] [client 40.85.219.62:36194] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRSEQfBuk03yQKDyquDDAAAAcc"]
[Sun Mar 01 23:34:32.265037 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:16378] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaRciBRjCrA8qWBjgG-_fwAAAkw"]
[Sun Mar 01 23:34:32.749271 2026] [:error] [pid 7133:tid 7147] [client 52.138.3.9:16368] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaRciPCtubh8pR64qB94ygAAAEw"]
[Sun Mar 01 23:34:33.172885 2026] [:error] [pid 44644:tid 44650] [client 52.138.3.9:16337] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaRciZ3RJaXMcw3y9V_smQAAAAM"]
[Sun Mar 01 23:34:33.743493 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:16366] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaRciRRjCrA8qWBjgG-_hAAAAkc"]
[Mon Mar 02 00:42:05.559782 2026] [:error] [pid 53182:tid 53548] [client 193.34.212.68:64016] [client 193.34.212.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.34.212.68, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaRsXfv073cA6eM1YCSihwAAAMU"]
[Mon Mar 02 00:59:21.161356 2026] [proxy_fcgi:error] [pid 53585:tid 53589] [client 103.4.122.14:57144] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Mar 02 00:59:24.220405 2026] [proxy_fcgi:error] [pid 26940:tid 26951] [client 103.4.122.14:57258] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Mar 02 01:45:12.044084 2026] [:error] [pid 53180:tid 53460] [client 40.85.219.62:36118] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "aaR7KDPPJpDOBvYnaa1YNgAAAZA"]
[Mon Mar 02 01:45:12.882863 2026] [:error] [pid 53585:tid 53603] [client 40.85.219.62:36364] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "aaR7KHbCvYsvu6kKhM2gpAAAAA8"]
[Mon Mar 02 01:45:13.709344 2026] [:error] [pid 53180:tid 53446] [client 40.85.219.62:36105] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "aaR7KTPPJpDOBvYnaa1YNwAAAYI"]
[Mon Mar 02 01:45:14.530463 2026] [:error] [pid 53585:tid 53609] [client 40.85.219.62:36395] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "aaR7KnbCvYsvu6kKhM2grQAAABU"]
[Mon Mar 02 01:51:31.044040 2026] [:error] [pid 53181:tid 53530] [client 20.220.162.180:12726] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaR8o4r_0T1SazTrJOBAowAAAQ8"]
[Mon Mar 02 01:51:31.878073 2026] [:error] [pid 26940:tid 26964] [client 20.220.162.180:12692] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaR8oxrUg-j5GLDtRFm4pgAAAFQ"]
[Mon Mar 02 01:51:32.722016 2026] [:error] [pid 53180:tid 53457] [client 20.220.162.180:12689] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaR8pDPPJpDOBvYnaa1beAAAAY0"]
[Mon Mar 02 01:51:33.556563 2026] [:error] [pid 53180:tid 53459] [client 20.220.162.180:49300] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "aaR8pTPPJpDOBvYnaa1bewAAAY8"]
[Mon Mar 02 02:54:17.107282 2026] [:error] [pid 53181:tid 53524] [client 144.91.119.214:57165] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaSLWYr_0T1SazTrJOBjGwAAAQk"], referer: https://www.bing.com/
[Mon Mar 02 02:54:23.605830 2026] [:error] [pid 53181:tid 53539] [client 144.91.119.214:61910] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaSLX4r_0T1SazTrJOBjOAAAARg"], referer: https://wordpress.org/
[Mon Mar 02 05:11:27.907674 2026] [:error] [pid 28795:tid 28873] [client 20.205.120.43:12110] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaSrf7ROd53wZBkdI_cEowAAAIo"]
[Mon Mar 02 05:11:28.396529 2026] [:error] [pid 31257:tid 31267] [client 20.205.120.43:1493] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaSrgP-JFLfishX45N8OOgAAAQQ"]
[Mon Mar 02 05:11:28.900875 2026] [:error] [pid 28908:tid 28934] [client 20.205.120.43:1502] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaSrgIqJmC8ih_lQQnDdwgAAANg"]
[Mon Mar 02 05:11:29.386820 2026] [:error] [pid 28908:tid 28918] [client 20.205.120.43:1535] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaSrgYqJmC8ih_lQQnDdxAAAAMg"]
[Mon Mar 02 05:32:00.275122 2026] [:error] [pid 31257:tid 31279] [client 20.214.137.177:10496] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaSwUP-JFLfishX45N8mfwAAARA"]
[Mon Mar 02 05:32:00.825267 2026] [:error] [pid 31257:tid 31277] [client 20.214.137.177:6421] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaSwUP-JFLfishX45N8mhwAAAQ4"]
[Mon Mar 02 05:32:01.367083 2026] [:error] [pid 28794:tid 28850] [client 20.214.137.177:6257] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaSwUaVy2qpaelbUob0FbQAAAE4"]
[Mon Mar 02 05:32:01.926260 2026] [:error] [pid 28908:tid 28914] [client 20.214.137.177:6258] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "aaSwUYqJmC8ih_lQQnDtkgAAAMQ"]
[Mon Mar 02 07:34:36.563408 2026] [:error] [pid 28794:tid 28860] [client 94.26.106.114:49492] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaTNDKVy2qpaelbUob0-DgAAAFg"], referer: https://t.co/
[Mon Mar 02 07:34:45.753264 2026] [:error] [pid 28908:tid 28916] [client 94.26.106.114:55134] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaTNFYqJmC8ih_lQQnCKyAAAAMY"], referer: https://t.co/
[Mon Mar 02 08:04:41.361790 2026] [:error] [pid 28908:tid 28910] [client 142.248.80.57:64776] [client 142.248.80.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.248.80.57, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaTUGYqJmC8ih_lQQnCtLAAAAMA"]
[Mon Mar 02 08:04:49.802748 2026] [:error] [pid 28908:tid 28914] [client 142.248.80.57:64776] [client 142.248.80.57] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaTUIYqJmC8ih_lQQnCtUwAAAMQ"]
[Mon Mar 02 08:04:52.845912 2026] [:error] [pid 28908:tid 28920] [client 142.248.80.57:64776] [client 142.248.80.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.248.80.57, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaTUJIqJmC8ih_lQQnCtYQAAAMo"]
[Mon Mar 02 11:47:43.080633 2026] [:error] [pid 28908:tid 28933] [client 143.44.165.253:38688] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaUIX4qJmC8ih_lQQnA5PAAAANc"]
[Mon Mar 02 11:47:48.276954 2026] [:error] [pid 28908:tid 28914] [client 143.44.165.253:38688] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaUIZIqJmC8ih_lQQnA5UQAAAMQ"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend
[Mon Mar 02 11:47:53.974383 2026] [autoindex:error] [pid 21575:tid 21581] [client 103.4.122.14:44050] AH01276: Cannot serve directory /home/makifimc/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 11:55:14.848189 2026] [:error] [pid 28908:tid 28932] [client 74.7.227.137:37592] [client 74.7.227.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.137, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUKIoqJmC8ih_lQQnBDIwAAANY"], referer: https://makifim.com.au/
[Mon Mar 02 11:56:22.309672 2026] [:error] [pid 23872:tid 23889] [client 74.243.251.125:12723] [client 74.243.251.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaUKZkzkQFuA2qBk8UMA8wAAAY4"]
[Mon Mar 02 11:57:12.065466 2026] [:error] [pid 21575:tid 21602] [client 74.243.251.125:12680] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUKmCrocdArcJqFfIkFMgAAAVc"]
[Mon Mar 02 11:57:12.390848 2026] [:error] [pid 28908:tid 28929] [client 74.243.251.125:12708] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUKmIqJmC8ih_lQQnBGJgAAANM"]
[Mon Mar 02 11:57:12.714348 2026] [:error] [pid 21575:tid 21595] [client 74.243.251.125:13062] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUKmCrocdArcJqFfIkFNAAAAVA"]
[Mon Mar 02 11:57:13.065993 2026] [:error] [pid 28908:tid 28911] [client 74.243.251.125:12685] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUKmYqJmC8ih_lQQnBGKwAAAME"]
[Mon Mar 02 11:57:13.469779 2026] [:error] [pid 23872:tid 23893] [client 74.243.251.125:12709] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaUKmUzkQFuA2qBk8UMCCwAAAZI"]
[Mon Mar 02 11:57:13.873652 2026] [:error] [pid 23872:tid 23897] [client 74.243.251.125:12684] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaUKmUzkQFuA2qBk8UMCDQAAAZY"]
[Mon Mar 02 11:57:14.227741 2026] [:error] [pid 28908:tid 28911] [client 74.243.251.125:13102] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaUKmoqJmC8ih_lQQnBGNgAAAME"]
[Mon Mar 02 11:57:14.635012 2026] [:error] [pid 21575:tid 21591] [client 74.243.251.125:12698] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaUKmirocdArcJqFfIkFPAAAAUw"]
[Mon Mar 02 11:57:14.987540 2026] [:error] [pid 28908:tid 28917] [client 74.243.251.125:12718] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaUKmoqJmC8ih_lQQnBGOwAAAMc"]
[Mon Mar 02 11:57:15.402844 2026] [:error] [pid 31257:tid 31280] [client 74.243.251.125:13072] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaUKm_-JFLfishX45N9iDAAAARE"]
[Mon Mar 02 11:57:15.753942 2026] [:error] [pid 31257:tid 31268] [client 74.243.251.125:12705] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaUKm_-JFLfishX45N9iEgAAAQU"]
[Mon Mar 02 11:57:16.158711 2026] [:error] [pid 28908:tid 28934] [client 74.243.251.125:12681] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaUKnIqJmC8ih_lQQnBGQAAAANg"]
[Mon Mar 02 11:57:16.482150 2026] [:error] [pid 21575:tid 21581] [client 74.243.251.125:12697] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaUKnCrocdArcJqFfIkFRAAAAUI"]
[Mon Mar 02 11:57:16.805957 2026] [:error] [pid 21575:tid 21585] [client 74.243.251.125:12726] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaUKnCrocdArcJqFfIkFSAAAAUY"]
[Mon Mar 02 11:57:17.208605 2026] [:error] [pid 23872:tid 23878] [client 74.243.251.125:12701] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaUKnUzkQFuA2qBk8UMCJgAAAYM"]
[Mon Mar 02 11:57:17.560231 2026] [:error] [pid 21575:tid 21601] [client 74.243.251.125:12677] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaUKnSrocdArcJqFfIkFUQAAAVY"]
[Mon Mar 02 11:57:17.962680 2026] [:error] [pid 21575:tid 21589] [client 74.243.251.125:12731] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaUKnSrocdArcJqFfIkFVQAAAUo"]
[Mon Mar 02 11:57:18.366461 2026] [:error] [pid 23872:tid 23880] [client 74.243.251.125:12691] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaUKnkzkQFuA2qBk8UMCMQAAAYU"]
[Mon Mar 02 11:57:18.768028 2026] [:error] [pid 23872:tid 23895] [client 74.243.251.125:12719] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaUKnkzkQFuA2qBk8UMCNgAAAZQ"]
[Mon Mar 02 11:57:19.170496 2026] [:error] [pid 28908:tid 28928] [client 74.243.251.125:12724] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaUKn4qJmC8ih_lQQnBGRgAAANI"]
[Mon Mar 02 12:29:06.158145 2026] [:error] [pid 21575:tid 21589] [client 20.104.206.150:38848] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.phpa"] [unique_id "aaUSEirocdArcJqFfIktrAAAAUo"]
[Mon Mar 02 12:29:06.583222 2026] [:error] [pid 23872:tid 23891] [client 20.104.206.150:38898] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.phpa"] [unique_id "aaUSEkzkQFuA2qBk8UMYoAAAAZA"]
[Mon Mar 02 12:29:07.004774 2026] [:error] [pid 14466:tid 14483] [client 20.104.206.150:38893] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.phpa"] [unique_id "aaUSE_8w-ahEIiUSqM5acwAAAc8"]
[Mon Mar 02 12:29:07.457962 2026] [:error] [pid 14466:tid 14469] [client 20.104.206.150:38797] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.phpa"] [unique_id "aaUSE_8w-ahEIiUSqM5adQAAAcE"]
[Mon Mar 02 12:29:07.876322 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:38856] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aaUSE0zkQFuA2qBk8UMYpQAAAYc"]
[Mon Mar 02 12:29:08.293456 2026] [:error] [pid 28794:tid 28839] [client 20.104.206.150:38849] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aaUSFKVy2qpaelbUob2FiwAAAEM"]
[Mon Mar 02 12:29:08.733035 2026] [:error] [pid 21575:tid 21595] [client 20.104.206.150:38885] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aaUSFCrocdArcJqFfIktxAAAAVA"]
[Mon Mar 02 12:29:09.153348 2026] [:error] [pid 31257:tid 31270] [client 20.104.206.150:38897] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/defaults.php"] [unique_id "aaUSFf-JFLfishX45N9xNwAAAQc"]
[Mon Mar 02 12:29:09.562571 2026] [:error] [pid 28795:tid 28883] [client 20.104.206.150:38798] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/im.php"] [unique_id "aaUSFbROd53wZBkdI_fD3AAAAJQ"]
[Mon Mar 02 12:29:09.970952 2026] [:error] [pid 28795:tid 28869] [client 20.104.206.150:38870] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/im.php"] [unique_id "aaUSFbROd53wZBkdI_fD3gAAAIY"]
[Mon Mar 02 12:29:10.379785 2026] [:error] [pid 23872:tid 23884] [client 20.104.206.150:38819] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/im.php"] [unique_id "aaUSFkzkQFuA2qBk8UMYqgAAAYk"]
[Mon Mar 02 12:29:10.792066 2026] [:error] [pid 28908:tid 28920] [client 20.104.206.150:38806] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/im.php"] [unique_id "aaUSFoqJmC8ih_lQQnB63QAAAMo"]
[Mon Mar 02 12:29:11.222371 2026] [:error] [pid 28908:tid 28926] [client 20.104.206.150:38855] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaUSF4qJmC8ih_lQQnB64wAAANA"]
[Mon Mar 02 12:29:11.633824 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:38869] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaUSF0zkQFuA2qBk8UMYqwAAAY4"]
[Mon Mar 02 12:29:12.055248 2026] [:error] [pid 31257:tid 31278] [client 20.104.206.150:38820] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaUSGP-JFLfishX45N9xQQAAAQ8"]
[Mon Mar 02 12:29:12.478071 2026] [:error] [pid 28794:tid 28842] [client 20.104.206.150:38880] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaUSGKVy2qpaelbUob2FkgAAAEY"]
[Mon Mar 02 12:29:12.893895 2026] [:error] [pid 23872:tid 23896] [client 20.104.206.150:38890] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache-compat.php"] [unique_id "aaUSGEzkQFuA2qBk8UMYrgAAAZU"]
[Mon Mar 02 12:29:13.337580 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:38866] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache-compat.php"] [unique_id "aaUSGYqJmC8ih_lQQnB67wAAAMM"]
[Mon Mar 02 12:29:13.749542 2026] [:error] [pid 28795:tid 28882] [client 20.104.206.150:38867] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache-compat.php"] [unique_id "aaUSGbROd53wZBkdI_fD4gAAAJM"]
[Mon Mar 02 12:29:14.173905 2026] [:error] [pid 28795:tid 28872] [client 20.104.206.150:38791] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache-compat.php"] [unique_id "aaUSGrROd53wZBkdI_fD4wAAAIk"]
[Mon Mar 02 12:29:14.595618 2026] [:error] [pid 28908:tid 28927] [client 20.104.206.150:38795] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaUSGoqJmC8ih_lQQnB6-wAAANE"]
[Mon Mar 02 12:29:15.046950 2026] [:error] [pid 14466:tid 14490] [client 20.104.206.150:38805] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaUSG_8w-ahEIiUSqM5afAAAAdY"]
[Mon Mar 02 12:29:15.488866 2026] [:error] [pid 14466:tid 14487] [client 20.104.206.150:38853] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaUSG_8w-ahEIiUSqM5afwAAAdM"]
[Mon Mar 02 12:29:15.922399 2026] [:error] [pid 28908:tid 28911] [client 20.104.206.150:38859] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fw.php"] [unique_id "aaUSG4qJmC8ih_lQQnB7AgAAAME"]
[Mon Mar 02 12:29:16.351586 2026] [:error] [pid 21575:tid 21585] [client 20.104.206.150:38900] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aaUSHCrocdArcJqFfIkt3AAAAUY"]
[Mon Mar 02 12:29:16.802756 2026] [:error] [pid 28795:tid 28874] [client 20.104.206.150:38892] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aaUSHLROd53wZBkdI_fD6AAAAIs"]
[Mon Mar 02 12:29:17.237176 2026] [:error] [pid 28793:tid 28814] [client 20.104.206.150:38882] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aaUSHQ2_fxBANaHo1f5jWwAAAAc"]
[Mon Mar 02 12:29:17.666807 2026] [:error] [pid 31257:tid 31276] [client 20.104.206.150:38876] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berlin.php"] [unique_id "aaUSHf-JFLfishX45N9xVAAAAQ0"]
[Mon Mar 02 12:29:18.138928 2026] [:error] [pid 28795:tid 28867] [client 20.104.206.150:38886] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aaUSHrROd53wZBkdI_fD7AAAAIQ"]
[Mon Mar 02 12:29:18.566456 2026] [:error] [pid 23872:tid 23881] [client 20.104.206.150:38860] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aaUSHkzkQFuA2qBk8UMYugAAAYY"]
[Mon Mar 02 12:29:18.999668 2026] [:error] [pid 14466:tid 14478] [client 20.104.206.150:38736] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aaUSHv8w-ahEIiUSqM5ahQAAAco"]
[Mon Mar 02 12:29:19.412134 2026] [:error] [pid 28908:tid 28930] [client 20.104.206.150:38855] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abe.php"] [unique_id "aaUSH4qJmC8ih_lQQnB7DQAAANQ"]
[Mon Mar 02 12:29:19.823412 2026] [:error] [pid 23872:tid 23896] [client 20.104.206.150:38908] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/otuz1.php"] [unique_id "aaUSH0zkQFuA2qBk8UMYvwAAAZU"]
[Mon Mar 02 12:29:20.235199 2026] [:error] [pid 23872:tid 23878] [client 20.104.206.150:38865] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/otuz1.php"] [unique_id "aaUSIEzkQFuA2qBk8UMYxAAAAYM"]
[Mon Mar 02 12:29:20.650776 2026] [:error] [pid 23872:tid 23876] [client 20.104.206.150:38887] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/otuz1.php"] [unique_id "aaUSIEzkQFuA2qBk8UMYzAAAAYE"]
[Mon Mar 02 12:29:21.064609 2026] [:error] [pid 28793:tid 28808] [client 20.104.206.150:38787] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/otuz1.php"] [unique_id "aaUSIQ2_fxBANaHo1f5jYAAAAAE"]
[Mon Mar 02 12:29:21.477378 2026] [:error] [pid 28908:tid 28925] [client 20.104.206.150:38905] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-files.php"] [unique_id "aaUSIYqJmC8ih_lQQnB7FAAAAM8"]
[Mon Mar 02 12:29:21.914204 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:38803] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-files.php"] [unique_id "aaUSIYqJmC8ih_lQQnB7GwAAAMY"]
[Mon Mar 02 12:29:22.324503 2026] [:error] [pid 28908:tid 28932] [client 20.104.206.150:38881] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-files.php"] [unique_id "aaUSIoqJmC8ih_lQQnB7HwAAANY"]
[Mon Mar 02 12:29:22.750291 2026] [:error] [pid 23872:tid 23883] [client 20.104.206.150:38788] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-files.php"] [unique_id "aaUSIkzkQFuA2qBk8UMY1gAAAYg"]
[Mon Mar 02 12:29:23.169857 2026] [:error] [pid 31257:tid 31277] [client 20.104.206.150:38874] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "aaUSI_-JFLfishX45N9xYQAAAQ4"]
[Mon Mar 02 12:29:23.584274 2026] [:error] [pid 23872:tid 23898] [client 20.104.206.150:38854] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "aaUSI0zkQFuA2qBk8UMY2gAAAZc"]
[Mon Mar 02 12:29:23.997319 2026] [:error] [pid 28908:tid 28927] [client 20.104.206.150:38883] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "aaUSI4qJmC8ih_lQQnB7KAAAANE"]
[Mon Mar 02 12:29:24.409489 2026] [:error] [pid 28908:tid 28928] [client 20.104.206.150:38811] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "aaUSJIqJmC8ih_lQQnB7LAAAANI"]
[Mon Mar 02 12:29:24.823078 2026] [:error] [pid 14466:tid 14474] [client 20.104.206.150:38800] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "aaUSJP8w-ahEIiUSqM5aiAAAAcY"]
[Mon Mar 02 12:29:25.247461 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:38796] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "aaUSJYqJmC8ih_lQQnB7OAAAAMY"]
[Mon Mar 02 12:29:25.668738 2026] [:error] [pid 23872:tid 23875] [client 20.104.206.150:38864] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "aaUSJUzkQFuA2qBk8UMY4AAAAYA"]
[Mon Mar 02 12:29:26.089563 2026] [:error] [pid 28908:tid 28932] [client 20.104.206.150:38896] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "aaUSJoqJmC8ih_lQQnB7PAAAANY"]
[Mon Mar 02 12:29:26.508502 2026] [:error] [pid 21575:tid 21594] [client 20.104.206.150:38847] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aaUSJirocdArcJqFfIkt9wAAAU8"]
[Mon Mar 02 12:29:26.929466 2026] [:error] [pid 28908:tid 28914] [client 20.104.206.150:38730] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aaUSJoqJmC8ih_lQQnB7QgAAAMQ"]
[Mon Mar 02 12:29:27.352062 2026] [:error] [pid 21575:tid 21585] [client 20.104.206.150:38834] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aaUSJyrocdArcJqFfIkuBgAAAUY"]
[Mon Mar 02 12:29:27.764478 2026] [:error] [pid 28908:tid 28912] [client 20.104.206.150:38888] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cache.php"] [unique_id "aaUSJ4qJmC8ih_lQQnB7SgAAAMI"]
[Mon Mar 02 12:29:28.179642 2026] [:error] [pid 28908:tid 28914] [client 20.104.206.150:38817] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aaUSKIqJmC8ih_lQQnB7TQAAAMQ"]
[Mon Mar 02 12:29:28.595051 2026] [:error] [pid 23872:tid 23884] [client 20.104.206.150:38835] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "aaUSKEzkQFuA2qBk8UMY6wAAAYk"]
[Mon Mar 02 12:29:29.017793 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:38899] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "aaUSKUzkQFuA2qBk8UMY7AAAAYc"]
[Mon Mar 02 12:29:29.443850 2026] [:error] [pid 28908:tid 28932] [client 20.104.206.150:38785] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "aaUSKYqJmC8ih_lQQnB7VgAAANY"]
[Mon Mar 02 12:29:29.858879 2026] [:error] [pid 23872:tid 23883] [client 20.104.206.150:38904] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blog.php"] [unique_id "aaUSKUzkQFuA2qBk8UMY8QAAAYg"]
[Mon Mar 02 12:29:30.280788 2026] [:error] [pid 21575:tid 21597] [client 20.104.206.150:38807] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blog.php"] [unique_id "aaUSKirocdArcJqFfIkuGwAAAVI"]
[Mon Mar 02 12:29:30.708076 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:38761] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blog.php"] [unique_id "aaUSKoqJmC8ih_lQQnB7WQAAAMA"]
[Mon Mar 02 12:29:31.140185 2026] [:error] [pid 21575:tid 21579] [client 20.104.206.150:38828] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blog.php"] [unique_id "aaUSKyrocdArcJqFfIkuIwAAAUA"]
[Mon Mar 02 12:29:31.586509 2026] [:error] [pid 21575:tid 21583] [client 20.104.206.150:38816] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php7"] [unique_id "aaUSKyrocdArcJqFfIkuJwAAAUQ"]
[Mon Mar 02 12:29:32.007040 2026] [:error] [pid 28908:tid 28929] [client 20.104.206.150:38842] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php7"] [unique_id "aaUSLIqJmC8ih_lQQnB7XQAAANM"]
[Mon Mar 02 12:29:32.418913 2026] [:error] [pid 23872:tid 23879] [client 20.104.206.150:38858] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php7"] [unique_id "aaUSLEzkQFuA2qBk8UMZAAAAAYQ"]
[Mon Mar 02 12:29:32.829471 2026] [:error] [pid 28908:tid 28926] [client 20.104.206.150:38804] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfanew.php7"] [unique_id "aaUSLIqJmC8ih_lQQnB7YQAAANA"]
[Mon Mar 02 12:29:33.266077 2026] [:error] [pid 21575:tid 21596] [client 20.104.206.150:38871] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lufix.php"] [unique_id "aaUSLSrocdArcJqFfIkuNgAAAVE"]
[Mon Mar 02 12:29:33.698838 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:38772] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lufix.php"] [unique_id "aaUSLYqJmC8ih_lQQnB7ZQAAAMY"]
[Mon Mar 02 12:29:34.115955 2026] [:error] [pid 23872:tid 23890] [client 20.104.206.150:38894] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lufix.php"] [unique_id "aaUSLkzkQFuA2qBk8UMZHAAAAY8"]
[Mon Mar 02 12:29:34.528905 2026] [:error] [pid 28908:tid 28934] [client 20.104.206.150:38733] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lufix.php"] [unique_id "aaUSLoqJmC8ih_lQQnB7agAAANg"]
[Mon Mar 02 12:29:34.943009 2026] [:error] [pid 28908:tid 28931] [client 20.104.206.150:38784] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax-actions.php"] [unique_id "aaUSLoqJmC8ih_lQQnB7bgAAANU"]
[Mon Mar 02 12:29:35.359141 2026] [:error] [pid 28908:tid 28911] [client 20.104.206.150:38740] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax-actions.php"] [unique_id "aaUSL4qJmC8ih_lQQnB7cQAAAME"]
[Mon Mar 02 12:29:35.780581 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:38868] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax-actions.php"] [unique_id "aaUSL4qJmC8ih_lQQnB7cwAAAMA"]
[Mon Mar 02 12:29:36.194757 2026] [:error] [pid 28908:tid 28923] [client 20.104.206.150:38909] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax-actions.php"] [unique_id "aaUSMIqJmC8ih_lQQnB7eAAAAM0"]
[Mon Mar 02 12:29:36.607755 2026] [:error] [pid 23872:tid 23899] [client 20.104.206.150:38895] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaUSMEzkQFuA2qBk8UMZQgAAAZg"]
[Mon Mar 02 12:29:37.027002 2026] [:error] [pid 28794:tid 28849] [client 20.104.206.150:38745] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaUSMaVy2qpaelbUob2F0QAAAE0"]
[Mon Mar 02 12:29:37.440930 2026] [:error] [pid 23872:tid 23897] [client 20.104.206.150:38873] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaUSMUzkQFuA2qBk8UMZRQAAAZY"]
[Mon Mar 02 12:29:37.851403 2026] [:error] [pid 21575:tid 21601] [client 20.104.206.150:38725] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaUSMSrocdArcJqFfIkuTQAAAVY"]
[Mon Mar 02 12:29:38.267736 2026] [:error] [pid 28908:tid 28921] [client 20.104.206.150:38810] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aaUSMoqJmC8ih_lQQnB7gwAAAMs"]
[Mon Mar 02 12:29:38.688891 2026] [:error] [pid 31257:tid 31282] [client 20.104.206.150:38884] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aaUSMv-JFLfishX45N9xggAAARM"]
[Mon Mar 02 12:29:39.099750 2026] [:error] [pid 23872:tid 23878] [client 20.104.206.150:38790] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aaUSM0zkQFuA2qBk8UMZTgAAAYM"]
[Mon Mar 02 12:29:39.512667 2026] [:error] [pid 23872:tid 23897] [client 20.104.206.150:38786] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc.php"] [unique_id "aaUSM0zkQFuA2qBk8UMZUQAAAZY"]
[Mon Mar 02 12:29:39.926245 2026] [:error] [pid 28908:tid 28915] [client 20.104.206.150:38789] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aaUSM4qJmC8ih_lQQnB7hgAAAMU"]
[Mon Mar 02 12:29:40.341344 2026] [:error] [pid 31257:tid 31265] [client 20.104.206.150:38734] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aaUSNP-JFLfishX45N9xgwAAAQI"]
[Mon Mar 02 12:29:40.756217 2026] [:error] [pid 28908:tid 28926] [client 20.104.206.150:38903] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aaUSNIqJmC8ih_lQQnB7iQAAANA"]
[Mon Mar 02 12:29:41.172239 2026] [:error] [pid 21575:tid 21584] [client 20.104.206.150:38792] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "aaUSNSrocdArcJqFfIkuVwAAAUU"]
[Mon Mar 02 12:29:41.585542 2026] [:error] [pid 28908:tid 28922] [client 20.104.206.150:38776] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aaUSNYqJmC8ih_lQQnB7lQAAAMw"]
[Mon Mar 02 12:29:42.001687 2026] [:error] [pid 14466:tid 14488] [client 20.104.206.150:38891] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aaUSNv8w-ahEIiUSqM5a6QAAAdQ"]
[Mon Mar 02 12:29:42.421911 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:38720] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aaUSNkzkQFuA2qBk8UMZsAAAAYc"]
[Mon Mar 02 12:29:42.833799 2026] [:error] [pid 28908:tid 28931] [client 20.104.206.150:38756] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/browse.php"] [unique_id "aaUSNoqJmC8ih_lQQnB7nQAAANU"]
[Mon Mar 02 12:29:43.244012 2026] [:error] [pid 28793:tid 28821] [client 20.104.206.150:38827] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aaUSNw2_fxBANaHo1f5jYwAAAA4"]
[Mon Mar 02 12:29:43.659146 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:38775] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aaUSN4qJmC8ih_lQQnB7qAAAAMA"]
[Mon Mar 02 12:29:44.075571 2026] [:error] [pid 28794:tid 28845] [client 20.104.206.150:38879] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aaUSOKVy2qpaelbUob2F1QAAAEk"]
[Mon Mar 02 12:29:44.498938 2026] [:error] [pid 28908:tid 28927] [client 20.104.206.150:38758] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/license.php"] [unique_id "aaUSOIqJmC8ih_lQQnB7rwAAANE"]
[Mon Mar 02 12:29:44.917106 2026] [:error] [pid 28908:tid 28921] [client 20.104.206.150:38724] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaUSOIqJmC8ih_lQQnB7tAAAAMs"]
[Mon Mar 02 12:29:45.333477 2026] [:error] [pid 21575:tid 21586] [client 20.104.206.150:38738] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaUSOSrocdArcJqFfIkumgAAAUc"]
[Mon Mar 02 12:29:45.752000 2026] [:error] [pid 28908:tid 28927] [client 20.104.206.150:38663] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaUSOYqJmC8ih_lQQnB7uwAAANE"]
[Mon Mar 02 12:29:46.175435 2026] [:error] [pid 28908:tid 28919] [client 20.104.206.150:38728] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/contact.php"] [unique_id "aaUSOoqJmC8ih_lQQnB7vgAAAMk"]
[Mon Mar 02 12:29:46.603579 2026] [:error] [pid 21575:tid 21600] [client 20.104.206.150:38813] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aaUSOirocdArcJqFfIkunwAAAVU"]
[Mon Mar 02 12:29:47.030075 2026] [:error] [pid 14466:tid 14483] [client 20.104.206.150:38681] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aaUSO_8w-ahEIiUSqM5bBAAAAc8"]
[Mon Mar 02 12:29:47.474074 2026] [:error] [pid 14466:tid 14468] [client 20.104.206.150:38825] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aaUSO_8w-ahEIiUSqM5bBwAAAcA"]
[Mon Mar 02 12:29:47.888011 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:38857] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/minik.php"] [unique_id "aaUSO4qJmC8ih_lQQnB7ywAAAMM"]
[Mon Mar 02 12:29:48.307491 2026] [:error] [pid 14466:tid 14478] [client 20.104.206.150:38762] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aaUSPP8w-ahEIiUSqM5bCwAAAco"]
[Mon Mar 02 12:29:48.723591 2026] [:error] [pid 31257:tid 31279] [client 20.104.206.150:38737] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aaUSPP-JFLfishX45N9xjwAAARA"]
[Mon Mar 02 12:29:49.139454 2026] [:error] [pid 28794:tid 28855] [client 20.104.206.150:38735] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aaUSPaVy2qpaelbUob2F1wAAAFM"]
[Mon Mar 02 12:29:49.560373 2026] [:error] [pid 31257:tid 31286] [client 20.104.206.150:38850] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/st.php"] [unique_id "aaUSPf-JFLfishX45N9xkQAAARc"]
[Mon Mar 02 12:29:49.976967 2026] [:error] [pid 21575:tid 21601] [client 20.104.206.150:38812] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upgrade.php"] [unique_id "aaUSPSrocdArcJqFfIkurAAAAVY"]
[Mon Mar 02 12:29:50.389771 2026] [:error] [pid 28794:tid 28836] [client 20.104.206.150:38840] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upgrade.php"] [unique_id "aaUSPqVy2qpaelbUob2F2gAAAEA"]
[Mon Mar 02 12:29:50.809296 2026] [:error] [pid 31257:tid 31271] [client 20.104.206.150:38829] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upgrade.php"] [unique_id "aaUSPv-JFLfishX45N9xmAAAAQg"]
[Mon Mar 02 12:29:51.229537 2026] [:error] [pid 21575:tid 21585] [client 20.104.206.150:38838] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upgrade.php"] [unique_id "aaUSPyrocdArcJqFfIkuwgAAAUY"]
[Mon Mar 02 17:36:38.572632 2026] [:error] [pid 28847:tid 28851] [client 143.44.165.253:50466] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaVaJp9xbBq8VfeqVDadaAAAAMI"], referer: https://makifim.com.au/wp-admin/options-general.php?page=wprocket
[Mon Mar 02 17:36:40.767096 2026] [:error] [pid 28847:tid 28861] [client 143.44.165.253:50466] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaVaKJ9xbBq8VfeqVDadegAAAMw"], referer: https://makifim.com.au/wp-admin/options-general.php?page=wprocket
[Mon Mar 02 18:19:54.621924 2026] [:error] [pid 28847:tid 28870] [client 172.98.32.86:23937] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaVkSp9xbBq8VfeqVDa9xgAAANU"]
[Mon Mar 02 18:19:58.906015 2026] [:error] [pid 28847:tid 28872] [client 172.98.32.94:46275] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaVkTp9xbBq8VfeqVDa92AAAANc"]
[Mon Mar 02 18:20:07.500254 2026] [:error] [pid 59600:tid 59625] [client 172.98.32.92:60047] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaVkV4Q5lE4yocV9IBf9OgAAABA"]
[Mon Mar 02 18:20:13.708545 2026] [:error] [pid 59601:tid 59657] [client 172.98.32.87:39741] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaVkXcQ1lXfvWN0-ZQlxMQAAAFM"]
[Mon Mar 02 18:20:23.229902 2026] [:error] [pid 28847:tid 28857] [client 172.98.32.93:53359] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaVkZ59xbBq8VfeqVDa-TQAAAMg"]
[Mon Mar 02 18:20:26.047125 2026] [:error] [pid 28847:tid 28851] [client 45.132.227.64:27133] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaVkap9xbBq8VfeqVDa-WQAAAMI"]
[Mon Mar 02 18:20:26.735741 2026] [:error] [pid 28847:tid 28856] [client 172.98.32.84:26333] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaVkap9xbBq8VfeqVDa-XAAAAMc"]
[Mon Mar 02 18:20:27.320211 2026] [:error] [pid 28847:tid 28853] [client 45.132.227.65:49735] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaVka59xbBq8VfeqVDa-XwAAAMQ"]
[Mon Mar 02 18:20:27.940044 2026] [:error] [pid 59600:tid 59617] [client 172.98.32.93:21539] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaVka4Q5lE4yocV9IBf9UwAAAAg"]
[Mon Mar 02 18:20:29.125075 2026] [:error] [pid 59600:tid 59619] [client 45.132.227.57:41507] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaVkbYQ5lE4yocV9IBf9XAAAAAo"]
[Mon Mar 02 18:20:31.694704 2026] [:error] [pid 59600:tid 59625] [client 136.144.42.69:63431] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaVkb4Q5lE4yocV9IBf9ZgAAABA"]
[Mon Mar 02 18:20:35.797267 2026] [:error] [pid 59602:tid 59668] [client 136.144.42.70:26945] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aaVkczMtSo_Fr0lHnSYlcQAAAIM"]
[Mon Mar 02 18:20:40.376967 2026] [:error] [pid 28847:tid 28869] [client 172.98.32.86:48839] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaVkeJ9xbBq8VfeqVDa-kwAAANQ"]
[Mon Mar 02 18:20:42.509139 2026] [:error] [pid 59600:tid 59625] [client 45.132.227.57:25921] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaVkeoQ5lE4yocV9IBf9dAAAABA"]
[Mon Mar 02 18:20:45.128678 2026] [:error] [pid 28847:tid 28854] [client 45.132.227.67:34215] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaVkfZ9xbBq8VfeqVDa-pwAAAMU"]
[Mon Mar 02 18:20:54.284574 2026] [:error] [pid 28847:tid 28854] [client 45.132.227.62:51291] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaVkhp9xbBq8VfeqVDa-zQAAAMU"]
[Mon Mar 02 18:20:56.865677 2026] [:error] [pid 59602:tid 59672] [client 172.98.32.96:64963] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaVkiDMtSo_Fr0lHnSYlewAAAIc"]
[Mon Mar 02 18:20:59.934819 2026] [:error] [pid 59600:tid 59627] [client 172.98.32.89:59837] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaVki4Q5lE4yocV9IBf9kAAAABI"]
[Mon Mar 02 18:21:02.499359 2026] [:error] [pid 59602:tid 59670] [client 45.132.227.53:60439] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaVkjjMtSo_Fr0lHnSYljwAAAIU"]
[Mon Mar 02 18:21:11.813339 2026] [:error] [pid 59600:tid 59627] [client 172.98.32.96:34693] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaVkl4Q5lE4yocV9IBf9ugAAABI"]
[Mon Mar 02 18:21:13.992182 2026] [:error] [pid 28847:tid 28859] [client 136.144.42.80:31329] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaVkmZ9xbBq8VfeqVDa_FAAAAMo"]
[Mon Mar 02 18:21:16.459584 2026] [:error] [pid 59602:tid 59683] [client 136.144.42.80:62333] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaVknDMtSo_Fr0lHnSYlrAAAAJI"]
[Mon Mar 02 18:21:17.077968 2026] [:error] [pid 59734:tid 59741] [client 45.132.227.53:45775] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaVknZeWQx7ZQG9NybH2QAAAAUU"]
[Mon Mar 02 18:21:17.638962 2026] [:error] [pid 59734:tid 59740] [client 45.132.227.57:45375] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaVknZeWQx7ZQG9NybH2QQAAAUQ"]
[Mon Mar 02 18:21:23.975862 2026] [:error] [pid 59734:tid 59745] [client 45.132.227.61:32521] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaVko5eWQx7ZQG9NybH2TQAAAUk"]
[Mon Mar 02 18:21:24.628974 2026] [:error] [pid 28847:tid 28854] [client 45.132.227.52:48197] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaVkpJ9xbBq8VfeqVDa_OQAAAMU"]
[Mon Mar 02 18:21:25.294215 2026] [:error] [pid 28847:tid 28866] [client 45.132.227.60:22501] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaVkpZ9xbBq8VfeqVDa_PQAAANE"]
[Mon Mar 02 18:21:41.117405 2026] [:error] [pid 28847:tid 28857] [client 136.144.42.69:62617] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaVktZ9xbBq8VfeqVDa_dQAAAMg"]
[Mon Mar 02 18:21:45.405975 2026] [:error] [pid 59602:tid 59683] [client 172.98.32.77:35851] [client 172.98.32.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.77, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaVkuTMtSo_Fr0lHnSYmAQAAAJI"]
[Mon Mar 02 18:22:05.445562 2026] [:error] [pid 59602:tid 59666] [client 172.98.32.77:35851] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaVkzTMtSo_Fr0lHnSYmJwAAAIE"]
[Mon Mar 02 18:22:10.041171 2026] [:error] [pid 59602:tid 59683] [client 136.144.42.69:37773] [client 136.144.42.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.69, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaVk0jMtSo_Fr0lHnSYmMQAAAJI"]
[Mon Mar 02 18:22:13.489424 2026] [:error] [pid 59602:tid 59684] [client 136.144.42.69:37773] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaVk1TMtSo_Fr0lHnSYmOAAAAJM"]
[Mon Mar 02 18:22:27.142501 2026] [:error] [pid 59601:tid 59651] [client 172.98.32.91:60367] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaVk48Q1lXfvWN0-ZQlxaQAAAE0"]
[Mon Mar 02 18:22:40.470908 2026] [:error] [pid 28847:tid 28868] [client 45.132.227.60:64005] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaVk8J9xbBq8VfeqVDbANwAAANM"]
[Mon Mar 02 18:22:45.177949 2026] [:error] [pid 59600:tid 59625] [client 136.144.42.79:50277] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaVk9YQ5lE4yocV9IBf-pwAAABA"]
[Mon Mar 02 18:22:49.748035 2026] [:error] [pid 28847:tid 28867] [client 172.98.32.100:46483] [client 172.98.32.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.100, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaVk-Z9xbBq8VfeqVDbAnQAAANI"]
[Mon Mar 02 18:22:51.212737 2026] [:error] [pid 28847:tid 28872] [client 172.98.32.100:46483] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaVk-59xbBq8VfeqVDbArQAAANc"]
[Mon Mar 02 18:23:16.375817 2026] [:error] [pid 28847:tid 28869] [client 172.98.32.93:36113] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaVlFJ9xbBq8VfeqVDbBIwAAANQ"]
[Mon Mar 02 18:23:21.028801 2026] [:error] [pid 28847:tid 28871] [client 172.98.32.80:53311] [client 172.98.32.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.80, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaVlGZ9xbBq8VfeqVDbBOAAAANY"]
[Mon Mar 02 18:23:28.010778 2026] [:error] [pid 28847:tid 28852] [client 172.98.32.80:53311] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaVlIJ9xbBq8VfeqVDbBXQAAAMM"]
[Mon Mar 02 18:23:30.431330 2026] [:error] [pid 28847:tid 28866] [client 172.98.32.94:54187] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaVlIp9xbBq8VfeqVDbBYQAAANE"]
[Mon Mar 02 18:23:34.592165 2026] [:error] [pid 59600:tid 59623] [client 45.132.227.65:27719] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaVlJoQ5lE4yocV9IBf_EwAAAA4"]
[Mon Mar 02 18:23:41.996936 2026] [:error] [pid 59600:tid 59610] [client 172.98.32.76:25717] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaVlLYQ5lE4yocV9IBf_JQAAAAE"]
[Mon Mar 02 18:23:42.650903 2026] [:error] [pid 59734:tid 59743] [client 136.144.42.79:32025] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaVlLpeWQx7ZQG9NybH22AAAAUc"]
[Mon Mar 02 18:23:50.790684 2026] [:error] [pid 59600:tid 59610] [client 136.144.42.77:56603] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaVlNoQ5lE4yocV9IBf_MwAAAAE"]
[Mon Mar 02 18:23:51.685150 2026] [:error] [pid 28847:tid 28861] [client 45.132.227.55:43809] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaVlN59xbBq8VfeqVDbBuQAAAMw"]
[Mon Mar 02 18:23:58.006973 2026] [:error] [pid 28847:tid 28858] [client 172.98.32.82:21301] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaVlPp9xbBq8VfeqVDbB4AAAAMk"]
[Mon Mar 02 18:24:04.695640 2026] [:error] [pid 28847:tid 28858] [client 136.144.42.78:55433] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaVlRJ9xbBq8VfeqVDbB_AAAAMk"]
[Mon Mar 02 18:24:09.094446 2026] [:error] [pid 59600:tid 59615] [client 172.98.32.84:64429] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaVlSYQ5lE4yocV9IBf_dQAAAAY"]
[Mon Mar 02 18:24:14.528987 2026] [:error] [pid 59600:tid 59620] [client 45.132.227.68:45853] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaVlToQ5lE4yocV9IBf_gAAAAAs"]
[Mon Mar 02 18:24:25.864044 2026] [:error] [pid 59600:tid 59632] [client 172.98.32.95:31307] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaVlWYQ5lE4yocV9IBf_mgAAABc"]
[Mon Mar 02 18:24:26.481244 2026] [:error] [pid 59602:tid 59670] [client 172.98.32.85:39985] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaVlWjMtSo_Fr0lHnSYmzAAAAIU"]
[Mon Mar 02 18:24:27.787768 2026] [:error] [pid 59602:tid 59689] [client 136.144.42.80:29611] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaVlWzMtSo_Fr0lHnSYm0gAAAJg"]
[Mon Mar 02 18:24:28.336694 2026] [:error] [pid 28847:tid 28849] [client 172.98.32.92:30921] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaVlXJ9xbBq8VfeqVDbCVAAAAMA"]
[Mon Mar 02 18:24:30.869822 2026] [:error] [pid 59602:tid 59686] [client 45.132.227.62:38433] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaVlXjMtSo_Fr0lHnSYm2QAAAJU"]
[Mon Mar 02 18:24:31.724971 2026] [:error] [pid 28847:tid 28853] [client 35.190.183.140:51468] [client 35.190.183.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.190.183.140, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaVlX59xbBq8VfeqVDbCZgAAAMQ"]
[Mon Mar 02 18:24:32.555004 2026] [:error] [pid 28847:tid 28866] [client 172.98.32.85:47497] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaVlYJ9xbBq8VfeqVDbCaAAAANE"]
[Mon Mar 02 18:24:36.889182 2026] [:error] [pid 59602:tid 59677] [client 136.144.42.80:59603] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaVlZDMtSo_Fr0lHnSYm7wAAAIw"]
[Mon Mar 02 18:24:37.164557 2026] [:error] [pid 28847:tid 28850] [client 35.190.183.140:51468] [client 35.190.183.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaVlZZ9xbBq8VfeqVDbCcwAAAME"]
[Mon Mar 02 18:24:37.521324 2026] [:error] [pid 59734:tid 59740] [client 136.144.42.78:51991] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaVlZZeWQx7ZQG9NybH3EAAAAUQ"]
[Mon Mar 02 18:24:38.157246 2026] [:error] [pid 59602:tid 59675] [client 45.132.227.52:35239] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaVlZjMtSo_Fr0lHnSYm9gAAAIo"]
[Mon Mar 02 18:24:38.757773 2026] [:error] [pid 59601:tid 59639] [client 172.98.32.82:26935] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaVlZsQ1lXfvWN0-ZQlxmAAAAEE"]
[Mon Mar 02 18:24:39.207525 2026] [:error] [pid 28847:tid 28851] [client 35.190.183.140:51468] [client 35.190.183.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.190.183.140, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aaVlZ59xbBq8VfeqVDbCdQAAAMI"]
[Mon Mar 02 18:24:39.649999 2026] [:error] [pid 59601:tid 59642] [client 45.132.227.63:54723] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaVlZ8Q1lXfvWN0-ZQlxnAAAAEQ"]
[Mon Mar 02 18:24:40.903348 2026] [:error] [pid 59601:tid 59646] [client 45.132.227.55:51563] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaVlaMQ1lXfvWN0-ZQlxoAAAAEg"]
[Mon Mar 02 18:24:48.359253 2026] [:error] [pid 59600:tid 59619] [client 172.98.32.77:41907] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaVlcIQ5lE4yocV9IBf_ugAAAAo"]
[Mon Mar 02 18:25:00.890634 2026] [:error] [pid 28847:tid 28865] [client 136.144.42.73:53049] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaVlfJ9xbBq8VfeqVDbC3AAAANA"]
[Mon Mar 02 18:25:03.906813 2026] [:error] [pid 59601:tid 59642] [client 172.98.32.95:50973] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaVlf8Q1lXfvWN0-ZQlxwwAAAEQ"]
[Mon Mar 02 18:25:04.470931 2026] [:error] [pid 59601:tid 59649] [client 172.98.32.100:35331] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaVlgMQ1lXfvWN0-ZQlxxAAAAEs"]
[Mon Mar 02 18:25:10.288446 2026] [:error] [pid 59602:tid 59676] [client 136.144.42.69:33913] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaVlhjMtSo_Fr0lHnSYnJQAAAIs"]
[Mon Mar 02 18:25:15.086532 2026] [proxy_fcgi:error] [pid 28847:tid 28871] [client 172.98.32.92:65521] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:25:15.423670 2026] [proxy_fcgi:error] [pid 28847:tid 28850] [client 172.98.32.92:65521] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:25:15.725675 2026] [proxy_fcgi:error] [pid 28847:tid 28867] [client 172.98.32.92:65521] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:25:17.286121 2026] [:error] [pid 28847:tid 28870] [client 172.98.32.92:65521] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaVljZ9xbBq8VfeqVDbDIgAAANU"]
[Mon Mar 02 18:25:17.928793 2026] [:error] [pid 28847:tid 28853] [client 172.98.32.94:59275] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaVljZ9xbBq8VfeqVDbDJgAAAMQ"]
[Mon Mar 02 18:25:18.496440 2026] [:error] [pid 28847:tid 28866] [client 172.98.32.97:31283] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaVljp9xbBq8VfeqVDbDKQAAANE"]
[Mon Mar 02 18:25:19.609788 2026] [:error] [pid 59602:tid 59683] [client 172.98.32.78:38011] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaVljzMtSo_Fr0lHnSYnMgAAAJI"]
[Mon Mar 02 18:25:20.233272 2026] [:error] [pid 28847:tid 28863] [client 45.132.227.59:54029] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaVlkJ9xbBq8VfeqVDbDNQAAAM4"]
[Mon Mar 02 18:25:20.783163 2026] [:error] [pid 28847:tid 28859] [client 45.132.227.68:46883] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaVlkJ9xbBq8VfeqVDbDOgAAAMo"]
[Mon Mar 02 18:25:23.007352 2026] [:error] [pid 59600:tid 59609] [client 172.98.32.78:22349] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaVlk4Q5lE4yocV9IBcAAwAAAAA"]
[Mon Mar 02 18:25:23.644485 2026] [:error] [pid 59602:tid 59678] [client 45.132.227.58:60449] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaVlkzMtSo_Fr0lHnSYnOAAAAI0"]
[Mon Mar 02 18:25:24.344037 2026] [:error] [pid 28847:tid 28858] [client 45.132.227.61:65519] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaVllJ9xbBq8VfeqVDbDQwAAAMk"]
[Mon Mar 02 18:25:24.970636 2026] [:error] [pid 59602:tid 59688] [client 45.132.227.62:61329] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaVllDMtSo_Fr0lHnSYnPQAAAJc"]
[Mon Mar 02 18:25:28.940045 2026] [:error] [pid 59734:tid 59760] [client 172.98.32.81:25909] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaVlmJeWQx7ZQG9NybH3SgAAAVg"]
[Mon Mar 02 18:25:29.865991 2026] [:error] [pid 59701:tid 59724] [client 172.98.32.84:21599] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaVlmeUmTDVso96U9_KwFwAAARQ"]
[Mon Mar 02 18:25:34.272731 2026] [:error] [pid 59601:tid 59661] [client 172.98.32.93:41923] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaVlnsQ1lXfvWN0-ZQlx1QAAAFc"]
[Mon Mar 02 18:25:37.234738 2026] [:error] [pid 59701:tid 59723] [client 172.98.32.84:54921] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaVloeUmTDVso96U9_KwKQAAARM"]
[Mon Mar 02 18:25:43.762793 2026] [:error] [pid 28847:tid 28852] [client 45.132.227.58:36729] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaVlp59xbBq8VfeqVDbDqwAAAMM"]
[Mon Mar 02 18:25:52.140331 2026] [:error] [pid 28847:tid 28873] [client 136.144.42.77:61567] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaVlsJ9xbBq8VfeqVDbDxgAAANg"]
[Mon Mar 02 18:25:55.610060 2026] [:error] [pid 59600:tid 59630] [client 45.132.227.60:30695] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaVls4Q5lE4yocV9IBcARAAAABU"]
[Mon Mar 02 18:26:23.138471 2026] [:error] [pid 59602:tid 59672] [client 45.132.227.61:43081] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaVlzzMtSo_Fr0lHnSYnigAAAIc"]
[Mon Mar 02 18:26:23.761997 2026] [:error] [pid 28847:tid 28866] [client 136.144.42.74:59013] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaVlz59xbBq8VfeqVDbEGgAAANE"]
[Mon Mar 02 18:26:24.386327 2026] [:error] [pid 59601:tid 59657] [client 172.98.32.98:33237] [client 172.98.32.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.98, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaVl0MQ1lXfvWN0-ZQlx8AAAAFM"]
[Mon Mar 02 18:26:27.724418 2026] [:error] [pid 59601:tid 59651] [client 172.98.32.98:33237] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaVl08Q1lXfvWN0-ZQlx9QAAAE0"]
[Mon Mar 02 18:26:32.825397 2026] [:error] [pid 59602:tid 59680] [client 45.132.227.65:59463] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaVl2DMtSo_Fr0lHnSYnlgAAAI8"]
[Mon Mar 02 18:26:33.376528 2026] [:error] [pid 59602:tid 59668] [client 45.132.227.55:36727] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaVl2TMtSo_Fr0lHnSYnmQAAAIM"]
[Mon Mar 02 18:26:39.651718 2026] [:error] [pid 28847:tid 28867] [client 172.98.32.88:51569] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaVl359xbBq8VfeqVDbEWgAAANI"]
[Mon Mar 02 18:26:40.300625 2026] [:error] [pid 59600:tid 59626] [client 172.98.32.82:23037] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aaVl4IQ5lE4yocV9IBcA4wAAABE"]
[Mon Mar 02 18:26:49.246231 2026] [:error] [pid 59600:tid 59626] [client 172.98.32.86:28569] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaVl6YQ5lE4yocV9IBcBDwAAABE"]
[Mon Mar 02 18:26:52.290940 2026] [proxy_fcgi:error] [pid 28847:tid 28871] [client 172.98.32.82:48971] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:26:54.098880 2026] [:error] [pid 28847:tid 28861] [client 172.98.32.82:48971] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaVl7p9xbBq8VfeqVDbEgQAAAMw"]
[Mon Mar 02 18:26:55.796933 2026] [:error] [pid 28847:tid 28860] [client 172.98.32.88:31303] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaVl759xbBq8VfeqVDbEiAAAAMs"]
[Mon Mar 02 18:26:58.778348 2026] [:error] [pid 59734:tid 59741] [client 172.98.32.84:55363] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaVl8peWQx7ZQG9NybH3ogAAAUU"]
[Mon Mar 02 18:26:59.385360 2026] [:error] [pid 59601:tid 59658] [client 172.98.32.95:41407] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaVl88Q1lXfvWN0-ZQlyAwAAAFQ"]
[Mon Mar 02 18:27:11.919549 2026] [:error] [pid 59600:tid 59613] [client 45.132.227.52:29485] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaVl_4Q5lE4yocV9IBcBNwAAAAQ"]
[Mon Mar 02 18:27:12.524329 2026] [:error] [pid 28847:tid 28859] [client 45.132.227.58:46139] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaVmAJ9xbBq8VfeqVDbEqQAAAMo"]
[Mon Mar 02 18:27:20.441477 2026] [:error] [pid 28847:tid 28856] [client 172.98.32.91:26793] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaVmCJ9xbBq8VfeqVDbEzQAAAMc"]
[Mon Mar 02 18:27:21.120547 2026] [:error] [pid 59600:tid 59619] [client 172.98.32.82:37981] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaVmCYQ5lE4yocV9IBcBQAAAAAo"]
[Mon Mar 02 18:27:22.849641 2026] [:error] [pid 59602:tid 59674] [client 172.98.32.83:47651] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaVmCjMtSo_Fr0lHnSYoFwAAAIk"]
[Mon Mar 02 18:27:31.029023 2026] [:error] [pid 59600:tid 59614] [client 136.144.42.74:30663] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaVmE4Q5lE4yocV9IBcBXAAAAAU"]
[Mon Mar 02 18:27:33.141639 2026] [:error] [pid 28847:tid 28850] [client 172.98.32.100:44227] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaVmFZ9xbBq8VfeqVDbE6gAAAME"]
[Mon Mar 02 18:27:43.932512 2026] [:error] [pid 59734:tid 59750] [client 172.98.32.86:51663] [client 172.98.32.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.86, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/js/wp-login.php"] [unique_id "aaVmH5eWQx7ZQG9NybH3vwAAAU4"]
[Mon Mar 02 18:27:56.230844 2026] [:error] [pid 59734:tid 59745] [client 172.98.32.86:51663] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaVmLJeWQx7ZQG9NybH33wAAAUk"]
[Mon Mar 02 18:27:56.796072 2026] [:error] [pid 28847:tid 28853] [client 172.98.32.99:57135] [client 172.98.32.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.99, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaVmLJ9xbBq8VfeqVDbFJAAAAMQ"]
[Mon Mar 02 18:28:13.478966 2026] [proxy_fcgi:error] [pid 28847:tid 28852] [client 172.98.32.99:57135] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:28:35.430110 2026] [:error] [pid 28847:tid 28866] [client 172.98.32.99:57135] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaVmU59xbBq8VfeqVDbFgwAAANE"]
[Mon Mar 02 18:28:41.300184 2026] [:error] [pid 59734:tid 59755] [client 172.98.32.78:43151] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaVmWZeWQx7ZQG9NybH4EgAAAVM"]
[Mon Mar 02 18:28:45.778966 2026] [:error] [pid 59600:tid 59626] [client 45.132.227.56:29681] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaVmXYQ5lE4yocV9IBcCkQAAABE"]
[Mon Mar 02 18:29:03.823762 2026] [:error] [pid 59600:tid 59612] [client 172.98.32.93:35981] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaVmb4Q5lE4yocV9IBcC6AAAAAM"]
[Mon Mar 02 18:29:09.732682 2026] [:error] [pid 28847:tid 28869] [client 172.98.32.97:45581] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaVmdZ9xbBq8VfeqVDbF-AAAANQ"]
[Mon Mar 02 18:29:12.204026 2026] [:error] [pid 28847:tid 28866] [client 136.144.42.72:48439] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaVmeJ9xbBq8VfeqVDbGBAAAANE"]
[Mon Mar 02 18:29:18.428067 2026] [proxy_fcgi:error] [pid 59600:tid 59628] [client 136.144.42.74:42565] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:29:18.759104 2026] [proxy_fcgi:error] [pid 59600:tid 59609] [client 136.144.42.74:42565] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:29:19.092089 2026] [:error] [pid 59600:tid 59610] [client 136.144.42.74:42565] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaVmf4Q5lE4yocV9IBcDOQAAAAE"]
[Mon Mar 02 18:29:19.711926 2026] [:error] [pid 28847:tid 28866] [client 172.98.32.78:20843] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaVmf59xbBq8VfeqVDbGIgAAANE"]
[Mon Mar 02 18:29:29.199241 2026] [:error] [pid 59701:tid 59706] [client 172.98.32.96:48177] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaVmieUmTDVso96U9_KwrwAAAQI"]
[Mon Mar 02 18:29:31.224782 2026] [:error] [pid 59701:tid 59715] [client 172.98.32.76:58739] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aaVmi-UmTDVso96U9_KwsQAAAQs"]
[Mon Mar 02 18:29:37.127221 2026] [:error] [pid 59734:tid 59754] [client 45.132.227.68:26485] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaVmkZeWQx7ZQG9NybH4lQAAAVI"]
[Mon Mar 02 18:29:49.088287 2026] [:error] [pid 59601:tid 59659] [client 172.98.32.86:56661] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaVmncQ1lXfvWN0-ZQlybAAAAFU"]
[Mon Mar 02 18:29:49.664742 2026] [proxy_fcgi:error] [pid 28847:tid 28866] [client 172.98.32.76:59491] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:29:50.570265 2026] [:error] [pid 28847:tid 28859] [client 172.98.32.76:59491] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaVmnp9xbBq8VfeqVDbGfwAAAMo"]
[Mon Mar 02 18:29:57.054823 2026] [proxy_fcgi:error] [pid 28847:tid 28860] [client 45.132.227.63:41145] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:29:58.773538 2026] [:error] [pid 28847:tid 28861] [client 45.132.227.63:41145] [client 45.132.227.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.63, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaVmpp9xbBq8VfeqVDbGmgAAAMw"]
[Mon Mar 02 18:30:06.560507 2026] [:error] [pid 28847:tid 28864] [client 45.132.227.63:41145] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaVmrp9xbBq8VfeqVDbGsQAAAM8"]
[Mon Mar 02 18:30:09.069407 2026] [:error] [pid 59734:tid 59752] [client 172.98.32.95:27161] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaVmsZeWQx7ZQG9NybH4-QAAAVA"]
[Mon Mar 02 18:30:14.229856 2026] [:error] [pid 59734:tid 59739] [client 136.144.42.77:25501] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaVmtpeWQx7ZQG9NybH5BAAAAUM"]
[Mon Mar 02 18:30:22.514783 2026] [:error] [pid 28847:tid 28863] [client 136.144.42.72:56623] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaVmvp9xbBq8VfeqVDbG2wAAAM4"]
[Mon Mar 02 18:30:25.096406 2026] [:error] [pid 59602:tid 59677] [client 172.98.32.93:60913] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaVmwTMtSo_Fr0lHnSYpVQAAAIw"]
[Mon Mar 02 18:30:31.188358 2026] [:error] [pid 59601:tid 59656] [client 172.98.32.98:43531] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaVmx8Q1lXfvWN0-ZQlyiQAAAFI"]
[Mon Mar 02 18:30:35.558591 2026] [proxy_fcgi:error] [pid 28847:tid 28857] [client 45.132.227.62:53109] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:30:35.856041 2026] [:error] [pid 28847:tid 28858] [client 45.132.227.62:53109] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaVmy59xbBq8VfeqVDbG7gAAAMk"]
[Mon Mar 02 18:30:36.864294 2026] [:error] [pid 28847:tid 28854] [client 45.132.227.63:45167] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaVmzJ9xbBq8VfeqVDbG8gAAAMU"]
[Mon Mar 02 18:30:37.491900 2026] [:error] [pid 59600:tid 59612] [client 45.132.227.55:58959] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaVmzYQ5lE4yocV9IBcEPwAAAAM"]
[Mon Mar 02 18:30:38.089884 2026] [:error] [pid 59600:tid 59624] [client 172.98.32.90:20337] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaVmzoQ5lE4yocV9IBcEQwAAAA8"]
[Mon Mar 02 18:30:38.679118 2026] [:error] [pid 59600:tid 59622] [client 45.132.227.53:31535] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaVmzoQ5lE4yocV9IBcESAAAAA0"]
[Mon Mar 02 18:30:39.292010 2026] [:error] [pid 59600:tid 59618] [client 172.98.32.85:31217] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaVmz4Q5lE4yocV9IBcESgAAAAk"]
[Mon Mar 02 18:30:39.903528 2026] [:error] [pid 59601:tid 59658] [client 172.98.32.99:20285] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaVmz8Q1lXfvWN0-ZQlyjQAAAFQ"]
[Mon Mar 02 18:30:43.986885 2026] [:error] [pid 28847:tid 28850] [client 45.132.227.54:28567] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaVm059xbBq8VfeqVDbHBAAAAME"]
[Mon Mar 02 18:30:44.585639 2026] [:error] [pid 59734:tid 59740] [client 45.132.227.61:54295] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaVm1JeWQx7ZQG9NybH5LQAAAUQ"]
[Mon Mar 02 18:30:45.209954 2026] [:error] [pid 28847:tid 28866] [client 172.98.32.79:64947] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaVm1Z9xbBq8VfeqVDbHBgAAANE"]
[Mon Mar 02 18:30:47.671563 2026] [:error] [pid 59602:tid 59673] [client 172.98.32.84:31069] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaVm1zMtSo_Fr0lHnSYpqAAAAIg"]
[Mon Mar 02 18:30:52.052711 2026] [:error] [pid 59734:tid 59754] [client 45.132.227.66:21455] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaVm3JeWQx7ZQG9NybH5RwAAAVI"]
[Mon Mar 02 18:30:52.693320 2026] [proxy_fcgi:error] [pid 28847:tid 28852] [client 45.132.227.54:64503] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 18:30:57.217767 2026] [:error] [pid 28847:tid 28856] [client 45.132.227.54:64503] [client 45.132.227.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.54, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaVm4Z9xbBq8VfeqVDbHJQAAAMc"]
[Mon Mar 02 18:31:03.494326 2026] [:error] [pid 28847:tid 28869] [client 45.132.227.54:64503] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaVm559xbBq8VfeqVDbHOgAAANQ"]
[Mon Mar 02 18:31:04.105660 2026] [:error] [pid 28847:tid 28864] [client 136.144.42.70:30513] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaVm6J9xbBq8VfeqVDbHPQAAAM8"]
[Mon Mar 02 18:31:32.088694 2026] [:error] [pid 59701:tid 59709] [client 45.132.227.65:44757] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaVnBOUmTDVso96U9_Kw_QAAAQU"]
[Mon Mar 02 18:31:32.732920 2026] [:error] [pid 59734:tid 59752] [client 172.98.32.79:55315] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaVnBJeWQx7ZQG9NybH5kQAAAVA"]
[Mon Mar 02 18:31:33.303110 2026] [:error] [pid 59602:tid 59688] [client 45.132.227.58:23245] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaVnBTMtSo_Fr0lHnSYp-QAAAJc"]
[Mon Mar 02 18:31:43.473399 2026] [:error] [pid 28847:tid 28863] [client 172.98.32.83:55895] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaVnD59xbBq8VfeqVDbHxwAAAM4"]
[Mon Mar 02 18:31:44.133086 2026] [:error] [pid 28847:tid 28866] [client 172.98.32.82:55255] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaVnEJ9xbBq8VfeqVDbHzAAAANE"]
[Mon Mar 02 18:31:44.727374 2026] [:error] [pid 59601:tid 59649] [client 172.98.32.100:29479] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaVnEMQ1lXfvWN0-ZQlyrgAAAEs"]
[Mon Mar 02 18:31:50.901522 2026] [:error] [pid 28847:tid 28868] [client 172.98.32.98:45589] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaVnFp9xbBq8VfeqVDbH5gAAANM"]
[Mon Mar 02 18:31:53.446401 2026] [:error] [pid 59602:tid 59679] [client 45.132.227.60:36425] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaVnGTMtSo_Fr0lHnSYqFQAAAI4"]
[Mon Mar 02 18:31:57.953246 2026] [:error] [pid 59602:tid 59667] [client 172.98.32.78:53787] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaVnHTMtSo_Fr0lHnSYqHgAAAII"]
[Mon Mar 02 18:32:12.803282 2026] [:error] [pid 59600:tid 59619] [client 45.132.227.68:46091] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaVnLIQ5lE4yocV9IBcFFwAAAAo"]
[Mon Mar 02 18:32:17.435353 2026] [:error] [pid 59600:tid 59615] [client 45.132.227.58:52115] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaVnMYQ5lE4yocV9IBcFKgAAAAY"]
[Mon Mar 02 18:32:28.079102 2026] [:error] [pid 28847:tid 28866] [client 45.132.227.62:47683] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaVnPJ9xbBq8VfeqVDbIswAAANE"]
[Mon Mar 02 18:32:32.500564 2026] [:error] [pid 59602:tid 59666] [client 172.98.32.84:60719] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaVnQDMtSo_Fr0lHnSYqRwAAAIE"]
[Mon Mar 02 18:32:40.078946 2026] [:error] [pid 59701:tid 59726] [client 136.144.42.80:35983] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaVnSOUmTDVso96U9_KxOwAAARY"]
[Mon Mar 02 18:32:50.457078 2026] [:error] [pid 28847:tid 28872] [client 172.98.32.76:21583] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaVnUp9xbBq8VfeqVDbJEwAAANc"]
[Mon Mar 02 18:32:54.944000 2026] [:error] [pid 59734:tid 59742] [client 136.144.42.70:36769] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaVnVpeWQx7ZQG9NybH58gAAAUY"]
[Mon Mar 02 18:32:55.534378 2026] [:error] [pid 59600:tid 59624] [client 172.98.32.92:51173] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaVnV4Q5lE4yocV9IBcFZgAAAA8"]
[Mon Mar 02 18:33:04.556884 2026] [:error] [pid 59734:tid 59742] [client 172.98.32.79:21459] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaVnYJeWQx7ZQG9NybH5_wAAAUY"]
[Mon Mar 02 18:33:17.478919 2026] [:error] [pid 59602:tid 59680] [client 45.132.227.57:59679] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaVnbTMtSo_Fr0lHnSYquQAAAI8"]
[Mon Mar 02 18:33:26.070001 2026] [:error] [pid 59734:tid 59739] [client 172.98.32.79:29571] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaVndpeWQx7ZQG9NybH6JgAAAUM"]
[Mon Mar 02 18:33:26.649622 2026] [:error] [pid 59601:tid 59640] [client 45.132.227.60:32367] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaVndsQ1lXfvWN0-ZQly-gAAAEI"]
[Mon Mar 02 18:33:31.074509 2026] [:error] [pid 59734:tid 59744] [client 172.98.32.97:36595] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaVne5eWQx7ZQG9NybH6MAAAAUg"]
[Mon Mar 02 18:33:35.709219 2026] [:error] [pid 28847:tid 28857] [client 136.144.42.75:36131] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaVnf59xbBq8VfeqVDbJggAAAMg"]
[Mon Mar 02 18:33:36.307800 2026] [:error] [pid 59600:tid 59615] [client 136.144.42.80:29581] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaVngIQ5lE4yocV9IBcFwQAAAAY"]
[Mon Mar 02 18:33:46.697547 2026] [:error] [pid 59734:tid 59740] [client 172.98.32.85:26179] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaVnipeWQx7ZQG9NybH6XwAAAUQ"]
[Mon Mar 02 18:33:57.318468 2026] [autoindex:error] [pid 28847:tid 28863] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:33:57.603874 2026] [autoindex:error] [pid 28847:tid 28857] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:33:57.916517 2026] [autoindex:error] [pid 28847:tid 28856] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:33:58.205940 2026] [autoindex:error] [pid 28847:tid 28858] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:00.348973 2026] [autoindex:error] [pid 28847:tid 28853] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:01.007715 2026] [autoindex:error] [pid 28847:tid 28852] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:01.340546 2026] [autoindex:error] [pid 28847:tid 28856] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:01.654841 2026] [autoindex:error] [pid 28847:tid 28851] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:02.029641 2026] [autoindex:error] [pid 28847:tid 28865] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:02.675035 2026] [autoindex:error] [pid 28847:tid 28860] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:04.520879 2026] [autoindex:error] [pid 28847:tid 28860] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:09.020113 2026] [autoindex:error] [pid 28847:tid 28870] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:09.599466 2026] [autoindex:error] [pid 28847:tid 28873] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:09.923787 2026] [autoindex:error] [pid 28847:tid 28869] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:13.906551 2026] [autoindex:error] [pid 28847:tid 28849] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:16.156952 2026] [autoindex:error] [pid 28847:tid 28862] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:19.807094 2026] [autoindex:error] [pid 28847:tid 28865] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:20.171603 2026] [autoindex:error] [pid 28847:tid 28866] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:20.499681 2026] [autoindex:error] [pid 28847:tid 28849] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:33.022146 2026] [autoindex:error] [pid 28847:tid 28849] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:35.109024 2026] [autoindex:error] [pid 28847:tid 28869] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:35.467628 2026] [autoindex:error] [pid 28847:tid 28849] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:36.372008 2026] [autoindex:error] [pid 28847:tid 28860] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:36.665954 2026] [autoindex:error] [pid 28847:tid 28853] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:34:37.039742 2026] [autoindex:error] [pid 28847:tid 28866] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:38.210867 2026] [autoindex:error] [pid 28847:tid 28861] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:38.529258 2026] [autoindex:error] [pid 28847:tid 28852] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:38.890478 2026] [autoindex:error] [pid 28847:tid 28853] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:39.268327 2026] [autoindex:error] [pid 28847:tid 28861] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:44.250619 2026] [autoindex:error] [pid 28847:tid 28871] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:46.399969 2026] [autoindex:error] [pid 28847:tid 28856] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:46.683599 2026] [autoindex:error] [pid 28847:tid 28849] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:47.062583 2026] [autoindex:error] [pid 28847:tid 28868] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:49.183226 2026] [autoindex:error] [pid 28847:tid 28859] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:49.529514 2026] [autoindex:error] [pid 28847:tid 28866] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:49.819052 2026] [autoindex:error] [pid 28847:tid 28865] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:35:50.186234 2026] [autoindex:error] [pid 28847:tid 28872] [client 172.98.32.94:45299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:36:35.207593 2026] [autoindex:error] [pid 28847:tid 28872] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:36:57.828953 2026] [autoindex:error] [pid 28847:tid 28852] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:05.909214 2026] [autoindex:error] [pid 28847:tid 28864] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:06.266486 2026] [autoindex:error] [pid 28847:tid 28852] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:14.302687 2026] [autoindex:error] [pid 28847:tid 28856] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:14.593811 2026] [autoindex:error] [pid 28847:tid 28862] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:14.927276 2026] [autoindex:error] [pid 28847:tid 28869] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:15.264015 2026] [autoindex:error] [pid 28847:tid 28865] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:15.572532 2026] [autoindex:error] [pid 28847:tid 28850] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:15.853852 2026] [autoindex:error] [pid 28847:tid 28873] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:16.137146 2026] [autoindex:error] [pid 28847:tid 28858] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:16.529209 2026] [autoindex:error] [pid 28847:tid 28861] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:52.304344 2026] [autoindex:error] [pid 28847:tid 28852] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 18:37:56.395053 2026] [autoindex:error] [pid 28847:tid 28859] [client 136.144.42.75:52169] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 19:25:06.166997 2026] [:error] [pid 59601:tid 59641] [client 20.104.86.139:16721] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaVzksQ1lXfvWN0-ZQl9wwAAAEM"]
[Mon Mar 02 19:25:07.005167 2026] [:error] [pid 59602:tid 59677] [client 20.104.86.139:16757] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaVzkzMtSo_Fr0lHnSY_dgAAAIw"]
[Mon Mar 02 19:25:07.844116 2026] [:error] [pid 59701:tid 59715] [client 20.104.86.139:16855] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaVzk-UmTDVso96U9_K9-AAAAQs"]
[Mon Mar 02 19:25:08.679057 2026] [:error] [pid 59734:tid 59741] [client 20.104.86.139:16766] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaVzlJeWQx7ZQG9NybEJygAAAUU"]
[Mon Mar 02 22:53:06.667239 2026] [:error] [pid 59600:tid 59612] [client 20.151.217.152:34559] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaWkUoQ5lE4yocV9IBeY-QAAAAM"]
[Mon Mar 02 22:53:30.387658 2026] [:error] [pid 28847:tid 28851] [client 20.151.217.152:34437] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "aaWkap9xbBq8VfeqVDaZYAAAAMI"]
[Mon Mar 02 22:53:30.802586 2026] [:error] [pid 59600:tid 59625] [client 20.151.217.152:34449] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "aaWkaoQ5lE4yocV9IBeZKwAAABA"]
[Mon Mar 02 22:53:31.212644 2026] [:error] [pid 59602:tid 59686] [client 20.151.217.152:34440] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "aaWkazMtSo_Fr0lHnSaUfgAAAJU"]
[Mon Mar 02 22:53:31.624471 2026] [:error] [pid 59602:tid 59668] [client 20.151.217.152:34553] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpo.php"] [unique_id "aaWkazMtSo_Fr0lHnSaUgAAAAIM"]
[Mon Mar 02 22:53:32.036083 2026] [:error] [pid 59601:tid 59651] [client 20.151.217.152:34541] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpo.php"] [unique_id "aaWkbMQ1lXfvWN0-ZQmmwgAAAE0"]
[Mon Mar 02 22:53:32.451088 2026] [:error] [pid 59601:tid 59654] [client 20.151.217.152:34501] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpo.php"] [unique_id "aaWkbMQ1lXfvWN0-ZQmmxAAAAFA"]
[Mon Mar 02 22:53:32.865501 2026] [:error] [pid 59601:tid 59638] [client 20.151.217.152:34513] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpo.php"] [unique_id "aaWkbMQ1lXfvWN0-ZQmmxQAAAEA"]
[Mon Mar 02 22:53:33.275652 2026] [:error] [pid 59734:tid 59757] [client 20.151.217.152:34468] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaWkbZeWQx7ZQG9NybFH0AAAAVU"]
[Mon Mar 02 22:53:33.693357 2026] [:error] [pid 59734:tid 59749] [client 20.151.217.152:34444] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaWkbZeWQx7ZQG9NybFH0gAAAU0"]
[Mon Mar 02 22:53:34.103421 2026] [:error] [pid 59601:tid 59660] [client 20.151.217.152:34520] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaWkbsQ1lXfvWN0-ZQmmyQAAAFY"]
[Mon Mar 02 22:53:34.518283 2026] [:error] [pid 59602:tid 59665] [client 20.151.217.152:34554] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaWkbjMtSo_Fr0lHnSaUggAAAIA"]
[Mon Mar 02 22:53:34.926036 2026] [:error] [pid 59601:tid 59642] [client 20.151.217.152:34529] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aaWkbsQ1lXfvWN0-ZQmmzQAAAEQ"]
[Mon Mar 02 22:53:35.335418 2026] [:error] [pid 59600:tid 59618] [client 20.151.217.152:34511] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aaWkb4Q5lE4yocV9IBeZOgAAAAk"]
[Mon Mar 02 22:53:35.753065 2026] [:error] [pid 59600:tid 59622] [client 20.151.217.152:34466] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aaWkb4Q5lE4yocV9IBeZPAAAAA0"]
[Mon Mar 02 22:53:36.163932 2026] [:error] [pid 59600:tid 59611] [client 20.151.217.152:34496] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aaWkcIQ5lE4yocV9IBeZPgAAAAI"]
[Mon Mar 02 22:53:36.574842 2026] [:error] [pid 59701:tid 59708] [client 20.151.217.152:34507] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aaWkcOUmTDVso96U9_LwPAAAAQQ"]
[Mon Mar 02 22:53:37.001000 2026] [:error] [pid 59600:tid 59609] [client 20.151.217.152:34545] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aaWkcIQ5lE4yocV9IBeZRAAAAAA"]
[Mon Mar 02 22:53:37.416345 2026] [:error] [pid 59600:tid 59612] [client 20.151.217.152:34445] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaWkcYQ5lE4yocV9IBeZRgAAAAM"]
[Mon Mar 02 22:53:37.827410 2026] [:error] [pid 59734:tid 59750] [client 20.151.217.152:34544] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaWkcZeWQx7ZQG9NybFH2QAAAU4"]
[Mon Mar 02 22:53:38.237774 2026] [:error] [pid 28847:tid 28859] [client 20.151.217.152:34551] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaWkcp9xbBq8VfeqVDaZagAAAMo"]
[Mon Mar 02 22:53:38.652126 2026] [:error] [pid 28847:tid 28866] [client 20.151.217.152:34533] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaWkcp9xbBq8VfeqVDaZbQAAANE"]
[Mon Mar 02 22:53:39.087353 2026] [:error] [pid 59600:tid 59622] [client 20.151.217.152:34557] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaWkc4Q5lE4yocV9IBeZSQAAAA0"]
[Mon Mar 02 23:08:42.322601 2026] [:error] [pid 59602:tid 59687] [client 20.104.86.139:16937] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaWn-jMtSo_Fr0lHnSaaZwAAAJY"]
[Mon Mar 02 23:08:43.171097 2026] [:error] [pid 28847:tid 28872] [client 20.104.86.139:16952] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaWn-59xbBq8VfeqVDakKQAAANc"]
[Mon Mar 02 23:08:44.013508 2026] [:error] [pid 59600:tid 59618] [client 20.104.86.139:53232] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaWn_IQ5lE4yocV9IBeiHQAAAAk"]
[Mon Mar 02 23:08:44.837660 2026] [:error] [pid 59602:tid 59666] [client 20.104.86.139:16948] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aaWn_DMtSo_Fr0lHnSaabQAAAIE"]
[Mon Mar 02 23:26:56.856880 2026] [:error] [pid 28847:tid 28871] [client 13.71.189.74:64617] [client 13.71.189.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaWsQJ9xbBq8VfeqVDaxZQAAANY"]
[Mon Mar 02 23:26:57.274982 2026] [:error] [pid 28847:tid 28862] [client 13.71.189.74:63939] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cah.php"] [unique_id "aaWsQZ9xbBq8VfeqVDaxZwAAAM0"]
[Mon Mar 02 23:26:57.693203 2026] [:error] [pid 59602:tid 59676] [client 13.71.189.74:63954] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cah.php"] [unique_id "aaWsQTMtSo_Fr0lHnSag2AAAAIs"]
[Mon Mar 02 23:26:58.112003 2026] [:error] [pid 28847:tid 28871] [client 13.71.189.74:64551] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cah.php"] [unique_id "aaWsQp9xbBq8VfeqVDaxbAAAANY"]
[Mon Mar 02 23:26:58.521964 2026] [:error] [pid 28847:tid 28854] [client 13.71.189.74:64559] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaWsQp9xbBq8VfeqVDaxbwAAAMU"]
[Mon Mar 02 23:26:58.936692 2026] [:error] [pid 28847:tid 28851] [client 13.71.189.74:64602] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaWsQp9xbBq8VfeqVDaxcgAAAMI"]
[Mon Mar 02 23:26:59.347653 2026] [:error] [pid 59601:tid 59640] [client 13.71.189.74:64532] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaWsQ8Q1lXfvWN0-ZQmsqwAAAEI"]
[Mon Mar 02 23:26:59.759621 2026] [:error] [pid 59601:tid 59649] [client 13.71.189.74:64633] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaWsQ8Q1lXfvWN0-ZQmsrQAAAEs"]
[Mon Mar 02 23:27:00.176094 2026] [:error] [pid 59602:tid 59684] [client 13.71.189.74:64516] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aaWsRDMtSo_Fr0lHnSag2wAAAJM"]
[Mon Mar 02 23:27:00.588863 2026] [:error] [pid 59701:tid 59718] [client 13.71.189.74:64626] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aaWsROUmTDVso96U9_L4GwAAAQ4"]
[Mon Mar 02 23:27:01.004222 2026] [:error] [pid 59701:tid 59714] [client 13.71.189.74:62145] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aaWsReUmTDVso96U9_L4HAAAAQo"]
[Mon Mar 02 23:27:01.419075 2026] [:error] [pid 59601:tid 59660] [client 13.71.189.74:64614] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aaWsRcQ1lXfvWN0-ZQmstAAAAFY"]
[Mon Mar 02 23:27:01.843891 2026] [:error] [pid 59701:tid 59719] [client 13.71.189.74:64515] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aaWsReUmTDVso96U9_L4HwAAAQ8"]
[Mon Mar 02 23:27:02.261621 2026] [:error] [pid 59601:tid 59651] [client 13.71.189.74:64550] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aaWsRsQ1lXfvWN0-ZQmstwAAAE0"]
[Mon Mar 02 23:27:02.684829 2026] [:error] [pid 59701:tid 59717] [client 13.71.189.74:64563] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aaWsRuUmTDVso96U9_L4IgAAAQ0"]
[Mon Mar 02 23:27:03.101073 2026] [:error] [pid 59602:tid 59679] [client 13.71.189.74:63944] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/muzu.php"] [unique_id "aaWsRzMtSo_Fr0lHnSag5gAAAI4"]
[Mon Mar 02 23:27:03.510119 2026] [:error] [pid 59601:tid 59646] [client 13.71.189.74:64581] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpo.php"] [unique_id "aaWsR8Q1lXfvWN0-ZQmsuAAAAEg"]
[Mon Mar 02 23:27:03.929543 2026] [:error] [pid 59602:tid 59677] [client 13.71.189.74:64578] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpo.php"] [unique_id "aaWsRzMtSo_Fr0lHnSag6QAAAIw"]
[Mon Mar 02 23:27:04.340969 2026] [:error] [pid 59701:tid 59707] [client 13.71.189.74:64632] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpo.php"] [unique_id "aaWsSOUmTDVso96U9_L4KgAAAQM"]
[Mon Mar 02 23:27:04.752683 2026] [:error] [pid 59601:tid 59654] [client 13.71.189.74:63956] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpo.php"] [unique_id "aaWsSMQ1lXfvWN0-ZQmsvQAAAFA"]
[Mon Mar 02 23:27:05.162305 2026] [:error] [pid 59601:tid 59643] [client 13.71.189.74:64573] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaWsScQ1lXfvWN0-ZQmsvwAAAEU"]
[Mon Mar 02 23:27:05.579947 2026] [:error] [pid 59602:tid 59671] [client 13.71.189.74:64556] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaWsSTMtSo_Fr0lHnSag7gAAAIY"]
[Mon Mar 02 23:27:05.989245 2026] [:error] [pid 59701:tid 59727] [client 13.71.189.74:64517] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaWsSeUmTDVso96U9_L4KwAAARc"]
[Mon Mar 02 23:27:06.404167 2026] [:error] [pid 59701:tid 59722] [client 13.71.189.74:63943] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "aaWsSuUmTDVso96U9_L4LAAAARI"]
[Mon Mar 02 23:27:06.815773 2026] [:error] [pid 28847:tid 28867] [client 13.71.189.74:63952] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aaWsSp9xbBq8VfeqVDaxdwAAANI"]
[Mon Mar 02 23:27:07.227924 2026] [:error] [pid 59701:tid 59704] [client 13.71.189.74:64536] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aaWsS-UmTDVso96U9_L4MQAAAQA"]
[Mon Mar 02 23:27:07.638888 2026] [:error] [pid 59602:tid 59685] [client 13.71.189.74:64525] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aaWsSzMtSo_Fr0lHnSag-AAAAJQ"]
[Mon Mar 02 23:27:08.053804 2026] [:error] [pid 59602:tid 59672] [client 13.71.189.74:64638] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aaWsTDMtSo_Fr0lHnSag-wAAAIc"]
[Mon Mar 02 23:27:08.464480 2026] [:error] [pid 59601:tid 59657] [client 13.71.189.74:64543] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aaWsTMQ1lXfvWN0-ZQmswgAAAFM"]
[Mon Mar 02 23:27:08.875333 2026] [:error] [pid 59602:tid 59665] [client 13.71.189.74:64615] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aaWsTDMtSo_Fr0lHnSahAQAAAIA"]
[Mon Mar 02 23:27:09.287871 2026] [:error] [pid 59602:tid 59689] [client 13.71.189.74:64522] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aaWsTTMtSo_Fr0lHnSahBQAAAJg"]
[Mon Mar 02 23:27:09.706501 2026] [:error] [pid 59602:tid 59678] [client 13.71.189.74:64560] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aaWsTTMtSo_Fr0lHnSahBgAAAI0"]
[Mon Mar 02 23:27:10.117405 2026] [:error] [pid 59602:tid 59682] [client 13.71.189.74:63875] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaWsTjMtSo_Fr0lHnSahBwAAAJE"]
[Mon Mar 02 23:27:10.548649 2026] [:error] [pid 59734:tid 59738] [client 13.71.189.74:64545] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaWsTpeWQx7ZQG9NybFQDwAAAUI"]
[Mon Mar 02 23:27:10.987335 2026] [:error] [pid 59602:tid 59686] [client 13.71.189.74:62172] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaWsTjMtSo_Fr0lHnSahCgAAAJU"]
[Mon Mar 02 23:27:11.405754 2026] [:error] [pid 59602:tid 59673] [client 13.71.189.74:64569] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaWsTzMtSo_Fr0lHnSahDAAAAIg"]
[Mon Mar 02 23:27:11.822969 2026] [:error] [pid 59600:tid 59633] [client 13.71.189.74:63938] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as1337.php"] [unique_id "aaWsT4Q5lE4yocV9IBerswAAABg"]
[Mon Mar 02 23:27:12.241832 2026] [:error] [pid 59600:tid 59616] [client 13.71.189.74:64539] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as1337.php"] [unique_id "aaWsUIQ5lE4yocV9IBertAAAAAc"]
[Mon Mar 02 23:27:12.657249 2026] [:error] [pid 28847:tid 28856] [client 13.71.189.74:64552] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as1337.php"] [unique_id "aaWsUJ9xbBq8VfeqVDaxegAAAMc"]
[Mon Mar 02 23:27:13.083612 2026] [:error] [pid 28847:tid 28849] [client 13.71.189.74:64530] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as1337.php"] [unique_id "aaWsUZ9xbBq8VfeqVDaxfQAAAMA"]
[Mon Mar 02 23:27:13.499490 2026] [:error] [pid 59600:tid 59611] [client 13.71.189.74:64579] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaWsUYQ5lE4yocV9IBeruAAAAAI"]
[Mon Mar 02 23:27:13.912284 2026] [:error] [pid 59734:tid 59759] [client 13.71.189.74:64585] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaWsUZeWQx7ZQG9NybFQEgAAAVc"]
[Mon Mar 02 23:27:14.388198 2026] [:error] [pid 59601:tid 59653] [client 13.71.189.74:64558] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaWsUsQ1lXfvWN0-ZQmswwAAAE8"]
[Mon Mar 02 23:27:14.798428 2026] [:error] [pid 28847:tid 28863] [client 13.71.189.74:64637] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aaWsUp9xbBq8VfeqVDaxggAAAM4"]
[Mon Mar 02 23:27:15.223133 2026] [:error] [pid 59600:tid 59618] [client 13.71.189.74:64607] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaWsU4Q5lE4yocV9IBerugAAAAk"]
[Mon Mar 02 23:27:15.633567 2026] [:error] [pid 59601:tid 59645] [client 13.71.189.74:64553] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaWsU8Q1lXfvWN0-ZQmsxQAAAEc"]
[Mon Mar 02 23:27:16.045765 2026] [:error] [pid 28847:tid 28864] [client 13.71.189.74:63945] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaWsVJ9xbBq8VfeqVDaxhgAAAM8"]
[Mon Mar 02 23:27:16.461895 2026] [:error] [pid 59600:tid 59620] [client 13.71.189.74:64521] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf-shell.php"] [unique_id "aaWsVIQ5lE4yocV9IBervgAAAAs"]
[Mon Mar 02 23:27:16.873737 2026] [:error] [pid 59600:tid 59613] [client 13.71.189.74:64583] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaWsVIQ5lE4yocV9IBerwAAAAAQ"]
[Mon Mar 02 23:27:17.286731 2026] [:error] [pid 59600:tid 59628] [client 13.71.189.74:64608] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaWsVYQ5lE4yocV9IBerwQAAABM"]
[Mon Mar 02 23:27:17.706278 2026] [:error] [pid 59600:tid 59626] [client 13.71.189.74:63901] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaWsVYQ5lE4yocV9IBerxAAAABE"]
[Mon Mar 02 23:27:18.120678 2026] [:error] [pid 59600:tid 59625] [client 13.71.189.74:63973] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core.php"] [unique_id "aaWsVoQ5lE4yocV9IBerxQAAABA"]
[Mon Mar 02 23:27:18.554552 2026] [:error] [pid 28847:tid 28856] [client 13.71.189.74:64529] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaWsVp9xbBq8VfeqVDaxhwAAAMc"]
[Mon Mar 02 23:27:18.976284 2026] [:error] [pid 59602:tid 59670] [client 13.71.189.74:64575] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaWsVjMtSo_Fr0lHnSahGwAAAIU"]
[Mon Mar 02 23:27:19.396060 2026] [:error] [pid 59602:tid 59689] [client 13.71.189.74:63959] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaWsVzMtSo_Fr0lHnSahHQAAAJg"]
[Mon Mar 02 23:27:19.805067 2026] [:error] [pid 59701:tid 59721] [client 13.71.189.74:64611] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zeal.php"] [unique_id "aaWsV-UmTDVso96U9_L4PQAAARE"]
[Mon Mar 02 23:27:20.223559 2026] [:error] [pid 28847:tid 28865] [client 13.71.189.74:62166] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaWsWJ9xbBq8VfeqVDaxiQAAANA"]
[Mon Mar 02 23:27:20.633662 2026] [:error] [pid 59602:tid 59684] [client 13.71.189.74:64540] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaWsWDMtSo_Fr0lHnSahJAAAAJM"]
[Mon Mar 02 23:27:21.055261 2026] [:error] [pid 59701:tid 59727] [client 13.71.189.74:64627] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaWsWeUmTDVso96U9_L4PgAAARc"]
[Mon Mar 02 23:27:21.466846 2026] [:error] [pid 59734:tid 59736] [client 13.71.189.74:64565] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asf.php"] [unique_id "aaWsWZeWQx7ZQG9NybFQFgAAAUA"]
[Mon Mar 02 23:27:21.877370 2026] [:error] [pid 59734:tid 59737] [client 13.71.189.74:64557] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaWsWZeWQx7ZQG9NybFQFwAAAUE"]
[Mon Mar 02 23:27:22.297861 2026] [:error] [pid 28847:tid 28859] [client 13.71.189.74:63992] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaWsWp9xbBq8VfeqVDaxjAAAAMo"]
[Mon Mar 02 23:27:22.708086 2026] [:error] [pid 28847:tid 28870] [client 13.71.189.74:63961] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php"] [unique_id "aaWsWp9xbBq8VfeqVDaxjgAAANU"]
[Tue Mar 03 01:38:24.252490 2026] [:error] [pid 18960:tid 18969] [client 20.151.217.152:54995] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXLENCu09icM9oIHwDoRAAAAMY"]
[Tue Mar 03 01:38:24.663774 2026] [:error] [pid 18960:tid 18963] [client 20.151.217.152:54988] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXLENCu09icM9oIHwDoSwAAAMA"]
[Tue Mar 03 01:38:25.074638 2026] [:error] [pid 60214:tid 60231] [client 20.151.217.152:55028] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXLEYmuQ_v4S3RkLisKcwAAAQ8"]
[Tue Mar 03 01:38:25.484560 2026] [:error] [pid 18557:tid 18825] [client 20.151.217.152:55013] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXLEdngZqR9Tp8JM0FgNwAAAEM"]
[Tue Mar 03 02:47:24.402243 2026] [:error] [pid 18557:tid 18820] [client 68.218.165.147:1027] [client 68.218.165.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.147, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaXbPNngZqR9Tp8JM0F1uAAAAEE"]
[Tue Mar 03 02:47:24.454883 2026] [:error] [pid 18960:tid 18969] [client 68.218.165.147:1028] [client 68.218.165.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.147, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaXbPNCu09icM9oIHwASCAAAAMY"]
[Tue Mar 03 02:47:24.492594 2026] [:error] [pid 60214:tid 60240] [client 68.218.165.147:1029] [client 68.218.165.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.147, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaXbPImuQ_v4S3RkLitGLQAAARg"]
[Tue Mar 03 02:48:13.169404 2026] [:error] [pid 18960:tid 18978] [client 83.229.107.129:45219] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaXbbdCu09icM9oIHwATOQAAAM8"]
[Tue Mar 03 02:49:32.535530 2026] [:error] [pid 18960:tid 18975] [client 83.229.107.129:39613] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaXbvNCu09icM9oIHwAUUQAAAMw"]
[Tue Mar 03 02:49:32.535560 2026] [:error] [pid 18960:tid 18979] [client 83.229.107.129:41451] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaXbvNCu09icM9oIHwAUUgAAANA"]
[Tue Mar 03 02:49:32.574143 2026] [:error] [pid 18960:tid 18984] [client 83.229.107.129:42033] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaXbvNCu09icM9oIHwAUVAAAANU"]
[Tue Mar 03 02:49:32.577128 2026] [:error] [pid 18960:tid 18981] [client 83.229.107.129:40753] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaXbvNCu09icM9oIHwAUVQAAANI"]
[Tue Mar 03 06:31:10.619421 2026] [:error] [pid 26186:tid 26195] [client 20.63.69.192:6558] [client 20.63.69.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaYPrvbZCNtk8wDak9emGgAAAUc"]
[Tue Mar 03 06:31:11.811621 2026] [:error] [pid 26186:tid 26205] [client 20.63.69.192:4549] [client 20.63.69.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaYPr_bZCNtk8wDak9emHQAAAVE"]
[Tue Mar 03 06:31:12.997788 2026] [:error] [pid 26186:tid 26192] [client 20.63.69.192:9897] [client 20.63.69.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaYPsPbZCNtk8wDak9emIAAAAUQ"]
[Tue Mar 03 06:31:14.474730 2026] [:error] [pid 36784:tid 36834] [client 20.63.69.192:6561] [client 20.63.69.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aaYPsnNeKOSGbW9kDgTU5wAAAEs"]
[Tue Mar 03 06:33:25.388435 2026] [:error] [pid 26186:tid 26192] [client 158.158.41.149:6074] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaYQNfbZCNtk8wDak9enhwAAAUQ"]
[Tue Mar 03 06:33:26.134998 2026] [:error] [pid 14042:tid 14056] [client 158.158.41.149:31058] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaYQNmeHGCmSEiIBcK4fkgAAAYw"]
[Tue Mar 03 06:33:27.062762 2026] [:error] [pid 20872:tid 20893] [client 158.158.41.149:17124] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaYQN4lYbNk3E_3CgBiIIgAAARM"]
[Tue Mar 03 06:33:27.761559 2026] [:error] [pid 26186:tid 26205] [client 158.158.41.149:10263] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aaYQN_bZCNtk8wDak9eniwAAAVE"]
[Tue Mar 03 06:33:28.498336 2026] [:error] [pid 20872:tid 20880] [client 158.158.41.149:8710] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aaYQOIlYbNk3E_3CgBiIKQAAAQY"]
[Tue Mar 03 06:33:29.165525 2026] [:error] [pid 26186:tid 26207] [client 158.158.41.149:10268] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aaYQOfbZCNtk8wDak9enkwAAAVM"]
[Tue Mar 03 06:33:35.829963 2026] [:error] [pid 36784:tid 36835] [client 158.158.41.149:4594] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aaYQP3NeKOSGbW9kDgTVYgAAAEw"]
[Tue Mar 03 06:33:38.071766 2026] [:error] [pid 26186:tid 26191] [client 158.158.41.149:10772] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "aaYQQvbZCNtk8wDak9ensQAAAUM"]
[Tue Mar 03 06:33:41.958697 2026] [:error] [pid 36785:tid 36871] [client 158.158.41.149:20359] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aaYQRXhJejauENG9qTiWWwAAAJU"]
[Tue Mar 03 06:33:43.262939 2026] [:error] [pid 14042:tid 14060] [client 158.158.41.149:20077] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aaYQR2eHGCmSEiIBcK4fqwAAAZA"]
[Tue Mar 03 06:33:44.128134 2026] [:error] [pid 26186:tid 26192] [client 158.158.41.149:26123] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aaYQSPbZCNtk8wDak9entgAAAUQ"]
[Tue Mar 03 06:33:45.377958 2026] [:error] [pid 26186:tid 26196] [client 158.158.41.149:19338] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aaYQSfbZCNtk8wDak9envwAAAUg"]
[Tue Mar 03 06:33:50.792775 2026] [:error] [pid 20872:tid 20888] [client 158.158.41.149:10776] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asus.php"] [unique_id "aaYQTolYbNk3E_3CgBiIOAAAAQ4"]
[Tue Mar 03 06:33:54.400924 2026] [:error] [pid 14042:tid 14062] [client 158.158.41.149:20068] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asus.php"] [unique_id "aaYQUmeHGCmSEiIBcK4fugAAAZI"]
[Tue Mar 03 06:33:59.557950 2026] [:error] [pid 14042:tid 14046] [client 158.158.41.149:9851] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asus.php"] [unique_id "aaYQV2eHGCmSEiIBcK4fzAAAAYI"]
[Tue Mar 03 06:34:01.484266 2026] [:error] [pid 36783:tid 36803] [client 158.158.41.149:12036] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aaYQWT4tNYh5NtLaTXcCMgAAAAk"]
[Tue Mar 03 06:34:05.120245 2026] [:error] [pid 20872:tid 20878] [client 158.158.41.149:31063] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aaYQXYlYbNk3E_3CgBiIWwAAAQQ"]
[Tue Mar 03 06:34:07.534424 2026] [:error] [pid 26186:tid 26198] [client 158.158.41.149:17138] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aaYQX_bZCNtk8wDak9eoAAAAAUo"]
[Tue Mar 03 06:34:15.668525 2026] [:error] [pid 36783:tid 36807] [client 158.158.41.149:8755] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dox.php"] [unique_id "aaYQZz4tNYh5NtLaTXcCOwAAAA0"]
[Tue Mar 03 06:34:16.520514 2026] [:error] [pid 26186:tid 26189] [client 158.158.41.149:28127] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aaYQaPbZCNtk8wDak9eoHAAAAUE"]
[Tue Mar 03 06:34:20.644452 2026] [:error] [pid 26186:tid 26202] [client 158.158.41.149:20835] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aaYQbPbZCNtk8wDak9eoOAAAAU4"]
[Tue Mar 03 06:34:21.766864 2026] [:error] [pid 20872:tid 20893] [client 158.158.41.149:10040] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aaYQbYlYbNk3E_3CgBiIawAAARM"]
[Tue Mar 03 06:35:20.548556 2026] [:error] [pid 14042:tid 14044] [client 158.158.41.149:5781] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aaYQqGeHGCmSEiIBcK4g5AAAAYA"]
[Tue Mar 03 06:35:22.910561 2026] [:error] [pid 26186:tid 26203] [client 158.158.41.149:32744] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aaYQqvbZCNtk8wDak9epCwAAAU8"]
[Tue Mar 03 06:35:23.966746 2026] [:error] [pid 26186:tid 26192] [client 158.158.41.149:11285] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aaYQq_bZCNtk8wDak9epDwAAAUQ"]
[Tue Mar 03 06:35:26.739677 2026] [:error] [pid 36897:tid 36918] [client 158.158.41.149:21182] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aaYQriZC69_8eM0UouvnogAAANA"]
[Tue Mar 03 06:35:27.767025 2026] [:error] [pid 14042:tid 14051] [client 158.158.41.149:21637] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaYQr2eHGCmSEiIBcK4hDAAAAYc"]
[Tue Mar 03 06:35:30.383665 2026] [:error] [pid 20872:tid 20879] [client 158.158.41.149:4891] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaYQsolYbNk3E_3CgBiIvQAAAQU"]
[Tue Mar 03 06:35:31.188787 2026] [:error] [pid 26186:tid 26200] [client 158.158.41.149:6878] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaYQs_bZCNtk8wDak9epIAAAAUw"]
[Tue Mar 03 06:35:32.656874 2026] [:error] [pid 36897:tid 36916] [client 158.158.41.149:15816] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aaYQtCZC69_8eM0UouvnpwAAAM4"]
[Tue Mar 03 06:35:33.748576 2026] [:error] [pid 36785:tid 36851] [client 158.158.41.149:12894] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "aaYQtXhJejauENG9qTiWvQAAAIE"]
[Tue Mar 03 06:35:36.896094 2026] [:error] [pid 26186:tid 26188] [client 158.158.41.149:11302] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "aaYQuPbZCNtk8wDak9epLgAAAUA"]
[Tue Mar 03 06:35:39.170858 2026] [:error] [pid 36783:tid 36797] [client 158.158.41.149:4920] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "aaYQuz4tNYh5NtLaTXcCWgAAAAM"]
[Tue Mar 03 06:35:41.504136 2026] [:error] [pid 20872:tid 20881] [client 158.158.41.149:4814] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "aaYQvYlYbNk3E_3CgBiIywAAAQc"]
[Tue Mar 03 06:35:43.855971 2026] [:error] [pid 20872:tid 20895] [client 158.158.41.149:10560] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaYQv4lYbNk3E_3CgBiI1wAAARU"]
[Tue Mar 03 06:35:50.766315 2026] [:error] [pid 26186:tid 26193] [client 158.158.41.149:12864] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaYQxvbZCNtk8wDak9epPwAAAUU"]
[Tue Mar 03 06:35:53.822814 2026] [:error] [pid 26186:tid 26205] [client 158.158.41.149:21633] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaYQyfbZCNtk8wDak9epVQAAAVE"]
[Tue Mar 03 06:35:55.665660 2026] [:error] [pid 36784:tid 36824] [client 158.158.41.149:11319] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaYQy3NeKOSGbW9kDgTVvgAAAEE"]
[Tue Mar 03 06:35:57.087316 2026] [:error] [pid 26186:tid 26205] [client 158.158.41.149:17777] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wefile.php"] [unique_id "aaYQzfbZCNtk8wDak9epcAAAAVE"]
[Tue Mar 03 06:35:58.757114 2026] [:error] [pid 14042:tid 14056] [client 158.158.41.149:4886] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wefile.php"] [unique_id "aaYQzmeHGCmSEiIBcK4hQgAAAYw"]
[Tue Mar 03 06:36:00.282682 2026] [:error] [pid 14042:tid 14068] [client 158.158.41.149:7968] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wefile.php"] [unique_id "aaYQ0GeHGCmSEiIBcK4hRwAAAZg"]
[Tue Mar 03 06:36:03.134497 2026] [:error] [pid 36785:tid 36860] [client 158.158.41.149:5882] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wefile.php"] [unique_id "aaYQ03hJejauENG9qTiW-QAAAIo"]
[Tue Mar 03 06:36:05.815267 2026] [:error] [pid 36897:tid 36912] [client 158.158.41.149:5844] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55.php"] [unique_id "aaYQ1SZC69_8eM0Uouvn1QAAAMo"]
[Tue Mar 03 06:36:07.252526 2026] [:error] [pid 14042:tid 14060] [client 158.158.41.149:7988] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55.php"] [unique_id "aaYQ12eHGCmSEiIBcK4hTQAAAZA"]
[Tue Mar 03 06:36:08.884695 2026] [:error] [pid 14042:tid 14059] [client 158.158.41.149:7960] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55.php"] [unique_id "aaYQ2GeHGCmSEiIBcK4hTwAAAY8"]
[Tue Mar 03 06:36:11.391183 2026] [:error] [pid 26186:tid 26205] [client 158.158.41.149:12903] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55.php"] [unique_id "aaYQ2_bZCNtk8wDak9epkwAAAVE"]
[Tue Mar 03 06:36:17.781107 2026] [:error] [pid 36897:tid 36923] [client 158.158.41.149:17787] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "aaYQ4SZC69_8eM0Uouvn3wAAANU"]
[Tue Mar 03 06:37:15.016545 2026] [:error] [pid 36897:tid 36923] [client 158.158.41.149:5873] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aaYRGyZC69_8eM0UouvoPQAAANU"]
[Tue Mar 03 06:37:16.097277 2026] [:error] [pid 36783:tid 36802] [client 158.158.41.149:21151] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aaYRHD4tNYh5NtLaTXcCdgAAAAg"]
[Tue Mar 03 06:37:17.162973 2026] [:error] [pid 26186:tid 26209] [client 158.158.41.149:13999] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aaYRHfbZCNtk8wDak9eqPQAAAVU"]
[Tue Mar 03 06:37:18.124738 2026] [:error] [pid 20872:tid 20879] [client 158.158.41.149:17744] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aaYRHolYbNk3E_3CgBiJHQAAAQU"]
[Tue Mar 03 06:37:20.095402 2026] [:error] [pid 26186:tid 26193] [client 158.158.41.149:11310] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "aaYRIPbZCNtk8wDak9eqRAAAAUU"]
[Tue Mar 03 06:37:22.423163 2026] [:error] [pid 20872:tid 20897] [client 158.158.41.149:13716] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "aaYRIolYbNk3E_3CgBiJHwAAARc"]
[Tue Mar 03 06:37:26.814689 2026] [:error] [pid 20872:tid 20892] [client 158.158.41.149:25641] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "aaYRJolYbNk3E_3CgBiJJwAAARI"]
[Tue Mar 03 06:37:28.330425 2026] [:error] [pid 20872:tid 20887] [client 158.158.41.149:11305] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "aaYRKIlYbNk3E_3CgBiJKgAAAQ0"]
[Tue Mar 03 06:37:34.541784 2026] [:error] [pid 36783:tid 36794] [client 158.158.41.149:31155] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaYRLj4tNYh5NtLaTXcCgAAAAAA"]
[Tue Mar 03 06:37:35.654227 2026] [:error] [pid 36897:tid 36917] [client 158.158.41.149:13742] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaYRLyZC69_8eM0UouvoWwAAAM8"]
[Tue Mar 03 06:37:37.106976 2026] [:error] [pid 36897:tid 36911] [client 158.158.41.149:15854] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaYRMSZC69_8eM0UouvoXgAAAMk"]
[Tue Mar 03 06:37:39.367809 2026] [:error] [pid 14042:tid 14057] [client 158.158.41.149:11287] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaYRM2eHGCmSEiIBcK4h3gAAAY0"]
[Tue Mar 03 06:37:39.981982 2026] [:error] [pid 26186:tid 26201] [client 158.158.41.149:7982] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aaYRM_bZCNtk8wDak9eqZAAAAU0"]
[Tue Mar 03 06:37:43.209473 2026] [:error] [pid 20872:tid 20890] [client 158.158.41.149:11282] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aaYRN4lYbNk3E_3CgBiJQQAAARA"]
[Tue Mar 03 06:37:44.958356 2026] [:error] [pid 36784:tid 36824] [client 158.158.41.149:12892] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aaYROHNeKOSGbW9kDgTV-gAAAEE"]
[Tue Mar 03 06:37:46.743782 2026] [:error] [pid 26186:tid 26195] [client 158.158.41.149:5871] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aaYROvbZCNtk8wDak9eqdAAAAUc"]
[Tue Mar 03 06:37:49.527576 2026] [:error] [pid 26186:tid 26192] [client 158.158.41.149:31135] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aaYRPfbZCNtk8wDak9eqdwAAAUQ"]
[Tue Mar 03 06:37:50.775151 2026] [:error] [pid 36897:tid 36917] [client 158.158.41.149:13992] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aaYRPiZC69_8eM0UouvocQAAAM8"]
[Tue Mar 03 06:37:51.977234 2026] [:error] [pid 36897:tid 36906] [client 158.158.41.149:8784] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aaYRPyZC69_8eM0UouvodAAAAMQ"]
[Tue Mar 03 06:37:52.872523 2026] [:error] [pid 20872:tid 20894] [client 158.158.41.149:13360] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aaYRQIlYbNk3E_3CgBiJUgAAARQ"]
[Tue Mar 03 06:37:55.827910 2026] [:error] [pid 36897:tid 36903] [client 158.158.41.149:24260] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaYRQyZC69_8eM0UouvoeQAAAME"]
[Tue Mar 03 06:37:57.443024 2026] [:error] [pid 14042:tid 14056] [client 158.158.41.149:13345] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaYRRWeHGCmSEiIBcK4h-QAAAYw"]
[Tue Mar 03 06:38:01.161440 2026] [:error] [pid 36784:tid 36844] [client 158.158.41.149:8203] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaYRSXNeKOSGbW9kDgTWDAAAAFU"]
[Tue Mar 03 06:38:03.037488 2026] [:error] [pid 14042:tid 14058] [client 158.158.41.149:31136] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aaYRS2eHGCmSEiIBcK4iBAAAAY4"]
[Tue Mar 03 06:38:06.376718 2026] [:error] [pid 14042:tid 14066] [client 158.158.41.149:8782] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "aaYRTmeHGCmSEiIBcK4iEgAAAZY"]
[Tue Mar 03 06:38:08.019445 2026] [:error] [pid 14042:tid 14067] [client 158.158.41.149:9802] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "aaYRUGeHGCmSEiIBcK4iHAAAAZc"]
[Tue Mar 03 06:38:11.394009 2026] [:error] [pid 26186:tid 26202] [client 158.158.41.149:12943] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "aaYRU_bZCNtk8wDak9eqfwAAAU4"]
[Tue Mar 03 06:39:06.414757 2026] [:error] [pid 36897:tid 36916] [client 158.158.41.149:17115] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaYRiiZC69_8eM0Uouvo9QAAAM4"]
[Tue Mar 03 06:39:08.740915 2026] [:error] [pid 36897:tid 36924] [client 158.158.41.149:29066] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaYRjCZC69_8eM0Uouvo-wAAANY"]
[Tue Mar 03 06:39:10.034731 2026] [:error] [pid 26186:tid 26209] [client 158.158.41.149:10005] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaYRjvbZCNtk8wDak9erGwAAAVU"]
[Tue Mar 03 06:39:10.767167 2026] [:error] [pid 36785:tid 36858] [client 158.158.41.149:19622] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aaYRjnhJejauENG9qTiXoQAAAIg"]
[Tue Mar 03 06:39:11.987245 2026] [:error] [pid 14042:tid 14067] [client 158.158.41.149:32656] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaYRj2eHGCmSEiIBcK4iyQAAAZc"]
[Tue Mar 03 06:39:14.976883 2026] [:error] [pid 26186:tid 26203] [client 158.158.41.149:22251] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaYRkvbZCNtk8wDak9erTwAAAU8"]
[Tue Mar 03 06:39:18.091506 2026] [:error] [pid 26186:tid 26209] [client 158.158.41.149:15256] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaYRlvbZCNtk8wDak9erbwAAAVU"]
[Tue Mar 03 06:39:19.374536 2026] [:error] [pid 26186:tid 26202] [client 158.158.41.149:28321] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "aaYRl_bZCNtk8wDak9erewAAAU4"]
[Tue Mar 03 06:39:20.179187 2026] [:error] [pid 26186:tid 26196] [client 158.158.41.149:8521] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "aaYRmPbZCNtk8wDak9erfAAAAUg"]
[Tue Mar 03 06:39:27.086920 2026] [:error] [pid 36783:tid 36811] [client 158.158.41.149:4780] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "aaYRnz4tNYh5NtLaTXcCwAAAABE"]
[Tue Mar 03 06:39:28.350280 2026] [:error] [pid 26186:tid 26205] [client 158.158.41.149:15056] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "aaYRoPbZCNtk8wDak9eriQAAAVE"]
[Tue Mar 03 06:39:30.113961 2026] [:error] [pid 26186:tid 26200] [client 158.158.41.149:14740] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "aaYRovbZCNtk8wDak9erjQAAAUw"]
[Tue Mar 03 06:39:31.141542 2026] [:error] [pid 26186:tid 26192] [client 158.158.41.149:14759] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaYRo_bZCNtk8wDak9erjwAAAUQ"]
[Tue Mar 03 06:39:34.043887 2026] [:error] [pid 26186:tid 26189] [client 158.158.41.149:24236] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaYRpvbZCNtk8wDak9erlAAAAUE"]
[Tue Mar 03 06:39:35.847599 2026] [:error] [pid 20872:tid 20874] [client 158.158.41.149:19387] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaYRp4lYbNk3E_3CgBiKPQAAAQA"]
[Tue Mar 03 06:39:37.355973 2026] [:error] [pid 26186:tid 26202] [client 158.158.41.149:31130] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aaYRqfbZCNtk8wDak9erogAAAU4"]
[Tue Mar 03 06:39:38.969649 2026] [:error] [pid 26186:tid 26194] [client 158.158.41.149:17773] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaYRqvbZCNtk8wDak9errAAAAUY"]
[Tue Mar 03 06:39:40.002866 2026] [:error] [pid 36785:tid 36873] [client 158.158.41.149:5856] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaYRrHhJejauENG9qTiX1gAAAJc"]
[Tue Mar 03 06:39:41.703490 2026] [:error] [pid 14042:tid 14045] [client 158.158.41.149:11266] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaYRrWeHGCmSEiIBcK4jIwAAAYE"]
[Tue Mar 03 06:39:42.624296 2026] [:error] [pid 14042:tid 14067] [client 158.158.41.149:17765] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aaYRrmeHGCmSEiIBcK4jJgAAAZc"]
[Tue Mar 03 06:39:48.694996 2026] [:error] [pid 26186:tid 26195] [client 158.158.41.149:4833] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaYRtPbZCNtk8wDak9ervAAAAUc"]
[Tue Mar 03 06:39:51.237291 2026] [:error] [pid 14042:tid 14049] [client 158.158.41.149:31204] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaYRt2eHGCmSEiIBcK4jLQAAAYU"]
[Tue Mar 03 06:39:52.767070 2026] [:error] [pid 14042:tid 14054] [client 158.158.41.149:31214] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaYRuGeHGCmSEiIBcK4jPAAAAYo"]
[Tue Mar 03 06:39:53.914829 2026] [:error] [pid 36897:tid 36914] [client 158.158.41.149:18109] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aaYRuSZC69_8eM0UouvpMwAAAMw"]
[Tue Mar 03 06:39:56.564257 2026] [:error] [pid 20872:tid 20883] [client 158.158.41.149:20751] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaYRvIlYbNk3E_3CgBiKVQAAAQk"]
[Tue Mar 03 06:39:57.953573 2026] [:error] [pid 36784:tid 36828] [client 158.158.41.149:23337] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaYRvXNeKOSGbW9kDgTWnAAAAEU"]
[Tue Mar 03 06:40:00.340094 2026] [:error] [pid 14042:tid 14062] [client 158.158.41.149:15342] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaYRwGeHGCmSEiIBcK4jxgAAAZI"]
[Tue Mar 03 06:40:03.844806 2026] [:error] [pid 14042:tid 14063] [client 158.158.41.149:18877] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaYRw2eHGCmSEiIBcK4jzgAAAZM"]
[Tue Mar 03 06:41:00.072969 2026] [:error] [pid 36784:tid 36832] [client 158.158.41.149:9053] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/work.php"] [unique_id "aaYR_HNeKOSGbW9kDgTWzAAAAEk"]
[Tue Mar 03 06:41:02.427447 2026] [:error] [pid 36783:tid 36796] [client 158.158.41.149:14792] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/work.php"] [unique_id "aaYR_j4tNYh5NtLaTXcC9AAAAAI"]
[Tue Mar 03 06:41:03.432829 2026] [:error] [pid 14042:tid 14051] [client 158.158.41.149:28412] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/work.php"] [unique_id "aaYR_2eHGCmSEiIBcK4kPwAAAYc"]
[Tue Mar 03 06:41:04.361131 2026] [:error] [pid 36897:tid 36912] [client 158.158.41.149:18922] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/work.php"] [unique_id "aaYSACZC69_8eM0UouvpdQAAAMo"]
[Tue Mar 03 06:41:05.148926 2026] [:error] [pid 36785:tid 36867] [client 158.158.41.149:12411] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaYSAXhJejauENG9qTiYHQAAAJE"]
[Tue Mar 03 06:41:05.798864 2026] [:error] [pid 36897:tid 36902] [client 158.158.41.149:4365] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaYSASZC69_8eM0UouvpeQAAAMA"]
[Tue Mar 03 06:41:06.720512 2026] [:error] [pid 26186:tid 26210] [client 158.158.41.149:14481] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaYSAvbZCNtk8wDak9eskAAAAVY"]
[Tue Mar 03 06:41:07.635436 2026] [:error] [pid 20872:tid 20882] [client 158.158.41.149:7249] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/06.php"] [unique_id "aaYSA4lYbNk3E_3CgBiKqQAAAQg"]
[Tue Mar 03 06:41:11.418712 2026] [:error] [pid 26186:tid 26193] [client 158.158.41.149:19648] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/god.php"] [unique_id "aaYSB_bZCNtk8wDak9espgAAAUU"]
[Tue Mar 03 06:41:13.136466 2026] [:error] [pid 26186:tid 26192] [client 158.158.41.149:6091] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/god.php"] [unique_id "aaYSCfbZCNtk8wDak9esrQAAAUQ"]
[Tue Mar 03 06:41:15.272241 2026] [:error] [pid 36785:tid 36873] [client 158.158.41.149:9299] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/god.php"] [unique_id "aaYSC3hJejauENG9qTiYKgAAAJc"]
[Tue Mar 03 06:41:16.458228 2026] [:error] [pid 14042:tid 14059] [client 158.158.41.149:4398] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/god.php"] [unique_id "aaYSDGeHGCmSEiIBcK4kVAAAAY8"]
[Tue Mar 03 06:41:17.962807 2026] [:error] [pid 36897:tid 36917] [client 158.158.41.149:11635] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaYSDSZC69_8eM0UouvphAAAAM8"]
[Tue Mar 03 06:41:19.854424 2026] [:error] [pid 36897:tid 36909] [client 158.158.41.149:14518] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaYSDyZC69_8eM0UouvphgAAAMc"]
[Tue Mar 03 06:41:20.998932 2026] [:error] [pid 20872:tid 20880] [client 158.158.41.149:6096] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaYSEIlYbNk3E_3CgBiKvAAAAQY"]
[Tue Mar 03 06:41:22.924564 2026] [:error] [pid 20872:tid 20877] [client 158.158.41.149:31255] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X57.php"] [unique_id "aaYSEolYbNk3E_3CgBiKwAAAAQM"]
[Tue Mar 03 06:41:24.601877 2026] [:error] [pid 26186:tid 26202] [client 158.158.41.149:31282] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaYSFPbZCNtk8wDak9es1AAAAU4"]
[Tue Mar 03 06:41:26.144612 2026] [:error] [pid 26186:tid 26201] [client 158.158.41.149:11381] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaYSFvbZCNtk8wDak9es2QAAAU0"]
[Tue Mar 03 06:41:26.964847 2026] [:error] [pid 26186:tid 26193] [client 158.158.41.149:28391] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaYSFvbZCNtk8wDak9es4AAAAUU"]
[Tue Mar 03 06:41:28.316044 2026] [:error] [pid 14042:tid 14063] [client 158.158.41.149:32872] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins.php"] [unique_id "aaYSGGeHGCmSEiIBcK4kZQAAAZM"]
[Tue Mar 03 06:41:29.176912 2026] [:error] [pid 14042:tid 14047] [client 158.158.41.149:19666] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aaYSGWeHGCmSEiIBcK4kagAAAYM"]
[Tue Mar 03 06:41:31.624415 2026] [:error] [pid 26186:tid 26205] [client 158.158.41.149:19699] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aaYSG_bZCNtk8wDak9es8gAAAVE"]
[Tue Mar 03 06:41:33.390938 2026] [:error] [pid 26186:tid 26207] [client 158.158.41.149:11102] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aaYSHfbZCNtk8wDak9es_AAAAVM"]
[Tue Mar 03 06:41:35.655183 2026] [:error] [pid 26186:tid 26211] [client 158.158.41.149:9757] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seetox.php"] [unique_id "aaYSH_bZCNtk8wDak9etAwAAAVc"]
[Tue Mar 03 06:41:37.865700 2026] [:error] [pid 26186:tid 26192] [client 158.158.41.149:4401] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYSIfbZCNtk8wDak9etFQAAAUQ"]
[Tue Mar 03 06:41:38.726875 2026] [:error] [pid 14042:tid 14068] [client 158.158.41.149:31291] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYSImeHGCmSEiIBcK4kdQAAAZg"]
[Tue Mar 03 06:41:40.648637 2026] [:error] [pid 20872:tid 20889] [client 158.158.41.149:18534] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYSJIlYbNk3E_3CgBiK1QAAAQ8"]
[Tue Mar 03 06:41:42.032559 2026] [:error] [pid 26186:tid 26205] [client 158.158.41.149:15754] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYSJvbZCNtk8wDak9etHgAAAVE"]
[Tue Mar 03 06:41:45.978913 2026] [:error] [pid 14042:tid 14067] [client 158.158.41.149:15747] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaYSKWeHGCmSEiIBcK4kgAAAAZc"]
[Tue Mar 03 06:41:47.997350 2026] [:error] [pid 20872:tid 20897] [client 158.158.41.149:9284] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaYSK4lYbNk3E_3CgBiK6wAAARc"]
[Tue Mar 03 06:41:49.015213 2026] [:error] [pid 26186:tid 26191] [client 158.158.41.149:14524] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaYSLfbZCNtk8wDak9etLAAAAUM"]
[Tue Mar 03 06:41:52.624163 2026] [:error] [pid 26186:tid 26207] [client 158.158.41.149:7235] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aaYSMPbZCNtk8wDak9etQwAAAVM"]
[Tue Mar 03 06:42:58.807432 2026] [:error] [pid 26186:tid 26190] [client 158.158.41.149:19658] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaYScvbZCNtk8wDak9eurAAAAUI"]
[Tue Mar 03 06:43:00.216458 2026] [:error] [pid 20872:tid 20898] [client 158.158.41.149:13993] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaYSdIlYbNk3E_3CgBiLSAAAARg"]
[Tue Mar 03 06:43:01.301203 2026] [:error] [pid 36784:tid 36828] [client 158.158.41.149:24272] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaYSdXNeKOSGbW9kDgTXgAAAAEU"]
[Tue Mar 03 06:43:02.262813 2026] [:error] [pid 26186:tid 26209] [client 158.158.41.149:6828] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaYSdvbZCNtk8wDak9eurwAAAVU"]
[Tue Mar 03 06:43:05.371465 2026] [:error] [pid 36783:tid 36810] [client 158.158.41.149:6796] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aaYSeT4tNYh5NtLaTXcDOwAAABA"]
[Tue Mar 03 06:43:06.720907 2026] [:error] [pid 20872:tid 20888] [client 158.158.41.149:9306] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aaYSeolYbNk3E_3CgBiLYQAAAQ4"]
[Tue Mar 03 06:43:10.719187 2026] [:error] [pid 36783:tid 36800] [client 158.158.41.149:13995] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aaYSfj4tNYh5NtLaTXcDSAAAAAY"]
[Tue Mar 03 06:43:14.577997 2026] [:error] [pid 26186:tid 26200] [client 158.158.41.149:11625] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aaYSgvbZCNtk8wDak9euvQAAAUw"]
[Tue Mar 03 06:43:17.907231 2026] [:error] [pid 36785:tid 36856] [client 158.158.41.149:11598] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aaYShXhJejauENG9qTiYxQAAAIY"]
[Tue Mar 03 06:43:20.344712 2026] [:error] [pid 26186:tid 26210] [client 158.158.41.149:11645] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aaYSiPbZCNtk8wDak9euzQAAAVY"]
[Tue Mar 03 06:43:22.821450 2026] [:error] [pid 36784:tid 36834] [client 158.158.41.149:32695] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aaYSinNeKOSGbW9kDgTXkwAAAEs"]
[Tue Mar 03 06:43:27.791725 2026] [:error] [pid 36785:tid 36857] [client 158.158.41.149:6831] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aaYSj3hJejauENG9qTiY2AAAAIc"]
[Tue Mar 03 06:43:29.185055 2026] [:error] [pid 36783:tid 36813] [client 158.158.41.149:6313] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaYSkT4tNYh5NtLaTXcDXAAAABM"]
[Tue Mar 03 06:43:34.783988 2026] [:error] [pid 36784:tid 36837] [client 158.158.41.149:31130] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaYSlnNeKOSGbW9kDgTXsQAAAE4"]
[Tue Mar 03 06:43:36.218182 2026] [:error] [pid 36785:tid 36862] [client 158.158.41.149:19326] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaYSmHhJejauENG9qTiY3QAAAIw"]
[Tue Mar 03 06:43:38.527788 2026] [:error] [pid 36785:tid 36860] [client 158.158.41.149:32887] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aaYSmnhJejauENG9qTiY3wAAAIo"]
[Tue Mar 03 06:43:41.627964 2026] [:error] [pid 36897:tid 36919] [client 158.158.41.149:32843] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aaYSnSZC69_8eM0UouvqbAAAANE"]
[Tue Mar 03 06:43:43.351288 2026] [:error] [pid 14042:tid 14045] [client 158.158.41.149:4548] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aaYSn2eHGCmSEiIBcK4lRAAAAYE"]
[Tue Mar 03 06:43:44.223547 2026] [:error] [pid 36785:tid 36857] [client 158.158.41.149:25715] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aaYSoHhJejauENG9qTiY4gAAAIc"]
[Tue Mar 03 06:43:48.300823 2026] [:error] [pid 36784:tid 36843] [client 158.158.41.149:9807] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aaYSpHNeKOSGbW9kDgTXuwAAAFQ"]
[Tue Mar 03 06:43:49.971965 2026] [:error] [pid 36897:tid 36903] [client 158.158.41.149:9805] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaYSpSZC69_8eM0UouvqeQAAAME"]
[Tue Mar 03 06:43:51.424464 2026] [:error] [pid 20872:tid 20895] [client 158.158.41.149:10300] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaYSp4lYbNk3E_3CgBiLjQAAARU"]
[Tue Mar 03 06:43:52.174156 2026] [:error] [pid 14042:tid 14054] [client 158.158.41.149:8221] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaYSqGeHGCmSEiIBcK4lXAAAAYo"]
[Tue Mar 03 06:43:54.224744 2026] [:error] [pid 14042:tid 14060] [client 158.158.41.149:7806] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aaYSqmeHGCmSEiIBcK4laQAAAZA"]
[Tue Mar 03 06:43:55.924067 2026] [:error] [pid 14042:tid 14051] [client 158.158.41.149:21657] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bak.php"] [unique_id "aaYSq2eHGCmSEiIBcK4ldgAAAYc"]
[Tue Mar 03 07:07:34.347686 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:30692] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aaYYNvbZCNtk8wDak9e-VAAAAUg"]
[Tue Mar 03 07:07:34.828155 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:30663] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aaYYNolYbNk3E_3CgBiTKAAAAQ8"]
[Tue Mar 03 07:07:35.330704 2026] [:error] [pid 14042:tid 14046] [client 52.138.16.158:30664] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aaYYN2eHGCmSEiIBcK4wowAAAYI"]
[Tue Mar 03 07:07:38.674125 2026] [:error] [pid 20872:tid 20876] [client 52.138.16.158:30598] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aaYYOolYbNk3E_3CgBiTLwAAAQI"]
[Tue Mar 03 07:07:39.268220 2026] [:error] [pid 20872:tid 20877] [client 52.138.16.158:30684] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "aaYYO4lYbNk3E_3CgBiTMgAAAQM"]
[Tue Mar 03 07:07:39.996346 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:30602] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "aaYYO_bZCNtk8wDak9e-gQAAAU8"]
[Tue Mar 03 07:07:40.846877 2026] [:error] [pid 14042:tid 14055] [client 52.138.16.158:30686] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "aaYYPGeHGCmSEiIBcK4wuQAAAYs"]
[Tue Mar 03 07:07:41.454113 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:30622] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "aaYYPWeHGCmSEiIBcK4wvAAAAYo"]
[Tue Mar 03 07:07:42.278915 2026] [:error] [pid 36784:tid 36844] [client 52.138.16.158:30547] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "aaYYPnNeKOSGbW9kDgTcHwAAAFU"]
[Tue Mar 03 07:07:43.157486 2026] [:error] [pid 36784:tid 36846] [client 52.138.16.158:30718] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "aaYYP3NeKOSGbW9kDgTcJwAAAFc"]
[Tue Mar 03 07:07:44.241181 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:30699] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "aaYYQPbZCNtk8wDak9e-lwAAAUM"]
[Tue Mar 03 07:07:45.473915 2026] [:error] [pid 36897:tid 36909] [client 52.138.16.158:30612] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "aaYYQSZC69_8eM0Uouvw0AAAAMc"]
[Tue Mar 03 07:07:46.833908 2026] [:error] [pid 36897:tid 36903] [client 52.138.16.158:30595] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asus.php"] [unique_id "aaYYQiZC69_8eM0Uouvw1QAAAME"]
[Tue Mar 03 07:07:53.721453 2026] [:error] [pid 36785:tid 36874] [client 52.138.16.158:30592] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asus.php"] [unique_id "aaYYSXhJejauENG9qTidrgAAAJg"]
[Tue Mar 03 07:07:56.151725 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:30599] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asus.php"] [unique_id "aaYYTGeHGCmSEiIBcK4w1QAAAZA"]
[Tue Mar 03 07:07:57.136467 2026] [:error] [pid 14042:tid 14051] [client 52.138.16.158:30700] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asus.php"] [unique_id "aaYYTWeHGCmSEiIBcK4w2AAAAYc"]
[Tue Mar 03 07:07:59.036284 2026] [:error] [pid 26186:tid 26211] [client 52.138.16.158:30676] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aaYYT_bZCNtk8wDak9e-rwAAAVc"]
[Tue Mar 03 07:08:02.905185 2026] [:error] [pid 36784:tid 36834] [client 52.138.16.158:30705] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aaYYUnNeKOSGbW9kDgTcSAAAAEs"]
[Tue Mar 03 07:08:03.767576 2026] [:error] [pid 36784:tid 36832] [client 52.138.16.158:30601] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aaYYU3NeKOSGbW9kDgTcTQAAAEk"]
[Tue Mar 03 07:08:04.711289 2026] [:error] [pid 36784:tid 36837] [client 52.138.16.158:30707] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dox.php"] [unique_id "aaYYVHNeKOSGbW9kDgTcUAAAAE4"]
[Tue Mar 03 07:08:06.175128 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:30541] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aaYYVmeHGCmSEiIBcK4w5QAAAYU"]
[Tue Mar 03 07:08:07.187876 2026] [:error] [pid 14042:tid 14068] [client 52.138.16.158:30652] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aaYYV2eHGCmSEiIBcK4w6QAAAZg"]
[Tue Mar 03 07:08:09.910742 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:30683] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aaYYWWeHGCmSEiIBcK4w8gAAAZA"]
[Tue Mar 03 07:08:10.879585 2026] [:error] [pid 36784:tid 36836] [client 52.138.16.158:30709] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aaYYWnNeKOSGbW9kDgTcWgAAAE0"]
[Tue Mar 03 07:08:12.219845 2026] [:error] [pid 26186:tid 26195] [client 52.138.16.158:30535] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aaYYXPbZCNtk8wDak9e-vgAAAUc"]
[Tue Mar 03 07:08:18.396798 2026] [:error] [pid 20872:tid 20893] [client 52.138.16.158:30611] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aaYYYolYbNk3E_3CgBiTZwAAARM"]
[Tue Mar 03 07:08:21.710693 2026] [:error] [pid 14042:tid 14046] [client 52.138.16.158:30492] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aaYYZWeHGCmSEiIBcK4w-gAAAYI"]
[Tue Mar 03 07:08:23.081602 2026] [:error] [pid 36785:tid 36860] [client 52.138.16.158:30542] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "aaYYZ3hJejauENG9qTiduwAAAIo"]
[Tue Mar 03 07:08:24.056282 2026] [:error] [pid 14042:tid 14051] [client 52.138.16.158:30693] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "aaYYaGeHGCmSEiIBcK4xBAAAAYc"]
[Tue Mar 03 07:08:26.407638 2026] [:error] [pid 14042:tid 14052] [client 52.138.16.158:30719] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "aaYYameHGCmSEiIBcK4xBQAAAYg"]
[Tue Mar 03 07:08:28.178482 2026] [:error] [pid 14042:tid 14059] [client 52.138.16.158:30554] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "aaYYbGeHGCmSEiIBcK4xDgAAAY8"]
[Tue Mar 03 07:08:30.660055 2026] [:error] [pid 36783:tid 36812] [client 52.138.16.158:30604] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "aaYYbj4tNYh5NtLaTXcG9gAAABI"]
[Tue Mar 03 07:11:45.144985 2026] [:error] [pid 14042:tid 14052] [client 52.138.16.158:30660] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55.php"] [unique_id "aaYZMWeHGCmSEiIBcK4yVgAAAYg"]
[Tue Mar 03 07:11:46.385755 2026] [:error] [pid 20872:tid 20884] [client 52.138.16.158:30593] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55.php"] [unique_id "aaYZMolYbNk3E_3CgBiUggAAAQo"]
[Tue Mar 03 07:11:47.646668 2026] [:error] [pid 14042:tid 14063] [client 52.138.16.158:30630] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55.php"] [unique_id "aaYZM2eHGCmSEiIBcK4yXAAAAZM"]
[Tue Mar 03 07:11:48.906951 2026] [:error] [pid 36783:tid 36804] [client 52.138.16.158:30606] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55.php"] [unique_id "aaYZND4tNYh5NtLaTXcHewAAAAo"]
[Tue Mar 03 07:11:50.553646 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:30609] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aaYZNolYbNk3E_3CgBiUhwAAAQw"]
[Tue Mar 03 07:11:53.470521 2026] [:error] [pid 36784:tid 36824] [client 52.138.16.158:30600] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aaYZOXNeKOSGbW9kDgTdSAAAAEE"]
[Tue Mar 03 07:11:54.800284 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:30647] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aaYZOmeHGCmSEiIBcK4ybgAAAYU"]
[Tue Mar 03 07:11:58.481984 2026] [:error] [pid 20872:tid 20880] [client 52.138.16.158:30595] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "aaYZPolYbNk3E_3CgBiUnAAAAQY"]
[Tue Mar 03 07:12:00.685277 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:30674] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaYZQPbZCNtk8wDak9fAegAAAVQ"]
[Tue Mar 03 07:12:05.165253 2026] [:error] [pid 20872:tid 20890] [client 52.138.16.158:30628] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaYZRYlYbNk3E_3CgBiUqAAAARA"]
[Tue Mar 03 07:12:11.674026 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:30547] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aaYZS2eHGCmSEiIBcK4ywgAAAZA"]
[Tue Mar 03 07:12:15.684534 2026] [:error] [pid 36784:tid 36834] [client 52.138.16.158:30605] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYZT3NeKOSGbW9kDgTdUQAAAEs"]
[Tue Mar 03 07:12:17.389852 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:30711] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYZUfbZCNtk8wDak9fAxAAAAVQ"]
[Tue Mar 03 07:12:18.363902 2026] [:error] [pid 26186:tid 26210] [client 52.138.16.158:30679] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYZUvbZCNtk8wDak9fAyQAAAVY"]
[Tue Mar 03 07:12:20.762855 2026] [:error] [pid 36784:tid 36837] [client 52.138.16.158:30596] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYZVHNeKOSGbW9kDgTdUwAAAE4"]
[Tue Mar 03 07:12:22.762171 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:30698] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aaYZVvbZCNtk8wDak9fA5gAAAUg"]
[Tue Mar 03 07:12:29.059801 2026] [:error] [pid 20872:tid 20896] [client 52.138.16.158:30673] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aaYZXYlYbNk3E_3CgBiU1gAAARY"]
[Tue Mar 03 07:12:30.210971 2026] [:error] [pid 20872:tid 20898] [client 52.138.16.158:30608] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aaYZXolYbNk3E_3CgBiU2AAAARg"]
[Tue Mar 03 07:12:36.172996 2026] [:error] [pid 14042:tid 14059] [client 52.138.16.158:30682] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "aaYZZGeHGCmSEiIBcK4y8wAAAY8"]
[Tue Mar 03 07:12:38.955770 2026] [:error] [pid 26186:tid 26199] [client 52.138.16.158:30610] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/core.php"] [unique_id "aaYZZvbZCNtk8wDak9fBAwAAAUs"]
[Tue Mar 03 07:15:27.715026 2026] [:error] [pid 26186:tid 26209] [client 52.138.16.158:30634] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "aaYaD_bZCNtk8wDak9fChgAAAVU"]
[Tue Mar 03 07:15:29.406883 2026] [:error] [pid 36783:tid 36801] [client 52.138.16.158:30675] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "aaYaET4tNYh5NtLaTXcH8AAAAAc"]
[Tue Mar 03 07:15:32.012656 2026] [:error] [pid 26186:tid 26199] [client 52.138.16.158:30596] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "aaYaFPbZCNtk8wDak9fClAAAAUs"]
[Tue Mar 03 07:15:34.124469 2026] [:error] [pid 14042:tid 14052] [client 52.138.16.158:30603] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "aaYaFmeHGCmSEiIBcK40RAAAAYg"]
[Tue Mar 03 07:15:35.748247 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:30699] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "aaYaF_bZCNtk8wDak9fCmwAAAVA"]
[Tue Mar 03 07:15:38.844942 2026] [:error] [pid 36783:tid 36813] [client 52.138.16.158:30633] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "aaYaGj4tNYh5NtLaTXcH9AAAABM"]
[Tue Mar 03 07:15:41.273894 2026] [:error] [pid 20872:tid 20882] [client 52.138.16.158:30696] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "aaYaHYlYbNk3E_3CgBiV8wAAAQg"]
[Tue Mar 03 07:15:46.612311 2026] [:error] [pid 20872:tid 20892] [client 52.138.16.158:30693] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "aaYaIolYbNk3E_3CgBiV_wAAARI"]
[Tue Mar 03 07:15:48.636867 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:30677] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/logs.php"] [unique_id "aaYaJPbZCNtk8wDak9fCpAAAAUg"]
[Tue Mar 03 07:15:49.970576 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:30717] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/logs.php"] [unique_id "aaYaJYlYbNk3E_3CgBiWAQAAAQ8"]
[Tue Mar 03 07:15:52.965664 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:30718] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/logs.php"] [unique_id "aaYaKPbZCNtk8wDak9fCqwAAAVQ"]
[Tue Mar 03 07:15:55.276054 2026] [:error] [pid 26186:tid 26209] [client 52.138.16.158:30669] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/logs.php"] [unique_id "aaYaK_bZCNtk8wDak9fCuAAAAVU"]
[Tue Mar 03 07:15:58.266713 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:30689] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboutc.php"] [unique_id "aaYaLmeHGCmSEiIBcK40ZQAAAYo"]
[Tue Mar 03 07:15:59.746644 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:30611] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboutc.php"] [unique_id "aaYaL_bZCNtk8wDak9fCwwAAAU0"]
[Tue Mar 03 07:16:04.723506 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:30655] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboutc.php"] [unique_id "aaYaNPbZCNtk8wDak9fCzgAAAUQ"]
[Tue Mar 03 07:16:06.112216 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:30612] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboutc.php"] [unique_id "aaYaNvbZCNtk8wDak9fC0wAAAVM"]
[Tue Mar 03 07:16:10.102480 2026] [:error] [pid 36897:tid 36905] [client 52.138.16.158:30622] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "aaYaOiZC69_8eM0Uouvy1gAAAMM"]
[Tue Mar 03 07:16:12.030666 2026] [:error] [pid 36784:tid 36839] [client 52.138.16.158:30626] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "aaYaPHNeKOSGbW9kDgTd3AAAAFA"]
[Tue Mar 03 07:16:12.870620 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:30661] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "aaYaPPbZCNtk8wDak9fC5AAAAUM"]
[Tue Mar 03 07:16:13.562086 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:30599] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "aaYaPfbZCNtk8wDak9fC6AAAAVQ"]
[Tue Mar 03 07:16:15.199284 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:30716] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xr.php"] [unique_id "aaYaP_bZCNtk8wDak9fC9AAAAVI"]
[Tue Mar 03 07:16:16.565631 2026] [:error] [pid 36784:tid 36835] [client 52.138.16.158:30705] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xr.php"] [unique_id "aaYaQHNeKOSGbW9kDgTd3QAAAEw"]
[Tue Mar 03 07:16:19.654305 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:30603] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xr.php"] [unique_id "aaYaQ_bZCNtk8wDak9fC-wAAAVM"]
[Tue Mar 03 07:19:21.645096 2026] [:error] [pid 36897:tid 36921] [client 52.138.16.158:30701] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaYa-SZC69_8eM0Uouvz1wAAANM"]
[Tue Mar 03 07:19:23.930592 2026] [:error] [pid 14042:tid 14055] [client 52.138.16.158:30650] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaYa-2eHGCmSEiIBcK43bQAAAYs"]
[Tue Mar 03 07:19:25.649554 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:30680] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaYa_fbZCNtk8wDak9fHHAAAAUQ"]
[Tue Mar 03 07:19:26.367330 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:30714] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aaYa_vbZCNtk8wDak9fHHwAAAVM"]
[Tue Mar 03 07:19:29.089462 2026] [:error] [pid 36785:tid 36851] [client 52.138.16.158:30664] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaYbAXhJejauENG9qTifpQAAAIE"]
[Tue Mar 03 07:19:30.440335 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:30702] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaYbAolYbNk3E_3CgBiXrwAAAQw"]
[Tue Mar 03 07:19:33.480770 2026] [:error] [pid 20872:tid 20887] [client 52.138.16.158:30657] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaYbBYlYbNk3E_3CgBiXuwAAAQ0"]
[Tue Mar 03 07:19:37.609420 2026] [:error] [pid 36785:tid 36854] [client 52.138.16.158:30604] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "aaYbCXhJejauENG9qTifrgAAAIQ"]
[Tue Mar 03 07:19:45.906547 2026] [:error] [pid 36785:tid 36850] [client 52.138.16.158:30679] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "aaYbEXhJejauENG9qTifvAAAAIA"]
[Tue Mar 03 07:19:47.425793 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:30622] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "aaYbE_bZCNtk8wDak9fHNQAAAUo"]
[Tue Mar 03 07:19:50.710290 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:30606] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "aaYbFolYbNk3E_3CgBiXyQAAAQU"]
[Tue Mar 03 07:19:52.274475 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:30609] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "aaYbGPbZCNtk8wDak9fHOgAAAUM"]
[Tue Mar 03 07:19:53.946821 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:30558] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aaYbGfbZCNtk8wDak9fHRAAAAUA"]
[Tue Mar 03 07:19:55.557752 2026] [:error] [pid 14042:tid 14061] [client 52.138.16.158:30693] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aaYbG2eHGCmSEiIBcK43xAAAAZE"]
[Tue Mar 03 07:19:57.014623 2026] [:error] [pid 36897:tid 36906] [client 52.138.16.158:30690] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aaYbHSZC69_8eM0Uouv0DQAAAMQ"]
[Tue Mar 03 07:19:58.530531 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:30713] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aaYbHmeHGCmSEiIBcK43zAAAAYw"]
[Tue Mar 03 07:20:02.167851 2026] [:error] [pid 36897:tid 36902] [client 52.138.16.158:30593] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaYbIiZC69_8eM0Uouv0FQAAAMA"]
[Tue Mar 03 07:20:03.488194 2026] [:error] [pid 14042:tid 14053] [client 52.138.16.158:30607] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaYbI2eHGCmSEiIBcK431AAAAYk"]
[Tue Mar 03 07:20:04.824427 2026] [:error] [pid 36785:tid 36857] [client 52.138.16.158:30688] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaYbJHhJejauENG9qTifzQAAAIc"]
[Tue Mar 03 07:20:06.520293 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:30709] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aaYbJvbZCNtk8wDak9fHaAAAAUk"]
[Tue Mar 03 07:20:08.081568 2026] [:error] [pid 20872:tid 20890] [client 52.138.16.158:30601] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaYbKIlYbNk3E_3CgBiX4AAAARA"]
[Tue Mar 03 07:20:09.081108 2026] [:error] [pid 36785:tid 36859] [client 52.138.16.158:30694] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaYbKXhJejauENG9qTif0wAAAIk"]
[Tue Mar 03 07:20:10.525515 2026] [:error] [pid 36785:tid 36854] [client 52.138.16.158:30672] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aaYbKnhJejauENG9qTif2QAAAIQ"]
[Tue Mar 03 07:21:14.672438 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:30718] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aaYbavbZCNtk8wDak9fIYAAAAU8"]
[Tue Mar 03 07:21:19.837839 2026] [:error] [pid 26186:tid 26199] [client 52.138.16.158:30663] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaYbb_bZCNtk8wDak9fIhQAAAUs"]
[Tue Mar 03 07:21:24.023800 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:30596] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaYbdGeHGCmSEiIBcK45WAAAAZY"]
[Tue Mar 03 07:21:25.359753 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:30719] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaYbdfbZCNtk8wDak9fImAAAAUY"]
[Tue Mar 03 07:21:27.104967 2026] [:error] [pid 14042:tid 14052] [client 52.138.16.158:30595] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aaYbd2eHGCmSEiIBcK45YQAAAYg"]
[Tue Mar 03 07:21:28.088062 2026] [:error] [pid 36785:tid 36862] [client 52.138.16.158:30715] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaYbeHhJejauENG9qTigPAAAAIw"]
[Tue Mar 03 07:21:29.346486 2026] [:error] [pid 36897:tid 36923] [client 52.138.16.158:30617] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaYbeSZC69_8eM0Uouv0agAAANU"]
[Tue Mar 03 07:21:31.217212 2026] [:error] [pid 14042:tid 14058] [client 52.138.16.158:30637] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaYbe2eHGCmSEiIBcK45ZwAAAY4"]
[Tue Mar 03 07:21:32.817046 2026] [:error] [pid 36897:tid 36925] [client 52.138.16.158:30535] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aaYbfCZC69_8eM0Uouv0bwAAANc"]
[Tue Mar 03 07:21:34.075507 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:30683] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/work.php"] [unique_id "aaYbfolYbNk3E_3CgBiYiwAAAQc"]
[Tue Mar 03 07:21:35.256339 2026] [:error] [pid 36785:tid 36862] [client 52.138.16.158:30580] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/work.php"] [unique_id "aaYbf3hJejauENG9qTigSAAAAIw"]
[Tue Mar 03 07:21:37.310164 2026] [:error] [pid 36785:tid 36868] [client 52.138.16.158:30594] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/work.php"] [unique_id "aaYbgXhJejauENG9qTigTAAAAJI"]
[Tue Mar 03 07:21:39.000116 2026] [:error] [pid 14042:tid 14061] [client 52.138.16.158:30716] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/work.php"] [unique_id "aaYbgmeHGCmSEiIBcK45egAAAZE"]
[Tue Mar 03 07:21:41.103076 2026] [:error] [pid 36785:tid 36867] [client 52.138.16.158:30634] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/06.php"] [unique_id "aaYbhXhJejauENG9qTigUAAAAJE"]
[Tue Mar 03 07:21:44.970932 2026] [:error] [pid 36785:tid 36851] [client 52.138.16.158:30572] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/06.php"] [unique_id "aaYbiHhJejauENG9qTigWQAAAIE"]
[Tue Mar 03 07:21:46.453103 2026] [:error] [pid 36897:tid 36920] [client 52.138.16.158:30628] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/06.php"] [unique_id "aaYbiiZC69_8eM0Uouv0fgAAANI"]
[Tue Mar 03 07:21:47.411275 2026] [:error] [pid 36897:tid 36921] [client 52.138.16.158:30619] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/06.php"] [unique_id "aaYbiyZC69_8eM0Uouv0gQAAANM"]
[Tue Mar 03 07:21:48.858946 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:30695] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/god.php"] [unique_id "aaYbjGeHGCmSEiIBcK45igAAAYU"]
[Tue Mar 03 07:21:49.781462 2026] [:error] [pid 20872:tid 20877] [client 52.138.16.158:30599] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/god.php"] [unique_id "aaYbjYlYbNk3E_3CgBiYmgAAAQM"]
[Tue Mar 03 07:21:51.476202 2026] [:error] [pid 14042:tid 14058] [client 52.138.16.158:30623] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/god.php"] [unique_id "aaYbj2eHGCmSEiIBcK45lAAAAY4"]
[Tue Mar 03 07:21:52.253911 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:30632] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/god.php"] [unique_id "aaYbkGeHGCmSEiIBcK45lwAAAYw"]
[Tue Mar 03 07:21:53.383988 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:30692] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaYbkfbZCNtk8wDak9fIugAAAUY"]
[Tue Mar 03 07:21:55.672473 2026] [:error] [pid 36897:tid 36909] [client 52.138.16.158:30620] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaYbkyZC69_8eM0Uouv0jgAAAMc"]
[Tue Mar 03 07:21:57.755273 2026] [:error] [pid 26186:tid 26211] [client 52.138.16.158:30466] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaYblfbZCNtk8wDak9fIvAAAAVc"]
[Tue Mar 03 07:21:58.454233 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:30566] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/X57.php"] [unique_id "aaYblvbZCNtk8wDak9fIvgAAAVM"]
[Tue Mar 03 07:21:59.596198 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:30653] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugins.php"] [unique_id "aaYbl_bZCNtk8wDak9fIwwAAAVA"]
[Tue Mar 03 07:22:01.048842 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:30497] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugins.php"] [unique_id "aaYbmfbZCNtk8wDak9fIygAAAU8"]
[Tue Mar 03 07:22:03.076018 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:30556] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugins.php"] [unique_id "aaYbm_bZCNtk8wDak9fI2QAAAVI"]
[Tue Mar 03 07:22:12.251865 2026] [:error] [pid 20872:tid 20884] [client 52.138.16.158:30657] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugins.php"] [unique_id "aaYbpIlYbNk3E_3CgBiYqgAAAQo"]
[Tue Mar 03 07:22:14.199602 2026] [:error] [pid 36785:tid 36854] [client 52.138.16.158:30662] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seetox.php"] [unique_id "aaYbpnhJejauENG9qTigfgAAAIQ"]
[Tue Mar 03 07:22:18.665852 2026] [:error] [pid 36897:tid 36908] [client 52.138.16.158:30671] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seetox.php"] [unique_id "aaYbqiZC69_8eM0Uouv0oQAAAMY"]
[Tue Mar 03 07:22:23.842048 2026] [:error] [pid 20872:tid 20876] [client 52.138.16.158:30718] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seetox.php"] [unique_id "aaYbr4lYbNk3E_3CgBiYuAAAAQI"]
[Tue Mar 03 07:22:25.177316 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:30490] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seetox.php"] [unique_id "aaYbsfbZCNtk8wDak9fJCgAAAUI"]
[Tue Mar 03 07:22:26.536325 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:30633] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYbsvbZCNtk8wDak9fJFAAAAUg"]
[Tue Mar 03 07:22:29.655702 2026] [:error] [pid 36784:tid 36826] [client 52.138.16.158:30655] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYbtXNeKOSGbW9kDgTfZgAAAEM"]
[Tue Mar 03 07:22:31.994730 2026] [:error] [pid 20872:tid 20874] [client 52.138.16.158:30496] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYbt4lYbNk3E_3CgBiYwAAAAQA"]
[Tue Mar 03 07:22:37.281440 2026] [:error] [pid 26186:tid 26195] [client 52.138.16.158:30546] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYbvfbZCNtk8wDak9fJMwAAAUc"]
[Tue Mar 03 07:22:38.373464 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:30585] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaYbvolYbNk3E_3CgBiYyAAAAQw"]
[Tue Mar 03 07:22:40.141587 2026] [:error] [pid 26186:tid 26212] [client 52.138.16.158:30613] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaYbwPbZCNtk8wDak9fJNwAAAVg"]
[Tue Mar 03 07:22:43.782705 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:30621] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaYbw4lYbNk3E_3CgBiYzgAAAQU"]
[Tue Mar 03 07:22:46.841750 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:30611] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aaYbxvbZCNtk8wDak9fJRwAAAUQ"]
[Tue Mar 03 07:22:48.124972 2026] [:error] [pid 14042:tid 14053] [client 52.138.16.158:30537] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "aaYbyGeHGCmSEiIBcK450wAAAYk"]
[Tue Mar 03 07:22:49.533349 2026] [:error] [pid 14042:tid 14065] [client 52.138.16.158:30687] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "aaYbyWeHGCmSEiIBcK451wAAAZU"]
[Tue Mar 03 07:22:51.252550 2026] [:error] [pid 26186:tid 26209] [client 52.138.16.158:30468] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "aaYby_bZCNtk8wDak9fJVwAAAVU"]
[Tue Mar 03 07:22:52.147140 2026] [:error] [pid 26186:tid 26205] [client 52.138.16.158:30587] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "aaYbzPbZCNtk8wDak9fJWgAAAVE"]
[Tue Mar 03 07:22:52.882305 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:30560] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/un.php"] [unique_id "aaYbzPbZCNtk8wDak9fJXgAAAUo"]
[Tue Mar 03 07:22:53.590742 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:30582] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/un.php"] [unique_id "aaYbzfbZCNtk8wDak9fJYQAAAUE"]
[Tue Mar 03 07:22:55.985670 2026] [:error] [pid 36897:tid 36922] [client 52.138.16.158:30684] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/un.php"] [unique_id "aaYbzyZC69_8eM0Uouv0wgAAANQ"]
[Tue Mar 03 07:22:58.112679 2026] [:error] [pid 36897:tid 36925] [client 52.138.16.158:30474] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/un.php"] [unique_id "aaYb0iZC69_8eM0Uouv0xgAAANc"]
[Tue Mar 03 07:22:59.560553 2026] [:error] [pid 36897:tid 36910] [client 52.138.16.158:30559] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/erty.php"] [unique_id "aaYb0yZC69_8eM0Uouv0xwAAAMg"]
[Tue Mar 03 07:23:00.405124 2026] [:error] [pid 36785:tid 36856] [client 52.138.16.158:30639] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/erty.php"] [unique_id "aaYb1HhJejauENG9qTigpQAAAIY"]
[Tue Mar 03 07:23:02.056013 2026] [:error] [pid 36785:tid 36853] [client 52.138.16.158:30479] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/erty.php"] [unique_id "aaYb1nhJejauENG9qTigqQAAAIM"]
[Tue Mar 03 07:23:03.110578 2026] [:error] [pid 36785:tid 36862] [client 52.138.16.158:30510] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/erty.php"] [unique_id "aaYb13hJejauENG9qTigrQAAAIw"]
[Tue Mar 03 07:23:05.977644 2026] [:error] [pid 14042:tid 14044] [client 52.138.16.158:30635] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fot.php"] [unique_id "aaYb2WeHGCmSEiIBcK457wAAAYA"]
[Tue Mar 03 07:23:08.284745 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:30339] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fot.php"] [unique_id "aaYb3PbZCNtk8wDak9fJlwAAAU8"]
[Tue Mar 03 07:23:14.817829 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:30570] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fot.php"] [unique_id "aaYb4vbZCNtk8wDak9fJpQAAAUA"]
[Tue Mar 03 07:23:16.101785 2026] [:error] [pid 36785:tid 36864] [client 52.138.16.158:30575] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fot.php"] [unique_id "aaYb5HhJejauENG9qTigxAAAAI4"]
[Tue Mar 03 07:23:19.416672 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:30647] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "aaYb5_bZCNtk8wDak9fJrAAAAVM"]
[Tue Mar 03 07:23:21.338438 2026] [:error] [pid 36897:tid 36906] [client 52.138.16.158:30487] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "aaYb6SZC69_8eM0Uouv04QAAAMQ"]
[Tue Mar 03 07:23:22.142549 2026] [:error] [pid 14042:tid 14045] [client 52.138.16.158:30341] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "aaYb6meHGCmSEiIBcK46KwAAAYE"]
[Tue Mar 03 07:23:24.164217 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:30573] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "aaYb7PbZCNtk8wDak9fJugAAAUg"]
[Tue Mar 03 07:23:26.033653 2026] [:error] [pid 26186:tid 26202] [client 52.138.16.158:30473] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "aaYb7vbZCNtk8wDak9fJwQAAAU4"]
[Tue Mar 03 07:23:28.201359 2026] [:error] [pid 36783:tid 36807] [client 52.138.16.158:30563] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "aaYb8D4tNYh5NtLaTXcJgQAAAA0"]
[Tue Mar 03 07:23:29.468073 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:30401] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "aaYb8fbZCNtk8wDak9fJygAAAU8"]
[Tue Mar 03 07:23:30.356696 2026] [:error] [pid 14042:tid 14051] [client 52.138.16.158:30428] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "aaYb8meHGCmSEiIBcK46QQAAAYc"]
[Tue Mar 03 07:23:32.732035 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:30680] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aaYb9IlYbNk3E_3CgBiY7QAAAQc"]
[Tue Mar 03 07:23:33.886550 2026] [:error] [pid 36897:tid 36914] [client 52.138.16.158:30438] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aaYb9SZC69_8eM0Uouv07AAAAMw"]
[Tue Mar 03 07:23:34.924331 2026] [:error] [pid 36897:tid 36919] [client 52.138.16.158:30515] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aaYb9iZC69_8eM0Uouv07wAAANE"]
[Tue Mar 03 07:23:36.438879 2026] [:error] [pid 20872:tid 20885] [client 52.138.16.158:30489] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aaYb-IlYbNk3E_3CgBiY8wAAAQs"]
[Tue Mar 03 07:23:37.883454 2026] [:error] [pid 36784:tid 36830] [client 52.138.16.158:30475] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws81.php"] [unique_id "aaYb-XNeKOSGbW9kDgTfoAAAAEc"]
[Tue Mar 03 07:23:39.073042 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:30532] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws81.php"] [unique_id "aaYb-_bZCNtk8wDak9fJ7gAAAU0"]
[Tue Mar 03 07:23:40.400853 2026] [:error] [pid 36783:tid 36809] [client 52.138.16.158:30651] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws81.php"] [unique_id "aaYb_D4tNYh5NtLaTXcJhAAAAA8"]
[Tue Mar 03 07:23:41.912706 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:30492] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws81.php"] [unique_id "aaYb_WeHGCmSEiIBcK46bAAAAYQ"]
[Tue Mar 03 07:23:43.826151 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:30588] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "aaYb_2eHGCmSEiIBcK46dAAAAYw"]
[Tue Mar 03 07:23:46.408415 2026] [:error] [pid 36897:tid 36920] [client 52.138.16.158:30444] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "aaYcAiZC69_8eM0Uouv1CQAAANI"]
[Tue Mar 03 07:23:48.365700 2026] [:error] [pid 20872:tid 20894] [client 52.138.16.158:30507] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "aaYcBIlYbNk3E_3CgBiY_AAAARQ"]
[Tue Mar 03 07:23:49.765418 2026] [:error] [pid 14042:tid 14061] [client 52.138.16.158:30464] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "aaYcBWeHGCmSEiIBcK46hAAAAZE"]
[Tue Mar 03 07:23:52.279825 2026] [:error] [pid 36783:tid 36805] [client 52.138.16.158:30485] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aaYcCD4tNYh5NtLaTXcJkAAAAAs"]
[Tue Mar 03 07:23:56.054298 2026] [:error] [pid 36897:tid 36913] [client 52.138.16.158:30650] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aaYcDCZC69_8eM0Uouv1DwAAAMs"]
[Tue Mar 03 07:23:59.020112 2026] [:error] [pid 36783:tid 36794] [client 52.138.16.158:30664] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aaYcDz4tNYh5NtLaTXcJlgAAAAA"]
[Tue Mar 03 07:24:01.025447 2026] [:error] [pid 36897:tid 36907] [client 52.138.16.158:30502] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aaYcESZC69_8eM0Uouv1FQAAAMU"]
[Tue Mar 03 07:24:02.539074 2026] [:error] [pid 20872:tid 20894] [client 52.138.16.158:30443] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v.php"] [unique_id "aaYcEolYbNk3E_3CgBiZGgAAARQ"]
[Tue Mar 03 07:24:04.197330 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:30505] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v.php"] [unique_id "aaYcFPbZCNtk8wDak9fKMQAAAVA"]
[Tue Mar 03 07:24:06.406743 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:30521] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v.php"] [unique_id "aaYcFvbZCNtk8wDak9fKPAAAAUE"]
[Tue Mar 03 07:24:07.145202 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:30606] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v.php"] [unique_id "aaYcF2eHGCmSEiIBcK46sgAAAZQ"]
[Tue Mar 03 07:24:08.160372 2026] [:error] [pid 36897:tid 36903] [client 52.138.16.158:30372] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaYcGCZC69_8eM0Uouv1GQAAAME"]
[Tue Mar 03 07:24:09.561889 2026] [:error] [pid 36785:tid 36860] [client 52.138.16.158:30376] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaYcGXhJejauENG9qTihWAAAAIo"]
[Tue Mar 03 07:24:11.672996 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:30679] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaYcG_bZCNtk8wDak9fKQgAAAUM"]
[Tue Mar 03 07:24:13.731493 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:30383] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "aaYcHfbZCNtk8wDak9fKUAAAAVI"]
[Tue Mar 03 07:24:21.471938 2026] [:error] [pid 36784:tid 36838] [client 52.138.16.158:30612] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sa.php7"] [unique_id "aaYcJXNeKOSGbW9kDgTfzQAAAE8"]
[Tue Mar 03 07:24:23.277185 2026] [:error] [pid 36784:tid 36823] [client 52.138.16.158:30597] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sa.php7"] [unique_id "aaYcJ3NeKOSGbW9kDgTfzgAAAEA"]
[Tue Mar 03 07:24:25.695743 2026] [:error] [pid 36784:tid 36846] [client 52.138.16.158:30698] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sa.php7"] [unique_id "aaYcKXNeKOSGbW9kDgTf0QAAAFc"]
[Tue Mar 03 07:24:27.215850 2026] [:error] [pid 36784:tid 36843] [client 52.138.16.158:30677] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sa.php7"] [unique_id "aaYcK3NeKOSGbW9kDgTf1QAAAFQ"]
[Tue Mar 03 07:24:28.816453 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:30652] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shop.php"] [unique_id "aaYcLPbZCNtk8wDak9fKYwAAAVQ"]
[Tue Mar 03 07:24:31.876675 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:30347] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shop.php"] [unique_id "aaYcL_bZCNtk8wDak9fKZAAAAU0"]
[Tue Mar 03 07:24:33.663144 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:30423] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shop.php"] [unique_id "aaYcMfbZCNtk8wDak9fKbQAAAUA"]
[Tue Mar 03 07:24:35.263998 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:30478] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shop.php"] [unique_id "aaYcM2eHGCmSEiIBcK467AAAAYQ"]
[Tue Mar 03 07:24:36.108150 2026] [:error] [pid 20872:tid 20891] [client 52.138.16.158:30592] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "aaYcNIlYbNk3E_3CgBiZPwAAARE"]
[Tue Mar 03 07:24:36.832247 2026] [:error] [pid 36784:tid 36828] [client 52.138.16.158:30463] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "aaYcNHNeKOSGbW9kDgTf3AAAAEU"]
[Tue Mar 03 07:24:38.572643 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:30659] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "aaYcNmeHGCmSEiIBcK469AAAAZY"]
[Tue Mar 03 07:24:39.477819 2026] [:error] [pid 20872:tid 20885] [client 52.138.16.158:30688] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "aaYcN4lYbNk3E_3CgBiZRAAAAQs"]
[Tue Mar 03 07:24:40.622040 2026] [:error] [pid 36785:tid 36858] [client 52.138.16.158:30424] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lp6.php"] [unique_id "aaYcOHhJejauENG9qTihZQAAAIg"]
[Tue Mar 03 07:24:41.610443 2026] [:error] [pid 36785:tid 36868] [client 52.138.16.158:30413] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lp6.php"] [unique_id "aaYcOXhJejauENG9qTihaQAAAJI"]
[Tue Mar 03 07:24:42.487159 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:30412] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lp6.php"] [unique_id "aaYcOvbZCNtk8wDak9fKgAAAAVI"]
[Tue Mar 03 07:24:43.644120 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:30421] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lp6.php"] [unique_id "aaYcO2eHGCmSEiIBcK46_QAAAYo"]
[Tue Mar 03 07:24:44.541971 2026] [:error] [pid 20872:tid 20888] [client 52.138.16.158:30525] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aaYcPIlYbNk3E_3CgBiZTQAAAQ4"]
[Tue Mar 03 07:24:45.603076 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:30698] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aaYcPfbZCNtk8wDak9fKhAAAAUQ"]
[Tue Mar 03 07:24:46.548011 2026] [:error] [pid 36897:tid 36909] [client 52.138.16.158:30511] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aaYcPiZC69_8eM0Uouv1RgAAAMc"]
[Tue Mar 03 07:24:47.376526 2026] [:error] [pid 36784:tid 36826] [client 52.138.16.158:30657] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aaYcP3NeKOSGbW9kDgTf4QAAAEM"]
[Tue Mar 03 07:24:48.624815 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:30414] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bak.php"] [unique_id "aaYcQGeHGCmSEiIBcK47CAAAAYo"]
[Tue Mar 03 07:24:49.989722 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:30433] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bak.php"] [unique_id "aaYcQWeHGCmSEiIBcK47CwAAAZQ"]
[Tue Mar 03 07:24:51.272012 2026] [:error] [pid 14042:tid 14047] [client 52.138.16.158:30429] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bak.php"] [unique_id "aaYcQ2eHGCmSEiIBcK47DgAAAYM"]
[Tue Mar 03 07:24:53.972946 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:30591] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bak.php"] [unique_id "aaYcRfbZCNtk8wDak9fKmwAAAVQ"]
[Tue Mar 03 07:24:55.076943 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:30299] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "aaYcR_bZCNtk8wDak9fKnAAAAVI"]
[Tue Mar 03 07:24:56.309845 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:30576] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "aaYcSPbZCNtk8wDak9fKngAAAUo"]
[Tue Mar 03 07:24:57.625491 2026] [:error] [pid 36785:tid 36867] [client 52.138.16.158:30419] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "aaYcSXhJejauENG9qTihcgAAAJE"]
[Tue Mar 03 07:24:59.190874 2026] [:error] [pid 36783:tid 36804] [client 52.138.16.158:30410] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "aaYcSz4tNYh5NtLaTXcJtgAAAAo"]
[Tue Mar 03 07:25:00.128540 2026] [:error] [pid 36784:tid 36828] [client 52.138.16.158:30282] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "aaYcTHNeKOSGbW9kDgTf8gAAAEU"]
[Tue Mar 03 07:25:01.322849 2026] [:error] [pid 26186:tid 26193] [client 52.138.16.158:30449] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "aaYcTfbZCNtk8wDak9fKpAAAAUU"]
[Tue Mar 03 07:25:02.112304 2026] [:error] [pid 20872:tid 20878] [client 52.138.16.158:30394] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "aaYcTolYbNk3E_3CgBiZYgAAAQQ"]
[Tue Mar 03 07:25:04.241554 2026] [:error] [pid 20872:tid 20895] [client 52.138.16.158:30503] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "aaYcUIlYbNk3E_3CgBiZagAAARU"]
[Tue Mar 03 07:25:06.124495 2026] [:error] [pid 36784:tid 36828] [client 52.138.16.158:30420] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "aaYcUnNeKOSGbW9kDgTf-AAAAEU"]
[Tue Mar 03 07:25:08.093770 2026] [:error] [pid 36785:tid 36862] [client 52.138.16.158:30370] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "aaYcVHhJejauENG9qTihegAAAIw"]
[Tue Mar 03 07:25:11.539871 2026] [:error] [pid 26186:tid 26195] [client 52.138.16.158:30340] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "aaYcV_bZCNtk8wDak9fKrAAAAUc"]
[Tue Mar 03 07:25:13.715945 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:30304] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "aaYcWWeHGCmSEiIBcK47PgAAAYw"]
[Tue Mar 03 07:25:15.353657 2026] [:error] [pid 36897:tid 36919] [client 52.138.16.158:30558] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "aaYcWyZC69_8eM0Uouv1WwAAANE"]
[Tue Mar 03 07:25:16.716741 2026] [:error] [pid 36783:tid 36800] [client 52.138.16.158:30455] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "aaYcXD4tNYh5NtLaTXcJxQAAAAY"]
[Tue Mar 03 07:25:17.675060 2026] [:error] [pid 14042:tid 14059] [client 52.138.16.158:30699] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "aaYcXWeHGCmSEiIBcK47RwAAAY8"]
[Tue Mar 03 07:25:24.071723 2026] [:error] [pid 36784:tid 36836] [client 52.138.16.158:30714] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "aaYcZHNeKOSGbW9kDgTgBAAAAE0"]
[Tue Mar 03 07:25:25.545237 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:30599] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "aaYcZfbZCNtk8wDak9fKywAAAUA"]
[Tue Mar 03 07:25:26.698678 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:30604] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "aaYcZvbZCNtk8wDak9fKzwAAAUE"]
[Tue Mar 03 07:25:28.748134 2026] [:error] [pid 36783:tid 36794] [client 52.138.16.158:30716] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "aaYcaD4tNYh5NtLaTXcJygAAAAA"]
[Tue Mar 03 07:25:29.783886 2026] [:error] [pid 20872:tid 20887] [client 52.138.16.158:30305] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bak.php"] [unique_id "aaYcaYlYbNk3E_3CgBiZkwAAAQ0"]
[Tue Mar 03 07:25:30.913691 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:30426] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bak.php"] [unique_id "aaYcameHGCmSEiIBcK47VAAAAYw"]
[Tue Mar 03 07:25:31.604061 2026] [:error] [pid 14042:tid 14047] [client 52.138.16.158:30360] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bak.php"] [unique_id "aaYca2eHGCmSEiIBcK47WwAAAYM"]
[Tue Mar 03 07:25:32.263633 2026] [:error] [pid 36785:tid 36868] [client 52.138.16.158:30596] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bak.php"] [unique_id "aaYcbHhJejauENG9qTihjQAAAJI"]
[Tue Mar 03 07:25:33.223222 2026] [:error] [pid 20872:tid 20897] [client 52.138.16.158:30375] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "aaYcbYlYbNk3E_3CgBiZmAAAARc"]
[Tue Mar 03 07:25:34.470705 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:30284] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "aaYcbvbZCNtk8wDak9fK2QAAAVM"]
[Tue Mar 03 07:25:35.732070 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:30459] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "aaYcb2eHGCmSEiIBcK47YgAAAZY"]
[Tue Mar 03 07:25:36.859263 2026] [:error] [pid 36897:tid 36916] [client 52.138.16.158:30379] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "aaYccCZC69_8eM0Uouv1dgAAAM4"]
[Tue Mar 03 07:25:38.749356 2026] [:error] [pid 36785:tid 36853] [client 52.138.16.158:30608] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "aaYccnhJejauENG9qTihkAAAAIM"]
[Tue Mar 03 07:25:40.923488 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:30536] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "aaYcdIlYbNk3E_3CgBiZtAAAAQ8"]
[Tue Mar 03 07:25:42.453229 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:30280] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "aaYcdvbZCNtk8wDak9fK7QAAAUo"]
[Tue Mar 03 07:25:43.374870 2026] [:error] [pid 20872:tid 20874] [client 52.138.16.158:30616] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "aaYcd4lYbNk3E_3CgBiZvAAAAQA"]
[Tue Mar 03 14:24:28.163447 2026] [autoindex:error] [pid 14042:tid 14055] [client 84.247.188.147:56980] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 03 22:11:33.242691 2026] [:error] [pid 36784:tid 36825] [client 178.16.53.90:59137] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aabsFXNeKOSGbW9kDgTsHQAAAEI"]
[Tue Mar 03 22:44:13.327088 2026] [:error] [pid 36785:tid 36852] [client 20.151.116.226:12480] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aabzvXhJejauENG9qTgacwAAAII"]
[Tue Mar 03 22:44:14.162817 2026] [:error] [pid 36785:tid 36851] [client 20.151.116.226:12851] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aabzvnhJejauENG9qTgadgAAAIE"]
[Tue Mar 03 22:44:14.985864 2026] [:error] [pid 14042:tid 14062] [client 20.151.116.226:12481] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aabzvmeHGCmSEiIBcK6GvQAAAZI"]
[Tue Mar 03 22:44:15.833463 2026] [:error] [pid 36897:tid 36926] [client 20.151.116.226:12822] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "aabzvyZC69_8eM0UouuyHgAAANg"]
[Tue Mar 03 23:18:18.149443 2026] [:error] [pid 36783:tid 36801] [client 20.151.116.226:48325] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aab7uj4tNYh5NtLaTXfhxwAAAAc"]
[Tue Mar 03 23:18:19.116855 2026] [:error] [pid 36785:tid 36868] [client 20.151.116.226:48754] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aab7u3hJejauENG9qTgmFwAAAJI"]
[Tue Mar 03 23:18:19.965270 2026] [:error] [pid 14042:tid 14064] [client 20.151.116.226:48756] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aab7u2eHGCmSEiIBcK6MmAAAAZQ"]
[Tue Mar 03 23:18:20.816447 2026] [:error] [pid 36897:tid 36910] [client 20.151.116.226:48734] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aab7vCZC69_8eM0UouvFugAAAMg"]
[Wed Mar 04 01:59:09.998037 2026] [autoindex:error] [pid 48406:tid 48664] [client 217.154.234.180:51251] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 04 02:54:58.380724 2026] [:error] [pid 27359:tid 27361] [client 20.116.16.88:64526] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aacugl607jzBiSmoFjI51wAAAMA"]
[Wed Mar 04 02:54:58.876265 2026] [:error] [pid 48407:tid 48689] [client 20.116.16.88:61306] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aacugj7Td6SiHn8fwfnyFwAAAIA"]
[Wed Mar 04 02:54:59.291017 2026] [:error] [pid 48407:tid 48690] [client 20.116.16.88:65062] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aacugz7Td6SiHn8fwfnyGQAAAIE"]
[Wed Mar 04 02:54:59.747506 2026] [:error] [pid 48405:tid 48573] [client 20.116.16.88:60506] [client 20.116.16.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aacugxBIGeGp5MBz7gKE5QAAAAQ"]
[Wed Mar 04 03:05:33.781342 2026] [:error] [pid 48807:tid 48813] [client 20.151.116.226:53989] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aacw_Q9v35BN-51vqYaxmAAAAQQ"]
[Wed Mar 04 03:05:34.628563 2026] [:error] [pid 48406:tid 48675] [client 20.151.116.226:53995] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aacw_jStn8zJHlZMxFgvWwAAAE0"]
[Wed Mar 04 03:05:35.475673 2026] [:error] [pid 27359:tid 27370] [client 20.151.116.226:53975] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aacw_1607jzBiSmoFjJCnQAAAMk"]
[Wed Mar 04 03:05:36.316700 2026] [:error] [pid 48807:tid 48818] [client 20.151.116.226:48389] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "aacxAA9v35BN-51vqYaxnwAAAQk"]
[Wed Mar 04 04:18:51.969812 2026] [:error] [pid 18553:tid 18588] [client 20.169.219.136:39874] [client 20.169.219.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aadCK2bax1neh8d0AHZ7gAAAABg"]
[Wed Mar 04 04:18:52.887923 2026] [:error] [pid 18554:tid 18610] [client 20.169.219.136:8554] [client 20.169.219.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aadCLJ0fKmKeTIK7QS1szQAAAFI"]
[Wed Mar 04 04:18:53.791138 2026] [:error] [pid 54487:tid 54502] [client 20.169.219.136:8473] [client 20.169.219.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aadCLfN8030QMpFXddvdYAAAAQ0"]
[Wed Mar 04 04:18:54.702136 2026] [:error] [pid 18681:tid 18693] [client 20.169.219.136:8532] [client 20.169.219.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aadCLqE_TuZYUBveWkV63AAAAMo"]
[Wed Mar 04 06:12:52.148671 2026] [:error] [pid 18681:tid 18705] [client 72.57.65.71:49134] [client 72.57.65.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.57.65.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aadc5KE_TuZYUBveWkWgNAAAANY"], referer: https://makifim.com.au/
[Wed Mar 04 06:13:01.446316 2026] [:error] [pid 18554:tid 18615] [client 72.57.65.71:44572] [client 72.57.65.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.57.65.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aadc7Z0fKmKeTIK7QS2jZgAAAFc"], referer: https://makifim.com.au/
[Wed Mar 04 06:16:26.469615 2026] [:error] [pid 18681:tid 18699] [client 20.151.116.226:12425] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aadduqE_TuZYUBveWkWhAwAAANA"]
[Wed Mar 04 06:16:27.400896 2026] [:error] [pid 18555:tid 18636] [client 20.151.116.226:13139] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aadduzQeUDANiOsQ3Gd1KwAAAJE"]
[Wed Mar 04 06:16:28.230785 2026] [:error] [pid 54487:tid 54511] [client 20.151.116.226:12479] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aaddvPN8030QMpFXdds2LAAAARY"]
[Wed Mar 04 06:16:29.077212 2026] [:error] [pid 18555:tid 18632] [client 20.151.116.226:12461] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "aaddvTQeUDANiOsQ3Gd1LAAAAI0"]
[Wed Mar 04 06:37:50.797804 2026] [:error] [pid 54487:tid 54503] [client 20.151.116.226:48415] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aadivvN8030QMpFXddtAwAAAAQ4"]
[Wed Mar 04 06:37:51.646556 2026] [:error] [pid 18553:tid 18572] [client 20.151.116.226:63361] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aadiv2bax1neh8d0AHaT5QAAAAg"]
[Wed Mar 04 06:37:52.476723 2026] [:error] [pid 18554:tid 18614] [client 20.151.116.226:48400] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aadiwJ0fKmKeTIK7QS2ziQAAAFY"]
[Wed Mar 04 06:37:53.304637 2026] [:error] [pid 18554:tid 18602] [client 20.151.116.226:63379] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "aadiwZ0fKmKeTIK7QS2ztAAAAEo"]
[Wed Mar 04 08:04:30.648670 2026] [:error] [pid 18554:tid 18612] [client 52.252.56.196:64284] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aad3Dp0fKmKeTIK7QS33MQAAAFQ"]
[Wed Mar 04 08:04:33.558892 2026] [:error] [pid 18555:tid 18628] [client 52.252.56.196:64368] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwe.php"] [unique_id "aad3ETQeUDANiOsQ3GeObgAAAIk"]
[Wed Mar 04 08:04:37.226473 2026] [:error] [pid 54487:tid 54496] [client 52.252.56.196:64271] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/m.php"] [unique_id "aad3FfN8030QMpFXddtrRwAAAQc"]
[Wed Mar 04 08:04:41.852291 2026] [:error] [pid 18554:tid 18601] [client 52.252.56.196:64269] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/m.php"] [unique_id "aad3GZ0fKmKeTIK7QS33RAAAAEk"]
[Wed Mar 04 08:04:44.252121 2026] [:error] [pid 18554:tid 18606] [client 52.252.56.196:63070] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/m.php"] [unique_id "aad3HJ0fKmKeTIK7QS33SgAAAE4"]
[Wed Mar 04 08:04:49.288482 2026] [:error] [pid 18554:tid 18600] [client 52.252.56.196:64262] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/m.php"] [unique_id "aad3IZ0fKmKeTIK7QS33UAAAAEg"]
[Wed Mar 04 08:04:50.238006 2026] [:error] [pid 54487:tid 54499] [client 52.252.56.196:64332] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aad3IvN8030QMpFXddtrZgAAAQo"]
[Wed Mar 04 08:04:51.866651 2026] [:error] [pid 54487:tid 54508] [client 52.252.56.196:63044] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aad3I_N8030QMpFXddtrbQAAARM"]
[Wed Mar 04 08:04:52.974645 2026] [:error] [pid 18554:tid 18603] [client 52.252.56.196:63013] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aad3JJ0fKmKeTIK7QS33WQAAAEs"]
[Wed Mar 04 08:04:55.494697 2026] [:error] [pid 54487:tid 54505] [client 52.252.56.196:63848] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aad3J_N8030QMpFXddtrgAAAARA"]
[Wed Mar 04 08:04:56.442626 2026] [:error] [pid 18554:tid 18594] [client 52.252.56.196:63845] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "aad3KJ0fKmKeTIK7QS33aAAAAEI"]
[Wed Mar 04 08:04:59.198259 2026] [:error] [pid 54487:tid 54510] [client 52.252.56.196:64337] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aad3K_N8030QMpFXddtrkAAAARU"]
[Wed Mar 04 08:05:01.000507 2026] [:error] [pid 18555:tid 18636] [client 52.252.56.196:63803] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aad3LDQeUDANiOsQ3GeOmgAAAJE"]
[Wed Mar 04 08:05:02.248839 2026] [:error] [pid 18553:tid 18575] [client 52.252.56.196:63762] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "aad3Lmbax1neh8d0AHahNwAAAAs"]
[Wed Mar 04 08:05:04.262418 2026] [:error] [pid 54487:tid 54500] [client 52.252.56.196:64362] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aad3MPN8030QMpFXddtrnAAAAQs"]
[Wed Mar 04 08:05:05.882087 2026] [:error] [pid 54487:tid 54499] [client 52.252.56.196:63767] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aad3MfN8030QMpFXddtrowAAAQo"]
[Wed Mar 04 08:05:07.877710 2026] [:error] [pid 54487:tid 54492] [client 52.252.56.196:64276] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aad3M_N8030QMpFXddtrqQAAAQM"]
[Wed Mar 04 08:05:08.605845 2026] [:error] [pid 54487:tid 54490] [client 52.252.56.196:63774] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "aad3NPN8030QMpFXddtrrAAAAQE"]
[Wed Mar 04 08:05:09.428958 2026] [:error] [pid 18554:tid 18592] [client 52.252.56.196:63042] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aad3NZ0fKmKeTIK7QS33dgAAAEA"]
[Wed Mar 04 08:05:10.675229 2026] [:error] [pid 18681:tid 18707] [client 52.252.56.196:64363] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aad3NqE_TuZYUBveWkXDdwAAANg"]
[Wed Mar 04 08:05:12.021859 2026] [:error] [pid 54487:tid 54498] [client 52.252.56.196:64274] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aad3OPN8030QMpFXddtrtQAAAQk"]
[Wed Mar 04 08:05:12.969233 2026] [:error] [pid 54487:tid 54509] [client 52.252.56.196:64308] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "aad3OPN8030QMpFXddtruQAAARQ"]
[Wed Mar 04 08:05:14.100036 2026] [:error] [pid 18681:tid 18698] [client 52.252.56.196:63789] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aad3OqE_TuZYUBveWkXDgAAAAM8"]
[Wed Mar 04 08:05:14.713293 2026] [:error] [pid 54487:tid 54501] [client 52.252.56.196:63771] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "aad3OvN8030QMpFXddtrvQAAAQw"]
[Wed Mar 04 08:05:15.951436 2026] [:error] [pid 18681:tid 18683] [client 52.252.56.196:63043] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aad3O6E_TuZYUBveWkXDigAAAMA"]
[Wed Mar 04 08:05:16.857384 2026] [:error] [pid 54487:tid 54493] [client 52.252.56.196:64359] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aad3PPN8030QMpFXddtrwwAAAQQ"]
[Wed Mar 04 08:05:17.711699 2026] [:error] [pid 18555:tid 18632] [client 52.252.56.196:63870] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aad3PTQeUDANiOsQ3GeOuAAAAI0"]
[Wed Mar 04 08:05:18.527252 2026] [:error] [pid 18553:tid 18581] [client 52.252.56.196:63854] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aad3Pmbax1neh8d0AHahRwAAABE"]
[Wed Mar 04 08:05:20.200889 2026] [:error] [pid 54487:tid 54489] [client 52.252.56.196:64294] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "aad3QPN8030QMpFXddtr0gAAAQA"]
[Wed Mar 04 08:05:22.068471 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:64303] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aad3QvN8030QMpFXddtr3wAAARI"]
[Wed Mar 04 08:05:23.334118 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:63779] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aad3Q_N8030QMpFXddtr6QAAARI"]
[Wed Mar 04 08:05:24.531999 2026] [:error] [pid 54487:tid 54494] [client 52.252.56.196:63749] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aad3RPN8030QMpFXddtr9AAAAQU"]
[Wed Mar 04 08:05:26.073254 2026] [:error] [pid 18555:tid 18619] [client 52.252.56.196:63806] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "aad3RjQeUDANiOsQ3GeOvAAAAIA"]
[Wed Mar 04 08:06:14.001057 2026] [:error] [pid 54487:tid 54490] [client 52.252.56.196:63773] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aad3dvN8030QMpFXddtsnQAAAQE"]
[Wed Mar 04 08:06:29.000526 2026] [:error] [pid 54487:tid 54504] [client 52.252.56.196:64342] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/logs/skin.php"] [unique_id "aad3hPN8030QMpFXddts2wAAAQ8"]
[Wed Mar 04 08:06:29.728173 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:60974] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/logs/skin.php"] [unique_id "aad3hfN8030QMpFXddts3QAAARI"]
[Wed Mar 04 08:06:30.354542 2026] [:error] [pid 18681:tid 18702] [client 52.252.56.196:63053] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/logs/skin.php"] [unique_id "aad3hqE_TuZYUBveWkXD0wAAANM"]
[Wed Mar 04 08:06:31.886557 2026] [:error] [pid 54487:tid 54492] [client 52.252.56.196:64361] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/logs/dz1.php"] [unique_id "aad3h_N8030QMpFXddts3wAAAQM"]
[Wed Mar 04 08:06:33.035203 2026] [:error] [pid 54487:tid 54500] [client 52.252.56.196:64295] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/logs/dz1.php"] [unique_id "aad3ifN8030QMpFXddts4wAAAQs"]
[Wed Mar 04 08:06:33.773420 2026] [:error] [pid 18554:tid 18595] [client 52.252.56.196:64365] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/logs/dz1.php"] [unique_id "aad3iZ0fKmKeTIK7QS34FgAAAEM"]
[Wed Mar 04 08:06:34.719614 2026] [:error] [pid 18553:tid 18574] [client 52.252.56.196:63786] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/moon.php"] [unique_id "aad3imbax1neh8d0AHahfAAAAAo"]
[Wed Mar 04 08:06:35.607745 2026] [:error] [pid 54487:tid 54496] [client 52.252.56.196:63847] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "aad3i_N8030QMpFXddts6AAAAQc"]
[Wed Mar 04 08:06:37.524782 2026] [:error] [pid 18554:tid 18611] [client 52.252.56.196:64292] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nagiosql/admin/logbook.php"] [unique_id "aad3jZ0fKmKeTIK7QS34HQAAAFM"]
[Wed Mar 04 08:06:38.158674 2026] [:error] [pid 18554:tid 18613] [client 52.252.56.196:63754] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nagiosql/admin/logbook.php"] [unique_id "aad3jp0fKmKeTIK7QS34IAAAAFU"]
[Wed Mar 04 08:06:38.858005 2026] [:error] [pid 18554:tid 18595] [client 52.252.56.196:63843] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nagiosql/admin/logbook.php"] [unique_id "aad3jp0fKmKeTIK7QS34JAAAAEM"]
[Wed Mar 04 08:06:39.932564 2026] [:error] [pid 18554:tid 18598] [client 52.252.56.196:64364] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nagiosql/admin/logbook.php"] [unique_id "aad3j50fKmKeTIK7QS34KQAAAEY"]
[Wed Mar 04 08:06:41.714139 2026] [:error] [pid 18554:tid 18600] [client 52.252.56.196:63022] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/admin.php"] [unique_id "aad3kZ0fKmKeTIK7QS34LwAAAEg"]
[Wed Mar 04 08:06:42.595449 2026] [:error] [pid 18554:tid 18593] [client 52.252.56.196:62996] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/admin.php"] [unique_id "aad3kp0fKmKeTIK7QS34MwAAAEE"]
[Wed Mar 04 08:06:43.210262 2026] [:error] [pid 18554:tid 18592] [client 52.252.56.196:63069] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/admin.php"] [unique_id "aad3k50fKmKeTIK7QS34NQAAAEA"]
[Wed Mar 04 08:06:44.061662 2026] [:error] [pid 18554:tid 18612] [client 52.252.56.196:63861] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/admin.php"] [unique_id "aad3lJ0fKmKeTIK7QS34NwAAAFQ"]
[Wed Mar 04 08:06:44.923956 2026] [:error] [pid 54487:tid 54492] [client 52.252.56.196:59626] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kZETIbO4Lt7.php"] [unique_id "aad3lPN8030QMpFXddts8wAAAQM"]
[Wed Mar 04 08:06:45.836079 2026] [:error] [pid 18554:tid 18599] [client 52.252.56.196:63759] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kZETIbO4Lt7.php"] [unique_id "aad3lZ0fKmKeTIK7QS34PQAAAEc"]
[Wed Mar 04 08:06:46.849775 2026] [:error] [pid 18554:tid 18615] [client 52.252.56.196:63101] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kZETIbO4Lt7.php"] [unique_id "aad3lp0fKmKeTIK7QS34QQAAAFc"]
[Wed Mar 04 08:06:47.762803 2026] [:error] [pid 18555:tid 18642] [client 52.252.56.196:63857] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer-4.3.1-mysql-sk.php"] [unique_id "aad3lzQeUDANiOsQ3GePCQAAAJc"]
[Wed Mar 04 08:06:49.104351 2026] [:error] [pid 54487:tid 54497] [client 52.252.56.196:64377] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aad3mfN8030QMpFXddts_QAAAQg"]
[Wed Mar 04 08:06:50.721705 2026] [:error] [pid 54487:tid 54491] [client 52.252.56.196:61015] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aad3mvN8030QMpFXddttBAAAAQI"]
[Wed Mar 04 08:06:51.870954 2026] [:error] [pid 54487:tid 54489] [client 52.252.56.196:64285] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aad3m_N8030QMpFXddttCgAAAQA"]
[Wed Mar 04 08:06:52.476841 2026] [:error] [pid 18555:tid 18643] [client 52.252.56.196:63862] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aad3nDQeUDANiOsQ3GePCwAAAJg"]
[Wed Mar 04 08:06:53.478727 2026] [:error] [pid 18555:tid 18639] [client 52.252.56.196:63060] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aad3nTQeUDANiOsQ3GePDAAAAJQ"]
[Wed Mar 04 08:06:54.322695 2026] [:error] [pid 18681:tid 18689] [client 52.252.56.196:63834] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aad3nqE_TuZYUBveWkXD4QAAAMY"]
[Wed Mar 04 08:06:55.156251 2026] [:error] [pid 18555:tid 18619] [client 52.252.56.196:63025] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/aaa.php"] [unique_id "aad3nzQeUDANiOsQ3GePDQAAAIA"]
[Wed Mar 04 08:06:56.034868 2026] [:error] [pid 18681:tid 18702] [client 52.252.56.196:60945] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/oQGWC1HLhE5.php"] [unique_id "aad3oKE_TuZYUBveWkXD5QAAANM"]
[Wed Mar 04 08:06:56.825680 2026] [:error] [pid 54487:tid 54494] [client 52.252.56.196:63001] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aad3oPN8030QMpFXddttFQAAAQU"]
[Wed Mar 04 08:06:57.608333 2026] [:error] [pid 18555:tid 18626] [client 52.252.56.196:64305] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aad3oTQeUDANiOsQ3GePEAAAAIc"]
[Wed Mar 04 09:50:50.060006 2026] [:error] [pid 54487:tid 54489] [client 45.86.202.176:48577] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aaeP-vN8030QMpFXddvRYQAAAQA"]
[Wed Mar 04 10:18:48.290120 2026] [:error] [pid 18554:tid 18596] [client 137.116.32.109:57234] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeWiJ0fKmKeTIK7QS1L7gAAAEQ"]
[Wed Mar 04 10:18:48.699191 2026] [:error] [pid 18553:tid 18571] [client 137.116.32.109:57262] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeWiGbax1neh8d0AHa4qgAAAAc"]
[Wed Mar 04 10:18:49.098511 2026] [:error] [pid 54487:tid 54492] [client 137.116.32.109:56307] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeWifN8030QMpFXddvu1QAAAQM"]
[Wed Mar 04 10:18:49.500603 2026] [:error] [pid 54487:tid 54492] [client 137.116.32.109:56283] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeWifN8030QMpFXddvu3wAAAQM"]
[Wed Mar 04 11:49:03.723025 2026] [:error] [pid 18554:tid 18612] [client 152.233.20.86:36195] [client 152.233.20.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aaerr50fKmKeTIK7QS2HmwAAAFQ"]
[Wed Mar 04 13:01:34.619968 2026] [:error] [pid 18554:tid 18597] [client 43.228.157.73:51672] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aae8rp0fKmKeTIK7QS3LFgAAAEU"]
[Wed Mar 04 13:01:35.203921 2026] [:error] [pid 18555:tid 18630] [client 43.228.157.73:51853] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aae8rzQeUDANiOsQ3GfQYgAAAIs"]
[Wed Mar 04 13:01:35.777319 2026] [:error] [pid 18555:tid 18620] [client 43.228.157.73:52088] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aae8rzQeUDANiOsQ3GfQmAAAAIE"]
[Wed Mar 04 13:01:36.381015 2026] [:error] [pid 45947:tid 46043] [client 43.228.157.73:52301] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aae8sEQXEtszYKy6sasUmAAAAUs"]
[Wed Mar 04 13:01:36.964273 2026] [:error] [pid 18553:tid 18586] [client 43.228.157.73:52502] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aae8sGbax1neh8d0AHbOwwAAABY"]
[Wed Mar 04 13:04:03.309070 2026] [:error] [pid 45947:tid 46043] [client 54.175.74.27:10262] [client 54.175.74.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.175.74.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aae9Q0QXEtszYKy6sasW5gAAAUs"]
[Wed Mar 04 13:33:17.676160 2026] [:error] [pid 18555:tid 18629] [client 54.86.66.252:49780] [client 54.86.66.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.86.66.252, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aafEHTQeUDANiOsQ3GfVvAAAAIo"]
[Wed Mar 04 16:55:42.042501 2026] [:error] [pid 51510:tid 51534] [client 136.113.93.137:49207] [client 136.113.93.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.93.137, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aafzjn-78MmWmoTGI7tkVgAAARU"]
[Wed Mar 04 16:55:47.576898 2026] [:error] [pid 51510:tid 51534] [client 136.113.93.137:49207] [client 136.113.93.137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aafzk3-78MmWmoTGI7tkYAAAARU"]
[Wed Mar 04 16:55:49.971879 2026] [:error] [pid 51510:tid 51533] [client 136.113.93.137:49207] [client 136.113.93.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.93.137, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aafzlX-78MmWmoTGI7tkYgAAARQ"]
[Wed Mar 04 18:59:12.527309 2026] [:error] [pid 60620:tid 60643] [client 77.90.185.115:60382] [client 77.90.185.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aagQgIodrRWj-Joks05N1wAAARE"]
[Wed Mar 04 19:54:51.546714 2026] [:error] [pid 64829:tid 64848] [client 54.209.60.63:3492] [client 54.209.60.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.209.60.63, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aagdi59ZED3FG9h7uijCaAAAABE"]
[Thu Mar 05 03:06:07.930032 2026] [:error] [pid 26934:tid 26955] [client 68.218.165.153:12231] [client 68.218.165.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.153, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaiCn2DWd71V_nuoqWJpfQAAAII"]
[Thu Mar 05 03:06:07.930326 2026] [:error] [pid 26934:tid 26975] [client 68.218.165.153:12225] [client 68.218.165.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.153, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaiCn2DWd71V_nuoqWJpfgAAAJQ"]
[Thu Mar 05 03:06:08.910866 2026] [:error] [pid 26934:tid 26954] [client 68.218.165.153:12227] [client 68.218.165.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.153, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aaiCoGDWd71V_nuoqWJphgAAAIE"]
[Thu Mar 05 03:16:51.258335 2026] [proxy_fcgi:error] [pid 26934:tid 26971] [client 103.4.122.14:43632] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Mar 05 03:17:02.765970 2026] [proxy_fcgi:error] [pid 26969:tid 27041] [client 103.4.122.14:43728] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Mar 05 20:57:23.536582 2026] [:error] [pid 53350:tid 53397] [client 85.203.23.187:57069] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aal9s6O0Baxc5WFYeP1SmAAAARQ"]
[Thu Mar 05 20:57:31.537698 2026] [autoindex:error] [pid 41459:tid 41496] [client 85.203.23.166:40885] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:57:44.620485 2026] [autoindex:error] [pid 62177:tid 62327] [client 85.203.23.182:44279] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:57:44.799743 2026] [:error] [pid 41459:tid 41494] [client 85.203.23.206:45769] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "aal9yOdFBZEnZ3pzxrVLigAAAVQ"]
[Thu Mar 05 20:58:02.644652 2026] [autoindex:error] [pid 41459:tid 41490] [client 85.203.23.188:64941] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://makifim.com.au/wp-includes/js/dist
[Thu Mar 05 20:58:05.839421 2026] [autoindex:error] [pid 62173:tid 62253] [client 85.203.23.204:60717] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:58:09.032639 2026] [autoindex:error] [pid 53350:tid 53392] [client 85.203.23.197:44463] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:58:09.215452 2026] [:error] [pid 41459:tid 41491] [client 85.203.23.210:25103] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aal94edFBZEnZ3pzxrVLzQAAAVE"]
[Thu Mar 05 20:58:09.411690 2026] [autoindex:error] [pid 53350:tid 53388] [client 85.203.23.183:62837] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:58:23.512795 2026] [autoindex:error] [pid 53350:tid 53401] [client 85.203.23.196:56977] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:58:23.698494 2026] [autoindex:error] [pid 62177:tid 62329] [client 85.203.23.193:58805] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:58:27.089469 2026] [autoindex:error] [pid 53350:tid 53377] [client 85.203.23.203:59383] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:58:34.618338 2026] [:error] [pid 62435:tid 62456] [client 85.203.23.209:39001] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aal9-iMZJMDfZh_-8sWGdwAAAMY"]
[Thu Mar 05 20:58:51.421249 2026] [autoindex:error] [pid 53350:tid 53397] [client 85.203.23.193:28783] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:58:54.603442 2026] [:error] [pid 41459:tid 41486] [client 85.203.23.182:47091] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aal-DudFBZEnZ3pzxrVL_gAAAUw"]
[Thu Mar 05 20:58:59.819531 2026] [autoindex:error] [pid 41459:tid 41479] [client 85.203.23.204:27131] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:59:21.375746 2026] [:error] [pid 62173:tid 62268] [client 85.203.23.203:38689] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aal-KWj_GWbFb-1ncGl6_QAAAA8"]
[Thu Mar 05 20:59:21.568099 2026] [autoindex:error] [pid 53350:tid 53376] [client 85.203.23.211:49157] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:59:24.758376 2026] [autoindex:error] [pid 41459:tid 41474] [client 85.203.23.210:60449] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:59:31.812851 2026] [autoindex:error] [pid 62176:tid 62297] [client 85.203.23.212:48493] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:59:45.990407 2026] [autoindex:error] [pid 41459:tid 41492] [client 85.203.23.210:49511] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 20:59:59.781552 2026] [autoindex:error] [pid 53350:tid 53386] [client 85.203.23.217:42953] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:02.966220 2026] [:error] [pid 53350:tid 53401] [client 85.203.23.188:39485] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aal-UqO0Baxc5WFYeP1UQAAAARg"]
[Thu Mar 05 21:00:03.154830 2026] [autoindex:error] [pid 41459:tid 41478] [client 85.203.23.206:44779] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:03.334831 2026] [:error] [pid 62435:tid 62472] [client 85.203.23.201:23603] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/wp-good.php"] [unique_id "aal-UyMZJMDfZh_-8sWGuQAAANY"]
[Thu Mar 05 21:00:08.465964 2026] [autoindex:error] [pid 53350:tid 53377] [client 85.203.23.209:34721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:08.647033 2026] [:error] [pid 62177:tid 62320] [client 85.203.23.215:29291] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aal-WBWSQc2OzPrsnwXk9gAAAIk"]
[Thu Mar 05 21:00:08.834830 2026] [autoindex:error] [pid 62435:tid 62472] [client 85.203.23.211:63677] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:16.196669 2026] [:error] [pid 62173:tid 62256] [client 85.203.23.195:35889] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aal-YGj_GWbFb-1ncGl7CwAAAAQ"]
[Thu Mar 05 21:00:19.388810 2026] [autoindex:error] [pid 62435:tid 62450] [client 85.203.23.183:60295] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:28.718336 2026] [autoindex:error] [pid 62435:tid 62459] [client 85.203.23.186:37455] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:33.058373 2026] [autoindex:error] [pid 62176:tid 62297] [client 85.203.23.206:44061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:38.041246 2026] [autoindex:error] [pid 62435:tid 62463] [client 85.203.23.187:21919] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:49.467599 2026] [autoindex:error] [pid 41459:tid 41488] [client 85.203.23.218:38455] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:53.752561 2026] [autoindex:error] [pid 53350:tid 53389] [client 85.203.23.219:48599] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://makifim.com.au/wp-includes/block-bindings
[Thu Mar 05 21:00:53.948151 2026] [autoindex:error] [pid 41459:tid 41498] [client 85.203.23.184:31915] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:00:54.136730 2026] [autoindex:error] [pid 41459:tid 41497] [client 85.203.23.208:34379] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:05.470206 2026] [autoindex:error] [pid 53350:tid 53382] [client 85.203.23.188:58119] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/comment-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:09.797220 2026] [autoindex:error] [pid 53350:tid 53401] [client 85.203.23.193:65483] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/nextpage/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:21.153003 2026] [autoindex:error] [pid 53350:tid 53400] [client 85.203.23.173:55983] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:29.221057 2026] [autoindex:error] [pid 41459:tid 41490] [client 85.203.23.182:61119] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query-pagination/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:29.409634 2026] [autoindex:error] [pid 53350:tid 53398] [client 85.203.23.212:45813] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:34.889923 2026] [autoindex:error] [pid 62435:tid 62456] [client 85.203.23.184:55959] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:40.449946 2026] [autoindex:error] [pid 41459:tid 41490] [client 85.203.23.222:47407] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:47.857468 2026] [proxy_fcgi:error] [pid 62177:tid 62312] [client 85.203.23.209:26949] AH01071: Got error 'Primary script unknown'
[Thu Mar 05 21:01:48.051498 2026] [autoindex:error] [pid 53350:tid 53376] [client 85.203.23.215:58447] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:01:58.449306 2026] [:error] [pid 53350:tid 53377] [client 85.203.23.204:57613] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/k.php"] [unique_id "aal-xqO0Baxc5WFYeP1V3wAAAQI"]
[Thu Mar 05 21:02:01.642879 2026] [autoindex:error] [pid 62435:tid 62467] [client 85.203.23.208:21767] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:02:02.005256 2026] [:error] [pid 62176:tid 62291] [client 85.203.23.173:64159] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aal-yiNfTPJryi30JPkA9AAAAEc"]
[Thu Mar 05 21:02:02.194919 2026] [autoindex:error] [pid 62435:tid 62450] [client 85.203.23.173:50735] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:02:06.593026 2026] [:error] [pid 62435:tid 62458] [client 85.203.23.219:48877] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aal-ziMZJMDfZh_-8sWHEAAAAMg"]
[Thu Mar 05 21:02:06.779956 2026] [autoindex:error] [pid 41459:tid 41497] [client 85.203.23.196:58029] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:02:22.022473 2026] [autoindex:error] [pid 41459:tid 41482] [client 85.203.23.218:31263] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:02:37.012889 2026] [:error] [pid 53350:tid 53379] [client 85.203.23.211:45697] [client 85.203.23.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aal-7aO0Baxc5WFYeP1WVwAAAQQ"]
[Thu Mar 05 21:02:42.317250 2026] [autoindex:error] [pid 53350:tid 53376] [client 85.203.23.182:41835] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/separator/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:02:47.192802 2026] [autoindex:error] [pid 41459:tid 41483] [client 85.203.23.216:47955] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/video/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:02:53.110542 2026] [autoindex:error] [pid 62177:tid 62332] [client 85.203.23.180:36165] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:03:20.662993 2026] [autoindex:error] [pid 53350:tid 53379] [client 85.203.23.197:32375] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:03:20.842638 2026] [:error] [pid 53350:tid 53380] [client 85.203.23.184:58107] [client 85.203.23.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.23.184, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aal_GKO0Baxc5WFYeP1W_gAAAQU"]
[Thu Mar 05 21:03:36.159203 2026] [autoindex:error] [pid 62177:tid 62311] [client 85.203.23.196:40627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:03:40.490710 2026] [autoindex:error] [pid 53350:tid 53389] [client 85.203.23.197:31701] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/block-library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:04:14.679772 2026] [autoindex:error] [pid 41459:tid 41493] [client 85.203.23.177:36205] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:04:27.604691 2026] [autoindex:error] [pid 53350:tid 53381] [client 85.203.23.197:61563] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/column/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:05:04.039736 2026] [autoindex:error] [pid 62435:tid 62469] [client 85.203.23.173:24149] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:05:07.232421 2026] [autoindex:error] [pid 41459:tid 41493] [client 85.203.23.200:65089] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:05:24.195555 2026] [:error] [pid 53350:tid 53400] [client 85.203.23.219:36645] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aal_lKO0Baxc5WFYeP1YswAAARc"]
[Thu Mar 05 21:05:30.393094 2026] [autoindex:error] [pid 41459:tid 41478] [client 85.203.23.188:57547] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:05:30.583301 2026] [autoindex:error] [pid 41459:tid 41481] [client 85.203.23.180:41779] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:05:30.778508 2026] [autoindex:error] [pid 62176:tid 62305] [client 85.203.23.178:34427] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/commands/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:05:34.147462 2026] [:error] [pid 41459:tid 41478] [client 85.203.23.206:31683] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aal_nudFBZEnZ3pzxrVPJwAAAUQ"]
[Thu Mar 05 21:05:46.174758 2026] [autoindex:error] [pid 41459:tid 41484] [client 85.203.23.170:35355] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/tag-cloud/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:05:51.921669 2026] [autoindex:error] [pid 62173:tid 62253] [client 85.203.23.187:49109] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:05:52.100167 2026] [:error] [pid 62177:tid 62334] [client 85.203.23.183:46863] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aal_sBWSQc2OzPrsnwXmugAAAJY"]
[Thu Mar 05 21:06:17.730885 2026] [autoindex:error] [pid 41459:tid 41487] [client 85.203.23.191:51953] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:06:43.634275 2026] [:error] [pid 53350:tid 53385] [client 85.203.23.190:57003] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aal_46O0Baxc5WFYeP1aTgAAAQk"]
[Thu Mar 05 21:07:06.321060 2026] [autoindex:error] [pid 62177:tid 62330] [client 85.203.23.180:26245] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:07:06.501529 2026] [:error] [pid 41459:tid 41498] [client 85.203.23.196:21755] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aal_-udFBZEnZ3pzxrVP4wAAAVg"]
[Thu Mar 05 21:07:07.712723 2026] [autoindex:error] [pid 62177:tid 62336] [client 85.203.23.170:26695] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:07:11.266948 2026] [:error] [pid 53350:tid 53396] [client 85.203.23.224:35849] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp.php"] [unique_id "aal__6O0Baxc5WFYeP1axwAAARM"]
[Thu Mar 05 21:07:16.264544 2026] [autoindex:error] [pid 53350:tid 53388] [client 85.203.23.170:44333] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:07:16.454548 2026] [autoindex:error] [pid 53350:tid 53399] [client 85.203.23.209:65277] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:07:35.880664 2026] [autoindex:error] [pid 62176:tid 62307] [client 85.203.23.196:56703] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:07:44.269231 2026] [autoindex:error] [pid 53350:tid 53376] [client 85.203.23.212:41983] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:07:48.553746 2026] [autoindex:error] [pid 62177:tid 62314] [client 85.203.23.186:42421] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:08:01.058780 2026] [access_compat:error] [pid 62435:tid 62474] [client 85.203.23.206:30321] AH01797: client denied by server configuration: /home/makifimc/public_html/wp-content/updraft/emptydir/
[Thu Mar 05 21:08:07.254914 2026] [autoindex:error] [pid 41459:tid 41494] [client 85.203.23.218:56805] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-comments-form/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:08:07.443119 2026] [autoindex:error] [pid 41459:tid 41497] [client 85.203.23.215:29347] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/navigation-submenu/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:08:07.634596 2026] [autoindex:error] [pid 41459:tid 41495] [client 85.203.23.170:59707] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/customize-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:08:07.822894 2026] [autoindex:error] [pid 62177:tid 62335] [client 85.203.23.215:61677] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/script-modules/block-library/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:08:12.168885 2026] [autoindex:error] [pid 62177:tid 62336] [client 85.203.23.212:21437] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/image/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:08:15.352967 2026] [:error] [pid 53350:tid 53391] [client 85.203.23.209:28231] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/categories/admin.php"] [unique_id "aamAP6O0Baxc5WFYeP1b4gAAAQ4"]
[Thu Mar 05 21:08:15.534173 2026] [:error] [pid 62177:tid 62314] [client 85.203.23.180:57359] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/list-item/test.php"] [unique_id "aamAPxWSQc2OzPrsnwXnqgAAAIM"]
[Thu Mar 05 21:08:25.689969 2026] [:error] [pid 62176:tid 62288] [client 85.203.23.191:25873] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/tag-cloud/wp-load.php"] [unique_id "aamASSNfTPJryi30JPkB0AAAAEQ"]
[Thu Mar 05 21:08:34.880057 2026] [:error] [pid 53350:tid 53389] [client 85.203.23.215:43589] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aamAUqO0Baxc5WFYeP1cVQAAAQw"]
[Thu Mar 05 21:08:35.061325 2026] [:error] [pid 41459:tid 41479] [client 85.203.23.210:61461] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/categories/chosen.php"] [unique_id "aamAU-dFBZEnZ3pzxrVQpQAAAUU"]
[Thu Mar 05 21:09:01.504712 2026] [:error] [pid 53350:tid 53394] [client 85.203.23.210:51779] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/gettest.php"] [unique_id "aamAbaO0Baxc5WFYeP1cqQAAARE"]
[Thu Mar 05 21:09:33.539080 2026] [autoindex:error] [pid 53350:tid 53388] [client 85.203.23.190:43769] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/page-list/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 21:09:39.907110 2026] [:error] [pid 53350:tid 53375] [client 85.203.23.190:59201] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aamAk6O0Baxc5WFYeP1doQAAAQA"]
[Thu Mar 05 21:09:57.285962 2026] [:error] [pid 62435:tid 62453] [client 85.203.23.217:58499] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/about.php"] [unique_id "aamApSMZJMDfZh_-8sWIdAAAAMM"]
[Thu Mar 05 21:09:57.467902 2026] [:error] [pid 62177:tid 62317] [client 85.203.23.201:48255] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aamApRWSQc2OzPrsnwXoOwAAAIY"]
[Thu Mar 05 21:09:57.648524 2026] [:error] [pid 41459:tid 41481] [client 85.203.23.222:60855] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/customize-widgets/about.php"] [unique_id "aamApedFBZEnZ3pzxrVRYgAAAUc"]
[Thu Mar 05 21:10:14.705982 2026] [:error] [pid 41459:tid 41496] [client 85.203.23.182:57325] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/chosen.php"] [unique_id "aamAtudFBZEnZ3pzxrVRhAAAAVY"]
[Thu Mar 05 21:10:41.741739 2026] [:error] [pid 62177:tid 62326] [client 85.203.23.219:43371] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aamA0RWSQc2OzPrsnwXocwAAAI4"]
[Thu Mar 05 21:11:00.167409 2026] [:error] [pid 62177:tid 62336] [client 85.203.23.201:30725] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-mails.php"] [unique_id "aamA5BWSQc2OzPrsnwXokAAAAJg"]
[Thu Mar 05 21:11:00.347543 2026] [:error] [pid 53350:tid 53389] [client 85.203.23.197:37907] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/Curve25519/wp-cron.php"] [unique_id "aamA5KO0Baxc5WFYeP1eOQAAAQw"]
[Thu Mar 05 21:11:06.537834 2026] [:error] [pid 53350:tid 53383] [client 85.203.23.188:26425] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-widget-table.php"] [unique_id "aamA6qO0Baxc5WFYeP1eSAAAAQg"]
[Thu Mar 05 21:11:06.717435 2026] [:error] [pid 53350:tid 53391] [client 85.203.23.195:37381] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/config.php"] [unique_id "aamA6qO0Baxc5WFYeP1eSQAAAQ4"]
[Thu Mar 05 21:11:06.897550 2026] [:error] [pid 41459:tid 41488] [client 85.203.23.204:41085] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "aamA6udFBZEnZ3pzxrVRyAAAAU4"]
[Thu Mar 05 21:11:07.078483 2026] [:error] [pid 53350:tid 53381] [client 85.203.23.222:22535] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/missing/about.php"] [unique_id "aamA66O0Baxc5WFYeP1eTAAAAQY"]
[Thu Mar 05 21:11:26.790066 2026] [:error] [pid 62177:tid 62315] [client 85.203.23.216:36779] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-terms/vx.php"] [unique_id "aamA_hWSQc2OzPrsnwXotAAAAIQ"]
[Thu Mar 05 21:11:26.970277 2026] [:error] [pid 53350:tid 53375] [client 85.203.23.210:53599] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aamA_qO0Baxc5WFYeP1eewAAAQA"]
[Thu Mar 05 21:12:45.302012 2026] [:error] [pid 53350:tid 53375] [client 85.203.23.224:52745] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aamBTaO0Baxc5WFYeP1fkwAAAQA"]
[Thu Mar 05 21:12:45.481729 2026] [:error] [pid 53350:tid 53391] [client 85.203.23.180:43793] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/footnotes/about.php"] [unique_id "aamBTaO0Baxc5WFYeP1flAAAAQ4"]
[Thu Mar 05 21:12:48.662422 2026] [:error] [pid 62173:tid 62267] [client 85.203.23.217:52159] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/about.php"] [unique_id "aamBUGj_GWbFb-1ncGl7-QAAAA4"]
[Thu Mar 05 21:12:57.767474 2026] [access_compat:error] [pid 53350:tid 53395] [client 85.203.23.182:21163] AH01797: client denied by server configuration: /home/makifimc/public_html/wp-content/updraft/fonts
[Thu Mar 05 21:13:24.368056 2026] [:error] [pid 53350:tid 53401] [client 85.203.23.206:47707] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "aamBdKO0Baxc5WFYeP1gcAAAARg"]
[Thu Mar 05 21:14:11.727242 2026] [:error] [pid 41459:tid 41482] [client 85.203.23.195:60757] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Content/Type/about.php"] [unique_id "aamBo-dFBZEnZ3pzxrVTpgAAAUg"]
[Thu Mar 05 21:14:11.905803 2026] [:error] [pid 41459:tid 41483] [client 85.203.23.182:38871] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aamBo-dFBZEnZ3pzxrVTpwAAAUk"]
[Thu Mar 05 21:14:39.166585 2026] [:error] [pid 53350:tid 53394] [client 85.203.23.204:41421] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/000.php"] [unique_id "aamBv6O0Baxc5WFYeP1h2gAAARE"]
[Thu Mar 05 21:14:46.490076 2026] [:error] [pid 41459:tid 41484] [client 85.203.23.182:52989] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/chosen.php"] [unique_id "aamBxudFBZEnZ3pzxrVT3wAAAUo"]
[Thu Mar 05 21:14:46.670966 2026] [:error] [pid 53350:tid 53378] [client 85.203.23.178:20083] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aamBxqO0Baxc5WFYeP1iEQAAAQM"]
[Thu Mar 05 21:14:46.850759 2026] [:error] [pid 53350:tid 53392] [client 85.203.23.219:57785] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/anskrit.php"] [unique_id "aamBxqO0Baxc5WFYeP1iEgAAAQ8"]
[Thu Mar 05 21:15:37.261993 2026] [:error] [pid 62435:tid 62465] [client 85.203.23.186:50531] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/rxzx.php"] [unique_id "aamB-SMZJMDfZh_-8sWJFgAAAM8"]
[Thu Mar 05 21:15:44.353797 2026] [:error] [pid 62176:tid 62295] [client 85.203.23.191:20369] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aamCACNfTPJryi30JPkCqQAAAEs"]
[Thu Mar 05 21:15:44.534808 2026] [:error] [pid 62435:tid 62450] [client 85.203.23.184:32737] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/zczv.php"] [unique_id "aamCACMZJMDfZh_-8sWJGwAAAMA"]
[Thu Mar 05 22:40:27.474355 2026] [:error] [pid 62176:tid 62303] [client 157.15.40.88:50701] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "aamV2yNfTPJryi30JPkJgQAAAFM"]
[Thu Mar 05 22:40:27.738067 2026] [:error] [pid 62176:tid 62297] [client 157.15.40.88:50786] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/txets.php"] [unique_id "aamV2yNfTPJryi30JPkJlQAAAE0"]
[Thu Mar 05 22:40:28.008014 2026] [:error] [pid 62173:tid 62271] [client 157.15.40.88:50864] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aamV3Gj_GWbFb-1ncGmA_QAAABE"]
[Thu Mar 05 22:40:28.268486 2026] [:error] [pid 62173:tid 62252] [client 157.15.40.88:50946] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aamV3Gj_GWbFb-1ncGmBAgAAAAA"]
[Thu Mar 05 22:40:28.532561 2026] [:error] [pid 62176:tid 62304] [client 157.15.40.88:51032] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/schallfuns.php"] [unique_id "aamV3CNfTPJryi30JPkJvQAAAFQ"]
[Thu Mar 05 22:40:28.812803 2026] [:error] [pid 62176:tid 62296] [client 157.15.40.88:51119] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/postnews.php"] [unique_id "aamV3CNfTPJryi30JPkJzQAAAEw"]
[Thu Mar 05 22:40:29.070323 2026] [:error] [pid 62177:tid 62331] [client 157.15.40.88:51210] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aamV3RWSQc2OzPrsnwX6eQAAAJM"]
[Thu Mar 05 22:40:29.352791 2026] [:error] [pid 41459:tid 41480] [client 157.15.40.88:51304] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aamV3edFBZEnZ3pzxrWEjAAAAUY"]
[Thu Mar 05 22:40:29.636061 2026] [:error] [pid 41459:tid 41491] [client 157.15.40.88:51393] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/postnews.php"] [unique_id "aamV3edFBZEnZ3pzxrWEuwAAAVE"]
[Fri Mar 06 00:44:20.631370 2026] [:error] [pid 27687:tid 27722] [client 103.77.107.222:58385] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "aamy5EI2IG23EwU7sL8A2AAAAJU"]
[Fri Mar 06 00:44:20.930693 2026] [:error] [pid 27687:tid 27713] [client 103.77.107.222:49419] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aamy5EI2IG23EwU7sL8A3AAAAIw"]
[Fri Mar 06 01:55:59.739779 2026] [:error] [pid 27687:tid 27702] [client 34.187.147.78:50740] [client 34.187.147.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.147.78, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aanDr0I2IG23EwU7sL8zfAAAAIE"]
[Fri Mar 06 01:56:05.312531 2026] [:error] [pid 27687:tid 27714] [client 34.187.147.78:50740] [client 34.187.147.78] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aanDtUI2IG23EwU7sL8zlQAAAI0"]
[Fri Mar 06 01:56:07.585370 2026] [:error] [pid 27687:tid 27701] [client 34.187.147.78:50740] [client 34.187.147.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.147.78, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aanDt0I2IG23EwU7sL8znQAAAIA"]
[Fri Mar 06 03:56:51.103125 2026] [:error] [pid 36253:tid 36350] [client 83.229.107.129:37537] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangAx3UhfIJveTCpy1ezAAAAAY"]
[Fri Mar 06 03:56:51.373760 2026] [:error] [pid 36261:tid 36411] [client 83.229.107.129:42883] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangA4m9_KjbGBdg7LwEdwAAAIE"]
[Fri Mar 06 03:56:51.474730 2026] [:error] [pid 36581:tid 36624] [client 83.229.107.129:43253] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangA8Af2j5z1OTQgFCoLwAAANY"]
[Fri Mar 06 03:56:52.230018 2026] [:error] [pid 36261:tid 36434] [client 68.218.165.157:11842] [client 68.218.165.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangBIm9_KjbGBdg7LwEeAAAAJY"]
[Fri Mar 06 03:56:54.169050 2026] [:error] [pid 36261:tid 36410] [client 83.229.107.129:35055] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangBom9_KjbGBdg7LwEgAAAAIA"]
[Fri Mar 06 03:56:54.759815 2026] [:error] [pid 36261:tid 36421] [client 68.218.165.157:11843] [client 68.218.165.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangBom9_KjbGBdg7LwEgQAAAIo"]
[Fri Mar 06 03:56:54.835216 2026] [:error] [pid 12368:tid 12386] [client 68.218.165.157:11844] [client 68.218.165.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangBmjfTeUMQiDziv6sGQAAAQQ"]
[Fri Mar 06 03:58:37.625201 2026] [:error] [pid 12368:tid 12396] [client 68.218.165.164:18689] [client 68.218.165.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.164, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangbWjfTeUMQiDziv6tAAAAAQ4"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend&redirect_to=https%3A%2F%2Fmakifim.com.au%2Fwp-admin%2Fcomment.php%3Faction%3Dapprove%26c%3D14%23wpbody-content
[Fri Mar 06 03:59:55.590232 2026] [:error] [pid 36261:tid 36420] [client 68.218.165.157:17984] [client 68.218.165.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aangu4m9_KjbGBdg7LwFawAAAIk"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend&redirect_to=https%3A%2F%2Fmakifim.com.au%2Fwp-admin%2Fadmin.php%3Fpage%3Ditsec-logs%26itsec-hb-token%3Dmkfm-backend&reauth=1
[Fri Mar 06 23:10:54.755240 2026] [:error] [pid 59237:tid 59259] [client 62.60.131.218:62140] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aarufuqfMSBs0nxOTxGY1AAAA5E"]
[Sat Mar 07 06:55:19.475499 2026] [:error] [pid 52484:tid 52521] [client 20.89.18.123:18524] [client 20.89.18.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aatbV_E9AnX6zUICFeQN6QAAARE"]
[Sat Mar 07 06:55:19.952248 2026] [:error] [pid 52484:tid 52505] [client 20.89.18.123:17308] [client 20.89.18.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aatbV_E9AnX6zUICFeQN6gAAAQI"]
[Sat Mar 07 06:55:20.416927 2026] [:error] [pid 52484:tid 52507] [client 20.89.18.123:17299] [client 20.89.18.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aatbWPE9AnX6zUICFeQN7AAAAQQ"]
[Sat Mar 07 06:55:20.913454 2026] [:error] [pid 4307:tid 4394] [client 20.89.18.123:17332] [client 20.89.18.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aatbWDeKp4wgnLc38f9UrAAAAAw"]
[Sat Mar 07 08:28:16.786186 2026] [:error] [pid 52484:tid 52520] [client 62.60.131.218:53894] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aatxIPE9AnX6zUICFeRUpwAAARA"]
[Sat Mar 07 11:02:15.475303 2026] [autoindex:error] [pid 52484:tid 52511] [client 84.247.187.54:63667] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Mar 07 14:37:31.645700 2026] [:error] [pid 37998:tid 38053] [client 34.24.47.138:60913] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media/system/js/core.js"] [unique_id "aavHq8l3xHpv0STGaSbA1gAAAUk"]
[Sat Mar 07 15:00:22.245898 2026] [:error] [pid 37998:tid 38064] [client 83.229.107.129:37813] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aavNBsl3xHpv0STGaSbN9AAAAVQ"]
[Sat Mar 07 15:00:22.259078 2026] [:error] [pid 37998:tid 38054] [client 83.229.107.129:42389] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aavNBsl3xHpv0STGaSbN9QAAAUo"]
[Sat Mar 07 15:00:22.352765 2026] [:error] [pid 37998:tid 38061] [client 83.229.107.129:41773] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aavNBsl3xHpv0STGaSbN9gAAAVE"]
[Sat Mar 07 15:00:25.984928 2026] [:error] [pid 37998:tid 38045] [client 83.229.107.129:33311] [client 83.229.107.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.229.107.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aavNCcl3xHpv0STGaSbOAgAAAUI"]
[Sat Mar 07 15:01:49.045785 2026] [:error] [pid 52484:tid 52514] [client 68.218.165.129:1024] [client 68.218.165.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aavNXfE9AnX6zUICFeRjAAAAAQs"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend&redirect_to=https%3A%2F%2Fmakifim.com.au%2Fwp-admin%2Fcomment.php%3Faction%3Dapprove%26c%3D15%23wpbody-content
[Sat Mar 07 17:01:21.404467 2026] [:error] [pid 37998:tid 38067] [client 193.32.126.227:62251] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aavpYcl3xHpv0STGaSYMWAAAAVc"]
[Sun Mar 08 01:24:54.077634 2026] [proxy_fcgi:error] [pid 19534:tid 19541] [client 103.4.122.14:52712] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Mar 08 01:25:04.326774 2026] [proxy_fcgi:error] [pid 19534:tid 19548] [client 103.4.122.14:52824] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Mar 08 07:05:22.614833 2026] [:error] [pid 22787:tid 22834] [client 4.199.143.157:4230] [client 4.199.143.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aayvMkF9MGMhk9pT4z73MwAAA0Y"]
[Sun Mar 08 07:05:23.211229 2026] [:error] [pid 22788:tid 22859] [client 4.199.143.157:4226] [client 4.199.143.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aayvM0hwluk21OG9mSfwsAAAA4Q"]
[Sun Mar 08 07:05:23.275256 2026] [:error] [pid 22788:tid 22879] [client 4.199.143.157:4228] [client 4.199.143.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aayvM0hwluk21OG9mSfwsgAAA5g"]
[Sun Mar 08 07:07:40.602134 2026] [:error] [pid 22667:tid 22718] [client 4.199.143.156:12740] [client 4.199.143.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.156, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aayvvOG7qk1roo-TRWM7sgAAAk0"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend&redirect_to=https%3A%2F%2Fmakifim.com.au%2Fwp-admin%2Fadmin.php%3Fpage%3Ditsec-logs%26itsec-hb-token%3Dmkfm-backend&reauth=1
[Sun Mar 08 23:55:58.817543 2026] [:error] [pid 43671:tid 43737] [client 180.180.175.100:50762] [client 180.180.175.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aa2cDq6AdwroU1gT3XEsAAAAAE4"]
[Sun Mar 08 23:55:59.142956 2026] [:error] [pid 10522:tid 10547] [client 180.180.175.100:50840] [client 180.180.175.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aa2cD1EZGQssSI3mZTMwQgAAAYs"]
[Sun Mar 08 23:56:04.088208 2026] [:error] [pid 22788:tid 22864] [client 180.180.175.100:51775] [client 180.180.175.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aa2cFEhwluk21OG9mSd1pgAAA4k"]
[Sun Mar 08 23:56:04.386490 2026] [:error] [pid 22788:tid 22856] [client 180.180.175.100:51848] [client 180.180.175.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "aa2cFEhwluk21OG9mSd1qAAAA4E"]
[Mon Mar 09 04:19:21.509040 2026] [autoindex:error] [pid 17485:tid 17511] [client 20.2.138.226:61787] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 09 04:36:59.071019 2026] [:error] [pid 6074:tid 6103] [client 20.219.138.200:5083] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aa3d6xgvXHMVGYw_ElyvgAAAAMw"]
[Mon Mar 09 04:36:59.658529 2026] [:error] [pid 6074:tid 6095] [client 20.219.138.200:3525] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aa3d6xgvXHMVGYw_ElyvgwAAAMQ"]
[Mon Mar 09 04:37:00.223045 2026] [:error] [pid 5783:tid 5896] [client 20.219.138.200:6310] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aa3d7AdiZJ1FQPtsTNT5AQAAAEI"]
[Mon Mar 09 04:37:00.785527 2026] [:error] [pid 17485:tid 17499] [client 20.219.138.200:5493] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aa3d7NQOL_kxQEc1PTBBDAAAAQs"]
[Mon Mar 09 20:24:40.338251 2026] [:error] [pid 44503:tid 44528] [client 185.242.3.19:51977] [client 185.242.3.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "aa68CMpGKFA8jlKDDh37GQAAAdU"]
[Mon Mar 09 21:04:17.817361 2026] [:error] [pid 5787:tid 5925] [client 41.140.64.42:52401] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aa7FUbGpMgQ18gGUaFPYswAAAIM"], referer: https://t.me/share/url?url=https%3A%2F%2Frecipe-site.com&text=Great+recipe
[Mon Mar 09 21:04:20.257211 2026] [:error] [pid 5787:tid 5933] [client 41.140.64.42:52809] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env."] [unique_id "aa7FVLGpMgQ18gGUaFPYtgAAAIs"], referer: https://stackoverflow.com/search?q=%5Bcss%5D+animation&sort=newest
[Mon Mar 09 21:04:22.740759 2026] [:error] [pid 6074:tid 6110] [client 41.140.64.42:53061] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env/"] [unique_id "aa7FVhgvXHMVGYw_ElwHbgAAANM"], referer: https://www.facebook.com/
[Mon Mar 09 21:04:24.045383 2026] [:error] [pid 44503:tid 44522] [client 41.140.64.42:53312] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env%00"] [unique_id "aa7FWMpGKFA8jlKDDh0WdwAAAc8"], referer: https://search.yahoo.com/
[Mon Mar 09 21:04:28.310193 2026] [:error] [pid 5787:tid 5932] [client 41.140.64.42:53455] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env%20"] [unique_id "aa7FXLGpMgQ18gGUaFPYwQAAAIo"], referer: https://www.google.com/search?q=weather+new+york&client=firefox-b-d
[Mon Mar 09 21:04:33.712594 2026] [:error] [pid 44503:tid 44529] [client 41.140.64.42:53937] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env%20"] [unique_id "aa7FYcpGKFA8jlKDDh0WiAAAAdY"], referer: https://bitbucket.org/dashboard/overview
[Mon Mar 09 21:04:47.472261 2026] [:error] [pid 44503:tid 44524] [client 41.140.64.42:55776] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aa7Fb8pGKFA8jlKDDh0WwAAAAdE"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Mon Mar 09 21:04:50.486932 2026] [:error] [pid 44503:tid 44523] [client 41.140.64.42:56017] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local."] [unique_id "aa7FcspGKFA8jlKDDh0WyQAAAdA"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Mon Mar 09 21:04:51.857298 2026] [:error] [pid 44504:tid 44535] [client 41.140.64.42:56353] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local/"] [unique_id "aa7Fc3ri56-8oxPimmhI2AAAAgE"], referer: https://github.com/search?q=topic%3Acooking-recipes&type=repositories
[Mon Mar 09 21:04:56.137311 2026] [:error] [pid 5787:tid 5938] [client 41.140.64.42:56507] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local%00"] [unique_id "aa7FeLGpMgQ18gGUaFPY4QAAAJA"], referer: https://www.youtube.com/
[Mon Mar 09 21:04:57.480126 2026] [:error] [pid 44504:tid 44535] [client 41.140.64.42:57018] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local%20"] [unique_id "aa7FeXri56-8oxPimmhI5AAAAgE"], referer: https://bitbucket.org/dashboard/overview
[Mon Mar 09 21:05:00.829210 2026] [:error] [pid 5787:tid 5940] [client 41.140.64.42:57487] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local%20"] [unique_id "aa7FfLGpMgQ18gGUaFPY6AAAAJI"], referer: https://www.reddit.com/r/all/
[Mon Mar 09 21:05:06.540309 2026] [:error] [pid 44463:tid 44490] [client 41.140.64.42:57655] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aa7Fgi5tVkWjZvDknB0m2wAAAZM"], referer: https://medium.com/search?q=productivity+tips
[Mon Mar 09 21:05:09.613693 2026] [:error] [pid 5779:tid 5862] [client 41.140.64.42:64851] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production."] [unique_id "aa7FhQaHbHwtklaurgU1QgAAAAc"], referer: https://search.yahoo.com/
[Mon Mar 09 21:05:13.537565 2026] [:error] [pid 5787:tid 5936] [client 41.140.64.42:52613] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production/"] [unique_id "aa7FibGpMgQ18gGUaFPY_wAAAI4"], referer: https://www.amazon.com/s?k=running+shoes&ref=nb_sb_noss_2
[Mon Mar 09 21:05:19.900160 2026] [:error] [pid 5779:tid 5857] [client 41.140.64.42:53378] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production%00"] [unique_id "aa7FjwaHbHwtklaurgU1UgAAAAI"], referer: https://www.google.com/
[Mon Mar 09 21:05:21.482515 2026] [:error] [pid 5787:tid 5943] [client 41.140.64.42:53642] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production%20"] [unique_id "aa7FkbGpMgQ18gGUaFPZBwAAAJU"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Mon Mar 09 21:05:24.943064 2026] [:error] [pid 5787:tid 5924] [client 41.140.64.42:54070] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production%20"] [unique_id "aa7FlLGpMgQ18gGUaFPZHwAAAII"], referer: https://www.wikipedia.org/
[Mon Mar 09 21:05:30.984450 2026] [:error] [pid 5779:tid 5869] [client 41.140.64.42:54242] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aa7FmgaHbHwtklaurgU1XQAAAA4"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Mon Mar 09 21:05:36.104177 2026] [:error] [pid 44503:tid 44525] [client 41.140.64.42:55399] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development."] [unique_id "aa7FoMpGKFA8jlKDDh0XagAAAdI"], referer: https://www.amazon.com/dp/B08N5WRWNW?ref_=nav_em__k_ods_ha_0_1_1_3
[Mon Mar 09 21:05:37.455983 2026] [:error] [pid 44503:tid 44529] [client 41.140.64.42:55557] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development/"] [unique_id "aa7FocpGKFA8jlKDDh0XcgAAAdY"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Mon Mar 09 21:05:38.796585 2026] [:error] [pid 44463:tid 44483] [client 41.140.64.42:55718] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development%00"] [unique_id "aa7Foi5tVkWjZvDknB0m6QAAAYw"], referer: https://github.com/
[Mon Mar 09 21:05:42.269831 2026] [:error] [pid 5787:tid 5927] [client 41.140.64.42:55860] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development%20"] [unique_id "aa7FprGpMgQ18gGUaFPZQQAAAIU"], referer: https://www.google.de/
[Mon Mar 09 21:05:43.626872 2026] [:error] [pid 44503:tid 44521] [client 41.140.64.42:56269] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development%20"] [unique_id "aa7Fp8pGKFA8jlKDDh0XhgAAAc4"], referer: https://www.google.fr/
[Mon Mar 09 21:06:14.767190 2026] [:error] [pid 5787:tid 5937] [client 41.140.64.42:59837] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aa7FxrGpMgQ18gGUaFPZeAAAAI8"], referer: https://www.amazon.com/
[Mon Mar 09 21:06:17.136930 2026] [:error] [pid 5787:tid 5935] [client 41.140.64.42:60081] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging."] [unique_id "aa7FybGpMgQ18gGUaFPZfAAAAI0"], referer: https://vimeo.com/search?q=short+film+festival
[Mon Mar 09 21:06:22.585849 2026] [:error] [pid 44503:tid 44521] [client 41.140.64.42:60351] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging/"] [unique_id "aa7FzspGKFA8jlKDDh0X0AAAAc4"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Mon Mar 09 21:06:23.964438 2026] [:error] [pid 5787:tid 5939] [client 41.140.64.42:60969] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging%00"] [unique_id "aa7Fz7GpMgQ18gGUaFPZhwAAAJE"], referer: https://www.facebook.com/
[Mon Mar 09 21:06:25.309775 2026] [:error] [pid 5787:tid 5942] [client 41.140.64.42:61110] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging%20"] [unique_id "aa7F0bGpMgQ18gGUaFPZigAAAJQ"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Mon Mar 09 21:06:28.274298 2026] [:error] [pid 5787:tid 5937] [client 41.140.64.42:61269] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging%20"] [unique_id "aa7F1LGpMgQ18gGUaFPZjgAAAI8"], referer: https://duckduckgo.com/
[Mon Mar 09 21:06:30.724911 2026] [:error] [pid 6074:tid 6100] [client 41.140.64.42:61570] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aa7F1hgvXHMVGYw_ElwHoAAAAMk"], referer: https://dev.to/search?q=react+hooks+tutorial
[Mon Mar 09 21:06:32.070774 2026] [:error] [pid 44503:tid 44526] [client 41.140.64.42:61830] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test."] [unique_id "aa7F2MpGKFA8jlKDDh0X4AAAAdM"], referer: https://www.bing.com/
[Mon Mar 09 21:06:36.080846 2026] [:error] [pid 44503:tid 44528] [client 41.140.64.42:61964] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test/"] [unique_id "aa7F3MpGKFA8jlKDDh0X5AAAAdU"], referer: https://pypi.org/search/?q=data+visualization
[Mon Mar 09 21:06:37.425167 2026] [:error] [pid 44503:tid 44523] [client 41.140.64.42:62720] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test%00"] [unique_id "aa7F3cpGKFA8jlKDDh0X6wAAAdA"], referer: https://www.qwant.com/
[Mon Mar 09 21:06:38.884923 2026] [:error] [pid 5787:tid 5945] [client 41.140.64.42:62849] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test%20"] [unique_id "aa7F3rGpMgQ18gGUaFPZpAAAAJc"], referer: https://dev.to/search?q=react+hooks+tutorial
[Mon Mar 09 21:06:40.258879 2026] [:error] [pid 6074:tid 6115] [client 41.140.64.42:62993] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test%20"] [unique_id "aa7F4BgvXHMVGYw_ElwHogAAANg"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Mon Mar 09 21:06:56.064022 2026] [:error] [pid 6074:tid 6092] [client 41.140.64.42:60954] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aa7F8BgvXHMVGYw_ElwHpQAAAME"], referer: https://www.amazon.com/dp/B08N5WRWNW?ref_=nav_em__k_ods_ha_0_1_1_3
[Mon Mar 09 21:06:58.427107 2026] [:error] [pid 44503:tid 44511] [client 41.140.64.42:61647] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup."] [unique_id "aa7F8spGKFA8jlKDDh0YJwAAAcQ"], referer: https://www.ebay.com/sch/i.html?_nkw=vintage+camera&_sacat=0
[Mon Mar 09 21:06:59.827027 2026] [:error] [pid 44503:tid 44525] [client 41.140.64.42:61924] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup/"] [unique_id "aa7F88pGKFA8jlKDDh0YKQAAAdI"], referer: https://pypi.org/search/?q=data+visualization
[Mon Mar 09 21:07:04.914129 2026] [:error] [pid 5783:tid 5894] [client 41.140.64.42:62083] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup%00"] [unique_id "aa7F-AdiZJ1FQPtsTNTa5gAAAEA"], referer: https://www.reddit.com/
[Mon Mar 09 21:07:09.708968 2026] [:error] [pid 44504:tid 44539] [client 41.140.64.42:63060] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup%20"] [unique_id "aa7F_Xri56-8oxPimmhJiwAAAgU"], referer: https://www.reddit.com/
[Mon Mar 09 21:07:11.053406 2026] [:error] [pid 44503:tid 44511] [client 41.140.64.42:63228] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup%20"] [unique_id "aa7F_8pGKFA8jlKDDh0YQwAAAcQ"], referer: https://www.ebay.com/itm/123456789012?hash=item1a2b3c4d5e
[Mon Mar 09 21:07:18.390867 2026] [:error] [pid 44503:tid 44530] [client 41.140.64.42:64048] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aa7GBspGKFA8jlKDDh0YcQAAAdc"], referer: https://stackoverflow.com/
[Mon Mar 09 21:07:19.745577 2026] [:error] [pid 44503:tid 44520] [client 41.140.64.42:64213] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old."] [unique_id "aa7GB8pGKFA8jlKDDh0YeAAAAc0"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Mon Mar 09 21:07:21.135439 2026] [:error] [pid 5779:tid 5866] [client 41.140.64.42:64341] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old/"] [unique_id "aa7GCQaHbHwtklaurgU17QAAAAs"], referer: https://www.quora.com/How-do-I-make-pizza-dough
[Mon Mar 09 21:07:23.583347 2026] [:error] [pid 44503:tid 44524] [client 41.140.64.42:64500] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old%00"] [unique_id "aa7GC8pGKFA8jlKDDh0YhAAAAdE"], referer: https://www.reddit.com/r/aww/comments/abc456/cute_puppy/?utm_source=share&utm_medium=web2x
[Mon Mar 09 21:07:26.005145 2026] [:error] [pid 44503:tid 44508] [client 41.140.64.42:64774] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old%20"] [unique_id "aa7GDspGKFA8jlKDDh0YjAAAAcE"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Mon Mar 09 21:07:28.374627 2026] [:error] [pid 5787:tid 5944] [client 41.140.64.42:65017] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old%20"] [unique_id "aa7GELGpMgQ18gGUaFPaFgAAAJY"], referer: https://medium.com/search?q=productivity+tips
[Mon Mar 09 21:07:36.351260 2026] [:error] [pid 44503:tid 44512] [client 41.140.64.42:49908] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aa7GGMpGKFA8jlKDDh0YsgAAAcU"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Mon Mar 09 21:07:39.594477 2026] [:error] [pid 44503:tid 44523] [client 41.140.64.42:50321] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save."] [unique_id "aa7GG8pGKFA8jlKDDh0Y2QAAAdA"], referer: https://stackoverflow.com/
[Mon Mar 09 21:07:43.957292 2026] [:error] [pid 5779:tid 5873] [client 41.140.64.42:50689] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save/"] [unique_id "aa7GHwaHbHwtklaurgU1_AAAABI"], referer: https://t.co/
[Mon Mar 09 21:07:48.381924 2026] [:error] [pid 5779:tid 5872] [client 41.140.64.42:53744] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save%20"] [unique_id "aa7GJAaHbHwtklaurgU2BwAAABE"], referer: https://www.youtube.com/watch?v=abcdEFGHijk&feature=share
[Mon Mar 09 21:07:49.736830 2026] [:error] [pid 5787:tid 5944] [client 41.140.64.42:53898] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save%20"] [unique_id "aa7GJbGpMgQ18gGUaFPagQAAAJY"], referer: https://www.google.fr/
[Mon Mar 09 21:07:58.896906 2026] [:error] [pid 5779:tid 5862] [client 41.140.64.42:54326] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aa7GLgaHbHwtklaurgU2FwAAAAc"], referer: https://www.linkedin.com/
[Mon Mar 09 21:08:04.366148 2026] [:error] [pid 5787:tid 5936] [client 41.140.64.42:55559] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example/"] [unique_id "aa7GNLGpMgQ18gGUaFPalgAAAI4"], referer: https://search.yahoo.com/search?p=learn+spanish+online+free&fr=yfp-t
[Mon Mar 09 21:08:05.685591 2026] [:error] [pid 5779:tid 5869] [client 41.140.64.42:55870] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example%00"] [unique_id "aa7GNQaHbHwtklaurgU2HAAAAA4"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Mon Mar 09 21:08:07.066875 2026] [:error] [pid 44503:tid 44511] [client 41.140.64.42:56032] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example%20"] [unique_id "aa7GN8pGKFA8jlKDDh0ZZAAAAcQ"], referer: https://www.bing.com/search?q=
[Mon Mar 09 21:08:09.503673 2026] [:error] [pid 5779:tid 5862] [client 41.140.64.42:56199] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example%20"] [unique_id "aa7GOQaHbHwtklaurgU2IAAAAAc"], referer: https://medium.com/search?q=productivity+tips
[Mon Mar 09 21:08:13.554476 2026] [:error] [pid 44504:tid 44541] [client 41.140.64.42:56493] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local"] [unique_id "aa7GPXri56-8oxPimmhJyQAAAgc"], referer: https://docs.python.org/3/search.html?q=json+parsing&check_keywords=yes
[Mon Mar 09 21:08:14.895148 2026] [:error] [pid 44503:tid 44525] [client 41.140.64.42:56977] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local."] [unique_id "aa7GPspGKFA8jlKDDh0Z4wAAAdI"], referer: https://l.facebook.com/
[Mon Mar 09 21:08:16.246061 2026] [:error] [pid 44503:tid 44531] [client 41.140.64.42:57151] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local/"] [unique_id "aa7GQMpGKFA8jlKDDh0Z8AAAAdg"], referer: https://www.ebay.com/sch/i.html?_nkw=vintage+camera&_sacat=0
[Mon Mar 09 21:08:18.594891 2026] [:error] [pid 5779:tid 5860] [client 41.140.64.42:57313] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local%00"] [unique_id "aa7GQgaHbHwtklaurgU2MQAAAAU"], referer: https://www.aliexpress.com/wholesale?SearchText=phone+case&catId=0
[Mon Mar 09 21:08:28.845476 2026] [:error] [pid 17485:tid 17507] [client 41.140.64.42:58604] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local%20"] [unique_id "aa7GTNQOL_kxQEc1PTC2KAAAARM"], referer: https://www.wikipedia.org/wiki/Main_Page?action=history
[Mon Mar 09 21:08:34.793796 2026] [:error] [pid 44503:tid 44522] [client 41.140.64.42:59160] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local"] [unique_id "aa7GUspGKFA8jlKDDh0aPgAAAc8"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Mon Mar 09 21:08:39.485791 2026] [:error] [pid 44463:tid 44481] [client 41.140.64.42:59901] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local."] [unique_id "aa7GVy5tVkWjZvDknB0nLAAAAYo"], referer: https://vimeo.com/search?q=short+film+festival
[Mon Mar 09 21:08:41.490989 2026] [:error] [pid 5783:tid 5902] [client 41.140.64.42:54596] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local/"] [unique_id "aa7GWQdiZJ1FQPtsTNTbBwAAAEg"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Mon Mar 09 21:08:42.904616 2026] [:error] [pid 44504:tid 44538] [client 41.140.64.42:54855] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local%00"] [unique_id "aa7GWnri56-8oxPimmhJ3AAAAgQ"], referer: https://scholar.google.com/scholar?q=machine+learning+history
[Mon Mar 09 21:08:44.233407 2026] [:error] [pid 17485:tid 17506] [client 41.140.64.42:55042] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local%20"] [unique_id "aa7GXNQOL_kxQEc1PTC2LAAAARI"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Mon Mar 09 21:08:49.231977 2026] [:error] [pid 44503:tid 44523] [client 41.140.64.42:55696] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local%20"] [unique_id "aa7GYcpGKFA8jlKDDh0aVQAAAdA"], referer: https://www.linkedin.com/
[Mon Mar 09 21:08:51.652507 2026] [:error] [pid 44503:tid 44516] [client 41.140.64.42:55882] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "aa7GY8pGKFA8jlKDDh0aXwAAAck"], referer: https://www.google.co.uk/
[Mon Mar 09 21:08:56.131165 2026] [:error] [pid 17485:tid 17489] [client 41.140.64.42:56183] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist."] [unique_id "aa7GaNQOL_kxQEc1PTC2MQAAAQE"], referer: https://www.wikipedia.org/wiki/Main_Page?action=history
[Mon Mar 09 21:08:57.487942 2026] [:error] [pid 5787:tid 5940] [client 41.140.64.42:56727] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist/"] [unique_id "aa7GabGpMgQ18gGUaFPa2gAAAJI"], referer: https://dev.to/search?q=react+hooks+tutorial
[Mon Mar 09 21:09:00.865146 2026] [:error] [pid 17485:tid 17508] [client 41.140.64.42:57155] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist%00"] [unique_id "aa7GbNQOL_kxQEc1PTC2NAAAARQ"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Mon Mar 09 21:09:03.681151 2026] [:error] [pid 5783:tid 5900] [client 41.140.64.42:57301] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist%20"] [unique_id "aa7GbwdiZJ1FQPtsTNTbGgAAAEY"], referer: https://docs.python.org/3/search.html?q=json+parsing&check_keywords=yes
[Mon Mar 09 21:09:05.072862 2026] [:error] [pid 5787:tid 5933] [client 41.140.64.42:57634] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist%20"] [unique_id "aa7GcbGpMgQ18gGUaFPa3QAAAIs"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Mon Mar 09 21:09:14.577852 2026] [:error] [pid 44503:tid 44521] [client 41.140.64.42:58602] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "aa7GespGKFA8jlKDDh0aqgAAAc4"], referer: https://m.facebook.com/
[Mon Mar 09 21:09:18.683260 2026] [:error] [pid 44503:tid 44524] [client 41.140.64.42:58849] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample."] [unique_id "aa7GfspGKFA8jlKDDh0asgAAAdE"], referer: https://www.ebay.com/itm/123456789012?hash=item1a2b3c4d5e
[Mon Mar 09 21:09:20.009624 2026] [:error] [pid 44504:tid 44537] [client 41.140.64.42:54957] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample/"] [unique_id "aa7GgHri56-8oxPimmhKDgAAAgM"], referer: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftravelblog.com
[Mon Mar 09 21:09:24.225257 2026] [:error] [pid 5779:tid 5861] [client 41.140.64.42:55123] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample%00"] [unique_id "aa7GhAaHbHwtklaurgU2rgAAAAY"], referer: https://www.ecosia.org/
[Mon Mar 09 21:09:27.534040 2026] [:error] [pid 44463:tid 44474] [client 41.140.64.42:55910] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample%20"] [unique_id "aa7Ghy5tVkWjZvDknB0nUwAAAYM"], referer: https://www.facebook.com/
[Mon Mar 09 21:09:28.877094 2026] [:error] [pid 5787:tid 5928] [client 41.140.64.42:56069] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample%20"] [unique_id "aa7GiLGpMgQ18gGUaFPbCwAAAIY"], referer: https://www.reddit.com/r/all/
[Mon Mar 09 21:09:32.249586 2026] [:error] [pid 44504:tid 44563] [client 41.140.64.42:56240] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.template"] [unique_id "aa7GjHri56-8oxPimmhKFAAAAhg"], referer: https://www.reddit.com/r/cooking/search?q=dinner+ideas&restrict_sr=1&t=week
[Mon Mar 09 21:09:33.729531 2026] [:error] [pid 6074:tid 6111] [client 41.140.64.42:56661] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.template."] [unique_id "aa7GjRgvXHMVGYw_ElwH5AAAANQ"], referer: https://l.facebook.com/
[Mon Mar 09 21:09:38.128487 2026] [:error] [pid 44463:tid 44482] [client 41.140.64.42:57294] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.template/"] [unique_id "aa7Gki5tVkWjZvDknB0nXQAAAYs"], referer: https://www.google.fr/
[Mon Mar 09 21:09:40.220312 2026] [:error] [pid 44504:tid 44539] [client 41.140.64.42:57477] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.template%00"] [unique_id "aa7GlHri56-8oxPimmhKHAAAAgU"], referer: https://www.walmart.com/search?q=organic+coffee&cat_id=0
[Mon Mar 09 21:09:45.474138 2026] [:error] [pid 44503:tid 44522] [client 41.140.64.42:58051] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.template%20"] [unique_id "aa7GmcpGKFA8jlKDDh0awwAAAc8"], referer: https://stackoverflow.com/
[Mon Mar 09 21:09:49.567234 2026] [:error] [pid 5779:tid 5864] [client 41.140.64.42:58754] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.template%20"] [unique_id "aa7GnQaHbHwtklaurgU28AAAAAk"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Mon Mar 09 21:10:13.211211 2026] [:error] [pid 44503:tid 44530] [client 41.140.64.42:61083] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example.local"] [unique_id "aa7GtcpGKFA8jlKDDh0bCQAAAdc"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Mon Mar 09 21:10:14.559466 2026] [:error] [pid 6074:tid 6113] [client 41.140.64.42:61726] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example.local."] [unique_id "aa7GthgvXHMVGYw_ElwH_gAAANY"], referer: https://www.google.fr/
[Mon Mar 09 21:10:15.883447 2026] [:error] [pid 5787:tid 5923] [client 41.140.64.42:61868] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example.local/"] [unique_id "aa7Gt7GpMgQ18gGUaFPbKgAAAIE"], referer: https://github.com/user/project/blob/main/script.js?raw=true
[Mon Mar 09 21:10:17.235766 2026] [:error] [pid 5787:tid 5941] [client 41.140.64.42:62004] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example.local%00"] [unique_id "aa7GubGpMgQ18gGUaFPbLgAAAJM"], referer: https://medium.com/
[Mon Mar 09 21:10:21.970561 2026] [:error] [pid 5787:tid 5944] [client 41.140.64.42:62329] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example.local%20"] [unique_id "aa7GvbGpMgQ18gGUaFPbOgAAAJY"], referer: https://www.ecosia.org/
[Mon Mar 09 21:10:25.153357 2026] [:error] [pid 6074:tid 6091] [client 41.140.64.42:52900] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example.local%20"] [unique_id "aa7GwRgvXHMVGYw_ElwIAwAAAMA"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Mon Mar 09 21:10:35.722883 2026] [:error] [pid 5779:tid 5859] [client 41.140.64.42:50614] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker"] [unique_id "aa7GywaHbHwtklaurgU3XAAAAAQ"], referer: https://www.bing.com/search?q=latest+movies+2026&form=QBLH
[Mon Mar 09 21:10:40.242291 2026] [:error] [pid 44503:tid 44516] [client 41.140.64.42:52702] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker."] [unique_id "aa7G0MpGKFA8jlKDDh0bJQAAAck"], referer: https://www.nytimes.com/section/technology?action=click&pgtype=Article&state=default
[Mon Mar 09 21:10:41.588338 2026] [:error] [pid 5779:tid 5866] [client 41.140.64.42:65448] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker/"] [unique_id "aa7G0QaHbHwtklaurgU3YQAAAAs"], referer: https://www.qwant.com/
[Mon Mar 09 21:10:49.031487 2026] [:error] [pid 5783:tid 5901] [client 41.140.64.42:50209] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker%20"] [unique_id "aa7G2QdiZJ1FQPtsTNTbUgAAAEc"], referer: https://www.linkedin.com/feed/update/def456/
[Mon Mar 09 21:10:50.438436 2026] [:error] [pid 44504:tid 44552] [client 41.140.64.42:50381] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker%20"] [unique_id "aa7G2nri56-8oxPimmhKWQAAAhI"], referer: https://www.wikipedia.org/
[Mon Mar 09 21:10:54.547331 2026] [:error] [pid 5787:tid 5932] [client 41.140.64.42:50540] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci"] [unique_id "aa7G3rGpMgQ18gGUaFPbjQAAAIo"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Mon Mar 09 21:10:58.763292 2026] [:error] [pid 5787:tid 5925] [client 41.140.64.42:51186] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci."] [unique_id "aa7G4rGpMgQ18gGUaFPbngAAAIM"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Mon Mar 09 21:11:01.316680 2026] [:error] [pid 44504:tid 44551] [client 41.140.64.42:51461] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci/"] [unique_id "aa7G5Xri56-8oxPimmhKZQAAAhE"], referer: https://scholar.google.com/scholar?q=machine+learning+history
[Mon Mar 09 21:11:03.787689 2026] [:error] [pid 44503:tid 44519] [client 41.140.64.42:51728] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci%00"] [unique_id "aa7G58pGKFA8jlKDDh0bTQAAAcw"], referer: https://docs.python.org/3/search.html?q=json+parsing&check_keywords=yes
[Mon Mar 09 21:11:06.964366 2026] [:error] [pid 5779:tid 5874] [client 41.140.64.42:51989] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci%20"] [unique_id "aa7G6gaHbHwtklaurgU3awAAABM"], referer: https://t.co/
[Mon Mar 09 21:11:08.459613 2026] [:error] [pid 5783:tid 5908] [client 41.140.64.42:52342] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci%20"] [unique_id "aa7G7AdiZJ1FQPtsTNTbVwAAAE4"], referer: https://duckduckgo.com/
[Mon Mar 09 21:11:10.880871 2026] [:error] [pid 44463:tid 44476] [client 41.140.64.42:52515] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live"] [unique_id "aa7G7i5tVkWjZvDknB0nigAAAYU"], referer: https://l.facebook.com/
[Mon Mar 09 21:11:12.283672 2026] [:error] [pid 44504:tid 44548] [client 41.140.64.42:52785] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live."] [unique_id "aa7G8Hri56-8oxPimmhKdgAAAg4"], referer: https://stackoverflow.com/
[Mon Mar 09 21:11:13.808470 2026] [:error] [pid 44503:tid 44510] [client 41.140.64.42:52949] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live/"] [unique_id "aa7G8cpGKFA8jlKDDh0bWQAAAcM"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Mon Mar 09 21:11:15.393622 2026] [:error] [pid 5779:tid 5872] [client 41.140.64.42:53099] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live%00"] [unique_id "aa7G8waHbHwtklaurgU3dgAAABE"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Mon Mar 09 21:11:16.814618 2026] [:error] [pid 44463:tid 44479] [client 41.140.64.42:53275] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live%20"] [unique_id "aa7G9C5tVkWjZvDknB0njAAAAYg"], referer: https://www.qwant.com/
[Mon Mar 09 21:11:18.252453 2026] [:error] [pid 5787:tid 5942] [client 41.140.64.42:53441] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live%20"] [unique_id "aa7G9rGpMgQ18gGUaFPb6gAAAJQ"], referer: https://www.amazon.com/
[Mon Mar 09 21:11:21.410890 2026] [:error] [pid 5787:tid 5924] [client 41.140.64.42:53595] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "aa7G-bGpMgQ18gGUaFPb-QAAAII"], referer: https://www.twitch.tv/directory/game/Just%20Chatting
[Mon Mar 09 21:11:26.060354 2026] [:error] [pid 5787:tid 5924] [client 41.140.64.42:54113] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod."] [unique_id "aa7G_rGpMgQ18gGUaFPcAQAAAII"], referer: https://www.linkedin.com/feed/update/def456/
[Mon Mar 09 21:11:28.894152 2026] [:error] [pid 5787:tid 5932] [client 41.140.64.42:54416] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod/"] [unique_id "aa7HALGpMgQ18gGUaFPcBQAAAIo"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Mon Mar 09 21:11:30.390846 2026] [:error] [pid 44503:tid 44507] [client 41.140.64.42:54738] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod%00"] [unique_id "aa7HAspGKFA8jlKDDh0bagAAAcA"], referer: https://www.quora.com/search?q=best+books+to+read+2026
[Mon Mar 09 21:11:31.778167 2026] [:error] [pid 5787:tid 5924] [client 41.140.64.42:54913] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod%20"] [unique_id "aa7HA7GpMgQ18gGUaFPcCgAAAII"], referer: https://github.com/
[Mon Mar 09 21:11:35.527221 2026] [:error] [pid 44504:tid 44562] [client 41.140.64.42:55077] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod%20"] [unique_id "aa7HB3ri56-8oxPimmhKhQAAAhc"], referer: https://github.com/user/project/blob/main/script.js?raw=true
[Mon Mar 09 21:11:38.938107 2026] [:error] [pid 44503:tid 44507] [client 41.140.64.42:55562] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.release"] [unique_id "aa7HCspGKFA8jlKDDh0bfQAAAcA"], referer: https://www.tiktok.com/tag/cooking?lang=en
[Mon Mar 09 21:11:40.312169 2026] [:error] [pid 5787:tid 5944] [client 41.140.64.42:55981] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.release."] [unique_id "aa7HDLGpMgQ18gGUaFPcFQAAAJY"], referer: https://news.google.com/
[Mon Mar 09 21:11:45.521326 2026] [:error] [pid 44463:tid 44485] [client 41.140.64.42:56149] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.release/"] [unique_id "aa7HES5tVkWjZvDknB0nmwAAAY4"], referer: https://t.co/
[Mon Mar 09 21:11:47.593141 2026] [:error] [pid 17485:tid 17503] [client 41.140.64.42:56835] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.release%00"] [unique_id "aa7HE9QOL_kxQEc1PTC2bwAAAQ8"], referer: https://github.com/search?q=topic%3Acooking-recipes&type=repositories
[Mon Mar 09 21:11:52.031347 2026] [:error] [pid 6074:tid 6111] [client 41.140.64.42:57097] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.release%20"] [unique_id "aa7HGBgvXHMVGYw_ElwIKAAAANQ"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Mon Mar 09 21:11:56.119153 2026] [:error] [pid 44503:tid 44523] [client 41.140.64.42:57672] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.release%20"] [unique_id "aa7HHMpGKFA8jlKDDh0bowAAAdA"], referer: https://github.com/user/project/blob/main/script.js?raw=true
[Mon Mar 09 21:11:58.531668 2026] [:error] [pid 5779:tid 5858] [client 41.140.64.42:58148] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.uat"] [unique_id "aa7HHgaHbHwtklaurgU34AAAAAM"], referer: https://www.google.com/
[Mon Mar 09 21:12:02.851388 2026] [:error] [pid 44503:tid 44524] [client 41.140.64.42:58652] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.uat."] [unique_id "aa7HIspGKFA8jlKDDh0bsAAAAdE"], referer: https://news.google.com/
[Mon Mar 09 21:12:08.463913 2026] [:error] [pid 44503:tid 44510] [client 41.140.64.42:59283] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.uat/"] [unique_id "aa7HKMpGKFA8jlKDDh0bvgAAAcM"], referer: https://www.google.com/search?q=weather+new+york&client=firefox-b-d
[Mon Mar 09 21:12:12.307682 2026] [:error] [pid 44503:tid 44512] [client 41.140.64.42:59559] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.uat%00"] [unique_id "aa7HLMpGKFA8jlKDDh0bwgAAAcU"], referer: https://www.google.es/
[Mon Mar 09 21:12:19.695802 2026] [:error] [pid 5787:tid 5944] [client 41.140.64.42:60711] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.uat%20"] [unique_id "aa7HM7GpMgQ18gGUaFPcQAAAAJY"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Mon Mar 09 21:12:26.958878 2026] [:error] [pid 5787:tid 5930] [client 41.140.64.42:60864] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.deploy"] [unique_id "aa7HOrGpMgQ18gGUaFPcXwAAAIg"], referer: https://github.com/search?q=topic%3Acooking-recipes&type=repositories
[Mon Mar 09 21:12:29.395621 2026] [:error] [pid 5783:tid 5915] [client 41.140.64.42:61748] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.deploy."] [unique_id "aa7HPQdiZJ1FQPtsTNTbeAAAAFU"], referer: https://www.startpage.com/sp/search?query=coffee+recipes
[Mon Mar 09 21:12:30.812949 2026] [:error] [pid 5779:tid 5879] [client 41.140.64.42:62055] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.deploy/"] [unique_id "aa7HPgaHbHwtklaurgU4HwAAABg"], referer: https://bitbucket.org/dashboard/overview
[Mon Mar 09 21:12:32.188134 2026] [:error] [pid 5787:tid 5944] [client 41.140.64.42:62236] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.deploy%00"] [unique_id "aa7HQLGpMgQ18gGUaFPcbAAAAJY"], referer: https://www.cloudflare.com/
[Mon Mar 09 21:12:34.571355 2026] [:error] [pid 44503:tid 44520] [client 41.140.64.42:62416] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.deploy%20"] [unique_id "aa7HQspGKFA8jlKDDh0b8QAAAc0"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Mon Mar 09 21:12:35.981809 2026] [:error] [pid 44503:tid 44513] [client 41.140.64.42:62703] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.deploy%20"] [unique_id "aa7HQ8pGKFA8jlKDDh0b9wAAAcY"], referer: https://l.facebook.com/
[Mon Mar 09 21:13:04.050577 2026] [:error] [pid 5787:tid 5930] [client 41.140.64.42:65114] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php"] [unique_id "aa7HYLGpMgQ18gGUaFPc2wAAAIg"], referer: https://www.cloudflare.com/
[Mon Mar 09 21:13:05.469881 2026] [:error] [pid 5783:tid 5912] [client 41.140.64.42:50063] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php."] [unique_id "aa7HYQdiZJ1FQPtsTNTbhAAAAFI"], referer: https://gitlab.com/explore/projects?sort=latest_activity_desc
[Mon Mar 09 21:13:06.882043 2026] [:error] [pid 17485:tid 17508] [client 41.140.64.42:50223] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php/"] [unique_id "aa7HYtQOL_kxQEc1PTC2fgAAARQ"], referer: https://www.amazon.com/
[Mon Mar 09 21:13:09.280930 2026] [:error] [pid 44503:tid 44521] [client 41.140.64.42:50393] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php%00"] [unique_id "aa7HZcpGKFA8jlKDDh0cLgAAAc4"], referer: https://www.google.co.uk/
[Mon Mar 09 21:13:11.596084 2026] [:error] [pid 5787:tid 5934] [client 41.140.64.42:50683] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php%20"] [unique_id "aa7HZ7GpMgQ18gGUaFPc7wAAAIw"], referer: https://news.google.com/
[Mon Mar 09 21:13:15.954038 2026] [:error] [pid 5779:tid 5874] [client 41.140.64.42:51184] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php%20"] [unique_id "aa7HawaHbHwtklaurgU4RAAAABM"], referer: https://www.startpage.com/sp/search?query=coffee+recipes
[Mon Mar 09 21:14:09.990461 2026] [:error] [pid 44503:tid 44514] [client 41.140.64.42:56157] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/config.ini"] [unique_id "aa7HocpGKFA8jlKDDh0cpwAAAcc"], referer: https://www.reddit.com/r/all/
[Mon Mar 09 21:14:34.633861 2026] [:error] [pid 44503:tid 44527] [client 41.140.64.42:56157] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web.config"] [unique_id "aa7HuspGKFA8jlKDDh0dWQAAAdQ"], referer: https://www.qwant.com/
[Mon Mar 09 21:14:37.015061 2026] [:error] [pid 5783:tid 5909] [client 41.140.64.42:51266] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web.config."] [unique_id "aa7HvQdiZJ1FQPtsTNTcCgAAAE8"], referer: https://www.google.es/
[Mon Mar 09 21:14:38.373162 2026] [:error] [pid 44503:tid 44509] [client 41.140.64.42:51533] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web.config/"] [unique_id "aa7HvspGKFA8jlKDDh0dXwAAAcI"], referer: https://www.reddit.com/r/cooking/search?q=dinner+ideas&restrict_sr=1&t=week
[Mon Mar 09 21:14:39.703804 2026] [:error] [pid 44503:tid 44523] [client 41.140.64.42:51683] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web.config%00"] [unique_id "aa7Hv8pGKFA8jlKDDh0dbwAAAdA"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Mon Mar 09 21:14:43.186581 2026] [:error] [pid 5787:tid 5945] [client 41.140.64.42:51813] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web.config%20"] [unique_id "aa7Hw7GpMgQ18gGUaFPdmAAAAJc"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Mon Mar 09 21:14:45.564598 2026] [:error] [pid 17485:tid 17512] [client 41.140.64.42:52172] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web.config%20"] [unique_id "aa7HxdQOL_kxQEc1PTC2jgAAARg"], referer: https://medium.com/search?q=productivity+tips
[Mon Mar 09 21:14:49.956986 2026] [:error] [pid 44504:tid 44550] [client 41.140.64.42:52737] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/app.config"] [unique_id "aa7HyXri56-8oxPimmhLCAAAAhA"], referer: https://www.quora.com/How-do-I-make-pizza-dough
[Mon Mar 09 21:15:14.188715 2026] [:error] [pid 44504:tid 44536] [client 41.140.64.42:52737] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php"] [unique_id "aa7H4nri56-8oxPimmhLKwAAAgI"], referer: https://developer.mozilla.org/en-US/search?q=javascript+array&locale=en-US
[Mon Mar 09 21:15:15.581188 2026] [:error] [pid 6074:tid 6115] [client 41.140.64.42:55392] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php."] [unique_id "aa7H4xgvXHMVGYw_ElwIXwAAANg"], referer: https://github.com/
[Mon Mar 09 21:15:16.984669 2026] [:error] [pid 44503:tid 44531] [client 41.140.64.42:55541] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php/"] [unique_id "aa7H5MpGKFA8jlKDDh0doQAAAdg"], referer: https://twitter.com/search?q=%23travel&src=typed_query&f=live
[Mon Mar 09 21:15:20.832278 2026] [:error] [pid 44503:tid 44511] [client 41.140.64.42:55671] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php%00"] [unique_id "aa7H6MpGKFA8jlKDDh0drAAAAcQ"], referer: https://developer.mozilla.org/en-US/search?q=javascript+array&locale=en-US
[Mon Mar 09 21:15:22.193157 2026] [:error] [pid 44504:tid 44546] [client 41.140.64.42:56089] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php%20"] [unique_id "aa7H6nri56-8oxPimmhLLwAAAgw"], referer: https://search.yahoo.com/search?p=learn+spanish+online+free&fr=yfp-t
[Mon Mar 09 21:15:23.539313 2026] [:error] [pid 44504:tid 44539] [client 41.140.64.42:56228] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php%20"] [unique_id "aa7H63ri56-8oxPimmhLNAAAAgU"], referer: https://medium.com/search?q=productivity+tips
[Mon Mar 09 21:15:44.246897 2026] [:error] [pid 44463:tid 44490] [client 41.140.64.42:58592] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/.config"] [unique_id "aa7IAC5tVkWjZvDknB0n5wAAAZM"], referer: https://news.google.com/
[Mon Mar 09 21:15:57.124605 2026] [:error] [pid 44463:tid 44473] [client 41.140.64.42:58592] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.htpasswd"] [unique_id "aa7IDS5tVkWjZvDknB0n8AAAAYI"], referer: https://www.bing.com/search?q=how+to+tie+a+tie&qs=n&first=5
[Mon Mar 09 21:15:58.499725 2026] [:error] [pid 44503:tid 44507] [client 41.140.64.42:60156] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.htpasswd."] [unique_id "aa7IDspGKFA8jlKDDh0d7gAAAcA"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Mon Mar 09 21:16:02.663837 2026] [:error] [pid 5779:tid 5875] [client 41.140.64.42:60300] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.htpasswd/"] [unique_id "aa7IEgaHbHwtklaurgU5eAAAABQ"], referer: https://www.amazon.com/
[Mon Mar 09 21:16:06.275739 2026] [:error] [pid 5787:tid 5938] [client 41.140.64.42:60734] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.htpasswd%00"] [unique_id "aa7IFrGpMgQ18gGUaFPeJAAAAJA"], referer: https://www.bing.com/search?q=latest+movies+2026&form=QBLH
[Mon Mar 09 21:16:11.578723 2026] [:error] [pid 5787:tid 5924] [client 41.140.64.42:61472] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.htpasswd%20"] [unique_id "aa7IG7GpMgQ18gGUaFPeNQAAAII"], referer: https://github.com/user/project/blob/main/script.js?raw=true
[Mon Mar 09 21:16:14.009952 2026] [:error] [pid 44503:tid 44509] [client 41.140.64.42:61617] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.htpasswd%20"] [unique_id "aa7IHspGKFA8jlKDDh0d_gAAAcI"], referer: https://github.com/search?q=topic%3Acooking-recipes&type=repositories
[Mon Mar 09 21:16:17.497646 2026] [:error] [pid 44503:tid 44509] [client 41.140.64.42:61866] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/config.inc"] [unique_id "aa7IIcpGKFA8jlKDDh0eDAAAAcI"], referer: https://www.youtube.com/results?search_query=
[Mon Mar 09 21:16:41.849876 2026] [:error] [pid 44503:tid 44522] [client 41.140.64.42:63179] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/db.inc"] [unique_id "aa7IOcpGKFA8jlKDDh0eZQAAAc8"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Mon Mar 09 21:16:55.078499 2026] [:error] [pid 44503:tid 44524] [client 41.140.64.42:63179] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/database.inc"] [unique_id "aa7IR8pGKFA8jlKDDh0ehwAAAdE"], referer: https://www.youtube.com/results?search_query=guitar+tutorial+for+beginners
[Mon Mar 09 21:17:09.687969 2026] [:error] [pid 44503:tid 44517] [client 41.140.64.42:63179] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".asa"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/config.asa"] [unique_id "aa7IVcpGKFA8jlKDDh0eqgAAAco"], referer: https://www.facebook.com/
[Mon Mar 09 21:17:27.975768 2026] [:error] [pid 44503:tid 44525] [client 41.140.64.42:65435] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||makifim.com.au|F|2"] [data ".asa"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "makifim.com.au"] [uri "/global.asa"] [unique_id "aa7IZ8pGKFA8jlKDDh0e2gAAAdI"], referer: https://medium.com/
[Mon Mar 09 21:17:48.662859 2026] [:error] [pid 44503:tid 44517] [client 41.140.64.42:65435] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/composer.json"] [unique_id "aa7IfMpGKFA8jlKDDh0fHAAAAco"], referer: https://www.nytimes.com/section/technology?action=click&pgtype=Article&state=default
[Mon Mar 09 21:17:56.542779 2026] [:error] [pid 5783:tid 5906] [client 41.140.64.42:52497] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/composer.json."] [unique_id "aa7IhAdiZJ1FQPtsTNTcbAAAAEw"], referer: https://www.reddit.com/r/cooking/search?q=dinner+ideas&restrict_sr=1&t=week
[Mon Mar 09 21:18:01.134664 2026] [:error] [pid 5787:tid 5931] [client 41.140.64.42:53464] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/composer.json/"] [unique_id "aa7IibGpMgQ18gGUaFPfSQAAAIk"], referer: https://www.youtube.com/results?search_query=guitar+tutorial+for+beginners
[Mon Mar 09 21:18:04.789153 2026] [:error] [pid 5787:tid 5936] [client 41.140.64.42:53600] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/composer.json%00"] [unique_id "aa7IjLGpMgQ18gGUaFPfTgAAAI4"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Mon Mar 09 21:18:09.545140 2026] [:error] [pid 5783:tid 5910] [client 41.140.64.42:54356] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/composer.json%20"] [unique_id "aa7IkQdiZJ1FQPtsTNTceAAAAFA"], referer: https://www.linkedin.com/
[Mon Mar 09 21:18:13.157863 2026] [:error] [pid 44503:tid 44529] [client 41.140.64.42:54812] [client 41.140.64.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/composer.json%20"] [unique_id "aa7IlcpGKFA8jlKDDh0fXAAAAdY"], referer: https://www.cloudflare.com/
[Tue Mar 10 05:05:17.777141 2026] [:error] [pid 8193:tid 8236] [client 104.28.214.113:54391] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aa82DR27LTs3sNpMSvwJswAAANA"]
[Tue Mar 10 05:23:21.625190 2026] [:error] [pid 7912:tid 8082] [client 62.60.131.218:57975] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aa86SSV7wJYuQ3GZEAVuWwAAAJI"]
[Tue Mar 10 05:40:48.673523 2026] [:error] [pid 32149:tid 32165] [client 62.60.131.218:50432] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aa8-YGdqak0GlFD4uMIpDQAAAQU"]
[Tue Mar 10 10:29:00.088308 2026] [:error] [pid 42730:tid 42744] [client 4.199.143.143:30785] [client 4.199.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aa-B7Mhla5zfkJ-81FARvwAAAcw"]
[Tue Mar 10 10:29:00.346643 2026] [:error] [pid 39996:tid 40029] [client 4.199.143.143:30787] [client 4.199.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aa-B7P5uf5_ai0O9Bsz_twAAABA"]
[Tue Mar 10 10:29:06.029499 2026] [:error] [pid 39996:tid 40027] [client 4.199.143.143:30787] [client 4.199.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aa-B8v5uf5_ai0O9Bsz_vQAAAA4"]
[Tue Mar 10 17:05:52.911493 2026] [autoindex:error] [pid 21400:tid 21404] [client 139.59.32.166:56665] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
2026/03/11 03:27:12 [error] 3469#3469: *409403 connect() failed (111: Connection refused) while connecting to upstream, client: 103.4.122.14, server: makifim.com.au, request: "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=standard&cronKey=34197c99d4dbba7ec8df5fcf040ba36f&signature=3c8b88b0217fa61c2ccd3a269a3344e26efefd8f880914aa096baa5f36c4a0aa HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=standard&cronKey=34197c99d4dbba7ec8df5fcf040ba36f&signature=3c8b88b0217fa61c2ccd3a269a3344e26efefd8f880914aa096baa5f36c4a0aa", host: "makifim.com.au"
2026/03/11 03:27:12 [error] 3467#3467: *409407 connect() failed (111: Connection refused) while connecting to upstream, client: 103.4.122.14, server: makifim.com.au, request: "POST /wp-cron.php?doing_wp_cron=1773170832.4095880985260009765625 HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-cron.php?doing_wp_cron=1773170832.4095880985260009765625", host: "makifim.com.au"
[Wed Mar 11 03:47:14.807942 2026] [proxy_fcgi:error] [pid 6117:tid 6156] [client 103.4.122.14:53066] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Mar 11 03:47:26.751250 2026] [proxy_fcgi:error] [pid 6222:tid 6245] [client 103.4.122.14:53332] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Mar 11 05:21:58.858866 2026] [:error] [pid 6119:tid 6203] [client 64.89.163.10:43498] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "abCLdm9mEGP4iomVkSYsIAAAAIw"]
[Wed Mar 11 05:21:59.412407 2026] [:error] [pid 6119:tid 6197] [client 64.89.163.10:43510] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "abCLd29mEGP4iomVkSYsIwAAAIY"]
[Wed Mar 11 05:22:00.026959 2026] [:error] [pid 6118:tid 6167] [client 64.89.163.10:43528] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "abCLeFXprP7_-KEgC-0BaQAAAEQ"]
[Wed Mar 11 05:22:02.603391 2026] [:error] [pid 6118:tid 6174] [client 64.89.163.10:43578] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "abCLelXprP7_-KEgC-0BagAAAEs"]
[Wed Mar 11 06:39:20.445608 2026] [:error] [pid 6222:tid 6246] [client 37.140.254.90:43348] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "abCdmHs7MIv-0SYBFu2pMwAAANY"]
[Wed Mar 11 06:39:21.407351 2026] [:error] [pid 6222:tid 6231] [client 37.140.254.90:43360] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/semrush/x.php"] [unique_id "abCdmXs7MIv-0SYBFu2pOAAAAMc"]
[Wed Mar 11 06:39:22.005563 2026] [:error] [pid 6222:tid 6240] [client 37.140.254.90:43366] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "abCdmns7MIv-0SYBFu2pOQAAANA"]
[Wed Mar 11 06:39:22.621449 2026] [:error] [pid 6222:tid 6229] [client 37.140.254.90:43374] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "abCdmns7MIv-0SYBFu2pPQAAAMU"]
[Wed Mar 11 06:39:23.508943 2026] [:error] [pid 6222:tid 6232] [client 37.140.254.90:43382] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WPManager/up.php"] [unique_id "abCdm3s7MIv-0SYBFu2pPgAAAMg"]
[Wed Mar 11 06:39:25.610074 2026] [:error] [pid 6119:tid 6194] [client 37.140.254.90:43416] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/builder-and-developer/inc/tgm/error.php"] [unique_id "abCdnW9mEGP4iomVkSZEawAAAIM"]
[Wed Mar 11 06:39:26.596689 2026] [:error] [pid 6222:tid 6228] [client 37.140.254.90:43420] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-responsive-menu/inc/js/ace-min-noconflict/403x.php"] [unique_id "abCdnns7MIv-0SYBFu2pQwAAAMQ"]
[Wed Mar 11 06:39:28.120996 2026] [:error] [pid 6119:tid 6199] [client 37.140.254.90:43444] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "abCdoG9mEGP4iomVkSZEbgAAAIg"]
[Wed Mar 11 06:39:30.522832 2026] [:error] [pid 6222:tid 6239] [client 37.140.254.90:43460] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "abCdons7MIv-0SYBFu2pTAAAAM8"]
[Wed Mar 11 06:39:32.814845 2026] [:error] [pid 6119:tid 6201] [client 37.140.254.90:43486] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "abCdpG9mEGP4iomVkSZEdwAAAIo"]
[Wed Mar 11 06:39:33.715515 2026] [:error] [pid 6222:tid 6226] [client 37.140.254.90:43494] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "abCdpXs7MIv-0SYBFu2pUgAAAMI"]
[Wed Mar 11 06:39:34.613120 2026] [:error] [pid 6119:tid 6195] [client 37.140.254.90:43502] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "abCdpm9mEGP4iomVkSZEfQAAAIQ"]
[Wed Mar 11 06:39:35.220688 2026] [:error] [pid 6119:tid 6191] [client 37.140.254.90:43510] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "abCdp29mEGP4iomVkSZEfgAAAIA"]
[Wed Mar 11 06:39:35.914172 2026] [:error] [pid 6119:tid 6199] [client 37.140.254.90:43516] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abCdp29mEGP4iomVkSZEfwAAAIg"]
[Wed Mar 11 06:39:36.414554 2026] [:error] [pid 6222:tid 6244] [client 37.140.254.90:43520] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpforms/class-wpforms-update.php"] [unique_id "abCdqHs7MIv-0SYBFu2pVgAAANQ"]
[Wed Mar 11 06:39:36.919682 2026] [:error] [pid 6222:tid 6236] [client 37.140.254.90:43528] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "abCdqHs7MIv-0SYBFu2pWAAAAMw"]
[Wed Mar 11 06:39:37.420945 2026] [:error] [pid 6222:tid 6229] [client 37.140.254.90:43534] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "abCdqXs7MIv-0SYBFu2pWQAAAMU"]
[Wed Mar 11 06:39:39.119049 2026] [:error] [pid 6222:tid 6237] [client 37.140.254.90:43564] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "abCdq3s7MIv-0SYBFu2pXAAAAM0"]
[Wed Mar 11 06:39:41.007124 2026] [:error] [pid 6222:tid 6244] [client 37.140.254.90:43596] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "abCdrXs7MIv-0SYBFu2pZQAAANQ"]
[Wed Mar 11 06:39:43.498624 2026] [:error] [pid 6222:tid 6241] [client 37.140.254.90:43624] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "abCdr3s7MIv-0SYBFu2pagAAANE"]
[Wed Mar 11 06:39:44.716828 2026] [:error] [pid 6222:tid 6234] [client 37.140.254.90:43640] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-social-elf.php"] [unique_id "abCdsHs7MIv-0SYBFu2pbQAAAMo"]
[Wed Mar 11 06:39:45.121154 2026] [:error] [pid 6118:tid 6169] [client 37.140.254.90:43648] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "abCdsVXprP7_-KEgC-0RlwAAAEY"]
[Wed Mar 11 06:39:46.012725 2026] [:error] [pid 6222:tid 6230] [client 37.140.254.90:43656] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "abCdsns7MIv-0SYBFu2pcAAAAMY"]
[Wed Mar 11 06:39:47.210917 2026] [:error] [pid 6222:tid 6232] [client 37.140.254.90:43668] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "abCds3s7MIv-0SYBFu2pcgAAAMg"]
[Wed Mar 11 06:39:47.921377 2026] [:error] [pid 6119:tid 6195] [client 37.140.254.90:43678] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "abCds29mEGP4iomVkSZEhwAAAIQ"]
[Wed Mar 11 06:39:48.493771 2026] [:error] [pid 6118:tid 6186] [client 37.140.254.90:43688] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "abCdtFXprP7_-KEgC-0RnwAAAFc"]
[Wed Mar 11 06:39:49.119038 2026] [:error] [pid 6118:tid 6166] [client 37.140.254.90:43704] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "abCdtVXprP7_-KEgC-0RoAAAAEM"]
[Wed Mar 11 06:39:49.816016 2026] [:error] [pid 6222:tid 6238] [client 37.140.254.90:43716] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "abCdtXs7MIv-0SYBFu2pdgAAAM4"]
[Wed Mar 11 06:39:50.220799 2026] [:error] [pid 6119:tid 6197] [client 37.140.254.90:43724] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "abCdtm9mEGP4iomVkSZEjAAAAIY"]
[Wed Mar 11 06:39:52.795019 2026] [:error] [pid 6222:tid 6225] [client 37.140.254.90:43754] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "abCduHs7MIv-0SYBFu2pfAAAAME"]
[Wed Mar 11 06:39:53.607508 2026] [:error] [pid 6222:tid 6233] [client 37.140.254.90:43762] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "abCduXs7MIv-0SYBFu2pfgAAAMk"]
[Wed Mar 11 06:39:54.617552 2026] [:error] [pid 6222:tid 6235] [client 37.140.254.90:43776] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "abCduns7MIv-0SYBFu2pggAAAMs"]
[Wed Mar 11 06:39:55.114674 2026] [:error] [pid 6222:tid 6237] [client 37.140.254.90:43784] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "abCdu3s7MIv-0SYBFu2phQAAAM0"]
[Wed Mar 11 06:39:55.514900 2026] [:error] [pid 6118:tid 6181] [client 37.140.254.90:43790] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "abCdu1XprP7_-KEgC-0RqQAAAFI"]
[Wed Mar 11 06:39:56.715389 2026] [:error] [pid 6222:tid 6242] [client 37.140.254.90:43802] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "abCdvHs7MIv-0SYBFu2piAAAANI"]
[Wed Mar 11 06:39:57.516091 2026] [:error] [pid 6222:tid 6241] [client 37.140.254.90:43812] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "abCdvXs7MIv-0SYBFu2piwAAANE"]
[Wed Mar 11 06:39:58.015826 2026] [:error] [pid 6222:tid 6225] [client 37.140.254.90:43816] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "abCdvns7MIv-0SYBFu2pjAAAAME"]
[Wed Mar 11 06:39:58.620481 2026] [:error] [pid 6222:tid 6243] [client 37.140.254.90:43824] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "abCdvns7MIv-0SYBFu2pjgAAANM"]
[Wed Mar 11 06:39:59.396556 2026] [:error] [pid 6119:tid 6203] [client 37.140.254.90:43832] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "abCdv29mEGP4iomVkSZElwAAAIw"]
[Wed Mar 11 06:40:00.114177 2026] [:error] [pid 6119:tid 6195] [client 37.140.254.90:43838] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "abCdwG9mEGP4iomVkSZEmgAAAIQ"]
[Wed Mar 11 06:40:00.511842 2026] [:error] [pid 6119:tid 6200] [client 37.140.254.90:43840] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "abCdwG9mEGP4iomVkSZEmwAAAIk"]
[Wed Mar 11 06:40:01.406962 2026] [:error] [pid 6119:tid 6191] [client 37.140.254.90:43852] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "abCdwW9mEGP4iomVkSZEnQAAAIA"]
[Wed Mar 11 06:40:02.920439 2026] [:error] [pid 6119:tid 6207] [client 37.140.254.90:43866] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "abCdwm9mEGP4iomVkSZEnwAAAJA"]
[Wed Mar 11 06:40:04.123196 2026] [:error] [pid 6119:tid 6213] [client 37.140.254.90:43878] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "abCdxG9mEGP4iomVkSZEoAAAAJY"]
[Wed Mar 11 06:40:05.394790 2026] [:error] [pid 6222:tid 6238] [client 37.140.254.90:43894] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "abCdxXs7MIv-0SYBFu2plgAAAM4"]
[Wed Mar 11 06:40:05.919078 2026] [:error] [pid 6222:tid 6231] [client 37.140.254.90:43906] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "abCdxXs7MIv-0SYBFu2pmQAAAMc"]
[Wed Mar 11 06:40:06.809423 2026] [:error] [pid 6222:tid 6225] [client 37.140.254.90:43920] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "abCdxns7MIv-0SYBFu2pnQAAAME"]
[Wed Mar 11 06:40:07.994681 2026] [:error] [pid 6222:tid 6224] [client 37.140.254.90:43936] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "abCdx3s7MIv-0SYBFu2poQAAAMA"]
[Wed Mar 11 06:40:08.916047 2026] [:error] [pid 6119:tid 6195] [client 37.140.254.90:43958] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd-2/pwnd.php"] [unique_id "abCdyG9mEGP4iomVkSZEpwAAAIQ"]
[Wed Mar 11 06:40:11.305105 2026] [:error] [pid 6222:tid 6235] [client 37.140.254.90:43998] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "abCdy3s7MIv-0SYBFu2psAAAAMs"]
[Wed Mar 11 06:40:12.794396 2026] [:error] [pid 6119:tid 6191] [client 37.140.254.90:44028] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "abCdzG9mEGP4iomVkSZErQAAAIA"]
[Wed Mar 11 06:40:13.713479 2026] [:error] [pid 6222:tid 6248] [client 37.140.254.90:44046] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "abCdzXs7MIv-0SYBFu2pvgAAANg"]
[Wed Mar 11 06:40:14.511050 2026] [:error] [pid 6222:tid 6225] [client 37.140.254.90:44070] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abCdzns7MIv-0SYBFu2pxgAAAME"]
[Wed Mar 11 06:40:15.512079 2026] [:error] [pid 6118:tid 6180] [client 37.140.254.90:44082] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "abCdz1XprP7_-KEgC-0RuAAAAFE"]
[Wed Mar 11 06:40:16.221057 2026] [:error] [pid 6119:tid 6210] [client 37.140.254.90:44100] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/ubh/ubh.php"] [unique_id "abCd0G9mEGP4iomVkSZEsgAAAJM"]
[Wed Mar 11 06:40:17.016712 2026] [:error] [pid 6222:tid 6242] [client 37.140.254.90:44114] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "abCd0Xs7MIv-0SYBFu2p0QAAANI"]
[Wed Mar 11 06:40:18.007169 2026] [:error] [pid 6119:tid 6194] [client 37.140.254.90:44138] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "abCd0m9mEGP4iomVkSZEuAAAAIM"]
[Wed Mar 11 06:40:18.608626 2026] [:error] [pid 6119:tid 6201] [client 37.140.254.90:44152] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "abCd0m9mEGP4iomVkSZEuwAAAIo"]
[Wed Mar 11 06:40:19.119394 2026] [:error] [pid 6119:tid 6191] [client 37.140.254.90:44158] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "abCd029mEGP4iomVkSZEvgAAAIA"]
[Wed Mar 11 06:40:20.614497 2026] [:error] [pid 6222:tid 6228] [client 37.140.254.90:44182] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "abCd1Hs7MIv-0SYBFu2p3AAAAMQ"]
[Wed Mar 11 06:40:22.394798 2026] [:error] [pid 6222:tid 6234] [client 37.140.254.90:44222] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "abCd1ns7MIv-0SYBFu2p4wAAAMo"]
[Wed Mar 11 06:40:23.514322 2026] [:error] [pid 6119:tid 6194] [client 37.140.254.90:44234] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "abCd129mEGP4iomVkSZExwAAAIM"]
[Wed Mar 11 06:40:24.920380 2026] [:error] [pid 6222:tid 6224] [client 37.140.254.90:44256] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "abCd2Hs7MIv-0SYBFu2p6wAAAMA"]
[Wed Mar 11 06:40:25.412552 2026] [:error] [pid 6117:tid 6147] [client 37.140.254.90:44270] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "abCd2cU0P9gyi5rKFp6fKAAAAAs"]
[Wed Mar 11 06:40:26.017551 2026] [:error] [pid 6222:tid 6233] [client 37.140.254.90:44282] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abCd2ns7MIv-0SYBFu2p7gAAAMk"]
[Wed Mar 11 06:40:26.617849 2026] [:error] [pid 6222:tid 6225] [client 37.140.254.90:44296] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abCd2ns7MIv-0SYBFu2p8QAAAME"]
[Wed Mar 11 06:40:27.314571 2026] [:error] [pid 6222:tid 6242] [client 37.140.254.90:44312] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "abCd23s7MIv-0SYBFu2p9wAAANI"]
[Wed Mar 11 06:40:27.914171 2026] [:error] [pid 6119:tid 6200] [client 37.140.254.90:44322] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "abCd229mEGP4iomVkSZEzAAAAIk"]
[Wed Mar 11 06:40:28.418832 2026] [:error] [pid 6119:tid 6198] [client 37.140.254.90:44328] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abCd3G9mEGP4iomVkSZEzQAAAIc"]
[Wed Mar 11 06:40:30.113187 2026] [:error] [pid 6222:tid 6242] [client 37.140.254.90:44356] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "abCd3ns7MIv-0SYBFu2qAwAAANI"]
[Wed Mar 11 06:40:30.715802 2026] [:error] [pid 6119:tid 6192] [client 37.140.254.90:44362] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "abCd3m9mEGP4iomVkSZEzgAAAIE"]
[Wed Mar 11 06:40:31.116924 2026] [:error] [pid 6119:tid 6210] [client 37.140.254.90:44372] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "abCd329mEGP4iomVkSZEzwAAAJM"]
[Wed Mar 11 06:40:34.297339 2026] [:error] [pid 6119:tid 6195] [client 37.140.254.90:44428] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "abCd4m9mEGP4iomVkSZE2AAAAIQ"]
[Wed Mar 11 06:40:35.715579 2026] [:error] [pid 6119:tid 6200] [client 37.140.254.90:44450] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "abCd429mEGP4iomVkSZE3AAAAIk"]
[Wed Mar 11 06:40:36.903378 2026] [:error] [pid 6222:tid 6239] [client 37.140.254.90:44468] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "abCd5Hs7MIv-0SYBFu2qGQAAAM8"]
[Wed Mar 11 06:40:37.817097 2026] [:error] [pid 6222:tid 6225] [client 37.140.254.90:44478] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "abCd5Xs7MIv-0SYBFu2qGwAAAME"]
[Wed Mar 11 06:40:38.413220 2026] [:error] [pid 6222:tid 6240] [client 37.140.254.90:44482] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "abCd5ns7MIv-0SYBFu2qHQAAANA"]
[Wed Mar 11 06:40:40.402842 2026] [:error] [pid 6119:tid 6206] [client 37.140.254.90:44500] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "abCd6G9mEGP4iomVkSZE3wAAAI8"]
[Wed Mar 11 06:40:41.422967 2026] [:error] [pid 6222:tid 6237] [client 37.140.254.90:44510] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "abCd6Xs7MIv-0SYBFu2qIAAAAM0"]
[Wed Mar 11 06:40:42.610687 2026] [:error] [pid 6117:tid 6138] [client 37.140.254.90:44520] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "abCd6sU0P9gyi5rKFp6fLwAAAAI"]
[Wed Mar 11 06:40:43.693446 2026] [:error] [pid 6118:tid 6175] [client 37.140.254.90:44544] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options.php"] [unique_id "abCd61XprP7_-KEgC-0R1QAAAEw"]
[Wed Mar 11 06:40:44.605654 2026] [:error] [pid 6118:tid 6184] [client 37.140.254.90:44554] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "abCd7FXprP7_-KEgC-0R2QAAAFU"]
[Wed Mar 11 06:40:45.005695 2026] [:error] [pid 6119:tid 6194] [client 37.140.254.90:44560] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "abCd7W9mEGP4iomVkSZE5AAAAIM"]
[Wed Mar 11 06:40:45.695800 2026] [:error] [pid 6119:tid 6211] [client 37.140.254.90:44572] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "abCd7W9mEGP4iomVkSZE6gAAAJQ"]
[Wed Mar 11 06:40:46.315830 2026] [:error] [pid 6119:tid 6200] [client 37.140.254.90:44584] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "abCd7m9mEGP4iomVkSZE7AAAAIk"]
[Wed Mar 11 06:40:46.814445 2026] [:error] [pid 6117:tid 6158] [client 37.140.254.90:44590] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function.php"] [unique_id "abCd7sU0P9gyi5rKFp6fMwAAABY"]
[Wed Mar 11 06:40:48.105139 2026] [:error] [pid 6119:tid 6210] [client 37.140.254.90:44622] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "abCd8G9mEGP4iomVkSZE8gAAAJM"]
[Wed Mar 11 06:40:49.514615 2026] [:error] [pid 6222:tid 6228] [client 37.140.254.90:44638] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "abCd8Xs7MIv-0SYBFu2qLAAAAMQ"]
[Wed Mar 11 06:40:51.116354 2026] [:error] [pid 6222:tid 6241] [client 37.140.254.90:44658] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "abCd83s7MIv-0SYBFu2qLQAAANE"]
[Wed Mar 11 06:40:51.794474 2026] [:error] [pid 6117:tid 6152] [client 37.140.254.90:44666] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "abCd88U0P9gyi5rKFp6fPwAAABA"]
[Wed Mar 11 06:40:52.619198 2026] [:error] [pid 6222:tid 6248] [client 37.140.254.90:44676] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bypass.php"] [unique_id "abCd9Hs7MIv-0SYBFu2qLgAAANg"]
[Wed Mar 11 06:40:54.014370 2026] [:error] [pid 6118:tid 6164] [client 37.140.254.90:44696] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "abCd9lXprP7_-KEgC-0R4AAAAEE"]
[Wed Mar 11 06:40:55.221405 2026] [:error] [pid 6222:tid 6226] [client 37.140.254.90:44714] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "abCd93s7MIv-0SYBFu2qNAAAAMI"]
[Wed Mar 11 06:40:56.013743 2026] [:error] [pid 6119:tid 6209] [client 37.140.254.90:44724] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "abCd-G9mEGP4iomVkSZFAQAAAJI"]
[Wed Mar 11 06:40:56.413978 2026] [:error] [pid 6222:tid 6239] [client 37.140.254.90:44730] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "abCd-Hs7MIv-0SYBFu2qOgAAAM8"]
[Wed Mar 11 06:40:57.519750 2026] [:error] [pid 6222:tid 6241] [client 37.140.254.90:44748] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "abCd-Xs7MIv-0SYBFu2qQAAAANE"]
[Wed Mar 11 06:40:57.918219 2026] [:error] [pid 6222:tid 6243] [client 37.140.254.90:44756] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "abCd-Xs7MIv-0SYBFu2qQgAAANM"]
[Wed Mar 11 06:40:58.604048 2026] [:error] [pid 6222:tid 6226] [client 37.140.254.90:44758] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "abCd-ns7MIv-0SYBFu2qQwAAAMI"]
[Wed Mar 11 06:40:59.023355 2026] [:error] [pid 6222:tid 6245] [client 37.140.254.90:44768] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style2.php"] [unique_id "abCd-3s7MIv-0SYBFu2qRgAAANU"]
[Wed Mar 11 06:40:59.718028 2026] [:error] [pid 6222:tid 6247] [client 37.140.254.90:44778] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "abCd-3s7MIv-0SYBFu2qSgAAANc"]
[Wed Mar 11 06:41:00.708636 2026] [:error] [pid 6222:tid 6242] [client 37.140.254.90:44786] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "abCd_Hs7MIv-0SYBFu2qSwAAANI"]
[Wed Mar 11 06:41:01.508629 2026] [:error] [pid 6117:tid 6141] [client 37.140.254.90:44800] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/login.php"] [unique_id "abCd_cU0P9gyi5rKFp6fRwAAAAU"]
[Wed Mar 11 06:41:02.322055 2026] [:error] [pid 6118:tid 6171] [client 37.140.254.90:44810] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "abCd_lXprP7_-KEgC-0R5AAAAEg"]
[Wed Mar 11 06:41:04.118404 2026] [:error] [pid 6222:tid 6245] [client 37.140.254.90:44830] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "abCeAHs7MIv-0SYBFu2qVAAAANU"]
[Wed Mar 11 06:41:05.121323 2026] [:error] [pid 6222:tid 6231] [client 37.140.254.90:44846] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "abCeAXs7MIv-0SYBFu2qWgAAAMc"]
[Wed Mar 11 06:41:05.918159 2026] [:error] [pid 6222:tid 6241] [client 37.140.254.90:44854] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/demo.php"] [unique_id "abCeAXs7MIv-0SYBFu2qXQAAANE"]
[Wed Mar 11 06:41:07.212502 2026] [:error] [pid 6222:tid 6235] [client 37.140.254.90:44870] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/moon.php"] [unique_id "abCeA3s7MIv-0SYBFu2qYQAAAMs"]
[Wed Mar 11 06:41:08.014421 2026] [:error] [pid 6222:tid 6229] [client 37.140.254.90:44882] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "abCeBHs7MIv-0SYBFu2qZgAAAMU"]
[Wed Mar 11 06:41:08.421644 2026] [:error] [pid 6118:tid 6169] [client 37.140.254.90:44894] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "abCeBFXprP7_-KEgC-0R7AAAAEY"]
[Wed Mar 11 06:41:09.218404 2026] [:error] [pid 6118:tid 6165] [client 37.140.254.90:44902] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/user.php"] [unique_id "abCeBVXprP7_-KEgC-0R7gAAAEI"]
[Wed Mar 11 06:41:10.106077 2026] [:error] [pid 6117:tid 6138] [client 37.140.254.90:44916] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "abCeBsU0P9gyi5rKFp6fTwAAAAI"]
[Wed Mar 11 06:41:11.013527 2026] [:error] [pid 6117:tid 6156] [client 37.140.254.90:44928] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "abCeB8U0P9gyi5rKFp6fUQAAABQ"]
[Wed Mar 11 06:41:11.408485 2026] [:error] [pid 6222:tid 6225] [client 37.140.254.90:44934] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "abCeB3s7MIv-0SYBFu2qbgAAAME"]
[Wed Mar 11 06:41:12.406049 2026] [:error] [pid 6119:tid 6206] [client 37.140.254.90:44944] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "abCeCG9mEGP4iomVkSZFEAAAAI8"]
[Wed Mar 11 06:41:13.022533 2026] [:error] [pid 6222:tid 6241] [client 37.140.254.90:44956] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "abCeCXs7MIv-0SYBFu2qcAAAANE"]
[Wed Mar 11 06:41:13.419906 2026] [:error] [pid 6222:tid 6224] [client 37.140.254.90:44960] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "abCeCXs7MIv-0SYBFu2qcgAAAMA"]
[Wed Mar 11 06:41:15.318876 2026] [:error] [pid 6222:tid 6226] [client 37.140.254.90:44982] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wso.php"] [unique_id "abCeC3s7MIv-0SYBFu2qdwAAAMI"]
[Wed Mar 11 06:41:16.816105 2026] [:error] [pid 6222:tid 6228] [client 37.140.254.90:45000] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "abCeDHs7MIv-0SYBFu2qegAAAMQ"]
[Wed Mar 11 06:41:17.917974 2026] [:error] [pid 6118:tid 6170] [client 37.140.254.90:45016] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "abCeDVXprP7_-KEgC-0R9AAAAEc"]
[Wed Mar 11 06:41:19.018971 2026] [:error] [pid 6119:tid 6195] [client 37.140.254.90:45028] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "abCeD29mEGP4iomVkSZFGwAAAIQ"]
[Wed Mar 11 06:41:19.516738 2026] [:error] [pid 6119:tid 6207] [client 37.140.254.90:45040] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "abCeD29mEGP4iomVkSZFHQAAAJA"]
[Wed Mar 11 06:41:20.009884 2026] [:error] [pid 6117:tid 6153] [client 37.140.254.90:45050] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abCeEMU0P9gyi5rKFp6fXgAAABE"]
[Wed Mar 11 06:41:20.418935 2026] [:error] [pid 6119:tid 6210] [client 37.140.254.90:45062] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "abCeEG9mEGP4iomVkSZFIQAAAJM"]
[Wed Mar 11 06:41:20.814555 2026] [:error] [pid 6119:tid 6198] [client 37.140.254.90:45074] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "abCeEG9mEGP4iomVkSZFIgAAAIc"]
[Wed Mar 11 06:41:21.507316 2026] [:error] [pid 6119:tid 6209] [client 37.140.254.90:45088] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "abCeEW9mEGP4iomVkSZFJwAAAJI"]
[Wed Mar 11 06:41:22.720969 2026] [:error] [pid 6222:tid 6234] [client 37.140.254.90:45102] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "abCeEns7MIv-0SYBFu2qhgAAAMo"]
[Wed Mar 11 06:41:24.208261 2026] [:error] [pid 6222:tid 6228] [client 37.140.254.90:45122] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "abCeFHs7MIv-0SYBFu2qiwAAAMQ"]
[Wed Mar 11 06:41:24.904186 2026] [:error] [pid 6222:tid 6225] [client 37.140.254.90:45130] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "abCeFHs7MIv-0SYBFu2qjwAAAME"]
[Wed Mar 11 06:41:25.311084 2026] [:error] [pid 6118:tid 6178] [client 37.140.254.90:45134] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "abCeFVXprP7_-KEgC-0R_wAAAE8"]
[Wed Mar 11 06:41:26.895138 2026] [:error] [pid 6119:tid 6208] [client 37.140.254.90:45152] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez/index.php"] [unique_id "abCeFm9mEGP4iomVkSZFLgAAAJE"]
[Wed Mar 11 06:41:27.418203 2026] [:error] [pid 6222:tid 6233] [client 37.140.254.90:45162] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/index.php"] [unique_id "abCeF3s7MIv-0SYBFu2qmQAAAMk"]
[Wed Mar 11 06:41:28.420701 2026] [:error] [pid 6117:tid 6137] [client 37.140.254.90:45176] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/protostar/error.php"] [unique_id "abCeGMU0P9gyi5rKFp6fYQAAAAE"]
[Wed Mar 11 06:41:28.913312 2026] [:error] [pid 6117:tid 6138] [client 37.140.254.90:45184] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/error.php"] [unique_id "abCeGMU0P9gyi5rKFp6fYgAAAAI"]
[Wed Mar 11 06:41:29.703721 2026] [:error] [pid 6117:tid 6158] [client 37.140.254.90:45196] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "abCeGcU0P9gyi5rKFp6fYwAAABY"]
[Wed Mar 11 06:41:30.111291 2026] [:error] [pid 6222:tid 6232] [client 37.140.254.90:45200] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/atomic/index.php"] [unique_id "abCeGns7MIv-0SYBFu2qoAAAAMg"]
[Wed Mar 11 06:41:30.914292 2026] [:error] [pid 6119:tid 6214] [client 37.140.254.90:45210] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "abCeGm9mEGP4iomVkSZFMwAAAJc"]
[Wed Mar 11 06:41:31.720374 2026] [:error] [pid 6222:tid 6237] [client 37.140.254.90:45224] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "abCeG3s7MIv-0SYBFu2qowAAAM0"]
[Wed Mar 11 06:41:32.418130 2026] [:error] [pid 6222:tid 6235] [client 37.140.254.90:45232] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/pwn_shell.php"] [unique_id "abCeHHs7MIv-0SYBFu2qpQAAAMs"]
[Wed Mar 11 07:48:37.235842 2026] [:error] [pid 11751:tid 11772] [client 209.87.169.116:40496] [client 209.87.169.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abCt1XKeU7OoUEz26eXGUQAAAVM"]
[Wed Mar 11 07:49:37.300383 2026] [proxy_fcgi:error] [pid 11751:tid 11772] (70007)The timeout specified has expired: [client 209.87.169.116:40496] AH01075: Error dispatching request to : (polling)
[Wed Mar 11 08:25:32.250927 2026] [:error] [pid 11796:tid 11818] [client 68.218.165.134:38350] [client 68.218.165.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abC2fAEDXoQrlStpO9AlxwAAAZQ"]
[Wed Mar 11 08:25:32.251346 2026] [:error] [pid 11796:tid 11806] [client 68.218.165.134:38352] [client 68.218.165.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abC2fAEDXoQrlStpO9AlyAAAAYg"]
[Wed Mar 11 08:25:32.537331 2026] [:error] [pid 11796:tid 11822] [client 68.218.165.134:38358] [client 68.218.165.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abC2fAEDXoQrlStpO9AlyQAAAZg"]
[Wed Mar 11 12:19:24.197899 2026] [autoindex:error] [pid 23512:tid 23521] [client 207.180.194.94:34356] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 11 16:57:58.714424 2026] [:error] [pid 23482:tid 23497] [client 34.71.99.113:34468] [client 34.71.99.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abEulsrYaTAnN_mLXynHNQAAAQw"]
[Wed Mar 11 16:58:04.594954 2026] [:error] [pid 44995:tid 45021] [client 34.71.99.113:34552] [client 34.71.99.113] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "abEunDoOSr9ks_axo6OGFQAAAlg"]
[Wed Mar 11 16:58:07.105554 2026] [:error] [pid 44882:tid 44895] [client 34.71.99.113:34582] [client 34.71.99.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abEun1C06UlbDFYZNg37pAAAAgs"]
[Thu Mar 12 08:46:09.053381 2026] [:error] [pid 22063:tid 22070] [client 48.215.3.164:10820] [client 48.215.3.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.215.3.164, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abIM0a0RUhS-MJyHWLRpGwAAAgU"]
[Thu Mar 12 08:46:09.082572 2026] [:error] [pid 11986:tid 12033] [client 48.215.3.164:10822] [client 48.215.3.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.215.3.164, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abIM0TKqY2w-DVCrxTCTXwAAAc8"]
[Thu Mar 12 08:46:09.082980 2026] [:error] [pid 11986:tid 12029] [client 48.215.3.164:10819] [client 48.215.3.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.215.3.164, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abIM0TKqY2w-DVCrxTCTYAAAAcs"]
[Thu Mar 12 18:15:05.396697 2026] [:error] [pid 22063:tid 22083] [client 74.7.242.19:35906] [client 74.7.242.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.19, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abKSKa0RUhS-MJyHWLQZLgAAAhI"], referer: https://makifim.com.au/
[Thu Mar 12 18:25:10.284187 2026] [:error] [pid 11986:tid 12024] [client 103.65.236.149:52046] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "abKUhjKqY2w-DVCrxTDsTQAAAcY"]
[Thu Mar 12 18:25:10.506765 2026] [:error] [pid 11953:tid 11962] [client 103.65.236.149:52061] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKUhpudzqsnq3bvtDYhRwAAAUc"]
[Fri Mar 13 01:52:17.935435 2026] [autoindex:error] [pid 56003:tid 56008] [client 173.212.207.196:54014] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Mar 13 09:50:29.045197 2026] [:error] [pid 62036:tid 62064] [client 209.87.169.127:39117] [client 209.87.169.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.127, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abNtZbce6g9kILuh_R5P7AAAANU"]
[Fri Mar 13 11:06:23.451199 2026] [:error] [pid 9311:tid 9359] [client 68.218.165.143:24613] [client 68.218.165.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abN_L1TiCkU4QLmYwPm8cQAAAkg"]
[Fri Mar 13 11:06:24.599642 2026] [:error] [pid 9311:tid 9368] [client 68.218.165.143:24615] [client 68.218.165.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abN_MFTiCkU4QLmYwPm8cwAAAlE"]
[Fri Mar 13 11:06:25.069400 2026] [:error] [pid 9309:tid 9341] [client 68.218.165.143:24611] [client 68.218.165.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abN_Mao1KEMMghNWAN9ldAAAAhI"]
[Fri Mar 13 11:22:10.340215 2026] [:error] [pid 44755:tid 44768] [client 72.57.99.241:48158] [client 72.57.99.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.57.99.241, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abOC4vONf1H0XrBFE4PaUAAAAQs"], referer: https://makifim.com.au/
[Fri Mar 13 11:22:18.000651 2026] [:error] [pid 9309:tid 9330] [client 72.57.99.241:42780] [client 72.57.99.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.57.99.241, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abOC6ao1KEMMghNWAN9vHQAAAgc"], referer: https://makifim.com.au/
[Sat Mar 14 03:59:07.200100 2026] [:error] [pid 38219:tid 38284] [client 20.215.53.247:7085] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "abRsi98KS8ICKgxB46xyGwAAAII"]
[Sat Mar 14 03:59:11.185693 2026] [:error] [pid 38219:tid 38283] [client 20.215.53.247:26840] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "abRsj98KS8ICKgxB46xyIQAAAIE"]
[Sat Mar 14 03:59:14.640077 2026] [:error] [pid 38308:tid 38314] [client 20.215.53.247:29594] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "abRskidzApCcmrTmL0xaIgAAAMQ"]
[Sat Mar 14 03:59:16.812653 2026] [:error] [pid 38217:tid 38242] [client 20.215.53.247:19632] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "abRslMJLsAOJI-J46CgsNgAAAA8"]
[Sat Mar 14 03:59:17.953775 2026] [:error] [pid 38218:tid 38257] [client 20.215.53.247:27329] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "abRsldGgH3k3Ng6qVaSjrwAAAEI"]
[Sat Mar 14 03:59:20.468970 2026] [:error] [pid 38308:tid 38324] [client 20.215.53.247:19597] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "abRsmCdzApCcmrTmL0xaJgAAAM4"]
[Sat Mar 14 03:59:24.551034 2026] [:error] [pid 38219:tid 38283] [client 20.215.53.247:6719] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "abRsnN8KS8ICKgxB46xyLwAAAIE"]
[Sat Mar 14 03:59:28.954441 2026] [:error] [pid 38219:tid 38290] [client 20.215.53.247:19618] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "abRsoN8KS8ICKgxB46xyNQAAAIg"]
[Sat Mar 14 03:59:32.040663 2026] [:error] [pid 38218:tid 38262] [client 20.215.53.247:6231] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "abRspNGgH3k3Ng6qVaSjxQAAAEc"]
[Sat Mar 14 03:59:34.728356 2026] [:error] [pid 38217:tid 38231] [client 20.215.53.247:24087] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "abRspsJLsAOJI-J46CgsSwAAAAU"]
[Sat Mar 14 03:59:36.587612 2026] [:error] [pid 38217:tid 38238] [client 20.215.53.247:20650] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "abRsqMJLsAOJI-J46CgsVAAAAAw"]
[Sat Mar 14 03:59:40.936627 2026] [:error] [pid 38219:tid 38291] [client 20.215.53.247:20207] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "abRsrN8KS8ICKgxB46xyRAAAAIk"]
[Sat Mar 14 03:59:42.211726 2026] [:error] [pid 38219:tid 38294] [client 20.215.53.247:38032] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "abRsrt8KS8ICKgxB46xySAAAAIw"]
[Sat Mar 14 03:59:45.069457 2026] [:error] [pid 38217:tid 38234] [client 20.215.53.247:21939] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "abRsscJLsAOJI-J46CgsaAAAAAg"]
[Sat Mar 14 03:59:46.475211 2026] [:error] [pid 38308:tid 38329] [client 20.215.53.247:38077] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "abRssidzApCcmrTmL0xaQQAAANM"]
[Sat Mar 14 03:59:48.956368 2026] [:error] [pid 38217:tid 38245] [client 20.215.53.247:25613] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "abRstMJLsAOJI-J46CgscgAAABI"]
[Sat Mar 14 03:59:52.607858 2026] [:error] [pid 38217:tid 38237] [client 20.215.53.247:38037] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRsuMJLsAOJI-J46CgsfQAAAAs"]
[Sat Mar 14 03:59:53.926462 2026] [:error] [pid 38308:tid 38326] [client 20.215.53.247:20685] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRsuSdzApCcmrTmL0xaTwAAANA"]
[Sat Mar 14 03:59:56.606714 2026] [:error] [pid 38217:tid 38243] [client 20.215.53.247:20376] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRsvMJLsAOJI-J46CgsjAAAABA"]
[Sat Mar 14 07:14:51.612948 2026] [:error] [pid 35801:tid 35807] [client 20.215.53.247:3822] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hnikt.php"] [unique_id "abSaa28tVFelXGsqbU_BTQAAAQM"]
[Sat Mar 14 07:14:56.096691 2026] [:error] [pid 3913:tid 3967] [client 20.215.53.247:3806] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hnikt.php"] [unique_id "abSacB9qvQd4GQHUp68bDgAAAEo"]
[Sat Mar 14 07:15:05.442913 2026] [:error] [pid 3913:tid 3978] [client 20.215.53.247:3794] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "abSaeR9qvQd4GQHUp68bGQAAAFU"]
[Sat Mar 14 07:15:06.603578 2026] [:error] [pid 57226:tid 57253] [client 20.215.53.247:11034] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "abSaemxFlXQvNewjeI895gAAAVc"]
[Sat Mar 14 07:15:07.373442 2026] [:error] [pid 57226:tid 57245] [client 20.215.53.247:3778] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "abSae2xFlXQvNewjeI896QAAAU8"]
[Sat Mar 14 07:15:09.040486 2026] [:error] [pid 35801:tid 35804] [client 20.215.53.247:15183] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "abSafW8tVFelXGsqbU_BWQAAAQA"]
[Sat Mar 14 07:15:10.539556 2026] [:error] [pid 35801:tid 35813] [client 20.215.53.247:3784] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "abSafm8tVFelXGsqbU_BWwAAAQk"]
[Sat Mar 14 07:15:12.189180 2026] [:error] [pid 3912:tid 3928] [client 20.215.53.247:11053] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "abSagMXFZBK-jpdCvTHTGgAAAAE"]
[Sat Mar 14 07:15:13.108467 2026] [:error] [pid 3913:tid 3964] [client 20.215.53.247:10850] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "abSagR9qvQd4GQHUp68bIwAAAEc"]
[Sat Mar 14 07:15:15.300561 2026] [:error] [pid 3913:tid 3974] [client 20.215.53.247:39097] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/js.php"] [unique_id "abSagx9qvQd4GQHUp68bKgAAAFE"]
[Sat Mar 14 07:15:16.068391 2026] [:error] [pid 4018:tid 4041] [client 20.215.53.247:38626] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/34.php"] [unique_id "abSahAEk1fxdMMkDDaLlvwAAANA"]
[Sat Mar 14 07:15:16.942919 2026] [:error] [pid 3912:tid 3936] [client 20.215.53.247:10818] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/34.php"] [unique_id "abSahMXFZBK-jpdCvTHTHwAAAAk"]
[Sat Mar 14 07:15:17.825900 2026] [:error] [pid 4018:tid 4030] [client 20.215.53.247:3805] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/34.php"] [unique_id "abSahQEk1fxdMMkDDaLlwwAAAMU"]
[Sat Mar 14 07:15:18.598185 2026] [:error] [pid 3914:tid 3991] [client 20.215.53.247:12109] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/34.php"] [unique_id "abSahvH_HeUqa_sn9-AXiwAAAIc"]
[Sat Mar 14 07:15:19.219857 2026] [:error] [pid 35801:tid 35822] [client 20.215.53.247:4048] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rafa.php"] [unique_id "abSah28tVFelXGsqbU_BYgAAARI"]
[Sat Mar 14 07:15:20.247598 2026] [:error] [pid 3914:tid 4003] [client 20.215.53.247:10822] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rafa.php"] [unique_id "abSaiPH_HeUqa_sn9-AXjAAAAJM"]
[Sat Mar 14 07:15:20.936789 2026] [:error] [pid 3913:tid 3981] [client 20.215.53.247:38596] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rafa.php"] [unique_id "abSaiB9qvQd4GQHUp68bNwAAAFg"]
[Sat Mar 14 07:15:21.806454 2026] [:error] [pid 57226:tid 57247] [client 20.215.53.247:10855] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rafa.php"] [unique_id "abSaiWxFlXQvNewjeI899QAAAVE"]
[Sat Mar 14 07:15:22.423901 2026] [:error] [pid 57226:tid 57235] [client 20.215.53.247:38615] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gu.php"] [unique_id "abSaimxFlXQvNewjeI899wAAAUU"]
[Sat Mar 14 07:15:23.593540 2026] [:error] [pid 35801:tid 35804] [client 20.215.53.247:3803] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gu.php"] [unique_id "abSai28tVFelXGsqbU_BZQAAAQA"]
[Sat Mar 14 07:15:25.089486 2026] [:error] [pid 3912:tid 3939] [client 20.215.53.247:38624] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gu.php"] [unique_id "abSajcXFZBK-jpdCvTHTJAAAAAw"]
[Sat Mar 14 07:15:25.738347 2026] [:error] [pid 3912:tid 3928] [client 20.215.53.247:4052] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gu.php"] [unique_id "abSajcXFZBK-jpdCvTHTJwAAAAE"]
[Sat Mar 14 07:15:26.903557 2026] [:error] [pid 35801:tid 35813] [client 20.215.53.247:15181] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-wlx.php"] [unique_id "abSajm8tVFelXGsqbU_BZwAAAQk"]
[Sat Mar 14 07:15:27.971069 2026] [:error] [pid 35801:tid 35827] [client 20.215.53.247:4035] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-wlx.php"] [unique_id "abSaj28tVFelXGsqbU_BagAAARc"]
[Sat Mar 14 07:15:28.668688 2026] [:error] [pid 57226:tid 57246] [client 20.215.53.247:3787] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-wlx.php"] [unique_id "abSakGxFlXQvNewjeI89-wAAAVA"]
[Sat Mar 14 07:15:29.422188 2026] [:error] [pid 35801:tid 35816] [client 20.215.53.247:11022] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-wlx.php"] [unique_id "abSakW8tVFelXGsqbU_BbgAAAQw"]
[Sat Mar 14 11:14:28.524902 2026] [:error] [pid 3913:tid 3974] [client 68.218.165.155:34362] [client 68.218.165.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.155, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abTSlB9qvQd4GQHUp69hHwAAAFE"]
[Sat Mar 14 11:14:28.529714 2026] [:error] [pid 3913:tid 3971] [client 68.218.165.155:34363] [client 68.218.165.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.155, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abTSlB9qvQd4GQHUp69hIAAAAE4"]
[Sat Mar 14 11:14:31.848799 2026] [:error] [pid 3913:tid 3977] [client 68.218.165.155:34363] [client 68.218.165.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.155, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abTSlx9qvQd4GQHUp69hLAAAAFQ"]
[Sat Mar 14 14:11:49.855230 2026] [:error] [pid 13261:tid 13273] [client 37.77.150.124:65270] [client 37.77.150.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.77.150.124, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abT8JfDFVxjWSW61p5kqcAAAAMc"], referer: https://makifim.com.au/xmlrpc.php
[Sat Mar 14 14:12:00.523069 2026] [:error] [pid 54132:tid 54151] [client 37.77.150.124:65272] [client 37.77.150.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.77.150.124, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abT8MMMoWcZxtn8Rxy9efQAAA04"], referer: https://makifim.com.au/xmlrpc.php
[Sun Mar 15 11:08:18.129201 2026] [:error] [pid 45974:tid 45985] [client 20.89.243.125:3315] [client 20.89.243.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abYiohWn4R6u72SegehY3QAAAgk"]
[Sun Mar 15 11:08:18.863447 2026] [:error] [pid 50986:tid 51001] [client 20.89.243.125:13219] [client 20.89.243.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abYioiknK4c779bcQqEahgAAAUw"]
[Sun Mar 15 11:08:19.365349 2026] [:error] [pid 38645:tid 38667] [client 20.89.243.125:8709] [client 20.89.243.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abYioxFPHtsDUuVrWDbkYAAAANQ"]
[Sun Mar 15 11:08:19.853270 2026] [:error] [pid 38645:tid 38669] [client 20.89.243.125:12099] [client 20.89.243.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abYioxFPHtsDUuVrWDbkZAAAANY"]
[Sun Mar 15 11:38:13.478562 2026] [:error] [pid 50986:tid 51001] [client 48.215.3.156:34883] [client 48.215.3.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.215.3.156, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abYppSknK4c779bcQqEmhQAAAUw"]
[Sun Mar 15 11:38:13.521337 2026] [:error] [pid 45801:tid 45827] [client 48.215.3.156:34885] [client 48.215.3.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.215.3.156, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abYppYaKHL9CTKoVzTDa1gAAAdg"]
[Sun Mar 15 11:38:13.530145 2026] [:error] [pid 45801:tid 45822] [client 48.215.3.156:34884] [client 48.215.3.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 48.215.3.156, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abYppYaKHL9CTKoVzTDa1wAAAdM"]
[Sun Mar 15 11:40:36.661700 2026] [autoindex:error] [pid 45801:tid 45819] [client 161.97.107.16:53607] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 15 16:13:19.444687 2026] [:error] [pid 50986:tid 50989] [client 104.234.53.78:55469] [client 104.234.53.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.78, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abZqHyknK4c779bcQqF2hQAAAUE"]
[Mon Mar 16 04:24:40.865440 2026] [:error] [pid 62429:tid 62507] [client 170.64.205.141:58740] [client 170.64.205.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "abcViFewIPukhLCowEGgVAAAAIs"]
[Mon Mar 16 07:02:29.084687 2026] [:error] [pid 62529:tid 62557] [client 203.188.168.27:50783] [client 203.188.168.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abc6hT84-luOVYZKK0OMAwAAANQ"]
[Mon Mar 16 08:22:33.248206 2026] [:error] [pid 1411:tid 1426] [client 103.65.237.124:63726] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "abdNSdrCV4sh-le3M-2eqgAAAU0"]
[Mon Mar 16 11:05:32.212338 2026] [:error] [pid 62510:tid 62532] [client 173.239.236.157:32495] [client 173.239.236.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abdzfCE33_T9aKpoDdjqaQAAARM"]
[Mon Mar 16 11:05:33.146570 2026] [:error] [pid 62510:tid 62525] [client 173.239.236.163:55089] [client 173.239.236.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feed/"] [unique_id "abdzfSE33_T9aKpoDdjqbwAAAQw"]
[Mon Mar 16 12:17:13.399121 2026] [:error] [pid 62024:tid 62036] [client 4.199.143.130:4420] [client 4.199.143.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.130, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abeESYk-5rtjYvjqC_pPlgAAAAc"]
[Mon Mar 16 12:17:13.400354 2026] [:error] [pid 62024:tid 62052] [client 4.199.143.130:4419] [client 4.199.143.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.130, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abeESYk-5rtjYvjqC_pPlwAAABc"]
[Mon Mar 16 12:17:14.372021 2026] [:error] [pid 62024:tid 62045] [client 4.199.143.130:4421] [client 4.199.143.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.130, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abeESok-5rtjYvjqC_pPmwAAABA"]
[Mon Mar 16 18:00:03.284375 2026] [autoindex:error] [pid 39154:tid 39157] [client 89.117.54.137:58708] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 16 19:54:33.875739 2026] [:error] [pid 39154:tid 39176] [client 64.89.163.113:49396] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abfveRgq1_qjm7J1LqsiRAAAAVM"]
[Mon Mar 16 19:54:34.412554 2026] [:error] [pid 1871:tid 1883] [client 64.89.163.113:65092] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abfvejinTnZ8uiUPekE6cwAAAYo"]
[Mon Mar 16 19:54:35.029550 2026] [:error] [pid 35838:tid 35858] [client 64.89.163.113:63024] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abfvexroTe-x3JLtmo6WSgAAABA"]
[Mon Mar 16 19:54:35.567781 2026] [:error] [pid 36198:tid 36219] [client 64.89.163.113:49391] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abfve-lL1GNckmsdWlMz-gAAARI"]
[Mon Mar 16 19:54:36.077835 2026] [:error] [pid 35840:tid 35914] [client 64.89.163.113:54072] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abfvfEJFzfEsmtPx-M0IuwAAAJE"]
[Mon Mar 16 21:24:20.404254 2026] [:error] [pid 1871:tid 1895] [client 20.120.91.203:38095] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abgEhDinTnZ8uiUPekFezwAAAZY"]
[Mon Mar 16 21:24:23.224502 2026] [:error] [pid 35838:tid 35846] [client 20.120.91.203:14646] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abgEhxroTe-x3JLtmo7I9wAAAAQ"]
[Mon Mar 16 21:24:27.324763 2026] [:error] [pid 39154:tid 39180] [client 20.120.91.203:14976] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abgEixgq1_qjm7J1Lqs7IgAAAVc"]
[Mon Mar 16 21:24:30.231167 2026] [:error] [pid 35838:tid 35866] [client 20.120.91.203:40219] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abgEjhroTe-x3JLtmo7I-wAAABg"]
[Tue Mar 17 02:06:34.682461 2026] [:error] [pid 9635:tid 9637] [client 35.231.184.122:52242] [client 35.231.184.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.184.122, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abhGqnsAHChuwZxGaSjvXAAAAUA"]
[Tue Mar 17 02:06:40.773384 2026] [:error] [pid 9635:tid 9656] [client 35.231.184.122:52242] [client 35.231.184.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "abhGsHsAHChuwZxGaSjvaQAAAVM"]
[Tue Mar 17 02:06:42.991962 2026] [:error] [pid 9635:tid 9637] [client 35.231.184.122:52242] [client 35.231.184.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.184.122, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abhGsnsAHChuwZxGaSjvcQAAAUA"]
[Tue Mar 17 02:23:09.949531 2026] [proxy_fcgi:error] [pid 45424:tid 45553] [client 103.4.122.14:53636] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Mar 17 02:23:13.834631 2026] [proxy_fcgi:error] [pid 9635:tid 9654] [client 103.4.122.14:53692] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Mar 17 03:37:46.756606 2026] [:error] [pid 45916:tid 45963] [client 20.120.91.203:15148] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "abhcCriS53PnClk_C9DGVwAAAEE"]
[Tue Mar 17 07:56:14.511123 2026] [:error] [pid 45917:tid 46007] [client 185.223.152.128:47255] [client 185.223.152.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.128, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abiYnhMMhmeqL5fT_heyAwAAAJI"]
[Tue Mar 17 08:42:26.844847 2026] [:error] [pid 45915:tid 45930] [client 20.189.93.95:1293] [client 20.189.93.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.189.93.95, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abijcph7U84ydzcrcncpwwAAAAE"]
[Tue Mar 17 13:42:49.267981 2026] [:error] [pid 14817:tid 14829] [client 68.218.165.157:18946] [client 68.218.165.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abjp2eBWVgTpR3dKOgboXgAAAUM"]
[Tue Mar 17 13:42:49.269072 2026] [:error] [pid 45915:tid 45929] [client 68.218.165.157:18947] [client 68.218.165.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abjp2Zh7U84ydzcrcne7mgAAAAA"]
[Tue Mar 17 13:42:49.467546 2026] [:error] [pid 45916:tid 45985] [client 68.218.165.157:18949] [client 68.218.165.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.157, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abjp2biS53PnClk_C9DhWAAAAFc"]
[Tue Mar 17 18:43:08.485114 2026] [:error] [pid 46020:tid 46032] [client 74.7.242.174:39426] [client 74.7.242.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.174, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abkwPH-nCcd9BdzGdLeLMQAAAMo"], referer: https://makifim.com.au/
[Tue Mar 17 18:43:50.994520 2026] [:error] [pid 15013:tid 15091] [client 74.7.243.56:56848] [client 74.7.243.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.56, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "abkwZlZc-p7DonmJmm0yNQAAAg4"], referer: https://makifim.com.au/
[Wed Mar 18 05:45:32.855043 2026] [:error] [pid 45069:tid 45078] [client 45.131.194.12:58483] [client 45.131.194.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.12, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abnLfDNzUMBULZVa94zehQAAAMc"]
[Wed Mar 18 07:07:34.393377 2026] [:error] [pid 13716:tid 13721] [client 20.115.5.235:10005] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "abnetmWKzQVHkZkUHaQi_QAAAUM"]
[Wed Mar 18 07:07:36.165564 2026] [:error] [pid 13676:tid 13699] [client 20.115.5.235:10144] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "abneuGxDEHR5lvAEVIj98QAAARU"]
[Wed Mar 18 07:08:19.409603 2026] [:error] [pid 13676:tid 13680] [client 20.115.5.235:24471] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abne42xDEHR5lvAEVIj-IgAAAQI"]
[Wed Mar 18 07:08:21.806154 2026] [:error] [pid 45069:tid 45091] [client 20.115.5.235:9259] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abne5TNzUMBULZVa94wALQAAANQ"]
[Wed Mar 18 07:08:24.643951 2026] [:error] [pid 13716:tid 13739] [client 20.115.5.235:9245] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abne6GWKzQVHkZkUHaQjnwAAAVU"]
[Wed Mar 18 07:08:34.464221 2026] [:error] [pid 44965:tid 45033] [client 20.115.5.235:9735] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abne8qNZys-oG-hM22iMIwAAAFc"]
[Wed Mar 18 07:26:29.814825 2026] [:error] [pid 13716:tid 13727] [client 20.116.1.191:57596] [client 20.116.1.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.1.191, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abnjJWWKzQVHkZkUHaQ05wAAAUk"]
[Wed Mar 18 07:26:37.959930 2026] [autoindex:error] [pid 13716:tid 13732] [client 20.116.1.191:57596] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 07:26:38.176889 2026] [autoindex:error] [pid 13716:tid 13736] [client 20.116.1.191:57596] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 07:26:40.521011 2026] [autoindex:error] [pid 13716:tid 13742] [client 20.116.1.191:57596] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 07:26:49.710031 2026] [autoindex:error] [pid 13716:tid 13736] [client 20.116.1.191:57596] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 07:26:52.443419 2026] [:error] [pid 13716:tid 13732] [client 20.116.1.191:57596] [client 20.116.1.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abnjPGWKzQVHkZkUHaQ1PwAAAU4"]
[Wed Mar 18 07:26:56.996131 2026] [autoindex:error] [pid 13716:tid 13739] [client 20.116.1.191:63159] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 07:27:01.676435 2026] [autoindex:error] [pid 13716:tid 13735] [client 20.116.1.191:63159] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/et-cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 07:27:04.549000 2026] [:error] [pid 13716:tid 13724] [client 20.116.1.191:63159] [client 20.116.1.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abnjSGWKzQVHkZkUHaQ1bQAAAUY"]
[Wed Mar 18 07:27:12.106763 2026] [autoindex:error] [pid 13716:tid 13730] [client 20.116.1.191:62671] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 07:27:15.802022 2026] [:error] [pid 13716:tid 13740] [client 20.116.1.191:62671] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "abnjU2WKzQVHkZkUHaQ1fQAAAVY"]
[Wed Mar 18 07:27:17.238998 2026] [:error] [pid 13716:tid 13730] [client 20.116.1.191:62715] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "abnjVWWKzQVHkZkUHaQ1ggAAAUw"]
[Wed Mar 18 07:27:19.238677 2026] [:error] [pid 45069:tid 45071] [client 20.116.1.191:47623] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "abnjVzNzUMBULZVa94wMIgAAAMA"]
[Wed Mar 18 07:27:22.581229 2026] [:error] [pid 13676:tid 13680] [client 20.116.1.191:50093] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "abnjWmxDEHR5lvAEVIgF6wAAAQI"]
[Wed Mar 18 08:13:18.857471 2026] [:error] [pid 13676:tid 13679] [client 20.2.90.103:39890] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "abnuHmxDEHR5lvAEVIgUZgAAAQE"]
[Wed Mar 18 10:03:18.332753 2026] [autoindex:error] [pid 42870:tid 42904] [client 20.196.201.66:6735] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 10:03:31.710272 2026] [:error] [pid 42870:tid 42890] [client 20.196.201.66:6735] [client 20.196.201.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aboH856axlAooiuYyUxKBwAAAAU"]
[Wed Mar 18 10:03:32.355617 2026] [:error] [pid 43009:tid 43028] [client 20.196.201.66:7661] [client 20.196.201.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aboH9H8aUp4Sm6m3nmOHggAAARE"]
[Wed Mar 18 10:03:32.976958 2026] [:error] [pid 43009:tid 43034] [client 20.196.201.66:7652] [client 20.196.201.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aboH9H8aUp4Sm6m3nmOHhAAAARc"]
[Wed Mar 18 10:03:33.542538 2026] [:error] [pid 43009:tid 43033] [client 20.196.201.66:6742] [client 20.196.201.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "aboH9X8aUp4Sm6m3nmOHhgAAARY"]
[Wed Mar 18 11:16:33.182095 2026] [:error] [pid 31232:tid 31250] [client 85.11.167.108:54034] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "www.makifim.com.au"] [uri "/wp-login.php"] [unique_id "aboZEWX6HV7dqh3BQD14uAAAAE8"]
[Wed Mar 18 14:11:45.478255 2026] [:error] [pid 42871:tid 42930] [client 4.199.143.152:2499] [client 4.199.143.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.152, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abpCIWPUS0lM1M9nUaK68AAAAJA"]
[Wed Mar 18 14:11:45.604877 2026] [:error] [pid 31232:tid 31247] [client 4.199.143.152:2500] [client 4.199.143.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.152, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abpCIWX6HV7dqh3BQD3zVAAAAEw"]
[Wed Mar 18 14:11:46.942091 2026] [:error] [pid 31232:tid 31259] [client 4.199.143.152:2501] [client 4.199.143.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.152, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abpCImX6HV7dqh3BQD3zXwAAAFg"]
[Wed Mar 18 20:57:05.213855 2026] [:error] [pid 31232:tid 31241] [client 20.120.18.145:38884] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abqhIWX6HV7dqh3BQD3_7wAAAEY"]
[Wed Mar 18 20:57:06.366959 2026] [:error] [pid 42871:tid 42925] [client 20.120.18.145:38337] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abqhImPUS0lM1M9nUaJtjAAAAIs"]
[Wed Mar 18 20:57:12.320015 2026] [:error] [pid 20667:tid 20692] [client 20.120.18.145:55690] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abqhKJgyfQyvBhzza_2GuAAAAZc"]
[Wed Mar 18 20:57:14.733822 2026] [:error] [pid 53755:tid 53777] [client 20.120.18.145:38345] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "abqhKqqw5ZSRshmIhWlFkQAAAVQ"]
[Thu Mar 19 05:52:48.478797 2026] [:error] [pid 23882:tid 23917] [client 91.99.189.217:50860] [client 91.99.189.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "absesLWnClbtbN12M78CKQAAAA8"]
[Thu Mar 19 05:52:48.572349 2026] [:error] [pid 23882:tid 23913] [client 91.99.189.217:50864] [client 91.99.189.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "absesLWnClbtbN12M78CKgAAAAs"]
[Thu Mar 19 06:31:04.688873 2026] [:error] [pid 23884:tid 23980] [client 31.171.130.35:44299] [client 31.171.130.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.35, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "absnqF6St-VCdOYnZMrxagAAAJg"]
[Thu Mar 19 09:58:54.038046 2026] [autoindex:error] [pid 3278:tid 3289] [client 209.87.169.46:20189] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:54.295061 2026] [autoindex:error] [pid 3278:tid 3298] [client 209.87.169.46:20189] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:54.570673 2026] [autoindex:error] [pid 3278:tid 3289] [client 209.87.169.46:20189] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:54.859364 2026] [autoindex:error] [pid 3278:tid 3289] [client 209.87.169.46:20189] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 12:54:13.918689 2026] [:error] [pid 31205:tid 31220] [client 154.16.49.101:6754] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abuBdVu5gZKGrGz5P1GnwAAAAUQ"]
[Thu Mar 19 12:54:14.413047 2026] [:error] [pid 23882:tid 23907] [client 154.16.49.101:6944] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdrWnClbtbN12M7-UIQAAAAU"]
[Thu Mar 19 12:54:14.910536 2026] [:error] [pid 25135:tid 25153] [client 154.16.49.101:7135] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feed/"] [unique_id "abuBdqKtE0dzgMctjFXtlAAAA1A"]
[Thu Mar 19 14:58:51.766351 2026] [:error] [pid 11016:tid 11091] [client 4.199.143.143:8192] [client 4.199.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abueqxPK94J9G19C6uX7pAAAARI"]
[Thu Mar 19 14:58:52.744784 2026] [:error] [pid 11016:tid 11093] [client 4.199.143.143:8195] [client 4.199.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abuerBPK94J9G19C6uX7rAAAARQ"]
[Thu Mar 19 14:58:52.745027 2026] [:error] [pid 11016:tid 11084] [client 4.199.143.143:8196] [client 4.199.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.199.143.143, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abuerBPK94J9G19C6uX7rQAAAQs"]
[Thu Mar 19 21:26:22.361260 2026] [:error] [pid 51091:tid 51130] [client 185.198.240.81:54971] [client 185.198.240.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.81, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abv5fr7LZKhdJPD9CBvb4AAAAVM"]
[Fri Mar 20 01:14:31.603881 2026] [:error] [pid 46126:tid 46224] [client 209.97.171.56:56695] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abwu96Q44YePbsZz3j7MWgAAAQc"]
[Fri Mar 20 01:14:31.845489 2026] [:error] [pid 46264:tid 46307] [client 209.97.171.56:63367] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abwu94p3TruHFmWOt5HWygAAABg"]
[Fri Mar 20 02:04:53.152894 2026] [proxy_fcgi:error] [pid 46126:tid 46216] [client 103.4.122.14:42814] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Fri Mar 20 02:39:01.959335 2026] [:error] [pid 46124:tid 46203] [client 198.98.50.128:56287] [client 198.98.50.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.50.128, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "abxCxUzMrlLOY6zyCjKWwAAAAFc"], referer: http://www.google.com.hk
[Fri Mar 20 05:49:59.102427 2026] [:error] [pid 58126:tid 58180] [client 20.104.104.81:20806] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "abxvh6KAmdXQSS0Y5KBeHQAAAEg"]
[Fri Mar 20 05:50:03.079148 2026] [:error] [pid 58125:tid 58153] [client 20.104.104.81:20811] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "abxvi_KqkvJQoqsQGeVnawAAAAk"]
[Fri Mar 20 05:50:04.464551 2026] [:error] [pid 58126:tid 58176] [client 20.104.104.81:20872] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "abxvjKKAmdXQSS0Y5KBeMAAAAEQ"]
[Fri Mar 20 05:50:07.069998 2026] [:error] [pid 58230:tid 58257] [client 20.104.104.81:20879] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "abxvj_eBObYxbmHTzfrQPwAAANg"]
[Fri Mar 20 13:02:07.911109 2026] [:error] [pid 27302:tid 27315] [client 217.216.37.51:49354] [client 217.216.37.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abzUz7DKiUve17xv6yHl5AAAAMs"]
[Fri Mar 20 13:02:08.106934 2026] [:error] [pid 27302:tid 27308] [client 217.216.37.51:63495] [client 217.216.37.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "abzU0LDKiUve17xv6yHl5QAAAMQ"]
[Fri Mar 20 13:02:08.307546 2026] [:error] [pid 27302:tid 27318] [client 217.216.37.51:49625] [client 217.216.37.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/media/system/js/core.js"] [unique_id "abzU0LDKiUve17xv6yHl5wAAAM4"]
[Fri Mar 20 15:38:15.064472 2026] [:error] [pid 49082:tid 49160] [client 96.44.136.159:60792] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "abz5Z6pllYJI1LUIdL-JwwAAAVI"], referer: https://www.google.com
[Fri Mar 20 16:08:01.065683 2026] [autoindex:error] [pid 49081:tid 49134] [client 141.98.11.17:58584] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Mar 20 19:27:00.625148 2026] [:error] [pid 49081:tid 49127] [client 84.55.7.30:42523] [client 84.55.7.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about"] [unique_id "ab0vBBo1LBAUhfhYPR2BGQAAAQw"], referer: https://makifim.com.au/about
[Fri Mar 20 19:27:00.739267 2026] [:error] [pid 49081:tid 49124] [client 88.216.248.152:45133] [client 88.216.248.152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about-us"] [unique_id "ab0vBBo1LBAUhfhYPR2BGgAAAQk"], referer: https://makifim.com.au/about-us
[Fri Mar 20 19:27:01.575761 2026] [:error] [pid 49170:tid 49182] [client 207.170.175.237:46127] [client 207.170.175.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about"] [unique_id "ab0vBc-c8ctLVDCqUJVtXwAAAAg"], referer: https://makifim.com.au/about
[Fri Mar 20 19:27:01.621571 2026] [:error] [pid 49081:tid 49119] [client 88.216.255.178:56395] [client 88.216.255.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about-us"] [unique_id "ab0vBRo1LBAUhfhYPR2BHQAAAQQ"], referer: https://makifim.com.au/about-us
[Fri Mar 20 19:27:04.982147 2026] [:error] [pid 51714:tid 51737] [client 185.89.111.125:38453] [client 185.89.111.125] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about"] [unique_id "ab0vCDWI82pxvQ0gksvZyAAAAJU"], referer: https://makifim.com.au/about
[Fri Mar 20 19:27:05.246741 2026] [:error] [pid 51714:tid 51717] [client 84.55.7.60:41133] [client 84.55.7.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about-us"] [unique_id "ab0vCTWI82pxvQ0gksvZygAAAIE"], referer: https://makifim.com.au/about-us
[Fri Mar 20 19:27:06.283498 2026] [:error] [pid 49081:tid 49115] [client 66.207.177.47:33247] [client 66.207.177.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about-us"] [unique_id "ab0vCho1LBAUhfhYPR2BPwAAAQA"], referer: https://makifim.com.au/about-us
[Fri Mar 20 19:27:09.699074 2026] [:error] [pid 49170:tid 49198] [client 188.191.100.242:54003] [client 188.191.100.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about-us"] [unique_id "ab0vDc-c8ctLVDCqUJVtZwAAABg"], referer: https://makifim.com.au/about-us
[Fri Mar 20 19:27:15.598205 2026] [:error] [pid 27302:tid 27328] [client 188.191.100.105:43211] [client 188.191.100.105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/about-us"] [unique_id "ab0vE7DKiUve17xv6yFuqQAAANg"], referer: https://makifim.com.au/about-us
[Fri Mar 20 19:30:06.660158 2026] [:error] [pid 27302:tid 27327] [client 178.171.92.218:59199] [client 178.171.92.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/aboutus"] [unique_id "ab0vvrDKiUve17xv6yFv2QAAANc"], referer: https://makifim.com.au/aboutus
[Fri Mar 20 19:30:07.019817 2026] [:error] [pid 27302:tid 27328] [client 69.51.18.147:47601] [client 69.51.18.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/company"] [unique_id "ab0vv7DKiUve17xv6yFv2gAAANg"], referer: https://makifim.com.au/company
[Fri Mar 20 19:30:07.128479 2026] [:error] [pid 49080:tid 49107] [client 185.55.4.83:62073] [client 185.55.4.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/company-profile"] [unique_id "ab0vv4k5CHi4V0A3ttj4igAAAFU"], referer: https://makifim.com.au/company-profile
[Fri Mar 20 19:30:07.742664 2026] [:error] [pid 27302:tid 27321] [client 82.38.56.129:51309] [client 82.38.56.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/aboutus"] [unique_id "ab0vv7DKiUve17xv6yFv3gAAANE"], referer: https://makifim.com.au/aboutus
[Fri Mar 20 19:30:08.614740 2026] [:error] [pid 51714:tid 51735] [client 91.108.231.67:34983] [client 91.108.231.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contact"] [unique_id "ab0vwDWI82pxvQ0gksvagQAAAJM"], referer: https://makifim.com.au/contact
[Fri Mar 20 19:30:09.655251 2026] [:error] [pid 49081:tid 49130] [client 27.0.158.226:39947] [client 27.0.158.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/who-we-are"] [unique_id "ab0vwRo1LBAUhfhYPR2DJQAAAQ8"], referer: https://makifim.com.au/who-we-are
[Fri Mar 20 19:30:09.935515 2026] [:error] [pid 49081:tid 49123] [client 206.232.2.72:32755] [client 206.232.2.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/profile"] [unique_id "ab0vwRo1LBAUhfhYPR2DKgAAAQg"], referer: https://makifim.com.au/profile
[Fri Mar 20 19:30:09.958376 2026] [:error] [pid 49081:tid 49136] [client 88.216.252.216:58659] [client 88.216.252.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/our-story"] [unique_id "ab0vwRo1LBAUhfhYPR2DKwAAARU"], referer: https://makifim.com.au/our-story
[Fri Mar 20 19:30:10.467804 2026] [:error] [pid 51714:tid 51728] [client 66.207.176.10:35113] [client 66.207.176.10] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/company"] [unique_id "ab0vwjWI82pxvQ0gksvahAAAAIw"], referer: https://makifim.com.au/company
[Fri Mar 20 19:30:10.762534 2026] [:error] [pid 49081:tid 49124] [client 91.108.230.131:28493] [client 91.108.230.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/our-story"] [unique_id "ab0vwho1LBAUhfhYPR2DMAAAAQk"], referer: https://makifim.com.au/our-story
[Fri Mar 20 19:30:10.956495 2026] [:error] [pid 51714:tid 51730] [client 204.217.128.193:56325] [client 204.217.128.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/who-we-are"] [unique_id "ab0vwjWI82pxvQ0gksvaiAAAAI4"], referer: https://makifim.com.au/who-we-are
[Fri Mar 20 19:30:11.695322 2026] [:error] [pid 27302:tid 27313] [client 161.77.215.149:46899] [client 161.77.215.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/our-story"] [unique_id "ab0vw7DKiUve17xv6yFv4AAAAMk"], referer: https://makifim.com.au/our-story
[Fri Mar 20 19:30:11.878185 2026] [:error] [pid 49080:tid 49101] [client 27.0.158.244:33139] [client 27.0.158.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contact"] [unique_id "ab0vw4k5CHi4V0A3ttj4lQAAAE8"], referer: https://makifim.com.au/contact
[Fri Mar 20 19:30:12.593978 2026] [:error] [pid 49081:tid 49118] [client 37.19.64.18:37865] [client 37.19.64.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/our-story"] [unique_id "ab0vxBo1LBAUhfhYPR2DPQAAAQM"], referer: https://makifim.com.au/our-story
[Fri Mar 20 19:30:13.043418 2026] [:error] [pid 49081:tid 49120] [client 161.77.213.247:50703] [client 161.77.213.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/company-profile"] [unique_id "ab0vxRo1LBAUhfhYPR2DPwAAAQU"], referer: https://makifim.com.au/company-profile
[Fri Mar 20 19:30:13.324183 2026] [:error] [pid 49081:tid 49117] [client 185.55.6.137:28119] [client 185.55.6.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/profile"] [unique_id "ab0vxRo1LBAUhfhYPR2DQgAAAQI"], referer: https://makifim.com.au/profile
[Fri Mar 20 19:30:13.833654 2026] [:error] [pid 27302:tid 27321] [client 88.216.252.36:45873] [client 88.216.252.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contactus"] [unique_id "ab0vxbDKiUve17xv6yFv5gAAANE"], referer: https://makifim.com.au/contactus
[Fri Mar 20 19:30:13.966941 2026] [:error] [pid 27302:tid 27326] [client 161.77.215.15:53143] [client 161.77.215.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/company-profile"] [unique_id "ab0vxbDKiUve17xv6yFv6AAAANY"], referer: https://makifim.com.au/company-profile
[Fri Mar 20 19:30:14.145258 2026] [:error] [pid 49081:tid 49122] [client 206.232.1.13:39755] [client 206.232.1.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/profile"] [unique_id "ab0vxho1LBAUhfhYPR2DRgAAAQc"], referer: https://makifim.com.au/profile
[Fri Mar 20 19:30:14.375157 2026] [:error] [pid 49082:tid 49164] [client 178.171.33.206:41193] [client 178.171.33.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/who-we-are"] [unique_id "ab0vxqpllYJI1LUIdL-wtgAAAVY"], referer: https://makifim.com.au/who-we-are
[Fri Mar 20 19:30:14.716422 2026] [:error] [pid 49081:tid 49123] [client 185.89.107.140:51351] [client 185.89.107.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contactus"] [unique_id "ab0vxho1LBAUhfhYPR2DSQAAAQg"], referer: https://makifim.com.au/contactus
[Fri Mar 20 19:30:14.857637 2026] [:error] [pid 49170:tid 49184] [client 92.240.217.201:29595] [client 92.240.217.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/company-profile"] [unique_id "ab0vxs-c8ctLVDCqUJVuRgAAAAo"], referer: https://makifim.com.au/company-profile
[Fri Mar 20 19:30:15.027395 2026] [:error] [pid 49170:tid 49198] [client 175.29.135.86:47431] [client 175.29.135.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/profile"] [unique_id "ab0vx8-c8ctLVDCqUJVuRwAAABg"], referer: https://makifim.com.au/profile
[Fri Mar 20 19:30:15.284935 2026] [:error] [pid 27302:tid 27305] [client 88.216.249.155:28217] [client 88.216.249.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/who-we-are"] [unique_id "ab0vx7DKiUve17xv6yFv6wAAAME"], referer: https://makifim.com.au/who-we-are
[Fri Mar 20 19:30:15.622475 2026] [:error] [pid 49080:tid 49088] [client 185.55.6.16:32141] [client 185.55.6.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contactus"] [unique_id "ab0vx4k5CHi4V0A3ttj4mwAAAEI"], referer: https://makifim.com.au/contactus
[Fri Mar 20 19:30:15.914119 2026] [:error] [pid 27302:tid 27311] [client 88.216.255.168:38967] [client 88.216.255.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/profile"] [unique_id "ab0vx7DKiUve17xv6yFv7AAAAMc"], referer: https://makifim.com.au/profile
[Fri Mar 20 19:30:15.947312 2026] [:error] [pid 27302:tid 27313] [client 185.213.245.82:64207] [client 185.213.245.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/company-profile"] [unique_id "ab0vx7DKiUve17xv6yFv7QAAAMk"], referer: https://makifim.com.au/company-profile
[Fri Mar 20 19:30:15.984396 2026] [:error] [pid 49080:tid 49109] [client 178.171.50.216:55841] [client 178.171.50.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/our-story"] [unique_id "ab0vx4k5CHi4V0A3ttj4nQAAAFc"], referer: https://makifim.com.au/our-story
[Fri Mar 20 19:30:16.380536 2026] [:error] [pid 27302:tid 27327] [client 185.213.245.180:46939] [client 185.213.245.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/who-we-are"] [unique_id "ab0vyLDKiUve17xv6yFv7gAAANc"], referer: https://makifim.com.au/who-we-are
[Fri Mar 20 19:30:16.690584 2026] [:error] [pid 49170:tid 49182] [client 178.93.107.201:35719] [client 178.93.107.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contactus"] [unique_id "ab0vyM-c8ctLVDCqUJVuTAAAAAg"], referer: https://makifim.com.au/contactus
[Fri Mar 20 19:30:16.895530 2026] [:error] [pid 27302:tid 27304] [client 178.171.48.203:59249] [client 178.171.48.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/our-story"] [unique_id "ab0vyLDKiUve17xv6yFv7wAAAMA"], referer: https://makifim.com.au/our-story
[Fri Mar 20 19:30:17.619472 2026] [:error] [pid 49081:tid 49123] [client 158.46.198.190:29999] [client 158.46.198.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contactus"] [unique_id "ab0vyRo1LBAUhfhYPR2DSwAAAQg"], referer: https://makifim.com.au/contactus
[Fri Mar 20 19:30:18.540823 2026] [:error] [pid 49081:tid 49125] [client 207.170.175.87:58401] [client 207.170.175.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contactus"] [unique_id "ab0vyho1LBAUhfhYPR2DUwAAAQo"], referer: https://makifim.com.au/contactus
[Fri Mar 20 19:30:20.310306 2026] [:error] [pid 51714:tid 51736] [client 178.171.35.20:38123] [client 178.171.35.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/our-story"] [unique_id "ab0vzDWI82pxvQ0gksvakgAAAJQ"], referer: https://makifim.com.au/our-story
[Fri Mar 20 19:30:21.230963 2026] [:error] [pid 51714:tid 51721] [client 152.39.182.211:43551] [client 152.39.182.211] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "141.160.54.24_a59f95a8015e4271637162cf42ba0fb688b4d94a"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/index.php"] [unique_id "ab0vyTWI82pxvQ0gksvajgAAAIU"], referer: https://makifim.com.au/who-we-are
[Fri Mar 20 19:30:21.788409 2026] [:error] [pid 49080:tid 49097] [client 103.195.116.26:40597] [client 103.195.116.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contactus"] [unique_id "ab0vzYk5CHi4V0A3ttj4qAAAAEs"], referer: https://makifim.com.au/contactus
[Fri Mar 20 19:30:21.866673 2026] [:error] [pid 49081:tid 49132] [client 178.171.63.230:40873] [client 178.171.63.230] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/profile"] [unique_id "ab0vzRo1LBAUhfhYPR2DYQAAARE"], referer: https://makifim.com.au/profile
[Fri Mar 20 19:30:22.670183 2026] [:error] [pid 27302:tid 27317] [client 185.55.4.33:63141] [client 185.55.4.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/contactus"] [unique_id "ab0vzrDKiUve17xv6yFv-wAAAM0"], referer: https://makifim.com.au/contactus
[Fri Mar 20 19:30:22.969910 2026] [:error] [pid 27302:tid 27322] [client 213.209.140.231:28807] [client 213.209.140.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/profile"] [unique_id "ab0vzrDKiUve17xv6yFv_gAAANI"], referer: https://makifim.com.au/profile
[Fri Mar 20 19:30:23.732253 2026] [:error] [pid 51714:tid 51718] [client 207.170.172.69:37501] [client 207.170.172.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/our-story"] [unique_id "ab0vzzWI82pxvQ0gksvalwAAAII"], referer: https://makifim.com.au/our-story
[Fri Mar 20 19:30:24.146776 2026] [:error] [pid 49081:tid 49125] [client 84.55.2.173:59361] [client 84.55.2.173] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/profile"] [unique_id "ab0v0Bo1LBAUhfhYPR2DaQAAAQo"], referer: https://makifim.com.au/profile
[Fri Mar 20 20:13:31.755352 2026] [:error] [pid 49081:tid 49116] [client 216.24.212.33:59501] [client 216.24.212.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.33, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab056xo1LBAUhfhYPR2M2gAAAQE"]
[Sat Mar 21 10:35:27.747323 2026] [:error] [pid 1489:tid 1525] [client 172.71.148.182:12610] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ab4D71RvnvBO_DG9kxtCGAAAABU"]
[Sat Mar 21 10:35:27.752151 2026] [:error] [pid 1489:tid 1522] [client 172.71.148.180:12625] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ab4D71RvnvBO_DG9kxtCGQAAABI"]
[Sat Mar 21 10:35:27.760702 2026] [:error] [pid 1489:tid 1513] [client 172.71.148.182:12615] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ab4D71RvnvBO_DG9kxtCGgAAAAk"]
[Sat Mar 21 10:35:27.772764 2026] [:error] [pid 1489:tid 1523] [client 172.71.148.180:12617] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "ab4D71RvnvBO_DG9kxtCGwAAABM"]
[Sat Mar 21 10:35:27.785546 2026] [:error] [pid 1489:tid 1511] [client 172.71.148.180:12627] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "ab4D71RvnvBO_DG9kxtCHAAAAAc"]
[Sat Mar 21 10:35:27.795359 2026] [:error] [pid 1489:tid 1512] [client 172.71.148.184:12562] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/index"] [unique_id "ab4D71RvnvBO_DG9kxtCHQAAAAg"]
[Sat Mar 21 10:35:28.751518 2026] [:error] [pid 33348:tid 33373] [client 172.71.148.181:12368] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "ab4D8DEj9d9zzbs_KjjmBQAAAVY"]
[Sat Mar 21 10:35:28.754011 2026] [:error] [pid 33348:tid 33371] [client 172.71.148.185:13546] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "ab4D8DEj9d9zzbs_KjjmBgAAAVQ"]
[Sat Mar 21 10:35:28.785137 2026] [:error] [pid 33348:tid 33351] [client 172.71.148.180:12632] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "ab4D8DEj9d9zzbs_KjjmBwAAAUA"]
[Sat Mar 21 10:35:28.786882 2026] [:error] [pid 33678:tid 33694] [client 172.71.148.182:12619] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "ab4D8DuClB_om73sXhcx1QAAAg4"]
[Sat Mar 21 10:35:28.818889 2026] [:error] [pid 43052:tid 43056] [client 172.71.148.180:12633] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "ab4D8F5fjm-AiInC1hIRKQAAA4I"]
[Sat Mar 21 10:35:28.825757 2026] [:error] [pid 1491:tid 1573] [client 172.71.148.180:12636] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "ab4D8K3VfHftzE9w9t4Y6AAAAIo"]
[Sat Mar 21 10:35:29.780337 2026] [:error] [pid 49170:tid 49175] [client 172.71.148.183:13035] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "ab4D8b1KUC-QISS0eWpfxQAAAQM"]
[Sat Mar 21 10:35:29.788398 2026] [:error] [pid 42886:tid 42892] [client 172.71.148.180:12641] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "ab4D8V452dC6nbNWav0ArgAAAwQ"]
[Sat Mar 21 10:35:29.800787 2026] [:error] [pid 43052:tid 43073] [client 172.71.148.185:13550] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "ab4D8V5fjm-AiInC1hIRLAAAA5M"]
[Sat Mar 21 10:35:29.800831 2026] [:error] [pid 1491:tid 1586] [client 172.71.148.182:12623] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "ab4D8a3VfHftzE9w9t4Y6gAAAJY"]
[Sat Mar 21 10:35:29.827896 2026] [:error] [pid 43052:tid 43054] [client 172.71.148.181:12370] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "ab4D8V5fjm-AiInC1hIRLgAAA4A"]
[Sat Mar 21 10:35:29.836064 2026] [:error] [pid 42886:tid 42906] [client 172.71.148.180:12644] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.tmp"] [unique_id "ab4D8V452dC6nbNWav0ArwAAAxI"]
[Sat Mar 21 10:35:30.805426 2026] [:error] [pid 1491:tid 1584] [client 172.71.148.183:13038] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local"] [unique_id "ab4D8q3VfHftzE9w9t4Y7QAAAJQ"]
[Sat Mar 21 10:35:30.813074 2026] [:error] [pid 43052:tid 43058] [client 172.71.148.185:13557] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local"] [unique_id "ab4D8l5fjm-AiInC1hIRMQAAA4Q"]
[Sat Mar 21 10:35:30.834892 2026] [:error] [pid 43052:tid 43065] [client 172.71.148.182:12624] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "ab4D8l5fjm-AiInC1hIRMwAAA4s"]
[Sat Mar 21 10:35:30.858975 2026] [:error] [pid 1490:tid 1560] [client 172.71.148.184:12563] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "ab4D8mSWhIPTatyxDeC-hAAAAFg"]
[Sat Mar 21 10:35:30.860298 2026] [:error] [pid 43052:tid 43066] [client 172.71.148.185:13562] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "ab4D8l5fjm-AiInC1hIRNAAAA4w"]
[Sat Mar 21 10:35:30.869464 2026] [:error] [pid 1491:tid 1565] [client 172.71.148.184:12570] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "ab4D8q3VfHftzE9w9t4Y7gAAAII"]
[Sat Mar 21 10:35:31.837588 2026] [:error] [pid 43052:tid 43060] [client 172.71.148.181:12378] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "ab4D815fjm-AiInC1hIRNwAAA4Y"]
[Sat Mar 21 10:35:31.841314 2026] [:error] [pid 1490:tid 1533] [client 172.71.148.183:13044] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "ab4D82SWhIPTatyxDeC-hgAAAEE"]
[Sat Mar 21 10:35:31.882471 2026] [:error] [pid 43052:tid 43062] [client 172.71.148.183:13052] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/private/.env"] [unique_id "ab4D815fjm-AiInC1hIROAAAA4g"]
[Sat Mar 21 10:35:31.896844 2026] [:error] [pid 43052:tid 43063] [client 172.71.148.178:10661] [client 172.71.148.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/core/.env"] [unique_id "ab4D815fjm-AiInC1hIROgAAA4k"]
[Sat Mar 21 10:35:31.904132 2026] [:error] [pid 43052:tid 43076] [client 172.71.148.185:13563] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.env"] [unique_id "ab4D815fjm-AiInC1hIRPAAAA5Y"]
[Sat Mar 21 10:35:32.865553 2026] [:error] [pid 43052:tid 43071] [client 172.71.148.183:9785] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env.local"] [unique_id "ab4D9F5fjm-AiInC1hIRPgAAA5E"]
[Sat Mar 21 10:35:32.879125 2026] [:error] [pid 43052:tid 43077] [client 172.71.148.180:12646] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.php"] [unique_id "ab4D9F5fjm-AiInC1hIRPwAAA5c"]
[Sat Mar 21 10:35:32.903169 2026] [:error] [pid 43052:tid 43068] [client 172.71.148.178:10678] [client 172.71.148.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.json"] [unique_id "ab4D9F5fjm-AiInC1hIRQAAAA44"]
[Sat Mar 21 10:35:32.929165 2026] [:error] [pid 1489:tid 1521] [client 172.71.148.183:9787] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env~"] [unique_id "ab4D9FRvnvBO_DG9kxtCJQAAABE"]
[Sat Mar 21 10:35:32.930363 2026] [:error] [pid 43052:tid 43069] [client 172.71.148.180:12652] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_backup"] [unique_id "ab4D9F5fjm-AiInC1hIRQgAAA48"]
[Sat Mar 21 10:35:33.873847 2026] [:error] [pid 49170:tid 49177] [client 172.71.148.184:12575] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env1"] [unique_id "ab4D9b1KUC-QISS0eWpfygAAAQU"]
[Sat Mar 21 10:35:33.916496 2026] [:error] [pid 33456:tid 33474] [client 172.71.148.182:10804] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env2"] [unique_id "ab4D9Q-0Ziq_OzjHFfUBOQAAAZA"]
[Sat Mar 21 10:35:33.943487 2026] [:error] [pid 1490:tid 1541] [client 172.71.148.178:10685] [client 172.71.148.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "ab4D9WSWhIPTatyxDeC-iwAAAEY"]
[Sat Mar 21 10:35:33.950367 2026] [:error] [pid 33348:tid 33360] [client 172.71.148.185:13568] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.orig"] [unique_id "ab4D9TEj9d9zzbs_KjjmCgAAAUk"]
[Sat Mar 21 10:35:33.967796 2026] [:error] [pid 43052:tid 43055] [client 172.71.148.182:10812] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.envrc"] [unique_id "ab4D9V5fjm-AiInC1hIRRQAAA4E"]
[Sat Mar 21 10:35:34.698769 2026] [:error] [pid 43052:tid 43054] [client 172.71.148.183:9790] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.bak"] [unique_id "ab4D9l5fjm-AiInC1hIRRgAAA4A"]
[Sat Mar 21 10:35:34.904275 2026] [:error] [pid 43052:tid 43071] [client 172.71.148.178:10687] [client 172.71.148.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "ab4D9l5fjm-AiInC1hIRSQAAA5E"]
[Sat Mar 21 10:35:34.962975 2026] [:error] [pid 43052:tid 43057] [client 172.71.148.180:12656] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev.local"] [unique_id "ab4D9l5fjm-AiInC1hIRSwAAA4M"]
[Sat Mar 21 10:35:34.985890 2026] [:error] [pid 43052:tid 43069] [client 172.71.148.182:10820] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.container"] [unique_id "ab4D9l5fjm-AiInC1hIRTQAAA48"]
[Sat Mar 21 10:35:34.985892 2026] [:error] [pid 43052:tid 43068] [client 172.71.148.184:12582] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker"] [unique_id "ab4D9l5fjm-AiInC1hIRTAAAA44"]
[Sat Mar 21 10:35:35.005149 2026] [:error] [pid 1490:tid 1557] [client 172.71.148.184:12584] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/docker/.env"] [unique_id "ab4D92SWhIPTatyxDeC-jAAAAFU"]
[Sat Mar 21 10:35:35.948882 2026] [:error] [pid 33584:tid 33597] [client 172.71.148.184:12889] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/docker/.env.local"] [unique_id "ab4D9-ATEQBBo5z2HklI5wAAAcs"]
[Sat Mar 21 10:35:36.016459 2026] [:error] [pid 1491:tid 1586] [client 172.71.148.180:12660] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/srv/.env"] [unique_id "ab4D-K3VfHftzE9w9t4Y9gAAAJY"]
[Sat Mar 21 10:35:36.018154 2026] [:error] [pid 43052:tid 43070] [client 172.71.148.178:10692] [client 172.71.148.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/server/.env"] [unique_id "ab4D-F5fjm-AiInC1hIRUwAAA5A"]
[Sat Mar 21 10:35:36.032280 2026] [:error] [pid 43052:tid 43062] [client 172.71.148.180:12665] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.env"] [unique_id "ab4D-F5fjm-AiInC1hIRVAAAA4g"]
[Sat Mar 21 10:35:36.043196 2026] [:error] [pid 33584:tid 33587] [client 172.71.148.182:10824] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/site/.env"] [unique_id "ab4D-OATEQBBo5z2HklI6AAAAcE"]
[Sat Mar 21 10:35:36.953203 2026] [:error] [pid 49170:tid 49187] [client 172.71.148.179:12010] [client 172.71.148.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/www/.env"] [unique_id "ab4D-L1KUC-QISS0eWpfzgAAAQ8"]
[Sat Mar 21 10:35:37.023702 2026] [:error] [pid 1491:tid 1579] [client 172.71.148.180:12989] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/html/.env"] [unique_id "ab4D-a3VfHftzE9w9t4Y9wAAAJA"]
[Sat Mar 21 10:35:37.041012 2026] [:error] [pid 49170:tid 49190] [client 172.71.148.178:10698] [client 172.71.148.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/home/.env"] [unique_id "ab4D-b1KUC-QISS0eWpfzwAAARI"]
[Sat Mar 21 10:35:37.067015 2026] [:error] [pid 33584:tid 33595] [client 172.71.148.181:11810] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/.env"] [unique_id "ab4D-eATEQBBo5z2HklI7wAAAck"]
[Sat Mar 21 10:35:37.078706 2026] [:error] [pid 33348:tid 33355] [client 172.71.148.180:12997] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/root/.env"] [unique_id "ab4D-TEj9d9zzbs_KjjmCwAAAUQ"]
[Sat Mar 21 10:35:37.580116 2026] [:error] [pid 43052:tid 43058] [client 172.71.148.180:13230] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "ab4D-V5fjm-AiInC1hIRVQAAA4Q"]
[Sat Mar 21 10:35:37.640984 2026] [:error] [pid 42886:tid 42909] [client 172.71.148.182:14112] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "ab4D-V452dC6nbNWav0AuAAAAxU"]
[Sat Mar 21 10:35:37.976619 2026] [:error] [pid 42886:tid 42898] [client 172.71.148.182:10825] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_config"] [unique_id "ab4D-V452dC6nbNWav0AuQAAAwo"]
[Sat Mar 21 10:35:38.065293 2026] [:error] [pid 33678:tid 33701] [client 172.71.148.183:9791] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_settings"] [unique_id "ab4D-juClB_om73sXhcx2AAAAhU"]
[Sat Mar 21 10:35:38.070901 2026] [:error] [pid 1489:tid 1513] [client 172.71.148.180:13003] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_secret"] [unique_id "ab4D-lRvnvBO_DG9kxtCKgAAAAk"]
[Sat Mar 21 10:35:38.081039 2026] [:error] [pid 49170:tid 49173] [client 172.71.148.181:11816] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local.backup"] [unique_id "ab4D-r1KUC-QISS0eWpf0AAAAQE"]
[Sat Mar 21 10:35:38.101465 2026] [:error] [pid 49170:tid 49194] [client 172.71.148.181:11279] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/index"] [unique_id "ab4D-r1KUC-QISS0eWpf0QAAARY"]
[Sat Mar 21 10:35:38.157392 2026] [:error] [pid 1489:tid 1503] [client 172.71.148.181:11283] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ab4D-lRvnvBO_DG9kxtCKwAAAAA"]
[Sat Mar 21 10:35:38.498564 2026] [:error] [pid 49170:tid 49182] [client 172.71.148.184:11166] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ab4D-r1KUC-QISS0eWpf0wAAAQo"]
[Sat Mar 21 10:35:38.586686 2026] [:error] [pid 49170:tid 49186] [client 172.71.148.184:11170] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ab4D-r1KUC-QISS0eWpf1AAAAQ4"]
[Sat Mar 21 10:35:38.604802 2026] [:error] [pid 1491:tid 1578] [client 172.71.148.183:13094] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "ab4D-q3VfHftzE9w9t4Y-wAAAI8"]
[Sat Mar 21 10:35:38.618785 2026] [:error] [pid 1489:tid 1521] [client 172.71.148.181:11286] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "ab4D-lRvnvBO_DG9kxtCLQAAABE"]
[Sat Mar 21 10:35:38.638829 2026] [:error] [pid 1491:tid 1585] [client 172.71.148.178:12572] [client 172.71.148.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "ab4D-q3VfHftzE9w9t4Y_AAAAJU"]
[Sat Mar 21 10:35:38.681998 2026] [:error] [pid 1491:tid 1570] [client 172.71.148.183:13099] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "ab4D-q3VfHftzE9w9t4Y_QAAAIc"]
[Sat Mar 21 10:35:39.002623 2026] [:error] [pid 1491:tid 1586] [client 172.71.148.181:11287] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "ab4D-63VfHftzE9w9t4Y_gAAAJY"]
[Sat Mar 21 10:35:39.081657 2026] [:error] [pid 33678:tid 33704] [client 172.71.148.184:11174] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "ab4D-zuClB_om73sXhcx2gAAAhg"]
[Sat Mar 21 10:35:39.116063 2026] [:error] [pid 33584:tid 33586] [client 172.71.148.183:13103] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "ab4D--ATEQBBo5z2HklI8AAAAcA"]
[Sat Mar 21 10:35:39.128132 2026] [:error] [pid 33678:tid 33687] [client 172.71.148.180:13233] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "ab4D-zuClB_om73sXhcx2wAAAgc"]
[Sat Mar 21 10:35:39.145838 2026] [:error] [pid 33678:tid 33695] [client 172.71.148.184:11175] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "ab4D-zuClB_om73sXhcx3AAAAg8"]
[Sat Mar 21 10:35:39.199561 2026] [:error] [pid 33584:tid 33592] [client 172.71.148.179:9600] [client 172.71.148.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "ab4D--ATEQBBo5z2HklI8QAAAcY"]
[Sat Mar 21 10:35:39.522689 2026] [:error] [pid 33348:tid 33354] [client 172.71.148.184:11178] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "ab4D-zEj9d9zzbs_KjjmDAAAAUM"]
[Sat Mar 21 10:35:39.576089 2026] [:error] [pid 42886:tid 42893] [client 172.71.148.180:13237] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.tmp"] [unique_id "ab4D-1452dC6nbNWav0AwwAAAwU"]
[Sat Mar 21 10:35:39.619029 2026] [:error] [pid 33348:tid 33356] [client 172.71.148.180:13242] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "ab4D-zEj9d9zzbs_KjjmDQAAAUU"]
[Sat Mar 21 10:35:39.627200 2026] [:error] [pid 43052:tid 43078] [client 172.71.148.185:11229] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local"] [unique_id "ab4D-15fjm-AiInC1hIRVwAAA5g"]
[Sat Mar 21 10:35:39.668803 2026] [:error] [pid 43052:tid 43073] [client 172.71.148.182:14120] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local"] [unique_id "ab4D-15fjm-AiInC1hIRWAAAA5M"]
[Sat Mar 21 10:35:39.707811 2026] [:error] [pid 33348:tid 33374] [client 172.71.148.179:9606] [client 172.71.148.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "ab4D-zEj9d9zzbs_KjjmDgAAAVc"]
[Sat Mar 21 10:35:40.038559 2026] [:error] [pid 33348:tid 33373] [client 172.71.148.179:9610] [client 172.71.148.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "ab4D_DEj9d9zzbs_KjjmEQAAAVY"]
[Sat Mar 21 10:35:40.087692 2026] [:error] [pid 43052:tid 43062] [client 172.71.148.184:11184] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "ab4D_F5fjm-AiInC1hIRWQAAA4g"]
[Sat Mar 21 10:35:40.126106 2026] [:error] [pid 33348:tid 33371] [client 172.71.148.183:13111] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "ab4D_DEj9d9zzbs_KjjmEgAAAVQ"]
[Sat Mar 21 10:35:40.142484 2026] [:error] [pid 1489:tid 1514] [client 172.71.148.184:11190] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "ab4D_FRvnvBO_DG9kxtCNAAAAAo"]
[Sat Mar 21 10:35:40.177219 2026] [:error] [pid 33348:tid 33351] [client 172.71.148.184:11197] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/core/.env"] [unique_id "ab4D_DEj9d9zzbs_KjjmEwAAAUA"]
[Sat Mar 21 10:35:40.204996 2026] [:error] [pid 33456:tid 33468] [client 172.71.148.183:13119] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.env"] [unique_id "ab4D_A-0Ziq_OzjHFfUBOgAAAYo"]
[Sat Mar 21 10:35:40.534849 2026] [:error] [pid 43052:tid 43069] [client 172.71.148.183:13120] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/private/.env"] [unique_id "ab4D_F5fjm-AiInC1hIRXAAAA48"]
[Sat Mar 21 10:35:40.642051 2026] [:error] [pid 33584:tid 33594] [client 172.71.148.180:13250] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env.local"] [unique_id "ab4D_OATEQBBo5z2HklI-AAAAcg"]
[Sat Mar 21 10:35:40.659304 2026] [:error] [pid 33584:tid 33596] [client 172.71.148.181:11289] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.php"] [unique_id "ab4D_OATEQBBo5z2HklI-QAAAco"]
[Sat Mar 21 10:35:40.684053 2026] [:error] [pid 49170:tid 49183] [client 172.71.148.185:11234] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.json"] [unique_id "ab4D_L1KUC-QISS0eWpf2AAAAQs"]
[Sat Mar 21 10:35:40.714099 2026] [:error] [pid 49170:tid 49185] [client 172.71.148.184:11199] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_backup"] [unique_id "ab4D_L1KUC-QISS0eWpf2QAAAQ0"]
[Sat Mar 21 10:35:41.049459 2026] [:error] [pid 1489:tid 1523] [client 172.71.148.180:13255] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env~"] [unique_id "ab4D_VRvnvBO_DG9kxtCOwAAABM"]
[Sat Mar 21 10:35:41.163105 2026] [:error] [pid 1491:tid 1572] [client 172.71.148.185:11242] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env2"] [unique_id "ab4D_a3VfHftzE9w9t4ZBwAAAIk"]
[Sat Mar 21 10:35:41.169397 2026] [:error] [pid 33584:tid 33606] [client 172.71.148.182:14122] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env1"] [unique_id "ab4D_eATEQBBo5z2HklI-gAAAdQ"]
[Sat Mar 21 10:35:41.215799 2026] [:error] [pid 43052:tid 43059] [client 172.71.148.185:11243] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "ab4D_V5fjm-AiInC1hIRXwAAA4U"]
[Sat Mar 21 10:35:41.233312 2026] [:error] [pid 43052:tid 43065] [client 172.71.148.182:14130] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.envrc"] [unique_id "ab4D_V5fjm-AiInC1hIRYAAAA4s"]
[Sat Mar 21 10:35:41.564172 2026] [:error] [pid 43052:tid 43078] [client 172.71.148.180:13263] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.orig"] [unique_id "ab4D_V5fjm-AiInC1hIRYQAAA5g"]
[Sat Mar 21 10:35:41.665882 2026] [:error] [pid 1489:tid 1509] [client 172.71.148.183:13125] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.bak"] [unique_id "ab4D_VRvnvBO_DG9kxtCPgAAAAY"]
[Sat Mar 21 10:35:41.691578 2026] [:error] [pid 43052:tid 43074] [client 172.71.148.184:11201] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "ab4D_V5fjm-AiInC1hIRYwAAA5Q"]
[Sat Mar 21 10:35:41.731983 2026] [:error] [pid 1489:tid 1518] [client 172.71.148.182:14136] [client 172.71.148.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev.local"] [unique_id "ab4D_VRvnvBO_DG9kxtCPwAAAA4"]
[Sat Mar 21 10:35:41.746082 2026] [:error] [pid 1489:tid 1519] [client 172.71.148.184:11202] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker"] [unique_id "ab4D_VRvnvBO_DG9kxtCQAAAAA8"]
[Sat Mar 21 10:35:41.899677 2026] [:error] [pid 33584:tid 33603] [client 172.71.148.180:13246] [client 172.71.148.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/docker/.env"] [unique_id "ab4D_eATEQBBo5z2HklI-wAAAdE"]
[Sat Mar 21 10:35:42.061449 2026] [:error] [pid 1489:tid 1516] [client 172.71.148.184:11204] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.container"] [unique_id "ab4D_lRvnvBO_DG9kxtCQgAAAAw"]
[Sat Mar 21 10:35:42.197588 2026] [:error] [pid 1490:tid 1556] [client 172.71.148.184:11211] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/docker/.env.local"] [unique_id "ab4D_mSWhIPTatyxDeC-jgAAAFQ"]
[Sat Mar 21 10:35:42.240373 2026] [:error] [pid 1489:tid 1515] [client 172.71.148.181:11293] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/server/.env"] [unique_id "ab4D_lRvnvBO_DG9kxtCRAAAAAs"]
[Sat Mar 21 10:35:42.265471 2026] [:error] [pid 43052:tid 43060] [client 172.71.148.185:11258] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/srv/.env"] [unique_id "ab4D_l5fjm-AiInC1hIRZQAAA4Y"]
[Sat Mar 21 10:35:42.402465 2026] [:error] [pid 43052:tid 43064] [client 172.71.148.183:10197] [client 172.71.148.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.env"] [unique_id "ab4D_l5fjm-AiInC1hIRZgAAA4o"]
[Sat Mar 21 10:35:42.563332 2026] [:error] [pid 43052:tid 43059] [client 172.71.148.181:11301] [client 172.71.148.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/site/.env"] [unique_id "ab4D_l5fjm-AiInC1hIRaAAAA4U"]
[Sat Mar 21 10:35:42.700099 2026] [:error] [pid 1490:tid 1554] [client 172.71.148.185:11261] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/www/.env"] [unique_id "ab4D_mSWhIPTatyxDeC-jwAAAFM"]
[Sat Mar 21 10:35:42.754069 2026] [:error] [pid 42886:tid 42895] [client 172.71.148.184:11217] [client 172.71.148.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/.env"] [unique_id "ab4D_l452dC6nbNWav0AxwAAAwc"]
[Sat Mar 21 10:35:42.779121 2026] [:error] [pid 1489:tid 1520] [client 172.71.148.185:11266] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/html/.env"] [unique_id "ab4D_lRvnvBO_DG9kxtCRwAAABA"]
[Sat Mar 21 10:35:43.553210 2026] [:error] [pid 43052:tid 43060] [client 172.71.148.185:11250] [client 172.71.148.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_settings"] [unique_id "ab4D_15fjm-AiInC1hIRcAAAA4Y"]
[Sat Mar 21 20:09:50.966610 2026] [:error] [pid 49170:tid 49192] [client 149.88.103.49:38772] [client 149.88.103.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.49, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab6Kjr1KUC-QISS0eWrmNAAAARQ"]
[Sat Mar 21 20:09:55.199953 2026] [:error] [pid 43052:tid 43058] [client 149.88.103.49:1256] [client 149.88.103.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.49, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab6Kk15fjm-AiInC1hIXYwAAA4Q"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend
[Sat Mar 21 20:09:56.604608 2026] [:error] [pid 43052:tid 43059] [client 149.88.103.49:1256] [client 149.88.103.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.49, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab6KlF5fjm-AiInC1hIXZwAAA4U"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend
[Sat Mar 21 20:10:00.343015 2026] [:error] [pid 43052:tid 43058] [client 149.88.103.49:1256] [client 149.88.103.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.88.103.49, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab6KmF5fjm-AiInC1hIXagAAA4Q"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend&redirect_to=https%3A%2F%2Fmakifim.com.au%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US
[Sat Mar 21 20:10:02.566322 2026] [autoindex:error] [pid 49170:tid 49180] [client 103.4.122.14:55896] AH01276: Cannot serve directory /home/makifimc/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 21 20:12:57.880122 2026] [proxy_fcgi:error] [pid 1490:tid 1552] (70007)The timeout specified has expired: [client 149.88.103.49:40239] AH01075: Error dispatching request to : (polling), referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings
[Sat Mar 21 20:14:02.836322 2026] [proxy_fcgi:error] [pid 49170:tid 49173] (70007)The timeout specified has expired: [client 149.88.103.49:58588] AH01075: Error dispatching request to : (polling), referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings
[Sat Mar 21 20:31:20.357139 2026] [:error] [pid 1489:tid 1521] [client 143.44.165.253:7235] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab6PmFRvnvBO_DG9kxsH_wAAABE"], referer: https://makifim.com.au/wp-admin/admin.php?page=WordfenceScan&subpage=scan_options
[Sat Mar 21 20:31:22.687657 2026] [:error] [pid 43052:tid 43077] [client 143.44.165.253:7267] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab6Pml5fjm-AiInC1hIiOgAAA5c"], referer: https://makifim.com.au/wp-admin/admin.php?page=WordfenceScan&subpage=scan_options
[Sun Mar 22 02:35:33.489628 2026] [:error] [pid 23666:tid 23669] [client 85.11.167.108:16285] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab7k9cMCSeYGBmLsLigbrwAAAQE"]
[Sun Mar 22 17:34:41.032891 2026] [autoindex:error] [pid 51361:tid 51377] [client 173.212.207.196:54399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 22 19:12:14.121735 2026] [:error] [pid 30166:tid 30177] [client 143.44.165.253:46893] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab_Ojrm4_26jKMD0zy3Q5QAAAUY"]
[Sun Mar 22 19:12:18.726518 2026] [:error] [pid 51363:tid 51451] [client 143.44.165.253:47715] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ab_Oklwa9x6OCTRkhl2NLgAAAJU"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend
[Sun Mar 22 21:02:09.084838 2026] [autoindex:error] [pid 30166:tid 30177] [client 103.4.122.14:42208] AH01276: Cannot serve directory /home/makifimc/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 01:37:01.723776 2026] [:error] [pid 20574:tid 20607] [client 20.163.240.53:5964] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acAovddMXEnEZrwyzJkF7QAAABI"]
[Mon Mar 23 01:37:02.589493 2026] [:error] [pid 27776:tid 27860] [client 20.163.240.53:5425] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acAovo3Eaq7IZ5L-4XVLjAAAAQ0"]
[Mon Mar 23 01:37:03.410203 2026] [:error] [pid 27776:tid 27854] [client 20.163.240.53:5427] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acAov43Eaq7IZ5L-4XVLkAAAAQg"]
[Mon Mar 23 01:37:04.239497 2026] [:error] [pid 20587:tid 20656] [client 20.163.240.53:5378] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acAowIByf8r3QAk4VXPshgAAAI0"]
[Mon Mar 23 01:54:39.504293 2026] [proxy_fcgi:error] [pid 27776:tid 27852] [client 103.4.122.14:52024] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Mon Mar 23 03:16:04.765490 2026] [:error] [pid 20574:tid 20605] [client 20.163.240.53:63706] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acA_9NdMXEnEZrwyzJkjdwAAABA"]
[Mon Mar 23 03:16:05.656533 2026] [:error] [pid 27776:tid 27871] [client 20.163.240.53:63713] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acA_9Y3Eaq7IZ5L-4XV-6QAAARc"]
[Mon Mar 23 03:16:06.484898 2026] [:error] [pid 20856:tid 20930] [client 20.163.240.53:9392] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acA_9sxFtXFVNE-X2-K7zwAAAMs"]
[Mon Mar 23 03:16:07.306161 2026] [:error] [pid 27776:tid 27849] [client 20.163.240.53:9364] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acA_943Eaq7IZ5L-4XV-7AAAAQM"]
[Mon Mar 23 06:15:20.878551 2026] [:error] [pid 14573:tid 14576] [client 20.220.145.74:21034] [client 20.220.145.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.145.74, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acBp-O-oSmHn3q4_J1G8wAAAAUE"]
[Mon Mar 23 06:15:31.796093 2026] [autoindex:error] [pid 14573:tid 14591] [client 20.220.145.74:21034] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 06:15:32.014340 2026] [autoindex:error] [pid 14573:tid 14597] [client 20.220.145.74:21034] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 06:15:35.275827 2026] [autoindex:error] [pid 14573:tid 14591] [client 20.220.145.74:21034] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 06:15:47.347107 2026] [autoindex:error] [pid 14573:tid 14596] [client 20.220.145.74:21034] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 06:15:50.703723 2026] [:error] [pid 14573:tid 14587] [client 20.220.145.74:21034] [client 20.220.145.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acBqFu-oSmHn3q4_J1G9OAAAAUw"]
[Mon Mar 23 06:15:53.736478 2026] [autoindex:error] [pid 23439:tid 23458] [client 20.220.145.74:21016] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 06:15:59.906985 2026] [autoindex:error] [pid 23439:tid 23466] [client 20.220.145.74:21016] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/et-cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 06:16:03.646846 2026] [:error] [pid 23439:tid 23451] [client 20.220.145.74:21016] [client 20.220.145.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acBqI6Zv8XIzUKdgaMdB7AAAAAI"]
[Mon Mar 23 06:16:04.492554 2026] [autoindex:error] [pid 14573:tid 14581] [client 20.220.145.74:20752] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 06:16:07.831556 2026] [:error] [pid 14573:tid 14576] [client 20.220.145.74:20752] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acBqJ--oSmHn3q4_J1G9UAAAAUE"]
[Mon Mar 23 06:16:08.662004 2026] [:error] [pid 57265:tid 57289] [client 20.220.145.74:21013] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acBqKGNLjPJJkhuqCsi8KgAAARY"]
[Mon Mar 23 06:16:09.491642 2026] [:error] [pid 57265:tid 57279] [client 20.220.145.74:21011] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acBqKWNLjPJJkhuqCsi8KwAAAQw"]
[Mon Mar 23 06:16:10.318882 2026] [:error] [pid 23539:tid 23563] [client 20.220.145.74:21043] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acBqKn7Dh3qWGSpIAZVVVAAAAM8"]
[Mon Mar 23 07:44:58.957486 2026] [proxy_fcgi:error] [pid 23539:tid 23567] [client 143.44.165.253:26910] AH01067: Failed to read FastCGI header, referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=7a1e599efd2ca3db0082e0ff3c3afd90&GOTMLS_mt=a22e048db88f6e9ed84adb61266d9602
[Mon Mar 23 07:44:58.957576 2026] [proxy_fcgi:error] [pid 23539:tid 23567] (104)Connection reset by peer: [client 143.44.165.253:26910] AH01075: Error dispatching request to : , referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=7a1e599efd2ca3db0082e0ff3c3afd90&GOTMLS_mt=a22e048db88f6e9ed84adb61266d9602
[Mon Mar 23 09:08:47.330146 2026] [proxy_fcgi:error] [pid 23440:tid 23485] [client 143.44.165.253:3680] AH01067: Failed to read FastCGI header, referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=7a1e599efd2ca3db0082e0ff3c3afd90&GOTMLS_mt=a22e048db88f6e9ed84adb61266d9602
[Mon Mar 23 09:08:47.330295 2026] [proxy_fcgi:error] [pid 23440:tid 23485] (104)Connection reset by peer: [client 143.44.165.253:3680] AH01075: Error dispatching request to : , referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=7a1e599efd2ca3db0082e0ff3c3afd90&GOTMLS_mt=a22e048db88f6e9ed84adb61266d9602
[Mon Mar 23 09:10:37.425029 2026] [proxy_fcgi:error] [pid 14573:tid 14579] [client 143.44.165.253:31583] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_posts` SET `post_modified` = '2026-03-23 01:10:37', `post_modified_gmt` = '2026-03-23 00:58:45', `post_content` = '{\\"scan\\":{\\"dir\\":\\"\\\\/home\\\\/makifimc\\\\/public_html\\",\\"start\\":1774219329,\\"type\\":\\"Complete Scan\\",\\"settings\\":{\\"msg_position\\":[\\"80px\\",\\"40px\\",\\"400px\\",\\"600px\\"],\\"scan_what\\":2,\\"scan_depth\\":-1,\\"exclude_ext\\":[\\"png\\",\\"jpg\\",\\"jpeg\\",\\"gif\\",\\"bmp\\",\\"tif\\",\\"tiff\\",\\"psd\\",\\"svg\\",\\"webp\\",\\"doc\\",\\"docx\\",\\"otf\\",\\"ttf\\",\\"fla\\",\\"flv\\",\\"mov\\",\\"mp3\\",\\"mp4\\",\\"pptx\\",\\"ppsx\\",\\"pdf\\",\\"css\\",\\"pot\\",\\"po\\",\\"mo\\",\\"so\\",\\"exe\\",\\"zip\\",\\"7z\\",\\"gz\\",\\"rar\\"],\\"check_custom\\":\\"\\",\\"exclude_dir\\":[],\\"check\\":[\\"db_scan\\",\\"htaccess\\",\\"timthumb\\",\\"known\\"],\\"user_can\\":\\"activate_plugins\\",\\"dont_check\\":[],\\"scan_level\\":3,\\"skip_quarantine\\":0},\\"last_threat\\":1774228237.38864,\\"finish\\":1774227525,\\"microtime\\":8908,\\"percent\\":-1},\\"settings\\":{\\"m...', referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=7a1e599efd2ca3db0082e0ff3c3afd90&GOTMLS_mt=a22e048db88f6e9ed84adb61266d9602
[Mon Mar 23 09:35:35.476987 2026] [proxy_fcgi:error] [pid 23441:tid 23519] [client 103.4.122.14:53530] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO wp_wfconfig (name, val, autoload) values ('wfsd_engine', '', 'no') ON DUPLICATE KEY UPDATE val = '', autoload = 'no' made by do_action('wp_ajax_nopriv_wordfence_doScan'), WP_Hook->do_action, WP_Hook->apply_filters, wordfence::ajax_doScan_callback, wfScan::wfScanMain, wfConfig::set'
[Mon Mar 23 13:54:44.156980 2026] [:error] [pid 14573:tid 14583] [client 143.44.165.253:51572] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acDVpO-oSmHn3q4_J1FXkAAAAUg"], referer: https://makifim.com.au/wp-admin/admin.php?page=WordfenceScan
[Mon Mar 23 13:54:46.187830 2026] [:error] [pid 14573:tid 14594] [client 143.44.165.253:51572] [client 143.44.165.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.253, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acDVpu-oSmHn3q4_J1FXkQAAAVM"], referer: https://makifim.com.au/wp-admin/admin.php?page=WordfenceScan
[Mon Mar 23 17:14:53.268882 2026] [:error] [pid 35165:tid 35182] [client 20.102.82.167:54360] [client 20.102.82.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.102.82.167, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acEEjc6udpN6Esk7JKug1gAAAY4"]
[Mon Mar 23 17:15:01.048528 2026] [autoindex:error] [pid 35165:tid 35178] [client 20.102.82.167:54360] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:15:01.263827 2026] [autoindex:error] [pid 35165:tid 35174] [client 20.102.82.167:54360] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:15:03.488991 2026] [autoindex:error] [pid 35165:tid 35186] [client 20.102.82.167:54360] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:15:11.973486 2026] [autoindex:error] [pid 35165:tid 35185] [client 20.102.82.167:54360] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:15:14.401708 2026] [:error] [pid 35165:tid 35176] [client 20.102.82.167:54360] [client 20.102.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acEEos6udpN6Esk7JKug_gAAAYg"]
[Mon Mar 23 17:15:16.833284 2026] [autoindex:error] [pid 57265:tid 57273] [client 20.102.82.167:54340] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:15:21.392914 2026] [autoindex:error] [pid 57265:tid 57272] [client 20.102.82.167:54340] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/et-cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:15:24.408139 2026] [:error] [pid 57265:tid 57276] [client 20.102.82.167:54340] [client 20.102.82.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acEErGNLjPJJkhuqCsgNaAAAAQk"]
[Mon Mar 23 17:15:25.483949 2026] [autoindex:error] [pid 35165:tid 35181] [client 20.102.82.167:54373] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 17:15:28.187401 2026] [:error] [pid 35165:tid 35185] [client 20.102.82.167:54373] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acEEsM6udpN6Esk7JKuhCgAAAZE"]
[Mon Mar 23 17:15:29.233179 2026] [:error] [pid 23440:tid 23500] [client 20.102.82.167:54371] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acEEsT49_8n8h_ttcUooigAAAFg"]
[Mon Mar 23 17:15:30.138880 2026] [:error] [pid 57265:tid 57268] [client 20.102.82.167:54355] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acEEsmNLjPJJkhuqCsgNcQAAAQE"]
[Mon Mar 23 17:15:31.137188 2026] [:error] [pid 57265:tid 57270] [client 20.102.82.167:54277] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acEEs2NLjPJJkhuqCsgNeAAAAQM"]
[Mon Mar 23 20:04:18.846520 2026] [:error] [pid 23440:tid 23477] [client 216.24.210.38:47493] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acEsQj49_8n8h_ttcUpBzAAAAEE"]
[Tue Mar 24 00:29:14.872884 2026] [:error] [pid 56435:tid 56525] [client 40.85.246.124:56311] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/path.php"] [unique_id "acFqWsrwr-l5A-s9ryBMRAAAARg"]
[Tue Mar 24 00:29:15.283139 2026] [:error] [pid 56236:tid 56310] [client 40.85.246.124:55045] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/path.php"] [unique_id "acFqW3apFgYp0uZ8twAQBAAAAFE"]
[Tue Mar 24 00:29:15.700615 2026] [:error] [pid 56236:tid 56305] [client 40.85.246.124:55049] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/path.php"] [unique_id "acFqW3apFgYp0uZ8twAQBgAAAEw"]
[Tue Mar 24 00:29:16.110788 2026] [:error] [pid 56237:tid 56335] [client 40.85.246.124:55060] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/path.php"] [unique_id "acFqXAymO0MnzQb90MMM6QAAAI4"]
[Tue Mar 24 00:29:16.522174 2026] [:error] [pid 56236:tid 56297] [client 40.85.246.124:56262] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdf.php"] [unique_id "acFqXHapFgYp0uZ8twAQCAAAAEQ"]
[Tue Mar 24 00:29:16.933437 2026] [:error] [pid 56238:tid 56368] [client 40.85.246.124:56276] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdf.php"] [unique_id "acFqXFSqceFAZRgPDq5-ggAAANQ"]
[Tue Mar 24 00:29:17.344722 2026] [:error] [pid 56236:tid 56316] [client 40.85.246.124:55048] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdf.php"] [unique_id "acFqXXapFgYp0uZ8twAQCgAAAFc"]
[Tue Mar 24 00:29:17.755501 2026] [:error] [pid 56435:tid 56513] [client 40.85.246.124:55050] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdf.php"] [unique_id "acFqXcrwr-l5A-s9ryBMSAAAAQw"]
[Tue Mar 24 00:29:18.166449 2026] [:error] [pid 56435:tid 56504] [client 40.85.246.124:56283] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fleen.php"] [unique_id "acFqXsrwr-l5A-s9ryBMSwAAAQU"]
[Tue Mar 24 00:29:18.577006 2026] [:error] [pid 56435:tid 56523] [client 40.85.246.124:56308] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fleen.php"] [unique_id "acFqXsrwr-l5A-s9ryBMTQAAARY"]
[Tue Mar 24 00:29:18.986749 2026] [:error] [pid 56238:tid 56370] [client 40.85.246.124:55059] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fleen.php"] [unique_id "acFqXlSqceFAZRgPDq5-hQAAANY"]
[Tue Mar 24 00:29:19.398813 2026] [:error] [pid 56238:tid 56366] [client 40.85.246.124:55041] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fleen.php"] [unique_id "acFqX1SqceFAZRgPDq5-hwAAANI"]
[Tue Mar 24 00:29:19.808999 2026] [:error] [pid 56236:tid 56306] [client 40.85.246.124:55058] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-tem.php"] [unique_id "acFqX3apFgYp0uZ8twAQDAAAAE0"]
[Tue Mar 24 00:29:20.221762 2026] [:error] [pid 56236:tid 56312] [client 40.85.246.124:17326] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-tem.php"] [unique_id "acFqYHapFgYp0uZ8twAQDQAAAFM"]
[Tue Mar 24 00:29:20.631694 2026] [:error] [pid 56236:tid 56294] [client 40.85.246.124:56282] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-tem.php"] [unique_id "acFqYHapFgYp0uZ8twAQDgAAAEE"]
[Tue Mar 24 00:29:21.041569 2026] [:error] [pid 56236:tid 56308] [client 40.85.246.124:55087] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-tem.php"] [unique_id "acFqYXapFgYp0uZ8twAQEAAAAE8"]
[Tue Mar 24 00:29:21.451004 2026] [:error] [pid 56238:tid 56355] [client 40.85.246.124:56261] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av6m.php"] [unique_id "acFqYVSqceFAZRgPDq5-jgAAAMc"]
[Tue Mar 24 00:29:21.862084 2026] [:error] [pid 56236:tid 56295] [client 40.85.246.124:56294] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av6m.php"] [unique_id "acFqYXapFgYp0uZ8twAQFgAAAEI"]
[Tue Mar 24 00:29:22.273983 2026] [:error] [pid 56236:tid 56303] [client 40.85.246.124:55040] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av6m.php"] [unique_id "acFqYnapFgYp0uZ8twAQGgAAAEo"]
[Tue Mar 24 00:29:22.685080 2026] [:error] [pid 56236:tid 56312] [client 40.85.246.124:55052] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av6m.php"] [unique_id "acFqYnapFgYp0uZ8twAQHwAAAFM"]
[Tue Mar 24 00:29:23.099701 2026] [:error] [pid 56238:tid 56362] [client 40.85.246.124:56302] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autogooey.php"] [unique_id "acFqY1SqceFAZRgPDq5-lAAAAM4"]
[Tue Mar 24 00:29:23.511415 2026] [:error] [pid 56238:tid 56350] [client 40.85.246.124:56304] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autogooey.php"] [unique_id "acFqY1SqceFAZRgPDq5-lgAAAMI"]
[Tue Mar 24 00:29:23.921963 2026] [:error] [pid 56237:tid 56328] [client 40.85.246.124:56314] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autogooey.php"] [unique_id "acFqYwymO0MnzQb90MMM7gAAAIc"]
[Tue Mar 24 00:29:24.332851 2026] [:error] [pid 56435:tid 56510] [client 40.85.246.124:55094] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autogooey.php"] [unique_id "acFqZMrwr-l5A-s9ryBMVgAAAQo"]
[Tue Mar 24 00:29:24.745116 2026] [:error] [pid 56236:tid 56305] [client 40.85.246.124:56313] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "acFqZHapFgYp0uZ8twAQKAAAAEw"]
[Tue Mar 24 00:29:25.157603 2026] [:error] [pid 56237:tid 56342] [client 40.85.246.124:56272] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "acFqZQymO0MnzQb90MMM8AAAAJU"]
[Tue Mar 24 00:29:25.567440 2026] [:error] [pid 56237:tid 56340] [client 40.85.246.124:55042] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "acFqZQymO0MnzQb90MMM8wAAAJM"]
[Tue Mar 24 00:29:25.979497 2026] [:error] [pid 56236:tid 56303] [client 40.85.246.124:55068] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "acFqZXapFgYp0uZ8twAQKgAAAEo"]
[Tue Mar 24 00:29:26.389922 2026] [:error] [pid 56236:tid 56300] [client 40.85.246.124:56317] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "acFqZnapFgYp0uZ8twAQLQAAAEc"]
[Tue Mar 24 00:29:26.802296 2026] [:error] [pid 56435:tid 56499] [client 40.85.246.124:55062] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "acFqZsrwr-l5A-s9ryBMWwAAAQA"]
[Tue Mar 24 00:29:27.213419 2026] [:error] [pid 56238:tid 56354] [client 40.85.246.124:55067] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "acFqZ1SqceFAZRgPDq5-mgAAAMY"]
[Tue Mar 24 00:29:27.623705 2026] [:error] [pid 56435:tid 56504] [client 40.85.246.124:56286] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "acFqZ8rwr-l5A-s9ryBMYAAAAQU"]
[Tue Mar 24 00:29:28.035262 2026] [:error] [pid 56238:tid 56349] [client 40.85.246.124:56270] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "acFqaFSqceFAZRgPDq5-nAAAAME"]
[Tue Mar 24 00:29:28.444545 2026] [:error] [pid 56236:tid 56295] [client 40.85.246.124:56259] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "acFqaHapFgYp0uZ8twAQMgAAAEI"]
[Tue Mar 24 00:29:28.888188 2026] [:error] [pid 56435:tid 56511] [client 40.85.246.124:56263] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "acFqaMrwr-l5A-s9ryBMZAAAAQs"]
[Tue Mar 24 00:29:29.299992 2026] [:error] [pid 56435:tid 56521] [client 40.85.246.124:56278] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "acFqacrwr-l5A-s9ryBMZwAAARQ"]
[Tue Mar 24 00:29:29.710368 2026] [:error] [pid 56236:tid 56305] [client 40.85.246.124:56319] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/agg.php"] [unique_id "acFqaXapFgYp0uZ8twAQNAAAAEw"]
[Tue Mar 24 00:29:30.121875 2026] [:error] [pid 56237:tid 56332] [client 40.85.246.124:56301] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/agg.php"] [unique_id "acFqagymO0MnzQb90MMM-gAAAIs"]
[Tue Mar 24 00:29:30.539624 2026] [:error] [pid 56237:tid 56345] [client 40.85.246.124:55066] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/agg.php"] [unique_id "acFqagymO0MnzQb90MMM-wAAAJg"]
[Tue Mar 24 00:29:30.956729 2026] [:error] [pid 56238:tid 56362] [client 40.85.246.124:56284] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/agg.php"] [unique_id "acFqalSqceFAZRgPDq5-oAAAAM4"]
[Tue Mar 24 00:29:31.366201 2026] [:error] [pid 56237:tid 56343] [client 40.85.246.124:17306] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "acFqawymO0MnzQb90MMM_AAAAJY"]
[Tue Mar 24 00:29:31.786706 2026] [:error] [pid 56435:tid 56524] [client 40.85.246.124:56271] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acFqa8rwr-l5A-s9ryBMbwAAARc"]
[Tue Mar 24 00:29:32.202574 2026] [:error] [pid 56237:tid 56336] [client 40.85.246.124:56290] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acFqbAymO0MnzQb90MMNAAAAAI8"]
[Tue Mar 24 00:29:32.612910 2026] [:error] [pid 56435:tid 56504] [client 40.85.246.124:17292] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acFqbMrwr-l5A-s9ryBMcAAAAQU"]
[Tue Mar 24 00:29:33.025267 2026] [:error] [pid 56237:tid 56327] [client 40.85.246.124:17285] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acFqbQymO0MnzQb90MMNBAAAAIY"]
[Tue Mar 24 00:29:33.435680 2026] [:error] [pid 56237:tid 56323] [client 40.85.246.124:56310] [client 40.85.246.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFqbQymO0MnzQb90MMNBgAAAII"]
[Tue Mar 24 00:35:48.451954 2026] [:error] [pid 56435:tid 56511] [client 40.85.246.124:38800] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "acFr5Mrwr-l5A-s9ryBSRwAAAQs"]
[Tue Mar 24 00:35:49.282780 2026] [:error] [pid 56435:tid 56503] [client 40.85.246.124:38863] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "acFr5crwr-l5A-s9ryBSTwAAAQQ"]
[Tue Mar 24 00:35:50.106741 2026] [:error] [pid 56237:tid 56342] [client 40.85.246.124:38898] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "acFr5gymO0MnzQb90MMQVQAAAJU"]
[Tue Mar 24 00:35:50.955994 2026] [:error] [pid 56236:tid 56317] [client 40.85.246.124:38793] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sty.php"] [unique_id "acFr5napFgYp0uZ8twASkAAAAFg"]
[Tue Mar 24 00:35:51.366770 2026] [:error] [pid 56236:tid 56302] [client 40.85.246.124:38903] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "acFr53apFgYp0uZ8twASkQAAAEk"]
[Tue Mar 24 00:35:51.778594 2026] [:error] [pid 56237:tid 56337] [client 40.85.246.124:38881] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "acFr5wymO0MnzQb90MMQXAAAAJA"]
[Tue Mar 24 00:35:52.189133 2026] [:error] [pid 56435:tid 56522] [client 40.85.246.124:38869] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "acFr6Mrwr-l5A-s9ryBSWAAAARU"]
[Tue Mar 24 00:35:52.600247 2026] [:error] [pid 56435:tid 56513] [client 40.85.246.124:38868] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxxx.php"] [unique_id "acFr6Mrwr-l5A-s9ryBSWgAAAQw"]
[Tue Mar 24 00:35:53.026717 2026] [:error] [pid 56236:tid 56307] [client 40.85.246.124:38797] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h.php"] [unique_id "acFr6XapFgYp0uZ8twASlAAAAE4"]
[Tue Mar 24 00:35:53.438896 2026] [:error] [pid 56236:tid 56312] [client 40.85.246.124:38848] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sys.php"] [unique_id "acFr6XapFgYp0uZ8twASlQAAAFM"]
[Tue Mar 24 00:35:53.858056 2026] [:error] [pid 56238:tid 56365] [client 40.85.246.124:38889] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sys.php"] [unique_id "acFr6VSqceFAZRgPDq6DfQAAANE"]
[Tue Mar 24 00:35:54.269961 2026] [:error] [pid 56237:tid 56336] [client 40.85.246.124:38894] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sys.php"] [unique_id "acFr6gymO0MnzQb90MMQYAAAAI8"]
[Tue Mar 24 00:35:54.693179 2026] [:error] [pid 56237:tid 56341] [client 40.85.246.124:38901] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sys.php"] [unique_id "acFr6gymO0MnzQb90MMQYQAAAJQ"]
[Tue Mar 24 00:35:55.117054 2026] [:error] [pid 56237:tid 56329] [client 40.85.246.124:38785] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/txets.php"] [unique_id "acFr6wymO0MnzQb90MMQYgAAAIg"]
[Tue Mar 24 00:35:55.536259 2026] [:error] [pid 56236:tid 56314] [client 40.85.246.124:38800] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/path.php"] [unique_id "acFr63apFgYp0uZ8twASnAAAAFU"]
[Tue Mar 24 00:35:55.980466 2026] [:error] [pid 56238:tid 56366] [client 40.85.246.124:38798] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/path.php"] [unique_id "acFr61SqceFAZRgPDq6DjgAAANI"]
[Tue Mar 24 00:35:56.392331 2026] [:error] [pid 56435:tid 56502] [client 40.85.246.124:38900] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/path.php"] [unique_id "acFr7Mrwr-l5A-s9ryBSZAAAAQM"]
[Tue Mar 24 00:35:56.804691 2026] [:error] [pid 56238:tid 56364] [client 40.85.246.124:38834] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/path.php"] [unique_id "acFr7FSqceFAZRgPDq6DlQAAANA"]
[Tue Mar 24 00:35:57.216726 2026] [:error] [pid 56237:tid 56337] [client 40.85.246.124:38791] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wdf.php"] [unique_id "acFr7QymO0MnzQb90MMQbAAAAJA"]
[Tue Mar 24 00:35:57.628278 2026] [:error] [pid 56238:tid 56350] [client 40.85.246.124:38858] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wdf.php"] [unique_id "acFr7VSqceFAZRgPDq6DoAAAAMI"]
[Tue Mar 24 00:35:58.041836 2026] [:error] [pid 56237:tid 56341] [client 40.85.246.124:38795] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wdf.php"] [unique_id "acFr7gymO0MnzQb90MMQcgAAAJQ"]
[Tue Mar 24 00:35:58.453552 2026] [:error] [pid 56238:tid 56360] [client 40.85.246.124:38808] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wdf.php"] [unique_id "acFr7lSqceFAZRgPDq6DqQAAAMw"]
[Tue Mar 24 00:35:58.865157 2026] [:error] [pid 56435:tid 56509] [client 40.85.246.124:38874] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fleen.php"] [unique_id "acFr7srwr-l5A-s9ryBSjwAAAQk"]
[Tue Mar 24 00:35:59.276343 2026] [:error] [pid 56238:tid 56358] [client 40.85.246.124:38905] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fleen.php"] [unique_id "acFr71SqceFAZRgPDq6DtAAAAMo"]
[Tue Mar 24 00:35:59.687652 2026] [:error] [pid 56236:tid 56304] [client 40.85.246.124:38908] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fleen.php"] [unique_id "acFr73apFgYp0uZ8twASowAAAEs"]
[Tue Mar 24 00:36:00.105490 2026] [:error] [pid 56236:tid 56312] [client 40.85.246.124:38790] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fleen.php"] [unique_id "acFr8HapFgYp0uZ8twASpQAAAFM"]
[Tue Mar 24 00:36:00.530120 2026] [:error] [pid 56435:tid 56514] [client 40.85.246.124:38794] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-tem.php"] [unique_id "acFr8Mrwr-l5A-s9ryBSlAAAAQ0"]
[Tue Mar 24 00:36:00.944810 2026] [:error] [pid 56435:tid 56502] [client 40.85.246.124:38817] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-tem.php"] [unique_id "acFr8Mrwr-l5A-s9ryBSmQAAAQM"]
[Tue Mar 24 00:36:01.361662 2026] [:error] [pid 56238:tid 56356] [client 40.85.246.124:38855] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-tem.php"] [unique_id "acFr8VSqceFAZRgPDq6DwAAAAMg"]
[Tue Mar 24 00:36:01.775564 2026] [:error] [pid 56435:tid 56515] [client 40.85.246.124:38896] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-tem.php"] [unique_id "acFr8crwr-l5A-s9ryBSogAAAQ4"]
[Tue Mar 24 00:36:02.191039 2026] [:error] [pid 56238:tid 56355] [client 40.85.246.124:38814] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av6m.php"] [unique_id "acFr8lSqceFAZRgPDq6DxQAAAMc"]
[Tue Mar 24 00:36:02.612344 2026] [:error] [pid 56237:tid 56330] [client 40.85.246.124:38826] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av6m.php"] [unique_id "acFr8gymO0MnzQb90MMQegAAAIk"]
[Tue Mar 24 00:36:03.025493 2026] [:error] [pid 56237:tid 56327] [client 40.85.246.124:38822] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av6m.php"] [unique_id "acFr8wymO0MnzQb90MMQfQAAAIY"]
[Tue Mar 24 00:36:03.437851 2026] [:error] [pid 56237:tid 56326] [client 40.85.246.124:38841] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av6m.php"] [unique_id "acFr8wymO0MnzQb90MMQggAAAIU"]
[Tue Mar 24 00:36:03.847931 2026] [:error] [pid 56236:tid 56298] [client 40.85.246.124:38893] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autogooey.php"] [unique_id "acFr83apFgYp0uZ8twASqwAAAEU"]
[Tue Mar 24 00:36:04.258488 2026] [:error] [pid 56238:tid 56369] [client 40.85.246.124:38807] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autogooey.php"] [unique_id "acFr9FSqceFAZRgPDq6DzwAAANU"]
[Tue Mar 24 00:36:04.668338 2026] [:error] [pid 56237:tid 56330] [client 40.85.246.124:38850] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autogooey.php"] [unique_id "acFr9AymO0MnzQb90MMQiAAAAIk"]
[Tue Mar 24 00:36:05.080341 2026] [:error] [pid 56435:tid 56501] [client 40.85.246.124:38727] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autogooey.php"] [unique_id "acFr9crwr-l5A-s9ryBSqAAAAQI"]
[Tue Mar 24 00:36:05.493786 2026] [:error] [pid 56237:tid 56338] [client 40.85.246.124:38892] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/btx25.php"] [unique_id "acFr9QymO0MnzQb90MMQiwAAAJE"]
[Tue Mar 24 00:36:05.912246 2026] [:error] [pid 56435:tid 56514] [client 40.85.246.124:38871] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/btx25.php"] [unique_id "acFr9crwr-l5A-s9ryBSqgAAAQ0"]
[Tue Mar 24 00:36:06.322675 2026] [:error] [pid 56435:tid 56515] [client 40.85.246.124:38880] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/btx25.php"] [unique_id "acFr9srwr-l5A-s9ryBSrgAAAQ4"]
[Tue Mar 24 00:36:06.735723 2026] [:error] [pid 56435:tid 56503] [client 40.85.246.124:38787] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/btx25.php"] [unique_id "acFr9srwr-l5A-s9ryBSsQAAAQQ"]
[Tue Mar 24 00:36:07.151152 2026] [:error] [pid 56435:tid 56525] [client 40.85.246.124:38904] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mga.php"] [unique_id "acFr98rwr-l5A-s9ryBSswAAARg"]
[Tue Mar 24 00:36:07.569029 2026] [:error] [pid 56435:tid 56517] [client 40.85.246.124:38836] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mga.php"] [unique_id "acFr98rwr-l5A-s9ryBStAAAARA"]
[Tue Mar 24 00:36:07.979390 2026] [:error] [pid 56435:tid 56500] [client 40.85.246.124:38801] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mga.php"] [unique_id "acFr98rwr-l5A-s9ryBStgAAAQE"]
[Tue Mar 24 00:36:08.394484 2026] [:error] [pid 56238:tid 56364] [client 40.85.246.124:38729] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mga.php"] [unique_id "acFr-FSqceFAZRgPDq6D4QAAANA"]
[Tue Mar 24 00:36:08.807703 2026] [:error] [pid 56236:tid 56315] [client 40.85.246.124:38886] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maxro.php"] [unique_id "acFr-HapFgYp0uZ8twASvAAAAFY"]
[Tue Mar 24 00:36:09.253382 2026] [:error] [pid 56435:tid 56502] [client 40.85.246.124:38878] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maxro.php"] [unique_id "acFr-crwr-l5A-s9ryBSvgAAAQM"]
[Tue Mar 24 00:36:10.120127 2026] [:error] [pid 56435:tid 56525] [client 40.85.246.124:38806] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maxro.php"] [unique_id "acFr-srwr-l5A-s9ryBSwwAAARg"]
[Tue Mar 24 00:36:10.537831 2026] [:error] [pid 56238:tid 56350] [client 40.85.246.124:38802] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maxro.php"] [unique_id "acFr-lSqceFAZRgPDq6D5wAAAMI"]
[Tue Mar 24 00:36:10.949316 2026] [:error] [pid 56238:tid 56366] [client 40.85.246.124:38744] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/agg.php"] [unique_id "acFr-lSqceFAZRgPDq6D6QAAANI"]
[Tue Mar 24 00:36:11.360296 2026] [:error] [pid 56236:tid 56293] [client 40.85.246.124:38741] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/agg.php"] [unique_id "acFr-3apFgYp0uZ8twASywAAAEA"]
[Tue Mar 24 00:36:11.772628 2026] [:error] [pid 56237:tid 56344] [client 40.85.246.124:38877] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/agg.php"] [unique_id "acFr-wymO0MnzQb90MMQmwAAAJc"]
[Tue Mar 24 00:36:12.187938 2026] [:error] [pid 56238:tid 56360] [client 40.85.246.124:38910] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/agg.php"] [unique_id "acFr_FSqceFAZRgPDq6D7gAAAMw"]
[Tue Mar 24 00:36:12.599257 2026] [:error] [pid 56238:tid 56363] [client 40.85.246.124:38873] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pass4.php"] [unique_id "acFr_FSqceFAZRgPDq6D8QAAAM8"]
[Tue Mar 24 00:36:13.010447 2026] [:error] [pid 56237:tid 56330] [client 40.85.246.124:38902] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pass4.php"] [unique_id "acFr_QymO0MnzQb90MMQnwAAAIk"]
[Tue Mar 24 00:36:13.427423 2026] [:error] [pid 56238:tid 56372] [client 40.85.246.124:38837] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pass4.php"] [unique_id "acFr_VSqceFAZRgPDq6D8wAAANg"]
[Tue Mar 24 00:36:13.838565 2026] [:error] [pid 56435:tid 56508] [client 40.85.246.124:38862] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pass4.php"] [unique_id "acFr_crwr-l5A-s9ryBSxwAAAQg"]
[Tue Mar 24 00:36:14.253347 2026] [:error] [pid 56237:tid 56340] [client 40.85.246.124:38815] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsvvs.php"] [unique_id "acFr_gymO0MnzQb90MMQoQAAAJM"]
[Tue Mar 24 00:36:14.663124 2026] [:error] [pid 56238:tid 56367] [client 40.85.246.124:38821] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsvvs.php"] [unique_id "acFr_lSqceFAZRgPDq6D9gAAANM"]
[Tue Mar 24 00:36:15.090402 2026] [:error] [pid 56435:tid 56510] [client 40.85.246.124:38846] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsvvs.php"] [unique_id "acFr_8rwr-l5A-s9ryBSzAAAAQo"]
[Tue Mar 24 00:36:15.502588 2026] [:error] [pid 56237:tid 56326] [client 40.85.246.124:38857] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wsvvs.php"] [unique_id "acFr_wymO0MnzQb90MMQpAAAAIU"]
[Tue Mar 24 00:36:15.922366 2026] [:error] [pid 56236:tid 56301] [client 40.85.246.124:38833] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/G-In.php"] [unique_id "acFr_3apFgYp0uZ8twAS6AAAAEg"]
[Tue Mar 24 00:36:16.343253 2026] [:error] [pid 56236:tid 56303] [client 40.85.246.124:38812] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/G-In.php"] [unique_id "acFsAHapFgYp0uZ8twAS6wAAAEo"]
[Tue Mar 24 00:36:16.758390 2026] [:error] [pid 56237:tid 56333] [client 40.85.246.124:38867] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/G-In.php"] [unique_id "acFsAAymO0MnzQb90MMQqAAAAIw"]
[Tue Mar 24 00:36:17.173455 2026] [:error] [pid 56435:tid 56521] [client 40.85.246.124:38798] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/G-In.php"] [unique_id "acFsAcrwr-l5A-s9ryBS2gAAARQ"]
[Tue Mar 24 00:36:17.586592 2026] [:error] [pid 56238:tid 56369] [client 40.85.246.124:38879] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acFsAVSqceFAZRgPDq6EAgAAANU"]
[Tue Mar 24 00:36:17.998739 2026] [:error] [pid 56237:tid 56322] [client 40.85.246.124:38897] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acFsAQymO0MnzQb90MMQsAAAAIE"]
[Tue Mar 24 00:36:18.441855 2026] [:error] [pid 56237:tid 56321] [client 40.85.246.124:38827] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acFsAgymO0MnzQb90MMQtAAAAIA"]
[Tue Mar 24 00:36:18.862151 2026] [:error] [pid 56238:tid 56361] [client 40.85.246.124:38786] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acFsAlSqceFAZRgPDq6EBQAAAM0"]
[Tue Mar 24 00:36:19.275433 2026] [:error] [pid 56238:tid 56353] [client 40.85.246.124:38898] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acFsA1SqceFAZRgPDq6ECAAAAMU"]
[Tue Mar 24 00:36:19.686276 2026] [:error] [pid 56435:tid 56516] [client 40.85.246.124:38820] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acFsA8rwr-l5A-s9ryBS4QAAAQ8"]
[Tue Mar 24 00:36:20.100088 2026] [:error] [pid 56435:tid 56499] [client 40.85.246.124:38899] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acFsBMrwr-l5A-s9ryBS4wAAAQA"]
[Tue Mar 24 00:36:20.513043 2026] [:error] [pid 56435:tid 56513] [client 40.85.246.124:38799] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acFsBMrwr-l5A-s9ryBS6AAAAQw"]
[Tue Mar 24 00:36:20.926841 2026] [:error] [pid 56236:tid 56301] [client 40.85.246.124:38865] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFsBHapFgYp0uZ8twAS-gAAAEg"]
[Tue Mar 24 00:36:21.340037 2026] [:error] [pid 56236:tid 56294] [client 40.85.246.124:38901] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFsBXapFgYp0uZ8twAS-wAAAEE"]
[Tue Mar 24 00:36:21.751703 2026] [:error] [pid 56237:tid 56334] [client 40.85.246.124:38813] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFsBQymO0MnzQb90MMQuwAAAI0"]
[Tue Mar 24 00:36:22.168809 2026] [:error] [pid 56236:tid 56293] [client 40.85.246.124:38863] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFsBnapFgYp0uZ8twATAwAAAEA"]
[Tue Mar 24 00:36:22.582664 2026] [:error] [pid 56237:tid 56329] [client 40.85.246.124:38828] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acFsBgymO0MnzQb90MMQwAAAAIg"]
[Tue Mar 24 00:36:22.993051 2026] [:error] [pid 56237:tid 56330] [client 40.85.246.124:38888] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acFsBgymO0MnzQb90MMQxgAAAIk"]
[Tue Mar 24 00:36:23.404720 2026] [:error] [pid 56237:tid 56322] [client 40.85.246.124:38838] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acFsBwymO0MnzQb90MMQygAAAIE"]
[Tue Mar 24 00:36:23.814173 2026] [:error] [pid 56238:tid 56349] [client 40.85.246.124:38830] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acFsB1SqceFAZRgPDq6EDQAAAME"]
[Tue Mar 24 00:36:24.223913 2026] [:error] [pid 56238:tid 56369] [client 40.85.246.124:38793] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFsCFSqceFAZRgPDq6EDwAAANU"]
[Tue Mar 24 00:36:24.638454 2026] [:error] [pid 56238:tid 56368] [client 40.85.246.124:38883] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFsCFSqceFAZRgPDq6EFQAAANQ"]
[Tue Mar 24 00:36:25.049161 2026] [:error] [pid 56238:tid 56359] [client 40.85.246.124:38876] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFsCVSqceFAZRgPDq6EFwAAAMs"]
[Tue Mar 24 00:36:25.462674 2026] [:error] [pid 56236:tid 56313] [client 40.85.246.124:38911] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFsCXapFgYp0uZ8twATCQAAAFQ"]
[Tue Mar 24 00:36:25.887079 2026] [:error] [pid 56435:tid 56525] [client 40.85.246.124:38756] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acFsCcrwr-l5A-s9ryBS9AAAARg"]
[Tue Mar 24 00:36:26.299092 2026] [:error] [pid 56435:tid 56500] [client 40.85.246.124:38774] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acFsCsrwr-l5A-s9ryBS9QAAAQE"]
[Tue Mar 24 00:36:26.713452 2026] [:error] [pid 56435:tid 56514] [client 40.85.246.124:38824] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acFsCsrwr-l5A-s9ryBS9wAAAQ0"]
[Tue Mar 24 00:36:27.124437 2026] [:error] [pid 56435:tid 56516] [client 40.85.246.124:38738] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acFsC8rwr-l5A-s9ryBS-QAAAQ8"]
[Tue Mar 24 00:36:27.535591 2026] [:error] [pid 56435:tid 56517] [client 40.85.246.124:38789] [client 40.85.246.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFsC8rwr-l5A-s9ryBS_QAAARA"]
[Tue Mar 24 00:36:27.947419 2026] [:error] [pid 56435:tid 56518] [client 40.85.246.124:38870] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFsC8rwr-l5A-s9ryBTAQAAARE"]
[Tue Mar 24 00:36:28.356508 2026] [:error] [pid 56435:tid 56525] [client 40.85.246.124:38728] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFsDMrwr-l5A-s9ryBTBAAAARg"]
[Tue Mar 24 00:36:28.766029 2026] [:error] [pid 56435:tid 56505] [client 40.85.246.124:38890] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFsDMrwr-l5A-s9ryBTBgAAAQY"]
[Tue Mar 24 00:36:29.177962 2026] [:error] [pid 56435:tid 56522] [client 40.85.246.124:38804] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFsDcrwr-l5A-s9ryBTCAAAARU"]
[Tue Mar 24 00:36:29.587277 2026] [:error] [pid 56237:tid 56337] [client 40.85.246.124:38726] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFsDQymO0MnzQb90MMQ1AAAAJA"]
[Tue Mar 24 00:36:29.995377 2026] [:error] [pid 56435:tid 56507] [client 40.85.246.124:38891] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFsDcrwr-l5A-s9ryBTCgAAAQc"]
[Tue Mar 24 00:36:30.405134 2026] [:error] [pid 56435:tid 56513] [client 40.85.246.124:38722] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFsDsrwr-l5A-s9ryBTDQAAAQw"]
[Tue Mar 24 00:36:30.816076 2026] [:error] [pid 56435:tid 56504] [client 40.85.246.124:38823] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/assets/css/index.php"] [unique_id "acFsDsrwr-l5A-s9ryBTDgAAAQU"]
[Tue Mar 24 00:36:31.226245 2026] [:error] [pid 56435:tid 56501] [client 40.85.246.124:38825] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/assets/css/index.php"] [unique_id "acFsD8rwr-l5A-s9ryBTEAAAAQI"]
[Tue Mar 24 00:36:31.637359 2026] [:error] [pid 56237:tid 56325] [client 40.85.246.124:38907] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/assets/css/index.php"] [unique_id "acFsDwymO0MnzQb90MMQ2gAAAIQ"]
[Tue Mar 24 00:36:32.052717 2026] [:error] [pid 56435:tid 56500] [client 40.85.246.124:38752] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/assets/css/index.php"] [unique_id "acFsEMrwr-l5A-s9ryBTFgAAAQE"]
[Tue Mar 24 01:54:10.808961 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:24521] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "acF-Qsrwr-l5A-s9ryCTnAAAAQg"]
[Tue Mar 24 01:54:11.221885 2026] [:error] [pid 31798:tid 31824] [client 20.220.216.188:23758] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "acF-Q3dtW_1bksndFbY94wAAABg"]
[Tue Mar 24 01:54:11.643183 2026] [:error] [pid 31798:tid 31805] [client 20.220.216.188:24530] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "acF-Q3dtW_1bksndFbY96QAAAAU"]
[Tue Mar 24 01:54:12.055422 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:23778] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "acF-RAymO0MnzQb90MM0fAAAAIs"]
[Tue Mar 24 01:54:12.475045 2026] [:error] [pid 56238:tid 56368] [client 20.220.216.188:24531] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "acF-RFSqceFAZRgPDq6w3QAAANQ"]
[Tue Mar 24 01:54:12.919484 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:24514] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "acF-RMrwr-l5A-s9ryCTnwAAAQ4"]
[Tue Mar 24 01:54:13.436704 2026] [:error] [pid 31798:tid 31814] [client 20.220.216.188:23790] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "acF-RXdtW_1bksndFbY99AAAAA4"]
[Tue Mar 24 01:54:13.852820 2026] [:error] [pid 56435:tid 56502] [client 20.220.216.188:23761] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "acF-Rcrwr-l5A-s9ryCTogAAAQM"]
[Tue Mar 24 01:54:14.274632 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:23788] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acF-RlSqceFAZRgPDq6w4QAAANg"]
[Tue Mar 24 01:54:14.698368 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:23751] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acF-Rsrwr-l5A-s9ryCTpgAAARc"]
[Tue Mar 24 01:54:15.110970 2026] [:error] [pid 56238:tid 56366] [client 20.220.216.188:23779] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acF-R1SqceFAZRgPDq6w4wAAANI"]
[Tue Mar 24 01:54:15.676884 2026] [:error] [pid 56435:tid 56505] [client 20.220.216.188:23782] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "acF-R8rwr-l5A-s9ryCTqwAAAQY"]
[Tue Mar 24 01:54:16.102865 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:23765] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "acF-SMrwr-l5A-s9ryCTrwAAAQw"]
[Tue Mar 24 01:54:16.525441 2026] [:error] [pid 56236:tid 56300] [client 20.220.216.188:23795] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "acF-SHapFgYp0uZ8twAt2AAAAEc"]
[Tue Mar 24 01:54:16.940972 2026] [:error] [pid 56236:tid 56306] [client 20.220.216.188:23802] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "acF-SHapFgYp0uZ8twAt2gAAAE0"]
[Tue Mar 24 01:54:17.370029 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:24522] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "acF-SQymO0MnzQb90MM0ggAAAI8"]
[Tue Mar 24 01:54:17.796075 2026] [:error] [pid 56237:tid 56342] [client 20.220.216.188:23771] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "acF-SQymO0MnzQb90MM0gwAAAJU"]
[Tue Mar 24 01:54:18.219563 2026] [:error] [pid 56237:tid 56326] [client 20.220.216.188:24518] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "acF-SgymO0MnzQb90MM0hgAAAIU"]
[Tue Mar 24 01:54:18.636329 2026] [:error] [pid 56237:tid 56328] [client 20.220.216.188:23796] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "acF-SgymO0MnzQb90MM0igAAAIc"]
[Tue Mar 24 01:54:19.061244 2026] [:error] [pid 56236:tid 56313] [client 20.220.216.188:23781] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "acF-S3apFgYp0uZ8twAt3wAAAFQ"]
[Tue Mar 24 01:54:19.490618 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:24467] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "acF-S8rwr-l5A-s9ryCTuAAAAQs"]
[Tue Mar 24 01:54:19.918397 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:23744] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "acF-S8rwr-l5A-s9ryCTvAAAARc"]
[Tue Mar 24 01:54:20.346935 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:23752] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "acF-TMrwr-l5A-s9ryCTvgAAARQ"]
[Tue Mar 24 01:54:20.771936 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:23780] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "acF-TMrwr-l5A-s9ryCTwQAAAQ4"]
[Tue Mar 24 01:54:21.214745 2026] [:error] [pid 56435:tid 56505] [client 20.220.216.188:24544] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acF-Tcrwr-l5A-s9ryCTxgAAAQY"]
[Tue Mar 24 01:54:21.658748 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:24556] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acF-Tcrwr-l5A-s9ryCTyQAAAQo"]
[Tue Mar 24 01:54:22.074687 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:23791] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acF-TgymO0MnzQb90MM0kQAAAIo"]
[Tue Mar 24 01:54:22.491337 2026] [:error] [pid 56237:tid 56326] [client 20.220.216.188:24536] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acF-TgymO0MnzQb90MM0kwAAAIU"]
[Tue Mar 24 01:54:22.909336 2026] [:error] [pid 31798:tid 31815] [client 20.220.216.188:23768] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "acF-TndtW_1bksndFbY99wAAAA8"]
[Tue Mar 24 01:54:23.413952 2026] [:error] [pid 31798:tid 31823] [client 20.220.216.188:23773] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "acF-T3dtW_1bksndFbY9-QAAABc"]
[Tue Mar 24 01:54:23.914592 2026] [:error] [pid 56237:tid 56339] [client 20.220.216.188:24516] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "acF-TwymO0MnzQb90MM0mAAAAJI"]
[Tue Mar 24 01:54:24.357018 2026] [:error] [pid 31798:tid 31817] [client 20.220.216.188:23799] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lsd.php"] [unique_id "acF-UHdtW_1bksndFbY-AQAAABE"]
[Tue Mar 24 01:54:24.849946 2026] [:error] [pid 31798:tid 31809] [client 20.220.216.188:24513] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acF-UHdtW_1bksndFbY-BAAAAAk"]
[Tue Mar 24 01:54:25.396090 2026] [:error] [pid 31798:tid 31822] [client 20.220.216.188:24520] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acF-UXdtW_1bksndFbY-BwAAABY"]
[Tue Mar 24 01:54:25.853270 2026] [:error] [pid 56237:tid 56343] [client 20.220.216.188:23798] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acF-UQymO0MnzQb90MM0nAAAAJY"]
[Tue Mar 24 01:54:26.288515 2026] [:error] [pid 56236:tid 56304] [client 20.220.216.188:24537] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acF-UnapFgYp0uZ8twAt4gAAAEs"]
[Tue Mar 24 01:54:26.719911 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:23745] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "acF-UlSqceFAZRgPDq6w6gAAAM4"]
[Tue Mar 24 01:54:27.147729 2026] [:error] [pid 56237:tid 56345] [client 20.220.216.188:23803] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "acF-UwymO0MnzQb90MM0nwAAAJg"]
[Tue Mar 24 01:54:27.578004 2026] [:error] [pid 56238:tid 56360] [client 20.220.216.188:24559] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "acF-U1SqceFAZRgPDq6w7gAAAMw"]
[Tue Mar 24 01:54:27.996679 2026] [:error] [pid 56238:tid 56350] [client 20.220.216.188:23750] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsd.php"] [unique_id "acF-U1SqceFAZRgPDq6w8AAAAMI"]
[Tue Mar 24 01:54:28.618188 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:24540] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "acF-VFSqceFAZRgPDq6w9AAAANc"]
[Tue Mar 24 01:54:29.043388 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:24512] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "acF-VVSqceFAZRgPDq6w9QAAAMs"]
[Tue Mar 24 01:54:29.533090 2026] [:error] [pid 56237:tid 56343] [client 20.220.216.188:24529] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "acF-VQymO0MnzQb90MM0qAAAAJY"]
[Tue Mar 24 01:54:30.085113 2026] [:error] [pid 31798:tid 31821] [client 20.220.216.188:23753] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gtc.php"] [unique_id "acF-VndtW_1bksndFbY-CQAAABU"]
[Tue Mar 24 01:54:30.520601 2026] [:error] [pid 56238:tid 56352] [client 20.220.216.188:23764] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "acF-VlSqceFAZRgPDq6w-gAAAMQ"]
[Tue Mar 24 01:54:30.950997 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:23747] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "acF-VlSqceFAZRgPDq6w_AAAAM0"]
[Tue Mar 24 01:54:31.413164 2026] [:error] [pid 56236:tid 56303] [client 20.220.216.188:24550] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "acF-V3apFgYp0uZ8twAt6gAAAEo"]
[Tue Mar 24 01:54:31.972814 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:24517] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atx.php"] [unique_id "acF-V8rwr-l5A-s9ryCT1AAAARc"]
[Tue Mar 24 01:54:32.389626 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:23787] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "acF-WFSqceFAZRgPDq6xAQAAANc"]
[Tue Mar 24 01:54:32.818485 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:24532] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "acF-WMrwr-l5A-s9ryCT1wAAARI"]
[Tue Mar 24 01:54:33.323682 2026] [:error] [pid 31798:tid 31801] [client 20.220.216.188:24538] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "acF-WXdtW_1bksndFbY-DgAAAAE"]
[Tue Mar 24 01:54:33.759634 2026] [:error] [pid 56237:tid 56333] [client 20.220.216.188:23759] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "acF-WQymO0MnzQb90MM0sAAAAIw"]
[Tue Mar 24 01:54:34.190576 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:23749] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "acF-WlSqceFAZRgPDq6xBwAAAM4"]
[Tue Mar 24 01:54:34.715687 2026] [:error] [pid 31798:tid 31819] [client 20.220.216.188:23807] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "acF-WndtW_1bksndFbY-EQAAABM"]
[Tue Mar 24 01:54:35.137368 2026] [:error] [pid 31798:tid 31800] [client 20.220.216.188:24527] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "acF-W3dtW_1bksndFbY-FAAAAAA"]
[Tue Mar 24 01:54:35.552060 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:24525] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "acF-W1SqceFAZRgPDq6xCQAAANY"]
[Tue Mar 24 01:54:35.975470 2026] [:error] [pid 31798:tid 31816] [client 20.220.216.188:23804] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "acF-W3dtW_1bksndFbY-GAAAABA"]
[Tue Mar 24 01:54:36.392083 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:24523] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "acF-XAymO0MnzQb90MM0tQAAAIM"]
[Tue Mar 24 01:54:36.816477 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:24568] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "acF-XMrwr-l5A-s9ryCT2gAAAQ4"]
[Tue Mar 24 01:54:37.346024 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:24548] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "acF-Xcrwr-l5A-s9ryCT3QAAAQU"]
[Tue Mar 24 01:54:37.799720 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:23763] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "acF-XVSqceFAZRgPDq6xDwAAANc"]
[Tue Mar 24 01:54:38.236619 2026] [:error] [pid 31798:tid 31811] [client 20.220.216.188:23776] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "acF-XndtW_1bksndFbY-HwAAAAs"]
[Tue Mar 24 01:54:38.657422 2026] [:error] [pid 31798:tid 31820] [client 20.220.216.188:23806] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "acF-XndtW_1bksndFbY-IgAAABQ"]
[Tue Mar 24 01:54:39.079345 2026] [:error] [pid 31798:tid 31803] [client 20.220.216.188:23757] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "acF-X3dtW_1bksndFbY-JQAAAAM"]
[Tue Mar 24 01:54:39.504401 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:24545] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acF-X8rwr-l5A-s9ryCT4wAAAQA"]
[Tue Mar 24 01:54:39.946162 2026] [:error] [pid 56435:tid 56522] [client 20.220.216.188:24524] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acF-X8rwr-l5A-s9ryCT5gAAARU"]
[Tue Mar 24 01:54:40.496131 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:24549] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acF-YAymO0MnzQb90MM0twAAAIo"]
[Tue Mar 24 01:54:40.947393 2026] [:error] [pid 56238:tid 56355] [client 20.220.216.188:23785] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acF-YFSqceFAZRgPDq6xEQAAAMc"]
[Tue Mar 24 01:54:41.480747 2026] [:error] [pid 56237:tid 56322] [client 20.220.216.188:23767] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acF-YQymO0MnzQb90MM0ugAAAIE"]
[Tue Mar 24 01:54:41.995138 2026] [:error] [pid 31798:tid 31808] [client 20.220.216.188:24505] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acF-YXdtW_1bksndFbY-KQAAAAg"]
[Tue Mar 24 01:54:42.503658 2026] [:error] [pid 31798:tid 31815] [client 20.220.216.188:24557] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acF-YndtW_1bksndFbY-LAAAAA8"]
[Tue Mar 24 01:54:42.922315 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:23801] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acF-YgymO0MnzQb90MM0vAAAAIs"]
[Tue Mar 24 01:54:43.367262 2026] [:error] [pid 31798:tid 31822] [client 20.220.216.188:23783] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "acF-Y3dtW_1bksndFbY-MwAAABY"]
[Tue Mar 24 01:54:43.825426 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:24483] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "acF-Y8rwr-l5A-s9ryCT7QAAAQA"]
[Tue Mar 24 01:54:44.314668 2026] [:error] [pid 56435:tid 56522] [client 20.220.216.188:23756] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "acF-ZMrwr-l5A-s9ryCT8AAAARU"]
[Tue Mar 24 01:54:44.818056 2026] [:error] [pid 31798:tid 31815] [client 20.220.216.188:24574] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "acF-ZHdtW_1bksndFbY-PAAAAA8"]
[Tue Mar 24 01:54:45.240754 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:24464] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acF-ZVSqceFAZRgPDq6xFQAAANg"]
[Tue Mar 24 01:54:45.656927 2026] [:error] [pid 31798:tid 31822] [client 20.220.216.188:24477] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acF-ZXdtW_1bksndFbY-PwAAABY"]
[Tue Mar 24 01:54:46.104728 2026] [:error] [pid 31798:tid 31811] [client 20.220.216.188:23755] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acF-ZndtW_1bksndFbY-QwAAAAs"]
[Tue Mar 24 01:54:46.535570 2026] [:error] [pid 31798:tid 31815] [client 20.220.216.188:24546] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acF-ZndtW_1bksndFbY-RwAAAA8"]
[Tue Mar 24 01:54:46.958401 2026] [:error] [pid 56237:tid 56328] [client 20.220.216.188:24476] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "acF-ZgymO0MnzQb90MM0vwAAAIc"]
[Tue Mar 24 01:54:47.383376 2026] [:error] [pid 56238:tid 56364] [client 20.220.216.188:23789] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "acF-Z1SqceFAZRgPDq6xGAAAANA"]
[Tue Mar 24 01:54:47.802874 2026] [:error] [pid 31798:tid 31819] [client 20.220.216.188:24561] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "acF-Z3dtW_1bksndFbY-TQAAABM"]
[Tue Mar 24 01:54:48.220489 2026] [:error] [pid 31798:tid 31803] [client 20.220.216.188:23754] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "acF-aHdtW_1bksndFbY-UAAAAAM"]
[Tue Mar 24 01:54:48.919198 2026] [:error] [pid 31798:tid 31817] [client 20.220.216.188:23775] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "acF-aHdtW_1bksndFbY-VgAAABE"]
[Tue Mar 24 01:54:49.377804 2026] [:error] [pid 56238:tid 56357] [client 20.220.216.188:24519] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "acF-aVSqceFAZRgPDq6xHAAAAMk"]
[Tue Mar 24 01:54:49.793227 2026] [:error] [pid 56238:tid 56349] [client 20.220.216.188:24547] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "acF-aVSqceFAZRgPDq6xIAAAAME"]
[Tue Mar 24 01:54:50.224847 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:24454] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "acF-alSqceFAZRgPDq6xKAAAAM0"]
[Tue Mar 24 01:54:50.647615 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:24534] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "acF-alSqceFAZRgPDq6xMwAAAMU"]
[Tue Mar 24 01:54:51.068388 2026] [:error] [pid 56238:tid 56367] [client 20.220.216.188:24462] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "acF-a1SqceFAZRgPDq6xOgAAANM"]
[Tue Mar 24 01:54:51.528323 2026] [:error] [pid 31798:tid 31801] [client 20.220.216.188:23793] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "acF-a3dtW_1bksndFbY-ZAAAAAE"]
[Tue Mar 24 01:54:51.941726 2026] [:error] [pid 31798:tid 31805] [client 20.220.216.188:24533] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "acF-a3dtW_1bksndFbY-aQAAAAU"]
[Tue Mar 24 01:54:52.401336 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:24459] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "acF-bAymO0MnzQb90MM0xwAAAIM"]
[Tue Mar 24 01:54:52.832849 2026] [:error] [pid 56236:tid 56309] [client 20.220.216.188:24487] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "acF-bHapFgYp0uZ8twAuBAAAAFA"]
[Tue Mar 24 01:54:53.271388 2026] [:error] [pid 31798:tid 31809] [client 20.220.216.188:24461] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "acF-bXdtW_1bksndFbY-cAAAAAk"]
[Tue Mar 24 01:54:53.787729 2026] [:error] [pid 56238:tid 56354] [client 20.220.216.188:23762] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "acF-bVSqceFAZRgPDq6xXwAAAMY"]
[Tue Mar 24 01:54:54.218717 2026] [:error] [pid 31798:tid 31817] [client 20.220.216.188:23805] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acF-bndtW_1bksndFbY-cwAAABE"]
[Tue Mar 24 01:54:54.817290 2026] [:error] [pid 31798:tid 31805] [client 20.220.216.188:23769] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "acF-bndtW_1bksndFbY-dgAAAAU"]
[Tue Mar 24 01:54:55.234920 2026] [:error] [pid 56435:tid 56505] [client 20.220.216.188:24472] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "acF-b8rwr-l5A-s9ryCT9QAAAQY"]
[Tue Mar 24 01:54:55.659691 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:24563] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "acF-b8rwr-l5A-s9ryCT9gAAAQ8"]
[Tue Mar 24 01:54:56.084218 2026] [:error] [pid 31798:tid 31823] [client 20.220.216.188:24470] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "acF-cHdtW_1bksndFbY-fQAAABc"]
[Tue Mar 24 01:54:56.579533 2026] [:error] [pid 31798:tid 31812] [client 20.220.216.188:24554] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "acF-cHdtW_1bksndFbY-gAAAAAw"]
[Tue Mar 24 01:54:56.995602 2026] [:error] [pid 31798:tid 31820] [client 20.220.216.188:24500] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "acF-cHdtW_1bksndFbY-hgAAABQ"]
[Tue Mar 24 01:54:57.442114 2026] [:error] [pid 56236:tid 56294] [client 20.220.216.188:24475] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "acF-cXapFgYp0uZ8twAuDwAAAEE"]
[Tue Mar 24 01:54:57.859846 2026] [:error] [pid 31798:tid 31800] [client 20.220.216.188:24528] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "acF-cXdtW_1bksndFbY-iwAAAAA"]
[Tue Mar 24 01:54:58.291695 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:24555] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "acF-csrwr-l5A-s9ryCT-wAAARc"]
[Tue Mar 24 01:54:58.713590 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:24455] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "acF-cgymO0MnzQb90MM0zAAAAI8"]
[Tue Mar 24 01:54:59.131390 2026] [:error] [pid 56236:tid 56308] [client 20.220.216.188:23794] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "acF-c3apFgYp0uZ8twAuFgAAAE8"]
[Tue Mar 24 01:54:59.736276 2026] [:error] [pid 31798:tid 31804] [client 20.220.216.188:24452] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acF-c3dtW_1bksndFbY-kAAAAAQ"]
[Tue Mar 24 01:55:00.162359 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:24551] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acF-dAymO0MnzQb90MM0zgAAAJc"]
[Tue Mar 24 01:55:00.582030 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:24507] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acF-dMrwr-l5A-s9ryCUAgAAAQg"]
[Tue Mar 24 01:55:01.000976 2026] [:error] [pid 31798:tid 31800] [client 20.220.216.188:24392] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acF-dXdtW_1bksndFbY-mAAAAAA"]
[Tue Mar 24 01:55:01.499210 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:23760] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "acF-dVSqceFAZRgPDq6xdQAAANc"]
[Tue Mar 24 01:55:01.942649 2026] [:error] [pid 31798:tid 31812] [client 20.220.216.188:24535] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "acF-dXdtW_1bksndFbY-nAAAAAw"]
[Tue Mar 24 01:55:02.369755 2026] [:error] [pid 31798:tid 31824] [client 20.220.216.188:24465] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "acF-dndtW_1bksndFbY-oAAAABg"]
[Tue Mar 24 01:55:02.785530 2026] [:error] [pid 56435:tid 56502] [client 20.220.216.188:24466] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "acF-dsrwr-l5A-s9ryCUBgAAAQM"]
[Tue Mar 24 01:55:03.214798 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:23797] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "acF-dwymO0MnzQb90MM00gAAAIM"]
[Tue Mar 24 01:55:03.661424 2026] [:error] [pid 56238:tid 56356] [client 20.220.216.188:24460] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "acF-d1SqceFAZRgPDq6xeQAAAMg"]
[Tue Mar 24 01:55:04.075562 2026] [:error] [pid 56237:tid 56330] [client 20.220.216.188:24526] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "acF-eAymO0MnzQb90MM01AAAAIk"]
[Tue Mar 24 01:55:04.599006 2026] [:error] [pid 31798:tid 31814] [client 20.220.216.188:23746] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "acF-eHdtW_1bksndFbY-qQAAAA4"]
[Tue Mar 24 01:55:05.013402 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:24397] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "acF-ecrwr-l5A-s9ryCUEQAAARg"]
[Tue Mar 24 01:55:05.582431 2026] [:error] [pid 56435:tid 56502] [client 20.220.216.188:24571] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "acF-ecrwr-l5A-s9ryCUFwAAAQM"]
[Tue Mar 24 01:55:05.996208 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:24565] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "acF-eVSqceFAZRgPDq6xggAAANc"]
[Tue Mar 24 01:55:06.429435 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:24570] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "acF-esrwr-l5A-s9ryCUHQAAAQs"]
[Tue Mar 24 01:55:06.904466 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:24404] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "acF-egymO0MnzQb90MM01QAAAIo"]
[Tue Mar 24 01:55:07.434885 2026] [:error] [pid 31798:tid 31820] [client 20.220.216.188:24542] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "acF-e3dtW_1bksndFbY-swAAABQ"]
[Tue Mar 24 01:55:07.906473 2026] [:error] [pid 31798:tid 31811] [client 20.220.216.188:24553] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "acF-e3dtW_1bksndFbY-twAAAAs"]
[Tue Mar 24 01:56:02.645072 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:24456] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acF-ssrwr-l5A-s9ryCUmwAAAQE"]
[Tue Mar 24 01:56:03.081721 2026] [:error] [pid 56237:tid 56327] [client 20.220.216.188:24448] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acF-swymO0MnzQb90MM1PAAAAIY"]
[Tue Mar 24 01:56:03.512603 2026] [:error] [pid 56238:tid 56369] [client 20.220.216.188:24486] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acF-s1SqceFAZRgPDq6x8wAAANU"]
[Tue Mar 24 01:56:03.937924 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:24575] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acF-swymO0MnzQb90MM1QAAAAIQ"]
[Tue Mar 24 01:56:04.400158 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:24497] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "acF-tFSqceFAZRgPDq6x-AAAAM4"]
[Tue Mar 24 01:56:04.825917 2026] [:error] [pid 31798:tid 31810] [client 20.220.216.188:24539] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "acF-tHdtW_1bksndFbY_dwAAAAo"]
[Tue Mar 24 01:56:05.313595 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:23766] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "acF-tQymO0MnzQb90MM1QgAAAJc"]
[Tue Mar 24 01:56:05.740193 2026] [:error] [pid 56237:tid 56340] [client 20.220.216.188:24402] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/manager.php"] [unique_id "acF-tQymO0MnzQb90MM1QwAAAJM"]
[Tue Mar 24 01:56:06.165825 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:24480] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "acF-tsrwr-l5A-s9ryCUnwAAAQI"]
[Tue Mar 24 01:56:06.614928 2026] [:error] [pid 56238:tid 56351] [client 20.220.216.188:24412] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "acF-tlSqceFAZRgPDq6yAgAAAMM"]
[Tue Mar 24 01:56:07.031142 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:24496] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "acF-t8rwr-l5A-s9ryCUoAAAAQQ"]
[Tue Mar 24 01:56:07.490812 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:24453] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "acF-twymO0MnzQb90MM1SAAAAI8"]
[Tue Mar 24 01:56:07.910907 2026] [:error] [pid 56238:tid 56363] [client 20.220.216.188:24499] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acF-t1SqceFAZRgPDq6yCAAAAM8"]
[Tue Mar 24 01:56:08.361419 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:23800] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acF-uMrwr-l5A-s9ryCUpgAAAQ4"]
[Tue Mar 24 01:56:08.779269 2026] [:error] [pid 56238:tid 56367] [client 20.220.216.188:23770] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acF-uFSqceFAZRgPDq6yCwAAANM"]
[Tue Mar 24 01:56:09.219312 2026] [:error] [pid 56237:tid 56341] [client 20.220.216.188:24400] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acF-uQymO0MnzQb90MM1TAAAAJQ"]
[Tue Mar 24 01:56:09.638629 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:24343] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "acF-uQymO0MnzQb90MM1TQAAAIQ"]
[Tue Mar 24 01:56:10.058834 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:24410] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "acF-usrwr-l5A-s9ryCUrQAAAQg"]
[Tue Mar 24 01:56:10.480960 2026] [:error] [pid 56238:tid 56351] [client 20.220.216.188:24498] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "acF-ulSqceFAZRgPDq6yEAAAAMM"]
[Tue Mar 24 01:56:10.987749 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:24490] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "acF-usrwr-l5A-s9ryCUrgAAAQw"]
[Tue Mar 24 01:56:11.536304 2026] [:error] [pid 31798:tid 31813] [client 20.220.216.188:24564] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "acF-u3dtW_1bksndFbY_ewAAAA0"]
[Tue Mar 24 01:56:11.959067 2026] [:error] [pid 56236:tid 56313] [client 20.220.216.188:24492] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "acF-u3apFgYp0uZ8twAuPAAAAFQ"]
[Tue Mar 24 01:56:12.391626 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:24416] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "acF-vFSqceFAZRgPDq6yFwAAANY"]
[Tue Mar 24 01:56:12.824895 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:24509] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail.php"] [unique_id "acF-vAymO0MnzQb90MM1VQAAAI8"]
[Tue Mar 24 01:56:13.249955 2026] [:error] [pid 31798:tid 31815] [client 20.220.216.188:24474] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acF-vXdtW_1bksndFbY_gAAAAA8"]
[Tue Mar 24 01:56:13.760453 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:24485] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acF-vcrwr-l5A-s9ryCUsQAAAQs"]
[Tue Mar 24 01:56:14.338793 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:24449] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acF-vsrwr-l5A-s9ryCUsgAAAQ4"]
[Tue Mar 24 01:56:14.815986 2026] [:error] [pid 31798:tid 31817] [client 20.220.216.188:24384] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acF-vndtW_1bksndFbY_ggAAABE"]
[Tue Mar 24 01:56:15.237338 2026] [:error] [pid 31798:tid 31803] [client 20.220.216.188:24511] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "acF-v3dtW_1bksndFbY_gwAAAAM"]
[Tue Mar 24 01:56:15.717321 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:24405] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "acF-v8rwr-l5A-s9ryCUtgAAARE"]
[Tue Mar 24 01:56:16.298049 2026] [:error] [pid 56238:tid 56363] [client 20.220.216.188:23748] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "acF-wFSqceFAZRgPDq6yJQAAAM8"]
[Tue Mar 24 01:56:16.788085 2026] [:error] [pid 31798:tid 31801] [client 20.220.216.188:24503] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sx.php"] [unique_id "acF-wHdtW_1bksndFbY_hwAAAAE"]
[Tue Mar 24 01:56:17.203574 2026] [:error] [pid 31798:tid 31816] [client 20.220.216.188:23772] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acF-wXdtW_1bksndFbY_iwAAABA"]
[Tue Mar 24 01:56:17.621715 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:24471] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acF-wcrwr-l5A-s9ryCUugAAAQc"]
[Tue Mar 24 01:56:18.038608 2026] [:error] [pid 56238:tid 56350] [client 20.220.216.188:24484] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acF-wlSqceFAZRgPDq6yJgAAAMI"]
[Tue Mar 24 01:56:18.457040 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:24437] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acF-wsrwr-l5A-s9ryCUvgAAAQk"]
[Tue Mar 24 01:56:18.890285 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:24463] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "acF-wsrwr-l5A-s9ryCUwAAAAQ4"]
[Tue Mar 24 01:56:19.489026 2026] [:error] [pid 56238:tid 56369] [client 20.220.216.188:24508] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "acF-w1SqceFAZRgPDq6yJwAAANU"]
[Tue Mar 24 01:56:19.904053 2026] [:error] [pid 31798:tid 31816] [client 20.220.216.188:24489] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "acF-w3dtW_1bksndFbY_lgAAABA"]
[Tue Mar 24 01:56:20.418691 2026] [:error] [pid 31798:tid 31815] [client 20.220.216.188:24488] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "acF-xHdtW_1bksndFbY_mwAAAA8"]
[Tue Mar 24 01:56:20.947852 2026] [:error] [pid 56435:tid 56502] [client 20.220.216.188:24386] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "acF-xMrwr-l5A-s9ryCUwgAAAQM"]
[Tue Mar 24 01:56:23.892274 2026] [:error] [pid 56237:tid 56342] [client 20.220.216.188:24469] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "acF-xwymO0MnzQb90MM1YwAAAJU"]
[Tue Mar 24 01:56:24.514284 2026] [:error] [pid 56238:tid 56358] [client 20.220.216.188:24320] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "acF-yFSqceFAZRgPDq6yKQAAAMo"]
[Tue Mar 24 01:56:24.936395 2026] [:error] [pid 31798:tid 31800] [client 20.220.216.188:24435] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "acF-yHdtW_1bksndFbY_tAAAAAA"]
[Tue Mar 24 01:56:25.381274 2026] [:error] [pid 31798:tid 31816] [client 20.220.216.188:24399] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "acF-yXdtW_1bksndFbY_twAAABA"]
[Tue Mar 24 01:56:25.825073 2026] [:error] [pid 31798:tid 31819] [client 20.220.216.188:24345] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "acF-yXdtW_1bksndFbY_ugAAABM"]
[Tue Mar 24 01:56:26.247270 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:24387] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "acF-ygymO0MnzQb90MM1bAAAAIQ"]
[Tue Mar 24 01:56:26.769708 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:24259] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "acF-ysrwr-l5A-s9ryCUzwAAARE"]
[Tue Mar 24 01:56:27.211617 2026] [:error] [pid 56435:tid 56505] [client 20.220.216.188:24468] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "acF-y8rwr-l5A-s9ryCU0QAAAQY"]
[Tue Mar 24 01:56:27.704739 2026] [:error] [pid 56435:tid 56517] [client 20.220.216.188:24354] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "acF-y8rwr-l5A-s9ryCU0gAAARA"]
[Tue Mar 24 01:56:28.130596 2026] [:error] [pid 56237:tid 56334] [client 20.220.216.188:24395] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "acF-zAymO0MnzQb90MM1cgAAAI0"]
[Tue Mar 24 01:56:28.757862 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:24328] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "acF-zMrwr-l5A-s9ryCU1QAAARg"]
[Tue Mar 24 01:56:29.178593 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:24394] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "acF-zcrwr-l5A-s9ryCU2gAAAQg"]
[Tue Mar 24 01:56:29.602657 2026] [:error] [pid 31798:tid 31822] [client 20.220.216.188:24428] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "acF-zXdtW_1bksndFbY_ygAAABY"]
[Tue Mar 24 01:56:30.074290 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:24340] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "acF-zsrwr-l5A-s9ryCU3AAAAQs"]
[Tue Mar 24 01:56:30.687919 2026] [:error] [pid 31798:tid 31814] [client 20.220.216.188:24401] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "acF-zndtW_1bksndFbY_zgAAAA4"]
[Tue Mar 24 01:56:31.178056 2026] [:error] [pid 31798:tid 31800] [client 20.220.216.188:24562] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acF-z3dtW_1bksndFbY_0QAAAAA"]
[Tue Mar 24 01:56:31.599475 2026] [:error] [pid 56435:tid 56505] [client 20.220.216.188:24478] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acF-z8rwr-l5A-s9ryCU3wAAAQY"]
[Tue Mar 24 01:56:32.029738 2026] [:error] [pid 56236:tid 56310] [client 20.220.216.188:24491] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acF-0HapFgYp0uZ8twAuTgAAAFE"]
[Tue Mar 24 01:56:32.459007 2026] [:error] [pid 31798:tid 31802] [client 20.220.216.188:24493] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acF-0HdtW_1bksndFbY_1AAAAAI"]
[Tue Mar 24 01:56:32.885812 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:23777] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "acF-0Mrwr-l5A-s9ryCU6AAAAQ4"]
[Tue Mar 24 01:56:33.319833 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:24388] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "acF-0QymO0MnzQb90MM1dAAAAI8"]
[Tue Mar 24 01:56:33.833484 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:24541] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "acF-0crwr-l5A-s9ryCU7gAAAQI"]
[Tue Mar 24 01:56:34.337652 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:23792] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "acF-0srwr-l5A-s9ryCU8QAAAQc"]
[Tue Mar 24 01:56:34.755885 2026] [:error] [pid 31798:tid 31820] [client 20.220.216.188:24322] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "acF-0ndtW_1bksndFbY_2wAAABQ"]
[Tue Mar 24 01:56:35.272396 2026] [:error] [pid 56236:tid 56304] [client 20.220.216.188:24436] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "acF-03apFgYp0uZ8twAuVAAAAEs"]
[Tue Mar 24 01:56:35.856031 2026] [:error] [pid 31798:tid 31812] [client 20.220.216.188:24389] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "acF-03dtW_1bksndFbY_3AAAAAw"]
[Tue Mar 24 01:56:36.295659 2026] [:error] [pid 56237:tid 56327] [client 20.220.216.188:24419] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "acF-1AymO0MnzQb90MM1eQAAAIY"]
[Tue Mar 24 01:56:36.711996 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:24324] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acF-1FSqceFAZRgPDq6yMQAAAM4"]
[Tue Mar 24 01:56:37.137370 2026] [:error] [pid 56236:tid 56307] [client 20.220.216.188:24349] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "acF-1XapFgYp0uZ8twAuVwAAAE4"]
[Tue Mar 24 01:56:37.561331 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:24482] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "acF-1crwr-l5A-s9ryCVAAAAAQA"]
[Tue Mar 24 01:56:37.975948 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:24573] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/index.php"] [unique_id "acF-1QymO0MnzQb90MM1ewAAAIQ"]
[Tue Mar 24 01:56:38.390068 2026] [:error] [pid 56435:tid 56522] [client 20.220.216.188:24438] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "acF-1srwr-l5A-s9ryCVBAAAARU"]
[Tue Mar 24 01:56:38.810201 2026] [:error] [pid 56435:tid 56517] [client 20.220.216.188:24323] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acF-1srwr-l5A-s9ryCVBQAAARA"]
[Tue Mar 24 01:56:39.267001 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:24424] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acF-18rwr-l5A-s9ryCVCAAAAQQ"]
[Tue Mar 24 01:56:39.718723 2026] [:error] [pid 56238:tid 56350] [client 20.220.216.188:24393] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acF-11SqceFAZRgPDq6yNAAAAMI"]
[Tue Mar 24 01:56:40.214752 2026] [:error] [pid 56238:tid 56365] [client 20.220.216.188:24359] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acF-2FSqceFAZRgPDq6yNQAAANE"]
[Tue Mar 24 01:56:40.695704 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:24434] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acF-2FSqceFAZRgPDq6yOQAAAMU"]
[Tue Mar 24 01:56:41.135746 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:24446] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acF-2VSqceFAZRgPDq6yOgAAAMs"]
[Tue Mar 24 01:56:41.547852 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:24372] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acF-2VSqceFAZRgPDq6yOwAAANc"]
[Tue Mar 24 01:56:42.040784 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:24420] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acF-2srwr-l5A-s9ryCVEgAAARc"]
[Tue Mar 24 01:56:42.506468 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:23774] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acF-2srwr-l5A-s9ryCVFAAAARQ"]
[Tue Mar 24 01:56:42.975774 2026] [:error] [pid 56237:tid 56334] [client 20.220.216.188:23784] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acF-2gymO0MnzQb90MM1fwAAAI0"]
[Tue Mar 24 01:56:43.488979 2026] [:error] [pid 31798:tid 31808] [client 20.220.216.188:24560] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acF-23dtW_1bksndFbY_7gAAAAg"]
[Tue Mar 24 01:56:43.905115 2026] [:error] [pid 56238:tid 56363] [client 20.220.216.188:23786] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acF-21SqceFAZRgPDq6yQQAAAM8"]
[Tue Mar 24 01:56:44.322254 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:24262] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "acF-3Mrwr-l5A-s9ryCVGQAAAQk"]
[Tue Mar 24 01:56:44.899390 2026] [:error] [pid 56238:tid 56369] [client 20.220.216.188:24425] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "acF-3FSqceFAZRgPDq6yQwAAANU"]
[Tue Mar 24 01:56:45.434343 2026] [:error] [pid 56237:tid 56342] [client 20.220.216.188:24265] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "acF-3QymO0MnzQb90MM1gwAAAJU"]
[Tue Mar 24 01:56:45.846525 2026] [:error] [pid 31798:tid 31818] [client 20.220.216.188:24458] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acF-3XdtW_1bksndFbY_9AAAABI"]
[Tue Mar 24 01:56:46.364837 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:24515] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acF-3srwr-l5A-s9ryCVHAAAAQU"]
[Tue Mar 24 01:56:46.799997 2026] [:error] [pid 56236:tid 56304] [client 20.220.216.188:24415] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acF-3napFgYp0uZ8twAuXwAAAEs"]
[Tue Mar 24 01:56:47.305219 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:24427] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acF-3wymO0MnzQb90MM1jAAAAJc"]
[Tue Mar 24 01:56:47.745738 2026] [:error] [pid 56237:tid 56322] [client 20.220.216.188:24506] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acF-3wymO0MnzQb90MM1jQAAAIE"]
[Tue Mar 24 01:56:48.313639 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:24332] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "acF-4HapFgYp0uZ8twAuYQAAAFg"]
[Tue Mar 24 01:56:48.911205 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:24407] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "acF-4FSqceFAZRgPDq6yUQAAAM0"]
[Tue Mar 24 01:56:49.371704 2026] [:error] [pid 56236:tid 56307] [client 20.220.216.188:24479] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "acF-4XapFgYp0uZ8twAuYwAAAE4"]
[Tue Mar 24 01:56:49.892359 2026] [:error] [pid 31798:tid 31805] [client 20.220.216.188:24418] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww1.php"] [unique_id "acF-4XdtW_1bksndFbY_-AAAAAU"]
[Tue Mar 24 01:56:50.342721 2026] [:error] [pid 31798:tid 31801] [client 20.220.216.188:24569] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "acF-4ndtW_1bksndFbY_-gAAAAE"]
[Tue Mar 24 01:56:50.912694 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:24430] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "acF-4srwr-l5A-s9ryCVHgAAAQw"]
[Tue Mar 24 01:56:51.340306 2026] [:error] [pid 31798:tid 31818] [client 20.220.216.188:24502] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "acF-43dtW_1bksndFbZAAAAAABI"]
[Tue Mar 24 01:56:51.764195 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:24440] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about/function.php"] [unique_id "acF-48rwr-l5A-s9ryCVIwAAARQ"]
[Tue Mar 24 01:56:52.222126 2026] [:error] [pid 56238:tid 56349] [client 20.220.216.188:24431] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "acF-5FSqceFAZRgPDq6yVwAAAME"]
[Tue Mar 24 01:56:52.643190 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:24445] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "acF-5Mrwr-l5A-s9ryCVJgAAARg"]
[Tue Mar 24 01:56:53.058770 2026] [:error] [pid 56238:tid 56348] [client 20.220.216.188:24442] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "acF-5VSqceFAZRgPDq6yWAAAAMA"]
[Tue Mar 24 01:56:53.574252 2026] [:error] [pid 56236:tid 56300] [client 20.220.216.188:24385] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "acF-5XapFgYp0uZ8twAuZgAAAEc"]
[Tue Mar 24 01:56:54.048896 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:24271] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acF-5srwr-l5A-s9ryCVLAAAAQU"]
[Tue Mar 24 01:56:54.585274 2026] [:error] [pid 56238:tid 56366] [client 20.220.216.188:24355] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acF-5lSqceFAZRgPDq6yXQAAANI"]
[Tue Mar 24 01:56:55.083590 2026] [:error] [pid 56236:tid 56304] [client 20.220.216.188:24566] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acF-53apFgYp0uZ8twAubgAAAEs"]
[Tue Mar 24 01:56:55.642645 2026] [:error] [pid 56237:tid 56322] [client 20.220.216.188:24330] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acF-5wymO0MnzQb90MM1lgAAAIE"]
[Tue Mar 24 01:56:56.194316 2026] [:error] [pid 31798:tid 31811] [client 20.220.216.188:24510] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acF-6HdtW_1bksndFbZAFwAAAAs"]
[Tue Mar 24 01:56:56.705996 2026] [:error] [pid 56237:tid 56343] [client 20.220.216.188:24572] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acF-6AymO0MnzQb90MM1nQAAAJY"]
[Tue Mar 24 01:56:57.142317 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:24353] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acF-6crwr-l5A-s9ryCVMAAAARc"]
[Tue Mar 24 01:56:57.574780 2026] [:error] [pid 56236:tid 56305] [client 20.220.216.188:24413] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acF-6XapFgYp0uZ8twAufAAAAEw"]
[Tue Mar 24 01:56:58.238265 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:24558] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "acF-6srwr-l5A-s9ryCVNAAAAQc"]
[Tue Mar 24 01:56:58.658894 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:24450] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "acF-6srwr-l5A-s9ryCVOAAAAQs"]
[Tue Mar 24 01:56:59.074009 2026] [:error] [pid 31798:tid 31822] [client 20.220.216.188:24329] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "acF-63dtW_1bksndFbZAGgAAABY"]
[Tue Mar 24 01:56:59.519707 2026] [:error] [pid 56238:tid 56360] [client 20.220.216.188:24408] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "acF-61SqceFAZRgPDq6yagAAAMw"]
[Tue Mar 24 01:57:16.423642 2026] [:error] [pid 31798:tid 31824] [client 20.220.216.188:24433] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acF-_HdtW_1bksndFbZAlwAAABg"]
[Tue Mar 24 01:57:24.256347 2026] [autoindex:error] [pid 56238:tid 56363] [client 20.220.216.188:23755] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 24 01:57:43.927930 2026] [:error] [pid 56238:tid 56364] [client 20.220.216.188:24371] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acF_F1SqceFAZRgPDq6y-AAAANA"]
[Tue Mar 24 01:57:44.487808 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:24364] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "acF_GMrwr-l5A-s9ryCV7AAAAQ8"]
[Tue Mar 24 01:57:52.819924 2026] [:error] [pid 56237:tid 56343] [client 20.220.216.188:24403] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "acF_IAymO0MnzQb90MM2EwAAAJY"]
[Tue Mar 24 01:57:53.423143 2026] [:error] [pid 56435:tid 56514] [client 20.220.216.188:24289] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "acF_Icrwr-l5A-s9ryCV9gAAAQ0"]
[Tue Mar 24 01:57:53.869773 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:24391] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "acF_IQymO0MnzQb90MM2HQAAAJc"]
[Tue Mar 24 01:57:54.344481 2026] [:error] [pid 31798:tid 31811] [client 20.220.216.188:24396] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o1.php"] [unique_id "acF_IndtW_1bksndFbZBjgAAAAs"]
[Tue Mar 24 01:57:54.817142 2026] [:error] [pid 56236:tid 56295] [client 20.220.216.188:24269] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "acF_InapFgYp0uZ8twAuzwAAAEI"]
[Tue Mar 24 01:57:55.283848 2026] [:error] [pid 56236:tid 56299] [client 20.220.216.188:24409] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "acF_I3apFgYp0uZ8twAu0AAAAEY"]
[Tue Mar 24 01:57:55.715512 2026] [:error] [pid 56237:tid 56329] [client 20.220.216.188:24426] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "acF_IwymO0MnzQb90MM2KAAAAIg"]
[Tue Mar 24 01:57:56.206067 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:24296] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/juuuu.php"] [unique_id "acF_JAymO0MnzQb90MM2KgAAAIs"]
[Tue Mar 24 01:57:56.631431 2026] [:error] [pid 31798:tid 31809] [client 20.220.216.188:24363] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "acF_JHdtW_1bksndFbZBkwAAAAk"]
[Tue Mar 24 01:57:57.049933 2026] [:error] [pid 56237:tid 56326] [client 20.220.216.188:24514] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "acF_JQymO0MnzQb90MM2LQAAAIU"]
[Tue Mar 24 01:57:57.465017 2026] [:error] [pid 56237:tid 56341] [client 20.220.216.188:24342] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "acF_JQymO0MnzQb90MM2LwAAAJQ"]
[Tue Mar 24 01:57:57.877127 2026] [:error] [pid 56238:tid 56366] [client 20.220.216.188:24429] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "acF_JVSqceFAZRgPDq6zPgAAANI"]
[Tue Mar 24 01:57:58.593126 2026] [:error] [pid 56238:tid 56358] [client 20.220.216.188:24282] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "acF_JlSqceFAZRgPDq6zQAAAAMo"]
[Tue Mar 24 01:57:59.022500 2026] [:error] [pid 56237:tid 56321] [client 20.220.216.188:24333] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "acF_JwymO0MnzQb90MM2NQAAAIA"]
[Tue Mar 24 01:57:59.455410 2026] [:error] [pid 56237:tid 56345] [client 20.220.216.188:24366] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "acF_JwymO0MnzQb90MM2OQAAAJg"]
[Tue Mar 24 01:58:00.089255 2026] [:error] [pid 56237:tid 56338] [client 20.220.216.188:24503] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "acF_KAymO0MnzQb90MM2OwAAAJE"]
[Tue Mar 24 01:58:00.557437 2026] [:error] [pid 56236:tid 56293] [client 20.220.216.188:24292] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "acF_KHapFgYp0uZ8twAu1gAAAEA"]
[Tue Mar 24 01:58:00.991684 2026] [:error] [pid 31798:tid 31814] [client 20.220.216.188:24543] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "acF_KHdtW_1bksndFbZBqwAAAA4"]
[Tue Mar 24 01:58:01.522782 2026] [:error] [pid 31798:tid 31807] [client 20.220.216.188:24451] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "acF_KXdtW_1bksndFbZBsQAAAAc"]
[Tue Mar 24 01:58:01.978820 2026] [:error] [pid 56236:tid 56294] [client 20.220.216.188:24210] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "acF_KXapFgYp0uZ8twAu2AAAAEE"]
[Tue Mar 24 01:58:02.397711 2026] [:error] [pid 56237:tid 56322] [client 20.220.216.188:24421] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "acF_KgymO0MnzQb90MM2QAAAAIE"]
[Tue Mar 24 01:58:02.842755 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:24422] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "acF_Ksrwr-l5A-s9ryCWBwAAAQs"]
[Tue Mar 24 01:58:03.256762 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:24379] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "acF_K8rwr-l5A-s9ryCWCAAAAQ4"]
[Tue Mar 24 01:58:03.688312 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:24258] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "acF_KwymO0MnzQb90MM2QgAAAIQ"]
[Tue Mar 24 01:58:04.106243 2026] [:error] [pid 56435:tid 56517] [client 20.220.216.188:24337] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "acF_LMrwr-l5A-s9ryCWCgAAARA"]
[Tue Mar 24 01:58:04.544643 2026] [:error] [pid 31798:tid 31800] [client 20.220.216.188:24382] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "acF_LHdtW_1bksndFbZBwgAAAAA"]
[Tue Mar 24 01:58:04.971421 2026] [:error] [pid 31798:tid 31818] [client 20.220.216.188:24375] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "acF_LHdtW_1bksndFbZBxgAAABI"]
[Tue Mar 24 01:58:05.385837 2026] [:error] [pid 31798:tid 31812] [client 20.220.216.188:24443] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "acF_LXdtW_1bksndFbZBywAAAAw"]
[Tue Mar 24 01:58:05.799246 2026] [:error] [pid 31798:tid 31824] [client 20.220.216.188:24321] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "acF_LXdtW_1bksndFbZBzwAAABg"]
[Tue Mar 24 01:58:06.213269 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:24423] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "acF_LlSqceFAZRgPDq6zRwAAANg"]
[Tue Mar 24 01:58:06.628788 2026] [:error] [pid 56238:tid 56354] [client 20.220.216.188:24473] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "acF_LlSqceFAZRgPDq6zSAAAAMY"]
[Tue Mar 24 01:58:07.042291 2026] [:error] [pid 56236:tid 56309] [client 20.220.216.188:24239] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "acF_L3apFgYp0uZ8twAu6AAAAFA"]
[Tue Mar 24 01:58:07.465684 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:24457] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "acF_L8rwr-l5A-s9ryCWDQAAAQk"]
[Tue Mar 24 01:58:07.917412 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:24417] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "acF_L8rwr-l5A-s9ryCWDgAAAQg"]
[Tue Mar 24 01:58:08.331908 2026] [:error] [pid 31798:tid 31808] [client 20.220.216.188:24275] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "acF_MHdtW_1bksndFbZB3wAAAAg"]
[Tue Mar 24 01:58:08.761817 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:24414] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "acF_MMrwr-l5A-s9ryCWEAAAAQI"]
[Tue Mar 24 01:58:09.178560 2026] [:error] [pid 31798:tid 31809] [client 20.220.216.188:24223] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "acF_MXdtW_1bksndFbZB4gAAAAk"]
[Tue Mar 24 01:58:09.592113 2026] [:error] [pid 56236:tid 56315] [client 20.220.216.188:24347] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "acF_MXapFgYp0uZ8twAu6gAAAFY"]
[Tue Mar 24 01:58:10.050840 2026] [:error] [pid 31798:tid 31822] [client 20.220.216.188:24351] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "acF_MndtW_1bksndFbZB6AAAABY"]
[Tue Mar 24 01:58:10.465661 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:24301] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "acF_Msrwr-l5A-s9ryCWEgAAAQU"]
[Tue Mar 24 01:58:10.890818 2026] [:error] [pid 56236:tid 56294] [client 20.220.216.188:24294] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "acF_MnapFgYp0uZ8twAu6wAAAEE"]
[Tue Mar 24 01:58:11.393648 2026] [:error] [pid 56238:tid 56363] [client 20.220.216.188:24291] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "acF_M1SqceFAZRgPDq6zSQAAAM8"]
[Tue Mar 24 01:58:11.828646 2026] [:error] [pid 56236:tid 56300] [client 20.220.216.188:24447] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "acF_M3apFgYp0uZ8twAu7AAAAEc"]
[Tue Mar 24 01:58:12.329833 2026] [:error] [pid 56236:tid 56302] [client 20.220.216.188:24504] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "acF_NHapFgYp0uZ8twAu7gAAAEk"]
[Tue Mar 24 01:58:13.186952 2026] [:error] [pid 56238:tid 56364] [client 20.220.216.188:24552] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "acF_NVSqceFAZRgPDq6zTwAAANA"]
[Tue Mar 24 01:58:13.654938 2026] [:error] [pid 31798:tid 31816] [client 20.220.216.188:24357] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "acF_NXdtW_1bksndFbZB7wAAABA"]
[Tue Mar 24 01:58:14.072060 2026] [:error] [pid 56236:tid 56313] [client 20.220.216.188:24362] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "acF_NnapFgYp0uZ8twAu-AAAAFQ"]
[Tue Mar 24 01:58:14.496343 2026] [:error] [pid 56236:tid 56312] [client 20.220.216.188:24358] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "acF_NnapFgYp0uZ8twAu_AAAAFM"]
[Tue Mar 24 01:58:14.920101 2026] [:error] [pid 56238:tid 56367] [client 20.220.216.188:24567] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "acF_NlSqceFAZRgPDq6zVgAAANM"]
[Tue Mar 24 01:58:15.371269 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:24285] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "acF_N8rwr-l5A-s9ryCWHAAAAQc"]
[Tue Mar 24 01:58:15.803367 2026] [:error] [pid 56238:tid 56358] [client 20.220.216.188:24494] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "acF_N1SqceFAZRgPDq6zWQAAAMo"]
[Tue Mar 24 01:58:16.230492 2026] [:error] [pid 31798:tid 31800] [client 20.220.216.188:24290] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2clas.php"] [unique_id "acF_OHdtW_1bksndFbZB8QAAAAA"]
[Tue Mar 24 01:58:16.658220 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:24317] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "acF_OFSqceFAZRgPDq6zXQAAAMU"]
[Tue Mar 24 01:58:17.070178 2026] [:error] [pid 31798:tid 31805] [client 20.220.216.188:24279] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "acF_OXdtW_1bksndFbZB-QAAAAU"]
[Tue Mar 24 01:58:17.613100 2026] [:error] [pid 31798:tid 31824] [client 20.220.216.188:24398] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "acF_OXdtW_1bksndFbZB_AAAABg"]
[Tue Mar 24 01:58:18.048043 2026] [:error] [pid 31798:tid 31809] [client 20.220.216.188:24311] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ave.php"] [unique_id "acF_OndtW_1bksndFbZCAQAAAAk"]
[Tue Mar 24 01:58:18.493557 2026] [:error] [pid 56236:tid 56310] [client 20.220.216.188:24327] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "acF_OnapFgYp0uZ8twAvAwAAAFE"]
[Tue Mar 24 01:58:18.911640 2026] [:error] [pid 56237:tid 56328] [client 20.220.216.188:24305] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "acF_OgymO0MnzQb90MM2VQAAAIc"]
[Tue Mar 24 01:58:19.352686 2026] [:error] [pid 56237:tid 56327] [client 20.220.216.188:24432] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "acF_OwymO0MnzQb90MM2VwAAAIY"]
[Tue Mar 24 01:58:19.771837 2026] [:error] [pid 31798:tid 31820] [client 20.220.216.188:23788] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wrt.php"] [unique_id "acF_O3dtW_1bksndFbZCCAAAABQ"]
[Tue Mar 24 01:58:20.197700 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:24373] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "acF_PFSqceFAZRgPDq6zZgAAANg"]
[Tue Mar 24 01:58:20.620738 2026] [:error] [pid 31798:tid 31818] [client 20.220.216.188:23778] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "acF_PHdtW_1bksndFbZCCwAAABI"]
[Tue Mar 24 01:58:21.084590 2026] [:error] [pid 56435:tid 56517] [client 20.220.216.188:24325] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "acF_Pcrwr-l5A-s9ryCWNgAAARA"]
[Tue Mar 24 01:58:21.509293 2026] [:error] [pid 56435:tid 56520] [client 20.220.216.188:24367] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bibil.php"] [unique_id "acF_Pcrwr-l5A-s9ryCWOwAAARM"]
[Tue Mar 24 01:58:21.935717 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:24286] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "acF_Pcrwr-l5A-s9ryCWPgAAAQ8"]
[Tue Mar 24 01:58:22.363084 2026] [:error] [pid 56236:tid 56308] [client 20.220.216.188:24531] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "acF_PnapFgYp0uZ8twAvBgAAAE8"]
[Tue Mar 24 01:58:22.777937 2026] [:error] [pid 56237:tid 56337] [client 20.220.216.188:24309] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "acF_PgymO0MnzQb90MM2WgAAAJA"]
[Tue Mar 24 01:58:23.195566 2026] [:error] [pid 56237:tid 56329] [client 20.220.216.188:23795] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "acF_PwymO0MnzQb90MM2XwAAAIg"]
[Tue Mar 24 01:58:23.653576 2026] [:error] [pid 56237:tid 56341] [client 20.220.216.188:24521] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "acF_PwymO0MnzQb90MM2YQAAAJQ"]
[Tue Mar 24 01:58:24.068477 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:24406] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "acF_QMrwr-l5A-s9ryCWTwAAAQU"]
[Tue Mar 24 01:58:24.518564 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:24481] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "acF_QMrwr-l5A-s9ryCWVAAAAQI"]
[Tue Mar 24 01:58:24.931329 2026] [:error] [pid 56435:tid 56517] [client 20.220.216.188:24439] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "acF_QMrwr-l5A-s9ryCWVQAAARA"]
[Tue Mar 24 01:58:25.350198 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:24501] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "acF_Qcrwr-l5A-s9ryCWWAAAARQ"]
[Tue Mar 24 01:58:25.764882 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:24381] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "acF_Qcrwr-l5A-s9ryCWWwAAARg"]
[Tue Mar 24 01:58:26.184413 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:24346] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "acF_QlSqceFAZRgPDq6zbAAAAMU"]
[Tue Mar 24 01:58:26.596434 2026] [:error] [pid 56238:tid 56351] [client 20.220.216.188:23781] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "acF_QlSqceFAZRgPDq6zbwAAAMM"]
[Tue Mar 24 01:58:27.043905 2026] [:error] [pid 31798:tid 31816] [client 20.220.216.188:23796] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acF_Q3dtW_1bksndFbZCDgAAABA"]
[Tue Mar 24 01:58:27.462401 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:24281] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acF_QwymO0MnzQb90MM2bwAAAIM"]
[Tue Mar 24 01:58:27.898394 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:24522] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acF_Q1SqceFAZRgPDq6zdQAAANg"]
[Tue Mar 24 01:58:28.312398 2026] [:error] [pid 56236:tid 56312] [client 20.220.216.188:24334] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acF_RHapFgYp0uZ8twAvCgAAAFM"]
[Tue Mar 24 01:58:28.730241 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:23791] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acF_RHapFgYp0uZ8twAvCwAAAFg"]
[Tue Mar 24 01:58:29.152578 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:24369] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acF_RVSqceFAZRgPDq6zegAAANY"]
[Tue Mar 24 01:58:29.571467 2026] [:error] [pid 56237:tid 56339] [client 20.220.216.188:24274] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acF_RQymO0MnzQb90MM2egAAAJI"]
[Tue Mar 24 01:58:29.987888 2026] [:error] [pid 56237:tid 56337] [client 20.220.216.188:23773] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acF_RQymO0MnzQb90MM2fgAAAJA"]
[Tue Mar 24 01:58:31.480650 2026] [:error] [pid 56435:tid 56514] [client 20.220.216.188:24467] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "acF_R8rwr-l5A-s9ryCWbwAAAQ0"]
[Tue Mar 24 01:58:31.988731 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:23744] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "acF_R8rwr-l5A-s9ryCWdgAAAQw"]
[Tue Mar 24 01:58:32.423915 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:23799] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "acF_SMrwr-l5A-s9ryCWeAAAARc"]
[Tue Mar 24 01:58:32.845466 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:23798] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "acF_SMrwr-l5A-s9ryCWfgAAAQg"]
[Tue Mar 24 01:58:33.263705 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:24297] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "acF_Scrwr-l5A-s9ryCWggAAAQc"]
[Tue Mar 24 01:58:33.718155 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:24267] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "acF_Scrwr-l5A-s9ryCWhwAAARg"]
[Tue Mar 24 01:58:34.239644 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:24339] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "acF_Ssrwr-l5A-s9ryCWjQAAAQQ"]
[Tue Mar 24 01:58:34.663556 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:23802] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "acF_Ssrwr-l5A-s9ryCWkwAAARg"]
[Tue Mar 24 01:58:35.093669 2026] [:error] [pid 56435:tid 56522] [client 20.220.216.188:24288] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "acF_S8rwr-l5A-s9ryCWmAAAARU"]
[Tue Mar 24 01:58:35.523251 2026] [:error] [pid 56236:tid 56305] [client 20.220.216.188:23771] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "acF_S3apFgYp0uZ8twAvFwAAAEw"]
[Tue Mar 24 01:58:36.062694 2026] [:error] [pid 56237:tid 56321] [client 20.220.216.188:24326] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "acF_TAymO0MnzQb90MM2lAAAAIA"]
[Tue Mar 24 01:58:36.609251 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:24380] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "acF_TFSqceFAZRgPDq6zhwAAAMU"]
[Tue Mar 24 01:58:37.095099 2026] [:error] [pid 56236:tid 56295] [client 20.220.216.188:24374] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "acF_TXapFgYp0uZ8twAvIgAAAEI"]
[Tue Mar 24 01:58:37.634372 2026] [:error] [pid 31798:tid 31823] [client 20.220.216.188:24204] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "acF_TXdtW_1bksndFbZCEgAAABc"]
[Tue Mar 24 01:58:38.080595 2026] [:error] [pid 31798:tid 31820] [client 20.220.216.188:24520] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "acF_TndtW_1bksndFbZCFwAAABQ"]
[Tue Mar 24 01:58:38.512677 2026] [:error] [pid 31798:tid 31808] [client 20.220.216.188:24540] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "acF_TndtW_1bksndFbZCHgAAAAg"]
[Tue Mar 24 01:58:38.927620 2026] [:error] [pid 31798:tid 31815] [client 20.220.216.188:24556] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "acF_TndtW_1bksndFbZCIgAAAA8"]
[Tue Mar 24 01:58:39.349253 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:24256] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "acF_T8rwr-l5A-s9ryCWmgAAAQw"]
[Tue Mar 24 01:58:39.782513 2026] [:error] [pid 56238:tid 56352] [client 20.220.216.188:24537] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "acF_T1SqceFAZRgPDq6zjQAAAMQ"]
[Tue Mar 24 01:58:40.340482 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:24300] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "acF_UMrwr-l5A-s9ryCWpAAAAQ4"]
[Tue Mar 24 01:58:40.766559 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:24360] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "acF_UMrwr-l5A-s9ryCWqQAAAQw"]
[Tue Mar 24 01:58:41.232745 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:23765] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "acF_Ucrwr-l5A-s9ryCWrAAAAQk"]
[Tue Mar 24 01:58:41.711889 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:24548] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "acF_Ucrwr-l5A-s9ryCWsAAAAQ8"]
[Tue Mar 24 01:58:42.795298 2026] [:error] [pid 56238:tid 56367] [client 20.220.216.188:24272] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless11.php"] [unique_id "acF_UlSqceFAZRgPDq6zlQAAANM"]
[Tue Mar 24 01:58:43.237553 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:24532] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "acF_UwymO0MnzQb90MM2owAAAI8"]
[Tue Mar 24 01:58:43.657935 2026] [:error] [pid 56236:tid 56311] [client 20.220.216.188:23759] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "acF_U3apFgYp0uZ8twAvKwAAAFI"]
[Tue Mar 24 01:58:44.087968 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:24370] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "acF_VMrwr-l5A-s9ryCWtgAAAQE"]
[Tue Mar 24 01:58:44.566878 2026] [:error] [pid 56238:tid 56352] [client 20.220.216.188:23779] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccou.php"] [unique_id "acF_VFSqceFAZRgPDq6znQAAAMQ"]
[Tue Mar 24 01:58:45.112080 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:24495] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "acF_Vcrwr-l5A-s9ryCWvgAAAQc"]
[Tue Mar 24 01:58:45.539814 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:23803] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "acF_Vcrwr-l5A-s9ryCWwQAAARQ"]
[Tue Mar 24 01:58:46.151492 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:23792] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "acF_VlSqceFAZRgPDq6zoQAAAM4"]
[Tue Mar 24 01:58:46.577737 2026] [:error] [pid 56237:tid 56328] [client 20.220.216.188:23790] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ton.php"] [unique_id "acF_VgymO0MnzQb90MM2qQAAAIc"]
[Tue Mar 24 01:58:47.003881 2026] [:error] [pid 56237:tid 56335] [client 20.220.216.188:24230] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "acF_VwymO0MnzQb90MM2rAAAAI4"]
[Tue Mar 24 01:58:47.449780 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:24523] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "acF_VwymO0MnzQb90MM2rQAAAIM"]
[Tue Mar 24 01:58:47.901467 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:24516] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "acF_VwymO0MnzQb90MM2sAAAAIs"]
[Tue Mar 24 01:58:48.325553 2026] [:error] [pid 56238:tid 56360] [client 20.220.216.188:24525] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/403.php"] [unique_id "acF_WFSqceFAZRgPDq6zpgAAAMw"]
[Tue Mar 24 01:58:48.744860 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:23761] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "acF_WMrwr-l5A-s9ryCW0AAAARQ"]
[Tue Mar 24 01:58:49.273207 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:23804] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "acF_Wcrwr-l5A-s9ryCW0wAAAQI"]
[Tue Mar 24 01:58:49.762837 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:23780] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file9.php"] [unique_id "acF_Wcrwr-l5A-s9ryCW2AAAAQs"]
[Tue Mar 24 01:59:34.570595 2026] [:error] [pid 31798:tid 31804] [client 20.220.216.188:24378] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "acF_hndtW_1bksndFbZCxAAAAAQ"]
[Tue Mar 24 01:59:34.982812 2026] [:error] [pid 56237:tid 56337] [client 20.220.216.188:23782] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "acF_hgymO0MnzQb90MM24wAAAJA"]
[Tue Mar 24 01:59:36.664578 2026] [:error] [pid 56237:tid 56343] [client 20.220.216.188:23760] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "acF_iAymO0MnzQb90MM25QAAAJY"]
[Tue Mar 24 01:59:37.100621 2026] [:error] [pid 31798:tid 31805] [client 20.220.216.188:24530] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "acF_iXdtW_1bksndFbZCyQAAAAU"]
[Tue Mar 24 01:59:37.514624 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:23751] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "acF_icrwr-l5A-s9ryCXSQAAARQ"]
[Tue Mar 24 01:59:37.956465 2026] [:error] [pid 56237:tid 56330] [client 20.220.216.188:23789] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "acF_iQymO0MnzQb90MM26QAAAIk"]
[Tue Mar 24 01:59:38.372284 2026] [:error] [pid 56238:tid 56355] [client 20.220.216.188:23776] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "acF_ilSqceFAZRgPDq6z8wAAAMc"]
[Tue Mar 24 01:59:38.794639 2026] [:error] [pid 56236:tid 56311] [client 20.220.216.188:23749] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "acF_inapFgYp0uZ8twAvVgAAAFI"]
[Tue Mar 24 01:59:39.224720 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:23764] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "acF_i3apFgYp0uZ8twAvVwAAAFg"]
[Tue Mar 24 01:59:39.689076 2026] [:error] [pid 56237:tid 56335] [client 20.220.216.188:23794] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "acF_iwymO0MnzQb90MM27gAAAI4"]
[Tue Mar 24 01:59:40.105029 2026] [:error] [pid 31798:tid 31816] [client 20.220.216.188:24536] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "acF_jHdtW_1bksndFbZCywAAABA"]
[Tue Mar 24 01:59:40.527628 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:24538] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "acF_jFSqceFAZRgPDq6z-AAAAM4"]
[Tue Mar 24 01:59:40.947678 2026] [:error] [pid 56237:tid 56337] [client 20.220.216.188:23762] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "acF_jAymO0MnzQb90MM28gAAAJA"]
[Tue Mar 24 01:59:41.385398 2026] [:error] [pid 56238:tid 56356] [client 20.220.216.188:24527] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "acF_jVSqceFAZRgPDq6z_QAAAMg"]
[Tue Mar 24 01:59:41.803049 2026] [:error] [pid 56237:tid 56343] [client 20.220.216.188:23757] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "acF_jQymO0MnzQb90MM29AAAAJY"]
[Tue Mar 24 01:59:42.395090 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:24513] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "acF_jlSqceFAZRgPDq60AQAAANY"]
[Tue Mar 24 09:02:45.719598 2026] [:error] [pid 38767:tid 38774] [client 185.223.152.138:50221] [client 185.223.152.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.138, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acHitfwkUqN4GJAI5oXAIgAAAQQ"]
[Tue Mar 24 17:54:58.491385 2026] [autoindex:error] [pid 3030:tid 3068] [client 89.117.54.137:65471] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 25 03:14:43.111838 2026] [:error] [pid 58154:tid 58160] [client 20.203.184.156:13560] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acLiow0pGUh6bwD3ouLEOAAAAMM"]
[Wed Mar 25 03:15:19.679146 2026] [:error] [pid 57711:tid 58076] [client 20.203.184.156:44235] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acLix6LdPFdeRRktTdN4zAAAAJY"]
[Wed Mar 25 03:15:20.230901 2026] [:error] [pid 57702:tid 57914] [client 20.203.184.156:32152] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acLiyKS8TU_xcQFvlnYpmQAAAAs"]
[Wed Mar 25 03:15:20.926871 2026] [:error] [pid 58154:tid 58164] [client 20.203.184.156:37852] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acLiyA0pGUh6bwD3ouLErgAAAMc"]
[Wed Mar 25 03:15:21.908422 2026] [:error] [pid 58154:tid 58160] [client 20.203.184.156:9054] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acLiyQ0pGUh6bwD3ouLEsAAAAMM"]
[Wed Mar 25 03:15:22.513654 2026] [:error] [pid 58154:tid 58161] [client 20.203.184.156:22783] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acLiyg0pGUh6bwD3ouLEtAAAAMQ"]
[Wed Mar 25 03:15:23.307933 2026] [:error] [pid 57703:tid 58020] [client 20.203.184.156:8028] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acLiy_IVQxDtjkklWGZyVgAAAEE"]
[Wed Mar 25 03:15:24.804325 2026] [:error] [pid 57711:tid 58070] [client 20.203.184.156:37840] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acLizKLdPFdeRRktTdN40AAAAJA"]
[Wed Mar 25 03:15:25.753529 2026] [:error] [pid 20371:tid 20373] [client 20.203.184.156:12352] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acLizeb25OL4yTv2fF_H5wAAAQA"]
[Wed Mar 25 03:15:26.908950 2026] [:error] [pid 58154:tid 58178] [client 20.203.184.156:12402] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acLizg0pGUh6bwD3ouLEugAAANU"]
[Wed Mar 25 03:15:27.732215 2026] [:error] [pid 58154:tid 58176] [client 20.203.184.156:12364] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acLizw0pGUh6bwD3ouLEwAAAANM"]
[Wed Mar 25 03:15:28.440726 2026] [:error] [pid 58154:tid 58174] [client 20.203.184.156:31723] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acLi0A0pGUh6bwD3ouLExAAAANE"]
[Wed Mar 25 03:15:29.437743 2026] [:error] [pid 57702:tid 57924] [client 20.203.184.156:22747] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acLi0aS8TU_xcQFvlnYpnwAAABU"]
[Wed Mar 25 03:15:30.266699 2026] [:error] [pid 57702:tid 57918] [client 20.203.184.156:20839] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "acLi0qS8TU_xcQFvlnYpoAAAAA8"]
[Wed Mar 25 03:15:31.229767 2026] [:error] [pid 57702:tid 57923] [client 20.203.184.156:24163] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "acLi06S8TU_xcQFvlnYppQAAABQ"]
[Wed Mar 25 03:15:31.901170 2026] [:error] [pid 57702:tid 57927] [client 20.203.184.156:31695] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "acLi06S8TU_xcQFvlnYpqgAAABg"]
[Wed Mar 25 03:15:33.580112 2026] [:error] [pid 20371:tid 20397] [client 20.203.184.156:12370] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "acLi1eb25OL4yTv2fF_H7QAAARg"]
[Wed Mar 25 03:15:34.428450 2026] [:error] [pid 57703:tid 58041] [client 20.203.184.156:8011] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "acLi1vIVQxDtjkklWGZyYQAAAFY"]
[Wed Mar 25 03:15:35.147390 2026] [:error] [pid 58154:tid 58172] [client 20.203.184.156:24928] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "acLi1w0pGUh6bwD3ouLEygAAAM8"]
[Wed Mar 25 03:15:36.113844 2026] [:error] [pid 57711:tid 58056] [client 20.203.184.156:36000] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "acLi2KLdPFdeRRktTdN40wAAAIU"]
[Wed Mar 25 03:15:36.712067 2026] [:error] [pid 57702:tid 57910] [client 20.203.184.156:9991] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "acLi2KS8TU_xcQFvlnYptQAAAAc"]
[Wed Mar 25 03:15:37.717173 2026] [:error] [pid 20371:tid 20376] [client 20.203.184.156:17294] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acLi2eb25OL4yTv2fF_H8wAAAQM"]
[Wed Mar 25 03:15:38.411366 2026] [:error] [pid 58154:tid 58166] [client 20.203.184.156:20815] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acLi2g0pGUh6bwD3ouLE0gAAAMk"]
[Wed Mar 25 03:15:39.432266 2026] [:error] [pid 20371:tid 20393] [client 20.203.184.156:17296] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acLi2-b25OL4yTv2fF_H9QAAARQ"]
[Wed Mar 25 03:15:40.316868 2026] [:error] [pid 57711:tid 58064] [client 20.203.184.156:20845] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acLi3KLdPFdeRRktTdN41wAAAIs"]
[Wed Mar 25 03:15:40.884104 2026] [:error] [pid 57703:tid 58040] [client 20.203.184.156:37829] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "acLi3PIVQxDtjkklWGZyZgAAAFU"]
[Wed Mar 25 03:15:41.511886 2026] [:error] [pid 57703:tid 58038] [client 20.203.184.156:31681] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "acLi3fIVQxDtjkklWGZyaQAAAFM"]
[Wed Mar 25 03:15:42.157653 2026] [:error] [pid 57711:tid 58062] [client 20.203.184.156:20794] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "acLi3qLdPFdeRRktTdN42AAAAIk"]
[Wed Mar 25 03:15:42.948177 2026] [:error] [pid 57711:tid 58076] [client 20.203.184.156:17337] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "acLi3qLdPFdeRRktTdN42QAAAJY"]
[Wed Mar 25 03:15:43.711381 2026] [:error] [pid 20371:tid 20385] [client 20.203.184.156:20743] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "acLi3-b25OL4yTv2fF_IAQAAAQw"]
[Wed Mar 25 03:15:44.527155 2026] [:error] [pid 20371:tid 20377] [client 20.203.184.156:25664] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "acLi4Ob25OL4yTv2fF_IBAAAAQQ"]
[Wed Mar 25 03:15:45.587208 2026] [:error] [pid 57711:tid 58067] [client 20.203.184.156:9993] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "acLi4aLdPFdeRRktTdN42wAAAI0"]
[Wed Mar 25 03:15:46.292958 2026] [:error] [pid 20371:tid 20376] [client 20.203.184.156:19670] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "acLi4ub25OL4yTv2fF_IDQAAAQM"]
[Wed Mar 25 03:15:47.359446 2026] [:error] [pid 58154:tid 58170] [client 20.203.184.156:35988] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acLi4w0pGUh6bwD3ouLE1wAAAM0"]
[Wed Mar 25 03:15:47.892845 2026] [:error] [pid 57702:tid 57913] [client 20.203.184.156:9030] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acLi46S8TU_xcQFvlnYpxQAAAAo"]
[Wed Mar 25 03:15:48.823529 2026] [:error] [pid 20371:tid 20393] [client 20.203.184.156:32163] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acLi5Ob25OL4yTv2fF_IEQAAARQ"]
[Wed Mar 25 03:15:49.518096 2026] [:error] [pid 20371:tid 20389] [client 20.203.184.156:15409] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acLi5eb25OL4yTv2fF_IFgAAARA"]
[Wed Mar 25 03:15:50.700313 2026] [:error] [pid 57703:tid 58020] [client 20.203.184.156:35986] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "acLi5vIVQxDtjkklWGZybgAAAEE"]
[Wed Mar 25 03:15:51.681849 2026] [:error] [pid 58154:tid 58157] [client 20.203.184.156:25689] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "acLi5w0pGUh6bwD3ouLE2gAAAMA"]
[Wed Mar 25 03:15:52.950964 2026] [:error] [pid 57702:tid 57924] [client 20.203.184.156:17316] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "acLi6KS8TU_xcQFvlnYpyQAAABU"]
[Wed Mar 25 03:15:54.252828 2026] [:error] [pid 20371:tid 20381] [client 20.203.184.156:56697] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "acLi6ub25OL4yTv2fF_IHgAAAQg"]
[Wed Mar 25 03:15:55.186173 2026] [:error] [pid 20371:tid 20396] [client 20.203.184.156:31691] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "acLi6-b25OL4yTv2fF_IIQAAARc"]
[Wed Mar 25 03:15:56.519165 2026] [:error] [pid 20371:tid 20376] [client 20.203.184.156:56667] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "acLi7Ob25OL4yTv2fF_IJQAAAQM"]
[Wed Mar 25 03:15:57.615622 2026] [:error] [pid 20371:tid 20381] [client 20.203.184.156:20860] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "acLi7eb25OL4yTv2fF_IKQAAAQg"]
[Wed Mar 25 03:15:58.522954 2026] [:error] [pid 20371:tid 20374] [client 20.203.184.156:31711] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "acLi7ub25OL4yTv2fF_IKgAAAQE"]
[Wed Mar 25 03:15:59.413692 2026] [:error] [pid 20371:tid 20390] [client 20.203.184.156:37845] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acLi7-b25OL4yTv2fF_ILgAAARE"]
[Wed Mar 25 03:16:00.146917 2026] [:error] [pid 20371:tid 20389] [client 20.203.184.156:17327] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acLi8Ob25OL4yTv2fF_IMAAAARA"]
[Wed Mar 25 03:16:00.766899 2026] [:error] [pid 58154:tid 58164] [client 20.203.184.156:9253] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acLi8A0pGUh6bwD3ouLE5gAAAMc"]
[Wed Mar 25 03:16:02.004815 2026] [:error] [pid 20371:tid 20385] [client 20.203.184.156:10783] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acLi8ub25OL4yTv2fF_INAAAAQw"]
[Wed Mar 25 03:16:02.922121 2026] [:error] [pid 20371:tid 20382] [client 20.203.184.156:13516] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acLi8ub25OL4yTv2fF_INQAAAQk"]
[Wed Mar 25 03:16:03.456990 2026] [:error] [pid 20371:tid 20378] [client 20.203.184.156:8012] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acLi8-b25OL4yTv2fF_INwAAAQU"]
[Wed Mar 25 03:16:04.243210 2026] [:error] [pid 57703:tid 58031] [client 20.203.184.156:25710] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acLi9PIVQxDtjkklWGZycQAAAEw"]
[Wed Mar 25 03:16:05.216019 2026] [:error] [pid 57702:tid 57920] [client 20.203.184.156:8037] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acLi9aS8TU_xcQFvlnYp1AAAABE"]
[Wed Mar 25 03:16:06.083907 2026] [:error] [pid 20371:tid 20392] [client 20.203.184.156:15416] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "acLi9ub25OL4yTv2fF_IQQAAARM"]
[Wed Mar 25 03:16:06.844524 2026] [:error] [pid 20371:tid 20377] [client 20.203.184.156:24147] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "acLi9ub25OL4yTv2fF_IRgAAAQQ"]
[Wed Mar 25 03:16:07.907066 2026] [:error] [pid 57703:tid 58019] [client 20.203.184.156:32128] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "acLi9_IVQxDtjkklWGZydQAAAEA"]
[Wed Mar 25 03:16:08.790077 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:19682] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "acLi-Ob25OL4yTv2fF_ISQAAARY"]
[Wed Mar 25 03:16:09.929191 2026] [:error] [pid 57702:tid 57918] [client 20.203.184.156:24942] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acLi-aS8TU_xcQFvlnYp2AAAAA8"]
[Wed Mar 25 03:16:10.519069 2026] [:error] [pid 20371:tid 20377] [client 20.203.184.156:24925] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acLi-ub25OL4yTv2fF_IUgAAAQQ"]
[Wed Mar 25 03:16:11.151954 2026] [:error] [pid 20371:tid 20380] [client 20.203.184.156:20837] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acLi--b25OL4yTv2fF_IWAAAAQc"]
[Wed Mar 25 03:16:12.165597 2026] [:error] [pid 20371:tid 20388] [client 20.203.184.156:20758] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acLi_Ob25OL4yTv2fF_IXQAAAQ8"]
[Wed Mar 25 03:16:13.572374 2026] [:error] [pid 58154:tid 58169] [client 20.203.184.156:31742] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acLi_Q0pGUh6bwD3ouLE7AAAAMw"]
[Wed Mar 25 03:16:15.159469 2026] [:error] [pid 57711:tid 58059] [client 20.203.184.156:50459] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acLi_6LdPFdeRRktTdN46AAAAIc"]
[Wed Mar 25 03:16:15.880819 2026] [:error] [pid 20371:tid 20376] [client 20.203.184.156:22752] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acLi_-b25OL4yTv2fF_IbAAAAQM"]
[Wed Mar 25 03:16:16.435829 2026] [:error] [pid 58154:tid 58173] [client 20.203.184.156:36024] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acLjAA0pGUh6bwD3ouLE8AAAANA"]
[Wed Mar 25 03:16:46.581901 2026] [:error] [pid 58154:tid 58172] [client 20.203.184.156:20844] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acLjHg0pGUh6bwD3ouLFFgAAAM8"]
[Wed Mar 25 03:16:47.680530 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:57077] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acLjH-b25OL4yTv2fF_IiAAAARY"]
[Wed Mar 25 03:16:48.317920 2026] [:error] [pid 57711:tid 58055] [client 20.203.184.156:15755] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acLjIKLdPFdeRRktTdN5DgAAAIQ"]
[Wed Mar 25 03:16:49.211155 2026] [:error] [pid 57711:tid 58052] [client 20.203.184.156:20848] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acLjIaLdPFdeRRktTdN5DwAAAII"]
[Wed Mar 25 03:16:50.196371 2026] [:error] [pid 57703:tid 58034] [client 20.203.184.156:15367] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acLjIvIVQxDtjkklWGZyiwAAAE8"]
[Wed Mar 25 03:16:50.976559 2026] [:error] [pid 20371:tid 20386] [client 20.203.184.156:12335] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acLjIub25OL4yTv2fF_IjQAAAQ0"]
[Wed Mar 25 03:16:51.783854 2026] [:error] [pid 57702:tid 57908] [client 20.203.184.156:37854] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acLjI6S8TU_xcQFvlnYqBgAAAAU"]
[Wed Mar 25 03:16:52.466467 2026] [:error] [pid 58154:tid 58164] [client 20.203.184.156:23773] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acLjJA0pGUh6bwD3ouLFGwAAAMc"]
[Wed Mar 25 03:16:54.971223 2026] [:error] [pid 57702:tid 57904] [client 20.203.184.156:24189] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acLjJqS8TU_xcQFvlnYqCAAAAAE"]
[Wed Mar 25 03:16:55.646039 2026] [:error] [pid 20371:tid 20388] [client 20.203.184.156:23135] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acLjJ-b25OL4yTv2fF_IkgAAAQ8"]
[Wed Mar 25 03:16:56.172005 2026] [:error] [pid 20371:tid 20383] [client 20.203.184.156:15372] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acLjKOb25OL4yTv2fF_IlAAAAQo"]
[Wed Mar 25 03:16:57.030452 2026] [:error] [pid 58154:tid 58158] [client 20.203.184.156:9607] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acLjKQ0pGUh6bwD3ouLFJgAAAME"]
[Wed Mar 25 03:16:57.757179 2026] [:error] [pid 57711:tid 58051] [client 20.203.184.156:44238] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "acLjKaLdPFdeRRktTdN5GAAAAIE"]
[Wed Mar 25 03:16:58.425048 2026] [:error] [pid 57702:tid 57903] [client 20.203.184.156:20801] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "acLjKqS8TU_xcQFvlnYqCwAAAAA"]
[Wed Mar 25 03:16:59.537536 2026] [:error] [pid 57702:tid 57919] [client 20.203.184.156:27750] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "acLjK6S8TU_xcQFvlnYqDQAAABA"]
[Wed Mar 25 03:17:00.228901 2026] [:error] [pid 57702:tid 57915] [client 20.203.184.156:27725] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "acLjLKS8TU_xcQFvlnYqDwAAAAw"]
[Wed Mar 25 03:17:00.902545 2026] [:error] [pid 57702:tid 57914] [client 20.203.184.156:27741] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acLjLKS8TU_xcQFvlnYqEQAAAAs"]
[Wed Mar 25 03:17:02.370993 2026] [:error] [pid 57711:tid 58074] [client 20.203.184.156:8823] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acLjLqLdPFdeRRktTdN5HgAAAJQ"]
[Wed Mar 25 03:17:03.272625 2026] [:error] [pid 20371:tid 20383] [client 20.203.184.156:9643] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acLjL-b25OL4yTv2fF_IngAAAQo"]
[Wed Mar 25 03:17:04.133009 2026] [:error] [pid 57711:tid 58058] [client 20.203.184.156:23143] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acLjMKLdPFdeRRktTdN5HwAAAIY"]
[Wed Mar 25 03:17:05.032355 2026] [:error] [pid 58154:tid 58173] [client 20.203.184.156:40385] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acLjMQ0pGUh6bwD3ouLFLgAAANA"]
[Wed Mar 25 03:17:06.208385 2026] [:error] [pid 58154:tid 58161] [client 20.203.184.156:23800] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acLjMg0pGUh6bwD3ouLFMAAAAMQ"]
[Wed Mar 25 03:17:06.877465 2026] [:error] [pid 20371:tid 20385] [client 20.203.184.156:23762] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acLjMub25OL4yTv2fF_IqQAAAQw"]
[Wed Mar 25 03:17:07.614771 2026] [:error] [pid 57711:tid 58077] [client 20.203.184.156:23131] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acLjM6LdPFdeRRktTdN5JgAAAJc"]
[Wed Mar 25 03:17:09.162292 2026] [:error] [pid 20371:tid 20391] [client 20.203.184.156:43552] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acLjNeb25OL4yTv2fF_IsAAAARI"]
[Wed Mar 25 03:17:10.051333 2026] [:error] [pid 20371:tid 20387] [client 20.203.184.156:36831] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acLjNub25OL4yTv2fF_IsgAAAQ4"]
[Wed Mar 25 03:17:11.811845 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:36817] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acLjN-b25OL4yTv2fF_ItwAAARY"]
[Wed Mar 25 03:17:13.812829 2026] [:error] [pid 57702:tid 57924] [client 20.203.184.156:39976] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acLjOaS8TU_xcQFvlnYqGAAAABU"]
[Wed Mar 25 03:17:16.470150 2026] [:error] [pid 57702:tid 57918] [client 20.203.184.156:22293] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acLjPKS8TU_xcQFvlnYqHwAAAA8"]
[Wed Mar 25 03:17:17.352470 2026] [:error] [pid 20371:tid 20384] [client 20.203.184.156:4908] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acLjPeb25OL4yTv2fF_IxgAAAQs"]
[Wed Mar 25 03:17:18.247108 2026] [:error] [pid 57711:tid 58070] [client 20.203.184.156:7584] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acLjPqLdPFdeRRktTdN5MwAAAJA"]
[Wed Mar 25 03:17:19.341851 2026] [:error] [pid 57711:tid 58073] [client 20.203.184.156:24561] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acLjP6LdPFdeRRktTdN5NwAAAJM"]
[Wed Mar 25 03:17:20.108353 2026] [:error] [pid 57711:tid 58067] [client 20.203.184.156:4884] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acLjQKLdPFdeRRktTdN5OgAAAI0"]
[Wed Mar 25 03:17:21.572338 2026] [:error] [pid 20371:tid 20376] [client 20.203.184.156:52221] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acLjQeb25OL4yTv2fF_IygAAAQM"]
[Wed Mar 25 03:17:22.736100 2026] [:error] [pid 57703:tid 58025] [client 20.203.184.156:14324] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acLjQvIVQxDtjkklWGZylAAAAEY"]
[Wed Mar 25 03:17:23.419539 2026] [:error] [pid 57702:tid 57921] [client 20.203.184.156:7715] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acLjQ6S8TU_xcQFvlnYqKgAAABI"]
[Wed Mar 25 03:17:24.459534 2026] [:error] [pid 58154:tid 58175] [client 20.203.184.156:40025] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "acLjRA0pGUh6bwD3ouLFPAAAANI"]
[Wed Mar 25 03:17:25.589340 2026] [:error] [pid 20371:tid 20382] [client 20.203.184.156:16937] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "acLjReb25OL4yTv2fF_IzQAAAQk"]
[Wed Mar 25 03:17:27.311138 2026] [:error] [pid 57702:tid 57925] [client 20.203.184.156:12710] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "acLjR6S8TU_xcQFvlnYqLQAAABY"]
[Wed Mar 25 03:17:28.335248 2026] [:error] [pid 57711:tid 58051] [client 20.203.184.156:24105] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "acLjSKLdPFdeRRktTdN5SAAAAIE"]
[Wed Mar 25 03:17:28.961755 2026] [:error] [pid 58154:tid 58174] [client 20.203.184.156:31616] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acLjSA0pGUh6bwD3ouLFQwAAANE"]
[Wed Mar 25 03:17:29.665493 2026] [:error] [pid 58154:tid 58176] [client 20.203.184.156:26101] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acLjSQ0pGUh6bwD3ouLFRAAAANM"]
[Wed Mar 25 03:17:30.470584 2026] [:error] [pid 57702:tid 57903] [client 20.203.184.156:41397] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acLjSqS8TU_xcQFvlnYqLwAAAAA"]
[Wed Mar 25 03:17:31.527096 2026] [:error] [pid 57711:tid 58055] [client 20.203.184.156:7909] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acLjS6LdPFdeRRktTdN5UgAAAIQ"]
[Wed Mar 25 03:17:32.271571 2026] [:error] [pid 58154:tid 58161] [client 20.203.184.156:7796] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acLjTA0pGUh6bwD3ouLFSQAAAMQ"]
[Wed Mar 25 03:17:33.446717 2026] [:error] [pid 20371:tid 20380] [client 20.203.184.156:48797] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acLjTeb25OL4yTv2fF_I0AAAAQc"]
[Wed Mar 25 03:17:34.215318 2026] [:error] [pid 20371:tid 20386] [client 20.203.184.156:41918] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acLjTub25OL4yTv2fF_I0gAAAQ0"]
[Wed Mar 25 03:17:34.994712 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:7418] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acLjTub25OL4yTv2fF_I1gAAARY"]
[Wed Mar 25 03:17:35.573726 2026] [:error] [pid 57703:tid 58020] [client 20.203.184.156:7390] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acLjT_IVQxDtjkklWGZyoQAAAEE"]
[Wed Mar 25 03:17:36.222337 2026] [:error] [pid 57703:tid 58019] [client 20.203.184.156:27361] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acLjUPIVQxDtjkklWGZypAAAAEA"]
[Wed Mar 25 03:17:36.801194 2026] [:error] [pid 57711:tid 58052] [client 20.203.184.156:13848] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acLjUKLdPFdeRRktTdN5WAAAAII"]
[Wed Mar 25 03:17:37.675588 2026] [:error] [pid 20371:tid 20380] [client 20.203.184.156:41878] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acLjUeb25OL4yTv2fF_I3wAAAQc"]
[Wed Mar 25 03:17:38.630920 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:13831] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "acLjUub25OL4yTv2fF_I4QAAARY"]
[Wed Mar 25 03:17:39.205055 2026] [:error] [pid 57702:tid 57912] [client 20.203.184.156:29310] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "acLjU6S8TU_xcQFvlnYqOgAAAAk"]
[Wed Mar 25 03:17:40.136438 2026] [:error] [pid 57702:tid 57903] [client 20.203.184.156:10439] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "acLjVKS8TU_xcQFvlnYqPAAAAAA"]
[Wed Mar 25 03:17:40.952805 2026] [:error] [pid 57702:tid 57923] [client 20.203.184.156:7372] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "acLjVKS8TU_xcQFvlnYqQQAAABQ"]
[Wed Mar 25 03:17:41.707900 2026] [:error] [pid 57711:tid 58076] [client 20.203.184.156:13843] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acLjVaLdPFdeRRktTdN5WQAAAJY"]
[Wed Mar 25 03:17:42.574214 2026] [:error] [pid 20371:tid 20375] [client 20.203.184.156:20073] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acLjVub25OL4yTv2fF_I6QAAAQI"]
[Wed Mar 25 03:17:43.779172 2026] [:error] [pid 20371:tid 20373] [client 20.203.184.156:56744] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acLjV-b25OL4yTv2fF_I7gAAAQA"]
[Wed Mar 25 03:18:32.296189 2026] [:error] [pid 20371:tid 20374] [client 20.203.184.156:31350] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "acLjiOb25OL4yTv2fF_JWwAAAQE"]
[Wed Mar 25 03:18:33.443318 2026] [:error] [pid 58154:tid 58173] [client 20.203.184.156:16958] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "acLjiQ0pGUh6bwD3ouLFlAAAANA"]
[Wed Mar 25 03:18:34.688415 2026] [:error] [pid 58154:tid 58167] [client 20.203.184.156:12702] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "acLjig0pGUh6bwD3ouLFmwAAAMo"]
[Wed Mar 25 03:18:35.360041 2026] [:error] [pid 58154:tid 58160] [client 20.203.184.156:13468] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "acLjiw0pGUh6bwD3ouLFngAAAMM"]
[Wed Mar 25 03:18:36.078262 2026] [:error] [pid 57702:tid 57915] [client 20.203.184.156:43591] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acLjjKS8TU_xcQFvlnYqeAAAAAw"]
[Wed Mar 25 03:18:37.068321 2026] [:error] [pid 20371:tid 20385] [client 20.203.184.156:19614] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acLjjeb25OL4yTv2fF_JYgAAAQw"]
[Wed Mar 25 03:18:38.129178 2026] [:error] [pid 20371:tid 20387] [client 20.203.184.156:16543] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acLjjub25OL4yTv2fF_JZwAAAQ4"]
[Wed Mar 25 03:18:39.025394 2026] [:error] [pid 20371:tid 20379] [client 20.203.184.156:7738] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acLjj-b25OL4yTv2fF_JawAAAQY"]
[Wed Mar 25 03:18:39.902671 2026] [:error] [pid 20371:tid 20376] [client 20.203.184.156:33175] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax.php"] [unique_id "acLjj-b25OL4yTv2fF_JcQAAAQM"]
[Wed Mar 25 03:18:40.763628 2026] [:error] [pid 58154:tid 58168] [client 20.203.184.156:43632] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax.php"] [unique_id "acLjkA0pGUh6bwD3ouLFowAAAMs"]
[Wed Mar 25 03:18:41.658886 2026] [:error] [pid 58154:tid 58172] [client 20.203.184.156:8973] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax.php"] [unique_id "acLjkQ0pGUh6bwD3ouLFpwAAAM8"]
[Wed Mar 25 03:18:42.420406 2026] [:error] [pid 57702:tid 57916] [client 20.203.184.156:52178] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax.php"] [unique_id "acLjkqS8TU_xcQFvlnYqfwAAAA0"]
[Wed Mar 25 03:18:43.143665 2026] [:error] [pid 20371:tid 20377] [client 20.203.184.156:4886] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acLjk-b25OL4yTv2fF_JdgAAAQQ"]
[Wed Mar 25 03:18:44.338138 2026] [:error] [pid 20371:tid 20382] [client 20.203.184.156:24452] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acLjlOb25OL4yTv2fF_JegAAAQk"]
[Wed Mar 25 03:18:45.466952 2026] [:error] [pid 20371:tid 20387] [client 20.203.184.156:21246] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acLjleb25OL4yTv2fF_JfgAAAQ4"]
[Wed Mar 25 03:18:46.355022 2026] [:error] [pid 20371:tid 20375] [client 20.203.184.156:28109] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acLjlub25OL4yTv2fF_JgQAAAQI"]
[Wed Mar 25 03:18:47.385406 2026] [:error] [pid 20371:tid 20384] [client 20.203.184.156:14297] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acLjl-b25OL4yTv2fF_JhgAAAQs"]
[Wed Mar 25 03:18:48.400723 2026] [:error] [pid 20371:tid 20389] [client 20.203.184.156:36805] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acLjmOb25OL4yTv2fF_JiAAAARA"]
[Wed Mar 25 03:18:49.104412 2026] [:error] [pid 58154:tid 58158] [client 20.203.184.156:51133] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acLjmQ0pGUh6bwD3ouLFsQAAAME"]
[Wed Mar 25 03:18:49.872815 2026] [:error] [pid 20371:tid 20388] [client 20.203.184.156:36836] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acLjmeb25OL4yTv2fF_JjwAAAQ8"]
[Wed Mar 25 03:18:50.596781 2026] [:error] [pid 57702:tid 57909] [client 20.203.184.156:24497] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acLjmqS8TU_xcQFvlnYqggAAAAY"]
[Wed Mar 25 03:18:52.494698 2026] [:error] [pid 57702:tid 57915] [client 20.203.184.156:15763] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acLjnKS8TU_xcQFvlnYqhQAAAAw"]
[Wed Mar 25 03:18:53.362812 2026] [:error] [pid 20371:tid 20396] [client 20.203.184.156:43900] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acLjneb25OL4yTv2fF_JlgAAARc"]
[Wed Mar 25 03:18:56.476214 2026] [:error] [pid 57711:tid 58051] [client 20.203.184.156:9715] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acLjoKLdPFdeRRktTdN5dQAAAIE"]
[Wed Mar 25 03:18:57.053630 2026] [:error] [pid 57702:tid 57923] [client 20.203.184.156:15405] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acLjoaS8TU_xcQFvlnYqigAAABQ"]
[Wed Mar 25 03:18:57.900142 2026] [:error] [pid 20371:tid 20392] [client 20.203.184.156:35968] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acLjoeb25OL4yTv2fF_JpAAAARM"]
[Wed Mar 25 03:18:58.596843 2026] [:error] [pid 20371:tid 20389] [client 20.203.184.156:13522] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acLjoub25OL4yTv2fF_JqQAAARA"]
[Wed Mar 25 03:18:59.383899 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:13551] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acLjo-b25OL4yTv2fF_JqgAAARY"]
[Wed Mar 25 03:19:00.331180 2026] [:error] [pid 58154:tid 58159] [client 20.203.184.156:35973] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acLjpA0pGUh6bwD3ouLFtAAAAMI"]
[Wed Mar 25 03:19:01.419988 2026] [:error] [pid 58154:tid 58179] [client 20.203.184.156:32158] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acLjpQ0pGUh6bwD3ouLFtwAAANY"]
[Wed Mar 25 03:19:02.116852 2026] [:error] [pid 20371:tid 20397] [client 20.203.184.156:37853] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acLjpub25OL4yTv2fF_JsAAAARg"]
[Wed Mar 25 03:19:03.141287 2026] [:error] [pid 57711:tid 58050] [client 20.203.184.156:8235] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acLjp6LdPFdeRRktTdN5fgAAAIA"]
[Wed Mar 25 03:19:03.761475 2026] [:error] [pid 20371:tid 20384] [client 20.203.184.156:9706] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acLjp-b25OL4yTv2fF_JtAAAAQs"]
[Wed Mar 25 03:19:04.543446 2026] [:error] [pid 20371:tid 20382] [client 20.203.184.156:31698] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acLjqOb25OL4yTv2fF_JtwAAAQk"]
[Wed Mar 25 03:19:05.530249 2026] [:error] [pid 57702:tid 57913] [client 20.203.184.156:8822] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acLjqaS8TU_xcQFvlnYqjgAAAAo"]
[Wed Mar 25 03:19:06.298078 2026] [:error] [pid 20371:tid 20375] [client 20.203.184.156:7484] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acLjqub25OL4yTv2fF_JvAAAAQI"]
[Wed Mar 25 03:19:07.413562 2026] [:error] [pid 57703:tid 58034] [client 20.203.184.156:15364] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "acLjq_IVQxDtjkklWGZyygAAAE8"]
[Wed Mar 25 03:19:08.567986 2026] [:error] [pid 57711:tid 58069] [client 20.203.184.156:46377] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "acLjrKLdPFdeRRktTdN5hQAAAI8"]
[Wed Mar 25 03:19:09.439034 2026] [:error] [pid 20371:tid 20380] [client 20.203.184.156:37860] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "acLjreb25OL4yTv2fF_JvgAAAQc"]
[Wed Mar 25 03:19:10.252374 2026] [:error] [pid 58154:tid 58160] [client 20.203.184.156:38297] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "acLjrg0pGUh6bwD3ouLFwQAAAMM"]
[Wed Mar 25 03:19:10.961872 2026] [:error] [pid 57702:tid 57926] [client 20.203.184.156:57063] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acLjrqS8TU_xcQFvlnYqlAAAABc"]
[Wed Mar 25 03:19:12.238128 2026] [:error] [pid 58154:tid 58177] [client 20.203.184.156:11604] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acLjsA0pGUh6bwD3ouLFxAAAANQ"]
[Wed Mar 25 03:19:12.782537 2026] [:error] [pid 57711:tid 58080] [client 20.203.184.156:36020] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acLjsKLdPFdeRRktTdN5iAAAAJg"]
[Wed Mar 25 03:19:13.672603 2026] [:error] [pid 20371:tid 20385] [client 20.203.184.156:46374] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acLjseb25OL4yTv2fF_JwgAAAQw"]
[Wed Mar 25 03:19:15.236452 2026] [:error] [pid 20371:tid 20374] [client 20.203.184.156:13518] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "acLjs-b25OL4yTv2fF_JxgAAAQE"]
[Wed Mar 25 03:19:16.016391 2026] [:error] [pid 58154:tid 58170] [client 20.203.184.156:24946] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "acLjtA0pGUh6bwD3ouLFyQAAAM0"]
[Wed Mar 25 03:19:16.897454 2026] [:error] [pid 57702:tid 57925] [client 20.203.184.156:52517] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "acLjtKS8TU_xcQFvlnYqmAAAABY"]
[Wed Mar 25 03:19:17.663085 2026] [:error] [pid 20371:tid 20394] [client 20.203.184.156:7187] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "acLjteb25OL4yTv2fF_JzQAAARU"]
[Wed Mar 25 03:19:18.605036 2026] [:error] [pid 20371:tid 20396] [client 20.203.184.156:42680] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acLjtub25OL4yTv2fF_J0QAAARc"]
[Wed Mar 25 03:19:19.757041 2026] [:error] [pid 57702:tid 57910] [client 20.203.184.156:32672] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acLjt6S8TU_xcQFvlnYqnQAAAAc"]
[Wed Mar 25 03:19:20.889902 2026] [:error] [pid 57702:tid 57914] [client 20.203.184.156:13121] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acLjuKS8TU_xcQFvlnYqnwAAAAs"]
[Wed Mar 25 03:19:21.675981 2026] [:error] [pid 57703:tid 58041] [client 20.203.184.156:7203] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acLjufIVQxDtjkklWGZy0QAAAFY"]
[Wed Mar 25 03:19:22.516056 2026] [:error] [pid 20371:tid 20385] [client 20.203.184.156:13112] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acLjuub25OL4yTv2fF_J3AAAAQw"]
[Wed Mar 25 03:19:23.065289 2026] [:error] [pid 57711:tid 58070] [client 20.203.184.156:5111] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acLju6LdPFdeRRktTdN5jwAAAJA"]
[Wed Mar 25 03:19:24.009881 2026] [:error] [pid 57702:tid 57917] [client 20.203.184.156:35981] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acLjvKS8TU_xcQFvlnYqpAAAAA4"]
[Wed Mar 25 03:19:24.925921 2026] [:error] [pid 57702:tid 57909] [client 20.203.184.156:13512] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acLjvKS8TU_xcQFvlnYqpwAAAAY"]
[Wed Mar 25 03:19:26.237574 2026] [:error] [pid 58154:tid 58161] [client 20.203.184.156:24904] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "acLjvg0pGUh6bwD3ouLF0gAAAMQ"]
[Wed Mar 25 03:19:26.869903 2026] [:error] [pid 58154:tid 58157] [client 20.203.184.156:29635] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "acLjvg0pGUh6bwD3ouLF1AAAAMA"]
[Wed Mar 25 03:19:28.626525 2026] [:error] [pid 58154:tid 58167] [client 20.203.184.156:13060] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "acLjwA0pGUh6bwD3ouLF2QAAAMo"]
[Wed Mar 25 03:20:14.512947 2026] [:error] [pid 57711:tid 58051] [client 20.203.184.156:13150] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "acLj7qLdPFdeRRktTdN5twAAAIE"]
[Wed Mar 25 03:20:15.743336 2026] [:error] [pid 20371:tid 20376] [client 20.203.184.156:23068] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "acLj7-b25OL4yTv2fF_KQQAAAQM"]
[Wed Mar 25 03:20:18.016697 2026] [:error] [pid 57702:tid 57909] [client 20.203.184.156:31233] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "acLj8qS8TU_xcQFvlnYq7gAAAAY"]
[Wed Mar 25 03:20:19.284450 2026] [:error] [pid 57703:tid 58028] [client 20.203.184.156:7831] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "acLj8_IVQxDtjkklWGZy5gAAAEk"]
[Wed Mar 25 03:20:20.384442 2026] [:error] [pid 20371:tid 20394] [client 20.203.184.156:13843] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "acLj9Ob25OL4yTv2fF_KSQAAARU"]
[Wed Mar 25 03:20:21.224306 2026] [:error] [pid 58154:tid 58169] [client 20.203.184.156:7848] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "acLj9Q0pGUh6bwD3ouLF_wAAAMw"]
[Wed Mar 25 03:20:22.386660 2026] [:error] [pid 20371:tid 20382] [client 20.203.184.156:7839] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "acLj9ub25OL4yTv2fF_KTgAAAQk"]
[Wed Mar 25 03:20:23.823808 2026] [:error] [pid 58154:tid 58179] [client 20.203.184.156:31258] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "acLj9w0pGUh6bwD3ouLGAQAAANY"]
[Wed Mar 25 03:20:25.061788 2026] [:error] [pid 57711:tid 58058] [client 20.203.184.156:28800] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "acLj-aLdPFdeRRktTdN5zAAAAIY"]
[Wed Mar 25 03:20:26.108188 2026] [:error] [pid 57702:tid 57924] [client 20.203.184.156:50209] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "acLj-qS8TU_xcQFvlnYq7wAAABU"]
[Wed Mar 25 03:20:27.501246 2026] [:error] [pid 20371:tid 20384] [client 20.203.184.156:50193] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "acLj--b25OL4yTv2fF_KXQAAAQs"]
[Wed Mar 25 03:20:28.703121 2026] [:error] [pid 20371:tid 20397] [client 20.203.184.156:50213] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "acLj_Ob25OL4yTv2fF_KYQAAARg"]
[Wed Mar 25 03:20:29.318338 2026] [:error] [pid 20371:tid 20391] [client 20.203.184.156:50955] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acLj_eb25OL4yTv2fF_KYgAAARI"]
[Wed Mar 25 03:20:30.220515 2026] [:error] [pid 20371:tid 20387] [client 20.203.184.156:10982] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acLj_ub25OL4yTv2fF_KZgAAAQ4"]
[Wed Mar 25 03:20:30.757398 2026] [:error] [pid 57711:tid 58075] [client 20.203.184.156:39221] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acLj_qLdPFdeRRktTdN51AAAAJU"]
[Wed Mar 25 03:20:31.549614 2026] [:error] [pid 58154:tid 58162] [client 20.203.184.156:4631] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acLj_w0pGUh6bwD3ouLGCAAAAMU"]
[Wed Mar 25 03:20:32.662935 2026] [:error] [pid 58154:tid 58179] [client 20.203.184.156:11006] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "acLkAA0pGUh6bwD3ouLGCgAAANY"]
[Wed Mar 25 03:20:33.396276 2026] [:error] [pid 58154:tid 58171] [client 20.203.184.156:48596] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "acLkAQ0pGUh6bwD3ouLGDQAAAM4"]
[Wed Mar 25 03:20:34.682277 2026] [:error] [pid 20371:tid 20396] [client 20.203.184.156:4658] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "acLkAub25OL4yTv2fF_KbAAAARc"]
[Wed Mar 25 03:20:35.974363 2026] [:error] [pid 57703:tid 58043] [client 20.203.184.156:7854] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "acLkA_IVQxDtjkklWGZy_QAAAFg"]
[Wed Mar 25 03:20:36.683402 2026] [:error] [pid 20371:tid 20381] [client 20.203.184.156:26396] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acLkBOb25OL4yTv2fF_KcAAAAQg"]
[Wed Mar 25 03:20:37.627660 2026] [:error] [pid 57703:tid 58020] [client 20.203.184.156:48582] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acLkBfIVQxDtjkklWGZzAgAAAEE"]
[Wed Mar 25 03:20:38.339541 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:7810] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acLkBub25OL4yTv2fF_KdQAAARY"]
[Wed Mar 25 03:20:39.025194 2026] [:error] [pid 20371:tid 20385] [client 20.203.184.156:14268] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acLkB-b25OL4yTv2fF_KeQAAAQw"]
[Wed Mar 25 03:20:39.963281 2026] [:error] [pid 57702:tid 57921] [client 20.203.184.156:10996] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acLkB6S8TU_xcQFvlnYq8gAAABI"]
[Wed Mar 25 03:20:40.838419 2026] [:error] [pid 58154:tid 58174] [client 20.203.184.156:7865] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acLkCA0pGUh6bwD3ouLGEQAAANE"]
[Wed Mar 25 03:20:41.578865 2026] [:error] [pid 20371:tid 20375] [client 20.203.184.156:4611] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acLkCeb25OL4yTv2fF_KhAAAAQI"]
[Wed Mar 25 03:20:42.287401 2026] [:error] [pid 20371:tid 20390] [client 20.203.184.156:27674] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acLkCub25OL4yTv2fF_KhwAAARE"]
[Wed Mar 25 03:20:43.188392 2026] [:error] [pid 57702:tid 57920] [client 20.203.184.156:4664] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acLkC6S8TU_xcQFvlnYq9wAAABE"]
[Wed Mar 25 03:20:43.993054 2026] [:error] [pid 57703:tid 58039] [client 20.203.184.156:4733] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acLkC_IVQxDtjkklWGZzCAAAAFQ"]
[Wed Mar 25 03:20:44.812863 2026] [:error] [pid 20371:tid 20380] [client 20.203.184.156:14597] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acLkDOb25OL4yTv2fF_KjAAAAQc"]
[Wed Mar 25 03:20:45.673764 2026] [:error] [pid 58154:tid 58157] [client 20.203.184.156:18108] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acLkDQ0pGUh6bwD3ouLGGwAAAMA"]
[Wed Mar 25 03:20:46.420550 2026] [:error] [pid 20371:tid 20374] [client 20.203.184.156:48631] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "acLkDub25OL4yTv2fF_KjwAAAQE"]
[Wed Mar 25 03:20:47.115018 2026] [:error] [pid 20371:tid 20381] [client 20.203.184.156:27652] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "acLkD-b25OL4yTv2fF_KkgAAAQg"]
[Wed Mar 25 03:20:48.136030 2026] [:error] [pid 58154:tid 58175] [client 20.203.184.156:7337] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "acLkEA0pGUh6bwD3ouLGHgAAANI"]
[Wed Mar 25 03:20:49.102862 2026] [:error] [pid 57702:tid 57907] [client 20.203.184.156:4841] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "acLkEaS8TU_xcQFvlnYq-gAAAAQ"]
[Wed Mar 25 03:20:49.810614 2026] [:error] [pid 57702:tid 57908] [client 20.203.184.156:48624] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acLkEaS8TU_xcQFvlnYq_AAAAAU"]
[Wed Mar 25 03:20:50.531088 2026] [:error] [pid 57703:tid 58021] [client 20.203.184.156:7354] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acLkEvIVQxDtjkklWGZzEAAAAEI"]
[Wed Mar 25 03:20:51.242378 2026] [:error] [pid 57702:tid 57912] [client 20.203.184.156:18082] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acLkE6S8TU_xcQFvlnYq_wAAAAk"]
[Wed Mar 25 03:20:52.051721 2026] [:error] [pid 58154:tid 58170] [client 20.203.184.156:7270] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acLkFA0pGUh6bwD3ouLGKAAAAM0"]
[Wed Mar 25 03:20:52.893205 2026] [:error] [pid 20371:tid 20390] [client 20.203.184.156:7247] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acLkFOb25OL4yTv2fF_KnwAAARE"]
[Wed Mar 25 03:20:53.499028 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:27672] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acLkFeb25OL4yTv2fF_KoQAAARY"]
[Wed Mar 25 03:20:54.048981 2026] [:error] [pid 58154:tid 58165] [client 20.203.184.156:50714] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acLkFg0pGUh6bwD3ouLGLwAAAMg"]
[Wed Mar 25 03:20:54.683050 2026] [:error] [pid 57703:tid 58028] [client 20.203.184.156:26414] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acLkFvIVQxDtjkklWGZzGAAAAEk"]
[Wed Mar 25 03:20:55.385058 2026] [:error] [pid 20371:tid 20374] [client 20.203.184.156:14231] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "acLkF-b25OL4yTv2fF_KowAAAQE"]
[Wed Mar 25 03:20:55.976834 2026] [:error] [pid 20371:tid 20397] [client 20.203.184.156:50935] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "acLkF-b25OL4yTv2fF_KpQAAARg"]
[Wed Mar 25 03:20:56.731563 2026] [:error] [pid 20371:tid 20386] [client 20.203.184.156:4834] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "acLkGOb25OL4yTv2fF_KqQAAAQ0"]
[Wed Mar 25 03:20:59.185154 2026] [:error] [pid 57703:tid 58036] [client 20.203.184.156:50927] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "acLkG_IVQxDtjkklWGZzIAAAAFE"]
[Wed Mar 25 03:20:59.963523 2026] [:error] [pid 58154:tid 58174] [client 20.203.184.156:27684] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "acLkGw0pGUh6bwD3ouLGNwAAANE"]
[Wed Mar 25 03:21:00.885652 2026] [:error] [pid 57702:tid 57923] [client 20.203.184.156:10098] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "acLkHKS8TU_xcQFvlnYrCQAAABQ"]
[Wed Mar 25 03:21:01.567930 2026] [:error] [pid 57703:tid 58043] [client 20.203.184.156:4569] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "acLkHfIVQxDtjkklWGZzIgAAAFg"]
[Wed Mar 25 03:21:02.116484 2026] [:error] [pid 57702:tid 57917] [client 20.203.184.156:26424] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "acLkHqS8TU_xcQFvlnYrCgAAAA4"]
[Wed Mar 25 03:21:02.682994 2026] [:error] [pid 57702:tid 57921] [client 20.203.184.156:10779] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acLkHqS8TU_xcQFvlnYrDAAAABI"]
[Wed Mar 25 03:21:03.398001 2026] [:error] [pid 57702:tid 57911] [client 20.203.184.156:23737] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acLkH6S8TU_xcQFvlnYrDwAAAAg"]
[Wed Mar 25 03:21:04.059336 2026] [:error] [pid 57711:tid 58064] [client 20.203.184.156:9987] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acLkIKLdPFdeRRktTdN6AQAAAIs"]
[Wed Mar 25 03:21:04.652992 2026] [:error] [pid 58154:tid 58160] [client 20.203.184.156:10111] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acLkIA0pGUh6bwD3ouLGPwAAAMM"]
[Wed Mar 25 03:21:05.237496 2026] [:error] [pid 58154:tid 58162] [client 20.203.184.156:25694] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "acLkIQ0pGUh6bwD3ouLGQwAAAMU"]
[Wed Mar 25 03:21:05.927917 2026] [:error] [pid 57702:tid 57904] [client 20.203.184.156:21155] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "acLkIaS8TU_xcQFvlnYrFAAAAAE"]
[Wed Mar 25 03:21:06.611392 2026] [:error] [pid 20371:tid 20392] [client 20.203.184.156:50919] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "acLkIub25OL4yTv2fF_KvQAAARM"]
[Wed Mar 25 03:21:07.909467 2026] [:error] [pid 57702:tid 57927] [client 20.203.184.156:56668] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "acLkI6S8TU_xcQFvlnYrGQAAABg"]
[Wed Mar 25 03:21:08.847726 2026] [:error] [pid 20371:tid 20392] [client 20.203.184.156:4587] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acLkJOb25OL4yTv2fF_KygAAARM"]
[Wed Mar 25 03:21:09.748591 2026] [:error] [pid 20371:tid 20387] [client 20.203.184.156:7322] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acLkJeb25OL4yTv2fF_KzQAAAQ4"]
[Wed Mar 25 03:21:11.085657 2026] [:error] [pid 20371:tid 20385] [client 20.203.184.156:16577] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acLkJ-b25OL4yTv2fF_K0gAAAQw"]
[Wed Mar 25 03:21:11.920075 2026] [:error] [pid 57703:tid 58035] [client 20.203.184.156:56702] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acLkJ_IVQxDtjkklWGZzJAAAAFA"]
[Wed Mar 25 03:22:03.375695 2026] [:error] [pid 57703:tid 58032] [client 20.203.184.156:17282] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clss.php"] [unique_id "acLkW_IVQxDtjkklWGZzUAAAAE0"]
[Wed Mar 25 03:22:05.206865 2026] [:error] [pid 20371:tid 20383] [client 20.203.184.156:16205] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clss.php"] [unique_id "acLkXeb25OL4yTv2fF_LaQAAAQo"]
[Wed Mar 25 03:22:06.630331 2026] [:error] [pid 20371:tid 20387] [client 20.203.184.156:7314] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clss.php"] [unique_id "acLkXub25OL4yTv2fF_LdgAAAQ4"]
[Wed Mar 25 03:22:07.845069 2026] [:error] [pid 20371:tid 20382] [client 20.203.184.156:16197] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clss.php"] [unique_id "acLkX-b25OL4yTv2fF_LgAAAAQk"]
[Wed Mar 25 03:22:08.962071 2026] [:error] [pid 57703:tid 58024] [client 20.203.184.156:23688] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "acLkYPIVQxDtjkklWGZzWgAAAEU"]
[Wed Mar 25 03:22:09.843532 2026] [:error] [pid 57702:tid 57910] [client 20.203.184.156:17284] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "acLkYaS8TU_xcQFvlnYrkQAAAAc"]
[Wed Mar 25 03:22:10.564794 2026] [:error] [pid 58154:tid 58177] [client 20.203.184.156:36299] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "acLkYg0pGUh6bwD3ouLGsQAAANQ"]
[Wed Mar 25 03:22:11.178336 2026] [:error] [pid 58154:tid 58179] [client 20.203.184.156:10016] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acLkYw0pGUh6bwD3ouLGtgAAANY"]
[Wed Mar 25 03:22:12.316794 2026] [:error] [pid 57702:tid 57926] [client 20.203.184.156:4451] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acLkZKS8TU_xcQFvlnYrmAAAABc"]
[Wed Mar 25 03:22:14.156832 2026] [:error] [pid 20371:tid 20380] [client 20.203.184.156:8055] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acLkZub25OL4yTv2fF_LjAAAAQc"]
[Wed Mar 25 03:22:15.471378 2026] [:error] [pid 20371:tid 20383] [client 20.203.184.156:16586] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acLkZ-b25OL4yTv2fF_LlAAAAQo"]
[Wed Mar 25 03:22:16.789577 2026] [:error] [pid 58154:tid 58161] [client 20.203.184.156:7521] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bo.php"] [unique_id "acLkaA0pGUh6bwD3ouLGxQAAAMQ"]
[Wed Mar 25 03:22:18.916727 2026] [:error] [pid 57702:tid 57925] [client 20.203.184.156:4169] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bo.php"] [unique_id "acLkaqS8TU_xcQFvlnYrpQAAABY"]
[Wed Mar 25 03:22:20.477025 2026] [:error] [pid 20371:tid 20382] [client 20.203.184.156:25696] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bo.php"] [unique_id "acLkbOb25OL4yTv2fF_LpAAAAQk"]
[Wed Mar 25 03:22:23.396808 2026] [:error] [pid 57703:tid 58034] [client 20.203.184.156:8027] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bo.php"] [unique_id "acLkb_IVQxDtjkklWGZzZwAAAE8"]
[Wed Mar 25 03:22:24.095906 2026] [:error] [pid 20371:tid 20395] [client 20.203.184.156:40936] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "acLkcOb25OL4yTv2fF_LtwAAARY"]
[Wed Mar 25 03:22:25.496571 2026] [:error] [pid 57711:tid 58056] [client 20.203.184.156:17297] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "acLkcaLdPFdeRRktTdN6jwAAAIU"]
[Wed Mar 25 03:22:26.467718 2026] [:error] [pid 20371:tid 20388] [client 20.203.184.156:31326] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "acLkcub25OL4yTv2fF_LxgAAAQ8"]
[Wed Mar 25 03:22:27.491369 2026] [:error] [pid 58154:tid 58171] [client 20.203.184.156:56679] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "acLkcw0pGUh6bwD3ouLGzQAAAM4"]
[Wed Mar 25 03:22:28.756406 2026] [:error] [pid 57711:tid 58055] [client 20.203.184.156:40935] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acLkdKLdPFdeRRktTdN6lAAAAIQ"]
[Wed Mar 25 03:22:30.044995 2026] [:error] [pid 20371:tid 20378] [client 20.203.184.156:36753] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acLkdub25OL4yTv2fF_L3QAAAQU"]
[Wed Mar 25 03:22:32.013549 2026] [:error] [pid 57703:tid 58019] [client 20.203.184.156:50123] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acLkePIVQxDtjkklWGZzcQAAAEA"]
[Wed Mar 25 03:22:32.797493 2026] [:error] [pid 57702:tid 57913] [client 20.203.184.156:27384] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acLkeKS8TU_xcQFvlnYrxgAAAAo"]
[Wed Mar 25 03:22:33.662633 2026] [:error] [pid 57702:tid 57907] [client 20.203.184.156:11920] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "acLkeaS8TU_xcQFvlnYrygAAAAQ"]
[Wed Mar 25 03:22:34.746322 2026] [:error] [pid 57702:tid 57910] [client 20.203.184.156:7807] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "acLkeqS8TU_xcQFvlnYrzwAAAAc"]
[Wed Mar 25 03:22:35.469473 2026] [:error] [pid 57711:tid 58059] [client 20.203.184.156:46617] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "acLke6LdPFdeRRktTdN6pQAAAIc"]
[Wed Mar 25 03:22:36.862928 2026] [:error] [pid 20371:tid 20384] [client 20.203.184.156:10458] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "acLkfOb25OL4yTv2fF_L8QAAAQs"]
[Wed Mar 25 03:22:37.936023 2026] [:error] [pid 57702:tid 57922] [client 20.203.184.156:29304] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acLkfaS8TU_xcQFvlnYr2QAAABM"]
[Wed Mar 25 03:22:39.413930 2026] [:error] [pid 57703:tid 58019] [client 20.203.184.156:46649] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acLkf_IVQxDtjkklWGZzfwAAAEA"]
[Wed Mar 25 03:22:40.197854 2026] [:error] [pid 57711:tid 58064] [client 20.203.184.156:28062] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acLkgKLdPFdeRRktTdN6sgAAAIs"]
[Wed Mar 25 03:22:41.198446 2026] [:error] [pid 57703:tid 58023] [client 20.203.184.156:44611] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acLkgfIVQxDtjkklWGZzhAAAAEQ"]
[Wed Mar 25 03:22:42.712075 2026] [:error] [pid 57703:tid 58037] [client 20.203.184.156:41384] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acLkgvIVQxDtjkklWGZziwAAAFI"]
[Wed Mar 25 03:22:43.946157 2026] [:error] [pid 20371:tid 20389] [client 20.203.184.156:11959] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acLkg-b25OL4yTv2fF_MGQAAARA"]
[Wed Mar 25 03:22:46.807581 2026] [:error] [pid 57702:tid 57917] [client 20.203.184.156:7928] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acLkhqS8TU_xcQFvlnYr9gAAAA4"]
[Wed Mar 25 03:22:47.749716 2026] [:error] [pid 58154:tid 58157] [client 20.203.184.156:8283] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acLkhw0pGUh6bwD3ouLG2AAAAMA"]
[Wed Mar 25 03:22:48.552633 2026] [:error] [pid 57711:tid 58069] [client 20.203.184.156:29603] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acLkiKLdPFdeRRktTdN6yAAAAI8"]
[Wed Mar 25 03:22:49.511619 2026] [:error] [pid 57711:tid 58077] [client 20.203.184.156:26105] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acLkiaLdPFdeRRktTdN6zAAAAJc"]
[Wed Mar 25 03:22:50.465122 2026] [:error] [pid 58154:tid 58178] [client 20.203.184.156:24095] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acLkig0pGUh6bwD3ouLG4wAAANU"]
[Wed Mar 25 03:22:51.514029 2026] [:error] [pid 58154:tid 58161] [client 20.203.184.156:7379] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acLkiw0pGUh6bwD3ouLG6QAAAMQ"]
[Wed Mar 25 03:22:52.781663 2026] [:error] [pid 58154:tid 58162] [client 20.203.184.156:13442] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "acLkjA0pGUh6bwD3ouLG7AAAAMU"]
[Wed Mar 25 03:22:53.399019 2026] [:error] [pid 58154:tid 58166] [client 20.203.184.156:13494] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "acLkjQ0pGUh6bwD3ouLG7wAAAMk"]
[Wed Mar 25 03:22:54.639691 2026] [:error] [pid 20371:tid 20394] [client 20.203.184.156:7925] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "acLkjub25OL4yTv2fF_MQwAAARU"]
[Wed Mar 25 03:22:56.141769 2026] [:error] [pid 57702:tid 57903] [client 20.203.184.156:9290] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "acLkkKS8TU_xcQFvlnYsAwAAAAA"]
[Wed Mar 25 03:22:56.862775 2026] [:error] [pid 58154:tid 58162] [client 20.203.184.156:24094] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acLkkA0pGUh6bwD3ouLG-wAAAMU"]
[Wed Mar 25 03:22:57.528039 2026] [:error] [pid 20371:tid 20386] [client 20.203.184.156:18847] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acLkkeb25OL4yTv2fF_MTwAAAQ0"]
[Wed Mar 25 03:22:58.282446 2026] [:error] [pid 57711:tid 58077] [client 20.203.184.156:8282] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acLkkqLdPFdeRRktTdN62wAAAJc"]
[Wed Mar 25 03:54:33.116277 2026] [autoindex:error] [pid 756:tid 850] [client 20.17.160.49:49387] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 25 05:12:44.920198 2026] [:error] [pid 47989:tid 48006] [client 20.203.184.156:65253] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "acL-TCWKdJMhIccROjlSZwAAAU8"]
[Wed Mar 25 05:12:45.707692 2026] [:error] [pid 47989:tid 48005] [client 20.203.184.156:65316] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "acL-TSWKdJMhIccROjlSbgAAAU4"]
[Wed Mar 25 05:12:47.250768 2026] [:error] [pid 755:tid 818] [client 20.203.184.156:65526] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "acL-T6S6bdaeEwgCGwou-AAAAEU"]
[Wed Mar 25 05:12:48.388218 2026] [:error] [pid 47989:tid 48006] [client 20.203.184.156:65049] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "acL-UCWKdJMhIccROjlSdAAAAU8"]
[Wed Mar 25 05:12:49.888192 2026] [:error] [pid 47946:tid 47954] [client 20.203.184.156:65003] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xfun.php"] [unique_id "acL-UTipQTqBMSeKYhffPwAAAQY"]
[Wed Mar 25 05:12:51.102525 2026] [:error] [pid 47989:tid 48015] [client 20.203.184.156:65268] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xfun.php"] [unique_id "acL-UyWKdJMhIccROjlSfAAAAVg"]
[Wed Mar 25 05:12:52.664689 2026] [:error] [pid 47989:tid 47993] [client 20.203.184.156:65011] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xfun.php"] [unique_id "acL-VCWKdJMhIccROjlShAAAAUI"]
[Wed Mar 25 05:12:53.570083 2026] [:error] [pid 47989:tid 48008] [client 20.203.184.156:64777] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xfun.php"] [unique_id "acL-VSWKdJMhIccROjlSiQAAAVE"]
[Wed Mar 25 05:12:54.340052 2026] [:error] [pid 47989:tid 48007] [client 20.203.184.156:65269] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "acL-ViWKdJMhIccROjlSjQAAAVA"]
[Wed Mar 25 05:12:55.390139 2026] [:error] [pid 756:tid 865] [client 20.203.184.156:65297] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "acL-VzOaW6oylMIDBCRzvwAAAI0"]
[Wed Mar 25 05:12:56.736409 2026] [:error] [pid 754:tid 787] [client 20.203.184.156:64972] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "acL-WDisL3asPbA3CtiznQAAABY"]
[Wed Mar 25 05:12:58.200050 2026] [:error] [pid 754:tid 780] [client 20.203.184.156:65000] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "acL-WjisL3asPbA3CtiznwAAAA8"]
[Wed Mar 25 05:12:59.754508 2026] [:error] [pid 756:tid 859] [client 20.203.184.156:65054] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "acL-WzOaW6oylMIDBCRzygAAAIc"]
[Wed Mar 25 05:13:03.520194 2026] [:error] [pid 47946:tid 47972] [client 20.203.184.156:65077] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "acL-XzipQTqBMSeKYhffRgAAARg"]
[Wed Mar 25 05:13:07.538584 2026] [:error] [pid 47946:tid 47953] [client 20.203.184.156:64961] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "acL-YzipQTqBMSeKYhffUAAAAQU"]
[Wed Mar 25 05:13:11.815960 2026] [:error] [pid 892:tid 912] [client 20.203.184.156:64964] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "acL-ZyT_G8WMU3T3yxokrwAAAM4"]
[Wed Mar 25 05:13:13.202477 2026] [:error] [pid 754:tid 765] [client 20.203.184.156:65504] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws85.php"] [unique_id "acL-aTisL3asPbA3CtizpgAAAAA"]
[Wed Mar 25 05:13:15.020526 2026] [:error] [pid 47946:tid 47955] [client 20.203.184.156:65260] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws85.php"] [unique_id "acL-azipQTqBMSeKYhffWgAAAQc"]
[Wed Mar 25 05:14:00.541410 2026] [:error] [pid 892:tid 905] [client 20.203.184.156:65314] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acL-mCT_G8WMU3T3yxolHgAAAMc"]
[Wed Mar 25 05:14:02.591781 2026] [:error] [pid 47946:tid 47961] [client 20.203.184.156:65252] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acL-mjipQTqBMSeKYhffmwAAAQ0"]
[Wed Mar 25 05:14:04.148002 2026] [:error] [pid 756:tid 869] [client 20.203.184.156:65325] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acL-nDOaW6oylMIDBCR0MQAAAJE"]
[Wed Mar 25 05:14:05.364844 2026] [:error] [pid 754:tid 786] [client 20.203.184.156:65003] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acL-nTisL3asPbA3Ctiz_wAAABU"]
[Wed Mar 25 05:14:09.255644 2026] [:error] [pid 756:tid 853] [client 20.203.184.156:64776] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "acL-oTOaW6oylMIDBCR0NgAAAIM"]
[Wed Mar 25 05:14:10.648411 2026] [:error] [pid 754:tid 768] [client 20.203.184.156:65305] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "acL-ojisL3asPbA3Cti0AAAAAAM"]
[Wed Mar 25 05:14:14.101642 2026] [:error] [pid 892:tid 894] [client 20.203.184.156:64758] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "acL-piT_G8WMU3T3yxolLgAAAMA"]
[Wed Mar 25 05:14:15.195808 2026] [:error] [pid 756:tid 872] [client 20.203.184.156:65050] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "acL-pzOaW6oylMIDBCR0QAAAAJQ"]
[Wed Mar 25 05:14:16.728446 2026] [:error] [pid 892:tid 901] [client 20.203.184.156:65484] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "acL-qCT_G8WMU3T3yxolMAAAAMQ"]
[Wed Mar 25 05:14:17.720664 2026] [:error] [pid 754:tid 779] [client 20.203.184.156:65245] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "acL-qTisL3asPbA3Cti0CgAAAA4"]
[Wed Mar 25 05:14:18.556951 2026] [:error] [pid 756:tid 864] [client 20.203.184.156:65332] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "acL-qjOaW6oylMIDBCR0RgAAAIw"]
[Wed Mar 25 05:14:19.685572 2026] [:error] [pid 756:tid 871] [client 20.203.184.156:64960] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "acL-qzOaW6oylMIDBCR0SQAAAJM"]
[Wed Mar 25 05:14:21.551775 2026] [:error] [pid 755:tid 808] [client 20.203.184.156:65263] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "acL-raS6bdaeEwgCGwoveAAAAEM"]
[Wed Mar 25 05:14:22.482093 2026] [:error] [pid 892:tid 907] [client 20.203.184.156:65040] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "acL-riT_G8WMU3T3yxolNwAAAMk"]
[Wed Mar 25 05:14:23.894684 2026] [:error] [pid 892:tid 911] [client 20.203.184.156:65083] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "acL-ryT_G8WMU3T3yxolOQAAAM0"]
[Wed Mar 25 05:14:25.144409 2026] [:error] [pid 47989:tid 47999] [client 20.203.184.156:65026] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "acL-sSWKdJMhIccROjlTxwAAAUg"]
[Wed Mar 25 05:14:25.802086 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:65024] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "acL-sTipQTqBMSeKYhffzQAAARE"]
[Wed Mar 25 05:14:26.983308 2026] [:error] [pid 47989:tid 48005] [client 20.203.184.156:65219] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "acL-siWKdJMhIccROjlT0gAAAU4"]
[Wed Mar 25 05:14:29.397395 2026] [:error] [pid 47989:tid 48010] [client 20.203.184.156:65486] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "acL-tSWKdJMhIccROjlT1gAAAVM"]
[Wed Mar 25 05:14:30.130562 2026] [:error] [pid 47989:tid 48007] [client 20.203.184.156:65483] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "acL-tiWKdJMhIccROjlT2QAAAVA"]
[Wed Mar 25 05:14:31.104139 2026] [:error] [pid 756:tid 867] [client 20.203.184.156:65010] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "acL-tzOaW6oylMIDBCR0WQAAAI8"]
[Wed Mar 25 05:14:32.158806 2026] [:error] [pid 756:tid 856] [client 20.203.184.156:64770] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "acL-uDOaW6oylMIDBCR0XQAAAIQ"]
[Wed Mar 25 05:14:33.114999 2026] [:error] [pid 756:tid 850] [client 20.203.184.156:65005] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "acL-uTOaW6oylMIDBCR0YAAAAIA"]
[Wed Mar 25 05:14:35.736170 2026] [:error] [pid 47989:tid 48000] [client 20.203.184.156:64768] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "acL-uyWKdJMhIccROjlT7gAAAUk"]
[Wed Mar 25 05:14:36.648843 2026] [:error] [pid 754:tid 776] [client 20.203.184.156:65002] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acL-vDisL3asPbA3Cti0MAAAAAs"]
[Wed Mar 25 05:14:37.550891 2026] [:error] [pid 47989:tid 48003] [client 20.203.184.156:65047] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acL-vSWKdJMhIccROjlT8gAAAUw"]
[Wed Mar 25 05:14:38.863334 2026] [:error] [pid 47989:tid 47998] [client 20.203.184.156:65254] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acL-viWKdJMhIccROjlT9gAAAUc"]
[Wed Mar 25 05:14:39.555756 2026] [:error] [pid 47989:tid 48011] [client 20.203.184.156:65044] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acL-vyWKdJMhIccROjlT-QAAAVQ"]
[Wed Mar 25 05:14:41.276421 2026] [:error] [pid 755:tid 836] [client 20.203.184.156:65524] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "acL-waS6bdaeEwgCGwovjgAAAE0"]
[Wed Mar 25 05:14:42.367911 2026] [:error] [pid 754:tid 775] [client 20.203.184.156:64769] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "acL-wjisL3asPbA3Cti0NAAAAAo"]
[Wed Mar 25 05:14:43.377752 2026] [:error] [pid 754:tid 774] [client 20.203.184.156:65318] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "acL-wzisL3asPbA3Cti0NgAAAAk"]
[Wed Mar 25 05:14:44.132838 2026] [:error] [pid 755:tid 842] [client 20.203.184.156:65085] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "acL-xKS6bdaeEwgCGwovkwAAAFM"]
[Wed Mar 25 05:14:45.436565 2026] [:error] [pid 754:tid 784] [client 20.203.184.156:65472] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "acL-xTisL3asPbA3Cti0OwAAABM"]
[Wed Mar 25 05:14:47.201847 2026] [:error] [pid 755:tid 838] [client 20.203.184.156:65525] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "acL-x6S6bdaeEwgCGwovlAAAAE8"]
[Wed Mar 25 05:14:47.961091 2026] [:error] [pid 47989:tid 47994] [client 20.203.184.156:65247] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "acL-xyWKdJMhIccROjlUCwAAAUM"]
[Wed Mar 25 05:14:49.227867 2026] [:error] [pid 755:tid 845] [client 20.203.184.156:64740] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "acL-yaS6bdaeEwgCGwovmAAAAFY"]
[Wed Mar 25 05:14:50.525053 2026] [:error] [pid 755:tid 846] [client 20.203.184.156:64459] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "acL-yqS6bdaeEwgCGwovmwAAAFc"]
[Wed Mar 25 05:14:52.505808 2026] [:error] [pid 47946:tid 47952] [client 20.203.184.156:64496] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "acL-zDipQTqBMSeKYhff6gAAAQQ"]
[Wed Mar 25 05:14:54.221941 2026] [:error] [pid 754:tid 784] [client 20.203.184.156:65006] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "acL-zjisL3asPbA3Cti0RgAAABM"]
[Wed Mar 25 05:14:55.180544 2026] [:error] [pid 756:tid 853] [client 20.203.184.156:64970] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "acL-zzOaW6oylMIDBCR0fQAAAIM"]
[Wed Mar 25 05:14:56.127534 2026] [:error] [pid 47946:tid 47956] [client 20.203.184.156:65320] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "acL-0DipQTqBMSeKYhff9QAAAQg"]
[Wed Mar 25 05:14:57.801864 2026] [:error] [pid 756:tid 875] [client 20.203.184.156:64976] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "acL-0TOaW6oylMIDBCR0gAAAAJc"]
[Wed Mar 25 05:15:16.486644 2026] [:error] [pid 47946:tid 47962] [client 20.203.184.156:65479] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/vx.php"] [unique_id "acL-5DipQTqBMSeKYhfgBwAAAQ4"]
[Wed Mar 25 05:15:19.388411 2026] [:error] [pid 47989:tid 47999] [client 20.203.184.156:65016] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/vx.php"] [unique_id "acL-5yWKdJMhIccROjlU-gAAAUg"]
[Wed Mar 25 05:15:22.673637 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:64965] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/vx.php"] [unique_id "acL-6jipQTqBMSeKYhfgFAAAARE"]
[Wed Mar 25 05:15:25.962190 2026] [:error] [pid 754:tid 782] [client 20.203.184.156:65004] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/vx.php"] [unique_id "acL-7TisL3asPbA3Cti0VwAAABE"]
[Wed Mar 25 05:15:28.401979 2026] [:error] [pid 892:tid 907] [client 20.203.184.156:64965] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acL-8CT_G8WMU3T3yxolyQAAAMk"]
[Wed Mar 25 05:15:33.076703 2026] [:error] [pid 892:tid 919] [client 20.203.184.156:65325] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acL-9ST_G8WMU3T3yxol0gAAANQ"]
[Wed Mar 25 05:15:36.311735 2026] [:error] [pid 47989:tid 48011] [client 20.203.184.156:64778] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acL--CWKdJMhIccROjlVHwAAAVQ"]
[Wed Mar 25 05:15:37.105203 2026] [:error] [pid 47946:tid 47961] [client 20.203.184.156:65293] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acL--TipQTqBMSeKYhfgIAAAAQ0"]
[Wed Mar 25 05:15:38.252998 2026] [:error] [pid 47946:tid 47955] [client 20.203.184.156:64984] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acL--jipQTqBMSeKYhfgJQAAAQc"]
[Wed Mar 25 05:15:39.094785 2026] [:error] [pid 755:tid 808] [client 20.203.184.156:64486] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acL--6S6bdaeEwgCGwovsAAAAEM"]
[Wed Mar 25 05:15:39.779068 2026] [:error] [pid 756:tid 870] [client 20.203.184.156:64449] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acL--zOaW6oylMIDBCR0ywAAAJI"]
[Wed Mar 25 05:15:40.530688 2026] [:error] [pid 47946:tid 47968] [client 20.203.184.156:65487] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acL-_DipQTqBMSeKYhfgKgAAARQ"]
[Wed Mar 25 05:15:41.333005 2026] [:error] [pid 754:tid 786] [client 20.203.184.156:65224] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "acL-_TisL3asPbA3Cti0ZQAAABU"]
[Wed Mar 25 05:15:42.150713 2026] [:error] [pid 892:tid 918] [client 20.203.184.156:65015] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "acL-_iT_G8WMU3T3yxol4QAAANM"]
[Wed Mar 25 05:15:43.302564 2026] [:error] [pid 47946:tid 47969] [client 20.203.184.156:65079] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "acL-_zipQTqBMSeKYhfgLgAAARU"]
[Wed Mar 25 05:15:44.010023 2026] [:error] [pid 755:tid 807] [client 20.203.184.156:65335] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "acL_AKS6bdaeEwgCGwovswAAAEI"]
[Wed Mar 25 05:15:44.896032 2026] [:error] [pid 892:tid 910] [client 20.203.184.156:65527] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acL_ACT_G8WMU3T3yxol6QAAAMw"]
[Wed Mar 25 05:15:45.646223 2026] [:error] [pid 892:tid 899] [client 20.203.184.156:64977] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acL_AST_G8WMU3T3yxol6wAAAMM"]
[Wed Mar 25 05:15:46.381543 2026] [:error] [pid 892:tid 919] [client 20.203.184.156:65330] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acL_AiT_G8WMU3T3yxol8AAAANQ"]
[Wed Mar 25 05:15:47.339567 2026] [:error] [pid 755:tid 842] [client 20.203.184.156:65017] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acL_A6S6bdaeEwgCGwovtgAAAFM"]
[Wed Mar 25 05:15:48.154957 2026] [:error] [pid 755:tid 809] [client 20.203.184.156:65227] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acL_BKS6bdaeEwgCGwovtwAAAEQ"]
[Wed Mar 25 05:15:49.307347 2026] [:error] [pid 756:tid 875] [client 20.203.184.156:65065] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acL_BTOaW6oylMIDBCR01AAAAJc"]
[Wed Mar 25 05:15:50.006514 2026] [:error] [pid 755:tid 818] [client 20.203.184.156:65267] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acL_BqS6bdaeEwgCGwovvgAAAEU"]
[Wed Mar 25 05:15:52.713086 2026] [:error] [pid 47989:tid 48014] [client 20.203.184.156:65236] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acL_CCWKdJMhIccROjlVOAAAAVc"]
[Wed Mar 25 05:15:53.486767 2026] [:error] [pid 47989:tid 47997] [client 20.203.184.156:65043] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acL_CSWKdJMhIccROjlVQAAAAUY"]
[Wed Mar 25 05:15:54.479667 2026] [:error] [pid 47946:tid 47964] [client 20.203.184.156:64803] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acL_CjipQTqBMSeKYhfgNwAAARA"]
[Wed Mar 25 05:15:55.515321 2026] [:error] [pid 47989:tid 48007] [client 20.203.184.156:64783] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acL_CyWKdJMhIccROjlVRAAAAVA"]
[Wed Mar 25 05:15:56.233072 2026] [:error] [pid 755:tid 842] [client 20.203.184.156:64966] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acL_DKS6bdaeEwgCGwovwwAAAFM"]
[Wed Mar 25 05:15:57.036492 2026] [:error] [pid 755:tid 809] [client 20.203.184.156:65216] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sa.php7"] [unique_id "acL_DaS6bdaeEwgCGwovxAAAAEQ"]
[Wed Mar 25 05:15:57.874960 2026] [:error] [pid 47946:tid 47948] [client 20.203.184.156:64530] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sa.php7"] [unique_id "acL_DTipQTqBMSeKYhfgQQAAAQA"]
[Wed Mar 25 05:15:58.851687 2026] [:error] [pid 754:tid 780] [client 20.203.184.156:64766] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sa.php7"] [unique_id "acL_DjisL3asPbA3Cti0agAAAA8"]
[Wed Mar 25 05:15:59.728285 2026] [:error] [pid 755:tid 823] [client 20.203.184.156:64722] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sa.php7"] [unique_id "acL_D6S6bdaeEwgCGwovxgAAAEg"]
[Wed Mar 25 05:16:00.469938 2026] [:error] [pid 756:tid 860] [client 20.203.184.156:64988] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "acL_EDOaW6oylMIDBCR03AAAAIg"]
[Wed Mar 25 05:16:01.192655 2026] [:error] [pid 755:tid 822] [client 20.203.184.156:65243] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "acL_EaS6bdaeEwgCGwovyQAAAEc"]
[Wed Mar 25 05:16:02.430675 2026] [:error] [pid 47946:tid 47956] [client 20.203.184.156:64962] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "acL_EjipQTqBMSeKYhfgRAAAAQg"]
[Wed Mar 25 05:16:03.739086 2026] [:error] [pid 892:tid 920] [client 20.203.184.156:65304] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "acL_EyT_G8WMU3T3yxomAQAAANU"]
[Wed Mar 25 05:16:05.506951 2026] [:error] [pid 755:tid 847] [client 20.203.184.156:65314] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "acL_FaS6bdaeEwgCGwovzgAAAFg"]
[Wed Mar 25 05:16:07.157013 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:65070] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "acL_FzipQTqBMSeKYhfgSgAAARE"]
[Wed Mar 25 05:16:08.595465 2026] [:error] [pid 47946:tid 47956] [client 20.203.184.156:65084] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "acL_GDipQTqBMSeKYhfgUQAAAQg"]
[Wed Mar 25 05:16:11.156268 2026] [:error] [pid 47989:tid 47998] [client 20.203.184.156:64806] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "acL_GyWKdJMhIccROjlVYQAAAUc"]
[Wed Mar 25 05:16:27.716360 2026] [:error] [pid 47989:tid 48002] [client 20.203.184.156:65224] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "acL_KyWKdJMhIccROjlVhAAAAUs"]
[Wed Mar 25 05:16:29.070358 2026] [:error] [pid 47946:tid 47955] [client 20.203.184.156:65323] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "acL_LTipQTqBMSeKYhfggQAAAQc"]
[Wed Mar 25 05:16:31.059404 2026] [:error] [pid 47989:tid 47991] [client 20.203.184.156:65303] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "acL_LyWKdJMhIccROjlVlQAAAUA"]
[Wed Mar 25 05:16:32.518094 2026] [:error] [pid 47989:tid 47996] [client 20.203.184.156:65332] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "acL_MCWKdJMhIccROjlVoAAAAUU"]
[Wed Mar 25 05:16:34.365208 2026] [:error] [pid 47989:tid 48012] [client 20.203.184.156:65482] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "acL_MiWKdJMhIccROjlVqwAAAVU"]
[Wed Mar 25 05:16:36.145477 2026] [:error] [pid 47946:tid 47948] [client 20.203.184.156:65336] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "acL_NDipQTqBMSeKYhfgiAAAAQA"]
[Wed Mar 25 05:16:38.495717 2026] [:error] [pid 47946:tid 47954] [client 20.203.184.156:64741] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "acL_NjipQTqBMSeKYhfglAAAAQY"]
[Wed Mar 25 05:16:40.598660 2026] [:error] [pid 47946:tid 47966] [client 20.203.184.156:65004] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "acL_ODipQTqBMSeKYhfgnwAAARI"]
[Wed Mar 25 05:16:41.805817 2026] [:error] [pid 892:tid 895] [client 20.203.184.156:64709] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "acL_OST_G8WMU3T3yxomRwAAAME"]
[Wed Mar 25 05:16:42.772663 2026] [:error] [pid 756:tid 863] [client 20.203.184.156:65061] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "acL_OjOaW6oylMIDBCR0_gAAAIs"]
[Wed Mar 25 05:16:44.626869 2026] [:error] [pid 754:tid 773] [client 20.203.184.156:64457] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "acL_PDisL3asPbA3Cti0gAAAAAg"]
[Wed Mar 25 05:16:45.538905 2026] [:error] [pid 892:tid 902] [client 20.203.184.156:64479] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "acL_PST_G8WMU3T3yxomUAAAAMU"]
[Wed Mar 25 05:16:46.169009 2026] [:error] [pid 754:tid 765] [client 20.203.184.156:64979] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "acL_PjisL3asPbA3Cti0hAAAAAA"]
[Wed Mar 25 05:16:46.885844 2026] [:error] [pid 892:tid 895] [client 20.203.184.156:65078] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "acL_PiT_G8WMU3T3yxomVQAAAME"]
[Wed Mar 25 05:16:47.678072 2026] [:error] [pid 47946:tid 47955] [client 20.203.184.156:65295] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "acL_PzipQTqBMSeKYhfgpAAAAQc"]
[Wed Mar 25 05:16:49.302885 2026] [:error] [pid 47989:tid 48009] [client 20.203.184.156:65508] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "acL_QSWKdJMhIccROjlVwAAAAVI"]
[Wed Mar 25 05:16:51.336402 2026] [:error] [pid 755:tid 825] [client 20.203.184.156:65048] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sid3.php"] [unique_id "acL_Q6S6bdaeEwgCGwov-AAAAEo"]
[Wed Mar 25 05:16:52.461410 2026] [:error] [pid 47989:tid 48013] [client 20.203.184.156:65007] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sid3.php"] [unique_id "acL_RCWKdJMhIccROjlVywAAAVY"]
[Wed Mar 25 05:16:53.534942 2026] [:error] [pid 756:tid 865] [client 20.203.184.156:65302] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sid3.php"] [unique_id "acL_RTOaW6oylMIDBCR1DQAAAI0"]
[Wed Mar 25 05:16:55.057372 2026] [:error] [pid 892:tid 899] [client 20.203.184.156:65333] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sid3.php"] [unique_id "acL_RyT_G8WMU3T3yxomYQAAAMM"]
[Wed Mar 25 05:16:55.850429 2026] [:error] [pid 47946:tid 47964] [client 20.203.184.156:65270] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "acL_RzipQTqBMSeKYhfhEAAAARA"]
[Wed Mar 25 05:16:56.904369 2026] [:error] [pid 47989:tid 47996] [client 20.203.184.156:65021] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "acL_SCWKdJMhIccROjlV-gAAAUU"]
[Wed Mar 25 05:16:58.320449 2026] [:error] [pid 756:tid 873] [client 20.203.184.156:65018] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "acL_SjOaW6oylMIDBCR1EgAAAJU"]
[Wed Mar 25 05:16:59.607609 2026] [:error] [pid 47946:tid 47952] [client 20.203.184.156:65085] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/666.php"] [unique_id "acL_SzipQTqBMSeKYhfhLAAAAQQ"]
[Wed Mar 25 05:17:00.450847 2026] [:error] [pid 47946:tid 47956] [client 20.203.184.156:65235] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acL_TDipQTqBMSeKYhfhNAAAAQg"]
[Wed Mar 25 05:17:01.347571 2026] [:error] [pid 47989:tid 47995] [client 20.203.184.156:65319] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acL_TSWKdJMhIccROjlWAgAAAUQ"]
[Wed Mar 25 05:17:01.921933 2026] [:error] [pid 755:tid 818] [client 20.203.184.156:65063] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acL_TaS6bdaeEwgCGwowLgAAAEU"]
[Wed Mar 25 05:17:02.942500 2026] [:error] [pid 47989:tid 48008] [client 20.203.184.156:65250] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acL_TiWKdJMhIccROjlWCQAAAVE"]
[Wed Mar 25 05:17:03.674805 2026] [:error] [pid 755:tid 836] [client 20.203.184.156:65220] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "acL_T6S6bdaeEwgCGwowLwAAAE0"]
[Wed Mar 25 05:17:04.479584 2026] [:error] [pid 892:tid 901] [client 20.203.184.156:65496] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "acL_UCT_G8WMU3T3yxomfQAAAMQ"]
[Wed Mar 25 05:17:05.448028 2026] [:error] [pid 47989:tid 48015] [client 20.203.184.156:65294] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "acL_USWKdJMhIccROjlWEgAAAVg"]
[Wed Mar 25 05:17:06.288402 2026] [:error] [pid 47989:tid 47993] [client 20.203.184.156:64989] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "acL_UiWKdJMhIccROjlWGgAAAUI"]
[Wed Mar 25 05:17:10.597007 2026] [:error] [pid 756:tid 858] [client 20.203.184.156:65276] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "acL_VjOaW6oylMIDBCR1GAAAAIY"]
[Wed Mar 25 05:17:11.599320 2026] [:error] [pid 47989:tid 48003] [client 20.203.184.156:65243] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "acL_VyWKdJMhIccROjlWKQAAAUw"]
[Wed Mar 25 05:17:12.395323 2026] [:error] [pid 756:tid 875] [client 20.203.184.156:65271] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "acL_WDOaW6oylMIDBCR1GQAAAJc"]
[Wed Mar 25 05:17:13.103941 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:64992] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "acL_WTipQTqBMSeKYhfhVAAAARE"]
[Wed Mar 25 05:17:13.786846 2026] [:error] [pid 756:tid 850] [client 20.203.184.156:65513] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acL_WTOaW6oylMIDBCR1HgAAAIA"]
[Wed Mar 25 05:17:14.946944 2026] [:error] [pid 756:tid 867] [client 20.203.184.156:65053] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acL_WjOaW6oylMIDBCR1JAAAAI8"]
[Wed Mar 25 05:17:15.543074 2026] [:error] [pid 47989:tid 47992] [client 20.203.184.156:65228] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acL_WyWKdJMhIccROjlWMQAAAUE"]
[Wed Mar 25 05:17:16.814442 2026] [:error] [pid 47989:tid 48004] [client 20.203.184.156:65032] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acL_XCWKdJMhIccROjlWMwAAAU0"]
[Wed Mar 25 05:17:17.535655 2026] [:error] [pid 47989:tid 48013] [client 20.203.184.156:64560] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acL_XSWKdJMhIccROjlWNQAAAVY"]
[Wed Mar 25 05:17:18.838199 2026] [:error] [pid 47989:tid 48009] [client 20.203.184.156:64339] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acL_XiWKdJMhIccROjlWPAAAAVI"]
[Wed Mar 25 05:17:21.366545 2026] [:error] [pid 47946:tid 47950] [client 20.203.184.156:65066] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acL_YTipQTqBMSeKYhfhYwAAAQI"]
[Wed Mar 25 05:17:23.727735 2026] [:error] [pid 47989:tid 48012] [client 20.203.184.156:65311] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acL_YyWKdJMhIccROjlWWgAAAVU"]
[Wed Mar 25 05:17:42.086163 2026] [:error] [pid 755:tid 823] [client 20.203.184.156:65340] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acL_dqS6bdaeEwgCGwowRgAAAEg"]
[Wed Mar 25 05:17:43.203744 2026] [:error] [pid 47989:tid 47999] [client 20.203.184.156:65497] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acL_dyWKdJMhIccROjlWowAAAUg"]
[Wed Mar 25 05:17:44.926786 2026] [:error] [pid 755:tid 837] [client 20.203.184.156:64969] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acL_eKS6bdaeEwgCGwowSAAAAE4"]
[Wed Mar 25 05:17:47.020757 2026] [:error] [pid 754:tid 783] [client 20.203.184.156:65523] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acL_ezisL3asPbA3Cti0sgAAABI"]
[Wed Mar 25 05:17:48.043073 2026] [:error] [pid 754:tid 787] [client 20.203.184.156:65020] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acL_fDisL3asPbA3Cti0swAAABY"]
[Wed Mar 25 05:17:49.347545 2026] [:error] [pid 892:tid 894] [client 20.203.184.156:65514] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acL_fST_G8WMU3T3yxomyAAAAMA"]
[Wed Mar 25 05:17:50.379845 2026] [:error] [pid 47989:tid 47994] [client 20.203.184.156:64780] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acL_fiWKdJMhIccROjlWqgAAAUM"]
[Wed Mar 25 05:17:51.671774 2026] [:error] [pid 755:tid 842] [client 20.203.184.156:65299] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acL_f6S6bdaeEwgCGwowTgAAAFM"]
[Wed Mar 25 05:17:53.851578 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:65045] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "acL_gTipQTqBMSeKYhfhpgAAARE"]
[Wed Mar 25 05:18:26.375094 2026] [:error] [pid 47946:tid 47963] [client 20.203.184.156:65516] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "acL_ojipQTqBMSeKYhfh3QAAAQ8"]
[Wed Mar 25 05:18:28.231171 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:65014] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "acL_pDipQTqBMSeKYhfh5AAAARE"]
[Wed Mar 25 05:18:29.580181 2026] [:error] [pid 47946:tid 47963] [client 20.203.184.156:65286] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "acL_pTipQTqBMSeKYhfh6gAAAQ8"]
[Wed Mar 25 05:18:30.275029 2026] [:error] [pid 754:tid 778] [client 20.203.184.156:65218] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "acL_pjisL3asPbA3Cti01gAAAA0"]
[Wed Mar 25 05:18:32.051492 2026] [:error] [pid 47989:tid 48002] [client 20.203.184.156:65339] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acL_qCWKdJMhIccROjlXAQAAAUs"]
[Wed Mar 25 05:18:33.301802 2026] [:error] [pid 754:tid 787] [client 20.203.184.156:65306] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acL_qTisL3asPbA3Cti02QAAABY"]
[Wed Mar 25 05:18:34.183215 2026] [:error] [pid 892:tid 914] [client 20.203.184.156:65484] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acL_qiT_G8WMU3T3yxom4gAAANA"]
[Wed Mar 25 05:18:35.259647 2026] [:error] [pid 892:tid 910] [client 20.203.184.156:65049] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acL_qyT_G8WMU3T3yxom5gAAAMw"]
[Wed Mar 25 05:18:38.059496 2026] [:error] [pid 892:tid 922] [client 20.203.184.156:65016] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acL_riT_G8WMU3T3yxom8AAAANc"]
[Wed Mar 25 05:19:00.288006 2026] [:error] [pid 47946:tid 47954] [client 20.203.184.156:64999] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acL_xDipQTqBMSeKYhfiGQAAAQY"]
[Wed Mar 25 05:19:03.798179 2026] [:error] [pid 755:tid 841] [client 20.203.184.156:65008] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acL_x6S6bdaeEwgCGwowfQAAAFI"]
[Wed Mar 25 05:19:07.966362 2026] [:error] [pid 47989:tid 48005] [client 20.203.184.156:64775] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acL_yyWKdJMhIccROjlXXAAAAU4"]
[Wed Mar 25 05:19:09.367810 2026] [:error] [pid 47989:tid 47999] [client 20.203.184.156:64779] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acL_zSWKdJMhIccROjlXZAAAAUg"]
[Wed Mar 25 05:19:11.719348 2026] [:error] [pid 47946:tid 47953] [client 20.203.184.156:64770] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acL_zzipQTqBMSeKYhfiKgAAAQU"]
[Wed Mar 25 05:19:12.442102 2026] [:error] [pid 47989:tid 47998] [client 20.203.184.156:65042] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acL_0CWKdJMhIccROjlXawAAAUc"]
[Wed Mar 25 05:19:13.433986 2026] [:error] [pid 756:tid 852] [client 20.203.184.156:65322] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acL_0TOaW6oylMIDBCR11gAAAII"]
[Wed Mar 25 05:19:14.275565 2026] [:error] [pid 47946:tid 47960] [client 20.203.184.156:65317] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acL_0jipQTqBMSeKYhfiLgAAAQw"]
[Wed Mar 25 05:19:15.537981 2026] [:error] [pid 47989:tid 48011] [client 20.203.184.156:64377] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acL_0yWKdJMhIccROjlXcgAAAVQ"]
[Wed Mar 25 05:19:16.698461 2026] [:error] [pid 892:tid 915] [client 20.203.184.156:64740] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acL_1CT_G8WMU3T3yxonEgAAANE"]
[Wed Mar 25 05:19:18.277204 2026] [:error] [pid 755:tid 841] [client 20.203.184.156:65297] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "acL_1qS6bdaeEwgCGwowiwAAAFI"]
[Wed Mar 25 05:19:19.184534 2026] [:error] [pid 756:tid 876] [client 20.203.184.156:64790] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "acL_1zOaW6oylMIDBCR15gAAAJg"]
[Wed Mar 25 05:19:19.779859 2026] [:error] [pid 47946:tid 47956] [client 20.203.184.156:65221] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "acL_1zipQTqBMSeKYhfiRwAAAQg"]
[Wed Mar 25 05:19:20.725392 2026] [:error] [pid 755:tid 843] [client 20.203.184.156:65266] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "acL_2KS6bdaeEwgCGwowjgAAAFQ"]
[Wed Mar 25 05:19:21.843629 2026] [:error] [pid 47946:tid 47967] [client 20.203.184.156:64973] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "acL_2TipQTqBMSeKYhfiTQAAARM"]
[Wed Mar 25 05:19:22.479532 2026] [:error] [pid 47946:tid 47964] [client 20.203.184.156:65019] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "acL_2jipQTqBMSeKYhfiUAAAARA"]
[Wed Mar 25 05:19:23.366854 2026] [:error] [pid 47946:tid 47968] [client 20.203.184.156:65264] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "acL_2zipQTqBMSeKYhfiUgAAARQ"]
[Wed Mar 25 05:19:24.049522 2026] [:error] [pid 47989:tid 48013] [client 20.203.184.156:64769] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "acL_3CWKdJMhIccROjlXeQAAAVY"]
[Wed Mar 25 05:19:24.718547 2026] [:error] [pid 47946:tid 47958] [client 20.203.184.156:64567] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "acL_3DipQTqBMSeKYhfiWAAAAQo"]
[Wed Mar 25 05:19:25.584503 2026] [:error] [pid 47989:tid 48003] [client 20.203.184.156:64814] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "acL_3SWKdJMhIccROjlXegAAAUw"]
[Wed Mar 25 05:19:26.313794 2026] [:error] [pid 892:tid 917] [client 20.203.184.156:64721] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "acL_3iT_G8WMU3T3yxonIwAAANI"]
[Wed Mar 25 05:19:27.047699 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:65476] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "acL_3zipQTqBMSeKYhfiXgAAARE"]
[Wed Mar 25 05:19:27.792998 2026] [:error] [pid 47946:tid 47950] [client 20.203.184.156:65305] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acL_3zipQTqBMSeKYhfiYQAAAQI"]
[Wed Mar 25 05:19:28.419846 2026] [:error] [pid 47989:tid 48012] [client 20.203.184.156:65073] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acL_4CWKdJMhIccROjlXfQAAAVU"]
[Wed Mar 25 05:19:29.177722 2026] [:error] [pid 892:tid 904] [client 20.203.184.156:65240] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acL_4ST_G8WMU3T3yxonKAAAAMY"]
[Wed Mar 25 05:19:30.079613 2026] [:error] [pid 892:tid 923] [client 20.203.184.156:64526] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acL_4iT_G8WMU3T3yxonLAAAANg"]
[Wed Mar 25 05:19:30.641312 2026] [:error] [pid 892:tid 909] [client 20.203.184.156:65223] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acL_4iT_G8WMU3T3yxonLgAAAMs"]
[Wed Mar 25 05:19:31.676035 2026] [:error] [pid 47989:tid 47998] [client 20.203.184.156:65492] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acL_4yWKdJMhIccROjlXfwAAAUc"]
[Wed Mar 25 05:19:32.303595 2026] [:error] [pid 892:tid 917] [client 20.203.184.156:65244] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acL_5CT_G8WMU3T3yxonMwAAANI"]
[Wed Mar 25 05:19:32.970254 2026] [:error] [pid 892:tid 906] [client 20.203.184.156:65009] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acL_5CT_G8WMU3T3yxonNQAAAMg"]
[Wed Mar 25 05:19:33.720538 2026] [:error] [pid 892:tid 923] [client 20.203.184.156:64999] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "acL_5ST_G8WMU3T3yxonOwAAANg"]
[Wed Mar 25 05:19:34.376548 2026] [:error] [pid 892:tid 901] [client 20.203.184.156:64541] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "acL_5iT_G8WMU3T3yxonPQAAAMQ"]
[Wed Mar 25 05:19:35.057271 2026] [:error] [pid 755:tid 809] [client 20.203.184.156:65485] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "acL_56S6bdaeEwgCGwowlQAAAEQ"]
[Wed Mar 25 05:19:35.560775 2026] [:error] [pid 756:tid 874] [client 20.203.184.156:65259] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "acL_5zOaW6oylMIDBCR2AQAAAJY"]
[Wed Mar 25 05:19:36.504411 2026] [:error] [pid 892:tid 910] [client 20.203.184.156:65338] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acL_6CT_G8WMU3T3yxonRAAAAMw"]
[Wed Mar 25 05:19:37.549654 2026] [:error] [pid 755:tid 841] [client 20.203.184.156:64821] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acL_6aS6bdaeEwgCGwowmAAAAFI"]
[Wed Mar 25 05:19:39.923473 2026] [:error] [pid 756:tid 876] [client 20.203.184.156:64749] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acL_6zOaW6oylMIDBCR2BwAAAJg"]
[Wed Mar 25 05:19:42.010008 2026] [:error] [pid 47946:tid 47954] [client 20.203.184.156:64994] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acL_7jipQTqBMSeKYhficQAAAQY"]
[Wed Mar 25 05:19:44.993514 2026] [:error] [pid 755:tid 836] [client 20.203.184.156:64777] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acL_8KS6bdaeEwgCGwowpAAAAE0"]
[Wed Mar 25 05:19:47.497517 2026] [:error] [pid 756:tid 876] [client 20.203.184.156:64326] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acL_8zOaW6oylMIDBCR2GAAAAJg"]
[Wed Mar 25 05:19:48.396876 2026] [:error] [pid 47989:tid 48008] [client 20.203.184.156:64960] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acL_9CWKdJMhIccROjlXmwAAAVE"]
[Wed Mar 25 05:19:49.072978 2026] [:error] [pid 47989:tid 48009] [client 20.203.184.156:64733] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acL_9SWKdJMhIccROjlXowAAAVI"]
[Wed Mar 25 05:19:49.708341 2026] [:error] [pid 754:tid 772] [client 20.203.184.156:64970] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "acL_9TisL3asPbA3Cti1cQAAAAc"]
[Wed Mar 25 05:19:50.486478 2026] [:error] [pid 754:tid 787] [client 20.203.184.156:64449] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "acL_9jisL3asPbA3Cti1cwAAABY"]
[Wed Mar 25 05:19:51.045339 2026] [:error] [pid 892:tid 921] [client 20.203.184.156:65517] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "acL_9yT_G8WMU3T3yxonVAAAANY"]
[Wed Mar 25 05:19:51.824763 2026] [:error] [pid 756:tid 867] [client 20.203.184.156:65332] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "acL_9zOaW6oylMIDBCR2IgAAAI8"]
[Wed Mar 25 05:19:52.824558 2026] [:error] [pid 755:tid 842] [client 20.203.184.156:64983] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "acL_-KS6bdaeEwgCGwowqAAAAFM"]
[Wed Mar 25 05:19:53.591957 2026] [:error] [pid 47989:tid 48005] [client 20.203.184.156:65224] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "acL_-SWKdJMhIccROjlXugAAAU4"]
[Wed Mar 25 05:19:54.532330 2026] [:error] [pid 47946:tid 47959] [client 20.203.184.156:65058] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "acL_-jipQTqBMSeKYhfiewAAAQs"]
[Wed Mar 25 05:20:49.221342 2026] [:error] [pid 47946:tid 47968] [client 20.203.184.156:65494] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acMAMTipQTqBMSeKYhfiwQAAARQ"]
[Wed Mar 25 05:20:50.325504 2026] [:error] [pid 755:tid 838] [client 20.203.184.156:64990] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acMAMqS6bdaeEwgCGwow6wAAAE8"]
[Wed Mar 25 05:20:51.257579 2026] [:error] [pid 892:tid 921] [client 20.203.184.156:65478] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acMAMyT_G8WMU3T3yxonjQAAANY"]
[Wed Mar 25 05:20:52.340055 2026] [:error] [pid 892:tid 920] [client 20.203.184.156:65477] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acMANCT_G8WMU3T3yxonkAAAANU"]
[Wed Mar 25 05:20:53.267542 2026] [:error] [pid 47989:tid 48006] [client 20.203.184.156:65252] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws84.php"] [unique_id "acMANSWKdJMhIccROjlYYQAAAU8"]
[Wed Mar 25 05:20:54.470550 2026] [:error] [pid 892:tid 906] [client 20.203.184.156:65495] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws84.php"] [unique_id "acMANiT_G8WMU3T3yxonlwAAAMg"]
[Wed Mar 25 05:20:55.325312 2026] [:error] [pid 892:tid 918] [client 20.203.184.156:65010] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws84.php"] [unique_id "acMANyT_G8WMU3T3yxonoQAAANM"]
[Wed Mar 25 05:20:56.863841 2026] [:error] [pid 756:tid 870] [client 20.203.184.156:64776] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws84.php"] [unique_id "acMAODOaW6oylMIDBCR2fwAAAJI"]
[Wed Mar 25 05:20:57.871672 2026] [:error] [pid 47989:tid 48003] [client 20.203.184.156:64802] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acMAOSWKdJMhIccROjlYagAAAUw"]
[Wed Mar 25 05:20:59.243319 2026] [:error] [pid 755:tid 825] [client 20.203.184.156:64798] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acMAO6S6bdaeEwgCGwow7gAAAEo"]
[Wed Mar 25 05:21:00.216831 2026] [:error] [pid 755:tid 847] [client 20.203.184.156:65024] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acMAPKS6bdaeEwgCGwow8QAAAFg"]
[Wed Mar 25 05:21:02.506471 2026] [:error] [pid 47989:tid 48004] [client 20.203.184.156:65005] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acMAPiWKdJMhIccROjlYdQAAAU0"]
[Wed Mar 25 05:21:03.354500 2026] [:error] [pid 47989:tid 47996] [client 20.203.184.156:64754] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "acMAPyWKdJMhIccROjlYegAAAUU"]
[Wed Mar 25 05:21:04.243829 2026] [:error] [pid 755:tid 826] [client 20.203.184.156:64764] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "acMAQKS6bdaeEwgCGwow9AAAAEs"]
[Wed Mar 25 05:21:04.946865 2026] [:error] [pid 754:tid 789] [client 20.203.184.156:65506] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "acMAQDisL3asPbA3Cti1kwAAABg"]
[Wed Mar 25 05:21:05.835135 2026] [:error] [pid 47989:tid 48007] [client 20.203.184.156:64778] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "acMAQSWKdJMhIccROjlYgwAAAVA"]
[Wed Mar 25 05:21:06.517566 2026] [:error] [pid 47946:tid 47968] [client 20.203.184.156:65329] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acMAQjipQTqBMSeKYhfizAAAARQ"]
[Wed Mar 25 05:21:07.260740 2026] [:error] [pid 47989:tid 47996] [client 20.203.184.156:65307] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acMAQyWKdJMhIccROjlYhAAAAUU"]
[Wed Mar 25 05:21:09.412873 2026] [:error] [pid 47989:tid 48004] [client 20.203.184.156:65296] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acMARSWKdJMhIccROjlYjwAAAU0"]
[Wed Mar 25 05:21:10.766770 2026] [:error] [pid 47989:tid 47998] [client 20.203.184.156:65300] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acMARiWKdJMhIccROjlYkwAAAUc"]
[Wed Mar 25 05:21:12.286191 2026] [:error] [pid 47989:tid 47995] [client 20.203.184.156:65508] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/file.php"] [unique_id "acMASCWKdJMhIccROjlYmgAAAUQ"]
[Wed Mar 25 05:21:15.133048 2026] [:error] [pid 47989:tid 47994] [client 20.203.184.156:65065] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/file.php"] [unique_id "acMASyWKdJMhIccROjlYpAAAAUM"]
[Wed Mar 25 05:21:16.630021 2026] [:error] [pid 47989:tid 48010] [client 20.203.184.156:65331] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/file.php"] [unique_id "acMATCWKdJMhIccROjlYqwAAAVM"]
[Wed Mar 25 05:21:19.760315 2026] [:error] [pid 892:tid 899] [client 20.203.184.156:65472] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/file.php"] [unique_id "acMATyT_G8WMU3T3yxonygAAAMM"]
[Wed Mar 25 05:21:21.988179 2026] [:error] [pid 47989:tid 47993] [client 20.203.184.156:65526] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/166.php"] [unique_id "acMAUSWKdJMhIccROjlYuwAAAUI"]
[Wed Mar 25 05:21:23.505669 2026] [:error] [pid 755:tid 825] [client 20.203.184.156:65234] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/166.php"] [unique_id "acMAU6S6bdaeEwgCGwow_AAAAEo"]
[Wed Mar 25 05:21:24.989097 2026] [:error] [pid 47989:tid 48000] [client 20.203.184.156:65046] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/166.php"] [unique_id "acMAVCWKdJMhIccROjlYwwAAAUk"]
[Wed Mar 25 05:21:26.794109 2026] [:error] [pid 754:tid 778] [client 20.203.184.156:64772] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/166.php"] [unique_id "acMAVjisL3asPbA3Cti1ngAAAA0"]
[Wed Mar 25 05:21:27.572412 2026] [:error] [pid 892:tid 909] [client 20.203.184.156:65000] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "acMAVyT_G8WMU3T3yxonzwAAAMs"]
[Wed Mar 25 05:21:28.506700 2026] [:error] [pid 756:tid 866] [client 20.203.184.156:65501] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "acMAWDOaW6oylMIDBCR2mQAAAI4"]
[Wed Mar 25 05:21:29.641109 2026] [:error] [pid 47946:tid 47968] [client 20.203.184.156:65260] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "acMAWTipQTqBMSeKYhfi4AAAARQ"]
[Wed Mar 25 05:21:32.285018 2026] [:error] [pid 47946:tid 47952] [client 20.203.184.156:65287] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "acMAXDipQTqBMSeKYhfi5wAAAQQ"]
[Wed Mar 25 05:21:33.662030 2026] [:error] [pid 756:tid 858] [client 20.203.184.156:64978] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acMAXTOaW6oylMIDBCR2qAAAAIY"]
[Wed Mar 25 05:21:35.199745 2026] [:error] [pid 756:tid 859] [client 20.203.184.156:65333] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acMAXzOaW6oylMIDBCR2qwAAAIc"]
[Wed Mar 25 05:21:36.953187 2026] [:error] [pid 755:tid 844] [client 20.203.184.156:65284] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acMAYKS6bdaeEwgCGwoxBgAAAFU"]
[Wed Mar 25 05:21:39.479001 2026] [:error] [pid 756:tid 870] [client 20.203.184.156:65487] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acMAYzOaW6oylMIDBCR2rgAAAJI"]
[Wed Mar 25 05:23:48.239495 2026] [:error] [pid 756:tid 862] [client 20.203.184.156:65511] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "acMA5DOaW6oylMIDBCR3MAAAAIo"]
[Wed Mar 25 05:23:50.157411 2026] [:error] [pid 47989:tid 47995] [client 20.203.184.156:64808] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "acMA5iWKdJMhIccROjlZyQAAAUQ"]
[Wed Mar 25 05:23:51.998687 2026] [:error] [pid 892:tid 899] [client 20.203.184.156:65303] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "acMA5yT_G8WMU3T3yxoo8gAAAMM"]
[Wed Mar 25 05:23:53.230151 2026] [:error] [pid 47946:tid 47950] [client 20.203.184.156:64471] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "acMA6TipQTqBMSeKYhfjrAAAAQI"]
[Wed Mar 25 05:23:53.986352 2026] [:error] [pid 47946:tid 47953] [client 20.203.184.156:65005] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/okxh.php"] [unique_id "acMA6TipQTqBMSeKYhfjsAAAAQU"]
[Wed Mar 25 05:23:55.252573 2026] [:error] [pid 892:tid 908] [client 20.203.184.156:64977] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/okxh.php"] [unique_id "acMA6yT_G8WMU3T3yxoo_gAAAMo"]
[Wed Mar 25 05:23:56.089714 2026] [:error] [pid 47946:tid 47948] [client 20.203.184.156:65513] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/okxh.php"] [unique_id "acMA7DipQTqBMSeKYhfjtAAAAQA"]
[Wed Mar 25 05:23:56.938115 2026] [:error] [pid 892:tid 899] [client 20.203.184.156:65052] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/okxh.php"] [unique_id "acMA7CT_G8WMU3T3yxopAwAAAMM"]
[Wed Mar 25 05:23:58.172981 2026] [:error] [pid 47946:tid 47962] [client 20.203.184.156:65330] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55b76.php"] [unique_id "acMA7jipQTqBMSeKYhfjvgAAAQ4"]
[Wed Mar 25 05:23:59.392715 2026] [:error] [pid 47946:tid 47951] [client 20.203.184.156:65306] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55b76.php"] [unique_id "acMA7zipQTqBMSeKYhfjwwAAAQM"]
[Wed Mar 25 05:24:00.512610 2026] [:error] [pid 47989:tid 48014] [client 20.203.184.156:65249] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55b76.php"] [unique_id "acMA8CWKdJMhIccROjlZ3gAAAVc"]
[Wed Mar 25 05:24:02.367566 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:65086] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55b76.php"] [unique_id "acMA8jipQTqBMSeKYhfjzAAAARE"]
[Wed Mar 25 05:24:03.607026 2026] [:error] [pid 755:tid 836] [client 20.203.184.156:65524] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "acMA86S6bdaeEwgCGwoxcAAAAE0"]
[Wed Mar 25 05:24:05.999782 2026] [:error] [pid 47989:tid 47991] [client 20.203.184.156:65505] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "acMA9SWKdJMhIccROjlZ6gAAAUA"]
[Wed Mar 25 05:24:07.619472 2026] [:error] [pid 47946:tid 47969] [client 20.203.184.156:64988] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "acMA9zipQTqBMSeKYhfj1QAAARU"]
[Wed Mar 25 05:24:09.259255 2026] [:error] [pid 754:tid 771] [client 20.203.184.156:64723] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tt.php"] [unique_id "acMA-TisL3asPbA3Cti19AAAAAY"]
[Wed Mar 25 05:24:10.700347 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:65484] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maul.php"] [unique_id "acMA-jipQTqBMSeKYhfj2QAAARE"]
[Wed Mar 25 05:24:11.780325 2026] [:error] [pid 47989:tid 48012] [client 20.203.184.156:65321] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maul.php"] [unique_id "acMA-yWKdJMhIccROjlZ8wAAAVU"]
[Wed Mar 25 05:24:12.852982 2026] [:error] [pid 47946:tid 47954] [client 20.203.184.156:65276] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maul.php"] [unique_id "acMA_DipQTqBMSeKYhfj3AAAAQY"]
[Wed Mar 25 05:24:13.597213 2026] [:error] [pid 47989:tid 48003] [client 20.203.184.156:65028] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maul.php"] [unique_id "acMA_SWKdJMhIccROjlZ-QAAAUw"]
[Wed Mar 25 05:24:14.466310 2026] [:error] [pid 47989:tid 48014] [client 20.203.184.156:64704] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5b9ac.php"] [unique_id "acMA_iWKdJMhIccROjlZ-wAAAVc"]
[Wed Mar 25 05:24:16.195129 2026] [:error] [pid 755:tid 846] [client 20.203.184.156:65338] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5b9ac.php"] [unique_id "acMBAKS6bdaeEwgCGwoxdQAAAFc"]
[Wed Mar 25 05:24:17.449610 2026] [:error] [pid 755:tid 807] [client 20.203.184.156:65317] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5b9ac.php"] [unique_id "acMBAaS6bdaeEwgCGwoxegAAAEI"]
[Wed Mar 25 05:24:18.452686 2026] [:error] [pid 47946:tid 47955] [client 20.203.184.156:64774] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5b9ac.php"] [unique_id "acMBAjipQTqBMSeKYhfj5QAAAQc"]
[Wed Mar 25 05:24:20.327942 2026] [:error] [pid 47946:tid 47972] [client 20.203.184.156:65082] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hehe.php"] [unique_id "acMBBDipQTqBMSeKYhfj6QAAARg"]
[Wed Mar 25 05:24:21.463770 2026] [:error] [pid 47946:tid 47957] [client 20.203.184.156:64968] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hehe.php"] [unique_id "acMBBTipQTqBMSeKYhfj6gAAAQk"]
[Wed Mar 25 05:24:22.238605 2026] [:error] [pid 47989:tid 47997] [client 20.203.184.156:65008] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hehe.php"] [unique_id "acMBBiWKdJMhIccROjlaAQAAAUY"]
[Wed Mar 25 05:24:23.050802 2026] [:error] [pid 47946:tid 47969] [client 20.203.184.156:65304] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hehe.php"] [unique_id "acMBBzipQTqBMSeKYhfj7QAAARU"]
[Wed Mar 25 05:24:24.240724 2026] [:error] [pid 47946:tid 47959] [client 20.203.184.156:65081] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acMBCDipQTqBMSeKYhfj8QAAAQs"]
[Wed Mar 25 05:24:25.308512 2026] [:error] [pid 47946:tid 47972] [client 20.203.184.156:64547] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acMBCTipQTqBMSeKYhfj-AAAARg"]
[Wed Mar 25 05:24:26.216716 2026] [:error] [pid 754:tid 775] [client 20.203.184.156:65490] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acMBCjisL3asPbA3Cti2DQAAAAo"]
[Wed Mar 25 05:24:27.525532 2026] [:error] [pid 47989:tid 47996] [client 20.203.184.156:64997] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acMBCyWKdJMhIccROjlaCAAAAUU"]
[Wed Mar 25 05:24:28.455724 2026] [:error] [pid 47946:tid 47955] [client 20.203.184.156:64550] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/varb.php"] [unique_id "acMBDDipQTqBMSeKYhfj_wAAAQc"]
[Wed Mar 25 05:24:29.344034 2026] [:error] [pid 47989:tid 48001] [client 20.203.184.156:65083] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/varb.php"] [unique_id "acMBDSWKdJMhIccROjlaDQAAAUo"]
[Wed Mar 25 05:24:30.906325 2026] [:error] [pid 47946:tid 47952] [client 20.203.184.156:64993] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/varb.php"] [unique_id "acMBDjipQTqBMSeKYhfkCAAAAQQ"]
[Wed Mar 25 05:24:32.026157 2026] [:error] [pid 755:tid 826] [client 20.203.184.156:65039] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/varb.php"] [unique_id "acMBEKS6bdaeEwgCGwoxjQAAAEs"]
[Wed Mar 25 05:24:32.599793 2026] [:error] [pid 47946:tid 47957] [client 20.203.184.156:64813] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lm15.php"] [unique_id "acMBEDipQTqBMSeKYhfkFgAAAQk"]
[Wed Mar 25 05:24:33.341415 2026] [:error] [pid 47946:tid 47951] [client 20.203.184.156:64983] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lm15.php"] [unique_id "acMBETipQTqBMSeKYhfkHwAAAQM"]
[Wed Mar 25 05:24:34.111922 2026] [:error] [pid 47946:tid 47968] [client 20.203.184.156:64780] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lm15.php"] [unique_id "acMBEjipQTqBMSeKYhfkJgAAARQ"]
[Wed Mar 25 05:24:34.710078 2026] [:error] [pid 47946:tid 47969] [client 20.203.184.156:65523] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lm15.php"] [unique_id "acMBEjipQTqBMSeKYhfkLQAAARU"]
[Wed Mar 25 05:24:35.305283 2026] [:error] [pid 892:tid 907] [client 20.203.184.156:65035] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clss.php"] [unique_id "acMBEyT_G8WMU3T3yxoplQAAAMk"]
[Wed Mar 25 05:24:37.763013 2026] [:error] [pid 754:tid 780] [client 20.203.184.156:65254] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clss.php"] [unique_id "acMBFTisL3asPbA3Cti2FQAAAA8"]
[Wed Mar 25 05:24:38.444374 2026] [:error] [pid 754:tid 772] [client 20.203.184.156:65071] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clss.php"] [unique_id "acMBFjisL3asPbA3Cti2FwAAAAc"]
[Wed Mar 25 05:24:39.440938 2026] [:error] [pid 892:tid 895] [client 20.203.184.156:64321] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clss.php"] [unique_id "acMBFyT_G8WMU3T3yxopnAAAAME"]
[Wed Mar 25 05:24:40.349072 2026] [:error] [pid 47946:tid 47961] [client 20.203.184.156:65217] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/44.php"] [unique_id "acMBGDipQTqBMSeKYhfkSgAAAQ0"]
[Wed Mar 25 05:24:41.460647 2026] [:error] [pid 47989:tid 48012] [client 20.203.184.156:65335] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/44.php"] [unique_id "acMBGSWKdJMhIccROjlaTQAAAVU"]
[Wed Mar 25 05:24:43.016934 2026] [:error] [pid 47989:tid 48015] [client 20.203.184.156:65283] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/44.php"] [unique_id "acMBGyWKdJMhIccROjlaWgAAAVg"]
[Wed Mar 25 05:26:53.089340 2026] [:error] [pid 47946:tid 47958] [client 20.203.184.156:65233] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acMBnTipQTqBMSeKYhflewAAAQo"]
[Wed Mar 25 05:26:57.104398 2026] [:error] [pid 892:tid 913] [client 20.203.184.156:65015] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acMBoST_G8WMU3T3yxoqRgAAAM8"]
[Wed Mar 25 05:26:58.358573 2026] [:error] [pid 754:tid 782] [client 20.203.184.156:65270] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acMBojisL3asPbA3Cti2iQAAABE"]
[Wed Mar 25 05:26:59.505435 2026] [:error] [pid 47946:tid 47965] [client 20.203.184.156:64465] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acMBozipQTqBMSeKYhfliAAAARE"]
[Wed Mar 25 05:27:01.719640 2026] [:error] [pid 47946:tid 47957] [client 20.203.184.156:65226] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "acMBpTipQTqBMSeKYhfljQAAAQk"]
[Wed Mar 25 05:27:02.746954 2026] [:error] [pid 892:tid 910] [client 20.203.184.156:65323] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "acMBpiT_G8WMU3T3yxoqSwAAAMw"]
[Wed Mar 25 05:27:04.097526 2026] [:error] [pid 47946:tid 47966] [client 20.203.184.156:65258] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "acMBqDipQTqBMSeKYhfllAAAARI"]
[Wed Mar 25 05:27:05.990109 2026] [:error] [pid 756:tid 861] [client 20.203.184.156:65480] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "acMBqTOaW6oylMIDBCR4KgAAAIk"]
[Wed Mar 25 05:27:06.856528 2026] [:error] [pid 754:tid 769] [client 20.203.184.156:65512] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfd.php"] [unique_id "acMBqjisL3asPbA3Cti2mgAAAAQ"]
[Wed Mar 25 05:27:08.345882 2026] [:error] [pid 47989:tid 48006] [client 20.203.184.156:65038] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfd.php"] [unique_id "acMBrCWKdJMhIccROjlcNQAAAU8"]
[Wed Mar 25 05:27:09.224521 2026] [:error] [pid 47946:tid 47971] [client 20.203.184.156:64815] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfd.php"] [unique_id "acMBrTipQTqBMSeKYhfloAAAARc"]
[Wed Mar 25 05:27:10.120355 2026] [:error] [pid 47946:tid 47966] [client 20.203.184.156:65473] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfd.php"] [unique_id "acMBrjipQTqBMSeKYhflpAAAARI"]
[Wed Mar 25 05:27:11.526250 2026] [:error] [pid 754:tid 765] [client 20.203.184.156:65009] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "acMBrzisL3asPbA3Cti2oAAAAAA"]
[Wed Mar 25 05:27:12.526089 2026] [:error] [pid 754:tid 787] [client 20.203.184.156:65269] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "acMBsDisL3asPbA3Cti2qAAAABY"]
[Wed Mar 25 05:27:13.335106 2026] [:error] [pid 754:tid 788] [client 20.203.184.156:65507] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "acMBsTisL3asPbA3Cti2rgAAABc"]
[Wed Mar 25 05:27:14.408490 2026] [:error] [pid 892:tid 919] [client 20.203.184.156:65000] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "acMBsiT_G8WMU3T3yxoqXQAAANQ"]
[Wed Mar 25 05:27:14.978122 2026] [:error] [pid 47946:tid 47963] [client 20.203.184.156:65301] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "acMBsjipQTqBMSeKYhfltgAAAQ8"]
[Wed Mar 25 05:27:15.751330 2026] [:error] [pid 892:tid 894] [client 20.203.184.156:65257] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "acMBsyT_G8WMU3T3yxoqXwAAAMA"]
[Wed Mar 25 05:27:16.390228 2026] [:error] [pid 892:tid 914] [client 20.203.184.156:65492] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "acMBtCT_G8WMU3T3yxoqYgAAANA"]
[Wed Mar 25 05:27:17.130486 2026] [:error] [pid 755:tid 837] [client 20.203.184.156:65327] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "acMBtaS6bdaeEwgCGwoyegAAAE4"]
[Wed Mar 25 05:27:17.729466 2026] [:error] [pid 47946:tid 47952] [client 20.203.184.156:65020] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "acMBtTipQTqBMSeKYhflugAAAQQ"]
[Wed Mar 25 05:27:18.580924 2026] [:error] [pid 47946:tid 47971] [client 20.203.184.156:65010] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "acMBtjipQTqBMSeKYhflvQAAARc"]
[Wed Mar 25 05:27:19.338676 2026] [:error] [pid 756:tid 853] [client 20.203.184.156:64501] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "acMBtzOaW6oylMIDBCR4NwAAAIM"]
[Wed Mar 25 05:27:20.054483 2026] [:error] [pid 756:tid 863] [client 20.203.184.156:64730] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "acMBuDOaW6oylMIDBCR4OQAAAIs"]
[Wed Mar 25 05:27:20.819638 2026] [:error] [pid 756:tid 852] [client 20.203.184.156:64477] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acMBuDOaW6oylMIDBCR4PAAAAII"]
[Wed Mar 25 05:27:21.693628 2026] [:error] [pid 47989:tid 48004] [client 20.203.184.156:65293] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acMBuSWKdJMhIccROjlcVQAAAU0"]
[Wed Mar 25 05:27:23.227038 2026] [:error] [pid 47946:tid 47966] [client 20.203.184.156:65320] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acMBuzipQTqBMSeKYhflxgAAARI"]
[Wed Mar 25 05:27:24.194454 2026] [:error] [pid 756:tid 864] [client 20.203.184.156:64707] [client 20.203.184.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acMBvDOaW6oylMIDBCR4QQAAAIw"]
[Wed Mar 25 05:31:20.701088 2026] [:error] [pid 47989:tid 47994] [client 20.48.232.178:40911] [client 20.48.232.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acMCqCWKdJMhIccROjlfEAAAAUM"]
[Wed Mar 25 05:31:22.792302 2026] [:error] [pid 47946:tid 47949] [client 20.48.232.178:40909] [client 20.48.232.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acMCqjipQTqBMSeKYhfn2wAAAQE"]
[Wed Mar 25 05:31:24.306817 2026] [:error] [pid 47989:tid 47998] [client 20.48.232.178:40897] [client 20.48.232.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acMCrCWKdJMhIccROjlfGQAAAUc"]
[Wed Mar 25 05:31:25.045472 2026] [:error] [pid 756:tid 860] [client 20.48.232.178:40264] [client 20.48.232.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acMCrTOaW6oylMIDBCR5OQAAAIg"]
[Wed Mar 25 06:42:35.466590 2026] [:error] [pid 754:tid 774] [client 45.154.138.46:52095] [client 45.154.138.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.46, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acMTWzisL3asPbA3CtjDOAAAAAk"]
[Wed Mar 25 07:38:45.220275 2026] [:error] [pid 26320:tid 26379] [client 45.94.31.15:53177] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghTkUgS2mHAojGnl46QAAAdc"], referer: www.google.com
[Wed Mar 25 07:38:45.224444 2026] [:error] [pid 26321:tid 26357] [client 45.94.31.15:53160] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "acMghfKO65qqGZCSPZqw8gAAAhA"], referer: www.google.com
[Wed Mar 25 07:38:45.229119 2026] [:error] [pid 755:tid 826] [client 45.94.31.15:53144] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acMghaS6bdaeEwgCGwpMZQAAAEs"]
[Wed Mar 25 07:38:45.252245 2026] [:error] [pid 47946:tid 47957] [client 45.94.31.15:53218] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghTipQTqBMSeKYhcX6gAAAQk"]
[Wed Mar 25 07:38:45.252769 2026] [:error] [pid 47946:tid 47964] [client 45.94.31.15:53123] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghTipQTqBMSeKYhcX6wAAARA"], referer: www.google.com
[Wed Mar 25 07:38:45.745070 2026] [:error] [pid 26269:tid 26296] [client 45.94.31.15:50281] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "acMghUn7e-ZQbaIs7qx_0AAAAZQ"], referer: www.google.com
[Wed Mar 25 07:38:45.754306 2026] [:error] [pid 756:tid 853] [client 45.94.31.15:50032] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghTOaW6oylMIDBCTFuAAAAIM"], referer: www.google.com
[Wed Mar 25 07:38:45.768967 2026] [:error] [pid 47989:tid 47997] [client 45.94.31.15:50815] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghSWKdJMhIccROjmexAAAAUY"]
[Wed Mar 25 07:38:45.770293 2026] [:error] [pid 755:tid 821] [client 45.94.31.15:50853] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghaS6bdaeEwgCGwpMjwAAAEY"], referer: www.google.com
[Wed Mar 25 07:38:45.773782 2026] [:error] [pid 756:tid 875] [client 45.94.31.15:50351] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acMghTOaW6oylMIDBCTFuQAAAJc"]
[Wed Mar 25 07:38:46.268784 2026] [:error] [pid 892:tid 902] [client 45.94.31.15:64394] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "acMghiT_G8WMU3T3yxpPPAAAAMU"], referer: www.google.com
[Wed Mar 25 07:38:46.276010 2026] [:error] [pid 892:tid 909] [client 45.94.31.15:64741] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghiT_G8WMU3T3yxpPPgAAAMs"], referer: www.google.com
[Wed Mar 25 07:38:46.303802 2026] [:error] [pid 754:tid 781] [client 45.94.31.15:49152] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghjisL3asPbA3CtjPGwAAABA"], referer: www.google.com
[Wed Mar 25 07:38:46.304763 2026] [:error] [pid 892:tid 911] [client 45.94.31.15:49359] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acMghiT_G8WMU3T3yxpPRQAAAM0"]
[Wed Mar 25 07:38:46.382278 2026] [:error] [pid 26269:tid 26295] [client 45.94.31.15:65239] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghkn7e-ZQbaIs7qx_5AAAAZM"]
[Wed Mar 25 07:38:46.764391 2026] [:error] [pid 26320:tid 26329] [client 45.94.31.15:57781] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "acMghjkUgS2mHAojGnl5HgAAAcA"], referer: www.google.com
[Wed Mar 25 07:38:46.790311 2026] [:error] [pid 754:tid 765] [client 45.94.31.15:57912] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghjisL3asPbA3CtjPIQAAAAA"], referer: www.google.com
[Wed Mar 25 07:38:46.795147 2026] [:error] [pid 26321:tid 26356] [client 45.94.31.15:59080] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghvKO65qqGZCSPZqxNQAAAg8"], referer: www.google.com
[Wed Mar 25 07:38:46.799141 2026] [:error] [pid 26321:tid 26352] [client 45.94.31.15:59064] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acMghvKO65qqGZCSPZqxNgAAAgs"]
[Wed Mar 25 07:38:46.875163 2026] [:error] [pid 26321:tid 26342] [client 45.94.31.15:61440] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghvKO65qqGZCSPZqxOAAAAgM"]
[Wed Mar 25 07:38:47.264819 2026] [:error] [pid 26320:tid 26334] [client 45.94.31.15:52724] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-plain.php"] [unique_id "acMghzkUgS2mHAojGnl5PQAAAcU"], referer: www.google.com
[Wed Mar 25 07:38:47.293600 2026] [:error] [pid 756:tid 853] [client 45.94.31.15:52898] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghzOaW6oylMIDBCTGDgAAAIM"], referer: www.google.com
[Wed Mar 25 07:38:47.293649 2026] [:error] [pid 756:tid 864] [client 45.94.31.15:52887] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghzOaW6oylMIDBCTGDQAAAIw"], referer: www.google.com
[Wed Mar 25 07:38:47.298918 2026] [:error] [pid 754:tid 785] [client 45.94.31.15:52987] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acMghzisL3asPbA3CtjPJgAAABQ"]
[Wed Mar 25 07:38:47.371958 2026] [:error] [pid 47946:tid 47957] [client 45.94.31.15:53673] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghzipQTqBMSeKYhcYLgAAAQk"]
[Wed Mar 25 07:38:48.291849 2026] [:error] [pid 756:tid 859] [client 45.94.31.15:58904] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiDOaW6oylMIDBCTGLQAAAIc"], referer: www.google.com
[Wed Mar 25 07:38:48.298043 2026] [:error] [pid 756:tid 870] [client 45.94.31.15:58927] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiDOaW6oylMIDBCTGLwAAAJI"], referer: www.google.com
[Wed Mar 25 07:38:49.266950 2026] [:error] [pid 754:tid 778] [client 45.94.31.15:52718] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiTisL3asPbA3CtjPQAAAAA0"], referer: www.google.com
[Wed Mar 25 07:38:49.271330 2026] [:error] [pid 754:tid 772] [client 45.94.31.15:52794] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiTisL3asPbA3CtjPQwAAAAc"], referer: www.google.com
[Wed Mar 25 07:38:50.249702 2026] [:error] [pid 26449:tid 26470] [client 45.94.31.15:61781] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgitpZ2T15NDqzAjGdOAAAAlE"], referer: www.google.com
[Wed Mar 25 07:38:50.263250 2026] [:error] [pid 756:tid 870] [client 45.94.31.15:61852] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgijOaW6oylMIDBCTGOQAAAJI"], referer: www.google.com
[Wed Mar 25 07:38:51.240159 2026] [:error] [pid 47946:tid 47969] [client 45.94.31.15:59770] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgizipQTqBMSeKYhcYbgAAARU"], referer: www.google.com
[Wed Mar 25 07:38:51.253641 2026] [:error] [pid 47946:tid 47953] [client 45.94.31.15:60026] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgizipQTqBMSeKYhcYcAAAAQU"], referer: www.google.com
[Wed Mar 25 07:38:52.216163 2026] [:error] [pid 26449:tid 26463] [client 45.94.31.15:55267] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgjNpZ2T15NDqzAjGdfQAAAko"], referer: www.google.com
[Wed Mar 25 07:38:52.236172 2026] [:error] [pid 892:tid 917] [client 45.94.31.15:55293] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgjCT_G8WMU3T3yxpPqQAAANI"], referer: www.google.com
[Wed Mar 25 11:34:42.667066 2026] [:error] [pid 26321:tid 26359] [client 89.251.0.84:62039] [client 89.251.0.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.84, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acNX0vKO65qqGZCSPZrSwwAAAhI"]
[Wed Mar 25 11:49:42.242671 2026] [:error] [pid 25969:tid 26027] [client 72.57.65.71:40536] [client 72.57.65.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.57.65.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "acNbVhd3aEUmOfdKja_PQgAAA8E"], referer: https://makifim.com.au/
[Wed Mar 25 11:49:49.189091 2026] [:error] [pid 892:tid 904] [client 72.57.65.71:53602] [client 72.57.65.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.57.65.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "acNbXST_G8WMU3T3yxqAfQAAAMY"], referer: https://makifim.com.au/
[Wed Mar 25 17:05:01.597627 2026] [authz_core:error] [pid 47989:tid 47995] [client 101.198.0.141:5265] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/contact-form-7/readme.txt
[Wed Mar 25 17:05:02.336844 2026] [authz_core:error] [pid 47989:tid 47997] [client 101.198.0.171:53456] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/photo-gallery/readme.txt
[Wed Mar 25 18:11:36.354145 2026] [:error] [pid 26321:tid 26349] [client 20.220.197.73:57964] [client 20.220.197.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.197.73, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acO02PKO65qqGZCSPZoyMwAAAgg"]
[Wed Mar 25 18:11:43.723949 2026] [autoindex:error] [pid 26321:tid 26365] [client 20.220.197.73:57964] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 18:11:43.946284 2026] [autoindex:error] [pid 26321:tid 26360] [client 20.220.197.73:57964] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 18:11:46.162426 2026] [autoindex:error] [pid 26321:tid 26351] [client 20.220.197.73:57964] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 18:11:54.553993 2026] [autoindex:error] [pid 26321:tid 26353] [client 20.220.197.73:57964] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 18:11:56.829919 2026] [:error] [pid 26321:tid 26360] [client 20.220.197.73:57964] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acO07PKO65qqGZCSPZoyUwAAAhM"]
[Wed Mar 25 18:11:59.091167 2026] [autoindex:error] [pid 25875:tid 25883] [client 20.220.197.73:5900] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 18:12:03.369913 2026] [autoindex:error] [pid 25875:tid 25887] [client 20.220.197.73:5900] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/et-cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 18:12:06.086792 2026] [:error] [pid 25875:tid 25901] [client 20.220.197.73:5900] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acO09hJ38QkS3NyfshzcaQAAApQ"]
[Wed Mar 25 18:12:06.920597 2026] [autoindex:error] [pid 25875:tid 25888] [client 20.220.197.73:5913] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 18:12:09.366196 2026] [:error] [pid 25875:tid 25901] [client 20.220.197.73:5913] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acO0-RJ38QkS3NyfshzceAAAApQ"]
[Wed Mar 25 18:12:10.194981 2026] [:error] [pid 26449:tid 26475] [client 20.220.197.73:57966] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acO0-tpZ2T15NDqzAjFsngAAAlY"]
[Wed Mar 25 18:12:11.017966 2026] [:error] [pid 26321:tid 26346] [client 20.220.197.73:5908] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acO0-_KO65qqGZCSPZoyWgAAAgY"]
[Wed Mar 25 18:12:11.867792 2026] [:error] [pid 47989:tid 48000] [client 20.220.197.73:58625] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acO0-yWKdJMhIccROjmmugAAAUk"]
[Wed Mar 25 19:36:45.195348 2026] [:error] [pid 25875:tid 25881] [client 51.103.250.122:31226] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fde.php"] [unique_id "acPIzRJ38QkS3Nyfshz2kwAAAoA"]
[Wed Mar 25 19:36:45.696567 2026] [:error] [pid 25875:tid 25893] [client 51.103.250.122:3972] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fde.php"] [unique_id "acPIzRJ38QkS3Nyfshz2lAAAAow"]
[Wed Mar 25 19:36:46.179592 2026] [:error] [pid 25875:tid 25889] [client 51.103.250.122:22825] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fde.php"] [unique_id "acPIzhJ38QkS3Nyfshz2lgAAAog"]
[Wed Mar 25 19:36:46.669777 2026] [:error] [pid 25967:tid 25979] [client 51.103.250.122:18397] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjde.php"] [unique_id "acPIzvg8Qtq7ZM4mSFlYVAAAA0c"]
[Wed Mar 25 19:36:47.142232 2026] [:error] [pid 25967:tid 25975] [client 51.103.250.122:12012] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjde.php"] [unique_id "acPIz_g8Qtq7ZM4mSFlYVgAAA0M"]
[Wed Mar 25 19:36:47.614560 2026] [:error] [pid 25967:tid 25977] [client 51.103.250.122:9098] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjde.php"] [unique_id "acPIz_g8Qtq7ZM4mSFlYVwAAA0U"]
[Wed Mar 25 19:36:48.122246 2026] [:error] [pid 892:tid 899] [client 51.103.250.122:27095] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjde.php"] [unique_id "acPI0CT_G8WMU3T3yxrSmQAAAMM"]
[Wed Mar 25 19:36:48.748532 2026] [:error] [pid 892:tid 915] [client 51.103.250.122:27102] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta.php"] [unique_id "acPI0CT_G8WMU3T3yxrSnAAAANE"]
[Wed Mar 25 19:36:49.225096 2026] [:error] [pid 892:tid 919] [client 51.103.250.122:11969] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta.php"] [unique_id "acPI0ST_G8WMU3T3yxrSnQAAANQ"]
[Wed Mar 25 19:36:49.702904 2026] [:error] [pid 26269:tid 26289] [client 51.103.250.122:19870] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta.php"] [unique_id "acPI0Un7e-ZQbaIs7qy6LAAAAY0"]
[Wed Mar 25 19:36:50.199070 2026] [:error] [pid 25967:tid 25985] [client 51.103.250.122:9127] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta.php"] [unique_id "acPI0vg8Qtq7ZM4mSFlYWgAAA00"]
[Wed Mar 25 19:36:50.673910 2026] [:error] [pid 25967:tid 25992] [client 51.103.250.122:3141] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yawa.php"] [unique_id "acPI0vg8Qtq7ZM4mSFlYXQAAA1Q"]
[Wed Mar 25 19:36:51.154156 2026] [:error] [pid 47989:tid 48007] [client 51.103.250.122:12954] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yawa.php"] [unique_id "acPI0yWKdJMhIccROjncJAAAAVA"]
[Wed Mar 25 19:36:51.651273 2026] [:error] [pid 25967:tid 25984] [client 51.103.250.122:12481] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x0rg.php"] [unique_id "acPI0_g8Qtq7ZM4mSFlYYAAAA0w"]
[Wed Mar 25 19:36:52.125171 2026] [:error] [pid 25875:tid 25896] [client 51.103.250.122:3471] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x0rg.php"] [unique_id "acPI1BJ38QkS3Nyfshz2oAAAAo8"]
[Wed Mar 25 19:36:52.598095 2026] [:error] [pid 25967:tid 25977] [client 51.103.250.122:3459] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x0rg.php"] [unique_id "acPI1Pg8Qtq7ZM4mSFlYYgAAA0U"]
[Wed Mar 25 19:36:53.077286 2026] [:error] [pid 25967:tid 25978] [client 51.103.250.122:3486] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x0rg.php"] [unique_id "acPI1fg8Qtq7ZM4mSFlYYwAAA0Y"]
[Wed Mar 25 19:36:53.555007 2026] [:error] [pid 25875:tid 25889] [client 51.103.250.122:58954] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dk.php"] [unique_id "acPI1RJ38QkS3Nyfshz2owAAAog"]
[Wed Mar 25 19:36:54.273604 2026] [:error] [pid 25875:tid 25889] [client 51.103.250.122:32547] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dk.php"] [unique_id "acPI1hJ38QkS3Nyfshz2pwAAAog"]
[Wed Mar 25 19:36:54.779641 2026] [:error] [pid 26321:tid 26363] [client 51.103.250.122:32532] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dk.php"] [unique_id "acPI1vKO65qqGZCSPZpH_QAAAhY"]
[Wed Mar 25 19:36:55.563640 2026] [:error] [pid 26321:tid 26361] [client 51.103.250.122:18400] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dk.php"] [unique_id "acPI1_KO65qqGZCSPZpH_gAAAhQ"]
[Wed Mar 25 22:52:02.533294 2026] [:error] [pid 26269:tid 26297] [client 20.203.196.218:30874] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acP2kkn7e-ZQbaIs7qzHyAAAAZU"]
[Wed Mar 25 22:52:03.323928 2026] [:error] [pid 892:tid 917] [client 20.203.196.218:26802] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acP2kyT_G8WMU3T3yxrmrgAAANI"]
[Wed Mar 25 22:52:03.977320 2026] [:error] [pid 26321:tid 26349] [client 20.203.196.218:8770] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acP2k_KO65qqGZCSPZprDQAAAgg"]
[Wed Mar 25 22:52:04.745732 2026] [:error] [pid 25967:tid 25981] [client 20.203.196.218:30897] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acP2lPg8Qtq7ZM4mSFmNFQAAA0k"]
[Wed Mar 25 22:52:05.334208 2026] [:error] [pid 25875:tid 25894] [client 20.203.196.218:11470] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acP2lRJ38QkS3NyfshxOogAAAo0"]
[Wed Mar 25 22:52:08.450426 2026] [:error] [pid 756:tid 858] [client 20.203.196.218:8776] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acP2mDOaW6oylMIDBCQpewAAAIY"]
[Wed Mar 25 22:52:09.568744 2026] [:error] [pid 25875:tid 25883] [client 20.203.196.218:12165] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acP2mRJ38QkS3NyfshxOsQAAAoI"]
[Wed Mar 25 22:52:10.599460 2026] [:error] [pid 25875:tid 25898] [client 20.203.196.218:12169] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acP2mhJ38QkS3NyfshxOtQAAApE"]
[Wed Mar 25 22:52:11.611900 2026] [:error] [pid 25967:tid 25982] [client 20.203.196.218:8815] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acP2m_g8Qtq7ZM4mSFmNGwAAA0o"]
[Wed Mar 25 22:52:13.762334 2026] [:error] [pid 26321:tid 26365] [client 20.203.196.218:9881] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acP2nfKO65qqGZCSPZprEAAAAhg"]
[Wed Mar 25 22:52:15.501962 2026] [:error] [pid 26321:tid 26348] [client 20.203.196.218:39480] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acP2n_KO65qqGZCSPZprFQAAAgc"]
[Wed Mar 25 22:52:17.347969 2026] [:error] [pid 892:tid 905] [client 20.203.196.218:34154] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acP2oST_G8WMU3T3yxrmtQAAAMc"]
[Wed Mar 25 22:52:18.131531 2026] [:error] [pid 25875:tid 25902] [client 20.203.196.218:43320] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acP2ohJ38QkS3NyfshxOxgAAApU"]
[Wed Mar 25 22:52:19.251111 2026] [:error] [pid 26321:tid 26358] [client 20.203.196.218:4663] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acP2o_KO65qqGZCSPZprFgAAAhE"]
[Wed Mar 25 22:52:19.957967 2026] [:error] [pid 26449:tid 26456] [client 20.203.196.218:16812] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acP2o9pZ2T15NDqzAjGVAgAAAkM"]
[Wed Mar 25 22:52:21.820903 2026] [:error] [pid 47946:tid 47961] [client 20.203.196.218:37931] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acP2pTipQTqBMSeKYheOkgAAAQ0"]
[Wed Mar 25 22:52:23.569124 2026] [:error] [pid 25967:tid 25992] [client 20.203.196.218:16806] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acP2p_g8Qtq7ZM4mSFmNLgAAA1Q"]
[Wed Mar 25 22:52:24.822059 2026] [:error] [pid 26269:tid 26287] [client 20.203.196.218:16824] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acP2qEn7e-ZQbaIs7qzH0gAAAYs"]
[Wed Mar 25 22:52:25.628349 2026] [:error] [pid 25875:tid 25905] [client 20.203.196.218:8798] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acP2qRJ38QkS3NyfshxO2AAAApg"]
[Wed Mar 25 22:52:26.718400 2026] [:error] [pid 26321:tid 26352] [client 20.203.196.218:18695] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acP2qvKO65qqGZCSPZprHgAAAgs"]
[Wed Mar 25 22:52:27.279249 2026] [:error] [pid 25967:tid 25973] [client 20.203.196.218:43302] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acP2q_g8Qtq7ZM4mSFmNMwAAA0E"]
[Wed Mar 25 22:52:28.157961 2026] [:error] [pid 26321:tid 26363] [client 20.203.196.218:39189] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acP2rPKO65qqGZCSPZprIwAAAhY"]
[Wed Mar 25 22:52:28.938670 2026] [:error] [pid 25875:tid 25898] [client 20.203.196.218:9861] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acP2rBJ38QkS3NyfshxO3wAAApE"]
[Wed Mar 25 22:52:29.571825 2026] [:error] [pid 25875:tid 25904] [client 20.203.196.218:28156] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acP2rRJ38QkS3NyfshxO5AAAApc"]
[Wed Mar 25 22:52:30.237065 2026] [:error] [pid 25875:tid 25888] [client 20.203.196.218:9896] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acP2rhJ38QkS3NyfshxO5wAAAoc"]
[Wed Mar 25 22:52:31.155835 2026] [:error] [pid 26449:tid 26469] [client 20.203.196.218:15714] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acP2r9pZ2T15NDqzAjGVBgAAAlA"]
[Wed Mar 25 22:52:31.877365 2026] [:error] [pid 756:tid 864] [client 20.203.196.218:18689] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acP2rzOaW6oylMIDBCQpgQAAAIw"]
[Wed Mar 25 22:52:33.425928 2026] [:error] [pid 25967:tid 25996] [client 20.203.196.218:7830] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acP2sfg8Qtq7ZM4mSFmNOAAAA1g"]
[Wed Mar 25 22:52:34.362633 2026] [:error] [pid 47946:tid 47954] [client 20.203.196.218:43308] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "acP2sjipQTqBMSeKYheOmAAAAQY"]
[Wed Mar 25 22:52:35.335082 2026] [:error] [pid 47989:tid 48008] [client 20.203.196.218:9870] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "acP2syWKdJMhIccROjkSvgAAAVE"]
[Wed Mar 25 22:52:37.962109 2026] [:error] [pid 25967:tid 25980] [client 20.203.196.218:17921] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "acP2tfg8Qtq7ZM4mSFmNQQAAA0g"]
[Wed Mar 25 22:52:38.875895 2026] [:error] [pid 47989:tid 48010] [client 20.203.196.218:34147] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "acP2tiWKdJMhIccROjkSywAAAVM"]
[Wed Mar 25 22:52:39.785354 2026] [:error] [pid 26269:tid 26294] [client 20.203.196.218:18724] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acP2t0n7e-ZQbaIs7qzH1wAAAZI"]
[Wed Mar 25 22:52:40.362224 2026] [:error] [pid 756:tid 866] [client 20.203.196.218:7827] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acP2uDOaW6oylMIDBCQpiQAAAI4"]
[Wed Mar 25 22:52:41.262681 2026] [:error] [pid 26449:tid 26460] [client 20.203.196.218:7871] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acP2udpZ2T15NDqzAjGVCAAAAkc"]
[Wed Mar 25 22:52:42.575502 2026] [:error] [pid 26269:tid 26279] [client 20.203.196.218:4735] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acP2ukn7e-ZQbaIs7qzH3gAAAYM"]
[Wed Mar 25 22:52:43.519884 2026] [:error] [pid 25875:tid 25894] [client 20.203.196.218:26446] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acP2uxJ38QkS3NyfshxPBQAAAo0"]
[Wed Mar 25 22:52:44.866552 2026] [:error] [pid 25967:tid 25991] [client 20.203.196.218:32997] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acP2vPg8Qtq7ZM4mSFmNUAAAA1M"]
[Wed Mar 25 22:52:46.293086 2026] [:error] [pid 892:tid 914] [client 20.203.196.218:38326] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acP2viT_G8WMU3T3yxrm3wAAANA"]
[Wed Mar 25 22:52:47.661928 2026] [:error] [pid 25875:tid 25889] [client 20.203.196.218:16799] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acP2vxJ38QkS3NyfshxPCAAAAog"]
[Wed Mar 25 22:52:48.461631 2026] [:error] [pid 47989:tid 47993] [client 20.203.196.218:11400] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acP2wCWKdJMhIccROjkS1AAAAUI"]
[Wed Mar 25 22:52:54.221190 2026] [:error] [pid 25969:tid 26044] [client 20.203.196.218:7817] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acP2xhd3aEUmOfdKja8ZnAAAA9I"]
[Wed Mar 25 22:52:55.756268 2026] [:error] [pid 26321:tid 26363] [client 20.203.196.218:11446] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acP2x_KO65qqGZCSPZprLgAAAhY"]
[Wed Mar 25 22:52:57.976952 2026] [:error] [pid 25875:tid 25895] [client 20.203.196.218:19579] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acP2yRJ38QkS3NyfshxPPgAAAo4"]
[Wed Mar 25 22:52:58.824113 2026] [:error] [pid 47989:tid 48004] [client 20.203.196.218:34877] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acP2yiWKdJMhIccROjkS8QAAAU0"]
[Wed Mar 25 22:52:59.608008 2026] [:error] [pid 25967:tid 25988] [client 20.203.196.218:38396] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "acP2y_g8Qtq7ZM4mSFmNcAAAA1A"]
[Wed Mar 25 22:53:51.144768 2026] [:error] [pid 26321:tid 26342] [client 20.203.196.218:25678] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "acP2__KO65qqGZCSPZprWAAAAgM"]
[Wed Mar 25 22:54:03.664729 2026] [:error] [pid 25875:tid 25881] [client 20.203.196.218:8487] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "acP3CxJ38QkS3NyfshxPzQAAAoA"]
[Wed Mar 25 22:54:15.297814 2026] [:error] [pid 47989:tid 47992] [client 20.203.196.218:8499] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acP3FyWKdJMhIccROjkTTQAAAUE"]
[Wed Mar 25 22:54:17.860570 2026] [:error] [pid 25875:tid 25901] [client 20.203.196.218:29955] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acP3GRJ38QkS3NyfshxP_AAAApQ"]
[Wed Mar 25 22:54:18.991149 2026] [:error] [pid 25875:tid 25886] [client 20.203.196.218:36476] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acP3GhJ38QkS3NyfshxQAAAAAoU"]
[Wed Mar 25 22:54:20.796523 2026] [:error] [pid 892:tid 919] [client 20.203.196.218:4515] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acP3HCT_G8WMU3T3yxrnAwAAANQ"]
[Wed Mar 25 22:54:22.318681 2026] [:error] [pid 25875:tid 25897] [client 20.203.196.218:35981] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acP3HhJ38QkS3NyfshxQCwAAApA"]
[Wed Mar 25 22:54:23.862938 2026] [:error] [pid 25875:tid 25882] [client 20.203.196.218:18384] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acP3HxJ38QkS3NyfshxQDAAAAoE"]
[Wed Mar 25 22:54:24.711326 2026] [:error] [pid 47989:tid 47997] [client 20.203.196.218:19473] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acP3ICWKdJMhIccROjkTVgAAAUY"]
[Wed Mar 25 22:54:25.922398 2026] [:error] [pid 47989:tid 48002] [client 20.203.196.218:28515] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acP3ISWKdJMhIccROjkTXAAAAUs"]
[Wed Mar 25 22:54:27.109134 2026] [:error] [pid 47989:tid 47997] [client 20.203.196.218:24007] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acP3IyWKdJMhIccROjkTYQAAAUY"]
[Wed Mar 25 22:54:29.211962 2026] [:error] [pid 26449:tid 26473] [client 20.203.196.218:24018] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acP3JdpZ2T15NDqzAjGVRwAAAlQ"]
[Wed Mar 25 22:54:32.837638 2026] [:error] [pid 26449:tid 26465] [client 20.203.196.218:12974] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acP3KNpZ2T15NDqzAjGVTAAAAkw"]
[Wed Mar 25 22:54:34.482793 2026] [:error] [pid 47989:tid 47992] [client 20.203.196.218:28500] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acP3KiWKdJMhIccROjkTdgAAAUE"]
[Wed Mar 25 22:54:37.779301 2026] [:error] [pid 26321:tid 26343] [client 20.203.196.218:29974] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acP3LfKO65qqGZCSPZprbAAAAgQ"]
[Wed Mar 25 22:54:38.743161 2026] [:error] [pid 47946:tid 47954] [client 20.203.196.218:42601] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acP3LjipQTqBMSeKYheOugAAAQY"]
[Wed Mar 25 22:54:39.971857 2026] [:error] [pid 26321:tid 26344] [client 20.203.196.218:8212] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acP3L_KO65qqGZCSPZprbgAAAgU"]
[Wed Mar 25 22:54:41.185869 2026] [:error] [pid 25969:tid 26047] [client 20.203.196.218:24047] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acP3MRd3aEUmOfdKja8ZtAAAA9U"]
[Wed Mar 25 22:54:42.235879 2026] [:error] [pid 26269:tid 26286] [client 20.203.196.218:4787] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acP3Mkn7e-ZQbaIs7qzIBQAAAYo"]
[Wed Mar 25 22:54:42.927040 2026] [:error] [pid 25875:tid 25885] [client 20.203.196.218:4758] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acP3MhJ38QkS3NyfshxQHwAAAoQ"]
[Wed Mar 25 22:54:45.103123 2026] [:error] [pid 25875:tid 25887] [client 20.203.196.218:14109] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acP3NRJ38QkS3NyfshxQJgAAAoY"]
[Wed Mar 25 22:54:45.846068 2026] [:error] [pid 25969:tid 26027] [client 20.203.196.218:8192] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acP3NRd3aEUmOfdKja8ZtgAAA8E"]
[Wed Mar 25 22:54:46.618816 2026] [:error] [pid 892:tid 918] [client 20.203.196.218:16092] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acP3NiT_G8WMU3T3yxrnBwAAANM"]
[Wed Mar 25 22:54:47.511607 2026] [:error] [pid 47989:tid 48000] [client 20.203.196.218:11084] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acP3NyWKdJMhIccROjkTfQAAAUk"]
[Wed Mar 25 22:54:48.436679 2026] [:error] [pid 26321:tid 26346] [client 20.203.196.218:43006] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acP3OPKO65qqGZCSPZprcwAAAgY"]
[Wed Mar 25 22:55:38.136415 2026] [:error] [pid 25967:tid 25988] [client 20.203.196.218:39129] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acP3avg8Qtq7ZM4mSFmOKgAAA1A"]
[Wed Mar 25 22:55:38.831617 2026] [:error] [pid 47989:tid 48013] [client 20.203.196.218:11777] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acP3aiWKdJMhIccROjkTpAAAAVY"]
[Wed Mar 25 22:55:39.889856 2026] [:error] [pid 25967:tid 25982] [client 20.203.196.218:9088] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acP3a_g8Qtq7ZM4mSFmOLAAAA0o"]
[Wed Mar 25 22:55:40.578862 2026] [:error] [pid 47989:tid 47995] [client 20.203.196.218:19185] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acP3bCWKdJMhIccROjkTqQAAAUQ"]
[Wed Mar 25 22:55:42.101063 2026] [:error] [pid 47946:tid 47950] [client 20.203.196.218:24954] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acP3bjipQTqBMSeKYheOvwAAAQI"]
[Wed Mar 25 22:55:44.183926 2026] [:error] [pid 25875:tid 25895] [client 20.203.196.218:21664] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acP3cBJ38QkS3NyfshxQowAAAo4"]
[Wed Mar 25 22:55:45.487931 2026] [:error] [pid 25967:tid 25981] [client 20.203.196.218:32490] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acP3cfg8Qtq7ZM4mSFmOMAAAA0k"]
[Wed Mar 25 22:55:46.355328 2026] [:error] [pid 47989:tid 48000] [client 20.203.196.218:7516] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acP3ciWKdJMhIccROjkTqwAAAUk"]
[Wed Mar 25 22:55:47.553529 2026] [:error] [pid 25969:tid 26026] [client 20.203.196.218:30947] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acP3cxd3aEUmOfdKja8ZwAAAA8A"]
[Wed Mar 25 22:55:48.812989 2026] [:error] [pid 26449:tid 26477] [client 20.203.196.218:32460] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acP3dNpZ2T15NDqzAjGVdAAAAlg"]
[Wed Mar 25 22:55:50.700578 2026] [:error] [pid 25969:tid 26030] [client 20.203.196.218:32465] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acP3dhd3aEUmOfdKja8ZwgAAA8Q"]
[Wed Mar 25 22:55:51.554935 2026] [:error] [pid 25969:tid 26047] [client 20.203.196.218:30923] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acP3dxd3aEUmOfdKja8ZwwAAA9U"]
[Wed Mar 25 22:55:52.764187 2026] [:error] [pid 47989:tid 48013] [client 20.203.196.218:9149] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acP3eCWKdJMhIccROjkTswAAAVY"]
[Wed Mar 25 22:55:54.373428 2026] [:error] [pid 25967:tid 25980] [client 20.203.196.218:17560] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acP3evg8Qtq7ZM4mSFmOOgAAA0g"]
[Wed Mar 25 22:55:55.603879 2026] [:error] [pid 47989:tid 48014] [client 20.203.196.218:7489] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acP3eyWKdJMhIccROjkTuAAAAVc"]
[Wed Mar 25 22:55:56.839690 2026] [:error] [pid 47946:tid 47972] [client 20.203.196.218:19140] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acP3fDipQTqBMSeKYheOyAAAARg"]
[Wed Mar 25 22:55:58.918686 2026] [:error] [pid 47989:tid 47991] [client 20.203.196.218:17582] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acP3fiWKdJMhIccROjkTwAAAAUA"]
[Wed Mar 25 22:55:59.604947 2026] [:error] [pid 25875:tid 25885] [client 20.203.196.218:7512] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acP3fxJ38QkS3NyfshxQqQAAAoQ"]
[Wed Mar 25 22:56:00.219519 2026] [:error] [pid 26449:tid 26472] [client 20.203.196.218:17576] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acP3gNpZ2T15NDqzAjGVeQAAAlM"]
[Wed Mar 25 22:56:00.948747 2026] [:error] [pid 26269:tid 26298] [client 20.203.196.218:14151] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acP3gEn7e-ZQbaIs7qzIHgAAAZY"]
[Wed Mar 25 22:56:03.035356 2026] [:error] [pid 47989:tid 47999] [client 20.203.196.218:35701] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acP3gyWKdJMhIccROjkTxwAAAUg"]
[Wed Mar 25 22:56:05.571106 2026] [:error] [pid 25875:tid 25895] [client 20.203.196.218:14162] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acP3hRJ38QkS3NyfshxQrQAAAo4"]
[Wed Mar 25 22:56:06.431551 2026] [:error] [pid 25969:tid 26028] [client 20.203.196.218:36806] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acP3hhd3aEUmOfdKja8ZzgAAA8I"]
[Wed Mar 25 22:56:08.591429 2026] [:error] [pid 47989:tid 47994] [client 20.203.196.218:29691] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acP3iCWKdJMhIccROjkT0AAAAUM"]
[Wed Mar 25 22:56:09.919034 2026] [:error] [pid 47989:tid 48007] [client 20.203.196.218:36850] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acP3iSWKdJMhIccROjkT0wAAAVA"]
[Wed Mar 25 22:56:11.644196 2026] [:error] [pid 26449:tid 26465] [client 20.203.196.218:7514] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acP3i9pZ2T15NDqzAjGVfgAAAkw"]
[Wed Mar 25 22:56:12.589642 2026] [:error] [pid 26321:tid 26363] [client 20.203.196.218:7541] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acP3jPKO65qqGZCSPZprpwAAAhY"]
[Wed Mar 25 22:56:14.583581 2026] [:error] [pid 25967:tid 25972] [client 20.203.196.218:14488] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acP3jvg8Qtq7ZM4mSFmOUAAAA0A"]
[Wed Mar 25 22:57:30.582434 2026] [:error] [pid 25967:tid 25982] [client 20.203.196.218:26866] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acP32vg8Qtq7ZM4mSFmOwAAAA0o"]
[Wed Mar 25 22:57:31.479415 2026] [:error] [pid 25875:tid 25894] [client 20.203.196.218:36765] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acP32xJ38QkS3NyfshxRDQAAAo0"]
[Wed Mar 25 22:57:32.445353 2026] [:error] [pid 25875:tid 25885] [client 20.203.196.218:12262] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acP33BJ38QkS3NyfshxREgAAAoQ"]
[Wed Mar 25 22:57:33.317879 2026] [:error] [pid 25875:tid 25886] [client 20.203.196.218:38279] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acP33RJ38QkS3NyfshxRFgAAAoU"]
[Wed Mar 25 22:57:34.374005 2026] [:error] [pid 25875:tid 25894] [client 20.203.196.218:43220] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "acP33hJ38QkS3NyfshxRGwAAAo0"]
[Wed Mar 25 22:57:35.810319 2026] [:error] [pid 25875:tid 25898] [client 20.203.196.218:9877] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "acP33xJ38QkS3NyfshxRHQAAApE"]
[Wed Mar 25 22:57:37.964292 2026] [:error] [pid 26449:tid 26460] [client 20.203.196.218:30851] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "acP34dpZ2T15NDqzAjGVrAAAAkc"]
[Wed Mar 25 22:57:39.498057 2026] [:error] [pid 25875:tid 25900] [client 20.203.196.218:9913] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "acP34xJ38QkS3NyfshxRJgAAApM"]
[Wed Mar 25 22:57:41.205371 2026] [:error] [pid 25875:tid 25886] [client 20.203.196.218:17930] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acP35RJ38QkS3NyfshxRLQAAAoU"]
[Wed Mar 25 22:57:42.940101 2026] [:error] [pid 26449:tid 26465] [client 20.203.196.218:16787] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acP35tpZ2T15NDqzAjGVtAAAAkw"]
[Wed Mar 25 22:57:45.673747 2026] [:error] [pid 26321:tid 26358] [client 20.203.196.218:16826] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acP36fKO65qqGZCSPZpsLgAAAhE"]
[Wed Mar 25 22:57:46.447817 2026] [:error] [pid 25875:tid 25896] [client 20.203.196.218:35210] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acP36hJ38QkS3NyfshxRMQAAAo8"]
[Wed Mar 25 22:57:50.111907 2026] [:error] [pid 26269:tid 26295] [client 20.203.196.218:43242] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acP37kn7e-ZQbaIs7qzIMgAAAZM"]
[Wed Mar 25 22:57:51.547303 2026] [:error] [pid 25967:tid 25983] [client 20.203.196.218:25266] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acP37_g8Qtq7ZM4mSFmOygAAA0s"]
[Wed Mar 25 22:57:56.882630 2026] [:error] [pid 26321:tid 26340] [client 20.203.196.218:42926] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acP39PKO65qqGZCSPZpsOQAAAgE"]
[Wed Mar 25 22:57:57.609982 2026] [:error] [pid 25967:tid 25976] [client 20.203.196.218:22853] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acP39fg8Qtq7ZM4mSFmO0gAAA0Q"]
[Wed Mar 25 22:57:58.429853 2026] [:error] [pid 47989:tid 48006] [client 20.203.196.218:22794] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acP39iWKdJMhIccROjkUCQAAAU8"]
[Wed Mar 25 22:57:59.418788 2026] [:error] [pid 26321:tid 26349] [client 20.203.196.218:5024] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acP39_KO65qqGZCSPZpsOwAAAgg"]
[Wed Mar 25 22:58:01.186898 2026] [:error] [pid 25967:tid 25976] [client 20.203.196.218:22900] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acP3-fg8Qtq7ZM4mSFmO2wAAA0Q"]
[Wed Mar 25 22:58:01.794173 2026] [:error] [pid 25967:tid 25990] [client 20.203.196.218:8542] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acP3-fg8Qtq7ZM4mSFmO3gAAA1I"]
[Wed Mar 25 22:58:02.479471 2026] [:error] [pid 26321:tid 26361] [client 20.203.196.218:22861] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acP3-vKO65qqGZCSPZpsPQAAAhQ"]
[Wed Mar 25 22:58:03.387306 2026] [:error] [pid 25967:tid 25989] [client 20.203.196.218:28434] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acP3-_g8Qtq7ZM4mSFmO5gAAA1E"]
[Wed Mar 25 22:58:04.789167 2026] [:error] [pid 47989:tid 48001] [client 20.203.196.218:42924] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acP3_CWKdJMhIccROjkUEQAAAUo"]
[Wed Mar 25 22:58:05.806279 2026] [:error] [pid 756:tid 872] [client 20.203.196.218:18324] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acP3_TOaW6oylMIDBCQpxwAAAJQ"]
[Wed Mar 25 22:58:06.631308 2026] [:error] [pid 26449:tid 26458] [client 20.203.196.218:23293] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acP3_tpZ2T15NDqzAjGVuQAAAkU"]
[Wed Mar 25 22:58:07.475218 2026] [:error] [pid 47989:tid 47998] [client 20.203.196.218:37912] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acP3_yWKdJMhIccROjkUFAAAAUc"]
[Wed Mar 25 22:58:08.533435 2026] [:error] [pid 25875:tid 25883] [client 20.203.196.218:4196] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acP4ABJ38QkS3NyfshxRVQAAAoI"]
[Wed Mar 25 22:58:09.932531 2026] [:error] [pid 25875:tid 25897] [client 20.203.196.218:7813] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acP4ARJ38QkS3NyfshxRWwAAApA"]
[Wed Mar 25 22:58:10.569933 2026] [:error] [pid 892:tid 913] [client 20.203.196.218:18340] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "acP4AiT_G8WMU3T3yxrnRgAAAM8"]
[Wed Mar 25 22:58:11.496250 2026] [:error] [pid 25875:tid 25883] [client 20.203.196.218:24877] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "acP4AxJ38QkS3NyfshxRYAAAAoI"]
[Wed Mar 25 22:58:12.578907 2026] [:error] [pid 25875:tid 25884] [client 20.203.196.218:7824] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "acP4BBJ38QkS3NyfshxRZQAAAoM"]
[Wed Mar 25 22:58:13.246609 2026] [:error] [pid 25969:tid 26028] [client 20.203.196.218:24852] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "acP4BRd3aEUmOfdKja8aCwAAA8I"]
[Thu Mar 26 01:03:28.032505 2026] [proxy_fcgi:error] [pid 32829:tid 32838] [client 103.4.122.14:39988] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Mar 26 01:03:38.247162 2026] [proxy_fcgi:error] [pid 55735:tid 55871] [client 103.4.122.14:40062] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Mar 26 04:49:03.836779 2026] [:error] [pid 19710:tid 19739] [client 94.247.172.129:62866] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "acRKPwVEWP8Ar68Njk58HAAAABE"]
[Thu Mar 26 07:12:52.390725 2026] [:error] [pid 19818:tid 19829] [client 192.3.207.218:56824] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/artisan"] [unique_id "acRr9MzaSnm3d1BeM5WNdAAAAMk"]
[Thu Mar 26 07:12:52.820519 2026] [:error] [pid 19710:tid 19744] [client 192.3.207.218:57339] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/artisan"] [unique_id "acRr9AVEWP8Ar68Njk6opwAAABY"]
[Thu Mar 26 07:12:53.763002 2026] [:error] [pid 60829:tid 60849] [client 192.3.207.218:57645] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/artisan"] [unique_id "acRr9fTdjHKeZokybaQpqgAAARI"]
[Thu Mar 26 07:12:54.191701 2026] [:error] [pid 31717:tid 31729] [client 192.3.207.218:58288] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/artisan"] [unique_id "acRr9r-SCF7YDISDX49v2gAAAYc"]
[Thu Mar 26 07:12:55.142777 2026] [:error] [pid 31670:tid 31681] [client 192.3.207.218:58619] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "acRr9zXVthXxCnWjOTQxtgAAAUk"]
[Thu Mar 26 07:12:55.575122 2026] [:error] [pid 31780:tid 31827] [client 192.3.207.218:59534] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "acRr95JDwZsy5O4ZXEiUVAAAAgc"]
[Thu Mar 26 07:12:56.441997 2026] [:error] [pid 31778:tid 31816] [client 192.3.207.218:60040] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "acRr-A3kybI2o-xasmA3LAAAAdc"]
[Thu Mar 26 07:12:56.861011 2026] [:error] [pid 19711:tid 19759] [client 192.3.207.218:60906] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "acRr-Gj3l1y81GYfluRJ2wAAAEo"]
[Thu Mar 26 09:16:29.162739 2026] [:error] [pid 19818:tid 19827] [client 185.223.152.125:35993] [client 185.223.152.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.125, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acSI7czaSnm3d1BeM5WotwAAAMc"]
[Thu Mar 26 19:01:36.962970 2026] [:error] [pid 31670:tid 31694] [client 185.223.152.36:57871] [client 185.223.152.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.36, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acUSEDXVthXxCnWjOTSMDAAAAVY"]
[Thu Mar 26 21:11:16.327275 2026] [:error] [pid 19710:tid 19744] [client 4.206.17.96:60543] [client 4.206.17.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.17.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acUwdAVEWP8Ar68Njk4VCQAAABY"]
[Thu Mar 26 21:11:23.856457 2026] [autoindex:error] [pid 19710:tid 19737] [client 4.206.17.96:60543] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 26 21:11:24.070966 2026] [autoindex:error] [pid 19710:tid 19746] [client 4.206.17.96:60543] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 26 21:11:26.376936 2026] [autoindex:error] [pid 19710:tid 19744] [client 4.206.17.96:60543] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 26 21:11:34.705907 2026] [autoindex:error] [pid 19710:tid 19744] [client 4.206.17.96:60543] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 26 21:11:36.952271 2026] [:error] [pid 19710:tid 19741] [client 4.206.17.96:60543] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acUwiAVEWP8Ar68Njk4VMQAAABM"]
[Thu Mar 26 21:11:39.123963 2026] [autoindex:error] [pid 19712:tid 19799] [client 4.206.17.96:31866] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 26 21:11:44.717535 2026] [:error] [pid 19712:tid 19787] [client 4.206.17.96:31866] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/et-cache/"] [unique_id "acUwkNWhKhRNqm23vFMvtwAAAIs"]
[Thu Mar 26 21:11:45.541217 2026] [:error] [pid 19818:tid 19823] [client 4.206.17.96:31818] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/et-cache/"] [unique_id "acUwkczaSnm3d1BeM5Uw8gAAAMM"]
[Thu Mar 26 21:11:46.384804 2026] [:error] [pid 31778:tid 31800] [client 4.206.17.96:63381] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/et-cache/"] [unique_id "acUwkg3kybI2o-xasmAcbwAAAcc"]
[Thu Mar 26 21:11:47.224816 2026] [:error] [pid 19711:tid 19751] [client 4.206.17.96:63372] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/et-cache/"] [unique_id "acUwk2j3l1y81GYfluSj4AAAAEI"]
[Fri Mar 27 01:37:14.716288 2026] [:error] [pid 62147:tid 62481] [client 185.169.4.152:59955] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "acVuyhPjxn06mcLazN5_1QAAABU"]
[Fri Mar 27 08:19:35.865812 2026] [:error] [pid 27743:tid 27769] [client 185.223.152.98:21515] [client 185.223.152.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.98, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acXNFyA46UYYLqzw99ATigAAAAU"]
[Fri Mar 27 18:27:50.852330 2026] [:error] [pid 4341:tid 4349] [client 156.59.29.183:49633] [client 156.59.29.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.59.29.183, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acZbpuKJWrNB5dMlERF9wQAAAYY"]
[Fri Mar 27 19:37:54.997297 2026] [:error] [pid 4293:tid 4298] [client 51.103.48.143:31359] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cxs.php"] [unique_id "acZsEpLjeJUC3OKtEx9t9wAAAUM"]
[Fri Mar 27 19:37:56.422903 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:56010] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cxs.php"] [unique_id "acZsFJLjeJUC3OKtEx9t-gAAAVI"]
[Fri Mar 27 19:37:57.506312 2026] [:error] [pid 4341:tid 4365] [client 51.103.48.143:41626] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cxs.php"] [unique_id "acZsFeKJWrNB5dMlERGXCQAAAZY"]
[Fri Mar 27 19:38:01.260013 2026] [:error] [pid 27851:tid 27858] [client 51.103.48.143:25882] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cxs.php"] [unique_id "acZsGXR2ccxe3RMCLbrobQAAAMA"]
[Fri Mar 27 19:38:04.120191 2026] [:error] [pid 4293:tid 4318] [client 51.103.48.143:43624] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "acZsHJLjeJUC3OKtEx9uOQAAAVc"]
[Fri Mar 27 19:38:07.093686 2026] [:error] [pid 27851:tid 27859] [client 51.103.48.143:36550] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "acZsH3R2ccxe3RMCLbrocAAAAME"]
[Fri Mar 27 19:38:07.835697 2026] [:error] [pid 4293:tid 4311] [client 51.103.48.143:25308] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "acZsH5LjeJUC3OKtEx9uUwAAAVA"]
[Fri Mar 27 19:38:08.901567 2026] [:error] [pid 4293:tid 4300] [client 51.103.48.143:43607] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "acZsIJLjeJUC3OKtEx9uYgAAAUU"]
[Fri Mar 27 19:38:09.702314 2026] [:error] [pid 4293:tid 4305] [client 51.103.48.143:31355] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "acZsIZLjeJUC3OKtEx9uawAAAUo"]
[Fri Mar 27 19:38:10.644893 2026] [:error] [pid 27749:tid 27797] [client 51.103.48.143:43630] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "acZsIsEqyoMni2Q6_X7srwAAAEY"]
[Fri Mar 27 19:38:12.244430 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:45439] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "acZsJJLjeJUC3OKtEx9ufQAAAVU"]
[Fri Mar 27 19:38:13.101551 2026] [:error] [pid 4293:tid 4301] [client 51.103.48.143:56018] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "acZsJZLjeJUC3OKtEx9ugQAAAUY"]
[Fri Mar 27 19:38:14.082044 2026] [:error] [pid 63897:tid 63923] [client 51.103.48.143:41600] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "acZsJmVSkmYmLu7ycYhF5wAAARg"]
[Fri Mar 27 19:38:17.019231 2026] [:error] [pid 27743:tid 27772] [client 51.103.48.143:63807] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "acZsKSA46UYYLqzw99DTdgAAAAg"]
[Fri Mar 27 19:38:19.782509 2026] [:error] [pid 27750:tid 27821] [client 51.103.48.143:36555] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "acZsK4aSil5rd17ieLzrCQAAAIM"]
[Fri Mar 27 19:38:20.668056 2026] [:error] [pid 27743:tid 27785] [client 51.103.48.143:45438] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "acZsLCA46UYYLqzw99DTfwAAABU"]
[Fri Mar 27 19:38:21.449392 2026] [:error] [pid 27749:tid 27809] [client 51.103.48.143:63801] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "acZsLcEqyoMni2Q6_X7sswAAAFI"]
[Fri Mar 27 19:38:22.518777 2026] [:error] [pid 4341:tid 4359] [client 51.103.48.143:36545] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "acZsLuKJWrNB5dMlERGXNwAAAZA"]
[Fri Mar 27 19:38:23.334799 2026] [:error] [pid 27743:tid 27788] [client 51.103.48.143:43613] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "acZsLyA46UYYLqzw99DTiQAAABg"]
[Fri Mar 27 19:38:24.344391 2026] [:error] [pid 4341:tid 4355] [client 51.103.48.143:45424] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "acZsMOKJWrNB5dMlERGXOwAAAYw"]
[Fri Mar 27 19:38:25.554200 2026] [:error] [pid 27743:tid 27782] [client 51.103.48.143:64220] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "acZsMSA46UYYLqzw99DTjAAAABI"]
[Fri Mar 27 19:38:26.282790 2026] [:error] [pid 4341:tid 4350] [client 51.103.48.143:36546] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "acZsMuKJWrNB5dMlERGXRAAAAYc"]
[Fri Mar 27 19:38:27.157312 2026] [:error] [pid 27743:tid 27770] [client 51.103.48.143:33131] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "acZsMyA46UYYLqzw99DTkwAAAAY"]
[Fri Mar 27 19:38:28.051599 2026] [:error] [pid 4293:tid 4315] [client 51.103.48.143:41634] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "acZsNJLjeJUC3OKtEx9uiQAAAVQ"]
[Fri Mar 27 19:38:28.710578 2026] [:error] [pid 4341:tid 4362] [client 51.103.48.143:64199] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "acZsNOKJWrNB5dMlERGXSwAAAZM"]
[Fri Mar 27 19:38:30.217871 2026] [:error] [pid 4341:tid 4364] [client 51.103.48.143:33092] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "acZsNuKJWrNB5dMlERGXTgAAAZU"]
[Fri Mar 27 19:38:31.375353 2026] [:error] [pid 4293:tid 4312] [client 51.103.48.143:47991] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "acZsN5LjeJUC3OKtEx9uigAAAVE"]
[Fri Mar 27 19:38:32.923954 2026] [:error] [pid 63897:tid 63923] [client 51.103.48.143:5873] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "acZsOGVSkmYmLu7ycYhF9AAAARg"]
[Fri Mar 27 19:38:33.821922 2026] [:error] [pid 27851:tid 27875] [client 51.103.48.143:63775] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpmini.php"] [unique_id "acZsOXR2ccxe3RMCLbrojgAAANE"]
[Fri Mar 27 19:38:34.853207 2026] [:error] [pid 27749:tid 27791] [client 51.103.48.143:36576] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpmini.php"] [unique_id "acZsOsEqyoMni2Q6_X7suwAAAEA"]
[Fri Mar 27 19:38:35.893547 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:59927] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpmini.php"] [unique_id "acZsOyA46UYYLqzw99DTnQAAABM"]
[Fri Mar 27 19:38:37.284166 2026] [:error] [pid 4341:tid 4366] [client 51.103.48.143:43593] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpmini.php"] [unique_id "acZsPeKJWrNB5dMlERGXXgAAAZc"]
[Fri Mar 27 19:38:38.195305 2026] [:error] [pid 27743:tid 27768] [client 51.103.48.143:47966] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "acZsPiA46UYYLqzw99DTpQAAAAQ"]
[Fri Mar 27 19:38:40.503527 2026] [:error] [pid 27743:tid 27776] [client 51.103.48.143:64253] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "acZsQCA46UYYLqzw99DTqAAAAAw"]
[Fri Mar 27 19:39:45.984126 2026] [:error] [pid 27743:tid 27766] [client 51.103.48.143:5865] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acZsgSA46UYYLqzw99DUGwAAAAI"]
[Fri Mar 27 19:39:47.249004 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:56015] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acZsg5LjeJUC3OKtEx9vDAAAAVI"]
[Fri Mar 27 19:39:49.272196 2026] [:error] [pid 27749:tid 27814] [client 51.103.48.143:5839] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acZshcEqyoMni2Q6_X7s5gAAAFc"]
[Fri Mar 27 19:39:51.092498 2026] [:error] [pid 4341:tid 4364] [client 51.103.48.143:63765] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acZsh-KJWrNB5dMlERGXmwAAAZU"]
[Fri Mar 27 19:39:51.936384 2026] [:error] [pid 63897:tid 63905] [client 51.103.48.143:41659] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "acZsh2VSkmYmLu7ycYhGVwAAAQY"]
[Fri Mar 27 19:39:52.863776 2026] [:error] [pid 27750:tid 27837] [client 51.103.48.143:36556] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "acZsiIaSil5rd17ieLzrRQAAAJM"]
[Fri Mar 27 19:39:54.571265 2026] [:error] [pid 63897:tid 63921] [client 51.103.48.143:36585] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "acZsimVSkmYmLu7ycYhGWgAAARY"]
[Fri Mar 27 19:39:55.795450 2026] [:error] [pid 27750:tid 27839] [client 51.103.48.143:36605] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "acZsi4aSil5rd17ieLzrSgAAAJU"]
[Fri Mar 27 19:39:56.653992 2026] [:error] [pid 27749:tid 27802] [client 51.103.48.143:64236] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acZsjMEqyoMni2Q6_X7s9AAAAEs"]
[Fri Mar 27 19:39:57.619307 2026] [:error] [pid 27749:tid 27799] [client 51.103.48.143:64232] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acZsjcEqyoMni2Q6_X7s9wAAAEg"]
[Fri Mar 27 19:39:58.400591 2026] [:error] [pid 63897:tid 63919] [client 51.103.48.143:59959] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acZsjmVSkmYmLu7ycYhGXQAAARQ"]
[Fri Mar 27 19:39:59.459145 2026] [:error] [pid 63897:tid 63916] [client 51.103.48.143:5830] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acZsj2VSkmYmLu7ycYhGYAAAARE"]
[Fri Mar 27 19:40:01.299521 2026] [:error] [pid 27749:tid 27793] [client 51.103.48.143:5866] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "acZskcEqyoMni2Q6_X7s-AAAAEI"]
[Fri Mar 27 19:40:02.779473 2026] [:error] [pid 4293:tid 4314] [client 51.103.48.143:43590] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "acZskpLjeJUC3OKtEx9vEwAAAVM"]
[Fri Mar 27 19:40:04.168594 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:61792] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "acZslCA46UYYLqzw99DUNQAAABM"]
[Fri Mar 27 19:40:08.002717 2026] [:error] [pid 4293:tid 4303] [client 51.103.48.143:59942] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "acZsmJLjeJUC3OKtEx9vJQAAAUg"]
[Fri Mar 27 19:40:10.347690 2026] [:error] [pid 4341:tid 4351] [client 51.103.48.143:25328] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "acZsmuKJWrNB5dMlERGXtQAAAYg"]
[Fri Mar 27 19:40:13.299599 2026] [:error] [pid 4341:tid 4350] [client 51.103.48.143:61768] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "acZsneKJWrNB5dMlERGXuAAAAYc"]
[Fri Mar 27 19:40:15.475069 2026] [:error] [pid 27851:tid 27870] [client 51.103.48.143:64247] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "acZsn3R2ccxe3RMCLbro8AAAAMw"]
[Fri Mar 27 19:40:16.862397 2026] [:error] [pid 4293:tid 4310] [client 51.103.48.143:5846] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "acZsoJLjeJUC3OKtEx9vMwAAAU8"]
[Fri Mar 27 19:40:17.947741 2026] [:error] [pid 63897:tid 63910] [client 51.103.48.143:43641] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws50.php"] [unique_id "acZsoWVSkmYmLu7ycYhGhwAAAQs"]
[Fri Mar 27 19:40:19.863337 2026] [:error] [pid 4293:tid 4305] [client 51.103.48.143:64237] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws50.php"] [unique_id "acZso5LjeJUC3OKtEx9vOAAAAUo"]
[Fri Mar 27 19:40:20.869355 2026] [:error] [pid 27851:tid 27874] [client 51.103.48.143:42953] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws50.php"] [unique_id "acZspHR2ccxe3RMCLbro-AAAANA"]
[Fri Mar 27 19:40:21.802019 2026] [:error] [pid 4293:tid 4296] [client 51.103.48.143:45396] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws50.php"] [unique_id "acZspZLjeJUC3OKtEx9vPgAAAUE"]
[Fri Mar 27 19:40:22.813296 2026] [:error] [pid 27749:tid 27799] [client 51.103.48.143:41604] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws44.php"] [unique_id "acZspsEqyoMni2Q6_X7tDwAAAEg"]
[Fri Mar 27 19:40:24.348825 2026] [:error] [pid 63897:tid 63905] [client 51.103.48.143:42955] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws44.php"] [unique_id "acZsqGVSkmYmLu7ycYhGkgAAAQY"]
[Fri Mar 27 19:40:27.514802 2026] [:error] [pid 27749:tid 27803] [client 51.103.48.143:56034] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws44.php"] [unique_id "acZsq8EqyoMni2Q6_X7tGwAAAEw"]
[Fri Mar 27 19:40:28.229601 2026] [:error] [pid 4341:tid 4344] [client 51.103.48.143:31349] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws44.php"] [unique_id "acZsrOKJWrNB5dMlERGX1AAAAYE"]
[Fri Mar 27 19:40:29.479357 2026] [:error] [pid 63897:tid 63914] [client 51.103.48.143:43612] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "acZsrWVSkmYmLu7ycYhGlwAAAQ8"]
[Fri Mar 27 19:40:30.665018 2026] [:error] [pid 63897:tid 63916] [client 51.103.48.143:36566] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "acZsrmVSkmYmLu7ycYhGmgAAARE"]
[Fri Mar 27 19:40:31.244518 2026] [:error] [pid 27851:tid 27870] [client 51.103.48.143:42972] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "acZsr3R2ccxe3RMCLbrpFQAAAMw"]
[Fri Mar 27 19:40:32.215285 2026] [:error] [pid 4293:tid 4315] [client 51.103.48.143:31312] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "acZssJLjeJUC3OKtEx9vUwAAAVQ"]
[Fri Mar 27 19:40:33.303882 2026] [:error] [pid 63897:tid 63904] [client 51.103.48.143:47998] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "acZssWVSkmYmLu7ycYhGnQAAAQU"]
[Fri Mar 27 19:40:35.196557 2026] [:error] [pid 63897:tid 63910] [client 51.103.48.143:41642] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "acZss2VSkmYmLu7ycYhGpAAAAQs"]
[Fri Mar 27 19:40:37.618343 2026] [:error] [pid 4293:tid 4298] [client 51.103.48.143:56007] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "acZstZLjeJUC3OKtEx9vYQAAAUM"]
[Fri Mar 27 19:40:39.958094 2026] [:error] [pid 4341:tid 4348] [client 51.103.48.143:59943] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "acZst-KJWrNB5dMlERGX5AAAAYU"]
[Fri Mar 27 19:42:12.533855 2026] [:error] [pid 4293:tid 4304] [client 51.103.48.143:42991] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "acZtFJLjeJUC3OKtEx9wHwAAAUk"]
[Fri Mar 27 19:42:13.753918 2026] [:error] [pid 63897:tid 63907] [client 51.103.48.143:58670] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "acZtFWVSkmYmLu7ycYhHIgAAAQg"]
[Fri Mar 27 19:42:16.367522 2026] [:error] [pid 27750:tid 27837] [client 51.103.48.143:21872] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "acZtGIaSil5rd17ieLzrwwAAAJM"]
[Fri Mar 27 19:42:18.158622 2026] [:error] [pid 4293:tid 4319] [client 51.103.48.143:47231] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "acZtGpLjeJUC3OKtEx9wMAAAAVg"]
[Fri Mar 27 19:42:19.227046 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:44198] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roter.php"] [unique_id "acZtG5LjeJUC3OKtEx9wOgAAAVI"]
[Fri Mar 27 19:42:21.314296 2026] [:error] [pid 27743:tid 27771] [client 51.103.48.143:63196] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roter.php"] [unique_id "acZtHSA46UYYLqzw99DVPgAAAAc"]
[Fri Mar 27 19:42:23.264589 2026] [:error] [pid 4341:tid 4367] [client 51.103.48.143:37532] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roter.php"] [unique_id "acZtH-KJWrNB5dMlERGYhwAAAZg"]
[Fri Mar 27 19:42:24.067382 2026] [:error] [pid 63897:tid 63902] [client 51.103.48.143:57832] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roter.php"] [unique_id "acZtIGVSkmYmLu7ycYhHQQAAAQM"]
[Fri Mar 27 19:42:25.568344 2026] [:error] [pid 4341:tid 4367] [client 51.103.48.143:46485] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "acZtIeKJWrNB5dMlERGYmwAAAZg"]
[Fri Mar 27 19:42:26.200696 2026] [:error] [pid 27743:tid 27767] [client 51.103.48.143:37537] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "acZtIiA46UYYLqzw99DVRAAAAAM"]
[Fri Mar 27 19:42:27.189042 2026] [:error] [pid 27743:tid 27788] [client 51.103.48.143:55377] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "acZtIyA46UYYLqzw99DVSQAAABg"]
[Fri Mar 27 19:42:28.649360 2026] [:error] [pid 27743:tid 27778] [client 51.103.48.143:47199] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/size.php"] [unique_id "acZtJCA46UYYLqzw99DVTgAAAA4"]
[Fri Mar 27 19:42:29.409740 2026] [:error] [pid 4293:tid 4306] [client 51.103.48.143:21808] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "acZtJZLjeJUC3OKtEx9wXAAAAUs"]
[Fri Mar 27 19:42:30.410413 2026] [:error] [pid 4293:tid 4304] [client 51.103.48.143:21838] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "acZtJpLjeJUC3OKtEx9wXwAAAUk"]
[Fri Mar 27 19:42:31.878868 2026] [:error] [pid 63897:tid 63900] [client 51.103.48.143:57808] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "acZtJ2VSkmYmLu7ycYhHSgAAAQE"]
[Fri Mar 27 19:42:32.596834 2026] [:error] [pid 27851:tid 27867] [client 51.103.48.143:33752] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "acZtKHR2ccxe3RMCLbrpjgAAAMk"]
[Fri Mar 27 19:42:33.473897 2026] [:error] [pid 27750:tid 27821] [client 51.103.48.143:62421] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acZtKYaSil5rd17ieLzr0QAAAIM"]
[Fri Mar 27 19:42:34.368002 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:49748] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acZtKiA46UYYLqzw99DVVwAAABM"]
[Fri Mar 27 19:42:35.068465 2026] [:error] [pid 4341:tid 4343] [client 51.103.48.143:44207] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acZtK-KJWrNB5dMlERGYpQAAAYA"]
[Fri Mar 27 19:42:35.916092 2026] [:error] [pid 27743:tid 27777] [client 51.103.48.143:20491] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acZtKyA46UYYLqzw99DVWwAAAA0"]
[Fri Mar 27 19:42:36.472334 2026] [:error] [pid 27851:tid 27874] [client 51.103.48.143:55418] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n1GiO.php"] [unique_id "acZtLHR2ccxe3RMCLbrpkgAAANA"]
[Fri Mar 27 19:42:37.235920 2026] [:error] [pid 27750:tid 27824] [client 51.103.48.143:21881] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n1GiO.php"] [unique_id "acZtLYaSil5rd17ieLzr1QAAAIY"]
[Fri Mar 27 19:42:37.855430 2026] [:error] [pid 27743:tid 27785] [client 51.103.48.143:32458] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n1GiO.php"] [unique_id "acZtLSA46UYYLqzw99DVZQAAABU"]
[Fri Mar 27 19:42:40.072279 2026] [:error] [pid 27750:tid 27829] [client 51.103.48.143:58640] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n1GiO.php"] [unique_id "acZtMIaSil5rd17ieLzr2gAAAIs"]
[Fri Mar 27 19:42:41.704684 2026] [:error] [pid 27743:tid 27785] [client 51.103.48.143:20502] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pLdK1.php"] [unique_id "acZtMSA46UYYLqzw99DVcgAAABU"]
[Fri Mar 27 19:42:43.179153 2026] [:error] [pid 27743:tid 27785] [client 51.103.48.143:55386] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pLdK1.php"] [unique_id "acZtMyA46UYYLqzw99DVgAAAABU"]
[Fri Mar 27 19:42:43.810276 2026] [:error] [pid 63897:tid 63900] [client 51.103.48.143:21874] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pLdK1.php"] [unique_id "acZtM2VSkmYmLu7ycYhHVAAAAQE"]
[Fri Mar 27 19:42:45.236619 2026] [:error] [pid 63897:tid 63899] [client 51.103.48.143:59858] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pLdK1.php"] [unique_id "acZtNWVSkmYmLu7ycYhHVwAAAQA"]
[Fri Mar 27 19:42:47.311789 2026] [:error] [pid 27749:tid 27804] [client 51.103.48.143:42904] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/llb1J.php"] [unique_id "acZtN8EqyoMni2Q6_X7tmQAAAE0"]
[Fri Mar 27 19:42:48.743830 2026] [:error] [pid 27743:tid 27780] [client 51.103.48.143:42882] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/llb1J.php"] [unique_id "acZtOCA46UYYLqzw99DVmAAAABA"]
[Fri Mar 27 19:42:49.978648 2026] [:error] [pid 4293:tid 4319] [client 51.103.48.143:58680] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/llb1J.php"] [unique_id "acZtOZLjeJUC3OKtEx9wfwAAAVg"]
[Fri Mar 27 19:42:50.743093 2026] [:error] [pid 4341:tid 4352] [client 51.103.48.143:47226] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/llb1J.php"] [unique_id "acZtOuKJWrNB5dMlERGYwAAAAYk"]
[Fri Mar 27 19:42:51.929936 2026] [:error] [pid 27851:tid 27861] [client 51.103.48.143:20513] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jeZDu.php"] [unique_id "acZtO3R2ccxe3RMCLbrpmwAAAMM"]
[Fri Mar 27 19:42:53.321249 2026] [:error] [pid 27743:tid 27778] [client 51.103.48.143:20533] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jeZDu.php"] [unique_id "acZtPSA46UYYLqzw99DVoAAAAA4"]
[Fri Mar 27 19:42:54.100541 2026] [:error] [pid 27743:tid 27779] [client 51.103.48.143:46473] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jeZDu.php"] [unique_id "acZtPiA46UYYLqzw99DVpQAAAA8"]
[Fri Mar 27 19:42:55.293185 2026] [:error] [pid 4341:tid 4364] [client 51.103.48.143:44178] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jeZDu.php"] [unique_id "acZtP-KJWrNB5dMlERGYyAAAAZU"]
[Fri Mar 27 19:42:56.278573 2026] [:error] [pid 27743:tid 27773] [client 51.103.48.143:46478] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "acZtQCA46UYYLqzw99DVrAAAAAk"]
[Fri Mar 27 19:42:57.502632 2026] [:error] [pid 27749:tid 27802] [client 51.103.48.143:47206] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "acZtQcEqyoMni2Q6_X7tngAAAEs"]
[Fri Mar 27 19:42:58.278174 2026] [:error] [pid 27749:tid 27791] [client 51.103.48.143:46488] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "acZtQsEqyoMni2Q6_X7toAAAAEA"]
[Fri Mar 27 19:42:58.897844 2026] [:error] [pid 27749:tid 27799] [client 51.103.48.143:21883] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "acZtQsEqyoMni2Q6_X7towAAAEg"]
[Fri Mar 27 19:42:59.607209 2026] [:error] [pid 27750:tid 27836] [client 51.103.48.143:21871] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfuKK.php"] [unique_id "acZtQ4aSil5rd17ieLzr8gAAAJI"]
[Fri Mar 27 19:43:00.459140 2026] [:error] [pid 63897:tid 63923] [client 51.103.48.143:42925] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfuKK.php"] [unique_id "acZtRGVSkmYmLu7ycYhHbwAAARg"]
[Fri Mar 27 19:43:01.407890 2026] [:error] [pid 27743:tid 27775] [client 51.103.48.143:58625] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfuKK.php"] [unique_id "acZtRSA46UYYLqzw99DVsQAAAAs"]
[Fri Mar 27 19:43:02.084398 2026] [:error] [pid 27743:tid 27764] [client 51.103.48.143:20520] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfuKK.php"] [unique_id "acZtRiA46UYYLqzw99DVtAAAAAA"]
[Fri Mar 27 19:43:03.226914 2026] [:error] [pid 4293:tid 4317] [client 51.103.48.143:44183] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OpVq6.php"] [unique_id "acZtR5LjeJUC3OKtEx9wigAAAVY"]
[Fri Mar 27 19:43:04.551721 2026] [:error] [pid 27851:tid 27862] [client 51.103.48.143:21878] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OpVq6.php"] [unique_id "acZtSHR2ccxe3RMCLbrpqAAAAMQ"]
[Fri Mar 27 19:43:05.331574 2026] [:error] [pid 27743:tid 27771] [client 51.103.48.143:46472] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OpVq6.php"] [unique_id "acZtSSA46UYYLqzw99DVvAAAAAc"]
[Fri Mar 27 19:43:06.257542 2026] [:error] [pid 27743:tid 27773] [client 51.103.48.143:57837] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OpVq6.php"] [unique_id "acZtSiA46UYYLqzw99DVvgAAAAk"]
[Fri Mar 27 19:43:07.633340 2026] [:error] [pid 27750:tid 27820] [client 51.103.48.143:44184] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Q73BO.php"] [unique_id "acZtS4aSil5rd17ieLzr9wAAAII"]
[Fri Mar 27 19:43:08.334477 2026] [:error] [pid 4341:tid 4346] [client 51.103.48.143:57847] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Q73BO.php"] [unique_id "acZtTOKJWrNB5dMlERGY3QAAAYM"]
[Fri Mar 27 19:43:09.070226 2026] [:error] [pid 27743:tid 27768] [client 51.103.48.143:55363] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Q73BO.php"] [unique_id "acZtTSA46UYYLqzw99DVwgAAAAQ"]
[Fri Mar 27 19:44:00.496717 2026] [:error] [pid 4293:tid 4304] [client 51.103.48.143:21881] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc13.php"] [unique_id "acZtgJLjeJUC3OKtEx9xGAAAAUk"]
[Fri Mar 27 19:44:01.184755 2026] [:error] [pid 4293:tid 4295] [client 51.103.48.143:21869] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc13.php"] [unique_id "acZtgZLjeJUC3OKtEx9xGgAAAUA"]
[Fri Mar 27 19:44:02.151805 2026] [:error] [pid 27743:tid 27765] [client 51.103.48.143:46468] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc13.php"] [unique_id "acZtgiA46UYYLqzw99DWNQAAAAE"]
[Fri Mar 27 19:44:02.912072 2026] [:error] [pid 63897:tid 63902] [client 51.103.48.143:58636] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc13.php"] [unique_id "acZtgmVSkmYmLu7ycYhHxgAAAQM"]
[Fri Mar 27 19:44:03.792290 2026] [:error] [pid 27743:tid 27788] [client 51.103.48.143:47218] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "acZtgyA46UYYLqzw99DWOQAAABg"]
[Fri Mar 27 19:44:04.482250 2026] [:error] [pid 4293:tid 4317] [client 51.103.48.143:34701] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "acZthJLjeJUC3OKtEx9xJQAAAVY"]
[Fri Mar 27 19:44:05.134409 2026] [:error] [pid 4293:tid 4303] [client 51.103.48.143:43523] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "acZthZLjeJUC3OKtEx9xKwAAAUg"]
[Fri Mar 27 19:44:05.779883 2026] [:error] [pid 4293:tid 4304] [client 51.103.48.143:49747] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "acZthZLjeJUC3OKtEx9xLwAAAUk"]
[Fri Mar 27 19:44:06.746710 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:20486] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acZthpLjeJUC3OKtEx9xOgAAAVU"]
[Fri Mar 27 19:44:07.363581 2026] [:error] [pid 27851:tid 27863] [client 51.103.48.143:55364] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acZth3R2ccxe3RMCLbrp0AAAAMU"]
[Fri Mar 27 19:44:08.314551 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:21793] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acZtiJLjeJUC3OKtEx9xUQAAAVI"]
[Fri Mar 27 19:44:09.505833 2026] [:error] [pid 4293:tid 4314] [client 51.103.48.143:21763] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acZtiZLjeJUC3OKtEx9xXQAAAVM"]
[Fri Mar 27 19:44:12.413099 2026] [:error] [pid 27750:tid 27835] [client 51.103.48.143:49749] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "acZtjIaSil5rd17ieLzsMwAAAJE"]
[Fri Mar 27 19:44:16.354748 2026] [:error] [pid 27743:tid 27764] [client 51.103.48.143:59847] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "acZtkCA46UYYLqzw99DWcQAAAAA"]
[Fri Mar 27 19:44:22.667572 2026] [:error] [pid 4293:tid 4297] [client 51.103.48.143:32505] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "acZtlpLjeJUC3OKtEx9xgQAAAUI"]
[Fri Mar 27 19:44:23.508965 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:58629] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "acZtl5LjeJUC3OKtEx9xhQAAAVI"]
[Fri Mar 27 19:44:24.755954 2026] [:error] [pid 4293:tid 4302] [client 51.103.48.143:42931] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "acZtmJLjeJUC3OKtEx9xkQAAAUc"]
[Fri Mar 27 19:44:25.891505 2026] [:error] [pid 4341:tid 4343] [client 51.103.48.143:42890] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "acZtmeKJWrNB5dMlERGZPAAAAYA"]
[Fri Mar 27 19:44:26.815379 2026] [:error] [pid 4293:tid 4300] [client 51.103.48.143:43556] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "acZtmpLjeJUC3OKtEx9xlQAAAUU"]
[Fri Mar 27 19:44:27.859126 2026] [:error] [pid 4293:tid 4306] [client 51.103.48.143:50425] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "acZtm5LjeJUC3OKtEx9xngAAAUs"]
[Fri Mar 27 19:44:29.754247 2026] [:error] [pid 27749:tid 27792] [client 51.103.48.143:42885] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "acZtncEqyoMni2Q6_X7t4AAAAEE"]
[Fri Mar 27 19:44:32.716476 2026] [:error] [pid 27749:tid 27796] [client 51.103.48.143:42941] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "acZtoMEqyoMni2Q6_X7t5QAAAEU"]
[Fri Mar 27 19:44:35.288057 2026] [:error] [pid 4341:tid 4343] [client 51.103.48.143:55397] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "acZto-KJWrNB5dMlERGZTwAAAYA"]
[Fri Mar 27 19:44:37.199367 2026] [:error] [pid 4341:tid 4354] [client 51.103.48.143:58670] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "acZtpeKJWrNB5dMlERGZVQAAAYs"]
[Fri Mar 27 19:44:38.412525 2026] [:error] [pid 4341:tid 4343] [client 51.103.48.143:46476] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dragonshell.php"] [unique_id "acZtpuKJWrNB5dMlERGZVwAAAYA"]
[Fri Mar 27 19:44:40.669393 2026] [:error] [pid 4293:tid 4311] [client 51.103.48.143:46504] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dragonshell.php"] [unique_id "acZtqJLjeJUC3OKtEx9xvQAAAVA"]
[Fri Mar 27 19:44:41.519981 2026] [:error] [pid 27743:tid 27769] [client 51.103.48.143:43526] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dragonshell.php"] [unique_id "acZtqSA46UYYLqzw99DWmwAAAAU"]
[Fri Mar 27 19:44:42.513023 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:32450] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dragonshell.php"] [unique_id "acZtqiA46UYYLqzw99DWnwAAABM"]
[Fri Mar 27 19:44:43.486371 2026] [:error] [pid 63897:tid 63906] [client 51.103.48.143:40473] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "acZtq2VSkmYmLu7ycYhH7wAAAQc"]
[Fri Mar 27 19:44:45.086194 2026] [:error] [pid 27749:tid 27806] [client 51.103.48.143:43531] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "acZtrcEqyoMni2Q6_X7t-AAAAE8"]
[Fri Mar 27 19:44:45.858515 2026] [:error] [pid 27750:tid 27826] [client 51.103.48.143:49789] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "acZtrYaSil5rd17ieLzsWgAAAIg"]
[Fri Mar 27 19:44:46.519090 2026] [:error] [pid 27750:tid 27820] [client 51.103.48.143:44188] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "acZtroaSil5rd17ieLzsXAAAAII"]
[Fri Mar 27 19:44:47.357879 2026] [:error] [pid 27750:tid 27819] [client 51.103.48.143:49756] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/caiij.php"] [unique_id "acZtr4aSil5rd17ieLzsXQAAAIE"]
[Fri Mar 27 19:44:48.340984 2026] [:error] [pid 63897:tid 63920] [client 51.103.48.143:40460] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/caiij.php"] [unique_id "acZtsGVSkmYmLu7ycYhH9wAAARU"]
[Fri Mar 27 19:44:49.857926 2026] [:error] [pid 4293:tid 4308] [client 51.103.48.143:49731] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/caiij.php"] [unique_id "acZtsZLjeJUC3OKtEx9x1gAAAU0"]
[Fri Mar 27 19:44:51.481402 2026] [:error] [pid 4293:tid 4307] [client 51.103.48.143:47203] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/caiij.php"] [unique_id "acZts5LjeJUC3OKtEx9x3gAAAUw"]
[Fri Mar 27 19:44:52.811153 2026] [:error] [pid 4293:tid 4305] [client 51.103.48.143:20519] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "acZttJLjeJUC3OKtEx9x5AAAAUo"]
[Fri Mar 27 19:44:53.564501 2026] [:error] [pid 63897:tid 63907] [client 51.103.48.143:43552] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "acZttWVSkmYmLu7ycYhH_gAAAQg"]
[Fri Mar 27 19:44:54.354011 2026] [:error] [pid 4341:tid 4366] [client 51.103.48.143:20527] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "acZttuKJWrNB5dMlERGZbAAAAZc"]
[Fri Mar 27 19:44:55.210692 2026] [:error] [pid 27749:tid 27795] [client 51.103.48.143:42896] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "acZtt8EqyoMni2Q6_X7t_gAAAEQ"]
[Fri Mar 27 19:44:56.239317 2026] [:error] [pid 4341:tid 4352] [client 51.103.48.143:47224] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "acZtuOKJWrNB5dMlERGZcAAAAYk"]
[Fri Mar 27 19:44:57.405261 2026] [:error] [pid 27750:tid 27840] [client 51.103.48.143:55369] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "acZtuYaSil5rd17ieLzsZgAAAJY"]
[Fri Mar 27 19:45:46.988533 2026] [:error] [pid 27851:tid 27877] [client 51.103.48.143:47182] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wta.php"] [unique_id "acZt6nR2ccxe3RMCLbrqGAAAANM"]
[Fri Mar 27 19:46:00.898294 2026] [:error] [pid 27743:tid 27765] [client 51.103.48.143:40040] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wta.php"] [unique_id "acZt-CA46UYYLqzw99DW_AAAAAE"]
[Fri Mar 27 19:46:03.820306 2026] [:error] [pid 27750:tid 27831] [client 51.103.48.143:30155] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "acZt-4aSil5rd17ieLzshQAAAI0"]
[Fri Mar 27 19:46:04.639882 2026] [:error] [pid 4293:tid 4306] [client 51.103.48.143:20566] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "acZt_JLjeJUC3OKtEx9yowAAAUs"]
[Fri Mar 27 19:46:05.297886 2026] [:error] [pid 63897:tid 63909] [client 51.103.48.143:20590] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "acZt_WVSkmYmLu7ycYhINgAAAQo"]
[Fri Mar 27 19:46:06.324414 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:48497] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "acZt_iA46UYYLqzw99DXBQAAABM"]
[Fri Mar 27 19:46:07.273822 2026] [:error] [pid 63897:tid 63918] [client 51.103.48.143:5716] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acZt_2VSkmYmLu7ycYhIOAAAARM"]
[Fri Mar 27 19:46:08.146449 2026] [:error] [pid 63897:tid 63905] [client 51.103.48.143:40033] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acZuAGVSkmYmLu7ycYhIOQAAAQY"]
[Fri Mar 27 19:46:09.209125 2026] [:error] [pid 27743:tid 27774] [client 51.103.48.143:50322] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acZuASA46UYYLqzw99DXDAAAAAo"]
[Fri Mar 27 19:46:09.932878 2026] [:error] [pid 27743:tid 27773] [client 51.103.48.143:38893] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "acZuASA46UYYLqzw99DXDgAAAAk"]
[Fri Mar 27 19:46:10.800797 2026] [:error] [pid 27743:tid 27788] [client 51.103.48.143:30179] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "acZuAiA46UYYLqzw99DXEAAAABg"]
[Fri Mar 27 19:46:11.644636 2026] [:error] [pid 27743:tid 27776] [client 51.103.48.143:30188] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "acZuAyA46UYYLqzw99DXEgAAAAw"]
[Fri Mar 27 19:46:12.368092 2026] [:error] [pid 27851:tid 27869] [client 51.103.48.143:63731] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "acZuBHR2ccxe3RMCLbrqIwAAAMs"]
[Fri Mar 27 19:46:13.077952 2026] [:error] [pid 27750:tid 27838] [client 51.103.48.143:50359] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "acZuBYaSil5rd17ieLzsjgAAAJQ"]
[Fri Mar 27 19:46:13.845279 2026] [:error] [pid 27750:tid 27829] [client 51.103.48.143:5758] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "acZuBYaSil5rd17ieLzskQAAAIs"]
[Fri Mar 27 19:46:14.927919 2026] [:error] [pid 27743:tid 27780] [client 51.103.48.143:30169] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "acZuBiA46UYYLqzw99DXGQAAABA"]
[Fri Mar 27 19:46:15.683470 2026] [:error] [pid 4341:tid 4361] [client 51.103.48.143:5711] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "acZuB-KJWrNB5dMlERGZygAAAZI"]
[Fri Mar 27 19:46:16.441214 2026] [:error] [pid 4341:tid 4343] [client 51.103.48.143:40000] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "acZuCOKJWrNB5dMlERGZywAAAYA"]
[Fri Mar 27 19:46:17.048701 2026] [:error] [pid 63897:tid 63917] [client 51.103.48.143:39518] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acZuCWVSkmYmLu7ycYhIPgAAARI"]
[Fri Mar 27 19:46:17.916196 2026] [:error] [pid 27743:tid 27786] [client 51.103.48.143:48475] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acZuCSA46UYYLqzw99DXHwAAABY"]
[Fri Mar 27 19:46:19.145807 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:30180] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acZuC5LjeJUC3OKtEx9yvgAAAVU"]
[Fri Mar 27 19:46:19.812705 2026] [:error] [pid 27743:tid 27766] [client 51.103.48.143:47775] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acZuCyA46UYYLqzw99DXIgAAAAI"]
[Fri Mar 27 19:46:20.644974 2026] [:error] [pid 4293:tid 4297] [client 51.103.48.143:38908] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "acZuDJLjeJUC3OKtEx9yxgAAAUI"]
[Fri Mar 27 19:46:21.449163 2026] [:error] [pid 27743:tid 27768] [client 51.103.48.143:5752] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "acZuDSA46UYYLqzw99DXJgAAAAQ"]
[Fri Mar 27 19:46:22.012309 2026] [:error] [pid 27750:tid 27842] [client 51.103.48.143:5733] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "acZuDoaSil5rd17ieLzslwAAAJg"]
[Fri Mar 27 19:46:23.556324 2026] [:error] [pid 27851:tid 27862] [client 51.103.48.143:30157] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "acZuD3R2ccxe3RMCLbrqLgAAAMQ"]
[Fri Mar 27 19:46:24.558882 2026] [:error] [pid 4293:tid 4308] [client 51.103.48.143:5713] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "acZuEJLjeJUC3OKtEx9y3QAAAU0"]
[Fri Mar 27 19:46:25.466474 2026] [:error] [pid 4293:tid 4307] [client 51.103.48.143:40045] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "acZuEZLjeJUC3OKtEx9y4gAAAUw"]
[Fri Mar 27 19:46:26.198377 2026] [:error] [pid 4293:tid 4300] [client 51.103.48.143:63708] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "acZuEpLjeJUC3OKtEx9y5gAAAUU"]
[Fri Mar 27 19:46:26.992698 2026] [:error] [pid 4293:tid 4319] [client 51.103.48.143:38861] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "acZuEpLjeJUC3OKtEx9y7QAAAVg"]
[Fri Mar 27 19:46:27.700344 2026] [:error] [pid 27750:tid 27826] [client 51.103.48.143:47771] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bywaf.php"] [unique_id "acZuE4aSil5rd17ieLzsmgAAAIg"]
[Fri Mar 27 19:46:28.498844 2026] [:error] [pid 27743:tid 27778] [client 51.103.48.143:48491] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bywaf.php"] [unique_id "acZuFCA46UYYLqzw99DXLgAAAA4"]
[Fri Mar 27 19:46:29.208888 2026] [:error] [pid 27743:tid 27784] [client 51.103.48.143:50313] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bywaf.php"] [unique_id "acZuFSA46UYYLqzw99DXMAAAABQ"]
[Fri Mar 27 19:46:29.955087 2026] [:error] [pid 27743:tid 27771] [client 51.103.48.143:62473] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bywaf.php"] [unique_id "acZuFSA46UYYLqzw99DXNAAAAAc"]
[Fri Mar 27 19:46:30.614673 2026] [:error] [pid 4293:tid 4304] [client 51.103.48.143:30197] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-true.php"] [unique_id "acZuFpLjeJUC3OKtEx9y-gAAAUk"]
[Fri Mar 27 19:46:31.485817 2026] [:error] [pid 4293:tid 4310] [client 51.103.48.143:63697] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-true.php"] [unique_id "acZuF5LjeJUC3OKtEx9zAQAAAU8"]
[Fri Mar 27 19:46:32.334368 2026] [:error] [pid 4293:tid 4297] [client 51.103.48.143:5710] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-true.php"] [unique_id "acZuGJLjeJUC3OKtEx9zBwAAAUI"]
[Fri Mar 27 19:46:34.632176 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:50333] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-true.php"] [unique_id "acZuGiA46UYYLqzw99DXOAAAABM"]
[Fri Mar 27 19:46:35.695036 2026] [:error] [pid 4341:tid 4361] [client 51.103.48.143:40060] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "acZuG-KJWrNB5dMlERGZ3AAAAZI"]
[Fri Mar 27 19:46:37.845573 2026] [:error] [pid 63897:tid 63918] [client 51.103.48.143:35311] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "acZuHWVSkmYmLu7ycYhISQAAARM"]
[Fri Mar 27 19:46:39.398228 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:62498] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "acZuH5LjeJUC3OKtEx9zHAAAAVU"]
[Fri Mar 27 19:46:40.477270 2026] [:error] [pid 4341:tid 4350] [client 51.103.48.143:38884] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "acZuIOKJWrNB5dMlERGZ4AAAAYc"]
[Fri Mar 27 19:46:41.347332 2026] [:error] [pid 4341:tid 4354] [client 51.103.48.143:48484] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx88.php"] [unique_id "acZuIeKJWrNB5dMlERGZ4wAAAYs"]
[Fri Mar 27 19:46:42.122897 2026] [:error] [pid 27851:tid 27861] [client 51.103.48.143:20553] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx88.php"] [unique_id "acZuInR2ccxe3RMCLbrqOwAAAMM"]
[Fri Mar 27 19:46:43.002121 2026] [:error] [pid 27743:tid 27775] [client 51.103.48.143:47794] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx88.php"] [unique_id "acZuIyA46UYYLqzw99DXQQAAAAs"]
[Fri Mar 27 19:47:31.878530 2026] [:error] [pid 4341:tid 4354] [client 51.103.48.143:39494] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "acZuU-KJWrNB5dMlERGaOAAAAYs"]
[Fri Mar 27 19:47:32.762925 2026] [:error] [pid 27851:tid 27861] [client 51.103.48.143:38850] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "acZuVHR2ccxe3RMCLbrqXgAAAMM"]
[Fri Mar 27 19:47:34.339536 2026] [:error] [pid 4293:tid 4299] [client 51.103.48.143:5727] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "acZuVpLjeJUC3OKtEx9zvAAAAUQ"]
[Fri Mar 27 19:47:35.084320 2026] [:error] [pid 27749:tid 27813] [client 51.103.48.143:38880] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "acZuV8EqyoMni2Q6_X7uOAAAAFY"]
[Fri Mar 27 19:47:36.001734 2026] [:error] [pid 4293:tid 4303] [client 51.103.48.143:20552] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "acZuWJLjeJUC3OKtEx9zxAAAAUg"]
[Fri Mar 27 19:47:36.867486 2026] [:error] [pid 27749:tid 27810] [client 51.103.48.143:5734] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "acZuWMEqyoMni2Q6_X7uPAAAAFM"]
[Fri Mar 27 19:47:38.014904 2026] [:error] [pid 4293:tid 4307] [client 51.103.48.143:57894] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "acZuWpLjeJUC3OKtEx9zzwAAAUw"]
[Fri Mar 27 19:47:39.112308 2026] [:error] [pid 4293:tid 4319] [client 51.103.48.143:57881] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "acZuW5LjeJUC3OKtEx9z0wAAAVg"]
[Fri Mar 27 19:47:39.891698 2026] [:error] [pid 4341:tid 4360] [client 51.103.48.143:48467] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "acZuW-KJWrNB5dMlERGaRAAAAZE"]
[Fri Mar 27 19:47:41.301815 2026] [:error] [pid 27743:tid 27765] [client 51.103.48.143:62506] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "acZuXSA46UYYLqzw99DXhwAAAAE"]
[Fri Mar 27 19:47:43.655253 2026] [:error] [pid 63897:tid 63914] [client 51.103.48.143:47748] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "acZuX2VSkmYmLu7ycYhIiAAAAQ8"]
[Fri Mar 27 19:47:45.634931 2026] [:error] [pid 4341:tid 4365] [client 51.103.48.143:57883] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "acZuYeKJWrNB5dMlERGaTAAAAZY"]
[Fri Mar 27 19:47:46.389651 2026] [:error] [pid 27743:tid 27787] [client 51.103.48.143:40052] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpass.php"] [unique_id "acZuYiA46UYYLqzw99DXjwAAABc"]
[Fri Mar 27 19:47:47.153696 2026] [:error] [pid 4341:tid 4362] [client 51.103.48.143:65476] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpass.php"] [unique_id "acZuY-KJWrNB5dMlERGaTgAAAZM"]
[Fri Mar 27 19:47:48.522673 2026] [:error] [pid 4293:tid 4312] [client 51.103.48.143:44900] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpass.php"] [unique_id "acZuZJLjeJUC3OKtEx9z4AAAAVE"]
[Fri Mar 27 19:47:50.021912 2026] [:error] [pid 27750:tid 27819] [client 51.103.48.143:5714] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpass.php"] [unique_id "acZuZoaSil5rd17ieLzszwAAAIE"]
[Fri Mar 27 19:47:52.216909 2026] [:error] [pid 4293:tid 4318] [client 51.103.48.143:5739] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "acZuaJLjeJUC3OKtEx9z6QAAAVc"]
[Fri Mar 27 19:47:53.920451 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:40053] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "acZuaZLjeJUC3OKtEx9z8QAAAVI"]
[Fri Mar 27 19:47:55.042448 2026] [:error] [pid 27851:tid 27877] [client 51.103.48.143:38864] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "acZua3R2ccxe3RMCLbrqZQAAANM"]
[Fri Mar 27 19:47:55.555421 2026] [:error] [pid 4293:tid 4298] [client 51.103.48.143:48470] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "acZua5LjeJUC3OKtEx9z9AAAAUM"]
[Fri Mar 27 19:47:56.516724 2026] [:error] [pid 4293:tid 4297] [client 51.103.48.143:38875] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "acZubJLjeJUC3OKtEx9z-wAAAUI"]
[Fri Mar 27 19:47:57.172493 2026] [:error] [pid 4293:tid 4319] [client 51.103.48.143:53028] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "acZubZLjeJUC3OKtEx9z_AAAAVg"]
[Fri Mar 27 19:47:57.997807 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:63713] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "acZubZLjeJUC3OKtEx90AgAAAVI"]
[Fri Mar 27 19:47:58.749523 2026] [:error] [pid 4293:tid 4312] [client 51.103.48.143:5698] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "acZubpLjeJUC3OKtEx90CgAAAVE"]
[Fri Mar 27 23:46:58.293379 2026] [:error] [pid 54663:tid 54667] [client 74.7.243.197:40226] [client 74.7.243.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.197, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "acamchUtStIXFk9WHe30tQAAAcE"], referer: https://makifim.com.au/
[Sat Mar 28 06:32:39.187120 2026] [:error] [pid 43579:tid 43630] [client 185.181.60.204:33152] [client 185.181.60.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.makifim.com.au"] [uri "/.DS_Store"] [unique_id "accFhyRqN4JVI8gB7AmFHQAAApY"]
[Sat Mar 28 06:32:41.409287 2026] [:error] [pid 64859:tid 64901] [client 107.189.1.9:11212] [client 107.189.1.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.makifim.com.au"] [uri "/.DS_Store"] [unique_id "accFiW3qEBHXq3rHdBmmhwAAABQ"]
[Sat Mar 28 06:32:42.911362 2026] [:error] [pid 43579:tid 43624] [client 5.255.117.56:56564] [client 5.255.117.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "accFiiRqN4JVI8gB7AmFJgAAApA"]
[Sat Mar 28 06:32:46.847661 2026] [:error] [pid 43579:tid 43611] [client 185.220.101.96:59359] [client 185.220.101.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "accFjiRqN4JVI8gB7AmFKgAAAoM"]
[Sat Mar 28 06:32:48.825801 2026] [:error] [pid 64861:tid 64956] [client 185.183.157.214:27172] [client 185.183.157.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.DS_Store"] [unique_id "accFkOxK22_lUN2kvnVMmgAAAJU"]
[Sat Mar 28 06:32:50.241551 2026] [:error] [pid 43578:tid 43582] [client 172.104.243.155:35620] [client 172.104.243.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.DS_Store"] [unique_id "accFknNG2YdGm41aN8LWzwAAAkE"]
[Sat Mar 28 06:33:02.537030 2026] [:error] [pid 34597:tid 34621] [client 124.198.131.223:27516] [client 124.198.131.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "accFnoluI7-e5s1cafcS8QAAAVQ"]
[Sat Mar 28 06:33:04.958157 2026] [:error] [pid 43579:tid 43617] [client 171.25.193.38:58118] [client 171.25.193.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "accFoCRqN4JVI8gB7AmFSgAAAok"]
[Sat Mar 28 09:25:46.522666 2026] [:error] [pid 64860:tid 64930] [client 2.58.56.116:53220] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "accuGhkU3N0pg_4aEL8UWQAAAFY"]
[Sat Mar 28 09:25:47.028155 2026] [:error] [pid 64859:tid 64889] [client 2.58.56.116:53437] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "accuG23qEBHXq3rHdBm41AAAAAg"]
[Sat Mar 28 09:25:47.526564 2026] [:error] [pid 43579:tid 43609] [client 2.58.56.116:53860] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "accuGyRqN4JVI8gB7AmlUQAAAoE"]
[Sat Mar 28 09:25:48.027416 2026] [:error] [pid 43547:tid 43567] [client 2.58.56.116:54642] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "accuHD4ZEfdetXP-9aC9BgAAAhI"]
[Sat Mar 28 09:25:48.554322 2026] [:error] [pid 64966:tid 64981] [client 2.58.56.116:55207] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "accuHNfSvF5AFfSuKxX_nQAAAMg"]
[Sat Mar 28 13:13:51.565288 2026] [:error] [pid 43578:tid 43582] [client 4.193.173.95:4822] [client 4.193.173.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/doc.php"] [unique_id "acdjj3NG2YdGm41aN8JqdAAAAkE"]
[Sat Mar 28 13:13:52.039835 2026] [:error] [pid 64861:tid 64954] [client 4.193.173.95:4635] [client 4.193.173.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/doc.php"] [unique_id "acdjkOxK22_lUN2kvnXHswAAAJM"]
[Sat Mar 28 13:13:52.446513 2026] [:error] [pid 43578:tid 43601] [client 4.193.173.95:5099] [client 4.193.173.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/doc.php"] [unique_id "acdjkHNG2YdGm41aN8JqeQAAAlQ"]
[Sat Mar 28 13:13:52.920468 2026] [:error] [pid 64861:tid 64948] [client 4.193.173.95:4649] [client 4.193.173.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/doc.php"] [unique_id "acdjkOxK22_lUN2kvnXHtwAAAI0"]
[Sat Mar 28 23:36:47.179475 2026] [:error] [pid 64966:tid 64993] [client 45.94.31.49:54401] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acf1j9fSvF5AFfSuKxVG4gAAANQ"]
[Sat Mar 28 23:36:48.183861 2026] [:error] [pid 34631:tid 34668] [client 45.94.31.49:52897] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acf1kDtzjMMS6kojpeSE1gAAAcg"]
[Sat Mar 28 23:36:49.175888 2026] [:error] [pid 43578:tid 43587] [client 45.94.31.49:64800] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acf1kXNG2YdGm41aN8I4eQAAAkY"]
[Sat Mar 28 23:36:50.150807 2026] [:error] [pid 64859:tid 64891] [client 45.94.31.49:65203] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acf1km3qEBHXq3rHdBl5GQAAAAo"]
[Sat Mar 28 23:36:51.124020 2026] [:error] [pid 43547:tid 43552] [client 45.94.31.49:58798] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "acf1kz4ZEfdetXP-9aAQrgAAAgM"]
[Sun Mar 29 02:40:21.785571 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:34747] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acgglVvLf0RDUqcYq-ZWJgAAAAQ"]
[Sun Mar 29 02:40:24.052517 2026] [:error] [pid 39428:tid 39473] [client 158.23.144.198:35286] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acggmKXMrozFMIaP8nIIIwAAAE4"]
[Sun Mar 29 02:40:26.211068 2026] [:error] [pid 60346:tid 60374] [client 158.23.144.198:34740] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acggmnVrXSgLxlxLi9BHmgAAARc"]
[Sun Mar 29 02:40:27.952416 2026] [:error] [pid 60346:tid 60355] [client 158.23.144.198:36839] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acggm3VrXSgLxlxLi9BHngAAAQQ"]
[Sun Mar 29 02:40:29.197987 2026] [:error] [pid 60346:tid 60361] [client 158.23.144.198:36855] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acggnXVrXSgLxlxLi9BHqAAAAQo"]
[Sun Mar 29 02:40:31.107696 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:3920] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acggnykUyvlQod6qQu2tjAAAAMk"]
[Sun Mar 29 02:40:32.035513 2026] [:error] [pid 60346:tid 60370] [client 158.23.144.198:34351] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acggoHVrXSgLxlxLi9BHrwAAARM"]
[Sun Mar 29 02:40:35.813641 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:34710] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acggo1vLf0RDUqcYq-ZWNgAAAA0"]
[Sun Mar 29 02:40:36.849582 2026] [:error] [pid 60346:tid 60353] [client 158.23.144.198:46305] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "acggpHVrXSgLxlxLi9BHugAAAQI"]
[Sun Mar 29 02:40:38.598719 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:35280] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "acggpikUyvlQod6qQu2togAAAM0"]
[Sun Mar 29 02:40:39.381132 2026] [:error] [pid 39429:tid 39506] [client 158.23.144.198:36829] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "acggp08pSj6sqgZaItnroAAAAJQ"]
[Sun Mar 29 02:40:40.642207 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:46332] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "acggqKXMrozFMIaP8nIIMgAAAFQ"]
[Sun Mar 29 02:40:41.556076 2026] [:error] [pid 39427:tid 39453] [client 158.23.144.198:34307] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acggqVvLf0RDUqcYq-ZWPQAAABU"]
[Sun Mar 29 02:40:43.778371 2026] [:error] [pid 39428:tid 39463] [client 158.23.144.198:34328] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acggq6XMrozFMIaP8nIIOwAAAEQ"]
[Sun Mar 29 02:40:44.706440 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:36850] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acggrCkUyvlQod6qQu2trgAAAMM"]
[Sun Mar 29 02:40:46.013362 2026] [:error] [pid 60346:tid 60369] [client 158.23.144.198:34343] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acggrnVrXSgLxlxLi9BHzQAAARI"]
[Sun Mar 29 02:40:46.974092 2026] [:error] [pid 39427:tid 39454] [client 158.23.144.198:3917] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "acggrlvLf0RDUqcYq-ZWRQAAABY"]
[Sun Mar 29 02:40:50.295283 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:35327] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "acggsikUyvlQod6qQu2ttwAAAMA"]
[Sun Mar 29 02:40:51.181884 2026] [:error] [pid 60346:tid 60368] [client 158.23.144.198:36812] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "acggs3VrXSgLxlxLi9BH5gAAARE"]
[Sun Mar 29 02:40:51.747610 2026] [:error] [pid 60346:tid 60367] [client 158.23.144.198:34709] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "acggs3VrXSgLxlxLi9BH6gAAARA"]
[Sun Mar 29 02:40:52.648619 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:36287] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acggtCkUyvlQod6qQu2tugAAANA"]
[Sun Mar 29 02:40:53.389039 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:36261] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acggtU8pSj6sqgZaItnrugAAAJg"]
[Sun Mar 29 02:40:53.920677 2026] [:error] [pid 39427:tid 39456] [client 158.23.144.198:3931] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acggtVvLf0RDUqcYq-ZWTgAAABg"]
[Sun Mar 29 02:40:54.620109 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:3632] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acggtk8pSj6sqgZaItnrvgAAAJE"]
[Sun Mar 29 02:40:55.214306 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:3940] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acggtykUyvlQod6qQu2tvAAAAMM"]
[Sun Mar 29 02:40:56.081805 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:35301] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acgguCkUyvlQod6qQu2tvQAAANU"]
[Sun Mar 29 02:40:56.794431 2026] [:error] [pid 60346:tid 60367] [client 158.23.144.198:35325] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acgguHVrXSgLxlxLi9BIAAAAARA"]
[Sun Mar 29 02:40:57.450183 2026] [:error] [pid 39427:tid 39434] [client 158.23.144.198:60536] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acgguVvLf0RDUqcYq-ZWVQAAAAI"]
[Sun Mar 29 02:40:58.240941 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:36859] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "acggulvLf0RDUqcYq-ZWWQAAAAU"]
[Sun Mar 29 02:40:59.830225 2026] [:error] [pid 60346:tid 60363] [client 158.23.144.198:35278] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "acggu3VrXSgLxlxLi9BICgAAAQw"]
[Sun Mar 29 02:41:00.390288 2026] [:error] [pid 60346:tid 60355] [client 158.23.144.198:36805] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "acggvHVrXSgLxlxLi9BIDQAAAQQ"]
[Sun Mar 29 02:41:01.307402 2026] [:error] [pid 60346:tid 60353] [client 158.23.144.198:3586] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "acggvXVrXSgLxlxLi9BIEwAAAQI"]
[Sun Mar 29 02:41:02.007750 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:60504] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acggvlvLf0RDUqcYq-ZWYAAAABA"]
[Sun Mar 29 02:41:02.567836 2026] [:error] [pid 39427:tid 39439] [client 158.23.144.198:34309] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acggvlvLf0RDUqcYq-ZWYwAAAAc"]
[Sun Mar 29 02:41:03.539809 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:3593] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acggvykUyvlQod6qQu2tzQAAAMU"]
[Sun Mar 29 02:41:04.478374 2026] [:error] [pid 39428:tid 39477] [client 158.23.144.198:60492] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acggwKXMrozFMIaP8nIISwAAAFI"]
[Sun Mar 29 02:41:05.529771 2026] [:error] [pid 60346:tid 60359] [client 158.23.144.198:3964] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acggwXVrXSgLxlxLi9BIFgAAAQg"]
[Sun Mar 29 02:41:06.644756 2026] [:error] [pid 60346:tid 60368] [client 158.23.144.198:34342] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acggwnVrXSgLxlxLi9BIHAAAARE"]
[Sun Mar 29 02:41:08.994307 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:36233] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acggxCkUyvlQod6qQu2t1gAAANY"]
[Sun Mar 29 02:41:09.873547 2026] [:error] [pid 60346:tid 60352] [client 158.23.144.198:54904] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acggxXVrXSgLxlxLi9BIJgAAAQE"]
[Sun Mar 29 02:41:10.592207 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:60511] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "acggxikUyvlQod6qQu2t2gAAANc"]
[Sun Mar 29 02:41:12.665349 2026] [:error] [pid 60346:tid 60354] [client 158.23.144.198:34356] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "acggyHVrXSgLxlxLi9BILQAAAQM"]
[Sun Mar 29 02:41:13.534295 2026] [:error] [pid 39429:tid 39490] [client 158.23.144.198:34703] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "acggyU8pSj6sqgZaItnrxgAAAIQ"]
[Sun Mar 29 02:41:14.843984 2026] [:error] [pid 60346:tid 60358] [client 158.23.144.198:36268] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "acggynVrXSgLxlxLi9BINQAAAQc"]
[Sun Mar 29 02:41:15.750617 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:34350] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "acggy6XMrozFMIaP8nIIXwAAAEg"]
[Sun Mar 29 02:41:17.140622 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:34326] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "acggzSkUyvlQod6qQu2t6QAAAMw"]
[Sun Mar 29 02:41:17.932299 2026] [:error] [pid 60346:tid 60370] [client 158.23.144.198:35291] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "acggzXVrXSgLxlxLi9BIRwAAARM"]
[Sun Mar 29 02:42:03.780696 2026] [:error] [pid 60346:tid 60358] [client 158.23.144.198:36246] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acgg-3VrXSgLxlxLi9BJBQAAAQc"]
[Sun Mar 29 02:42:05.248431 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:36226] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acgg_VvLf0RDUqcYq-ZXGAAAAA4"]
[Sun Mar 29 02:42:08.641498 2026] [:error] [pid 39429:tid 39509] [client 158.23.144.198:3956] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acghAE8pSj6sqgZaItnsDwAAAJc"]
[Sun Mar 29 02:42:12.173026 2026] [:error] [pid 60346:tid 60363] [client 158.23.144.198:3907] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acghBHVrXSgLxlxLi9BJEAAAAQw"]
[Sun Mar 29 02:42:13.768879 2026] [:error] [pid 39427:tid 39452] [client 158.23.144.198:35322] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acghBVvLf0RDUqcYq-ZXRgAAABQ"]
[Sun Mar 29 02:42:14.332437 2026] [:error] [pid 60346:tid 60357] [client 158.23.144.198:46285] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acghBnVrXSgLxlxLi9BJFgAAAQY"]
[Sun Mar 29 02:42:14.923529 2026] [:error] [pid 39428:tid 39482] [client 158.23.144.198:46298] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acghBqXMrozFMIaP8nII1AAAAFc"]
[Sun Mar 29 02:42:15.506136 2026] [:error] [pid 39427:tid 39441] [client 158.23.144.198:36858] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acghB1vLf0RDUqcYq-ZXSgAAAAk"]
[Sun Mar 29 02:42:16.601256 2026] [:error] [pid 60346:tid 60359] [client 158.23.144.198:34330] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acghCHVrXSgLxlxLi9BJJAAAAQg"]
[Sun Mar 29 02:42:17.294768 2026] [:error] [pid 60346:tid 60373] [client 158.23.144.198:34347] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acghCXVrXSgLxlxLi9BJLQAAARY"]
[Sun Mar 29 02:42:18.046606 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:40398] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acghClvLf0RDUqcYq-ZXUgAAAAQ"]
[Sun Mar 29 02:42:18.895768 2026] [:error] [pid 60346:tid 60351] [client 158.23.144.198:3949] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acghCnVrXSgLxlxLi9BJPwAAAQA"]
[Sun Mar 29 02:42:19.633324 2026] [:error] [pid 60346:tid 60365] [client 158.23.144.198:34689] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acghC3VrXSgLxlxLi9BJRwAAAQ4"]
[Sun Mar 29 02:42:20.230678 2026] [:error] [pid 60346:tid 60368] [client 158.23.144.198:54872] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acghDHVrXSgLxlxLi9BJSwAAARE"]
[Sun Mar 29 02:42:21.258640 2026] [:error] [pid 39429:tid 39493] [client 158.23.144.198:35316] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acghDU8pSj6sqgZaItnsIQAAAIc"]
[Sun Mar 29 02:42:22.402393 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:34358] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acghDikUyvlQod6qQu2uogAAAMM"]
[Sun Mar 29 02:42:22.983020 2026] [:error] [pid 60346:tid 60351] [client 158.23.144.198:34741] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acghDnVrXSgLxlxLi9BJVQAAAQA"]
[Sun Mar 29 02:42:23.650310 2026] [:error] [pid 60346:tid 60355] [client 158.23.144.198:60543] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acghD3VrXSgLxlxLi9BJXAAAAQQ"]
[Sun Mar 29 02:42:24.497063 2026] [:error] [pid 60346:tid 60357] [client 158.23.144.198:36235] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acghEHVrXSgLxlxLi9BJYwAAAQY"]
[Sun Mar 29 02:42:25.648660 2026] [:error] [pid 60346:tid 60363] [client 158.23.144.198:34717] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acghEXVrXSgLxlxLi9BJcwAAAQw"]
[Sun Mar 29 02:42:26.768196 2026] [:error] [pid 39429:tid 39497] [client 158.23.144.198:36283] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "acghEk8pSj6sqgZaItnsIwAAAIs"]
[Sun Mar 29 02:42:28.728603 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:34721] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "acghFCkUyvlQod6qQu2usAAAAMc"]
[Sun Mar 29 02:42:29.503338 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:46295] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "acghFVvLf0RDUqcYq-ZXdwAAAAY"]
[Sun Mar 29 02:42:30.817800 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:39829] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "acghFikUyvlQod6qQu2uwwAAAMk"]
[Sun Mar 29 02:42:32.424899 2026] [:error] [pid 60346:tid 60364] [client 158.23.144.198:36251] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acghGHVrXSgLxlxLi9BJlQAAAQ0"]
[Sun Mar 29 02:42:33.409350 2026] [:error] [pid 39429:tid 39495] [client 158.23.144.198:46325] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acghGU8pSj6sqgZaItnsKAAAAIk"]
[Sun Mar 29 02:42:35.497916 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:34310] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acghGykUyvlQod6qQu2u1wAAANM"]
[Sun Mar 29 02:42:37.300116 2026] [:error] [pid 60346:tid 60360] [client 158.23.144.198:3641] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acghHXVrXSgLxlxLi9BJpwAAAQk"]
[Sun Mar 29 02:42:38.365782 2026] [:error] [pid 39429:tid 39490] [client 158.23.144.198:36244] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "acghHk8pSj6sqgZaItnsNAAAAIQ"]
[Sun Mar 29 02:42:38.942404 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:61057] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "acghHikUyvlQod6qQu2u4AAAANc"]
[Sun Mar 29 02:42:40.094618 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:40411] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "acghICkUyvlQod6qQu2u7AAAAMU"]
[Sun Mar 29 02:42:41.039021 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:3921] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "acghISkUyvlQod6qQu2u9gAAAMY"]
[Sun Mar 29 02:42:41.862146 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:46297] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acghIVvLf0RDUqcYq-ZXjwAAABI"]
[Sun Mar 29 02:42:42.552119 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:46302] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acghIikUyvlQod6qQu2u_gAAAMQ"]
[Sun Mar 29 02:42:43.155514 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:36843] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acghI6XMrozFMIaP8nII7wAAAFQ"]
[Sun Mar 29 02:42:44.378603 2026] [:error] [pid 60346:tid 60370] [client 158.23.144.198:35275] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acghJHVrXSgLxlxLi9BJtAAAARM"]
[Sun Mar 29 02:42:45.493249 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:39858] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "acghJVvLf0RDUqcYq-ZXlAAAAAo"]
[Sun Mar 29 02:42:46.198231 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:34730] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "acghJlvLf0RDUqcYq-ZXnAAAABc"]
[Sun Mar 29 02:42:47.216662 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:3628] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "acghJ08pSj6sqgZaItnsTQAAAJM"]
[Sun Mar 29 02:42:48.066502 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:3923] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "acghKCkUyvlQod6qQu2vCQAAAMU"]
[Sun Mar 29 02:42:48.605917 2026] [:error] [pid 39427:tid 39452] [client 158.23.144.198:34708] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "acghKFvLf0RDUqcYq-ZXoAAAABQ"]
[Sun Mar 29 02:42:49.242929 2026] [:error] [pid 39428:tid 39463] [client 158.23.144.198:35287] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "acghKaXMrozFMIaP8nII9AAAAEQ"]
[Sun Mar 29 02:42:49.839432 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:36234] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "acghKSkUyvlQod6qQu2vEwAAANQ"]
[Sun Mar 29 02:42:50.666828 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:40390] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "acghKikUyvlQod6qQu2vGgAAANE"]
[Sun Mar 29 02:42:51.983419 2026] [:error] [pid 60346:tid 60357] [client 158.23.144.198:46334] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acghK3VrXSgLxlxLi9BJwAAAAQY"]
[Sun Mar 29 02:42:52.969359 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:60500] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acghLCkUyvlQod6qQu2vJgAAANE"]
[Sun Mar 29 02:42:53.960206 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:60538] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acghLSkUyvlQod6qQu2vLgAAAM0"]
[Sun Mar 29 02:42:54.902047 2026] [:error] [pid 60346:tid 60354] [client 158.23.144.198:36853] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acghLnVrXSgLxlxLi9BJwgAAAQM"]
[Sun Mar 29 02:42:56.029335 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:35293] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acghMCkUyvlQod6qQu2vOwAAAMU"]
[Sun Mar 29 02:42:57.963686 2026] [:error] [pid 60346:tid 60366] [client 158.23.144.198:60513] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acghMXVrXSgLxlxLi9BJ0gAAAQ8"]
[Sun Mar 29 02:43:00.578568 2026] [:error] [pid 60346:tid 60357] [client 158.23.144.198:36854] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acghNHVrXSgLxlxLi9BJ5wAAAQY"]
[Sun Mar 29 02:43:49.401387 2026] [:error] [pid 60346:tid 60363] [client 158.23.144.198:54850] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "acghZXVrXSgLxlxLi9BK2QAAAQw"]
[Sun Mar 29 02:43:49.957875 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:34365] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "acghZSkUyvlQod6qQu2v0QAAAMk"]
[Sun Mar 29 02:43:50.693403 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:60503] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "acghZikUyvlQod6qQu2v1wAAAMs"]
[Sun Mar 29 02:43:51.238245 2026] [:error] [pid 60346:tid 60351] [client 158.23.144.198:60510] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "acghZ3VrXSgLxlxLi9BK2gAAAQA"]
[Sun Mar 29 02:43:51.893664 2026] [:error] [pid 39429:tid 39502] [client 158.23.144.198:3596] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acghZ08pSj6sqgZaItnsjgAAAJA"]
[Sun Mar 29 02:43:52.389828 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:60541] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acghaCkUyvlQod6qQu2v3QAAAMw"]
[Sun Mar 29 02:43:53.251115 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:3087] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acghaU8pSj6sqgZaItnslQAAAJM"]
[Sun Mar 29 02:43:53.972452 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:3939] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acghaVvLf0RDUqcYq-ZX8QAAAA4"]
[Sun Mar 29 02:43:54.484425 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:36259] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acghalvLf0RDUqcYq-ZX9AAAAAQ"]
[Sun Mar 29 02:43:55.070706 2026] [:error] [pid 60346:tid 60373] [client 158.23.144.198:60516] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgha3VrXSgLxlxLi9BK4wAAARY"]
[Sun Mar 29 02:43:55.659047 2026] [:error] [pid 60346:tid 60364] [client 158.23.144.198:46301] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgha3VrXSgLxlxLi9BK5gAAAQ0"]
[Sun Mar 29 02:43:56.419157 2026] [:error] [pid 39428:tid 39468] [client 158.23.144.198:36280] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acghbKXMrozFMIaP8nIJPgAAAEk"]
[Sun Mar 29 02:43:57.139311 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:3906] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "acghbSkUyvlQod6qQu2v7gAAAMU"]
[Sun Mar 29 02:43:58.026182 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:54871] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "acghbikUyvlQod6qQu2v9AAAAMM"]
[Sun Mar 29 02:43:58.552383 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:3609] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "acghblvLf0RDUqcYq-ZYAwAAABM"]
[Sun Mar 29 02:43:59.029418 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:34715] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "acghbykUyvlQod6qQu2v-gAAAMc"]
[Sun Mar 29 02:43:59.612888 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:34744] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "acghb08pSj6sqgZaItnsogAAAIY"]
[Sun Mar 29 02:44:00.364439 2026] [:error] [pid 39429:tid 39499] [client 158.23.144.198:46313] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "acghcE8pSj6sqgZaItnsqAAAAI0"]
[Sun Mar 29 02:44:00.949052 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:54880] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "acghcFvLf0RDUqcYq-ZYBwAAAAQ"]
[Sun Mar 29 02:44:02.108807 2026] [:error] [pid 60346:tid 60364] [client 158.23.144.198:3635] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/44.php"] [unique_id "acghcnVrXSgLxlxLi9BK9QAAAQ0"]
[Sun Mar 29 02:44:02.848390 2026] [:error] [pid 39429:tid 39493] [client 158.23.144.198:34344] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "acghck8pSj6sqgZaItnsrQAAAIc"]
[Sun Mar 29 02:44:03.706661 2026] [:error] [pid 60346:tid 60363] [client 158.23.144.198:35264] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "acghc3VrXSgLxlxLi9BK_gAAAQw"]
[Sun Mar 29 02:44:04.516497 2026] [:error] [pid 60346:tid 60373] [client 158.23.144.198:34367] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "acghdHVrXSgLxlxLi9BLAwAAARY"]
[Sun Mar 29 02:44:05.323523 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:36238] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "acghdVvLf0RDUqcYq-ZYEgAAABc"]
[Sun Mar 29 02:44:05.877911 2026] [:error] [pid 60346:tid 60372] [client 158.23.144.198:34724] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acghdXVrXSgLxlxLi9BLCgAAARU"]
[Sun Mar 29 02:44:06.586706 2026] [:error] [pid 60346:tid 60370] [client 158.23.144.198:36826] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acghdnVrXSgLxlxLi9BLFAAAARM"]
[Sun Mar 29 02:44:07.131289 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:36806] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acghd08pSj6sqgZaItnstwAAAI4"]
[Sun Mar 29 02:44:08.285714 2026] [:error] [pid 39428:tid 39471] [client 158.23.144.198:3929] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acgheKXMrozFMIaP8nIJTwAAAEw"]
[Sun Mar 29 02:44:09.012053 2026] [:error] [pid 39427:tid 39440] [client 158.23.144.198:36273] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgheVvLf0RDUqcYq-ZYGwAAAAg"]
[Sun Mar 29 02:44:09.966465 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:3602] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgheSkUyvlQod6qQu2wBAAAAMM"]
[Sun Mar 29 02:44:10.605397 2026] [:error] [pid 39514:tid 39543] [client 158.23.144.198:36801] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgheikUyvlQod6qQu2wBQAAANI"]
[Sun Mar 29 02:44:11.263877 2026] [:error] [pid 39428:tid 39481] [client 158.23.144.198:36237] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acghe6XMrozFMIaP8nIJVgAAAFY"]
[Sun Mar 29 02:44:11.791526 2026] [:error] [pid 60346:tid 60369] [client 158.23.144.198:36811] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acghe3VrXSgLxlxLi9BLMAAAARI"]
[Sun Mar 29 02:44:12.314435 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:3936] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acghfE8pSj6sqgZaItnswQAAAIg"]
[Sun Mar 29 02:44:12.824439 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:3588] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acghfE8pSj6sqgZaItnsxQAAAJM"]
[Sun Mar 29 02:44:13.453435 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:3945] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "acghfU8pSj6sqgZaItnsyAAAAJg"]
[Sun Mar 29 02:44:14.036902 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:54889] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "acghflvLf0RDUqcYq-ZYKgAAAAQ"]
[Sun Mar 29 02:44:14.820983 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:35317] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "acghfikUyvlQod6qQu2wCAAAAMc"]
[Sun Mar 29 02:44:15.556023 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:60493] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "acghf1vLf0RDUqcYq-ZYLQAAAAo"]
[Sun Mar 29 02:44:16.538738 2026] [:error] [pid 60346:tid 60361] [client 158.23.144.198:46318] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "acghgHVrXSgLxlxLi9BLSAAAAQo"]
[Sun Mar 29 02:44:17.228572 2026] [:error] [pid 39429:tid 39488] [client 158.23.144.198:61060] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acghgU8pSj6sqgZaItnszQAAAII"]
[Sun Mar 29 02:44:17.838114 2026] [:error] [pid 60346:tid 60369] [client 158.23.144.198:34352] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acghgXVrXSgLxlxLi9BLVwAAARI"]
[Sun Mar 29 02:44:18.515376 2026] [:error] [pid 60346:tid 60367] [client 158.23.144.198:3933] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acghgnVrXSgLxlxLi9BLYgAAARA"]
[Sun Mar 29 02:44:19.068869 2026] [:error] [pid 39429:tid 39487] [client 158.23.144.198:35314] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "acghg08pSj6sqgZaItnszgAAAIE"]
[Sun Mar 29 02:44:19.590527 2026] [:error] [pid 39427:tid 39456] [client 158.23.144.198:46314] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "acghg1vLf0RDUqcYq-ZYNgAAABg"]
[Sun Mar 29 02:44:20.261659 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:3606] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "acghhE8pSj6sqgZaItns0wAAAJY"]
[Sun Mar 29 02:44:20.973537 2026] [:error] [pid 39428:tid 39481] [client 158.23.144.198:35311] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "acghhKXMrozFMIaP8nIJXwAAAFY"]
[Sun Mar 29 02:44:21.749384 2026] [:error] [pid 60346:tid 60356] [client 158.23.144.198:34690] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "acghhXVrXSgLxlxLi9BLdQAAAQU"]
[Sun Mar 29 02:44:22.787159 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:36267] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acghhqXMrozFMIaP8nIJYwAAAEg"]
[Sun Mar 29 02:44:23.416940 2026] [:error] [pid 39428:tid 39477] [client 158.23.144.198:36279] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acghh6XMrozFMIaP8nIJZQAAAFI"]
[Sun Mar 29 02:44:25.129692 2026] [:error] [pid 60346:tid 60355] [client 158.23.144.198:60515] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acghiXVrXSgLxlxLi9BLfQAAAQQ"]
[Sun Mar 29 02:44:27.369296 2026] [:error] [pid 39428:tid 39474] [client 158.23.144.198:3938] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acghi6XMrozFMIaP8nIJewAAAE8"]
[Sun Mar 29 02:44:28.226617 2026] [:error] [pid 39428:tid 39480] [client 158.23.144.198:60489] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acghjKXMrozFMIaP8nIJfQAAAFU"]
[Sun Mar 29 02:44:29.163026 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:3128] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acghjSkUyvlQod6qQu2wGAAAAMk"]
[Sun Mar 29 02:44:30.162669 2026] [:error] [pid 60346:tid 60363] [client 158.23.144.198:46304] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acghjnVrXSgLxlxLi9BLiAAAAQw"]
[Sun Mar 29 02:44:30.795925 2026] [:error] [pid 60346:tid 60359] [client 158.23.144.198:36852] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "acghjnVrXSgLxlxLi9BLjQAAAQg"]
[Sun Mar 29 02:44:32.098435 2026] [:error] [pid 39428:tid 39468] [client 158.23.144.198:35326] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "acghkKXMrozFMIaP8nIJhgAAAEk"]
[Sun Mar 29 02:44:33.190692 2026] [:error] [pid 60346:tid 60374] [client 158.23.144.198:40434] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "acghkXVrXSgLxlxLi9BLlQAAARc"]
[Sun Mar 29 02:44:34.660180 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:34719] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "acghkqXMrozFMIaP8nIJkAAAAFQ"]
[Sun Mar 29 02:44:35.540128 2026] [:error] [pid 60346:tid 60351] [client 158.23.144.198:3622] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "acghk3VrXSgLxlxLi9BLqAAAAQA"]
[Sun Mar 29 02:44:36.514307 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:3645] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acghlFvLf0RDUqcYq-ZYWQAAAAw"]
[Sun Mar 29 02:44:37.365812 2026] [:error] [pid 60346:tid 60357] [client 158.23.144.198:3626] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acghlXVrXSgLxlxLi9BLswAAAQY"]
[Sun Mar 29 02:44:38.052926 2026] [:error] [pid 60346:tid 60372] [client 158.23.144.198:34317] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acghlnVrXSgLxlxLi9BLtgAAARU"]
[Sun Mar 29 02:44:39.087373 2026] [:error] [pid 60346:tid 60351] [client 158.23.144.198:34704] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acghl3VrXSgLxlxLi9BLxAAAAQA"]
[Sun Mar 29 02:44:40.255033 2026] [:error] [pid 39429:tid 39498] [client 158.23.144.198:39826] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acghmE8pSj6sqgZaItntBQAAAIw"]
[Sun Mar 29 02:44:40.885931 2026] [:error] [pid 39428:tid 39476] [client 158.23.144.198:65110] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acghmKXMrozFMIaP8nIJnAAAAFE"]
[Sun Mar 29 02:44:41.841636 2026] [:error] [pid 60346:tid 60354] [client 158.23.144.198:35285] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acghmXVrXSgLxlxLi9BLzQAAAQM"]
[Sun Mar 29 02:44:43.857003 2026] [:error] [pid 60346:tid 60358] [client 158.23.144.198:3605] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "acghm3VrXSgLxlxLi9BL2QAAAQc"]
[Sun Mar 29 02:44:45.489074 2026] [:error] [pid 39428:tid 39469] [client 158.23.144.198:35315] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acghnaXMrozFMIaP8nIJoQAAAEo"]
[Sun Mar 29 02:44:46.226334 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:36254] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acghnikUyvlQod6qQu2wQgAAAMU"]
[Sun Mar 29 02:45:35.026436 2026] [:error] [pid 60346:tid 60362] [client 158.23.144.198:36818] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acghz3VrXSgLxlxLi9BMgwAAAQs"]
[Sun Mar 29 02:45:35.617349 2026] [:error] [pid 39428:tid 39465] [client 158.23.144.198:3912] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acghz6XMrozFMIaP8nIJ1AAAAEY"]
[Sun Mar 29 02:45:36.750838 2026] [:error] [pid 39429:tid 39497] [client 158.23.144.198:3904] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acgh0E8pSj6sqgZaItntWgAAAIs"]
[Sun Mar 29 02:45:37.626317 2026] [:error] [pid 39427:tid 39434] [client 158.23.144.198:65149] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acgh0VvLf0RDUqcYq-ZYxwAAAAI"]
[Sun Mar 29 02:45:38.395770 2026] [:error] [pid 60346:tid 60363] [client 158.23.144.198:3585] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acgh0nVrXSgLxlxLi9BMjQAAAQw"]
[Sun Mar 29 02:45:40.612758 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:36855] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acgh1FvLf0RDUqcYq-ZY0gAAAAQ"]
[Sun Mar 29 02:45:41.504546 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:65094] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acgh1SkUyvlQod6qQu2wlwAAANA"]
[Sun Mar 29 02:45:42.328996 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:34691] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acgh1lvLf0RDUqcYq-ZY1gAAAA4"]
[Sun Mar 29 02:45:43.171735 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:36277] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "acgh1ykUyvlQod6qQu2wngAAANM"]
[Sun Mar 29 02:45:43.875267 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:34324] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "acgh11vLf0RDUqcYq-ZY2QAAABM"]
[Sun Mar 29 02:45:45.181701 2026] [:error] [pid 39428:tid 39469] [client 158.23.144.198:36269] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "acgh2aXMrozFMIaP8nIJ5AAAAEo"]
[Sun Mar 29 02:45:46.227131 2026] [:error] [pid 60346:tid 60355] [client 158.23.144.198:34357] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "acgh2nVrXSgLxlxLi9BMngAAAQQ"]
[Sun Mar 29 02:45:47.284705 2026] [:error] [pid 60346:tid 60365] [client 158.23.144.198:54853] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/varb.php"] [unique_id "acgh23VrXSgLxlxLi9BMpAAAAQ4"]
[Sun Mar 29 02:45:48.569929 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:54862] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/varb.php"] [unique_id "acgh3E8pSj6sqgZaItntZgAAAJg"]
[Sun Mar 29 02:45:50.655080 2026] [:error] [pid 60346:tid 60367] [client 158.23.144.198:34316] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/varb.php"] [unique_id "acgh3nVrXSgLxlxLi9BMsAAAARA"]
[Sun Mar 29 02:45:51.881470 2026] [:error] [pid 60346:tid 60362] [client 158.23.144.198:51021] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/varb.php"] [unique_id "acgh33VrXSgLxlxLi9BMugAAAQs"]
[Sun Mar 29 02:45:54.145116 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:46322] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgh4k8pSj6sqgZaItntbgAAAIY"]
[Sun Mar 29 02:45:54.819165 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:36840] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgh4lvLf0RDUqcYq-ZY3QAAAAU"]
[Sun Mar 29 02:45:55.530028 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:36250] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgh41vLf0RDUqcYq-ZY3wAAABM"]
[Sun Mar 29 02:45:57.426537 2026] [:error] [pid 60346:tid 60365] [client 158.23.144.198:54877] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgh5XVrXSgLxlxLi9BMzwAAAQ4"]
[Sun Mar 29 02:45:57.899710 2026] [:error] [pid 60346:tid 60374] [client 158.23.144.198:3946] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acgh5XVrXSgLxlxLi9BM1AAAARc"]
[Sun Mar 29 02:45:58.890360 2026] [:error] [pid 60346:tid 60357] [client 158.23.144.198:3915] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acgh5nVrXSgLxlxLi9BM2wAAAQY"]
[Sun Mar 29 02:45:59.594981 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:60508] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acgh51vLf0RDUqcYq-ZY4gAAAAE"]
[Sun Mar 29 02:46:00.213526 2026] [:error] [pid 39428:tid 39465] [client 158.23.144.198:34325] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acgh6KXMrozFMIaP8nIJ9wAAAEY"]
[Sun Mar 29 02:46:00.886932 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:34736] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acgh6FvLf0RDUqcYq-ZY5gAAAA8"]
[Sun Mar 29 02:46:01.333465 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:65138] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acgh6VvLf0RDUqcYq-ZY6AAAABc"]
[Sun Mar 29 02:46:01.932917 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:34703] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acgh6SkUyvlQod6qQu2wvwAAAMM"]
[Sun Mar 29 02:46:02.475011 2026] [:error] [pid 39428:tid 39471] [client 158.23.144.198:34727] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acgh6qXMrozFMIaP8nIJ-wAAAEw"]
[Sun Mar 29 02:46:03.650330 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:40436] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acgh608pSj6sqgZaItnthwAAAIg"]
[Sun Mar 29 02:46:04.756938 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:40402] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acgh7FvLf0RDUqcYq-ZY-gAAABI"]
[Sun Mar 29 02:46:05.847161 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:34333] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acgh7VvLf0RDUqcYq-ZZAwAAAA8"]
[Sun Mar 29 02:46:06.376041 2026] [:error] [pid 39427:tid 39449] [client 158.23.144.198:35274] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "acgh7lvLf0RDUqcYq-ZZBQAAABE"]
[Sun Mar 29 02:46:06.997173 2026] [:error] [pid 60346:tid 60351] [client 158.23.144.198:36245] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acgh7nVrXSgLxlxLi9BM6QAAAQA"]
[Sun Mar 29 02:46:07.818825 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:36825] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acgh7ykUyvlQod6qQu2wzgAAANc"]
[Sun Mar 29 02:46:08.797891 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:61065] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acgh8CkUyvlQod6qQu2w1gAAAMc"]
[Sun Mar 29 02:46:09.497693 2026] [:error] [pid 60346:tid 60365] [client 158.23.144.198:65117] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acgh8XVrXSgLxlxLi9BM8wAAAQ4"]
[Sun Mar 29 02:46:10.775505 2026] [:error] [pid 60346:tid 60354] [client 158.23.144.198:39866] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acgh8nVrXSgLxlxLi9BNAAAAAQM"]
[Sun Mar 29 02:46:11.884208 2026] [:error] [pid 60346:tid 60358] [client 158.23.144.198:60514] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acgh83VrXSgLxlxLi9BNBwAAAQc"]
[Sun Mar 29 02:46:13.018463 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:39862] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acgh9VvLf0RDUqcYq-ZZEAAAAAw"]
[Sun Mar 29 02:46:13.773673 2026] [:error] [pid 39427:tid 39454] [client 158.23.144.198:46276] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acgh9VvLf0RDUqcYq-ZZEgAAABY"]
[Sun Mar 29 02:46:14.420957 2026] [:error] [pid 60346:tid 60368] [client 158.23.144.198:36271] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acgh9nVrXSgLxlxLi9BNEgAAARE"]
[Sun Mar 29 02:46:15.337216 2026] [:error] [pid 60346:tid 60366] [client 158.23.144.198:36229] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acgh93VrXSgLxlxLi9BNGAAAAQ8"]
[Sun Mar 29 02:46:16.247160 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:36264] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acgh-CkUyvlQod6qQu2w9AAAANM"]
[Sun Mar 29 02:46:17.048070 2026] [:error] [pid 60346:tid 60354] [client 158.23.144.198:61062] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acgh-XVrXSgLxlxLi9BNHAAAAQM"]
[Sun Mar 29 02:46:17.700897 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:34698] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acgh-SkUyvlQod6qQu2w-QAAAMQ"]
[Sun Mar 29 02:46:18.205583 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:54898] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acgh-k8pSj6sqgZaItntiQAAAIo"]
[Sun Mar 29 02:46:18.990553 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:34734] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acgh-k8pSj6sqgZaItntjQAAAIA"]
[Sun Mar 29 02:46:19.821415 2026] [:error] [pid 39428:tid 39481] [client 158.23.144.198:36268] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acgh-6XMrozFMIaP8nIKBQAAAFY"]
[Sun Mar 29 02:46:20.281473 2026] [:error] [pid 39428:tid 39476] [client 158.23.144.198:34700] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acgh_KXMrozFMIaP8nIKCAAAAFE"]
[Sun Mar 29 02:46:21.107821 2026] [:error] [pid 39428:tid 39483] [client 158.23.144.198:34746] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acgh_aXMrozFMIaP8nIKCwAAAFg"]
[Sun Mar 29 02:46:22.460877 2026] [:error] [pid 60346:tid 60367] [client 158.23.144.198:40436] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acgh_nVrXSgLxlxLi9BNMAAAARA"]
[Sun Mar 29 02:46:23.163713 2026] [:error] [pid 60346:tid 60360] [client 158.23.144.198:65097] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acgh_3VrXSgLxlxLi9BNOQAAAQk"]
[Sun Mar 29 02:46:23.616896 2026] [:error] [pid 60346:tid 60364] [client 158.23.144.198:35302] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "acgh_3VrXSgLxlxLi9BNPQAAAQ0"]
[Sun Mar 29 02:46:24.196629 2026] [:error] [pid 39428:tid 39476] [client 158.23.144.198:65092] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "acgiAKXMrozFMIaP8nIKFAAAAFE"]
[Sun Mar 29 02:46:24.774790 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:3640] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "acgiACkUyvlQod6qQu2xCAAAAMs"]
[Sun Mar 29 02:46:25.309567 2026] [:error] [pid 60346:tid 60366] [client 158.23.144.198:39812] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "acgiAXVrXSgLxlxLi9BNQgAAAQ8"]
[Sun Mar 29 02:46:25.895608 2026] [:error] [pid 39428:tid 39477] [client 158.23.144.198:46320] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "acgiAaXMrozFMIaP8nIKFwAAAFI"]
[Sun Mar 29 02:46:26.712616 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:36233] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "acgiAk8pSj6sqgZaItntngAAAJE"]
[Sun Mar 29 02:46:27.750334 2026] [:error] [pid 60346:tid 60361] [client 158.23.144.198:54886] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "acgiA3VrXSgLxlxLi9BNRwAAAQo"]
[Sun Mar 29 02:46:28.344016 2026] [:error] [pid 39428:tid 39461] [client 158.23.144.198:3947] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "acgiBKXMrozFMIaP8nIKGQAAAEI"]
[Sun Mar 29 02:46:28.798233 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:3587] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acgiBE8pSj6sqgZaItntpwAAAI8"]
[Sun Mar 29 02:46:29.507167 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:36810] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acgiBSkUyvlQod6qQu2xDwAAAME"]
[Sun Mar 29 02:46:30.366733 2026] [:error] [pid 39428:tid 39478] [client 158.23.144.198:46279] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acgiBqXMrozFMIaP8nIKGwAAAFM"]
[Sun Mar 29 02:46:31.330866 2026] [:error] [pid 60346:tid 60366] [client 158.23.144.198:3624] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acgiB3VrXSgLxlxLi9BNVQAAAQ8"]
[Sun Mar 29 02:47:42.392923 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:34349] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgiTikUyvlQod6qQu2xuAAAANM"]
[Sun Mar 29 02:47:43.516705 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:46311] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgiT08pSj6sqgZaItnt9wAAAIo"]
[Sun Mar 29 02:47:44.719139 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:46320] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgiUCkUyvlQod6qQu2xvgAAAMQ"]
[Sun Mar 29 02:47:45.603713 2026] [:error] [pid 60346:tid 60375] [client 158.23.144.198:3588] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgiUXVrXSgLxlxLi9BOfwAAARg"]
[Sun Mar 29 02:47:45.842287 2026] [:error] [pid 60346:tid 60361] [client 158.23.144.198:35296] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "acgiUXVrXSgLxlxLi9BOgAAAAQo"]
[Sun Mar 29 02:47:46.666919 2026] [:error] [pid 60346:tid 60370] [client 158.23.144.198:36831] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "acgiUnVrXSgLxlxLi9BOhwAAARM"]
[Sun Mar 29 02:47:48.088930 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:3967] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "acgiVCkUyvlQod6qQu2xyAAAAMg"]
[Sun Mar 29 02:47:49.131994 2026] [:error] [pid 39427:tid 39453] [client 158.23.144.198:54867] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "acgiVVvLf0RDUqcYq-ZZdwAAABU"]
[Sun Mar 29 02:47:50.088263 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:46324] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "acgiVikUyvlQod6qQu2xzQAAAMk"]
[Sun Mar 29 02:47:50.844624 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:54911] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "acgiVikUyvlQod6qQu2xzgAAANQ"]
[Sun Mar 29 02:47:52.605979 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:35269] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "acgiWCkUyvlQod6qQu2x1wAAAMQ"]
[Sun Mar 29 02:47:54.021542 2026] [:error] [pid 60346:tid 60356] [client 158.23.144.198:65135] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "acgiWnVrXSgLxlxLi9BOmgAAAQU"]
[Sun Mar 29 02:47:55.240017 2026] [:error] [pid 60346:tid 60367] [client 158.23.144.198:36839] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "acgiW3VrXSgLxlxLi9BOnAAAARA"]
[Sun Mar 29 02:47:56.057247 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:34364] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "acgiXFvLf0RDUqcYq-ZZjAAAABA"]
[Sun Mar 29 02:47:56.882558 2026] [:error] [pid 60346:tid 60356] [client 158.23.144.198:36231] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "acgiXHVrXSgLxlxLi9BOpgAAAQU"]
[Sun Mar 29 02:47:57.820905 2026] [:error] [pid 60346:tid 60374] [client 158.23.144.198:65104] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "acgiXXVrXSgLxlxLi9BOqwAAARc"]
[Sun Mar 29 02:47:58.395994 2026] [:error] [pid 60346:tid 60364] [client 158.23.144.198:3923] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "acgiXnVrXSgLxlxLi9BOrQAAAQ0"]
[Sun Mar 29 02:47:59.185249 2026] [:error] [pid 60346:tid 60356] [client 158.23.144.198:36225] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "acgiX3VrXSgLxlxLi9BOsAAAAQU"]
[Sun Mar 29 02:47:59.715718 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:34337] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "acgiXykUyvlQod6qQu2x3gAAANY"]
[Sun Mar 29 02:48:00.337310 2026] [:error] [pid 60346:tid 60371] [client 158.23.144.198:46280] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "acgiYHVrXSgLxlxLi9BOtgAAARQ"]
[Sun Mar 29 02:48:00.857591 2026] [:error] [pid 60346:tid 60369] [client 158.23.144.198:36809] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acgiYHVrXSgLxlxLi9BOuAAAARI"]
[Sun Mar 29 02:48:01.396875 2026] [:error] [pid 39514:tid 39543] [client 158.23.144.198:46308] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acgiYSkUyvlQod6qQu2x5gAAANI"]
[Sun Mar 29 02:48:01.932263 2026] [:error] [pid 60346:tid 60366] [client 158.23.144.198:34334] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acgiYXVrXSgLxlxLi9BOvAAAAQ8"]
[Sun Mar 29 02:48:02.489276 2026] [:error] [pid 60346:tid 60362] [client 158.23.144.198:35293] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acgiYnVrXSgLxlxLi9BOwAAAAQs"]
[Sun Mar 29 02:48:03.060588 2026] [:error] [pid 39427:tid 39453] [client 158.23.144.198:3919] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acgiY1vLf0RDUqcYq-ZZlAAAABU"]
[Sun Mar 29 02:48:03.660572 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:35306] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acgiYykUyvlQod6qQu2x6AAAAMQ"]
[Sun Mar 29 02:48:04.429684 2026] [:error] [pid 39427:tid 39432] [client 158.23.144.198:65128] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acgiZFvLf0RDUqcYq-ZZmwAAAAA"]
[Sun Mar 29 02:48:04.933974 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:35286] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acgiZCkUyvlQod6qQu2x6wAAANE"]
[Sun Mar 29 02:48:05.709140 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:3590] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acgiZSkUyvlQod6qQu2x7wAAAMI"]
[Sun Mar 29 02:48:06.411528 2026] [:error] [pid 39514:tid 39543] [client 158.23.144.198:35301] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acgiZikUyvlQod6qQu2x8AAAANI"]
[Sun Mar 29 02:48:06.971705 2026] [:error] [pid 60346:tid 60371] [client 158.23.144.198:36846] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acgiZnVrXSgLxlxLi9BO0AAAARQ"]
[Sun Mar 29 02:48:07.534539 2026] [:error] [pid 60346:tid 60360] [client 158.23.144.198:3584] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acgiZ3VrXSgLxlxLi9BO1AAAAQk"]
[Sun Mar 29 02:48:08.146529 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:34712] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acgiaCkUyvlQod6qQu2x-QAAAM8"]
[Sun Mar 29 02:48:08.953865 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:34362] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acgiaE8pSj6sqgZaItnuCAAAAJY"]
[Sun Mar 29 02:48:09.713536 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:34363] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acgiaVvLf0RDUqcYq-ZZnQAAAA8"]
[Sun Mar 29 02:48:10.290293 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:43918] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acgialvLf0RDUqcYq-ZZnwAAAA4"]
[Sun Mar 29 02:48:11.128738 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:36227] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "acgia1vLf0RDUqcYq-ZZpgAAABI"]
[Sun Mar 29 02:48:11.793384 2026] [:error] [pid 60346:tid 60353] [client 158.23.144.198:3930] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "acgia3VrXSgLxlxLi9BO2QAAAQI"]
[Sun Mar 29 02:48:12.609944 2026] [:error] [pid 39429:tid 39490] [client 158.23.144.198:36850] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "acgibE8pSj6sqgZaItnuDQAAAIQ"]
[Sun Mar 29 02:48:14.067586 2026] [:error] [pid 39429:tid 39493] [client 158.23.144.198:3908] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "acgibk8pSj6sqgZaItnuEAAAAIc"]
[Sun Mar 29 02:48:14.568655 2026] [:error] [pid 60346:tid 60368] [client 158.23.144.198:35275] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "acgibnVrXSgLxlxLi9BO5AAAARE"]
[Sun Mar 29 02:48:15.082563 2026] [:error] [pid 60346:tid 60360] [client 158.23.144.198:46323] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "acgib3VrXSgLxlxLi9BO5wAAAQk"]
[Sun Mar 29 02:48:15.820810 2026] [:error] [pid 60346:tid 60354] [client 158.23.144.198:40417] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "acgib3VrXSgLxlxLi9BO6wAAAQM"]
[Sun Mar 29 02:48:16.420530 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:36280] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "acgicFvLf0RDUqcYq-ZZqwAAAAM"]
[Sun Mar 29 02:48:17.615159 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:3967] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acgicVvLf0RDUqcYq-ZZsQAAAAY"]
[Sun Mar 29 02:48:20.081013 2026] [:error] [pid 60346:tid 60371] [client 158.23.144.198:54861] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acgidHVrXSgLxlxLi9BO9gAAARQ"]
[Sun Mar 29 02:48:20.745413 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:3617] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acgidKXMrozFMIaP8nIKZQAAAFQ"]
[Sun Mar 29 02:48:21.199481 2026] [:error] [pid 39429:tid 39488] [client 158.23.144.198:54905] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acgidU8pSj6sqgZaItnuFwAAAII"]
[Sun Mar 29 02:48:21.755431 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:35321] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "acgidSkUyvlQod6qQu2yBQAAAMs"]
[Sun Mar 29 02:48:22.888494 2026] [:error] [pid 60346:tid 60365] [client 158.23.144.198:36829] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "acgidnVrXSgLxlxLi9BPAwAAAQ4"]
[Sun Mar 29 02:48:23.546876 2026] [:error] [pid 60346:tid 60361] [client 158.23.144.198:54852] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "acgid3VrXSgLxlxLi9BPBgAAAQo"]
[Sun Mar 29 02:48:24.596268 2026] [:error] [pid 60346:tid 60360] [client 158.23.144.198:34346] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "acgieHVrXSgLxlxLi9BPDgAAAQk"]
[Sun Mar 29 02:48:26.200654 2026] [:error] [pid 60346:tid 60371] [client 158.23.144.198:36830] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acgienVrXSgLxlxLi9BPGAAAARQ"]
[Sun Mar 29 02:48:27.132996 2026] [:error] [pid 60346:tid 60359] [client 158.23.144.198:35300] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acgie3VrXSgLxlxLi9BPHwAAAQg"]
[Sun Mar 29 02:48:27.895103 2026] [:error] [pid 39428:tid 39468] [client 158.23.144.198:65150] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acgie6XMrozFMIaP8nIKbQAAAEk"]
[Sun Mar 29 02:48:28.875596 2026] [:error] [pid 60346:tid 60359] [client 158.23.144.198:65150] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acgifHVrXSgLxlxLi9BPJgAAAQg"]
[Sun Mar 29 02:48:29.831241 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:35325] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acgifU8pSj6sqgZaItnuHQAAAIY"]
[Sun Mar 29 02:48:31.440942 2026] [:error] [pid 60346:tid 60357] [client 158.23.144.198:3966] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acgif3VrXSgLxlxLi9BPLQAAAQY"]
[Sun Mar 29 02:48:32.742600 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:3587] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acgigKXMrozFMIaP8nIKcAAAAEg"]
[Sun Mar 29 02:48:33.904126 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:65146] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acgigVvLf0RDUqcYq-ZZwQAAABc"]
[Sun Mar 29 02:48:36.456064 2026] [:error] [pid 39428:tid 39481] [client 158.23.144.198:40445] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bo.php"] [unique_id "acgihKXMrozFMIaP8nIKdgAAAFY"]
[Sun Mar 29 02:49:33.347199 2026] [:error] [pid 60346:tid 60363] [client 158.23.144.198:36270] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acgivXVrXSgLxlxLi9BQLgAAAQw"]
[Sun Mar 29 02:49:34.111197 2026] [:error] [pid 60346:tid 60358] [client 158.23.144.198:39839] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acgivnVrXSgLxlxLi9BQNQAAAQc"]
[Sun Mar 29 02:49:34.998917 2026] [:error] [pid 60346:tid 60352] [client 158.23.144.198:36266] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acgivnVrXSgLxlxLi9BQOAAAAQE"]
[Sun Mar 29 02:49:37.402646 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:54904] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "acgiwVvLf0RDUqcYq-ZZ_AAAABM"]
[Sun Mar 29 02:49:38.289934 2026] [:error] [pid 60346:tid 60352] [client 158.23.144.198:51046] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acgiwnVrXSgLxlxLi9BQWQAAAQE"]
[Sun Mar 29 02:49:39.133832 2026] [:error] [pid 39427:tid 39434] [client 158.23.144.198:34321] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acgiw1vLf0RDUqcYq-ZZ_wAAAAI"]
[Sun Mar 29 02:49:39.746893 2026] [:error] [pid 39427:tid 39432] [client 158.23.144.198:3603] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acgiw1vLf0RDUqcYq-ZaAwAAAAA"]
[Sun Mar 29 02:49:40.489849 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:46272] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acgixCkUyvlQod6qQu2ydAAAAMw"]
[Sun Mar 29 02:49:41.066067 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:3917] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acgixVvLf0RDUqcYq-ZaBQAAAAU"]
[Sun Mar 29 02:49:41.731997 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:3592] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acgixVvLf0RDUqcYq-ZaCQAAAAw"]
[Sun Mar 29 02:49:42.237710 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:36859] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acgixikUyvlQod6qQu2yeAAAAMs"]
[Sun Mar 29 02:49:42.740216 2026] [:error] [pid 39428:tid 39468] [client 158.23.144.198:36247] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "acgixqXMrozFMIaP8nIKnAAAAEk"]
[Sun Mar 29 02:49:43.354381 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:3606] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acgixykUyvlQod6qQu2yfQAAAMM"]
[Sun Mar 29 02:49:43.952081 2026] [:error] [pid 60346:tid 60351] [client 158.23.144.198:34330] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acgix3VrXSgLxlxLi9BQbQAAAQA"]
[Sun Mar 29 02:49:44.504397 2026] [:error] [pid 60346:tid 60365] [client 158.23.144.198:3604] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acgiyHVrXSgLxlxLi9BQcwAAAQ4"]
[Sun Mar 29 02:49:45.067992 2026] [:error] [pid 39429:tid 39495] [client 158.23.144.198:60501] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acgiyU8pSj6sqgZaItnuQQAAAIk"]
[Sun Mar 29 03:07:22.742558 2026] [proxy_fcgi:error] [pid 60346:tid 60374] [client 103.4.122.14:50274] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sun Mar 29 05:01:55.473550 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:24425] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "achBwyE3TArOFrUtgWolkgAAAJU"]
[Sun Mar 29 05:01:55.912928 2026] [:error] [pid 1524:tid 1543] [client 158.23.144.198:24390] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "achBw1oaWSl2asqQCh8NiAAAAQw"]
[Sun Mar 29 05:01:56.295554 2026] [:error] [pid 32359:tid 32367] [client 158.23.144.198:24414] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "achBxAMb8G3UzfQP3WjKKAAAAMY"]
[Sun Mar 29 05:01:56.681953 2026] [:error] [pid 32255:tid 32306] [client 158.23.144.198:24399] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "achBxGnfn-AtRoMbquxEqQAAAE8"]
[Sun Mar 29 05:01:57.125379 2026] [:error] [pid 32254:tid 32284] [client 158.23.144.198:24401] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "achBxaug2IHuyGgCTn8MGgAAABQ"]
[Sun Mar 29 05:01:57.639751 2026] [:error] [pid 32359:tid 32380] [client 158.23.144.198:24332] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "achBxQMb8G3UzfQP3WjKLAAAANM"]
[Sun Mar 29 05:01:58.067280 2026] [:error] [pid 32255:tid 32312] [client 158.23.144.198:24415] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "achBxmnfn-AtRoMbquxEqwAAAFU"]
[Sun Mar 29 05:01:58.468674 2026] [:error] [pid 32255:tid 32293] [client 158.23.144.198:24418] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "achBxmnfn-AtRoMbquxErAAAAEI"]
[Sun Mar 29 05:01:58.942946 2026] [:error] [pid 32255:tid 32291] [client 158.23.144.198:24338] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "achBxmnfn-AtRoMbquxErwAAAEA"]
[Sun Mar 29 05:01:59.445768 2026] [:error] [pid 32359:tid 32368] [client 158.23.144.198:24419] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "achBxwMb8G3UzfQP3WjKLgAAAMc"]
[Sun Mar 29 05:01:59.886414 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:24320] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "achBx1oaWSl2asqQCh8NkAAAAQo"]
[Sun Mar 29 05:02:00.289386 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:24342] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "achByFoaWSl2asqQCh8NlAAAARg"]
[Sun Mar 29 05:02:00.682979 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:24434] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "achByFoaWSl2asqQCh8NlgAAAQg"]
[Sun Mar 29 05:02:01.086524 2026] [:error] [pid 32254:tid 32282] [client 158.23.144.198:24410] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "achByaug2IHuyGgCTn8MHgAAABI"]
[Sun Mar 29 05:02:01.470805 2026] [:error] [pid 32359:tid 32370] [client 158.23.144.198:24329] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "achByQMb8G3UzfQP3WjKMAAAAMk"]
[Sun Mar 29 05:02:01.857117 2026] [:error] [pid 32254:tid 32279] [client 158.23.144.198:24441] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "achByaug2IHuyGgCTn8MIAAAAA8"]
[Sun Mar 29 05:02:02.294553 2026] [:error] [pid 32359:tid 32362] [client 158.23.144.198:24378] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "achBygMb8G3UzfQP3WjKMQAAAME"]
[Sun Mar 29 05:02:02.717523 2026] [:error] [pid 32257:tid 32336] [client 158.23.144.198:24340] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "achByiE3TArOFrUtgWolmQAAAJI"]
[Sun Mar 29 05:02:03.106259 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:24324] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "achBy1oaWSl2asqQCh8NmgAAAQ0"]
[Sun Mar 29 05:02:03.507991 2026] [:error] [pid 32254:tid 32281] [client 158.23.144.198:24377] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "achBy6ug2IHuyGgCTn8MJAAAABE"]
[Sun Mar 29 05:02:03.900016 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:24374] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "achByyE3TArOFrUtgWolngAAAJE"]
[Sun Mar 29 05:02:04.363652 2026] [:error] [pid 32254:tid 32280] [client 158.23.144.198:24426] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "achBzKug2IHuyGgCTn8MJQAAABA"]
[Sun Mar 29 05:02:04.826999 2026] [:error] [pid 32255:tid 32311] [client 158.23.144.198:24447] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "achBzGnfn-AtRoMbquxEugAAAFQ"]
[Sun Mar 29 05:02:05.227137 2026] [:error] [pid 32255:tid 32294] [client 158.23.144.198:24433] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "achBzWnfn-AtRoMbquxEvgAAAEM"]
[Sun Mar 29 05:02:05.696104 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:24424] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpmini.php"] [unique_id "achBzSE3TArOFrUtgWolowAAAJM"]
[Sun Mar 29 05:02:06.182446 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:24392] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpmini.php"] [unique_id "achBzloaWSl2asqQCh8NoAAAARM"]
[Sun Mar 29 05:02:06.633062 2026] [:error] [pid 32257:tid 32333] [client 158.23.144.198:24343] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpmini.php"] [unique_id "achBziE3TArOFrUtgWolpgAAAI8"]
[Sun Mar 29 05:02:07.065816 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:24445] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpmini.php"] [unique_id "achBzyE3TArOFrUtgWolqQAAAJg"]
[Sun Mar 29 05:02:07.459015 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:24393] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "achBzyE3TArOFrUtgWolqwAAAII"]
[Sun Mar 29 05:02:07.904037 2026] [:error] [pid 32257:tid 32331] [client 158.23.144.198:24325] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "achBzyE3TArOFrUtgWolsAAAAI0"]
[Sun Mar 29 05:02:08.333118 2026] [:error] [pid 32359:tid 32365] [client 158.23.144.198:24417] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "achB0AMb8G3UzfQP3WjKNgAAAMQ"]
[Sun Mar 29 05:02:08.793960 2026] [:error] [pid 32359:tid 32383] [client 158.23.144.198:24331] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "achB0AMb8G3UzfQP3WjKOAAAANY"]
[Sun Mar 29 05:02:09.188985 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:24411] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tbute.php"] [unique_id "achB0SE3TArOFrUtgWolswAAAJY"]
[Sun Mar 29 05:02:09.655506 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:24398] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tbute.php"] [unique_id "achB0VoaWSl2asqQCh8NowAAAQk"]
[Sun Mar 29 05:02:10.075687 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:24336] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tbute.php"] [unique_id "achB0iE3TArOFrUtgWoltQAAAIk"]
[Sun Mar 29 05:02:10.522573 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:24327] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rovoj.php"] [unique_id "achB0iE3TArOFrUtgWoluAAAAIs"]
[Sun Mar 29 05:02:10.937698 2026] [:error] [pid 1524:tid 1543] [client 158.23.144.198:24290] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rovoj.php"] [unique_id "achB0loaWSl2asqQCh8NpAAAAQw"]
[Sun Mar 29 05:02:11.333857 2026] [:error] [pid 32254:tid 32264] [client 158.23.144.198:24436] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rovoj.php"] [unique_id "achB06ug2IHuyGgCTn8MKgAAAAA"]
[Sun Mar 29 05:02:11.775633 2026] [:error] [pid 1524:tid 1528] [client 158.23.144.198:24431] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rovoj.php"] [unique_id "achB01oaWSl2asqQCh8NpQAAAQE"]
[Sun Mar 29 05:02:12.165793 2026] [:error] [pid 1524:tid 1548] [client 158.23.144.198:24439] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r3grt7.php"] [unique_id "achB1FoaWSl2asqQCh8NqAAAARE"]
[Sun Mar 29 05:02:12.590706 2026] [:error] [pid 1524:tid 1546] [client 158.23.144.198:24389] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r3grt7.php"] [unique_id "achB1FoaWSl2asqQCh8NqQAAAQ8"]
[Sun Mar 29 05:02:13.024639 2026] [:error] [pid 1524:tid 1532] [client 158.23.144.198:24436] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r3grt7.php"] [unique_id "achB1VoaWSl2asqQCh8NqgAAAQQ"]
[Sun Mar 29 05:02:13.440232 2026] [:error] [pid 32359:tid 32376] [client 158.23.144.198:24335] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r3grt7.php"] [unique_id "achB1QMb8G3UzfQP3WjKPQAAAM8"]
[Sun Mar 29 05:02:13.885208 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:24370] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phina.php"] [unique_id "achB1VoaWSl2asqQCh8NqwAAAQ0"]
[Sun Mar 29 05:02:14.269127 2026] [:error] [pid 1524:tid 1554] [client 158.23.144.198:24258] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phina.php"] [unique_id "achB1loaWSl2asqQCh8NrQAAARY"]
[Sun Mar 29 05:02:14.773343 2026] [:error] [pid 1524:tid 1531] [client 158.23.144.198:24264] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phina.php"] [unique_id "achB1loaWSl2asqQCh8NsAAAAQM"]
[Sun Mar 29 05:02:15.195167 2026] [:error] [pid 1524:tid 1555] [client 158.23.144.198:24271] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phina.php"] [unique_id "achB11oaWSl2asqQCh8NswAAARc"]
[Sun Mar 29 05:02:15.618408 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:24388] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "achB12nfn-AtRoMbquxExQAAAEg"]
[Sun Mar 29 05:02:16.089336 2026] [:error] [pid 1524:tid 1542] [client 158.23.144.198:24407] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "achB2FoaWSl2asqQCh8NtQAAAQs"]
[Sun Mar 29 05:02:16.532140 2026] [:error] [pid 32254:tid 32285] [client 158.23.144.198:24394] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "achB2Kug2IHuyGgCTn8MLgAAABU"]
[Sun Mar 29 05:02:16.956411 2026] [:error] [pid 32359:tid 32368] [client 158.23.144.198:24262] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "achB2AMb8G3UzfQP3WjKPwAAAMc"]
[Sun Mar 29 05:02:17.376641 2026] [:error] [pid 32359:tid 32378] [client 158.23.144.198:24367] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "achB2QMb8G3UzfQP3WjKQAAAANE"]
[Sun Mar 29 05:02:17.810882 2026] [:error] [pid 32254:tid 32276] [client 158.23.144.198:24348] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "achB2aug2IHuyGgCTn8MLwAAAAw"]
[Sun Mar 29 05:02:18.282377 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:24341] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "achB2loaWSl2asqQCh8NvAAAAQg"]
[Sun Mar 29 05:02:18.863986 2026] [:error] [pid 1524:tid 1548] [client 158.23.144.198:24437] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "achB2loaWSl2asqQCh8NvgAAARE"]
[Sun Mar 29 05:02:19.270554 2026] [:error] [pid 32254:tid 32287] [client 158.23.144.198:24400] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs7.php"] [unique_id "achB26ug2IHuyGgCTn8MMAAAABc"]
[Sun Mar 29 05:02:20.015652 2026] [:error] [pid 32255:tid 32292] [client 158.23.144.198:24323] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs7.php"] [unique_id "achB3Gnfn-AtRoMbquxEyAAAAEE"]
[Sun Mar 29 05:02:20.499802 2026] [:error] [pid 32255:tid 32300] [client 158.23.144.198:24337] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs7.php"] [unique_id "achB3Gnfn-AtRoMbquxEyQAAAEk"]
[Sun Mar 29 05:02:20.969465 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:24261] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs7.php"] [unique_id "achB3AMb8G3UzfQP3WjKRQAAAMs"]
[Sun Mar 29 05:02:21.363119 2026] [:error] [pid 32254:tid 32280] [client 158.23.144.198:24409] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "achB3aug2IHuyGgCTn8MMgAAABA"]
[Sun Mar 29 05:02:21.870753 2026] [:error] [pid 32255:tid 32306] [client 158.23.144.198:24351] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "achB3Wnfn-AtRoMbquxEywAAAE8"]
[Sun Mar 29 05:02:22.264431 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:24435] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "achB3iE3TArOFrUtgWolugAAAIo"]
[Sun Mar 29 05:02:22.690808 2026] [:error] [pid 32254:tid 32266] [client 158.23.144.198:24430] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "achB3qug2IHuyGgCTn8MNAAAAAI"]
[Sun Mar 29 05:02:23.085932 2026] [:error] [pid 32257:tid 32323] [client 158.23.144.198:24350] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/595.php"] [unique_id "achB3yE3TArOFrUtgWolvAAAAIU"]
[Sun Mar 29 05:02:23.535190 2026] [:error] [pid 32359:tid 32383] [client 158.23.144.198:24438] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/595.php"] [unique_id "achB3wMb8G3UzfQP3WjKSQAAANY"]
[Sun Mar 29 05:02:23.992626 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:24363] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/595.php"] [unique_id "achB3yE3TArOFrUtgWolwAAAAIE"]
[Sun Mar 29 05:02:24.480925 2026] [:error] [pid 32255:tid 32293] [client 158.23.144.198:24265] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/595.php"] [unique_id "achB4Gnfn-AtRoMbquxEzgAAAEI"]
[Sun Mar 29 05:02:24.895648 2026] [:error] [pid 32257:tid 32332] [client 158.23.144.198:24442] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "achB4CE3TArOFrUtgWolwgAAAI4"]
[Sun Mar 29 05:02:25.397229 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:24384] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "achB4SE3TArOFrUtgWolxQAAAJY"]
[Sun Mar 29 05:02:25.786974 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:24412] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "achB4SE3TArOFrUtgWolxgAAAIk"]
[Sun Mar 29 05:02:26.180341 2026] [:error] [pid 32255:tid 32314] [client 158.23.144.198:24346] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "achB4mnfn-AtRoMbquxE0AAAAFc"]
[Sun Mar 29 05:02:26.598193 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:24359] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gk.php"] [unique_id "achB4iE3TArOFrUtgWolyAAAAIs"]
[Sun Mar 29 05:02:27.115560 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:24397] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gk.php"] [unique_id "achB4yE3TArOFrUtgWolywAAAJg"]
[Sun Mar 29 05:02:27.539789 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:24276] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gk.php"] [unique_id "achB4yE3TArOFrUtgWolzQAAAIo"]
[Sun Mar 29 05:02:28.144735 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:24446] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gk.php"] [unique_id "achB5CE3TArOFrUtgWol0QAAAJE"]
[Sun Mar 29 05:02:28.864374 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:24321] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "achB5CE3TArOFrUtgWol0wAAAIg"]
[Sun Mar 29 05:02:29.273955 2026] [:error] [pid 1524:tid 1547] [client 158.23.144.198:24270] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "achB5VoaWSl2asqQCh8NwQAAARA"]
[Sun Mar 29 05:02:29.690038 2026] [:error] [pid 32255:tid 32305] [client 158.23.144.198:24387] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "achB5Wnfn-AtRoMbquxE0wAAAE4"]
[Sun Mar 29 05:02:30.210728 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:24259] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "achB5iE3TArOFrUtgWol1gAAAIA"]
[Sun Mar 29 05:02:30.627804 2026] [:error] [pid 32257:tid 32336] [client 158.23.144.198:24395] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "achB5iE3TArOFrUtgWol2AAAAJI"]
[Sun Mar 29 05:02:31.012606 2026] [:error] [pid 32359:tid 32370] [client 158.23.144.198:24362] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "achB5wMb8G3UzfQP3WjKUgAAAMk"]
[Sun Mar 29 05:02:31.749012 2026] [:error] [pid 32255:tid 32309] [client 158.23.144.198:24353] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "achB52nfn-AtRoMbquxE1wAAAFI"]
[Sun Mar 29 05:02:32.199494 2026] [:error] [pid 1524:tid 1555] [client 158.23.144.198:24284] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "achB6FoaWSl2asqQCh8NxAAAARc"]
[Sun Mar 29 05:02:32.626268 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:24404] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "achB6AMb8G3UzfQP3WjKVQAAAMs"]
[Sun Mar 29 05:02:33.062547 2026] [:error] [pid 32359:tid 32373] [client 158.23.144.198:24422] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "achB6QMb8G3UzfQP3WjKVgAAAMw"]
[Sun Mar 29 05:02:33.461248 2026] [:error] [pid 32255:tid 32302] [client 158.23.144.198:24330] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "achB6Wnfn-AtRoMbquxE2AAAAEs"]
[Sun Mar 29 05:02:33.851864 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:24386] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "achB6VoaWSl2asqQCh8NyAAAAQk"]
[Sun Mar 29 05:02:34.243221 2026] [:error] [pid 32255:tid 32298] [client 158.23.144.198:24339] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "achB6mnfn-AtRoMbquxE2wAAAEc"]
[Sun Mar 29 05:02:34.641814 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:24429] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "achB6loaWSl2asqQCh8NyQAAARg"]
[Sun Mar 29 05:02:35.030890 2026] [:error] [pid 1524:tid 1536] [client 158.23.144.198:24403] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "achB61oaWSl2asqQCh8NygAAAQc"]
[Sun Mar 29 05:02:35.480748 2026] [:error] [pid 32255:tid 32307] [client 158.23.144.198:24391] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws79.php"] [unique_id "achB62nfn-AtRoMbquxE3QAAAFA"]
[Sun Mar 29 05:02:35.897661 2026] [:error] [pid 32255:tid 32306] [client 158.23.144.198:24381] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "achB62nfn-AtRoMbquxE3wAAAE8"]
[Sun Mar 29 05:02:36.280675 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:24360] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "achB7CE3TArOFrUtgWol2gAAAIs"]
[Sun Mar 29 05:02:36.714965 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:24256] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "achB7FoaWSl2asqQCh8NzAAAAQg"]
[Sun Mar 29 05:02:37.135760 2026] [:error] [pid 32255:tid 32301] [client 158.23.144.198:24382] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "achB7Wnfn-AtRoMbquxE4gAAAEo"]
[Sun Mar 29 05:02:37.542223 2026] [:error] [pid 32255:tid 32314] [client 158.23.144.198:24385] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws50.php"] [unique_id "achB7Wnfn-AtRoMbquxE4wAAAFc"]
[Sun Mar 29 05:02:37.956378 2026] [:error] [pid 1524:tid 1532] [client 158.23.144.198:24364] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws50.php"] [unique_id "achB7VoaWSl2asqQCh8NzgAAAQQ"]
[Sun Mar 29 05:02:38.366569 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:24212] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws50.php"] [unique_id "achB7loaWSl2asqQCh8NzwAAAQY"]
[Sun Mar 29 05:02:38.811086 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:24257] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws50.php"] [unique_id "achB7iE3TArOFrUtgWol3wAAAJE"]
[Sun Mar 29 05:02:39.233307 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:24344] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws44.php"] [unique_id "achB7yE3TArOFrUtgWol4wAAAJU"]
[Sun Mar 29 05:02:39.649592 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:24334] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws44.php"] [unique_id "achB7yE3TArOFrUtgWol5AAAAIE"]
[Sun Mar 29 05:02:40.076055 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:24365] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws44.php"] [unique_id "achB8CE3TArOFrUtgWol5wAAAIw"]
[Sun Mar 29 05:02:40.508471 2026] [:error] [pid 32255:tid 32296] [client 158.23.144.198:24263] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws44.php"] [unique_id "achB8Gnfn-AtRoMbquxE5QAAAEU"]
[Sun Mar 29 05:02:40.992189 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:24287] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "achB8CE3TArOFrUtgWol6QAAAJY"]
[Sun Mar 29 05:02:41.472956 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:24275] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "achB8VoaWSl2asqQCh8N2gAAARg"]
[Sun Mar 29 05:02:41.869248 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:24328] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "achB8VoaWSl2asqQCh8N3QAAAQg"]
[Sun Mar 29 05:02:42.271346 2026] [:error] [pid 1524:tid 1532] [client 158.23.144.198:24196] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "achB8loaWSl2asqQCh8N4QAAAQQ"]
[Sun Mar 29 05:02:42.671158 2026] [:error] [pid 1524:tid 1546] [client 158.23.144.198:24440] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "achB8loaWSl2asqQCh8N4wAAAQ8"]
[Sun Mar 29 05:02:43.087188 2026] [:error] [pid 32359:tid 32382] [client 158.23.144.198:24272] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "achB8wMb8G3UzfQP3WjKWwAAANU"]
[Sun Mar 29 05:02:43.542444 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:24423] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "achB81oaWSl2asqQCh8N6AAAARM"]
[Sun Mar 29 05:02:44.167949 2026] [:error] [pid 32359:tid 32381] [client 158.23.144.198:24428] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "achB9AMb8G3UzfQP3WjKXgAAANQ"]
[Sun Mar 29 05:02:44.564193 2026] [:error] [pid 32254:tid 32264] [client 158.23.144.198:24203] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws40.php"] [unique_id "achB9Kug2IHuyGgCTn8MPAAAAAA"]
[Sun Mar 29 05:02:44.956442 2026] [:error] [pid 32359:tid 32378] [client 158.23.144.198:24357] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws40.php"] [unique_id "achB9AMb8G3UzfQP3WjKYAAAANE"]
[Sun Mar 29 05:02:45.343340 2026] [:error] [pid 32255:tid 32298] [client 158.23.144.198:24423] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws40.php"] [unique_id "achB9Wnfn-AtRoMbquxE6gAAAEc"]
[Sun Mar 29 05:02:45.856982 2026] [:error] [pid 32254:tid 32271] [client 158.23.144.198:24286] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws40.php"] [unique_id "achB9aug2IHuyGgCTn8MPwAAAAc"]
[Sun Mar 29 05:02:46.302742 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:24203] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws36.php"] [unique_id "achB9gMb8G3UzfQP3WjKZAAAAMs"]
[Sun Mar 29 05:02:46.715380 2026] [:error] [pid 32359:tid 32377] [client 158.23.144.198:24432] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws36.php"] [unique_id "achB9gMb8G3UzfQP3WjKZgAAANA"]
[Sun Mar 29 05:02:47.119165 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:24296] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws36.php"] [unique_id "achB9yE3TArOFrUtgWol7wAAAJg"]
[Sun Mar 29 05:02:47.509024 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:24345] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws36.php"] [unique_id "achB9yE3TArOFrUtgWol8QAAAJc"]
[Sun Mar 29 05:02:47.917527 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:24349] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vwxbi.php"] [unique_id "achB9yE3TArOFrUtgWol8wAAAJE"]
[Sun Mar 29 05:02:48.313182 2026] [:error] [pid 32255:tid 32311] [client 158.23.144.198:24355] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vwxbi.php"] [unique_id "achB-Gnfn-AtRoMbquxE7AAAAFQ"]
[Sun Mar 29 05:02:48.721967 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:24306] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vwxbi.php"] [unique_id "achB-CE3TArOFrUtgWol9AAAAJU"]
[Sun Mar 29 05:02:49.136145 2026] [:error] [pid 32359:tid 32374] [client 158.23.144.198:24396] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vwxbi.php"] [unique_id "achB-QMb8G3UzfQP3WjKbgAAAM0"]
[Sun Mar 29 05:02:49.538807 2026] [:error] [pid 32257:tid 32323] [client 158.23.144.198:24368] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shellerr.php"] [unique_id "achB-SE3TArOFrUtgWol9QAAAIU"]
[Sun Mar 29 05:02:49.939981 2026] [:error] [pid 32255:tid 32306] [client 158.23.144.198:24366] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shellerr.php"] [unique_id "achB-Wnfn-AtRoMbquxE7gAAAE8"]
[Sun Mar 29 05:02:50.341301 2026] [:error] [pid 32254:tid 32280] [client 158.23.144.198:24413] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shellerr.php"] [unique_id "achB-qug2IHuyGgCTn8MRAAAABA"]
[Sun Mar 29 05:02:50.764145 2026] [:error] [pid 32255:tid 32310] [client 158.23.144.198:24268] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shellerr.php"] [unique_id "achB-mnfn-AtRoMbquxE7wAAAFM"]
[Sun Mar 29 05:02:51.205641 2026] [:error] [pid 32359:tid 32368] [client 158.23.144.198:24408] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vaza.php"] [unique_id "achB-wMb8G3UzfQP3WjKcQAAAMc"]
[Sun Mar 29 05:02:51.635804 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:24288] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vaza.php"] [unique_id "achB-1oaWSl2asqQCh8N6gAAAQo"]
[Sun Mar 29 05:02:52.033434 2026] [:error] [pid 32359:tid 32366] [client 158.23.144.198:24405] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vaza.php"] [unique_id "achB_AMb8G3UzfQP3WjKcwAAAMU"]
[Sun Mar 29 05:02:52.467792 2026] [:error] [pid 32255:tid 32312] [client 158.23.144.198:24420] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vaza.php"] [unique_id "achB_Gnfn-AtRoMbquxE8gAAAFU"]
[Sun Mar 29 05:02:52.907046 2026] [:error] [pid 32254:tid 32269] [client 158.23.144.198:24213] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cvz.php"] [unique_id "achB_Kug2IHuyGgCTn8MSAAAAAU"]
[Sun Mar 29 05:03:38.162250 2026] [:error] [pid 32359:tid 32385] [client 158.23.144.198:24416] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "achCKgMb8G3UzfQP3WjKnQAAANg"]
[Sun Mar 29 05:03:38.571525 2026] [:error] [pid 32255:tid 32312] [client 158.23.144.198:24304] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "achCKmnfn-AtRoMbquxFJQAAAFU"]
[Sun Mar 29 05:03:39.227973 2026] [:error] [pid 32359:tid 32381] [client 158.23.144.198:24303] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "achCKwMb8G3UzfQP3WjKnwAAANQ"]
[Sun Mar 29 05:03:39.622339 2026] [:error] [pid 32254:tid 32278] [client 158.23.144.198:24443] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "achCK6ug2IHuyGgCTn8MXQAAAA4"]
[Sun Mar 29 05:03:40.009396 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:24326] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "achCLCE3TArOFrUtgWomPgAAAIc"]
[Sun Mar 29 05:03:40.398512 2026] [:error] [pid 32254:tid 32288] [client 158.23.144.198:24293] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "achCLKug2IHuyGgCTn8MXgAAABg"]
[Sun Mar 29 05:03:40.801826 2026] [:error] [pid 32254:tid 32267] [client 158.23.144.198:24444] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "achCLKug2IHuyGgCTn8MXwAAAAM"]
[Sun Mar 29 05:03:41.187938 2026] [:error] [pid 32359:tid 32384] [client 158.23.144.198:24333] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "achCLQMb8G3UzfQP3WjKowAAANc"]
[Sun Mar 29 05:03:41.575505 2026] [:error] [pid 32359:tid 32364] [client 158.23.144.198:24283] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n1GiO.php"] [unique_id "achCLQMb8G3UzfQP3WjKpgAAAMM"]
[Sun Mar 29 05:03:41.984906 2026] [:error] [pid 1524:tid 1536] [client 158.23.144.198:24356] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n1GiO.php"] [unique_id "achCLVoaWSl2asqQCh8OPgAAAQc"]
[Sun Mar 29 05:03:42.376852 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:24227] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n1GiO.php"] [unique_id "achCLloaWSl2asqQCh8OQQAAARg"]
[Sun Mar 29 05:03:42.781396 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:24307] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n1GiO.php"] [unique_id "achCLloaWSl2asqQCh8OQgAAAQg"]
[Sun Mar 29 05:03:43.179419 2026] [:error] [pid 32254:tid 32284] [client 158.23.144.198:24273] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pLdK1.php"] [unique_id "achCL6ug2IHuyGgCTn8MYQAAABQ"]
[Sun Mar 29 05:03:43.570151 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:24316] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pLdK1.php"] [unique_id "achCLyE3TArOFrUtgWomRwAAAIE"]
[Sun Mar 29 05:03:43.971028 2026] [:error] [pid 1524:tid 1546] [client 158.23.144.198:24278] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pLdK1.php"] [unique_id "achCL1oaWSl2asqQCh8OQwAAAQ8"]
[Sun Mar 29 05:03:44.390773 2026] [:error] [pid 1524:tid 1532] [client 158.23.144.198:24319] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pLdK1.php"] [unique_id "achCMFoaWSl2asqQCh8ORQAAAQQ"]
[Sun Mar 29 05:03:44.782083 2026] [:error] [pid 32255:tid 32313] [client 158.23.144.198:24292] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/llb1J.php"] [unique_id "achCMGnfn-AtRoMbquxFJgAAAFY"]
[Sun Mar 29 05:03:45.177331 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:24308] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/llb1J.php"] [unique_id "achCMSE3TArOFrUtgWomUgAAAJY"]
[Sun Mar 29 05:03:45.571218 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:24280] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/llb1J.php"] [unique_id "achCMSE3TArOFrUtgWomVAAAAIg"]
[Sun Mar 29 05:03:45.963818 2026] [:error] [pid 32255:tid 32302] [client 158.23.144.198:24373] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/llb1J.php"] [unique_id "achCMWnfn-AtRoMbquxFKAAAAEs"]
[Sun Mar 29 05:03:46.350185 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:24222] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jeZDu.php"] [unique_id "achCMiE3TArOFrUtgWomWAAAAIk"]
[Sun Mar 29 05:03:46.781762 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:24347] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jeZDu.php"] [unique_id "achCMgMb8G3UzfQP3WjKqQAAAMs"]
[Sun Mar 29 05:03:47.164439 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:24267] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jeZDu.php"] [unique_id "achCMyE3TArOFrUtgWomWgAAAJc"]
[Sun Mar 29 05:03:47.549551 2026] [:error] [pid 32254:tid 32279] [client 158.23.144.198:24260] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jeZDu.php"] [unique_id "achCM6ug2IHuyGgCTn8MZAAAAA8"]
[Sun Mar 29 05:03:47.946387 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:24427] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "achCMyE3TArOFrUtgWomXgAAAJg"]
[Sun Mar 29 05:03:48.334549 2026] [:error] [pid 32257:tid 32322] [client 158.23.144.198:24301] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "achCNCE3TArOFrUtgWomYQAAAIQ"]
[Sun Mar 29 05:03:48.723658 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:24379] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "achCNCE3TArOFrUtgWomYwAAAIc"]
[Sun Mar 29 05:03:49.110140 2026] [:error] [pid 32257:tid 32333] [client 158.23.144.198:24297] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gec.php"] [unique_id "achCNSE3TArOFrUtgWomZwAAAI8"]
[Sun Mar 29 05:03:49.496988 2026] [:error] [pid 32255:tid 32314] [client 158.23.144.198:24247] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfuKK.php"] [unique_id "achCNWnfn-AtRoMbquxFKQAAAFc"]
[Sun Mar 29 05:03:49.902800 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:24300] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfuKK.php"] [unique_id "achCNWnfn-AtRoMbquxFKwAAAEg"]
[Sun Mar 29 05:03:50.319170 2026] [:error] [pid 32254:tid 32266] [client 158.23.144.198:24209] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfuKK.php"] [unique_id "achCNqug2IHuyGgCTn8MagAAAAI"]
[Sun Mar 29 05:03:50.705138 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:24274] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfuKK.php"] [unique_id "achCNiE3TArOFrUtgWomawAAAIs"]
[Sun Mar 29 05:03:51.103730 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:24193] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OpVq6.php"] [unique_id "achCN1oaWSl2asqQCh8OSQAAAQo"]
[Sun Mar 29 05:03:51.496091 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:24352] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OpVq6.php"] [unique_id "achCN1oaWSl2asqQCh8OSgAAAQ0"]
[Sun Mar 29 05:03:51.901615 2026] [:error] [pid 1524:tid 1555] [client 158.23.144.198:24369] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OpVq6.php"] [unique_id "achCN1oaWSl2asqQCh8OSwAAARc"]
[Sun Mar 29 05:03:52.287714 2026] [:error] [pid 32255:tid 32307] [client 158.23.144.198:24218] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/OpVq6.php"] [unique_id "achCOGnfn-AtRoMbquxFLQAAAFA"]
[Sun Mar 29 05:03:52.675880 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:24214] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Q73BO.php"] [unique_id "achCOCE3TArOFrUtgWomcAAAAII"]
[Sun Mar 29 05:03:53.093395 2026] [:error] [pid 32257:tid 32322] [client 158.23.144.198:24299] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Q73BO.php"] [unique_id "achCOSE3TArOFrUtgWomcgAAAIQ"]
[Sun Mar 29 05:03:53.503831 2026] [:error] [pid 32257:tid 32336] [client 158.23.144.198:24317] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Q73BO.php"] [unique_id "achCOSE3TArOFrUtgWomdQAAAJI"]
[Sun Mar 29 05:03:53.893717 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:24202] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Q73BO.php"] [unique_id "achCOSE3TArOFrUtgWomeAAAAIk"]
[Sun Mar 29 05:03:54.295115 2026] [:error] [pid 1524:tid 1536] [client 158.23.144.198:24421] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rmpoa.php"] [unique_id "achCOloaWSl2asqQCh8OTQAAAQc"]
[Sun Mar 29 05:03:54.718855 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:24289] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rmpoa.php"] [unique_id "achCOiE3TArOFrUtgWomegAAAJc"]
[Sun Mar 29 05:03:55.121110 2026] [:error] [pid 32255:tid 32298] [client 158.23.144.198:24217] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rmpoa.php"] [unique_id "achCO2nfn-AtRoMbquxFLgAAAEc"]
[Sun Mar 29 05:03:55.522373 2026] [:error] [pid 32255:tid 32306] [client 158.23.144.198:24206] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rmpoa.php"] [unique_id "achCO2nfn-AtRoMbquxFMAAAAE8"]
[Sun Mar 29 05:03:55.945804 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:24136] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "achCOyE3TArOFrUtgWomfgAAAIo"]
[Sun Mar 29 05:03:56.360426 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:24266] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "achCPCE3TArOFrUtgWomgAAAAIw"]
[Sun Mar 29 05:03:56.763851 2026] [:error] [pid 32257:tid 32322] [client 158.23.144.198:24279] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "achCPCE3TArOFrUtgWomgwAAAIQ"]
[Sun Mar 29 05:03:57.152400 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:24361] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "achCPSE3TArOFrUtgWomhQAAAJU"]
[Sun Mar 29 05:03:57.580471 2026] [:error] [pid 32254:tid 32275] [client 158.23.144.198:24231] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "achCPaug2IHuyGgCTn8MbwAAAAs"]
[Sun Mar 29 05:03:58.015726 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:24315] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "achCPiE3TArOFrUtgWomiQAAAJM"]
[Sun Mar 29 05:03:58.412757 2026] [:error] [pid 32257:tid 32321] [client 158.23.144.198:24225] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "achCPiE3TArOFrUtgWomiwAAAIM"]
[Sun Mar 29 05:03:58.796414 2026] [:error] [pid 32254:tid 32265] [client 158.23.144.198:24291] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "achCPqug2IHuyGgCTn8MdQAAAAE"]
[Sun Mar 29 05:03:59.182693 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:24195] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "achCPyE3TArOFrUtgWomjgAAAJc"]
[Sun Mar 29 05:03:59.568020 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:24201] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "achCPyE3TArOFrUtgWomkgAAAII"]
[Sun Mar 29 05:03:59.977919 2026] [:error] [pid 32257:tid 32332] [client 158.23.144.198:24216] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "achCPyE3TArOFrUtgWomlgAAAI4"]
[Sun Mar 29 05:04:00.369973 2026] [:error] [pid 32254:tid 32272] [client 158.23.144.198:24207] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "achCQKug2IHuyGgCTn8MdwAAAAg"]
[Sun Mar 29 05:04:00.755891 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:24244] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gelio1.php"] [unique_id "achCQCE3TArOFrUtgWommwAAAIA"]
[Sun Mar 29 05:04:01.248958 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:24380] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gelio1.php"] [unique_id "achCQVoaWSl2asqQCh8OTwAAAQY"]
[Sun Mar 29 05:04:01.739695 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:24211] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gelio1.php"] [unique_id "achCQSE3TArOFrUtgWomnwAAAJY"]
[Sun Mar 29 05:04:02.141593 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:24383] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gelio1.php"] [unique_id "achCQiE3TArOFrUtgWomoQAAAIY"]
[Sun Mar 29 05:04:02.530736 2026] [:error] [pid 32359:tid 32381] [client 158.23.144.198:24375] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "achCQgMb8G3UzfQP3WjKsAAAANQ"]
[Sun Mar 29 05:04:02.918974 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:24246] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "achCQiE3TArOFrUtgWompwAAAIc"]
[Sun Mar 29 05:04:03.330442 2026] [:error] [pid 32255:tid 32305] [client 158.23.144.198:24210] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "achCQ2nfn-AtRoMbquxFNAAAAE4"]
[Sun Mar 29 05:04:03.755940 2026] [:error] [pid 32257:tid 32321] [client 158.23.144.198:24156] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v2.php"] [unique_id "achCQyE3TArOFrUtgWomrAAAAIM"]
[Sun Mar 29 05:04:04.266221 2026] [:error] [pid 32257:tid 32338] [client 158.23.144.198:24198] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "achCRCE3TArOFrUtgWomrwAAAJQ"]
[Sun Mar 29 05:04:04.664457 2026] [:error] [pid 32255:tid 32293] [client 158.23.144.198:24371] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "achCRGnfn-AtRoMbquxFNQAAAEI"]
[Sun Mar 29 05:04:05.080000 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:24250] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "achCRSE3TArOFrUtgWomsQAAAIo"]
[Sun Mar 29 05:04:05.579599 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:24372] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "achCRSE3TArOFrUtgWomswAAAIc"]
[Sun Mar 29 05:04:05.969809 2026] [:error] [pid 32255:tid 32291] [client 158.23.144.198:24128] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "achCRWnfn-AtRoMbquxFNgAAAEA"]
[Sun Mar 29 05:04:06.363121 2026] [:error] [pid 32359:tid 32369] [client 158.23.144.198:24239] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "achCRgMb8G3UzfQP3WjKtQAAAMg"]
[Sun Mar 29 05:04:06.809127 2026] [:error] [pid 32359:tid 32364] [client 158.23.144.198:24200] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "achCRgMb8G3UzfQP3WjKtwAAAMM"]
[Sun Mar 29 05:04:07.209399 2026] [:error] [pid 32254:tid 32266] [client 158.23.144.198:24131] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v4.php"] [unique_id "achCR6ug2IHuyGgCTn8MfgAAAAI"]
[Sun Mar 29 05:04:07.603064 2026] [:error] [pid 32359:tid 32380] [client 158.23.144.198:24310] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "achCRwMb8G3UzfQP3WjKuQAAANM"]
[Sun Mar 29 05:04:07.995750 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:24226] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "achCRyE3TArOFrUtgWomvAAAAIs"]
[Sun Mar 29 05:04:08.394111 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:24311] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "achCSCE3TArOFrUtgWomvgAAAIw"]
[Sun Mar 29 05:04:08.809589 2026] [:error] [pid 32254:tid 32283] [client 158.23.144.198:24129] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "achCSKug2IHuyGgCTn8MgAAAABM"]
[Sun Mar 29 05:04:09.305567 2026] [:error] [pid 32254:tid 32275] [client 158.23.144.198:24245] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "achCSaug2IHuyGgCTn8MhQAAAAs"]
[Sun Mar 29 05:04:09.704850 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:24144] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "achCSSE3TArOFrUtgWomwAAAAJU"]
[Sun Mar 29 05:04:10.112154 2026] [:error] [pid 32359:tid 32365] [client 158.23.144.198:24406] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "achCSgMb8G3UzfQP3WjKvgAAAMQ"]
[Sun Mar 29 05:04:10.508945 2026] [:error] [pid 32359:tid 32383] [client 158.23.144.198:24252] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "achCSgMb8G3UzfQP3WjKwAAAANY"]
[Sun Mar 29 05:04:10.924831 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:24205] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc13.php"] [unique_id "achCSiE3TArOFrUtgWomwQAAAIc"]
[Sun Mar 29 05:04:11.371058 2026] [:error] [pid 32359:tid 32385] [client 158.23.144.198:24251] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc13.php"] [unique_id "achCSwMb8G3UzfQP3WjKxAAAANg"]
[Sun Mar 29 05:04:11.767544 2026] [:error] [pid 32359:tid 32381] [client 158.23.144.198:24302] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc13.php"] [unique_id "achCSwMb8G3UzfQP3WjKxwAAANQ"]
[Sun Mar 29 05:04:12.193385 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:24281] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cc13.php"] [unique_id "achCTCE3TArOFrUtgWomxAAAAIY"]
[Sun Mar 29 05:04:12.623942 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:24295] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "achCTGnfn-AtRoMbquxFPAAAAEg"]
[Sun Mar 29 05:04:13.057451 2026] [:error] [pid 32257:tid 32332] [client 158.23.144.198:24142] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "achCTSE3TArOFrUtgWomxwAAAI4"]
[Sun Mar 29 05:04:13.497188 2026] [:error] [pid 32255:tid 32294] [client 158.23.144.198:24135] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "achCTWnfn-AtRoMbquxFPwAAAEM"]
[Sun Mar 29 05:04:13.928217 2026] [:error] [pid 32257:tid 32338] [client 158.23.144.198:24224] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "achCTSE3TArOFrUtgWomygAAAJQ"]
[Sun Mar 29 05:04:14.557752 2026] [:error] [pid 32359:tid 32366] [client 158.23.144.198:24169] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "achCTgMb8G3UzfQP3WjKygAAAMU"]
[Sun Mar 29 05:04:14.989278 2026] [:error] [pid 32257:tid 32323] [client 158.23.144.198:24367] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "achCTiE3TArOFrUtgWom0QAAAIU"]
[Sun Mar 29 05:04:15.420190 2026] [:error] [pid 32257:tid 32334] [client 158.23.144.198:24277] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "achCTyE3TArOFrUtgWom0wAAAJA"]
[Sun Mar 29 05:04:15.846977 2026] [:error] [pid 32257:tid 32321] [client 158.23.144.198:24148] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "achCTyE3TArOFrUtgWom1QAAAIM"]
[Sun Mar 29 05:04:16.268947 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:24298] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "achCUAMb8G3UzfQP3WjKzAAAAMs"]
[Sun Mar 29 05:04:16.740333 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:24312] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "achCUCE3TArOFrUtgWom2AAAAJc"]
[Sun Mar 29 05:04:17.157086 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:24228] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "achCUSE3TArOFrUtgWom2wAAAJY"]
[Sun Mar 29 05:04:17.600361 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:24145] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccu.php"] [unique_id "achCUSE3TArOFrUtgWom3gAAAII"]
[Sun Mar 29 05:04:18.043348 2026] [:error] [pid 32254:tid 32276] [client 158.23.144.198:24071] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "achCUqug2IHuyGgCTn8MjwAAAAw"]
[Sun Mar 29 05:04:18.525510 2026] [:error] [pid 32254:tid 32273] [client 158.23.144.198:24130] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "achCUqug2IHuyGgCTn8MkAAAAAk"]
[Sun Mar 29 05:04:18.917510 2026] [:error] [pid 32359:tid 32382] [client 158.23.144.198:24194] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "achCUgMb8G3UzfQP3WjK0QAAANU"]
[Sun Mar 29 05:04:19.350289 2026] [:error] [pid 1524:tid 1528] [client 158.23.144.198:24133] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "achCU1oaWSl2asqQCh8OWgAAAQE"]
[Sun Mar 29 05:04:19.801390 2026] [:error] [pid 32257:tid 32333] [client 158.23.144.198:24149] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "achCUyE3TArOFrUtgWom4wAAAI8"]
[Sun Mar 29 05:04:20.302818 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:24232] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "achCVCE3TArOFrUtgWom5gAAAIk"]
[Sun Mar 29 05:04:20.834483 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:24314] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "achCVCE3TArOFrUtgWom6QAAAIY"]
[Sun Mar 29 05:04:21.248397 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:24138] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "achCVSE3TArOFrUtgWom7AAAAJc"]
[Sun Mar 29 05:04:21.650912 2026] [:error] [pid 1524:tid 1555] [client 158.23.144.198:24154] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dragonshell.php"] [unique_id "achCVVoaWSl2asqQCh8OXgAAARc"]
[Sun Mar 29 05:04:22.081932 2026] [:error] [pid 1524:tid 1531] [client 158.23.144.198:24249] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dragonshell.php"] [unique_id "achCVloaWSl2asqQCh8OYAAAAQM"]
[Sun Mar 29 05:04:22.545697 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:24221] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dragonshell.php"] [unique_id "achCVloaWSl2asqQCh8OYgAAAQY"]
[Sun Mar 29 05:04:23.087843 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:24076] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dragonshell.php"] [unique_id "achCVyE3TArOFrUtgWom8QAAAIA"]
[Sun Mar 29 05:04:23.494158 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:24070] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "achCVyE3TArOFrUtgWom9AAAAJE"]
[Sun Mar 29 05:04:23.886064 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:24253] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "achCVyE3TArOFrUtgWom9wAAAIE"]
[Sun Mar 29 05:04:24.283741 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:24143] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "achCWCE3TArOFrUtgWom-wAAAIY"]
[Sun Mar 29 05:04:24.668722 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:24197] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "achCWCE3TArOFrUtgWom_gAAAIg"]
[Sun Mar 29 05:04:25.591357 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:24186] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/caiij.php"] [unique_id "achCWVoaWSl2asqQCh8OZgAAAQg"]
[Sun Mar 29 05:04:25.981584 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:24175] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/caiij.php"] [unique_id "achCWSE3TArOFrUtgWonAQAAAIs"]
[Sun Mar 29 05:04:26.404038 2026] [:error] [pid 1524:tid 1553] [client 158.23.144.198:24236] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/caiij.php"] [unique_id "achCWloaWSl2asqQCh8OagAAARU"]
[Sun Mar 29 05:04:26.803222 2026] [:error] [pid 32254:tid 32270] [client 158.23.144.198:24139] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/caiij.php"] [unique_id "achCWqug2IHuyGgCTn8MmgAAAAY"]
[Sun Mar 29 05:04:27.196289 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:24238] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "achCWyE3TArOFrUtgWonBQAAAII"]
[Sun Mar 29 05:04:27.582701 2026] [:error] [pid 32254:tid 32264] [client 158.23.144.198:24166] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "achCW6ug2IHuyGgCTn8MnAAAAAA"]
[Sun Mar 29 05:04:28.051184 2026] [:error] [pid 32254:tid 32265] [client 158.23.144.198:24391] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "achCXKug2IHuyGgCTn8MnQAAAAE"]
[Sun Mar 29 05:04:28.584715 2026] [:error] [pid 32257:tid 32338] [client 158.23.144.198:24269] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gel4y.php"] [unique_id "achCXCE3TArOFrUtgWonBwAAAJQ"]
[Sun Mar 29 05:04:28.985295 2026] [:error] [pid 32359:tid 32379] [client 158.23.144.198:24402] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "achCXAMb8G3UzfQP3WjK4gAAANI"]
[Sun Mar 29 05:04:29.428155 2026] [:error] [pid 1524:tid 1536] [client 158.23.144.198:24313] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "achCXVoaWSl2asqQCh8OcwAAAQc"]
[Sun Mar 29 05:04:29.846742 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:24068] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "achCXSE3TArOFrUtgWonCwAAAIo"]
[Sun Mar 29 05:04:30.249106 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:24294] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "achCXloaWSl2asqQCh8OdAAAAQk"]
[Sun Mar 29 05:04:30.922928 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:24151] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rkiea.php"] [unique_id "achCXiE3TArOFrUtgWonDQAAAIY"]
[Sun Mar 29 05:04:31.321421 2026] [:error] [pid 1524:tid 1545] [client 158.23.144.198:24174] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rkiea.php"] [unique_id "achCX1oaWSl2asqQCh8OdgAAAQ4"]
[Sun Mar 29 05:04:31.784356 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:24242] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rkiea.php"] [unique_id "achCX1oaWSl2asqQCh8OeQAAARM"]
[Sun Mar 29 05:04:32.207712 2026] [:error] [pid 32255:tid 32298] [client 158.23.144.198:24112] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rkiea.php"] [unique_id "achCYGnfn-AtRoMbquxFTAAAAEc"]
[Sun Mar 29 05:04:32.653341 2026] [:error] [pid 32254:tid 32279] [client 158.23.144.198:24083] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/resp.php"] [unique_id "achCYKug2IHuyGgCTn8MoQAAAA8"]
[Sun Mar 29 05:04:33.126972 2026] [:error] [pid 32254:tid 32280] [client 158.23.144.198:24254] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/resp.php"] [unique_id "achCYaug2IHuyGgCTn8MpAAAABA"]
[Sun Mar 29 05:04:33.517823 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:24185] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/resp.php"] [unique_id "achCYSE3TArOFrUtgWonEQAAAIk"]
[Sun Mar 29 05:04:33.912543 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:24219] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/resp.php"] [unique_id "achCYVoaWSl2asqQCh8OfQAAAQo"]
[Sun Mar 29 05:04:34.306124 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:24137] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lanou.php"] [unique_id "achCYiE3TArOFrUtgWonFgAAAJY"]
[Sun Mar 29 05:04:34.699677 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:24305] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lanou.php"] [unique_id "achCYiE3TArOFrUtgWonFwAAAIA"]
[Sun Mar 29 05:04:35.085528 2026] [:error] [pid 32255:tid 32308] [client 158.23.144.198:24161] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lanou.php"] [unique_id "achCY2nfn-AtRoMbquxFVQAAAFE"]
[Sun Mar 29 05:04:35.476976 2026] [:error] [pid 32254:tid 32288] [client 158.23.144.198:24095] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lanou.php"] [unique_id "achCY6ug2IHuyGgCTn8MqgAAABg"]
[Sun Mar 29 05:04:35.871405 2026] [:error] [pid 1524:tid 1531] [client 158.23.144.198:24318] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eursi.php"] [unique_id "achCY1oaWSl2asqQCh8OgAAAAQM"]
[Sun Mar 29 05:05:23.418064 2026] [:error] [pid 32257:tid 32334] [client 158.23.144.198:24189] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "achCkyE3TArOFrUtgWonmgAAAJA"]
[Sun Mar 29 05:05:23.868873 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:24180] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "achCkyE3TArOFrUtgWonnQAAAIA"]
[Sun Mar 29 05:05:24.287592 2026] [:error] [pid 32254:tid 32281] [client 158.23.144.198:24204] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "achClKug2IHuyGgCTn8M6QAAABE"]
[Sun Mar 29 05:05:24.707168 2026] [:error] [pid 32255:tid 32296] [client 158.23.144.198:24354] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "achClGnfn-AtRoMbquxFjgAAAEU"]
[Sun Mar 29 05:05:25.111288 2026] [:error] [pid 32254:tid 32280] [client 158.23.144.198:24075] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "achClaug2IHuyGgCTn8M6gAAABA"]
[Sun Mar 29 05:05:25.522031 2026] [:error] [pid 32255:tid 32306] [client 158.23.144.198:24240] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "achClWnfn-AtRoMbquxFkgAAAE8"]
[Sun Mar 29 05:05:25.930792 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:24285] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "achClSE3TArOFrUtgWonoQAAAJY"]
[Sun Mar 29 05:05:26.342861 2026] [:error] [pid 32255:tid 32312] [client 158.23.144.198:24255] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "achClmnfn-AtRoMbquxFkwAAAFU"]
[Sun Mar 29 05:05:26.735309 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:24358] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "achCliE3TArOFrUtgWonpQAAAIk"]
[Sun Mar 29 05:05:27.149165 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:24163] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "achCl1oaWSl2asqQCh8O7gAAAQY"]
[Sun Mar 29 05:05:27.585906 2026] [:error] [pid 32255:tid 32315] [client 158.23.144.198:24184] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "achCl2nfn-AtRoMbquxFlgAAAFg"]
[Sun Mar 29 05:05:27.982797 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:24230] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "achClyE3TArOFrUtgWonqAAAAIY"]
[Sun Mar 29 05:05:28.377157 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:24001] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "achCmCE3TArOFrUtgWonqgAAAIg"]
[Sun Mar 29 05:05:28.785009 2026] [:error] [pid 1524:tid 1552] [client 158.23.144.198:24155] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "achCmFoaWSl2asqQCh8O9gAAARQ"]
[Sun Mar 29 05:05:29.198846 2026] [:error] [pid 32359:tid 32375] [client 158.23.144.198:24141] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "achCmQMb8G3UzfQP3WjLNQAAAM4"]
[Sun Mar 29 05:05:29.609759 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:24220] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "achCmSE3TArOFrUtgWonrwAAAIA"]
[Sun Mar 29 05:05:29.994108 2026] [:error] [pid 32254:tid 32287] [client 158.23.144.198:24147] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bywaf.php"] [unique_id "achCmaug2IHuyGgCTn8M7gAAABc"]
[Sun Mar 29 05:05:30.417553 2026] [:error] [pid 32257:tid 32331] [client 158.23.144.198:24150] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bywaf.php"] [unique_id "achCmiE3TArOFrUtgWonsQAAAI0"]
[Sun Mar 29 05:05:30.807360 2026] [:error] [pid 32257:tid 32322] [client 158.23.144.198:24157] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bywaf.php"] [unique_id "achCmiE3TArOFrUtgWontQAAAIQ"]
[Sun Mar 29 05:05:31.192226 2026] [:error] [pid 32255:tid 32301] [client 158.23.144.198:24192] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bywaf.php"] [unique_id "achCm2nfn-AtRoMbquxFmAAAAEo"]
[Sun Mar 29 05:05:31.576094 2026] [:error] [pid 32255:tid 32297] [client 158.23.144.198:24229] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-true.php"] [unique_id "achCm2nfn-AtRoMbquxFmgAAAEY"]
[Sun Mar 29 05:05:32.006038 2026] [:error] [pid 32254:tid 32275] [client 158.23.144.198:24183] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-true.php"] [unique_id "achCnKug2IHuyGgCTn8M7wAAAAs"]
[Sun Mar 29 05:05:32.421332 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:24104] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-true.php"] [unique_id "achCnCE3TArOFrUtgWonvAAAAJU"]
[Sun Mar 29 05:05:32.821784 2026] [:error] [pid 32257:tid 32333] [client 158.23.144.198:24093] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-true.php"] [unique_id "achCnCE3TArOFrUtgWonvgAAAI8"]
[Sun Mar 29 05:05:33.228315 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:24208] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "achCnSE3TArOFrUtgWonwgAAAJM"]
[Sun Mar 29 05:05:33.645959 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:24084] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "achCnSE3TArOFrUtgWonxgAAAJE"]
[Sun Mar 29 05:05:34.053732 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:24309] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "achCnloaWSl2asqQCh8O-wAAAQo"]
[Sun Mar 29 05:05:34.468959 2026] [:error] [pid 1524:tid 1536] [client 158.23.144.198:24081] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "achCnloaWSl2asqQCh8O_AAAAQc"]
[Sun Mar 29 05:05:34.879035 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:24072] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx88.php"] [unique_id "achCnmnfn-AtRoMbquxFngAAAEg"]
[Sun Mar 29 05:05:35.300548 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:24199] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx88.php"] [unique_id "achCn1oaWSl2asqQCh8O_wAAAQg"]
[Sun Mar 29 05:05:35.705020 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:24322] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx88.php"] [unique_id "achCnyE3TArOFrUtgWonyAAAAIw"]
[Sun Mar 29 05:05:36.091613 2026] [:error] [pid 32254:tid 32270] [client 158.23.144.198:24119] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx88.php"] [unique_id "achCoKug2IHuyGgCTn8M8wAAAAY"]
[Sun Mar 29 05:05:36.577341 2026] [:error] [pid 32255:tid 32294] [client 158.23.144.198:24176] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "achCoGnfn-AtRoMbquxFoQAAAEM"]
[Sun Mar 29 05:05:36.999850 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:24090] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "achCoCE3TArOFrUtgWonzAAAAIg"]
[Sun Mar 29 05:05:37.423592 2026] [:error] [pid 32255:tid 32312] [client 158.23.144.198:24177] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "achCoWnfn-AtRoMbquxFpQAAAFU"]
[Sun Mar 29 05:05:37.816536 2026] [:error] [pid 32257:tid 32334] [client 158.23.144.198:24108] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "achCoSE3TArOFrUtgWonzgAAAJA"]
[Sun Mar 29 05:05:38.317736 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:24004] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "achCoiE3TArOFrUtgWon0QAAAJM"]
[Sun Mar 29 05:05:38.864912 2026] [:error] [pid 32254:tid 32288] [client 158.23.144.198:24082] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "achCoqug2IHuyGgCTn8M9AAAABg"]
[Sun Mar 29 05:05:39.290002 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:24178] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "achCoyE3TArOFrUtgWon1QAAAJE"]
[Sun Mar 29 05:05:39.710153 2026] [:error] [pid 32254:tid 32272] [client 158.23.144.198:24106] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/max.php"] [unique_id "achCo6ug2IHuyGgCTn8M-AAAAAg"]
[Sun Mar 29 05:05:40.169188 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:24164] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "achCpFoaWSl2asqQCh8PBwAAAQ0"]
[Sun Mar 29 05:05:40.769164 2026] [:error] [pid 1524:tid 1545] [client 158.23.144.198:24241] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "achCpFoaWSl2asqQCh8PCQAAAQ4"]
[Sun Mar 29 05:05:41.293541 2026] [:error] [pid 32255:tid 32315] [client 158.23.144.198:24376] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "achCpWnfn-AtRoMbquxFqAAAAFg"]
[Sun Mar 29 05:05:41.686763 2026] [:error] [pid 32255:tid 32304] [client 158.23.144.198:24031] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z60.php"] [unique_id "achCpWnfn-AtRoMbquxFqgAAAE0"]
[Sun Mar 29 05:05:42.135802 2026] [:error] [pid 32254:tid 32281] [client 158.23.144.198:24162] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/utky.php"] [unique_id "achCpqug2IHuyGgCTn8M-wAAABE"]
[Sun Mar 29 05:05:42.551369 2026] [:error] [pid 32254:tid 32280] [client 158.23.144.198:24153] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/utky.php"] [unique_id "achCpqug2IHuyGgCTn8M_AAAABA"]
[Sun Mar 29 05:05:42.990643 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:24117] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/utky.php"] [unique_id "achCpiE3TArOFrUtgWon1wAAAIw"]
[Sun Mar 29 05:05:43.569688 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:24160] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/utky.php"] [unique_id "achCpyE3TArOFrUtgWon2wAAAIk"]
[Sun Mar 29 05:05:44.009066 2026] [:error] [pid 32255:tid 32308] [client 158.23.144.198:24173] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uang.php"] [unique_id "achCqGnfn-AtRoMbquxFqwAAAFE"]
[Sun Mar 29 05:05:44.458168 2026] [:error] [pid 32257:tid 32336] [client 158.23.144.198:24243] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uang.php"] [unique_id "achCqCE3TArOFrUtgWon3AAAAJI"]
[Sun Mar 29 05:05:44.879608 2026] [:error] [pid 32257:tid 32334] [client 158.23.144.198:24020] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uang.php"] [unique_id "achCqCE3TArOFrUtgWon3wAAAJA"]
[Sun Mar 29 05:05:45.331804 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:24188] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uang.php"] [unique_id "achCqSE3TArOFrUtgWon4AAAAJM"]
[Sun Mar 29 05:05:45.779312 2026] [:error] [pid 32359:tid 32371] [client 158.23.144.198:24008] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp3.php"] [unique_id "achCqQMb8G3UzfQP3WjLPAAAAMo"]
[Sun Mar 29 05:05:46.201847 2026] [:error] [pid 1524:tid 1542] [client 158.23.144.198:24111] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp3.php"] [unique_id "achCqloaWSl2asqQCh8PDwAAAQs"]
[Sun Mar 29 05:05:46.637662 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:24064] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp3.php"] [unique_id "achCqloaWSl2asqQCh8PEAAAAQY"]
[Sun Mar 29 05:05:47.067993 2026] [:error] [pid 32254:tid 32274] [client 158.23.144.198:24234] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp3.php"] [unique_id "achCq6ug2IHuyGgCTn8NAQAAAAo"]
[Sun Mar 29 05:05:47.496691 2026] [:error] [pid 32255:tid 32310] [client 158.23.144.198:24080] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "achCq2nfn-AtRoMbquxFrQAAAFM"]
[Sun Mar 29 05:05:47.935585 2026] [:error] [pid 1524:tid 1552] [client 158.23.144.198:24077] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "achCq1oaWSl2asqQCh8PGAAAARQ"]
[Sun Mar 29 05:05:48.327803 2026] [:error] [pid 1524:tid 1530] [client 158.23.144.198:24088] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "achCrFoaWSl2asqQCh8PHAAAAQI"]
[Sun Mar 29 05:05:48.776818 2026] [:error] [pid 32359:tid 32365] [client 158.23.144.198:24146] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "achCrAMb8G3UzfQP3WjLPQAAAMQ"]
[Sun Mar 29 05:05:49.176722 2026] [:error] [pid 32359:tid 32381] [client 158.23.144.198:24113] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "achCrQMb8G3UzfQP3WjLPgAAANQ"]
[Sun Mar 29 05:05:49.676383 2026] [:error] [pid 32254:tid 32282] [client 158.23.144.198:24120] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "achCraug2IHuyGgCTn8NBQAAABI"]
[Sun Mar 29 05:05:50.188609 2026] [:error] [pid 32359:tid 32368] [client 158.23.144.198:24181] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "achCrgMb8G3UzfQP3WjLQAAAAMc"]
[Sun Mar 29 05:05:50.577954 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:24233] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "achCriE3TArOFrUtgWon5AAAAIA"]
[Sun Mar 29 05:05:51.027218 2026] [:error] [pid 32359:tid 32373] [client 158.23.144.198:24121] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ticket.php"] [unique_id "achCrwMb8G3UzfQP3WjLQwAAAMw"]
[Sun Mar 29 05:05:51.502609 2026] [:error] [pid 32254:tid 32266] [client 158.23.144.198:24097] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ticket.php"] [unique_id "achCr6ug2IHuyGgCTn8NCgAAAAI"]
[Sun Mar 29 05:05:51.934050 2026] [:error] [pid 32255:tid 32302] [client 158.23.144.198:24069] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ticket.php"] [unique_id "achCr2nfn-AtRoMbquxFsQAAAEs"]
[Sun Mar 29 05:05:52.334269 2026] [:error] [pid 32254:tid 32269] [client 158.23.144.198:24061] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ticket.php"] [unique_id "achCsKug2IHuyGgCTn8NDAAAAAU"]
[Sun Mar 29 05:05:52.749727 2026] [:error] [pid 32255:tid 32298] [client 158.23.144.198:24030] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "achCsGnfn-AtRoMbquxFsgAAAEc"]
[Sun Mar 29 05:05:53.148063 2026] [:error] [pid 32254:tid 32264] [client 158.23.144.198:24098] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "achCsaug2IHuyGgCTn8NEAAAAAA"]
[Sun Mar 29 05:05:53.537517 2026] [:error] [pid 32257:tid 32321] [client 158.23.144.198:24017] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "achCsSE3TArOFrUtgWon5gAAAIM"]
[Sun Mar 29 05:05:53.931585 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:24092] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "achCsVoaWSl2asqQCh8PIAAAAQY"]
[Sun Mar 29 05:05:54.320092 2026] [:error] [pid 1524:tid 1546] [client 158.23.144.198:24179] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "achCsloaWSl2asqQCh8PIgAAAQ8"]
[Sun Mar 29 05:05:54.762754 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:24111] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "achCsloaWSl2asqQCh8PJQAAAQ0"]
[Sun Mar 29 05:05:55.192073 2026] [:error] [pid 1524:tid 1530] [client 158.23.144.198:24134] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "achCs1oaWSl2asqQCh8PKAAAAQI"]
[Sun Mar 29 05:05:55.679045 2026] [:error] [pid 32359:tid 32384] [client 158.23.144.198:24158] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpwer1.php"] [unique_id "achCswMb8G3UzfQP3WjLRQAAANc"]
[Sun Mar 29 05:05:56.086149 2026] [:error] [pid 32255:tid 32314] [client 158.23.144.198:24022] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "achCtGnfn-AtRoMbquxFtAAAAFc"]
[Sun Mar 29 05:05:56.493487 2026] [:error] [pid 32359:tid 32366] [client 158.23.144.198:24237] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "achCtAMb8G3UzfQP3WjLRgAAAMU"]
[Sun Mar 29 05:05:56.903089 2026] [:error] [pid 32359:tid 32377] [client 158.23.144.198:24140] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "achCtAMb8G3UzfQP3WjLRwAAANA"]
[Sun Mar 29 05:05:57.319983 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:24152] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "achCtVoaWSl2asqQCh8PLgAAAQo"]
[Sun Mar 29 05:05:57.881264 2026] [:error] [pid 32254:tid 32281] [client 158.23.144.198:24215] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "achCtaug2IHuyGgCTn8NFwAAABE"]
[Sun Mar 29 05:05:58.305189 2026] [:error] [pid 32359:tid 32367] [client 158.23.144.198:24116] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "achCtgMb8G3UzfQP3WjLSwAAAMY"]
[Sun Mar 29 05:05:58.794907 2026] [:error] [pid 32359:tid 32365] [client 158.23.144.198:24223] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "achCtgMb8G3UzfQP3WjLTQAAAMQ"]
[Sun Mar 29 05:05:59.184330 2026] [:error] [pid 32359:tid 32382] [client 158.23.144.198:24050] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "achCtwMb8G3UzfQP3WjLUAAAANU"]
[Sun Mar 29 05:05:59.609576 2026] [:error] [pid 32359:tid 32376] [client 158.23.144.198:24066] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpass.php"] [unique_id "achCtwMb8G3UzfQP3WjLVAAAAM8"]
[Sun Mar 29 05:06:00.028056 2026] [:error] [pid 32359:tid 32380] [client 158.23.144.198:24248] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpass.php"] [unique_id "achCuAMb8G3UzfQP3WjLWQAAANM"]
[Sun Mar 29 05:06:00.484489 2026] [:error] [pid 32359:tid 32370] [client 158.23.144.198:24172] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xpass.php"] [unique_id "achCuAMb8G3UzfQP3WjLWgAAAMk"]
[Sun Mar 29 05:06:00.886486 2026] [:error] [pid 1524:tid 1542] [client 158.23.144.198:24103] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "achCuFoaWSl2asqQCh8PMgAAAQs"]
[Sun Mar 29 05:06:01.295675 2026] [:error] [pid 32255:tid 32305] [client 158.23.144.198:24036] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "achCuWnfn-AtRoMbquxFuQAAAE4"]
[Sun Mar 29 05:06:01.685762 2026] [:error] [pid 32359:tid 32374] [client 158.23.144.198:24110] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "achCuQMb8G3UzfQP3WjLXwAAAM0"]
[Sun Mar 29 05:06:02.103021 2026] [:error] [pid 32255:tid 32293] [client 158.23.144.198:24003] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ad.php"] [unique_id "achCumnfn-AtRoMbquxFuwAAAEI"]
[Sun Mar 29 05:06:02.515430 2026] [:error] [pid 32359:tid 32376] [client 158.23.144.198:24126] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "achCugMb8G3UzfQP3WjLYgAAAM8"]
[Sun Mar 29 05:06:02.909503 2026] [:error] [pid 32255:tid 32301] [client 158.23.144.198:24165] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "achCumnfn-AtRoMbquxFvAAAAEo"]
[Sun Mar 29 05:06:03.295824 2026] [:error] [pid 32359:tid 32380] [client 158.23.144.198:24078] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "achCuwMb8G3UzfQP3WjLZAAAANM"]
[Sun Mar 29 05:06:03.689299 2026] [:error] [pid 32359:tid 32363] [client 158.23.144.198:24065] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h02ugyh.php"] [unique_id "achCuwMb8G3UzfQP3WjLZQAAAMI"]
[Sun Mar 29 08:51:50.577414 2026] [:error] [pid 23167:tid 23176] [client 45.94.31.49:53902] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ach3phIAHJCFaHff3_eYYQAAAcY"]
[Sun Mar 29 08:51:51.063904 2026] [:error] [pid 23167:tid 23181] [client 45.94.31.49:57022] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ach3pxIAHJCFaHff3_eYYwAAAcs"]
[Sun Mar 29 08:51:51.551742 2026] [:error] [pid 23250:tid 23271] [client 45.94.31.49:62466] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ach3p5xrpj-dQjy1cvpgjwAAAlM"]
[Sun Mar 29 08:51:52.047518 2026] [:error] [pid 32255:tid 32296] [client 45.94.31.49:53618] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ach3qGnfn-AtRoMbquyRigAAAEU"]
[Sun Mar 29 13:09:45.311179 2026] [autoindex:error] [pid 23137:tid 23150] [client 164.68.111.175:58538] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 30 00:01:38.008059 2026] [:error] [pid 32255:tid 32303] [client 103.4.122.14:41442] [client 103.4.122.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aclM4mnfn-AtRoMbquwrYAAAAEw"], referer: https://makifim.com.au/wp-admin/
[Mon Mar 30 00:04:55.774169 2026] [:error] [pid 23168:tid 23208] [client 172.182.224.42:26217] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aclNp2P8p0yRL8ot_2_MwwAAAgs"]
[Mon Mar 30 00:04:56.404425 2026] [:error] [pid 23284:tid 23288] [client 172.182.224.42:26841] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aclNqIzBujdPHsq7wyQKzQAAAoI"]
[Mon Mar 30 00:04:57.033484 2026] [:error] [pid 32359:tid 32367] [client 172.182.224.42:25095] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aclNqQMb8G3UzfQP3WhAjwAAAMY"]
[Mon Mar 30 00:04:57.664712 2026] [:error] [pid 23284:tid 23299] [client 172.182.224.42:13278] [client 172.182.224.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aclNqYzBujdPHsq7wyQKzwAAAo0"]
[Mon Mar 30 02:11:16.056231 2026] [:error] [pid 8818:tid 8837] [client 20.220.61.78:9176] [client 20.220.61.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aclrRCCDvotZNSF0FBodeQAAAU8"]
[Mon Mar 30 02:11:18.363487 2026] [:error] [pid 32257:tid 32327] [client 20.220.61.78:9161] [client 20.220.61.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aclrRiE3TArOFrUtgWri3gAAAIk"]
[Mon Mar 30 02:11:25.098889 2026] [:error] [pid 23250:tid 23270] [client 20.220.61.78:9099] [client 20.220.61.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aclrTZxrpj-dQjy1cvo4WwAAAlI"]
[Mon Mar 30 02:11:27.824298 2026] [:error] [pid 32257:tid 32318] [client 20.220.61.78:9164] [client 20.220.61.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aclrTyE3TArOFrUtgWri7QAAAIA"]
[Mon Mar 30 02:16:42.768818 2026] [:error] [pid 32257:tid 32318] [client 40.75.84.21:64350] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aclsiiE3TArOFrUtgWrnJgAAAIA"]
[Mon Mar 30 02:16:44.231958 2026] [:error] [pid 32255:tid 32303] [client 40.75.84.21:64774] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bjfl.php"] [unique_id "aclsjGnfn-AtRoMbquxqZQAAAEw"]
[Mon Mar 30 02:16:45.976055 2026] [:error] [pid 32257:tid 32337] [client 40.75.84.21:64866] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ad1.php"] [unique_id "aclsjSE3TArOFrUtgWrnRwAAAJM"]
[Mon Mar 30 02:16:48.047616 2026] [:error] [pid 23137:tid 23139] [client 40.75.84.21:64891] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ad1.php"] [unique_id "aclskBaWQa7LdZ_qGFYqMgAAAYA"]
[Mon Mar 30 02:16:49.581118 2026] [:error] [pid 32257:tid 32339] [client 40.75.84.21:64841] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ad1.php"] [unique_id "aclskSE3TArOFrUtgWrnbAAAAJU"]
[Mon Mar 30 02:16:51.807740 2026] [:error] [pid 23284:tid 23295] [client 40.75.84.21:64321] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ad1.php"] [unique_id "aclsk4zBujdPHsq7wyRZpwAAAok"]
[Mon Mar 30 02:16:54.341774 2026] [:error] [pid 32257:tid 32333] [client 40.75.84.21:64787] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tanjiro.php"] [unique_id "aclsliE3TArOFrUtgWrnhgAAAI8"]
[Mon Mar 30 02:16:56.166563 2026] [:error] [pid 23284:tid 23302] [client 40.75.84.21:64872] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tanjiro.php"] [unique_id "aclsmIzBujdPHsq7wyRZqwAAApA"]
[Mon Mar 30 02:16:57.747005 2026] [:error] [pid 23167:tid 23185] [client 40.75.84.21:64276] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tanjiro.php"] [unique_id "aclsmRIAHJCFaHff3_cK1gAAAc8"]
[Mon Mar 30 02:17:00.023903 2026] [:error] [pid 32255:tid 32305] [client 40.75.84.21:64792] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7logs.php"] [unique_id "aclsnGnfn-AtRoMbquxqgAAAAE4"]
[Mon Mar 30 02:17:05.493707 2026] [:error] [pid 32257:tid 32318] [client 40.75.84.21:64351] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file22.php"] [unique_id "aclsoSE3TArOFrUtgWrnpwAAAIA"]
[Mon Mar 30 02:17:09.819197 2026] [:error] [pid 23167:tid 23194] [client 40.75.84.21:64794] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inwp.php"] [unique_id "aclspRIAHJCFaHff3_cK6wAAAdg"]
[Mon Mar 30 02:17:12.111199 2026] [:error] [pid 8818:tid 8822] [client 40.75.84.21:64854] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inwp.php"] [unique_id "aclsqCCDvotZNSF0FBofTwAAAUA"]
[Mon Mar 30 02:17:13.416671 2026] [:error] [pid 32257:tid 32338] [client 40.75.84.21:64785] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inwp.php"] [unique_id "aclsqSE3TArOFrUtgWrnxwAAAJQ"]
[Mon Mar 30 02:17:14.931141 2026] [:error] [pid 32255:tid 32298] [client 40.75.84.21:64890] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ca4.php"] [unique_id "aclsqmnfn-AtRoMbquxqsAAAAEc"]
[Mon Mar 30 02:17:15.816422 2026] [:error] [pid 32257:tid 32328] [client 40.75.84.21:64334] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ca4.php"] [unique_id "aclsqyE3TArOFrUtgWrn1QAAAIo"]
[Mon Mar 30 02:17:16.722205 2026] [:error] [pid 8818:tid 8825] [client 40.75.84.21:64852] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ca4.php"] [unique_id "aclsrCCDvotZNSF0FBofUAAAAUM"]
[Mon Mar 30 02:17:17.298611 2026] [:error] [pid 23137:tid 23163] [client 40.75.84.21:64882] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ca4.php"] [unique_id "aclsrRaWQa7LdZ_qGFYqRAAAAZg"]
[Mon Mar 30 02:17:17.988002 2026] [:error] [pid 23168:tid 23219] [client 40.75.84.21:64829] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nz.php"] [unique_id "aclsrWP8p0yRL8ot_2_83wAAAhY"]
[Mon Mar 30 02:17:18.668251 2026] [:error] [pid 23167:tid 23171] [client 40.75.84.21:64840] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nz.php"] [unique_id "aclsrhIAHJCFaHff3_cK8gAAAcE"]
[Mon Mar 30 02:17:19.395727 2026] [:error] [pid 32255:tid 32314] [client 40.75.84.21:64833] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nz.php"] [unique_id "aclsr2nfn-AtRoMbquxqswAAAFc"]
[Mon Mar 30 02:17:20.051746 2026] [:error] [pid 32255:tid 32292] [client 40.75.84.21:64834] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nz.php"] [unique_id "aclssGnfn-AtRoMbquxqtgAAAEE"]
[Mon Mar 30 02:17:20.693083 2026] [:error] [pid 23168:tid 23210] [client 40.75.84.21:64342] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnn_.php"] [unique_id "aclssGP8p0yRL8ot_2_85wAAAg0"]
[Mon Mar 30 02:17:21.954458 2026] [:error] [pid 23284:tid 23288] [client 40.75.84.21:64347] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnn_.php"] [unique_id "aclssYzBujdPHsq7wyRZywAAAoI"]
[Mon Mar 30 02:17:22.907364 2026] [:error] [pid 32255:tid 32300] [client 40.75.84.21:64371] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnn_.php"] [unique_id "aclssmnfn-AtRoMbquxqvgAAAEk"]
[Mon Mar 30 02:17:24.544283 2026] [:error] [pid 8818:tid 8846] [client 40.75.84.21:64337] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aclstCCDvotZNSF0FBofXQAAAVg"]
[Mon Mar 30 02:17:25.490823 2026] [:error] [pid 32254:tid 32270] [client 40.75.84.21:64774] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aclstaug2IHuyGgCTn97wAAAAAY"]
[Mon Mar 30 02:17:27.692875 2026] [:error] [pid 23137:tid 23156] [client 40.75.84.21:63497] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file66.php"] [unique_id "aclstxaWQa7LdZ_qGFYqSAAAAZE"]
[Mon Mar 30 02:17:29.638932 2026] [:error] [pid 32257:tid 32326] [client 40.75.84.21:64828] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kure.php"] [unique_id "aclsuSE3TArOFrUtgWrn-QAAAIg"]
[Mon Mar 30 02:17:30.511601 2026] [:error] [pid 23137:tid 23159] [client 40.75.84.21:64859] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kure.php"] [unique_id "aclsuhaWQa7LdZ_qGFYqSQAAAZQ"]
[Mon Mar 30 02:17:31.387950 2026] [:error] [pid 32257:tid 32322] [client 40.75.84.21:64868] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kure.php"] [unique_id "aclsuyE3TArOFrUtgWroDwAAAIQ"]
[Mon Mar 30 02:17:32.218267 2026] [:error] [pid 23284:tid 23294] [client 40.75.84.21:64811] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kure.php"] [unique_id "aclsvIzBujdPHsq7wyRZ5AAAAog"]
[Mon Mar 30 02:17:34.452209 2026] [:error] [pid 23168:tid 23211] [client 40.75.84.21:64791] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blnux.php"] [unique_id "aclsvmP8p0yRL8ot_2_88AAAAg4"]
[Mon Mar 30 02:17:35.903117 2026] [:error] [pid 32255:tid 32295] [client 40.75.84.21:64781] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blnux.php"] [unique_id "aclsv2nfn-AtRoMbquxq7wAAAEQ"]
[Mon Mar 30 02:17:36.738734 2026] [:error] [pid 23168:tid 23197] [client 40.75.84.21:64817] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blnux.php"] [unique_id "aclswGP8p0yRL8ot_2_88QAAAgA"]
[Mon Mar 30 02:17:37.903307 2026] [:error] [pid 32255:tid 32298] [client 40.75.84.21:64789] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blnux.php"] [unique_id "aclswWnfn-AtRoMbquxq9gAAAEc"]
[Mon Mar 30 02:17:39.123431 2026] [:error] [pid 23284:tid 23301] [client 40.75.84.21:64345] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaje.php"] [unique_id "aclsw4zBujdPHsq7wyRaAQAAAo8"]
[Mon Mar 30 02:17:40.476989 2026] [:error] [pid 32254:tid 32266] [client 40.75.84.21:64324] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaje.php"] [unique_id "aclsxKug2IHuyGgCTn97xQAAAAI"]
[Mon Mar 30 02:17:47.209980 2026] [:error] [pid 32257:tid 32334] [client 40.75.84.21:64368] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaje.php"] [unique_id "aclsyyE3TArOFrUtgWroeQAAAJA"]
[Mon Mar 30 02:17:48.422809 2026] [:error] [pid 23168:tid 23209] [client 40.75.84.21:64888] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaje.php"] [unique_id "aclszGP8p0yRL8ot_2_9BAAAAgw"]
[Mon Mar 30 02:17:49.769493 2026] [:error] [pid 23137:tid 23140] [client 40.75.84.21:64335] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaje.php"] [unique_id "aclszRaWQa7LdZ_qGFYqUwAAAYE"]
[Mon Mar 30 02:17:52.387832 2026] [:error] [pid 32257:tid 32324] [client 40.75.84.21:64773] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaje.php"] [unique_id "acls0CE3TArOFrUtgWrogQAAAIY"]
[Mon Mar 30 02:17:53.512442 2026] [:error] [pid 32255:tid 32292] [client 40.75.84.21:64373] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/msy.php"] [unique_id "acls0Wnfn-AtRoMbquxrGwAAAEE"]
[Mon Mar 30 02:17:54.923745 2026] [:error] [pid 32257:tid 32336] [client 40.75.84.21:64808] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/msy.php"] [unique_id "acls0iE3TArOFrUtgWroigAAAJI"]
[Mon Mar 30 02:17:56.237260 2026] [:error] [pid 32257:tid 32325] [client 40.75.84.21:63597] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/msy.php"] [unique_id "acls1CE3TArOFrUtgWrolQAAAIc"]
[Mon Mar 30 02:17:57.897972 2026] [:error] [pid 32257:tid 32342] [client 40.75.84.21:64880] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/msy.php"] [unique_id "acls1SE3TArOFrUtgWrongAAAJg"]
[Mon Mar 30 02:18:00.636519 2026] [:error] [pid 32254:tid 32268] [client 40.75.84.21:64372] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fgd.php"] [unique_id "acls2Kug2IHuyGgCTn972gAAAAQ"]
[Mon Mar 30 02:18:02.281572 2026] [:error] [pid 32359:tid 32379] [client 40.75.84.21:64850] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fgd.php"] [unique_id "acls2gMb8G3UzfQP3WhVSAAAANI"]
[Mon Mar 30 02:18:04.714330 2026] [:error] [pid 32254:tid 32277] [client 40.75.84.21:63554] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fgd.php"] [unique_id "acls3Kug2IHuyGgCTn973wAAAA0"]
[Mon Mar 30 02:18:05.575099 2026] [:error] [pid 23137:tid 23159] [client 40.75.84.21:64355] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fgd.php"] [unique_id "acls3RaWQa7LdZ_qGFYqYQAAAZQ"]
[Mon Mar 30 02:18:10.150305 2026] [:error] [pid 32254:tid 32264] [client 40.75.84.21:62808] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "acls4qug2IHuyGgCTn975gAAAAA"]
[Mon Mar 30 02:18:12.174168 2026] [:error] [pid 32257:tid 32324] [client 40.75.84.21:64339] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "acls5CE3TArOFrUtgWroxwAAAIY"]
[Mon Mar 30 02:18:12.900611 2026] [:error] [pid 32257:tid 32337] [client 40.75.84.21:64357] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "acls5CE3TArOFrUtgWrozgAAAJM"]
[Mon Mar 30 02:18:14.456099 2026] [:error] [pid 23168:tid 23208] [client 40.75.84.21:64818] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "acls5mP8p0yRL8ot_2_9OgAAAgs"]
[Mon Mar 30 02:18:18.019555 2026] [:error] [pid 23284:tid 23306] [client 40.75.84.21:64869] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sef.php"] [unique_id "acls6ozBujdPHsq7wyRaewAAApQ"]
[Mon Mar 30 02:18:24.431330 2026] [:error] [pid 32359:tid 32376] [client 40.75.84.21:64262] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ztv.php"] [unique_id "acls8AMb8G3UzfQP3WhVYwAAAM8"]
[Mon Mar 30 02:18:28.880362 2026] [:error] [pid 23167:tid 23180] [client 40.75.84.21:64366] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ztv.php"] [unique_id "acls9BIAHJCFaHff3_cLQwAAAco"]
[Mon Mar 30 02:18:31.294289 2026] [:error] [pid 8818:tid 8834] [client 40.75.84.21:64256] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ztv.php"] [unique_id "acls9yCDvotZNSF0FBofpgAAAUw"]
[Mon Mar 30 02:18:35.800522 2026] [:error] [pid 23137:tid 23141] [client 40.75.84.21:64837] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ztv.php"] [unique_id "acls-xaWQa7LdZ_qGFYqeQAAAYI"]
[Mon Mar 30 02:18:40.703939 2026] [:error] [pid 23284:tid 23296] [client 40.75.84.21:63500] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Rk41.php"] [unique_id "acltAIzBujdPHsq7wyRajwAAAoo"]
[Mon Mar 30 02:18:43.133362 2026] [:error] [pid 32254:tid 32265] [client 40.75.84.21:64838] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Rk41.php"] [unique_id "acltA6ug2IHuyGgCTn98BAAAAAE"]
[Mon Mar 30 02:18:51.247482 2026] [:error] [pid 23137:tid 23158] [client 40.75.84.21:64772] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acltCxaWQa7LdZ_qGFYqgwAAAZM"]
[Mon Mar 30 02:18:53.732609 2026] [:error] [pid 23284:tid 23302] [client 40.75.84.21:64796] [client 40.75.84.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.84.21, incrementing brute counter"] [hostname "www.makifim.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acltDYzBujdPHsq7wyRapQAAApA"]
[Mon Mar 30 02:19:06.969499 2026] [:error] [pid 23284:tid 23294] [client 40.75.84.21:64796] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/default.php"] [unique_id "acltGozBujdPHsq7wyRaxAAAAog"]
[Mon Mar 30 02:19:13.109359 2026] [:error] [pid 23167:tid 23180] [client 40.75.84.21:64784] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/default.php"] [unique_id "acltIRIAHJCFaHff3_cLdAAAAco"]
[Mon Mar 30 02:19:22.012621 2026] [:error] [pid 23168:tid 23209] [client 40.75.84.21:64274] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ty.php"] [unique_id "acltKmP8p0yRL8ot_2_9ggAAAgw"]
[Mon Mar 30 02:19:30.200629 2026] [:error] [pid 23167:tid 23190] [client 40.75.84.21:63602] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acltMhIAHJCFaHff3_cLhAAAAdQ"]
[Mon Mar 30 02:19:35.123538 2026] [:error] [pid 23167:tid 23184] [client 40.75.84.21:64257] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acltNxIAHJCFaHff3_cLjQAAAc4"]
[Mon Mar 30 02:19:40.496052 2026] [:error] [pid 23250:tid 23263] [client 40.75.84.21:64861] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acltPJxrpj-dQjy1cvo6MQAAAks"]
[Mon Mar 30 02:19:41.867314 2026] [:error] [pid 23167:tid 23177] [client 40.75.84.21:64368] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acltPRIAHJCFaHff3_cLmQAAAcc"]
[Mon Mar 30 02:19:44.278281 2026] [:error] [pid 32257:tid 32321] [client 40.75.84.21:64359] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acltQCE3TArOFrUtgWrpkgAAAIM"]
[Mon Mar 30 02:19:45.218088 2026] [:error] [pid 23167:tid 23178] [client 40.75.84.21:64381] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acltQRIAHJCFaHff3_cLmgAAAcg"]
[Mon Mar 30 02:19:46.383999 2026] [:error] [pid 23250:tid 23262] [client 40.75.84.21:64375] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acltQpxrpj-dQjy1cvo6OQAAAko"]
[Mon Mar 30 02:19:47.324557 2026] [:error] [pid 23167:tid 23181] [client 40.75.84.21:63541] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acltQxIAHJCFaHff3_cLnQAAAcs"]
[Mon Mar 30 02:19:48.359894 2026] [:error] [pid 32257:tid 32326] [client 40.75.84.21:64879] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acltRCE3TArOFrUtgWrprwAAAIg"]
[Mon Mar 30 02:19:49.425515 2026] [:error] [pid 32255:tid 32291] [client 40.75.84.21:64314] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acltRWnfn-AtRoMbquxreQAAAEA"]
[Mon Mar 30 02:19:50.747251 2026] [:error] [pid 23168:tid 23218] [client 40.75.84.21:64328] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "acltRmP8p0yRL8ot_2_9mAAAAhU"]
[Mon Mar 30 02:19:52.011294 2026] [:error] [pid 32257:tid 32332] [client 40.75.84.21:64338] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "acltSCE3TArOFrUtgWrpvAAAAI4"]
[Mon Mar 30 02:19:52.943177 2026] [:error] [pid 32257:tid 32332] [client 40.75.84.21:64786] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "acltSCE3TArOFrUtgWrpzAAAAI4"]
[Mon Mar 30 02:19:53.953799 2026] [:error] [pid 32255:tid 32305] [client 40.75.84.21:64370] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa.php"] [unique_id "acltSWnfn-AtRoMbquxrfQAAAE4"]
[Mon Mar 30 02:19:55.184374 2026] [:error] [pid 23168:tid 23212] [client 40.75.84.21:64331] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acltS2P8p0yRL8ot_2_9mgAAAg8"]
[Mon Mar 30 02:19:59.294130 2026] [:error] [pid 8818:tid 8838] [client 40.75.84.21:64797] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acltTyCDvotZNSF0FBogIQAAAVA"]
[Mon Mar 30 02:20:02.274192 2026] [:error] [pid 8818:tid 8830] [client 40.75.84.21:64820] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acltUiCDvotZNSF0FBogJAAAAUg"]
[Mon Mar 30 02:20:13.312591 2026] [:error] [pid 23168:tid 23209] [client 40.75.84.21:63574] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acltXWP8p0yRL8ot_2_9qQAAAgw"]
[Mon Mar 30 02:20:14.129124 2026] [:error] [pid 23250:tid 23263] [client 40.75.84.21:64865] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acltXpxrpj-dQjy1cvo6SgAAAks"]
[Mon Mar 30 02:20:15.526266 2026] [:error] [pid 23250:tid 23257] [client 40.75.84.21:64376] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acltX5xrpj-dQjy1cvo6SwAAAkU"]
[Mon Mar 30 02:21:12.982679 2026] [:error] [pid 32254:tid 32274] [client 40.75.84.21:64802] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acltmKug2IHuyGgCTn98LAAAAAo"]
[Mon Mar 30 02:21:17.940648 2026] [:error] [pid 8818:tid 8830] [client 40.75.84.21:64379] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acltnSCDvotZNSF0FBogdgAAAUg"]
[Mon Mar 30 02:21:21.620928 2026] [:error] [pid 23167:tid 23191] [client 40.75.84.21:64779] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acltoRIAHJCFaHff3_cL9AAAAdU"]
[Mon Mar 30 02:21:29.916637 2026] [:error] [pid 32255:tid 32315] [client 40.75.84.21:64856] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acltqWnfn-AtRoMbquxsbQAAAFg"]
[Mon Mar 30 02:21:33.727487 2026] [:error] [pid 32359:tid 32369] [client 40.75.84.21:64798] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acltrQMb8G3UzfQP3WhVrgAAAMg"]
[Mon Mar 30 02:21:35.615135 2026] [:error] [pid 23167:tid 23178] [client 40.75.84.21:64814] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acltrxIAHJCFaHff3_cMAgAAAcg"]
[Mon Mar 30 02:21:37.175767 2026] [:error] [pid 32257:tid 32323] [client 40.75.84.21:64333] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acltsSE3TArOFrUtgWrr-wAAAIU"]
[Mon Mar 30 02:21:39.273422 2026] [:error] [pid 32257:tid 32326] [client 40.75.84.21:64323] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acltsyE3TArOFrUtgWrsAwAAAIg"]
[Mon Mar 30 02:21:44.696847 2026] [:error] [pid 32254:tid 32283] [client 40.75.84.21:64263] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acltuKug2IHuyGgCTn98RgAAABM"]
[Mon Mar 30 02:21:46.261742 2026] [:error] [pid 32257:tid 32339] [client 40.75.84.21:63591] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acltuiE3TArOFrUtgWrsEwAAAJU"]
[Mon Mar 30 02:21:49.142923 2026] [:error] [pid 32257:tid 32321] [client 40.75.84.21:63586] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acltvSE3TArOFrUtgWrsFwAAAIM"]
[Mon Mar 30 02:21:51.757070 2026] [:error] [pid 32257:tid 32332] [client 40.75.84.21:64344] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acltvyE3TArOFrUtgWrsJwAAAI4"]
[Mon Mar 30 02:21:55.538884 2026] [:error] [pid 32255:tid 32312] [client 40.75.84.21:64364] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css/xp.php"] [unique_id "acltw2nfn-AtRoMbquxs_QAAAFU"]
[Mon Mar 30 02:22:01.212818 2026] [:error] [pid 23168:tid 23208] [client 40.75.84.21:64836] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css/xp.php"] [unique_id "acltyWP8p0yRL8ot_2_-LwAAAgs"]
[Mon Mar 30 02:22:07.191272 2026] [:error] [pid 8818:tid 8843] [client 40.75.84.21:64777] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/css/xp.php"] [unique_id "acltzyCDvotZNSF0FBoglgAAAVU"]
[Mon Mar 30 02:22:11.821426 2026] [:error] [pid 8818:tid 8844] [client 40.75.84.21:64350] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aclt0yCDvotZNSF0FBogmAAAAVY"]
[Mon Mar 30 02:22:14.593282 2026] [:error] [pid 23168:tid 23203] [client 40.75.84.21:64889] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aclt1mP8p0yRL8ot_2_-RQAAAgY"]
[Mon Mar 30 02:22:18.829277 2026] [:error] [pid 32359:tid 32367] [client 40.75.84.21:64839] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/js/style.php"] [unique_id "aclt2gMb8G3UzfQP3WhVvgAAAMY"]
[Mon Mar 30 02:22:25.779596 2026] [:error] [pid 23284:tid 23288] [client 40.75.84.21:63529] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/js/style.php"] [unique_id "aclt4YzBujdPHsq7wyRbuAAAAoI"]
[Mon Mar 30 02:22:31.551423 2026] [:error] [pid 8818:tid 8834] [client 40.75.84.21:64265] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclt5yCDvotZNSF0FBogqwAAAUw"]
[Mon Mar 30 02:22:34.258657 2026] [:error] [pid 8818:tid 8843] [client 40.75.84.21:64811] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclt6iCDvotZNSF0FBogrwAAAVU"]
[Mon Mar 30 02:22:41.295796 2026] [:error] [pid 32257:tid 32342] [client 40.75.84.21:63518] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock.php"] [unique_id "aclt8SE3TArOFrUtgWrsywAAAJg"]
[Mon Mar 30 02:22:43.866332 2026] [:error] [pid 32255:tid 32299] [client 40.75.84.21:64823] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock.php"] [unique_id "aclt82nfn-AtRoMbquxtfgAAAEg"]
[Mon Mar 30 02:22:46.829594 2026] [:error] [pid 23284:tid 23294] [client 40.75.84.21:64892] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock.php"] [unique_id "aclt9ozBujdPHsq7wyRbygAAAog"]
[Mon Mar 30 02:22:47.928508 2026] [:error] [pid 32257:tid 32323] [client 40.75.84.21:64335] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lock.php"] [unique_id "aclt9yE3TArOFrUtgWrs2AAAAIU"]
[Mon Mar 30 02:22:50.684506 2026] [:error] [pid 23250:tid 23254] [client 40.75.84.21:64346] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aclt-pxrpj-dQjy1cvo6uAAAAkI"]
[Mon Mar 30 02:22:54.973086 2026] [:error] [pid 23137:tid 23155] [client 40.75.84.21:64834] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aclt_haWQa7LdZ_qGFYrVwAAAZA"]
[Mon Mar 30 02:23:05.377298 2026] [:error] [pid 23137:tid 23159] [client 40.75.84.21:64794] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acluCRaWQa7LdZ_qGFYraAAAAZQ"]
[Mon Mar 30 02:23:12.154136 2026] [:error] [pid 23284:tid 23289] [client 40.75.84.21:64824] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acluEIzBujdPHsq7wyRb9QAAAoM"]
[Mon Mar 30 02:23:16.335187 2026] [:error] [pid 23168:tid 23199] [client 40.75.84.21:64825] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acluFGP8p0yRL8ot_2_-bAAAAgI"]
[Mon Mar 30 02:23:31.807297 2026] [:error] [pid 32257:tid 32330] [client 40.75.84.21:64258] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acluIyE3TArOFrUtgWrtIQAAAIw"]
[Mon Mar 30 02:23:52.493048 2026] [:error] [pid 23168:tid 23200] [client 40.75.84.21:64776] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acluOGP8p0yRL8ot_2_-kgAAAgM"]
[Mon Mar 30 02:24:27.244520 2026] [:error] [pid 32254:tid 32273] [client 40.75.84.21:64830] [client 40.75.84.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acluW6ug2IHuyGgCTn98lwAAAAk"]
[Mon Mar 30 02:24:40.197638 2026] [:error] [pid 23284:tid 23298] [client 40.75.84.21:64368] [client 40.75.84.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/not_found"] [unique_id "acluaIzBujdPHsq7wyRcbAAAAow"]
[Mon Mar 30 11:57:33.452401 2026] [:error] [pid 35248:tid 35254] [client 209.87.169.167:22553] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acn0rb3igMCgAQPFS_8dIgAAAEA"]
[Mon Mar 30 13:44:08.760961 2026] [:error] [pid 35250:tid 35321] [client 104.224.85.167:34508] [client 104.224.85.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "acoNqIaKM1MR6zcp2YPQjAAAAMo"]
[Mon Mar 30 18:30:36.193896 2026] [autoindex:error] [pid 35250:tid 35319] [client 89.117.54.137:61659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 31 02:40:44.226358 2026] [:error] [pid 39123:tid 39136] [client 4.205.211.88:5789] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrDrCobgVY20PMQKVuhfQAAAQs"]
[Tue Mar 31 02:40:44.685531 2026] [:error] [pid 39123:tid 39129] [client 4.205.211.88:5811] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrDrCobgVY20PMQKVuhhAAAAQQ"]
[Tue Mar 31 02:40:45.101079 2026] [:error] [pid 36939:tid 36960] [client 4.205.211.88:5807] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrDrcRDKH225Jeq1jdxpAAAABM"]
[Tue Mar 31 02:40:45.531578 2026] [:error] [pid 36939:tid 36944] [client 4.205.211.88:5802] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrDrcRDKH225Jeq1jdxqwAAAAM"]
[Tue Mar 31 03:30:41.485353 2026] [:error] [pid 15567:tid 15593] [client 52.138.46.222:2026] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrPYZx4rriuHvPbfx3AMgAAANY"]
[Tue Mar 31 03:30:42.910421 2026] [:error] [pid 15454:tid 15537] [client 52.138.46.222:1940] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrPYnCerH-ZHr3-moQspgAAAIk"]
[Tue Mar 31 03:30:44.328615 2026] [:error] [pid 15454:tid 15550] [client 52.138.46.222:2011] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrPZHCerH-ZHr3-moQsrwAAAJY"]
[Tue Mar 31 03:31:03.100314 2026] [:error] [pid 15454:tid 15551] [client 52.138.46.222:2007] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "acrPd3CerH-ZHr3-moQs6wAAAJc"]
[Tue Mar 31 03:31:04.532562 2026] [:error] [pid 15567:tid 15587] [client 52.138.46.222:1934] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "acrPeJx4rriuHvPbfx3AdwAAANA"]
[Tue Mar 31 03:31:05.949931 2026] [:error] [pid 15452:tid 15482] [client 52.138.46.222:1931] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "acrPeTsQa_tsDXl2tG79UQAAAAk"]
[Tue Mar 31 03:31:08.624621 2026] [:error] [pid 15567:tid 15574] [client 52.138.46.222:2005] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "acrPfJx4rriuHvPbfx3AhwAAAMM"]
[Tue Mar 31 03:31:10.045162 2026] [:error] [pid 15567:tid 15577] [client 52.138.46.222:2001] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wxfyf.php"] [unique_id "acrPfpx4rriuHvPbfx3AkAAAAMY"]
[Tue Mar 31 03:31:11.464726 2026] [:error] [pid 15567:tid 15590] [client 52.138.46.222:1939] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wxfyf.php"] [unique_id "acrPf5x4rriuHvPbfx3AlAAAANM"]
[Tue Mar 31 03:31:12.886751 2026] [:error] [pid 15452:tid 15492] [client 52.138.46.222:1969] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wxfyf.php"] [unique_id "acrPgDsQa_tsDXl2tG79VQAAABM"]
[Tue Mar 31 03:31:14.328319 2026] [:error] [pid 15453:tid 15513] [client 52.138.46.222:2037] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wxfyf.php"] [unique_id "acrPghsik4F-eVTMtrsZFAAAAEw"]
[Tue Mar 31 03:31:15.790435 2026] [:error] [pid 15452:tid 15485] [client 52.138.46.222:2047] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "acrPgzsQa_tsDXl2tG79WwAAAAw"]
[Tue Mar 31 03:31:17.225198 2026] [:error] [pid 15567:tid 15581] [client 52.138.46.222:1997] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "acrPhZx4rriuHvPbfx3AogAAAMo"]
[Tue Mar 31 03:31:18.641022 2026] [:error] [pid 15567:tid 15591] [client 52.138.46.222:1984] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "acrPhpx4rriuHvPbfx3ArQAAANQ"]
[Tue Mar 31 03:31:20.057507 2026] [:error] [pid 15454:tid 15529] [client 52.138.46.222:1922] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/callback.php"] [unique_id "acrPiHCerH-ZHr3-moQtBAAAAIE"]
[Tue Mar 31 03:31:21.473102 2026] [:error] [pid 15567:tid 15581] [client 52.138.46.222:2009] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h2.php"] [unique_id "acrPiZx4rriuHvPbfx3AvQAAAMo"]
[Tue Mar 31 03:31:22.892507 2026] [:error] [pid 15453:tid 15512] [client 52.138.46.222:1954] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h2.php"] [unique_id "acrPihsik4F-eVTMtrsZIAAAAEs"]
[Tue Mar 31 03:31:24.314788 2026] [:error] [pid 15453:tid 15516] [client 52.138.46.222:1878] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h2.php"] [unique_id "acrPjBsik4F-eVTMtrsZIQAAAE8"]
[Tue Mar 31 03:31:25.740019 2026] [:error] [pid 15453:tid 15508] [client 52.138.46.222:2021] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/h2.php"] [unique_id "acrPjRsik4F-eVTMtrsZIwAAAEc"]
[Tue Mar 31 03:31:27.167194 2026] [:error] [pid 15452:tid 15484] [client 52.138.46.222:2046] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "acrPjzsQa_tsDXl2tG79ZgAAAAs"]
[Tue Mar 31 03:31:28.610223 2026] [:error] [pid 15454:tid 15529] [client 52.138.46.222:2022] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "acrPkHCerH-ZHr3-moQtEQAAAIE"]
[Tue Mar 31 03:31:30.037923 2026] [:error] [pid 15452:tid 15477] [client 52.138.46.222:2020] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "acrPkjsQa_tsDXl2tG79awAAAAQ"]
[Tue Mar 31 03:31:31.456447 2026] [:error] [pid 15452:tid 15488] [client 52.138.46.222:1862] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "acrPkzsQa_tsDXl2tG79cAAAAA8"]
[Tue Mar 31 03:31:32.896053 2026] [:error] [pid 15567:tid 15579] [client 52.138.46.222:1973] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/144.php"] [unique_id "acrPlJx4rriuHvPbfx3A3QAAAMg"]
[Tue Mar 31 03:31:34.325317 2026] [:error] [pid 15454:tid 15538] [client 52.138.46.222:1989] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/144.php"] [unique_id "acrPlnCerH-ZHr3-moQtGQAAAIo"]
[Tue Mar 31 03:31:35.743202 2026] [:error] [pid 15454:tid 15546] [client 52.138.46.222:1936] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/144.php"] [unique_id "acrPl3CerH-ZHr3-moQtGwAAAJI"]
[Tue Mar 31 03:31:37.180781 2026] [:error] [pid 15454:tid 15532] [client 52.138.46.222:2025] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/144.php"] [unique_id "acrPmXCerH-ZHr3-moQtHgAAAIQ"]
[Tue Mar 31 03:31:38.603003 2026] [:error] [pid 15454:tid 15537] [client 52.138.46.222:2041] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "acrPmnCerH-ZHr3-moQtIQAAAIk"]
[Tue Mar 31 03:31:40.040497 2026] [:error] [pid 15567:tid 15592] [client 52.138.46.222:2040] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "acrPnJx4rriuHvPbfx3BBQAAANU"]
[Tue Mar 31 03:31:41.456817 2026] [:error] [pid 15454:tid 15551] [client 52.138.46.222:1935] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "acrPnXCerH-ZHr3-moQtLQAAAJc"]
[Tue Mar 31 03:31:42.880801 2026] [:error] [pid 15454:tid 15542] [client 52.138.46.222:1993] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "acrPnnCerH-ZHr3-moQtMQAAAI4"]
[Tue Mar 31 03:31:44.308535 2026] [:error] [pid 15567:tid 15574] [client 52.138.46.222:2045] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xsas.php"] [unique_id "acrPoJx4rriuHvPbfx3BGgAAAMM"]
[Tue Mar 31 03:31:45.723807 2026] [:error] [pid 15452:tid 15489] [client 52.138.46.222:2004] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xsas.php"] [unique_id "acrPoTsQa_tsDXl2tG79iwAAABA"]
[Tue Mar 31 03:31:47.182056 2026] [:error] [pid 15567:tid 15584] [client 52.138.46.222:2043] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xsas.php"] [unique_id "acrPo5x4rriuHvPbfx3BJwAAAM0"]
[Tue Mar 31 03:31:48.623837 2026] [:error] [pid 15454:tid 15533] [client 52.138.46.222:2012] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xsas.php"] [unique_id "acrPpHCerH-ZHr3-moQtTwAAAIU"]
[Tue Mar 31 03:31:50.071981 2026] [:error] [pid 15453:tid 15510] [client 52.138.46.222:1947] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "acrPphsik4F-eVTMtrsZPAAAAEk"]
[Tue Mar 31 03:31:51.531345 2026] [:error] [pid 15567:tid 15582] [client 52.138.46.222:2042] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "acrPp5x4rriuHvPbfx3BNgAAAMs"]
[Tue Mar 31 03:31:52.952247 2026] [:error] [pid 15567:tid 15594] [client 52.138.46.222:2019] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "acrPqJx4rriuHvPbfx3BOgAAANc"]
[Tue Mar 31 03:31:54.376509 2026] [:error] [pid 15452:tid 15483] [client 52.138.46.222:1988] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "acrPqjsQa_tsDXl2tG79kgAAAAo"]
[Tue Mar 31 03:31:55.807414 2026] [:error] [pid 15454:tid 15532] [client 52.138.46.222:1942] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrPq3CerH-ZHr3-moQtXgAAAIQ"]
[Tue Mar 31 03:31:57.232067 2026] [:error] [pid 15454:tid 15535] [client 52.138.46.222:2027] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrPrXCerH-ZHr3-moQtYwAAAIc"]
[Tue Mar 31 03:31:58.652631 2026] [:error] [pid 15453:tid 15509] [client 52.138.46.222:1861] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrPrhsik4F-eVTMtrsZSAAAAEg"]
[Tue Mar 31 03:32:04.242430 2026] [:error] [pid 15453:tid 15510] [client 52.138.46.222:1924] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrPtBsik4F-eVTMtrsZVAAAAEk"]
[Tue Mar 31 03:32:06.083066 2026] [:error] [pid 15567:tid 15575] [client 52.138.46.222:2029] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrPtpx4rriuHvPbfx3BRgAAAMQ"]
[Tue Mar 31 03:32:07.921644 2026] [:error] [pid 15454:tid 15551] [client 52.138.46.222:2007] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrPt3CerH-ZHr3-moQtdgAAAJc"]
[Tue Mar 31 03:32:10.808532 2026] [:error] [pid 15454:tid 15536] [client 52.138.46.222:1992] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asasx.php"] [unique_id "acrPunCerH-ZHr3-moQtewAAAIg"]
[Tue Mar 31 03:32:12.230182 2026] [:error] [pid 15454:tid 15531] [client 52.138.46.222:2038] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asasx.php"] [unique_id "acrPvHCerH-ZHr3-moQtfQAAAIM"]
[Tue Mar 31 03:32:13.645850 2026] [:error] [pid 15454:tid 15530] [client 52.138.46.222:1938] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asasx.php"] [unique_id "acrPvXCerH-ZHr3-moQtgwAAAII"]
[Tue Mar 31 03:32:15.076059 2026] [:error] [pid 15453:tid 15515] [client 52.138.46.222:1991] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asasx.php"] [unique_id "acrPvxsik4F-eVTMtrsZYAAAAE4"]
[Tue Mar 31 03:32:16.517879 2026] [:error] [pid 15567:tid 15577] [client 52.138.46.222:2028] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "acrPwJx4rriuHvPbfx3BXQAAAMY"]
[Tue Mar 31 03:32:17.937271 2026] [:error] [pid 15453:tid 15511] [client 52.138.46.222:1883] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "acrPwRsik4F-eVTMtrsZYwAAAEo"]
[Tue Mar 31 03:32:19.364747 2026] [:error] [pid 15453:tid 15513] [client 52.138.46.222:1948] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "acrPwxsik4F-eVTMtrsZZwAAAEw"]
[Tue Mar 31 03:32:20.785707 2026] [:error] [pid 15567:tid 15588] [client 52.138.46.222:1924] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file.php"] [unique_id "acrPxJx4rriuHvPbfx3BbAAAANE"]
[Tue Mar 31 03:32:22.230514 2026] [:error] [pid 15453:tid 15515] [client 52.138.46.222:2016] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/vx.php"] [unique_id "acrPxhsik4F-eVTMtrsZbAAAAE4"]
[Tue Mar 31 03:32:23.656603 2026] [:error] [pid 15454:tid 15545] [client 52.138.46.222:1865] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/vx.php"] [unique_id "acrPx3CerH-ZHr3-moQtnQAAAJE"]
[Tue Mar 31 03:32:25.084483 2026] [:error] [pid 15452:tid 15494] [client 52.138.46.222:1928] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/vx.php"] [unique_id "acrPyTsQa_tsDXl2tG79zAAAABU"]
[Tue Mar 31 03:32:26.516962 2026] [:error] [pid 15453:tid 15520] [client 52.138.46.222:2034] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/vx.php"] [unique_id "acrPyhsik4F-eVTMtrsZcAAAAFM"]
[Tue Mar 31 03:32:27.937740 2026] [:error] [pid 15567:tid 15577] [client 52.138.46.222:1994] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sale.php"] [unique_id "acrPy5x4rriuHvPbfx3BdQAAAMY"]
[Tue Mar 31 03:32:30.443141 2026] [:error] [pid 15454:tid 15537] [client 52.138.46.222:1923] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sale.php"] [unique_id "acrPznCerH-ZHr3-moQtqQAAAIk"]
[Tue Mar 31 03:32:31.872382 2026] [:error] [pid 15567:tid 15578] [client 52.138.46.222:2002] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sale.php"] [unique_id "acrPz5x4rriuHvPbfx3BhgAAAMc"]
[Tue Mar 31 03:32:33.300580 2026] [:error] [pid 15453:tid 15508] [client 52.138.46.222:1950] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sale.php"] [unique_id "acrP0Rsik4F-eVTMtrsZegAAAEc"]
[Tue Mar 31 03:32:34.725992 2026] [:error] [pid 15454:tid 15546] [client 52.138.46.222:2032] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "acrP0nCerH-ZHr3-moQtswAAAJI"]
[Tue Mar 31 03:32:36.151169 2026] [:error] [pid 15567:tid 15583] [client 52.138.46.222:2044] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "acrP1Jx4rriuHvPbfx3BnAAAAMw"]
[Tue Mar 31 03:32:37.579974 2026] [:error] [pid 15452:tid 15487] [client 52.138.46.222:1987] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "acrP1TsQa_tsDXl2tG793QAAAA4"]
[Tue Mar 31 03:32:39.004822 2026] [:error] [pid 15454:tid 15530] [client 52.138.46.222:1866] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "acrP13CerH-ZHr3-moQtwAAAAII"]
[Tue Mar 31 03:32:41.643850 2026] [:error] [pid 15452:tid 15475] [client 52.138.46.222:1929] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "acrP2TsQa_tsDXl2tG796AAAAAI"]
[Tue Mar 31 03:32:54.545779 2026] [:error] [pid 53196:tid 53200] [client 52.138.46.222:1927] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hots.php"] [unique_id "acrP5rllYgzI9aNU9ZRVowAAAAA"]
[Tue Mar 31 03:32:56.481184 2026] [:error] [pid 53198:tid 53260] [client 52.138.46.222:2029] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hots.php"] [unique_id "acrP6JIIspyQOAKrL3VVoAAAAIU"]
[Tue Mar 31 03:32:57.900843 2026] [:error] [pid 53197:tid 53233] [client 52.138.46.222:1953] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hots.php"] [unique_id "acrP6WdBhXmWgrUmTZwcRQAAAEU"]
[Tue Mar 31 03:32:59.323105 2026] [:error] [pid 53196:tid 53210] [client 52.138.46.222:1972] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hots.php"] [unique_id "acrP67llYgzI9aNU9ZRVtgAAAAo"]
[Tue Mar 31 03:33:00.757568 2026] [:error] [pid 53198:tid 53276] [client 52.138.46.222:1967] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "acrP7JIIspyQOAKrL3VVqAAAAJU"]
[Tue Mar 31 03:33:02.185807 2026] [:error] [pid 53197:tid 53237] [client 52.138.46.222:1921] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "acrP7mdBhXmWgrUmTZwcSAAAAEk"]
[Tue Mar 31 03:33:03.528518 2026] [:error] [pid 53196:tid 53208] [client 72.146.12.161:34489] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrP77llYgzI9aNU9ZRVuwAAAAg"]
[Tue Mar 31 03:33:03.997618 2026] [:error] [pid 53287:tid 53291] [client 72.146.12.161:28916] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrP7wDMGOSLvCorfgsbiAAAAMI"]
[Tue Mar 31 03:33:04.462942 2026] [:error] [pid 53287:tid 53297] [client 72.146.12.161:9569] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrP8ADMGOSLvCorfgsbjAAAAMg"]
[Tue Mar 31 03:33:04.939744 2026] [:error] [pid 53287:tid 53303] [client 72.146.12.161:34437] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrP8ADMGOSLvCorfgsbjwAAAM4"]
[Tue Mar 31 03:33:05.422047 2026] [:error] [pid 53287:tid 53304] [client 72.146.12.161:54415] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "acrP8QDMGOSLvCorfgsblQAAAM8"]
[Tue Mar 31 03:33:05.891178 2026] [:error] [pid 53198:tid 53259] [client 72.146.12.161:9541] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "acrP8ZIIspyQOAKrL3VVrwAAAIQ"]
[Tue Mar 31 03:33:06.375519 2026] [:error] [pid 53197:tid 53245] [client 72.146.12.161:45185] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "acrP8mdBhXmWgrUmTZwcTwAAAFE"]
[Tue Mar 31 03:33:06.856125 2026] [:error] [pid 53197:tid 53248] [client 72.146.12.161:12212] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "acrP8mdBhXmWgrUmTZwcUAAAAFQ"]
[Tue Mar 31 03:33:06.980495 2026] [:error] [pid 53198:tid 53257] [client 52.138.46.222:2045] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "acrP8pIIspyQOAKrL3VVsAAAAII"]
[Tue Mar 31 03:33:07.413846 2026] [:error] [pid 53197:tid 53250] [client 72.146.12.161:42397] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "acrP82dBhXmWgrUmTZwcUwAAAFY"]
[Tue Mar 31 03:33:07.911546 2026] [:error] [pid 53197:tid 53229] [client 72.146.12.161:34466] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "acrP82dBhXmWgrUmTZwcVQAAAEE"]
[Tue Mar 31 03:33:08.382909 2026] [:error] [pid 53197:tid 53233] [client 72.146.12.161:45227] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "acrP9GdBhXmWgrUmTZwcVgAAAEU"]
[Tue Mar 31 03:33:08.848338 2026] [:error] [pid 53196:tid 53216] [client 52.138.46.222:1933] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "acrP9LllYgzI9aNU9ZRVwQAAABA"]
[Tue Mar 31 03:33:08.857619 2026] [:error] [pid 53198:tid 53279] [client 72.146.12.161:27811] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "acrP9JIIspyQOAKrL3VVsQAAAJg"]
[Tue Mar 31 03:33:09.413018 2026] [:error] [pid 53198:tid 53260] [client 72.146.12.161:10469] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xhejulap.php"] [unique_id "acrP9ZIIspyQOAKrL3VVswAAAIU"]
[Tue Mar 31 03:33:09.901393 2026] [:error] [pid 53197:tid 53238] [client 72.146.12.161:42391] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xhejulap.php"] [unique_id "acrP9WdBhXmWgrUmTZwcWgAAAEo"]
[Tue Mar 31 03:33:10.428033 2026] [:error] [pid 53196:tid 53224] [client 72.146.12.161:54414] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xhejulap.php"] [unique_id "acrP9rllYgzI9aNU9ZRVxAAAABg"]
[Tue Mar 31 03:33:10.690662 2026] [:error] [pid 53197:tid 53237] [client 52.138.46.222:2012] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "acrP9mdBhXmWgrUmTZwcXAAAAEk"]
[Tue Mar 31 03:33:11.001479 2026] [:error] [pid 53287:tid 53306] [client 72.146.12.161:32145] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrP9wDMGOSLvCorfgsbngAAANE"]
[Tue Mar 31 03:33:11.472307 2026] [:error] [pid 53198:tid 53263] [client 72.146.12.161:24014] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrP95IIspyQOAKrL3VVtgAAAIg"]
[Tue Mar 31 03:33:11.975892 2026] [:error] [pid 53287:tid 53308] [client 72.146.12.161:9594] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrP9wDMGOSLvCorfgsbnwAAANM"]
[Tue Mar 31 03:33:12.485324 2026] [:error] [pid 53197:tid 53241] [client 72.146.12.161:28874] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrP-GdBhXmWgrUmTZwcXgAAAE0"]
[Tue Mar 31 03:33:12.530398 2026] [:error] [pid 53196:tid 53211] [client 52.138.46.222:2028] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "acrP-LllYgzI9aNU9ZRVywAAAAs"]
[Tue Mar 31 03:33:13.066992 2026] [:error] [pid 53197:tid 53245] [client 72.146.12.161:11896] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddpxi.php"] [unique_id "acrP-WdBhXmWgrUmTZwcXwAAAFE"]
[Tue Mar 31 03:33:13.580221 2026] [:error] [pid 53196:tid 53214] [client 72.146.12.161:27818] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ddpxi.php"] [unique_id "acrP-bllYgzI9aNU9ZRVzgAAAA4"]
[Tue Mar 31 03:33:13.958826 2026] [:error] [pid 53197:tid 53244] [client 52.138.46.222:1964] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acrP-WdBhXmWgrUmTZwcYAAAAFA"]
[Tue Mar 31 03:33:14.059610 2026] [:error] [pid 53197:tid 53246] [client 72.146.12.161:12180] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cdkfu.php"] [unique_id "acrP-mdBhXmWgrUmTZwcYQAAAFI"]
[Tue Mar 31 03:33:14.531601 2026] [:error] [pid 53197:tid 53248] [client 72.146.12.161:9497] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cdkfu.php"] [unique_id "acrP-mdBhXmWgrUmTZwcYgAAAFQ"]
[Tue Mar 31 03:33:14.998127 2026] [:error] [pid 53198:tid 53265] [client 72.146.12.161:34471] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cdkfu.php"] [unique_id "acrP-pIIspyQOAKrL3VVuQAAAIo"]
[Tue Mar 31 03:33:15.379998 2026] [:error] [pid 53287:tid 53311] [client 52.138.46.222:1957] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acrP-wDMGOSLvCorfgsbpQAAANY"]
[Tue Mar 31 03:33:15.623943 2026] [:error] [pid 53198:tid 53266] [client 72.146.12.161:54452] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/IcC7p.php"] [unique_id "acrP-5IIspyQOAKrL3VVuwAAAIs"]
[Tue Mar 31 03:33:16.118731 2026] [:error] [pid 53198:tid 53268] [client 72.146.12.161:42412] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "acrP_JIIspyQOAKrL3VVvwAAAI0"]
[Tue Mar 31 03:33:16.588887 2026] [:error] [pid 53198:tid 53269] [client 72.146.12.161:10491] [client 72.146.12.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "acrP_JIIspyQOAKrL3VVwAAAAI4"]
[Tue Mar 31 03:33:16.807729 2026] [:error] [pid 53198:tid 53276] [client 52.138.46.222:1870] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acrP_JIIspyQOAKrL3VVwQAAAJU"]
[Tue Mar 31 03:33:18.222318 2026] [:error] [pid 53197:tid 53231] [client 52.138.46.222:1951] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acrP_mdBhXmWgrUmTZwcYwAAAEM"]
[Tue Mar 31 03:33:19.647086 2026] [:error] [pid 53198:tid 53255] [client 52.138.46.222:1965] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acrP_5IIspyQOAKrL3VVxgAAAIA"]
[Tue Mar 31 03:33:21.083880 2026] [:error] [pid 53196:tid 53204] [client 52.138.46.222:1943] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acrQAbllYgzI9aNU9ZRV3AAAAAQ"]
[Tue Mar 31 03:33:22.510997 2026] [:error] [pid 53287:tid 53294] [client 52.138.46.222:1961] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acrQAgDMGOSLvCorfgsbqgAAAMU"]
[Tue Mar 31 03:33:23.938387 2026] [:error] [pid 53197:tid 53243] [client 52.138.46.222:2008] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "acrQA2dBhXmWgrUmTZwcbQAAAE8"]
[Tue Mar 31 03:33:25.367827 2026] [:error] [pid 53196:tid 53223] [client 52.138.46.222:1925] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acrQBbllYgzI9aNU9ZRV3gAAABc"]
[Tue Mar 31 03:33:26.789767 2026] [:error] [pid 53197:tid 53236] [client 52.138.46.222:2031] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acrQBmdBhXmWgrUmTZwccQAAAEg"]
[Tue Mar 31 03:33:28.227524 2026] [:error] [pid 53196:tid 53214] [client 52.138.46.222:2014] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acrQCLllYgzI9aNU9ZRV5QAAAA4"]
[Tue Mar 31 03:33:29.648800 2026] [:error] [pid 53196:tid 53205] [client 52.138.46.222:1937] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acrQCbllYgzI9aNU9ZRV5wAAAAU"]
[Tue Mar 31 03:33:31.070818 2026] [:error] [pid 53196:tid 53212] [client 52.138.46.222:1875] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "acrQC7llYgzI9aNU9ZRV6QAAAAw"]
[Tue Mar 31 03:33:32.493334 2026] [:error] [pid 53287:tid 53301] [client 52.138.46.222:1885] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "acrQDADMGOSLvCorfgsbrgAAAMw"]
[Tue Mar 31 03:33:33.914422 2026] [:error] [pid 53197:tid 53243] [client 52.138.46.222:2010] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "acrQDWdBhXmWgrUmTZwcdgAAAE8"]
[Tue Mar 31 03:33:35.344077 2026] [:error] [pid 53287:tid 53290] [client 52.138.46.222:1974] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "acrQDwDMGOSLvCorfgsbtwAAAME"]
[Tue Mar 31 03:33:36.759089 2026] [:error] [pid 53197:tid 53229] [client 52.138.46.222:1985] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "acrQEGdBhXmWgrUmTZwcewAAAEE"]
[Tue Mar 31 03:33:38.181924 2026] [:error] [pid 53198:tid 53264] [client 52.138.46.222:1958] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "acrQEpIIspyQOAKrL3VV1wAAAIk"]
[Tue Mar 31 03:33:39.619844 2026] [:error] [pid 53198:tid 53269] [client 52.138.46.222:1962] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "acrQE5IIspyQOAKrL3VV2gAAAI4"]
[Tue Mar 31 03:33:41.042589 2026] [:error] [pid 53197:tid 53242] [client 52.138.46.222:1900] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "acrQFWdBhXmWgrUmTZwcgwAAAE4"]
[Tue Mar 31 03:33:42.466486 2026] [:error] [pid 53196:tid 53215] [client 52.138.46.222:2024] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "acrQFrllYgzI9aNU9ZRV7wAAAA8"]
[Tue Mar 31 03:33:43.887756 2026] [:error] [pid 53197:tid 53249] [client 52.138.46.222:1910] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "acrQF2dBhXmWgrUmTZwchQAAAFU"]
[Tue Mar 31 03:33:45.315780 2026] [:error] [pid 53287:tid 53295] [client 52.138.46.222:1864] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "acrQGQDMGOSLvCorfgsbwAAAAMY"]
[Tue Mar 31 03:33:46.761466 2026] [:error] [pid 53198:tid 53271] [client 52.138.46.222:2033] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "acrQGpIIspyQOAKrL3VV5QAAAJA"]
[Tue Mar 31 03:33:48.185113 2026] [:error] [pid 53198:tid 53264] [client 52.138.46.222:1990] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "acrQHJIIspyQOAKrL3VV6AAAAIk"]
[Tue Mar 31 03:33:49.608181 2026] [:error] [pid 53287:tid 53312] [client 52.138.46.222:1926] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "acrQHQDMGOSLvCorfgsbxQAAANc"]
[Tue Mar 31 03:33:51.038194 2026] [:error] [pid 53287:tid 53290] [client 52.138.46.222:1859] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "acrQHwDMGOSLvCorfgsbywAAAME"]
[Tue Mar 31 03:33:52.453540 2026] [:error] [pid 53198:tid 53271] [client 52.138.46.222:1970] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "acrQIJIIspyQOAKrL3VV8QAAAJA"]
[Tue Mar 31 03:33:53.877055 2026] [:error] [pid 53196:tid 53219] [client 52.138.46.222:1874] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/56c53.php"] [unique_id "acrQIbllYgzI9aNU9ZRV_AAAABM"]
[Tue Mar 31 03:33:55.289582 2026] [:error] [pid 53196:tid 53221] [client 52.138.46.222:2035] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/56c53.php"] [unique_id "acrQI7llYgzI9aNU9ZRWAAAAABU"]
[Tue Mar 31 03:33:56.704457 2026] [:error] [pid 53196:tid 53209] [client 52.138.46.222:1995] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/56c53.php"] [unique_id "acrQJLllYgzI9aNU9ZRWBgAAAAk"]
[Tue Mar 31 03:33:58.164982 2026] [:error] [pid 53197:tid 53233] [client 52.138.46.222:1999] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/56c53.php"] [unique_id "acrQJmdBhXmWgrUmTZwcnQAAAEU"]
[Tue Mar 31 03:33:59.584449 2026] [:error] [pid 53196:tid 53212] [client 52.138.46.222:2030] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acrQJ7llYgzI9aNU9ZRWDgAAAAw"]
[Tue Mar 31 03:34:01.001716 2026] [:error] [pid 53287:tid 53299] [client 52.138.46.222:1895] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acrQKQDMGOSLvCorfgsb5QAAAMo"]
[Tue Mar 31 03:34:02.422178 2026] [:error] [pid 53287:tid 53312] [client 52.138.46.222:1968] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acrQKgDMGOSLvCorfgsb7QAAANc"]
[Tue Mar 31 03:34:03.846338 2026] [:error] [pid 53198:tid 53276] [client 52.138.46.222:1930] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acrQK5IIspyQOAKrL3VV9QAAAJU"]
[Tue Mar 31 03:34:10.659991 2026] [:error] [pid 53196:tid 53215] [client 52.138.46.222:2047] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acrQMrllYgzI9aNU9ZRWHQAAAA8"]
[Tue Mar 31 03:34:12.503731 2026] [:error] [pid 53287:tid 53302] [client 52.138.46.222:2032] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acrQNADMGOSLvCorfgscCwAAAM0"]
[Tue Mar 31 03:34:14.337922 2026] [:error] [pid 53196:tid 53224] [client 52.138.46.222:1927] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acrQNrllYgzI9aNU9ZRWIgAAABg"]
[Tue Mar 31 03:34:16.181180 2026] [:error] [pid 53287:tid 53292] [client 52.138.46.222:2042] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acrQOADMGOSLvCorfgscFQAAAMM"]
[Tue Mar 31 03:34:17.610648 2026] [:error] [pid 53198:tid 53267] [client 52.138.46.222:1959] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mh.php"] [unique_id "acrQOZIIspyQOAKrL3VWEgAAAIw"]
[Tue Mar 31 03:34:19.031323 2026] [:error] [pid 53196:tid 53216] [client 52.138.46.222:1978] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mh.php"] [unique_id "acrQO7llYgzI9aNU9ZRWKQAAABA"]
[Tue Mar 31 03:34:20.460131 2026] [:error] [pid 53196:tid 53206] [client 52.138.46.222:2036] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mh.php"] [unique_id "acrQPLllYgzI9aNU9ZRWLwAAAAY"]
[Tue Mar 31 03:34:21.882646 2026] [:error] [pid 53287:tid 53292] [client 52.138.46.222:1881] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mh.php"] [unique_id "acrQPQDMGOSLvCorfgscIAAAAMM"]
[Tue Mar 31 03:34:23.299017 2026] [:error] [pid 53198:tid 53256] [client 52.138.46.222:1932] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bo.php"] [unique_id "acrQP5IIspyQOAKrL3VWHQAAAIE"]
[Tue Mar 31 03:34:24.724725 2026] [:error] [pid 53196:tid 53213] [client 52.138.46.222:1814] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bo.php"] [unique_id "acrQQLllYgzI9aNU9ZRWNQAAAA0"]
[Tue Mar 31 03:34:26.144337 2026] [:error] [pid 53196:tid 53202] [client 52.138.46.222:1952] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bo.php"] [unique_id "acrQQrllYgzI9aNU9ZRWNgAAAAI"]
[Tue Mar 31 03:34:27.567911 2026] [:error] [pid 53198:tid 53277] [client 52.138.46.222:1919] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bo.php"] [unique_id "acrQQ5IIspyQOAKrL3VWJQAAAJY"]
[Tue Mar 31 03:34:29.021967 2026] [:error] [pid 53196:tid 53203] [client 52.138.46.222:1977] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5b9ac.php"] [unique_id "acrQRbllYgzI9aNU9ZRWOgAAAAM"]
[Tue Mar 31 03:34:30.441965 2026] [:error] [pid 53196:tid 53216] [client 52.138.46.222:1899] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5b9ac.php"] [unique_id "acrQRrllYgzI9aNU9ZRWPwAAABA"]
[Tue Mar 31 03:34:31.875914 2026] [:error] [pid 53198:tid 53269] [client 52.138.46.222:1856] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5b9ac.php"] [unique_id "acrQR5IIspyQOAKrL3VWMgAAAI4"]
[Tue Mar 31 03:34:33.302321 2026] [:error] [pid 53287:tid 53311] [client 52.138.46.222:2017] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5b9ac.php"] [unique_id "acrQSQDMGOSLvCorfgscNgAAANY"]
[Tue Mar 31 03:34:34.725256 2026] [:error] [pid 53197:tid 53238] [client 52.138.46.222:1956] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "acrQSmdBhXmWgrUmTZwcvgAAAEo"]
[Tue Mar 31 03:34:36.146543 2026] [:error] [pid 53198:tid 53267] [client 52.138.46.222:1996] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "acrQTJIIspyQOAKrL3VWOAAAAIw"]
[Tue Mar 31 03:34:37.570284 2026] [:error] [pid 53198:tid 53277] [client 52.138.46.222:1986] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "acrQTZIIspyQOAKrL3VWOgAAAJY"]
[Tue Mar 31 03:34:39.009389 2026] [:error] [pid 53198:tid 53271] [client 52.138.46.222:1901] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bolt.php"] [unique_id "acrQT5IIspyQOAKrL3VWPQAAAJA"]
[Tue Mar 31 03:34:40.478750 2026] [:error] [pid 53287:tid 53312] [client 52.138.46.222:2006] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acrQUADMGOSLvCorfgscSgAAANc"]
[Tue Mar 31 03:34:41.916370 2026] [:error] [pid 53198:tid 53278] [client 52.138.46.222:2015] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acrQUZIIspyQOAKrL3VWPwAAAJc"]
[Tue Mar 31 03:34:43.355524 2026] [:error] [pid 53197:tid 53238] [client 52.138.46.222:1873] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acrQU2dBhXmWgrUmTZwcyAAAAEo"]
[Tue Mar 31 03:34:44.778078 2026] [:error] [pid 53197:tid 53241] [client 52.138.46.222:1982] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acrQVGdBhXmWgrUmTZwczAAAAE0"]
[Tue Mar 31 03:34:46.198482 2026] [:error] [pid 53196:tid 53212] [client 52.138.46.222:1871] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rithin.php"] [unique_id "acrQVrllYgzI9aNU9ZRWXQAAAAw"]
[Tue Mar 31 03:34:47.623373 2026] [:error] [pid 53197:tid 53228] [client 52.138.46.222:1898] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rithin.php"] [unique_id "acrQV2dBhXmWgrUmTZwc0gAAAEA"]
[Tue Mar 31 03:34:49.046726 2026] [:error] [pid 53197:tid 53245] [client 52.138.46.222:1912] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rithin.php"] [unique_id "acrQWWdBhXmWgrUmTZwc1QAAAFE"]
[Tue Mar 31 03:34:50.466462 2026] [:error] [pid 53196:tid 53213] [client 52.138.46.222:1906] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rithin.php"] [unique_id "acrQWrllYgzI9aNU9ZRWaAAAAA0"]
[Tue Mar 31 03:34:51.890190 2026] [:error] [pid 53287:tid 53311] [client 52.138.46.222:2026] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "acrQWwDMGOSLvCorfgscWgAAANY"]
[Tue Mar 31 03:34:53.314878 2026] [:error] [pid 53287:tid 53305] [client 52.138.46.222:1960] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "acrQXQDMGOSLvCorfgscXwAAANA"]
[Tue Mar 31 03:34:54.747514 2026] [:error] [pid 53198:tid 53273] [client 52.138.46.222:1863] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "acrQXpIIspyQOAKrL3VWVgAAAJI"]
[Tue Mar 31 03:34:56.194457 2026] [:error] [pid 53198:tid 53257] [client 52.138.46.222:1897] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx78.php"] [unique_id "acrQYJIIspyQOAKrL3VWXQAAAII"]
[Tue Mar 31 03:34:57.609358 2026] [:error] [pid 53287:tid 53296] [client 52.138.46.222:1907] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "acrQYQDMGOSLvCorfgscZwAAAMc"]
[Tue Mar 31 03:34:59.032180 2026] [:error] [pid 53197:tid 53232] [client 52.138.46.222:1849] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "acrQY2dBhXmWgrUmTZwc5QAAAEQ"]
[Tue Mar 31 03:35:00.453544 2026] [:error] [pid 53197:tid 53234] [client 52.138.46.222:1920] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "acrQZGdBhXmWgrUmTZwc6AAAAEY"]
[Tue Mar 31 03:35:01.894347 2026] [:error] [pid 53197:tid 53231] [client 52.138.46.222:1867] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "acrQZWdBhXmWgrUmTZwc7wAAAEM"]
[Tue Mar 31 03:35:03.320861 2026] [:error] [pid 53287:tid 53302] [client 52.138.46.222:1983] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "acrQZwDMGOSLvCorfgscdQAAAM0"]
[Tue Mar 31 03:35:04.772931 2026] [:error] [pid 53198:tid 53270] [client 52.138.46.222:2013] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "acrQaJIIspyQOAKrL3VWcgAAAI8"]
[Tue Mar 31 03:35:06.193847 2026] [:error] [pid 53197:tid 53246] [client 52.138.46.222:1909] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "acrQamdBhXmWgrUmTZwdCAAAAFI"]
[Tue Mar 31 03:35:07.620596 2026] [:error] [pid 53287:tid 53293] [client 52.138.46.222:2023] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "acrQawDMGOSLvCorfgschQAAAMQ"]
[Tue Mar 31 03:35:12.724770 2026] [:error] [pid 53197:tid 53240] [client 52.138.46.222:2043] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/torsa1.php"] [unique_id "acrQcGdBhXmWgrUmTZwdHAAAAEw"]
[Tue Mar 31 03:35:14.569202 2026] [:error] [pid 53197:tid 53229] [client 52.138.46.222:1996] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/torsa1.php"] [unique_id "acrQcmdBhXmWgrUmTZwdHgAAAEE"]
[Tue Mar 31 03:35:16.682544 2026] [:error] [pid 53287:tid 53305] [client 52.138.46.222:1922] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/torsa1.php"] [unique_id "acrQdADMGOSLvCorfgscoQAAANA"]
[Tue Mar 31 03:35:18.538350 2026] [:error] [pid 53287:tid 53293] [client 52.138.46.222:2021] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/torsa1.php"] [unique_id "acrQdgDMGOSLvCorfgscrgAAAMQ"]
[Tue Mar 31 03:35:19.953361 2026] [:error] [pid 53196:tid 53210] [client 52.138.46.222:1969] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "acrQd7llYgzI9aNU9ZRWpAAAAAo"]
[Tue Mar 31 03:35:21.377038 2026] [:error] [pid 53287:tid 53289] [client 52.138.46.222:1868] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "acrQeQDMGOSLvCorfgscuwAAAMA"]
[Tue Mar 31 03:35:22.802842 2026] [:error] [pid 53198:tid 53263] [client 52.138.46.222:1940] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "acrQepIIspyQOAKrL3VWkAAAAIg"]
[Tue Mar 31 03:35:24.226522 2026] [:error] [pid 53198:tid 53260] [client 52.138.46.222:2003] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "acrQfJIIspyQOAKrL3VWmgAAAIU"]
[Tue Mar 31 03:35:25.679853 2026] [:error] [pid 53197:tid 53229] [client 52.138.46.222:1975] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acrQfWdBhXmWgrUmTZwdMAAAAEE"]
[Tue Mar 31 03:35:27.113638 2026] [:error] [pid 53197:tid 53232] [client 52.138.46.222:1944] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acrQf2dBhXmWgrUmTZwdMwAAAEQ"]
[Tue Mar 31 03:35:28.537896 2026] [:error] [pid 53198:tid 53258] [client 52.138.46.222:2009] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acrQgJIIspyQOAKrL3VWrQAAAIM"]
[Tue Mar 31 03:35:29.960706 2026] [:error] [pid 53198:tid 53277] [client 52.138.46.222:1884] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acrQgZIIspyQOAKrL3VWtAAAAJY"]
[Tue Mar 31 03:35:31.415602 2026] [:error] [pid 53197:tid 53248] [client 52.138.46.222:1976] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acrQg2dBhXmWgrUmTZwdRgAAAFQ"]
[Tue Mar 31 03:35:32.853399 2026] [:error] [pid 53198:tid 53270] [client 52.138.46.222:1997] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acrQhJIIspyQOAKrL3VWvAAAAI8"]
[Tue Mar 31 03:35:34.278549 2026] [:error] [pid 53287:tid 53299] [client 52.138.46.222:1796] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acrQhgDMGOSLvCorfgsc2AAAAMo"]
[Tue Mar 31 03:35:35.699253 2026] [:error] [pid 53287:tid 53291] [client 52.138.46.222:1879] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acrQhwDMGOSLvCorfgsc4AAAAMI"]
[Tue Mar 31 03:35:37.153905 2026] [:error] [pid 53198:tid 53259] [client 52.138.46.222:2003] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "acrQiZIIspyQOAKrL3VWzAAAAIQ"]
[Tue Mar 31 03:35:38.573969 2026] [:error] [pid 53287:tid 53302] [client 52.138.46.222:1876] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "acrQigDMGOSLvCorfgsc5QAAAM0"]
[Tue Mar 31 03:35:40.045707 2026] [:error] [pid 53198:tid 53279] [client 52.138.46.222:1794] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "acrQjJIIspyQOAKrL3VW3wAAAJg"]
[Tue Mar 31 03:35:41.471562 2026] [:error] [pid 53287:tid 53296] [client 52.138.46.222:1869] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "acrQjQDMGOSLvCorfgsc6wAAAMc"]
[Tue Mar 31 03:35:42.899009 2026] [:error] [pid 53287:tid 53303] [client 52.138.46.222:1911] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws81.php"] [unique_id "acrQjgDMGOSLvCorfgsc8AAAAM4"]
[Tue Mar 31 03:35:44.327088 2026] [:error] [pid 53198:tid 53269] [client 52.138.46.222:1931] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws81.php"] [unique_id "acrQkJIIspyQOAKrL3VW6AAAAI4"]
[Tue Mar 31 03:35:45.767175 2026] [:error] [pid 53287:tid 53310] [client 52.138.46.222:1798] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws81.php"] [unique_id "acrQkQDMGOSLvCorfgsdAAAAANU"]
[Tue Mar 31 03:35:47.283175 2026] [:error] [pid 53287:tid 53297] [client 52.138.46.222:2025] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws81.php"] [unique_id "acrQkwDMGOSLvCorfgsdCAAAAMg"]
[Tue Mar 31 03:35:48.754442 2026] [:error] [pid 53287:tid 53297] [client 52.138.46.222:1860] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acrQlADMGOSLvCorfgsdEQAAAMg"]
[Tue Mar 31 03:35:50.176830 2026] [:error] [pid 53197:tid 53231] [client 52.138.46.222:1887] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acrQlmdBhXmWgrUmTZwdbwAAAEM"]
[Tue Mar 31 03:35:51.599085 2026] [:error] [pid 53287:tid 53297] [client 52.138.46.222:1934] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acrQlwDMGOSLvCorfgsdGgAAAMg"]
[Tue Mar 31 03:35:53.020147 2026] [:error] [pid 53198:tid 53272] [client 52.138.46.222:1955] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acrQmZIIspyQOAKrL3VW7AAAAJE"]
[Tue Mar 31 03:35:55.600335 2026] [:error] [pid 53287:tid 53294] [client 52.138.46.222:1836] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfd.php"] [unique_id "acrQmwDMGOSLvCorfgsdJgAAAMU"]
[Tue Mar 31 03:35:57.040193 2026] [:error] [pid 53198:tid 53279] [client 52.138.46.222:2005] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gfd.php"] [unique_id "acrQnZIIspyQOAKrL3VW8QAAAJg"]
[Tue Mar 31 03:35:58.493718 2026] [:error] [pid 53196:tid 53217] [client 52.138.46.222:1800] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abrand.php"] [unique_id "acrQnrllYgzI9aNU9ZRW0QAAABE"]
[Tue Mar 31 03:35:59.930342 2026] [:error] [pid 53287:tid 53289] [client 52.138.46.222:1854] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abrand.php"] [unique_id "acrQnwDMGOSLvCorfgsdKgAAAMA"]
[Tue Mar 31 03:36:01.384855 2026] [:error] [pid 53197:tid 53230] [client 52.138.46.222:2041] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abrand.php"] [unique_id "acrQoWdBhXmWgrUmTZwdhAAAAEI"]
[Tue Mar 31 03:36:02.832690 2026] [:error] [pid 53196:tid 53223] [client 52.138.46.222:1801] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abrand.php"] [unique_id "acrQorllYgzI9aNU9ZRW2QAAABc"]
[Tue Mar 31 03:36:04.263762 2026] [:error] [pid 53198:tid 53259] [client 52.138.46.222:1947] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "acrQpJIIspyQOAKrL3VW-gAAAIQ"]
[Tue Mar 31 03:36:05.716994 2026] [:error] [pid 53196:tid 53215] [client 52.138.46.222:1891] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "acrQpbllYgzI9aNU9ZRW5QAAAA8"]
[Tue Mar 31 03:36:07.152491 2026] [:error] [pid 53198:tid 53268] [client 52.138.46.222:2019] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "acrQp5IIspyQOAKrL3VW_AAAAI0"]
[Tue Mar 31 03:36:08.609962 2026] [:error] [pid 53198:tid 53257] [client 52.138.46.222:2045] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "acrQqJIIspyQOAKrL3VXAwAAAII"]
[Tue Mar 31 03:36:13.916552 2026] [:error] [pid 53287:tid 53313] [client 52.138.46.222:1984] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "acrQrQDMGOSLvCorfgsdOwAAANg"]
[Tue Mar 31 03:36:15.785590 2026] [:error] [pid 53198:tid 53275] [client 52.138.46.222:1934] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "acrQr5IIspyQOAKrL3VXGAAAAJQ"]
[Tue Mar 31 03:36:17.632705 2026] [:error] [pid 53197:tid 53241] [client 52.138.46.222:1926] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "acrQsWdBhXmWgrUmTZwdlQAAAE0"]
[Tue Mar 31 03:36:19.466907 2026] [:error] [pid 53198:tid 53261] [client 52.138.46.222:1987] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws75.php"] [unique_id "acrQs5IIspyQOAKrL3VXHwAAAIY"]
[Tue Mar 31 03:36:20.885467 2026] [:error] [pid 53287:tid 53309] [client 52.138.46.222:1880] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "acrQtADMGOSLvCorfgsdPgAAANQ"]
[Tue Mar 31 03:36:22.342197 2026] [:error] [pid 53287:tid 53296] [client 52.138.46.222:1844] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "acrQtgDMGOSLvCorfgsdRQAAAMc"]
[Tue Mar 31 03:36:23.781072 2026] [:error] [pid 53198:tid 53259] [client 52.138.46.222:2043] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "acrQt5IIspyQOAKrL3VXJwAAAIQ"]
[Tue Mar 31 03:36:25.220601 2026] [:error] [pid 53198:tid 53266] [client 52.138.46.222:1857] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/install.php"] [unique_id "acrQuZIIspyQOAKrL3VXLAAAAIs"]
[Tue Mar 31 03:36:26.638758 2026] [:error] [pid 53198:tid 53271] [client 52.138.46.222:1792] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maul.php"] [unique_id "acrQupIIspyQOAKrL3VXMAAAAJA"]
[Tue Mar 31 03:36:28.066777 2026] [:error] [pid 53198:tid 53260] [client 52.138.46.222:1989] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maul.php"] [unique_id "acrQvJIIspyQOAKrL3VXMwAAAIU"]
[Tue Mar 31 03:36:29.497193 2026] [:error] [pid 53198:tid 53273] [client 52.138.46.222:1820] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maul.php"] [unique_id "acrQvZIIspyQOAKrL3VXOgAAAJI"]
[Tue Mar 31 03:36:30.920856 2026] [:error] [pid 53198:tid 53257] [client 52.138.46.222:2038] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/maul.php"] [unique_id "acrQvpIIspyQOAKrL3VXRwAAAII"]
[Tue Mar 31 03:36:32.344210 2026] [:error] [pid 53287:tid 53308] [client 52.138.46.222:2000] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lowpr.php"] [unique_id "acrQwADMGOSLvCorfgsdUAAAANM"]
[Tue Mar 31 03:36:33.768765 2026] [:error] [pid 53287:tid 53298] [client 52.138.46.222:1822] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lowpr.php"] [unique_id "acrQwQDMGOSLvCorfgsdUwAAAMk"]
[Tue Mar 31 03:36:35.190119 2026] [:error] [pid 53197:tid 53243] [client 52.138.46.222:2042] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lowpr.php"] [unique_id "acrQw2dBhXmWgrUmTZwdrgAAAE8"]
[Tue Mar 31 03:36:36.617341 2026] [:error] [pid 53196:tid 53202] [client 52.138.46.222:2040] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lowpr.php"] [unique_id "acrQxLllYgzI9aNU9ZRXGQAAAAI"]
[Tue Mar 31 03:36:38.033377 2026] [:error] [pid 53287:tid 53290] [client 52.138.46.222:1793] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "acrQxgDMGOSLvCorfgsdXAAAAME"]
[Tue Mar 31 03:36:39.474040 2026] [:error] [pid 53287:tid 53299] [client 52.138.46.222:2018] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "acrQxwDMGOSLvCorfgsdYAAAAMo"]
[Tue Mar 31 03:36:40.894027 2026] [:error] [pid 53197:tid 53229] [client 52.138.46.222:1928] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "acrQyGdBhXmWgrUmTZwdvAAAAEE"]
[Tue Mar 31 03:36:42.316769 2026] [:error] [pid 53287:tid 53290] [client 52.138.46.222:1933] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "acrQygDMGOSLvCorfgsdZwAAAME"]
[Tue Mar 31 03:36:43.770653 2026] [:error] [pid 53198:tid 53255] [client 52.138.46.222:1923] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/166.php"] [unique_id "acrQy5IIspyQOAKrL3VXaQAAAIA"]
[Tue Mar 31 03:36:45.194488 2026] [:error] [pid 53197:tid 53229] [client 52.138.46.222:2001] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/166.php"] [unique_id "acrQzWdBhXmWgrUmTZwdyQAAAEE"]
[Tue Mar 31 03:36:46.620740 2026] [:error] [pid 53287:tid 53308] [client 52.138.46.222:1824] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/166.php"] [unique_id "acrQzgDMGOSLvCorfgsddAAAANM"]
[Tue Mar 31 03:36:48.071350 2026] [:error] [pid 53197:tid 53246] [client 52.138.46.222:1950] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/166.php"] [unique_id "acrQ0GdBhXmWgrUmTZwd2QAAAFI"]
[Tue Mar 31 03:36:49.497052 2026] [:error] [pid 53287:tid 53304] [client 52.138.46.222:1819] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/domains.php"] [unique_id "acrQ0QDMGOSLvCorfgsdeAAAAM8"]
[Tue Mar 31 03:36:50.916355 2026] [:error] [pid 53196:tid 53217] [client 52.138.46.222:1826] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/domains.php"] [unique_id "acrQ0rllYgzI9aNU9ZRXJgAAABE"]
[Tue Mar 31 03:36:52.334723 2026] [:error] [pid 53287:tid 53298] [client 52.138.46.222:1935] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/domains.php"] [unique_id "acrQ1ADMGOSLvCorfgsdhgAAAMk"]
[Tue Mar 31 03:36:53.756825 2026] [:error] [pid 53196:tid 53204] [client 52.138.46.222:1939] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/domains.php"] [unique_id "acrQ1bllYgzI9aNU9ZRXLAAAAAQ"]
[Tue Mar 31 03:36:55.180857 2026] [:error] [pid 53287:tid 53299] [client 52.138.46.222:1987] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws85.php"] [unique_id "acrQ1wDMGOSLvCorfgsdlwAAAMo"]
[Tue Mar 31 03:36:56.605575 2026] [:error] [pid 53197:tid 53244] [client 52.138.46.222:1929] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws85.php"] [unique_id "acrQ2GdBhXmWgrUmTZwd8QAAAFA"]
[Tue Mar 31 03:36:58.023883 2026] [:error] [pid 53197:tid 53230] [client 52.138.46.222:1938] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws85.php"] [unique_id "acrQ2mdBhXmWgrUmTZwd9gAAAEI"]
[Tue Mar 31 03:36:59.448732 2026] [:error] [pid 53198:tid 53259] [client 52.138.46.222:1973] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws85.php"] [unique_id "acrQ25IIspyQOAKrL3VXjwAAAIQ"]
[Tue Mar 31 03:37:00.874288 2026] [:error] [pid 53198:tid 53269] [client 52.138.46.222:1966] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "acrQ3JIIspyQOAKrL3VXmQAAAI4"]
[Tue Mar 31 03:37:02.330338 2026] [:error] [pid 53198:tid 53275] [client 52.138.46.222:2047] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "acrQ3pIIspyQOAKrL3VXnwAAAJQ"]
[Tue Mar 31 03:37:03.761817 2026] [:error] [pid 53198:tid 53278] [client 52.138.46.222:1945] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "acrQ35IIspyQOAKrL3VXpAAAAJc"]
[Tue Mar 31 03:37:05.182305 2026] [:error] [pid 53197:tid 53228] [client 52.138.46.222:2044] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "acrQ4WdBhXmWgrUmTZweAQAAAEA"]
[Tue Mar 31 03:37:06.619542 2026] [:error] [pid 53197:tid 53248] [client 52.138.46.222:1830] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hehe.php"] [unique_id "acrQ4mdBhXmWgrUmTZweBgAAAFQ"]
[Tue Mar 31 03:37:08.042877 2026] [:error] [pid 53197:tid 53239] [client 52.138.46.222:1872] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hehe.php"] [unique_id "acrQ5GdBhXmWgrUmTZweCQAAAEs"]
[Tue Mar 31 03:37:09.471162 2026] [:error] [pid 53197:tid 53235] [client 52.138.46.222:1807] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hehe.php"] [unique_id "acrQ5WdBhXmWgrUmTZweDgAAAEc"]
[Tue Mar 31 03:37:10.887731 2026] [:error] [pid 53196:tid 53201] [client 52.138.46.222:1748] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hehe.php"] [unique_id "acrQ5rllYgzI9aNU9ZRXTgAAAAE"]
[Tue Mar 31 03:37:15.859627 2026] [:error] [pid 53287:tid 53290] [client 52.138.46.222:2017] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acrQ6wDMGOSLvCorfgsd5wAAAME"]
[Tue Mar 31 03:37:16.908731 2026] [:error] [pid 53287:tid 53311] [client 52.138.46.222:2017] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acrQ7ADMGOSLvCorfgsd6QAAANY"]
[Tue Mar 31 03:37:18.766246 2026] [:error] [pid 53287:tid 53289] [client 52.138.46.222:2046] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acrQ7gDMGOSLvCorfgsd9QAAAMA"]
[Tue Mar 31 03:37:21.518693 2026] [:error] [pid 53287:tid 53307] [client 52.138.46.222:1940] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tfm.php"] [unique_id "acrQ8QDMGOSLvCorfgseBAAAANI"]
[Tue Mar 31 03:37:22.945423 2026] [:error] [pid 53198:tid 53261] [client 52.138.46.222:1845] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ne2026.php"] [unique_id "acrQ8pIIspyQOAKrL3VX1gAAAIY"]
[Tue Mar 31 03:37:24.367352 2026] [:error] [pid 53287:tid 53307] [client 52.138.46.222:2028] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ne2026.php"] [unique_id "acrQ9ADMGOSLvCorfgseDQAAANI"]
[Tue Mar 31 03:37:25.798320 2026] [:error] [pid 53287:tid 53289] [client 52.138.46.222:1988] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ne2026.php"] [unique_id "acrQ9QDMGOSLvCorfgseFgAAAMA"]
[Tue Mar 31 03:37:27.233043 2026] [:error] [pid 53287:tid 53305] [client 52.138.46.222:2034] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ne2026.php"] [unique_id "acrQ9wDMGOSLvCorfgseHgAAANA"]
[Tue Mar 31 03:37:28.651334 2026] [:error] [pid 53198:tid 53255] [client 52.138.46.222:1908] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws73.php"] [unique_id "acrQ-JIIspyQOAKrL3VX4QAAAIA"]
[Tue Mar 31 03:37:30.106913 2026] [:error] [pid 53196:tid 53214] [client 52.138.46.222:2020] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws73.php"] [unique_id "acrQ-rllYgzI9aNU9ZRXcwAAAA4"]
[Tue Mar 31 03:37:31.528933 2026] [:error] [pid 53196:tid 53203] [client 52.138.46.222:2027] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws73.php"] [unique_id "acrQ-7llYgzI9aNU9ZRXeAAAAAM"]
[Tue Mar 31 03:37:32.949599 2026] [:error] [pid 53197:tid 53250] [client 52.138.46.222:1853] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws73.php"] [unique_id "acrQ_GdBhXmWgrUmTZwePwAAAFY"]
[Tue Mar 31 03:37:34.467840 2026] [:error] [pid 53196:tid 53200] [client 52.138.46.222:1957] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws84.php"] [unique_id "acrQ_rllYgzI9aNU9ZRXfgAAAAA"]
[Tue Mar 31 03:37:35.889964 2026] [:error] [pid 53198:tid 53273] [client 52.138.46.222:1913] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws84.php"] [unique_id "acrQ_5IIspyQOAKrL3VX9QAAAJI"]
[Tue Mar 31 03:37:37.310424 2026] [:error] [pid 53196:tid 53218] [client 52.138.46.222:1946] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws84.php"] [unique_id "acrRAbllYgzI9aNU9ZRXhwAAABI"]
[Tue Mar 31 03:37:38.732433 2026] [:error] [pid 53287:tid 53310] [client 52.138.46.222:2029] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws84.php"] [unique_id "acrRAgDMGOSLvCorfgseOQAAANU"]
[Tue Mar 31 03:37:40.156790 2026] [:error] [pid 53198:tid 53266] [client 52.138.46.222:1965] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/baixy.php"] [unique_id "acrRBJIIspyQOAKrL3VX_gAAAIs"]
[Tue Mar 31 03:37:41.602583 2026] [:error] [pid 53197:tid 53250] [client 52.138.46.222:1961] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/baixy.php"] [unique_id "acrRBWdBhXmWgrUmTZweVgAAAFY"]
[Tue Mar 31 03:37:43.028722 2026] [:error] [pid 53287:tid 53303] [client 52.138.46.222:2004] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/baixy.php"] [unique_id "acrRBwDMGOSLvCorfgseQAAAAM4"]
[Tue Mar 31 03:37:44.479788 2026] [:error] [pid 53196:tid 53215] [client 52.138.46.222:1925] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/baixy.php"] [unique_id "acrRCLllYgzI9aNU9ZRXmgAAAA8"]
[Tue Mar 31 03:37:45.907097 2026] [:error] [pid 53287:tid 53298] [client 52.138.46.222:1971] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "acrRCQDMGOSLvCorfgseUQAAAMk"]
[Tue Mar 31 03:37:47.330054 2026] [:error] [pid 53198:tid 53278] [client 52.138.46.222:1746] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "acrRC5IIspyQOAKrL3VYHQAAAJc"]
[Tue Mar 31 03:37:48.753600 2026] [:error] [pid 53287:tid 53289] [client 52.138.46.222:1905] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "acrRDADMGOSLvCorfgseVwAAAMA"]
[Tue Mar 31 03:37:50.179824 2026] [:error] [pid 53287:tid 53289] [client 52.138.46.222:1841] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "acrRDgDMGOSLvCorfgseYgAAAMA"]
[Tue Mar 31 03:37:51.645338 2026] [:error] [pid 53287:tid 53293] [client 52.138.46.222:1962] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "acrRDwDMGOSLvCorfgsebwAAAMQ"]
[Tue Mar 31 03:37:53.066751 2026] [:error] [pid 53196:tid 53222] [client 52.138.46.222:1918] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "acrREbllYgzI9aNU9ZRXwgAAABY"]
[Tue Mar 31 03:37:54.489099 2026] [:error] [pid 53287:tid 53301] [client 52.138.46.222:2024] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "acrREgDMGOSLvCorfgsegwAAAMw"]
[Tue Mar 31 03:37:55.909213 2026] [:error] [pid 53197:tid 53229] [client 52.138.46.222:1878] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "acrRE2dBhXmWgrUmTZwekQAAAEE"]
[Tue Mar 31 03:37:57.331093 2026] [:error] [pid 53196:tid 53206] [client 52.138.46.222:2033] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "acrRFbllYgzI9aNU9ZRX2AAAAAY"]
[Tue Mar 31 03:37:58.754364 2026] [:error] [pid 53197:tid 53228] [client 52.138.46.222:1990] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "acrRFmdBhXmWgrUmTZwenQAAAEA"]
[Tue Mar 31 03:38:00.184580 2026] [:error] [pid 53197:tid 53228] [client 52.138.46.222:1821] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "acrRGGdBhXmWgrUmTZweqAAAAEA"]
[Tue Mar 31 03:38:01.617414 2026] [:error] [pid 53198:tid 53264] [client 52.138.46.222:1992] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws77.php"] [unique_id "acrRGZIIspyQOAKrL3VYdAAAAIk"]
[Tue Mar 31 03:38:03.055898 2026] [:error] [pid 53198:tid 53261] [client 52.138.46.222:1888] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "acrRG5IIspyQOAKrL3VYfAAAAIY"]
[Tue Mar 31 03:38:04.492424 2026] [:error] [pid 53198:tid 53271] [client 52.138.46.222:1985] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "acrRHJIIspyQOAKrL3VYggAAAJA"]
[Tue Mar 31 03:38:05.919987 2026] [:error] [pid 53287:tid 53312] [client 52.138.46.222:1974] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "acrRHQDMGOSLvCorfgseqgAAANc"]
[Tue Mar 31 03:38:07.336456 2026] [:error] [pid 53287:tid 53292] [client 52.138.46.222:1894] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "acrRHwDMGOSLvCorfgsesQAAAMM"]
[Tue Mar 31 03:38:08.756503 2026] [:error] [pid 53197:tid 53236] [client 52.138.46.222:2035] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acrRIGdBhXmWgrUmTZwexAAAAEg"]
[Tue Mar 31 03:38:10.179749 2026] [:error] [pid 53198:tid 53269] [client 52.138.46.222:1885] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acrRIpIIspyQOAKrL3VYigAAAI4"]
[Tue Mar 31 03:38:11.609059 2026] [:error] [pid 53198:tid 53268] [client 52.138.46.222:2002] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acrRI5IIspyQOAKrL3VYjwAAAI0"]
[Tue Mar 31 03:38:13.023556 2026] [:error] [pid 53198:tid 53273] [client 52.138.46.222:1815] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5e0a.php"] [unique_id "acrRJZIIspyQOAKrL3VYkQAAAJI"]
[Tue Mar 31 03:38:14.445436 2026] [:error] [pid 53196:tid 53213] [client 52.138.46.222:1951] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acrRJrllYgzI9aNU9ZRX_gAAAA0"]
[Tue Mar 31 03:38:19.803765 2026] [:error] [pid 53287:tid 53291] [client 52.138.46.222:2000] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acrRKwDMGOSLvCorfgse6QAAAMI"]
[Tue Mar 31 03:38:21.646025 2026] [:error] [pid 53198:tid 53267] [client 52.138.46.222:2044] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acrRLZIIspyQOAKrL3VYngAAAIw"]
[Tue Mar 31 03:38:23.492277 2026] [:error] [pid 53197:tid 53234] [client 52.138.46.222:1924] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acrRL2dBhXmWgrUmTZwe4AAAAEY"]
[Tue Mar 31 03:38:25.328135 2026] [:error] [pid 53287:tid 53301] [client 52.138.46.222:2005] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/term.php"] [unique_id "acrRMQDMGOSLvCorfgse8QAAAMw"]
[Tue Mar 31 03:38:26.757652 2026] [:error] [pid 53287:tid 53303] [client 52.138.46.222:1930] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acrRMgDMGOSLvCorfgse9gAAAM4"]
[Tue Mar 31 03:38:28.186517 2026] [:error] [pid 53196:tid 53219] [client 52.138.46.222:2012] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acrRNLllYgzI9aNU9ZRYDgAAABM"]
[Tue Mar 31 03:38:29.617225 2026] [:error] [pid 53287:tid 53299] [client 52.138.46.222:1810] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acrRNQDMGOSLvCorfgse-wAAAMo"]
[Tue Mar 31 03:38:31.046771 2026] [:error] [pid 53197:tid 53230] [client 52.138.46.222:2032] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "acrRN2dBhXmWgrUmTZwe7AAAAEI"]
[Tue Mar 31 03:38:32.467820 2026] [:error] [pid 53197:tid 53236] [client 52.138.46.222:1817] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55b76.php"] [unique_id "acrROGdBhXmWgrUmTZwe9AAAAEg"]
[Tue Mar 31 03:38:33.908081 2026] [:error] [pid 53287:tid 53291] [client 52.138.46.222:1949] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55b76.php"] [unique_id "acrROQDMGOSLvCorfgsfCwAAAMI"]
[Tue Mar 31 03:38:35.341118 2026] [:error] [pid 53287:tid 53308] [client 52.138.46.222:1915] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55b76.php"] [unique_id "acrROwDMGOSLvCorfgsfEwAAANM"]
[Tue Mar 31 03:38:36.759800 2026] [:error] [pid 53198:tid 53256] [client 52.138.46.222:1991] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/55b76.php"] [unique_id "acrRPJIIspyQOAKrL3VYxQAAAIE"]
[Tue Mar 31 03:38:38.227791 2026] [:error] [pid 53287:tid 53291] [client 52.138.46.222:1835] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "acrRPgDMGOSLvCorfgsfJgAAAMI"]
[Tue Mar 31 03:38:39.653513 2026] [:error] [pid 53287:tid 53298] [client 52.138.46.222:1921] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "acrRPwDMGOSLvCorfgsfJwAAAMk"]
[Tue Mar 31 03:38:41.085936 2026] [:error] [pid 53287:tid 53291] [client 52.138.46.222:1859] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "acrRQQDMGOSLvCorfgsfMAAAAMI"]
[Tue Mar 31 03:38:42.518461 2026] [:error] [pid 53287:tid 53291] [client 52.138.46.222:2030] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "acrRQgDMGOSLvCorfgsfNgAAAMI"]
[Tue Mar 31 03:38:43.956843 2026] [:error] [pid 53287:tid 53313] [client 52.138.46.222:1924] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "acrRQwDMGOSLvCorfgsfQAAAANg"]
[Tue Mar 31 03:38:45.373897 2026] [:error] [pid 53198:tid 53269] [client 52.138.46.222:2014] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "acrRRZIIspyQOAKrL3VY1QAAAI4"]
[Tue Mar 31 03:38:46.812500 2026] [:error] [pid 53197:tid 53252] [client 52.138.46.222:1986] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "acrRRmdBhXmWgrUmTZwfDwAAAFg"]
[Tue Mar 31 03:38:48.230688 2026] [:error] [pid 53197:tid 53240] [client 52.138.46.222:2016] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp9.php"] [unique_id "acrRSGdBhXmWgrUmTZwfFgAAAEw"]
[Tue Mar 31 03:38:49.655790 2026] [:error] [pid 53287:tid 53301] [client 52.138.46.222:1993] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "acrRSQDMGOSLvCorfgsfUQAAAMw"]
[Tue Mar 31 03:38:51.079309 2026] [:error] [pid 53197:tid 53244] [client 52.138.46.222:1858] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "acrRS2dBhXmWgrUmTZwfHQAAAFA"]
[Tue Mar 31 03:38:52.510039 2026] [:error] [pid 53197:tid 53228] [client 52.138.46.222:1970] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "acrRTGdBhXmWgrUmTZwfIAAAAEA"]
[Tue Mar 31 03:38:53.936863 2026] [:error] [pid 53287:tid 53290] [client 52.138.46.222:1958] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "acrRTQDMGOSLvCorfgsfXwAAAME"]
[Tue Mar 31 03:38:55.376405 2026] [:error] [pid 53196:tid 53222] [client 52.138.46.222:2015] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "acrRT7llYgzI9aNU9ZRYMQAAABY"]
[Tue Mar 31 03:38:56.833073 2026] [:error] [pid 53197:tid 53241] [client 52.138.46.222:1995] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "acrRUGdBhXmWgrUmTZwfKwAAAE0"]
[Tue Mar 31 03:38:58.274767 2026] [:error] [pid 53198:tid 53263] [client 52.138.46.222:1833] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "acrRUpIIspyQOAKrL3VY4QAAAIg"]
[Tue Mar 31 03:38:59.708786 2026] [:error] [pid 53197:tid 53244] [client 52.138.46.222:1967] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "acrRU2dBhXmWgrUmTZwfNQAAAFA"]
[Tue Mar 31 03:39:01.139021 2026] [:error] [pid 53287:tid 53300] [client 52.138.46.222:2036] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acrRVQDMGOSLvCorfgsfjQAAAMs"]
[Tue Mar 31 03:39:02.565460 2026] [:error] [pid 53287:tid 53298] [client 52.138.46.222:2006] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acrRVgDMGOSLvCorfgsflgAAAMk"]
[Tue Mar 31 03:39:03.992203 2026] [:error] [pid 53198:tid 53278] [client 52.138.46.222:1892] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acrRV5IIspyQOAKrL3VY6gAAAJc"]
[Tue Mar 31 03:39:05.412896 2026] [:error] [pid 53287:tid 53291] [client 52.138.46.222:2007] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acrRWQDMGOSLvCorfgsfqQAAAMI"]
[Tue Mar 31 03:39:06.840516 2026] [:error] [pid 53287:tid 53292] [client 52.138.46.222:1866] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/file.php"] [unique_id "acrRWgDMGOSLvCorfgsftgAAAMM"]
[Tue Mar 31 03:39:08.339109 2026] [:error] [pid 53287:tid 53297] [client 52.138.46.222:1948] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/file.php"] [unique_id "acrRXADMGOSLvCorfgsfxQAAAMg"]
[Tue Mar 31 03:39:09.773699 2026] [:error] [pid 53196:tid 53219] [client 52.138.46.222:2031] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/file.php"] [unique_id "acrRXbllYgzI9aNU9ZRYPwAAABM"]
[Tue Mar 31 03:39:11.198065 2026] [:error] [pid 53287:tid 53293] [client 52.138.46.222:1873] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/file.php"] [unique_id "acrRXwDMGOSLvCorfgsf3gAAAMQ"]
[Tue Mar 31 03:39:12.619126 2026] [:error] [pid 53287:tid 53311] [client 52.138.46.222:2022] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acrRYADMGOSLvCorfgsf5wAAANY"]
[Tue Mar 31 03:39:14.045438 2026] [:error] [pid 53287:tid 53307] [client 52.138.46.222:1896] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acrRYgDMGOSLvCorfgsf9AAAANI"]
[Tue Mar 31 03:39:15.462606 2026] [:error] [pid 53287:tid 53293] [client 52.138.46.222:1903] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acrRYwDMGOSLvCorfgsf-wAAAMQ"]
[Tue Mar 31 03:39:20.772343 2026] [:error] [pid 53198:tid 53270] [client 52.138.46.222:1929] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acrRaJIIspyQOAKrL3VZFQAAAI8"]
[Tue Mar 31 03:39:22.616916 2026] [:error] [pid 53198:tid 53273] [client 52.138.46.222:1935] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acrRapIIspyQOAKrL3VZGwAAAJI"]
[Tue Mar 31 03:39:24.500432 2026] [:error] [pid 53198:tid 53263] [client 52.138.46.222:1925] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acrRbJIIspyQOAKrL3VZIQAAAIg"]
[Tue Mar 31 03:39:26.353649 2026] [:error] [pid 53287:tid 53304] [client 52.138.46.222:1972] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxw.php"] [unique_id "acrRbgDMGOSLvCorfgsgLAAAAM8"]
[Tue Mar 31 03:39:27.645520 2026] [:error] [pid 53196:tid 53220] [client 52.138.46.222:1861] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "acrRb7llYgzI9aNU9ZRYYQAAABQ"]
[Tue Mar 31 03:39:29.068666 2026] [:error] [pid 53197:tid 53233] [client 52.138.46.222:1920] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "acrRcWdBhXmWgrUmTZwfaQAAAEU"]
[Tue Mar 31 03:39:30.494287 2026] [:error] [pid 53198:tid 53267] [client 52.138.46.222:1865] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "acrRcpIIspyQOAKrL3VZLwAAAIw"]
[Tue Mar 31 03:39:32.002551 2026] [:error] [pid 53287:tid 53293] [client 52.138.46.222:1898] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "acrRdADMGOSLvCorfgsgQgAAAMQ"]
[Tue Mar 31 03:39:33.433288 2026] [:error] [pid 53196:tid 53224] [client 52.138.46.222:1969] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws87.php"] [unique_id "acrRdbllYgzI9aNU9ZRYagAAABg"]
[Tue Mar 31 03:39:49.939753 2026] [:error] [pid 18334:tid 18411] [client 52.138.46.222:1941] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lm15.php"] [unique_id "acrRhXqQrXLbk1cg3mj_0wAAAIU"]
[Tue Mar 31 03:39:51.433004 2026] [:error] [pid 18332:tid 18361] [client 52.138.46.222:2023] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lm15.php"] [unique_id "acrRh74KXr1F9raS5GRxBQAAAA0"]
[Tue Mar 31 03:39:52.854826 2026] [:error] [pid 18332:tid 18357] [client 52.138.46.222:2009] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lm15.php"] [unique_id "acrRiL4KXr1F9raS5GRxDAAAAAk"]
[Tue Mar 31 03:39:54.308945 2026] [:error] [pid 18439:tid 18472] [client 52.138.46.222:1998] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lm15.php"] [unique_id "acrRii-R9nOaA8Xqs7huLgAAANU"]
[Tue Mar 31 03:39:55.736478 2026] [:error] [pid 18439:tid 18454] [client 52.138.46.222:1883] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/green.php"] [unique_id "acrRiy-R9nOaA8Xqs7huNgAAAMM"]
[Tue Mar 31 03:39:57.169873 2026] [:error] [pid 18439:tid 18473] [client 52.138.46.222:2010] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/green.php"] [unique_id "acrRjS-R9nOaA8Xqs7huPgAAANY"]
[Tue Mar 31 03:39:58.607375 2026] [:error] [pid 18333:tid 18386] [client 52.138.46.222:1983] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/green.php"] [unique_id "acrRjkSx2C5hLR0-8dKztwAAAEc"]
[Tue Mar 31 03:40:00.031738 2026] [:error] [pid 18439:tid 18474] [client 52.138.46.222:1979] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/green.php"] [unique_id "acrRkC-R9nOaA8Xqs7huRAAAANc"]
[Tue Mar 31 03:40:01.460812 2026] [:error] [pid 18439:tid 18470] [client 52.138.46.222:1934] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/albin.php"] [unique_id "acrRkS-R9nOaA8Xqs7huSwAAANM"]
[Tue Mar 31 03:40:02.884161 2026] [:error] [pid 18439:tid 18473] [client 52.138.46.222:1814] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/albin.php"] [unique_id "acrRki-R9nOaA8Xqs7huUwAAANY"]
[Tue Mar 31 03:40:04.315271 2026] [:error] [pid 18439:tid 18469] [client 52.138.46.222:1799] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/albin.php"] [unique_id "acrRlC-R9nOaA8Xqs7huWQAAANI"]
[Tue Mar 31 03:40:05.743934 2026] [:error] [pid 18439:tid 18460] [client 52.138.46.222:2017] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/albin.php"] [unique_id "acrRlS-R9nOaA8Xqs7huYQAAAMk"]
[Tue Mar 31 03:40:07.185783 2026] [:error] [pid 18439:tid 18472] [client 52.138.46.222:1976] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "acrRly-R9nOaA8Xqs7huZQAAANU"]
[Tue Mar 31 03:40:08.615524 2026] [:error] [pid 18334:tid 18413] [client 52.138.46.222:1981] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "acrRmHqQrXLbk1cg3mj_9gAAAIc"]
[Tue Mar 31 03:40:10.033859 2026] [:error] [pid 18439:tid 18463] [client 52.138.46.222:1931] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "acrRmi-R9nOaA8Xqs7huawAAAMw"]
[Tue Mar 31 03:40:11.473823 2026] [:error] [pid 18439:tid 18471] [client 52.138.46.222:1968] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "acrRmy-R9nOaA8Xqs7hubgAAANQ"]
[Tue Mar 31 03:40:12.896649 2026] [:error] [pid 18439:tid 18458] [client 52.138.46.222:1977] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acrRnC-R9nOaA8Xqs7hudAAAAMc"]
[Tue Mar 31 03:40:15.545446 2026] [:error] [pid 18334:tid 18408] [client 52.138.46.222:1875] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acrRn3qQrXLbk1cg3mgABQAAAII"]
[Tue Mar 31 03:40:16.973323 2026] [:error] [pid 18333:tid 18399] [client 52.138.46.222:1996] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acrRoESx2C5hLR0-8dKzxgAAAFQ"]
[Tue Mar 31 03:40:22.272329 2026] [:error] [pid 18332:tid 18371] [client 52.138.46.222:1920] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acrRpr4KXr1F9raS5GRxTgAAABY"]
[Tue Mar 31 03:40:24.147266 2026] [:error] [pid 18439:tid 18461] [client 52.138.46.222:2036] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acrRqC-R9nOaA8Xqs7humgAAAMo"]
[Tue Mar 31 03:40:25.995076 2026] [:error] [pid 18439:tid 18460] [client 52.138.46.222:2019] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "acrRqS-R9nOaA8Xqs7huoAAAAMk"]
[Tue Mar 31 03:40:27.908567 2026] [:error] [pid 18439:tid 18452] [client 52.138.46.222:2021] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "acrRqy-R9nOaA8Xqs7huowAAAME"]
[Tue Mar 31 03:40:29.330482 2026] [:error] [pid 18334:tid 18410] [client 52.138.46.222:2041] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "acrRrXqQrXLbk1cg3mgAJwAAAIQ"]
[Tue Mar 31 03:40:30.770583 2026] [:error] [pid 18334:tid 18419] [client 52.138.46.222:2003] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "acrRrnqQrXLbk1cg3mgAMAAAAI0"]
[Tue Mar 31 03:40:33.626689 2026] [:error] [pid 18439:tid 18469] [client 52.138.46.222:1881] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "acrRsS-R9nOaA8Xqs7husQAAANI"]
[Tue Mar 31 03:40:35.066661 2026] [:error] [pid 18333:tid 18383] [client 52.138.46.222:1916] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ccs.php"] [unique_id "acrRs0Sx2C5hLR0-8dK0AwAAAEQ"]
[Tue Mar 31 03:40:36.507350 2026] [:error] [pid 18439:tid 18464] [client 52.138.46.222:2005] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ccs.php"] [unique_id "acrRtC-R9nOaA8Xqs7huwAAAAM0"]
[Tue Mar 31 03:40:37.948528 2026] [:error] [pid 18333:tid 18402] [client 52.138.46.222:1972] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ccs.php"] [unique_id "acrRtUSx2C5hLR0-8dK0CwAAAFc"]
[Tue Mar 31 03:40:39.391356 2026] [:error] [pid 18439:tid 18461] [client 52.138.46.222:1900] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ccs.php"] [unique_id "acrRty-R9nOaA8Xqs7hu0wAAAMo"]
[Tue Mar 31 03:40:40.819882 2026] [:error] [pid 18334:tid 18416] [client 52.138.46.222:1887] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clss.php"] [unique_id "acrRuHqQrXLbk1cg3mgARwAAAIo"]
[Tue Mar 31 03:40:42.289171 2026] [:error] [pid 18333:tid 18403] [client 52.138.46.222:1947] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clss.php"] [unique_id "acrRukSx2C5hLR0-8dK0DwAAAFg"]
[Tue Mar 31 03:40:43.711622 2026] [:error] [pid 18332:tid 18352] [client 52.138.46.222:2008] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clss.php"] [unique_id "acrRu74KXr1F9raS5GRxbAAAAAQ"]
[Tue Mar 31 03:40:45.129901 2026] [:error] [pid 18333:tid 18385] [client 52.138.46.222:1879] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clss.php"] [unique_id "acrRvUSx2C5hLR0-8dK0GAAAAEY"]
[Tue Mar 31 03:40:46.560202 2026] [:error] [pid 18333:tid 18402] [client 52.138.46.222:2045] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acrRvkSx2C5hLR0-8dK0JgAAAFc"]
[Tue Mar 31 03:40:47.993156 2026] [:error] [pid 18332:tid 18358] [client 52.138.46.222:1868] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acrRv74KXr1F9raS5GRxeQAAAAo"]
[Tue Mar 31 03:40:49.448108 2026] [:error] [pid 18439:tid 18461] [client 52.138.46.222:1932] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acrRwS-R9nOaA8Xqs7hvBAAAAMo"]
[Tue Mar 31 03:40:50.876580 2026] [:error] [pid 18334:tid 18407] [client 52.138.46.222:1922] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acrRwnqQrXLbk1cg3mgAVgAAAIE"]
[Tue Mar 31 03:40:52.308765 2026] [:error] [pid 18439:tid 18456] [client 52.138.46.222:1959] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acrRxC-R9nOaA8Xqs7hvEwAAAMU"]
[Tue Mar 31 03:40:53.732509 2026] [:error] [pid 18332:tid 18357] [client 52.138.46.222:1801] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acrRxb4KXr1F9raS5GRxkwAAAAk"]
[Tue Mar 31 03:40:55.247853 2026] [:error] [pid 18333:tid 18389] [client 52.138.46.222:1899] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acrRx0Sx2C5hLR0-8dK0SAAAAEo"]
[Tue Mar 31 03:40:56.669876 2026] [:error] [pid 18333:tid 18400] [client 52.138.46.222:2038] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acrRyESx2C5hLR0-8dK0TAAAAFU"]
[Tue Mar 31 03:40:58.099124 2026] [:error] [pid 18439:tid 18453] [client 52.138.46.222:1910] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "acrRyi-R9nOaA8Xqs7hvJAAAAMI"]
[Tue Mar 31 03:40:59.530498 2026] [:error] [pid 18332:tid 18353] [client 52.138.46.222:1803] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "acrRy74KXr1F9raS5GRxmwAAAAU"]
[Tue Mar 31 03:41:00.959700 2026] [:error] [pid 18439:tid 18474] [client 52.138.46.222:1940] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "acrRzC-R9nOaA8Xqs7hvMAAAANc"]
[Tue Mar 31 03:41:02.379824 2026] [:error] [pid 18334:tid 18419] [client 52.138.46.222:1863] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "acrRznqQrXLbk1cg3mgAZwAAAI0"]
[Tue Mar 31 03:41:03.799034 2026] [:error] [pid 18332:tid 18352] [client 52.138.46.222:1923] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acrRz74KXr1F9raS5GRxqwAAAAQ"]
[Tue Mar 31 03:41:05.243336 2026] [:error] [pid 18332:tid 18372] [client 52.138.46.222:1943] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acrR0b4KXr1F9raS5GRxsAAAABc"]
[Tue Mar 31 03:41:06.678946 2026] [:error] [pid 18439:tid 18467] [client 52.138.46.222:2040] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acrR0i-R9nOaA8Xqs7hvVgAAANA"]
[Tue Mar 31 03:41:08.115912 2026] [:error] [pid 18333:tid 18390] [client 52.138.46.222:1950] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acrR1ESx2C5hLR0-8dK0gQAAAEs"]
[Tue Mar 31 03:41:09.540788 2026] [:error] [pid 18439:tid 18455] [client 52.138.46.222:1895] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "acrR1S-R9nOaA8Xqs7hvbgAAAMQ"]
[Tue Mar 31 03:41:10.971873 2026] [:error] [pid 18439:tid 18474] [client 52.138.46.222:1953] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "acrR1i-R9nOaA8Xqs7hvggAAANc"]
[Tue Mar 31 03:41:12.402910 2026] [:error] [pid 18332:tid 18360] [client 52.138.46.222:1856] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "acrR2L4KXr1F9raS5GRxtgAAAAw"]
[Tue Mar 31 03:41:13.838011 2026] [:error] [pid 18334:tid 18409] [client 52.138.46.222:1825] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ajax.php"] [unique_id "acrR2XqQrXLbk1cg3mgAkAAAAIM"]
[Tue Mar 31 03:41:15.269194 2026] [:error] [pid 18439:tid 18461] [client 52.138.46.222:1831] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrR2y-R9nOaA8Xqs7hvuAAAAMo"]
[Tue Mar 31 03:41:16.693546 2026] [:error] [pid 18439:tid 18471] [client 52.138.46.222:1869] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrR3C-R9nOaA8Xqs7hvygAAANQ"]
[Tue Mar 31 03:41:18.117128 2026] [:error] [pid 18439:tid 18459] [client 52.138.46.222:1876] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrR3i-R9nOaA8Xqs7hv1gAAAMg"]
[Tue Mar 31 03:41:23.636443 2026] [:error] [pid 18334:tid 18426] [client 52.138.46.222:1963] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrR43qQrXLbk1cg3mgArgAAAJQ"]
[Tue Mar 31 03:41:25.484162 2026] [:error] [pid 18333:tid 18389] [client 52.138.46.222:2001] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrR5USx2C5hLR0-8dK0oQAAAEo"]
[Tue Mar 31 03:41:27.336368 2026] [:error] [pid 18333:tid 18388] [client 52.138.46.222:2018] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrR50Sx2C5hLR0-8dK0pQAAAEk"]
[Tue Mar 31 03:41:30.280864 2026] [:error] [pid 18333:tid 18394] [client 52.138.46.222:1867] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acrR6kSx2C5hLR0-8dK0qQAAAE8"]
[Tue Mar 31 03:41:31.723917 2026] [:error] [pid 18439:tid 18463] [client 52.138.46.222:1904] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acrR6y-R9nOaA8Xqs7hwJwAAAMw"]
[Tue Mar 31 03:41:33.156820 2026] [:error] [pid 18439:tid 18458] [client 52.138.46.222:1944] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acrR7S-R9nOaA8Xqs7hwMQAAAMc"]
[Tue Mar 31 03:41:34.586531 2026] [:error] [pid 18334:tid 18421] [client 52.138.46.222:2043] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acrR7nqQrXLbk1cg3mgA7AAAAI8"]
[Tue Mar 31 03:41:36.015872 2026] [:error] [pid 18333:tid 18387] [client 52.138.46.222:1927] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "acrR8ESx2C5hLR0-8dK0twAAAEg"]
[Tue Mar 31 03:41:37.445851 2026] [:error] [pid 18333:tid 18381] [client 52.138.46.222:1902] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "acrR8USx2C5hLR0-8dK0wwAAAEI"]
[Tue Mar 31 03:41:38.868669 2026] [:error] [pid 18332:tid 18368] [client 52.138.46.222:1938] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "acrR8r4KXr1F9raS5GRx4QAAABQ"]
[Tue Mar 31 03:41:40.321799 2026] [:error] [pid 18332:tid 18373] [client 52.138.46.222:1755] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "acrR9L4KXr1F9raS5GRx7wAAABg"]
[Tue Mar 31 03:41:41.747700 2026] [:error] [pid 18333:tid 18394] [client 52.138.46.222:2026] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ah25.php"] [unique_id "acrR9USx2C5hLR0-8dK0zgAAAE8"]
[Tue Mar 31 03:41:43.164643 2026] [:error] [pid 18439:tid 18471] [client 52.138.46.222:1872] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ah25.php"] [unique_id "acrR9y-R9nOaA8Xqs7hwawAAANQ"]
[Tue Mar 31 03:41:44.596057 2026] [:error] [pid 18334:tid 18407] [client 52.138.46.222:1966] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ah25.php"] [unique_id "acrR-HqQrXLbk1cg3mgBDAAAAIE"]
[Tue Mar 31 03:41:46.038688 2026] [:error] [pid 18334:tid 18417] [client 52.138.46.222:1929] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ah25.php"] [unique_id "acrR-nqQrXLbk1cg3mgBFAAAAIs"]
[Tue Mar 31 03:41:47.470177 2026] [:error] [pid 18439:tid 18458] [client 52.138.46.222:1808] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "acrR-y-R9nOaA8Xqs7hwdwAAAMc"]
[Tue Mar 31 03:41:48.903493 2026] [:error] [pid 18332:tid 18354] [client 52.138.46.222:1926] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "acrR_L4KXr1F9raS5GRyBgAAAAY"]
[Tue Mar 31 03:41:50.342014 2026] [:error] [pid 18439:tid 18454] [client 52.138.46.222:1999] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "acrR_i-R9nOaA8Xqs7hwhwAAAMM"]
[Tue Mar 31 03:41:51.780074 2026] [:error] [pid 18439:tid 18459] [client 52.138.46.222:1795] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws60.php"] [unique_id "acrR_y-R9nOaA8Xqs7hwlgAAAMg"]
[Tue Mar 31 03:41:53.208000 2026] [:error] [pid 18332:tid 18360] [client 52.138.46.222:1988] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "acrSAb4KXr1F9raS5GRyEwAAAAw"]
[Tue Mar 31 03:41:54.632692 2026] [:error] [pid 18332:tid 18357] [client 52.138.46.222:1980] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "acrSAr4KXr1F9raS5GRyFQAAAAk"]
[Tue Mar 31 03:41:56.057548 2026] [:error] [pid 18332:tid 18356] [client 52.138.46.222:1933] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "acrSBL4KXr1F9raS5GRyFwAAAAg"]
[Tue Mar 31 03:41:57.501152 2026] [:error] [pid 18439:tid 18463] [client 52.138.46.222:2044] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "acrSBS-R9nOaA8Xqs7hwuQAAAMw"]
[Tue Mar 31 03:41:58.925459 2026] [:error] [pid 18439:tid 18464] [client 52.138.46.222:2042] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/buc.php"] [unique_id "acrSBi-R9nOaA8Xqs7hwwwAAAM0"]
[Tue Mar 31 03:42:00.347009 2026] [:error] [pid 18332:tid 18348] [client 52.138.46.222:1957] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/buc.php"] [unique_id "acrSCL4KXr1F9raS5GRyHAAAAAA"]
[Tue Mar 31 03:42:01.769006 2026] [:error] [pid 18439:tid 18461] [client 52.138.46.222:2027] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/buc.php"] [unique_id "acrSCS-R9nOaA8Xqs7hw0AAAAMo"]
[Tue Mar 31 03:42:03.210710 2026] [:error] [pid 18439:tid 18458] [client 52.138.46.222:1800] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/buc.php"] [unique_id "acrSCy-R9nOaA8Xqs7hw1QAAAMc"]
[Tue Mar 31 03:42:04.626968 2026] [:error] [pid 18334:tid 18428] [client 52.138.46.222:1834] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "acrSDHqQrXLbk1cg3mgBOwAAAJY"]
[Tue Mar 31 03:42:06.056800 2026] [:error] [pid 18334:tid 18406] [client 52.138.46.222:1822] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "acrSDnqQrXLbk1cg3mgBPAAAAIA"]
[Tue Mar 31 03:42:07.496783 2026] [:error] [pid 18334:tid 18411] [client 52.138.46.222:1805] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "acrSD3qQrXLbk1cg3mgBQQAAAIU"]
[Tue Mar 31 03:42:08.929476 2026] [:error] [pid 18333:tid 18398] [client 52.138.46.222:1882] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfile.php"] [unique_id "acrSEESx2C5hLR0-8dK08QAAAFM"]
[Tue Mar 31 03:42:10.376875 2026] [:error] [pid 18439:tid 18451] [client 52.138.46.222:2047] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "acrSEi-R9nOaA8Xqs7hw8gAAAMA"]
[Tue Mar 31 03:42:11.804713 2026] [:error] [pid 18334:tid 18423] [client 52.138.46.222:2033] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "acrSE3qQrXLbk1cg3mgBTQAAAJE"]
[Tue Mar 31 03:42:13.262620 2026] [:error] [pid 18332:tid 18363] [client 52.138.46.222:2034] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "acrSFb4KXr1F9raS5GRyOwAAAA8"]
[Tue Mar 31 03:42:14.696414 2026] [:error] [pid 18334:tid 18410] [client 52.138.46.222:1965] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "acrSFnqQrXLbk1cg3mgBYQAAAIQ"]
[Tue Mar 31 03:42:16.117361 2026] [:error] [pid 18334:tid 18418] [client 52.138.46.222:1911] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/okxh.php"] [unique_id "acrSGHqQrXLbk1cg3mgBawAAAIw"]
[Tue Mar 31 03:42:17.558695 2026] [:error] [pid 18334:tid 18417] [client 52.138.46.222:2000] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/okxh.php"] [unique_id "acrSGXqQrXLbk1cg3mgBdgAAAIs"]
[Tue Mar 31 03:42:18.980932 2026] [:error] [pid 18439:tid 18458] [client 52.138.46.222:1912] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/okxh.php"] [unique_id "acrSGi-R9nOaA8Xqs7hxGgAAAMc"]
[Tue Mar 31 03:42:20.399539 2026] [:error] [pid 18334:tid 18429] [client 52.138.46.222:1951] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/okxh.php"] [unique_id "acrSHHqQrXLbk1cg3mgBgwAAAJc"]
[Tue Mar 31 03:42:25.477545 2026] [:error] [pid 18333:tid 18381] [client 52.138.46.222:2035] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "acrSIUSx2C5hLR0-8dK1EwAAAEI"]
[Tue Mar 31 03:42:27.320483 2026] [:error] [pid 18334:tid 18407] [client 52.138.46.222:2007] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "acrSI3qQrXLbk1cg3mgBkgAAAIE"]
[Tue Mar 31 03:42:29.172410 2026] [:error] [pid 18439:tid 18470] [client 52.138.46.222:1991] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "acrSJS-R9nOaA8Xqs7hxOwAAANM"]
[Tue Mar 31 03:42:31.028276 2026] [:error] [pid 18439:tid 18451] [client 52.138.46.222:2012] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lib.php"] [unique_id "acrSJy-R9nOaA8Xqs7hxRgAAAMA"]
[Tue Mar 31 03:42:32.477879 2026] [:error] [pid 18439:tid 18458] [client 52.138.46.222:1909] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-104.php"] [unique_id "acrSKC-R9nOaA8Xqs7hxUgAAAMc"]
[Tue Mar 31 03:42:33.899098 2026] [:error] [pid 18439:tid 18473] [client 52.138.46.222:1956] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-104.php"] [unique_id "acrSKS-R9nOaA8Xqs7hxWgAAANY"]
[Tue Mar 31 03:42:35.319820 2026] [:error] [pid 18332:tid 18361] [client 52.138.46.222:1936] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-104.php"] [unique_id "acrSK74KXr1F9raS5GRyZgAAAA0"]
[Tue Mar 31 03:42:36.741964 2026] [:error] [pid 18333:tid 18394] [client 52.138.46.222:1994] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-104.php"] [unique_id "acrSLESx2C5hLR0-8dK1IgAAAE8"]
[Tue Mar 31 03:42:38.170683 2026] [:error] [pid 18439:tid 18458] [client 52.138.46.222:2018] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "acrSLi-R9nOaA8Xqs7hxagAAAMc"]
[Tue Mar 31 03:42:39.584896 2026] [:error] [pid 18332:tid 18360] [client 52.138.46.222:1939] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "acrSL74KXr1F9raS5GRyagAAAAw"]
[Tue Mar 31 03:42:41.010746 2026] [:error] [pid 18439:tid 18466] [client 52.138.46.222:2019] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "acrSMS-R9nOaA8Xqs7hxfwAAAM8"]
[Tue Mar 31 03:42:42.431193 2026] [:error] [pid 18332:tid 18367] [client 52.138.46.222:1937] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "acrSMr4KXr1F9raS5GRybgAAABM"]
[Tue Mar 31 03:42:43.854349 2026] [:error] [pid 18333:tid 18403] [client 52.138.46.222:1751] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acrSM0Sx2C5hLR0-8dK1MgAAAFg"]
[Tue Mar 31 03:42:45.293024 2026] [:error] [pid 18332:tid 18363] [client 52.138.46.222:1884] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acrSNb4KXr1F9raS5GRydAAAAA8"]
[Tue Mar 31 03:42:46.713671 2026] [:error] [pid 18332:tid 18369] [client 52.138.46.222:1846] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acrSNr4KXr1F9raS5GRyfAAAABU"]
[Tue Mar 31 03:42:48.137291 2026] [:error] [pid 18334:tid 18417] [client 52.138.46.222:2007] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "acrSOHqQrXLbk1cg3mgBtAAAAIs"]
[Tue Mar 31 03:42:49.559109 2026] [:error] [pid 18333:tid 18389] [client 52.138.46.222:1982] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "acrSOUSx2C5hLR0-8dK1SAAAAEo"]
[Tue Mar 31 03:42:50.997607 2026] [:error] [pid 18333:tid 18402] [client 52.138.46.222:2020] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "acrSOkSx2C5hLR0-8dK1SgAAAFc"]
[Tue Mar 31 03:42:52.434903 2026] [:error] [pid 18333:tid 18387] [client 52.138.46.222:1860] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "acrSPESx2C5hLR0-8dK1UQAAAEg"]
[Tue Mar 31 03:42:53.858143 2026] [:error] [pid 18439:tid 18468] [client 52.138.46.222:1798] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/as.php"] [unique_id "acrSPS-R9nOaA8Xqs7hxmgAAANE"]
[Tue Mar 31 03:42:55.297200 2026] [:error] [pid 18333:tid 18402] [client 52.138.46.222:1928] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Cap.php"] [unique_id "acrSP0Sx2C5hLR0-8dK1XAAAAFc"]
[Tue Mar 31 03:42:56.752148 2026] [:error] [pid 18439:tid 18471] [client 52.138.46.222:1880] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Cap.php"] [unique_id "acrSQC-R9nOaA8Xqs7hxogAAANQ"]
[Tue Mar 31 03:42:58.290435 2026] [:error] [pid 18439:tid 18463] [client 52.138.46.222:1992] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Cap.php"] [unique_id "acrSQi-R9nOaA8Xqs7hxqAAAAMw"]
[Tue Mar 31 03:42:59.740666 2026] [:error] [pid 18439:tid 18468] [client 52.138.46.222:1908] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Cap.php"] [unique_id "acrSQy-R9nOaA8Xqs7hxrwAAANE"]
[Tue Mar 31 03:43:01.159260 2026] [:error] [pid 18439:tid 18463] [client 52.138.46.222:1993] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xfun.php"] [unique_id "acrSRS-R9nOaA8Xqs7hxtAAAAMw"]
[Tue Mar 31 03:43:02.603917 2026] [:error] [pid 18333:tid 18393] [client 52.138.46.222:2030] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xfun.php"] [unique_id "acrSRkSx2C5hLR0-8dK1YwAAAE4"]
[Tue Mar 31 03:43:04.019059 2026] [:error] [pid 18334:tid 18428] [client 52.138.46.222:2004] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xfun.php"] [unique_id "acrSSHqQrXLbk1cg3mgB9wAAAJY"]
[Tue Mar 31 03:43:05.459177 2026] [:error] [pid 18334:tid 18427] [client 52.138.46.222:1921] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xfun.php"] [unique_id "acrSSXqQrXLbk1cg3mgB_AAAAJU"]
[Tue Mar 31 03:43:06.887763 2026] [:error] [pid 18334:tid 18424] [client 52.138.46.222:1942] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bjfl.php"] [unique_id "acrSSnqQrXLbk1cg3mgB_gAAAJI"]
[Tue Mar 31 03:43:08.309925 2026] [:error] [pid 18332:tid 18369] [client 52.138.46.222:2013] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bjfl.php"] [unique_id "acrSTL4KXr1F9raS5GRyyAAAABU"]
[Tue Mar 31 03:43:09.739868 2026] [:error] [pid 18334:tid 18415] [client 52.138.46.222:2016] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bjfl.php"] [unique_id "acrSTXqQrXLbk1cg3mgCCQAAAIk"]
[Tue Mar 31 03:43:11.156562 2026] [:error] [pid 18439:tid 18455] [client 52.138.46.222:1958] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bjfl.php"] [unique_id "acrSTy-R9nOaA8Xqs7hxywAAAMQ"]
[Tue Mar 31 03:43:12.585815 2026] [:error] [pid 18439:tid 18469] [client 52.138.46.222:1997] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "acrSUC-R9nOaA8Xqs7hxzwAAANI"]
[Tue Mar 31 03:43:14.019657 2026] [:error] [pid 18333:tid 18399] [client 52.138.46.222:1955] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "acrSUkSx2C5hLR0-8dK1fgAAAFQ"]
[Tue Mar 31 03:43:15.435565 2026] [:error] [pid 18334:tid 18424] [client 52.138.46.222:1878] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "acrSU3qQrXLbk1cg3mgCGQAAAJI"]
[Tue Mar 31 03:43:16.851787 2026] [:error] [pid 18334:tid 18413] [client 52.138.46.222:1877] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/155.php"] [unique_id "acrSVHqQrXLbk1cg3mgCHwAAAIc"]
[Tue Mar 31 03:43:18.285904 2026] [:error] [pid 18334:tid 18429] [client 52.138.46.222:1930] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rzki.php"] [unique_id "acrSVnqQrXLbk1cg3mgCKQAAAJc"]
[Tue Mar 31 03:43:19.719436 2026] [:error] [pid 18439:tid 18467] [client 52.138.46.222:1973] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rzki.php"] [unique_id "acrSVy-R9nOaA8Xqs7hx5AAAANA"]
[Tue Mar 31 03:43:21.136299 2026] [:error] [pid 18439:tid 18465] [client 52.138.46.222:2031] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rzki.php"] [unique_id "acrSWS-R9nOaA8Xqs7hx7gAAAM4"]
[Tue Mar 31 03:43:22.558339 2026] [:error] [pid 18439:tid 18457] [client 52.138.46.222:1963] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rzki.php"] [unique_id "acrSWi-R9nOaA8Xqs7hx9wAAAMY"]
[Tue Mar 31 03:43:27.880740 2026] [:error] [pid 18334:tid 18410] [client 52.138.46.222:1930] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acrSX3qQrXLbk1cg3mgCSQAAAIQ"]
[Tue Mar 31 03:43:29.742357 2026] [:error] [pid 18334:tid 18428] [client 52.138.46.222:1928] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acrSYXqQrXLbk1cg3mgCTQAAAJY"]
[Tue Mar 31 03:43:31.629672 2026] [:error] [pid 18333:tid 18380] [client 52.138.46.222:1984] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acrSY0Sx2C5hLR0-8dK1kwAAAEE"]
[Tue Mar 31 03:43:33.486123 2026] [:error] [pid 18439:tid 18457] [client 52.138.46.222:2002] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acrSZS-R9nOaA8Xqs7hyLwAAAMY"]
[Tue Mar 31 03:43:34.917853 2026] [:error] [pid 18333:tid 18379] [client 52.138.46.222:1792] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "acrSZkSx2C5hLR0-8dK1nwAAAEA"]
[Tue Mar 31 03:43:36.339633 2026] [:error] [pid 18333:tid 18390] [client 52.138.46.222:1920] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "acrSaESx2C5hLR0-8dK1owAAAEs"]
[Tue Mar 31 03:43:37.764219 2026] [:error] [pid 18439:tid 18466] [client 52.138.46.222:1956] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "acrSaS-R9nOaA8Xqs7hyPQAAAM8"]
[Tue Mar 31 03:43:40.589165 2026] [:error] [pid 18439:tid 18459] [client 52.138.46.222:1828] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "acrSbC-R9nOaA8Xqs7hySwAAAMg"]
[Tue Mar 31 03:43:42.020749 2026] [:error] [pid 18439:tid 18463] [client 52.138.46.222:1962] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "acrSbi-R9nOaA8Xqs7hyVgAAAMw"]
[Tue Mar 31 03:43:43.451897 2026] [:error] [pid 18439:tid 18468] [client 52.138.46.222:1946] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "acrSby-R9nOaA8Xqs7hyYQAAANE"]
[Tue Mar 31 03:43:44.874299 2026] [:error] [pid 18334:tid 18408] [client 52.138.46.222:1952] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "acrScHqQrXLbk1cg3mgCYgAAAII"]
[Tue Mar 31 03:43:46.306140 2026] [:error] [pid 18332:tid 18348] [client 52.138.46.222:1903] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "acrScr4KXr1F9raS5GRy9AAAAAA"]
[Tue Mar 31 03:43:47.738698 2026] [:error] [pid 18333:tid 18399] [client 52.138.46.222:1819] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ww.php"] [unique_id "acrSc0Sx2C5hLR0-8dK1twAAAFQ"]
[Tue Mar 31 03:43:49.157342 2026] [:error] [pid 18334:tid 18428] [client 52.138.46.222:1812] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ww.php"] [unique_id "acrSdXqQrXLbk1cg3mgCawAAAJY"]
[Tue Mar 31 03:43:50.579581 2026] [:error] [pid 18439:tid 18452] [client 52.138.46.222:1766] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ww.php"] [unique_id "acrSdi-R9nOaA8Xqs7hyewAAAME"]
[Tue Mar 31 03:43:52.001356 2026] [:error] [pid 18334:tid 18406] [client 52.138.46.222:2025] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ww.php"] [unique_id "acrSeHqQrXLbk1cg3mgCeAAAAIA"]
[Tue Mar 31 03:43:53.429082 2026] [:error] [pid 18332:tid 18352] [client 52.138.46.222:2036] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vanda.php"] [unique_id "acrSeb4KXr1F9raS5GRzAAAAAAQ"]
[Tue Mar 31 03:43:54.853168 2026] [:error] [pid 18334:tid 18412] [client 52.138.46.222:1989] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vanda.php"] [unique_id "acrSenqQrXLbk1cg3mgCiQAAAIY"]
[Tue Mar 31 03:43:56.272487 2026] [:error] [pid 18332:tid 18365] [client 52.138.46.222:1925] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vanda.php"] [unique_id "acrSfL4KXr1F9raS5GRzCQAAABE"]
[Tue Mar 31 03:43:57.721684 2026] [:error] [pid 18439:tid 18475] [client 52.138.46.222:1954] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vanda.php"] [unique_id "acrSfS-R9nOaA8Xqs7hyngAAANg"]
[Tue Mar 31 03:43:59.167873 2026] [:error] [pid 18439:tid 18469] [client 52.138.46.222:1949] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acrSfy-R9nOaA8Xqs7hyrwAAANI"]
[Tue Mar 31 03:44:00.597598 2026] [:error] [pid 18332:tid 18351] [client 52.138.46.222:2011] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acrSgL4KXr1F9raS5GRzFQAAAAM"]
[Tue Mar 31 03:44:02.071285 2026] [:error] [pid 18439:tid 18474] [client 52.138.46.222:1891] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acrSgi-R9nOaA8Xqs7hyxwAAANc"]
[Tue Mar 31 03:44:03.495698 2026] [:error] [pid 18439:tid 18454] [client 52.138.46.222:1889] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "acrSgy-R9nOaA8Xqs7hy1wAAAMM"]
[Tue Mar 31 03:44:04.929027 2026] [:error] [pid 18439:tid 18464] [client 52.138.46.222:1874] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "acrShC-R9nOaA8Xqs7hy5gAAAM0"]
[Tue Mar 31 03:44:06.351978 2026] [:error] [pid 18332:tid 18361] [client 52.138.46.222:1986] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "acrShr4KXr1F9raS5GRzJgAAAA0"]
[Tue Mar 31 03:44:07.776219 2026] [:error] [pid 18334:tid 18414] [client 52.138.46.222:1941] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "acrSh3qQrXLbk1cg3mgCtwAAAIg"]
[Tue Mar 31 03:44:09.202776 2026] [:error] [pid 18439:tid 18472] [client 52.138.46.222:1738] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "acrSiS-R9nOaA8Xqs7hzAQAAANU"]
[Tue Mar 31 03:44:10.634980 2026] [:error] [pid 18333:tid 18387] [client 52.138.46.222:1870] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "acrSikSx2C5hLR0-8dK12QAAAEg"]
[Tue Mar 31 03:44:12.058734 2026] [:error] [pid 18439:tid 18472] [client 52.138.46.222:1838] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "acrSjC-R9nOaA8Xqs7hzDwAAANU"]
[Tue Mar 31 03:44:13.523648 2026] [:error] [pid 18439:tid 18459] [client 52.138.46.222:2001] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "acrSjS-R9nOaA8Xqs7hzHAAAAMg"]
[Tue Mar 31 03:44:14.949190 2026] [:error] [pid 18334:tid 18415] [client 52.138.46.222:2037] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/t.php"] [unique_id "acrSjnqQrXLbk1cg3mgCxwAAAIk"]
[Tue Mar 31 03:44:16.391410 2026] [:error] [pid 18439:tid 18469] [client 52.138.46.222:1975] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "acrSkC-R9nOaA8Xqs7hzMAAAANI"]
[Tue Mar 31 03:44:17.810801 2026] [:error] [pid 18439:tid 18466] [client 52.138.46.222:1858] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "acrSkS-R9nOaA8Xqs7hzPAAAAM8"]
[Tue Mar 31 03:44:19.232717 2026] [:error] [pid 18439:tid 18454] [client 52.138.46.222:1862] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "acrSky-R9nOaA8Xqs7hzRQAAAMM"]
[Tue Mar 31 03:44:20.688615 2026] [:error] [pid 18439:tid 18466] [client 52.138.46.222:1885] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "acrSlC-R9nOaA8Xqs7hzVwAAAM8"]
[Tue Mar 31 03:44:22.109653 2026] [:error] [pid 18439:tid 18459] [client 52.138.46.222:1967] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acrSli-R9nOaA8Xqs7hzbAAAAMg"]
[Tue Mar 31 03:44:23.546127 2026] [:error] [pid 18439:tid 18453] [client 52.138.46.222:1901] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acrSly-R9nOaA8Xqs7hzfQAAAMI"]
[Tue Mar 31 03:44:24.967941 2026] [:error] [pid 18332:tid 18364] [client 52.138.46.222:1968] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acrSmL4KXr1F9raS5GRzOwAAABA"]
[Tue Mar 31 03:44:29.768090 2026] [:error] [pid 18334:tid 18412] [client 52.138.46.222:2005] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acrSnXqQrXLbk1cg3mgC5AAAAIY"]
[Tue Mar 31 03:44:31.608352 2026] [:error] [pid 18332:tid 18352] [client 52.138.46.222:1921] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acrSn74KXr1F9raS5GRzUwAAAAQ"]
[Tue Mar 31 03:44:33.463313 2026] [:error] [pid 18439:tid 18456] [client 52.138.46.222:1997] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acrSoS-R9nOaA8Xqs7hzwAAAAMU"]
[Tue Mar 31 03:44:35.312405 2026] [:error] [pid 18333:tid 18387] [client 52.138.46.222:1932] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "acrSo0Sx2C5hLR0-8dK2RwAAAEg"]
[Tue Mar 31 03:44:36.746234 2026] [:error] [pid 18334:tid 18412] [client 52.138.46.222:2024] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa21.php"] [unique_id "acrSpHqQrXLbk1cg3mgC7wAAAIY"]
[Tue Mar 31 03:44:38.206442 2026] [:error] [pid 18332:tid 18352] [client 52.138.46.222:1864] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa21.php"] [unique_id "acrSpr4KXr1F9raS5GRzXwAAAAQ"]
[Tue Mar 31 03:44:39.633807 2026] [:error] [pid 18334:tid 18428] [client 52.138.46.222:2017] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa21.php"] [unique_id "acrSp3qQrXLbk1cg3mgC-QAAAJY"]
[Tue Mar 31 03:44:41.082003 2026] [:error] [pid 18439:tid 18460] [client 52.138.46.222:1871] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa21.php"] [unique_id "acrSqS-R9nOaA8Xqs7hz5gAAAMk"]
[Tue Mar 31 03:44:42.510730 2026] [:error] [pid 18333:tid 18393] [client 52.138.46.222:2014] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acrSqkSx2C5hLR0-8dK2XAAAAE4"]
[Tue Mar 31 03:44:43.932722 2026] [:error] [pid 18334:tid 18408] [client 52.138.46.222:1852] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acrSq3qQrXLbk1cg3mgDCwAAAII"]
[Tue Mar 31 03:44:45.370474 2026] [:error] [pid 18333:tid 18384] [client 52.138.46.222:1996] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acrSrUSx2C5hLR0-8dK2YAAAAEU"]
[Tue Mar 31 03:44:46.804679 2026] [:error] [pid 18439:tid 18462] [client 52.138.46.222:2032] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gifclass.php"] [unique_id "acrSri-R9nOaA8Xqs7h0FgAAAMs"]
[Tue Mar 31 03:44:48.230987 2026] [:error] [pid 18332:tid 18371] [client 52.138.46.222:2006] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "acrSsL4KXr1F9raS5GRzbAAAABY"]
[Tue Mar 31 03:44:49.672038 2026] [:error] [pid 18439:tid 18459] [client 52.138.46.222:1970] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "acrSsS-R9nOaA8Xqs7h0IgAAAMg"]
[Tue Mar 31 03:44:51.113163 2026] [:error] [pid 18439:tid 18467] [client 52.138.46.222:1840] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "acrSsy-R9nOaA8Xqs7h0MQAAANA"]
[Tue Mar 31 03:44:52.531765 2026] [:error] [pid 18333:tid 18399] [client 52.138.46.222:1883] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "acrStESx2C5hLR0-8dK2fgAAAFQ"]
[Tue Mar 31 03:44:54.021356 2026] [:error] [pid 18439:tid 18458] [client 52.138.46.222:1797] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acrSti-R9nOaA8Xqs7h0PAAAAMc"]
[Tue Mar 31 03:44:55.440600 2026] [:error] [pid 18332:tid 18366] [client 52.138.46.222:2021] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acrSt74KXr1F9raS5GRzewAAABI"]
[Tue Mar 31 03:44:56.966699 2026] [:error] [pid 18332:tid 18359] [client 52.138.46.222:1977] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acrSuL4KXr1F9raS5GRzgQAAAAs"]
[Tue Mar 31 03:44:58.403401 2026] [:error] [pid 18334:tid 18425] [client 52.138.46.222:1897] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acrSunqQrXLbk1cg3mgDLQAAAJM"]
[Tue Mar 31 03:44:59.820407 2026] [:error] [pid 18332:tid 18351] [client 52.138.46.222:2041] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrSu74KXr1F9raS5GRzkQAAAAM"]
[Tue Mar 31 03:45:01.245648 2026] [:error] [pid 18333:tid 18386] [client 52.138.46.222:1817] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrSvUSx2C5hLR0-8dK2jwAAAEc"]
[Tue Mar 31 03:45:02.694690 2026] [:error] [pid 18334:tid 18417] [client 52.138.46.222:1990] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrSvnqQrXLbk1cg3mgDPgAAAIs"]
[Tue Mar 31 03:45:03.772419 2026] [:error] [pid 18334:tid 18415] [client 51.120.81.94:65415] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acrSv3qQrXLbk1cg3mgDRwAAAIk"]
[Tue Mar 31 03:45:04.116130 2026] [:error] [pid 18439:tid 18470] [client 52.138.46.222:2008] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrSwC-R9nOaA8Xqs7h0UAAAANM"]
[Tue Mar 31 03:45:04.367197 2026] [:error] [pid 18332:tid 18358] [client 51.120.81.94:11704] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acrSwL4KXr1F9raS5GRzpgAAAAo"]
[Tue Mar 31 03:45:04.932963 2026] [:error] [pid 18439:tid 18474] [client 51.120.81.94:11661] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acrSwC-R9nOaA8Xqs7h0VwAAANc"]
[Tue Mar 31 03:45:05.538613 2026] [:error] [pid 18332:tid 18348] [client 52.138.46.222:1998] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "acrSwb4KXr1F9raS5GRzsAAAAAA"]
[Tue Mar 31 03:45:05.668770 2026] [:error] [pid 18332:tid 18369] [client 51.120.81.94:42977] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "acrSwb4KXr1F9raS5GRzsgAAABU"]
[Tue Mar 31 03:45:06.347565 2026] [:error] [pid 18439:tid 18469] [client 51.120.81.94:65431] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrSwi-R9nOaA8Xqs7h0ZQAAANI"]
[Tue Mar 31 03:45:06.960304 2026] [:error] [pid 18333:tid 18399] [client 52.138.46.222:1809] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "acrSwkSx2C5hLR0-8dK2owAAAFQ"]
[Tue Mar 31 03:45:07.059823 2026] [:error] [pid 18334:tid 18423] [client 51.120.81.94:11678] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrSw3qQrXLbk1cg3mgDWwAAAJE"]
[Tue Mar 31 03:45:07.643981 2026] [:error] [pid 18332:tid 18365] [client 51.120.81.94:20075] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrSw74KXr1F9raS5GRzwAAAABE"]
[Tue Mar 31 03:45:08.229321 2026] [:error] [pid 18439:tid 18468] [client 51.120.81.94:20088] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrSxC-R9nOaA8Xqs7h0cAAAANE"]
[Tue Mar 31 03:45:08.386973 2026] [:error] [pid 18439:tid 18470] [client 52.138.46.222:2035] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "acrSxC-R9nOaA8Xqs7h0cgAAANM"]
[Tue Mar 31 03:45:08.756277 2026] [:error] [pid 18333:tid 18397] [client 51.120.81.94:42985] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "acrSxESx2C5hLR0-8dK2rQAAAFI"]
[Tue Mar 31 03:45:09.390419 2026] [:error] [pid 18333:tid 18389] [client 51.120.81.94:11700] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "acrSxUSx2C5hLR0-8dK2sAAAAEo"]
[Tue Mar 31 03:45:09.806937 2026] [:error] [pid 18333:tid 18390] [client 52.138.46.222:1932] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "acrSxUSx2C5hLR0-8dK2sgAAAEs"]
[Tue Mar 31 03:45:09.911639 2026] [:error] [pid 18333:tid 18382] [client 51.120.81.94:11666] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "acrSxUSx2C5hLR0-8dK2swAAAEM"]
[Tue Mar 31 03:45:10.444808 2026] [:error] [pid 18439:tid 18468] [client 51.120.81.94:20060] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "acrSxi-R9nOaA8Xqs7h0fwAAANE"]
[Tue Mar 31 03:45:11.031027 2026] [:error] [pid 18439:tid 18460] [client 51.120.81.94:11671] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acrSxy-R9nOaA8Xqs7h0gwAAAMk"]
[Tue Mar 31 03:45:11.239306 2026] [:error] [pid 18333:tid 18387] [client 52.138.46.222:1888] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/csv.php"] [unique_id "acrSx0Sx2C5hLR0-8dK2tgAAAEg"]
[Tue Mar 31 03:45:11.609811 2026] [:error] [pid 18332:tid 18373] [client 51.120.81.94:11685] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acrSx74KXr1F9raS5GRzyQAAABg"]
[Tue Mar 31 03:45:12.152042 2026] [:error] [pid 18332:tid 18372] [client 51.120.81.94:11702] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acrSyL4KXr1F9raS5GRzzQAAABc"]
[Tue Mar 31 03:45:12.668710 2026] [:error] [pid 18332:tid 18367] [client 52.138.46.222:1979] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/csv.php"] [unique_id "acrSyL4KXr1F9raS5GRzzgAAABM"]
[Tue Mar 31 03:45:12.707962 2026] [:error] [pid 18334:tid 18421] [client 51.120.81.94:42954] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "acrSyHqQrXLbk1cg3mgDbwAAAI8"]
[Tue Mar 31 03:45:13.245842 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:11674] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acrSyS-R9nOaA8Xqs7h0kAAAAMM"]
[Tue Mar 31 03:45:13.776060 2026] [:error] [pid 18332:tid 18366] [client 51.120.81.94:11677] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acrSyb4KXr1F9raS5GRzzwAAABI"]
[Tue Mar 31 03:45:14.108934 2026] [:error] [pid 18439:tid 18465] [client 52.138.46.222:1995] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/csv.php"] [unique_id "acrSyi-R9nOaA8Xqs7h0lgAAAM4"]
[Tue Mar 31 03:45:14.328354 2026] [:error] [pid 18333:tid 18388] [client 51.120.81.94:42998] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acrSykSx2C5hLR0-8dK2vgAAAEk"]
[Tue Mar 31 03:45:14.947607 2026] [:error] [pid 18334:tid 18409] [client 51.120.81.94:11673] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "acrSynqQrXLbk1cg3mgDdgAAAIM"]
[Tue Mar 31 03:45:15.470729 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:65451] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "acrSyy-R9nOaA8Xqs7h0nQAAAME"]
[Tue Mar 31 03:45:15.545405 2026] [:error] [pid 18439:tid 18453] [client 52.138.46.222:1940] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/csv.php"] [unique_id "acrSyy-R9nOaA8Xqs7h0ngAAAMI"]
[Tue Mar 31 03:45:16.003647 2026] [:error] [pid 18439:tid 18459] [client 51.120.81.94:11706] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "acrSzC-R9nOaA8Xqs7h0ogAAAMg"]
[Tue Mar 31 03:45:16.608585 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:11697] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "acrSzC-R9nOaA8Xqs7h0qAAAAMI"]
[Tue Mar 31 03:45:16.964754 2026] [:error] [pid 18439:tid 18463] [client 52.138.46.222:1959] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/varb.php"] [unique_id "acrSzC-R9nOaA8Xqs7h0sAAAAMw"]
[Tue Mar 31 03:45:17.229967 2026] [:error] [pid 18439:tid 18472] [client 51.120.81.94:65418] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "acrSzS-R9nOaA8Xqs7h0sgAAANU"]
[Tue Mar 31 03:45:17.856761 2026] [:error] [pid 18439:tid 18458] [client 51.120.81.94:11664] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "acrSzS-R9nOaA8Xqs7h0tQAAAMc"]
[Tue Mar 31 03:45:18.389640 2026] [:error] [pid 18439:tid 18464] [client 52.138.46.222:1806] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/varb.php"] [unique_id "acrSzi-R9nOaA8Xqs7h0twAAAM0"]
[Tue Mar 31 03:45:18.475533 2026] [:error] [pid 18439:tid 18459] [client 51.120.81.94:11679] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "acrSzi-R9nOaA8Xqs7h0uAAAAMg"]
[Tue Mar 31 03:45:19.058607 2026] [:error] [pid 18439:tid 18460] [client 51.120.81.94:43002] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "acrSzy-R9nOaA8Xqs7h0vAAAAMk"]
[Tue Mar 31 03:45:19.686643 2026] [:error] [pid 18439:tid 18458] [client 51.120.81.94:11670] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "acrSzy-R9nOaA8Xqs7h0vwAAAMc"]
[Tue Mar 31 03:45:19.815670 2026] [:error] [pid 18334:tid 18409] [client 52.138.46.222:1934] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/varb.php"] [unique_id "acrSz3qQrXLbk1cg3mgDgAAAAIM"]
[Tue Mar 31 03:45:20.249900 2026] [:error] [pid 18439:tid 18467] [client 51.120.81.94:20033] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "acrS0C-R9nOaA8Xqs7h0wwAAANA"]
[Tue Mar 31 03:45:20.818629 2026] [:error] [pid 18334:tid 18430] [client 51.120.81.94:65442] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "acrS0HqQrXLbk1cg3mgDhwAAAJg"]
[Tue Mar 31 03:45:21.260991 2026] [:error] [pid 18439:tid 18474] [client 52.138.46.222:1824] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/varb.php"] [unique_id "acrS0S-R9nOaA8Xqs7h0yAAAANc"]
[Tue Mar 31 03:45:21.373228 2026] [:error] [pid 18439:tid 18473] [client 51.120.81.94:20063] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "acrS0S-R9nOaA8Xqs7h0ygAAANY"]
[Tue Mar 31 03:45:21.909102 2026] [:error] [pid 18439:tid 18466] [client 51.120.81.94:65435] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "acrS0S-R9nOaA8Xqs7h00AAAAM8"]
[Tue Mar 31 03:45:22.461699 2026] [:error] [pid 18439:tid 18471] [client 51.120.81.94:42964] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "acrS0i-R9nOaA8Xqs7h01AAAANQ"]
[Tue Mar 31 03:45:22.689399 2026] [:error] [pid 18439:tid 18454] [client 52.138.46.222:1865] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8573.php"] [unique_id "acrS0i-R9nOaA8Xqs7h01wAAAMM"]
[Tue Mar 31 03:45:23.078204 2026] [:error] [pid 18333:tid 18381] [client 51.120.81.94:42983] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "acrS00Sx2C5hLR0-8dK2zwAAAEI"]
[Tue Mar 31 03:45:23.682954 2026] [:error] [pid 18439:tid 18461] [client 51.120.81.94:20034] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "acrS0y-R9nOaA8Xqs7h03gAAAMo"]
[Tue Mar 31 03:45:24.110421 2026] [:error] [pid 18334:tid 18409] [client 52.138.46.222:1801] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8573.php"] [unique_id "acrS1HqQrXLbk1cg3mgDiwAAAIM"]
[Tue Mar 31 03:45:24.264303 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:11708] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "acrS1C-R9nOaA8Xqs7h04QAAAMI"]
[Tue Mar 31 03:45:24.791927 2026] [:error] [pid 18439:tid 18466] [client 51.120.81.94:20061] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "acrS1C-R9nOaA8Xqs7h06gAAAM8"]
[Tue Mar 31 03:45:25.394357 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:64636] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "acrS1S-R9nOaA8Xqs7h07wAAAMU"]
[Tue Mar 31 03:45:25.533916 2026] [:error] [pid 18439:tid 18473] [client 52.138.46.222:1804] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8573.php"] [unique_id "acrS1S-R9nOaA8Xqs7h08AAAANY"]
[Tue Mar 31 03:45:25.932355 2026] [:error] [pid 18439:tid 18460] [client 51.120.81.94:42945] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "acrS1S-R9nOaA8Xqs7h09QAAAMk"]
[Tue Mar 31 03:45:26.511594 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:42982] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "acrS1i-R9nOaA8Xqs7h0-gAAAMM"]
[Tue Mar 31 03:45:26.969695 2026] [:error] [pid 18439:tid 18460] [client 52.138.46.222:2029] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8573.php"] [unique_id "acrS1i-R9nOaA8Xqs7h0_gAAAMk"]
[Tue Mar 31 03:45:27.036777 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:11668] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acrS1y-R9nOaA8Xqs7h1AAAAAMI"]
[Tue Mar 31 03:45:27.609161 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:65417] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acrS1y-R9nOaA8Xqs7h1AgAAAMU"]
[Tue Mar 31 03:45:28.184215 2026] [:error] [pid 18439:tid 18467] [client 51.120.81.94:42995] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acrS2C-R9nOaA8Xqs7h1BQAAANA"]
[Tue Mar 31 03:45:28.391376 2026] [:error] [pid 18333:tid 18403] [client 52.138.46.222:1915] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abc.php"] [unique_id "acrS2ESx2C5hLR0-8dK20QAAAFg"]
[Tue Mar 31 03:45:28.915801 2026] [:error] [pid 18334:tid 18410] [client 51.120.81.94:11659] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "acrS2HqQrXLbk1cg3mgDjgAAAIQ"]
[Tue Mar 31 03:45:31.935529 2026] [:error] [pid 18439:tid 18469] [client 51.120.81.94:65460] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acrS2y-R9nOaA8Xqs7h1FgAAANI"]
[Tue Mar 31 03:45:37.853558 2026] [:error] [pid 18439:tid 18457] [client 51.120.81.94:42951] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acrS4S-R9nOaA8Xqs7h1KQAAAMY"]
[Tue Mar 31 03:45:38.399203 2026] [:error] [pid 18332:tid 18361] [client 51.120.81.94:20089] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acrS4r4KXr1F9raS5GRz3wAAAA0"]
[Tue Mar 31 03:45:38.930667 2026] [:error] [pid 18332:tid 18348] [client 51.120.81.94:65449] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "acrS4r4KXr1F9raS5GRz4AAAAAA"]
[Tue Mar 31 03:45:39.473914 2026] [:error] [pid 18439:tid 18471] [client 51.120.81.94:65445] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "acrS4y-R9nOaA8Xqs7h1LwAAANQ"]
[Tue Mar 31 03:45:40.041522 2026] [:error] [pid 18334:tid 18408] [client 51.120.81.94:65457] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "acrS5HqQrXLbk1cg3mgDnwAAAII"]
[Tue Mar 31 03:45:40.595749 2026] [:error] [pid 18333:tid 18402] [client 51.120.81.94:65443] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "acrS5ESx2C5hLR0-8dK26AAAAFc"]
[Tue Mar 31 03:45:41.121578 2026] [:error] [pid 18333:tid 18392] [client 51.120.81.94:42991] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "acrS5USx2C5hLR0-8dK26wAAAE0"]
[Tue Mar 31 03:45:41.725675 2026] [:error] [pid 18333:tid 18401] [client 51.120.81.94:20086] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acrS5USx2C5hLR0-8dK28AAAAFY"]
[Tue Mar 31 03:45:42.362307 2026] [:error] [pid 18332:tid 18351] [client 51.120.81.94:65409] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acrS5r4KXr1F9raS5GRz5wAAAAM"]
[Tue Mar 31 03:45:42.965103 2026] [:error] [pid 18333:tid 18402] [client 51.120.81.94:11672] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acrS5kSx2C5hLR0-8dK29gAAAFc"]
[Tue Mar 31 03:45:43.566507 2026] [:error] [pid 18332:tid 18350] [client 51.120.81.94:65413] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acrS574KXr1F9raS5GRz7QAAAAI"]
[Tue Mar 31 03:45:44.101782 2026] [:error] [pid 18332:tid 18365] [client 51.120.81.94:64648] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "acrS6L4KXr1F9raS5GRz7wAAABE"]
[Tue Mar 31 03:45:44.726508 2026] [:error] [pid 18334:tid 18422] [client 51.120.81.94:65438] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "acrS6HqQrXLbk1cg3mgDogAAAJA"]
[Tue Mar 31 03:45:45.248162 2026] [:error] [pid 18439:tid 18467] [client 51.120.81.94:65360] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "acrS6S-R9nOaA8Xqs7h1NAAAANA"]
[Tue Mar 31 03:45:45.810032 2026] [:error] [pid 18333:tid 18382] [client 51.120.81.94:65346] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "acrS6USx2C5hLR0-8dK2-wAAAEM"]
[Tue Mar 31 03:45:46.364797 2026] [:error] [pid 18332:tid 18371] [client 51.120.81.94:20077] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acrS6r4KXr1F9raS5GRz9QAAABY"]
[Tue Mar 31 03:45:46.930398 2026] [:error] [pid 18333:tid 18385] [client 51.120.81.94:65446] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acrS6kSx2C5hLR0-8dK2_wAAAEY"]
[Tue Mar 31 03:45:47.554505 2026] [:error] [pid 18439:tid 18473] [client 51.120.81.94:65461] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acrS6y-R9nOaA8Xqs7h1OQAAANY"]
[Tue Mar 31 03:45:48.111858 2026] [:error] [pid 18333:tid 18398] [client 51.120.81.94:65462] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "acrS7ESx2C5hLR0-8dK3BAAAAFM"]
[Tue Mar 31 03:45:48.733250 2026] [:error] [pid 18334:tid 18415] [client 51.120.81.94:42953] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acrS7HqQrXLbk1cg3mgDpQAAAIk"]
[Tue Mar 31 03:45:49.374151 2026] [:error] [pid 18439:tid 18465] [client 51.120.81.94:65429] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acrS7S-R9nOaA8Xqs7h1QQAAAM4"]
[Tue Mar 31 03:45:49.917747 2026] [:error] [pid 18439:tid 18463] [client 51.120.81.94:20046] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acrS7S-R9nOaA8Xqs7h1QwAAAMw"]
[Tue Mar 31 03:45:50.461184 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:65428] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "acrS7i-R9nOaA8Xqs7h1RQAAAME"]
[Tue Mar 31 03:45:51.037570 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:20042] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "acrS70Sx2C5hLR0-8dK3EQAAAFE"]
[Tue Mar 31 03:45:51.623707 2026] [:error] [pid 18332:tid 18348] [client 51.120.81.94:42992] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "acrS774KXr1F9raS5GRz-gAAAAA"]
[Tue Mar 31 03:45:52.158383 2026] [:error] [pid 18334:tid 18409] [client 51.120.81.94:11676] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "acrS8HqQrXLbk1cg3mgDqQAAAIM"]
[Tue Mar 31 03:45:52.688461 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:65421] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "acrS8C-R9nOaA8Xqs7h1TAAAAMM"]
[Tue Mar 31 03:45:53.245670 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:65427] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "acrS8S-R9nOaA8Xqs7h1TQAAAMI"]
[Tue Mar 31 03:45:53.822069 2026] [:error] [pid 18333:tid 18391] [client 51.120.81.94:20032] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "acrS8USx2C5hLR0-8dK3GgAAAEw"]
[Tue Mar 31 03:45:54.369823 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:11652] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "acrS8i-R9nOaA8Xqs7h1UgAAAMQ"]
[Tue Mar 31 03:45:54.913538 2026] [:error] [pid 18439:tid 18469] [client 51.120.81.94:64690] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/56c53.php"] [unique_id "acrS8i-R9nOaA8Xqs7h1VwAAANI"]
[Tue Mar 31 03:45:55.488657 2026] [:error] [pid 18334:tid 18425] [client 51.120.81.94:11710] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acrS83qQrXLbk1cg3mgDqwAAAJM"]
[Tue Mar 31 03:45:56.019013 2026] [:error] [pid 18439:tid 18463] [client 51.120.81.94:43004] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acrS9C-R9nOaA8Xqs7h1WgAAAMw"]
[Tue Mar 31 03:45:56.543669 2026] [:error] [pid 18439:tid 18469] [client 51.120.81.94:65437] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acrS9C-R9nOaA8Xqs7h1XAAAANI"]
[Tue Mar 31 03:45:57.071678 2026] [:error] [pid 18334:tid 18406] [client 51.120.81.94:11653] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "acrS9XqQrXLbk1cg3mgDrgAAAIA"]
[Tue Mar 31 03:45:57.650434 2026] [:error] [pid 18332:tid 18356] [client 51.120.81.94:64136] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acrS9b4KXr1F9raS5GR0AQAAAAg"]
[Tue Mar 31 03:45:58.177836 2026] [:error] [pid 18333:tid 18387] [client 51.120.81.94:65433] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acrS9kSx2C5hLR0-8dK3JAAAAEg"]
[Tue Mar 31 03:45:58.786361 2026] [:error] [pid 18439:tid 18466] [client 51.120.81.94:65363] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acrS9i-R9nOaA8Xqs7h1aAAAAM8"]
[Tue Mar 31 03:45:59.344544 2026] [:error] [pid 18439:tid 18470] [client 51.120.81.94:64184] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/grsiuk.php"] [unique_id "acrS9y-R9nOaA8Xqs7h1agAAANM"]
[Tue Mar 31 03:45:59.884549 2026] [:error] [pid 18333:tid 18381] [client 51.120.81.94:20041] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acrS90Sx2C5hLR0-8dK3LAAAAEI"]
[Tue Mar 31 03:46:00.418152 2026] [:error] [pid 18439:tid 18475] [client 51.120.81.94:65414] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acrS-C-R9nOaA8Xqs7h1cQAAANg"]
[Tue Mar 31 03:46:00.978932 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:65355] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "acrS-C-R9nOaA8Xqs7h1cwAAAMM"]
[Tue Mar 31 03:46:47.752721 2026] [:error] [pid 18439:tid 18462] [client 51.120.81.94:65410] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acrTJy-R9nOaA8Xqs7h17gAAAMs"]
[Tue Mar 31 03:46:48.399387 2026] [:error] [pid 18332:tid 18348] [client 51.120.81.94:20076] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acrTKL4KXr1F9raS5GR0bgAAAAA"]
[Tue Mar 31 03:46:49.002977 2026] [:error] [pid 18439:tid 18472] [client 51.120.81.94:42978] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acrTKS-R9nOaA8Xqs7h1-AAAANU"]
[Tue Mar 31 03:46:49.544166 2026] [:error] [pid 18334:tid 18421] [client 51.120.81.94:65434] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "acrTKXqQrXLbk1cg3mgEVgAAAI8"]
[Tue Mar 31 03:46:50.113519 2026] [:error] [pid 18439:tid 18462] [client 51.120.81.94:64668] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acrTKi-R9nOaA8Xqs7h1_AAAAMs"]
[Tue Mar 31 03:46:50.719148 2026] [:error] [pid 18332:tid 18357] [client 51.120.81.94:65344] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acrTKr4KXr1F9raS5GR0bwAAAAk"]
[Tue Mar 31 03:46:51.287925 2026] [:error] [pid 18333:tid 18382] [client 51.120.81.94:65466] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acrTK0Sx2C5hLR0-8dK3jQAAAEM"]
[Tue Mar 31 03:46:51.836917 2026] [:error] [pid 18439:tid 18460] [client 51.120.81.94:20051] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acrTKy-R9nOaA8Xqs7h2CAAAAMk"]
[Tue Mar 31 03:46:52.367656 2026] [:error] [pid 18334:tid 18426] [client 51.120.81.94:64602] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acrTLHqQrXLbk1cg3mgEYgAAAJQ"]
[Tue Mar 31 03:46:52.903411 2026] [:error] [pid 18334:tid 18421] [client 51.120.81.94:20065] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acrTLHqQrXLbk1cg3mgEZgAAAI8"]
[Tue Mar 31 03:46:53.529853 2026] [:error] [pid 18334:tid 18422] [client 51.120.81.94:11696] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acrTLXqQrXLbk1cg3mgEaQAAAJA"]
[Tue Mar 31 03:46:54.171086 2026] [:error] [pid 18334:tid 18416] [client 51.120.81.94:20052] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "acrTLnqQrXLbk1cg3mgEbQAAAIo"]
[Tue Mar 31 03:46:54.783128 2026] [:error] [pid 18332:tid 18356] [client 51.120.81.94:20055] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acrTLr4KXr1F9raS5GR0cwAAAAg"]
[Tue Mar 31 03:46:55.388810 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:64665] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acrTL0Sx2C5hLR0-8dK3lQAAAFE"]
[Tue Mar 31 03:46:55.926695 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:64657] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acrTLy-R9nOaA8Xqs7h2GQAAAMU"]
[Tue Mar 31 03:46:56.459422 2026] [:error] [pid 18333:tid 18393] [client 51.120.81.94:20095] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "acrTMESx2C5hLR0-8dK3mQAAAE4"]
[Tue Mar 31 03:46:57.018698 2026] [:error] [pid 18333:tid 18401] [client 51.120.81.94:65380] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acrTMUSx2C5hLR0-8dK3mgAAAFY"]
[Tue Mar 31 03:46:57.596058 2026] [:error] [pid 18439:tid 18462] [client 51.120.81.94:20087] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acrTMS-R9nOaA8Xqs7h2IwAAAMs"]
[Tue Mar 31 03:46:58.153290 2026] [:error] [pid 18333:tid 18387] [client 51.120.81.94:65464] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acrTMkSx2C5hLR0-8dK3pAAAAEg"]
[Tue Mar 31 03:46:58.752745 2026] [:error] [pid 18334:tid 18412] [client 51.120.81.94:20037] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "acrTMnqQrXLbk1cg3mgEeQAAAIY"]
[Tue Mar 31 03:46:59.389545 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:20066] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "acrTMy-R9nOaA8Xqs7h2KQAAAME"]
[Tue Mar 31 03:46:59.943482 2026] [:error] [pid 18334:tid 18421] [client 51.120.81.94:64132] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "acrTM3qQrXLbk1cg3mgEgAAAAI8"]
[Tue Mar 31 03:47:00.490802 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:20073] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "acrTNC-R9nOaA8Xqs7h2MgAAAMM"]
[Tue Mar 31 03:47:01.075563 2026] [:error] [pid 18439:tid 18470] [client 51.120.81.94:64679] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "acrTNS-R9nOaA8Xqs7h2OAAAANM"]
[Tue Mar 31 03:47:01.647351 2026] [:error] [pid 18439:tid 18459] [client 51.120.81.94:64580] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "acrTNS-R9nOaA8Xqs7h2QAAAAMg"]
[Tue Mar 31 03:47:02.169019 2026] [:error] [pid 18334:tid 18423] [client 51.120.81.94:63616] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "acrTNnqQrXLbk1cg3mgEhQAAAJE"]
[Tue Mar 31 03:47:02.697756 2026] [:error] [pid 18333:tid 18393] [client 51.120.81.94:42987] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "acrTNkSx2C5hLR0-8dK3rwAAAE4"]
[Tue Mar 31 03:47:03.232137 2026] [:error] [pid 18334:tid 18417] [client 51.120.81.94:20090] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "acrTN3qQrXLbk1cg3mgEiQAAAIs"]
[Tue Mar 31 03:47:03.826560 2026] [:error] [pid 18439:tid 18466] [client 51.120.81.94:42981] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "acrTNy-R9nOaA8Xqs7h2SAAAAM8"]
[Tue Mar 31 03:47:04.424712 2026] [:error] [pid 18334:tid 18427] [client 51.120.81.94:20062] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "acrTOHqQrXLbk1cg3mgEiwAAAJU"]
[Tue Mar 31 03:47:04.949157 2026] [:error] [pid 18334:tid 18406] [client 51.120.81.94:20067] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "acrTOHqQrXLbk1cg3mgEkAAAAIA"]
[Tue Mar 31 03:47:05.479121 2026] [:error] [pid 18439:tid 18463] [client 51.120.81.94:64615] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "acrTOS-R9nOaA8Xqs7h2TQAAAMw"]
[Tue Mar 31 03:47:06.049867 2026] [:error] [pid 18439:tid 18460] [client 51.120.81.94:65463] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws75.php"] [unique_id "acrTOi-R9nOaA8Xqs7h2TwAAAMk"]
[Tue Mar 31 03:47:06.585687 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:42957] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws75.php"] [unique_id "acrTOi-R9nOaA8Xqs7h2UQAAAMU"]
[Tue Mar 31 03:47:07.196849 2026] [:error] [pid 18439:tid 18467] [client 51.120.81.94:64577] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws75.php"] [unique_id "acrTOy-R9nOaA8Xqs7h2UwAAANA"]
[Tue Mar 31 03:47:07.763892 2026] [:error] [pid 18439:tid 18469] [client 51.120.81.94:11656] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws75.php"] [unique_id "acrTOy-R9nOaA8Xqs7h2VwAAANI"]
[Tue Mar 31 03:47:08.288581 2026] [:error] [pid 18439:tid 18464] [client 51.120.81.94:20050] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acrTPC-R9nOaA8Xqs7h2XAAAAM0"]
[Tue Mar 31 03:47:08.878556 2026] [:error] [pid 18439:tid 18466] [client 51.120.81.94:64689] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acrTPC-R9nOaA8Xqs7h2YAAAAM8"]
[Tue Mar 31 03:47:09.454368 2026] [:error] [pid 18332:tid 18366] [client 51.120.81.94:11680] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acrTPb4KXr1F9raS5GR0gAAAABI"]
[Tue Mar 31 03:47:10.034067 2026] [:error] [pid 18334:tid 18410] [client 51.120.81.94:65453] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "acrTPnqQrXLbk1cg3mgEnQAAAIQ"]
[Tue Mar 31 03:47:10.583294 2026] [:error] [pid 18332:tid 18353] [client 51.120.81.94:65450] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "acrTPr4KXr1F9raS5GR0hQAAAAU"]
[Tue Mar 31 03:47:11.125120 2026] [:error] [pid 18334:tid 18413] [client 51.120.81.94:65365] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "acrTP3qQrXLbk1cg3mgEpgAAAIc"]
[Tue Mar 31 03:47:11.804248 2026] [:error] [pid 18334:tid 18418] [client 51.120.81.94:64611] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "acrTP3qQrXLbk1cg3mgEqAAAAIw"]
[Tue Mar 31 03:47:12.408783 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:20068] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "acrTQC-R9nOaA8Xqs7h2awAAAMM"]
[Tue Mar 31 03:47:12.961991 2026] [:error] [pid 18439:tid 18461] [client 51.120.81.94:11657] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "acrTQC-R9nOaA8Xqs7h2bQAAAMo"]
[Tue Mar 31 03:47:13.490872 2026] [:error] [pid 18332:tid 18368] [client 51.120.81.94:42973] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "acrTQb4KXr1F9raS5GR0hwAAABQ"]
[Tue Mar 31 03:47:14.082559 2026] [:error] [pid 18332:tid 18367] [client 51.120.81.94:64134] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "acrTQr4KXr1F9raS5GR0iAAAABM"]
[Tue Mar 31 03:47:14.622774 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:65369] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "acrTQi-R9nOaA8Xqs7h2cgAAAMQ"]
[Tue Mar 31 03:47:15.276110 2026] [:error] [pid 18334:tid 18407] [client 51.120.81.94:11663] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "acrTQ3qQrXLbk1cg3mgEugAAAIE"]
[Tue Mar 31 03:47:15.882189 2026] [:error] [pid 18334:tid 18427] [client 51.120.81.94:11694] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "acrTQ3qQrXLbk1cg3mgEuwAAAJU"]
[Tue Mar 31 03:47:16.506732 2026] [:error] [pid 18334:tid 18428] [client 51.120.81.94:20058] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "acrTRHqQrXLbk1cg3mgEvAAAAJY"]
[Tue Mar 31 03:47:17.064482 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:65420] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "acrTRS-R9nOaA8Xqs7h2fgAAAMQ"]
[Tue Mar 31 03:47:17.602740 2026] [:error] [pid 18332:tid 18349] [client 51.120.81.94:11665] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acrTRb4KXr1F9raS5GR0jgAAAAE"]
[Tue Mar 31 03:47:18.151870 2026] [:error] [pid 18334:tid 18420] [client 51.120.81.94:11687] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acrTRnqQrXLbk1cg3mgEvwAAAI4"]
[Tue Mar 31 03:47:18.772888 2026] [:error] [pid 18334:tid 18407] [client 51.120.81.94:11691] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acrTRnqQrXLbk1cg3mgEwgAAAIE"]
[Tue Mar 31 03:47:19.476209 2026] [:error] [pid 18439:tid 18468] [client 51.120.81.94:11680] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "acrTRy-R9nOaA8Xqs7h2hQAAANE"]
[Tue Mar 31 03:47:20.019473 2026] [:error] [pid 18439:tid 18467] [client 51.120.81.94:65436] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "acrTSC-R9nOaA8Xqs7h2hwAAANA"]
[Tue Mar 31 03:47:20.626881 2026] [:error] [pid 18439:tid 18464] [client 51.120.81.94:11687] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "acrTSC-R9nOaA8Xqs7h2jAAAAM0"]
[Tue Mar 31 03:47:21.367097 2026] [:error] [pid 18334:tid 18430] [client 51.120.81.94:64613] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "acrTSXqQrXLbk1cg3mgEyAAAAJg"]
[Tue Mar 31 03:47:21.960193 2026] [:error] [pid 18332:tid 18360] [client 51.120.81.94:42974] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "acrTSb4KXr1F9raS5GR0lQAAAAw"]
[Tue Mar 31 03:47:22.488539 2026] [:error] [pid 18333:tid 18398] [client 51.120.81.94:20057] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acrTSkSx2C5hLR0-8dK32AAAAFM"]
[Tue Mar 31 03:47:23.071625 2026] [:error] [pid 18333:tid 18392] [client 51.120.81.94:20085] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acrTS0Sx2C5hLR0-8dK32gAAAE0"]
[Tue Mar 31 03:47:23.666438 2026] [:error] [pid 18439:tid 18473] [client 51.120.81.94:64698] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acrTSy-R9nOaA8Xqs7h2lgAAANY"]
[Tue Mar 31 03:47:24.230025 2026] [:error] [pid 18439:tid 18460] [client 51.120.81.94:65452] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "acrTTC-R9nOaA8Xqs7h2mgAAAMk"]
[Tue Mar 31 03:47:24.861809 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:65456] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acrTTC-R9nOaA8Xqs7h2nAAAAMU"]
[Tue Mar 31 03:47:25.386348 2026] [:error] [pid 18439:tid 18472] [client 51.120.81.94:20081] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acrTTS-R9nOaA8Xqs7h2oAAAANU"]
[Tue Mar 31 03:47:25.975030 2026] [:error] [pid 18332:tid 18358] [client 51.120.81.94:11692] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acrTTb4KXr1F9raS5GR0qQAAAAo"]
[Tue Mar 31 03:47:26.553440 2026] [:error] [pid 18332:tid 18362] [client 51.120.81.94:20038] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "acrTTr4KXr1F9raS5GR0rwAAAA4"]
[Tue Mar 31 03:47:27.209182 2026] [:error] [pid 18332:tid 18365] [client 51.120.81.94:42950] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hehe.php"] [unique_id "acrTT74KXr1F9raS5GR0swAAABE"]
[Tue Mar 31 03:47:28.049816 2026] [:error] [pid 18334:tid 18407] [client 51.120.81.94:11690] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hehe.php"] [unique_id "acrTUHqQrXLbk1cg3mgEywAAAIE"]
[Tue Mar 31 03:47:29.204068 2026] [:error] [pid 18333:tid 18384] [client 51.120.81.94:11656] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hehe.php"] [unique_id "acrTUUSx2C5hLR0-8dK37gAAAEU"]
[Tue Mar 31 03:47:29.746054 2026] [:error] [pid 18439:tid 18459] [client 51.120.81.94:65386] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hehe.php"] [unique_id "acrTUS-R9nOaA8Xqs7h2pgAAAMg"]
[Tue Mar 31 03:47:30.360663 2026] [:error] [pid 18439:tid 18475] [client 51.120.81.94:64660] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acrTUi-R9nOaA8Xqs7h2qwAAANg"]
[Tue Mar 31 03:47:30.888500 2026] [:error] [pid 18333:tid 18388] [client 51.120.81.94:64662] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acrTUkSx2C5hLR0-8dK38wAAAEk"]
[Tue Mar 31 03:47:31.415502 2026] [:error] [pid 18439:tid 18461] [client 51.120.81.94:20069] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acrTUy-R9nOaA8Xqs7h2sQAAAMo"]
[Tue Mar 31 03:47:32.004875 2026] [:error] [pid 18334:tid 18429] [client 51.120.81.94:20043] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acrTVHqQrXLbk1cg3mgE1AAAAJc"]
[Tue Mar 31 03:47:32.566204 2026] [:error] [pid 18333:tid 18382] [client 51.120.81.94:43007] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "acrTVESx2C5hLR0-8dK39wAAAEM"]
[Tue Mar 31 03:47:33.086692 2026] [:error] [pid 18332:tid 18357] [client 51.120.81.94:20076] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "acrTVb4KXr1F9raS5GR0vgAAAAk"]
[Tue Mar 31 03:47:33.682592 2026] [:error] [pid 18334:tid 18415] [client 51.120.81.94:11675] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "acrTVXqQrXLbk1cg3mgE1gAAAIk"]
[Tue Mar 31 03:47:34.263603 2026] [:error] [pid 18334:tid 18411] [client 51.120.81.94:64152] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "acrTVnqQrXLbk1cg3mgE2QAAAIU"]
[Tue Mar 31 03:47:34.840484 2026] [:error] [pid 18333:tid 18382] [client 51.120.81.94:64676] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws73.php"] [unique_id "acrTVkSx2C5hLR0-8dK4AQAAAEM"]
[Tue Mar 31 03:47:35.631480 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:42971] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws73.php"] [unique_id "acrTV0Sx2C5hLR0-8dK4BgAAAFE"]
[Tue Mar 31 03:47:36.241319 2026] [:error] [pid 18334:tid 18415] [client 51.120.81.94:20091] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws73.php"] [unique_id "acrTWHqQrXLbk1cg3mgE4AAAAIk"]
[Tue Mar 31 03:47:36.763455 2026] [:error] [pid 18334:tid 18420] [client 51.120.81.94:65378] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws73.php"] [unique_id "acrTWHqQrXLbk1cg3mgE4gAAAI4"]
[Tue Mar 31 03:47:37.302415 2026] [:error] [pid 18333:tid 18391] [client 51.120.81.94:64142] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "acrTWUSx2C5hLR0-8dK4DQAAAEw"]
[Tue Mar 31 03:47:37.827370 2026] [:error] [pid 18439:tid 18465] [client 51.120.81.94:65364] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "acrTWS-R9nOaA8Xqs7h2xgAAAM4"]
[Tue Mar 31 03:47:38.389069 2026] [:error] [pid 18439:tid 18475] [client 51.120.81.94:65412] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "acrTWi-R9nOaA8Xqs7h2zAAAANg"]
[Tue Mar 31 03:47:39.170740 2026] [:error] [pid 18334:tid 18425] [client 51.120.81.94:42960] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "acrTW3qQrXLbk1cg3mgE5AAAAJM"]
[Tue Mar 31 03:47:39.699559 2026] [:error] [pid 18334:tid 18421] [client 51.120.81.94:20049] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acrTW3qQrXLbk1cg3mgE5wAAAI8"]
[Tue Mar 31 03:47:40.270736 2026] [:error] [pid 18439:tid 18472] [client 51.120.81.94:42958] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acrTXC-R9nOaA8Xqs7h21AAAANU"]
[Tue Mar 31 03:47:40.820946 2026] [:error] [pid 18332:tid 18358] [client 51.120.81.94:65425] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acrTXL4KXr1F9raS5GR00gAAAAo"]
[Tue Mar 31 03:47:41.348600 2026] [:error] [pid 18333:tid 18397] [client 51.120.81.94:42979] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "acrTXUSx2C5hLR0-8dK4FgAAAFI"]
[Tue Mar 31 03:47:41.873555 2026] [:error] [pid 18332:tid 18367] [client 51.120.81.94:11669] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acrTXb4KXr1F9raS5GR01QAAABM"]
[Tue Mar 31 03:47:42.417046 2026] [:error] [pid 18334:tid 18409] [client 51.120.81.94:11711] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acrTXnqQrXLbk1cg3mgE6gAAAIM"]
[Tue Mar 31 03:47:42.980386 2026] [:error] [pid 18439:tid 18470] [client 51.120.81.94:64682] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acrTXi-R9nOaA8Xqs7h22wAAANM"]
[Tue Mar 31 03:47:43.553062 2026] [:error] [pid 18439:tid 18457] [client 51.120.81.94:42989] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "acrTXy-R9nOaA8Xqs7h23gAAAMY"]
[Tue Mar 31 03:47:44.160730 2026] [:error] [pid 18332:tid 18364] [client 51.120.81.94:42966] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "acrTYL4KXr1F9raS5GR01wAAABA"]
[Tue Mar 31 03:47:44.700573 2026] [:error] [pid 18334:tid 18426] [client 51.120.81.94:65458] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "acrTYHqQrXLbk1cg3mgE7wAAAJQ"]
[Tue Mar 31 03:48:30.779607 2026] [:error] [pid 18334:tid 18426] [client 51.120.81.94:11655] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acrTjnqQrXLbk1cg3mgFSAAAAJQ"]
[Tue Mar 31 03:48:31.388825 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:64615] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acrTjy-R9nOaA8Xqs7h3nAAAAMQ"]
[Tue Mar 31 03:48:31.957122 2026] [:error] [pid 18332:tid 18353] [client 51.120.81.94:65366] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acrTj74KXr1F9raS5GR1GgAAAAU"]
[Tue Mar 31 03:48:32.480692 2026] [:error] [pid 18334:tid 18430] [client 51.120.81.94:20074] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "acrTkHqQrXLbk1cg3mgFUAAAAJg"]
[Tue Mar 31 03:48:33.048285 2026] [:error] [pid 18334:tid 18425] [client 51.120.81.94:42993] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "acrTkXqQrXLbk1cg3mgFUwAAAJM"]
[Tue Mar 31 03:48:33.583187 2026] [:error] [pid 18334:tid 18428] [client 51.120.81.94:20094] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "acrTkXqQrXLbk1cg3mgFWAAAAJY"]
[Tue Mar 31 03:48:34.228179 2026] [:error] [pid 18334:tid 18423] [client 51.120.81.94:42949] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "acrTknqQrXLbk1cg3mgFXQAAAJE"]
[Tue Mar 31 03:48:34.787353 2026] [:error] [pid 18334:tid 18424] [client 51.120.81.94:64593] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "acrTknqQrXLbk1cg3mgFYgAAAJI"]
[Tue Mar 31 03:48:35.347143 2026] [:error] [pid 18332:tid 18359] [client 51.120.81.94:65448] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "acrTk74KXr1F9raS5GR1IQAAAAs"]
[Tue Mar 31 03:48:35.923078 2026] [:error] [pid 18333:tid 18389] [client 51.120.81.94:65351] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "acrTk0Sx2C5hLR0-8dK4iAAAAEo"]
[Tue Mar 31 03:48:36.468736 2026] [:error] [pid 18334:tid 18408] [client 51.120.81.94:65432] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "acrTlHqQrXLbk1cg3mgFZQAAAII"]
[Tue Mar 31 03:48:37.012499 2026] [:error] [pid 18333:tid 18381] [client 51.120.81.94:65372] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "acrTlUSx2C5hLR0-8dK4jQAAAEI"]
[Tue Mar 31 03:48:37.561324 2026] [:error] [pid 18334:tid 18409] [client 51.120.81.94:20072] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acrTlXqQrXLbk1cg3mgFbQAAAIM"]
[Tue Mar 31 03:48:38.167379 2026] [:error] [pid 18334:tid 18422] [client 51.120.81.94:42980] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acrTlnqQrXLbk1cg3mgFbwAAAJA"]
[Tue Mar 31 03:48:38.770559 2026] [:error] [pid 18332:tid 18355] [client 51.120.81.94:43003] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acrTlr4KXr1F9raS5GR1JgAAAAc"]
[Tue Mar 31 03:48:39.363847 2026] [:error] [pid 18439:tid 18474] [client 51.120.81.94:11648] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "acrTly-R9nOaA8Xqs7h3tQAAANc"]
[Tue Mar 31 03:48:39.938917 2026] [:error] [pid 18334:tid 18407] [client 51.120.81.94:42999] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "acrTl3qQrXLbk1cg3mgFdgAAAIE"]
[Tue Mar 31 03:48:40.465225 2026] [:error] [pid 18334:tid 18425] [client 51.120.81.94:65426] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "acrTmHqQrXLbk1cg3mgFfQAAAJM"]
[Tue Mar 31 03:48:40.988798 2026] [:error] [pid 18334:tid 18414] [client 51.120.81.94:42997] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "acrTmHqQrXLbk1cg3mgFgAAAAIg"]
[Tue Mar 31 03:48:41.556533 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:65393] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "acrTmS-R9nOaA8Xqs7h3wQAAAMM"]
[Tue Mar 31 03:48:42.104122 2026] [:error] [pid 18439:tid 18475] [client 51.120.81.94:42996] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "acrTmi-R9nOaA8Xqs7h3xwAAANg"]
[Tue Mar 31 03:48:42.638850 2026] [:error] [pid 18439:tid 18457] [client 51.120.81.94:11709] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "acrTmi-R9nOaA8Xqs7h3ywAAAMY"]
[Tue Mar 31 03:48:43.247095 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:65383] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "acrTmy-R9nOaA8Xqs7h30AAAAMM"]
[Tue Mar 31 03:48:43.810310 2026] [:error] [pid 18334:tid 18422] [client 51.120.81.94:65387] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lm15.php"] [unique_id "acrTm3qQrXLbk1cg3mgFhgAAAJA"]
[Tue Mar 31 03:48:44.348051 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:65441] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "acrTnC-R9nOaA8Xqs7h33QAAAME"]
[Tue Mar 31 03:48:44.914547 2026] [:error] [pid 18439:tid 18469] [client 51.120.81.94:20071] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "acrTnC-R9nOaA8Xqs7h34QAAANI"]
[Tue Mar 31 03:48:45.474686 2026] [:error] [pid 18332:tid 18366] [client 51.120.81.94:65467] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "acrTnb4KXr1F9raS5GR1KgAAABI"]
[Tue Mar 31 03:48:46.029588 2026] [:error] [pid 18334:tid 18419] [client 51.120.81.94:64693] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "acrTnnqQrXLbk1cg3mgFigAAAI0"]
[Tue Mar 31 03:48:46.633558 2026] [:error] [pid 18334:tid 18409] [client 51.120.81.94:65352] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "acrTnnqQrXLbk1cg3mgFjQAAAIM"]
[Tue Mar 31 03:48:47.191315 2026] [:error] [pid 18334:tid 18430] [client 51.120.81.94:11654] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "acrTn3qQrXLbk1cg3mgFjwAAAJg"]
[Tue Mar 31 03:48:47.764519 2026] [:error] [pid 18333:tid 18403] [client 51.120.81.94:20084] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "acrTn0Sx2C5hLR0-8dK4mwAAAFg"]
[Tue Mar 31 03:48:48.401820 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:11707] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "acrToC-R9nOaA8Xqs7h39AAAAME"]
[Tue Mar 31 03:48:48.979893 2026] [:error] [pid 18333:tid 18383] [client 51.120.81.94:65430] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acrToESx2C5hLR0-8dK4nAAAAEQ"]
[Tue Mar 31 03:48:49.529191 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:42967] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acrToUSx2C5hLR0-8dK4ngAAAFE"]
[Tue Mar 31 03:48:50.112698 2026] [:error] [pid 18332:tid 18351] [client 51.120.81.94:64165] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acrTor4KXr1F9raS5GR1NgAAAAM"]
[Tue Mar 31 03:48:50.639782 2026] [:error] [pid 18439:tid 18458] [client 51.120.81.94:65411] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "acrToi-R9nOaA8Xqs7h3_wAAAMc"]
[Tue Mar 31 03:48:51.161834 2026] [:error] [pid 18334:tid 18413] [client 51.120.81.94:64151] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "acrTo3qQrXLbk1cg3mgFoAAAAIc"]
[Tue Mar 31 03:48:51.785060 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:20039] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "acrToy-R9nOaA8Xqs7h4DAAAAMU"]
[Tue Mar 31 03:48:52.316353 2026] [:error] [pid 18334:tid 18418] [client 51.120.81.94:64646] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "acrTpHqQrXLbk1cg3mgFoQAAAIw"]
[Tue Mar 31 03:48:52.943504 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:42965] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "acrTpC-R9nOaA8Xqs7h4FAAAAMI"]
[Tue Mar 31 03:48:53.523584 2026] [:error] [pid 18439:tid 18463] [client 51.120.81.94:20045] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acrTpS-R9nOaA8Xqs7h4GgAAAMw"]
[Tue Mar 31 03:48:54.068155 2026] [:error] [pid 18334:tid 18420] [client 51.120.81.94:64688] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acrTpnqQrXLbk1cg3mgFpgAAAI4"]
[Tue Mar 31 03:48:54.608821 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:20082] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acrTpi-R9nOaA8Xqs7h4IwAAAMI"]
[Tue Mar 31 03:48:55.158720 2026] [:error] [pid 18334:tid 18413] [client 51.120.81.94:65408] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "acrTp3qQrXLbk1cg3mgFqAAAAIc"]
[Tue Mar 31 03:48:55.692740 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:64605] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acrTpy-R9nOaA8Xqs7h4LwAAAMQ"]
[Tue Mar 31 03:48:56.256750 2026] [:error] [pid 18332:tid 18362] [client 51.120.81.94:65353] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acrTqL4KXr1F9raS5GR1NwAAAA4"]
[Tue Mar 31 03:48:56.869027 2026] [:error] [pid 18332:tid 18369] [client 51.120.81.94:11705] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acrTqL4KXr1F9raS5GR1OQAAABU"]
[Tue Mar 31 03:48:57.454926 2026] [:error] [pid 18334:tid 18423] [client 51.120.81.94:11658] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "acrTqXqQrXLbk1cg3mgFrQAAAJE"]
[Tue Mar 31 03:48:58.112039 2026] [:error] [pid 18333:tid 18390] [client 51.120.81.94:20059] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clss.php"] [unique_id "acrTqkSx2C5hLR0-8dK4pwAAAEs"]
[Tue Mar 31 03:48:58.634309 2026] [:error] [pid 18334:tid 18425] [client 51.120.81.94:65454] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clss.php"] [unique_id "acrTqnqQrXLbk1cg3mgFsQAAAJM"]
[Tue Mar 31 03:48:59.228864 2026] [:error] [pid 18334:tid 18410] [client 51.120.81.94:64621] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clss.php"] [unique_id "acrTq3qQrXLbk1cg3mgFtQAAAIQ"]
[Tue Mar 31 03:48:59.805539 2026] [:error] [pid 18332:tid 18349] [client 51.120.81.94:65389] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clss.php"] [unique_id "acrTq74KXr1F9raS5GR1PwAAAAE"]
[Tue Mar 31 03:49:00.336281 2026] [:error] [pid 18334:tid 18419] [client 51.120.81.94:65424] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acrTrHqQrXLbk1cg3mgFuAAAAI0"]
[Tue Mar 31 03:49:00.918283 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:42944] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acrTrC-R9nOaA8Xqs7h4QQAAAMU"]
[Tue Mar 31 03:49:01.459416 2026] [:error] [pid 18334:tid 18406] [client 51.120.81.94:42975] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acrTrXqQrXLbk1cg3mgFwAAAAIA"]
[Tue Mar 31 03:49:02.043391 2026] [:error] [pid 18334:tid 18416] [client 51.120.81.94:64656] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "acrTrnqQrXLbk1cg3mgFwgAAAIo"]
[Tue Mar 31 03:49:02.573944 2026] [:error] [pid 18332:tid 18352] [client 51.120.81.94:42994] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acrTrr4KXr1F9raS5GR1RQAAAAQ"]
[Tue Mar 31 03:49:03.155264 2026] [:error] [pid 18334:tid 18430] [client 51.120.81.94:65384] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acrTr3qQrXLbk1cg3mgFxgAAAJg"]
[Tue Mar 31 03:49:03.783322 2026] [:error] [pid 18333:tid 18385] [client 51.120.81.94:64669] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acrTr0Sx2C5hLR0-8dK4rwAAAEY"]
[Tue Mar 31 03:49:04.313557 2026] [:error] [pid 18334:tid 18411] [client 51.120.81.94:11699] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "acrTsHqQrXLbk1cg3mgF0QAAAIU"]
[Tue Mar 31 03:49:04.859092 2026] [:error] [pid 18334:tid 18430] [client 51.120.81.94:11698] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acrTsHqQrXLbk1cg3mgF1QAAAJg"]
[Tue Mar 31 03:49:05.406802 2026] [:error] [pid 18334:tid 18414] [client 51.120.81.94:64667] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acrTsXqQrXLbk1cg3mgF1wAAAIg"]
[Tue Mar 31 03:49:05.926983 2026] [:error] [pid 18334:tid 18411] [client 51.120.81.94:64578] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acrTsXqQrXLbk1cg3mgF3QAAAIU"]
[Tue Mar 31 03:49:06.500326 2026] [:error] [pid 18439:tid 18465] [client 51.120.81.94:65391] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "acrTsi-R9nOaA8Xqs7h4UAAAAM4"]
[Tue Mar 31 03:49:07.172606 2026] [:error] [pid 18439:tid 18454] [client 51.120.81.94:11651] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acrTsy-R9nOaA8Xqs7h4VwAAAMM"]
[Tue Mar 31 03:49:07.730938 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:64131] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acrTsy-R9nOaA8Xqs7h4XQAAAMQ"]
[Tue Mar 31 03:49:08.252440 2026] [:error] [pid 18333:tid 18383] [client 51.120.81.94:11693] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acrTtESx2C5hLR0-8dK4tAAAAEQ"]
[Tue Mar 31 03:49:08.858109 2026] [:error] [pid 18332:tid 18366] [client 51.120.81.94:64098] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "acrTtL4KXr1F9raS5GR1UgAAABI"]
[Tue Mar 31 03:49:09.420923 2026] [:error] [pid 18334:tid 18408] [client 51.120.81.94:65455] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax.php"] [unique_id "acrTtXqQrXLbk1cg3mgF9AAAAII"]
[Tue Mar 31 03:49:09.995692 2026] [:error] [pid 18334:tid 18426] [client 51.120.81.94:64701] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax.php"] [unique_id "acrTtXqQrXLbk1cg3mgF-QAAAJQ"]
[Tue Mar 31 03:49:10.520850 2026] [:error] [pid 18334:tid 18417] [client 51.120.81.94:64130] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax.php"] [unique_id "acrTtnqQrXLbk1cg3mgF_gAAAIs"]
[Tue Mar 31 03:49:11.122639 2026] [:error] [pid 18332:tid 18360] [client 51.120.81.94:65373] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ajax.php"] [unique_id "acrTt74KXr1F9raS5GR1UwAAAAw"]
[Tue Mar 31 03:49:11.699029 2026] [:error] [pid 18439:tid 18466] [client 51.120.81.94:43006] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrTty-R9nOaA8Xqs7h4gwAAAM8"]
[Tue Mar 31 03:49:12.266880 2026] [:error] [pid 18333:tid 18381] [client 51.120.81.94:64630] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrTuESx2C5hLR0-8dK4vgAAAEI"]
[Tue Mar 31 03:49:12.795666 2026] [:error] [pid 18332:tid 18350] [client 51.120.81.94:65401] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrTuL4KXr1F9raS5GR1VgAAAAI"]
[Tue Mar 31 03:49:13.320198 2026] [:error] [pid 18334:tid 18409] [client 51.120.81.94:20040] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "acrTuXqQrXLbk1cg3mgGBwAAAIM"]
[Tue Mar 31 03:49:13.852973 2026] [:error] [pid 18439:tid 18472] [client 51.120.81.94:64649] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acrTuS-R9nOaA8Xqs7h4mQAAANU"]
[Tue Mar 31 03:49:14.376291 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:42956] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acrTukSx2C5hLR0-8dK4xQAAAFE"]
[Tue Mar 31 03:49:15.003623 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:11678] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acrTuy-R9nOaA8Xqs7h4owAAAME"]
[Tue Mar 31 03:49:15.525664 2026] [:error] [pid 18439:tid 18451] [client 51.120.81.94:64664] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acrTuy-R9nOaA8Xqs7h4pwAAAMA"]
[Tue Mar 31 03:49:16.088379 2026] [:error] [pid 18332:tid 18352] [client 51.120.81.94:64697] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "acrTvL4KXr1F9raS5GR1WwAAAAQ"]
[Tue Mar 31 03:49:16.748756 2026] [:error] [pid 18439:tid 18467] [client 51.120.81.94:42970] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "acrTvC-R9nOaA8Xqs7h4swAAANA"]
[Tue Mar 31 03:49:17.289367 2026] [:error] [pid 18332:tid 18364] [client 51.120.81.94:11666] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "acrTvb4KXr1F9raS5GR1YgAAABA"]
[Tue Mar 31 03:49:17.828826 2026] [:error] [pid 18334:tid 18406] [client 51.120.81.94:64685] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "acrTvXqQrXLbk1cg3mgGGAAAAIA"]
[Tue Mar 31 03:49:18.426067 2026] [:error] [pid 18332:tid 18351] [client 51.120.81.94:64694] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "acrTvr4KXr1F9raS5GR1ZgAAAAM"]
[Tue Mar 31 03:49:18.976977 2026] [:error] [pid 18439:tid 18451] [client 51.120.81.94:64579] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "acrTvi-R9nOaA8Xqs7h4yAAAAMA"]
[Tue Mar 31 03:49:19.571440 2026] [:error] [pid 18334:tid 18414] [client 51.120.81.94:64188] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "acrTv3qQrXLbk1cg3mgGHQAAAIg"]
[Tue Mar 31 03:49:20.124918 2026] [:error] [pid 18439:tid 18459] [client 51.120.81.94:64171] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "acrTwC-R9nOaA8Xqs7h42AAAAMg"]
[Tue Mar 31 03:49:20.709850 2026] [:error] [pid 18334:tid 18415] [client 51.120.81.94:11704] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acrTwHqQrXLbk1cg3mgGIwAAAIk"]
[Tue Mar 31 03:49:21.311798 2026] [:error] [pid 18333:tid 18390] [client 51.120.81.94:65345] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acrTwUSx2C5hLR0-8dK4zQAAAEs"]
[Tue Mar 31 03:49:21.858183 2026] [:error] [pid 18334:tid 18425] [client 51.120.81.94:63671] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acrTwXqQrXLbk1cg3mgGLAAAAJM"]
[Tue Mar 31 03:49:22.590604 2026] [:error] [pid 18334:tid 18421] [client 51.120.81.94:11686] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws60.php"] [unique_id "acrTwnqQrXLbk1cg3mgGMQAAAI8"]
[Tue Mar 31 03:49:23.132266 2026] [:error] [pid 18334:tid 18417] [client 51.120.81.94:65422] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "acrTw3qQrXLbk1cg3mgGNwAAAIs"]
[Tue Mar 31 03:49:23.761895 2026] [:error] [pid 18334:tid 18414] [client 51.120.81.94:11688] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "acrTw3qQrXLbk1cg3mgGOwAAAIg"]
[Tue Mar 31 03:49:24.306311 2026] [:error] [pid 18439:tid 18463] [client 51.120.81.94:64590] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "acrTxC-R9nOaA8Xqs7h49wAAAMw"]
[Tue Mar 31 03:49:25.120324 2026] [:error] [pid 18334:tid 18410] [client 51.120.81.94:65405] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "acrTxXqQrXLbk1cg3mgGQgAAAIQ"]
[Tue Mar 31 03:49:25.686283 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:64628] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acrTxUSx2C5hLR0-8dK40gAAAFE"]
[Tue Mar 31 03:49:26.223138 2026] [:error] [pid 18439:tid 18451] [client 51.120.81.94:11661] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acrTxi-R9nOaA8Xqs7h5DQAAAMA"]
[Tue Mar 31 03:49:26.869792 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:65370] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acrTxi-R9nOaA8Xqs7h5FQAAAMQ"]
[Tue Mar 31 03:49:27.437870 2026] [:error] [pid 18334:tid 18411] [client 51.120.81.94:65361] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "acrTx3qQrXLbk1cg3mgGTgAAAIU"]
[Tue Mar 31 03:50:13.170034 2026] [:error] [pid 18439:tid 18473] [client 51.120.81.94:62229] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "acrT9S-R9nOaA8Xqs7h6CQAAANY"]
[Tue Mar 31 03:50:13.706018 2026] [:error] [pid 18439:tid 18471] [client 51.120.81.94:42952] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "acrT9S-R9nOaA8Xqs7h6DQAAANQ"]
[Tue Mar 31 03:50:14.247206 2026] [:error] [pid 18334:tid 18429] [client 51.120.81.94:64680] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "acrT9nqQrXLbk1cg3mgHPwAAAJc"]
[Tue Mar 31 03:50:14.806739 2026] [:error] [pid 18333:tid 18394] [client 51.120.81.94:65349] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "acrT9kSx2C5hLR0-8dK5oAAAAE8"]
[Tue Mar 31 03:50:15.362672 2026] [:error] [pid 18334:tid 18430] [client 51.120.81.94:20044] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acrT93qQrXLbk1cg3mgHSAAAAJg"]
[Tue Mar 31 03:50:15.937768 2026] [:error] [pid 18439:tid 18464] [client 51.120.81.94:42954] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acrT9y-R9nOaA8Xqs7h6HQAAAM0"]
[Tue Mar 31 03:50:16.466636 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:65428] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acrT-C-R9nOaA8Xqs7h6IQAAAMQ"]
[Tue Mar 31 03:50:17.041691 2026] [:error] [pid 18439:tid 18457] [client 51.120.81.94:11668] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "acrT-S-R9nOaA8Xqs7h6IwAAAMY"]
[Tue Mar 31 03:50:17.579634 2026] [:error] [pid 18333:tid 18389] [client 51.120.81.94:11684] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acrT-USx2C5hLR0-8dK5pgAAAEo"]
[Tue Mar 31 03:50:18.099725 2026] [:error] [pid 18332:tid 18369] [client 51.120.81.94:65362] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acrT-r4KXr1F9raS5GR1vgAAABU"]
[Tue Mar 31 03:50:18.623166 2026] [:error] [pid 18439:tid 18451] [client 51.120.81.94:42990] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acrT-i-R9nOaA8Xqs7h6KAAAAMA"]
[Tue Mar 31 03:50:19.161221 2026] [:error] [pid 18334:tid 18424] [client 51.120.81.94:42945] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "acrT-3qQrXLbk1cg3mgHXwAAAJI"]
[Tue Mar 31 03:50:19.732540 2026] [:error] [pid 18334:tid 18412] [client 51.120.81.94:65449] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acrT-3qQrXLbk1cg3mgHYwAAAIY"]
[Tue Mar 31 03:50:20.299480 2026] [:error] [pid 18332:tid 18361] [client 51.120.81.94:64672] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acrT_L4KXr1F9raS5GR1xAAAAA0"]
[Tue Mar 31 03:50:20.819411 2026] [:error] [pid 18332:tid 18352] [client 51.120.81.94:64158] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acrT_L4KXr1F9raS5GR1yAAAAAQ"]
[Tue Mar 31 03:50:21.402875 2026] [:error] [pid 18333:tid 18401] [client 51.120.81.94:20056] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "acrT_USx2C5hLR0-8dK5swAAAFY"]
[Tue Mar 31 03:50:21.945990 2026] [:error] [pid 18333:tid 18389] [client 51.120.81.94:65471] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acrT_USx2C5hLR0-8dK5twAAAEo"]
[Tue Mar 31 03:50:22.544923 2026] [:error] [pid 18333:tid 18403] [client 51.120.81.94:43000] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acrT_kSx2C5hLR0-8dK5uQAAAFg"]
[Tue Mar 31 03:50:23.088831 2026] [:error] [pid 18333:tid 18387] [client 51.120.81.94:42968] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acrT_0Sx2C5hLR0-8dK5vQAAAEg"]
[Tue Mar 31 03:50:23.630000 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:42953] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "acrT_0Sx2C5hLR0-8dK5vwAAAFE"]
[Tue Mar 31 03:50:24.209954 2026] [:error] [pid 18439:tid 18462] [client 51.120.81.94:65355] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "acrUAC-R9nOaA8Xqs7h6QAAAAMs"]
[Tue Mar 31 03:50:24.736925 2026] [:error] [pid 18333:tid 18398] [client 51.120.81.94:64597] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "acrUAESx2C5hLR0-8dK5wQAAAFM"]
[Tue Mar 31 03:50:25.274703 2026] [:error] [pid 18332:tid 18364] [client 51.120.81.94:63677] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "acrUAb4KXr1F9raS5GR10AAAABA"]
[Tue Mar 31 03:50:25.807051 2026] [:error] [pid 18439:tid 18464] [client 51.120.81.94:11689] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "acrUAS-R9nOaA8Xqs7h6RgAAAM0"]
[Tue Mar 31 03:50:26.394965 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:11706] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acrUAi-R9nOaA8Xqs7h6TQAAAME"]
[Tue Mar 31 03:50:26.958886 2026] [:error] [pid 18439:tid 18474] [client 51.120.81.94:65406] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acrUAi-R9nOaA8Xqs7h6TwAAANc"]
[Tue Mar 31 03:50:27.524911 2026] [:error] [pid 18332:tid 18368] [client 51.120.81.94:11701] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acrUA74KXr1F9raS5GR10QAAABQ"]
[Tue Mar 31 03:50:28.093515 2026] [:error] [pid 18334:tid 18430] [client 51.120.81.94:42977] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "acrUBHqQrXLbk1cg3mgHkAAAAJg"]
[Tue Mar 31 03:50:28.639441 2026] [:error] [pid 18334:tid 18410] [client 51.120.81.94:11676] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acrUBHqQrXLbk1cg3mgHlQAAAIQ"]
[Tue Mar 31 03:50:29.178556 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:42976] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acrUBS-R9nOaA8Xqs7h6XAAAAMQ"]
[Tue Mar 31 03:50:29.703064 2026] [:error] [pid 18439:tid 18475] [client 51.120.81.94:65363] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acrUBS-R9nOaA8Xqs7h6YQAAANg"]
[Tue Mar 31 03:50:30.257817 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:64148] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "acrUBkSx2C5hLR0-8dK5zAAAAFE"]
[Tue Mar 31 03:50:30.807750 2026] [:error] [pid 18334:tid 18411] [client 51.120.81.94:11670] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acrUBnqQrXLbk1cg3mgHpAAAAIU"]
[Tue Mar 31 03:50:31.369557 2026] [:error] [pid 18334:tid 18406] [client 51.120.81.94:11681] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acrUB3qQrXLbk1cg3mgHqgAAAIA"]
[Tue Mar 31 03:50:31.932957 2026] [:error] [pid 18333:tid 18399] [client 51.120.81.94:64681] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acrUB0Sx2C5hLR0-8dK50QAAAFQ"]
[Tue Mar 31 03:50:32.455726 2026] [:error] [pid 18333:tid 18402] [client 51.120.81.94:65460] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "acrUCESx2C5hLR0-8dK51AAAAFc"]
[Tue Mar 31 03:50:32.985481 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:43004] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acrUCC-R9nOaA8Xqs7h6aAAAAMI"]
[Tue Mar 31 03:50:33.510441 2026] [:error] [pid 18333:tid 18382] [client 51.120.81.94:20077] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acrUCUSx2C5hLR0-8dK52gAAAEM"]
[Tue Mar 31 03:50:34.050092 2026] [:error] [pid 18439:tid 18460] [client 51.120.81.94:65435] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acrUCi-R9nOaA8Xqs7h6aQAAAMk"]
[Tue Mar 31 03:50:34.569360 2026] [:error] [pid 18439:tid 18466] [client 51.120.81.94:65368] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "acrUCi-R9nOaA8Xqs7h6bAAAAM8"]
[Tue Mar 31 03:50:35.091023 2026] [:error] [pid 18333:tid 18395] [client 51.120.81.94:42998] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "acrUC0Sx2C5hLR0-8dK54QAAAFA"]
[Tue Mar 31 03:50:35.615204 2026] [:error] [pid 18333:tid 18389] [client 51.120.81.94:64181] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "acrUC0Sx2C5hLR0-8dK54wAAAEo"]
[Tue Mar 31 03:50:36.146662 2026] [:error] [pid 18439:tid 18451] [client 51.120.81.94:65444] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "acrUDC-R9nOaA8Xqs7h6cQAAAMA"]
[Tue Mar 31 03:50:36.680125 2026] [:error] [pid 18334:tid 18422] [client 51.120.81.94:64647] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "acrUDHqQrXLbk1cg3mgHzAAAAJA"]
[Tue Mar 31 03:50:37.229370 2026] [:error] [pid 18333:tid 18396] [client 51.120.81.94:64140] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "acrUDUSx2C5hLR0-8dK56QAAAFE"]
[Tue Mar 31 03:50:37.773406 2026] [:error] [pid 18439:tid 18464] [client 51.120.81.94:64600] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "acrUDS-R9nOaA8Xqs7h6eAAAAM0"]
[Tue Mar 31 03:50:38.313700 2026] [:error] [pid 18439:tid 18461] [client 51.120.81.94:11660] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "acrUDi-R9nOaA8Xqs7h6fQAAAMo"]
[Tue Mar 31 03:50:38.869125 2026] [:error] [pid 18333:tid 18401] [client 51.120.81.94:65442] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "acrUDkSx2C5hLR0-8dK57gAAAFY"]
[Tue Mar 31 03:50:39.409913 2026] [:error] [pid 18439:tid 18455] [client 51.120.81.94:65375] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "acrUDy-R9nOaA8Xqs7h6hQAAAMQ"]
[Tue Mar 31 03:50:39.997029 2026] [:error] [pid 18439:tid 18458] [client 51.120.81.94:65395] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "acrUDy-R9nOaA8Xqs7h6igAAAMc"]
[Tue Mar 31 03:50:40.526613 2026] [:error] [pid 18332:tid 18360] [client 51.120.81.94:11679] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "acrUEL4KXr1F9raS5GR16QAAAAw"]
[Tue Mar 31 03:50:41.058135 2026] [:error] [pid 18334:tid 18412] [client 51.120.81.94:65413] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "acrUEXqQrXLbk1cg3mgH6wAAAIY"]
[Tue Mar 31 03:50:41.624606 2026] [:error] [pid 18332:tid 18367] [client 51.120.81.94:42948] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acrUEb4KXr1F9raS5GR17AAAABM"]
[Tue Mar 31 03:50:42.145866 2026] [:error] [pid 18333:tid 18383] [client 51.120.81.94:64069] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acrUEkSx2C5hLR0-8dK59wAAAEQ"]
[Tue Mar 31 03:50:42.707520 2026] [:error] [pid 18333:tid 18395] [client 51.120.81.94:65445] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acrUEkSx2C5hLR0-8dK5-gAAAFA"]
[Tue Mar 31 03:50:43.250787 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:65443] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "acrUEy-R9nOaA8Xqs7h6jgAAAME"]
[Tue Mar 31 03:50:43.787800 2026] [:error] [pid 18332:tid 18361] [client 51.120.81.94:65451] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "acrUE74KXr1F9raS5GR18QAAAA0"]
[Tue Mar 31 03:50:44.377034 2026] [:error] [pid 18334:tid 18425] [client 51.120.81.94:64687] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "acrUFHqQrXLbk1cg3mgIBwAAAJM"]
[Tue Mar 31 03:50:44.929984 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:64137] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "acrUFC-R9nOaA8Xqs7h6lQAAAMU"]
[Tue Mar 31 03:50:45.560356 2026] [:error] [pid 18439:tid 18472] [client 51.120.81.94:65354] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "acrUFS-R9nOaA8Xqs7h6mwAAANU"]
[Tue Mar 31 03:50:46.179687 2026] [:error] [pid 18439:tid 18456] [client 51.120.81.94:20089] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acrUFi-R9nOaA8Xqs7h6pQAAAMU"]
[Tue Mar 31 03:50:46.733991 2026] [:error] [pid 18334:tid 18415] [client 51.120.81.94:43001] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acrUFnqQrXLbk1cg3mgIDAAAAIk"]
[Tue Mar 31 03:50:47.271361 2026] [:error] [pid 18334:tid 18412] [client 51.120.81.94:64599] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acrUF3qQrXLbk1cg3mgIDgAAAIY"]
[Tue Mar 31 03:50:47.851585 2026] [:error] [pid 18334:tid 18419] [client 51.120.81.94:64607] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "acrUF3qQrXLbk1cg3mgIEwAAAI0"]
[Tue Mar 31 03:50:48.382928 2026] [:error] [pid 18332:tid 18348] [client 51.120.81.94:42986] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrUGL4KXr1F9raS5GR2AwAAAAA"]
[Tue Mar 31 03:50:48.962025 2026] [:error] [pid 18332:tid 18367] [client 51.120.81.94:11671] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrUGL4KXr1F9raS5GR2CgAAABM"]
[Tue Mar 31 03:50:49.488147 2026] [:error] [pid 18334:tid 18416] [client 51.120.81.94:65438] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrUGXqQrXLbk1cg3mgIGwAAAIo"]
[Tue Mar 31 03:50:50.112524 2026] [:error] [pid 18333:tid 18402] [client 51.120.81.94:64114] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrUGkSx2C5hLR0-8dK6EwAAAFc"]
[Tue Mar 31 03:50:50.654953 2026] [:error] [pid 18332:tid 18365] [client 51.120.81.94:42959] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "acrUGr4KXr1F9raS5GR2EwAAABE"]
[Tue Mar 31 03:50:51.396762 2026] [:error] [pid 18332:tid 18351] [client 51.120.81.94:64154] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "acrUG74KXr1F9raS5GR2FwAAAAM"]
[Tue Mar 31 03:50:52.114612 2026] [:error] [pid 18334:tid 18414] [client 51.120.81.94:64686] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "acrUHHqQrXLbk1cg3mgIKQAAAIg"]
[Tue Mar 31 03:50:52.656252 2026] [:error] [pid 18334:tid 18423] [client 51.120.81.94:65374] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "acrUHHqQrXLbk1cg3mgIMwAAAJE"]
[Tue Mar 31 03:50:53.239135 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:64162] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "acrUHS-R9nOaA8Xqs7h6rQAAAMI"]
[Tue Mar 31 03:50:53.859476 2026] [:error] [pid 18333:tid 18399] [client 51.120.81.94:11708] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "acrUHUSx2C5hLR0-8dK6JwAAAFQ"]
[Tue Mar 31 03:50:54.671728 2026] [:error] [pid 18439:tid 18466] [client 51.120.81.94:11677] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "acrUHi-R9nOaA8Xqs7h6tAAAAM8"]
[Tue Mar 31 03:50:55.277031 2026] [:error] [pid 18439:tid 18465] [client 51.120.81.94:65396] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "acrUHy-R9nOaA8Xqs7h6uAAAAM4"]
[Tue Mar 31 03:50:55.826192 2026] [:error] [pid 18334:tid 18422] [client 51.120.81.94:65434] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/varb.php"] [unique_id "acrUH3qQrXLbk1cg3mgIRQAAAJA"]
[Tue Mar 31 03:50:56.435540 2026] [:error] [pid 18439:tid 18474] [client 51.120.81.94:11683] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/varb.php"] [unique_id "acrUIC-R9nOaA8Xqs7h6vwAAANc"]
[Tue Mar 31 03:50:56.974225 2026] [:error] [pid 18439:tid 18457] [client 51.120.81.94:64668] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/varb.php"] [unique_id "acrUIC-R9nOaA8Xqs7h6wAAAAMY"]
[Tue Mar 31 03:50:57.502158 2026] [:error] [pid 18334:tid 18407] [client 51.120.81.94:42947] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/varb.php"] [unique_id "acrUIXqQrXLbk1cg3mgIRwAAAIE"]
[Tue Mar 31 03:50:58.050964 2026] [:error] [pid 18439:tid 18459] [client 51.120.81.94:65399] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acrUIi-R9nOaA8Xqs7h6xwAAAMg"]
[Tue Mar 31 03:50:58.642444 2026] [:error] [pid 18334:tid 18421] [client 51.120.81.94:63679] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acrUInqQrXLbk1cg3mgITwAAAI8"]
[Tue Mar 31 03:50:59.178026 2026] [:error] [pid 18334:tid 18414] [client 51.120.81.94:64601] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acrUI3qQrXLbk1cg3mgIUgAAAIg"]
[Tue Mar 31 03:50:59.734552 2026] [:error] [pid 18439:tid 18462] [client 51.120.81.94:65461] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "acrUIy-R9nOaA8Xqs7h60QAAAMs"]
[Tue Mar 31 03:51:00.281088 2026] [:error] [pid 18439:tid 18469] [client 51.120.81.94:64596] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "acrUJC-R9nOaA8Xqs7h61QAAANI"]
[Tue Mar 31 03:51:00.826161 2026] [:error] [pid 18439:tid 18453] [client 51.120.81.94:20079] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "acrUJC-R9nOaA8Xqs7h62gAAAMI"]
[Tue Mar 31 03:51:01.351729 2026] [:error] [pid 18333:tid 18403] [client 51.120.81.94:65402] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "acrUJUSx2C5hLR0-8dK6RAAAAFg"]
[Tue Mar 31 03:51:01.945958 2026] [:error] [pid 18439:tid 18475] [client 51.120.81.94:65388] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "acrUJS-R9nOaA8Xqs7h63gAAANg"]
[Tue Mar 31 03:51:02.494745 2026] [:error] [pid 18439:tid 18452] [client 51.120.81.94:65419] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acrUJi-R9nOaA8Xqs7h64wAAAME"]
[Tue Mar 31 03:51:03.038818 2026] [:error] [pid 18333:tid 18399] [client 51.120.81.94:64591] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acrUJ0Sx2C5hLR0-8dK6TAAAAFQ"]
[Tue Mar 31 03:51:03.577324 2026] [:error] [pid 18334:tid 18408] [client 51.120.81.94:42961] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acrUJ3qQrXLbk1cg3mgIXAAAAII"]
[Tue Mar 31 03:51:04.135727 2026] [:error] [pid 18333:tid 18393] [client 51.120.81.94:64157] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "acrUKESx2C5hLR0-8dK6WAAAAE4"]
[Tue Mar 31 03:51:04.657756 2026] [:error] [pid 18333:tid 18392] [client 51.120.81.94:42969] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acrUKESx2C5hLR0-8dK6XAAAAE0"]
[Tue Mar 31 03:51:05.205150 2026] [:error] [pid 18333:tid 18398] [client 51.120.81.94:42988] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acrUKUSx2C5hLR0-8dK6YAAAAFM"]
[Tue Mar 31 03:51:05.750659 2026] [:error] [pid 18334:tid 18421] [client 51.120.81.94:11700] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acrUKXqQrXLbk1cg3mgIYgAAAI8"]
[Tue Mar 31 03:51:06.288711 2026] [:error] [pid 18333:tid 18385] [client 51.120.81.94:65359] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "acrUKkSx2C5hLR0-8dK6YgAAAEY"]
[Tue Mar 31 03:51:06.831205 2026] [:error] [pid 18439:tid 18458] [client 51.120.81.94:64659] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acrUKi-R9nOaA8Xqs7h68QAAAMc"]
[Tue Mar 31 03:51:07.360624 2026] [:error] [pid 18332:tid 18367] [client 51.120.81.94:65407] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acrUK74KXr1F9raS5GR2JAAAABM"]
[Tue Mar 31 03:51:07.889754 2026] [:error] [pid 18332:tid 18369] [client 51.120.81.94:65371] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acrUK74KXr1F9raS5GR2KAAAABU"]
[Tue Mar 31 03:51:08.434126 2026] [:error] [pid 18439:tid 18461] [client 51.120.81.94:65414] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "acrULC-R9nOaA8Xqs7h6-wAAAMo"]
[Tue Mar 31 03:51:08.996858 2026] [:error] [pid 18439:tid 18471] [client 51.120.81.94:64111] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acrULC-R9nOaA8Xqs7h7AAAAANQ"]
[Tue Mar 31 03:51:09.548172 2026] [:error] [pid 18333:tid 18400] [client 51.120.81.94:11674] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acrULUSx2C5hLR0-8dK6aQAAAFU"]
[Tue Mar 31 03:51:10.113094 2026] [:error] [pid 18439:tid 18470] [client 51.120.81.94:42963] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acrULi-R9nOaA8Xqs7h7CQAAANM"]
[Tue Mar 31 03:51:10.641731 2026] [:error] [pid 18439:tid 18475] [client 51.120.81.94:64622] [client 51.120.81.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "acrULi-R9nOaA8Xqs7h7DgAAANg"]
[Tue Mar 31 09:23:15.565391 2026] [:error] [pid 36891:tid 36946] [client 20.208.32.234:32090] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "acsiA5JhiMaJUqoqfl49PwAAAFY"]
[Tue Mar 31 09:23:16.036607 2026] [:error] [pid 41421:tid 41444] [client 20.208.32.234:32115] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "acsiBBSaDjY9kKFtUQCATwAAARQ"]
[Tue Mar 31 09:23:16.507284 2026] [:error] [pid 36982:tid 36985] [client 20.208.32.234:32073] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "acsiBPlMmeoQKN0r_GOXXAAAAMA"]
[Tue Mar 31 09:23:16.989560 2026] [:error] [pid 36891:tid 36947] [client 20.208.32.234:20480] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "acsiBJJhiMaJUqoqfl49QQAAAFc"]
[Tue Mar 31 09:23:17.461040 2026] [:error] [pid 36890:tid 36906] [client 20.208.32.234:32127] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "acsiBZ8FASPd_uH8z7dZywAAAAs"]
[Tue Mar 31 09:23:17.930887 2026] [:error] [pid 36891:tid 36935] [client 20.208.32.234:20503] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "acsiBZJhiMaJUqoqfl49RAAAAEs"]
[Tue Mar 31 09:23:18.411490 2026] [:error] [pid 36982:tid 37007] [client 20.208.32.234:29378] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "acsiBvlMmeoQKN0r_GOXXgAAANY"]
[Tue Mar 31 09:23:18.884913 2026] [:error] [pid 41421:tid 41441] [client 20.208.32.234:32098] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "acsiBhSaDjY9kKFtUQCAWwAAARE"]
[Tue Mar 31 14:42:05.227932 2026] [:error] [pid 36890:tid 36916] [client 104.28.157.223:32391] [client 104.28.157.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "actsvZ8FASPd_uH8z7fKGAAAABU"]
[Tue Mar 31 19:56:06.648702 2026] [:error] [pid 36982:tid 37000] [client 37.19.220.57:25797] [client 37.19.220.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.220.57, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "acu2VvlMmeoQKN0r_GOmMAAAAM8"], referer: https://makifim.com.au/
[Tue Mar 31 19:56:13.197797 2026] [:error] [pid 6548:tid 6571] [client 37.19.220.57:17781] [client 37.19.220.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.220.57, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "acu2XbgIz9HgMl9YwE4wdgAAAVU"], referer: https://makifim.com.au/
[Wed Apr 01 03:18:31.073684 2026] [:error] [pid 52592:tid 52653] [client 89.184.221.113:41801] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acweBz-61iqkPKUhqlYJlAAAAAY"]
[Wed Apr 01 03:18:31.091180 2026] [:error] [pid 52836:tid 52897] [client 89.184.221.113:41043] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acweB5jk_YTY8bXnEz5_bwAAAEU"]
[Wed Apr 01 03:18:31.234796 2026] [:error] [pid 52836:tid 52896] [client 89.184.221.113:44487] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acweB5jk_YTY8bXnEz5_cQAAAEQ"]
[Wed Apr 01 03:18:31.525874 2026] [:error] [pid 52592:tid 52661] [client 89.184.221.113:39663] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acweBz-61iqkPKUhqlYJlgAAAA4"]
[Wed Apr 01 03:48:42.527203 2026] [proxy_fcgi:error] [pid 45611:tid 45627] [client 103.4.122.14:52024] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Apr 01 08:17:50.921827 2026] [:error] [pid 23714:tid 23736] [client 20.194.110.188:3278] [client 20.194.110.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "acxkLkHxDDU2ETcG9DQOjAAAAAI"]
[Wed Apr 01 08:17:51.469034 2026] [:error] [pid 24314:tid 24341] [client 20.194.110.188:4033] [client 20.194.110.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "acxkL5RF3FCzjmMUX5b5ZAAAARc"]
[Wed Apr 01 08:17:52.032465 2026] [:error] [pid 23714:tid 23738] [client 20.194.110.188:3416] [client 20.194.110.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "acxkMEHxDDU2ETcG9DQOnAAAAAQ"]
[Wed Apr 01 08:17:52.584789 2026] [:error] [pid 23714:tid 23756] [client 20.194.110.188:5454] [client 20.194.110.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "acxkMEHxDDU2ETcG9DQOowAAABY"]
[Wed Apr 01 09:26:44.866446 2026] [:error] [pid 23714:tid 23755] [client 158.158.49.164:13670] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-moonka.php"] [unique_id "acx0VEHxDDU2ETcG9DRF9QAAABU"]
[Wed Apr 01 09:26:45.343661 2026] [:error] [pid 24348:tid 24398] [client 158.158.49.164:13677] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-moonka.php"] [unique_id "acx0VW0Vs69Y5nF1HA8VdwAAAZM"]
[Wed Apr 01 09:26:45.827371 2026] [:error] [pid 23819:tid 23824] [client 158.158.49.164:64646] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-thi.php"] [unique_id "acx0VddfUS_37wFAM74LkwAAAMI"]
[Wed Apr 01 09:26:46.304473 2026] [:error] [pid 24346:tid 24364] [client 158.158.49.164:16633] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-thi.php"] [unique_id "acx0Vrc1l8kg9MhGHIKzRwAAAUw"]
[Wed Apr 01 09:26:46.860110 2026] [:error] [pid 23819:tid 23828] [client 158.158.49.164:14158] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-thi.php"] [unique_id "acx0VtdfUS_37wFAM74LmAAAAMY"]
[Wed Apr 01 09:26:47.343397 2026] [:error] [pid 23715:tid 23777] [client 158.158.49.164:16603] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-thi.php"] [unique_id "acx0V6-REzOruNbiT9yRAgAAAFA"]
[Wed Apr 01 09:26:47.821995 2026] [:error] [pid 23819:tid 23823] [client 158.158.49.164:13657] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "acx0V9dfUS_37wFAM74LmQAAAME"]
[Wed Apr 01 09:26:48.374713 2026] [:error] [pid 23714:tid 23751] [client 158.158.49.164:64678] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "acx0WEHxDDU2ETcG9DRF9wAAABE"]
[Wed Apr 01 09:26:48.853245 2026] [:error] [pid 23715:tid 23776] [client 158.158.49.164:13674] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "acx0WK-REzOruNbiT9yRBgAAAE8"]
[Wed Apr 01 09:26:49.332615 2026] [:error] [pid 23716:tid 23807] [client 158.158.49.164:13643] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "acx0WXVtFUg_mx-RYb6YFwAAAJM"]
[Wed Apr 01 09:26:49.882560 2026] [:error] [pid 23819:tid 23834] [client 158.158.49.164:64641] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "acx0WddfUS_37wFAM74LngAAAMw"]
[Wed Apr 01 09:26:50.365731 2026] [:error] [pid 23819:tid 23837] [client 158.158.49.164:14163] [client 158.158.49.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "acx0WtdfUS_37wFAM74LoAAAAM8"]
[Wed Apr 01 13:38:13.763002 2026] [:error] [pid 36754:tid 36826] [client 84.247.168.251:49401] [client 84.247.168.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.168.251, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "acyvRWpnvhnBglC7YoYmrgAAAws"]
[Wed Apr 01 13:56:36.356009 2026] [:error] [pid 8908:tid 8913] [client 20.116.48.67:30679] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acyzlPkmxtJXGnLdvgCxsgAAAIA"]
[Wed Apr 01 13:56:40.253321 2026] [:error] [pid 8995:tid 9015] [client 20.116.48.67:30610] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acyzmOonaBjs3qxcRecSSwAAABE"]
[Wed Apr 01 13:56:44.365961 2026] [:error] [pid 8909:tid 8962] [client 20.116.48.67:30692] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acyznDvP_a0662gDl6Cs0wAAANU"]
[Wed Apr 01 13:56:46.363837 2026] [:error] [pid 8995:tid 8999] [client 20.116.48.67:30611] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acyznuonaBjs3qxcRecSZwAAAAE"]
[Wed Apr 01 20:17:39.696900 2026] [:error] [pid 8909:tid 8964] [client 74.248.17.99:27370] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws42.php"] [unique_id "ac0M4zvP_a0662gDl6CfggAAANc"]
[Wed Apr 01 20:18:22.686992 2026] [:error] [pid 62559:tid 62577] [client 74.248.17.99:60416] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac0NDi7NKI8IaNKZFIeNoQAAAVA"]
[Wed Apr 01 20:18:23.397765 2026] [:error] [pid 8908:tid 8935] [client 74.248.17.99:45804] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac0ND_kmxtJXGnLdvgB0TQAAAJY"]
[Wed Apr 01 20:18:25.549611 2026] [:error] [pid 62559:tid 62562] [client 74.248.17.99:20616] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac0NES7NKI8IaNKZFIeNrAAAAUE"]
[Wed Apr 01 20:18:27.187800 2026] [:error] [pid 17856:tid 17861] [client 74.248.17.99:20666] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac0NEz7Idlm5j9frhqQStAAAAEM"]
[Wed Apr 01 20:18:28.052686 2026] [:error] [pid 8908:tid 8922] [client 74.248.17.99:34148] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "ac0NFPkmxtJXGnLdvgB0WgAAAIk"]
[Wed Apr 01 20:18:28.795939 2026] [:error] [pid 8908:tid 8936] [client 74.248.17.99:45823] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "ac0NFPkmxtJXGnLdvgB0YQAAAJc"]
[Wed Apr 01 20:18:29.474152 2026] [:error] [pid 8995:tid 8998] [client 74.248.17.99:60445] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "ac0NFeonaBjs3qxcRee6cAAAAAA"]
[Wed Apr 01 20:18:30.857260 2026] [:error] [pid 62559:tid 62566] [client 74.248.17.99:35117] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "ac0NFi7NKI8IaNKZFIeNuwAAAUU"]
[Wed Apr 01 20:18:31.867449 2026] [:error] [pid 8909:tid 8961] [client 74.248.17.99:35121] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "ac0NFzvP_a0662gDl6Cf6QAAANQ"]
[Wed Apr 01 20:18:32.915012 2026] [:error] [pid 8909:tid 8949] [client 74.248.17.99:34144] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "ac0NGDvP_a0662gDl6Cf7gAAAMg"]
[Wed Apr 01 20:18:34.266942 2026] [:error] [pid 8908:tid 8931] [client 74.248.17.99:39277] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "ac0NGvkmxtJXGnLdvgB0ZwAAAJI"]
[Wed Apr 01 20:18:35.059877 2026] [:error] [pid 8909:tid 8954] [client 74.248.17.99:17592] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/north1.php"] [unique_id "ac0NGzvP_a0662gDl6Cf-AAAAM0"]
[Wed Apr 01 20:18:36.188431 2026] [:error] [pid 62559:tid 62577] [client 74.248.17.99:34155] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eee.php"] [unique_id "ac0NHC7NKI8IaNKZFIeNxAAAAVA"]
[Wed Apr 01 20:19:27.277713 2026] [:error] [pid 8909:tid 8962] [client 74.248.17.99:3919] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "ac0NTzvP_a0662gDl6ChPwAAANU"]
[Wed Apr 01 20:19:28.515379 2026] [:error] [pid 17856:tid 17865] [client 74.248.17.99:43264] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "ac0NUD7Idlm5j9frhqQTPgAAAEc"]
[Wed Apr 01 20:19:30.906003 2026] [:error] [pid 62559:tid 62568] [client 74.248.17.99:39770] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "ac0NUi7NKI8IaNKZFIeOKwAAAUc"]
[Wed Apr 01 20:19:32.185485 2026] [:error] [pid 62559:tid 62562] [client 74.248.17.99:43316] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "ac0NVC7NKI8IaNKZFIeOMAAAAUE"]
[Wed Apr 01 20:19:33.844254 2026] [:error] [pid 8910:tid 8985] [client 74.248.17.99:15579] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0NVaJZINUcF3tYgExWcQAAARE"]
[Wed Apr 01 20:19:35.493679 2026] [:error] [pid 8909:tid 8958] [client 74.248.17.99:46258] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0NVzvP_a0662gDl6ChdAAAANE"]
[Wed Apr 01 20:19:36.289446 2026] [:error] [pid 17856:tid 17861] [client 74.248.17.99:52968] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0NWD7Idlm5j9frhqQTSwAAAEM"]
[Wed Apr 01 20:19:37.474492 2026] [:error] [pid 62559:tid 62568] [client 74.248.17.99:43283] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0NWS7NKI8IaNKZFIeOOQAAAUc"]
[Wed Apr 01 20:19:38.459856 2026] [:error] [pid 8909:tid 8949] [client 74.248.17.99:15080] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sql.php"] [unique_id "ac0NWjvP_a0662gDl6ChkQAAAMg"]
[Wed Apr 01 20:19:40.346907 2026] [:error] [pid 8995:tid 9011] [client 74.248.17.99:17040] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sql.php"] [unique_id "ac0NXOonaBjs3qxcRee6ygAAAA0"]
[Wed Apr 01 20:19:42.455296 2026] [:error] [pid 8995:tid 9002] [client 74.248.17.99:63041] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sql.php"] [unique_id "ac0NXuonaBjs3qxcRee6zQAAAAQ"]
[Wed Apr 01 20:19:43.620479 2026] [:error] [pid 8909:tid 8944] [client 74.248.17.99:12471] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sql.php"] [unique_id "ac0NXzvP_a0662gDl6ChuAAAAMM"]
[Wed Apr 01 20:19:44.683361 2026] [:error] [pid 8910:tid 8986] [client 74.248.17.99:56335] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "ac0NYKJZINUcF3tYgExWegAAARI"]
[Wed Apr 01 20:19:45.519921 2026] [:error] [pid 8909:tid 8944] [client 74.248.17.99:12475] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "ac0NYTvP_a0662gDl6ChxgAAAMM"]
[Wed Apr 01 20:19:46.467394 2026] [:error] [pid 8908:tid 8935] [client 74.248.17.99:56333] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "ac0NYvkmxtJXGnLdvgB1JwAAAJY"]
[Wed Apr 01 20:19:47.468929 2026] [:error] [pid 8908:tid 8937] [client 74.248.17.99:43304] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "ac0NY_kmxtJXGnLdvgB1KwAAAJg"]
[Wed Apr 01 20:19:48.906605 2026] [:error] [pid 17856:tid 17860] [client 74.248.17.99:24823] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "ac0NZD7Idlm5j9frhqQTYQAAAEI"]
[Wed Apr 01 20:19:50.176453 2026] [:error] [pid 17856:tid 17866] [client 74.248.17.99:15594] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "ac0NZj7Idlm5j9frhqQTYwAAAEg"]
[Wed Apr 01 20:19:51.058602 2026] [:error] [pid 8995:tid 9003] [client 74.248.17.99:32114] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "ac0NZ-onaBjs3qxcRee61gAAAAU"]
[Wed Apr 01 20:19:52.096459 2026] [:error] [pid 8909:tid 8963] [client 74.248.17.99:3336] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "ac0NaDvP_a0662gDl6Ch9gAAANY"]
[Wed Apr 01 20:19:52.933514 2026] [:error] [pid 8909:tid 8953] [client 74.248.17.99:37146] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ac0NaDvP_a0662gDl6Ch-AAAAMw"]
[Wed Apr 01 20:19:53.981707 2026] [:error] [pid 8995:tid 9019] [client 74.248.17.99:18665] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ac0NaeonaBjs3qxcRee62gAAABU"]
[Wed Apr 01 20:19:56.462502 2026] [:error] [pid 62559:tid 62564] [client 74.248.17.99:3341] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ac0NbC7NKI8IaNKZFIeOSQAAAUM"]
[Wed Apr 01 20:19:58.659943 2026] [:error] [pid 62559:tid 62585] [client 74.248.17.99:39193] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ac0Nbi7NKI8IaNKZFIeOTQAAAVg"]
[Wed Apr 01 20:19:59.985108 2026] [:error] [pid 8909:tid 8949] [client 74.248.17.99:32073] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "ac0NbzvP_a0662gDl6CiGQAAAMg"]
[Wed Apr 01 20:20:02.475458 2026] [:error] [pid 8908:tid 8931] [client 74.248.17.99:27297] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "ac0NcvkmxtJXGnLdvgB1MwAAAJI"]
[Wed Apr 01 20:20:03.366921 2026] [:error] [pid 62559:tid 62572] [client 74.248.17.99:46241] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "ac0Ncy7NKI8IaNKZFIeOUQAAAUs"]
[Wed Apr 01 20:20:04.467002 2026] [:error] [pid 8909:tid 8955] [client 74.248.17.99:16017] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "ac0NdDvP_a0662gDl6CiRwAAAM4"]
[Wed Apr 01 20:20:05.980598 2026] [:error] [pid 8908:tid 8918] [client 74.248.17.99:15054] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uang.php"] [unique_id "ac0NdfkmxtJXGnLdvgB1OgAAAIU"]
[Wed Apr 01 20:20:06.590866 2026] [:error] [pid 8908:tid 8932] [client 74.248.17.99:37796] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uang.php"] [unique_id "ac0NdvkmxtJXGnLdvgB1PwAAAJM"]
[Wed Apr 01 20:20:07.757156 2026] [:error] [pid 17856:tid 17867] [client 74.248.17.99:39769] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uang.php"] [unique_id "ac0Ndz7Idlm5j9frhqQTlwAAAEk"]
[Wed Apr 01 20:20:08.801429 2026] [:error] [pid 62559:tid 62564] [client 74.248.17.99:39760] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uang.php"] [unique_id "ac0NeC7NKI8IaNKZFIeOVQAAAUM"]
[Wed Apr 01 20:20:10.908087 2026] [:error] [pid 8910:tid 8969] [client 74.248.17.99:13026] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "ac0NeqJZINUcF3tYgExWmgAAAQE"]
[Wed Apr 01 20:20:11.720553 2026] [:error] [pid 17856:tid 17878] [client 74.248.17.99:24277] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "ac0Nez7Idlm5j9frhqQTmgAAAFQ"]
[Wed Apr 01 20:20:13.113905 2026] [:error] [pid 62559:tid 62569] [client 74.248.17.99:41772] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "ac0NfS7NKI8IaNKZFIeOYgAAAUg"]
[Wed Apr 01 20:20:14.591896 2026] [:error] [pid 8995:tid 9011] [client 74.248.17.99:45711] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/save.php"] [unique_id "ac0NfuonaBjs3qxcRee65QAAAA0"]
[Wed Apr 01 20:20:17.211402 2026] [:error] [pid 17856:tid 17869] [client 74.248.17.99:44162] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "ac0NgT7Idlm5j9frhqQTrQAAAEs"]
[Wed Apr 01 20:21:42.857754 2026] [:error] [pid 17856:tid 17881] [client 74.248.17.99:24217] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shellerr.php"] [unique_id "ac0N1j7Idlm5j9frhqQUdwAAAFc"]
[Wed Apr 01 20:21:43.958744 2026] [:error] [pid 8908:tid 8930] [client 74.248.17.99:43343] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shellerr.php"] [unique_id "ac0N1_kmxtJXGnLdvgB16AAAAJE"]
[Wed Apr 01 20:21:44.973190 2026] [:error] [pid 8910:tid 8970] [client 74.248.17.99:34583] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shellerr.php"] [unique_id "ac0N2KJZINUcF3tYgExW_gAAAQI"]
[Wed Apr 01 20:21:45.730572 2026] [:error] [pid 8909:tid 8949] [client 74.248.17.99:60164] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shellerr.php"] [unique_id "ac0N2TvP_a0662gDl6CjjgAAAMg"]
[Wed Apr 01 20:21:46.835433 2026] [:error] [pid 8995:tid 9016] [client 74.248.17.99:33129] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0N2uonaBjs3qxcRee7WgAAABI"]
[Wed Apr 01 20:21:47.435761 2026] [:error] [pid 8909:tid 8954] [client 74.248.17.99:44673] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0N2zvP_a0662gDl6CjkQAAAM0"]
[Wed Apr 01 20:21:48.462909 2026] [:error] [pid 8909:tid 8948] [client 74.248.17.99:40260] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0N3DvP_a0662gDl6CjmQAAAMc"]
[Wed Apr 01 20:21:49.480608 2026] [:error] [pid 8909:tid 8955] [client 74.248.17.99:60560] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0N3TvP_a0662gDl6CjowAAAM4"]
[Wed Apr 01 20:21:50.668085 2026] [:error] [pid 62559:tid 62569] [client 74.248.17.99:44731] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "ac0N3i7NKI8IaNKZFIePIAAAAUg"]
[Wed Apr 01 20:21:51.549458 2026] [:error] [pid 8910:tid 8985] [client 74.248.17.99:29487] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "ac0N36JZINUcF3tYgExXBgAAARE"]
[Wed Apr 01 20:21:52.381490 2026] [:error] [pid 62559:tid 62578] [client 74.248.17.99:34590] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "ac0N4C7NKI8IaNKZFIePJAAAAVE"]
[Wed Apr 01 20:21:53.539168 2026] [:error] [pid 62559:tid 62581] [client 74.248.17.99:36623] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "ac0N4S7NKI8IaNKZFIePKQAAAVQ"]
[Wed Apr 01 20:21:54.894343 2026] [:error] [pid 17856:tid 17874] [client 74.248.17.99:60131] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac0N4j7Idlm5j9frhqQUeQAAAFA"]
[Wed Apr 01 20:21:55.813442 2026] [:error] [pid 62559:tid 62578] [client 74.248.17.99:34053] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac0N4y7NKI8IaNKZFIePMgAAAVE"]
[Wed Apr 01 20:21:56.576255 2026] [:error] [pid 8909:tid 8949] [client 74.248.17.99:60345] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac0N5DvP_a0662gDl6CjuAAAAMg"]
[Wed Apr 01 20:21:57.400450 2026] [:error] [pid 8910:tid 8982] [client 74.248.17.99:27913] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac0N5aJZINUcF3tYgExXDwAAAQ4"]
[Wed Apr 01 20:21:58.483467 2026] [:error] [pid 8908:tid 8914] [client 74.248.17.99:60607] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac0N5vkmxtJXGnLdvgB2AwAAAIE"]
[Wed Apr 01 20:21:59.617566 2026] [:error] [pid 8908:tid 8928] [client 74.248.17.99:27943] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac0N5_kmxtJXGnLdvgB2BgAAAI8"]
[Wed Apr 01 20:22:01.001033 2026] [:error] [pid 8995:tid 8999] [client 74.248.17.99:29480] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac0N6OonaBjs3qxcRee7ZwAAAAE"]
[Wed Apr 01 20:22:02.006622 2026] [:error] [pid 8908:tid 8914] [client 74.248.17.99:36670] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac0N6vkmxtJXGnLdvgB2CwAAAIE"]
[Wed Apr 01 20:22:03.120221 2026] [:error] [pid 62559:tid 62567] [client 74.248.17.99:54490] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "ac0N6y7NKI8IaNKZFIePPQAAAUY"]
[Wed Apr 01 20:22:04.905553 2026] [:error] [pid 17856:tid 17874] [client 74.248.17.99:34091] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "ac0N7D7Idlm5j9frhqQUhgAAAFA"]
[Wed Apr 01 20:22:05.922035 2026] [:error] [pid 8909:tid 8948] [client 74.248.17.99:60343] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "ac0N7TvP_a0662gDl6Cj1QAAAMc"]
[Wed Apr 01 20:22:06.994645 2026] [:error] [pid 8909:tid 8964] [client 74.248.17.99:53473] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ant.php"] [unique_id "ac0N7jvP_a0662gDl6Cj3AAAANc"]
[Wed Apr 01 20:22:08.090933 2026] [:error] [pid 8909:tid 8947] [client 74.248.17.99:59697] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "ac0N8DvP_a0662gDl6Cj5gAAAMY"]
[Wed Apr 01 20:22:09.028161 2026] [:error] [pid 8909:tid 8960] [client 74.248.17.99:31037] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "ac0N8TvP_a0662gDl6Cj7wAAANM"]
[Wed Apr 01 20:22:09.718312 2026] [:error] [pid 8909:tid 8953] [client 74.248.17.99:27951] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "ac0N8TvP_a0662gDl6Cj8gAAAMw"]
[Wed Apr 01 20:22:10.741592 2026] [:error] [pid 17856:tid 17866] [client 74.248.17.99:54513] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "ac0N8j7Idlm5j9frhqQUiAAAAEg"]
[Wed Apr 01 20:22:11.767082 2026] [:error] [pid 8995:tid 9003] [client 74.248.17.99:21728] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "ac0N8-onaBjs3qxcRee7bAAAAAU"]
[Wed Apr 01 20:22:12.730367 2026] [:error] [pid 8908:tid 8914] [client 74.248.17.99:36635] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "ac0N9PkmxtJXGnLdvgB2FgAAAIE"]
[Wed Apr 01 20:22:13.500747 2026] [:error] [pid 17856:tid 17860] [client 74.248.17.99:22169] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "ac0N9T7Idlm5j9frhqQUjwAAAEI"]
[Wed Apr 01 20:22:14.763751 2026] [:error] [pid 8908:tid 8935] [client 74.248.17.99:59667] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "ac0N9vkmxtJXGnLdvgB2IgAAAJY"]
[Wed Apr 01 20:22:15.554622 2026] [:error] [pid 62559:tid 62562] [client 74.248.17.99:31611] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "ac0N9y7NKI8IaNKZFIePUAAAAUE"]
[Wed Apr 01 20:22:16.818918 2026] [:error] [pid 62559:tid 62582] [client 74.248.17.99:21695] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "ac0N-C7NKI8IaNKZFIePUgAAAVU"]
[Wed Apr 01 20:22:17.885039 2026] [:error] [pid 62559:tid 62567] [client 74.248.17.99:42342] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "ac0N-S7NKI8IaNKZFIePVAAAAUY"]
[Wed Apr 01 20:22:19.010172 2026] [:error] [pid 8995:tid 9017] [client 74.248.17.99:42357] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "ac0N--onaBjs3qxcRee7ewAAABM"]
[Wed Apr 01 20:22:19.775993 2026] [:error] [pid 8909:tid 8954] [client 74.248.17.99:21633] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "ac0N-zvP_a0662gDl6CkDAAAAM0"]
[Wed Apr 01 20:22:21.292114 2026] [:error] [pid 8909:tid 8959] [client 74.248.17.99:21714] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "ac0N_TvP_a0662gDl6CkHQAAANI"]
[Wed Apr 01 20:22:22.073309 2026] [:error] [pid 8909:tid 8949] [client 74.248.17.99:55453] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "ac0N_jvP_a0662gDl6CkJwAAAMg"]
[Wed Apr 01 20:22:23.073963 2026] [:error] [pid 8909:tid 8953] [client 74.248.17.99:37840] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classgoto24.php"] [unique_id "ac0N_zvP_a0662gDl6CkMAAAAMw"]
[Wed Apr 01 20:22:24.078274 2026] [:error] [pid 17856:tid 17873] [client 74.248.17.99:51903] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "ac0OAD7Idlm5j9frhqQUngAAAE8"]
[Wed Apr 01 20:22:25.355998 2026] [:error] [pid 8995:tid 9014] [client 74.248.17.99:54443] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "ac0OAeonaBjs3qxcRee7gwAAABA"]
[Wed Apr 01 20:22:26.464023 2026] [:error] [pid 8908:tid 8923] [client 74.248.17.99:44688] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "ac0OAvkmxtJXGnLdvgB2NgAAAIo"]
[Wed Apr 01 20:22:28.541543 2026] [:error] [pid 8995:tid 9022] [client 74.248.17.99:36140] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "ac0OBOonaBjs3qxcRee7lAAAABg"]
[Wed Apr 01 20:22:29.715384 2026] [:error] [pid 17856:tid 17870] [client 74.248.17.99:27333] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "ac0OBT7Idlm5j9frhqQUrQAAAEw"]
[Wed Apr 01 20:22:30.461736 2026] [:error] [pid 8909:tid 8964] [client 74.248.17.99:21636] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "ac0OBjvP_a0662gDl6CkQAAAANc"]
[Wed Apr 01 20:22:31.574748 2026] [:error] [pid 62559:tid 62572] [client 74.248.17.99:36660] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "ac0OBy7NKI8IaNKZFIePaAAAAUs"]
[Wed Apr 01 20:22:35.150195 2026] [:error] [pid 17856:tid 17879] [client 74.248.17.99:14508] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws43.php"] [unique_id "ac0OCz7Idlm5j9frhqQUuwAAAFU"]
[Wed Apr 01 20:24:53.238192 2026] [:error] [pid 8910:tid 8989] [client 74.248.17.99:60461] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "ac0OlaJZINUcF3tYgExXmgAAARU"]
[Wed Apr 01 20:24:54.944650 2026] [:error] [pid 8910:tid 8975] [client 74.248.17.99:30030] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "ac0OlqJZINUcF3tYgExXmwAAAQc"]
[Wed Apr 01 20:24:57.064137 2026] [:error] [pid 17856:tid 17869] [client 74.248.17.99:20644] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "ac0OmT7Idlm5j9frhqQWugAAAEs"]
[Wed Apr 01 20:24:59.433341 2026] [:error] [pid 8909:tid 8952] [client 74.248.17.99:50913] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v.php"] [unique_id "ac0OmzvP_a0662gDl6CmKwAAAMs"]
[Wed Apr 01 20:25:00.805128 2026] [:error] [pid 8908:tid 8923] [client 74.248.17.99:20657] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "ac0OnPkmxtJXGnLdvgB3TwAAAIo"]
[Wed Apr 01 20:25:03.807256 2026] [:error] [pid 17856:tid 17882] [client 74.248.17.99:54933] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "ac0Onz7Idlm5j9frhqQW1wAAAFg"]
[Wed Apr 01 20:25:05.773918 2026] [:error] [pid 17856:tid 17864] [client 74.248.17.99:30532] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "ac0OoT7Idlm5j9frhqQW2wAAAEY"]
[Wed Apr 01 20:25:07.707500 2026] [:error] [pid 17856:tid 17864] [client 74.248.17.99:46219] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d2.php"] [unique_id "ac0Ooz7Idlm5j9frhqQW5wAAAEY"]
[Wed Apr 01 20:25:09.399810 2026] [:error] [pid 8995:tid 9020] [client 74.248.17.99:39254] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xc.php"] [unique_id "ac0OpeonaBjs3qxcRee8SwAAABY"]
[Wed Apr 01 20:25:10.930577 2026] [:error] [pid 8908:tid 8924] [client 74.248.17.99:54982] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xc.php"] [unique_id "ac0OpvkmxtJXGnLdvgB3WAAAAIs"]
[Wed Apr 01 20:25:12.283911 2026] [:error] [pid 17856:tid 17862] [client 74.248.17.99:53985] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xc.php"] [unique_id "ac0OqD7Idlm5j9frhqQW-AAAAEQ"]
[Wed Apr 01 20:25:13.798543 2026] [:error] [pid 8909:tid 8957] [client 74.248.17.99:48275] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xc.php"] [unique_id "ac0OqTvP_a0662gDl6CmUAAAANA"]
[Wed Apr 01 20:25:15.084958 2026] [:error] [pid 17856:tid 17870] [client 74.248.17.99:48852] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "ac0Oqz7Idlm5j9frhqQW_wAAAEw"]
[Wed Apr 01 20:25:15.991711 2026] [:error] [pid 8909:tid 8958] [client 74.248.17.99:3947] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "ac0OqzvP_a0662gDl6CmVAAAANE"]
[Wed Apr 01 20:25:18.627866 2026] [:error] [pid 8909:tid 8952] [client 74.248.17.99:52922] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "ac0OrjvP_a0662gDl6CmZQAAAMs"]
[Wed Apr 01 20:25:20.665937 2026] [:error] [pid 8908:tid 8930] [client 74.248.17.99:3704] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "ac0OsPkmxtJXGnLdvgB3agAAAJE"]
[Wed Apr 01 20:25:21.862514 2026] [:error] [pid 17856:tid 17876] [client 74.248.17.99:26289] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "ac0OsT7Idlm5j9frhqQXGwAAAFI"]
[Wed Apr 01 20:25:22.817769 2026] [:error] [pid 17856:tid 17873] [client 74.248.17.99:48290] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "ac0Osj7Idlm5j9frhqQXIgAAAE8"]
[Wed Apr 01 20:25:24.684496 2026] [:error] [pid 8909:tid 8952] [client 74.248.17.99:3284] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "ac0OtDvP_a0662gDl6CmeQAAAMs"]
[Wed Apr 01 20:25:26.232220 2026] [:error] [pid 8910:tid 8991] [client 74.248.17.99:54976] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gmo.php"] [unique_id "ac0OtqJZINUcF3tYgExXqQAAARc"]
[Wed Apr 01 20:25:27.408636 2026] [:error] [pid 17856:tid 17880] [client 74.248.17.99:21169] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ac0Otz7Idlm5j9frhqQXMwAAAFY"]
[Wed Apr 01 20:25:28.309350 2026] [:error] [pid 8909:tid 8957] [client 74.248.17.99:18136] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ac0OuDvP_a0662gDl6CmlwAAANA"]
[Wed Apr 01 20:25:31.422908 2026] [:error] [pid 8910:tid 8979] [client 74.248.17.99:21141] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ac0Ou6JZINUcF3tYgExXrQAAAQs"]
[Wed Apr 01 20:25:33.103488 2026] [:error] [pid 8910:tid 8976] [client 74.248.17.99:25813] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ac0OvaJZINUcF3tYgExXtAAAAQg"]
[Wed Apr 01 20:25:34.705367 2026] [:error] [pid 8909:tid 8950] [client 74.248.17.99:34682] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/20.php"] [unique_id "ac0OvjvP_a0662gDl6CmrAAAAMk"]
[Wed Apr 01 20:25:36.460529 2026] [:error] [pid 8908:tid 8918] [client 74.248.17.99:52916] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/20.php"] [unique_id "ac0OwPkmxtJXGnLdvgB3dwAAAIU"]
[Wed Apr 01 20:25:37.760361 2026] [:error] [pid 17856:tid 17867] [client 74.248.17.99:24816] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/20.php"] [unique_id "ac0OwT7Idlm5j9frhqQX6wAAAEk"]
[Wed Apr 01 20:25:39.996779 2026] [:error] [pid 62559:tid 62572] [client 74.248.17.99:12417] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/20.php"] [unique_id "ac0Owy7NKI8IaNKZFIeQkQAAAUs"]
[Wed Apr 01 20:25:41.589206 2026] [:error] [pid 8908:tid 8936] [client 74.248.17.99:24804] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ac0OxfkmxtJXGnLdvgB3fgAAAJc"]
[Wed Apr 01 20:25:42.753488 2026] [:error] [pid 8908:tid 8921] [client 74.248.17.99:51402] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ac0OxvkmxtJXGnLdvgB3gAAAAIg"]
[Wed Apr 01 20:25:44.299698 2026] [:error] [pid 8995:tid 9000] [client 74.248.17.99:43304] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ac0OyOonaBjs3qxcRee8bgAAAAI"]
[Wed Apr 01 20:25:47.155411 2026] [:error] [pid 8908:tid 8922] [client 74.248.17.99:40803] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ac0Oy_kmxtJXGnLdvgB3jgAAAIk"]
[Wed Apr 01 21:16:44.404967 2026] [autoindex:error] [pid 17856:tid 17882] [client 159.65.158.245:54736] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Apr 01 23:27:44.377504 2026] [:error] [pid 8908:tid 8914] [client 194.26.192.92:52806] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac05cPkmxtJXGnLdvgDTyQAAAIE"]
[Wed Apr 01 23:27:44.865085 2026] [:error] [pid 8909:tid 8944] [client 194.26.192.92:52835] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac05cDvP_a0662gDl6ASrQAAAMM"]
[Wed Apr 01 23:27:45.347831 2026] [:error] [pid 8908:tid 8920] [client 194.26.192.92:52889] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac05cfkmxtJXGnLdvgDTzgAAAIc"]
[Wed Apr 01 23:27:47.487489 2026] [:error] [pid 17856:tid 17868] [client 194.26.192.92:53115] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac05cz7Idlm5j9frhqR-CQAAAEo"]
[Thu Apr 02 00:55:13.559497 2026] [autoindex:error] [pid 16761:tid 16782] [client 193.37.32.178:65465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:55:13.661173 2026] [:error] [pid 16761:tid 16766] [client 193.37.32.178:65465] [client 193.37.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "ac1N8d4bJXDGRqKZnzwQfwAAAEI"]
[Thu Apr 02 00:55:17.512625 2026] [:error] [pid 8035:tid 8061] [client 193.37.32.213:51593] [client 193.37.32.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/header.php"] [unique_id "ac1N9QY2zflwGmvw_QbYHQAAAJU"]
[Thu Apr 02 00:55:17.711247 2026] [:error] [pid 8035:tid 8044] [client 193.37.32.212:25857] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "ac1N9QY2zflwGmvw_QbYIAAAAIQ"]
[Thu Apr 02 00:55:25.529372 2026] [:error] [pid 8036:tid 8101] [client 193.37.32.189:28837] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ac1N_UMvKg9PFa_VV4zU5gAAANc"]
[Thu Apr 02 00:55:34.891192 2026] [:error] [pid 8036:tid 8079] [client 193.37.32.205:62585] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "ac1OBkMvKg9PFa_VV4zU9gAAAMM"]
[Thu Apr 02 00:55:40.099533 2026] [:error] [pid 8037:tid 8122] [client 193.37.32.205:39985] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "ac1ODIGD8ox-W9jHVfC3jgAAAQ4"]
[Thu Apr 02 00:55:56.004447 2026] [:error] [pid 16761:tid 16768] [client 193.37.32.195:51647] [client 193.37.32.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "ac1OHN4bJXDGRqKZnzwRAgAAAEQ"]
[Thu Apr 02 00:56:01.358845 2026] [autoindex:error] [pid 16761:tid 16777] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:56:05.677047 2026] [autoindex:error] [pid 16761:tid 16770] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:56:05.787709 2026] [autoindex:error] [pid 16761:tid 16772] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:56:51.038538 2026] [:error] [pid 16761:tid 16769] [client 193.37.32.181:27961] [client 193.37.32.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ac1OU94bJXDGRqKZnzwRyAAAAEU"], referer: http://makifim.com.au/about.php
[Thu Apr 02 00:56:53.448174 2026] [autoindex:error] [pid 16761:tid 16765] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:56:53.557391 2026] [autoindex:error] [pid 16761:tid 16775] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:56:53.781399 2026] [autoindex:error] [pid 16761:tid 16776] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/block-library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:56:57.707018 2026] [autoindex:error] [pid 16761:tid 16784] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:01.461939 2026] [autoindex:error] [pid 16761:tid 16769] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:09.011102 2026] [autoindex:error] [pid 16761:tid 16788] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:18.110841 2026] [autoindex:error] [pid 16761:tid 16784] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:18.219725 2026] [autoindex:error] [pid 16761:tid 16778] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/mediaelement/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:18.339092 2026] [autoindex:error] [pid 16761:tid 16771] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:18.453457 2026] [autoindex:error] [pid 16761:tid 16779] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:18.563877 2026] [autoindex:error] [pid 16761:tid 16788] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:18.675451 2026] [autoindex:error] [pid 16761:tid 16783] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:18.894024 2026] [autoindex:error] [pid 16761:tid 16766] [client 193.37.32.189:64749] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:30.917250 2026] [:error] [pid 16761:tid 16784] [client 193.37.32.189:64749] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ac1Oet4bJXDGRqKZnzwSTgAAAFQ"]
[Thu Apr 02 00:57:31.153510 2026] [autoindex:error] [pid 8037:tid 8115] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:36.271065 2026] [autoindex:error] [pid 8037:tid 8110] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/src/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:40.270761 2026] [autoindex:error] [pid 8037:tid 8125] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:40.379846 2026] [autoindex:error] [pid 8037:tid 8130] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/comment-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:51.283528 2026] [autoindex:error] [pid 8037:tid 8109] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/nextpage/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:56.228126 2026] [autoindex:error] [pid 8037:tid 8121] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:57:59.916585 2026] [autoindex:error] [pid 8037:tid 8110] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:00.028833 2026] [autoindex:error] [pid 8037:tid 8117] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/image/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:03.788695 2026] [autoindex:error] [pid 8037:tid 8121] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:03.900697 2026] [autoindex:error] [pid 8037:tid 8114] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:04.114719 2026] [autoindex:error] [pid 8037:tid 8124] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:07.815768 2026] [autoindex:error] [pid 8037:tid 8130] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:11.831048 2026] [autoindex:error] [pid 8037:tid 8118] [client 193.37.32.194:52031] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-comments-form/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:19.329478 2026] [:error] [pid 8037:tid 8120] [client 193.37.32.194:52031] [client 193.37.32.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "ac1Oq4GD8ox-W9jHVfC4sgAAAQw"]
[Thu Apr 02 00:58:24.436666 2026] [autoindex:error] [pid 8035:tid 8062] [client 193.37.32.207:63473] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:24.533578 2026] [:error] [pid 8035:tid 8050] [client 193.37.32.207:63473] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "ac1OsAY2zflwGmvw_QbZWwAAAIo"]
[Thu Apr 02 00:58:26.690562 2026] [:error] [pid 8387:tid 8455] [client 193.37.32.194:34745] [client 193.37.32.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "ac1OshdQYJ2y8LDYkv_5cwAAAA4"], referer: http://makifim.com.au/mah/function.php
[Thu Apr 02 00:58:26.900840 2026] [autoindex:error] [pid 16761:tid 16773] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/column/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:32.007267 2026] [autoindex:error] [pid 16761:tid 16774] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:32.113882 2026] [autoindex:error] [pid 16761:tid 16787] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:32.226252 2026] [autoindex:error] [pid 16761:tid 16771] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:58:48.487126 2026] [autoindex:error] [pid 16761:tid 16778] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:12.770292 2026] [autoindex:error] [pid 16761:tid 16767] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:19.910487 2026] [autoindex:error] [pid 16761:tid 16770] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:21.669225 2026] [:error] [pid 8387:tid 8446] [client 193.37.32.195:20673] [client 193.37.32.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "ac1O6RdQYJ2y8LDYkv_6GgAAAAY"], referer: http://makifim.com.au/ab.php
[Thu Apr 02 00:59:24.093204 2026] [autoindex:error] [pid 16761:tid 16764] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/navigation-submenu/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:24.204995 2026] [autoindex:error] [pid 16761:tid 16785] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:27.908632 2026] [autoindex:error] [pid 16761:tid 16783] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/video/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:34.965778 2026] [autoindex:error] [pid 16761:tid 16773] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:35.072734 2026] [autoindex:error] [pid 16761:tid 16781] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:43.526601 2026] [autoindex:error] [pid 16761:tid 16765] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:43.637413 2026] [autoindex:error] [pid 16761:tid 16775] [client 193.37.32.197:56627] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:43.736346 2026] [:error] [pid 16761:tid 16788] [client 193.37.32.197:56627] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/k.php"] [unique_id "ac1O_94bJXDGRqKZnzwUZAAAAFg"]
[Thu Apr 02 00:59:44.065149 2026] [autoindex:error] [pid 8035:tid 8048] [client 193.37.32.206:33753] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:51.332991 2026] [autoindex:error] [pid 8035:tid 8061] [client 193.37.32.206:33753] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 00:59:51.548616 2026] [autoindex:error] [pid 8035:tid 8052] [client 193.37.32.206:33753] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://makifim.com.au/wp-includes/js/dist
[Thu Apr 02 00:59:51.655917 2026] [autoindex:error] [pid 8035:tid 8048] [client 193.37.32.206:33753] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:00:06.613368 2026] [:error] [pid 8035:tid 8052] [client 193.37.32.206:33753] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "ac1PFgY2zflwGmvw_QbaPwAAAIw"]
[Thu Apr 02 01:00:08.545689 2026] [:error] [pid 8035:tid 8063] [client 193.37.32.196:60915] [client 193.37.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "ac1PGAY2zflwGmvw_QbaQQAAAJc"], referer: http://makifim.com.au/worksec.php
[Thu Apr 02 01:00:14.862068 2026] [:error] [pid 8387:tid 8456] [client 193.37.32.181:27399] [client 193.37.32.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.37.32.181, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ac1PHhdQYJ2y8LDYkv_6cwAAAA8"]
[Thu Apr 02 01:00:23.970917 2026] [autoindex:error] [pid 8387:tid 8465] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:00:43.450121 2026] [autoindex:error] [pid 8387:tid 8465] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/customize-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:00:43.556866 2026] [autoindex:error] [pid 8387:tid 8459] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:00:43.669340 2026] [autoindex:error] [pid 8387:tid 8455] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:00:53.905712 2026] [:error] [pid 8037:tid 8110] [client 193.37.32.203:35261] [client 193.37.32.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "ac1PRYGD8ox-W9jHVfC5mgAAAQI"], referer: http://makifim.com.au/not_found
[Thu Apr 02 01:01:13.674164 2026] [autoindex:error] [pid 8387:tid 8456] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:01:36.636901 2026] [autoindex:error] [pid 8387:tid 8444] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:01:36.751859 2026] [autoindex:error] [pid 8387:tid 8448] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:01:40.396070 2026] [autoindex:error] [pid 8387:tid 8459] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/page-list/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:01:45.716958 2026] [:error] [pid 8387:tid 8461] [client 193.37.32.188:20307] [client 193.37.32.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "ac1PeRdQYJ2y8LDYkv_7jQAAABQ"], referer: http://makifim.com.au/mini.php
[Thu Apr 02 01:02:03.843438 2026] [autoindex:error] [pid 8387:tid 8457] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:12.473736 2026] [autoindex:error] [pid 8387:tid 8442] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:12.580082 2026] [autoindex:error] [pid 8387:tid 8465] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/commands/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:12.685820 2026] [autoindex:error] [pid 8387:tid 8450] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:12.798519 2026] [autoindex:error] [pid 8387:tid 8459] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/query-pagination/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:12.905827 2026] [autoindex:error] [pid 8387:tid 8452] [client 193.37.32.181:27399] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/separator/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:16.693019 2026] [autoindex:error] [pid 8387:tid 8443] [client 193.37.32.181:27399] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:23.904008 2026] [:error] [pid 8387:tid 8460] [client 193.37.32.181:27399] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "ac1PnxdQYJ2y8LDYkv_75QAAABM"]
[Thu Apr 02 01:02:24.108181 2026] [autoindex:error] [pid 8036:tid 8083] [client 193.37.32.219:21533] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:24.206462 2026] [:error] [pid 8036:tid 8079] [client 193.37.32.219:21533] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ac1PoEMvKg9PFa_VV4zWtgAAAMM"]
[Thu Apr 02 01:02:24.413556 2026] [:error] [pid 8035:tid 8045] [client 193.37.32.200:31169] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "ac1PoAY2zflwGmvw_QbbegAAAIU"]
[Thu Apr 02 01:02:34.655770 2026] [:error] [pid 16761:tid 16775] [client 193.37.32.208:61485] [client 193.37.32.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "ac1Pqt4bJXDGRqKZnzwWgAAAAEs"], referer: http://makifim.com.au/wp-content/languages/themes/
[Thu Apr 02 01:02:45.418567 2026] [:error] [pid 8035:tid 8058] [client 193.37.32.200:50907] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ac1PtQY2zflwGmvw_QbbsAAAAJI"]
[Thu Apr 02 01:02:45.637525 2026] [autoindex:error] [pid 8037:tid 8119] [client 193.37.32.209:63959] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:54.323049 2026] [autoindex:error] [pid 8037:tid 8109] [client 193.37.32.209:63959] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:54.437001 2026] [autoindex:error] [pid 8037:tid 8132] [client 193.37.32.209:63959] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:54.564026 2026] [autoindex:error] [pid 8037:tid 8117] [client 193.37.32.209:63959] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/script-modules/block-library/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:54.683398 2026] [autoindex:error] [pid 8037:tid 8112] [client 193.37.32.209:63959] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/tag-cloud/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:02:59.531791 2026] [:error] [pid 8037:tid 8121] [client 193.37.32.209:63959] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "ac1Pw4GD8ox-W9jHVfC6TAAAAQ0"]
[Thu Apr 02 01:02:59.743464 2026] [:error] [pid 8387:tid 8466] [client 193.37.32.184:47333] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ac1PwxdQYJ2y8LDYkv_8HwAAABY"]
[Thu Apr 02 01:02:59.960060 2026] [autoindex:error] [pid 8035:tid 8051] [client 193.37.32.202:29109] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:03:00.143720 2026] [access_compat:error] [pid 8035:tid 8060] [client 193.37.32.202:29109] AH01797: client denied by server configuration: /home/makifimc/public_html/wp-content/updraft/emptydir/
[Thu Apr 02 01:03:11.271471 2026] [:error] [pid 8035:tid 8046] [client 193.37.32.202:29109] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "ac1PzwY2zflwGmvw_Qbb3gAAAIY"]
[Thu Apr 02 01:03:16.205274 2026] [autoindex:error] [pid 8037:tid 8125] [client 193.37.32.211:55501] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:03:21.365727 2026] [autoindex:error] [pid 8037:tid 8109] [client 193.37.32.211:55501] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:03:26.379523 2026] [:error] [pid 8037:tid 8128] [client 193.37.32.211:55501] [client 193.37.32.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ac1P3oGD8ox-W9jHVfC6agAAARQ"]
[Thu Apr 02 01:03:26.576556 2026] [:error] [pid 8036:tid 8092] [client 193.37.32.229:60983] [client 193.37.32.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/wp.php"] [unique_id "ac1P3kMvKg9PFa_VV4zW1QAAANA"]
[Thu Apr 02 01:03:26.774698 2026] [:error] [pid 8037:tid 8130] [client 193.37.32.221:28325] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "ac1P3oGD8ox-W9jHVfC6awAAARY"]
[Thu Apr 02 01:03:26.984638 2026] [autoindex:error] [pid 8035:tid 8046] [client 193.37.32.228:48153] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:03:27.294008 2026] [:error] [pid 8035:tid 8049] [client 193.37.32.228:48153] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "ac1P3wY2zflwGmvw_Qbb_gAAAIk"]
[Thu Apr 02 01:03:30.386820 2026] [:error] [pid 8035:tid 8044] [client 193.37.32.229:65161] [client 193.37.32.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "ac1P4gY2zflwGmvw_QbcAAAAAIQ"], referer: http://makifim.com.au/not_found
[Thu Apr 02 01:03:37.404941 2026] [autoindex:error] [pid 8387:tid 8461] [client 193.37.32.203:50639] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:03:42.622456 2026] [autoindex:error] [pid 8387:tid 8461] [client 193.37.32.203:50639] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:03:53.869117 2026] [:error] [pid 8387:tid 8440] [client 193.37.32.203:50639] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/joker.php"] [unique_id "ac1P-RdQYJ2y8LDYkv_8jgAAAAA"]
[Thu Apr 02 01:03:54.453456 2026] [autoindex:error] [pid 16761:tid 16782] [client 193.37.32.212:28871] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/comment-date/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:03:54.565805 2026] [:error] [pid 16761:tid 16778] [client 193.37.32.212:28871] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/joker.php"] [unique_id "ac1P-t4bJXDGRqKZnzwXwgAAAE4"]
[Thu Apr 02 01:04:13.054585 2026] [:error] [pid 8387:tid 8447] [client 193.37.32.207:25017] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "ac1QDRdQYJ2y8LDYkv_8sgAAAAc"]
[Thu Apr 02 01:04:13.260758 2026] [:error] [pid 8036:tid 8096] [client 193.37.32.214:56361] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "ac1QDUMvKg9PFa_VV4zXCwAAANM"]
[Thu Apr 02 01:04:21.810996 2026] [:error] [pid 8036:tid 8090] [client 193.37.32.223:60037] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "ac1QFUMvKg9PFa_VV4zXGAAAAM4"]
[Thu Apr 02 01:04:22.054543 2026] [autoindex:error] [pid 16761:tid 16773] [client 193.37.32.204:63485] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/accordion/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:04:22.163066 2026] [autoindex:error] [pid 16761:tid 16779] [client 193.37.32.204:63485] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/table/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:04:32.925117 2026] [autoindex:error] [pid 16761:tid 16765] [client 193.37.32.204:63485] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/edit-post/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:04:51.154282 2026] [:error] [pid 16761:tid 16785] [client 193.37.32.204:63485] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-text-cron.php"] [unique_id "ac1QM94bJXDGRqKZnzwYpAAAAFU"]
[Thu Apr 02 01:04:56.366222 2026] [autoindex:error] [pid 8037:tid 8131] [client 193.37.32.199:41777] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:04:56.477185 2026] [autoindex:error] [pid 8037:tid 8109] [client 193.37.32.199:41777] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/home-link/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:05:04.209929 2026] [:error] [pid 8037:tid 8132] [client 193.37.32.199:41777] [client 193.37.32.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/post-template-path.php"] [unique_id "ac1QQIGD8ox-W9jHVfC6vgAAARg"]
[Thu Apr 02 01:05:04.413335 2026] [:error] [pid 8387:tid 8459] [client 193.37.32.216:48815] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/plex1.php"] [unique_id "ac1QQBdQYJ2y8LDYkv_9FgAAABI"]
[Thu Apr 02 01:05:09.366367 2026] [autoindex:error] [pid 8036:tid 8101] [client 193.37.32.217:53107] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-template/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:05:16.681163 2026] [:error] [pid 8036:tid 8094] [client 193.37.32.217:53107] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "ac1QTEMvKg9PFa_VV4zXUgAAANE"]
[Thu Apr 02 01:05:22.046751 2026] [:error] [pid 16761:tid 16765] [client 193.37.32.226:63993] [client 193.37.32.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/theme-compat/"] [unique_id "ac1QUt4bJXDGRqKZnzwZEAAAAEE"], referer: http://makifim.com.au/wp-includes/images/smilies/theme-compat/
[Thu Apr 02 01:05:29.289654 2026] [:error] [pid 8387:tid 8441] [client 193.37.32.183:41879] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/button/admiin.php"] [unique_id "ac1QWRdQYJ2y8LDYkv_9VAAAAAE"]
[Thu Apr 02 01:05:51.335692 2026] [:error] [pid 8036:tid 8094] [client 193.37.32.229:44783] [client 193.37.32.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/users.php"] [unique_id "ac1Qb0MvKg9PFa_VV4zXcwAAANE"]
[Thu Apr 02 01:05:59.279307 2026] [autoindex:error] [pid 16761:tid 16776] [client 193.37.32.211:40077] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/comments-pagination-next/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:05:59.386546 2026] [autoindex:error] [pid 16761:tid 16780] [client 193.37.32.211:40077] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/Exception/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 01:06:11.768534 2026] [:error] [pid 16761:tid 16774] [client 193.37.32.211:40077] [client 193.37.32.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-cron.php"] [unique_id "ac1Qg94bJXDGRqKZnzwZ1AAAAEo"]
[Thu Apr 02 01:06:11.984583 2026] [:error] [pid 16761:tid 16778] [client 193.37.32.194:60843] [client 193.37.32.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/api.php"] [unique_id "ac1Qg94bJXDGRqKZnzwZ1gAAAE4"]
[Thu Apr 02 01:06:12.180966 2026] [:error] [pid 16761:tid 16769] [client 193.37.32.181:44913] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/panel.php"] [unique_id "ac1QhN4bJXDGRqKZnzwZ1wAAAEU"]
[Thu Apr 02 01:06:15.946882 2026] [:error] [pid 16761:tid 16766] [client 193.37.32.207:25493] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/tx1.php"] [unique_id "ac1Qh94bJXDGRqKZnzwaBAAAAEI"]
[Thu Apr 02 01:06:16.253399 2026] [:error] [pid 8036:tid 8085] [client 193.37.32.180:62125] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "ac1QiEMvKg9PFa_VV4zXkAAAAMk"]
[Thu Apr 02 01:06:16.470733 2026] [:error] [pid 8037:tid 8128] [client 193.37.32.225:20853] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ac1QiIGD8ox-W9jHVfC67gAAARQ"]
[Thu Apr 02 01:06:25.047013 2026] [:error] [pid 8387:tid 8465] [client 193.37.32.229:43441] [client 193.37.32.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "ac1QkRdQYJ2y8LDYkv_9swAAABU"]
[Thu Apr 02 01:06:28.141383 2026] [:error] [pid 16761:tid 16780] [client 193.37.32.200:39293] [client 193.37.32.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "ac1QlN4bJXDGRqKZnzwaUwAAAFA"], referer: http://makifim.com.au/not_found
[Thu Apr 02 04:46:35.145611 2026] [autoindex:error] [pid 59194:tid 59220] [client 207.180.204.56:63839] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 02 09:07:43.923119 2026] [:error] [pid 23927:tid 23929] [client 102.165.48.81:31711] [client 102.165.48.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.165.48.81, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ac3BX0sZwqCndhl9uKCaogAAAYA"]
[Thu Apr 02 09:07:46.770342 2026] [:error] [pid 23927:tid 23931] [client 102.165.48.81:31711] [client 102.165.48.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.165.48.81, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac3BYksZwqCndhl9uKCapQAAAYI"]
[Thu Apr 02 13:20:10.679289 2026] [:error] [pid 59305:tid 59328] [client 89.184.221.113:40613] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac38iqr2tV4rDwKFxKe0vwAAANM"]
[Thu Apr 02 13:20:10.681160 2026] [:error] [pid 23927:tid 23942] [client 89.184.221.113:38291] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac38iksZwqCndhl9uKAKmAAAAY0"]
[Thu Apr 02 13:20:10.697542 2026] [:error] [pid 23927:tid 23937] [client 89.184.221.113:34027] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac38iksZwqCndhl9uKAKmQAAAYg"]
[Thu Apr 02 13:20:10.811799 2026] [:error] [pid 23927:tid 23929] [client 89.184.221.113:44319] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac38iksZwqCndhl9uKAKmwAAAYA"]
[Thu Apr 02 19:06:18.474580 2026] [autoindex:error] [pid 29467:tid 29481] [client 31.220.80.169:57855] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 02 19:58:31.427375 2026] [:error] [pid 59194:tid 59229] [client 158.158.120.135:9695] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "ac5Z5xMpAeV11hcQehxFJAAAABA"]
[Thu Apr 02 19:58:31.921281 2026] [:error] [pid 59200:tid 59262] [client 158.158.120.135:24369] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "ac5Z57fP26txrdLs3Ep0xQAAAFY"]
[Thu Apr 02 19:58:32.475516 2026] [:error] [pid 59305:tid 59311] [client 158.158.120.135:45246] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "ac5Z6Kr2tV4rDwKFxKeIXwAAAMI"]
[Thu Apr 02 19:58:33.005855 2026] [:error] [pid 59305:tid 59315] [client 158.158.120.135:24343] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "ac5Z6ar2tV4rDwKFxKeIYgAAAMY"]
[Thu Apr 02 19:58:33.493807 2026] [:error] [pid 59305:tid 59326] [client 158.158.120.135:9706] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "ac5Z6ar2tV4rDwKFxKeIZgAAANE"]
[Thu Apr 02 19:58:33.975827 2026] [:error] [pid 37543:tid 37569] [client 158.158.120.135:63746] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "ac5Z6Xhdk2bEYJCvILbcPgAAAVg"]
[Thu Apr 02 19:58:34.581561 2026] [:error] [pid 23927:tid 23948] [client 158.158.120.135:9718] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "ac5Z6ksZwqCndhl9uKCwIAAAAZM"]
[Thu Apr 02 19:58:35.062515 2026] [:error] [pid 23927:tid 23951] [client 158.158.120.135:56615] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "ac5Z60sZwqCndhl9uKCwJAAAAZY"]
[Thu Apr 02 19:58:36.655253 2026] [:error] [pid 23927:tid 23942] [client 158.158.120.135:54567] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5Z7EsZwqCndhl9uKCwKgAAAY0"]
[Thu Apr 02 19:58:37.421008 2026] [:error] [pid 59200:tid 59251] [client 158.158.120.135:9692] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5Z7bfP26txrdLs3Ep0yQAAAEs"]
[Thu Apr 02 19:58:37.944503 2026] [:error] [pid 54384:tid 54410] [client 158.158.120.135:54557] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5Z7dWWpaby3TVN7McPSgAAAdg"]
[Thu Apr 02 19:58:38.466947 2026] [:error] [pid 54384:tid 54388] [client 158.158.120.135:50574] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac5Z7tWWpaby3TVN7McPTAAAAcI"]
[Thu Apr 02 19:58:38.948146 2026] [:error] [pid 23927:tid 23951] [client 158.158.120.135:63784] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5Z7ksZwqCndhl9uKCwLQAAAZY"]
[Thu Apr 02 19:58:39.425624 2026] [:error] [pid 37543:tid 37546] [client 158.158.120.135:54555] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5Z73hdk2bEYJCvILbcUAAAAUE"]
[Thu Apr 02 19:58:39.939700 2026] [:error] [pid 59194:tid 59237] [client 158.158.120.135:31261] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5Z7xMpAeV11hcQehxFKAAAABg"]
[Thu Apr 02 19:58:40.527641 2026] [:error] [pid 29467:tid 29493] [client 158.158.120.135:39748] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac5Z8L4VUBFCJAq-WOl-wAAAARc"]
[Thu Apr 02 19:58:41.214989 2026] [:error] [pid 37543:tid 37548] [client 158.158.120.135:45198] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "ac5Z8Xhdk2bEYJCvILbcXAAAAUM"]
[Thu Apr 02 19:58:41.732621 2026] [:error] [pid 59200:tid 59248] [client 158.158.120.135:56583] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "ac5Z8bfP26txrdLs3Ep0zgAAAEg"]
[Thu Apr 02 19:58:42.258520 2026] [:error] [pid 59200:tid 59242] [client 158.158.120.135:54590] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "ac5Z8rfP26txrdLs3Ep00gAAAEI"]
[Thu Apr 02 19:58:42.795629 2026] [:error] [pid 59305:tid 59315] [client 158.158.120.135:54533] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "ac5Z8qr2tV4rDwKFxKeIegAAAMY"]
[Thu Apr 02 19:58:43.317365 2026] [:error] [pid 59200:tid 59254] [client 158.158.120.135:56618] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5Z87fP26txrdLs3Ep00wAAAE4"]
[Thu Apr 02 19:58:43.866086 2026] [:error] [pid 23927:tid 23934] [client 158.158.120.135:61729] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5Z80sZwqCndhl9uKCwNQAAAYU"]
[Thu Apr 02 19:58:44.394745 2026] [:error] [pid 59305:tid 59328] [client 158.158.120.135:39744] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5Z9Kr2tV4rDwKFxKeIewAAANM"]
[Thu Apr 02 19:58:44.895979 2026] [:error] [pid 37543:tid 37564] [client 158.158.120.135:50579] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac5Z9Hhdk2bEYJCvILbcZQAAAVM"]
[Thu Apr 02 19:58:45.384804 2026] [:error] [pid 29467:tid 29474] [client 158.158.120.135:54551] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5Z9b4VUBFCJAq-WOl-ygAAAQQ"]
[Thu Apr 02 19:58:45.864398 2026] [:error] [pid 59305:tid 59321] [client 158.158.120.135:56630] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5Z9ar2tV4rDwKFxKeIhQAAAMw"]
[Thu Apr 02 19:58:46.342271 2026] [:error] [pid 54384:tid 54397] [client 158.158.120.135:50564] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5Z9tWWpaby3TVN7McPUgAAAcs"]
[Thu Apr 02 19:58:46.819600 2026] [:error] [pid 23927:tid 23951] [client 158.158.120.135:56624] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac5Z9ksZwqCndhl9uKCwOgAAAZY"]
[Thu Apr 02 19:58:47.313965 2026] [:error] [pid 29467:tid 29478] [client 158.158.120.135:45195] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "ac5Z974VUBFCJAq-WOl-1AAAAQg"]
[Thu Apr 02 19:58:47.791460 2026] [:error] [pid 29467:tid 29480] [client 158.158.120.135:63795] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "ac5Z974VUBFCJAq-WOl-2QAAAQo"]
[Thu Apr 02 19:58:48.276942 2026] [:error] [pid 29467:tid 29490] [client 158.158.120.135:39122] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "ac5Z-L4VUBFCJAq-WOl-3QAAARQ"]
[Thu Apr 02 19:58:48.806103 2026] [:error] [pid 54384:tid 54400] [client 158.158.120.135:31238] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "ac5Z-NWWpaby3TVN7McPVAAAAc4"]
[Thu Apr 02 19:58:49.329827 2026] [:error] [pid 29467:tid 29494] [client 158.158.120.135:63779] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/repurify.php"] [unique_id "ac5Z-b4VUBFCJAq-WOl-4wAAARg"]
[Thu Apr 02 19:58:49.811691 2026] [:error] [pid 29467:tid 29476] [client 158.158.120.135:50563] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/repurify.php"] [unique_id "ac5Z-b4VUBFCJAq-WOl-5QAAAQY"]
[Thu Apr 02 19:58:50.538246 2026] [:error] [pid 37543:tid 37567] [client 158.158.120.135:24370] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/repurify.php"] [unique_id "ac5Z-nhdk2bEYJCvILbcaQAAAVY"]
[Thu Apr 02 19:58:51.062470 2026] [:error] [pid 37543:tid 37569] [client 158.158.120.135:31280] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/repurify.php"] [unique_id "ac5Z-3hdk2bEYJCvILbcagAAAVg"]
[Thu Apr 02 19:58:51.541949 2026] [:error] [pid 23927:tid 23932] [client 158.158.120.135:61750] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tdsaz.php"] [unique_id "ac5Z-0sZwqCndhl9uKCwSQAAAYM"]
[Thu Apr 02 19:58:52.021976 2026] [:error] [pid 29467:tid 29475] [client 158.158.120.135:52994] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tdsaz.php"] [unique_id "ac5Z_L4VUBFCJAq-WOl-6QAAAQU"]
[Thu Apr 02 19:58:52.516562 2026] [:error] [pid 29467:tid 29473] [client 158.158.120.135:31246] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tdsaz.php"] [unique_id "ac5Z_L4VUBFCJAq-WOl-7QAAAQM"]
[Thu Apr 02 19:58:53.016329 2026] [:error] [pid 59305:tid 59310] [client 158.158.120.135:63797] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tdsaz.php"] [unique_id "ac5Z_ar2tV4rDwKFxKeIogAAAME"]
[Thu Apr 02 19:58:53.564224 2026] [:error] [pid 29467:tid 29483] [client 158.158.120.135:63756] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac5Z_b4VUBFCJAq-WOl-8QAAAQ0"]
[Thu Apr 02 19:58:54.068738 2026] [:error] [pid 54384:tid 54392] [client 158.158.120.135:62404] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac5Z_tWWpaby3TVN7McPWAAAAcY"]
[Thu Apr 02 19:58:54.651529 2026] [:error] [pid 59194:tid 59219] [client 158.158.120.135:54542] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac5Z_hMpAeV11hcQehxFNAAAAAY"]
[Thu Apr 02 19:58:55.247964 2026] [:error] [pid 23927:tid 23948] [client 158.158.120.135:31274] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac5Z_0sZwqCndhl9uKCwTwAAAZM"]
[Thu Apr 02 19:58:55.733590 2026] [:error] [pid 23927:tid 23946] [client 158.158.120.135:45204] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hfles.php"] [unique_id "ac5Z_0sZwqCndhl9uKCwUQAAAZE"]
[Thu Apr 02 19:58:56.260194 2026] [:error] [pid 23927:tid 23953] [client 158.158.120.135:62412] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hfles.php"] [unique_id "ac5aAEsZwqCndhl9uKCwVQAAAZg"]
[Thu Apr 02 19:58:56.744581 2026] [:error] [pid 29467:tid 29488] [client 158.158.120.135:54545] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5aAL4VUBFCJAq-WOl-9QAAARI"]
[Thu Apr 02 19:58:57.769380 2026] [:error] [pid 29467:tid 29494] [client 158.158.120.135:56636] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5aAb4VUBFCJAq-WOl--AAAARg"]
[Thu Apr 02 19:58:58.587316 2026] [:error] [pid 29467:tid 29487] [client 158.158.120.135:45213] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5aAr4VUBFCJAq-WOl-_wAAARE"]
[Thu Apr 02 19:58:59.370119 2026] [:error] [pid 29467:tid 29484] [client 158.158.120.135:45188] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac5aA74VUBFCJAq-WOl_BQAAAQ4"]
[Thu Apr 02 19:59:00.093057 2026] [:error] [pid 29467:tid 29471] [client 158.158.120.135:45207] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "ac5aBL4VUBFCJAq-WOl_DwAAAQE"]
[Thu Apr 02 19:59:00.954625 2026] [:error] [pid 59200:tid 59246] [client 158.158.120.135:56591] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "ac5aBLfP26txrdLs3Ep01wAAAEY"]
[Thu Apr 02 19:59:01.916808 2026] [:error] [pid 37543:tid 37561] [client 158.158.120.135:56628] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "ac5aBXhdk2bEYJCvILbcbgAAAVA"]
[Thu Apr 02 19:59:02.580505 2026] [:error] [pid 23927:tid 23931] [client 158.158.120.135:50575] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "ac5aBksZwqCndhl9uKCwXgAAAYI"]
[Thu Apr 02 19:59:03.188592 2026] [:error] [pid 29467:tid 29483] [client 158.158.120.135:50590] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5aB74VUBFCJAq-WOl_GAAAAQ0"]
[Thu Apr 02 19:59:04.112155 2026] [:error] [pid 29467:tid 29493] [client 158.158.120.135:56592] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5aCL4VUBFCJAq-WOl_IAAAARc"]
[Thu Apr 02 19:59:05.026824 2026] [:error] [pid 59194:tid 59217] [client 158.158.120.135:54549] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5aCRMpAeV11hcQehxFNwAAAAQ"]
[Thu Apr 02 19:59:05.658392 2026] [:error] [pid 23927:tid 23938] [client 158.158.120.135:8652] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac5aCUsZwqCndhl9uKCwYQAAAYk"]
[Thu Apr 02 19:59:06.282656 2026] [:error] [pid 29467:tid 29482] [client 158.158.120.135:50594] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ac5aCr4VUBFCJAq-WOl_JQAAAQw"]
[Thu Apr 02 19:59:06.797957 2026] [:error] [pid 37543:tid 37555] [client 158.158.120.135:50614] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ac5aCnhdk2bEYJCvILbccwAAAUo"]
[Thu Apr 02 19:59:07.316426 2026] [:error] [pid 37543:tid 37548] [client 158.158.120.135:50588] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ac5aC3hdk2bEYJCvILbcdwAAAUM"]
[Thu Apr 02 19:59:07.973682 2026] [:error] [pid 29467:tid 29475] [client 158.158.120.135:39789] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ac5aC74VUBFCJAq-WOl_MQAAAQU"]
[Thu Apr 02 19:59:08.461973 2026] [:error] [pid 54384:tid 54391] [client 158.158.120.135:54537] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5aDNWWpaby3TVN7McPZQAAAcU"]
[Thu Apr 02 19:59:09.280458 2026] [:error] [pid 59201:tid 59279] [client 158.158.120.135:40507] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5aDcAC0Tw8eL6gzZ4cEAAAAIw"]
[Thu Apr 02 19:59:10.195034 2026] [:error] [pid 54384:tid 54405] [client 158.158.120.135:40511] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5aDtWWpaby3TVN7McPbgAAAdM"]
[Thu Apr 02 19:59:10.841093 2026] [:error] [pid 54384:tid 54404] [client 158.158.120.135:61758] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-moonka.php"] [unique_id "ac5aDtWWpaby3TVN7McPcgAAAdI"]
[Thu Apr 02 19:59:11.322042 2026] [:error] [pid 59194:tid 59224] [client 158.158.120.135:24381] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "ac5aDxMpAeV11hcQehxFOgAAAAs"]
[Thu Apr 02 19:59:11.997738 2026] [:error] [pid 59305:tid 59316] [client 158.158.120.135:31279] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "ac5aD6r2tV4rDwKFxKeIxwAAAMc"]
[Thu Apr 02 19:59:13.737067 2026] [:error] [pid 29467:tid 29488] [client 158.158.120.135:39786] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "ac5aEb4VUBFCJAq-WOl_SgAAARI"]
[Thu Apr 02 19:59:14.867805 2026] [:error] [pid 54384:tid 54386] [client 158.158.120.135:54565] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "ac5aEtWWpaby3TVN7McPeQAAAcA"]
[Thu Apr 02 19:59:15.984813 2026] [:error] [pid 59201:tid 59273] [client 158.158.120.135:54554] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac5aE8AC0Tw8eL6gzZ4cGAAAAIY"]
[Thu Apr 02 19:59:17.180294 2026] [:error] [pid 37543:tid 37569] [client 158.158.120.135:24349] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac5aFXhdk2bEYJCvILbcggAAAVg"]
[Thu Apr 02 19:59:18.660175 2026] [:error] [pid 29467:tid 29470] [client 158.158.120.135:62457] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac5aFr4VUBFCJAq-WOl_YgAAAQA"]
[Thu Apr 02 19:59:20.331722 2026] [:error] [pid 59305:tid 59326] [client 158.158.120.135:45189] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac5aGKr2tV4rDwKFxKeI0QAAANE"]
[Thu Apr 02 19:59:23.410662 2026] [:error] [pid 54384:tid 54395] [client 158.158.120.135:63788] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5aG9WWpaby3TVN7McPgQAAAck"]
[Thu Apr 02 19:59:24.749046 2026] [:error] [pid 54384:tid 54386] [client 158.158.120.135:53689] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5aHNWWpaby3TVN7McPgwAAAcA"]
[Thu Apr 02 19:59:25.432919 2026] [:error] [pid 29467:tid 29475] [client 158.158.120.135:53695] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5aHb4VUBFCJAq-WOl_pwAAAQU"]
[Thu Apr 02 19:59:26.640506 2026] [:error] [pid 23927:tid 23938] [client 158.158.120.135:40477] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac5aHksZwqCndhl9uKCwfAAAAYk"]
[Thu Apr 02 19:59:28.305645 2026] [:error] [pid 23927:tid 23939] [client 158.158.120.135:40466] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "ac5aIEsZwqCndhl9uKCwfgAAAYo"]
[Thu Apr 02 20:00:17.839897 2026] [:error] [pid 37543:tid 37559] [client 158.158.120.135:54588] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac5aUXhdk2bEYJCvILbcwgAAAU4"]
[Thu Apr 02 20:00:18.624828 2026] [:error] [pid 29467:tid 29491] [client 158.158.120.135:53661] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac5aUr4VUBFCJAq-WOmAxwAAARU"]
[Thu Apr 02 20:00:19.152393 2026] [:error] [pid 54384:tid 54399] [client 158.158.120.135:53689] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac5aU9WWpaby3TVN7McPzAAAAc0"]
[Thu Apr 02 20:00:20.206940 2026] [:error] [pid 59200:tid 59262] [client 158.158.120.135:8696] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac5aVLfP26txrdLs3Ep1HAAAAFY"]
[Thu Apr 02 20:00:22.533409 2026] [:error] [pid 23927:tid 23940] [client 158.158.120.135:53645] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac5aVksZwqCndhl9uKCxBAAAAYs"]
[Thu Apr 02 20:00:24.668289 2026] [:error] [pid 29467:tid 29481] [client 158.158.120.135:51137] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac5aWL4VUBFCJAq-WOmA7AAAAQs"]
[Thu Apr 02 20:00:25.439283 2026] [:error] [pid 37543:tid 37569] [client 158.158.120.135:8680] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac5aWXhdk2bEYJCvILbcxwAAAVg"]
[Thu Apr 02 20:00:26.631298 2026] [:error] [pid 29467:tid 29493] [client 158.158.120.135:45880] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac5aWr4VUBFCJAq-WOmA-gAAARc"]
[Thu Apr 02 20:00:28.613285 2026] [:error] [pid 59305:tid 59327] [client 158.158.120.135:23335] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "ac5aXKr2tV4rDwKFxKeJVQAAANI"]
[Thu Apr 02 20:00:31.484988 2026] [:error] [pid 59305:tid 59327] [client 158.158.120.135:23350] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "ac5aX6r2tV4rDwKFxKeJYgAAANI"]
[Thu Apr 02 20:00:33.054055 2026] [:error] [pid 23927:tid 23940] [client 158.158.120.135:41134] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "ac5aYUsZwqCndhl9uKCxEwAAAYs"]
[Thu Apr 02 20:00:33.776304 2026] [:error] [pid 59305:tid 59321] [client 158.158.120.135:51171] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "ac5aYar2tV4rDwKFxKeJZwAAAMw"]
[Thu Apr 02 20:00:34.403510 2026] [:error] [pid 59194:tid 59217] [client 158.158.120.135:53676] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynjli.php"] [unique_id "ac5aYhMpAeV11hcQehxFZQAAAAQ"]
[Thu Apr 02 20:00:35.337212 2026] [:error] [pid 29467:tid 29479] [client 158.158.120.135:58484] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynjli.php"] [unique_id "ac5aY74VUBFCJAq-WOmBCQAAAQk"]
[Thu Apr 02 20:00:36.283101 2026] [:error] [pid 59305:tid 59326] [client 158.158.120.135:2693] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynjli.php"] [unique_id "ac5aZKr2tV4rDwKFxKeJcQAAANE"]
[Thu Apr 02 20:00:37.001194 2026] [:error] [pid 23927:tid 23936] [client 158.158.120.135:23352] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynjli.php"] [unique_id "ac5aZUsZwqCndhl9uKCxGgAAAYc"]
[Thu Apr 02 20:00:37.492600 2026] [:error] [pid 59194:tid 59223] [client 158.158.120.135:61112] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6.php"] [unique_id "ac5aZRMpAeV11hcQehxFaQAAAAo"]
[Thu Apr 02 20:00:38.041106 2026] [:error] [pid 59201:tid 59267] [client 158.158.120.135:53669] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6.php"] [unique_id "ac5aZsAC0Tw8eL6gzZ4cWgAAAIA"]
[Thu Apr 02 20:00:38.520397 2026] [:error] [pid 54384:tid 54396] [client 158.158.120.135:2713] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6.php"] [unique_id "ac5aZtWWpaby3TVN7McP8wAAAco"]
[Thu Apr 02 20:00:39.287183 2026] [:error] [pid 29467:tid 29489] [client 158.158.120.135:61104] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a6.php"] [unique_id "ac5aZ74VUBFCJAq-WOmBDgAAARM"]
[Thu Apr 02 20:00:39.902817 2026] [:error] [pid 37543:tid 37556] [client 158.158.120.135:2745] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5aZ3hdk2bEYJCvILbc1wAAAUs"]
[Thu Apr 02 20:00:40.474881 2026] [:error] [pid 59305:tid 59309] [client 158.158.120.135:2692] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5aaKr2tV4rDwKFxKeJgAAAAMA"]
[Thu Apr 02 20:00:41.023801 2026] [:error] [pid 59305:tid 59323] [client 158.158.120.135:51172] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5aaar2tV4rDwKFxKeJgwAAAM4"]
[Thu Apr 02 20:00:41.608730 2026] [:error] [pid 54384:tid 54397] [client 158.158.120.135:23342] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5aadWWpaby3TVN7McP9gAAAcs"]
[Thu Apr 02 20:00:42.167067 2026] [:error] [pid 29467:tid 29491] [client 158.158.120.135:58489] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "ac5aar4VUBFCJAq-WOmBFQAAARU"]
[Thu Apr 02 20:00:42.647077 2026] [:error] [pid 37543:tid 37557] [client 158.158.120.135:40488] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "ac5aanhdk2bEYJCvILbc2wAAAUw"]
[Thu Apr 02 20:00:43.127966 2026] [:error] [pid 29467:tid 29484] [client 158.158.120.135:45854] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "ac5aa74VUBFCJAq-WOmBGgAAAQ4"]
[Thu Apr 02 20:00:43.610121 2026] [:error] [pid 37543:tid 37562] [client 158.158.120.135:8661] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "ac5aa3hdk2bEYJCvILbc3QAAAVE"]
[Thu Apr 02 20:00:44.101461 2026] [:error] [pid 23927:tid 23950] [client 158.158.120.135:41118] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5abEsZwqCndhl9uKCxIAAAAZU"]
[Thu Apr 02 20:00:44.581543 2026] [:error] [pid 59201:tid 59281] [client 158.158.120.135:53636] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5abMAC0Tw8eL6gzZ4cXQAAAI4"]
[Thu Apr 02 20:00:45.061541 2026] [:error] [pid 59201:tid 59270] [client 158.158.120.135:61101] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5abcAC0Tw8eL6gzZ4cYgAAAIM"]
[Thu Apr 02 20:00:45.758051 2026] [:error] [pid 37543:tid 37568] [client 158.158.120.135:31256] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac5abXhdk2bEYJCvILbc4AAAAVc"]
[Thu Apr 02 20:00:46.283998 2026] [:error] [pid 59194:tid 59217] [client 158.158.120.135:58483] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "ac5abhMpAeV11hcQehxFbgAAAAQ"]
[Thu Apr 02 20:00:46.944604 2026] [:error] [pid 29467:tid 29483] [client 158.158.120.135:41105] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "ac5abr4VUBFCJAq-WOmBIwAAAQ0"]
[Thu Apr 02 20:00:47.453402 2026] [:error] [pid 59200:tid 59244] [client 158.158.120.135:2710] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "ac5ab7fP26txrdLs3Ep1KAAAAEQ"]
[Thu Apr 02 20:00:47.933670 2026] [:error] [pid 59200:tid 59263] [client 158.158.120.135:23327] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "ac5ab7fP26txrdLs3Ep1KQAAAFc"]
[Thu Apr 02 20:00:48.412182 2026] [:error] [pid 59305:tid 59331] [client 158.158.120.135:41136] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5acKr2tV4rDwKFxKeJigAAANY"]
[Thu Apr 02 20:00:48.889472 2026] [:error] [pid 23927:tid 23933] [client 158.158.120.135:56580] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5acEsZwqCndhl9uKCxIQAAAYQ"]
[Thu Apr 02 20:00:49.366495 2026] [:error] [pid 59305:tid 59309] [client 158.158.120.135:41116] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5acar2tV4rDwKFxKeJjwAAAMA"]
[Thu Apr 02 20:00:49.871129 2026] [:error] [pid 37543:tid 37559] [client 158.158.120.135:23336] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac5acXhdk2bEYJCvILbc5QAAAU4"]
[Thu Apr 02 20:00:50.437136 2026] [:error] [pid 59200:tid 59250] [client 158.158.120.135:51180] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5acrfP26txrdLs3Ep1LQAAAEo"]
[Thu Apr 02 20:00:50.930202 2026] [:error] [pid 37543:tid 37561] [client 158.158.120.135:39868] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5acnhdk2bEYJCvILbc6AAAAVA"]
[Thu Apr 02 20:00:51.483847 2026] [:error] [pid 23927:tid 23945] [client 158.158.120.135:8666] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5ac0sZwqCndhl9uKCxJAAAAZA"]
[Thu Apr 02 20:00:52.001516 2026] [:error] [pid 23927:tid 23935] [client 158.158.120.135:58472] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac5adEsZwqCndhl9uKCxKQAAAYY"]
[Thu Apr 02 20:00:52.519675 2026] [:error] [pid 29467:tid 29482] [client 158.158.120.135:41122] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ac5adL4VUBFCJAq-WOmBKAAAAQw"]
[Thu Apr 02 20:00:52.997701 2026] [:error] [pid 37543:tid 37562] [client 158.158.120.135:53637] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ac5adHhdk2bEYJCvILbc7AAAAVE"]
[Thu Apr 02 20:00:53.481909 2026] [:error] [pid 37543:tid 37552] [client 158.158.120.135:58445] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ac5adXhdk2bEYJCvILbc7QAAAUc"]
[Thu Apr 02 20:00:53.966296 2026] [:error] [pid 59305:tid 59327] [client 158.158.120.135:41141] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ac5adar2tV4rDwKFxKeJlwAAANI"]
[Thu Apr 02 20:00:54.443537 2026] [:error] [pid 23927:tid 23943] [client 158.158.120.135:40494] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a8.php"] [unique_id "ac5adksZwqCndhl9uKCxMQAAAY4"]
[Thu Apr 02 20:00:54.929904 2026] [:error] [pid 59201:tid 59274] [client 158.158.120.135:23338] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a8.php"] [unique_id "ac5adsAC0Tw8eL6gzZ4cbgAAAIc"]
[Thu Apr 02 20:00:55.410567 2026] [:error] [pid 29467:tid 29483] [client 158.158.120.135:40460] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a8.php"] [unique_id "ac5ad74VUBFCJAq-WOmBRwAAAQ0"]
[Thu Apr 02 20:00:56.134986 2026] [:error] [pid 29467:tid 29476] [client 158.158.120.135:40475] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a8.php"] [unique_id "ac5aeL4VUBFCJAq-WOmBSgAAAQY"]
[Thu Apr 02 20:00:56.625064 2026] [:error] [pid 23927:tid 23934] [client 158.158.120.135:8671] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5aeEsZwqCndhl9uKCxNwAAAYU"]
[Thu Apr 02 20:00:57.120011 2026] [:error] [pid 29467:tid 29492] [client 158.158.120.135:58438] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5aeb4VUBFCJAq-WOmBTAAAARY"]
[Thu Apr 02 20:00:57.742439 2026] [:error] [pid 29467:tid 29489] [client 158.158.120.135:41092] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5aeb4VUBFCJAq-WOmBUwAAARM"]
[Thu Apr 02 20:00:58.249196 2026] [:error] [pid 37543:tid 37561] [client 158.158.120.135:51158] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5aenhdk2bEYJCvILbc8wAAAVA"]
[Thu Apr 02 20:00:58.727459 2026] [:error] [pid 37543:tid 37554] [client 158.158.120.135:39869] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5aenhdk2bEYJCvILbc9AAAAUk"]
[Thu Apr 02 20:00:59.254155 2026] [:error] [pid 54384:tid 54408] [client 158.158.120.135:61093] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5ae9WWpaby3TVN7McQDQAAAdY"]
[Thu Apr 02 20:00:59.754617 2026] [:error] [pid 54384:tid 54401] [client 158.158.120.135:51175] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5ae9WWpaby3TVN7McQEQAAAc8"]
[Thu Apr 02 20:01:00.251375 2026] [:error] [pid 59305:tid 59330] [client 158.158.120.135:2734] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac5afKr2tV4rDwKFxKeJngAAANU"]
[Thu Apr 02 20:01:00.732016 2026] [:error] [pid 59305:tid 59325] [client 158.158.120.135:40459] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ac5afKr2tV4rDwKFxKeJogAAANA"]
[Thu Apr 02 20:01:01.328695 2026] [:error] [pid 23927:tid 23940] [client 158.158.120.135:39852] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ac5afUsZwqCndhl9uKCxPQAAAYs"]
[Thu Apr 02 20:01:01.897495 2026] [:error] [pid 59194:tid 59230] [client 158.158.120.135:61117] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ac5afRMpAeV11hcQehxFfgAAABE"]
[Thu Apr 02 20:01:02.470682 2026] [:error] [pid 29467:tid 29481] [client 158.158.120.135:58433] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ac5afr4VUBFCJAq-WOmBWAAAAQs"]
[Thu Apr 02 20:01:02.974698 2026] [:error] [pid 59305:tid 59313] [client 158.158.120.135:8683] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5afqr2tV4rDwKFxKeJqAAAAMQ"]
[Thu Apr 02 20:01:03.467282 2026] [:error] [pid 59201:tid 59287] [client 158.158.120.135:40493] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5af8AC0Tw8eL6gzZ4ccQAAAJQ"]
[Thu Apr 02 20:01:04.021155 2026] [:error] [pid 23927:tid 23950] [client 158.158.120.135:39747] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5agEsZwqCndhl9uKCxQgAAAZU"]
[Thu Apr 02 20:01:04.610716 2026] [:error] [pid 59305:tid 59332] [client 158.158.120.135:53690] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac5agKr2tV4rDwKFxKeJrQAAANc"]
[Thu Apr 02 20:01:05.311858 2026] [:error] [pid 37543:tid 37561] [client 158.158.120.135:39842] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "ac5agXhdk2bEYJCvILbdAAAAAVA"]
[Thu Apr 02 20:01:05.946508 2026] [:error] [pid 59305:tid 59322] [client 158.158.120.135:23321] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "ac5agar2tV4rDwKFxKeJsgAAAM0"]
[Thu Apr 02 20:01:06.558612 2026] [:error] [pid 54384:tid 54396] [client 158.158.120.135:58435] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "ac5agtWWpaby3TVN7McQGAAAAco"]
[Thu Apr 02 20:01:07.063811 2026] [:error] [pid 37543:tid 37557] [client 158.158.120.135:53642] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "ac5ag3hdk2bEYJCvILbdAwAAAUw"]
[Thu Apr 02 20:01:07.595181 2026] [:error] [pid 37543:tid 37549] [client 158.158.120.135:39862] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "ac5ag3hdk2bEYJCvILbdBQAAAUQ"]
[Thu Apr 02 20:01:08.178721 2026] [:error] [pid 37543:tid 37566] [client 158.158.120.135:41131] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "ac5ahHhdk2bEYJCvILbdBwAAAVU"]
[Thu Apr 02 20:01:08.678906 2026] [:error] [pid 37543:tid 37555] [client 158.158.120.135:39837] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "ac5ahHhdk2bEYJCvILbdDAAAAUo"]
[Thu Apr 02 20:01:09.158721 2026] [:error] [pid 29467:tid 29475] [client 158.158.120.135:45860] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "ac5ahb4VUBFCJAq-WOmBYQAAAQU"]
[Thu Apr 02 20:01:09.661368 2026] [:error] [pid 29467:tid 29486] [client 158.158.120.135:45833] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/luyuc.php"] [unique_id "ac5ahb4VUBFCJAq-WOmBYgAAARA"]
[Thu Apr 02 20:01:10.205547 2026] [:error] [pid 29467:tid 29473] [client 158.158.120.135:23303] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/luyuc.php"] [unique_id "ac5ahr4VUBFCJAq-WOmBagAAAQM"]
[Thu Apr 02 20:01:10.683670 2026] [:error] [pid 29467:tid 29482] [client 158.158.120.135:61119] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/luyuc.php"] [unique_id "ac5ahr4VUBFCJAq-WOmBbgAAAQw"]
[Thu Apr 02 20:01:11.186247 2026] [:error] [pid 59305:tid 59324] [client 158.158.120.135:8647] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/luyuc.php"] [unique_id "ac5ah6r2tV4rDwKFxKeJwQAAAM8"]
[Thu Apr 02 20:01:11.746881 2026] [:error] [pid 59201:tid 59273] [client 158.158.120.135:2744] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "ac5ah8AC0Tw8eL6gzZ4cdgAAAIY"]
[Thu Apr 02 20:01:12.223995 2026] [:error] [pid 54384:tid 54386] [client 158.158.120.135:58439] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "ac5aiNWWpaby3TVN7McQGgAAAcA"]
[Thu Apr 02 20:01:12.756150 2026] [:error] [pid 59305:tid 59311] [client 158.158.120.135:58492] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "ac5aiKr2tV4rDwKFxKeJxQAAAMI"]
[Thu Apr 02 20:01:13.238944 2026] [:error] [pid 59305:tid 59316] [client 158.158.120.135:23323] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "ac5aiar2tV4rDwKFxKeJygAAAMc"]
[Thu Apr 02 20:01:13.728438 2026] [:error] [pid 59305:tid 59315] [client 158.158.120.135:61113] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htto.php"] [unique_id "ac5aiar2tV4rDwKFxKeJzQAAAMY"]
[Thu Apr 02 20:01:14.227597 2026] [:error] [pid 59305:tid 59332] [client 158.158.120.135:2746] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htto.php"] [unique_id "ac5aiqr2tV4rDwKFxKeJ0AAAANc"]
[Thu Apr 02 20:01:14.796196 2026] [:error] [pid 23927:tid 23940] [client 158.158.120.135:58467] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htto.php"] [unique_id "ac5aiksZwqCndhl9uKCxVQAAAYs"]
[Thu Apr 02 21:09:38.853910 2026] [:error] [pid 37543:tid 37555] [client 51.103.161.170:11168] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac5qknhdk2bEYJCvILbwPQAAAUo"]
[Thu Apr 02 21:09:39.580708 2026] [:error] [pid 23927:tid 23943] [client 51.103.161.170:10539] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac5qk0sZwqCndhl9uKDNAQAAAY4"]
[Thu Apr 02 21:09:40.242334 2026] [:error] [pid 59201:tid 59268] [client 51.103.161.170:12402] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac5qlMAC0Tw8eL6gzZ4rdAAAAIE"]
[Thu Apr 02 21:09:41.114779 2026] [:error] [pid 29467:tid 29486] [client 51.103.161.170:9141] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac5qlb4VUBFCJAq-WOmv5gAAARA"]
[Thu Apr 02 21:09:42.176410 2026] [:error] [pid 29467:tid 29481] [client 51.103.161.170:11731] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5qlr4VUBFCJAq-WOmv7gAAAQs"]
[Thu Apr 02 21:09:43.238729 2026] [:error] [pid 59200:tid 59261] [client 51.103.161.170:10597] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5ql7fP26txrdLs3EqBywAAAFU"]
[Thu Apr 02 21:09:43.977786 2026] [:error] [pid 54384:tid 54390] [client 51.103.161.170:12902] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5ql9WWpaby3TVN7MckpgAAAcQ"]
[Thu Apr 02 21:09:44.811643 2026] [:error] [pid 59305:tid 59322] [client 51.103.161.170:11712] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5qmKr2tV4rDwKFxKetYgAAAM0"]
[Thu Apr 02 21:09:45.737541 2026] [:error] [pid 59305:tid 59311] [client 51.103.161.170:12872] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "ac5qmar2tV4rDwKFxKetagAAAMI"]
[Thu Apr 02 21:09:46.826707 2026] [:error] [pid 29467:tid 29493] [client 51.103.161.170:9111] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "ac5qmr4VUBFCJAq-WOmv9QAAARc"]
[Thu Apr 02 21:09:47.475972 2026] [:error] [pid 59200:tid 59254] [client 51.103.161.170:11730] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "ac5qm7fP26txrdLs3EqBzQAAAE4"]
[Thu Apr 02 21:09:48.305016 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:12390] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "ac5qnL4VUBFCJAq-WOmv-gAAARU"]
[Thu Apr 02 21:09:49.569007 2026] [:error] [pid 29467:tid 29471] [client 51.103.161.170:11743] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "ac5qnb4VUBFCJAq-WOmwBgAAAQE"]
[Thu Apr 02 21:09:50.805680 2026] [:error] [pid 29467:tid 29477] [client 51.103.161.170:11221] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "ac5qnr4VUBFCJAq-WOmwCgAAAQc"]
[Thu Apr 02 21:09:51.616830 2026] [:error] [pid 23927:tid 23942] [client 51.103.161.170:9106] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "ac5qn0sZwqCndhl9uKDNHQAAAY0"]
[Thu Apr 02 21:09:52.153326 2026] [:error] [pid 23927:tid 23937] [client 51.103.161.170:10588] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "ac5qoEsZwqCndhl9uKDNIAAAAYg"]
[Thu Apr 02 21:09:52.715041 2026] [:error] [pid 29467:tid 29489] [client 51.103.161.170:11232] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "ac5qoL4VUBFCJAq-WOmwGwAAARM"]
[Thu Apr 02 21:09:53.512607 2026] [:error] [pid 54384:tid 54395] [client 51.103.161.170:12393] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "ac5qodWWpaby3TVN7McktwAAAck"]
[Thu Apr 02 21:09:54.185817 2026] [:error] [pid 59200:tid 59250] [client 51.103.161.170:11141] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "ac5qorfP26txrdLs3EqB0wAAAEo"]
[Thu Apr 02 21:09:54.826533 2026] [:error] [pid 37543:tid 37554] [client 51.103.161.170:10584] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "ac5qonhdk2bEYJCvILbwTAAAAUk"]
[Thu Apr 02 21:09:55.338628 2026] [:error] [pid 59200:tid 59245] [client 51.103.161.170:10563] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac5qo7fP26txrdLs3EqB1gAAAEU"]
[Thu Apr 02 21:09:55.844817 2026] [:error] [pid 59194:tid 59224] [client 51.103.161.170:11217] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac5qoxMpAeV11hcQehxRbQAAAAs"]
[Thu Apr 02 21:09:56.501704 2026] [:error] [pid 59201:tid 59278] [client 51.103.161.170:9105] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac5qpMAC0Tw8eL6gzZ4rhQAAAIs"]
[Thu Apr 02 21:09:57.054949 2026] [:error] [pid 23927:tid 23934] [client 51.103.161.170:10571] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac5qpUsZwqCndhl9uKDNJwAAAYU"]
[Thu Apr 02 21:09:57.798482 2026] [:error] [pid 59200:tid 59259] [client 51.103.161.170:12378] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5qpbfP26txrdLs3EqB3wAAAFM"]
[Thu Apr 02 21:09:58.330802 2026] [:error] [pid 59305:tid 59317] [client 51.103.161.170:10527] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5qpqr2tV4rDwKFxKetegAAAMg"]
[Thu Apr 02 21:09:59.021715 2026] [:error] [pid 23927:tid 23935] [client 51.103.161.170:9113] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5qp0sZwqCndhl9uKDNMAAAAYY"]
[Thu Apr 02 21:09:59.578961 2026] [:error] [pid 23927:tid 23942] [client 51.103.161.170:10511] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5qp0sZwqCndhl9uKDNMwAAAY0"]
[Thu Apr 02 21:10:00.089383 2026] [:error] [pid 29467:tid 29480] [client 51.103.161.170:10537] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ac5qqL4VUBFCJAq-WOmwKwAAAQo"]
[Thu Apr 02 21:10:00.572923 2026] [:error] [pid 23927:tid 23940] [client 51.103.161.170:10535] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ac5qqEsZwqCndhl9uKDNNgAAAYs"]
[Thu Apr 02 21:10:01.145337 2026] [:error] [pid 29467:tid 29481] [client 51.103.161.170:11261] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ac5qqb4VUBFCJAq-WOmwLwAAAQs"]
[Thu Apr 02 21:10:01.628852 2026] [:error] [pid 59305:tid 59314] [client 51.103.161.170:11249] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ac5qqar2tV4rDwKFxKetgAAAAMU"]
[Thu Apr 02 21:10:02.520477 2026] [:error] [pid 23927:tid 23947] [client 51.103.161.170:11760] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "ac5qqksZwqCndhl9uKDNPAAAAZI"]
[Thu Apr 02 21:10:03.005317 2026] [:error] [pid 59194:tid 59229] [client 51.103.161.170:12876] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "ac5qqxMpAeV11hcQehxRdAAAABA"]
[Thu Apr 02 21:10:03.582154 2026] [:error] [pid 59194:tid 59218] [client 51.103.161.170:10575] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "ac5qqxMpAeV11hcQehxReAAAAAU"]
[Thu Apr 02 21:10:04.058456 2026] [:error] [pid 23927:tid 23940] [client 51.103.161.170:10528] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "ac5qrEsZwqCndhl9uKDNRQAAAYs"]
[Thu Apr 02 21:10:04.562415 2026] [:error] [pid 23927:tid 23950] [client 51.103.161.170:10604] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ac5qrEsZwqCndhl9uKDNSQAAAZU"]
[Thu Apr 02 21:10:05.044497 2026] [:error] [pid 59305:tid 59324] [client 51.103.161.170:10612] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ac5qrar2tV4rDwKFxKetgwAAAM8"]
[Thu Apr 02 21:10:05.538956 2026] [:error] [pid 29467:tid 29494] [client 51.103.161.170:11725] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ac5qrb4VUBFCJAq-WOmwNgAAARg"]
[Thu Apr 02 21:10:06.089751 2026] [:error] [pid 59194:tid 59236] [client 51.103.161.170:10553] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ac5qrhMpAeV11hcQehxRfwAAABc"]
[Thu Apr 02 21:10:06.572268 2026] [:error] [pid 29467:tid 29490] [client 51.103.161.170:12918] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ac5qrr4VUBFCJAq-WOmwOgAAARQ"]
[Thu Apr 02 21:10:07.080016 2026] [:error] [pid 59200:tid 59245] [client 51.103.161.170:12371] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ac5qr7fP26txrdLs3EqB4gAAAEU"]
[Thu Apr 02 21:10:07.774293 2026] [:error] [pid 59305:tid 59317] [client 51.103.161.170:12399] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ac5qr6r2tV4rDwKFxKetiQAAAMg"]
[Thu Apr 02 21:10:08.254996 2026] [:error] [pid 29467:tid 29470] [client 51.103.161.170:12916] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ac5qsL4VUBFCJAq-WOmwQwAAAQA"]
[Thu Apr 02 21:10:08.745779 2026] [:error] [pid 29467:tid 29489] [client 51.103.161.170:12379] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyiiz.php"] [unique_id "ac5qsL4VUBFCJAq-WOmwRwAAARM"]
[Thu Apr 02 21:10:09.318067 2026] [:error] [pid 54384:tid 54387] [client 51.103.161.170:11759] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyiiz.php"] [unique_id "ac5qsdWWpaby3TVN7Mck2QAAAcE"]
[Thu Apr 02 21:10:09.813363 2026] [:error] [pid 29467:tid 29477] [client 51.103.161.170:11763] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyiiz.php"] [unique_id "ac5qsb4VUBFCJAq-WOmwSgAAAQc"]
[Thu Apr 02 21:10:10.299961 2026] [:error] [pid 59305:tid 59333] [client 51.103.161.170:11179] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyiiz.php"] [unique_id "ac5qsqr2tV4rDwKFxKetlAAAANg"]
[Thu Apr 02 21:10:10.929913 2026] [:error] [pid 59305:tid 59328] [client 51.103.161.170:10589] [client 51.103.161.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac5qsqr2tV4rDwKFxKetmgAAANM"]
[Thu Apr 02 21:10:11.415895 2026] [:error] [pid 29467:tid 29472] [client 51.103.161.170:12886] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5qs74VUBFCJAq-WOmwTQAAAQI"]
[Thu Apr 02 21:10:12.040849 2026] [:error] [pid 59201:tid 59277] [client 51.103.161.170:11163] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5qtMAC0Tw8eL6gzZ4rmgAAAIo"]
[Thu Apr 02 21:10:12.616849 2026] [:error] [pid 23927:tid 23930] [client 51.103.161.170:11247] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5qtEsZwqCndhl9uKDNXgAAAYE"]
[Thu Apr 02 21:10:13.106810 2026] [:error] [pid 37543:tid 37550] [client 51.103.161.170:11227] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac5qtXhdk2bEYJCvILbwXAAAAUU"]
[Thu Apr 02 21:10:13.581912 2026] [:error] [pid 54384:tid 54402] [client 51.103.161.170:11241] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac5qtdWWpaby3TVN7Mck5AAAAdA"]
[Thu Apr 02 21:10:14.078068 2026] [:error] [pid 54384:tid 54387] [client 51.103.161.170:10502] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac5qttWWpaby3TVN7Mck5wAAAcE"]
[Thu Apr 02 21:10:14.609089 2026] [:error] [pid 29467:tid 29477] [client 51.103.161.170:12352] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac5qtr4VUBFCJAq-WOmwWAAAAQc"]
[Thu Apr 02 21:10:15.087587 2026] [:error] [pid 29467:tid 29476] [client 51.103.161.170:11772] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5qt74VUBFCJAq-WOmwWwAAAQY"]
[Thu Apr 02 21:10:15.590905 2026] [:error] [pid 54384:tid 54397] [client 51.103.161.170:44556] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5qt9WWpaby3TVN7Mck6AAAAcs"]
[Thu Apr 02 21:10:16.201290 2026] [:error] [pid 29467:tid 29488] [client 51.103.161.170:12403] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5quL4VUBFCJAq-WOmwYwAAARI"]
[Thu Apr 02 21:10:16.809942 2026] [:error] [pid 23927:tid 23936] [client 51.103.161.170:11251] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5quEsZwqCndhl9uKDNYgAAAYc"]
[Thu Apr 02 21:10:17.290819 2026] [:error] [pid 37543:tid 37545] [client 51.103.161.170:9144] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "ac5quXhdk2bEYJCvILbwYgAAAUA"]
[Thu Apr 02 21:10:17.773710 2026] [:error] [pid 37543:tid 37549] [client 51.103.161.170:12406] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "ac5quXhdk2bEYJCvILbwZQAAAUQ"]
[Thu Apr 02 21:10:18.249690 2026] [:error] [pid 54384:tid 54390] [client 51.103.161.170:12913] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "ac5qutWWpaby3TVN7Mck8AAAAcQ"]
[Thu Apr 02 21:10:18.812231 2026] [:error] [pid 29467:tid 29483] [client 51.103.161.170:10532] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "ac5qur4VUBFCJAq-WOmwawAAAQ0"]
[Thu Apr 02 21:10:19.442884 2026] [:error] [pid 59305:tid 59323] [client 51.103.161.170:11161] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5qu6r2tV4rDwKFxKetpgAAAM4"]
[Thu Apr 02 21:10:20.020021 2026] [:error] [pid 29467:tid 29477] [client 51.103.161.170:44588] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5qvL4VUBFCJAq-WOmwcwAAAQc"]
[Thu Apr 02 21:10:20.533063 2026] [:error] [pid 23927:tid 23948] [client 51.103.161.170:11254] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5qvEsZwqCndhl9uKDNZQAAAZM"]
[Thu Apr 02 21:10:21.009401 2026] [:error] [pid 59305:tid 59311] [client 51.103.161.170:10596] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5qvar2tV4rDwKFxKetqwAAAMI"]
[Thu Apr 02 21:10:21.502536 2026] [:error] [pid 29467:tid 29482] [client 51.103.161.170:11137] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "ac5qvb4VUBFCJAq-WOmweQAAAQw"]
[Thu Apr 02 21:10:22.030301 2026] [:error] [pid 29467:tid 29493] [client 51.103.161.170:12926] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "ac5qvr4VUBFCJAq-WOmwegAAARc"]
[Thu Apr 02 21:10:22.513030 2026] [:error] [pid 59200:tid 59253] [client 51.103.161.170:11746] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "ac5qvrfP26txrdLs3EqB6gAAAE0"]
[Thu Apr 02 21:10:22.991119 2026] [:error] [pid 29467:tid 29475] [client 51.103.161.170:12871] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "ac5qvr4VUBFCJAq-WOmwfwAAAQU"]
[Thu Apr 02 21:10:23.518391 2026] [:error] [pid 59200:tid 59263] [client 51.103.161.170:11167] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "ac5qv7fP26txrdLs3EqB6wAAAFc"]
[Thu Apr 02 21:10:24.002897 2026] [:error] [pid 59200:tid 59262] [client 51.103.161.170:10594] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "ac5qwLfP26txrdLs3EqB7gAAAFY"]
[Thu Apr 02 21:10:24.480854 2026] [:error] [pid 59200:tid 59251] [client 51.103.161.170:11213] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "ac5qwLfP26txrdLs3EqB8QAAAEs"]
[Thu Apr 02 21:10:24.989441 2026] [:error] [pid 54384:tid 54410] [client 51.103.161.170:12380] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "ac5qwNWWpaby3TVN7MclAQAAAdg"]
[Thu Apr 02 21:10:25.461074 2026] [:error] [pid 59305:tid 59319] [client 51.103.161.170:11757] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac5qwar2tV4rDwKFxKetrwAAAMo"]
[Thu Apr 02 21:10:25.994477 2026] [:error] [pid 29467:tid 29476] [client 51.103.161.170:9138] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac5qwb4VUBFCJAq-WOmwigAAAQY"]
[Thu Apr 02 21:10:26.484098 2026] [:error] [pid 29467:tid 29487] [client 51.103.161.170:12899] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac5qwr4VUBFCJAq-WOmwjQAAARE"]
[Thu Apr 02 21:10:29.978586 2026] [:error] [pid 59200:tid 59251] [client 51.103.161.170:10529] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac5qxbfP26txrdLs3EqCAQAAAEs"]
[Thu Apr 02 21:11:30.964759 2026] [:error] [pid 54384:tid 54397] [client 51.103.161.170:9134] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "ac5rAtWWpaby3TVN7MclUwAAAcs"]
[Thu Apr 02 21:11:31.448078 2026] [:error] [pid 37543:tid 37569] [client 51.103.161.170:11244] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "ac5rA3hdk2bEYJCvILbwxQAAAVg"]
[Thu Apr 02 21:11:31.984203 2026] [:error] [pid 59200:tid 59247] [client 51.103.161.170:11136] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "ac5rA7fP26txrdLs3EqCQAAAAEc"]
[Thu Apr 02 21:11:32.459213 2026] [:error] [pid 59201:tid 59274] [client 51.103.161.170:10523] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "ac5rBMAC0Tw8eL6gzZ4r7gAAAIc"]
[Thu Apr 02 21:11:33.149426 2026] [:error] [pid 59200:tid 59241] [client 51.103.161.170:9119] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "ac5rBbfP26txrdLs3EqCRQAAAEE"]
[Thu Apr 02 21:11:33.898987 2026] [:error] [pid 59201:tid 59283] [client 51.103.161.170:11726] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "ac5rBcAC0Tw8eL6gzZ4r8QAAAJA"]
[Thu Apr 02 21:11:34.785880 2026] [:error] [pid 59194:tid 59213] [client 51.103.161.170:10514] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "ac5rBhMpAeV11hcQehxRwwAAAAA"]
[Thu Apr 02 21:11:35.513544 2026] [:error] [pid 59194:tid 59233] [client 51.103.161.170:9143] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/az.php"] [unique_id "ac5rBxMpAeV11hcQehxRxQAAABQ"]
[Thu Apr 02 21:11:36.631435 2026] [:error] [pid 59305:tid 59314] [client 51.103.161.170:10608] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "ac5rCKr2tV4rDwKFxKeuYgAAAMU"]
[Thu Apr 02 21:11:37.259892 2026] [:error] [pid 59194:tid 59219] [client 51.103.161.170:45243] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "ac5rCRMpAeV11hcQehxRxgAAAAY"]
[Thu Apr 02 21:11:37.905122 2026] [:error] [pid 37543:tid 37559] [client 51.103.161.170:11748] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "ac5rCXhdk2bEYJCvILbwzwAAAU4"]
[Thu Apr 02 21:11:38.458563 2026] [:error] [pid 37543:tid 37555] [client 51.103.161.170:11197] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web.php"] [unique_id "ac5rCnhdk2bEYJCvILbw0wAAAUo"]
[Thu Apr 02 21:11:38.981634 2026] [:error] [pid 29467:tid 29487] [client 51.103.161.170:11236] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5rCr4VUBFCJAq-WOmxYgAAARE"]
[Thu Apr 02 21:11:39.477198 2026] [:error] [pid 29467:tid 29483] [client 51.103.161.170:11719] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5rC74VUBFCJAq-WOmxaAAAAQ0"]
[Thu Apr 02 21:11:41.357455 2026] [:error] [pid 37543:tid 37567] [client 51.103.161.170:12889] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5rDXhdk2bEYJCvILbw1AAAAVY"]
[Thu Apr 02 21:11:42.041793 2026] [:error] [pid 59194:tid 59218] [client 51.103.161.170:11736] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5rDhMpAeV11hcQehxRzAAAAAU"]
[Thu Apr 02 21:11:42.528300 2026] [:error] [pid 59201:tid 59289] [client 51.103.161.170:9136] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "ac5rDsAC0Tw8eL6gzZ4r-QAAAJY"]
[Thu Apr 02 21:11:43.052589 2026] [:error] [pid 59194:tid 59220] [client 51.103.161.170:10516] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "ac5rDxMpAeV11hcQehxRzQAAAAc"]
[Thu Apr 02 21:11:43.524921 2026] [:error] [pid 23927:tid 23935] [client 51.103.161.170:9110] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "ac5rD0sZwqCndhl9uKDN1AAAAYY"]
[Thu Apr 02 21:11:44.013453 2026] [:error] [pid 59194:tid 59235] [client 51.103.161.170:11202] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "ac5rEBMpAeV11hcQehxRzwAAABY"]
[Thu Apr 02 21:11:44.489647 2026] [:error] [pid 59305:tid 59322] [client 51.103.161.170:10580] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/com.php"] [unique_id "ac5rEKr2tV4rDwKFxKeuaAAAAM0"]
[Thu Apr 02 21:11:45.155705 2026] [:error] [pid 29467:tid 29474] [client 51.103.161.170:12869] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/com.php"] [unique_id "ac5rEb4VUBFCJAq-WOmxdwAAAQQ"]
[Thu Apr 02 21:11:45.724713 2026] [:error] [pid 59305:tid 59323] [client 51.103.161.170:9149] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/com.php"] [unique_id "ac5rEar2tV4rDwKFxKeuawAAAM4"]
[Thu Apr 02 21:11:46.632464 2026] [:error] [pid 23927:tid 23951] [client 51.103.161.170:11193] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/com.php"] [unique_id "ac5rEksZwqCndhl9uKDN2AAAAZY"]
[Thu Apr 02 21:11:47.146806 2026] [:error] [pid 29467:tid 29482] [client 51.103.161.170:10549] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ac5rE74VUBFCJAq-WOmxfwAAAQw"]
[Thu Apr 02 21:11:47.639517 2026] [:error] [pid 54384:tid 54389] [client 51.103.161.170:44550] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ac5rE9WWpaby3TVN7MclYAAAAcM"]
[Thu Apr 02 21:11:48.136495 2026] [:error] [pid 59194:tid 59229] [client 51.103.161.170:9094] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ac5rFBMpAeV11hcQehxR0wAAABA"]
[Thu Apr 02 21:11:48.608745 2026] [:error] [pid 29467:tid 29489] [client 51.103.161.170:9140] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ac5rFL4VUBFCJAq-WOmxhAAAARM"]
[Thu Apr 02 21:11:49.097004 2026] [:error] [pid 59305:tid 59316] [client 51.103.161.170:11215] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "ac5rFar2tV4rDwKFxKeucAAAAMc"]
[Thu Apr 02 21:11:49.713923 2026] [:error] [pid 29467:tid 29494] [client 51.103.161.170:10617] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "ac5rFb4VUBFCJAq-WOmxkAAAARg"]
[Thu Apr 02 21:11:50.201446 2026] [:error] [pid 59194:tid 59219] [client 51.103.161.170:10592] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "ac5rFhMpAeV11hcQehxR1AAAAAY"]
[Thu Apr 02 21:11:50.696500 2026] [:error] [pid 29467:tid 29493] [client 51.103.161.170:45136] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "ac5rFr4VUBFCJAq-WOmxlwAAARc"]
[Thu Apr 02 21:11:51.172883 2026] [:error] [pid 54384:tid 54405] [client 51.103.161.170:63892] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "ac5rF9WWpaby3TVN7MclZAAAAdM"]
[Thu Apr 02 21:11:51.650925 2026] [:error] [pid 59194:tid 59227] [client 51.103.161.170:12901] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "ac5rFxMpAeV11hcQehxR1QAAAA4"]
[Thu Apr 02 21:11:52.125130 2026] [:error] [pid 59194:tid 59224] [client 51.103.161.170:10610] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "ac5rGBMpAeV11hcQehxR1gAAAAs"]
[Thu Apr 02 21:11:52.711949 2026] [:error] [pid 59194:tid 59217] [client 51.103.161.170:11187] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "ac5rGBMpAeV11hcQehxR2wAAAAQ"]
[Thu Apr 02 21:11:53.185716 2026] [:error] [pid 29467:tid 29493] [client 51.103.161.170:44591] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ac5rGb4VUBFCJAq-WOmxoAAAARc"]
[Thu Apr 02 21:11:53.667673 2026] [:error] [pid 59305:tid 59312] [client 51.103.161.170:63887] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ac5rGar2tV4rDwKFxKeucwAAAMM"]
[Thu Apr 02 21:11:54.214769 2026] [:error] [pid 54384:tid 54400] [client 51.103.161.170:11224] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ac5rGtWWpaby3TVN7MclbQAAAc4"]
[Thu Apr 02 21:11:54.777566 2026] [:error] [pid 29467:tid 29474] [client 51.103.161.170:11728] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ac5rGr4VUBFCJAq-WOmxsAAAAQQ"]
[Thu Apr 02 21:11:55.328075 2026] [:error] [pid 59305:tid 59326] [client 51.103.161.170:63920] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5rG6r2tV4rDwKFxKeufgAAANE"]
[Thu Apr 02 21:11:55.802936 2026] [:error] [pid 23927:tid 23942] [client 51.103.161.170:11160] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5rG0sZwqCndhl9uKDN3gAAAY0"]
[Thu Apr 02 21:11:56.281808 2026] [:error] [pid 23927:tid 23933] [client 51.103.161.170:12356] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5rHEsZwqCndhl9uKDN4wAAAYQ"]
[Thu Apr 02 21:11:56.941928 2026] [:error] [pid 29467:tid 29483] [client 51.103.161.170:12410] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5rHL4VUBFCJAq-WOmxtgAAAQ0"]
[Thu Apr 02 21:11:57.433578 2026] [:error] [pid 59200:tid 59260] [client 51.103.161.170:12914] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "ac5rHbfP26txrdLs3EqCXAAAAFQ"]
[Thu Apr 02 21:11:57.915988 2026] [:error] [pid 59200:tid 59255] [client 51.103.161.170:11769] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "ac5rHbfP26txrdLs3EqCXgAAAE8"]
[Thu Apr 02 21:11:58.387944 2026] [:error] [pid 29467:tid 29492] [client 51.103.161.170:12401] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "ac5rHr4VUBFCJAq-WOmxvQAAARY"]
[Thu Apr 02 21:11:58.859632 2026] [:error] [pid 29467:tid 29475] [client 51.103.161.170:44579] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "ac5rHr4VUBFCJAq-WOmxwAAAAQU"]
[Thu Apr 02 21:11:59.407888 2026] [:error] [pid 37543:tid 37568] [client 51.103.161.170:12370] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "ac5rH3hdk2bEYJCvILbw5QAAAVc"]
[Thu Apr 02 21:11:59.928463 2026] [:error] [pid 59201:tid 59283] [client 51.103.161.170:12404] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "ac5rH8AC0Tw8eL6gzZ4sBAAAAJA"]
[Thu Apr 02 21:12:00.578613 2026] [:error] [pid 29467:tid 29492] [client 51.103.161.170:11775] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "ac5rIL4VUBFCJAq-WOmxxgAAARY"]
[Thu Apr 02 21:12:01.054614 2026] [:error] [pid 59305:tid 59328] [client 51.103.161.170:11734] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "ac5rIar2tV4rDwKFxKeujAAAANM"]
[Thu Apr 02 21:12:01.613478 2026] [:error] [pid 59201:tid 59282] [client 51.103.161.170:11219] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac5rIcAC0Tw8eL6gzZ4sCgAAAI8"]
[Thu Apr 02 21:12:02.097490 2026] [:error] [pid 54384:tid 54399] [client 51.103.161.170:45185] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac5rItWWpaby3TVN7MclcgAAAc0"]
[Thu Apr 02 21:12:02.591336 2026] [:error] [pid 59305:tid 59327] [client 51.103.161.170:10568] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac5rIqr2tV4rDwKFxKeulgAAANI"]
[Thu Apr 02 21:12:03.281161 2026] [:error] [pid 54384:tid 54386] [client 51.103.161.170:10570] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac5rI9WWpaby3TVN7McldgAAAcA"]
[Thu Apr 02 21:12:03.847498 2026] [:error] [pid 59305:tid 59317] [client 51.103.161.170:12383] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wqqs.php"] [unique_id "ac5rI6r2tV4rDwKFxKeulwAAAMg"]
[Thu Apr 02 21:12:04.333917 2026] [:error] [pid 54384:tid 54389] [client 51.103.161.170:44606] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wqqs.php"] [unique_id "ac5rJNWWpaby3TVN7MclewAAAcM"]
[Thu Apr 02 21:12:04.916122 2026] [:error] [pid 59201:tid 59285] [client 51.103.161.170:45208] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wqqs.php"] [unique_id "ac5rJMAC0Tw8eL6gzZ4sEAAAAJI"]
[Thu Apr 02 21:12:05.507554 2026] [:error] [pid 29467:tid 29490] [client 51.103.161.170:11237] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wqqs.php"] [unique_id "ac5rJb4VUBFCJAq-WOmx0AAAARQ"]
[Thu Apr 02 21:12:05.987988 2026] [:error] [pid 29467:tid 29473] [client 51.103.161.170:44601] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ac5rJb4VUBFCJAq-WOmx0gAAAQM"]
[Thu Apr 02 21:12:06.465864 2026] [:error] [pid 59305:tid 59324] [client 51.103.161.170:12866] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ac5rJqr2tV4rDwKFxKeumwAAAM8"]
[Thu Apr 02 21:12:06.942558 2026] [:error] [pid 59305:tid 59328] [client 51.103.161.170:11196] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ac5rJqr2tV4rDwKFxKeunwAAANM"]
[Thu Apr 02 21:12:07.425666 2026] [:error] [pid 23927:tid 23939] [client 51.103.161.170:12388] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ac5rJ0sZwqCndhl9uKDN8gAAAYo"]
[Thu Apr 02 21:12:08.033800 2026] [:error] [pid 59201:tid 59275] [client 51.103.161.170:11205] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ac5rKMAC0Tw8eL6gzZ4sGwAAAIg"]
[Thu Apr 02 21:12:08.509374 2026] [:error] [pid 54384:tid 54402] [client 51.103.161.170:11242] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ac5rKNWWpaby3TVN7MclfwAAAdA"]
[Thu Apr 02 21:12:09.128965 2026] [:error] [pid 59305:tid 59311] [client 51.103.161.170:11220] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ac5rKar2tV4rDwKFxKeuqAAAAMI"]
[Thu Apr 02 21:12:09.749848 2026] [:error] [pid 29467:tid 29484] [client 51.103.161.170:11239] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ac5rKb4VUBFCJAq-WOmx5AAAAQ4"]
[Thu Apr 02 21:12:10.285816 2026] [:error] [pid 59305:tid 59317] [client 51.103.161.170:11156] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aifa.php"] [unique_id "ac5rKqr2tV4rDwKFxKeurQAAAMg"]
[Thu Apr 02 21:12:10.795509 2026] [:error] [pid 29467:tid 29479] [client 51.103.161.170:11259] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aifa.php"] [unique_id "ac5rKr4VUBFCJAq-WOmx6wAAAQk"]
[Thu Apr 02 21:12:11.269525 2026] [:error] [pid 59194:tid 59223] [client 51.103.161.170:12355] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aifa.php"] [unique_id "ac5rKxMpAeV11hcQehxR8QAAAAo"]
[Thu Apr 02 21:12:11.781228 2026] [:error] [pid 23927:tid 23936] [client 51.103.161.170:11149] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aifa.php"] [unique_id "ac5rK0sZwqCndhl9uKDN-wAAAYc"]
[Thu Apr 02 21:12:12.476032 2026] [:error] [pid 59305:tid 59333] [client 51.103.161.170:45153] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "ac5rLKr2tV4rDwKFxKeutAAAANg"]
[Thu Apr 02 21:12:13.034830 2026] [:error] [pid 59200:tid 59263] [client 51.103.161.170:9090] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "ac5rLbfP26txrdLs3EqCZAAAAFc"]
[Thu Apr 02 21:12:13.536294 2026] [:error] [pid 37543:tid 37545] [client 51.103.161.170:11150] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "ac5rLXhdk2bEYJCvILbw9QAAAUA"]
[Thu Apr 02 21:12:14.038798 2026] [:error] [pid 37543:tid 37565] [client 51.103.161.170:12373] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "ac5rLnhdk2bEYJCvILbw9gAAAVQ"]
[Thu Apr 02 21:12:14.706900 2026] [:error] [pid 29467:tid 29474] [client 51.103.161.170:11164] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "ac5rLr4VUBFCJAq-WOmx8wAAAQQ"]
[Thu Apr 02 21:12:15.259572 2026] [:error] [pid 59305:tid 59325] [client 51.103.161.170:12409] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "ac5rL6r2tV4rDwKFxKeuvAAAANA"]
[Thu Apr 02 21:12:16.150148 2026] [:error] [pid 37543:tid 37548] [client 51.103.161.170:12407] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "ac5rMHhdk2bEYJCvILbw-QAAAUM"]
[Thu Apr 02 21:12:16.667530 2026] [:error] [pid 37543:tid 37547] [client 51.103.161.170:10602] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "ac5rMHhdk2bEYJCvILbw-gAAAUI"]
[Thu Apr 02 21:12:17.224633 2026] [:error] [pid 37543:tid 37550] [client 51.103.161.170:12389] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "ac5rMXhdk2bEYJCvILbw_QAAAUU"]
[Thu Apr 02 21:12:17.703133 2026] [:error] [pid 37543:tid 37554] [client 51.103.161.170:10504] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "ac5rMXhdk2bEYJCvILbxAgAAAUk"]
[Thu Apr 02 21:12:18.201525 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:12887] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "ac5rMr4VUBFCJAq-WOmx-wAAARU"]
[Thu Apr 02 21:12:18.955974 2026] [:error] [pid 54384:tid 54407] [client 51.103.161.170:11165] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "ac5rMtWWpaby3TVN7McljQAAAdU"]
[Thu Apr 02 21:12:19.534496 2026] [:error] [pid 23927:tid 23939] [client 51.103.161.170:10578] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac5rM0sZwqCndhl9uKDOAwAAAYo"]
[Thu Apr 02 21:12:20.326563 2026] [:error] [pid 59200:tid 59264] [client 51.103.161.170:11773] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac5rNLfP26txrdLs3EqCaQAAAFg"]
[Thu Apr 02 21:12:20.929213 2026] [:error] [pid 59194:tid 59221] [client 51.103.161.170:10500] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac5rNBMpAeV11hcQehxR_QAAAAg"]
[Thu Apr 02 21:12:21.511005 2026] [:error] [pid 37543:tid 37548] [client 51.103.161.170:12908] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac5rNXhdk2bEYJCvILbxCAAAAUM"]
[Thu Apr 02 21:12:22.103520 2026] [:error] [pid 54384:tid 54398] [client 51.103.161.170:10522] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ac5rNtWWpaby3TVN7MclkgAAAcw"]
[Thu Apr 02 21:12:22.669023 2026] [:error] [pid 54384:tid 54403] [client 51.103.161.170:12405] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ac5rNtWWpaby3TVN7McllwAAAdE"]
[Thu Apr 02 21:12:23.237624 2026] [:error] [pid 37543:tid 37567] [client 51.103.161.170:11241] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ac5rN3hdk2bEYJCvILbxDgAAAVY"]
[Thu Apr 02 21:12:23.817165 2026] [:error] [pid 29467:tid 29477] [client 51.103.161.170:63882] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ac5rN74VUBFCJAq-WOmyAwAAAQc"]
[Thu Apr 02 21:12:24.557108 2026] [:error] [pid 23927:tid 23929] [client 51.103.161.170:11251] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "ac5rOEsZwqCndhl9uKDOHwAAAYA"]
[Thu Apr 02 21:12:25.240537 2026] [:error] [pid 23927:tid 23936] [client 51.103.161.170:12882] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "ac5rOUsZwqCndhl9uKDOKAAAAYc"]
[Thu Apr 02 21:12:25.768174 2026] [:error] [pid 23927:tid 23949] [client 51.103.161.170:10621] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "ac5rOUsZwqCndhl9uKDOLAAAAZQ"]
[Thu Apr 02 21:12:26.312512 2026] [:error] [pid 23927:tid 23948] [client 51.103.161.170:11749] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "ac5rOksZwqCndhl9uKDOLwAAAZM"]
[Thu Apr 02 21:12:26.901935 2026] [:error] [pid 59305:tid 59322] [client 51.103.161.170:45139] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "ac5rOqr2tV4rDwKFxKeuzwAAAM0"]
[Thu Apr 02 21:12:27.417963 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:10560] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "ac5rO74VUBFCJAq-WOmyCwAAARU"]
[Thu Apr 02 21:12:49.996693 2026] [:error] [pid 54384:tid 54399] [client 51.103.161.170:44553] [client 51.103.161.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac5rUdWWpaby3TVN7MclvgAAAc0"]
[Thu Apr 02 21:12:50.824590 2026] [:error] [pid 29467:tid 29493] [client 51.103.161.170:11314] [client 51.103.161.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac5rUr4VUBFCJAq-WOmyKgAAARc"]
[Thu Apr 02 21:12:54.952963 2026] [:error] [pid 59305:tid 59320] [client 51.103.161.170:11151] [client 51.103.161.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "ac5rVqr2tV4rDwKFxKevJAAAAMs"]
[Thu Apr 02 21:13:20.024108 2026] [:error] [pid 59201:tid 59286] [client 51.103.161.170:9117] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filesss.php"] [unique_id "ac5rcMAC0Tw8eL6gzZ4sRgAAAJM"]
[Thu Apr 02 21:13:20.510215 2026] [:error] [pid 29467:tid 29490] [client 51.103.161.170:10544] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filesss.php"] [unique_id "ac5rcL4VUBFCJAq-WOmypAAAARQ"]
[Thu Apr 02 21:13:21.002886 2026] [:error] [pid 54384:tid 54388] [client 51.103.161.170:11189] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filesss.php"] [unique_id "ac5rcdWWpaby3TVN7Mcl2AAAAcI"]
[Thu Apr 02 21:13:21.645368 2026] [:error] [pid 59194:tid 59217] [client 51.103.161.170:10606] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filesss.php"] [unique_id "ac5rcRMpAeV11hcQehxSFwAAAAQ"]
[Thu Apr 02 21:13:22.121644 2026] [:error] [pid 59305:tid 59326] [client 51.103.161.170:10601] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "ac5rcqr2tV4rDwKFxKevOAAAANE"]
[Thu Apr 02 21:13:22.770062 2026] [:error] [pid 59305:tid 59316] [client 51.103.161.170:11744] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "ac5rcqr2tV4rDwKFxKevOQAAAMc"]
[Thu Apr 02 21:13:23.246417 2026] [:error] [pid 59305:tid 59331] [client 51.103.161.170:11222] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "ac5rc6r2tV4rDwKFxKevPAAAANY"]
[Thu Apr 02 21:13:23.755127 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:12874] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "ac5rc74VUBFCJAq-WOmyqAAAARU"]
[Thu Apr 02 21:13:24.235592 2026] [:error] [pid 59305:tid 59313] [client 51.103.161.170:44584] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "ac5rdKr2tV4rDwKFxKevQQAAAMQ"]
[Thu Apr 02 21:13:24.808775 2026] [:error] [pid 59305:tid 59320] [client 51.103.161.170:11228] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "ac5rdKr2tV4rDwKFxKevRAAAAMs"]
[Thu Apr 02 21:13:25.388934 2026] [:error] [pid 59305:tid 59314] [client 51.103.161.170:48783] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "ac5rdar2tV4rDwKFxKevSQAAAMU"]
[Thu Apr 02 21:13:25.868319 2026] [:error] [pid 29467:tid 29492] [client 51.103.161.170:9129] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/X7x.php"] [unique_id "ac5rdb4VUBFCJAq-WOmytAAAARY"]
[Thu Apr 02 21:13:26.421380 2026] [:error] [pid 59201:tid 59268] [client 51.103.161.170:9151] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "ac5rdsAC0Tw8eL6gzZ4sSAAAAIE"]
[Thu Apr 02 21:13:26.938439 2026] [:error] [pid 59201:tid 59276] [client 51.103.161.170:11153] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "ac5rdsAC0Tw8eL6gzZ4sSgAAAIk"]
[Thu Apr 02 21:13:27.412529 2026] [:error] [pid 59305:tid 59312] [client 51.103.161.170:11138] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "ac5rd6r2tV4rDwKFxKevUAAAAMM"]
[Thu Apr 02 21:13:28.087828 2026] [:error] [pid 54384:tid 54405] [client 51.103.161.170:11140] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "ac5reNWWpaby3TVN7Mcl5QAAAdM"]
[Thu Apr 02 21:13:28.745106 2026] [:error] [pid 29467:tid 29484] [client 51.103.161.170:47105] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "ac5reL4VUBFCJAq-WOmyxwAAAQ4"]
[Thu Apr 02 21:13:29.220420 2026] [:error] [pid 59201:tid 59277] [client 51.103.161.170:12927] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "ac5recAC0Tw8eL6gzZ4sTQAAAIo"]
[Thu Apr 02 21:13:29.789578 2026] [:error] [pid 37543:tid 37548] [client 51.103.161.170:10534] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "ac5reXhdk2bEYJCvILbxWgAAAUM"]
[Thu Apr 02 21:13:30.353542 2026] [:error] [pid 29467:tid 29484] [client 51.103.161.170:12369] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "ac5rer4VUBFCJAq-WOmy1gAAAQ4"]
[Thu Apr 02 21:13:31.035861 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:12914] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "ac5re74VUBFCJAq-WOmy4QAAARU"]
[Thu Apr 02 21:13:31.631031 2026] [:error] [pid 29467:tid 29470] [client 51.103.161.170:11740] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "ac5re74VUBFCJAq-WOmy7QAAAQA"]
[Thu Apr 02 21:13:32.108253 2026] [:error] [pid 29467:tid 29474] [client 51.103.161.170:11162] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "ac5rfL4VUBFCJAq-WOmy8gAAAQQ"]
[Thu Apr 02 21:13:32.608738 2026] [:error] [pid 29467:tid 29476] [client 51.103.161.170:12890] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "ac5rfL4VUBFCJAq-WOmy9wAAAQY"]
[Thu Apr 02 21:13:33.218806 2026] [:error] [pid 23927:tid 23932] [client 51.103.161.170:45219] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filer.php"] [unique_id "ac5rfUsZwqCndhl9uKDOigAAAYM"]
[Thu Apr 02 21:13:33.789372 2026] [:error] [pid 23927:tid 23934] [client 51.103.161.170:45237] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filer.php"] [unique_id "ac5rfUsZwqCndhl9uKDOiwAAAYU"]
[Thu Apr 02 21:13:34.535712 2026] [:error] [pid 29467:tid 29483] [client 51.103.161.170:12366] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filer.php"] [unique_id "ac5rfr4VUBFCJAq-WOmzBAAAAQ0"]
[Thu Apr 02 21:13:35.261991 2026] [:error] [pid 59305:tid 59332] [client 51.103.161.170:10510] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filer.php"] [unique_id "ac5rf6r2tV4rDwKFxKevZwAAANc"]
[Thu Apr 02 21:13:35.871318 2026] [:error] [pid 29467:tid 29482] [client 51.103.161.170:11191] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "ac5rf74VUBFCJAq-WOmzCgAAAQw"]
[Thu Apr 02 21:13:36.656923 2026] [:error] [pid 29467:tid 29478] [client 51.103.161.170:10623] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "ac5rgL4VUBFCJAq-WOmzFwAAAQg"]
[Thu Apr 02 21:13:37.199008 2026] [:error] [pid 23927:tid 23938] [client 51.103.161.170:12363] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "ac5rgUsZwqCndhl9uKDOjQAAAYk"]
[Thu Apr 02 21:13:37.724548 2026] [:error] [pid 29467:tid 29486] [client 51.103.161.170:10548] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "ac5rgb4VUBFCJAq-WOmzIwAAARA"]
[Thu Apr 02 21:13:38.280903 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:11255] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ac5rgr4VUBFCJAq-WOmzKAAAARU"]
[Thu Apr 02 21:13:39.198452 2026] [:error] [pid 29467:tid 29475] [client 51.103.161.170:12896] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ac5rg74VUBFCJAq-WOmzLQAAAQU"]
[Thu Apr 02 21:13:40.058532 2026] [:error] [pid 23927:tid 23939] [client 51.103.161.170:10507] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ac5rhEsZwqCndhl9uKDOkQAAAYo"]
[Thu Apr 02 21:13:40.680326 2026] [:error] [pid 59200:tid 59240] [client 51.103.161.170:44562] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ac5rhLfP26txrdLs3EqCoQAAAEA"]
[Thu Apr 02 21:13:41.255956 2026] [:error] [pid 59194:tid 59237] [client 51.103.161.170:9103] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "ac5rhRMpAeV11hcQehxSIgAAABg"]
[Thu Apr 02 21:13:41.772570 2026] [:error] [pid 59305:tid 59313] [client 51.103.161.170:47142] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "ac5rhar2tV4rDwKFxKeveAAAAMQ"]
[Thu Apr 02 21:13:42.307761 2026] [:error] [pid 59201:tid 59284] [client 51.103.161.170:10583] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "ac5rhsAC0Tw8eL6gzZ4sWgAAAJE"]
[Thu Apr 02 21:13:42.961568 2026] [:error] [pid 23927:tid 23945] [client 51.103.161.170:11211] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "ac5rhksZwqCndhl9uKDOlAAAAZA"]
[Thu Apr 02 21:13:43.512853 2026] [:error] [pid 59201:tid 59281] [client 51.103.161.170:47156] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aves.php"] [unique_id "ac5rh8AC0Tw8eL6gzZ4sXgAAAI4"]
[Thu Apr 02 21:13:44.123040 2026] [:error] [pid 37543:tid 37545] [client 51.103.161.170:11323] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aves.php"] [unique_id "ac5riHhdk2bEYJCvILbxawAAAUA"]
[Thu Apr 02 21:13:44.929366 2026] [:error] [pid 54384:tid 54406] [client 51.103.161.170:44572] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aves.php"] [unique_id "ac5riNWWpaby3TVN7McmAgAAAdQ"]
[Thu Apr 02 21:13:45.469338 2026] [:error] [pid 29467:tid 29487] [client 51.103.161.170:44601] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aves.php"] [unique_id "ac5rib4VUBFCJAq-WOmzOgAAARE"]
[Thu Apr 02 21:13:46.191881 2026] [:error] [pid 59194:tid 59213] [client 51.103.161.170:9147] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gorila.php"] [unique_id "ac5rihMpAeV11hcQehxSJwAAAAA"]
[Thu Apr 02 21:13:46.783326 2026] [:error] [pid 54384:tid 54393] [client 51.103.161.170:45126] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gorila.php"] [unique_id "ac5ritWWpaby3TVN7McmAwAAAcc"]
[Thu Apr 02 21:13:47.550199 2026] [:error] [pid 59194:tid 59236] [client 51.103.161.170:9139] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gorila.php"] [unique_id "ac5rixMpAeV11hcQehxSKAAAABc"]
[Thu Apr 02 21:13:48.035722 2026] [:error] [pid 37543:tid 37564] [client 51.103.161.170:12898] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gorila.php"] [unique_id "ac5rjHhdk2bEYJCvILbxcAAAAVM"]
[Thu Apr 02 21:13:48.736859 2026] [:error] [pid 59305:tid 59322] [client 51.103.161.170:12910] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanta.php"] [unique_id "ac5rjKr2tV4rDwKFxKevfwAAAM0"]
[Thu Apr 02 21:13:49.553838 2026] [:error] [pid 59305:tid 59318] [client 51.103.161.170:45182] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanta.php"] [unique_id "ac5rjar2tV4rDwKFxKevhAAAAMk"]
[Thu Apr 02 21:13:50.160444 2026] [:error] [pid 29467:tid 29490] [client 51.103.161.170:11252] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanta.php"] [unique_id "ac5rjr4VUBFCJAq-WOmzTwAAARQ"]
[Thu Apr 02 21:13:50.922780 2026] [:error] [pid 29467:tid 29480] [client 51.103.161.170:11165] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanta.php"] [unique_id "ac5rjr4VUBFCJAq-WOmzUwAAAQo"]
[Thu Apr 02 21:13:51.633858 2026] [:error] [pid 23927:tid 23945] [client 51.103.161.170:11765] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sh3ll.php"] [unique_id "ac5rj0sZwqCndhl9uKDOngAAAZA"]
[Thu Apr 02 21:13:52.559218 2026] [:error] [pid 59194:tid 59232] [client 51.103.161.170:11198] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sh3ll.php"] [unique_id "ac5rkBMpAeV11hcQehxSLgAAABM"]
[Thu Apr 02 21:13:53.294750 2026] [:error] [pid 29467:tid 29492] [client 51.103.161.170:11745] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sh3ll.php"] [unique_id "ac5rkb4VUBFCJAq-WOmzWgAAARY"]
[Thu Apr 02 21:13:53.875627 2026] [:error] [pid 29467:tid 29488] [client 51.103.161.170:45184] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sh3ll.php"] [unique_id "ac5rkb4VUBFCJAq-WOmzXQAAARI"]
[Thu Apr 02 21:13:54.507702 2026] [:error] [pid 59194:tid 59237] [client 51.103.161.170:11723] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "ac5rkhMpAeV11hcQehxSMAAAABg"]
[Thu Apr 02 21:13:55.245475 2026] [:error] [pid 59194:tid 59230] [client 51.103.161.170:11741] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "ac5rkxMpAeV11hcQehxSMgAAABE"]
[Thu Apr 02 21:13:55.897346 2026] [:error] [pid 23927:tid 23938] [client 51.103.161.170:11154] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "ac5rk0sZwqCndhl9uKDOpAAAAYk"]
[Thu Apr 02 21:13:56.838900 2026] [:error] [pid 54384:tid 54404] [client 51.103.161.170:8837] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "ac5rlNWWpaby3TVN7McmEgAAAdI"]
[Thu Apr 02 21:20:21.383300 2026] [:error] [pid 23927:tid 23949] [client 89.184.221.113:45611] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac5tFUsZwqCndhl9uKDRPgAAAZQ"]
[Thu Apr 02 21:20:21.383475 2026] [:error] [pid 54384:tid 54388] [client 89.184.221.113:44151] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac5tFdWWpaby3TVN7McoSgAAAcI"]
[Thu Apr 02 21:20:21.858603 2026] [:error] [pid 59305:tid 59312] [client 89.184.221.113:39789] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac5tFar2tV4rDwKFxKezZQAAAMM"]
[Thu Apr 02 21:20:21.862564 2026] [:error] [pid 23927:tid 23940] [client 89.184.221.113:34817] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac5tFUsZwqCndhl9uKDRPwAAAYs"]
[Fri Apr 03 03:53:20.513766 2026] [:error] [pid 22778:tid 22788] [client 45.154.98.56:57446] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac7JMPS-q9hkdFqUjq81mAAAAMM"]
[Fri Apr 03 03:53:20.997280 2026] [:error] [pid 22671:tid 22712] [client 45.154.98.56:55360] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac7JMCRuUnMW7r8hvyYf-AAAABU"]
[Fri Apr 03 03:53:21.480295 2026] [:error] [pid 22673:tid 22747] [client 45.154.98.56:58971] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac7JMe-GlVDWdWxxwJBLtgAAAIE"]
[Fri Apr 03 03:53:23.646961 2026] [:error] [pid 22778:tid 22805] [client 45.154.98.56:55250] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac7JM_S-q9hkdFqUjq81pQAAANQ"]
[Fri Apr 03 08:15:52.706498 2026] [:error] [pid 33542:tid 33545] [client 158.158.110.103:41670] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac8GuHwb6uB1LaGtepY6fwAAAMA"]
[Fri Apr 03 08:15:53.274731 2026] [:error] [pid 40562:tid 40567] [client 158.158.110.103:56895] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac8GuTfFMXuP9zvqCeqOIwAAAYI"]
[Fri Apr 03 08:15:53.857541 2026] [:error] [pid 33445:tid 33457] [client 158.158.110.103:46740] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac8GuVlRNZ0iDVmJWM2fuwAAAAc"]
[Fri Apr 03 08:15:54.502400 2026] [:error] [pid 33445:tid 33470] [client 158.158.110.103:64706] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac8GullRNZ0iDVmJWM2fvwAAABQ"]
[Fri Apr 03 08:15:55.392650 2026] [:error] [pid 33446:tid 33488] [client 158.158.110.103:49184] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "ac8Gu9g3dCqFYIIdw0ox5QAAAEs"]
[Fri Apr 03 08:15:55.946250 2026] [:error] [pid 33446:tid 33480] [client 158.158.110.103:46729] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "ac8Gu9g3dCqFYIIdw0ox5wAAAEM"]
[Fri Apr 03 08:15:56.693612 2026] [:error] [pid 40533:tid 40547] [client 158.158.110.103:5737] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "ac8GvPbIAA8AViDmwssfiAAAAUw"]
[Fri Apr 03 08:15:57.625589 2026] [:error] [pid 33446:tid 33479] [client 158.158.110.103:41693] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ff1.php"] [unique_id "ac8Gvdg3dCqFYIIdw0ox7wAAAEI"]
[Fri Apr 03 08:15:59.433281 2026] [:error] [pid 40533:tid 40537] [client 158.158.110.103:49200] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "ac8Gv_bIAA8AViDmwssfigAAAUI"]
[Fri Apr 03 08:16:00.115570 2026] [:error] [pid 35469:tid 35476] [client 158.158.110.103:49193] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "ac8GwKGvTIc8-wY3jUQyuAAAAQU"]
[Fri Apr 03 08:16:00.800345 2026] [:error] [pid 40533:tid 40558] [client 158.158.110.103:41682] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "ac8GwPbIAA8AViDmwssfjgAAAVc"]
[Fri Apr 03 08:16:01.629958 2026] [:error] [pid 40562:tid 40566] [client 158.158.110.103:46331] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1.php"] [unique_id "ac8GwTfFMXuP9zvqCeqOKgAAAYE"]
[Fri Apr 03 08:16:02.407766 2026] [:error] [pid 40533:tid 40539] [client 158.158.110.103:5738] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac8GwvbIAA8AViDmwssfkQAAAUQ"]
[Fri Apr 03 08:16:03.157684 2026] [:error] [pid 40562:tid 40574] [client 158.158.110.103:61204] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac8GwzfFMXuP9zvqCeqOLgAAAYk"]
[Fri Apr 03 08:16:03.678496 2026] [:error] [pid 33542:tid 33559] [client 158.158.110.103:49186] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac8Gw3wb6uB1LaGtepY6mwAAAM4"]
[Fri Apr 03 08:16:04.283446 2026] [:error] [pid 33446:tid 33484] [client 158.158.110.103:5721] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "ac8GxNg3dCqFYIIdw0ox-wAAAEc"]
[Fri Apr 03 08:16:04.849835 2026] [:error] [pid 33447:tid 33526] [client 158.158.110.103:9522] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ac8GxEgaPmDHz92j4lOowAAAAJY"]
[Fri Apr 03 08:16:05.961371 2026] [:error] [pid 35469:tid 35479] [client 158.158.110.103:56854] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ac8GxaGvTIc8-wY3jUQyvAAAAQg"]
[Fri Apr 03 08:16:06.672614 2026] [:error] [pid 40533:tid 40541] [client 158.158.110.103:46734] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ac8GxvbIAA8AViDmwssfmwAAAUY"]
[Fri Apr 03 08:16:08.245676 2026] [:error] [pid 33542:tid 33563] [client 158.158.110.103:64764] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ac8GyHwb6uB1LaGtepY6ogAAANI"]
[Fri Apr 03 08:16:09.316347 2026] [:error] [pid 35469:tid 35471] [client 158.158.110.103:46281] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "ac8GyaGvTIc8-wY3jUQywAAAAQA"]
[Fri Apr 03 08:16:10.181782 2026] [:error] [pid 35469:tid 35486] [client 158.158.110.103:56869] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "ac8GyqGvTIc8-wY3jUQyxgAAAQ8"]
[Fri Apr 03 08:16:10.746896 2026] [:error] [pid 40562:tid 40589] [client 158.158.110.103:46303] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "ac8GyjfFMXuP9zvqCeqOOwAAAZg"]
[Fri Apr 03 08:16:11.318337 2026] [:error] [pid 40533:tid 40556] [client 158.158.110.103:56853] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/24.php"] [unique_id "ac8Gy_bIAA8AViDmwssfowAAAVU"]
[Fri Apr 03 08:16:12.085845 2026] [:error] [pid 40533:tid 40543] [client 158.158.110.103:49208] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ac8GzPbIAA8AViDmwssfpgAAAUg"]
[Fri Apr 03 08:16:13.632549 2026] [:error] [pid 40533:tid 40535] [client 158.158.110.103:56888] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ac8GzfbIAA8AViDmwssfrgAAAUA"]
[Fri Apr 03 08:16:14.399025 2026] [:error] [pid 40562:tid 40579] [client 158.158.110.103:41671] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ac8GzjfFMXuP9zvqCeqOQAAAAY4"]
[Fri Apr 03 08:16:15.026806 2026] [:error] [pid 40533:tid 40550] [client 158.158.110.103:49152] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ac8Gz_bIAA8AViDmwssfsgAAAU8"]
[Fri Apr 03 08:16:16.052108 2026] [:error] [pid 33445:tid 33471] [client 158.158.110.103:64729] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ac8G0FlRNZ0iDVmJWM2fyQAAABU"]
[Fri Apr 03 08:16:16.896762 2026] [:error] [pid 40533:tid 40555] [client 158.158.110.103:46752] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ac8G0PbIAA8AViDmwssftgAAAVQ"]
[Fri Apr 03 08:16:17.533049 2026] [:error] [pid 35469:tid 35480] [client 158.158.110.103:46296] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ac8G0aGvTIc8-wY3jUQy1AAAAQk"]
[Fri Apr 03 08:16:18.124377 2026] [:error] [pid 35469:tid 35488] [client 158.158.110.103:9512] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ac8G0qGvTIc8-wY3jUQy1wAAARE"]
[Fri Apr 03 08:16:18.644560 2026] [:error] [pid 33446:tid 33488] [client 158.158.110.103:46749] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyiiz.php"] [unique_id "ac8G0tg3dCqFYIIdw0oyDwAAAEs"]
[Fri Apr 03 08:16:19.429425 2026] [:error] [pid 35469:tid 35486] [client 158.158.110.103:61246] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyiiz.php"] [unique_id "ac8G06GvTIc8-wY3jUQy2wAAAQ8"]
[Fri Apr 03 08:16:19.932697 2026] [:error] [pid 33447:tid 33504] [client 158.158.110.103:59308] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyiiz.php"] [unique_id "ac8G00gaPmDHz92j4lOoyQAAAIA"]
[Fri Apr 03 08:16:20.474951 2026] [:error] [pid 33447:tid 33526] [client 158.158.110.103:64705] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyiiz.php"] [unique_id "ac8G1EgaPmDHz92j4lOoygAAAJY"]
[Fri Apr 03 08:16:21.081696 2026] [:error] [pid 40533:tid 40554] [client 158.158.110.103:9497] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac8G1fbIAA8AViDmwssfuwAAAVM"]
[Fri Apr 03 08:16:21.570146 2026] [:error] [pid 35469:tid 35493] [client 158.158.110.103:41695] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac8G1aGvTIc8-wY3jUQy4AAAARY"]
[Fri Apr 03 08:16:22.049931 2026] [:error] [pid 33542:tid 33567] [client 158.158.110.103:5736] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac8G1nwb6uB1LaGtepY63QAAANY"]
[Fri Apr 03 08:16:23.121695 2026] [:error] [pid 40562:tid 40577] [client 158.158.110.103:56855] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac8G1zfFMXuP9zvqCeqORwAAAYw"]
[Fri Apr 03 08:16:23.649506 2026] [:error] [pid 33542:tid 33546] [client 158.158.110.103:9526] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac8G13wb6uB1LaGtepY65QAAAME"]
[Fri Apr 03 08:16:24.173906 2026] [:error] [pid 33446:tid 33477] [client 158.158.110.103:61203] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac8G2Ng3dCqFYIIdw0oyFgAAAEA"]
[Fri Apr 03 08:16:24.725899 2026] [:error] [pid 33446:tid 33478] [client 158.158.110.103:64766] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac8G2Ng3dCqFYIIdw0oyGQAAAEE"]
[Fri Apr 03 08:16:25.235165 2026] [:error] [pid 33446:tid 33494] [client 158.158.110.103:46739] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ac8G2dg3dCqFYIIdw0oyHwAAAFE"]
[Fri Apr 03 08:16:25.959829 2026] [:error] [pid 33542:tid 33569] [client 158.158.110.103:9525] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac8G2Xwb6uB1LaGtepY67gAAANg"]
[Fri Apr 03 08:16:26.598143 2026] [:error] [pid 33542:tid 33556] [client 158.158.110.103:64757] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac8G2nwb6uB1LaGtepY69QAAAMs"]
[Fri Apr 03 08:16:27.160266 2026] [:error] [pid 33542:tid 33565] [client 158.158.110.103:9495] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac8G23wb6uB1LaGtepY6-wAAANQ"]
[Fri Apr 03 08:16:27.976261 2026] [:error] [pid 33446:tid 33500] [client 158.158.110.103:46330] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac8G29g3dCqFYIIdw0oyJgAAAFc"]
[Fri Apr 03 08:16:28.555391 2026] [:error] [pid 33446:tid 33491] [client 158.158.110.103:41725] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "ac8G3Ng3dCqFYIIdw0oyJwAAAE4"]
[Fri Apr 03 08:16:29.510155 2026] [:error] [pid 33445:tid 33467] [client 158.158.110.103:49206] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "ac8G3VlRNZ0iDVmJWM2f0gAAABE"]
[Fri Apr 03 08:16:30.387223 2026] [:error] [pid 33446:tid 33482] [client 158.158.110.103:49207] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "ac8G3tg3dCqFYIIdw0oyLAAAAEU"]
[Fri Apr 03 08:16:31.063643 2026] [:error] [pid 35469:tid 35487] [client 158.158.110.103:41689] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "ac8G36GvTIc8-wY3jUQy5wAAARA"]
[Fri Apr 03 08:16:31.696127 2026] [:error] [pid 40533:tid 40540] [client 158.158.110.103:5705] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac8G3_bIAA8AViDmwssfzQAAAUU"]
[Fri Apr 03 08:16:32.442219 2026] [:error] [pid 35469:tid 35489] [client 158.158.110.103:61198] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac8G4KGvTIc8-wY3jUQy6gAAARI"]
[Fri Apr 03 08:16:33.021183 2026] [:error] [pid 40562:tid 40572] [client 158.158.110.103:9509] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac8G4TfFMXuP9zvqCeqOUQAAAYc"]
[Fri Apr 03 08:16:33.813408 2026] [:error] [pid 33446:tid 33492] [client 158.158.110.103:41697] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac8G4dg3dCqFYIIdw0oyMgAAAE8"]
[Fri Apr 03 08:16:34.588011 2026] [:error] [pid 40562:tid 40580] [client 158.158.110.103:46313] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "ac8G4jfFMXuP9zvqCeqOVgAAAY8"]
[Fri Apr 03 08:16:35.143334 2026] [:error] [pid 33446:tid 33497] [client 158.158.110.103:46320] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "ac8G49g3dCqFYIIdw0oyNwAAAFQ"]
[Fri Apr 03 08:16:35.629087 2026] [:error] [pid 40562:tid 40582] [client 158.158.110.103:41672] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "ac8G4zfFMXuP9zvqCeqOXAAAAZE"]
[Fri Apr 03 08:16:36.229562 2026] [:error] [pid 40562:tid 40572] [client 158.158.110.103:49178] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "ac8G5DfFMXuP9zvqCeqOYQAAAYc"]
[Fri Apr 03 08:16:36.762147 2026] [:error] [pid 33542:tid 33546] [client 158.158.110.103:41701] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "ac8G5Hwb6uB1LaGtepY7KAAAAME"]
[Fri Apr 03 08:16:37.253959 2026] [:error] [pid 33445:tid 33474] [client 158.158.110.103:49194] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "ac8G5VlRNZ0iDVmJWM2f1wAAABg"]
[Fri Apr 03 08:16:37.778526 2026] [:error] [pid 33542:tid 33551] [client 158.158.110.103:50950] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "ac8G5Xwb6uB1LaGtepY7MAAAAMY"]
[Fri Apr 03 08:16:38.407294 2026] [:error] [pid 33542:tid 33561] [client 158.158.110.103:5697] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0.php"] [unique_id "ac8G5nwb6uB1LaGtepY7MwAAANA"]
[Fri Apr 03 08:16:38.946666 2026] [:error] [pid 33542:tid 33566] [client 158.158.110.103:56859] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac8G5nwb6uB1LaGtepY7NQAAANU"]
[Fri Apr 03 08:16:40.085073 2026] [:error] [pid 33447:tid 33507] [client 158.158.110.103:5723] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac8G6EgaPmDHz92j4lOo3wAAAIM"]
[Fri Apr 03 08:16:40.697223 2026] [:error] [pid 33542:tid 33546] [client 158.158.110.103:41706] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac8G6Hwb6uB1LaGtepY7NgAAAME"]
[Fri Apr 03 08:16:41.197982 2026] [:error] [pid 33542:tid 33549] [client 158.158.110.103:56871] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ac8G6Xwb6uB1LaGtepY7OAAAAMQ"]
[Fri Apr 03 08:16:41.753122 2026] [:error] [pid 33542:tid 33552] [client 158.158.110.103:61216] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "ac8G6Xwb6uB1LaGtepY7PgAAAMc"]
[Fri Apr 03 08:16:42.235797 2026] [:error] [pid 33542:tid 33545] [client 158.158.110.103:49185] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "ac8G6nwb6uB1LaGtepY7QQAAAMA"]
[Fri Apr 03 08:16:42.741270 2026] [:error] [pid 33542:tid 33549] [client 158.158.110.103:56881] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "ac8G6nwb6uB1LaGtepY7RwAAAMQ"]
[Fri Apr 03 08:16:43.231818 2026] [:error] [pid 33542:tid 33557] [client 158.158.110.103:56846] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "ac8G63wb6uB1LaGtepY7SgAAAMw"]
[Fri Apr 03 08:16:43.743701 2026] [:error] [pid 33542:tid 33569] [client 158.158.110.103:49187] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ac8G63wb6uB1LaGtepY7UAAAANg"]
[Fri Apr 03 08:16:44.253336 2026] [:error] [pid 40533:tid 40540] [client 158.158.110.103:5711] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ac8G7PbIAA8AViDmwssf2AAAAUU"]
[Fri Apr 03 08:16:44.809119 2026] [:error] [pid 33542:tid 33551] [client 158.158.110.103:9506] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ac8G7Hwb6uB1LaGtepY7VQAAAMY"]
[Fri Apr 03 08:16:45.435593 2026] [:error] [pid 35469:tid 35492] [client 158.158.110.103:49171] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ac8G7aGvTIc8-wY3jUQy8wAAARU"]
[Fri Apr 03 08:16:46.002158 2026] [:error] [pid 33542:tid 33567] [client 158.158.110.103:46329] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "ac8G7nwb6uB1LaGtepY7XgAAANY"]
[Fri Apr 03 08:16:46.544643 2026] [:error] [pid 33542:tid 33551] [client 158.158.110.103:9529] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "ac8G7nwb6uB1LaGtepY7YwAAAMY"]
[Fri Apr 03 08:16:47.131749 2026] [:error] [pid 33542:tid 33555] [client 158.158.110.103:61247] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "ac8G73wb6uB1LaGtepY7ZwAAAMo"]
[Fri Apr 03 08:16:47.610157 2026] [:error] [pid 33542:tid 33560] [client 158.158.110.103:41704] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "ac8G73wb6uB1LaGtepY7agAAAM8"]
[Fri Apr 03 08:16:48.166394 2026] [:error] [pid 33542:tid 33554] [client 158.158.110.103:46293] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq13.php"] [unique_id "ac8G8Hwb6uB1LaGtepY7cAAAAMk"]
[Fri Apr 03 08:16:48.857924 2026] [:error] [pid 33446:tid 33493] [client 158.158.110.103:64745] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq13.php"] [unique_id "ac8G8Ng3dCqFYIIdw0oyPQAAAFA"]
[Fri Apr 03 08:16:49.390136 2026] [:error] [pid 33542:tid 33547] [client 158.158.110.103:9534] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq13.php"] [unique_id "ac8G8Xwb6uB1LaGtepY7ewAAAMI"]
[Fri Apr 03 08:16:49.956082 2026] [:error] [pid 33542:tid 33563] [client 158.158.110.103:56850] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq13.php"] [unique_id "ac8G8Xwb6uB1LaGtepY7fgAAANI"]
[Fri Apr 03 08:17:34.965299 2026] [:error] [pid 33542:tid 33552] [client 158.158.110.103:5720] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac8HHnwb6uB1LaGtepY8SgAAAMc"]
[Fri Apr 03 08:17:35.561271 2026] [:error] [pid 33542:tid 33566] [client 158.158.110.103:61229] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac8HH3wb6uB1LaGtepY8TgAAANU"]
[Fri Apr 03 08:17:36.041543 2026] [:error] [pid 33445:tid 33466] [client 158.158.110.103:56872] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac8HIFlRNZ0iDVmJWM2f9QAAABA"]
[Fri Apr 03 08:17:37.100838 2026] [:error] [pid 40562:tid 40587] [client 158.158.110.103:64737] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac8HITfFMXuP9zvqCeqPFgAAAZY"]
[Fri Apr 03 08:17:37.890165 2026] [:error] [pid 40562:tid 40581] [client 158.158.110.103:46279] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "ac8HITfFMXuP9zvqCeqPGgAAAZA"]
[Fri Apr 03 08:17:38.572525 2026] [:error] [pid 40533:tid 40540] [client 158.158.110.103:48470] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "ac8HIvbIAA8AViDmwssgFAAAAUU"]
[Fri Apr 03 08:17:39.053300 2026] [:error] [pid 40562:tid 40572] [client 158.158.110.103:64735] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "ac8HIzfFMXuP9zvqCeqPIQAAAYc"]
[Fri Apr 03 08:17:39.658077 2026] [:error] [pid 33447:tid 33510] [client 158.158.110.103:61243] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "ac8HI0gaPmDHz92j4lOpLwAAAIY"]
[Fri Apr 03 08:17:40.186310 2026] [:error] [pid 40562:tid 40571] [client 158.158.110.103:5751] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/com.php"] [unique_id "ac8HJDfFMXuP9zvqCeqPKQAAAYY"]
[Fri Apr 03 08:17:40.715166 2026] [:error] [pid 40562:tid 40566] [client 158.158.110.103:64740] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/com.php"] [unique_id "ac8HJDfFMXuP9zvqCeqPLwAAAYE"]
[Fri Apr 03 08:17:41.253397 2026] [:error] [pid 33446:tid 33500] [client 158.158.110.103:64727] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/com.php"] [unique_id "ac8HJdg3dCqFYIIdw0oyfwAAAFc"]
[Fri Apr 03 08:17:41.747488 2026] [:error] [pid 40562:tid 40570] [client 158.158.110.103:59288] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/com.php"] [unique_id "ac8HJTfFMXuP9zvqCeqPNQAAAYU"]
[Fri Apr 03 08:17:42.229944 2026] [:error] [pid 40562:tid 40582] [client 158.158.110.103:56870] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ac8HJjfFMXuP9zvqCeqPNwAAAZE"]
[Fri Apr 03 08:17:42.794388 2026] [:error] [pid 40562:tid 40586] [client 158.158.110.103:59266] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ac8HJjfFMXuP9zvqCeqPOQAAAZU"]
[Fri Apr 03 08:17:43.278792 2026] [:error] [pid 40562:tid 40575] [client 158.158.110.103:46319] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ac8HJzfFMXuP9zvqCeqPOwAAAYo"]
[Fri Apr 03 08:17:44.044666 2026] [:error] [pid 40533:tid 40546] [client 158.158.110.103:64761] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ac8HKPbIAA8AViDmwssgGAAAAUs"]
[Fri Apr 03 08:17:44.617459 2026] [:error] [pid 40562:tid 40587] [client 158.158.110.103:9535] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "ac8HKDfFMXuP9zvqCeqPRQAAAZY"]
[Fri Apr 03 08:17:45.099508 2026] [:error] [pid 40562:tid 40576] [client 158.158.110.103:64733] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "ac8HKTfFMXuP9zvqCeqPSgAAAYs"]
[Fri Apr 03 08:17:45.649919 2026] [:error] [pid 33447:tid 33528] [client 158.158.110.103:46726] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "ac8HKUgaPmDHz92j4lOpNgAAAJg"]
[Fri Apr 03 08:17:46.686983 2026] [:error] [pid 35469:tid 35474] [client 158.158.110.103:5747] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wander.php"] [unique_id "ac8HKqGvTIc8-wY3jUQzJAAAAQM"]
[Fri Apr 03 08:17:47.563301 2026] [:error] [pid 33447:tid 33515] [client 158.158.110.103:64758] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ac8HK0gaPmDHz92j4lOpPAAAAIs"]
[Fri Apr 03 08:17:48.172607 2026] [:error] [pid 40562:tid 40583] [client 158.158.110.103:9472] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ac8HLDfFMXuP9zvqCeqPUgAAAZI"]
[Fri Apr 03 08:17:48.700922 2026] [:error] [pid 40562:tid 40565] [client 158.158.110.103:41705] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ac8HLDfFMXuP9zvqCeqPVAAAAYA"]
[Fri Apr 03 08:17:49.622119 2026] [:error] [pid 33542:tid 33554] [client 158.158.110.103:63623] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ac8HLXwb6uB1LaGtepY8XQAAAMk"]
[Fri Apr 03 08:17:50.207955 2026] [:error] [pid 40533:tid 40545] [client 158.158.110.103:46724] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac8HLvbIAA8AViDmwssgIwAAAUo"]
[Fri Apr 03 08:17:50.718628 2026] [:error] [pid 33447:tid 33527] [client 158.158.110.103:9480] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac8HLkgaPmDHz92j4lOpRAAAAJc"]
[Fri Apr 03 08:17:51.624608 2026] [:error] [pid 35469:tid 35484] [client 158.158.110.103:46301] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac8HL6GvTIc8-wY3jUQzLQAAAQ0"]
[Fri Apr 03 08:17:52.156803 2026] [:error] [pid 33445:tid 33453] [client 158.158.110.103:46750] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac8HMFlRNZ0iDVmJWM2f_AAAAAM"]
[Fri Apr 03 08:17:52.862458 2026] [:error] [pid 33445:tid 33468] [client 158.158.110.103:63674] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "ac8HMFlRNZ0iDVmJWM2f_wAAABI"]
[Fri Apr 03 08:17:53.878041 2026] [:error] [pid 40562:tid 40580] [client 158.158.110.103:61211] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "ac8HMTfFMXuP9zvqCeqPXwAAAY8"]
[Fri Apr 03 08:17:54.971882 2026] [:error] [pid 33542:tid 33566] [client 158.158.110.103:41688] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "ac8HMnwb6uB1LaGtepY8agAAANU"]
[Fri Apr 03 08:17:55.819655 2026] [:error] [pid 33446:tid 33491] [client 158.158.110.103:56858] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v3.php"] [unique_id "ac8HM9g3dCqFYIIdw0oymgAAAE4"]
[Fri Apr 03 08:17:56.419026 2026] [:error] [pid 33542:tid 33557] [client 158.158.110.103:41723] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "ac8HNHwb6uB1LaGtepY8bwAAAMw"]
[Fri Apr 03 08:17:56.994248 2026] [:error] [pid 33542:tid 33547] [client 158.158.110.103:64710] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "ac8HNHwb6uB1LaGtepY8cQAAAMI"]
[Fri Apr 03 08:17:57.489900 2026] [:error] [pid 33542:tid 33548] [client 158.158.110.103:49161] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "ac8HNXwb6uB1LaGtepY8cwAAAMM"]
[Fri Apr 03 08:17:58.050566 2026] [:error] [pid 35469:tid 35491] [client 158.158.110.103:43002] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "ac8HNqGvTIc8-wY3jUQzOAAAARQ"]
[Fri Apr 03 08:17:58.624464 2026] [:error] [pid 40562:tid 40586] [client 158.158.110.103:56849] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac8HNjfFMXuP9zvqCeqPawAAAZU"]
[Fri Apr 03 08:17:59.462608 2026] [:error] [pid 40562:tid 40581] [client 158.158.110.103:46746] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac8HNzfFMXuP9zvqCeqPcQAAAZA"]
[Fri Apr 03 08:18:00.273026 2026] [:error] [pid 40562:tid 40573] [client 158.158.110.103:46744] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac8HODfFMXuP9zvqCeqPdgAAAYg"]
[Fri Apr 03 08:18:00.812828 2026] [:error] [pid 33542:tid 33561] [client 158.158.110.103:46297] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/to.php"] [unique_id "ac8HOHwb6uB1LaGtepY8gQAAANA"]
[Fri Apr 03 08:18:01.694536 2026] [:error] [pid 40533:tid 40535] [client 158.158.110.103:46325] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wqqs.php"] [unique_id "ac8HOfbIAA8AViDmwssgNwAAAUA"]
[Fri Apr 03 08:18:02.322378 2026] [:error] [pid 33542:tid 33556] [client 158.158.110.103:9473] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wqqs.php"] [unique_id "ac8HOnwb6uB1LaGtepY8iQAAAMs"]
[Fri Apr 03 08:18:02.905144 2026] [:error] [pid 40533:tid 40546] [client 158.158.110.103:46748] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wqqs.php"] [unique_id "ac8HOvbIAA8AViDmwssgOgAAAUs"]
[Fri Apr 03 08:18:03.393296 2026] [:error] [pid 40562:tid 40567] [client 158.158.110.103:41678] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wqqs.php"] [unique_id "ac8HOzfFMXuP9zvqCeqPhgAAAYI"]
[Fri Apr 03 08:18:03.988684 2026] [:error] [pid 40562:tid 40581] [client 158.158.110.103:50993] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ac8HOzfFMXuP9zvqCeqPjAAAAZA"]
[Fri Apr 03 08:18:04.540687 2026] [:error] [pid 40533:tid 40537] [client 158.158.110.103:64721] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ac8HPPbIAA8AViDmwssgPQAAAUI"]
[Fri Apr 03 08:18:05.026882 2026] [:error] [pid 40562:tid 40585] [client 158.158.110.103:61196] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ac8HPTfFMXuP9zvqCeqPkAAAAZQ"]
[Fri Apr 03 08:18:05.574958 2026] [:error] [pid 33446:tid 33491] [client 158.158.110.103:56882] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ac8HPdg3dCqFYIIdw0oypwAAAE4"]
[Fri Apr 03 08:18:06.091086 2026] [:error] [pid 33542:tid 33563] [client 158.158.110.103:61232] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ac8HPnwb6uB1LaGtepY8kgAAANI"]
[Fri Apr 03 08:18:06.629407 2026] [:error] [pid 40533:tid 40556] [client 158.158.110.103:46736] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ac8HPvbIAA8AViDmwssgQwAAAVU"]
[Fri Apr 03 08:18:07.133118 2026] [:error] [pid 33446:tid 33487] [client 158.158.110.103:41684] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ac8HP9g3dCqFYIIdw0oyrAAAAEo"]
[Fri Apr 03 08:18:07.616152 2026] [:error] [pid 33446:tid 33486] [client 158.158.110.103:42947] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ac8HP9g3dCqFYIIdw0oysAAAAEk"]
[Fri Apr 03 08:18:08.097314 2026] [:error] [pid 33542:tid 33566] [client 158.158.110.103:49189] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aifa.php"] [unique_id "ac8HQHwb6uB1LaGtepY8mQAAANU"]
[Fri Apr 03 08:18:08.578313 2026] [:error] [pid 40562:tid 40576] [client 158.158.110.103:49181] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aifa.php"] [unique_id "ac8HQDfFMXuP9zvqCeqPmwAAAYs"]
[Fri Apr 03 08:18:09.077437 2026] [:error] [pid 33542:tid 33555] [client 158.158.110.103:56868] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aifa.php"] [unique_id "ac8HQXwb6uB1LaGtepY8nAAAAMo"]
[Fri Apr 03 08:18:09.583366 2026] [:error] [pid 33542:tid 33567] [client 158.158.110.103:41725] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aifa.php"] [unique_id "ac8HQXwb6uB1LaGtepY8oAAAANY"]
[Fri Apr 03 08:18:10.063732 2026] [:error] [pid 33542:tid 33557] [client 158.158.110.103:5759] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "ac8HQnwb6uB1LaGtepY8owAAAMw"]
[Fri Apr 03 08:18:10.571380 2026] [:error] [pid 33445:tid 33451] [client 158.158.110.103:46291] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "ac8HQllRNZ0iDVmJWM2gBQAAAAE"]
[Fri Apr 03 08:18:11.048188 2026] [:error] [pid 40562:tid 40574] [client 158.158.110.103:9518] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "ac8HQzfFMXuP9zvqCeqPpwAAAYk"]
[Fri Apr 03 08:18:11.552287 2026] [:error] [pid 33445:tid 33473] [client 158.158.110.103:41720] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "ac8HQ1lRNZ0iDVmJWM2gBgAAABc"]
[Fri Apr 03 08:18:12.123738 2026] [:error] [pid 33447:tid 33522] [client 158.158.110.103:49192] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "ac8HREgaPmDHz92j4lOpVwAAAJI"]
[Fri Apr 03 08:18:12.615351 2026] [:error] [pid 40562:tid 40582] [client 158.158.110.103:45512] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "ac8HRDfFMXuP9zvqCeqPrAAAAZE"]
[Fri Apr 03 08:18:13.098361 2026] [:error] [pid 40562:tid 40567] [client 158.158.110.103:61220] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "ac8HRTfFMXuP9zvqCeqPsgAAAYI"]
[Fri Apr 03 08:18:13.581216 2026] [:error] [pid 40562:tid 40585] [client 158.158.110.103:63668] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feokc.php"] [unique_id "ac8HRTfFMXuP9zvqCeqPuAAAAZQ"]
[Fri Apr 03 08:18:14.384590 2026] [:error] [pid 40562:tid 40577] [client 158.158.110.103:64763] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "ac8HRjfFMXuP9zvqCeqPvwAAAYw"]
[Fri Apr 03 08:18:14.873870 2026] [:error] [pid 40533:tid 40541] [client 158.158.110.103:49209] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "ac8HRvbIAA8AViDmwssgSwAAAUY"]
[Fri Apr 03 08:18:15.539553 2026] [:error] [pid 35469:tid 35477] [client 158.158.110.103:56842] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "ac8HR6GvTIc8-wY3jUQzPgAAAQY"]
[Fri Apr 03 08:18:16.020970 2026] [:error] [pid 40533:tid 40552] [client 158.158.110.103:61199] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nc4.php"] [unique_id "ac8HSPbIAA8AViDmwssgTwAAAVE"]
[Fri Apr 03 08:18:16.547669 2026] [:error] [pid 33447:tid 33504] [client 158.158.110.103:63014] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac8HSEgaPmDHz92j4lOpXAAAAIA"]
[Fri Apr 03 08:18:17.172833 2026] [:error] [pid 35469:tid 35480] [client 158.158.110.103:46308] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac8HSaGvTIc8-wY3jUQzQQAAAQk"]
[Fri Apr 03 08:18:17.871647 2026] [:error] [pid 40562:tid 40569] [client 158.158.110.103:46318] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac8HSTfFMXuP9zvqCeqPyAAAAYQ"]
[Fri Apr 03 08:18:18.444252 2026] [:error] [pid 40562:tid 40568] [client 158.158.110.103:46292] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "ac8HSjfFMXuP9zvqCeqPzQAAAYM"]
[Fri Apr 03 08:18:18.933100 2026] [:error] [pid 40562:tid 40582] [client 158.158.110.103:45510] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac8HSjfFMXuP9zvqCeqP1AAAAZE"]
[Fri Apr 03 08:18:19.446241 2026] [:error] [pid 33542:tid 33555] [client 158.158.110.103:41674] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac8HS3wb6uB1LaGtepY8rwAAAMo"]
[Fri Apr 03 08:18:19.977639 2026] [:error] [pid 33542:tid 33567] [client 158.158.110.103:61188] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac8HS3wb6uB1LaGtepY8tAAAANY"]
[Fri Apr 03 08:18:20.541926 2026] [:error] [pid 33542:tid 33565] [client 158.158.110.103:9475] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac8HTHwb6uB1LaGtepY8uQAAANQ"]
[Fri Apr 03 08:18:21.075431 2026] [:error] [pid 40562:tid 40587] [client 158.158.110.103:49153] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ac8HTTfFMXuP9zvqCeqP3AAAAZY"]
[Fri Apr 03 08:18:21.704285 2026] [:error] [pid 40562:tid 40576] [client 158.158.110.103:61202] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ac8HTTfFMXuP9zvqCeqP4gAAAYs"]
[Fri Apr 03 08:18:22.351554 2026] [:error] [pid 35469:tid 35476] [client 158.158.110.103:41665] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ac8HTqGvTIc8-wY3jUQzRgAAAQU"]
[Fri Apr 03 08:18:23.034914 2026] [:error] [pid 33542:tid 33551] [client 158.158.110.103:63655] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ac8HT3wb6uB1LaGtepY8wwAAAMY"]
[Fri Apr 03 08:18:23.682191 2026] [:error] [pid 40562:tid 40569] [client 158.158.110.103:9508] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "ac8HTzfFMXuP9zvqCeqP7QAAAYQ"]
[Fri Apr 03 08:18:24.260244 2026] [:error] [pid 40562:tid 40578] [client 158.158.110.103:9527] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "ac8HUDfFMXuP9zvqCeqP8QAAAY0"]
[Fri Apr 03 08:18:24.829833 2026] [:error] [pid 33446:tid 33498] [client 158.158.110.103:56843] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "ac8HUNg3dCqFYIIdw0oyvQAAAFU"]
[Fri Apr 03 08:18:25.326878 2026] [:error] [pid 33542:tid 33552] [client 158.158.110.103:46732] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goat1.php"] [unique_id "ac8HUXwb6uB1LaGtepY8zAAAAMc"]
[Fri Apr 03 08:18:25.920018 2026] [:error] [pid 33542:tid 33567] [client 158.158.110.103:9516] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "ac8HUXwb6uB1LaGtepY80AAAANY"]
[Fri Apr 03 08:18:26.543489 2026] [:error] [pid 35469:tid 35481] [client 158.158.110.103:42951] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "ac8HUqGvTIc8-wY3jUQzSwAAAQo"]
[Fri Apr 03 08:18:27.182395 2026] [:error] [pid 40533:tid 40539] [client 158.158.110.103:61219] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "ac8HU_bIAA8AViDmwssgWwAAAUQ"]
[Fri Apr 03 08:18:27.721434 2026] [:error] [pid 33445:tid 33471] [client 158.158.110.103:46742] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "ac8HU1lRNZ0iDVmJWM2gDgAAABU"]
[Fri Apr 03 08:18:28.297201 2026] [:error] [pid 33542:tid 33564] [client 158.158.110.103:49188] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "ac8HVHwb6uB1LaGtepY82wAAANM"]
[Fri Apr 03 08:18:28.955412 2026] [:error] [pid 33445:tid 33469] [client 158.158.110.103:9474] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "ac8HVFlRNZ0iDVmJWM2gFwAAABM"]
[Fri Apr 03 08:18:29.449136 2026] [:error] [pid 40533:tid 40535] [client 158.158.110.103:46332] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "ac8HVfbIAA8AViDmwssgYQAAAUA"]
[Fri Apr 03 08:18:30.036792 2026] [:error] [pid 33542:tid 33557] [client 158.158.110.103:45554] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yanz.php"] [unique_id "ac8HVnwb6uB1LaGtepY83gAAAMw"]
[Fri Apr 03 08:18:30.602856 2026] [:error] [pid 33542:tid 33552] [client 158.158.110.103:46720] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "ac8HVnwb6uB1LaGtepY85gAAAMc"]
[Fri Apr 03 08:18:31.150880 2026] [:error] [pid 33542:tid 33548] [client 158.158.110.103:46754] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "ac8HV3wb6uB1LaGtepY86gAAAMM"]
[Fri Apr 03 08:18:31.729850 2026] [:error] [pid 33447:tid 33525] [client 158.158.110.103:5752] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "ac8HV0gaPmDHz92j4lOpaQAAAJU"]
[Fri Apr 03 08:18:49.721877 2026] [:error] [pid 40533:tid 40556] [client 158.158.110.103:49190] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac8HafbIAA8AViDmwssghwAAAVU"]
[Fri Apr 03 08:18:50.204976 2026] [:error] [pid 33542:tid 33567] [client 158.158.110.103:49162] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac8Hanwb6uB1LaGtepY9KAAAANY"]
[Fri Apr 03 08:18:54.231505 2026] [:error] [pid 33447:tid 33524] [client 158.158.110.103:56863] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "ac8HbkgaPmDHz92j4lOpgAAAAJQ"]
[Fri Apr 03 08:19:22.299619 2026] [:error] [pid 40562:tid 40585] [client 158.158.110.103:61213] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "ac8HijfFMXuP9zvqCeqQzgAAAZQ"]
[Fri Apr 03 08:19:22.841073 2026] [:error] [pid 33542:tid 33565] [client 158.158.110.103:63006] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "ac8Hinwb6uB1LaGtepY99wAAANQ"]
[Fri Apr 03 08:19:23.560831 2026] [:error] [pid 35469:tid 35485] [client 158.158.110.103:46277] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "ac8Hi6GvTIc8-wY3jUQzcwAAAQ4"]
[Fri Apr 03 08:19:24.128049 2026] [:error] [pid 40533:tid 40541] [client 158.158.110.103:61194] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file88.php"] [unique_id "ac8HjPbIAA8AViDmwssgpAAAAUY"]
[Fri Apr 03 08:19:24.862518 2026] [:error] [pid 40533:tid 40559] [client 158.158.110.103:49215] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "ac8HjPbIAA8AViDmwssgpwAAAVg"]
[Fri Apr 03 08:19:25.449577 2026] [:error] [pid 33542:tid 33567] [client 158.158.110.103:64708] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "ac8HjXwb6uB1LaGtepY9_QAAANY"]
[Fri Apr 03 08:19:26.031748 2026] [:error] [pid 40533:tid 40552] [client 158.158.110.103:46328] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "ac8HjvbIAA8AViDmwssgrAAAAVE"]
[Fri Apr 03 08:19:26.828181 2026] [:error] [pid 33447:tid 33516] [client 158.158.110.103:5703] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admir.php"] [unique_id "ac8HjkgaPmDHz92j4lOpngAAAIw"]
[Fri Apr 03 08:19:27.362870 2026] [:error] [pid 33542:tid 33560] [client 158.158.110.103:9503] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "ac8Hj3wb6uB1LaGtepY9_wAAAM8"]
[Fri Apr 03 08:19:27.887194 2026] [:error] [pid 33542:tid 33549] [client 158.158.110.103:61222] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "ac8Hj3wb6uB1LaGtepY-AwAAAMQ"]
[Fri Apr 03 08:19:28.485377 2026] [:error] [pid 33542:tid 33567] [client 158.158.110.103:50989] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "ac8HkHwb6uB1LaGtepY-CQAAANY"]
[Fri Apr 03 08:19:28.963790 2026] [:error] [pid 33542:tid 33561] [client 158.158.110.103:56836] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aj.php"] [unique_id "ac8HkHwb6uB1LaGtepY-DAAAANA"]
[Fri Apr 03 08:19:29.490399 2026] [:error] [pid 40562:tid 40577] [client 158.158.110.103:64731] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "ac8HkTfFMXuP9zvqCeqQ3wAAAYw"]
[Fri Apr 03 08:19:30.055705 2026] [:error] [pid 33447:tid 33512] [client 158.158.110.103:5719] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "ac8HkkgaPmDHz92j4lOpogAAAIg"]
[Fri Apr 03 08:19:30.754882 2026] [:error] [pid 33542:tid 33562] [client 158.158.110.103:59269] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "ac8Hknwb6uB1LaGtepY-EAAAANE"]
[Fri Apr 03 08:19:31.401961 2026] [:error] [pid 33542:tid 33564] [client 158.158.110.103:49214] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/opts.php"] [unique_id "ac8Hk3wb6uB1LaGtepY-FQAAANM"]
[Fri Apr 03 08:19:32.110934 2026] [:error] [pid 33542:tid 33560] [client 158.158.110.103:49210] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filer.php"] [unique_id "ac8HlHwb6uB1LaGtepY-GwAAAM8"]
[Fri Apr 03 08:19:32.643659 2026] [:error] [pid 33542:tid 33563] [client 158.158.110.103:5709] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filer.php"] [unique_id "ac8HlHwb6uB1LaGtepY-IAAAANI"]
[Fri Apr 03 08:19:33.212581 2026] [:error] [pid 35469:tid 35480] [client 158.158.110.103:45513] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filer.php"] [unique_id "ac8HlaGvTIc8-wY3jUQzdwAAAQk"]
[Fri Apr 03 08:19:33.779577 2026] [:error] [pid 40533:tid 40559] [client 158.158.110.103:64719] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filer.php"] [unique_id "ac8HlfbIAA8AViDmwssgvgAAAVg"]
[Fri Apr 03 08:19:34.486416 2026] [:error] [pid 33542:tid 33561] [client 158.158.110.103:64720] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "ac8Hlnwb6uB1LaGtepY-LgAAANA"]
[Fri Apr 03 08:19:35.156690 2026] [:error] [pid 40562:tid 40586] [client 158.158.110.103:9502] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "ac8HlzfFMXuP9zvqCeqQ5AAAAZU"]
[Fri Apr 03 08:19:35.683780 2026] [:error] [pid 40562:tid 40577] [client 158.158.110.103:59290] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "ac8HlzfFMXuP9zvqCeqQ5wAAAYw"]
[Fri Apr 03 08:19:36.320130 2026] [:error] [pid 40562:tid 40581] [client 158.158.110.103:64760] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lites.php"] [unique_id "ac8HmDfFMXuP9zvqCeqQ7QAAAZA"]
[Fri Apr 03 08:19:37.421414 2026] [:error] [pid 33445:tid 33461] [client 158.158.110.103:61185] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ac8HmVlRNZ0iDVmJWM2gOQAAAAs"]
[Fri Apr 03 08:19:38.994567 2026] [:error] [pid 40562:tid 40576] [client 158.158.110.103:49159] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ac8HmjfFMXuP9zvqCeqQ-AAAAYs"]
[Fri Apr 03 08:19:40.041590 2026] [:error] [pid 33445:tid 33470] [client 158.158.110.103:46727] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ac8HnFlRNZ0iDVmJWM2gOgAAABQ"]
[Fri Apr 03 08:19:40.757172 2026] [:error] [pid 33542:tid 33551] [client 158.158.110.103:49158] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ac8HnHwb6uB1LaGtepY-PwAAAMY"]
[Fri Apr 03 08:19:41.764286 2026] [:error] [pid 40562:tid 40569] [client 158.158.110.103:64762] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "ac8HnTfFMXuP9zvqCeqRAwAAAYQ"]
[Fri Apr 03 08:19:42.754066 2026] [:error] [pid 33542:tid 33557] [client 158.158.110.103:5725] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "ac8Hnnwb6uB1LaGtepY-TAAAAMw"]
[Fri Apr 03 08:19:43.434500 2026] [:error] [pid 33446:tid 33477] [client 158.158.110.103:56876] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "ac8Hn9g3dCqFYIIdw0ozAAAAAEA"]
[Fri Apr 03 08:19:44.292944 2026] [:error] [pid 40533:tid 40543] [client 158.158.110.103:49195] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/he.php"] [unique_id "ac8HoPbIAA8AViDmwssg2wAAAUg"]
[Fri Apr 03 08:19:45.282416 2026] [:error] [pid 40533:tid 40537] [client 158.158.110.103:5732] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aves.php"] [unique_id "ac8HofbIAA8AViDmwssg4QAAAUI"]
[Fri Apr 03 08:19:45.959994 2026] [:error] [pid 33542:tid 33562] [client 158.158.110.103:9477] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aves.php"] [unique_id "ac8HoXwb6uB1LaGtepY-UwAAANE"]
[Fri Apr 03 08:19:46.557299 2026] [:error] [pid 40562:tid 40579] [client 158.158.110.103:64741] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aves.php"] [unique_id "ac8HojfFMXuP9zvqCeqRCgAAAY4"]
[Fri Apr 03 08:19:47.317897 2026] [:error] [pid 40562:tid 40568] [client 158.158.110.103:41676] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aves.php"] [unique_id "ac8HozfFMXuP9zvqCeqRDgAAAYM"]
[Fri Apr 03 08:19:47.812461 2026] [:error] [pid 40533:tid 40546] [client 158.158.110.103:42960] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gorila.php"] [unique_id "ac8Ho_bIAA8AViDmwssg8AAAAUs"]
[Fri Apr 03 08:19:48.308399 2026] [:error] [pid 33542:tid 33552] [client 158.158.110.103:9521] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gorila.php"] [unique_id "ac8HpHwb6uB1LaGtepY-XgAAAMc"]
[Fri Apr 03 08:19:48.844751 2026] [:error] [pid 40562:tid 40573] [client 158.158.110.103:45516] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gorila.php"] [unique_id "ac8HpDfFMXuP9zvqCeqREgAAAYg"]
[Fri Apr 03 08:19:49.443020 2026] [:error] [pid 40562:tid 40580] [client 158.158.110.103:56848] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gorila.php"] [unique_id "ac8HpTfFMXuP9zvqCeqREwAAAY8"]
[Fri Apr 03 08:19:50.068744 2026] [:error] [pid 40562:tid 40584] [client 158.158.110.103:63036] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanta.php"] [unique_id "ac8HpjfFMXuP9zvqCeqRFQAAAZM"]
[Fri Apr 03 08:19:50.748991 2026] [:error] [pid 33445:tid 33455] [client 158.158.110.103:46307] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanta.php"] [unique_id "ac8HpllRNZ0iDVmJWM2gPgAAAAU"]
[Fri Apr 03 08:19:51.293020 2026] [:error] [pid 40562:tid 40585] [client 158.158.110.103:5722] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanta.php"] [unique_id "ac8HpzfFMXuP9zvqCeqRGwAAAZQ"]
[Fri Apr 03 08:19:52.336753 2026] [:error] [pid 33446:tid 33492] [client 158.158.110.103:41685] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanta.php"] [unique_id "ac8HqNg3dCqFYIIdw0ozBgAAAE8"]
[Fri Apr 03 08:19:53.149887 2026] [:error] [pid 35469:tid 35484] [client 158.158.110.103:42912] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sh3ll.php"] [unique_id "ac8HqaGvTIc8-wY3jUQzfAAAAQ0"]
[Fri Apr 03 08:19:53.736151 2026] [:error] [pid 33445:tid 33460] [client 158.158.110.103:46755] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sh3ll.php"] [unique_id "ac8HqVlRNZ0iDVmJWM2gQQAAAAo"]
[Fri Apr 03 08:19:54.316119 2026] [:error] [pid 35469:tid 35485] [client 158.158.110.103:41677] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sh3ll.php"] [unique_id "ac8HqqGvTIc8-wY3jUQzfQAAAQ4"]
[Fri Apr 03 08:19:54.842413 2026] [:error] [pid 33542:tid 33555] [client 158.158.110.103:46276] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sh3ll.php"] [unique_id "ac8Hqnwb6uB1LaGtepY-aAAAAMo"]
[Fri Apr 03 08:19:55.373420 2026] [:error] [pid 35469:tid 35495] [client 158.158.110.103:42967] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "ac8Hq6GvTIc8-wY3jUQzfwAAARg"]
[Fri Apr 03 08:19:55.883868 2026] [:error] [pid 40533:tid 40554] [client 158.158.110.103:46721] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "ac8Hq_bIAA8AViDmwsshCgAAAVM"]
[Fri Apr 03 08:19:56.437631 2026] [:error] [pid 35469:tid 35483] [client 158.158.110.103:45537] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "ac8HrKGvTIc8-wY3jUQzgwAAAQw"]
[Fri Apr 03 08:19:56.956950 2026] [:error] [pid 35469:tid 35486] [client 158.158.110.103:9486] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "ac8HrKGvTIc8-wY3jUQzhAAAAQ8"]
[Fri Apr 03 09:42:53.776571 2026] [:error] [pid 33542:tid 33562] [client 172.70.250.239:9727] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/index"] [unique_id "ac8bHXwb6uB1LaGtepZptwAAANE"]
[Fri Apr 03 09:42:53.784404 2026] [:error] [pid 40562:tid 40586] [client 172.70.250.239:9729] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ac8bHTfFMXuP9zvqCeqyMAAAAZU"]
[Fri Apr 03 09:42:53.788737 2026] [:error] [pid 33542:tid 33569] [client 172.70.250.238:12226] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ac8bHXwb6uB1LaGtepZpuAAAANg"]
[Fri Apr 03 09:42:53.790429 2026] [:error] [pid 40562:tid 40572] [client 172.70.250.239:9719] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "ac8bHTfFMXuP9zvqCeqyMQAAAYc"]
[Fri Apr 03 09:42:53.816050 2026] [:error] [pid 33446:tid 33494] [client 172.70.250.239:9724] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "ac8bHdg3dCqFYIIdw0pIPQAAAFE"]
[Fri Apr 03 09:42:53.819609 2026] [:error] [pid 33542:tid 33567] [client 172.70.250.238:12221] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ac8bHXwb6uB1LaGtepZpuQAAANY"]
[Fri Apr 03 09:42:54.786422 2026] [:error] [pid 33446:tid 33500] [client 172.70.250.239:9738] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "ac8bHtg3dCqFYIIdw0pIQAAAAFc"]
[Fri Apr 03 09:42:54.795464 2026] [:error] [pid 40562:tid 40581] [client 172.70.250.239:9737] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "ac8bHjfFMXuP9zvqCeqyOQAAAZA"]
[Fri Apr 03 09:42:54.811369 2026] [:error] [pid 40562:tid 40574] [client 172.70.250.238:12233] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "ac8bHjfFMXuP9zvqCeqyOgAAAYk"]
[Fri Apr 03 09:42:54.822227 2026] [:error] [pid 33542:tid 33565] [client 172.70.250.238:12235] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "ac8bHnwb6uB1LaGtepZpuwAAANQ"]
[Fri Apr 03 09:42:54.830361 2026] [:error] [pid 35469:tid 35485] [client 172.70.250.238:12236] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "ac8bHqGvTIc8-wY3jURCNQAAAQ4"]
[Fri Apr 03 09:42:54.842253 2026] [:error] [pid 40562:tid 40578] [client 172.70.250.239:9746] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "ac8bHjfFMXuP9zvqCeqyOwAAAY0"]
[Fri Apr 03 09:42:55.786801 2026] [:error] [pid 33447:tid 33512] [client 172.70.250.239:9751] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "ac8bH0gaPmDHz92j4lO8ygAAAIg"]
[Fri Apr 03 09:42:55.796747 2026] [:error] [pid 40562:tid 40587] [client 172.70.250.239:9754] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "ac8bHzfFMXuP9zvqCeqyPAAAAZY"]
[Fri Apr 03 09:42:55.826894 2026] [:error] [pid 40562:tid 40568] [client 172.70.250.239:9762] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "ac8bHzfFMXuP9zvqCeqyPgAAAYM"]
[Fri Apr 03 09:42:55.841006 2026] [:error] [pid 40562:tid 40584] [client 172.70.250.239:9755] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "ac8bHzfFMXuP9zvqCeqyPwAAAZM"]
[Fri Apr 03 09:42:55.862158 2026] [:error] [pid 40562:tid 40573] [client 172.70.250.238:12240] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "ac8bHzfFMXuP9zvqCeqyQAAAAYg"]
[Fri Apr 03 09:42:55.869248 2026] [:error] [pid 33447:tid 33527] [client 172.70.250.239:9765] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.tmp"] [unique_id "ac8bH0gaPmDHz92j4lO8zAAAAJc"]
[Fri Apr 03 09:42:56.780580 2026] [:error] [pid 40533:tid 40543] [client 172.70.250.238:12247] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "ac8bIPbIAA8AViDmwss8JwAAAUg"]
[Fri Apr 03 09:42:56.806351 2026] [:error] [pid 40562:tid 40574] [client 172.70.250.239:9770] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local"] [unique_id "ac8bIDfFMXuP9zvqCeqyQgAAAYk"]
[Fri Apr 03 09:42:56.839741 2026] [:error] [pid 40562:tid 40578] [client 172.70.250.238:12255] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "ac8bIDfFMXuP9zvqCeqyQwAAAY0"]
[Fri Apr 03 09:42:56.849646 2026] [:error] [pid 35469:tid 35473] [client 172.70.250.239:9778] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local"] [unique_id "ac8bIKGvTIc8-wY3jURCNgAAAQI"]
[Fri Apr 03 09:42:56.878414 2026] [:error] [pid 35469:tid 35492] [client 172.70.250.238:12267] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "ac8bIKGvTIc8-wY3jURCNwAAARU"]
[Fri Apr 03 09:42:56.931363 2026] [:error] [pid 33445:tid 33466] [client 172.70.250.238:12263] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "ac8bIFlRNZ0iDVmJWM2ryQAAABA"]
[Fri Apr 03 09:42:57.800022 2026] [:error] [pid 33542:tid 33555] [client 172.70.250.238:12268] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "ac8bIXwb6uB1LaGtepZpwAAAAMo"]
[Fri Apr 03 09:42:57.836843 2026] [:error] [pid 33542:tid 33565] [client 172.70.250.239:9785] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "ac8bIXwb6uB1LaGtepZpwQAAANQ"]
[Fri Apr 03 09:42:57.859803 2026] [:error] [pid 33542:tid 33551] [client 172.70.250.238:12269] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.env"] [unique_id "ac8bIXwb6uB1LaGtepZpwwAAAMY"]
[Fri Apr 03 09:42:57.862200 2026] [:error] [pid 33542:tid 33558] [client 172.70.250.239:9792] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/core/.env"] [unique_id "ac8bIXwb6uB1LaGtepZpxAAAAM0"]
[Fri Apr 03 09:42:57.878499 2026] [:error] [pid 33542:tid 33550] [client 172.70.250.239:9794] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/private/.env"] [unique_id "ac8bIXwb6uB1LaGtepZpxQAAAMU"]
[Fri Apr 03 09:42:58.830413 2026] [:error] [pid 35469:tid 35484] [client 172.70.250.239:9805] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env.local"] [unique_id "ac8bIqGvTIc8-wY3jURCOgAAAQ0"]
[Fri Apr 03 09:42:58.836623 2026] [:error] [pid 33542:tid 33547] [client 172.70.250.239:9812] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.php"] [unique_id "ac8bInwb6uB1LaGtepZpygAAAMI"]
[Fri Apr 03 09:42:58.861266 2026] [:error] [pid 33542:tid 33553] [client 172.70.250.238:12271] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.json"] [unique_id "ac8bInwb6uB1LaGtepZpzAAAAMg"]
[Fri Apr 03 09:42:58.878745 2026] [:error] [pid 33542:tid 33555] [client 172.70.250.239:9813] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env~"] [unique_id "ac8bInwb6uB1LaGtepZpzQAAAMo"]
[Fri Apr 03 09:42:58.889623 2026] [:error] [pid 35469:tid 35489] [client 172.70.250.238:12275] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_backup"] [unique_id "ac8bIqGvTIc8-wY3jURCOwAAARI"]
[Fri Apr 03 09:42:59.827882 2026] [:error] [pid 40562:tid 40585] [client 172.70.250.238:12281] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env2"] [unique_id "ac8bIzfFMXuP9zvqCeqySgAAAZQ"]
[Fri Apr 03 09:42:59.855431 2026] [:error] [pid 33445:tid 33465] [client 172.70.250.238:12287] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "ac8bI1lRNZ0iDVmJWM2rygAAAA8"]
[Fri Apr 03 09:42:59.879979 2026] [:error] [pid 40562:tid 40581] [client 172.70.250.239:9821] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env1"] [unique_id "ac8bIzfFMXuP9zvqCeqySwAAAZA"]
[Fri Apr 03 09:42:59.907324 2026] [:error] [pid 35469:tid 35477] [client 172.70.250.238:12297] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.orig"] [unique_id "ac8bI6GvTIc8-wY3jURCPAAAAQY"]
[Fri Apr 03 09:42:59.910967 2026] [:error] [pid 33445:tid 33468] [client 172.70.250.238:12289] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.envrc"] [unique_id "ac8bI1lRNZ0iDVmJWM2rywAAABI"]
[Fri Apr 03 09:43:00.860197 2026] [:error] [pid 40533:tid 40541] [client 172.70.250.238:9731] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.bak"] [unique_id "ac8bJPbIAA8AViDmwss8KAAAAUY"]
[Fri Apr 03 09:43:00.881188 2026] [:error] [pid 33445:tid 33463] [client 172.70.250.238:9739] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "ac8bJFlRNZ0iDVmJWM2rzQAAAA0"]
[Fri Apr 03 09:43:00.910080 2026] [:error] [pid 33447:tid 33522] [client 172.70.250.238:9742] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker"] [unique_id "ac8bJEgaPmDHz92j4lO80gAAAJI"]
[Fri Apr 03 09:43:00.915216 2026] [:error] [pid 40533:tid 40551] [client 172.70.250.239:12212] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev.local"] [unique_id "ac8bJPbIAA8AViDmwss8KQAAAVA"]
[Fri Apr 03 09:43:00.941453 2026] [:error] [pid 40533:tid 40536] [client 172.70.250.238:9748] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.container"] [unique_id "ac8bJPbIAA8AViDmwss8KgAAAUE"]
[Fri Apr 03 09:43:01.649171 2026] [:error] [pid 33446:tid 33494] [client 172.70.250.239:12220] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/docker/.env"] [unique_id "ac8bJdg3dCqFYIIdw0pISgAAAFE"]
[Fri Apr 03 09:43:01.886837 2026] [:error] [pid 33446:tid 33486] [client 172.70.250.239:12225] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/docker/.env.local"] [unique_id "ac8bJdg3dCqFYIIdw0pITQAAAEk"]
[Fri Apr 03 09:43:01.911106 2026] [:error] [pid 35469:tid 35488] [client 172.70.250.239:12233] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/server/.env"] [unique_id "ac8bJaGvTIc8-wY3jURCPQAAARE"]
[Fri Apr 03 09:43:01.949944 2026] [:error] [pid 33446:tid 33477] [client 172.70.250.238:9757] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/srv/.env"] [unique_id "ac8bJdg3dCqFYIIdw0pITwAAAEA"]
[Fri Apr 03 09:43:01.983120 2026] [:error] [pid 40562:tid 40575] [client 172.70.250.239:12239] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.env"] [unique_id "ac8bJTfFMXuP9zvqCeqyTgAAAYo"]
[Fri Apr 03 09:43:02.672991 2026] [:error] [pid 33445:tid 33472] [client 172.70.250.239:12240] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/site/.env"] [unique_id "ac8bJllRNZ0iDVmJWM2rzwAAABY"]
[Fri Apr 03 09:43:02.901404 2026] [:error] [pid 40533:tid 40554] [client 172.70.250.239:12243] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/.env"] [unique_id "ac8bJvbIAA8AViDmwss8LAAAAVM"]
[Fri Apr 03 09:43:02.931590 2026] [:error] [pid 40533:tid 40540] [client 172.70.250.238:9761] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/www/.env"] [unique_id "ac8bJvbIAA8AViDmwss8LQAAAUU"]
[Fri Apr 03 09:43:02.981333 2026] [:error] [pid 40562:tid 40576] [client 172.70.250.238:9769] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/html/.env"] [unique_id "ac8bJjfFMXuP9zvqCeqyUAAAAYs"]
[Fri Apr 03 09:43:03.015095 2026] [:error] [pid 40562:tid 40573] [client 172.70.250.239:12247] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/home/.env"] [unique_id "ac8bJzfFMXuP9zvqCeqyUQAAAYg"]
[Fri Apr 03 09:43:03.705082 2026] [:error] [pid 40533:tid 40549] [client 172.70.250.238:9776] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/root/.env"] [unique_id "ac8bJ_bIAA8AViDmwss8LwAAAU4"]
[Fri Apr 03 09:43:03.930021 2026] [:error] [pid 33542:tid 33551] [client 172.70.250.238:9781] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_config"] [unique_id "ac8bJ3wb6uB1LaGtepZp1gAAAMY"]
[Fri Apr 03 09:43:03.969569 2026] [:error] [pid 40533:tid 40535] [client 172.70.250.238:9789] [client 172.70.250.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_secret"] [unique_id "ac8bJ_bIAA8AViDmwss8MAAAAUA"]
[Fri Apr 03 09:43:03.991785 2026] [:error] [pid 33446:tid 33498] [client 172.70.250.239:12252] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_settings"] [unique_id "ac8bJ9g3dCqFYIIdw0pIUwAAAFU"]
[Fri Apr 03 09:43:04.025065 2026] [:error] [pid 33542:tid 33555] [client 172.70.250.239:12253] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local.backup"] [unique_id "ac8bKHwb6uB1LaGtepZp1wAAAMo"]
[Fri Apr 03 09:43:04.211185 2026] [:error] [pid 33445:tid 33456] [client 172.70.250.239:12709] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "ac8bKFlRNZ0iDVmJWM2r0AAAAAY"]
[Fri Apr 03 09:43:04.476302 2026] [:error] [pid 33447:tid 33527] [client 172.70.250.239:12716] [client 172.70.250.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/index"] [unique_id "ac8bKEgaPmDHz92j4lO81QAAAJc"]
[Fri Apr 03 09:43:24.102071 2026] [:error] [pid 40533:tid 40556] [client 172.69.33.12:9328] [client 172.69.33.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "ac8bPPbIAA8AViDmwss8RgAAAVU"]
[Fri Apr 03 09:43:24.107520 2026] [:error] [pid 33542:tid 33546] [client 172.69.33.6:11272] [client 172.69.33.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "ac8bPHwb6uB1LaGtepZp_AAAAME"]
[Fri Apr 03 09:43:24.146884 2026] [:error] [pid 33542:tid 33557] [client 172.69.33.43:11790] [client 172.69.33.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "ac8bPHwb6uB1LaGtepZp_QAAAMw"]
[Fri Apr 03 09:43:24.148957 2026] [:error] [pid 33542:tid 33566] [client 172.69.34.122:10662] [client 172.69.34.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "ac8bPHwb6uB1LaGtepZp_gAAANU"]
[Fri Apr 03 09:43:24.581572 2026] [:error] [pid 33445:tid 33474] [client 172.69.34.202:9412] [client 172.69.34.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "ac8bPFlRNZ0iDVmJWM2r4QAAABg"]
[Fri Apr 03 09:43:24.620772 2026] [:error] [pid 33445:tid 33473] [client 172.69.34.202:9414] [client 172.69.34.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "ac8bPFlRNZ0iDVmJWM2r4gAAABc"]
[Fri Apr 03 09:43:24.631792 2026] [:error] [pid 33542:tid 33550] [client 172.69.34.122:10669] [client 172.69.34.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "ac8bPHwb6uB1LaGtepZqAQAAAMU"]
[Fri Apr 03 09:43:24.653985 2026] [:error] [pid 33542:tid 33549] [client 172.69.33.54:14213] [client 172.69.33.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "ac8bPHwb6uB1LaGtepZqAgAAAMQ"]
[Fri Apr 03 09:43:25.061970 2026] [:error] [pid 40533:tid 40536] [client 172.69.33.6:11279] [client 172.69.33.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.tmp"] [unique_id "ac8bPfbIAA8AViDmwss8SAAAAUE"]
[Fri Apr 03 09:43:25.096438 2026] [:error] [pid 33542:tid 33551] [client 172.69.33.42:11632] [client 172.69.33.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "ac8bPXwb6uB1LaGtepZqBQAAAMY"]
[Fri Apr 03 09:43:25.157190 2026] [:error] [pid 33542:tid 33555] [client 172.69.34.202:9421] [client 172.69.34.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.local"] [unique_id "ac8bPXwb6uB1LaGtepZqBgAAAMo"]
[Fri Apr 03 09:43:25.170978 2026] [:error] [pid 33542:tid 33554] [client 172.69.33.54:9659] [client 172.69.33.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development.local"] [unique_id "ac8bPXwb6uB1LaGtepZqBwAAAMk"]
[Fri Apr 03 09:43:25.537859 2026] [:error] [pid 35469:tid 35474] [client 172.69.33.9:11206] [client 172.69.33.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env"] [unique_id "ac8bPaGvTIc8-wY3jURCUAAAAQM"]
[Fri Apr 03 09:43:25.578381 2026] [:error] [pid 33542:tid 33550] [client 172.69.33.7:11643] [client 172.69.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "ac8bPXwb6uB1LaGtepZqCQAAAMU"]
[Fri Apr 03 09:43:25.637774 2026] [:error] [pid 40533:tid 40554] [client 172.69.34.121:12492] [client 172.69.34.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "ac8bPfbIAA8AViDmwss8SQAAAVM"]
[Fri Apr 03 09:43:25.645956 2026] [:error] [pid 33447:tid 33526] [client 172.69.33.54:9664] [client 172.69.33.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "ac8bPUgaPmDHz92j4lO86QAAAJY"]
[Fri Apr 03 09:43:26.054714 2026] [:error] [pid 33542:tid 33545] [client 172.69.34.202:11667] [client 172.69.34.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/core/.env"] [unique_id "ac8bPnwb6uB1LaGtepZqCwAAAMA"]
[Fri Apr 03 09:43:26.054924 2026] [:error] [pid 40533:tid 40547] [client 172.69.33.8:12037] [client 172.69.33.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "ac8bPvbIAA8AViDmwss8SgAAAUw"]
[Fri Apr 03 09:43:26.118912 2026] [:error] [pid 40533:tid 40540] [client 172.69.33.6:11283] [client 172.69.33.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.env"] [unique_id "ac8bPvbIAA8AViDmwss8TAAAAUU"]
[Fri Apr 03 09:43:26.163815 2026] [:error] [pid 40533:tid 40538] [client 172.69.34.201:11995] [client 172.69.34.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/private/.env"] [unique_id "ac8bPvbIAA8AViDmwss8TQAAAUM"]
[Fri Apr 03 09:43:26.577210 2026] [:error] [pid 33542:tid 33560] [client 172.69.33.9:11211] [client 172.69.33.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/config/.env.local"] [unique_id "ac8bPnwb6uB1LaGtepZqDgAAAM8"]
[Fri Apr 03 09:43:26.632644 2026] [:error] [pid 40533:tid 40555] [client 172.69.33.55:13396] [client 172.69.33.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.php"] [unique_id "ac8bPvbIAA8AViDmwss8TgAAAVQ"]
[Fri Apr 03 09:43:26.679695 2026] [:error] [pid 40533:tid 40545] [client 172.69.34.201:12000] [client 172.69.34.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.json"] [unique_id "ac8bPvbIAA8AViDmwss8TwAAAUo"]
[Fri Apr 03 09:43:27.053319 2026] [:error] [pid 33447:tid 33517] [client 172.69.33.6:11287] [client 172.69.33.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_backup"] [unique_id "ac8bP0gaPmDHz92j4lO87AAAAI0"]
[Fri Apr 03 09:43:27.114586 2026] [:error] [pid 33446:tid 33501] [client 172.69.34.122:10593] [client 172.69.34.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env~"] [unique_id "ac8bP9g3dCqFYIIdw0pIcwAAAFg"]
[Fri Apr 03 09:43:27.192624 2026] [:error] [pid 40533:tid 40546] [client 172.69.33.13:11831] [client 172.69.33.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env1"] [unique_id "ac8bP_bIAA8AViDmwss8UQAAAUs"]
[Fri Apr 03 09:43:27.566345 2026] [:error] [pid 40562:tid 40579] [client 172.69.34.201:12006] [client 172.69.34.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env2"] [unique_id "ac8bPzfFMXuP9zvqCeqyYQAAAY4"]
[Fri Apr 03 09:43:27.597110 2026] [:error] [pid 33446:tid 33489] [client 172.69.34.122:10596] [client 172.69.34.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "ac8bP9g3dCqFYIIdw0pIdAAAAEw"]
[Fri Apr 03 09:43:28.073710 2026] [:error] [pid 40562:tid 40565] [client 172.69.34.202:11670] [client 172.69.34.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production.bak"] [unique_id "ac8bQDfFMXuP9zvqCeqyYgAAAYA"]
[Fri Apr 03 09:43:28.085331 2026] [:error] [pid 33446:tid 33483] [client 172.69.33.9:11218] [client 172.69.33.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.orig"] [unique_id "ac8bQNg3dCqFYIIdw0pIdwAAAEY"]
[Fri Apr 03 09:43:28.587065 2026] [:error] [pid 33446:tid 33487] [client 172.69.33.12:9522] [client 172.69.33.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "ac8bQNg3dCqFYIIdw0pIeQAAAEo"]
[Fri Apr 03 09:43:28.604569 2026] [:error] [pid 40562:tid 40581] [client 172.69.33.7:11651] [client 172.69.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev.local"] [unique_id "ac8bQDfFMXuP9zvqCeqyYwAAAZA"]
[Fri Apr 03 09:43:28.797390 2026] [:error] [pid 40562:tid 40582] [client 172.69.34.202:11673] [client 172.69.34.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker"] [unique_id "ac8bQDfFMXuP9zvqCeqyZQAAAZE"]
[Fri Apr 03 09:43:29.068750 2026] [:error] [pid 35469:tid 35479] [client 172.69.34.121:13682] [client 172.69.34.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.container"] [unique_id "ac8bQaGvTIc8-wY3jURCUQAAAQg"]
[Fri Apr 03 09:43:29.122494 2026] [:error] [pid 33446:tid 33493] [client 172.69.33.6:11289] [client 172.69.33.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/docker/.env"] [unique_id "ac8bQdg3dCqFYIIdw0pIewAAAFA"]
[Fri Apr 03 09:43:29.546668 2026] [:error] [pid 33446:tid 33491] [client 172.69.33.13:11833] [client 172.69.33.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/docker/.env.local"] [unique_id "ac8bQdg3dCqFYIIdw0pIfAAAAE4"]
[Fri Apr 03 09:43:29.634366 2026] [:error] [pid 40562:tid 40587] [client 172.69.34.202:11676] [client 172.69.34.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/server/.env"] [unique_id "ac8bQTfFMXuP9zvqCeqyaAAAAZY"]
[Fri Apr 03 09:43:30.069423 2026] [:error] [pid 35469:tid 35471] [client 172.69.34.122:10603] [client 172.69.34.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/srv/.env"] [unique_id "ac8bQqGvTIc8-wY3jURCUwAAAQA"]
[Fri Apr 03 09:43:30.153024 2026] [:error] [pid 40562:tid 40583] [client 172.69.33.9:10267] [client 172.69.33.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.env"] [unique_id "ac8bQjfFMXuP9zvqCeqybAAAAZI"]
[Fri Apr 03 09:43:30.545750 2026] [:error] [pid 40562:tid 40586] [client 172.69.33.54:9668] [client 172.69.33.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/site/.env"] [unique_id "ac8bQjfFMXuP9zvqCeqycAAAAZU"]
[Fri Apr 03 09:43:30.623179 2026] [:error] [pid 40562:tid 40581] [client 172.69.34.201:12014] [client 172.69.34.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/www/.env"] [unique_id "ac8bQjfFMXuP9zvqCeqycgAAAZA"]
[Fri Apr 03 09:43:31.025196 2026] [:error] [pid 40562:tid 40588] [client 172.69.33.55:13401] [client 172.69.33.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/.env"] [unique_id "ac8bQzfFMXuP9zvqCeqydQAAAZc"]
[Fri Apr 03 09:43:31.143018 2026] [:error] [pid 33446:tid 33492] [client 172.69.34.122:10607] [client 172.69.34.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/var/www/html/.env"] [unique_id "ac8bQ9g3dCqFYIIdw0pIfwAAAE8"]
[Fri Apr 03 09:43:31.248851 2026] [:error] [pid 33446:tid 33477] [client 172.69.33.12:9523] [client 172.69.33.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/home/.env"] [unique_id "ac8bQ9g3dCqFYIIdw0pIgAAAAEA"]
[Fri Apr 03 09:43:31.505934 2026] [:error] [pid 33447:tid 33518] [client 172.69.33.6:9517] [client 172.69.33.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/root/.env"] [unique_id "ac8bQ0gaPmDHz92j4lO88gAAAI4"]
[Fri Apr 03 09:43:31.723318 2026] [:error] [pid 33447:tid 33524] [client 172.69.33.13:11835] [client 172.69.33.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_config"] [unique_id "ac8bQ0gaPmDHz92j4lO88wAAAJQ"]
[Fri Apr 03 09:43:32.028834 2026] [:error] [pid 40562:tid 40577] [client 172.69.33.9:10274] [client 172.69.33.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_secret"] [unique_id "ac8bRDfFMXuP9zvqCeqyeAAAAYw"]
[Fri Apr 03 09:43:32.203673 2026] [:error] [pid 40562:tid 40567] [client 172.69.34.121:13686] [client 172.69.34.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_settings"] [unique_id "ac8bRDfFMXuP9zvqCeqyegAAAYI"]
[Fri Apr 03 09:43:32.504464 2026] [:error] [pid 40533:tid 40558] [client 172.69.33.6:9520] [client 172.69.33.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local.backup"] [unique_id "ac8bRPbIAA8AViDmwss8XAAAAVc"]
[Fri Apr 03 09:43:44.113721 2026] [:error] [pid 40562:tid 40572] [client 172.69.34.201:12280] [client 172.69.34.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "ac8bUDfFMXuP9zvqCeqylAAAAYc"]
[Fri Apr 03 09:43:47.185122 2026] [:error] [pid 33446:tid 33479] [client 172.69.34.121:12337] [client 172.69.34.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.envrc"] [unique_id "ac8bU9g3dCqFYIIdw0pIjwAAAEI"]
[Fri Apr 03 11:35:42.164983 2026] [authz_core:error] [pid 40562:tid 40580] [client 106.63.26.8:46147] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/contact-form-7/readme.txt
[Fri Apr 03 12:07:52.631712 2026] [:error] [pid 40562:tid 40584] [client 35.245.219.202:20459] [client 35.245.219.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.219.202, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ac89GDfFMXuP9zvqCere9wAAAZM"]
[Fri Apr 03 12:08:06.719329 2026] [:error] [pid 35469:tid 35490] [client 35.245.219.202:20302] [client 35.245.219.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.219.202, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ac89JqGvTIc8-wY3jURuLwAAARM"]
[Fri Apr 03 20:06:14.802802 2026] [:error] [pid 40562:tid 40575] [client 45.92.1.144:55163] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac-tNjfFMXuP9zvqCepqjQAAAYo"]
[Fri Apr 03 20:06:15.290090 2026] [:error] [pid 33446:tid 33485] [client 45.92.1.144:50757] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac-tN9g3dCqFYIIdw0o7ygAAAEg"]
[Fri Apr 03 20:06:15.777541 2026] [:error] [pid 33446:tid 33501] [client 45.92.1.144:64345] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac-tN9g3dCqFYIIdw0o7zwAAAFg"]
[Fri Apr 03 20:06:17.873624 2026] [:error] [pid 33542:tid 33564] [client 45.92.1.144:62881] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac-tOXwb6uB1LaGtepbrCgAAANM"]
[Fri Apr 03 21:11:20.691330 2026] [:error] [pid 33445:tid 33458] [client 89.184.221.113:42213] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac-8eFlRNZ0iDVmJWM0HEQAAAAg"]
[Fri Apr 03 21:11:20.691330 2026] [:error] [pid 35469:tid 35480] [client 89.184.221.113:33481] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac-8eKGvTIc8-wY3jUSSEgAAAQk"]
[Fri Apr 03 21:11:20.694563 2026] [:error] [pid 33445:tid 33456] [client 89.184.221.113:34399] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac-8eFlRNZ0iDVmJWM0HEgAAAAY"]
[Fri Apr 03 21:11:20.699297 2026] [:error] [pid 33446:tid 33497] [client 89.184.221.113:46233] [client 89.184.221.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.184.221.113, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ac-8eNg3dCqFYIIdw0pmUQAAAFQ"]
[Fri Apr 03 23:23:35.915380 2026] [:error] [pid 40562:tid 40577] [client 45.131.195.94:35713] [client 45.131.195.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac_bdzfFMXuP9zvqCeqvJwAAAYw"]
[Sat Apr 04 04:22:24.368470 2026] [proxy_fcgi:error] [pid 2567:tid 2575] [client 103.4.122.14:58720] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Sat Apr 04 04:50:09.226566 2026] [:error] [pid 2567:tid 2577] [client 20.216.128.30:64805] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adAoAWJJmfRsTrAKjdQ4KQAAAMM"]
[Sat Apr 04 04:50:09.696582 2026] [:error] [pid 2459:tid 2532] [client 20.216.128.30:65285] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adAoAQefyCmu4LR_PlpZNQAAAIE"]
[Sat Apr 04 04:50:10.182745 2026] [:error] [pid 2458:tid 2507] [client 20.216.128.30:65294] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adAoAiNozic5SuWqclnN0AAAAEM"]
[Sat Apr 04 04:50:10.665370 2026] [:error] [pid 2458:tid 2523] [client 20.216.128.30:64858] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adAoAiNozic5SuWqclnN0gAAAFM"]
[Sat Apr 04 04:50:11.140434 2026] [:error] [pid 2459:tid 2539] [client 20.216.128.30:64861] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adAoAwefyCmu4LR_PlpZOAAAAIc"]
[Sat Apr 04 04:50:11.627991 2026] [:error] [pid 2458:tid 2510] [client 20.216.128.30:65360] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adAoAyNozic5SuWqclnN0wAAAEY"]
[Sat Apr 04 04:50:12.100690 2026] [:error] [pid 2459:tid 2532] [client 20.216.128.30:64092] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adAoBAefyCmu4LR_PlpZPAAAAIE"]
[Sat Apr 04 04:50:12.587083 2026] [:error] [pid 2459:tid 2547] [client 20.216.128.30:65389] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adAoBAefyCmu4LR_PlpZPgAAAI8"]
[Sat Apr 04 04:50:13.058867 2026] [:error] [pid 37114:tid 37123] [client 20.216.128.30:64854] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAoBc-DnSj3fGMexeJlkwAAAQc"]
[Sat Apr 04 04:50:13.538372 2026] [:error] [pid 2457:tid 2489] [client 20.216.128.30:64054] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAoBUmNHppaMd92ZpdINwAAAAw"]
[Sat Apr 04 04:50:14.010545 2026] [:error] [pid 2567:tid 2585] [client 20.216.128.30:65347] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAoBmJJmfRsTrAKjdQ4LgAAAMs"]
[Sat Apr 04 04:50:14.492201 2026] [:error] [pid 2567:tid 2581] [client 20.216.128.30:63556] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAoBmJJmfRsTrAKjdQ4MAAAAMc"]
[Sat Apr 04 04:50:14.985442 2026] [:error] [pid 37114:tid 37125] [client 20.216.128.30:65381] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adAoBs-DnSj3fGMexeJlmQAAAQk"]
[Sat Apr 04 04:50:15.541767 2026] [:error] [pid 2458:tid 2518] [client 20.216.128.30:64125] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adAoByNozic5SuWqclnN2AAAAE4"]
[Sat Apr 04 04:50:16.012762 2026] [:error] [pid 2458:tid 2520] [client 20.216.128.30:65342] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adAoCCNozic5SuWqclnN2QAAAFA"]
[Sat Apr 04 04:50:16.491470 2026] [:error] [pid 37114:tid 37126] [client 20.216.128.30:65341] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adAoCM-DnSj3fGMexeJlnwAAAQo"]
[Sat Apr 04 04:50:16.998427 2026] [:error] [pid 2459:tid 2542] [client 20.216.128.30:65401] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adAoCAefyCmu4LR_PlpZQgAAAIo"]
[Sat Apr 04 04:50:17.524613 2026] [:error] [pid 2459:tid 2544] [client 20.216.128.30:64122] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adAoCQefyCmu4LR_PlpZRAAAAIw"]
[Sat Apr 04 04:50:18.018476 2026] [:error] [pid 37114:tid 37140] [client 20.216.128.30:65297] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "adAoCs-DnSj3fGMexeJlpQAAARg"]
[Sat Apr 04 04:50:18.495279 2026] [:error] [pid 2457:tid 2498] [client 20.216.128.30:65339] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "adAoCkmNHppaMd92ZpdIOgAAABU"]
[Sat Apr 04 04:50:18.974247 2026] [:error] [pid 2458:tid 2528] [client 20.216.128.30:64085] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "adAoCiNozic5SuWqclnN4AAAAFg"]
[Sat Apr 04 04:50:19.449301 2026] [:error] [pid 37114:tid 37132] [client 20.216.128.30:64073] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "adAoC8-DnSj3fGMexeJlqAAAARA"]
[Sat Apr 04 04:50:19.919550 2026] [:error] [pid 37114:tid 37130] [client 20.216.128.30:64857] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adAoC8-DnSj3fGMexeJlqQAAAQ4"]
[Sat Apr 04 04:50:20.392568 2026] [:error] [pid 37114:tid 37121] [client 20.216.128.30:64108] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adAoDM-DnSj3fGMexeJlrAAAAQU"]
[Sat Apr 04 04:50:20.886672 2026] [:error] [pid 2457:tid 2499] [client 20.216.128.30:65302] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adAoDEmNHppaMd92ZpdIQwAAABY"]
[Sat Apr 04 04:50:21.376160 2026] [:error] [pid 37114:tid 37135] [client 20.216.128.30:65280] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adAoDc-DnSj3fGMexeJlrgAAARM"]
[Sat Apr 04 04:50:21.900268 2026] [:error] [pid 37114:tid 37131] [client 20.216.128.30:65354] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adAoDc-DnSj3fGMexeJlrwAAAQ8"]
[Sat Apr 04 04:50:22.461444 2026] [:error] [pid 37114:tid 37137] [client 20.216.128.30:65298] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adAoDs-DnSj3fGMexeJlswAAARU"]
[Sat Apr 04 04:50:22.934232 2026] [:error] [pid 2457:tid 2479] [client 20.216.128.30:65391] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adAoDkmNHppaMd92ZpdISAAAAAI"]
[Sat Apr 04 04:50:23.446324 2026] [:error] [pid 2457:tid 2484] [client 20.216.128.30:65384] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adAoD0mNHppaMd92ZpdISQAAAAc"]
[Sat Apr 04 04:50:23.984905 2026] [:error] [pid 2459:tid 2541] [client 20.216.128.30:64016] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adAoDwefyCmu4LR_PlpZRgAAAIk"]
[Sat Apr 04 04:50:24.456025 2026] [:error] [pid 2459:tid 2536] [client 20.216.128.30:64796] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adAoEAefyCmu4LR_PlpZSAAAAIU"]
[Sat Apr 04 04:50:24.939680 2026] [:error] [pid 2459:tid 2552] [client 20.216.128.30:65312] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adAoEAefyCmu4LR_PlpZSgAAAJQ"]
[Sat Apr 04 04:50:25.418768 2026] [:error] [pid 2459:tid 2543] [client 20.216.128.30:65399] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adAoEQefyCmu4LR_PlpZTQAAAIs"]
[Sat Apr 04 04:50:25.904416 2026] [:error] [pid 2457:tid 2478] [client 20.216.128.30:65376] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adAoEUmNHppaMd92ZpdISwAAAAE"]
[Sat Apr 04 04:50:26.376090 2026] [:error] [pid 2567:tid 2585] [client 20.216.128.30:64089] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adAoEmJJmfRsTrAKjdQ4NQAAAMs"]
[Sat Apr 04 04:50:26.847288 2026] [:error] [pid 2567:tid 2595] [client 20.216.128.30:64004] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adAoEmJJmfRsTrAKjdQ4NwAAANU"]
[Sat Apr 04 04:50:27.320837 2026] [:error] [pid 2567:tid 2598] [client 20.216.128.30:64889] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adAoE2JJmfRsTrAKjdQ4OwAAANg"]
[Sat Apr 04 04:50:27.792396 2026] [:error] [pid 2459:tid 2548] [client 20.216.128.30:64000] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adAoEwefyCmu4LR_PlpZYAAAAJA"]
[Sat Apr 04 04:50:28.270882 2026] [:error] [pid 2567:tid 2575] [client 20.216.128.30:64123] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adAoFGJJmfRsTrAKjdQ4RQAAAME"]
[Sat Apr 04 04:50:28.746123 2026] [:error] [pid 37114:tid 37132] [client 20.216.128.30:65363] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adAoFM-DnSj3fGMexeJlvQAAARA"]
[Sat Apr 04 04:50:29.232210 2026] [:error] [pid 37114:tid 37138] [client 20.216.128.30:65378] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adAoFc-DnSj3fGMexeJlvwAAARY"]
[Sat Apr 04 04:50:29.735346 2026] [:error] [pid 37114:tid 37118] [client 20.216.128.30:64808] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adAoFc-DnSj3fGMexeJlwQAAAQI"]
[Sat Apr 04 04:50:30.212216 2026] [:error] [pid 37114:tid 37140] [client 20.216.128.30:63560] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adAoFs-DnSj3fGMexeJlxgAAARg"]
[Sat Apr 04 04:50:30.686049 2026] [:error] [pid 37114:tid 37132] [client 20.216.128.30:65358] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adAoFs-DnSj3fGMexeJlyAAAARA"]
[Sat Apr 04 04:50:31.190719 2026] [:error] [pid 2458:tid 2518] [client 20.216.128.30:65404] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adAoFyNozic5SuWqclnN-AAAAE4"]
[Sat Apr 04 04:50:31.662355 2026] [:error] [pid 37114:tid 37118] [client 20.216.128.30:64097] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adAoF8-DnSj3fGMexeJlzgAAAQI"]
[Sat Apr 04 04:50:32.157509 2026] [:error] [pid 37114:tid 37122] [client 20.216.128.30:65397] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adAoGM-DnSj3fGMexeJl0AAAAQY"]
[Sat Apr 04 04:50:32.645185 2026] [:error] [pid 37114:tid 37134] [client 20.216.128.30:64109] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adAoGM-DnSj3fGMexeJl0QAAARI"]
[Sat Apr 04 04:50:33.124677 2026] [:error] [pid 2459:tid 2545] [client 20.216.128.30:65392] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adAoGQefyCmu4LR_PlpZdAAAAI0"]
[Sat Apr 04 04:50:33.647666 2026] [:error] [pid 2459:tid 2540] [client 20.216.128.30:64791] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adAoGQefyCmu4LR_PlpZdwAAAIg"]
[Sat Apr 04 04:50:34.187989 2026] [:error] [pid 37114:tid 37125] [client 20.216.128.30:65398] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adAoGs-DnSj3fGMexeJl1wAAAQk"]
[Sat Apr 04 04:50:34.707348 2026] [:error] [pid 2567:tid 2574] [client 20.216.128.30:64047] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adAoGmJJmfRsTrAKjdQ4bQAAAMA"]
[Sat Apr 04 04:50:35.182555 2026] [:error] [pid 2459:tid 2541] [client 20.216.128.30:64069] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adAoGwefyCmu4LR_PlpZegAAAIk"]
[Sat Apr 04 04:50:35.656204 2026] [:error] [pid 2567:tid 2575] [client 20.216.128.30:64844] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adAoG2JJmfRsTrAKjdQ4dgAAAME"]
[Sat Apr 04 04:50:36.161566 2026] [:error] [pid 37114:tid 37130] [client 20.216.128.30:64799] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adAoHM-DnSj3fGMexeJl6gAAAQ4"]
[Sat Apr 04 04:50:36.721881 2026] [:error] [pid 37114:tid 37140] [client 20.216.128.30:65320] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adAoHM-DnSj3fGMexeJl8AAAARg"]
[Sat Apr 04 04:50:37.193458 2026] [:error] [pid 2459:tid 2549] [client 20.216.128.30:64815] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adAoHQefyCmu4LR_PlpZiAAAAJE"]
[Sat Apr 04 04:50:37.693481 2026] [:error] [pid 2459:tid 2535] [client 20.216.128.30:64781] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adAoHQefyCmu4LR_PlpZkAAAAIQ"]
[Sat Apr 04 04:50:38.196349 2026] [:error] [pid 2567:tid 2578] [client 20.216.128.30:64031] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adAoHmJJmfRsTrAKjdQ4iAAAAMQ"]
[Sat Apr 04 04:50:38.745866 2026] [:error] [pid 37114:tid 37125] [client 20.216.128.30:64042] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adAoHs-DnSj3fGMexeJl_wAAAQk"]
[Sat Apr 04 04:50:39.273078 2026] [:error] [pid 37114:tid 37128] [client 20.216.128.30:65370] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adAoH8-DnSj3fGMexeJmAQAAAQw"]
[Sat Apr 04 04:50:39.919846 2026] [:error] [pid 37114:tid 37130] [client 20.216.128.30:64876] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adAoH8-DnSj3fGMexeJmBgAAAQ4"]
[Sat Apr 04 04:50:40.392737 2026] [:error] [pid 2567:tid 2583] [client 20.216.128.30:64011] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adAoIGJJmfRsTrAKjdQ4jwAAAMk"]
[Sat Apr 04 04:50:40.944543 2026] [:error] [pid 2567:tid 2581] [client 20.216.128.30:65338] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adAoIGJJmfRsTrAKjdQ4lAAAAMc"]
[Sat Apr 04 04:50:41.476104 2026] [:error] [pid 2567:tid 2591] [client 20.216.128.30:63603] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adAoIWJJmfRsTrAKjdQ4mgAAANE"]
[Sat Apr 04 04:50:41.956797 2026] [:error] [pid 37114:tid 37132] [client 20.216.128.30:64864] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adAoIc-DnSj3fGMexeJmGgAAARA"]
[Sat Apr 04 04:50:42.429349 2026] [:error] [pid 2458:tid 2509] [client 20.216.128.30:64846] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adAoIiNozic5SuWqclnOJAAAAEU"]
[Sat Apr 04 04:50:42.983741 2026] [:error] [pid 2567:tid 2577] [client 20.216.128.30:64066] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adAoImJJmfRsTrAKjdQ4ngAAAMM"]
[Sat Apr 04 04:50:43.461201 2026] [:error] [pid 2458:tid 2526] [client 20.216.128.30:64087] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adAoIyNozic5SuWqclnOKAAAAFY"]
[Sat Apr 04 04:50:43.976759 2026] [:error] [pid 2567:tid 2581] [client 20.216.128.30:64068] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adAoI2JJmfRsTrAKjdQ4oQAAAMc"]
[Sat Apr 04 04:50:44.521295 2026] [:error] [pid 2567:tid 2578] [client 20.216.128.30:64894] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adAoJGJJmfRsTrAKjdQ4owAAAMQ"]
[Sat Apr 04 04:50:45.002901 2026] [:error] [pid 2567:tid 2598] [client 20.216.128.30:65313] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "adAoJWJJmfRsTrAKjdQ4pQAAANg"]
[Sat Apr 04 04:50:45.471828 2026] [:error] [pid 2567:tid 2595] [client 20.216.128.30:65288] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "adAoJWJJmfRsTrAKjdQ4qAAAANU"]
[Sat Apr 04 04:50:46.011869 2026] [:error] [pid 2567:tid 2588] [client 20.216.128.30:64040] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "adAoJmJJmfRsTrAKjdQ4qwAAAM4"]
[Sat Apr 04 04:50:46.502649 2026] [:error] [pid 2567:tid 2594] [client 20.216.128.30:64855] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "adAoJmJJmfRsTrAKjdQ4rgAAANQ"]
[Sat Apr 04 04:50:46.989921 2026] [:error] [pid 2567:tid 2595] [client 20.216.128.30:64078] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adAoJmJJmfRsTrAKjdQ4sgAAANU"]
[Sat Apr 04 04:50:47.485870 2026] [:error] [pid 2458:tid 2509] [client 20.216.128.30:62752] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adAoJyNozic5SuWqclnOMAAAAEU"]
[Sat Apr 04 04:50:47.992724 2026] [:error] [pid 2459:tid 2531] [client 20.216.128.30:64790] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adAoJwefyCmu4LR_PlpZrgAAAIA"]
[Sat Apr 04 04:50:48.496689 2026] [:error] [pid 2459:tid 2543] [client 20.216.128.30:63535] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adAoKAefyCmu4LR_PlpZrwAAAIs"]
[Sat Apr 04 04:50:49.013523 2026] [:error] [pid 2458:tid 2518] [client 20.216.128.30:64002] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adAoKSNozic5SuWqclnOOAAAAE4"]
[Sat Apr 04 04:50:49.496339 2026] [:error] [pid 2458:tid 2513] [client 20.216.128.30:64121] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adAoKSNozic5SuWqclnOOQAAAEk"]
[Sat Apr 04 04:50:49.996273 2026] [:error] [pid 2458:tid 2525] [client 20.216.128.30:64769] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adAoKSNozic5SuWqclnOPAAAAFU"]
[Sat Apr 04 04:50:50.465768 2026] [:error] [pid 2458:tid 2523] [client 20.216.128.30:64038] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adAoKiNozic5SuWqclnOQQAAAFM"]
[Sat Apr 04 04:50:51.018699 2026] [:error] [pid 2458:tid 2518] [client 20.216.128.30:64807] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adAoKyNozic5SuWqclnOQwAAAE4"]
[Sat Apr 04 04:50:51.509560 2026] [:error] [pid 2457:tid 2498] [client 20.216.128.30:64115] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adAoK0mNHppaMd92ZpdIfQAAABU"]
[Sat Apr 04 04:50:52.001856 2026] [:error] [pid 2457:tid 2489] [client 20.216.128.30:63577] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adAoLEmNHppaMd92ZpdIgAAAAAw"]
[Sat Apr 04 04:50:52.489168 2026] [:error] [pid 2457:tid 2496] [client 20.216.128.30:65289] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adAoLEmNHppaMd92ZpdIhQAAABM"]
[Sat Apr 04 04:50:53.588232 2026] [:error] [pid 2457:tid 2480] [client 20.216.128.30:64057] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "adAoLUmNHppaMd92ZpdIjQAAAAM"]
[Sat Apr 04 04:50:54.094541 2026] [:error] [pid 2457:tid 2484] [client 20.216.128.30:64780] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "adAoLkmNHppaMd92ZpdIkwAAAAc"]
[Sat Apr 04 04:50:54.582910 2026] [:error] [pid 2567:tid 2575] [client 20.216.128.30:65390] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "adAoLmJJmfRsTrAKjdQ4tQAAAME"]
[Sat Apr 04 04:50:55.114370 2026] [:error] [pid 2567:tid 2596] [client 20.216.128.30:65284] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "adAoL2JJmfRsTrAKjdQ4uAAAANY"]
[Sat Apr 04 04:50:55.638768 2026] [:error] [pid 37114:tid 37136] [client 20.216.128.30:65340] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "adAoL8-DnSj3fGMexeJmJwAAARQ"]
[Sat Apr 04 04:50:56.110969 2026] [:error] [pid 2459:tid 2541] [client 20.216.128.30:64795] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "adAoMAefyCmu4LR_PlpZtQAAAIk"]
[Sat Apr 04 04:50:56.586144 2026] [:error] [pid 2458:tid 2522] [client 20.216.128.30:65334] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "adAoMCNozic5SuWqclnOTQAAAFI"]
[Sat Apr 04 04:50:57.110950 2026] [:error] [pid 2567:tid 2579] [client 20.216.128.30:65371] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "adAoMWJJmfRsTrAKjdQ4uwAAAMU"]
[Sat Apr 04 04:50:57.598449 2026] [:error] [pid 37114:tid 37127] [client 20.216.128.30:64873] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adAoMc-DnSj3fGMexeJmKgAAAQs"]
[Sat Apr 04 04:50:58.152453 2026] [:error] [pid 2567:tid 2594] [client 20.216.128.30:64044] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adAoMmJJmfRsTrAKjdQ4vQAAANQ"]
[Sat Apr 04 04:50:58.633761 2026] [:error] [pid 2458:tid 2504] [client 20.216.128.30:64074] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adAoMiNozic5SuWqclnOUQAAAEA"]
[Sat Apr 04 04:50:59.289301 2026] [:error] [pid 2459:tid 2534] [client 20.216.128.30:63572] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adAoMwefyCmu4LR_PlpZuQAAAIM"]
[Sat Apr 04 04:51:00.032760 2026] [:error] [pid 2567:tid 2575] [client 20.216.128.30:64870] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adAoNGJJmfRsTrAKjdQ4wwAAAME"]
[Sat Apr 04 04:51:00.613601 2026] [:error] [pid 2458:tid 2517] [client 20.216.128.30:64891] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adAoNCNozic5SuWqclnOWQAAAE0"]
[Sat Apr 04 04:51:01.143436 2026] [:error] [pid 2567:tid 2588] [client 20.216.128.30:65314] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adAoNWJJmfRsTrAKjdQ4xwAAAM4"]
[Sat Apr 04 04:51:01.813401 2026] [:error] [pid 2567:tid 2581] [client 20.216.128.30:63493] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adAoNWJJmfRsTrAKjdQ4ywAAAMc"]
[Sat Apr 04 04:51:02.521923 2026] [:error] [pid 37114:tid 37137] [client 20.216.128.30:65372] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adAoNs-DnSj3fGMexeJmLQAAARU"]
[Sat Apr 04 04:51:03.092475 2026] [:error] [pid 2567:tid 2586] [client 20.216.128.30:64837] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adAoN2JJmfRsTrAKjdQ40AAAAMw"]
[Sat Apr 04 04:51:03.734246 2026] [:error] [pid 2458:tid 2521] [client 20.216.128.30:65359] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adAoNyNozic5SuWqclnOXgAAAFE"]
[Sat Apr 04 04:51:04.525973 2026] [:error] [pid 37114:tid 37134] [client 20.216.128.30:64768] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adAoOM-DnSj3fGMexeJmMwAAARI"]
[Sat Apr 04 04:51:05.325511 2026] [:error] [pid 2567:tid 2579] [client 20.216.128.30:64789] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adAoOWJJmfRsTrAKjdQ40wAAAMU"]
[Sat Apr 04 04:51:05.927048 2026] [:error] [pid 2567:tid 2595] [client 20.216.128.30:65349] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adAoOWJJmfRsTrAKjdQ41QAAANU"]
[Sat Apr 04 04:51:06.573960 2026] [:error] [pid 2457:tid 2477] [client 20.216.128.30:64014] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adAoOkmNHppaMd92ZpdIpgAAAAA"]
[Sat Apr 04 04:51:51.242249 2026] [:error] [pid 2567:tid 2593] [client 20.216.128.30:64834] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adAoZ2JJmfRsTrAKjdQ5lQAAANM"]
[Sat Apr 04 04:51:51.783106 2026] [:error] [pid 2567:tid 2595] [client 20.216.128.30:65407] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adAoZ2JJmfRsTrAKjdQ5lgAAANU"]
[Sat Apr 04 04:51:52.379854 2026] [:error] [pid 2567:tid 2594] [client 20.216.128.30:64124] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adAoaGJJmfRsTrAKjdQ5mAAAANQ"]
[Sat Apr 04 04:51:53.180546 2026] [:error] [pid 2459:tid 2532] [client 20.216.128.30:62739] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adAoaQefyCmu4LR_PlpaIAAAAIE"]
[Sat Apr 04 04:51:53.656312 2026] [:error] [pid 2459:tid 2549] [client 20.216.128.30:64084] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adAoaQefyCmu4LR_PlpaIgAAAJE"]
[Sat Apr 04 04:51:54.481203 2026] [:error] [pid 2458:tid 2521] [client 20.216.128.30:64860] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adAoaiNozic5SuWqclnOoQAAAFE"]
[Sat Apr 04 04:51:55.015178 2026] [:error] [pid 37114:tid 37139] [client 20.216.128.30:65324] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adAoa8-DnSj3fGMexeJmcQAAARc"]
[Sat Apr 04 04:51:55.565390 2026] [:error] [pid 37114:tid 37131] [client 20.216.128.30:64035] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adAoa8-DnSj3fGMexeJmcgAAAQ8"]
[Sat Apr 04 04:51:56.096086 2026] [:error] [pid 2567:tid 2577] [client 20.216.128.30:62823] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adAobGJJmfRsTrAKjdQ5pQAAAMM"]
[Sat Apr 04 04:51:56.693188 2026] [:error] [pid 37114:tid 37117] [client 20.216.128.30:65325] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adAobM-DnSj3fGMexeJmcwAAAQE"]
[Sat Apr 04 04:51:57.542286 2026] [:error] [pid 37114:tid 37133] [client 20.216.128.30:63566] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "adAobc-DnSj3fGMexeJmeAAAARE"]
[Sat Apr 04 04:51:58.067531 2026] [:error] [pid 2567:tid 2596] [client 20.216.128.30:65329] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "adAobmJJmfRsTrAKjdQ5rAAAANY"]
[Sat Apr 04 04:51:58.633668 2026] [:error] [pid 37114:tid 37122] [client 20.216.128.30:63555] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "adAobs-DnSj3fGMexeJmfAAAAQY"]
[Sat Apr 04 04:51:59.134603 2026] [:error] [pid 2567:tid 2598] [client 20.216.128.30:64841] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "adAob2JJmfRsTrAKjdQ5rgAAANg"]
[Sat Apr 04 04:51:59.681792 2026] [:error] [pid 2458:tid 2512] [client 20.216.128.30:63529] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "adAobyNozic5SuWqclnOpgAAAEg"]
[Sat Apr 04 04:52:00.189719 2026] [:error] [pid 2457:tid 2495] [client 20.216.128.30:64826] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "adAocEmNHppaMd92ZpdI5AAAABI"]
[Sat Apr 04 04:52:00.739884 2026] [:error] [pid 2459:tid 2543] [client 20.216.128.30:65310] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "adAocAefyCmu4LR_PlpaLAAAAIs"]
[Sat Apr 04 04:52:01.217038 2026] [:error] [pid 2567:tid 2579] [client 20.216.128.30:64083] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buc.php"] [unique_id "adAocWJJmfRsTrAKjdQ5rwAAAMU"]
[Sat Apr 04 04:52:01.693195 2026] [:error] [pid 2567:tid 2580] [client 20.216.128.30:64110] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adAocWJJmfRsTrAKjdQ5swAAAMY"]
[Sat Apr 04 04:52:02.164533 2026] [:error] [pid 2457:tid 2490] [client 20.216.128.30:64008] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adAockmNHppaMd92ZpdI6AAAAA0"]
[Sat Apr 04 04:52:02.643003 2026] [:error] [pid 37114:tid 37135] [client 20.216.128.30:65403] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adAocs-DnSj3fGMexeJmhgAAARM"]
[Sat Apr 04 04:52:03.248803 2026] [:error] [pid 2567:tid 2591] [client 20.216.128.30:64096] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adAoc2JJmfRsTrAKjdQ5uAAAANE"]
[Sat Apr 04 04:52:03.794995 2026] [:error] [pid 2567:tid 2597] [client 20.216.128.30:64017] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adAoc2JJmfRsTrAKjdQ5ugAAANc"]
[Sat Apr 04 04:52:04.269924 2026] [:error] [pid 2457:tid 2478] [client 20.216.128.30:65344] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adAodEmNHppaMd92ZpdI6wAAAAE"]
[Sat Apr 04 04:52:04.773834 2026] [:error] [pid 2567:tid 2596] [client 20.216.128.30:64786] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adAodGJJmfRsTrAKjdQ5vgAAANY"]
[Sat Apr 04 04:52:05.246675 2026] [:error] [pid 2567:tid 2584] [client 20.216.128.30:64813] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adAodWJJmfRsTrAKjdQ5vwAAAMo"]
[Sat Apr 04 04:52:05.796419 2026] [:error] [pid 2567:tid 2594] [client 20.216.128.30:64039] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adAodWJJmfRsTrAKjdQ5wAAAANQ"]
[Sat Apr 04 04:52:06.275235 2026] [:error] [pid 2567:tid 2585] [client 20.216.128.30:63561] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adAodmJJmfRsTrAKjdQ5wwAAAMs"]
[Sat Apr 04 04:52:06.768681 2026] [:error] [pid 37114:tid 37136] [client 20.216.128.30:64850] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx78.php"] [unique_id "adAods-DnSj3fGMexeJmjwAAARQ"]
[Sat Apr 04 04:52:07.426079 2026] [:error] [pid 2459:tid 2546] [client 20.216.128.30:64030] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adAodwefyCmu4LR_PlpaMAAAAI4"]
[Sat Apr 04 04:52:07.928006 2026] [:error] [pid 2458:tid 2509] [client 20.216.128.30:65282] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adAodyNozic5SuWqclnOsAAAAEU"]
[Sat Apr 04 04:52:08.438665 2026] [:error] [pid 2457:tid 2497] [client 20.216.128.30:63596] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adAoeEmNHppaMd92ZpdI7wAAABQ"]
[Sat Apr 04 04:52:08.911139 2026] [:error] [pid 2458:tid 2516] [client 20.216.128.30:65283] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adAoeCNozic5SuWqclnOtAAAAEw"]
[Sat Apr 04 04:52:09.383761 2026] [:error] [pid 2458:tid 2513] [client 20.216.128.30:63599] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adAoeSNozic5SuWqclnOtQAAAEk"]
[Sat Apr 04 04:52:09.904138 2026] [:error] [pid 2567:tid 2598] [client 20.216.128.30:64019] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adAoeWJJmfRsTrAKjdQ5zQAAANg"]
[Sat Apr 04 04:52:10.481178 2026] [:error] [pid 2567:tid 2579] [client 20.216.128.30:65290] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adAoemJJmfRsTrAKjdQ50AAAAMU"]
[Sat Apr 04 04:52:11.028991 2026] [:error] [pid 2459:tid 2535] [client 20.216.128.30:62749] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adAoewefyCmu4LR_PlpaMwAAAIQ"]
[Sat Apr 04 04:52:11.514084 2026] [:error] [pid 2459:tid 2545] [client 20.216.128.30:64885] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adAoewefyCmu4LR_PlpaNAAAAI0"]
[Sat Apr 04 04:52:11.983531 2026] [:error] [pid 2458:tid 2524] [client 20.216.128.30:64783] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adAoeyNozic5SuWqclnOtwAAAFQ"]
[Sat Apr 04 04:52:12.476829 2026] [:error] [pid 37114:tid 37128] [client 20.216.128.30:62766] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "adAofM-DnSj3fGMexeJmlwAAAQw"]
[Sat Apr 04 04:52:12.979860 2026] [:error] [pid 2458:tid 2504] [client 20.216.128.30:64007] [client 20.216.128.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "adAofCNozic5SuWqclnOuAAAAEA"]
[Sat Apr 04 07:05:03.564022 2026] [:error] [pid 2458:tid 2507] [client 45.92.1.112:52111] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adBHnyNozic5SuWqcln00gAAAEM"]
[Sat Apr 04 07:05:04.086543 2026] [:error] [pid 2459:tid 2538] [client 45.92.1.112:57326] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adBHoAefyCmu4LR_PlqJWAAAAIY"]
[Sat Apr 04 07:05:04.659071 2026] [:error] [pid 2459:tid 2547] [client 45.92.1.112:49643] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adBHoAefyCmu4LR_PlqJWQAAAI8"]
[Sat Apr 04 07:05:05.144430 2026] [:error] [pid 2567:tid 2588] [client 45.92.1.112:53774] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adBHoWJJmfRsTrAKjdSTmgAAAM4"]
[Sat Apr 04 07:05:05.674673 2026] [:error] [pid 37114:tid 37119] [client 45.92.1.112:63046] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adBHoc-DnSj3fGMexeKjYgAAAQM"]
[Sat Apr 04 09:09:54.538249 2026] [authz_core:error] [pid 37114:tid 37136] [client 106.63.26.157:8545] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/simply-gallery-block/readme.txt
[Sat Apr 04 09:09:56.156006 2026] [authz_core:error] [pid 37114:tid 37138] [client 106.63.26.13:37861] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/contact-form-7/readme.txt
[Sat Apr 04 09:09:57.909365 2026] [authz_core:error] [pid 2567:tid 2586] [client 106.63.26.8:6615] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/plugins/photo-gallery/readme.txt
[Sat Apr 04 09:10:08.339509 2026] [authz_core:error] [pid 37114:tid 37125] [client 106.63.26.7:16891] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/themes/Divi/readme.txt
[Sat Apr 04 09:10:09.781533 2026] [authz_core:error] [pid 2567:tid 2581] [client 106.63.26.8:16729] AH01630: client denied by server configuration: /home/makifimc/public_html/wp-content/themes/Your-Generated-Divi-child-theme-template-by-DiviCake/readme.txt
[Sat Apr 04 10:35:46.399160 2026] [autoindex:error] [pid 2459:tid 2533] [client 89.117.54.137:55785] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 05 02:07:33.407728 2026] [:error] [pid 53820:tid 53901] [client 185.198.240.110:62935] [client 185.198.240.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adFTZTKzpMZSi9FOeIYnuQAAAEA"]
[Sun Apr 05 07:56:11.706121 2026] [:error] [pid 45305:tid 45390] [client 74.248.146.253:1830] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymi.php"] [unique_id "adGlG-jDQjr7aWhjflB4HwAAAJM"]
[Sun Apr 05 07:56:15.021147 2026] [:error] [pid 45305:tid 45380] [client 74.248.146.253:65150] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymi.php"] [unique_id "adGlH-jDQjr7aWhjflB4KwAAAIk"]
[Sun Apr 05 07:56:20.029102 2026] [:error] [pid 45305:tid 45377] [client 74.248.146.253:1852] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymi.php"] [unique_id "adGlJOjDQjr7aWhjflB4PAAAAIY"]
[Sun Apr 05 07:56:24.814878 2026] [:error] [pid 45409:tid 45429] [client 74.248.146.253:15878] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "adGlKNHt_Oyw03gjCNgRnQAAANI"]
[Sun Apr 05 07:56:27.103304 2026] [:error] [pid 45409:tid 45434] [client 74.248.146.253:1837] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "adGlK9Ht_Oyw03gjCNgRqAAAANc"]
[Sun Apr 05 07:56:28.555505 2026] [:error] [pid 45305:tid 45393] [client 74.248.146.253:1805] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "adGlLOjDQjr7aWhjflB4UgAAAJY"]
[Sun Apr 05 07:56:29.738360 2026] [:error] [pid 45305:tid 45384] [client 74.248.146.253:20986] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "adGlLejDQjr7aWhjflB4WAAAAI0"]
[Sun Apr 05 07:56:32.380563 2026] [:error] [pid 45305:tid 45374] [client 74.248.146.253:20949] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "adGlMOjDQjr7aWhjflB4YQAAAIM"]
[Sun Apr 05 07:56:36.077986 2026] [:error] [pid 30921:tid 30944] [client 74.248.146.253:20223] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "adGlNGFGQVn8Q0ueB26g8gAAARU"]
[Sun Apr 05 07:56:39.115657 2026] [:error] [pid 30921:tid 30927] [client 74.248.146.253:16980] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "adGlN2FGQVn8Q0ueB26g9QAAAQQ"]
[Sun Apr 05 07:56:47.160987 2026] [:error] [pid 45409:tid 45434] [client 74.248.146.253:28118] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxc.php"] [unique_id "adGlP9Ht_Oyw03gjCNgRvQAAANc"]
[Sun Apr 05 07:57:23.992427 2026] [:error] [pid 45305:tid 45386] [client 74.248.146.253:16965] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "adGlY-jDQjr7aWhjflB4zQAAAI8"]
[Sun Apr 05 07:57:29.337727 2026] [:error] [pid 45305:tid 45384] [client 74.248.146.253:16976] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "adGlaejDQjr7aWhjflB41QAAAI0"]
[Sun Apr 05 07:57:31.189492 2026] [:error] [pid 45305:tid 45379] [client 74.248.146.253:65120] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "adGla-jDQjr7aWhjflB42wAAAIg"]
[Sun Apr 05 07:57:38.686669 2026] [:error] [pid 45305:tid 45371] [client 74.248.146.253:17014] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55l453.php"] [unique_id "adGlcujDQjr7aWhjflB46QAAAIA"]
[Sun Apr 05 07:57:43.775313 2026] [:error] [pid 45304:tid 45355] [client 74.248.146.253:17023] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55l453.php"] [unique_id "adGldw5jnqDKKovdRkkosQAAAEs"]
[Sun Apr 05 07:57:46.397791 2026] [:error] [pid 45305:tid 45387] [client 74.248.146.253:13764] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55l453.php"] [unique_id "adGleujDQjr7aWhjflB4-gAAAJA"]
[Sun Apr 05 18:51:33.487921 2026] [:error] [pid 45409:tid 45411] [client 74.7.243.130:42458] [client 74.7.243.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.130, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adI-tdHt_Oyw03gjCNh7bgAAAMA"], referer: https://makifim.com.au/
[Sun Apr 05 19:57:49.547367 2026] [:error] [pid 45305:tid 45392] [client 104.28.152.201:13854] [client 104.28.152.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJOPejDQjr7aWhjflA9IwAAAJU"]
[Sun Apr 05 19:57:50.798263 2026] [:error] [pid 45305:tid 45393] [client 69.46.65.137:11500] [client 69.46.65.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJOPujDQjr7aWhjflA9JgAAAJY"]
[Sun Apr 05 19:57:52.393320 2026] [:error] [pid 45303:tid 45337] [client 104.238.41.160:35926] [client 104.238.41.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJOQLboQ9eViZ4hdnkNwwAAABQ"]
[Sun Apr 05 19:57:54.040593 2026] [:error] [pid 45304:tid 45357] [client 104.238.42.244:12948] [client 104.238.42.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJOQg5jnqDKKovdRkn9igAAAE0"]
[Sun Apr 05 19:57:54.571978 2026] [:error] [pid 30921:tid 30930] [client 104.28.152.201:14143] [client 104.28.152.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJOQmFGQVn8Q0ueB272SQAAAQc"]
[Sun Apr 05 19:57:58.079990 2026] [:error] [pid 45303:tid 45338] [client 104.28.152.201:12639] [client 104.28.152.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJORrboQ9eViZ4hdnkN0wAAABU"]
[Sun Apr 05 19:57:59.207205 2026] [:error] [pid 45305:tid 45376] [client 69.46.65.137:23152] [client 69.46.65.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJOR-jDQjr7aWhjflA9LgAAAIU"]
[Sun Apr 05 19:58:00.793528 2026] [:error] [pid 45409:tid 45425] [client 104.238.41.160:21376] [client 104.238.41.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJOSNHt_Oyw03gjCNi68wAAAM4"]
[Sun Apr 05 19:58:02.423193 2026] [:error] [pid 30921:tid 30942] [client 104.238.42.244:14420] [client 104.238.42.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adJOSmFGQVn8Q0ueB272WwAAARM"]
[Sun Apr 05 20:03:14.620179 2026] [:error] [pid 45409:tid 45413] [client 45.154.98.148:49638] [client 45.154.98.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adJPgtHt_Oyw03gjCNjAbQAAAMI"]
[Sun Apr 05 20:03:15.105055 2026] [:error] [pid 45409:tid 45414] [client 45.154.98.148:49677] [client 45.154.98.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adJPg9Ht_Oyw03gjCNjAbwAAAMM"]
[Sun Apr 05 20:03:15.613516 2026] [:error] [pid 45303:tid 45323] [client 45.154.98.148:59441] [client 45.154.98.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adJPg7boQ9eViZ4hdnkQxQAAAAY"]
[Sun Apr 05 20:03:18.707067 2026] [:error] [pid 45409:tid 45434] [client 45.154.98.148:58845] [client 45.154.98.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "adJPhtHt_Oyw03gjCNjAhQAAANc"]
[Mon Apr 06 01:27:19.496780 2026] [:error] [pid 51753:tid 51813] [client 172.213.226.85:48137] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adKbd63pmp1JkaicYbt66AAAAQI"]
[Mon Apr 06 01:27:24.638744 2026] [:error] [pid 51753:tid 51826] [client 172.213.226.85:59093] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adKbfK3pmp1JkaicYbt68AAAAQ8"]
[Mon Apr 06 01:27:26.084956 2026] [:error] [pid 51753:tid 51813] [client 172.213.226.85:36889] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adKbfq3pmp1JkaicYbt6-AAAAQI"]
[Mon Apr 06 01:27:27.513025 2026] [:error] [pid 51753:tid 51821] [client 172.213.226.85:36910] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adKbf63pmp1JkaicYbt7BAAAAQo"]
[Mon Apr 06 01:27:30.229216 2026] [:error] [pid 51753:tid 51814] [client 172.213.226.85:44894] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adKbgq3pmp1JkaicYbt7FQAAAQM"]
[Mon Apr 06 01:27:31.039765 2026] [:error] [pid 51753:tid 51816] [client 172.213.226.85:36893] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adKbg63pmp1JkaicYbt7GQAAAQU"]
[Mon Apr 06 01:27:33.796382 2026] [:error] [pid 51580:tid 51641] [client 172.213.226.85:61610] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adKbhVNFl1NiyNgNZAksGAAAAEI"]
[Mon Apr 06 01:27:36.933919 2026] [:error] [pid 51581:tid 51675] [client 172.213.226.85:44926] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adKbiN4k74fhQLPUy7FBuAAAAIY"]
[Mon Apr 06 01:27:37.889440 2026] [:error] [pid 51753:tid 51832] [client 172.213.226.85:65137] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKbia3pmp1JkaicYbt7RQAAARU"]
[Mon Apr 06 01:27:41.031842 2026] [:error] [pid 51584:tid 51698] [client 172.213.226.85:61631] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKbjcZ4qY_GoNCPARAh9wAAAME"]
[Mon Apr 06 01:27:44.296197 2026] [:error] [pid 51581:tid 51691] [client 172.213.226.85:61586] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKbkN4k74fhQLPUy7FBywAAAJU"]
[Mon Apr 06 01:27:46.229800 2026] [:error] [pid 51584:tid 51719] [client 172.213.226.85:41412] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKbksZ4qY_GoNCPARAiCwAAANY"]
[Mon Apr 06 01:27:48.555760 2026] [:error] [pid 51580:tid 51644] [client 172.213.226.85:47702] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adKblFNFl1NiyNgNZAksQwAAAEU"]
[Mon Apr 06 01:27:52.459726 2026] [:error] [pid 51581:tid 51676] [client 172.213.226.85:61019] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adKbmN4k74fhQLPUy7FB2wAAAIc"]
[Mon Apr 06 01:27:59.450282 2026] [:error] [pid 51581:tid 51688] [client 172.213.226.85:61026] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adKbn94k74fhQLPUy7FB6wAAAJM"]
[Mon Apr 06 01:28:01.724005 2026] [:error] [pid 51753:tid 51826] [client 172.213.226.85:41439] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adKboa3pmp1JkaicYbt7ngAAAQ8"]
[Mon Apr 06 01:28:11.043435 2026] [:error] [pid 51753:tid 51815] [client 172.213.226.85:64439] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adKbq63pmp1JkaicYbt7uAAAAQQ"]
[Mon Apr 06 01:28:13.798963 2026] [:error] [pid 51581:tid 51678] [client 172.213.226.85:61013] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adKbrd4k74fhQLPUy7FCFwAAAIk"]
[Mon Apr 06 01:28:14.772033 2026] [:error] [pid 51581:tid 51669] [client 172.213.226.85:64406] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adKbrt4k74fhQLPUy7FCHgAAAIA"]
[Mon Apr 06 01:29:04.662561 2026] [:error] [pid 51584:tid 51710] [client 172.213.226.85:5331] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adKb4MZ4qY_GoNCPARAi3wAAAM0"]
[Mon Apr 06 01:29:06.608067 2026] [:error] [pid 51753:tid 51811] [client 172.213.226.85:61020] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adKb4q3pmp1JkaicYbt8kQAAAQA"]
[Mon Apr 06 01:29:09.150466 2026] [:error] [pid 51753:tid 51830] [client 172.213.226.85:5322] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adKb5a3pmp1JkaicYbt8pQAAARM"]
[Mon Apr 06 01:29:14.297143 2026] [:error] [pid 51753:tid 51826] [client 172.213.226.85:34578] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adKb6q3pmp1JkaicYbt8uAAAAQ8"]
[Mon Apr 06 01:29:16.201471 2026] [:error] [pid 51584:tid 51708] [client 172.213.226.85:64430] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adKb7MZ4qY_GoNCPARAi_gAAAMs"]
[Mon Apr 06 01:29:20.936999 2026] [:error] [pid 51580:tid 51663] [client 172.213.226.85:64424] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adKb8FNFl1NiyNgNZAktRQAAAFg"]
[Mon Apr 06 01:29:22.000690 2026] [:error] [pid 51584:tid 51717] [client 172.213.226.85:61049] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adKb8cZ4qY_GoNCPARAjEAAAANQ"]
[Mon Apr 06 01:29:24.459842 2026] [:error] [pid 51584:tid 51715] [client 172.213.226.85:51847] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adKb9MZ4qY_GoNCPARAjFAAAANI"]
[Mon Apr 06 01:29:26.199870 2026] [:error] [pid 51584:tid 51717] [client 172.213.226.85:61580] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adKb9sZ4qY_GoNCPARAjFwAAANQ"]
[Mon Apr 06 01:29:28.050368 2026] [:error] [pid 51753:tid 51834] [client 172.213.226.85:41169] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adKb-K3pmp1JkaicYbt8-QAAARY"]
[Mon Apr 06 01:29:29.379124 2026] [:error] [pid 51580:tid 51642] [client 172.213.226.85:41154] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adKb-VNFl1NiyNgNZAktZwAAAEM"]
[Mon Apr 06 01:29:33.847104 2026] [:error] [pid 51584:tid 51706] [client 172.213.226.85:41188] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adKb_cZ4qY_GoNCPARAjOQAAAMk"]
[Mon Apr 06 01:29:35.024271 2026] [:error] [pid 51581:tid 51680] [client 172.213.226.85:34570] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adKb_94k74fhQLPUy7FClwAAAIs"]
[Mon Apr 06 01:29:37.166134 2026] [:error] [pid 51584:tid 51706] [client 172.213.226.85:60931] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adKcAcZ4qY_GoNCPARAjRgAAAMk"]
[Mon Apr 06 01:29:47.870763 2026] [:error] [pid 51753:tid 51821] [client 172.213.226.85:65107] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adKcC63pmp1JkaicYbt9TAAAAQo"]
[Mon Apr 06 01:29:51.006951 2026] [:error] [pid 51584:tid 51699] [client 172.213.226.85:57633] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adKcD8Z4qY_GoNCPARAjdgAAAMI"]
[Mon Apr 06 01:29:54.279005 2026] [:error] [pid 51753:tid 51818] [client 172.213.226.85:61053] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adKcEq3pmp1JkaicYbt9eAAAAQc"]
[Mon Apr 06 01:31:07.493076 2026] [:error] [pid 51580:tid 51639] [client 172.213.226.85:6052] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adKcW1NFl1NiyNgNZAkvNQAAAEA"]
[Mon Apr 06 01:31:08.392351 2026] [:error] [pid 51584:tid 51713] [client 172.213.226.85:48813] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adKcXMZ4qY_GoNCPARAkjQAAANA"]
[Mon Apr 06 01:31:10.160984 2026] [:error] [pid 51580:tid 51644] [client 172.213.226.85:56178] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adKcXlNFl1NiyNgNZAkvQQAAAEU"]
[Mon Apr 06 01:31:11.901907 2026] [:error] [pid 51580:tid 51660] [client 172.213.226.85:46315] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adKcX1NFl1NiyNgNZAkvSQAAAFU"]
[Mon Apr 06 01:31:14.791336 2026] [:error] [pid 51584:tid 51700] [client 172.213.226.85:58579] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adKcYsZ4qY_GoNCPARAkmwAAAMM"]
[Mon Apr 06 01:31:16.088196 2026] [:error] [pid 51580:tid 51647] [client 172.213.226.85:5854] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adKcZFNFl1NiyNgNZAkvZwAAAEg"]
[Mon Apr 06 01:31:17.400413 2026] [:error] [pid 51753:tid 51831] [client 172.213.226.85:48816] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adKcZa3pmp1JkaicYbt_FQAAARQ"]
[Mon Apr 06 01:31:19.889875 2026] [:error] [pid 51753:tid 51816] [client 172.213.226.85:5830] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adKcZ63pmp1JkaicYbt_IQAAAQU"]
[Mon Apr 06 01:31:24.598368 2026] [:error] [pid 51584:tid 51718] [client 172.213.226.85:53382] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adKcbMZ4qY_GoNCPARAkvQAAANU"]
[Mon Apr 06 01:31:30.921306 2026] [:error] [pid 51580:tid 51647] [client 172.213.226.85:58596] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adKcclNFl1NiyNgNZAkvowAAAEg"]
[Mon Apr 06 01:31:32.991302 2026] [:error] [pid 51580:tid 51650] [client 172.213.226.85:58073] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adKcdFNFl1NiyNgNZAkvrgAAAEs"]
[Mon Apr 06 01:31:38.903625 2026] [:error] [pid 51584:tid 51720] [client 172.213.226.85:57154] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adKcesZ4qY_GoNCPARAk6QAAANc"]
[Mon Apr 06 01:31:42.712997 2026] [:error] [pid 51753:tid 51826] [client 172.213.226.85:43320] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adKcfq3pmp1JkaicYbt_jQAAAQ8"]
[Mon Apr 06 01:31:55.607759 2026] [:error] [pid 51753:tid 51824] [client 172.213.226.85:45797] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adKci63pmp1JkaicYbt_4AAAAQ0"]
[Mon Apr 06 01:31:59.346671 2026] [:error] [pid 51753:tid 51816] [client 172.213.226.85:56114] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adKcj63pmp1JkaicYbt_8gAAAQU"]
[Mon Apr 06 01:32:01.207944 2026] [:error] [pid 51753:tid 51818] [client 172.213.226.85:43362] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adKcka3pmp1JkaicYbt_-wAAAQc"]
[Mon Apr 06 01:32:03.188476 2026] [:error] [pid 51580:tid 51640] [client 172.213.226.85:41124] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adKck1NFl1NiyNgNZAkwCAAAAEE"]
[Mon Apr 06 01:32:53.702446 2026] [:error] [pid 51581:tid 51678] [client 172.213.226.85:56083] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adKcxd4k74fhQLPUy7FEOQAAAIk"]
[Mon Apr 06 01:32:55.742746 2026] [:error] [pid 51584:tid 51698] [client 172.213.226.85:48163] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adKcx8Z4qY_GoNCPARAlqQAAAME"]
[Mon Apr 06 01:32:58.490525 2026] [:error] [pid 51580:tid 51644] [client 172.213.226.85:48857] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adKcylNFl1NiyNgNZAkw3AAAAEU"]
[Mon Apr 06 01:33:01.614823 2026] [:error] [pid 51584:tid 51711] [client 172.213.226.85:48144] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adKczcZ4qY_GoNCPARAluwAAAM4"]
[Mon Apr 06 01:33:04.118338 2026] [:error] [pid 51581:tid 51692] [client 172.213.226.85:59061] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adKc0N4k74fhQLPUy7FETAAAAJY"]
[Mon Apr 06 01:33:12.242584 2026] [:error] [pid 51580:tid 51649] [client 172.213.226.85:65044] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adKc2FNFl1NiyNgNZAkxDQAAAEo"]
[Mon Apr 06 01:33:13.908123 2026] [:error] [pid 51753:tid 51811] [client 172.213.226.85:50138] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adKc2a3pmp1JkaicYbuBDgAAAQA"]
[Mon Apr 06 01:33:17.504009 2026] [:error] [pid 51581:tid 51670] [client 172.213.226.85:56591] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adKc3d4k74fhQLPUy7FEZQAAAIE"]
[Mon Apr 06 01:33:19.084760 2026] [:error] [pid 51753:tid 51820] [client 172.213.226.85:61652] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adKc363pmp1JkaicYbuBNQAAAQk"]
[Mon Apr 06 01:33:20.988764 2026] [:error] [pid 51753:tid 51815] [client 172.213.226.85:61687] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adKc4K3pmp1JkaicYbuBQwAAAQQ"]
[Mon Apr 06 01:33:24.170045 2026] [:error] [pid 51753:tid 51814] [client 172.213.226.85:52765] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adKc5K3pmp1JkaicYbuBWgAAAQM"]
[Mon Apr 06 01:33:25.804677 2026] [:error] [pid 51580:tid 51651] [client 172.213.226.85:52796] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adKc5VNFl1NiyNgNZAkxOwAAAEw"]
[Mon Apr 06 01:33:30.312516 2026] [:error] [pid 51753:tid 51817] [client 172.213.226.85:59120] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adKc6q3pmp1JkaicYbuBcgAAAQY"]
[Mon Apr 06 01:33:32.911063 2026] [:error] [pid 51753:tid 51811] [client 172.213.226.85:42838] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adKc7K3pmp1JkaicYbuBdwAAAQA"]
[Mon Apr 06 01:33:34.548474 2026] [:error] [pid 51753:tid 51815] [client 172.213.226.85:56594] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adKc7q3pmp1JkaicYbuBgQAAAQQ"]
[Mon Apr 06 01:33:38.340894 2026] [:error] [pid 51580:tid 51648] [client 172.213.226.85:50080] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adKc8lNFl1NiyNgNZAkxgwAAAEk"]
[Mon Apr 06 01:33:40.103767 2026] [:error] [pid 51584:tid 51706] [client 172.213.226.85:52789] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adKc9MZ4qY_GoNCPARAmLwAAAMk"]
[Mon Apr 06 01:33:41.406700 2026] [:error] [pid 51584:tid 51714] [client 172.213.226.85:46899] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adKc9cZ4qY_GoNCPARAmNwAAANE"]
[Mon Apr 06 01:33:43.953644 2026] [:error] [pid 51753:tid 51819] [client 172.213.226.85:50076] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adKc963pmp1JkaicYbuBpgAAAQg"]
[Mon Apr 06 01:33:46.100048 2026] [:error] [pid 51753:tid 51818] [client 172.213.226.85:56643] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adKc-q3pmp1JkaicYbuBuAAAAQc"]
[Mon Apr 06 01:33:48.144993 2026] [:error] [pid 51584:tid 51718] [client 172.213.226.85:56655] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "adKc_MZ4qY_GoNCPARAmQwAAANU"]
[Mon Apr 06 01:33:50.298360 2026] [:error] [pid 51581:tid 51673] [client 172.213.226.85:42813] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "adKc_t4k74fhQLPUy7FEmwAAAIQ"]
[Mon Apr 06 01:34:52.267625 2026] [:error] [pid 51584:tid 51721] [client 172.213.226.85:65052] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adKdPMZ4qY_GoNCPARAnywAAANg"]
[Mon Apr 06 01:34:55.070858 2026] [:error] [pid 51580:tid 51644] [client 172.213.226.85:62731] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adKdP1NFl1NiyNgNZAkyWQAAAEU"]
[Mon Apr 06 01:34:58.014349 2026] [:error] [pid 51753:tid 51819] [client 172.213.226.85:59026] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adKdQq3pmp1JkaicYbuDxgAAAQg"]
[Mon Apr 06 01:35:00.891667 2026] [:error] [pid 51580:tid 51651] [client 172.213.226.85:50078] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adKdRFNFl1NiyNgNZAkyZAAAAEw"]
[Mon Apr 06 01:35:02.330795 2026] [:error] [pid 51753:tid 51811] [client 172.213.226.85:52761] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adKdRq3pmp1JkaicYbuD1QAAAQA"]
[Mon Apr 06 01:35:03.883501 2026] [:error] [pid 51581:tid 51686] [client 172.213.226.85:59135] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adKdR94k74fhQLPUy7FFUAAAAJE"]
[Mon Apr 06 01:35:06.162381 2026] [:error] [pid 51581:tid 51671] [client 172.213.226.85:56638] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adKdSt4k74fhQLPUy7FFXwAAAII"]
[Mon Apr 06 01:35:08.860739 2026] [:error] [pid 51753:tid 51812] [client 172.213.226.85:57089] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adKdTK3pmp1JkaicYbuECQAAAQE"]
[Mon Apr 06 01:35:11.918597 2026] [:error] [pid 51580:tid 51662] [client 172.213.226.85:65069] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "adKdT1NFl1NiyNgNZAkylQAAAFc"]
[Mon Apr 06 01:35:18.141465 2026] [:error] [pid 51580:tid 51657] [client 172.213.226.85:65081] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "adKdVlNFl1NiyNgNZAkysQAAAFI"]
[Mon Apr 06 01:35:20.493687 2026] [:error] [pid 51584:tid 51701] [client 172.213.226.85:59051] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "adKdWMZ4qY_GoNCPARAn8wAAAMQ"]
[Mon Apr 06 01:35:21.508764 2026] [:error] [pid 51753:tid 51825] [client 172.213.226.85:56633] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "adKdWa3pmp1JkaicYbuEUAAAAQ4"]
[Mon Apr 06 01:35:22.372316 2026] [:error] [pid 51580:tid 51651] [client 172.213.226.85:59128] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adKdWlNFl1NiyNgNZAkyygAAAEw"]
[Mon Apr 06 01:35:25.670520 2026] [:error] [pid 51581:tid 51691] [client 172.213.226.85:42855] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adKdXd4k74fhQLPUy7FFjAAAAJU"]
[Mon Apr 06 01:35:30.171956 2026] [:error] [pid 51753:tid 51816] [client 172.213.226.85:62754] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adKdYq3pmp1JkaicYbuEdQAAAQU"]
[Mon Apr 06 01:35:32.484085 2026] [:error] [pid 51753:tid 51835] [client 172.213.226.85:41798] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adKdZK3pmp1JkaicYbuEgAAAARc"]
[Mon Apr 06 01:35:33.999330 2026] [:error] [pid 51581:tid 51686] [client 172.213.226.85:56585] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "adKdZd4k74fhQLPUy7FFlgAAAJE"]
[Mon Apr 06 01:35:36.529831 2026] [:error] [pid 51581:tid 51675] [client 172.213.226.85:44318] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "adKdaN4k74fhQLPUy7FFmgAAAIY"]
[Mon Apr 06 01:35:42.853299 2026] [:error] [pid 51753:tid 51819] [client 172.213.226.85:59129] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "adKdbq3pmp1JkaicYbuEugAAAQg"]
[Mon Apr 06 01:35:45.707306 2026] [:error] [pid 51753:tid 51822] [client 172.213.226.85:56617] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "adKdca3pmp1JkaicYbuEwwAAAQs"]
[Mon Apr 06 01:35:47.498427 2026] [:error] [pid 51753:tid 51832] [client 172.213.226.85:59101] [client 172.213.226.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adKdc63pmp1JkaicYbuE0gAAARU"]
[Mon Apr 06 05:00:12.057668 2026] [:error] [pid 9442:tid 9446] [client 209.87.169.97:32207] [client 209.87.169.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adLNXEPsNnAJTnmz6sacSAAAAQI"]
[Mon Apr 06 15:23:42.413499 2026] [autoindex:error] [pid 35687:tid 35735] [client 207.180.194.94:64765] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Apr 06 16:10:12.941372 2026] [:error] [pid 35687:tid 35730] [client 20.215.64.133:1992] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/wp-login.php"] [unique_id "adNqZJ3LtDozV0i8Biso5gAAAEc"]
[Mon Apr 06 16:10:13.177440 2026] [:error] [pid 35686:tid 35713] [client 20.215.64.133:2041] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/wp-login.php"] [unique_id "adNqZcMKdea6oORd2fxPjgAAABE"]
[Mon Apr 06 16:10:17.687002 2026] [:error] [pid 38562:tid 38584] [client 20.215.64.133:2042] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adNqaaeD6Ohe6wzRuy4PvQAAAVM"]
[Mon Apr 06 16:10:17.704438 2026] [:error] [pid 10280:tid 10283] [client 20.215.64.133:1984] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adNqaV8QUJkf8g-BFfOAegAAAcA"]
[Mon Apr 06 16:10:19.693941 2026] [:error] [pid 9442:tid 9451] [client 20.215.64.133:2018] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adNqa0PsNnAJTnmz6sZWFAAAAQc"]
[Mon Apr 06 16:10:21.320883 2026] [:error] [pid 35686:tid 35711] [client 20.215.64.133:2027] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adNqbcMKdea6oORd2fxPtQAAAA8"]
[Mon Apr 06 16:10:21.944810 2026] [:error] [pid 9413:tid 9432] [client 20.215.64.133:2000] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "adNqbXllvEK3chn01wGXRwAAAZE"]
[Mon Apr 06 16:10:22.382145 2026] [:error] [pid 35687:tid 35735] [client 20.215.64.133:1923] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "adNqbp3LtDozV0i8Biso_AAAAEw"]
[Mon Apr 06 16:10:28.851549 2026] [:error] [pid 10280:tid 10301] [client 20.215.64.133:1936] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "adNqdF8QUJkf8g-BFfOAtwAAAdI"]
[Mon Apr 06 16:10:29.088943 2026] [:error] [pid 9442:tid 9463] [client 20.215.64.133:1876] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "adNqdUPsNnAJTnmz6sZWHAAAARM"]
[Mon Apr 06 16:10:29.403132 2026] [:error] [pid 38562:tid 38581] [client 20.215.64.133:2032] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "adNqdaeD6Ohe6wzRuy4P2AAAAVA"]
[Mon Apr 06 16:10:29.761248 2026] [:error] [pid 35686:tid 35718] [client 20.215.64.133:1940] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "adNqdcMKdea6oORd2fxP4QAAABY"]
[Mon Apr 06 16:10:29.964588 2026] [:error] [pid 38562:tid 38588] [client 20.215.64.133:1938] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "adNqdaeD6Ohe6wzRuy4P3QAAAVc"]
[Mon Apr 06 16:10:30.515576 2026] [:error] [pid 35686:tid 35706] [client 20.215.64.133:1930] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "adNqdsMKdea6oORd2fxP5AAAAAo"]
[Mon Apr 06 16:10:30.537985 2026] [:error] [pid 35686:tid 35703] [client 20.215.64.133:2012] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "adNqdsMKdea6oORd2fxP5QAAAAc"]
[Mon Apr 06 16:10:31.059381 2026] [:error] [pid 9413:tid 9426] [client 20.215.64.133:2028] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adNqd3llvEK3chn01wGXSgAAAYs"]
[Mon Apr 06 16:10:31.060841 2026] [:error] [pid 9442:tid 9457] [client 20.215.64.133:1999] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "adNqd0PsNnAJTnmz6sZWHgAAAQ0"]
[Mon Apr 06 16:10:31.584036 2026] [:error] [pid 38562:tid 38585] [client 20.215.64.133:2030] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adNqd6eD6Ohe6wzRuy4P4gAAAVQ"]
[Mon Apr 06 16:10:31.610952 2026] [:error] [pid 38562:tid 38581] [client 20.215.64.133:1925] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adNqd6eD6Ohe6wzRuy4P4wAAAVA"]
[Mon Apr 06 16:10:32.104998 2026] [:error] [pid 38562:tid 38571] [client 20.215.64.133:2016] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adNqeKeD6Ohe6wzRuy4P5QAAAUY"]
[Mon Apr 06 16:10:32.255651 2026] [:error] [pid 9442:tid 9454] [client 20.215.64.133:2001] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adNqeEPsNnAJTnmz6sZWIAAAAQo"]
[Mon Apr 06 16:10:32.644728 2026] [:error] [pid 38562:tid 38587] [client 20.215.64.133:1964] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adNqeKeD6Ohe6wzRuy4P7gAAAVY"]
[Mon Apr 06 16:10:32.940808 2026] [:error] [pid 9413:tid 9422] [client 20.215.64.133:2011] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adNqeHllvEK3chn01wGXTQAAAYc"]
[Mon Apr 06 16:10:33.175581 2026] [:error] [pid 35687:tid 35744] [client 20.215.64.133:2019] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "adNqeZ3LtDozV0i8BispEwAAAFU"]
[Mon Apr 06 16:10:33.660821 2026] [:error] [pid 35786:tid 35794] [client 20.215.64.133:2038] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/makeasmtp.php"] [unique_id "adNqeWgkfCKTaLhwaKT3gwAAAME"]
[Mon Apr 06 16:10:33.727536 2026] [:error] [pid 35786:tid 35807] [client 20.215.64.133:1954] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "adNqeWgkfCKTaLhwaKT3hAAAAM4"]
[Mon Apr 06 16:10:34.246354 2026] [:error] [pid 35688:tid 35757] [client 20.215.64.133:2002] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "adNqeuZ85qg4jLsRpQxGewAAAIc"]
[Mon Apr 06 16:10:34.270562 2026] [:error] [pid 35786:tid 35803] [client 20.215.64.133:2046] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "adNqemgkfCKTaLhwaKT3hQAAAMo"]
[Mon Apr 06 16:10:34.820063 2026] [:error] [pid 35786:tid 35810] [client 20.215.64.133:2006] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "adNqemgkfCKTaLhwaKT3iQAAANE"]
[Mon Apr 06 16:10:34.821954 2026] [:error] [pid 35688:tid 35755] [client 20.215.64.133:2017] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "adNqeuZ85qg4jLsRpQxGfQAAAIU"]
[Mon Apr 06 16:10:35.375132 2026] [:error] [pid 9442:tid 9455] [client 20.215.64.133:1994] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adNqe0PsNnAJTnmz6sZWIgAAAQs"]
[Mon Apr 06 16:10:35.689119 2026] [:error] [pid 35686:tid 35699] [client 20.215.64.133:2034] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "adNqe8MKdea6oORd2fxP9AAAAAM"]
[Mon Apr 06 16:10:35.944808 2026] [:error] [pid 9413:tid 9419] [client 20.215.64.133:2047] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adNqe3llvEK3chn01wGXVwAAAYQ"]
[Mon Apr 06 16:10:36.240096 2026] [:error] [pid 38562:tid 38582] [client 20.215.64.133:1937] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/admin.php"] [unique_id "adNqfKeD6Ohe6wzRuy4P-wAAAVE"]
[Mon Apr 06 16:10:36.482342 2026] [:error] [pid 35686:tid 35716] [client 20.215.64.133:2005] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/about.php"] [unique_id "adNqfMMKdea6oORd2fxP-AAAABQ"]
[Mon Apr 06 16:10:36.905917 2026] [:error] [pid 38562:tid 38578] [client 20.215.64.133:2022] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adNqfKeD6Ohe6wzRuy4QAAAAAU0"]
[Mon Apr 06 16:10:37.016808 2026] [:error] [pid 10280:tid 10306] [client 20.215.64.133:2021] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/about.php"] [unique_id "adNqfV8QUJkf8g-BFfOAuwAAAdc"]
[Mon Apr 06 16:10:37.648777 2026] [:error] [pid 35686:tid 35716] [client 20.215.64.133:1996] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adNqfcMKdea6oORd2fxP_wAAABQ"]
[Mon Apr 06 16:10:37.792554 2026] [:error] [pid 35686:tid 35707] [client 20.215.64.133:1948] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/about.php"] [unique_id "adNqfcMKdea6oORd2fxQBAAAAAs"]
[Mon Apr 06 16:10:38.374071 2026] [:error] [pid 10280:tid 10286] [client 20.215.64.133:1921] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/about.php"] [unique_id "adNqfl8QUJkf8g-BFfOAvgAAAcM"]
[Mon Apr 06 16:10:38.498192 2026] [:error] [pid 9413:tid 9423] [client 20.215.64.133:1928] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adNqfnllvEK3chn01wGXWgAAAYg"]
[Mon Apr 06 16:10:39.026506 2026] [:error] [pid 35786:tid 35813] [client 20.215.64.133:2023] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adNqf2gkfCKTaLhwaKT3jwAAANQ"]
[Mon Apr 06 16:10:39.075847 2026] [:error] [pid 38562:tid 38580] [client 20.215.64.133:1951] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/about.php"] [unique_id "adNqf6eD6Ohe6wzRuy4QAwAAAU8"]
[Mon Apr 06 16:10:39.641008 2026] [:error] [pid 38562:tid 38569] [client 20.215.64.133:2004] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adNqf6eD6Ohe6wzRuy4QBwAAAUQ"]
[Mon Apr 06 16:10:39.644067 2026] [:error] [pid 38562:tid 38578] [client 20.215.64.133:2020] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/about.php"] [unique_id "adNqf6eD6Ohe6wzRuy4QCAAAAU0"]
[Mon Apr 06 16:10:40.172827 2026] [:error] [pid 9442:tid 9453] [client 20.215.64.133:2035] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/about.php"] [unique_id "adNqgEPsNnAJTnmz6sZWKAAAAQk"]
[Mon Apr 06 16:10:40.201118 2026] [:error] [pid 38562:tid 38576] [client 20.215.64.133:1929] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adNqgKeD6Ohe6wzRuy4QDQAAAUs"]
[Mon Apr 06 16:10:40.775264 2026] [:error] [pid 10280:tid 10299] [client 20.215.64.133:1934] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adNqgF8QUJkf8g-BFfOAwwAAAdA"]
[Mon Apr 06 16:10:40.787951 2026] [:error] [pid 10280:tid 10292] [client 20.215.64.133:1967] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "adNqgF8QUJkf8g-BFfOAxAAAAck"]
[Mon Apr 06 16:10:41.305861 2026] [:error] [pid 10280:tid 10305] [client 20.215.64.133:1979] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "adNqgV8QUJkf8g-BFfOAxwAAAdY"]
[Mon Apr 06 16:10:41.387667 2026] [:error] [pid 35687:tid 35723] [client 20.215.64.133:1920] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adNqgZ3LtDozV0i8BispGwAAAEA"]
[Mon Apr 06 16:10:41.826863 2026] [:error] [pid 10280:tid 10288] [client 20.215.64.133:1942] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "adNqgV8QUJkf8g-BFfOAyQAAAcU"]
[Mon Apr 06 16:10:41.991871 2026] [:error] [pid 35687:tid 35741] [client 20.215.64.133:1990] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adNqgZ3LtDozV0i8BispHgAAAFI"]
[Mon Apr 06 16:10:42.392020 2026] [:error] [pid 35687:tid 35725] [client 20.215.64.133:1997] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "adNqgp3LtDozV0i8BispJAAAAEI"]
[Mon Apr 06 16:10:42.560846 2026] [:error] [pid 10280:tid 10284] [client 20.215.64.133:1995] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php/wp-includes/certificates/about.php"] [unique_id "adNqgl8QUJkf8g-BFfOAywAAAcE"]
[Mon Apr 06 16:10:42.940867 2026] [:error] [pid 10280:tid 10290] [client 20.215.64.133:1945] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adNqgl8QUJkf8g-BFfOA0gAAAcc"]
[Mon Apr 06 16:10:43.145982 2026] [:error] [pid 35688:tid 35763] [client 20.215.64.133:1993] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "adNqg-Z85qg4jLsRpQxGhAAAAI0"]
[Mon Apr 06 16:10:43.464125 2026] [:error] [pid 35687:tid 35726] [client 20.215.64.133:1975] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adNqg53LtDozV0i8BispJwAAAEM"]
[Mon Apr 06 16:10:43.806864 2026] [:error] [pid 9442:tid 9445] [client 20.215.64.133:1958] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "adNqg0PsNnAJTnmz6sZWKgAAAQE"]
[Mon Apr 06 16:10:43.980805 2026] [:error] [pid 9442:tid 9464] [client 20.215.64.133:2009] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adNqg0PsNnAJTnmz6sZWLQAAARQ"]
[Mon Apr 06 16:10:44.394997 2026] [:error] [pid 38562:tid 38578] [client 20.215.64.133:1961] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "adNqhKeD6Ohe6wzRuy4QHgAAAU0"]
[Mon Apr 06 16:10:44.504525 2026] [:error] [pid 38562:tid 38577] [client 20.215.64.133:1952] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adNqhKeD6Ohe6wzRuy4QIQAAAUw"]
[Mon Apr 06 16:10:44.970602 2026] [:error] [pid 38562:tid 38573] [client 20.215.64.133:1978] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "adNqhKeD6Ohe6wzRuy4QJgAAAUg"]
[Mon Apr 06 16:10:45.049635 2026] [:error] [pid 38562:tid 38581] [client 20.215.64.133:1859] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adNqhaeD6Ohe6wzRuy4QKAAAAVA"]
[Mon Apr 06 16:10:45.569266 2026] [:error] [pid 38562:tid 38576] [client 20.215.64.133:1797] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adNqhaeD6Ohe6wzRuy4QMAAAAUs"]
[Mon Apr 06 16:10:45.620351 2026] [:error] [pid 35786:tid 35803] [client 20.215.64.133:2029] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adNqhWgkfCKTaLhwaKT3kQAAAMo"]
[Mon Apr 06 16:10:46.102188 2026] [:error] [pid 35687:tid 35736] [client 20.215.64.133:1962] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adNqhp3LtDozV0i8BispKwAAAE0"]
[Mon Apr 06 16:10:46.172090 2026] [:error] [pid 10280:tid 10298] [client 20.215.64.133:2031] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adNqhl8QUJkf8g-BFfOA1gAAAc8"]
[Mon Apr 06 16:10:46.630008 2026] [:error] [pid 35686:tid 35698] [client 20.215.64.133:1970] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adNqhsMKdea6oORd2fxQGAAAAAI"]
[Mon Apr 06 16:10:46.762644 2026] [:error] [pid 35687:tid 35743] [client 20.215.64.133:1949] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adNqhp3LtDozV0i8BispLgAAAFQ"]
[Mon Apr 06 16:10:47.212668 2026] [:error] [pid 10280:tid 10306] [client 20.215.64.133:1890] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adNqh18QUJkf8g-BFfOA1wAAAdc"]
[Mon Apr 06 16:10:47.375543 2026] [:error] [pid 10280:tid 10290] [client 20.215.64.133:1927] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alexantr/filemanager.php"] [unique_id "adNqh18QUJkf8g-BFfOA2QAAAcc"]
[Mon Apr 06 16:10:47.781939 2026] [:error] [pid 35687:tid 35740] [client 20.215.64.133:1981] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "adNqh53LtDozV0i8BispLwAAAFE"]
[Mon Apr 06 16:10:47.930092 2026] [:error] [pid 35686:tid 35709] [client 20.215.64.133:1866] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adNqh8MKdea6oORd2fxQHAAAAA0"]
[Mon Apr 06 16:10:48.314361 2026] [:error] [pid 35687:tid 35730] [client 20.215.64.133:1856] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "adNqiJ3LtDozV0i8BispMgAAAEc"]
[Mon Apr 06 16:10:48.484447 2026] [:error] [pid 35687:tid 35736] [client 20.215.64.133:1895] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adNqiJ3LtDozV0i8BispNAAAAE0"]
[Mon Apr 06 16:10:48.917028 2026] [:error] [pid 35687:tid 35748] [client 20.215.64.133:1985] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "adNqiJ3LtDozV0i8BispOAAAAFg"]
[Mon Apr 06 16:10:49.096775 2026] [:error] [pid 9413:tid 9420] [client 20.215.64.133:2033] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adNqiXllvEK3chn01wGXaQAAAYU"]
[Mon Apr 06 16:10:49.436810 2026] [:error] [pid 35686:tid 35700] [client 20.215.64.133:1794] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "adNqicMKdea6oORd2fxQIgAAAAQ"]
[Mon Apr 06 16:10:49.616482 2026] [:error] [pid 35686:tid 35702] [client 20.215.64.133:1873] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php/wp-content/plugins/wp-conflg.php"] [unique_id "adNqicMKdea6oORd2fxQJQAAAAY"]
[Mon Apr 06 16:10:49.960482 2026] [:error] [pid 9413:tid 9418] [client 20.215.64.133:2015] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "adNqiXllvEK3chn01wGXbAAAAYM"]
[Mon Apr 06 16:10:50.212365 2026] [:error] [pid 35786:tid 35809] [client 20.215.64.133:2043] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adNqimgkfCKTaLhwaKT3lQAAANA"]
[Mon Apr 06 16:10:50.474485 2026] [:error] [pid 10280:tid 10297] [client 20.215.64.133:2036] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "adNqil8QUJkf8g-BFfOA5AAAAc4"]
[Mon Apr 06 16:10:50.808953 2026] [:error] [pid 35686:tid 35714] [client 20.215.64.133:1926] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "adNqisMKdea6oORd2fxQKgAAABI"]
[Mon Apr 06 16:10:51.099965 2026] [:error] [pid 35687:tid 35732] [client 20.215.64.133:2013] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "adNqi53LtDozV0i8BispPwAAAEk"]
[Mon Apr 06 16:10:51.330053 2026] [:error] [pid 35686:tid 35709] [client 20.215.64.133:1931] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "adNqi8MKdea6oORd2fxQLgAAAA0"]
[Mon Apr 06 16:10:51.636057 2026] [:error] [pid 38562:tid 38570] [client 20.215.64.133:1865] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "adNqi6eD6Ohe6wzRuy4QTQAAAUU"]
[Mon Apr 06 16:10:51.856982 2026] [:error] [pid 35686:tid 35713] [client 20.215.64.133:1947] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "adNqi8MKdea6oORd2fxQMgAAABE"]
[Mon Apr 06 16:10:52.151418 2026] [:error] [pid 35786:tid 35814] [client 20.215.64.133:1882] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "adNqjGgkfCKTaLhwaKT3lgAAANU"]
[Mon Apr 06 16:10:52.373743 2026] [:error] [pid 35686:tid 35696] [client 20.215.64.133:2039] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "adNqjMMKdea6oORd2fxQNQAAAAA"]
[Mon Apr 06 16:10:52.664546 2026] [:error] [pid 38562:tid 38566] [client 20.215.64.133:1891] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "adNqjKeD6Ohe6wzRuy4QUQAAAUE"]
[Mon Apr 06 16:10:52.934161 2026] [:error] [pid 35687:tid 35743] [client 20.215.64.133:1989] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "adNqjJ3LtDozV0i8BispRAAAAFQ"]
[Mon Apr 06 16:10:53.190011 2026] [:error] [pid 35686:tid 35710] [client 20.215.64.133:1977] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "adNqjcMKdea6oORd2fxQNwAAAA4"]
[Mon Apr 06 16:10:53.454541 2026] [:error] [pid 35686:tid 35705] [client 20.215.64.133:1966] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "adNqjcMKdea6oORd2fxQOgAAAAk"]
[Mon Apr 06 16:10:53.708250 2026] [:error] [pid 38562:tid 38587] [client 20.215.64.133:2026] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "adNqjaeD6Ohe6wzRuy4QVwAAAVY"]
[Mon Apr 06 16:10:53.965676 2026] [:error] [pid 38562:tid 38584] [client 20.215.64.133:1986] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "adNqjaeD6Ohe6wzRuy4QWAAAAVM"]
[Mon Apr 06 16:10:54.227899 2026] [:error] [pid 35686:tid 35707] [client 20.215.64.133:1932] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php/wp-admin/js/index.php"] [unique_id "adNqjsMKdea6oORd2fxQPwAAAAs"]
[Mon Apr 06 16:10:54.508551 2026] [:error] [pid 38562:tid 38575] [client 20.215.64.133:1960] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/content.php"] [unique_id "adNqjqeD6Ohe6wzRuy4QWgAAAUo"]
[Mon Apr 06 16:10:54.796007 2026] [:error] [pid 9442:tid 9468] [client 20.215.64.133:1950] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php/wp-admin/js/index.php"] [unique_id "adNqjkPsNnAJTnmz6sZWPQAAARg"]
[Mon Apr 06 16:10:55.085130 2026] [:error] [pid 10280:tid 10285] [client 20.215.64.133:1946] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "adNqj18QUJkf8g-BFfOA5wAAAcI"]
[Mon Apr 06 16:10:55.309829 2026] [:error] [pid 35686:tid 35718] [client 20.215.64.133:2003] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php/wp-admin/js/index.php"] [unique_id "adNqj8MKdea6oORd2fxQQwAAABY"]
[Mon Apr 06 16:10:55.635602 2026] [:error] [pid 35687:tid 35738] [client 20.215.64.133:1980] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "adNqj53LtDozV0i8BispSgAAAE8"]
[Mon Apr 06 16:10:55.843352 2026] [:error] [pid 38562:tid 38572] [client 20.215.64.133:1915] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php/wp-admin/js/index.php"] [unique_id "adNqj6eD6Ohe6wzRuy4QXQAAAUc"]
[Mon Apr 06 16:10:56.167181 2026] [:error] [pid 38562:tid 38586] [client 20.215.64.133:1906] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "adNqkKeD6Ohe6wzRuy4QXgAAAVU"]
[Mon Apr 06 16:10:56.361426 2026] [:error] [pid 38562:tid 38566] [client 20.215.64.133:1795] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "adNqkKeD6Ohe6wzRuy4QXwAAAUE"]
[Mon Apr 06 16:10:56.695553 2026] [:error] [pid 35686:tid 35719] [client 20.215.64.133:2007] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "adNqkMMKdea6oORd2fxQSQAAABc"]
[Mon Apr 06 16:10:56.889034 2026] [:error] [pid 38562:tid 38573] [client 20.215.64.133:1963] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adNqkKeD6Ohe6wzRuy4QYAAAAUg"]
[Mon Apr 06 16:10:57.235145 2026] [:error] [pid 35687:tid 35725] [client 20.215.64.133:1913] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php/wp-admin/js/index.php"] [unique_id "adNqkZ3LtDozV0i8BispTAAAAEI"]
[Mon Apr 06 16:10:57.414532 2026] [:error] [pid 35687:tid 35732] [client 20.215.64.133:2010] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "adNqkZ3LtDozV0i8BispTQAAAEk"]
[Mon Apr 06 16:10:57.787686 2026] [:error] [pid 35687:tid 35730] [client 20.215.64.133:1935] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php/wp-admin/js/index.php"] [unique_id "adNqkZ3LtDozV0i8BispTwAAAEc"]
[Mon Apr 06 16:10:57.936084 2026] [:error] [pid 35687:tid 35736] [client 20.215.64.133:1983] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adNqkZ3LtDozV0i8BispUAAAAE0"]
[Mon Apr 06 16:10:58.369910 2026] [:error] [pid 35687:tid 35743] [client 20.215.64.133:1941] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php/wp-admin/js/index.php"] [unique_id "adNqkp3LtDozV0i8BispUgAAAFQ"]
[Mon Apr 06 16:10:58.467842 2026] [:error] [pid 9413:tid 9431] [client 20.215.64.133:1871] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adNqknllvEK3chn01wGXdgAAAZA"]
[Mon Apr 06 16:10:58.986592 2026] [:error] [pid 35687:tid 35724] [client 20.215.64.133:1922] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php/wp-admin/js/index.php"] [unique_id "adNqkp3LtDozV0i8BispVAAAAEE"]
[Mon Apr 06 16:10:59.000382 2026] [:error] [pid 35686:tid 35718] [client 20.215.64.133:1867] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adNqksMKdea6oORd2fxQVAAAABY"]
[Mon Apr 06 16:10:59.533710 2026] [:error] [pid 9413:tid 9418] [client 20.215.64.133:1939] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "adNqk3llvEK3chn01wGXeAAAAYM"]
[Mon Apr 06 16:10:59.566878 2026] [:error] [pid 35686:tid 35710] [client 20.215.64.133:1884] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adNqk8MKdea6oORd2fxQWAAAAA4"]
[Mon Apr 06 16:11:00.105339 2026] [:error] [pid 35686:tid 35696] [client 20.215.64.133:1885] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adNqlMMKdea6oORd2fxQXAAAAAA"]
[Mon Apr 06 16:11:00.161757 2026] [:error] [pid 35686:tid 35703] [client 20.215.64.133:1917] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adNqlMMKdea6oORd2fxQXgAAAAc"]
[Mon Apr 06 16:11:00.655300 2026] [:error] [pid 35686:tid 35718] [client 20.215.64.133:1811] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adNqlMMKdea6oORd2fxQYQAAABY"]
[Mon Apr 06 16:11:00.688961 2026] [:error] [pid 35686:tid 35708] [client 20.215.64.133:2025] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "adNqlMMKdea6oORd2fxQYgAAAAw"]
[Mon Apr 06 16:11:01.181926 2026] [:error] [pid 38562:tid 38572] [client 20.215.64.133:1900] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adNqlaeD6Ohe6wzRuy4QagAAAUc"]
[Mon Apr 06 16:11:01.251771 2026] [:error] [pid 38562:tid 38566] [client 20.215.64.133:1879] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adNqlaeD6Ohe6wzRuy4QbAAAAUE"]
[Mon Apr 06 16:11:01.722628 2026] [:error] [pid 35686:tid 35704] [client 20.215.64.133:1863] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adNqlcMKdea6oORd2fxQZwAAAAg"]
[Mon Apr 06 16:11:01.783130 2026] [:error] [pid 35687:tid 35737] [client 20.215.64.133:1887] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adNqlZ3LtDozV0i8BispWAAAAE4"]
[Mon Apr 06 16:11:02.275646 2026] [:error] [pid 35686:tid 35714] [client 20.215.64.133:1944] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adNqlsMKdea6oORd2fxQaQAAABI"]
[Mon Apr 06 16:11:02.317751 2026] [:error] [pid 38562:tid 38578] [client 20.215.64.133:1956] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adNqlqeD6Ohe6wzRuy4QcgAAAU0"]
[Mon Apr 06 16:11:02.821478 2026] [:error] [pid 35686:tid 35716] [client 20.215.64.133:1901] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adNqlsMKdea6oORd2fxQbgAAABQ"]
[Mon Apr 06 16:11:02.940079 2026] [:error] [pid 35686:tid 35712] [client 20.215.64.133:1868] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "adNqlsMKdea6oORd2fxQbwAAABA"]
[Mon Apr 06 16:11:03.338461 2026] [:error] [pid 38562:tid 38577] [client 20.215.64.133:2014] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adNql6eD6Ohe6wzRuy4QdwAAAUw"]
[Mon Apr 06 16:11:03.573093 2026] [:error] [pid 9413:tid 9429] [client 20.215.64.133:1800] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adNql3llvEK3chn01wGXfgAAAY4"]
[Mon Apr 06 16:11:03.865329 2026] [:error] [pid 9442:tid 9448] [client 20.215.64.133:1898] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adNql0PsNnAJTnmz6sZWRAAAAQQ"]
[Mon Apr 06 16:11:04.426200 2026] [:error] [pid 9442:tid 9467] [client 20.215.64.133:2037] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adNqmEPsNnAJTnmz6sZWRgAAARc"]
[Mon Apr 06 16:11:04.456122 2026] [:error] [pid 38562:tid 38574] [client 20.215.64.133:1969] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adNqmKeD6Ohe6wzRuy4QfAAAAUk"]
[Mon Apr 06 16:11:05.057032 2026] [:error] [pid 10280:tid 10295] [client 20.215.64.133:1998] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adNqmV8QUJkf8g-BFfOA_AAAAcw"]
[Mon Apr 06 16:11:05.125840 2026] [:error] [pid 35687:tid 35731] [client 20.215.64.133:1896] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adNqmZ3LtDozV0i8BispXAAAAEg"]
[Mon Apr 06 16:11:05.683469 2026] [:error] [pid 35686:tid 35701] [client 20.215.64.133:1987] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adNqmcMKdea6oORd2fxQfAAAAAU"]
[Mon Apr 06 16:11:05.720581 2026] [:error] [pid 35688:tid 35759] [client 20.215.64.133:1793] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adNqmeZ85qg4jLsRpQxGlwAAAIk"]
[Mon Apr 06 16:11:06.207709 2026] [:error] [pid 9442:tid 9464] [client 20.215.64.133:1874] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adNqmkPsNnAJTnmz6sZWSAAAARQ"]
[Mon Apr 06 16:11:06.656192 2026] [:error] [pid 38562:tid 38575] [client 20.215.64.133:1902] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adNqmqeD6Ohe6wzRuy4QhAAAAUo"]
[Mon Apr 06 16:11:06.796816 2026] [:error] [pid 38562:tid 38576] [client 20.215.64.133:1877] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "adNqmqeD6Ohe6wzRuy4QhQAAAUs"]
[Mon Apr 06 16:11:07.316928 2026] [:error] [pid 38562:tid 38571] [client 20.215.64.133:1826] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adNqm6eD6Ohe6wzRuy4QjQAAAUY"]
[Mon Apr 06 16:11:07.328207 2026] [:error] [pid 35687:tid 35742] [client 20.215.64.133:1903] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/alfa-rex.php"] [unique_id "adNqm53LtDozV0i8BispYgAAAFM"]
[Mon Apr 06 16:11:07.877856 2026] [:error] [pid 10280:tid 10304] [client 20.215.64.133:1883] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adNqm18QUJkf8g-BFfOBBgAAAdU"]
[Mon Apr 06 16:11:07.888357 2026] [:error] [pid 38562:tid 38589] [client 20.215.64.133:1893] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adNqm6eD6Ohe6wzRuy4QjwAAAVg"]
[Mon Apr 06 16:11:08.515811 2026] [:error] [pid 35686:tid 35707] [client 20.215.64.133:2045] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adNqnMMKdea6oORd2fxQgwAAAAs"]
[Mon Apr 06 16:11:08.794227 2026] [:error] [pid 38562:tid 38582] [client 20.215.64.133:1831] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors.php"] [unique_id "adNqnKeD6Ohe6wzRuy4QkQAAAVE"]
[Mon Apr 06 16:11:09.213485 2026] [:error] [pid 9442:tid 9444] [client 20.215.64.133:1914] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adNqnUPsNnAJTnmz6sZWTgAAAQA"]
[Mon Apr 06 16:11:09.754976 2026] [:error] [pid 35686:tid 35707] [client 20.215.64.133:1862] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adNqncMKdea6oORd2fxQjgAAAAs"]
[Mon Apr 06 16:11:10.243456 2026] [:error] [pid 35687:tid 35743] [client 20.215.64.133:1808] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adNqnp3LtDozV0i8BispbQAAAFQ"]
[Mon Apr 06 16:11:10.786249 2026] [:error] [pid 35686:tid 35697] [client 20.215.64.133:1991] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adNqnsMKdea6oORd2fxQmQAAAAE"]
[Mon Apr 06 16:11:11.004330 2026] [:error] [pid 38562:tid 38587] [client 20.215.64.133:1892] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adNqn6eD6Ohe6wzRuy4QnwAAAVY"]
[Mon Apr 06 16:11:11.494103 2026] [:error] [pid 38562:tid 38576] [client 20.215.64.133:1872] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adNqn6eD6Ohe6wzRuy4QqQAAAUs"]
[Mon Apr 06 16:11:11.541761 2026] [:error] [pid 35686:tid 35715] [client 20.215.64.133:1924] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adNqn8MKdea6oORd2fxQoAAAABM"]
[Mon Apr 06 16:11:12.114981 2026] [:error] [pid 10280:tid 10285] [client 20.215.64.133:1953] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adNqoF8QUJkf8g-BFfOBCwAAAcI"]
[Mon Apr 06 16:11:12.229985 2026] [:error] [pid 35688:tid 35767] [client 20.215.64.133:1860] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adNqoOZ85qg4jLsRpQxGoAAAAJE"]
[Mon Apr 06 16:11:12.749133 2026] [:error] [pid 35687:tid 35740] [client 20.215.64.133:1834] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "adNqoJ3LtDozV0i8BispdAAAAFE"]
[Mon Apr 06 16:11:12.807086 2026] [:error] [pid 35688:tid 35764] [client 20.215.64.133:1905] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adNqoOZ85qg4jLsRpQxGowAAAI4"]
[Mon Apr 06 16:11:13.429734 2026] [:error] [pid 35786:tid 35794] [client 20.215.64.133:1805] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adNqoWgkfCKTaLhwaKT3pwAAAME"]
[Mon Apr 06 16:11:13.578680 2026] [:error] [pid 38562:tid 38578] [client 20.215.64.133:1982] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "adNqoaeD6Ohe6wzRuy4QugAAAU0"]
[Mon Apr 06 16:11:14.436612 2026] [:error] [pid 35687:tid 35736] [client 20.215.64.133:1904] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/alfa-rex.php"] [unique_id "adNqop3LtDozV0i8BispdgAAAE0"]
[Mon Apr 06 16:11:15.110457 2026] [:error] [pid 9442:tid 9454] [client 20.215.64.133:1933] [client 20.215.64.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adNqo0PsNnAJTnmz6sZWXgAAAQo"]
[Mon Apr 06 16:11:15.699934 2026] [:error] [pid 38562:tid 38578] [client 20.215.64.133:1861] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adNqo6eD6Ohe6wzRuy4QxAAAAU0"]
[Mon Apr 06 16:11:16.432452 2026] [:error] [pid 35686:tid 35714] [client 20.215.64.133:1959] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adNqpMMKdea6oORd2fxQtQAAABI"]
[Mon Apr 06 16:11:17.225136 2026] [:error] [pid 38562:tid 38575] [client 20.215.64.133:1833] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adNqpaeD6Ohe6wzRuy4QxwAAAUo"]
[Mon Apr 06 16:11:17.893460 2026] [:error] [pid 38562:tid 38580] [client 20.215.64.133:2008] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adNqpaeD6Ohe6wzRuy4QywAAAU8"]
[Mon Apr 06 16:11:18.481456 2026] [:error] [pid 10280:tid 10307] [client 20.215.64.133:1806] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adNqpl8QUJkf8g-BFfOBFQAAAdg"]
[Mon Apr 06 16:11:19.079828 2026] [:error] [pid 35688:tid 35760] [client 20.215.64.133:1809] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adNqp-Z85qg4jLsRpQxGpwAAAIo"]
[Mon Apr 06 16:11:19.739767 2026] [:error] [pid 10280:tid 10286] [client 20.215.64.133:1819] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adNqp18QUJkf8g-BFfOBGQAAAcM"]
[Mon Apr 06 16:11:20.407163 2026] [:error] [pid 35686:tid 35696] [client 20.215.64.133:2029] [client 20.215.64.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "adNqqMMKdea6oORd2fxQxgAAAAA"]
[Tue Apr 07 01:38:22.561213 2026] [proxy_fcgi:error] [pid 55003:tid 55016] [client 103.4.122.14:45980] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Apr 07 01:38:29.826637 2026] [proxy_fcgi:error] [pid 55003:tid 55025] [client 103.4.122.14:46108] AH01071: Got error 'PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140PHP message: PHP Notice:  Undefined index: wp_update_data in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Tue Apr 07 10:57:02.148832 2026] [:error] [pid 37719:tid 37736] [client 217.216.72.68:56038] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "adRyfk09Xv52u2xXGLDvWAAAAM4"]
[Tue Apr 07 10:57:02.423005 2026] [:error] [pid 12948:tid 12974] [client 217.216.72.68:51700] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/"] [unique_id "adRyfsbeSPAN8LvMqsY2_QAAARc"]
[Tue Apr 07 10:57:12.637511 2026] [:error] [pid 37719:tid 37738] [client 217.216.72.68:54998] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "adRyiE09Xv52u2xXGLDvowAAANA"]
[Tue Apr 07 10:57:12.744591 2026] [:error] [pid 12948:tid 12955] [client 217.216.72.68:55735] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adRyiMbeSPAN8LvMqsY3OwAAAQQ"]
[Tue Apr 07 10:57:12.850118 2026] [:error] [pid 37719:tid 37737] [client 217.216.72.68:55833] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "adRyiE09Xv52u2xXGLDvpwAAAM8"]
[Tue Apr 07 10:57:26.137587 2026] [:error] [pid 12948:tid 12969] [client 217.216.72.68:56026] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/readme.html"] [unique_id "adRylsbeSPAN8LvMqsY3kwAAARI"]
[Tue Apr 07 10:57:26.826025 2026] [:error] [pid 12948:tid 12967] [client 217.216.72.68:56023] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "adRylsbeSPAN8LvMqsY3nAAAARA"]
[Tue Apr 07 11:04:49.424120 2026] [:error] [pid 37598:tid 37685] [client 194.26.192.92:63205] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adR0Ue9g7q_cV2WhPawY-wAAAJg"]
[Tue Apr 07 11:04:49.909724 2026] [:error] [pid 37598:tid 37665] [client 194.26.192.92:63314] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adR0Ue9g7q_cV2WhPawY_wAAAIQ"]
[Tue Apr 07 11:04:50.397808 2026] [:error] [pid 59804:tid 59813] [client 194.26.192.92:63464] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adR0UnYVIXiPh5_eJTnuxQAAAgc"]
[Tue Apr 07 11:04:52.759159 2026] [:error] [pid 59804:tid 59828] [client 194.26.192.92:63998] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "adR0VHYVIXiPh5_eJTnu0QAAAhY"]
[Tue Apr 07 14:19:19.171698 2026] [:error] [pid 59804:tid 59815] [client 159.223.184.140:45780] [client 159.223.184.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "adSh53YVIXiPh5_eJTkpvQAAAgk"]
[Tue Apr 07 17:26:29.260225 2026] [:error] [pid 37719:tid 37732] [client 159.89.55.133:60166] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "adTNxU09Xv52u2xXGLCmCQAAAMo"]
[Tue Apr 07 22:25:26.172313 2026] [:error] [pid 37598:tid 37665] [client 94.130.8.54:37954] [client 94.130.8.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "adUT1u9g7q_cV2WhPazXAAAAAIQ"]
[Tue Apr 07 23:18:19.030439 2026] [:error] [pid 59551:tid 59569] [client 212.70.4.247:40185] [client 212.70.4.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.70.4.247, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "adUgO17LN7Ubyqs-sVs_hgAAAZA"]
[Tue Apr 07 23:18:19.041014 2026] [:error] [pid 59551:tid 59575] [client 212.70.4.247:45863] [client 212.70.4.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.70.4.247, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "adUgO17LN7Ubyqs-sVs_iAAAAZY"]
[Tue Apr 07 23:18:19.041044 2026] [:error] [pid 59551:tid 59565] [client 212.70.4.247:40925] [client 212.70.4.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.70.4.247, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "adUgO17LN7Ubyqs-sVs_hwAAAYw"]
[Tue Apr 07 23:18:19.045544 2026] [:error] [pid 59551:tid 59566] [client 212.70.4.247:40639] [client 212.70.4.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.70.4.247, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "adUgO17LN7Ubyqs-sVs_iQAAAY0"]
[Wed Apr 08 01:55:44.912996 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:14097] [client 20.234.13.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "adVFICboIFdw6tlcN13uXgAAAQk"]
[Wed Apr 08 01:55:53.215856 2026] [:error] [pid 5246:tid 5255] [client 20.234.13.12:14092] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "adVFKRLpySxaVC8kLEZx6wAAAMU"]
[Wed Apr 08 01:55:53.732075 2026] [:error] [pid 4840:tid 5170] [client 20.234.13.12:14196] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "adVFKRsUwg2fEe9p9LTHEAAAAAo"]
[Wed Apr 08 01:55:54.235965 2026] [:error] [pid 5246:tid 5250] [client 20.234.13.12:14102] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "adVFKhLpySxaVC8kLEZx8gAAAMA"]
[Wed Apr 08 01:55:54.737150 2026] [:error] [pid 4860:tid 5226] [client 20.234.13.12:14150] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wdone1.php"] [unique_id "adVFKgn6KmY32L3WSeHHmgAAAIs"]
[Wed Apr 08 01:55:55.237908 2026] [:error] [pid 4840:tid 5179] [client 20.234.13.12:14185] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adVFKxsUwg2fEe9p9LTHFQAAABM"]
[Wed Apr 08 01:55:55.740802 2026] [:error] [pid 4842:tid 5212] [client 20.234.13.12:14165] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adVFK5dncJIGbBiMOXTH2AAAAFg"]
[Wed Apr 08 01:55:56.243963 2026] [:error] [pid 4860:tid 5238] [client 20.234.13.12:14085] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adVFLAn6KmY32L3WSeHHnQAAAJc"]
[Wed Apr 08 01:55:56.755273 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:14181] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adVFLCboIFdw6tlcN13ucgAAAQo"]
[Wed Apr 08 01:55:57.265962 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:14106] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adVFLSboIFdw6tlcN13ueAAAAQM"]
[Wed Apr 08 01:55:57.776899 2026] [:error] [pid 5246:tid 5274] [client 20.234.13.12:14108] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adVFLRLpySxaVC8kLEZx_wAAANg"]
[Wed Apr 08 01:55:58.282099 2026] [:error] [pid 4840:tid 5184] [client 20.234.13.12:14204] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adVFLhsUwg2fEe9p9LTHHQAAABg"]
[Wed Apr 08 01:55:58.820714 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:14083] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adVFLs9wWR0DHTrNMujkMwAAAUk"]
[Wed Apr 08 01:55:59.322488 2026] [:error] [pid 303:tid 324] [client 20.234.13.12:14144] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "adVFL89wWR0DHTrNMujkNwAAAVI"]
[Wed Apr 08 01:55:59.875442 2026] [:error] [pid 4842:tid 5202] [client 20.234.13.12:14168] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "adVFL5dncJIGbBiMOXTH2QAAAE4"]
[Wed Apr 08 01:56:00.379585 2026] [:error] [pid 4860:tid 5216] [client 20.234.13.12:14187] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "adVFMAn6KmY32L3WSeHHoQAAAIE"]
[Wed Apr 08 01:56:00.879023 2026] [:error] [pid 4840:tid 5163] [client 20.234.13.12:14161] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awh.php"] [unique_id "adVFMBsUwg2fEe9p9LTHJgAAAAM"]
[Wed Apr 08 01:56:01.379943 2026] [:error] [pid 5337:tid 5374] [client 20.234.13.12:14197] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aee.php"] [unique_id "adVFMSboIFdw6tlcN13ugQAAARA"]
[Wed Apr 08 01:56:01.880097 2026] [:error] [pid 5337:tid 5381] [client 20.234.13.12:14151] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aee.php"] [unique_id "adVFMSboIFdw6tlcN13uhQAAARc"]
[Wed Apr 08 01:56:02.383819 2026] [:error] [pid 4860:tid 5229] [client 20.234.13.12:14193] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aee.php"] [unique_id "adVFMgn6KmY32L3WSeHHpAAAAI4"]
[Wed Apr 08 01:56:02.892394 2026] [:error] [pid 4860:tid 5232] [client 20.234.13.12:14167] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aee.php"] [unique_id "adVFMgn6KmY32L3WSeHHpwAAAJE"]
[Wed Apr 08 01:56:03.403725 2026] [:error] [pid 303:tid 324] [client 20.234.13.12:14148] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adVFM89wWR0DHTrNMujkQgAAAVI"]
[Wed Apr 08 01:56:03.905825 2026] [:error] [pid 4842:tid 5209] [client 20.234.13.12:14156] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adVFM5dncJIGbBiMOXTH3AAAAFU"]
[Wed Apr 08 01:56:04.405532 2026] [:error] [pid 4860:tid 5235] [client 20.234.13.12:14143] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adVFNAn6KmY32L3WSeHHqgAAAJQ"]
[Wed Apr 08 01:56:04.929623 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:14182] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adVFNCboIFdw6tlcN13ujwAAAQo"]
[Wed Apr 08 01:56:05.436162 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:14194] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ruabjw00.php"] [unique_id "adVFNSboIFdw6tlcN13ulQAAAQ0"]
[Wed Apr 08 01:56:05.968984 2026] [:error] [pid 4842:tid 5198] [client 20.234.13.12:14172] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ruabjw00.php"] [unique_id "adVFNZdncJIGbBiMOXTH4QAAAEo"]
[Wed Apr 08 01:56:06.471831 2026] [:error] [pid 5337:tid 5373] [client 20.234.13.12:14179] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ruabjw00.php"] [unique_id "adVFNiboIFdw6tlcN13umAAAAQ8"]
[Wed Apr 08 01:56:07.011111 2026] [:error] [pid 4860:tid 5220] [client 20.234.13.12:14100] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ruabjw00.php"] [unique_id "adVFNwn6KmY32L3WSeHHrAAAAIU"]
[Wed Apr 08 01:56:07.516422 2026] [:error] [pid 5337:tid 5378] [client 20.234.13.12:7135] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adVFNyboIFdw6tlcN13umgAAARQ"]
[Wed Apr 08 01:56:08.079523 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:14110] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adVFOCboIFdw6tlcN13unAAAAQo"]
[Wed Apr 08 01:56:08.582916 2026] [:error] [pid 5337:tid 5376] [client 20.234.13.12:14157] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adVFOCboIFdw6tlcN13unwAAARI"]
[Wed Apr 08 01:56:09.131198 2026] [:error] [pid 4860:tid 5221] [client 20.234.13.12:14107] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adVFOQn6KmY32L3WSeHHsQAAAIY"]
[Wed Apr 08 01:56:09.632979 2026] [:error] [pid 5246:tid 5252] [client 20.234.13.12:14200] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webx.php"] [unique_id "adVFORLpySxaVC8kLEZyHgAAAMI"]
[Wed Apr 08 01:56:10.139154 2026] [:error] [pid 303:tid 328] [client 20.234.13.12:14145] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webx.php"] [unique_id "adVFOs9wWR0DHTrNMujkTwAAAVY"]
[Wed Apr 08 01:56:10.646037 2026] [:error] [pid 303:tid 307] [client 20.234.13.12:14171] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webx.php"] [unique_id "adVFOs9wWR0DHTrNMujkUgAAAUE"]
[Wed Apr 08 01:56:11.148301 2026] [:error] [pid 4842:tid 5210] [client 20.234.13.12:14163] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webx.php"] [unique_id "adVFO5dncJIGbBiMOXTH7AAAAFY"]
[Wed Apr 08 01:56:11.653383 2026] [:error] [pid 5337:tid 5362] [client 20.234.13.12:14111] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "adVFOyboIFdw6tlcN13uowAAAQQ"]
[Wed Apr 08 01:56:12.156775 2026] [:error] [pid 4842:tid 5190] [client 20.234.13.12:14183] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "adVFPJdncJIGbBiMOXTH7QAAAEI"]
[Wed Apr 08 01:56:12.658421 2026] [:error] [pid 4860:tid 5223] [client 20.234.13.12:14203] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "adVFPAn6KmY32L3WSeHHuAAAAIg"]
[Wed Apr 08 01:56:13.161266 2026] [:error] [pid 303:tid 312] [client 20.234.13.12:14129] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "adVFPc9wWR0DHTrNMujkWQAAAUY"]
[Wed Apr 08 01:56:13.666466 2026] [:error] [pid 4860:tid 5236] [client 20.234.13.12:7158] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "adVFPQn6KmY32L3WSeHHvQAAAJU"]
[Wed Apr 08 01:56:14.168406 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:14147] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "adVFPiboIFdw6tlcN13uqgAAAQc"]
[Wed Apr 08 01:56:14.690367 2026] [:error] [pid 4860:tid 5227] [client 20.234.13.12:14082] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "adVFPgn6KmY32L3WSeHHvwAAAIw"]
[Wed Apr 08 01:56:15.210835 2026] [:error] [pid 4840:tid 5164] [client 20.234.13.12:14166] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-22.php"] [unique_id "adVFPxsUwg2fEe9p9LTHMgAAAAQ"]
[Wed Apr 08 01:56:15.733578 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:14199] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/villain.php"] [unique_id "adVFPyboIFdw6tlcN13urgAAARg"]
[Wed Apr 08 01:56:16.240581 2026] [:error] [pid 5337:tid 5363] [client 20.234.13.12:14081] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/villain.php"] [unique_id "adVFQCboIFdw6tlcN13usQAAAQU"]
[Wed Apr 08 01:56:16.800448 2026] [:error] [pid 303:tid 318] [client 20.234.13.12:14099] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/villain.php"] [unique_id "adVFQM9wWR0DHTrNMujkYQAAAUw"]
[Wed Apr 08 01:56:17.303680 2026] [:error] [pid 303:tid 319] [client 20.234.13.12:14146] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/villain.php"] [unique_id "adVFQc9wWR0DHTrNMujkYwAAAU0"]
[Wed Apr 08 01:56:17.851530 2026] [:error] [pid 303:tid 312] [client 20.234.13.12:14160] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-db.php"] [unique_id "adVFQc9wWR0DHTrNMujkZAAAAUY"]
[Wed Apr 08 01:56:18.357882 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:7119] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-db.php"] [unique_id "adVFQs9wWR0DHTrNMujkaAAAAUk"]
[Wed Apr 08 01:56:18.903377 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:7107] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-db.php"] [unique_id "adVFQiboIFdw6tlcN13uuwAAAQ0"]
[Wed Apr 08 01:56:19.408958 2026] [:error] [pid 5246:tid 5272] [client 20.234.13.12:14149] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-db.php"] [unique_id "adVFQxLpySxaVC8kLEZyQAAAANY"]
[Wed Apr 08 01:56:19.913728 2026] [:error] [pid 303:tid 317] [client 20.234.13.12:14104] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/red.php"] [unique_id "adVFQ89wWR0DHTrNMujkbgAAAUs"]
[Wed Apr 08 01:56:20.423471 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:14176] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/red.php"] [unique_id "adVFRCboIFdw6tlcN13uvwAAAQo"]
[Wed Apr 08 01:56:20.923460 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:14198] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/red.php"] [unique_id "adVFRCboIFdw6tlcN13uwAAAAQs"]
[Wed Apr 08 01:56:21.425243 2026] [:error] [pid 5246:tid 5256] [client 20.234.13.12:14136] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/red.php"] [unique_id "adVFRRLpySxaVC8kLEZyRgAAAMY"]
[Wed Apr 08 01:56:21.930247 2026] [:error] [pid 5246:tid 5266] [client 20.234.13.12:14090] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "adVFRRLpySxaVC8kLEZySwAAANA"]
[Wed Apr 08 01:56:22.432039 2026] [:error] [pid 4840:tid 5172] [client 20.234.13.12:14091] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "adVFRhsUwg2fEe9p9LTHSQAAAAw"]
[Wed Apr 08 01:56:22.943796 2026] [:error] [pid 303:tid 318] [client 20.234.13.12:14141] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "adVFRs9wWR0DHTrNMujkewAAAUw"]
[Wed Apr 08 01:56:23.450923 2026] [:error] [pid 303:tid 327] [client 20.234.13.12:14178] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an7.php"] [unique_id "adVFR89wWR0DHTrNMujkfQAAAVU"]
[Wed Apr 08 01:56:23.951401 2026] [:error] [pid 303:tid 324] [client 20.234.13.12:14164] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "adVFR89wWR0DHTrNMujkgwAAAVI"]
[Wed Apr 08 01:56:24.454480 2026] [:error] [pid 4860:tid 5230] [client 20.234.13.12:14103] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "adVFSAn6KmY32L3WSeHHyAAAAI8"]
[Wed Apr 08 01:56:25.009200 2026] [:error] [pid 5337:tid 5370] [client 20.234.13.12:7124] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "adVFSSboIFdw6tlcN13uygAAAQw"]
[Wed Apr 08 01:56:25.510434 2026] [:error] [pid 4840:tid 5166] [client 20.234.13.12:14096] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ava.php"] [unique_id "adVFSRsUwg2fEe9p9LTHVAAAAAY"]
[Wed Apr 08 01:56:26.012120 2026] [:error] [pid 4860:tid 5236] [client 20.234.13.12:7120] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "adVFSgn6KmY32L3WSeHHzgAAAJU"]
[Wed Apr 08 01:56:26.516420 2026] [:error] [pid 303:tid 328] [client 20.234.13.12:14124] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "adVFSs9wWR0DHTrNMujkigAAAVY"]
[Wed Apr 08 01:56:27.024487 2026] [:error] [pid 303:tid 327] [client 20.234.13.12:7152] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "adVFS89wWR0DHTrNMujkiwAAAVU"]
[Wed Apr 08 01:56:27.533278 2026] [:error] [pid 4860:tid 5233] [client 20.234.13.12:14119] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uxijj.php"] [unique_id "adVFSwn6KmY32L3WSeHH0wAAAJI"]
[Wed Apr 08 01:56:28.033070 2026] [:error] [pid 4840:tid 5175] [client 20.234.13.12:14113] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs7.php"] [unique_id "adVFTBsUwg2fEe9p9LTHWwAAAA8"]
[Wed Apr 08 01:56:28.539797 2026] [:error] [pid 303:tid 320] [client 20.234.13.12:7133] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs7.php"] [unique_id "adVFTM9wWR0DHTrNMujkkwAAAU4"]
[Wed Apr 08 01:56:29.039022 2026] [:error] [pid 303:tid 319] [client 20.234.13.12:14114] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs7.php"] [unique_id "adVFTc9wWR0DHTrNMujklQAAAU0"]
[Wed Apr 08 01:56:29.540177 2026] [:error] [pid 303:tid 326] [client 20.234.13.12:14093] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs7.php"] [unique_id "adVFTc9wWR0DHTrNMujkmQAAAVQ"]
[Wed Apr 08 01:56:30.044655 2026] [:error] [pid 4840:tid 5167] [client 20.234.13.12:14084] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool2.php"] [unique_id "adVFThsUwg2fEe9p9LTHYQAAAAc"]
[Wed Apr 08 01:56:30.545977 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:14190] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool2.php"] [unique_id "adVFTiboIFdw6tlcN13u6AAAAQs"]
[Wed Apr 08 01:56:31.049406 2026] [:error] [pid 4840:tid 5184] [client 20.234.13.12:14095] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool2.php"] [unique_id "adVFTxsUwg2fEe9p9LTHZgAAABg"]
[Wed Apr 08 01:56:31.601195 2026] [:error] [pid 5337:tid 5370] [client 20.234.13.12:7121] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool2.php"] [unique_id "adVFTyboIFdw6tlcN13u8QAAAQw"]
[Wed Apr 08 01:56:32.102765 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:14127] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zjllx.php"] [unique_id "adVFUCboIFdw6tlcN13u8wAAARE"]
[Wed Apr 08 01:56:32.660542 2026] [:error] [pid 4840:tid 5174] [client 20.234.13.12:14101] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zjllx.php"] [unique_id "adVFUBsUwg2fEe9p9LTHawAAAA4"]
[Wed Apr 08 01:56:33.162788 2026] [:error] [pid 303:tid 321] [client 20.234.13.12:14169] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zjllx.php"] [unique_id "adVFUc9wWR0DHTrNMujkqQAAAU8"]
[Wed Apr 08 01:56:33.664767 2026] [:error] [pid 5246:tid 5270] [client 20.234.13.12:14121] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zjllx.php"] [unique_id "adVFURLpySxaVC8kLEZybAAAANQ"]
[Wed Apr 08 01:56:34.175567 2026] [:error] [pid 303:tid 327] [client 20.234.13.12:14154] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "adVFUs9wWR0DHTrNMujkqwAAAVU"]
[Wed Apr 08 01:56:34.687584 2026] [:error] [pid 5246:tid 5256] [client 20.234.13.12:7104] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "adVFUhLpySxaVC8kLEZycgAAAMY"]
[Wed Apr 08 01:56:35.189939 2026] [:error] [pid 4860:tid 5215] [client 20.234.13.12:14112] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "adVFUwn6KmY32L3WSeHH5AAAAIA"]
[Wed Apr 08 01:56:35.697292 2026] [:error] [pid 5246:tid 5260] [client 20.234.13.12:14177] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "adVFUxLpySxaVC8kLEZyegAAAMo"]
[Wed Apr 08 01:56:36.200087 2026] [:error] [pid 303:tid 320] [client 20.234.13.12:14130] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "adVFVM9wWR0DHTrNMujktAAAAU4"]
[Wed Apr 08 01:56:36.702376 2026] [:error] [pid 5246:tid 5265] [client 20.234.13.12:7144] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "adVFVBLpySxaVC8kLEZyfgAAAM8"]
[Wed Apr 08 01:56:37.215904 2026] [:error] [pid 4840:tid 5180] [client 20.234.13.12:14192] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "adVFVRsUwg2fEe9p9LTHcAAAABQ"]
[Wed Apr 08 01:56:37.725808 2026] [:error] [pid 4840:tid 5164] [client 20.234.13.12:7115] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "adVFVRsUwg2fEe9p9LTHcgAAAAQ"]
[Wed Apr 08 01:56:38.233115 2026] [:error] [pid 303:tid 328] [client 20.234.13.12:14138] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsheet1.php"] [unique_id "adVFVs9wWR0DHTrNMujktwAAAVY"]
[Wed Apr 08 01:56:38.772825 2026] [:error] [pid 4840:tid 5174] [client 20.234.13.12:14195] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsheet1.php"] [unique_id "adVFVhsUwg2fEe9p9LTHegAAAA4"]
[Wed Apr 08 01:56:39.277524 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:14089] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsheet1.php"] [unique_id "adVFVyboIFdw6tlcN13vAAAAAQs"]
[Wed Apr 08 01:56:39.829979 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:7138] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wsheet1.php"] [unique_id "adVFVyboIFdw6tlcN13vBgAAAQo"]
[Wed Apr 08 01:56:40.331096 2026] [:error] [pid 4860:tid 5220] [client 20.234.13.12:7127] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dbc.php"] [unique_id "adVFWAn6KmY32L3WSeHH6QAAAIU"]
[Wed Apr 08 01:56:40.828736 2026] [:error] [pid 5246:tid 5254] [client 20.234.13.12:7118] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dbc.php"] [unique_id "adVFWBLpySxaVC8kLEZyjwAAAMQ"]
[Wed Apr 08 01:56:41.329818 2026] [:error] [pid 5246:tid 5271] [client 20.234.13.12:7123] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dbc.php"] [unique_id "adVFWRLpySxaVC8kLEZykgAAANU"]
[Wed Apr 08 01:56:41.829667 2026] [:error] [pid 4840:tid 5164] [client 20.234.13.12:14188] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dbc.php"] [unique_id "adVFWRsUwg2fEe9p9LTHfgAAAAQ"]
[Wed Apr 08 01:56:42.334757 2026] [:error] [pid 5337:tid 5377] [client 20.234.13.12:7051] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adVFWiboIFdw6tlcN13vEwAAARM"]
[Wed Apr 08 01:56:42.835382 2026] [:error] [pid 4860:tid 5231] [client 20.234.13.12:14159] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adVFWgn6KmY32L3WSeHH6wAAAJA"]
[Wed Apr 08 01:56:43.336593 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:7042] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adVFWyboIFdw6tlcN13vFwAAAQk"]
[Wed Apr 08 01:56:43.836397 2026] [:error] [pid 5337:tid 5364] [client 20.234.13.12:14135] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adVFWyboIFdw6tlcN13vGgAAAQY"]
[Wed Apr 08 01:56:44.336657 2026] [:error] [pid 303:tid 313] [client 20.234.13.12:14170] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ukaa.php"] [unique_id "adVFXM9wWR0DHTrNMujkxAAAAUc"]
[Wed Apr 08 01:56:44.847349 2026] [:error] [pid 5246:tid 5257] [client 20.234.13.12:14133] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ukaa.php"] [unique_id "adVFXBLpySxaVC8kLEZyngAAAMc"]
[Wed Apr 08 01:56:45.366612 2026] [:error] [pid 4860:tid 5216] [client 20.234.13.12:7105] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ukaa.php"] [unique_id "adVFXQn6KmY32L3WSeHH7wAAAIE"]
[Wed Apr 08 01:56:45.867447 2026] [:error] [pid 4842:tid 5204] [client 20.234.13.12:14126] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ukaa.php"] [unique_id "adVFXZdncJIGbBiMOXTIBQAAAFA"]
[Wed Apr 08 01:56:46.373607 2026] [:error] [pid 4840:tid 5176] [client 20.234.13.12:7128] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "adVFXhsUwg2fEe9p9LTHggAAABA"]
[Wed Apr 08 01:56:46.886893 2026] [:error] [pid 303:tid 324] [client 20.234.13.12:7134] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "adVFXs9wWR0DHTrNMujk0AAAAVI"]
[Wed Apr 08 01:56:47.401542 2026] [:error] [pid 303:tid 307] [client 20.234.13.12:14109] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "adVFX89wWR0DHTrNMujk1AAAAUE"]
[Wed Apr 08 01:56:47.900620 2026] [:error] [pid 4842:tid 5189] [client 20.234.13.12:14128] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "adVFX5dncJIGbBiMOXTIBgAAAEE"]
[Wed Apr 08 01:56:48.403464 2026] [:error] [pid 5337:tid 5358] [client 20.234.13.12:14180] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adVFYCboIFdw6tlcN13vHgAAAQA"]
[Wed Apr 08 01:56:48.904413 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:14175] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adVFYCboIFdw6tlcN13vIQAAAQk"]
[Wed Apr 08 01:56:49.418435 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:7110] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adVFYSboIFdw6tlcN13vJAAAARU"]
[Wed Apr 08 01:56:49.924673 2026] [:error] [pid 5246:tid 5257] [client 20.234.13.12:14189] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adVFYRLpySxaVC8kLEZyrQAAAMc"]
[Wed Apr 08 01:56:50.440206 2026] [:error] [pid 4840:tid 5166] [client 20.234.13.12:14205] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "adVFYhsUwg2fEe9p9LTHhgAAAAY"]
[Wed Apr 08 01:56:50.946080 2026] [:error] [pid 4840:tid 5180] [client 20.234.13.12:14094] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "adVFYhsUwg2fEe9p9LTHhwAAABQ"]
[Wed Apr 08 01:57:36.791708 2026] [:error] [pid 4840:tid 5171] [client 20.234.13.12:7125] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kolda.php"] [unique_id "adVFkBsUwg2fEe9p9LTIFAAAAAs"]
[Wed Apr 08 01:57:37.301654 2026] [:error] [pid 5337:tid 5358] [client 20.234.13.12:7160] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kolda.php"] [unique_id "adVFkSboIFdw6tlcN13v-AAAAQA"]
[Wed Apr 08 01:57:37.804766 2026] [:error] [pid 5246:tid 5274] [client 20.234.13.12:7147] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kolda.php"] [unique_id "adVFkRLpySxaVC8kLEZzHQAAANg"]
[Wed Apr 08 01:57:38.320154 2026] [:error] [pid 4840:tid 5182] [client 20.234.13.12:14131] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kolda.php"] [unique_id "adVFkhsUwg2fEe9p9LTIGwAAABY"]
[Wed Apr 08 01:57:38.828905 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:7066] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yussef.php"] [unique_id "adVFkiboIFdw6tlcN13v_gAAARE"]
[Wed Apr 08 01:57:39.338952 2026] [:error] [pid 5246:tid 5268] [client 20.234.13.12:7136] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yussef.php"] [unique_id "adVFkxLpySxaVC8kLEZzJgAAANI"]
[Wed Apr 08 01:57:39.837586 2026] [:error] [pid 4860:tid 5217] [client 20.234.13.12:7094] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yussef.php"] [unique_id "adVFkwn6KmY32L3WSeHIOAAAAII"]
[Wed Apr 08 01:57:40.404988 2026] [:error] [pid 5337:tid 5376] [client 20.234.13.12:14115] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yussef.php"] [unique_id "adVFlCboIFdw6tlcN13wBwAAARI"]
[Wed Apr 08 01:57:40.904950 2026] [:error] [pid 5246:tid 5273] [client 20.234.13.12:7143] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "adVFlBLpySxaVC8kLEZzJwAAANc"]
[Wed Apr 08 01:57:41.425995 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:14202] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "adVFlSboIFdw6tlcN13wDgAAARE"]
[Wed Apr 08 01:57:41.925581 2026] [:error] [pid 5246:tid 5262] [client 20.234.13.12:7150] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "adVFlRLpySxaVC8kLEZzLQAAAMw"]
[Wed Apr 08 01:57:42.467087 2026] [:error] [pid 4860:tid 5227] [client 20.234.13.12:7113] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "adVFlgn6KmY32L3WSeHIPQAAAIw"]
[Wed Apr 08 01:57:42.969448 2026] [:error] [pid 303:tid 318] [client 20.234.13.12:14132] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "adVFls9wWR0DHTrNMujliAAAAUw"]
[Wed Apr 08 01:57:43.468011 2026] [:error] [pid 5337:tid 5370] [client 20.234.13.12:14105] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "adVFlyboIFdw6tlcN13wFQAAAQw"]
[Wed Apr 08 01:57:43.977097 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:7159] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "adVFl89wWR0DHTrNMujliwAAAUo"]
[Wed Apr 08 01:57:44.481155 2026] [:error] [pid 303:tid 328] [client 20.234.13.12:14088] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "adVFmM9wWR0DHTrNMujljgAAAVY"]
[Wed Apr 08 01:57:44.981187 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:7085] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "adVFmM9wWR0DHTrNMujlkwAAAUk"]
[Wed Apr 08 01:57:45.485149 2026] [:error] [pid 4842:tid 5209] [client 20.234.13.12:7109] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "adVFmZdncJIGbBiMOXTIWgAAAFU"]
[Wed Apr 08 01:57:45.993720 2026] [:error] [pid 5246:tid 5253] [client 20.234.13.12:7065] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "adVFmRLpySxaVC8kLEZzNgAAAMM"]
[Wed Apr 08 01:57:46.512572 2026] [:error] [pid 4840:tid 5163] [client 20.234.13.12:7088] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "adVFmhsUwg2fEe9p9LTINAAAAAM"]
[Wed Apr 08 01:57:47.022787 2026] [:error] [pid 4860:tid 5230] [client 20.234.13.12:14134] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "adVFmwn6KmY32L3WSeHIQAAAAI8"]
[Wed Apr 08 01:57:47.524378 2026] [:error] [pid 5246:tid 5273] [client 20.234.13.12:7139] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "adVFmxLpySxaVC8kLEZzOAAAANc"]
[Wed Apr 08 01:57:48.027411 2026] [:error] [pid 303:tid 322] [client 20.234.13.12:7117] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "adVFnM9wWR0DHTrNMujlngAAAVA"]
[Wed Apr 08 01:57:48.583375 2026] [:error] [pid 303:tid 306] [client 20.234.13.12:7166] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x123x.php"] [unique_id "adVFnM9wWR0DHTrNMujlpQAAAUA"]
[Wed Apr 08 01:57:49.086119 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:14206] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "adVFnSboIFdw6tlcN13wIwAAAQc"]
[Wed Apr 08 01:57:49.595518 2026] [:error] [pid 5337:tid 5378] [client 20.234.13.12:7164] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "adVFnSboIFdw6tlcN13wJQAAARQ"]
[Wed Apr 08 01:57:50.103416 2026] [:error] [pid 4860:tid 5233] [client 20.234.13.12:7146] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "adVFngn6KmY32L3WSeHIQwAAAJI"]
[Wed Apr 08 01:57:50.604627 2026] [:error] [pid 5337:tid 5362] [client 20.234.13.12:14116] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "adVFniboIFdw6tlcN13wKAAAAQQ"]
[Wed Apr 08 01:57:51.108331 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:7142] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "adVFnyboIFdw6tlcN13wKgAAARE"]
[Wed Apr 08 01:57:51.612982 2026] [:error] [pid 4840:tid 5184] [client 20.234.13.12:14117] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "adVFnxsUwg2fEe9p9LTIQwAAABg"]
[Wed Apr 08 01:57:52.117250 2026] [:error] [pid 5337:tid 5374] [client 20.234.13.12:7024] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "adVFoCboIFdw6tlcN13wLQAAARA"]
[Wed Apr 08 01:57:52.625942 2026] [:error] [pid 5246:tid 5264] [client 20.234.13.12:7084] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "adVFoBLpySxaVC8kLEZzQAAAAM4"]
[Wed Apr 08 01:57:53.130401 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:14098] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adVFoc9wWR0DHTrNMujlugAAAUk"]
[Wed Apr 08 01:57:53.633684 2026] [:error] [pid 303:tid 308] [client 20.234.13.12:14174] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adVFoc9wWR0DHTrNMujlvgAAAUI"]
[Wed Apr 08 01:57:54.140569 2026] [:error] [pid 5246:tid 5263] [client 20.234.13.12:14158] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adVFohLpySxaVC8kLEZzQwAAAM0"]
[Wed Apr 08 01:57:54.644632 2026] [:error] [pid 5246:tid 5256] [client 20.234.13.12:7131] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adVFohLpySxaVC8kLEZzRAAAAMY"]
[Wed Apr 08 01:57:55.185882 2026] [:error] [pid 5246:tid 5257] [client 20.234.13.12:7149] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "adVFoxLpySxaVC8kLEZzTAAAAMc"]
[Wed Apr 08 01:57:55.696842 2026] [:error] [pid 5246:tid 5265] [client 20.234.13.12:14086] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "adVFoxLpySxaVC8kLEZzTwAAAM8"]
[Wed Apr 08 01:57:56.225386 2026] [:error] [pid 5246:tid 5261] [client 20.234.13.12:7157] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "adVFpBLpySxaVC8kLEZzVQAAAMs"]
[Wed Apr 08 01:57:56.727979 2026] [:error] [pid 303:tid 310] [client 20.234.13.12:7112] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "adVFpM9wWR0DHTrNMujlxAAAAUQ"]
[Wed Apr 08 01:57:57.232531 2026] [:error] [pid 5246:tid 5271] [client 20.234.13.12:7072] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "adVFpRLpySxaVC8kLEZzWQAAANU"]
[Wed Apr 08 01:57:57.738271 2026] [:error] [pid 5246:tid 5258] [client 20.234.13.12:7052] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "adVFpRLpySxaVC8kLEZzXAAAAMg"]
[Wed Apr 08 01:57:58.240893 2026] [:error] [pid 303:tid 308] [client 20.234.13.12:7058] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "adVFps9wWR0DHTrNMujlywAAAUI"]
[Wed Apr 08 01:57:58.744879 2026] [:error] [pid 5337:tid 5376] [client 20.234.13.12:7161] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "adVFpiboIFdw6tlcN13wQQAAARI"]
[Wed Apr 08 01:57:59.259506 2026] [:error] [pid 4840:tid 5171] [client 20.234.13.12:14140] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xdd.php"] [unique_id "adVFpxsUwg2fEe9p9LTIUgAAAAs"]
[Wed Apr 08 01:57:59.760403 2026] [:error] [pid 303:tid 307] [client 20.234.13.12:14125] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xdd.php"] [unique_id "adVFp89wWR0DHTrNMujlzgAAAUE"]
[Wed Apr 08 01:58:00.262766 2026] [:error] [pid 5337:tid 5374] [client 20.234.13.12:7162] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xdd.php"] [unique_id "adVFqCboIFdw6tlcN13wSQAAARA"]
[Wed Apr 08 01:58:00.764707 2026] [:error] [pid 303:tid 313] [client 20.234.13.12:7108] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xdd.php"] [unique_id "adVFqM9wWR0DHTrNMujl0QAAAUc"]
[Wed Apr 08 01:58:01.272346 2026] [:error] [pid 5337:tid 5376] [client 20.234.13.12:14139] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "adVFqSboIFdw6tlcN13wUAAAARI"]
[Wed Apr 08 01:58:01.773865 2026] [:error] [pid 4842:tid 5188] [client 20.234.13.12:7046] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "adVFqZdncJIGbBiMOXTIZgAAAEA"]
[Wed Apr 08 01:58:02.297402 2026] [:error] [pid 4840:tid 5182] [client 20.234.13.12:7167] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "adVFqhsUwg2fEe9p9LTIXQAAABY"]
[Wed Apr 08 01:58:02.805723 2026] [:error] [pid 5246:tid 5254] [client 20.234.13.12:14137] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "adVFqhLpySxaVC8kLEZzaAAAAMQ"]
[Wed Apr 08 01:58:03.365287 2026] [:error] [pid 303:tid 317] [client 20.234.13.12:7155] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "adVFq89wWR0DHTrNMujl1gAAAUs"]
[Wed Apr 08 01:58:03.866081 2026] [:error] [pid 303:tid 318] [client 20.234.13.12:7154] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "adVFq89wWR0DHTrNMujl2QAAAUw"]
[Wed Apr 08 01:58:04.393415 2026] [:error] [pid 303:tid 312] [client 20.234.13.12:7089] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "adVFrM9wWR0DHTrNMujl2wAAAUY"]
[Wed Apr 08 01:58:04.897395 2026] [:error] [pid 5246:tid 5261] [client 20.234.13.12:7055] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "adVFrBLpySxaVC8kLEZzawAAAMs"]
[Wed Apr 08 01:58:05.452427 2026] [:error] [pid 5246:tid 5270] [client 20.234.13.12:7069] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update1.php"] [unique_id "adVFrRLpySxaVC8kLEZzcQAAANQ"]
[Wed Apr 08 01:58:05.956007 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:7061] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update1.php"] [unique_id "adVFrSboIFdw6tlcN13wXwAAARU"]
[Wed Apr 08 01:58:06.470152 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:6997] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update1.php"] [unique_id "adVFriboIFdw6tlcN13wZAAAAQE"]
[Wed Apr 08 01:58:06.985753 2026] [:error] [pid 303:tid 311] [client 20.234.13.12:7062] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update1.php"] [unique_id "adVFrs9wWR0DHTrNMujl6AAAAUU"]
[Wed Apr 08 01:58:07.495324 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:7078] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "adVFryboIFdw6tlcN13wbAAAAQM"]
[Wed Apr 08 01:58:07.994443 2026] [:error] [pid 5337:tid 5360] [client 20.234.13.12:7098] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "adVFryboIFdw6tlcN13wcQAAAQI"]
[Wed Apr 08 01:58:08.500003 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:14162] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "adVFsM9wWR0DHTrNMujl7AAAAUo"]
[Wed Apr 08 01:58:09.003367 2026] [:error] [pid 4840:tid 5172] [client 20.234.13.12:7073] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "adVFsRsUwg2fEe9p9LTIcAAAAAw"]
[Wed Apr 08 01:58:09.512953 2026] [:error] [pid 4842:tid 5193] [client 20.234.13.12:14080] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adVFsZdncJIGbBiMOXTIaAAAAEU"]
[Wed Apr 08 01:58:10.020575 2026] [:error] [pid 5337:tid 5360] [client 20.234.13.12:14123] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adVFsiboIFdw6tlcN13weQAAAQI"]
[Wed Apr 08 01:58:10.521278 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:7064] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adVFss9wWR0DHTrNMujl-wAAAUk"]
[Wed Apr 08 01:58:11.028383 2026] [:error] [pid 303:tid 308] [client 20.234.13.12:7141] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adVFs89wWR0DHTrNMujl_gAAAUI"]
[Wed Apr 08 01:58:11.531263 2026] [:error] [pid 5246:tid 5263] [client 20.234.13.12:7049] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new2.php"] [unique_id "adVFsxLpySxaVC8kLEZzfAAAAM0"]
[Wed Apr 08 01:58:12.045593 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:7132] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new2.php"] [unique_id "adVFtCboIFdw6tlcN13wgAAAAQc"]
[Wed Apr 08 01:58:12.547774 2026] [:error] [pid 5337:tid 5373] [client 20.234.13.12:7044] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new2.php"] [unique_id "adVFtCboIFdw6tlcN13wiAAAAQ8"]
[Wed Apr 08 01:58:13.051951 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:6976] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new2.php"] [unique_id "adVFtSboIFdw6tlcN13wjQAAARE"]
[Wed Apr 08 01:58:13.558720 2026] [:error] [pid 303:tid 311] [client 20.234.13.12:7091] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "adVFtc9wWR0DHTrNMujmCQAAAUU"]
[Wed Apr 08 01:58:14.060036 2026] [:error] [pid 4840:tid 5179] [client 20.234.13.12:14186] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "adVFthsUwg2fEe9p9LTIeAAAABM"]
[Wed Apr 08 01:58:14.560694 2026] [:error] [pid 303:tid 310] [client 20.234.13.12:6924] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "adVFts9wWR0DHTrNMujmEQAAAUQ"]
[Wed Apr 08 01:58:15.077954 2026] [:error] [pid 303:tid 330] [client 20.234.13.12:7129] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "adVFt89wWR0DHTrNMujmFQAAAVg"]
[Wed Apr 08 01:58:15.588197 2026] [:error] [pid 5337:tid 5364] [client 20.234.13.12:7045] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "adVFtyboIFdw6tlcN13wmQAAAQY"]
[Wed Apr 08 01:58:16.093702 2026] [:error] [pid 5246:tid 5251] [client 20.234.13.12:14120] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "adVFuBLpySxaVC8kLEZzhQAAAME"]
[Wed Apr 08 01:58:16.605676 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:7043] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "adVFuCboIFdw6tlcN13wnAAAARE"]
[Wed Apr 08 01:58:17.110292 2026] [:error] [pid 303:tid 329] [client 20.234.13.12:7071] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "adVFuc9wWR0DHTrNMujmGQAAAVc"]
[Wed Apr 08 01:58:17.618172 2026] [:error] [pid 5337:tid 5372] [client 20.234.13.12:7145] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adVFuSboIFdw6tlcN13wogAAAQ4"]
[Wed Apr 08 01:58:18.157134 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:7080] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adVFuiboIFdw6tlcN13wowAAAQc"]
[Wed Apr 08 01:58:18.658801 2026] [:error] [pid 4842:tid 5194] [client 20.234.13.12:6992] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adVFupdncJIGbBiMOXTIcAAAAEY"]
[Wed Apr 08 01:58:19.161488 2026] [:error] [pid 5246:tid 5271] [client 20.234.13.12:7096] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adVFuxLpySxaVC8kLEZzkAAAANU"]
[Wed Apr 08 01:58:19.666772 2026] [:error] [pid 5246:tid 5274] [client 20.234.13.12:14173] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ccv.php"] [unique_id "adVFuxLpySxaVC8kLEZzlgAAANg"]
[Wed Apr 08 01:58:20.169672 2026] [:error] [pid 4842:tid 5200] [client 20.234.13.12:7077] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ccv.php"] [unique_id "adVFvJdncJIGbBiMOXTIcQAAAEw"]
[Wed Apr 08 01:58:20.672075 2026] [:error] [pid 4842:tid 5204] [client 20.234.13.12:7068] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ccv.php"] [unique_id "adVFvJdncJIGbBiMOXTIcgAAAFA"]
[Wed Apr 08 01:58:21.175598 2026] [:error] [pid 303:tid 326] [client 20.234.13.12:7030] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ccv.php"] [unique_id "adVFvc9wWR0DHTrNMujmIQAAAVQ"]
[Wed Apr 08 01:58:21.689300 2026] [:error] [pid 5337:tid 5376] [client 20.234.13.12:14118] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wo.php"] [unique_id "adVFvSboIFdw6tlcN13wqAAAARI"]
[Wed Apr 08 01:58:22.202029 2026] [:error] [pid 5337:tid 5378] [client 20.234.13.12:7005] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wo.php"] [unique_id "adVFviboIFdw6tlcN13wrAAAARQ"]
[Wed Apr 08 01:58:22.716043 2026] [:error] [pid 5246:tid 5250] [client 20.234.13.12:7079] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wo.php"] [unique_id "adVFvhLpySxaVC8kLEZzmgAAAMA"]
[Wed Apr 08 01:58:23.226154 2026] [:error] [pid 4842:tid 5203] [client 20.234.13.12:7083] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wo.php"] [unique_id "adVFv5dncJIGbBiMOXTIdwAAAE8"]
[Wed Apr 08 01:58:23.727184 2026] [:error] [pid 4840:tid 5162] [client 20.234.13.12:7130] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "adVFvxsUwg2fEe9p9LTIkQAAAAI"]
[Wed Apr 08 01:58:24.243834 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:7153] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "adVFwM9wWR0DHTrNMujmLAAAAUk"]
[Wed Apr 08 01:58:24.748983 2026] [:error] [pid 4842:tid 5197] [client 20.234.13.12:7010] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "adVFwJdncJIGbBiMOXTIfAAAAEk"]
[Wed Apr 08 01:58:25.256572 2026] [:error] [pid 4842:tid 5199] [client 20.234.13.12:7151] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "adVFwZdncJIGbBiMOXTIgAAAAEs"]
[Wed Apr 08 01:58:25.781286 2026] [:error] [pid 4840:tid 5183] [client 20.234.13.12:7063] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/floya.php"] [unique_id "adVFwRsUwg2fEe9p9LTImgAAABc"]
[Wed Apr 08 01:58:26.282930 2026] [:error] [pid 4842:tid 5195] [client 20.234.13.12:6994] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/floya.php"] [unique_id "adVFwpdncJIGbBiMOXTIhgAAAEc"]
[Wed Apr 08 01:58:26.836787 2026] [:error] [pid 4840:tid 5163] [client 20.234.13.12:7015] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/floya.php"] [unique_id "adVFwhsUwg2fEe9p9LTInwAAAAM"]
[Wed Apr 08 01:58:27.338181 2026] [:error] [pid 303:tid 323] [client 20.234.13.12:6977] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/floya.php"] [unique_id "adVFw89wWR0DHTrNMujmMwAAAVE"]
[Wed Apr 08 01:58:27.838645 2026] [:error] [pid 5246:tid 5270] [client 20.234.13.12:7040] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf.php"] [unique_id "adVFwxLpySxaVC8kLEZzogAAANQ"]
[Wed Apr 08 01:58:28.344127 2026] [:error] [pid 303:tid 314] [client 20.234.13.12:7114] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf.php"] [unique_id "adVFxM9wWR0DHTrNMujmNgAAAUg"]
[Wed Apr 08 01:58:28.844150 2026] [:error] [pid 4860:tid 5226] [client 20.234.13.12:7102] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf.php"] [unique_id "adVFxAn6KmY32L3WSeHIZgAAAIs"]
[Wed Apr 08 01:58:29.345759 2026] [:error] [pid 5246:tid 5265] [client 20.234.13.12:14201] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wolf.php"] [unique_id "adVFxRLpySxaVC8kLEZzpQAAAM8"]
[Wed Apr 08 01:58:29.849113 2026] [:error] [pid 5246:tid 5254] [client 20.234.13.12:7163] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "adVFxRLpySxaVC8kLEZzpwAAAMQ"]
[Wed Apr 08 01:58:30.352479 2026] [:error] [pid 4840:tid 5182] [client 20.234.13.12:7100] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "adVFxhsUwg2fEe9p9LTIowAAABY"]
[Wed Apr 08 01:58:30.857432 2026] [:error] [pid 5246:tid 5269] [client 20.234.13.12:7057] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "adVFxhLpySxaVC8kLEZzqQAAANM"]
[Wed Apr 08 01:58:31.368845 2026] [:error] [pid 5246:tid 5260] [client 20.234.13.12:7103] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "adVFxxLpySxaVC8kLEZzrAAAAMo"]
[Wed Apr 08 01:58:31.868610 2026] [:error] [pid 5337:tid 5366] [client 20.234.13.12:14153] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vdb.php"] [unique_id "adVFxyboIFdw6tlcN13wuwAAAQg"]
[Wed Apr 08 01:58:32.374720 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:7122] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vdb.php"] [unique_id "adVFyCboIFdw6tlcN13wvAAAARU"]
[Wed Apr 08 01:58:32.921869 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:7070] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vdb.php"] [unique_id "adVFyCboIFdw6tlcN13wvwAAAQk"]
[Wed Apr 08 01:58:33.426116 2026] [:error] [pid 5337:tid 5360] [client 20.234.13.12:7093] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vdb.php"] [unique_id "adVFySboIFdw6tlcN13wxQAAAQI"]
[Wed Apr 08 01:58:33.968324 2026] [:error] [pid 5337:tid 5378] [client 20.234.13.12:7011] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/om.php"] [unique_id "adVFySboIFdw6tlcN13wygAAARQ"]
[Wed Apr 08 01:59:19.391455 2026] [:error] [pid 5337:tid 5381] [client 20.234.13.12:6927] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum.php"] [unique_id "adVF9yboIFdw6tlcN13x0gAAARc"]
[Wed Apr 08 01:59:19.890873 2026] [:error] [pid 303:tid 322] [client 20.234.13.12:7156] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum.php"] [unique_id "adVF989wWR0DHTrNMujm0gAAAVA"]
[Wed Apr 08 01:59:20.402266 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:7004] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum.php"] [unique_id "adVF-M9wWR0DHTrNMujm1QAAAUo"]
[Wed Apr 08 01:59:20.900999 2026] [:error] [pid 5246:tid 5271] [client 20.234.13.12:7101] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum.php"] [unique_id "adVF-BLpySxaVC8kLEZ0FQAAANU"]
[Wed Apr 08 01:59:21.405516 2026] [:error] [pid 5246:tid 5264] [client 20.234.13.12:7165] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adVF-RLpySxaVC8kLEZ0FwAAAM4"]
[Wed Apr 08 01:59:21.904648 2026] [:error] [pid 303:tid 307] [client 20.234.13.12:7033] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adVF-c9wWR0DHTrNMujm2AAAAUE"]
[Wed Apr 08 01:59:22.412590 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:7087] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adVF-iboIFdw6tlcN13x2AAAARU"]
[Wed Apr 08 01:59:22.911724 2026] [:error] [pid 303:tid 329] [client 20.234.13.12:6913] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adVF-s9wWR0DHTrNMujm2wAAAVc"]
[Wed Apr 08 01:59:23.436520 2026] [:error] [pid 303:tid 311] [client 20.234.13.12:7047] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "adVF-89wWR0DHTrNMujm3gAAAUU"]
[Wed Apr 08 01:59:23.936663 2026] [:error] [pid 303:tid 313] [client 20.234.13.12:7048] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "adVF-89wWR0DHTrNMujm4AAAAUc"]
[Wed Apr 08 01:59:24.437260 2026] [:error] [pid 5337:tid 5374] [client 20.234.13.12:6947] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "adVF_CboIFdw6tlcN13x3QAAARA"]
[Wed Apr 08 01:59:24.938504 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:7056] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp8.php"] [unique_id "adVF_CboIFdw6tlcN13x4QAAAQk"]
[Wed Apr 08 01:59:25.438541 2026] [:error] [pid 5337:tid 5362] [client 20.234.13.12:7106] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "adVF_SboIFdw6tlcN13x5AAAAQQ"]
[Wed Apr 08 01:59:25.938450 2026] [:error] [pid 4840:tid 5175] [client 20.234.13.12:7111] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "adVF_RsUwg2fEe9p9LTI5AAAAA8"]
[Wed Apr 08 01:59:26.453060 2026] [:error] [pid 303:tid 323] [client 20.234.13.12:7137] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "adVF_s9wWR0DHTrNMujm6AAAAVE"]
[Wed Apr 08 01:59:26.952869 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:14191] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "adVF_iboIFdw6tlcN13x7gAAAQs"]
[Wed Apr 08 01:59:27.453579 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:7017] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gilo.php"] [unique_id "adVF_yboIFdw6tlcN13x8gAAARU"]
[Wed Apr 08 01:59:27.954298 2026] [:error] [pid 4840:tid 5162] [client 20.234.13.12:14152] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gilo.php"] [unique_id "adVF_xsUwg2fEe9p9LTI5gAAAAI"]
[Wed Apr 08 01:59:28.456521 2026] [:error] [pid 4840:tid 5161] [client 20.234.13.12:7000] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gilo.php"] [unique_id "adVGABsUwg2fEe9p9LTI5wAAAAE"]
[Wed Apr 08 01:59:28.956401 2026] [:error] [pid 4860:tid 5218] [client 20.234.13.12:7097] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gilo.php"] [unique_id "adVGAAn6KmY32L3WSeHImwAAAIM"]
[Wed Apr 08 01:59:29.466914 2026] [:error] [pid 4860:tid 5227] [client 20.234.13.12:6940] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "adVGAQn6KmY32L3WSeHIoQAAAIw"]
[Wed Apr 08 01:59:29.994302 2026] [:error] [pid 4842:tid 5199] [client 20.234.13.12:6935] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "adVGAZdncJIGbBiMOXTInQAAAEs"]
[Wed Apr 08 01:59:30.517539 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:6982] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "adVGAiboIFdw6tlcN13x9QAAAQM"]
[Wed Apr 08 01:59:31.038595 2026] [:error] [pid 5246:tid 5255] [client 20.234.13.12:6988] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "adVGAxLpySxaVC8kLEZ0KgAAAMU"]
[Wed Apr 08 01:59:31.541653 2026] [:error] [pid 5246:tid 5273] [client 20.234.13.12:6936] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7r.php"] [unique_id "adVGAxLpySxaVC8kLEZ0LAAAANc"]
[Wed Apr 08 01:59:32.079971 2026] [:error] [pid 5246:tid 5252] [client 20.234.13.12:7130] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7r.php"] [unique_id "adVGBBLpySxaVC8kLEZ0LwAAAMI"]
[Wed Apr 08 01:59:32.583847 2026] [:error] [pid 303:tid 328] [client 20.234.13.12:6987] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7r.php"] [unique_id "adVGBM9wWR0DHTrNMujm8AAAAVY"]
[Wed Apr 08 01:59:33.086200 2026] [:error] [pid 4860:tid 5227] [client 20.234.13.12:7012] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x7r.php"] [unique_id "adVGBQn6KmY32L3WSeHIqwAAAIw"]
[Wed Apr 08 01:59:33.598663 2026] [:error] [pid 303:tid 325] [client 20.234.13.12:6925] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/riz.php"] [unique_id "adVGBc9wWR0DHTrNMujm9QAAAVM"]
[Wed Apr 08 01:59:34.103874 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:7075] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/riz.php"] [unique_id "adVGBiboIFdw6tlcN13x_gAAAQo"]
[Wed Apr 08 01:59:34.608685 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:7140] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/riz.php"] [unique_id "adVGBiboIFdw6tlcN13yAAAAAQE"]
[Wed Apr 08 01:59:35.111845 2026] [:error] [pid 5246:tid 5256] [client 20.234.13.12:7031] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/riz.php"] [unique_id "adVGBxLpySxaVC8kLEZ0NwAAAMY"]
[Wed Apr 08 01:59:35.617097 2026] [:error] [pid 5337:tid 5363] [client 20.234.13.12:6985] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp3.php"] [unique_id "adVGByboIFdw6tlcN13yBwAAAQU"]
[Wed Apr 08 01:59:36.126086 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:6915] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp3.php"] [unique_id "adVGCCboIFdw6tlcN13yCQAAAQs"]
[Wed Apr 08 01:59:36.634422 2026] [:error] [pid 5337:tid 5378] [client 20.234.13.12:6999] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp3.php"] [unique_id "adVGCCboIFdw6tlcN13yDQAAARQ"]
[Wed Apr 08 01:59:37.142177 2026] [:error] [pid 4860:tid 5216] [client 20.234.13.12:6917] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp3.php"] [unique_id "adVGCQn6KmY32L3WSeHIswAAAIE"]
[Wed Apr 08 01:59:37.646742 2026] [:error] [pid 303:tid 329] [client 20.234.13.12:7002] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "adVGCc9wWR0DHTrNMujm_gAAAVc"]
[Wed Apr 08 01:59:38.154303 2026] [:error] [pid 4840:tid 5183] [client 20.234.13.12:6912] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "adVGChsUwg2fEe9p9LTJAQAAABc"]
[Wed Apr 08 01:59:38.662575 2026] [:error] [pid 4840:tid 5170] [client 20.234.13.12:7053] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "adVGChsUwg2fEe9p9LTJAwAAAAo"]
[Wed Apr 08 01:59:39.195815 2026] [:error] [pid 5246:tid 5272] [client 20.234.13.12:14207] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "adVGCxLpySxaVC8kLEZ0RgAAANY"]
[Wed Apr 08 01:59:39.697811 2026] [:error] [pid 303:tid 310] [client 20.234.13.12:7019] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ympoo.php"] [unique_id "adVGC89wWR0DHTrNMujnBwAAAUQ"]
[Wed Apr 08 01:59:40.202633 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:7082] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ympoo.php"] [unique_id "adVGDM9wWR0DHTrNMujnDAAAAUk"]
[Wed Apr 08 01:59:40.705195 2026] [:error] [pid 5337:tid 5358] [client 20.234.13.12:7090] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ympoo.php"] [unique_id "adVGDCboIFdw6tlcN13yGAAAAQA"]
[Wed Apr 08 01:59:41.206195 2026] [:error] [pid 4840:tid 5181] [client 20.234.13.12:14122] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ympoo.php"] [unique_id "adVGDRsUwg2fEe9p9LTJCAAAABU"]
[Wed Apr 08 01:59:41.708662 2026] [:error] [pid 4840:tid 5165] [client 20.234.13.12:6944] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/she.php"] [unique_id "adVGDRsUwg2fEe9p9LTJDQAAAAU"]
[Wed Apr 08 01:59:42.209977 2026] [:error] [pid 4842:tid 5210] [client 20.234.13.12:7081] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/she.php"] [unique_id "adVGDpdncJIGbBiMOXTIpQAAAFY"]
[Wed Apr 08 01:59:42.714571 2026] [:error] [pid 4860:tid 5227] [client 20.234.13.12:7029] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/she.php"] [unique_id "adVGDgn6KmY32L3WSeHItwAAAIw"]
[Wed Apr 08 01:59:43.221630 2026] [:error] [pid 5246:tid 5272] [client 20.234.13.12:6920] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/she.php"] [unique_id "adVGDxLpySxaVC8kLEZ0VAAAANY"]
[Wed Apr 08 01:59:43.722876 2026] [:error] [pid 4840:tid 5168] [client 20.234.13.12:7022] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/haojj.php"] [unique_id "adVGDxsUwg2fEe9p9LTJEAAAAAg"]
[Wed Apr 08 01:59:44.222424 2026] [:error] [pid 4840:tid 5179] [client 20.234.13.12:6978] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/haojj.php"] [unique_id "adVGEBsUwg2fEe9p9LTJFgAAABM"]
[Wed Apr 08 01:59:44.730648 2026] [:error] [pid 5246:tid 5269] [client 20.234.13.12:7009] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/haojj.php"] [unique_id "adVGEBLpySxaVC8kLEZ0WAAAANM"]
[Wed Apr 08 01:59:45.233606 2026] [:error] [pid 4842:tid 5188] [client 20.234.13.12:6979] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/haojj.php"] [unique_id "adVGEZdncJIGbBiMOXTIpgAAAEA"]
[Wed Apr 08 02:23:02.135344 2026] [autoindex:error] [pid 4840:tid 5170] [client 172.213.26.45:1508] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:25:31.402349 2026] [:error] [pid 47732:tid 47734] [client 103.168.67.159:1710] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adWui4m4N5QW9Mh7G1273AAAAMA"]
[Wed Apr 08 09:25:32.104943 2026] [:error] [pid 16630:tid 16635] [client 103.168.67.159:2180] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adWujCjfVAkPG-jgJEpQ4QAAAQM"]
[Wed Apr 08 09:25:32.806948 2026] [:error] [pid 49984:tid 50000] [client 103.168.67.159:2690] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adWujOYY_Bz5lRHcJIE-WwAAAUo"]
[Wed Apr 08 09:25:33.510461 2026] [:error] [pid 47627:tid 47716] [client 103.168.67.159:3240] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adWujXOljf1Quv_kDjn0gwAAAJE"]
[Wed Apr 08 09:25:34.236463 2026] [:error] [pid 47627:tid 47709] [client 103.168.67.159:3694] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dashboard"] [unique_id "adWujnOljf1Quv_kDjn0kgAAAIo"]
[Wed Apr 08 09:25:34.940800 2026] [:error] [pid 16630:tid 16650] [client 103.168.67.159:4262] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dashboard"] [unique_id "adWujijfVAkPG-jgJEpREgAAARI"]
[Wed Apr 08 09:25:35.719628 2026] [:error] [pid 47627:tid 47710] [client 103.168.67.159:4824] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dashboard"] [unique_id "adWuj3Oljf1Quv_kDjn0vQAAAIs"]
[Wed Apr 08 09:25:36.436558 2026] [:error] [pid 544:tid 573] [client 103.168.67.159:5410] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dashboard"] [unique_id "adWukDieLKSoiLVA6YfDGwAAAZg"]
[Wed Apr 08 09:35:15.696340 2026] [autoindex:error] [pid 47627:tid 47700] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:20.509398 2026] [autoindex:error] [pid 47627:tid 47702] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:35.669770 2026] [autoindex:error] [pid 47627:tid 47723] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:38.259372 2026] [autoindex:error] [pid 47627:tid 47703] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:45.710318 2026] [autoindex:error] [pid 47627:tid 47699] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:46.167767 2026] [autoindex:error] [pid 47627:tid 47707] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:46.620772 2026] [autoindex:error] [pid 47627:tid 47703] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:51.824523 2026] [autoindex:error] [pid 47627:tid 47708] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:52.278960 2026] [autoindex:error] [pid 47627:tid 47702] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:54.907252 2026] [autoindex:error] [pid 47627:tid 47699] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:55.362020 2026] [autoindex:error] [pid 47627:tid 47720] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:55.815085 2026] [autoindex:error] [pid 47627:tid 47717] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:58.939808 2026] [autoindex:error] [pid 47627:tid 47699] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:59.393373 2026] [autoindex:error] [pid 47627:tid 47704] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:35:59.845525 2026] [autoindex:error] [pid 47627:tid 47706] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:06.550847 2026] [autoindex:error] [pid 47627:tid 47717] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:07.004106 2026] [autoindex:error] [pid 47627:tid 47721] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:07.906858 2026] [autoindex:error] [pid 47627:tid 47702] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:08.360883 2026] [autoindex:error] [pid 47627:tid 47701] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:10.873718 2026] [autoindex:error] [pid 47627:tid 47711] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:11.326748 2026] [autoindex:error] [pid 47627:tid 47718] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:17.995355 2026] [autoindex:error] [pid 47627:tid 47699] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:22.594995 2026] [autoindex:error] [pid 47627:tid 47708] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:23.505036 2026] [autoindex:error] [pid 47627:tid 47707] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:30.095898 2026] [autoindex:error] [pid 47627:tid 47713] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:30.550651 2026] [autoindex:error] [pid 47627:tid 47714] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:40.149971 2026] [autoindex:error] [pid 47627:tid 47705] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:42.684202 2026] [autoindex:error] [pid 47627:tid 47717] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:45.194833 2026] [autoindex:error] [pid 47627:tid 47706] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:45.650359 2026] [autoindex:error] [pid 47627:tid 47701] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:46.111595 2026] [autoindex:error] [pid 47627:tid 47703] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:46.565898 2026] [autoindex:error] [pid 47627:tid 47700] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:49.168145 2026] [autoindex:error] [pid 47627:tid 47704] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:53.845139 2026] [autoindex:error] [pid 47627:tid 47717] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:36:54.296382 2026] [autoindex:error] [pid 47627:tid 47718] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:01.296101 2026] [autoindex:error] [pid 47627:tid 47703] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:03.900485 2026] [autoindex:error] [pid 47627:tid 47705] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:08.844660 2026] [autoindex:error] [pid 47627:tid 47707] [client 92.62.120.86:48140] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:13.574790 2026] [autoindex:error] [pid 47627:tid 47721] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:14.028725 2026] [autoindex:error] [pid 47627:tid 47700] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:14.482845 2026] [autoindex:error] [pid 47627:tid 47713] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:14.934453 2026] [autoindex:error] [pid 47627:tid 47718] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:15.387263 2026] [autoindex:error] [pid 47627:tid 47712] [client 92.62.120.86:48140] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:29.535214 2026] [autoindex:error] [pid 16630:tid 16633] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:29.986655 2026] [autoindex:error] [pid 16630:tid 16639] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:30.437726 2026] [autoindex:error] [pid 16630:tid 16642] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:30.887917 2026] [autoindex:error] [pid 16630:tid 16651] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:31.341532 2026] [autoindex:error] [pid 16630:tid 16648] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:42.766517 2026] [autoindex:error] [pid 16630:tid 16652] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:43.217725 2026] [autoindex:error] [pid 16630:tid 16654] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:43.667403 2026] [autoindex:error] [pid 16630:tid 16648] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:44.121545 2026] [autoindex:error] [pid 16630:tid 16640] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:44.571785 2026] [autoindex:error] [pid 16630:tid 16644] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:37:53.336089 2026] [autoindex:error] [pid 16630:tid 16634] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:00.019699 2026] [autoindex:error] [pid 16630:tid 16655] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:00.475657 2026] [autoindex:error] [pid 16630:tid 16647] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:03.002245 2026] [autoindex:error] [pid 16630:tid 16642] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:13.633036 2026] [autoindex:error] [pid 16630:tid 16637] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:14.533769 2026] [autoindex:error] [pid 16630:tid 16650] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:14.984826 2026] [autoindex:error] [pid 16630:tid 16636] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:23.513707 2026] [autoindex:error] [pid 16630:tid 16654] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:30.241808 2026] [autoindex:error] [pid 16630:tid 16649] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:50.201166 2026] [autoindex:error] [pid 16630:tid 16645] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:54.665184 2026] [autoindex:error] [pid 16630:tid 16636] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:38:55.122360 2026] [autoindex:error] [pid 16630:tid 16653] [client 92.62.120.86:40660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:05.086042 2026] [autoindex:error] [pid 47627:tid 47713] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:07.587299 2026] [autoindex:error] [pid 47627:tid 47701] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:35.376877 2026] [autoindex:error] [pid 47627:tid 47712] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:39.896570 2026] [autoindex:error] [pid 47627:tid 47709] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:44.426492 2026] [autoindex:error] [pid 47627:tid 47702] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:48.945381 2026] [autoindex:error] [pid 47627:tid 47706] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:51.446971 2026] [autoindex:error] [pid 47627:tid 47701] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:51.912693 2026] [autoindex:error] [pid 47627:tid 47703] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:54.381565 2026] [autoindex:error] [pid 47627:tid 47721] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:54.846992 2026] [autoindex:error] [pid 47627:tid 47702] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:39:55.317592 2026] [autoindex:error] [pid 47627:tid 47714] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:40:02.418908 2026] [autoindex:error] [pid 47627:tid 47707] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:40:06.858846 2026] [autoindex:error] [pid 47627:tid 47721] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:40:21.106192 2026] [autoindex:error] [pid 47627:tid 47717] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:40:21.574990 2026] [autoindex:error] [pid 47627:tid 47723] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:40:22.505481 2026] [autoindex:error] [pid 47627:tid 47720] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:40:25.084869 2026] [autoindex:error] [pid 47627:tid 47715] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:40:40.232518 2026] [autoindex:error] [pid 47627:tid 47700] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 09:40:50.796435 2026] [autoindex:error] [pid 47627:tid 47701] [client 92.62.120.100:48132] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 11:12:18.979353 2026] [:error] [pid 47627:tid 47707] [client 20.63.84.172:11976] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHknOljf1Quv_kDjkxMwAAAIg"], referer: www.google.com
[Wed Apr 08 11:12:22.365370 2026] [:error] [pid 47627:tid 47703] [client 20.63.84.172:10013] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHlnOljf1Quv_kDjkxOgAAAIQ"], referer: www.google.com
[Wed Apr 08 11:12:22.376189 2026] [:error] [pid 47627:tid 47699] [client 20.63.84.172:9984] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adXHlnOljf1Quv_kDjkxPAAAAIA"]
[Wed Apr 08 11:12:22.392540 2026] [:error] [pid 16630:tid 16652] [client 20.63.84.172:10029] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHlijfVAkPG-jgJEp8BAAAARQ"], referer: www.google.com
[Wed Apr 08 11:12:23.114245 2026] [:error] [pid 47625:tid 47656] [client 20.63.84.172:11897] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHlyVuHyNWzZlE8PCQFwAAABY"], referer: www.google.com
[Wed Apr 08 11:12:23.278381 2026] [:error] [pid 47625:tid 47652] [client 20.63.84.172:9616] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHlyVuHyNWzZlE8PCQGAAAABI"], referer: www.google.com
[Wed Apr 08 11:12:23.383964 2026] [:error] [pid 47732:tid 47758] [client 20.63.84.172:21893] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adXHl4m4N5QW9Mh7G13eZwAAANg"]
[Wed Apr 08 11:12:23.552907 2026] [:error] [pid 47732:tid 47745] [client 20.63.84.172:9661] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHl4m4N5QW9Mh7G13eaAAAAMs"], referer: www.google.com
[Wed Apr 08 11:12:25.377460 2026] [:error] [pid 544:tid 555] [client 20.63.84.172:9613] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHmTieLKSoiLVA6YfdVgAAAYY"], referer: www.google.com
[Wed Apr 08 11:12:25.455303 2026] [:error] [pid 47625:tid 47636] [client 20.63.84.172:21901] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adXHmSVuHyNWzZlE8PCQIQAAAAI"]
[Wed Apr 08 11:12:25.598997 2026] [:error] [pid 47627:tid 47701] [client 20.63.84.172:21890] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHmXOljf1Quv_kDjkxQwAAAII"], referer: www.google.com
[Wed Apr 08 11:12:25.660747 2026] [:error] [pid 47627:tid 47705] [client 20.63.84.172:10033] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adXHmXOljf1Quv_kDjkxRAAAAIY"]
[Wed Apr 08 11:12:27.359030 2026] [:error] [pid 47625:tid 47638] [client 20.63.84.172:9228] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHmyVuHyNWzZlE8PCQLAAAAAQ"], referer: www.google.com
[Wed Apr 08 11:12:27.515451 2026] [:error] [pid 47732:tid 47739] [client 20.63.84.172:9233] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHm4m4N5QW9Mh7G13ebQAAAMU"], referer: www.google.com
[Wed Apr 08 11:12:27.605921 2026] [:error] [pid 47732:tid 47737] [client 20.63.84.172:21905] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adXHm4m4N5QW9Mh7G13ebgAAAMM"]
[Wed Apr 08 11:12:28.443033 2026] [:error] [pid 47627:tid 47720] [client 20.63.84.172:11561] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHnHOljf1Quv_kDjkxewAAAJU"], referer: www.google.com
[Wed Apr 08 11:12:28.956735 2026] [:error] [pid 47625:tid 47644] [client 20.63.84.172:11329] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHnCVuHyNWzZlE8PCQNwAAAAo"], referer: www.google.com
[Wed Apr 08 11:12:29.394055 2026] [:error] [pid 16630:tid 16640] [client 20.63.84.172:21909] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHnSjfVAkPG-jgJEp8DQAAAQg"], referer: www.google.com
[Wed Apr 08 11:12:29.627365 2026] [:error] [pid 47625:tid 47643] [client 20.63.84.172:9255] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHnSVuHyNWzZlE8PCQPAAAAAk"], referer: www.google.com
[Wed Apr 08 11:12:30.719325 2026] [:error] [pid 47625:tid 47656] [client 20.63.84.172:9223] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHniVuHyNWzZlE8PCQPgAAABY"], referer: www.google.com
[Wed Apr 08 11:12:30.916860 2026] [:error] [pid 49984:tid 49993] [client 20.63.84.172:21916] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHnuYY_Bz5lRHcJIFQGwAAAUM"], referer: www.google.com
[Wed Apr 08 11:12:33.039578 2026] [:error] [pid 47732:tid 47745] [client 20.63.84.172:9216] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHoYm4N5QW9Mh7G13edwAAAMs"], referer: www.google.com
[Wed Apr 08 11:12:33.118594 2026] [:error] [pid 47732:tid 47756] [client 20.63.84.172:21918] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHoYm4N5QW9Mh7G13eeAAAANY"], referer: www.google.com
[Wed Apr 08 11:12:34.294837 2026] [:error] [pid 16630:tid 16654] [client 20.63.84.172:11920] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHoijfVAkPG-jgJEp8FQAAARY"], referer: www.google.com
[Wed Apr 08 11:12:35.206293 2026] [:error] [pid 47625:tid 47638] [client 20.63.84.172:21897] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHoyVuHyNWzZlE8PCQSAAAAAQ"], referer: www.google.com
[Wed Apr 08 11:12:35.207943 2026] [:error] [pid 47625:tid 47656] [client 20.63.84.172:21888] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHoyVuHyNWzZlE8PCQSQAAABY"], referer: www.google.com
[Wed Apr 08 11:12:35.424072 2026] [:error] [pid 49984:tid 49991] [client 20.63.84.172:9241] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHo-YY_Bz5lRHcJIFQHQAAAUE"], referer: www.google.com
[Wed Apr 08 11:12:37.463434 2026] [:error] [pid 47625:tid 47640] [client 20.63.84.172:9253] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHpSVuHyNWzZlE8PCQUwAAAAY"], referer: www.google.com
[Wed Apr 08 11:12:37.649134 2026] [:error] [pid 47627:tid 47701] [client 20.63.84.172:9260] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "adXHpXOljf1Quv_kDjkxogAAAII"], referer: www.google.com
[Wed Apr 08 11:12:39.663308 2026] [:error] [pid 47625:tid 47645] [client 20.63.84.172:21907] [client 20.63.84.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adXHpyVuHyNWzZlE8PCQWQAAAAs"], referer: www.google.com
[Wed Apr 08 19:07:14.200557 2026] [autoindex:error] [pid 7047:tid 7069] [client 173.249.30.252:51095] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 09 17:04:20.432094 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 20.240.63.86:64569] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:04:23.012414 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 20.240.63.86:64549] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:04:37.017932 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:63472] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "addrpcDe826HlFeoLPJTsQAAAVA"]
[Thu Apr 09 17:04:37.553534 2026] [:error] [pid 24516:tid 24551] [client 20.240.63.86:64003] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "addrpdhW7vSS-UkeWCUQrgAAAEQ"]
[Thu Apr 09 17:04:38.148433 2026] [:error] [pid 24517:tid 24592] [client 20.240.63.86:64059] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "addrpnboYEn2ZFM_PS9m9QAAAJI"]
[Thu Apr 09 17:04:38.691691 2026] [:error] [pid 24517:tid 24596] [client 20.240.63.86:64478] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "addrpnboYEn2ZFM_PS9m-AAAAJY"]
[Thu Apr 09 17:04:39.775910 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:65514] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "addrpzXObuzEuw8mNJu-HQAAAQc"]
[Thu Apr 09 17:04:40.353051 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:63505] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "addrqDXObuzEuw8mNJu-IwAAARc"]
[Thu Apr 09 17:04:41.231007 2026] [:error] [pid 18477:tid 18482] [client 20.240.63.86:63538] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "addrqcDe826HlFeoLPJTvQAAAUM"]
[Thu Apr 09 17:04:41.793808 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:63439] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "addrqa1OMnvM2fMnB1NeTAAAAAk"]
[Thu Apr 09 17:04:42.388022 2026] [:error] [pid 24515:tid 24541] [client 20.240.63.86:64497] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "addrqq1OMnvM2fMnB1NeUAAAABY"]
[Thu Apr 09 17:04:43.004880 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:64484] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "addrqzXObuzEuw8mNJu-JgAAAQg"]
[Thu Apr 09 17:04:43.535425 2026] [:error] [pid 24515:tid 24538] [client 20.240.63.86:63535] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "addrq61OMnvM2fMnB1NeWAAAABM"]
[Thu Apr 09 17:04:44.065692 2026] [:error] [pid 24517:tid 24581] [client 20.240.63.86:63549] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "addrrHboYEn2ZFM_PS9nAQAAAIc"]
[Thu Apr 09 17:04:44.627347 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:64526] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "addrrK1OMnvM2fMnB1NeWgAAAAQ"]
[Thu Apr 09 17:04:45.289648 2026] [:error] [pid 24517:tid 24582] [client 20.240.63.86:64504] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "addrrXboYEn2ZFM_PS9nAwAAAIg"]
[Thu Apr 09 17:04:45.930875 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:64495] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "addrra1OMnvM2fMnB1NeYQAAAAE"]
[Thu Apr 09 17:04:46.720147 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:65502] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "addrrthW7vSS-UkeWCUQugAAAFE"]
[Thu Apr 09 17:04:47.334513 2026] [:error] [pid 18477:tid 18489] [client 20.240.63.86:64485] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "addrr8De826HlFeoLPJTzgAAAUo"]
[Thu Apr 09 17:04:47.989317 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:63448] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "addrrzXObuzEuw8mNJu-KwAAAQQ"]
[Thu Apr 09 17:04:48.614615 2026] [:error] [pid 24624:tid 24632] [client 20.240.63.86:64473] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "addrsO4Jn-WvK1ZBTviiwQAAAMY"]
[Thu Apr 09 17:04:49.500965 2026] [:error] [pid 24624:tid 24628] [client 20.240.63.86:63448] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "addrse4Jn-WvK1ZBTviixAAAAMI"]
[Thu Apr 09 17:04:50.062995 2026] [:error] [pid 20837:tid 20849] [client 20.240.63.86:64525] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oij98gy.php"] [unique_id "addrsvSL71FHZkjrGzO5iAAAAYo"]
[Thu Apr 09 17:04:50.735174 2026] [:error] [pid 24515:tid 24533] [client 20.240.63.86:62848] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oij98gy.php"] [unique_id "addrsq1OMnvM2fMnB1NeZgAAAA4"]
[Thu Apr 09 17:04:51.367812 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:64527] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oij98gy.php"] [unique_id "addrszXObuzEuw8mNJu-LQAAARc"]
[Thu Apr 09 17:04:51.939174 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:64053] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oij98gy.php"] [unique_id "addrszXObuzEuw8mNJu-MwAAAQU"]
[Thu Apr 09 17:04:52.527934 2026] [:error] [pid 24515:tid 24521] [client 20.240.63.86:64452] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "addrtK1OMnvM2fMnB1NeagAAAAI"]
[Thu Apr 09 17:04:53.111753 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:63437] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "addrta1OMnvM2fMnB1NecQAAAAE"]
[Thu Apr 09 17:04:53.942005 2026] [:error] [pid 24927:tid 24939] [client 20.240.63.86:63976] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "addrtTXObuzEuw8mNJu-NgAAAQk"]
[Thu Apr 09 17:04:54.566271 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:63962] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "addrtjXObuzEuw8mNJu-OgAAAQ8"]
[Thu Apr 09 17:04:55.137565 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:64479] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/turkshell.php"] [unique_id "addrtzXObuzEuw8mNJu-QAAAAQc"]
[Thu Apr 09 17:04:55.870153 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:64049] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/turkshell.php"] [unique_id "addrt8De826HlFeoLPJT3AAAAVc"]
[Thu Apr 09 17:04:56.527276 2026] [:error] [pid 20837:tid 20843] [client 20.240.63.86:64498] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/turkshell.php"] [unique_id "addruPSL71FHZkjrGzO5lQAAAYQ"]
[Thu Apr 09 17:04:57.212231 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:64031] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/turkshell.php"] [unique_id "addrua1OMnvM2fMnB1NefwAAAAk"]
[Thu Apr 09 17:04:57.770020 2026] [:error] [pid 18477:tid 18490] [client 20.240.63.86:64463] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "addrucDe826HlFeoLPJT5AAAAUs"]
[Thu Apr 09 17:04:58.325148 2026] [:error] [pid 18477:tid 18496] [client 20.240.63.86:63551] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "addrusDe826HlFeoLPJT6QAAAVE"]
[Thu Apr 09 17:04:59.190209 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:63483] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "addruzXObuzEuw8mNJu-aAAAAQg"]
[Thu Apr 09 17:04:59.798046 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:65518] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "addruzXObuzEuw8mNJu-cwAAAQs"]
[Thu Apr 09 17:05:00.390614 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:63433] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qqa.php"] [unique_id "addrvDXObuzEuw8mNJu-eAAAAQg"]
[Thu Apr 09 17:05:01.126321 2026] [:error] [pid 20837:tid 20852] [client 20.240.63.86:64544] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qqa.php"] [unique_id "addrvfSL71FHZkjrGzO5mAAAAY0"]
[Thu Apr 09 17:05:01.719002 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:63456] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qqa.php"] [unique_id "addrvcDe826HlFeoLPJT7QAAAUk"]
[Thu Apr 09 17:05:02.283505 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:65509] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qqa.php"] [unique_id "addrvsDe826HlFeoLPJT7gAAAVA"]
[Thu Apr 09 17:05:02.928551 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:63543] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "addrvjXObuzEuw8mNJu-kQAAAQ8"]
[Thu Apr 09 17:05:03.563089 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:63471] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "addrvzXObuzEuw8mNJu-mAAAAQY"]
[Thu Apr 09 17:05:04.118917 2026] [:error] [pid 18477:tid 18484] [client 20.240.63.86:64522] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "addrwMDe826HlFeoLPJT8QAAAUU"]
[Thu Apr 09 17:05:04.734305 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:64007] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "addrwMDe826HlFeoLPJT9AAAAVI"]
[Thu Apr 09 17:05:05.442913 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:64483] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "addrwcDe826HlFeoLPJT9wAAAU4"]
[Thu Apr 09 17:05:06.073385 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:64457] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "addrwjXObuzEuw8mNJu-pAAAAQY"]
[Thu Apr 09 17:05:06.688576 2026] [:error] [pid 20837:tid 20841] [client 20.240.63.86:65526] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "addrwvSL71FHZkjrGzO5nQAAAYI"]
[Thu Apr 09 17:05:07.607325 2026] [:error] [pid 24517:tid 24578] [client 20.240.63.86:64480] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "addrw3boYEn2ZFM_PS9nGwAAAIQ"]
[Thu Apr 09 17:05:08.245160 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:64450] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "addrxDXObuzEuw8mNJu-rgAAAQQ"]
[Thu Apr 09 17:05:08.784345 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:64529] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "addrxDXObuzEuw8mNJu-sgAAAQc"]
[Thu Apr 09 17:05:09.545039 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:63442] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "addrxTXObuzEuw8mNJu-ugAAAQY"]
[Thu Apr 09 17:05:10.128575 2026] [:error] [pid 24515:tid 24519] [client 20.240.63.86:64045] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "addrxq1OMnvM2fMnB1NevgAAAAA"]
[Thu Apr 09 17:05:10.803556 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:63541] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "addrxjXObuzEuw8mNJu-xAAAAQA"]
[Thu Apr 09 17:05:11.340119 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:64009] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "addrx8De826HlFeoLPJUAwAAAVA"]
[Thu Apr 09 17:05:11.869036 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:63981] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "addrxzXObuzEuw8mNJu-yQAAARU"]
[Thu Apr 09 17:05:12.409757 2026] [:error] [pid 24624:tid 24632] [client 20.240.63.86:64018] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "addryO4Jn-WvK1ZBTviizwAAAMY"]
[Thu Apr 09 17:05:12.950483 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:64475] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "addryDXObuzEuw8mNJu-0gAAARQ"]
[Thu Apr 09 17:05:13.496559 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:63946] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "addryTXObuzEuw8mNJu-1wAAAQA"]
[Thu Apr 09 17:05:14.025909 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:63540] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "addryjXObuzEuw8mNJu-3gAAARU"]
[Thu Apr 09 17:05:14.562171 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:65488] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "addrysDe826HlFeoLPJUCAAAAVY"]
[Thu Apr 09 17:05:15.151098 2026] [:error] [pid 24515:tid 24542] [client 20.240.63.86:63441] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "addry61OMnvM2fMnB1Ne0gAAABc"]
[Thu Apr 09 17:05:15.714668 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:65475] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "addry8De826HlFeoLPJUCQAAAU4"]
[Thu Apr 09 17:05:16.300917 2026] [:error] [pid 24624:tid 24648] [client 20.240.63.86:64574] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "addrzO4Jn-WvK1ZBTvii1wAAANY"]
[Thu Apr 09 17:05:16.913039 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:64024] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "addrzMDe826HlFeoLPJUCgAAAUA"]
[Thu Apr 09 17:05:17.528410 2026] [:error] [pid 24516:tid 24569] [client 20.240.63.86:63937] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "addrzdhW7vSS-UkeWCUQzAAAAFY"]
[Thu Apr 09 17:05:18.078748 2026] [:error] [pid 24517:tid 24584] [client 20.240.63.86:64519] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "addrznboYEn2ZFM_PS9nHgAAAIo"]
[Thu Apr 09 17:05:18.761877 2026] [:error] [pid 24515:tid 24534] [client 20.240.63.86:63443] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "addrzq1OMnvM2fMnB1Ne3gAAAA8"]
[Thu Apr 09 17:05:19.295101 2026] [:error] [pid 20837:tid 20858] [client 20.240.63.86:63995] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "addrz_SL71FHZkjrGzO5swAAAZM"]
[Thu Apr 09 17:05:20.100271 2026] [:error] [pid 24517:tid 24574] [client 20.240.63.86:63496] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "addr0HboYEn2ZFM_PS9nIAAAAIA"]
[Thu Apr 09 17:05:20.676501 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:64014] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "addr0DXObuzEuw8mNJu-9AAAAQg"]
[Thu Apr 09 17:05:21.222365 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:63956] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "addr0TXObuzEuw8mNJu-9gAAAQw"]
[Thu Apr 09 17:05:21.793672 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:63500] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "addr0e4Jn-WvK1ZBTvii6gAAANA"]
[Thu Apr 09 17:05:22.510040 2026] [:error] [pid 24517:tid 24580] [client 20.240.63.86:64032] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "addr0nboYEn2ZFM_PS9nIgAAAIY"]
[Thu Apr 09 17:05:23.184264 2026] [:error] [pid 24624:tid 24636] [client 20.240.63.86:65484] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "addr0-4Jn-WvK1ZBTvii7QAAAMo"]
[Thu Apr 09 17:05:23.813843 2026] [:error] [pid 24515:tid 24533] [client 20.240.63.86:64490] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "addr061OMnvM2fMnB1Ne5AAAAA4"]
[Thu Apr 09 17:05:24.343188 2026] [:error] [pid 20837:tid 20855] [client 20.240.63.86:65473] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "addr1PSL71FHZkjrGzO5wQAAAZA"]
[Thu Apr 09 17:05:24.944027 2026] [:error] [pid 24515:tid 24542] [client 20.240.63.86:62851] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "addr1K1OMnvM2fMnB1Ne5gAAABc"]
[Thu Apr 09 17:05:25.470828 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:63515] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "addr1a1OMnvM2fMnB1Ne6QAAAAQ"]
[Thu Apr 09 17:05:26.032861 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:64534] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "addr1sDe826HlFeoLPJUFwAAAUI"]
[Thu Apr 09 17:05:26.634636 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:64489] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "addr1jXObuzEuw8mNJu_AQAAARg"]
[Thu Apr 09 17:05:27.363217 2026] [:error] [pid 24624:tid 24631] [client 20.240.63.86:63944] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "addr1-4Jn-WvK1ZBTvii8wAAAMU"]
[Thu Apr 09 17:05:27.956783 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:64020] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "addr1zXObuzEuw8mNJu_BQAAAQg"]
[Thu Apr 09 17:05:28.726692 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:64506] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "addr2DXObuzEuw8mNJu_BwAAAQ8"]
[Thu Apr 09 17:05:29.329828 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:64551] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "addr2e4Jn-WvK1ZBTvii9QAAANc"]
[Thu Apr 09 17:05:29.903984 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:65481] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.mopj.php"] [unique_id "addr2e4Jn-WvK1ZBTvii9gAAANg"]
[Thu Apr 09 17:05:30.593132 2026] [:error] [pid 24517:tid 24598] [client 20.240.63.86:65521] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.mopj.php"] [unique_id "addr2nboYEn2ZFM_PS9nJwAAAJg"]
[Thu Apr 09 17:05:31.166282 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:65522] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.mopj.php"] [unique_id "addr2zXObuzEuw8mNJu_DwAAARg"]
[Thu Apr 09 17:05:31.755442 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:63994] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.mopj.php"] [unique_id "addr2zXObuzEuw8mNJu_EwAAARM"]
[Thu Apr 09 17:05:32.299590 2026] [:error] [pid 24624:tid 24628] [client 20.240.63.86:61378] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "addr3O4Jn-WvK1ZBTvii-gAAAMI"]
[Thu Apr 09 17:05:32.929890 2026] [:error] [pid 24517:tid 24583] [client 20.240.63.86:60203] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "addr3HboYEn2ZFM_PS9nKAAAAIk"]
[Thu Apr 09 17:05:33.516513 2026] [:error] [pid 24515:tid 24534] [client 20.240.63.86:63530] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "addr3a1OMnvM2fMnB1Ne8QAAAA8"]
[Thu Apr 09 17:05:53.638198 2026] [proxy_fcgi:error] [pid 24927:tid 24934] [client 20.240.63.86:64557] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:06:08.282124 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 20.240.63.86:63432] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:06:21.422069 2026] [proxy_fcgi:error] [pid 24516:tid 24553] [client 20.240.63.86:64039] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:06:32.545591 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:64573] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "addsGNhW7vSS-UkeWCUQ8wAAAFA"]
[Thu Apr 09 17:06:33.706800 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:64057] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "addsGa1OMnvM2fMnB1NfOgAAAAc"]
[Thu Apr 09 17:06:34.883001 2026] [:error] [pid 24515:tid 24533] [client 20.240.63.86:63460] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "addsGq1OMnvM2fMnB1NfQQAAAA4"]
[Thu Apr 09 17:06:36.507717 2026] [:error] [pid 24515:tid 24543] [client 20.240.63.86:64044] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "addsHK1OMnvM2fMnB1NfSAAAABg"]
[Thu Apr 09 17:06:36.823712 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:64515] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "addsHO4Jn-WvK1ZBTvijWAAAAMc"]
[Thu Apr 09 17:06:37.415286 2026] [:error] [pid 24624:tid 24638] [client 20.240.63.86:62855] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "addsHe4Jn-WvK1ZBTvijWQAAAMw"]
[Thu Apr 09 17:06:37.970451 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:63484] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "addsHTXObuzEuw8mNJu_tAAAAQM"]
[Thu Apr 09 17:06:38.519120 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:65505] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "addsHjXObuzEuw8mNJu_uQAAAQA"]
[Thu Apr 09 17:06:39.082566 2026] [:error] [pid 24515:tid 24527] [client 20.240.63.86:63980] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "addsH61OMnvM2fMnB1NfSQAAAAg"]
[Thu Apr 09 17:06:39.757642 2026] [:error] [pid 18477:tid 18496] [client 20.240.63.86:64040] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "addsH8De826HlFeoLPJUigAAAVE"]
[Thu Apr 09 17:06:40.311037 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:65504] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "addsIMDe826HlFeoLPJUjQAAAVY"]
[Thu Apr 09 17:06:40.844187 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:60196] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "addsIDXObuzEuw8mNJu_vQAAARU"]
[Thu Apr 09 17:06:41.446316 2026] [:error] [pid 20837:tid 20858] [client 20.240.63.86:63463] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "addsIfSL71FHZkjrGzO59gAAAZM"]
[Thu Apr 09 17:06:42.080917 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:64551] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "addsIjXObuzEuw8mNJu_xAAAAQ0"]
[Thu Apr 09 17:06:42.673301 2026] [:error] [pid 18477:tid 18482] [client 20.240.63.86:64470] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "addsIsDe826HlFeoLPJUkgAAAUM"]
[Thu Apr 09 17:06:43.252723 2026] [:error] [pid 24516:tid 24559] [client 20.240.63.86:63939] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "addsI9hW7vSS-UkeWCUQ_AAAAEw"]
[Thu Apr 09 17:06:43.833214 2026] [:error] [pid 24516:tid 24555] [client 20.240.63.86:63512] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "addsI9hW7vSS-UkeWCUQ_QAAAEg"]
[Thu Apr 09 17:06:44.360876 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:63969] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "addsJNhW7vSS-UkeWCURAQAAAFA"]
[Thu Apr 09 17:06:45.009342 2026] [:error] [pid 24517:tid 24594] [client 20.240.63.86:63965] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "addsJXboYEn2ZFM_PS9nVgAAAJQ"]
[Thu Apr 09 17:06:45.567785 2026] [:error] [pid 20837:tid 20846] [client 20.240.63.86:63531] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "addsJfSL71FHZkjrGzO5-AAAAYc"]
[Thu Apr 09 17:06:46.342981 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:61480] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "addsJq1OMnvM2fMnB1NfTwAAABI"]
[Thu Apr 09 17:06:46.973189 2026] [:error] [pid 24517:tid 24575] [client 20.240.63.86:64553] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "addsJnboYEn2ZFM_PS9nWQAAAIE"]
[Thu Apr 09 17:06:47.639761 2026] [:error] [pid 24517:tid 24577] [client 20.240.63.86:63523] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "addsJ3boYEn2ZFM_PS9nXAAAAIM"]
[Thu Apr 09 17:06:48.294713 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:65512] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "addsKDXObuzEuw8mNJu_yAAAARg"]
[Thu Apr 09 17:06:48.831207 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:60198] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "addsKNhW7vSS-UkeWCURCAAAAE4"]
[Thu Apr 09 17:06:49.459287 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:63534] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "addsKTXObuzEuw8mNJu_ygAAARU"]
[Thu Apr 09 17:06:50.130961 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:62902] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "addsKjXObuzEuw8mNJu_zQAAARY"]
[Thu Apr 09 17:06:50.721311 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:63546] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "addsKjXObuzEuw8mNJu_0AAAAQ0"]
[Thu Apr 09 17:06:51.285620 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:63454] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "addsK61OMnvM2fMnB1NfXQAAABI"]
[Thu Apr 09 17:06:51.909382 2026] [:error] [pid 24515:tid 24540] [client 20.240.63.86:64045] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "addsK61OMnvM2fMnB1NfXwAAABU"]
[Thu Apr 09 17:06:52.484979 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:64505] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "addsLK1OMnvM2fMnB1NfYAAAAAo"]
[Thu Apr 09 17:06:53.087574 2026] [:error] [pid 24515:tid 24542] [client 20.240.63.86:63984] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "addsLa1OMnvM2fMnB1NfYQAAABc"]
[Thu Apr 09 17:06:53.646015 2026] [:error] [pid 24515:tid 24543] [client 20.240.63.86:64514] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "addsLa1OMnvM2fMnB1NfYwAAABg"]
[Thu Apr 09 17:06:54.265400 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:64572] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "addsLjXObuzEuw8mNJu_0QAAAQU"]
[Thu Apr 09 17:06:54.892497 2026] [:error] [pid 20837:tid 20854] [client 20.240.63.86:63467] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "addsLvSL71FHZkjrGzO6AAAAAY8"]
[Thu Apr 09 17:06:55.502060 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:64001] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "addsLzXObuzEuw8mNJu_2AAAAQA"]
[Thu Apr 09 17:06:56.184881 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:64017] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "addsMK1OMnvM2fMnB1NfagAAABQ"]
[Thu Apr 09 17:06:56.727442 2026] [:error] [pid 24515:tid 24536] [client 20.240.63.86:63982] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "addsMK1OMnvM2fMnB1NfbgAAABE"]
[Thu Apr 09 17:06:57.263804 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:63955] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "addsMa1OMnvM2fMnB1NfcQAAAAk"]
[Thu Apr 09 17:06:57.913393 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:63524] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "addsMe4Jn-WvK1ZBTvijXAAAANA"]
[Thu Apr 09 17:06:58.451781 2026] [:error] [pid 24624:tid 24637] [client 20.240.63.86:64481] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "addsMu4Jn-WvK1ZBTvijXQAAAMs"]
[Thu Apr 09 17:06:59.074766 2026] [:error] [pid 20837:tid 20842] [client 20.240.63.86:63959] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "addsM_SL71FHZkjrGzO6AwAAAYM"]
[Thu Apr 09 17:06:59.605864 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:64022] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "addsM61OMnvM2fMnB1NfdgAAAAs"]
[Thu Apr 09 17:07:00.705950 2026] [:error] [pid 20837:tid 20862] [client 20.240.63.86:64476] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "addsNPSL71FHZkjrGzO6BAAAAZc"]
[Thu Apr 09 17:07:01.373309 2026] [:error] [pid 20837:tid 20856] [client 20.240.63.86:63471] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "addsNfSL71FHZkjrGzO6BQAAAZE"]
[Thu Apr 09 17:07:01.921698 2026] [:error] [pid 24515:tid 24536] [client 20.240.63.86:63952] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "addsNa1OMnvM2fMnB1NffAAAABE"]
[Thu Apr 09 17:07:02.463494 2026] [:error] [pid 24624:tid 24635] [client 20.240.63.86:64568] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "addsNu4Jn-WvK1ZBTvijYQAAAMk"]
[Thu Apr 09 17:07:03.002872 2026] [:error] [pid 24624:tid 24641] [client 20.240.63.86:63449] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "addsN-4Jn-WvK1ZBTvijYwAAAM8"]
[Thu Apr 09 17:07:03.629592 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:63953] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "addsN61OMnvM2fMnB1NffgAAABI"]
[Thu Apr 09 17:07:04.284325 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:61502] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "addsOK1OMnvM2fMnB1NfgQAAAAo"]
[Thu Apr 09 17:07:05.062854 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:63427] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "addsOcDe826HlFeoLPJUpwAAAVI"]
[Thu Apr 09 17:07:05.699742 2026] [:error] [pid 24516:tid 24560] [client 20.240.63.86:64030] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "addsOdhW7vSS-UkeWCUREwAAAE0"]
[Thu Apr 09 17:07:06.237638 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:64511] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "addsOjXObuzEuw8mNJu_5gAAARM"]
[Thu Apr 09 17:07:06.777149 2026] [:error] [pid 20837:tid 20858] [client 20.240.63.86:63432] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "addsOvSL71FHZkjrGzO6CQAAAZM"]
[Thu Apr 09 17:07:07.372465 2026] [:error] [pid 24516:tid 24550] [client 20.240.63.86:62853] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "addsO9hW7vSS-UkeWCURFwAAAEM"]
[Thu Apr 09 17:07:07.907045 2026] [:error] [pid 20837:tid 20846] [client 20.240.63.86:63968] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "addsO_SL71FHZkjrGzO6DAAAAYc"]
[Thu Apr 09 17:07:08.626906 2026] [:error] [pid 24515:tid 24524] [client 20.240.63.86:64559] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "addsPK1OMnvM2fMnB1NfhQAAAAU"]
[Thu Apr 09 17:07:09.261312 2026] [:error] [pid 24515:tid 24541] [client 20.240.63.86:63488] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "addsPa1OMnvM2fMnB1NfhwAAABY"]
[Thu Apr 09 17:07:09.811731 2026] [:error] [pid 20837:tid 20844] [client 20.240.63.86:65519] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "addsPfSL71FHZkjrGzO6DQAAAYU"]
[Thu Apr 09 17:07:10.381035 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:65493] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "addsPq1OMnvM2fMnB1NfiwAAAA0"]
[Thu Apr 09 17:07:11.019285 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:64046] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "addsPzXObuzEuw8mNJu_7AAAARU"]
[Thu Apr 09 17:07:11.549127 2026] [:error] [pid 24515:tid 24525] [client 20.240.63.86:64459] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "addsP61OMnvM2fMnB1NfjwAAAAY"]
[Thu Apr 09 17:07:12.080055 2026] [:error] [pid 24516:tid 24567] [client 20.240.63.86:65483] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "addsQNhW7vSS-UkeWCURHgAAAFQ"]
[Thu Apr 09 17:07:12.759327 2026] [:error] [pid 24927:tid 24946] [client 20.240.63.86:63944] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "addsQDXObuzEuw8mNJu_7wAAARA"]
[Thu Apr 09 17:07:13.341885 2026] [:error] [pid 24517:tid 24582] [client 20.240.63.86:63495] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "addsQXboYEn2ZFM_PS9nYgAAAIg"]
[Thu Apr 09 17:07:13.872211 2026] [:error] [pid 20837:tid 20860] [client 20.240.63.86:64509] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "addsQfSL71FHZkjrGzO6EAAAAZU"]
[Thu Apr 09 17:07:14.431884 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:62796] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "addsQjXObuzEuw8mNJu_8gAAARI"]
[Thu Apr 09 17:07:14.959613 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:63539] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "addsQjXObuzEuw8mNJu_9gAAAQE"]
[Thu Apr 09 17:07:15.525663 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:63993] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "addsQzXObuzEuw8mNJu_-AAAARg"]
[Thu Apr 09 17:07:16.088981 2026] [:error] [pid 24927:tid 24939] [client 20.240.63.86:63511] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "addsRDXObuzEuw8mNJu_-gAAAQk"]
[Thu Apr 09 17:07:16.681760 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:64555] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "addsRDXObuzEuw8mNJu__AAAAQ8"]
[Thu Apr 09 17:07:17.249667 2026] [:error] [pid 24516:tid 24551] [client 20.240.63.86:64464] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "addsRdhW7vSS-UkeWCURJQAAAEQ"]
[Thu Apr 09 17:07:17.780555 2026] [:error] [pid 24516:tid 24548] [client 20.240.63.86:63455] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "addsRdhW7vSS-UkeWCURKQAAAEE"]
[Thu Apr 09 17:07:18.315559 2026] [:error] [pid 24516:tid 24557] [client 20.240.63.86:64535] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "addsRthW7vSS-UkeWCURKgAAAEo"]
[Thu Apr 09 17:07:18.859076 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:61410] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "addsRjXObuzEuw8mNJvAAQAAAQQ"]
[Thu Apr 09 17:07:19.497224 2026] [:error] [pid 20837:tid 20842] [client 20.240.63.86:64545] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "addsR_SL71FHZkjrGzO6FQAAAYM"]
[Thu Apr 09 17:07:20.327442 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:63508] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "addsSDXObuzEuw8mNJvABAAAAQc"]
[Thu Apr 09 17:07:21.257454 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:63430] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "addsSTXObuzEuw8mNJvACAAAAQI"]
[Thu Apr 09 17:07:21.867563 2026] [:error] [pid 24516:tid 24567] [client 20.240.63.86:64051] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "addsSdhW7vSS-UkeWCURLAAAAFQ"]
[Thu Apr 09 17:07:22.451276 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:61413] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "addsSsDe826HlFeoLPJUsAAAAVg"]
[Thu Apr 09 17:07:23.029361 2026] [:error] [pid 18477:tid 18485] [client 20.240.63.86:64493] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "addsS8De826HlFeoLPJUsgAAAUY"]
[Thu Apr 09 17:07:23.577279 2026] [:error] [pid 24624:tid 24637] [client 20.240.63.86:65497] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "addsS-4Jn-WvK1ZBTvijbAAAAMs"]
[Thu Apr 09 17:07:24.123562 2026] [:error] [pid 24516:tid 24549] [client 20.240.63.86:62835] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "addsTNhW7vSS-UkeWCURMAAAAEI"]
[Thu Apr 09 17:07:24.804839 2026] [:error] [pid 24516:tid 24560] [client 20.240.63.86:63493] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "addsTNhW7vSS-UkeWCURMgAAAE0"]
[Thu Apr 09 17:07:25.436976 2026] [:error] [pid 24516:tid 24551] [client 20.240.63.86:64005] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "addsTdhW7vSS-UkeWCURNgAAAEQ"]
[Thu Apr 09 17:07:25.991698 2026] [:error] [pid 24516:tid 24556] [client 20.240.63.86:63486] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "addsTdhW7vSS-UkeWCUROAAAAEk"]
[Thu Apr 09 17:07:26.545269 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:63941] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "addsTjXObuzEuw8mNJvAEQAAARI"]
[Thu Apr 09 17:07:27.115451 2026] [:error] [pid 24515:tid 24538] [client 20.240.63.86:64573] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "addsT61OMnvM2fMnB1NfkwAAABM"]
[Thu Apr 09 17:07:27.751402 2026] [:error] [pid 24516:tid 24567] [client 20.240.63.86:63958] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "addsT9hW7vSS-UkeWCURPQAAAFQ"]
[Thu Apr 09 17:07:49.515422 2026] [proxy_fcgi:error] [pid 24515:tid 24523] [client 20.240.63.86:64558] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:08:08.095767 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:64520] [client 20.240.63.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addseMDe826HlFeoLPJU8gAAAUI"]
[Thu Apr 09 17:08:14.376750 2026] [proxy_fcgi:error] [pid 24927:tid 24946] [client 20.240.63.86:64041] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:08:15.241524 2026] [proxy_fcgi:error] [pid 24927:tid 24953] [client 20.240.63.86:64455] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:08:15.892760 2026] [autoindex:error] [pid 20837:tid 20845] [client 20.240.63.86:60189] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 17:08:27.957207 2026] [proxy_fcgi:error] [pid 24517:tid 24591] [client 20.240.63.86:64567] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:09:01.445782 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:65501] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addsrcDe826HlFeoLPJVDQAAAU4"]
[Thu Apr 09 17:09:02.139164 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:64022] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addsrjXObuzEuw8mNJvBAQAAAQE"]
[Thu Apr 09 17:09:02.674734 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:63485] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addsrq1OMnvM2fMnB1Nf1gAAABI"]
[Thu Apr 09 17:09:03.505755 2026] [:error] [pid 24517:tid 24580] [client 20.240.63.86:61400] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addsr3boYEn2ZFM_PS9ndwAAAIY"]
[Thu Apr 09 17:09:04.103691 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:61418] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "addssDXObuzEuw8mNJvBBwAAAQg"]
[Thu Apr 09 17:09:04.660590 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:63513] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "addssDXObuzEuw8mNJvBCgAAAQ8"]
[Thu Apr 09 17:09:05.330009 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:62809] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "addssTXObuzEuw8mNJvBEAAAARE"]
[Thu Apr 09 17:09:06.006101 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:63440] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "addssjXObuzEuw8mNJvBEwAAAQM"]
[Thu Apr 09 17:09:06.619102 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:62891] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "addssjXObuzEuw8mNJvBFAAAAQA"]
[Thu Apr 09 17:09:07.222444 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:64027] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "addss8De826HlFeoLPJVDgAAAVc"]
[Thu Apr 09 17:09:08.015336 2026] [:error] [pid 18477:tid 18487] [client 20.240.63.86:63474] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "addstMDe826HlFeoLPJVEgAAAUg"]
[Thu Apr 09 17:09:08.559564 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:63998] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "addstDXObuzEuw8mNJvBFwAAAQo"]
[Thu Apr 09 17:09:09.461574 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:63545] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "addstTXObuzEuw8mNJvBGQAAARU"]
[Thu Apr 09 17:09:10.023518 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:64542] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "addstjXObuzEuw8mNJvBGgAAAQ0"]
[Thu Apr 09 17:09:10.637152 2026] [:error] [pid 24927:tid 24946] [client 20.240.63.86:63987] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "addstjXObuzEuw8mNJvBHQAAARA"]
[Thu Apr 09 17:09:11.286517 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:63968] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "addstzXObuzEuw8mNJvBIAAAAQY"]
[Thu Apr 09 17:09:12.271526 2026] [:error] [pid 24624:tid 24635] [client 20.240.63.86:62896] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "addsuO4Jn-WvK1ZBTvijqwAAAMk"]
[Thu Apr 09 17:09:12.853277 2026] [:error] [pid 24516:tid 24566] [client 20.240.63.86:64003] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "addsuNhW7vSS-UkeWCURdAAAAFM"]
[Thu Apr 09 17:09:13.614392 2026] [:error] [pid 20837:tid 20848] [client 20.240.63.86:62852] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "addsufSL71FHZkjrGzO6WAAAAYk"]
[Thu Apr 09 17:09:14.253067 2026] [:error] [pid 24624:tid 24646] [client 20.240.63.86:62817] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "addsuu4Jn-WvK1ZBTvijrwAAANQ"]
[Thu Apr 09 17:09:14.877333 2026] [:error] [pid 24624:tid 24644] [client 20.240.63.86:61429] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "addsuu4Jn-WvK1ZBTvijsQAAANI"]
[Thu Apr 09 17:09:15.596110 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:63992] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "addsu8De826HlFeoLPJVGgAAAVc"]
[Thu Apr 09 17:09:16.135415 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:64010] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "addsvMDe826HlFeoLPJVGwAAAVg"]
[Thu Apr 09 17:09:16.676245 2026] [:error] [pid 18477:tid 18485] [client 20.240.63.86:63966] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "addsvMDe826HlFeoLPJVHgAAAUY"]
[Thu Apr 09 17:09:17.237438 2026] [:error] [pid 24515:tid 24541] [client 20.240.63.86:64463] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "addsva1OMnvM2fMnB1Nf3AAAABY"]
[Thu Apr 09 17:09:17.837578 2026] [:error] [pid 24516:tid 24556] [client 20.240.63.86:63957] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "addsvdhW7vSS-UkeWCUReAAAAEk"]
[Thu Apr 09 17:09:18.594153 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:61396] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "addsvjXObuzEuw8mNJvBJAAAARc"]
[Thu Apr 09 17:09:19.287421 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:63520] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "addsvzXObuzEuw8mNJvBJgAAARU"]
[Thu Apr 09 17:09:19.886764 2026] [:error] [pid 20837:tid 20862] [client 20.240.63.86:63985] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "addsv_SL71FHZkjrGzO6WQAAAZc"]
[Thu Apr 09 17:09:20.554303 2026] [:error] [pid 20837:tid 20843] [client 20.240.63.86:62895] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "addswPSL71FHZkjrGzO6WwAAAYQ"]
[Thu Apr 09 17:09:21.079630 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:63528] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "addswTXObuzEuw8mNJvBKAAAAQw"]
[Thu Apr 09 17:09:21.683331 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:63983] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "addswcDe826HlFeoLPJVIwAAAVU"]
[Thu Apr 09 17:09:22.256466 2026] [:error] [pid 20837:tid 20842] [client 20.240.63.86:60169] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "addswvSL71FHZkjrGzO6XgAAAYM"]
[Thu Apr 09 17:09:22.844912 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:64468] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "addswthW7vSS-UkeWCURewAAAE4"]
[Thu Apr 09 17:09:23.428313 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:61379] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "addswzXObuzEuw8mNJvBLQAAAQY"]
[Thu Apr 09 17:09:24.066715 2026] [:error] [pid 18477:tid 18498] [client 20.240.63.86:63536] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "addsxMDe826HlFeoLPJVJQAAAVM"]
[Thu Apr 09 17:09:24.661399 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:64024] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "addsxMDe826HlFeoLPJVJgAAAUQ"]
[Thu Apr 09 17:09:25.192604 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:64033] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "addsxTXObuzEuw8mNJvBMgAAAQI"]
[Thu Apr 09 17:09:25.811580 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:63442] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "addsxTXObuzEuw8mNJvBMwAAARE"]
[Thu Apr 09 17:09:26.338971 2026] [:error] [pid 20837:tid 20858] [client 20.240.63.86:64062] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "addsxvSL71FHZkjrGzO6XwAAAZM"]
[Thu Apr 09 17:09:26.873909 2026] [:error] [pid 18477:tid 18486] [client 20.240.63.86:63452] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "addsxsDe826HlFeoLPJVKwAAAUc"]
[Thu Apr 09 17:09:27.525097 2026] [:error] [pid 20837:tid 20863] [client 20.240.63.86:64028] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "addsx_SL71FHZkjrGzO6YQAAAZg"]
[Thu Apr 09 17:09:28.136806 2026] [:error] [pid 20837:tid 20855] [client 20.240.63.86:62788] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "addsyPSL71FHZkjrGzO6YwAAAZA"]
[Thu Apr 09 17:09:28.744853 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:61478] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "addsyO4Jn-WvK1ZBTvijuwAAANg"]
[Thu Apr 09 17:09:29.334834 2026] [:error] [pid 24624:tid 24641] [client 20.240.63.86:63440] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "addsye4Jn-WvK1ZBTvijvQAAAM8"]
[Thu Apr 09 17:09:29.915295 2026] [:error] [pid 24516:tid 24554] [client 20.240.63.86:63532] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "addsydhW7vSS-UkeWCURfgAAAEc"]
[Thu Apr 09 17:09:30.470702 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:62856] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "addsysDe826HlFeoLPJVLwAAAUw"]
[Thu Apr 09 17:09:31.000760 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:61488] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "addsyjXObuzEuw8mNJvBPAAAARg"]
[Thu Apr 09 17:09:31.532658 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:61383] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "addsyzXObuzEuw8mNJvBQwAAARU"]
[Thu Apr 09 17:09:32.923851 2026] [:error] [pid 24624:tid 24628] [client 20.240.63.86:62795] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "addszO4Jn-WvK1ZBTvijvwAAAMI"]
[Thu Apr 09 17:09:33.491053 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:63469] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "addszTXObuzEuw8mNJvBVQAAAQU"]
[Thu Apr 09 17:09:34.153839 2026] [:error] [pid 24516:tid 24565] [client 20.240.63.86:60172] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "addszthW7vSS-UkeWCURfwAAAFI"]
[Thu Apr 09 17:09:34.757464 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:63470] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addszsDe826HlFeoLPJVUAAAAVY"]
[Thu Apr 09 17:09:35.331109 2026] [:error] [pid 20837:tid 20851] [client 20.240.63.86:64524] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addsz_SL71FHZkjrGzO6ZwAAAYw"]
[Thu Apr 09 17:09:35.864572 2026] [:error] [pid 20837:tid 20854] [client 20.240.63.86:63970] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addsz_SL71FHZkjrGzO6aQAAAY8"]
[Thu Apr 09 17:09:36.396784 2026] [:error] [pid 20837:tid 20848] [client 20.240.63.86:65514] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adds0PSL71FHZkjrGzO6agAAAYk"]
[Thu Apr 09 17:09:37.018261 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:62854] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "adds0TXObuzEuw8mNJvBaQAAAQA"]
[Thu Apr 09 17:09:37.616448 2026] [:error] [pid 20837:tid 20862] [client 20.240.63.86:63977] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "adds0fSL71FHZkjrGzO6awAAAZc"]
[Thu Apr 09 17:09:38.153998 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:64556] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "adds0u4Jn-WvK1ZBTvijwgAAANA"]
[Thu Apr 09 17:09:38.718186 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:64494] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "adds0jXObuzEuw8mNJvBbAAAARg"]
[Thu Apr 09 17:09:39.331538 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:64503] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adds0zXObuzEuw8mNJvBbgAAAQ8"]
[Thu Apr 09 17:09:39.951201 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:62911] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adds0zXObuzEuw8mNJvBcgAAAQU"]
[Thu Apr 09 17:09:40.491035 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:61438] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adds1DXObuzEuw8mNJvBdwAAAQQ"]
[Thu Apr 09 17:09:41.026479 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:64500] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adds1cDe826HlFeoLPJVVwAAAVI"]
[Thu Apr 09 17:09:41.605046 2026] [:error] [pid 18477:tid 18499] [client 20.240.63.86:64025] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "adds1cDe826HlFeoLPJVWwAAAVQ"]
[Thu Apr 09 17:09:42.647488 2026] [:error] [pid 18477:tid 18487] [client 20.240.63.86:64012] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "adds1sDe826HlFeoLPJVXAAAAUg"]
[Thu Apr 09 17:09:43.365388 2026] [:error] [pid 18477:tid 18489] [client 20.240.63.86:64475] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "adds18De826HlFeoLPJVXwAAAUo"]
[Thu Apr 09 17:09:43.985467 2026] [:error] [pid 18477:tid 18494] [client 20.240.63.86:63472] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "adds18De826HlFeoLPJVYgAAAU8"]
[Thu Apr 09 17:09:44.533223 2026] [:error] [pid 24624:tid 24643] [client 20.240.63.86:63424] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "adds2O4Jn-WvK1ZBTvijyAAAANE"]
[Thu Apr 09 17:09:45.128051 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:64513] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "adds2cDe826HlFeoLPJVZQAAAUw"]
[Thu Apr 09 17:09:45.674979 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:64000] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "adds2TXObuzEuw8mNJvBewAAARI"]
[Thu Apr 09 17:09:46.278890 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:64530] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "adds2jXObuzEuw8mNJvBfAAAAQU"]
[Thu Apr 09 17:09:46.919627 2026] [:error] [pid 20837:tid 20853] [client 20.240.63.86:64506] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "adds2vSL71FHZkjrGzO6bwAAAY4"]
[Thu Apr 09 17:09:47.471802 2026] [:error] [pid 24624:tid 24648] [client 20.240.63.86:63989] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "adds2-4Jn-WvK1ZBTvijygAAANY"]
[Thu Apr 09 17:09:48.000877 2026] [:error] [pid 24517:tid 24583] [client 20.240.63.86:63974] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "adds23boYEn2ZFM_PS9nhQAAAIk"]
[Thu Apr 09 17:09:48.659924 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:63943] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "adds3K1OMnvM2fMnB1Nf8QAAAAo"]
[Thu Apr 09 17:09:49.189874 2026] [:error] [pid 24517:tid 24593] [client 20.240.63.86:64008] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "adds3XboYEn2ZFM_PS9niQAAAJM"]
[Thu Apr 09 17:09:49.806957 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:60120] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "adds3e4Jn-WvK1ZBTvijzAAAANc"]
[Thu Apr 09 17:09:50.335093 2026] [:error] [pid 24624:tid 24627] [client 20.240.63.86:63971] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "adds3u4Jn-WvK1ZBTvij0QAAAME"]
[Thu Apr 09 17:09:50.894568 2026] [:error] [pid 24516:tid 24561] [client 20.240.63.86:64006] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "adds3thW7vSS-UkeWCURiAAAAE4"]
[Thu Apr 09 17:09:51.440128 2026] [:error] [pid 20837:tid 20863] [client 20.240.63.86:63975] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "adds3_SL71FHZkjrGzO6cAAAAZg"]
[Thu Apr 09 17:09:51.997340 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:64458] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "adds3zXObuzEuw8mNJvBfwAAAQQ"]
[Thu Apr 09 17:09:52.622864 2026] [:error] [pid 20837:tid 20846] [client 20.240.63.86:64467] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "adds4PSL71FHZkjrGzO6cQAAAYc"]
[Thu Apr 09 17:09:53.153349 2026] [:error] [pid 24516:tid 24567] [client 20.240.63.86:61486] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "adds4dhW7vSS-UkeWCURjAAAAFQ"]
[Thu Apr 09 17:09:53.776722 2026] [:error] [pid 24517:tid 24584] [client 20.240.63.86:61382] [client 20.240.63.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adds4XboYEn2ZFM_PS9niwAAAIo"]
[Thu Apr 09 17:09:54.341534 2026] [:error] [pid 20837:tid 20851] [client 20.240.63.86:62832] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "adds4vSL71FHZkjrGzO6dAAAAYw"]
[Thu Apr 09 17:09:54.941502 2026] [:error] [pid 18477:tid 18487] [client 20.240.63.86:63938] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "adds4sDe826HlFeoLPJVZgAAAUg"]
[Thu Apr 09 17:09:55.471214 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:62812] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "adds4zXObuzEuw8mNJvBgAAAARc"]
[Thu Apr 09 17:09:56.051762 2026] [:error] [pid 20837:tid 20843] [client 20.240.63.86:64478] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "adds5PSL71FHZkjrGzO6dwAAAYQ"]
[Thu Apr 09 17:09:56.924513 2026] [:error] [pid 18477:tid 18492] [client 20.240.63.86:63937] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adds5MDe826HlFeoLPJVZwAAAU0"]
[Thu Apr 09 17:09:57.503740 2026] [:error] [pid 24515:tid 24534] [client 20.240.63.86:63967] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adds5a1OMnvM2fMnB1Nf_AAAAA8"]
[Thu Apr 09 17:09:58.934892 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:64009] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adds5u4Jn-WvK1ZBTvij1QAAAMQ"]
[Thu Apr 09 17:10:04.901576 2026] [autoindex:error] [pid 24516:tid 24560] [client 20.240.63.86:63429] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 17:10:05.177780 2026] [autoindex:error] [pid 24624:tid 24646] [client 20.240.63.86:61416] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 17:10:23.584505 2026] [proxy_fcgi:error] [pid 24516:tid 24549] [client 20.240.63.86:63429] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:10:38.476567 2026] [proxy_fcgi:error] [pid 20837:tid 20843] [client 20.240.63.86:63995] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:10:51.805630 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 20.240.63.86:61416] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:10:52.660416 2026] [proxy_fcgi:error] [pid 24624:tid 24633] [client 20.240.63.86:63502] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 09 17:10:57.022728 2026] [:error] [pid 24515:tid 24531] [client 20.240.63.86:63990] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "addtIa1OMnvM2fMnB1NgIwAAAAw"]
[Thu Apr 09 17:10:57.660285 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:63550] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "addtITXObuzEuw8mNJvCDgAAARM"]
[Thu Apr 09 17:10:58.202451 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:64518] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "addtIjXObuzEuw8mNJvCEAAAAQE"]
[Thu Apr 09 17:10:58.768747 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:62889] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "addtIsDe826HlFeoLPJVoAAAAVU"]
[Thu Apr 09 17:10:59.488530 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:64021] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "addtIzXObuzEuw8mNJvCFgAAARU"]
[Thu Apr 09 17:11:00.032295 2026] [:error] [pid 24516:tid 24558] [client 20.240.63.86:64546] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "addtJNhW7vSS-UkeWCURwwAAAEs"]
[Thu Apr 09 17:11:00.649686 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:61468] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "addtJMDe826HlFeoLPJVogAAAUw"]
[Thu Apr 09 17:11:01.181973 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:64456] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "addtJe4Jn-WvK1ZBTvikBAAAAMQ"]
[Thu Apr 09 17:11:01.749668 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:64547] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "addtJcDe826HlFeoLPJVowAAAVI"]
[Thu Apr 09 17:11:02.344385 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:63445] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "addtJjXObuzEuw8mNJvCGAAAARc"]
[Thu Apr 09 17:11:02.958506 2026] [:error] [pid 24624:tid 24648] [client 20.240.63.86:64449] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "addtJu4Jn-WvK1ZBTvikBQAAANY"]
[Thu Apr 09 17:11:03.524138 2026] [:error] [pid 24515:tid 24538] [client 20.240.63.86:63546] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "addtJ61OMnvM2fMnB1NgJwAAABM"]
[Thu Apr 09 17:11:04.172382 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:63535] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "addtKMDe826HlFeoLPJVqAAAAUI"]
[Thu Apr 09 17:11:04.738539 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:63481] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "addtKMDe826HlFeoLPJVqQAAAU4"]
[Thu Apr 09 17:11:05.288059 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:63526] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "addtKa1OMnvM2fMnB1NgKAAAAA0"]
[Thu Apr 09 17:11:05.910615 2026] [:error] [pid 24515:tid 24542] [client 20.240.63.86:63504] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "addtKa1OMnvM2fMnB1NgKgAAABc"]
[Thu Apr 09 17:11:06.552998 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:64015] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "addtKsDe826HlFeoLPJVqwAAAUQ"]
[Thu Apr 09 17:11:07.198823 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:63523] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "addtK8De826HlFeoLPJVrAAAAUk"]
[Thu Apr 09 17:11:07.806325 2026] [:error] [pid 24624:tid 24643] [client 20.240.63.86:62841] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "addtK-4Jn-WvK1ZBTvikCAAAANE"]
[Thu Apr 09 17:11:08.426972 2026] [:error] [pid 18477:tid 18494] [client 20.240.63.86:63525] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "addtLMDe826HlFeoLPJVrgAAAU8"]
[Thu Apr 09 17:11:09.101622 2026] [:error] [pid 20837:tid 20840] [client 20.240.63.86:65514] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "addtLfSL71FHZkjrGzO6nwAAAYE"]
[Thu Apr 09 17:11:09.782867 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:63514] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "addtLe4Jn-WvK1ZBTvikCQAAANc"]
[Thu Apr 09 17:11:10.458107 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:63467] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "addtLsDe826HlFeoLPJVswAAAVI"]
[Thu Apr 09 17:11:11.039089 2026] [:error] [pid 20837:tid 20848] [client 20.240.63.86:64529] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "addtL_SL71FHZkjrGzO6ogAAAYk"]
[Thu Apr 09 17:11:11.578282 2026] [:error] [pid 20837:tid 20844] [client 20.240.63.86:64523] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "addtL_SL71FHZkjrGzO6pQAAAYU"]
[Thu Apr 09 17:11:12.152976 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:61443] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "addtMMDe826HlFeoLPJVtQAAAUA"]
[Thu Apr 09 17:11:12.708424 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:61408] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "addtMMDe826HlFeoLPJVtgAAAVA"]
[Thu Apr 09 17:11:13.233130 2026] [:error] [pid 18477:tid 18485] [client 20.240.63.86:64539] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "addtMcDe826HlFeoLPJVuQAAAUY"]
[Thu Apr 09 17:11:13.768294 2026] [:error] [pid 24517:tid 24580] [client 20.240.63.86:65516] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "addtMXboYEn2ZFM_PS9nngAAAIY"]
[Thu Apr 09 17:11:14.310095 2026] [:error] [pid 24517:tid 24577] [client 20.240.63.86:63939] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "addtMnboYEn2ZFM_PS9nnwAAAIM"]
[Thu Apr 09 17:11:14.981975 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:61423] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "addtMsDe826HlFeoLPJVugAAAVg"]
[Thu Apr 09 17:11:15.539400 2026] [:error] [pid 20837:tid 20851] [client 20.240.63.86:64465] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "addtM_SL71FHZkjrGzO6qwAAAYw"]
[Thu Apr 09 17:11:16.189856 2026] [:error] [pid 20837:tid 20862] [client 20.240.63.86:63501] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "addtNPSL71FHZkjrGzO6rQAAAZc"]
[Thu Apr 09 17:11:16.740799 2026] [:error] [pid 20837:tid 20839] [client 20.240.63.86:62873] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "addtNPSL71FHZkjrGzO6rgAAAYA"]
[Thu Apr 09 17:11:17.415986 2026] [:error] [pid 24517:tid 24583] [client 20.240.63.86:65496] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "addtNXboYEn2ZFM_PS9nogAAAIk"]
[Thu Apr 09 17:11:18.074846 2026] [:error] [pid 18477:tid 18490] [client 20.240.63.86:61499] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "addtNsDe826HlFeoLPJVvgAAAUs"]
[Thu Apr 09 17:11:18.633877 2026] [:error] [pid 24624:tid 24633] [client 20.240.63.86:63512] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "addtNu4Jn-WvK1ZBTvikDgAAAMc"]
[Thu Apr 09 17:11:19.223094 2026] [:error] [pid 18477:tid 18499] [client 20.240.63.86:61481] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "addtN8De826HlFeoLPJVwAAAAVQ"]
[Thu Apr 09 17:11:19.788770 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:64470] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "addtN8De826HlFeoLPJVxAAAAUI"]
[Thu Apr 09 17:11:20.327903 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:64461] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "addtOMDe826HlFeoLPJVxwAAAVg"]
[Thu Apr 09 17:11:20.934344 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:63453] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1da.php"] [unique_id "addtOMDe826HlFeoLPJVyQAAAUk"]
[Thu Apr 09 17:11:21.550473 2026] [:error] [pid 24624:tid 24638] [client 20.240.63.86:64043] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1da.php"] [unique_id "addtOe4Jn-WvK1ZBTvikEwAAAMw"]
[Thu Apr 09 17:11:22.192341 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:62823] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1da.php"] [unique_id "addtOsDe826HlFeoLPJVywAAAVY"]
[Thu Apr 09 17:11:22.858058 2026] [:error] [pid 18477:tid 18492] [client 20.240.63.86:64566] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1da.php"] [unique_id "addtOsDe826HlFeoLPJVzgAAAU0"]
[Thu Apr 09 17:11:23.437297 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:65507] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "addtO8De826HlFeoLPJVzwAAAUw"]
[Thu Apr 09 17:11:24.013997 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:64047] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "addtPMDe826HlFeoLPJV0wAAAVg"]
[Thu Apr 09 17:11:24.658490 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:63458] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "addtPO4Jn-WvK1ZBTvikFwAAANc"]
[Thu Apr 09 17:11:25.247463 2026] [:error] [pid 24624:tid 24645] [client 20.240.63.86:63946] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "addtPe4Jn-WvK1ZBTvikGgAAANM"]
[Thu Apr 09 17:11:25.956827 2026] [:error] [pid 24515:tid 24528] [client 20.240.63.86:63465] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "addtPa1OMnvM2fMnB1NgNwAAAAk"]
[Thu Apr 09 17:11:26.521482 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:62884] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "addtPsDe826HlFeoLPJV1QAAAUk"]
[Thu Apr 09 17:11:27.098709 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:63489] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "addtP8De826HlFeoLPJV1gAAAUQ"]
[Thu Apr 09 17:11:27.627841 2026] [:error] [pid 18477:tid 18482] [client 20.240.63.86:62786] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "addtP8De826HlFeoLPJV2AAAAUM"]
[Fri Apr 10 01:05:35.260347 2026] [:error] [pid 36398:tid 36428] [client 118.107.44.96:8491] [client 118.107.44.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "adfcX-X640wXZwwgfP9x3gAAAEA"], referer: https://www.google.com/
[Fri Apr 10 01:05:50.601966 2026] [:error] [pid 36398:tid 36439] [client 118.107.44.96:12649] [client 118.107.44.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.107.44.96, incrementing ddos counter"] [hostname "www.makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adfcbuX640wXZwwgfP9x7QAAAEs"], referer: https://www.reddit.com/
[Fri Apr 10 01:05:50.604393 2026] [:error] [pid 36398:tid 36439] [client 118.107.44.96:12649] [client 118.107.44.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adfcbuX640wXZwwgfP9x7QAAAEs"], referer: https://www.reddit.com/
[Fri Apr 10 04:12:11.381592 2026] [autoindex:error] [pid 12685:tid 12696] [client 212.47.77.99:62270] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 10 05:19:06.587284 2026] [proxy_fcgi:error] [pid 12576:tid 12660] [client 103.4.122.14:38352] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 05:49:48.737009 2026] [proxy_fcgi:error] [pid 12575:tid 12623] [client 103.4.122.14:43088] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 06:19:27.589324 2026] [proxy_fcgi:error] [pid 59286:tid 59301] [client 103.4.122.14:46596] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:32:15.666672 2026] [proxy_fcgi:error] [pid 62769:tid 62787] [client 172.213.16.198:52518] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:32:15.935574 2026] [:error] [pid 62710:tid 62731] [client 172.213.16.198:41464] [client 172.213.16.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adkJ7-ME7qrf5xEWWJstagAAAhI"]
[Fri Apr 10 22:32:33.347780 2026] [proxy_fcgi:error] [pid 13100:tid 13111] [client 172.213.16.198:47102] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:32:47.171366 2026] [proxy_fcgi:error] [pid 63134:tid 63137] [client 172.213.16.198:25632] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:32:48.187888 2026] [proxy_fcgi:error] [pid 13189:tid 13192] [client 172.213.16.198:48436] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:32:53.640085 2026] [:error] [pid 62769:tid 62785] [client 172.213.16.198:2580] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adkKFcWsSnfLoB8ifjCFyQAAAk4"]
[Fri Apr 10 22:32:54.302199 2026] [:error] [pid 62769:tid 62779] [client 172.213.16.198:56295] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adkKFsWsSnfLoB8ifjCFzgAAAkg"]
[Fri Apr 10 22:32:54.765141 2026] [:error] [pid 13189:tid 13208] [client 172.213.16.198:40491] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adkKFpAxiJKPums3eBDf8AAAAFA"]
[Fri Apr 10 22:32:55.464164 2026] [:error] [pid 62651:tid 62656] [client 172.213.16.198:52319] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adkKFzbAH0le57SIaqwuWQAAAcM"]
[Fri Apr 10 22:32:56.179889 2026] [:error] [pid 62769:tid 62777] [client 172.213.16.198:64382] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adkKGMWsSnfLoB8ifjCF1gAAAkY"]
[Fri Apr 10 22:32:56.843599 2026] [:error] [pid 13101:tid 13141] [client 172.213.16.198:43477] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adkKGN8Ldw85818pj2r6TAAAAIg"]
[Fri Apr 10 22:32:57.844654 2026] [:error] [pid 62710:tid 62719] [client 172.213.16.198:29755] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adkKGeME7qrf5xEWWJstqwAAAgY"]
[Fri Apr 10 22:32:58.765513 2026] [:error] [pid 62884:tid 62898] [client 172.213.16.198:40913] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adkKGuUCK1xrhnnmpo2OnwAAAsc"]
[Fri Apr 10 22:32:59.498338 2026] [:error] [pid 13101:tid 13156] [client 172.213.16.198:2365] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adkKG98Ldw85818pj2r6VAAAAJc"]
[Fri Apr 10 22:33:00.133138 2026] [:error] [pid 62769:tid 62787] [client 172.213.16.198:26093] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adkKHMWsSnfLoB8ifjCF7wAAAlA"]
[Fri Apr 10 22:33:00.677636 2026] [:error] [pid 62769:tid 62772] [client 172.213.16.198:41804] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adkKHMWsSnfLoB8ifjCF9wAAAkE"]
[Fri Apr 10 22:33:01.177861 2026] [:error] [pid 62769:tid 62782] [client 172.213.16.198:53686] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adkKHcWsSnfLoB8ifjCF_wAAAks"]
[Fri Apr 10 22:33:01.724629 2026] [:error] [pid 13189:tid 13210] [client 172.213.16.198:26063] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adkKHZAxiJKPums3eBDgDwAAAFI"]
[Fri Apr 10 22:33:02.388598 2026] [:error] [pid 13189:tid 13215] [client 172.213.16.198:45863] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adkKHpAxiJKPums3eBDgEQAAAFc"]
[Fri Apr 10 22:33:02.926661 2026] [:error] [pid 62769:tid 62792] [client 172.213.16.198:37502] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adkKHsWsSnfLoB8ifjCGIgAAAlU"]
[Fri Apr 10 22:33:03.911917 2026] [:error] [pid 13101:tid 13134] [client 172.213.16.198:59334] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adkKH98Ldw85818pj2r6XAAAAIE"]
[Fri Apr 10 22:33:04.617559 2026] [:error] [pid 62769:tid 62794] [client 172.213.16.198:2358] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "adkKIMWsSnfLoB8ifjCGLgAAAlc"]
[Fri Apr 10 22:33:05.328729 2026] [:error] [pid 13101:tid 13154] [client 172.213.16.198:39523] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "adkKId8Ldw85818pj2r6ZgAAAJU"]
[Fri Apr 10 22:33:05.802157 2026] [:error] [pid 13189:tid 13208] [client 172.213.16.198:21939] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "adkKIZAxiJKPums3eBDgFwAAAFA"]
[Fri Apr 10 22:33:06.301941 2026] [:error] [pid 62769:tid 62782] [client 172.213.16.198:27433] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "adkKIsWsSnfLoB8ifjCGRgAAAks"]
[Fri Apr 10 22:33:07.494468 2026] [:error] [pid 13101:tid 13137] [client 172.213.16.198:33855] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adkKI98Ldw85818pj2r6agAAAIQ"]
[Fri Apr 10 22:33:08.080188 2026] [:error] [pid 63062:tid 63064] [client 172.213.16.198:36203] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adkKJJ2HtsmV85NqkMf_OgAAA4A"]
[Fri Apr 10 22:33:08.577948 2026] [:error] [pid 13101:tid 13149] [client 172.213.16.198:39491] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adkKJN8Ldw85818pj2r6cQAAAJA"]
[Fri Apr 10 22:33:09.161020 2026] [:error] [pid 63134:tid 63153] [client 172.213.16.198:53673] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adkKJdFALqPDwWi6eJK1XAAAA9A"]
[Fri Apr 10 22:33:09.823319 2026] [:error] [pid 62769:tid 62778] [client 172.213.16.198:33853] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "adkKJcWsSnfLoB8ifjCGYgAAAkc"]
[Fri Apr 10 22:33:10.333585 2026] [:error] [pid 13101:tid 13142] [client 172.213.16.198:41820] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "adkKJt8Ldw85818pj2r6fgAAAIk"]
[Fri Apr 10 22:33:11.000170 2026] [:error] [pid 62769:tid 62788] [client 172.213.16.198:21949] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "adkKJsWsSnfLoB8ifjCGaQAAAlE"]
[Fri Apr 10 22:33:11.586828 2026] [:error] [pid 62769:tid 62793] [client 172.213.16.198:2540] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "adkKJ8WsSnfLoB8ifjCGdQAAAlY"]
[Fri Apr 10 22:33:12.070936 2026] [:error] [pid 13189:tid 13201] [client 172.213.16.198:64653] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adkKKJAxiJKPums3eBDgLgAAAEk"]
[Fri Apr 10 22:33:12.664109 2026] [:error] [pid 13189:tid 13212] [client 172.213.16.198:2919] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adkKKJAxiJKPums3eBDgNgAAAFQ"]
[Fri Apr 10 22:33:13.341023 2026] [:error] [pid 62769:tid 62778] [client 172.213.16.198:53727] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adkKKcWsSnfLoB8ifjCGggAAAkc"]
[Fri Apr 10 22:33:14.107898 2026] [:error] [pid 62819:tid 62834] [client 172.213.16.198:37468] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adkKKvU20EyPf7Nlsld2NwAAAow"]
[Fri Apr 10 22:33:14.713657 2026] [:error] [pid 62710:tid 62719] [client 172.213.16.198:35806] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-turn.php"] [unique_id "adkKKuME7qrf5xEWWJst2AAAAgY"]
[Fri Apr 10 22:33:15.624308 2026] [:error] [pid 63062:tid 63088] [client 172.213.16.198:59343] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-turn.php"] [unique_id "adkKK52HtsmV85NqkMf_SAAAA5g"]
[Fri Apr 10 22:33:16.340134 2026] [:error] [pid 13101:tid 13149] [client 172.213.16.198:41850] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-turn.php"] [unique_id "adkKLN8Ldw85818pj2r6mAAAAJA"]
[Fri Apr 10 22:33:16.945087 2026] [:error] [pid 13189:tid 13200] [client 172.213.16.198:36489] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-turn.php"] [unique_id "adkKLJAxiJKPums3eBDgRwAAAEg"]
[Fri Apr 10 22:33:17.988247 2026] [:error] [pid 62769:tid 62773] [client 172.213.16.198:53637] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adkKLcWsSnfLoB8ifjCGrQAAAkI"]
[Fri Apr 10 22:33:18.868404 2026] [:error] [pid 13189:tid 13205] [client 172.213.16.198:28222] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adkKLpAxiJKPums3eBDgbgAAAE0"]
[Fri Apr 10 22:33:19.739226 2026] [:error] [pid 62769:tid 62793] [client 172.213.16.198:41840] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adkKL8WsSnfLoB8ifjCGugAAAlY"]
[Fri Apr 10 22:33:20.465272 2026] [:error] [pid 62769:tid 62776] [client 172.213.16.198:2887] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adkKMMWsSnfLoB8ifjCGwwAAAkU"]
[Fri Apr 10 22:33:21.196138 2026] [:error] [pid 62769:tid 62781] [client 172.213.16.198:33847] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/red.php"] [unique_id "adkKMcWsSnfLoB8ifjCG0AAAAko"]
[Fri Apr 10 22:33:22.775598 2026] [:error] [pid 62769:tid 62775] [client 172.213.16.198:41828] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/red.php"] [unique_id "adkKMsWsSnfLoB8ifjCG4QAAAkQ"]
[Fri Apr 10 22:33:23.450703 2026] [:error] [pid 62769:tid 62795] [client 172.213.16.198:27518] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/red.php"] [unique_id "adkKM8WsSnfLoB8ifjCG8gAAAlg"]
[Fri Apr 10 22:33:24.157579 2026] [:error] [pid 63062:tid 63075] [client 172.213.16.198:28208] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/red.php"] [unique_id "adkKNJ2HtsmV85NqkMf_TQAAA4s"]
[Fri Apr 10 22:33:24.936299 2026] [:error] [pid 13189:tid 13214] [client 172.213.16.198:53693] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "adkKNJAxiJKPums3eBDgjAAAAFY"]
[Fri Apr 10 22:33:26.572583 2026] [:error] [pid 62769:tid 62793] [client 172.213.16.198:28207] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "adkKNsWsSnfLoB8ifjCHEgAAAlY"]
[Fri Apr 10 22:33:27.265372 2026] [:error] [pid 62769:tid 62777] [client 172.213.16.198:27517] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "adkKN8WsSnfLoB8ifjCHGAAAAkY"]
[Fri Apr 10 22:33:28.018934 2026] [:error] [pid 13101:tid 13153] [client 172.213.16.198:2359] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "adkKON8Ldw85818pj2r6qwAAAJQ"]
[Fri Apr 10 22:33:28.808273 2026] [:error] [pid 62651:tid 62677] [client 172.213.16.198:28182] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adkKODbAH0le57SIaqwudAAAAdg"]
[Fri Apr 10 22:33:30.096542 2026] [:error] [pid 62710:tid 62717] [client 172.213.16.198:21941] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adkKOuME7qrf5xEWWJst9wAAAgQ"]
[Fri Apr 10 22:33:30.703008 2026] [:error] [pid 13101:tid 13134] [client 172.213.16.198:43796] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adkKOt8Ldw85818pj2r6swAAAIE"]
[Fri Apr 10 22:33:31.259000 2026] [:error] [pid 62651:tid 62671] [client 172.213.16.198:28197] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adkKOzbAH0le57SIaqwudQAAAdI"]
[Fri Apr 10 22:33:32.007115 2026] [:error] [pid 13189:tid 13208] [client 172.213.16.198:45867] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "adkKPJAxiJKPums3eBDgrQAAAFA"]
[Fri Apr 10 22:33:32.669183 2026] [:error] [pid 62884:tid 62907] [client 172.213.16.198:33813] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "adkKPOUCK1xrhnnmpo2OtAAAAtA"]
[Fri Apr 10 22:33:34.228997 2026] [:error] [pid 13101:tid 13143] [client 172.213.16.198:53649] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "adkKPt8Ldw85818pj2r6ywAAAIo"]
[Fri Apr 10 22:33:35.143485 2026] [:error] [pid 63062:tid 63076] [client 172.213.16.198:43792] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "adkKP52HtsmV85NqkMf_WAAAA4w"]
[Fri Apr 10 22:33:35.926075 2026] [:error] [pid 13100:tid 13125] [client 172.213.16.198:29698] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "adkKP1zg-ZkZ0InWIP3H1AAAARQ"]
[Fri Apr 10 22:33:36.800701 2026] [:error] [pid 13101:tid 13146] [client 172.213.16.198:41814] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "adkKQN8Ldw85818pj2r61QAAAI0"]
[Fri Apr 10 22:33:37.765943 2026] [:error] [pid 13101:tid 13136] [client 172.213.16.198:45835] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "adkKQd8Ldw85818pj2r64AAAAIM"]
[Fri Apr 10 22:33:38.483140 2026] [:error] [pid 62769:tid 62776] [client 172.213.16.198:29720] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "adkKQsWsSnfLoB8ifjCHPQAAAkU"]
[Fri Apr 10 22:33:39.468704 2026] [:error] [pid 62819:tid 62832] [client 172.213.16.198:44399] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "adkKQ_U20EyPf7Nlsld2TAAAAoo"]
[Fri Apr 10 22:33:40.316862 2026] [:error] [pid 63062:tid 63066] [client 172.213.16.198:43789] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "adkKRJ2HtsmV85NqkMf_aQAAA4I"]
[Fri Apr 10 22:33:41.181361 2026] [:error] [pid 13189:tid 13203] [client 172.213.16.198:42975] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "adkKRZAxiJKPums3eBDgxQAAAEs"]
[Fri Apr 10 22:33:41.919082 2026] [:error] [pid 62769:tid 62787] [client 172.213.16.198:40959] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "adkKRcWsSnfLoB8ifjCHRwAAAlA"]
[Fri Apr 10 22:33:42.780140 2026] [:error] [pid 63062:tid 63084] [client 172.213.16.198:59276] [client 172.213.16.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adkKRp2HtsmV85NqkMf_awAAA5Q"]
[Fri Apr 10 22:33:43.492393 2026] [:error] [pid 13189:tid 13202] [client 172.213.16.198:40497] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "adkKR5AxiJKPums3eBDgzQAAAEo"]
[Fri Apr 10 22:33:44.462311 2026] [:error] [pid 62710:tid 62719] [client 172.213.16.198:40488] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "adkKSOME7qrf5xEWWJsuKwAAAgY"]
[Fri Apr 10 22:33:45.348250 2026] [:error] [pid 62651:tid 62655] [client 172.213.16.198:59269] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "adkKSTbAH0le57SIaqwuewAAAcI"]
[Fri Apr 10 22:33:46.076842 2026] [:error] [pid 13189:tid 13202] [client 172.213.16.198:51034] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pp.php"] [unique_id "adkKSpAxiJKPums3eBDg1wAAAEo"]
[Fri Apr 10 22:33:46.975741 2026] [:error] [pid 63134:tid 63160] [client 172.213.16.198:34994] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myy.php"] [unique_id "adkKStFALqPDwWi6eJK1hAAAA9c"]
[Fri Apr 10 22:33:48.077937 2026] [:error] [pid 62651:tid 62660] [client 172.213.16.198:41347] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myy.php"] [unique_id "adkKTDbAH0le57SIaqwuggAAAcc"]
[Fri Apr 10 22:33:49.258135 2026] [:error] [pid 62819:tid 62825] [client 172.213.16.198:26816] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myy.php"] [unique_id "adkKTfU20EyPf7Nlsld2YAAAAoM"]
[Fri Apr 10 22:33:59.991612 2026] [:error] [pid 62769:tid 62792] [client 172.213.16.198:33557] [client 172.213.16.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "adkKV8WsSnfLoB8ifjCHcwAAAlU"]
[Fri Apr 10 22:34:15.147952 2026] [proxy_fcgi:error] [pid 13100:tid 13129] [client 172.213.16.198:61917] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:34:30.574612 2026] [proxy_fcgi:error] [pid 62769:tid 62786] [client 172.213.16.198:26043] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:34:46.484113 2026] [proxy_fcgi:error] [pid 13101:tid 13149] [client 172.213.16.198:32303] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:34:52.352900 2026] [:error] [pid 63062:tid 63068] [client 172.213.16.198:43883] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "adkKjJ2HtsmV85NqkMf_4AAAA4Q"]
[Fri Apr 10 22:36:22.244155 2026] [proxy_fcgi:error] [pid 13101:tid 13136] [client 172.213.16.198:49640] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:36:37.488027 2026] [proxy_fcgi:error] [pid 13189:tid 13215] [client 172.213.16.198:46709] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:36:51.950112 2026] [proxy_fcgi:error] [pid 13100:tid 13114] [client 172.213.16.198:61392] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:36:53.188003 2026] [proxy_fcgi:error] [pid 63134:tid 63141] [client 172.213.16.198:61555] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 10 22:36:58.156755 2026] [:error] [pid 63062:tid 63078] [client 172.213.16.198:23155] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkLCp2HtsmV85NqkMcAYAAAA44"]
[Fri Apr 10 22:36:58.901468 2026] [:error] [pid 13100:tid 13119] [client 172.213.16.198:28268] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkLClzg-ZkZ0InWIP3ITQAAAQ4"]
[Fri Apr 10 22:36:59.587763 2026] [:error] [pid 63062:tid 63068] [client 172.213.16.198:49647] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkLC52HtsmV85NqkMcAYQAAA4Q"]
[Fri Apr 10 22:37:00.421425 2026] [:error] [pid 62769:tid 62784] [client 172.213.16.198:61551] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkLDMWsSnfLoB8ifjCJ1wAAAk0"]
[Fri Apr 10 22:37:01.132497 2026] [:error] [pid 63134:tid 63148] [client 172.213.16.198:61423] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkLDdFALqPDwWi6eJK27wAAA8s"]
[Fri Apr 10 22:37:01.822153 2026] [:error] [pid 13189:tid 13207] [client 172.213.16.198:54752] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkLDZAxiJKPums3eBDjBwAAAE8"]
[Fri Apr 10 22:37:02.341726 2026] [:error] [pid 13100:tid 13128] [client 172.213.16.198:39999] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkLDlzg-ZkZ0InWIP3ITwAAARc"]
[Fri Apr 10 22:37:03.332509 2026] [:error] [pid 62769:tid 62781] [client 172.213.16.198:43971] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkLD8WsSnfLoB8ifjCJ4QAAAko"]
[Fri Apr 10 22:37:03.967899 2026] [:error] [pid 62769:tid 62776] [client 172.213.16.198:43447] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "adkLD8WsSnfLoB8ifjCJ5QAAAkU"]
[Fri Apr 10 22:37:04.614708 2026] [:error] [pid 63062:tid 63071] [client 172.213.16.198:61517] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "adkLEJ2HtsmV85NqkMcAYwAAA4c"]
[Fri Apr 10 22:37:05.170159 2026] [:error] [pid 13100:tid 13127] [client 172.213.16.198:28234] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "adkLEVzg-ZkZ0InWIP3IVAAAARY"]
[Fri Apr 10 22:37:05.728697 2026] [:error] [pid 63062:tid 63079] [client 172.213.16.198:44026] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "adkLEZ2HtsmV85NqkMcAZgAAA48"]
[Fri Apr 10 22:37:06.282795 2026] [:error] [pid 62884:tid 62911] [client 172.213.16.198:54064] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkLEuUCK1xrhnnmpo2PYAAAAtQ"]
[Fri Apr 10 22:37:06.869478 2026] [:error] [pid 62819:tid 62835] [client 172.213.16.198:23142] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkLEvU20EyPf7Nlsld3LwAAAo0"]
[Fri Apr 10 22:37:07.503332 2026] [:error] [pid 62651:tid 62673] [client 172.213.16.198:54078] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkLEzbAH0le57SIaqwvSQAAAdQ"]
[Fri Apr 10 22:37:08.203369 2026] [:error] [pid 62769:tid 62787] [client 172.213.16.198:61557] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkLFMWsSnfLoB8ifjCJ8AAAAlA"]
[Fri Apr 10 22:37:09.088602 2026] [:error] [pid 63062:tid 63085] [client 172.213.16.198:25230] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkLFZ2HtsmV85NqkMcAdgAAA5U"]
[Fri Apr 10 22:37:09.608292 2026] [:error] [pid 13100:tid 13128] [client 172.213.16.198:34950] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkLFVzg-ZkZ0InWIP3IXAAAARc"]
[Fri Apr 10 22:37:10.160520 2026] [:error] [pid 13101:tid 13150] [client 172.213.16.198:46309] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkLFt8Ldw85818pj2r9zwAAAJE"]
[Fri Apr 10 22:37:10.908770 2026] [:error] [pid 63134:tid 63161] [client 172.213.16.198:54722] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkLFtFALqPDwWi6eJK3AAAAA9g"]
[Fri Apr 10 22:37:11.420824 2026] [:error] [pid 13101:tid 13151] [client 172.213.16.198:39938] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "adkLF98Ldw85818pj2r91QAAAJI"]
[Fri Apr 10 22:37:12.016815 2026] [:error] [pid 13100:tid 13122] [client 172.213.16.198:43968] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "adkLGFzg-ZkZ0InWIP3IXwAAARE"]
[Fri Apr 10 22:37:12.578724 2026] [:error] [pid 62884:tid 62905] [client 172.213.16.198:61116] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "adkLGOUCK1xrhnnmpo2PagAAAs4"]
[Fri Apr 10 22:37:13.212009 2026] [:error] [pid 63062:tid 63064] [client 172.213.16.198:2691] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "adkLGZ2HtsmV85NqkMcAhAAAA4A"]
[Fri Apr 10 22:37:13.762289 2026] [:error] [pid 62651:tid 62664] [client 172.213.16.198:43449] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkLGTbAH0le57SIaqwvVAAAAcs"]
[Fri Apr 10 22:37:14.369053 2026] [:error] [pid 63134:tid 63157] [client 172.213.16.198:25258] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkLGtFALqPDwWi6eJK3CAAAA9Q"]
[Fri Apr 10 22:37:14.881653 2026] [:error] [pid 62884:tid 62900] [client 172.213.16.198:27098] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkLGuUCK1xrhnnmpo2PdQAAAsk"]
[Fri Apr 10 22:37:15.382804 2026] [:error] [pid 63134:tid 63161] [client 172.213.16.198:44030] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkLG9FALqPDwWi6eJK3DwAAA9g"]
[Fri Apr 10 22:37:16.188800 2026] [:error] [pid 13101:tid 13147] [client 172.213.16.198:61424] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "adkLHN8Ldw85818pj2r92wAAAI4"]
[Fri Apr 10 22:37:16.765525 2026] [:error] [pid 63062:tid 63072] [client 172.213.16.198:22380] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "adkLHJ2HtsmV85NqkMcAlAAAA4g"]
[Fri Apr 10 22:37:17.364790 2026] [:error] [pid 13100:tid 13114] [client 172.213.16.198:43407] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "adkLHVzg-ZkZ0InWIP3IZQAAAQk"]
[Fri Apr 10 22:37:18.096770 2026] [:error] [pid 62819:tid 62833] [client 172.213.16.198:34962] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "adkLHvU20EyPf7Nlsld3RAAAAos"]
[Fri Apr 10 22:37:18.823965 2026] [:error] [pid 62710:tid 62717] [client 172.213.16.198:46685] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkLHuME7qrf5xEWWJsv4QAAAgQ"]
[Fri Apr 10 22:37:19.410023 2026] [:error] [pid 62710:tid 62732] [client 172.213.16.198:27084] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkLH-ME7qrf5xEWWJsv6AAAAhM"]
[Fri Apr 10 22:37:20.139744 2026] [:error] [pid 62769:tid 62772] [client 172.213.16.198:35006] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkLIMWsSnfLoB8ifjCJ9wAAAkE"]
[Fri Apr 10 22:37:21.196675 2026] [:error] [pid 13101:tid 13133] [client 172.213.16.198:27074] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkLId8Ldw85818pj2r95wAAAIA"]
[Fri Apr 10 22:37:21.951989 2026] [:error] [pid 13100:tid 13118] [client 172.213.16.198:43418] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkLIVzg-ZkZ0InWIP3IbQAAAQ0"]
[Fri Apr 10 22:37:22.703020 2026] [:error] [pid 13101:tid 13150] [client 172.213.16.198:51868] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkLIt8Ldw85818pj2r97gAAAJE"]
[Fri Apr 10 22:37:23.305549 2026] [:error] [pid 62769:tid 62794] [client 172.213.16.198:3032] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkLI8WsSnfLoB8ifjCKAgAAAlc"]
[Fri Apr 10 22:37:23.900351 2026] [:error] [pid 13189:tid 13200] [client 172.213.16.198:45909] [client 172.213.16.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkLI5AxiJKPums3eBDjOQAAAEg"]
[Sat Apr 11 01:58:02.836688 2026] [:error] [pid 21568:tid 21593] [client 20.123.11.197:56596] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adk6Koiz5v_ljZxkpR_LRgAAARU"]
[Sat Apr 11 01:58:03.354455 2026] [:error] [pid 21570:tid 21688] [client 20.123.11.197:53585] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adk6KzKs5t9xRSNL6cnINgAAAE4"]
[Sat Apr 11 01:58:04.046877 2026] [:error] [pid 21570:tid 21693] [client 20.123.11.197:5510] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adk6LDKs5t9xRSNL6cnIOAAAAFM"]
[Sat Apr 11 01:58:04.617884 2026] [:error] [pid 21570:tid 21661] [client 20.123.11.197:53555] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adk6LDKs5t9xRSNL6cnIOgAAAEA"]
[Sat Apr 11 02:11:03.431012 2026] [proxy_fcgi:error] [pid 55451:tid 55472] [client 20.251.36.179:3361] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:11:08.066870 2026] [proxy_fcgi:error] [pid 21706:tid 21712] [client 20.251.36.179:3349] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:11:20.042729 2026] [proxy_fcgi:error] [pid 55451:tid 55469] [client 20.251.36.179:58396] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:11:31.959873 2026] [proxy_fcgi:error] [pid 21570:tid 21661] [client 20.251.36.179:60288] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:11:41.245708 2026] [:error] [pid 21706:tid 21712] [client 20.251.36.179:3391] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adk9XSGQ1M5d8fQSsLGziAAAAAQ"]
[Sat Apr 11 02:11:41.762134 2026] [:error] [pid 21570:tid 21663] [client 20.251.36.179:60338] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adk9XTKs5t9xRSNL6cnPkQAAAEE"]
[Sat Apr 11 02:11:42.453349 2026] [:error] [pid 21569:tid 21656] [client 20.251.36.179:3343] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adk9XnAvQTgvXJ6vHoqiMAAAAIs"]
[Sat Apr 11 02:11:42.984149 2026] [:error] [pid 21570:tid 21691] [client 20.251.36.179:58388] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adk9XjKs5t9xRSNL6cnPlgAAAFE"]
[Sat Apr 11 02:11:43.498739 2026] [:error] [pid 21568:tid 21576] [client 20.251.36.179:58409] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "adk9X4iz5v_ljZxkpR_TrQAAAQQ"]
[Sat Apr 11 02:11:44.026923 2026] [:error] [pid 21568:tid 21591] [client 20.251.36.179:60339] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "adk9YIiz5v_ljZxkpR_TrwAAARM"]
[Sat Apr 11 02:11:44.550503 2026] [:error] [pid 21568:tid 21590] [client 20.251.36.179:58392] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "adk9YIiz5v_ljZxkpR_TsQAAARI"]
[Sat Apr 11 02:11:45.061056 2026] [:error] [pid 21706:tid 21731] [client 20.251.36.179:58405] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "adk9YSGQ1M5d8fQSsLGzkwAAABc"]
[Sat Apr 11 02:11:45.604756 2026] [:error] [pid 21706:tid 21732] [client 20.251.36.179:60307] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/water.php"] [unique_id "adk9YSGQ1M5d8fQSsLGzmQAAABg"]
[Sat Apr 11 02:11:46.125976 2026] [:error] [pid 21568:tid 21589] [client 20.251.36.179:58430] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/water.php"] [unique_id "adk9Yoiz5v_ljZxkpR_TswAAARE"]
[Sat Apr 11 02:11:46.639021 2026] [:error] [pid 21706:tid 21727] [client 20.251.36.179:3358] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/water.php"] [unique_id "adk9YiGQ1M5d8fQSsLGzowAAABM"]
[Sat Apr 11 02:11:47.165365 2026] [:error] [pid 21568:tid 21581] [client 20.251.36.179:60296] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/water.php"] [unique_id "adk9Y4iz5v_ljZxkpR_TtQAAAQk"]
[Sat Apr 11 02:11:47.685079 2026] [:error] [pid 55451:tid 55458] [client 20.251.36.179:60300] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "adk9Y3ApxuyB7yCS5RkXSQAAAMU"]
[Sat Apr 11 02:11:48.217539 2026] [:error] [pid 55451:tid 55467] [client 20.251.36.179:58379] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "adk9ZHApxuyB7yCS5RkXSgAAAM4"]
[Sat Apr 11 02:11:48.734250 2026] [:error] [pid 21568:tid 21594] [client 20.251.36.179:58428] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "adk9ZIiz5v_ljZxkpR_TugAAARY"]
[Sat Apr 11 02:11:49.252326 2026] [:error] [pid 55451:tid 55473] [client 20.251.36.179:60294] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "adk9ZXApxuyB7yCS5RkXTwAAANQ"]
[Sat Apr 11 02:11:49.772351 2026] [:error] [pid 55451:tid 55470] [client 20.251.36.179:58370] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "adk9ZXApxuyB7yCS5RkXUwAAANE"]
[Sat Apr 11 02:11:50.307544 2026] [:error] [pid 55451:tid 55457] [client 20.251.36.179:58389] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "adk9ZnApxuyB7yCS5RkXWgAAAMQ"]
[Sat Apr 11 02:11:50.823758 2026] [:error] [pid 21568:tid 21574] [client 20.251.36.179:3370] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "adk9Zoiz5v_ljZxkpR_TvAAAAQI"]
[Sat Apr 11 02:11:51.343624 2026] [:error] [pid 55451:tid 55456] [client 20.251.36.179:59568] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "adk9Z3ApxuyB7yCS5RkXZgAAAMM"]
[Sat Apr 11 02:11:51.869796 2026] [:error] [pid 55451:tid 55457] [client 20.251.36.179:60292] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wert.php"] [unique_id "adk9Z3ApxuyB7yCS5RkXbAAAAMQ"]
[Sat Apr 11 02:11:52.381192 2026] [:error] [pid 55451:tid 55465] [client 20.251.36.179:3366] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wert.php"] [unique_id "adk9aHApxuyB7yCS5RkXbwAAAMw"]
[Sat Apr 11 02:11:52.897187 2026] [:error] [pid 55451:tid 55459] [client 20.251.36.179:3345] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wert.php"] [unique_id "adk9aHApxuyB7yCS5RkXdgAAAMY"]
[Sat Apr 11 02:11:53.421033 2026] [:error] [pid 21706:tid 21724] [client 20.251.36.179:60330] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wert.php"] [unique_id "adk9aSGQ1M5d8fQSsLGz6gAAABA"]
[Sat Apr 11 02:11:54.058479 2026] [:error] [pid 21568:tid 21578] [client 20.251.36.179:60316] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/11.php"] [unique_id "adk9aoiz5v_ljZxkpR_TygAAAQY"]
[Sat Apr 11 02:11:54.574826 2026] [:error] [pid 21569:tid 21651] [client 20.251.36.179:3333] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/11.php"] [unique_id "adk9anAvQTgvXJ6vHoqiPAAAAIY"]
[Sat Apr 11 02:11:55.089621 2026] [:error] [pid 55451:tid 55463] [client 20.251.36.179:3389] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/11.php"] [unique_id "adk9a3ApxuyB7yCS5RkXfAAAAMo"]
[Sat Apr 11 02:11:55.600725 2026] [:error] [pid 21706:tid 21720] [client 20.251.36.179:60304] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/11.php"] [unique_id "adk9ayGQ1M5d8fQSsLGz9AAAAAw"]
[Sat Apr 11 02:11:56.116834 2026] [:error] [pid 21570:tid 21675] [client 20.251.36.179:3374] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "adk9bDKs5t9xRSNL6cnPrQAAAEc"]
[Sat Apr 11 02:11:56.633152 2026] [:error] [pid 21570:tid 21670] [client 20.251.36.179:60312] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "adk9bDKs5t9xRSNL6cnPsQAAAEQ"]
[Sat Apr 11 02:11:57.171288 2026] [:error] [pid 21706:tid 21729] [client 20.251.36.179:3341] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "adk9bSGQ1M5d8fQSsLGz9gAAABU"]
[Sat Apr 11 02:11:57.691771 2026] [:error] [pid 21706:tid 21732] [client 20.251.36.179:3375] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "adk9bSGQ1M5d8fQSsLGz-QAAABg"]
[Sat Apr 11 02:11:58.216387 2026] [:error] [pid 21706:tid 21715] [client 20.251.36.179:3348] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oij98gy.php"] [unique_id "adk9biGQ1M5d8fQSsLGz_gAAAAc"]
[Sat Apr 11 02:11:58.728462 2026] [:error] [pid 21706:tid 21726] [client 20.251.36.179:3381] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oij98gy.php"] [unique_id "adk9biGQ1M5d8fQSsLG0BgAAABI"]
[Sat Apr 11 02:11:59.269667 2026] [:error] [pid 21570:tid 21681] [client 20.251.36.179:58416] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oij98gy.php"] [unique_id "adk9bzKs5t9xRSNL6cnPswAAAEo"]
[Sat Apr 11 02:11:59.782460 2026] [:error] [pid 55451:tid 55457] [client 20.251.36.179:3377] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oij98gy.php"] [unique_id "adk9b3ApxuyB7yCS5RkXiwAAAMQ"]
[Sat Apr 11 02:12:00.301751 2026] [:error] [pid 21569:tid 21656] [client 20.251.36.179:3360] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "adk9cHAvQTgvXJ6vHoqiRQAAAIs"]
[Sat Apr 11 02:12:00.814976 2026] [:error] [pid 21568:tid 21584] [client 20.251.36.179:60349] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "adk9cIiz5v_ljZxkpR_T0wAAAQw"]
[Sat Apr 11 02:12:01.355904 2026] [:error] [pid 21570:tid 21663] [client 20.251.36.179:60310] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "adk9cTKs5t9xRSNL6cnPugAAAEE"]
[Sat Apr 11 02:12:01.870540 2026] [:error] [pid 21570:tid 21672] [client 20.251.36.179:58423] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "adk9cTKs5t9xRSNL6cnPuwAAAEU"]
[Sat Apr 11 02:12:02.395731 2026] [:error] [pid 21569:tid 21669] [client 20.251.36.179:58371] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/turkshell.php"] [unique_id "adk9cnAvQTgvXJ6vHoqiRwAAAJI"]
[Sat Apr 11 02:12:02.913286 2026] [:error] [pid 55451:tid 55472] [client 20.251.36.179:60301] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/turkshell.php"] [unique_id "adk9cnApxuyB7yCS5RkXlAAAANM"]
[Sat Apr 11 02:12:03.425306 2026] [:error] [pid 21569:tid 21674] [client 20.251.36.179:60318] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/turkshell.php"] [unique_id "adk9c3AvQTgvXJ6vHoqiTAAAAJQ"]
[Sat Apr 11 02:12:03.944571 2026] [:error] [pid 55451:tid 55465] [client 20.251.36.179:3368] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/turkshell.php"] [unique_id "adk9c3ApxuyB7yCS5RkXlgAAAMw"]
[Sat Apr 11 02:12:04.512283 2026] [:error] [pid 21568:tid 21582] [client 20.251.36.179:58397] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tea.php"] [unique_id "adk9dIiz5v_ljZxkpR_T3AAAAQo"]
[Sat Apr 11 02:12:05.047421 2026] [:error] [pid 21568:tid 21572] [client 20.251.36.179:58424] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tea.php"] [unique_id "adk9dYiz5v_ljZxkpR_T3gAAAQA"]
[Sat Apr 11 02:12:05.563604 2026] [:error] [pid 21706:tid 21709] [client 20.251.36.179:60333] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tea.php"] [unique_id "adk9dSGQ1M5d8fQSsLG0GwAAAAE"]
[Sat Apr 11 02:12:06.073311 2026] [:error] [pid 21706:tid 21713] [client 20.251.36.179:3332] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tea.php"] [unique_id "adk9diGQ1M5d8fQSsLG0HQAAAAU"]
[Sat Apr 11 02:12:06.587774 2026] [:error] [pid 21706:tid 21729] [client 20.251.36.179:60314] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seo.php"] [unique_id "adk9diGQ1M5d8fQSsLG0IwAAABU"]
[Sat Apr 11 02:12:07.101542 2026] [:error] [pid 21570:tid 21691] [client 20.251.36.179:60322] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seo.php"] [unique_id "adk9dzKs5t9xRSNL6cnPxQAAAFE"]
[Sat Apr 11 02:12:07.623507 2026] [:error] [pid 21706:tid 21710] [client 20.251.36.179:3330] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seo.php"] [unique_id "adk9dyGQ1M5d8fQSsLG0KAAAAAI"]
[Sat Apr 11 02:12:08.137536 2026] [:error] [pid 21706:tid 21716] [client 20.251.36.179:3378] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seo.php"] [unique_id "adk9eCGQ1M5d8fQSsLG0LQAAAAg"]
[Sat Apr 11 02:12:08.651050 2026] [:error] [pid 21706:tid 21722] [client 20.251.36.179:58408] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "adk9eCGQ1M5d8fQSsLG0MQAAAA4"]
[Sat Apr 11 02:12:09.167658 2026] [:error] [pid 21569:tid 21653] [client 20.251.36.179:58393] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "adk9eXAvQTgvXJ6vHoqiUQAAAIg"]
[Sat Apr 11 02:12:09.684508 2026] [:error] [pid 21706:tid 21714] [client 20.251.36.179:60291] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "adk9eSGQ1M5d8fQSsLG0NwAAAAY"]
[Sat Apr 11 02:12:10.200945 2026] [:error] [pid 21570:tid 21677] [client 20.251.36.179:59522] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "adk9ejKs5t9xRSNL6cnPygAAAEg"]
[Sat Apr 11 02:12:10.720670 2026] [:error] [pid 21569:tid 21662] [client 20.251.36.179:60319] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "adk9enAvQTgvXJ6vHoqiVwAAAI8"]
[Sat Apr 11 02:12:11.230069 2026] [:error] [pid 21568:tid 21582] [client 20.251.36.179:60329] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "adk9e4iz5v_ljZxkpR_T5AAAAQo"]
[Sat Apr 11 02:12:11.742532 2026] [:error] [pid 21570:tid 21696] [client 20.251.36.179:60289] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "adk9ezKs5t9xRSNL6cnPzwAAAFY"]
[Sat Apr 11 02:12:12.286386 2026] [:error] [pid 21568:tid 21583] [client 20.251.36.179:58421] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "adk9fIiz5v_ljZxkpR_T7gAAAQs"]
[Sat Apr 11 02:12:12.816174 2026] [:error] [pid 21570:tid 21675] [client 20.251.36.179:58373] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "adk9fDKs5t9xRSNL6cnP1AAAAEc"]
[Sat Apr 11 02:12:13.339103 2026] [:error] [pid 21568:tid 21591] [client 20.251.36.179:3388] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "adk9fYiz5v_ljZxkpR_T8wAAARM"]
[Sat Apr 11 02:12:13.851660 2026] [:error] [pid 55451:tid 55455] [client 20.251.36.179:58378] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "adk9fXApxuyB7yCS5RkXvQAAAMI"]
[Sat Apr 11 02:12:14.381377 2026] [:error] [pid 21570:tid 21693] [client 20.251.36.179:58398] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "adk9fjKs5t9xRSNL6cnP2gAAAFM"]
[Sat Apr 11 02:12:14.898520 2026] [:error] [pid 55451:tid 55460] [client 20.251.36.179:60323] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "adk9fnApxuyB7yCS5RkXvwAAAMc"]
[Sat Apr 11 02:12:15.429653 2026] [:error] [pid 21570:tid 21688] [client 20.251.36.179:59532] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "adk9fzKs5t9xRSNL6cnP3wAAAE4"]
[Sat Apr 11 02:12:15.943425 2026] [:error] [pid 21570:tid 21673] [client 20.251.36.179:3353] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "adk9fzKs5t9xRSNL6cnP4gAAAEY"]
[Sat Apr 11 02:12:16.458797 2026] [:error] [pid 55451:tid 55464] [client 20.251.36.179:59523] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "adk9gHApxuyB7yCS5RkXxQAAAMs"]
[Sat Apr 11 02:12:16.974544 2026] [:error] [pid 21568:tid 21576] [client 20.251.36.179:59527] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "adk9gIiz5v_ljZxkpR_UCAAAAQQ"]
[Sat Apr 11 02:12:17.505862 2026] [:error] [pid 21706:tid 21708] [client 20.251.36.179:58425] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "adk9gSGQ1M5d8fQSsLG0SQAAAAA"]
[Sat Apr 11 02:12:18.025887 2026] [:error] [pid 21706:tid 21713] [client 20.251.36.179:3384] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "adk9giGQ1M5d8fQSsLG0UgAAAAU"]
[Sat Apr 11 02:12:18.537744 2026] [:error] [pid 21569:tid 21676] [client 20.251.36.179:60305] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "adk9gnAvQTgvXJ6vHoqiaAAAAJU"]
[Sat Apr 11 02:12:19.064685 2026] [:error] [pid 55451:tid 55456] [client 20.251.36.179:3376] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "adk9g3ApxuyB7yCS5RkXywAAAMM"]
[Sat Apr 11 02:12:19.584034 2026] [:error] [pid 55451:tid 55466] [client 20.251.36.179:58420] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "adk9g3ApxuyB7yCS5RkX0QAAAM0"]
[Sat Apr 11 02:12:20.109548 2026] [:error] [pid 21706:tid 21732] [client 20.251.36.179:59552] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "adk9hCGQ1M5d8fQSsLG0YAAAABg"]
[Sat Apr 11 02:12:20.662105 2026] [:error] [pid 55451:tid 55475] [client 20.251.36.179:60288] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "adk9hHApxuyB7yCS5RkX2wAAANY"]
[Sat Apr 11 02:12:21.202218 2026] [:error] [pid 55451:tid 55460] [client 20.251.36.179:58403] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "adk9hXApxuyB7yCS5RkX4gAAAMc"]
[Sat Apr 11 02:12:21.725995 2026] [:error] [pid 55451:tid 55457] [client 20.251.36.179:59555] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "adk9hXApxuyB7yCS5RkX5gAAAMQ"]
[Sat Apr 11 02:12:22.246371 2026] [:error] [pid 21706:tid 21724] [client 20.251.36.179:58402] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "adk9hiGQ1M5d8fQSsLG0ZAAAABA"]
[Sat Apr 11 02:12:22.775244 2026] [:error] [pid 21706:tid 21732] [client 20.251.36.179:3390] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "adk9hiGQ1M5d8fQSsLG0bgAAABg"]
[Sat Apr 11 02:12:23.296988 2026] [:error] [pid 21706:tid 21732] [client 20.251.36.179:59521] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "adk9hyGQ1M5d8fQSsLG0dwAAABg"]
[Sat Apr 11 02:12:23.818750 2026] [:error] [pid 55451:tid 55471] [client 20.251.36.179:58427] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "adk9h3ApxuyB7yCS5RkX6wAAANI"]
[Sat Apr 11 02:12:24.345017 2026] [:error] [pid 21706:tid 21719] [client 20.251.36.179:59587] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "adk9iCGQ1M5d8fQSsLG0fwAAAAs"]
[Sat Apr 11 02:12:24.865971 2026] [:error] [pid 21569:tid 21678] [client 20.251.36.179:58368] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "adk9iHAvQTgvXJ6vHoqibgAAAJY"]
[Sat Apr 11 02:12:25.397466 2026] [:error] [pid 21568:tid 21583] [client 20.251.36.179:60320] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "adk9iYiz5v_ljZxkpR_UHgAAAQs"]
[Sat Apr 11 02:12:25.908656 2026] [:error] [pid 21706:tid 21714] [client 20.251.36.179:60327] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "adk9iSGQ1M5d8fQSsLG0iAAAAAY"]
[Sat Apr 11 02:12:26.422418 2026] [:error] [pid 55451:tid 55471] [client 20.251.36.179:58429] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "adk9inApxuyB7yCS5RkX8wAAANI"]
[Sat Apr 11 02:12:26.934970 2026] [:error] [pid 21569:tid 21653] [client 20.251.36.179:3355] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "adk9inAvQTgvXJ6vHoqicQAAAIg"]
[Sat Apr 11 02:12:27.469300 2026] [:error] [pid 55451:tid 55465] [client 20.251.36.179:3344] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "adk9i3ApxuyB7yCS5RkX-gAAAMw"]
[Sat Apr 11 02:12:27.981434 2026] [:error] [pid 21568:tid 21589] [client 20.251.36.179:58390] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "adk9i4iz5v_ljZxkpR_UJQAAARE"]
[Sat Apr 11 02:12:28.572153 2026] [:error] [pid 55451:tid 55459] [client 20.251.36.179:59535] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "adk9jHApxuyB7yCS5RkX_QAAAMY"]
[Sat Apr 11 02:12:29.098416 2026] [:error] [pid 21568:tid 21583] [client 20.251.36.179:58415] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "adk9jYiz5v_ljZxkpR_ULgAAAQs"]
[Sat Apr 11 02:12:29.685671 2026] [:error] [pid 21706:tid 21725] [client 20.251.36.179:60344] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.mopj.php"] [unique_id "adk9jSGQ1M5d8fQSsLG0mAAAABE"]
[Sat Apr 11 02:12:30.210510 2026] [:error] [pid 21568:tid 21574] [client 20.251.36.179:59526] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.mopj.php"] [unique_id "adk9joiz5v_ljZxkpR_UOAAAAQI"]
[Sat Apr 11 02:12:30.751548 2026] [:error] [pid 21706:tid 21728] [client 20.251.36.179:3383] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.mopj.php"] [unique_id "adk9jiGQ1M5d8fQSsLG0nwAAABQ"]
[Sat Apr 11 02:12:31.267110 2026] [:error] [pid 21568:tid 21584] [client 20.251.36.179:59529] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.mopj.php"] [unique_id "adk9j4iz5v_ljZxkpR_UPAAAAQw"]
[Sat Apr 11 02:12:31.874418 2026] [:error] [pid 55451:tid 55473] [client 20.251.36.179:60334] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.php"] [unique_id "adk9j3ApxuyB7yCS5RkYAwAAANQ"]
[Sat Apr 11 02:12:32.433795 2026] [:error] [pid 21706:tid 21712] [client 20.251.36.179:59537] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.php"] [unique_id "adk9kCGQ1M5d8fQSsLG0rgAAAAQ"]
[Sat Apr 11 02:12:33.043889 2026] [:error] [pid 21568:tid 21585] [client 20.251.36.179:58372] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.php"] [unique_id "adk9kYiz5v_ljZxkpR_UPwAAAQ0"]
[Sat Apr 11 02:12:33.563256 2026] [:error] [pid 21706:tid 21716] [client 20.251.36.179:3354] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.php"] [unique_id "adk9kSGQ1M5d8fQSsLG0sAAAAAg"]
[Sat Apr 11 02:12:34.076802 2026] [:error] [pid 21568:tid 21596] [client 20.251.36.179:59611] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nano.php"] [unique_id "adk9koiz5v_ljZxkpR_URQAAARg"]
[Sat Apr 11 02:12:34.594763 2026] [:error] [pid 21706:tid 21713] [client 20.251.36.179:59545] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nano.php"] [unique_id "adk9kiGQ1M5d8fQSsLG0twAAAAU"]
[Sat Apr 11 02:12:35.197043 2026] [:error] [pid 21570:tid 21698] [client 20.251.36.179:58419] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nano.php"] [unique_id "adk9kzKs5t9xRSNL6cnP-AAAAFg"]
[Sat Apr 11 02:12:35.716145 2026] [:error] [pid 21568:tid 21572] [client 20.251.36.179:3372] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nano.php"] [unique_id "adk9k4iz5v_ljZxkpR_UTAAAAQA"]
[Sat Apr 11 02:12:36.257619 2026] [:error] [pid 21569:tid 21656] [client 20.251.36.179:58380] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35_S.php"] [unique_id "adk9lHAvQTgvXJ6vHoqijgAAAIs"]
[Sat Apr 11 02:12:36.769563 2026] [:error] [pid 21568:tid 21587] [client 20.251.36.179:59542] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35_S.php"] [unique_id "adk9lIiz5v_ljZxkpR_UTwAAAQ8"]
[Sat Apr 11 02:12:37.392792 2026] [:error] [pid 55451:tid 55459] [client 20.251.36.179:60295] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35_S.php"] [unique_id "adk9lXApxuyB7yCS5RkYMwAAAMY"]
[Sat Apr 11 02:12:37.909991 2026] [:error] [pid 21706:tid 21731] [client 20.251.36.179:60328] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35_S.php"] [unique_id "adk9lSGQ1M5d8fQSsLG0ygAAABc"]
[Sat Apr 11 02:12:38.424103 2026] [:error] [pid 21706:tid 21722] [client 20.251.36.179:58387] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2026w.php"] [unique_id "adk9liGQ1M5d8fQSsLG01wAAAA4"]
[Sat Apr 11 02:12:38.953108 2026] [:error] [pid 21706:tid 21719] [client 20.251.36.179:58413] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2026w.php"] [unique_id "adk9liGQ1M5d8fQSsLG05AAAAAs"]
[Sat Apr 11 02:13:12.835923 2026] [proxy_fcgi:error] [pid 21569:tid 21678] [client 13.232.162.63:11308] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918', referer: https://makifim.com.au/
[Sat Apr 11 02:13:22.432695 2026] [proxy_fcgi:error] [pid 21706:tid 21712] [client 20.251.36.179:58424] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:13:25.576900 2026] [proxy_fcgi:error] [pid 21706:tid 21712] [client 20.251.36.179:3374] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:13:34.970948 2026] [:error] [pid 21706:tid 21725] [client 20.251.36.179:60315] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "adk9ziGQ1M5d8fQSsLG2NwAAABE"]
[Sat Apr 11 02:13:35.509767 2026] [:error] [pid 21706:tid 21724] [client 20.251.36.179:59559] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "adk9zyGQ1M5d8fQSsLG2OgAAABA"]
[Sat Apr 11 02:13:36.048169 2026] [:error] [pid 21706:tid 21720] [client 20.251.36.179:59619] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "adk90CGQ1M5d8fQSsLG2PgAAAAw"]
[Sat Apr 11 02:13:36.586745 2026] [:error] [pid 21569:tid 21674] [client 20.251.36.179:59567] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "adk90HAvQTgvXJ6vHoqjJwAAAJQ"]
[Sat Apr 11 02:13:37.161110 2026] [:error] [pid 21706:tid 21725] [client 20.251.36.179:59204] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "adk90SGQ1M5d8fQSsLG2RAAAABE"]
[Sat Apr 11 02:13:37.690908 2026] [:error] [pid 21706:tid 21714] [client 20.251.36.179:3331] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "adk90SGQ1M5d8fQSsLG2RgAAAAY"]
[Sat Apr 11 02:13:38.233814 2026] [:error] [pid 21706:tid 21723] [client 20.251.36.179:60293] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "adk90iGQ1M5d8fQSsLG2UAAAAA8"]
[Sat Apr 11 02:13:38.773830 2026] [:error] [pid 21568:tid 21581] [client 20.251.36.179:59253] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "adk90oiz5v_ljZxkpR_VCAAAAQk"]
[Sat Apr 11 02:13:39.291520 2026] [:error] [pid 21570:tid 21677] [client 20.251.36.179:59548] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "adk90zKs5t9xRSNL6cnQsQAAAEg"]
[Sat Apr 11 02:13:39.810091 2026] [:error] [pid 55451:tid 55465] [client 20.251.36.179:58395] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "adk903ApxuyB7yCS5RkZYwAAAMw"]
[Sat Apr 11 02:13:40.373842 2026] [:error] [pid 55451:tid 55467] [client 20.251.36.179:58406] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "adk91HApxuyB7yCS5RkZaAAAAM4"]
[Sat Apr 11 02:13:40.897861 2026] [:error] [pid 55451:tid 55461] [client 20.251.36.179:3385] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "adk91HApxuyB7yCS5RkZcAAAAMg"]
[Sat Apr 11 02:13:41.421791 2026] [:error] [pid 21706:tid 21715] [client 20.251.36.179:58384] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "adk91SGQ1M5d8fQSsLG2aQAAAAc"]
[Sat Apr 11 02:13:41.940513 2026] [:error] [pid 21706:tid 21718] [client 20.251.36.179:60346] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "adk91SGQ1M5d8fQSsLG2agAAAAo"]
[Sat Apr 11 02:13:42.455477 2026] [:error] [pid 21570:tid 21696] [client 20.251.36.179:3329] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "adk91jKs5t9xRSNL6cnQtAAAAFY"]
[Sat Apr 11 02:13:42.974800 2026] [:error] [pid 21706:tid 21717] [client 20.251.36.179:58411] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "adk91iGQ1M5d8fQSsLG2eAAAAAk"]
[Sat Apr 11 02:13:43.489115 2026] [:error] [pid 21706:tid 21722] [client 20.251.36.179:59613] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sf.php"] [unique_id "adk91yGQ1M5d8fQSsLG2fQAAAA4"]
[Sat Apr 11 02:13:44.005368 2026] [:error] [pid 21706:tid 21723] [client 20.251.36.179:58407] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sf.php"] [unique_id "adk92CGQ1M5d8fQSsLG2gwAAAA8"]
[Sat Apr 11 02:13:44.539730 2026] [:error] [pid 21706:tid 21713] [client 20.251.36.179:60311] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sf.php"] [unique_id "adk92CGQ1M5d8fQSsLG2jAAAAAU"]
[Sat Apr 11 02:13:45.060754 2026] [:error] [pid 21706:tid 21718] [client 20.251.36.179:59610] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sf.php"] [unique_id "adk92SGQ1M5d8fQSsLG2kwAAAAo"]
[Sat Apr 11 02:13:45.620993 2026] [:error] [pid 21706:tid 21717] [client 20.251.36.179:3335] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "adk92SGQ1M5d8fQSsLG2mQAAAAk"]
[Sat Apr 11 02:13:46.135262 2026] [:error] [pid 21706:tid 21726] [client 20.251.36.179:59600] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "adk92iGQ1M5d8fQSsLG2owAAABI"]
[Sat Apr 11 02:13:46.661463 2026] [:error] [pid 21569:tid 21659] [client 20.251.36.179:3334] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "adk92nAvQTgvXJ6vHoqjMAAAAI0"]
[Sat Apr 11 02:13:47.179222 2026] [:error] [pid 55451:tid 55477] [client 20.251.36.179:60347] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "adk923ApxuyB7yCS5RkZqgAAANg"]
[Sat Apr 11 02:13:47.711375 2026] [:error] [pid 21568:tid 21581] [client 20.251.36.179:3347] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "adk924iz5v_ljZxkpR_VKAAAAQk"]
[Sat Apr 11 02:13:48.231957 2026] [:error] [pid 21569:tid 21683] [client 20.251.36.179:59632] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "adk93HAvQTgvXJ6vHoqjMwAAAJg"]
[Sat Apr 11 02:13:48.744929 2026] [:error] [pid 21569:tid 21662] [client 20.251.36.179:58399] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "adk93HAvQTgvXJ6vHoqjNwAAAI8"]
[Sat Apr 11 02:13:49.259609 2026] [:error] [pid 21568:tid 21572] [client 20.251.36.179:3373] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "adk93Yiz5v_ljZxkpR_VLAAAAQA"]
[Sat Apr 11 02:13:49.792802 2026] [:error] [pid 21706:tid 21717] [client 20.251.36.179:3379] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "adk93SGQ1M5d8fQSsLG2rgAAAAk"]
[Sat Apr 11 02:13:50.310460 2026] [:error] [pid 21568:tid 21580] [client 20.251.36.179:59576] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "adk93oiz5v_ljZxkpR_VNgAAAQg"]
[Sat Apr 11 02:13:50.821196 2026] [:error] [pid 21706:tid 21731] [client 20.251.36.179:60306] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "adk93iGQ1M5d8fQSsLG2tgAAABc"]
[Sat Apr 11 02:13:51.337941 2026] [:error] [pid 21570:tid 21692] [client 20.251.36.179:3339] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "adk93zKs5t9xRSNL6cnQwwAAAFI"]
[Sat Apr 11 02:13:51.855166 2026] [:error] [pid 21569:tid 21646] [client 20.251.36.179:59594] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "adk933AvQTgvXJ6vHoqjQAAAAIE"]
[Sat Apr 11 02:13:52.374795 2026] [:error] [pid 55451:tid 55473] [client 20.251.36.179:59205] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "adk94HApxuyB7yCS5RkZ2AAAANQ"]
[Sat Apr 11 02:13:52.897103 2026] [:error] [pid 21570:tid 21685] [client 20.251.36.179:59215] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "adk94DKs5t9xRSNL6cnQxwAAAEw"]
[Sat Apr 11 02:13:53.418493 2026] [:error] [pid 55451:tid 55458] [client 20.251.36.179:60298] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "adk94XApxuyB7yCS5RkZ5QAAAMU"]
[Sat Apr 11 02:13:53.935481 2026] [:error] [pid 21568:tid 21587] [client 20.251.36.179:58417] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "adk94Yiz5v_ljZxkpR_VRwAAAQ8"]
[Sat Apr 11 02:13:54.451005 2026] [:error] [pid 21706:tid 21717] [client 20.251.36.179:59574] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "adk94iGQ1M5d8fQSsLG2wwAAAAk"]
[Sat Apr 11 02:13:54.965539 2026] [:error] [pid 21569:tid 21650] [client 20.251.36.179:59548] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "adk94nAvQTgvXJ6vHoqjSQAAAIU"]
[Sat Apr 11 02:13:55.478193 2026] [:error] [pid 55451:tid 55474] [client 20.251.36.179:59547] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "adk943ApxuyB7yCS5RkZ7gAAANU"]
[Sat Apr 11 02:13:55.992617 2026] [:error] [pid 21568:tid 21596] [client 20.251.36.179:59556] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "adk944iz5v_ljZxkpR_VTAAAARg"]
[Sat Apr 11 02:13:56.504917 2026] [:error] [pid 21569:tid 21659] [client 20.251.36.179:60299] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "adk95HAvQTgvXJ6vHoqjVQAAAI0"]
[Sat Apr 11 02:13:57.035076 2026] [:error] [pid 55451:tid 55453] [client 20.251.36.179:60297] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "adk95XApxuyB7yCS5RkZ8gAAAMA"]
[Sat Apr 11 02:13:57.563331 2026] [:error] [pid 21706:tid 21727] [client 20.251.36.179:59593] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "adk95SGQ1M5d8fQSsLG22QAAABM"]
[Sat Apr 11 02:13:58.079417 2026] [:error] [pid 21569:tid 21660] [client 20.251.36.179:58375] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adk95nAvQTgvXJ6vHoqjYAAAAI4"]
[Sat Apr 11 02:13:58.596629 2026] [:error] [pid 21569:tid 21664] [client 20.251.36.179:58400] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adk95nAvQTgvXJ6vHoqjZgAAAJA"]
[Sat Apr 11 02:13:59.108750 2026] [:error] [pid 55451:tid 55460] [client 20.251.36.179:59591] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adk953ApxuyB7yCS5RkZ-AAAAMc"]
[Sat Apr 11 02:13:59.704594 2026] [:error] [pid 21568:tid 21572] [client 20.251.36.179:60351] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adk954iz5v_ljZxkpR_VXwAAAQA"]
[Sat Apr 11 02:14:00.218136 2026] [:error] [pid 21706:tid 21716] [client 20.251.36.179:60337] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "adk96CGQ1M5d8fQSsLG24gAAAAg"]
[Sat Apr 11 02:14:00.795171 2026] [:error] [pid 55451:tid 55453] [client 20.251.36.179:59543] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "adk96HApxuyB7yCS5RkZ_QAAAMA"]
[Sat Apr 11 02:14:01.330476 2026] [:error] [pid 21569:tid 21676] [client 20.251.36.179:58369] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "adk96XAvQTgvXJ6vHoqjdgAAAJU"]
[Sat Apr 11 02:14:01.875862 2026] [:error] [pid 21568:tid 21572] [client 20.251.36.179:59588] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "adk96Yiz5v_ljZxkpR_VawAAAQA"]
[Sat Apr 11 02:14:02.392647 2026] [:error] [pid 21568:tid 21581] [client 20.251.36.179:3365] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "adk96oiz5v_ljZxkpR_VcAAAAQk"]
[Sat Apr 11 02:14:02.909308 2026] [:error] [pid 21570:tid 21688] [client 20.251.36.179:60343] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "adk96jKs5t9xRSNL6cnQ1gAAAE4"]
[Sat Apr 11 02:14:03.423706 2026] [:error] [pid 21706:tid 21717] [client 20.251.36.179:3362] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "adk96yGQ1M5d8fQSsLG27wAAAAk"]
[Sat Apr 11 02:14:03.973257 2026] [:error] [pid 21706:tid 21727] [client 20.251.36.179:3382] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "adk96yGQ1M5d8fQSsLG29gAAABM"]
[Sat Apr 11 02:14:04.486800 2026] [:error] [pid 21706:tid 21723] [client 20.251.36.179:3356] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ol.php"] [unique_id "adk97CGQ1M5d8fQSsLG2_AAAAA8"]
[Sat Apr 11 02:14:05.015472 2026] [:error] [pid 21568:tid 21584] [client 20.251.36.179:59523] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ol.php"] [unique_id "adk97Yiz5v_ljZxkpR_VdQAAAQw"]
[Sat Apr 11 02:14:05.532986 2026] [:error] [pid 21568:tid 21588] [client 20.251.36.179:59546] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ol.php"] [unique_id "adk97Yiz5v_ljZxkpR_VfQAAARA"]
[Sat Apr 11 02:14:06.046710 2026] [:error] [pid 21706:tid 21721] [client 20.251.36.179:59530] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ol.php"] [unique_id "adk97iGQ1M5d8fQSsLG3AwAAAA0"]
[Sat Apr 11 02:14:06.561824 2026] [:error] [pid 55451:tid 55473] [client 20.251.36.179:59212] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "adk97nApxuyB7yCS5RkaCgAAANQ"]
[Sat Apr 11 02:14:07.117904 2026] [:error] [pid 21568:tid 21589] [client 20.251.36.179:59560] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "adk974iz5v_ljZxkpR_VgQAAARE"]
[Sat Apr 11 02:14:07.638693 2026] [:error] [pid 21568:tid 21579] [client 20.251.36.179:59577] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "adk974iz5v_ljZxkpR_VhgAAAQc"]
[Sat Apr 11 02:14:08.174667 2026] [:error] [pid 21570:tid 21694] [client 20.251.36.179:59578] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "adk98DKs5t9xRSNL6cnQ2gAAAFQ"]
[Sat Apr 11 02:14:08.687808 2026] [:error] [pid 21706:tid 21709] [client 20.251.36.179:59144] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "adk98CGQ1M5d8fQSsLG3CAAAAAE"]
[Sat Apr 11 02:14:09.207760 2026] [:error] [pid 21706:tid 21725] [client 20.251.36.179:60340] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "adk98SGQ1M5d8fQSsLG3DAAAABE"]
[Sat Apr 11 02:14:09.728213 2026] [:error] [pid 21568:tid 21592] [client 20.251.36.179:58385] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "adk98Yiz5v_ljZxkpR_VkwAAARQ"]
[Sat Apr 11 02:14:10.243394 2026] [:error] [pid 21706:tid 21728] [client 20.251.36.179:59167] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "adk98iGQ1M5d8fQSsLG3EwAAABQ"]
[Sat Apr 11 02:14:10.757594 2026] [:error] [pid 55451:tid 55468] [client 20.251.36.179:60303] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/style.php"] [unique_id "adk98nApxuyB7yCS5RkaFQAAAM8"]
[Sat Apr 11 02:14:11.270546 2026] [:error] [pid 55451:tid 55466] [client 20.251.36.179:59586] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/style.php"] [unique_id "adk983ApxuyB7yCS5RkaGgAAAM0"]
[Sat Apr 11 02:14:11.783138 2026] [:error] [pid 21569:tid 21650] [client 20.251.36.179:58381] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/style.php"] [unique_id "adk983AvQTgvXJ6vHoqjlAAAAIU"]
[Sat Apr 11 02:14:12.298574 2026] [:error] [pid 21706:tid 21713] [client 20.251.36.179:59538] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/style.php"] [unique_id "adk99CGQ1M5d8fQSsLG3GgAAAAU"]
[Sat Apr 11 02:14:12.811011 2026] [:error] [pid 21706:tid 21732] [client 20.251.36.179:3351] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "adk99CGQ1M5d8fQSsLG3GwAAABg"]
[Sat Apr 11 02:14:13.325250 2026] [:error] [pid 21706:tid 21714] [client 20.251.36.179:59592] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "adk99SGQ1M5d8fQSsLG3HwAAAAY"]
[Sat Apr 11 02:14:13.846451 2026] [:error] [pid 21706:tid 21710] [client 20.251.36.179:59541] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "adk99SGQ1M5d8fQSsLG3JgAAAAI"]
[Sat Apr 11 02:14:14.361232 2026] [:error] [pid 21706:tid 21732] [client 20.251.36.179:59222] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "adk99iGQ1M5d8fQSsLG3KgAAABg"]
[Sat Apr 11 02:14:14.899332 2026] [:error] [pid 55451:tid 55476] [client 20.251.36.179:3363] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "adk99nApxuyB7yCS5RkaPAAAANc"]
[Sat Apr 11 02:14:15.414894 2026] [:error] [pid 21568:tid 21588] [client 20.251.36.179:59207] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "adk994iz5v_ljZxkpR_VoQAAARA"]
[Sat Apr 11 02:14:15.942151 2026] [:error] [pid 21706:tid 21717] [client 20.251.36.179:60348] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "adk99yGQ1M5d8fQSsLG3KwAAAAk"]
[Sat Apr 11 02:14:16.462249 2026] [:error] [pid 21706:tid 21712] [client 20.251.36.179:3387] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "adk9-CGQ1M5d8fQSsLG3MQAAAAQ"]
[Sat Apr 11 02:14:16.973633 2026] [:error] [pid 21568:tid 21586] [client 20.251.36.179:60350] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adk9-Iiz5v_ljZxkpR_VowAAAQ4"]
[Sat Apr 11 02:14:17.488481 2026] [:error] [pid 21570:tid 21693] [client 20.251.36.179:60335] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adk9-TKs5t9xRSNL6cnQ4QAAAFM"]
[Sat Apr 11 02:14:18.012629 2026] [:error] [pid 21570:tid 21661] [client 20.251.36.179:59625] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adk9-jKs5t9xRSNL6cnQ6AAAAEA"]
[Sat Apr 11 02:14:18.526189 2026] [:error] [pid 21568:tid 21592] [client 20.251.36.179:60325] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adk9-oiz5v_ljZxkpR_VqAAAARQ"]
[Sat Apr 11 02:14:19.042567 2026] [:error] [pid 21706:tid 21712] [client 20.251.36.179:59227] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless4.php"] [unique_id "adk9-yGQ1M5d8fQSsLG3NwAAAAQ"]
[Sat Apr 11 02:14:19.562217 2026] [:error] [pid 21706:tid 21719] [client 20.251.36.179:59149] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless4.php"] [unique_id "adk9-yGQ1M5d8fQSsLG3PAAAAAs"]
[Sat Apr 11 02:14:20.080097 2026] [:error] [pid 21569:tid 21680] [client 20.251.36.179:59228] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless4.php"] [unique_id "adk9_HAvQTgvXJ6vHoqjpwAAAJc"]
[Sat Apr 11 02:14:20.593157 2026] [:error] [pid 21570:tid 21675] [client 20.251.36.179:60290] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bless4.php"] [unique_id "adk9_DKs5t9xRSNL6cnQ9wAAAEc"]
[Sat Apr 11 02:14:21.114994 2026] [:error] [pid 55451:tid 55466] [client 20.251.36.179:59550] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "adk9_XApxuyB7yCS5RkaSQAAAM0"]
[Sat Apr 11 02:14:21.629762 2026] [:error] [pid 21706:tid 21728] [client 20.251.36.179:59619] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "adk9_SGQ1M5d8fQSsLG3QQAAABQ"]
[Sat Apr 11 02:14:22.143736 2026] [:error] [pid 21570:tid 21687] [client 20.251.36.179:59250] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "adk9_jKs5t9xRSNL6cnQ-wAAAE0"]
[Sat Apr 11 02:14:22.665200 2026] [:error] [pid 21570:tid 21694] [client 20.251.36.179:3359] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "adk9_jKs5t9xRSNL6cnQ_AAAAFQ"]
[Sat Apr 11 02:14:23.182486 2026] [:error] [pid 21570:tid 21695] [client 20.251.36.179:58426] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "adk9_zKs5t9xRSNL6cnQ_gAAAFU"]
[Sat Apr 11 02:14:23.704577 2026] [:error] [pid 21570:tid 21685] [client 20.251.36.179:58374] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "adk9_zKs5t9xRSNL6cnRBgAAAEw"]
[Sat Apr 11 02:14:24.220411 2026] [:error] [pid 21568:tid 21579] [client 20.251.36.179:59209] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "adk-AIiz5v_ljZxkpR_VtwAAAQc"]
[Sat Apr 11 02:14:24.731371 2026] [:error] [pid 21706:tid 21717] [client 20.251.36.179:58479] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xqq.php"] [unique_id "adk-ACGQ1M5d8fQSsLG3SQAAAAk"]
[Sat Apr 11 02:14:25.242472 2026] [:error] [pid 21568:tid 21574] [client 20.251.36.179:3340] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plss3.php"] [unique_id "adk-AYiz5v_ljZxkpR_VvAAAAQI"]
[Sat Apr 11 02:14:25.761198 2026] [:error] [pid 21568:tid 21586] [client 20.251.36.179:59557] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plss3.php"] [unique_id "adk-AYiz5v_ljZxkpR_VvwAAAQ4"]
[Sat Apr 11 02:14:26.274165 2026] [:error] [pid 21706:tid 21718] [client 20.251.36.179:59525] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plss3.php"] [unique_id "adk-AiGQ1M5d8fQSsLG3TAAAAAo"]
[Sat Apr 11 02:14:26.788226 2026] [:error] [pid 21706:tid 21708] [client 20.251.36.179:59183] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plss3.php"] [unique_id "adk-AiGQ1M5d8fQSsLG3TwAAAAA"]
[Sat Apr 11 02:14:27.300087 2026] [:error] [pid 21706:tid 21719] [client 20.251.36.179:59520] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "adk-AyGQ1M5d8fQSsLG3UQAAAAs"]
[Sat Apr 11 02:14:27.814772 2026] [:error] [pid 55451:tid 55477] [client 20.251.36.179:59598] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "adk-A3ApxuyB7yCS5RkaWwAAANg"]
[Sat Apr 11 02:14:28.328200 2026] [:error] [pid 21706:tid 21730] [client 20.251.36.179:59596] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "adk-BCGQ1M5d8fQSsLG3VQAAABY"]
[Sat Apr 11 02:14:28.842912 2026] [:error] [pid 21706:tid 21728] [client 20.251.36.179:59580] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "adk-BCGQ1M5d8fQSsLG3WAAAABQ"]
[Sat Apr 11 02:14:29.355658 2026] [:error] [pid 21568:tid 21575] [client 20.251.36.179:59561] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adk-BYiz5v_ljZxkpR_VzQAAAQM"]
[Sat Apr 11 02:14:29.868597 2026] [:error] [pid 55451:tid 55454] [client 20.251.36.179:60326] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adk-BXApxuyB7yCS5RkaXwAAAME"]
[Sat Apr 11 02:14:30.379732 2026] [:error] [pid 21570:tid 21685] [client 20.251.36.179:58457] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adk-BjKs5t9xRSNL6cnRCwAAAEw"]
[Sat Apr 11 02:14:30.891895 2026] [:error] [pid 21570:tid 21663] [client 20.251.36.179:59242] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adk-BjKs5t9xRSNL6cnRDgAAAEE"]
[Sat Apr 11 02:14:31.402488 2026] [:error] [pid 21568:tid 21590] [client 20.251.36.179:59534] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adk-B4iz5v_ljZxkpR_V1AAAARI"]
[Sat Apr 11 02:14:31.913973 2026] [:error] [pid 21568:tid 21596] [client 20.251.36.179:58436] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adk-B4iz5v_ljZxkpR_V1gAAARg"]
[Sat Apr 11 02:14:37.432446 2026] [:error] [pid 21569:tid 21671] [client 20.251.36.179:60339] [client 20.251.36.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adk-DXAvQTgvXJ6vHoqjwQAAAJM"]
[Sat Apr 11 02:14:50.441365 2026] [autoindex:error] [pid 21568:tid 21591] [client 20.251.36.179:60336] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 11 02:15:07.444035 2026] [proxy_fcgi:error] [pid 21568:tid 21581] [client 20.251.36.179:3367] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:15:20.667939 2026] [proxy_fcgi:error] [pid 21568:tid 21581] [client 20.251.36.179:60336] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:15:28.926178 2026] [:error] [pid 55451:tid 55466] [client 20.251.36.179:3364] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "adk-QHApxuyB7yCS5RkbNgAAAM0"]
[Sat Apr 11 02:15:29.446866 2026] [:error] [pid 21706:tid 21732] [client 20.251.36.179:59612] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "adk-QSGQ1M5d8fQSsLG4IgAAABg"]
[Sat Apr 11 02:15:29.969030 2026] [:error] [pid 21568:tid 21577] [client 20.251.36.179:59573] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "adk-QYiz5v_ljZxkpR_WgAAAAQU"]
[Sat Apr 11 02:15:30.487331 2026] [:error] [pid 21568:tid 21585] [client 20.251.36.179:59595] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "adk-Qoiz5v_ljZxkpR_WgwAAAQ0"]
[Sat Apr 11 02:15:31.001098 2026] [:error] [pid 21706:tid 21728] [client 20.251.36.179:3342] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-michan.php"] [unique_id "adk-QyGQ1M5d8fQSsLG4KgAAABQ"]
[Sat Apr 11 02:15:31.521096 2026] [:error] [pid 21570:tid 21692] [client 20.251.36.179:58394] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-michan.php"] [unique_id "adk-QzKs5t9xRSNL6cnRnwAAAFI"]
[Sat Apr 11 02:15:32.041323 2026] [:error] [pid 21568:tid 21572] [client 20.251.36.179:59206] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-michan.php"] [unique_id "adk-RIiz5v_ljZxkpR_WiAAAAQA"]
[Sat Apr 11 02:15:32.555778 2026] [:error] [pid 21569:tid 21662] [client 20.251.36.179:60331] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-michan.php"] [unique_id "adk-RHAvQTgvXJ6vHoqkDwAAAI8"]
[Sat Apr 11 02:15:33.074303 2026] [:error] [pid 21568:tid 21577] [client 20.251.36.179:59563] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "adk-RYiz5v_ljZxkpR_WjAAAAQU"]
[Sat Apr 11 02:15:33.592187 2026] [:error] [pid 21570:tid 21665] [client 20.251.36.179:58386] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "adk-RTKs5t9xRSNL6cnRowAAAEI"]
[Sat Apr 11 02:15:34.130828 2026] [:error] [pid 55451:tid 55476] [client 20.251.36.179:59254] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "adk-RnApxuyB7yCS5RkbPwAAANc"]
[Sat Apr 11 02:15:34.643601 2026] [:error] [pid 55451:tid 55461] [client 20.251.36.179:59575] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "adk-RnApxuyB7yCS5RkbQQAAAMg"]
[Sat Apr 11 02:15:35.155764 2026] [:error] [pid 21706:tid 21709] [client 20.251.36.179:59214] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adk-RyGQ1M5d8fQSsLG4NgAAAAE"]
[Sat Apr 11 02:15:35.669010 2026] [:error] [pid 55451:tid 55468] [client 20.251.36.179:58377] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adk-R3ApxuyB7yCS5RkbRAAAAM8"]
[Sat Apr 11 02:15:36.184555 2026] [:error] [pid 21706:tid 21715] [client 20.251.36.179:59544] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adk-SCGQ1M5d8fQSsLG4PQAAAAc"]
[Sat Apr 11 02:15:36.703928 2026] [:error] [pid 21706:tid 21726] [client 20.251.36.179:59226] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adk-SCGQ1M5d8fQSsLG4RAAAABI"]
[Sat Apr 11 02:15:37.218460 2026] [:error] [pid 21706:tid 21712] [client 20.251.36.179:59605] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "adk-SSGQ1M5d8fQSsLG4SAAAAAQ"]
[Sat Apr 11 02:15:37.736700 2026] [:error] [pid 21706:tid 21709] [client 20.251.36.179:60317] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "adk-SSGQ1M5d8fQSsLG4SwAAAAE"]
[Sat Apr 11 02:15:38.269989 2026] [:error] [pid 21706:tid 21730] [client 20.251.36.179:59581] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "adk-SiGQ1M5d8fQSsLG4TwAAABY"]
[Sat Apr 11 02:15:38.780779 2026] [:error] [pid 21706:tid 21727] [client 20.251.36.179:59558] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "adk-SiGQ1M5d8fQSsLG4UgAAABM"]
[Sat Apr 11 02:15:39.294361 2026] [:error] [pid 55451:tid 55468] [client 20.251.36.179:59627] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adk-S3ApxuyB7yCS5RkbUAAAAM8"]
[Sat Apr 11 02:15:39.814709 2026] [:error] [pid 55451:tid 55472] [client 20.251.36.179:59549] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adk-S3ApxuyB7yCS5RkbVQAAANM"]
[Sat Apr 11 02:15:40.335192 2026] [:error] [pid 21568:tid 21580] [client 20.251.36.179:59236] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adk-TIiz5v_ljZxkpR_WnAAAAQg"]
[Sat Apr 11 02:15:40.856818 2026] [:error] [pid 55451:tid 55463] [client 20.251.36.179:58422] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adk-THApxuyB7yCS5RkbWwAAAMo"]
[Sat Apr 11 02:15:41.383488 2026] [:error] [pid 21570:tid 21697] [client 20.251.36.179:3328] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "adk-TTKs5t9xRSNL6cnRrgAAAFc"]
[Sat Apr 11 02:15:41.906902 2026] [:error] [pid 21569:tid 21654] [client 20.251.36.179:59261] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "adk-TXAvQTgvXJ6vHoqkGAAAAIk"]
[Sat Apr 11 02:15:42.440531 2026] [:error] [pid 21568:tid 21587] [client 20.251.36.179:59584] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "adk-Toiz5v_ljZxkpR_WoQAAAQ8"]
[Sat Apr 11 02:15:43.031764 2026] [:error] [pid 21570:tid 21670] [client 20.251.36.179:59240] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "adk-TzKs5t9xRSNL6cnRsgAAAEQ"]
[Sat Apr 11 02:15:43.547743 2026] [:error] [pid 21706:tid 21710] [client 20.251.36.179:59617] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "adk-TyGQ1M5d8fQSsLG4XAAAAAI"]
[Sat Apr 11 02:15:44.088560 2026] [:error] [pid 55451:tid 55476] [client 20.251.36.179:59148] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "adk-UHApxuyB7yCS5RkbaAAAANc"]
[Sat Apr 11 02:15:44.642451 2026] [:error] [pid 21568:tid 21581] [client 20.251.36.179:59187] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "adk-UIiz5v_ljZxkpR_WqAAAAQk"]
[Sat Apr 11 02:15:45.152085 2026] [:error] [pid 21568:tid 21593] [client 20.251.36.179:59602] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "adk-UYiz5v_ljZxkpR_WqwAAARU"]
[Sat Apr 11 02:15:45.665490 2026] [:error] [pid 21706:tid 21728] [client 20.251.36.179:59551] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adk-USGQ1M5d8fQSsLG4ZgAAABQ"]
[Sat Apr 11 02:15:46.207879 2026] [:error] [pid 55451:tid 55474] [client 20.251.36.179:58401] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adk-UnApxuyB7yCS5RkbcwAAANU"]
[Sat Apr 11 02:15:46.726069 2026] [:error] [pid 21568:tid 21580] [client 20.251.36.179:58423] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adk-Uoiz5v_ljZxkpR_WrwAAAQg"]
[Sat Apr 11 02:15:47.267870 2026] [:error] [pid 21570:tid 21672] [client 20.251.36.179:59241] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adk-UzKs5t9xRSNL6cnRtwAAAEU"]
[Sat Apr 11 02:15:47.799874 2026] [:error] [pid 21706:tid 21716] [client 20.251.36.179:59244] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "adk-UyGQ1M5d8fQSsLG4cQAAAAg"]
[Sat Apr 11 02:15:48.339608 2026] [:error] [pid 21706:tid 21729] [client 20.251.36.179:59533] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "adk-VCGQ1M5d8fQSsLG4dQAAABU"]
[Sat Apr 11 02:15:48.858880 2026] [:error] [pid 21706:tid 21726] [client 20.251.36.179:58404] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "adk-VCGQ1M5d8fQSsLG4eQAAABI"]
[Sat Apr 11 02:15:49.376648 2026] [:error] [pid 55451:tid 55455] [client 20.251.36.179:59201] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "adk-VXApxuyB7yCS5RkbewAAAMI"]
[Sat Apr 11 02:15:49.923896 2026] [:error] [pid 21568:tid 21595] [client 20.251.36.179:59202] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adk-VYiz5v_ljZxkpR_WtwAAARc"]
[Sat Apr 11 02:15:50.529788 2026] [:error] [pid 21706:tid 21723] [client 20.251.36.179:59635] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adk-ViGQ1M5d8fQSsLG4fwAAAA8"]
[Sat Apr 11 02:15:51.060547 2026] [:error] [pid 21570:tid 21679] [client 20.251.36.179:58444] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adk-VzKs5t9xRSNL6cnRugAAAEk"]
[Sat Apr 11 02:15:51.705792 2026] [:error] [pid 55451:tid 55475] [client 20.251.36.179:57947] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adk-V3ApxuyB7yCS5RkbhgAAANY"]
[Sat Apr 11 02:15:52.223658 2026] [:error] [pid 55451:tid 55476] [client 20.251.36.179:3357] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "adk-WHApxuyB7yCS5RkbjAAAANc"]
[Sat Apr 11 02:15:52.742275 2026] [:error] [pid 55451:tid 55453] [client 20.251.36.179:59644] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "adk-WHApxuyB7yCS5RkbkAAAAMA"]
[Sat Apr 11 02:15:53.262876 2026] [:error] [pid 55451:tid 55473] [client 20.251.36.179:59248] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "adk-WXApxuyB7yCS5RkblAAAANQ"]
[Sat Apr 11 02:15:53.787473 2026] [:error] [pid 21568:tid 21576] [client 20.251.36.179:58455] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "adk-WYiz5v_ljZxkpR_WxAAAAQQ"]
[Sat Apr 11 02:15:54.305166 2026] [:error] [pid 55451:tid 55455] [client 20.251.36.179:59166] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "adk-WnApxuyB7yCS5RkblwAAAMI"]
[Sat Apr 11 02:15:54.870354 2026] [:error] [pid 21569:tid 21671] [client 20.251.36.179:59177] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "adk-WnAvQTgvXJ6vHoqkGgAAAJM"]
[Sat Apr 11 02:15:55.387856 2026] [:error] [pid 55451:tid 55461] [client 20.251.36.179:59622] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "adk-W3ApxuyB7yCS5RkboQAAAMg"]
[Sat Apr 11 02:15:55.906252 2026] [:error] [pid 21568:tid 21592] [client 20.251.36.179:59572] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "adk-W4iz5v_ljZxkpR_WygAAARQ"]
[Sat Apr 11 02:15:56.431958 2026] [:error] [pid 21568:tid 21580] [client 20.251.36.179:59604] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fi.php"] [unique_id "adk-XIiz5v_ljZxkpR_WzQAAAQg"]
[Sat Apr 11 02:15:56.982008 2026] [:error] [pid 21706:tid 21711] [client 20.251.36.179:59570] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fi.php"] [unique_id "adk-XCGQ1M5d8fQSsLG4lAAAAAM"]
[Sat Apr 11 02:15:57.498965 2026] [:error] [pid 21706:tid 21710] [client 20.251.36.179:59621] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fi.php"] [unique_id "adk-XSGQ1M5d8fQSsLG4lgAAAAI"]
[Sat Apr 11 02:15:58.075289 2026] [:error] [pid 21706:tid 21729] [client 20.251.36.179:60321] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fi.php"] [unique_id "adk-XiGQ1M5d8fQSsLG4ngAAABU"]
[Sat Apr 11 02:15:58.592691 2026] [:error] [pid 55451:tid 55458] [client 20.251.36.179:59568] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "adk-XnApxuyB7yCS5RkbpwAAAMU"]
[Sat Apr 11 02:15:59.106923 2026] [:error] [pid 21706:tid 21725] [client 20.251.36.179:59171] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "adk-XyGQ1M5d8fQSsLG4qAAAABE"]
[Sat Apr 11 02:15:59.621799 2026] [:error] [pid 55451:tid 55457] [client 20.251.36.179:59640] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "adk-X3ApxuyB7yCS5RkbrAAAAMQ"]
[Sat Apr 11 02:16:00.149150 2026] [:error] [pid 21568:tid 21582] [client 20.251.36.179:60332] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "adk-YIiz5v_ljZxkpR_W1gAAAQo"]
[Sat Apr 11 02:16:00.665546 2026] [:error] [pid 21568:tid 21579] [client 20.251.36.179:60339] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "adk-YIiz5v_ljZxkpR_W2AAAAQc"]
[Sat Apr 11 02:16:01.183054 2026] [:error] [pid 21570:tid 21695] [client 20.251.36.179:59607] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "adk-YTKs5t9xRSNL6cnRxQAAAFU"]
[Sat Apr 11 02:16:01.702509 2026] [:error] [pid 21706:tid 21723] [client 20.251.36.179:59601] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "adk-YSGQ1M5d8fQSsLG4swAAAA8"]
[Sat Apr 11 02:16:02.218315 2026] [:error] [pid 21706:tid 21729] [client 20.251.36.179:58428] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "adk-YiGQ1M5d8fQSsLG4uAAAABU"]
[Sat Apr 11 02:16:02.738792 2026] [:error] [pid 21706:tid 21718] [client 20.251.36.179:58391] [client 20.251.36.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adk-YiGQ1M5d8fQSsLG4vQAAAAo"]
[Sat Apr 11 02:16:03.258132 2026] [:error] [pid 21570:tid 21690] [client 20.251.36.179:59528] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "adk-YzKs5t9xRSNL6cnRyQAAAFA"]
[Sat Apr 11 02:16:03.775281 2026] [:error] [pid 21570:tid 21661] [client 20.251.36.179:58412] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "adk-YzKs5t9xRSNL6cnRzAAAAEA"]
[Sat Apr 11 02:16:04.286180 2026] [:error] [pid 21568:tid 21589] [client 20.251.36.179:59249] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "adk-ZIiz5v_ljZxkpR_W6wAAARE"]
[Sat Apr 11 02:16:04.813587 2026] [:error] [pid 21570:tid 21697] [client 20.251.36.179:59618] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "adk-ZDKs5t9xRSNL6cnRzwAAAFc"]
[Sat Apr 11 02:16:05.324342 2026] [:error] [pid 21568:tid 21593] [client 20.251.36.179:59643] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adk-ZYiz5v_ljZxkpR_W9gAAARU"]
[Sat Apr 11 02:16:05.837562 2026] [:error] [pid 55451:tid 55462] [client 20.251.36.179:60307] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adk-ZXApxuyB7yCS5RkbsQAAAMk"]
[Sat Apr 11 02:16:06.367311 2026] [:error] [pid 21706:tid 21728] [client 20.251.36.179:59203] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adk-ZiGQ1M5d8fQSsLG4xAAAABQ"]
[Sat Apr 11 02:16:06.888847 2026] [:error] [pid 21568:tid 21596] [client 20.251.36.179:59225] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adk-Zoiz5v_ljZxkpR_W_gAAARg"]
[Sat Apr 11 02:16:07.422424 2026] [:error] [pid 21568:tid 21573] [client 20.251.36.179:3386] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adk-Z4iz5v_ljZxkpR_W_wAAAQE"]
[Sat Apr 11 02:16:07.963795 2026] [:error] [pid 21570:tid 21687] [client 20.251.36.179:59252] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adk-ZzKs5t9xRSNL6cnR2wAAAE0"]
[Sat Apr 11 02:16:08.483561 2026] [:error] [pid 21568:tid 21593] [client 20.251.36.179:59571] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adk-aIiz5v_ljZxkpR_XBAAAARU"]
[Sat Apr 11 02:16:08.996219 2026] [:error] [pid 21706:tid 21708] [client 20.251.36.179:3361] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adk-aCGQ1M5d8fQSsLG4zgAAAAA"]
[Sat Apr 11 02:16:09.519956 2026] [:error] [pid 21706:tid 21728] [client 20.251.36.179:3338] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/prv8.php"] [unique_id "adk-aSGQ1M5d8fQSsLG41AAAABQ"]
[Sat Apr 11 02:16:10.047714 2026] [:error] [pid 55451:tid 55471] [client 20.251.36.179:3333] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/prv8.php"] [unique_id "adk-anApxuyB7yCS5RkbtAAAANI"]
[Sat Apr 11 02:16:10.566549 2026] [:error] [pid 55451:tid 55454] [client 20.251.36.179:59217] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/prv8.php"] [unique_id "adk-anApxuyB7yCS5RkbuAAAAME"]
[Sat Apr 11 02:16:11.099424 2026] [:error] [pid 21706:tid 21711] [client 20.251.36.179:3380] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/prv8.php"] [unique_id "adk-ayGQ1M5d8fQSsLG43QAAAAM"]
[Sat Apr 11 02:16:11.617163 2026] [:error] [pid 21569:tid 21662] [client 20.251.36.179:58492] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "adk-a3AvQTgvXJ6vHoqkIgAAAI8"]
[Sat Apr 11 02:16:12.136705 2026] [:error] [pid 21568:tid 21573] [client 20.251.36.179:59223] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "adk-bIiz5v_ljZxkpR_XEwAAAQE"]
[Sat Apr 11 02:16:12.649619 2026] [:error] [pid 55451:tid 55476] [client 20.251.36.179:60310] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "adk-bHApxuyB7yCS5RkbwAAAANc"]
[Sat Apr 11 02:16:13.184265 2026] [:error] [pid 21570:tid 21698] [client 20.251.36.179:59629] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "adk-bTKs5t9xRSNL6cnR3wAAAFg"]
[Sat Apr 11 02:16:13.698117 2026] [:error] [pid 21569:tid 21657] [client 20.251.36.179:60313] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev.php"] [unique_id "adk-bXAvQTgvXJ6vHoqkJgAAAIw"]
[Sat Apr 11 02:16:14.226315 2026] [:error] [pid 55451:tid 55454] [client 20.251.36.179:59181] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev.php"] [unique_id "adk-bnApxuyB7yCS5RkbxQAAAME"]
[Sat Apr 11 02:16:14.738868 2026] [:error] [pid 55451:tid 55472] [client 20.251.36.179:59257] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev.php"] [unique_id "adk-bnApxuyB7yCS5RkbygAAANM"]
[Sat Apr 11 02:16:15.255724 2026] [:error] [pid 55451:tid 55467] [client 20.251.36.179:59639] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev.php"] [unique_id "adk-b3ApxuyB7yCS5RkbzQAAAM4"]
[Sat Apr 11 02:16:15.776120 2026] [:error] [pid 55451:tid 55473] [client 20.251.36.179:59184] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bal.php"] [unique_id "adk-b3ApxuyB7yCS5Rkb0wAAANQ"]
[Sat Apr 11 02:16:16.409747 2026] [:error] [pid 21569:tid 21649] [client 20.251.36.179:59232] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bal.php"] [unique_id "adk-cHAvQTgvXJ6vHoqkKwAAAIQ"]
[Sat Apr 11 02:16:16.943221 2026] [:error] [pid 55451:tid 55464] [client 20.251.36.179:59606] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bal.php"] [unique_id "adk-cHApxuyB7yCS5Rkb2gAAAMs"]
[Sat Apr 11 02:16:17.581718 2026] [:error] [pid 21568:tid 21581] [client 20.251.36.179:58478] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bal.php"] [unique_id "adk-cYiz5v_ljZxkpR_XJQAAAQk"]
[Sat Apr 11 02:16:18.169718 2026] [:error] [pid 55451:tid 55457] [client 20.251.36.179:59562] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/in.php"] [unique_id "adk-cnApxuyB7yCS5Rkb4gAAAMQ"]
[Sat Apr 11 02:16:18.737309 2026] [:error] [pid 21706:tid 21731] [client 20.251.36.179:58396] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/in.php"] [unique_id "adk-ciGQ1M5d8fQSsLG47QAAABc"]
[Sat Apr 11 02:16:19.292562 2026] [:error] [pid 21706:tid 21714] [client 20.251.36.179:59152] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/in.php"] [unique_id "adk-cyGQ1M5d8fQSsLG47wAAAAY"]
[Sat Apr 11 02:16:19.828401 2026] [:error] [pid 21706:tid 21721] [client 20.251.36.179:59146] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/in.php"] [unique_id "adk-cyGQ1M5d8fQSsLG48wAAAA0"]
[Sat Apr 11 02:16:20.363770 2026] [:error] [pid 21706:tid 21725] [client 20.251.36.179:59540] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "adk-dCGQ1M5d8fQSsLG4-gAAABE"]
[Sat Apr 11 02:16:20.986005 2026] [:error] [pid 21570:tid 21677] [client 20.251.36.179:59256] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "adk-dDKs5t9xRSNL6cnR8QAAAEg"]
[Sat Apr 11 02:16:21.561334 2026] [:error] [pid 21570:tid 21695] [client 20.251.36.179:58410] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "adk-dTKs5t9xRSNL6cnR9AAAAFU"]
[Sat Apr 11 02:16:22.095782 2026] [:error] [pid 21569:tid 21652] [client 20.251.36.179:59145] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "adk-dnAvQTgvXJ6vHoqkMgAAAIc"]
[Sat Apr 11 02:16:22.612098 2026] [:error] [pid 21568:tid 21587] [client 20.251.36.179:3332] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "adk-doiz5v_ljZxkpR_XMQAAAQ8"]
[Sat Apr 11 02:16:23.153460 2026] [:error] [pid 55451:tid 55462] [client 20.251.36.179:58379] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "adk-d3ApxuyB7yCS5Rkb6AAAAMk"]
[Sat Apr 11 02:16:23.675737 2026] [:error] [pid 21570:tid 21693] [client 20.251.36.179:59174] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "adk-dzKs5t9xRSNL6cnR-gAAAFM"]
[Sat Apr 11 02:16:24.188304 2026] [:error] [pid 55451:tid 55464] [client 20.251.36.179:59216] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "adk-eHApxuyB7yCS5Rkb7AAAAMs"]
[Sat Apr 11 02:16:24.710270 2026] [:error] [pid 21570:tid 21692] [client 20.251.36.179:59247] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "adk-eDKs5t9xRSNL6cnR_wAAAFI"]
[Sat Apr 11 02:16:25.224464 2026] [:error] [pid 55451:tid 55473] [client 20.251.36.179:58382] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "adk-eXApxuyB7yCS5Rkb8wAAANQ"]
[Sat Apr 11 02:16:25.743427 2026] [:error] [pid 55451:tid 55462] [client 20.251.36.179:58398] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "adk-eXApxuyB7yCS5Rkb-QAAAMk"]
[Sat Apr 11 02:16:45.667217 2026] [proxy_fcgi:error] [pid 21706:tid 21732] [client 20.251.36.179:60334] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:16:59.850756 2026] [proxy_fcgi:error] [pid 21570:tid 21688] [client 20.251.36.179:58404] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:17:19.176994 2026] [proxy_fcgi:error] [pid 55451:tid 55458] [client 20.251.36.179:3365] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 02:17:24.627195 2026] [:error] [pid 21706:tid 21716] [client 20.251.36.179:59165] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "adk-tCGQ1M5d8fQSsLG5-QAAAAg"]
[Sat Apr 11 02:17:25.141715 2026] [:error] [pid 21706:tid 21723] [client 20.251.36.179:58373] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "adk-tSGQ1M5d8fQSsLG5_gAAAA8"]
[Sat Apr 11 02:17:25.679049 2026] [:error] [pid 21706:tid 21713] [client 20.251.36.179:59535] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "adk-tSGQ1M5d8fQSsLG6AgAAAAU"]
[Sat Apr 11 02:17:26.194781 2026] [:error] [pid 21706:tid 21727] [client 20.251.36.179:3355] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "adk-tiGQ1M5d8fQSsLG6BQAAABM"]
[Sat Apr 11 02:17:26.730954 2026] [:error] [pid 21568:tid 21574] [client 20.251.36.179:60330] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cabs.php"] [unique_id "adk-toiz5v_ljZxkpR_XnAAAAQI"]
[Sat Apr 11 02:17:27.268814 2026] [:error] [pid 21568:tid 21589] [client 20.251.36.179:59156] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cabs.php"] [unique_id "adk-t4iz5v_ljZxkpR_XnwAAARE"]
[Sat Apr 11 02:17:27.791344 2026] [:error] [pid 55451:tid 55474] [client 20.251.36.179:3378] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cabs.php"] [unique_id "adk-t3ApxuyB7yCS5RkcdAAAANU"]
[Sat Apr 11 02:17:28.305852 2026] [:error] [pid 55451:tid 55471] [client 20.251.36.179:58418] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cabs.php"] [unique_id "adk-uHApxuyB7yCS5RkcegAAANI"]
[Sat Apr 11 02:17:28.824379 2026] [:error] [pid 55451:tid 55474] [client 20.251.36.179:58387] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "adk-uHApxuyB7yCS5RkcggAAANU"]
[Sat Apr 11 02:17:29.340567 2026] [:error] [pid 55451:tid 55469] [client 20.251.36.179:58413] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "adk-uXApxuyB7yCS5RkcgwAAANA"]
[Sat Apr 11 02:17:29.852553 2026] [:error] [pid 55451:tid 55453] [client 20.251.36.179:60308] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "adk-uXApxuyB7yCS5RkcigAAAMA"]
[Sat Apr 11 02:17:30.377365 2026] [:error] [pid 55451:tid 55470] [client 20.251.36.179:58389] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "adk-unApxuyB7yCS5RkcjwAAANE"]
[Sat Apr 11 02:17:30.911168 2026] [:error] [pid 21568:tid 21595] [client 20.251.36.179:60301] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x1da.php"] [unique_id "adk-uoiz5v_ljZxkpR_XpAAAARc"]
[Sat Apr 11 02:17:31.436247 2026] [:error] [pid 55451:tid 55453] [client 20.251.36.179:3349] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x1da.php"] [unique_id "adk-u3ApxuyB7yCS5RkckwAAAMA"]
[Sat Apr 11 02:17:31.952304 2026] [:error] [pid 21569:tid 21662] [client 20.251.36.179:60324] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x1da.php"] [unique_id "adk-u3AvQTgvXJ6vHoqkhQAAAI8"]
[Sat Apr 11 02:17:32.471788 2026] [:error] [pid 21569:tid 21683] [client 20.251.36.179:3389] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x1da.php"] [unique_id "adk-vHAvQTgvXJ6vHoqkhgAAAJg"]
[Sat Apr 11 02:17:32.985355 2026] [:error] [pid 21568:tid 21578] [client 20.251.36.179:59197] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "adk-vIiz5v_ljZxkpR_XqgAAAQY"]
[Sat Apr 11 02:17:33.527708 2026] [:error] [pid 55451:tid 55464] [client 20.251.36.179:59630] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "adk-vXApxuyB7yCS5RkcnQAAAMs"]
[Sat Apr 11 02:17:34.041687 2026] [:error] [pid 21706:tid 21727] [client 20.251.36.179:57968] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "adk-viGQ1M5d8fQSsLG6JwAAABM"]
[Sat Apr 11 02:17:34.563312 2026] [:error] [pid 55451:tid 55463] [client 20.251.36.179:3336] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "adk-vnApxuyB7yCS5RkcqgAAAMo"]
[Sat Apr 11 02:17:35.085250 2026] [:error] [pid 21569:tid 21674] [client 20.251.36.179:59553] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "adk-v3AvQTgvXJ6vHoqkjAAAAJQ"]
[Sat Apr 11 02:17:35.596492 2026] [:error] [pid 21569:tid 21645] [client 20.251.36.179:3348] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "adk-v3AvQTgvXJ6vHoqkkAAAAIA"]
[Sat Apr 11 02:17:36.112397 2026] [:error] [pid 21569:tid 21656] [client 20.251.36.179:60292] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "adk-wHAvQTgvXJ6vHoqklAAAAIs"]
[Sat Apr 11 02:17:36.632663 2026] [:error] [pid 21570:tid 21675] [client 20.251.36.179:3341] [client 20.251.36.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "adk-wDKs5t9xRSNL6cnSbwAAAEc"]
[Sat Apr 11 03:22:19.999465 2026] [proxy_fcgi:error] [pid 21570:tid 21698] [client 4.245.205.135:65259] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 03:22:52.170939 2026] [proxy_fcgi:error] [pid 21706:tid 21725] [client 4.245.205.135:61546] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 03:23:00.751281 2026] [proxy_fcgi:error] [pid 21706:tid 21725] [client 4.245.205.135:56642] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 03:23:05.287929 2026] [:error] [pid 21569:tid 21662] [client 4.245.205.135:37298] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "adlOGXAvQTgvXJ6vHorBqAAAAI8"]
[Sat Apr 11 03:23:05.797483 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:46337] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "adlOGXApxuyB7yCS5RlQDgAAAM4"]
[Sat Apr 11 03:23:06.411258 2026] [:error] [pid 21568:tid 21591] [client 4.245.205.135:36018] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "adlOGoiz5v_ljZxkpR_-qwAAARM"]
[Sat Apr 11 03:23:06.983539 2026] [:error] [pid 21568:tid 21582] [client 4.245.205.135:37249] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "adlOGoiz5v_ljZxkpR_-rAAAAQo"]
[Sat Apr 11 03:23:07.574008 2026] [:error] [pid 21568:tid 21580] [client 4.245.205.135:37308] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "adlOG4iz5v_ljZxkpR_-rQAAAQg"]
[Sat Apr 11 03:23:08.249490 2026] [:error] [pid 21569:tid 21651] [client 4.245.205.135:56671] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "adlOHHAvQTgvXJ6vHorBqQAAAIY"]
[Sat Apr 11 03:23:08.802987 2026] [:error] [pid 55451:tid 55471] [client 4.245.205.135:52937] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "adlOHHApxuyB7yCS5RlQIwAAANI"]
[Sat Apr 11 03:23:09.359837 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:62142] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "adlOHXApxuyB7yCS5RlQKgAAANE"]
[Sat Apr 11 03:23:09.893642 2026] [:error] [pid 21569:tid 21653] [client 4.245.205.135:65237] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlOHXAvQTgvXJ6vHorBrQAAAIg"]
[Sat Apr 11 03:23:10.521330 2026] [:error] [pid 55451:tid 55466] [client 4.245.205.135:52928] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlOHnApxuyB7yCS5RlQLwAAAM0"]
[Sat Apr 11 03:23:11.146473 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:65228] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlOHyGQ1M5d8fQSsLEDlwAAAAA"]
[Sat Apr 11 03:23:11.699847 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:37251] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlOHyGQ1M5d8fQSsLEDmgAAAA4"]
[Sat Apr 11 03:23:12.321685 2026] [:error] [pid 21568:tid 21572] [client 4.245.205.135:65236] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "adlOIIiz5v_ljZxkpR_-sAAAAQA"]
[Sat Apr 11 03:23:13.087829 2026] [:error] [pid 21568:tid 21591] [client 4.245.205.135:65260] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "adlOIYiz5v_ljZxkpR_-sQAAARM"]
[Sat Apr 11 03:23:13.596582 2026] [:error] [pid 55451:tid 55457] [client 4.245.205.135:61560] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "adlOIXApxuyB7yCS5RlQOgAAAMQ"]
[Sat Apr 11 03:23:14.422715 2026] [:error] [pid 21568:tid 21573] [client 4.245.205.135:53925] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "adlOIoiz5v_ljZxkpR_-tAAAAQE"]
[Sat Apr 11 03:23:15.097590 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:65257] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "adlOIyGQ1M5d8fQSsLEDrQAAABY"]
[Sat Apr 11 03:23:15.701671 2026] [:error] [pid 21568:tid 21595] [client 4.245.205.135:65255] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "adlOI4iz5v_ljZxkpR_-twAAARc"]
[Sat Apr 11 03:23:16.291071 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:44226] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "adlOJCGQ1M5d8fQSsLEDsQAAAAY"]
[Sat Apr 11 03:23:17.062739 2026] [:error] [pid 21706:tid 21709] [client 4.245.205.135:57347] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "adlOJSGQ1M5d8fQSsLEDuQAAAAE"]
[Sat Apr 11 03:23:17.672471 2026] [:error] [pid 21568:tid 21574] [client 4.245.205.135:56683] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "adlOJYiz5v_ljZxkpR_-uQAAAQI"]
[Sat Apr 11 03:23:18.606906 2026] [:error] [pid 21570:tid 21661] [client 4.245.205.135:56650] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "adlOJjKs5t9xRSNL6cn0qwAAAEA"]
[Sat Apr 11 03:23:19.330222 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:35973] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "adlOJ3ApxuyB7yCS5RlQRAAAAM4"]
[Sat Apr 11 03:23:20.024775 2026] [:error] [pid 55451:tid 55477] [client 4.245.205.135:52969] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "adlOKHApxuyB7yCS5RlQRwAAANg"]
[Sat Apr 11 03:23:20.556786 2026] [:error] [pid 21568:tid 21575] [client 4.245.205.135:53941] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "adlOKIiz5v_ljZxkpR_-wAAAAQM"]
[Sat Apr 11 03:23:21.918112 2026] [:error] [pid 21570:tid 21687] [client 4.245.205.135:61518] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "adlOKTKs5t9xRSNL6cn0swAAAE0"]
[Sat Apr 11 03:23:22.435686 2026] [:error] [pid 55451:tid 55473] [client 4.245.205.135:60821] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "adlOKnApxuyB7yCS5RlQTgAAANQ"]
[Sat Apr 11 03:23:22.983975 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:61548] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "adlOKnApxuyB7yCS5RlQTwAAAMI"]
[Sat Apr 11 03:23:23.497515 2026] [:error] [pid 55451:tid 55464] [client 4.245.205.135:37262] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "adlOK3ApxuyB7yCS5RlQUgAAAMs"]
[Sat Apr 11 03:23:24.024844 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:56693] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "adlOLHApxuyB7yCS5RlQWQAAAMY"]
[Sat Apr 11 03:23:24.521590 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:37277] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "adlOLHApxuyB7yCS5RlQXQAAAM8"]
[Sat Apr 11 03:23:25.053893 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:53900] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "adlOLSGQ1M5d8fQSsLED6gAAAAQ"]
[Sat Apr 11 03:23:25.564461 2026] [:error] [pid 21570:tid 21670] [client 4.245.205.135:37303] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlOLTKs5t9xRSNL6cn0ugAAAEQ"]
[Sat Apr 11 03:23:26.445785 2026] [:error] [pid 21570:tid 21685] [client 4.245.205.135:53917] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlOLjKs5t9xRSNL6cn0vAAAAEw"]
[Sat Apr 11 03:23:27.182994 2026] [:error] [pid 21569:tid 21651] [client 4.245.205.135:62111] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlOL3AvQTgvXJ6vHorBzgAAAIY"]
[Sat Apr 11 03:23:27.685817 2026] [:error] [pid 21570:tid 21691] [client 4.245.205.135:52970] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlOLzKs5t9xRSNL6cn0xgAAAFE"]
[Sat Apr 11 03:23:28.379495 2026] [:error] [pid 21568:tid 21592] [client 4.245.205.135:56672] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlOMIiz5v_ljZxkpR_-yQAAARQ"]
[Sat Apr 11 03:23:28.955602 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:62102] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlOMHApxuyB7yCS5RlQbQAAAM4"]
[Sat Apr 11 03:23:29.651774 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:56691] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlOMXApxuyB7yCS5RlQbwAAAMY"]
[Sat Apr 11 03:23:30.396326 2026] [:error] [pid 21568:tid 21594] [client 4.245.205.135:52975] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlOMoiz5v_ljZxkpR_-1gAAARY"]
[Sat Apr 11 03:23:30.941146 2026] [:error] [pid 55451:tid 55469] [client 4.245.205.135:61549] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "adlOMnApxuyB7yCS5RlQdwAAANA"]
[Sat Apr 11 03:23:31.467517 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:43513] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "adlOMyGQ1M5d8fQSsLED8AAAAAY"]
[Sat Apr 11 03:23:32.127316 2026] [:error] [pid 21706:tid 21725] [client 4.245.205.135:52985] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "adlONCGQ1M5d8fQSsLED9QAAABE"]
[Sat Apr 11 03:23:32.640029 2026] [:error] [pid 21569:tid 21653] [client 4.245.205.135:37290] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "adlONHAvQTgvXJ6vHorB1gAAAIg"]
[Sat Apr 11 03:23:33.268426 2026] [:error] [pid 21568:tid 21579] [client 4.245.205.135:52943] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "adlONYiz5v_ljZxkpR_-2gAAAQc"]
[Sat Apr 11 03:23:33.789579 2026] [:error] [pid 21569:tid 21656] [client 4.245.205.135:57376] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "adlONXAvQTgvXJ6vHorB2gAAAIs"]
[Sat Apr 11 03:23:34.370851 2026] [:error] [pid 21570:tid 21689] [client 4.245.205.135:57360] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "adlONjKs5t9xRSNL6cn00QAAAE8"]
[Sat Apr 11 03:23:34.921300 2026] [:error] [pid 21570:tid 21677] [client 4.245.205.135:65225] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "adlONjKs5t9xRSNL6cn00wAAAEg"]
[Sat Apr 11 03:23:35.477108 2026] [:error] [pid 21570:tid 21696] [client 4.245.205.135:53913] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlONzKs5t9xRSNL6cn01QAAAFY"]
[Sat Apr 11 03:23:36.031485 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:53936] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlOOHApxuyB7yCS5RlQgQAAAM4"]
[Sat Apr 11 03:23:36.595437 2026] [:error] [pid 21570:tid 21681] [client 4.245.205.135:62121] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlOODKs5t9xRSNL6cn02AAAAEo"]
[Sat Apr 11 03:23:37.145554 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:53922] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlOOSGQ1M5d8fQSsLEECgAAAAs"]
[Sat Apr 11 03:23:37.696981 2026] [:error] [pid 55451:tid 55474] [client 4.245.205.135:35986] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlOOXApxuyB7yCS5RlQhwAAANU"]
[Sat Apr 11 03:23:38.233551 2026] [:error] [pid 21568:tid 21579] [client 4.245.205.135:52951] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlOOoiz5v_ljZxkpR_-7AAAAQc"]
[Sat Apr 11 03:23:38.781087 2026] [:error] [pid 55451:tid 55460] [client 4.245.205.135:37286] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlOOnApxuyB7yCS5RlQkQAAAMc"]
[Sat Apr 11 03:23:39.311594 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:56640] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlOOyGQ1M5d8fQSsLEEDgAAAAk"]
[Sat Apr 11 03:23:39.841283 2026] [:error] [pid 55451:tid 55471] [client 4.245.205.135:35972] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "adlOO3ApxuyB7yCS5RlQlgAAANI"]
[Sat Apr 11 03:23:40.339417 2026] [:error] [pid 21569:tid 21649] [client 4.245.205.135:53937] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "adlOPHAvQTgvXJ6vHorB5wAAAIQ"]
[Sat Apr 11 03:23:40.878797 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:65266] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "adlOPCGQ1M5d8fQSsLEEFgAAAAc"]
[Sat Apr 11 03:23:41.416536 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:56668] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "adlOPYiz5v_ljZxkpR_-7wAAAQs"]
[Sat Apr 11 03:23:41.907984 2026] [:error] [pid 21569:tid 21652] [client 4.245.205.135:62120] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlOPXAvQTgvXJ6vHorB6AAAAIc"]
[Sat Apr 11 03:23:42.408934 2026] [:error] [pid 21570:tid 21675] [client 4.245.205.135:56695] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlOPjKs5t9xRSNL6cn05AAAAEc"]
[Sat Apr 11 03:23:42.945025 2026] [:error] [pid 21570:tid 21673] [client 4.245.205.135:65223] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlOPjKs5t9xRSNL6cn05wAAAEY"]
[Sat Apr 11 03:23:43.554506 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:57350] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlOPyGQ1M5d8fQSsLEEJAAAAAc"]
[Sat Apr 11 03:23:44.119953 2026] [:error] [pid 55451:tid 55473] [client 4.245.205.135:62092] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "adlOQHApxuyB7yCS5RlQqAAAANQ"]
[Sat Apr 11 03:23:44.677095 2026] [:error] [pid 55451:tid 55469] [client 4.245.205.135:62120] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "adlOQHApxuyB7yCS5RlQqQAAANA"]
[Sat Apr 11 03:23:45.191093 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:65233] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "adlOQSGQ1M5d8fQSsLEELgAAAAQ"]
[Sat Apr 11 03:23:45.699941 2026] [:error] [pid 55451:tid 55456] [client 4.245.205.135:62081] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "adlOQXApxuyB7yCS5RlQqgAAAMM"]
[Sat Apr 11 03:23:46.219723 2026] [:error] [pid 21568:tid 21572] [client 4.245.205.135:60843] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "adlOQoiz5v_ljZxkpR_--wAAAQA"]
[Sat Apr 11 03:23:46.724461 2026] [:error] [pid 55451:tid 55458] [client 4.245.205.135:57401] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "adlOQnApxuyB7yCS5RlQrgAAAMU"]
[Sat Apr 11 03:23:47.240116 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:65259] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "adlOQ3ApxuyB7yCS5RlQswAAANM"]
[Sat Apr 11 03:23:47.765014 2026] [:error] [pid 21569:tid 21650] [client 4.245.205.135:61507] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "adlOQ3AvQTgvXJ6vHorB6gAAAIU"]
[Sat Apr 11 03:23:48.274331 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:56684] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxeyc.php"] [unique_id "adlORCGQ1M5d8fQSsLEEQAAAAAw"]
[Sat Apr 11 03:23:48.823766 2026] [:error] [pid 21569:tid 21646] [client 4.245.205.135:65253] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxeyc.php"] [unique_id "adlORHAvQTgvXJ6vHorB7AAAAIE"]
[Sat Apr 11 03:23:49.361229 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:57394] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxeyc.php"] [unique_id "adlORSGQ1M5d8fQSsLEESQAAAAQ"]
[Sat Apr 11 03:23:49.937813 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:52967] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxeyc.php"] [unique_id "adlORSGQ1M5d8fQSsLEETQAAAA8"]
[Sat Apr 11 03:23:50.468075 2026] [:error] [pid 21706:tid 21725] [client 4.245.205.135:57392] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "adlORiGQ1M5d8fQSsLEEUwAAABE"]
[Sat Apr 11 03:23:51.017293 2026] [:error] [pid 21568:tid 21577] [client 4.245.205.135:65277] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "adlOR4iz5v_ljZxkpR__BQAAAQU"]
[Sat Apr 11 03:23:51.577584 2026] [:error] [pid 21570:tid 21695] [client 4.245.205.135:53926] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "adlORzKs5t9xRSNL6cn09AAAAFU"]
[Sat Apr 11 03:23:52.155821 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:37257] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "adlOSHApxuyB7yCS5RlQtQAAAM4"]
[Sat Apr 11 03:23:52.725041 2026] [:error] [pid 21568:tid 21573] [client 4.245.205.135:52941] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "adlOSIiz5v_ljZxkpR__DAAAAQE"]
[Sat Apr 11 03:23:53.252549 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:53909] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "adlOSSGQ1M5d8fQSsLEEaAAAAAk"]
[Sat Apr 11 03:23:53.788522 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:56656] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "adlOSSGQ1M5d8fQSsLEEbAAAABY"]
[Sat Apr 11 03:23:54.345193 2026] [:error] [pid 21706:tid 21709] [client 4.245.205.135:56651] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "adlOSiGQ1M5d8fQSsLEEdgAAAAE"]
[Sat Apr 11 03:23:54.892054 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:53944] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "adlOSiGQ1M5d8fQSsLEEfQAAABA"]
[Sat Apr 11 03:23:55.513865 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:37291] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "adlOS3ApxuyB7yCS5RlQuwAAANM"]
[Sat Apr 11 03:23:56.068626 2026] [:error] [pid 55451:tid 55475] [client 4.245.205.135:61531] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "adlOTHApxuyB7yCS5RlQwAAAANY"]
[Sat Apr 11 03:23:56.565972 2026] [:error] [pid 21570:tid 21679] [client 4.245.205.135:65246] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "adlOTDKs5t9xRSNL6cn09QAAAEk"]
[Sat Apr 11 03:23:57.103922 2026] [:error] [pid 21568:tid 21581] [client 4.245.205.135:37279] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-942.php"] [unique_id "adlOTYiz5v_ljZxkpR__EQAAAQk"]
[Sat Apr 11 03:23:57.631520 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:62088] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-942.php"] [unique_id "adlOTSGQ1M5d8fQSsLEEgQAAABQ"]
[Sat Apr 11 03:23:58.147080 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:46379] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-942.php"] [unique_id "adlOTnApxuyB7yCS5RlQxQAAAM8"]
[Sat Apr 11 03:23:58.672669 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:37276] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-942.php"] [unique_id "adlOTiGQ1M5d8fQSsLEEhAAAAAA"]
[Sat Apr 11 03:23:59.239297 2026] [:error] [pid 55451:tid 55466] [client 4.245.205.135:57405] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "adlOT3ApxuyB7yCS5RlQxwAAAM0"]
[Sat Apr 11 03:23:59.821861 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:61551] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "adlOT3ApxuyB7yCS5RlQywAAANM"]
[Sat Apr 11 03:24:00.448138 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:65222] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "adlOUCGQ1M5d8fQSsLEEhwAAAAU"]
[Sat Apr 11 03:24:00.956575 2026] [:error] [pid 21706:tid 21718] [client 4.245.205.135:57370] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "adlOUCGQ1M5d8fQSsLEEjgAAAAo"]
[Sat Apr 11 03:24:01.515743 2026] [:error] [pid 21706:tid 21709] [client 4.245.205.135:56648] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpb.php"] [unique_id "adlOUSGQ1M5d8fQSsLEEkgAAAAE"]
[Sat Apr 11 03:24:02.019445 2026] [:error] [pid 55451:tid 55474] [client 4.245.205.135:35979] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpb.php"] [unique_id "adlOUnApxuyB7yCS5RlQ0QAAANU"]
[Sat Apr 11 03:24:02.563753 2026] [:error] [pid 21570:tid 21695] [client 4.245.205.135:62128] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpb.php"] [unique_id "adlOUjKs5t9xRSNL6cn1AwAAAFU"]
[Sat Apr 11 03:24:22.248100 2026] [proxy_fcgi:error] [pid 21706:tid 21717] [client 4.245.205.135:37249] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 03:24:31.578104 2026] [:error] [pid 55451:tid 55466] [client 4.245.205.135:57383] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "adlOb3ApxuyB7yCS5RlREwAAAM0"]
[Sat Apr 11 03:24:32.088322 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:65221] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "adlOcCGQ1M5d8fQSsLEFJQAAABc"]
[Sat Apr 11 03:24:32.622469 2026] [:error] [pid 21706:tid 21725] [client 4.245.205.135:56675] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "adlOcCGQ1M5d8fQSsLEFLAAAABE"]
[Sat Apr 11 03:24:33.122218 2026] [:error] [pid 21570:tid 21688] [client 4.245.205.135:57379] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "adlOcTKs5t9xRSNL6cn1KAAAAE4"]
[Sat Apr 11 03:24:33.753436 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:56699] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "adlOcXApxuyB7yCS5RlRFAAAAMg"]
[Sat Apr 11 03:24:34.285750 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:36019] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "adlOciGQ1M5d8fQSsLEFOQAAAAA"]
[Sat Apr 11 03:24:34.792328 2026] [:error] [pid 21569:tid 21660] [client 4.245.205.135:49655] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "adlOcnAvQTgvXJ6vHorCJQAAAI4"]
[Sat Apr 11 03:24:35.391885 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:53942] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "adlOc3ApxuyB7yCS5RlRGwAAANM"]
[Sat Apr 11 03:24:36.156974 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:52982] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlOdIiz5v_ljZxkpR__YQAAAQs"]
[Sat Apr 11 03:24:36.755094 2026] [:error] [pid 21570:tid 21689] [client 4.245.205.135:37271] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlOdDKs5t9xRSNL6cn1MAAAAE8"]
[Sat Apr 11 03:24:37.286852 2026] [:error] [pid 21568:tid 21594] [client 4.245.205.135:52930] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlOdYiz5v_ljZxkpR__YwAAARY"]
[Sat Apr 11 03:24:37.809794 2026] [:error] [pid 21568:tid 21585] [client 4.245.205.135:62110] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlOdYiz5v_ljZxkpR__ZQAAAQ0"]
[Sat Apr 11 03:24:38.391858 2026] [:error] [pid 21568:tid 21584] [client 4.245.205.135:61528] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "adlOdoiz5v_ljZxkpR__aQAAAQw"]
[Sat Apr 11 03:24:39.005925 2026] [:error] [pid 21568:tid 21587] [client 4.245.205.135:61555] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "adlOd4iz5v_ljZxkpR__bQAAAQ8"]
[Sat Apr 11 03:24:43.829082 2026] [:error] [pid 21569:tid 21671] [client 4.245.205.135:57363] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "adlOe3AvQTgvXJ6vHorCNQAAAJM"]
[Sat Apr 11 03:25:00.048192 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:52957] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maintura.php"] [unique_id "adlOjCGQ1M5d8fQSsLEFtgAAAA4"]
[Sat Apr 11 03:25:00.696135 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:46390] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maintura.php"] [unique_id "adlOjCGQ1M5d8fQSsLEFvwAAAAA"]
[Sat Apr 11 03:25:01.343378 2026] [:error] [pid 55451:tid 55463] [client 4.245.205.135:57358] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maintura.php"] [unique_id "adlOjXApxuyB7yCS5RlRTwAAAMo"]
[Sat Apr 11 03:25:01.865803 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:53902] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maintura.php"] [unique_id "adlOjSGQ1M5d8fQSsLEFxgAAAAM"]
[Sat Apr 11 03:25:02.666611 2026] [:error] [pid 21569:tid 21662] [client 4.245.205.135:65278] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlOjnAvQTgvXJ6vHorCUAAAAI8"]
[Sat Apr 11 03:25:03.163737 2026] [:error] [pid 21568:tid 21596] [client 4.245.205.135:62114] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlOj4iz5v_ljZxkpR__oQAAARg"]
[Sat Apr 11 03:25:03.706611 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:56649] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlOjyGQ1M5d8fQSsLEF0gAAAA0"]
[Sat Apr 11 03:25:04.346348 2026] [:error] [pid 21706:tid 21716] [client 4.245.205.135:43474] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlOkCGQ1M5d8fQSsLEF1gAAAAg"]
[Sat Apr 11 03:25:04.899181 2026] [:error] [pid 21568:tid 21577] [client 4.245.205.135:56679] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlOkIiz5v_ljZxkpR__qwAAAQU"]
[Sat Apr 11 03:25:05.421672 2026] [:error] [pid 21569:tid 21678] [client 4.245.205.135:37306] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlOkXAvQTgvXJ6vHorCUgAAAJY"]
[Sat Apr 11 03:25:06.035296 2026] [:error] [pid 21570:tid 21693] [client 4.245.205.135:37302] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlOkjKs5t9xRSNL6cn1YwAAAFM"]
[Sat Apr 11 03:25:06.558825 2026] [:error] [pid 21570:tid 21695] [client 4.245.205.135:61554] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlOkjKs5t9xRSNL6cn1ZAAAAFU"]
[Sat Apr 11 03:25:07.068426 2026] [:error] [pid 21570:tid 21679] [client 4.245.205.135:36012] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-220.php"] [unique_id "adlOkzKs5t9xRSNL6cn1ZQAAAEk"]
[Sat Apr 11 03:25:07.748003 2026] [:error] [pid 21570:tid 21685] [client 4.245.205.135:62132] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-220.php"] [unique_id "adlOkzKs5t9xRSNL6cn1ZwAAAEw"]
[Sat Apr 11 03:25:08.336038 2026] [:error] [pid 55451:tid 55477] [client 4.245.205.135:43456] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-220.php"] [unique_id "adlOlHApxuyB7yCS5RlRZAAAANg"]
[Sat Apr 11 03:25:08.895630 2026] [:error] [pid 55451:tid 55453] [client 4.245.205.135:37301] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-220.php"] [unique_id "adlOlHApxuyB7yCS5RlRaQAAAMA"]
[Sat Apr 11 03:25:09.410177 2026] [:error] [pid 21568:tid 21575] [client 4.245.205.135:62130] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlOlYiz5v_ljZxkpR__uAAAAQM"]
[Sat Apr 11 03:25:09.972620 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:52990] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlOlSGQ1M5d8fQSsLEF7QAAAAI"]
[Sat Apr 11 03:25:10.472426 2026] [:error] [pid 21570:tid 21694] [client 4.245.205.135:62080] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlOljKs5t9xRSNL6cn1cgAAAFQ"]
[Sat Apr 11 03:25:10.989227 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:36010] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlOliGQ1M5d8fQSsLEF7gAAAAs"]
[Sat Apr 11 03:25:11.489741 2026] [:error] [pid 21570:tid 21682] [client 4.245.205.135:56681] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "adlOlzKs5t9xRSNL6cn1egAAAEs"]
[Sat Apr 11 03:25:12.017926 2026] [:error] [pid 21570:tid 21687] [client 4.245.205.135:57389] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "adlOmDKs5t9xRSNL6cn1fwAAAE0"]
[Sat Apr 11 03:25:12.520149 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:65242] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "adlOmCGQ1M5d8fQSsLEF-wAAAAU"]
[Sat Apr 11 03:25:13.065941 2026] [:error] [pid 55451:tid 55464] [client 4.245.205.135:61504] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "adlOmXApxuyB7yCS5RlReAAAAMs"]
[Sat Apr 11 03:25:13.571692 2026] [:error] [pid 21568:tid 21595] [client 4.245.205.135:62122] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlOmYiz5v_ljZxkpR__vQAAARc"]
[Sat Apr 11 03:25:14.103679 2026] [:error] [pid 21569:tid 21656] [client 4.245.205.135:52962] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlOmnAvQTgvXJ6vHorCYgAAAIs"]
[Sat Apr 11 03:25:14.664834 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:53927] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlOmoiz5v_ljZxkpR__vgAAAQs"]
[Sat Apr 11 03:25:15.191871 2026] [:error] [pid 21569:tid 21659] [client 4.245.205.135:56653] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlOm3AvQTgvXJ6vHorCaQAAAI0"]
[Sat Apr 11 03:25:15.730230 2026] [:error] [pid 21570:tid 21670] [client 4.245.205.135:62086] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlOmzKs5t9xRSNL6cn1kQAAAEQ"]
[Sat Apr 11 03:25:16.332601 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:35998] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlOnCGQ1M5d8fQSsLEGCAAAAAY"]
[Sat Apr 11 03:25:16.829154 2026] [:error] [pid 21568:tid 21577] [client 4.245.205.135:56641] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlOnIiz5v_ljZxkpR__wQAAAQU"]
[Sat Apr 11 03:25:17.414849 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:35973] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlOnSGQ1M5d8fQSsLEGDwAAAA0"]
[Sat Apr 11 03:25:17.934385 2026] [:error] [pid 21570:tid 21677] [client 4.245.205.135:57361] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlOnTKs5t9xRSNL6cn1lgAAAEg"]
[Sat Apr 11 03:25:18.494441 2026] [:error] [pid 21568:tid 21586] [client 4.245.205.135:37301] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlOnoiz5v_ljZxkpR__xgAAAQ4"]
[Sat Apr 11 03:25:19.006820 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:62112] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlOnyGQ1M5d8fQSsLEGFQAAAAU"]
[Sat Apr 11 03:25:19.507909 2026] [:error] [pid 55451:tid 55458] [client 4.245.205.135:57369] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlOn3ApxuyB7yCS5RlRgwAAAMU"]
[Sat Apr 11 03:25:20.005606 2026] [:error] [pid 55451:tid 55477] [client 4.245.205.135:61563] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "adlOoHApxuyB7yCS5RlRhQAAANg"]
[Sat Apr 11 03:25:20.500172 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:56670] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "adlOoCGQ1M5d8fQSsLEGHAAAABA"]
[Sat Apr 11 03:25:20.993563 2026] [:error] [pid 21568:tid 21582] [client 4.245.205.135:65276] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "adlOoIiz5v_ljZxkpR__zgAAAQo"]
[Sat Apr 11 03:25:21.492665 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:62136] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "adlOoSGQ1M5d8fQSsLEGKAAAAAc"]
[Sat Apr 11 03:25:22.022915 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:62106] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "adlOoiGQ1M5d8fQSsLEGKwAAABA"]
[Sat Apr 11 03:25:22.590913 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:53915] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "adlOoiGQ1M5d8fQSsLEGMQAAAAM"]
[Sat Apr 11 03:25:23.157604 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:43492] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "adlOoyGQ1M5d8fQSsLEGOwAAABY"]
[Sat Apr 11 03:25:23.660130 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:44268] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "adlOoyGQ1M5d8fQSsLEGQgAAAAk"]
[Sat Apr 11 03:25:24.156810 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:52979] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "adlOpCGQ1M5d8fQSsLEGRQAAAA8"]
[Sat Apr 11 03:25:24.665659 2026] [:error] [pid 55451:tid 55465] [client 4.245.205.135:44231] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "adlOpHApxuyB7yCS5RlRkQAAAMw"]
[Sat Apr 11 03:25:25.216796 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:53901] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "adlOpSGQ1M5d8fQSsLEGTAAAAA0"]
[Sat Apr 11 03:25:25.767920 2026] [:error] [pid 21569:tid 21664] [client 4.245.205.135:52934] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "adlOpXAvQTgvXJ6vHorChgAAAJA"]
[Sat Apr 11 03:25:26.269495 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:53896] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "adlOpnApxuyB7yCS5RlRmQAAANc"]
[Sat Apr 11 03:25:26.810140 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:37266] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "adlOpiGQ1M5d8fQSsLEGTgAAABc"]
[Sat Apr 11 03:25:27.387409 2026] [:error] [pid 21706:tid 21725] [client 4.245.205.135:65267] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "adlOpyGQ1M5d8fQSsLEGUgAAABE"]
[Sat Apr 11 03:25:27.918033 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:37284] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "adlOpyGQ1M5d8fQSsLEGWAAAAA0"]
[Sat Apr 11 03:25:28.914703 2026] [:error] [pid 21570:tid 21668] [client 4.245.205.135:43512] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlOqDKs5t9xRSNL6cn1rgAAAEM"]
[Sat Apr 11 03:25:48.387299 2026] [:error] [pid 21570:tid 21687] [client 4.245.205.135:61550] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlOvDKs5t9xRSNL6cn16AAAAE0"]
[Sat Apr 11 03:25:49.538016 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:36003] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlOvSGQ1M5d8fQSsLEGwQAAAA0"]
[Sat Apr 11 03:25:50.559431 2026] [:error] [pid 21570:tid 21672] [client 4.245.205.135:65265] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlOvjKs5t9xRSNL6cn18QAAAEU"]
[Sat Apr 11 03:25:51.603283 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:35971] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlOvyGQ1M5d8fQSsLEGwwAAAAI"]
[Sat Apr 11 03:25:51.878229 2026] [:error] [pid 21570:tid 21675] [client 4.245.205.135:62082] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adlOvzKs5t9xRSNL6cn1-AAAAEc"]
[Sat Apr 11 03:25:52.475826 2026] [:error] [pid 21568:tid 21589] [client 4.245.205.135:49656] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adlOwIiz5v_ljZxkpR8AAQAAARE"]
[Sat Apr 11 03:25:53.026454 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:62100] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adlOwSGQ1M5d8fQSsLEGyQAAAA0"]
[Sat Apr 11 03:25:53.582686 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:49636] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adlOwXApxuyB7yCS5RlR5wAAANc"]
[Sat Apr 11 03:25:54.123525 2026] [:error] [pid 21569:tid 21650] [client 4.245.205.135:35996] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adlOwnAvQTgvXJ6vHorCrAAAAIU"]
[Sat Apr 11 03:25:54.646068 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:52942] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adlOwiGQ1M5d8fQSsLEG0QAAAAs"]
[Sat Apr 11 03:25:55.153849 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:52972] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adlOwyGQ1M5d8fQSsLEG2wAAAAM"]
[Sat Apr 11 03:25:55.742581 2026] [:error] [pid 21706:tid 21727] [client 4.245.205.135:57377] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adlOwyGQ1M5d8fQSsLEG4gAAABM"]
[Sat Apr 11 03:25:56.300271 2026] [:error] [pid 21568:tid 21576] [client 4.245.205.135:65230] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adlOxIiz5v_ljZxkpR8ACAAAAQQ"]
[Sat Apr 11 03:25:57.010677 2026] [:error] [pid 21569:tid 21680] [client 4.245.205.135:62124] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adlOxXAvQTgvXJ6vHorCswAAAJc"]
[Sat Apr 11 03:25:57.584006 2026] [:error] [pid 21569:tid 21655] [client 4.245.205.135:36001] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adlOxXAvQTgvXJ6vHorCuAAAAIo"]
[Sat Apr 11 03:25:58.152530 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:57397] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adlOxnApxuyB7yCS5RlR8AAAANM"]
[Sat Apr 11 03:25:58.716301 2026] [:error] [pid 55451:tid 55463] [client 4.245.205.135:61508] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "adlOxnApxuyB7yCS5RlR8wAAAMo"]
[Sat Apr 11 03:25:59.211544 2026] [:error] [pid 21569:tid 21667] [client 4.245.205.135:62138] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "adlOx3AvQTgvXJ6vHorCxQAAAJE"]
[Sat Apr 11 03:25:59.717902 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:65219] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "adlOxyGQ1M5d8fQSsLEHDQAAABc"]
[Sat Apr 11 03:26:00.263639 2026] [:error] [pid 21568:tid 21578] [client 4.245.205.135:56688] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "adlOyIiz5v_ljZxkpR8AEgAAAQY"]
[Sat Apr 11 03:26:00.791637 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:52944] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "adlOyCGQ1M5d8fQSsLEHGgAAAAs"]
[Sat Apr 11 03:26:01.339059 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:35985] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "adlOySGQ1M5d8fQSsLEHIAAAAAA"]
[Sat Apr 11 03:26:01.869708 2026] [:error] [pid 21706:tid 21727] [client 4.245.205.135:65252] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "adlOySGQ1M5d8fQSsLEHJgAAABM"]
[Sat Apr 11 03:26:02.442973 2026] [:error] [pid 55451:tid 55464] [client 4.245.205.135:35989] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "adlOynApxuyB7yCS5RlR_gAAAMs"]
[Sat Apr 11 03:26:02.959032 2026] [:error] [pid 21706:tid 21726] [client 4.245.205.135:53897] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adlOyiGQ1M5d8fQSsLEHMwAAABI"]
[Sat Apr 11 03:26:03.461704 2026] [:error] [pid 21570:tid 21663] [client 4.245.205.135:61521] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adlOyzKs5t9xRSNL6cn1_AAAAEE"]
[Sat Apr 11 03:26:03.999408 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:56665] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adlOyyGQ1M5d8fQSsLEHPQAAAA4"]
[Sat Apr 11 03:26:04.517450 2026] [:error] [pid 55451:tid 55458] [client 4.245.205.135:56690] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adlOzHApxuyB7yCS5RlSBQAAAMU"]
[Sat Apr 11 03:26:05.048380 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:35987] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "adlOzSGQ1M5d8fQSsLEHRgAAAAs"]
[Sat Apr 11 03:26:05.654791 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:61510] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "adlOzSGQ1M5d8fQSsLEHSwAAAAA"]
[Sat Apr 11 03:26:06.167126 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:65234] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "adlOziGQ1M5d8fQSsLEHUgAAAAI"]
[Sat Apr 11 03:26:06.687193 2026] [:error] [pid 55451:tid 55456] [client 4.245.205.135:52980] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "adlOznApxuyB7yCS5RlSEAAAAMM"]
[Sat Apr 11 03:26:07.247208 2026] [:error] [pid 21706:tid 21725] [client 4.245.205.135:65245] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adlOzyGQ1M5d8fQSsLEHXwAAABE"]
[Sat Apr 11 03:26:08.187466 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:61561] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adlO0CGQ1M5d8fQSsLEHZgAAABQ"]
[Sat Apr 11 03:26:08.736099 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:52960] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adlO0CGQ1M5d8fQSsLEHbAAAAAc"]
[Sat Apr 11 03:26:09.257157 2026] [:error] [pid 21706:tid 21726] [client 4.245.205.135:49640] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adlO0SGQ1M5d8fQSsLEHcgAAABI"]
[Sat Apr 11 03:26:09.835205 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:56698] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adlO0SGQ1M5d8fQSsLEHeAAAAA4"]
[Sat Apr 11 03:26:10.331537 2026] [:error] [pid 21706:tid 21716] [client 4.245.205.135:57402] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adlO0iGQ1M5d8fQSsLEHfQAAAAg"]
[Sat Apr 11 03:26:10.831221 2026] [:error] [pid 21568:tid 21574] [client 4.245.205.135:52984] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adlO0oiz5v_ljZxkpR8AMQAAAQI"]
[Sat Apr 11 03:26:11.344432 2026] [:error] [pid 21568:tid 21580] [client 4.245.205.135:60225] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adlO04iz5v_ljZxkpR8ANgAAAQg"]
[Sat Apr 11 03:26:11.945792 2026] [:error] [pid 21568:tid 21577] [client 4.245.205.135:44246] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adlO04iz5v_ljZxkpR8APAAAAQU"]
[Sat Apr 11 03:26:12.453935 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:65273] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adlO1HApxuyB7yCS5RlSHgAAANc"]
[Sat Apr 11 03:26:13.014888 2026] [:error] [pid 21570:tid 21685] [client 4.245.205.135:52949] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adlO1TKs5t9xRSNL6cn2BAAAAEw"]
[Sat Apr 11 03:26:13.588532 2026] [:error] [pid 21569:tid 21648] [client 4.245.205.135:44225] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adlO1XAvQTgvXJ6vHorCzwAAAIM"]
[Sat Apr 11 03:26:14.296579 2026] [:error] [pid 21570:tid 21672] [client 4.245.205.135:44234] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlO1jKs5t9xRSNL6cn2CAAAAEU"]
[Sat Apr 11 03:26:14.814884 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:61525] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlO1iGQ1M5d8fQSsLEHoAAAAAY"]
[Sat Apr 11 03:26:15.391687 2026] [:error] [pid 21568:tid 21575] [client 4.245.205.135:37252] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlO14iz5v_ljZxkpR8ASQAAAQM"]
[Sat Apr 11 03:26:15.978028 2026] [:error] [pid 21570:tid 21688] [client 4.245.205.135:57393] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlO1zKs5t9xRSNL6cn2DAAAAE4"]
[Sat Apr 11 03:26:16.690394 2026] [:error] [pid 21569:tid 21667] [client 4.245.205.135:62139] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adlO2HAvQTgvXJ6vHorC1gAAAJE"]
[Sat Apr 11 03:26:17.321235 2026] [:error] [pid 55451:tid 55460] [client 4.245.205.135:65254] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adlO2XApxuyB7yCS5RlSJAAAAMc"]
[Sat Apr 11 03:26:17.858587 2026] [:error] [pid 55451:tid 55469] [client 4.245.205.135:52946] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adlO2XApxuyB7yCS5RlSJwAAANA"]
[Sat Apr 11 03:26:18.540564 2026] [:error] [pid 21706:tid 21729] [client 4.245.205.135:36023] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adlO2iGQ1M5d8fQSsLEHugAAABU"]
[Sat Apr 11 03:26:19.094150 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:37293] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adlO2yGQ1M5d8fQSsLEHvwAAAAs"]
[Sat Apr 11 03:26:19.690179 2026] [:error] [pid 21706:tid 21709] [client 4.245.205.135:35988] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adlO2yGQ1M5d8fQSsLEHygAAAAE"]
[Sat Apr 11 03:26:20.251360 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:53943] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adlO3CGQ1M5d8fQSsLEH0QAAABQ"]
[Sat Apr 11 03:26:20.813625 2026] [:error] [pid 21570:tid 21665] [client 4.245.205.135:61567] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adlO3DKs5t9xRSNL6cn2FgAAAEI"]
[Sat Apr 11 03:26:21.400161 2026] [:error] [pid 21570:tid 21675] [client 4.245.205.135:65249] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "adlO3TKs5t9xRSNL6cn2GAAAAEc"]
[Sat Apr 11 03:26:22.133900 2026] [:error] [pid 21569:tid 21662] [client 4.245.205.135:52958] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "adlO3nAvQTgvXJ6vHorC3gAAAI8"]
[Sat Apr 11 03:26:22.674447 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:62084] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "adlO3iGQ1M5d8fQSsLEH3QAAAAY"]
[Sat Apr 11 03:26:23.265117 2026] [:error] [pid 21570:tid 21689] [client 4.245.205.135:53891] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "adlO3zKs5t9xRSNL6cn2GwAAAE8"]
[Sat Apr 11 03:26:23.844448 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:62096] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adlO33ApxuyB7yCS5RlSPQAAANc"]
[Sat Apr 11 03:26:24.628500 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:61512] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adlO4CGQ1M5d8fQSsLEH6gAAABQ"]
[Sat Apr 11 03:26:25.167463 2026] [:error] [pid 21568:tid 21596] [client 4.245.205.135:62090] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adlO4Yiz5v_ljZxkpR8AVgAAARg"]
[Sat Apr 11 03:26:25.683893 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:61522] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adlO4SGQ1M5d8fQSsLEH8AAAABY"]
[Sat Apr 11 03:26:26.232625 2026] [:error] [pid 21706:tid 21729] [client 4.245.205.135:46336] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adlO4iGQ1M5d8fQSsLEH9gAAABU"]
[Sat Apr 11 03:26:26.853024 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:62127] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adlO4iGQ1M5d8fQSsLEH-gAAAAA"]
[Sat Apr 11 03:26:27.375201 2026] [:error] [pid 21569:tid 21669] [client 4.245.205.135:53930] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adlO43AvQTgvXJ6vHorC6gAAAJI"]
[Sat Apr 11 03:26:27.892688 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:36006] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adlO44iz5v_ljZxkpR8AYAAAAQs"]
[Sat Apr 11 03:26:28.521380 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:52981] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlO5CGQ1M5d8fQSsLEIAQAAABg"]
[Sat Apr 11 03:26:29.071111 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:63471] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlO5SGQ1M5d8fQSsLEIBwAAAAk"]
[Sat Apr 11 03:26:29.572366 2026] [:error] [pid 21568:tid 21587] [client 4.245.205.135:44265] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlO5Yiz5v_ljZxkpR8AZAAAAQ8"]
[Sat Apr 11 03:26:30.072628 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:62126] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlO5iGQ1M5d8fQSsLEIDQAAABg"]
[Sat Apr 11 03:26:30.603953 2026] [:error] [pid 21568:tid 21578] [client 4.245.205.135:46345] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adlO5oiz5v_ljZxkpR8AagAAAQY"]
[Sat Apr 11 03:26:31.129305 2026] [:error] [pid 21568:tid 21595] [client 4.245.205.135:61535] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adlO54iz5v_ljZxkpR8AbgAAARc"]
[Sat Apr 11 03:26:31.677634 2026] [:error] [pid 21570:tid 21694] [client 4.245.205.135:43466] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adlO5zKs5t9xRSNL6cn2IwAAAFQ"]
[Sat Apr 11 03:26:32.176972 2026] [:error] [pid 21570:tid 21689] [client 4.245.205.135:35977] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adlO6DKs5t9xRSNL6cn2JAAAAE8"]
[Sat Apr 11 03:26:32.732342 2026] [:error] [pid 21568:tid 21594] [client 4.245.205.135:37275] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adlO6Iiz5v_ljZxkpR8AdgAAARY"]
[Sat Apr 11 03:26:33.273302 2026] [:error] [pid 21568:tid 21586] [client 4.245.205.135:59359] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adlO6Yiz5v_ljZxkpR8AeAAAAQ4"]
[Sat Apr 11 03:26:33.919582 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:61513] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adlO6XApxuyB7yCS5RlSTAAAAMg"]
[Sat Apr 11 03:26:34.474332 2026] [:error] [pid 21570:tid 21673] [client 4.245.205.135:60818] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adlO6jKs5t9xRSNL6cn2JgAAAEY"]
[Sat Apr 11 03:26:35.026310 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:46355] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adlO6yGQ1M5d8fQSsLEIIAAAAA8"]
[Sat Apr 11 03:26:35.529687 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:46344] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adlO6yGQ1M5d8fQSsLEIJgAAAAw"]
[Sat Apr 11 03:26:36.031911 2026] [:error] [pid 21706:tid 21729] [client 4.245.205.135:62137] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adlO7CGQ1M5d8fQSsLEIKgAAABU"]
[Sat Apr 11 03:26:36.547312 2026] [:error] [pid 55451:tid 55474] [client 4.245.205.135:52948] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adlO7HApxuyB7yCS5RlSUAAAANU"]
[Sat Apr 11 03:26:37.129059 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:37285] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adlO7XApxuyB7yCS5RlSVwAAANE"]
[Sat Apr 11 03:26:37.690779 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:61558] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adlO7SGQ1M5d8fQSsLEIOQAAAAA"]
[Sat Apr 11 03:26:38.188199 2026] [:error] [pid 55451:tid 55454] [client 4.245.205.135:63429] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adlO7nApxuyB7yCS5RlSXAAAAME"]
[Sat Apr 11 03:26:38.744983 2026] [:error] [pid 55451:tid 55475] [client 4.245.205.135:57356] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adlO7nApxuyB7yCS5RlSXgAAANY"]
[Sat Apr 11 03:26:39.263452 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:57367] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adlO7yGQ1M5d8fQSsLEISgAAAAc"]
[Sat Apr 11 03:26:39.765379 2026] [:error] [pid 21570:tid 21675] [client 4.245.205.135:56674] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adlO7zKs5t9xRSNL6cn2KgAAAEc"]
[Sat Apr 11 03:26:40.362461 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:62135] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adlO8CGQ1M5d8fQSsLEIUQAAAAU"]
[Sat Apr 11 03:26:40.939359 2026] [:error] [pid 21568:tid 21572] [client 4.245.205.135:37265] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adlO8Iiz5v_ljZxkpR8AiQAAAQA"]
[Sat Apr 11 03:26:41.513863 2026] [:error] [pid 21568:tid 21591] [client 4.245.205.135:37281] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adlO8Yiz5v_ljZxkpR8AjAAAARM"]
[Sat Apr 11 03:26:42.141330 2026] [:error] [pid 55451:tid 55454] [client 4.245.205.135:60836] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adlO8nApxuyB7yCS5RlSZgAAAME"]
[Sat Apr 11 03:26:42.690777 2026] [:error] [pid 55451:tid 55471] [client 4.245.205.135:53890] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adlO8nApxuyB7yCS5RlSagAAANI"]
[Sat Apr 11 03:26:43.208424 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:44250] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adlO83ApxuyB7yCS5RlSbAAAANc"]
[Sat Apr 11 03:26:43.713189 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:52954] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adlO8yGQ1M5d8fQSsLEIawAAAAI"]
[Sat Apr 11 03:26:44.217302 2026] [:error] [pid 21706:tid 21716] [client 4.245.205.135:61514] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adlO9CGQ1M5d8fQSsLEIcAAAAAg"]
[Sat Apr 11 03:26:44.745882 2026] [:error] [pid 55451:tid 55462] [client 4.245.205.135:53899] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adlO9HApxuyB7yCS5RlScQAAAMk"]
[Sat Apr 11 03:27:04.309444 2026] [proxy_fcgi:error] [pid 21706:tid 21713] [client 4.245.205.135:53912] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 03:27:04.575438 2026] [:error] [pid 21570:tid 21693] [client 4.245.205.135:36024] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adlPCDKs5t9xRSNL6cn2egAAAFM"]
[Sat Apr 11 03:27:05.140162 2026] [:error] [pid 55451:tid 55460] [client 4.245.205.135:43488] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adlPCXApxuyB7yCS5RlSkwAAAMc"]
[Sat Apr 11 03:27:05.658738 2026] [:error] [pid 55451:tid 55456] [client 4.245.205.135:49660] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adlPCXApxuyB7yCS5RlSlQAAAMM"]
[Sat Apr 11 03:27:06.227593 2026] [:error] [pid 55451:tid 55457] [client 4.245.205.135:37309] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adlPCnApxuyB7yCS5RlSmQAAAMQ"]
[Sat Apr 11 03:27:07.070024 2026] [:error] [pid 55451:tid 55475] [client 4.245.205.135:53924] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "adlPC3ApxuyB7yCS5RlSnwAAANY"]
[Sat Apr 11 03:27:07.634453 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:36022] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "adlPC4iz5v_ljZxkpR8AxwAAAQs"]
[Sat Apr 11 03:27:08.327970 2026] [:error] [pid 21706:tid 21718] [client 4.245.205.135:44264] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "adlPDCGQ1M5d8fQSsLEIuAAAAAo"]
[Sat Apr 11 03:27:08.860845 2026] [:error] [pid 55451:tid 55473] [client 4.245.205.135:60857] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "adlPDHApxuyB7yCS5RlSqQAAANQ"]
[Sat Apr 11 03:27:09.601667 2026] [:error] [pid 21568:tid 21590] [client 4.245.205.135:53947] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "adlPDYiz5v_ljZxkpR8AygAAARI"]
[Sat Apr 11 03:27:10.157494 2026] [:error] [pid 55451:tid 55473] [client 4.245.205.135:61557] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "adlPDnApxuyB7yCS5RlStgAAANQ"]
[Sat Apr 11 03:27:10.745498 2026] [:error] [pid 55451:tid 55457] [client 4.245.205.135:44249] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "adlPDnApxuyB7yCS5RlSvAAAAMQ"]
[Sat Apr 11 03:27:11.615292 2026] [:error] [pid 21568:tid 21593] [client 4.245.205.135:43467] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "adlPD4iz5v_ljZxkpR8AzgAAARU"]
[Sat Apr 11 03:27:12.190560 2026] [:error] [pid 55451:tid 55477] [client 4.245.205.135:52947] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlPEHApxuyB7yCS5RlSxAAAANg"]
[Sat Apr 11 03:27:12.774859 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:58893] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlPECGQ1M5d8fQSsLEIwgAAAAU"]
[Sat Apr 11 03:27:13.285103 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:44258] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlPESGQ1M5d8fQSsLEIyQAAABA"]
[Sat Apr 11 03:27:13.873651 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:49663] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlPEXApxuyB7yCS5RlSyAAAAM8"]
[Sat Apr 11 03:27:14.447005 2026] [:error] [pid 55451:tid 55458] [client 4.245.205.135:56678] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adlPEnApxuyB7yCS5RlSzAAAAMU"]
[Sat Apr 11 03:27:15.055648 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:62139] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adlPE3ApxuyB7yCS5RlS0AAAANM"]
[Sat Apr 11 03:27:15.587853 2026] [:error] [pid 21568:tid 21578] [client 4.245.205.135:62119] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adlPE4iz5v_ljZxkpR8A3gAAAQY"]
[Sat Apr 11 03:27:16.100557 2026] [:error] [pid 21568:tid 21588] [client 4.245.205.135:57353] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adlPFIiz5v_ljZxkpR8A4gAAARA"]
[Sat Apr 11 03:27:16.679796 2026] [:error] [pid 21570:tid 21663] [client 4.245.205.135:65235] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlPFDKs5t9xRSNL6cn2hQAAAEE"]
[Sat Apr 11 03:27:17.318704 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:44270] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlPFSGQ1M5d8fQSsLEI0AAAAAU"]
[Sat Apr 11 03:27:17.941960 2026] [:error] [pid 21568:tid 21591] [client 4.245.205.135:52932] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlPFYiz5v_ljZxkpR8A6wAAARM"]
[Sat Apr 11 03:27:18.507472 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:43460] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlPFoiz5v_ljZxkpR8A7gAAAQs"]
[Sat Apr 11 03:27:19.071702 2026] [:error] [pid 21568:tid 21576] [client 4.245.205.135:65250] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adlPF4iz5v_ljZxkpR8A8QAAAQQ"]
[Sat Apr 11 03:27:19.640653 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:52940] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adlPF3ApxuyB7yCS5RlS2wAAANE"]
[Sat Apr 11 03:27:20.210691 2026] [:error] [pid 55451:tid 55458] [client 4.245.205.135:46372] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adlPGHApxuyB7yCS5RlS3wAAAMU"]
[Sat Apr 11 03:27:20.743216 2026] [:error] [pid 21569:tid 21680] [client 4.245.205.135:43508] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adlPGHAvQTgvXJ6vHorDLgAAAJc"]
[Sat Apr 11 03:27:21.290899 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:63481] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlPGSGQ1M5d8fQSsLEI1gAAABg"]
[Sat Apr 11 03:27:21.945998 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:65261] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlPGSGQ1M5d8fQSsLEI1wAAABY"]
[Sat Apr 11 03:27:22.700876 2026] [:error] [pid 55451:tid 55465] [client 4.245.205.135:36007] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlPGnApxuyB7yCS5RlS8QAAAMw"]
[Sat Apr 11 03:27:23.259410 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:52928] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlPG4iz5v_ljZxkpR8BDAAAAQs"]
[Sat Apr 11 03:27:24.005758 2026] [:error] [pid 21569:tid 21671] [client 4.245.205.135:61515] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adlPHHAvQTgvXJ6vHorDMgAAAJM"]
[Sat Apr 11 03:27:24.606914 2026] [:error] [pid 21569:tid 21652] [client 4.245.205.135:43485] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adlPHHAvQTgvXJ6vHorDNQAAAIc"]
[Sat Apr 11 03:27:25.155329 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:58920] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adlPHSGQ1M5d8fQSsLEI4AAAAAs"]
[Sat Apr 11 03:27:25.744590 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:53951] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adlPHXApxuyB7yCS5RlTAAAAAMY"]
[Sat Apr 11 03:27:26.302722 2026] [:error] [pid 21706:tid 21727] [client 4.245.205.135:61519] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adlPHiGQ1M5d8fQSsLEI5wAAABM"]
[Sat Apr 11 03:27:26.923316 2026] [:error] [pid 55451:tid 55465] [client 4.245.205.135:35999] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adlPHnApxuyB7yCS5RlTAwAAAMw"]
[Sat Apr 11 03:27:27.524042 2026] [:error] [pid 21570:tid 21665] [client 4.245.205.135:56701] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adlPHzKs5t9xRSNL6cn2yAAAAEI"]
[Sat Apr 11 03:27:28.213492 2026] [:error] [pid 21568:tid 21574] [client 4.245.205.135:61524] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adlPIIiz5v_ljZxkpR8BFgAAAQI"]
[Sat Apr 11 03:27:28.794104 2026] [:error] [pid 21569:tid 21662] [client 4.245.205.135:61523] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adlPIHAvQTgvXJ6vHorDPAAAAI8"]
[Sat Apr 11 03:27:29.432920 2026] [:error] [pid 21568:tid 21589] [client 4.245.205.135:65217] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adlPIYiz5v_ljZxkpR8BGwAAARE"]
[Sat Apr 11 03:27:30.007422 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:53906] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adlPIiGQ1M5d8fQSsLEI-gAAAA8"]
[Sat Apr 11 03:27:30.599911 2026] [:error] [pid 21706:tid 21718] [client 4.245.205.135:53908] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adlPIiGQ1M5d8fQSsLEI_AAAAAo"]
[Sat Apr 11 03:27:31.375761 2026] [:error] [pid 55451:tid 55477] [client 4.245.205.135:43475] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adlPI3ApxuyB7yCS5RlTCQAAANg"]
[Sat Apr 11 03:27:31.914593 2026] [:error] [pid 55451:tid 55464] [client 4.245.205.135:35991] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adlPI3ApxuyB7yCS5RlTDwAAAMs"]
[Sat Apr 11 03:27:32.491686 2026] [:error] [pid 21569:tid 21654] [client 4.245.205.135:37256] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adlPJHAvQTgvXJ6vHorDSQAAAIk"]
[Sat Apr 11 03:27:33.108377 2026] [:error] [pid 21568:tid 21578] [client 4.245.205.135:57362] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adlPJYiz5v_ljZxkpR8BIwAAAQY"]
[Sat Apr 11 03:27:33.689420 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:56659] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlPJSGQ1M5d8fQSsLEJAAAAAAs"]
[Sat Apr 11 03:27:34.303069 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:63466] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlPJiGQ1M5d8fQSsLEJBwAAABg"]
[Sat Apr 11 03:27:34.825066 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:60286] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlPJiGQ1M5d8fQSsLEJDQAAAAA"]
[Sat Apr 11 03:27:35.448686 2026] [:error] [pid 21570:tid 21696] [client 4.245.205.135:65269] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlPJzKs5t9xRSNL6cn2yQAAAFY"]
[Sat Apr 11 03:27:36.113064 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:57385] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adlPKHApxuyB7yCS5RlTHQAAAM4"]
[Sat Apr 11 03:27:36.717607 2026] [:error] [pid 21569:tid 21648] [client 4.245.205.135:56657] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adlPKHAvQTgvXJ6vHorDUgAAAIM"]
[Sat Apr 11 03:27:37.264701 2026] [:error] [pid 55451:tid 55466] [client 4.245.205.135:57385] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adlPKXApxuyB7yCS5RlTIwAAAM0"]
[Sat Apr 11 03:27:37.813858 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:63457] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adlPKSGQ1M5d8fQSsLEJGAAAABY"]
[Sat Apr 11 03:27:38.392042 2026] [:error] [pid 21568:tid 21586] [client 4.245.205.135:53933] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "adlPKoiz5v_ljZxkpR8BLwAAAQ4"]
[Sat Apr 11 03:27:38.906767 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:61518] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "adlPKiGQ1M5d8fQSsLEJIwAAABc"]
[Sat Apr 11 03:27:39.770423 2026] [:error] [pid 21569:tid 21647] [client 4.245.205.135:53918] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adlPK3AvQTgvXJ6vHorDVwAAAII"]
[Sat Apr 11 03:27:40.343681 2026] [:error] [pid 21706:tid 21718] [client 4.245.205.135:36029] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adlPLCGQ1M5d8fQSsLEJMQAAAAo"]
[Sat Apr 11 03:27:40.916918 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:37268] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adlPLCGQ1M5d8fQSsLEJNgAAAAU"]
[Sat Apr 11 03:27:41.481789 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:37292] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adlPLXApxuyB7yCS5RlTLQAAANM"]
[Sat Apr 11 03:27:42.079074 2026] [:error] [pid 21569:tid 21680] [client 4.245.205.135:56677] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "adlPLnAvQTgvXJ6vHorDWgAAAJc"]
[Sat Apr 11 03:27:42.847158 2026] [:error] [pid 21568:tid 21581] [client 4.245.205.135:60837] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "adlPLoiz5v_ljZxkpR8BOwAAAQk"]
[Sat Apr 11 03:27:43.565397 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:49600] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "adlPL3ApxuyB7yCS5RlTPQAAANM"]
[Sat Apr 11 03:27:44.224754 2026] [:error] [pid 55451:tid 55474] [client 4.245.205.135:60849] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "adlPMHApxuyB7yCS5RlTRQAAANU"]
[Sat Apr 11 03:27:44.955828 2026] [:error] [pid 55451:tid 55475] [client 4.245.205.135:59345] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "adlPMHApxuyB7yCS5RlTSgAAANY"]
[Sat Apr 11 03:27:45.507608 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:61544] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "adlPMSGQ1M5d8fQSsLEJVwAAAAw"]
[Sat Apr 11 03:27:46.053860 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:37311] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "adlPMiGQ1M5d8fQSsLEJWwAAAA4"]
[Sat Apr 11 03:27:46.595052 2026] [:error] [pid 21569:tid 21651] [client 4.245.205.135:49614] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "adlPMnAvQTgvXJ6vHorDXwAAAIY"]
[Sat Apr 11 03:27:47.180419 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:37283] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "adlPM3ApxuyB7yCS5RlTVwAAAMY"]
[Sat Apr 11 03:27:47.765588 2026] [:error] [pid 21569:tid 21645] [client 4.245.205.135:57388] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "adlPM3AvQTgvXJ6vHorDYwAAAIA"]
[Sat Apr 11 03:27:48.340611 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:37304] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "adlPNCGQ1M5d8fQSsLEJZgAAAAA"]
[Sat Apr 11 03:27:48.910391 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:61516] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "adlPNCGQ1M5d8fQSsLEJagAAABA"]
[Sat Apr 11 03:27:49.546035 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:56691] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "adlPNXApxuyB7yCS5RlTXgAAAM8"]
[Sat Apr 11 03:27:50.069113 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:52945] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "adlPNiGQ1M5d8fQSsLEJbQAAAAM"]
[Sat Apr 11 03:27:50.599485 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:62108] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "adlPNiGQ1M5d8fQSsLEJcgAAAA0"]
[Sat Apr 11 03:27:51.154647 2026] [:error] [pid 55451:tid 55463] [client 4.245.205.135:63474] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "adlPN3ApxuyB7yCS5RlTbAAAAMo"]
[Sat Apr 11 03:27:51.708568 2026] [:error] [pid 21570:tid 21673] [client 4.245.205.135:44248] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adlPNzKs5t9xRSNL6cn23AAAAEY"]
[Sat Apr 11 03:27:52.218176 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:53912] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adlPOCGQ1M5d8fQSsLEJeAAAAAU"]
[Sat Apr 11 03:27:52.740052 2026] [:error] [pid 21706:tid 21727] [client 4.245.205.135:57378] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adlPOCGQ1M5d8fQSsLEJfgAAABM"]
[Sat Apr 11 03:27:53.283637 2026] [:error] [pid 21568:tid 21595] [client 4.245.205.135:36000] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jlex.php"] [unique_id "adlPOYiz5v_ljZxkpR8BUgAAARc"]
[Sat Apr 11 03:27:53.785728 2026] [:error] [pid 21570:tid 21668] [client 4.245.205.135:35986] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adlPOTKs5t9xRSNL6cn24gAAAEM"]
[Sat Apr 11 03:27:54.295825 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:57371] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adlPOiGQ1M5d8fQSsLEJiAAAAAc"]
[Sat Apr 11 03:27:54.826024 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:53889] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adlPOiGQ1M5d8fQSsLEJiwAAAA4"]
[Sat Apr 11 03:27:55.359569 2026] [:error] [pid 21706:tid 21726] [client 4.245.205.135:44255] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adlPOyGQ1M5d8fQSsLEJjwAAABI"]
[Sat Apr 11 03:27:55.909083 2026] [:error] [pid 21569:tid 21651] [client 4.245.205.135:61507] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/jp.php"] [unique_id "adlPO3AvQTgvXJ6vHorDbwAAAIY"]
[Sat Apr 11 03:27:56.417422 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:53940] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/jp.php"] [unique_id "adlPPCGQ1M5d8fQSsLEJlgAAABA"]
[Sat Apr 11 03:27:56.918512 2026] [:error] [pid 55451:tid 55460] [client 4.245.205.135:57394] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/jp.php"] [unique_id "adlPPHApxuyB7yCS5RlTdwAAAMc"]
[Sat Apr 11 03:27:57.501018 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:65244] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/jp.php"] [unique_id "adlPPSGQ1M5d8fQSsLEJmwAAAA8"]
[Sat Apr 11 03:27:58.000593 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:35970] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adlPPXApxuyB7yCS5RlTewAAAM8"]
[Sat Apr 11 03:27:58.548974 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:46351] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adlPPiGQ1M5d8fQSsLEJowAAAAs"]
[Sat Apr 11 03:27:59.114031 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:62131] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adlPPyGQ1M5d8fQSsLEJpgAAABg"]
[Sat Apr 11 03:27:59.658205 2026] [:error] [pid 21706:tid 21725] [client 4.245.205.135:36003] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adlPPyGQ1M5d8fQSsLEJqQAAABE"]
[Sat Apr 11 03:28:00.192880 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:49608] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "adlPQHApxuyB7yCS5RlThAAAANE"]
[Sat Apr 11 03:28:00.746648 2026] [:error] [pid 21570:tid 21685] [client 4.245.205.135:56680] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "adlPQDKs5t9xRSNL6cn27gAAAEw"]
[Sat Apr 11 03:28:01.275889 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:53916] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "adlPQSGQ1M5d8fQSsLEJsQAAAAw"]
[Sat Apr 11 03:28:01.815098 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:52937] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "adlPQXApxuyB7yCS5RlTigAAAMg"]
[Sat Apr 11 07:15:43.738154 2026] [proxy_fcgi:error] [pid 33288:tid 33300] [client 72.146.8.12:60170] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:56:21.131695 2026] [proxy_fcgi:error] [pid 15244:tid 15270] [client 20.234.0.30:50926] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:56:26.944549 2026] [proxy_fcgi:error] [pid 33172:tid 33230] [client 20.234.0.30:4761] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:56:41.306329 2026] [proxy_fcgi:error] [pid 33288:tid 33314] [client 20.234.0.30:42117] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:56:56.911988 2026] [proxy_fcgi:error] [pid 33172:tid 33229] [client 20.234.0.30:41346] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:56:57.502590 2026] [proxy_fcgi:error] [pid 33288:tid 33297] [client 20.234.0.30:51104] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:57:03.372609 2026] [:error] [pid 15244:tid 15266] [client 20.234.0.30:49114] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rfzhh.php"] [unique_id "admOT4kdEsz5NeAq8w2b2QAAARQ"]
[Sat Apr 11 07:57:04.073888 2026] [:error] [pid 15244:tid 15247] [client 20.234.0.30:43674] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rfzhh.php"] [unique_id "admOUIkdEsz5NeAq8w2b2gAAAQE"]
[Sat Apr 11 07:57:04.608420 2026] [:error] [pid 33171:tid 33197] [client 20.234.0.30:51576] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rfzhh.php"] [unique_id "admOULoqTMlo30hcVw-VSwAAAAs"]
[Sat Apr 11 07:57:05.605328 2026] [:error] [pid 15244:tid 15248] [client 20.234.0.30:35348] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rfzhh.php"] [unique_id "admOUYkdEsz5NeAq8w2b3gAAAQI"]
[Sat Apr 11 07:57:06.858648 2026] [:error] [pid 33171:tid 33203] [client 20.234.0.30:51305] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin-wp.php"] [unique_id "admOUroqTMlo30hcVw-VUAAAABE"]
[Sat Apr 11 07:57:07.509992 2026] [:error] [pid 33288:tid 33297] [client 20.234.0.30:50703] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin-wp.php"] [unique_id "admOU2JmwJFFPEgRHfGgmgAAAMc"]
[Sat Apr 11 07:57:08.110683 2026] [:error] [pid 33171:tid 33204] [client 20.234.0.30:14540] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin-wp.php"] [unique_id "admOVLoqTMlo30hcVw-VUgAAABI"]
[Sat Apr 11 07:57:08.716054 2026] [:error] [pid 33173:tid 33268] [client 20.234.0.30:50738] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin-wp.php"] [unique_id "admOVK8109xRDP2izWgiUgAAAJc"]
[Sat Apr 11 07:57:09.315602 2026] [:error] [pid 33173:tid 33252] [client 20.234.0.30:50698] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uplozyu.php"] [unique_id "admOVa8109xRDP2izWgiUwAAAIc"]
[Sat Apr 11 07:57:10.045393 2026] [:error] [pid 15244:tid 15270] [client 20.234.0.30:50317] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uplozyu.php"] [unique_id "admOVokdEsz5NeAq8w2b8gAAARg"]
[Sat Apr 11 07:57:10.568991 2026] [:error] [pid 33171:tid 33208] [client 20.234.0.30:49100] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uplozyu.php"] [unique_id "admOVroqTMlo30hcVw-VVAAAABY"]
[Sat Apr 11 07:57:11.100150 2026] [:error] [pid 15244:tid 15255] [client 20.234.0.30:50711] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uplozyu.php"] [unique_id "admOV4kdEsz5NeAq8w2b9wAAAQk"]
[Sat Apr 11 07:57:11.752887 2026] [:error] [pid 15244:tid 15250] [client 20.234.0.30:43664] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "admOV4kdEsz5NeAq8w2b-gAAAQQ"]
[Sat Apr 11 07:57:12.391303 2026] [:error] [pid 33173:tid 33247] [client 20.234.0.30:46858] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "admOWK8109xRDP2izWgiWQAAAII"]
[Sat Apr 11 07:57:12.887472 2026] [:error] [pid 15244:tid 15267] [client 20.234.0.30:51463] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "admOWIkdEsz5NeAq8w2b_QAAARU"]
[Sat Apr 11 07:57:13.462759 2026] [:error] [pid 15244:tid 15247] [client 20.234.0.30:35330] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "admOWYkdEsz5NeAq8w2b_wAAAQE"]
[Sat Apr 11 07:57:13.975941 2026] [:error] [pid 33171:tid 33194] [client 20.234.0.30:50750] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lpktuneq.php"] [unique_id "admOWboqTMlo30hcVw-VWAAAAAg"]
[Sat Apr 11 07:57:14.599249 2026] [:error] [pid 15244:tid 15250] [client 20.234.0.30:35386] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lpktuneq.php"] [unique_id "admOWokdEsz5NeAq8w2cAgAAAQQ"]
[Sat Apr 11 07:57:15.133058 2026] [:error] [pid 33288:tid 33294] [client 20.234.0.30:50174] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lpktuneq.php"] [unique_id "admOW2JmwJFFPEgRHfGgqAAAAMQ"]
[Sat Apr 11 07:57:15.776698 2026] [:error] [pid 15244:tid 15270] [client 20.234.0.30:51563] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lpktuneq.php"] [unique_id "admOW4kdEsz5NeAq8w2cCAAAARg"]
[Sat Apr 11 07:57:16.548354 2026] [:error] [pid 15244:tid 15250] [client 20.234.0.30:52044] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "admOXIkdEsz5NeAq8w2cCQAAAQQ"]
[Sat Apr 11 07:57:17.251619 2026] [:error] [pid 15244:tid 15267] [client 20.234.0.30:50133] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "admOXYkdEsz5NeAq8w2cEgAAARU"]
[Sat Apr 11 07:57:18.018517 2026] [:error] [pid 33288:tid 33304] [client 20.234.0.30:10019] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "admOXmJmwJFFPEgRHfGgqgAAAM4"]
[Sat Apr 11 07:57:18.761701 2026] [:error] [pid 15244:tid 15266] [client 20.234.0.30:42802] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "admOXokdEsz5NeAq8w2cIAAAARQ"]
[Sat Apr 11 07:57:19.360417 2026] [:error] [pid 33172:tid 33236] [client 20.234.0.30:43699] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-widgets.php"] [unique_id "admOXzn2G0IJw5EZY9l3vAAAAFI"]
[Sat Apr 11 07:57:20.166358 2026] [:error] [pid 15244:tid 15251] [client 20.234.0.30:43688] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-widgets.php"] [unique_id "admOYIkdEsz5NeAq8w2cJgAAAQU"]
[Sat Apr 11 07:57:20.916089 2026] [:error] [pid 33173:tid 33267] [client 20.234.0.30:50718] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-widgets.php"] [unique_id "admOYK8109xRDP2izWgibwAAAJY"]
[Sat Apr 11 07:57:22.296413 2026] [:error] [pid 33288:tid 33309] [client 20.234.0.30:46519] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-widgets.php"] [unique_id "admOYmJmwJFFPEgRHfGgsQAAANM"]
[Sat Apr 11 07:57:23.005033 2026] [:error] [pid 15244:tid 15263] [client 20.234.0.30:46861] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tsconfig.php"] [unique_id "admOY4kdEsz5NeAq8w2cLAAAARE"]
[Sat Apr 11 07:57:23.993808 2026] [:error] [pid 33288:tid 33310] [client 20.234.0.30:51189] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tsconfig.php"] [unique_id "admOY2JmwJFFPEgRHfGgtgAAANQ"]
[Sat Apr 11 07:57:24.796026 2026] [:error] [pid 33172:tid 33224] [client 20.234.0.30:4266] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tsconfig.php"] [unique_id "admOZDn2G0IJw5EZY9l3yQAAAEY"]
[Sat Apr 11 07:57:25.544611 2026] [:error] [pid 15244:tid 15269] [client 20.234.0.30:51568] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tsconfig.php"] [unique_id "admOZYkdEsz5NeAq8w2cOgAAARc"]
[Sat Apr 11 07:57:26.167157 2026] [:error] [pid 33172:tid 33236] [client 20.234.0.30:42792] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "admOZjn2G0IJw5EZY9l3ywAAAFI"]
[Sat Apr 11 07:57:26.829846 2026] [:error] [pid 33173:tid 33263] [client 20.234.0.30:46521] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "admOZq8109xRDP2izWgicwAAAJI"]
[Sat Apr 11 07:57:27.566573 2026] [:error] [pid 33173:tid 33251] [client 20.234.0.30:4286] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "admOZ68109xRDP2izWgidQAAAIY"]
[Sat Apr 11 07:57:28.405627 2026] [:error] [pid 33288:tid 33306] [client 20.234.0.30:10025] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "admOaGJmwJFFPEgRHfGguwAAANA"]
[Sat Apr 11 07:57:29.406649 2026] [:error] [pid 15244:tid 15265] [client 20.234.0.30:48671] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "admOaYkdEsz5NeAq8w2cRQAAARM"]
[Sat Apr 11 07:57:30.163204 2026] [:error] [pid 33171:tid 33192] [client 20.234.0.30:46854] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "admOaroqTMlo30hcVw-VbQAAAAY"]
[Sat Apr 11 07:57:30.717150 2026] [:error] [pid 33171:tid 33188] [client 20.234.0.30:35041] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "admOaroqTMlo30hcVw-VbwAAAAI"]
[Sat Apr 11 07:57:31.270492 2026] [:error] [pid 33288:tid 33304] [client 20.234.0.30:35385] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "admOa2JmwJFFPEgRHfGgxAAAAM4"]
[Sat Apr 11 07:57:31.873680 2026] [:error] [pid 33288:tid 33305] [client 20.234.0.30:35031] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/turbo.php"] [unique_id "admOa2JmwJFFPEgRHfGgyQAAAM8"]
[Sat Apr 11 07:57:32.582561 2026] [:error] [pid 33173:tid 33265] [client 20.234.0.30:51325] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/turbo.php"] [unique_id "admObK8109xRDP2izWgifgAAAJQ"]
[Sat Apr 11 07:57:33.539755 2026] [:error] [pid 33173:tid 33263] [client 20.234.0.30:44557] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/turbo.php"] [unique_id "admOba8109xRDP2izWgiggAAAJI"]
[Sat Apr 11 07:57:34.385292 2026] [:error] [pid 33288:tid 33305] [client 20.234.0.30:51522] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/turbo.php"] [unique_id "admObmJmwJFFPEgRHfGg2AAAAM8"]
[Sat Apr 11 07:57:35.442946 2026] [:error] [pid 33288:tid 33313] [client 20.234.0.30:50714] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/small.php"] [unique_id "admOb2JmwJFFPEgRHfGg2gAAANc"]
[Sat Apr 11 07:57:36.777310 2026] [:error] [pid 33288:tid 33304] [client 20.234.0.30:36961] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/small.php"] [unique_id "admOcGJmwJFFPEgRHfGg3gAAAM4"]
[Sat Apr 11 07:57:40.316362 2026] [:error] [pid 33172:tid 33236] [client 20.234.0.30:50163] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/small.php"] [unique_id "admOdDn2G0IJw5EZY9l37AAAAFI"]
[Sat Apr 11 07:57:42.530701 2026] [:error] [pid 33288:tid 33313] [client 20.234.0.30:46527] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/small.php"] [unique_id "admOdmJmwJFFPEgRHfGg5wAAANc"]
[Sat Apr 11 07:57:43.785333 2026] [:error] [pid 33288:tid 33298] [client 20.234.0.30:50346] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "admOd2JmwJFFPEgRHfGg7AAAAMg"]
[Sat Apr 11 07:57:44.793349 2026] [:error] [pid 33288:tid 33296] [client 20.234.0.30:50135] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "admOeGJmwJFFPEgRHfGg9AAAAMY"]
[Sat Apr 11 07:57:45.885297 2026] [:error] [pid 33173:tid 33258] [client 20.234.0.30:35040] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "admOea8109xRDP2izWgimAAAAI0"]
[Sat Apr 11 07:57:46.606165 2026] [:error] [pid 15244:tid 15261] [client 20.234.0.30:35055] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "admOeokdEsz5NeAq8w2chAAAAQ8"]
[Sat Apr 11 07:57:47.453510 2026] [:error] [pid 15244:tid 15247] [client 20.234.0.30:44604] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "admOe4kdEsz5NeAq8w2cjAAAAQE"]
[Sat Apr 11 07:57:48.408128 2026] [:error] [pid 33173:tid 33245] [client 20.234.0.30:36692] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "admOfK8109xRDP2izWgioAAAAIA"]
[Sat Apr 11 07:57:49.072031 2026] [:error] [pid 15244:tid 15250] [client 20.234.0.30:13086] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "admOfYkdEsz5NeAq8w2ckwAAAQQ"]
[Sat Apr 11 07:57:49.796650 2026] [:error] [pid 15244:tid 15261] [client 20.234.0.30:48667] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "admOfYkdEsz5NeAq8w2cmAAAAQ8"]
[Sat Apr 11 07:57:50.632756 2026] [:error] [pid 15244:tid 15250] [client 20.234.0.30:42740] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/veoblmpa.php"] [unique_id "admOfokdEsz5NeAq8w2cngAAAQQ"]
[Sat Apr 11 07:57:51.755639 2026] [:error] [pid 15244:tid 15268] [client 20.234.0.30:42474] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/veoblmpa.php"] [unique_id "admOf4kdEsz5NeAq8w2cpgAAARY"]
[Sat Apr 11 07:57:52.744259 2026] [:error] [pid 33173:tid 33259] [client 20.234.0.30:42492] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/veoblmpa.php"] [unique_id "admOgK8109xRDP2izWgiqAAAAI4"]
[Sat Apr 11 07:57:53.359742 2026] [:error] [pid 33173:tid 33246] [client 20.234.0.30:36733] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/veoblmpa.php"] [unique_id "admOga8109xRDP2izWgiqgAAAIE"]
[Sat Apr 11 07:57:55.029761 2026] [:error] [pid 15244:tid 15255] [client 20.234.0.30:13066] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "admOg4kdEsz5NeAq8w2crgAAAQk"]
[Sat Apr 11 07:57:56.217310 2026] [:error] [pid 15244:tid 15266] [client 20.234.0.30:48699] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "admOhIkdEsz5NeAq8w2csgAAARQ"]
[Sat Apr 11 07:57:56.949128 2026] [:error] [pid 33288:tid 33291] [client 20.234.0.30:43705] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "admOhGJmwJFFPEgRHfGhEwAAAME"]
[Sat Apr 11 07:57:57.648341 2026] [:error] [pid 15244:tid 15261] [client 20.234.0.30:41905] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "admOhYkdEsz5NeAq8w2cugAAAQ8"]
[Sat Apr 11 07:57:58.239065 2026] [:error] [pid 15244:tid 15260] [client 20.234.0.30:42808] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/levyzxsb.php"] [unique_id "admOhokdEsz5NeAq8w2cvgAAAQ4"]
[Sat Apr 11 07:57:59.030367 2026] [:error] [pid 33288:tid 33292] [client 20.234.0.30:48689] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/levyzxsb.php"] [unique_id "admOh2JmwJFFPEgRHfGhHgAAAMI"]
[Sat Apr 11 07:57:59.787735 2026] [:error] [pid 15244:tid 15253] [client 20.234.0.30:12173] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/levyzxsb.php"] [unique_id "admOh4kdEsz5NeAq8w2czAAAAQc"]
[Sat Apr 11 07:58:15.195533 2026] [proxy_fcgi:error] [pid 33288:tid 33308] [client 20.234.0.30:41891] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:58:19.987632 2026] [proxy_fcgi:error] [pid 33173:tid 33245] [client 20.234.0.30:50718] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:58:34.586041 2026] [proxy_fcgi:error] [pid 33171:tid 33209] [client 20.234.0.30:42441] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:58:49.773793 2026] [proxy_fcgi:error] [pid 33288:tid 33304] [client 20.234.0.30:46252] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:58:50.394632 2026] [proxy_fcgi:error] [pid 33173:tid 33249] [client 20.234.0.30:35037] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 11 07:58:56.115406 2026] [:error] [pid 33288:tid 33308] [client 20.234.0.30:50699] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zMjcvbswY.php"] [unique_id "admOwGJmwJFFPEgRHfGh2AAAANI"]
[Sat Apr 11 07:58:57.833907 2026] [:error] [pid 33288:tid 33312] [client 20.234.0.30:48326] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zMjcvbswY.php"] [unique_id "admOwWJmwJFFPEgRHfGh2gAAANY"]
[Sat Apr 11 07:58:58.789364 2026] [:error] [pid 33171:tid 33206] [client 20.234.0.30:4231] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zMjcvbswY.php"] [unique_id "admOwroqTMlo30hcVw-WEwAAABQ"]
[Sat Apr 11 07:58:59.809490 2026] [:error] [pid 15244:tid 15263] [client 20.234.0.30:35032] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zMjcvbswY.php"] [unique_id "admOw4kdEsz5NeAq8w2d_AAAARE"]
[Sat Apr 11 07:59:00.310096 2026] [:error] [pid 15244:tid 15247] [client 20.234.0.30:46471] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "admOxIkdEsz5NeAq8w2eAQAAAQE"]
[Sat Apr 11 07:59:00.840417 2026] [:error] [pid 15244:tid 15260] [client 20.234.0.30:10031] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "admOxIkdEsz5NeAq8w2eBgAAAQ4"]
[Sat Apr 11 07:59:01.359426 2026] [:error] [pid 33172:tid 33230] [client 20.234.0.30:51607] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "admOxTn2G0IJw5EZY9l4QAAAAEw"]
[Sat Apr 11 07:59:01.948828 2026] [:error] [pid 33173:tid 33259] [client 20.234.0.30:48360] [client 20.234.0.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "admOxa8109xRDP2izWgjQQAAAI4"]
[Sat Apr 11 09:42:46.859844 2026] [:error] [pid 34824:tid 34885] [client 157.15.40.61:60127] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnFl_rq5TGFWAbVHXeLwAAAYQ"]
[Sat Apr 11 14:11:38.906406 2026] [:error] [pid 2186:tid 2194] [client 157.15.40.61:56613] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "adnmGsibnOEEvcO8wPL9eAAAAIQ"]
[Sat Apr 11 14:11:40.043310 2026] [:error] [pid 2297:tid 2304] [client 157.15.40.61:56830] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmHLXJS-Jji11jZk3ZkQAAAQM"]
[Sat Apr 11 14:11:41.441667 2026] [:error] [pid 2297:tid 2304] [client 157.15.40.61:57086] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmHbXJS-Jji11jZk3ZzAAAAQM"]
[Sat Apr 11 14:11:44.390370 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:57437] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmIMW3w7N67R04YCKRzwAAAE4"]
[Sat Apr 11 14:11:45.665938 2026] [:error] [pid 2297:tid 2320] [client 157.15.40.61:57686] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmIbXJS-Jji11jZk3aXgAAARM"]
[Sat Apr 11 14:11:46.935984 2026] [:error] [pid 2297:tid 2308] [client 157.15.40.61:57870] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "adnmIrXJS-Jji11jZk3anQAAAQc"]
[Sat Apr 11 14:11:48.754889 2026] [:error] [pid 11067:tid 11074] [client 157.15.40.61:58184] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "adnmJMW3w7N67R04YCKSgAAAAEU"]
[Sat Apr 11 14:11:49.013874 2026] [:error] [pid 2297:tid 2322] [client 157.15.40.61:58405] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "adnmJbXJS-Jji11jZk3a4gAAARU"]
[Sat Apr 11 14:11:49.284760 2026] [:error] [pid 2188:tid 2262] [client 157.15.40.61:58445] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adnmJYDhDA-Xtn2nRScKoAAAAMY"]
[Sat Apr 11 14:11:49.546362 2026] [:error] [pid 2297:tid 2301] [client 157.15.40.61:58486] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "adnmJbXJS-Jji11jZk3a7AAAAQA"]
[Sat Apr 11 14:11:49.812708 2026] [:error] [pid 2297:tid 2307] [client 157.15.40.61:58545] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "adnmJbXJS-Jji11jZk3a9AAAAQY"]
[Sat Apr 11 14:11:50.073388 2026] [:error] [pid 11067:tid 11082] [client 157.15.40.61:58617] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/blurbs.php"] [unique_id "adnmJsW3w7N67R04YCKS5gAAAE0"]
[Sat Apr 11 14:11:51.003170 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:58847] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/akcc.php"] [unique_id "adnmJ7XJS-Jji11jZk3bVwAAAQg"]
[Sat Apr 11 14:11:52.320361 2026] [:error] [pid 2297:tid 2302] [client 157.15.40.61:59122] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "adnmKLXJS-Jji11jZk3bmwAAAQE"]
[Sat Apr 11 14:11:54.583419 2026] [:error] [pid 11067:tid 11076] [client 157.15.40.61:59364] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shelp.php"] [unique_id "adnmKsW3w7N67R04YCKT_AAAAEc"]
[Sat Apr 11 14:11:54.844027 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:59573] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cord.php"] [unique_id "adnmKsW3w7N67R04YCKUHwAAAEg"]
[Sat Apr 11 14:11:56.142398 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:59918] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dex.php"] [unique_id "adnmLMW3w7N67R04YCKUyQAAAFY"]
[Sat Apr 11 14:11:56.411077 2026] [:error] [pid 2187:tid 2228] [client 157.15.40.61:59984] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmLA4J29_qQi0FkjiJXwAAAAI"]
[Sat Apr 11 14:11:57.455859 2026] [:error] [pid 2187:tid 2247] [client 157.15.40.61:60187] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "adnmLQ4J29_qQi0FkjiJggAAABM"]
[Sat Apr 11 14:11:57.715857 2026] [:error] [pid 2297:tid 2320] [client 157.15.40.61:60258] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "adnmLbXJS-Jji11jZk3b_wAAARM"]
[Sat Apr 11 14:11:58.979858 2026] [:error] [pid 2187:tid 2233] [client 157.15.40.61:60615] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmLg4J29_qQi0FkjiJtQAAAAU"]
[Sat Apr 11 14:11:59.246469 2026] [:error] [pid 2187:tid 2251] [client 157.15.40.61:60693] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmLw4J29_qQi0FkjiJygAAABc"]
[Sat Apr 11 14:11:59.532741 2026] [:error] [pid 2186:tid 2198] [client 157.15.40.61:60752] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adnmL8ibnOEEvcO8wPL_EAAAAIg"]
[Sat Apr 11 14:11:59.800580 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:60776] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shlo.php"] [unique_id "adnmL8W3w7N67R04YCKWHQAAAE4"]
[Sat Apr 11 14:12:01.890554 2026] [:error] [pid 2187:tid 2240] [client 157.15.40.61:61007] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/133.php"] [unique_id "adnmMQ4J29_qQi0FkjiJ8QAAAAw"]
[Sat Apr 11 14:12:02.695161 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:61355] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "adnmMsW3w7N67R04YCKWqgAAAFI"]
[Sat Apr 11 14:12:03.953170 2026] [:error] [pid 11067:tid 11085] [client 157.15.40.61:61413] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "adnmM8W3w7N67R04YCKW5AAAAFA"]
[Sat Apr 11 14:12:06.359839 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:62249] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/lufix1.php"] [unique_id "adnmNsW3w7N67R04YCKXEgAAAFI"]
[Sat Apr 11 14:12:07.146954 2026] [:error] [pid 2186:tid 2192] [client 157.15.40.61:49772] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/witmm.php"] [unique_id "adnmN8ibnOEEvcO8wPL_bAAAAII"]
[Sat Apr 11 14:12:08.092421 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:49972] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmOMW3w7N67R04YCKXMQAAAFE"]
[Sat Apr 11 14:12:08.379902 2026] [:error] [pid 2297:tid 2314] [client 157.15.40.61:50000] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmOLXJS-Jji11jZk3ctgAAAQ0"]
[Sat Apr 11 14:12:09.140804 2026] [:error] [pid 2188:tid 2280] [client 157.15.40.61:50110] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmOYDhDA-Xtn2nRScMbQAAANg"]
[Sat Apr 11 14:12:09.413551 2026] [:error] [pid 2188:tid 2279] [client 157.15.40.61:50142] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmOYDhDA-Xtn2nRScMcwAAANc"]
[Sat Apr 11 14:12:12.610434 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:50523] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "adnmPMW3w7N67R04YCKXgAAAAE8"]
[Sat Apr 11 14:12:13.246263 2026] [:error] [pid 11067:tid 11073] [client 157.15.40.61:50822] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "adnmPcW3w7N67R04YCKXhwAAAEQ"]
[Sat Apr 11 14:12:14.020542 2026] [:error] [pid 2188:tid 2267] [client 157.15.40.61:50949] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-editor.php"] [unique_id "adnmPoDhDA-Xtn2nRScMlwAAAMs"]
[Sun Apr 12 05:55:10.934804 2026] [:error] [pid 26567:tid 26591] [client 62.197.152.86:60484] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "adrDPnhRpg6ptWFyFx0CqgAAARY"]
[Sun Apr 12 05:55:11.547500 2026] [:error] [pid 26600:tid 26637] [client 62.197.152.86:52228] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "adrDP-1YwAZiXhQKLYp9nAAAAYg"]
[Sun Apr 12 05:55:12.154809 2026] [:error] [pid 25437:tid 25459] [client 62.197.152.86:52238] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "adrDQHf97wYZje1ep_NXUAAAANQ"]
[Sun Apr 12 05:55:12.763996 2026] [:error] [pid 60280:tid 60300] [client 62.197.152.86:52268] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "adrDQHBlLnDOYuIykkjtegAAAdI"]
[Sun Apr 12 05:55:13.374078 2026] [:error] [pid 25329:tid 25390] [client 62.197.152.86:52304] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "adrDQWdcIYsS8Iyaj101jwAAAIg"]
[Sun Apr 12 05:55:13.982776 2026] [:error] [pid 60280:tid 60294] [client 62.197.152.86:52324] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/"] [unique_id "adrDQXBlLnDOYuIykkjtiAAAAcw"]
[Sun Apr 12 05:55:14.591741 2026] [:error] [pid 60280:tid 60287] [client 62.197.152.86:52344] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/"] [unique_id "adrDQnBlLnDOYuIykkjtjAAAAcU"]
[Sun Apr 12 05:55:15.203246 2026] [:error] [pid 25437:tid 25443] [client 62.197.152.86:52350] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/"] [unique_id "adrDQ3f97wYZje1ep_NXUwAAAMQ"]
[Sun Apr 12 05:55:15.814171 2026] [:error] [pid 25328:tid 25373] [client 62.197.152.86:52382] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/"] [unique_id "adrDQ8xUaQZxT-e0YsDpKwAAAEg"]
[Sun Apr 12 05:55:16.426633 2026] [:error] [pid 60280:tid 60294] [client 62.197.152.86:52406] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/"] [unique_id "adrDRHBlLnDOYuIykkjtlAAAAcw"]
[Sun Apr 12 05:55:37.584405 2026] [proxy_fcgi:error] [pid 25327:tid 25347] [client 20.220.11.224:47062] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 05:55:55.411208 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:47092] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file/chosen.php"] [unique_id "adrDa3BlLnDOYuIykkjt3QAAAc4"]
[Sun Apr 12 05:55:58.141228 2026] [:error] [pid 25327:tid 25357] [client 20.220.11.224:47083] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file/chosen.php"] [unique_id "adrDbi6h2tZEVJo9JFJEywAAABU"]
[Sun Apr 12 05:56:03.748709 2026] [:error] [pid 26567:tid 26573] [client 20.220.11.224:47099] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file/chosen.php"] [unique_id "adrDc3hRpg6ptWFyFx0C8gAAAQQ"]
[Sun Apr 12 05:56:09.673613 2026] [:error] [pid 60280:tid 60302] [client 20.220.11.224:47097] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen/chosen.php"] [unique_id "adrDeXBlLnDOYuIykkjt-AAAAdQ"]
[Sun Apr 12 05:56:13.074201 2026] [:error] [pid 26567:tid 26587] [client 20.220.11.224:47022] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen/chosen.php"] [unique_id "adrDfXhRpg6ptWFyFx0DAwAAARI"]
[Sun Apr 12 05:56:22.308969 2026] [:error] [pid 26599:tid 26602] [client 20.220.11.224:46983] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen/chosen.php"] [unique_id "adrDhnG89LXoQbk_rwBEKQAAAUA"]
[Sun Apr 12 05:56:30.521804 2026] [:error] [pid 60280:tid 60295] [client 20.220.11.224:47042] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/chosen.php"] [unique_id "adrDjnBlLnDOYuIykkjuDwAAAc0"]
[Sun Apr 12 05:56:33.563733 2026] [:error] [pid 25327:tid 25355] [client 20.220.11.224:47075] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/chosen.php"] [unique_id "adrDkS6h2tZEVJo9JFJE4QAAABM"]
[Sun Apr 12 05:56:39.113309 2026] [:error] [pid 25437:tid 25439] [client 20.220.11.224:47087] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/chosen.php"] [unique_id "adrDl3f97wYZje1ep_NXoQAAAMA"]
[Sun Apr 12 05:56:40.950972 2026] [:error] [pid 25329:tid 25415] [client 20.220.11.224:47090] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/chosen.php"] [unique_id "adrDmGdcIYsS8Iyaj1014QAAAJg"]
[Sun Apr 12 05:56:43.865840 2026] [:error] [pid 26599:tid 26621] [client 20.220.11.224:46995] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "adrDm3G89LXoQbk_rwBEOQAAAVM"]
[Sun Apr 12 05:56:47.674918 2026] [:error] [pid 26600:tid 26634] [client 20.220.11.224:47081] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "adrDn-1YwAZiXhQKLYp94AAAAYU"]
[Sun Apr 12 05:56:57.588734 2026] [:error] [pid 25328:tid 25379] [client 20.220.11.224:47103] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "adrDqcxUaQZxT-e0YsDpyQAAAEs"]
[Sun Apr 12 05:57:00.731021 2026] [:error] [pid 26599:tid 26607] [client 20.220.11.224:47085] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "adrDrHG89LXoQbk_rwBERgAAAUU"]
[Sun Apr 12 05:57:07.986982 2026] [:error] [pid 60280:tid 60286] [client 20.220.11.224:47082] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "adrDs3BlLnDOYuIykkjuUgAAAcQ"]
[Sun Apr 12 05:57:20.806032 2026] [:error] [pid 60280:tid 60298] [client 20.220.11.224:47044] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "adrDwHBlLnDOYuIykkjubQAAAdA"]
[Sun Apr 12 05:57:23.591399 2026] [:error] [pid 26599:tid 26606] [client 20.220.11.224:47065] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "adrDw3G89LXoQbk_rwBEVgAAAUQ"]
[Sun Apr 12 05:57:26.845593 2026] [:error] [pid 25329:tid 25415] [client 20.220.11.224:47101] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "adrDxmdcIYsS8Iyaj102DwAAAJg"]
[Sun Apr 12 05:57:29.599368 2026] [:error] [pid 26599:tid 26613] [client 20.220.11.224:47060] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "adrDyXG89LXoQbk_rwBEWQAAAUs"]
[Sun Apr 12 05:57:32.642375 2026] [:error] [pid 60280:tid 60306] [client 20.220.11.224:46978] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "adrDzHBlLnDOYuIykkjuhQAAAdg"]
[Sun Apr 12 05:57:34.081032 2026] [:error] [pid 25329:tid 25376] [client 20.220.11.224:47086] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "adrDzmdcIYsS8Iyaj102HAAAAIE"]
[Sun Apr 12 05:57:38.089292 2026] [:error] [pid 26600:tid 26644] [client 20.220.11.224:47045] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "adrD0u1YwAZiXhQKLYp99gAAAY8"]
[Sun Apr 12 05:57:56.216344 2026] [:error] [pid 25437:tid 25449] [client 20.220.11.224:46985] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "adrD5Hf97wYZje1ep_NX0wAAAMo"]
[Sun Apr 12 05:58:13.103115 2026] [:error] [pid 26599:tid 26612] [client 20.220.11.224:47051] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "adrD9XG89LXoQbk_rwBEcAAAAUo"]
[Sun Apr 12 05:58:15.220915 2026] [:error] [pid 26600:tid 26630] [client 20.220.11.224:47072] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "adrD9-1YwAZiXhQKLYp-AQAAAYE"]
[Sun Apr 12 05:58:17.722630 2026] [:error] [pid 25437:tid 25453] [client 20.220.11.224:47095] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "adrD-Xf97wYZje1ep_NX-AAAAM4"]
[Sun Apr 12 05:58:19.361087 2026] [:error] [pid 25329:tid 25392] [client 20.220.11.224:46985] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "adrD-2dcIYsS8Iyaj102RwAAAIk"]
[Sun Apr 12 05:58:21.217923 2026] [:error] [pid 25328:tid 25364] [client 20.220.11.224:47053] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adrD_cxUaQZxT-e0YsDqMgAAAEA"]
[Sun Apr 12 05:58:24.498777 2026] [:error] [pid 25329:tid 25412] [client 20.220.11.224:46989] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adrEAGdcIYsS8Iyaj102TgAAAJU"]
[Sun Apr 12 05:58:25.810134 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:47096] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adrEAXBlLnDOYuIykkjvDAAAAc4"]
[Sun Apr 12 05:58:26.987087 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:47076] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adrEAsxUaQZxT-e0YsDqOAAAAEM"]
[Sun Apr 12 05:58:28.819048 2026] [:error] [pid 25329:tid 25386] [client 20.220.11.224:47029] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adrEBGdcIYsS8Iyaj102VgAAAIY"]
[Sun Apr 12 05:58:31.334724 2026] [:error] [pid 25329:tid 25397] [client 20.220.11.224:47058] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adrEB2dcIYsS8Iyaj102XAAAAIw"]
[Sun Apr 12 05:58:37.437809 2026] [:error] [pid 25328:tid 25370] [client 20.220.11.224:47068] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php/wp-includes/admin.php"] [unique_id "adrEDcxUaQZxT-e0YsDqQgAAAEY"]
[Sun Apr 12 05:58:57.372381 2026] [:error] [pid 25328:tid 25396] [client 20.220.11.224:46990] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "adrEIcxUaQZxT-e0YsDqZQAAAFM"]
[Sun Apr 12 05:59:04.217686 2026] [:error] [pid 25328:tid 25366] [client 20.220.11.224:47056] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config-backup.php"] [unique_id "adrEKMxUaQZxT-e0YsDqdQAAAEI"]
[Sun Apr 12 05:59:06.808150 2026] [:error] [pid 60280:tid 60290] [client 20.220.11.224:46981] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config-backup.php"] [unique_id "adrEKnBlLnDOYuIykkjvwQAAAcg"]
[Sun Apr 12 05:59:18.213848 2026] [:error] [pid 25329:tid 25397] [client 20.220.11.224:47049] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adrENmdcIYsS8Iyaj102iQAAAIw"]
[Sun Apr 12 05:59:23.125409 2026] [:error] [pid 25329:tid 25388] [client 20.220.11.224:47067] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adrEO2dcIYsS8Iyaj102jgAAAIc"]
[Sun Apr 12 05:59:25.737803 2026] [:error] [pid 25328:tid 25398] [client 20.220.11.224:47040] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adrEPcxUaQZxT-e0YsDqqAAAAFQ"]
[Sun Apr 12 05:59:28.459939 2026] [:error] [pid 25329:tid 25392] [client 20.220.11.224:46948] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adrEQGdcIYsS8Iyaj102wwAAAIk"]
[Sun Apr 12 05:59:30.406735 2026] [:error] [pid 26567:tid 26583] [client 20.220.11.224:47079] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "adrEQnhRpg6ptWFyFx0DjQAAAQ4"]
[Sun Apr 12 05:59:31.741764 2026] [:error] [pid 60280:tid 60293] [client 20.220.11.224:47093] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "adrEQ3BlLnDOYuIykkjwJwAAAcs"]
[Sun Apr 12 05:59:33.299949 2026] [:error] [pid 25437:tid 25443] [client 20.220.11.224:46939] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "adrERXf97wYZje1ep_NYxAAAAMQ"]
[Sun Apr 12 05:59:34.720817 2026] [:error] [pid 26567:tid 26577] [client 20.220.11.224:47014] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "adrERnhRpg6ptWFyFx0DkQAAAQg"]
[Sun Apr 12 05:59:35.659745 2026] [:error] [pid 25437:tid 25461] [client 20.220.11.224:47011] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "adrER3f97wYZje1ep_NYxwAAANY"]
[Sun Apr 12 05:59:36.608544 2026] [:error] [pid 25328:tid 25389] [client 20.220.11.224:47095] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "adrESMxUaQZxT-e0YsDqzQAAAFA"]
[Sun Apr 12 05:59:38.733046 2026] [:error] [pid 25327:tid 25347] [client 20.220.11.224:46977] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "adrESi6h2tZEVJo9JFJFTgAAAAs"]
[Sun Apr 12 05:59:39.879547 2026] [:error] [pid 25328:tid 25366] [client 20.220.11.224:47078] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "adrES8xUaQZxT-e0YsDq2AAAAEI"]
[Sun Apr 12 05:59:41.107702 2026] [:error] [pid 60280:tid 60282] [client 20.220.11.224:46996] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adrETXBlLnDOYuIykkjwMAAAAcA"]
[Sun Apr 12 05:59:42.650194 2026] [:error] [pid 25437:tid 25446] [client 20.220.11.224:46982] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adrETnf97wYZje1ep_NY0gAAAMc"]
[Sun Apr 12 05:59:43.774536 2026] [:error] [pid 26567:tid 26580] [client 20.220.11.224:47018] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adrET3hRpg6ptWFyFx0DnQAAAQs"]
[Sun Apr 12 05:59:47.104005 2026] [:error] [pid 25328:tid 25377] [client 20.220.11.224:46992] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adrEU8xUaQZxT-e0YsDq4QAAAEo"]
[Sun Apr 12 06:00:01.679588 2026] [:error] [pid 25329:tid 25399] [client 20.220.11.224:47035] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "adrEYWdcIYsS8Iyaj1022QAAAI0"]
[Sun Apr 12 06:00:05.398913 2026] [:error] [pid 26599:tid 26615] [client 20.220.11.224:47092] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "adrEZXG89LXoQbk_rwBFGwAAAU0"]
[Sun Apr 12 06:00:08.849927 2026] [:error] [pid 26567:tid 26574] [client 20.220.11.224:46935] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/default.php"] [unique_id "adrEaHhRpg6ptWFyFx0D8gAAAQU"]
[Sun Apr 12 06:00:44.520220 2026] [proxy_fcgi:error] [pid 25328:tid 25377] [client 20.220.11.224:47062] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:00:55.327966 2026] [proxy_fcgi:error] [pid 25328:tid 25373] [client 20.220.11.224:47070] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Undefined constant "ABSPATH" in /home/makifimc/public_html/wp-settings.php:34\nStack trace:\n#0 {main}\n  thrown in /home/makifimc/public_html/wp-settings.php on line 34'
[Sun Apr 12 06:01:18.369559 2026] [:error] [pid 25329:tid 25402] [client 20.220.11.224:46937] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lf.php"] [unique_id "adrErmdcIYsS8Iyaj102_QAAAI8"]
[Sun Apr 12 06:01:24.534786 2026] [:error] [pid 25437:tid 25451] [client 20.220.11.224:47069] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/WSO.php"] [unique_id "adrEtHf97wYZje1ep_NZeAAAAMw"]
[Sun Apr 12 06:01:28.842116 2026] [:error] [pid 26600:tid 26639] [client 20.220.11.224:46995] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/WSO.php"] [unique_id "adrEuO1YwAZiXhQKLYp-cgAAAYo"]
[Sun Apr 12 06:01:30.773282 2026] [:error] [pid 25327:tid 25352] [client 20.220.11.224:46980] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/WSO.php"] [unique_id "adrEui6h2tZEVJo9JFJFdgAAABA"]
[Sun Apr 12 06:01:37.134163 2026] [:error] [pid 25437:tid 25456] [client 20.220.11.224:47024] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/WSO.php"] [unique_id "adrEwXf97wYZje1ep_NZjgAAANE"]
[Sun Apr 12 06:01:41.530155 2026] [:error] [pid 25328:tid 25389] [client 20.220.11.224:47099] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adrExcxUaQZxT-e0YsDsSwAAAFA"]
[Sun Apr 12 06:01:45.319399 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:46921] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adrEycxUaQZxT-e0YsDsVwAAAEM"]
[Sun Apr 12 06:01:50.511210 2026] [:error] [pid 25328:tid 25372] [client 20.220.11.224:47060] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adrEzsxUaQZxT-e0YsDsXQAAAEc"]
[Sun Apr 12 06:01:56.197036 2026] [:error] [pid 25437:tid 25456] [client 20.220.11.224:46978] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "adrE1Hf97wYZje1ep_NZqgAAANE"]
[Sun Apr 12 06:02:00.706209 2026] [:error] [pid 25437:tid 25454] [client 20.220.11.224:46946] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "adrE2Hf97wYZje1ep_NZswAAAM8"]
[Sun Apr 12 06:02:01.704924 2026] [:error] [pid 25437:tid 25444] [client 20.220.11.224:47010] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "adrE2Xf97wYZje1ep_NZtwAAAMU"]
[Sun Apr 12 06:02:39.759194 2026] [proxy_fcgi:error] [pid 25327:tid 25355] [client 20.220.11.224:47053] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:03:06.701910 2026] [proxy_fcgi:error] [pid 25437:tid 25447] [client 20.220.11.224:47103] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:03:52.091616 2026] [proxy_fcgi:error] [pid 25329:tid 25388] [client 20.220.11.224:47068] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:04:06.085408 2026] [:error] [pid 60280:tid 60290] [client 20.220.11.224:47049] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ad.php"] [unique_id "adrFVnBlLnDOYuIykkjxXwAAAcg"]
[Sun Apr 12 06:04:08.513477 2026] [:error] [pid 25328:tid 25373] [client 20.220.11.224:47071] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ad.php"] [unique_id "adrFWMxUaQZxT-e0YsDtZQAAAEg"]
[Sun Apr 12 06:04:12.240951 2026] [:error] [pid 25328:tid 25398] [client 20.220.11.224:47094] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ad.php"] [unique_id "adrFXMxUaQZxT-e0YsDtagAAAFQ"]
[Sun Apr 12 06:04:15.414669 2026] [:error] [pid 25327:tid 25342] [client 20.220.11.224:47079] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ad.php"] [unique_id "adrFXy6h2tZEVJo9JFJGHgAAAAY"]
[Sun Apr 12 06:04:16.475814 2026] [:error] [pid 26600:tid 26638] [client 20.220.11.224:47001] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/send.php"] [unique_id "adrFYO1YwAZiXhQKLYp-zwAAAYk"]
[Sun Apr 12 06:04:18.428502 2026] [:error] [pid 26600:tid 26633] [client 20.220.11.224:47062] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/send.php"] [unique_id "adrFYu1YwAZiXhQKLYp-2gAAAYQ"]
[Sun Apr 12 06:04:20.676491 2026] [:error] [pid 60280:tid 60298] [client 20.220.11.224:46925] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/send.php"] [unique_id "adrFZHBlLnDOYuIykkjxcAAAAdA"]
[Sun Apr 12 06:04:22.017998 2026] [:error] [pid 25328:tid 25369] [client 20.220.11.224:47075] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/send.php"] [unique_id "adrFZsxUaQZxT-e0YsDtewAAAEU"]
[Sun Apr 12 06:04:23.098371 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:47018] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "adrFZ8xUaQZxT-e0YsDtfwAAAFE"]
[Sun Apr 12 06:04:25.603558 2026] [:error] [pid 25327:tid 25339] [client 20.220.11.224:47066] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "adrFaS6h2tZEVJo9JFJGIgAAAAM"]
[Sun Apr 12 06:04:27.938456 2026] [:error] [pid 26600:tid 26631] [client 20.220.11.224:46993] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "adrFa-1YwAZiXhQKLYp-6wAAAYI"]
[Sun Apr 12 06:04:29.546530 2026] [:error] [pid 26600:tid 26634] [client 20.220.11.224:46990] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "adrFbe1YwAZiXhQKLYp-7gAAAYU"]
[Sun Apr 12 06:04:31.353878 2026] [:error] [pid 26599:tid 26605] [client 20.220.11.224:46933] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.wp-cache.php"] [unique_id "adrFb3G89LXoQbk_rwBFvAAAAUM"]
[Sun Apr 12 06:04:35.060748 2026] [:error] [pid 60280:tid 60298] [client 20.220.11.224:46992] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.wp-cache.php"] [unique_id "adrFc3BlLnDOYuIykkjxfgAAAdA"]
[Sun Apr 12 06:04:36.665584 2026] [:error] [pid 25328:tid 25366] [client 20.220.11.224:47082] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.wp-cache.php"] [unique_id "adrFdMxUaQZxT-e0YsDtngAAAEI"]
[Sun Apr 12 06:04:39.287969 2026] [:error] [pid 26567:tid 26574] [client 20.220.11.224:47093] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.wp-cache.php"] [unique_id "adrFd3hRpg6ptWFyFx0F5QAAAQU"]
[Sun Apr 12 06:04:45.172525 2026] [:error] [pid 25329:tid 25390] [client 20.220.11.224:47087] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sendmail.php"] [unique_id "adrFfWdcIYsS8Iyaj103bAAAAIg"]
[Sun Apr 12 06:04:50.786111 2026] [:error] [pid 25327:tid 25343] [client 20.220.11.224:47090] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sendmail.php"] [unique_id "adrFgi6h2tZEVJo9JFJGSgAAAAc"]
[Sun Apr 12 06:04:53.480698 2026] [:error] [pid 60280:tid 60283] [client 20.220.11.224:47027] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sendmail.php"] [unique_id "adrFhXBlLnDOYuIykkjxkgAAAcE"]
[Sun Apr 12 06:04:56.912973 2026] [:error] [pid 25437:tid 25459] [client 20.220.11.224:47064] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rahma.php"] [unique_id "adrFiHf97wYZje1ep_NacAAAANQ"]
[Sun Apr 12 06:06:24.187602 2026] [proxy_fcgi:error] [pid 25437:tid 25449] [client 20.220.11.224:47092] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:06:49.870650 2026] [proxy_fcgi:error] [pid 26600:tid 26651] [client 20.220.11.224:46980] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:07:04.494134 2026] [:error] [pid 25329:tid 25386] [client 20.220.11.224:47059] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adrGCGdcIYsS8Iyaj103mgAAAIY"]
[Sun Apr 12 06:07:06.806102 2026] [:error] [pid 25329:tid 25404] [client 20.220.11.224:46976] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adrGCmdcIYsS8Iyaj103nQAAAJA"]
[Sun Apr 12 06:07:42.060773 2026] [proxy_fcgi:error] [pid 25437:tid 25445] [client 20.220.11.224:47007] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:07:58.988378 2026] [proxy_fcgi:error] [pid 25328:tid 25377] [client 20.220.11.224:47097] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:08:06.084947 2026] [:error] [pid 26567:tid 26578] [client 20.220.11.224:46943] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-uploads.php"] [unique_id "adrGRnhRpg6ptWFyFx0HSQAAAQk"]
[Sun Apr 12 06:08:08.381783 2026] [:error] [pid 26599:tid 26605] [client 20.220.11.224:47099] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-uploads.php"] [unique_id "adrGSHG89LXoQbk_rwBGTwAAAUM"]
[Sun Apr 12 06:08:10.593824 2026] [:error] [pid 26567:tid 26573] [client 20.220.11.224:47045] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-uploads.php"] [unique_id "adrGSnhRpg6ptWFyFx0HXwAAAQQ"]
[Sun Apr 12 06:08:12.421002 2026] [:error] [pid 25329:tid 25381] [client 20.220.11.224:46920] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-uploads.php"] [unique_id "adrGTGdcIYsS8Iyaj103-AAAAIM"]
[Sun Apr 12 06:08:14.376458 2026] [:error] [pid 60280:tid 60292] [client 20.220.11.224:46999] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Gel.php"] [unique_id "adrGTnBlLnDOYuIykkjylgAAAco"]
[Sun Apr 12 06:08:17.031425 2026] [:error] [pid 25328:tid 25375] [client 20.220.11.224:47012] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Gel.php"] [unique_id "adrGUcxUaQZxT-e0YsDvyQAAAEk"]
[Sun Apr 12 06:08:19.961503 2026] [:error] [pid 26600:tid 26636] [client 20.220.11.224:46987] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Gel.php"] [unique_id "adrGU-1YwAZiXhQKLYp_SgAAAYc"]
[Sun Apr 12 06:08:21.938917 2026] [:error] [pid 26600:tid 26646] [client 20.220.11.224:47003] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Gel.php"] [unique_id "adrGVe1YwAZiXhQKLYp_SwAAAZE"]
[Sun Apr 12 06:08:24.529176 2026] [:error] [pid 60280:tid 60289] [client 20.220.11.224:46989] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "adrGWHBlLnDOYuIykkjysQAAAcc"]
[Sun Apr 12 06:08:25.935865 2026] [:error] [pid 25329:tid 25384] [client 20.220.11.224:46935] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "adrGWWdcIYsS8Iyaj104CQAAAIU"]
[Sun Apr 12 06:08:31.163568 2026] [:error] [pid 25329:tid 25381] [client 20.220.11.224:47054] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "adrGX2dcIYsS8Iyaj104EwAAAIM"]
[Sun Apr 12 06:08:40.421644 2026] [:error] [pid 25329:tid 25386] [client 20.220.11.224:47080] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4price.php"] [unique_id "adrGaGdcIYsS8Iyaj104HAAAAIY"]
[Sun Apr 12 06:08:43.971010 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:47084] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4price.php"] [unique_id "adrGa3BlLnDOYuIykkjyxQAAAdY"]
[Sun Apr 12 06:08:45.536880 2026] [:error] [pid 60280:tid 60291] [client 20.220.11.224:47081] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4price.php"] [unique_id "adrGbXBlLnDOYuIykkjyygAAAck"]
[Sun Apr 12 06:08:47.128531 2026] [:error] [pid 26567:tid 26580] [client 20.220.11.224:47074] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4price.php"] [unique_id "adrGb3hRpg6ptWFyFx0HdAAAAQs"]
[Sun Apr 12 06:08:48.624999 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:47067] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MARIJUANA.php"] [unique_id "adrGcMxUaQZxT-e0YsDv6AAAAFE"]
[Sun Apr 12 06:08:50.274683 2026] [:error] [pid 60280:tid 60302] [client 20.220.11.224:46922] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MARIJUANA.php"] [unique_id "adrGcnBlLnDOYuIykkjy0wAAAdQ"]
[Sun Apr 12 06:08:53.090551 2026] [:error] [pid 25328:tid 25408] [client 20.220.11.224:47096] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MARIJUANA.php"] [unique_id "adrGdcxUaQZxT-e0YsDv6QAAAFg"]
[Sun Apr 12 06:08:55.515329 2026] [:error] [pid 60280:tid 60285] [client 20.220.11.224:47071] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/MARIJUANA.php"] [unique_id "adrGd3BlLnDOYuIykkjy2QAAAcM"]
[Sun Apr 12 06:08:57.673866 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:46919] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.fk.php"] [unique_id "adrGecxUaQZxT-e0YsDv7AAAAEM"]
[Sun Apr 12 06:09:39.142585 2026] [proxy_fcgi:error] [pid 60280:tid 60300] [client 20.220.11.224:47093] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:09:39.625671 2026] [proxy_fcgi:error] [pid 60280:tid 60296] [client 20.220.11.224:46948] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 06:09:41.478211 2026] [proxy_fcgi:error] [pid 60280:tid 60302] [client 20.220.11.224:46948] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 06:10:07.166673 2026] [proxy_fcgi:error] [pid 60280:tid 60294] [client 20.220.11.224:47080] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:10:29.974365 2026] [:error] [pid 26567:tid 26585] [client 20.220.11.224:47094] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso2.php"] [unique_id "adrG1XhRpg6ptWFyFx0HpAAAARA"]
[Sun Apr 12 06:10:31.891261 2026] [:error] [pid 25327:tid 25356] [client 20.220.11.224:47010] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso2.php"] [unique_id "adrG1y6h2tZEVJo9JFJGyAAAABQ"]
[Sun Apr 12 06:10:33.545083 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:47076] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso2.php"] [unique_id "adrG2XBlLnDOYuIykkjztwAAAc4"]
[Sun Apr 12 06:10:35.631175 2026] [:error] [pid 26567:tid 26589] [client 20.220.11.224:47052] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso2.php"] [unique_id "adrG23hRpg6ptWFyFx0HqQAAARQ"]
[Sun Apr 12 06:10:38.740923 2026] [:error] [pid 60280:tid 60306] [client 20.220.11.224:47015] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso1.php"] [unique_id "adrG3nBlLnDOYuIykkjzyAAAAdg"]
[Sun Apr 12 06:10:41.290474 2026] [:error] [pid 25328:tid 25396] [client 20.220.11.224:47086] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso1.php"] [unique_id "adrG4cxUaQZxT-e0YsDwmwAAAFM"]
[Sun Apr 12 06:10:45.533677 2026] [:error] [pid 60280:tid 60287] [client 20.220.11.224:47061] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso1.php"] [unique_id "adrG5XBlLnDOYuIykkjz1gAAAcU"]
[Sun Apr 12 06:10:48.875979 2026] [:error] [pid 25329:tid 25413] [client 20.220.11.224:46982] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wso1.php"] [unique_id "adrG6GdcIYsS8Iyaj104ogAAAJY"]
[Sun Apr 12 06:10:53.029517 2026] [:error] [pid 25437:tid 25463] [client 20.220.11.224:47089] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/olux.php"] [unique_id "adrG7Xf97wYZje1ep_NcNwAAANg"]
[Sun Apr 12 06:11:03.846987 2026] [:error] [pid 60280:tid 60288] [client 20.220.11.224:46983] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/olux.php"] [unique_id "adrG93BlLnDOYuIykkjz_wAAAcY"]
[Sun Apr 12 06:11:05.887323 2026] [:error] [pid 25437:tid 25456] [client 20.220.11.224:46984] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "adrG-Xf97wYZje1ep_NcPAAAANE"]
[Sun Apr 12 06:11:09.067438 2026] [:error] [pid 25328:tid 25366] [client 20.220.11.224:47070] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "adrG_cxUaQZxT-e0YsDwsQAAAEI"]
[Sun Apr 12 06:11:10.730365 2026] [:error] [pid 60280:tid 60297] [client 20.220.11.224:47058] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "adrG_nBlLnDOYuIykkj0CQAAAc8"]
[Sun Apr 12 06:11:12.562551 2026] [:error] [pid 26599:tid 26616] [client 20.220.11.224:46994] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-info.php"] [unique_id "adrHAHG89LXoQbk_rwBGkgAAAU4"]
[Sun Apr 12 06:11:13.430627 2026] [:error] [pid 25328:tid 25389] [client 20.220.11.224:46986] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xl.php"] [unique_id "adrHAcxUaQZxT-e0YsDwvAAAAFA"]
[Sun Apr 12 06:11:15.231405 2026] [:error] [pid 60280:tid 60290] [client 20.220.11.224:47018] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xl.php"] [unique_id "adrHA3BlLnDOYuIykkj0GAAAAcg"]
[Sun Apr 12 06:11:17.086494 2026] [:error] [pid 25328:tid 25398] [client 20.220.11.224:47077] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xl.php"] [unique_id "adrHBcxUaQZxT-e0YsDwvwAAAFQ"]
[Sun Apr 12 06:11:18.867351 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:47097] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xl.php"] [unique_id "adrHBnBlLnDOYuIykkj0IgAAAc4"]
[Sun Apr 12 06:11:50.312479 2026] [proxy_fcgi:error] [pid 60280:tid 60282] [client 20.220.11.224:46984] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:12:45.359039 2026] [:error] [pid 60280:tid 60293] [client 20.220.11.224:47040] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHXXBlLnDOYuIykkj1AgAAAcs"]
[Sun Apr 12 06:12:48.575717 2026] [:error] [pid 25437:tid 25443] [client 20.220.11.224:46985] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHYHf97wYZje1ep_NcjAAAAMQ"]
[Sun Apr 12 06:12:51.361870 2026] [:error] [pid 26599:tid 26619] [client 20.220.11.224:47087] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHY3G89LXoQbk_rwBG0gAAAVE"]
[Sun Apr 12 06:12:52.181492 2026] [:error] [pid 60280:tid 60298] [client 20.220.11.224:46995] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHZHBlLnDOYuIykkj1HgAAAdA"]
[Sun Apr 12 06:12:53.251991 2026] [:error] [pid 60280:tid 60287] [client 20.220.11.224:47000] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrHZXBlLnDOYuIykkj1IgAAAcU"]
[Sun Apr 12 06:12:54.687819 2026] [:error] [pid 25329:tid 25374] [client 20.220.11.224:47093] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrHZmdcIYsS8Iyaj105WgAAAIA"]
[Sun Apr 12 06:12:55.319128 2026] [:error] [pid 26567:tid 26585] [client 20.220.11.224:46978] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrHZ3hRpg6ptWFyFx0INQAAARA"]
[Sun Apr 12 06:12:56.125605 2026] [:error] [pid 60280:tid 60287] [client 20.220.11.224:47088] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrHaHBlLnDOYuIykkj1MAAAAcU"]
[Sun Apr 12 06:12:57.479728 2026] [:error] [pid 60280:tid 60297] [client 20.220.11.224:47065] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adrHaXBlLnDOYuIykkj1OAAAAc8"]
[Sun Apr 12 06:13:01.147536 2026] [:error] [pid 26567:tid 26575] [client 20.220.11.224:47063] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adrHbXhRpg6ptWFyFx0IPgAAAQY"]
[Sun Apr 12 06:13:18.293887 2026] [:error] [pid 25329:tid 25415] [client 20.220.11.224:47021] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adrHfmdcIYsS8Iyaj105cAAAAJg"]
[Sun Apr 12 06:13:19.459684 2026] [:error] [pid 60280:tid 60282] [client 20.220.11.224:47066] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adrHf3BlLnDOYuIykkj1hgAAAcA"]
[Sun Apr 12 06:13:23.496971 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:46992] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adrHg3BlLnDOYuIykkj1mAAAAdY"]
[Sun Apr 12 06:13:29.804784 2026] [:error] [pid 25437:tid 25457] [client 20.220.11.224:47073] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adrHiXf97wYZje1ep_NcogAAANI"]
[Sun Apr 12 06:13:30.768446 2026] [:error] [pid 60280:tid 60297] [client 20.220.11.224:47090] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adrHinBlLnDOYuIykkj1pAAAAc8"]
[Sun Apr 12 06:13:34.561073 2026] [:error] [pid 26567:tid 26584] [client 20.220.11.224:47055] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adrHjnhRpg6ptWFyFx0IWgAAAQ8"]
[Sun Apr 12 06:13:37.323971 2026] [:error] [pid 25329:tid 25413] [client 20.220.11.224:46979] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adrHkWdcIYsS8Iyaj105hAAAAJY"]
[Sun Apr 12 06:13:40.548987 2026] [:error] [pid 26567:tid 26577] [client 20.220.11.224:47060] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adrHlHhRpg6ptWFyFx0IXAAAAQg"]
[Sun Apr 12 06:13:59.974864 2026] [:error] [pid 25437:tid 25453] [client 20.220.11.224:47091] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHp3f97wYZje1ep_NcrQAAAM4"]
[Sun Apr 12 06:14:03.278843 2026] [:error] [pid 60280:tid 60303] [client 20.220.11.224:47046] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHq3BlLnDOYuIykkj10AAAAdU"]
[Sun Apr 12 06:14:05.694652 2026] [:error] [pid 26599:tid 26606] [client 20.220.11.224:47056] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHrXG89LXoQbk_rwBG6AAAAUQ"]
[Sun Apr 12 06:14:07.548510 2026] [:error] [pid 26599:tid 26615] [client 20.220.11.224:47067] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHr3G89LXoQbk_rwBG6QAAAU0"]
[Sun Apr 12 06:14:08.698273 2026] [:error] [pid 26600:tid 26647] [client 20.220.11.224:47003] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHsO1YwAZiXhQKLYqABAAAAZI"]
[Sun Apr 12 06:14:09.707889 2026] [:error] [pid 25437:tid 25463] [client 20.220.11.224:47037] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHsXf97wYZje1ep_NcsgAAANg"]
[Sun Apr 12 06:14:10.671956 2026] [:error] [pid 25329:tid 25397] [client 20.220.11.224:47081] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHsmdcIYsS8Iyaj105qgAAAIw"]
[Sun Apr 12 06:14:12.884512 2026] [:error] [pid 60280:tid 60302] [client 20.220.11.224:47101] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHtHBlLnDOYuIykkj11QAAAdQ"]
[Sun Apr 12 06:14:23.871106 2026] [:error] [pid 25327:tid 25352] [client 20.220.11.224:47057] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrHvy6h2tZEVJo9JFJHNgAAABA"]
[Sun Apr 12 06:14:27.519826 2026] [:error] [pid 25327:tid 25350] [client 20.220.11.224:46915] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adrHwy6h2tZEVJo9JFJHNwAAAA4"]
[Sun Apr 12 06:14:31.926478 2026] [:error] [pid 25328:tid 25408] [client 20.220.11.224:46987] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adrHx8xUaQZxT-e0YsDxUQAAAFg"]
[Sun Apr 12 06:14:36.835790 2026] [:error] [pid 26599:tid 26625] [client 20.220.11.224:46918] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adrHzHG89LXoQbk_rwBHAAAAAVc"]
[Sun Apr 12 06:14:45.345519 2026] [:error] [pid 25328:tid 25365] [client 20.220.11.224:46991] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrH1cxUaQZxT-e0YsDxbQAAAEE"]
[Sun Apr 12 06:14:47.641556 2026] [:error] [pid 25329:tid 25392] [client 20.220.11.224:47080] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrH12dcIYsS8Iyaj106BQAAAIk"]
[Sun Apr 12 06:14:50.162419 2026] [:error] [pid 25437:tid 25442] [client 20.220.11.224:47057] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrH2nf97wYZje1ep_NdCwAAAMM"]
[Sun Apr 12 06:14:52.280535 2026] [:error] [pid 60280:tid 60290] [client 20.220.11.224:47048] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrH3HBlLnDOYuIykkj2PQAAAcg"]
[Sun Apr 12 06:14:53.938597 2026] [:error] [pid 25328:tid 25408] [client 20.220.11.224:46926] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrH3cxUaQZxT-e0YsDxdAAAAFg"]
[Sun Apr 12 06:14:55.080136 2026] [:error] [pid 26600:tid 26644] [client 20.220.11.224:47041] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrH3-1YwAZiXhQKLYqAGwAAAY8"]
[Sun Apr 12 06:14:56.566449 2026] [:error] [pid 26567:tid 26571] [client 20.220.11.224:47062] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrH4HhRpg6ptWFyFx0IiwAAAQI"]
[Sun Apr 12 06:14:58.033917 2026] [:error] [pid 60280:tid 60306] [client 20.220.11.224:47094] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrH4nBlLnDOYuIykkj2TQAAAdg"]
[Sun Apr 12 06:15:00.052926 2026] [:error] [pid 25327:tid 25353] [client 20.220.11.224:46981] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/date.php"] [unique_id "adrH5C6h2tZEVJo9JFJHTwAAABE"]
[Sun Apr 12 06:15:02.079173 2026] [:error] [pid 25329:tid 25397] [client 20.220.11.224:46989] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/date.php"] [unique_id "adrH5mdcIYsS8Iyaj106OQAAAIw"]
[Sun Apr 12 06:15:04.492710 2026] [:error] [pid 25328:tid 25370] [client 20.220.11.224:47008] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/date.php"] [unique_id "adrH6MxUaQZxT-e0YsDxhAAAAEY"]
[Sun Apr 12 06:15:05.941922 2026] [:error] [pid 25327:tid 25352] [client 20.220.11.224:47022] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/date.php"] [unique_id "adrH6S6h2tZEVJo9JFJHUQAAABA"]
[Sun Apr 12 06:15:09.034894 2026] [:error] [pid 60280:tid 60290] [client 20.220.11.224:47102] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pomo.php"] [unique_id "adrH7XBlLnDOYuIykkj2VwAAAcg"]
[Sun Apr 12 06:15:11.077935 2026] [:error] [pid 60280:tid 60303] [client 20.220.11.224:47103] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pomo.php"] [unique_id "adrH73BlLnDOYuIykkj2WgAAAdU"]
[Sun Apr 12 06:15:14.572389 2026] [:error] [pid 60280:tid 60292] [client 20.220.11.224:47084] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pomo.php"] [unique_id "adrH8nBlLnDOYuIykkj2YAAAAco"]
[Sun Apr 12 06:15:18.098920 2026] [:error] [pid 25329:tid 25386] [client 20.220.11.224:46988] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pomo.php"] [unique_id "adrH9mdcIYsS8Iyaj106ZwAAAIY"]
[Sun Apr 12 06:15:19.524863 2026] [:error] [pid 25437:tid 25463] [client 20.220.11.224:47099] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrH93f97wYZje1ep_NdTwAAANg"]
[Sun Apr 12 06:15:33.309170 2026] [:error] [pid 60280:tid 60287] [client 20.220.11.224:46977] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "adrIBXBlLnDOYuIykkj2ogAAAcU"]
[Sun Apr 12 06:15:40.458602 2026] [:error] [pid 25327:tid 25345] [client 20.220.11.224:47098] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrIDC6h2tZEVJo9JFJHWgAAAAk"]
[Sun Apr 12 06:15:41.489977 2026] [:error] [pid 25329:tid 25406] [client 20.220.11.224:47071] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrIDWdcIYsS8Iyaj106pgAAAJE"]
[Sun Apr 12 06:15:43.900194 2026] [:error] [pid 25329:tid 25388] [client 20.220.11.224:46977] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrID2dcIYsS8Iyaj106qQAAAIc"]
[Sun Apr 12 06:15:45.339498 2026] [:error] [pid 25437:tid 25462] [client 20.220.11.224:47075] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrIEXf97wYZje1ep_NdcQAAANc"]
[Sun Apr 12 06:15:46.137210 2026] [:error] [pid 26599:tid 26621] [client 20.220.11.224:47002] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adrIEnG89LXoQbk_rwBHPgAAAVM"]
[Sun Apr 12 06:15:46.984384 2026] [:error] [pid 26567:tid 26588] [client 20.220.11.224:47083] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adrIEnhRpg6ptWFyFx0IwAAAARM"]
[Sun Apr 12 06:15:48.515590 2026] [:error] [pid 26599:tid 26625] [client 20.220.11.224:47086] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adrIFHG89LXoQbk_rwBHRQAAAVc"]
[Sun Apr 12 06:15:53.969369 2026] [:error] [pid 60280:tid 60290] [client 20.220.11.224:47012] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adrIGXBlLnDOYuIykkj2zwAAAcg"]
[Sun Apr 12 06:15:58.676664 2026] [:error] [pid 26567:tid 26576] [client 20.220.11.224:47015] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adrIHnhRpg6ptWFyFx0I0wAAAQc"]
[Sun Apr 12 06:16:02.698619 2026] [:error] [pid 25329:tid 25388] [client 20.220.11.224:47014] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adrIImdcIYsS8Iyaj106xAAAAIc"]
[Sun Apr 12 06:16:04.595245 2026] [:error] [pid 60280:tid 60299] [client 20.220.11.224:46994] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adrIJHBlLnDOYuIykkj24wAAAdE"]
[Sun Apr 12 06:16:06.572212 2026] [:error] [pid 26567:tid 26571] [client 20.220.11.224:46996] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adrIJnhRpg6ptWFyFx0I5gAAAQI"]
[Sun Apr 12 06:16:08.411301 2026] [:error] [pid 26600:tid 26647] [client 20.220.11.224:46912] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adrIKO1YwAZiXhQKLYqAPQAAAZI"]
[Sun Apr 12 06:16:13.968516 2026] [:error] [pid 26600:tid 26649] [client 20.220.11.224:47079] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adrILe1YwAZiXhQKLYqAPwAAAZQ"]
[Sun Apr 12 06:16:17.191951 2026] [:error] [pid 60280:tid 60295] [client 20.220.11.224:47018] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adrIMXBlLnDOYuIykkj3IAAAAc0"]
[Sun Apr 12 06:16:19.328306 2026] [:error] [pid 25329:tid 25412] [client 20.220.11.224:47024] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adrIM2dcIYsS8Iyaj1068gAAAJU"]
[Sun Apr 12 06:16:20.513851 2026] [:error] [pid 26599:tid 26605] [client 20.220.11.224:47051] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adrINHG89LXoQbk_rwBHWAAAAUM"]
[Sun Apr 12 06:16:22.468554 2026] [:error] [pid 26567:tid 26576] [client 20.220.11.224:46925] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adrINnhRpg6ptWFyFx0JCQAAAQc"]
[Sun Apr 12 06:16:23.754274 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:46980] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adrIN3BlLnDOYuIykkj3PgAAAc4"]
[Sun Apr 12 06:16:45.694163 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:47048] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "adrITXBlLnDOYuIykkj3qQAAAdY"]
[Sun Apr 12 06:16:46.990319 2026] [:error] [pid 26600:tid 26648] [client 20.220.11.224:47077] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "adrITu1YwAZiXhQKLYqAbwAAAZM"]
[Sun Apr 12 06:16:49.126444 2026] [:error] [pid 26567:tid 26582] [client 20.220.11.224:47102] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/not_found"] [unique_id "adrIUXhRpg6ptWFyFx0JeAAAAQ0"]
[Sun Apr 12 06:16:57.568991 2026] [:error] [pid 25329:tid 25386] [client 20.220.11.224:47074] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrIWWdcIYsS8Iyaj107WgAAAIY"]
[Sun Apr 12 06:17:03.834471 2026] [:error] [pid 60280:tid 60290] [client 20.220.11.224:47087] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrIX3BlLnDOYuIykkj3zQAAAcg"]
[Sun Apr 12 06:17:06.924336 2026] [:error] [pid 26600:tid 26635] [client 20.220.11.224:47059] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrIYu1YwAZiXhQKLYqAegAAAYY"]
[Sun Apr 12 06:17:07.999745 2026] [:error] [pid 60280:tid 60286] [client 20.220.11.224:47069] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrIY3BlLnDOYuIykkj35QAAAcQ"]
[Sun Apr 12 06:17:09.300617 2026] [:error] [pid 25327:tid 25336] [client 20.220.11.224:47005] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrIZS6h2tZEVJo9JFJHkgAAAAA"]
[Sun Apr 12 06:17:16.998412 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:47063] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrIbHBlLnDOYuIykkj37wAAAc4"]
[Sun Apr 12 06:17:22.574186 2026] [:error] [pid 25437:tid 25441] [client 20.220.11.224:47095] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrIcnf97wYZje1ep_NeSgAAAMI"]
[Sun Apr 12 06:17:25.990733 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:47068] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrIdXBlLnDOYuIykkj4BwAAAdY"]
[Sun Apr 12 06:17:28.356687 2026] [:error] [pid 25437:tid 25460] [client 20.220.11.224:47047] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrIeHf97wYZje1ep_NeZAAAANU"]
[Sun Apr 12 06:17:32.280654 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:47070] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrIfMxUaQZxT-e0YsDyXAAAAEM"]
[Sun Apr 12 06:17:36.037564 2026] [:error] [pid 26567:tid 26578] [client 20.220.11.224:47082] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrIgHhRpg6ptWFyFx0JwwAAAQk"]
[Sun Apr 12 06:17:38.503223 2026] [:error] [pid 60280:tid 60286] [client 20.220.11.224:46993] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrIgnBlLnDOYuIykkj4IQAAAcQ"]
[Sun Apr 12 06:17:41.292162 2026] [:error] [pid 25329:tid 25395] [client 20.220.11.224:46986] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrIhWdcIYsS8Iyaj107oAAAAIs"]
[Sun Apr 12 06:17:54.808821 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:47031] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrIknBlLnDOYuIykkj4PQAAAc4"]
[Sun Apr 12 06:17:57.131895 2026] [:error] [pid 25437:tid 25460] [client 20.220.11.224:47007] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrIlXf97wYZje1ep_NegAAAANU"]
[Sun Apr 12 06:18:01.972980 2026] [:error] [pid 26599:tid 26611] [client 20.220.11.224:46951] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrImXG89LXoQbk_rwBH3QAAAUk"]
[Sun Apr 12 06:18:09.754426 2026] [:error] [pid 25329:tid 25414] [client 20.220.11.224:47044] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adrIoWdcIYsS8Iyaj107uQAAAJc"]
[Sun Apr 12 06:49:51.115057 2026] [proxy_fcgi:error] [pid 25327:tid 25338] [client 20.104.18.4:36808] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:50:19.289564 2026] [proxy_fcgi:error] [pid 25329:tid 25411] [client 20.104.18.4:36806] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:50:39.791150 2026] [proxy_fcgi:error] [pid 25329:tid 25378] [client 20.104.18.4:36744] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:53:34.656464 2026] [proxy_fcgi:error] [pid 25328:tid 25401] [client 20.104.18.4:36825] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:53:59.673333 2026] [proxy_fcgi:error] [pid 25328:tid 25372] [client 20.104.18.4:36736] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:55:01.076206 2026] [proxy_fcgi:error] [pid 60280:tid 60286] [client 20.104.18.4:36862] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Undefined constant "ABSPATH" in /home/makifimc/public_html/wp-settings.php:34\nStack trace:\n#0 {main}\n  thrown in /home/makifimc/public_html/wp-settings.php on line 34'
[Sun Apr 12 06:55:33.648640 2026] [proxy_fcgi:error] [pid 26599:tid 26606] [client 20.104.18.4:36782] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 06:56:06.592446 2026] [:error] [pid 26600:tid 26640] [client 20.104.18.4:36835] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "adrRhu1YwAZiXhQKLYqJOAAAAYs"]
[Sun Apr 12 06:56:09.276755 2026] [:error] [pid 25437:tid 25447] [client 20.104.18.4:36802] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hello.php"] [unique_id "adrRiXf97wYZje1ep_NvigAAAMg"]
[Sun Apr 12 06:56:37.832745 2026] [:error] [pid 26600:tid 26649] [client 20.104.18.4:36842] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kk.php"] [unique_id "adrRpe1YwAZiXhQKLYqJYwAAAZQ"]
[Sun Apr 12 06:56:44.900777 2026] [:error] [pid 25329:tid 25374] [client 20.104.18.4:36857] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kk.php"] [unique_id "adrRrGdcIYsS8Iyaj11GFQAAAIA"]
[Sun Apr 12 06:56:59.303549 2026] [:error] [pid 26567:tid 26590] [client 20.104.18.4:36807] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mrjn.php"] [unique_id "adrRu3hRpg6ptWFyFx0YrAAAARU"]
[Sun Apr 12 06:57:28.104900 2026] [:error] [pid 26599:tid 26617] [client 20.104.18.4:36744] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kn.php"] [unique_id "adrR2HG89LXoQbk_rwBQggAAAU8"]
[Sun Apr 12 06:57:40.080436 2026] [:error] [pid 26567:tid 26587] [client 20.104.18.4:36739] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3301.php"] [unique_id "adrR5HhRpg6ptWFyFx0Y4QAAARI"]
[Sun Apr 12 06:58:04.844157 2026] [:error] [pid 25327:tid 25350] [client 20.104.18.4:36823] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/leaf.php"] [unique_id "adrR_C6h2tZEVJo9JFJNJwAAAA4"]
[Sun Apr 12 06:58:22.222358 2026] [:error] [pid 26567:tid 26578] [client 20.104.18.4:36847] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alex.php"] [unique_id "adrSDnhRpg6ptWFyFx0ZHQAAAQk"]
[Sun Apr 12 06:58:24.799433 2026] [:error] [pid 26600:tid 26652] [client 20.104.18.4:36749] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alex.php"] [unique_id "adrSEO1YwAZiXhQKLYqJ4wAAAZc"]
[Sun Apr 12 06:58:30.059505 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:36841] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mailer.php"] [unique_id "adrSFsxUaQZxT-e0YsABuAAAAFc"]
[Sun Apr 12 06:58:38.005699 2026] [:error] [pid 26600:tid 26637] [client 20.104.18.4:36748] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mailer.php"] [unique_id "adrSHu1YwAZiXhQKLYqKBwAAAYg"]
[Sun Apr 12 06:58:46.770061 2026] [:error] [pid 26567:tid 26573] [client 20.104.18.4:36820] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/anone.php"] [unique_id "adrSJnhRpg6ptWFyFx0ZMAAAAQQ"]
[Sun Apr 12 06:58:54.375381 2026] [:error] [pid 26567:tid 26591] [client 20.104.18.4:36747] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/anone.php"] [unique_id "adrSLnhRpg6ptWFyFx0ZOAAAARY"]
[Sun Apr 12 06:58:56.550521 2026] [:error] [pid 26567:tid 26571] [client 20.104.18.4:36750] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/anone.php"] [unique_id "adrSMHhRpg6ptWFyFx0ZPAAAAQI"]
[Sun Apr 12 06:59:00.955994 2026] [:error] [pid 26567:tid 26590] [client 20.104.18.4:36844] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-configer.php"] [unique_id "adrSNHhRpg6ptWFyFx0ZRgAAARU"]
[Sun Apr 12 06:59:03.943713 2026] [:error] [pid 25328:tid 25396] [client 20.104.18.4:36825] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-configer.php"] [unique_id "adrSN8xUaQZxT-e0YsAB9wAAAFM"]
[Sun Apr 12 06:59:10.414661 2026] [:error] [pid 26567:tid 26581] [client 20.104.18.4:36858] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-configer.php"] [unique_id "adrSPnhRpg6ptWFyFx0ZSAAAAQw"]
[Sun Apr 12 06:59:14.050726 2026] [:error] [pid 26599:tid 26619] [client 20.104.18.4:36834] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-configer.php"] [unique_id "adrSQnG89LXoQbk_rwBQvAAAAVE"]
[Sun Apr 12 06:59:27.130918 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:36764] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-ad.php"] [unique_id "adrST8xUaQZxT-e0YsACLwAAAFc"]
[Sun Apr 12 06:59:34.889474 2026] [:error] [pid 25328:tid 25365] [client 20.104.18.4:36859] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/send.php"] [unique_id "adrSVsxUaQZxT-e0YsACQQAAAEE"]
[Sun Apr 12 06:59:40.512877 2026] [:error] [pid 26600:tid 26651] [client 20.104.18.4:36736] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/send.php"] [unique_id "adrSXO1YwAZiXhQKLYqKVgAAAZY"]
[Sun Apr 12 06:59:42.087702 2026] [:error] [pid 26600:tid 26645] [client 20.104.18.4:36771] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/send.php"] [unique_id "adrSXu1YwAZiXhQKLYqKWAAAAZA"]
[Sun Apr 12 06:59:44.628415 2026] [:error] [pid 25328:tid 25375] [client 20.104.18.4:36837] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/send.php"] [unique_id "adrSYMxUaQZxT-e0YsACagAAAEk"]
[Sun Apr 12 06:59:49.017766 2026] [:error] [pid 26600:tid 26642] [client 20.104.18.4:36849] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "adrSZe1YwAZiXhQKLYqKqQAAAY0"]
[Sun Apr 12 06:59:54.995208 2026] [:error] [pid 25328:tid 25389] [client 20.104.18.4:36763] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "adrSasxUaQZxT-e0YsAC6wAAAFA"]
[Sun Apr 12 06:59:59.172638 2026] [:error] [pid 25328:tid 25408] [client 20.104.18.4:36831] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "adrSb8xUaQZxT-e0YsAC9wAAAFg"]
[Sun Apr 12 07:00:06.306497 2026] [:error] [pid 25328:tid 25367] [client 20.104.18.4:36806] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.wp-cache.php"] [unique_id "adrSdsxUaQZxT-e0YsADCgAAAEM"]
[Sun Apr 12 07:00:12.323347 2026] [:error] [pid 25328:tid 25379] [client 20.104.18.4:36828] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.wp-cache.php"] [unique_id "adrSfMxUaQZxT-e0YsADHgAAAEs"]
[Sun Apr 12 07:01:02.757623 2026] [:error] [pid 25327:tid 25347] [client 20.104.18.4:36695] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nasgor.php"] [unique_id "adrSri6h2tZEVJo9JFJNsAAAAAs"]
[Sun Apr 12 07:01:05.926043 2026] [:error] [pid 26599:tid 26607] [client 20.104.18.4:36745] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nasgor.php"] [unique_id "adrSsXG89LXoQbk_rwBRMgAAAUU"]
[Sun Apr 12 07:01:33.019057 2026] [:error] [pid 25328:tid 25373] [client 20.104.18.4:36803] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa123.php"] [unique_id "adrSzcxUaQZxT-e0YsADhQAAAEg"]
[Sun Apr 12 07:01:35.885285 2026] [:error] [pid 26600:tid 26631] [client 20.104.18.4:36683] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfa123.php"] [unique_id "adrSz-1YwAZiXhQKLYqLCwAAAYI"]
[Sun Apr 12 07:02:01.010877 2026] [:error] [pid 60280:tid 60296] [client 20.104.18.4:36812] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypass.php"] [unique_id "adrS6XBlLnDOYuIykkgBLAAAAc4"]
[Sun Apr 12 07:02:30.051420 2026] [:error] [pid 26599:tid 26621] [client 20.104.18.4:36847] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-one.php"] [unique_id "adrTBnG89LXoQbk_rwBRaAAAAVM"]
[Sun Apr 12 07:02:36.822810 2026] [:error] [pid 25329:tid 25381] [client 20.104.18.4:36802] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-one.php"] [unique_id "adrTDGdcIYsS8Iyaj11HNAAAAIM"]
[Sun Apr 12 07:02:37.965587 2026] [:error] [pid 25329:tid 25393] [client 20.104.18.4:36739] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-one.php"] [unique_id "adrTDWdcIYsS8Iyaj11HOQAAAIo"]
[Sun Apr 12 07:02:38.433065 2026] [:error] [pid 25329:tid 25384] [client 20.104.18.4:36840] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-one.php"] [unique_id "adrTDmdcIYsS8Iyaj11HPAAAAIU"]
[Sun Apr 12 07:02:38.988617 2026] [:error] [pid 26600:tid 26653] [client 20.104.18.4:36737] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alexus.php"] [unique_id "adrTDu1YwAZiXhQKLYqMDgAAAZg"]
[Sun Apr 12 07:02:40.970789 2026] [:error] [pid 26567:tid 26586] [client 20.104.18.4:36740] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alexus.php"] [unique_id "adrTEHhRpg6ptWFyFx0aewAAARE"]
[Sun Apr 12 07:02:50.310837 2026] [:error] [pid 26599:tid 26604] [client 20.104.18.4:36860] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alexus.php"] [unique_id "adrTGnG89LXoQbk_rwBRewAAAUI"]
[Sun Apr 12 07:04:30.217862 2026] [:error] [pid 25437:tid 25445] [client 20.104.18.4:36837] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adrTfnf97wYZje1ep_NxiwAAAMY"]
[Sun Apr 12 07:04:44.243727 2026] [:error] [pid 26599:tid 26626] [client 20.104.18.4:36813] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kiss.php"] [unique_id "adrTjHG89LXoQbk_rwBRwgAAAVg"]
[Sun Apr 12 07:05:02.878862 2026] [:error] [pid 25437:tid 25458] [client 20.104.18.4:36752] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/owl.php"] [unique_id "adrTnnf97wYZje1ep_NxsgAAANM"]
[Sun Apr 12 07:05:11.253077 2026] [:error] [pid 26600:tid 26642] [client 20.104.18.4:36856] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/owl.php"] [unique_id "adrTp-1YwAZiXhQKLYqNCQAAAY0"]
[Sun Apr 12 07:05:16.068729 2026] [:error] [pid 60280:tid 60302] [client 20.104.18.4:36854] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/owl.php"] [unique_id "adrTrHBlLnDOYuIykkgBvAAAAdQ"]
[Sun Apr 12 07:05:16.731713 2026] [:error] [pid 25437:tid 25439] [client 20.104.18.4:36853] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/owl.php"] [unique_id "adrTrHf97wYZje1ep_NxuAAAAMA"]
[Sun Apr 12 07:05:17.571133 2026] [:error] [pid 25437:tid 25442] [client 20.104.18.4:36738] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vuln.php"] [unique_id "adrTrXf97wYZje1ep_NxuwAAAMM"]
[Sun Apr 12 07:05:21.928477 2026] [:error] [pid 25328:tid 25372] [client 20.104.18.4:36779] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vuln.php"] [unique_id "adrTscxUaQZxT-e0YsAFWQAAAEc"]
[Sun Apr 12 07:05:24.860843 2026] [:error] [pid 26567:tid 26576] [client 20.104.18.4:36756] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vuln.php"] [unique_id "adrTtHhRpg6ptWFyFx0bFAAAAQc"]
[Sun Apr 12 07:05:30.232762 2026] [:error] [pid 26600:tid 26653] [client 20.104.18.4:36843] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vuln.php"] [unique_id "adrTuu1YwAZiXhQKLYqNFQAAAZg"]
[Sun Apr 12 07:05:37.529180 2026] [:error] [pid 25329:tid 25382] [client 20.104.18.4:36755] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ohayo.php"] [unique_id "adrTwWdcIYsS8Iyaj11IIQAAAIQ"]
[Sun Apr 12 07:06:12.514169 2026] [:error] [pid 25437:tid 25448] [client 20.104.18.4:36823] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cms.php"] [unique_id "adrT5Hf97wYZje1ep_Nx7wAAAMk"]
[Sun Apr 12 07:06:14.642312 2026] [:error] [pid 26600:tid 26646] [client 20.104.18.4:36753] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cms.php"] [unique_id "adrT5u1YwAZiXhQKLYqNPAAAAZE"]
[Sun Apr 12 07:06:15.914761 2026] [:error] [pid 25437:tid 25454] [client 20.104.18.4:36825] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cms.php"] [unique_id "adrT53f97wYZje1ep_Nx8wAAAM8"]
[Sun Apr 12 07:06:18.674579 2026] [:error] [pid 26600:tid 26639] [client 20.104.18.4:36863] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cms.php"] [unique_id "adrT6u1YwAZiXhQKLYqNSQAAAYo"]
[Sun Apr 12 07:06:25.562367 2026] [:error] [pid 25327:tid 25336] [client 20.104.18.4:36804] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-uploads.php"] [unique_id "adrT8S6h2tZEVJo9JFJONwAAAAA"]
[Sun Apr 12 07:06:26.891125 2026] [:error] [pid 25437:tid 25448] [client 20.104.18.4:36736] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-uploads.php"] [unique_id "adrT8nf97wYZje1ep_NyGAAAAMk"]
[Sun Apr 12 07:06:30.696474 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:36748] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-uploads.php"] [unique_id "adrT9sxUaQZxT-e0YsAGIwAAAFc"]
[Sun Apr 12 07:06:35.324283 2026] [:error] [pid 25329:tid 25378] [client 20.104.18.4:36817] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-uploads.php"] [unique_id "adrT-2dcIYsS8Iyaj11IpQAAAII"]
[Sun Apr 12 07:06:38.181112 2026] [:error] [pid 25437:tid 25456] [client 20.104.18.4:36742] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Gel.php"] [unique_id "adrT_nf97wYZje1ep_NySwAAANE"]
[Sun Apr 12 07:06:40.227988 2026] [:error] [pid 25329:tid 25399] [client 20.104.18.4:36818] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Gel.php"] [unique_id "adrUAGdcIYsS8Iyaj11IqgAAAI0"]
[Sun Apr 12 07:06:45.464262 2026] [:error] [pid 25327:tid 25349] [client 20.104.18.4:36862] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Gel.php"] [unique_id "adrUBS6h2tZEVJo9JFJOOwAAAA0"]
[Sun Apr 12 07:06:48.041891 2026] [:error] [pid 26599:tid 26611] [client 20.104.18.4:36746] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Gel.php"] [unique_id "adrUCHG89LXoQbk_rwBSAgAAAUk"]
[Sun Apr 12 07:06:50.585448 2026] [:error] [pid 25327:tid 25357] [client 20.104.18.4:36815] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/41.php"] [unique_id "adrUCi6h2tZEVJo9JFJOPgAAABU"]
[Sun Apr 12 07:06:54.800011 2026] [:error] [pid 25328:tid 25367] [client 20.104.18.4:36847] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/41.php"] [unique_id "adrUDsxUaQZxT-e0YsAGcQAAAEM"]
[Sun Apr 12 07:08:17.972971 2026] [proxy_fcgi:error] [pid 25327:tid 25351] [client 20.104.18.4:36838] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 07:08:57.273218 2026] [proxy_fcgi:error] [pid 25327:tid 25348] [client 20.104.18.4:36860] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 07:09:13.859547 2026] [proxy_fcgi:error] [pid 25327:tid 25359] [client 20.104.18.4:36828] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:09:14.068919 2026] [proxy_fcgi:error] [pid 25327:tid 25342] [client 20.104.18.4:36828] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:09:41.066525 2026] [proxy_fcgi:error] [pid 25329:tid 25390] [client 20.104.18.4:36849] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 07:10:35.978390 2026] [:error] [pid 25327:tid 25343] [client 20.104.18.4:36745] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/olux.php"] [unique_id "adrU6y6h2tZEVJo9JFJRAgAAAAc"]
[Sun Apr 12 07:10:43.266941 2026] [:error] [pid 25328:tid 25396] [client 20.104.18.4:36802] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/olux.php"] [unique_id "adrU88xUaQZxT-e0YsAIpwAAAFM"]
[Sun Apr 12 07:11:10.015251 2026] [:error] [pid 25327:tid 25336] [client 20.104.18.4:36778] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xl.php"] [unique_id "adrVDi6h2tZEVJo9JFJRPwAAAAA"]
[Sun Apr 12 07:11:26.851228 2026] [:error] [pid 26600:tid 26636] [client 20.104.18.4:36836] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-confiig.php"] [unique_id "adrVHu1YwAZiXhQKLYqPcQAAAYc"]
[Sun Apr 12 07:12:06.507395 2026] [proxy_fcgi:error] [pid 25327:tid 25341] [client 20.104.18.4:36814] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 07:13:01.876347 2026] [proxy_fcgi:error] [pid 26599:tid 26619] [client 20.104.18.4:36755] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 07:14:32.968841 2026] [:error] [pid 25329:tid 25407] [client 20.104.18.4:36740] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pomo.php"] [unique_id "adrV2GdcIYsS8Iyaj11L_AAAAJI"]
[Sun Apr 12 07:14:39.392506 2026] [:error] [pid 25328:tid 25383] [client 20.104.18.4:36818] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pomo.php"] [unique_id "adrV38xUaQZxT-e0YsAJ8AAAAE0"]
[Sun Apr 12 07:14:49.224090 2026] [:error] [pid 25329:tid 25414] [client 20.104.18.4:36821] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrV6WdcIYsS8Iyaj11MBgAAAJc"]
[Sun Apr 12 07:14:53.922323 2026] [:error] [pid 25327:tid 25359] [client 20.104.18.4:36805] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrV7S6h2tZEVJo9JFJS4wAAABc"]
[Sun Apr 12 07:14:59.129563 2026] [:error] [pid 25327:tid 25348] [client 20.104.18.4:36828] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrV8y6h2tZEVJo9JFJS5wAAAAw"]
[Sun Apr 12 07:15:11.120372 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:36752] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrV_8xUaQZxT-e0YsAKDQAAAFc"]
[Sun Apr 12 07:15:14.466663 2026] [:error] [pid 25327:tid 25353] [client 20.104.18.4:36803] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrWAi6h2tZEVJo9JFJS_AAAABE"]
[Sun Apr 12 07:15:20.513775 2026] [:error] [pid 25328:tid 25389] [client 20.104.18.4:36744] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrWCMxUaQZxT-e0YsAKEAAAAFA"]
[Sun Apr 12 07:16:21.045176 2026] [:error] [pid 25327:tid 25336] [client 20.104.18.4:36845] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/not_found"] [unique_id "adrWRS6h2tZEVJo9JFJTagAAAAA"]
[Sun Apr 12 07:16:29.542127 2026] [:error] [pid 25328:tid 25372] [client 20.104.18.4:36863] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adrWTcxUaQZxT-e0YsAKSgAAAEc"]
[Sun Apr 12 07:16:33.837448 2026] [:error] [pid 26567:tid 26590] [client 20.104.18.4:36737] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adrWUXhRpg6ptWFyFx0c7AAAARU"]
[Sun Apr 12 07:16:40.966228 2026] [:error] [pid 60280:tid 60305] [client 20.104.18.4:36743] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adrWWHBlLnDOYuIykkgDegAAAdc"]
[Sun Apr 12 07:16:46.619987 2026] [:error] [pid 60280:tid 60306] [client 20.104.18.4:36840] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrWXnBlLnDOYuIykkgDigAAAdg"]
[Sun Apr 12 07:16:47.998561 2026] [:error] [pid 60280:tid 60298] [client 20.104.18.4:36827] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrWX3BlLnDOYuIykkgDjwAAAdA"]
[Sun Apr 12 07:16:52.424500 2026] [:error] [pid 25327:tid 25345] [client 20.104.18.4:36830] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrWZC6h2tZEVJo9JFJT6QAAAAk"]
[Sun Apr 12 07:16:57.702714 2026] [:error] [pid 26599:tid 26611] [client 20.104.18.4:36858] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrWaXG89LXoQbk_rwBTtAAAAUk"]
[Sun Apr 12 07:17:03.338927 2026] [:error] [pid 26567:tid 26570] [client 20.104.18.4:36751] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrWb3hRpg6ptWFyFx0c9QAAAQE"]
[Sun Apr 12 07:17:05.916922 2026] [:error] [pid 25437:tid 25447] [client 20.104.18.4:36786] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrWcXf97wYZje1ep_N0EAAAAMg"]
[Sun Apr 12 07:17:11.600307 2026] [:error] [pid 60280:tid 60288] [client 20.104.18.4:36792] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrWd3BlLnDOYuIykkgDlwAAAcY"]
[Sun Apr 12 07:17:20.341432 2026] [:error] [pid 60280:tid 60306] [client 20.104.18.4:36816] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrWgHBlLnDOYuIykkgDoAAAAdg"]
[Sun Apr 12 07:17:23.810971 2026] [:error] [pid 60280:tid 60294] [client 20.104.18.4:36810] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrWg3BlLnDOYuIykkgDrQAAAcw"]
[Sun Apr 12 07:17:28.321450 2026] [:error] [pid 25327:tid 25357] [client 20.104.18.4:36831] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrWiC6h2tZEVJo9JFJT-wAAABU"]
[Sun Apr 12 07:17:34.498180 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:36801] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrWjsxUaQZxT-e0YsAKfwAAAFc"]
[Sun Apr 12 07:17:39.754506 2026] [:error] [pid 25327:tid 25354] [client 20.104.18.4:36862] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrWky6h2tZEVJo9JFJUBgAAABI"]
[Sun Apr 12 07:17:46.402705 2026] [:error] [pid 26599:tid 26608] [client 20.104.18.4:36836] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrWmnG89LXoQbk_rwBT8AAAAUY"]
[Sun Apr 12 07:17:49.998654 2026] [:error] [pid 26599:tid 26604] [client 20.104.18.4:36853] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrWnXG89LXoQbk_rwBT8wAAAUI"]
[Sun Apr 12 07:17:54.887360 2026] [:error] [pid 26599:tid 26626] [client 20.104.18.4:36800] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrWonG89LXoQbk_rwBT9gAAAVg"]
[Sun Apr 12 07:18:06.702970 2026] [:error] [pid 25327:tid 25341] [client 20.104.18.4:36756] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adrWri6h2tZEVJo9JFJUFQAAAAU"]
[Sun Apr 12 09:45:35.960227 2026] [proxy_fcgi:error] [pid 25329:tid 25409] [client 20.199.110.126:11256] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:45:51.046671 2026] [proxy_fcgi:error] [pid 25327:tid 25358] [client 20.199.110.126:11263] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:46:10.296583 2026] [proxy_fcgi:error] [pid 26599:tid 26608] [client 20.199.110.126:11229] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:46:10.850132 2026] [proxy_fcgi:error] [pid 26599:tid 26611] [client 20.199.110.126:11145] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:46:24.044647 2026] [:error] [pid 25328:tid 25375] [client 20.199.110.126:11259] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "adr5cMxUaQZxT-e0YsBBbAAAAEk"]
[Sun Apr 12 09:46:25.117827 2026] [:error] [pid 25327:tid 25340] [client 20.199.110.126:11223] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "adr5cS6h2tZEVJo9JFJ4ZAAAAAQ"]
[Sun Apr 12 09:46:26.831782 2026] [:error] [pid 25327:tid 25339] [client 20.199.110.126:11254] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "adr5ci6h2tZEVJo9JFJ4ZQAAAAM"]
[Sun Apr 12 09:46:28.315635 2026] [:error] [pid 25328:tid 25373] [client 20.199.110.126:11147] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "adr5dMxUaQZxT-e0YsBBdwAAAEg"]
[Sun Apr 12 09:46:29.703680 2026] [:error] [pid 25329:tid 25390] [client 20.199.110.126:11138] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "adr5dWdcIYsS8Iyaj11onQAAAIg"]
[Sun Apr 12 09:46:31.754762 2026] [:error] [pid 25437:tid 25462] [client 20.199.110.126:11143] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "adr5d3f97wYZje1ep_OXcAAAANc"]
[Sun Apr 12 09:46:33.107699 2026] [:error] [pid 25329:tid 25407] [client 20.199.110.126:11244] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "adr5eWdcIYsS8Iyaj11onwAAAJI"]
[Sun Apr 12 09:46:34.302199 2026] [:error] [pid 25329:tid 25409] [client 20.199.110.126:11171] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "adr5emdcIYsS8Iyaj11oogAAAJM"]
[Sun Apr 12 09:46:35.724172 2026] [:error] [pid 25437:tid 25449] [client 20.199.110.126:11243] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adr5e3f97wYZje1ep_OXdQAAAMo"]
[Sun Apr 12 09:46:37.125694 2026] [:error] [pid 60280:tid 60287] [client 20.199.110.126:11137] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adr5fXBlLnDOYuIykkhQwQAAAcU"]
[Sun Apr 12 09:46:38.340122 2026] [:error] [pid 25437:tid 25450] [client 20.199.110.126:11207] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adr5fnf97wYZje1ep_OXfAAAAMs"]
[Sun Apr 12 09:46:39.636691 2026] [:error] [pid 60280:tid 60297] [client 20.199.110.126:11236] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adr5f3BlLnDOYuIykkhQwwAAAc8"]
[Sun Apr 12 09:46:41.629333 2026] [:error] [pid 60280:tid 60282] [client 20.199.110.126:11228] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "adr5gXBlLnDOYuIykkhQxwAAAcA"]
[Sun Apr 12 09:46:43.012536 2026] [:error] [pid 25328:tid 25385] [client 20.199.110.126:11148] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "adr5g8xUaQZxT-e0YsBBhAAAAE4"]
[Sun Apr 12 09:46:44.055995 2026] [:error] [pid 25329:tid 25399] [client 20.199.110.126:11156] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "adr5hGdcIYsS8Iyaj11opQAAAI0"]
[Sun Apr 12 09:46:45.207645 2026] [:error] [pid 60280:tid 60298] [client 20.199.110.126:11182] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "adr5hXBlLnDOYuIykkhQ1gAAAdA"]
[Sun Apr 12 09:46:45.972752 2026] [:error] [pid 60280:tid 60291] [client 20.199.110.126:11155] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "adr5hXBlLnDOYuIykkhQ2wAAAck"]
[Sun Apr 12 09:46:48.114122 2026] [:error] [pid 25327:tid 25339] [client 20.199.110.126:11200] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "adr5iC6h2tZEVJo9JFJ4cwAAAAM"]
[Sun Apr 12 09:46:50.683349 2026] [:error] [pid 25327:tid 25342] [client 20.199.110.126:11237] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "adr5ii6h2tZEVJo9JFJ4dQAAAAY"]
[Sun Apr 12 09:46:52.682506 2026] [:error] [pid 25329:tid 25415] [client 20.199.110.126:11082] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "adr5jGdcIYsS8Iyaj11oqQAAAJg"]
[Sun Apr 12 09:46:54.752913 2026] [:error] [pid 25328:tid 25380] [client 20.199.110.126:11149] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "adr5jsxUaQZxT-e0YsBBjAAAAEw"]
[Sun Apr 12 09:46:55.858072 2026] [:error] [pid 26599:tid 26626] [client 20.199.110.126:11170] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "adr5j3G89LXoQbk_rwB-_QAAAVg"]
[Sun Apr 12 09:46:57.611464 2026] [:error] [pid 60280:tid 60297] [client 20.199.110.126:11181] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "adr5kXBlLnDOYuIykkhQ7gAAAc8"]
[Sun Apr 12 09:46:59.585522 2026] [:error] [pid 25327:tid 25348] [client 20.199.110.126:11212] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "adr5ky6h2tZEVJo9JFJ4eQAAAAw"]
[Sun Apr 12 09:47:00.383655 2026] [:error] [pid 26567:tid 26577] [client 20.199.110.126:11213] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "adr5lHhRpg6ptWFyFx09sgAAAQg"]
[Sun Apr 12 09:47:02.276775 2026] [:error] [pid 60280:tid 60304] [client 20.199.110.126:11095] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "adr5lnBlLnDOYuIykkhQ8AAAAdY"]
[Sun Apr 12 09:47:03.060756 2026] [:error] [pid 60280:tid 60283] [client 20.199.110.126:11205] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "adr5l3BlLnDOYuIykkhQ9AAAAcE"]
[Sun Apr 12 09:47:06.337993 2026] [:error] [pid 25328:tid 25405] [client 20.199.110.126:11234] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "adr5msxUaQZxT-e0YsBBlwAAAFc"]
[Sun Apr 12 09:47:07.546014 2026] [:error] [pid 26600:tid 26641] [client 20.199.110.126:11169] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "adr5m-1YwAZiXhQKLYqyEwAAAYw"]
[Sun Apr 12 09:47:08.486127 2026] [:error] [pid 60280:tid 60297] [client 20.199.110.126:11241] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "adr5nHBlLnDOYuIykkhRBgAAAc8"]
[Sun Apr 12 09:47:10.736417 2026] [:error] [pid 60280:tid 60296] [client 20.199.110.126:11091] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "adr5nnBlLnDOYuIykkhRDQAAAc4"]
[Sun Apr 12 09:47:12.083510 2026] [:error] [pid 25328:tid 25368] [client 20.199.110.126:11189] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "adr5oMxUaQZxT-e0YsBBoQAAAEQ"]
[Sun Apr 12 09:47:14.701663 2026] [:error] [pid 25328:tid 25387] [client 20.199.110.126:11252] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adr5osxUaQZxT-e0YsBBpAAAAE8"]
[Sun Apr 12 09:47:18.584729 2026] [:error] [pid 60280:tid 60292] [client 20.199.110.126:11152] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adr5pnBlLnDOYuIykkhRFwAAAco"]
[Sun Apr 12 09:47:20.710994 2026] [:error] [pid 60280:tid 60302] [client 20.199.110.126:11218] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adr5qHBlLnDOYuIykkhRIgAAAdQ"]
[Sun Apr 12 09:47:38.774690 2026] [proxy_fcgi:error] [pid 26600:tid 26636] [client 20.199.110.126:11231] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:47:54.778341 2026] [proxy_fcgi:error] [pid 25328:tid 25366] [client 20.199.110.126:11225] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:48:01.469077 2026] [proxy_fcgi:error] [pid 26600:tid 26629] [client 20.199.110.126:11253] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:48:08.937042 2026] [proxy_fcgi:error] [pid 26600:tid 26637] [client 20.199.110.126:11148] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:48:18.618843 2026] [proxy_fcgi:error] [pid 25328:tid 25403] [client 20.199.110.126:11230] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:48:26.463876 2026] [proxy_fcgi:error] [pid 26599:tid 26611] [client 20.199.110.126:11143] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:48:37.987336 2026] [proxy_fcgi:error] [pid 25329:tid 25392] [client 20.199.110.126:11142] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:48:50.947369 2026] [:error] [pid 26567:tid 26589] [client 20.199.110.126:11146] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adr6AnhRpg6ptWFyFx0-AQAAARQ"]
[Sun Apr 12 09:48:52.117605 2026] [:error] [pid 26600:tid 26651] [client 20.199.110.126:11219] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adr6BO1YwAZiXhQKLYqy5wAAAZY"]
[Sun Apr 12 09:48:54.296684 2026] [:error] [pid 25437:tid 25450] [client 20.199.110.126:11222] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adr6Bnf97wYZje1ep_OYFAAAAMs"]
[Sun Apr 12 09:48:57.707785 2026] [:error] [pid 25328:tid 25403] [client 20.199.110.126:11210] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adr6CcxUaQZxT-e0YsBCaAAAAFY"]
[Sun Apr 12 09:48:58.925667 2026] [:error] [pid 25328:tid 25385] [client 20.199.110.126:11008] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "adr6CsxUaQZxT-e0YsBCbwAAAE4"]
[Sun Apr 12 09:49:00.361851 2026] [:error] [pid 60280:tid 60298] [client 20.199.110.126:11202] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "adr6DHBlLnDOYuIykkhSNAAAAdA"]
[Sun Apr 12 09:49:03.779028 2026] [:error] [pid 25329:tid 25395] [client 20.199.110.126:11199] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "adr6D2dcIYsS8Iyaj11o1QAAAIs"]
[Sun Apr 12 09:49:05.374785 2026] [:error] [pid 25328:tid 25387] [client 20.199.110.126:11153] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "adr6EcxUaQZxT-e0YsBCiAAAAE8"]
[Sun Apr 12 09:49:10.082411 2026] [:error] [pid 25328:tid 25401] [client 20.199.110.126:11263] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adr6FsxUaQZxT-e0YsBCkQAAAFU"]
[Sun Apr 12 09:49:11.644371 2026] [:error] [pid 26599:tid 26609] [client 20.199.110.126:11158] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adr6F3G89LXoQbk_rwB_PAAAAUc"]
[Sun Apr 12 09:49:12.613125 2026] [:error] [pid 25437:tid 25442] [client 20.199.110.126:11227] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adr6GHf97wYZje1ep_OYVAAAAMM"]
[Sun Apr 12 09:49:14.783380 2026] [:error] [pid 60280:tid 60306] [client 20.199.110.126:11172] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adr6GnBlLnDOYuIykkhSRQAAAdg"]
[Sun Apr 12 09:49:16.604393 2026] [:error] [pid 60280:tid 60303] [client 20.199.110.126:11174] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "adr6HHBlLnDOYuIykkhSTwAAAdU"]
[Sun Apr 12 09:49:18.038326 2026] [:error] [pid 60280:tid 60282] [client 20.199.110.126:11183] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "adr6HnBlLnDOYuIykkhSUgAAAcA"]
[Sun Apr 12 09:49:19.854834 2026] [:error] [pid 26600:tid 26632] [client 20.199.110.126:11248] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "adr6H-1YwAZiXhQKLYqzCQAAAYM"]
[Sun Apr 12 09:49:21.955494 2026] [:error] [pid 25329:tid 25400] [client 20.199.110.126:11229] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "adr6IWdcIYsS8Iyaj11o3QAAAI4"]
[Sun Apr 12 09:49:24.161843 2026] [:error] [pid 25328:tid 25366] [client 20.199.110.126:11251] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "adr6JMxUaQZxT-e0YsBCqgAAAEI"]
[Sun Apr 12 09:49:25.122245 2026] [:error] [pid 26567:tid 26577] [client 20.199.110.126:11160] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "adr6JXhRpg6ptWFyFx0-FgAAAQg"]
[Sun Apr 12 09:49:27.619380 2026] [:error] [pid 26600:tid 26630] [client 20.199.110.126:11161] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "adr6J-1YwAZiXhQKLYqzFQAAAYE"]
[Sun Apr 12 09:49:29.434840 2026] [:error] [pid 26600:tid 26652] [client 20.199.110.126:11024] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "adr6Ke1YwAZiXhQKLYqzGQAAAZc"]
[Sun Apr 12 09:49:30.756099 2026] [:error] [pid 25329:tid 25382] [client 20.199.110.126:11104] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "adr6KmdcIYsS8Iyaj11o4QAAAIQ"]
[Sun Apr 12 09:49:31.964592 2026] [:error] [pid 25328:tid 25398] [client 20.199.110.126:11211] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "adr6K8xUaQZxT-e0YsBCtAAAAFQ"]
[Sun Apr 12 09:49:33.067465 2026] [:error] [pid 60280:tid 60305] [client 20.199.110.126:11221] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "adr6LXBlLnDOYuIykkhSbwAAAdc"]
[Sun Apr 12 09:49:35.099999 2026] [:error] [pid 26599:tid 26604] [client 20.199.110.126:11239] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "adr6L3G89LXoQbk_rwB_VAAAAUI"]
[Sun Apr 12 09:49:36.121519 2026] [:error] [pid 26567:tid 26569] [client 20.199.110.126:11088] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "adr6MHhRpg6ptWFyFx0-HAAAAQA"]
[Sun Apr 12 09:49:39.312105 2026] [:error] [pid 60280:tid 60297] [client 20.199.110.126:11162] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "adr6M3BlLnDOYuIykkhSegAAAc8"]
[Sun Apr 12 09:49:43.549829 2026] [:error] [pid 60280:tid 60305] [client 20.199.110.126:11240] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "adr6N3BlLnDOYuIykkhSjwAAAdc"]
[Sun Apr 12 09:50:02.100870 2026] [proxy_fcgi:error] [pid 26599:tid 26622] [client 20.199.110.126:11247] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:50:16.920062 2026] [proxy_fcgi:error] [pid 26600:tid 26647] [client 20.199.110.126:11214] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:50:22.514940 2026] [proxy_fcgi:error] [pid 25437:tid 25455] [client 20.199.110.126:11042] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:50:42.330934 2026] [proxy_fcgi:error] [pid 26600:tid 26635] [client 20.199.110.126:11204] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:50:56.108654 2026] [:error] [pid 25328:tid 25380] [client 20.199.110.126:11139] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "adr6gMxUaQZxT-e0YsBDbAAAAEw"]
[Sun Apr 12 09:50:57.590382 2026] [:error] [pid 60280:tid 60282] [client 20.199.110.126:11136] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "adr6gXBlLnDOYuIykkhTeQAAAcA"]
[Sun Apr 12 09:50:59.365815 2026] [:error] [pid 25328:tid 25396] [client 20.199.110.126:11246] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "adr6g8xUaQZxT-e0YsBDbgAAAFM"]
[Sun Apr 12 09:51:01.500508 2026] [:error] [pid 26567:tid 26575] [client 20.199.110.126:11165] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "adr6hXhRpg6ptWFyFx0-iQAAAQY"]
[Sun Apr 12 09:51:02.277984 2026] [:error] [pid 60280:tid 60286] [client 20.199.110.126:11075] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adr6hnBlLnDOYuIykkhT5gAAAcQ"]
[Sun Apr 12 09:51:04.326133 2026] [:error] [pid 25328:tid 25387] [client 20.199.110.126:11164] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adr6iMxUaQZxT-e0YsBDeQAAAE8"]
[Sun Apr 12 09:51:07.623415 2026] [:error] [pid 25437:tid 25459] [client 20.199.110.126:11144] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adr6i3f97wYZje1ep_OY8wAAANQ"]
[Sun Apr 12 09:51:12.980653 2026] [:error] [pid 26567:tid 26586] [client 20.199.110.126:11147] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adr6kHhRpg6ptWFyFx0-lQAAARE"]
[Sun Apr 12 09:51:15.785737 2026] [:error] [pid 60280:tid 60294] [client 20.199.110.126:11260] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "adr6k3BlLnDOYuIykkhUFQAAAcw"]
[Sun Apr 12 09:51:17.621522 2026] [:error] [pid 25328:tid 25405] [client 20.199.110.126:11228] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "adr6lcxUaQZxT-e0YsBDqAAAAFc"]
[Sun Apr 12 09:51:19.220716 2026] [:error] [pid 26599:tid 26605] [client 20.199.110.126:11175] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "adr6l3G89LXoQbk_rwB_iwAAAUM"]
[Sun Apr 12 09:51:20.617811 2026] [:error] [pid 26599:tid 26619] [client 20.199.110.126:11137] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "adr6mHG89LXoQbk_rwB_jgAAAVE"]
[Sun Apr 12 09:51:22.115711 2026] [:error] [pid 25329:tid 25395] [client 20.199.110.126:11236] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adr6mmdcIYsS8Iyaj11pDwAAAIs"]
[Sun Apr 12 09:51:23.572915 2026] [:error] [pid 25437:tid 25441] [client 20.199.110.126:11238] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adr6m3f97wYZje1ep_OZBAAAAMI"]
[Sun Apr 12 09:51:24.528105 2026] [:error] [pid 60280:tid 60282] [client 20.199.110.126:11212] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adr6nHBlLnDOYuIykkhUIAAAAcA"]
[Sun Apr 12 09:51:25.261344 2026] [:error] [pid 25328:tid 25370] [client 20.199.110.126:11148] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adr6ncxUaQZxT-e0YsBDsgAAAEY"]
[Sun Apr 12 09:51:26.159025 2026] [:error] [pid 25437:tid 25453] [client 20.199.110.126:11156] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adr6nnf97wYZje1ep_OZEAAAAM4"]
[Sun Apr 12 09:51:27.293075 2026] [:error] [pid 25329:tid 25406] [client 20.199.110.126:11259] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adr6n2dcIYsS8Iyaj11pEgAAAJE"]
[Sun Apr 12 09:51:27.896363 2026] [:error] [pid 25329:tid 25392] [client 20.199.110.126:11138] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adr6n2dcIYsS8Iyaj11pEwAAAIk"]
[Sun Apr 12 09:51:29.120938 2026] [:error] [pid 60280:tid 60298] [client 20.199.110.126:11224] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adr6oXBlLnDOYuIykkhULQAAAdA"]
[Sun Apr 12 09:51:30.461874 2026] [:error] [pid 26567:tid 26575] [client 20.199.110.126:11143] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adr6onhRpg6ptWFyFx0-pgAAAQY"]
[Sun Apr 12 09:51:31.409894 2026] [:error] [pid 25327:tid 25351] [client 20.199.110.126:11191] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adr6oy6h2tZEVJo9JFJ5OgAAAA8"]
[Sun Apr 12 09:51:32.608097 2026] [:error] [pid 25328:tid 25368] [client 20.199.110.126:11149] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adr6pMxUaQZxT-e0YsBDwAAAAEQ"]
[Sun Apr 12 09:51:34.171532 2026] [:error] [pid 25328:tid 25366] [client 20.199.110.126:11155] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "adr6psxUaQZxT-e0YsBDygAAAEI"]
[Sun Apr 12 09:51:36.732362 2026] [:error] [pid 26567:tid 26593] [client 20.199.110.126:11250] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adr6qHhRpg6ptWFyFx0-uQAAARg"]
[Sun Apr 12 09:51:41.751665 2026] [:error] [pid 26600:tid 26633] [client 20.199.110.126:11200] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adr6re1YwAZiXhQKLYqznQAAAYQ"]
[Sun Apr 12 09:51:43.678534 2026] [:error] [pid 25327:tid 25357] [client 20.199.110.126:11215] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adr6ry6h2tZEVJo9JFJ5QwAAABU"]
[Sun Apr 12 09:51:44.942485 2026] [:error] [pid 60280:tid 60288] [client 20.199.110.126:11256] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adr6sHBlLnDOYuIykkhUTwAAAcY"]
[Sun Apr 12 09:51:45.712513 2026] [:error] [pid 26567:tid 26586] [client 20.199.110.126:11151] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adr6sXhRpg6ptWFyFx0-wQAAARE"]
[Sun Apr 12 09:51:46.384973 2026] [:error] [pid 26567:tid 26577] [client 20.199.110.126:11084] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adr6snhRpg6ptWFyFx0-wwAAAQg"]
[Sun Apr 12 09:51:47.178870 2026] [:error] [pid 26599:tid 26616] [client 20.199.110.126:11091] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adr6s3G89LXoQbk_rwB_ugAAAU4"]
[Sun Apr 12 09:51:47.907589 2026] [:error] [pid 25437:tid 25460] [client 20.199.110.126:11141] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adr6s3f97wYZje1ep_OZJwAAANU"]
[Sun Apr 12 09:51:49.060039 2026] [:error] [pid 26567:tid 26587] [client 20.199.110.126:11209] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "adr6tXhRpg6ptWFyFx0-xwAAARI"]
[Sun Apr 12 09:51:50.002505 2026] [:error] [pid 25437:tid 25441] [client 20.199.110.126:11108] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "adr6tnf97wYZje1ep_OZLwAAAMI"]
[Sun Apr 12 09:51:50.741844 2026] [:error] [pid 25329:tid 25415] [client 20.199.110.126:11083] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "adr6tmdcIYsS8Iyaj11pGwAAAJg"]
[Sun Apr 12 09:51:52.432717 2026] [:error] [pid 26567:tid 26576] [client 20.199.110.126:11109] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "adr6uHhRpg6ptWFyFx0-zAAAAQc"]
[Sun Apr 12 09:51:53.652226 2026] [:error] [pid 25329:tid 25406] [client 20.199.110.126:11145] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "adr6uWdcIYsS8Iyaj11pIgAAAJE"]
[Sun Apr 12 09:52:11.293567 2026] [:error] [pid 26599:tid 26626] [client 20.199.110.126:11255] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adr6y3G89LXoQbk_rwB_1AAAAVg"]
[Sun Apr 12 09:52:13.866385 2026] [:error] [pid 26599:tid 26609] [client 20.199.110.126:11222] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adr6zXG89LXoQbk_rwB_2AAAAUc"]
[Sun Apr 12 09:52:17.176463 2026] [:error] [pid 26599:tid 26617] [client 20.199.110.126:11212] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adr60XG89LXoQbk_rwB_3AAAAU8"]
[Sun Apr 12 09:52:18.859008 2026] [:error] [pid 26599:tid 26618] [client 20.199.110.126:11236] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adr60nG89LXoQbk_rwB_4AAAAVA"]
[Sun Apr 12 09:52:20.472330 2026] [:error] [pid 26599:tid 26616] [client 20.199.110.126:11193] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "adr61HG89LXoQbk_rwB_4gAAAU4"]
[Sun Apr 12 09:52:22.493932 2026] [:error] [pid 26600:tid 26645] [client 20.199.110.126:11022] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "adr61u1YwAZiXhQKLYqz0QAAAZA"]
[Sun Apr 12 09:52:25.368274 2026] [:error] [pid 60280:tid 60306] [client 20.199.110.126:11020] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "adr62XBlLnDOYuIykkhUgAAAAdg"]
[Sun Apr 12 09:52:27.352555 2026] [:error] [pid 26600:tid 26634] [client 20.199.110.126:11186] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "adr62-1YwAZiXhQKLYqz5gAAAYU"]
[Sun Apr 12 09:52:29.363149 2026] [:error] [pid 60280:tid 60297] [client 20.199.110.126:11187] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adr63XBlLnDOYuIykkhUgwAAAc8"]
[Sun Apr 12 09:52:33.857484 2026] [:error] [pid 25437:tid 25448] [client 20.199.110.126:11150] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adr64Xf97wYZje1ep_OZkwAAAMk"]
[Sun Apr 12 09:52:36.806259 2026] [:error] [pid 25328:tid 25372] [client 20.199.110.126:11079] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adr65MxUaQZxT-e0YsBESgAAAEc"]
[Sun Apr 12 09:52:37.437557 2026] [:error] [pid 25328:tid 25365] [client 20.199.110.126:11178] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "adr65cxUaQZxT-e0YsBETQAAAEE"]
[Sun Apr 12 09:52:39.665630 2026] [:error] [pid 25328:tid 25403] [client 20.199.110.126:11242] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adr658xUaQZxT-e0YsBEUgAAAFY"]
[Sun Apr 12 09:52:41.136519 2026] [:error] [pid 25437:tid 25439] [client 20.199.110.126:11082] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adr66Xf97wYZje1ep_OZogAAAMA"]
[Sun Apr 12 09:52:42.936798 2026] [:error] [pid 26567:tid 26584] [client 20.199.110.126:11217] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adr66nhRpg6ptWFyFx0_AQAAAQ8"]
[Sun Apr 12 09:52:47.643613 2026] [:error] [pid 25437:tid 25440] [client 20.199.110.126:11252] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "adr673f97wYZje1ep_OZvAAAAME"]
[Sun Apr 12 09:52:49.635888 2026] [:error] [pid 25437:tid 25450] [client 20.199.110.126:11241] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adr68Xf97wYZje1ep_OZwgAAAMs"]
[Sun Apr 12 09:52:51.541161 2026] [:error] [pid 26599:tid 26611] [client 20.199.110.126:11220] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adr683G89LXoQbk_rwCAFAAAAUk"]
[Sun Apr 12 09:52:53.264707 2026] [:error] [pid 26567:tid 26583] [client 20.199.110.126:11194] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adr69XhRpg6ptWFyFx0_CQAAAQ4"]
[Sun Apr 12 09:52:55.648968 2026] [:error] [pid 25437:tid 25463] [client 20.199.110.126:11201] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "adr693f97wYZje1ep_OZzwAAANg"]
[Sun Apr 12 09:52:56.598576 2026] [:error] [pid 26599:tid 26604] [client 20.199.110.126:11230] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adr6-HG89LXoQbk_rwCAJAAAAUI"]
[Sun Apr 12 09:52:59.492039 2026] [:error] [pid 26600:tid 26645] [client 20.199.110.126:11115] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adr6--1YwAZiXhQKLYq0EgAAAZA"]
[Sun Apr 12 09:53:02.282626 2026] [:error] [pid 25328:tid 25377] [client 20.199.110.126:11120] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adr6_sxUaQZxT-e0YsBEeAAAAEo"]
[Sun Apr 12 09:53:04.436043 2026] [:error] [pid 60280:tid 60287] [client 20.199.110.126:11185] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adr7AHBlLnDOYuIykkhUsgAAAcU"]
[Sun Apr 12 09:53:06.869930 2026] [:error] [pid 60280:tid 60306] [client 20.199.110.126:11243] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adr7AnBlLnDOYuIykkhUvgAAAdg"]
[Sun Apr 12 09:53:18.806690 2026] [:error] [pid 60280:tid 60290] [client 20.199.110.126:11261] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "adr7DnBlLnDOYuIykkhU-gAAAcg"]
[Sun Apr 12 09:53:19.793828 2026] [:error] [pid 26600:tid 26650] [client 20.199.110.126:11263] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "adr7D-1YwAZiXhQKLYq0IwAAAZU"]
[Sun Apr 12 09:53:21.196871 2026] [:error] [pid 26567:tid 26590] [client 20.199.110.126:11025] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "adr7EXhRpg6ptWFyFx0_GgAAARU"]
[Sun Apr 12 09:53:21.937649 2026] [:error] [pid 25328:tid 25366] [client 20.199.110.126:11234] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "adr7EcxUaQZxT-e0YsBEkwAAAEI"]
[Sun Apr 12 09:53:22.744318 2026] [:error] [pid 26600:tid 26648] [client 20.199.110.126:11189] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adr7Eu1YwAZiXhQKLYq0JwAAAZM"]
[Sun Apr 12 09:53:24.326379 2026] [:error] [pid 25437:tid 25449] [client 20.199.110.126:11105] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adr7FHf97wYZje1ep_OZ6wAAAMo"]
[Sun Apr 12 09:53:25.370999 2026] [:error] [pid 26600:tid 26650] [client 20.199.110.126:11218] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adr7Fe1YwAZiXhQKLYq0LgAAAZU"]
[Sun Apr 12 09:53:27.088311 2026] [:error] [pid 25328:tid 25370] [client 20.199.110.126:11166] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adr7F8xUaQZxT-e0YsBEmQAAAEY"]
[Sun Apr 12 09:53:29.711063 2026] [:error] [pid 25437:tid 25452] [client 20.199.110.126:11219] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adr7GXf97wYZje1ep_OZ9wAAAM0"]
[Sun Apr 12 09:53:32.211071 2026] [:error] [pid 25437:tid 25461] [client 20.199.110.126:11118] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adr7HHf97wYZje1ep_OZ_gAAANY"]
[Sun Apr 12 09:53:33.662122 2026] [:error] [pid 60280:tid 60306] [client 20.199.110.126:11244] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adr7HXBlLnDOYuIykkhVHwAAAdg"]
[Sun Apr 12 09:53:35.808763 2026] [:error] [pid 25437:tid 25460] [client 20.199.110.126:11192] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adr7H3f97wYZje1ep_OaBAAAANU"]
[Sun Apr 12 09:53:37.547126 2026] [:error] [pid 60280:tid 60292] [client 20.199.110.126:11232] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adr7IXBlLnDOYuIykkhVKQAAAco"]
[Sun Apr 12 09:53:38.646563 2026] [:error] [pid 25327:tid 25336] [client 20.199.110.126:11248] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adr7Ii6h2tZEVJo9JFJ5ogAAAAA"]
[Sun Apr 12 09:53:40.670837 2026] [:error] [pid 26600:tid 26633] [client 20.199.110.126:11173] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adr7JO1YwAZiXhQKLYq0OAAAAYQ"]
[Sun Apr 12 09:53:41.931466 2026] [:error] [pid 60280:tid 60289] [client 20.199.110.126:11090] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adr7JXBlLnDOYuIykkhVMAAAAcc"]
[Sun Apr 12 09:53:43.575999 2026] [:error] [pid 26600:tid 26634] [client 20.199.110.126:11225] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adr7J-1YwAZiXhQKLYq0QAAAAYU"]
[Sun Apr 12 09:53:45.192546 2026] [:error] [pid 25329:tid 25382] [client 20.199.110.126:11249] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adr7KWdcIYsS8Iyaj11paAAAAIQ"]
[Sun Apr 12 09:53:45.883832 2026] [:error] [pid 60280:tid 60293] [client 20.199.110.126:11036] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adr7KXBlLnDOYuIykkhVRwAAAcs"]
[Sun Apr 12 09:53:48.149368 2026] [:error] [pid 26600:tid 26629] [client 20.199.110.126:11161] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adr7LO1YwAZiXhQKLYq0RgAAAYA"]
[Sun Apr 12 09:53:49.227834 2026] [:error] [pid 25327:tid 25353] [client 20.199.110.126:11227] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adr7LS6h2tZEVJo9JFJ5rgAAABE"]
[Sun Apr 12 09:53:50.604056 2026] [:error] [pid 26599:tid 26613] [client 20.199.110.126:11207] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adr7LnG89LXoQbk_rwCAOwAAAUs"]
[Sun Apr 12 09:53:52.360519 2026] [:error] [pid 25437:tid 25455] [client 20.199.110.126:11169] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adr7MHf97wYZje1ep_OaIQAAANA"]
[Sun Apr 12 09:53:53.854535 2026] [:error] [pid 26599:tid 26617] [client 20.199.110.126:11153] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adr7MXG89LXoQbk_rwCAPQAAAU8"]
[Sun Apr 12 09:53:54.628084 2026] [:error] [pid 60280:tid 60296] [client 20.199.110.126:11094] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adr7MnBlLnDOYuIykkhVWQAAAc4"]
[Sun Apr 12 09:53:55.371252 2026] [:error] [pid 60280:tid 60287] [client 20.199.110.126:11247] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adr7M3BlLnDOYuIykkhVXAAAAcU"]
[Sun Apr 12 09:53:56.281774 2026] [:error] [pid 25328:tid 25368] [client 20.199.110.126:11011] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adr7NMxUaQZxT-e0YsBEtQAAAEQ"]
[Sun Apr 12 09:53:57.856355 2026] [:error] [pid 25328:tid 25372] [client 20.199.110.126:11102] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "adr7NcxUaQZxT-e0YsBEvQAAAEc"]
[Sun Apr 12 09:53:59.103296 2026] [:error] [pid 25328:tid 25365] [client 20.199.110.126:11251] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adr7N8xUaQZxT-e0YsBEwgAAAEE"]
[Sun Apr 12 09:54:00.017838 2026] [:error] [pid 26599:tid 26616] [client 20.199.110.126:11254] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adr7OHG89LXoQbk_rwCAQgAAAU4"]
[Sun Apr 12 09:54:01.230780 2026] [:error] [pid 25328:tid 25364] [client 20.199.110.126:11098] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adr7OcxUaQZxT-e0YsBEygAAAEA"]
[Sun Apr 12 09:54:03.403853 2026] [:error] [pid 26600:tid 26636] [client 20.199.110.126:11216] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adr7O-1YwAZiXhQKLYq0SQAAAYc"]
[Sun Apr 12 09:54:05.717131 2026] [:error] [pid 26600:tid 26638] [client 20.199.110.126:11237] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adr7Pe1YwAZiXhQKLYq0SwAAAYk"]
[Sun Apr 12 09:54:08.209513 2026] [:error] [pid 25329:tid 25390] [client 20.199.110.126:11009] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adr7QGdcIYsS8Iyaj11peQAAAIg"]
[Sun Apr 12 09:54:11.440856 2026] [:error] [pid 26600:tid 26632] [client 20.199.110.126:11202] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adr7Q-1YwAZiXhQKLYq0XAAAAYM"]
[Sun Apr 12 09:54:12.537714 2026] [:error] [pid 25327:tid 25339] [client 20.199.110.126:11198] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adr7RC6h2tZEVJo9JFJ5xQAAAAM"]
[Sun Apr 12 09:54:14.870521 2026] [:error] [pid 26599:tid 26609] [client 20.199.110.126:11211] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adr7RnG89LXoQbk_rwCATwAAAUc"]
[Sun Apr 12 09:54:28.183404 2026] [:error] [pid 25328:tid 25401] [client 20.199.110.126:11153] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "adr7VMxUaQZxT-e0YsBE8gAAAFU"]
[Sun Apr 12 09:54:29.943002 2026] [:error] [pid 26567:tid 26581] [client 20.199.110.126:11217] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "adr7VXhRpg6ptWFyFx0_ZwAAAQw"]
[Sun Apr 12 09:54:31.896154 2026] [:error] [pid 60280:tid 60294] [client 20.199.110.126:11150] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "adr7V3BlLnDOYuIykkhVagAAAcw"]
[Sun Apr 12 09:54:33.304813 2026] [:error] [pid 26600:tid 26630] [client 20.199.110.126:11146] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "adr7We1YwAZiXhQKLYq0gQAAAYE"]
[Sun Apr 12 09:54:34.078463 2026] [:error] [pid 25328:tid 25364] [client 20.199.110.126:11257] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "adr7WsxUaQZxT-e0YsBE-AAAAEA"]
[Sun Apr 12 09:54:35.698573 2026] [:error] [pid 26600:tid 26650] [client 20.199.110.126:11168] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "adr7W-1YwAZiXhQKLYq0jAAAAZU"]
[Sun Apr 12 09:54:37.632721 2026] [:error] [pid 26567:tid 26586] [client 20.199.110.126:11121] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "adr7XXhRpg6ptWFyFx0_dQAAARE"]
[Sun Apr 12 09:54:40.355008 2026] [:error] [pid 26599:tid 26613] [client 20.199.110.126:11177] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "adr7YHG89LXoQbk_rwCAbAAAAUs"]
[Sun Apr 12 09:54:43.105747 2026] [:error] [pid 25329:tid 25397] [client 20.199.110.126:11146] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adr7Y2dcIYsS8Iyaj11pjgAAAIw"]
[Sun Apr 12 09:54:44.214209 2026] [:error] [pid 26599:tid 26612] [client 20.199.110.126:11012] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adr7ZHG89LXoQbk_rwCAcgAAAUo"]
[Sun Apr 12 09:54:45.559949 2026] [:error] [pid 25328:tid 25370] [client 20.199.110.126:11223] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adr7ZcxUaQZxT-e0YsBFAAAAAEY"]
[Sun Apr 12 09:54:46.689755 2026] [:error] [pid 60280:tid 60284] [client 20.199.110.126:11076] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adr7ZnBlLnDOYuIykkhVdAAAAcI"]
[Sun Apr 12 09:54:49.639661 2026] [:error] [pid 26600:tid 26649] [client 20.199.110.126:11162] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adr7ae1YwAZiXhQKLYq0sAAAAZQ"]
[Sun Apr 12 09:54:53.794456 2026] [:error] [pid 26600:tid 26651] [client 20.199.110.126:11231] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adr7be1YwAZiXhQKLYq0uQAAAZY"]
[Sun Apr 12 09:54:56.621436 2026] [:error] [pid 25328:tid 25377] [client 20.199.110.126:11240] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adr7cMxUaQZxT-e0YsBFDQAAAEo"]
[Sun Apr 12 09:55:11.666568 2026] [:error] [pid 60280:tid 60298] [client 20.199.110.126:11116] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adr7f3BlLnDOYuIykkhVlwAAAdA"]
[Sun Apr 12 09:55:12.944436 2026] [:error] [pid 60280:tid 60294] [client 20.199.110.126:11221] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adr7gHBlLnDOYuIykkhVpAAAAcw"]
[Sun Apr 12 09:55:13.599079 2026] [:error] [pid 60280:tid 60287] [client 20.199.110.126:11255] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adr7gXBlLnDOYuIykkhVqQAAAcU"]
[Sun Apr 12 09:55:14.655408 2026] [:error] [pid 60280:tid 60306] [client 20.199.110.126:11122] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "adr7gnBlLnDOYuIykkhVtQAAAdg"]
[Sun Apr 12 09:55:17.115341 2026] [:error] [pid 26599:tid 26608] [client 20.199.110.126:11170] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "adr7hXG89LXoQbk_rwCAgQAAAUY"]
[Sun Apr 12 09:55:20.877055 2026] [:error] [pid 26567:tid 26585] [client 20.199.110.126:11214] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "adr7iHhRpg6ptWFyFx0_qwAAARA"]
[Sun Apr 12 09:55:22.611233 2026] [:error] [pid 25328:tid 25398] [client 20.199.110.126:11246] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "adr7isxUaQZxT-e0YsBFIAAAAFQ"]
[Sun Apr 12 09:55:23.677033 2026] [:error] [pid 25328:tid 25366] [client 20.199.110.126:11235] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "adr7i8xUaQZxT-e0YsBFIwAAAEI"]
[Sun Apr 12 09:55:25.499412 2026] [:error] [pid 25328:tid 25405] [client 20.199.110.126:11206] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "adr7jcxUaQZxT-e0YsBFKwAAAFc"]
[Sun Apr 12 09:55:39.484267 2026] [:error] [pid 25437:tid 25439] [client 20.199.110.126:11047] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adr7m3f97wYZje1ep_OadQAAAMA"]
[Sun Apr 12 09:55:41.775742 2026] [:error] [pid 25329:tid 25393] [client 20.199.110.126:11224] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adr7nWdcIYsS8Iyaj11prQAAAIo"]
[Sun Apr 12 09:55:43.733096 2026] [:error] [pid 25329:tid 25381] [client 20.199.110.126:11199] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adr7n2dcIYsS8Iyaj11prgAAAIM"]
[Sun Apr 12 09:55:46.074886 2026] [:error] [pid 25437:tid 25456] [client 20.199.110.126:11239] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adr7onf97wYZje1ep_OagwAAANE"]
[Sun Apr 12 09:55:47.903598 2026] [:error] [pid 26567:tid 26586] [client 20.199.110.126:11184] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adr7o3hRpg6ptWFyFx0_ywAAARE"]
[Sun Apr 12 09:55:50.059297 2026] [:error] [pid 25437:tid 25462] [client 20.199.110.126:11238] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adr7pnf97wYZje1ep_OaiwAAANc"]
[Sun Apr 12 09:55:51.312364 2026] [:error] [pid 25329:tid 25406] [client 20.199.110.126:11154] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adr7p2dcIYsS8Iyaj11psAAAAJE"]
[Sun Apr 12 09:55:52.641077 2026] [:error] [pid 26567:tid 26572] [client 20.199.110.126:11092] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adr7qHhRpg6ptWFyFx0_zgAAAQM"]
[Sun Apr 12 09:55:54.092218 2026] [:error] [pid 60280:tid 60304] [client 20.199.110.126:11175] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adr7qnBlLnDOYuIykkhV8AAAAdY"]
[Sun Apr 12 09:55:56.608925 2026] [:error] [pid 25327:tid 25337] [client 20.199.110.126:11200] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adr7rC6h2tZEVJo9JFJ6HQAAAAE"]
[Sun Apr 12 09:55:57.771944 2026] [:error] [pid 26600:tid 26639] [client 20.199.110.126:11253] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adr7re1YwAZiXhQKLYq09QAAAYo"]
[Sun Apr 12 09:55:58.407038 2026] [:error] [pid 26600:tid 26652] [client 20.199.110.126:11226] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "adr7ru1YwAZiXhQKLYq0-AAAAZc"]
[Sun Apr 12 09:55:59.734954 2026] [:error] [pid 25328:tid 25379] [client 20.199.110.126:11147] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adr7r8xUaQZxT-e0YsBFcgAAAEs"]
[Sun Apr 12 09:56:00.894410 2026] [:error] [pid 26567:tid 26581] [client 20.199.110.126:11130] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adr7sHhRpg6ptWFyFx0_2gAAAQw"]
[Sun Apr 12 09:56:03.957279 2026] [:error] [pid 26600:tid 26635] [client 20.199.110.126:11113] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adr7s-1YwAZiXhQKLYq1AAAAAYY"]
[Sun Apr 12 09:56:06.050419 2026] [:error] [pid 25327:tid 25356] [client 20.199.110.126:11259] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adr7ti6h2tZEVJo9JFJ6JwAAABQ"]
[Sun Apr 12 09:56:07.221782 2026] [:error] [pid 26599:tid 26608] [client 20.199.110.126:11205] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adr7t3G89LXoQbk_rwCAqgAAAUY"]
[Sun Apr 12 09:56:09.003637 2026] [:error] [pid 25327:tid 25346] [client 20.199.110.126:11137] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adr7uS6h2tZEVJo9JFJ6KwAAAAo"]
[Sun Apr 12 09:56:09.860760 2026] [:error] [pid 60280:tid 60305] [client 20.199.110.126:11180] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adr7uXBlLnDOYuIykkhWBwAAAdc"]
[Sun Apr 12 09:56:11.148194 2026] [:error] [pid 60280:tid 60289] [client 20.199.110.126:11155] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "adr7u3BlLnDOYuIykkhWCQAAAcc"]
[Sun Apr 12 09:56:12.457713 2026] [:error] [pid 25329:tid 25381] [client 20.199.110.126:11036] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adr7vGdcIYsS8Iyaj11pvAAAAIM"]
[Sun Apr 12 09:56:13.626410 2026] [:error] [pid 60280:tid 60301] [client 20.199.110.126:11228] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adr7vXBlLnDOYuIykkhWCgAAAdM"]
[Sun Apr 12 09:56:15.657869 2026] [:error] [pid 25327:tid 25344] [client 20.199.110.126:11149] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adr7vy6h2tZEVJo9JFJ6LwAAAAg"]
[Sun Apr 12 09:56:16.296107 2026] [:error] [pid 60280:tid 60292] [client 20.199.110.126:11233] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "adr7wHBlLnDOYuIykkhWGgAAAco"]
[Sun Apr 12 09:56:17.979085 2026] [:error] [pid 25437:tid 25455] [client 20.199.110.126:11084] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adr7wXf97wYZje1ep_OalwAAANA"]
[Sun Apr 12 09:56:19.969840 2026] [:error] [pid 25329:tid 25374] [client 20.199.110.126:11157] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adr7w2dcIYsS8Iyaj11pvwAAAIA"]
[Sun Apr 12 09:56:21.725462 2026] [:error] [pid 25329:tid 25411] [client 20.199.110.126:11140] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adr7xWdcIYsS8Iyaj11pwwAAAJQ"]
[Sun Apr 12 09:56:23.340951 2026] [:error] [pid 25328:tid 25373] [client 20.199.110.126:11208] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "adr7x8xUaQZxT-e0YsBGPAAAAEg"]
[Sun Apr 12 09:56:24.845667 2026] [:error] [pid 25329:tid 25397] [client 20.199.110.126:11174] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adr7yGdcIYsS8Iyaj11pxwAAAIw"]
[Sun Apr 12 09:56:27.207640 2026] [:error] [pid 60280:tid 60282] [client 20.199.110.126:11250] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adr7y3BlLnDOYuIykkhWSAAAAcA"]
[Sun Apr 12 09:56:29.008863 2026] [:error] [pid 60280:tid 60288] [client 20.199.110.126:11014] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adr7zXBlLnDOYuIykkhWUwAAAcY"]
[Sun Apr 12 09:56:30.130688 2026] [:error] [pid 60280:tid 60284] [client 20.199.110.126:11163] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adr7znBlLnDOYuIykkhWWAAAAcI"]
[Sun Apr 12 09:56:30.732554 2026] [:error] [pid 26600:tid 26633] [client 20.199.110.126:11193] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adr7zu1YwAZiXhQKLYq1KwAAAYQ"]
[Sun Apr 12 09:56:31.850776 2026] [:error] [pid 60280:tid 60302] [client 20.199.110.126:11156] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adr7z3BlLnDOYuIykkhWXgAAAdQ"]
[Sun Apr 12 09:56:33.144579 2026] [:error] [pid 60280:tid 60288] [client 20.199.110.126:11023] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adr70XBlLnDOYuIykkhWXwAAAcY"]
[Sun Apr 12 09:56:35.386694 2026] [:error] [pid 25329:tid 25404] [client 20.199.110.126:11010] [client 20.199.110.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "adr702dcIYsS8Iyaj11pygAAAJA"]
[Sun Apr 12 09:57:05.465668 2026] [proxy_fcgi:error] [pid 60280:tid 60290] [client 20.199.110.126:11238] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:57:21.271511 2026] [proxy_fcgi:error] [pid 26567:tid 26593] [client 20.199.110.126:11128] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:57:24.530424 2026] [proxy_fcgi:error] [pid 25329:tid 25412] [client 20.199.110.126:11143] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:57:42.155382 2026] [proxy_fcgi:error] [pid 26600:tid 26653] [client 20.199.110.126:11080] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 09:57:47.583998 2026] [proxy_fcgi:error] [pid 60280:tid 60305] [client 20.199.110.126:11207] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:19:17.661557 2026] [proxy_fcgi:error] [pid 25328:tid 25394] [client 20.111.63.225:27931] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:19:33.042138 2026] [proxy_fcgi:error] [pid 25329:tid 25404] [client 20.111.63.225:31366] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:19:39.229815 2026] [proxy_fcgi:error] [pid 25437:tid 25451] [client 20.111.63.225:27960] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:19:51.354990 2026] [proxy_fcgi:error] [pid 25329:tid 25414] [client 20.111.63.225:17063] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:19:52.810353 2026] [proxy_fcgi:error] [pid 60280:tid 60283] [client 20.111.63.225:50531] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:20:01.460872 2026] [:error] [pid 60280:tid 60295] [client 20.111.63.225:11142] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adsrgXBlLnDOYuIykkjFPQAAAc0"]
[Sun Apr 12 13:20:02.775683 2026] [:error] [pid 25327:tid 25344] [client 20.111.63.225:22433] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adsrgi6h2tZEVJo9JFKdjgAAAAg"]
[Sun Apr 12 13:20:03.802295 2026] [:error] [pid 25437:tid 25439] [client 20.111.63.225:10990] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adsrg3f97wYZje1ep_PalwAAAMA"]
[Sun Apr 12 13:20:06.853427 2026] [:error] [pid 25329:tid 25399] [client 20.111.63.225:13763] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "adsrhmdcIYsS8Iyaj12D3AAAAI0"]
[Sun Apr 12 13:20:07.647782 2026] [:error] [pid 26599:tid 26614] [client 20.111.63.225:13106] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adsrh3G89LXoQbk_rwCd9gAAAUw"]
[Sun Apr 12 13:20:10.549216 2026] [:error] [pid 25328:tid 25394] [client 20.111.63.225:11936] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adsrisxUaQZxT-e0YsCaZwAAAFI"]
[Sun Apr 12 13:20:11.949290 2026] [:error] [pid 26600:tid 26629] [client 20.111.63.225:11434] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adsri-1YwAZiXhQKLYrniAAAAYA"]
[Sun Apr 12 13:20:13.509790 2026] [:error] [pid 26599:tid 26610] [client 20.111.63.225:2160] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "adsrjXG89LXoQbk_rwCd-wAAAUg"]
[Sun Apr 12 13:20:14.733983 2026] [:error] [pid 25328:tid 25366] [client 20.111.63.225:15549] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adsrjsxUaQZxT-e0YsCaawAAAEI"]
[Sun Apr 12 13:20:16.587416 2026] [:error] [pid 60280:tid 60288] [client 20.111.63.225:27034] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adsrkHBlLnDOYuIykkjFTQAAAcY"]
[Sun Apr 12 13:20:17.414905 2026] [:error] [pid 60280:tid 60301] [client 20.111.63.225:32370] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adsrkXBlLnDOYuIykkjFTwAAAdM"]
[Sun Apr 12 13:20:18.310993 2026] [:error] [pid 25329:tid 25376] [client 20.111.63.225:23518] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "adsrkmdcIYsS8Iyaj12D3gAAAIE"]
[Sun Apr 12 13:20:19.069810 2026] [:error] [pid 26600:tid 26633] [client 20.111.63.225:18633] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adsrk-1YwAZiXhQKLYrnlAAAAYQ"]
[Sun Apr 12 13:20:22.245658 2026] [:error] [pid 25328:tid 25387] [client 20.111.63.225:14496] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adsrlsxUaQZxT-e0YsCadAAAAE8"]
[Sun Apr 12 13:20:23.030281 2026] [:error] [pid 60280:tid 60285] [client 20.111.63.225:13963] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adsrl3BlLnDOYuIykkjFXQAAAcM"]
[Sun Apr 12 13:20:23.964192 2026] [:error] [pid 60280:tid 60300] [client 20.111.63.225:11751] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wswer1.php"] [unique_id "adsrl3BlLnDOYuIykkjFZAAAAdI"]
[Sun Apr 12 13:20:24.640644 2026] [:error] [pid 60280:tid 60289] [client 20.111.63.225:43601] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "adsrmHBlLnDOYuIykkjFZgAAAcc"]
[Sun Apr 12 13:20:26.089454 2026] [:error] [pid 60280:tid 60285] [client 20.111.63.225:12454] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "adsrmnBlLnDOYuIykkjFbAAAAcM"]
[Sun Apr 12 13:20:27.182166 2026] [:error] [pid 26600:tid 26645] [client 20.111.63.225:17523] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "adsrm-1YwAZiXhQKLYrnmQAAAZA"]
[Sun Apr 12 13:20:29.572913 2026] [:error] [pid 25327:tid 25343] [client 20.111.63.225:43647] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "adsrnS6h2tZEVJo9JFKdmgAAAAc"]
[Sun Apr 12 13:20:30.769222 2026] [:error] [pid 25329:tid 25381] [client 20.111.63.225:10884] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adsrnmdcIYsS8Iyaj12D4gAAAIM"]
[Sun Apr 12 13:20:33.507438 2026] [:error] [pid 25328:tid 25396] [client 20.111.63.225:13965] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adsrocxUaQZxT-e0YsCafQAAAFM"]
[Sun Apr 12 13:20:35.057822 2026] [:error] [pid 25328:tid 25368] [client 20.111.63.225:12446] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adsro8xUaQZxT-e0YsCahAAAAEQ"]
[Sun Apr 12 13:20:37.101100 2026] [:error] [pid 60280:tid 60294] [client 20.111.63.225:31846] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "adsrpXBlLnDOYuIykkjFdwAAAcw"]
[Sun Apr 12 13:20:38.633174 2026] [:error] [pid 60280:tid 60290] [client 20.111.63.225:2101] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "adsrpnBlLnDOYuIykkjFggAAAcg"]
[Sun Apr 12 13:20:39.498952 2026] [:error] [pid 60280:tid 60296] [client 20.111.63.225:2438] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "adsrp3BlLnDOYuIykkjFhgAAAc4"]
[Sun Apr 12 13:20:41.627985 2026] [:error] [pid 25328:tid 25370] [client 20.111.63.225:31079] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "adsrqcxUaQZxT-e0YsCaiwAAAEY"]
[Sun Apr 12 13:20:42.869267 2026] [:error] [pid 25327:tid 25354] [client 20.111.63.225:45773] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "adsrqi6h2tZEVJo9JFKdoQAAABI"]
[Sun Apr 12 13:20:44.283382 2026] [:error] [pid 25328:tid 25401] [client 20.111.63.225:25472] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adsrrMxUaQZxT-e0YsCakQAAAFU"]
[Sun Apr 12 13:20:45.162929 2026] [:error] [pid 26567:tid 26590] [client 20.111.63.225:13552] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adsrrXhRpg6ptWFyFx1oYQAAARU"]
[Sun Apr 12 13:20:46.161092 2026] [:error] [pid 25328:tid 25377] [client 20.111.63.225:33513] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adsrrsxUaQZxT-e0YsCamwAAAEo"]
[Sun Apr 12 13:20:47.399133 2026] [:error] [pid 26599:tid 26614] [client 20.111.63.225:10932] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "adsrr3G89LXoQbk_rwCeBAAAAUw"]
[Sun Apr 12 13:20:48.219075 2026] [:error] [pid 25329:tid 25404] [client 20.111.63.225:33492] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-turn.php"] [unique_id "adsrsGdcIYsS8Iyaj12D6wAAAJA"]
[Sun Apr 12 13:20:50.799659 2026] [:error] [pid 25328:tid 25383] [client 20.111.63.225:13504] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-turn.php"] [unique_id "adsrssxUaQZxT-e0YsCarQAAAE0"]
[Sun Apr 12 13:20:51.724620 2026] [:error] [pid 26600:tid 26649] [client 20.111.63.225:25498] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-turn.php"] [unique_id "adsrs-1YwAZiXhQKLYrnoQAAAZQ"]
[Sun Apr 12 13:20:52.409022 2026] [:error] [pid 25328:tid 25379] [client 20.111.63.225:28525] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-turn.php"] [unique_id "adsrtMxUaQZxT-e0YsCatwAAAEs"]
[Sun Apr 12 13:20:54.106950 2026] [:error] [pid 25328:tid 25366] [client 20.111.63.225:18928] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adsrtsxUaQZxT-e0YsCavwAAAEI"]
[Sun Apr 12 13:20:55.495159 2026] [:error] [pid 25437:tid 25441] [client 20.111.63.225:31856] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adsrt3f97wYZje1ep_PatwAAAMI"]
[Sun Apr 12 13:20:57.054782 2026] [:error] [pid 26599:tid 26610] [client 20.111.63.225:23489] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adsruXG89LXoQbk_rwCeBwAAAUg"]
[Sun Apr 12 13:20:58.574368 2026] [:error] [pid 60280:tid 60298] [client 20.111.63.225:13563] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "adsrunBlLnDOYuIykkjFkAAAAdA"]
[Sun Apr 12 13:21:14.577646 2026] [proxy_fcgi:error] [pid 25328:tid 25375] [client 20.111.63.225:2070] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:21:23.567351 2026] [:error] [pid 26600:tid 26643] [client 20.111.63.225:30752] [client 20.111.63.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adsr0-1YwAZiXhQKLYrnvgAAAY4"]
[Sun Apr 12 13:21:39.934851 2026] [proxy_fcgi:error] [pid 25437:tid 25449] [client 20.111.63.225:30019] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:21:40.167867 2026] [:error] [pid 25328:tid 25389] [client 20.111.63.225:30063] [client 20.111.63.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "adsr5MxUaQZxT-e0YsCbUgAAAFA"]
[Sun Apr 12 13:21:55.751727 2026] [proxy_fcgi:error] [pid 26600:tid 26653] [client 20.111.63.225:15105] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:21:56.319521 2026] [proxy_fcgi:error] [pid 25328:tid 25364] [client 20.111.63.225:30024] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 13:22:07.195958 2026] [:error] [pid 25437:tid 25443] [client 20.111.63.225:25128] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "adsr_3f97wYZje1ep_Pa-wAAAMQ"]
[Sun Apr 12 13:22:10.111456 2026] [:error] [pid 60280:tid 60284] [client 20.111.63.225:29622] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "adssAnBlLnDOYuIykkjGLwAAAcI"]
[Sun Apr 12 13:22:14.059484 2026] [:error] [pid 25327:tid 25341] [client 20.111.63.225:14729] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "adssBi6h2tZEVJo9JFKd0AAAAAU"]
[Sun Apr 12 13:22:14.824785 2026] [:error] [pid 26567:tid 26592] [client 20.111.63.225:29275] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "adssBnhRpg6ptWFyFx1ojQAAARc"]
[Sun Apr 12 13:22:15.815522 2026] [:error] [pid 60280:tid 60300] [client 20.111.63.225:25143] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "adssB3BlLnDOYuIykkjGOwAAAdI"]
[Sun Apr 12 13:22:16.607594 2026] [:error] [pid 26567:tid 26593] [client 20.111.63.225:14769] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "adssCHhRpg6ptWFyFx1okAAAARg"]
[Sun Apr 12 13:22:17.605556 2026] [:error] [pid 60280:tid 60306] [client 20.111.63.225:16707] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "adssCXBlLnDOYuIykkjGSQAAAdg"]
[Sun Apr 12 13:22:18.455607 2026] [:error] [pid 25437:tid 25441] [client 20.111.63.225:14720] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "adssCnf97wYZje1ep_Pa_gAAAMI"]
[Sun Apr 12 13:22:19.380353 2026] [:error] [pid 60280:tid 60288] [client 20.111.63.225:14741] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/riz.php"] [unique_id "adssC3BlLnDOYuIykkjGUwAAAcY"]
[Sun Apr 12 13:22:20.784115 2026] [:error] [pid 60280:tid 60285] [client 20.111.63.225:2733] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/riz.php"] [unique_id "adssDHBlLnDOYuIykkjGWgAAAcM"]
[Sun Apr 12 13:22:22.003384 2026] [:error] [pid 26599:tid 26613] [client 20.111.63.225:12732] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/riz.php"] [unique_id "adssDnG89LXoQbk_rwCeKAAAAUs"]
[Sun Apr 12 13:22:26.829823 2026] [:error] [pid 26600:tid 26635] [client 20.111.63.225:32852] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/riz.php"] [unique_id "adssEu1YwAZiXhQKLYroCgAAAYY"]
[Sun Apr 12 13:22:28.898971 2026] [:error] [pid 60280:tid 60288] [client 20.111.63.225:14042] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "adssFHBlLnDOYuIykkjGcgAAAcY"]
[Sun Apr 12 13:22:31.674471 2026] [:error] [pid 26600:tid 26636] [client 20.111.63.225:12673] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "adssF-1YwAZiXhQKLYroDQAAAYc"]
[Sun Apr 12 13:22:33.267869 2026] [:error] [pid 25328:tid 25391] [client 20.111.63.225:14027] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "adssGcxUaQZxT-e0YsCboAAAAFE"]
[Sun Apr 12 13:22:34.032602 2026] [:error] [pid 60280:tid 60293] [client 20.111.63.225:13819] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "adssGnBlLnDOYuIykkjGiQAAAcs"]
[Sun Apr 12 13:22:35.310948 2026] [:error] [pid 60280:tid 60304] [client 20.111.63.225:14767] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/om.php"] [unique_id "adssG3BlLnDOYuIykkjGkQAAAdY"]
[Sun Apr 12 13:22:39.014096 2026] [:error] [pid 60280:tid 60283] [client 20.111.63.225:14750] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/om.php"] [unique_id "adssH3BlLnDOYuIykkjGmgAAAcE"]
[Sun Apr 12 13:22:39.647229 2026] [:error] [pid 60280:tid 60297] [client 20.111.63.225:13790] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/om.php"] [unique_id "adssH3BlLnDOYuIykkjGngAAAc8"]
[Sun Apr 12 13:22:40.926997 2026] [:error] [pid 60280:tid 60302] [client 20.111.63.225:13808] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/om.php"] [unique_id "adssIHBlLnDOYuIykkjGpQAAAdQ"]
[Sun Apr 12 13:22:42.084022 2026] [:error] [pid 25437:tid 25445] [client 20.111.63.225:14730] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "adssInf97wYZje1ep_PbGgAAAMY"]
[Sun Apr 12 13:22:43.464272 2026] [:error] [pid 60280:tid 60286] [client 20.111.63.225:15001] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "adssI3BlLnDOYuIykkjGrwAAAcQ"]
[Sun Apr 12 13:22:44.317168 2026] [:error] [pid 26599:tid 26619] [client 20.111.63.225:10978] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "adssJHG89LXoQbk_rwCeNwAAAVE"]
[Sun Apr 12 13:22:45.006602 2026] [:error] [pid 25328:tid 25408] [client 20.111.63.225:14756] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "adssJcxUaQZxT-e0YsCbsgAAAFg"]
[Sun Apr 12 13:22:45.931447 2026] [:error] [pid 25328:tid 25377] [client 20.111.63.225:13797] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adssJcxUaQZxT-e0YsCbtgAAAEo"]
[Sun Apr 12 13:22:48.037532 2026] [:error] [pid 25328:tid 25368] [client 20.111.63.225:31793] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adssKMxUaQZxT-e0YsCbvAAAAEQ"]
[Sun Apr 12 13:22:50.449678 2026] [:error] [pid 25327:tid 25340] [client 20.111.63.225:16640] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adssKi6h2tZEVJo9JFKd5AAAAAQ"]
[Sun Apr 12 13:22:52.330944 2026] [:error] [pid 25327:tid 25355] [client 20.111.63.225:13173] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "adssLC6h2tZEVJo9JFKd6QAAABM"]
[Sun Apr 12 13:22:53.174530 2026] [:error] [pid 26600:tid 26637] [client 20.111.63.225:17137] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "adssLe1YwAZiXhQKLYroFgAAAYg"]
[Sun Apr 12 13:22:54.840933 2026] [:error] [pid 25328:tid 25389] [client 20.111.63.225:14268] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "adssLsxUaQZxT-e0YsCbyAAAAFA"]
[Sun Apr 12 13:22:56.025633 2026] [:error] [pid 26567:tid 26578] [client 20.111.63.225:11210] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "adssMHhRpg6ptWFyFx1osgAAAQk"]
[Sun Apr 12 13:22:57.843531 2026] [:error] [pid 25328:tid 25380] [client 20.111.63.225:17092] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "adssMcxUaQZxT-e0YsCbzQAAAEw"]
[Sun Apr 12 13:22:58.657570 2026] [:error] [pid 25327:tid 25358] [client 20.111.63.225:13167] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adssMi6h2tZEVJo9JFKd8QAAABY"]
[Sun Apr 12 13:23:00.053174 2026] [:error] [pid 25437:tid 25460] [client 20.111.63.225:32869] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adssNHf97wYZje1ep_PbMQAAANU"]
[Sun Apr 12 13:23:00.899815 2026] [:error] [pid 25328:tid 25369] [client 20.111.63.225:32869] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adssNMxUaQZxT-e0YsCb1gAAAEU"]
[Sun Apr 12 13:23:02.738398 2026] [:error] [pid 26599:tid 26616] [client 20.111.63.225:14228] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adssNnG89LXoQbk_rwCeVAAAAU4"]
[Sun Apr 12 13:23:03.595934 2026] [:error] [pid 25328:tid 25375] [client 20.111.63.225:13502] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "adssN8xUaQZxT-e0YsCb3AAAAEk"]
[Sun Apr 12 13:23:04.151201 2026] [:error] [pid 60280:tid 60292] [client 20.111.63.225:13456] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "adssOHBlLnDOYuIykkjGxQAAAco"]
[Sun Apr 12 14:20:13.133615 2026] [:error] [pid 60280:tid 60302] [client 20.223.145.95:58935] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "ads5nXBlLnDOYuIykkjlEQAAAdQ"]
[Sun Apr 12 14:20:13.858127 2026] [:error] [pid 60280:tid 60295] [client 20.223.145.95:58914] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "ads5nXBlLnDOYuIykkjlGAAAAc0"]
[Sun Apr 12 14:20:14.585075 2026] [:error] [pid 60280:tid 60305] [client 20.223.145.95:64092] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "ads5nnBlLnDOYuIykkjlHgAAAdc"]
[Sun Apr 12 14:20:15.293338 2026] [:error] [pid 25328:tid 25367] [client 20.223.145.95:56990] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "ads5n8xUaQZxT-e0YsCzOgAAAEM"]
[Sun Apr 12 14:20:16.094030 2026] [:error] [pid 60280:tid 60286] [client 20.223.145.95:58910] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wps.php"] [unique_id "ads5oHBlLnDOYuIykkjlJQAAAcQ"]
[Sun Apr 12 14:20:16.891555 2026] [:error] [pid 25437:tid 25455] [client 20.223.145.95:58883] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wps.php"] [unique_id "ads5oHf97wYZje1ep_PrDAAAANA"]
[Sun Apr 12 14:20:18.177012 2026] [:error] [pid 60280:tid 60294] [client 20.223.145.95:4836] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wps.php"] [unique_id "ads5onBlLnDOYuIykkjlKwAAAcw"]
[Sun Apr 12 14:20:18.928427 2026] [:error] [pid 25328:tid 25396] [client 20.223.145.95:60419] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wps.php"] [unique_id "ads5osxUaQZxT-e0YsCzQAAAAFM"]
[Sun Apr 12 14:20:19.783931 2026] [:error] [pid 25328:tid 25403] [client 20.223.145.95:58929] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wmore1.php"] [unique_id "ads5o8xUaQZxT-e0YsCzRwAAAFY"]
[Sun Apr 12 14:20:20.462673 2026] [:error] [pid 25437:tid 25448] [client 20.223.145.95:57020] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wmore1.php"] [unique_id "ads5pHf97wYZje1ep_PrGgAAAMk"]
[Sun Apr 12 14:20:21.513790 2026] [:error] [pid 26599:tid 26618] [client 20.223.145.95:4770] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wmore1.php"] [unique_id "ads5pXG89LXoQbk_rwClkwAAAVA"]
[Sun Apr 12 14:20:22.405377 2026] [:error] [pid 60280:tid 60291] [client 20.223.145.95:58987] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wmore1.php"] [unique_id "ads5pnBlLnDOYuIykkjlRwAAAck"]
[Sun Apr 12 14:20:23.836634 2026] [:error] [pid 60280:tid 60291] [client 20.223.145.95:58960] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tiny2.php"] [unique_id "ads5p3BlLnDOYuIykkjlWQAAAck"]
[Sun Apr 12 14:20:24.631886 2026] [:error] [pid 25328:tid 25394] [client 20.223.145.95:56716] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tiny2.php"] [unique_id "ads5qMxUaQZxT-e0YsCzWgAAAFI"]
[Sun Apr 12 14:20:25.509766 2026] [:error] [pid 25328:tid 25383] [client 20.223.145.95:56006] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tiny2.php"] [unique_id "ads5qcxUaQZxT-e0YsCzXwAAAE0"]
[Sun Apr 12 14:20:26.251987 2026] [:error] [pid 60280:tid 60295] [client 20.223.145.95:61927] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tiny2.php"] [unique_id "ads5qnBlLnDOYuIykkjlggAAAc0"]
[Sun Apr 12 14:20:26.960387 2026] [:error] [pid 25437:tid 25440] [client 20.223.145.95:56736] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/roksad1.php"] [unique_id "ads5qnf97wYZje1ep_PrJgAAAME"]
[Sun Apr 12 14:20:27.747917 2026] [:error] [pid 60280:tid 60285] [client 20.223.145.95:38142] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/roksad1.php"] [unique_id "ads5q3BlLnDOYuIykkjllwAAAcM"]
[Sun Apr 12 14:20:28.510415 2026] [:error] [pid 26567:tid 26591] [client 20.223.145.95:61890] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/roksad1.php"] [unique_id "ads5rHhRpg6ptWFyFx10RgAAARY"]
[Sun Apr 12 14:20:29.651321 2026] [:error] [pid 25329:tid 25400] [client 20.223.145.95:46072] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/roksad1.php"] [unique_id "ads5rWdcIYsS8Iyaj12K9QAAAI4"]
[Sun Apr 12 14:20:30.564321 2026] [:error] [pid 25437:tid 25439] [client 20.223.145.95:4606] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "ads5rnf97wYZje1ep_PrNAAAAMA"]
[Sun Apr 12 14:20:31.215466 2026] [:error] [pid 25328:tid 25372] [client 20.223.145.95:62377] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "ads5r8xUaQZxT-e0YsCzeQAAAEc"]
[Sun Apr 12 14:20:31.888569 2026] [:error] [pid 25437:tid 25449] [client 20.223.145.95:56342] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "ads5r3f97wYZje1ep_PrOAAAAMo"]
[Sun Apr 12 14:20:32.514327 2026] [:error] [pid 25437:tid 25455] [client 20.223.145.95:61509] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "ads5sHf97wYZje1ep_PrOgAAANA"]
[Sun Apr 12 14:20:33.362998 2026] [:error] [pid 26567:tid 26583] [client 20.223.145.95:61226] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ga.php"] [unique_id "ads5sXhRpg6ptWFyFx10TwAAAQ4"]
[Sun Apr 12 14:20:33.916402 2026] [:error] [pid 25328:tid 25372] [client 20.223.145.95:4139] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ga.php"] [unique_id "ads5scxUaQZxT-e0YsCzhQAAAEc"]
[Sun Apr 12 14:20:34.562394 2026] [:error] [pid 25328:tid 25394] [client 20.223.145.95:57079] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ga.php"] [unique_id "ads5ssxUaQZxT-e0YsCzjQAAAFI"]
[Sun Apr 12 14:20:35.196273 2026] [:error] [pid 60280:tid 60306] [client 20.223.145.95:56341] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ga.php"] [unique_id "ads5s3BlLnDOYuIykkjlwwAAAdg"]
[Sun Apr 12 14:20:36.150600 2026] [:error] [pid 60280:tid 60289] [client 20.223.145.95:56484] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/state.php"] [unique_id "ads5tHBlLnDOYuIykkjlywAAAcc"]
[Sun Apr 12 14:20:36.860877 2026] [:error] [pid 60280:tid 60284] [client 20.223.145.95:64321] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/state.php"] [unique_id "ads5tHBlLnDOYuIykkjl0gAAAcI"]
[Sun Apr 12 14:20:37.613339 2026] [:error] [pid 25327:tid 25351] [client 20.223.145.95:64188] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/state.php"] [unique_id "ads5tS6h2tZEVJo9JFKmkAAAAA8"]
[Sun Apr 12 14:20:38.474977 2026] [:error] [pid 26600:tid 26636] [client 20.223.145.95:64160] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/state.php"] [unique_id "ads5tu1YwAZiXhQKLYr08gAAAYc"]
[Sun Apr 12 14:20:39.597565 2026] [:error] [pid 60280:tid 60287] [client 20.223.145.95:56470] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1100.php"] [unique_id "ads5t3BlLnDOYuIykkjl5AAAAcU"]
[Sun Apr 12 14:20:40.495129 2026] [:error] [pid 25327:tid 25344] [client 20.223.145.95:57042] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1100.php"] [unique_id "ads5uC6h2tZEVJo9JFKmlQAAAAg"]
[Sun Apr 12 14:20:41.167173 2026] [:error] [pid 25437:tid 25448] [client 20.223.145.95:56508] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1100.php"] [unique_id "ads5uXf97wYZje1ep_PrSAAAAMk"]
[Sun Apr 12 14:20:42.095132 2026] [:error] [pid 25329:tid 25376] [client 20.223.145.95:56516] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1100.php"] [unique_id "ads5umdcIYsS8Iyaj12K-wAAAIE"]
[Sun Apr 12 14:20:42.833314 2026] [:error] [pid 60280:tid 60284] [client 20.223.145.95:64149] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "ads5unBlLnDOYuIykkjl-gAAAcI"]
[Sun Apr 12 14:20:43.559379 2026] [:error] [pid 60280:tid 60306] [client 20.223.145.95:57074] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "ads5u3BlLnDOYuIykkjl_gAAAdg"]
[Sun Apr 12 14:20:44.505110 2026] [:error] [pid 25437:tid 25446] [client 20.223.145.95:65396] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "ads5vHf97wYZje1ep_PrUwAAAMc"]
[Sun Apr 12 14:20:45.364650 2026] [:error] [pid 25437:tid 25441] [client 20.223.145.95:64148] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "ads5vXf97wYZje1ep_PrWQAAAMI"]
[Sun Apr 12 14:20:46.030162 2026] [:error] [pid 26567:tid 26576] [client 20.223.145.95:65359] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/97.php"] [unique_id "ads5vnhRpg6ptWFyFx10fgAAAQc"]
[Sun Apr 12 14:20:46.800346 2026] [:error] [pid 60280:tid 60306] [client 20.223.145.95:56523] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/97.php"] [unique_id "ads5vnBlLnDOYuIykkjmDQAAAdg"]
[Sun Apr 12 14:20:47.430873 2026] [:error] [pid 60280:tid 60304] [client 20.223.145.95:4729] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/97.php"] [unique_id "ads5v3BlLnDOYuIykkjmEAAAAdY"]
[Sun Apr 12 14:20:48.064659 2026] [:error] [pid 25437:tid 25463] [client 20.223.145.95:64356] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/97.php"] [unique_id "ads5wHf97wYZje1ep_PrYgAAANg"]
[Sun Apr 12 14:20:48.979155 2026] [:error] [pid 25437:tid 25439] [client 20.223.145.95:4950] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "ads5wHf97wYZje1ep_PrbAAAAMA"]
[Sun Apr 12 14:20:49.549272 2026] [:error] [pid 25437:tid 25448] [client 20.223.145.95:65354] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "ads5wXf97wYZje1ep_PrbwAAAMk"]
[Sun Apr 12 14:20:50.240420 2026] [:error] [pid 60280:tid 60285] [client 20.223.145.95:64354] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "ads5wnBlLnDOYuIykkjmGwAAAcM"]
[Sun Apr 12 14:20:50.899049 2026] [:error] [pid 25328:tid 25377] [client 20.223.145.95:64131] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "ads5wsxUaQZxT-e0YsCzrQAAAEo"]
[Sun Apr 12 14:20:51.408715 2026] [:error] [pid 60280:tid 60293] [client 20.223.145.95:43185] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "ads5w3BlLnDOYuIykkjmIQAAAcs"]
[Sun Apr 12 14:20:51.961250 2026] [:error] [pid 25437:tid 25446] [client 20.223.145.95:4718] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "ads5w3f97wYZje1ep_PrdwAAAMc"]
[Sun Apr 12 14:20:52.511329 2026] [:error] [pid 60280:tid 60284] [client 20.223.145.95:65397] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "ads5xHBlLnDOYuIykkjmKgAAAcI"]
[Sun Apr 12 14:20:53.071420 2026] [:error] [pid 60280:tid 60286] [client 20.223.145.95:64324] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lv.php"] [unique_id "ads5xXBlLnDOYuIykkjmLgAAAcQ"]
[Sun Apr 12 14:20:53.647126 2026] [:error] [pid 60280:tid 60282] [client 20.223.145.95:56555] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config.php"] [unique_id "ads5xXBlLnDOYuIykkjmNgAAAcA"]
[Sun Apr 12 14:20:54.337887 2026] [:error] [pid 60280:tid 60291] [client 20.223.145.95:56517] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config.php"] [unique_id "ads5xnBlLnDOYuIykkjmPgAAAck"]
[Sun Apr 12 14:20:55.000999 2026] [:error] [pid 60280:tid 60300] [client 20.223.145.95:43150] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config.php"] [unique_id "ads5x3BlLnDOYuIykkjmRAAAAdI"]
[Sun Apr 12 14:20:55.771767 2026] [:error] [pid 26600:tid 26637] [client 20.223.145.95:4943] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config.php"] [unique_id "ads5x-1YwAZiXhQKLYr1AQAAAYg"]
[Sun Apr 12 14:20:56.646515 2026] [:error] [pid 60280:tid 60296] [client 20.223.145.95:62312] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "ads5yHBlLnDOYuIykkjmSQAAAc4"]
[Sun Apr 12 14:20:57.227812 2026] [:error] [pid 25327:tid 25339] [client 20.223.145.95:56534] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "ads5yS6h2tZEVJo9JFKmpwAAAAM"]
[Sun Apr 12 14:20:58.332779 2026] [:error] [pid 26599:tid 26612] [client 20.223.145.95:56563] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "ads5ynG89LXoQbk_rwClpQAAAUo"]
[Sun Apr 12 14:20:59.159536 2026] [:error] [pid 26567:tid 26579] [client 20.223.145.95:4411] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "ads5y3hRpg6ptWFyFx10sQAAAQo"]
[Sun Apr 12 14:20:59.836121 2026] [:error] [pid 25437:tid 25452] [client 20.223.145.95:43156] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "ads5y3f97wYZje1ep_PrggAAAM0"]
[Sun Apr 12 14:21:00.444663 2026] [:error] [pid 25437:tid 25454] [client 20.223.145.95:63699] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "ads5zHf97wYZje1ep_PrhQAAAM8"]
[Sun Apr 12 14:21:01.355978 2026] [:error] [pid 25328:tid 25377] [client 20.223.145.95:4403] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "ads5zcxUaQZxT-e0YsCzvwAAAEo"]
[Sun Apr 12 14:21:01.978394 2026] [:error] [pid 26599:tid 26615] [client 20.223.145.95:4717] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "ads5zXG89LXoQbk_rwClqAAAAU0"]
[Sun Apr 12 14:21:02.661089 2026] [:error] [pid 60280:tid 60294] [client 20.223.145.95:64176] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ng.php"] [unique_id "ads5znBlLnDOYuIykkjmZAAAAcw"]
[Sun Apr 12 14:21:03.404253 2026] [:error] [pid 25328:tid 25398] [client 20.223.145.95:62335] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ng.php"] [unique_id "ads5z8xUaQZxT-e0YsCzwwAAAFQ"]
[Sun Apr 12 14:21:04.022400 2026] [:error] [pid 25328:tid 25367] [client 20.223.145.95:62303] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ng.php"] [unique_id "ads50MxUaQZxT-e0YsCzxwAAAEM"]
[Sun Apr 12 14:21:04.956533 2026] [:error] [pid 25327:tid 25347] [client 20.223.145.95:65363] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ng.php"] [unique_id "ads50C6h2tZEVJo9JFKmrgAAAAs"]
[Sun Apr 12 14:21:05.653054 2026] [:error] [pid 26600:tid 26643] [client 20.223.145.95:4189] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "ads50e1YwAZiXhQKLYr1EAAAAY4"]
[Sun Apr 12 14:21:06.173322 2026] [:error] [pid 26599:tid 26620] [client 20.223.145.95:4727] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "ads50nG89LXoQbk_rwClqgAAAVI"]
[Sun Apr 12 14:21:06.759108 2026] [:error] [pid 26599:tid 26624] [client 20.223.145.95:65385] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "ads50nG89LXoQbk_rwClrgAAAVY"]
[Sun Apr 12 14:21:07.399202 2026] [:error] [pid 26567:tid 26586] [client 20.223.145.95:4696] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "ads503hRpg6ptWFyFx10ywAAARE"]
[Sun Apr 12 14:21:08.145532 2026] [:error] [pid 26600:tid 26633] [client 20.223.145.95:63690] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wswer1.php"] [unique_id "ads51O1YwAZiXhQKLYr1EgAAAYQ"]
[Sun Apr 12 14:21:08.840511 2026] [:error] [pid 26567:tid 26584] [client 20.223.145.95:4190] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wswer1.php"] [unique_id "ads51HhRpg6ptWFyFx10zgAAAQ8"]
[Sun Apr 12 14:21:09.469906 2026] [:error] [pid 60280:tid 60284] [client 20.223.145.95:65379] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wswer1.php"] [unique_id "ads51XBlLnDOYuIykkjmawAAAcI"]
[Sun Apr 12 14:21:29.623151 2026] [:error] [pid 60280:tid 60288] [client 20.223.145.95:62317] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new3.php"] [unique_id "ads56XBlLnDOYuIykkjm0wAAAcY"]
[Sun Apr 12 14:21:30.914518 2026] [:error] [pid 60280:tid 60297] [client 20.223.145.95:63739] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new3.php"] [unique_id "ads56nBlLnDOYuIykkjm2wAAAc8"]
[Sun Apr 12 14:21:32.108872 2026] [:error] [pid 60280:tid 60293] [client 20.223.145.95:4395] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new3.php"] [unique_id "ads57HBlLnDOYuIykkjm4wAAAcs"]
[Sun Apr 12 14:21:33.252363 2026] [:error] [pid 25328:tid 25365] [client 20.223.145.95:4169] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new3.php"] [unique_id "ads57cxUaQZxT-e0YsCz-gAAAEE"]
[Sun Apr 12 14:21:33.528819 2026] [:error] [pid 25328:tid 25372] [client 20.223.145.95:63697] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-turn.php"] [unique_id "ads57cxUaQZxT-e0YsCz_QAAAEc"]
[Sun Apr 12 14:21:34.613374 2026] [:error] [pid 60280:tid 60297] [client 20.223.145.95:4408] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-turn.php"] [unique_id "ads57nBlLnDOYuIykkjm7AAAAc8"]
[Sun Apr 12 14:21:35.335225 2026] [:error] [pid 25328:tid 25367] [client 20.223.145.95:30013] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-turn.php"] [unique_id "ads578xUaQZxT-e0YsC0AgAAAEM"]
[Sun Apr 12 14:21:35.935665 2026] [:error] [pid 25437:tid 25450] [client 20.223.145.95:4977] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-turn.php"] [unique_id "ads573f97wYZje1ep_Pr9AAAAMs"]
[Sun Apr 12 14:21:36.512329 2026] [:error] [pid 60280:tid 60299] [client 20.223.145.95:62803] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ayk.php"] [unique_id "ads58HBlLnDOYuIykkjm9wAAAdE"]
[Sun Apr 12 14:21:37.292483 2026] [:error] [pid 25328:tid 25365] [client 20.223.145.95:4563] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ayk.php"] [unique_id "ads58cxUaQZxT-e0YsC0BwAAAEE"]
[Sun Apr 12 14:21:38.146951 2026] [:error] [pid 25327:tid 25356] [client 20.223.145.95:4562] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ayk.php"] [unique_id "ads58i6h2tZEVJo9JFKm1wAAABQ"]
[Sun Apr 12 14:21:39.010058 2026] [:error] [pid 60280:tid 60284] [client 20.223.145.95:57074] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ayk.php"] [unique_id "ads583BlLnDOYuIykkjm_QAAAcI"]
[Sun Apr 12 14:21:39.883572 2026] [:error] [pid 60280:tid 60291] [client 20.223.145.95:4545] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/red.php"] [unique_id "ads583BlLnDOYuIykkjnCAAAAck"]
[Sun Apr 12 14:21:40.576260 2026] [:error] [pid 60280:tid 60303] [client 20.223.145.95:62835] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/red.php"] [unique_id "ads59HBlLnDOYuIykkjnDwAAAdU"]
[Sun Apr 12 14:21:41.559982 2026] [:error] [pid 26600:tid 26640] [client 20.223.145.95:4357] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/red.php"] [unique_id "ads59e1YwAZiXhQKLYr1QwAAAYs"]
[Sun Apr 12 14:21:42.198751 2026] [:error] [pid 26567:tid 26581] [client 20.223.145.95:62800] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/red.php"] [unique_id "ads59nhRpg6ptWFyFx106gAAAQw"]
[Sun Apr 12 14:21:43.053008 2026] [:error] [pid 26567:tid 26572] [client 20.223.145.95:62800] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ss.php"] [unique_id "ads593hRpg6ptWFyFx107QAAAQM"]
[Sun Apr 12 14:21:43.689466 2026] [:error] [pid 26600:tid 26644] [client 20.223.145.95:56527] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ss.php"] [unique_id "ads59-1YwAZiXhQKLYr1RwAAAY8"]
[Sun Apr 12 14:21:44.214607 2026] [:error] [pid 25437:tid 25448] [client 20.223.145.95:55918] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ss.php"] [unique_id "ads5-Hf97wYZje1ep_PsAAAAAMk"]
[Sun Apr 12 14:21:45.025898 2026] [:error] [pid 25327:tid 25338] [client 20.223.145.95:4576] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ss.php"] [unique_id "ads5-S6h2tZEVJo9JFKm3AAAAAI"]
[Sun Apr 12 14:21:45.919946 2026] [:error] [pid 60280:tid 60306] [client 20.223.145.95:4178] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadcut1.php"] [unique_id "ads5-XBlLnDOYuIykkjnGgAAAdg"]
[Sun Apr 12 14:21:46.682482 2026] [:error] [pid 25328:tid 25368] [client 20.223.145.95:29963] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadcut1.php"] [unique_id "ads5-sxUaQZxT-e0YsC0GgAAAEQ"]
[Sun Apr 12 14:21:47.404500 2026] [:error] [pid 26600:tid 26630] [client 20.223.145.95:4544] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadcut1.php"] [unique_id "ads5--1YwAZiXhQKLYr1TQAAAYE"]
[Sun Apr 12 14:21:48.067305 2026] [:error] [pid 25437:tid 25461] [client 20.223.145.95:4193] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sadcut1.php"] [unique_id "ads5_Hf97wYZje1ep_PsEAAAANY"]
[Sun Apr 12 14:21:48.848721 2026] [:error] [pid 25437:tid 25456] [client 20.223.145.95:4595] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gecko.php"] [unique_id "ads5_Hf97wYZje1ep_PsFgAAANE"]
[Sun Apr 12 14:21:49.490020 2026] [:error] [pid 25328:tid 25405] [client 20.223.145.95:4396] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gecko.php"] [unique_id "ads5_cxUaQZxT-e0YsC0HwAAAFc"]
[Sun Apr 12 14:21:50.203714 2026] [:error] [pid 26600:tid 26647] [client 20.223.145.95:4393] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gecko.php"] [unique_id "ads5_u1YwAZiXhQKLYr1UAAAAZI"]
[Sun Apr 12 14:21:51.034383 2026] [:error] [pid 60280:tid 60289] [client 20.223.145.95:62792] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gecko.php"] [unique_id "ads5_3BlLnDOYuIykkjnJQAAAcc"]
[Sun Apr 12 14:21:51.621900 2026] [:error] [pid 26600:tid 26631] [client 20.223.145.95:4201] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wziar1.php"] [unique_id "ads5_-1YwAZiXhQKLYr1VgAAAYI"]
[Sun Apr 12 14:21:52.266371 2026] [:error] [pid 25329:tid 25388] [client 20.223.145.95:5038] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wziar1.php"] [unique_id "ads6AGdcIYsS8Iyaj12LKAAAAIc"]
[Sun Apr 12 14:21:52.869415 2026] [:error] [pid 25327:tid 25350] [client 20.223.145.95:55904] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wziar1.php"] [unique_id "ads6AC6h2tZEVJo9JFKm5AAAAA4"]
[Sun Apr 12 14:21:53.521988 2026] [:error] [pid 25328:tid 25403] [client 20.223.145.95:29976] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wziar1.php"] [unique_id "ads6AcxUaQZxT-e0YsC0IgAAAFY"]
[Sun Apr 12 14:21:54.149152 2026] [:error] [pid 25328:tid 25401] [client 20.223.145.95:62837] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xs.php"] [unique_id "ads6AsxUaQZxT-e0YsC0JwAAAFU"]
[Sun Apr 12 14:21:54.803651 2026] [:error] [pid 25328:tid 25391] [client 20.223.145.95:62842] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xs.php"] [unique_id "ads6AsxUaQZxT-e0YsC0KAAAAFE"]
[Sun Apr 12 14:21:55.390739 2026] [:error] [pid 26567:tid 26587] [client 20.223.145.95:29984] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xs.php"] [unique_id "ads6A3hRpg6ptWFyFx109QAAARI"]
[Sun Apr 12 14:21:56.129673 2026] [:error] [pid 25328:tid 25383] [client 20.223.145.95:62832] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xs.php"] [unique_id "ads6BMxUaQZxT-e0YsC0LQAAAE0"]
[Sun Apr 12 14:21:56.802798 2026] [:error] [pid 25437:tid 25456] [client 20.223.145.95:4217] [client 20.223.145.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ads6BHf97wYZje1ep_PsMAAAANE"]
[Sun Apr 12 14:21:57.498686 2026] [:error] [pid 25329:tid 25397] [client 20.223.145.95:55924] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "ads6BWdcIYsS8Iyaj12LKQAAAIw"]
[Sun Apr 12 14:21:58.162343 2026] [:error] [pid 26567:tid 26570] [client 20.223.145.95:39286] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "ads6BnhRpg6ptWFyFx10-AAAAQE"]
[Sun Apr 12 14:21:58.828849 2026] [:error] [pid 25437:tid 25449] [client 20.223.145.95:55913] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "ads6Bnf97wYZje1ep_PsNQAAAMo"]
[Sun Apr 12 14:21:59.382478 2026] [:error] [pid 25328:tid 25380] [client 20.223.145.95:4579] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/pp.php"] [unique_id "ads6B8xUaQZxT-e0YsC0MQAAAEw"]
[Sun Apr 12 14:22:00.105133 2026] [:error] [pid 25328:tid 25368] [client 20.223.145.95:5013] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myy.php"] [unique_id "ads6CMxUaQZxT-e0YsC0NAAAAEQ"]
[Sun Apr 12 14:22:00.645077 2026] [:error] [pid 25328:tid 25391] [client 20.223.145.95:39238] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myy.php"] [unique_id "ads6CMxUaQZxT-e0YsC0OAAAAFE"]
[Sun Apr 12 14:22:01.208838 2026] [:error] [pid 25328:tid 25405] [client 20.223.145.95:30001] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myy.php"] [unique_id "ads6CcxUaQZxT-e0YsC0OgAAAFc"]
[Sun Apr 12 14:22:01.884653 2026] [:error] [pid 26600:tid 26640] [client 20.223.145.95:4565] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myy.php"] [unique_id "ads6Ce1YwAZiXhQKLYr1YQAAAYs"]
[Sun Apr 12 14:22:02.522224 2026] [:error] [pid 25437:tid 25442] [client 20.223.145.95:5044] [client 20.223.145.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.makifim.com.au"] [uri "/tiny.php"] [unique_id "ads6Cnf97wYZje1ep_PsPAAAAMM"]
[Sun Apr 12 14:22:03.062962 2026] [:error] [pid 25437:tid 25452] [client 20.223.145.95:4223] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wdone1.php"] [unique_id "ads6C3f97wYZje1ep_PsPgAAAM0"]
[Sun Apr 12 14:22:03.619084 2026] [:error] [pid 25437:tid 25454] [client 20.223.145.95:29954] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wdone1.php"] [unique_id "ads6C3f97wYZje1ep_PsQwAAAM8"]
[Sun Apr 12 14:22:04.172371 2026] [:error] [pid 25328:tid 25377] [client 20.223.145.95:4589] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wdone1.php"] [unique_id "ads6DMxUaQZxT-e0YsC0RAAAAEo"]
[Sun Apr 12 14:22:04.769870 2026] [:error] [pid 25328:tid 25398] [client 20.223.145.95:5047] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wdone1.php"] [unique_id "ads6DMxUaQZxT-e0YsC0RQAAAFQ"]
[Sun Apr 12 14:22:05.295551 2026] [:error] [pid 60280:tid 60290] [client 20.223.145.95:5036] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "ads6DXBlLnDOYuIykkjnUQAAAcg"]
[Sun Apr 12 14:22:05.797740 2026] [:error] [pid 60280:tid 60291] [client 20.223.145.95:4549] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "ads6DXBlLnDOYuIykkjnXAAAAck"]
[Sun Apr 12 14:22:06.345973 2026] [:error] [pid 25327:tid 25356] [client 20.223.145.95:39233] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "ads6Di6h2tZEVJo9JFKm6gAAABQ"]
[Sun Apr 12 14:22:06.889982 2026] [:error] [pid 25328:tid 25403] [client 20.223.145.95:5026] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "ads6DsxUaQZxT-e0YsC0RgAAAFY"]
[Sun Apr 12 14:22:07.396674 2026] [:error] [pid 25329:tid 25409] [client 20.223.145.95:4559] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "ads6D2dcIYsS8Iyaj12LLwAAAJM"]
[Sun Apr 12 14:22:08.003142 2026] [:error] [pid 60280:tid 60305] [client 20.223.145.95:4581] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "ads6EHBlLnDOYuIykkjnfAAAAdc"]
[Sun Apr 12 14:22:08.666435 2026] [:error] [pid 25327:tid 25344] [client 20.223.145.95:55874] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "ads6EC6h2tZEVJo9JFKm-QAAAAg"]
[Sun Apr 12 14:22:09.184228 2026] [:error] [pid 26600:tid 26646] [client 20.223.145.95:62801] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "ads6Ee1YwAZiXhQKLYr1cwAAAZE"]
[Sun Apr 12 14:22:09.863486 2026] [:error] [pid 25328:tid 25398] [client 20.223.145.95:55898] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "ads6EcxUaQZxT-e0YsC0WgAAAFQ"]
[Sun Apr 12 14:22:10.436154 2026] [:error] [pid 25437:tid 25455] [client 20.223.145.95:4215] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "ads6Enf97wYZje1ep_PsdAAAANA"]
[Sun Apr 12 14:22:11.016203 2026] [:error] [pid 25437:tid 25444] [client 20.223.145.95:39285] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "ads6E3f97wYZje1ep_PsdQAAAMU"]
[Sun Apr 12 14:22:11.572323 2026] [:error] [pid 25329:tid 25386] [client 20.223.145.95:4995] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ava.php"] [unique_id "ads6E2dcIYsS8Iyaj12LOgAAAIY"]
[Sun Apr 12 14:22:12.080295 2026] [:error] [pid 25329:tid 25388] [client 20.223.145.95:4381] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awh.php"] [unique_id "ads6FGdcIYsS8Iyaj12LPAAAAIc"]
[Sun Apr 12 14:22:12.686546 2026] [:error] [pid 60280:tid 60297] [client 20.223.145.95:62828] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awh.php"] [unique_id "ads6FHBlLnDOYuIykkjnhgAAAc8"]
[Sun Apr 12 14:22:13.203194 2026] [:error] [pid 60280:tid 60302] [client 20.223.145.95:4212] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awh.php"] [unique_id "ads6FXBlLnDOYuIykkjniQAAAdQ"]
[Sun Apr 12 14:22:13.788407 2026] [:error] [pid 60280:tid 60299] [client 20.223.145.95:5030] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awh.php"] [unique_id "ads6FXBlLnDOYuIykkjnigAAAdE"]
[Sun Apr 12 14:22:14.296440 2026] [:error] [pid 60280:tid 60289] [client 20.223.145.95:5033] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r2.php"] [unique_id "ads6FnBlLnDOYuIykkjnjAAAAcc"]
[Sun Apr 12 14:22:14.824354 2026] [:error] [pid 25328:tid 25377] [client 20.223.145.95:29990] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r2.php"] [unique_id "ads6FsxUaQZxT-e0YsC0awAAAEo"]
[Sun Apr 12 14:22:15.341467 2026] [:error] [pid 25328:tid 25405] [client 20.223.145.95:55901] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r2.php"] [unique_id "ads6F8xUaQZxT-e0YsC0bAAAAFc"]
[Sun Apr 12 14:22:15.853728 2026] [:error] [pid 25328:tid 25372] [client 20.223.145.95:4356] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r2.php"] [unique_id "ads6F8xUaQZxT-e0YsC0cAAAAEc"]
[Sun Apr 12 14:22:16.435945 2026] [:error] [pid 60280:tid 60306] [client 20.223.145.95:4174] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "ads6GHBlLnDOYuIykkjnkwAAAdg"]
[Sun Apr 12 14:22:17.066652 2026] [:error] [pid 60280:tid 60291] [client 20.223.145.95:4183] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "ads6GXBlLnDOYuIykkjnmwAAAck"]
[Sun Apr 12 14:22:17.698976 2026] [:error] [pid 60280:tid 60301] [client 20.223.145.95:55872] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "ads6GXBlLnDOYuIykkjnoAAAAdM"]
[Sun Apr 12 14:22:18.326019 2026] [:error] [pid 60280:tid 60305] [client 20.223.145.95:62814] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "ads6GnBlLnDOYuIykkjnpQAAAdc"]
[Sun Apr 12 14:22:18.934733 2026] [:error] [pid 26600:tid 26641] [client 20.223.145.95:62826] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/db.php"] [unique_id "ads6Gu1YwAZiXhQKLYr1ggAAAYw"]
[Sun Apr 12 14:22:19.568095 2026] [:error] [pid 25328:tid 25389] [client 20.223.145.95:55909] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/db.php"] [unique_id "ads6G8xUaQZxT-e0YsC0hQAAAFA"]
[Sun Apr 12 14:22:20.093895 2026] [:error] [pid 26600:tid 26646] [client 20.223.145.95:55912] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/db.php"] [unique_id "ads6HO1YwAZiXhQKLYr1hQAAAZE"]
[Sun Apr 12 14:22:20.651651 2026] [:error] [pid 25328:tid 25367] [client 20.223.145.95:62845] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/db.php"] [unique_id "ads6HMxUaQZxT-e0YsC0iQAAAEM"]
[Sun Apr 12 14:22:21.173960 2026] [:error] [pid 25328:tid 25401] [client 20.223.145.95:5016] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "ads6HcxUaQZxT-e0YsC0jgAAAFU"]
[Sun Apr 12 14:22:21.695325 2026] [:error] [pid 25328:tid 25408] [client 20.223.145.95:43187] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "ads6HcxUaQZxT-e0YsC0kgAAAFg"]
[Sun Apr 12 14:22:22.221612 2026] [:error] [pid 26599:tid 26617] [client 20.223.145.95:4547] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "ads6HnG89LXoQbk_rwCl9gAAAU8"]
[Sun Apr 12 14:22:22.794039 2026] [:error] [pid 60280:tid 60294] [client 20.223.145.95:4603] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "ads6HnBlLnDOYuIykkjnrAAAAcw"]
[Sun Apr 12 14:22:23.358679 2026] [:error] [pid 60280:tid 60304] [client 20.223.145.95:29986] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/riz.php"] [unique_id "ads6H3BlLnDOYuIykkjnsQAAAdY"]
[Sun Apr 12 14:22:23.915786 2026] [:error] [pid 60280:tid 60306] [client 20.223.145.95:30015] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/riz.php"] [unique_id "ads6H3BlLnDOYuIykkjntgAAAdg"]
[Sun Apr 12 14:22:24.448780 2026] [:error] [pid 25437:tid 25456] [client 20.223.145.95:30005] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/riz.php"] [unique_id "ads6IHf97wYZje1ep_PsjAAAANE"]
[Sun Apr 12 14:22:24.964083 2026] [:error] [pid 25437:tid 25462] [client 20.223.145.95:63693] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/riz.php"] [unique_id "ads6IHf97wYZje1ep_PsjQAAANc"]
[Sun Apr 12 14:22:25.472944 2026] [:error] [pid 25437:tid 25454] [client 20.223.145.95:29982] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/packsin1.php"] [unique_id "ads6IXf97wYZje1ep_PskAAAAM8"]
[Sun Apr 12 14:22:25.968288 2026] [:error] [pid 25437:tid 25443] [client 20.223.145.95:62823] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/packsin1.php"] [unique_id "ads6IXf97wYZje1ep_PslQAAAMQ"]
[Sun Apr 12 14:22:26.463659 2026] [:error] [pid 25437:tid 25442] [client 20.223.145.95:4570] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/packsin1.php"] [unique_id "ads6Inf97wYZje1ep_PslwAAAMM"]
[Sun Apr 12 14:22:26.956772 2026] [:error] [pid 60280:tid 60291] [client 20.223.145.95:4556] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/packsin1.php"] [unique_id "ads6InBlLnDOYuIykkjnvgAAAck"]
[Sun Apr 12 14:22:27.450922 2026] [:error] [pid 25328:tid 25405] [client 20.223.145.95:62834] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/om.php"] [unique_id "ads6I8xUaQZxT-e0YsC0nAAAAFc"]
[Sun Apr 12 14:22:27.950339 2026] [:error] [pid 60280:tid 60298] [client 20.223.145.95:39232] [client 20.223.145.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/om.php"] [unique_id "ads6I3BlLnDOYuIykkjnxwAAAdA"]
[Sun Apr 12 14:22:46.955501 2026] [proxy_fcgi:error] [pid 60280:tid 60288] [client 20.223.145.95:4559] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 12 15:18:53.148215 2026] [autoindex:error] [pid 25328:tid 25396] [client 143.110.240.70:56406] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Apr 13 02:06:23.582394 2026] [proxy_fcgi:error] [pid 54671:tid 54677] [client 103.4.122.14:51282] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 02:14:04.551600 2026] [proxy_fcgi:error] [pid 31605:tid 31646] [client 103.4.122.14:52396] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 03:48:07.684582 2026] [proxy_fcgi:error] [pid 33943:tid 34015] [client 103.4.122.14:37674] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 04:35:01.318971 2026] [:error] [pid 33941:tid 33972] [client 20.151.218.28:42974] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwB9W_NKERAxgG-rYMhoAAAABU"]
[Mon Apr 13 04:35:01.777967 2026] [:error] [pid 33942:tid 34002] [client 20.151.218.28:42886] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwB9RNHe8geO_lMeFZ5eQAAAFc"]
[Mon Apr 13 04:35:02.560922 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:43003] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwB9qyoXuZjocnxM5FDcQAAAIo"]
[Mon Apr 13 04:35:06.253409 2026] [:error] [pid 33941:tid 33965] [client 20.151.218.28:42990] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwB-m_NKERAxgG-rYMhqwAAAA4"]
[Mon Apr 13 04:58:34.551721 2026] [proxy_fcgi:error] [pid 11325:tid 11335] [client 103.4.122.14:45720] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 05:55:45.462754 2026] [proxy_fcgi:error] [pid 11325:tid 11331] [client 20.151.248.149:18373] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 10:32:11.199345 2026] [:error] [pid 63406:tid 63427] [client 193.37.32.171:31803] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "adxVq7HZEIkQ0Zmgp5pTDwAAANA"]
[Mon Apr 13 10:32:21.396043 2026] [:error] [pid 63406:tid 63414] [client 193.37.32.131:44149] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "adxVtbHZEIkQ0Zmgp5pTGwAAAMM"]
[Mon Apr 13 10:32:26.595923 2026] [:error] [pid 7228:tid 7243] [client 193.37.32.162:62185] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/users.php"] [unique_id "adxVugEnn1dQrOSHHNVeZAAAAQ0"]
[Mon Apr 13 10:32:26.795864 2026] [:error] [pid 7228:tid 7233] [client 193.37.32.162:53807] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/core.php"] [unique_id "adxVugEnn1dQrOSHHNVeZgAAAQM"]
[Mon Apr 13 10:32:26.994600 2026] [:error] [pid 63310:tid 63357] [client 193.37.32.175:63279] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "adxVunoXpRU5ztmwPjLXqwAAAE0"]
[Mon Apr 13 10:32:27.192700 2026] [:error] [pid 7228:tid 7251] [client 193.37.32.166:23955] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "adxVuwEnn1dQrOSHHNVeZwAAARU"]
[Mon Apr 13 10:32:27.390496 2026] [:error] [pid 63406:tid 63424] [client 193.37.32.109:24925] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "adxVu7HZEIkQ0Zmgp5pTJwAAAM0"]
[Mon Apr 13 10:32:27.587674 2026] [:error] [pid 7228:tid 7239] [client 193.37.32.166:46777] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "adxVuwEnn1dQrOSHHNVebAAAAQk"]
[Mon Apr 13 10:32:27.784387 2026] [:error] [pid 63406:tid 63414] [client 193.37.32.153:28607] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "adxVu7HZEIkQ0Zmgp5pTKQAAAMM"]
[Mon Apr 13 10:32:28.987318 2026] [:error] [pid 7228:tid 7252] [client 193.37.32.131:21029] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "adxVvAEnn1dQrOSHHNVecwAAARY"]
[Mon Apr 13 10:32:29.182287 2026] [:error] [pid 63406:tid 63427] [client 193.37.32.147:21129] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/shell.php"] [unique_id "adxVvbHZEIkQ0Zmgp5pTLgAAANA"]
[Mon Apr 13 10:32:29.379925 2026] [:error] [pid 63406:tid 63415] [client 193.37.32.157:57949] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "adxVvbHZEIkQ0Zmgp5pTLwAAAMQ"]
[Mon Apr 13 10:32:29.576970 2026] [:error] [pid 63406:tid 63423] [client 193.37.32.135:25071] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "adxVvbHZEIkQ0Zmgp5pTMAAAAMw"]
[Mon Apr 13 10:32:29.775234 2026] [:error] [pid 63310:tid 63362] [client 193.37.32.110:42775] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "adxVvXoXpRU5ztmwPjLXrwAAAFI"]
[Mon Apr 13 10:32:29.973025 2026] [:error] [pid 7228:tid 7254] [client 193.37.32.155:27905] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "adxVvQEnn1dQrOSHHNVedQAAARg"]
[Mon Apr 13 10:32:35.170361 2026] [:error] [pid 63406:tid 63414] [client 193.37.32.133:28863] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "adxVw7HZEIkQ0Zmgp5pTOgAAAMM"]
[Mon Apr 13 10:32:40.367840 2026] [:error] [pid 7228:tid 7242] [client 193.37.32.139:55599] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "adxVyAEnn1dQrOSHHNVegQAAAQw"]
[Mon Apr 13 10:32:50.564559 2026] [:error] [pid 63310:tid 63366] [client 193.37.32.167:61203] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "adxV0noXpRU5ztmwPjLXvQAAAFY"]
[Mon Apr 13 10:32:55.763731 2026] [:error] [pid 7228:tid 7238] [client 193.37.32.154:53405] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class.api.php"] [unique_id "adxV1wEnn1dQrOSHHNVeoQAAAQg"]
[Mon Apr 13 10:32:55.962832 2026] [:error] [pid 7228:tid 7235] [client 193.37.32.146:39003] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "adxV1wEnn1dQrOSHHNVeogAAAQU"]
[Mon Apr 13 10:32:56.162868 2026] [:error] [pid 7228:tid 7233] [client 193.37.32.169:47979] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "adxV2AEnn1dQrOSHHNVeowAAAQM"]
[Mon Apr 13 10:32:56.361135 2026] [:error] [pid 7228:tid 7239] [client 193.37.32.152:53921] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "adxV2AEnn1dQrOSHHNVepAAAAQk"]
[Mon Apr 13 10:32:56.561693 2026] [:error] [pid 7228:tid 7245] [client 193.37.32.141:43087] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "adxV2AEnn1dQrOSHHNVepQAAAQ8"]
[Mon Apr 13 10:32:56.758160 2026] [:error] [pid 63311:tid 63390] [client 193.37.32.152:63775] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "adxV2KHjrGN1MqBCVFlhoAAAAJM"]
[Mon Apr 13 10:32:56.954103 2026] [:error] [pid 7228:tid 7240] [client 193.37.32.137:20117] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "adxV2AEnn1dQrOSHHNVepwAAAQo"]
[Mon Apr 13 10:33:07.153451 2026] [:error] [pid 7228:tid 7249] [client 193.37.32.140:51949] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "adxV4wEnn1dQrOSHHNVetwAAARM"]
[Mon Apr 13 10:33:12.446088 2026] [:error] [pid 63310:tid 63355] [client 193.37.32.149:25397] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "adxV6HoXpRU5ztmwPjLXzwAAAEs"]
[Mon Apr 13 10:33:12.640435 2026] [:error] [pid 63309:tid 63337] [client 193.37.32.146:30301] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "adxV6EpIKZ10weXpf0W7FwAAABg"]
[Mon Apr 13 10:33:17.837729 2026] [:error] [pid 63310:tid 63348] [client 193.37.32.141:53699] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "adxV7XoXpRU5ztmwPjLX0gAAAEQ"]
[Mon Apr 13 10:33:18.034489 2026] [:error] [pid 63309:tid 63336] [client 193.37.32.160:37229] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updates.php"] [unique_id "adxV7kpIKZ10weXpf0W7HwAAABc"]
[Mon Apr 13 10:33:18.232308 2026] [:error] [pid 63311:tid 63371] [client 193.37.32.166:21403] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/"] [unique_id "adxV7qHjrGN1MqBCVFlhrQAAAIA"]
[Mon Apr 13 10:33:18.427615 2026] [:error] [pid 63406:tid 63415] [client 193.37.32.155:38293] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system_core.php"] [unique_id "adxV7rHZEIkQ0Zmgp5pTYAAAAMQ"]
[Mon Apr 13 10:33:18.621989 2026] [:error] [pid 63311:tid 63383] [client 193.37.32.168:58447] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "adxV7qHjrGN1MqBCVFlhrwAAAIw"]
[Mon Apr 13 10:33:18.820124 2026] [:error] [pid 63406:tid 63428] [client 193.37.32.175:32663] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "adxV7rHZEIkQ0Zmgp5pTYgAAANE"]
[Mon Apr 13 10:33:19.014427 2026] [:error] [pid 63311:tid 63377] [client 193.37.32.109:21175] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "adxV76HjrGN1MqBCVFlhsAAAAIY"]
[Mon Apr 13 10:33:19.210609 2026] [:error] [pid 63406:tid 63417] [client 193.37.32.174:24305] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "adxV77HZEIkQ0Zmgp5pTYwAAAMY"]
[Mon Apr 13 10:33:20.415409 2026] [:error] [pid 63406:tid 63414] [client 193.37.32.154:56717] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adxV8LHZEIkQ0Zmgp5pTZwAAAMM"]
[Mon Apr 13 10:33:20.612619 2026] [:error] [pid 63406:tid 63422] [client 193.37.32.152:53979] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "adxV8LHZEIkQ0Zmgp5pTaAAAAMs"]
[Mon Apr 13 10:33:20.810265 2026] [:error] [pid 63310:tid 63358] [client 193.37.32.156:63447] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "adxV8HoXpRU5ztmwPjLX1AAAAE4"]
[Mon Apr 13 10:33:22.018418 2026] [:error] [pid 63406:tid 63420] [client 193.37.32.156:22243] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "adxV8rHZEIkQ0Zmgp5pTbQAAAMk"]
[Mon Apr 13 10:33:27.215101 2026] [:error] [pid 63310:tid 63348] [client 193.37.32.167:30931] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "adxV93oXpRU5ztmwPjLX2wAAAEQ"]
[Mon Apr 13 10:33:27.410409 2026] [:error] [pid 63309:tid 63321] [client 193.37.32.149:42759] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "adxV90pIKZ10weXpf0W7JAAAAAg"]
[Mon Apr 13 10:33:27.605731 2026] [:error] [pid 63311:tid 63376] [client 193.37.32.112:58661] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "adxV96HjrGN1MqBCVFlhvQAAAIU"]
[Mon Apr 13 10:33:27.802819 2026] [:error] [pid 7228:tid 7249] [client 193.37.32.168:50917] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/"] [unique_id "adxV9wEnn1dQrOSHHNVe0gAAARM"]
[Mon Apr 13 10:33:33.001592 2026] [:error] [pid 7228:tid 7236] [client 193.37.32.169:25793] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "adxV_QEnn1dQrOSHHNVe2gAAAQY"]
[Mon Apr 13 10:33:33.201086 2026] [:error] [pid 7228:tid 7248] [client 193.37.32.144:26477] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "adxV_QEnn1dQrOSHHNVe2wAAARI"]
[Mon Apr 13 10:33:33.399174 2026] [:error] [pid 63310:tid 63348] [client 193.37.32.109:46587] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-wlx.php"] [unique_id "adxV_XoXpRU5ztmwPjLX5gAAAEQ"]
[Mon Apr 13 10:33:33.597893 2026] [:error] [pid 63406:tid 63435] [client 193.37.32.106:32765] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "adxV_bHZEIkQ0Zmgp5pTdQAAANg"]
[Mon Apr 13 10:33:33.794582 2026] [:error] [pid 63310:tid 63360] [client 193.37.32.140:40429] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "adxV_XoXpRU5ztmwPjLX5wAAAFA"]
[Mon Apr 13 10:33:35.004564 2026] [:error] [pid 63311:tid 63373] [client 193.37.32.164:47041] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "adxV_6HjrGN1MqBCVFlhyQAAAII"]
[Mon Apr 13 10:33:36.732834 2026] [:error] [pid 7228:tid 7231] [client 193.37.32.149:58915] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/test.php"] [unique_id "adxWAAEnn1dQrOSHHNVe3gAAAQE"]
[Mon Apr 13 10:33:36.933142 2026] [:error] [pid 7228:tid 7236] [client 193.37.32.106:29763] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "adxWAAEnn1dQrOSHHNVe4AAAAQY"]
[Mon Apr 13 10:33:37.132663 2026] [:error] [pid 63406:tid 63415] [client 193.37.32.164:27181] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/"] [unique_id "adxWAbHZEIkQ0Zmgp5pTfQAAAMQ"]
[Mon Apr 13 10:33:37.331598 2026] [:error] [pid 63310:tid 63366] [client 193.37.32.156:34273] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/private/"] [unique_id "adxWAXoXpRU5ztmwPjLX7QAAAFY"]
[Mon Apr 13 10:33:37.530868 2026] [:error] [pid 63310:tid 63348] [client 193.37.32.156:28513] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "adxWAXoXpRU5ztmwPjLX7gAAAEQ"]
[Mon Apr 13 10:33:42.732149 2026] [:error] [pid 63406:tid 63416] [client 193.37.32.177:32805] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/"] [unique_id "adxWBrHZEIkQ0Zmgp5pTmAAAAMU"]
[Mon Apr 13 10:33:42.929035 2026] [:error] [pid 7228:tid 7230] [client 193.37.32.131:62651] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "adxWBgEnn1dQrOSHHNVe7wAAAQA"]
[Mon Apr 13 10:33:48.125294 2026] [:error] [pid 63311:tid 63393] [client 193.37.32.164:49091] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "adxWDKHjrGN1MqBCVFlh0gAAAJY"]
[Mon Apr 13 10:33:48.325417 2026] [:error] [pid 7228:tid 7250] [client 193.37.32.110:38151] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "adxWDAEnn1dQrOSHHNVe_AAAARQ"]
[Mon Apr 13 10:33:48.524176 2026] [:error] [pid 7228:tid 7240] [client 193.37.32.158:24127] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wa/"] [unique_id "adxWDAEnn1dQrOSHHNVe_QAAAQo"]
[Mon Apr 13 10:33:48.724982 2026] [:error] [pid 7228:tid 7246] [client 193.37.32.106:59385] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "adxWDAEnn1dQrOSHHNVe_gAAARA"]
[Mon Apr 13 10:33:48.923075 2026] [:error] [pid 7228:tid 7249] [client 193.37.32.165:36071] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adxWDAEnn1dQrOSHHNVfAQAAARM"]
[Mon Apr 13 10:33:54.119356 2026] [:error] [pid 63310:tid 63348] [client 193.37.32.137:22363] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "adxWEnoXpRU5ztmwPjLX9gAAAEQ"]
[Mon Apr 13 10:33:54.315750 2026] [:error] [pid 63406:tid 63431] [client 193.37.32.146:36461] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-activate.php"] [unique_id "adxWErHZEIkQ0Zmgp5pTzQAAANQ"]
[Mon Apr 13 10:34:04.514599 2026] [:error] [pid 7228:tid 7237] [client 193.37.32.131:52551] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/"] [unique_id "adxWHAEnn1dQrOSHHNVfHQAAAQc"]
[Mon Apr 13 10:34:05.714951 2026] [:error] [pid 63309:tid 63331] [client 193.37.32.146:38793] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "adxWHUpIKZ10weXpf0W7OAAAABI"]
[Mon Apr 13 10:34:05.911391 2026] [:error] [pid 7228:tid 7244] [client 193.37.32.109:31881] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/images/"] [unique_id "adxWHQEnn1dQrOSHHNVfHwAAAQ4"]
[Mon Apr 13 10:34:11.107784 2026] [:error] [pid 63406:tid 63435] [client 193.37.32.144:35805] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "adxWI7HZEIkQ0Zmgp5pUDAAAANg"]
[Mon Apr 13 10:34:11.305035 2026] [:error] [pid 63406:tid 63429] [client 193.37.32.140:46391] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adxWI7HZEIkQ0Zmgp5pUDQAAANI"]
[Mon Apr 13 10:34:16.502448 2026] [:error] [pid 63309:tid 63313] [client 193.37.32.163:63305] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/"] [unique_id "adxWKEpIKZ10weXpf0W7QQAAAAA"]
[Mon Apr 13 10:34:16.699574 2026] [:error] [pid 63309:tid 63337] [client 193.37.32.166:33819] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/"] [unique_id "adxWKEpIKZ10weXpf0W7RQAAABg"]
[Mon Apr 13 10:34:21.897362 2026] [:error] [pid 63406:tid 63431] [client 193.37.32.134:44969] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "adxWLbHZEIkQ0Zmgp5pUJgAAANQ"]
[Mon Apr 13 10:34:22.103671 2026] [:error] [pid 7228:tid 7254] [client 193.37.32.144:61509] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "adxWLgEnn1dQrOSHHNVfcwAAARg"]
[Mon Apr 13 10:34:27.390159 2026] [:error] [pid 63406:tid 63434] [client 193.37.32.175:27103] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "adxWM7HZEIkQ0Zmgp5pUMgAAANc"]
[Mon Apr 13 10:34:27.589174 2026] [:error] [pid 7228:tid 7238] [client 193.37.32.146:44413] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "adxWMwEnn1dQrOSHHNVf3QAAAQg"]
[Mon Apr 13 10:34:27.790559 2026] [:error] [pid 7228:tid 7236] [client 193.37.32.139:24295] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "adxWMwEnn1dQrOSHHNVf4AAAAQY"]
[Mon Apr 13 10:34:27.991352 2026] [:error] [pid 7228:tid 7232] [client 193.37.32.165:36025] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adxWMwEnn1dQrOSHHNVf5QAAAQI"]
[Mon Apr 13 10:34:28.277959 2026] [:error] [pid 63406:tid 63421] [client 193.37.32.134:26887] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adxWNLHZEIkQ0Zmgp5pUNQAAAMo"]
[Mon Apr 13 10:34:28.542676 2026] [:error] [pid 63406:tid 63420] [client 193.37.32.155:33025] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "adxWNLHZEIkQ0Zmgp5pUOAAAAMk"]
[Mon Apr 13 10:34:28.739558 2026] [:error] [pid 7228:tid 7248] [client 193.37.32.170:30749] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content.php"] [unique_id "adxWNAEnn1dQrOSHHNVf8AAAARI"]
[Mon Apr 13 10:34:33.938559 2026] [:error] [pid 63311:tid 63386] [client 193.37.32.134:34249] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/"] [unique_id "adxWOaHjrGN1MqBCVFliAAAAAI8"]
[Mon Apr 13 10:34:44.138096 2026] [:error] [pid 7228:tid 7238] [client 193.37.32.168:41499] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "adxWRAEnn1dQrOSHHNVf_gAAAQg"]
[Mon Apr 13 10:34:44.334042 2026] [:error] [pid 7228:tid 7252] [client 193.37.32.156:27773] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "adxWRAEnn1dQrOSHHNVf_wAAARY"]
[Mon Apr 13 10:34:44.531359 2026] [:error] [pid 7228:tid 7251] [client 193.37.32.138:30693] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/function/function.php"] [unique_id "adxWRAEnn1dQrOSHHNVgAgAAARU"]
[Mon Apr 13 10:34:44.729363 2026] [:error] [pid 7228:tid 7249] [client 193.37.32.133:28987] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "adxWRAEnn1dQrOSHHNVgBAAAARM"]
[Mon Apr 13 10:34:44.928190 2026] [:error] [pid 7228:tid 7253] [client 193.37.32.165:28187] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload/zczv.php"] [unique_id "adxWRAEnn1dQrOSHHNVgBgAAARc"]
[Mon Apr 13 10:34:45.125741 2026] [:error] [pid 63311:tid 63373] [client 193.37.32.137:54891] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "adxWRaHjrGN1MqBCVFliEwAAAII"]
[Mon Apr 13 10:34:50.326026 2026] [:error] [pid 63406:tid 63413] [client 193.37.32.155:61751] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "adxWSrHZEIkQ0Zmgp5pUXAAAAMI"]
[Mon Apr 13 10:34:50.523873 2026] [:error] [pid 63310:tid 63354] [client 193.37.32.157:57923] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/"] [unique_id "adxWSnoXpRU5ztmwPjLYJgAAAEo"]
[Mon Apr 13 10:34:50.719734 2026] [:error] [pid 63311:tid 63381] [client 193.37.32.110:43737] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/"] [unique_id "adxWSqHjrGN1MqBCVFliFgAAAIo"]
[Mon Apr 13 10:34:50.916149 2026] [:error] [pid 63310:tid 63362] [client 193.37.32.167:37997] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "adxWSnoXpRU5ztmwPjLYJwAAAFI"]
[Mon Apr 13 10:34:51.113874 2026] [:error] [pid 63311:tid 63382] [client 193.37.32.132:48201] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "adxWS6HjrGN1MqBCVFliFwAAAIs"]
[Mon Apr 13 10:34:51.311469 2026] [:error] [pid 63310:tid 63357] [client 193.37.32.147:22181] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "adxWS3oXpRU5ztmwPjLYKAAAAE0"]
[Mon Apr 13 10:34:51.508285 2026] [:error] [pid 63310:tid 63358] [client 193.37.32.138:25591] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "adxWS3oXpRU5ztmwPjLYKQAAAE4"]
[Mon Apr 13 10:34:51.708379 2026] [:error] [pid 63309:tid 63335] [client 193.37.32.174:35813] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "adxWS0pIKZ10weXpf0W7ZwAAABY"]
[Mon Apr 13 10:34:51.906364 2026] [:error] [pid 63311:tid 63372] [client 193.37.32.157:55195] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "adxWS6HjrGN1MqBCVFliGAAAAIE"]
[Mon Apr 13 10:34:52.106607 2026] [:error] [pid 63311:tid 63387] [client 193.37.32.157:43965] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "adxWTKHjrGN1MqBCVFliGQAAAJA"]
[Mon Apr 13 10:34:57.304052 2026] [:error] [pid 63311:tid 63393] [client 193.37.32.149:63403] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "adxWUaHjrGN1MqBCVFliHwAAAJY"]
[Mon Apr 13 10:34:57.503201 2026] [:error] [pid 63310:tid 63360] [client 193.37.32.134:49889] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "adxWUXoXpRU5ztmwPjLYKgAAAFA"]
[Mon Apr 13 10:34:57.785921 2026] [:error] [pid 7228:tid 7237] [client 193.37.32.135:41307] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adxWUQEnn1dQrOSHHNVgGwAAAQc"]
[Mon Apr 13 10:34:57.983180 2026] [:error] [pid 63310:tid 63356] [client 193.37.32.109:34023] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "adxWUXoXpRU5ztmwPjLYLAAAAEw"]
[Mon Apr 13 10:34:58.179937 2026] [:error] [pid 63310:tid 63364] [client 193.37.32.174:60895] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/"] [unique_id "adxWUnoXpRU5ztmwPjLYLQAAAFQ"]
[Mon Apr 13 10:34:58.375670 2026] [:error] [pid 63309:tid 63321] [client 193.37.32.141:53553] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "adxWUkpIKZ10weXpf0W7bQAAAAg"]
[Mon Apr 13 10:34:58.573220 2026] [:error] [pid 63309:tid 63326] [client 193.37.32.131:27973] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/image/"] [unique_id "adxWUkpIKZ10weXpf0W7bwAAAA0"]
[Mon Apr 13 10:34:58.767612 2026] [:error] [pid 63309:tid 63334] [client 193.37.32.155:62027] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "adxWUkpIKZ10weXpf0W7cQAAABU"]
[Mon Apr 13 10:34:58.962600 2026] [:error] [pid 7228:tid 7240] [client 193.37.32.169:55057] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/header.php"] [unique_id "adxWUgEnn1dQrOSHHNVgHQAAAQo"]
[Mon Apr 13 10:34:59.157101 2026] [:error] [pid 7228:tid 7241] [client 193.37.32.169:24751] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "adxWUwEnn1dQrOSHHNVgHgAAAQs"]
[Mon Apr 13 10:34:59.358189 2026] [:error] [pid 7228:tid 7238] [client 193.37.32.152:58411] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "adxWUwEnn1dQrOSHHNVgHwAAAQg"]
[Mon Apr 13 10:35:04.558666 2026] [:error] [pid 63406:tid 63427] [client 193.37.32.173:54087] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "adxWWLHZEIkQ0Zmgp5pUawAAANA"]
[Mon Apr 13 10:35:04.755875 2026] [:error] [pid 63309:tid 63314] [client 193.37.32.177:29755] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/includes/"] [unique_id "adxWWEpIKZ10weXpf0W7kQAAAAE"]
[Mon Apr 13 10:35:19.953885 2026] [:error] [pid 63311:tid 63394] [client 193.37.32.132:37657] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adxWZ6HjrGN1MqBCVFliLQAAAJc"]
[Mon Apr 13 10:35:20.152503 2026] [:error] [pid 63311:tid 63386] [client 193.37.32.164:27421] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "adxWaKHjrGN1MqBCVFliLwAAAI8"]
[Mon Apr 13 10:35:20.350711 2026] [:error] [pid 63406:tid 63432] [client 193.37.32.137:37039] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "adxWaLHZEIkQ0Zmgp5pUgQAAANU"]
[Mon Apr 13 10:35:20.549642 2026] [:error] [pid 7228:tid 7250] [client 193.37.32.161:52083] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyone/template-parts/"] [unique_id "adxWaAEnn1dQrOSHHNVgeAAAARQ"]
[Mon Apr 13 10:35:20.746864 2026] [:error] [pid 63406:tid 63422] [client 193.37.32.142:39177] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/buy.php"] [unique_id "adxWaLHZEIkQ0Zmgp5pUggAAAMs"]
[Mon Apr 13 10:35:20.943366 2026] [:error] [pid 63406:tid 63414] [client 193.37.32.139:44327] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "adxWaLHZEIkQ0Zmgp5pUhAAAAMM"]
[Mon Apr 13 10:35:22.153042 2026] [:error] [pid 63311:tid 63374] [client 193.37.32.173:20385] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "adxWaqHjrGN1MqBCVFliMAAAAIM"]
[Mon Apr 13 10:35:22.358694 2026] [:error] [pid 7228:tid 7235] [client 193.37.32.141:45395] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "adxWagEnn1dQrOSHHNVgewAAAQU"]
[Mon Apr 13 10:35:22.571481 2026] [:error] [pid 63310:tid 63358] [client 193.37.32.166:62393] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "adxWanoXpRU5ztmwPjLYXgAAAE4"]
[Mon Apr 13 10:35:22.772531 2026] [:error] [pid 7228:tid 7247] [client 193.37.32.163:58613] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/num.php"] [unique_id "adxWagEnn1dQrOSHHNVggAAAARE"]
[Mon Apr 13 10:35:22.968976 2026] [:error] [pid 63406:tid 63429] [client 193.37.32.141:53451] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "adxWarHZEIkQ0Zmgp5pUhwAAANI"]
[Mon Apr 13 10:35:23.166975 2026] [:error] [pid 63406:tid 63413] [client 193.37.32.155:41395] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "adxWa7HZEIkQ0Zmgp5pUiAAAAMI"]
[Mon Apr 13 10:35:23.364221 2026] [:error] [pid 63406:tid 63415] [client 193.37.32.131:38915] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "adxWa7HZEIkQ0Zmgp5pUiQAAAMQ"]
[Mon Apr 13 10:35:23.563296 2026] [:error] [pid 63406:tid 63412] [client 193.37.32.110:53443] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "adxWa7HZEIkQ0Zmgp5pUigAAAME"]
[Mon Apr 13 10:35:28.761652 2026] [:error] [pid 63406:tid 63434] [client 193.37.32.174:34637] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "adxWcLHZEIkQ0Zmgp5pUkQAAANc"]
[Mon Apr 13 10:35:28.957386 2026] [:error] [pid 63406:tid 63425] [client 193.37.32.134:58271] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/"] [unique_id "adxWcLHZEIkQ0Zmgp5pUkgAAAM4"]
[Mon Apr 13 10:35:29.160125 2026] [:error] [pid 63309:tid 63337] [client 193.37.32.165:39941] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "adxWcUpIKZ10weXpf0W7twAAABg"]
[Mon Apr 13 10:35:34.360523 2026] [:error] [pid 63309:tid 63314] [client 193.37.32.135:36381] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/pattern/"] [unique_id "adxWdkpIKZ10weXpf0W7wgAAAAE"]
[Mon Apr 13 10:35:34.557095 2026] [:error] [pid 63311:tid 63392] [client 193.37.32.157:44267] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/system.php"] [unique_id "adxWdqHjrGN1MqBCVFliQQAAAJU"]
[Mon Apr 13 10:35:34.752696 2026] [:error] [pid 63311:tid 63382] [client 193.37.32.173:25951] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "adxWdqHjrGN1MqBCVFliRAAAAIs"]
[Mon Apr 13 10:35:34.950490 2026] [:error] [pid 63311:tid 63387] [client 193.37.32.137:23447] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "adxWdqHjrGN1MqBCVFliRgAAAJA"]
[Mon Apr 13 10:35:36.163654 2026] [:error] [pid 63309:tid 63321] [client 193.37.32.131:53123] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "adxWeEpIKZ10weXpf0W7xAAAAAg"]
[Mon Apr 13 10:35:36.360208 2026] [:error] [pid 7228:tid 7253] [client 193.37.32.154:57941] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "adxWeAEnn1dQrOSHHNVgngAAARc"]
[Mon Apr 13 10:35:36.556498 2026] [:error] [pid 7228:tid 7230] [client 193.37.32.140:48721] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "adxWeAEnn1dQrOSHHNVgnwAAAQA"]
[Mon Apr 13 10:35:36.753748 2026] [:error] [pid 7228:tid 7254] [client 193.37.32.112:45401] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "adxWeAEnn1dQrOSHHNVgoAAAARg"]
[Mon Apr 13 10:35:36.948970 2026] [:error] [pid 63311:tid 63383] [client 193.37.32.165:53485] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "adxWeKHjrGN1MqBCVFliSQAAAIw"]
[Mon Apr 13 10:35:37.150506 2026] [:error] [pid 63311:tid 63391] [client 193.37.32.110:33439] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "adxWeaHjrGN1MqBCVFliSgAAAJQ"]
[Mon Apr 13 10:35:42.347109 2026] [:error] [pid 63310:tid 63354] [client 193.37.32.153:43039] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/images/"] [unique_id "adxWfnoXpRU5ztmwPjLYdQAAAEo"]
[Mon Apr 13 10:35:42.545396 2026] [:error] [pid 63310:tid 63368] [client 193.37.32.169:40851] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "adxWfnoXpRU5ztmwPjLYdgAAAFg"]
[Mon Apr 13 10:35:42.783728 2026] [:error] [pid 63311:tid 63375] [client 193.37.32.110:32631] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "adxWfqHjrGN1MqBCVFliUwAAAIQ"]
[Mon Apr 13 10:35:42.984788 2026] [:error] [pid 7228:tid 7240] [client 193.37.32.154:28467] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "adxWfgEnn1dQrOSHHNVgpwAAAQo"]
[Mon Apr 13 10:35:48.185205 2026] [:error] [pid 63309:tid 63330] [client 193.37.32.137:61263] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-themes.php"] [unique_id "adxWhEpIKZ10weXpf0W7zwAAABE"]
[Mon Apr 13 10:35:48.380168 2026] [:error] [pid 7228:tid 7251] [client 193.37.32.164:34059] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "adxWhAEnn1dQrOSHHNVgsgAAARU"]
[Mon Apr 13 10:35:50.258662 2026] [:error] [pid 63310:tid 63354] [client 193.37.32.175:43793] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "adxWhnoXpRU5ztmwPjLYeQAAAEo"]
[Mon Apr 13 10:35:50.456709 2026] [:error] [pid 7228:tid 7246] [client 193.37.32.163:54509] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "adxWhgEnn1dQrOSHHNVgtAAAARA"]
[Mon Apr 13 10:35:51.654244 2026] [:error] [pid 7228:tid 7242] [client 193.37.32.142:34277] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/"] [unique_id "adxWhwEnn1dQrOSHHNVgtgAAAQw"]
[Mon Apr 13 10:35:51.850959 2026] [:error] [pid 7228:tid 7248] [client 193.37.32.161:47591] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "adxWhwEnn1dQrOSHHNVgtwAAARI"]
[Mon Apr 13 10:35:52.047078 2026] [:error] [pid 63406:tid 63412] [client 193.37.32.173:34729] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/"] [unique_id "adxWiLHZEIkQ0Zmgp5pUxwAAAME"]
[Mon Apr 13 10:36:07.246841 2026] [:error] [pid 63406:tid 63426] [client 193.37.32.177:43695] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "adxWl7HZEIkQ0Zmgp5pU9wAAAM8"]
[Mon Apr 13 10:36:23.445824 2026] [:error] [pid 7228:tid 7237] [client 193.37.32.109:53743] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "adxWpwEnn1dQrOSHHNVg5AAAAQc"]
[Mon Apr 13 10:36:23.641312 2026] [:error] [pid 63309:tid 63318] [client 193.37.32.134:47919] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "adxWp0pIKZ10weXpf0W7-QAAAAU"]
[Mon Apr 13 10:36:23.842330 2026] [:error] [pid 63309:tid 63328] [client 193.37.32.138:61947] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "adxWp0pIKZ10weXpf0W7-gAAAA8"]
[Mon Apr 13 10:36:24.044544 2026] [:error] [pid 63310:tid 63368] [client 193.37.32.165:56387] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "adxWqHoXpRU5ztmwPjLYqwAAAFg"]
[Mon Apr 13 10:36:29.242081 2026] [:error] [pid 7228:tid 7237] [client 193.37.32.141:47891] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "adxWrQEnn1dQrOSHHNVg6gAAAQc"]
[Mon Apr 13 10:36:29.438621 2026] [:error] [pid 63311:tid 63394] [client 193.37.32.142:37985] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "adxWraHjrGN1MqBCVFlihwAAAJc"]
[Mon Apr 13 10:36:29.632816 2026] [:error] [pid 7228:tid 7251] [client 193.37.32.152:31105] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/lock360.php"] [unique_id "adxWrQEnn1dQrOSHHNVg7gAAARU"]
[Mon Apr 13 10:36:29.828758 2026] [:error] [pid 63309:tid 63323] [client 193.37.32.164:65065] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "adxWrUpIKZ10weXpf0W8BgAAAAo"]
[Mon Apr 13 10:36:35.023466 2026] [:error] [pid 63406:tid 63435] [client 193.37.32.132:43889] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "adxWs7HZEIkQ0Zmgp5pVUwAAANg"]
[Mon Apr 13 10:36:35.222717 2026] [:error] [pid 7228:tid 7254] [client 193.37.32.169:53463] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "adxWswEnn1dQrOSHHNVg-QAAARg"]
[Mon Apr 13 10:36:40.419689 2026] [:error] [pid 7228:tid 7247] [client 193.37.32.177:29291] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "adxWuAEnn1dQrOSHHNVhDQAAARE"]
[Mon Apr 13 10:36:40.615858 2026] [:error] [pid 63406:tid 63422] [client 193.37.32.135:45513] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/home-link/"] [unique_id "adxWuLHZEIkQ0Zmgp5pVXAAAAMs"]
[Mon Apr 13 10:36:45.813594 2026] [:error] [pid 63310:tid 63356] [client 193.37.32.132:25115] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "adxWvXoXpRU5ztmwPjLYuwAAAEw"]
[Mon Apr 13 10:36:47.021888 2026] [:error] [pid 63310:tid 63354] [client 193.37.32.132:62829] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "adxWv3oXpRU5ztmwPjLYvQAAAEo"]
[Mon Apr 13 10:36:57.220411 2026] [:error] [pid 63311:tid 63377] [client 193.37.32.163:28259] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adxWyaHjrGN1MqBCVFlingAAAIY"]
[Mon Apr 13 10:36:57.416713 2026] [:error] [pid 63311:tid 63376] [client 193.37.32.133:61041] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "adxWyaHjrGN1MqBCVFlioAAAAIU"]
[Mon Apr 13 10:36:57.617409 2026] [:error] [pid 63311:tid 63378] [client 193.37.32.147:51717] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "adxWyaHjrGN1MqBCVFliowAAAIc"]
[Mon Apr 13 10:36:57.812398 2026] [:error] [pid 63311:tid 63382] [client 193.37.32.163:24383] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "adxWyaHjrGN1MqBCVFlipgAAAIs"]
[Mon Apr 13 10:36:58.010414 2026] [:error] [pid 63309:tid 63335] [client 193.37.32.157:26423] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/panel.php"] [unique_id "adxWykpIKZ10weXpf0W8EwAAABY"]
[Mon Apr 13 10:36:58.208102 2026] [:error] [pid 63309:tid 63318] [client 193.37.32.165:31689] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "adxWykpIKZ10weXpf0W8FQAAAAU"]
[Mon Apr 13 10:36:58.404640 2026] [:error] [pid 63311:tid 63390] [client 193.37.32.131:34683] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/"] [unique_id "adxWyqHjrGN1MqBCVFliqAAAAJM"]
[Mon Apr 13 10:37:03.603284 2026] [:error] [pid 63310:tid 63367] [client 193.37.32.133:40859] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/widgets/"] [unique_id "adxWz3oXpRU5ztmwPjLY2wAAAFc"]
[Mon Apr 13 10:37:03.803369 2026] [:error] [pid 7228:tid 7250] [client 193.37.32.162:31765] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/reception1/includes/tcpdf/examples/config/"] [unique_id "adxWzwEnn1dQrOSHHNVhKAAAARQ"]
[Mon Apr 13 10:37:09.004057 2026] [:error] [pid 7228:tid 7233] [client 193.37.32.134:57321] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options.php"] [unique_id "adxW1QEnn1dQrOSHHNVhNgAAAQM"]
[Mon Apr 13 10:37:09.201357 2026] [:error] [pid 63311:tid 63385] [client 193.37.32.133:62101] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "adxW1aHjrGN1MqBCVFlivQAAAI4"]
[Mon Apr 13 10:37:09.399884 2026] [:error] [pid 63310:tid 63367] [client 193.37.32.154:37351] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "adxW1XoXpRU5ztmwPjLY5AAAAFc"]
[Mon Apr 13 10:37:09.598378 2026] [:error] [pid 63406:tid 63415] [client 193.37.32.165:37347] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "adxW1bHZEIkQ0Zmgp5pVewAAAMQ"]
[Mon Apr 13 10:37:14.799172 2026] [:error] [pid 63309:tid 63320] [client 193.37.32.131:64311] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "adxW2kpIKZ10weXpf0W8IAAAAAc"]
[Mon Apr 13 10:37:14.995432 2026] [:error] [pid 7228:tid 7246] [client 193.37.32.171:45501] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adxW2gEnn1dQrOSHHNVhOwAAARA"]
[Mon Apr 13 10:37:15.194040 2026] [:error] [pid 63311:tid 63390] [client 193.37.32.164:57053] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "adxW26HjrGN1MqBCVFlixwAAAJM"]
[Mon Apr 13 10:37:15.393350 2026] [:error] [pid 63311:tid 63374] [client 193.37.32.168:45001] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "adxW26HjrGN1MqBCVFliyAAAAIM"]
[Mon Apr 13 10:37:20.591771 2026] [:error] [pid 63309:tid 63323] [client 193.37.32.174:20947] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "adxW4EpIKZ10weXpf0W8KAAAAAo"]
[Mon Apr 13 10:37:20.789231 2026] [:error] [pid 63311:tid 63378] [client 193.37.32.133:50955] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "adxW4KHjrGN1MqBCVFlizAAAAIc"]
[Mon Apr 13 10:37:20.984432 2026] [:error] [pid 7228:tid 7250] [client 193.37.32.112:44533] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "adxW4AEnn1dQrOSHHNVhSQAAARQ"]
[Mon Apr 13 10:37:21.179912 2026] [:error] [pid 63406:tid 63427] [client 193.37.32.158:36755] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "adxW4bHZEIkQ0Zmgp5pVjwAAANA"]
[Mon Apr 13 10:37:21.374848 2026] [:error] [pid 63406:tid 63424] [client 193.37.32.109:59991] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "adxW4bHZEIkQ0Zmgp5pVkAAAAM0"]
[Mon Apr 13 10:37:21.569465 2026] [:error] [pid 7228:tid 7249] [client 193.37.32.168:65337] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "adxW4QEnn1dQrOSHHNVhSgAAARM"]
[Mon Apr 13 10:37:21.766558 2026] [:error] [pid 63309:tid 63336] [client 193.37.32.138:57023] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "adxW4UpIKZ10weXpf0W8KgAAABc"]
[Mon Apr 13 10:37:31.963786 2026] [:error] [pid 63311:tid 63393] [client 193.37.32.176:54425] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/template-singl-portfolio.php"] [unique_id "adxW66HjrGN1MqBCVFli1QAAAJY"]
[Mon Apr 13 10:37:32.160966 2026] [:error] [pid 7228:tid 7248] [client 193.37.32.110:29419] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-cache-sys/"] [unique_id "adxW7AEnn1dQrOSHHNVhVAAAARI"]
[Mon Apr 13 10:37:32.359991 2026] [:error] [pid 7228:tid 7235] [client 193.37.32.140:38295] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "adxW7AEnn1dQrOSHHNVhVQAAAQU"]
[Mon Apr 13 10:37:32.556138 2026] [:error] [pid 7228:tid 7250] [client 193.37.32.156:54841] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/"] [unique_id "adxW7AEnn1dQrOSHHNVhVgAAARQ"]
[Mon Apr 13 10:37:32.753049 2026] [:error] [pid 7228:tid 7230] [client 193.37.32.134:40951] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "adxW7AEnn1dQrOSHHNVhVwAAAQA"]
[Mon Apr 13 10:37:32.951539 2026] [:error] [pid 7228:tid 7232] [client 193.37.32.169:20195] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "adxW7AEnn1dQrOSHHNVhWAAAAQI"]
[Mon Apr 13 10:37:33.147496 2026] [:error] [pid 7228:tid 7245] [client 193.37.32.154:33945] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "adxW7QEnn1dQrOSHHNVhWgAAAQ8"]
[Mon Apr 13 10:37:33.342087 2026] [:error] [pid 63406:tid 63435] [client 193.37.32.175:50829] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "adxW7bHZEIkQ0Zmgp5pVlAAAANg"]
[Mon Apr 13 10:37:38.538632 2026] [:error] [pid 7228:tid 7249] [client 193.37.32.169:62631] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "adxW8gEnn1dQrOSHHNVhYgAAARM"]
[Mon Apr 13 10:37:38.735060 2026] [:error] [pid 63310:tid 63357] [client 193.37.32.147:58679] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/providers/"] [unique_id "adxW8noXpRU5ztmwPjLY7wAAAE0"]
[Mon Apr 13 10:37:38.930221 2026] [:error] [pid 7228:tid 7231] [client 193.37.32.164:46657] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-cron.php"] [unique_id "adxW8gEnn1dQrOSHHNVhYwAAAQE"]
[Mon Apr 13 10:37:39.125648 2026] [:error] [pid 7228:tid 7251] [client 193.37.32.152:56515] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/lock360.php"] [unique_id "adxW8wEnn1dQrOSHHNVhZAAAARU"]
[Mon Apr 13 10:37:39.325626 2026] [:error] [pid 63309:tid 63325] [client 193.37.32.153:31501] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "adxW80pIKZ10weXpf0W8PAAAAAw"]
[Mon Apr 13 10:37:39.522913 2026] [:error] [pid 63406:tid 63412] [client 193.37.32.164:23897] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adxW87HZEIkQ0Zmgp5pVmwAAAME"]
[Mon Apr 13 10:37:39.719399 2026] [:error] [pid 63310:tid 63365] [client 193.37.32.133:63835] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "adxW83oXpRU5ztmwPjLY8AAAAFU"]
[Mon Apr 13 10:37:39.918377 2026] [:error] [pid 63406:tid 63421] [client 193.37.32.139:49555] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/network/"] [unique_id "adxW87HZEIkQ0Zmgp5pVnQAAAMo"]
[Mon Apr 13 10:37:40.114763 2026] [:error] [pid 7228:tid 7244] [client 193.37.32.154:52899] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "adxW9AEnn1dQrOSHHNVhZwAAAQ4"]
[Mon Apr 13 10:37:40.311860 2026] [:error] [pid 7228:tid 7250] [client 193.37.32.173:44813] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/session_init.php"] [unique_id "adxW9AEnn1dQrOSHHNVhagAAARQ"]
[Mon Apr 13 10:37:40.510308 2026] [:error] [pid 63310:tid 63353] [client 193.37.32.176:39573] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/file.php"] [unique_id "adxW9HoXpRU5ztmwPjLY8gAAAEk"]
[Mon Apr 13 10:37:40.708081 2026] [:error] [pid 7228:tid 7232] [client 193.37.32.110:56613] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/joker.php"] [unique_id "adxW9AEnn1dQrOSHHNVhawAAAQI"]
[Mon Apr 13 10:37:41.923074 2026] [:error] [pid 63309:tid 63335] [client 193.37.32.110:44129] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/page-list/"] [unique_id "adxW9UpIKZ10weXpf0W8PQAAABY"]
[Mon Apr 13 10:37:47.122000 2026] [:error] [pid 63310:tid 63357] [client 193.37.32.138:36405] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist"] [unique_id "adxW-3oXpRU5ztmwPjLY9gAAAE0"]
[Mon Apr 13 10:37:52.318423 2026] [:error] [pid 63311:tid 63374] [client 193.37.32.146:39835] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "adxXAKHjrGN1MqBCVFljIQAAAIM"]
[Mon Apr 13 10:37:52.520732 2026] [:error] [pid 63311:tid 63384] [client 193.37.32.153:62747] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/colors/"] [unique_id "adxXAKHjrGN1MqBCVFljIgAAAI0"]
[Mon Apr 13 10:37:52.719992 2026] [:error] [pid 63311:tid 63381] [client 193.37.32.138:29871] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "adxXAKHjrGN1MqBCVFljIwAAAIo"]
[Mon Apr 13 10:37:57.916788 2026] [:error] [pid 7228:tid 7230] [client 193.37.32.153:65045] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "adxXBQEnn1dQrOSHHNVhkAAAAQA"]
[Mon Apr 13 10:37:58.113818 2026] [:error] [pid 63309:tid 63330] [client 193.37.32.174:27719] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "adxXBkpIKZ10weXpf0W8QQAAABE"]
[Mon Apr 13 10:37:58.310002 2026] [:error] [pid 7228:tid 7235] [client 193.37.32.153:28677] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "adxXBgEnn1dQrOSHHNVhlgAAAQU"]
[Mon Apr 13 10:37:58.506610 2026] [:error] [pid 7228:tid 7232] [client 193.37.32.177:41967] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/fonts/"] [unique_id "adxXBgEnn1dQrOSHHNVhmQAAAQI"]
[Mon Apr 13 10:37:58.703195 2026] [:error] [pid 63311:tid 63389] [client 193.37.32.158:29869] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-domain.php"] [unique_id "adxXBqHjrGN1MqBCVFljLQAAAJI"]
[Mon Apr 13 10:37:58.902369 2026] [:error] [pid 63406:tid 63434] [client 193.37.32.155:51565] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "adxXBrHZEIkQ0Zmgp5pVpQAAANc"]
[Mon Apr 13 10:38:04.100214 2026] [:error] [pid 63406:tid 63422] [client 193.37.32.139:49363] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/classwithtostring.php"] [unique_id "adxXDLHZEIkQ0Zmgp5pVrQAAAMs"]
[Mon Apr 13 10:38:04.298518 2026] [:error] [pid 63311:tid 63389] [client 193.37.32.165:40683] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "adxXDKHjrGN1MqBCVFljMQAAAJI"]
[Mon Apr 13 10:38:09.495576 2026] [:error] [pid 63309:tid 63322] [client 193.37.32.160:31483] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/customize/"] [unique_id "adxXEUpIKZ10weXpf0W8TQAAAAk"]
[Mon Apr 13 10:38:14.690835 2026] [:error] [pid 63311:tid 63376] [client 193.37.32.137:23991] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/"] [unique_id "adxXFqHjrGN1MqBCVFljSQAAAIU"]
[Mon Apr 13 10:38:14.886312 2026] [:error] [pid 63311:tid 63392] [client 193.37.32.154:64959] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "adxXFqHjrGN1MqBCVFljSgAAAJU"]
[Mon Apr 13 10:38:15.081975 2026] [:error] [pid 63311:tid 63387] [client 193.37.32.173:61033] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/temp/update_extract/revslider.php"] [unique_id "adxXF6HjrGN1MqBCVFljSwAAAJA"]
[Mon Apr 13 10:38:15.279376 2026] [:error] [pid 63311:tid 63388] [client 193.37.32.167:30235] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pretty-link/js/build/wp-cron.php"] [unique_id "adxXF6HjrGN1MqBCVFljTAAAAJE"]
[Mon Apr 13 10:38:15.479107 2026] [:error] [pid 7228:tid 7238] [client 193.37.32.174:51809] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "adxXFwEnn1dQrOSHHNVhuAAAAQg"]
[Mon Apr 13 10:38:15.676944 2026] [:error] [pid 7228:tid 7246] [client 193.37.32.169:33335] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/"] [unique_id "adxXFwEnn1dQrOSHHNVhuQAAARA"]
[Mon Apr 13 10:38:15.873915 2026] [:error] [pid 7228:tid 7235] [client 193.37.32.157:62709] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "adxXFwEnn1dQrOSHHNVhuwAAAQU"]
[Mon Apr 13 10:38:16.068390 2026] [:error] [pid 63406:tid 63414] [client 193.37.32.164:62337] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "adxXGLHZEIkQ0Zmgp5pVugAAAMM"]
[Mon Apr 13 10:38:16.266388 2026] [:error] [pid 63406:tid 63426] [client 193.37.32.176:41671] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "adxXGLHZEIkQ0Zmgp5pVuwAAAM8"]
[Mon Apr 13 10:38:16.466053 2026] [:error] [pid 63406:tid 63433] [client 193.37.32.146:64145] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/author-template-object.php"] [unique_id "adxXGLHZEIkQ0Zmgp5pVvQAAANY"]
[Mon Apr 13 10:38:21.663245 2026] [:error] [pid 7228:tid 7245] [client 193.37.32.106:54889] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/text.php"] [unique_id "adxXHQEnn1dQrOSHHNVhxAAAAQ8"]
[Mon Apr 13 10:38:21.858287 2026] [:error] [pid 63311:tid 63379] [client 193.37.32.163:50811] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "adxXHaHjrGN1MqBCVFljagAAAIg"]
[Mon Apr 13 10:38:27.055678 2026] [:error] [pid 63309:tid 63332] [client 193.37.32.168:62647] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "adxXI0pIKZ10weXpf0W8bwAAABM"]
[Mon Apr 13 10:38:27.254675 2026] [:error] [pid 7228:tid 7249] [client 193.37.32.146:45625] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/zz.php"] [unique_id "adxXIwEnn1dQrOSHHNVh0QAAARM"]
[Mon Apr 13 10:38:27.452812 2026] [:error] [pid 63406:tid 63434] [client 193.37.32.144:56281] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "adxXI7HZEIkQ0Zmgp5pVzwAAANc"]
[Mon Apr 13 10:38:32.649786 2026] [:error] [pid 7228:tid 7247] [client 193.37.32.142:23745] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "adxXKAEnn1dQrOSHHNVh2wAAARE"]
[Mon Apr 13 10:38:32.845269 2026] [:error] [pid 63310:tid 63354] [client 193.37.32.152:26981] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "adxXKHoXpRU5ztmwPjLZGQAAAEo"]
[Mon Apr 13 10:38:34.543592 2026] [:error] [pid 63310:tid 63353] [client 193.37.32.152:33101] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-signin.php"] [unique_id "adxXKnoXpRU5ztmwPjLZHQAAAEk"]
[Mon Apr 13 10:38:34.739760 2026] [:error] [pid 7228:tid 7244] [client 193.37.32.146:38417] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-mail.phpp"] [unique_id "adxXKgEnn1dQrOSHHNVh3QAAAQ4"]
[Mon Apr 13 10:38:34.935429 2026] [:error] [pid 63311:tid 63371] [client 193.37.32.140:49783] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxXKqHjrGN1MqBCVFljhgAAAIA"]
[Mon Apr 13 10:38:35.130978 2026] [:error] [pid 63311:tid 63372] [client 193.37.32.165:29513] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/upload/"] [unique_id "adxXK6HjrGN1MqBCVFljhwAAAIE"]
[Mon Apr 13 10:38:40.330788 2026] [:error] [pid 63406:tid 63411] [client 193.37.32.109:32353] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "adxXMLHZEIkQ0Zmgp5pV3AAAAMA"]
[Mon Apr 13 10:38:45.528998 2026] [:error] [pid 63310:tid 63359] [client 193.37.32.112:64659] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/chosen.php"] [unique_id "adxXNXoXpRU5ztmwPjLZJAAAAE8"]
[Mon Apr 13 10:38:45.724167 2026] [:error] [pid 63309:tid 63324] [client 193.37.32.169:43025] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "adxXNUpIKZ10weXpf0W8fgAAAAs"]
[Mon Apr 13 10:38:51.959730 2026] [:error] [pid 63309:tid 63322] [client 193.37.32.169:54733] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/Text/about.php"] [unique_id "adxXO0pIKZ10weXpf0W8gQAAAAk"]
[Mon Apr 13 10:39:07.157338 2026] [:error] [pid 63406:tid 63426] [client 193.37.32.149:25747] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/backup.php"] [unique_id "adxXS7HZEIkQ0Zmgp5pWFwAAAM8"]
[Mon Apr 13 10:39:07.353186 2026] [:error] [pid 63406:tid 63416] [client 193.37.32.110:23523] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/panel.php"] [unique_id "adxXS7HZEIkQ0Zmgp5pWGQAAAMU"]
[Mon Apr 13 10:39:07.551888 2026] [:error] [pid 63406:tid 63432] [client 193.37.32.142:49795] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/login.php"] [unique_id "adxXS7HZEIkQ0Zmgp5pWGwAAANU"]
[Mon Apr 13 10:39:07.749693 2026] [:error] [pid 63406:tid 63431] [client 193.37.32.112:27157] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adxXS7HZEIkQ0Zmgp5pWHAAAANQ"]
[Mon Apr 13 10:39:07.948385 2026] [:error] [pid 63406:tid 63425] [client 193.37.32.177:63657] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/config.php"] [unique_id "adxXS7HZEIkQ0Zmgp5pWHQAAAM4"]
[Mon Apr 13 10:39:08.145003 2026] [:error] [pid 63309:tid 63315] [client 193.37.32.139:45453] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/plugins/about.php"] [unique_id "adxXTEpIKZ10weXpf0W8iAAAAAI"]
[Mon Apr 13 10:39:08.344205 2026] [:error] [pid 7228:tid 7247] [client 193.37.32.176:40011] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/network/about.php"] [unique_id "adxXTAEnn1dQrOSHHNViLwAAARE"]
[Mon Apr 13 10:39:08.579665 2026] [:error] [pid 63406:tid 63413] [client 193.37.32.106:58681] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/upload.php"] [unique_id "adxXTLHZEIkQ0Zmgp5pWIAAAAMI"]
[Mon Apr 13 10:39:09.783931 2026] [:error] [pid 63311:tid 63383] [client 193.37.32.165:64985] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/srtdgd.php"] [unique_id "adxXTaHjrGN1MqBCVFljqgAAAIw"]
[Mon Apr 13 10:39:09.980546 2026] [:error] [pid 63310:tid 63363] [client 193.37.32.141:39983] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/advanc.php"] [unique_id "adxXTXoXpRU5ztmwPjLZNgAAAFM"]
[Mon Apr 13 10:39:10.175583 2026] [:error] [pid 7228:tid 7234] [client 193.37.32.134:53167] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/uploads/config.php"] [unique_id "adxXTgEnn1dQrOSHHNViNgAAAQQ"]
[Mon Apr 13 10:39:10.371150 2026] [:error] [pid 63311:tid 63391] [client 193.37.32.131:37007] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/home.php"] [unique_id "adxXTqHjrGN1MqBCVFljqwAAAJQ"]
[Mon Apr 13 10:39:15.569053 2026] [:error] [pid 63311:tid 63371] [client 193.37.32.171:60857] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/js_composer_theme/include/classes/vendors/plugins/login.php"] [unique_id "adxXU6HjrGN1MqBCVFljrwAAAIA"]
[Mon Apr 13 10:39:15.766962 2026] [:error] [pid 63310:tid 63351] [client 193.37.32.139:32883] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/plugins/api.php"] [unique_id "adxXU3oXpRU5ztmwPjLZOQAAAEc"]
[Mon Apr 13 10:39:15.965564 2026] [:error] [pid 63310:tid 63348] [client 193.37.32.167:34645] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-mail.php"] [unique_id "adxXU3oXpRU5ztmwPjLZOgAAAEQ"]
[Mon Apr 13 10:39:16.169577 2026] [:error] [pid 63309:tid 63318] [client 193.37.32.160:26331] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/jetpack/extensions/plugins/load.php"] [unique_id "adxXVEpIKZ10weXpf0W8kwAAAAU"]
[Mon Apr 13 10:39:16.366822 2026] [:error] [pid 7228:tid 7234] [client 193.37.32.162:29769] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/loginpress/css/themes/wp-cron.php"] [unique_id "adxXVAEnn1dQrOSHHNViQAAAAQQ"]
[Mon Apr 13 10:39:16.565163 2026] [:error] [pid 63406:tid 63416] [client 193.37.32.176:60829] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/fileorganizer/manager/php/plugins/wp-load.php"] [unique_id "adxXVLHZEIkQ0Zmgp5pWJgAAAMU"]
[Mon Apr 13 10:39:16.764067 2026] [:error] [pid 63310:tid 63358] [client 193.37.32.141:56137] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/jupiter/assets/js/plugins/wp-signup.php"] [unique_id "adxXVHoXpRU5ztmwPjLZPQAAAE4"]
[Mon Apr 13 10:39:16.960245 2026] [:error] [pid 63310:tid 63360] [client 193.37.32.166:38081] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/xmlrpc.php"] [unique_id "adxXVHoXpRU5ztmwPjLZPgAAAFA"]
[Mon Apr 13 10:39:17.158783 2026] [:error] [pid 63406:tid 63428] [client 193.37.32.139:53985] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/options.php"] [unique_id "adxXVbHZEIkQ0Zmgp5pWKwAAANE"]
[Mon Apr 13 10:39:17.355804 2026] [:error] [pid 63406:tid 63427] [client 193.37.32.109:48061] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/module.php"] [unique_id "adxXVbHZEIkQ0Zmgp5pWLAAAANA"]
[Mon Apr 13 10:39:17.552500 2026] [:error] [pid 63311:tid 63392] [client 193.37.32.152:22303] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/xy.php"] [unique_id "adxXVaHjrGN1MqBCVFljsAAAAJU"]
[Mon Apr 13 10:39:17.755645 2026] [:error] [pid 63311:tid 63382] [client 193.37.32.135:40915] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xy.php"] [unique_id "adxXVaHjrGN1MqBCVFljsQAAAIs"]
[Mon Apr 13 10:39:17.957188 2026] [:error] [pid 63311:tid 63385] [client 193.37.32.132:52505] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/footer-class.php"] [unique_id "adxXVaHjrGN1MqBCVFljswAAAI4"]
[Mon Apr 13 10:39:19.162692 2026] [:error] [pid 63311:tid 63377] [client 193.37.32.166:53837] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/master-blog/content-none-new-compiler.php"] [unique_id "adxXV6HjrGN1MqBCVFljtgAAAIY"]
[Mon Apr 13 10:39:24.359953 2026] [:error] [pid 7228:tid 7236] [client 193.37.32.112:42975] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/css/styles-rtl.php"] [unique_id "adxXXAEnn1dQrOSHHNViTwAAAQY"]
[Mon Apr 13 10:39:24.557771 2026] [:error] [pid 63310:tid 63345] [client 193.37.32.147:31757] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentyfifteen/content-search.bar.php"] [unique_id "adxXXHoXpRU5ztmwPjLZRQAAAEE"]
[Mon Apr 13 10:39:24.758685 2026] [:error] [pid 63311:tid 63394] [client 193.37.32.135:31917] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentyfourteen/inc/widgets-core.php"] [unique_id "adxXXKHjrGN1MqBCVFljvAAAAJc"]
[Mon Apr 13 10:39:24.954676 2026] [:error] [pid 63311:tid 63372] [client 193.37.32.157:23903] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/wp-mediaelement.php"] [unique_id "adxXXKHjrGN1MqBCVFljvQAAAIE"]
[Mon Apr 13 10:39:30.150404 2026] [:error] [pid 63309:tid 63313] [client 193.37.32.112:45377] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/feed-data.php"] [unique_id "adxXYkpIKZ10weXpf0W8ngAAAAA"]
[Mon Apr 13 10:39:35.350286 2026] [:error] [pid 63310:tid 63349] [client 193.37.32.174:40963] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/capabilities-json.php"] [unique_id "adxXZ3oXpRU5ztmwPjLZSQAAAEU"]
[Mon Apr 13 10:39:35.550715 2026] [:error] [pid 7228:tid 7251] [client 193.37.32.141:45705] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/module.audio.ogg-data.php"] [unique_id "adxXZwEnn1dQrOSHHNViYAAAARU"]
[Mon Apr 13 10:39:35.750526 2026] [:error] [pid 63406:tid 63420] [client 193.37.32.156:57209] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-calendar-js.php"] [unique_id "adxXZ7HZEIkQ0Zmgp5pWPwAAAMk"]
[Mon Apr 13 10:39:36.956431 2026] [:error] [pid 63310:tid 63348] [client 193.37.32.142:64551] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/"] [unique_id "adxXaHoXpRU5ztmwPjLZSgAAAEQ"]
[Mon Apr 13 10:39:37.153726 2026] [:error] [pid 63311:tid 63371] [client 193.37.32.163:25913] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "adxXaaHjrGN1MqBCVFljyAAAAIA"]
[Mon Apr 13 10:39:37.349342 2026] [:error] [pid 63310:tid 63367] [client 193.37.32.147:51019] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/lib.php"] [unique_id "adxXaXoXpRU5ztmwPjLZSwAAAFc"]
[Mon Apr 13 10:39:43.559120 2026] [:error] [pid 63406:tid 63422] [client 193.37.32.163:30673] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/config.php"] [unique_id "adxXb7HZEIkQ0Zmgp5pWSQAAAMs"]
[Mon Apr 13 10:39:53.757769 2026] [:error] [pid 63309:tid 63322] [client 193.37.32.156:45793] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-load.php"] [unique_id "adxXeUpIKZ10weXpf0W8qwAAAAk"]
[Mon Apr 13 10:39:53.953884 2026] [:error] [pid 63406:tid 63427] [client 193.37.32.163:44847] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/config.php"] [unique_id "adxXebHZEIkQ0Zmgp5pWTAAAANA"]
[Mon Apr 13 10:39:54.150621 2026] [:error] [pid 63406:tid 63415] [client 193.37.32.149:50945] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "adxXerHZEIkQ0Zmgp5pWTQAAAMQ"]
[Mon Apr 13 10:39:54.351628 2026] [:error] [pid 63311:tid 63371] [client 193.37.32.140:65251] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/"] [unique_id "adxXeqHjrGN1MqBCVFlj0gAAAIA"]
[Mon Apr 13 10:39:54.550332 2026] [:error] [pid 7228:tid 7254] [client 193.37.32.157:40849] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/Base.php"] [unique_id "adxXegEnn1dQrOSHHNVihwAAARg"]
[Mon Apr 13 10:39:54.746396 2026] [:error] [pid 63406:tid 63420] [client 193.37.32.142:54185] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/Cap.php"] [unique_id "adxXerHZEIkQ0Zmgp5pWUAAAAMk"]
[Mon Apr 13 10:39:54.943827 2026] [:error] [pid 63310:tid 63344] [client 193.37.32.166:30127] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/theme-compat/config.php"] [unique_id "adxXenoXpRU5ztmwPjLZVQAAAEA"]
[Mon Apr 13 10:39:55.143753 2026] [:error] [pid 63309:tid 63326] [client 193.37.32.153:31585] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/config.php"] [unique_id "adxXe0pIKZ10weXpf0W8rAAAAA0"]
[Mon Apr 13 10:39:55.340504 2026] [:error] [pid 63406:tid 63414] [client 193.37.32.135:47197] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/config.php"] [unique_id "adxXe7HZEIkQ0Zmgp5pWUgAAAMM"]
[Mon Apr 13 10:39:55.535849 2026] [:error] [pid 63311:tid 63391] [client 193.37.32.170:56301] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-config.php"] [unique_id "adxXe6HjrGN1MqBCVFlj1AAAAJQ"]
[Mon Apr 13 10:39:55.732396 2026] [:error] [pid 63406:tid 63426] [client 193.37.32.161:23051] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/config.php"] [unique_id "adxXe7HZEIkQ0Zmgp5pWVAAAAM8"]
[Mon Apr 13 10:39:55.929973 2026] [:error] [pid 63310:tid 63347] [client 193.37.32.134:47345] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/config.php"] [unique_id "adxXe3oXpRU5ztmwPjLZVwAAAEM"]
[Mon Apr 13 10:39:56.126906 2026] [:error] [pid 63310:tid 63350] [client 193.37.32.132:63851] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-load.php"] [unique_id "adxXfHoXpRU5ztmwPjLZWAAAAEY"]
[Mon Apr 13 10:39:56.321659 2026] [:error] [pid 63311:tid 63384] [client 193.37.32.112:25849] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/imgareaselect/config.php"] [unique_id "adxXfKHjrGN1MqBCVFlj1QAAAI0"]
[Mon Apr 13 10:40:01.519844 2026] [:error] [pid 7228:tid 7251] [client 193.37.32.156:21429] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/config.php"] [unique_id "adxXgQEnn1dQrOSHHNVikAAAARU"]
[Mon Apr 13 10:40:06.723138 2026] [:error] [pid 63309:tid 63333] [client 193.37.32.138:35557] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-config.php"] [unique_id "adxXhkpIKZ10weXpf0W8rgAAABQ"]
[Mon Apr 13 10:40:06.920810 2026] [:error] [pid 63309:tid 63328] [client 193.37.32.132:36865] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/app.php"] [unique_id "adxXhkpIKZ10weXpf0W8sAAAAA8"]
[Mon Apr 13 10:40:07.116516 2026] [:error] [pid 63310:tid 63365] [client 193.37.32.164:23183] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/config.php"] [unique_id "adxXh3oXpRU5ztmwPjLZYwAAAFU"]
[Mon Apr 13 10:40:07.317699 2026] [:error] [pid 7228:tid 7232] [client 193.37.32.158:52207] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/footer.php"] [unique_id "adxXhwEnn1dQrOSHHNViowAAAQI"]
[Mon Apr 13 10:40:12.515064 2026] [:error] [pid 63310:tid 63347] [client 193.37.32.167:35783] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/config.php"] [unique_id "adxXjHoXpRU5ztmwPjLZoQAAAEM"]
[Mon Apr 13 10:40:12.713652 2026] [:error] [pid 7228:tid 7243] [client 193.37.32.131:55979] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/login.php"] [unique_id "adxXjAEnn1dQrOSHHNVjCQAAAQ0"]
[Mon Apr 13 10:40:13.926308 2026] [:error] [pid 7228:tid 7238] [client 193.37.32.131:46713] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/config.php"] [unique_id "adxXjQEnn1dQrOSHHNVjDwAAAQg"]
[Mon Apr 13 10:40:14.191169 2026] [:error] [pid 63309:tid 63322] [client 193.37.32.155:24025] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/init.php"] [unique_id "adxXjkpIKZ10weXpf0W8swAAAAk"]
[Mon Apr 13 10:40:14.388554 2026] [:error] [pid 63309:tid 63326] [client 193.37.32.140:25009] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/config.php"] [unique_id "adxXjkpIKZ10weXpf0W8tAAAAA0"]
[Mon Apr 13 10:40:14.585941 2026] [:error] [pid 7228:tid 7249] [client 193.37.32.112:60491] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-config-backup.php"] [unique_id "adxXjgEnn1dQrOSHHNVjEgAAARM"]
[Mon Apr 13 10:40:14.784437 2026] [:error] [pid 7228:tid 7235] [client 193.37.32.131:28581] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/backup-migration/config.php"] [unique_id "adxXjgEnn1dQrOSHHNVjEwAAAQU"]
[Mon Apr 13 10:40:14.983946 2026] [:error] [pid 7228:tid 7233] [client 193.37.32.157:62505] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/redux/"] [unique_id "adxXjgEnn1dQrOSHHNVjFwAAAQM"]
[Mon Apr 13 10:40:15.180772 2026] [:error] [pid 7228:tid 7247] [client 193.37.32.134:64309] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/config.php"] [unique_id "adxXjwEnn1dQrOSHHNVjGgAAARE"]
[Mon Apr 13 10:40:15.380349 2026] [:error] [pid 7228:tid 7254] [client 193.37.32.112:34485] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/config.php"] [unique_id "adxXjwEnn1dQrOSHHNVjGwAAARg"]
[Mon Apr 13 10:40:15.578297 2026] [:error] [pid 63309:tid 63314] [client 193.37.32.171:25265] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/bypass.php"] [unique_id "adxXj0pIKZ10weXpf0W8tQAAAAE"]
[Mon Apr 13 10:40:15.779780 2026] [:error] [pid 63406:tid 63415] [client 193.37.32.166:60335] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/class.php"] [unique_id "adxXj7HZEIkQ0Zmgp5pWagAAAMQ"]
[Mon Apr 13 10:40:15.982130 2026] [:error] [pid 63406:tid 63417] [client 193.37.32.161:36287] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/config.php"] [unique_id "adxXj7HZEIkQ0Zmgp5pWawAAAMY"]
[Mon Apr 13 10:40:21.181538 2026] [:error] [pid 63406:tid 63411] [client 193.37.32.147:46429] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/config.php"] [unique_id "adxXlbHZEIkQ0Zmgp5pWdAAAAMA"]
[Mon Apr 13 10:40:21.376616 2026] [:error] [pid 63311:tid 63374] [client 193.37.32.140:53355] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/config.php"] [unique_id "adxXlaHjrGN1MqBCVFlj_AAAAIM"]
[Mon Apr 13 10:40:26.572974 2026] [:error] [pid 7228:tid 7250] [client 193.37.32.176:44705] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "adxXmgEnn1dQrOSHHNVjMQAAARQ"]
[Mon Apr 13 10:40:26.771050 2026] [:error] [pid 63309:tid 63317] [client 193.37.32.168:57895] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/assets/js/"] [unique_id "adxXmkpIKZ10weXpf0W8vQAAAAQ"]
[Mon Apr 13 10:40:36.969932 2026] [:error] [pid 63311:tid 63383] [client 193.37.32.162:23205] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/root.php"] [unique_id "adxXpKHjrGN1MqBCVFlkBQAAAIw"]
[Mon Apr 13 10:40:37.168657 2026] [:error] [pid 63310:tid 63348] [client 193.37.32.170:50205] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/webix.php"] [unique_id "adxXpXoXpRU5ztmwPjLZrQAAAEQ"]
[Mon Apr 13 10:40:37.371912 2026] [:error] [pid 63406:tid 63416] [client 193.37.32.156:24041] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/ms-files.php"] [unique_id "adxXpbHZEIkQ0Zmgp5pWhgAAAMU"]
[Mon Apr 13 10:40:37.566628 2026] [:error] [pid 63311:tid 63377] [client 193.37.32.163:56269] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adxXpaHjrGN1MqBCVFlkCAAAAIY"]
[Mon Apr 13 10:40:37.762833 2026] [:error] [pid 63311:tid 63387] [client 193.37.32.132:35019] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/edit.php"] [unique_id "adxXpaHjrGN1MqBCVFlkCQAAAJA"]
[Mon Apr 13 10:40:37.961693 2026] [:error] [pid 63311:tid 63373] [client 193.37.32.110:54301] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adxXpaHjrGN1MqBCVFlkCwAAAII"]
[Mon Apr 13 10:40:38.161409 2026] [:error] [pid 63406:tid 63426] [client 193.37.32.135:59787] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "adxXprHZEIkQ0Zmgp5pWhwAAAM8"]
[Mon Apr 13 10:40:38.356115 2026] [:error] [pid 63406:tid 63430] [client 193.37.32.137:24471] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-mail.php"] [unique_id "adxXprHZEIkQ0Zmgp5pWiAAAANM"]
[Mon Apr 13 10:40:43.553399 2026] [:error] [pid 63311:tid 63389] [client 193.37.32.165:38905] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-multilang/configs/plugins/users.php"] [unique_id "adxXq6HjrGN1MqBCVFlkFgAAAJI"]
[Mon Apr 13 10:40:43.751973 2026] [:error] [pid 63406:tid 63431] [client 193.37.32.109:60063] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade-temp-backup/plugins/maintenance.php"] [unique_id "adxXq7HZEIkQ0Zmgp5pWlQAAANQ"]
[Mon Apr 13 10:40:44.980804 2026] [:error] [pid 63311:tid 63385] [client 193.37.32.112:20749] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/aboutc.php"] [unique_id "adxXrKHjrGN1MqBCVFlkGQAAAI4"]
[Mon Apr 13 10:40:45.179613 2026] [:error] [pid 63311:tid 63374] [client 193.37.32.142:31977] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/columns/"] [unique_id "adxXraHjrGN1MqBCVFlkGgAAAIM"]
[Mon Apr 13 10:40:45.373879 2026] [:error] [pid 63311:tid 63383] [client 193.37.32.173:36809] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/widget-group/"] [unique_id "adxXraHjrGN1MqBCVFlkGwAAAIw"]
[Mon Apr 13 10:40:45.570936 2026] [:error] [pid 63406:tid 63411] [client 193.37.32.131:29513] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "adxXrbHZEIkQ0Zmgp5pWmQAAAMA"]
[Mon Apr 13 10:40:46.776610 2026] [:error] [pid 63311:tid 63376] [client 193.37.32.162:52919] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/koiy.php"] [unique_id "adxXrqHjrGN1MqBCVFlkHgAAAIU"]
[Mon Apr 13 10:40:46.973992 2026] [:error] [pid 63309:tid 63330] [client 193.37.32.131:32245] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "adxXrkpIKZ10weXpf0W80QAAABE"]
[Mon Apr 13 10:40:47.169124 2026] [:error] [pid 63311:tid 63394] [client 193.37.32.176:31377] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/plugin/"] [unique_id "adxXr6HjrGN1MqBCVFlkIAAAAJc"]
[Mon Apr 13 10:40:47.366023 2026] [:error] [pid 63310:tid 63344] [client 193.37.32.170:54489] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/first.php"] [unique_id "adxXr3oXpRU5ztmwPjLZtgAAAEA"]
[Mon Apr 13 10:40:47.563005 2026] [:error] [pid 63309:tid 63332] [client 193.37.32.154:25783] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/bk/database.php"] [unique_id "adxXr0pIKZ10weXpf0W80gAAABM"]
[Mon Apr 13 10:40:47.760830 2026] [:error] [pid 63406:tid 63431] [client 193.37.32.138:57709] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/configRIV/about.php"] [unique_id "adxXr7HZEIkQ0Zmgp5pWmwAAANQ"]
[Mon Apr 13 10:40:52.956162 2026] [:error] [pid 63309:tid 63334] [client 193.37.32.139:62271] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/well-known/about.php"] [unique_id "adxXtEpIKZ10weXpf0W82QAAABU"]
[Mon Apr 13 10:40:53.155876 2026] [:error] [pid 63309:tid 63330] [client 193.37.32.142:43031] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/home.php"] [unique_id "adxXtUpIKZ10weXpf0W82gAAABE"]
[Mon Apr 13 10:40:53.352475 2026] [:error] [pid 63406:tid 63416] [client 193.37.32.162:53517] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upload.php"] [unique_id "adxXtbHZEIkQ0Zmgp5pWngAAAMU"]
[Mon Apr 13 10:40:53.549878 2026] [:error] [pid 63309:tid 63332] [client 193.37.32.168:41119] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "adxXtUpIKZ10weXpf0W82wAAABM"]
[Mon Apr 13 10:40:58.746446 2026] [:error] [pid 7228:tid 7241] [client 193.37.32.140:20577] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/xc.php"] [unique_id "adxXugEnn1dQrOSHHNVjRwAAAQs"]
[Mon Apr 13 10:40:58.942800 2026] [:error] [pid 7228:tid 7231] [client 193.37.32.149:23973] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/well-known/acme-challenge/about.php"] [unique_id "adxXugEnn1dQrOSHHNVjSAAAAQE"]
[Mon Apr 13 10:41:02.156084 2026] [:error] [pid 63406:tid 63428] [client 193.37.32.171:28045] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/well-known/about.php"] [unique_id "adxXvrHZEIkQ0Zmgp5pWqwAAANE"]
[Mon Apr 13 10:41:02.355570 2026] [:error] [pid 63406:tid 63424] [client 193.37.32.135:25217] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x123.php"] [unique_id "adxXvrHZEIkQ0Zmgp5pWrAAAAM0"]
[Mon Apr 13 10:41:02.552698 2026] [:error] [pid 63406:tid 63414] [client 193.37.32.175:49273] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/database/database.php"] [unique_id "adxXvrHZEIkQ0Zmgp5pWrQAAAMM"]
[Mon Apr 13 10:41:02.752988 2026] [:error] [pid 63406:tid 63411] [client 193.37.32.173:22703] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "adxXvrHZEIkQ0Zmgp5pWrgAAAMA"]
[Mon Apr 13 10:41:02.951359 2026] [:error] [pid 63406:tid 63432] [client 193.37.32.177:38933] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/adminfuns.php"] [unique_id "adxXvrHZEIkQ0Zmgp5pWrwAAANU"]
[Mon Apr 13 10:41:03.149608 2026] [:error] [pid 63406:tid 63433] [client 193.37.32.147:24157] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/content.php"] [unique_id "adxXv7HZEIkQ0Zmgp5pWsgAAANY"]
[Mon Apr 13 10:41:03.352178 2026] [:error] [pid 63406:tid 63419] [client 193.37.32.162:21949] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ws63.php"] [unique_id "adxXv7HZEIkQ0Zmgp5pWtAAAAMg"]
[Mon Apr 13 10:41:03.553207 2026] [:error] [pid 63406:tid 63420] [client 193.37.32.137:45999] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includesxc/js/imgareaselect/zo.php"] [unique_id "adxXv7HZEIkQ0Zmgp5pWtQAAAMk"]
[Mon Apr 13 10:41:03.750588 2026] [:error] [pid 63311:tid 63380] [client 193.37.32.173:48759] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/astra/inc/builder/type/header/above-header/assets/js/"] [unique_id "adxXv6HjrGN1MqBCVFlkOQAAAIk"]
[Mon Apr 13 10:41:03.952519 2026] [:error] [pid 7228:tid 7234] [client 193.37.32.149:20673] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/astra/assets/css/"] [unique_id "adxXvwEnn1dQrOSHHNVjUQAAAQQ"]
[Mon Apr 13 10:41:04.209444 2026] [:error] [pid 63311:tid 63375] [client 193.37.32.155:40983] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/light/wp-admin.php"] [unique_id "adxXwKHjrGN1MqBCVFlkOgAAAIQ"]
[Mon Apr 13 10:41:04.406688 2026] [:error] [pid 7228:tid 7252] [client 193.37.32.149:59283] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "adxXwAEnn1dQrOSHHNVjUwAAARY"]
[Mon Apr 13 10:41:14.608979 2026] [:error] [pid 63311:tid 63387] [client 193.37.32.137:51135] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sc.php"] [unique_id "adxXyqHjrGN1MqBCVFlkPQAAAJA"]
[Mon Apr 13 10:41:14.807665 2026] [:error] [pid 7228:tid 7241] [client 193.37.32.176:35719] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/wp-conflg.php"] [unique_id "adxXygEnn1dQrOSHHNVjagAAAQs"]
[Mon Apr 13 10:41:15.005317 2026] [:error] [pid 63309:tid 63315] [client 193.37.32.162:56239] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/users.php"] [unique_id "adxXy0pIKZ10weXpf0W87AAAAAI"]
[Mon Apr 13 10:41:15.201678 2026] [:error] [pid 63309:tid 63313] [client 193.37.32.149:51125] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-at.php"] [unique_id "adxXy0pIKZ10weXpf0W87QAAAAA"]
[Mon Apr 13 10:41:15.397527 2026] [:error] [pid 63311:tid 63385] [client 193.37.32.158:54475] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/222.php"] [unique_id "adxXy6HjrGN1MqBCVFlkPgAAAI4"]
[Mon Apr 13 10:41:15.617052 2026] [:error] [pid 7228:tid 7236] [client 193.37.32.162:61851] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/222.php"] [unique_id "adxXywEnn1dQrOSHHNVjbQAAAQY"]
[Mon Apr 13 10:41:15.814752 2026] [:error] [pid 7228:tid 7253] [client 193.37.32.133:59795] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/100.php"] [unique_id "adxXywEnn1dQrOSHHNVjbwAAARc"]
[Mon Apr 13 10:41:16.010607 2026] [:error] [pid 7228:tid 7242] [client 193.37.32.110:42539] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/dx.php"] [unique_id "adxXzAEnn1dQrOSHHNVjcAAAAQw"]
[Mon Apr 13 10:41:16.207915 2026] [:error] [pid 63406:tid 63428] [client 193.37.32.137:54157] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/src/xth/"] [unique_id "adxXzLHZEIkQ0Zmgp5pWuwAAANE"]
[Mon Apr 13 10:41:16.407878 2026] [:error] [pid 7228:tid 7239] [client 193.37.32.141:55867] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/modules/docs/dist/resources/qnl/admin.php"] [unique_id "adxXzAEnn1dQrOSHHNVjcQAAAQk"]
[Mon Apr 13 10:41:16.604392 2026] [:error] [pid 63310:tid 63349] [client 193.37.32.164:44513] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/includes/src/content/ixp/"] [unique_id "adxXzHoXpRU5ztmwPjLaLQAAAEU"]
[Mon Apr 13 10:41:16.800687 2026] [:error] [pid 63406:tid 63427] [client 193.37.32.175:40131] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/js/includes/pwm/admin.php"] [unique_id "adxXzLHZEIkQ0Zmgp5pWvQAAANA"]
[Mon Apr 13 10:41:16.998655 2026] [:error] [pid 63406:tid 63423] [client 193.37.32.170:43263] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "adxXzLHZEIkQ0Zmgp5pWvgAAAMw"]
[Mon Apr 13 10:41:17.197803 2026] [:error] [pid 63310:tid 63364] [client 193.37.32.167:55299] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/core/code-snippets/post/type/"] [unique_id "adxXzXoXpRU5ztmwPjLaMAAAAFQ"]
[Mon Apr 13 10:41:17.396658 2026] [:error] [pid 63311:tid 63377] [client 193.37.32.139:61153] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/epanel/build/"] [unique_id "adxXzaHjrGN1MqBCVFlkQQAAAIY"]
[Mon Apr 13 10:41:18.601092 2026] [:error] [pid 63310:tid 63352] [client 193.37.32.132:57315] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/skins/lightgray/"] [unique_id "adxXznoXpRU5ztmwPjLaMgAAAEg"]
[Mon Apr 13 10:41:18.799440 2026] [:error] [pid 7228:tid 7253] [client 193.37.32.171:58547] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adxXzgEnn1dQrOSHHNVjdAAAARc"]
[Mon Apr 13 10:41:18.996710 2026] [:error] [pid 63310:tid 63363] [client 193.37.32.146:29999] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/scanner3.php"] [unique_id "adxXznoXpRU5ztmwPjLaNAAAAFM"]
[Mon Apr 13 10:41:19.193263 2026] [:error] [pid 7228:tid 7238] [client 193.37.32.137:60559] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "adxXzwEnn1dQrOSHHNVjdwAAAQg"]
[Mon Apr 13 10:41:19.390678 2026] [:error] [pid 7228:tid 7240] [client 193.37.32.146:31659] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "adxXzwEnn1dQrOSHHNVjeAAAAQo"]
[Mon Apr 13 10:41:19.587702 2026] [:error] [pid 63406:tid 63433] [client 193.37.32.167:60939] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/chosen.php"] [unique_id "adxXz7HZEIkQ0Zmgp5pWxQAAANY"]
[Mon Apr 13 10:41:24.783602 2026] [:error] [pid 63311:tid 63382] [client 193.37.32.110:26309] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/blue/"] [unique_id "adxX1KHjrGN1MqBCVFlkSAAAAIs"]
[Mon Apr 13 10:41:25.982705 2026] [:error] [pid 7228:tid 7254] [client 193.37.32.110:28843] [client 193.37.32.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/IXR/"] [unique_id "adxX1QEnn1dQrOSHHNVjgQAAARg"]
[Mon Apr 13 10:41:26.179758 2026] [:error] [pid 63311:tid 63384] [client 193.37.32.156:52123] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/network/"] [unique_id "adxX1qHjrGN1MqBCVFlkSgAAAI0"]
[Mon Apr 13 10:41:26.375929 2026] [:error] [pid 63309:tid 63327] [client 193.37.32.156:57027] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/ID3/"] [unique_id "adxX1kpIKZ10weXpf0W88AAAAA4"]
[Mon Apr 13 10:41:26.575133 2026] [:error] [pid 63309:tid 63337] [client 193.37.32.133:34183] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/certificates/"] [unique_id "adxX1kpIKZ10weXpf0W88gAAABg"]
[Mon Apr 13 10:41:26.772639 2026] [:error] [pid 63309:tid 63330] [client 193.37.32.166:43839] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/maint/"] [unique_id "adxX1kpIKZ10weXpf0W88wAAABE"]
[Mon Apr 13 10:41:26.973503 2026] [:error] [pid 63311:tid 63371] [client 193.37.32.170:44853] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/widgets/"] [unique_id "adxX1qHjrGN1MqBCVFlkTAAAAIA"]
[Mon Apr 13 10:41:27.174105 2026] [:error] [pid 7228:tid 7234] [client 193.37.32.144:36249] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "adxX1wEnn1dQrOSHHNVjhAAAAQQ"]
[Mon Apr 13 10:41:27.372810 2026] [:error] [pid 7228:tid 7230] [client 193.37.32.158:23451] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/tmp-old/plugins-old-old/"] [unique_id "adxX1wEnn1dQrOSHHNVjhQAAAQA"]
[Mon Apr 13 10:41:27.569636 2026] [:error] [pid 63311:tid 63393] [client 193.37.32.167:55217] [client 193.37.32.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elementor/lndex.php"] [unique_id "adxX16HjrGN1MqBCVFlkTQAAAJY"]
[Mon Apr 13 10:41:27.767274 2026] [:error] [pid 63311:tid 63374] [client 193.37.32.109:38059] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins.nulled/metform/user/"] [unique_id "adxX16HjrGN1MqBCVFlkTgAAAIM"]
[Mon Apr 13 10:41:27.964131 2026] [:error] [pid 7228:tid 7236] [client 193.37.32.139:39729] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/sidebar-schema.php"] [unique_id "adxX1wEnn1dQrOSHHNVjiAAAAQY"]
[Mon Apr 13 10:41:28.162864 2026] [:error] [pid 7228:tid 7253] [client 193.37.32.147:51325] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/class-wp-interactivity-api-directives-processor-loop.php"] [unique_id "adxX2AEnn1dQrOSHHNVjiQAAARc"]
[Mon Apr 13 10:41:44.373416 2026] [:error] [pid 63406:tid 63430] [client 193.37.32.109:27203] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-theme-json-resolver-sql.php"] [unique_id "adxX6LHZEIkQ0Zmgp5pXKwAAANM"]
[Mon Apr 13 10:41:49.570975 2026] [:error] [pid 63309:tid 63318] [client 193.37.32.176:32781] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/robots-template-client.php"] [unique_id "adxX7UpIKZ10weXpf0W9AAAAAAU"]
[Mon Apr 13 10:41:59.766876 2026] [:error] [pid 63406:tid 63419] [client 193.37.32.158:41905] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-less.php"] [unique_id "adxX97HZEIkQ0Zmgp5pXNAAAAMg"]
[Mon Apr 13 10:41:59.964001 2026] [:error] [pid 7228:tid 7237] [client 193.37.32.141:54017] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wpdb-query.php"] [unique_id "adxX9wEnn1dQrOSHHNVjuwAAAQc"]
[Mon Apr 13 10:42:00.163032 2026] [:error] [pid 7228:tid 7232] [client 193.37.32.171:37349] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-restful.php"] [unique_id "adxX-AEnn1dQrOSHHNVjvQAAAQI"]
[Mon Apr 13 10:42:01.374150 2026] [:error] [pid 7228:tid 7253] [client 193.37.32.166:63685] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/menu-sql.php"] [unique_id "adxX-QEnn1dQrOSHHNVjwwAAARc"]
[Mon Apr 13 10:42:03.383922 2026] [:error] [pid 7228:tid 7235] [client 193.37.32.139:65037] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/index-request.php"] [unique_id "adxX-wEnn1dQrOSHHNVjzQAAAQU"]
[Mon Apr 13 10:42:03.582629 2026] [:error] [pid 7228:tid 7244] [client 193.37.32.166:50427] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/themes-security.php"] [unique_id "adxX-wEnn1dQrOSHHNVjzwAAAQ4"]
[Mon Apr 13 10:42:08.785497 2026] [:error] [pid 7228:tid 7230] [client 193.37.32.156:38993] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-config-backup.php"] [unique_id "adxYAAEnn1dQrOSHHNVj5QAAAQA"]
[Mon Apr 13 10:42:08.984940 2026] [:error] [pid 7228:tid 7242] [client 193.37.32.162:42767] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/app.php"] [unique_id "adxYAAEnn1dQrOSHHNVj5gAAAQw"]
[Mon Apr 13 10:42:09.183964 2026] [:error] [pid 63406:tid 63425] [client 193.37.32.169:47035] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "adxYAbHZEIkQ0Zmgp5pXPAAAAM4"]
[Mon Apr 13 10:42:09.386126 2026] [:error] [pid 63311:tid 63372] [client 193.37.32.157:26311] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "adxYAaHjrGN1MqBCVFlkfwAAAIE"]
[Mon Apr 13 10:42:09.617586 2026] [:error] [pid 63310:tid 63363] [client 193.37.32.160:60855] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/config.php"] [unique_id "adxYAXoXpRU5ztmwPjLaRAAAAFM"]
[Mon Apr 13 10:42:09.816355 2026] [:error] [pid 63310:tid 63351] [client 193.37.32.160:58299] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "adxYAXoXpRU5ztmwPjLaRQAAAEc"]
[Mon Apr 13 10:42:10.014853 2026] [:error] [pid 63309:tid 63329] [client 193.37.32.160:20223] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-config-backup.php"] [unique_id "adxYAkpIKZ10weXpf0W9DgAAABA"]
[Mon Apr 13 10:42:10.211133 2026] [:error] [pid 63311:tid 63376] [client 193.37.32.174:54499] [client 193.37.32.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "adxYAqHjrGN1MqBCVFlkgQAAAIU"]
[Mon Apr 13 10:42:10.408683 2026] [:error] [pid 63311:tid 63388] [client 193.37.32.144:28217] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "adxYAqHjrGN1MqBCVFlkggAAAJE"]
[Mon Apr 13 10:42:10.608143 2026] [:error] [pid 63311:tid 63389] [client 193.37.32.135:31913] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/css/dist/admin-global-350-rtl.php"] [unique_id "adxYAqHjrGN1MqBCVFlkgwAAAJI"]
[Mon Apr 13 10:42:10.808097 2026] [:error] [pid 63311:tid 63381] [client 193.37.32.152:28889] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-directory/222.php"] [unique_id "adxYAqHjrGN1MqBCVFlkhQAAAIo"]
[Mon Apr 13 10:42:11.007339 2026] [:error] [pid 63310:tid 63359] [client 193.37.32.164:52097] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adxYA3oXpRU5ztmwPjLaSAAAAE8"]
[Mon Apr 13 11:24:53.898569 2026] [:error] [pid 57183:tid 57185] [client 118.107.44.122:21465] [client 118.107.44.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "adxiBTDO3t8R5NaxzYQTRwAAAUA"], referer: https://www.google.com/search?q=how+to+create+a+website&oq=how+to+create+a+website
[Mon Apr 13 11:24:59.380396 2026] [:error] [pid 7228:tid 7233] [client 118.107.44.79:53291] [client 118.107.44.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.107.44.79, incrementing brute counter"] [hostname "www.makifim.com.au"] [uri "/wp-login.php"] [unique_id "adxiCwEnn1dQrOSHHNV9HQAAAQM"], referer: https://twitter.com/
[Mon Apr 13 11:24:59.382857 2026] [:error] [pid 7228:tid 7233] [client 118.107.44.79:53291] [client 118.107.44.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/wp-login.php"] [unique_id "adxiCwEnn1dQrOSHHNV9HQAAAQM"], referer: https://twitter.com/
[Mon Apr 13 11:25:04.682816 2026] [:error] [pid 7228:tid 7241] [client 118.107.44.120:59535] [client 118.107.44.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.107.44.120, incrementing ddos counter"] [hostname "www.makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adxiEAEnn1dQrOSHHNV9LgAAAQs"], referer: https://duckduckgo.com/?q=domain+registration%!(EXTRA string=domain+registration)
[Mon Apr 13 11:25:04.685189 2026] [:error] [pid 7228:tid 7241] [client 118.107.44.120:59535] [client 118.107.44.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adxiEAEnn1dQrOSHHNV9LgAAAQs"], referer: https://duckduckgo.com/?q=domain+registration%!(EXTRA string=domain+registration)
[Mon Apr 13 14:23:44.890575 2026] [:error] [pid 7228:tid 7244] [client 146.70.194.244:54296] [client 146.70.194.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.194.244, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adyL8AEnn1dQrOSHHNUAewAAAQ4"]
[Mon Apr 13 14:23:50.666501 2026] [:error] [pid 7228:tid 7248] [client 146.70.194.244:54296] [client 146.70.194.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "adyL9gEnn1dQrOSHHNUAnwAAARI"]
[Mon Apr 13 14:23:53.863043 2026] [:error] [pid 7228:tid 7235] [client 146.70.194.244:54296] [client 146.70.194.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.194.244, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "adyL-QEnn1dQrOSHHNUArAAAAQU"]
[Mon Apr 13 20:39:46.845002 2026] [:error] [pid 63406:tid 63430] [client 103.77.107.178:59602] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "adzkErHZEIkQ0Zmgp5qqEQAAANM"]
[Mon Apr 13 20:39:47.047640 2026] [:error] [pid 63406:tid 63425] [client 103.77.107.178:59617] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzkE7HZEIkQ0Zmgp5qqEwAAAM4"]
[Mon Apr 13 22:08:51.390110 2026] [proxy_fcgi:error] [pid 63406:tid 63417] [client 91.230.225.244:28441] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:09:12.539340 2026] [:error] [pid 57183:tid 57204] [client 185.192.71.87:36303] [client 185.192.71.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adz5CDDO3t8R5NaxzYRs0gAAAVM"]
[Mon Apr 13 22:09:17.045808 2026] [:error] [pid 63310:tid 63363] [client 185.192.71.86:39251] [client 185.192.71.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adz5DXoXpRU5ztmwPjJtggAAAFM"]
[Mon Apr 13 22:09:25.147110 2026] [:error] [pid 63406:tid 63422] [client 185.192.71.89:27087] [client 185.192.71.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adz5FbHZEIkQ0Zmgp5rqEgAAAMs"]
[Mon Apr 13 22:09:27.840779 2026] [proxy_fcgi:error] [pid 7228:tid 7251] [client 91.230.225.59:25607] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:09:30.238382 2026] [:error] [pid 63406:tid 63415] [client 185.192.71.88:40877] [client 185.192.71.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adz5GrHZEIkQ0Zmgp5rqHwAAAMQ"]
[Mon Apr 13 22:09:38.396671 2026] [:error] [pid 63406:tid 63424] [client 185.92.25.119:64863] [client 185.92.25.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adz5IrHZEIkQ0Zmgp5rqNQAAAM0"]
[Mon Apr 13 22:09:40.840775 2026] [:error] [pid 63406:tid 63419] [client 91.230.225.249:52821] [client 91.230.225.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adz5JLHZEIkQ0Zmgp5rqPAAAAMg"]
[Mon Apr 13 22:09:41.406359 2026] [:error] [pid 63406:tid 63434] [client 91.230.225.241:50423] [client 91.230.225.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adz5JbHZEIkQ0Zmgp5rqQAAAANc"]
[Mon Apr 13 22:09:42.026054 2026] [:error] [pid 57183:tid 57189] [client 91.230.225.68:40481] [client 91.230.225.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adz5JjDO3t8R5NaxzYRtJAAAAUQ"]
[Mon Apr 13 22:09:42.580270 2026] [:error] [pid 9314:tid 9340] [client 185.192.71.83:57631] [client 185.192.71.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adz5Jm_r4W8fX2GWyGRAOwAAAZg"]
[Mon Apr 13 22:09:43.161350 2026] [:error] [pid 63406:tid 63428] [client 91.230.225.62:32165] [client 91.230.225.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adz5J7HZEIkQ0Zmgp5rqRQAAANE"]
[Mon Apr 13 22:09:45.453938 2026] [:error] [pid 9314:tid 9333] [client 91.230.225.62:47045] [client 91.230.225.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adz5KW_r4W8fX2GWyGRAQwAAAZE"]
[Mon Apr 13 22:09:49.300473 2026] [:error] [pid 63309:tid 63320] [client 91.230.225.61:25769] [client 91.230.225.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "adz5LUpIKZ10weXpf0U5IQAAAAc"]
[Mon Apr 13 22:09:54.488530 2026] [:error] [pid 7228:tid 7253] [client 185.192.71.84:51255] [client 185.192.71.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adz5MgEnn1dQrOSHHNWzWQAAARc"]
[Mon Apr 13 22:09:56.376247 2026] [:error] [pid 9314:tid 9337] [client 185.92.25.3:54761] [client 185.92.25.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adz5NG_r4W8fX2GWyGRATgAAAZU"]
[Mon Apr 13 22:09:58.693624 2026] [:error] [pid 9314:tid 9318] [client 185.92.25.119:36491] [client 185.92.25.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adz5Nm_r4W8fX2GWyGRAUAAAAYI"]
[Mon Apr 13 22:10:07.063866 2026] [:error] [pid 63311:tid 63384] [client 185.192.71.88:43365] [client 185.192.71.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adz5P6HjrGN1MqBCVFkaGgAAAI0"]
[Mon Apr 13 22:10:09.461040 2026] [:error] [pid 63310:tid 63346] [client 91.230.225.247:54483] [client 91.230.225.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adz5QXoXpRU5ztmwPjJtqgAAAEI"]
[Mon Apr 13 22:10:12.246398 2026] [:error] [pid 57183:tid 57208] [client 91.230.225.244:31157] [client 91.230.225.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adz5RDDO3t8R5NaxzYRtlQAAAVc"]
[Mon Apr 13 22:10:15.191818 2026] [:error] [pid 63406:tid 63430] [client 91.230.225.57:37317] [client 91.230.225.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adz5R7HZEIkQ0Zmgp5rqoAAAANM"]
[Mon Apr 13 22:10:22.414986 2026] [:error] [pid 9314:tid 9329] [client 91.230.225.57:57113] [client 91.230.225.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adz5Tm_r4W8fX2GWyGRAfAAAAY0"]
[Mon Apr 13 22:10:24.460825 2026] [:error] [pid 7228:tid 7246] [client 185.192.71.91:60733] [client 185.192.71.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adz5UAEnn1dQrOSHHNWzagAAARA"]
[Mon Apr 13 22:10:26.818249 2026] [:error] [pid 63406:tid 63421] [client 91.230.225.62:62109] [client 91.230.225.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adz5UrHZEIkQ0Zmgp5rqygAAAMo"]
[Mon Apr 13 22:10:27.668257 2026] [:error] [pid 63311:tid 63375] [client 91.230.225.250:54731] [client 91.230.225.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adz5U6HjrGN1MqBCVFkaJgAAAIQ"]
[Mon Apr 13 22:10:28.230250 2026] [:error] [pid 7228:tid 7243] [client 185.192.71.100:39051] [client 185.192.71.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adz5VAEnn1dQrOSHHNWzbgAAAQ0"]
[Mon Apr 13 22:10:31.145663 2026] [proxy_fcgi:error] [pid 9314:tid 9340] [client 91.230.225.251:47969] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:10:33.522029 2026] [:error] [pid 63310:tid 63363] [client 185.192.71.82:56003] [client 185.192.71.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adz5WXoXpRU5ztmwPjJtuQAAAFM"]
[Mon Apr 13 22:10:34.092417 2026] [:error] [pid 63406:tid 63433] [client 185.92.25.2:39077] [client 185.92.25.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adz5WrHZEIkQ0Zmgp5rq7AAAANY"]
[Mon Apr 13 22:10:34.651935 2026] [:error] [pid 9314:tid 9321] [client 91.230.225.248:50183] [client 91.230.225.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adz5Wm_r4W8fX2GWyGRAjQAAAYU"]
[Mon Apr 13 22:10:36.869672 2026] [proxy_fcgi:error] [pid 7228:tid 7241] [client 91.230.225.244:40213] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:10:46.459567 2026] [:error] [pid 63310:tid 63344] [client 185.192.71.82:59571] [client 185.192.71.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adz5ZnoXpRU5ztmwPjJtyAAAAEA"]
[Mon Apr 13 22:10:48.817014 2026] [proxy_fcgi:error] [pid 63310:tid 63355] [client 4.223.143.114:6252] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:10:50.399295 2026] [:error] [pid 63406:tid 63418] [client 91.230.225.58:23229] [client 91.230.225.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.58, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adz5arHZEIkQ0Zmgp5rrKwAAAMc"]
[Mon Apr 13 22:10:55.111504 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 91.230.225.58:23229] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:11:07.822976 2026] [proxy_fcgi:error] [pid 57183:tid 57204] [client 91.230.225.58:25009] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:11:08.311384 2026] [proxy_fcgi:error] [pid 9314:tid 9321] [client 4.223.143.114:6250] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:11:08.382212 2026] [:error] [pid 9314:tid 9340] [client 91.230.225.251:36559] [client 91.230.225.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adz5fG_r4W8fX2GWyGRA4wAAAZg"]
[Mon Apr 13 22:11:12.497471 2026] [:error] [pid 9314:tid 9332] [client 185.192.71.90:57443] [client 185.192.71.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.90, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adz5gG_r4W8fX2GWyGRA9AAAAZA"]
[Mon Apr 13 22:11:14.142059 2026] [proxy_fcgi:error] [pid 9314:tid 9323] [client 185.192.71.90:57443] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:11:14.695667 2026] [:error] [pid 9314:tid 9322] [client 91.230.225.247:61403] [client 91.230.225.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "adz5gm_r4W8fX2GWyGRA9wAAAYY"]
[Mon Apr 13 22:11:17.484471 2026] [:error] [pid 63310:tid 63360] [client 4.223.143.114:6797] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "adz5hXoXpRU5ztmwPjJt3wAAAFA"]
[Mon Apr 13 22:11:18.121193 2026] [:error] [pid 63311:tid 63386] [client 4.223.143.114:6804] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "adz5hqHjrGN1MqBCVFkaTAAAAI8"]
[Mon Apr 13 22:11:18.696851 2026] [:error] [pid 63406:tid 63432] [client 4.223.143.114:6260] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "adz5hrHZEIkQ0Zmgp5rrqwAAANU"]
[Mon Apr 13 22:11:19.266861 2026] [:error] [pid 63406:tid 63411] [client 4.223.143.114:6790] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "adz5h7HZEIkQ0Zmgp5rrtAAAAMA"]
[Mon Apr 13 22:11:19.885658 2026] [:error] [pid 63406:tid 63422] [client 4.223.143.114:6786] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "adz5h7HZEIkQ0Zmgp5rrugAAAMs"]
[Mon Apr 13 22:11:20.692462 2026] [:error] [pid 63311:tid 63389] [client 4.223.143.114:6262] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "adz5iKHjrGN1MqBCVFkaUgAAAJI"]
[Mon Apr 13 22:11:21.327658 2026] [:error] [pid 63311:tid 63390] [client 4.223.143.114:6236] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "adz5iaHjrGN1MqBCVFkaVAAAAJM"]
[Mon Apr 13 22:11:22.277698 2026] [:error] [pid 63311:tid 63379] [client 4.223.143.114:6245] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "adz5iqHjrGN1MqBCVFkaWAAAAIg"]
[Mon Apr 13 22:11:23.307115 2026] [:error] [pid 63406:tid 63418] [client 4.223.143.114:6789] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "adz5i7HZEIkQ0Zmgp5rrzAAAAMc"]
[Mon Apr 13 22:11:25.504669 2026] [:error] [pid 7228:tid 7254] [client 4.223.143.114:6221] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "adz5jQEnn1dQrOSHHNWzpwAAARg"]
[Mon Apr 13 22:11:26.993860 2026] [:error] [pid 9314:tid 9331] [client 4.223.143.114:6808] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "adz5jm_r4W8fX2GWyGRBCgAAAY8"]
[Mon Apr 13 22:11:27.041979 2026] [:error] [pid 63406:tid 63425] [client 185.192.71.85:58761] [client 185.192.71.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adz5j7HZEIkQ0Zmgp5rr2wAAAM4"]
[Mon Apr 13 22:11:29.749683 2026] [:error] [pid 63311:tid 63383] [client 4.223.143.114:6233] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-104.php"] [unique_id "adz5kaHjrGN1MqBCVFkaZQAAAIw"]
[Mon Apr 13 22:11:31.212664 2026] [:error] [pid 63406:tid 63419] [client 4.223.143.114:6809] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "adz5k7HZEIkQ0Zmgp5rr_QAAAMg"]
[Mon Apr 13 22:11:33.511981 2026] [:error] [pid 63406:tid 63415] [client 4.223.143.114:6228] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "adz5lbHZEIkQ0Zmgp5rsCAAAAMQ"]
[Mon Apr 13 22:11:34.172181 2026] [:error] [pid 63311:tid 63389] [client 4.223.143.114:6238] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "adz5lqHjrGN1MqBCVFkacAAAAJI"]
[Mon Apr 13 22:11:34.721344 2026] [:error] [pid 63406:tid 63425] [client 4.223.143.114:6826] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rzki.php"] [unique_id "adz5lrHZEIkQ0Zmgp5rsEwAAAM4"]
[Mon Apr 13 22:11:35.577931 2026] [:error] [pid 9314:tid 9334] [client 4.223.143.114:6252] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adz5l2_r4W8fX2GWyGRBJAAAAZI"]
[Mon Apr 13 22:11:36.353975 2026] [:error] [pid 63311:tid 63377] [client 4.223.143.114:6847] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adz5mKHjrGN1MqBCVFkacgAAAIY"]
[Mon Apr 13 22:11:37.106280 2026] [:error] [pid 63406:tid 63430] [client 4.223.143.114:6784] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adz5mbHZEIkQ0Zmgp5rsJgAAANM"]
[Mon Apr 13 22:11:38.144169 2026] [:error] [pid 63406:tid 63427] [client 4.223.143.114:6212] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xsas.php"] [unique_id "adz5mrHZEIkQ0Zmgp5rsLwAAANA"]
[Mon Apr 13 22:11:38.336365 2026] [:error] [pid 57183:tid 57187] [client 91.230.225.57:31861] [client 91.230.225.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adz5mjDO3t8R5NaxzYRuZQAAAUI"]
[Mon Apr 13 22:11:39.897432 2026] [:error] [pid 57183:tid 57199] [client 4.223.143.114:6801] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d12.php"] [unique_id "adz5mzDO3t8R5NaxzYRuaAAAAU4"]
[Mon Apr 13 22:11:41.313415 2026] [:error] [pid 7228:tid 7254] [client 4.223.143.114:6222] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d12.php"] [unique_id "adz5nQEnn1dQrOSHHNWzvAAAARg"]
[Mon Apr 13 22:11:42.137120 2026] [:error] [pid 57183:tid 57200] [client 4.223.143.114:6213] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d12.php"] [unique_id "adz5njDO3t8R5NaxzYRuawAAAU8"]
[Mon Apr 13 22:11:42.998381 2026] [:error] [pid 7228:tid 7238] [client 4.223.143.114:6800] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d12.php"] [unique_id "adz5ngEnn1dQrOSHHNWzwwAAAQg"]
[Mon Apr 13 22:11:43.648192 2026] [:error] [pid 7228:tid 7244] [client 91.230.225.65:50283] [client 91.230.225.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adz5nwEnn1dQrOSHHNWzxAAAAQ4"]
[Mon Apr 13 22:11:43.893556 2026] [:error] [pid 7228:tid 7236] [client 4.223.143.114:6795] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "adz5nwEnn1dQrOSHHNWzxgAAAQY"]
[Mon Apr 13 22:11:45.375495 2026] [:error] [pid 7228:tid 7235] [client 4.223.143.114:6257] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "adz5oQEnn1dQrOSHHNWzygAAAQU"]
[Mon Apr 13 22:11:46.672739 2026] [:error] [pid 57183:tid 57199] [client 4.223.143.114:6249] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "adz5ojDO3t8R5NaxzYRucwAAAU4"]
[Mon Apr 13 22:11:47.962929 2026] [:error] [pid 63406:tid 63413] [client 91.230.225.69:42557] [client 91.230.225.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.69, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adz5o7HZEIkQ0Zmgp5rsagAAAMI"]
[Mon Apr 13 22:11:49.375558 2026] [:error] [pid 63406:tid 63416] [client 91.230.225.69:42557] [client 91.230.225.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adz5pbHZEIkQ0Zmgp5rsdgAAAMU"]
[Mon Apr 13 22:11:49.478473 2026] [:error] [pid 63406:tid 63432] [client 4.223.143.114:6248] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "adz5pbHZEIkQ0Zmgp5rseAAAANU"]
[Mon Apr 13 22:11:50.371918 2026] [:error] [pid 57183:tid 57207] [client 4.223.143.114:6246] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "adz5pjDO3t8R5NaxzYRufgAAAVY"]
[Mon Apr 13 22:11:52.039587 2026] [:error] [pid 57183:tid 57199] [client 4.223.143.114:6791] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "adz5qDDO3t8R5NaxzYRuhQAAAU4"]
[Mon Apr 13 22:11:52.829129 2026] [:error] [pid 7228:tid 7233] [client 4.223.143.114:6807] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "adz5qAEnn1dQrOSHHNWz0QAAAQM"]
[Mon Apr 13 22:11:54.081662 2026] [:error] [pid 63311:tid 63388] [client 4.223.143.114:6223] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55b76.php"] [unique_id "adz5qqHjrGN1MqBCVFkaigAAAJE"]
[Mon Apr 13 22:11:55.528862 2026] [:error] [pid 7228:tid 7248] [client 4.223.143.114:6825] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "adz5qwEnn1dQrOSHHNWz2gAAARI"]
[Mon Apr 13 22:11:58.194074 2026] [:error] [pid 57183:tid 57189] [client 4.223.143.114:6817] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "adz5rjDO3t8R5NaxzYRuoAAAAUQ"]
[Mon Apr 13 22:12:00.229515 2026] [:error] [pid 57183:tid 57189] [client 4.223.143.114:6828] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "adz5sDDO3t8R5NaxzYRurAAAAUQ"]
[Mon Apr 13 22:12:01.592337 2026] [:error] [pid 63406:tid 63435] [client 4.223.143.114:6822] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tt.php"] [unique_id "adz5sbHZEIkQ0Zmgp5rstgAAANg"]
[Mon Apr 13 22:12:02.566765 2026] [:error] [pid 63406:tid 63418] [client 4.223.143.114:6216] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "adz5srHZEIkQ0Zmgp5rsvwAAAMc"]
[Mon Apr 13 22:12:03.618822 2026] [:error] [pid 7228:tid 7242] [client 4.223.143.114:6210] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "adz5swEnn1dQrOSHHNWz4gAAAQw"]
[Mon Apr 13 22:12:04.430147 2026] [:error] [pid 63310:tid 63348] [client 4.223.143.114:6240] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "adz5tHoXpRU5ztmwPjJt9wAAAEQ"]
[Mon Apr 13 22:12:06.100483 2026] [:error] [pid 9314:tid 9327] [client 4.223.143.114:6794] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maul.php"] [unique_id "adz5tm_r4W8fX2GWyGRBUwAAAYs"]
[Mon Apr 13 22:12:07.776251 2026] [:error] [pid 63406:tid 63421] [client 4.223.143.114:6729] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adz5t7HZEIkQ0Zmgp5rs3AAAAMo"]
[Mon Apr 13 22:12:09.625898 2026] [:error] [pid 7228:tid 7249] [client 4.223.143.114:6818] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adz5uQEnn1dQrOSHHNWz8wAAARM"]
[Mon Apr 13 22:12:10.535297 2026] [:error] [pid 9314:tid 9316] [client 4.223.143.114:6787] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adz5um_r4W8fX2GWyGRBXQAAAYA"]
[Mon Apr 13 22:12:11.891840 2026] [:error] [pid 57183:tid 57192] [client 4.223.143.114:6832] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adz5uzDO3t8R5NaxzYRu1AAAAUc"]
[Mon Apr 13 22:12:12.578894 2026] [:error] [pid 57183:tid 57193] [client 91.230.225.248:52559] [client 91.230.225.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adz5vDDO3t8R5NaxzYRu2QAAAUg"]
[Mon Apr 13 22:12:13.073487 2026] [:error] [pid 57183:tid 57189] [client 4.223.143.114:6805] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5b9ac.php"] [unique_id "adz5vTDO3t8R5NaxzYRu3wAAAUQ"]
[Mon Apr 13 22:12:14.105948 2026] [:error] [pid 7228:tid 7239] [client 4.223.143.114:6217] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5b9ac.php"] [unique_id "adz5vgEnn1dQrOSHHNWz9gAAAQk"]
[Mon Apr 13 22:12:16.500104 2026] [:error] [pid 57183:tid 57206] [client 91.230.225.245:62455] [client 91.230.225.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.245, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adz5wDDO3t8R5NaxzYRu9AAAAVU"]
[Mon Apr 13 22:12:22.265424 2026] [proxy_fcgi:error] [pid 7228:tid 7254] [client 4.223.143.114:6269] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:12:24.372973 2026] [:error] [pid 57183:tid 57208] [client 91.230.225.245:62455] [client 91.230.225.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adz5yDDO3t8R5NaxzYRvEgAAAVc"]
[Mon Apr 13 22:12:26.632790 2026] [:error] [pid 7228:tid 7235] [client 185.192.71.96:31605] [client 185.192.71.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adz5ygEnn1dQrOSHHNW0KAAAAQU"]
[Mon Apr 13 22:12:31.896161 2026] [:error] [pid 7228:tid 7236] [client 185.92.25.3:41809] [client 185.92.25.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adz5zwEnn1dQrOSHHNW0PgAAAQY"]
[Mon Apr 13 22:12:37.725212 2026] [:error] [pid 7228:tid 7232] [client 185.192.71.81:40343] [client 185.192.71.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adz51QEnn1dQrOSHHNW0WQAAAQI"]
[Mon Apr 13 22:12:38.305943 2026] [:error] [pid 57183:tid 57206] [client 185.192.71.90:21847] [client 185.192.71.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adz51jDO3t8R5NaxzYRvKQAAAVU"]
[Mon Apr 13 22:12:40.552589 2026] [proxy_fcgi:error] [pid 63310:tid 63366] [client 4.223.143.114:6245] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:12:44.079292 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 4.223.143.114:6266] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:12:45.748919 2026] [:error] [pid 7228:tid 7248] [client 91.230.225.245:59129] [client 91.230.225.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adz53QEnn1dQrOSHHNW0fwAAARI"]
[Mon Apr 13 22:12:46.644456 2026] [:error] [pid 63406:tid 63416] [client 185.192.71.88:33251] [client 185.192.71.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adz53rHZEIkQ0Zmgp5rt5AAAAMU"]
[Mon Apr 13 22:12:52.039213 2026] [:error] [pid 63310:tid 63352] [client 91.230.225.64:54583] [client 91.230.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adz55HoXpRU5ztmwPjJuGAAAAEg"]
[Mon Apr 13 22:12:54.714087 2026] [proxy_fcgi:error] [pid 63406:tid 63424] [client 185.192.71.82:27819] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:12:57.117265 2026] [:error] [pid 57183:tid 57188] [client 91.230.225.247:42549] [client 91.230.225.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adz56TDO3t8R5NaxzYRvRgAAAUM"]
[Mon Apr 13 22:13:00.735568 2026] [:error] [pid 57183:tid 57206] [client 91.230.225.248:35189] [client 91.230.225.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "adz57DDO3t8R5NaxzYRvUwAAAVU"]
[Mon Apr 13 22:13:05.984325 2026] [:error] [pid 63406:tid 63417] [client 185.192.71.90:54907] [client 185.192.71.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adz58bHZEIkQ0Zmgp5ruNAAAAMY"]
[Mon Apr 13 22:13:06.823679 2026] [proxy_fcgi:error] [pid 63310:tid 63348] [client 91.230.225.249:32453] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:13:09.119047 2026] [:error] [pid 63406:tid 63429] [client 4.223.143.114:6796] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "adz59bHZEIkQ0Zmgp5ruSQAAANI"]
[Mon Apr 13 22:13:10.024881 2026] [:error] [pid 57183:tid 57185] [client 4.223.143.114:6263] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "adz59jDO3t8R5NaxzYRvZQAAAUA"]
[Mon Apr 13 22:13:10.714499 2026] [:error] [pid 57183:tid 57201] [client 4.223.143.114:6254] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "adz59jDO3t8R5NaxzYRvZwAAAVA"]
[Mon Apr 13 22:13:11.331825 2026] [:error] [pid 57183:tid 57186] [client 4.223.143.114:6271] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "adz59zDO3t8R5NaxzYRvbAAAAUE"]
[Mon Apr 13 22:13:12.034568 2026] [:error] [pid 57183:tid 57200] [client 4.223.143.114:6232] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "adz5-DDO3t8R5NaxzYRvbgAAAU8"]
[Mon Apr 13 22:13:12.718495 2026] [:error] [pid 63406:tid 63412] [client 4.223.143.114:6792] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "adz5-LHZEIkQ0Zmgp5ruTwAAAME"]
[Mon Apr 13 22:13:13.557169 2026] [:error] [pid 7228:tid 7238] [client 4.223.143.114:6218] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "adz5-QEnn1dQrOSHHNW0jgAAAQg"]
[Mon Apr 13 22:13:14.153570 2026] [:error] [pid 63309:tid 63325] [client 4.223.143.114:6258] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "adz5-kpIKZ10weXpf0U5bgAAAAw"]
[Mon Apr 13 22:13:14.847864 2026] [:error] [pid 63406:tid 63411] [client 4.223.143.114:6798] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "adz5-rHZEIkQ0Zmgp5ruVQAAAMA"]
[Mon Apr 13 22:13:15.604668 2026] [:error] [pid 63406:tid 63428] [client 4.223.143.114:6829] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "adz5-7HZEIkQ0Zmgp5ruWAAAANE"]
[Mon Apr 13 22:13:15.949871 2026] [:error] [pid 63406:tid 63420] [client 91.230.225.243:27441] [client 91.230.225.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adz5-7HZEIkQ0Zmgp5ruWgAAAMk"]
[Mon Apr 13 22:13:16.400497 2026] [:error] [pid 7228:tid 7233] [client 4.223.143.114:6756] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "adz5_AEnn1dQrOSHHNW0lgAAAQM"]
[Mon Apr 13 22:13:16.510312 2026] [:error] [pid 7228:tid 7236] [client 91.230.225.65:63891] [client 91.230.225.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adz5_AEnn1dQrOSHHNW0lwAAAQY"]
[Mon Apr 13 22:13:17.029190 2026] [:error] [pid 63406:tid 63422] [client 4.223.143.114:6844] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws49.php"] [unique_id "adz5_bHZEIkQ0Zmgp5ruXgAAAMs"]
[Mon Apr 13 22:13:17.047304 2026] [:error] [pid 63310:tid 63349] [client 91.230.225.55:52519] [client 91.230.225.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adz5_XoXpRU5ztmwPjJuIAAAAEU"]
[Mon Apr 13 22:13:17.598844 2026] [:error] [pid 63311:tid 63391] [client 185.92.25.1:40711] [client 185.92.25.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adz5_aHjrGN1MqBCVFkbLQAAAJQ"]
[Mon Apr 13 22:13:18.091303 2026] [:error] [pid 63406:tid 63430] [client 4.223.143.114:6802] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "adz5_rHZEIkQ0Zmgp5ruZAAAANM"]
[Mon Apr 13 22:13:19.060076 2026] [:error] [pid 63406:tid 63417] [client 4.223.143.114:6244] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "adz5_7HZEIkQ0Zmgp5rubQAAAMY"]
[Mon Apr 13 22:13:19.817600 2026] [:error] [pid 63406:tid 63412] [client 91.230.225.249:50019] [client 91.230.225.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adz5_7HZEIkQ0Zmgp5rudAAAAME"]
[Mon Apr 13 22:13:20.019062 2026] [:error] [pid 9314:tid 9332] [client 4.223.143.114:6731] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "adz6AG_r4W8fX2GWyGRCLgAAAZA"]
[Mon Apr 13 22:13:20.372977 2026] [:error] [pid 63311:tid 63390] [client 91.230.225.246:57041] [client 91.230.225.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adz6AKHjrGN1MqBCVFkbLgAAAJM"]
[Mon Apr 13 22:13:21.298697 2026] [:error] [pid 57183:tid 57195] [client 4.223.143.114:6208] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "adz6ATDO3t8R5NaxzYRveQAAAUo"]
[Mon Apr 13 22:13:21.919015 2026] [:error] [pid 63406:tid 63416] [client 4.223.143.114:6812] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "adz6AbHZEIkQ0Zmgp5ruhwAAAMU"]
[Mon Apr 13 22:13:22.491488 2026] [:error] [pid 63406:tid 63429] [client 4.223.143.114:6769] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "adz6ArHZEIkQ0Zmgp5rujgAAANI"]
[Mon Apr 13 22:13:23.244081 2026] [:error] [pid 63406:tid 63413] [client 4.223.143.114:6834] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "adz6A7HZEIkQ0Zmgp5rulQAAAMI"]
[Mon Apr 13 22:13:24.473819 2026] [:error] [pid 63406:tid 63419] [client 91.230.225.65:47109] [client 91.230.225.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adz6BLHZEIkQ0Zmgp5rupQAAAMg"]
[Mon Apr 13 22:13:25.016439 2026] [:error] [pid 9314:tid 9318] [client 185.192.71.94:34265] [client 185.192.71.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adz6BW_r4W8fX2GWyGRCNAAAAYI"]
[Mon Apr 13 22:13:25.232900 2026] [:error] [pid 7228:tid 7244] [client 4.223.143.114:6723] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "adz6BQEnn1dQrOSHHNW0nAAAAQ4"]
[Mon Apr 13 22:13:25.567059 2026] [:error] [pid 63311:tid 63378] [client 185.192.71.100:48869] [client 185.192.71.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adz6BaHjrGN1MqBCVFkbMgAAAIc"]
[Mon Apr 13 22:13:26.372671 2026] [:error] [pid 57183:tid 57188] [client 4.223.143.114:6773] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "adz6BjDO3t8R5NaxzYRvgQAAAUM"]
[Mon Apr 13 22:13:27.196276 2026] [:error] [pid 57183:tid 57201] [client 91.230.225.59:42359] [client 91.230.225.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adz6BzDO3t8R5NaxzYRvgwAAAVA"]
[Mon Apr 13 22:13:28.064939 2026] [:error] [pid 57183:tid 57204] [client 185.192.71.86:20497] [client 185.192.71.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adz6CDDO3t8R5NaxzYRvigAAAVM"]
[Mon Apr 13 22:13:29.189539 2026] [:error] [pid 7228:tid 7238] [client 185.192.71.83:46051] [client 185.192.71.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adz6CQEnn1dQrOSHHNW0oQAAAQg"]
[Mon Apr 13 22:13:29.197543 2026] [:error] [pid 63311:tid 63376] [client 4.223.143.114:6241] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "adz6CaHjrGN1MqBCVFkbOQAAAIU"]
[Mon Apr 13 22:13:30.712834 2026] [:error] [pid 9314:tid 9326] [client 4.223.143.114:6803] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "adz6Cm_r4W8fX2GWyGRCOgAAAYo"]
[Mon Apr 13 22:13:31.900757 2026] [:error] [pid 63406:tid 63427] [client 4.223.143.114:6265] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gfd.php"] [unique_id "adz6C7HZEIkQ0Zmgp5ruxwAAANA"]
[Mon Apr 13 22:13:32.552952 2026] [:error] [pid 57183:tid 57188] [client 4.223.143.114:6251] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "adz6DDDO3t8R5NaxzYRvjQAAAUM"]
[Mon Apr 13 22:13:34.816515 2026] [:error] [pid 57183:tid 57195] [client 4.223.143.114:6230] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "adz6DjDO3t8R5NaxzYRvlAAAAUo"]
[Mon Apr 13 22:13:36.088304 2026] [:error] [pid 63406:tid 63416] [client 91.230.225.69:23005] [client 91.230.225.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adz6ELHZEIkQ0Zmgp5ru0QAAAMU"]
[Mon Apr 13 22:13:36.987735 2026] [:error] [pid 7228:tid 7247] [client 4.223.143.114:6819] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "adz6EAEnn1dQrOSHHNW0rwAAARE"]
[Mon Apr 13 22:13:38.900422 2026] [:error] [pid 57183:tid 57193] [client 4.223.143.114:6255] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "adz6EjDO3t8R5NaxzYRvmwAAAUg"]
[Mon Apr 13 22:13:40.034726 2026] [:error] [pid 57183:tid 57198] [client 4.223.143.114:6740] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "adz6FDDO3t8R5NaxzYRvoQAAAU0"]
[Mon Apr 13 22:13:41.156497 2026] [:error] [pid 63406:tid 63435] [client 4.223.143.114:6256] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "adz6FbHZEIkQ0Zmgp5ru3AAAANg"]
[Mon Apr 13 22:13:41.869770 2026] [:error] [pid 57183:tid 57185] [client 4.223.143.114:6758] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "adz6FTDO3t8R5NaxzYRvowAAAUA"]
[Mon Apr 13 22:13:42.937185 2026] [:error] [pid 63406:tid 63412] [client 4.223.143.114:6235] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "adz6FrHZEIkQ0Zmgp5ru4wAAAME"]
[Mon Apr 13 22:13:43.937572 2026] [:error] [pid 63406:tid 63435] [client 4.223.143.114:6264] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adz6F7HZEIkQ0Zmgp5ru6gAAANg"]
[Mon Apr 13 22:13:44.568161 2026] [:error] [pid 7228:tid 7252] [client 4.223.143.114:6748] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adz6GAEnn1dQrOSHHNW0wwAAARY"]
[Mon Apr 13 22:13:45.154910 2026] [:error] [pid 57183:tid 57192] [client 4.223.143.114:6237] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adz6GTDO3t8R5NaxzYRvqwAAAUc"]
[Mon Apr 13 22:13:46.104418 2026] [:error] [pid 63406:tid 63422] [client 4.223.143.114:6811] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "adz6GrHZEIkQ0Zmgp5ru8QAAAMs"]
[Mon Apr 13 22:13:47.390005 2026] [:error] [pid 57183:tid 57193] [client 4.223.143.114:6779] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "adz6GzDO3t8R5NaxzYRvsQAAAUg"]
[Mon Apr 13 22:13:47.795095 2026] [:error] [pid 7228:tid 7232] [client 185.192.71.89:56997] [client 185.192.71.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adz6GwEnn1dQrOSHHNW0xwAAAQI"]
[Mon Apr 13 22:13:48.167369 2026] [:error] [pid 57183:tid 57205] [client 4.223.143.114:6830] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "adz6HDDO3t8R5NaxzYRvsgAAAVQ"]
[Mon Apr 13 22:13:48.880299 2026] [:error] [pid 57183:tid 57202] [client 4.223.143.114:6739] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "adz6HDDO3t8R5NaxzYRvtQAAAVE"]
[Mon Apr 13 22:13:49.704494 2026] [:error] [pid 57183:tid 57204] [client 4.223.143.114:6215] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "adz6HTDO3t8R5NaxzYRvuwAAAVM"]
[Mon Apr 13 22:13:50.488670 2026] [:error] [pid 9314:tid 9331] [client 4.223.143.114:6601] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zlnckdxn.php"] [unique_id "adz6Hm_r4W8fX2GWyGRCSgAAAY8"]
[Mon Apr 13 22:13:50.601885 2026] [:error] [pid 57183:tid 57186] [client 91.230.225.63:62383] [client 91.230.225.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adz6HjDO3t8R5NaxzYRvwwAAAUE"]
[Mon Apr 13 22:13:51.158369 2026] [:error] [pid 9314:tid 9321] [client 91.230.225.242:23629] [client 91.230.225.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adz6H2_r4W8fX2GWyGRCTwAAAYU"]
[Mon Apr 13 22:13:51.326224 2026] [:error] [pid 63406:tid 63433] [client 4.223.143.114:6270] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zlnckdxn.php"] [unique_id "adz6H7HZEIkQ0Zmgp5rvCAAAANY"]
[Mon Apr 13 22:13:53.047153 2026] [:error] [pid 57183:tid 57188] [client 4.223.143.114:6618] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zlnckdxn.php"] [unique_id "adz6ITDO3t8R5NaxzYRvzQAAAUM"]
[Mon Apr 13 22:13:53.643023 2026] [:error] [pid 63406:tid 63429] [client 4.223.143.114:6842] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zlnckdxn.php"] [unique_id "adz6IbHZEIkQ0Zmgp5rvFAAAANI"]
[Mon Apr 13 22:13:54.524729 2026] [:error] [pid 57183:tid 57207] [client 4.223.143.114:6820] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "adz6IjDO3t8R5NaxzYRv1AAAAVY"]
[Mon Apr 13 22:13:55.191188 2026] [:error] [pid 9314:tid 9324] [client 4.223.143.114:6214] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "adz6I2_r4W8fX2GWyGRCXQAAAYg"]
[Mon Apr 13 22:13:56.676519 2026] [:error] [pid 63311:tid 63378] [client 4.223.143.114:6234] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "adz6JKHjrGN1MqBCVFkbSAAAAIc"]
[Mon Apr 13 22:13:57.764439 2026] [:error] [pid 63406:tid 63429] [client 4.223.143.114:6725] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs6.php"] [unique_id "adz6JbHZEIkQ0Zmgp5rvGwAAANI"]
[Mon Apr 13 22:13:57.883187 2026] [:error] [pid 63406:tid 63418] [client 91.230.225.59:47233] [client 91.230.225.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adz6JbHZEIkQ0Zmgp5rvHAAAAMc"]
[Mon Apr 13 22:13:58.822679 2026] [:error] [pid 63311:tid 63381] [client 4.223.143.114:6788] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwzs.php"] [unique_id "adz6JqHjrGN1MqBCVFkbTgAAAIo"]
[Mon Apr 13 22:14:00.443158 2026] [:error] [pid 63406:tid 63417] [client 4.223.143.114:6793] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwzs.php"] [unique_id "adz6KLHZEIkQ0Zmgp5rvHgAAAMY"]
[Mon Apr 13 22:14:02.352698 2026] [proxy_fcgi:error] [pid 63311:tid 63390] [client 185.192.71.84:54715] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:14:02.559361 2026] [:error] [pid 57183:tid 57186] [client 4.223.143.114:6253] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwzs.php"] [unique_id "adz6KjDO3t8R5NaxzYRv6wAAAUE"]
[Mon Apr 13 22:14:02.627116 2026] [proxy_fcgi:error] [pid 63311:tid 63386] [client 185.192.71.84:54715] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:14:02.904022 2026] [proxy_fcgi:error] [pid 63311:tid 63393] [client 185.192.71.84:54715] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:14:03.390935 2026] [:error] [pid 63311:tid 63392] [client 4.223.143.114:6751] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwzs.php"] [unique_id "adz6K6HjrGN1MqBCVFkbWQAAAJU"]
[Mon Apr 13 22:14:04.304124 2026] [:error] [pid 63311:tid 63380] [client 185.192.71.84:54715] [client 185.192.71.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adz6LKHjrGN1MqBCVFkbXgAAAIk"]
[Mon Apr 13 22:14:04.835193 2026] [:error] [pid 63311:tid 63374] [client 4.223.143.114:6242] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adz6LKHjrGN1MqBCVFkbXwAAAIM"]
[Mon Apr 13 22:14:04.845200 2026] [:error] [pid 7228:tid 7238] [client 91.230.225.246:30403] [client 91.230.225.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adz6LAEnn1dQrOSHHNW00QAAAQg"]
[Mon Apr 13 22:14:05.386583 2026] [:error] [pid 57183:tid 57194] [client 91.230.225.246:48475] [client 91.230.225.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adz6LTDO3t8R5NaxzYRv9QAAAUk"]
[Mon Apr 13 22:14:05.928867 2026] [:error] [pid 63309:tid 63317] [client 185.192.71.87:57771] [client 185.192.71.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adz6LUpIKZ10weXpf0U5mgAAAAQ"]
[Mon Apr 13 22:14:06.264627 2026] [:error] [pid 63406:tid 63428] [client 4.223.143.114:6211] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adz6LrHZEIkQ0Zmgp5rvJAAAANE"]
[Mon Apr 13 22:14:07.597950 2026] [:error] [pid 9314:tid 9340] [client 185.192.71.87:61561] [client 185.192.71.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adz6L2_r4W8fX2GWyGRCgwAAAZg"]
[Mon Apr 13 22:14:08.145731 2026] [:error] [pid 63309:tid 63325] [client 185.192.71.98:32717] [client 185.192.71.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adz6MEpIKZ10weXpf0U5nAAAAAw"]
[Mon Apr 13 22:14:10.108661 2026] [:error] [pid 63406:tid 63433] [client 185.192.71.91:25265] [client 185.192.71.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adz6MrHZEIkQ0Zmgp5rvNAAAANY"]
[Mon Apr 13 22:14:10.650405 2026] [:error] [pid 63406:tid 63427] [client 185.192.71.91:35957] [client 185.192.71.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adz6MrHZEIkQ0Zmgp5rvOQAAANA"]
[Mon Apr 13 22:14:11.194744 2026] [:error] [pid 7228:tid 7239] [client 91.230.225.59:36863] [client 91.230.225.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adz6MwEnn1dQrOSHHNW04wAAAQk"]
[Mon Apr 13 22:14:11.748727 2026] [:error] [pid 63310:tid 63357] [client 185.92.25.1:28995] [client 185.92.25.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adz6M3oXpRU5ztmwPjJuXQAAAE0"]
[Mon Apr 13 22:14:13.957800 2026] [:error] [pid 57183:tid 57197] [client 91.230.225.251:33779] [client 91.230.225.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adz6NTDO3t8R5NaxzYRwAAAAAUw"]
[Mon Apr 13 22:14:14.809350 2026] [:error] [pid 57183:tid 57189] [client 91.230.225.58:60025] [client 91.230.225.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adz6NjDO3t8R5NaxzYRwBgAAAUQ"]
[Mon Apr 13 22:14:18.935313 2026] [:error] [pid 57183:tid 57202] [client 185.192.71.98:25317] [client 185.192.71.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adz6OjDO3t8R5NaxzYRwEwAAAVE"]
[Mon Apr 13 22:14:21.558952 2026] [:error] [pid 63406:tid 63425] [client 185.192.71.81:37913] [client 185.192.71.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adz6PbHZEIkQ0Zmgp5rvZAAAAM4"]
[Mon Apr 13 22:14:25.984304 2026] [proxy_fcgi:error] [pid 7228:tid 7248] [client 91.230.225.61:45841] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:14:26.614353 2026] [:error] [pid 63310:tid 63355] [client 185.92.25.3:47093] [client 185.92.25.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adz6QnoXpRU5ztmwPjJuYgAAAEs"]
[Mon Apr 13 22:14:34.295635 2026] [:error] [pid 9314:tid 9340] [client 185.92.25.3:56751] [client 185.92.25.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adz6Sm_r4W8fX2GWyGRCsgAAAZg"]
[Mon Apr 13 22:14:35.135871 2026] [proxy_fcgi:error] [pid 9314:tid 9319] [client 185.192.71.98:20665] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:14:35.735252 2026] [:error] [pid 7228:tid 7240] [client 185.192.71.95:55389] [client 185.192.71.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adz6SwEnn1dQrOSHHNW0-wAAAQo"]
[Mon Apr 13 22:14:37.930786 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 185.192.71.88:47471] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:14:49.389424 2026] [proxy_fcgi:error] [pid 57183:tid 57191] [client 91.230.225.55:27957] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:14:51.988049 2026] [proxy_fcgi:error] [pid 57183:tid 57193] [client 185.92.25.2:28803] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:14:53.621304 2026] [:error] [pid 9314:tid 9329] [client 4.223.143.114:6810] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "adz6XW_r4W8fX2GWyGRC0QAAAY0"]
[Mon Apr 13 22:14:54.171202 2026] [:error] [pid 7228:tid 7245] [client 4.223.143.114:6261] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "adz6XgEnn1dQrOSHHNW1EAAAAQ8"]
[Mon Apr 13 22:14:54.790352 2026] [:error] [pid 63310:tid 63367] [client 4.223.143.114:6239] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "adz6XnoXpRU5ztmwPjJucQAAAFc"]
[Mon Apr 13 22:14:55.459119 2026] [:error] [pid 57183:tid 57204] [client 4.223.143.114:6831] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "adz6XzDO3t8R5NaxzYRwagAAAVM"]
[Mon Apr 13 22:14:56.053863 2026] [:error] [pid 7228:tid 7246] [client 4.223.143.114:6267] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-ajax.php"] [unique_id "adz6YAEnn1dQrOSHHNW1HAAAARA"]
[Mon Apr 13 22:14:56.645953 2026] [:error] [pid 63309:tid 63318] [client 4.223.143.114:6768] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-ajax.php"] [unique_id "adz6YEpIKZ10weXpf0U50gAAAAU"]
[Mon Apr 13 22:14:57.020073 2026] [proxy_fcgi:error] [pid 63311:tid 63371] [client 91.230.225.249:59339] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:14:57.429330 2026] [:error] [pid 63309:tid 63323] [client 4.223.143.114:6720] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-ajax.php"] [unique_id "adz6YUpIKZ10weXpf0U50wAAAAo"]
[Mon Apr 13 22:14:57.553840 2026] [:error] [pid 63309:tid 63313] [client 185.92.25.1:65261] [client 185.92.25.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adz6YUpIKZ10weXpf0U51AAAAAA"]
[Mon Apr 13 22:14:58.036293 2026] [:error] [pid 7228:tid 7247] [client 4.223.143.114:6743] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-ajax.php"] [unique_id "adz6YgEnn1dQrOSHHNW1HgAAARE"]
[Mon Apr 13 22:14:58.102443 2026] [:error] [pid 63406:tid 63414] [client 91.230.225.63:25549] [client 91.230.225.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adz6YrHZEIkQ0Zmgp5rv5gAAAMM"]
[Mon Apr 13 22:14:58.676018 2026] [:error] [pid 7228:tid 7238] [client 4.223.143.114:6791] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amthd.php"] [unique_id "adz6YgEnn1dQrOSHHNW1IQAAAQg"]
[Mon Apr 13 22:14:59.602447 2026] [:error] [pid 63309:tid 63319] [client 4.223.143.114:6813] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amthd.php"] [unique_id "adz6Y0pIKZ10weXpf0U51gAAAAY"]
[Mon Apr 13 22:15:00.381306 2026] [:error] [pid 63310:tid 63351] [client 185.192.71.97:42037] [client 185.192.71.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adz6ZHoXpRU5ztmwPjJufAAAAEc"]
[Mon Apr 13 22:15:00.646559 2026] [:error] [pid 9314:tid 9339] [client 4.223.143.114:6781] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amthd.php"] [unique_id "adz6ZG_r4W8fX2GWyGRC1gAAAZc"]
[Mon Apr 13 22:15:01.717717 2026] [:error] [pid 63311:tid 63393] [client 4.223.143.114:6843] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amthd.php"] [unique_id "adz6ZaHjrGN1MqBCVFkbhgAAAJY"]
[Mon Apr 13 22:15:02.505553 2026] [:error] [pid 63406:tid 63413] [client 4.223.143.114:6266] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8xyz.php"] [unique_id "adz6ZrHZEIkQ0Zmgp5rv7AAAAMI"]
[Mon Apr 13 22:15:03.555566 2026] [:error] [pid 63406:tid 63430] [client 4.223.143.114:6730] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8xyz.php"] [unique_id "adz6Z7HZEIkQ0Zmgp5rv8wAAANM"]
[Mon Apr 13 22:15:04.167642 2026] [:error] [pid 57183:tid 57196] [client 91.230.225.55:30955] [client 91.230.225.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adz6aDDO3t8R5NaxzYRweQAAAUs"]
[Mon Apr 13 22:15:04.427778 2026] [:error] [pid 57183:tid 57187] [client 4.223.143.114:6760] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8xyz.php"] [unique_id "adz6aDDO3t8R5NaxzYRwewAAAUI"]
[Mon Apr 13 22:15:04.743734 2026] [:error] [pid 63311:tid 63378] [client 185.92.25.2:49149] [client 185.92.25.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adz6aKHjrGN1MqBCVFkbiAAAAIc"]
[Mon Apr 13 22:15:05.837887 2026] [:error] [pid 63311:tid 63394] [client 4.223.143.114:6821] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8xyz.php"] [unique_id "adz6aaHjrGN1MqBCVFkbjQAAAJc"]
[Mon Apr 13 22:15:06.829047 2026] [:error] [pid 63311:tid 63383] [client 4.223.143.114:6229] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "adz6aqHjrGN1MqBCVFkblAAAAIw"]
[Mon Apr 13 22:15:07.918284 2026] [:error] [pid 63311:tid 63373] [client 4.223.143.114:6595] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "adz6a6HjrGN1MqBCVFkbmgAAAII"]
[Mon Apr 13 22:15:08.813557 2026] [:error] [pid 9314:tid 9323] [client 4.223.143.114:6833] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "adz6bG_r4W8fX2GWyGRC2wAAAYc"]
[Mon Apr 13 22:15:09.595755 2026] [:error] [pid 63406:tid 63420] [client 4.223.143.114:6799] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "adz6bbHZEIkQ0Zmgp5rv_gAAAMk"]
[Mon Apr 13 22:15:10.271306 2026] [:error] [pid 57183:tid 57198] [client 4.223.143.114:6741] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws68.php"] [unique_id "adz6bjDO3t8R5NaxzYRwiAAAAU0"]
[Mon Apr 13 22:15:10.311403 2026] [:error] [pid 63311:tid 63393] [client 185.192.71.98:62849] [client 185.192.71.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adz6bqHjrGN1MqBCVFkbqgAAAJY"]
[Mon Apr 13 22:15:10.853674 2026] [:error] [pid 57183:tid 57187] [client 91.230.225.246:49179] [client 91.230.225.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "adz6bjDO3t8R5NaxzYRwjAAAAUI"]
[Mon Apr 13 22:15:10.934682 2026] [:error] [pid 63406:tid 63419] [client 4.223.143.114:6837] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws68.php"] [unique_id "adz6brHZEIkQ0Zmgp5rwAQAAAMg"]
[Mon Apr 13 22:15:11.864822 2026] [:error] [pid 63406:tid 63411] [client 4.223.143.114:6737] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws68.php"] [unique_id "adz6b7HZEIkQ0Zmgp5rwBAAAAMA"]
[Mon Apr 13 22:15:12.646426 2026] [:error] [pid 63406:tid 63428] [client 4.223.143.114:6845] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws68.php"] [unique_id "adz6cLHZEIkQ0Zmgp5rwCQAAANE"]
[Mon Apr 13 22:15:13.176893 2026] [:error] [pid 9314:tid 9338] [client 4.223.143.114:6752] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "adz6cW_r4W8fX2GWyGRC3AAAAZY"]
[Mon Apr 13 22:15:13.751473 2026] [:error] [pid 9314:tid 9337] [client 4.223.143.114:6220] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "adz6cW_r4W8fX2GWyGRC3wAAAZU"]
[Mon Apr 13 22:15:14.349677 2026] [:error] [pid 9314:tid 9335] [client 4.223.143.114:6745] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "adz6cm_r4W8fX2GWyGRC4wAAAZM"]
[Mon Apr 13 22:15:14.971763 2026] [:error] [pid 9314:tid 9326] [client 4.223.143.114:6226] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "adz6cm_r4W8fX2GWyGRC6AAAAYo"]
[Mon Apr 13 22:15:15.588804 2026] [:error] [pid 63406:tid 63430] [client 4.223.143.114:6838] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/njxjtooj.php"] [unique_id "adz6c7HZEIkQ0Zmgp5rwDgAAANM"]
[Mon Apr 13 22:15:16.119868 2026] [:error] [pid 9314:tid 9327] [client 4.223.143.114:6836] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/njxjtooj.php"] [unique_id "adz6dG_r4W8fX2GWyGRC7AAAAYs"]
[Mon Apr 13 22:15:16.791488 2026] [:error] [pid 63406:tid 63419] [client 4.223.143.114:6762] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/njxjtooj.php"] [unique_id "adz6dLHZEIkQ0Zmgp5rwEwAAAMg"]
[Mon Apr 13 22:15:17.781975 2026] [:error] [pid 63406:tid 63417] [client 4.223.143.114:6634] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/njxjtooj.php"] [unique_id "adz6dbHZEIkQ0Zmgp5rwGQAAAMY"]
[Mon Apr 13 22:15:18.413974 2026] [:error] [pid 9314:tid 9318] [client 4.223.143.114:6767] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adz6dm_r4W8fX2GWyGRC7gAAAYI"]
[Mon Apr 13 22:15:18.877248 2026] [:error] [pid 57183:tid 57199] [client 91.230.225.245:28109] [client 91.230.225.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adz6djDO3t8R5NaxzYRwpQAAAU4"]
[Mon Apr 13 22:15:19.122827 2026] [:error] [pid 7228:tid 7245] [client 4.223.143.114:6733] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adz6dwEnn1dQrOSHHNW1KgAAAQ8"]
[Mon Apr 13 22:15:19.704924 2026] [proxy_fcgi:error] [pid 7228:tid 7249] [client 91.230.225.59:39273] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:15:19.874786 2026] [:error] [pid 63406:tid 63427] [client 4.223.143.114:6736] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adz6d7HZEIkQ0Zmgp5rwIgAAANA"]
[Mon Apr 13 22:15:20.708947 2026] [:error] [pid 57183:tid 57192] [client 4.223.143.114:6250] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "adz6eDDO3t8R5NaxzYRwpwAAAUc"]
[Mon Apr 13 22:15:21.341015 2026] [:error] [pid 7228:tid 7246] [client 91.230.225.59:39273] [client 91.230.225.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/function.php"] [unique_id "adz6eQEnn1dQrOSHHNW1MQAAARA"]
[Mon Apr 13 22:15:21.539354 2026] [:error] [pid 57183:tid 57185] [client 4.223.143.114:6728] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws61.php"] [unique_id "adz6eTDO3t8R5NaxzYRwrAAAAUA"]
[Mon Apr 13 22:15:21.900627 2026] [:error] [pid 9314:tid 9329] [client 91.230.225.244:42559] [client 91.230.225.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adz6eW_r4W8fX2GWyGRC9gAAAY0"]
[Mon Apr 13 22:15:22.543351 2026] [:error] [pid 9314:tid 9331] [client 4.223.143.114:6749] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws61.php"] [unique_id "adz6em_r4W8fX2GWyGRC-QAAAY8"]
[Mon Apr 13 22:15:23.436538 2026] [:error] [pid 9314:tid 9324] [client 4.223.143.114:6759] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws61.php"] [unique_id "adz6e2_r4W8fX2GWyGRDAQAAAYg"]
[Mon Apr 13 22:15:24.413447 2026] [:error] [pid 9314:tid 9335] [client 91.230.225.249:24649] [client 91.230.225.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adz6fG_r4W8fX2GWyGRDCAAAAZM"]
[Mon Apr 13 22:15:24.420746 2026] [:error] [pid 63309:tid 63322] [client 4.223.143.114:6645] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws61.php"] [unique_id "adz6fEpIKZ10weXpf0U56gAAAAk"]
[Mon Apr 13 22:15:24.968382 2026] [:error] [pid 57183:tid 57209] [client 91.230.225.242:40617] [client 91.230.225.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adz6fDDO3t8R5NaxzYRwsAAAAVg"]
[Mon Apr 13 22:15:25.378978 2026] [:error] [pid 9314:tid 9327] [client 4.223.143.114:6734] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iyy.php"] [unique_id "adz6fW_r4W8fX2GWyGRDDgAAAYs"]
[Mon Apr 13 22:15:26.046571 2026] [:error] [pid 57183:tid 57190] [client 4.223.143.114:6839] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iyy.php"] [unique_id "adz6fjDO3t8R5NaxzYRwsgAAAUU"]
[Mon Apr 13 22:15:26.836588 2026] [:error] [pid 63311:tid 63381] [client 4.223.143.114:6627] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iyy.php"] [unique_id "adz6fqHjrGN1MqBCVFkbsgAAAIo"]
[Mon Apr 13 22:15:27.582973 2026] [:error] [pid 63311:tid 63388] [client 4.223.143.114:6755] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iyy.php"] [unique_id "adz6f6HjrGN1MqBCVFkbtwAAAJE"]
[Mon Apr 13 22:15:28.160020 2026] [:error] [pid 7228:tid 7245] [client 4.223.143.114:6823] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "adz6gAEnn1dQrOSHHNW1NQAAAQ8"]
[Mon Apr 13 22:15:29.007100 2026] [:error] [pid 63310:tid 63345] [client 4.223.143.114:6726] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "adz6gXoXpRU5ztmwPjJujwAAAEE"]
[Mon Apr 13 22:15:29.633904 2026] [:error] [pid 7228:tid 7241] [client 4.223.143.114:6846] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "adz6gQEnn1dQrOSHHNW1OAAAAQs"]
[Mon Apr 13 22:15:30.225504 2026] [:error] [pid 63311:tid 63376] [client 4.223.143.114:6774] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "adz6gqHjrGN1MqBCVFkbuQAAAIU"]
[Mon Apr 13 22:15:30.930380 2026] [:error] [pid 63310:tid 63352] [client 4.223.143.114:6610] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adz6gnoXpRU5ztmwPjJulAAAAEg"]
[Mon Apr 13 22:15:31.592974 2026] [:error] [pid 63310:tid 63357] [client 4.223.143.114:6782] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adz6g3oXpRU5ztmwPjJulgAAAE0"]
[Mon Apr 13 22:15:32.429723 2026] [:error] [pid 7228:tid 7253] [client 4.223.143.114:6835] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adz6hAEnn1dQrOSHHNW1PQAAARc"]
[Mon Apr 13 22:15:33.134978 2026] [:error] [pid 7228:tid 7252] [client 4.223.143.114:6804] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adz6hQEnn1dQrOSHHNW1PwAAARY"]
[Mon Apr 13 22:15:34.140410 2026] [:error] [pid 57183:tid 57201] [client 4.223.143.114:6598] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gqhyti.php"] [unique_id "adz6hjDO3t8R5NaxzYRwuwAAAVA"]
[Mon Apr 13 22:15:34.860392 2026] [:error] [pid 63309:tid 63336] [client 4.223.143.114:6608] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gqhyti.php"] [unique_id "adz6hkpIKZ10weXpf0U59AAAABc"]
[Mon Apr 13 22:15:35.509815 2026] [:error] [pid 57183:tid 57198] [client 4.223.143.114:6224] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gqhyti.php"] [unique_id "adz6hzDO3t8R5NaxzYRwwwAAAU0"]
[Mon Apr 13 22:15:36.057730 2026] [:error] [pid 57183:tid 57195] [client 4.223.143.114:6797] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gqhyti.php"] [unique_id "adz6iDDO3t8R5NaxzYRwxgAAAUo"]
[Mon Apr 13 22:15:36.650778 2026] [:error] [pid 57183:tid 57186] [client 185.192.71.81:45999] [client 185.192.71.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adz6iDDO3t8R5NaxzYRwywAAAUE"]
[Mon Apr 13 22:15:36.915779 2026] [:error] [pid 63311:tid 63388] [client 4.223.143.114:6747] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoxxi.php"] [unique_id "adz6iKHjrGN1MqBCVFkbvQAAAJE"]
[Mon Apr 13 22:15:37.188058 2026] [:error] [pid 63311:tid 63387] [client 91.230.225.55:45121] [client 91.230.225.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adz6iaHjrGN1MqBCVFkbvwAAAJA"]
[Mon Apr 13 22:15:37.515098 2026] [:error] [pid 7228:tid 7252] [client 4.223.143.114:6814] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoxxi.php"] [unique_id "adz6iQEnn1dQrOSHHNW1TAAAARY"]
[Mon Apr 13 22:15:38.948425 2026] [:error] [pid 57183:tid 57187] [client 4.223.143.114:6231] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoxxi.php"] [unique_id "adz6ijDO3t8R5NaxzYRw3QAAAUI"]
[Mon Apr 13 22:15:39.895463 2026] [:error] [pid 7228:tid 7234] [client 4.223.143.114:6841] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoxxi.php"] [unique_id "adz6iwEnn1dQrOSHHNW1WgAAAQQ"]
[Mon Apr 13 22:15:40.888023 2026] [:error] [pid 9314:tid 9323] [client 4.223.143.114:6786] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adz6jG_r4W8fX2GWyGRDGAAAAYc"]
[Mon Apr 13 22:15:41.778185 2026] [:error] [pid 57183:tid 57205] [client 4.223.143.114:6607] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adz6jTDO3t8R5NaxzYRw8QAAAVQ"]
[Mon Apr 13 22:15:42.703980 2026] [:error] [pid 57183:tid 57208] [client 4.223.143.114:6750] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adz6jjDO3t8R5NaxzYRw9AAAAVc"]
[Mon Apr 13 22:15:43.615810 2026] [:error] [pid 57183:tid 57195] [client 4.223.143.114:6770] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adz6jzDO3t8R5NaxzYRw9wAAAUo"]
[Mon Apr 13 22:15:44.372137 2026] [:error] [pid 57183:tid 57193] [client 4.223.143.114:6777] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws48.php"] [unique_id "adz6kDDO3t8R5NaxzYRw_AAAAUg"]
[Mon Apr 13 22:15:44.387533 2026] [:error] [pid 9314:tid 9336] [client 91.230.225.63:47603] [client 91.230.225.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "adz6kG_r4W8fX2GWyGRDIQAAAZQ"]
[Mon Apr 13 22:15:44.950324 2026] [:error] [pid 63406:tid 63427] [client 91.230.225.69:58171] [client 91.230.225.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adz6kLHZEIkQ0Zmgp5rwPQAAANA"]
[Mon Apr 13 22:15:45.319670 2026] [:error] [pid 63311:tid 63393] [client 4.223.143.114:6643] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws48.php"] [unique_id "adz6kaHjrGN1MqBCVFkb0AAAAJY"]
[Mon Apr 13 22:15:45.521302 2026] [:error] [pid 63406:tid 63430] [client 185.192.71.82:47975] [client 185.192.71.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adz6kbHZEIkQ0Zmgp5rwQQAAANM"]
[Mon Apr 13 22:15:46.226769 2026] [:error] [pid 9314:tid 9325] [client 4.223.143.114:6596] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws48.php"] [unique_id "adz6km_r4W8fX2GWyGRDIwAAAYk"]
[Mon Apr 13 22:15:47.096945 2026] [:error] [pid 7228:tid 7245] [client 4.223.143.114:6243] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws48.php"] [unique_id "adz6kwEnn1dQrOSHHNW1ZQAAAQ8"]
[Mon Apr 13 22:15:47.799862 2026] [:error] [pid 9314:tid 9323] [client 4.223.143.114:6594] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adz6k2_r4W8fX2GWyGRDJQAAAYc"]
[Mon Apr 13 22:15:48.567466 2026] [:error] [pid 63311:tid 63380] [client 4.223.143.114:6247] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adz6lKHjrGN1MqBCVFkb1QAAAIk"]
[Mon Apr 13 22:15:49.603580 2026] [:error] [pid 63406:tid 63417] [client 4.223.143.114:6826] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adz6lbHZEIkQ0Zmgp5rwSgAAAMY"]
[Mon Apr 13 22:15:50.385846 2026] [:error] [pid 7228:tid 7237] [client 4.223.143.114:6209] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adz6lgEnn1dQrOSHHNW1aQAAAQc"]
[Mon Apr 13 22:15:53.002095 2026] [:error] [pid 63406:tid 63433] [client 185.192.71.91:35169] [client 185.192.71.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adz6mbHZEIkQ0Zmgp5rwTwAAANY"]
[Mon Apr 13 22:15:54.910660 2026] [:error] [pid 57183:tid 57188] [client 185.192.71.84:40339] [client 185.192.71.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adz6mjDO3t8R5NaxzYRxEgAAAUM"]
[Mon Apr 13 22:15:57.235592 2026] [proxy_fcgi:error] [pid 9314:tid 9335] [client 4.223.143.114:6236] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:16:04.633720 2026] [:error] [pid 9314:tid 9337] [client 185.192.71.88:54979] [client 185.192.71.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.88, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/js/wp-login.php"] [unique_id "adz6pG_r4W8fX2GWyGRDQwAAAZU"]
[Mon Apr 13 22:16:08.513539 2026] [proxy_fcgi:error] [pid 9314:tid 9338] [client 185.192.71.88:54979] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:16:14.450958 2026] [:error] [pid 63310:tid 63363] [client 185.192.71.92:65489] [client 185.192.71.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.92, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adz6rnoXpRU5ztmwPjJurQAAAFM"]
[Mon Apr 13 22:16:16.863740 2026] [proxy_fcgi:error] [pid 63310:tid 63351] [client 185.192.71.92:65489] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:16:21.412716 2026] [proxy_fcgi:error] [pid 57183:tid 57201] [client 4.223.143.114:6217] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:16:28.972281 2026] [proxy_fcgi:error] [pid 63311:tid 63372] [client 91.230.225.245:23821] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:16:31.321396 2026] [proxy_fcgi:error] [pid 63311:tid 63391] [client 91.230.225.245:23821] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:16:44.974021 2026] [proxy_fcgi:error] [pid 7228:tid 7238] [client 185.192.71.95:57661] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:16:47.388778 2026] [:error] [pid 63309:tid 63322] [client 4.223.143.114:6800] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "adz6z0pIKZ10weXpf0U6NAAAAAk"]
[Mon Apr 13 22:16:48.570899 2026] [:error] [pid 7228:tid 7232] [client 4.223.143.114:6222] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "adz60AEnn1dQrOSHHNW2EgAAAQI"]
[Mon Apr 13 22:16:48.996307 2026] [:error] [pid 9314:tid 9335] [client 185.192.71.100:63709] [client 185.192.71.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adz60G_r4W8fX2GWyGRDnAAAAZM"]
[Mon Apr 13 22:16:49.410981 2026] [:error] [pid 7228:tid 7236] [client 4.223.143.114:6223] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "adz60QEnn1dQrOSHHNW2FQAAAQY"]
[Mon Apr 13 22:16:49.834028 2026] [proxy_fcgi:error] [pid 57183:tid 57191] [client 185.92.25.119:20801] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:16:50.888263 2026] [:error] [pid 63406:tid 63434] [client 4.223.143.114:6790] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "adz60rHZEIkQ0Zmgp5rwtQAAANc"]
[Mon Apr 13 22:16:51.602293 2026] [:error] [pid 63406:tid 63421] [client 4.223.143.114:6216] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adz607HZEIkQ0Zmgp5rwugAAAMo"]
[Mon Apr 13 22:16:52.591132 2026] [:error] [pid 63406:tid 63433] [client 4.223.143.114:6828] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adz61LHZEIkQ0Zmgp5rwvwAAANY"]
[Mon Apr 13 22:16:53.536184 2026] [:error] [pid 63309:tid 63313] [client 4.223.143.114:6789] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adz61UpIKZ10weXpf0U6NwAAAAA"]
[Mon Apr 13 22:16:54.855022 2026] [:error] [pid 63406:tid 63418] [client 91.230.225.68:31545] [client 91.230.225.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adz61rHZEIkQ0Zmgp5rwywAAAMc"]
[Mon Apr 13 22:16:55.044763 2026] [:error] [pid 63406:tid 63420] [client 4.223.143.114:6775] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adz617HZEIkQ0Zmgp5rwzAAAAMk"]
[Mon Apr 13 22:16:55.765943 2026] [:error] [pid 63310:tid 63358] [client 4.223.143.114:6794] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adz613oXpRU5ztmwPjJuvQAAAE4"]
[Mon Apr 13 22:16:56.600497 2026] [:error] [pid 63310:tid 63359] [client 4.223.143.114:6602] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adz62HoXpRU5ztmwPjJuvgAAAE8"]
[Mon Apr 13 22:16:57.381820 2026] [:error] [pid 63406:tid 63423] [client 4.223.143.114:6795] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adz62bHZEIkQ0Zmgp5rw5QAAAMw"]
[Mon Apr 13 22:16:58.952415 2026] [:error] [pid 63406:tid 63423] [client 185.92.25.2:37961] [client 185.92.25.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adz62rHZEIkQ0Zmgp5rw7QAAAMw"]
[Mon Apr 13 22:16:59.383327 2026] [:error] [pid 63406:tid 63413] [client 4.223.143.114:6268] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adz627HZEIkQ0Zmgp5rw8AAAAMI"]
[Mon Apr 13 22:17:00.041222 2026] [:error] [pid 9314:tid 9340] [client 4.223.143.114:6233] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws57.php"] [unique_id "adz63G_r4W8fX2GWyGRDpgAAAZg"]
[Mon Apr 13 22:17:00.953366 2026] [:error] [pid 63406:tid 63421] [client 4.223.143.114:6212] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws57.php"] [unique_id "adz63LHZEIkQ0Zmgp5rw9wAAAMo"]
[Mon Apr 13 22:17:01.710526 2026] [:error] [pid 9314:tid 9331] [client 4.223.143.114:6742] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws57.php"] [unique_id "adz63W_r4W8fX2GWyGRDqQAAAY8"]
[Mon Apr 13 22:17:02.555981 2026] [:error] [pid 63406:tid 63420] [client 4.223.143.114:6825] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws57.php"] [unique_id "adz63rHZEIkQ0Zmgp5rw_gAAAMk"]
[Mon Apr 13 22:17:03.239397 2026] [:error] [pid 9314:tid 9328] [client 4.223.143.114:6772] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.qiodetme.php"] [unique_id "adz632_r4W8fX2GWyGRDrwAAAYw"]
[Mon Apr 13 22:17:04.054384 2026] [:error] [pid 9314:tid 9324] [client 4.223.143.114:6617] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.qiodetme.php"] [unique_id "adz64G_r4W8fX2GWyGRDsQAAAYg"]
[Mon Apr 13 22:17:04.931873 2026] [:error] [pid 7228:tid 7253] [client 4.223.143.114:6611] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.qiodetme.php"] [unique_id "adz64AEnn1dQrOSHHNW2PgAAARc"]
[Mon Apr 13 22:17:05.615143 2026] [:error] [pid 9314:tid 9335] [client 4.223.143.114:6259] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.qiodetme.php"] [unique_id "adz64W_r4W8fX2GWyGRDuAAAAZM"]
[Mon Apr 13 22:17:07.239705 2026] [:error] [pid 63406:tid 63425] [client 4.223.143.114:6765] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sodas.php"] [unique_id "adz647HZEIkQ0Zmgp5rxFQAAAM4"]
[Mon Apr 13 22:17:08.115104 2026] [:error] [pid 7228:tid 7234] [client 4.223.143.114:6818] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sodas.php"] [unique_id "adz65AEnn1dQrOSHHNW2RgAAAQQ"]
[Mon Apr 13 22:17:09.149680 2026] [:error] [pid 63311:tid 63380] [client 4.223.143.114:6623] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sodas.php"] [unique_id "adz65aHjrGN1MqBCVFkcEQAAAIk"]
[Mon Apr 13 22:17:09.988095 2026] [:error] [pid 9314:tid 9319] [client 4.223.143.114:6225] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sodas.php"] [unique_id "adz65W_r4W8fX2GWyGRDwAAAAYM"]
[Mon Apr 13 22:17:12.194896 2026] [:error] [pid 9314:tid 9329] [client 4.223.143.114:6832] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "adz66G_r4W8fX2GWyGRDxQAAAY0"]
[Mon Apr 13 22:17:13.448439 2026] [:error] [pid 63310:tid 63355] [client 4.223.143.114:6992] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "adz66XoXpRU5ztmwPjJuywAAAEs"]
[Mon Apr 13 22:17:14.322292 2026] [:error] [pid 57183:tid 57186] [client 4.223.143.114:6624] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "adz66jDO3t8R5NaxzYRx0QAAAUE"]
[Mon Apr 13 22:17:14.509776 2026] [proxy_fcgi:error] [pid 63406:tid 63424] [client 91.230.225.66:57999] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:17:15.071683 2026] [:error] [pid 63406:tid 63411] [client 185.192.71.86:21151] [client 185.192.71.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adz667HZEIkQ0Zmgp5rxlAAAAMA"]
[Mon Apr 13 22:17:15.409827 2026] [:error] [pid 7228:tid 7230] [client 4.223.143.114:6269] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "adz66wEnn1dQrOSHHNW2cQAAAQA"]
[Mon Apr 13 22:17:16.018668 2026] [:error] [pid 63406:tid 63434] [client 4.223.143.114:6757] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "adz67LHZEIkQ0Zmgp5rxnQAAANc"]
[Mon Apr 13 22:17:16.664445 2026] [:error] [pid 63311:tid 63386] [client 4.223.143.114:6637] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "adz67KHjrGN1MqBCVFkcFQAAAI8"]
[Mon Apr 13 22:17:17.514889 2026] [:error] [pid 63311:tid 63384] [client 4.223.143.114:6252] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "adz67aHjrGN1MqBCVFkcFwAAAI0"]
[Mon Apr 13 22:17:18.113284 2026] [:error] [pid 63406:tid 63431] [client 4.223.143.114:6724] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws81.php"] [unique_id "adz67rHZEIkQ0Zmgp5rxpwAAANQ"]
[Mon Apr 13 22:17:18.838909 2026] [:error] [pid 63406:tid 63423] [client 4.223.143.114:6976] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "adz67rHZEIkQ0Zmgp5rxqwAAAMw"]
[Mon Apr 13 22:17:19.424642 2026] [:error] [pid 63406:tid 63419] [client 4.223.143.114:6248] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "adz677HZEIkQ0Zmgp5rxrgAAAMg"]
[Mon Apr 13 22:17:20.131157 2026] [:error] [pid 63406:tid 63433] [client 4.223.143.114:6612] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "adz68LHZEIkQ0Zmgp5rxsAAAANY"]
[Mon Apr 13 22:17:20.215685 2026] [:error] [pid 57183:tid 57204] [client 91.230.225.69:49783] [client 91.230.225.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adz68DDO3t8R5NaxzYRx4QAAAVM"]
[Mon Apr 13 22:17:20.783632 2026] [:error] [pid 63406:tid 63431] [client 4.223.143.114:6628] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "adz68LHZEIkQ0Zmgp5rxtQAAANQ"]
[Mon Apr 13 22:17:21.417538 2026] [:error] [pid 9314:tid 9326] [client 4.223.143.114:6801] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adz68W_r4W8fX2GWyGRD0QAAAYo"]
[Mon Apr 13 22:17:22.053642 2026] [:error] [pid 7228:tid 7231] [client 4.223.143.114:6653] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adz68gEnn1dQrOSHHNW2gAAAAQE"]
[Mon Apr 13 22:17:22.958407 2026] [:error] [pid 9314:tid 9330] [client 4.223.143.114:6807] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adz68m_r4W8fX2GWyGRD1gAAAY4"]
[Mon Apr 13 22:17:23.618020 2026] [:error] [pid 57183:tid 57200] [client 185.192.71.89:28199] [client 185.192.71.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adz68zDO3t8R5NaxzYRx5wAAAU8"]
[Mon Apr 13 22:17:24.351599 2026] [:error] [pid 63406:tid 63435] [client 4.223.143.114:6254] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "adz69LHZEIkQ0Zmgp5rxwgAAANg"]
[Mon Apr 13 22:17:25.127340 2026] [:error] [pid 7228:tid 7239] [client 4.223.143.114:6805] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "adz69QEnn1dQrOSHHNW2iQAAAQk"]
[Mon Apr 13 22:17:26.201115 2026] [:error] [pid 63406:tid 63433] [client 4.223.143.114:7020] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "adz69rHZEIkQ0Zmgp5rxygAAANY"]
[Mon Apr 13 22:17:27.018839 2026] [:error] [pid 63406:tid 63414] [client 4.223.143.114:6245] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "adz697HZEIkQ0Zmgp5rxzgAAAMM"]
[Mon Apr 13 22:17:27.680663 2026] [:error] [pid 57183:tid 57200] [client 4.223.143.114:6219] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "adz69zDO3t8R5NaxzYRx8gAAAU8"]
[Mon Apr 13 22:17:28.416458 2026] [:error] [pid 57183:tid 57196] [client 4.223.143.114:6990] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "adz6-DDO3t8R5NaxzYRx9QAAAUs"]
[Mon Apr 13 22:17:29.224773 2026] [:error] [pid 9314:tid 9318] [client 4.223.143.114:6822] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "adz6-W_r4W8fX2GWyGRD4wAAAYI"]
[Mon Apr 13 22:17:29.483317 2026] [proxy_fcgi:error] [pid 63406:tid 63426] [client 91.230.225.61:45439] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:17:29.756470 2026] [proxy_fcgi:error] [pid 63406:tid 63417] [client 91.230.225.61:45439] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:17:29.917157 2026] [:error] [pid 57183:tid 57203] [client 4.223.143.114:6262] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "adz6-TDO3t8R5NaxzYRx-QAAAVI"]
[Mon Apr 13 22:17:30.035656 2026] [:error] [pid 63406:tid 63414] [client 91.230.225.61:45439] [client 91.230.225.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adz6-rHZEIkQ0Zmgp5rx3QAAAMM"]
[Mon Apr 13 22:17:30.554428 2026] [:error] [pid 9314:tid 9317] [client 4.223.143.114:6834] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "adz6-m_r4W8fX2GWyGRD5wAAAYE"]
[Mon Apr 13 22:17:30.602397 2026] [:error] [pid 63311:tid 63382] [client 185.192.71.84:50641] [client 185.192.71.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adz6-qHjrGN1MqBCVFkcIgAAAIs"]
[Mon Apr 13 22:17:31.324056 2026] [:error] [pid 63311:tid 63371] [client 4.223.143.114:6731] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adz6-6HjrGN1MqBCVFkcJgAAAIA"]
[Mon Apr 13 22:17:32.277357 2026] [:error] [pid 9314:tid 9339] [client 4.223.143.114:6240] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adz6_G_r4W8fX2GWyGRD7AAAAZc"]
[Mon Apr 13 22:17:33.640049 2026] [:error] [pid 63311:tid 63387] [client 4.223.143.114:6784] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adz6_aHjrGN1MqBCVFkcMAAAAJA"]
[Mon Apr 13 22:17:34.415855 2026] [proxy_fcgi:error] [pid 63406:tid 63413] [client 185.192.71.95:52285] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:17:34.474101 2026] [:error] [pid 63309:tid 63323] [client 4.223.143.114:6744] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "adz6_kpIKZ10weXpf0U6PAAAAAo"]
[Mon Apr 13 22:17:35.342064 2026] [:error] [pid 57183:tid 57190] [client 4.223.143.114:6812] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "adz6_zDO3t8R5NaxzYRyAAAAAUU"]
[Mon Apr 13 22:17:36.186193 2026] [:error] [pid 63311:tid 63373] [client 4.223.143.114:6816] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "adz7AKHjrGN1MqBCVFkcNgAAAII"]
[Mon Apr 13 22:17:36.916233 2026] [:error] [pid 63406:tid 63434] [client 4.223.143.114:6271] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "adz7ALHZEIkQ0Zmgp5rx5wAAANc"]
[Mon Apr 13 22:17:37.554481 2026] [:error] [pid 9314:tid 9329] [client 4.223.143.114:6614] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "adz7AW_r4W8fX2GWyGRD9AAAAY0"]
[Mon Apr 13 22:17:38.222112 2026] [:error] [pid 63310:tid 63350] [client 4.223.143.114:6738] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adz7AnoXpRU5ztmwPjJu2AAAAEY"]
[Mon Apr 13 22:17:38.969481 2026] [:error] [pid 63310:tid 63345] [client 4.223.143.114:6985] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adz7AnoXpRU5ztmwPjJu2gAAAEE"]
[Mon Apr 13 22:17:39.026874 2026] [:error] [pid 57183:tid 57207] [client 91.230.225.68:63023] [client 91.230.225.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adz7AzDO3t8R5NaxzYRyCwAAAVY"]
[Mon Apr 13 22:17:39.920018 2026] [:error] [pid 57183:tid 57199] [client 4.223.143.114:6639] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adz7AzDO3t8R5NaxzYRyDQAAAU4"]
[Mon Apr 13 22:17:40.668195 2026] [:error] [pid 57183:tid 57187] [client 4.223.143.114:6257] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "adz7BDDO3t8R5NaxzYRyEgAAAUI"]
[Mon Apr 13 22:17:41.460572 2026] [:error] [pid 63310:tid 63352] [client 4.223.143.114:6824] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "adz7BXoXpRU5ztmwPjJu3QAAAEg"]
[Mon Apr 13 22:17:42.069223 2026] [:error] [pid 7228:tid 7251] [client 91.230.225.244:58817] [client 91.230.225.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "adz7BgEnn1dQrOSHHNW2ogAAARU"]
[Mon Apr 13 22:17:42.705816 2026] [:error] [pid 57183:tid 57207] [client 4.223.143.114:6633] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "adz7BjDO3t8R5NaxzYRyGAAAAVY"]
[Mon Apr 13 22:17:43.357366 2026] [:error] [pid 63309:tid 63320] [client 4.223.143.114:6632] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "adz7B0pIKZ10weXpf0U6QgAAAAc"]
[Mon Apr 13 22:17:44.633670 2026] [:error] [pid 57183:tid 57187] [client 4.223.143.114:6616] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "adz7CDDO3t8R5NaxzYRyGwAAAUI"]
[Mon Apr 13 22:17:47.371871 2026] [:error] [pid 63309:tid 63313] [client 91.230.225.69:53233] [client 91.230.225.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adz7C0pIKZ10weXpf0U6RgAAAAA"]
[Mon Apr 13 22:17:56.635540 2026] [proxy_fcgi:error] [pid 63311:tid 63381] [client 91.230.225.244:32165] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:17:57.221843 2026] [:error] [pid 9314:tid 9325] [client 91.230.225.61:50797] [client 91.230.225.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adz7FW_r4W8fX2GWyGREEgAAAYk"]
[Mon Apr 13 22:17:58.903666 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 91.230.225.67:49753] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:17:59.766665 2026] [:error] [pid 63406:tid 63427] [client 91.230.225.67:49753] [client 91.230.225.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adz7F7HZEIkQ0Zmgp5ryFgAAANA"]
[Mon Apr 13 22:18:06.888854 2026] [proxy_fcgi:error] [pid 9314:tid 9319] [client 185.92.25.3:39871] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:18:07.541939 2026] [proxy_fcgi:error] [pid 9314:tid 9329] [client 185.92.25.3:39871] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:18:08.078618 2026] [:error] [pid 63406:tid 63415] [client 91.230.225.59:43559] [client 91.230.225.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.59, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adz7ILHZEIkQ0Zmgp5ryVwAAAMQ"]
[Mon Apr 13 22:18:16.428142 2026] [:error] [pid 63406:tid 63423] [client 91.230.225.59:43559] [client 91.230.225.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adz7KLHZEIkQ0Zmgp5rylwAAAMw"]
[Mon Apr 13 22:18:18.692077 2026] [:error] [pid 63309:tid 63326] [client 91.230.225.63:57009] [client 91.230.225.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adz7KkpIKZ10weXpf0U6UgAAAA0"]
[Mon Apr 13 22:18:24.505068 2026] [:error] [pid 63406:tid 63411] [client 91.230.225.243:43935] [client 91.230.225.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adz7MLHZEIkQ0Zmgp5ry4QAAAMA"]
[Mon Apr 13 22:18:25.732017 2026] [proxy_fcgi:error] [pid 57183:tid 57198] [client 4.223.143.114:6252] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:18:34.671222 2026] [:error] [pid 57183:tid 57209] [client 91.230.225.251:56623] [client 91.230.225.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adz7OjDO3t8R5NaxzYRylAAAAVg"]
[Mon Apr 13 22:18:35.557318 2026] [:error] [pid 7228:tid 7253] [client 4.223.143.114:6798] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adz7OwEnn1dQrOSHHNW24gAAARc"]
[Mon Apr 13 22:18:36.221710 2026] [:error] [pid 63406:tid 63430] [client 4.223.143.114:6215] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adz7PLHZEIkQ0Zmgp5ry8wAAANM"]
[Mon Apr 13 22:18:36.390934 2026] [:error] [pid 63406:tid 63434] [client 185.192.71.87:60747] [client 185.192.71.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adz7PLHZEIkQ0Zmgp5ry9QAAANc"]
[Mon Apr 13 22:18:36.917892 2026] [:error] [pid 63406:tid 63424] [client 4.223.143.114:6256] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adz7PLHZEIkQ0Zmgp5ry-wAAAM0"]
[Mon Apr 13 22:18:37.466905 2026] [:error] [pid 63406:tid 63426] [client 4.223.143.114:6232] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "adz7PbHZEIkQ0Zmgp5rzAAAAAM8"]
[Mon Apr 13 22:18:38.197080 2026] [:error] [pid 63406:tid 63419] [client 4.223.143.114:6253] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "adz7PrHZEIkQ0Zmgp5rzBwAAAMg"]
[Mon Apr 13 22:18:38.307045 2026] [proxy_fcgi:error] [pid 57183:tid 57193] [client 185.192.71.100:41339] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:18:39.024410 2026] [:error] [pid 57183:tid 57199] [client 4.223.143.114:6796] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "adz7PzDO3t8R5NaxzYRymAAAAU4"]
[Mon Apr 13 22:18:40.151891 2026] [:error] [pid 9314:tid 9324] [client 4.223.143.114:7006] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "adz7QG_r4W8fX2GWyGREbAAAAYg"]
[Mon Apr 13 22:18:40.965101 2026] [proxy_fcgi:error] [pid 63310:tid 63361] [client 91.230.225.64:45873] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:18:41.207346 2026] [:error] [pid 9314:tid 9328] [client 4.223.143.114:6622] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "adz7QW_r4W8fX2GWyGREcAAAAYw"]
[Mon Apr 13 22:18:41.535585 2026] [:error] [pid 9314:tid 9320] [client 91.230.225.247:52299] [client 91.230.225.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adz7QW_r4W8fX2GWyGREcwAAAYQ"]
[Mon Apr 13 22:18:42.211293 2026] [:error] [pid 63406:tid 63433] [client 4.223.143.114:6619] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adz7QrHZEIkQ0Zmgp5rzFQAAANY"]
[Mon Apr 13 22:18:44.885298 2026] [:error] [pid 7228:tid 7231] [client 4.223.143.114:6809] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adz7RAEnn1dQrOSHHNW29QAAAQE"]
[Mon Apr 13 22:18:45.788519 2026] [proxy_fcgi:error] [pid 57183:tid 57195] [client 91.230.225.240:46003] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:18:45.863732 2026] [:error] [pid 63406:tid 63427] [client 4.223.143.114:6227] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adz7RbHZEIkQ0Zmgp5rzGAAAANA"]
[Mon Apr 13 22:18:46.064613 2026] [:error] [pid 57183:tid 57202] [client 91.230.225.240:46003] [client 91.230.225.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adz7RjDO3t8R5NaxzYRyswAAAVE"]
[Mon Apr 13 22:18:46.960527 2026] [:error] [pid 63406:tid 63425] [client 185.192.71.98:44705] [client 185.192.71.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/db.php"] [unique_id "adz7RrHZEIkQ0Zmgp5rzIAAAAM4"]
[Mon Apr 13 22:18:47.252327 2026] [:error] [pid 63311:tid 63395] [client 4.223.143.114:6847] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "adz7R6HjrGN1MqBCVFkcswAAAJg"]
[Mon Apr 13 22:18:47.537389 2026] [:error] [pid 63309:tid 63333] [client 91.230.225.251:25095] [client 91.230.225.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adz7R0pIKZ10weXpf0U6WgAAABQ"]
[Mon Apr 13 22:18:48.220531 2026] [:error] [pid 63310:tid 63359] [client 185.192.71.81:47669] [client 185.192.71.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adz7SHoXpRU5ztmwPjJvHgAAAE8"]
[Mon Apr 13 22:18:48.826043 2026] [:error] [pid 63311:tid 63391] [client 185.192.71.97:64517] [client 185.192.71.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adz7SKHjrGN1MqBCVFkctQAAAJQ"]
[Mon Apr 13 22:18:49.068215 2026] [:error] [pid 7228:tid 7251] [client 4.223.143.114:6827] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adz7SQEnn1dQrOSHHNW2-AAAARU"]
[Mon Apr 13 22:18:49.408028 2026] [:error] [pid 63406:tid 63420] [client 91.230.225.248:32739] [client 91.230.225.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adz7SbHZEIkQ0Zmgp5rzLQAAAMk"]
[Mon Apr 13 22:18:49.952875 2026] [:error] [pid 57183:tid 57208] [client 91.230.225.67:50131] [client 91.230.225.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adz7STDO3t8R5NaxzYRyuAAAAVc"]
[Mon Apr 13 22:18:50.635086 2026] [:error] [pid 63406:tid 63430] [client 4.223.143.114:6270] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adz7SrHZEIkQ0Zmgp5rzNwAAANM"]
[Mon Apr 13 22:18:51.872756 2026] [:error] [pid 63309:tid 63329] [client 4.223.143.114:6230] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adz7S0pIKZ10weXpf0U6XAAAABA"]
[Mon Apr 13 22:18:53.710810 2026] [:error] [pid 63406:tid 63420] [client 91.230.225.58:25371] [client 91.230.225.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adz7TbHZEIkQ0Zmgp5rzPgAAAMk"]
[Mon Apr 13 22:18:53.848005 2026] [:error] [pid 57183:tid 57200] [client 4.223.143.114:6265] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "adz7TTDO3t8R5NaxzYRyvQAAAU8"]
[Mon Apr 13 22:18:54.266774 2026] [:error] [pid 57183:tid 57189] [client 91.230.225.246:28831] [client 91.230.225.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adz7TjDO3t8R5NaxzYRywwAAAUQ"]
[Mon Apr 13 22:18:54.858153 2026] [:error] [pid 9314:tid 9326] [client 185.192.71.86:37747] [client 185.192.71.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adz7Tm_r4W8fX2GWyGREfgAAAYo"]
[Mon Apr 13 22:18:54.960217 2026] [:error] [pid 9314:tid 9316] [client 4.223.143.114:6264] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adz7Tm_r4W8fX2GWyGREgAAAAYA"]
[Mon Apr 13 22:18:55.422231 2026] [:error] [pid 9314:tid 9338] [client 91.230.225.65:36771] [client 91.230.225.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adz7T2_r4W8fX2GWyGREgwAAAZY"]
[Mon Apr 13 22:18:55.726420 2026] [:error] [pid 63309:tid 63318] [client 4.223.143.114:6802] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adz7T0pIKZ10weXpf0U6XgAAAAU"]
[Mon Apr 13 22:18:56.754125 2026] [:error] [pid 57183:tid 57199] [client 4.223.143.114:6242] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adz7UDDO3t8R5NaxzYRyxgAAAU4"]
[Mon Apr 13 22:18:56.986980 2026] [:error] [pid 9314:tid 9327] [client 91.230.225.63:22547] [client 91.230.225.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adz7UG_r4W8fX2GWyGREigAAAYs"]
[Mon Apr 13 22:18:57.558226 2026] [proxy_fcgi:error] [pid 63311:tid 63375] [client 91.230.225.245:30703] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:18:57.631104 2026] [:error] [pid 57183:tid 57204] [client 4.223.143.114:6620] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "adz7UTDO3t8R5NaxzYRyyAAAAVM"]
[Mon Apr 13 22:18:58.368801 2026] [:error] [pid 63406:tid 63414] [client 4.223.143.114:6806] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "adz7UrHZEIkQ0Zmgp5rzRAAAAMM"]
[Mon Apr 13 22:18:58.910499 2026] [:error] [pid 63406:tid 63423] [client 4.223.143.114:6592] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "adz7UrHZEIkQ0Zmgp5rzSQAAAMw"]
[Mon Apr 13 22:18:59.791091 2026] [:error] [pid 63406:tid 63419] [client 4.223.143.114:6769] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "adz7U7HZEIkQ0Zmgp5rzUAAAAMg"]
[Mon Apr 13 22:18:59.947594 2026] [:error] [pid 63311:tid 63383] [client 91.230.225.245:30703] [client 91.230.225.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.245, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adz7U6HjrGN1MqBCVFkcyAAAAIw"]
[Mon Apr 13 22:19:00.427655 2026] [:error] [pid 63406:tid 63432] [client 4.223.143.114:6817] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amp.php"] [unique_id "adz7VLHZEIkQ0Zmgp5rzWwAAANU"]
[Mon Apr 13 22:19:00.962458 2026] [:error] [pid 63311:tid 63387] [client 4.223.143.114:6815] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "adz7VKHjrGN1MqBCVFkcyQAAAJA"]
[Mon Apr 13 22:19:01.654558 2026] [:error] [pid 63406:tid 63414] [client 4.223.143.114:6263] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "adz7VbHZEIkQ0Zmgp5rzYgAAAMM"]
[Mon Apr 13 22:19:02.366099 2026] [:error] [pid 63310:tid 63346] [client 4.223.143.114:6641] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "adz7VnoXpRU5ztmwPjJvKwAAAEI"]
[Mon Apr 13 22:19:03.099661 2026] [:error] [pid 7228:tid 7244] [client 4.223.143.114:6788] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "adz7VwEnn1dQrOSHHNW2_QAAAQ4"]
[Mon Apr 13 22:19:03.965988 2026] [:error] [pid 57183:tid 57186] [client 4.223.143.114:6597] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "adz7VzDO3t8R5NaxzYRyzAAAAUE"]
[Mon Apr 13 22:19:04.679409 2026] [:error] [pid 57183:tid 57196] [client 4.223.143.114:6736] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "adz7WDDO3t8R5NaxzYRy0AAAAUs"]
[Mon Apr 13 22:19:05.529134 2026] [:error] [pid 63406:tid 63431] [client 4.223.143.114:6735] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "adz7WbHZEIkQ0Zmgp5rzagAAANQ"]
[Mon Apr 13 22:19:06.294288 2026] [:error] [pid 63406:tid 63422] [client 4.223.143.114:6723] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "adz7WrHZEIkQ0Zmgp5rzcQAAAMs"]
[Mon Apr 13 22:19:06.548002 2026] [:error] [pid 63311:tid 63381] [client 91.230.225.245:30703] [client 91.230.225.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adz7WqHjrGN1MqBCVFkczgAAAIo"]
[Mon Apr 13 22:19:06.868587 2026] [:error] [pid 9314:tid 9317] [client 4.223.143.114:6721] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "adz7Wm_r4W8fX2GWyGRElgAAAYE"]
[Mon Apr 13 22:19:07.492042 2026] [:error] [pid 57183:tid 57185] [client 4.223.143.114:6246] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "adz7WzDO3t8R5NaxzYRy2gAAAUA"]
[Mon Apr 13 22:19:08.042724 2026] [:error] [pid 63406:tid 63415] [client 4.223.143.114:6267] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "adz7XLHZEIkQ0Zmgp5rzdAAAAMQ"]
[Mon Apr 13 22:19:09.085164 2026] [:error] [pid 63310:tid 63361] [client 4.223.143.114:6803] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "adz7XXoXpRU5ztmwPjJvLwAAAFE"]
[Mon Apr 13 22:19:10.073965 2026] [:error] [pid 9314:tid 9338] [client 4.223.143.114:6260] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adz7Xm_r4W8fX2GWyGREmQAAAZY"]
[Mon Apr 13 22:19:10.849724 2026] [:error] [pid 63310:tid 63357] [client 4.223.143.114:6982] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adz7XnoXpRU5ztmwPjJvMAAAAE0"]
[Mon Apr 13 22:19:11.465878 2026] [:error] [pid 63309:tid 63335] [client 4.223.143.114:6603] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adz7X0pIKZ10weXpf0U6ZwAAABY"]
[Mon Apr 13 22:19:12.349440 2026] [:error] [pid 63406:tid 63429] [client 4.223.143.114:6791] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "adz7YLHZEIkQ0Zmgp5rzfgAAANI"]
[Mon Apr 13 22:19:13.068717 2026] [:error] [pid 9314:tid 9325] [client 4.223.143.114:6213] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adz7YW_r4W8fX2GWyGREoAAAAYk"]
[Mon Apr 13 22:19:13.674847 2026] [:error] [pid 63310:tid 63345] [client 4.223.143.114:7021] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adz7YXoXpRU5ztmwPjJvMQAAAEE"]
[Mon Apr 13 22:19:14.233842 2026] [:error] [pid 63309:tid 63323] [client 4.223.143.114:6261] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adz7YkpIKZ10weXpf0U6aAAAAAo"]
[Mon Apr 13 22:19:14.827385 2026] [:error] [pid 63406:tid 63416] [client 4.223.143.114:6820] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "adz7YrHZEIkQ0Zmgp5rzgwAAAMU"]
[Mon Apr 13 22:19:15.432803 2026] [:error] [pid 57183:tid 57195] [client 4.223.143.114:6787] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adz7YzDO3t8R5NaxzYRy7gAAAUo"]
[Mon Apr 13 22:19:15.957098 2026] [:error] [pid 7228:tid 7249] [client 4.223.143.114:7027] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adz7YwEnn1dQrOSHHNW3BgAAARM"]
[Mon Apr 13 22:19:16.488191 2026] [:error] [pid 57183:tid 57186] [client 4.223.143.114:6730] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adz7ZDDO3t8R5NaxzYRy9gAAAUE"]
[Mon Apr 13 22:19:17.069670 2026] [:error] [pid 63406:tid 63421] [client 4.223.143.114:6758] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "adz7ZbHZEIkQ0Zmgp5rzigAAAMo"]
[Mon Apr 13 22:19:17.629046 2026] [:error] [pid 63406:tid 63413] [client 4.223.143.114:6599] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "adz7ZbHZEIkQ0Zmgp5rzjgAAAMI"]
[Mon Apr 13 22:19:18.341250 2026] [:error] [pid 63309:tid 63313] [client 4.223.143.114:6625] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "adz7ZkpIKZ10weXpf0U6bAAAAAA"]
[Mon Apr 13 22:19:18.908433 2026] [:error] [pid 63310:tid 63358] [client 4.223.143.114:6986] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "adz7ZnoXpRU5ztmwPjJvMwAAAE4"]
[Mon Apr 13 22:19:19.512285 2026] [:error] [pid 7228:tid 7246] [client 4.223.143.114:6780] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxw.php"] [unique_id "adz7ZwEnn1dQrOSHHNW3FwAAARA"]
[Mon Apr 13 22:19:21.267835 2026] [:error] [pid 7228:tid 7235] [client 4.223.143.114:6807] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adz7aQEnn1dQrOSHHNW3IQAAAQU"]
[Mon Apr 13 22:19:21.909739 2026] [:error] [pid 63309:tid 63317] [client 4.223.143.114:6810] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adz7aUpIKZ10weXpf0U6eAAAAAQ"]
[Mon Apr 13 22:19:22.940355 2026] [:error] [pid 63309:tid 63325] [client 4.223.143.114:6729] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adz7akpIKZ10weXpf0U6fQAAAAw"]
[Mon Apr 13 22:19:23.622836 2026] [:error] [pid 7228:tid 7246] [client 4.223.143.114:6743] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "adz7awEnn1dQrOSHHNW3LgAAARA"]
[Mon Apr 13 22:19:24.320891 2026] [:error] [pid 63311:tid 63392] [client 4.223.143.114:6813] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "adz7bKHjrGN1MqBCVFkc3QAAAJU"]
[Mon Apr 13 22:19:24.939148 2026] [:error] [pid 63310:tid 63355] [client 4.223.143.114:6722] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "adz7bHoXpRU5ztmwPjJvQgAAAEs"]
[Mon Apr 13 22:19:25.762160 2026] [:error] [pid 63406:tid 63421] [client 4.223.143.114:6811] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "adz7bbHZEIkQ0Zmgp5rzkwAAAMo"]
[Mon Apr 13 22:19:26.379080 2026] [:error] [pid 63309:tid 63316] [client 4.223.143.114:6991] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "adz7bkpIKZ10weXpf0U6iAAAAAM"]
[Mon Apr 13 22:19:27.107315 2026] [:error] [pid 63310:tid 63367] [client 4.223.143.114:6249] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "adz7b3oXpRU5ztmwPjJvSgAAAFc"]
[Mon Apr 13 22:19:28.010632 2026] [:error] [pid 63310:tid 63344] [client 4.223.143.114:6241] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "adz7cHoXpRU5ztmwPjJvTwAAAEA"]
[Mon Apr 13 22:19:28.782341 2026] [:error] [pid 63406:tid 63419] [client 4.223.143.114:6154] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "adz7cLHZEIkQ0Zmgp5rzlwAAAMg"]
[Mon Apr 13 22:19:30.424958 2026] [:error] [pid 63406:tid 63423] [client 4.223.143.114:6226] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "adz7crHZEIkQ0Zmgp5rznAAAAMw"]
[Mon Apr 13 22:19:31.000351 2026] [:error] [pid 63309:tid 63322] [client 4.223.143.114:6785] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adz7ckpIKZ10weXpf0U6jgAAAAk"]
[Mon Apr 13 22:19:31.458611 2026] [:error] [pid 57183:tid 57190] [client 91.230.225.62:38095] [client 91.230.225.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adz7czDO3t8R5NaxzYRzCwAAAUU"]
[Mon Apr 13 22:19:31.629875 2026] [:error] [pid 57183:tid 57199] [client 4.223.143.114:7031] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adz7czDO3t8R5NaxzYRzDAAAAU4"]
[Mon Apr 13 22:19:32.313204 2026] [:error] [pid 57183:tid 57191] [client 4.223.143.114:6793] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adz7dDDO3t8R5NaxzYRzDQAAAUY"]
[Mon Apr 13 22:19:32.873831 2026] [:error] [pid 63406:tid 63411] [client 4.223.143.114:6753] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adz7dLHZEIkQ0Zmgp5rzoQAAAMA"]
[Mon Apr 13 22:19:32.947863 2026] [:error] [pid 63406:tid 63414] [client 185.192.71.88:22061] [client 185.192.71.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adz7dLHZEIkQ0Zmgp5rzowAAAMM"]
[Mon Apr 13 22:19:33.709062 2026] [proxy_fcgi:error] [pid 63406:tid 63421] [client 4.223.143.114:6771] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:19:37.461668 2026] [:error] [pid 63406:tid 63417] [client 185.192.71.90:56419] [client 185.192.71.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adz7ebHZEIkQ0Zmgp5rzuAAAAMY"]
[Mon Apr 13 22:19:46.911344 2026] [:error] [pid 57183:tid 57190] [client 91.230.225.248:31565] [client 91.230.225.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adz7gjDO3t8R5NaxzYRzLQAAAUU"]
[Mon Apr 13 22:19:47.503473 2026] [:error] [pid 9314:tid 9328] [client 185.192.71.93:34303] [client 185.192.71.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adz7g2_r4W8fX2GWyGREyQAAAYw"]
[Mon Apr 13 22:19:48.055064 2026] [:error] [pid 63310:tid 63367] [client 91.230.225.61:44995] [client 91.230.225.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adz7hHoXpRU5ztmwPjJvVgAAAFc"]
[Mon Apr 13 22:19:53.953271 2026] [proxy_fcgi:error] [pid 9314:tid 9317] [client 91.230.225.61:62925] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:19:54.494481 2026] [:error] [pid 63406:tid 63422] [client 185.192.71.97:54085] [client 185.192.71.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adz7irHZEIkQ0Zmgp5rz6gAAAMs"]
[Mon Apr 13 22:19:56.668945 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 4.223.143.114:6813] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:19:56.845614 2026] [:error] [pid 7228:tid 7254] [client 91.230.225.250:39065] [client 91.230.225.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adz7jAEnn1dQrOSHHNW3hQAAARg"]
[Mon Apr 13 22:20:00.893534 2026] [:error] [pid 57183:tid 57204] [client 185.192.71.98:50231] [client 185.192.71.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adz7kDDO3t8R5NaxzYRzdgAAAVM"]
[Mon Apr 13 22:20:03.292123 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 91.230.225.243:50745] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:20:13.613276 2026] [proxy_fcgi:error] [pid 9314:tid 9329] [client 4.223.143.114:6209] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:20:14.623716 2026] [:error] [pid 63406:tid 63413] [client 91.230.225.56:63277] [client 91.230.225.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adz7nrHZEIkQ0Zmgp5r0QwAAAMI"]
[Mon Apr 13 22:20:16.869946 2026] [:error] [pid 9314:tid 9318] [client 91.230.225.64:39989] [client 91.230.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "adz7oG_r4W8fX2GWyGRE-gAAAYI"]
[Mon Apr 13 22:20:25.196879 2026] [proxy_fcgi:error] [pid 63406:tid 63423] [client 91.230.225.67:38115] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:20:25.751274 2026] [:error] [pid 63311:tid 63381] [client 91.230.225.64:20529] [client 91.230.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adz7qaHjrGN1MqBCVFkdGwAAAIo"]
[Mon Apr 13 22:20:27.572979 2026] [:error] [pid 63406:tid 63435] [client 4.223.143.114:6237] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "adz7q7HZEIkQ0Zmgp5r0hgAAANg"]
[Mon Apr 13 22:20:28.215723 2026] [:error] [pid 63406:tid 63428] [client 4.223.143.114:6727] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "adz7rLHZEIkQ0Zmgp5r0hwAAANE"]
[Mon Apr 13 22:20:28.926365 2026] [:error] [pid 63406:tid 63427] [client 4.223.143.114:6779] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "adz7rLHZEIkQ0Zmgp5r0jAAAANA"]
[Mon Apr 13 22:20:29.722987 2026] [:error] [pid 63309:tid 63319] [client 91.230.225.68:46203] [client 91.230.225.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adz7rUpIKZ10weXpf0U68wAAAAY"]
[Mon Apr 13 22:20:29.815339 2026] [:error] [pid 7228:tid 7254] [client 4.223.143.114:6797] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "adz7rQEnn1dQrOSHHNW3pQAAARg"]
[Mon Apr 13 22:20:30.597125 2026] [proxy_fcgi:error] [pid 63309:tid 63328] [client 91.230.225.248:27371] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:20:31.042998 2026] [:error] [pid 63309:tid 63331] [client 4.223.143.114:6808] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adz7r0pIKZ10weXpf0U6-QAAABI"]
[Mon Apr 13 22:20:32.442742 2026] [:error] [pid 9314:tid 9317] [client 4.223.143.114:6792] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adz7sG_r4W8fX2GWyGRFDQAAAYE"]
[Mon Apr 13 22:20:34.177552 2026] [:error] [pid 63406:tid 63411] [client 4.223.143.114:6236] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adz7srHZEIkQ0Zmgp5r0oAAAAMA"]
[Mon Apr 13 22:20:35.316010 2026] [:error] [pid 57183:tid 57209] [client 4.223.143.114:6821] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "adz7szDO3t8R5NaxzYR0DgAAAVg"]
[Mon Apr 13 22:20:36.327418 2026] [:error] [pid 7228:tid 7238] [client 4.223.143.114:6831] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adz7tAEnn1dQrOSHHNW3rQAAAQg"]
[Mon Apr 13 22:20:37.216219 2026] [:error] [pid 7228:tid 7247] [client 91.230.225.68:37103] [client 91.230.225.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adz7tQEnn1dQrOSHHNW3rwAAARE"]
[Mon Apr 13 22:20:37.714830 2026] [:error] [pid 63406:tid 63420] [client 4.223.143.114:6258] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adz7tbHZEIkQ0Zmgp5r0sAAAAMk"]
[Mon Apr 13 22:20:38.804367 2026] [:error] [pid 63406:tid 63417] [client 4.223.143.114:6728] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adz7trHZEIkQ0Zmgp5r0ugAAAMY"]
[Mon Apr 13 22:20:40.300628 2026] [:error] [pid 9314:tid 9338] [client 4.223.143.114:6221] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "adz7uG_r4W8fX2GWyGRFEwAAAZY"]
[Mon Apr 13 22:20:41.993962 2026] [:error] [pid 63406:tid 63431] [client 4.223.143.114:6209] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "adz7ubHZEIkQ0Zmgp5r0ygAAANQ"]
[Mon Apr 13 22:20:43.285014 2026] [:error] [pid 9314:tid 9332] [client 4.223.143.114:6247] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "adz7u2_r4W8fX2GWyGRFFwAAAZA"]
[Mon Apr 13 22:20:44.138513 2026] [:error] [pid 9314:tid 9322] [client 4.223.143.114:6830] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "adz7vG_r4W8fX2GWyGRFGQAAAYY"]
[Mon Apr 13 22:20:45.463842 2026] [:error] [pid 63311:tid 63390] [client 185.192.71.89:44605] [client 185.192.71.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adz7vaHjrGN1MqBCVFkdLAAAAJM"]
[Mon Apr 13 22:20:45.534666 2026] [:error] [pid 63311:tid 63395] [client 4.223.143.114:6845] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "adz7vaHjrGN1MqBCVFkdLQAAAJg"]
[Mon Apr 13 22:20:46.335806 2026] [proxy_fcgi:error] [pid 9314:tid 9333] [client 185.92.25.119:22565] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:20:47.925595 2026] [:error] [pid 63310:tid 63352] [client 4.223.143.114:6759] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adz7v3oXpRU5ztmwPjJvcgAAAEg"]
[Mon Apr 13 22:20:49.614798 2026] [:error] [pid 57183:tid 57198] [client 4.223.143.114:6826] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adz7wTDO3t8R5NaxzYR0VwAAAU0"]
[Mon Apr 13 22:20:49.750190 2026] [:error] [pid 63310:tid 63367] [client 185.192.71.81:48733] [client 185.192.71.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adz7wXoXpRU5ztmwPjJvdwAAAFc"]
[Mon Apr 13 22:20:50.422289 2026] [:error] [pid 63406:tid 63418] [client 4.223.143.114:6214] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adz7wrHZEIkQ0Zmgp5r03QAAAMc"]
[Mon Apr 13 22:20:51.400420 2026] [:error] [pid 63406:tid 63432] [client 185.192.71.87:36149] [client 185.192.71.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adz7w7HZEIkQ0Zmgp5r05gAAANU"]
[Mon Apr 13 22:20:51.965926 2026] [:error] [pid 7228:tid 7239] [client 4.223.143.114:6211] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "adz7wwEnn1dQrOSHHNW3vgAAAQk"]
[Mon Apr 13 22:20:52.841086 2026] [:error] [pid 9314:tid 9330] [client 4.223.143.114:6726] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "adz7xG_r4W8fX2GWyGRFKgAAAY4"]
[Mon Apr 13 22:20:53.585572 2026] [:error] [pid 63406:tid 63432] [client 4.223.143.114:6754] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "adz7xbHZEIkQ0Zmgp5r0-QAAANU"]
[Mon Apr 13 22:20:54.652608 2026] [:error] [pid 63406:tid 63429] [client 4.223.143.114:6234] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "adz7xrHZEIkQ0Zmgp5r1AwAAANI"]
[Mon Apr 13 22:20:55.942692 2026] [:error] [pid 7228:tid 7243] [client 4.223.143.114:6218] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "adz7xwEnn1dQrOSHHNW31AAAAQ0"]
[Mon Apr 13 22:20:56.608242 2026] [:error] [pid 63406:tid 63420] [client 4.223.143.114:6747] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "adz7yLHZEIkQ0Zmgp5r1EgAAAMk"]
[Mon Apr 13 22:20:58.192975 2026] [:error] [pid 63406:tid 63419] [client 4.223.143.114:6835] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "adz7yrHZEIkQ0Zmgp5r1GgAAAMg"]
[Mon Apr 13 22:20:59.243852 2026] [:error] [pid 63406:tid 63415] [client 4.223.143.114:6842] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "adz7y7HZEIkQ0Zmgp5r1JAAAAMQ"]
[Mon Apr 13 22:20:59.563607 2026] [:error] [pid 7228:tid 7246] [client 91.230.225.56:61795] [client 91.230.225.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adz7ywEnn1dQrOSHHNW34AAAARA"]
[Mon Apr 13 22:20:59.933497 2026] [:error] [pid 63406:tid 63420] [client 4.223.143.114:6766] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/155.php"] [unique_id "adz7y7HZEIkQ0Zmgp5r1KQAAAMk"]
[Mon Apr 13 22:21:00.802102 2026] [:error] [pid 57183:tid 57189] [client 4.223.143.114:6235] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adz7zDDO3t8R5NaxzYR0mgAAAUQ"]
[Mon Apr 13 22:21:01.466865 2026] [:error] [pid 63309:tid 63327] [client 4.223.143.114:6985] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adz7zUpIKZ10weXpf0U7CwAAAA4"]
[Mon Apr 13 22:21:03.179801 2026] [:error] [pid 63406:tid 63418] [client 4.223.143.114:6778] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adz7z7HZEIkQ0Zmgp5r1OgAAAMc"]
[Mon Apr 13 22:21:04.118148 2026] [:error] [pid 9314:tid 9330] [client 4.223.143.114:6823] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "adz70G_r4W8fX2GWyGRFNQAAAY4"]
[Mon Apr 13 22:21:05.142776 2026] [:error] [pid 9314:tid 9334] [client 4.223.143.114:6756] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "adz70W_r4W8fX2GWyGRFOAAAAZI"]
[Mon Apr 13 22:21:06.121316 2026] [:error] [pid 9314:tid 9321] [client 4.223.143.114:6841] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "adz70m_r4W8fX2GWyGRFPQAAAYU"]
[Mon Apr 13 22:21:07.518069 2026] [:error] [pid 63311:tid 63377] [client 4.223.143.114:6740] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "adz706HjrGN1MqBCVFkdNwAAAIY"]
[Mon Apr 13 22:21:08.529780 2026] [:error] [pid 9314:tid 9328] [client 4.223.143.114:6733] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "adz71G_r4W8fX2GWyGRFSwAAAYw"]
[Mon Apr 13 22:21:09.065050 2026] [:error] [pid 63406:tid 63411] [client 91.230.225.60:62581] [client 91.230.225.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adz71bHZEIkQ0Zmgp5r1YQAAAMA"]
[Mon Apr 13 22:21:09.829501 2026] [:error] [pid 63311:tid 63389] [client 4.223.143.114:6829] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "adz71aHjrGN1MqBCVFkdPAAAAJI"]
[Mon Apr 13 22:21:11.168114 2026] [:error] [pid 63406:tid 63418] [client 4.223.143.114:6819] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "adz717HZEIkQ0Zmgp5r1ZQAAAMc"]
[Mon Apr 13 22:21:12.671667 2026] [:error] [pid 63310:tid 63362] [client 4.223.143.114:6760] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "adz72HoXpRU5ztmwPjJvigAAAFI"]
[Mon Apr 13 22:21:14.746727 2026] [:error] [pid 9314:tid 9323] [client 4.223.143.114:6828] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "adz72m_r4W8fX2GWyGRFUwAAAYc"]
[Mon Apr 13 22:21:16.238860 2026] [:error] [pid 63406:tid 63412] [client 4.223.143.114:6843] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "adz73LHZEIkQ0Zmgp5r1hgAAAME"]
[Mon Apr 13 22:21:17.165807 2026] [:error] [pid 9314:tid 9336] [client 4.223.143.114:6794] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "adz73W_r4W8fX2GWyGRFVQAAAZQ"]
[Mon Apr 13 22:21:18.373067 2026] [:error] [pid 57183:tid 57201] [client 4.223.143.114:6833] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "adz73jDO3t8R5NaxzYR04QAAAVA"]
[Mon Apr 13 22:21:19.007875 2026] [:error] [pid 63311:tid 63383] [client 91.230.225.64:28229] [client 91.230.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adz736HjrGN1MqBCVFkdSQAAAIw"]
[Mon Apr 13 22:21:19.581887 2026] [:error] [pid 7228:tid 7247] [client 185.92.25.3:65441] [client 185.92.25.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adz73wEnn1dQrOSHHNW3-gAAARE"]
[Mon Apr 13 22:21:19.797178 2026] [:error] [pid 7228:tid 7236] [client 4.223.143.114:6243] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "adz73wEnn1dQrOSHHNW3-wAAAQY"]
[Mon Apr 13 22:21:21.041345 2026] [:error] [pid 63309:tid 63328] [client 4.223.143.114:6789] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "adz74UpIKZ10weXpf0U7EgAAAA8"]
[Mon Apr 13 22:21:21.902615 2026] [:error] [pid 9314:tid 9332] [client 4.223.143.114:6225] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "adz74W_r4W8fX2GWyGRFWQAAAZA"]
[Mon Apr 13 22:21:21.945357 2026] [:error] [pid 63406:tid 63420] [client 185.92.25.3:30343] [client 185.92.25.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adz74bHZEIkQ0Zmgp5r1sgAAAMk"]
[Mon Apr 13 22:21:22.596365 2026] [:error] [pid 63406:tid 63415] [client 4.223.143.114:6764] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "adz74rHZEIkQ0Zmgp5r1tgAAAMQ"]
[Mon Apr 13 22:21:23.876350 2026] [:error] [pid 63406:tid 63430] [client 4.223.143.114:6594] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin-footer.php"] [unique_id "adz747HZEIkQ0Zmgp5r1vAAAANM"]
[Mon Apr 13 22:21:24.503304 2026] [:error] [pid 63310:tid 63364] [client 91.230.225.249:59227] [client 91.230.225.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adz75HoXpRU5ztmwPjJvkAAAAFQ"]
[Mon Apr 13 22:21:24.653683 2026] [:error] [pid 63406:tid 63415] [client 4.223.143.114:6720] [client 4.223.143.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "adz75LHZEIkQ0Zmgp5r1wwAAAMQ"]
[Mon Apr 13 22:21:26.151070 2026] [:error] [pid 57183:tid 57199] [client 91.230.225.67:24523] [client 91.230.225.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adz75jDO3t8R5NaxzYR08wAAAU4"]
[Mon Apr 13 22:21:32.059727 2026] [proxy_fcgi:error] [pid 57183:tid 57207] [client 4.223.143.114:6977] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:21:35.771755 2026] [:error] [pid 57183:tid 57187] [client 185.192.71.91:56577] [client 185.192.71.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adz77zDO3t8R5NaxzYR1HgAAAUI"]
[Mon Apr 13 22:21:39.354743 2026] [:error] [pid 63406:tid 63421] [client 91.230.225.69:53679] [client 91.230.225.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adz787HZEIkQ0Zmgp5r2AgAAAMo"]
[Mon Apr 13 22:21:39.900579 2026] [:error] [pid 9314:tid 9324] [client 91.230.225.244:62613] [client 91.230.225.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adz782_r4W8fX2GWyGRFZwAAAYg"]
[Mon Apr 13 22:21:41.371612 2026] [proxy_fcgi:error] [pid 63406:tid 63431] [client 4.223.143.114:6818] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:21:43.946884 2026] [:error] [pid 63406:tid 63414] [client 185.192.71.95:59639] [client 185.192.71.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adz797HZEIkQ0Zmgp5r2EwAAAMM"]
[Mon Apr 13 22:21:46.169154 2026] [:error] [pid 63310:tid 63346] [client 185.192.71.88:57535] [client 185.192.71.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adz7-noXpRU5ztmwPjJv4wAAAEI"]
[Mon Apr 13 22:21:55.275623 2026] [:error] [pid 63406:tid 63412] [client 185.192.71.82:62809] [client 185.192.71.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adz8A7HZEIkQ0Zmgp5r2PgAAAME"]
[Mon Apr 13 22:21:57.972163 2026] [:error] [pid 63311:tid 63377] [client 91.230.225.66:33949] [client 91.230.225.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adz8BaHjrGN1MqBCVFkdcQAAAIY"]
[Mon Apr 13 22:22:01.588814 2026] [:error] [pid 63309:tid 63337] [client 91.230.225.57:36845] [client 91.230.225.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adz8CUpIKZ10weXpf0U7LQAAABg"]
[Mon Apr 13 22:22:06.417204 2026] [:error] [pid 63309:tid 63328] [client 91.230.225.61:60117] [client 91.230.225.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/as.php"] [unique_id "adz8DkpIKZ10weXpf0U7MgAAAA8"]
[Mon Apr 13 22:22:08.693719 2026] [:error] [pid 63310:tid 63350] [client 91.230.225.250:46753] [client 91.230.225.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adz8EHoXpRU5ztmwPjJwDgAAAEY"]
[Mon Apr 13 22:22:09.241668 2026] [:error] [pid 57183:tid 57206] [client 91.230.225.63:39961] [client 91.230.225.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/install.php"] [unique_id "adz8ETDO3t8R5NaxzYR1WQAAAVU"]
[Mon Apr 13 22:22:09.773465 2026] [:error] [pid 57183:tid 57205] [client 91.230.225.247:27827] [client 91.230.225.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adz8ETDO3t8R5NaxzYR1XAAAAVQ"]
[Mon Apr 13 22:22:16.834555 2026] [proxy_fcgi:error] [pid 57183:tid 57201] [client 185.192.71.84:45481] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 22:22:20.474602 2026] [:error] [pid 63406:tid 63427] [client 91.230.225.57:52053] [client 91.230.225.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adz8HLHZEIkQ0Zmgp5r2bgAAANA"]
[Mon Apr 13 22:22:24.890248 2026] [:error] [pid 57183:tid 57202] [client 91.230.225.244:42491] [client 91.230.225.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adz8IDDO3t8R5NaxzYR1iwAAAVE"]
[Mon Apr 13 22:22:28.560492 2026] [:error] [pid 63406:tid 63412] [client 91.230.225.242:33731] [client 91.230.225.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adz8JLHZEIkQ0Zmgp5r2owAAAME"]
[Mon Apr 13 22:22:31.112084 2026] [:error] [pid 63406:tid 63426] [client 185.192.71.94:45471] [client 185.192.71.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adz8J7HZEIkQ0Zmgp5r2vgAAAM8"]
[Mon Apr 13 22:22:37.610590 2026] [:error] [pid 63406:tid 63426] [client 91.230.225.55:20119] [client 91.230.225.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adz8LbHZEIkQ0Zmgp5r3AQAAAM8"]
[Mon Apr 13 22:22:38.426609 2026] [:error] [pid 63309:tid 63323] [client 185.192.71.84:46585] [client 185.192.71.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adz8LkpIKZ10weXpf0U7NwAAAAo"]
[Mon Apr 13 22:22:39.238083 2026] [:error] [pid 7228:tid 7239] [client 91.230.225.68:38513] [client 91.230.225.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adz8LwEnn1dQrOSHHNW4OgAAAQk"]
[Mon Apr 13 22:22:41.884619 2026] [:error] [pid 57183:tid 57200] [client 185.92.25.118:29597] [client 185.92.25.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adz8MTDO3t8R5NaxzYR1swAAAU8"]
[Mon Apr 13 22:22:51.216984 2026] [:error] [pid 63310:tid 63345] [client 185.192.71.89:21795] [client 185.192.71.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adz8O3oXpRU5ztmwPjJwJgAAAEE"]
[Mon Apr 13 22:22:51.773972 2026] [:error] [pid 63311:tid 63380] [client 91.230.225.240:49911] [client 91.230.225.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adz8O6HjrGN1MqBCVFkd8QAAAIk"]
[Mon Apr 13 22:22:56.802177 2026] [:error] [pid 57183:tid 57186] [client 185.192.71.89:48781] [client 185.192.71.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adz8QDDO3t8R5NaxzYR1wgAAAUE"]
[Mon Apr 13 22:22:57.354081 2026] [:error] [pid 9314:tid 9338] [client 185.192.71.86:64513] [client 185.192.71.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adz8QW_r4W8fX2GWyGRF1gAAAZY"]
[Mon Apr 13 22:22:59.532102 2026] [:error] [pid 7228:tid 7241] [client 91.230.225.66:55827] [client 91.230.225.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adz8QwEnn1dQrOSHHNW4WwAAAQs"]
[Mon Apr 13 22:23:00.098719 2026] [:error] [pid 57183:tid 57185] [client 91.230.225.251:46415] [client 91.230.225.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adz8RDDO3t8R5NaxzYR1xAAAAUA"]
[Mon Apr 13 22:23:00.664130 2026] [:error] [pid 63406:tid 63411] [client 185.92.25.118:37317] [client 185.92.25.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.118, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adz8RLHZEIkQ0Zmgp5r3kAAAAMA"]
[Mon Apr 13 22:23:00.668788 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 185.92.25.118:37317] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:23:00.973799 2026] [:error] [pid 63406:tid 63416] [client 185.92.25.118:37317] [client 185.92.25.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adz8RLHZEIkQ0Zmgp5r3kgAAAMU"]
[Mon Apr 13 22:23:05.109253 2026] [:error] [pid 9314:tid 9338] [client 91.230.225.244:34529] [client 91.230.225.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adz8SW_r4W8fX2GWyGRF5QAAAZY"]
[Mon Apr 13 22:23:05.662388 2026] [:error] [pid 7228:tid 7248] [client 91.230.225.55:21883] [client 91.230.225.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/network.php"] [unique_id "adz8SQEnn1dQrOSHHNW4XgAAARI"]
[Mon Apr 13 22:23:14.081188 2026] [:error] [pid 9314:tid 9338] [client 185.192.71.83:30433] [client 185.192.71.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adz8Um_r4W8fX2GWyGRGAgAAAZY"]
[Mon Apr 13 22:23:14.613816 2026] [:error] [pid 63309:tid 63332] [client 185.192.71.95:37665] [client 185.192.71.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adz8UkpIKZ10weXpf0U7VAAAABM"]
[Mon Apr 13 22:23:19.192459 2026] [:error] [pid 9314:tid 9331] [client 185.92.25.1:35823] [client 185.92.25.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adz8V2_r4W8fX2GWyGRGDQAAAY8"]
[Mon Apr 13 22:23:19.732701 2026] [:error] [pid 63310:tid 63346] [client 185.192.71.95:30901] [client 185.192.71.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adz8V3oXpRU5ztmwPjJwOQAAAEI"]
[Mon Apr 13 22:23:21.343974 2026] [proxy_fcgi:error] [pid 63311:tid 63381] [client 91.230.225.57:42125] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 22:23:21.622987 2026] [:error] [pid 63311:tid 63389] [client 91.230.225.57:42125] [client 91.230.225.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.57, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adz8WaHjrGN1MqBCVFkeZQAAAJI"]
[Mon Apr 13 22:23:24.716560 2026] [:error] [pid 63311:tid 63395] [client 91.230.225.57:42125] [client 91.230.225.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adz8XKHjrGN1MqBCVFkeagAAAJg"]
[Mon Apr 13 22:23:27.174598 2026] [:error] [pid 63406:tid 63427] [client 185.192.71.94:54687] [client 185.192.71.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adz8X7HZEIkQ0Zmgp5r3ugAAANA"]
[Mon Apr 13 22:23:29.443824 2026] [:error] [pid 9314:tid 9317] [client 91.230.225.243:46699] [client 91.230.225.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adz8YW_r4W8fX2GWyGRGGwAAAYE"]
[Mon Apr 13 22:23:31.103633 2026] [:error] [pid 57183:tid 57189] [client 91.230.225.67:34401] [client 91.230.225.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adz8YzDO3t8R5NaxzYR18AAAAUQ"]
[Mon Apr 13 22:23:34.978884 2026] [:error] [pid 57183:tid 57207] [client 185.92.25.2:53189] [client 185.92.25.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adz8ZjDO3t8R5NaxzYR1-QAAAVY"]
[Mon Apr 13 22:23:38.235171 2026] [:error] [pid 9314:tid 9316] [client 185.192.71.88:51761] [client 185.192.71.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adz8am_r4W8fX2GWyGRGLAAAAYA"]
[Mon Apr 13 22:23:45.815973 2026] [:error] [pid 57183:tid 57195] [client 91.230.225.58:22241] [client 91.230.225.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adz8cTDO3t8R5NaxzYR2GQAAAUo"]
[Mon Apr 13 22:23:46.350161 2026] [:error] [pid 9314:tid 9336] [client 91.230.225.244:24413] [client 91.230.225.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adz8cm_r4W8fX2GWyGRGPgAAAZQ"]
[Mon Apr 13 22:23:48.634546 2026] [:error] [pid 63309:tid 63316] [client 185.92.25.1:32415] [client 185.92.25.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/count.php"] [unique_id "adz8dEpIKZ10weXpf0U7ZQAAAAM"]
[Mon Apr 13 22:23:58.811537 2026] [:error] [pid 9314:tid 9318] [client 91.230.225.245:33763] [client 91.230.225.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adz8fm_r4W8fX2GWyGRGTgAAAYI"]
[Mon Apr 13 22:24:02.456514 2026] [:error] [pid 63406:tid 63423] [client 91.230.225.247:44813] [client 91.230.225.247] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "makifim.com.au"] [uri "/images/stories/themes.php"] [unique_id "adz8grHZEIkQ0Zmgp5r4DQAAAMw"]
[Mon Apr 13 22:24:02.729582 2026] [:error] [pid 63406:tid 63435] [client 91.230.225.247:44813] [client 91.230.225.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adz8grHZEIkQ0Zmgp5r4DwAAANg"]
[Mon Apr 13 22:24:07.794252 2026] [:error] [pid 63406:tid 63415] [client 91.230.225.251:56747] [client 91.230.225.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adz8h7HZEIkQ0Zmgp5r4JAAAAMQ"]
[Mon Apr 13 22:24:08.341988 2026] [:error] [pid 7228:tid 7233] [client 91.230.225.58:23349] [client 91.230.225.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adz8iAEnn1dQrOSHHNW48QAAAQM"]
[Mon Apr 13 22:24:16.003745 2026] [:error] [pid 57183:tid 57194] [client 185.192.71.86:31749] [client 185.192.71.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adz8kDDO3t8R5NaxzYR2WAAAAUk"]
[Mon Apr 13 22:24:18.613504 2026] [:error] [pid 63406:tid 63434] [client 91.230.225.241:20239] [client 91.230.225.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adz8krHZEIkQ0Zmgp5r4PQAAANc"]
[Mon Apr 13 22:24:19.454388 2026] [:error] [pid 63406:tid 63411] [client 185.192.71.85:58469] [client 185.192.71.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adz8k7HZEIkQ0Zmgp5r4RQAAAMA"]
[Mon Apr 13 22:24:26.843720 2026] [:error] [pid 63406:tid 63422] [client 91.230.225.64:30363] [client 91.230.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adz8mrHZEIkQ0Zmgp5r4ZAAAAMs"]
[Mon Apr 13 22:24:27.383718 2026] [:error] [pid 7228:tid 7238] [client 91.230.225.244:60803] [client 91.230.225.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adz8mwEnn1dQrOSHHNW5CwAAAQg"]
[Mon Apr 13 22:24:39.976631 2026] [autoindex:error] [pid 63406:tid 63426] [client 91.230.225.57:37907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 22:24:43.754425 2026] [autoindex:error] [pid 63406:tid 63433] [client 91.230.225.57:37907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 22:24:56.451412 2026] [autoindex:error] [pid 63406:tid 63412] [client 91.230.225.57:37907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 22:24:58.513202 2026] [autoindex:error] [pid 63406:tid 63428] [client 91.230.225.57:37907] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 22:25:03.129155 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 91.230.225.57:37907] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 23:54:49.785571 2026] [proxy_fcgi:error] [pid 63406:tid 63434] [client 72.146.1.188:51190] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 23:55:33.104125 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 72.146.1.188:44281] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 23:56:16.208692 2026] [proxy_fcgi:error] [pid 57183:tid 57185] [client 72.146.1.188:18585] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 23:56:32.841579 2026] [proxy_fcgi:error] [pid 9314:tid 9334] [client 72.146.1.188:32979] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 23:56:51.857084 2026] [:error] [pid 57183:tid 57189] [client 72.146.1.188:25235] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-104.php"] [unique_id "ad0SQzDO3t8R5NaxzYSpNAAAAUQ"]
[Mon Apr 13 23:56:55.539011 2026] [:error] [pid 57183:tid 57201] [client 72.146.1.188:35204] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-104.php"] [unique_id "ad0SRzDO3t8R5NaxzYSpOAAAAVA"]
[Mon Apr 13 23:56:58.980063 2026] [:error] [pid 63309:tid 63328] [client 72.146.1.188:57900] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-104.php"] [unique_id "ad0SSkpIKZ10weXpf0VLcwAAAA8"]
[Mon Apr 13 23:57:01.219358 2026] [:error] [pid 63406:tid 63434] [client 72.146.1.188:53056] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zc-104.php"] [unique_id "ad0STbHZEIkQ0Zmgp5o_-AAAANc"]
[Mon Apr 13 23:57:02.912833 2026] [:error] [pid 63309:tid 63333] [client 72.146.1.188:35260] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rzki.php"] [unique_id "ad0STkpIKZ10weXpf0VLdwAAABQ"]
[Mon Apr 13 23:57:06.853974 2026] [:error] [pid 63406:tid 63421] [client 72.146.1.188:18106] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rzki.php"] [unique_id "ad0SUrHZEIkQ0Zmgp5pAAQAAAMo"]
[Mon Apr 13 23:57:12.549615 2026] [:error] [pid 57183:tid 57188] [client 72.146.1.188:18111] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rzki.php"] [unique_id "ad0SWDDO3t8R5NaxzYSpaAAAAUM"]
[Mon Apr 13 23:57:18.488096 2026] [:error] [pid 63406:tid 63429] [client 72.146.1.188:51113] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xsas.php"] [unique_id "ad0SXrHZEIkQ0Zmgp5pAEQAAANI"]
[Mon Apr 13 23:57:23.298162 2026] [:error] [pid 57183:tid 57208] [client 72.146.1.188:18060] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xsas.php"] [unique_id "ad0SYzDO3t8R5NaxzYSpoAAAAVc"]
[Mon Apr 13 23:57:26.204289 2026] [:error] [pid 63406:tid 63420] [client 72.146.1.188:13376] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xsas.php"] [unique_id "ad0SZrHZEIkQ0Zmgp5pANwAAAMk"]
[Mon Apr 13 23:57:28.974437 2026] [:error] [pid 63406:tid 63429] [client 72.146.1.188:5542] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xsas.php"] [unique_id "ad0SaLHZEIkQ0Zmgp5pAPwAAANI"]
[Mon Apr 13 23:57:32.315965 2026] [:error] [pid 9314:tid 9322] [client 72.146.1.188:58883] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "ad0SbG_r4W8fX2GWyGRtSQAAAYY"]
[Mon Apr 13 23:57:36.101082 2026] [:error] [pid 9314:tid 9327] [client 72.146.1.188:40897] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d12.php"] [unique_id "ad0ScG_r4W8fX2GWyGRtawAAAYs"]
[Mon Apr 13 23:59:19.806021 2026] [proxy_fcgi:error] [pid 63309:tid 63318] [client 72.146.1.188:64470] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 23:59:49.212356 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 72.146.1.188:16777] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 13 23:59:58.085105 2026] [proxy_fcgi:error] [pid 63406:tid 63422] [client 72.146.1.188:14961] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:00:14.581690 2026] [proxy_fcgi:error] [pid 63406:tid 63426] [client 72.146.1.188:39660] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:00:39.124552 2026] [:error] [pid 63311:tid 63394] [client 72.146.1.188:36402] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "ad0TJ6HjrGN1MqBCVFk5CAAAAJc"]
[Tue Apr 14 00:00:40.897066 2026] [:error] [pid 7228:tid 7235] [client 72.146.1.188:39558] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "ad0TKAEnn1dQrOSHHNXV_QAAAQU"]
[Tue Apr 14 00:00:44.491357 2026] [:error] [pid 63309:tid 63326] [client 72.146.1.188:57434] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "ad0TLEpIKZ10weXpf0VMEgAAAA0"]
[Tue Apr 14 00:00:47.900612 2026] [:error] [pid 63309:tid 63325] [client 72.146.1.188:42921] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "ad0TL0pIKZ10weXpf0VMFwAAAAw"]
[Tue Apr 14 00:00:49.854616 2026] [:error] [pid 63310:tid 63361] [client 72.146.1.188:42946] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "ad0TMXoXpRU5ztmwPjKD6gAAAFE"]
[Tue Apr 14 00:00:50.946606 2026] [:error] [pid 63309:tid 63328] [client 72.146.1.188:43458] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "ad0TMkpIKZ10weXpf0VMGAAAAA8"]
[Tue Apr 14 00:00:55.493070 2026] [:error] [pid 7228:tid 7253] [client 72.146.1.188:37068] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "ad0TNwEnn1dQrOSHHNXWFQAAARc"]
[Tue Apr 14 00:00:58.394999 2026] [:error] [pid 57183:tid 57204] [client 72.146.1.188:63849] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "ad0TOjDO3t8R5NaxzYSrHAAAAVM"]
[Tue Apr 14 00:01:01.775421 2026] [:error] [pid 57183:tid 57208] [client 72.146.1.188:43477] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "ad0TPTDO3t8R5NaxzYSrKAAAAVc"]
[Tue Apr 14 00:01:05.031465 2026] [:error] [pid 7228:tid 7246] [client 72.146.1.188:26699] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "ad0TQQEnn1dQrOSHHNXWKwAAARA"]
[Tue Apr 14 00:01:06.740714 2026] [:error] [pid 9314:tid 9316] [client 72.146.1.188:35726] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "ad0TQm_r4W8fX2GWyGRu5AAAAYA"]
[Tue Apr 14 00:01:08.837918 2026] [:error] [pid 9314:tid 9325] [client 72.146.1.188:5700] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "ad0TRG_r4W8fX2GWyGRu5wAAAYk"]
[Tue Apr 14 00:01:11.679570 2026] [:error] [pid 63406:tid 63421] [client 72.146.1.188:26730] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "ad0TR7HZEIkQ0Zmgp5pCKQAAAMo"]
[Tue Apr 14 00:01:13.431629 2026] [:error] [pid 63406:tid 63415] [client 72.146.1.188:56930] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "ad0TSbHZEIkQ0Zmgp5pCNQAAAMQ"]
[Tue Apr 14 00:01:25.844021 2026] [:error] [pid 63311:tid 63376] [client 72.146.1.188:43498] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "ad0TVaHjrGN1MqBCVFk5eAAAAIU"]
[Tue Apr 14 00:01:35.141414 2026] [:error] [pid 63406:tid 63421] [client 72.146.1.188:5712] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws49.php"] [unique_id "ad0TX7HZEIkQ0Zmgp5pCrwAAAMo"]
[Tue Apr 14 00:02:08.602956 2026] [proxy_fcgi:error] [pid 63311:tid 63383] [client 72.146.1.188:51718] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:02:33.537000 2026] [proxy_fcgi:error] [pid 9314:tid 9331] [client 72.146.1.188:40305] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:03:00.639835 2026] [proxy_fcgi:error] [pid 63311:tid 63395] [client 72.146.1.188:48110] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:03:14.919197 2026] [:error] [pid 57183:tid 57208] [client 72.146.1.188:64388] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x9.php"] [unique_id "ad0TwjDO3t8R5NaxzYSrsQAAAVc"]
[Tue Apr 14 00:03:19.269346 2026] [:error] [pid 63310:tid 63349] [client 72.146.1.188:53047] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x9.php"] [unique_id "ad0Tx3oXpRU5ztmwPjKEOwAAAEU"]
[Tue Apr 14 00:03:23.125249 2026] [:error] [pid 63310:tid 63359] [client 72.146.1.188:13886] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x9.php"] [unique_id "ad0Ty3oXpRU5ztmwPjKEPwAAAE8"]
[Tue Apr 14 00:03:28.757965 2026] [:error] [pid 63406:tid 63424] [client 72.146.1.188:26027] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an.php"] [unique_id "ad0T0LHZEIkQ0Zmgp5pDZAAAAM0"]
[Tue Apr 14 00:03:31.366741 2026] [:error] [pid 63406:tid 63415] [client 72.146.1.188:14857] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an.php"] [unique_id "ad0T07HZEIkQ0Zmgp5pDaQAAAMQ"]
[Tue Apr 14 00:03:40.246008 2026] [:error] [pid 63406:tid 63428] [client 72.146.1.188:14875] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/an.php"] [unique_id "ad0T3LHZEIkQ0Zmgp5pDewAAANE"]
[Tue Apr 14 00:03:49.855798 2026] [:error] [pid 9314:tid 9326] [client 72.146.1.188:22493] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboutc.php"] [unique_id "ad0T5W_r4W8fX2GWyGRvlQAAAYo"]
[Tue Apr 14 00:03:50.608765 2026] [:error] [pid 7228:tid 7241] [client 72.146.1.188:40834] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboutc.php"] [unique_id "ad0T5gEnn1dQrOSHHNXWlQAAAQs"]
[Tue Apr 14 00:03:59.271570 2026] [:error] [pid 7228:tid 7248] [client 72.146.1.188:64510] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboutc.php"] [unique_id "ad0T7wEnn1dQrOSHHNXWpAAAARI"]
[Tue Apr 14 00:05:02.764666 2026] [proxy_fcgi:error] [pid 63406:tid 63424] [client 72.146.1.188:5836] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:05:18.282447 2026] [proxy_fcgi:error] [pid 63310:tid 63351] [client 72.146.1.188:44187] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:05:33.066069 2026] [proxy_fcgi:error] [pid 63311:tid 63389] [client 72.146.1.188:39572] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:05:42.099071 2026] [proxy_fcgi:error] [pid 57183:tid 57195] [client 72.146.1.188:43457] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:06:11.166805 2026] [:error] [pid 63406:tid 63413] [client 72.146.1.188:19890] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blsvgeyaza.php"] [unique_id "ad0Uc7HZEIkQ0Zmgp5pEoAAAAMI"]
[Tue Apr 14 00:06:13.860245 2026] [:error] [pid 57183:tid 57206] [client 72.146.1.188:17469] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blsvgeyaza.php"] [unique_id "ad0UdTDO3t8R5NaxzYSslAAAAVU"]
[Tue Apr 14 00:06:15.222098 2026] [:error] [pid 63406:tid 63435] [client 72.146.1.188:53630] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blsvgeyaza.php"] [unique_id "ad0Ud7HZEIkQ0Zmgp5pEogAAANg"]
[Tue Apr 14 00:06:17.150802 2026] [:error] [pid 63311:tid 63379] [client 72.146.1.188:37732] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/blsvgeyaza.php"] [unique_id "ad0UeaHjrGN1MqBCVFk6hAAAAIg"]
[Tue Apr 14 00:06:18.274699 2026] [:error] [pid 63311:tid 63371] [client 72.146.1.188:32969] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gqhyti.php"] [unique_id "ad0UeqHjrGN1MqBCVFk6hgAAAIA"]
[Tue Apr 14 00:06:21.329627 2026] [:error] [pid 63309:tid 63328] [client 72.146.1.188:51736] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gqhyti.php"] [unique_id "ad0UfUpIKZ10weXpf0VMwgAAAA8"]
[Tue Apr 14 00:06:23.669519 2026] [:error] [pid 9314:tid 9322] [client 72.146.1.188:5752] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gqhyti.php"] [unique_id "ad0Uf2_r4W8fX2GWyGRv_AAAAYY"]
[Tue Apr 14 00:06:26.206346 2026] [:error] [pid 57183:tid 57186] [client 72.146.1.188:53585] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gqhyti.php"] [unique_id "ad0UgjDO3t8R5NaxzYSswAAAAUE"]
[Tue Apr 14 00:06:30.008597 2026] [:error] [pid 7228:tid 7242] [client 72.146.1.188:53584] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoxxi.php"] [unique_id "ad0UhgEnn1dQrOSHHNXXagAAAQw"]
[Tue Apr 14 00:06:33.188157 2026] [:error] [pid 9314:tid 9336] [client 72.146.1.188:59525] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoxxi.php"] [unique_id "ad0UiW_r4W8fX2GWyGRwBQAAAZQ"]
[Tue Apr 14 00:06:35.984296 2026] [:error] [pid 9314:tid 9339] [client 72.146.1.188:54209] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoxxi.php"] [unique_id "ad0Ui2_r4W8fX2GWyGRwCgAAAZc"]
[Tue Apr 14 00:06:38.808596 2026] [:error] [pid 63406:tid 63412] [client 72.146.1.188:21768] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/autoxxi.php"] [unique_id "ad0UjrHZEIkQ0Zmgp5pEyQAAAME"]
[Tue Apr 14 00:06:41.952201 2026] [:error] [pid 63406:tid 63434] [client 72.146.1.188:21818] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1144452145_error_log.php"] [unique_id "ad0UkbHZEIkQ0Zmgp5pEzwAAANc"]
[Tue Apr 14 00:06:44.678333 2026] [:error] [pid 63309:tid 63329] [client 72.146.1.188:33421] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1144452145_error_log.php"] [unique_id "ad0UlEpIKZ10weXpf0VM2QAAABA"]
[Tue Apr 14 00:06:46.589346 2026] [:error] [pid 63309:tid 63328] [client 72.146.1.188:16873] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1144452145_error_log.php"] [unique_id "ad0UlkpIKZ10weXpf0VM3gAAAA8"]
[Tue Apr 14 00:06:47.779586 2026] [:error] [pid 63310:tid 63356] [client 72.146.1.188:56878] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1144452145_error_log.php"] [unique_id "ad0Ul3oXpRU5ztmwPjKEqwAAAEw"]
[Tue Apr 14 00:06:50.002745 2026] [:error] [pid 63406:tid 63423] [client 72.146.1.188:17527] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws48.php"] [unique_id "ad0UmrHZEIkQ0Zmgp5pE1wAAAMw"]
[Tue Apr 14 00:06:53.400480 2026] [:error] [pid 7228:tid 7232] [client 72.146.1.188:21215] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws48.php"] [unique_id "ad0UnQEnn1dQrOSHHNXXjQAAAQI"]
[Tue Apr 14 00:06:55.964168 2026] [:error] [pid 63406:tid 63417] [client 72.146.1.188:36474] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws48.php"] [unique_id "ad0Un7HZEIkQ0Zmgp5pE8AAAAMY"]
[Tue Apr 14 00:07:40.048327 2026] [:error] [pid 9314:tid 9332] [client 72.146.1.188:56355] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ad0UzG_r4W8fX2GWyGRwXAAAAZA"]
[Tue Apr 14 00:08:00.597937 2026] [:error] [pid 57183:tid 57201] [client 72.146.1.188:51715] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/schallfuns.php"] [unique_id "ad0U4DDO3t8R5NaxzYStRQAAAVA"]
[Tue Apr 14 00:08:30.179359 2026] [:error] [pid 9314:tid 9333] [client 72.146.1.188:16179] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/clasa99.php"] [unique_id "ad0U_m_r4W8fX2GWyGRwmgAAAZE"]
[Tue Apr 14 00:08:41.835645 2026] [:error] [pid 63406:tid 63432] [client 72.146.1.188:53529] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfilexxx.php"] [unique_id "ad0VCbHZEIkQ0Zmgp5pGHwAAANU"]
[Tue Apr 14 00:08:48.478416 2026] [:error] [pid 9314:tid 9321] [client 72.146.1.188:16191] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfilexxx.php"] [unique_id "ad0VEG_r4W8fX2GWyGRwrgAAAYU"]
[Tue Apr 14 00:08:54.652192 2026] [:error] [pid 63406:tid 63432] [client 72.146.1.188:16167] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/myfilexxx.php"] [unique_id "ad0VFrHZEIkQ0Zmgp5pGMwAAANU"]
[Tue Apr 14 00:08:57.288054 2026] [:error] [pid 63311:tid 63375] [client 72.146.1.188:48080] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/karma_144a.php"] [unique_id "ad0VGaHjrGN1MqBCVFk65AAAAIQ"]
[Tue Apr 14 00:08:59.146355 2026] [:error] [pid 63310:tid 63345] [client 72.146.1.188:43445] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/karma_144a.php"] [unique_id "ad0VG3oXpRU5ztmwPjKFQAAAAEE"]
[Tue Apr 14 00:09:01.828186 2026] [:error] [pid 63311:tid 63381] [client 72.146.1.188:39007] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/karma_144a.php"] [unique_id "ad0VHaHjrGN1MqBCVFk67gAAAIo"]
[Tue Apr 14 00:09:04.020424 2026] [:error] [pid 9314:tid 9335] [client 72.146.1.188:13639] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/karma_144a.php"] [unique_id "ad0VIG_r4W8fX2GWyGRwtAAAAZM"]
[Tue Apr 14 00:09:09.038644 2026] [:error] [pid 9314:tid 9326] [client 72.146.1.188:40932] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3586%20b64.php"] [unique_id "ad0VJW_r4W8fX2GWyGRwwQAAAYo"]
[Tue Apr 14 00:09:15.081694 2026] [:error] [pid 63406:tid 63420] [client 72.146.1.188:13694] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3586%20b64.php"] [unique_id "ad0VK7HZEIkQ0Zmgp5pGTgAAAMk"]
[Tue Apr 14 00:09:18.032114 2026] [:error] [pid 9314:tid 9323] [client 72.146.1.188:54147] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3586%20b64.php"] [unique_id "ad0VLm_r4W8fX2GWyGRw1gAAAYc"]
[Tue Apr 14 00:09:21.656129 2026] [:error] [pid 57183:tid 57194] [client 72.146.1.188:40858] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws.php"] [unique_id "ad0VMTDO3t8R5NaxzYStyQAAAUk"]
[Tue Apr 14 00:09:25.355828 2026] [:error] [pid 7228:tid 7253] [client 72.146.1.188:5417] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws.php"] [unique_id "ad0VNQEnn1dQrOSHHNXYngAAARc"]
[Tue Apr 14 00:09:35.630977 2026] [:error] [pid 9314:tid 9340] [client 72.146.1.188:5356] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "ad0VP2_r4W8fX2GWyGRw5AAAAZg"]
[Tue Apr 14 00:09:38.360998 2026] [:error] [pid 7228:tid 7230] [client 72.146.1.188:50172] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "ad0VQgEnn1dQrOSHHNXYqgAAAQA"]
[Tue Apr 14 00:09:42.127622 2026] [:error] [pid 63406:tid 63432] [client 72.146.1.188:5639] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "ad0VRrHZEIkQ0Zmgp5pGlwAAANU"]
[Tue Apr 14 00:09:57.923409 2026] [:error] [pid 63406:tid 63425] [client 72.146.1.188:63463] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypltspd.php"] [unique_id "ad0VVbHZEIkQ0Zmgp5pGoQAAAM4"]
[Tue Apr 14 00:10:00.890812 2026] [:error] [pid 57183:tid 57197] [client 72.146.1.188:21864] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypltspd.php"] [unique_id "ad0VWDDO3t8R5NaxzYSuJwAAAUw"]
[Tue Apr 14 00:10:02.478879 2026] [:error] [pid 63406:tid 63420] [client 72.146.1.188:22437] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypltspd.php"] [unique_id "ad0VWrHZEIkQ0Zmgp5pGrgAAAMk"]
[Tue Apr 14 00:10:05.570535 2026] [:error] [pid 63406:tid 63432] [client 72.146.1.188:32282] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bypltspd.php"] [unique_id "ad0VXbHZEIkQ0Zmgp5pGtwAAANU"]
[Tue Apr 14 00:10:09.132218 2026] [:error] [pid 57183:tid 57192] [client 72.146.1.188:21863] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "ad0VYTDO3t8R5NaxzYSuOQAAAUc"]
[Tue Apr 14 00:10:11.135773 2026] [:error] [pid 7228:tid 7232] [client 72.146.1.188:5620] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "ad0VYwEnn1dQrOSHHNXYwAAAAQI"]
[Tue Apr 14 00:10:12.178080 2026] [:error] [pid 7228:tid 7240] [client 72.146.1.188:42356] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "ad0VZAEnn1dQrOSHHNXYxAAAAQo"]
[Tue Apr 14 00:10:16.768972 2026] [:error] [pid 63406:tid 63422] [client 72.146.1.188:14909] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "ad0VaLHZEIkQ0Zmgp5pG9QAAAMs"]
[Tue Apr 14 00:10:18.257372 2026] [:error] [pid 63406:tid 63411] [client 72.146.1.188:21836] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad0VarHZEIkQ0Zmgp5pHAgAAAMA"]
[Tue Apr 14 00:10:21.215704 2026] [:error] [pid 63406:tid 63429] [client 72.146.1.188:35755] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad0VbbHZEIkQ0Zmgp5pHCQAAANI"]
[Tue Apr 14 00:10:28.330578 2026] [:error] [pid 57183:tid 57207] [client 72.146.1.188:5589] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad0VdDDO3t8R5NaxzYSuVwAAAVY"]
[Tue Apr 14 00:10:35.547319 2026] [:error] [pid 63406:tid 63423] [client 72.146.1.188:14857] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad0Ve7HZEIkQ0Zmgp5pHNwAAAMw"]
[Tue Apr 14 00:10:43.424642 2026] [:error] [pid 57183:tid 57190] [client 72.146.1.188:37736] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad0VgzDO3t8R5NaxzYSudgAAAUU"]
[Tue Apr 14 00:11:49.207865 2026] [:error] [pid 9314:tid 9340] [client 72.146.1.188:56434] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "ad0VxW_r4W8fX2GWyGRxdQAAAZg"]
[Tue Apr 14 00:12:45.476045 2026] [:error] [pid 57183:tid 57194] [client 72.146.1.188:5817] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad0V_TDO3t8R5NaxzYSv0QAAAUk"]
[Tue Apr 14 00:12:48.131922 2026] [:error] [pid 63309:tid 63331] [client 72.146.1.188:34461] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad0WAEpIKZ10weXpf0VOCAAAABI"]
[Tue Apr 14 00:12:51.361024 2026] [:error] [pid 57183:tid 57198] [client 72.146.1.188:25274] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad0WAzDO3t8R5NaxzYSv4QAAAU0"]
[Tue Apr 14 00:12:54.730557 2026] [:error] [pid 63311:tid 63381] [client 72.146.1.188:32378] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad0WBqHjrGN1MqBCVFk7oAAAAIo"]
[Tue Apr 14 00:12:58.475133 2026] [:error] [pid 9314:tid 9332] [client 72.146.1.188:15561] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad0WCm_r4W8fX2GWyGRyaAAAAZA"]
[Tue Apr 14 00:13:00.980771 2026] [:error] [pid 57183:tid 57197] [client 72.146.1.188:38387] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad0WDDDO3t8R5NaxzYSv_gAAAUw"]
[Tue Apr 14 00:13:03.256322 2026] [:error] [pid 57183:tid 57201] [client 72.146.1.188:16229] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad0WDzDO3t8R5NaxzYSwDAAAAVA"]
[Tue Apr 14 00:13:05.145245 2026] [:error] [pid 57183:tid 57202] [client 72.146.1.188:53510] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad0WETDO3t8R5NaxzYSwHwAAAVE"]
[Tue Apr 14 00:13:07.016579 2026] [:error] [pid 63406:tid 63430] [client 72.146.1.188:16190] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws57.php"] [unique_id "ad0WE7HZEIkQ0Zmgp5pIjAAAANM"]
[Tue Apr 14 00:13:08.167847 2026] [:error] [pid 63311:tid 63383] [client 72.146.1.188:38391] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws57.php"] [unique_id "ad0WFKHjrGN1MqBCVFk7rQAAAIw"]
[Tue Apr 14 00:13:09.895629 2026] [:error] [pid 63406:tid 63419] [client 72.146.1.188:5968] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws57.php"] [unique_id "ad0WFbHZEIkQ0Zmgp5pIrQAAAMg"]
[Tue Apr 14 00:13:10.856981 2026] [:error] [pid 63311:tid 63386] [client 72.146.1.188:15590] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws57.php"] [unique_id "ad0WFqHjrGN1MqBCVFk7rwAAAI8"]
[Tue Apr 14 00:13:12.249800 2026] [:error] [pid 9314:tid 9322] [client 72.146.1.188:40214] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.qiodetme.php"] [unique_id "ad0WGG_r4W8fX2GWyGRykAAAAYY"]
[Tue Apr 14 00:13:13.462662 2026] [:error] [pid 63310:tid 63346] [client 72.146.1.188:56327] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.qiodetme.php"] [unique_id "ad0WGXoXpRU5ztmwPjKFqwAAAEI"]
[Tue Apr 14 00:13:15.052835 2026] [:error] [pid 57183:tid 57200] [client 72.146.1.188:40244] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.qiodetme.php"] [unique_id "ad0WGzDO3t8R5NaxzYSwVgAAAU8"]
[Tue Apr 14 00:13:16.693546 2026] [:error] [pid 57183:tid 57194] [client 72.146.1.188:5859] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.qiodetme.php"] [unique_id "ad0WHDDO3t8R5NaxzYSwaQAAAUk"]
[Tue Apr 14 00:13:28.507924 2026] [:error] [pid 63406:tid 63425] [client 72.146.1.188:56378] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sodas.php"] [unique_id "ad0WKLHZEIkQ0Zmgp5pI1AAAAM4"]
[Tue Apr 14 00:13:31.351785 2026] [:error] [pid 9314:tid 9326] [client 72.146.1.188:43403] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sodas.php"] [unique_id "ad0WK2_r4W8fX2GWyGRyogAAAYo"]
[Tue Apr 14 00:13:33.229009 2026] [:error] [pid 63406:tid 63422] [client 72.146.1.188:65188] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad0WLbHZEIkQ0Zmgp5pI7gAAAMs"]
[Tue Apr 14 00:13:35.783205 2026] [:error] [pid 63406:tid 63422] [client 72.146.1.188:13393] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad0WL7HZEIkQ0Zmgp5pI-AAAAMs"]
[Tue Apr 14 00:13:37.966970 2026] [:error] [pid 63406:tid 63412] [client 72.146.1.188:5199] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad0WMbHZEIkQ0Zmgp5pJAAAAAME"]
[Tue Apr 14 00:13:39.544904 2026] [:error] [pid 57183:tid 57187] [client 72.146.1.188:21215] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad0WMzDO3t8R5NaxzYSwxwAAAUI"]
[Tue Apr 14 00:13:55.431967 2026] [:error] [pid 63309:tid 63323] [client 72.146.1.188:53069] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "ad0WQ0pIKZ10weXpf0VOOgAAAAo"]
[Tue Apr 14 00:14:02.614702 2026] [:error] [pid 7228:tid 7247] [client 72.146.1.188:65181] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "ad0WSgEnn1dQrOSHHNXZ1AAAARE"]
[Tue Apr 14 00:14:15.253883 2026] [:error] [pid 9314:tid 9325] [client 72.146.1.188:28628] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "ad0WV2_r4W8fX2GWyGRy3wAAAYk"]
[Tue Apr 14 00:14:17.217898 2026] [:error] [pid 63406:tid 63418] [client 72.146.1.188:5635] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "ad0WWbHZEIkQ0Zmgp5pJaAAAAMc"]
[Tue Apr 14 00:14:18.296673 2026] [:error] [pid 9314:tid 9319] [client 72.146.1.188:35780] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "ad0WWm_r4W8fX2GWyGRy5QAAAYM"]
[Tue Apr 14 00:14:21.256583 2026] [:error] [pid 63310:tid 63345] [client 72.146.1.188:64461] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws86.php"] [unique_id "ad0WXXoXpRU5ztmwPjKF1QAAAEE"]
[Tue Apr 14 00:14:23.136656 2026] [:error] [pid 63311:tid 63392] [client 72.146.1.188:56884] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "ad0WX6HjrGN1MqBCVFk71gAAAJU"]
[Tue Apr 14 00:14:26.182416 2026] [:error] [pid 63311:tid 63387] [client 72.146.1.188:13680] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "ad0WYqHjrGN1MqBCVFk73gAAAJA"]
[Tue Apr 14 00:14:32.656330 2026] [:error] [pid 63406:tid 63426] [client 72.146.1.188:26030] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vx.php"] [unique_id "ad0WaLHZEIkQ0Zmgp5pJhwAAAM8"]
[Tue Apr 14 00:14:38.363270 2026] [:error] [pid 63311:tid 63394] [client 72.146.1.188:50167] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "ad0WbqHjrGN1MqBCVFk78wAAAJc"]
[Tue Apr 14 00:14:41.162946 2026] [:error] [pid 63311:tid 63376] [client 72.146.1.188:5356] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "ad0WcaHjrGN1MqBCVFk79gAAAIU"]
[Tue Apr 14 00:14:43.050276 2026] [:error] [pid 63406:tid 63421] [client 72.146.1.188:13617] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "ad0Wc7HZEIkQ0Zmgp5pJqQAAAMo"]
[Tue Apr 14 00:14:44.069380 2026] [:error] [pid 63311:tid 63378] [client 72.146.1.188:40937] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dass.php"] [unique_id "ad0WdKHjrGN1MqBCVFk7-AAAAIc"]
[Tue Apr 14 00:14:51.800452 2026] [:error] [pid 57183:tid 57209] [client 72.146.1.188:24701] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "ad0WezDO3t8R5NaxzYSxRQAAAVg"]
[Tue Apr 14 00:16:22.637898 2026] [:error] [pid 63406:tid 63412] [client 72.146.1.188:19313] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "ad0W1rHZEIkQ0Zmgp5pKlwAAAME"]
[Tue Apr 14 00:16:48.564073 2026] [:error] [pid 63310:tid 63365] [client 72.146.1.188:19313] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws83.php"] [unique_id "ad0W8HoXpRU5ztmwPjKGGgAAAFU"]
[Tue Apr 14 00:18:21.926816 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 72.146.1.188:53520] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:18:51.968498 2026] [proxy_fcgi:error] [pid 63406:tid 63430] [client 72.146.1.188:40218] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:19:31.617332 2026] [:error] [pid 57183:tid 57185] [client 72.146.1.188:56342] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "ad0XkzDO3t8R5NaxzYSzcwAAAUA"]
[Tue Apr 14 00:19:33.252936 2026] [:error] [pid 57183:tid 57197] [client 72.146.1.188:56381] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "ad0XlTDO3t8R5NaxzYSzdwAAAUw"]
[Tue Apr 14 00:19:37.391860 2026] [:error] [pid 9314:tid 9318] [client 72.146.1.188:40959] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "ad0XmW_r4W8fX2GWyGR0vwAAAYI"]
[Tue Apr 14 00:19:41.827020 2026] [:error] [pid 63310:tid 63351] [client 72.146.1.188:40927] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "ad0XnXoXpRU5ztmwPjKGcwAAAEc"]
[Tue Apr 14 00:19:43.542519 2026] [:error] [pid 9314:tid 9323] [client 72.146.1.188:13579] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "ad0Xn2_r4W8fX2GWyGR0yAAAAYc"]
[Tue Apr 14 00:19:46.589545 2026] [:error] [pid 63406:tid 63435] [client 72.146.1.188:54178] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "ad0XorHZEIkQ0Zmgp5pMmwAAANg"]
[Tue Apr 14 00:19:57.048941 2026] [:error] [pid 57183:tid 57194] [client 72.146.1.188:24657] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amp.php"] [unique_id "ad0XrTDO3t8R5NaxzYSzmgAAAUk"]
[Tue Apr 14 00:19:57.681404 2026] [:error] [pid 57183:tid 57207] [client 72.146.1.188:5683] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abrand.php"] [unique_id "ad0XrTDO3t8R5NaxzYSznAAAAVY"]
[Tue Apr 14 00:20:10.958752 2026] [:error] [pid 7228:tid 7239] [client 72.146.1.188:36425] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abrand.php"] [unique_id "ad0XugEnn1dQrOSHHNXbKwAAAQk"]
[Tue Apr 14 00:20:26.083047 2026] [:error] [pid 63406:tid 63431] [client 72.146.1.188:33453] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "ad0XyrHZEIkQ0Zmgp5pMuQAAANQ"]
[Tue Apr 14 00:20:28.834124 2026] [:error] [pid 7228:tid 7248] [client 72.146.1.188:14946] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/init.php"] [unique_id "ad0XzAEnn1dQrOSHHNXbOgAAARI"]
[Tue Apr 14 00:20:51.103488 2026] [proxy_fcgi:error] [pid 63406:tid 63427] [client 72.146.1.188:63798] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:21:07.687458 2026] [proxy_fcgi:error] [pid 57183:tid 57187] [client 72.146.1.188:16828] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:21:31.785824 2026] [proxy_fcgi:error] [pid 9314:tid 9325] [client 72.146.1.188:16825] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:21:52.509017 2026] [:error] [pid 63309:tid 63316] [client 72.146.1.188:57953] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/wp-blog.php"] [unique_id "ad0YIEpIKZ10weXpf0VPFAAAAAM"]
[Tue Apr 14 00:21:59.474190 2026] [:error] [pid 63310:tid 63366] [client 72.146.1.188:50486] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "ad0YJ3oXpRU5ztmwPjKGwgAAAFY"]
[Tue Apr 14 00:22:01.562941 2026] [:error] [pid 63309:tid 63319] [client 72.146.1.188:42910] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "ad0YKUpIKZ10weXpf0VPGQAAAAY"]
[Tue Apr 14 00:22:07.789410 2026] [:error] [pid 57183:tid 57186] [client 72.146.1.188:28602] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/nw.php"] [unique_id "ad0YLzDO3t8R5NaxzYS0ZAAAAUE"]
[Tue Apr 14 00:22:14.155946 2026] [:error] [pid 63406:tid 63423] [client 72.146.1.188:28545] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "ad0YNrHZEIkQ0Zmgp5pNdwAAAMw"]
[Tue Apr 14 00:22:16.505728 2026] [:error] [pid 63406:tid 63432] [client 72.146.1.188:28598] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "ad0YOLHZEIkQ0Zmgp5pNfAAAANU"]
[Tue Apr 14 00:22:18.782280 2026] [:error] [pid 7228:tid 7245] [client 72.146.1.188:51164] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "ad0YOgEnn1dQrOSHHNXbrAAAAQ8"]
[Tue Apr 14 00:22:20.817876 2026] [:error] [pid 9314:tid 9328] [client 72.146.1.188:28546] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "ad0YPG_r4W8fX2GWyGR1cgAAAYw"]
[Tue Apr 14 00:22:21.591338 2026] [:error] [pid 63406:tid 63412] [client 72.146.1.188:17459] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "ad0YPbHZEIkQ0Zmgp5pNkgAAAME"]
[Tue Apr 14 00:22:22.958186 2026] [:error] [pid 63406:tid 63430] [client 72.146.1.188:53606] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "ad0YPrHZEIkQ0Zmgp5pNnwAAANM"]
[Tue Apr 14 00:22:26.026186 2026] [:error] [pid 7228:tid 7234] [client 72.146.1.188:53625] [client 72.146.1.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/drhunthq.php"] [unique_id "ad0YQgEnn1dQrOSHHNXbuAAAAQQ"]
[Tue Apr 14 00:23:37.349035 2026] [proxy_fcgi:error] [pid 7228:tid 7245] [client 72.146.1.188:26677] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:23:51.362602 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 72.146.1.188:56269] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:24:23.034680 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 72.146.1.188:65175] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:24:34.238528 2026] [proxy_fcgi:error] [pid 63311:tid 63378] [client 72.146.1.188:5292] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:24:56.227816 2026] [proxy_fcgi:error] [pid 9314:tid 9326] [client 72.146.1.188:37739] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:25:15.163995 2026] [proxy_fcgi:error] [pid 63406:tid 63435] [client 72.146.1.188:35789] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:25:36.565823 2026] [proxy_fcgi:error] [pid 57183:tid 57209] [client 72.146.1.188:56941] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:56:42.247593 2026] [proxy_fcgi:error] [pid 59914:tid 59947] [client 20.100.201.121:40012] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:56:58.219010 2026] [proxy_fcgi:error] [pid 59913:tid 59933] [client 20.100.201.121:42192] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:57:16.863803 2026] [proxy_fcgi:error] [pid 59915:tid 59993] [client 20.100.201.121:52668] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:57:19.520869 2026] [proxy_fcgi:error] [pid 59915:tid 59986] [client 20.100.201.121:55512] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:57:32.002612 2026] [:error] [pid 59915:tid 59981] [client 20.100.201.121:36078] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "ad0gfIeTNdEemByf99gg4wAAAIo"]
[Tue Apr 14 00:57:36.360045 2026] [:error] [pid 59913:tid 59941] [client 20.100.201.121:6070] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "ad0ggK5XvQ9C-gZtr2ybQwAAABg"]
[Tue Apr 14 00:57:38.549959 2026] [:error] [pid 59913:tid 59925] [client 20.100.201.121:27703] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "ad0ggq5XvQ9C-gZtr2ybTQAAAAg"]
[Tue Apr 14 00:57:39.953855 2026] [:error] [pid 59915:tid 59988] [client 20.100.201.121:29658] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "ad0gg4eTNdEemByf99gg-gAAAJE"]
[Tue Apr 14 00:57:41.142106 2026] [:error] [pid 60317:tid 60342] [client 20.100.201.121:29677] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ad0ghbBo7Bc8I7P_P-9vLQAAAMI"]
[Tue Apr 14 00:57:41.976591 2026] [:error] [pid 60317:tid 60354] [client 20.100.201.121:29695] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ad0ghbBo7Bc8I7P_P-9vMgAAAM4"]
[Tue Apr 14 00:57:43.068011 2026] [:error] [pid 60317:tid 60345] [client 20.100.201.121:36032] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ad0gh7Bo7Bc8I7P_P-9vOwAAAMU"]
[Tue Apr 14 00:57:43.710181 2026] [:error] [pid 60317:tid 60340] [client 20.100.201.121:55703] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ad0gh7Bo7Bc8I7P_P-9vQAAAAMA"]
[Tue Apr 14 00:57:44.688186 2026] [:error] [pid 60317:tid 60347] [client 20.100.201.121:44807] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ad0giLBo7Bc8I7P_P-9vRgAAAMc"]
[Tue Apr 14 00:57:45.861208 2026] [:error] [pid 60317:tid 60350] [client 20.100.201.121:50278] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ad0gibBo7Bc8I7P_P-9vUQAAAMo"]
[Tue Apr 14 00:57:46.663928 2026] [:error] [pid 59913:tid 59936] [client 20.100.201.121:39976] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ad0giq5XvQ9C-gZtr2ybYAAAABM"]
[Tue Apr 14 00:57:47.522684 2026] [:error] [pid 59915:tid 59992] [client 20.100.201.121:50300] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ad0gi4eTNdEemByf99ghBAAAAJU"]
[Tue Apr 14 00:57:48.282793 2026] [:error] [pid 60317:tid 60350] [client 20.100.201.121:55527] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "ad0gjLBo7Bc8I7P_P-9vWwAAAMo"]
[Tue Apr 14 00:57:49.339610 2026] [:error] [pid 60317:tid 60354] [client 20.100.201.121:29647] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "ad0gjbBo7Bc8I7P_P-9vZAAAAM4"]
[Tue Apr 14 00:57:50.545439 2026] [:error] [pid 59914:tid 59965] [client 20.100.201.121:50296] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "ad0gjuq0YMmB3OWbbUk55wAAAFU"]
[Tue Apr 14 00:57:51.510999 2026] [:error] [pid 60317:tid 60341] [client 20.100.201.121:50254] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "ad0gj7Bo7Bc8I7P_P-9vawAAAME"]
[Tue Apr 14 00:57:52.677137 2026] [:error] [pid 59913:tid 59930] [client 20.100.201.121:55529] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ad0gkK5XvQ9C-gZtr2ybegAAAA0"]
[Tue Apr 14 00:57:53.999251 2026] [:error] [pid 60317:tid 60349] [client 20.100.201.121:50260] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ad0gkbBo7Bc8I7P_P-9vegAAAMk"]
[Tue Apr 14 00:57:55.039009 2026] [:error] [pid 59913:tid 59919] [client 20.100.201.121:27696] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ad0gk65XvQ9C-gZtr2ybgQAAAAI"]
[Tue Apr 14 00:57:56.199335 2026] [:error] [pid 60317:tid 60362] [client 20.100.201.121:61479] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ad0glLBo7Bc8I7P_P-9vhAAAANY"]
[Tue Apr 14 00:57:58.605191 2026] [:error] [pid 59914:tid 59950] [client 20.100.201.121:50284] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "ad0gluq0YMmB3OWbbUk58wAAAEY"]
[Tue Apr 14 00:58:00.343580 2026] [:error] [pid 60317:tid 60362] [client 20.100.201.121:39998] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "ad0gmLBo7Bc8I7P_P-9vlgAAANY"]
[Tue Apr 14 00:58:01.468425 2026] [:error] [pid 60317:tid 60343] [client 20.100.201.121:54152] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "ad0gmbBo7Bc8I7P_P-9vmgAAAMM"]
[Tue Apr 14 00:58:02.622977 2026] [:error] [pid 60317:tid 60350] [client 20.100.201.121:44857] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "ad0gmrBo7Bc8I7P_P-9voQAAAMo"]
[Tue Apr 14 00:58:03.662260 2026] [:error] [pid 59914:tid 59945] [client 20.100.201.121:43744] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "ad0gm-q0YMmB3OWbbUk6BAAAAEE"]
[Tue Apr 14 00:58:04.411013 2026] [:error] [pid 60317:tid 60349] [client 20.100.201.121:55722] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "ad0gnLBo7Bc8I7P_P-9vtAAAAMk"]
[Tue Apr 14 00:58:05.404384 2026] [:error] [pid 60317:tid 60347] [client 20.100.201.121:55701] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "ad0gnbBo7Bc8I7P_P-9vvQAAAMc"]
[Tue Apr 14 00:58:06.434959 2026] [:error] [pid 59915:tid 59989] [client 20.100.201.121:38400] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "ad0gnoeTNdEemByf99ghKgAAAJI"]
[Tue Apr 14 00:58:07.307575 2026] [:error] [pid 59915:tid 59982] [client 20.100.201.121:59696] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "ad0gn4eTNdEemByf99ghLwAAAIs"]
[Tue Apr 14 00:58:07.851197 2026] [:error] [pid 59915:tid 59978] [client 20.100.201.121:39989] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "ad0gn4eTNdEemByf99ghMAAAAIc"]
[Tue Apr 14 00:58:08.607907 2026] [:error] [pid 59915:tid 59983] [client 20.100.201.121:55547] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "ad0goIeTNdEemByf99ghNwAAAIw"]
[Tue Apr 14 00:58:09.375550 2026] [:error] [pid 60317:tid 60348] [client 20.100.201.121:39979] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "ad0gobBo7Bc8I7P_P-9vzAAAAMg"]
[Tue Apr 14 00:58:10.021883 2026] [:error] [pid 60317:tid 60349] [client 20.100.201.121:44854] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad0gorBo7Bc8I7P_P-9v0gAAAMk"]
[Tue Apr 14 00:58:11.207782 2026] [:error] [pid 59913:tid 59923] [client 20.100.201.121:36052] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad0go65XvQ9C-gZtr2ybmgAAAAY"]
[Tue Apr 14 00:58:11.955731 2026] [:error] [pid 59914:tid 59968] [client 20.100.201.121:38451] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad0go-q0YMmB3OWbbUk6CwAAAFg"]
[Tue Apr 14 00:58:12.756501 2026] [:error] [pid 60317:tid 60363] [client 20.100.201.121:59681] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad0gpLBo7Bc8I7P_P-9v9wAAANc"]
[Tue Apr 14 00:58:13.410553 2026] [:error] [pid 59913:tid 59939] [client 20.100.201.121:27711] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "ad0gpa5XvQ9C-gZtr2ybnwAAABY"]
[Tue Apr 14 00:58:14.185153 2026] [:error] [pid 59913:tid 59919] [client 20.100.201.121:55489] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "ad0gpq5XvQ9C-gZtr2ybowAAAAI"]
[Tue Apr 14 00:58:14.733565 2026] [:error] [pid 59913:tid 59921] [client 20.100.201.121:5641] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "ad0gpq5XvQ9C-gZtr2ybpwAAAAQ"]
[Tue Apr 14 00:58:15.426299 2026] [:error] [pid 60317:tid 60348] [client 20.100.201.121:55686] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "ad0gp7Bo7Bc8I7P_P-9wBQAAAMg"]
[Tue Apr 14 00:58:16.118946 2026] [:error] [pid 60317:tid 60345] [client 20.100.201.121:29028] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "ad0gqLBo7Bc8I7P_P-9wCAAAAMU"]
[Tue Apr 14 00:58:16.855319 2026] [:error] [pid 59913:tid 59926] [client 20.100.201.121:52210] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "ad0gqK5XvQ9C-gZtr2ybuQAAAAk"]
[Tue Apr 14 00:58:17.408343 2026] [:error] [pid 60317:tid 60340] [client 20.100.201.121:60412] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "ad0gqbBo7Bc8I7P_P-9wDwAAAMA"]
[Tue Apr 14 00:58:18.269487 2026] [:error] [pid 59913:tid 59931] [client 20.100.201.121:28992] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "ad0gqq5XvQ9C-gZtr2ybxQAAAA4"]
[Tue Apr 14 00:58:19.390067 2026] [:error] [pid 59914:tid 59954] [client 20.100.201.121:60359] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "ad0gq-q0YMmB3OWbbUk6GwAAAEo"]
[Tue Apr 14 00:58:20.530732 2026] [:error] [pid 59913:tid 59924] [client 20.100.201.121:22251] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "ad0grK5XvQ9C-gZtr2ybywAAAAc"]
[Tue Apr 14 00:58:21.207041 2026] [:error] [pid 59913:tid 59932] [client 20.100.201.121:36698] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "ad0gra5XvQ9C-gZtr2ybzQAAAA8"]
[Tue Apr 14 00:58:22.122701 2026] [:error] [pid 59913:tid 59938] [client 20.100.201.121:5635] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "ad0grq5XvQ9C-gZtr2yb0QAAABU"]
[Tue Apr 14 00:58:22.827713 2026] [:error] [pid 60317:tid 60349] [client 20.100.201.121:22238] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ad0grrBo7Bc8I7P_P-9wHQAAAMk"]
[Tue Apr 14 00:58:23.580311 2026] [:error] [pid 60317:tid 60341] [client 20.100.201.121:21601] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ad0gr7Bo7Bc8I7P_P-9wJgAAAME"]
[Tue Apr 14 00:58:24.361801 2026] [:error] [pid 59915:tid 59980] [client 20.100.201.121:39247] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ad0gsIeTNdEemByf99ghWgAAAIk"]
[Tue Apr 14 00:58:25.475886 2026] [:error] [pid 59913:tid 59937] [client 20.100.201.121:5713] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ad0gsa5XvQ9C-gZtr2yb2QAAABQ"]
[Tue Apr 14 00:58:56.336118 2026] [proxy_fcgi:error] [pid 59913:tid 59937] [client 20.100.201.121:26439] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:59:11.912112 2026] [proxy_fcgi:error] [pid 60317:tid 60360] [client 20.100.201.121:24678] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 00:59:27.841564 2026] [:error] [pid 60317:tid 60354] [client 20.100.201.121:43784] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ad0g77Bo7Bc8I7P_P-9xYwAAAM4"]
[Tue Apr 14 00:59:28.860973 2026] [:error] [pid 60317:tid 60357] [client 20.100.201.121:52268] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ad0g8LBo7Bc8I7P_P-9xaQAAANE"]
[Tue Apr 14 00:59:29.490440 2026] [:error] [pid 60317:tid 60341] [client 20.100.201.121:24678] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ad0g8bBo7Bc8I7P_P-9xcQAAAME"]
[Tue Apr 14 00:59:30.220104 2026] [:error] [pid 59913:tid 59924] [client 20.100.201.121:39188] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ad0g8q5XvQ9C-gZtr2ycQAAAAAc"]
[Tue Apr 14 00:59:30.941656 2026] [:error] [pid 59913:tid 59938] [client 20.100.201.121:23335] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "ad0g8q5XvQ9C-gZtr2ycQQAAABU"]
[Tue Apr 14 00:59:31.919211 2026] [:error] [pid 59913:tid 59935] [client 20.100.201.121:23352] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "ad0g865XvQ9C-gZtr2ycRgAAABI"]
[Tue Apr 14 00:59:32.823985 2026] [:error] [pid 60317:tid 60343] [client 20.100.201.121:23331] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "ad0g9LBo7Bc8I7P_P-9xhAAAAMM"]
[Tue Apr 14 00:59:33.583572 2026] [:error] [pid 59915:tid 59989] [client 20.100.201.121:32448] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "ad0g9YeTNdEemByf99gh7wAAAJI"]
[Tue Apr 14 00:59:34.534361 2026] [:error] [pid 59915:tid 59979] [client 20.100.201.121:48146] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "ad0g9oeTNdEemByf99gh8QAAAIg"]
[Tue Apr 14 00:59:35.268660 2026] [:error] [pid 60317:tid 60347] [client 20.100.201.121:5524] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "ad0g97Bo7Bc8I7P_P-9xmQAAAMc"]
[Tue Apr 14 00:59:35.911743 2026] [:error] [pid 60317:tid 60341] [client 20.100.201.121:43830] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "ad0g97Bo7Bc8I7P_P-9xpAAAAME"]
[Tue Apr 14 00:59:36.734152 2026] [:error] [pid 60317:tid 60352] [client 20.100.201.121:41553] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "ad0g-LBo7Bc8I7P_P-9xsAAAAMw"]
[Tue Apr 14 00:59:37.494699 2026] [:error] [pid 60317:tid 60357] [client 20.100.201.121:53774] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "ad0g-bBo7Bc8I7P_P-9xtwAAANE"]
[Tue Apr 14 00:59:38.054926 2026] [:error] [pid 60317:tid 60355] [client 20.100.201.121:48035] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "ad0g-rBo7Bc8I7P_P-9xvQAAAM8"]
[Tue Apr 14 00:59:38.754161 2026] [:error] [pid 59913:tid 59939] [client 20.100.201.121:48015] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "ad0g-q5XvQ9C-gZtr2ycSwAAABY"]
[Tue Apr 14 00:59:39.416107 2026] [:error] [pid 59915:tid 59985] [client 20.100.201.121:45447] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "ad0g-4eTNdEemByf99gh-wAAAI4"]
[Tue Apr 14 00:59:40.085817 2026] [:error] [pid 59914:tid 59968] [client 20.100.201.121:51466] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "ad0g_Oq0YMmB3OWbbUk6sQAAAFg"]
[Tue Apr 14 00:59:41.287224 2026] [:error] [pid 59913:tid 59921] [client 20.100.201.121:48140] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "ad0g_a5XvQ9C-gZtr2ycTQAAAAQ"]
[Tue Apr 14 00:59:42.262169 2026] [:error] [pid 59914:tid 59966] [client 20.100.201.121:51513] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "ad0g_uq0YMmB3OWbbUk6tQAAAFY"]
[Tue Apr 14 00:59:42.838764 2026] [:error] [pid 60317:tid 60358] [client 20.100.201.121:41554] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "ad0g_rBo7Bc8I7P_P-9x3QAAANI"]
[Tue Apr 14 00:59:43.829729 2026] [:error] [pid 59915:tid 59974] [client 20.100.201.121:53806] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ad0g_4eTNdEemByf99giAwAAAIM"]
[Tue Apr 14 00:59:44.729680 2026] [:error] [pid 59914:tid 59965] [client 20.100.201.121:41562] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ad0hAOq0YMmB3OWbbUk6uQAAAFU"]
[Tue Apr 14 00:59:45.614309 2026] [:error] [pid 59913:tid 59924] [client 20.100.201.121:43806] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ad0hAa5XvQ9C-gZtr2ycWgAAAAc"]
[Tue Apr 14 00:59:46.978422 2026] [:error] [pid 59915:tid 59971] [client 20.100.201.121:51462] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ad0hAoeTNdEemByf99giBwAAAIA"]
[Tue Apr 14 00:59:48.288925 2026] [:error] [pid 59914:tid 59968] [client 20.100.201.121:45448] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "ad0hBOq0YMmB3OWbbUk6vwAAAFg"]
[Tue Apr 14 00:59:49.234740 2026] [:error] [pid 59913:tid 59920] [client 20.100.201.121:5552] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "ad0hBa5XvQ9C-gZtr2ycXgAAAAM"]
[Tue Apr 14 00:59:50.068713 2026] [:error] [pid 59913:tid 59941] [client 20.100.201.121:53785] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "ad0hBq5XvQ9C-gZtr2ycYQAAABg"]
[Tue Apr 14 00:59:51.179147 2026] [:error] [pid 59915:tid 59994] [client 20.100.201.121:50322] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/menu.php"] [unique_id "ad0hB4eTNdEemByf99giEwAAAJc"]
[Tue Apr 14 00:59:52.229628 2026] [:error] [pid 59915:tid 59992] [client 20.100.201.121:51476] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "ad0hCIeTNdEemByf99giGAAAAJU"]
[Tue Apr 14 00:59:53.260478 2026] [:error] [pid 60317:tid 60349] [client 20.100.201.121:38843] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "ad0hCbBo7Bc8I7P_P-9yFQAAAMk"]
[Tue Apr 14 00:59:53.908250 2026] [:error] [pid 59915:tid 59976] [client 20.100.201.121:38823] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "ad0hCYeTNdEemByf99giGgAAAIU"]
[Tue Apr 14 00:59:54.768553 2026] [:error] [pid 60317:tid 60358] [client 20.100.201.121:48001] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "ad0hCrBo7Bc8I7P_P-9yJAAAANI"]
[Tue Apr 14 00:59:55.628832 2026] [:error] [pid 59915:tid 59988] [client 20.100.201.121:38836] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "ad0hC4eTNdEemByf99giHQAAAJE"]
[Tue Apr 14 00:59:56.957348 2026] [:error] [pid 60317:tid 60349] [client 20.100.201.121:38838] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "ad0hDLBo7Bc8I7P_P-9yNgAAAMk"]
[Tue Apr 14 00:59:58.370357 2026] [:error] [pid 60317:tid 60342] [client 20.100.201.121:23321] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "ad0hDrBo7Bc8I7P_P-9yPAAAAMI"]
[Tue Apr 14 00:59:59.565415 2026] [:error] [pid 59915:tid 59986] [client 20.100.201.121:51099] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "ad0hD4eTNdEemByf99giKQAAAI8"]
[Tue Apr 14 01:00:00.631181 2026] [:error] [pid 59914:tid 59962] [client 20.100.201.121:31218] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maintura.php"] [unique_id "ad0hEOq0YMmB3OWbbUk60wAAAFI"]
[Tue Apr 14 01:00:01.370765 2026] [:error] [pid 59914:tid 59966] [client 20.100.201.121:38813] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maintura.php"] [unique_id "ad0hEeq0YMmB3OWbbUk61QAAAFY"]
[Tue Apr 14 01:00:02.796805 2026] [:error] [pid 59915:tid 59995] [client 20.100.201.121:31214] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maintura.php"] [unique_id "ad0hEoeTNdEemByf99giNQAAAJg"]
[Tue Apr 14 01:00:03.764374 2026] [:error] [pid 60317:tid 60356] [client 20.100.201.121:5937] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maintura.php"] [unique_id "ad0hE7Bo7Bc8I7P_P-9yYAAAANA"]
[Tue Apr 14 01:00:09.281202 2026] [:error] [pid 59914:tid 59957] [client 20.100.201.121:44794] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "ad0hGeq0YMmB3OWbbUk63AAAAE0"]
[Tue Apr 14 01:00:11.224344 2026] [:error] [pid 59915:tid 59994] [client 20.100.201.121:44782] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "ad0hG4eTNdEemByf99giZAAAAJc"]
[Tue Apr 14 01:00:12.747824 2026] [:error] [pid 60317:tid 60345] [client 20.100.201.121:41018] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "ad0hHLBo7Bc8I7P_P-9ykAAAAMU"]
[Tue Apr 14 01:00:14.174393 2026] [:error] [pid 59915:tid 59992] [client 20.100.201.121:5335] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "ad0hHoeTNdEemByf99gieQAAAJU"]
[Tue Apr 14 01:00:16.617029 2026] [:error] [pid 59914:tid 59952] [client 20.100.201.121:33117] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "ad0hIOq0YMmB3OWbbUk69AAAAEg"]
[Tue Apr 14 01:00:19.397046 2026] [:error] [pid 59915:tid 59977] [client 20.100.201.121:44565] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "ad0hI4eTNdEemByf99gijQAAAIY"]
[Tue Apr 14 01:00:21.958677 2026] [:error] [pid 60317:tid 60349] [client 20.100.201.121:5921] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "ad0hJbBo7Bc8I7P_P-9ywQAAAMk"]
[Tue Apr 14 01:02:06.443824 2026] [proxy_fcgi:error] [pid 59914:tid 59967] [client 20.100.201.121:30476] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:02:22.492341 2026] [proxy_fcgi:error] [pid 59915:tid 59988] [client 20.100.201.121:38505] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:02:37.023425 2026] [:error] [pid 60317:tid 60353] [client 20.100.201.121:51067] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "ad0hrbBo7Bc8I7P_P-90vQAAAM0"]
[Tue Apr 14 01:02:40.278325 2026] [:error] [pid 59914:tid 59945] [client 20.100.201.121:32411] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "ad0hsOq0YMmB3OWbbUk7zAAAAEE"]
[Tue Apr 14 01:02:44.403710 2026] [:error] [pid 59913:tid 59941] [client 20.100.201.121:48410] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "ad0htK5XvQ9C-gZtr2ydUwAAABg"]
[Tue Apr 14 01:02:48.197940 2026] [:error] [pid 59913:tid 59936] [client 20.100.201.121:48631] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "ad0huK5XvQ9C-gZtr2ydWAAAABM"]
[Tue Apr 14 01:02:50.751006 2026] [:error] [pid 60317:tid 60356] [client 20.100.201.121:5217] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ad0hurBo7Bc8I7P_P-908wAAANA"]
[Tue Apr 14 01:02:51.930180 2026] [:error] [pid 59913:tid 59941] [client 20.100.201.121:38430] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ad0hu65XvQ9C-gZtr2ydYQAAABg"]
[Tue Apr 14 01:02:52.684018 2026] [:error] [pid 59915:tid 59986] [client 20.100.201.121:44819] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ad0hvIeTNdEemByf99gkVQAAAI8"]
[Tue Apr 14 01:02:54.165040 2026] [:error] [pid 59914:tid 59958] [client 20.100.201.121:44840] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ad0hvuq0YMmB3OWbbUk74gAAAE4"]
[Tue Apr 14 01:03:01.585033 2026] [:error] [pid 59914:tid 59959] [client 20.100.201.121:37996] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ad0hxeq0YMmB3OWbbUk78QAAAE8"]
[Tue Apr 14 01:03:07.258101 2026] [:error] [pid 59915:tid 59992] [client 20.100.201.121:37986] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ad0hy4eTNdEemByf99gkdwAAAJU"]
[Tue Apr 14 01:03:09.462202 2026] [:error] [pid 60317:tid 60356] [client 20.100.201.121:53864] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ad0hzbBo7Bc8I7P_P-91JgAAANA"]
[Tue Apr 14 01:03:10.420596 2026] [:error] [pid 60317:tid 60354] [client 20.100.201.121:46431] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ad0hzrBo7Bc8I7P_P-91LAAAAM4"]
[Tue Apr 14 01:03:11.112884 2026] [:error] [pid 60317:tid 60359] [client 20.100.201.121:50260] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ad0hz7Bo7Bc8I7P_P-91LwAAANM"]
[Tue Apr 14 01:03:11.739547 2026] [:error] [pid 59914:tid 59952] [client 20.100.201.121:55738] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ad0hz-q0YMmB3OWbbUk7_QAAAEg"]
[Tue Apr 14 01:03:12.560343 2026] [:error] [pid 60317:tid 60347] [client 20.100.201.121:27663] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ad0h0LBo7Bc8I7P_P-91NwAAAMc"]
[Tue Apr 14 01:03:13.478061 2026] [:error] [pid 60317:tid 60354] [client 20.100.201.121:38002] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "ad0h0bBo7Bc8I7P_P-91OgAAAM4"]
[Tue Apr 14 01:03:14.248610 2026] [:error] [pid 60317:tid 60351] [client 20.100.201.121:49005] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "ad0h0rBo7Bc8I7P_P-91PAAAAMs"]
[Tue Apr 14 01:03:14.862540 2026] [:error] [pid 59913:tid 59923] [client 20.100.201.121:44164] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "ad0h0q5XvQ9C-gZtr2yddQAAAAY"]
[Tue Apr 14 01:03:15.541310 2026] [:error] [pid 59914:tid 59959] [client 20.100.201.121:5570] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "ad0h0-q0YMmB3OWbbUk8BAAAAE8"]
[Tue Apr 14 01:03:16.501507 2026] [:error] [pid 59915:tid 59984] [client 20.100.201.121:50243] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "ad0h1IeTNdEemByf99gk0wAAAI0"]
[Tue Apr 14 01:03:17.415151 2026] [:error] [pid 59913:tid 59928] [client 20.100.201.121:48966] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "ad0h1a5XvQ9C-gZtr2ydeQAAAAs"]
[Tue Apr 14 01:03:18.250746 2026] [:error] [pid 59914:tid 59967] [client 20.100.201.121:39978] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "ad0h1uq0YMmB3OWbbUk8EAAAAFc"]
[Tue Apr 14 01:03:18.919877 2026] [:error] [pid 60317:tid 60360] [client 20.100.201.121:52191] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "ad0h1rBo7Bc8I7P_P-91UgAAANQ"]
[Tue Apr 14 01:03:19.770473 2026] [:error] [pid 59915:tid 59979] [client 20.100.201.121:27018] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "ad0h14eTNdEemByf99gk8wAAAIg"]
[Tue Apr 14 01:03:20.499290 2026] [:error] [pid 59915:tid 59986] [client 20.100.201.121:34703] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "ad0h2IeTNdEemByf99gk-gAAAI8"]
[Tue Apr 14 01:03:21.434886 2026] [:error] [pid 60317:tid 60352] [client 20.100.201.121:55552] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "ad0h2bBo7Bc8I7P_P-91WQAAAMw"]
[Tue Apr 14 01:03:22.204105 2026] [:error] [pid 59915:tid 59988] [client 20.100.201.121:55560] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "ad0h2oeTNdEemByf99glCwAAAJE"]
[Tue Apr 14 01:03:23.596291 2026] [:error] [pid 59915:tid 59975] [client 20.100.201.121:55554] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "ad0h24eTNdEemByf99glGQAAAIQ"]
[Tue Apr 14 01:03:24.271277 2026] [:error] [pid 60317:tid 60353] [client 20.100.201.121:46408] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "ad0h3LBo7Bc8I7P_P-91YwAAAM0"]
[Tue Apr 14 01:03:25.110572 2026] [:error] [pid 59915:tid 59980] [client 20.100.201.121:46411] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "ad0h3YeTNdEemByf99glKQAAAIk"]
[Tue Apr 14 01:03:26.171340 2026] [:error] [pid 59913:tid 59938] [client 20.100.201.121:44220] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "ad0h3q5XvQ9C-gZtr2ydfwAAABU"]
[Tue Apr 14 01:03:27.788121 2026] [:error] [pid 60317:tid 60346] [client 20.100.201.121:44170] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ad0h37Bo7Bc8I7P_P-91dAAAAMY"]
[Tue Apr 14 01:03:28.948160 2026] [:error] [pid 59915:tid 59981] [client 20.100.201.121:52220] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ad0h4IeTNdEemByf99glUQAAAIo"]
[Tue Apr 14 01:03:29.769614 2026] [:error] [pid 59915:tid 59980] [client 20.100.201.121:52194] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ad0h4YeTNdEemByf99glXQAAAIk"]
[Tue Apr 14 01:03:31.069414 2026] [:error] [pid 60317:tid 60359] [client 20.100.201.121:40505] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "ad0h47Bo7Bc8I7P_P-91fwAAANM"]
[Tue Apr 14 01:03:32.104299 2026] [:error] [pid 59913:tid 59921] [client 20.100.201.121:40465] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ad0h5K5XvQ9C-gZtr2ydggAAAAQ"]
[Tue Apr 14 01:03:32.971845 2026] [:error] [pid 60317:tid 60344] [client 20.100.201.121:48976] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ad0h5LBo7Bc8I7P_P-91iAAAAMQ"]
[Tue Apr 14 01:05:03.709981 2026] [proxy_fcgi:error] [pid 59913:tid 59917] [client 20.100.201.121:59174] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:05:25.056269 2026] [proxy_fcgi:error] [pid 59914:tid 59944] [client 20.100.201.121:44544] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:05:31.124272 2026] [:error] [pid 59914:tid 59958] [client 20.100.201.121:48161] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ad0iW-q0YMmB3OWbbUk9OgAAAE4"]
[Tue Apr 14 01:05:32.152086 2026] [:error] [pid 60317:tid 60364] [client 20.100.201.121:20590] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ad0iXLBo7Bc8I7P_P-93hAAAANg"]
[Tue Apr 14 01:05:33.209121 2026] [:error] [pid 59915:tid 59989] [client 20.100.201.121:34119] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ad0iXYeTNdEemByf99gnfwAAAJI"]
[Tue Apr 14 01:05:34.869019 2026] [:error] [pid 59915:tid 59972] [client 20.100.201.121:20579] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ad0iXoeTNdEemByf99gnkQAAAIE"]
[Tue Apr 14 01:05:36.349655 2026] [:error] [pid 59915:tid 59971] [client 20.100.201.121:41566] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "ad0iYIeTNdEemByf99gnmgAAAIA"]
[Tue Apr 14 01:05:37.669674 2026] [:error] [pid 59914:tid 59955] [client 20.100.201.121:51947] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "ad0iYeq0YMmB3OWbbUk9QgAAAEs"]
[Tue Apr 14 01:05:41.170165 2026] [:error] [pid 59914:tid 59945] [client 20.100.201.121:5342] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "ad0iZeq0YMmB3OWbbUk9SgAAAEE"]
[Tue Apr 14 01:20:49.834414 2026] [proxy_fcgi:error] [pid 59913:tid 59938] [client 4.223.97.209:1117] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:21:02.104913 2026] [:error] [pid 59913:tid 59932] [client 4.223.97.209:62259] [client 4.223.97.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad0l_q5XvQ9C-gZtr2yjEQAAAA8"]
[Tue Apr 14 01:21:06.004454 2026] [proxy_fcgi:error] [pid 59915:tid 59980] [client 4.223.97.209:1370] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:21:21.356217 2026] [proxy_fcgi:error] [pid 59913:tid 59940] [client 4.223.97.209:1813] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:21:27.653082 2026] [:error] [pid 60317:tid 60344] [client 4.223.97.209:62217] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ad0mF7Bo7Bc8I7P_P--CigAAAMQ"]
[Tue Apr 14 01:21:30.715418 2026] [:error] [pid 60317:tid 60353] [client 4.223.97.209:1872] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ad0mGrBo7Bc8I7P_P--ClAAAAM0"]
[Tue Apr 14 01:21:33.714381 2026] [:error] [pid 59915:tid 59973] [client 4.223.97.209:56921] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ad0mHYeTNdEemByf99guzwAAAII"]
[Tue Apr 14 01:21:35.786371 2026] [:error] [pid 59915:tid 59994] [client 4.223.97.209:41288] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "ad0mH4eTNdEemByf99gu1wAAAJc"]
[Tue Apr 14 01:21:41.189056 2026] [:error] [pid 59913:tid 59939] [client 4.223.97.209:61308] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "ad0mJa5XvQ9C-gZtr2yjXAAAABY"]
[Tue Apr 14 01:21:47.894799 2026] [:error] [pid 59915:tid 59972] [client 4.223.97.209:41230] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "ad0mK4eTNdEemByf99gu-wAAAIE"]
[Tue Apr 14 01:21:53.367665 2026] [:error] [pid 59913:tid 59936] [client 4.223.97.209:48866] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ad0mMa5XvQ9C-gZtr2yjYwAAABM"]
[Tue Apr 14 01:21:54.824657 2026] [:error] [pid 60317:tid 60362] [client 4.223.97.209:46113] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ad0mMrBo7Bc8I7P_P--C1QAAANY"]
[Tue Apr 14 01:21:57.190619 2026] [:error] [pid 60317:tid 60343] [client 4.223.97.209:55005] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ad0mNbBo7Bc8I7P_P--C3wAAAMM"]
[Tue Apr 14 01:21:58.949694 2026] [:error] [pid 59913:tid 59929] [client 4.223.97.209:40065] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "ad0mNq5XvQ9C-gZtr2yjcgAAAAw"]
[Tue Apr 14 01:22:00.068607 2026] [:error] [pid 59914:tid 59953] [client 4.223.97.209:40075] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "ad0mOOq0YMmB3OWbbUlDWgAAAEk"]
[Tue Apr 14 01:22:01.210872 2026] [:error] [pid 59915:tid 59989] [client 4.223.97.209:44747] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "ad0mOYeTNdEemByf99gvEAAAAJI"]
[Tue Apr 14 01:22:02.626771 2026] [:error] [pid 59914:tid 59967] [client 4.223.97.209:64573] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "ad0mOuq0YMmB3OWbbUlDXQAAAFc"]
[Tue Apr 14 01:22:03.541764 2026] [:error] [pid 60317:tid 60348] [client 4.223.97.209:44741] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "ad0mO7Bo7Bc8I7P_P--C8gAAAMg"]
[Tue Apr 14 01:22:06.311563 2026] [:error] [pid 60317:tid 60349] [client 4.223.97.209:43625] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ad0mPrBo7Bc8I7P_P--C_QAAAMk"]
[Tue Apr 14 01:22:07.380280 2026] [:error] [pid 60317:tid 60344] [client 4.223.97.209:49592] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ad0mP7Bo7Bc8I7P_P--DAQAAAMQ"]
[Tue Apr 14 01:22:08.840455 2026] [:error] [pid 59915:tid 59978] [client 4.223.97.209:58701] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ad0mQIeTNdEemByf99gvHQAAAIc"]
[Tue Apr 14 01:22:10.914322 2026] [:error] [pid 59915:tid 59974] [client 4.223.97.209:57641] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ad0mQoeTNdEemByf99gvIAAAAIM"]
[Tue Apr 14 01:22:14.002662 2026] [:error] [pid 59915:tid 59995] [client 4.223.97.209:64538] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "ad0mRoeTNdEemByf99gvKgAAAJg"]
[Tue Apr 14 01:22:24.071939 2026] [:error] [pid 59915:tid 59979] [client 4.223.97.209:54979] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "ad0mUIeTNdEemByf99gvNgAAAIg"]
[Tue Apr 14 01:22:49.136919 2026] [:error] [pid 60317:tid 60351] [client 4.223.97.209:57607] [client 4.223.97.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "ad0mabBo7Bc8I7P_P--DbwAAAMs"]
[Tue Apr 14 01:22:57.573772 2026] [proxy_fcgi:error] [pid 60317:tid 60356] [client 4.223.97.209:58721] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:23:14.059410 2026] [proxy_fcgi:error] [pid 59915:tid 59985] [client 4.223.97.209:40113] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:23:25.078267 2026] [proxy_fcgi:error] [pid 60317:tid 60356] [client 4.223.97.209:40088] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:23:35.037878 2026] [:error] [pid 59914:tid 59966] [client 4.223.97.209:55005] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "ad0ml-q0YMmB3OWbbUlD3wAAAFY"]
[Tue Apr 14 01:23:36.119561 2026] [:error] [pid 59915:tid 59987] [client 4.223.97.209:40123] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "ad0mmIeTNdEemByf99gv3wAAAJA"]
[Tue Apr 14 01:23:37.633392 2026] [:error] [pid 59913:tid 59920] [client 4.223.97.209:60333] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "ad0mma5XvQ9C-gZtr2ykLAAAAAM"]
[Tue Apr 14 01:23:40.469007 2026] [:error] [pid 59915:tid 59992] [client 4.223.97.209:44756] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/roksad1.php"] [unique_id "ad0mnIeTNdEemByf99gv9QAAAJU"]
[Tue Apr 14 01:23:42.942149 2026] [:error] [pid 60317:tid 60342] [client 4.223.97.209:64524] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "ad0mnrBo7Bc8I7P_P--ERwAAAMI"]
[Tue Apr 14 01:23:45.661858 2026] [:error] [pid 59913:tid 59940] [client 4.223.97.209:60309] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "ad0moa5XvQ9C-gZtr2ykMwAAABc"]
[Tue Apr 14 01:23:49.310788 2026] [:error] [pid 60317:tid 60362] [client 4.223.97.209:60307] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "ad0mpbBo7Bc8I7P_P--EXwAAANY"]
[Tue Apr 14 01:23:52.807765 2026] [:error] [pid 59915:tid 59974] [client 4.223.97.209:54981] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "ad0mqIeTNdEemByf99gwEwAAAIM"]
[Tue Apr 14 01:23:59.486838 2026] [:error] [pid 59914:tid 59947] [client 4.223.97.209:60319] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ad0mr-q0YMmB3OWbbUlECQAAAEM"]
[Tue Apr 14 01:24:11.841996 2026] [:error] [pid 59915:tid 59991] [client 4.223.97.209:60301] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ad0mu4eTNdEemByf99gwiAAAAJQ"]
[Tue Apr 14 01:24:12.845210 2026] [:error] [pid 60317:tid 60346] [client 4.223.97.209:60328] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ad0mvLBo7Bc8I7P_P--EvwAAAMY"]
[Tue Apr 14 01:24:13.902896 2026] [:error] [pid 60317:tid 60352] [client 4.223.97.209:55003] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ad0mvbBo7Bc8I7P_P--ExwAAAMw"]
[Tue Apr 14 01:24:16.108137 2026] [:error] [pid 60317:tid 60350] [client 4.223.97.209:49599] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ad0mwLBo7Bc8I7P_P--E3AAAAMo"]
[Tue Apr 14 01:24:17.965205 2026] [:error] [pid 59915:tid 59972] [client 4.223.97.209:55016] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "ad0mwYeTNdEemByf99gwswAAAIE"]
[Tue Apr 14 01:24:19.411418 2026] [:error] [pid 59915:tid 59986] [client 4.223.97.209:47258] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "ad0mw4eTNdEemByf99gwvAAAAI8"]
[Tue Apr 14 01:24:22.758037 2026] [:error] [pid 59915:tid 59975] [client 4.223.97.209:60320] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "ad0mxoeTNdEemByf99gw0QAAAIQ"]
[Tue Apr 14 01:24:24.545500 2026] [:error] [pid 60317:tid 60343] [client 4.223.97.209:50491] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "ad0myLBo7Bc8I7P_P--E9wAAAMM"]
[Tue Apr 14 01:24:27.759941 2026] [:error] [pid 59915:tid 59988] [client 4.223.97.209:49575] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "ad0my4eTNdEemByf99gw3AAAAJE"]
[Tue Apr 14 01:24:30.192915 2026] [:error] [pid 59915:tid 59978] [client 4.223.97.209:44749] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "ad0mzoeTNdEemByf99gw5QAAAIc"]
[Tue Apr 14 01:25:17.004423 2026] [proxy_fcgi:error] [pid 60317:tid 60346] [client 4.223.97.209:49937] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:25:31.972350 2026] [proxy_fcgi:error] [pid 59914:tid 59965] [client 4.223.97.209:56963] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:25:32.544124 2026] [proxy_fcgi:error] [pid 60317:tid 60352] [client 4.223.97.209:42562] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:26:01.350457 2026] [:error] [pid 59914:tid 59958] [client 4.223.97.209:47818] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "ad0nKeq0YMmB3OWbbUlFEgAAAE4"]
[Tue Apr 14 01:26:03.073568 2026] [:error] [pid 59915:tid 59993] [client 4.223.97.209:52317] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "ad0nK4eTNdEemByf99gxrwAAAJY"]
[Tue Apr 14 01:26:05.120045 2026] [:error] [pid 59913:tid 59931] [client 4.223.97.209:51568] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "ad0nLa5XvQ9C-gZtr2ylXAAAAA4"]
[Tue Apr 14 01:26:08.360791 2026] [:error] [pid 59914:tid 59944] [client 4.223.97.209:47863] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "ad0nMOq0YMmB3OWbbUlFGQAAAEA"]
[Tue Apr 14 01:26:12.899369 2026] [:error] [pid 60317:tid 60358] [client 4.223.97.209:43031] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "ad0nNLBo7Bc8I7P_P--G4AAAANI"]
[Tue Apr 14 01:26:17.686556 2026] [:error] [pid 59915:tid 59990] [client 4.223.97.209:2007] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "ad0nOYeTNdEemByf99gx1QAAAJM"]
[Tue Apr 14 01:26:18.497992 2026] [:error] [pid 59914:tid 59953] [client 4.223.97.209:52347] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "ad0nOuq0YMmB3OWbbUlFKgAAAEk"]
[Tue Apr 14 01:26:27.774866 2026] [:error] [pid 59915:tid 59977] [client 4.223.97.209:1822] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad0nQ4eTNdEemByf99gx7wAAAIY"]
[Tue Apr 14 01:26:28.946005 2026] [:error] [pid 59913:tid 59920] [client 4.223.97.209:1839] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad0nRK5XvQ9C-gZtr2yljQAAAAM"]
[Tue Apr 14 01:26:31.644074 2026] [:error] [pid 59915:tid 59993] [client 4.223.97.209:51537] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad0nR4eTNdEemByf99gx9wAAAJY"]
[Tue Apr 14 01:26:33.777807 2026] [:error] [pid 59913:tid 59921] [client 4.223.97.209:51516] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad0nSa5XvQ9C-gZtr2ylmAAAAAQ"]
[Tue Apr 14 01:26:36.926670 2026] [:error] [pid 60317:tid 60355] [client 4.223.97.209:53839] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "ad0nTLBo7Bc8I7P_P--HGAAAAM8"]
[Tue Apr 14 01:26:37.990686 2026] [:error] [pid 60317:tid 60363] [client 4.223.97.209:56203] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "ad0nTbBo7Bc8I7P_P--HHgAAANc"]
[Tue Apr 14 01:26:42.494994 2026] [:error] [pid 60317:tid 60361] [client 4.223.97.209:41937] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "ad0nUrBo7Bc8I7P_P--HLgAAANU"]
[Tue Apr 14 01:26:51.466527 2026] [:error] [pid 59914:tid 59950] [client 4.223.97.209:51478] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gz.php"] [unique_id "ad0nW-q0YMmB3OWbbUlFbQAAAEY"]
[Tue Apr 14 01:26:53.642943 2026] [:error] [pid 59914:tid 59965] [client 4.223.97.209:43083] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gz.php"] [unique_id "ad0nXeq0YMmB3OWbbUlFdwAAAFU"]
[Tue Apr 14 01:26:56.207886 2026] [:error] [pid 60317:tid 60361] [client 4.223.97.209:41964] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gz.php"] [unique_id "ad0nYLBo7Bc8I7P_P--HRgAAANU"]
[Tue Apr 14 01:26:57.701559 2026] [:error] [pid 59915:tid 59978] [client 4.223.97.209:43538] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gz.php"] [unique_id "ad0nYYeTNdEemByf99gyIwAAAIc"]
[Tue Apr 14 01:27:34.805041 2026] [proxy_fcgi:error] [pid 59914:tid 59962] [client 4.223.97.209:51485] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:27:51.963300 2026] [proxy_fcgi:error] [pid 59914:tid 59948] [client 4.223.97.209:62236] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:28:01.003259 2026] [proxy_fcgi:error] [pid 60317:tid 60357] [client 4.223.97.209:43544] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:28:15.854311 2026] [proxy_fcgi:error] [pid 59914:tid 59946] [client 4.223.97.209:1701] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:28:29.786809 2026] [:error] [pid 59915:tid 59982] [client 4.223.97.209:56202] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "ad0nvYeTNdEemByf99gzHwAAAIs"]
[Tue Apr 14 01:28:31.402082 2026] [:error] [pid 59913:tid 59925] [client 4.223.97.209:51482] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "ad0nv65XvQ9C-gZtr2ymIAAAAAg"]
[Tue Apr 14 01:28:36.429656 2026] [:error] [pid 59914:tid 59962] [client 4.223.97.209:1722] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "ad0nxOq0YMmB3OWbbUlGbAAAAFI"]
[Tue Apr 14 01:28:37.280610 2026] [:error] [pid 59915:tid 59993] [client 4.223.97.209:1696] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "ad0nxYeTNdEemByf99gzMQAAAJY"]
[Tue Apr 14 01:28:41.687606 2026] [:error] [pid 60317:tid 60343] [client 4.223.97.209:40715] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "ad0nybBo7Bc8I7P_P--I1wAAAMM"]
[Tue Apr 14 01:28:44.955846 2026] [:error] [pid 59913:tid 59929] [client 4.223.97.209:1705] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "ad0nzK5XvQ9C-gZtr2ymLwAAAAw"]
[Tue Apr 14 01:28:46.862869 2026] [:error] [pid 60317:tid 60361] [client 4.223.97.209:41975] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "ad0nzrBo7Bc8I7P_P--I5QAAANU"]
[Tue Apr 14 01:28:51.993156 2026] [:error] [pid 60317:tid 60348] [client 4.223.97.209:51468] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "ad0n07Bo7Bc8I7P_P--I7wAAAMg"]
[Tue Apr 14 01:29:01.888122 2026] [:error] [pid 60317:tid 60356] [client 4.223.97.209:56238] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "ad0n3bBo7Bc8I7P_P--JNAAAANA"]
[Tue Apr 14 01:29:10.977348 2026] [:error] [pid 60317:tid 60357] [client 4.223.97.209:55521] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper.php"] [unique_id "ad0n5rBo7Bc8I7P_P--JQAAAANE"]
[Tue Apr 14 01:29:12.663437 2026] [:error] [pid 60317:tid 60358] [client 4.223.97.209:55494] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper.php"] [unique_id "ad0n6LBo7Bc8I7P_P--JRAAAANI"]
[Tue Apr 14 01:29:25.799357 2026] [:error] [pid 59913:tid 59934] [client 4.223.97.209:1707] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxpass.php"] [unique_id "ad0n9a5XvQ9C-gZtr2ymdAAAABE"]
[Tue Apr 14 01:29:48.900173 2026] [proxy_fcgi:error] [pid 59915:tid 59978] [client 4.223.97.209:41905] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:30:07.651248 2026] [proxy_fcgi:error] [pid 59915:tid 59986] [client 4.223.97.209:40761] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:30:13.607763 2026] [:error] [pid 60317:tid 60361] [client 4.223.97.209:1446] [client 4.223.97.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad0oJbBo7Bc8I7P_P--KHAAAANU"]
[Tue Apr 14 01:30:24.063208 2026] [proxy_fcgi:error] [pid 60317:tid 60361] [client 4.223.97.209:55546] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:30:24.631366 2026] [proxy_fcgi:error] [pid 59913:tid 59919] [client 4.223.97.209:55541] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:30:33.087173 2026] [:error] [pid 59913:tid 59930] [client 4.223.97.209:55547] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "ad0oOa5XvQ9C-gZtr2ynAQAAAA0"]
[Tue Apr 14 01:30:35.220827 2026] [:error] [pid 59915:tid 59990] [client 4.223.97.209:56200] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "ad0oO4eTNdEemByf99g0tAAAAJM"]
[Tue Apr 14 01:30:42.685941 2026] [:error] [pid 59915:tid 59975] [client 4.223.97.209:41339] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "ad0oQoeTNdEemByf99g0wgAAAIQ"]
[Tue Apr 14 01:30:47.348587 2026] [:error] [pid 60317:tid 60341] [client 4.223.97.209:56220] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "ad0oR7Bo7Bc8I7P_P--KrQAAAME"]
[Tue Apr 14 01:30:48.582245 2026] [:error] [pid 59915:tid 59993] [client 4.223.97.209:1461] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ad0oSIeTNdEemByf99g00QAAAJY"]
[Tue Apr 14 01:30:50.417884 2026] [:error] [pid 59915:tid 59991] [client 4.223.97.209:63914] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ad0oSoeTNdEemByf99g04gAAAJQ"]
[Tue Apr 14 01:30:51.984802 2026] [:error] [pid 59913:tid 59931] [client 4.223.97.209:55537] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ad0oS65XvQ9C-gZtr2ynFQAAAA4"]
[Tue Apr 14 01:30:56.245445 2026] [:error] [pid 60317:tid 60364] [client 4.223.97.209:47317] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ad0oULBo7Bc8I7P_P--K1QAAANg"]
[Tue Apr 14 01:30:57.098792 2026] [:error] [pid 59915:tid 59992] [client 4.223.97.209:56206] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xynz.php"] [unique_id "ad0oUYeTNdEemByf99g0-AAAAJU"]
[Tue Apr 14 01:30:58.213300 2026] [:error] [pid 60317:tid 60359] [client 4.223.97.209:1245] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xynz.php"] [unique_id "ad0oUrBo7Bc8I7P_P--K3gAAANM"]
[Tue Apr 14 01:31:00.036599 2026] [:error] [pid 59915:tid 59971] [client 4.223.97.209:41339] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xynz.php"] [unique_id "ad0oVIeTNdEemByf99g1AgAAAIA"]
[Tue Apr 14 01:31:01.667188 2026] [:error] [pid 59915:tid 59982] [client 4.223.97.209:59733] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xynz.php"] [unique_id "ad0oVYeTNdEemByf99g1CQAAAIs"]
[Tue Apr 14 01:31:02.562397 2026] [:error] [pid 59913:tid 59926] [client 4.223.97.209:1781] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-01ul.php"] [unique_id "ad0oVq5XvQ9C-gZtr2ynHgAAAAk"]
[Tue Apr 14 01:31:04.413266 2026] [:error] [pid 59914:tid 59961] [client 4.223.97.209:57576] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-01ul.php"] [unique_id "ad0oWOq0YMmB3OWbbUlHkwAAAFE"]
[Tue Apr 14 01:31:05.381493 2026] [:error] [pid 60317:tid 60357] [client 4.223.97.209:65260] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-01ul.php"] [unique_id "ad0oWbBo7Bc8I7P_P--K8gAAANE"]
[Tue Apr 14 01:31:06.389981 2026] [:error] [pid 59913:tid 59941] [client 4.223.97.209:47801] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-01ul.php"] [unique_id "ad0oWq5XvQ9C-gZtr2ynIQAAABg"]
[Tue Apr 14 01:31:07.351131 2026] [:error] [pid 59913:tid 59924] [client 4.223.97.209:43928] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e7.php"] [unique_id "ad0oW65XvQ9C-gZtr2ynJAAAAAc"]
[Tue Apr 14 01:31:15.845781 2026] [:error] [pid 60317:tid 60344] [client 4.223.97.209:65278] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e7.php"] [unique_id "ad0oY7Bo7Bc8I7P_P--LCQAAAMQ"]
[Tue Apr 14 01:31:24.873466 2026] [:error] [pid 60317:tid 60358] [client 4.223.97.209:46080] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "ad0obLBo7Bc8I7P_P--LKgAAANI"]
[Tue Apr 14 01:31:26.323418 2026] [:error] [pid 59914:tid 59962] [client 4.223.97.209:46609] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "ad0obuq0YMmB3OWbbUlHuQAAAFI"]
[Tue Apr 14 01:31:29.462531 2026] [:error] [pid 60317:tid 60350] [client 4.223.97.209:46649] [client 4.223.97.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "ad0ocbBo7Bc8I7P_P--LOwAAAMo"]
[Tue Apr 14 01:32:02.564396 2026] [proxy_fcgi:error] [pid 60317:tid 60358] [client 4.223.97.209:56178] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:32:16.796614 2026] [proxy_fcgi:error] [pid 59913:tid 59921] [client 4.223.97.209:50514] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:32:49.567622 2026] [proxy_fcgi:error] [pid 59915:tid 59974] [client 4.223.97.209:42552] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 01:33:00.371427 2026] [proxy_fcgi:error] [pid 59915:tid 59986] [client 4.223.97.209:1147] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 05:30:50.057262 2026] [:error] [pid 64393:tid 64403] [client 216.73.216.106:13430] [client 216.73.216.106] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||makifim.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/robots.txt"] [unique_id "ad1giuClKltJhW50hKPNEQAAAQg"]
[Tue Apr 14 07:05:01.673038 2026] [proxy_fcgi:error] [pid 35713:tid 35731] [client 192.71.224.103:36871] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 14 08:24:53.809482 2026] [:error] [pid 37048:tid 37072] [client 216.73.216.106:13816] [client 216.73.216.106] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||makifim.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/robots.txt"] [unique_id "ad2JVZ52Bo1OyzeXo_yQtAAAARU"]
[Tue Apr 14 15:55:11.721119 2026] [autoindex:error] [pid 59985:tid 60015] [client 164.68.118.19:62485] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 14 23:59:36.369007 2026] [:error] [pid 3810:tid 3835] [client 216.81.248.211:53610] [client 216.81.248.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "ad5kaMqc5XaYZhFXVGfsIQAAAZY"]
[Wed Apr 15 07:04:33.294953 2026] [proxy_fcgi:error] [pid 4065:tid 4094] [client 45.131.195.161:65427] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:04:55.534115 2026] [proxy_fcgi:error] [pid 45504:tid 45507] [client 45.131.195.197:59235] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:05:14.153301 2026] [:error] [pid 4169:tid 4184] [client 45.131.195.186:56229] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad7IKh15U5D-N99n_jKmpAAAAMw"]
[Wed Apr 15 07:05:17.694996 2026] [proxy_fcgi:error] [pid 4067:tid 4149] [client 45.131.195.174:55333] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:05:18.147155 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.171:34795] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ad7ILh15U5D-N99n_jKmtwAAAMA"]
[Wed Apr 15 07:05:29.244882 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.174:54035] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad7IOR15U5D-N99n_jKmzwAAAMM"]
[Wed Apr 15 07:05:39.022718 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.116:61183] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ad7IQ63iO9_fE_IQEMlsTQAAAQ4"]
[Wed Apr 15 07:05:50.054978 2026] [proxy_fcgi:error] [pid 45504:tid 45506] [client 45.131.195.125:54117] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:05:51.573019 2026] [:error] [pid 4065:tid 4086] [client 45.131.195.136:46045] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ad7ITwWArgJTHu2_6OzZegAAAAo"]
[Wed Apr 15 07:05:54.616167 2026] [:error] [pid 4065:tid 4097] [client 45.131.195.155:44043] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ad7IUgWArgJTHu2_6OzZfAAAABU"]
[Wed Apr 15 07:05:55.289738 2026] [:error] [pid 4067:tid 4144] [client 45.131.195.195:42261] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ad7IU-5XHBJU8ZrRxZ1XrwAAAI0"]
[Wed Apr 15 07:05:55.758873 2026] [:error] [pid 4169:tid 4183] [client 45.131.195.131:35931] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ad7IUx15U5D-N99n_jKm4gAAAMs"]
[Wed Apr 15 07:05:56.473728 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.169:62257] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ad7IVB15U5D-N99n_jKm6AAAAM4"]
[Wed Apr 15 07:05:56.992898 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.140:47161] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ad7IVK3iO9_fE_IQEMlsfwAAAQ4"]
[Wed Apr 15 07:06:00.221643 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.186:33293] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ad7IWK3iO9_fE_IQEMlshwAAARA"]
[Wed Apr 15 07:06:03.768384 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.176:37243] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "ad7IW63iO9_fE_IQEMlslQAAAQM"]
[Wed Apr 15 07:06:09.541132 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.151:31129] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ad7IYa3iO9_fE_IQEMlspwAAAQg"]
[Wed Apr 15 07:06:12.269617 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.125:40571] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ad7IZB15U5D-N99n_jKnEwAAAMY"]
[Wed Apr 15 07:06:17.170067 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.170:45851] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ad7Iaa3iO9_fE_IQEMlsvAAAAQ8"]
[Wed Apr 15 07:06:30.500330 2026] [:error] [pid 4066:tid 4127] [client 45.131.195.129:37371] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ad7IdoC2YXfSPsC9O_CDpAAAAFc"]
[Wed Apr 15 07:06:33.862390 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.164:43467] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ad7IeR15U5D-N99n_jKnLQAAAMM"]
[Wed Apr 15 07:06:38.839939 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.134:50915] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ad7Ifq3iO9_fE_IQEMls_AAAAQQ"]
[Wed Apr 15 07:06:41.805487 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.161:44747] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ad7Iga3iO9_fE_IQEMltCAAAARQ"]
[Wed Apr 15 07:06:52.236016 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.251:58067] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ad7IjK3iO9_fE_IQEMltMgAAAQQ"]
[Wed Apr 15 07:06:55.069576 2026] [:error] [pid 4066:tid 4119] [client 45.131.195.170:61543] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ad7Ij4C2YXfSPsC9O_CDvwAAAE8"]
[Wed Apr 15 07:06:58.439527 2026] [:error] [pid 4066:tid 4112] [client 45.131.195.160:46851] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ad7IkoC2YXfSPsC9O_CDygAAAEg"]
[Wed Apr 15 07:07:00.125192 2026] [:error] [pid 4067:tid 4136] [client 45.131.195.164:33253] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ad7IlO5XHBJU8ZrRxZ1X_QAAAIU"]
[Wed Apr 15 07:07:00.607024 2026] [:error] [pid 4066:tid 4107] [client 45.131.195.126:39567] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ad7IlIC2YXfSPsC9O_CDzQAAAEM"]
[Wed Apr 15 07:07:09.507703 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.159:49359] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ad7InR15U5D-N99n_jKnhAAAAMk"]
[Wed Apr 15 07:07:10.107824 2026] [:error] [pid 4067:tid 4154] [client 45.131.195.151:35693] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ad7Inu5XHBJU8ZrRxZ1YEgAAAJc"]
[Wed Apr 15 07:07:10.880279 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.189:47335] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ad7Inq3iO9_fE_IQEMltYgAAAQI"]
[Wed Apr 15 07:07:13.440734 2026] [proxy_fcgi:error] [pid 45504:tid 45509] [client 45.131.195.180:53271] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:07:29.679557 2026] [:error] [pid 45504:tid 45523] [client 45.131.195.166:46923] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ad7Isa3iO9_fE_IQEMltnAAAARE"]
[Wed Apr 15 07:07:31.744412 2026] [proxy_fcgi:error] [pid 4169:tid 4182] [client 45.131.195.121:20559] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:07:35.314080 2026] [:error] [pid 4066:tid 4106] [client 45.131.195.120:61685] [client 45.131.195.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.120, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ad7It4C2YXfSPsC9O_CD5wAAAEI"]
[Wed Apr 15 07:07:42.315098 2026] [proxy_fcgi:error] [pid 4066:tid 4113] [client 45.131.195.120:61685] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:07:59.063807 2026] [proxy_fcgi:error] [pid 45504:tid 45507] [client 45.131.195.156:48469] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:07:59.552140 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.169:35921] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad7Iz63iO9_fE_IQEMlt2AAAARA"]
[Wed Apr 15 07:08:05.113275 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.191:55357] [client 45.131.195.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.191, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ad7I1a3iO9_fE_IQEMlt7gAAAQQ"]
[Wed Apr 15 07:08:09.974340 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.191:55357] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "ad7I2a3iO9_fE_IQEMluAQAAAQ8"]
[Wed Apr 15 07:08:22.148787 2026] [proxy_fcgi:error] [pid 4169:tid 4197] [client 45.131.195.171:39787] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:08:27.588596 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.135:50549] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ad7I6x15U5D-N99n_jKoUwAAANM"]
[Wed Apr 15 07:08:44.942073 2026] [:error] [pid 4067:tid 4149] [client 45.131.195.180:34155] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ad7I_O5XHBJU8ZrRxZ1YaQAAAJI"]
[Wed Apr 15 07:08:51.016432 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.140:57773] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ad7JAx15U5D-N99n_jKoigAAAMQ"]
[Wed Apr 15 07:08:57.885584 2026] [:error] [pid 4065:tid 4099] [client 45.131.195.161:49511] [client 45.131.195.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.161, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ad7JCQWArgJTHu2_6OzZ3wAAABc"]
[Wed Apr 15 07:09:00.143074 2026] [:error] [pid 4065:tid 4079] [client 45.131.195.161:49511] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ad7JDAWArgJTHu2_6OzZ4QAAAAM"]
[Wed Apr 15 07:09:01.333781 2026] [proxy_fcgi:error] [pid 45504:tid 45508] [client 45.131.195.129:30743] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:09:33.081308 2026] [:error] [pid 4067:tid 4140] [client 45.131.195.141:20457] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ad7JLe5XHBJU8ZrRxZ1YrwAAAIk"]
[Wed Apr 15 07:09:40.767845 2026] [proxy_fcgi:error] [pid 4066:tid 4126] [client 45.131.195.175:46463] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:09:42.419131 2026] [:error] [pid 4066:tid 4108] [client 45.131.195.150:47453] [client 45.131.195.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.150, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ad7JNoC2YXfSPsC9O_CEUAAAAEQ"]
[Wed Apr 15 07:09:53.220630 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.150:47453] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ad7JQYC2YXfSPsC9O_CEXQAAAFM"]
[Wed Apr 15 07:09:57.980310 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.125:63481] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ad7JRa3iO9_fE_IQEMlvAAAAAQU"]
[Wed Apr 15 07:10:03.730645 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.171:47449] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ad7JSx15U5D-N99n_jKo-wAAAMI"]
[Wed Apr 15 07:10:12.967937 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.169:21031] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ad7JVB15U5D-N99n_jKpDQAAAMA"]
[Wed Apr 15 07:10:13.513788 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.184:44621] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ad7JVR15U5D-N99n_jKpEAAAAMQ"]
[Wed Apr 15 07:10:22.735539 2026] [proxy_fcgi:error] [pid 45504:tid 45518] [client 45.131.195.131:44807] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:10:24.624956 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.130:57817] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ad7JYK3iO9_fE_IQEMlvWgAAAQA"]
[Wed Apr 15 07:10:25.556642 2026] [:error] [pid 4065:tid 4087] [client 45.131.195.154:40571] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ad7JYQWArgJTHu2_6OzaFwAAAAs"]
[Wed Apr 15 07:10:35.084428 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.119:39733] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ad7Ja63iO9_fE_IQEMlvbgAAARc"]
[Wed Apr 15 07:10:43.677058 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.154:26297] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ad7Jc63iO9_fE_IQEMlvlQAAARQ"]
[Wed Apr 15 07:10:49.111714 2026] [:error] [pid 4067:tid 4136] [client 45.131.195.119:28175] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "ad7Jee5XHBJU8ZrRxZ1ZGQAAAIU"]
[Wed Apr 15 07:10:55.255209 2026] [proxy_fcgi:error] [pid 45504:tid 45522] [client 45.131.195.190:57109] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:10:56.275682 2026] [:error] [pid 4065:tid 4085] [client 45.131.195.174:39903] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ad7JgAWArgJTHu2_6OzaKgAAAAk"]
[Wed Apr 15 07:11:13.399456 2026] [:error] [pid 4065:tid 4085] [client 45.131.195.181:53549] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ad7JkQWArgJTHu2_6OzaPgAAAAk"]
[Wed Apr 15 07:11:13.956370 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.171:58769] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ad7Jka3iO9_fE_IQEMlvwwAAAQI"]
[Wed Apr 15 07:11:14.450400 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.166:27901] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ad7Jkq3iO9_fE_IQEMlvxwAAARA"]
[Wed Apr 15 07:11:14.982912 2026] [:error] [pid 4066:tid 4107] [client 45.131.195.140:43747] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ad7JkoC2YXfSPsC9O_CErwAAAEM"]
[Wed Apr 15 07:11:20.317771 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.129:25821] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ad7JmK3iO9_fE_IQEMlv1QAAAQ4"]
[Wed Apr 15 07:11:20.838588 2026] [:error] [pid 4066:tid 4105] [client 45.131.195.195:21677] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ad7JmIC2YXfSPsC9O_CEvQAAAEE"]
[Wed Apr 15 07:11:24.789324 2026] [proxy_fcgi:error] [pid 45504:tid 45524] [client 45.131.195.134:54023] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:11:25.541211 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.174:54187] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad7Jne5XHBJU8ZrRxZ1ZPgAAAIs"]
[Wed Apr 15 07:11:25.984269 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.197:49449] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ad7Jna3iO9_fE_IQEMlv4QAAAQk"]
[Wed Apr 15 07:11:26.440978 2026] [:error] [pid 4065:tid 4078] [client 45.131.195.120:31335] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ad7JngWArgJTHu2_6OzaQwAAAAI"]
[Wed Apr 15 07:11:27.126766 2026] [:error] [pid 4067:tid 4133] [client 45.131.195.156:58205] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ad7Jn-5XHBJU8ZrRxZ1ZQQAAAII"]
[Wed Apr 15 07:11:27.800801 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.159:60281] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ad7Jn63iO9_fE_IQEMlv5AAAARc"]
[Wed Apr 15 07:11:30.572529 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.149:38365] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ad7Joq3iO9_fE_IQEMlv7wAAAQM"]
[Wed Apr 15 07:11:40.957144 2026] [:error] [pid 4169:tid 4197] [client 45.131.195.165:21831] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ad7JrB15U5D-N99n_jKpzwAAANY"]
[Wed Apr 15 07:11:58.268550 2026] [proxy_fcgi:error] [pid 45504:tid 45524] [client 45.131.195.250:62267] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:12:02.543037 2026] [:error] [pid 4169:tid 4192] [client 45.131.195.191:44755] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ad7Jwh15U5D-N99n_jKp7AAAANI"]
[Wed Apr 15 07:12:07.231475 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.141:37547] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ad7Jx63iO9_fE_IQEMlwWQAAAQg"]
[Wed Apr 15 07:12:07.918164 2026] [:error] [pid 4169:tid 4189] [client 45.131.195.140:64849] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ad7Jxx15U5D-N99n_jKp7gAAANA"]
[Wed Apr 15 07:12:16.762652 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.119:58807] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ad7J0K3iO9_fE_IQEMlwbQAAAQg"]
[Wed Apr 15 07:12:24.028811 2026] [proxy_fcgi:error] [pid 45504:tid 45522] [client 45.131.195.185:60505] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:12:24.353161 2026] [proxy_fcgi:error] [pid 45504:tid 45530] [client 45.131.195.185:60505] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:12:24.618198 2026] [proxy_fcgi:error] [pid 45504:tid 45523] [client 45.131.195.185:60505] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:12:26.920199 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.185:60505] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ad7J2q3iO9_fE_IQEMlxCQAAAQ8"]
[Wed Apr 15 07:12:27.374731 2026] [:error] [pid 4067:tid 4152] [client 45.131.195.179:37417] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ad7J2-5XHBJU8ZrRxZ1ZdwAAAJU"]
[Wed Apr 15 07:12:28.572882 2026] [:error] [pid 4066:tid 4116] [client 45.131.195.131:29993] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ad7J3IC2YXfSPsC9O_CFIwAAAEw"]
[Wed Apr 15 07:12:29.363757 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.189:33395] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ad7J3YC2YXfSPsC9O_CFJAAAAFM"]
[Wed Apr 15 07:12:30.593008 2026] [:error] [pid 45504:tid 45525] [client 45.131.195.250:47205] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ad7J3q3iO9_fE_IQEMlxEAAAARM"]
[Wed Apr 15 07:12:31.155367 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.130:46049] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ad7J363iO9_fE_IQEMlxFAAAAQY"]
[Wed Apr 15 07:12:34.019748 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.136:37287] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ad7J4oC2YXfSPsC9O_CFKQAAAE4"]
[Wed Apr 15 07:12:34.460336 2026] [:error] [pid 4169:tid 4189] [client 45.131.195.180:60417] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ad7J4h15U5D-N99n_jKqNwAAANA"]
[Wed Apr 15 07:12:34.910358 2026] [:error] [pid 4066:tid 4126] [client 45.131.195.197:55601] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ad7J4oC2YXfSPsC9O_CFKgAAAFY"]
[Wed Apr 15 07:12:37.578812 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.120:64897] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ad7J5R15U5D-N99n_jKqPgAAAME"]
[Wed Apr 15 07:12:42.875283 2026] [:error] [pid 4067:tid 4146] [client 45.131.195.175:23525] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ad7J6u5XHBJU8ZrRxZ1ZlQAAAI8"]
[Wed Apr 15 07:12:44.115715 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.185:57303] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ad7J7O5XHBJU8ZrRxZ1ZnQAAAI4"]
[Wed Apr 15 07:12:50.161784 2026] [:error] [pid 4067:tid 4131] [client 45.131.195.166:39667] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ad7J8u5XHBJU8ZrRxZ1ZwgAAAIA"]
[Wed Apr 15 07:12:54.744874 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.119:37751] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ad7J9oC2YXfSPsC9O_CFPAAAAE4"]
[Wed Apr 15 07:13:04.655648 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.159:46085] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ad7KAK3iO9_fE_IQEMlxSAAAAQc"]
[Wed Apr 15 07:13:16.314362 2026] [:error] [pid 4067:tid 4139] [client 45.131.195.126:44499] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ad7KDO5XHBJU8ZrRxZ1Z6QAAAIg"]
[Wed Apr 15 07:13:19.783521 2026] [:error] [pid 4066:tid 4124] [client 45.131.195.129:54673] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ad7KD4C2YXfSPsC9O_CFegAAAFQ"]
[Wed Apr 15 07:13:22.219550 2026] [proxy_fcgi:error] [pid 4066:tid 4120] [client 45.131.195.130:22021] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:13:45.293003 2026] [proxy_fcgi:error] [pid 45504:tid 45509] [client 45.131.195.126:30523] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:13:58.095826 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.189:34255] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ad7KNq3iO9_fE_IQEMlyOQAAAQE"]
[Wed Apr 15 07:13:58.529265 2026] [:error] [pid 4065:tid 4080] [client 45.131.195.164:53295] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ad7KNgWArgJTHu2_6OzapQAAAAQ"]
[Wed Apr 15 07:14:01.755385 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.144:21937] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ad7KOa3iO9_fE_IQEMlyRAAAAQ4"]
[Wed Apr 15 07:14:05.462350 2026] [proxy_fcgi:error] [pid 4169:tid 4197] [client 45.131.195.134:32573] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:14:07.810761 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.170:23065] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ad7KP63iO9_fE_IQEMlyYQAAAQk"]
[Wed Apr 15 07:14:08.324392 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.161:28793] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ad7KQK3iO9_fE_IQEMlyagAAARg"]
[Wed Apr 15 07:14:18.592512 2026] [:error] [pid 4169:tid 4177] [client 45.131.195.149:31055] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad7KSh15U5D-N99n_jKq9AAAAMU"]
[Wed Apr 15 07:14:19.418409 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.130:37041] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "ad7KS63iO9_fE_IQEMlygQAAARc"]
[Wed Apr 15 07:14:32.346893 2026] [:error] [pid 4066:tid 4110] [client 45.131.195.164:59685] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ad7KWIC2YXfSPsC9O_CFuwAAAEY"]
[Wed Apr 15 07:14:36.989802 2026] [proxy_fcgi:error] [pid 45504:tid 45510] [client 45.131.195.197:46125] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:14:39.785846 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.197:46125] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/function.php"] [unique_id "ad7KX63iO9_fE_IQEMlyxwAAAQk"]
[Wed Apr 15 07:14:42.275780 2026] [:error] [pid 4169:tid 4183] [client 45.131.195.125:65121] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ad7KYh15U5D-N99n_jKrKgAAAMs"]
[Wed Apr 15 07:14:46.121451 2026] [:error] [pid 4065:tid 4086] [client 45.131.195.151:61925] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ad7KZgWArgJTHu2_6OzaywAAAAo"]
[Wed Apr 15 07:14:47.218757 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.156:28051] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ad7KZ63iO9_fE_IQEMly2wAAARQ"]
[Wed Apr 15 07:15:07.919581 2026] [:error] [pid 4066:tid 4114] [client 45.131.195.144:54845] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ad7Ke4C2YXfSPsC9O_CGDwAAAEo"]
[Wed Apr 15 07:15:10.843822 2026] [:error] [pid 4065:tid 4096] [client 45.131.195.150:28629] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ad7KfgWArgJTHu2_6Oza0wAAABQ"]
[Wed Apr 15 07:15:14.656742 2026] [proxy_fcgi:error] [pid 4065:tid 4100] [client 45.131.195.179:24301] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:15:20.651018 2026] [:error] [pid 4066:tid 4105] [client 45.131.195.181:45269] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/index.php"] [unique_id "ad7KiIC2YXfSPsC9O_CGIgAAAEE"]
[Wed Apr 15 07:15:21.570045 2026] [:error] [pid 4066:tid 4108] [client 45.131.195.174:59477] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ad7KiYC2YXfSPsC9O_CGJQAAAEQ"]
[Wed Apr 15 07:15:23.048572 2026] [:error] [pid 4169:tid 4184] [client 45.131.195.180:64299] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ad7Kix15U5D-N99n_jKrZwAAAMw"]
[Wed Apr 15 07:15:34.915623 2026] [:error] [pid 4066:tid 4124] [client 45.131.195.175:49057] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ad7KloC2YXfSPsC9O_CGRAAAAFQ"]
[Wed Apr 15 07:15:37.596339 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.181:64393] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ad7KmR15U5D-N99n_jKrgQAAAMg"]
[Wed Apr 15 07:15:41.363753 2026] [proxy_fcgi:error] [pid 4067:tid 4134] [client 45.131.195.165:40795] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:15:50.000713 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.129:29031] [client 45.131.195.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/js/wp-login.php"] [unique_id "ad7Kpa3iO9_fE_IQEMlziwAAARI"]
[Wed Apr 15 07:16:05.338489 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.129:29031] [client 45.131.195.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.129, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ad7Kta3iO9_fE_IQEMlzsQAAARg"]
[Wed Apr 15 07:16:08.579662 2026] [proxy_fcgi:error] [pid 45504:tid 45525] [client 45.131.195.129:29031] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:16:27.728266 2026] [proxy_fcgi:error] [pid 45504:tid 45522] [client 45.131.195.161:52653] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:16:58.853661 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.161:52653] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ad7K6q3iO9_fE_IQEMl0KwAAAQw"]
[Wed Apr 15 07:17:00.079344 2026] [proxy_fcgi:error] [pid 4169:tid 4184] [client 45.131.195.146:22659] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:17:06.503232 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.140:23505] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ad7K8h15U5D-N99n_jKsGwAAANc"]
[Wed Apr 15 07:17:12.846029 2026] [:error] [pid 4067:tid 4151] [client 45.131.195.134:31311] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ad7K-O5XHBJU8ZrRxZ1ayQAAAJQ"]
[Wed Apr 15 07:17:37.853885 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.164:55059] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ad7LEe5XHBJU8ZrRxZ1bBgAAAI4"]
[Wed Apr 15 07:17:44.706952 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.156:33379] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ad7LGO5XHBJU8ZrRxZ1bFAAAAIE"]
[Wed Apr 15 07:17:47.309101 2026] [proxy_fcgi:error] [pid 4065:tid 4086] [client 45.131.195.131:38605] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:17:49.819130 2026] [:error] [pid 45504:tid 45523] [client 45.131.195.204:37149] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ad7LHa3iO9_fE_IQEMl0WAAAARE"]
[Wed Apr 15 07:18:00.669964 2026] [proxy_fcgi:error] [pid 4066:tid 4113] [client 45.131.195.156:42845] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:18:01.074291 2026] [proxy_fcgi:error] [pid 4066:tid 4114] [client 45.131.195.156:42845] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:18:01.302322 2026] [:error] [pid 4066:tid 4119] [client 45.131.195.156:42845] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ad7LKYC2YXfSPsC9O_CG0AAAAE8"]
[Wed Apr 15 07:18:02.755711 2026] [:error] [pid 4065:tid 4080] [client 45.131.195.175:63841] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ad7LKgWArgJTHu2_6OzbuwAAAAQ"]
[Wed Apr 15 07:18:18.246159 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.141:53051] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ad7LOh15U5D-N99n_jKskwAAAMQ"]
[Wed Apr 15 07:18:21.525054 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.174:63247] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "ad7LPa3iO9_fE_IQEMl06wAAAQc"]
[Wed Apr 15 07:18:30.539040 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.174:65117] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ad7LRq3iO9_fE_IQEMl0-wAAAQM"]
[Wed Apr 15 07:18:43.763919 2026] [proxy_fcgi:error] [pid 4065:tid 4085] [client 45.131.195.121:26643] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:18:47.493644 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.119:22373] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ad7LV63iO9_fE_IQEMl1LAAAAQs"]
[Wed Apr 15 07:18:50.284797 2026] [proxy_fcgi:error] [pid 45504:tid 45525] [client 45.131.195.150:39371] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:18:51.352504 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.150:39371] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ad7LW63iO9_fE_IQEMl1PgAAAQ0"]
[Wed Apr 15 07:19:04.941344 2026] [proxy_fcgi:error] [pid 45504:tid 45519] [client 45.131.195.175:52859] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:19:07.690651 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.175:52859] [client 45.131.195.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.175, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ad7La63iO9_fE_IQEMl1UQAAAQ8"]
[Wed Apr 15 07:19:20.100316 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.175:52859] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ad7LeK3iO9_fE_IQEMl1fgAAAQw"]
[Wed Apr 15 07:19:26.323768 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.140:37257] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ad7Lfq3iO9_fE_IQEMl1lQAAAQ0"]
[Wed Apr 15 07:19:34.054566 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.126:42673] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ad7Lhq3iO9_fE_IQEMl1qQAAARA"]
[Wed Apr 15 07:19:45.636816 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.126:62143] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ad7Lke5XHBJU8ZrRxZ1bigAAAJg"]
[Wed Apr 15 07:19:46.719750 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.166:25939] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ad7Lkq3iO9_fE_IQEMl1ywAAARA"]
[Wed Apr 15 07:19:48.054781 2026] [proxy_fcgi:error] [pid 4169:tid 4192] [client 45.131.195.141:38205] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:19:55.197991 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.120:45681] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ad7Lmx15U5D-N99n_jKtFgAAAMY"]
[Wed Apr 15 07:20:01.611937 2026] [proxy_fcgi:error] [pid 45504:tid 45530] [client 45.131.195.165:41527] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:20:02.135747 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.165:41527] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ad7Loq3iO9_fE_IQEMl18AAAARc"]
[Wed Apr 15 07:20:04.538165 2026] [:error] [pid 4065:tid 4079] [client 45.131.195.180:65515] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/db.php"] [unique_id "ad7LpAWArgJTHu2_6OzcMAAAAAM"]
[Wed Apr 15 07:20:05.851629 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.130:31279] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ad7Lpa3iO9_fE_IQEMl2DQAAAQY"]
[Wed Apr 15 07:20:07.063511 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.144:45971] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ad7Lp63iO9_fE_IQEMl2GgAAAQQ"]
[Wed Apr 15 07:20:10.048398 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.115:33123] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ad7Lqh15U5D-N99n_jKt4gAAAMA"]
[Wed Apr 15 07:20:11.823286 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.176:52615] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ad7Lq63iO9_fE_IQEMl2NQAAARI"]
[Wed Apr 15 07:20:13.289323 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.250:36355] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ad7Lre5XHBJU8ZrRxZ1blgAAAJg"]
[Wed Apr 15 07:20:20.373861 2026] [:error] [pid 4169:tid 4182] [client 45.131.195.139:23753] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ad7LtB15U5D-N99n_jKuEgAAAMo"]
[Wed Apr 15 07:20:22.697940 2026] [:error] [pid 4066:tid 4126] [client 45.131.195.165:54337] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ad7LtoC2YXfSPsC9O_CHVwAAAFY"]
[Wed Apr 15 07:20:23.921545 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.154:27911] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ad7Lt63iO9_fE_IQEMl2VQAAAQY"]
[Wed Apr 15 07:20:24.973279 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.164:54263] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ad7LuB15U5D-N99n_jKuFgAAAMc"]
[Wed Apr 15 07:20:26.465253 2026] [:error] [pid 4065:tid 4082] [client 45.131.195.120:35507] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "ad7LugWArgJTHu2_6OzcNwAAAAY"]
[Wed Apr 15 07:20:27.789198 2026] [proxy_fcgi:error] [pid 4067:tid 4142] [client 45.131.195.166:51457] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:20:31.178321 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.166:51457] [client 45.131.195.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.166, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ad7Lv-5XHBJU8ZrRxZ1buAAAAI4"]
[Wed Apr 15 07:20:38.545875 2026] [:error] [pid 4067:tid 4150] [client 45.131.195.166:51457] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ad7Lxu5XHBJU8ZrRxZ1bxQAAAJM"]
[Wed Apr 15 07:21:15.570433 2026] [proxy_fcgi:error] [pid 4169:tid 4200] [client 45.131.195.130:61971] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:21:16.402759 2026] [:error] [pid 4065:tid 4089] [client 45.131.195.186:64871] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ad7L7AWArgJTHu2_6OzcVwAAAA0"]
[Wed Apr 15 07:21:17.742037 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.174:36913] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ad7L7a3iO9_fE_IQEMl21QAAARQ"]
[Wed Apr 15 07:21:18.583509 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.145:53843] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ad7L7q3iO9_fE_IQEMl22gAAAQ4"]
[Wed Apr 15 07:21:33.909963 2026] [:error] [pid 4169:tid 4195] [client 45.131.195.175:35989] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ad7L_R15U5D-N99n_jKutQAAANQ"]
[Wed Apr 15 07:21:35.564012 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.169:51803] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ad7L_63iO9_fE_IQEMl3BAAAAQ4"]
[Wed Apr 15 07:21:36.987860 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.174:57047] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ad7MAK3iO9_fE_IQEMl3CwAAAQs"]
[Wed Apr 15 07:21:41.458298 2026] [proxy_fcgi:error] [pid 4169:tid 4188] [client 45.131.195.181:49119] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:21:45.345041 2026] [:error] [pid 4065:tid 4092] [client 45.131.195.131:25235] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ad7MCQWArgJTHu2_6OzcbAAAABA"]
[Wed Apr 15 07:21:49.625509 2026] [:error] [pid 4066:tid 4127] [client 45.131.195.129:26849] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ad7MDYC2YXfSPsC9O_CHyAAAAFc"]
[Wed Apr 15 07:21:58.629009 2026] [:error] [pid 4067:tid 4135] [client 45.131.195.124:36299] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ad7MFu5XHBJU8ZrRxZ1b-AAAAIQ"]
[Wed Apr 15 07:22:19.240302 2026] [proxy_fcgi:error] [pid 45504:tid 45521] [client 45.131.195.126:24501] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:22:21.649060 2026] [:error] [pid 4067:tid 4149] [client 45.131.195.120:53375] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ad7MLe5XHBJU8ZrRxZ1cGQAAAJI"]
[Wed Apr 15 07:22:26.122065 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.175:53323] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/about.php"] [unique_id "ad7MMq3iO9_fE_IQEMl3pAAAAQU"]
[Wed Apr 15 07:22:41.138345 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.180:30355] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "ad7MQR15U5D-N99n_jKvBgAAAMc"]
[Wed Apr 15 07:22:47.841365 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.140:57569] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ad7MRx15U5D-N99n_jKvGAAAAMI"]
[Wed Apr 15 07:22:54.048516 2026] [proxy_fcgi:error] [pid 45504:tid 45514] [client 45.131.195.136:58231] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:23:04.205180 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.197:22263] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "ad7MWB15U5D-N99n_jKvLgAAAMk"]
[Wed Apr 15 07:23:17.168020 2026] [:error] [pid 45504:tid 45523] [client 45.131.195.131:37427] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "ad7MZa3iO9_fE_IQEMl4pAAAARE"]
[Wed Apr 15 07:23:25.243792 2026] [:error] [pid 4065:tid 4087] [client 45.131.195.129:42301] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "ad7MbQWArgJTHu2_6OzcoAAAAAs"]
[Wed Apr 15 07:23:26.951656 2026] [:error] [pid 4066:tid 4126] [client 45.131.195.130:26011] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "ad7MboC2YXfSPsC9O_CIEQAAAFY"]
[Wed Apr 15 07:23:41.283731 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.166:52819] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "ad7MfR15U5D-N99n_jKvcAAAAMQ"]
[Wed Apr 15 07:23:45.658097 2026] [proxy_fcgi:error] [pid 4065:tid 4076] [client 45.131.195.145:45055] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:23:56.275741 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.204:32409] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "ad7MjK3iO9_fE_IQEMl5CwAAAQU"]
[Wed Apr 15 07:24:08.611901 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.161:47801] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ad7MmK3iO9_fE_IQEMl5NgAAARg"]
[Wed Apr 15 07:24:09.742856 2026] [:error] [pid 4169:tid 4192] [client 45.131.195.161:44999] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "ad7MmR15U5D-N99n_jKvigAAANI"]
[Wed Apr 15 07:24:11.466140 2026] [proxy_fcgi:error] [pid 4169:tid 4184] [client 45.131.195.139:57761] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:24:12.719027 2026] [:error] [pid 4065:tid 4093] [client 45.131.195.135:57935] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "ad7MnAWArgJTHu2_6Ozc0wAAABE"]
[Wed Apr 15 07:24:16.997850 2026] [:error] [pid 4066:tid 4110] [client 45.131.195.180:32621] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "ad7MoIC2YXfSPsC9O_CIOAAAAEY"]
[Wed Apr 15 07:24:18.108344 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.115:33583] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "ad7Moq3iO9_fE_IQEMl5RQAAARg"]
[Wed Apr 15 07:24:31.790622 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.171:23899] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "ad7Mr63iO9_fE_IQEMl5ewAAAQA"]
[Wed Apr 15 07:24:38.144511 2026] [:error] [pid 4169:tid 4177] [client 45.131.195.186:64479] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "ad7Mth15U5D-N99n_jKvtAAAAMU"]
[Wed Apr 15 07:24:39.205543 2026] [:error] [pid 4066:tid 4117] [client 45.131.195.161:56021] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "ad7Mt4C2YXfSPsC9O_CITgAAAE0"]
[Wed Apr 15 07:24:45.392717 2026] [:error] [pid 4066:tid 4119] [client 45.131.195.156:20039] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "ad7MvYC2YXfSPsC9O_CIVwAAAE8"]
[Wed Apr 15 07:24:49.186026 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.116:57607] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "ad7Mwa3iO9_fE_IQEMl5tgAAAQA"]
[Wed Apr 15 07:24:59.654330 2026] [proxy_fcgi:error] [pid 4067:tid 4137] [client 45.131.195.175:24139] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:25:01.334590 2026] [proxy_fcgi:error] [pid 4169:tid 4187] [client 45.131.195.125:48849] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:25:01.813281 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.176:39999] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "ad7MzR15U5D-N99n_jKv4wAAAMk"]
[Wed Apr 15 07:25:05.884896 2026] [:error] [pid 4066:tid 4121] [client 45.131.195.190:37621] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "ad7M0YC2YXfSPsC9O_CIhgAAAFE"]
[Wed Apr 15 07:25:12.283984 2026] [:error] [pid 4169:tid 4195] [client 45.131.195.149:44127] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "ad7M2B15U5D-N99n_jKv7QAAANQ"]
[Wed Apr 15 07:25:15.927344 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.146:54493] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/as.php"] [unique_id "ad7M2x15U5D-N99n_jKv8wAAAM4"]
[Wed Apr 15 07:25:19.521923 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.139:30039] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "ad7M3x15U5D-N99n_jKv9wAAAMc"]
[Wed Apr 15 07:25:20.776784 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.160:30045] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/install.php"] [unique_id "ad7M4K3iO9_fE_IQEMl6HAAAAQM"]
[Wed Apr 15 07:25:22.064395 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.161:51741] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "ad7M4q3iO9_fE_IQEMl6IgAAAQY"]
[Wed Apr 15 07:25:35.332834 2026] [proxy_fcgi:error] [pid 4066:tid 4115] [client 45.131.195.149:63401] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:25:36.380175 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.124:40289] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "ad7M8B15U5D-N99n_jKwJwAAAMg"]
[Wed Apr 15 07:25:44.258729 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.130:56893] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "ad7M-B15U5D-N99n_jKwQAAAANU"]
[Wed Apr 15 07:25:49.913872 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.165:27053] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "ad7M_R15U5D-N99n_jKwVQAAANU"]
[Wed Apr 15 07:25:54.978904 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.115:48405] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "ad7NAh15U5D-N99n_jKwZgAAANU"]
[Wed Apr 15 07:25:56.024641 2026] [proxy_fcgi:error] [pid 4065:tid 4082] [client 45.131.195.175:42489] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:26:02.474997 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.164:27037] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "ad7NCh15U5D-N99n_jKwdQAAAMM"]
[Wed Apr 15 07:26:03.674628 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.171:51635] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "ad7NC63iO9_fE_IQEMl6YwAAAQc"]
[Wed Apr 15 07:26:05.443166 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.156:44881] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "ad7NDa3iO9_fE_IQEMl6agAAAQs"]
[Wed Apr 15 07:26:13.625136 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.175:47557] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "ad7NFa3iO9_fE_IQEMl6fwAAARA"]
[Wed Apr 15 07:26:29.668661 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.130:27773] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "ad7NJa3iO9_fE_IQEMl6ogAAAQg"]
[Wed Apr 15 07:26:30.632282 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.156:54433] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "ad7NJq3iO9_fE_IQEMl6pQAAARI"]
[Wed Apr 15 07:26:37.870118 2026] [:error] [pid 4067:tid 4147] [client 45.131.195.141:44277] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "ad7NLe5XHBJU8ZrRxZ1dhgAAAJA"]
[Wed Apr 15 07:26:40.479495 2026] [:error] [pid 4169:tid 4197] [client 45.131.195.175:45241] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ad7NMB15U5D-N99n_jKwyQAAANY"]
[Wed Apr 15 07:26:43.850967 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.180:47709] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "ad7NM63iO9_fE_IQEMl6vwAAAQs"]
[Wed Apr 15 07:26:44.867647 2026] [:error] [pid 4067:tid 4152] [client 45.131.195.179:29565] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "ad7NNO5XHBJU8ZrRxZ1djwAAAJU"]
[Wed Apr 15 07:26:46.075417 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.166:55759] [client 45.131.195.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.166, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "ad7NNq3iO9_fE_IQEMl6wgAAARg"]
[Wed Apr 15 07:26:46.079996 2026] [proxy_fcgi:error] [pid 45504:tid 45530] [client 45.131.195.166:55759] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 07:26:46.294360 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.166:55759] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "ad7NNq3iO9_fE_IQEMl6xAAAAQE"]
[Wed Apr 15 07:26:52.431962 2026] [:error] [pid 4066:tid 4122] [client 45.131.195.181:64125] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ad7NPIC2YXfSPsC9O_CI_wAAAFI"]
[Wed Apr 15 07:26:53.530407 2026] [:error] [pid 4065:tid 4090] [client 45.131.195.174:52503] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/network.php"] [unique_id "ad7NPQWArgJTHu2_6OzdcwAAAA4"]
[Wed Apr 15 07:27:05.524674 2026] [:error] [pid 4065:tid 4087] [client 45.131.195.156:25591] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "ad7NSQWArgJTHu2_6OzdjgAAAAs"]
[Wed Apr 15 07:27:06.496407 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.116:43923] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "ad7NSq3iO9_fE_IQEMl64AAAAQQ"]
[Wed Apr 15 07:27:12.091845 2026] [:error] [pid 4065:tid 4078] [client 45.131.195.140:26435] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "ad7NUAWArgJTHu2_6OzdnAAAAAI"]
[Wed Apr 15 07:27:13.161741 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.156:64433] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "ad7NUYC2YXfSPsC9O_CJDwAAAFM"]
[Wed Apr 15 07:27:28.181330 2026] [autoindex:error] [pid 4065:tid 4094] [client 45.131.195.151:26425] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:27:33.934492 2026] [autoindex:error] [pid 4065:tid 4084] [client 45.131.195.151:26425] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:27:42.020918 2026] [proxy_fcgi:error] [pid 4065:tid 4089] [client 45.131.195.151:26425] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:27:48.025452 2026] [autoindex:error] [pid 4067:tid 4132] [client 45.131.195.171:50299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:27:50.788651 2026] [autoindex:error] [pid 4067:tid 4134] [client 45.131.195.171:50299] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:27:56.877192 2026] [proxy_fcgi:error] [pid 4067:tid 4151] [client 45.131.195.171:50299] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:27:57.879128 2026] [autoindex:error] [pid 4169:tid 4200] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:27:58.107520 2026] [autoindex:error] [pid 4169:tid 4178] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:27:58.454521 2026] [autoindex:error] [pid 4169:tid 4184] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:04.253222 2026] [autoindex:error] [pid 4169:tid 4178] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:04.482569 2026] [autoindex:error] [pid 4169:tid 4175] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:07.424863 2026] [autoindex:error] [pid 4169:tid 4180] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:07.674277 2026] [autoindex:error] [pid 4169:tid 4184] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:07.944050 2026] [autoindex:error] [pid 4169:tid 4177] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:08.404481 2026] [autoindex:error] [pid 4169:tid 4176] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:08.628776 2026] [autoindex:error] [pid 4169:tid 4188] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:08.860794 2026] [autoindex:error] [pid 4169:tid 4173] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:16.208795 2026] [autoindex:error] [pid 4169:tid 4188] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:16.443407 2026] [autoindex:error] [pid 4169:tid 4173] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:16.961357 2026] [autoindex:error] [pid 4169:tid 4195] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:17.189546 2026] [autoindex:error] [pid 4169:tid 4174] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:19.905782 2026] [autoindex:error] [pid 4169:tid 4184] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:20.150455 2026] [autoindex:error] [pid 4169:tid 4197] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:28.320932 2026] [autoindex:error] [pid 4169:tid 4198] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:33.651183 2026] [autoindex:error] [pid 4169:tid 4175] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:34.105361 2026] [autoindex:error] [pid 4169:tid 4191] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:41.520883 2026] [autoindex:error] [pid 4169:tid 4197] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:41.768972 2026] [autoindex:error] [pid 4169:tid 4172] [client 45.131.195.195:22061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:44.771268 2026] [proxy_fcgi:error] [pid 4169:tid 4198] [client 45.131.195.195:22061] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:28:50.821381 2026] [autoindex:error] [pid 4169:tid 4182] [client 45.131.195.176:58397] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:53.537908 2026] [autoindex:error] [pid 4169:tid 4178] [client 45.131.195.176:58397] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:56.238289 2026] [autoindex:error] [pid 4169:tid 4183] [client 45.131.195.176:58397] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:56.458819 2026] [autoindex:error] [pid 4169:tid 4200] [client 45.131.195.176:58397] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:56.688700 2026] [autoindex:error] [pid 4169:tid 4181] [client 45.131.195.176:58397] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:56.910319 2026] [autoindex:error] [pid 4169:tid 4198] [client 45.131.195.176:58397] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:28:59.667105 2026] [autoindex:error] [pid 4169:tid 4176] [client 45.131.195.176:58397] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:02.787490 2026] [proxy_fcgi:error] [pid 4169:tid 4173] [client 45.131.195.176:58397] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:29:03.458587 2026] [autoindex:error] [pid 4066:tid 4113] [client 45.131.195.126:31931] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:03.684841 2026] [autoindex:error] [pid 4066:tid 4123] [client 45.131.195.126:31931] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:11.631522 2026] [autoindex:error] [pid 4066:tid 4111] [client 45.131.195.126:31931] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:14.326488 2026] [autoindex:error] [pid 4066:tid 4104] [client 45.131.195.126:31931] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:14.879265 2026] [proxy_fcgi:error] [pid 4066:tid 4118] [client 45.131.195.126:31931] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:29:18.073008 2026] [autoindex:error] [pid 4066:tid 4120] [client 45.131.195.124:32807] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:23.757879 2026] [autoindex:error] [pid 4066:tid 4109] [client 45.131.195.124:32807] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:24.021250 2026] [autoindex:error] [pid 4066:tid 4108] [client 45.131.195.124:32807] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:24.251365 2026] [autoindex:error] [pid 4066:tid 4121] [client 45.131.195.124:32807] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:24.466130 2026] [autoindex:error] [pid 4066:tid 4120] [client 45.131.195.124:32807] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:24.838951 2026] [autoindex:error] [pid 4066:tid 4112] [client 45.131.195.124:32807] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:32.929095 2026] [proxy_fcgi:error] [pid 4066:tid 4126] [client 45.131.195.124:32807] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:29:40.521621 2026] [autoindex:error] [pid 45504:tid 45518] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:40.874460 2026] [autoindex:error] [pid 45504:tid 45515] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:41.126354 2026] [autoindex:error] [pid 45504:tid 45516] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:41.348952 2026] [autoindex:error] [pid 45504:tid 45506] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:41.570447 2026] [autoindex:error] [pid 45504:tid 45526] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:56.480123 2026] [autoindex:error] [pid 45504:tid 45524] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:56.711190 2026] [autoindex:error] [pid 45504:tid 45530] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:56.934112 2026] [autoindex:error] [pid 45504:tid 45527] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:57.182815 2026] [autoindex:error] [pid 45504:tid 45508] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:29:57.410214 2026] [autoindex:error] [pid 45504:tid 45525] [client 45.131.195.185:23721] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:03.197269 2026] [proxy_fcgi:error] [pid 45504:tid 45507] [client 45.131.195.185:23721] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:30:06.598943 2026] [autoindex:error] [pid 4066:tid 4128] [client 45.131.195.145:22451] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:14.304305 2026] [autoindex:error] [pid 4066:tid 4115] [client 45.131.195.145:22451] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:14.523097 2026] [autoindex:error] [pid 4066:tid 4105] [client 45.131.195.145:22451] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:17.230625 2026] [autoindex:error] [pid 4066:tid 4117] [client 45.131.195.145:22451] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:25.110534 2026] [proxy_fcgi:error] [pid 4066:tid 4121] [client 45.131.195.145:22451] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:30:28.579887 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.124:47729] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:29.044638 2026] [autoindex:error] [pid 4067:tid 4140] [client 45.131.195.124:47729] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:29.269805 2026] [autoindex:error] [pid 4067:tid 4134] [client 45.131.195.124:47729] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:32.311192 2026] [proxy_fcgi:error] [pid 4067:tid 4150] [client 45.131.195.124:47729] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:30:39.727078 2026] [autoindex:error] [pid 4169:tid 4178] [client 45.131.195.170:48633] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:30:48.798031 2026] [autoindex:error] [pid 4169:tid 4184] [client 45.131.195.170:48633] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:31:02.291076 2026] [proxy_fcgi:error] [pid 4169:tid 4200] [client 45.131.195.170:48633] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:31:13.093614 2026] [autoindex:error] [pid 45504:tid 45525] [client 45.131.195.161:29929] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:31:18.318159 2026] [autoindex:error] [pid 45504:tid 45516] [client 45.131.195.161:29929] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:31:19.813707 2026] [autoindex:error] [pid 45504:tid 45510] [client 45.131.195.161:29929] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:31:25.070675 2026] [autoindex:error] [pid 45504:tid 45527] [client 45.131.195.161:29929] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:31:27.816908 2026] [autoindex:error] [pid 45504:tid 45528] [client 45.131.195.161:29929] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:31:33.672363 2026] [proxy_fcgi:error] [pid 45504:tid 45523] [client 45.131.195.161:29929] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:31:35.087539 2026] [proxy_fcgi:error] [pid 4065:tid 4095] [client 45.131.195.197:38721] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:31:59.876708 2026] [autoindex:error] [pid 4169:tid 4181] [client 45.131.195.174:57959] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:03.172789 2026] [proxy_fcgi:error] [pid 4169:tid 4195] [client 45.131.195.174:57959] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:32:04.297114 2026] [autoindex:error] [pid 45504:tid 45511] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:10.037791 2026] [autoindex:error] [pid 45504:tid 45510] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:15.341577 2026] [autoindex:error] [pid 45504:tid 45510] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:18.355178 2026] [autoindex:error] [pid 45504:tid 45507] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:18.580664 2026] [autoindex:error] [pid 45504:tid 45527] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:21.673298 2026] [autoindex:error] [pid 45504:tid 45527] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:22.048586 2026] [autoindex:error] [pid 45504:tid 45516] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:22.274347 2026] [autoindex:error] [pid 45504:tid 45512] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:30.852855 2026] [autoindex:error] [pid 45504:tid 45526] [client 45.131.195.180:22377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:35.492457 2026] [proxy_fcgi:error] [pid 45504:tid 45530] [client 45.131.195.180:22377] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:32:36.832532 2026] [autoindex:error] [pid 4066:tid 4104] [client 45.131.195.159:53849] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:37.791536 2026] [proxy_fcgi:error] [pid 4066:tid 4115] [client 45.131.195.159:53849] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:32:54.844692 2026] [autoindex:error] [pid 4066:tid 4107] [client 45.131.195.130:43815] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:55.077501 2026] [autoindex:error] [pid 4066:tid 4108] [client 45.131.195.130:43815] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:55.562717 2026] [autoindex:error] [pid 4066:tid 4127] [client 45.131.195.130:43815] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:32:58.415955 2026] [autoindex:error] [pid 4066:tid 4113] [client 45.131.195.130:43815] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:33:09.019752 2026] [proxy_fcgi:error] [pid 4066:tid 4127] [client 45.131.195.130:43815] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 07:33:19.807040 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.141:53705] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 07:33:33.612936 2026] [autoindex:error] [pid 4067:tid 4149] [client 45.131.195.141:53705] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 12:23:56.282757 2026] [proxy_fcgi:error] [pid 30553:tid 30576] [client 20.89.128.74:5515] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 12:24:01.230249 2026] [proxy_fcgi:error] [pid 30644:tid 30669] [client 20.89.128.74:8123] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 12:24:06.291087 2026] [proxy_fcgi:error] [pid 30644:tid 30659] [client 20.89.128.74:8577] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 12:24:08.805731 2026] [:error] [pid 51186:tid 51206] [client 20.89.128.74:8602] [client 20.89.128.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "ad8S6Ffx1CjK_ZPfY1SZOwAAAVI"]
[Wed Apr 15 12:24:09.411141 2026] [:error] [pid 30644:tid 30656] [client 20.89.128.74:1530] [client 20.89.128.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "ad8S6a8vuyJ0N41zsM8rLQAAAMY"]
[Wed Apr 15 12:24:10.030138 2026] [:error] [pid 30644:tid 30660] [client 20.89.128.74:6634] [client 20.89.128.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "ad8S6q8vuyJ0N41zsM8rMQAAAMo"]
[Wed Apr 15 12:24:10.614075 2026] [:error] [pid 30555:tid 30614] [client 20.89.128.74:5412] [client 20.89.128.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "ad8S6lTZEITMpQMsOnjfyQAAAIA"]
[Wed Apr 15 17:00:43.197930 2026] [proxy_fcgi:error] [pid 11475:tid 11479] [client 158.158.105.128:1485] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:00:54.028768 2026] [proxy_fcgi:error] [pid 12396:tid 12399] [client 158.158.105.128:43898] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:01:02.923126 2026] [:error] [pid 12396:tid 12409] [client 158.158.105.128:20090] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad9TzsCQWGYUWgxc5kgBuQAAAIs"]
[Wed Apr 15 17:01:06.608136 2026] [proxy_fcgi:error] [pid 11475:tid 11487] [client 158.158.105.128:22814] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:01:25.314427 2026] [proxy_fcgi:error] [pid 11383:tid 11398] [client 158.158.105.128:45788] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:01:25.883196 2026] [proxy_fcgi:error] [pid 12396:tid 12402] [client 158.158.105.128:59390] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:03:56.768777 2026] [proxy_fcgi:error] [pid 11475:tid 11488] [client 158.158.105.128:40056] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:03:59.649550 2026] [:error] [pid 65412:tid 65430] [client 158.158.105.128:19989] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.makifim.com.au"] [uri "/tiny.php"] [unique_id "ad9Uf_EYT61VHfhVE5fyQwAAAZA"]
[Wed Apr 15 17:04:10.145494 2026] [proxy_fcgi:error] [pid 11475:tid 11496] [client 158.158.105.128:32073] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:04:25.572250 2026] [proxy_fcgi:error] [pid 65412:tid 65426] [client 158.158.105.128:56795] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:04:41.477829 2026] [:error] [pid 11385:tid 11460] [client 158.158.105.128:41974] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "ad9UqR_mZoXMMCiUoKVLpwAAAMs"]
[Wed Apr 15 17:04:47.286846 2026] [:error] [pid 11383:tid 11400] [client 158.158.105.128:57467] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "ad9UrzOMRk2pAgm2-j7YlAAAAAU"]
[Wed Apr 15 17:06:03.112575 2026] [proxy_fcgi:error] [pid 11383:tid 11416] [client 158.158.105.128:52131] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:06:28.477978 2026] [proxy_fcgi:error] [pid 12396:tid 12413] [client 158.158.105.128:1608] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:06:39.215711 2026] [proxy_fcgi:error] [pid 11383:tid 11412] [client 158.158.105.128:36104] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:06:54.475801 2026] [proxy_fcgi:error] [pid 11384:tid 11433] [client 158.158.105.128:41917] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:06:56.821127 2026] [proxy_fcgi:error] [pid 11475:tid 11483] [client 158.158.105.128:20043] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:07:06.927094 2026] [:error] [pid 11383:tid 11397] [client 158.158.105.128:57400] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r2.php"] [unique_id "ad9VOjOMRk2pAgm2-j7ZBAAAAAI"]
[Wed Apr 15 17:07:10.511873 2026] [:error] [pid 12396:tid 12400] [client 158.158.105.128:58726] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r2.php"] [unique_id "ad9VPsCQWGYUWgxc5kgDMwAAAII"]
[Wed Apr 15 17:07:15.608883 2026] [:error] [pid 65412:tid 65431] [client 158.158.105.128:29005] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r2.php"] [unique_id "ad9VQ_EYT61VHfhVE5fyiQAAAZE"]
[Wed Apr 15 17:07:18.013673 2026] [:error] [pid 12433:tid 12448] [client 158.158.105.128:20231] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/r2.php"] [unique_id "ad9VRrwxDHWF005pP_6-jgAAAQ0"]
[Wed Apr 15 17:07:22.054379 2026] [:error] [pid 11383:tid 11412] [client 158.158.105.128:43849] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ah25.php"] [unique_id "ad9VSjOMRk2pAgm2-j7ZHAAAABE"]
[Wed Apr 15 17:07:23.627374 2026] [:error] [pid 65412:tid 65421] [client 158.158.105.128:29566] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ah25.php"] [unique_id "ad9VS_EYT61VHfhVE5fykgAAAYc"]
[Wed Apr 15 17:07:25.092328 2026] [:error] [pid 11383:tid 11402] [client 158.158.105.128:1434] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ah25.php"] [unique_id "ad9VTTOMRk2pAgm2-j7ZHwAAAAc"]
[Wed Apr 15 17:07:26.571911 2026] [:error] [pid 11383:tid 11398] [client 158.158.105.128:25954] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ah25.php"] [unique_id "ad9VTjOMRk2pAgm2-j7ZJQAAAAM"]
[Wed Apr 15 17:07:28.527097 2026] [:error] [pid 12433:tid 12457] [client 158.158.105.128:44487] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/006.php"] [unique_id "ad9VULwxDHWF005pP_6-lAAAARY"]
[Wed Apr 15 17:07:30.026104 2026] [:error] [pid 11383:tid 11408] [client 158.158.105.128:43851] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/006.php"] [unique_id "ad9VUjOMRk2pAgm2-j7ZKwAAAA0"]
[Wed Apr 15 17:07:31.483346 2026] [:error] [pid 11383:tid 11414] [client 158.158.105.128:49580] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/006.php"] [unique_id "ad9VUzOMRk2pAgm2-j7ZMAAAABM"]
[Wed Apr 15 17:07:33.254831 2026] [:error] [pid 11384:tid 11432] [client 158.158.105.128:29538] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/006.php"] [unique_id "ad9VVXOhpt4MrQIXF7CflAAAAEo"]
[Wed Apr 15 17:07:34.066419 2026] [:error] [pid 65412:tid 65430] [client 158.158.105.128:64003] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/samll.php"] [unique_id "ad9VVvEYT61VHfhVE5fylwAAAZA"]
[Wed Apr 15 17:07:35.325525 2026] [:error] [pid 12433:tid 12438] [client 158.158.105.128:44513] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/samll.php"] [unique_id "ad9VV7wxDHWF005pP_6-mQAAAQM"]
[Wed Apr 15 17:07:36.177981 2026] [:error] [pid 12433:tid 12440] [client 158.158.105.128:1913] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/samll.php"] [unique_id "ad9VWLwxDHWF005pP_6-mwAAAQU"]
[Wed Apr 15 17:07:37.652263 2026] [:error] [pid 11384:tid 11434] [client 158.158.105.128:59981] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/samll.php"] [unique_id "ad9VWXOhpt4MrQIXF7CfoQAAAEw"]
[Wed Apr 15 17:07:39.041422 2026] [:error] [pid 12433:tid 12458] [client 158.158.105.128:47077] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zogy1.php"] [unique_id "ad9VW7wxDHWF005pP_6-oQAAARc"]
[Wed Apr 15 17:07:40.785562 2026] [:error] [pid 11475:tid 11477] [client 158.158.105.128:47066] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zogy1.php"] [unique_id "ad9VXJ7upE98bj816HPh-AAAAUA"]
[Wed Apr 15 17:07:41.807715 2026] [:error] [pid 11384:tid 11430] [client 158.158.105.128:35566] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zogy1.php"] [unique_id "ad9VXXOhpt4MrQIXF7CfpQAAAEg"]
[Wed Apr 15 17:07:50.592701 2026] [:error] [pid 12396:tid 12420] [client 158.158.105.128:64025] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zogy1.php"] [unique_id "ad9VZsCQWGYUWgxc5kgDUgAAAJY"]
[Wed Apr 15 17:07:58.553647 2026] [:error] [pid 12396:tid 12410] [client 158.158.105.128:1105] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad9VbsCQWGYUWgxc5kgDWgAAAIw"]
[Wed Apr 15 17:10:51.346614 2026] [proxy_fcgi:error] [pid 11475:tid 11501] [client 158.158.105.128:1418] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:11:06.403299 2026] [proxy_fcgi:error] [pid 12396:tid 12422] [client 158.158.105.128:41232] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:11:23.568311 2026] [proxy_fcgi:error] [pid 12396:tid 12417] [client 158.158.105.128:41322] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:11:24.172927 2026] [proxy_fcgi:error] [pid 11384:tid 11435] [client 158.158.105.128:32056] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:11:58.159664 2026] [:error] [pid 65412:tid 65424] [client 158.158.105.128:1298] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wxpass.php"] [unique_id "ad9WXvEYT61VHfhVE5fy7wAAAYo"]
[Wed Apr 15 17:12:00.056335 2026] [:error] [pid 11475:tid 11495] [client 158.158.105.128:50917] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wxpass.php"] [unique_id "ad9WYJ7upE98bj816HPj4gAAAVI"]
[Wed Apr 15 17:12:04.290841 2026] [:error] [pid 12433:tid 12450] [client 158.158.105.128:56731] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wxpass.php"] [unique_id "ad9WZLwxDHWF005pP_6_pwAAAQ8"]
[Wed Apr 15 17:12:12.883580 2026] [:error] [pid 11475:tid 11485] [client 158.158.105.128:1216] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wxpass.php"] [unique_id "ad9WbJ7upE98bj816HPj_wAAAUg"]
[Wed Apr 15 17:12:15.717329 2026] [:error] [pid 12396:tid 12412] [client 158.158.105.128:35467] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "ad9Wb8CQWGYUWgxc5kgESQAAAI4"]
[Wed Apr 15 17:12:19.061883 2026] [:error] [pid 12433:tid 12443] [client 158.158.105.128:43230] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "ad9Wc7wxDHWF005pP_6_ygAAAQg"]
[Wed Apr 15 17:12:21.481471 2026] [:error] [pid 12433:tid 12438] [client 158.158.105.128:1275] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "ad9WdbwxDHWF005pP_6_0wAAAQM"]
[Wed Apr 15 17:12:22.601488 2026] [:error] [pid 11385:tid 11457] [client 158.158.105.128:65249] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/000.php"] [unique_id "ad9Wdh_mZoXMMCiUoKVMcwAAAMg"]
[Wed Apr 15 17:12:24.846015 2026] [:error] [pid 11384:tid 11427] [client 158.158.105.128:19978] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config.php"] [unique_id "ad9WeHOhpt4MrQIXF7CgYgAAAEU"]
[Wed Apr 15 17:12:27.298550 2026] [:error] [pid 11475:tid 11477] [client 158.158.105.128:47649] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config.php"] [unique_id "ad9We57upE98bj816HPkCgAAAUA"]
[Wed Apr 15 17:12:28.212472 2026] [:error] [pid 11385:tid 11455] [client 158.158.105.128:33539] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config.php"] [unique_id "ad9WfB_mZoXMMCiUoKVMdwAAAMY"]
[Wed Apr 15 17:16:10.502432 2026] [:error] [pid 11383:tid 11402] [client 158.158.105.128:57452] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad9XWjOMRk2pAgm2-j7bqQAAAAc"]
[Wed Apr 15 17:16:11.957392 2026] [proxy_fcgi:error] [pid 11475:tid 11493] [client 158.158.105.128:22809] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:16:23.040004 2026] [proxy_fcgi:error] [pid 11384:tid 11438] [client 158.158.105.128:1697] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:16:38.306493 2026] [proxy_fcgi:error] [pid 11383:tid 11409] [client 158.158.105.128:23921] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:16:38.858006 2026] [proxy_fcgi:error] [pid 11475:tid 11493] [client 158.158.105.128:1779] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:16:55.436625 2026] [:error] [pid 11475:tid 11501] [client 158.158.105.128:36850] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "ad9Xh57upE98bj816HPmkAAAAVg"]
[Wed Apr 15 17:16:57.510268 2026] [:error] [pid 12433:tid 12440] [client 158.158.105.128:44479] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "ad9XibwxDHWF005pP_7A0QAAAQU"]
[Wed Apr 15 17:16:59.545621 2026] [:error] [pid 11384:tid 11449] [client 158.158.105.128:28477] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "ad9Xi3Ohpt4MrQIXF7ChNAAAAFc"]
[Wed Apr 15 17:17:02.326808 2026] [:error] [pid 65412:tid 65432] [client 158.158.105.128:28998] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "ad9XjvEYT61VHfhVE5fzgQAAAZI"]
[Wed Apr 15 17:17:07.933369 2026] [:error] [pid 12396:tid 12420] [client 158.158.105.128:56099] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class.php"] [unique_id "ad9Xk8CQWGYUWgxc5kgFrwAAAJY"]
[Wed Apr 15 17:17:09.767997 2026] [:error] [pid 11475:tid 11499] [client 158.158.105.128:1946] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class.php"] [unique_id "ad9XlZ7upE98bj816HPmoAAAAVY"]
[Wed Apr 15 17:17:10.871003 2026] [:error] [pid 11475:tid 11478] [client 158.158.105.128:29987] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class.php"] [unique_id "ad9Xlp7upE98bj816HPmowAAAUE"]
[Wed Apr 15 17:17:13.494067 2026] [:error] [pid 11383:tid 11413] [client 158.158.105.128:30005] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class.php"] [unique_id "ad9XmTOMRk2pAgm2-j7b7QAAABI"]
[Wed Apr 15 17:17:16.115188 2026] [:error] [pid 12396:tid 12409] [client 158.158.105.128:23410] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cilus.php"] [unique_id "ad9XnMCQWGYUWgxc5kgFtwAAAIs"]
[Wed Apr 15 17:17:17.409603 2026] [:error] [pid 12396:tid 12405] [client 158.158.105.128:20251] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cilus.php"] [unique_id "ad9XncCQWGYUWgxc5kgFugAAAIc"]
[Wed Apr 15 17:17:18.533764 2026] [:error] [pid 12433:tid 12447] [client 158.158.105.128:19869] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cilus.php"] [unique_id "ad9XnrwxDHWF005pP_7A3wAAAQw"]
[Wed Apr 15 17:17:21.496827 2026] [:error] [pid 11475:tid 11483] [client 158.158.105.128:23423] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cilus.php"] [unique_id "ad9XoZ7upE98bj816HPmpgAAAUY"]
[Wed Apr 15 17:17:22.844100 2026] [:error] [pid 12396:tid 12411] [client 158.158.105.128:32003] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d.php"] [unique_id "ad9XosCQWGYUWgxc5kgFwgAAAI0"]
[Wed Apr 15 17:17:24.369580 2026] [:error] [pid 11475:tid 11489] [client 158.158.105.128:58071] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d.php"] [unique_id "ad9XpJ7upE98bj816HPmsQAAAUw"]
[Wed Apr 15 17:17:26.419368 2026] [:error] [pid 12396:tid 12399] [client 158.158.105.128:1933] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d.php"] [unique_id "ad9XpsCQWGYUWgxc5kgFygAAAIE"]
[Wed Apr 15 17:17:28.747137 2026] [:error] [pid 65412:tid 65421] [client 158.158.105.128:1954] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/d.php"] [unique_id "ad9XqPEYT61VHfhVE5fzigAAAYc"]
[Wed Apr 15 17:17:31.333884 2026] [:error] [pid 11384:tid 11443] [client 158.158.105.128:1518] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error_log.php"] [unique_id "ad9Xq3Ohpt4MrQIXF7ChOQAAAFU"]
[Wed Apr 15 17:17:34.520987 2026] [:error] [pid 11475:tid 11479] [client 158.158.105.128:23417] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error_log.php"] [unique_id "ad9Xrp7upE98bj816HPmwAAAAUI"]
[Wed Apr 15 17:17:40.422764 2026] [:error] [pid 12433:tid 12449] [client 158.158.105.128:32050] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error_log.php"] [unique_id "ad9XtLwxDHWF005pP_7A8QAAAQ4"]
[Wed Apr 15 17:17:42.546614 2026] [:error] [pid 11383:tid 11401] [client 158.158.105.128:38761] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/error_log.php"] [unique_id "ad9XtjOMRk2pAgm2-j7cDgAAAAY"]
[Wed Apr 15 17:17:46.083084 2026] [:error] [pid 11475:tid 11482] [client 158.158.105.128:43893] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad9Xup7upE98bj816HPmxgAAAUU"]
[Wed Apr 15 17:17:49.966296 2026] [:error] [pid 11383:tid 11418] [client 158.158.105.128:57380] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad9XvTOMRk2pAgm2-j7cHAAAABc"]
[Wed Apr 15 17:19:21.143527 2026] [proxy_fcgi:error] [pid 12396:tid 12422] [client 158.158.105.128:50871] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 15 17:52:48.745013 2026] [:error] [pid 12396:tid 12416] [client 216.73.216.209:17626] [client 216.73.216.209] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||makifim.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/robots.txt"] [unique_id "ad9f8MCQWGYUWgxc5kgOdQAAAJI"]
[Wed Apr 15 23:36:08.529562 2026] [:error] [pid 23913:tid 23934] [client 136.116.251.29:62358] [client 136.116.251.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.251.29, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ad-waFUaK3MLdSaLOyjhnwAAAVM"]
[Wed Apr 15 23:36:11.581847 2026] [:error] [pid 23913:tid 23918] [client 136.116.251.29:62358] [client 136.116.251.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ad-wa1UaK3MLdSaLOyjhqgAAAUM"]
[Wed Apr 15 23:36:13.935634 2026] [:error] [pid 23913:tid 23918] [client 136.116.251.29:62358] [client 136.116.251.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.251.29, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ad-wbVUaK3MLdSaLOyjhswAAAUM"]
[Thu Apr 16 00:36:00.740043 2026] [proxy_fcgi:error] [pid 30957:tid 30991] [client 103.4.122.14:59242] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 00:41:29.125039 2026] [autoindex:error] [pid 37370:tid 37387] [client 207.180.209.135:49607] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 16 00:55:29.763401 2026] [proxy_fcgi:error] [pid 30958:tid 31033] [client 103.4.122.14:38024] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 01:07:26.588866 2026] [authz_core:error] [pid 16664:tid 16730] [client 167.99.182.39:45696] AH01630: client denied by server configuration: /home/makifimc/public_html/server-status
[Thu Apr 16 01:07:34.782522 2026] [proxy_fcgi:error] [pid 16664:tid 16731] [client 103.4.122.14:42996] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 01:07:35.860650 2026] [proxy_fcgi:error] [pid 16664:tid 16730] [client 167.99.182.39:49830] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 01:07:36.782992 2026] [:error] [pid 31053:tid 31061] [client 167.99.182.39:49832] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "ad_F2BcEkLCmvF0fjDeEfgAAAIU"]
[Thu Apr 16 01:07:42.366604 2026] [:error] [pid 37370:tid 37386] [client 167.99.182.39:49860] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "ad_F3ng-gnM2Ga0cGADCnQAAAQ4"]
[Thu Apr 16 01:07:55.956011 2026] [:error] [pid 38664:tid 38730] [client 167.99.182.39:46358] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "ad_F6wkkiuc5iA1GbGGXRAAAAc4"]
[Thu Apr 16 01:07:56.969627 2026] [:error] [pid 37370:tid 37393] [client 167.99.182.39:46360] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/config.json"] [unique_id "ad_F7Hg-gnM2Ga0cGADCvwAAARU"]
[Thu Apr 16 01:07:57.963700 2026] [:error] [pid 37370:tid 37391] [client 167.99.182.39:46362] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/telescope/requests"] [unique_id "ad_F7Xg-gnM2Ga0cGADC0QAAARM"]
[Thu Apr 16 01:07:58.971094 2026] [:error] [pid 37370:tid 37392] [client 167.99.182.39:46366] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ad_F7ng-gnM2Ga0cGADC2AAAARQ"]
[Thu Apr 16 01:07:59.971836 2026] [:error] [pid 37370:tid 37391] [client 167.99.182.39:46382] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/info.php"] [unique_id "ad_F73g-gnM2Ga0cGADC3wAAARM"]
[Thu Apr 16 01:08:00.969022 2026] [:error] [pid 37370:tid 37383] [client 167.99.182.39:46388] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.well-known/security.txt"] [unique_id "ad_F8Hg-gnM2Ga0cGADC4wAAAQs"]
[Thu Apr 16 01:08:01.979805 2026] [:error] [pid 37370:tid 37377] [client 167.99.182.39:46400] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/actuator/env"] [unique_id "ad_F8Xg-gnM2Ga0cGADC5wAAAQU"]
[Thu Apr 16 01:08:03.974724 2026] [:error] [pid 37370:tid 37380] [client 167.99.182.39:46410] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/swagger-ui.html"] [unique_id "ad_F83g-gnM2Ga0cGADC8gAAAQg"]
[Thu Apr 16 01:08:04.964893 2026] [:error] [pid 37370:tid 37384] [client 167.99.182.39:48036] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/swagger/index.html"] [unique_id "ad_F9Hg-gnM2Ga0cGADC-gAAAQw"]
[Thu Apr 16 01:08:05.986613 2026] [:error] [pid 37370:tid 37374] [client 167.99.182.39:48038] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "ad_F9Xg-gnM2Ga0cGADC_AAAAQI"]
[Thu Apr 16 01:08:06.973887 2026] [:error] [pid 16664:tid 16737] [client 167.99.182.39:48040] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "ad_F9jdzt684awDJwRTgewAAAZI"]
[Thu Apr 16 01:08:07.975700 2026] [:error] [pid 30956:tid 30972] [client 167.99.182.39:48052] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/swagger.json"] [unique_id "ad_F90BGUpjaWntNYq243QAAAAw"]
[Thu Apr 16 01:08:08.977277 2026] [:error] [pid 37370:tid 37377] [client 167.99.182.39:48062] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "ad_F-Hg-gnM2Ga0cGADDBQAAAQU"]
[Thu Apr 16 01:08:09.986109 2026] [:error] [pid 30956:tid 30970] [client 167.99.182.39:48078] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v2/api-docs"] [unique_id "ad_F-UBGUpjaWntNYq243gAAAAo"]
[Thu Apr 16 01:08:10.989507 2026] [:error] [pid 31053:tid 31078] [client 167.99.182.39:48084] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/v3/api-docs"] [unique_id "ad_F-hcEkLCmvF0fjDeE5QAAAJY"]
[Thu Apr 16 01:08:11.979827 2026] [:error] [pid 37370:tid 37393] [client 167.99.182.39:48090] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/api-docs/swagger.json"] [unique_id "ad_F-3g-gnM2Ga0cGADDEwAAARU"]
[Thu Apr 16 01:08:12.991046 2026] [:error] [pid 38664:tid 38716] [client 167.99.182.39:48100] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/api/swagger.json"] [unique_id "ad_F_Akkiuc5iA1GbGGXUwAAAcA"]
[Thu Apr 16 01:08:13.980495 2026] [:error] [pid 37370:tid 37384] [client 167.99.182.39:48106] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/trace.axd"] [unique_id "ad_F_Xg-gnM2Ga0cGADDIQAAAQw"]
[Thu Apr 16 01:08:14.987285 2026] [:error] [pid 23913:tid 23932] [client 167.99.182.39:38454] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/@vite/env"] [unique_id "ad_F_lUaK3MLdSaLOygRewAAAVE"]
[Thu Apr 16 01:08:15.988060 2026] [:error] [pid 31053:tid 31058] [client 167.99.182.39:38466] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.vscode/sftp.json"] [unique_id "ad_F_xcEkLCmvF0fjDeE8QAAAII"]
[Thu Apr 16 01:08:16.990923 2026] [:error] [pid 23913:tid 23939] [client 167.99.182.39:38478] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "ad_GAFUaK3MLdSaLOygRfAAAAVg"]
[Thu Apr 16 01:08:18.011041 2026] [:error] [pid 30956:tid 30969] [client 167.99.182.39:38482] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "ad_GAkBGUpjaWntNYq245AAAAAk"]
[Thu Apr 16 01:08:18.978858 2026] [:error] [pid 30958:tid 31023] [client 167.99.182.39:38490] [client 167.99.182.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/debug/default/view"] [unique_id "ad_GAseG3wSKTO7NWFERKwAAAMc"]
[Thu Apr 16 01:09:30.958902 2026] [proxy_fcgi:error] [pid 30956:tid 30960] [client 103.4.122.14:43990] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 01:35:18.857331 2026] [proxy_fcgi:error] [pid 16664:tid 16743] [client 91.231.89.22:50295] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 01:40:33.226714 2026] [:error] [pid 31053:tid 31060] [client 103.4.122.14:33854] [client 103.4.122.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "116.179.32.164_4a87e8a78b7d8abf25f9ff352212d075aa33f5ac"): Internal error (specific information not available) [hostname "makifim.com.au"] [uri "/wp-cron.php"] [unique_id "ad_NjhcEkLCmvF0fjDeSbAAAAIQ"]
[Thu Apr 16 01:42:43.954537 2026] [proxy_fcgi:error] [pid 37370:tid 37378] [client 91.231.89.32:46497] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 01:42:49.415904 2026] [:error] [pid 31053:tid 31071] [client 91.231.89.35:35433] [client 91.231.89.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.231.89.35, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ad_OGRcEkLCmvF0fjDeUbAAAAI8"]
[Thu Apr 16 01:43:10.559815 2026] [proxy_fcgi:error] [pid 31053:tid 31060] [client 103.4.122.14:35282] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 01:51:25.225721 2026] [proxy_fcgi:error] [pid 20548:tid 20554] [client 103.4.122.14:38958] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Apr 16 01:51:37.121014 2026] [proxy_fcgi:error] [pid 54814:tid 54841] [client 103.4.122.14:39140] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Thu Apr 16 02:43:14.695598 2026] [:error] [pid 912:tid 991] [client 91.200.101.138:61155] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/graphql"] [unique_id "ad_cQsU0_VzYCBipADk8OgAAARc"]
[Thu Apr 16 04:08:13.023184 2026] [:error] [pid 57536:tid 57562] [client 128.24.161.179:63753] [client 128.24.161.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "ad_wLSQU4faGja6jpDtjGQAAAA4"], referer: https://www.notion.so/
[Thu Apr 16 05:01:08.914132 2026] [:error] [pid 29603:tid 29608] [client 74.7.227.42:36150] [client 74.7.227.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.42, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ad_8lFfGOR6fpTWUAzqRiAAAAQM"], referer: https://makifim.com.au/
[Thu Apr 16 05:44:13.463320 2026] [:error] [pid 57537:tid 57582] [client 172.203.253.164:21632] [client 172.203.253.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aeAGrVVQRS8nm73ENAkr0AAAAEc"], referer: https://chat.openai.com/
[Thu Apr 16 06:01:15.264328 2026] [:error] [pid 49094:tid 49114] [client 68.220.59.48:45952] [client 68.220.59.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aeAKqzbDwvcXorHR_MyBmAAAAVI"]
[Thu Apr 16 06:09:26.409115 2026] [:error] [pid 29603:tid 29616] [client 57.151.128.210:20544] [client 57.151.128.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aeAMllfGOR6fpTWUAzq-3AAAAQs"]
[Thu Apr 16 09:20:57.773142 2026] [:error] [pid 49094:tid 49108] [client 98.93.160.221:47478] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aeA5eTbDwvcXorHR_Mzn2wAAAUw"]
[Thu Apr 16 11:02:53.429002 2026] [:error] [pid 57538:tid 57617] [client 98.93.160.221:33380] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aeBRXcuMaiEF5SVR2Bd63AAAAI8"]
[Thu Apr 16 14:41:09.331116 2026] [ssl:error] [pid 29603:tid 29620] [client 143.244.47.83:5498] AH02032: Hostname domains.atom.com provided via SNI and hostname makifim.com.au provided via HTTP have no compatible SSL setup
[Thu Apr 16 18:11:53.294956 2026] [:error] [pid 49094:tid 49101] [client 159.223.233.226:55928] [client 159.223.233.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.233.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aeC16TbDwvcXorHR_Mxy-AAAAUU"]
[Thu Apr 16 18:11:54.884560 2026] [:error] [pid 49094:tid 49103] [client 159.223.233.226:55928] [client 159.223.233.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.233.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aeC16jbDwvcXorHR_Mxy-gAAAUc"]
[Thu Apr 16 18:49:02.723723 2026] [:error] [pid 57639:tid 57649] [client 136.118.2.101:56950] [client 136.118.2.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.2.101, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeC-nqMCQoTw7TsxWukwrgAAAMM"]
[Thu Apr 16 18:49:05.849989 2026] [:error] [pid 57639:tid 57652] [client 136.118.2.101:56950] [client 136.118.2.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeC-oaMCQoTw7TsxWukwvwAAAMY"]
[Thu Apr 16 18:49:08.105847 2026] [:error] [pid 57639:tid 57653] [client 136.118.2.101:56950] [client 136.118.2.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.2.101, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeC-pKMCQoTw7TsxWukwyQAAAMc"]
[Thu Apr 16 20:57:08.619869 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 20.222.20.193:23924] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 16 20:57:26.724501 2026] [:error] [pid 57639:tid 57663] [client 20.222.20.193:33166] [client 20.222.20.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "aeDctqMCQoTw7TsxWumWDAAAANE"]
[Thu Apr 16 20:57:27.183246 2026] [:error] [pid 49094:tid 49107] [client 20.222.20.193:23879] [client 20.222.20.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "aeDctzbDwvcXorHR_MzN6wAAAUs"]
[Thu Apr 16 20:57:27.648017 2026] [:error] [pid 57639:tid 57652] [client 20.222.20.193:23894] [client 20.222.20.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "aeDct6MCQoTw7TsxWumWDwAAAMY"]
[Thu Apr 16 20:57:28.104779 2026] [:error] [pid 57639:tid 57653] [client 20.222.20.193:33152] [client 20.222.20.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "aeDcuKMCQoTw7TsxWumWFAAAAMc"]
[Thu Apr 16 21:33:12.012175 2026] [:error] [pid 57639:tid 57646] [client 170.64.210.52:50079] [client 170.64.210.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.210.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aeDlGKMCQoTw7TsxWum7RgAAAMA"]
[Thu Apr 16 21:33:13.328202 2026] [:error] [pid 57639:tid 57665] [client 170.64.210.52:50079] [client 170.64.210.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.210.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aeDlGaMCQoTw7TsxWum7SgAAANM"]
[Thu Apr 16 21:36:17.594278 2026] [:error] [pid 57538:tid 57602] [client 185.156.46.161:55087] [client 185.156.46.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.156.46.161, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeDl0cuMaiEF5SVR2BfobgAAAIA"]
[Thu Apr 16 21:53:47.378855 2026] [:error] [pid 29603:tid 29605] [client 136.118.150.42:51704] [client 136.118.150.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.150.42, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeDp61fGOR6fpTWUAzqhlQAAAQA"]
[Thu Apr 16 21:53:50.309515 2026] [:error] [pid 29603:tid 29624] [client 136.118.150.42:51704] [client 136.118.150.42] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeDp7lfGOR6fpTWUAzqhmwAAARM"]
[Thu Apr 16 21:53:52.304448 2026] [:error] [pid 29603:tid 29614] [client 136.118.150.42:51704] [client 136.118.150.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.150.42, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeDp8FfGOR6fpTWUAzqhoAAAAQk"]
[Thu Apr 16 22:16:11.289060 2026] [:error] [pid 57537:tid 57583] [client 45.130.203.155:61997] [client 45.130.203.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aeDvK1VQRS8nm73ENAnCxgAAAEg"]
[Thu Apr 16 22:16:11.819802 2026] [:error] [pid 7880:tid 7892] [client 45.130.203.165:36123] [client 45.130.203.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aeDvK6aezm4fSGc0yUK-TwAAAYc"]
[Thu Apr 16 23:55:18.554492 2026] [:error] [pid 7880:tid 7894] [client 34.58.172.165:60001] [client 34.58.172.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.172.165, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeEGZqaezm4fSGc0yULd5gAAAYk"]
[Thu Apr 16 23:55:21.564467 2026] [:error] [pid 7880:tid 7896] [client 34.58.172.165:60001] [client 34.58.172.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeEGaaaezm4fSGc0yULd8AAAAYs"]
[Thu Apr 16 23:55:23.575695 2026] [:error] [pid 7880:tid 7904] [client 34.58.172.165:60001] [client 34.58.172.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.172.165, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeEGa6aezm4fSGc0yULd-AAAAZM"]
[Thu Apr 16 23:56:48.953967 2026] [:error] [pid 7880:tid 7886] [client 136.109.62.113:60420] [client 136.109.62.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/src/.env"] [unique_id "aeEGwKaezm4fSGc0yULekAAAAYE"]
[Thu Apr 16 23:56:53.096916 2026] [:error] [pid 49094:tid 49096] [client 136.109.62.113:54774] [client 136.109.62.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/server/.env"] [unique_id "aeEGxTbDwvcXorHR_Mw4ewAAAUA"]
[Thu Apr 16 23:57:12.286226 2026] [:error] [pid 7880:tid 7906] [client 136.109.62.113:33664] [client 136.109.62.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/shared/.env"] [unique_id "aeEG2Kaezm4fSGc0yULetQAAAZU"]
[Thu Apr 16 23:57:37.629815 2026] [:error] [pid 49094:tid 49102] [client 136.109.62.113:60894] [client 136.109.62.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.vercel/.env.production.local"] [unique_id "aeEG8TbDwvcXorHR_Mw4swAAAUY"]
[Fri Apr 17 00:56:43.654360 2026] [autoindex:error] [pid 43385:tid 43396] [client 164.68.124.190:56735] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 17 02:24:09.462311 2026] [proxy_fcgi:error] [pid 4086:tid 4112] [client 51.12.89.191:1849] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:24:23.896557 2026] [proxy_fcgi:error] [pid 43387:tid 43476] [client 51.12.89.191:1811] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:24:37.353387 2026] [proxy_fcgi:error] [pid 3245:tid 3274] [client 51.12.89.191:12829] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:24:44.714811 2026] [:error] [pid 43386:tid 43445] [client 51.12.89.191:1794] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "aeEpbO91GAVgUfhPVDHiUgAAAFg"]
[Fri Apr 17 02:24:45.254374 2026] [:error] [pid 26480:tid 26497] [client 51.12.89.191:1821] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "aeEpbQwLDJKTQNfarA2NIAAAAc8"]
[Fri Apr 17 02:24:45.788603 2026] [:error] [pid 43387:tid 43461] [client 51.12.89.191:1809] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "aeEpbSBNsONqHxWTakVL2AAAAIo"]
[Fri Apr 17 02:24:46.338767 2026] [:error] [pid 43386:tid 43424] [client 51.12.89.191:1844] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "aeEpbu91GAVgUfhPVDHiWAAAAEQ"]
[Fri Apr 17 02:24:46.922867 2026] [:error] [pid 43387:tid 43469] [client 51.12.89.191:1806] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "aeEpbiBNsONqHxWTakVL2gAAAJA"]
[Fri Apr 17 02:24:47.552642 2026] [:error] [pid 43482:tid 43494] [client 51.12.89.191:12806] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "aeEpbz9SZnuKxlHrct22sgAAAMo"]
[Fri Apr 17 02:24:48.100485 2026] [:error] [pid 43385:tid 43413] [client 51.12.89.191:1846] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "aeEpcMnIxkJaUI8KNs4wnAAAABc"]
[Fri Apr 17 02:24:48.710803 2026] [:error] [pid 4086:tid 4104] [client 51.12.89.191:12817] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "aeEpcFlz7gxl_exM0FpPPgAAAVA"]
[Fri Apr 17 02:24:49.234429 2026] [:error] [pid 43386:tid 43427] [client 51.12.89.191:12818] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nwflm.php"] [unique_id "aeEpce91GAVgUfhPVDHiXQAAAEc"]
[Fri Apr 17 02:24:49.772680 2026] [:error] [pid 26102:tid 26120] [client 51.12.89.191:1831] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nwflm.php"] [unique_id "aeEpcf127aFqw6ALdngf_AAAAY8"]
[Fri Apr 17 02:24:50.316713 2026] [:error] [pid 11854:tid 11874] [client 51.12.89.191:1795] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nwflm.php"] [unique_id "aeEpctxJCSIaqP1XSdaixgAAAlE"]
[Fri Apr 17 02:24:50.842563 2026] [:error] [pid 43387:tid 43474] [client 51.12.89.191:1843] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nwflm.php"] [unique_id "aeEpciBNsONqHxWTakVL3gAAAJU"]
[Fri Apr 17 02:24:51.432366 2026] [:error] [pid 11854:tid 11881] [client 51.12.89.191:1841] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeEpc9xJCSIaqP1XSdaiyAAAAlg"]
[Fri Apr 17 02:24:52.040602 2026] [:error] [pid 43387:tid 43467] [client 51.12.89.191:1606] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeEpdCBNsONqHxWTakVL4AAAAI4"]
[Fri Apr 17 02:24:52.633670 2026] [:error] [pid 43386:tid 43436] [client 51.12.89.191:1804] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeEpdO91GAVgUfhPVDHiZwAAAFA"]
[Fri Apr 17 02:24:53.253504 2026] [:error] [pid 43482:tid 43490] [client 51.12.89.191:1816] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeEpdT9SZnuKxlHrct22wAAAAMY"]
[Fri Apr 17 02:24:53.812023 2026] [:error] [pid 43387:tid 43458] [client 51.12.89.191:12816] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aeEpdSBNsONqHxWTakVL4wAAAIc"]
[Fri Apr 17 02:24:54.380518 2026] [:error] [pid 43482:tid 43489] [client 51.12.89.191:12843] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aeEpdj9SZnuKxlHrct22xAAAAMU"]
[Fri Apr 17 02:24:54.985844 2026] [:error] [pid 43385:tid 43408] [client 51.12.89.191:12811] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aeEpdsnIxkJaUI8KNs4wnwAAABM"]
[Fri Apr 17 02:24:55.577282 2026] [:error] [pid 43385:tid 43401] [client 51.12.89.191:1820] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aeEpd8nIxkJaUI8KNs4woAAAAAw"]
[Fri Apr 17 02:24:56.209919 2026] [:error] [pid 26480:tid 26506] [client 51.12.89.191:12805] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeEpeAwLDJKTQNfarA2NJgAAAdg"]
[Fri Apr 17 02:24:56.756780 2026] [:error] [pid 43387:tid 43477] [client 51.12.89.191:1840] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeEpeCBNsONqHxWTakVL5gAAAJg"]
[Fri Apr 17 02:24:57.471670 2026] [:error] [pid 11692:tid 11713] [client 51.12.89.191:12826] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeEpec1AYuhm4BZwKNokzQAAAhA"]
[Fri Apr 17 02:24:58.062337 2026] [:error] [pid 43387:tid 43462] [client 51.12.89.191:1815] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeEpeiBNsONqHxWTakVL7AAAAIs"]
[Fri Apr 17 02:24:58.645164 2026] [:error] [pid 11692:tid 11716] [client 51.12.89.191:1622] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "aeEpes1AYuhm4BZwKNokzwAAAhM"]
[Fri Apr 17 02:24:59.181738 2026] [:error] [pid 43482:tid 43501] [client 51.12.89.191:1797] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "aeEpez9SZnuKxlHrct22yQAAANE"]
[Fri Apr 17 02:24:59.705032 2026] [:error] [pid 26102:tid 26114] [client 51.12.89.191:12803] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "aeEpe_127aFqw6ALdngf_wAAAYk"]
[Fri Apr 17 02:25:00.253492 2026] [:error] [pid 11692:tid 11703] [client 51.12.89.191:1834] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "aeEpfM1AYuhm4BZwKNok0QAAAgY"]
[Fri Apr 17 02:25:00.800564 2026] [:error] [pid 26102:tid 26109] [client 51.12.89.191:12802] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "aeEpfP127aFqw6ALdnggAQAAAYQ"]
[Fri Apr 17 02:25:01.343571 2026] [:error] [pid 43387:tid 43474] [client 51.12.89.191:12809] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "aeEpfSBNsONqHxWTakVL8AAAAJU"]
[Fri Apr 17 02:25:01.882862 2026] [:error] [pid 43482:tid 43504] [client 51.12.89.191:12801] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "aeEpfT9SZnuKxlHrct220gAAANQ"]
[Fri Apr 17 02:25:02.419177 2026] [:error] [pid 3245:tid 3270] [client 51.12.89.191:1828] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "aeEpfqESOMTHVLs-uFDcuAAAAQg"]
[Fri Apr 17 02:25:02.957075 2026] [:error] [pid 43385:tid 43394] [client 51.12.89.191:12819] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aeEpfsnIxkJaUI8KNs4wowAAAAU"]
[Fri Apr 17 02:25:03.511141 2026] [:error] [pid 43385:tid 43397] [client 51.12.89.191:12847] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aeEpf8nIxkJaUI8KNs4wpAAAAAg"]
[Fri Apr 17 02:25:04.041321 2026] [:error] [pid 43385:tid 43395] [client 51.12.89.191:12831] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aeEpgMnIxkJaUI8KNs4wpQAAAAY"]
[Fri Apr 17 02:25:04.607629 2026] [:error] [pid 43385:tid 43399] [client 51.12.89.191:12838] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aeEpgMnIxkJaUI8KNs4wpgAAAAo"]
[Fri Apr 17 02:25:05.137692 2026] [:error] [pid 43386:tid 43429] [client 51.12.89.191:1845] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeEpge91GAVgUfhPVDHihAAAAEk"]
[Fri Apr 17 02:25:05.766488 2026] [:error] [pid 43482:tid 43498] [client 51.12.89.191:1851] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeEpgT9SZnuKxlHrct222gAAAM4"]
[Fri Apr 17 02:25:06.366290 2026] [:error] [pid 43387:tid 43456] [client 51.12.89.191:1852] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeEpgiBNsONqHxWTakVL9AAAAIU"]
[Fri Apr 17 02:25:06.927282 2026] [:error] [pid 26480:tid 26488] [client 51.12.89.191:1808] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeEpggwLDJKTQNfarA2NKgAAAcY"]
[Fri Apr 17 02:25:07.550430 2026] [:error] [pid 11854:tid 11865] [client 51.12.89.191:1627] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aeEpg9xJCSIaqP1XSdaiywAAAkg"]
[Fri Apr 17 02:25:08.134685 2026] [:error] [pid 11692:tid 11709] [client 51.12.89.191:12821] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aeEphM1AYuhm4BZwKNok2gAAAgw"]
[Fri Apr 17 02:25:08.826954 2026] [:error] [pid 43482:tid 43503] [client 51.12.89.191:1810] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aeEphD9SZnuKxlHrct223gAAANM"]
[Fri Apr 17 02:25:09.392362 2026] [:error] [pid 11854:tid 11866] [client 51.12.89.191:1610] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aeEphdxJCSIaqP1XSdaizgAAAkk"]
[Fri Apr 17 02:25:09.925653 2026] [:error] [pid 11854:tid 11868] [client 51.12.89.191:1822] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEphdxJCSIaqP1XSdaizwAAAks"]
[Fri Apr 17 02:25:10.482821 2026] [:error] [pid 26480:tid 26496] [client 51.12.89.191:12848] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEphgwLDJKTQNfarA2NLQAAAc4"]
[Fri Apr 17 02:25:11.042360 2026] [:error] [pid 43386:tid 43441] [client 51.12.89.191:1813] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEph-91GAVgUfhPVDHiigAAAFQ"]
[Fri Apr 17 02:25:11.642375 2026] [:error] [pid 43386:tid 43439] [client 51.12.89.191:1817] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEph-91GAVgUfhPVDHijAAAAFM"]
[Fri Apr 17 02:25:13.033615 2026] [:error] [pid 43385:tid 43392] [client 51.12.89.191:1798] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeEpicnIxkJaUI8KNs4wrwAAAAM"]
[Fri Apr 17 02:25:13.605607 2026] [:error] [pid 43385:tid 43402] [client 51.12.89.191:1826] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeEpicnIxkJaUI8KNs4wsQAAAA0"]
[Fri Apr 17 02:25:14.191139 2026] [:error] [pid 3245:tid 3272] [client 51.12.89.191:12851] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeEpiqESOMTHVLs-uFDcxwAAAQo"]
[Fri Apr 17 02:25:14.717540 2026] [:error] [pid 43385:tid 43407] [client 51.12.89.191:12849] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeEpisnIxkJaUI8KNs4wtgAAABI"]
[Fri Apr 17 02:25:15.307191 2026] [:error] [pid 3245:tid 3265] [client 51.12.89.191:1603] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeEpi6ESOMTHVLs-uFDczgAAAQM"]
[Fri Apr 17 02:25:15.906430 2026] [:error] [pid 3245:tid 3285] [client 51.12.89.191:12846] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeEpi6ESOMTHVLs-uFDc0gAAARc"]
[Fri Apr 17 02:25:16.521691 2026] [:error] [pid 43385:tid 43389] [client 51.12.89.191:1628] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeEpjMnIxkJaUI8KNs4wvwAAAAA"]
[Fri Apr 17 02:25:17.064184 2026] [:error] [pid 43386:tid 43445] [client 51.12.89.191:12845] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeEpje91GAVgUfhPVDHijgAAAFg"]
[Fri Apr 17 02:25:17.670014 2026] [:error] [pid 43482:tid 43501] [client 51.12.89.191:1792] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "aeEpjT9SZnuKxlHrct227gAAANE"]
[Fri Apr 17 02:25:18.246723 2026] [:error] [pid 43482:tid 43492] [client 51.12.89.191:12858] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "aeEpjj9SZnuKxlHrct228wAAAMg"]
[Fri Apr 17 02:25:18.770006 2026] [:error] [pid 26102:tid 26108] [client 51.12.89.191:1849] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "aeEpjv127aFqw6ALdnggEQAAAYM"]
[Fri Apr 17 02:25:19.307727 2026] [:error] [pid 4086:tid 4092] [client 51.12.89.191:12862] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "aeEpj1lz7gxl_exM0FpPQwAAAUQ"]
[Fri Apr 17 02:25:19.850292 2026] [:error] [pid 11692:tid 11711] [client 51.12.89.191:1847] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aeEpj81AYuhm4BZwKNok3gAAAg4"]
[Fri Apr 17 02:25:20.377599 2026] [:error] [pid 43482:tid 43484] [client 51.12.89.191:12807] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aeEpkD9SZnuKxlHrct229gAAAMA"]
[Fri Apr 17 02:25:20.969275 2026] [:error] [pid 11854:tid 11873] [client 51.12.89.191:12808] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aeEpkNxJCSIaqP1XSdai0wAAAlA"]
[Fri Apr 17 02:25:21.501330 2026] [:error] [pid 43482:tid 43489] [client 51.12.89.191:1836] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aeEpkT9SZnuKxlHrct22-gAAAMU"]
[Fri Apr 17 02:25:22.079054 2026] [:error] [pid 43386:tid 43427] [client 51.12.89.191:12830] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeEpku91GAVgUfhPVDHimwAAAEc"]
[Fri Apr 17 02:25:22.617575 2026] [:error] [pid 4086:tid 4096] [client 51.12.89.191:12863] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeEpkllz7gxl_exM0FpPTgAAAUg"]
[Fri Apr 17 02:25:23.146730 2026] [:error] [pid 11692:tid 11716] [client 51.12.89.191:1659] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeEpk81AYuhm4BZwKNok4gAAAhM"]
[Fri Apr 17 02:25:23.686788 2026] [:error] [pid 11854:tid 11865] [client 51.12.89.191:1636] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeEpk9xJCSIaqP1XSdai2QAAAkg"]
[Fri Apr 17 02:25:24.281902 2026] [:error] [pid 43482:tid 43494] [client 51.12.89.191:12812] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeEplD9SZnuKxlHrct23BQAAAMo"]
[Fri Apr 17 02:25:24.857777 2026] [:error] [pid 43482:tid 43504] [client 51.12.89.191:12825] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeEplD9SZnuKxlHrct23CAAAANQ"]
[Fri Apr 17 02:25:25.384316 2026] [:error] [pid 43386:tid 43444] [client 51.12.89.191:1626] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeEple91GAVgUfhPVDHinAAAAFc"]
[Fri Apr 17 02:25:25.947326 2026] [:error] [pid 4086:tid 4088] [client 51.12.89.191:1799] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeEplVlz7gxl_exM0FpPVgAAAUA"]
[Fri Apr 17 02:25:26.485565 2026] [:error] [pid 26480:tid 26485] [client 51.12.89.191:1835] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aeEplgwLDJKTQNfarA2NMQAAAcM"]
[Fri Apr 17 02:25:27.011998 2026] [:error] [pid 43387:tid 43453] [client 51.12.89.191:1833] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aeEplyBNsONqHxWTakVL-wAAAIM"]
[Fri Apr 17 02:25:27.534119 2026] [:error] [pid 43386:tid 43442] [client 51.12.89.191:1827] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aeEpl-91GAVgUfhPVDHioAAAAFU"]
[Fri Apr 17 02:25:28.066216 2026] [:error] [pid 43386:tid 43425] [client 51.12.89.191:12804] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aeEpmO91GAVgUfhPVDHipwAAAEU"]
[Fri Apr 17 02:25:28.595960 2026] [:error] [pid 43387:tid 43450] [client 51.12.89.191:12822] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aeEpmCBNsONqHxWTakVL_QAAAII"]
[Fri Apr 17 02:25:29.138882 2026] [:error] [pid 43386:tid 43421] [client 51.12.89.191:1658] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aeEpme91GAVgUfhPVDHirQAAAEE"]
[Fri Apr 17 02:25:29.760432 2026] [:error] [pid 43386:tid 43438] [client 51.12.89.191:12828] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aeEpme91GAVgUfhPVDHisAAAAFI"]
[Fri Apr 17 02:25:30.364140 2026] [:error] [pid 43387:tid 43460] [client 51.12.89.191:1601] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aeEpmiBNsONqHxWTakVMBwAAAIk"]
[Fri Apr 17 02:25:30.888787 2026] [:error] [pid 43387:tid 43454] [client 51.12.89.191:12827] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aeEpmiBNsONqHxWTakVMCwAAAIQ"]
[Fri Apr 17 02:25:31.421592 2026] [:error] [pid 43385:tid 43413] [client 51.12.89.191:12824] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aeEpm8nIxkJaUI8KNs4w9QAAABc"]
[Fri Apr 17 02:25:31.956061 2026] [:error] [pid 43482:tid 43500] [client 51.12.89.191:1824] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aeEpmz9SZnuKxlHrct23GAAAANA"]
[Fri Apr 17 02:25:32.530734 2026] [:error] [pid 43386:tid 43429] [client 51.12.89.191:1652] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aeEpnO91GAVgUfhPVDHivgAAAEk"]
[Fri Apr 17 02:25:33.127452 2026] [:error] [pid 43482:tid 43494] [client 51.12.89.191:12856] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aeEpnT9SZnuKxlHrct23GgAAAMo"]
[Fri Apr 17 02:25:33.672096 2026] [:error] [pid 43482:tid 43492] [client 51.12.89.191:1629] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aeEpnT9SZnuKxlHrct23HAAAAMg"]
[Fri Apr 17 02:25:34.207507 2026] [:error] [pid 26102:tid 26105] [client 51.12.89.191:12861] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aeEpnv127aFqw6ALdnggGQAAAYA"]
[Fri Apr 17 02:25:34.790201 2026] [:error] [pid 4086:tid 4113] [client 51.12.89.191:1641] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aeEpnllz7gxl_exM0FpPZQAAAVg"]
[Fri Apr 17 02:25:35.367918 2026] [:error] [pid 4086:tid 4089] [client 51.12.89.191:1855] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "aeEpn1lz7gxl_exM0FpPZwAAAUE"]
[Fri Apr 17 02:25:35.971452 2026] [:error] [pid 11854:tid 11880] [client 51.12.89.191:1661] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "aeEpn9xJCSIaqP1XSdai3gAAAlc"]
[Fri Apr 17 02:25:36.508578 2026] [:error] [pid 11854:tid 11857] [client 51.12.89.191:1634] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "aeEpoNxJCSIaqP1XSdai3wAAAkA"]
[Fri Apr 17 02:25:37.034908 2026] [:error] [pid 43482:tid 43506] [client 51.12.89.191:1814] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "aeEpoT9SZnuKxlHrct23IAAAANY"]
[Fri Apr 17 02:25:37.564984 2026] [:error] [pid 11692:tid 11704] [client 51.12.89.191:12810] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aeEpoc1AYuhm4BZwKNok6gAAAgc"]
[Fri Apr 17 02:25:38.107942 2026] [:error] [pid 43386:tid 43435] [client 51.12.89.191:12836] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aeEpou91GAVgUfhPVDHiygAAAE8"]
[Fri Apr 17 02:25:38.716829 2026] [:error] [pid 43386:tid 43445] [client 51.12.89.191:1630] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aeEpou91GAVgUfhPVDHi0gAAAFg"]
[Fri Apr 17 02:25:39.259516 2026] [:error] [pid 43386:tid 43430] [client 51.12.89.191:1609] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aeEpo-91GAVgUfhPVDHi1gAAAEo"]
[Fri Apr 17 02:25:39.842066 2026] [:error] [pid 43387:tid 43476] [client 51.12.89.191:12823] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aeEpoyBNsONqHxWTakVMGAAAAJc"]
[Fri Apr 17 02:25:40.421393 2026] [:error] [pid 43482:tid 43496] [client 51.12.89.191:1663] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aeEppD9SZnuKxlHrct23JAAAAMw"]
[Fri Apr 17 02:25:40.957281 2026] [:error] [pid 3245:tid 3280] [client 51.12.89.191:1645] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aeEppKESOMTHVLs-uFDdBwAAARI"]
[Fri Apr 17 02:25:59.823628 2026] [proxy_fcgi:error] [pid 43386:tid 43443] [client 51.12.89.191:1831] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:26:14.416564 2026] [proxy_fcgi:error] [pid 11854:tid 11864] [client 51.12.89.191:1824] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:26:27.172310 2026] [proxy_fcgi:error] [pid 11854:tid 11860] [client 51.12.89.191:1816] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:26:36.630616 2026] [proxy_fcgi:error] [pid 26102:tid 26117] [client 51.12.89.191:12806] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:26:41.862115 2026] [:error] [pid 43482:tid 43507] [client 51.12.89.191:12839] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeEp4T9SZnuKxlHrct23egAAANc"]
[Fri Apr 17 02:26:42.461432 2026] [:error] [pid 43482:tid 43497] [client 51.12.89.191:1631] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeEp4j9SZnuKxlHrct23ewAAAM0"]
[Fri Apr 17 02:26:42.994994 2026] [:error] [pid 43387:tid 43457] [client 51.12.89.191:1812] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeEp4iBNsONqHxWTakVMSAAAAIY"]
[Fri Apr 17 02:26:43.592409 2026] [:error] [pid 4086:tid 4096] [client 51.12.89.191:1646] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeEp41lz7gxl_exM0FpPhAAAAUg"]
[Fri Apr 17 02:26:44.116511 2026] [:error] [pid 43386:tid 43427] [client 51.12.89.191:1854] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeEp5O91GAVgUfhPVDHjKwAAAEc"]
[Fri Apr 17 02:26:44.641722 2026] [:error] [pid 43385:tid 43412] [client 51.12.89.191:1853] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeEp5MnIxkJaUI8KNs4xXAAAABY"]
[Fri Apr 17 02:26:45.216004 2026] [:error] [pid 43386:tid 43425] [client 51.12.89.191:12829] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeEp5e91GAVgUfhPVDHjLwAAAEU"]
[Fri Apr 17 02:26:45.779228 2026] [:error] [pid 3245:tid 3264] [client 51.12.89.191:1712] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeEp5aESOMTHVLs-uFDdLwAAAQI"]
[Fri Apr 17 02:26:46.388811 2026] [:error] [pid 26480:tid 26490] [client 51.12.89.191:1807] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aeEp5gwLDJKTQNfarA2NWgAAAcg"]
[Fri Apr 17 02:26:46.923551 2026] [:error] [pid 43387:tid 43467] [client 51.12.89.191:1621] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aeEp5iBNsONqHxWTakVMSwAAAI4"]
[Fri Apr 17 02:26:47.450037 2026] [:error] [pid 26480:tid 26491] [client 51.12.89.191:1608] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aeEp5wwLDJKTQNfarA2NXAAAAck"]
[Fri Apr 17 02:26:47.972134 2026] [:error] [pid 26480:tid 26504] [client 51.12.89.191:12833] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aeEp5wwLDJKTQNfarA2NXQAAAdY"]
[Fri Apr 17 02:26:48.526327 2026] [:error] [pid 43386:tid 43422] [client 51.12.89.191:1678] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeEp6O91GAVgUfhPVDHjOgAAAEI"]
[Fri Apr 17 02:26:49.061326 2026] [:error] [pid 3245:tid 3276] [client 51.12.89.191:1620] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeEp6aESOMTHVLs-uFDdMgAAAQ4"]
[Fri Apr 17 02:26:49.592027 2026] [:error] [pid 3245:tid 3277] [client 51.12.89.191:1656] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeEp6aESOMTHVLs-uFDdMwAAAQ8"]
[Fri Apr 17 02:26:50.123268 2026] [:error] [pid 4086:tid 4089] [client 51.12.89.191:12866] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeEp6llz7gxl_exM0FpPhgAAAUE"]
[Fri Apr 17 02:26:50.666158 2026] [:error] [pid 4086:tid 4094] [client 51.12.89.191:12857] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeEp6llz7gxl_exM0FpPiAAAAUY"]
[Fri Apr 17 02:26:51.197620 2026] [:error] [pid 43482:tid 43503] [client 51.12.89.191:1832] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeEp6z9SZnuKxlHrct23iQAAANM"]
[Fri Apr 17 02:26:51.764154 2026] [:error] [pid 43387:tid 43465] [client 51.12.89.191:1651] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeEp6yBNsONqHxWTakVMVAAAAIw"]
[Fri Apr 17 02:26:52.355660 2026] [:error] [pid 43482:tid 43502] [client 51.12.89.191:1657] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeEp7D9SZnuKxlHrct23jAAAANI"]
[Fri Apr 17 02:26:52.954868 2026] [:error] [pid 43482:tid 43507] [client 51.12.89.191:1643] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aeEp7D9SZnuKxlHrct23jQAAANc"]
[Fri Apr 17 02:26:53.494265 2026] [:error] [pid 43386:tid 43433] [client 51.12.89.191:1612] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aeEp7e91GAVgUfhPVDHjPwAAAE0"]
[Fri Apr 17 02:26:54.084170 2026] [:error] [pid 43482:tid 43498] [client 51.12.89.191:12854] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aeEp7j9SZnuKxlHrct23kQAAAM4"]
[Fri Apr 17 02:26:54.670326 2026] [:error] [pid 43386:tid 43428] [client 51.12.89.191:1829] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aeEp7u91GAVgUfhPVDHjRQAAAEg"]
[Fri Apr 17 02:26:55.205397 2026] [:error] [pid 43386:tid 43435] [client 51.12.89.191:1665] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "aeEp7-91GAVgUfhPVDHjRwAAAE8"]
[Fri Apr 17 02:26:55.779206 2026] [:error] [pid 43482:tid 43496] [client 51.12.89.191:1793] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "aeEp7z9SZnuKxlHrct23mAAAAMw"]
[Fri Apr 17 02:26:56.323079 2026] [:error] [pid 43387:tid 43473] [client 51.12.89.191:1819] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "aeEp8CBNsONqHxWTakVMZwAAAJQ"]
[Fri Apr 17 02:26:56.860371 2026] [:error] [pid 26480:tid 26489] [client 51.12.89.191:1642] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "aeEp8AwLDJKTQNfarA2NZwAAAcc"]
[Fri Apr 17 02:26:57.408025 2026] [:error] [pid 3245:tid 3282] [client 51.12.89.191:1614] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "aeEp8aESOMTHVLs-uFDdPQAAARQ"]
[Fri Apr 17 02:26:57.932271 2026] [:error] [pid 43482:tid 43502] [client 51.12.89.191:12837] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "aeEp8T9SZnuKxlHrct23oQAAANI"]
[Fri Apr 17 02:26:58.474452 2026] [:error] [pid 11854:tid 11875] [client 51.12.89.191:1623] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "aeEp8txJCSIaqP1XSdajHAAAAlI"]
[Fri Apr 17 02:26:59.041113 2026] [:error] [pid 26480:tid 26490] [client 51.12.89.191:1796] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "aeEp8wwLDJKTQNfarA2NbAAAAcg"]
[Fri Apr 17 02:26:59.629611 2026] [:error] [pid 43482:tid 43491] [client 51.12.89.191:1696] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "aeEp8z9SZnuKxlHrct23pQAAAMc"]
[Fri Apr 17 02:27:00.170717 2026] [:error] [pid 3245:tid 3285] [client 51.12.89.191:1802] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "aeEp9KESOMTHVLs-uFDdPwAAARc"]
[Fri Apr 17 02:27:00.693834 2026] [:error] [pid 43385:tid 43412] [client 51.12.89.191:1801] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "aeEp9MnIxkJaUI8KNs4xbwAAABY"]
[Fri Apr 17 02:27:01.272126 2026] [:error] [pid 11854:tid 11863] [client 51.12.89.191:1616] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "aeEp9dxJCSIaqP1XSdajIgAAAkY"]
[Fri Apr 17 02:27:01.798567 2026] [:error] [pid 3245:tid 3274] [client 51.12.89.191:1632] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aeEp9aESOMTHVLs-uFDdQgAAAQw"]
[Fri Apr 17 02:27:02.396965 2026] [:error] [pid 4086:tid 4097] [client 51.12.89.191:1800] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aeEp9llz7gxl_exM0FpPlAAAAUk"]
[Fri Apr 17 02:27:02.928982 2026] [:error] [pid 26480:tid 26496] [client 51.12.89.191:1650] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aeEp9gwLDJKTQNfarA2NcgAAAc4"]
[Fri Apr 17 02:27:03.458911 2026] [:error] [pid 43385:tid 43404] [client 51.12.89.191:1725] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aeEp98nIxkJaUI8KNs4xdQAAAA8"]
[Fri Apr 17 02:27:04.081661 2026] [:error] [pid 43385:tid 43399] [client 51.12.89.191:1690] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aeEp-MnIxkJaUI8KNs4xdgAAAAo"]
[Fri Apr 17 02:27:04.618616 2026] [:error] [pid 43386:tid 43429] [client 51.12.89.191:1640] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aeEp-O91GAVgUfhPVDHjVQAAAEk"]
[Fri Apr 17 02:27:05.193900 2026] [:error] [pid 43386:tid 43444] [client 51.12.89.191:12850] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aeEp-e91GAVgUfhPVDHjWgAAAFc"]
[Fri Apr 17 02:27:05.759364 2026] [:error] [pid 43386:tid 43443] [client 51.12.89.191:12842] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aeEp-e91GAVgUfhPVDHjXwAAAFY"]
[Fri Apr 17 02:27:06.292425 2026] [:error] [pid 43385:tid 43396] [client 51.12.89.191:1602] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEp-snIxkJaUI8KNs4xfAAAAAc"]
[Fri Apr 17 02:27:06.834875 2026] [:error] [pid 43386:tid 43422] [client 51.12.89.191:1803] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEp-u91GAVgUfhPVDHjaQAAAEI"]
[Fri Apr 17 02:27:07.359012 2026] [:error] [pid 43386:tid 43444] [client 51.12.89.191:12813] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEp--91GAVgUfhPVDHjbwAAAFc"]
[Fri Apr 17 02:27:07.962808 2026] [:error] [pid 4086:tid 4093] [client 51.12.89.191:1618] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEp-1lz7gxl_exM0FpPlgAAAUU"]
[Fri Apr 17 02:27:08.496645 2026] [:error] [pid 26480:tid 26493] [client 51.12.89.191:12815] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEp_AwLDJKTQNfarA2NhAAAAcs"]
[Fri Apr 17 02:27:09.085815 2026] [:error] [pid 43386:tid 43441] [client 51.12.89.191:1830] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEp_e91GAVgUfhPVDHjfQAAAFQ"]
[Fri Apr 17 02:27:09.621291 2026] [:error] [pid 11854:tid 11862] [client 51.12.89.191:12859] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEp_dxJCSIaqP1XSdajKwAAAkU"]
[Fri Apr 17 02:27:10.211230 2026] [:error] [pid 26102:tid 26124] [client 51.12.89.191:1633] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEp_v127aFqw6ALdngghAAAAZM"]
[Fri Apr 17 02:27:10.734036 2026] [:error] [pid 43386:tid 43423] [client 51.12.89.191:1648] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeEp_u91GAVgUfhPVDHjhgAAAEM"]
[Fri Apr 17 02:27:11.329673 2026] [:error] [pid 43386:tid 43436] [client 51.12.89.191:1680] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeEp_-91GAVgUfhPVDHjigAAAFA"]
[Fri Apr 17 02:27:11.872163 2026] [:error] [pid 43386:tid 43420] [client 51.12.89.191:1654] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeEp_-91GAVgUfhPVDHjjQAAAEA"]
[Fri Apr 17 02:27:12.491296 2026] [:error] [pid 43386:tid 43428] [client 51.12.89.191:1664] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeEqAO91GAVgUfhPVDHjlAAAAEg"]
[Fri Apr 17 02:27:13.025397 2026] [:error] [pid 43482:tid 43500] [client 51.12.89.191:1637] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeEqAT9SZnuKxlHrct23rwAAANA"]
[Fri Apr 17 02:27:13.595693 2026] [:error] [pid 43482:tid 43493] [client 51.12.89.191:1647] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeEqAT9SZnuKxlHrct23sQAAAMk"]
[Fri Apr 17 02:27:14.122899 2026] [:error] [pid 11692:tid 11707] [client 51.12.89.191:1607] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeEqAs1AYuhm4BZwKNolEgAAAgo"]
[Fri Apr 17 02:27:14.648004 2026] [:error] [pid 43385:tid 43403] [client 51.12.89.191:1706] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeEqAsnIxkJaUI8KNs4xggAAAA4"]
[Fri Apr 17 02:27:15.171779 2026] [:error] [pid 43385:tid 43393] [client 51.12.89.191:1611] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aeEqA8nIxkJaUI8KNs4xgwAAAAQ"]
[Fri Apr 17 02:27:15.696029 2026] [:error] [pid 26102:tid 26116] [client 51.12.89.191:1635] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aeEqA_127aFqw6ALdnggiwAAAYs"]
[Fri Apr 17 02:27:16.287202 2026] [:error] [pid 26102:tid 26108] [client 51.12.89.191:1695] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aeEqBP127aFqw6ALdnggjgAAAYM"]
[Fri Apr 17 02:27:16.824646 2026] [:error] [pid 11854:tid 11866] [client 51.12.89.191:1721] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aeEqBNxJCSIaqP1XSdajMwAAAkk"]
[Fri Apr 17 02:27:17.348566 2026] [:error] [pid 11854:tid 11859] [client 51.12.89.191:1686] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aeEqBdxJCSIaqP1XSdajNQAAAkI"]
[Fri Apr 17 02:27:17.888739 2026] [:error] [pid 3245:tid 3284] [client 51.12.89.191:1699] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aeEqBaESOMTHVLs-uFDdTAAAARY"]
[Fri Apr 17 02:27:18.434769 2026] [:error] [pid 26480:tid 26504] [client 51.12.89.191:12814] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aeEqBgwLDJKTQNfarA2NoQAAAdY"]
[Fri Apr 17 02:27:18.971916 2026] [:error] [pid 11692:tid 11711] [client 51.12.89.191:1689] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aeEqBs1AYuhm4BZwKNolEwAAAg4"]
[Fri Apr 17 02:27:19.498676 2026] [:error] [pid 43482:tid 43505] [client 51.12.89.191:1676] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeEqBz9SZnuKxlHrct23ugAAANU"]
[Fri Apr 17 02:27:20.087040 2026] [:error] [pid 11854:tid 11879] [client 51.12.89.191:1792] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeEqCNxJCSIaqP1XSdajPwAAAlY"]
[Fri Apr 17 02:27:20.675021 2026] [:error] [pid 43387:tid 43459] [client 51.12.89.191:12800] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeEqCCBNsONqHxWTakVMggAAAIg"]
[Fri Apr 17 02:27:21.212619 2026] [:error] [pid 43387:tid 43465] [client 51.12.89.191:12853] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeEqCSBNsONqHxWTakVMhAAAAIw"]
[Fri Apr 17 02:27:21.785490 2026] [:error] [pid 26102:tid 26120] [client 51.12.89.191:12864] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aeEqCf127aFqw6ALdngglAAAAY8"]
[Fri Apr 17 02:27:22.437400 2026] [:error] [pid 43482:tid 43500] [client 51.12.89.191:1639] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aeEqCj9SZnuKxlHrct23xQAAANA"]
[Fri Apr 17 02:27:22.979237 2026] [:error] [pid 43386:tid 43425] [client 51.12.89.191:1708] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aeEqCu91GAVgUfhPVDHjqAAAAEU"]
[Fri Apr 17 02:27:23.523356 2026] [:error] [pid 43385:tid 43411] [client 51.12.89.191:1705] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aeEqC8nIxkJaUI8KNs4xiAAAABU"]
[Fri Apr 17 02:27:24.143626 2026] [:error] [pid 43482:tid 43507] [client 51.12.89.191:1668] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aeEqDD9SZnuKxlHrct23zAAAANc"]
[Fri Apr 17 02:27:24.714359 2026] [:error] [pid 3245:tid 3283] [client 51.12.89.191:1848] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aeEqDKESOMTHVLs-uFDdUwAAARU"]
[Fri Apr 17 02:27:25.241077 2026] [:error] [pid 11692:tid 11710] [client 51.12.89.191:1703] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aeEqDc1AYuhm4BZwKNolHQAAAg0"]
[Fri Apr 17 02:27:25.838672 2026] [:error] [pid 26480:tid 26491] [client 51.12.89.191:1604] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aeEqDQwLDJKTQNfarA2NqAAAAck"]
[Fri Apr 17 02:27:26.430683 2026] [:error] [pid 4086:tid 4100] [client 51.12.89.191:1805] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeEqDllz7gxl_exM0FpPogAAAUw"]
[Fri Apr 17 02:27:27.024018 2026] [:error] [pid 43387:tid 43448] [client 51.12.89.191:12870] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeEqDyBNsONqHxWTakVMjAAAAIA"]
[Fri Apr 17 02:27:27.583965 2026] [:error] [pid 26102:tid 26108] [client 51.12.89.191:1638] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeEqD_127aFqw6ALdnggnQAAAYM"]
[Fri Apr 17 02:27:28.116606 2026] [:error] [pid 11692:tid 11713] [client 51.12.89.191:1823] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeEqEM1AYuhm4BZwKNolKwAAAhA"]
[Fri Apr 17 02:27:28.681357 2026] [:error] [pid 4086:tid 4112] [client 51.12.89.191:12911] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEqEFlz7gxl_exM0FpPpgAAAVc"]
[Fri Apr 17 02:27:29.305290 2026] [:error] [pid 43385:tid 43393] [client 51.12.89.191:12860] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEqEcnIxkJaUI8KNs4xkQAAAAQ"]
[Fri Apr 17 02:27:29.826177 2026] [:error] [pid 43387:tid 43475] [client 51.12.89.191:12855] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEqESBNsONqHxWTakVMjwAAAJY"]
[Fri Apr 17 02:27:30.365248 2026] [:error] [pid 43387:tid 43460] [client 51.12.89.191:1692] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEqEiBNsONqHxWTakVMkwAAAIk"]
[Fri Apr 17 02:27:30.929353 2026] [:error] [pid 26480:tid 26496] [client 51.12.89.191:1667] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless4.php"] [unique_id "aeEqEgwLDJKTQNfarA2NrAAAAc4"]
[Fri Apr 17 02:27:31.506145 2026] [:error] [pid 43482:tid 43494] [client 51.12.89.191:1837] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless4.php"] [unique_id "aeEqEz9SZnuKxlHrct230wAAAMo"]
[Fri Apr 17 02:27:32.097751 2026] [:error] [pid 43386:tid 43427] [client 51.12.89.191:1688] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless4.php"] [unique_id "aeEqFO91GAVgUfhPVDHjrgAAAEc"]
[Fri Apr 17 02:27:32.627935 2026] [:error] [pid 43482:tid 43499] [client 51.12.89.191:12867] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless4.php"] [unique_id "aeEqFD9SZnuKxlHrct232AAAAM8"]
[Fri Apr 17 02:27:33.151209 2026] [:error] [pid 43386:tid 43445] [client 51.12.89.191:1838] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeEqFe91GAVgUfhPVDHjswAAAFg"]
[Fri Apr 17 02:27:33.746887 2026] [:error] [pid 11692:tid 11717] [client 51.12.89.191:12875] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeEqFc1AYuhm4BZwKNolMwAAAhQ"]
[Fri Apr 17 02:27:34.287741 2026] [:error] [pid 43386:tid 43425] [client 51.12.89.191:1842] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeEqFu91GAVgUfhPVDHjtQAAAEU"]
[Fri Apr 17 02:27:34.826006 2026] [:error] [pid 4086:tid 4113] [client 51.12.89.191:1600] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeEqFllz7gxl_exM0FpPqgAAAVg"]
[Fri Apr 17 02:27:35.361690 2026] [:error] [pid 43482:tid 43488] [client 51.12.89.191:1674] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xqq.php"] [unique_id "aeEqFz9SZnuKxlHrct233wAAAMQ"]
[Fri Apr 17 02:27:35.891130 2026] [:error] [pid 4086:tid 4089] [client 51.12.89.191:1691] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xqq.php"] [unique_id "aeEqF1lz7gxl_exM0FpPqwAAAUE"]
[Fri Apr 17 02:27:36.483788 2026] [:error] [pid 43386:tid 43422] [client 51.12.89.191:1613] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xqq.php"] [unique_id "aeEqGO91GAVgUfhPVDHjuAAAAEI"]
[Fri Apr 17 02:27:37.009771 2026] [:error] [pid 26102:tid 26107] [client 51.12.89.191:12869] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xqq.php"] [unique_id "aeEqGf127aFqw6ALdnggogAAAYI"]
[Fri Apr 17 02:27:37.553150 2026] [:error] [pid 43385:tid 43408] [client 51.12.89.191:1666] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aeEqGcnIxkJaUI8KNs4xoAAAABM"]
[Fri Apr 17 02:27:38.089300 2026] [:error] [pid 43387:tid 43462] [client 51.12.89.191:12840] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aeEqGiBNsONqHxWTakVMmAAAAIs"]
[Fri Apr 17 02:27:38.622650 2026] [:error] [pid 43482:tid 43497] [client 51.12.89.191:1687] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aeEqGj9SZnuKxlHrct236QAAAM0"]
[Fri Apr 17 02:27:59.524093 2026] [:error] [pid 43386:tid 43421] [client 51.12.89.191:1836] [client 51.12.89.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeEqL-91GAVgUfhPVDHkFAAAAEE"]
[Fri Apr 17 02:28:06.918950 2026] [proxy_fcgi:error] [pid 43386:tid 43422] [client 51.12.89.191:1803] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:28:12.449938 2026] [autoindex:error] [pid 43482:tid 43505] [client 51.12.89.191:1660] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 17 02:28:20.444057 2026] [proxy_fcgi:error] [pid 43386:tid 43426] [client 51.12.89.191:12833] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:28:29.882097 2026] [proxy_fcgi:error] [pid 43385:tid 43401] [client 51.12.89.191:1828] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 02:28:46.708167 2026] [:error] [pid 26480:tid 26501] [client 51.12.89.191:1684] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeEqXgwLDJKTQNfarA2OLwAAAdM"]
[Fri Apr 17 02:28:47.291523 2026] [:error] [pid 3245:tid 3277] [client 51.12.89.191:1670] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeEqX6ESOMTHVLs-uFDdoQAAAQ8"]
[Fri Apr 17 02:28:47.827701 2026] [:error] [pid 3245:tid 3265] [client 51.12.89.191:1683] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeEqX6ESOMTHVLs-uFDdpwAAAQM"]
[Fri Apr 17 02:28:48.399441 2026] [:error] [pid 3245:tid 3271] [client 51.12.89.191:12918] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeEqYKESOMTHVLs-uFDdqwAAAQk"]
[Fri Apr 17 02:28:48.929526 2026] [:error] [pid 3245:tid 3276] [client 51.12.89.191:12892] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aeEqYKESOMTHVLs-uFDdrQAAAQ4"]
[Fri Apr 17 02:28:49.515662 2026] [:error] [pid 43482:tid 43504] [client 51.12.89.191:1726] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aeEqYT9SZnuKxlHrct24XQAAANQ"]
[Fri Apr 17 02:28:50.098620 2026] [:error] [pid 43387:tid 43450] [client 51.12.89.191:1702] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aeEqYiBNsONqHxWTakVMzwAAAII"]
[Fri Apr 17 02:28:50.704680 2026] [:error] [pid 26480:tid 26484] [client 51.12.89.191:1617] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aeEqYgwLDJKTQNfarA2OMwAAAcI"]
[Fri Apr 17 02:28:51.314848 2026] [:error] [pid 11692:tid 11708] [client 51.12.89.191:1709] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aeEqY81AYuhm4BZwKNolZQAAAgs"]
[Fri Apr 17 02:28:51.843232 2026] [:error] [pid 11692:tid 11721] [client 51.12.89.191:12841] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aeEqY81AYuhm4BZwKNolaAAAAhg"]
[Fri Apr 17 02:28:52.410329 2026] [:error] [pid 26480:tid 26493] [client 51.12.89.191:1673] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aeEqZAwLDJKTQNfarA2OOAAAAcs"]
[Fri Apr 17 02:28:53.087004 2026] [:error] [pid 43387:tid 43467] [client 51.12.89.191:1644] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aeEqZSBNsONqHxWTakVM0wAAAI4"]
[Fri Apr 17 02:28:53.681036 2026] [:error] [pid 43387:tid 43477] [client 51.12.89.191:1713] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEqZSBNsONqHxWTakVM1wAAAJg"]
[Fri Apr 17 02:28:54.286847 2026] [:error] [pid 3245:tid 3270] [client 51.12.89.191:1825] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEqZqESOMTHVLs-uFDdsgAAAQg"]
[Fri Apr 17 02:28:54.867168 2026] [:error] [pid 4086:tid 4091] [client 51.12.89.191:1681] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEqZllz7gxl_exM0FpP4gAAAUM"]
[Fri Apr 17 02:28:55.551792 2026] [:error] [pid 4086:tid 4107] [client 51.12.89.191:1697] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEqZ1lz7gxl_exM0FpP5AAAAVM"]
[Fri Apr 17 02:28:56.080814 2026] [:error] [pid 11692:tid 11697] [client 51.12.89.191:12896] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aeEqaM1AYuhm4BZwKNolbQAAAgA"]
[Fri Apr 17 02:28:56.652968 2026] [:error] [pid 43387:tid 43460] [client 51.12.89.191:1625] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aeEqaCBNsONqHxWTakVM6wAAAIk"]
[Fri Apr 17 02:28:57.194664 2026] [:error] [pid 43386:tid 43433] [client 51.12.89.191:12832] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aeEqae91GAVgUfhPVDHktQAAAE0"]
[Fri Apr 17 02:28:57.780533 2026] [:error] [pid 26480:tid 26489] [client 51.12.89.191:12877] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aeEqaQwLDJKTQNfarA2OPAAAAcc"]
[Fri Apr 17 02:28:58.321378 2026] [:error] [pid 26480:tid 26485] [client 51.12.89.191:1677] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aeEqagwLDJKTQNfarA2OPgAAAcM"]
[Fri Apr 17 02:28:58.895107 2026] [:error] [pid 43385:tid 43399] [client 51.12.89.191:12852] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aeEqasnIxkJaUI8KNs4x1wAAAAo"]
[Fri Apr 17 02:28:59.549169 2026] [:error] [pid 11692:tid 11699] [client 51.12.89.191:1662] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aeEqa81AYuhm4BZwKNolbwAAAgI"]
[Fri Apr 17 02:29:00.134129 2026] [:error] [pid 43385:tid 43395] [client 51.12.89.191:1711] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aeEqbMnIxkJaUI8KNs4x2wAAAAY"]
[Fri Apr 17 02:29:00.725775 2026] [:error] [pid 11692:tid 11707] [client 51.12.89.191:12883] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEqbM1AYuhm4BZwKNolcAAAAgo"]
[Fri Apr 17 02:29:01.275070 2026] [:error] [pid 26480:tid 26491] [client 51.12.89.191:1850] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEqbQwLDJKTQNfarA2OQwAAAck"]
[Fri Apr 17 02:29:01.800956 2026] [:error] [pid 43387:tid 43465] [client 51.12.89.191:1615] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEqbSBNsONqHxWTakVNAwAAAIw"]
[Fri Apr 17 02:29:02.364683 2026] [:error] [pid 4086:tid 4105] [client 51.12.89.191:12899] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEqbllz7gxl_exM0FpP5wAAAVE"]
[Fri Apr 17 02:29:02.889899 2026] [:error] [pid 43387:tid 43469] [client 51.12.89.191:1731] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEqbiBNsONqHxWTakVNCAAAAJA"]
[Fri Apr 17 02:29:03.471188 2026] [:error] [pid 43482:tid 43488] [client 51.12.89.191:12835] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEqbz9SZnuKxlHrct24bgAAAMQ"]
[Fri Apr 17 02:29:04.072388 2026] [:error] [pid 43482:tid 43507] [client 51.12.89.191:1672] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEqcD9SZnuKxlHrct24cAAAANc"]
[Fri Apr 17 02:29:04.611868 2026] [:error] [pid 43387:tid 43472] [client 51.12.89.191:12868] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEqcCBNsONqHxWTakVNCwAAAJM"]
[Fri Apr 17 02:29:05.163359 2026] [:error] [pid 43387:tid 43460] [client 51.12.89.191:1714] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEqcSBNsONqHxWTakVNDgAAAIk"]
[Fri Apr 17 02:29:05.738974 2026] [:error] [pid 26480:tid 26493] [client 51.12.89.191:1717] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEqcQwLDJKTQNfarA2OSQAAAcs"]
[Fri Apr 17 02:29:06.289829 2026] [:error] [pid 43482:tid 43487] [client 51.12.89.191:1624] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEqcj9SZnuKxlHrct24eAAAAMM"]
[Fri Apr 17 02:29:06.875974 2026] [:error] [pid 43482:tid 43502] [client 51.12.89.191:1649] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEqcj9SZnuKxlHrct24ewAAANI"]
[Fri Apr 17 02:29:07.409079 2026] [:error] [pid 43482:tid 43493] [client 51.12.89.191:12884] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeEqcz9SZnuKxlHrct24gQAAAMk"]
[Fri Apr 17 02:29:07.947573 2026] [:error] [pid 43482:tid 43492] [client 51.12.89.191:12897] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeEqcz9SZnuKxlHrct24hgAAAMg"]
[Fri Apr 17 02:29:08.500668 2026] [:error] [pid 26102:tid 26105] [client 51.12.89.191:12865] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeEqdP127aFqw6ALdngg1AAAAYA"]
[Fri Apr 17 02:29:09.036527 2026] [:error] [pid 43482:tid 43505] [client 51.12.89.191:12873] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeEqdT9SZnuKxlHrct24jQAAANU"]
[Fri Apr 17 02:29:09.587716 2026] [:error] [pid 43482:tid 43486] [client 51.12.89.191:1716] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeEqdT9SZnuKxlHrct24kQAAAMI"]
[Fri Apr 17 02:29:10.160643 2026] [:error] [pid 26102:tid 26124] [client 51.12.89.191:1728] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeEqdv127aFqw6ALdngg1gAAAZM"]
[Fri Apr 17 02:29:10.685068 2026] [:error] [pid 43386:tid 43420] [client 51.12.89.191:1671] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeEqdu91GAVgUfhPVDHkvwAAAEA"]
[Fri Apr 17 02:29:11.207024 2026] [:error] [pid 43386:tid 43438] [client 51.12.89.191:1707] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeEqd-91GAVgUfhPVDHkxAAAAFI"]
[Fri Apr 17 02:29:11.731447 2026] [:error] [pid 43386:tid 43429] [client 51.12.89.191:1724] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEqd-91GAVgUfhPVDHkxwAAAEk"]
[Fri Apr 17 02:29:12.259728 2026] [:error] [pid 43386:tid 43421] [client 51.12.89.191:1620] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEqeO91GAVgUfhPVDHkygAAAEE"]
[Fri Apr 17 02:29:12.791130 2026] [:error] [pid 11854:tid 11880] [client 51.12.89.191:1756] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEqeNxJCSIaqP1XSdaj4gAAAlc"]
[Fri Apr 17 02:29:13.381254 2026] [:error] [pid 43386:tid 43437] [client 51.12.89.191:12889] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEqee91GAVgUfhPVDHkzAAAAFE"]
[Fri Apr 17 02:29:13.910119 2026] [:error] [pid 11854:tid 11876] [client 51.12.89.191:12922] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeEqedxJCSIaqP1XSdaj4wAAAlM"]
[Fri Apr 17 02:29:14.449332 2026] [:error] [pid 3245:tid 3276] [client 51.12.89.191:1715] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeEqeqESOMTHVLs-uFDduwAAAQ4"]
[Fri Apr 17 02:29:14.984863 2026] [:error] [pid 11854:tid 11874] [client 51.12.89.191:12908] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeEqetxJCSIaqP1XSdaj5QAAAlE"]
[Fri Apr 17 02:29:15.510521 2026] [:error] [pid 26102:tid 26117] [client 51.12.89.191:12906] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeEqe_127aFqw6ALdngg2AAAAYw"]
[Fri Apr 17 02:29:16.038657 2026] [:error] [pid 26480:tid 26489] [client 51.12.89.191:12891] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEqfAwLDJKTQNfarA2OUAAAAcc"]
[Fri Apr 17 02:29:16.565022 2026] [:error] [pid 11854:tid 11868] [client 51.12.89.191:1675] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEqfNxJCSIaqP1XSdaj6QAAAks"]
[Fri Apr 17 02:29:17.156360 2026] [:error] [pid 43385:tid 43401] [client 51.12.89.191:12919] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEqfcnIxkJaUI8KNs4x5AAAAAw"]
[Fri Apr 17 02:29:17.734506 2026] [:error] [pid 26480:tid 26485] [client 51.12.89.191:12895] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEqfQwLDJKTQNfarA2OUQAAAcM"]
[Fri Apr 17 02:29:18.320818 2026] [:error] [pid 11854:tid 11857] [client 51.12.89.191:1698] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeEqftxJCSIaqP1XSdaj7QAAAkA"]
[Fri Apr 17 02:29:18.852365 2026] [:error] [pid 11854:tid 11859] [client 51.12.89.191:1744] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeEqftxJCSIaqP1XSdaj7wAAAkI"]
[Fri Apr 17 02:29:19.393776 2026] [:error] [pid 4086:tid 4099] [client 51.12.89.191:1682] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeEqf1lz7gxl_exM0FpP6wAAAUs"]
[Fri Apr 17 02:29:19.975969 2026] [:error] [pid 43482:tid 43507] [client 51.12.89.191:12902] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeEqfz9SZnuKxlHrct24vgAAANc"]
[Fri Apr 17 02:29:20.501157 2026] [:error] [pid 4086:tid 4108] [client 51.12.89.191:12916] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aeEqgFlz7gxl_exM0FpP7gAAAVQ"]
[Fri Apr 17 02:29:21.031733 2026] [:error] [pid 43385:tid 43390] [client 51.12.89.191:12834] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aeEqgcnIxkJaUI8KNs4x6QAAAAE"]
[Fri Apr 17 02:29:21.584222 2026] [:error] [pid 43386:tid 43443] [client 51.12.89.191:1719] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aeEqge91GAVgUfhPVDHk0wAAAFY"]
[Fri Apr 17 02:29:22.160883 2026] [:error] [pid 11692:tid 11710] [client 51.12.89.191:1735] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aeEqgs1AYuhm4BZwKNoleAAAAg0"]
[Fri Apr 17 02:29:22.724638 2026] [:error] [pid 4086:tid 4113] [client 51.12.89.191:1727] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aeEqgllz7gxl_exM0FpP8QAAAVg"]
[Fri Apr 17 02:29:23.275735 2026] [:error] [pid 26102:tid 26122] [client 51.12.89.191:1685] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aeEqg_127aFqw6ALdngg3QAAAZE"]
[Fri Apr 17 02:29:23.816986 2026] [:error] [pid 43386:tid 43444] [client 51.12.89.191:12807] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aeEqg-91GAVgUfhPVDHk2AAAAFc"]
[Fri Apr 17 02:29:24.351844 2026] [:error] [pid 11692:tid 11714] [client 51.12.89.191:12907] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aeEqhM1AYuhm4BZwKNolewAAAhE"]
[Fri Apr 17 02:29:24.931930 2026] [:error] [pid 43387:tid 43467] [client 51.12.89.191:12872] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aeEqhCBNsONqHxWTakVNYQAAAI4"]
[Fri Apr 17 02:29:25.501209 2026] [:error] [pid 4086:tid 4098] [client 51.12.89.191:1987] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aeEqhVlz7gxl_exM0FpP9AAAAUo"]
[Fri Apr 17 02:29:26.029220 2026] [:error] [pid 4086:tid 4094] [client 51.12.89.191:1739] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aeEqhllz7gxl_exM0FpP9QAAAUY"]
[Fri Apr 17 02:29:26.574576 2026] [:error] [pid 43385:tid 43402] [client 51.12.89.191:1653] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aeEqhsnIxkJaUI8KNs4x7wAAAA0"]
[Fri Apr 17 02:29:27.147921 2026] [:error] [pid 43482:tid 43488] [client 51.12.89.191:1704] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeEqhz9SZnuKxlHrct242QAAAMQ"]
[Fri Apr 17 02:29:27.684748 2026] [:error] [pid 11692:tid 11717] [client 51.12.89.191:1740] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeEqh81AYuhm4BZwKNolfQAAAhQ"]
[Fri Apr 17 02:29:28.237007 2026] [:error] [pid 4086:tid 4107] [client 51.12.89.191:1757] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeEqiFlz7gxl_exM0FpP-QAAAVM"]
[Fri Apr 17 02:29:28.794069 2026] [:error] [pid 4086:tid 4092] [client 51.12.89.191:1818] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeEqiFlz7gxl_exM0FpP-wAAAUQ"]
[Fri Apr 17 02:29:29.324792 2026] [:error] [pid 43386:tid 43435] [client 51.12.89.191:12871] [client 51.12.89.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeEqie91GAVgUfhPVDHk3AAAAE8"]
[Fri Apr 17 02:29:29.856194 2026] [:error] [pid 43386:tid 43421] [client 51.12.89.191:1767] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeEqie91GAVgUfhPVDHk3QAAAEE"]
[Fri Apr 17 02:29:30.433110 2026] [:error] [pid 26480:tid 26499] [client 51.12.89.191:1741] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeEqigwLDJKTQNfarA2OWwAAAdE"]
[Fri Apr 17 02:29:30.962307 2026] [:error] [pid 3245:tid 3266] [client 51.12.89.191:1746] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeEqiqESOMTHVLs-uFDdxQAAAQQ"]
[Fri Apr 17 02:29:31.494117 2026] [:error] [pid 43387:tid 43456] [client 51.12.89.191:1700] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeEqiyBNsONqHxWTakVNcgAAAIU"]
[Fri Apr 17 02:29:32.017726 2026] [:error] [pid 43387:tid 43454] [client 51.12.89.191:1769] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEqjCBNsONqHxWTakVNeQAAAIQ"]
[Fri Apr 17 02:29:32.613019 2026] [:error] [pid 43385:tid 43399] [client 51.12.89.191:1669] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEqjMnIxkJaUI8KNs4x-QAAAAo"]
[Fri Apr 17 02:29:33.145426 2026] [:error] [pid 43386:tid 43441] [client 51.12.89.191:12901] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEqje91GAVgUfhPVDHk6gAAAFQ"]
[Fri Apr 17 02:29:33.732593 2026] [:error] [pid 43387:tid 43454] [client 51.12.89.191:1693] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEqjSBNsONqHxWTakVNlQAAAIQ"]
[Fri Apr 17 02:29:34.280051 2026] [:error] [pid 26480:tid 26500] [client 51.12.89.191:1752] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEqjgwLDJKTQNfarA2OaAAAAdI"]
[Fri Apr 17 02:29:34.805663 2026] [:error] [pid 43387:tid 43454] [client 51.12.89.191:1794] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEqjiBNsONqHxWTakVNnQAAAIQ"]
[Fri Apr 17 02:29:35.395643 2026] [:error] [pid 26480:tid 26493] [client 51.12.89.191:1723] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEqjwwLDJKTQNfarA2OawAAAcs"]
[Fri Apr 17 02:29:35.942418 2026] [:error] [pid 43387:tid 43461] [client 51.12.89.191:1779] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEqjyBNsONqHxWTakVNnwAAAIo"]
[Fri Apr 17 02:29:36.509979 2026] [:error] [pid 26480:tid 26503] [client 51.12.89.191:12888] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeEqkAwLDJKTQNfarA2OcAAAAdU"]
[Fri Apr 17 02:29:37.048077 2026] [:error] [pid 26480:tid 26487] [client 51.12.89.191:12924] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeEqkQwLDJKTQNfarA2OdQAAAcU"]
[Fri Apr 17 02:29:37.629357 2026] [:error] [pid 26480:tid 26488] [client 51.12.89.191:2012] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeEqkQwLDJKTQNfarA2OeQAAAcY"]
[Fri Apr 17 02:29:38.214171 2026] [:error] [pid 26480:tid 26483] [client 51.12.89.191:12886] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeEqkgwLDJKTQNfarA2OgQAAAcE"]
[Fri Apr 17 02:29:38.799288 2026] [:error] [pid 26102:tid 26120] [client 51.12.89.191:1641] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aeEqkv127aFqw6ALdngg5gAAAY8"]
[Fri Apr 17 02:29:39.340919 2026] [:error] [pid 43386:tid 43420] [client 51.12.89.191:1811] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aeEqk-91GAVgUfhPVDHk8QAAAEA"]
[Fri Apr 17 02:29:39.873175 2026] [:error] [pid 43387:tid 43449] [client 51.12.89.191:1993] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aeEqkyBNsONqHxWTakVNqgAAAIE"]
[Fri Apr 17 02:29:40.449815 2026] [:error] [pid 43386:tid 43425] [client 51.12.89.191:12923] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "aeEqlO91GAVgUfhPVDHk9gAAAEU"]
[Fri Apr 17 02:29:40.976852 2026] [:error] [pid 43386:tid 43429] [client 51.12.89.191:12917] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev.php"] [unique_id "aeEqlO91GAVgUfhPVDHk-wAAAEk"]
[Fri Apr 17 02:29:41.560731 2026] [:error] [pid 43386:tid 43426] [client 51.12.89.191:12817] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev.php"] [unique_id "aeEqle91GAVgUfhPVDHlAAAAAEY"]
[Fri Apr 17 02:29:42.084538 2026] [:error] [pid 43387:tid 43449] [client 51.12.89.191:1718] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev.php"] [unique_id "aeEqliBNsONqHxWTakVNtgAAAIE"]
[Fri Apr 17 02:29:42.617676 2026] [:error] [pid 26102:tid 26112] [client 51.12.89.191:12910] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev.php"] [unique_id "aeEqlv127aFqw6ALdngg6QAAAYc"]
[Fri Apr 17 02:29:43.212695 2026] [:error] [pid 43387:tid 43473] [client 51.12.89.191:12920] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "aeEqlyBNsONqHxWTakVNwAAAAJQ"]
[Fri Apr 17 02:29:43.814162 2026] [:error] [pid 26480:tid 26487] [client 51.12.89.191:1761] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "aeEqlwwLDJKTQNfarA2OhgAAAcU"]
[Fri Apr 17 02:29:53.340104 2026] [:error] [pid 43387:tid 43454] [client 51.12.89.191:12890] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gssdd.php"] [unique_id "aeEqoSBNsONqHxWTakVN5QAAAIQ"]
[Fri Apr 17 02:29:53.874878 2026] [:error] [pid 11854:tid 11874] [client 51.12.89.191:1834] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gssdd.php"] [unique_id "aeEqodxJCSIaqP1XSdakCAAAAlE"]
[Fri Apr 17 02:29:54.565743 2026] [:error] [pid 11692:tid 11702] [client 51.12.89.191:12878] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gssdd.php"] [unique_id "aeEqos1AYuhm4BZwKNol4wAAAgU"]
[Fri Apr 17 02:29:55.148412 2026] [:error] [pid 11692:tid 11716] [client 51.12.89.191:12920] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gssdd.php"] [unique_id "aeEqo81AYuhm4BZwKNol5AAAAhM"]
[Fri Apr 17 02:29:55.749823 2026] [:error] [pid 43482:tid 43497] [client 51.12.89.191:12806] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEqoz9SZnuKxlHrct25IgAAAM0"]
[Fri Apr 17 02:29:56.281953 2026] [:error] [pid 3245:tid 3286] [client 51.12.89.191:12819] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEqpKESOMTHVLs-uFDd0wAAARg"]
[Fri Apr 17 02:29:56.880285 2026] [:error] [pid 4086:tid 4094] [client 51.12.89.191:12811] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEqpFlz7gxl_exM0FpQCAAAAUY"]
[Fri Apr 17 02:29:57.451284 2026] [:error] [pid 11692:tid 11713] [client 51.12.89.191:12802] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEqpc1AYuhm4BZwKNol6QAAAhA"]
[Fri Apr 17 02:29:58.008320 2026] [:error] [pid 43482:tid 43484] [client 51.12.89.191:1844] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aeEqpj9SZnuKxlHrct25LQAAAMA"]
[Fri Apr 17 02:29:58.584479 2026] [:error] [pid 43386:tid 43437] [client 51.12.89.191:12803] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aeEqpu91GAVgUfhPVDHlEQAAAFE"]
[Fri Apr 17 02:29:59.130320 2026] [:error] [pid 43386:tid 43427] [client 51.12.89.191:1998] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aeEqp-91GAVgUfhPVDHlEwAAAEc"]
[Fri Apr 17 02:29:59.733566 2026] [:error] [pid 4086:tid 4110] [client 51.12.89.191:12879] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aeEqp1lz7gxl_exM0FpQCgAAAVY"]
[Fri Apr 17 02:30:00.262927 2026] [:error] [pid 43385:tid 43389] [client 51.12.89.191:1758] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bengi.php"] [unique_id "aeEqqMnIxkJaUI8KNs4yBgAAAAA"]
[Fri Apr 17 02:30:00.798993 2026] [:error] [pid 43482:tid 43499] [client 51.12.89.191:1988] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bengi.php"] [unique_id "aeEqqD9SZnuKxlHrct25MAAAAM8"]
[Fri Apr 17 02:30:01.328603 2026] [:error] [pid 43386:tid 43422] [client 51.12.89.191:1722] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bengi.php"] [unique_id "aeEqqe91GAVgUfhPVDHlGQAAAEI"]
[Fri Apr 17 02:30:01.850805 2026] [:error] [pid 43385:tid 43404] [client 51.12.89.191:1743] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bengi.php"] [unique_id "aeEqqcnIxkJaUI8KNs4yDQAAAA8"]
[Fri Apr 17 02:30:02.376858 2026] [:error] [pid 43385:tid 43397] [client 51.12.89.191:1788] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEqqsnIxkJaUI8KNs4yEQAAAAg"]
[Fri Apr 17 02:30:02.953322 2026] [:error] [pid 43482:tid 43498] [client 51.12.89.191:1760] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEqqj9SZnuKxlHrct25MQAAAM4"]
[Fri Apr 17 02:30:03.482576 2026] [:error] [pid 43386:tid 43428] [client 51.12.89.191:1826] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEqq-91GAVgUfhPVDHlGgAAAEg"]
[Fri Apr 17 02:30:04.014282 2026] [:error] [pid 3245:tid 3278] [client 51.12.89.191:1797] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEqrKESOMTHVLs-uFDd2QAAARA"]
[Fri Apr 17 02:30:04.611779 2026] [:error] [pid 26102:tid 26109] [client 51.12.89.191:1852] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aeEqrP127aFqw6ALdngg9AAAAYQ"]
[Fri Apr 17 02:30:05.189628 2026] [:error] [pid 26480:tid 26503] [client 51.12.89.191:1720] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aeEqrQwLDJKTQNfarA2OqAAAAdU"]
[Fri Apr 17 02:30:05.720778 2026] [:error] [pid 4086:tid 4088] [client 51.12.89.191:12838] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aeEqrVlz7gxl_exM0FpQDQAAAUA"]
[Fri Apr 17 02:30:06.312474 2026] [:error] [pid 26480:tid 26504] [client 51.12.89.191:1795] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aeEqrgwLDJKTQNfarA2OsAAAAdY"]
[Fri Apr 17 02:30:06.886223 2026] [:error] [pid 43386:tid 43444] [client 51.12.89.191:1806] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeEqru91GAVgUfhPVDHlIAAAAFc"]
[Fri Apr 17 02:30:07.440304 2026] [:error] [pid 43482:tid 43485] [client 51.12.89.191:12821] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeEqrz9SZnuKxlHrct25OQAAAME"]
[Fri Apr 17 02:30:07.965275 2026] [:error] [pid 43482:tid 43503] [client 51.12.89.191:1778] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeEqrz9SZnuKxlHrct25OgAAANM"]
[Fri Apr 17 02:30:08.565673 2026] [:error] [pid 43385:tid 43403] [client 51.12.89.191:1655] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeEqsMnIxkJaUI8KNs4yFgAAAA4"]
[Fri Apr 17 02:30:09.151754 2026] [:error] [pid 43482:tid 43493] [client 51.12.89.191:1750] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeEqsT9SZnuKxlHrct25PwAAAMk"]
[Fri Apr 17 02:30:09.741971 2026] [:error] [pid 43482:tid 43489] [client 51.12.89.191:1606] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeEqsT9SZnuKxlHrct25QwAAAMU"]
[Fri Apr 17 02:30:10.271661 2026] [:error] [pid 11854:tid 11866] [client 51.12.89.191:2007] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeEqstxJCSIaqP1XSdakEwAAAkk"]
[Fri Apr 17 02:30:10.841796 2026] [:error] [pid 11854:tid 11865] [client 51.12.89.191:1679] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeEqstxJCSIaqP1XSdakFQAAAkg"]
[Fri Apr 17 02:30:11.436445 2026] [:error] [pid 43385:tid 43394] [client 51.12.89.191:1769] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aeEqs8nIxkJaUI8KNs4yGgAAAAU"]
[Fri Apr 17 02:30:11.978388 2026] [:error] [pid 11854:tid 11864] [client 51.12.89.191:1659] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aeEqs9xJCSIaqP1XSdakFwAAAkc"]
[Fri Apr 17 02:30:12.547150 2026] [:error] [pid 11854:tid 11869] [client 51.12.89.191:1845] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aeEqtNxJCSIaqP1XSdakGgAAAkw"]
[Fri Apr 17 02:30:13.071737 2026] [:error] [pid 43385:tid 43404] [client 51.12.89.191:1831] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aeEqtcnIxkJaUI8KNs4yHAAAAA8"]
[Fri Apr 17 02:30:13.656931 2026] [:error] [pid 43385:tid 43406] [client 51.12.89.191:1798] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aeEqtcnIxkJaUI8KNs4yIQAAABE"]
[Fri Apr 17 02:30:14.193177 2026] [:error] [pid 43386:tid 43443] [client 51.12.89.191:12848] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aeEqtu91GAVgUfhPVDHlLgAAAFY"]
[Fri Apr 17 02:30:14.738474 2026] [:error] [pid 43385:tid 43413] [client 51.12.89.191:2028] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aeEqtsnIxkJaUI8KNs4yJgAAABc"]
[Fri Apr 17 02:30:15.288347 2026] [:error] [pid 43385:tid 43407] [client 51.12.89.191:1821] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aeEqt8nIxkJaUI8KNs4yKQAAABI"]
[Fri Apr 17 02:30:15.871337 2026] [:error] [pid 26102:tid 26117] [client 51.12.89.191:1738] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aeEqt_127aFqw6ALdngg_AAAAYw"]
[Fri Apr 17 02:30:16.424808 2026] [:error] [pid 43385:tid 43403] [client 51.12.89.191:12849] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aeEquMnIxkJaUI8KNs4yKwAAAA4"]
[Fri Apr 17 02:30:17.000131 2026] [:error] [pid 26480:tid 26488] [client 51.12.89.191:1734] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aeEquAwLDJKTQNfarA2OvAAAAcY"]
[Fri Apr 17 02:30:17.526160 2026] [:error] [pid 43386:tid 43421] [client 51.12.89.191:1827] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aeEque91GAVgUfhPVDHlPAAAAEE"]
[Fri Apr 17 02:30:18.054969 2026] [:error] [pid 43386:tid 43422] [client 51.12.89.191:12820] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeEquu91GAVgUfhPVDHlQQAAAEI"]
[Fri Apr 17 02:30:18.621060 2026] [:error] [pid 43386:tid 43433] [client 51.12.89.191:12900] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeEquu91GAVgUfhPVDHlRwAAAE0"]
[Fri Apr 17 02:30:19.195987 2026] [:error] [pid 43385:tid 43411] [client 51.12.89.191:12812] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeEqu8nIxkJaUI8KNs4yLQAAABU"]
[Fri Apr 17 02:30:19.722136 2026] [:error] [pid 43386:tid 43423] [client 51.12.89.191:1813] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeEqu-91GAVgUfhPVDHlTAAAAEM"]
[Fri Apr 17 02:30:20.302896 2026] [:error] [pid 4086:tid 4112] [client 51.12.89.191:1822] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aeEqvFlz7gxl_exM0FpQEgAAAVc"]
[Fri Apr 17 02:30:20.829524 2026] [:error] [pid 43386:tid 43439] [client 51.12.89.191:12915] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aeEqvO91GAVgUfhPVDHlUQAAAFM"]
[Fri Apr 17 02:30:21.399896 2026] [:error] [pid 43386:tid 43436] [client 51.12.89.191:1809] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aeEqve91GAVgUfhPVDHlVQAAAFA"]
[Fri Apr 17 02:30:21.925975 2026] [:error] [pid 43386:tid 43433] [client 51.12.89.191:12827] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aeEqve91GAVgUfhPVDHlWQAAAE0"]
[Fri Apr 17 02:30:22.454719 2026] [:error] [pid 26102:tid 26118] [client 51.12.89.191:12801] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeEqvv127aFqw6ALdngg_wAAAY0"]
[Fri Apr 17 02:30:22.985153 2026] [:error] [pid 26480:tid 26498] [client 51.12.89.191:12843] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeEqvgwLDJKTQNfarA2OxQAAAdA"]
[Fri Apr 17 02:30:23.533315 2026] [:error] [pid 11692:tid 11719] [client 51.12.89.191:12809] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeEqv81AYuhm4BZwKNol9AAAAhY"]
[Fri Apr 17 02:30:24.135348 2026] [:error] [pid 43386:tid 43430] [client 51.12.89.191:12828] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeEqwO91GAVgUfhPVDHlXQAAAEo"]
[Fri Apr 17 02:30:24.668198 2026] [:error] [pid 4086:tid 4101] [client 51.12.89.191:1992] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeEqwFlz7gxl_exM0FpQFQAAAU0"]
[Fri Apr 17 02:30:25.256732 2026] [:error] [pid 43387:tid 43476] [client 51.12.89.191:12808] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeEqwSBNsONqHxWTakVN7AAAAJc"]
[Fri Apr 17 02:30:25.797895 2026] [:error] [pid 43387:tid 43460] [client 51.12.89.191:1627] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeEqwSBNsONqHxWTakVN8QAAAIk"]
[Fri Apr 17 02:30:26.327880 2026] [:error] [pid 11692:tid 11709] [client 51.12.89.191:1833] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeEqws1AYuhm4BZwKNol9gAAAgw"]
[Fri Apr 17 02:30:26.860127 2026] [:error] [pid 43385:tid 43406] [client 51.12.89.191:1835] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "aeEqwsnIxkJaUI8KNs4yMwAAABE"]
[Fri Apr 17 02:30:27.396177 2026] [:error] [pid 43385:tid 43407] [client 51.12.89.191:1828] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "aeEqw8nIxkJaUI8KNs4yOAAAABI"]
[Fri Apr 17 02:30:27.975331 2026] [:error] [pid 26480:tid 26483] [client 51.12.89.191:1816] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "aeEqwwwLDJKTQNfarA2OzQAAAcE"]
[Fri Apr 17 02:30:28.515343 2026] [:error] [pid 11854:tid 11872] [client 51.12.89.191:1824] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "aeEqxNxJCSIaqP1XSdakIAAAAk8"]
[Fri Apr 17 02:30:29.116993 2026] [:error] [pid 26480:tid 26484] [client 51.12.89.191:2033] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeEqxQwLDJKTQNfarA2OzgAAAcI"]
[Fri Apr 17 02:30:29.754140 2026] [:error] [pid 43385:tid 43410] [client 51.12.89.191:1636] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeEqxcnIxkJaUI8KNs4yPQAAABQ"]
[Fri Apr 17 02:30:30.351939 2026] [:error] [pid 26480:tid 26504] [client 51.12.89.191:1815] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeEqxgwLDJKTQNfarA2O0QAAAdY"]
[Fri Apr 17 02:30:30.940878 2026] [:error] [pid 43385:tid 43389] [client 51.12.89.191:1817] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeEqxsnIxkJaUI8KNs4yQAAAAAA"]
[Fri Apr 17 02:30:31.565585 2026] [:error] [pid 26102:tid 26108] [client 51.12.89.191:12894] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "aeEqx_127aFqw6ALdnghBQAAAYM"]
[Fri Apr 17 02:30:32.314718 2026] [:error] [pid 26102:tid 26106] [client 51.12.89.191:12831] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "aeEqyP127aFqw6ALdnghCAAAAYE"]
[Fri Apr 17 02:30:33.020088 2026] [:error] [pid 43385:tid 43397] [client 51.12.89.191:12818] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "aeEqycnIxkJaUI8KNs4yRAAAAAg"]
[Fri Apr 17 02:30:33.710972 2026] [:error] [pid 11854:tid 11876] [client 51.12.89.191:2029] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vee.php"] [unique_id "aeEqydxJCSIaqP1XSdakMAAAAlM"]
[Fri Apr 17 02:30:34.328154 2026] [:error] [pid 26480:tid 26496] [client 51.12.89.191:1841] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "aeEqygwLDJKTQNfarA2O3AAAAc4"]
[Fri Apr 17 02:30:34.983186 2026] [:error] [pid 26480:tid 26489] [client 51.12.89.191:1710] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "aeEqygwLDJKTQNfarA2O4gAAAcc"]
[Fri Apr 17 02:30:35.674384 2026] [:error] [pid 26480:tid 26504] [client 51.12.89.191:12824] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "aeEqywwLDJKTQNfarA2O6QAAAdY"]
[Fri Apr 17 02:30:36.384165 2026] [:error] [pid 26480:tid 26488] [client 51.12.89.191:12804] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cabs.php"] [unique_id "aeEqzAwLDJKTQNfarA2O7QAAAcY"]
[Fri Apr 17 02:30:37.019326 2026] [:error] [pid 43386:tid 43438] [client 51.12.89.191:1609] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeEqze91GAVgUfhPVDHlaQAAAFI"]
[Fri Apr 17 02:30:37.556875 2026] [:error] [pid 26480:tid 26498] [client 51.12.89.191:1629] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeEqzQwLDJKTQNfarA2O8QAAAdA"]
[Fri Apr 17 02:30:38.098873 2026] [:error] [pid 43386:tid 43433] [client 51.12.89.191:12810] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeEqzu91GAVgUfhPVDHlawAAAE0"]
[Fri Apr 17 02:30:38.622145 2026] [:error] [pid 11692:tid 11700] [client 51.12.89.191:1840] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeEqzs1AYuhm4BZwKNomBAAAAgM"]
[Fri Apr 17 02:30:39.210776 2026] [:error] [pid 11854:tid 11873] [client 51.12.89.191:12856] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1da.php"] [unique_id "aeEqz9xJCSIaqP1XSdakOQAAAlA"]
[Fri Apr 17 02:30:39.789837 2026] [:error] [pid 43482:tid 43495] [client 51.12.89.191:1737] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1da.php"] [unique_id "aeEqzz9SZnuKxlHrct25TwAAAMs"]
[Fri Apr 17 02:30:40.402468 2026] [:error] [pid 4086:tid 4113] [client 51.12.89.191:12858] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1da.php"] [unique_id "aeEq0Flz7gxl_exM0FpQHAAAAVg"]
[Fri Apr 17 02:30:40.928380 2026] [:error] [pid 43386:tid 43444] [client 51.12.89.191:1836] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x1da.php"] [unique_id "aeEq0O91GAVgUfhPVDHlbwAAAFc"]
[Fri Apr 17 02:30:41.513677 2026] [:error] [pid 43386:tid 43424] [client 51.12.89.191:1771] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeEq0e91GAVgUfhPVDHldQAAAEQ"]
[Fri Apr 17 02:30:42.089163 2026] [:error] [pid 3245:tid 3269] [client 51.12.89.191:1846] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeEq0qESOMTHVLs-uFDd4AAAAQc"]
[Fri Apr 17 02:30:42.613312 2026] [:error] [pid 26102:tid 26122] [client 51.12.89.191:12882] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeEq0v127aFqw6ALdnghEgAAAZE"]
[Fri Apr 17 02:30:43.180824 2026] [:error] [pid 26102:tid 26108] [client 51.12.89.191:12898] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeEq0_127aFqw6ALdnghFwAAAYM"]
[Fri Apr 17 02:30:43.760500 2026] [:error] [pid 11854:tid 11865] [client 51.12.89.191:12830] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aeEq09xJCSIaqP1XSdakQgAAAkg"]
[Fri Apr 17 02:30:44.334265 2026] [:error] [pid 43386:tid 43432] [client 51.12.89.191:12904] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aeEq1O91GAVgUfhPVDHleQAAAEw"]
[Fri Apr 17 02:30:44.906996 2026] [:error] [pid 3245:tid 3284] [client 51.12.89.191:12805] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aeEq1KESOMTHVLs-uFDd5QAAARY"]
[Fri Apr 17 02:30:45.486694 2026] [:error] [pid 26480:tid 26494] [client 51.12.89.191:1652] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aeEq1QwLDJKTQNfarA2PCAAAAcw"]
[Fri Apr 17 03:07:55.020328 2026] [proxy_fcgi:error] [pid 43386:tid 43445] [client 20.215.69.226:48079] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:08:10.479311 2026] [proxy_fcgi:error] [pid 43387:tid 43449] [client 20.215.69.226:37518] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:08:28.601528 2026] [:error] [pid 43386:tid 43421] [client 20.215.69.226:46488] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/beerd.php"] [unique_id "aeEzrO91GAVgUfhPVDH0QgAAAEE"]
[Fri Apr 17 03:08:31.721253 2026] [:error] [pid 43482:tid 43489] [client 20.215.69.226:9888] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/beerd.php"] [unique_id "aeEzrz9SZnuKxlHrct3FVQAAAMU"]
[Fri Apr 17 03:08:35.713972 2026] [:error] [pid 43387:tid 43471] [client 20.215.69.226:40954] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/beerd.php"] [unique_id "aeEzsyBNsONqHxWTakViyQAAAJI"]
[Fri Apr 17 03:08:39.257544 2026] [:error] [pid 43387:tid 43465] [client 20.215.69.226:53578] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/beerd.php"] [unique_id "aeEztyBNsONqHxWTakVizwAAAIw"]
[Fri Apr 17 03:08:43.024759 2026] [:error] [pid 43386:tid 43436] [client 20.215.69.226:40959] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "aeEzu-91GAVgUfhPVDH0dgAAAFA"]
[Fri Apr 17 03:08:49.078705 2026] [:error] [pid 11854:tid 11878] [client 20.215.69.226:49196] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "aeEzwdxJCSIaqP1XSdao7QAAAlU"]
[Fri Apr 17 03:08:54.961886 2026] [:error] [pid 43387:tid 43448] [client 20.215.69.226:55441] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "aeEzxiBNsONqHxWTakVjlAAAAIA"]
[Fri Apr 17 03:08:56.099156 2026] [:error] [pid 43387:tid 43461] [client 20.215.69.226:50067] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEzyCBNsONqHxWTakVjnQAAAIo"]
[Fri Apr 17 03:08:57.433148 2026] [:error] [pid 43386:tid 43437] [client 20.215.69.226:38434] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEzye91GAVgUfhPVDH0nQAAAFE"]
[Fri Apr 17 03:08:58.868511 2026] [:error] [pid 43482:tid 43497] [client 20.215.69.226:47549] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEzyj9SZnuKxlHrct3FzAAAAM0"]
[Fri Apr 17 03:09:00.610858 2026] [:error] [pid 43385:tid 43407] [client 20.215.69.226:38428] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/161dfd072f.php"] [unique_id "aeEzzMnIxkJaUI8KNs45SQAAABI"]
[Fri Apr 17 03:09:01.780358 2026] [:error] [pid 26480:tid 26498] [client 20.215.69.226:47503] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeEzzQwLDJKTQNfarA2X9AAAAdA"]
[Fri Apr 17 03:09:03.154940 2026] [:error] [pid 43386:tid 43425] [client 20.215.69.226:46023] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeEzz-91GAVgUfhPVDH0rgAAAEU"]
[Fri Apr 17 03:09:04.380329 2026] [:error] [pid 11692:tid 11699] [client 20.215.69.226:56422] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeEz0M1AYuhm4BZwKNotPgAAAgI"]
[Fri Apr 17 03:09:05.858392 2026] [:error] [pid 11692:tid 11698] [client 20.215.69.226:56400] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeEz0c1AYuhm4BZwKNotQAAAAgE"]
[Fri Apr 17 03:09:06.665436 2026] [:error] [pid 43482:tid 43490] [client 20.215.69.226:58318] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEz0j9SZnuKxlHrct3F1QAAAMY"]
[Fri Apr 17 03:09:07.493966 2026] [:error] [pid 43386:tid 43444] [client 20.215.69.226:36998] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEz0-91GAVgUfhPVDH0tAAAAFc"]
[Fri Apr 17 03:09:08.365969 2026] [:error] [pid 4086:tid 4097] [client 20.215.69.226:41349] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEz1Flz7gxl_exM0FpUCQAAAUk"]
[Fri Apr 17 03:09:09.252438 2026] [:error] [pid 11692:tid 11700] [client 20.215.69.226:37604] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeEz1c1AYuhm4BZwKNotQwAAAgM"]
[Fri Apr 17 03:09:10.127029 2026] [:error] [pid 4086:tid 4112] [client 20.215.69.226:37041] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "aeEz1llz7gxl_exM0FpUDAAAAVc"]
[Fri Apr 17 03:09:10.848200 2026] [:error] [pid 43387:tid 43467] [client 20.215.69.226:46078] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "aeEz1iBNsONqHxWTakVjuAAAAI4"]
[Fri Apr 17 03:09:11.495343 2026] [:error] [pid 43385:tid 43412] [client 20.215.69.226:41371] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "aeEz18nIxkJaUI8KNs45UgAAABY"]
[Fri Apr 17 03:09:12.260723 2026] [:error] [pid 43387:tid 43448] [client 20.215.69.226:58331] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/RIP.php"] [unique_id "aeEz2CBNsONqHxWTakVjvQAAAIA"]
[Fri Apr 17 03:09:12.850329 2026] [:error] [pid 43482:tid 43488] [client 20.215.69.226:46019] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeEz2D9SZnuKxlHrct3F2wAAAMQ"]
[Fri Apr 17 03:09:13.764251 2026] [:error] [pid 3245:tid 3272] [client 20.215.69.226:56423] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeEz2aESOMTHVLs-uFDhrQAAAQo"]
[Fri Apr 17 03:09:14.459596 2026] [:error] [pid 43387:tid 43471] [client 20.215.69.226:37577] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeEz2iBNsONqHxWTakVjxAAAAJI"]
[Fri Apr 17 03:09:15.632553 2026] [:error] [pid 26480:tid 26500] [client 20.215.69.226:56387] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeEz2wwLDJKTQNfarA2YAAAAAdI"]
[Fri Apr 17 03:09:16.905829 2026] [:error] [pid 43387:tid 43465] [client 20.215.69.226:37012] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "aeEz3CBNsONqHxWTakVjzQAAAIw"]
[Fri Apr 17 03:09:18.128713 2026] [:error] [pid 43386:tid 43439] [client 20.215.69.226:54849] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "aeEz3u91GAVgUfhPVDH0twAAAFM"]
[Fri Apr 17 03:09:19.566738 2026] [:error] [pid 11692:tid 11718] [client 20.215.69.226:40337] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "aeEz381AYuhm4BZwKNotSAAAAhU"]
[Fri Apr 17 03:09:20.858624 2026] [:error] [pid 43482:tid 43490] [client 20.215.69.226:41347] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "aeEz4D9SZnuKxlHrct3F4wAAAMY"]
[Fri Apr 17 03:09:21.604031 2026] [:error] [pid 43482:tid 43498] [client 20.215.69.226:37035] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "aeEz4T9SZnuKxlHrct3F5QAAAM4"]
[Fri Apr 17 03:09:22.486596 2026] [:error] [pid 43386:tid 43437] [client 20.215.69.226:39944] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "aeEz4u91GAVgUfhPVDH0vwAAAFE"]
[Fri Apr 17 03:09:23.370392 2026] [:error] [pid 43387:tid 43459] [client 20.215.69.226:40375] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "aeEz4yBNsONqHxWTakVj1QAAAIg"]
[Fri Apr 17 03:09:24.064689 2026] [:error] [pid 43482:tid 43501] [client 20.215.69.226:51103] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sk25_1.php"] [unique_id "aeEz5D9SZnuKxlHrct3F6gAAANE"]
[Fri Apr 17 03:09:25.470161 2026] [:error] [pid 43386:tid 43421] [client 20.215.69.226:37050] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fetch.php"] [unique_id "aeEz5e91GAVgUfhPVDH0wQAAAEE"]
[Fri Apr 17 03:09:43.915937 2026] [proxy_fcgi:error] [pid 43482:tid 43493] [client 20.215.69.226:37019] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:09:57.948976 2026] [proxy_fcgi:error] [pid 43386:tid 43430] [client 20.215.69.226:58816] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:10:13.196194 2026] [proxy_fcgi:error] [pid 3245:tid 3266] [client 20.215.69.226:44867] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:10:19.879374 2026] [:error] [pid 43386:tid 43441] [client 20.215.69.226:54285] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "aeE0G-91GAVgUfhPVDH1PQAAAFQ"]
[Fri Apr 17 03:10:21.096597 2026] [:error] [pid 43386:tid 43436] [client 20.215.69.226:36651] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "aeE0He91GAVgUfhPVDH1QAAAAFA"]
[Fri Apr 17 03:10:22.682826 2026] [:error] [pid 43482:tid 43504] [client 20.215.69.226:50847] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "aeE0Hj9SZnuKxlHrct3GNwAAANQ"]
[Fri Apr 17 03:10:24.484184 2026] [:error] [pid 43482:tid 43495] [client 20.215.69.226:57237] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "aeE0ID9SZnuKxlHrct3GOQAAAMs"]
[Fri Apr 17 03:10:27.333822 2026] [:error] [pid 43387:tid 43473] [client 20.215.69.226:52269] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-942.php"] [unique_id "aeE0IyBNsONqHxWTakVkMgAAAJQ"]
[Fri Apr 17 03:10:28.638946 2026] [:error] [pid 43387:tid 43449] [client 20.215.69.226:44887] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-942.php"] [unique_id "aeE0JCBNsONqHxWTakVkQwAAAIE"]
[Fri Apr 17 03:10:31.122922 2026] [:error] [pid 43386:tid 43445] [client 20.215.69.226:57229] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-942.php"] [unique_id "aeE0J-91GAVgUfhPVDH1QwAAAFg"]
[Fri Apr 17 03:10:33.941027 2026] [:error] [pid 26480:tid 26506] [client 20.215.69.226:47062] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-942.php"] [unique_id "aeE0KQwLDJKTQNfarA2YZgAAAdg"]
[Fri Apr 17 03:10:38.117785 2026] [:error] [pid 43386:tid 43426] [client 20.215.69.226:57236] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "aeE0Lu91GAVgUfhPVDH1TAAAAEY"]
[Fri Apr 17 03:10:40.091110 2026] [:error] [pid 43482:tid 43501] [client 20.215.69.226:35257] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "aeE0MD9SZnuKxlHrct3GVAAAANE"]
[Fri Apr 17 03:10:41.501447 2026] [:error] [pid 43482:tid 43503] [client 20.215.69.226:35257] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "aeE0MT9SZnuKxlHrct3GVwAAANM"]
[Fri Apr 17 03:10:42.803123 2026] [:error] [pid 43482:tid 43489] [client 20.215.69.226:35229] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "aeE0Mj9SZnuKxlHrct3GXAAAAMU"]
[Fri Apr 17 03:10:44.440410 2026] [:error] [pid 11692:tid 11712] [client 20.215.69.226:54965] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpb.php"] [unique_id "aeE0NM1AYuhm4BZwKNotagAAAg8"]
[Fri Apr 17 03:10:45.934894 2026] [:error] [pid 11692:tid 11715] [client 20.215.69.226:56867] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpb.php"] [unique_id "aeE0Nc1AYuhm4BZwKNotbQAAAhI"]
[Fri Apr 17 03:10:47.345927 2026] [:error] [pid 26480:tid 26487] [client 20.215.69.226:52475] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpb.php"] [unique_id "aeE0NwwLDJKTQNfarA2YpwAAAcU"]
[Fri Apr 17 03:10:47.974690 2026] [:error] [pid 43385:tid 43407] [client 20.215.69.226:56885] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpb.php"] [unique_id "aeE0N8nIxkJaUI8KNs45jQAAABI"]
[Fri Apr 17 03:10:49.034069 2026] [:error] [pid 4086:tid 4096] [client 20.215.69.226:57733] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aeE0OVlz7gxl_exM0FpUGgAAAUg"]
[Fri Apr 17 03:10:51.162984 2026] [:error] [pid 11692:tid 11709] [client 20.215.69.226:54917] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aeE0O81AYuhm4BZwKNotcgAAAgw"]
[Fri Apr 17 03:10:53.448411 2026] [:error] [pid 3245:tid 3265] [client 20.215.69.226:45440] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aeE0PaESOMTHVLs-uFDhvQAAAQM"]
[Fri Apr 17 03:10:58.333518 2026] [:error] [pid 43386:tid 43423] [client 20.215.69.226:40880] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aeE0Qu91GAVgUfhPVDH1ZgAAAEM"]
[Fri Apr 17 03:10:59.804746 2026] [:error] [pid 43386:tid 43441] [client 20.215.69.226:53214] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeE0Q-91GAVgUfhPVDH1bQAAAFQ"]
[Fri Apr 17 03:11:04.224748 2026] [:error] [pid 11854:tid 11859] [client 20.215.69.226:60285] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeE0SNxJCSIaqP1XSdapLgAAAkI"]
[Fri Apr 17 03:11:11.073028 2026] [:error] [pid 43387:tid 43474] [client 20.215.69.226:39037] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeE0TyBNsONqHxWTakVkgAAAAJU"]
[Fri Apr 17 03:11:44.566226 2026] [proxy_fcgi:error] [pid 43385:tid 43402] [client 20.215.69.226:49582] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:12:10.691581 2026] [proxy_fcgi:error] [pid 43386:tid 43445] [client 20.215.69.226:36154] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:12:24.483150 2026] [:error] [pid 43385:tid 43392] [client 20.215.69.226:53301] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeE0mMnIxkJaUI8KNs46BgAAAAM"]
[Fri Apr 17 03:12:25.757581 2026] [:error] [pid 43386:tid 43429] [client 20.215.69.226:55959] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeE0me91GAVgUfhPVDH19gAAAEk"]
[Fri Apr 17 03:12:26.728905 2026] [:error] [pid 26102:tid 26119] [client 20.215.69.226:55987] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeE0mv127aFqw6ALdngllAAAAY4"]
[Fri Apr 17 03:12:27.826923 2026] [:error] [pid 43386:tid 43421] [client 20.215.69.226:36199] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeE0m-91GAVgUfhPVDH1_gAAAEE"]
[Fri Apr 17 03:12:28.820944 2026] [:error] [pid 43386:tid 43434] [client 20.215.69.226:55997] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeE0nO91GAVgUfhPVDH2BAAAAE4"]
[Fri Apr 17 03:12:29.616408 2026] [:error] [pid 11854:tid 11870] [client 20.215.69.226:57214] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeE0ndxJCSIaqP1XSdapdwAAAk0"]
[Fri Apr 17 03:12:30.688319 2026] [:error] [pid 43385:tid 43404] [client 20.215.69.226:44487] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeE0nsnIxkJaUI8KNs46DAAAAA8"]
[Fri Apr 17 03:12:31.605047 2026] [:error] [pid 26102:tid 26123] [client 20.215.69.226:9374] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeE0n_127aFqw6ALdnglmwAAAZI"]
[Fri Apr 17 03:12:32.480372 2026] [:error] [pid 43387:tid 43454] [client 20.215.69.226:44808] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeE0oCBNsONqHxWTakVlOQAAAIQ"]
[Fri Apr 17 03:12:33.279638 2026] [:error] [pid 11692:tid 11712] [client 20.215.69.226:33506] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeE0oc1AYuhm4BZwKNotvQAAAg8"]
[Fri Apr 17 03:12:33.978426 2026] [:error] [pid 43385:tid 43394] [client 20.215.69.226:44514] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeE0ocnIxkJaUI8KNs46FAAAAAU"]
[Fri Apr 17 03:12:34.872463 2026] [:error] [pid 43386:tid 43423] [client 20.215.69.226:55975] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeE0ou91GAVgUfhPVDH2GgAAAEM"]
[Fri Apr 17 03:12:35.577745 2026] [:error] [pid 11692:tid 11705] [client 20.215.69.226:46469] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeE0o81AYuhm4BZwKNotwgAAAgg"]
[Fri Apr 17 03:12:36.355964 2026] [:error] [pid 43385:tid 43398] [client 20.215.69.226:9653] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeE0pMnIxkJaUI8KNs46FQAAAAk"]
[Fri Apr 17 03:12:37.578530 2026] [:error] [pid 43386:tid 43427] [client 20.215.69.226:9397] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeE0pe91GAVgUfhPVDH2IQAAAEc"]
[Fri Apr 17 03:12:39.133410 2026] [:error] [pid 43387:tid 43474] [client 20.215.69.226:33512] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeE0pyBNsONqHxWTakVlUwAAAJU"]
[Fri Apr 17 03:12:40.812722 2026] [:error] [pid 11692:tid 11700] [client 20.215.69.226:59149] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "aeE0qM1AYuhm4BZwKNot0AAAAgM"]
[Fri Apr 17 03:12:43.232401 2026] [:error] [pid 43386:tid 43432] [client 20.215.69.226:9628] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "aeE0q-91GAVgUfhPVDH2NgAAAEw"]
[Fri Apr 17 03:12:45.323011 2026] [:error] [pid 11692:tid 11716] [client 20.215.69.226:44834] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "aeE0rc1AYuhm4BZwKNot0gAAAhM"]
[Fri Apr 17 03:12:47.712379 2026] [:error] [pid 11854:tid 11873] [client 20.215.69.226:57714] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "aeE0r9xJCSIaqP1XSdaphAAAAlA"]
[Fri Apr 17 03:12:49.744928 2026] [:error] [pid 43387:tid 43466] [client 20.215.69.226:9666] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeE0sSBNsONqHxWTakVlewAAAI0"]
[Fri Apr 17 03:12:51.370320 2026] [:error] [pid 11692:tid 11720] [client 20.215.69.226:9723] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeE0s81AYuhm4BZwKNot1QAAAhc"]
[Fri Apr 17 03:12:54.954819 2026] [:error] [pid 43386:tid 43444] [client 20.215.69.226:45564] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeE0tu91GAVgUfhPVDH2UgAAAFc"]
[Fri Apr 17 03:12:56.668142 2026] [:error] [pid 26480:tid 26485] [client 20.215.69.226:50114] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeE0uAwLDJKTQNfarA2ZJQAAAcM"]
[Fri Apr 17 03:12:58.032276 2026] [:error] [pid 43386:tid 43430] [client 20.215.69.226:9715] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeE0uu91GAVgUfhPVDH2WgAAAEo"]
[Fri Apr 17 03:12:58.909025 2026] [:error] [pid 43386:tid 43423] [client 20.215.69.226:50136] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeE0uu91GAVgUfhPVDH2XwAAAEM"]
[Fri Apr 17 03:12:59.846131 2026] [:error] [pid 26480:tid 26503] [client 20.215.69.226:48016] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeE0uwwLDJKTQNfarA2ZMQAAAdU"]
[Fri Apr 17 03:13:01.094283 2026] [:error] [pid 43385:tid 43407] [client 20.215.69.226:49267] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeE0vcnIxkJaUI8KNs46LQAAABI"]
[Fri Apr 17 03:13:02.824962 2026] [:error] [pid 26102:tid 26116] [client 20.215.69.226:9912] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "aeE0vv127aFqw6ALdnglqQAAAYs"]
[Fri Apr 17 03:13:05.155786 2026] [:error] [pid 43386:tid 43430] [client 20.215.69.226:42491] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "aeE0we91GAVgUfhPVDH2ZwAAAEo"]
[Fri Apr 17 03:13:06.602370 2026] [:error] [pid 43385:tid 43399] [client 20.215.69.226:39523] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "aeE0wsnIxkJaUI8KNs46MwAAAAo"]
[Fri Apr 17 03:13:07.925393 2026] [:error] [pid 43387:tid 43462] [client 20.215.69.226:42458] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-243.php"] [unique_id "aeE0wyBNsONqHxWTakVlvQAAAIs"]
[Fri Apr 17 03:13:09.361339 2026] [:error] [pid 43482:tid 43503] [client 20.215.69.226:39490] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeE0xT9SZnuKxlHrct3G4gAAANM"]
[Fri Apr 17 03:13:10.916903 2026] [:error] [pid 11692:tid 11706] [client 20.215.69.226:39508] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeE0xs1AYuhm4BZwKNot4AAAAgk"]
[Fri Apr 17 03:13:12.104929 2026] [:error] [pid 26480:tid 26503] [client 20.215.69.226:64222] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeE0yAwLDJKTQNfarA2ZVAAAAdU"]
[Fri Apr 17 03:13:13.116687 2026] [:error] [pid 11692:tid 11712] [client 20.215.69.226:52218] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeE0yc1AYuhm4BZwKNot4QAAAg8"]
[Fri Apr 17 03:13:14.556465 2026] [:error] [pid 11692:tid 11716] [client 20.215.69.226:59465] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "aeE0ys1AYuhm4BZwKNot4wAAAhM"]
[Fri Apr 17 03:13:15.761751 2026] [:error] [pid 43482:tid 43493] [client 20.215.69.226:43411] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "aeE0yz9SZnuKxlHrct3G8gAAAMk"]
[Fri Apr 17 03:13:17.347522 2026] [:error] [pid 43387:tid 43449] [client 20.215.69.226:42389] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "aeE0zSBNsONqHxWTakVl0wAAAIE"]
[Fri Apr 17 03:13:19.512627 2026] [:error] [pid 43387:tid 43477] [client 20.215.69.226:47531] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX1.php"] [unique_id "aeE0zyBNsONqHxWTakVl4QAAAJg"]
[Fri Apr 17 03:13:21.014970 2026] [:error] [pid 43387:tid 43448] [client 20.215.69.226:38057] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeE00SBNsONqHxWTakVl7AAAAIA"]
[Fri Apr 17 03:13:41.295060 2026] [proxy_fcgi:error] [pid 43387:tid 43472] [client 20.215.69.226:50057] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:13:46.126641 2026] [proxy_fcgi:error] [pid 43386:tid 43422] [client 20.215.69.226:37616] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:14:00.768656 2026] [proxy_fcgi:error] [pid 43482:tid 43499] [client 20.215.69.226:54246] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:14:13.551102 2026] [:error] [pid 43386:tid 43433] [client 20.215.69.226:55890] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeE1Be91GAVgUfhPVDH2-gAAAE0"]
[Fri Apr 17 03:14:14.362696 2026] [:error] [pid 43386:tid 43434] [client 20.215.69.226:51867] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeE1Bu91GAVgUfhPVDH2_AAAAE4"]
[Fri Apr 17 03:14:15.456092 2026] [:error] [pid 26102:tid 26107] [client 20.215.69.226:52522] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeE1B_127aFqw6ALdngl2QAAAYI"]
[Fri Apr 17 03:14:16.359934 2026] [:error] [pid 43482:tid 43492] [client 20.215.69.226:37099] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeE1CD9SZnuKxlHrct3HUQAAAMg"]
[Fri Apr 17 03:14:17.422111 2026] [:error] [pid 43385:tid 43405] [client 20.215.69.226:38973] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aeE1CcnIxkJaUI8KNs46dgAAABA"]
[Fri Apr 17 03:14:18.611471 2026] [:error] [pid 43386:tid 43433] [client 20.215.69.226:37075] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aeE1Cu91GAVgUfhPVDH3CgAAAE0"]
[Fri Apr 17 03:14:21.114733 2026] [:error] [pid 11692:tid 11710] [client 20.215.69.226:10182] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aeE1Dc1AYuhm4BZwKNouXwAAAg0"]
[Fri Apr 17 03:14:22.171664 2026] [:error] [pid 43386:tid 43436] [client 20.215.69.226:9837] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aeE1Du91GAVgUfhPVDH3EwAAAFA"]
[Fri Apr 17 03:14:23.091576 2026] [:error] [pid 43387:tid 43461] [client 20.215.69.226:38937] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aeE1DyBNsONqHxWTakVmnQAAAIo"]
[Fri Apr 17 03:14:24.122140 2026] [:error] [pid 43387:tid 43465] [client 20.215.69.226:41734] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aeE1ECBNsONqHxWTakVmnwAAAIw"]
[Fri Apr 17 03:14:26.458950 2026] [:error] [pid 26102:tid 26105] [client 20.215.69.226:9492] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aeE1Ev127aFqw6ALdngl4wAAAYA"]
[Fri Apr 17 03:14:29.035174 2026] [:error] [pid 43482:tid 43508] [client 20.215.69.226:38469] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aeE1FT9SZnuKxlHrct3HagAAANg"]
[Fri Apr 17 03:14:30.947749 2026] [:error] [pid 43387:tid 43470] [client 20.215.69.226:9808] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeE1FiBNsONqHxWTakVm2wAAAJE"]
[Fri Apr 17 03:14:32.394660 2026] [:error] [pid 43482:tid 43491] [client 20.215.69.226:37074] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeE1GD9SZnuKxlHrct3HbQAAAMc"]
[Fri Apr 17 03:14:34.880927 2026] [:error] [pid 26480:tid 26505] [client 20.215.69.226:38921] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeE1GgwLDJKTQNfarA2ZuwAAAdc"]
[Fri Apr 17 03:14:36.382065 2026] [:error] [pid 43387:tid 43467] [client 20.215.69.226:37072] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeE1HCBNsONqHxWTakVm_wAAAI4"]
[Fri Apr 17 03:14:37.148940 2026] [:error] [pid 26480:tid 26494] [client 20.215.69.226:37059] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeE1HQwLDJKTQNfarA2ZzgAAAcw"]
[Fri Apr 17 03:14:37.722345 2026] [:error] [pid 26480:tid 26485] [client 20.215.69.226:37115] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeE1HQwLDJKTQNfarA2Z1AAAAcM"]
[Fri Apr 17 03:14:38.539885 2026] [:error] [pid 26480:tid 26490] [client 20.215.69.226:10152] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeE1HgwLDJKTQNfarA2Z3wAAAcg"]
[Fri Apr 17 03:14:39.106665 2026] [:error] [pid 11692:tid 11711] [client 20.215.69.226:37079] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeE1H81AYuhm4BZwKNoucgAAAg4"]
[Fri Apr 17 03:14:39.787217 2026] [:error] [pid 43482:tid 43506] [client 20.215.69.226:38959] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "aeE1Hz9SZnuKxlHrct3HdwAAANY"]
[Fri Apr 17 03:14:40.628296 2026] [:error] [pid 3245:tid 3284] [client 20.215.69.226:38966] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "aeE1IKESOMTHVLs-uFDiEAAAARY"]
[Fri Apr 17 03:14:41.522936 2026] [:error] [pid 3245:tid 3270] [client 20.215.69.226:10109] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "aeE1IaESOMTHVLs-uFDiEQAAAQg"]
[Fri Apr 17 03:14:42.281514 2026] [:error] [pid 43386:tid 43432] [client 20.215.69.226:39944] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "aeE1Iu91GAVgUfhPVDH3HwAAAEw"]
[Fri Apr 17 03:14:42.943361 2026] [:error] [pid 43386:tid 43441] [client 20.215.69.226:38474] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE1Iu91GAVgUfhPVDH3KAAAAFQ"]
[Fri Apr 17 03:14:43.665719 2026] [:error] [pid 43385:tid 43393] [client 20.215.69.226:52493] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE1I8nIxkJaUI8KNs46iAAAAAQ"]
[Fri Apr 17 03:14:44.508512 2026] [:error] [pid 26480:tid 26496] [client 20.215.69.226:39981] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE1JAwLDJKTQNfarA2Z8wAAAc4"]
[Fri Apr 17 03:14:46.078697 2026] [:error] [pid 43387:tid 43471] [client 20.215.69.226:39996] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE1JiBNsONqHxWTakVnKwAAAJI"]
[Fri Apr 17 03:14:47.018539 2026] [:error] [pid 43387:tid 43457] [client 20.215.69.226:55378] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "aeE1JyBNsONqHxWTakVnLgAAAIY"]
[Fri Apr 17 03:14:48.008955 2026] [:error] [pid 26480:tid 26500] [client 20.215.69.226:37100] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "aeE1KAwLDJKTQNfarA2Z-gAAAdI"]
[Fri Apr 17 03:14:49.047650 2026] [:error] [pid 43482:tid 43491] [client 20.215.69.226:55390] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "aeE1KT9SZnuKxlHrct3HggAAAMc"]
[Fri Apr 17 03:14:50.300219 2026] [:error] [pid 26480:tid 26504] [client 20.215.69.226:34685] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "aeE1KgwLDJKTQNfarA2Z_gAAAdY"]
[Fri Apr 17 03:14:51.203845 2026] [:error] [pid 43387:tid 43453] [client 20.215.69.226:10104] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeE1KyBNsONqHxWTakVnQAAAAIM"]
[Fri Apr 17 03:14:51.894732 2026] [:error] [pid 43387:tid 43471] [client 20.215.69.226:10142] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeE1KyBNsONqHxWTakVnQwAAAJI"]
[Fri Apr 17 03:14:52.835261 2026] [:error] [pid 43482:tid 43502] [client 20.215.69.226:34637] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeE1LD9SZnuKxlHrct3HkAAAANI"]
[Fri Apr 17 03:14:53.767971 2026] [:error] [pid 4086:tid 4099] [client 20.215.69.226:33823] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeE1LVlz7gxl_exM0FpUTwAAAUs"]
[Fri Apr 17 03:14:54.722866 2026] [:error] [pid 43482:tid 43498] [client 20.215.69.226:10051] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aeE1Lj9SZnuKxlHrct3HlAAAAM4"]
[Fri Apr 17 03:14:56.102975 2026] [:error] [pid 43387:tid 43457] [client 20.215.69.226:41399] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aeE1MCBNsONqHxWTakVnRgAAAIY"]
[Fri Apr 17 03:14:57.318828 2026] [:error] [pid 43387:tid 43477] [client 20.215.69.226:41394] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aeE1MSBNsONqHxWTakVnTgAAAJg"]
[Fri Apr 17 03:14:59.636426 2026] [:error] [pid 43387:tid 43465] [client 20.215.69.226:9526] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aeE1MyBNsONqHxWTakVnVgAAAIw"]
[Fri Apr 17 03:15:02.607778 2026] [:error] [pid 43386:tid 43434] [client 20.215.69.226:9826] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeE1Nu91GAVgUfhPVDH3rAAAAE4"]
[Fri Apr 17 03:15:05.520980 2026] [:error] [pid 43387:tid 43465] [client 20.215.69.226:50332] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeE1OSBNsONqHxWTakVndQAAAIw"]
[Fri Apr 17 03:15:07.587525 2026] [:error] [pid 11692:tid 11709] [client 20.215.69.226:44907] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeE1O81AYuhm4BZwKNouiAAAAgw"]
[Fri Apr 17 03:15:08.496823 2026] [:error] [pid 43482:tid 43502] [client 20.215.69.226:52271] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeE1PD9SZnuKxlHrct3HuAAAANI"]
[Fri Apr 17 03:15:09.302190 2026] [:error] [pid 26480:tid 26494] [client 20.215.69.226:46552] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aeE1PQwLDJKTQNfarA2aGwAAAcw"]
[Fri Apr 17 03:15:10.098710 2026] [:error] [pid 43387:tid 43450] [client 20.215.69.226:10077] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aeE1PiBNsONqHxWTakVniQAAAII"]
[Fri Apr 17 03:15:29.161050 2026] [proxy_fcgi:error] [pid 43385:tid 43395] [client 20.215.69.226:35816] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:15:35.867686 2026] [proxy_fcgi:error] [pid 26480:tid 26499] [client 20.215.69.226:54597] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:15:50.950231 2026] [proxy_fcgi:error] [pid 11692:tid 11716] [client 20.215.69.226:54596] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:16:04.910067 2026] [:error] [pid 43387:tid 43467] [client 20.215.69.226:52903] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeE1dCBNsONqHxWTakVoeQAAAI4"]
[Fri Apr 17 03:16:08.064163 2026] [:error] [pid 26102:tid 26118] [client 20.215.69.226:65185] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeE1eP127aFqw6ALdngmJQAAAY0"]
[Fri Apr 17 03:16:10.201648 2026] [:error] [pid 43482:tid 43501] [client 20.215.69.226:59081] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeE1ej9SZnuKxlHrct3H_AAAANE"]
[Fri Apr 17 03:16:13.380062 2026] [:error] [pid 43482:tid 43484] [client 20.215.69.226:43929] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeE1fT9SZnuKxlHrct3IAQAAAMA"]
[Fri Apr 17 03:16:17.035600 2026] [:error] [pid 43387:tid 43456] [client 20.215.69.226:36732] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aeE1gSBNsONqHxWTakVoqAAAAIU"]
[Fri Apr 17 03:16:19.639783 2026] [:error] [pid 11692:tid 11707] [client 20.215.69.226:36730] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aeE1g81AYuhm4BZwKNousgAAAgo"]
[Fri Apr 17 03:16:21.449748 2026] [:error] [pid 11854:tid 11880] [client 20.215.69.226:65165] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aeE1hdxJCSIaqP1XSdap5QAAAlc"]
[Fri Apr 17 03:16:22.519423 2026] [:error] [pid 11854:tid 11868] [client 20.215.69.226:56827] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aeE1htxJCSIaqP1XSdap5wAAAks"]
[Fri Apr 17 03:16:23.600333 2026] [:error] [pid 43387:tid 43477] [client 20.215.69.226:36719] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeE1hyBNsONqHxWTakVosQAAAJg"]
[Fri Apr 17 03:16:24.813007 2026] [:error] [pid 43385:tid 43398] [client 20.215.69.226:36711] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeE1iMnIxkJaUI8KNs46zwAAAAk"]
[Fri Apr 17 03:16:27.251498 2026] [:error] [pid 43387:tid 43467] [client 20.215.69.226:48110] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeE1iyBNsONqHxWTakVovQAAAI4"]
[Fri Apr 17 03:16:28.930662 2026] [:error] [pid 43387:tid 43468] [client 20.215.69.226:43962] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeE1jCBNsONqHxWTakVoxQAAAI8"]
[Fri Apr 17 03:16:30.815949 2026] [:error] [pid 43482:tid 43505] [client 20.215.69.226:50515] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeE1jj9SZnuKxlHrct3IFwAAANU"]
[Fri Apr 17 03:16:33.088723 2026] [:error] [pid 43385:tid 43401] [client 20.215.69.226:36106] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeE1kcnIxkJaUI8KNs461gAAAAw"]
[Fri Apr 17 03:16:34.427775 2026] [:error] [pid 43386:tid 43427] [client 20.215.69.226:43512] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeE1ku91GAVgUfhPVDH4ZQAAAEc"]
[Fri Apr 17 03:16:36.442035 2026] [:error] [pid 43482:tid 43493] [client 20.215.69.226:42019] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeE1lD9SZnuKxlHrct3IIQAAAMk"]
[Fri Apr 17 03:16:37.604010 2026] [:error] [pid 26480:tid 26506] [client 20.215.69.226:52836] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aeE1lQwLDJKTQNfarA2aigAAAdg"]
[Fri Apr 17 03:16:38.772702 2026] [:error] [pid 26480:tid 26502] [client 20.215.69.226:48085] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aeE1lgwLDJKTQNfarA2aiwAAAdQ"]
[Fri Apr 17 03:16:40.375612 2026] [:error] [pid 3245:tid 3269] [client 20.215.69.226:41990] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aeE1mKESOMTHVLs-uFDiTwAAAQc"]
[Fri Apr 17 03:16:41.380435 2026] [:error] [pid 11692:tid 11698] [client 20.215.69.226:52807] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aeE1mc1AYuhm4BZwKNouvQAAAgE"]
[Fri Apr 17 03:16:42.227566 2026] [:error] [pid 4086:tid 4101] [client 20.215.69.226:36182] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "aeE1mllz7gxl_exM0FpUdgAAAU0"]
[Fri Apr 17 03:16:43.484478 2026] [:error] [pid 43386:tid 43438] [client 20.215.69.226:37564] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "aeE1m-91GAVgUfhPVDH4cQAAAFI"]
[Fri Apr 17 03:16:44.504691 2026] [:error] [pid 26102:tid 26112] [client 20.215.69.226:40407] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "aeE1nP127aFqw6ALdngmOAAAAYc"]
[Fri Apr 17 03:16:45.366788 2026] [:error] [pid 4086:tid 4108] [client 20.215.69.226:44484] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "aeE1nVlz7gxl_exM0FpUegAAAVQ"]
[Fri Apr 17 03:16:47.259247 2026] [:error] [pid 26102:tid 26115] [client 20.215.69.226:57178] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "aeE1n_127aFqw6ALdngmPAAAAYo"]
[Fri Apr 17 03:16:51.879167 2026] [:error] [pid 43387:tid 43467] [client 20.215.69.226:57210] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "aeE1oyBNsONqHxWTakVo-gAAAI4"]
[Fri Apr 17 03:16:53.477081 2026] [:error] [pid 26480:tid 26495] [client 20.215.69.226:55994] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "aeE1pQwLDJKTQNfarA2aoAAAAc0"]
[Fri Apr 17 03:16:57.672296 2026] [:error] [pid 43482:tid 43498] [client 20.215.69.226:37540] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nw.php"] [unique_id "aeE1qT9SZnuKxlHrct3IPwAAAM4"]
[Fri Apr 17 03:16:58.957413 2026] [:error] [pid 43387:tid 43461] [client 20.215.69.226:44490] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeE1qiBNsONqHxWTakVpAQAAAIo"]
[Fri Apr 17 03:17:00.061135 2026] [:error] [pid 43385:tid 43407] [client 20.215.69.226:37546] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeE1rMnIxkJaUI8KNs465gAAABI"]
[Fri Apr 17 03:17:01.077717 2026] [:error] [pid 43386:tid 43432] [client 20.215.69.226:44501] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeE1re91GAVgUfhPVDH4hQAAAEw"]
[Fri Apr 17 03:17:28.037647 2026] [proxy_fcgi:error] [pid 26480:tid 26501] [client 20.215.69.226:35288] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:17:43.102598 2026] [proxy_fcgi:error] [pid 43385:tid 43394] [client 20.215.69.226:35746] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 03:17:53.495414 2026] [proxy_fcgi:error] [pid 43386:tid 43443] [client 20.215.69.226:43440] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 04:01:25.957688 2026] [:error] [pid 9263:tid 9276] [client 209.38.89.62:48560] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFAFRP68VyHNvj1e56LWQAAAMs"]
[Fri Apr 17 04:01:26.034687 2026] [:error] [pid 9263:tid 9269] [client 209.38.89.62:48570] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFAFhP68VyHNvj1e56LWgAAAMQ"]
[Fri Apr 17 04:01:26.239854 2026] [:error] [pid 9263:tid 9277] [client 209.38.89.62:48584] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFAFhP68VyHNvj1e56LWwAAAMw"]
[Fri Apr 17 04:01:27.052423 2026] [:error] [pid 9263:tid 9266] [client 209.38.89.62:48600] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAFxP68VyHNvj1e56LYgAAAME"]
[Fri Apr 17 04:01:27.209480 2026] [:error] [pid 9263:tid 9288] [client 209.38.89.62:48606] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAFxP68VyHNvj1e56LZAAAANc"]
[Fri Apr 17 04:01:27.441868 2026] [:error] [pid 9263:tid 9278] [client 209.38.89.62:48608] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFAFxP68VyHNvj1e56LZgAAAM0"]
[Fri Apr 17 04:01:27.575831 2026] [:error] [pid 9153:tid 9231] [client 209.38.89.62:48610] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAF-MHGxkTZX3c45es9wAAAI0"]
[Fri Apr 17 04:01:27.719904 2026] [:error] [pid 9263:tid 9269] [client 209.38.89.62:48614] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAFxP68VyHNvj1e56LaAAAAMQ"]
[Fri Apr 17 04:01:27.793719 2026] [:error] [pid 9263:tid 9272] [client 209.38.89.62:48626] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAFxP68VyHNvj1e56LaQAAAMc"]
[Fri Apr 17 04:01:28.382909 2026] [:error] [pid 9151:tid 9170] [client 209.38.89.62:48640] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAGMhTVuRPkua22vRhkgAAAAk"]
[Fri Apr 17 04:01:28.424360 2026] [:error] [pid 9153:tid 9232] [client 209.38.89.62:48646] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAGOMHGxkTZX3c45es-AAAAI4"]
[Fri Apr 17 04:01:28.458209 2026] [:error] [pid 9153:tid 9224] [client 209.38.89.62:48662] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAGOMHGxkTZX3c45es-QAAAIY"]
[Fri Apr 17 04:01:28.519764 2026] [:error] [pid 9152:tid 9201] [client 209.38.89.62:48664] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAGJJYca8I3TNCwIfMPgAAAEs"]
[Fri Apr 17 07:25:10.789511 2026] [proxy_fcgi:error] [pid 25010:tid 25017] [client 20.100.206.196:58333] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:25:25.078808 2026] [:error] [pid 9152:tid 9209] [client 20.100.206.196:30783] [client 20.100.206.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeFv5ZJYca8I3TNCwIdGoQAAAFM"]
[Fri Apr 17 07:25:28.025589 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 20.100.206.196:21982] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:25:44.194460 2026] [proxy_fcgi:error] [pid 34273:tid 34280] [client 20.100.206.196:32955] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:25:53.873362 2026] [:error] [pid 9153:tid 9224] [client 20.100.206.196:34775] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aeFwAeMHGxkTZX3c45defwAAAIY"]
[Fri Apr 17 07:25:54.753065 2026] [:error] [pid 25010:tid 25033] [client 20.100.206.196:38979] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aeFwAo-7kkf42RarqQ3p7wAAAVQ"]
[Fri Apr 17 07:25:55.402563 2026] [:error] [pid 9153:tid 9228] [client 20.100.206.196:57906] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aeFwA-MHGxkTZX3c45degQAAAIo"]
[Fri Apr 17 07:25:55.970509 2026] [:error] [pid 9153:tid 9227] [client 20.100.206.196:52922] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aeFwA-MHGxkTZX3c45deggAAAIk"]
[Fri Apr 17 07:25:56.814138 2026] [:error] [pid 51878:tid 51901] [client 20.100.206.196:53887] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "aeFwBEnQhUtMbw9EsgbOvgAAARU"]
[Fri Apr 17 07:25:57.880049 2026] [:error] [pid 51878:tid 51898] [client 20.100.206.196:52907] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "aeFwBUnQhUtMbw9EsgbOvwAAARI"]
[Fri Apr 17 07:25:58.616653 2026] [:error] [pid 9152:tid 9209] [client 20.100.206.196:53832] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "aeFwBpJYca8I3TNCwIdG5AAAAFM"]
[Fri Apr 17 07:25:59.232576 2026] [:error] [pid 9152:tid 9194] [client 20.100.206.196:9121] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "aeFwB5JYca8I3TNCwIdG5QAAAEQ"]
[Fri Apr 17 07:25:59.792622 2026] [:error] [pid 51878:tid 51886] [client 20.100.206.196:52888] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aeFwB0nQhUtMbw9EsgbOwAAAAQY"]
[Fri Apr 17 07:26:00.396021 2026] [:error] [pid 9152:tid 9200] [client 20.100.206.196:51508] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aeFwCJJYca8I3TNCwIdG6QAAAEo"]
[Fri Apr 17 07:26:01.259893 2026] [:error] [pid 9151:tid 9180] [client 20.100.206.196:44412] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aeFwCchTVuRPkua22vTKYQAAABM"]
[Fri Apr 17 07:26:01.863494 2026] [:error] [pid 51878:tid 51895] [client 20.100.206.196:46596] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "aeFwCUnQhUtMbw9EsgbOwwAAAQ8"]
[Fri Apr 17 07:26:02.595051 2026] [:error] [pid 9153:tid 9222] [client 20.100.206.196:47296] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aeFwCuMHGxkTZX3c45dejwAAAIQ"]
[Fri Apr 17 07:26:03.190855 2026] [:error] [pid 34273:tid 34296] [client 20.100.206.196:57866] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aeFwC2uQDW686mK3dgEYFwAAAZU"]
[Fri Apr 17 07:26:03.962482 2026] [:error] [pid 9151:tid 9166] [client 20.100.206.196:64727] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aeFwC8hTVuRPkua22vTKZQAAAAU"]
[Fri Apr 17 07:26:04.727952 2026] [:error] [pid 25010:tid 25028] [client 20.100.206.196:44367] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aeFwDI-7kkf42RarqQ3qAQAAAU8"]
[Fri Apr 17 07:26:05.434565 2026] [:error] [pid 34273:tid 34284] [client 20.100.206.196:47351] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeFwDWuQDW686mK3dgEYHwAAAYk"]
[Fri Apr 17 07:26:06.256253 2026] [:error] [pid 34273:tid 34289] [client 20.100.206.196:44395] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeFwDmuQDW686mK3dgEYIwAAAY4"]
[Fri Apr 17 07:26:07.234045 2026] [:error] [pid 25010:tid 25019] [client 20.100.206.196:52897] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeFwD4-7kkf42RarqQ3qBgAAAUY"]
[Fri Apr 17 07:26:08.360413 2026] [:error] [pid 34273:tid 34297] [client 20.100.206.196:9135] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeFwEGuQDW686mK3dgEYMQAAAZY"]
[Fri Apr 17 07:26:08.965466 2026] [:error] [pid 34273:tid 34285] [client 20.100.206.196:64711] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFwEGuQDW686mK3dgEYNAAAAYo"]
[Fri Apr 17 07:26:09.654666 2026] [:error] [pid 9151:tid 9167] [client 20.100.206.196:64734] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFwEchTVuRPkua22vTKbAAAAAY"]
[Fri Apr 17 07:26:10.516404 2026] [:error] [pid 34273:tid 34281] [client 20.100.206.196:26368] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFwEmuQDW686mK3dgEYPAAAAYY"]
[Fri Apr 17 07:26:11.254267 2026] [:error] [pid 34273:tid 34287] [client 20.100.206.196:46646] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFwE2uQDW686mK3dgEYQQAAAYw"]
[Fri Apr 17 07:26:12.170210 2026] [:error] [pid 25010:tid 25029] [client 20.100.206.196:9120] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aeFwFI-7kkf42RarqQ3qCgAAAVA"]
[Fri Apr 17 07:26:12.854632 2026] [:error] [pid 51878:tid 51885] [client 20.100.206.196:26419] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aeFwFEnQhUtMbw9EsgbOyAAAAQU"]
[Fri Apr 17 07:26:13.632361 2026] [:error] [pid 34273:tid 34290] [client 20.100.206.196:51476] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aeFwFWuQDW686mK3dgEYSAAAAY8"]
[Fri Apr 17 07:26:14.252141 2026] [:error] [pid 25010:tid 25022] [client 20.100.206.196:52870] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aeFwFo-7kkf42RarqQ3qCwAAAUk"]
[Fri Apr 17 07:26:14.852880 2026] [:error] [pid 9152:tid 9207] [client 20.100.206.196:51518] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aeFwFpJYca8I3TNCwIdG8wAAAFE"]
[Fri Apr 17 07:26:15.525739 2026] [:error] [pid 34273:tid 34280] [client 20.100.206.196:26414] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aeFwF2uQDW686mK3dgEYTgAAAYU"]
[Fri Apr 17 07:26:16.418391 2026] [:error] [pid 51878:tid 51883] [client 20.100.206.196:52918] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aeFwGEnQhUtMbw9EsgbOzAAAAQM"]
[Fri Apr 17 07:26:17.372920 2026] [:error] [pid 34273:tid 34291] [client 20.100.206.196:64731] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gecko.php"] [unique_id "aeFwGWuQDW686mK3dgEYVQAAAZA"]
[Fri Apr 17 07:26:18.204428 2026] [:error] [pid 25010:tid 25019] [client 20.100.206.196:37908] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny"] [unique_id "aeFwGo-7kkf42RarqQ3qFQAAAUY"]
[Fri Apr 17 07:26:19.036300 2026] [:error] [pid 9263:tid 9269] [client 20.100.206.196:47352] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny"] [unique_id "aeFwGxP68VyHNvj1e55DfwAAAMQ"]
[Fri Apr 17 07:26:19.814692 2026] [:error] [pid 9153:tid 9220] [client 20.100.206.196:41362] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny"] [unique_id "aeFwG-MHGxkTZX3c45derQAAAII"]
[Fri Apr 17 07:26:20.800045 2026] [:error] [pid 34273:tid 34280] [client 20.100.206.196:20311] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny"] [unique_id "aeFwHGuQDW686mK3dgEYYQAAAYU"]
[Fri Apr 17 07:26:21.515791 2026] [:error] [pid 9153:tid 9229] [client 20.100.206.196:37948] [client 20.100.206.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aeFwHeMHGxkTZX3c45derwAAAIs"]
[Fri Apr 17 07:26:22.307030 2026] [:error] [pid 9151:tid 9173] [client 20.100.206.196:51497] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFwHshTVuRPkua22vTKcgAAAAw"]
[Fri Apr 17 07:26:23.220157 2026] [:error] [pid 34273:tid 34279] [client 20.100.206.196:43710] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFwH2uQDW686mK3dgEYaAAAAYQ"]
[Fri Apr 17 07:26:24.003625 2026] [:error] [pid 25010:tid 25017] [client 20.100.206.196:41364] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFwII-7kkf42RarqQ3qGgAAAUQ"]
[Fri Apr 17 07:26:24.999453 2026] [:error] [pid 34273:tid 34292] [client 20.100.206.196:44397] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "aeFwIGuQDW686mK3dgEYbgAAAZE"]
[Fri Apr 17 07:26:25.520962 2026] [:error] [pid 34273:tid 34288] [client 20.100.206.196:51487] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "aeFwIWuQDW686mK3dgEYdAAAAY0"]
[Fri Apr 17 07:26:26.080008 2026] [:error] [pid 34273:tid 34289] [client 20.100.206.196:42645] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "aeFwImuQDW686mK3dgEYegAAAY4"]
[Fri Apr 17 07:26:26.998758 2026] [:error] [pid 34273:tid 34283] [client 20.100.206.196:51513] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-image.php"] [unique_id "aeFwImuQDW686mK3dgEYggAAAYg"]
[Fri Apr 17 07:26:27.889885 2026] [:error] [pid 34273:tid 34280] [client 20.100.206.196:37923] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeFwI2uQDW686mK3dgEYiQAAAYU"]
[Fri Apr 17 07:26:29.088779 2026] [:error] [pid 9152:tid 9208] [client 20.100.206.196:43686] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeFwJZJYca8I3TNCwIdG9AAAAFI"]
[Fri Apr 17 07:26:29.921247 2026] [:error] [pid 9152:tid 9214] [client 20.100.206.196:47305] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeFwJZJYca8I3TNCwIdG9QAAAFg"]
[Fri Apr 17 07:26:31.051103 2026] [:error] [pid 9153:tid 9226] [client 20.100.206.196:35268] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeFwJ-MHGxkTZX3c45devAAAAIg"]
[Fri Apr 17 07:26:32.375292 2026] [:error] [pid 9263:tid 9283] [client 20.100.206.196:37893] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeFwKBP68VyHNvj1e55DgwAAANI"]
[Fri Apr 17 07:26:33.647504 2026] [:error] [pid 9152:tid 9199] [client 20.100.206.196:41389] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeFwKZJYca8I3TNCwIdG-gAAAEk"]
[Fri Apr 17 07:26:34.904491 2026] [:error] [pid 9152:tid 9203] [client 20.100.206.196:26370] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeFwKpJYca8I3TNCwIdHAAAAAE0"]
[Fri Apr 17 07:26:36.491882 2026] [:error] [pid 9151:tid 9185] [client 20.100.206.196:43705] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeFwLMhTVuRPkua22vTKfgAAABg"]
[Fri Apr 17 07:26:38.578170 2026] [:error] [pid 34273:tid 34286] [client 20.100.206.196:43667] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/footer.php"] [unique_id "aeFwLmuQDW686mK3dgEYqAAAAYs"]
[Fri Apr 17 07:26:41.782116 2026] [:error] [pid 9151:tid 9171] [client 20.100.206.196:43709] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/footer.php"] [unique_id "aeFwMchTVuRPkua22vTKhwAAAAo"]
[Fri Apr 17 07:26:43.907015 2026] [:error] [pid 34273:tid 34280] [client 20.100.206.196:26391] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/footer.php"] [unique_id "aeFwM2uQDW686mK3dgEYwQAAAYU"]
[Fri Apr 17 07:26:45.396052 2026] [:error] [pid 9152:tid 9191] [client 20.100.206.196:34212] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/footer.php"] [unique_id "aeFwNZJYca8I3TNCwIdHBgAAAEE"]
[Fri Apr 17 07:26:46.579250 2026] [:error] [pid 34273:tid 34294] [client 20.100.206.196:26401] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "aeFwNmuQDW686mK3dgEYyAAAAZM"]
[Fri Apr 17 07:26:48.208424 2026] [:error] [pid 34273:tid 34291] [client 20.100.206.196:42644] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "aeFwOGuQDW686mK3dgEYzAAAAZA"]
[Fri Apr 17 07:26:49.157659 2026] [:error] [pid 34273:tid 34297] [client 20.100.206.196:30727] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "aeFwOWuQDW686mK3dgEY0gAAAZY"]
[Fri Apr 17 07:26:50.354141 2026] [:error] [pid 9152:tid 9206] [client 20.100.206.196:41386] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "aeFwOpJYca8I3TNCwIdHDQAAAFA"]
[Fri Apr 17 07:27:09.998375 2026] [proxy_fcgi:error] [pid 9151:tid 9168] [client 20.100.206.196:43714] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:27:15.048067 2026] [proxy_fcgi:error] [pid 25010:tid 25030] [client 20.100.206.196:51960] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:27:30.181705 2026] [proxy_fcgi:error] [pid 9153:tid 9226] [client 20.100.206.196:43659] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:27:46.409472 2026] [:error] [pid 34273:tid 34288] [client 20.100.206.196:30729] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFwcmuQDW686mK3dgEZEQAAAY0"]
[Fri Apr 17 07:27:47.594815 2026] [:error] [pid 9151:tid 9167] [client 20.100.206.196:51933] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFwc8hTVuRPkua22vTKygAAAAY"]
[Fri Apr 17 07:27:48.750975 2026] [:error] [pid 9152:tid 9200] [client 20.100.206.196:43142] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFwdJJYca8I3TNCwIdHTAAAAEo"]
[Fri Apr 17 07:27:49.826458 2026] [:error] [pid 9152:tid 9211] [client 20.100.206.196:21865] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFwdZJYca8I3TNCwIdHUQAAAFU"]
[Fri Apr 17 07:27:51.103280 2026] [:error] [pid 9152:tid 9213] [client 20.100.206.196:51911] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bdktk.php"] [unique_id "aeFwd5JYca8I3TNCwIdHVgAAAFc"]
[Fri Apr 17 07:27:52.801567 2026] [:error] [pid 9263:tid 9271] [client 20.100.206.196:41810] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bdktk.php"] [unique_id "aeFweBP68VyHNvj1e55DpwAAAMY"]
[Fri Apr 17 07:27:54.057468 2026] [:error] [pid 51878:tid 51887] [client 20.100.206.196:35283] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bdktk.php"] [unique_id "aeFweknQhUtMbw9EsgbO8wAAAQc"]
[Fri Apr 17 07:27:55.167519 2026] [:error] [pid 34273:tid 34291] [client 20.100.206.196:35292] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bdktk.php"] [unique_id "aeFwe2uQDW686mK3dgEZKQAAAZA"]
[Fri Apr 17 07:27:56.869398 2026] [:error] [pid 9151:tid 9179] [client 20.100.206.196:21879] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v5.php"] [unique_id "aeFwfMhTVuRPkua22vTK0AAAABI"]
[Fri Apr 17 07:27:58.485483 2026] [:error] [pid 34273:tid 34282] [client 20.100.206.196:21868] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v5.php"] [unique_id "aeFwfmuQDW686mK3dgEZMQAAAYc"]
[Fri Apr 17 07:27:59.950969 2026] [:error] [pid 34273:tid 34279] [client 20.100.206.196:35285] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v5.php"] [unique_id "aeFwf2uQDW686mK3dgEZQAAAAYQ"]
[Fri Apr 17 07:28:02.890622 2026] [:error] [pid 9152:tid 9206] [client 20.100.206.196:21863] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/v5.php"] [unique_id "aeFwgpJYca8I3TNCwIdHYAAAAFA"]
[Fri Apr 17 07:28:04.500496 2026] [:error] [pid 9153:tid 9238] [client 20.100.206.196:43186] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "aeFwhOMHGxkTZX3c45dfAAAAAJQ"]
[Fri Apr 17 07:28:05.960631 2026] [:error] [pid 9153:tid 9239] [client 20.100.206.196:43136] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "aeFwheMHGxkTZX3c45dfAgAAAJU"]
[Fri Apr 17 07:28:06.943092 2026] [:error] [pid 9153:tid 9227] [client 20.100.206.196:21882] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "aeFwhuMHGxkTZX3c45dfCAAAAIk"]
[Fri Apr 17 07:28:07.671729 2026] [:error] [pid 9263:tid 9269] [client 20.100.206.196:33112] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "aeFwhxP68VyHNvj1e55DswAAAMQ"]
[Fri Apr 17 07:28:08.277998 2026] [:error] [pid 9153:tid 9236] [client 20.100.206.196:34195] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "aeFwiOMHGxkTZX3c45dfDwAAAJI"]
[Fri Apr 17 07:28:08.964132 2026] [:error] [pid 9151:tid 9182] [client 20.100.206.196:34230] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "aeFwiMhTVuRPkua22vTK3QAAABU"]
[Fri Apr 17 07:28:09.916596 2026] [:error] [pid 9151:tid 9164] [client 20.100.206.196:49124] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "aeFwichTVuRPkua22vTK3wAAAAM"]
[Fri Apr 17 07:28:10.873100 2026] [:error] [pid 51878:tid 51903] [client 20.100.206.196:51961] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "aeFwiknQhUtMbw9EsgbPBQAAARc"]
[Fri Apr 17 07:28:12.422489 2026] [:error] [pid 9152:tid 9209] [client 20.100.206.196:21854] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "aeFwjJJYca8I3TNCwIdHcQAAAFM"]
[Fri Apr 17 07:28:13.277842 2026] [:error] [pid 9263:tid 9285] [client 20.100.206.196:51937] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "aeFwjRP68VyHNvj1e55DtgAAANQ"]
[Fri Apr 17 07:28:14.574737 2026] [:error] [pid 9153:tid 9231] [client 20.100.206.196:51127] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "aeFwjuMHGxkTZX3c45dfGwAAAI0"]
[Fri Apr 17 07:28:15.969855 2026] [:error] [pid 9152:tid 9212] [client 20.100.206.196:21839] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "aeFwj5JYca8I3TNCwIdHeQAAAFY"]
[Fri Apr 17 07:28:17.032723 2026] [:error] [pid 9152:tid 9192] [client 20.100.206.196:39476] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r2.php"] [unique_id "aeFwkZJYca8I3TNCwIdHfAAAAEI"]
[Fri Apr 17 07:28:17.955944 2026] [:error] [pid 34273:tid 34282] [client 20.100.206.196:35898] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r2.php"] [unique_id "aeFwkWuQDW686mK3dgEZXQAAAYc"]
[Fri Apr 17 07:28:18.948385 2026] [:error] [pid 9152:tid 9206] [client 20.100.206.196:49109] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r2.php"] [unique_id "aeFwkpJYca8I3TNCwIdHgQAAAFA"]
[Fri Apr 17 07:28:20.123280 2026] [:error] [pid 34273:tid 34284] [client 20.100.206.196:32596] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/r2.php"] [unique_id "aeFwlGuQDW686mK3dgEZZwAAAYk"]
[Fri Apr 17 07:28:21.043601 2026] [:error] [pid 34273:tid 34281] [client 20.100.206.196:49661] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aeFwlWuQDW686mK3dgEZbQAAAYY"]
[Fri Apr 17 07:28:21.715193 2026] [:error] [pid 9152:tid 9207] [client 20.100.206.196:58366] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aeFwlZJYca8I3TNCwIdHgwAAAFE"]
[Fri Apr 17 07:28:22.613923 2026] [:error] [pid 34273:tid 34292] [client 20.100.206.196:61722] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aeFwlmuQDW686mK3dgEZdAAAAZE"]
[Fri Apr 17 07:28:23.696629 2026] [:error] [pid 51878:tid 51895] [client 20.100.206.196:57853] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aeFwl0nQhUtMbw9EsgbPCQAAAQ8"]
[Fri Apr 17 07:28:24.584464 2026] [:error] [pid 9151:tid 9163] [client 20.100.206.196:8381] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "aeFwmMhTVuRPkua22vTK5wAAAAI"]
[Fri Apr 17 07:28:26.059671 2026] [:error] [pid 9151:tid 9167] [client 20.100.206.196:50543] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "aeFwmshTVuRPkua22vTK6QAAAAY"]
[Fri Apr 17 07:28:27.096994 2026] [:error] [pid 25010:tid 25028] [client 20.100.206.196:61727] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "aeFwm4-7kkf42RarqQ3q2wAAAU8"]
[Fri Apr 17 07:28:28.250845 2026] [:error] [pid 25010:tid 25027] [client 20.100.206.196:43262] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "aeFwnI-7kkf42RarqQ3q3QAAAU4"]
[Fri Apr 17 07:28:29.151514 2026] [:error] [pid 25010:tid 25019] [client 20.100.206.196:57839] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "aeFwnY-7kkf42RarqQ3q3gAAAUY"]
[Fri Apr 17 07:28:29.858380 2026] [:error] [pid 25010:tid 25037] [client 20.100.206.196:35901] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "aeFwnY-7kkf42RarqQ3q4AAAAVg"]
[Fri Apr 17 07:28:30.563707 2026] [:error] [pid 34273:tid 34279] [client 20.100.206.196:50528] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "aeFwnmuQDW686mK3dgEZfgAAAYQ"]
[Fri Apr 17 07:28:31.297601 2026] [:error] [pid 9152:tid 9197] [client 20.100.206.196:61702] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "aeFwn5JYca8I3TNCwIdHhwAAAEc"]
[Fri Apr 17 07:28:32.212885 2026] [:error] [pid 9152:tid 9204] [client 20.100.206.196:30846] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "aeFwoJJYca8I3TNCwIdHiQAAAE4"]
[Fri Apr 17 07:28:33.208528 2026] [:error] [pid 9152:tid 9190] [client 20.100.206.196:24861] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "aeFwoZJYca8I3TNCwIdHjAAAAEA"]
[Fri Apr 17 07:28:34.082391 2026] [:error] [pid 51878:tid 51889] [client 20.100.206.196:28331] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "aeFwoknQhUtMbw9EsgbPDQAAAQk"]
[Fri Apr 17 07:28:35.057812 2026] [:error] [pid 9151:tid 9166] [client 20.100.206.196:28339] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zogy1.php"] [unique_id "aeFwo8hTVuRPkua22vTK8wAAAAU"]
[Fri Apr 17 07:28:37.208329 2026] [:error] [pid 51878:tid 51896] [client 20.100.206.196:8975] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeFwpUnQhUtMbw9EsgbPEgAAARA"]
[Fri Apr 17 07:28:40.553789 2026] [:error] [pid 9263:tid 9287] [client 20.100.206.196:54850] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeFwqBP68VyHNvj1e55D4gAAANY"]
[Fri Apr 17 07:28:43.530025 2026] [:error] [pid 34273:tid 34297] [client 20.100.206.196:8976] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeFwq2uQDW686mK3dgEZiAAAAZY"]
[Fri Apr 17 07:29:05.947055 2026] [proxy_fcgi:error] [pid 25010:tid 25026] [client 20.100.206.196:11347] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:29:22.648132 2026] [proxy_fcgi:error] [pid 34273:tid 34281] [client 20.100.206.196:28298] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:29:38.669164 2026] [proxy_fcgi:error] [pid 9152:tid 9199] [client 20.100.206.196:40959] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:29:44.760955 2026] [:error] [pid 9153:tid 9227] [client 20.100.206.196:53872] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeFw6OMHGxkTZX3c45dfkAAAAIk"]
[Fri Apr 17 07:29:46.216785 2026] [:error] [pid 9152:tid 9209] [client 20.100.206.196:8776] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeFw6pJYca8I3TNCwIdINwAAAFM"]
[Fri Apr 17 07:29:47.144705 2026] [:error] [pid 34273:tid 34275] [client 20.100.206.196:8290] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeFw62uQDW686mK3dgEaUAAAAYA"]
[Fri Apr 17 07:29:48.050344 2026] [:error] [pid 9152:tid 9204] [client 20.100.206.196:8788] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeFw7JJYca8I3TNCwIdIOQAAAE4"]
[Fri Apr 17 07:29:48.617644 2026] [:error] [pid 34273:tid 34283] [client 20.100.206.196:35907] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ipv6.php"] [unique_id "aeFw7GuQDW686mK3dgEaUgAAAYg"]
[Fri Apr 17 07:29:49.253374 2026] [:error] [pid 9152:tid 9207] [client 20.100.206.196:45312] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ipv6.php"] [unique_id "aeFw7ZJYca8I3TNCwIdIOwAAAFE"]
[Fri Apr 17 07:29:49.845959 2026] [:error] [pid 51878:tid 51904] [client 20.100.206.196:58379] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ipv6.php"] [unique_id "aeFw7UnQhUtMbw9EsgbPPwAAARg"]
[Fri Apr 17 07:29:50.642098 2026] [:error] [pid 34273:tid 34276] [client 20.100.206.196:8797] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ipv6.php"] [unique_id "aeFw7muQDW686mK3dgEaVAAAAYE"]
[Fri Apr 17 07:29:51.674940 2026] [:error] [pid 9153:tid 9223] [client 20.100.206.196:45341] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeFw7-MHGxkTZX3c45dfkwAAAIU"]
[Fri Apr 17 07:29:52.726995 2026] [:error] [pid 51878:tid 51893] [client 20.100.206.196:49185] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeFw8EnQhUtMbw9EsgbPQwAAAQ0"]
[Fri Apr 17 07:29:53.719019 2026] [:error] [pid 25010:tid 25020] [client 20.100.206.196:35942] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeFw8Y-7kkf42RarqQ3rNQAAAUc"]
[Fri Apr 17 07:29:54.849981 2026] [:error] [pid 9153:tid 9219] [client 20.100.206.196:22000] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeFw8uMHGxkTZX3c45dfmQAAAIE"]
[Fri Apr 17 07:29:56.301026 2026] [:error] [pid 25010:tid 25016] [client 20.100.206.196:47026] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aeFw9I-7kkf42RarqQ3rNwAAAUM"]
[Fri Apr 17 07:29:57.360490 2026] [:error] [pid 9152:tid 9195] [client 20.100.206.196:29341] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aeFw9ZJYca8I3TNCwIdIQwAAAEU"]
[Fri Apr 17 07:29:57.955407 2026] [:error] [pid 25010:tid 25018] [client 20.100.206.196:38181] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aeFw9Y-7kkf42RarqQ3rOQAAAUU"]
[Fri Apr 17 07:29:58.838278 2026] [:error] [pid 25010:tid 25015] [client 20.100.206.196:29321] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aeFw9o-7kkf42RarqQ3rPgAAAUI"]
[Fri Apr 17 07:30:00.637393 2026] [:error] [pid 34273:tid 34298] [client 20.100.206.196:38187] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "aeFw-GuQDW686mK3dgEadgAAAZc"]
[Fri Apr 17 07:30:01.603505 2026] [:error] [pid 34273:tid 34294] [client 20.100.206.196:45314] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "aeFw-WuQDW686mK3dgEafAAAAZM"]
[Fri Apr 17 07:30:03.077446 2026] [:error] [pid 25010:tid 25034] [client 20.100.206.196:64798] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "aeFw-4-7kkf42RarqQ3rQQAAAVU"]
[Fri Apr 17 07:30:03.952354 2026] [:error] [pid 9151:tid 9183] [client 20.100.206.196:57367] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "aeFw-8hTVuRPkua22vTLNwAAABY"]
[Fri Apr 17 07:30:04.551774 2026] [:error] [pid 9152:tid 9207] [client 20.100.206.196:38173] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "aeFw_JJYca8I3TNCwIdISAAAAFE"]
[Fri Apr 17 07:30:05.589168 2026] [:error] [pid 9152:tid 9203] [client 20.100.206.196:57382] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "aeFw_ZJYca8I3TNCwIdISQAAAE0"]
[Fri Apr 17 07:30:06.718647 2026] [:error] [pid 25010:tid 25014] [client 20.100.206.196:29357] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "aeFw_o-7kkf42RarqQ3rRQAAAUE"]
[Fri Apr 17 07:30:07.906398 2026] [:error] [pid 34273:tid 34299] [client 20.100.206.196:36418] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "aeFw_2uQDW686mK3dgEanwAAAZg"]
[Fri Apr 17 07:30:09.035387 2026] [:error] [pid 25010:tid 25035] [client 20.100.206.196:36881] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aeFxAY-7kkf42RarqQ3rRwAAAVY"]
[Fri Apr 17 07:30:10.988104 2026] [:error] [pid 51878:tid 51885] [client 20.100.206.196:64780] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aeFxAknQhUtMbw9EsgbPSQAAAQU"]
[Fri Apr 17 07:30:12.064918 2026] [:error] [pid 9263:tid 9288] [client 20.100.206.196:64779] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aeFxBBP68VyHNvj1e55EBwAAANc"]
[Fri Apr 17 07:30:13.260167 2026] [:error] [pid 51878:tid 51904] [client 20.100.206.196:9085] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aeFxBUnQhUtMbw9EsgbPSgAAARg"]
[Fri Apr 17 07:30:14.258935 2026] [:error] [pid 9151:tid 9162] [client 20.100.206.196:36914] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper.php"] [unique_id "aeFxBshTVuRPkua22vTLQQAAAAE"]
[Fri Apr 17 07:30:15.662360 2026] [:error] [pid 9152:tid 9214] [client 20.100.206.196:38160] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper.php"] [unique_id "aeFxB5JYca8I3TNCwIdITgAAAFg"]
[Fri Apr 17 07:30:16.675458 2026] [:error] [pid 9152:tid 9196] [client 20.100.206.196:35933] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper.php"] [unique_id "aeFxCJJYca8I3TNCwIdIUAAAAEY"]
[Fri Apr 17 07:30:17.260305 2026] [:error] [pid 34273:tid 34299] [client 20.100.206.196:33571] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper.php"] [unique_id "aeFxCWuQDW686mK3dgEazwAAAZg"]
[Fri Apr 17 07:30:18.115340 2026] [:error] [pid 51878:tid 51903] [client 20.100.206.196:29353] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxpass.php"] [unique_id "aeFxCknQhUtMbw9EsgbPTQAAARc"]
[Fri Apr 17 07:30:19.059013 2026] [:error] [pid 34273:tid 34284] [client 20.100.206.196:33541] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxpass.php"] [unique_id "aeFxC2uQDW686mK3dgEa0wAAAYk"]
[Fri Apr 17 07:30:20.066539 2026] [:error] [pid 25010:tid 25026] [client 20.100.206.196:36875] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxpass.php"] [unique_id "aeFxDI-7kkf42RarqQ3rTAAAAU0"]
[Fri Apr 17 07:30:20.994310 2026] [:error] [pid 34273:tid 34292] [client 20.100.206.196:48740] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxpass.php"] [unique_id "aeFxDGuQDW686mK3dgEa1QAAAZE"]
[Fri Apr 17 07:30:21.838227 2026] [:error] [pid 34273:tid 34275] [client 20.100.206.196:36381] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aeFxDWuQDW686mK3dgEa2QAAAYA"]
[Fri Apr 17 07:30:22.875317 2026] [:error] [pid 51878:tid 51892] [client 20.100.206.196:33589] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aeFxDknQhUtMbw9EsgbPUAAAAQw"]
[Fri Apr 17 07:30:23.991212 2026] [:error] [pid 34273:tid 34295] [client 20.100.206.196:48722] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aeFxD2uQDW686mK3dgEa5AAAAZQ"]
[Fri Apr 17 07:30:24.820167 2026] [:error] [pid 34273:tid 34293] [client 20.100.206.196:36381] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/000.php"] [unique_id "aeFxEGuQDW686mK3dgEa5QAAAZI"]
[Fri Apr 17 07:30:25.688049 2026] [:error] [pid 25010:tid 25034] [client 20.100.206.196:38629] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aeFxEY-7kkf42RarqQ3rTgAAAVU"]
[Fri Apr 17 07:30:27.450309 2026] [:error] [pid 25010:tid 25024] [client 20.100.206.196:33568] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aeFxE4-7kkf42RarqQ3rUAAAAUs"]
[Fri Apr 17 07:30:28.168192 2026] [:error] [pid 25010:tid 25014] [client 20.100.206.196:55421] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aeFxFI-7kkf42RarqQ3rUQAAAUE"]
[Fri Apr 17 07:30:28.930900 2026] [:error] [pid 34273:tid 34295] [client 20.100.206.196:38176] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "aeFxFGuQDW686mK3dgEa7gAAAZQ"]
[Fri Apr 17 07:30:29.831581 2026] [:error] [pid 34273:tid 34288] [client 20.100.206.196:38191] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x3x.php"] [unique_id "aeFxFWuQDW686mK3dgEa8gAAAY0"]
[Fri Apr 17 07:30:30.572324 2026] [:error] [pid 51878:tid 51890] [client 20.100.206.196:38653] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x3x.php"] [unique_id "aeFxFknQhUtMbw9EsgbPVAAAAQo"]
[Fri Apr 17 07:30:31.294624 2026] [:error] [pid 34273:tid 34281] [client 20.100.206.196:36461] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x3x.php"] [unique_id "aeFxF2uQDW686mK3dgEa9wAAAYY"]
[Fri Apr 17 07:30:31.989206 2026] [:error] [pid 34273:tid 34286] [client 20.100.206.196:36465] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x3x.php"] [unique_id "aeFxF2uQDW686mK3dgEa-gAAAYs"]
[Fri Apr 17 07:30:32.950843 2026] [:error] [pid 9151:tid 9161] [client 20.100.206.196:29352] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xy.php"] [unique_id "aeFxGMhTVuRPkua22vTLRgAAAAA"]
[Fri Apr 17 07:30:33.962416 2026] [:error] [pid 51878:tid 51886] [client 20.100.206.196:28232] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xy.php"] [unique_id "aeFxGUnQhUtMbw9EsgbPWAAAAQY"]
[Fri Apr 17 07:30:34.912196 2026] [:error] [pid 51878:tid 51887] [client 20.100.206.196:37442] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xy.php"] [unique_id "aeFxGknQhUtMbw9EsgbPWQAAAQc"]
[Fri Apr 17 07:30:36.366555 2026] [:error] [pid 34273:tid 34282] [client 20.100.206.196:28276] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xy.php"] [unique_id "aeFxHGuQDW686mK3dgEbBQAAAYc"]
[Fri Apr 17 07:30:38.057667 2026] [:error] [pid 9153:tid 9228] [client 20.100.206.196:36463] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/global.php"] [unique_id "aeFxHuMHGxkTZX3c45dfowAAAIo"]
[Fri Apr 17 07:30:40.910947 2026] [:error] [pid 34273:tid 34288] [client 20.100.206.196:41223] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/global.php"] [unique_id "aeFxIGuQDW686mK3dgEbDQAAAY0"]
[Fri Apr 17 07:31:03.866401 2026] [proxy_fcgi:error] [pid 25010:tid 25034] [client 20.100.206.196:9040] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:31:04.127687 2026] [:error] [pid 9151:tid 9184] [client 20.100.206.196:36428] [client 20.100.206.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeFxOMhTVuRPkua22vTLTgAAABc"]
[Fri Apr 17 07:31:21.769379 2026] [proxy_fcgi:error] [pid 9263:tid 9281] [client 20.100.206.196:41248] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:31:36.198789 2026] [proxy_fcgi:error] [pid 9152:tid 9192] [client 20.100.206.196:41757] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:31:37.946114 2026] [proxy_fcgi:error] [pid 25010:tid 25031] [client 20.100.206.196:39060] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:31:45.373735 2026] [:error] [pid 9263:tid 9284] [client 20.100.206.196:50972] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "aeFxYRP68VyHNvj1e55EZgAAANM"]
[Fri Apr 17 07:31:46.935817 2026] [:error] [pid 34273:tid 34287] [client 20.100.206.196:40176] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "aeFxYmuQDW686mK3dgEbjwAAAYw"]
[Fri Apr 17 07:31:47.709653 2026] [:error] [pid 34273:tid 34283] [client 20.100.206.196:31329] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "aeFxY2uQDW686mK3dgEblAAAAYg"]
[Fri Apr 17 07:31:49.005994 2026] [:error] [pid 9263:tid 9267] [client 20.100.206.196:8693] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "aeFxZRP68VyHNvj1e55EdQAAAMI"]
[Fri Apr 17 07:31:49.961063 2026] [:error] [pid 34273:tid 34294] [client 20.100.206.196:50973] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "aeFxZWuQDW686mK3dgEblgAAAZM"]
[Fri Apr 17 07:31:50.681769 2026] [:error] [pid 51878:tid 51885] [client 20.100.206.196:8603] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "aeFxZknQhUtMbw9EsgbPagAAAQU"]
[Fri Apr 17 07:31:51.487276 2026] [:error] [pid 34273:tid 34281] [client 20.100.206.196:26539] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "aeFxZ2uQDW686mK3dgEbmAAAAYY"]
[Fri Apr 17 07:31:52.234762 2026] [:error] [pid 34273:tid 34279] [client 20.100.206.196:40130] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "aeFxaGuQDW686mK3dgEbmgAAAYQ"]
[Fri Apr 17 07:31:53.726556 2026] [:error] [pid 34273:tid 34299] [client 20.100.206.196:8684] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeFxaWuQDW686mK3dgEbnAAAAZg"]
[Fri Apr 17 07:31:57.065579 2026] [:error] [pid 34273:tid 34294] [client 20.100.206.196:39069] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeFxbWuQDW686mK3dgEbpAAAAZM"]
[Fri Apr 17 07:31:59.278460 2026] [:error] [pid 25010:tid 25036] [client 20.100.206.196:26531] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeFxb4-7kkf42RarqQ3rcwAAAVc"]
[Fri Apr 17 07:32:01.313389 2026] [:error] [pid 51878:tid 51897] [client 20.100.206.196:30223] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeFxcUnQhUtMbw9EsgbPbQAAARE"]
[Fri Apr 17 07:32:02.822263 2026] [:error] [pid 34273:tid 34293] [client 20.100.206.196:31335] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "aeFxcmuQDW686mK3dgEbrAAAAZI"]
[Fri Apr 17 07:32:04.332430 2026] [:error] [pid 9263:tid 9281] [client 20.100.206.196:26497] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "aeFxdBP68VyHNvj1e55EpAAAANA"]
[Fri Apr 17 07:32:06.376140 2026] [:error] [pid 9263:tid 9268] [client 20.100.206.196:44346] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "aeFxdhP68VyHNvj1e55EpwAAAMM"]
[Fri Apr 17 07:32:08.666334 2026] [:error] [pid 51878:tid 51889] [client 20.100.206.196:26478] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "aeFxeEnQhUtMbw9EsgbPcgAAAQk"]
[Fri Apr 17 07:32:09.868943 2026] [:error] [pid 25010:tid 25031] [client 20.100.206.196:8663] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aeFxeY-7kkf42RarqQ3regAAAVI"]
[Fri Apr 17 07:32:10.811629 2026] [:error] [pid 9263:tid 9283] [client 20.100.206.196:39077] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aeFxehP68VyHNvj1e55EqwAAANI"]
[Fri Apr 17 07:32:11.851350 2026] [:error] [pid 51878:tid 51885] [client 20.100.206.196:30225] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aeFxe0nQhUtMbw9EsgbPeAAAAQU"]
[Fri Apr 17 07:32:13.464092 2026] [:error] [pid 25010:tid 25030] [client 20.100.206.196:44347] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aeFxfY-7kkf42RarqQ3rewAAAVE"]
[Fri Apr 17 07:32:14.193368 2026] [:error] [pid 9153:tid 9221] [client 20.100.206.196:35300] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "aeFxfuMHGxkTZX3c45df3wAAAIM"]
[Fri Apr 17 07:32:16.083102 2026] [:error] [pid 9151:tid 9183] [client 20.100.206.196:36935] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "aeFxgMhTVuRPkua22vTLcQAAABY"]
[Fri Apr 17 07:32:17.793699 2026] [:error] [pid 9151:tid 9166] [client 20.100.206.196:30226] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "aeFxgchTVuRPkua22vTLcwAAAAU"]
[Fri Apr 17 07:32:20.480646 2026] [:error] [pid 9152:tid 9198] [client 20.100.206.196:46618] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "aeFxhJJYca8I3TNCwIdI_AAAAEg"]
[Fri Apr 17 07:32:22.806360 2026] [:error] [pid 9152:tid 9208] [client 20.100.206.196:35282] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/error_log.php"] [unique_id "aeFxhpJYca8I3TNCwIdJAwAAAFI"]
[Fri Apr 17 07:32:25.718412 2026] [:error] [pid 34273:tid 34291] [client 20.100.206.196:26456] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/error_log.php"] [unique_id "aeFxiWuQDW686mK3dgEbywAAAZA"]
[Fri Apr 17 07:32:29.447761 2026] [:error] [pid 9153:tid 9232] [client 20.100.206.196:40132] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/error_log.php"] [unique_id "aeFxjeMHGxkTZX3c45df6AAAAI4"]
[Fri Apr 17 07:32:32.709730 2026] [:error] [pid 9153:tid 9223] [client 20.100.206.196:40137] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/error_log.php"] [unique_id "aeFxkOMHGxkTZX3c45df6QAAAIU"]
[Fri Apr 17 07:32:35.055917 2026] [:error] [pid 34273:tid 34287] [client 20.100.206.196:56774] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFxk2uQDW686mK3dgEb1wAAAYw"]
[Fri Apr 17 07:32:35.919319 2026] [:error] [pid 9152:tid 9206] [client 20.100.206.196:26453] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFxk5JYca8I3TNCwIdJCgAAAFA"]
[Fri Apr 17 07:32:38.674228 2026] [:error] [pid 34273:tid 34293] [client 20.100.206.196:56817] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFxlmuQDW686mK3dgEb2QAAAZI"]
[Fri Apr 17 07:32:40.992902 2026] [:error] [pid 51878:tid 51902] [client 20.100.206.196:56793] [client 20.100.206.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFxmEnQhUtMbw9EsgbPgAAAARY"]
[Fri Apr 17 07:33:13.447286 2026] [proxy_fcgi:error] [pid 34273:tid 34277] [client 20.100.206.196:36959] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:38:13.463467 2026] [:error] [pid 34273:tid 34297] [client 172.213.152.251:12461] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flox.php"] [unique_id "aeFy5WuQDW686mK3dgEe2gAAAZY"]
[Fri Apr 17 07:38:15.269726 2026] [:error] [pid 51878:tid 51896] [client 172.213.152.251:12411] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flox.php"] [unique_id "aeFy50nQhUtMbw9EsgbQrwAAARA"]
[Fri Apr 17 07:38:16.268850 2026] [:error] [pid 25010:tid 25033] [client 172.213.152.251:1296] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flox.php"] [unique_id "aeFy6I-7kkf42RarqQ3s6AAAAVQ"]
[Fri Apr 17 07:38:16.881516 2026] [:error] [pid 9152:tid 9194] [client 172.213.152.251:62470] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/flox.php"] [unique_id "aeFy6JJYca8I3TNCwIdLCAAAAEQ"]
[Fri Apr 17 07:38:17.478206 2026] [:error] [pid 9153:tid 9224] [client 172.213.152.251:12321] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mff.php"] [unique_id "aeFy6eMHGxkTZX3c45dhgAAAAIY"]
[Fri Apr 17 07:38:17.987050 2026] [:error] [pid 25010:tid 25022] [client 172.213.152.251:12314] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mff.php"] [unique_id "aeFy6Y-7kkf42RarqQ3s6gAAAUk"]
[Fri Apr 17 07:38:18.586564 2026] [:error] [pid 34273:tid 34286] [client 172.213.152.251:17757] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mff.php"] [unique_id "aeFy6muQDW686mK3dgEe6gAAAYs"]
[Fri Apr 17 07:38:19.262532 2026] [:error] [pid 34273:tid 34297] [client 172.213.152.251:62286] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mff.php"] [unique_id "aeFy62uQDW686mK3dgEfCwAAAZY"]
[Fri Apr 17 07:38:19.891320 2026] [:error] [pid 25010:tid 25021] [client 172.213.152.251:12356] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aeFy64-7kkf42RarqQ3s9QAAAUg"]
[Fri Apr 17 07:38:20.769011 2026] [:error] [pid 34273:tid 34284] [client 172.213.152.251:12362] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aeFy7GuQDW686mK3dgEfGAAAAYk"]
[Fri Apr 17 07:38:21.475645 2026] [:error] [pid 9263:tid 9285] [client 172.213.152.251:17783] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aeFy7RP68VyHNvj1e55FkQAAANQ"]
[Fri Apr 17 07:38:22.647792 2026] [:error] [pid 34273:tid 34287] [client 172.213.152.251:54057] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aq.php"] [unique_id "aeFy7muQDW686mK3dgEfHgAAAYw"]
[Fri Apr 17 07:38:25.419550 2026] [:error] [pid 9151:tid 9173] [client 172.213.152.251:1670] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanger2.php"] [unique_id "aeFy8chTVuRPkua22vTMagAAAAw"]
[Fri Apr 17 07:38:26.889914 2026] [:error] [pid 25010:tid 25018] [client 172.213.152.251:62503] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanger2.php"] [unique_id "aeFy8o-7kkf42RarqQ3s-QAAAUU"]
[Fri Apr 17 07:38:27.649634 2026] [:error] [pid 51878:tid 51894] [client 172.213.152.251:21898] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanger2.php"] [unique_id "aeFy80nQhUtMbw9EsgbQuAAAAQ4"]
[Fri Apr 17 07:38:28.212207 2026] [:error] [pid 25010:tid 25034] [client 172.213.152.251:12340] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filemanger2.php"] [unique_id "aeFy9I-7kkf42RarqQ3s_AAAAVU"]
[Fri Apr 17 07:38:29.008530 2026] [:error] [pid 9152:tid 9194] [client 172.213.152.251:21925] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeFy9ZJYca8I3TNCwIdLFgAAAEQ"]
[Fri Apr 17 07:38:29.648203 2026] [:error] [pid 9152:tid 9199] [client 172.213.152.251:62292] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeFy9ZJYca8I3TNCwIdLGQAAAEk"]
[Fri Apr 17 07:38:30.187608 2026] [:error] [pid 9153:tid 9242] [client 172.213.152.251:21942] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeFy9uMHGxkTZX3c45dhlgAAAJg"]
[Fri Apr 17 07:38:30.944884 2026] [:error] [pid 51878:tid 51900] [client 172.213.152.251:1714] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeFy9knQhUtMbw9EsgbQvAAAARQ"]
[Fri Apr 17 07:38:31.667074 2026] [:error] [pid 9153:tid 9237] [client 172.213.152.251:28131] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-vn1.php"] [unique_id "aeFy9-MHGxkTZX3c45dhlwAAAJM"]
[Fri Apr 17 07:38:32.198039 2026] [:error] [pid 9153:tid 9225] [client 172.213.152.251:28114] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-vn1.php"] [unique_id "aeFy-OMHGxkTZX3c45dhmQAAAIc"]
[Fri Apr 17 07:38:32.777076 2026] [:error] [pid 9151:tid 9185] [client 172.213.152.251:62303] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-vn1.php"] [unique_id "aeFy-MhTVuRPkua22vTMdAAAABg"]
[Fri Apr 17 07:38:33.336347 2026] [:error] [pid 9153:tid 9219] [client 172.213.152.251:17688] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-vn1.php"] [unique_id "aeFy-eMHGxkTZX3c45dhmwAAAIE"]
[Fri Apr 17 07:38:33.864323 2026] [:error] [pid 9151:tid 9175] [client 172.213.152.251:20025] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "aeFy-chTVuRPkua22vTMdgAAAA4"]
[Fri Apr 17 07:38:34.781799 2026] [:error] [pid 34273:tid 34298] [client 172.213.152.251:34449] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "aeFy-muQDW686mK3dgEfMgAAAZc"]
[Fri Apr 17 07:38:35.291055 2026] [:error] [pid 34273:tid 34278] [client 172.213.152.251:34468] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "aeFy-2uQDW686mK3dgEfNQAAAYM"]
[Fri Apr 17 07:38:36.619024 2026] [:error] [pid 34273:tid 34289] [client 172.213.152.251:34476] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "aeFy_GuQDW686mK3dgEfPwAAAY4"]
[Fri Apr 17 07:38:37.250653 2026] [:error] [pid 9152:tid 9208] [client 172.213.152.251:27774] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "aeFy_ZJYca8I3TNCwIdLGgAAAFI"]
[Fri Apr 17 07:38:37.772969 2026] [:error] [pid 34273:tid 34281] [client 172.213.152.251:61335] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "aeFy_WuQDW686mK3dgEfQQAAAYY"]
[Fri Apr 17 07:38:38.286285 2026] [:error] [pid 34273:tid 34283] [client 172.213.152.251:18246] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "aeFy_muQDW686mK3dgEfQwAAAYg"]
[Fri Apr 17 07:38:38.781026 2026] [:error] [pid 34273:tid 34288] [client 172.213.152.251:1124] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "aeFy_muQDW686mK3dgEfRQAAAY0"]
[Fri Apr 17 07:38:39.462994 2026] [:error] [pid 34273:tid 34275] [client 172.213.152.251:13124] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nwflm.php"] [unique_id "aeFy_2uQDW686mK3dgEfRgAAAYA"]
[Fri Apr 17 07:38:39.984026 2026] [:error] [pid 9151:tid 9173] [client 172.213.152.251:1097] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nwflm.php"] [unique_id "aeFy_8hTVuRPkua22vTMegAAAAw"]
[Fri Apr 17 07:38:40.464366 2026] [:error] [pid 9263:tid 9284] [client 172.213.152.251:18722] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nwflm.php"] [unique_id "aeFzABP68VyHNvj1e55FnQAAANM"]
[Fri Apr 17 07:38:41.371476 2026] [:error] [pid 34273:tid 34284] [client 172.213.152.251:62563] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nwflm.php"] [unique_id "aeFzAWuQDW686mK3dgEfSgAAAYk"]
[Fri Apr 17 07:38:41.980901 2026] [:error] [pid 25010:tid 25017] [client 172.213.152.251:13120] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeFzAY-7kkf42RarqQ3tAwAAAUQ"]
[Fri Apr 17 07:38:42.666460 2026] [:error] [pid 9263:tid 9274] [client 172.213.152.251:18734] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeFzAhP68VyHNvj1e55FogAAAMk"]
[Fri Apr 17 07:38:43.197188 2026] [:error] [pid 25010:tid 25013] [client 172.213.152.251:30090] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeFzA4-7kkf42RarqQ3tBgAAAUA"]
[Fri Apr 17 07:38:43.748716 2026] [:error] [pid 34273:tid 34279] [client 172.213.152.251:18720] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aeFzA2uQDW686mK3dgEfTgAAAYQ"]
[Fri Apr 17 07:38:44.291016 2026] [:error] [pid 9153:tid 9233] [client 172.213.152.251:30085] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aeFzBOMHGxkTZX3c45dhpgAAAI8"]
[Fri Apr 17 07:38:44.975312 2026] [:error] [pid 25010:tid 25035] [client 172.213.152.251:61327] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aeFzBI-7kkf42RarqQ3tCgAAAVY"]
[Fri Apr 17 07:38:45.529511 2026] [:error] [pid 9151:tid 9170] [client 172.213.152.251:61370] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aeFzBchTVuRPkua22vTMgQAAAAk"]
[Fri Apr 17 07:38:46.054627 2026] [:error] [pid 9151:tid 9185] [client 172.213.152.251:23436] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aeFzBshTVuRPkua22vTMgwAAABg"]
[Fri Apr 17 07:38:50.354946 2026] [:error] [pid 34273:tid 34278] [client 172.213.152.251:61352] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeFzCmuQDW686mK3dgEfWAAAAYM"]
[Fri Apr 17 07:38:51.070317 2026] [:error] [pid 9151:tid 9178] [client 172.213.152.251:62470] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeFzC8hTVuRPkua22vTMhwAAABE"]
[Fri Apr 17 07:38:51.560948 2026] [:error] [pid 34273:tid 34284] [client 172.213.152.251:1967] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeFzC2uQDW686mK3dgEfWwAAAYk"]
[Fri Apr 17 07:38:52.134991 2026] [:error] [pid 25010:tid 25016] [client 172.213.152.251:62535] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeFzDI-7kkf42RarqQ3tCwAAAUM"]
[Fri Apr 17 07:38:52.657563 2026] [:error] [pid 34273:tid 34279] [client 172.213.152.251:1903] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "aeFzDGuQDW686mK3dgEfXAAAAYQ"]
[Fri Apr 17 07:38:53.414730 2026] [:error] [pid 25010:tid 25024] [client 172.213.152.251:13729] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "aeFzDY-7kkf42RarqQ3tDAAAAUs"]
[Fri Apr 17 07:38:53.947919 2026] [:error] [pid 25010:tid 25018] [client 172.213.152.251:61375] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "aeFzDY-7kkf42RarqQ3tDgAAAUU"]
[Fri Apr 17 07:38:54.432277 2026] [:error] [pid 25010:tid 25029] [client 172.213.152.251:15833] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "aeFzDo-7kkf42RarqQ3tDwAAAVA"]
[Fri Apr 17 07:38:54.997848 2026] [:error] [pid 9152:tid 9212] [client 172.213.152.251:12901] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeFzDpJYca8I3TNCwIdLLAAAAFY"]
[Fri Apr 17 07:38:55.466047 2026] [:error] [pid 9152:tid 9199] [client 172.213.152.251:1788] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeFzD5JYca8I3TNCwIdLLQAAAEk"]
[Fri Apr 17 07:38:55.983019 2026] [:error] [pid 9152:tid 9208] [client 172.213.152.251:24917] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeFzD5JYca8I3TNCwIdLLgAAAFI"]
[Fri Apr 17 07:38:56.862875 2026] [:error] [pid 9152:tid 9191] [client 172.213.152.251:1871] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeFzEJJYca8I3TNCwIdLMAAAAEE"]
[Fri Apr 17 07:38:57.430831 2026] [:error] [pid 25010:tid 25037] [client 172.213.152.251:19525] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "aeFzEY-7kkf42RarqQ3tEgAAAVg"]
[Fri Apr 17 07:38:57.910664 2026] [:error] [pid 51878:tid 51898] [client 172.213.152.251:1732] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "aeFzEUnQhUtMbw9EsgbQ1QAAARI"]
[Fri Apr 17 07:38:58.405533 2026] [:error] [pid 9263:tid 9284] [client 172.213.152.251:13738] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "aeFzEhP68VyHNvj1e55FrwAAANM"]
[Fri Apr 17 07:38:58.942808 2026] [:error] [pid 51878:tid 51896] [client 172.213.152.251:15835] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "aeFzEknQhUtMbw9EsgbQ1gAAARA"]
[Fri Apr 17 07:38:59.448225 2026] [:error] [pid 34273:tid 34288] [client 172.213.152.251:15844] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/water.php"] [unique_id "aeFzE2uQDW686mK3dgEfZQAAAY0"]
[Fri Apr 17 07:39:00.215844 2026] [:error] [pid 9152:tid 9203] [client 172.213.152.251:25625] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/water.php"] [unique_id "aeFzFJJYca8I3TNCwIdLNwAAAE0"]
[Fri Apr 17 07:39:00.923462 2026] [:error] [pid 9152:tid 9192] [client 172.213.152.251:16855] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/water.php"] [unique_id "aeFzFJJYca8I3TNCwIdLOQAAAEI"]
[Fri Apr 17 07:39:01.424029 2026] [:error] [pid 9153:tid 9236] [client 172.213.152.251:23724] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/water.php"] [unique_id "aeFzFeMHGxkTZX3c45dhsQAAAJI"]
[Fri Apr 17 07:39:02.115456 2026] [:error] [pid 25010:tid 25025] [client 172.213.152.251:62538] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "aeFzFo-7kkf42RarqQ3tFwAAAUw"]
[Fri Apr 17 07:39:02.641393 2026] [:error] [pid 34273:tid 34293] [client 172.213.152.251:21229] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "aeFzFmuQDW686mK3dgEfcwAAAZI"]
[Fri Apr 17 07:39:03.148492 2026] [:error] [pid 34273:tid 34298] [client 172.213.152.251:53956] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "aeFzF2uQDW686mK3dgEfdgAAAZc"]
[Fri Apr 17 07:39:03.661168 2026] [:error] [pid 9152:tid 9198] [client 172.213.152.251:13732] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "aeFzF5JYca8I3TNCwIdLOwAAAEg"]
[Fri Apr 17 07:39:04.149513 2026] [:error] [pid 9152:tid 9196] [client 172.213.152.251:1859] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aeFzGJJYca8I3TNCwIdLPQAAAEY"]
[Fri Apr 17 07:39:04.828302 2026] [:error] [pid 34273:tid 34278] [client 172.213.152.251:21194] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aeFzGGuQDW686mK3dgEfdwAAAYM"]
[Fri Apr 17 07:39:05.532189 2026] [:error] [pid 51878:tid 51891] [client 172.213.152.251:1936] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aeFzGUnQhUtMbw9EsgbQ3gAAAQs"]
[Fri Apr 17 07:39:06.005769 2026] [:error] [pid 9153:tid 9218] [client 172.213.152.251:19566] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "aeFzGuMHGxkTZX3c45dhtQAAAIA"]
[Fri Apr 17 07:39:06.725732 2026] [:error] [pid 9152:tid 9191] [client 172.213.152.251:22295] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "aeFzGpJYca8I3TNCwIdLQAAAAEE"]
[Fri Apr 17 07:39:07.239628 2026] [:error] [pid 51878:tid 51900] [client 172.213.152.251:14176] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "aeFzG0nQhUtMbw9EsgbQ4gAAARQ"]
[Fri Apr 17 07:39:07.875346 2026] [:error] [pid 9152:tid 9211] [client 172.213.152.251:1928] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "aeFzG5JYca8I3TNCwIdLRAAAAFU"]
[Fri Apr 17 07:39:08.443596 2026] [:error] [pid 34273:tid 34285] [client 172.213.152.251:23741] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "aeFzHGuQDW686mK3dgEfgAAAAYo"]
[Fri Apr 17 07:39:08.979733 2026] [:error] [pid 9152:tid 9210] [client 172.213.152.251:18695] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeFzHJJYca8I3TNCwIdLRQAAAFQ"]
[Fri Apr 17 07:39:09.911391 2026] [:error] [pid 34273:tid 34283] [client 172.213.152.251:22304] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeFzHWuQDW686mK3dgEfgwAAAYg"]
[Fri Apr 17 07:39:10.471834 2026] [:error] [pid 34273:tid 34288] [client 172.213.152.251:1776] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeFzHmuQDW686mK3dgEfhgAAAY0"]
[Fri Apr 17 07:39:31.614278 2026] [proxy_fcgi:error] [pid 34273:tid 34288] [client 172.213.152.251:21246] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:39:48.302253 2026] [proxy_fcgi:error] [pid 9152:tid 9209] [client 172.213.152.251:16854] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:40:02.446788 2026] [proxy_fcgi:error] [pid 9152:tid 9209] [client 172.213.152.251:19558] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:40:03.429902 2026] [proxy_fcgi:error] [pid 9153:tid 9220] [client 172.213.152.251:62318] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:40:08.750849 2026] [:error] [pid 9153:tid 9221] [client 172.213.152.251:54050] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aeFzWOMHGxkTZX3c45diBgAAAIM"]
[Fri Apr 17 07:40:09.412764 2026] [:error] [pid 25010:tid 25023] [client 172.213.152.251:15321] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aeFzWY-7kkf42RarqQ3tOQAAAUo"]
[Fri Apr 17 07:40:10.145160 2026] [:error] [pid 51878:tid 51886] [client 172.213.152.251:17228] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aeFzWknQhUtMbw9EsgbREAAAAQY"]
[Fri Apr 17 07:40:10.878056 2026] [:error] [pid 9152:tid 9197] [client 172.213.152.251:17152] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aeFzWpJYca8I3TNCwIdLmgAAAEc"]
[Fri Apr 17 07:40:11.598752 2026] [:error] [pid 9152:tid 9202] [client 172.213.152.251:24086] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "aeFzW5JYca8I3TNCwIdLmwAAAEw"]
[Fri Apr 17 07:40:12.139041 2026] [:error] [pid 25010:tid 25018] [client 172.213.152.251:16023] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "aeFzXI-7kkf42RarqQ3tOwAAAUU"]
[Fri Apr 17 07:40:13.249296 2026] [:error] [pid 51878:tid 51897] [client 172.213.152.251:19776] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "aeFzXUnQhUtMbw9EsgbREgAAARE"]
[Fri Apr 17 07:40:14.360231 2026] [:error] [pid 25010:tid 25032] [client 172.213.152.251:12752] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "aeFzXo-7kkf42RarqQ3tPAAAAVM"]
[Fri Apr 17 07:40:14.951159 2026] [:error] [pid 9151:tid 9177] [client 172.213.152.251:15494] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.mopj.php"] [unique_id "aeFzXshTVuRPkua22vTMqQAAABA"]
[Fri Apr 17 07:40:15.527070 2026] [:error] [pid 9153:tid 9226] [client 172.213.152.251:12751] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.mopj.php"] [unique_id "aeFzX-MHGxkTZX3c45diDQAAAIg"]
[Fri Apr 17 07:40:17.137467 2026] [:error] [pid 9151:tid 9184] [client 172.213.152.251:2006] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.mopj.php"] [unique_id "aeFzYchTVuRPkua22vTMqwAAABc"]
[Fri Apr 17 07:40:18.074293 2026] [:error] [pid 9263:tid 9268] [client 172.213.152.251:25341] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.mopj.php"] [unique_id "aeFzYhP68VyHNvj1e55FygAAAMM"]
[Fri Apr 17 07:40:18.646097 2026] [:error] [pid 9153:tid 9240] [client 172.213.152.251:27100] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeFzYuMHGxkTZX3c45diEQAAAJY"]
[Fri Apr 17 07:40:19.258544 2026] [:error] [pid 51878:tid 51894] [client 172.213.152.251:24491] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeFzY0nQhUtMbw9EsgbRFAAAAQ4"]
[Fri Apr 17 07:40:20.544720 2026] [:error] [pid 34273:tid 34275] [client 172.213.152.251:20328] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeFzZGuQDW686mK3dgEgoQAAAYA"]
[Fri Apr 17 07:40:21.860170 2026] [:error] [pid 9153:tid 9222] [client 172.213.152.251:30190] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeFzZeMHGxkTZX3c45diFAAAAIQ"]
[Fri Apr 17 07:40:22.545166 2026] [:error] [pid 9153:tid 9228] [client 172.213.152.251:62353] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nano.php"] [unique_id "aeFzZuMHGxkTZX3c45diFQAAAIo"]
[Fri Apr 17 07:40:23.285973 2026] [:error] [pid 9151:tid 9171] [client 172.213.152.251:23094] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nano.php"] [unique_id "aeFzZ8hTVuRPkua22vTM0QAAAAo"]
[Fri Apr 17 07:40:23.991732 2026] [:error] [pid 34273:tid 34288] [client 172.213.152.251:13761] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nano.php"] [unique_id "aeFzZ2uQDW686mK3dgEgpQAAAY0"]
[Fri Apr 17 07:40:24.552279 2026] [:error] [pid 9153:tid 9241] [client 172.213.152.251:21131] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nano.php"] [unique_id "aeFzaOMHGxkTZX3c45diFwAAAJc"]
[Fri Apr 17 07:40:25.390304 2026] [:error] [pid 9151:tid 9185] [client 172.213.152.251:21139] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35_S.php"] [unique_id "aeFzachTVuRPkua22vTM4QAAABg"]
[Fri Apr 17 07:40:25.931622 2026] [:error] [pid 9153:tid 9234] [client 172.213.152.251:34521] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35_S.php"] [unique_id "aeFzaeMHGxkTZX3c45diHQAAAJA"]
[Fri Apr 17 07:40:26.531434 2026] [:error] [pid 9153:tid 9230] [client 172.213.152.251:18468] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35_S.php"] [unique_id "aeFzauMHGxkTZX3c45diHgAAAIw"]
[Fri Apr 17 07:40:27.271426 2026] [:error] [pid 25010:tid 25017] [client 172.213.152.251:14998] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35_S.php"] [unique_id "aeFza4-7kkf42RarqQ3tQwAAAUQ"]
[Fri Apr 17 07:40:27.945248 2026] [:error] [pid 34273:tid 34285] [client 172.213.152.251:15008] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "aeFza2uQDW686mK3dgEgqAAAAYo"]
[Fri Apr 17 07:40:28.556093 2026] [:error] [pid 34273:tid 34294] [client 172.213.152.251:34554] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "aeFzbGuQDW686mK3dgEgqQAAAZM"]
[Fri Apr 17 07:40:29.174936 2026] [:error] [pid 9153:tid 9242] [client 172.213.152.251:22376] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "aeFzbeMHGxkTZX3c45diIQAAAJg"]
[Fri Apr 17 07:40:29.698720 2026] [:error] [pid 9153:tid 9220] [client 172.213.152.251:13891] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "aeFzbeMHGxkTZX3c45diIwAAAII"]
[Fri Apr 17 07:40:30.335373 2026] [:error] [pid 9152:tid 9198] [client 172.213.152.251:12718] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/111.php"] [unique_id "aeFzbpJYca8I3TNCwIdLpwAAAEg"]
[Fri Apr 17 07:40:30.970153 2026] [:error] [pid 9153:tid 9239] [client 172.213.152.251:30752] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/111.php"] [unique_id "aeFzbuMHGxkTZX3c45diJQAAAJU"]
[Fri Apr 17 07:40:31.575260 2026] [:error] [pid 9153:tid 9228] [client 172.213.152.251:33899] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/111.php"] [unique_id "aeFzb-MHGxkTZX3c45diJgAAAIo"]
[Fri Apr 17 07:40:32.628069 2026] [:error] [pid 9263:tid 9270] [client 172.213.152.251:34513] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/111.php"] [unique_id "aeFzcBP68VyHNvj1e55FzQAAAMU"]
[Fri Apr 17 07:40:33.417048 2026] [:error] [pid 34273:tid 34280] [client 172.213.152.251:62196] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp1.php"] [unique_id "aeFzcWuQDW686mK3dgEgrgAAAYU"]
[Fri Apr 17 07:40:34.654975 2026] [:error] [pid 34273:tid 34279] [client 172.213.152.251:23079] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp1.php"] [unique_id "aeFzcmuQDW686mK3dgEgsQAAAYQ"]
[Fri Apr 17 07:40:35.916140 2026] [:error] [pid 34273:tid 34275] [client 172.213.152.251:17176] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp1.php"] [unique_id "aeFzc2uQDW686mK3dgEgtAAAAYA"]
[Fri Apr 17 07:40:36.681088 2026] [:error] [pid 9152:tid 9193] [client 172.213.152.251:23082] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp1.php"] [unique_id "aeFzdJJYca8I3TNCwIdLswAAAEM"]
[Fri Apr 17 07:40:37.509621 2026] [:error] [pid 9153:tid 9231] [client 172.213.152.251:33905] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "aeFzdeMHGxkTZX3c45diLAAAAI0"]
[Fri Apr 17 07:40:38.426668 2026] [:error] [pid 34273:tid 34288] [client 172.213.152.251:62188] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "aeFzdmuQDW686mK3dgEgtwAAAY0"]
[Fri Apr 17 07:40:39.299540 2026] [:error] [pid 9152:tid 9196] [client 172.213.152.251:1206] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "aeFzd5JYca8I3TNCwIdLtwAAAEY"]
[Fri Apr 17 07:40:39.870522 2026] [:error] [pid 51878:tid 51892] [client 172.213.152.251:33912] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "aeFzd0nQhUtMbw9EsgbRGAAAAQw"]
[Fri Apr 17 07:40:40.624270 2026] [:error] [pid 34273:tid 34294] [client 172.213.152.251:1217] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeFzeGuQDW686mK3dgEgvAAAAZM"]
[Fri Apr 17 07:40:41.593829 2026] [:error] [pid 34273:tid 34284] [client 172.213.152.251:14516] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeFzeWuQDW686mK3dgEgvQAAAYk"]
[Fri Apr 17 07:40:42.530974 2026] [:error] [pid 9152:tid 9206] [client 172.213.152.251:34817] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeFzepJYca8I3TNCwIdLwQAAAFA"]
[Fri Apr 17 07:40:43.935901 2026] [:error] [pid 51878:tid 51904] [client 172.213.152.251:14266] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeFze0nQhUtMbw9EsgbRHQAAARg"]
[Fri Apr 17 07:40:45.006140 2026] [:error] [pid 34273:tid 34293] [client 172.213.152.251:62413] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aeFzfWuQDW686mK3dgEgwwAAAZI"]
[Fri Apr 17 07:40:46.190560 2026] [:error] [pid 25010:tid 25035] [client 172.213.152.251:25226] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aeFzfo-7kkf42RarqQ3tSAAAAVY"]
[Fri Apr 17 07:40:46.978819 2026] [:error] [pid 9152:tid 9199] [client 172.213.152.251:25273] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aeFzfpJYca8I3TNCwIdLygAAAEk"]
[Fri Apr 17 07:40:47.701134 2026] [:error] [pid 9263:tid 9285] [client 172.213.152.251:17194] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aeFzfxP68VyHNvj1e55FzgAAANQ"]
[Fri Apr 17 07:40:48.317600 2026] [:error] [pid 9152:tid 9206] [client 172.213.152.251:14291] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "aeFzgJJYca8I3TNCwIdL0AAAAFA"]
[Fri Apr 17 07:40:49.075460 2026] [:error] [pid 9153:tid 9220] [client 172.213.152.251:13990] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "aeFzgeMHGxkTZX3c45diMQAAAII"]
[Fri Apr 17 07:40:49.654545 2026] [:error] [pid 25010:tid 25029] [client 172.213.152.251:30770] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "aeFzgY-7kkf42RarqQ3tTgAAAVA"]
[Fri Apr 17 07:40:52.026199 2026] [:error] [pid 25010:tid 25022] [client 172.213.152.251:62790] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "aeFzhI-7kkf42RarqQ3tUAAAAUk"]
[Fri Apr 17 07:43:48.405276 2026] [proxy_fcgi:error] [pid 34273:tid 34282] [client 172.213.152.251:1860] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:43:54.028372 2026] [proxy_fcgi:error] [pid 34273:tid 34288] [client 172.213.152.251:23694] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:44:08.537484 2026] [proxy_fcgi:error] [pid 25010:tid 25013] [client 172.213.152.251:22289] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:44:14.357811 2026] [:error] [pid 9153:tid 9235] [client 172.213.152.251:16860] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeF0TuMHGxkTZX3c45djHgAAAJE"]
[Fri Apr 17 07:44:15.082456 2026] [:error] [pid 51878:tid 51904] [client 172.213.152.251:14818] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeF0T0nQhUtMbw9EsgbRmgAAARg"]
[Fri Apr 17 07:44:16.039762 2026] [:error] [pid 25010:tid 25030] [client 172.213.152.251:15297] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeF0UI-7kkf42RarqQ3t2QAAAVE"]
[Fri Apr 17 07:44:17.900736 2026] [:error] [pid 9151:tid 9171] [client 172.213.152.251:16546] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeF0UchTVuRPkua22vTNfAAAAAo"]
[Fri Apr 17 07:44:19.110731 2026] [:error] [pid 9152:tid 9190] [client 172.213.152.251:14829] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeF0U5JYca8I3TNCwIdNBwAAAEA"]
[Fri Apr 17 07:44:19.712027 2026] [:error] [pid 51878:tid 51880] [client 172.213.152.251:54048] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeF0U0nQhUtMbw9EsgbRpQAAAQA"]
[Fri Apr 17 07:44:20.187931 2026] [:error] [pid 9153:tid 9227] [client 172.213.152.251:16548] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeF0VOMHGxkTZX3c45djLwAAAIk"]
[Fri Apr 17 07:44:20.899110 2026] [:error] [pid 9153:tid 9225] [client 172.213.152.251:16539] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeF0VOMHGxkTZX3c45djMQAAAIc"]
[Fri Apr 17 07:44:21.930871 2026] [:error] [pid 9151:tid 9180] [client 172.213.152.251:1622] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeF0VchTVuRPkua22vTNgAAAABM"]
[Fri Apr 17 07:44:22.748657 2026] [:error] [pid 51878:tid 51890] [client 172.213.152.251:1693] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeF0VknQhUtMbw9EsgbRqAAAAQo"]
[Fri Apr 17 07:44:24.030145 2026] [:error] [pid 9151:tid 9181] [client 172.213.152.251:21936] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeF0WMhTVuRPkua22vTNgwAAABQ"]
[Fri Apr 17 07:44:25.068588 2026] [:error] [pid 9152:tid 9208] [client 172.213.152.251:62298] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeF0WZJYca8I3TNCwIdNFwAAAFI"]
[Fri Apr 17 07:44:26.012162 2026] [:error] [pid 9153:tid 9232] [client 172.213.152.251:1304] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aeF0WuMHGxkTZX3c45djOQAAAI4"]
[Fri Apr 17 07:44:26.671506 2026] [:error] [pid 25010:tid 25022] [client 172.213.152.251:1667] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aeF0Wo-7kkf42RarqQ3t2wAAAUk"]
[Fri Apr 17 07:44:27.719599 2026] [:error] [pid 25010:tid 25031] [client 172.213.152.251:16038] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aeF0W4-7kkf42RarqQ3t3gAAAVI"]
[Fri Apr 17 07:44:28.270907 2026] [:error] [pid 34273:tid 34291] [client 172.213.152.251:62504] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "aeF0XGuQDW686mK3dgEilAAAAZA"]
[Fri Apr 17 07:44:28.935115 2026] [:error] [pid 34273:tid 34295] [client 172.213.152.251:13348] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aeF0XGuQDW686mK3dgEimAAAAZQ"]
[Fri Apr 17 07:44:29.843970 2026] [:error] [pid 34273:tid 34297] [client 172.213.152.251:17932] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aeF0XWuQDW686mK3dgEinAAAAZY"]
[Fri Apr 17 07:44:30.387584 2026] [:error] [pid 9152:tid 9213] [client 172.213.152.251:16028] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aeF0XpJYca8I3TNCwIdNHAAAAFc"]
[Fri Apr 17 07:44:31.158023 2026] [:error] [pid 9151:tid 9175] [client 172.213.152.251:12342] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "aeF0X8hTVuRPkua22vTNigAAAA4"]
[Fri Apr 17 07:44:31.708159 2026] [:error] [pid 25010:tid 25015] [client 172.213.152.251:62209] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeF0X4-7kkf42RarqQ3t4wAAAUI"]
[Fri Apr 17 07:44:32.822957 2026] [:error] [pid 25010:tid 25036] [client 172.213.152.251:12334] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeF0YI-7kkf42RarqQ3t5wAAAVc"]
[Fri Apr 17 07:44:33.751572 2026] [:error] [pid 51878:tid 51891] [client 172.213.152.251:21589] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeF0YUnQhUtMbw9EsgbRtQAAAQs"]
[Fri Apr 17 07:44:34.369225 2026] [:error] [pid 9153:tid 9219] [client 172.213.152.251:62488] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeF0YuMHGxkTZX3c45djQQAAAIE"]
[Fri Apr 17 07:44:34.958889 2026] [:error] [pid 9152:tid 9210] [client 172.213.152.251:13237] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aeF0YpJYca8I3TNCwIdNHgAAAFQ"]
[Fri Apr 17 07:44:35.759468 2026] [:error] [pid 9152:tid 9193] [client 172.213.152.251:1680] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aeF0Y5JYca8I3TNCwIdNIwAAAEM"]
[Fri Apr 17 07:44:36.420834 2026] [:error] [pid 34273:tid 34287] [client 172.213.152.251:1685] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aeF0ZGuQDW686mK3dgEitgAAAYw"]
[Fri Apr 17 07:44:37.992654 2026] [:error] [pid 9152:tid 9200] [client 172.213.152.251:1698] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "aeF0ZZJYca8I3TNCwIdNKAAAAEo"]
[Fri Apr 17 07:44:40.273412 2026] [:error] [pid 51878:tid 51898] [client 172.213.152.251:21627] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aeF0aEnQhUtMbw9EsgbRugAAARI"]
[Fri Apr 17 07:44:40.849561 2026] [:error] [pid 25010:tid 25016] [client 172.213.152.251:16033] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aeF0aI-7kkf42RarqQ3t7wAAAUM"]
[Fri Apr 17 07:44:43.418657 2026] [:error] [pid 34273:tid 34291] [client 172.213.152.251:13213] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aeF0a2uQDW686mK3dgEi1wAAAZA"]
[Fri Apr 17 07:44:44.911713 2026] [:error] [pid 9152:tid 9195] [client 172.213.152.251:12847] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aeF0bJJYca8I3TNCwIdNKgAAAEU"]
[Fri Apr 17 07:44:45.904568 2026] [:error] [pid 51878:tid 51897] [client 172.213.152.251:23076] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeF0bUnQhUtMbw9EsgbRvwAAARE"]
[Fri Apr 17 07:44:46.408131 2026] [:error] [pid 25010:tid 25027] [client 172.213.152.251:16053] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeF0bo-7kkf42RarqQ3t8QAAAU4"]
[Fri Apr 17 07:44:47.304478 2026] [:error] [pid 9153:tid 9238] [client 172.213.152.251:23100] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeF0b-MHGxkTZX3c45djTwAAAJQ"]
[Fri Apr 17 07:44:48.696034 2026] [:error] [pid 9152:tid 9204] [client 172.213.152.251:62394] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeF0cJJYca8I3TNCwIdNLgAAAE4"]
[Fri Apr 17 07:44:50.438286 2026] [:error] [pid 25010:tid 25014] [client 172.213.152.251:21620] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeF0co-7kkf42RarqQ3t-AAAAUE"]
[Fri Apr 17 07:44:51.750292 2026] [:error] [pid 34273:tid 34296] [client 172.213.152.251:12811] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeF0c2uQDW686mK3dgEi-wAAAZU"]
[Fri Apr 17 07:44:54.059286 2026] [:error] [pid 34273:tid 34279] [client 172.213.152.251:22339] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeF0dmuQDW686mK3dgEjCAAAAYQ"]
[Fri Apr 17 07:45:02.242841 2026] [:error] [pid 9151:tid 9180] [client 172.213.152.251:12699] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeF0fshTVuRPkua22vTNnwAAABM"]
[Fri Apr 17 07:45:04.379221 2026] [:error] [pid 34273:tid 34281] [client 172.213.152.251:21586] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless4.php"] [unique_id "aeF0gGuQDW686mK3dgEjRQAAAYY"]
[Fri Apr 17 07:45:06.542616 2026] [:error] [pid 9152:tid 9198] [client 172.213.152.251:21947] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless4.php"] [unique_id "aeF0gpJYca8I3TNCwIdNPgAAAEg"]
[Fri Apr 17 07:45:07.789736 2026] [:error] [pid 9263:tid 9286] [client 172.213.152.251:13234] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless4.php"] [unique_id "aeF0gxP68VyHNvj1e55GyAAAANU"]
[Fri Apr 17 07:45:08.519200 2026] [:error] [pid 9151:tid 9177] [client 172.213.152.251:38578] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bless4.php"] [unique_id "aeF0hMhTVuRPkua22vTNpQAAABA"]
[Fri Apr 17 07:45:09.081803 2026] [:error] [pid 25010:tid 25013] [client 172.213.152.251:1688] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeF0hY-7kkf42RarqQ3uDAAAAUA"]
[Fri Apr 17 07:45:10.114567 2026] [:error] [pid 9153:tid 9240] [client 172.213.152.251:21898] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeF0huMHGxkTZX3c45djaQAAAJY"]
[Fri Apr 17 07:45:10.760145 2026] [:error] [pid 9152:tid 9214] [client 172.213.152.251:21934] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeF0hpJYca8I3TNCwIdNRAAAAFg"]
[Fri Apr 17 07:45:45.775282 2026] [proxy_fcgi:error] [pid 34273:tid 34291] [client 172.213.152.251:14104] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:45:59.712975 2026] [autoindex:error] [pid 34273:tid 34279] [client 172.213.152.251:15312] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 17 07:46:02.209085 2026] [proxy_fcgi:error] [pid 25010:tid 25029] [client 172.213.152.251:23156] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:46:07.995847 2026] [proxy_fcgi:error] [pid 34273:tid 34288] [client 172.213.152.251:15312] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:46:16.879692 2026] [:error] [pid 51878:tid 51900] [client 172.213.152.251:13729] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aeF0yEnQhUtMbw9EsgbR9gAAARQ"]
[Fri Apr 17 07:46:17.503398 2026] [:error] [pid 34273:tid 34279] [client 172.213.152.251:17247] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aeF0yWuQDW686mK3dgEkTwAAAYQ"]
[Fri Apr 17 07:46:18.331094 2026] [:error] [pid 9152:tid 9198] [client 172.213.152.251:12411] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aeF0ypJYca8I3TNCwIdNuwAAAEg"]
[Fri Apr 17 07:46:18.981909 2026] [:error] [pid 9152:tid 9204] [client 172.213.152.251:12410] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aeF0ypJYca8I3TNCwIdNwAAAAE4"]
[Fri Apr 17 07:46:19.963546 2026] [:error] [pid 9152:tid 9214] [client 172.213.152.251:19287] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeF0y5JYca8I3TNCwIdNxgAAAFg"]
[Fri Apr 17 07:46:20.617661 2026] [:error] [pid 25010:tid 25033] [client 172.213.152.251:17252] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeF0zI-7kkf42RarqQ3uZQAAAVQ"]
[Fri Apr 17 07:46:21.514435 2026] [:error] [pid 25010:tid 25031] [client 172.213.152.251:22733] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeF0zY-7kkf42RarqQ3uagAAAVI"]
[Fri Apr 17 07:46:22.197742 2026] [:error] [pid 9153:tid 9229] [client 172.213.152.251:16595] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeF0zuMHGxkTZX3c45dj3QAAAIs"]
[Fri Apr 17 07:46:23.227568 2026] [:error] [pid 34273:tid 34283] [client 172.213.152.251:17415] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aeF0z2uQDW686mK3dgEkVQAAAYg"]
[Fri Apr 17 07:46:23.768862 2026] [:error] [pid 9152:tid 9194] [client 172.213.152.251:22747] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aeF0z5JYca8I3TNCwIdNzwAAAEQ"]
[Fri Apr 17 07:46:24.358907 2026] [:error] [pid 34273:tid 34294] [client 172.213.152.251:62535] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aeF00GuQDW686mK3dgEkWAAAAZM"]
[Fri Apr 17 07:46:25.008813 2026] [:error] [pid 34273:tid 34284] [client 172.213.152.251:62550] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aeF00WuQDW686mK3dgEkWgAAAYk"]
[Fri Apr 17 07:46:26.217868 2026] [:error] [pid 25010:tid 25028] [client 172.213.152.251:24449] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeF00o-7kkf42RarqQ3uewAAAU8"]
[Fri Apr 17 07:46:26.862133 2026] [:error] [pid 9151:tid 9171] [client 172.213.152.251:33888] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeF00shTVuRPkua22vTN9wAAAAo"]
[Fri Apr 17 07:46:27.522424 2026] [:error] [pid 25010:tid 25027] [client 172.213.152.251:21947] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeF004-7kkf42RarqQ3ufgAAAU4"]
[Fri Apr 17 07:46:28.794521 2026] [:error] [pid 25010:tid 25026] [client 172.213.152.251:12658] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeF01I-7kkf42RarqQ3ugwAAAU0"]
[Fri Apr 17 07:46:29.330944 2026] [:error] [pid 25010:tid 25024] [client 172.213.152.251:62829] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aeF01Y-7kkf42RarqQ3uiQAAAUs"]
[Fri Apr 17 07:46:30.376061 2026] [:error] [pid 9152:tid 9195] [client 172.213.152.251:12321] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aeF01pJYca8I3TNCwIdN3gAAAEU"]
[Fri Apr 17 07:46:31.177002 2026] [:error] [pid 25010:tid 25028] [client 172.213.152.251:16359] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aeF014-7kkf42RarqQ3ujQAAAU8"]
[Fri Apr 17 07:46:32.108149 2026] [:error] [pid 9152:tid 9201] [client 172.213.152.251:1365] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aeF02JJYca8I3TNCwIdN6gAAAEs"]
[Fri Apr 17 07:46:33.142246 2026] [:error] [pid 9152:tid 9202] [client 172.213.152.251:62785] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aeF02ZJYca8I3TNCwIdN8AAAAEw"]
[Fri Apr 17 07:46:35.242717 2026] [:error] [pid 25010:tid 25023] [client 172.213.152.251:30729] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aeF024-7kkf42RarqQ3ukgAAAUo"]
[Fri Apr 17 07:46:36.315894 2026] [:error] [pid 34273:tid 34290] [client 172.213.152.251:14730] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aeF03GuQDW686mK3dgEkYAAAAY8"]
[Fri Apr 17 07:46:37.890991 2026] [:error] [pid 9152:tid 9194] [client 172.213.152.251:14213] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "aeF03ZJYca8I3TNCwIdOAwAAAEQ"]
[Fri Apr 17 07:46:38.450959 2026] [:error] [pid 9263:tid 9275] [client 172.213.152.251:13678] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aeF03hP68VyHNvj1e55G_AAAAMo"]
[Fri Apr 17 07:46:39.083604 2026] [:error] [pid 9152:tid 9205] [client 172.213.152.251:14783] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aeF035JYca8I3TNCwIdOBwAAAE8"]
[Fri Apr 17 07:46:39.790666 2026] [:error] [pid 9152:tid 9199] [client 172.213.152.251:62819] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aeF035JYca8I3TNCwIdOCwAAAEk"]
[Fri Apr 17 07:46:41.191177 2026] [:error] [pid 9152:tid 9197] [client 172.213.152.251:18973] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aeF04ZJYca8I3TNCwIdOEAAAAEc"]
[Fri Apr 17 07:46:42.163010 2026] [:error] [pid 9152:tid 9194] [client 172.213.152.251:30755] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aeF04pJYca8I3TNCwIdOEwAAAEQ"]
[Fri Apr 17 07:46:44.710083 2026] [:error] [pid 25010:tid 25019] [client 172.213.152.251:20753] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aeF05I-7kkf42RarqQ3umgAAAUY"]
[Fri Apr 17 07:46:47.630994 2026] [:error] [pid 34273:tid 34284] [client 172.213.152.251:28765] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aeF052uQDW686mK3dgEkaQAAAYk"]
[Fri Apr 17 07:46:49.592289 2026] [:error] [pid 9152:tid 9200] [client 172.213.152.251:19498] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-michan.php"] [unique_id "aeF06ZJYca8I3TNCwIdOJgAAAEo"]
[Fri Apr 17 07:46:51.074793 2026] [:error] [pid 9152:tid 9190] [client 172.213.152.251:20790] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeF065JYca8I3TNCwIdOKAAAAEA"]
[Fri Apr 17 07:46:52.655734 2026] [:error] [pid 9153:tid 9237] [client 172.213.152.251:1370] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeF07OMHGxkTZX3c45dj8QAAAJM"]
[Fri Apr 17 07:46:54.632410 2026] [:error] [pid 25010:tid 25029] [client 172.213.152.251:14723] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeF07o-7kkf42RarqQ3upwAAAVA"]
[Fri Apr 17 07:46:55.288700 2026] [:error] [pid 9151:tid 9180] [client 172.213.152.251:59548] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeF078hTVuRPkua22vTOGwAAABM"]
[Fri Apr 17 07:46:55.888741 2026] [:error] [pid 51878:tid 51884] [client 172.213.152.251:1247] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeF070nQhUtMbw9EsgbSHgAAAQQ"]
[Fri Apr 17 07:46:56.517300 2026] [:error] [pid 9151:tid 9181] [client 172.213.152.251:19460] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeF08MhTVuRPkua22vTOHgAAABQ"]
[Fri Apr 17 07:46:57.145340 2026] [:error] [pid 25010:tid 25033] [client 172.213.152.251:62757] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeF08Y-7kkf42RarqQ3urgAAAVQ"]
[Fri Apr 17 07:46:57.693478 2026] [:error] [pid 51878:tid 51899] [client 172.213.152.251:16115] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeF08UnQhUtMbw9EsgbSJAAAARM"]
[Fri Apr 17 07:46:58.413039 2026] [:error] [pid 9152:tid 9212] [client 172.213.152.251:62732] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeF08pJYca8I3TNCwIdONAAAAFY"]
[Fri Apr 17 07:46:59.296403 2026] [:error] [pid 9152:tid 9203] [client 172.213.152.251:62752] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeF085JYca8I3TNCwIdOOwAAAE0"]
[Fri Apr 17 07:47:00.233611 2026] [:error] [pid 9263:tid 9266] [client 172.213.152.251:59562] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeF09BP68VyHNvj1e55HEQAAAME"]
[Fri Apr 17 07:47:00.757068 2026] [:error] [pid 51878:tid 51902] [client 172.213.152.251:1468] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeF09EnQhUtMbw9EsgbSKgAAARY"]
[Fri Apr 17 07:47:01.843371 2026] [:error] [pid 9152:tid 9208] [client 172.213.152.251:19480] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeF09ZJYca8I3TNCwIdOQAAAAFI"]
[Fri Apr 17 07:47:03.559663 2026] [:error] [pid 9152:tid 9210] [client 172.213.152.251:59523] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeF095JYca8I3TNCwIdORAAAAFQ"]
[Fri Apr 17 07:47:04.305968 2026] [:error] [pid 9152:tid 9200] [client 172.213.152.251:17177] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeF0-JJYca8I3TNCwIdOSAAAAEo"]
[Fri Apr 17 07:47:05.033085 2026] [:error] [pid 51878:tid 51880] [client 172.213.152.251:15052] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeF0-UnQhUtMbw9EsgbSKwAAAQA"]
[Fri Apr 17 07:47:05.781863 2026] [:error] [pid 25010:tid 25028] [client 172.213.152.251:1421] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeF0-Y-7kkf42RarqQ3uxAAAAU8"]
[Fri Apr 17 07:47:07.028331 2026] [:error] [pid 9151:tid 9177] [client 172.213.152.251:1231] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeF0-8hTVuRPkua22vTOJAAAABA"]
[Fri Apr 17 07:47:08.300936 2026] [:error] [pid 34273:tid 34285] [client 172.213.152.251:16076] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeF0_GuQDW686mK3dgEkggAAAYo"]
[Fri Apr 17 07:47:09.742802 2026] [:error] [pid 34273:tid 34296] [client 172.213.152.251:12955] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeF0_WuQDW686mK3dgEkhQAAAZU"]
[Fri Apr 17 07:47:10.461205 2026] [:error] [pid 9263:tid 9282] [client 172.213.152.251:1852] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeF0_hP68VyHNvj1e55HGwAAANE"]
[Fri Apr 17 07:47:10.976802 2026] [:error] [pid 9153:tid 9229] [client 172.213.152.251:19037] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeF0_uMHGxkTZX3c45dkBwAAAIs"]
[Fri Apr 17 07:47:11.657765 2026] [:error] [pid 9153:tid 9228] [client 172.213.152.251:17165] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeF0_-MHGxkTZX3c45dkCwAAAIo"]
[Fri Apr 17 07:47:12.307517 2026] [:error] [pid 9153:tid 9236] [client 172.213.152.251:19479] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeF1AOMHGxkTZX3c45dkDgAAAJI"]
[Fri Apr 17 07:47:12.857578 2026] [:error] [pid 51878:tid 51893] [client 172.213.152.251:1265] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeF1AEnQhUtMbw9EsgbSNgAAAQ0"]
[Fri Apr 17 07:47:13.722982 2026] [:error] [pid 9152:tid 9211] [client 172.213.152.251:59567] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeF1AZJYca8I3TNCwIdOTQAAAFU"]
[Fri Apr 17 07:47:33.637452 2026] [proxy_fcgi:error] [pid 25010:tid 25014] [client 172.213.152.251:12930] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:47:38.485191 2026] [proxy_fcgi:error] [pid 9152:tid 9194] [client 172.213.152.251:30356] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:47:43.405867 2026] [:error] [pid 34273:tid 34277] [client 172.213.152.251:15101] [client 172.213.152.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeF1H2uQDW686mK3dgEk6wAAAYI"]
[Fri Apr 17 07:47:52.018168 2026] [autoindex:error] [pid 34273:tid 34299] [client 172.213.152.251:15075] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 17 07:47:52.275724 2026] [autoindex:error] [pid 25010:tid 25035] [client 172.213.152.251:30380] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 17 07:47:56.810852 2026] [proxy_fcgi:error] [pid 25010:tid 25020] [client 172.213.152.251:30380] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:48:13.174116 2026] [proxy_fcgi:error] [pid 34273:tid 34281] [client 172.213.152.251:15075] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 07:48:18.560931 2026] [:error] [pid 9152:tid 9206] [client 172.213.152.251:28699] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aeF1QpJYca8I3TNCwIdOvQAAAFA"]
[Fri Apr 17 07:48:20.268777 2026] [:error] [pid 34273:tid 34294] [client 172.213.152.251:15013] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aeF1RGuQDW686mK3dgElbgAAAZM"]
[Fri Apr 17 07:48:21.045546 2026] [:error] [pid 34273:tid 34275] [client 172.213.152.251:13537] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aeF1RWuQDW686mK3dgEldQAAAYA"]
[Fri Apr 17 07:48:21.881370 2026] [:error] [pid 34273:tid 34296] [client 172.213.152.251:30386] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aeF1RWuQDW686mK3dgElgAAAAZU"]
[Fri Apr 17 07:48:23.212019 2026] [:error] [pid 9152:tid 9194] [client 172.213.152.251:17715] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bengi.php"] [unique_id "aeF1R5JYca8I3TNCwIdOxgAAAEQ"]
[Fri Apr 17 07:48:24.984115 2026] [:error] [pid 9153:tid 9234] [client 172.213.152.251:13925] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bengi.php"] [unique_id "aeF1SOMHGxkTZX3c45dkUwAAAJA"]
[Fri Apr 17 07:48:28.384375 2026] [:error] [pid 9153:tid 9229] [client 172.213.152.251:22704] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bengi.php"] [unique_id "aeF1TOMHGxkTZX3c45dkXQAAAIs"]
[Fri Apr 17 07:48:30.476193 2026] [:error] [pid 9153:tid 9223] [client 172.213.152.251:13910] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bengi.php"] [unique_id "aeF1TuMHGxkTZX3c45dkaQAAAIU"]
[Fri Apr 17 07:48:31.956848 2026] [:error] [pid 34273:tid 34296] [client 172.213.152.251:14504] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeF1T2uQDW686mK3dgElvQAAAZU"]
[Fri Apr 17 07:48:33.263753 2026] [:error] [pid 9153:tid 9228] [client 172.213.152.251:30345] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeF1UeMHGxkTZX3c45dkdgAAAIo"]
[Fri Apr 17 07:48:33.809086 2026] [:error] [pid 9153:tid 9222] [client 172.213.152.251:13297] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeF1UeMHGxkTZX3c45dkeQAAAIQ"]
[Fri Apr 17 07:48:34.588307 2026] [:error] [pid 34273:tid 34291] [client 172.213.152.251:22374] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeF1UmuQDW686mK3dgElyAAAAZA"]
[Fri Apr 17 07:48:35.128692 2026] [:error] [pid 34273:tid 34297] [client 172.213.152.251:54269] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aeF1U2uQDW686mK3dgElzgAAAZY"]
[Fri Apr 17 07:48:35.659634 2026] [:error] [pid 9152:tid 9206] [client 172.213.152.251:62407] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aeF1U5JYca8I3TNCwIdOzgAAAFA"]
[Fri Apr 17 07:48:36.467500 2026] [:error] [pid 9263:tid 9272] [client 172.213.152.251:22714] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aeF1VBP68VyHNvj1e55HfgAAAMc"]
[Fri Apr 17 07:48:37.260951 2026] [:error] [pid 9153:tid 9232] [client 172.213.152.251:30365] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aeF1VeMHGxkTZX3c45dkewAAAI4"]
[Fri Apr 17 07:48:37.927791 2026] [:error] [pid 34273:tid 34292] [client 172.213.152.251:17987] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeF1VWuQDW686mK3dgEl2wAAAZE"]
[Fri Apr 17 07:48:38.713696 2026] [:error] [pid 9263:tid 9284] [client 172.213.152.251:13526] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeF1VhP68VyHNvj1e55HgwAAANM"]
[Fri Apr 17 07:48:39.286164 2026] [:error] [pid 9151:tid 9179] [client 172.213.152.251:14979] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeF1V8hTVuRPkua22vTOXAAAABI"]
[Fri Apr 17 07:48:40.143977 2026] [:error] [pid 9151:tid 9169] [client 172.213.152.251:14517] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeF1WMhTVuRPkua22vTOXQAAAAg"]
[Fri Apr 17 07:48:40.664720 2026] [:error] [pid 9263:tid 9279] [client 172.213.152.251:13277] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeF1WBP68VyHNvj1e55HhQAAAM4"]
[Fri Apr 17 07:48:42.220980 2026] [:error] [pid 9153:tid 9242] [client 172.213.152.251:22373] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeF1WuMHGxkTZX3c45dkfQAAAJg"]
[Fri Apr 17 07:48:43.476932 2026] [:error] [pid 34273:tid 34276] [client 172.213.152.251:13920] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeF1W2uQDW686mK3dgEl7QAAAYE"]
[Fri Apr 17 07:48:44.034088 2026] [:error] [pid 9153:tid 9235] [client 172.213.152.251:30361] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeF1XOMHGxkTZX3c45dkfgAAAJE"]
[Fri Apr 17 07:48:44.974346 2026] [:error] [pid 34273:tid 34282] [client 172.213.152.251:59608] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aeF1XGuQDW686mK3dgEl7gAAAYc"]
[Fri Apr 17 07:48:45.830766 2026] [:error] [pid 25010:tid 25015] [client 172.213.152.251:30379] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aeF1XY-7kkf42RarqQ3vOwAAAUI"]
[Fri Apr 17 07:48:47.226887 2026] [:error] [pid 51878:tid 51888] [client 172.213.152.251:18040] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aeF1X0nQhUtMbw9EsgbSewAAAQg"]
[Fri Apr 17 07:48:48.434996 2026] [:error] [pid 51878:tid 51892] [client 172.213.152.251:13943] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aeF1YEnQhUtMbw9EsgbSfAAAAQw"]
[Fri Apr 17 07:48:49.218298 2026] [:error] [pid 9153:tid 9241] [client 172.213.152.251:13252] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aeF1YeMHGxkTZX3c45dkggAAAJc"]
[Fri Apr 17 07:48:50.783603 2026] [:error] [pid 9152:tid 9207] [client 172.213.152.251:19992] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aeF1YpJYca8I3TNCwIdO2AAAAFE"]
[Fri Apr 17 07:48:51.448293 2026] [:error] [pid 9153:tid 9236] [client 172.213.152.251:59591] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aeF1Y-MHGxkTZX3c45dkgwAAAJI"]
[Fri Apr 17 07:48:52.187655 2026] [:error] [pid 51878:tid 51898] [client 172.213.152.251:30359] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aeF1ZEnQhUtMbw9EsgbSgQAAARI"]
[Fri Apr 17 07:48:52.932045 2026] [:error] [pid 25010:tid 25032] [client 172.213.152.251:22670] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aeF1ZI-7kkf42RarqQ3vPwAAAVM"]
[Fri Apr 17 07:48:54.043497 2026] [:error] [pid 9263:tid 9282] [client 172.213.152.251:30360] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aeF1ZhP68VyHNvj1e55HiAAAANE"]
[Fri Apr 17 07:48:54.722630 2026] [:error] [pid 51878:tid 51880] [client 172.213.152.251:13944] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aeF1ZknQhUtMbw9EsgbShAAAAQA"]
[Fri Apr 17 07:48:55.295887 2026] [:error] [pid 51878:tid 51897] [client 172.213.152.251:17718] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aeF1Z0nQhUtMbw9EsgbShQAAARE"]
[Fri Apr 17 07:48:55.836571 2026] [:error] [pid 9263:tid 9286] [client 172.213.152.251:54215] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeF1ZxP68VyHNvj1e55HiQAAANU"]
[Fri Apr 17 07:48:56.378094 2026] [:error] [pid 9263:tid 9275] [client 172.213.152.251:62363] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeF1aBP68VyHNvj1e55HigAAAMo"]
[Fri Apr 17 07:48:57.075969 2026] [:error] [pid 9153:tid 9218] [client 172.213.152.251:28034] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeF1aeMHGxkTZX3c45dkhgAAAIA"]
[Fri Apr 17 07:48:57.813431 2026] [:error] [pid 25010:tid 25034] [client 172.213.152.251:28043] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeF1aY-7kkf42RarqQ3vRgAAAVU"]
[Fri Apr 17 07:48:58.357743 2026] [:error] [pid 9151:tid 9162] [client 172.213.152.251:22715] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aeF1ashTVuRPkua22vTOaQAAAAE"]
[Fri Apr 17 07:48:58.926767 2026] [:error] [pid 9263:tid 9271] [client 172.213.152.251:59584] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aeF1ahP68VyHNvj1e55HjQAAAMY"]
[Fri Apr 17 07:48:59.518787 2026] [:error] [pid 51878:tid 51901] [client 172.213.152.251:54255] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aeF1a0nQhUtMbw9EsgbShwAAARU"]
[Fri Apr 17 07:49:00.053910 2026] [:error] [pid 9151:tid 9185] [client 172.213.152.251:62459] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aeF1bMhTVuRPkua22vTOawAAABg"]
[Fri Apr 17 07:49:00.962216 2026] [:error] [pid 9151:tid 9173] [client 172.213.152.251:17712] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeF1bMhTVuRPkua22vTObwAAAAw"]
[Fri Apr 17 07:49:01.883698 2026] [:error] [pid 25010:tid 25015] [client 172.213.152.251:22685] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeF1bY-7kkf42RarqQ3vTgAAAUI"]
[Fri Apr 17 07:49:02.620055 2026] [:error] [pid 9151:tid 9169] [client 172.213.152.251:18027] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeF1bshTVuRPkua22vTOcwAAAAg"]
[Fri Apr 17 07:49:03.130858 2026] [:error] [pid 34273:tid 34289] [client 172.213.152.251:20018] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeF1b2uQDW686mK3dgEl8wAAAY4"]
[Fri Apr 17 07:49:04.038060 2026] [:error] [pid 34273:tid 34299] [client 172.213.152.251:59616] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeF1cGuQDW686mK3dgEl9gAAAZg"]
[Fri Apr 17 07:49:04.947608 2026] [:error] [pid 34273:tid 34288] [client 172.213.152.251:13282] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeF1cGuQDW686mK3dgEl-QAAAY0"]
[Fri Apr 17 07:49:05.628754 2026] [:error] [pid 9153:tid 9238] [client 172.213.152.251:54245] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeF1ceMHGxkTZX3c45dkiwAAAJQ"]
[Fri Apr 17 07:49:06.138304 2026] [:error] [pid 9153:tid 9222] [client 172.213.152.251:17727] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeF1cuMHGxkTZX3c45dkjAAAAIQ"]
[Fri Apr 17 07:49:06.759140 2026] [:error] [pid 9263:tid 9274] [client 172.213.152.251:13888] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aeF1chP68VyHNvj1e55HkAAAAMk"]
[Fri Apr 17 07:49:07.487989 2026] [:error] [pid 9263:tid 9273] [client 172.213.152.251:54211] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aeF1cxP68VyHNvj1e55HkgAAAMg"]
[Fri Apr 17 07:49:08.091097 2026] [:error] [pid 9263:tid 9283] [client 172.213.152.251:54223] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aeF1dBP68VyHNvj1e55HkwAAANI"]
[Fri Apr 17 07:49:08.773689 2026] [:error] [pid 9153:tid 9230] [client 172.213.152.251:13923] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class19.php"] [unique_id "aeF1dOMHGxkTZX3c45dkjQAAAIw"]
[Fri Apr 17 07:49:09.916975 2026] [:error] [pid 9153:tid 9223] [client 172.213.152.251:13937] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aeF1deMHGxkTZX3c45dkkQAAAIU"]
[Fri Apr 17 07:49:11.269125 2026] [:error] [pid 34273:tid 34293] [client 172.213.152.251:59598] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aeF1d2uQDW686mK3dgEmBgAAAZI"]
[Fri Apr 17 07:49:12.575272 2026] [:error] [pid 9263:tid 9284] [client 172.213.152.251:34539] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aeF1eBP68VyHNvj1e55HmwAAANM"]
[Fri Apr 17 07:49:13.447455 2026] [:error] [pid 25010:tid 25018] [client 172.213.152.251:20008] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class20.php"] [unique_id "aeF1eY-7kkf42RarqQ3vUQAAAUU"]
[Fri Apr 17 07:49:14.184328 2026] [:error] [pid 34273:tid 34281] [client 172.213.152.251:21518] [client 172.213.152.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeF1emuQDW686mK3dgEmCQAAAYY"]
[Fri Apr 17 07:49:35.853491 2026] [proxy_fcgi:error] [pid 34273:tid 34278] [client 172.213.152.251:62157] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 17 09:48:51.139990 2026] [:error] [pid 34273:tid 34278] [client 162.158.94.93:12146] [client 162.158.94.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "aeGRg2uQDW686mK3dgF4VQAAAYM"]
[Fri Apr 17 11:25:34.429435 2026] [:error] [pid 51878:tid 51900] [client 34.201.105.154:39728] [client 34.201.105.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aeGoLknQhUtMbw9Esgb9FgAAARQ"], referer: https://sucuri.net
[Fri Apr 17 11:25:42.949676 2026] [proxy_fcgi:error] [pid 9153:tid 9220] [client 34.201.105.154:51482] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918', referer: http://www.makifim.com.au/
[Fri Apr 17 14:53:33.006766 2026] [:error] [pid 61523:tid 61557] [client 35.229.72.129:62697] [client 35.229.72.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.72.129, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHY7cOaH-Pgc7WEf4NMcAAAAc8"]
[Fri Apr 17 14:53:36.098152 2026] [:error] [pid 61523:tid 61562] [client 35.229.72.129:62697] [client 35.229.72.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeHY8MOaH-Pgc7WEf4NMdAAAAdQ"]
[Fri Apr 17 14:53:38.592515 2026] [:error] [pid 61523:tid 61559] [client 35.229.72.129:62697] [client 35.229.72.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.72.129, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHY8sOaH-Pgc7WEf4NMdwAAAdE"]
[Fri Apr 17 23:14:05.211657 2026] [:error] [pid 9263:tid 9280] [client 198.235.24.168:64686] [client 198.235.24.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.235.24.168, incrementing brute counter"] [hostname "www.makifim.com.au"] [uri "/wp-login.php"] [unique_id "aeJOPRP68VyHNvj1e56LgQAAAM8"]
[Sat Apr 18 07:38:39.957751 2026] [:error] [pid 34288:tid 34315] [client 20.238.75.27:48103] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLEf-TIiy__PtiLmpkxUAAAAZc"]
[Sat Apr 18 07:38:43.985695 2026] [:error] [pid 9863:tid 9892] [client 20.238.75.27:51170] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLEgzjjiypiFrTucbIkUQAAABM"]
[Sat Apr 18 07:38:46.711092 2026] [:error] [pid 9863:tid 9888] [client 20.238.75.27:53467] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLEhjjjiypiFrTucbIkWgAAAA8"]
[Sat Apr 18 07:38:51.693932 2026] [:error] [pid 13023:tid 13036] [client 20.238.75.27:48142] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLEi_1e7hG8DAeABB8v_QAAAQs"]
[Sat Apr 18 08:38:36.410871 2026] [proxy_fcgi:error] [pid 9970:tid 9979] [client 20.215.248.211:32478] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:38:47.876879 2026] [proxy_fcgi:error] [pid 13023:tid 13049] [client 20.215.248.211:51787] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:39:02.527370 2026] [proxy_fcgi:error] [pid 34290:tid 34324] [client 20.215.248.211:47112] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:39:18.256887 2026] [proxy_fcgi:error] [pid 34237:tid 34261] [client 20.215.248.211:46699] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:39:18.815386 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 20.215.248.211:15927] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:39:28.499565 2026] [:error] [pid 9970:tid 9994] [client 20.215.248.211:2752] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aeLSwCYdRLRhVmaIMx0NnQAAANQ"]
[Sat Apr 18 08:39:29.581910 2026] [:error] [pid 9863:tid 9877] [client 20.215.248.211:15628] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aeLSwTjjiypiFrTucbIvEgAAAAQ"]
[Sat Apr 18 08:39:31.295962 2026] [:error] [pid 9863:tid 9885] [client 20.215.248.211:19596] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aeLSwzjjiypiFrTucbIvFQAAAAw"]
[Sat Apr 18 08:39:32.706444 2026] [:error] [pid 13023:tid 13031] [client 20.215.248.211:41296] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aeLSxP1e7hG8DAeABB9OfAAAAQY"]
[Sat Apr 18 08:39:34.461985 2026] [:error] [pid 9865:tid 9950] [client 20.215.248.211:19170] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLSxqzb5knECIY-C-jXVgAAAI0"]
[Sat Apr 18 08:39:35.920775 2026] [:error] [pid 13023:tid 13034] [client 20.215.248.211:20360] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLSx_1e7hG8DAeABB9OgQAAAQk"]
[Sat Apr 18 08:39:37.322704 2026] [:error] [pid 9863:tid 9876] [client 20.215.248.211:2812] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLSyTjjiypiFrTucbIvIgAAAAM"]
[Sat Apr 18 08:39:38.109448 2026] [:error] [pid 34290:tid 34338] [client 20.215.248.211:26623] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLSyhqX6WpmmAXOBi940wAAAdM"]
[Sat Apr 18 08:39:39.140538 2026] [:error] [pid 13023:tid 13043] [client 20.215.248.211:2309] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeLSy_1e7hG8DAeABB9OjQAAARI"]
[Sat Apr 18 08:39:42.097414 2026] [:error] [pid 13023:tid 13027] [client 20.215.248.211:23418] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeLSzv1e7hG8DAeABB9OlwAAAQI"]
[Sat Apr 18 08:39:44.662809 2026] [:error] [pid 9864:tid 9920] [client 20.215.248.211:23091] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeLS0ICFeowknfXHM7lcLwAAAE4"]
[Sat Apr 18 08:39:46.271060 2026] [:error] [pid 9970:tid 9978] [client 20.215.248.211:21658] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeLS0iYdRLRhVmaIMx0NqAAAAMQ"]
[Sat Apr 18 08:39:48.720064 2026] [:error] [pid 34288:tid 34312] [client 20.215.248.211:23676] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aeLS1OTIiy__PtiLmplMygAAAZQ"]
[Sat Apr 18 08:39:52.001504 2026] [:error] [pid 34288:tid 34294] [client 20.215.248.211:25813] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aeLS2OTIiy__PtiLmplMywAAAYI"]
[Sat Apr 18 08:39:57.965024 2026] [:error] [pid 34237:tid 34251] [client 20.215.248.211:42996] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aeLS3RBmX4Wq5a6rxfbooQAAAUw"]
[Sat Apr 18 08:40:01.017427 2026] [:error] [pid 13023:tid 13031] [client 20.215.248.211:25838] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aeLS4f1e7hG8DAeABB9OsQAAAQY"]
[Sat Apr 18 08:40:02.607172 2026] [:error] [pid 9970:tid 9988] [client 20.215.248.211:53989] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aeLS4iYdRLRhVmaIMx0NxgAAAM4"]
[Sat Apr 18 08:40:04.437109 2026] [:error] [pid 9863:tid 9882] [client 20.215.248.211:24686] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aeLS5DjjiypiFrTucbIvSQAAAAk"]
[Sat Apr 18 08:40:06.771309 2026] [:error] [pid 9863:tid 9894] [client 20.215.248.211:30501] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aeLS5jjjiypiFrTucbIvTwAAABU"]
[Sat Apr 18 08:40:08.289085 2026] [:error] [pid 13023:tid 13037] [client 20.215.248.211:30499] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aeLS6P1e7hG8DAeABB9OvAAAAQw"]
[Sat Apr 18 08:40:09.230592 2026] [:error] [pid 9970:tid 9991] [client 20.215.248.211:25833] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeLS6SYdRLRhVmaIMx0NzgAAANE"]
[Sat Apr 18 08:40:10.819120 2026] [:error] [pid 9865:tid 9955] [client 20.215.248.211:24693] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeLS6qzb5knECIY-C-jXbgAAAJI"]
[Sat Apr 18 08:40:11.705252 2026] [:error] [pid 13023:tid 13038] [client 20.215.248.211:26339] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeLS6_1e7hG8DAeABB9OwQAAAQ0"]
[Sat Apr 18 08:40:12.614672 2026] [:error] [pid 34290:tid 34321] [client 20.215.248.211:23087] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeLS7BqX6WpmmAXOBi947AAAAcI"]
[Sat Apr 18 08:40:14.567977 2026] [:error] [pid 34237:tid 34243] [client 20.215.248.211:8673] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aeLS7hBmX4Wq5a6rxfbo1QAAAUQ"]
[Sat Apr 18 08:40:17.696471 2026] [:error] [pid 13023:tid 13037] [client 20.215.248.211:47646] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aeLS8f1e7hG8DAeABB9OzgAAAQw"]
[Sat Apr 18 08:41:35.750818 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 20.215.248.211:51380] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:41:51.661647 2026] [proxy_fcgi:error] [pid 34290:tid 34324] [client 20.215.248.211:51354] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:41:52.255989 2026] [proxy_fcgi:error] [pid 9865:tid 9951] [client 20.215.248.211:43434] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:42:18.171045 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 20.215.248.211:47215] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:42:24.329577 2026] [:error] [pid 34237:tid 34239] [client 20.215.248.211:52929] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLTcBBmX4Wq5a6rxfbpzgAAAUA"]
[Sat Apr 18 08:42:26.003090 2026] [:error] [pid 34237:tid 34244] [client 20.215.248.211:29143] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLTchBmX4Wq5a6rxfbp0gAAAUU"]
[Sat Apr 18 08:42:27.878852 2026] [:error] [pid 9864:tid 9929] [client 20.215.248.211:29172] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLTc4CFeowknfXHM7lcmAAAAFc"]
[Sat Apr 18 08:42:28.970070 2026] [:error] [pid 9864:tid 9906] [client 20.215.248.211:55200] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLTdICFeowknfXHM7lcngAAAEE"]
[Sat Apr 18 08:42:29.968175 2026] [:error] [pid 34237:tid 34254] [client 20.215.248.211:18377] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aeLTdRBmX4Wq5a6rxfbp2gAAAU8"]
[Sat Apr 18 08:42:30.953216 2026] [:error] [pid 34288:tid 34313] [client 20.215.248.211:32499] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aeLTduTIiy__PtiLmplNOAAAAZU"]
[Sat Apr 18 08:42:33.224630 2026] [:error] [pid 9863:tid 9891] [client 20.215.248.211:32123] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aeLTeTjjiypiFrTucbIwtQAAABI"]
[Sat Apr 18 08:42:40.758982 2026] [:error] [pid 34288:tid 34300] [client 20.215.248.211:27062] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aeLTgOTIiy__PtiLmplNSgAAAYg"]
[Sat Apr 18 08:42:42.539317 2026] [:error] [pid 9863:tid 9892] [client 20.215.248.211:27293] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aeLTgjjjiypiFrTucbIwvgAAABM"]
[Sat Apr 18 08:42:43.586047 2026] [:error] [pid 9863:tid 9887] [client 20.215.248.211:30555] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aeLTgzjjiypiFrTucbIwwQAAAA4"]
[Sat Apr 18 08:42:44.467250 2026] [:error] [pid 34290:tid 34339] [client 20.215.248.211:35119] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aeLThBqX6WpmmAXOBi95UQAAAdQ"]
[Sat Apr 18 08:42:45.220627 2026] [:error] [pid 34288:tid 34309] [client 20.215.248.211:27279] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aeLTheTIiy__PtiLmplNUQAAAZE"]
[Sat Apr 18 08:42:46.667053 2026] [:error] [pid 9864:tid 9925] [client 20.215.248.211:24632] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "aeLThoCFeowknfXHM7lcsgAAAFM"]
[Sat Apr 18 08:42:48.005713 2026] [:error] [pid 9970:tid 9983] [client 20.215.248.211:15415] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "aeLTiCYdRLRhVmaIMx0OSgAAAMk"]
[Sat Apr 18 08:42:49.202186 2026] [:error] [pid 34237:tid 34242] [client 20.215.248.211:2463] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "aeLTiRBmX4Wq5a6rxfbqCQAAAUM"]
[Sat Apr 18 08:42:50.571793 2026] [:error] [pid 9970:tid 9977] [client 20.215.248.211:43995] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "aeLTiiYdRLRhVmaIMx0OTQAAAMM"]
[Sat Apr 18 08:42:51.520395 2026] [:error] [pid 34237:tid 34253] [client 20.215.248.211:44664] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeLTixBmX4Wq5a6rxfbqDAAAAU4"]
[Sat Apr 18 08:42:52.331832 2026] [:error] [pid 9970:tid 9978] [client 20.215.248.211:27291] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeLTjCYdRLRhVmaIMx0OVAAAAMQ"]
[Sat Apr 18 08:42:53.156252 2026] [:error] [pid 9865:tid 9953] [client 20.215.248.211:35074] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeLTjazb5knECIY-C-jX2wAAAJA"]
[Sat Apr 18 08:42:54.066264 2026] [:error] [pid 13023:tid 13039] [client 20.215.248.211:18077] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeLTjv1e7hG8DAeABB9PzwAAAQ4"]
[Sat Apr 18 08:42:55.418924 2026] [:error] [pid 34288:tid 34316] [client 20.215.248.211:18070] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aeLTj-TIiy__PtiLmplNWQAAAZg"]
[Sat Apr 18 08:42:56.350066 2026] [:error] [pid 9863:tid 9893] [client 20.215.248.211:44622] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aeLTkDjjiypiFrTucbIwywAAABQ"]
[Sat Apr 18 08:42:57.174606 2026] [:error] [pid 9865:tid 9950] [client 20.215.248.211:18397] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aeLTkazb5knECIY-C-jX5QAAAI0"]
[Sat Apr 18 08:42:57.877125 2026] [:error] [pid 9865:tid 9955] [client 20.215.248.211:24600] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "aeLTkazb5knECIY-C-jX5gAAAJI"]
[Sat Apr 18 08:42:58.542179 2026] [:error] [pid 9970:tid 9998] [client 20.215.248.211:44650] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aeLTkiYdRLRhVmaIMx0OXQAAANg"]
[Sat Apr 18 08:42:59.162784 2026] [:error] [pid 9865:tid 9946] [client 20.215.248.211:43467] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aeLTk6zb5knECIY-C-jX6QAAAIk"]
[Sat Apr 18 08:43:00.295932 2026] [:error] [pid 9970:tid 9996] [client 20.215.248.211:35098] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aeLTlCYdRLRhVmaIMx0OYgAAANY"]
[Sat Apr 18 08:43:01.270584 2026] [:error] [pid 34237:tid 34261] [client 20.215.248.211:35094] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aeLTlRBmX4Wq5a6rxfbqGAAAAVY"]
[Sat Apr 18 08:43:02.141884 2026] [:error] [pid 34237:tid 34260] [client 20.215.248.211:43487] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aeLTlhBmX4Wq5a6rxfbqHAAAAVU"]
[Sat Apr 18 08:43:02.990657 2026] [:error] [pid 34237:tid 34241] [client 20.215.248.211:35081] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aeLTlhBmX4Wq5a6rxfbqIAAAAUI"]
[Sat Apr 18 08:43:03.740768 2026] [:error] [pid 9864:tid 9924] [client 20.215.248.211:24095] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aeLTl4CFeowknfXHM7lcwQAAAFI"]
[Sat Apr 18 08:43:04.917667 2026] [:error] [pid 9864:tid 9921] [client 20.215.248.211:18120] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "aeLTmICFeowknfXHM7lcxAAAAE8"]
[Sat Apr 18 08:43:05.768164 2026] [:error] [pid 9863:tid 9873] [client 20.215.248.211:24614] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "aeLTmTjjiypiFrTucbIw3wAAAAA"]
[Sat Apr 18 08:43:06.636514 2026] [:error] [pid 9863:tid 9882] [client 20.215.248.211:27932] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "aeLTmjjjiypiFrTucbIw5gAAAAk"]
[Sat Apr 18 08:43:07.339531 2026] [:error] [pid 34237:tid 34258] [client 20.215.248.211:51820] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "aeLTmxBmX4Wq5a6rxfbqJQAAAVM"]
[Sat Apr 18 08:43:08.089855 2026] [:error] [pid 34288:tid 34302] [client 20.215.248.211:43502] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccs.php"] [unique_id "aeLTnOTIiy__PtiLmplNYAAAAYo"]
[Sat Apr 18 08:43:08.960586 2026] [:error] [pid 34288:tid 34293] [client 20.215.248.211:18085] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboutc.php"] [unique_id "aeLTnOTIiy__PtiLmplNYwAAAYE"]
[Sat Apr 18 08:43:10.151030 2026] [:error] [pid 34237:tid 34252] [client 20.215.248.211:55634] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboutc.php"] [unique_id "aeLTnhBmX4Wq5a6rxfbqJwAAAU0"]
[Sat Apr 18 08:43:11.346624 2026] [:error] [pid 34288:tid 34303] [client 20.215.248.211:51791] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboutc.php"] [unique_id "aeLTn-TIiy__PtiLmplNcgAAAYs"]
[Sat Apr 18 08:43:12.089529 2026] [:error] [pid 34288:tid 34315] [client 20.215.248.211:32930] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboutc.php"] [unique_id "aeLToOTIiy__PtiLmplNcwAAAZc"]
[Sat Apr 18 08:43:13.203975 2026] [:error] [pid 9863:tid 9892] [client 20.215.248.211:32933] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aeLToTjjiypiFrTucbIw6wAAABM"]
[Sat Apr 18 08:43:14.117425 2026] [:error] [pid 13023:tid 13045] [client 20.215.248.211:15176] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aeLTov1e7hG8DAeABB9P6AAAARQ"]
[Sat Apr 18 08:43:15.110493 2026] [:error] [pid 9970:tid 9985] [client 20.215.248.211:55670] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aeLToyYdRLRhVmaIMx0OaAAAAMs"]
[Sat Apr 18 08:43:16.074421 2026] [:error] [pid 9865:tid 9948] [client 20.215.248.211:27695] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aeLTpKzb5knECIY-C-jX8AAAAIs"]
[Sat Apr 18 08:43:16.941065 2026] [:error] [pid 34237:tid 34252] [client 20.215.248.211:36458] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "aeLTpBBmX4Wq5a6rxfbqNgAAAU0"]
[Sat Apr 18 08:43:17.757118 2026] [:error] [pid 34237:tid 34250] [client 20.215.248.211:52534] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "aeLTpRBmX4Wq5a6rxfbqOQAAAUs"]
[Sat Apr 18 08:43:18.504754 2026] [:error] [pid 34237:tid 34242] [client 20.215.248.211:25177] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "aeLTphBmX4Wq5a6rxfbqPAAAAUM"]
[Sat Apr 18 08:43:19.562443 2026] [:error] [pid 34290:tid 34334] [client 20.215.248.211:2624] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "aeLTpxqX6WpmmAXOBi95cgAAAc8"]
[Sat Apr 18 08:43:20.960534 2026] [:error] [pid 34290:tid 34336] [client 20.215.248.211:52527] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLTqBqX6WpmmAXOBi95dAAAAdE"]
[Sat Apr 18 08:43:42.170651 2026] [proxy_fcgi:error] [pid 9864:tid 9929] [client 20.215.248.211:16222] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:43:56.697008 2026] [proxy_fcgi:error] [pid 34288:tid 34310] [client 20.215.248.211:33505] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:44:13.448883 2026] [proxy_fcgi:error] [pid 34237:tid 34259] [client 20.215.248.211:23675] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:44:14.049566 2026] [proxy_fcgi:error] [pid 9863:tid 9894] [client 20.215.248.211:20958] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:44:33.905779 2026] [:error] [pid 34237:tid 34249] [client 20.215.248.211:55165] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeLT8RBmX4Wq5a6rxfbrKwAAAUo"]
[Sat Apr 18 08:44:34.543137 2026] [:error] [pid 34288:tid 34298] [client 20.215.248.211:48003] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeLT8uTIiy__PtiLmplN7gAAAYY"]
[Sat Apr 18 08:44:35.160362 2026] [:error] [pid 34288:tid 34312] [client 20.215.248.211:54015] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeLT8-TIiy__PtiLmplN7wAAAZQ"]
[Sat Apr 18 08:44:35.832607 2026] [:error] [pid 34237:tid 34248] [client 20.215.248.211:24424] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeLT8xBmX4Wq5a6rxfbrLAAAAUk"]
[Sat Apr 18 08:44:36.759777 2026] [:error] [pid 34288:tid 34293] [client 20.215.248.211:16298] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aeLT9OTIiy__PtiLmplN8QAAAYE"]
[Sat Apr 18 08:44:38.049618 2026] [:error] [pid 13023:tid 13042] [client 20.215.248.211:48000] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aeLT9v1e7hG8DAeABB9QRgAAARE"]
[Sat Apr 18 08:44:38.997701 2026] [:error] [pid 9864:tid 9930] [client 20.215.248.211:8668] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aeLT9oCFeowknfXHM7ldDQAAAFg"]
[Sat Apr 18 08:44:39.768643 2026] [:error] [pid 34237:tid 34247] [client 20.215.248.211:54052] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aeLT9xBmX4Wq5a6rxfbrMAAAAUg"]
[Sat Apr 18 08:44:40.654384 2026] [:error] [pid 13023:tid 13048] [client 20.215.248.211:20637] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws57.php"] [unique_id "aeLT-P1e7hG8DAeABB9QTgAAARc"]
[Sat Apr 18 08:44:41.481874 2026] [:error] [pid 9863:tid 9896] [client 20.215.248.211:24654] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws57.php"] [unique_id "aeLT-TjjiypiFrTucbIx8wAAABc"]
[Sat Apr 18 08:44:42.529832 2026] [:error] [pid 34290:tid 34325] [client 20.215.248.211:13202] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws57.php"] [unique_id "aeLT-hqX6WpmmAXOBi95rAAAAcY"]
[Sat Apr 18 08:44:44.355382 2026] [:error] [pid 34237:tid 34255] [client 20.215.248.211:8696] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws57.php"] [unique_id "aeLT_BBmX4Wq5a6rxfbrPQAAAVA"]
[Sat Apr 18 08:44:45.131800 2026] [:error] [pid 9865:tid 9951] [client 20.215.248.211:14936] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "aeLT_azb5knECIY-C-jYKQAAAI4"]
[Sat Apr 18 08:44:45.760905 2026] [:error] [pid 34237:tid 34240] [client 20.215.248.211:20620] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "aeLT_RBmX4Wq5a6rxfbrQgAAAUE"]
[Sat Apr 18 08:44:47.364988 2026] [:error] [pid 34237:tid 34255] [client 20.215.248.211:2171] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "aeLT_xBmX4Wq5a6rxfbrSAAAAVA"]
[Sat Apr 18 08:44:49.122286 2026] [:error] [pid 9970:tid 9997] [client 20.215.248.211:25900] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "aeLUASYdRLRhVmaIMx0OtQAAANc"]
[Sat Apr 18 08:44:51.549799 2026] [:error] [pid 34288:tid 34292] [client 20.215.248.211:13215] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aeLUA-TIiy__PtiLmplOAAAAAYA"]
[Sat Apr 18 08:44:52.557254 2026] [:error] [pid 34288:tid 34314] [client 20.215.248.211:25825] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aeLUBOTIiy__PtiLmplOBAAAAZY"]
[Sat Apr 18 08:44:53.510959 2026] [:error] [pid 34290:tid 34324] [client 20.215.248.211:54002] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aeLUBRqX6WpmmAXOBi95twAAAcU"]
[Sat Apr 18 08:44:55.182504 2026] [:error] [pid 9863:tid 9886] [client 20.215.248.211:13243] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws66.php"] [unique_id "aeLUBzjjiypiFrTucbIyAAAAAA0"]
[Sat Apr 18 08:44:56.426720 2026] [:error] [pid 9864:tid 9908] [client 20.215.248.211:48055] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeLUCICFeowknfXHM7ldEAAAAEM"]
[Sat Apr 18 08:44:58.683498 2026] [:error] [pid 9863:tid 9875] [client 20.215.248.211:26331] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeLUCjjjiypiFrTucbIyAwAAAAI"]
[Sat Apr 18 08:45:00.129933 2026] [:error] [pid 9865:tid 9956] [client 20.215.248.211:14924] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeLUDKzb5knECIY-C-jYOQAAAJM"]
[Sat Apr 18 08:45:00.962322 2026] [:error] [pid 9863:tid 9881] [client 20.215.248.211:25844] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aeLUDDjjiypiFrTucbIyBgAAAAg"]
[Sat Apr 18 08:45:01.787015 2026] [:error] [pid 9865:tid 9949] [client 20.215.248.211:45145] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeLUDazb5knECIY-C-jYPAAAAIw"]
[Sat Apr 18 08:45:02.466747 2026] [:error] [pid 34288:tid 34304] [client 20.215.248.211:2127] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeLUDuTIiy__PtiLmplOFQAAAYw"]
[Sat Apr 18 08:45:03.578861 2026] [:error] [pid 34237:tid 34260] [client 20.215.248.211:33968] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeLUDxBmX4Wq5a6rxfbrUwAAAVU"]
[Sat Apr 18 08:45:04.480286 2026] [:error] [pid 34237:tid 34256] [client 20.215.248.211:21457] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeLUEBBmX4Wq5a6rxfbrWgAAAVE"]
[Sat Apr 18 08:45:06.130471 2026] [:error] [pid 9865:tid 9945] [client 20.215.248.211:42314] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aeLUEqzb5knECIY-C-jYQgAAAIg"]
[Sat Apr 18 08:45:07.985615 2026] [:error] [pid 9864:tid 9924] [client 20.215.248.211:21468] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aeLUE4CFeowknfXHM7ldFAAAAFI"]
[Sat Apr 18 08:45:10.987306 2026] [:error] [pid 9863:tid 9894] [client 20.215.248.211:23083] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aeLUFjjjiypiFrTucbIyDAAAABU"]
[Sat Apr 18 08:45:13.072973 2026] [:error] [pid 34237:tid 34244] [client 20.215.248.211:22286] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aeLUGRBmX4Wq5a6rxfbrcQAAAUU"]
[Sat Apr 18 08:45:14.645821 2026] [:error] [pid 9863:tid 9882] [client 20.215.248.211:2409] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aeLUGjjjiypiFrTucbIyEQAAAAk"]
[Sat Apr 18 08:45:16.404488 2026] [:error] [pid 9864:tid 9920] [client 20.215.248.211:26545] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aeLUHICFeowknfXHM7ldNgAAAE4"]
[Sat Apr 18 08:45:22.071121 2026] [:error] [pid 34237:tid 34239] [client 20.215.248.211:18840] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aeLUIhBmX4Wq5a6rxfbrkwAAAUA"]
[Sat Apr 18 08:45:27.080721 2026] [:error] [pid 34290:tid 34336] [client 20.215.248.211:26523] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aeLUJxqX6WpmmAXOBi953wAAAdE"]
[Sat Apr 18 08:45:28.185986 2026] [:error] [pid 34290:tid 34320] [client 20.215.248.211:8770] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/set.php"] [unique_id "aeLUKBqX6WpmmAXOBi955QAAAcE"]
[Sat Apr 18 08:45:28.972580 2026] [:error] [pid 34290:tid 34327] [client 20.215.248.211:18570] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/set.php"] [unique_id "aeLUKBqX6WpmmAXOBi956QAAAcg"]
[Sat Apr 18 08:45:29.635399 2026] [:error] [pid 9970:tid 9986] [client 20.215.248.211:2505] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/set.php"] [unique_id "aeLUKSYdRLRhVmaIMx0OxQAAAMw"]
[Sat Apr 18 08:45:30.261891 2026] [:error] [pid 34288:tid 34306] [client 20.215.248.211:22311] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/set.php"] [unique_id "aeLUKuTIiy__PtiLmplOTAAAAY4"]
[Sat Apr 18 08:46:33.262734 2026] [proxy_fcgi:error] [pid 9863:tid 9887] [client 20.215.248.211:35827] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 08:46:38.867178 2026] [:error] [pid 34290:tid 34341] [client 20.215.248.211:15707] [client 20.215.248.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "aeLUbhqX6WpmmAXOBi96UwAAAdY"]
[Sat Apr 18 08:49:46.257835 2026] [:error] [pid 9970:tid 9981] [client 178.128.149.123:25366] [client 178.128.149.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aeLVKiYdRLRhVmaIMx0P5wAAAMc"]
[Sat Apr 18 09:28:16.109374 2026] [proxy_fcgi:error] [pid 34288:tid 34305] [client 4.211.104.36:41794] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:28:28.165105 2026] [proxy_fcgi:error] [pid 34288:tid 34314] [client 4.211.104.36:4338] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:28:34.304927 2026] [proxy_fcgi:error] [pid 34290:tid 34322] [client 4.211.104.36:44903] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:28:46.395535 2026] [proxy_fcgi:error] [pid 34290:tid 34325] [client 4.211.104.36:41819] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:28:52.034543 2026] [proxy_fcgi:error] [pid 34290:tid 34338] [client 4.211.104.36:49560] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:29:00.313855 2026] [:error] [pid 9863:tid 9883] [client 4.211.104.36:52519] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "aeLeXDjjiypiFrTucbI9rQAAAAo"]
[Sat Apr 18 09:29:00.952484 2026] [:error] [pid 34237:tid 34262] [client 4.211.104.36:43171] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "aeLeXBBmX4Wq5a6rxfYCawAAAVc"]
[Sat Apr 18 09:29:01.737509 2026] [:error] [pid 9864:tid 9913] [client 4.211.104.36:4637] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "aeLeXYCFeowknfXHM7lkpgAAAEc"]
[Sat Apr 18 09:29:02.734981 2026] [:error] [pid 13023:tid 13048] [client 4.211.104.36:65294] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "aeLeXv1e7hG8DAeABB9eaQAAARc"]
[Sat Apr 18 09:29:03.507345 2026] [:error] [pid 13023:tid 13025] [client 4.211.104.36:53116] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/water.php"] [unique_id "aeLeX_1e7hG8DAeABB9ebgAAAQA"]
[Sat Apr 18 09:29:04.200774 2026] [:error] [pid 13023:tid 13027] [client 4.211.104.36:54501] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/water.php"] [unique_id "aeLeYP1e7hG8DAeABB9edAAAAQI"]
[Sat Apr 18 09:29:05.579317 2026] [:error] [pid 34237:tid 34256] [client 4.211.104.36:4625] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/water.php"] [unique_id "aeLeYRBmX4Wq5a6rxfYCdAAAAVE"]
[Sat Apr 18 09:29:06.782565 2026] [:error] [pid 34237:tid 34263] [client 4.211.104.36:4679] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/water.php"] [unique_id "aeLeYhBmX4Wq5a6rxfYCegAAAVg"]
[Sat Apr 18 09:29:07.427898 2026] [:error] [pid 34290:tid 34326] [client 4.211.104.36:43158] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "aeLeYxqX6WpmmAXOBi-CagAAAcc"]
[Sat Apr 18 09:29:08.008423 2026] [:error] [pid 34290:tid 34336] [client 4.211.104.36:65336] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "aeLeZBqX6WpmmAXOBi-CawAAAdE"]
[Sat Apr 18 09:29:08.750442 2026] [:error] [pid 9864:tid 9905] [client 4.211.104.36:53087] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "aeLeZICFeowknfXHM7lkqQAAAEA"]
[Sat Apr 18 09:29:09.391843 2026] [:error] [pid 34237:tid 34243] [client 4.211.104.36:47283] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ggb.php"] [unique_id "aeLeZRBmX4Wq5a6rxfYCgQAAAUQ"]
[Sat Apr 18 09:29:10.108580 2026] [:error] [pid 34237:tid 34258] [client 4.211.104.36:47246] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "aeLeZhBmX4Wq5a6rxfYChgAAAVM"]
[Sat Apr 18 09:29:10.932903 2026] [:error] [pid 9864:tid 9924] [client 4.211.104.36:41798] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "aeLeZoCFeowknfXHM7lkrAAAAFI"]
[Sat Apr 18 09:29:11.504486 2026] [:error] [pid 34237:tid 34251] [client 4.211.104.36:47249] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "aeLeZxBmX4Wq5a6rxfYCjQAAAUw"]
[Sat Apr 18 09:29:12.555288 2026] [:error] [pid 13023:tid 13027] [client 4.211.104.36:53099] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "aeLeaP1e7hG8DAeABB9ehgAAAQI"]
[Sat Apr 18 09:29:13.091583 2026] [:error] [pid 13023:tid 13030] [client 4.211.104.36:47267] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wert.php"] [unique_id "aeLeaf1e7hG8DAeABB9eiQAAAQU"]
[Sat Apr 18 09:29:13.909534 2026] [:error] [pid 13023:tid 13028] [client 4.211.104.36:52534] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wert.php"] [unique_id "aeLeaf1e7hG8DAeABB9ejwAAAQM"]
[Sat Apr 18 09:29:14.804250 2026] [:error] [pid 34237:tid 34246] [client 4.211.104.36:53062] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wert.php"] [unique_id "aeLeahBmX4Wq5a6rxfYCkgAAAUc"]
[Sat Apr 18 09:29:15.425731 2026] [:error] [pid 34237:tid 34257] [client 4.211.104.36:47019] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wert.php"] [unique_id "aeLeaxBmX4Wq5a6rxfYClQAAAVI"]
[Sat Apr 18 09:29:16.043575 2026] [:error] [pid 9863:tid 9891] [client 4.211.104.36:41453] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/11.php"] [unique_id "aeLebDjjiypiFrTucbI9sgAAABI"]
[Sat Apr 18 09:29:16.582120 2026] [:error] [pid 9863:tid 9888] [client 4.211.104.36:54477] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/11.php"] [unique_id "aeLebDjjiypiFrTucbI9tQAAAA8"]
[Sat Apr 18 09:29:17.379964 2026] [:error] [pid 9863:tid 9887] [client 4.211.104.36:47253] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/11.php"] [unique_id "aeLebTjjiypiFrTucbI9twAAAA4"]
[Sat Apr 18 09:29:18.084860 2026] [:error] [pid 9865:tid 9939] [client 4.211.104.36:47244] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/11.php"] [unique_id "aeLebqzb5knECIY-C-jq-gAAAII"]
[Sat Apr 18 09:29:18.798165 2026] [:error] [pid 9863:tid 9877] [client 4.211.104.36:51567] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aeLebjjjiypiFrTucbI9vgAAAAQ"]
[Sat Apr 18 09:29:19.625212 2026] [:error] [pid 34290:tid 34325] [client 4.211.104.36:50074] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aeLebxqX6WpmmAXOBi-CfAAAAcY"]
[Sat Apr 18 09:29:20.904506 2026] [:error] [pid 9864:tid 9923] [client 4.211.104.36:50961] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aeLecICFeowknfXHM7lkswAAAFE"]
[Sat Apr 18 09:29:21.647028 2026] [:error] [pid 9864:tid 9910] [client 4.211.104.36:50990] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/p.php"] [unique_id "aeLecYCFeowknfXHM7lktAAAAEU"]
[Sat Apr 18 09:29:22.312174 2026] [:error] [pid 9865:tid 9958] [client 4.211.104.36:51578] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oij98gy.php"] [unique_id "aeLecqzb5knECIY-C-jrDgAAAJU"]
[Sat Apr 18 09:29:23.396610 2026] [:error] [pid 9864:tid 9924] [client 4.211.104.36:48468] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oij98gy.php"] [unique_id "aeLec4CFeowknfXHM7lkuQAAAFI"]
[Sat Apr 18 09:29:24.360164 2026] [:error] [pid 9865:tid 9938] [client 4.211.104.36:49799] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oij98gy.php"] [unique_id "aeLedKzb5knECIY-C-jrFAAAAIE"]
[Sat Apr 18 09:29:25.501354 2026] [:error] [pid 9865:tid 9940] [client 4.211.104.36:51240] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/oij98gy.php"] [unique_id "aeLedazb5knECIY-C-jrGQAAAIM"]
[Sat Apr 18 09:29:26.678729 2026] [:error] [pid 9863:tid 9897] [client 4.211.104.36:48472] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "aeLedjjjiypiFrTucbI9wQAAABg"]
[Sat Apr 18 09:29:27.486433 2026] [:error] [pid 34237:tid 34257] [client 4.211.104.36:46999] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "aeLedxBmX4Wq5a6rxfYCoAAAAVI"]
[Sat Apr 18 09:29:28.359204 2026] [:error] [pid 34290:tid 34339] [client 4.211.104.36:43245] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "aeLeeBqX6WpmmAXOBi-CfgAAAdQ"]
[Sat Apr 18 09:29:29.113727 2026] [:error] [pid 34237:tid 34252] [client 4.211.104.36:55107] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bthil.php"] [unique_id "aeLeeRBmX4Wq5a6rxfYCpAAAAU0"]
[Sat Apr 18 09:29:29.723143 2026] [:error] [pid 9865:tid 9949] [client 4.211.104.36:49854] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/turkshell.php"] [unique_id "aeLeeazb5knECIY-C-jrKAAAAIw"]
[Sat Apr 18 09:29:30.529828 2026] [:error] [pid 9865:tid 9954] [client 4.211.104.36:51536] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/turkshell.php"] [unique_id "aeLeeqzb5knECIY-C-jrMAAAAJE"]
[Sat Apr 18 09:29:31.398716 2026] [:error] [pid 9864:tid 9915] [client 4.211.104.36:43236] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/turkshell.php"] [unique_id "aeLee4CFeowknfXHM7lkvwAAAEk"]
[Sat Apr 18 09:29:32.074077 2026] [:error] [pid 13023:tid 13032] [client 4.211.104.36:59014] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/turkshell.php"] [unique_id "aeLefP1e7hG8DAeABB9emAAAAQc"]
[Sat Apr 18 09:29:32.999485 2026] [:error] [pid 13023:tid 13036] [client 4.211.104.36:44369] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tea.php"] [unique_id "aeLefP1e7hG8DAeABB9enQAAAQs"]
[Sat Apr 18 09:29:33.726543 2026] [:error] [pid 34237:tid 34254] [client 4.211.104.36:59031] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tea.php"] [unique_id "aeLefRBmX4Wq5a6rxfYCqwAAAU8"]
[Sat Apr 18 09:29:34.551434 2026] [:error] [pid 34237:tid 34256] [client 4.211.104.36:50954] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tea.php"] [unique_id "aeLefhBmX4Wq5a6rxfYCsQAAAVE"]
[Sat Apr 18 09:29:35.247912 2026] [:error] [pid 9863:tid 9875] [client 4.211.104.36:46700] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tea.php"] [unique_id "aeLefzjjiypiFrTucbI9yAAAAAI"]
[Sat Apr 18 09:29:35.986649 2026] [:error] [pid 9970:tid 9978] [client 4.211.104.36:44352] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seo.php"] [unique_id "aeLefyYdRLRhVmaIMx0YlAAAAMQ"]
[Sat Apr 18 09:29:36.807248 2026] [:error] [pid 34237:tid 34239] [client 4.211.104.36:59053] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seo.php"] [unique_id "aeLegBBmX4Wq5a6rxfYCuwAAAUA"]
[Sat Apr 18 09:29:38.032894 2026] [:error] [pid 34290:tid 34336] [client 4.211.104.36:40658] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seo.php"] [unique_id "aeLeghqX6WpmmAXOBi-CgQAAAdE"]
[Sat Apr 18 09:29:39.148559 2026] [:error] [pid 34237:tid 34252] [client 4.211.104.36:52843] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/seo.php"] [unique_id "aeLegxBmX4Wq5a6rxfYC0QAAAU0"]
[Sat Apr 18 09:29:40.334420 2026] [:error] [pid 13023:tid 13046] [client 4.211.104.36:54189] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "aeLehP1e7hG8DAeABB9eowAAARU"]
[Sat Apr 18 09:29:41.667149 2026] [:error] [pid 9863:tid 9880] [client 4.211.104.36:52349] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "aeLehTjjiypiFrTucbI90wAAAAc"]
[Sat Apr 18 09:29:43.055787 2026] [:error] [pid 34237:tid 34239] [client 4.211.104.36:46670] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "aeLehxBmX4Wq5a6rxfYC3wAAAUA"]
[Sat Apr 18 09:29:44.028652 2026] [:error] [pid 34237:tid 34242] [client 4.211.104.36:50046] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/7.php"] [unique_id "aeLeiBBmX4Wq5a6rxfYC5gAAAUM"]
[Sat Apr 18 09:29:44.797258 2026] [:error] [pid 9865:tid 9940] [client 4.211.104.36:46163] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "aeLeiKzb5knECIY-C-jrQwAAAIM"]
[Sat Apr 18 09:29:45.670112 2026] [:error] [pid 9864:tid 9918] [client 4.211.104.36:44375] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "aeLeiYCFeowknfXHM7lkxAAAAEw"]
[Sat Apr 18 09:29:46.422094 2026] [:error] [pid 9865:tid 9947] [client 4.211.104.36:52291] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "aeLeiqzb5knECIY-C-jrRQAAAIo"]
[Sat Apr 18 09:29:47.703352 2026] [:error] [pid 9970:tid 9997] [client 4.211.104.36:62702] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/8.php"] [unique_id "aeLeiyYdRLRhVmaIMx0YmwAAANc"]
[Sat Apr 18 09:29:48.577512 2026] [:error] [pid 9864:tid 9930] [client 4.211.104.36:40685] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aeLejICFeowknfXHM7lkzAAAAFg"]
[Sat Apr 18 09:29:49.520124 2026] [:error] [pid 13023:tid 13026] [client 4.211.104.36:49987] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aeLejf1e7hG8DAeABB9epQAAAQE"]
[Sat Apr 18 09:29:50.080968 2026] [:error] [pid 13023:tid 13043] [client 4.211.104.36:46515] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aeLejv1e7hG8DAeABB9epgAAARI"]
[Sat Apr 18 09:29:50.788297 2026] [:error] [pid 13023:tid 13027] [client 4.211.104.36:40656] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aeLejv1e7hG8DAeABB9eqgAAAQI"]
[Sat Apr 18 09:29:52.060984 2026] [:error] [pid 9970:tid 9989] [client 4.211.104.36:43243] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "aeLekCYdRLRhVmaIMx0YowAAAM8"]
[Sat Apr 18 09:29:52.846101 2026] [:error] [pid 9864:tid 9922] [client 4.211.104.36:46486] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "aeLekICFeowknfXHM7lk0gAAAFA"]
[Sat Apr 18 09:29:53.480741 2026] [:error] [pid 9864:tid 9912] [client 4.211.104.36:46196] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "aeLekYCFeowknfXHM7lk1QAAAEY"]
[Sat Apr 18 09:29:54.032063 2026] [:error] [pid 9865:tid 9961] [client 4.211.104.36:65205] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/2.php"] [unique_id "aeLekqzb5knECIY-C-jrSgAAAJg"]
[Sat Apr 18 09:29:54.850087 2026] [:error] [pid 9970:tid 9974] [client 4.211.104.36:40678] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "aeLekiYdRLRhVmaIMx0YpgAAAMA"]
[Sat Apr 18 09:29:55.598993 2026] [:error] [pid 9970:tid 9980] [client 4.211.104.36:41356] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "aeLekyYdRLRhVmaIMx0YpwAAAMY"]
[Sat Apr 18 09:29:56.278458 2026] [:error] [pid 13023:tid 13042] [client 4.211.104.36:50026] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "aeLelP1e7hG8DAeABB9ewgAAARE"]
[Sat Apr 18 09:29:57.019870 2026] [:error] [pid 9864:tid 9930] [client 4.211.104.36:59018] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "aeLelYCFeowknfXHM7lk1gAAAFg"]
[Sat Apr 18 09:29:57.670506 2026] [:error] [pid 34290:tid 34339] [client 4.211.104.36:59017] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "aeLelRqX6WpmmAXOBi-CigAAAdQ"]
[Sat Apr 18 09:30:17.106200 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 4.211.104.36:52850] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:30:32.690333 2026] [proxy_fcgi:error] [pid 34288:tid 34296] [client 4.211.104.36:48788] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:30:33.228141 2026] [proxy_fcgi:error] [pid 34288:tid 34313] [client 4.211.104.36:62674] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:30:49.780552 2026] [proxy_fcgi:error] [pid 9865:tid 9948] [client 4.211.104.36:53538] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:30:55.030191 2026] [proxy_fcgi:error] [pid 13023:tid 13030] [client 4.211.104.36:47789] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:31:00.817640 2026] [:error] [pid 9863:tid 9881] [client 4.211.104.36:60592] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about.php"] [unique_id "aeLe1DjjiypiFrTucbI-qQAAAAg"]
[Sat Apr 18 09:31:01.547762 2026] [:error] [pid 9970:tid 9977] [client 4.211.104.36:46670] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about.php"] [unique_id "aeLe1SYdRLRhVmaIMx0ZFQAAAMM"]
[Sat Apr 18 09:31:02.873508 2026] [:error] [pid 9865:tid 9942] [client 4.211.104.36:42354] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about.php"] [unique_id "aeLe1qzb5knECIY-C-jriwAAAIU"]
[Sat Apr 18 09:31:04.222121 2026] [:error] [pid 34237:tid 34263] [client 4.211.104.36:53260] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/about.php"] [unique_id "aeLe2BBmX4Wq5a6rxfYDagAAAVg"]
[Sat Apr 18 09:31:05.607157 2026] [:error] [pid 9865:tid 9946] [client 4.211.104.36:52739] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no18.php"] [unique_id "aeLe2azb5knECIY-C-jrjwAAAIk"]
[Sat Apr 18 09:31:06.783117 2026] [:error] [pid 9863:tid 9875] [client 4.211.104.36:4508] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no18.php"] [unique_id "aeLe2jjjiypiFrTucbI-tAAAAAI"]
[Sat Apr 18 09:31:07.673832 2026] [:error] [pid 9863:tid 9877] [client 4.211.104.36:42305] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no18.php"] [unique_id "aeLe2zjjiypiFrTucbI-ugAAAAQ"]
[Sat Apr 18 09:31:08.816860 2026] [:error] [pid 34237:tid 34244] [client 4.211.104.36:52748] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no18.php"] [unique_id "aeLe3BBmX4Wq5a6rxfYDcAAAAUU"]
[Sat Apr 18 09:31:09.675042 2026] [:error] [pid 9865:tid 9947] [client 4.211.104.36:49511] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fine.php"] [unique_id "aeLe3azb5knECIY-C-jrlgAAAIo"]
[Sat Apr 18 09:31:10.393923 2026] [:error] [pid 34237:tid 34245] [client 4.211.104.36:4190] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fine.php"] [unique_id "aeLe3hBmX4Wq5a6rxfYDcwAAAUY"]
[Sat Apr 18 09:31:11.176049 2026] [:error] [pid 34237:tid 34248] [client 4.211.104.36:52777] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fine.php"] [unique_id "aeLe3xBmX4Wq5a6rxfYDdwAAAUk"]
[Sat Apr 18 09:31:12.565851 2026] [:error] [pid 34237:tid 34253] [client 4.211.104.36:42345] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fine.php"] [unique_id "aeLe4BBmX4Wq5a6rxfYDfAAAAU4"]
[Sat Apr 18 09:31:13.486712 2026] [:error] [pid 9863:tid 9897] [client 4.211.104.36:53275] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zample.php"] [unique_id "aeLe4TjjiypiFrTucbI-wwAAABg"]
[Sat Apr 18 09:31:14.464035 2026] [:error] [pid 34290:tid 34334] [client 4.211.104.36:52789] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zample.php"] [unique_id "aeLe4hqX6WpmmAXOBi-CsAAAAc8"]
[Sat Apr 18 09:31:15.676720 2026] [:error] [pid 34237:tid 34249] [client 4.211.104.36:53296] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zample.php"] [unique_id "aeLe4xBmX4Wq5a6rxfYDjgAAAUo"]
[Sat Apr 18 09:31:16.812931 2026] [:error] [pid 34237:tid 34262] [client 4.211.104.36:4155] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zample.php"] [unique_id "aeLe5BBmX4Wq5a6rxfYDlwAAAVc"]
[Sat Apr 18 09:31:17.559607 2026] [:error] [pid 13023:tid 13043] [client 4.211.104.36:49491] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeLe5f1e7hG8DAeABB9fGgAAARI"]
[Sat Apr 18 09:31:18.348406 2026] [:error] [pid 34237:tid 34254] [client 4.211.104.36:48023] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeLe5hBmX4Wq5a6rxfYDoAAAAU8"]
[Sat Apr 18 09:31:19.310176 2026] [:error] [pid 34237:tid 34245] [client 4.211.104.36:49531] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeLe5xBmX4Wq5a6rxfYDqQAAAUY"]
[Sat Apr 18 09:31:20.128222 2026] [:error] [pid 9863:tid 9895] [client 4.211.104.36:48680] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeLe6DjjiypiFrTucbI-yQAAABY"]
[Sat Apr 18 09:31:21.636529 2026] [:error] [pid 34288:tid 34305] [client 4.211.104.36:45285] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aeLe6eTIiy__PtiLmplffgAAAY0"]
[Sat Apr 18 09:31:22.346386 2026] [:error] [pid 13023:tid 13037] [client 4.211.104.36:59280] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aeLe6v1e7hG8DAeABB9fHAAAAQw"]
[Sat Apr 18 09:31:23.395274 2026] [:error] [pid 9864:tid 9928] [client 4.211.104.36:15528] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aeLe64CFeowknfXHM7llCgAAAFY"]
[Sat Apr 18 09:31:24.053440 2026] [:error] [pid 34288:tid 34302] [client 4.211.104.36:51846] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "aeLe7OTIiy__PtiLmplfggAAAYo"]
[Sat Apr 18 09:31:24.778713 2026] [:error] [pid 9865:tid 9948] [client 4.211.104.36:49039] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aeLe7Kzb5knECIY-C-jrrwAAAIs"]
[Sat Apr 18 09:31:25.503089 2026] [:error] [pid 9863:tid 9885] [client 4.211.104.36:42651] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aeLe7TjjiypiFrTucbI-0gAAAAw"]
[Sat Apr 18 09:31:26.264850 2026] [:error] [pid 9865:tid 9961] [client 4.211.104.36:56135] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aeLe7qzb5knECIY-C-jrtQAAAJg"]
[Sat Apr 18 09:31:26.850388 2026] [:error] [pid 34288:tid 34297] [client 4.211.104.36:42244] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "aeLe7uTIiy__PtiLmplfiAAAAYU"]
[Sat Apr 18 09:31:28.209511 2026] [:error] [pid 34288:tid 34303] [client 4.211.104.36:4950] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "aeLe8OTIiy__PtiLmplfjAAAAYs"]
[Sat Apr 18 09:31:29.164350 2026] [:error] [pid 34288:tid 34314] [client 4.211.104.36:46222] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "aeLe8eTIiy__PtiLmplfkAAAAZY"]
[Sat Apr 18 09:31:30.375953 2026] [:error] [pid 13023:tid 13031] [client 4.211.104.36:53782] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "aeLe8v1e7hG8DAeABB9fIgAAAQY"]
[Sat Apr 18 09:31:31.180198 2026] [:error] [pid 13023:tid 13036] [client 4.211.104.36:51297] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "aeLe8_1e7hG8DAeABB9fJgAAAQs"]
[Sat Apr 18 09:31:32.248386 2026] [:error] [pid 9970:tid 9995] [client 4.211.104.36:45923] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "aeLe9CYdRLRhVmaIMx0ZJgAAANU"]
[Sat Apr 18 09:31:32.878676 2026] [:error] [pid 13023:tid 13038] [client 4.211.104.36:55402] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "aeLe9P1e7hG8DAeABB9fLgAAAQ0"]
[Sat Apr 18 09:31:33.653085 2026] [:error] [pid 34237:tid 34246] [client 4.211.104.36:47550] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "aeLe9RBmX4Wq5a6rxfYDvgAAAUc"]
[Sat Apr 18 09:31:34.885613 2026] [:error] [pid 34237:tid 34240] [client 4.211.104.36:45910] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "aeLe9hBmX4Wq5a6rxfYDwgAAAUE"]
[Sat Apr 18 09:31:35.730433 2026] [:error] [pid 13023:tid 13044] [client 4.211.104.36:45926] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "aeLe9_1e7hG8DAeABB9fMgAAARM"]
[Sat Apr 18 09:31:36.419040 2026] [:error] [pid 9865:tid 9955] [client 4.211.104.36:47705] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "aeLe-Kzb5knECIY-C-jrvQAAAJI"]
[Sat Apr 18 09:31:36.985349 2026] [:error] [pid 34237:tid 34245] [client 4.211.104.36:53592] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "aeLe-BBmX4Wq5a6rxfYDxQAAAUY"]
[Sat Apr 18 09:31:37.684217 2026] [:error] [pid 9970:tid 9978] [client 4.211.104.36:50313] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "aeLe-SYdRLRhVmaIMx0ZKAAAAMQ"]
[Sat Apr 18 09:31:38.545792 2026] [:error] [pid 9865:tid 9941] [client 4.211.104.36:59625] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sf.php"] [unique_id "aeLe-qzb5knECIY-C-jrwQAAAIQ"]
[Sat Apr 18 09:31:39.207908 2026] [:error] [pid 34237:tid 34258] [client 4.211.104.36:51999] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sf.php"] [unique_id "aeLe-xBmX4Wq5a6rxfYDzQAAAVM"]
[Sat Apr 18 09:31:40.344197 2026] [:error] [pid 13023:tid 13044] [client 4.211.104.36:50502] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sf.php"] [unique_id "aeLe_P1e7hG8DAeABB9fNgAAARM"]
[Sat Apr 18 09:31:41.181292 2026] [:error] [pid 13023:tid 13046] [client 4.211.104.36:50251] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sf.php"] [unique_id "aeLe_f1e7hG8DAeABB9fOQAAARU"]
[Sat Apr 18 09:31:42.250569 2026] [:error] [pid 13023:tid 13028] [client 4.211.104.36:61356] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "aeLe_v1e7hG8DAeABB9fOgAAAQM"]
[Sat Apr 18 09:31:43.229661 2026] [:error] [pid 34237:tid 34246] [client 4.211.104.36:51972] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "aeLe_xBmX4Wq5a6rxfYD2gAAAUc"]
[Sat Apr 18 09:31:43.856975 2026] [:error] [pid 34237:tid 34256] [client 4.211.104.36:62449] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "aeLe_xBmX4Wq5a6rxfYD3wAAAVE"]
[Sat Apr 18 09:31:44.414694 2026] [:error] [pid 9863:tid 9873] [client 4.211.104.36:51778] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "aeLfADjjiypiFrTucbI-1QAAAAA"]
[Sat Apr 18 09:31:45.114793 2026] [:error] [pid 34237:tid 34249] [client 4.211.104.36:50501] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "aeLfARBmX4Wq5a6rxfYD6AAAAUo"]
[Sat Apr 18 09:31:46.047921 2026] [:error] [pid 9863:tid 9896] [client 4.211.104.36:44295] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "aeLfAjjjiypiFrTucbI-1gAAABc"]
[Sat Apr 18 09:31:47.551300 2026] [:error] [pid 9863:tid 9889] [client 4.211.104.36:47249] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "aeLfAzjjiypiFrTucbI-2gAAABA"]
[Sat Apr 18 09:31:48.493291 2026] [:error] [pid 9970:tid 9994] [client 4.211.104.36:61703] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "aeLfBCYdRLRhVmaIMx0ZLAAAANQ"]
[Sat Apr 18 09:31:49.776275 2026] [:error] [pid 9865:tid 9953] [client 4.211.104.36:4607] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "aeLfBazb5knECIY-C-jr1AAAAJA"]
[Sat Apr 18 09:31:50.752857 2026] [:error] [pid 9970:tid 9998] [client 4.211.104.36:61643] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "aeLfBiYdRLRhVmaIMx0ZLwAAANg"]
[Sat Apr 18 09:31:51.474505 2026] [:error] [pid 34288:tid 34294] [client 4.211.104.36:44316] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "aeLfB-TIiy__PtiLmplflwAAAYI"]
[Sat Apr 18 09:31:53.294287 2026] [:error] [pid 9865:tid 9956] [client 4.211.104.36:43004] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "aeLfCazb5knECIY-C-jr2wAAAJM"]
[Sat Apr 18 09:31:54.248316 2026] [:error] [pid 34237:tid 34252] [client 4.211.104.36:61710] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aeLfChBmX4Wq5a6rxfYD8gAAAU0"]
[Sat Apr 18 09:31:55.131543 2026] [:error] [pid 9864:tid 9924] [client 4.211.104.36:50290] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aeLfC4CFeowknfXHM7llIQAAAFI"]
[Sat Apr 18 09:31:56.142424 2026] [:error] [pid 13023:tid 13032] [client 4.211.104.36:42992] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aeLfDP1e7hG8DAeABB9fSwAAAQc"]
[Sat Apr 18 09:31:57.011147 2026] [:error] [pid 9864:tid 9912] [client 4.211.104.36:62453] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "aeLfDYCFeowknfXHM7llKAAAAEY"]
[Sat Apr 18 09:31:57.946068 2026] [:error] [pid 34288:tid 34304] [client 4.211.104.36:48747] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "aeLfDeTIiy__PtiLmplfmwAAAYw"]
[Sat Apr 18 09:32:14.931694 2026] [proxy_fcgi:error] [pid 9865:tid 9959] [client 4.211.104.36:48539] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:32:19.666616 2026] [proxy_fcgi:error] [pid 34288:tid 34299] [client 4.211.104.36:46926] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:32:26.296378 2026] [proxy_fcgi:error] [pid 34288:tid 34297] [client 4.211.104.36:44350] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:32:30.796713 2026] [proxy_fcgi:error] [pid 34288:tid 34309] [client 4.211.104.36:50241] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:32:37.375865 2026] [proxy_fcgi:error] [pid 34288:tid 34307] [client 4.211.104.36:48261] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:32:42.088995 2026] [proxy_fcgi:error] [pid 9863:tid 9895] [client 4.211.104.36:48711] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:32:50.271424 2026] [:error] [pid 9863:tid 9880] [client 4.211.104.36:54658] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "aeLfQjjjiypiFrTucbI_QQAAAAc"]
[Sat Apr 18 09:32:51.534486 2026] [:error] [pid 9865:tid 9942] [client 4.211.104.36:40626] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "aeLfQ6zb5knECIY-C-jscAAAAIU"]
[Sat Apr 18 09:32:52.368677 2026] [:error] [pid 34290:tid 34324] [client 4.211.104.36:46286] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "aeLfRBqX6WpmmAXOBi-C5gAAAcU"]
[Sat Apr 18 09:32:53.448966 2026] [:error] [pid 9864:tid 9926] [client 4.211.104.36:47453] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "aeLfRYCFeowknfXHM7llUgAAAFQ"]
[Sat Apr 18 09:32:54.484468 2026] [:error] [pid 34288:tid 34298] [client 4.211.104.36:43452] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeLfRuTIiy__PtiLmplgegAAAYY"]
[Sat Apr 18 09:32:55.418097 2026] [:error] [pid 34288:tid 34316] [client 4.211.104.36:43717] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeLfR-TIiy__PtiLmplgggAAAZg"]
[Sat Apr 18 09:32:56.288595 2026] [:error] [pid 34288:tid 34300] [client 4.211.104.36:46330] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeLfSOTIiy__PtiLmplgjAAAAYg"]
[Sat Apr 18 09:32:57.376937 2026] [:error] [pid 9863:tid 9878] [client 4.211.104.36:48543] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeLfSTjjiypiFrTucbI_RQAAAAU"]
[Sat Apr 18 09:32:58.362182 2026] [:error] [pid 34290:tid 34333] [client 4.211.104.36:43730] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeLfShqX6WpmmAXOBi-C8AAAAc4"]
[Sat Apr 18 09:32:59.160728 2026] [:error] [pid 9970:tid 9976] [client 4.211.104.36:59212] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeLfSyYdRLRhVmaIMx0ZiwAAAMI"]
[Sat Apr 18 09:33:00.010661 2026] [:error] [pid 13023:tid 13031] [client 4.211.104.36:47456] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeLfTP1e7hG8DAeABB9fugAAAQY"]
[Sat Apr 18 09:33:00.748152 2026] [:error] [pid 13023:tid 13025] [client 4.211.104.36:48256] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeLfTP1e7hG8DAeABB9fuwAAAQA"]
[Sat Apr 18 09:33:01.661403 2026] [:error] [pid 13023:tid 13038] [client 4.211.104.36:43766] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeLfTf1e7hG8DAeABB9fwAAAAQ0"]
[Sat Apr 18 09:33:02.587383 2026] [:error] [pid 13023:tid 13035] [client 4.211.104.36:46304] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeLfTv1e7hG8DAeABB9fxgAAAQo"]
[Sat Apr 18 09:33:03.492649 2026] [:error] [pid 34290:tid 34341] [client 4.211.104.36:48294] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeLfTxqX6WpmmAXOBi-C-gAAAdY"]
[Sat Apr 18 09:33:04.804853 2026] [:error] [pid 34288:tid 34303] [client 4.211.104.36:40609] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeLfUOTIiy__PtiLmplgogAAAYs"]
[Sat Apr 18 09:33:06.293049 2026] [:error] [pid 13023:tid 13034] [client 4.211.104.36:46773] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aeLfUv1e7hG8DAeABB9f3QAAAQk"]
[Sat Apr 18 09:33:07.087687 2026] [:error] [pid 34237:tid 34254] [client 4.211.104.36:47486] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aeLfUxBmX4Wq5a6rxfYE-QAAAU8"]
[Sat Apr 18 09:33:07.869985 2026] [:error] [pid 34290:tid 34322] [client 4.211.104.36:47457] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aeLfUxqX6WpmmAXOBi-C_wAAAcM"]
[Sat Apr 18 09:33:08.468227 2026] [:error] [pid 9863:tid 9895] [client 4.211.104.36:48308] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-update.php"] [unique_id "aeLfVDjjiypiFrTucbI_WgAAABY"]
[Sat Apr 18 09:33:09.151956 2026] [:error] [pid 34290:tid 34341] [client 4.211.104.36:43746] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeLfVRqX6WpmmAXOBi-DAwAAAdY"]
[Sat Apr 18 09:33:09.797793 2026] [:error] [pid 9970:tid 9993] [client 4.211.104.36:46308] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeLfVSYdRLRhVmaIMx0ZkwAAANM"]
[Sat Apr 18 09:33:10.494313 2026] [:error] [pid 13023:tid 13047] [client 4.211.104.36:48266] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeLfVv1e7hG8DAeABB9f9QAAARY"]
[Sat Apr 18 09:33:11.069669 2026] [:error] [pid 34290:tid 34342] [client 4.211.104.36:49343] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeLfVxqX6WpmmAXOBi-DBwAAAdc"]
[Sat Apr 18 09:33:12.059546 2026] [:error] [pid 9970:tid 9986] [client 4.211.104.36:4774] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aeLfWCYdRLRhVmaIMx0ZlgAAAMw"]
[Sat Apr 18 09:33:12.716968 2026] [:error] [pid 9970:tid 9983] [client 4.211.104.36:59221] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aeLfWCYdRLRhVmaIMx0ZmAAAAMk"]
[Sat Apr 18 09:33:13.681642 2026] [:error] [pid 13023:tid 13036] [client 4.211.104.36:50939] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aeLfWf1e7hG8DAeABB9f-gAAAQs"]
[Sat Apr 18 09:33:14.494856 2026] [:error] [pid 34288:tid 34300] [client 4.211.104.36:4303] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "aeLfWuTIiy__PtiLmplgqQAAAYg"]
[Sat Apr 18 09:33:15.590503 2026] [:error] [pid 34288:tid 34293] [client 4.211.104.36:41051] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeLfW-TIiy__PtiLmplgsAAAAYE"]
[Sat Apr 18 09:33:17.231031 2026] [:error] [pid 34237:tid 34258] [client 4.211.104.36:49333] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeLfXRBmX4Wq5a6rxfYFAwAAAVM"]
[Sat Apr 18 09:33:18.169540 2026] [:error] [pid 34288:tid 34292] [client 4.211.104.36:53689] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeLfXuTIiy__PtiLmplgtgAAAYA"]
[Sat Apr 18 09:33:18.971863 2026] [:error] [pid 34288:tid 34310] [client 4.211.104.36:59256] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeLfXuTIiy__PtiLmplgvAAAAZI"]
[Sat Apr 18 09:33:20.209642 2026] [:error] [pid 9970:tid 9978] [client 4.211.104.36:43510] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeLfYCYdRLRhVmaIMx0ZmgAAAMQ"]
[Sat Apr 18 09:33:21.231904 2026] [:error] [pid 34237:tid 34253] [client 4.211.104.36:59217] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeLfYRBmX4Wq5a6rxfYFCgAAAU4"]
[Sat Apr 18 09:33:23.306948 2026] [:error] [pid 9865:tid 9958] [client 4.211.104.36:41805] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeLfY6zb5knECIY-C-jshQAAAJU"]
[Sat Apr 18 09:33:23.897148 2026] [:error] [pid 34288:tid 34298] [client 4.211.104.36:4667] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeLfY-TIiy__PtiLmplgxgAAAYY"]
[Sat Apr 18 09:33:25.379258 2026] [:error] [pid 9970:tid 9994] [client 4.211.104.36:4659] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeLfZSYdRLRhVmaIMx0ZnwAAANQ"]
[Sat Apr 18 09:33:26.930021 2026] [:error] [pid 34288:tid 34315] [client 4.211.104.36:42734] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeLfZuTIiy__PtiLmplgzwAAAZc"]
[Sat Apr 18 09:33:28.475244 2026] [:error] [pid 34237:tid 34260] [client 4.211.104.36:41838] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeLfaBBmX4Wq5a6rxfYFIwAAAVU"]
[Sat Apr 18 09:33:31.094026 2026] [:error] [pid 13023:tid 13042] [client 4.211.104.36:53092] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeLfa_1e7hG8DAeABB9gGgAAARE"]
[Sat Apr 18 09:33:32.265877 2026] [:error] [pid 13023:tid 13049] [client 4.211.104.36:4728] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aeLfbP1e7hG8DAeABB9gHAAAARg"]
[Sat Apr 18 09:33:33.109614 2026] [:error] [pid 9970:tid 9976] [client 4.211.104.36:4694] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aeLfbSYdRLRhVmaIMx0ZtwAAAMI"]
[Sat Apr 18 09:33:33.929718 2026] [:error] [pid 9970:tid 9990] [client 4.211.104.36:44874] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aeLfbSYdRLRhVmaIMx0ZvQAAANA"]
[Sat Apr 18 09:33:35.005856 2026] [:error] [pid 34288:tid 34305] [client 4.211.104.36:4672] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aeLfb-TIiy__PtiLmplg6gAAAY0"]
[Sat Apr 18 09:33:36.021894 2026] [:error] [pid 34290:tid 34328] [client 4.211.104.36:47269] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goods.php"] [unique_id "aeLfcBqX6WpmmAXOBi-DHgAAAck"]
[Sat Apr 18 09:33:36.898986 2026] [:error] [pid 9863:tid 9893] [client 4.211.104.36:52493] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goods.php"] [unique_id "aeLfcDjjiypiFrTucbI_lgAAABQ"]
[Sat Apr 18 09:33:38.091632 2026] [:error] [pid 9865:tid 9945] [client 4.211.104.36:4624] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goods.php"] [unique_id "aeLfcqzb5knECIY-C-jsmwAAAIg"]
[Sat Apr 18 09:33:38.710954 2026] [:error] [pid 9865:tid 9940] [client 4.211.104.36:43136] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goods.php"] [unique_id "aeLfcqzb5knECIY-C-jsoAAAAIM"]
[Sat Apr 18 09:33:39.321677 2026] [:error] [pid 34290:tid 34330] [client 4.211.104.36:65285] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeLfcxqX6WpmmAXOBi-DJgAAAcs"]
[Sat Apr 18 09:33:40.414114 2026] [:error] [pid 9865:tid 9959] [client 4.211.104.36:65298] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeLfdKzb5knECIY-C-jspwAAAJY"]
[Sat Apr 18 09:33:41.156332 2026] [:error] [pid 34237:tid 34245] [client 4.211.104.36:4688] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeLfdRBmX4Wq5a6rxfYFLQAAAUY"]
[Sat Apr 18 09:33:41.945646 2026] [:error] [pid 9865:tid 9957] [client 4.211.104.36:42710] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeLfdazb5knECIY-C-jsqwAAAJQ"]
[Sat Apr 18 09:33:43.025151 2026] [:error] [pid 13023:tid 13031] [client 4.211.104.36:41409] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aeLfd_1e7hG8DAeABB9gKAAAAQY"]
[Sat Apr 18 09:33:43.613107 2026] [:error] [pid 9970:tid 9981] [client 4.211.104.36:52531] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aeLfdyYdRLRhVmaIMx0ZyQAAAMc"]
[Sat Apr 18 09:33:44.399426 2026] [:error] [pid 34237:tid 34249] [client 4.211.104.36:4734] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aeLfeBBmX4Wq5a6rxfYFLwAAAUo"]
[Sat Apr 18 09:33:45.115037 2026] [:error] [pid 34288:tid 34309] [client 4.211.104.36:50939] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/222.php"] [unique_id "aeLfeeTIiy__PtiLmplg-gAAAZE"]
[Sat Apr 18 09:33:46.026896 2026] [:error] [pid 34237:tid 34239] [client 4.211.104.36:47281] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeLfehBmX4Wq5a6rxfYFMwAAAUA"]
[Sat Apr 18 09:33:46.911683 2026] [:error] [pid 9863:tid 9886] [client 4.211.104.36:51254] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeLfejjjiypiFrTucbI_nQAAAA0"]
[Sat Apr 18 09:34:02.269421 2026] [proxy_fcgi:error] [pid 34288:tid 34307] [client 4.211.104.36:50060] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:34:12.849041 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 4.211.104.36:51565] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:34:13.915723 2026] [autoindex:error] [pid 9970:tid 9978] [client 4.211.104.36:49596] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 09:34:18.119400 2026] [autoindex:error] [pid 9970:tid 9990] [client 4.211.104.36:49596] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 09:34:27.762979 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 4.211.104.36:49596] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:34:40.271082 2026] [:error] [pid 9863:tid 9882] [client 4.211.104.36:49839] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fi.php"] [unique_id "aeLfsDjjiypiFrTucbI_0gAAAAk"]
[Sat Apr 18 09:34:41.031687 2026] [:error] [pid 34288:tid 34294] [client 4.211.104.36:43231] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fi.php"] [unique_id "aeLfseTIiy__PtiLmplhkwAAAYI"]
[Sat Apr 18 09:34:41.822434 2026] [:error] [pid 34288:tid 34296] [client 4.211.104.36:43218] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fi.php"] [unique_id "aeLfseTIiy__PtiLmplhmgAAAYQ"]
[Sat Apr 18 09:34:42.976288 2026] [:error] [pid 9970:tid 9994] [client 4.211.104.36:59071] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fi.php"] [unique_id "aeLfsiYdRLRhVmaIMx0Z9wAAANQ"]
[Sat Apr 18 09:34:43.734001 2026] [:error] [pid 9864:tid 9915] [client 4.211.104.36:52862] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "aeLfs4CFeowknfXHM7ll1QAAAEk"]
[Sat Apr 18 09:34:44.254633 2026] [:error] [pid 34288:tid 34299] [client 4.211.104.36:44390] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "aeLftOTIiy__PtiLmplhrwAAAYc"]
[Sat Apr 18 09:34:44.878780 2026] [:error] [pid 9865:tid 9957] [client 4.211.104.36:52300] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "aeLftKzb5knECIY-C-js_AAAAJQ"]
[Sat Apr 18 09:34:45.478868 2026] [:error] [pid 34288:tid 34305] [client 4.211.104.36:54174] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "aeLfteTIiy__PtiLmplhuQAAAY0"]
[Sat Apr 18 09:34:46.128820 2026] [:error] [pid 9865:tid 9956] [client 4.211.104.36:62714] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeLftqzb5knECIY-C-js_gAAAJM"]
[Sat Apr 18 09:34:46.869386 2026] [:error] [pid 9865:tid 9937] [client 4.211.104.36:52839] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeLftqzb5knECIY-C-jtAgAAAIA"]
[Sat Apr 18 09:34:47.640474 2026] [:error] [pid 34290:tid 34335] [client 4.211.104.36:46201] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeLftxqX6WpmmAXOBi-DUgAAAdA"]
[Sat Apr 18 09:34:48.422762 2026] [:error] [pid 34288:tid 34293] [client 4.211.104.36:40698] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeLfuOTIiy__PtiLmplhxQAAAYE"]
[Sat Apr 18 09:34:49.464131 2026] [:error] [pid 34288:tid 34298] [client 4.211.104.36:62658] [client 4.211.104.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeLfueTIiy__PtiLmplhygAAAYY"]
[Sat Apr 18 09:34:50.279114 2026] [:error] [pid 9865:tid 9943] [client 4.211.104.36:43261] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "aeLfuqzb5knECIY-C-jtBwAAAIY"]
[Sat Apr 18 09:34:51.304270 2026] [:error] [pid 34288:tid 34302] [client 4.211.104.36:62691] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "aeLfu-TIiy__PtiLmplh1QAAAYo"]
[Sat Apr 18 09:34:52.189332 2026] [:error] [pid 9864:tid 9906] [client 4.211.104.36:54158] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "aeLfvICFeowknfXHM7ll3wAAAEE"]
[Sat Apr 18 09:34:52.777360 2026] [:error] [pid 34288:tid 34307] [client 4.211.104.36:44366] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "aeLfvOTIiy__PtiLmplh3wAAAY8"]
[Sat Apr 18 09:34:53.479965 2026] [:error] [pid 34288:tid 34301] [client 4.211.104.36:46481] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeLfveTIiy__PtiLmplh5AAAAYk"]
[Sat Apr 18 09:34:54.391336 2026] [:error] [pid 34288:tid 34303] [client 4.211.104.36:54202] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeLfvuTIiy__PtiLmplh5wAAAYs"]
[Sat Apr 18 09:34:55.198359 2026] [:error] [pid 34288:tid 34295] [client 4.211.104.36:54149] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeLfv-TIiy__PtiLmplh7QAAAYM"]
[Sat Apr 18 09:34:55.864599 2026] [:error] [pid 9865:tid 9952] [client 4.211.104.36:46520] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeLfv6zb5knECIY-C-jtCgAAAI8"]
[Sat Apr 18 09:34:57.072607 2026] [:error] [pid 9970:tid 9984] [client 4.211.104.36:65198] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeLfwSYdRLRhVmaIMx0aAQAAAMo"]
[Sat Apr 18 09:34:58.283166 2026] [:error] [pid 9863:tid 9891] [client 4.211.104.36:4871] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeLfwjjjiypiFrTucbI_2AAAABI"]
[Sat Apr 18 09:34:59.407828 2026] [:error] [pid 9863:tid 9894] [client 4.211.104.36:60495] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeLfwzjjiypiFrTucbI_2QAAABU"]
[Sat Apr 18 09:34:59.987913 2026] [:error] [pid 34237:tid 34245] [client 4.211.104.36:53516] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeLfwxBmX4Wq5a6rxfYFcAAAAUY"]
[Sat Apr 18 09:35:00.917462 2026] [:error] [pid 9863:tid 9877] [client 4.211.104.36:48817] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/prv8.php"] [unique_id "aeLfxDjjiypiFrTucbI_2wAAAAQ"]
[Sat Apr 18 09:35:02.136781 2026] [:error] [pid 34237:tid 34262] [client 4.211.104.36:44038] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/prv8.php"] [unique_id "aeLfxhBmX4Wq5a6rxfYFcwAAAVc"]
[Sat Apr 18 09:35:03.123930 2026] [:error] [pid 9970:tid 9993] [client 4.211.104.36:62678] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/prv8.php"] [unique_id "aeLfxyYdRLRhVmaIMx0aEAAAANM"]
[Sat Apr 18 09:35:03.646681 2026] [:error] [pid 34288:tid 34294] [client 4.211.104.36:48805] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/prv8.php"] [unique_id "aeLfx-TIiy__PtiLmplh-gAAAYI"]
[Sat Apr 18 09:35:04.308144 2026] [:error] [pid 34237:tid 34253] [client 4.211.104.36:53529] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aeLfyBBmX4Wq5a6rxfYFfAAAAU4"]
[Sat Apr 18 09:35:05.180316 2026] [:error] [pid 34237:tid 34243] [client 4.211.104.36:55342] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aeLfyRBmX4Wq5a6rxfYFfwAAAUQ"]
[Sat Apr 18 09:35:06.114366 2026] [:error] [pid 34237:tid 34248] [client 4.211.104.36:46480] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aeLfyhBmX4Wq5a6rxfYFggAAAUk"]
[Sat Apr 18 09:35:06.745913 2026] [:error] [pid 34237:tid 34262] [client 4.211.104.36:41345] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/k.php"] [unique_id "aeLfyhBmX4Wq5a6rxfYFgwAAAVc"]
[Sat Apr 18 09:35:07.391204 2026] [:error] [pid 34288:tid 34308] [client 4.211.104.36:44669] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev.php"] [unique_id "aeLfy-TIiy__PtiLmpliIAAAAZA"]
[Sat Apr 18 09:35:08.046045 2026] [:error] [pid 34288:tid 34297] [client 4.211.104.36:53531] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev.php"] [unique_id "aeLfzOTIiy__PtiLmpliJgAAAYU"]
[Sat Apr 18 09:35:09.591896 2026] [:error] [pid 34288:tid 34307] [client 4.211.104.36:55344] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev.php"] [unique_id "aeLfzeTIiy__PtiLmpliKQAAAY8"]
[Sat Apr 18 09:35:10.328277 2026] [:error] [pid 9863:tid 9890] [client 4.211.104.36:60559] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev.php"] [unique_id "aeLfzjjjiypiFrTucbI_8gAAABE"]
[Sat Apr 18 09:35:11.623084 2026] [:error] [pid 9865:tid 9953] [client 4.211.104.36:44090] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bal.php"] [unique_id "aeLfz6zb5knECIY-C-jtHAAAAJA"]
[Sat Apr 18 09:35:12.789770 2026] [:error] [pid 9863:tid 9897] [client 4.211.104.36:55324] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bal.php"] [unique_id "aeLf0DjjiypiFrTucbI_-gAAABg"]
[Sat Apr 18 09:35:13.479257 2026] [:error] [pid 9865:tid 9961] [client 4.211.104.36:47779] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bal.php"] [unique_id "aeLf0azb5knECIY-C-jtIQAAAJg"]
[Sat Apr 18 09:35:14.193666 2026] [:error] [pid 9970:tid 9974] [client 4.211.104.36:41355] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bal.php"] [unique_id "aeLf0iYdRLRhVmaIMx0aFwAAAMA"]
[Sat Apr 18 09:35:15.704660 2026] [:error] [pid 9863:tid 9886] [client 4.211.104.36:49006] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/in.php"] [unique_id "aeLf0zjjiypiFrTucbJAAAAAAA0"]
[Sat Apr 18 09:35:16.366561 2026] [:error] [pid 9970:tid 9993] [client 4.211.104.36:51175] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/in.php"] [unique_id "aeLf1CYdRLRhVmaIMx0aHAAAANM"]
[Sat Apr 18 09:35:17.438128 2026] [:error] [pid 34237:tid 34243] [client 4.211.104.36:5049] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/in.php"] [unique_id "aeLf1RBmX4Wq5a6rxfYFlgAAAUQ"]
[Sat Apr 18 09:35:18.392016 2026] [:error] [pid 34288:tid 34311] [client 4.211.104.36:54233] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/in.php"] [unique_id "aeLf1uTIiy__PtiLmpliOAAAAZM"]
[Sat Apr 18 09:35:19.251785 2026] [:error] [pid 34290:tid 34342] [client 4.211.104.36:48610] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "aeLf1xqX6WpmmAXOBi-DXAAAAdc"]
[Sat Apr 18 09:35:19.999516 2026] [:error] [pid 13023:tid 13049] [client 4.211.104.36:53256] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "aeLf1_1e7hG8DAeABB9gXgAAARg"]
[Sat Apr 18 09:35:20.928862 2026] [:error] [pid 34288:tid 34304] [client 4.211.104.36:53033] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "aeLf2OTIiy__PtiLmpliRAAAAYw"]
[Sat Apr 18 09:35:21.795823 2026] [:error] [pid 9865:tid 9948] [client 4.211.104.36:5036] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "aeLf2azb5knECIY-C-jtLgAAAIs"]
[Sat Apr 18 09:35:22.625959 2026] [:error] [pid 9863:tid 9893] [client 4.211.104.36:5040] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aeLf2jjjiypiFrTucbJACwAAABQ"]
[Sat Apr 18 09:35:24.258631 2026] [:error] [pid 9865:tid 9940] [client 4.211.104.36:4826] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aeLf3Kzb5knECIY-C-jtNwAAAIM"]
[Sat Apr 18 09:35:24.833751 2026] [:error] [pid 34237:tid 34242] [client 4.211.104.36:4101] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aeLf3BBmX4Wq5a6rxfYFnQAAAUM"]
[Sat Apr 18 09:35:25.737318 2026] [:error] [pid 34290:tid 34329] [client 4.211.104.36:59970] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/motu.php"] [unique_id "aeLf3RqX6WpmmAXOBi-DXwAAAco"]
[Sat Apr 18 09:35:26.399945 2026] [:error] [pid 9865:tid 9938] [client 4.211.104.36:44806] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "aeLf3qzb5knECIY-C-jtQQAAAIE"]
[Sat Apr 18 09:35:27.001339 2026] [:error] [pid 9863:tid 9884] [client 4.211.104.36:4522] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "aeLf3zjjiypiFrTucbJAEgAAAAs"]
[Sat Apr 18 09:35:27.637085 2026] [:error] [pid 9970:tid 9990] [client 4.211.104.36:4539] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "aeLf3yYdRLRhVmaIMx0aIwAAANA"]
[Sat Apr 18 09:35:28.325451 2026] [:error] [pid 34237:tid 34261] [client 4.211.104.36:50579] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "aeLf4BBmX4Wq5a6rxfYFpgAAAVY"]
[Sat Apr 18 09:35:28.974738 2026] [:error] [pid 9863:tid 9889] [client 4.211.104.36:53277] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bengi.php"] [unique_id "aeLf4DjjiypiFrTucbJAFwAAABA"]
[Sat Apr 18 09:35:29.991713 2026] [:error] [pid 13023:tid 13041] [client 4.211.104.36:50570] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bengi.php"] [unique_id "aeLf4f1e7hG8DAeABB9gZwAAARA"]
[Sat Apr 18 09:35:31.079181 2026] [:error] [pid 34290:tid 34319] [client 4.211.104.36:4540] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bengi.php"] [unique_id "aeLf4xqX6WpmmAXOBi-DZwAAAcA"]
[Sat Apr 18 09:35:31.934534 2026] [:error] [pid 13023:tid 13031] [client 4.211.104.36:49473] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bengi.php"] [unique_id "aeLf4_1e7hG8DAeABB9gbAAAAQY"]
[Sat Apr 18 09:35:33.269094 2026] [:error] [pid 13023:tid 13038] [client 4.211.104.36:50580] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeLf5f1e7hG8DAeABB9gbgAAAQ0"]
[Sat Apr 18 09:35:34.014059 2026] [:error] [pid 9865:tid 9951] [client 4.211.104.36:49494] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeLf5qzb5knECIY-C-jtVAAAAI4"]
[Sat Apr 18 09:35:34.905593 2026] [:error] [pid 34237:tid 34261] [client 4.211.104.36:56884] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeLf5hBmX4Wq5a6rxfYFswAAAVY"]
[Sat Apr 18 09:35:35.893881 2026] [:error] [pid 13023:tid 13032] [client 4.211.104.36:4490] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeLf5_1e7hG8DAeABB9gdAAAAQc"]
[Sat Apr 18 09:35:56.229537 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 4.211.104.36:4140] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 09:36:14.162515 2026] [:error] [pid 13023:tid 13039] [client 4.211.104.36:4135] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aeLgDv1e7hG8DAeABB9gpAAAAQ4"]
[Sat Apr 18 09:36:15.515440 2026] [:error] [pid 9865:tid 9941] [client 4.211.104.36:43682] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aeLgD6zb5knECIY-C-jtlgAAAIQ"]
[Sat Apr 18 09:36:16.682120 2026] [:error] [pid 34288:tid 34305] [client 4.211.104.36:51931] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aeLgEOTIiy__PtiLmplihwAAAY0"]
[Sat Apr 18 09:36:17.610182 2026] [:error] [pid 13023:tid 13027] [client 4.211.104.36:54212] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class19.php"] [unique_id "aeLgEf1e7hG8DAeABB9gpQAAAQI"]
[Sat Apr 18 09:36:18.485038 2026] [:error] [pid 34237:tid 34244] [client 4.211.104.36:51947] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aeLgEhBmX4Wq5a6rxfYGIgAAAUU"]
[Sat Apr 18 09:36:19.727520 2026] [:error] [pid 34288:tid 34314] [client 4.211.104.36:56485] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aeLgE-TIiy__PtiLmplikQAAAZY"]
[Sat Apr 18 09:36:20.447393 2026] [:error] [pid 34288:tid 34311] [client 4.211.104.36:60576] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aeLgFOTIiy__PtiLmplikwAAAZM"]
[Sat Apr 18 09:36:21.856926 2026] [:error] [pid 13023:tid 13033] [client 4.211.104.36:51944] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class20.php"] [unique_id "aeLgFf1e7hG8DAeABB9gqgAAAQg"]
[Sat Apr 18 09:36:22.628320 2026] [:error] [pid 9863:tid 9893] [client 4.211.104.36:54435] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aeLgFjjjiypiFrTucbJAZwAAABQ"]
[Sat Apr 18 09:36:23.776585 2026] [:error] [pid 9864:tid 9927] [client 4.211.104.36:48594] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aeLgF4CFeowknfXHM7lmAQAAAFU"]
[Sat Apr 18 09:36:24.554428 2026] [:error] [pid 13023:tid 13037] [client 4.211.104.36:65201] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aeLgGP1e7hG8DAeABB9gswAAAQw"]
[Sat Apr 18 09:36:25.330209 2026] [:error] [pid 34288:tid 34309] [client 4.211.104.36:60538] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "aeLgGeTIiy__PtiLmplilwAAAZE"]
[Sat Apr 18 09:36:26.135941 2026] [:error] [pid 9863:tid 9876] [client 4.211.104.36:55321] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "aeLgGjjjiypiFrTucbJAagAAAAM"]
[Sat Apr 18 09:36:26.893136 2026] [:error] [pid 34288:tid 34304] [client 4.211.104.36:46168] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "aeLgGuTIiy__PtiLmplinAAAAYw"]
[Sat Apr 18 09:36:27.544296 2026] [:error] [pid 34237:tid 34263] [client 4.211.104.36:43251] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "aeLgGxBmX4Wq5a6rxfYGQAAAAVg"]
[Sat Apr 18 09:36:28.329626 2026] [:error] [pid 34288:tid 34299] [client 4.211.104.36:50010] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vee.php"] [unique_id "aeLgHOTIiy__PtiLmplipgAAAYc"]
[Sat Apr 18 09:36:29.081943 2026] [:error] [pid 9863:tid 9884] [client 4.211.104.36:52315] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cabs.php"] [unique_id "aeLgHTjjiypiFrTucbJAbwAAAAs"]
[Sat Apr 18 09:36:29.943093 2026] [:error] [pid 13023:tid 13034] [client 4.211.104.36:49599] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cabs.php"] [unique_id "aeLgHf1e7hG8DAeABB9gvAAAAQk"]
[Sat Apr 18 09:36:30.980560 2026] [:error] [pid 34290:tid 34335] [client 4.211.104.36:54491] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cabs.php"] [unique_id "aeLgHhqX6WpmmAXOBi-DlwAAAdA"]
[Sat Apr 18 09:36:31.945806 2026] [:error] [pid 34288:tid 34294] [client 4.211.104.36:47242] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cabs.php"] [unique_id "aeLgH-TIiy__PtiLmplirQAAAYI"]
[Sat Apr 18 09:36:32.695873 2026] [:error] [pid 9865:tid 9939] [client 4.211.104.36:42730] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeLgIKzb5knECIY-C-jtqwAAAII"]
[Sat Apr 18 09:36:33.781558 2026] [:error] [pid 9865:tid 9959] [client 4.211.104.36:4320] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeLgIazb5knECIY-C-jtsAAAAJY"]
[Sat Apr 18 09:36:34.804310 2026] [:error] [pid 9970:tid 9977] [client 4.211.104.36:43512] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeLgIiYdRLRhVmaIMx0adwAAAMM"]
[Sat Apr 18 09:36:35.774933 2026] [:error] [pid 9970:tid 9976] [client 4.211.104.36:41025] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeLgIyYdRLRhVmaIMx0aeQAAAMI"]
[Sat Apr 18 09:36:37.571569 2026] [:error] [pid 34288:tid 34316] [client 4.211.104.36:61329] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x1da.php"] [unique_id "aeLgJeTIiy__PtiLmplisQAAAZg"]
[Sat Apr 18 09:36:38.722560 2026] [:error] [pid 34237:tid 34246] [client 4.211.104.36:41732] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x1da.php"] [unique_id "aeLgJhBmX4Wq5a6rxfYGTwAAAUc"]
[Sat Apr 18 09:36:40.877531 2026] [:error] [pid 9865:tid 9948] [client 4.211.104.36:46249] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x1da.php"] [unique_id "aeLgKKzb5knECIY-C-jtyQAAAIs"]
[Sat Apr 18 09:36:41.953571 2026] [:error] [pid 34237:tid 34249] [client 4.211.104.36:42906] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/x1da.php"] [unique_id "aeLgKRBmX4Wq5a6rxfYGXQAAAUo"]
[Sat Apr 18 09:36:42.696285 2026] [:error] [pid 34288:tid 34298] [client 4.211.104.36:4931] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "aeLgKuTIiy__PtiLmplitgAAAYY"]
[Sat Apr 18 09:36:43.626427 2026] [:error] [pid 34237:tid 34262] [client 4.211.104.36:4953] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "aeLgKxBmX4Wq5a6rxfYGZAAAAVc"]
[Sat Apr 18 09:36:44.544605 2026] [:error] [pid 9970:tid 9993] [client 4.211.104.36:62527] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "aeLgLCYdRLRhVmaIMx0ahgAAANM"]
[Sat Apr 18 09:36:45.251384 2026] [:error] [pid 34290:tid 34332] [client 4.211.104.36:42682] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jp.php"] [unique_id "aeLgLRqX6WpmmAXOBi-DnQAAAc0"]
[Sat Apr 18 09:36:45.926750 2026] [:error] [pid 34237:tid 34257] [client 4.211.104.36:15551] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aeLgLRBmX4Wq5a6rxfYGawAAAVI"]
[Sat Apr 18 09:36:46.668817 2026] [:error] [pid 9864:tid 9927] [client 4.211.104.36:45985] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aeLgLoCFeowknfXHM7lmEgAAAFU"]
[Sat Apr 18 09:36:47.907440 2026] [:error] [pid 34288:tid 34298] [client 4.211.104.36:40327] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aeLgL-TIiy__PtiLmplixgAAAYY"]
[Sat Apr 18 09:36:48.638721 2026] [:error] [pid 9865:tid 9953] [client 4.211.104.36:62471] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "aeLgMKzb5knECIY-C-jtzQAAAJA"]
[Sat Apr 18 13:47:59.081577 2026] [proxy_fcgi:error] [pid 9865:tid 9947] [client 68.219.214.226:12722] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 13:48:08.486846 2026] [proxy_fcgi:error] [pid 9863:tid 9882] [client 68.219.214.226:64980] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 13:48:13.217673 2026] [proxy_fcgi:error] [pid 9865:tid 9943] [client 68.219.214.226:14640] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 13:48:25.766200 2026] [proxy_fcgi:error] [pid 9970:tid 9979] [client 68.219.214.226:5415] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 13:48:26.578461 2026] [proxy_fcgi:error] [pid 9865:tid 9946] [client 68.219.214.226:14365] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 13:48:34.820292 2026] [:error] [pid 9864:tid 9906] [client 68.219.214.226:34819] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w-1.php"] [unique_id "aeMbMoCFeowknfXHM7mnmQAAAEE"]
[Sat Apr 18 13:48:35.341468 2026] [:error] [pid 9865:tid 9943] [client 68.219.214.226:11576] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w-1.php"] [unique_id "aeMbM6zb5knECIY-C-gsiwAAAIY"]
[Sat Apr 18 13:48:35.849419 2026] [:error] [pid 9865:tid 9937] [client 68.219.214.226:36473] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w-1.php"] [unique_id "aeMbM6zb5knECIY-C-gsjQAAAIA"]
[Sat Apr 18 13:48:36.360978 2026] [:error] [pid 9865:tid 9946] [client 68.219.214.226:5317] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w-1.php"] [unique_id "aeMbNKzb5knECIY-C-gskAAAAIk"]
[Sat Apr 18 13:48:36.890664 2026] [:error] [pid 9865:tid 9948] [client 68.219.214.226:13456] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aeMbNKzb5knECIY-C-gslAAAAIs"]
[Sat Apr 18 13:48:37.445354 2026] [:error] [pid 9865:tid 9961] [client 68.219.214.226:34844] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aeMbNazb5knECIY-C-gslwAAAJg"]
[Sat Apr 18 13:48:37.964283 2026] [:error] [pid 9865:tid 9937] [client 68.219.214.226:1275] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aeMbNazb5knECIY-C-gsmQAAAIA"]
[Sat Apr 18 13:48:38.484152 2026] [:error] [pid 9865:tid 9953] [client 68.219.214.226:8892] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwso.php"] [unique_id "aeMbNqzb5knECIY-C-gsngAAAJA"]
[Sat Apr 18 13:48:39.058521 2026] [:error] [pid 9865:tid 9952] [client 68.219.214.226:1223] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbh.php"] [unique_id "aeMbN6zb5knECIY-C-gsnwAAAI8"]
[Sat Apr 18 13:48:39.574644 2026] [:error] [pid 34290:tid 34338] [client 68.219.214.226:14386] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbh.php"] [unique_id "aeMbNxqX6WpmmAXOBi-5HwAAAdM"]
[Sat Apr 18 13:48:40.112500 2026] [:error] [pid 9865:tid 9955] [client 68.219.214.226:13793] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbh.php"] [unique_id "aeMbOKzb5knECIY-C-gsoQAAAJI"]
[Sat Apr 18 13:48:40.641024 2026] [:error] [pid 9865:tid 9951] [client 68.219.214.226:13447] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bbh.php"] [unique_id "aeMbOKzb5knECIY-C-gsowAAAI4"]
[Sat Apr 18 13:48:41.177310 2026] [:error] [pid 9865:tid 9943] [client 68.219.214.226:39498] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aeMbOazb5knECIY-C-gsqgAAAIY"]
[Sat Apr 18 13:48:41.688463 2026] [:error] [pid 9865:tid 9950] [client 68.219.214.226:13855] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aeMbOazb5knECIY-C-gsrQAAAI0"]
[Sat Apr 18 13:48:42.231014 2026] [:error] [pid 34288:tid 34301] [client 68.219.214.226:1298] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aeMbOuTIiy__PtiLmpmc9QAAAYk"]
[Sat Apr 18 13:48:42.803195 2026] [:error] [pid 34290:tid 34328] [client 68.219.214.226:13848] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gool.php"] [unique_id "aeMbOhqX6WpmmAXOBi-5IQAAAck"]
[Sat Apr 18 13:48:43.370767 2026] [:error] [pid 9865:tid 9950] [client 68.219.214.226:1278] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMbO6zb5knECIY-C-gsswAAAI0"]
[Sat Apr 18 13:48:43.886608 2026] [:error] [pid 13023:tid 13035] [client 68.219.214.226:14382] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMbO_1e7hG8DAeABB-48gAAAQo"]
[Sat Apr 18 13:48:44.407244 2026] [:error] [pid 13023:tid 13045] [client 68.219.214.226:11535] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMbPP1e7hG8DAeABB-48wAAARQ"]
[Sat Apr 18 13:48:44.916084 2026] [:error] [pid 9865:tid 9955] [client 68.219.214.226:1235] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMbPKzb5knECIY-C-gstwAAAJI"]
[Sat Apr 18 13:48:45.438533 2026] [:error] [pid 13023:tid 13029] [client 68.219.214.226:1325] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMbPf1e7hG8DAeABB-49AAAAQQ"]
[Sat Apr 18 13:48:45.956016 2026] [:error] [pid 13023:tid 13040] [client 68.219.214.226:5355] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMbPf1e7hG8DAeABB-49gAAAQ8"]
[Sat Apr 18 13:48:46.478746 2026] [:error] [pid 13023:tid 13044] [client 68.219.214.226:1280] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMbPv1e7hG8DAeABB-4-QAAARM"]
[Sat Apr 18 13:48:47.019302 2026] [:error] [pid 13023:tid 13031] [client 68.219.214.226:12050] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMbP_1e7hG8DAeABB-4-wAAAQY"]
[Sat Apr 18 13:48:47.514922 2026] [:error] [pid 9865:tid 9939] [client 68.219.214.226:13455] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMbP6zb5knECIY-C-gsvAAAAII"]
[Sat Apr 18 13:48:48.028715 2026] [:error] [pid 9865:tid 9956] [client 68.219.214.226:39502] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMbQKzb5knECIY-C-gsvQAAAJM"]
[Sat Apr 18 13:48:48.536055 2026] [:error] [pid 9864:tid 9919] [client 68.219.214.226:39530] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMbQICFeowknfXHM7mnngAAAE0"]
[Sat Apr 18 13:48:49.030219 2026] [:error] [pid 34288:tid 34295] [client 68.219.214.226:13837] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMbQeTIiy__PtiLmpmc-AAAAYM"]
[Sat Apr 18 13:48:49.533826 2026] [:error] [pid 9970:tid 9974] [client 68.219.214.226:14856] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpputty.php"] [unique_id "aeMbQSYdRLRhVmaIMx1gDwAAAMA"]
[Sat Apr 18 13:48:50.057390 2026] [:error] [pid 9865:tid 9954] [client 68.219.214.226:11579] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpputty.php"] [unique_id "aeMbQqzb5knECIY-C-gswQAAAJE"]
[Sat Apr 18 13:48:50.565775 2026] [:error] [pid 9865:tid 9946] [client 68.219.214.226:13466] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpputty.php"] [unique_id "aeMbQqzb5knECIY-C-gswwAAAIk"]
[Sat Apr 18 13:48:51.074790 2026] [:error] [pid 9865:tid 9952] [client 68.219.214.226:13847] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpputty.php"] [unique_id "aeMbQ6zb5knECIY-C-gsxwAAAI8"]
[Sat Apr 18 13:48:51.622154 2026] [:error] [pid 9865:tid 9958] [client 68.219.214.226:12032] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dodo.php"] [unique_id "aeMbQ6zb5knECIY-C-gsywAAAJU"]
[Sat Apr 18 13:48:52.133168 2026] [:error] [pid 9865:tid 9944] [client 68.219.214.226:5331] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dodo.php"] [unique_id "aeMbRKzb5knECIY-C-gszQAAAIc"]
[Sat Apr 18 13:48:52.651331 2026] [:error] [pid 9865:tid 9954] [client 68.219.214.226:13446] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dodo.php"] [unique_id "aeMbRKzb5knECIY-C-gs0QAAAJE"]
[Sat Apr 18 13:48:53.198574 2026] [:error] [pid 9864:tid 9926] [client 68.219.214.226:5273] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dodo.php"] [unique_id "aeMbRYCFeowknfXHM7mnoAAAAFQ"]
[Sat Apr 18 13:48:53.708617 2026] [:error] [pid 9865:tid 9942] [client 68.219.214.226:64140] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMbRazb5knECIY-C-gs1gAAAIU"]
[Sat Apr 18 13:48:54.241901 2026] [:error] [pid 9865:tid 9949] [client 68.219.214.226:64128] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMbRqzb5knECIY-C-gs2wAAAIw"]
[Sat Apr 18 13:48:54.763760 2026] [:error] [pid 9863:tid 9887] [client 68.219.214.226:12041] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMbRjjjiypiFrTucbKZiwAAAA4"]
[Sat Apr 18 13:48:55.316459 2026] [:error] [pid 9865:tid 9948] [client 68.219.214.226:1290] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMbR6zb5knECIY-C-gs4AAAAIs"]
[Sat Apr 18 13:48:55.840672 2026] [:error] [pid 9865:tid 9952] [client 68.219.214.226:36418] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMbR6zb5knECIY-C-gs5AAAAI8"]
[Sat Apr 18 13:48:56.396068 2026] [:error] [pid 9865:tid 9951] [client 68.219.214.226:13782] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMbSKzb5knECIY-C-gs5wAAAI4"]
[Sat Apr 18 13:48:56.937202 2026] [:error] [pid 9970:tid 9987] [client 68.219.214.226:13775] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMbSCYdRLRhVmaIMx1gFgAAAM0"]
[Sat Apr 18 13:48:57.478110 2026] [:error] [pid 13023:tid 13026] [client 68.219.214.226:6371] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMbSf1e7hG8DAeABB-5AAAAAQE"]
[Sat Apr 18 13:48:58.005988 2026] [:error] [pid 9863:tid 9896] [client 68.219.214.226:13485] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Marvins.php"] [unique_id "aeMbSjjjiypiFrTucbKZjAAAABc"]
[Sat Apr 18 13:48:58.542108 2026] [:error] [pid 13023:tid 13035] [client 68.219.214.226:12039] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Marvins.php"] [unique_id "aeMbSv1e7hG8DAeABB-5BwAAAQo"]
[Sat Apr 18 13:48:59.098048 2026] [:error] [pid 13023:tid 13028] [client 68.219.214.226:8677] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Marvins.php"] [unique_id "aeMbS_1e7hG8DAeABB-5CAAAAQM"]
[Sat Apr 18 13:48:59.651779 2026] [:error] [pid 9863:tid 9876] [client 68.219.214.226:5343] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Marvins.php"] [unique_id "aeMbSzjjiypiFrTucbKZjgAAAAM"]
[Sat Apr 18 13:49:00.176847 2026] [:error] [pid 9863:tid 9894] [client 68.219.214.226:8849] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/astab.php"] [unique_id "aeMbTDjjiypiFrTucbKZjwAAABU"]
[Sat Apr 18 13:49:00.716552 2026] [:error] [pid 9970:tid 9986] [client 68.219.214.226:8695] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/astab.php"] [unique_id "aeMbTCYdRLRhVmaIMx1gGwAAAMw"]
[Sat Apr 18 13:49:01.209588 2026] [:error] [pid 13023:tid 13039] [client 68.219.214.226:13498] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/astab.php"] [unique_id "aeMbTf1e7hG8DAeABB-5DgAAAQ4"]
[Sat Apr 18 13:49:01.750783 2026] [:error] [pid 9864:tid 9906] [client 68.219.214.226:8845] [client 68.219.214.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/astab.php"] [unique_id "aeMbTYCFeowknfXHM7mnpAAAAEE"]
[Sat Apr 18 22:24:49.020916 2026] [proxy_fcgi:error] [pid 13023:tid 13025] [client 72.146.12.65:62211] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:24:54.372053 2026] [proxy_fcgi:error] [pid 9970:tid 9984] [client 72.146.12.65:62153] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:25:06.263077 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 72.146.12.65:62238] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:25:07.041214 2026] [proxy_fcgi:error] [pid 32678:tid 32728] [client 72.146.12.65:62213] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:25:13.264287 2026] [proxy_fcgi:error] [pid 9970:tid 9992] [client 72.146.12.65:62269] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:25:22.020298 2026] [:error] [pid 9864:tid 9924] [client 72.146.12.65:62228] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ckk.php"] [unique_id "aeOUUoCFeowknfXHM7ku8gAAAFI"]
[Sat Apr 18 22:25:22.534807 2026] [:error] [pid 9865:tid 9955] [client 72.146.12.65:62271] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ckk.php"] [unique_id "aeOUUqzb5knECIY-C-ieRgAAAJI"]
[Sat Apr 18 22:25:23.023834 2026] [:error] [pid 13023:tid 13042] [client 72.146.12.65:62255] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ckk.php"] [unique_id "aeOUU_1e7hG8DAeABB83RwAAARE"]
[Sat Apr 18 22:25:23.515061 2026] [:error] [pid 9864:tid 9907] [client 72.146.12.65:62230] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ckk.php"] [unique_id "aeOUU4CFeowknfXHM7ku9AAAAEI"]
[Sat Apr 18 22:25:23.991213 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:62261] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "aeOUUyYdRLRhVmaIMx3aLQAAAMQ"]
[Sat Apr 18 22:25:24.477810 2026] [:error] [pid 9970:tid 9974] [client 72.146.12.65:62253] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "aeOUVCYdRLRhVmaIMx3aMAAAAMA"]
[Sat Apr 18 22:25:24.956325 2026] [:error] [pid 9865:tid 9954] [client 72.146.12.65:62211] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "aeOUVKzb5knECIY-C-ieTAAAAJE"]
[Sat Apr 18 22:25:25.435969 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:62169] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/baixy.php"] [unique_id "aeOUVf1e7hG8DAeABB83SwAAARI"]
[Sat Apr 18 22:25:25.917372 2026] [:error] [pid 13023:tid 13031] [client 72.146.12.65:62234] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8xyz.php"] [unique_id "aeOUVf1e7hG8DAeABB83TQAAAQY"]
[Sat Apr 18 22:25:26.404364 2026] [:error] [pid 9865:tid 9961] [client 72.146.12.65:62265] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8xyz.php"] [unique_id "aeOUVqzb5knECIY-C-ieUgAAAJg"]
[Sat Apr 18 22:25:26.894474 2026] [:error] [pid 13023:tid 13037] [client 72.146.12.65:62256] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8xyz.php"] [unique_id "aeOUVv1e7hG8DAeABB83TwAAAQw"]
[Sat Apr 18 22:25:27.370198 2026] [:error] [pid 13023:tid 13028] [client 72.146.12.65:62146] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8xyz.php"] [unique_id "aeOUV_1e7hG8DAeABB83UAAAAQM"]
[Sat Apr 18 22:25:27.897988 2026] [:error] [pid 13023:tid 13045] [client 72.146.12.65:62229] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/106.php"] [unique_id "aeOUV_1e7hG8DAeABB83VgAAARQ"]
[Sat Apr 18 22:25:28.391639 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:62249] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/106.php"] [unique_id "aeOUWCYdRLRhVmaIMx3aPAAAAMw"]
[Sat Apr 18 22:25:28.905104 2026] [:error] [pid 34290:tid 34342] [client 72.146.12.65:62205] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/106.php"] [unique_id "aeOUWBqX6WpmmAXOBi8qGAAAAdc"]
[Sat Apr 18 22:25:29.379015 2026] [:error] [pid 13023:tid 13026] [client 72.146.12.65:62163] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/106.php"] [unique_id "aeOUWf1e7hG8DAeABB83WgAAAQE"]
[Sat Apr 18 22:25:29.880072 2026] [:error] [pid 9865:tid 9943] [client 72.146.12.65:62267] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeOUWazb5knECIY-C-ieXAAAAIY"]
[Sat Apr 18 22:25:30.352335 2026] [:error] [pid 32678:tid 32715] [client 72.146.12.65:62258] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeOUWhUlAXU_ZWUu5y8MsAAAAog"]
[Sat Apr 18 22:25:30.818922 2026] [:error] [pid 13023:tid 13031] [client 72.146.12.65:62260] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeOUWv1e7hG8DAeABB83XwAAAQY"]
[Sat Apr 18 22:25:31.291606 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:62166] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeOUW_1e7hG8DAeABB83ZgAAAQo"]
[Sat Apr 18 22:25:31.783492 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:62266] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aeOUW_1e7hG8DAeABB83bgAAARI"]
[Sat Apr 18 22:25:32.261844 2026] [:error] [pid 32677:tid 32688] [client 72.146.12.65:62217] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aeOUXBngmUE3LdC-wP7szQAAAkg"]
[Sat Apr 18 22:25:32.731889 2026] [:error] [pid 13023:tid 13030] [client 72.146.12.65:62186] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aeOUXP1e7hG8DAeABB83dQAAAQU"]
[Sat Apr 18 22:25:33.212546 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:62145] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aeOUXf1e7hG8DAeABB83eQAAARc"]
[Sat Apr 18 22:25:33.678416 2026] [:error] [pid 13023:tid 13038] [client 72.146.12.65:62160] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aeOUXf1e7hG8DAeABB83fAAAAQ0"]
[Sat Apr 18 22:25:34.160303 2026] [:error] [pid 13023:tid 13037] [client 72.146.12.65:62251] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aeOUXv1e7hG8DAeABB83gQAAAQw"]
[Sat Apr 18 22:25:34.638175 2026] [:error] [pid 32647:tid 32656] [client 72.146.12.65:62151] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aeOUXkkxooM0iRo6e54vHgAAAgY"]
[Sat Apr 18 22:25:35.130670 2026] [:error] [pid 34288:tid 34309] [client 72.146.12.65:62182] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aeOUX-TIiy__PtiLmpncEwAAAZE"]
[Sat Apr 18 22:25:35.622317 2026] [:error] [pid 9863:tid 9892] [client 72.146.12.65:62168] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "aeOUXzjjiypiFrTucbLXqQAAABM"]
[Sat Apr 18 22:25:36.091874 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:62218] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "aeOUYCYdRLRhVmaIMx3aQAAAAMw"]
[Sat Apr 18 22:25:36.559631 2026] [:error] [pid 9970:tid 9996] [client 72.146.12.65:62264] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "aeOUYCYdRLRhVmaIMx3aRwAAANY"]
[Sat Apr 18 22:25:37.029781 2026] [:error] [pid 9970:tid 9997] [client 72.146.12.65:62226] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/41.php"] [unique_id "aeOUYSYdRLRhVmaIMx3aSAAAANc"]
[Sat Apr 18 22:25:37.505062 2026] [:error] [pid 32678:tid 32727] [client 72.146.12.65:62208] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aeOUYRUlAXU_ZWUu5y8MtQAAApQ"]
[Sat Apr 18 22:25:37.971576 2026] [:error] [pid 32678:tid 32716] [client 72.146.12.65:62239] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aeOUYRUlAXU_ZWUu5y8MtwAAAok"]
[Sat Apr 18 22:25:38.442000 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:62188] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aeOUYiYdRLRhVmaIMx3aSQAAAMg"]
[Sat Apr 18 22:25:38.947823 2026] [:error] [pid 9865:tid 9954] [client 72.146.12.65:62245] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aeOUYqzb5knECIY-C-ieZAAAAJE"]
[Sat Apr 18 22:25:39.438460 2026] [:error] [pid 9864:tid 9913] [client 72.146.12.65:62233] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aeOUY4CFeowknfXHM7ku_wAAAEc"]
[Sat Apr 18 22:25:39.912568 2026] [:error] [pid 9970:tid 9992] [client 72.146.12.65:62180] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aeOUYyYdRLRhVmaIMx3aSwAAANI"]
[Sat Apr 18 22:25:40.385095 2026] [:error] [pid 32677:tid 32689] [client 72.146.12.65:62270] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aeOUZBngmUE3LdC-wP7s0wAAAkk"]
[Sat Apr 18 22:25:40.874421 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:62155] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "aeOUZP1e7hG8DAeABB83lQAAARU"]
[Sat Apr 18 22:25:41.346725 2026] [:error] [pid 13023:tid 13045] [client 72.146.12.65:62225] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aeOUZf1e7hG8DAeABB83oAAAARQ"]
[Sat Apr 18 22:25:41.811621 2026] [:error] [pid 34290:tid 34337] [client 72.146.12.65:62173] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aeOUZRqX6WpmmAXOBi8qHAAAAdI"]
[Sat Apr 18 22:25:42.292892 2026] [:error] [pid 32678:tid 32724] [client 72.146.12.65:62175] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aeOUZhUlAXU_ZWUu5y8MxwAAApE"]
[Sat Apr 18 22:25:42.779203 2026] [:error] [pid 9864:tid 9923] [client 72.146.12.65:62158] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "aeOUZoCFeowknfXHM7kvAgAAAFE"]
[Sat Apr 18 22:25:43.267548 2026] [:error] [pid 9863:tid 9886] [client 72.146.12.65:62191] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjq.php"] [unique_id "aeOUZzjjiypiFrTucbLXqwAAAA0"]
[Sat Apr 18 22:25:43.760170 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:62248] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjq.php"] [unique_id "aeOUZyYdRLRhVmaIMx3aUgAAAM8"]
[Sat Apr 18 22:25:44.250012 2026] [:error] [pid 13023:tid 13032] [client 72.146.12.65:62159] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjq.php"] [unique_id "aeOUaP1e7hG8DAeABB83rAAAAQc"]
[Sat Apr 18 22:25:44.717339 2026] [:error] [pid 9970:tid 9994] [client 72.146.12.65:62269] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mjq.php"] [unique_id "aeOUaCYdRLRhVmaIMx3aWQAAANQ"]
[Sat Apr 18 22:25:45.193524 2026] [:error] [pid 9864:tid 9920] [client 72.146.12.65:62147] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aeOUaYCFeowknfXHM7kvCQAAAE4"]
[Sat Apr 18 22:25:45.675710 2026] [:error] [pid 32678:tid 32711] [client 72.146.12.65:62195] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aeOUaRUlAXU_ZWUu5y8MyQAAAoQ"]
[Sat Apr 18 22:25:46.159917 2026] [:error] [pid 9864:tid 9912] [client 72.146.12.65:62164] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aeOUaoCFeowknfXHM7kvDQAAAEY"]
[Sat Apr 18 22:25:46.628681 2026] [:error] [pid 32678:tid 32719] [client 72.146.12.65:62144] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zu.php"] [unique_id "aeOUahUlAXU_ZWUu5y8MzAAAAow"]
[Sat Apr 18 22:25:47.110400 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:11212] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws53.php"] [unique_id "aeOUa_1e7hG8DAeABB83sQAAARg"]
[Sat Apr 18 22:25:47.578939 2026] [:error] [pid 9865:tid 9943] [client 72.146.12.65:62210] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws53.php"] [unique_id "aeOUa6zb5knECIY-C-iedAAAAIY"]
[Sat Apr 18 22:25:48.045849 2026] [:error] [pid 9865:tid 9958] [client 72.146.12.65:62206] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws53.php"] [unique_id "aeOUbKzb5knECIY-C-ieegAAAJU"]
[Sat Apr 18 22:25:48.549185 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:62268] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws53.php"] [unique_id "aeOUbCYdRLRhVmaIMx3aYgAAAMs"]
[Sat Apr 18 22:25:49.014617 2026] [:error] [pid 34290:tid 34341] [client 72.146.12.65:62223] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws56.php"] [unique_id "aeOUbRqX6WpmmAXOBi8qIQAAAdY"]
[Sat Apr 18 22:25:49.493866 2026] [:error] [pid 32647:tid 32670] [client 72.146.12.65:62162] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws56.php"] [unique_id "aeOUbUkxooM0iRo6e54vJQAAAhQ"]
[Sat Apr 18 22:25:49.959053 2026] [:error] [pid 9865:tid 9960] [client 72.146.12.65:62149] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws56.php"] [unique_id "aeOUbazb5knECIY-C-iefAAAAJc"]
[Sat Apr 18 22:25:50.437271 2026] [:error] [pid 9865:tid 9942] [client 72.146.12.65:62209] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws56.php"] [unique_id "aeOUbqzb5knECIY-C-iefwAAAIU"]
[Sat Apr 18 22:25:50.906835 2026] [:error] [pid 9865:tid 9959] [client 72.146.12.65:62150] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws58.php"] [unique_id "aeOUbqzb5knECIY-C-ieggAAAJY"]
[Sat Apr 18 22:25:51.408404 2026] [:error] [pid 9865:tid 9957] [client 72.146.12.65:62189] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws58.php"] [unique_id "aeOUb6zb5knECIY-C-ieiwAAAJQ"]
[Sat Apr 18 22:25:51.876455 2026] [:error] [pid 9865:tid 9955] [client 72.146.12.65:62259] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws58.php"] [unique_id "aeOUb6zb5knECIY-C-iejgAAAJI"]
[Sat Apr 18 22:25:52.356269 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:62161] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws58.php"] [unique_id "aeOUcCYdRLRhVmaIMx3aagAAANA"]
[Sat Apr 18 22:25:52.828098 2026] [:error] [pid 9864:tid 9913] [client 72.146.12.65:62263] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws59.php"] [unique_id "aeOUcICFeowknfXHM7kvEQAAAEc"]
[Sat Apr 18 22:25:53.294354 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:11218] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws59.php"] [unique_id "aeOUcSYdRLRhVmaIMx3acQAAAMg"]
[Sat Apr 18 22:25:53.765508 2026] [:error] [pid 9970:tid 9993] [client 72.146.12.65:11226] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws59.php"] [unique_id "aeOUcSYdRLRhVmaIMx3adQAAANM"]
[Sat Apr 18 22:25:54.235396 2026] [:error] [pid 9970:tid 9983] [client 72.146.12.65:11145] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws59.php"] [unique_id "aeOUciYdRLRhVmaIMx3aeAAAAMk"]
[Sat Apr 18 22:25:54.721489 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:62167] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeOUciYdRLRhVmaIMx3aeQAAAMw"]
[Sat Apr 18 22:25:55.189831 2026] [:error] [pid 9865:tid 9950] [client 72.146.12.65:62219] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeOUc6zb5knECIY-C-ielQAAAI0"]
[Sat Apr 18 22:25:55.662348 2026] [:error] [pid 34288:tid 34315] [client 72.146.12.65:11213] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeOUc-TIiy__PtiLmpncJgAAAZc"]
[Sat Apr 18 22:25:56.132978 2026] [:error] [pid 9970:tid 9987] [client 72.146.12.65:62181] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeOUdCYdRLRhVmaIMx3ahQAAAM0"]
[Sat Apr 18 22:25:56.596715 2026] [:error] [pid 32678:tid 32712] [client 72.146.12.65:62178] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "aeOUdBUlAXU_ZWUu5y8M1QAAAoU"]
[Sat Apr 18 22:25:57.083298 2026] [:error] [pid 32678:tid 32728] [client 72.146.12.65:62198] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "aeOUdRUlAXU_ZWUu5y8M2QAAApU"]
[Sat Apr 18 22:25:57.553998 2026] [:error] [pid 9865:tid 9957] [client 72.146.12.65:11245] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "aeOUdazb5knECIY-C-ielgAAAJQ"]
[Sat Apr 18 22:25:58.027819 2026] [:error] [pid 32678:tid 32707] [client 72.146.12.65:62257] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "aeOUdhUlAXU_ZWUu5y8M3AAAAoA"]
[Sat Apr 18 22:25:58.505695 2026] [:error] [pid 34290:tid 34321] [client 72.146.12.65:62236] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mds.php"] [unique_id "aeOUdhqX6WpmmAXOBi8qJQAAAcI"]
[Sat Apr 18 22:25:58.974395 2026] [:error] [pid 9970:tid 9977] [client 72.146.12.65:62241] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mds.php"] [unique_id "aeOUdiYdRLRhVmaIMx3akAAAAMM"]
[Sat Apr 18 22:25:59.459301 2026] [:error] [pid 13023:tid 13026] [client 72.146.12.65:11229] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mds.php"] [unique_id "aeOUd_1e7hG8DAeABB83vgAAAQE"]
[Sat Apr 18 22:25:59.925851 2026] [:error] [pid 13023:tid 13033] [client 72.146.12.65:11217] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mds.php"] [unique_id "aeOUd_1e7hG8DAeABB83wQAAAQg"]
[Sat Apr 18 22:26:00.411316 2026] [:error] [pid 13023:tid 13038] [client 72.146.12.65:62216] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aeOUeP1e7hG8DAeABB83xgAAAQ0"]
[Sat Apr 18 22:26:00.892318 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:11203] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aeOUeCYdRLRhVmaIMx3akgAAAMo"]
[Sat Apr 18 22:26:01.367016 2026] [:error] [pid 32647:tid 32658] [client 72.146.12.65:11206] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aeOUeUkxooM0iRo6e54vMgAAAgg"]
[Sat Apr 18 22:26:01.838591 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:62179] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aeOUef1e7hG8DAeABB83zAAAARI"]
[Sat Apr 18 22:26:02.329655 2026] [:error] [pid 13023:tid 13032] [client 72.146.12.65:62152] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iov.php"] [unique_id "aeOUev1e7hG8DAeABB83zwAAAQc"]
[Sat Apr 18 22:26:02.795448 2026] [:error] [pid 13023:tid 13026] [client 72.146.12.65:11230] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iov.php"] [unique_id "aeOUev1e7hG8DAeABB830QAAAQE"]
[Sat Apr 18 22:26:03.282833 2026] [:error] [pid 32678:tid 32720] [client 72.146.12.65:11208] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iov.php"] [unique_id "aeOUexUlAXU_ZWUu5y8M4gAAAo0"]
[Sat Apr 18 22:26:03.751999 2026] [:error] [pid 13023:tid 13025] [client 72.146.12.65:62177] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iov.php"] [unique_id "aeOUe_1e7hG8DAeABB830wAAAQA"]
[Sat Apr 18 22:26:04.216553 2026] [:error] [pid 9970:tid 9987] [client 72.146.12.65:11219] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jodohghi.php"] [unique_id "aeOUfCYdRLRhVmaIMx3alQAAAM0"]
[Sat Apr 18 22:26:04.683339 2026] [:error] [pid 32678:tid 32722] [client 72.146.12.65:62232] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jodohghi.php"] [unique_id "aeOUfBUlAXU_ZWUu5y8M9QAAAo8"]
[Sat Apr 18 22:26:05.149977 2026] [:error] [pid 9863:tid 9885] [client 72.146.12.65:11204] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jodohghi.php"] [unique_id "aeOUfTjjiypiFrTucbLXtAAAAAw"]
[Sat Apr 18 22:26:05.660100 2026] [:error] [pid 34288:tid 34313] [client 72.146.12.65:11220] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jodohghi.php"] [unique_id "aeOUfeTIiy__PtiLmpncKAAAAZU"]
[Sat Apr 18 22:26:06.127810 2026] [:error] [pid 13023:tid 13031] [client 72.146.12.65:62170] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeOUfv1e7hG8DAeABB84BQAAAQY"]
[Sat Apr 18 22:26:06.611772 2026] [:error] [pid 32678:tid 32721] [client 72.146.12.65:62156] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeOUfhUlAXU_ZWUu5y8NDQAAAo4"]
[Sat Apr 18 22:26:07.091843 2026] [:error] [pid 9865:tid 9947] [client 72.146.12.65:62192] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeOUf6zb5knECIY-C-ienAAAAIo"]
[Sat Apr 18 22:26:07.559877 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:11227] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeOUfyYdRLRhVmaIMx3amgAAAMQ"]
[Sat Apr 18 22:26:08.057669 2026] [:error] [pid 9863:tid 9888] [client 72.146.12.65:11207] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "aeOUgDjjiypiFrTucbLXuQAAAA8"]
[Sat Apr 18 22:26:08.526066 2026] [:error] [pid 9865:tid 9950] [client 72.146.12.65:62174] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "aeOUgKzb5knECIY-C-ienwAAAI0"]
[Sat Apr 18 22:26:08.996436 2026] [:error] [pid 9970:tid 9980] [client 72.146.12.65:62252] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "aeOUgCYdRLRhVmaIMx3angAAAMY"]
[Sat Apr 18 22:26:09.477688 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:11142] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "aeOUgSYdRLRhVmaIMx3aoAAAANA"]
[Sat Apr 18 22:26:09.970116 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:62172] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ftde.php"] [unique_id "aeOUgSYdRLRhVmaIMx3aowAAAMs"]
[Sat Apr 18 22:26:10.442328 2026] [:error] [pid 9970:tid 9998] [client 72.146.12.65:62222] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ftde.php"] [unique_id "aeOUgiYdRLRhVmaIMx3aqQAAANg"]
[Sat Apr 18 22:26:10.926983 2026] [:error] [pid 32677:tid 32689] [client 72.146.12.65:62148] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ftde.php"] [unique_id "aeOUghngmUE3LdC-wP7s2gAAAkk"]
[Sat Apr 18 22:26:11.405652 2026] [:error] [pid 9865:tid 9943] [client 72.146.12.65:62199] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ftde.php"] [unique_id "aeOUg6zb5knECIY-C-ieogAAAIY"]
[Sat Apr 18 22:26:11.887920 2026] [:error] [pid 34290:tid 34319] [client 72.146.12.65:62220] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aeOUgxqX6WpmmAXOBi8qMQAAAcA"]
[Sat Apr 18 22:26:12.354906 2026] [:error] [pid 32678:tid 32731] [client 72.146.12.65:62183] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aeOUhBUlAXU_ZWUu5y8NEQAAApg"]
[Sat Apr 18 22:26:12.852764 2026] [:error] [pid 32677:tid 32693] [client 72.146.12.65:11205] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aeOUhBngmUE3LdC-wP7s3wAAAk0"]
[Sat Apr 18 22:26:13.330823 2026] [:error] [pid 9970:tid 9980] [client 72.146.12.65:62231] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kbfr.php"] [unique_id "aeOUhSYdRLRhVmaIMx3arwAAAMY"]
[Sat Apr 18 22:26:13.813514 2026] [:error] [pid 9865:tid 9944] [client 72.146.12.65:11153] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abhjr.php"] [unique_id "aeOUhazb5knECIY-C-iepwAAAIc"]
[Sat Apr 18 22:26:14.288636 2026] [:error] [pid 9865:tid 9946] [client 72.146.12.65:62165] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abhjr.php"] [unique_id "aeOUhqzb5knECIY-C-ieqQAAAIk"]
[Sat Apr 18 22:26:14.783210 2026] [:error] [pid 9865:tid 9939] [client 72.146.12.65:11244] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abhjr.php"] [unique_id "aeOUhqzb5knECIY-C-iergAAAII"]
[Sat Apr 18 22:26:15.254996 2026] [:error] [pid 9865:tid 9951] [client 72.146.12.65:62237] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abhjr.php"] [unique_id "aeOUh6zb5knECIY-C-iesQAAAI4"]
[Sat Apr 18 22:26:15.734071 2026] [:error] [pid 32647:tid 32665] [client 72.146.12.65:11238] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anczg.php"] [unique_id "aeOUh0kxooM0iRo6e54vSQAAAg8"]
[Sat Apr 18 22:26:16.214356 2026] [:error] [pid 9970:tid 9993] [client 72.146.12.65:11236] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anczg.php"] [unique_id "aeOUiCYdRLRhVmaIMx3atQAAANM"]
[Sat Apr 18 22:26:16.691193 2026] [:error] [pid 32647:tid 32673] [client 72.146.12.65:11242] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anczg.php"] [unique_id "aeOUiEkxooM0iRo6e54vSwAAAhc"]
[Sat Apr 18 22:26:17.170301 2026] [:error] [pid 9865:tid 9953] [client 72.146.12.65:11215] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/anczg.php"] [unique_id "aeOUiazb5knECIY-C-ietgAAAJA"]
[Sat Apr 18 22:26:17.639438 2026] [:error] [pid 9863:tid 9894] [client 72.146.12.65:62194] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ardsw.php"] [unique_id "aeOUiTjjiypiFrTucbLXvwAAABU"]
[Sat Apr 18 22:26:18.106286 2026] [:error] [pid 9864:tid 9928] [client 72.146.12.65:11155] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ardsw.php"] [unique_id "aeOUioCFeowknfXHM7kvJAAAAFY"]
[Sat Apr 18 22:26:18.593553 2026] [:error] [pid 9865:tid 9939] [client 72.146.12.65:62157] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ardsw.php"] [unique_id "aeOUiqzb5knECIY-C-ieuwAAAII"]
[Sat Apr 18 22:26:19.069732 2026] [:error] [pid 34290:tid 34326] [client 72.146.12.65:62171] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ardsw.php"] [unique_id "aeOUixqX6WpmmAXOBi8qMwAAAcc"]
[Sat Apr 18 22:26:19.538077 2026] [:error] [pid 34290:tid 34322] [client 72.146.12.65:11257] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atfis.php"] [unique_id "aeOUixqX6WpmmAXOBi8qNwAAAcM"]
[Sat Apr 18 22:26:38.267728 2026] [proxy_fcgi:error] [pid 32678:tid 32709] [client 72.146.12.65:62173] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:26:52.758845 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 72.146.12.65:62250] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:26:53.299694 2026] [proxy_fcgi:error] [pid 32677:tid 32698] [client 72.146.12.65:11251] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:27:07.720313 2026] [proxy_fcgi:error] [pid 32678:tid 32730] [client 72.146.12.65:62156] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:27:12.730754 2026] [:error] [pid 9864:tid 9929] [client 72.146.12.65:62204] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqagu.php"] [unique_id "aeOUwICFeowknfXHM7kvXgAAAFc"]
[Sat Apr 18 22:27:13.198686 2026] [:error] [pid 9865:tid 9943] [client 72.146.12.65:11233] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqagu.php"] [unique_id "aeOUwazb5knECIY-C-ie4gAAAIY"]
[Sat Apr 18 22:27:13.692634 2026] [:error] [pid 9865:tid 9951] [client 72.146.12.65:62184] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqagu.php"] [unique_id "aeOUwazb5knECIY-C-ie5QAAAI4"]
[Sat Apr 18 22:27:14.163397 2026] [:error] [pid 32677:tid 32684] [client 72.146.12.65:11253] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dqagu.php"] [unique_id "aeOUwhngmUE3LdC-wP7tFAAAAkQ"]
[Sat Apr 18 22:27:14.641225 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:62214] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/druqr.php"] [unique_id "aeOUwiYdRLRhVmaIMx3bDwAAANA"]
[Sat Apr 18 22:27:15.107545 2026] [:error] [pid 9970:tid 9980] [client 72.146.12.65:11188] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/druqr.php"] [unique_id "aeOUwyYdRLRhVmaIMx3bEgAAAMY"]
[Sat Apr 18 22:27:15.583471 2026] [:error] [pid 13023:tid 13036] [client 72.146.12.65:62244] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/druqr.php"] [unique_id "aeOUw_1e7hG8DAeABB84cgAAAQs"]
[Sat Apr 18 22:27:16.048944 2026] [:error] [pid 9863:tid 9896] [client 72.146.12.65:62203] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/druqr.php"] [unique_id "aeOUxDjjiypiFrTucbLX1gAAABc"]
[Sat Apr 18 22:27:16.532016 2026] [:error] [pid 9970:tid 9979] [client 72.146.12.65:62187] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dyxbc.php"] [unique_id "aeOUxCYdRLRhVmaIMx3bHQAAAMU"]
[Sat Apr 18 22:27:16.998852 2026] [:error] [pid 32647:tid 32662] [client 72.146.12.65:11200] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dyxbc.php"] [unique_id "aeOUxEkxooM0iRo6e54vagAAAgw"]
[Sat Apr 18 22:27:17.464571 2026] [:error] [pid 13023:tid 13044] [client 72.146.12.65:62242] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dyxbc.php"] [unique_id "aeOUxf1e7hG8DAeABB84dQAAARM"]
[Sat Apr 18 22:27:17.953151 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:11237] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dyxbc.php"] [unique_id "aeOUxSYdRLRhVmaIMx3bJgAAAMo"]
[Sat Apr 18 22:27:18.430574 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:11173] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eapjf.php"] [unique_id "aeOUxiYdRLRhVmaIMx3bKgAAAMQ"]
[Sat Apr 18 22:27:18.907950 2026] [:error] [pid 32647:tid 32668] [client 72.146.12.65:11225] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eapjf.php"] [unique_id "aeOUxkkxooM0iRo6e54vbwAAAhI"]
[Sat Apr 18 22:27:19.376836 2026] [:error] [pid 32677:tid 32696] [client 72.146.12.65:11209] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eapjf.php"] [unique_id "aeOUxxngmUE3LdC-wP7tGQAAAlA"]
[Sat Apr 18 22:27:19.859619 2026] [:error] [pid 32647:tid 32663] [client 72.146.12.65:62201] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eapjf.php"] [unique_id "aeOUx0kxooM0iRo6e54vcwAAAg0"]
[Sat Apr 18 22:27:20.325250 2026] [:error] [pid 9864:tid 9923] [client 72.146.12.65:62215] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ebuom.php"] [unique_id "aeOUyICFeowknfXHM7kvYgAAAFE"]
[Sat Apr 18 22:27:20.821187 2026] [:error] [pid 9864:tid 9910] [client 72.146.12.65:11262] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ebuom.php"] [unique_id "aeOUyICFeowknfXHM7kvZAAAAEU"]
[Sat Apr 18 22:27:21.300363 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:11152] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ebuom.php"] [unique_id "aeOUySYdRLRhVmaIMx3bMQAAAMo"]
[Sat Apr 18 22:27:21.816585 2026] [:error] [pid 32647:tid 32672] [client 72.146.12.65:62243] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ebuom.php"] [unique_id "aeOUyUkxooM0iRo6e54vewAAAhY"]
[Sat Apr 18 22:27:22.284322 2026] [:error] [pid 34290:tid 34329] [client 72.146.12.65:11180] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/emcgm.php"] [unique_id "aeOUyhqX6WpmmAXOBi8qRAAAAco"]
[Sat Apr 18 22:27:22.748200 2026] [:error] [pid 13023:tid 13040] [client 72.146.12.65:11160] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/emcgm.php"] [unique_id "aeOUyv1e7hG8DAeABB84eQAAAQ8"]
[Sat Apr 18 22:27:23.227183 2026] [:error] [pid 34290:tid 34338] [client 72.146.12.65:11243] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/emcgm.php"] [unique_id "aeOUyxqX6WpmmAXOBi8qRgAAAdM"]
[Sat Apr 18 22:27:23.701094 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:11246] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/emcgm.php"] [unique_id "aeOUy_1e7hG8DAeABB84fQAAARc"]
[Sat Apr 18 22:27:24.166313 2026] [:error] [pid 13023:tid 13031] [client 72.146.12.65:62254] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/euocu.php"] [unique_id "aeOUzP1e7hG8DAeABB84fwAAAQY"]
[Sat Apr 18 22:27:24.646583 2026] [:error] [pid 34290:tid 34323] [client 72.146.12.65:11263] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/euocu.php"] [unique_id "aeOUzBqX6WpmmAXOBi8qSgAAAcQ"]
[Sat Apr 18 22:27:25.142518 2026] [:error] [pid 13023:tid 13033] [client 72.146.12.65:11146] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/euocu.php"] [unique_id "aeOUzf1e7hG8DAeABB84gQAAAQg"]
[Sat Apr 18 22:27:25.659658 2026] [:error] [pid 32677:tid 32704] [client 72.146.12.65:62193] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/euocu.php"] [unique_id "aeOUzRngmUE3LdC-wP7tHwAAAlg"]
[Sat Apr 18 22:27:26.129183 2026] [:error] [pid 32677:tid 32688] [client 72.146.12.65:11241] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeOUzhngmUE3LdC-wP7tIwAAAkg"]
[Sat Apr 18 22:27:26.602073 2026] [:error] [pid 32677:tid 32691] [client 72.146.12.65:11084] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeOUzhngmUE3LdC-wP7tJQAAAks"]
[Sat Apr 18 22:27:27.075477 2026] [:error] [pid 32647:tid 32654] [client 72.146.12.65:11185] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeOUz0kxooM0iRo6e54vgAAAAgQ"]
[Sat Apr 18 22:27:27.543381 2026] [:error] [pid 32647:tid 32672] [client 72.146.12.65:11008] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeOUz0kxooM0iRo6e54vgwAAAhY"]
[Sat Apr 18 22:27:28.016690 2026] [:error] [pid 9865:tid 9960] [client 72.146.12.65:11161] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/frdyx.php"] [unique_id "aeOU0Kzb5knECIY-C-ie6AAAAJc"]
[Sat Apr 18 22:27:28.486384 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:11247] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/frdyx.php"] [unique_id "aeOU0CYdRLRhVmaIMx3bNQAAANA"]
[Sat Apr 18 22:27:28.960540 2026] [:error] [pid 9970:tid 9993] [client 72.146.12.65:11231] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/frdyx.php"] [unique_id "aeOU0CYdRLRhVmaIMx3bOgAAANM"]
[Sat Apr 18 22:27:29.459718 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:11161] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/frdyx.php"] [unique_id "aeOU0SYdRLRhVmaIMx3bPgAAANE"]
[Sat Apr 18 22:27:29.938603 2026] [:error] [pid 9970:tid 9976] [client 72.146.12.65:11249] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aeOU0SYdRLRhVmaIMx3bQQAAAMI"]
[Sat Apr 18 22:27:30.410644 2026] [:error] [pid 32677:tid 32700] [client 72.146.12.65:11228] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aeOU0hngmUE3LdC-wP7tKwAAAlQ"]
[Sat Apr 18 22:27:30.882825 2026] [:error] [pid 9865:tid 9955] [client 72.146.12.65:62185] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aeOU0qzb5knECIY-C-ie7gAAAJI"]
[Sat Apr 18 22:27:31.354139 2026] [:error] [pid 32677:tid 32681] [client 72.146.12.65:11163] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aeOU0xngmUE3LdC-wP7tLgAAAkE"]
[Sat Apr 18 22:27:31.847694 2026] [:error] [pid 9865:tid 9945] [client 72.146.12.65:62246] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwtoa.php"] [unique_id "aeOU06zb5knECIY-C-ie8wAAAIg"]
[Sat Apr 18 22:27:32.317643 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:11202] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwtoa.php"] [unique_id "aeOU1CYdRLRhVmaIMx3bRwAAAM4"]
[Sat Apr 18 22:27:32.804223 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:11184] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwtoa.php"] [unique_id "aeOU1P1e7hG8DAeABB84iAAAARc"]
[Sat Apr 18 22:27:33.272508 2026] [:error] [pid 9865:tid 9958] [client 72.146.12.65:11248] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fwtoa.php"] [unique_id "aeOU1azb5knECIY-C-ie-QAAAJU"]
[Sat Apr 18 22:27:33.767586 2026] [:error] [pid 13023:tid 13031] [client 72.146.12.65:11156] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gbhyv.php"] [unique_id "aeOU1f1e7hG8DAeABB84igAAAQY"]
[Sat Apr 18 22:27:34.236077 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:11222] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gbhyv.php"] [unique_id "aeOU1v1e7hG8DAeABB84iwAAARU"]
[Sat Apr 18 22:27:34.720292 2026] [:error] [pid 9864:tid 9925] [client 72.146.12.65:62250] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gbhyv.php"] [unique_id "aeOU1oCFeowknfXHM7kvawAAAFM"]
[Sat Apr 18 22:27:35.199967 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:11232] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gbhyv.php"] [unique_id "aeOU1yYdRLRhVmaIMx3bSwAAAMQ"]
[Sat Apr 18 22:27:35.702872 2026] [:error] [pid 9864:tid 9929] [client 72.146.12.65:11149] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gedim.php"] [unique_id "aeOU14CFeowknfXHM7kvbAAAAFc"]
[Sat Apr 18 22:27:36.242311 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:11239] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gedim.php"] [unique_id "aeOU2CYdRLRhVmaIMx3bUAAAAMg"]
[Sat Apr 18 22:27:36.753469 2026] [:error] [pid 9970:tid 9987] [client 72.146.12.65:11240] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gedim.php"] [unique_id "aeOU2CYdRLRhVmaIMx3bUwAAAM0"]
[Sat Apr 18 22:27:37.241844 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:11169] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gedim.php"] [unique_id "aeOU2SYdRLRhVmaIMx3bVQAAANA"]
[Sat Apr 18 22:27:37.721268 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:11174] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibano.php"] [unique_id "aeOU2SYdRLRhVmaIMx3bWAAAAM8"]
[Sat Apr 18 22:27:38.217672 2026] [:error] [pid 9865:tid 9951] [client 72.146.12.65:11074] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibano.php"] [unique_id "aeOU2qzb5knECIY-C-ifAwAAAI4"]
[Sat Apr 18 22:27:38.688862 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:11201] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibano.php"] [unique_id "aeOU2iYdRLRhVmaIMx3bXgAAAMs"]
[Sat Apr 18 22:27:39.213868 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:11114] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ibano.php"] [unique_id "aeOU2yYdRLRhVmaIMx3bYgAAAMg"]
[Sat Apr 18 22:27:39.681654 2026] [:error] [pid 13023:tid 13042] [client 72.146.12.65:11186] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ifrea.php"] [unique_id "aeOU2_1e7hG8DAeABB84kwAAARE"]
[Sat Apr 18 22:27:40.155000 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:11151] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ifrea.php"] [unique_id "aeOU3P1e7hG8DAeABB84lgAAAQo"]
[Sat Apr 18 22:27:40.626264 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:11150] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ifrea.php"] [unique_id "aeOU3P1e7hG8DAeABB84mQAAAQ4"]
[Sat Apr 18 22:27:41.096929 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:62176] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ifrea.php"] [unique_id "aeOU3SYdRLRhVmaIMx3bZgAAAMo"]
[Sat Apr 18 22:27:41.614788 2026] [:error] [pid 32678:tid 32726] [client 72.146.12.65:11137] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/itlvk.php"] [unique_id "aeOU3RUlAXU_ZWUu5y8NVQAAApM"]
[Sat Apr 18 22:27:42.104602 2026] [:error] [pid 9970:tid 9975] [client 72.146.12.65:11100] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/itlvk.php"] [unique_id "aeOU3iYdRLRhVmaIMx3bbAAAAME"]
[Sat Apr 18 22:27:42.573547 2026] [:error] [pid 9970:tid 9998] [client 72.146.12.65:11182] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/itlvk.php"] [unique_id "aeOU3iYdRLRhVmaIMx3bcQAAANg"]
[Sat Apr 18 22:27:43.050438 2026] [:error] [pid 9864:tid 9905] [client 72.146.12.65:11083] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/itlvk.php"] [unique_id "aeOU34CFeowknfXHM7kvbgAAAEA"]
[Sat Apr 18 22:27:43.540933 2026] [:error] [pid 13023:tid 13041] [client 72.146.12.65:11210] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jctyd.php"] [unique_id "aeOU3_1e7hG8DAeABB84pAAAARA"]
[Sat Apr 18 22:27:44.033765 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:11138] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jctyd.php"] [unique_id "aeOU4P1e7hG8DAeABB84pwAAAQ4"]
[Sat Apr 18 22:27:44.513156 2026] [:error] [pid 13023:tid 13047] [client 72.146.12.65:11260] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jctyd.php"] [unique_id "aeOU4P1e7hG8DAeABB84rQAAARY"]
[Sat Apr 18 22:27:44.995167 2026] [:error] [pid 13023:tid 13028] [client 72.146.12.65:11105] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jctyd.php"] [unique_id "aeOU4P1e7hG8DAeABB84sAAAAQM"]
[Sat Apr 18 22:27:45.469336 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:11214] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jtfocpif.php"] [unique_id "aeOU4f1e7hG8DAeABB84tgAAARc"]
[Sat Apr 18 22:27:45.957074 2026] [:error] [pid 13023:tid 13040] [client 72.146.12.65:11144] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jtfocpif.php"] [unique_id "aeOU4f1e7hG8DAeABB84ugAAAQ8"]
[Sat Apr 18 22:27:46.453805 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:11124] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jtfocpif.php"] [unique_id "aeOU4iYdRLRhVmaIMx3bdgAAAMw"]
[Sat Apr 18 22:27:46.991523 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:11223] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jtfocpif.php"] [unique_id "aeOU4v1e7hG8DAeABB84wAAAAQo"]
[Sat Apr 18 22:27:47.467524 2026] [:error] [pid 9864:tid 9914] [client 72.146.12.65:62262] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/junvh.php"] [unique_id "aeOU44CFeowknfXHM7kvbwAAAEg"]
[Sat Apr 18 22:27:47.964417 2026] [:error] [pid 9864:tid 9907] [client 72.146.12.65:62246] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/junvh.php"] [unique_id "aeOU44CFeowknfXHM7kvcgAAAEI"]
[Sat Apr 18 22:27:48.496878 2026] [:error] [pid 34288:tid 34313] [client 72.146.12.65:11190] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/junvh.php"] [unique_id "aeOU5OTIiy__PtiLmpncQQAAAZU"]
[Sat Apr 18 22:27:49.072923 2026] [:error] [pid 13023:tid 13025] [client 72.146.12.65:11111] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/junvh.php"] [unique_id "aeOU5f1e7hG8DAeABB84xAAAAQA"]
[Sat Apr 18 22:27:49.569363 2026] [:error] [pid 13023:tid 13029] [client 72.146.12.65:62212] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jvtsa.php"] [unique_id "aeOU5f1e7hG8DAeABB84xgAAAQQ"]
[Sat Apr 18 22:27:50.074665 2026] [:error] [pid 32677:tid 32704] [client 72.146.12.65:11224] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jvtsa.php"] [unique_id "aeOU5hngmUE3LdC-wP7tOQAAAlg"]
[Sat Apr 18 22:27:50.552188 2026] [:error] [pid 9864:tid 9927] [client 72.146.12.65:11110] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jvtsa.php"] [unique_id "aeOU5oCFeowknfXHM7kvdwAAAFU"]
[Sat Apr 18 22:27:51.060670 2026] [:error] [pid 9865:tid 9940] [client 72.146.12.65:11181] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jvtsa.php"] [unique_id "aeOU56zb5knECIY-C-ifCQAAAIM"]
[Sat Apr 18 22:27:51.566443 2026] [:error] [pid 9865:tid 9955] [client 72.146.12.65:62202] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kaduu.php"] [unique_id "aeOU56zb5knECIY-C-ifDQAAAJI"]
[Sat Apr 18 22:27:52.060880 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:11136] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kaduu.php"] [unique_id "aeOU6CYdRLRhVmaIMx3bfAAAAM8"]
[Sat Apr 18 22:27:52.567668 2026] [:error] [pid 9970:tid 9977] [client 72.146.12.65:11076] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kaduu.php"] [unique_id "aeOU6CYdRLRhVmaIMx3bfwAAAMM"]
[Sat Apr 18 22:27:53.071934 2026] [:error] [pid 9970:tid 9997] [client 72.146.12.65:11196] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kaduu.php"] [unique_id "aeOU6SYdRLRhVmaIMx3bgwAAANc"]
[Sat Apr 18 22:27:53.559424 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:11103] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kagug.php"] [unique_id "aeOU6SYdRLRhVmaIMx3bhwAAAMg"]
[Sat Apr 18 22:27:54.047797 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:11211] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kagug.php"] [unique_id "aeOU6iYdRLRhVmaIMx3bigAAAMo"]
[Sat Apr 18 22:27:54.543955 2026] [:error] [pid 9970:tid 9992] [client 72.146.12.65:11139] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kagug.php"] [unique_id "aeOU6iYdRLRhVmaIMx3biwAAANI"]
[Sat Apr 18 22:27:55.017124 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:11187] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kagug.php"] [unique_id "aeOU6yYdRLRhVmaIMx3bjgAAAM8"]
[Sat Apr 18 22:27:55.501670 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:11109] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kandw.php"] [unique_id "aeOU6yYdRLRhVmaIMx3bkwAAANA"]
[Sat Apr 18 22:27:56.003907 2026] [:error] [pid 9863:tid 9891] [client 72.146.12.65:11168] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kandw.php"] [unique_id "aeOU7DjjiypiFrTucbLX5gAAABI"]
[Sat Apr 18 22:27:56.484068 2026] [:error] [pid 13023:tid 13027] [client 72.146.12.65:11216] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kandw.php"] [unique_id "aeOU7P1e7hG8DAeABB84ygAAAQI"]
[Sat Apr 18 22:27:56.990400 2026] [:error] [pid 34290:tid 34323] [client 72.146.12.65:11252] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kandw.php"] [unique_id "aeOU7BqX6WpmmAXOBi8qUQAAAcQ"]
[Sat Apr 18 22:27:57.472923 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:11183] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kduhq.php"] [unique_id "aeOU7f1e7hG8DAeABB84zQAAARU"]
[Sat Apr 18 22:27:57.952842 2026] [:error] [pid 32678:tid 32731] [client 72.146.12.65:11030] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kduhq.php"] [unique_id "aeOU7RUlAXU_ZWUu5y8NXQAAApg"]
[Sat Apr 18 22:27:58.432637 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:62207] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kduhq.php"] [unique_id "aeOU7iYdRLRhVmaIMx3blwAAAMQ"]
[Sat Apr 18 22:27:58.927668 2026] [:error] [pid 13023:tid 13036] [client 72.146.12.65:11171] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kduhq.php"] [unique_id "aeOU7v1e7hG8DAeABB840AAAAQs"]
[Sat Apr 18 22:27:59.410937 2026] [:error] [pid 9970:tid 9975] [client 72.146.12.65:11157] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rgjrq.php"] [unique_id "aeOU7yYdRLRhVmaIMx3bngAAAME"]
[Sat Apr 18 22:27:59.914814 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:11143] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rgjrq.php"] [unique_id "aeOU7yYdRLRhVmaIMx3boQAAAM4"]
[Sat Apr 18 22:28:00.397623 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:11170] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rgjrq.php"] [unique_id "aeOU8CYdRLRhVmaIMx3bowAAANE"]
[Sat Apr 18 22:28:00.888385 2026] [:error] [pid 9970:tid 9992] [client 72.146.12.65:62200] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rgjrq.php"] [unique_id "aeOU8CYdRLRhVmaIMx3bpwAAANI"]
[Sat Apr 18 22:28:01.367553 2026] [:error] [pid 32677:tid 32685] [client 72.146.12.65:11089] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vopxx.php"] [unique_id "aeOU8RngmUE3LdC-wP7tQQAAAkU"]
[Sat Apr 18 22:28:01.897846 2026] [:error] [pid 9865:tid 9942] [client 72.146.12.65:11258] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vopxx.php"] [unique_id "aeOU8azb5knECIY-C-ifGAAAAIU"]
[Sat Apr 18 22:28:02.374074 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:11148] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vopxx.php"] [unique_id "aeOU8iYdRLRhVmaIMx3bsAAAANE"]
[Sat Apr 18 22:28:02.864829 2026] [:error] [pid 32677:tid 32698] [client 72.146.12.65:11165] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vopxx.php"] [unique_id "aeOU8hngmUE3LdC-wP7tQwAAAlI"]
[Sat Apr 18 22:28:03.349214 2026] [:error] [pid 32647:tid 32672] [client 72.146.12.65:11088] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wcoiw.php"] [unique_id "aeOU80kxooM0iRo6e54vmQAAAhY"]
[Sat Apr 18 22:28:03.878476 2026] [:error] [pid 32677:tid 32693] [client 72.146.12.65:11113] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wcoiw.php"] [unique_id "aeOU8xngmUE3LdC-wP7tSwAAAk0"]
[Sat Apr 18 22:28:04.368937 2026] [:error] [pid 9970:tid 9974] [client 72.146.12.65:11164] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wcoiw.php"] [unique_id "aeOU9CYdRLRhVmaIMx3bswAAAMA"]
[Sat Apr 18 22:28:04.915894 2026] [:error] [pid 9970:tid 9983] [client 72.146.12.65:11141] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wcoiw.php"] [unique_id "aeOU9CYdRLRhVmaIMx3btgAAAMk"]
[Sat Apr 18 22:28:05.396064 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:11098] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtogs.php"] [unique_id "aeOU9SYdRLRhVmaIMx3bugAAAM4"]
[Sat Apr 18 22:28:05.884051 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:11162] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtogs.php"] [unique_id "aeOU9SYdRLRhVmaIMx3bvgAAANE"]
[Sat Apr 18 22:28:06.359831 2026] [:error] [pid 32677:tid 32702] [client 72.146.12.65:11167] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtogs.php"] [unique_id "aeOU9hngmUE3LdC-wP7tUgAAAlY"]
[Sat Apr 18 22:28:06.875107 2026] [:error] [pid 32647:tid 32660] [client 72.146.12.65:11259] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtogs.php"] [unique_id "aeOU9kkxooM0iRo6e54vnQAAAgo"]
[Sat Apr 18 22:28:07.384902 2026] [:error] [pid 34288:tid 34310] [client 72.146.12.65:11197] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xbbih.php"] [unique_id "aeOU9-TIiy__PtiLmpncRwAAAZI"]
[Sat Apr 18 22:28:07.969098 2026] [:error] [pid 34288:tid 34295] [client 72.146.12.65:62221] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xbbih.php"] [unique_id "aeOU9-TIiy__PtiLmpncSQAAAYM"]
[Sat Apr 18 22:28:08.469177 2026] [:error] [pid 9864:tid 9909] [client 72.146.12.65:11191] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xbbih.php"] [unique_id "aeOU-ICFeowknfXHM7kveQAAAEQ"]
[Sat Apr 18 22:28:09.059363 2026] [:error] [pid 32677:tid 32682] [client 72.146.12.65:11106] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xbbih.php"] [unique_id "aeOU-RngmUE3LdC-wP7tVAAAAkI"]
[Sat Apr 18 22:28:09.539884 2026] [:error] [pid 9863:tid 9892] [client 72.146.12.65:11159] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xcakx.php"] [unique_id "aeOU-TjjiypiFrTucbLX7gAAABM"]
[Sat Apr 18 22:28:28.564921 2026] [proxy_fcgi:error] [pid 32678:tid 32708] [client 72.146.12.65:62155] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:28:43.050552 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 72.146.12.65:62210] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:28:43.603323 2026] [proxy_fcgi:error] [pid 32678:tid 32715] [client 72.146.12.65:11129] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:28:57.944674 2026] [proxy_fcgi:error] [pid 9865:tid 9959] [client 72.146.12.65:62244] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:29:03.120901 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:11099] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeOVLyYdRLRhVmaIMx3b_QAAANE"]
[Sat Apr 18 22:29:03.592461 2026] [:error] [pid 13023:tid 13032] [client 72.146.12.65:11043] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeOVL_1e7hG8DAeABB85KAAAAQc"]
[Sat Apr 18 22:29:04.072907 2026] [:error] [pid 9970:tid 9987] [client 72.146.12.65:11140] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeOVMCYdRLRhVmaIMx3cAAAAAM0"]
[Sat Apr 18 22:29:04.541574 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:11085] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeOVMCYdRLRhVmaIMx3cAQAAAMs"]
[Sat Apr 18 22:29:05.050199 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:11255] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l10n.php"] [unique_id "aeOVMSYdRLRhVmaIMx3cAwAAAM8"]
[Sat Apr 18 22:29:05.518491 2026] [:error] [pid 9970:tid 9993] [client 72.146.12.65:11101] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l10n.php"] [unique_id "aeOVMSYdRLRhVmaIMx3cBAAAANM"]
[Sat Apr 18 22:29:05.999461 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:11054] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l10n.php"] [unique_id "aeOVMSYdRLRhVmaIMx3cBwAAAM4"]
[Sat Apr 18 22:29:06.492249 2026] [:error] [pid 9970:tid 9979] [client 72.146.12.65:11234] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/l10n.php"] [unique_id "aeOVMiYdRLRhVmaIMx3cCwAAAMU"]
[Sat Apr 18 22:29:06.996859 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:11092] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeOVMiYdRLRhVmaIMx3cDAAAAMQ"]
[Sat Apr 18 22:29:07.489335 2026] [:error] [pid 13023:tid 13027] [client 72.146.12.65:11221] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeOVM_1e7hG8DAeABB85LwAAAQI"]
[Sat Apr 18 22:29:07.964555 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:11011] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeOVM_1e7hG8DAeABB85MAAAARU"]
[Sat Apr 18 22:29:08.447583 2026] [:error] [pid 32677:tid 32684] [client 72.146.12.65:11078] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeOVNBngmUE3LdC-wP7tkAAAAkQ"]
[Sat Apr 18 22:29:08.912743 2026] [:error] [pid 13023:tid 13033] [client 72.146.12.65:11095] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abalqdol.php"] [unique_id "aeOVNP1e7hG8DAeABB85MgAAAQg"]
[Sat Apr 18 22:29:09.395844 2026] [:error] [pid 32678:tid 32730] [client 72.146.12.65:11072] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abalqdol.php"] [unique_id "aeOVNRUlAXU_ZWUu5y8NoAAAApc"]
[Sat Apr 18 22:29:09.860754 2026] [:error] [pid 13023:tid 13034] [client 72.146.12.65:62227] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abalqdol.php"] [unique_id "aeOVNf1e7hG8DAeABB85NAAAAQk"]
[Sat Apr 18 22:29:10.332574 2026] [:error] [pid 32677:tid 32701] [client 72.146.12.65:11091] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abalqdol.php"] [unique_id "aeOVNhngmUE3LdC-wP7tlAAAAlU"]
[Sat Apr 18 22:29:10.814020 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:62240] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeOVNv1e7hG8DAeABB85NQAAAQo"]
[Sat Apr 18 22:29:11.309319 2026] [:error] [pid 32677:tid 32690] [client 72.146.12.65:11018] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeOVNxngmUE3LdC-wP7tlQAAAko"]
[Sat Apr 18 22:29:11.775212 2026] [:error] [pid 32678:tid 32721] [client 72.146.12.65:11261] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeOVNxUlAXU_ZWUu5y8NpAAAAo4"]
[Sat Apr 18 22:29:12.241650 2026] [:error] [pid 32677:tid 32694] [client 72.146.12.65:11020] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeOVOBngmUE3LdC-wP7tlgAAAk4"]
[Sat Apr 18 22:29:12.708932 2026] [:error] [pid 13023:tid 13029] [client 72.146.12.65:11082] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhigtouj.php"] [unique_id "aeOVOP1e7hG8DAeABB85OAAAAQQ"]
[Sat Apr 18 22:29:13.199185 2026] [:error] [pid 32677:tid 32686] [client 72.146.12.65:62190] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhigtouj.php"] [unique_id "aeOVORngmUE3LdC-wP7tlwAAAkY"]
[Sat Apr 18 22:29:13.665971 2026] [:error] [pid 32677:tid 32696] [client 72.146.12.65:11119] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhigtouj.php"] [unique_id "aeOVORngmUE3LdC-wP7tmAAAAlA"]
[Sat Apr 18 22:29:14.135816 2026] [:error] [pid 34290:tid 34330] [client 72.146.12.65:10963] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhigtouj.php"] [unique_id "aeOVOhqX6WpmmAXOBi8qYAAAAcs"]
[Sat Apr 18 22:29:14.601119 2026] [:error] [pid 32678:tid 32712] [client 72.146.12.65:11102] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeOVOhUlAXU_ZWUu5y8NrQAAAoU"]
[Sat Apr 18 22:29:15.076265 2026] [:error] [pid 32678:tid 32730] [client 72.146.12.65:62196] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeOVOxUlAXU_ZWUu5y8NrwAAApc"]
[Sat Apr 18 22:29:15.545810 2026] [:error] [pid 9863:tid 9884] [client 72.146.12.65:11176] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeOVOzjjiypiFrTucbLYAgAAAAs"]
[Sat Apr 18 22:29:16.021900 2026] [:error] [pid 9864:tid 9927] [client 72.146.12.65:11073] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeOVPICFeowknfXHM7kvkAAAAFU"]
[Sat Apr 18 22:29:16.514390 2026] [:error] [pid 9863:tid 9887] [client 72.146.12.65:11134] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccrheegr.php"] [unique_id "aeOVPDjjiypiFrTucbLYAwAAAA4"]
[Sat Apr 18 22:29:17.041778 2026] [:error] [pid 9864:tid 9925] [client 72.146.12.65:11123] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccrheegr.php"] [unique_id "aeOVPYCFeowknfXHM7kvkQAAAFM"]
[Sat Apr 18 22:29:17.521694 2026] [:error] [pid 32677:tid 32687] [client 72.146.12.65:11047] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccrheegr.php"] [unique_id "aeOVPRngmUE3LdC-wP7tmgAAAkc"]
[Sat Apr 18 22:29:18.033934 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:11104] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ccrheegr.php"] [unique_id "aeOVPv1e7hG8DAeABB85PgAAAQo"]
[Sat Apr 18 22:29:18.516829 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:11049] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeOVPv1e7hG8DAeABB85QAAAAQ4"]
[Sat Apr 18 22:29:19.062179 2026] [:error] [pid 32647:tid 32656] [client 72.146.12.65:11010] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeOVP0kxooM0iRo6e54vxAAAAgY"]
[Sat Apr 18 22:29:19.531427 2026] [:error] [pid 34290:tid 34337] [client 72.146.12.65:11009] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeOVPxqX6WpmmAXOBi8qZQAAAdI"]
[Sat Apr 18 22:29:20.059808 2026] [:error] [pid 34288:tid 34312] [client 72.146.12.65:11120] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeOVQOTIiy__PtiLmpncaQAAAZQ"]
[Sat Apr 18 22:29:20.527800 2026] [:error] [pid 34288:tid 34310] [client 72.146.12.65:11195] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggddssvl.php"] [unique_id "aeOVQOTIiy__PtiLmpncagAAAZI"]
[Sat Apr 18 22:29:21.008714 2026] [:error] [pid 32677:tid 32685] [client 72.146.12.65:11096] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggddssvl.php"] [unique_id "aeOVQRngmUE3LdC-wP7toAAAAkU"]
[Sat Apr 18 22:29:21.483074 2026] [:error] [pid 32647:tid 32653] [client 72.146.12.65:10974] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggddssvl.php"] [unique_id "aeOVQUkxooM0iRo6e54vygAAAgM"]
[Sat Apr 18 22:29:21.980532 2026] [:error] [pid 13023:tid 13030] [client 72.146.12.65:11254] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggddssvl.php"] [unique_id "aeOVQf1e7hG8DAeABB85RAAAAQU"]
[Sat Apr 18 22:29:22.457399 2026] [:error] [pid 32647:tid 32674] [client 72.146.12.65:11131] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeOVQkkxooM0iRo6e54vywAAAhg"]
[Sat Apr 18 22:29:22.932379 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:11029] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeOVQv1e7hG8DAeABB85SwAAAQo"]
[Sat Apr 18 22:29:23.405684 2026] [:error] [pid 9865:tid 9945] [client 72.146.12.65:62153] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeOVQ6zb5knECIY-C-ifYAAAAIg"]
[Sat Apr 18 22:29:23.880733 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:11130] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeOVQ_1e7hG8DAeABB85TwAAAQ4"]
[Sat Apr 18 22:29:24.365137 2026] [:error] [pid 13023:tid 13030] [client 72.146.12.65:11081] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeOVRP1e7hG8DAeABB85UQAAAQU"]
[Sat Apr 18 22:29:24.840617 2026] [:error] [pid 13023:tid 13040] [client 72.146.12.65:11140] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeOVRP1e7hG8DAeABB85UwAAAQ8"]
[Sat Apr 18 22:29:25.307107 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:11093] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeOVRf1e7hG8DAeABB85VQAAARI"]
[Sat Apr 18 22:29:25.778370 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:11235] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeOVRf1e7hG8DAeABB85WAAAARg"]
[Sat Apr 18 22:29:26.248165 2026] [:error] [pid 13023:tid 13038] [client 72.146.12.65:11126] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeOVRv1e7hG8DAeABB85XAAAAQ0"]
[Sat Apr 18 22:29:26.716304 2026] [:error] [pid 9970:tid 9995] [client 72.146.12.65:11075] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeOVRiYdRLRhVmaIMx3cDwAAANU"]
[Sat Apr 18 22:29:27.179691 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:11199] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeOVR_1e7hG8DAeABB85XwAAARU"]
[Sat Apr 18 22:29:27.668554 2026] [:error] [pid 32647:tid 32673] [client 72.146.12.65:11090] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeOVR0kxooM0iRo6e54vzQAAAhc"]
[Sat Apr 18 22:29:28.150928 2026] [:error] [pid 13023:tid 13037] [client 72.146.12.65:62213] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aeOVSP1e7hG8DAeABB85ZgAAAQw"]
[Sat Apr 18 22:29:28.623039 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:62197] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aeOVSP1e7hG8DAeABB85agAAAQ4"]
[Sat Apr 18 22:29:29.101718 2026] [:error] [pid 13023:tid 13030] [client 72.146.12.65:62235] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aeOVSf1e7hG8DAeABB85cAAAAQU"]
[Sat Apr 18 22:29:29.580630 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:11179] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/erty.php"] [unique_id "aeOVSSYdRLRhVmaIMx3cFgAAAMs"]
[Sat Apr 18 22:29:30.070675 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:11038] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aeOVSv1e7hG8DAeABB85cwAAARg"]
[Sat Apr 18 22:29:30.542571 2026] [:error] [pid 9970:tid 9976] [client 72.146.12.65:11154] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aeOVSiYdRLRhVmaIMx3cGQAAAMI"]
[Sat Apr 18 22:29:31.067082 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:11175] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aeOVSyYdRLRhVmaIMx3cGgAAAM8"]
[Sat Apr 18 22:29:31.549019 2026] [:error] [pid 32647:tid 32668] [client 72.146.12.65:11178] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aeOVS0kxooM0iRo6e54v0QAAAhI"]
[Sat Apr 18 22:29:32.025759 2026] [:error] [pid 13023:tid 13028] [client 72.146.12.65:10993] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "aeOVTP1e7hG8DAeABB85egAAAQM"]
[Sat Apr 18 22:29:32.523050 2026] [:error] [pid 32678:tid 32708] [client 72.146.12.65:62238] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "aeOVTBUlAXU_ZWUu5y8NsgAAAoE"]
[Sat Apr 18 22:29:33.043126 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:62247] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "aeOVTSYdRLRhVmaIMx3cIQAAAMc"]
[Sat Apr 18 22:29:33.515281 2026] [:error] [pid 9970:tid 9979] [client 72.146.12.65:11025] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "aeOVTSYdRLRhVmaIMx3cIgAAAMU"]
[Sat Apr 18 22:29:34.020026 2026] [:error] [pid 9864:tid 9912] [client 72.146.12.65:62205] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0xD.php"] [unique_id "aeOVToCFeowknfXHM7kvnQAAAEY"]
[Sat Apr 18 22:29:34.500916 2026] [:error] [pid 13023:tid 13032] [client 72.146.12.65:11023] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0xD.php"] [unique_id "aeOVTv1e7hG8DAeABB85fQAAAQc"]
[Sat Apr 18 22:29:34.971253 2026] [:error] [pid 9864:tid 9917] [client 72.146.12.65:11036] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0xD.php"] [unique_id "aeOVToCFeowknfXHM7kvngAAAEs"]
[Sat Apr 18 22:29:35.440895 2026] [:error] [pid 13023:tid 13038] [client 72.146.12.65:62169] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0xD.php"] [unique_id "aeOVT_1e7hG8DAeABB85fwAAAQ0"]
[Sat Apr 18 22:29:35.924210 2026] [:error] [pid 34290:tid 34321] [client 72.146.12.65:11059] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gh.php"] [unique_id "aeOVTxqX6WpmmAXOBi8qbQAAAcI"]
[Sat Apr 18 22:29:36.395277 2026] [:error] [pid 9970:tid 9987] [client 72.146.12.65:11019] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gh.php"] [unique_id "aeOVUCYdRLRhVmaIMx3cKgAAAM0"]
[Sat Apr 18 22:29:36.880797 2026] [:error] [pid 9864:tid 9924] [client 72.146.12.65:11040] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gh.php"] [unique_id "aeOVUICFeowknfXHM7kvogAAAFI"]
[Sat Apr 18 22:29:37.360395 2026] [:error] [pid 32678:tid 32707] [client 72.146.12.65:11115] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gh.php"] [unique_id "aeOVURUlAXU_ZWUu5y8NvQAAAoA"]
[Sat Apr 18 22:29:37.890713 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:11053] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeOVUSYdRLRhVmaIMx3cLAAAAMc"]
[Sat Apr 18 22:29:38.362565 2026] [:error] [pid 13023:tid 13026] [client 72.146.12.65:11064] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeOVUv1e7hG8DAeABB85hgAAAQE"]
[Sat Apr 18 22:29:38.837881 2026] [:error] [pid 9970:tid 9994] [client 72.146.12.65:11256] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeOVUiYdRLRhVmaIMx3cMQAAANQ"]
[Sat Apr 18 22:29:39.310466 2026] [:error] [pid 9970:tid 9997] [client 72.146.12.65:62271] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "aeOVUyYdRLRhVmaIMx3cNQAAANc"]
[Sat Apr 18 22:29:39.792407 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:10949] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aeOVUyYdRLRhVmaIMx3cNgAAAM8"]
[Sat Apr 18 22:29:40.257996 2026] [:error] [pid 13023:tid 13047] [client 72.146.12.65:11127] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aeOVVP1e7hG8DAeABB85iQAAARY"]
[Sat Apr 18 22:29:40.738798 2026] [:error] [pid 13023:tid 13028] [client 72.146.12.65:11010] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aeOVVP1e7hG8DAeABB85jAAAAQM"]
[Sat Apr 18 22:29:41.218405 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:11070] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aeOVVf1e7hG8DAeABB85jgAAAQo"]
[Sat Apr 18 22:29:41.697595 2026] [:error] [pid 34288:tid 34299] [client 72.146.12.65:11042] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xigmltad.php"] [unique_id "aeOVVeTIiy__PtiLmpnccQAAAYc"]
[Sat Apr 18 22:29:42.223943 2026] [:error] [pid 34290:tid 34343] [client 72.146.12.65:10945] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xigmltad.php"] [unique_id "aeOVVhqX6WpmmAXOBi8qeQAAAdg"]
[Sat Apr 18 22:29:42.688558 2026] [:error] [pid 9863:tid 9873] [client 72.146.12.65:62168] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xigmltad.php"] [unique_id "aeOVVjjjiypiFrTucbLYCQAAAAA"]
[Sat Apr 18 22:29:43.159765 2026] [:error] [pid 9864:tid 9917] [client 72.146.12.65:62160] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xigmltad.php"] [unique_id "aeOVV4CFeowknfXHM7kvpAAAAEs"]
[Sat Apr 18 22:29:43.631480 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:11087] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aeOVVyYdRLRhVmaIMx3cRwAAAMw"]
[Sat Apr 18 22:29:44.115691 2026] [:error] [pid 32647:tid 32657] [client 72.146.12.65:62239] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aeOVWEkxooM0iRo6e54v1gAAAgc"]
[Sat Apr 18 22:29:44.583341 2026] [:error] [pid 9863:tid 9881] [client 72.146.12.65:62218] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aeOVWDjjiypiFrTucbLYCwAAAAg"]
[Sat Apr 18 22:29:45.050853 2026] [:error] [pid 32647:tid 32671] [client 72.146.12.65:11132] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aeOVWUkxooM0iRo6e54v2wAAAhU"]
[Sat Apr 18 22:29:45.521829 2026] [:error] [pid 32647:tid 32658] [client 72.146.12.65:62162] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeOVWUkxooM0iRo6e54v3gAAAgg"]
[Sat Apr 18 22:29:45.994799 2026] [:error] [pid 9865:tid 9961] [client 72.146.12.65:62249] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeOVWazb5knECIY-C-ifZQAAAJg"]
[Sat Apr 18 22:29:46.477742 2026] [:error] [pid 9865:tid 9960] [client 72.146.12.65:11021] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeOVWqzb5knECIY-C-ifZgAAAJc"]
[Sat Apr 18 22:29:46.988743 2026] [:error] [pid 32677:tid 32680] [client 72.146.12.65:11057] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeOVWhngmUE3LdC-wP7togAAAkA"]
[Sat Apr 18 22:29:47.490550 2026] [:error] [pid 32677:tid 32682] [client 72.146.12.65:11097] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad.php"] [unique_id "aeOVWxngmUE3LdC-wP7towAAAkI"]
[Sat Apr 18 22:29:48.000790 2026] [:error] [pid 9865:tid 9954] [client 72.146.12.65:62228] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad.php"] [unique_id "aeOVW6zb5knECIY-C-ifbAAAAJE"]
[Sat Apr 18 22:29:48.496168 2026] [:error] [pid 32677:tid 32691] [client 72.146.12.65:11161] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad.php"] [unique_id "aeOVXBngmUE3LdC-wP7tpAAAAks"]
[Sat Apr 18 22:29:49.028120 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:62163] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad.php"] [unique_id "aeOVXSYdRLRhVmaIMx3cSAAAANE"]
[Sat Apr 18 22:29:49.526874 2026] [:error] [pid 13023:tid 13028] [client 72.146.12.65:11177] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "aeOVXf1e7hG8DAeABB85lQAAAQM"]
[Sat Apr 18 22:29:50.004935 2026] [:error] [pid 34290:tid 34333] [client 72.146.12.65:10950] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "aeOVXhqX6WpmmAXOBi8qfQAAAc4"]
[Sat Apr 18 22:29:50.471347 2026] [:error] [pid 34290:tid 34337] [client 72.146.12.65:11041] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "aeOVXhqX6WpmmAXOBi8qfgAAAdI"]
[Sat Apr 18 22:29:51.024736 2026] [:error] [pid 9865:tid 9938] [client 72.146.12.65:11122] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws77.php"] [unique_id "aeOVX6zb5knECIY-C-ifcgAAAIE"]
[Sat Apr 18 22:29:51.503543 2026] [:error] [pid 32647:tid 32671] [client 72.146.12.65:62248] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aeOVX0kxooM0iRo6e54v6wAAAhU"]
[Sat Apr 18 22:29:51.975539 2026] [:error] [pid 32647:tid 32660] [client 72.146.12.65:11055] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aeOVX0kxooM0iRo6e54v7AAAAgo"]
[Sat Apr 18 22:29:52.478386 2026] [:error] [pid 9864:tid 9913] [client 72.146.12.65:62159] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aeOVYICFeowknfXHM7kvqwAAAEc"]
[Sat Apr 18 22:29:52.950508 2026] [:error] [pid 9865:tid 9961] [client 72.146.12.65:62144] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gi.php"] [unique_id "aeOVYKzb5knECIY-C-ifdgAAAJg"]
[Sat Apr 18 22:29:53.434467 2026] [:error] [pid 32647:tid 32667] [client 72.146.12.65:62260] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeOVYUkxooM0iRo6e54v7QAAAhE"]
[Sat Apr 18 22:29:53.919940 2026] [:error] [pid 9863:tid 9880] [client 72.146.12.65:62191] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeOVYTjjiypiFrTucbLYEwAAAAc"]
[Sat Apr 18 22:29:54.406113 2026] [:error] [pid 9865:tid 9950] [client 72.146.12.65:62211] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeOVYqzb5knECIY-C-ifeAAAAI0"]
[Sat Apr 18 22:29:54.895302 2026] [:error] [pid 34288:tid 34292] [client 72.146.12.65:62229] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeOVYuTIiy__PtiLmpncegAAAYA"]
[Sat Apr 18 22:29:55.369999 2026] [:error] [pid 9865:tid 9947] [client 72.146.12.65:11086] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aeOVY6zb5knECIY-C-iffAAAAIo"]
[Sat Apr 18 22:29:55.880730 2026] [:error] [pid 9865:tid 9959] [client 72.146.12.65:11198] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aeOVY6zb5knECIY-C-iffQAAAJY"]
[Sat Apr 18 22:29:56.353204 2026] [:error] [pid 9863:tid 9883] [client 72.146.12.65:62271] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aeOVZDjjiypiFrTucbLYGgAAAAo"]
[Sat Apr 18 22:29:56.835031 2026] [:error] [pid 9863:tid 9896] [client 72.146.12.65:62251] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lp6.php"] [unique_id "aeOVZDjjiypiFrTucbLYGwAAABc"]
[Sat Apr 18 22:29:57.303810 2026] [:error] [pid 9865:tid 9943] [client 72.146.12.65:10959] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "aeOVZazb5knECIY-C-ifgwAAAIY"]
[Sat Apr 18 22:29:57.782451 2026] [:error] [pid 9864:tid 9915] [client 72.146.12.65:10965] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "aeOVZYCFeowknfXHM7kvsAAAAEk"]
[Sat Apr 18 22:29:58.262323 2026] [:error] [pid 9865:tid 9938] [client 72.146.12.65:62266] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "aeOVZqzb5knECIY-C-ifiQAAAIE"]
[Sat Apr 18 22:29:58.742164 2026] [:error] [pid 9865:tid 9957] [client 72.146.12.65:10961] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "aeOVZqzb5knECIY-C-ifjAAAAJQ"]
[Sat Apr 18 22:29:59.229768 2026] [:error] [pid 32677:tid 32703] [client 72.146.12.65:62164] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aeOVZxngmUE3LdC-wP7tpwAAAlc"]
[Sat Apr 18 22:29:59.736226 2026] [:error] [pid 34288:tid 34312] [client 72.146.12.65:62233] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "aeOVZ-TIiy__PtiLmpncfwAAAZQ"]
[Sat Apr 18 22:30:18.632740 2026] [proxy_fcgi:error] [pid 13023:tid 13046] [client 72.146.12.65:62218] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:30:32.746078 2026] [proxy_fcgi:error] [pid 13023:tid 13032] [client 72.146.12.65:62257] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:30:33.295102 2026] [proxy_fcgi:error] [pid 34288:tid 34306] [client 72.146.12.65:62151] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:30:47.947956 2026] [proxy_fcgi:error] [pid 32678:tid 32710] [client 72.146.12.65:62243] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:30:52.949877 2026] [:error] [pid 32677:tid 32696] [client 72.146.12.65:11203] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/intall.php"] [unique_id "aeOVnBngmUE3LdC-wP7t6AAAAlA"]
[Sat Apr 18 22:30:53.431655 2026] [:error] [pid 9865:tid 9938] [client 72.146.12.65:62224] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/intall.php"] [unique_id "aeOVnazb5knECIY-C-ifsAAAAIE"]
[Sat Apr 18 22:30:53.929461 2026] [:error] [pid 32678:tid 32725] [client 72.146.12.65:62170] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/intall.php"] [unique_id "aeOVnRUlAXU_ZWUu5y8N-QAAApI"]
[Sat Apr 18 22:30:54.413230 2026] [:error] [pid 9864:tid 9927] [client 72.146.12.65:62165] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/intall.php"] [unique_id "aeOVnoCFeowknfXHM7kwHQAAAFU"]
[Sat Apr 18 22:30:54.903192 2026] [:error] [pid 32678:tid 32718] [client 72.146.12.65:62219] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aeOVnhUlAXU_ZWUu5y8N-wAAAos"]
[Sat Apr 18 22:30:55.370431 2026] [:error] [pid 9864:tid 9924] [client 72.146.12.65:62265] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aeOVn4CFeowknfXHM7kwHwAAAFI"]
[Sat Apr 18 22:30:55.835413 2026] [:error] [pid 13023:tid 13038] [client 72.146.12.65:62232] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aeOVn_1e7hG8DAeABB86dAAAAQ0"]
[Sat Apr 18 22:30:56.383356 2026] [:error] [pid 34290:tid 34333] [client 72.146.12.65:62199] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aeOVoBqX6WpmmAXOBi8q0QAAAc4"]
[Sat Apr 18 22:30:56.873121 2026] [:error] [pid 9864:tid 9914] [client 72.146.12.65:62146] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "aeOVoICFeowknfXHM7kwIAAAAEg"]
[Sat Apr 18 22:30:57.473470 2026] [:error] [pid 32647:tid 32653] [client 72.146.12.65:62154] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "aeOVoUkxooM0iRo6e54wFwAAAgM"]
[Sat Apr 18 22:30:57.955863 2026] [:error] [pid 32647:tid 32674] [client 72.146.12.65:62175] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "aeOVoUkxooM0iRo6e54wGAAAAhg"]
[Sat Apr 18 22:30:58.480321 2026] [:error] [pid 32647:tid 32670] [client 72.146.12.65:62222] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "aeOVokkxooM0iRo6e54wGgAAAhQ"]
[Sat Apr 18 22:30:58.950123 2026] [:error] [pid 32647:tid 32673] [client 72.146.12.65:11206] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeOVokkxooM0iRo6e54wHgAAAhc"]
[Sat Apr 18 22:30:59.460722 2026] [:error] [pid 32678:tid 32726] [client 72.146.12.65:62186] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeOVoxUlAXU_ZWUu5y8OAAAAApM"]
[Sat Apr 18 22:30:59.960060 2026] [:error] [pid 32647:tid 32651] [client 72.146.12.65:62171] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeOVo0kxooM0iRo6e54wIAAAAgE"]
[Sat Apr 18 22:31:00.645523 2026] [:error] [pid 9865:tid 9941] [client 72.146.12.65:10982] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeOVpKzb5knECIY-C-ifuAAAAIQ"]
[Sat Apr 18 22:31:01.153372 2026] [:error] [pid 13023:tid 13034] [client 72.146.12.65:11245] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "aeOVpf1e7hG8DAeABB86dQAAAQk"]
[Sat Apr 18 22:31:01.737338 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:62226] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "aeOVpf1e7hG8DAeABB86eAAAARI"]
[Sat Apr 18 22:31:02.255739 2026] [:error] [pid 9970:tid 9994] [client 72.146.12.65:62148] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "aeOVpiYdRLRhVmaIMx3c-QAAANQ"]
[Sat Apr 18 22:31:02.749495 2026] [:error] [pid 32677:tid 32682] [client 72.146.12.65:62267] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abrand.php"] [unique_id "aeOVphngmUE3LdC-wP7t7AAAAkI"]
[Sat Apr 18 22:31:03.279313 2026] [:error] [pid 32677:tid 32680] [client 72.146.12.65:62166] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/camara.php"] [unique_id "aeOVpxngmUE3LdC-wP7t7gAAAkA"]
[Sat Apr 18 22:31:04.025826 2026] [:error] [pid 32677:tid 32689] [client 72.146.12.65:62152] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/camara.php"] [unique_id "aeOVqBngmUE3LdC-wP7t8QAAAkk"]
[Sat Apr 18 22:31:04.610002 2026] [:error] [pid 34288:tid 34292] [client 72.146.12.65:62216] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/camara.php"] [unique_id "aeOVqOTIiy__PtiLmpncqQAAAYA"]
[Sat Apr 18 22:31:05.321458 2026] [:error] [pid 9865:tid 9944] [client 72.146.12.65:62264] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/camara.php"] [unique_id "aeOVqazb5knECIY-C-ifvAAAAIc"]
[Sat Apr 18 22:31:05.980910 2026] [:error] [pid 34288:tid 34293] [client 72.146.12.65:62172] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assacc.php"] [unique_id "aeOVqeTIiy__PtiLmpncqgAAAYE"]
[Sat Apr 18 22:31:06.450466 2026] [:error] [pid 9865:tid 9958] [client 72.146.12.65:62182] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assacc.php"] [unique_id "aeOVqqzb5knECIY-C-ifvQAAAJU"]
[Sat Apr 18 22:31:06.933589 2026] [:error] [pid 32677:tid 32696] [client 72.146.12.65:11142] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assacc.php"] [unique_id "aeOVqhngmUE3LdC-wP7t-wAAAlA"]
[Sat Apr 18 22:31:07.404153 2026] [:error] [pid 34288:tid 34305] [client 72.146.12.65:62234] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assacc.php"] [unique_id "aeOVq-TIiy__PtiLmpncqwAAAY0"]
[Sat Apr 18 22:31:07.887776 2026] [:error] [pid 34290:tid 34338] [client 72.146.12.65:62179] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "aeOVqxqX6WpmmAXOBi8q1AAAAdM"]
[Sat Apr 18 22:31:08.375817 2026] [:error] [pid 9864:tid 9919] [client 72.146.12.65:11012] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "aeOVrICFeowknfXHM7kwJAAAAE0"]
[Sat Apr 18 22:31:08.844448 2026] [:error] [pid 9865:tid 9951] [client 72.146.12.65:62174] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "aeOVrKzb5knECIY-C-ifwQAAAI4"]
[Sat Apr 18 22:31:09.340299 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:62217] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws83.php"] [unique_id "aeOVrSYdRLRhVmaIMx3dGQAAAMo"]
[Sat Apr 18 22:31:09.847761 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:62158] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeOVrSYdRLRhVmaIMx3dHAAAANE"]
[Sat Apr 18 22:31:10.332762 2026] [:error] [pid 32677:tid 32687] [client 72.146.12.65:62209] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeOVrhngmUE3LdC-wP7t_QAAAkc"]
[Sat Apr 18 22:31:10.834058 2026] [:error] [pid 13023:tid 13037] [client 72.146.12.65:62252] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeOVrv1e7hG8DAeABB86fgAAAQw"]
[Sat Apr 18 22:31:11.371415 2026] [:error] [pid 9865:tid 9955] [client 72.146.12.65:11208] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeOVr6zb5knECIY-C-ifxQAAAJI"]
[Sat Apr 18 22:31:11.856779 2026] [:error] [pid 9865:tid 9946] [client 72.146.12.65:62210] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeOVr6zb5knECIY-C-ifyAAAAIk"]
[Sat Apr 18 22:31:12.353538 2026] [:error] [pid 9865:tid 9957] [client 72.146.12.65:62198] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeOVsKzb5knECIY-C-ifyQAAAJQ"]
[Sat Apr 18 22:31:12.820216 2026] [:error] [pid 9865:tid 9938] [client 72.146.12.65:11218] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeOVsKzb5knECIY-C-ifygAAAIE"]
[Sat Apr 18 22:31:13.338057 2026] [:error] [pid 32677:tid 32700] [client 72.146.12.65:62236] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeOVsRngmUE3LdC-wP7uAwAAAlQ"]
[Sat Apr 18 22:31:13.806693 2026] [:error] [pid 32678:tid 32729] [client 72.146.12.65:62268] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtsr.php"] [unique_id "aeOVsRUlAXU_ZWUu5y8OBgAAApY"]
[Sat Apr 18 22:31:14.272362 2026] [:error] [pid 32647:tid 32660] [client 72.146.12.65:11236] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtsr.php"] [unique_id "aeOVskkxooM0iRo6e54wIwAAAgo"]
[Sat Apr 18 22:31:14.761047 2026] [:error] [pid 32678:tid 32717] [client 72.146.12.65:62195] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtsr.php"] [unique_id "aeOVshUlAXU_ZWUu5y8OBwAAAoo"]
[Sat Apr 18 22:31:15.234783 2026] [:error] [pid 9970:tid 9994] [client 72.146.12.65:62156] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xtsr.php"] [unique_id "aeOVsyYdRLRhVmaIMx3dPAAAANQ"]
[Sat Apr 18 22:31:15.727963 2026] [:error] [pid 9865:tid 9950] [client 72.146.12.65:62173] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "aeOVs6zb5knECIY-C-if0AAAAI0"]
[Sat Apr 18 22:31:16.206478 2026] [:error] [pid 9865:tid 9958] [client 72.146.12.65:62258] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "aeOVtKzb5knECIY-C-if0wAAAJU"]
[Sat Apr 18 22:31:16.678816 2026] [:error] [pid 32678:tid 32708] [client 72.146.12.65:11154] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "aeOVtBUlAXU_ZWUu5y8ODAAAAoE"]
[Sat Apr 18 22:31:17.157612 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:11077] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zz8.php"] [unique_id "aeOVtf1e7hG8DAeABB86ggAAARU"]
[Sat Apr 18 22:31:17.637323 2026] [:error] [pid 9865:tid 9958] [client 72.146.12.65:11158] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeOVtazb5knECIY-C-if3QAAAJU"]
[Sat Apr 18 22:31:18.122026 2026] [:error] [pid 9865:tid 9959] [client 72.146.12.65:11155] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeOVtqzb5knECIY-C-if4AAAAJY"]
[Sat Apr 18 22:31:18.649271 2026] [:error] [pid 32678:tid 32714] [client 72.146.12.65:62167] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeOVthUlAXU_ZWUu5y8OEgAAAoc"]
[Sat Apr 18 22:31:19.130803 2026] [:error] [pid 9970:tid 9975] [client 72.146.12.65:62149] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeOVtyYdRLRhVmaIMx3dSgAAAME"]
[Sat Apr 18 22:31:19.622550 2026] [:error] [pid 13023:tid 13030] [client 72.146.12.65:62161] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeOVt_1e7hG8DAeABB86hgAAAQU"]
[Sat Apr 18 22:31:20.120821 2026] [:error] [pid 13023:tid 13037] [client 72.146.12.65:11048] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeOVuP1e7hG8DAeABB86iAAAAQw"]
[Sat Apr 18 22:31:20.608488 2026] [:error] [pid 32677:tid 32686] [client 72.146.12.65:11220] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeOVuBngmUE3LdC-wP7uBQAAAkY"]
[Sat Apr 18 22:31:21.074274 2026] [:error] [pid 9865:tid 9960] [client 72.146.12.65:11213] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aeOVuazb5knECIY-C-if5QAAAJc"]
[Sat Apr 18 22:31:21.587927 2026] [:error] [pid 32677:tid 32703] [client 72.146.12.65:62230] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ai.php"] [unique_id "aeOVuRngmUE3LdC-wP7uCQAAAlc"]
[Sat Apr 18 22:31:22.083494 2026] [:error] [pid 9865:tid 9958] [client 72.146.12.65:11226] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ai.php"] [unique_id "aeOVuqzb5knECIY-C-if5wAAAJU"]
[Sat Apr 18 22:31:22.554417 2026] [:error] [pid 32677:tid 32680] [client 72.146.12.65:11121] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ai.php"] [unique_id "aeOVuhngmUE3LdC-wP7uDAAAAkA"]
[Sat Apr 18 22:31:23.028508 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:62245] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ai.php"] [unique_id "aeOVuyYdRLRhVmaIMx3dTAAAANE"]
[Sat Apr 18 22:31:23.522941 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:62220] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amwxl.php"] [unique_id "aeOVu_1e7hG8DAeABB86jAAAAQo"]
[Sat Apr 18 22:31:24.003483 2026] [:error] [pid 13023:tid 13042] [client 72.146.12.65:11046] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amwxl.php"] [unique_id "aeOVvP1e7hG8DAeABB86jwAAARE"]
[Sat Apr 18 22:31:24.471735 2026] [:error] [pid 9863:tid 9892] [client 72.146.12.65:62208] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amwxl.php"] [unique_id "aeOVvDjjiypiFrTucbLYMAAAABM"]
[Sat Apr 18 22:31:25.013403 2026] [:error] [pid 32678:tid 32707] [client 72.146.12.65:11069] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amwxl.php"] [unique_id "aeOVvRUlAXU_ZWUu5y8OGgAAAoA"]
[Sat Apr 18 22:31:25.483546 2026] [:error] [pid 9970:tid 9997] [client 72.146.12.65:11244] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awdld.php"] [unique_id "aeOVvSYdRLRhVmaIMx3dTgAAANc"]
[Sat Apr 18 22:31:25.983334 2026] [:error] [pid 9970:tid 9976] [client 72.146.12.65:11045] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awdld.php"] [unique_id "aeOVvSYdRLRhVmaIMx3dUAAAAMI"]
[Sat Apr 18 22:31:26.455626 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:11215] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awdld.php"] [unique_id "aeOVviYdRLRhVmaIMx3dUgAAANA"]
[Sat Apr 18 22:31:26.928674 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:11194] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awdld.php"] [unique_id "aeOVviYdRLRhVmaIMx3dVQAAAMw"]
[Sat Apr 18 22:31:27.395931 2026] [:error] [pid 9970:tid 9983] [client 72.146.12.65:11145] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bkyac.php"] [unique_id "aeOVvyYdRLRhVmaIMx3dWQAAAMk"]
[Sat Apr 18 22:31:27.870998 2026] [:error] [pid 34290:tid 34319] [client 72.146.12.65:62187] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bkyac.php"] [unique_id "aeOVvxqX6WpmmAXOBi8q2AAAAcA"]
[Sat Apr 18 22:31:28.344864 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:62206] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bkyac.php"] [unique_id "aeOVwCYdRLRhVmaIMx3dXQAAAMc"]
[Sat Apr 18 22:31:28.818973 2026] [:error] [pid 32678:tid 32714] [client 72.146.12.65:62237] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bkyac.php"] [unique_id "aeOVwBUlAXU_ZWUu5y8OGwAAAoc"]
[Sat Apr 18 22:31:29.317724 2026] [:error] [pid 32647:tid 32654] [client 72.146.12.65:11128] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krntz.php"] [unique_id "aeOVwUkxooM0iRo6e54wJAAAAgQ"]
[Sat Apr 18 22:31:29.786751 2026] [:error] [pid 9864:tid 9926] [client 72.146.12.65:62244] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krntz.php"] [unique_id "aeOVwYCFeowknfXHM7kwNAAAAFQ"]
[Sat Apr 18 22:31:30.288464 2026] [:error] [pid 9865:tid 9946] [client 72.146.12.65:11212] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krntz.php"] [unique_id "aeOVwqzb5knECIY-C-if7AAAAIk"]
[Sat Apr 18 22:31:30.752853 2026] [:error] [pid 9863:tid 9876] [client 72.146.12.65:10955] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/krntz.php"] [unique_id "aeOVwjjjiypiFrTucbLYNQAAAAM"]
[Sat Apr 18 22:31:31.234921 2026] [:error] [pid 32647:tid 32652] [client 72.146.12.65:62225] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeOVw0kxooM0iRo6e54wKwAAAgI"]
[Sat Apr 18 22:31:31.709304 2026] [:error] [pid 32678:tid 32720] [client 72.146.12.65:62155] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeOVwxUlAXU_ZWUu5y8OHQAAAo0"]
[Sat Apr 18 22:31:32.194263 2026] [:error] [pid 9970:tid 9975] [client 72.146.12.65:62194] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeOVxCYdRLRhVmaIMx3dZAAAAME"]
[Sat Apr 18 22:31:32.663816 2026] [:error] [pid 9864:tid 9905] [client 72.146.12.65:62243] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeOVxICFeowknfXHM7kwPAAAAEA"]
[Sat Apr 18 22:31:33.135009 2026] [:error] [pid 9865:tid 9941] [client 72.146.12.65:62177] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xenium4.php"] [unique_id "aeOVxazb5knECIY-C-if9AAAAIQ"]
[Sat Apr 18 22:31:33.608357 2026] [:error] [pid 9864:tid 9921] [client 72.146.12.65:62254] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xenium4.php"] [unique_id "aeOVxYCFeowknfXHM7kwRQAAAE8"]
[Sat Apr 18 22:31:34.075991 2026] [:error] [pid 32678:tid 32728] [client 72.146.12.65:62256] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xenium4.php"] [unique_id "aeOVxhUlAXU_ZWUu5y8OHwAAApU"]
[Sat Apr 18 22:31:34.566894 2026] [:error] [pid 34290:tid 34325] [client 72.146.12.65:62157] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xenium4.php"] [unique_id "aeOVxhqX6WpmmAXOBi8q4AAAAcY"]
[Sat Apr 18 22:31:35.073114 2026] [:error] [pid 9970:tid 9980] [client 72.146.12.65:11172] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vaza.php"] [unique_id "aeOVxyYdRLRhVmaIMx3dZgAAAMY"]
[Sat Apr 18 22:31:35.568028 2026] [:error] [pid 13023:tid 13045] [client 72.146.12.65:10952] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vaza.php"] [unique_id "aeOVx_1e7hG8DAeABB86kgAAARQ"]
[Sat Apr 18 22:31:36.034415 2026] [:error] [pid 34288:tid 34306] [client 72.146.12.65:11200] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vaza.php"] [unique_id "aeOVyOTIiy__PtiLmpncsQAAAY4"]
[Sat Apr 18 22:31:36.508668 2026] [:error] [pid 9865:tid 9949] [client 72.146.12.65:62188] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vaza.php"] [unique_id "aeOVyKzb5knECIY-C-if9QAAAIw"]
[Sat Apr 18 22:31:36.981442 2026] [:error] [pid 9865:tid 9944] [client 72.146.12.65:11058] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "aeOVyKzb5knECIY-C-if9gAAAIc"]
[Sat Apr 18 22:31:37.449897 2026] [:error] [pid 9865:tid 9955] [client 72.146.12.65:11225] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "aeOVyazb5knECIY-C-if9wAAAJI"]
[Sat Apr 18 22:31:37.926155 2026] [:error] [pid 9865:tid 9947] [client 72.146.12.65:62193] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "aeOVyazb5knECIY-C-if-wAAAIo"]
[Sat Apr 18 22:31:38.419737 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:11192] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8573.php"] [unique_id "aeOVyiYdRLRhVmaIMx3dagAAAMo"]
[Sat Apr 18 22:31:38.893988 2026] [:error] [pid 32647:tid 32664] [client 72.146.12.65:11060] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeOVykkxooM0iRo6e54wLwAAAg4"]
[Sat Apr 18 22:31:39.361836 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:11231] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeOVyyYdRLRhVmaIMx3dbQAAAMc"]
[Sat Apr 18 22:31:39.839180 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:62253] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeOVy_1e7hG8DAeABB86uAAAARI"]
[Sat Apr 18 22:31:40.315440 2026] [:error] [pid 32677:tid 32680] [client 72.146.12.65:62263] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeOVzBngmUE3LdC-wP7uEgAAAkA"]
[Sat Apr 18 22:31:40.801015 2026] [:error] [pid 32647:tid 32656] [client 72.146.12.65:62184] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "aeOVzEkxooM0iRo6e54wNQAAAgY"]
[Sat Apr 18 22:31:41.268085 2026] [:error] [pid 32677:tid 32693] [client 72.146.12.65:11219] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "aeOVzRngmUE3LdC-wP7uFQAAAk0"]
[Sat Apr 18 22:31:41.743767 2026] [:error] [pid 32647:tid 32654] [client 72.146.12.65:11243] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "aeOVzUkxooM0iRo6e54wNwAAAgQ"]
[Sat Apr 18 22:31:42.221618 2026] [:error] [pid 32677:tid 32699] [client 72.146.12.65:11229] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drhunthq.php"] [unique_id "aeOVzhngmUE3LdC-wP7uGAAAAlM"]
[Sat Apr 18 22:31:42.693745 2026] [:error] [pid 32677:tid 32692] [client 72.146.12.65:62150] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeOVzhngmUE3LdC-wP7uGQAAAkw"]
[Sat Apr 18 22:31:43.297756 2026] [:error] [pid 32677:tid 32682] [client 72.146.12.65:11050] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeOVzxngmUE3LdC-wP7uGwAAAkI"]
[Sat Apr 18 22:31:43.786531 2026] [:error] [pid 32677:tid 32681] [client 72.146.12.65:11228] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeOVzxngmUE3LdC-wP7uHQAAAkE"]
[Sat Apr 18 22:31:44.260575 2026] [:error] [pid 32677:tid 32702] [client 72.146.12.65:62147] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeOV0BngmUE3LdC-wP7uHwAAAlY"]
[Sat Apr 18 22:31:44.728858 2026] [:error] [pid 32677:tid 32685] [client 72.146.12.65:11149] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "aeOV0BngmUE3LdC-wP7uIQAAAkU"]
[Sat Apr 18 22:31:45.208946 2026] [:error] [pid 32678:tid 32730] [client 72.146.12.65:62241] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "aeOV0RUlAXU_ZWUu5y8OJgAAApc"]
[Sat Apr 18 22:31:45.699446 2026] [:error] [pid 13023:tid 13028] [client 72.146.12.65:11247] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "aeOV0f1e7hG8DAeABB863QAAAQM"]
[Sat Apr 18 22:31:46.178420 2026] [:error] [pid 9863:tid 9876] [client 72.146.12.65:62166] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hots.php"] [unique_id "aeOV0jjjiypiFrTucbLYQQAAAAM"]
[Sat Apr 18 22:31:46.661953 2026] [:error] [pid 34290:tid 34336] [client 72.146.12.65:62259] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeOV0hqX6WpmmAXOBi8q6QAAAdE"]
[Sat Apr 18 22:31:47.126490 2026] [:error] [pid 13023:tid 13034] [client 72.146.12.65:11227] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeOV0_1e7hG8DAeABB865wAAAQk"]
[Sat Apr 18 22:31:47.639873 2026] [:error] [pid 9970:tid 9993] [client 72.146.12.65:11146] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeOV0yYdRLRhVmaIMx3dcAAAANM"]
[Sat Apr 18 22:31:48.115586 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:62176] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeOV1P1e7hG8DAeABB866QAAARI"]
[Sat Apr 18 22:31:48.618549 2026] [:error] [pid 9970:tid 9977] [client 72.146.12.65:11201] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "aeOV1CYdRLRhVmaIMx3dcwAAAMM"]
[Sat Apr 18 22:31:49.096268 2026] [:error] [pid 9865:tid 9941] [client 72.146.12.65:62192] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "aeOV1azb5knECIY-C-igAgAAAIQ"]
[Sat Apr 18 22:31:49.594601 2026] [:error] [pid 9865:tid 9948] [client 72.146.12.65:11230] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "aeOV1azb5knECIY-C-igAwAAAIs"]
[Sat Apr 18 22:32:09.000373 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 72.146.12.65:62149] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:32:23.488556 2026] [proxy_fcgi:error] [pid 13023:tid 13032] [client 72.146.12.65:62211] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:32:24.037398 2026] [proxy_fcgi:error] [pid 9865:tid 9947] [client 72.146.12.65:62181] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:32:38.490794 2026] [proxy_fcgi:error] [pid 9864:tid 9914] [client 72.146.12.65:62241] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:32:43.642166 2026] [:error] [pid 9865:tid 9940] [client 72.146.12.65:62246] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aeOWC6zb5knECIY-C-igOAAAAIM"]
[Sat Apr 18 22:32:44.116528 2026] [:error] [pid 13023:tid 13045] [client 72.146.12.65:11198] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aeOWDP1e7hG8DAeABB87OgAAARQ"]
[Sat Apr 18 22:32:44.599110 2026] [:error] [pid 13023:tid 13034] [client 72.146.12.65:11136] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aeOWDP1e7hG8DAeABB87PAAAAQk"]
[Sat Apr 18 22:32:45.077470 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:11153] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aeOWDf1e7hG8DAeABB87QAAAARg"]
[Sat Apr 18 22:32:45.550513 2026] [:error] [pid 13023:tid 13037] [client 72.146.12.65:62202] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "aeOWDf1e7hG8DAeABB87RAAAAQw"]
[Sat Apr 18 22:32:46.027961 2026] [:error] [pid 32677:tid 32691] [client 72.146.12.65:11139] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "aeOWDhngmUE3LdC-wP7uXAAAAks"]
[Sat Apr 18 22:32:46.503700 2026] [:error] [pid 32678:tid 32718] [client 72.146.12.65:11217] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "aeOWDhUlAXU_ZWUu5y8OVQAAAos"]
[Sat Apr 18 22:32:46.970720 2026] [:error] [pid 13023:tid 13047] [client 72.146.12.65:11251] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xfun.php"] [unique_id "aeOWDv1e7hG8DAeABB87SQAAARY"]
[Sat Apr 18 22:32:47.444355 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:11214] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aeOWD_1e7hG8DAeABB87SgAAARc"]
[Sat Apr 18 22:32:47.930354 2026] [:error] [pid 34290:tid 34324] [client 72.146.12.65:62231] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aeOWDxqX6WpmmAXOBi8q9QAAAcU"]
[Sat Apr 18 22:32:48.408162 2026] [:error] [pid 13023:tid 13030] [client 72.146.12.65:11170] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aeOWEP1e7hG8DAeABB87TwAAAQU"]
[Sat Apr 18 22:32:48.887053 2026] [:error] [pid 9864:tid 9921] [client 72.146.12.65:11207] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aeOWEICFeowknfXHM7kwaAAAAE8"]
[Sat Apr 18 22:32:49.353504 2026] [:error] [pid 9970:tid 9977] [client 72.146.12.65:62270] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "aeOWESYdRLRhVmaIMx3dugAAAMM"]
[Sat Apr 18 22:32:49.846578 2026] [:error] [pid 9970:tid 9976] [client 72.146.12.65:11157] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "aeOWESYdRLRhVmaIMx3dvAAAAMI"]
[Sat Apr 18 22:32:50.324307 2026] [:error] [pid 9970:tid 9979] [client 72.146.12.65:62180] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "aeOWEiYdRLRhVmaIMx3dwAAAAMU"]
[Sat Apr 18 22:32:50.826930 2026] [:error] [pid 9864:tid 9907] [client 72.146.12.65:11250] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws86.php"] [unique_id "aeOWEoCFeowknfXHM7kwaQAAAEI"]
[Sat Apr 18 22:32:51.317869 2026] [:error] [pid 9865:tid 9949] [client 72.146.12.65:62189] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "aeOWE6zb5knECIY-C-igPQAAAIw"]
[Sat Apr 18 22:32:51.795300 2026] [:error] [pid 34288:tid 34316] [client 72.146.12.65:62257] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "aeOWE-TIiy__PtiLmpnc7gAAAZg"]
[Sat Apr 18 22:32:52.265026 2026] [:error] [pid 9865:tid 9953] [client 72.146.12.65:11240] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "aeOWFKzb5knECIY-C-igQQAAAJA"]
[Sat Apr 18 22:32:52.746757 2026] [:error] [pid 32678:tid 32711] [client 72.146.12.65:11166] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws85.php"] [unique_id "aeOWFBUlAXU_ZWUu5y8OVwAAAoQ"]
[Sat Apr 18 22:32:53.220888 2026] [:error] [pid 32677:tid 32689] [client 72.146.12.65:11148] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "aeOWFRngmUE3LdC-wP7uYQAAAkk"]
[Sat Apr 18 22:32:53.686683 2026] [:error] [pid 32678:tid 32717] [client 72.146.12.65:62261] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "aeOWFRUlAXU_ZWUu5y8OWQAAAoo"]
[Sat Apr 18 22:32:54.194711 2026] [:error] [pid 32647:tid 32658] [client 72.146.12.65:62145] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "aeOWFkkxooM0iRo6e54wTwAAAgg"]
[Sat Apr 18 22:32:54.659120 2026] [:error] [pid 32647:tid 32665] [client 72.146.12.65:62251] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "aeOWFkkxooM0iRo6e54wVQAAAg8"]
[Sat Apr 18 22:32:55.135495 2026] [:error] [pid 32647:tid 32655] [client 72.146.12.65:11232] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "aeOWF0kxooM0iRo6e54wVwAAAgU"]
[Sat Apr 18 22:32:55.617478 2026] [:error] [pid 34288:tid 34311] [client 72.146.12.65:11171] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "aeOWF-TIiy__PtiLmpnc8QAAAZM"]
[Sat Apr 18 22:32:56.082812 2026] [:error] [pid 34290:tid 34337] [client 72.146.12.65:11224] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "aeOWGBqX6WpmmAXOBi8q-QAAAdI"]
[Sat Apr 18 22:32:56.560709 2026] [:error] [pid 34288:tid 34293] [client 72.146.12.65:10939] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h2.php"] [unique_id "aeOWGOTIiy__PtiLmpnc-AAAAYE"]
[Sat Apr 18 22:32:57.026636 2026] [:error] [pid 9865:tid 9942] [client 72.146.12.65:11117] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "aeOWGazb5knECIY-C-igRQAAAIU"]
[Sat Apr 18 22:32:57.499753 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:11249] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "aeOWGf1e7hG8DAeABB87VQAAAQ4"]
[Sat Apr 18 22:32:57.979509 2026] [:error] [pid 9863:tid 9878] [client 72.146.12.65:62212] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "aeOWGTjjiypiFrTucbLYUAAAAAU"]
[Sat Apr 18 22:32:58.487014 2026] [:error] [pid 32678:tid 32719] [client 72.146.12.65:11100] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dass.php"] [unique_id "aeOWGhUlAXU_ZWUu5y8OXAAAAow"]
[Sat Apr 18 22:32:58.954520 2026] [:error] [pid 32677:tid 32700] [client 72.146.12.65:11193] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aeOWGhngmUE3LdC-wP7uZQAAAlQ"]
[Sat Apr 18 22:32:59.431747 2026] [:error] [pid 32677:tid 32703] [client 72.146.12.65:11156] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aeOWGxngmUE3LdC-wP7ubgAAAlc"]
[Sat Apr 18 22:32:59.924353 2026] [:error] [pid 32678:tid 32722] [client 72.146.12.65:62269] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aeOWGxUlAXU_ZWUu5y8OXgAAAo8"]
[Sat Apr 18 22:33:00.425478 2026] [:error] [pid 9864:tid 9918] [client 72.146.12.65:62255] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "aeOWHICFeowknfXHM7kwcwAAAEw"]
[Sat Apr 18 22:33:00.982779 2026] [:error] [pid 32647:tid 32663] [client 72.146.12.65:10897] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOWHEkxooM0iRo6e54wXwAAAg0"]
[Sat Apr 18 22:33:01.453192 2026] [:error] [pid 34288:tid 34308] [client 72.146.12.65:11257] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOWHeTIiy__PtiLmpnc_QAAAZA"]
[Sat Apr 18 22:33:01.983678 2026] [:error] [pid 34288:tid 34301] [client 72.146.12.65:10906] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOWHeTIiy__PtiLmpnc_wAAAYk"]
[Sat Apr 18 22:33:02.461307 2026] [:error] [pid 32678:tid 32712] [client 72.146.12.65:11035] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOWHhUlAXU_ZWUu5y8OYAAAAoU"]
[Sat Apr 18 22:33:02.960292 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:62183] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "aeOWHiYdRLRhVmaIMx3dyQAAAMw"]
[Sat Apr 18 22:33:03.453546 2026] [:error] [pid 9865:tid 9939] [client 72.146.12.65:10972] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "aeOWH6zb5knECIY-C-igSgAAAII"]
[Sat Apr 18 22:33:03.953892 2026] [:error] [pid 9865:tid 9957] [client 72.146.12.65:11103] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "aeOWH6zb5knECIY-C-igTAAAAJQ"]
[Sat Apr 18 22:33:04.418051 2026] [:error] [pid 13023:tid 13031] [client 72.146.12.65:11239] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "aeOWIP1e7hG8DAeABB87VgAAAQY"]
[Sat Apr 18 22:33:04.940363 2026] [:error] [pid 9865:tid 9960] [client 72.146.12.65:11141] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "aeOWIKzb5knECIY-C-igUAAAAJc"]
[Sat Apr 18 22:33:05.441972 2026] [:error] [pid 32678:tid 32731] [client 72.146.12.65:11094] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "aeOWIRUlAXU_ZWUu5y8OZwAAApg"]
[Sat Apr 18 22:33:05.909631 2026] [:error] [pid 32647:tid 32674] [client 72.146.12.65:62200] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "aeOWIUkxooM0iRo6e54wZQAAAhg"]
[Sat Apr 18 22:33:06.380464 2026] [:error] [pid 9864:tid 9923] [client 72.146.12.65:11144] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "aeOWIoCFeowknfXHM7kwegAAAFE"]
[Sat Apr 18 22:33:06.861298 2026] [:error] [pid 32647:tid 32660] [client 72.146.12.65:62262] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "aeOWIkkxooM0iRo6e54wZwAAAgo"]
[Sat Apr 18 22:33:07.386562 2026] [:error] [pid 9970:tid 9995] [client 72.146.12.65:62201] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "aeOWIyYdRLRhVmaIMx3dygAAANU"]
[Sat Apr 18 22:33:07.863850 2026] [:error] [pid 32677:tid 32698] [client 72.146.12.65:11162] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "aeOWIxngmUE3LdC-wP7udQAAAlI"]
[Sat Apr 18 22:33:08.342101 2026] [:error] [pid 9970:tid 9996] [client 72.146.12.65:11211] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "aeOWJCYdRLRhVmaIMx3dzAAAANY"]
[Sat Apr 18 22:33:08.820135 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:11125] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "aeOWJCYdRLRhVmaIMx3dzQAAAMQ"]
[Sat Apr 18 22:33:09.322690 2026] [:error] [pid 13023:tid 13040] [client 72.146.12.65:11028] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "aeOWJf1e7hG8DAeABB87VwAAAQ8"]
[Sat Apr 18 22:33:09.821430 2026] [:error] [pid 9865:tid 9943] [client 72.146.12.65:62185] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "aeOWJazb5knECIY-C-igVAAAAIY"]
[Sat Apr 18 22:33:10.293283 2026] [:error] [pid 32647:tid 32670] [client 72.146.12.65:11137] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "aeOWJkkxooM0iRo6e54waAAAAhQ"]
[Sat Apr 18 22:33:10.834379 2026] [:error] [pid 32678:tid 32722] [client 72.146.12.65:11209] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "aeOWJhUlAXU_ZWUu5y8ObQAAAo8"]
[Sat Apr 18 22:33:11.305672 2026] [:error] [pid 32678:tid 32712] [client 72.146.12.65:11222] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "aeOWJxUlAXU_ZWUu5y8ObwAAAoU"]
[Sat Apr 18 22:33:11.797573 2026] [:error] [pid 9865:tid 9948] [client 72.146.12.65:11169] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "aeOWJ6zb5knECIY-C-igWQAAAIs"]
[Sat Apr 18 22:33:12.303685 2026] [:error] [pid 32677:tid 32681] [client 72.146.12.65:10934] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/csv.php"] [unique_id "aeOWKBngmUE3LdC-wP7uegAAAkE"]
[Sat Apr 18 22:33:12.783835 2026] [:error] [pid 9864:tid 9909] [client 72.146.12.65:62207] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "aeOWKICFeowknfXHM7kwewAAAEQ"]
[Sat Apr 18 22:33:13.262801 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:11205] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "aeOWKSYdRLRhVmaIMx3dzwAAAM8"]
[Sat Apr 18 22:33:13.776461 2026] [:error] [pid 34288:tid 34305] [client 72.146.12.65:11210] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "aeOWKeTIiy__PtiLmpndBwAAAY0"]
[Sat Apr 18 22:33:14.269161 2026] [:error] [pid 9865:tid 9943] [client 72.146.12.65:11186] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sale.php"] [unique_id "aeOWKqzb5knECIY-C-igYAAAAIY"]
[Sat Apr 18 22:33:14.814665 2026] [:error] [pid 9865:tid 9961] [client 72.146.12.65:11108] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "aeOWKqzb5knECIY-C-igYwAAAJg"]
[Sat Apr 18 22:33:15.318570 2026] [:error] [pid 9864:tid 9930] [client 72.146.12.65:11151] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "aeOWK4CFeowknfXHM7kwfAAAAFg"]
[Sat Apr 18 22:33:15.847819 2026] [:error] [pid 32677:tid 32704] [client 72.146.12.65:11168] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "aeOWKxngmUE3LdC-wP7ufgAAAlg"]
[Sat Apr 18 22:33:16.410434 2026] [:error] [pid 32677:tid 32695] [client 72.146.12.65:11173] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "aeOWLBngmUE3LdC-wP7ugAAAAk8"]
[Sat Apr 18 22:33:16.962938 2026] [:error] [pid 32678:tid 32723] [client 72.146.12.65:11262] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws73.php"] [unique_id "aeOWLBUlAXU_ZWUu5y8OdAAAApA"]
[Sat Apr 18 22:33:17.432921 2026] [:error] [pid 32678:tid 32710] [client 72.146.12.65:11246] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws73.php"] [unique_id "aeOWLRUlAXU_ZWUu5y8OdQAAAoM"]
[Sat Apr 18 22:33:17.930061 2026] [:error] [pid 32678:tid 32717] [client 72.146.12.65:11202] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws73.php"] [unique_id "aeOWLRUlAXU_ZWUu5y8OdwAAAoo"]
[Sat Apr 18 22:33:18.443183 2026] [:error] [pid 32678:tid 32725] [client 72.146.12.65:11143] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws73.php"] [unique_id "aeOWLhUlAXU_ZWUu5y8OeQAAApI"]
[Sat Apr 18 22:33:18.961414 2026] [:error] [pid 32678:tid 32713] [client 72.146.12.65:11085] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "aeOWLhUlAXU_ZWUu5y8OfQAAAoY"]
[Sat Apr 18 22:33:19.462906 2026] [:error] [pid 9865:tid 9955] [client 72.146.12.65:62250] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "aeOWL6zb5knECIY-C-igZgAAAJI"]
[Sat Apr 18 22:33:19.979419 2026] [:error] [pid 9970:tid 9977] [client 72.146.12.65:11091] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "aeOWLyYdRLRhVmaIMx3d0AAAAMM"]
[Sat Apr 18 22:33:20.506171 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:11190] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bootstrap.php"] [unique_id "aeOWMCYdRLRhVmaIMx3d0QAAAMg"]
[Sat Apr 18 22:33:20.990280 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:11112] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "aeOWMCYdRLRhVmaIMx3d0wAAAM4"]
[Sat Apr 18 22:33:21.459624 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:11176] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "aeOWMSYdRLRhVmaIMx3d1gAAAMo"]
[Sat Apr 18 22:33:21.958660 2026] [:error] [pid 9970:tid 9979] [client 72.146.12.65:11242] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "aeOWMSYdRLRhVmaIMx3d1wAAAMU"]
[Sat Apr 18 22:33:22.455877 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:11160] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "aeOWMiYdRLRhVmaIMx3d2wAAAMw"]
[Sat Apr 18 22:33:22.937086 2026] [:error] [pid 32677:tid 32694] [client 72.146.12.65:11238] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aeOWMhngmUE3LdC-wP7ugwAAAk4"]
[Sat Apr 18 22:33:23.408589 2026] [:error] [pid 13023:tid 13032] [client 72.146.12.65:11011] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aeOWM_1e7hG8DAeABB87XQAAAQc"]
[Sat Apr 18 22:33:23.887634 2026] [:error] [pid 9865:tid 9940] [client 72.146.12.65:62204] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aeOWM6zb5knECIY-C-igbQAAAIM"]
[Sat Apr 18 22:33:24.370398 2026] [:error] [pid 9865:tid 9938] [client 72.146.12.65:11216] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Sanskrit.php"] [unique_id "aeOWNKzb5knECIY-C-igcQAAAIE"]
[Sat Apr 18 22:33:24.844317 2026] [:error] [pid 9865:tid 9937] [client 72.146.12.65:11234] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "aeOWNKzb5knECIY-C-igdgAAAIA"]
[Sat Apr 18 22:33:25.321637 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:11163] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "aeOWNf1e7hG8DAeABB87YQAAAQ4"]
[Sat Apr 18 22:33:25.825337 2026] [:error] [pid 9865:tid 9953] [client 72.146.12.65:11252] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "aeOWNazb5knECIY-C-igewAAAJA"]
[Sat Apr 18 22:33:26.321938 2026] [:error] [pid 13023:tid 13040] [client 72.146.12.65:11072] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "aeOWNv1e7hG8DAeABB87ZAAAAQ8"]
[Sat Apr 18 22:33:26.820033 2026] [:error] [pid 13023:tid 13026] [client 72.146.12.65:62221] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "aeOWNv1e7hG8DAeABB87ZgAAAQE"]
[Sat Apr 18 22:33:27.303628 2026] [:error] [pid 13023:tid 13036] [client 72.146.12.65:11076] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "aeOWN_1e7hG8DAeABB87aAAAAQs"]
[Sat Apr 18 22:33:27.814292 2026] [:error] [pid 13023:tid 13032] [client 72.146.12.65:11080] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "aeOWN_1e7hG8DAeABB87agAAAQc"]
[Sat Apr 18 22:33:28.294591 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:11138] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "aeOWOP1e7hG8DAeABB87bgAAARg"]
[Sat Apr 18 22:33:28.764296 2026] [:error] [pid 9970:tid 9977] [client 72.146.12.65:11196] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "aeOWOCYdRLRhVmaIMx3d3QAAAMM"]
[Sat Apr 18 22:33:29.230626 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:11165] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "aeOWOSYdRLRhVmaIMx3d3gAAAM4"]
[Sat Apr 18 22:33:29.698196 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:11084] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "aeOWOSYdRLRhVmaIMx3d4AAAANE"]
[Sat Apr 18 22:33:30.191739 2026] [:error] [pid 32678:tid 32719] [client 72.146.12.65:11167] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "aeOWOhUlAXU_ZWUu5y8OgAAAAow"]
[Sat Apr 18 22:33:30.665797 2026] [:error] [pid 13023:tid 13040] [client 72.146.12.65:11263] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeOWOv1e7hG8DAeABB87cwAAAQ8"]
[Sat Apr 18 22:33:31.137170 2026] [:error] [pid 34288:tid 34312] [client 72.146.12.65:11241] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeOWO-TIiy__PtiLmpndCAAAAZQ"]
[Sat Apr 18 22:33:31.604482 2026] [:error] [pid 13023:tid 13047] [client 72.146.12.65:11180] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeOWO_1e7hG8DAeABB87dgAAARY"]
[Sat Apr 18 22:33:32.115836 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:62239] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeOWPCYdRLRhVmaIMx3d4wAAAMc"]
[Sat Apr 18 22:33:32.584880 2026] [:error] [pid 9864:tid 9925] [client 72.146.12.65:11183] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "aeOWPICFeowknfXHM7kwfgAAAFM"]
[Sat Apr 18 22:33:33.076434 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:11140] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "aeOWPf1e7hG8DAeABB87ewAAARg"]
[Sat Apr 18 22:33:33.561809 2026] [:error] [pid 32647:tid 32653] [client 72.146.12.65:62203] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "aeOWPUkxooM0iRo6e54wbwAAAgM"]
[Sat Apr 18 22:33:34.037213 2026] [:error] [pid 32647:tid 32662] [client 72.146.12.65:62227] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "aeOWPkkxooM0iRo6e54wcQAAAgw"]
[Sat Apr 18 22:33:34.530910 2026] [:error] [pid 34290:tid 34340] [client 72.146.12.65:11092] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "aeOWPhqX6WpmmAXOBi8rBwAAAdU"]
[Sat Apr 18 22:33:35.018891 2026] [:error] [pid 34290:tid 34342] [client 72.146.12.65:62153] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "aeOWPxqX6WpmmAXOBi8rCQAAAdc"]
[Sat Apr 18 22:33:35.508912 2026] [:error] [pid 9863:tid 9887] [client 72.146.12.65:11195] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "aeOWPzjjiypiFrTucbLYYgAAAA4"]
[Sat Apr 18 22:33:36.089441 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:11075] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ne2026.php"] [unique_id "aeOWQCYdRLRhVmaIMx3d6AAAANA"]
[Sat Apr 18 22:33:36.623322 2026] [:error] [pid 9864:tid 9905] [client 72.146.12.65:10991] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "aeOWQICFeowknfXHM7kwggAAAEA"]
[Sat Apr 18 22:33:37.134655 2026] [:error] [pid 9864:tid 9921] [client 72.146.12.65:11253] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "aeOWQYCFeowknfXHM7kwgwAAAE8"]
[Sat Apr 18 22:33:37.663932 2026] [:error] [pid 9863:tid 9888] [client 72.146.12.65:62214] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "aeOWQTjjiypiFrTucbLYZwAAAA8"]
[Sat Apr 18 22:33:38.212282 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:11181] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2ksm17n.php"] [unique_id "aeOWQiYdRLRhVmaIMx3d7QAAAMc"]
[Sat Apr 18 22:33:38.710422 2026] [:error] [pid 34290:tid 34339] [client 72.146.12.65:11255] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "aeOWQhqX6WpmmAXOBi8rCwAAAdQ"]
[Sat Apr 18 22:33:39.188727 2026] [:error] [pid 34290:tid 34330] [client 72.146.12.65:62240] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "aeOWQxqX6WpmmAXOBi8rDAAAAcs"]
[Sat Apr 18 22:33:39.675659 2026] [:error] [pid 9863:tid 9875] [client 72.146.12.65:10984] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "aeOWQzjjiypiFrTucbLYbAAAAAI"]
[Sat Apr 18 22:33:40.167398 2026] [:error] [pid 9863:tid 9876] [client 72.146.12.65:11260] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "aeOWRDjjiypiFrTucbLYbQAAAAM"]
[Sat Apr 18 22:33:40.640489 2026] [:error] [pid 9864:tid 9915] [client 72.146.12.65:11259] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeOWRICFeowknfXHM7kwhAAAAEk"]
[Sat Apr 18 22:33:59.393196 2026] [proxy_fcgi:error] [pid 32647:tid 32666] [client 72.146.12.65:62247] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:34:14.162022 2026] [proxy_fcgi:error] [pid 9865:tid 9959] [client 72.146.12.65:62228] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:34:14.708569 2026] [proxy_fcgi:error] [pid 9863:tid 9894] [client 72.146.12.65:11175] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:34:29.831983 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 72.146.12.65:62164] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:34:35.006601 2026] [:error] [pid 32678:tid 32727] [client 72.146.12.65:11237] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "aeOWexUlAXU_ZWUu5y8OwgAAApQ"]
[Sat Apr 18 22:34:35.487250 2026] [:error] [pid 32677:tid 32696] [client 72.146.12.65:11254] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "aeOWexngmUE3LdC-wP7urAAAAlA"]
[Sat Apr 18 22:34:35.986868 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:11118] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "aeOWe_1e7hG8DAeABB88EQAAARc"]
[Sat Apr 18 22:34:36.466927 2026] [:error] [pid 32678:tid 32710] [client 72.146.12.65:11152] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/only.php"] [unique_id "aeOWfBUlAXU_ZWUu5y8OxwAAAoM"]
[Sat Apr 18 22:34:36.991046 2026] [:error] [pid 9970:tid 9976] [client 72.146.12.65:11150] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "aeOWfCYdRLRhVmaIMx3eXwAAAMI"]
[Sat Apr 18 22:34:37.462436 2026] [:error] [pid 9864:tid 9926] [client 72.146.12.65:11071] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "aeOWfYCFeowknfXHM7kwnAAAAFQ"]
[Sat Apr 18 22:34:37.941031 2026] [:error] [pid 9864:tid 9920] [client 72.146.12.65:62213] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "aeOWfYCFeowknfXHM7kwngAAAE4"]
[Sat Apr 18 22:34:38.436189 2026] [:error] [pid 34288:tid 34301] [client 72.146.12.65:62211] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sts.php"] [unique_id "aeOWfuTIiy__PtiLmpndEwAAAYk"]
[Sat Apr 18 22:34:38.908766 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:11123] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aeOWfiYdRLRhVmaIMx3eYgAAAM4"]
[Sat Apr 18 22:34:39.391938 2026] [:error] [pid 32677:tid 32700] [client 72.146.12.65:11022] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aeOWfxngmUE3LdC-wP7urQAAAlQ"]
[Sat Apr 18 22:34:39.869200 2026] [:error] [pid 34290:tid 34342] [client 72.146.12.65:11223] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aeOWfxqX6WpmmAXOBi8rHQAAAdc"]
[Sat Apr 18 22:34:40.344845 2026] [:error] [pid 32678:tid 32715] [client 72.146.12.65:11261] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Geforce.php"] [unique_id "aeOWgBUlAXU_ZWUu5y8OyAAAAog"]
[Sat Apr 18 22:34:40.837737 2026] [:error] [pid 9864:tid 9930] [client 72.146.12.65:62169] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aeOWgICFeowknfXHM7kwpQAAAFg"]
[Sat Apr 18 22:34:41.398030 2026] [:error] [pid 32677:tid 32684] [client 72.146.12.65:11090] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aeOWgRngmUE3LdC-wP7urgAAAkQ"]
[Sat Apr 18 22:34:41.886458 2026] [:error] [pid 34290:tid 34336] [client 72.146.12.65:11221] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aeOWgRqX6WpmmAXOBi8rHgAAAdE"]
[Sat Apr 18 22:34:42.406295 2026] [:error] [pid 32678:tid 32713] [client 72.146.12.65:11179] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dichku.php"] [unique_id "aeOWghUlAXU_ZWUu5y8OywAAAoY"]
[Sat Apr 18 22:34:42.882986 2026] [:error] [pid 32647:tid 32674] [client 72.146.12.65:62144] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aeOWgkkxooM0iRo6e54wgQAAAhg"]
[Sat Apr 18 22:34:43.377708 2026] [:error] [pid 34288:tid 34298] [client 72.146.12.65:11116] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aeOWg-TIiy__PtiLmpndGgAAAYY"]
[Sat Apr 18 22:34:43.845085 2026] [:error] [pid 34288:tid 34294] [client 72.146.12.65:11079] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aeOWg-TIiy__PtiLmpndGwAAAYI"]
[Sat Apr 18 22:34:44.407574 2026] [:error] [pid 32678:tid 32725] [client 72.146.12.65:62215] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Okxob.php"] [unique_id "aeOWhBUlAXU_ZWUu5y8O0AAAApI"]
[Sat Apr 18 22:34:44.874251 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:62228] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htto.php"] [unique_id "aeOWhCYdRLRhVmaIMx3eZwAAAMo"]
[Sat Apr 18 22:34:45.341897 2026] [:error] [pid 13023:tid 13038] [client 72.146.12.65:62163] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htto.php"] [unique_id "aeOWhf1e7hG8DAeABB88FAAAAQ0"]
[Sat Apr 18 22:34:45.899022 2026] [:error] [pid 13023:tid 13047] [client 72.146.12.65:11184] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htto.php"] [unique_id "aeOWhf1e7hG8DAeABB88FQAAARY"]
[Sat Apr 18 22:34:46.364624 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:62218] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htto.php"] [unique_id "aeOWhv1e7hG8DAeABB88GAAAARg"]
[Sat Apr 18 22:34:46.882608 2026] [:error] [pid 32647:tid 32659] [client 72.146.12.65:11258] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ccv.php"] [unique_id "aeOWhkkxooM0iRo6e54wgwAAAgk"]
[Sat Apr 18 22:34:47.382141 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:11197] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ccv.php"] [unique_id "aeOWh_1e7hG8DAeABB88GwAAAQ4"]
[Sat Apr 18 22:34:47.864205 2026] [:error] [pid 34290:tid 34339] [client 72.146.12.65:10962] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ccv.php"] [unique_id "aeOWhxqX6WpmmAXOBi8rHwAAAdQ"]
[Sat Apr 18 22:34:48.329913 2026] [:error] [pid 32678:tid 32731] [client 72.146.12.65:11019] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ccv.php"] [unique_id "aeOWiBUlAXU_ZWUu5y8O1AAAApg"]
[Sat Apr 18 22:34:48.800096 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:62168] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hfles.php"] [unique_id "aeOWiP1e7hG8DAeABB88HAAAARc"]
[Sat Apr 18 22:34:49.280743 2026] [:error] [pid 32647:tid 32662] [client 72.146.12.65:11248] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hfles.php"] [unique_id "aeOWiUkxooM0iRo6e54whAAAAgw"]
[Sat Apr 18 22:34:49.747675 2026] [:error] [pid 32647:tid 32653] [client 72.146.12.65:11106] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hfles.php"] [unique_id "aeOWiUkxooM0iRo6e54whQAAAgM"]
[Sat Apr 18 22:34:50.231067 2026] [:error] [pid 32647:tid 32670] [client 72.146.12.65:62248] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hfles.php"] [unique_id "aeOWikkxooM0iRo6e54whgAAAhQ"]
[Sat Apr 18 22:34:50.702202 2026] [:error] [pid 32647:tid 32667] [client 72.146.12.65:11041] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aeOWikkxooM0iRo6e54wiQAAAhE"]
[Sat Apr 18 22:34:51.212521 2026] [:error] [pid 32677:tid 32689] [client 72.146.12.65:11042] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aeOWixngmUE3LdC-wP7uswAAAkk"]
[Sat Apr 18 22:34:51.688112 2026] [:error] [pid 13023:tid 13026] [client 72.146.12.65:11095] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aeOWi_1e7hG8DAeABB88HgAAAQE"]
[Sat Apr 18 22:34:52.179289 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:11256] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aeOWjP1e7hG8DAeABB88HwAAARU"]
[Sat Apr 18 22:34:52.653124 2026] [:error] [pid 13023:tid 13045] [client 72.146.12.65:62159] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "aeOWjP1e7hG8DAeABB88IAAAARQ"]
[Sat Apr 18 22:34:53.128230 2026] [:error] [pid 34288:tid 34292] [client 72.146.12.65:62266] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "aeOWjeTIiy__PtiLmpndHQAAAYA"]
[Sat Apr 18 22:34:53.596958 2026] [:error] [pid 13023:tid 13047] [client 72.146.12.65:11093] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "aeOWjf1e7hG8DAeABB88JAAAARY"]
[Sat Apr 18 22:34:54.089664 2026] [:error] [pid 13023:tid 13033] [client 72.146.12.65:11018] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "aeOWjv1e7hG8DAeABB88JQAAAQg"]
[Sat Apr 18 22:34:54.582704 2026] [:error] [pid 9865:tid 9952] [client 72.146.12.65:62162] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeOWjqzb5knECIY-C-igwwAAAI8"]
[Sat Apr 18 22:34:55.049715 2026] [:error] [pid 9864:tid 9914] [client 72.146.12.65:62242] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeOWj4CFeowknfXHM7kwqQAAAEg"]
[Sat Apr 18 22:34:55.536026 2026] [:error] [pid 9863:tid 9895] [client 72.146.12.65:11185] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeOWjzjjiypiFrTucbLYjwAAABY"]
[Sat Apr 18 22:34:56.007726 2026] [:error] [pid 32678:tid 32726] [client 72.146.12.65:11078] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeOWkBUlAXU_ZWUu5y8O2AAAApM"]
[Sat Apr 18 22:34:56.480421 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:62191] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aeOWkCYdRLRhVmaIMx3ebQAAAMc"]
[Sat Apr 18 22:34:56.958212 2026] [:error] [pid 9970:tid 9979] [client 72.146.12.65:11132] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aeOWkCYdRLRhVmaIMx3ebwAAAMU"]
[Sat Apr 18 22:34:57.424690 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:11066] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aeOWkSYdRLRhVmaIMx3ecgAAAMs"]
[Sat Apr 18 22:34:57.896638 2026] [:error] [pid 9970:tid 9992] [client 72.146.12.65:11159] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aeOWkSYdRLRhVmaIMx3edQAAANI"]
[Sat Apr 18 22:34:58.368013 2026] [:error] [pid 9863:tid 9887] [client 72.146.12.65:62197] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aeOWkjjjiypiFrTucbLYkgAAAA4"]
[Sat Apr 18 22:34:58.953593 2026] [:error] [pid 32678:tid 32729] [client 72.146.12.65:11164] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aeOWkhUlAXU_ZWUu5y8O3wAAApY"]
[Sat Apr 18 22:34:59.423129 2026] [:error] [pid 34288:tid 34303] [client 72.146.12.65:10989] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aeOWk-TIiy__PtiLmpndIgAAAYs"]
[Sat Apr 18 22:34:59.894163 2026] [:error] [pid 34288:tid 34294] [client 72.146.12.65:11120] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aeOWk-TIiy__PtiLmpndJAAAAYI"]
[Sat Apr 18 22:35:00.369818 2026] [:error] [pid 34288:tid 34310] [client 72.146.12.65:11082] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tdsaz.php"] [unique_id "aeOWlOTIiy__PtiLmpndJgAAAZI"]
[Sat Apr 18 22:35:00.840535 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:10963] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tdsaz.php"] [unique_id "aeOWlCYdRLRhVmaIMx3eeAAAAMg"]
[Sat Apr 18 22:35:01.314734 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:11122] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tdsaz.php"] [unique_id "aeOWlSYdRLRhVmaIMx3eegAAAMQ"]
[Sat Apr 18 22:35:01.782310 2026] [:error] [pid 9865:tid 9939] [client 72.146.12.65:11020] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tdsaz.php"] [unique_id "aeOWlazb5knECIY-C-igxgAAAII"]
[Sat Apr 18 22:35:02.250557 2026] [:error] [pid 9864:tid 9923] [client 72.146.12.65:11009] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynjli.php"] [unique_id "aeOWloCFeowknfXHM7kwqgAAAFE"]
[Sat Apr 18 22:35:02.722607 2026] [:error] [pid 9864:tid 9922] [client 72.146.12.65:11135] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynjli.php"] [unique_id "aeOWloCFeowknfXHM7kwrAAAAFA"]
[Sat Apr 18 22:35:03.195314 2026] [:error] [pid 9970:tid 9984] [client 72.146.12.65:11074] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynjli.php"] [unique_id "aeOWlyYdRLRhVmaIMx3efQAAAMo"]
[Sat Apr 18 22:35:03.660636 2026] [:error] [pid 34290:tid 34328] [client 72.146.12.65:11188] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ynjli.php"] [unique_id "aeOWlxqX6WpmmAXOBi8rJgAAAck"]
[Sat Apr 18 22:35:04.165168 2026] [:error] [pid 32677:tid 32695] [client 72.146.12.65:11124] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeOWmBngmUE3LdC-wP7utQAAAk8"]
[Sat Apr 18 22:35:04.657017 2026] [:error] [pid 32677:tid 32681] [client 72.146.12.65:62175] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeOWmBngmUE3LdC-wP7utgAAAkE"]
[Sat Apr 18 22:35:05.158937 2026] [:error] [pid 32677:tid 32689] [client 72.146.12.65:11044] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeOWmRngmUE3LdC-wP7uugAAAkk"]
[Sat Apr 18 22:35:05.657859 2026] [:error] [pid 32678:tid 32718] [client 72.146.12.65:62170] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "aeOWmRUlAXU_ZWUu5y8O5gAAAos"]
[Sat Apr 18 22:35:06.168140 2026] [:error] [pid 32678:tid 32729] [client 72.146.12.65:11014] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rogsa.php"] [unique_id "aeOWmhUlAXU_ZWUu5y8O5wAAApY"]
[Sat Apr 18 22:35:06.666009 2026] [:error] [pid 13023:tid 13034] [client 72.146.12.65:11033] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rogsa.php"] [unique_id "aeOWmv1e7hG8DAeABB88KgAAAQk"]
[Sat Apr 18 22:35:07.187368 2026] [:error] [pid 9865:tid 9949] [client 72.146.12.65:62247] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rogsa.php"] [unique_id "aeOWm6zb5knECIY-C-igyQAAAIw"]
[Sat Apr 18 22:35:07.859847 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:10893] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rogsa.php"] [unique_id "aeOWm_1e7hG8DAeABB88LQAAAQ4"]
[Sat Apr 18 22:35:08.352138 2026] [:error] [pid 32647:tid 32665] [client 72.146.12.65:62219] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aeOWnEkxooM0iRo6e54wngAAAg8"]
[Sat Apr 18 22:35:08.822379 2026] [:error] [pid 9865:tid 9961] [client 72.146.12.65:11038] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aeOWnKzb5knECIY-C-igywAAAJg"]
[Sat Apr 18 22:35:09.315287 2026] [:error] [pid 13023:tid 13041] [client 72.146.12.65:62151] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aeOWnf1e7hG8DAeABB88NgAAARA"]
[Sat Apr 18 22:35:09.791178 2026] [:error] [pid 34290:tid 34342] [client 72.146.12.65:62178] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aeOWnRqX6WpmmAXOBi8rKAAAAdc"]
[Sat Apr 18 22:35:10.301362 2026] [:error] [pid 32647:tid 32672] [client 72.146.12.65:11008] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "aeOWnkkxooM0iRo6e54woAAAAhY"]
[Sat Apr 18 22:35:10.892128 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:10972] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "aeOWniYdRLRhVmaIMx3egQAAAMg"]
[Sat Apr 18 22:35:11.584975 2026] [:error] [pid 32678:tid 32724] [client 72.146.12.65:62186] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "aeOWnxUlAXU_ZWUu5y8O6QAAApE"]
[Sat Apr 18 22:35:12.089979 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:11147] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new3.php"] [unique_id "aeOWoP1e7hG8DAeABB88PAAAARI"]
[Sat Apr 18 22:35:12.562099 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:11030] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0yellow.php"] [unique_id "aeOWoCYdRLRhVmaIMx3ehQAAAMc"]
[Sat Apr 18 22:35:13.033419 2026] [:error] [pid 9970:tid 9974] [client 72.146.12.65:11102] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0yellow.php"] [unique_id "aeOWoSYdRLRhVmaIMx3ehgAAAMA"]
[Sat Apr 18 22:35:13.515181 2026] [:error] [pid 9970:tid 9979] [client 72.146.12.65:11099] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0yellow.php"] [unique_id "aeOWoSYdRLRhVmaIMx3eigAAAMU"]
[Sat Apr 18 22:35:13.992644 2026] [:error] [pid 9864:tid 9910] [client 72.146.12.65:11013] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0yellow.php"] [unique_id "aeOWoYCFeowknfXHM7kwsAAAAEU"]
[Sat Apr 18 22:35:14.466487 2026] [:error] [pid 9864:tid 9918] [client 72.146.12.65:62160] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeOWooCFeowknfXHM7kwsgAAAEw"]
[Sat Apr 18 22:35:14.932289 2026] [:error] [pid 32647:tid 32668] [client 72.146.12.65:11142] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeOWokkxooM0iRo6e54woQAAAhI"]
[Sat Apr 18 22:35:15.397084 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:11089] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeOWoyYdRLRhVmaIMx3ejwAAAM4"]
[Sat Apr 18 22:35:15.910501 2026] [:error] [pid 32678:tid 32713] [client 72.146.12.65:62267] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeOWoxUlAXU_ZWUu5y8O7QAAAoY"]
[Sat Apr 18 22:35:16.394168 2026] [:error] [pid 9970:tid 9990] [client 72.146.12.65:62235] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aeOWpCYdRLRhVmaIMx3ekQAAANA"]
[Sat Apr 18 22:35:16.864987 2026] [:error] [pid 9865:tid 9947] [client 72.146.12.65:62249] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aeOWpKzb5knECIY-C-ig0gAAAIo"]
[Sat Apr 18 22:35:17.335752 2026] [:error] [pid 9865:tid 9949] [client 72.146.12.65:11100] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aeOWpazb5knECIY-C-ig0wAAAIw"]
[Sat Apr 18 22:35:17.845084 2026] [:error] [pid 9865:tid 9961] [client 72.146.12.65:62148] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aeOWpazb5knECIY-C-ig1gAAAJg"]
[Sat Apr 18 22:35:18.310481 2026] [:error] [pid 9864:tid 9913] [client 72.146.12.65:11017] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "aeOWpoCFeowknfXHM7kwvQAAAEc"]
[Sat Apr 18 22:35:18.786557 2026] [:error] [pid 13023:tid 13042] [client 72.146.12.65:62264] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "aeOWpv1e7hG8DAeABB88PwAAARE"]
[Sat Apr 18 22:35:19.260054 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:10959] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "aeOWp_1e7hG8DAeABB88QgAAARI"]
[Sat Apr 18 22:35:19.729002 2026] [:error] [pid 13023:tid 13032] [client 72.146.12.65:11104] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wziar1.php"] [unique_id "aeOWp_1e7hG8DAeABB88RQAAAQc"]
[Sat Apr 18 22:35:20.233694 2026] [:error] [pid 9970:tid 9988] [client 72.146.12.65:62158] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/repurify.php"] [unique_id "aeOWqCYdRLRhVmaIMx3elgAAAM4"]
[Sat Apr 18 22:35:20.714792 2026] [:error] [pid 34290:tid 34334] [client 72.146.12.65:62216] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/repurify.php"] [unique_id "aeOWqBqX6WpmmAXOBi8rLAAAAc8"]
[Sat Apr 18 22:35:21.202501 2026] [:error] [pid 34290:tid 34326] [client 72.146.12.65:62174] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/repurify.php"] [unique_id "aeOWqRqX6WpmmAXOBi8rLQAAAcc"]
[Sat Apr 18 22:35:21.672714 2026] [:error] [pid 9865:tid 9943] [client 72.146.12.65:62238] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/repurify.php"] [unique_id "aeOWqazb5knECIY-C-ig2wAAAIY"]
[Sat Apr 18 22:35:22.152700 2026] [:error] [pid 34288:tid 34300] [client 72.146.12.65:11208] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeOWquTIiy__PtiLmpndLgAAAYg"]
[Sat Apr 18 22:35:22.622794 2026] [:error] [pid 32677:tid 32685] [client 72.146.12.65:62234] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeOWqhngmUE3LdC-wP7uzQAAAkU"]
[Sat Apr 18 22:35:23.091539 2026] [:error] [pid 9970:tid 9989] [client 72.146.12.65:62154] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeOWqyYdRLRhVmaIMx3emwAAAM8"]
[Sat Apr 18 22:35:23.563704 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:62171] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeOWqyYdRLRhVmaIMx3engAAAMw"]
[Sat Apr 18 22:35:24.038594 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:11114] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeOWrCYdRLRhVmaIMx3eowAAAMs"]
[Sat Apr 18 22:35:24.510053 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:11024] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeOWrP1e7hG8DAeABB88SQAAARg"]
[Sat Apr 18 22:35:24.974687 2026] [:error] [pid 9970:tid 9976] [client 72.146.12.65:62149] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeOWrCYdRLRhVmaIMx3epQAAAMI"]
[Sat Apr 18 22:35:25.460124 2026] [:error] [pid 34290:tid 34337] [client 72.146.12.65:62198] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeOWrRqX6WpmmAXOBi8rMQAAAdI"]
[Sat Apr 18 22:35:25.929183 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:11115] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "aeOWrSYdRLRhVmaIMx3eqAAAAMc"]
[Sat Apr 18 22:35:26.422864 2026] [:error] [pid 34290:tid 34322] [client 72.146.12.65:11061] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "aeOWrhqX6WpmmAXOBi8rMgAAAcM"]
[Sat Apr 18 22:35:26.902266 2026] [:error] [pid 34290:tid 34331] [client 72.146.12.65:11203] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "aeOWrhqX6WpmmAXOBi8rMwAAAcw"]
[Sat Apr 18 22:35:27.390339 2026] [:error] [pid 9863:tid 9876] [client 72.146.12.65:62236] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxl.php"] [unique_id "aeOWrzjjiypiFrTucbLYlQAAAAM"]
[Sat Apr 18 22:35:27.863694 2026] [:error] [pid 32678:tid 32730] [client 72.146.12.65:62165] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeOWrxUlAXU_ZWUu5y8O7wAAApc"]
[Sat Apr 18 22:35:28.332022 2026] [:error] [pid 9863:tid 9875] [client 72.146.12.65:62146] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeOWsDjjiypiFrTucbLYlgAAAAI"]
[Sat Apr 18 22:35:28.805104 2026] [:error] [pid 9863:tid 9882] [client 72.146.12.65:11189] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeOWsDjjiypiFrTucbLYlwAAAAk"]
[Sat Apr 18 22:35:29.271515 2026] [:error] [pid 9864:tid 9915] [client 72.146.12.65:11081] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeOWsYCFeowknfXHM7kwxAAAAEk"]
[Sat Apr 18 22:35:29.739302 2026] [:error] [pid 9970:tid 9993] [client 72.146.12.65:11113] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "aeOWsSYdRLRhVmaIMx3eugAAANM"]
[Sat Apr 18 22:35:30.221927 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:62152] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "aeOWsiYdRLRhVmaIMx3evQAAAMs"]
[Sat Apr 18 22:35:30.704375 2026] [:error] [pid 32647:tid 32654] [client 72.146.12.65:62196] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "aeOWskkxooM0iRo6e54wvwAAAgQ"]
[Sat Apr 18 22:35:31.173076 2026] [:error] [pid 9865:tid 9955] [client 72.146.12.65:62233] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upll22.php"] [unique_id "aeOWs6zb5knECIY-C-ig4QAAAJI"]
[Sat Apr 18 22:35:31.646930 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:11134] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeOWsyYdRLRhVmaIMx3ewgAAAMs"]
[Sat Apr 18 22:35:50.641993 2026] [proxy_fcgi:error] [pid 9865:tid 9949] [client 72.146.12.65:62147] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:36:05.083619 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 72.146.12.65:62247] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:36:05.625164 2026] [proxy_fcgi:error] [pid 9865:tid 9958] [client 72.146.12.65:11130] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:36:20.331101 2026] [proxy_fcgi:error] [pid 32678:tid 32714] [client 72.146.12.65:62167] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:36:25.394008 2026] [:error] [pid 9863:tid 9893] [client 72.146.12.65:62225] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "aeOW6TjjiypiFrTucbLYuAAAABQ"]
[Sat Apr 18 22:36:25.880005 2026] [:error] [pid 32647:tid 32654] [client 72.146.12.65:10981] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "aeOW6UkxooM0iRo6e54wxwAAAgQ"]
[Sat Apr 18 22:36:26.351474 2026] [:error] [pid 9865:tid 9951] [client 72.146.12.65:62150] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "aeOW6qzb5knECIY-C-ihMAAAAI4"]
[Sat Apr 18 22:36:26.822130 2026] [:error] [pid 9865:tid 9937] [client 72.146.12.65:11109] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/oircv.php"] [unique_id "aeOW6qzb5knECIY-C-ihMgAAAIA"]
[Sat Apr 18 22:36:27.300634 2026] [:error] [pid 13023:tid 13034] [client 72.146.12.65:62220] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "aeOW6_1e7hG8DAeABB88hgAAAQk"]
[Sat Apr 18 22:36:27.814632 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:11107] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "aeOW6_1e7hG8DAeABB88hwAAARc"]
[Sat Apr 18 22:36:28.302805 2026] [:error] [pid 13023:tid 13025] [client 72.146.12.65:62164] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "aeOW7P1e7hG8DAeABB88igAAAQA"]
[Sat Apr 18 22:36:28.775917 2026] [:error] [pid 9863:tid 9877] [client 72.146.12.65:62172] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "aeOW7DjjiypiFrTucbLYuQAAAAQ"]
[Sat Apr 18 22:36:29.251328 2026] [:error] [pid 9865:tid 9938] [client 72.146.12.65:62184] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "aeOW7azb5knECIY-C-ihNAAAAIE"]
[Sat Apr 18 22:36:29.738249 2026] [:error] [pid 13023:tid 13038] [client 72.146.12.65:62166] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "aeOW7f1e7hG8DAeABB88jwAAAQ0"]
[Sat Apr 18 22:36:30.250067 2026] [:error] [pid 32678:tid 32722] [client 72.146.12.65:62271] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "aeOW7hUlAXU_ZWUu5y8PHwAAAo8"]
[Sat Apr 18 22:36:30.718524 2026] [:error] [pid 9865:tid 9947] [client 72.146.12.65:11145] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "aeOW7qzb5knECIY-C-ihNQAAAIo"]
[Sat Apr 18 22:36:31.186993 2026] [:error] [pid 9865:tid 9949] [client 72.146.12.65:62195] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "aeOW76zb5knECIY-C-ihOAAAAIw"]
[Sat Apr 18 22:36:31.694601 2026] [:error] [pid 9865:tid 9937] [client 72.146.12.65:62244] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "aeOW76zb5knECIY-C-ihOgAAAIA"]
[Sat Apr 18 22:36:32.164988 2026] [:error] [pid 9864:tid 9929] [client 72.146.12.65:11021] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "aeOW8ICFeowknfXHM7kw3QAAAFc"]
[Sat Apr 18 22:36:32.659870 2026] [:error] [pid 32647:tid 32651] [client 72.146.12.65:62187] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "aeOW8EkxooM0iRo6e54wzAAAAgE"]
[Sat Apr 18 22:36:33.126637 2026] [:error] [pid 9863:tid 9883] [client 72.146.12.65:11204] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "aeOW8TjjiypiFrTucbLYvAAAAAo"]
[Sat Apr 18 22:36:33.592692 2026] [:error] [pid 9864:tid 9921] [client 72.146.12.65:11025] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "aeOW8YCFeowknfXHM7kw3gAAAE8"]
[Sat Apr 18 22:36:34.057619 2026] [:error] [pid 34290:tid 34328] [client 72.146.12.65:62223] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "aeOW8hqX6WpmmAXOBi8rQgAAAck"]
[Sat Apr 18 22:36:34.530118 2026] [:error] [pid 34288:tid 34304] [client 72.146.12.65:11201] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hhxc.php"] [unique_id "aeOW8uTIiy__PtiLmpndTQAAAYw"]
[Sat Apr 18 22:36:35.002298 2026] [:error] [pid 32678:tid 32725] [client 72.146.12.65:11212] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeOW8xUlAXU_ZWUu5y8PJwAAApI"]
[Sat Apr 18 22:36:35.473392 2026] [:error] [pid 9865:tid 9944] [client 72.146.12.65:11201] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeOW86zb5knECIY-C-ihPAAAAIc"]
[Sat Apr 18 22:36:35.954415 2026] [:error] [pid 9863:tid 9881] [client 72.146.12.65:62232] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeOW8zjjiypiFrTucbLYvgAAAAg"]
[Sat Apr 18 22:36:36.421047 2026] [:error] [pid 9863:tid 9890] [client 72.146.12.65:11226] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeOW9DjjiypiFrTucbLYwAAAABE"]
[Sat Apr 18 22:36:36.931448 2026] [:error] [pid 32647:tid 32650] [client 72.146.12.65:62181] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeOW9EkxooM0iRo6e54w0AAAAgA"]
[Sat Apr 18 22:36:37.425558 2026] [:error] [pid 32677:tid 32686] [client 72.146.12.65:11031] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeOW9RngmUE3LdC-wP7vAwAAAkY"]
[Sat Apr 18 22:36:37.896309 2026] [:error] [pid 32678:tid 32721] [client 72.146.12.65:62217] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeOW9RUlAXU_ZWUu5y8PKgAAAo4"]
[Sat Apr 18 22:36:38.393535 2026] [:error] [pid 9865:tid 9957] [client 72.146.12.65:62253] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeOW9qzb5knECIY-C-ihPwAAAJQ"]
[Sat Apr 18 22:36:38.873762 2026] [:error] [pid 9865:tid 9960] [client 72.146.12.65:62237] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "aeOW9qzb5knECIY-C-ihQAAAAJc"]
[Sat Apr 18 22:36:39.357514 2026] [:error] [pid 9865:tid 9951] [client 72.146.12.65:62173] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "aeOW96zb5knECIY-C-ihRAAAAI4"]
[Sat Apr 18 22:36:39.848312 2026] [:error] [pid 9865:tid 9938] [client 72.146.12.65:62229] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "aeOW96zb5knECIY-C-ihSAAAAIE"]
[Sat Apr 18 22:36:40.330796 2026] [:error] [pid 32678:tid 32711] [client 72.146.12.65:10953] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "aeOW-BUlAXU_ZWUu5y8PKwAAAoQ"]
[Sat Apr 18 22:36:40.796505 2026] [:error] [pid 9864:tid 9920] [client 72.146.12.65:62190] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HLA-dd.php"] [unique_id "aeOW-ICFeowknfXHM7kw4wAAAE4"]
[Sat Apr 18 22:36:41.277776 2026] [:error] [pid 9865:tid 9946] [client 72.146.12.65:11073] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HLA-dd.php"] [unique_id "aeOW-azb5knECIY-C-ihTgAAAIk"]
[Sat Apr 18 22:36:41.760653 2026] [:error] [pid 9865:tid 9949] [client 72.146.12.65:62179] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HLA-dd.php"] [unique_id "aeOW-azb5knECIY-C-ihTwAAAIw"]
[Sat Apr 18 22:36:42.257051 2026] [:error] [pid 13023:tid 13030] [client 72.146.12.65:62205] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HLA-dd.php"] [unique_id "aeOW-v1e7hG8DAeABB88lQAAAQU"]
[Sat Apr 18 22:36:42.799647 2026] [:error] [pid 13023:tid 13034] [client 72.146.12.65:62260] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "aeOW-v1e7hG8DAeABB88lwAAAQk"]
[Sat Apr 18 22:36:43.267795 2026] [:error] [pid 13023:tid 13031] [client 72.146.12.65:11235] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "aeOW-_1e7hG8DAeABB88mwAAAQY"]
[Sat Apr 18 22:36:43.741399 2026] [:error] [pid 9864:tid 9905] [client 72.146.12.65:11220] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "aeOW-4CFeowknfXHM7kw5QAAAEA"]
[Sat Apr 18 22:36:44.217140 2026] [:error] [pid 32647:tid 32668] [client 72.146.12.65:62226] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "aeOW_EkxooM0iRo6e54w1QAAAhI"]
[Sat Apr 18 22:36:44.717865 2026] [:error] [pid 9864:tid 9927] [client 72.146.12.65:11101] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeOW_ICFeowknfXHM7kw5wAAAFU"]
[Sat Apr 18 22:36:45.204869 2026] [:error] [pid 32647:tid 32673] [client 72.146.12.65:11243] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeOW_UkxooM0iRo6e54w1wAAAhc"]
[Sat Apr 18 22:36:45.797902 2026] [:error] [pid 32647:tid 32664] [client 72.146.12.65:62263] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeOW_UkxooM0iRo6e54w2AAAAg4"]
[Sat Apr 18 22:36:46.272576 2026] [:error] [pid 9970:tid 9983] [client 72.146.12.65:11199] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeOW_iYdRLRhVmaIMx3fAwAAAMk"]
[Sat Apr 18 22:36:46.745301 2026] [:error] [pid 9865:tid 9949] [client 72.146.12.65:62155] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeOW_qzb5knECIY-C-ihVwAAAIw"]
[Sat Apr 18 22:36:47.211850 2026] [:error] [pid 9865:tid 9942] [client 72.146.12.65:11097] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeOW_6zb5knECIY-C-ihWAAAAIU"]
[Sat Apr 18 22:36:47.726511 2026] [:error] [pid 32678:tid 32727] [client 72.146.12.65:11146] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeOW_xUlAXU_ZWUu5y8PLwAAApQ"]
[Sat Apr 18 22:36:48.215713 2026] [:error] [pid 9865:tid 9959] [client 72.146.12.65:10979] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeOXAKzb5knECIY-C-ihWQAAAJY"]
[Sat Apr 18 22:36:48.701913 2026] [:error] [pid 32678:tid 32718] [client 72.146.12.65:11053] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "aeOXABUlAXU_ZWUu5y8PMAAAAos"]
[Sat Apr 18 22:36:49.176025 2026] [:error] [pid 32647:tid 32654] [client 72.146.12.65:11088] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "aeOXAUkxooM0iRo6e54w2QAAAgQ"]
[Sat Apr 18 22:36:49.643100 2026] [:error] [pid 9864:tid 9917] [client 72.146.12.65:11245] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "aeOXAYCFeowknfXHM7kw6gAAAEs"]
[Sat Apr 18 22:36:50.124577 2026] [:error] [pid 34290:tid 34330] [client 72.146.12.65:62265] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blnux.php"] [unique_id "aeOXAhqX6WpmmAXOBi8rSAAAAcs"]
[Sat Apr 18 22:36:50.673746 2026] [:error] [pid 32647:tid 32662] [client 72.146.12.65:11192] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "aeOXAkkxooM0iRo6e54w2gAAAgw"]
[Sat Apr 18 22:36:51.156301 2026] [:error] [pid 9864:tid 9908] [client 72.146.12.65:11244] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "aeOXA4CFeowknfXHM7kw7QAAAEM"]
[Sat Apr 18 22:36:51.644014 2026] [:error] [pid 32647:tid 32656] [client 72.146.12.65:11227] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "aeOXA0kxooM0iRo6e54w2wAAAgY"]
[Sat Apr 18 22:36:52.131320 2026] [:error] [pid 32678:tid 32724] [client 72.146.12.65:11058] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blqjs.php"] [unique_id "aeOXBBUlAXU_ZWUu5y8PMwAAApE"]
[Sat Apr 18 22:36:52.602821 2026] [:error] [pid 9865:tid 9937] [client 72.146.12.65:62259] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "aeOXBKzb5knECIY-C-ihXAAAAIA"]
[Sat Apr 18 22:36:53.079986 2026] [:error] [pid 9864:tid 9920] [client 72.146.12.65:62177] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "aeOXBYCFeowknfXHM7kw7wAAAE4"]
[Sat Apr 18 22:36:53.559071 2026] [:error] [pid 32677:tid 32703] [client 72.146.12.65:11229] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "aeOXBRngmUE3LdC-wP7vCgAAAlc"]
[Sat Apr 18 22:36:54.059677 2026] [:error] [pid 9865:tid 9947] [client 72.146.12.65:10996] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fyflv.php"] [unique_id "aeOXBqzb5knECIY-C-ihXQAAAIo"]
[Sat Apr 18 22:36:54.532224 2026] [:error] [pid 32647:tid 32657] [client 72.146.12.65:62241] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "aeOXBkkxooM0iRo6e54w3AAAAgc"]
[Sat Apr 18 22:36:55.004816 2026] [:error] [pid 32647:tid 32651] [client 72.146.12.65:11054] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "aeOXB0kxooM0iRo6e54w3QAAAgE"]
[Sat Apr 18 22:36:55.483463 2026] [:error] [pid 32677:tid 32684] [client 72.146.12.65:11231] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "aeOXBxngmUE3LdC-wP7vCwAAAkQ"]
[Sat Apr 18 22:36:55.962752 2026] [:error] [pid 9970:tid 9981] [client 72.146.12.65:62209] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iindv.php"] [unique_id "aeOXByYdRLRhVmaIMx3fCgAAAMc"]
[Sat Apr 18 22:36:56.431213 2026] [:error] [pid 9970:tid 9983] [client 72.146.12.65:10945] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wkogn.php"] [unique_id "aeOXCCYdRLRhVmaIMx3fDAAAAMk"]
[Sat Apr 18 22:36:56.903399 2026] [:error] [pid 32678:tid 32714] [client 72.146.12.65:62259] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wkogn.php"] [unique_id "aeOXCBUlAXU_ZWUu5y8POAAAAoc"]
[Sat Apr 18 22:36:57.395015 2026] [:error] [pid 32678:tid 32728] [client 72.146.12.65:10968] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wkogn.php"] [unique_id "aeOXCRUlAXU_ZWUu5y8POgAAApU"]
[Sat Apr 18 22:36:57.870819 2026] [:error] [pid 9865:tid 9954] [client 72.146.12.65:11105] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wkogn.php"] [unique_id "aeOXCazb5knECIY-C-ihYQAAAJE"]
[Sat Apr 18 22:36:58.340642 2026] [:error] [pid 9865:tid 9942] [client 72.146.12.65:62157] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wwdgl.php"] [unique_id "aeOXCqzb5knECIY-C-ihYgAAAIU"]
[Sat Apr 18 22:36:58.808542 2026] [:error] [pid 9865:tid 9959] [client 72.146.12.65:11207] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wwdgl.php"] [unique_id "aeOXCqzb5knECIY-C-ihYwAAAJY"]
[Sat Apr 18 22:36:59.277330 2026] [:error] [pid 13023:tid 13041] [client 72.146.12.65:10948] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wwdgl.php"] [unique_id "aeOXC_1e7hG8DAeABB88oQAAARA"]
[Sat Apr 18 22:36:59.741560 2026] [:error] [pid 34290:tid 34337] [client 72.146.12.65:11045] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wwdgl.php"] [unique_id "aeOXCxqX6WpmmAXOBi8rTQAAAdI"]
[Sat Apr 18 22:37:00.217284 2026] [:error] [pid 9970:tid 9977] [client 72.146.12.65:11110] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxeyc.php"] [unique_id "aeOXDCYdRLRhVmaIMx3fDwAAAMM"]
[Sat Apr 18 22:37:00.695102 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:11194] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxeyc.php"] [unique_id "aeOXDP1e7hG8DAeABB88ogAAAQo"]
[Sat Apr 18 22:37:01.177606 2026] [:error] [pid 32677:tid 32693] [client 72.146.12.65:11126] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxeyc.php"] [unique_id "aeOXDRngmUE3LdC-wP7vDQAAAk0"]
[Sat Apr 18 22:37:01.649353 2026] [:error] [pid 32678:tid 32710] [client 72.146.12.65:11083] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxeyc.php"] [unique_id "aeOXDRUlAXU_ZWUu5y8PPQAAAoM"]
[Sat Apr 18 22:37:02.117979 2026] [:error] [pid 9865:tid 9946] [client 72.146.12.65:62210] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeOXDqzb5knECIY-C-ihZwAAAIk"]
[Sat Apr 18 22:37:02.584487 2026] [:error] [pid 13023:tid 13049] [client 72.146.12.65:62145] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeOXDv1e7hG8DAeABB88pQAAARg"]
[Sat Apr 18 22:37:03.061076 2026] [:error] [pid 13023:tid 13044] [client 72.146.12.65:62261] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeOXD_1e7hG8DAeABB88qQAAARM"]
[Sat Apr 18 22:37:03.530900 2026] [:error] [pid 32677:tid 32685] [client 72.146.12.65:62230] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeOXDxngmUE3LdC-wP7vDgAAAkU"]
[Sat Apr 18 22:37:04.014959 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:62167] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeOXEP1e7hG8DAeABB88rAAAARI"]
[Sat Apr 18 22:37:04.492770 2026] [:error] [pid 13023:tid 13027] [client 72.146.12.65:11218] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeOXEP1e7hG8DAeABB88rgAAAQI"]
[Sat Apr 18 22:37:04.965511 2026] [:error] [pid 13023:tid 13041] [client 72.146.12.65:62199] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeOXEP1e7hG8DAeABB88sAAAARA"]
[Sat Apr 18 22:37:05.442329 2026] [:error] [pid 13023:tid 13035] [client 72.146.12.65:62222] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeOXEf1e7hG8DAeABB88swAAAQo"]
[Sat Apr 18 22:37:05.944873 2026] [:error] [pid 13023:tid 13032] [client 72.146.12.65:11224] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3akp.php"] [unique_id "aeOXEf1e7hG8DAeABB88tAAAAQc"]
[Sat Apr 18 22:37:06.418671 2026] [:error] [pid 13023:tid 13047] [client 72.146.12.65:62163] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3akp.php"] [unique_id "aeOXEv1e7hG8DAeABB88tgAAARY"]
[Sat Apr 18 22:37:06.892295 2026] [:error] [pid 9864:tid 9924] [client 72.146.12.65:11217] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3akp.php"] [unique_id "aeOXEoCFeowknfXHM7kw9QAAAFI"]
[Sat Apr 18 22:37:07.372382 2026] [:error] [pid 13023:tid 13028] [client 72.146.12.65:10955] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3akp.php"] [unique_id "aeOXE_1e7hG8DAeABB88uQAAAQM"]
[Sat Apr 18 22:37:07.839431 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:11170] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "aeOXE_1e7hG8DAeABB88vAAAARI"]
[Sat Apr 18 22:37:08.334049 2026] [:error] [pid 13023:tid 13039] [client 72.146.12.65:10952] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "aeOXFP1e7hG8DAeABB88wAAAAQ4"]
[Sat Apr 18 22:37:08.804763 2026] [:error] [pid 32677:tid 32683] [client 72.146.12.65:62180] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "aeOXFBngmUE3LdC-wP7vFQAAAkM"]
[Sat Apr 18 22:37:09.287717 2026] [:error] [pid 13023:tid 13042] [client 72.146.12.65:11051] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sde.php"] [unique_id "aeOXFf1e7hG8DAeABB88wgAAARE"]
[Sat Apr 18 22:37:09.763540 2026] [:error] [pid 13023:tid 13033] [client 72.146.12.65:62258] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cdn3.php"] [unique_id "aeOXFf1e7hG8DAeABB88wwAAAQg"]
[Sat Apr 18 22:37:10.239846 2026] [:error] [pid 13023:tid 13036] [client 72.146.12.65:62243] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cdn3.php"] [unique_id "aeOXFv1e7hG8DAeABB88xQAAAQs"]
[Sat Apr 18 22:37:10.711067 2026] [:error] [pid 32678:tid 32726] [client 72.146.12.65:62268] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cdn3.php"] [unique_id "aeOXFhUlAXU_ZWUu5y8PQgAAApM"]
[Sat Apr 18 22:37:11.189087 2026] [:error] [pid 13023:tid 13028] [client 72.146.12.65:11215] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cdn3.php"] [unique_id "aeOXF_1e7hG8DAeABB88ygAAAQM"]
[Sat Apr 18 22:37:11.683393 2026] [:error] [pid 13023:tid 13036] [client 72.146.12.65:11141] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeOXF_1e7hG8DAeABB88zAAAAQs"]
[Sat Apr 18 22:37:12.158391 2026] [:error] [pid 32647:tid 32655] [client 72.146.12.65:11065] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeOXGEkxooM0iRo6e54w3wAAAgU"]
[Sat Apr 18 22:37:12.626335 2026] [:error] [pid 32678:tid 32725] [client 72.146.12.65:11172] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeOXGBUlAXU_ZWUu5y8PRQAAApI"]
[Sat Apr 18 22:37:13.113610 2026] [:error] [pid 34288:tid 34295] [client 72.146.12.65:62200] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeOXGeTIiy__PtiLmpndUwAAAYM"]
[Sat Apr 18 22:37:13.596688 2026] [:error] [pid 34288:tid 34313] [client 72.146.12.65:11148] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-220.php"] [unique_id "aeOXGeTIiy__PtiLmpndVQAAAZU"]
[Sat Apr 18 22:37:14.076903 2026] [:error] [pid 13023:tid 13038] [client 72.146.12.65:11047] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-220.php"] [unique_id "aeOXGv1e7hG8DAeABB880QAAAQ0"]
[Sat Apr 18 22:37:14.547414 2026] [:error] [pid 32677:tid 32696] [client 72.146.12.65:11247] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-220.php"] [unique_id "aeOXGhngmUE3LdC-wP7vGgAAAlA"]
[Sat Apr 18 22:37:15.027444 2026] [:error] [pid 32677:tid 32704] [client 72.146.12.65:11035] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zc-220.php"] [unique_id "aeOXGxngmUE3LdC-wP7vHgAAAlg"]
[Sat Apr 18 22:37:15.494953 2026] [:error] [pid 32677:tid 32688] [client 72.146.12.65:11158] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeOXGxngmUE3LdC-wP7vHwAAAkg"]
[Sat Apr 18 22:37:15.987801 2026] [:error] [pid 9970:tid 9994] [client 72.146.12.65:62156] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeOXGyYdRLRhVmaIMx3fEAAAANQ"]
[Sat Apr 18 22:37:16.461788 2026] [:error] [pid 32678:tid 32721] [client 72.146.12.65:11032] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeOXHBUlAXU_ZWUu5y8PRwAAAo4"]
[Sat Apr 18 22:37:16.930489 2026] [:error] [pid 9970:tid 9987] [client 72.146.12.65:62180] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeOXHCYdRLRhVmaIMx3fEQAAAM0"]
[Sat Apr 18 22:37:17.414374 2026] [:error] [pid 32677:tid 32694] [client 72.146.12.65:62252] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uazsl.php"] [unique_id "aeOXHRngmUE3LdC-wP7vIQAAAk4"]
[Sat Apr 18 22:37:17.894984 2026] [:error] [pid 32647:tid 32673] [client 72.146.12.65:11232] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uazsl.php"] [unique_id "aeOXHUkxooM0iRo6e54w4gAAAhc"]
[Sat Apr 18 22:37:18.372737 2026] [:error] [pid 32678:tid 32730] [client 72.146.12.65:62188] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uazsl.php"] [unique_id "aeOXHhUlAXU_ZWUu5y8PSQAAApc"]
[Sat Apr 18 22:37:18.839733 2026] [:error] [pid 32678:tid 32731] [client 72.146.12.65:62201] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uazsl.php"] [unique_id "aeOXHhUlAXU_ZWUu5y8PSwAAApg"]
[Sat Apr 18 22:37:19.313690 2026] [:error] [pid 32678:tid 32720] [client 72.146.12.65:11130] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aeOXHxUlAXU_ZWUu5y8PTAAAAo0"]
[Sat Apr 18 22:37:19.787086 2026] [:error] [pid 32677:tid 32684] [client 72.146.12.65:11187] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aeOXHxngmUE3LdC-wP7vIwAAAkQ"]
[Sat Apr 18 22:37:20.258686 2026] [:error] [pid 32677:tid 32700] [client 72.146.12.65:62161] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aeOXIBngmUE3LdC-wP7vJAAAAlQ"]
[Sat Apr 18 22:37:20.733055 2026] [:error] [pid 32678:tid 32725] [client 72.146.12.65:62176] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aeOXIBUlAXU_ZWUu5y8PTgAAApI"]
[Sat Apr 18 22:37:21.214550 2026] [:error] [pid 32677:tid 32686] [client 72.146.12.65:11206] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-denmono.php"] [unique_id "aeOXIRngmUE3LdC-wP7vJgAAAkY"]
[Sat Apr 18 22:37:21.683389 2026] [:error] [pid 13023:tid 13048] [client 72.146.12.65:62183] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-denmono.php"] [unique_id "aeOXIf1e7hG8DAeABB881gAAARc"]
[Sat Apr 18 22:37:40.595447 2026] [proxy_fcgi:error] [pid 32678:tid 32709] [client 72.146.12.65:62158] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:37:55.524746 2026] [proxy_fcgi:error] [pid 13023:tid 13028] [client 72.146.12.65:62160] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:37:56.079158 2026] [proxy_fcgi:error] [pid 32677:tid 32692] [client 72.146.12.65:11067] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:38:11.091204 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 72.146.12.65:62152] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 18 22:38:16.316320 2026] [:error] [pid 9970:tid 9982] [client 72.146.12.65:11239] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeOXWCYdRLRhVmaIMx3fOAAAAMg"]
[Sat Apr 18 22:38:16.805514 2026] [:error] [pid 9864:tid 9924] [client 72.146.12.65:11191] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeOXWICFeowknfXHM7kw_QAAAFI"]
[Sat Apr 18 22:38:17.307560 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:62227] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeOXWSYdRLRhVmaIMx3fOQAAANE"]
[Sat Apr 18 22:38:17.818535 2026] [:error] [pid 32678:tid 32712] [client 72.146.12.65:11250] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeOXWRUlAXU_ZWUu5y8PfQAAAoU"]
[Sat Apr 18 22:38:18.310914 2026] [:error] [pid 34290:tid 34338] [client 72.146.12.65:62255] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fss.php"] [unique_id "aeOXWhqX6WpmmAXOBi8rXgAAAdM"]
[Sat Apr 18 22:38:18.782337 2026] [:error] [pid 32678:tid 32726] [client 72.146.12.65:62269] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fss.php"] [unique_id "aeOXWhUlAXU_ZWUu5y8PgAAAApM"]
[Sat Apr 18 22:38:19.286940 2026] [:error] [pid 9970:tid 9986] [client 72.146.12.65:62251] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fss.php"] [unique_id "aeOXWyYdRLRhVmaIMx3fOwAAAMw"]
[Sat Apr 18 22:38:19.761190 2026] [:error] [pid 32678:tid 32717] [client 72.146.12.65:11236] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fss.php"] [unique_id "aeOXWxUlAXU_ZWUu5y8PgwAAAoo"]
[Sat Apr 18 22:38:20.296384 2026] [:error] [pid 34290:tid 34328] [client 72.146.12.65:11023] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aeOXXBqX6WpmmAXOBi8rYAAAAck"]
[Sat Apr 18 22:38:20.856555 2026] [:error] [pid 9970:tid 9993] [client 72.146.12.65:11241] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aeOXXCYdRLRhVmaIMx3fPgAAANM"]
[Sat Apr 18 22:38:21.343312 2026] [:error] [pid 34288:tid 34295] [client 72.146.12.65:62245] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aeOXXeTIiy__PtiLmpndWwAAAYM"]
[Sat Apr 18 22:38:21.886531 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:11163] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aeOXXSYdRLRhVmaIMx3fQgAAAMs"]
[Sat Apr 18 22:38:22.468367 2026] [:error] [pid 9970:tid 9991] [client 72.146.12.65:11181] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aeOXXiYdRLRhVmaIMx3fRAAAANE"]
[Sat Apr 18 22:38:23.034893 2026] [:error] [pid 34288:tid 34302] [client 72.146.12.65:11119] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aeOXX-TIiy__PtiLmpndXgAAAYo"]
[Sat Apr 18 22:38:23.507862 2026] [:error] [pid 34288:tid 34296] [client 72.146.12.65:62147] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aeOXX-TIiy__PtiLmpndYAAAAYQ"]
[Sat Apr 18 22:38:24.024831 2026] [:error] [pid 9864:tid 9909] [client 72.146.12.65:62239] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/011i.php"] [unique_id "aeOXYICFeowknfXHM7kxAQAAAEQ"]
[Sat Apr 18 22:38:24.606796 2026] [:error] [pid 32677:tid 32685] [client 72.146.12.65:11186] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gk.php"] [unique_id "aeOXYBngmUE3LdC-wP7vVgAAAkU"]
[Sat Apr 18 22:38:25.080759 2026] [:error] [pid 9970:tid 9997] [client 72.146.12.65:62207] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gk.php"] [unique_id "aeOXYSYdRLRhVmaIMx3fSgAAANc"]
[Sat Apr 18 22:38:25.550756 2026] [:error] [pid 9970:tid 9978] [client 72.146.12.65:11222] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gk.php"] [unique_id "aeOXYSYdRLRhVmaIMx3fTAAAAMQ"]
[Sat Apr 18 22:38:26.024329 2026] [:error] [pid 34290:tid 34325] [client 72.146.12.65:11103] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gk.php"] [unique_id "aeOXYhqX6WpmmAXOBi8rYwAAAcY"]
[Sat Apr 18 22:38:26.493985 2026] [:error] [pid 34290:tid 34323] [client 72.146.12.65:11033] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "aeOXYhqX6WpmmAXOBi8rZAAAAcQ"]
[Sat Apr 18 22:38:26.975791 2026] [:error] [pid 32677:tid 32684] [client 72.146.12.65:11255] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "aeOXYhngmUE3LdC-wP7vWgAAAkQ"]
[Sat Apr 18 22:38:27.483042 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:11209] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "aeOXY_1e7hG8DAeABB89PgAAARU"]
[Sat Apr 18 22:38:28.067583 2026] [:error] [pid 32677:tid 32693] [client 72.146.12.65:11214] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "aeOXZBngmUE3LdC-wP7vXQAAAk0"]
[Sat Apr 18 22:38:28.565817 2026] [:error] [pid 13023:tid 13030] [client 72.146.12.65:62240] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeOXZP1e7hG8DAeABB89QQAAAQU"]
[Sat Apr 18 22:38:29.037302 2026] [:error] [pid 13023:tid 13045] [client 72.146.12.65:11139] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeOXZf1e7hG8DAeABB89RAAAARQ"]
[Sat Apr 18 22:38:29.517643 2026] [:error] [pid 13023:tid 13027] [client 72.146.12.65:10995] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeOXZf1e7hG8DAeABB89RwAAAQI"]
[Sat Apr 18 22:38:30.033759 2026] [:error] [pid 13023:tid 13043] [client 72.146.12.65:62246] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeOXZv1e7hG8DAeABB89SgAAARI"]
[Sat Apr 18 22:38:30.500856 2026] [:error] [pid 13023:tid 13046] [client 72.146.12.65:11200] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeOXZv1e7hG8DAeABB89SwAAARU"]
[Sat Apr 18 22:38:30.981464 2026] [:error] [pid 13023:tid 13037] [client 72.146.12.65:62270] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeOXZv1e7hG8DAeABB89TQAAAQw"]
[Sat Apr 18 22:38:31.465389 2026] [:error] [pid 9864:tid 9919] [client 72.146.12.65:11075] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeOXZ4CFeowknfXHM7kxBQAAAE0"]
[Sat Apr 18 22:38:32.046296 2026] [:error] [pid 32677:tid 32681] [client 72.146.12.65:11242] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeOXaBngmUE3LdC-wP7vXgAAAkE"]
[Sat Apr 18 22:38:32.586076 2026] [:error] [pid 9970:tid 9979] [client 72.146.12.65:11137] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/home.php"] [unique_id "aeOXaCYdRLRhVmaIMx3fUgAAAMU"]
[Sat Apr 18 22:38:33.072569 2026] [:error] [pid 9970:tid 9985] [client 72.146.12.65:11161] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/home.php"] [unique_id "aeOXaSYdRLRhVmaIMx3fVQAAAMs"]
[Sat Apr 18 22:38:33.571356 2026] [:error] [pid 9864:tid 9929] [client 72.146.12.65:11149] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/home.php"] [unique_id "aeOXaYCFeowknfXHM7kxCgAAAFc"]
[Sat Apr 18 22:38:34.106045 2026] [:error] [pid 9864:tid 9909] [client 72.146.12.65:11180] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/home.php"] [unique_id "aeOXaoCFeowknfXHM7kxCwAAAEQ"]
[Sun Apr 19 01:07:12.573874 2026] [proxy_fcgi:error] [pid 32252:tid 32276] [client 103.4.122.14:33774] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 02:14:37.730723 2026] [proxy_fcgi:error] [pid 32252:tid 32267] [client 103.4.122.14:44498] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 03:16:13.562631 2026] [proxy_fcgi:error] [pid 41277:tid 41292] [client 103.4.122.14:51828] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 03:17:04.952493 2026] [:error] [pid 32252:tid 32270] [client 45.132.115.84:36935] [client 45.132.115.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.84, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aePYsOXl4Yc-Lt5fJ9i0SAAAARA"]
[Sun Apr 19 05:05:16.131065 2026] [proxy_fcgi:error] [pid 47773:tid 47822] [client 135.119.27.9:19410] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 05:05:31.818703 2026] [proxy_fcgi:error] [pid 47775:tid 47852] [client 135.119.27.9:4171] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 05:05:39.680829 2026] [:error] [pid 47775:tid 47862] [client 135.119.27.9:20841] [client 135.119.27.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "aePyI7mztjlk9tsmoexnjQAAAJM"]
[Sun Apr 19 05:05:41.775772 2026] [:error] [pid 47775:tid 47867] [client 135.119.27.9:4184] [client 135.119.27.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "aePyJbmztjlk9tsmoexnkgAAAJg"]
[Sun Apr 19 05:05:48.154682 2026] [:error] [pid 47773:tid 47839] [client 135.119.27.9:20819] [client 135.119.27.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "aePyLOiBHdnCJDuPq9BC-gAAAFc"]
[Sun Apr 19 05:05:49.480639 2026] [:error] [pid 15760:tid 15791] [client 135.119.27.9:20863] [client 135.119.27.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "aePyLfSdD_XHQMJ_ISsUtAAAAdc"]
[Sun Apr 19 05:54:57.327782 2026] [:error] [pid 47886:tid 47903] [client 3.39.245.161:57602] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aeP9sUSe8yiyuPrD7yPxAAAAAM8"]
[Sun Apr 19 05:55:00.584559 2026] [:error] [pid 15760:tid 15768] [client 3.39.245.161:44938] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aeP9tPSdD_XHQMJ_ISsbcgAAAcA"]
[Sun Apr 19 05:55:01.305111 2026] [:error] [pid 47772:tid 47797] [client 3.39.245.161:44944] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aeP9tYc0L16cb4smAz-opQAAAAg"]
[Sun Apr 19 05:55:01.997537 2026] [:error] [pid 47772:tid 47792] [client 3.39.245.161:44946] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aeP9tYc0L16cb4smAz-oqAAAAAM"]
[Sun Apr 19 05:55:03.084406 2026] [:error] [pid 47772:tid 47803] [client 3.39.245.161:44960] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aeP9t4c0L16cb4smAz-orwAAAA4"]
[Sun Apr 19 05:55:03.805068 2026] [:error] [pid 15764:tid 15831] [client 3.39.245.161:44972] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aeP9t2LL_sqdSHoVp-TuJQAAAkU"]
[Sun Apr 19 05:55:04.512628 2026] [:error] [pid 47775:tid 47851] [client 3.39.245.161:44980] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aeP9uLmztjlk9tsmoex3SQAAAIg"]
[Sun Apr 19 05:55:05.285287 2026] [:error] [pid 15765:tid 15859] [client 3.39.245.161:44994] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.remote"] [unique_id "aeP9ufRqinw-W5EwQ76HmAAAAoY"]
[Sun Apr 19 05:55:06.194120 2026] [:error] [pid 15760:tid 15777] [client 3.39.245.161:45000] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aeP9uvSdD_XHQMJ_ISsbdAAAAck"]
[Sun Apr 19 05:55:06.931920 2026] [:error] [pid 15694:tid 15739] [client 3.39.245.161:45006] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aeP9urimB-jol1fwqAq89wAAAY0"]
[Sun Apr 19 05:55:07.732810 2026] [:error] [pid 47772:tid 47797] [client 3.39.245.161:45022] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aeP9u4c0L16cb4smAz-ouwAAAAg"]
[Sun Apr 19 05:55:08.636011 2026] [:error] [pid 15765:tid 15863] [client 3.39.245.161:45576] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aeP9vPRqinw-W5EwQ76HngAAAoo"]
[Sun Apr 19 05:55:09.337583 2026] [:error] [pid 47886:tid 47911] [client 3.39.245.161:45590] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "aeP9vUSe8yiyuPrD7yPxFwAAANc"]
[Sun Apr 19 05:55:10.029458 2026] [:error] [pid 47775:tid 47848] [client 3.39.245.161:45600] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aeP9vrmztjlk9tsmoex3XwAAAIU"]
[Sun Apr 19 05:55:10.744511 2026] [:error] [pid 15765:tid 15853] [client 3.39.245.161:45614] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "aeP9vvRqinw-W5EwQ76HpQAAAoE"]
[Sun Apr 19 05:55:11.765844 2026] [:error] [pid 47773:tid 47826] [client 3.39.245.161:45618] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "aeP9v-iBHdnCJDuPq9Be5gAAAEo"]
[Sun Apr 19 05:55:12.450067 2026] [:error] [pid 15763:tid 15812] [client 3.39.245.161:45630] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.stage"] [unique_id "aeP9wLMXv1Y1THOoxaAmqwAAAhA"]
[Sun Apr 19 05:55:13.141469 2026] [:error] [pid 15765:tid 15868] [client 3.39.245.161:45644] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci"] [unique_id "aeP9wfRqinw-W5EwQ76HqgAAAo8"]
[Sun Apr 19 05:55:13.887147 2026] [:error] [pid 15765:tid 15866] [client 3.39.245.161:45656] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker"] [unique_id "aeP9wfRqinw-W5EwQ76HrgAAAo0"]
[Sun Apr 19 05:55:14.829745 2026] [:error] [pid 15765:tid 15857] [client 3.39.245.161:45670] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live"] [unique_id "aeP9wvRqinw-W5EwQ76HsgAAAoQ"]
[Sun Apr 19 05:55:15.510947 2026] [:error] [pid 15693:tid 15713] [client 3.39.245.161:45672] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.preprod"] [unique_id "aeP9w8NMD-ccazQlTskX6QAAAVE"]
[Sun Apr 19 05:55:16.248795 2026] [:error] [pid 15764:tid 15840] [client 3.39.245.161:45676] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.uat"] [unique_id "aeP9xGLL_sqdSHoVp-TuNgAAAk4"]
[Sun Apr 19 05:55:16.951860 2026] [:error] [pid 15764:tid 15834] [client 3.39.245.161:45688] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "aeP9xGLL_sqdSHoVp-TuOAAAAkg"]
[Sun Apr 19 05:55:17.890561 2026] [:error] [pid 15764:tid 15830] [client 3.39.245.161:45694] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.swp"] [unique_id "aeP9xWLL_sqdSHoVp-TuPgAAAkQ"]
[Sun Apr 19 05:55:18.629080 2026] [:error] [pid 47772:tid 47798] [client 3.39.245.161:41864] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env~"] [unique_id "aeP9xoc0L16cb4smAz-owQAAAAk"]
[Sun Apr 19 05:55:19.339680 2026] [:error] [pid 15694:tid 15743] [client 3.39.245.161:41876] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "aeP9x7imB-jol1fwqAq9AQAAAZE"]
[Sun Apr 19 05:55:20.084689 2026] [:error] [pid 15693:tid 15705] [client 3.39.245.161:41888] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/apps/.env"] [unique_id "aeP9yMNMD-ccazQlTskX6wAAAUk"]
[Sun Apr 19 05:55:20.898846 2026] [:error] [pid 47775:tid 47850] [client 3.39.245.161:41898] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "aeP9yLmztjlk9tsmoex3cAAAAIc"]
[Sun Apr 19 05:55:21.635725 2026] [:error] [pid 15763:tid 15810] [client 3.39.245.161:41904] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.env"] [unique_id "aeP9ybMXv1Y1THOoxaAmswAAAg4"]
[Sun Apr 19 05:55:22.325323 2026] [:error] [pid 15764:tid 15851] [client 3.39.245.161:41920] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/site/.env"] [unique_id "aeP9ymLL_sqdSHoVp-TuSAAAAlg"]
[Sun Apr 19 05:55:23.474618 2026] [:error] [pid 15764:tid 15832] [client 3.39.245.161:41934] [client 3.39.245.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.env"] [unique_id "aeP9y2LL_sqdSHoVp-TuSwAAAkY"]
[Sun Apr 19 12:17:29.476788 2026] [proxy_fcgi:error] [pid 15763:tid 15807] [client 20.12.204.106:9555] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 12:17:46.371836 2026] [:error] [pid 47772:tid 47813] [client 20.12.204.106:9564] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.dj/index.php"] [unique_id "aeRXaoc0L16cb4smAz8r5wAAABg"]
[Sun Apr 19 12:17:51.137814 2026] [:error] [pid 15760:tid 15776] [client 20.12.204.106:9560] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.dj/index.php"] [unique_id "aeRXb_SdD_XHQMJ_IStGNgAAAcg"]
[Sun Apr 19 12:17:54.398334 2026] [:error] [pid 15764:tid 15851] [client 20.12.204.106:9545] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.dj/index.php"] [unique_id "aeRXcmLL_sqdSHoVp-Rg1gAAAlg"]
[Sun Apr 19 12:17:59.205024 2026] [:error] [pid 47772:tid 47792] [client 20.12.204.106:9536] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.dj/index.php"] [unique_id "aeRXd4c0L16cb4smAz8r-AAAAAM"]
[Sun Apr 19 13:30:16.584849 2026] [proxy_fcgi:error] [pid 15765:tid 15866] [client 45.86.202.66:61967] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 13:30:31.006840 2026] [proxy_fcgi:error] [pid 15760:tid 15771] [client 45.86.202.70:26715] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 13:30:47.988868 2026] [:error] [pid 47772:tid 47794] [client 45.86.202.80:37165] [client 45.86.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeRoh4c0L16cb4smAz9BtAAAAAU"]
[Sun Apr 19 13:30:52.097852 2026] [:error] [pid 15764:tid 15848] [client 45.86.202.61:22595] [client 45.86.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeRojGLL_sqdSHoVp-R9_gAAAlY"]
[Sun Apr 19 13:30:55.803298 2026] [proxy_fcgi:error] [pid 47775:tid 47853] [client 45.86.202.221:56033] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 19 22:04:13.980890 2026] [:error] [pid 15764:tid 15841] [client 138.68.5.226:51687] [client 138.68.5.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aeTg3WLL_sqdSHoVp-Qo_AAAAk8"]
[Sun Apr 19 22:12:12.009542 2026] [:error] [pid 15764:tid 15847] [client 107.174.52.59:40352] [client 107.174.52.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aeTivGLL_sqdSHoVp-QrjwAAAlU"]
[Sun Apr 19 22:12:14.101066 2026] [:error] [pid 15760:tid 15782] [client 107.174.52.59:40368] [client 107.174.52.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aeTivvSdD_XHQMJ_IStKcwAAAc4"]
[Sun Apr 19 22:12:25.843184 2026] [:error] [pid 15763:tid 15808] [client 107.174.52.59:46524] [client 107.174.52.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aeTiybMXv1Y1THOoxaAH2QAAAgw"]
[Sun Apr 19 22:12:25.843485 2026] [:error] [pid 15763:tid 15805] [client 107.174.52.59:46546] [client 107.174.52.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aeTiybMXv1Y1THOoxaAH2gAAAgk"]
[Sun Apr 19 22:12:25.843759 2026] [:error] [pid 15763:tid 15815] [client 107.174.52.59:46538] [client 107.174.52.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aeTiybMXv1Y1THOoxaAH2wAAAhM"]
[Sun Apr 19 22:50:48.684382 2026] [:error] [pid 15763:tid 15799] [client 146.70.194.222:44194] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aeTryLMXv1Y1THOoxaAS8gAAAgM"]
[Sun Apr 19 22:50:49.202131 2026] [:error] [pid 15760:tid 15790] [client 146.70.194.222:44694] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aeTryfSdD_XHQMJ_IStfeQAAAdY"]
[Sun Apr 19 22:50:49.730195 2026] [:error] [pid 15760:tid 15777] [client 146.70.194.222:45378] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aeTryfSdD_XHQMJ_IStflQAAAck"]
[Sun Apr 19 22:59:17.388884 2026] [:error] [pid 15760:tid 15773] [client 4.219.8.165:22098] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTtxfSdD_XHQMJ_IStjYQAAAcU"]
[Sun Apr 19 22:59:18.497535 2026] [:error] [pid 47772:tid 47812] [client 4.219.8.165:30318] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTtxoc0L16cb4smAz_cuwAAABc"]
[Sun Apr 19 22:59:21.545287 2026] [:error] [pid 47886:tid 47909] [client 4.219.8.165:30285] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTtyUSe8yiyuPrD7yOGvAAAANU"]
[Sun Apr 19 22:59:22.759176 2026] [:error] [pid 47775:tid 47863] [client 4.219.8.165:27752] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTtyrmztjlk9tsmoewo7gAAAJQ"]
[Mon Apr 20 01:08:27.771435 2026] [:error] [pid 47772:tid 47808] [client 4.219.8.165:29046] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeUMC4c0L16cb4smAz8A5QAAABM"]
[Mon Apr 20 01:08:32.617044 2026] [:error] [pid 15765:tid 15872] [client 4.219.8.165:55052] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeUMEPRqinw-W5EwQ74ZXAAAApM"]
[Mon Apr 20 01:08:34.353361 2026] [:error] [pid 15760:tid 15789] [client 4.219.8.165:59702] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeUMEvSdD_XHQMJ_ISughwAAAdU"]
[Mon Apr 20 01:08:35.776948 2026] [:error] [pid 47886:tid 47906] [client 4.219.8.165:50325] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeUME0Se8yiyuPrD7yOYIwAAANI"]
[Mon Apr 20 02:33:30.069003 2026] [proxy_fcgi:error] [pid 47772:tid 47794] [client 158.158.114.211:20967] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:34:04.336838 2026] [proxy_fcgi:error] [pid 15694:tid 15747] [client 158.158.114.211:15927] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:36:11.913937 2026] [autoindex:error] [pid 15764:tid 15846] [client 158.158.41.212:1728] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 02:36:18.006563 2026] [autoindex:error] [pid 15764:tid 15847] [client 158.158.41.212:1728] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 02:36:18.816514 2026] [proxy_fcgi:error] [pid 15764:tid 15839] [client 158.158.41.212:1728] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:36:26.995950 2026] [proxy_fcgi:error] [pid 15694:tid 15734] [client 158.158.41.212:1225] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:36:42.801285 2026] [proxy_fcgi:error] [pid 47775:tid 47843] [client 158.158.41.212:59756] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:37:08.057159 2026] [autoindex:error] [pid 15765:tid 15864] [client 158.158.41.212:40968] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 02:37:10.252269 2026] [proxy_fcgi:error] [pid 15760:tid 15780] [client 158.158.41.212:25213] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:37:10.796004 2026] [proxy_fcgi:error] [pid 15765:tid 15870] [client 158.158.41.212:40968] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:37:20.613601 2026] [:error] [pid 47886:tid 47895] [client 158.158.41.212:24474] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "aeUg4ESe8yiyuPrD7yOg_wAAAMc"]
[Mon Apr 20 02:37:21.296866 2026] [:error] [pid 15764:tid 15848] [client 158.158.41.212:14952] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "aeUg4WLL_sqdSHoVp-SDIwAAAlY"]
[Mon Apr 20 02:37:23.025269 2026] [:error] [pid 15764:tid 15831] [client 158.158.41.212:10361] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "aeUg42LL_sqdSHoVp-SDJgAAAkU"]
[Mon Apr 20 02:37:24.922490 2026] [:error] [pid 15694:tid 15730] [client 158.158.41.212:14452] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "aeUg5LimB-jol1fwqAo5JQAAAYQ"]
[Mon Apr 20 02:37:28.746029 2026] [:error] [pid 47886:tid 47900] [client 158.158.41.212:1694] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "aeUg6ESe8yiyuPrD7yOhAwAAAMw"]
[Mon Apr 20 02:37:30.012191 2026] [:error] [pid 47886:tid 47903] [client 158.158.41.212:24504] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "aeUg6kSe8yiyuPrD7yOhBAAAAM8"]
[Mon Apr 20 02:37:31.592187 2026] [:error] [pid 15764:tid 15827] [client 158.158.41.212:14407] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "aeUg62LL_sqdSHoVp-SDPgAAAkE"]
[Mon Apr 20 02:37:33.045955 2026] [:error] [pid 15764:tid 15829] [client 158.158.41.212:30223] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "aeUg7WLL_sqdSHoVp-SDQQAAAkM"]
[Mon Apr 20 02:37:33.709657 2026] [:error] [pid 15765:tid 15866] [client 158.158.41.212:10333] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "aeUg7fRqinw-W5EwQ74gXwAAAo0"]
[Mon Apr 20 02:37:34.423998 2026] [:error] [pid 15760:tid 15772] [client 158.158.41.212:30264] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "aeUg7vSdD_XHQMJ_ISu3nAAAAcQ"]
[Mon Apr 20 02:37:35.300217 2026] [:error] [pid 15694:tid 15723] [client 158.158.41.212:24468] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "aeUg77imB-jol1fwqAo5OwAAAYA"]
[Mon Apr 20 02:37:36.234707 2026] [:error] [pid 47772:tid 47802] [client 158.158.41.212:12448] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "aeUg8Ic0L16cb4smAz8RVQAAAA0"]
[Mon Apr 20 02:37:37.302395 2026] [:error] [pid 15764:tid 15833] [client 158.158.41.212:13308] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aeUg8WLL_sqdSHoVp-SDRgAAAkc"]
[Mon Apr 20 02:37:39.686218 2026] [:error] [pid 15764:tid 15828] [client 158.158.41.212:35269] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aeUg82LL_sqdSHoVp-SDSwAAAkI"]
[Mon Apr 20 02:37:40.951865 2026] [:error] [pid 15765:tid 15855] [client 158.158.41.212:15896] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aeUg9PRqinw-W5EwQ74gYQAAAoI"]
[Mon Apr 20 02:37:42.143912 2026] [:error] [pid 15763:tid 15804] [client 158.158.41.212:36488] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aeUg9rMXv1Y1THOoxaBACAAAAgg"]
[Mon Apr 20 02:37:43.241358 2026] [:error] [pid 15693:tid 15701] [client 158.158.41.212:19668] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "aeUg98NMD-ccazQlTsl0LgAAAUU"]
[Mon Apr 20 02:37:45.049099 2026] [:error] [pid 15765:tid 15860] [client 158.158.41.212:13262] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "aeUg-fRqinw-W5EwQ74gZQAAAoc"]
[Mon Apr 20 02:37:46.673354 2026] [:error] [pid 47772:tid 47809] [client 158.158.41.212:15902] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "aeUg-oc0L16cb4smAz8RWgAAABQ"]
[Mon Apr 20 02:37:47.957588 2026] [:error] [pid 15764:tid 15834] [client 158.158.41.212:13166] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "aeUg-2LL_sqdSHoVp-SDUQAAAkg"]
[Mon Apr 20 02:37:49.385823 2026] [:error] [pid 15693:tid 15709] [client 158.158.41.212:36495] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aeUg_cNMD-ccazQlTsl0MwAAAU0"]
[Mon Apr 20 02:37:49.948165 2026] [:error] [pid 15694:tid 15744] [client 158.158.41.212:38869] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aeUg_bimB-jol1fwqAo5PwAAAZI"]
[Mon Apr 20 02:37:51.877957 2026] [:error] [pid 47772:tid 47798] [client 158.158.41.212:19605] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aeUg_4c0L16cb4smAz8RXgAAAAk"]
[Mon Apr 20 02:37:53.062782 2026] [:error] [pid 15693:tid 15714] [client 158.158.41.212:32195] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aeUhAcNMD-ccazQlTsl0NQAAAVI"]
[Mon Apr 20 02:37:53.985529 2026] [:error] [pid 47772:tid 47802] [client 158.158.41.212:32208] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "aeUhAYc0L16cb4smAz8RYgAAAA0"]
[Mon Apr 20 02:37:54.783773 2026] [:error] [pid 47775:tid 47851] [client 158.158.41.212:10240] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "aeUhArmztjlk9tsmoexIxAAAAIg"]
[Mon Apr 20 02:37:58.118113 2026] [:error] [pid 15693:tid 15718] [client 158.158.41.212:10277] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "aeUhBsNMD-ccazQlTsl0PAAAAVY"]
[Mon Apr 20 02:38:00.505113 2026] [:error] [pid 47775:tid 47850] [client 158.158.41.212:19636] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "aeUhCLmztjlk9tsmoexIxwAAAIc"]
[Mon Apr 20 02:38:02.529360 2026] [:error] [pid 47772:tid 47812] [client 158.158.41.212:38852] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "aeUhCoc0L16cb4smAz8RZgAAABc"]
[Mon Apr 20 02:38:04.700167 2026] [:error] [pid 47775:tid 47860] [client 158.158.41.212:28077] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "aeUhDLmztjlk9tsmoexIywAAAJE"]
[Mon Apr 20 02:38:06.594644 2026] [:error] [pid 47775:tid 47865] [client 158.158.41.212:28609] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "aeUhDrmztjlk9tsmoexIzwAAAJY"]
[Mon Apr 20 02:38:09.417391 2026] [:error] [pid 47773:tid 47836] [client 158.158.41.212:19186] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "aeUhEeiBHdnCJDuPq9B7XwAAAFQ"]
[Mon Apr 20 02:38:10.051217 2026] [:error] [pid 15763:tid 15815] [client 158.158.41.212:12336] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "aeUhErMXv1Y1THOoxaBADQAAAhM"]
[Mon Apr 20 02:38:10.917553 2026] [:error] [pid 15760:tid 15792] [client 158.158.41.212:36524] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "aeUhEvSdD_XHQMJ_ISu3twAAAdg"]
[Mon Apr 20 02:38:11.726707 2026] [:error] [pid 15760:tid 15774] [client 158.158.41.212:20576] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "aeUhE_SdD_XHQMJ_ISu3uQAAAcY"]
[Mon Apr 20 02:38:13.078766 2026] [:error] [pid 15764:tid 15835] [client 158.158.41.212:35921] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "aeUhFWLL_sqdSHoVp-SDUgAAAkk"]
[Mon Apr 20 02:38:14.282503 2026] [:error] [pid 15764:tid 15831] [client 158.158.41.212:13336] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeUhFmLL_sqdSHoVp-SDVQAAAkU"]
[Mon Apr 20 02:38:15.409935 2026] [:error] [pid 15764:tid 15836] [client 158.158.41.212:20605] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeUhF2LL_sqdSHoVp-SDWwAAAko"]
[Mon Apr 20 02:38:17.077582 2026] [:error] [pid 15765:tid 15872] [client 158.158.41.212:20556] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeUhGfRqinw-W5EwQ74gcgAAApM"]
[Mon Apr 20 02:38:40.005961 2026] [proxy_fcgi:error] [pid 15694:tid 15734] [client 158.158.41.212:10535] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:38:53.278671 2026] [proxy_fcgi:error] [pid 47775:tid 47861] [client 158.158.41.212:16688] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:39:02.262994 2026] [proxy_fcgi:error] [pid 15764:tid 15847] [client 158.158.41.212:13571] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:39:15.074623 2026] [proxy_fcgi:error] [pid 15694:tid 15724] [client 158.158.41.212:12380] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:39:23.999175 2026] [:error] [pid 15760:tid 15780] [client 158.158.41.212:62793] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeUhW_SdD_XHQMJ_ISu4AwAAAcw"]
[Mon Apr 20 02:39:24.794775 2026] [:error] [pid 15760:tid 15792] [client 158.158.41.212:15360] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeUhXPSdD_XHQMJ_ISu4BAAAAdg"]
[Mon Apr 20 02:39:25.473044 2026] [:error] [pid 47772:tid 47796] [client 158.158.41.212:13076] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeUhXYc0L16cb4smAz8RjQAAAAc"]
[Mon Apr 20 02:39:26.731219 2026] [:error] [pid 15760:tid 15784] [client 158.158.41.212:23869] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "aeUhXvSdD_XHQMJ_ISu4BwAAAdA"]
[Mon Apr 20 02:39:27.612465 2026] [:error] [pid 15765:tid 15870] [client 158.158.41.212:33389] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aeUhX_Rqinw-W5EwQ74gegAAApE"]
[Mon Apr 20 02:39:29.235349 2026] [:error] [pid 47772:tid 47794] [client 158.158.41.212:15388] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aeUhYYc0L16cb4smAz8RkAAAAAU"]
[Mon Apr 20 02:39:30.046971 2026] [:error] [pid 47772:tid 47808] [client 158.158.41.212:33996] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aeUhYoc0L16cb4smAz8RlQAAABM"]
[Mon Apr 20 02:39:31.131658 2026] [:error] [pid 47772:tid 47790] [client 158.158.41.212:12549] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "aeUhY4c0L16cb4smAz8RmQAAAAE"]
[Mon Apr 20 02:39:32.283126 2026] [:error] [pid 15765:tid 15861] [client 158.158.41.212:34799] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeUhZPRqinw-W5EwQ74gewAAAog"]
[Mon Apr 20 02:39:33.129173 2026] [:error] [pid 47772:tid 47807] [client 158.158.41.212:33337] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeUhZYc0L16cb4smAz8RnQAAABI"]
[Mon Apr 20 02:39:33.817698 2026] [:error] [pid 15765:tid 15859] [client 158.158.41.212:26952] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeUhZfRqinw-W5EwQ74gfwAAAoY"]
[Mon Apr 20 02:39:37.049277 2026] [:error] [pid 15764:tid 15838] [client 158.158.41.212:13119] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeUhaWLL_sqdSHoVp-SD4gAAAkw"]
[Mon Apr 20 02:39:40.188398 2026] [:error] [pid 47775:tid 47847] [client 158.158.41.212:18258] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeUhbLmztjlk9tsmoexI-wAAAIQ"]
[Mon Apr 20 02:39:42.703772 2026] [:error] [pid 47773:tid 47822] [client 158.158.41.212:62806] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeUhbuiBHdnCJDuPq9B7gQAAAEY"]
[Mon Apr 20 02:39:44.507081 2026] [:error] [pid 47773:tid 47825] [client 158.158.41.212:14361] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeUhcOiBHdnCJDuPq9B7gwAAAEk"]
[Mon Apr 20 02:39:48.157725 2026] [:error] [pid 15763:tid 15803] [client 158.158.41.212:32159] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aeUhdLMXv1Y1THOoxaBAbQAAAgc"]
[Mon Apr 20 02:39:49.806163 2026] [:error] [pid 15694:tid 15748] [client 158.158.41.212:16429] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeUhdbimB-jol1fwqAo5qAAAAZY"]
[Mon Apr 20 02:39:50.954601 2026] [:error] [pid 15760:tid 15787] [client 158.158.41.212:13084] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeUhdvSdD_XHQMJ_ISu4FwAAAdM"]
[Mon Apr 20 02:39:52.978026 2026] [:error] [pid 15764:tid 15851] [client 158.158.41.212:13102] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeUheGLL_sqdSHoVp-SD7gAAAlg"]
[Mon Apr 20 02:39:54.201958 2026] [:error] [pid 15694:tid 15723] [client 158.158.41.212:58965] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeUherimB-jol1fwqAo5rAAAAYA"]
[Mon Apr 20 02:39:54.878943 2026] [:error] [pid 15764:tid 15828] [client 158.158.41.212:1480] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "aeUhemLL_sqdSHoVp-SD8QAAAkI"]
[Mon Apr 20 02:39:56.161511 2026] [:error] [pid 15694:tid 15751] [client 158.158.41.212:16406] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "aeUhfLimB-jol1fwqAo5sAAAAZg"]
[Mon Apr 20 02:39:57.303690 2026] [:error] [pid 15764:tid 15830] [client 158.158.41.212:20044] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "aeUhfWLL_sqdSHoVp-SD9wAAAkQ"]
[Mon Apr 20 02:39:58.802826 2026] [:error] [pid 47775:tid 47862] [client 158.158.41.212:62908] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tea.php"] [unique_id "aeUhfrmztjlk9tsmoexJCgAAAJM"]
[Mon Apr 20 02:39:59.837972 2026] [:error] [pid 47772:tid 47797] [client 158.158.41.212:34760] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aeUhf4c0L16cb4smAz8RrgAAAAg"]
[Mon Apr 20 02:40:00.549961 2026] [:error] [pid 47772:tid 47811] [client 158.158.41.212:26356] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aeUhgIc0L16cb4smAz8RsQAAABY"]
[Mon Apr 20 02:40:01.755468 2026] [:error] [pid 47775:tid 47861] [client 158.158.41.212:14383] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aeUhgbmztjlk9tsmoexJDgAAAJI"]
[Mon Apr 20 02:40:02.598600 2026] [:error] [pid 47772:tid 47793] [client 158.158.41.212:30911] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aeUhgoc0L16cb4smAz8RuwAAAAQ"]
[Mon Apr 20 02:40:03.661049 2026] [:error] [pid 47773:tid 47824] [client 158.158.41.212:62863] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeUhg-iBHdnCJDuPq9B7iwAAAEg"]
[Mon Apr 20 02:40:05.592359 2026] [:error] [pid 15763:tid 15820] [client 158.158.41.212:1504] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeUhhbMXv1Y1THOoxaBAeAAAAhg"]
[Mon Apr 20 02:40:07.063605 2026] [:error] [pid 15693:tid 15701] [client 158.158.41.212:26341] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeUhh8NMD-ccazQlTsl0ZwAAAUU"]
[Mon Apr 20 02:40:08.929612 2026] [:error] [pid 15760:tid 15788] [client 158.158.41.212:1065] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aeUhiPSdD_XHQMJ_ISu4HwAAAdQ"]
[Mon Apr 20 02:40:10.976971 2026] [:error] [pid 15760:tid 15786] [client 158.158.41.212:32150] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeUhivSdD_XHQMJ_ISu4IAAAAdI"]
[Mon Apr 20 02:40:12.144251 2026] [:error] [pid 15693:tid 15696] [client 158.158.41.212:20013] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeUhjMNMD-ccazQlTsl0bAAAAUA"]
[Mon Apr 20 02:40:13.964732 2026] [:error] [pid 47775:tid 47862] [client 158.158.41.212:64067] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeUhjbmztjlk9tsmoexJFQAAAJM"]
[Mon Apr 20 02:40:15.505243 2026] [:error] [pid 47773:tid 47839] [client 158.158.41.212:64004] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aeUhj-iBHdnCJDuPq9B7lgAAAFc"]
[Mon Apr 20 02:40:16.728886 2026] [:error] [pid 15693:tid 15699] [client 158.158.41.212:27518] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aeUhkMNMD-ccazQlTsl0bgAAAUM"]
[Mon Apr 20 02:40:18.294576 2026] [:error] [pid 15694:tid 15735] [client 158.158.41.212:1074] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aeUhkrimB-jol1fwqAo5uQAAAYk"]
[Mon Apr 20 02:40:35.191323 2026] [proxy_fcgi:error] [pid 15765:tid 15864] [client 158.158.41.212:27513] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:40:50.225807 2026] [proxy_fcgi:error] [pid 15763:tid 15814] [client 158.158.41.212:39463] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:41:06.093345 2026] [proxy_fcgi:error] [pid 15763:tid 15805] [client 158.158.41.212:20997] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:41:06.852847 2026] [proxy_fcgi:error] [pid 15760:tid 15775] [client 158.158.41.212:59697] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:41:18.278096 2026] [:error] [pid 15760:tid 15784] [client 158.158.41.212:38798] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeUhzvSdD_XHQMJ_ISu4iwAAAdA"]
[Mon Apr 20 02:41:19.002220 2026] [:error] [pid 47772:tid 47813] [client 158.158.41.212:64868] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeUhz4c0L16cb4smAz8R5QAAABg"]
[Mon Apr 20 02:41:20.334376 2026] [:error] [pid 47775:tid 47844] [client 158.158.41.212:29157] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeUh0Lmztjlk9tsmoexJMwAAAIE"]
[Mon Apr 20 02:41:21.034218 2026] [:error] [pid 47772:tid 47791] [client 158.158.41.212:17524] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "aeUh0Yc0L16cb4smAz8R6QAAAAI"]
[Mon Apr 20 02:41:22.330894 2026] [:error] [pid 15694:tid 15724] [client 158.158.41.212:29176] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aeUh0rimB-jol1fwqAo6CQAAAYE"]
[Mon Apr 20 02:41:23.452662 2026] [:error] [pid 15763:tid 15820] [client 158.158.41.212:38811] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aeUh07MXv1Y1THOoxaBAvQAAAhg"]
[Mon Apr 20 02:41:24.412853 2026] [:error] [pid 15694:tid 15733] [client 158.158.41.212:34689] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aeUh1LimB-jol1fwqAo6DQAAAYc"]
[Mon Apr 20 02:41:26.327617 2026] [:error] [pid 15694:tid 15741] [client 158.158.41.212:26896] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "aeUh1rimB-jol1fwqAo6EwAAAY8"]
[Mon Apr 20 02:41:27.067383 2026] [:error] [pid 15694:tid 15725] [client 158.158.41.212:23347] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "aeUh17imB-jol1fwqAo6FAAAAYI"]
[Mon Apr 20 02:41:28.024429 2026] [:error] [pid 47775:tid 47843] [client 158.158.41.212:1268] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "aeUh2Lmztjlk9tsmoexJNAAAAIA"]
[Mon Apr 20 02:41:29.926331 2026] [:error] [pid 15694:tid 15735] [client 158.158.41.212:64871] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "aeUh2bimB-jol1fwqAo6GgAAAYk"]
[Mon Apr 20 02:41:30.760337 2026] [:error] [pid 15694:tid 15724] [client 158.158.41.212:25177] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "aeUh2rimB-jol1fwqAo6HAAAAYE"]
[Mon Apr 20 02:41:33.376283 2026] [:error] [pid 15694:tid 15738] [client 158.158.41.212:25193] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeUh3bimB-jol1fwqAo6JwAAAYw"]
[Mon Apr 20 02:41:34.321382 2026] [:error] [pid 15694:tid 15742] [client 158.158.41.212:26904] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeUh3rimB-jol1fwqAo6KAAAAZA"]
[Mon Apr 20 02:41:35.258447 2026] [:error] [pid 47886:tid 47909] [client 158.158.41.212:59760] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeUh30Se8yiyuPrD7yOhTAAAANU"]
[Mon Apr 20 02:41:36.434126 2026] [:error] [pid 15764:tid 15833] [client 158.158.41.212:25603] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeUh4GLL_sqdSHoVp-SEQwAAAkc"]
[Mon Apr 20 02:41:37.136481 2026] [:error] [pid 15764:tid 15831] [client 158.158.41.212:11287] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeUh4WLL_sqdSHoVp-SERgAAAkU"]
[Mon Apr 20 02:41:38.877481 2026] [:error] [pid 15694:tid 15739] [client 158.158.41.212:14926] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeUh4rimB-jol1fwqAo6NwAAAY0"]
[Mon Apr 20 02:41:41.024817 2026] [:error] [pid 47772:tid 47794] [client 158.158.41.212:11300] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeUh5Yc0L16cb4smAz8R_AAAAAU"]
[Mon Apr 20 02:41:43.391754 2026] [:error] [pid 15760:tid 15782] [client 158.158.41.212:18207] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "aeUh5_SdD_XHQMJ_ISu4nQAAAc4"]
[Mon Apr 20 02:41:45.140045 2026] [:error] [pid 15694:tid 15747] [client 158.158.41.212:1419] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "aeUh6bimB-jol1fwqAo6SAAAAZU"]
[Mon Apr 20 02:41:46.629540 2026] [:error] [pid 15760:tid 15780] [client 158.158.41.212:13201] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "aeUh6vSdD_XHQMJ_ISu4owAAAcw"]
[Mon Apr 20 02:41:48.532567 2026] [:error] [pid 47886:tid 47901] [client 158.158.41.212:14275] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "aeUh7ESe8yiyuPrD7yOhTgAAAM0"]
[Mon Apr 20 02:41:49.372043 2026] [:error] [pid 15763:tid 15804] [client 158.158.41.212:24498] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "aeUh7bMXv1Y1THOoxaBAygAAAgg"]
[Mon Apr 20 02:41:51.005352 2026] [:error] [pid 47772:tid 47798] [client 158.158.41.212:25131] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeUh74c0L16cb4smAz8SEQAAAAk"]
[Mon Apr 20 02:41:51.938758 2026] [:error] [pid 15760:tid 15769] [client 158.158.41.212:25140] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeUh7_SdD_XHQMJ_ISu4qQAAAcE"]
[Mon Apr 20 02:41:52.862151 2026] [:error] [pid 15764:tid 15851] [client 158.158.41.212:13687] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeUh8GLL_sqdSHoVp-SETAAAAlg"]
[Mon Apr 20 02:41:53.907999 2026] [:error] [pid 47773:tid 47816] [client 158.158.41.212:10352] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeUh8eiBHdnCJDuPq9B71AAAAEA"]
[Mon Apr 20 02:41:55.304943 2026] [:error] [pid 15764:tid 15841] [client 158.158.41.212:13220] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeUh82LL_sqdSHoVp-SETgAAAk8"]
[Mon Apr 20 02:41:55.990034 2026] [:error] [pid 15764:tid 15830] [client 158.158.41.212:10356] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeUh82LL_sqdSHoVp-SEUQAAAkQ"]
[Mon Apr 20 02:41:56.758760 2026] [:error] [pid 15763:tid 15820] [client 158.158.41.212:16199] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeUh9LMXv1Y1THOoxaBA1AAAAhg"]
[Mon Apr 20 02:41:57.665008 2026] [:error] [pid 15760:tid 15787] [client 158.158.41.212:29669] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "aeUh9fSdD_XHQMJ_ISu4sgAAAdM"]
[Mon Apr 20 02:41:58.578611 2026] [:error] [pid 47773:tid 47833] [client 158.158.41.212:25696] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aeUh9uiBHdnCJDuPq9B72gAAAFE"]
[Mon Apr 20 02:41:59.698061 2026] [:error] [pid 15760:tid 15785] [client 158.158.41.212:25668] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aeUh9_SdD_XHQMJ_ISu4tgAAAdE"]
[Mon Apr 20 02:42:01.082708 2026] [:error] [pid 47775:tid 47866] [client 158.158.41.212:30210] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aeUh-bmztjlk9tsmoexJOAAAAJc"]
[Mon Apr 20 02:42:01.855814 2026] [:error] [pid 15694:tid 15747] [client 158.158.41.212:14610] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aeUh-bimB-jol1fwqAo6VAAAAZU"]
[Mon Apr 20 02:42:03.359037 2026] [:error] [pid 15763:tid 15804] [client 158.158.41.212:1131] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeUh-7MXv1Y1THOoxaBA6gAAAgg"]
[Mon Apr 20 02:42:04.432513 2026] [:error] [pid 15763:tid 15796] [client 158.158.41.212:32799] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeUh_LMXv1Y1THOoxaBA8QAAAgA"]
[Mon Apr 20 02:42:06.740297 2026] [:error] [pid 15763:tid 15813] [client 158.158.41.212:10285] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeUh_rMXv1Y1THOoxaBA_QAAAhE"]
[Mon Apr 20 02:42:07.395873 2026] [:error] [pid 47886:tid 47902] [client 158.158.41.212:1696] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aeUh_0Se8yiyuPrD7yOhWgAAAM4"]
[Mon Apr 20 02:42:08.697135 2026] [:error] [pid 15764:tid 15848] [client 158.158.41.212:21741] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeUiAGLL_sqdSHoVp-SEYAAAAlY"]
[Mon Apr 20 02:42:09.517598 2026] [:error] [pid 15693:tid 15706] [client 158.158.41.212:1580] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeUiAcNMD-ccazQlTsl0iQAAAUo"]
[Mon Apr 20 02:42:10.418720 2026] [:error] [pid 47886:tid 47911] [client 158.158.41.212:10249] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeUiAkSe8yiyuPrD7yOhXQAAANc"]
[Mon Apr 20 02:42:11.365297 2026] [:error] [pid 47775:tid 47843] [client 158.158.41.212:30266] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeUiA7mztjlk9tsmoexJQAAAAIA"]
[Mon Apr 20 02:42:12.484252 2026] [:error] [pid 47773:tid 47830] [client 158.158.41.212:14206] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aeUiBOiBHdnCJDuPq9B76AAAAE4"]
[Mon Apr 20 02:42:13.871342 2026] [:error] [pid 15763:tid 15806] [client 158.158.41.212:35866] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aeUiBbMXv1Y1THOoxaBBGAAAAgo"]
[Mon Apr 20 02:42:15.401304 2026] [:error] [pid 47773:tid 47820] [client 158.158.41.212:15158] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aeUiB-iBHdnCJDuPq9B77QAAAEQ"]
[Mon Apr 20 02:42:36.039798 2026] [proxy_fcgi:error] [pid 15764:tid 15848] [client 158.158.41.212:10258] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:42:49.659433 2026] [proxy_fcgi:error] [pid 47775:tid 47855] [client 158.158.41.212:36480] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:42:55.593762 2026] [proxy_fcgi:error] [pid 15694:tid 15744] [client 158.158.41.212:38910] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:43:07.886680 2026] [proxy_fcgi:error] [pid 15764:tid 15837] [client 158.158.41.212:1935] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:43:08.450256 2026] [proxy_fcgi:error] [pid 15764:tid 15846] [client 158.158.41.212:47646] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:43:28.804068 2026] [proxy_fcgi:error] [pid 15694:tid 15747] [client 158.158.41.212:12661] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:43:36.203900 2026] [:error] [pid 15694:tid 15733] [client 158.158.41.212:12492] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeUiWLimB-jol1fwqAo7CAAAAYc"]
[Mon Apr 20 02:43:37.216064 2026] [:error] [pid 47886:tid 47901] [client 158.158.41.212:14251] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeUiWUSe8yiyuPrD7yOhiwAAAM0"]
[Mon Apr 20 02:43:39.494246 2026] [:error] [pid 15760:tid 15778] [client 158.158.41.212:16671] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeUiW_SdD_XHQMJ_ISu5TAAAAco"]
[Mon Apr 20 02:43:41.043703 2026] [:error] [pid 47772:tid 47798] [client 158.158.41.212:40440] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "aeUiXYc0L16cb4smAz8STQAAAAk"]
[Mon Apr 20 02:43:44.228408 2026] [:error] [pid 47772:tid 47797] [client 158.158.41.212:16647] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xqq.php"] [unique_id "aeUiYIc0L16cb4smAz8SVgAAAAg"]
[Mon Apr 20 02:43:45.041490 2026] [:error] [pid 15694:tid 15735] [client 158.158.41.212:13863] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xqq.php"] [unique_id "aeUiYbimB-jol1fwqAo7DAAAAYk"]
[Mon Apr 20 02:43:46.193192 2026] [:error] [pid 15764:tid 15838] [client 158.158.41.212:18803] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xqq.php"] [unique_id "aeUiYmLL_sqdSHoVp-SFBAAAAkw"]
[Mon Apr 20 02:43:48.052560 2026] [:error] [pid 15694:tid 15746] [client 158.158.41.212:1611] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xqq.php"] [unique_id "aeUiZLimB-jol1fwqAo7EwAAAZQ"]
[Mon Apr 20 02:43:49.433117 2026] [:error] [pid 15694:tid 15751] [client 158.158.41.212:40411] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aeUiZbimB-jol1fwqAo7FgAAAZg"]
[Mon Apr 20 02:43:50.953902 2026] [:error] [pid 15764:tid 15840] [client 158.158.41.212:15361] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aeUiZmLL_sqdSHoVp-SFBQAAAk4"]
[Mon Apr 20 02:43:52.192805 2026] [:error] [pid 15760:tid 15792] [client 158.158.41.212:33973] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aeUiaPSdD_XHQMJ_ISu5UQAAAdg"]
[Mon Apr 20 02:43:53.080391 2026] [:error] [pid 15760:tid 15787] [client 158.158.41.212:15183] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plss3.php"] [unique_id "aeUiafSdD_XHQMJ_ISu5WQAAAdM"]
[Mon Apr 20 02:43:54.083505 2026] [:error] [pid 15694:tid 15736] [client 158.158.41.212:33979] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aeUiarimB-jol1fwqAo7HgAAAYo"]
[Mon Apr 20 02:43:54.895864 2026] [:error] [pid 15694:tid 15723] [client 158.158.41.212:15405] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aeUiarimB-jol1fwqAo7HwAAAYA"]
[Mon Apr 20 02:43:55.692830 2026] [:error] [pid 15693:tid 15706] [client 158.158.41.212:62788] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aeUia8NMD-ccazQlTsl0pQAAAUo"]
[Mon Apr 20 02:43:57.276334 2026] [:error] [pid 15764:tid 15831] [client 158.158.41.212:33940] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "aeUibWLL_sqdSHoVp-SFCgAAAkU"]
[Mon Apr 20 02:43:58.312821 2026] [:error] [pid 15693:tid 15715] [client 158.158.41.212:15210] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeUibsNMD-ccazQlTsl0pgAAAVM"]
[Mon Apr 20 02:43:59.194083 2026] [:error] [pid 15765:tid 15873] [client 158.158.41.212:33315] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeUib_Rqinw-W5EwQ74g0AAAApQ"]
[Mon Apr 20 02:44:01.139754 2026] [:error] [pid 15694:tid 15743] [client 158.158.41.212:33956] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeUicbimB-jol1fwqAo7IwAAAZE"]
[Mon Apr 20 02:44:01.932298 2026] [:error] [pid 15764:tid 15835] [client 158.158.41.212:18801] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aeUicWLL_sqdSHoVp-SFEwAAAkk"]
[Mon Apr 20 02:44:03.366719 2026] [:error] [pid 15764:tid 15838] [client 158.158.41.212:13082] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeUic2LL_sqdSHoVp-SFHwAAAkw"]
[Mon Apr 20 02:44:04.374117 2026] [:error] [pid 15764:tid 15827] [client 158.158.41.212:1605] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeUidGLL_sqdSHoVp-SFIgAAAkE"]
[Mon Apr 20 02:44:05.513606 2026] [:error] [pid 15764:tid 15843] [client 158.158.41.212:62841] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeUidWLL_sqdSHoVp-SFKAAAAlE"]
[Mon Apr 20 02:44:06.444950 2026] [:error] [pid 15693:tid 15707] [client 158.158.41.212:26969] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeUidsNMD-ccazQlTsl0qgAAAUs"]
[Mon Apr 20 02:44:07.261151 2026] [:error] [pid 15694:tid 15725] [client 158.158.41.212:18765] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeUid7imB-jol1fwqAo7JAAAAYI"]
[Mon Apr 20 02:44:08.508041 2026] [:error] [pid 47772:tid 47799] [client 158.158.41.212:13838] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeUieIc0L16cb4smAz8SXgAAAAo"]
[Mon Apr 20 02:44:09.679338 2026] [:error] [pid 47775:tid 47862] [client 158.158.41.212:33984] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeUiebmztjlk9tsmoexJgwAAAJM"]
[Mon Apr 20 02:44:10.760847 2026] [:error] [pid 15760:tid 15781] [client 158.158.41.212:33362] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeUievSdD_XHQMJ_ISu5awAAAc0"]
[Mon Apr 20 02:44:12.123987 2026] [:error] [pid 47772:tid 47810] [client 158.158.41.212:1609] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aeUifIc0L16cb4smAz8SYAAAABU"]
[Mon Apr 20 02:44:12.919190 2026] [:error] [pid 47886:tid 47912] [client 158.158.41.212:24498] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aeUifESe8yiyuPrD7yOhngAAANg"]
[Mon Apr 20 02:44:15.600395 2026] [:error] [pid 15764:tid 15826] [client 158.158.41.212:10493] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aeUif2LL_sqdSHoVp-SFMAAAAkA"]
[Mon Apr 20 02:44:17.535494 2026] [:error] [pid 15694:tid 15748] [client 158.158.41.212:13102] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-update.php"] [unique_id "aeUigbimB-jol1fwqAo7NQAAAZY"]
[Mon Apr 20 02:44:21.412224 2026] [:error] [pid 15760:tid 15772] [client 158.158.41.212:1305] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeUihfSdD_XHQMJ_ISu5cQAAAcQ"]
[Mon Apr 20 02:44:25.554275 2026] [:error] [pid 15764:tid 15838] [client 158.158.41.212:17983] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeUiiWLL_sqdSHoVp-SFPAAAAkw"]
[Mon Apr 20 02:44:32.167440 2026] [:error] [pid 47772:tid 47791] [client 158.158.41.212:58916] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "aeUikIc0L16cb4smAz8SaQAAAAI"]
[Mon Apr 20 02:44:39.461700 2026] [autoindex:error] [pid 47772:tid 47799] [client 158.158.41.212:58940] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 02:44:49.427788 2026] [proxy_fcgi:error] [pid 47772:tid 47795] [client 158.158.41.212:58940] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:45:03.217908 2026] [proxy_fcgi:error] [pid 47886:tid 47900] [client 158.158.41.212:58895] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:45:21.355548 2026] [proxy_fcgi:error] [pid 15693:tid 15706] [client 158.158.41.212:18532] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:45:34.446624 2026] [proxy_fcgi:error] [pid 15764:tid 15850] [client 158.158.41.212:39470] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:45:34.735840 2026] [autoindex:error] [pid 15764:tid 15845] [client 158.158.41.212:21085] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 02:45:40.349059 2026] [:error] [pid 15764:tid 15829] [client 158.158.41.212:21085] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeUi1GLL_sqdSHoVp-SFhQAAAkM"]
[Mon Apr 20 02:45:40.962608 2026] [:error] [pid 15694:tid 15737] [client 158.158.41.212:31603] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeUi1LimB-jol1fwqAo7ogAAAYs"]
[Mon Apr 20 02:45:41.821508 2026] [:error] [pid 15764:tid 15841] [client 158.158.41.212:64815] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeUi1WLL_sqdSHoVp-SFhgAAAk8"]
[Mon Apr 20 02:45:44.977316 2026] [:error] [pid 47772:tid 47790] [client 158.158.41.212:22312] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeUi2Ic0L16cb4smAz8SqwAAAAE"]
[Mon Apr 20 02:45:45.677060 2026] [:error] [pid 15694:tid 15731] [client 158.158.41.212:11285] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeUi2bimB-jol1fwqAo7qAAAAYU"]
[Mon Apr 20 02:45:46.363296 2026] [:error] [pid 15694:tid 15725] [client 158.158.41.212:13891] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeUi2rimB-jol1fwqAo7qQAAAYI"]
[Mon Apr 20 02:45:47.064182 2026] [:error] [pid 15763:tid 15820] [client 158.158.41.212:23907] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeUi27MXv1Y1THOoxaBBcQAAAhg"]
[Mon Apr 20 02:45:47.812145 2026] [:error] [pid 15765:tid 15874] [client 158.158.41.212:29162] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeUi2_Rqinw-W5EwQ74g7AAAApU"]
[Mon Apr 20 02:45:50.498927 2026] [:error] [pid 15760:tid 15780] [client 158.158.41.212:1756] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeUi3vSdD_XHQMJ_ISu51wAAAcw"]
[Mon Apr 20 02:45:51.410576 2026] [:error] [pid 47773:tid 47826] [client 158.158.41.212:59769] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeUi3-iBHdnCJDuPq9B8VgAAAEo"]
[Mon Apr 20 02:45:53.205525 2026] [:error] [pid 15694:tid 15747] [client 158.158.41.212:25200] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeUi4bimB-jol1fwqAo7tQAAAZU"]
[Mon Apr 20 02:45:54.454761 2026] [:error] [pid 15763:tid 15819] [client 158.158.41.212:17783] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "aeUi4rMXv1Y1THOoxaBBcwAAAhc"]
[Mon Apr 20 02:45:55.481142 2026] [:error] [pid 47772:tid 47797] [client 158.158.41.212:14926] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeUi44c0L16cb4smAz8SrQAAAAg"]
[Mon Apr 20 02:45:56.206883 2026] [:error] [pid 47772:tid 47808] [client 158.158.41.212:27395] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeUi5Ic0L16cb4smAz8SrgAAABM"]
[Mon Apr 20 02:45:56.772041 2026] [:error] [pid 15765:tid 15866] [client 158.158.41.212:27430] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeUi5PRqinw-W5EwQ74g8wAAAo0"]
[Mon Apr 20 02:45:57.476789 2026] [:error] [pid 15694:tid 15740] [client 158.158.41.212:60425] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeUi5bimB-jol1fwqAo7vAAAAY4"]
[Mon Apr 20 02:45:58.447696 2026] [:error] [pid 47775:tid 47851] [client 158.158.41.212:34698] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeUi5rmztjlk9tsmoexJtQAAAIg"]
[Mon Apr 20 02:45:59.862101 2026] [:error] [pid 15764:tid 15846] [client 158.158.41.212:17771] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeUi52LL_sqdSHoVp-SFiwAAAlQ"]
[Mon Apr 20 02:46:00.583813 2026] [:error] [pid 15694:tid 15744] [client 158.158.41.212:59728] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeUi6LimB-jol1fwqAo7yAAAAZI"]
[Mon Apr 20 02:46:01.221565 2026] [:error] [pid 15760:tid 15786] [client 158.158.41.212:1276] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aeUi6fSdD_XHQMJ_ISu52QAAAdI"]
[Mon Apr 20 02:46:02.069212 2026] [:error] [pid 47773:tid 47834] [client 158.158.41.212:1266] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeUi6uiBHdnCJDuPq9B8WAAAAFI"]
[Mon Apr 20 02:46:03.135307 2026] [:error] [pid 15764:tid 15829] [client 158.158.41.212:15703] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeUi62LL_sqdSHoVp-SFjwAAAkM"]
[Mon Apr 20 02:46:03.963232 2026] [:error] [pid 15694:tid 15751] [client 158.158.41.212:25614] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeUi67imB-jol1fwqAo70AAAAZg"]
[Mon Apr 20 02:46:05.031972 2026] [:error] [pid 47886:tid 47889] [client 158.158.41.212:14972] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeUi7USe8yiyuPrD7yOhxAAAAME"]
[Mon Apr 20 02:46:05.851947 2026] [:error] [pid 47772:tid 47792] [client 158.158.41.212:60441] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeUi7Yc0L16cb4smAz8StAAAAAM"]
[Mon Apr 20 02:46:07.522367 2026] [:error] [pid 47775:tid 47863] [client 158.158.41.212:18228] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeUi77mztjlk9tsmoexJuQAAAJQ"]
[Mon Apr 20 02:46:08.472030 2026] [:error] [pid 47775:tid 47864] [client 158.158.41.212:17733] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeUi8Lmztjlk9tsmoexJugAAAJU"]
[Mon Apr 20 02:46:09.369980 2026] [:error] [pid 47775:tid 47850] [client 158.158.41.212:18211] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "aeUi8bmztjlk9tsmoexJvQAAAIc"]
[Mon Apr 20 02:46:11.464902 2026] [:error] [pid 15760:tid 15770] [client 158.158.41.212:27404] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aeUi8_SdD_XHQMJ_ISu54AAAAcI"]
[Mon Apr 20 02:46:12.154946 2026] [:error] [pid 47772:tid 47789] [client 158.158.41.212:25136] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aeUi9Ic0L16cb4smAz8StgAAAAA"]
[Mon Apr 20 02:46:15.251661 2026] [:error] [pid 15760:tid 15785] [client 158.158.41.212:14288] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aeUi9_SdD_XHQMJ_ISu56QAAAdE"]
[Mon Apr 20 02:46:16.262082 2026] [:error] [pid 15694:tid 15749] [client 158.158.41.212:1699] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "aeUi-LimB-jol1fwqAo73QAAAZc"]
[Mon Apr 20 02:46:19.279168 2026] [:error] [pid 15763:tid 15813] [client 158.158.41.212:10305] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aeUi-7MXv1Y1THOoxaBBeAAAAhE"]
[Mon Apr 20 02:46:22.237692 2026] [:error] [pid 15694:tid 15726] [client 158.158.41.212:25673] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aeUi_rimB-jol1fwqAo78QAAAYM"]
[Mon Apr 20 02:46:24.595604 2026] [:error] [pid 15763:tid 15818] [client 158.158.41.212:35224] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aeUjALMXv1Y1THOoxaBBgAAAAhY"]
[Mon Apr 20 02:46:25.402953 2026] [:error] [pid 47886:tid 47895] [client 158.158.41.212:29694] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fi.php"] [unique_id "aeUjAUSe8yiyuPrD7yOh0AAAAMc"]
[Mon Apr 20 02:46:26.578906 2026] [:error] [pid 15693:tid 15720] [client 158.158.41.212:1708] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aeUjAsNMD-ccazQlTsl05gAAAVg"]
[Mon Apr 20 02:46:27.297815 2026] [:error] [pid 47775:tid 47867] [client 158.158.41.212:64006] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aeUjA7mztjlk9tsmoexJxwAAAJg"]
[Mon Apr 20 02:46:27.974583 2026] [:error] [pid 47775:tid 47847] [client 158.158.41.212:1715] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aeUjA7mztjlk9tsmoexJyAAAAIQ"]
[Mon Apr 20 02:46:28.632742 2026] [:error] [pid 47886:tid 47904] [client 158.158.41.212:32792] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "aeUjBESe8yiyuPrD7yOh1AAAANA"]
[Mon Apr 20 02:46:29.516403 2026] [:error] [pid 15760:tid 15774] [client 158.158.41.212:64043] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeUjBfSdD_XHQMJ_ISu59gAAAcY"]
[Mon Apr 20 02:46:30.396029 2026] [:error] [pid 15760:tid 15775] [client 158.158.41.212:11336] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeUjBvSdD_XHQMJ_ISu5_AAAAcc"]
[Mon Apr 20 02:46:30.988796 2026] [:error] [pid 15760:tid 15781] [client 158.158.41.212:25677] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeUjBvSdD_XHQMJ_ISu5_gAAAc0"]
[Mon Apr 20 02:46:31.799311 2026] [:error] [pid 47886:tid 47909] [client 158.158.41.212:14192] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "aeUjB0Se8yiyuPrD7yOh1gAAANU"]
[Mon Apr 20 02:46:32.527941 2026] [:error] [pid 47772:tid 47790] [client 158.158.41.212:30258] [client 158.158.41.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeUjCIc0L16cb4smAz8SygAAAAE"]
[Mon Apr 20 02:46:33.868403 2026] [:error] [pid 47773:tid 47833] [client 158.158.41.212:25111] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeUjCeiBHdnCJDuPq9B8XAAAAFE"]
[Mon Apr 20 02:46:34.731751 2026] [:error] [pid 47773:tid 47830] [client 158.158.41.212:32814] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeUjCuiBHdnCJDuPq9B8XgAAAE4"]
[Mon Apr 20 02:46:35.442095 2026] [:error] [pid 47886:tid 47892] [client 158.158.41.212:64051] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aeUjC0Se8yiyuPrD7yOh2gAAAMQ"]
[Mon Apr 20 02:46:36.192121 2026] [:error] [pid 47886:tid 47900] [client 158.158.41.212:35853] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeUjDESe8yiyuPrD7yOh2wAAAMw"]
[Mon Apr 20 02:46:43.777542 2026] [autoindex:error] [pid 47886:tid 47912] [client 158.158.41.212:16219] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 02:46:44.583816 2026] [autoindex:error] [pid 47775:tid 47851] [client 158.158.41.212:15151] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 02:47:00.098201 2026] [proxy_fcgi:error] [pid 47886:tid 47894] [client 158.158.41.212:16219] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:47:15.384480 2026] [proxy_fcgi:error] [pid 47775:tid 47848] [client 158.158.41.212:15151] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:47:17.165613 2026] [proxy_fcgi:error] [pid 47772:tid 47796] [client 158.158.41.212:36508] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:47:36.429350 2026] [proxy_fcgi:error] [pid 15694:tid 15734] [client 158.158.41.212:18750] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 02:47:47.632633 2026] [:error] [pid 15763:tid 15810] [client 158.158.41.212:19697] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeUjU7MXv1Y1THOoxaBBpwAAAg4"]
[Mon Apr 20 02:47:51.916790 2026] [:error] [pid 47772:tid 47792] [client 158.158.41.212:58318] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeUjV4c0L16cb4smAz8TFgAAAAM"]
[Mon Apr 20 02:47:57.255300 2026] [:error] [pid 15760:tid 15782] [client 158.158.41.212:23366] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeUjXfSdD_XHQMJ_ISu6MgAAAc4"]
[Mon Apr 20 02:47:59.411043 2026] [:error] [pid 15760:tid 15783] [client 158.158.41.212:48248] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "aeUjX_SdD_XHQMJ_ISu6NAAAAc8"]
[Mon Apr 20 02:48:03.114213 2026] [:error] [pid 47775:tid 47864] [client 158.158.41.212:10425] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeUjY7mztjlk9tsmoexJ9wAAAJU"]
[Mon Apr 20 02:48:06.447363 2026] [:error] [pid 15764:tid 15844] [client 158.158.41.212:17249] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeUjZmLL_sqdSHoVp-SFyQAAAlI"]
[Mon Apr 20 02:48:07.854113 2026] [:error] [pid 15760:tid 15772] [client 158.158.41.212:60538] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeUjZ_SdD_XHQMJ_ISu6QAAAAcQ"]
[Mon Apr 20 02:48:10.401676 2026] [:error] [pid 15694:tid 15746] [client 158.158.41.212:48221] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "aeUjarimB-jol1fwqAo8ZgAAAZQ"]
[Mon Apr 20 02:48:13.350781 2026] [:error] [pid 47886:tid 47888] [client 158.158.41.212:1377] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "aeUjbUSe8yiyuPrD7yOiCAAAAMA"]
[Mon Apr 20 02:48:14.825490 2026] [:error] [pid 15764:tid 15840] [client 158.158.41.212:15472] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "aeUjbmLL_sqdSHoVp-SF1AAAAk4"]
[Mon Apr 20 02:48:16.315939 2026] [:error] [pid 15694:tid 15738] [client 158.158.41.212:1389] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "aeUjcLimB-jol1fwqAo8bAAAAYw"]
[Mon Apr 20 02:48:17.437806 2026] [:error] [pid 47886:tid 47895] [client 158.158.41.212:48210] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "aeUjcUSe8yiyuPrD7yOiCQAAAMc"]
[Mon Apr 20 02:48:18.207034 2026] [:error] [pid 15694:tid 15734] [client 158.158.41.212:48209] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeUjcrimB-jol1fwqAo8bgAAAYg"]
[Mon Apr 20 02:48:19.722039 2026] [:error] [pid 15694:tid 15724] [client 158.158.41.212:12655] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeUjc7imB-jol1fwqAo8dQAAAYE"]
[Mon Apr 20 02:48:20.559437 2026] [:error] [pid 47886:tid 47912] [client 158.158.41.212:22358] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeUjdESe8yiyuPrD7yOiDQAAANg"]
[Mon Apr 20 02:48:21.756832 2026] [:error] [pid 15694:tid 15733] [client 158.158.41.212:60527] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "aeUjdbimB-jol1fwqAo8fAAAAYc"]
[Mon Apr 20 02:48:22.951702 2026] [:error] [pid 47772:tid 47798] [client 158.158.41.212:17210] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeUjdoc0L16cb4smAz8THwAAAAk"]
[Mon Apr 20 02:48:24.610308 2026] [:error] [pid 47886:tid 47907] [client 158.158.41.212:13612] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeUjeESe8yiyuPrD7yOiDwAAANM"]
[Mon Apr 20 02:48:25.719951 2026] [:error] [pid 15694:tid 15742] [client 158.158.41.212:34028] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeUjebimB-jol1fwqAo8fgAAAZA"]
[Mon Apr 20 02:48:26.648712 2026] [:error] [pid 15693:tid 15702] [client 158.158.41.212:17188] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aeUjesNMD-ccazQlTsl1DQAAAUY"]
[Mon Apr 20 02:48:28.135145 2026] [:error] [pid 15764:tid 15851] [client 158.158.41.212:17701] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeUjfGLL_sqdSHoVp-SF7gAAAlg"]
[Mon Apr 20 02:48:29.512567 2026] [:error] [pid 15764:tid 15830] [client 158.158.41.212:16995] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeUjfWLL_sqdSHoVp-SF9AAAAkQ"]
[Mon Apr 20 02:48:30.964458 2026] [:error] [pid 47775:tid 47857] [client 158.158.41.212:40401] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeUjfrmztjlk9tsmoexKAAAAAI4"]
[Mon Apr 20 02:48:32.183570 2026] [:error] [pid 47886:tid 47902] [client 158.158.41.212:17696] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "aeUjgESe8yiyuPrD7yOiEwAAAM4"]
[Mon Apr 20 02:48:34.306682 2026] [:error] [pid 47773:tid 47816] [client 158.158.41.212:15178] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aeUjguiBHdnCJDuPq9B8hAAAAEA"]
[Mon Apr 20 02:48:35.299697 2026] [:error] [pid 47775:tid 47844] [client 158.158.41.212:33967] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aeUjg7mztjlk9tsmoexKBQAAAIE"]
[Mon Apr 20 02:48:36.519609 2026] [:error] [pid 15694:tid 15747] [client 158.158.41.212:14268] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aeUjhLimB-jol1fwqAo8oAAAAZU"]
[Mon Apr 20 02:48:38.188542 2026] [:error] [pid 15694:tid 15745] [client 158.158.41.212:1604] [client 158.158.41.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aeUjhrimB-jol1fwqAo8pwAAAZM"]
[Mon Apr 20 05:31:58.401245 2026] [proxy_fcgi:error] [pid 64440:tid 64459] [client 4.204.225.251:36581] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 09:39:11.893512 2026] [proxy_fcgi:error] [pid 57636:tid 57647] [client 20.203.128.233:22473] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 09:40:15.110916 2026] [proxy_fcgi:error] [pid 48101:tid 48111] [client 20.203.128.233:1378] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 09:41:09.369606 2026] [proxy_fcgi:error] [pid 57636:tid 57650] [client 20.203.128.233:20051] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 10:14:12.457318 2026] [:error] [pid 11350:tid 11371] [client 146.70.40.68:44294] [client 146.70.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.40.68, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWL9P4EoMBgOJuJnT3-IAAAAAw"]
[Mon Apr 20 10:14:18.269293 2026] [:error] [pid 11350:tid 11362] [client 146.70.40.68:44294] [client 146.70.40.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeWL-v4EoMBgOJuJnT3-KQAAAAM"]
[Mon Apr 20 10:14:21.182593 2026] [:error] [pid 11350:tid 11363] [client 146.70.40.68:44294] [client 146.70.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.40.68, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWL_f4EoMBgOJuJnT3-LAAAAAQ"]
[Mon Apr 20 13:35:19.133061 2026] [:error] [pid 11352:tid 11414] [client 103.65.237.216:53752] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "aeW7F2l10mhMSfJ7ir90BgAAAIA"]
[Mon Apr 20 20:24:35.112932 2026] [proxy_fcgi:error] [pid 11441:tid 11456] [client 89.251.0.117:48545] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 20:24:52.283564 2026] [proxy_fcgi:error] [pid 11350:tid 11381] [client 89.251.0.139:56433] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 20:24:53.050103 2026] [proxy_fcgi:error] [pid 11350:tid 11372] [client 89.251.0.141:27715] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 20:25:12.286518 2026] [:error] [pid 11350:tid 11376] [client 89.251.0.142:54355] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeYbKP4EoMBgOJuJnT2n9wAAABE"]
[Mon Apr 20 20:25:16.156337 2026] [:error] [pid 11441:tid 11443] [client 89.251.0.142:20173] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeYbLMixByFUvmh319CXLAAAAMA"]
[Mon Apr 20 20:25:18.788912 2026] [proxy_fcgi:error] [pid 11494:tid 11507] [client 89.251.0.145:64643] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 20:25:22.719163 2026] [:error] [pid 11494:tid 11502] [client 89.251.0.126:25129] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeYbMsgko5iFiE8YoyTaLwAAAYY"]
[Mon Apr 20 20:25:27.954071 2026] [proxy_fcgi:error] [pid 11352:tid 11418] [client 89.251.0.121:34259] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 20:25:28.444771 2026] [:error] [pid 11350:tid 11368] [client 89.251.0.114:20581] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeYbOP4EoMBgOJuJnT2oIAAAAAk"]
[Mon Apr 20 20:25:38.509039 2026] [:error] [pid 11441:tid 11453] [client 89.251.0.136:31665] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeYbQsixByFUvmh319CXSgAAAMo"]
[Mon Apr 20 20:25:41.021980 2026] [:error] [pid 11441:tid 11463] [client 89.251.0.117:63817] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeYbRcixByFUvmh319CXUQAAANQ"]
[Mon Apr 20 20:25:41.471021 2026] [:error] [pid 11441:tid 11456] [client 89.251.0.115:61109] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeYbRcixByFUvmh319CXUgAAAM0"]
[Mon Apr 20 20:25:41.918827 2026] [:error] [pid 11494:tid 11515] [client 89.251.0.128:54199] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeYbRcgko5iFiE8YoyTaOwAAAZM"]
[Mon Apr 20 20:25:42.338638 2026] [:error] [pid 11441:tid 11445] [client 89.251.0.132:38757] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeYbRsixByFUvmh319CXWQAAAMI"]
[Mon Apr 20 20:25:42.773503 2026] [:error] [pid 11352:tid 11428] [client 89.251.0.127:56121] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeYbRml10mhMSfJ7ir_TMgAAAI4"]
[Mon Apr 20 20:25:44.989725 2026] [:error] [pid 6928:tid 6933] [client 89.251.0.145:28523] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeYbSB3y7MHq1iB0qYqp5QAAAUM"]
[Mon Apr 20 20:25:45.755302 2026] [proxy_fcgi:error] [pid 11351:tid 11393] [client 89.251.0.125:56249] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 20:25:58.276806 2026] [autoindex:error] [pid 11352:tid 11438] [client 89.251.0.128:59691] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 20:26:02.554880 2026] [autoindex:error] [pid 11352:tid 11431] [client 89.251.0.128:59691] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 20:26:03.119624 2026] [proxy_fcgi:error] [pid 11352:tid 11434] [client 89.251.0.128:59691] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 20:26:12.625846 2026] [autoindex:error] [pid 11350:tid 11367] [client 89.251.0.119:42253] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 20:26:14.635056 2026] [autoindex:error] [pid 11350:tid 11360] [client 89.251.0.119:42253] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 20:26:18.980014 2026] [proxy_fcgi:error] [pid 11350:tid 11376] [client 89.251.0.119:42253] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 20 23:50:51.755368 2026] [:error] [pid 11352:tid 11415] [client 160.30.179.124:37468] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aeZLW2l10mhMSfJ7ir_u6wAAAIE"]
[Tue Apr 21 04:00:24.058460 2026] [:error] [pid 35321:tid 35401] [client 185.194.178.41:27355] [client 185.194.178.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.41, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aeaF2DeHLhVUuu8cVXw4yAAAAFE"]
[Tue Apr 21 06:31:54.863749 2026] [proxy_fcgi:error] [pid 4823:tid 4856] [client 20.251.218.161:14342] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 06:32:01.228264 2026] [proxy_fcgi:error] [pid 4823:tid 4870] [client 20.251.218.161:10894] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 09:32:32.494199 2026] [autoindex:error] [pid 5377:tid 5397] [client 212.47.77.100:60500] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 21 11:56:59.670568 2026] [autoindex:error] [pid 35320:tid 35338] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:56:59.961633 2026] [autoindex:error] [pid 35320:tid 35337] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:00.249489 2026] [autoindex:error] [pid 35320:tid 35334] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:00.535436 2026] [autoindex:error] [pid 35320:tid 35336] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:00.821558 2026] [autoindex:error] [pid 35320:tid 35353] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:01.112643 2026] [autoindex:error] [pid 35320:tid 35333] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:14.909761 2026] [proxy_fcgi:error] [pid 5377:tid 5399] [client 156.146.33.76:36086] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 11:57:20.889119 2026] [autoindex:error] [pid 35320:tid 35340] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:23.113688 2026] [autoindex:error] [pid 35320:tid 35330] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:23.400960 2026] [autoindex:error] [pid 35320:tid 35334] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:23.690226 2026] [autoindex:error] [pid 35320:tid 35332] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:23.984849 2026] [autoindex:error] [pid 35320:tid 35335] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:24.273151 2026] [autoindex:error] [pid 35320:tid 35340] [client 156.146.33.76:33564] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:35.423482 2026] [autoindex:error] [pid 35320:tid 35349] [client 156.146.33.76:33564] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:57:43.082424 2026] [proxy_fcgi:error] [pid 4822:tid 4834] [client 156.146.33.76:34376] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 11:57:59.898217 2026] [proxy_fcgi:error] [pid 4823:tid 4873] [client 156.146.33.76:35436] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 11:58:00.579322 2026] [proxy_fcgi:error] [pid 35320:tid 35351] [client 156.146.33.76:33564] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 11:58:06.695417 2026] [:error] [pid 4822:tid 4838] [client 156.146.33.76:43798] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aeb1ziAteFQFwS_23JkPCQAAAUw"]
[Tue Apr 21 11:58:07.257651 2026] [:error] [pid 4822:tid 4837] [client 156.146.33.76:43800] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aeb1zyAteFQFwS_23JkPDAAAAUs"]
[Tue Apr 21 11:58:07.816146 2026] [:error] [pid 4777:tid 4790] [client 156.146.33.76:43816] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aeb1z6xXur6bykKyLZRMHgAAAQI"]
[Tue Apr 21 11:58:08.393115 2026] [:error] [pid 4822:tid 4842] [client 156.146.33.76:43818] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aeb10CAteFQFwS_23JkPDQAAAVA"]
[Tue Apr 21 11:58:08.970022 2026] [:error] [pid 4822:tid 4826] [client 156.146.33.76:43832] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aeb10CAteFQFwS_23JkPDwAAAUA"]
[Tue Apr 21 11:58:09.542960 2026] [:error] [pid 35320:tid 35333] [client 156.146.33.76:43842] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aeb10YJW6fdXWO6agMHTggAAAAM"]
[Tue Apr 21 11:58:10.125459 2026] [:error] [pid 4823:tid 4864] [client 156.146.33.76:35898] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aeb10vc8mke3PfHqsxEx5wAAAYs"]
[Tue Apr 21 11:58:10.687711 2026] [:error] [pid 4823:tid 4867] [client 156.146.33.76:35914] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aeb10vc8mke3PfHqsxEx6QAAAY4"]
[Tue Apr 21 11:58:11.246783 2026] [:error] [pid 5377:tid 5401] [client 156.146.33.76:35924] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aeb107BKychFlrHBdvuBMQAAAc8"]
[Tue Apr 21 11:58:11.820610 2026] [:error] [pid 4823:tid 4874] [client 156.146.33.76:35936] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aeb10_c8mke3PfHqsxEx7QAAAZU"]
[Tue Apr 21 11:58:12.380220 2026] [:error] [pid 5377:tid 5387] [client 156.146.33.76:35944] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aeb11LBKychFlrHBdvuBNQAAAcE"]
[Tue Apr 21 11:58:12.940848 2026] [:error] [pid 4822:tid 4846] [client 156.146.33.76:35952] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aeb11CAteFQFwS_23JkPEgAAAVQ"]
[Tue Apr 21 11:58:13.502791 2026] [:error] [pid 4823:tid 4876] [client 156.146.33.76:35968] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aeb11fc8mke3PfHqsxEx8AAAAZc"]
[Tue Apr 21 11:58:14.064503 2026] [:error] [pid 5377:tid 5395] [client 156.146.33.76:35978] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aeb11rBKychFlrHBdvuBNwAAAck"]
[Tue Apr 21 11:58:14.644283 2026] [:error] [pid 5377:tid 5399] [client 156.146.33.76:35990] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aeb11rBKychFlrHBdvuBOQAAAc0"]
[Tue Apr 21 11:58:15.202282 2026] [:error] [pid 35320:tid 35330] [client 156.146.33.76:35998] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aeb114JW6fdXWO6agMHTjQAAAAA"]
[Tue Apr 21 11:58:15.757927 2026] [:error] [pid 35320:tid 35353] [client 156.146.33.76:36010] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aeb114JW6fdXWO6agMHTjgAAABc"]
[Tue Apr 21 11:58:16.314337 2026] [:error] [pid 35320:tid 35352] [client 156.146.33.76:36018] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aeb12IJW6fdXWO6agMHTkQAAABY"]
[Tue Apr 21 11:58:16.875521 2026] [:error] [pid 35320:tid 35333] [client 156.146.33.76:36032] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aeb12IJW6fdXWO6agMHTlAAAAAM"]
[Tue Apr 21 11:58:17.436558 2026] [:error] [pid 5377:tid 5389] [client 156.146.33.76:36036] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aeb12bBKychFlrHBdvuBOgAAAcM"]
[Tue Apr 21 11:58:17.994434 2026] [:error] [pid 5377:tid 5408] [client 156.146.33.76:36050] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aeb12bBKychFlrHBdvuBOwAAAdY"]
[Tue Apr 21 11:58:18.581396 2026] [:error] [pid 35320:tid 35337] [client 156.146.33.76:36054] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aeb12oJW6fdXWO6agMHTlwAAAAc"]
[Tue Apr 21 11:58:19.136389 2026] [:error] [pid 35415:tid 35427] [client 156.146.33.76:36056] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aeb120iqDinI4_22zzglmAAAAMA"]
[Tue Apr 21 11:58:19.693924 2026] [:error] [pid 5377:tid 5401] [client 156.146.33.76:36070] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aeb127BKychFlrHBdvuBPAAAAc8"]
[Tue Apr 21 11:58:20.256562 2026] [:error] [pid 35321:tid 35398] [client 156.146.33.76:55972] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aeb13DeHLhVUuu8cVXxvhAAAAE4"]
[Tue Apr 21 11:58:20.838004 2026] [:error] [pid 35321:tid 35401] [client 156.146.33.76:55976] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aeb13DeHLhVUuu8cVXxvhQAAAFE"]
[Tue Apr 21 11:58:21.399600 2026] [:error] [pid 35415:tid 35438] [client 156.146.33.76:55988] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aeb13UiqDinI4_22zzglmwAAAMs"]
[Tue Apr 21 11:58:21.959699 2026] [:error] [pid 5377:tid 5393] [client 156.146.33.76:55990] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aeb13bBKychFlrHBdvuBQQAAAcc"]
[Tue Apr 21 11:58:22.540726 2026] [:error] [pid 5377:tid 5405] [client 156.146.33.76:55992] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aeb13rBKychFlrHBdvuBQgAAAdM"]
[Tue Apr 21 11:58:23.130528 2026] [:error] [pid 5377:tid 5394] [client 156.146.33.76:56006] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aeb137BKychFlrHBdvuBQwAAAcg"]
[Tue Apr 21 11:58:23.705322 2026] [:error] [pid 5377:tid 5395] [client 156.146.33.76:56020] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aeb137BKychFlrHBdvuBSAAAAck"]
[Tue Apr 21 11:58:24.267532 2026] [:error] [pid 5377:tid 5400] [client 156.146.33.76:56036] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aeb14LBKychFlrHBdvuBSgAAAc4"]
[Tue Apr 21 11:58:24.843571 2026] [:error] [pid 35322:tid 35365] [client 156.146.33.76:56052] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aeb14KPoAfV40BTfVKyYugAAAIg"]
[Tue Apr 21 11:58:25.405003 2026] [:error] [pid 35415:tid 35443] [client 156.146.33.76:56068] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aeb14UiqDinI4_22zzglngAAANA"]
[Tue Apr 21 11:58:25.986434 2026] [:error] [pid 35415:tid 35446] [client 156.146.33.76:56074] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aeb14UiqDinI4_22zzglnwAAANM"]
[Tue Apr 21 11:58:26.541188 2026] [:error] [pid 5377:tid 5408] [client 156.146.33.76:56086] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aeb14rBKychFlrHBdvuBSwAAAdY"]
[Tue Apr 21 11:58:27.100094 2026] [:error] [pid 4777:tid 4795] [client 156.146.33.76:56096] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aeb146xXur6bykKyLZRMIwAAAQc"]
[Tue Apr 21 11:58:27.661810 2026] [:error] [pid 4823:tid 4872] [client 156.146.33.76:56098] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aeb14_c8mke3PfHqsxEx9gAAAZM"]
[Tue Apr 21 11:58:28.222171 2026] [:error] [pid 4822:tid 4842] [client 156.146.33.76:56102] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aeb15CAteFQFwS_23JkPFAAAAVA"]
[Tue Apr 21 11:58:28.780118 2026] [:error] [pid 4822:tid 4843] [client 156.146.33.76:56104] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aeb15CAteFQFwS_23JkPFgAAAVE"]
[Tue Apr 21 11:58:29.338128 2026] [:error] [pid 4823:tid 4862] [client 156.146.33.76:56112] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aeb15fc8mke3PfHqsxEx_AAAAYk"]
[Tue Apr 21 11:58:29.924374 2026] [:error] [pid 5377:tid 5393] [client 156.146.33.76:56128] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aeb15bBKychFlrHBdvuBUAAAAcc"]
[Tue Apr 21 11:58:30.483602 2026] [:error] [pid 4823:tid 4857] [client 156.146.33.76:56260] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aeb15vc8mke3PfHqsxEyAQAAAYQ"]
[Tue Apr 21 11:58:31.066188 2026] [:error] [pid 5377:tid 5404] [client 156.146.33.76:56272] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aeb157BKychFlrHBdvuBUgAAAdI"]
[Tue Apr 21 11:58:31.649867 2026] [:error] [pid 4823:tid 4870] [client 156.146.33.76:56284] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aeb15_c8mke3PfHqsxEyAwAAAZE"]
[Tue Apr 21 11:58:32.206872 2026] [:error] [pid 5377:tid 5402] [client 156.146.33.76:56288] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aeb16LBKychFlrHBdvuBVAAAAdA"]
[Tue Apr 21 11:58:32.767362 2026] [:error] [pid 4777:tid 4807] [client 156.146.33.76:56290] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aeb16KxXur6bykKyLZRMJgAAARM"]
[Tue Apr 21 11:58:33.327342 2026] [:error] [pid 4777:tid 4811] [client 156.146.33.76:56296] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aeb16axXur6bykKyLZRMJwAAARc"]
[Tue Apr 21 11:58:33.890169 2026] [:error] [pid 35320:tid 35351] [client 156.146.33.76:56300] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aeb16YJW6fdXWO6agMHTsAAAABU"]
[Tue Apr 21 11:58:34.449388 2026] [:error] [pid 4823:tid 4858] [client 156.146.33.76:56302] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aeb16vc8mke3PfHqsxEyBQAAAYU"]
[Tue Apr 21 11:58:35.028048 2026] [:error] [pid 35320:tid 35330] [client 156.146.33.76:56318] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aeb164JW6fdXWO6agMHTsgAAAAA"]
[Tue Apr 21 11:58:35.591924 2026] [:error] [pid 4823:tid 4869] [client 156.146.33.76:56326] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aeb16_c8mke3PfHqsxEyCAAAAZA"]
[Tue Apr 21 11:58:36.153729 2026] [:error] [pid 4823:tid 4877] [client 156.146.33.76:56336] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aeb17Pc8mke3PfHqsxEyCgAAAZg"]
[Tue Apr 21 11:58:36.709631 2026] [:error] [pid 5377:tid 5392] [client 156.146.33.76:56340] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aeb17LBKychFlrHBdvuBWgAAAcY"]
[Tue Apr 21 11:58:37.267565 2026] [:error] [pid 35321:tid 35406] [client 156.146.33.76:56356] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aeb17TeHLhVUuu8cVXxviwAAAFY"]
[Tue Apr 21 11:58:37.841941 2026] [:error] [pid 35321:tid 35393] [client 156.146.33.76:56370] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aeb17TeHLhVUuu8cVXxvjQAAAEk"]
[Tue Apr 21 11:58:38.404157 2026] [:error] [pid 4823:tid 4857] [client 156.146.33.76:56384] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aeb17vc8mke3PfHqsxEyDAAAAYQ"]
[Tue Apr 21 11:58:38.971622 2026] [:error] [pid 4823:tid 4871] [client 156.146.33.76:56396] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aeb17vc8mke3PfHqsxEyDgAAAZI"]
[Tue Apr 21 11:58:39.553021 2026] [:error] [pid 4822:tid 4838] [client 156.146.33.76:56398] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aeb17yAteFQFwS_23JkPLQAAAUw"]
[Tue Apr 21 11:58:40.115368 2026] [:error] [pid 4822:tid 4840] [client 156.146.33.76:42476] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aeb18CAteFQFwS_23JkPMQAAAU4"]
[Tue Apr 21 11:58:40.672582 2026] [:error] [pid 4822:tid 4833] [client 156.146.33.76:42488] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aeb18CAteFQFwS_23JkPMgAAAUc"]
[Tue Apr 21 11:58:41.255663 2026] [:error] [pid 4822:tid 4827] [client 156.146.33.76:42500] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aeb18SAteFQFwS_23JkPMwAAAUE"]
[Tue Apr 21 11:58:41.814719 2026] [:error] [pid 5377:tid 5388] [client 156.146.33.76:42504] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aeb18bBKychFlrHBdvuBYAAAAcI"]
[Tue Apr 21 11:58:42.370513 2026] [:error] [pid 4823:tid 4858] [client 156.146.33.76:42506] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aeb18vc8mke3PfHqsxEyEwAAAYU"]
[Tue Apr 21 11:58:42.929444 2026] [:error] [pid 4823:tid 4863] [client 156.146.33.76:42510] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/include/"] [unique_id "aeb18vc8mke3PfHqsxEyFgAAAYo"]
[Tue Apr 21 11:58:43.502732 2026] [:error] [pid 4823:tid 4868] [client 156.146.33.76:42516] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/include/"] [unique_id "aeb18_c8mke3PfHqsxEyGQAAAY8"]
[Tue Apr 21 11:58:44.056728 2026] [:error] [pid 4777:tid 4790] [client 156.146.33.76:42530] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/include/"] [unique_id "aeb19KxXur6bykKyLZRMKQAAAQI"]
[Tue Apr 21 11:58:44.837525 2026] [:error] [pid 35322:tid 35369] [client 156.146.33.76:42542] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/include/"] [unique_id "aeb19KPoAfV40BTfVKyYvQAAAIw"]
[Tue Apr 21 11:58:45.400517 2026] [:error] [pid 4777:tid 4809] [client 156.146.33.76:42552] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Assets/"] [unique_id "aeb19axXur6bykKyLZRMKgAAARU"]
[Tue Apr 21 11:58:45.965373 2026] [:error] [pid 4823:tid 4856] [client 156.146.33.76:42564] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Assets/"] [unique_id "aeb19fc8mke3PfHqsxEyGwAAAYM"]
[Tue Apr 21 11:58:46.525385 2026] [:error] [pid 4823:tid 4855] [client 156.146.33.76:42578] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Assets/"] [unique_id "aeb19vc8mke3PfHqsxEyHwAAAYI"]
[Tue Apr 21 11:58:47.097207 2026] [:error] [pid 4823:tid 4863] [client 156.146.33.76:42590] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Assets/"] [unique_id "aeb19_c8mke3PfHqsxEyIQAAAYo"]
[Tue Apr 21 11:58:47.667644 2026] [:error] [pid 4777:tid 4801] [client 156.146.33.76:42596] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/stories/"] [unique_id "aeb196xXur6bykKyLZRMLgAAAQ0"]
[Tue Apr 21 11:58:48.227364 2026] [:error] [pid 5377:tid 5408] [client 156.146.33.76:42606] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/stories/"] [unique_id "aeb1-LBKychFlrHBdvuBYwAAAdY"]
[Tue Apr 21 11:58:48.783834 2026] [:error] [pid 35320:tid 35331] [client 156.146.33.76:42612] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/stories/"] [unique_id "aeb1-IJW6fdXWO6agMHTwwAAAAE"]
[Tue Apr 21 11:58:49.338501 2026] [:error] [pid 4823:tid 4854] [client 156.146.33.76:42624] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/stories/"] [unique_id "aeb1-fc8mke3PfHqsxEyKAAAAYE"]
[Tue Apr 21 11:58:49.897506 2026] [:error] [pid 5377:tid 5397] [client 156.146.33.76:42634] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/"] [unique_id "aeb1-bBKychFlrHBdvuBZAAAAcs"]
[Tue Apr 21 11:58:50.477389 2026] [:error] [pid 35320:tid 35334] [client 156.146.33.76:50296] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/"] [unique_id "aeb1-oJW6fdXWO6agMHTxwAAAAQ"]
[Tue Apr 21 11:58:51.032014 2026] [:error] [pid 5377:tid 5394] [client 156.146.33.76:50300] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/"] [unique_id "aeb1-7BKychFlrHBdvuBaAAAAcg"]
[Tue Apr 21 11:58:51.587030 2026] [:error] [pid 35320:tid 35341] [client 156.146.33.76:50314] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/"] [unique_id "aeb1-4JW6fdXWO6agMHTygAAAAs"]
[Tue Apr 21 11:58:52.142634 2026] [:error] [pid 35320:tid 35343] [client 156.146.33.76:50318] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php/"] [unique_id "aeb1_IJW6fdXWO6agMHTzQAAAA0"]
[Tue Apr 21 11:58:52.720697 2026] [:error] [pid 35415:tid 35434] [client 156.146.33.76:50320] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php/"] [unique_id "aeb1_EiqDinI4_22zzglpAAAAMc"]
[Tue Apr 21 11:58:53.294682 2026] [:error] [pid 4822:tid 4827] [client 156.146.33.76:50330] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php/"] [unique_id "aeb1_SAteFQFwS_23JkPQAAAAUE"]
[Tue Apr 21 11:58:53.854048 2026] [:error] [pid 4777:tid 4806] [client 156.146.33.76:50338] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php/"] [unique_id "aeb1_axXur6bykKyLZRMNQAAARI"]
[Tue Apr 21 11:58:54.426766 2026] [:error] [pid 35320:tid 35346] [client 156.146.33.76:50348] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aeb1_oJW6fdXWO6agMHT2QAAABA"]
[Tue Apr 21 11:58:54.995178 2026] [:error] [pid 35320:tid 35335] [client 156.146.33.76:50362] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aeb1_oJW6fdXWO6agMHT2gAAAAU"]
[Tue Apr 21 11:58:55.550875 2026] [:error] [pid 4777:tid 4794] [client 156.146.33.76:50372] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aeb1_6xXur6bykKyLZRMOQAAAQY"]
[Tue Apr 21 11:58:56.105475 2026] [:error] [pid 4777:tid 4791] [client 156.146.33.76:50374] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aeb2AKxXur6bykKyLZRMOwAAAQM"]
[Tue Apr 21 11:58:56.667158 2026] [:error] [pid 5377:tid 5403] [client 156.146.33.76:50384] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aeb2ALBKychFlrHBdvuBbAAAAdE"]
[Tue Apr 21 11:58:57.249692 2026] [:error] [pid 5377:tid 5388] [client 156.146.33.76:50398] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aeb2AbBKychFlrHBdvuBbwAAAcI"]
[Tue Apr 21 11:58:57.810051 2026] [:error] [pid 35320:tid 35350] [client 156.146.33.76:50400] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aeb2AYJW6fdXWO6agMHT4gAAABQ"]
[Tue Apr 21 11:58:58.372579 2026] [:error] [pid 4823:tid 4865] [client 156.146.33.76:50410] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aeb2Avc8mke3PfHqsxEyLAAAAYw"]
[Tue Apr 21 11:58:58.952103 2026] [:error] [pid 4823:tid 4871] [client 156.146.33.76:50420] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cache/"] [unique_id "aeb2Avc8mke3PfHqsxEyLQAAAZI"]
[Tue Apr 21 11:58:59.526617 2026] [:error] [pid 35321:tid 35395] [client 156.146.33.76:50430] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cache/"] [unique_id "aeb2AzeHLhVUuu8cVXxvkwAAAEs"]
[Tue Apr 21 11:59:00.093652 2026] [:error] [pid 4823:tid 4862] [client 156.146.33.76:50440] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cache/"] [unique_id "aeb2BPc8mke3PfHqsxEyMgAAAYk"]
[Tue Apr 21 11:59:00.647213 2026] [:error] [pid 4823:tid 4870] [client 156.146.33.76:59386] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cache/"] [unique_id "aeb2BPc8mke3PfHqsxEyMwAAAZE"]
[Tue Apr 21 11:59:01.209284 2026] [:error] [pid 4823:tid 4868] [client 156.146.33.76:59392] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aeb2Bfc8mke3PfHqsxEyNQAAAY8"]
[Tue Apr 21 11:59:01.764475 2026] [:error] [pid 4822:tid 4832] [client 156.146.33.76:59402] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aeb2BSAteFQFwS_23JkPRQAAAUY"]
[Tue Apr 21 11:59:02.343096 2026] [:error] [pid 4823:tid 4874] [client 156.146.33.76:59412] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aeb2Bvc8mke3PfHqsxEyOAAAAZU"]
[Tue Apr 21 11:59:02.924680 2026] [:error] [pid 4823:tid 4858] [client 156.146.33.76:59426] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aeb2Bvc8mke3PfHqsxEyOQAAAYU"]
[Tue Apr 21 11:59:09.403602 2026] [autoindex:error] [pid 4823:tid 4875] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:09.699576 2026] [autoindex:error] [pid 4823:tid 4857] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:09.987292 2026] [autoindex:error] [pid 4823:tid 4860] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:10.278429 2026] [autoindex:error] [pid 4823:tid 4873] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:10.567601 2026] [autoindex:error] [pid 4823:tid 4877] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:10.854646 2026] [autoindex:error] [pid 4823:tid 4869] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:11.142986 2026] [autoindex:error] [pid 4823:tid 4854] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:11.432315 2026] [autoindex:error] [pid 4823:tid 4866] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:16.254977 2026] [autoindex:error] [pid 4823:tid 4876] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:16.542803 2026] [autoindex:error] [pid 4823:tid 4861] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:16.830701 2026] [autoindex:error] [pid 4823:tid 4870] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:17.120896 2026] [autoindex:error] [pid 4823:tid 4864] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:17.918548 2026] [autoindex:error] [pid 4823:tid 4874] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:18.210897 2026] [autoindex:error] [pid 4823:tid 4855] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:18.498873 2026] [autoindex:error] [pid 4823:tid 4858] [client 156.146.33.76:59436] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 11:59:27.369289 2026] [proxy_fcgi:error] [pid 35320:tid 35330] [client 156.146.33.76:60776] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 11:59:33.634101 2026] [proxy_fcgi:error] [pid 4823:tid 4856] [client 156.146.33.76:59436] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 11:59:51.221262 2026] [proxy_fcgi:error] [pid 5377:tid 5403] [client 156.146.33.76:34276] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 12:00:02.131793 2026] [autoindex:error] [pid 4822:tid 4841] [client 156.146.33.76:34332] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 12:00:09.669752 2026] [proxy_fcgi:error] [pid 5377:tid 5389] [client 156.146.33.76:57506] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 12:00:10.322611 2026] [proxy_fcgi:error] [pid 4822:tid 4846] [client 156.146.33.76:34332] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 12:00:16.252517 2026] [:error] [pid 35322:tid 35370] [client 156.146.33.76:49426] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aeb2UKPoAfV40BTfVKyYzQAAAI0"]
[Tue Apr 21 12:00:16.831551 2026] [:error] [pid 4822:tid 4834] [client 156.146.33.76:49438] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aeb2UCAteFQFwS_23JkPwQAAAUg"]
[Tue Apr 21 12:00:17.384366 2026] [:error] [pid 4822:tid 4835] [client 156.146.33.76:49450] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aeb2USAteFQFwS_23JkPwwAAAUk"]
[Tue Apr 21 12:00:17.939029 2026] [:error] [pid 4822:tid 4845] [client 156.146.33.76:49462] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aeb2USAteFQFwS_23JkPxAAAAVM"]
[Tue Apr 21 12:00:18.508395 2026] [:error] [pid 35415:tid 35438] [client 156.146.33.76:49474] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aeb2UkiqDinI4_22zzglxgAAAMs"]
[Tue Apr 21 12:00:19.071776 2026] [:error] [pid 4823:tid 4854] [client 156.146.33.76:49484] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aeb2U_c8mke3PfHqsxEywwAAAYE"]
[Tue Apr 21 12:00:19.629976 2026] [:error] [pid 4822:tid 4827] [client 156.146.33.76:49492] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aeb2UyAteFQFwS_23JkPxwAAAUE"]
[Tue Apr 21 12:00:20.190471 2026] [:error] [pid 4823:tid 4864] [client 156.146.33.76:53288] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aeb2VPc8mke3PfHqsxEyxQAAAYs"]
[Tue Apr 21 12:00:20.755547 2026] [:error] [pid 35321:tid 35407] [client 156.146.33.76:53300] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aeb2VDeHLhVUuu8cVXxvoQAAAFc"]
[Tue Apr 21 12:00:21.323838 2026] [:error] [pid 35415:tid 35430] [client 156.146.33.76:53314] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aeb2VUiqDinI4_22zzglyQAAAMM"]
[Tue Apr 21 12:00:21.884431 2026] [:error] [pid 4823:tid 4857] [client 156.146.33.76:53322] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aeb2Vfc8mke3PfHqsxEyxgAAAYQ"]
[Tue Apr 21 12:00:22.443871 2026] [:error] [pid 35321:tid 35394] [client 156.146.33.76:53330] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aeb2VjeHLhVUuu8cVXxvogAAAEo"]
[Tue Apr 21 12:00:22.997740 2026] [:error] [pid 4822:tid 4850] [client 156.146.33.76:53336] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aeb2ViAteFQFwS_23JkPygAAAVg"]
[Tue Apr 21 12:00:23.556066 2026] [:error] [pid 4822:tid 4830] [client 156.146.33.76:53342] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aeb2VyAteFQFwS_23JkPzQAAAUQ"]
[Tue Apr 21 12:00:24.116634 2026] [:error] [pid 4822:tid 4829] [client 156.146.33.76:53346] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aeb2WCAteFQFwS_23JkPzgAAAUM"]
[Tue Apr 21 12:00:24.672849 2026] [:error] [pid 4822:tid 4835] [client 156.146.33.76:53356] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aeb2WCAteFQFwS_23JkP0AAAAUk"]
[Tue Apr 21 12:00:25.233026 2026] [:error] [pid 4822:tid 4842] [client 156.146.33.76:53364] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeb2WSAteFQFwS_23JkP0gAAAVA"]
[Tue Apr 21 12:00:25.787341 2026] [:error] [pid 4823:tid 4868] [client 156.146.33.76:53372] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeb2Wfc8mke3PfHqsxEyyQAAAY8"]
[Tue Apr 21 12:00:26.347585 2026] [:error] [pid 4777:tid 4803] [client 156.146.33.76:53376] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeb2WqxXur6bykKyLZRMWAAAAQ8"]
[Tue Apr 21 12:00:26.907447 2026] [:error] [pid 4823:tid 4855] [client 156.146.33.76:53378] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeb2Wvc8mke3PfHqsxEyzQAAAYI"]
[Tue Apr 21 12:00:27.469316 2026] [:error] [pid 4823:tid 4858] [client 156.146.33.76:53388] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aeb2W_c8mke3PfHqsxEy0QAAAYU"]
[Tue Apr 21 12:00:28.047667 2026] [:error] [pid 4823:tid 4863] [client 156.146.33.76:53398] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aeb2XPc8mke3PfHqsxEy0gAAAYo"]
[Tue Apr 21 12:00:28.629982 2026] [:error] [pid 4777:tid 4797] [client 156.146.33.76:53410] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aeb2XKxXur6bykKyLZRMWQAAAQk"]
[Tue Apr 21 12:00:29.195360 2026] [:error] [pid 4822:tid 4830] [client 156.146.33.76:53420] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aeb2XSAteFQFwS_23JkP1gAAAUQ"]
[Tue Apr 21 12:00:29.757761 2026] [:error] [pid 4822:tid 4829] [client 156.146.33.76:53436] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aeb2XSAteFQFwS_23JkP1wAAAUM"]
[Tue Apr 21 12:00:30.317203 2026] [:error] [pid 4822:tid 4838] [client 156.146.33.76:49936] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aeb2XiAteFQFwS_23JkP2AAAAUw"]
[Tue Apr 21 12:00:30.903292 2026] [:error] [pid 4822:tid 4837] [client 156.146.33.76:49948] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aeb2XiAteFQFwS_23JkP2wAAAUs"]
[Tue Apr 21 12:00:31.460248 2026] [:error] [pid 4822:tid 4845] [client 156.146.33.76:49962] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aeb2XyAteFQFwS_23JkP3AAAAVM"]
[Tue Apr 21 12:00:32.021439 2026] [:error] [pid 4822:tid 4832] [client 156.146.33.76:49964] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aeb2YCAteFQFwS_23JkP3gAAAUY"]
[Tue Apr 21 12:00:32.602536 2026] [:error] [pid 4777:tid 4788] [client 156.146.33.76:49970] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aeb2YKxXur6bykKyLZRMWgAAAQA"]
[Tue Apr 21 12:00:33.183028 2026] [:error] [pid 4822:tid 4833] [client 156.146.33.76:49974] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aeb2YSAteFQFwS_23JkP4gAAAUc"]
[Tue Apr 21 12:00:33.744841 2026] [:error] [pid 4777:tid 4799] [client 156.146.33.76:49984] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aeb2YaxXur6bykKyLZRMWwAAAQs"]
[Tue Apr 21 12:00:34.304338 2026] [:error] [pid 4777:tid 4806] [client 156.146.33.76:49992] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aeb2YqxXur6bykKyLZRMXAAAARI"]
[Tue Apr 21 12:00:34.863022 2026] [:error] [pid 4777:tid 4808] [client 156.146.33.76:49996] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aeb2YqxXur6bykKyLZRMXQAAARQ"]
[Tue Apr 21 12:00:35.417036 2026] [:error] [pid 4777:tid 4790] [client 156.146.33.76:50010] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aeb2Y6xXur6bykKyLZRMYgAAAQI"]
[Tue Apr 21 12:00:35.973293 2026] [:error] [pid 4823:tid 4874] [client 156.146.33.76:50026] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aeb2Y_c8mke3PfHqsxEy0wAAAZU"]
[Tue Apr 21 12:00:36.530870 2026] [:error] [pid 4777:tid 4794] [client 156.146.33.76:50036] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aeb2ZKxXur6bykKyLZRMZgAAAQY"]
[Tue Apr 21 12:00:37.086877 2026] [:error] [pid 4822:tid 4844] [client 156.146.33.76:50042] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aeb2ZSAteFQFwS_23JkP6AAAAVI"]
[Tue Apr 21 12:00:37.642022 2026] [:error] [pid 4822:tid 4845] [client 156.146.33.76:50052] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aeb2ZSAteFQFwS_23JkP6QAAAVM"]
[Tue Apr 21 12:00:38.201178 2026] [:error] [pid 4823:tid 4857] [client 156.146.33.76:50056] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aeb2Zvc8mke3PfHqsxEy1AAAAYQ"]
[Tue Apr 21 13:39:11.262872 2026] [:error] [pid 5377:tid 5399] [client 104.204.221.23:40658] [client 104.204.221.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aecNf7BKychFlrHBdvufAwAAAc0"]
[Tue Apr 21 13:39:11.262953 2026] [:error] [pid 5377:tid 5395] [client 104.204.221.23:40666] [client 104.204.221.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aecNf7BKychFlrHBdvufBAAAAck"]
[Tue Apr 21 14:19:11.058454 2026] [:error] [pid 4823:tid 4855] [client 3.99.202.104:49330] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "aecW3_c8mke3PfHqsxFydQAAAYI"]
[Tue Apr 21 14:19:14.697625 2026] [:error] [pid 35320:tid 35351] [client 3.99.202.104:53688] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aecW4oJW6fdXWO6agMH0RwAAABU"]
[Tue Apr 21 14:19:15.567186 2026] [:error] [pid 35321:tid 35404] [client 3.99.202.104:53692] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "aecW4zeHLhVUuu8cVXyDvgAAAFQ"]
[Tue Apr 21 14:19:16.436059 2026] [:error] [pid 35415:tid 35443] [client 3.99.202.104:53696] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "aecW5EiqDinI4_22zzg79wAAANA"]
[Tue Apr 21 14:19:17.303047 2026] [:error] [pid 4822:tid 4847] [client 3.99.202.104:53708] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "aecW5SAteFQFwS_23Jlo3AAAAVU"]
[Tue Apr 21 14:19:18.167663 2026] [:error] [pid 4822:tid 4835] [client 3.99.202.104:53722] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "aecW5iAteFQFwS_23Jlo5wAAAUk"]
[Tue Apr 21 14:19:19.039646 2026] [:error] [pid 35321:tid 35402] [client 3.99.202.104:53730] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "aecW5zeHLhVUuu8cVXyDwwAAAFI"]
[Tue Apr 21 14:19:19.906564 2026] [:error] [pid 4823:tid 4858] [client 3.99.202.104:47168] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.remote"] [unique_id "aecW5_c8mke3PfHqsxFyhAAAAYU"]
[Tue Apr 21 14:19:20.773879 2026] [:error] [pid 4822:tid 4833] [client 3.99.202.104:47178] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "aecW6CAteFQFwS_23Jlo7AAAAUc"]
[Tue Apr 21 14:19:21.641778 2026] [:error] [pid 4823:tid 4858] [client 3.99.202.104:47184] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "aecW6fc8mke3PfHqsxFyjgAAAYU"]
[Tue Apr 21 14:19:22.508671 2026] [:error] [pid 35322:tid 35359] [client 3.99.202.104:47194] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "aecW6qPoAfV40BTfVKyqJgAAAII"]
[Tue Apr 21 14:19:23.372965 2026] [:error] [pid 35322:tid 35372] [client 3.99.202.104:47204] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "aecW66PoAfV40BTfVKyqKQAAAI8"]
[Tue Apr 21 14:19:24.240508 2026] [:error] [pid 35321:tid 35396] [client 3.99.202.104:47212] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "aecW7DeHLhVUuu8cVXyDzwAAAEw"]
[Tue Apr 21 14:19:25.105315 2026] [:error] [pid 35321:tid 35399] [client 3.99.202.104:47214] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aecW7TeHLhVUuu8cVXyD1gAAAE8"]
[Tue Apr 21 14:19:25.961750 2026] [:error] [pid 35321:tid 35400] [client 3.99.202.104:47222] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "aecW7TeHLhVUuu8cVXyD3AAAAFA"]
[Tue Apr 21 14:19:26.809677 2026] [:error] [pid 4777:tid 4788] [client 3.99.202.104:47234] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "aecW7qxXur6bykKyLZRntwAAAQA"]
[Tue Apr 21 14:19:27.669274 2026] [:error] [pid 35320:tid 35334] [client 3.99.202.104:47238] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.stage"] [unique_id "aecW74JW6fdXWO6agMH0XAAAAAQ"]
[Tue Apr 21 14:19:28.514748 2026] [:error] [pid 35321:tid 35398] [client 3.99.202.104:47250] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci"] [unique_id "aecW8DeHLhVUuu8cVXyD5AAAAE4"]
[Tue Apr 21 14:19:29.373033 2026] [:error] [pid 35322:tid 35377] [client 3.99.202.104:47260] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker"] [unique_id "aecW8aPoAfV40BTfVKyqNAAAAJQ"]
[Tue Apr 21 14:19:30.228778 2026] [:error] [pid 35320:tid 35330] [client 3.99.202.104:37008] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live"] [unique_id "aecW8oJW6fdXWO6agMH0ZgAAAAA"]
[Tue Apr 21 14:19:31.075351 2026] [:error] [pid 5377:tid 5396] [client 3.99.202.104:37010] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.preprod"] [unique_id "aecW87BKychFlrHBdvuusAAAAco"]
[Tue Apr 21 14:19:31.921443 2026] [:error] [pid 35322:tid 35368] [client 3.99.202.104:37022] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.uat"] [unique_id "aecW86PoAfV40BTfVKyqOgAAAIs"]
[Tue Apr 21 14:19:32.765381 2026] [:error] [pid 35322:tid 35381] [client 3.99.202.104:37026] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "aecW9KPoAfV40BTfVKyqPgAAAJg"]
[Tue Apr 21 14:19:33.608433 2026] [:error] [pid 4777:tid 4789] [client 3.99.202.104:37038] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.swp"] [unique_id "aecW9axXur6bykKyLZRnwwAAAQE"]
[Tue Apr 21 14:19:34.466301 2026] [:error] [pid 4823:tid 4861] [client 3.99.202.104:37046] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env~"] [unique_id "aecW9vc8mke3PfHqsxFykgAAAYg"]
[Tue Apr 21 14:19:35.322301 2026] [:error] [pid 35321:tid 35390] [client 3.99.202.104:37056] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "aecW9zeHLhVUuu8cVXyD6QAAAEY"]
[Tue Apr 21 14:19:36.178763 2026] [:error] [pid 4777:tid 4792] [client 3.99.202.104:37066] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/apps/.env"] [unique_id "aecW-KxXur6bykKyLZRnyAAAAQQ"]
[Tue Apr 21 14:19:37.033650 2026] [:error] [pid 35415:tid 35429] [client 3.99.202.104:37072] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "aecW-UiqDinI4_22zzg8FwAAAMI"]
[Tue Apr 21 14:19:37.877482 2026] [:error] [pid 35320:tid 35339] [client 3.99.202.104:37076] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.env"] [unique_id "aecW-YJW6fdXWO6agMH0cAAAAAk"]
[Tue Apr 21 14:19:38.732478 2026] [:error] [pid 4823:tid 4864] [client 3.99.202.104:37078] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/site/.env"] [unique_id "aecW-vc8mke3PfHqsxFymgAAAYs"]
[Tue Apr 21 14:19:39.587417 2026] [:error] [pid 4777:tid 4797] [client 3.99.202.104:37088] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.env"] [unique_id "aecW-6xXur6bykKyLZRn0AAAAQk"]
[Tue Apr 21 14:19:40.443587 2026] [:error] [pid 35320:tid 35345] [client 3.99.202.104:47768] [client 3.99.202.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "aecW_IJW6fdXWO6agMH0eAAAAA8"]
[Tue Apr 21 14:47:50.930336 2026] [autoindex:error] [pid 35415:tid 35428] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:47:51.196022 2026] [autoindex:error] [pid 35415:tid 35431] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:47:51.465060 2026] [autoindex:error] [pid 35415:tid 35451] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:47:51.731693 2026] [autoindex:error] [pid 35415:tid 35440] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:47:51.994927 2026] [autoindex:error] [pid 35415:tid 35435] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:47:52.260327 2026] [autoindex:error] [pid 35415:tid 35441] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:48:12.027168 2026] [autoindex:error] [pid 35415:tid 35450] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:48:12.559560 2026] [autoindex:error] [pid 35415:tid 35427] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:48:12.823852 2026] [autoindex:error] [pid 35415:tid 35446] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:48:13.088516 2026] [autoindex:error] [pid 35415:tid 35451] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:48:13.356725 2026] [autoindex:error] [pid 35415:tid 35440] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:48:13.642445 2026] [autoindex:error] [pid 35415:tid 35442] [client 188.95.65.41:60084] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:48:14.256502 2026] [proxy_fcgi:error] [pid 35415:tid 35435] [client 188.95.65.41:60084] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 14:48:18.824308 2026] [autoindex:error] [pid 5377:tid 5392] [client 188.95.65.41:59670] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:48:30.717756 2026] [proxy_fcgi:error] [pid 4823:tid 4869] [client 188.95.65.41:42374] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 14:48:40.811835 2026] [proxy_fcgi:error] [pid 5377:tid 5405] [client 188.95.65.41:59670] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 14:48:45.624488 2026] [:error] [pid 5377:tid 5396] [client 188.95.65.41:50350] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Admin/uploads/"] [unique_id "aecdzbBKychFlrHBdvvAtgAAAco"]
[Tue Apr 21 14:48:46.131446 2026] [:error] [pid 35320:tid 35352] [client 188.95.65.41:50358] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Admin/uploads/"] [unique_id "aecdzoJW6fdXWO6agMEBLAAAABY"]
[Tue Apr 21 14:48:46.640957 2026] [:error] [pid 4823:tid 4871] [client 188.95.65.41:50366] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Admin/uploads/"] [unique_id "aecdzvc8mke3PfHqsxGLlwAAAZI"]
[Tue Apr 21 14:48:47.156871 2026] [:error] [pid 4822:tid 4848] [client 188.95.65.41:50380] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Admin/uploads/"] [unique_id "aecdzyAteFQFwS_23JmKsQAAAVY"]
[Tue Apr 21 14:48:47.667926 2026] [:error] [pid 35320:tid 35331] [client 188.95.65.41:50394] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aecdz4JW6fdXWO6agMEBMAAAAAE"]
[Tue Apr 21 14:48:48.180857 2026] [:error] [pid 35320:tid 35346] [client 188.95.65.41:50404] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aecd0IJW6fdXWO6agMEBNAAAABA"]
[Tue Apr 21 14:48:48.690075 2026] [:error] [pid 4823:tid 4865] [client 188.95.65.41:50416] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aecd0Pc8mke3PfHqsxGLmgAAAYw"]
[Tue Apr 21 14:48:49.201123 2026] [:error] [pid 35415:tid 35429] [client 188.95.65.41:50426] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "aecd0UiqDinI4_22zzhFXwAAAMI"]
[Tue Apr 21 14:48:49.756905 2026] [:error] [pid 4822:tid 4834] [client 188.95.65.41:50434] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aecd0SAteFQFwS_23JmKuQAAAUg"]
[Tue Apr 21 14:48:50.275449 2026] [:error] [pid 5377:tid 5396] [client 188.95.65.41:40564] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aecd0rBKychFlrHBdvvAvAAAAco"]
[Tue Apr 21 14:48:50.791448 2026] [:error] [pid 4823:tid 4863] [client 188.95.65.41:40574] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aecd0vc8mke3PfHqsxGLoQAAAYo"]
[Tue Apr 21 14:48:51.303774 2026] [:error] [pid 4822:tid 4849] [client 188.95.65.41:40588] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "aecd0yAteFQFwS_23JmKwwAAAVc"]
[Tue Apr 21 14:48:51.814807 2026] [:error] [pid 4822:tid 4838] [client 188.95.65.41:40590] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aecd0yAteFQFwS_23JmKxQAAAUw"]
[Tue Apr 21 14:48:52.322435 2026] [:error] [pid 4822:tid 4850] [client 188.95.65.41:40596] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aecd1CAteFQFwS_23JmKygAAAVg"]
[Tue Apr 21 14:48:52.830102 2026] [:error] [pid 4822:tid 4838] [client 188.95.65.41:40598] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aecd1CAteFQFwS_23JmK0QAAAUw"]
[Tue Apr 21 14:48:53.339620 2026] [:error] [pid 5377:tid 5405] [client 188.95.65.41:40606] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/"] [unique_id "aecd1bBKychFlrHBdvvAwQAAAdM"]
[Tue Apr 21 14:48:53.870517 2026] [:error] [pid 35322:tid 35380] [client 188.95.65.41:40610] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aecd1aPoAfV40BTfVKyxRQAAAJc"]
[Tue Apr 21 14:48:54.386352 2026] [:error] [pid 4823:tid 4853] [client 188.95.65.41:40612] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aecd1vc8mke3PfHqsxGLqQAAAYA"]
[Tue Apr 21 14:48:54.901940 2026] [:error] [pid 4822:tid 4827] [client 188.95.65.41:40614] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aecd1iAteFQFwS_23JmK2QAAAUE"]
[Tue Apr 21 14:48:55.415501 2026] [:error] [pid 4822:tid 4843] [client 188.95.65.41:40622] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aecd1yAteFQFwS_23JmK3AAAAVE"]
[Tue Apr 21 14:48:55.922008 2026] [:error] [pid 4822:tid 4847] [client 188.95.65.41:40626] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aecd1yAteFQFwS_23JmK3wAAAVU"]
[Tue Apr 21 14:48:56.447223 2026] [:error] [pid 4822:tid 4827] [client 188.95.65.41:40642] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aecd2CAteFQFwS_23JmK5QAAAUE"]
[Tue Apr 21 14:48:56.963178 2026] [:error] [pid 4823:tid 4862] [client 188.95.65.41:40646] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aecd2Pc8mke3PfHqsxGLsAAAAYk"]
[Tue Apr 21 14:48:57.472799 2026] [:error] [pid 4823:tid 4877] [client 188.95.65.41:40656] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/image/"] [unique_id "aecd2fc8mke3PfHqsxGLsgAAAZg"]
[Tue Apr 21 14:48:57.979886 2026] [:error] [pid 4823:tid 4854] [client 188.95.65.41:40666] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aecd2fc8mke3PfHqsxGLuQAAAYE"]
[Tue Apr 21 14:48:58.490252 2026] [:error] [pid 4822:tid 4845] [client 188.95.65.41:40682] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aecd2iAteFQFwS_23JmK7gAAAVM"]
[Tue Apr 21 14:48:58.999932 2026] [:error] [pid 4822:tid 4836] [client 188.95.65.41:40688] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aecd2iAteFQFwS_23JmK8gAAAUo"]
[Tue Apr 21 14:48:59.508678 2026] [:error] [pid 4823:tid 4870] [client 188.95.65.41:40692] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/assets/images/"] [unique_id "aecd2_c8mke3PfHqsxGLvQAAAZE"]
[Tue Apr 21 14:49:00.025884 2026] [:error] [pid 4823:tid 4874] [client 188.95.65.41:40704] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aecd3Pc8mke3PfHqsxGLwQAAAZU"]
[Tue Apr 21 14:49:00.536570 2026] [:error] [pid 4822:tid 4827] [client 188.95.65.41:36418] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aecd3CAteFQFwS_23JmLBwAAAUE"]
[Tue Apr 21 14:49:01.049267 2026] [:error] [pid 4822:tid 4828] [client 188.95.65.41:36422] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aecd3SAteFQFwS_23JmLCgAAAUI"]
[Tue Apr 21 14:49:01.565603 2026] [:error] [pid 35320:tid 35351] [client 188.95.65.41:36428] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Public/"] [unique_id "aecd3YJW6fdXWO6agMEBPQAAABU"]
[Tue Apr 21 14:49:02.078877 2026] [:error] [pid 4822:tid 4834] [client 188.95.65.41:36438] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aecd3iAteFQFwS_23JmLDwAAAUg"]
[Tue Apr 21 14:49:02.605779 2026] [:error] [pid 4823:tid 4874] [client 188.95.65.41:36446] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aecd3vc8mke3PfHqsxGLywAAAZU"]
[Tue Apr 21 14:49:03.119725 2026] [:error] [pid 35320:tid 35345] [client 188.95.65.41:36450] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aecd34JW6fdXWO6agMEBPwAAAA8"]
[Tue Apr 21 14:49:03.634011 2026] [:error] [pid 35320:tid 35337] [client 188.95.65.41:36458] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vendor/"] [unique_id "aecd34JW6fdXWO6agMEBQwAAAAc"]
[Tue Apr 21 14:49:04.145930 2026] [:error] [pid 4822:tid 4838] [client 188.95.65.41:36474] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aecd4CAteFQFwS_23JmLFwAAAUw"]
[Tue Apr 21 14:49:04.677134 2026] [:error] [pid 35321:tid 35405] [client 188.95.65.41:36482] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aecd4DeHLhVUuu8cVXyKFgAAAFU"]
[Tue Apr 21 14:49:05.187036 2026] [:error] [pid 35321:tid 35393] [client 188.95.65.41:36490] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aecd4TeHLhVUuu8cVXyKGAAAAEk"]
[Tue Apr 21 14:49:05.699061 2026] [:error] [pid 35320:tid 35333] [client 188.95.65.41:36492] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/local/"] [unique_id "aecd4YJW6fdXWO6agMEBTgAAAAM"]
[Tue Apr 21 14:49:06.212475 2026] [:error] [pid 35320:tid 35339] [client 188.95.65.41:36500] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aecd4oJW6fdXWO6agMEBUgAAAAk"]
[Tue Apr 21 14:49:06.726893 2026] [:error] [pid 4822:tid 4848] [client 188.95.65.41:36504] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aecd4iAteFQFwS_23JmLHAAAAVY"]
[Tue Apr 21 14:49:07.237721 2026] [:error] [pid 4822:tid 4837] [client 188.95.65.41:36506] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aecd4yAteFQFwS_23JmLHgAAAUs"]
[Tue Apr 21 14:49:07.747197 2026] [:error] [pid 4822:tid 4836] [client 188.95.65.41:36516] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/modules/"] [unique_id "aecd4yAteFQFwS_23JmLIgAAAUo"]
[Tue Apr 21 14:49:08.258611 2026] [:error] [pid 35320:tid 35348] [client 188.95.65.41:36524] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aecd5IJW6fdXWO6agMEBXAAAABI"]
[Tue Apr 21 14:49:08.772424 2026] [:error] [pid 4823:tid 4872] [client 188.95.65.41:36532] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aecd5Pc8mke3PfHqsxGL1wAAAZM"]
[Tue Apr 21 14:49:09.284675 2026] [:error] [pid 4823:tid 4867] [client 188.95.65.41:36542] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aecd5fc8mke3PfHqsxGL2wAAAY4"]
[Tue Apr 21 14:49:09.794558 2026] [:error] [pid 4823:tid 4873] [client 188.95.65.41:36552] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Site/"] [unique_id "aecd5fc8mke3PfHqsxGL4QAAAZQ"]
[Tue Apr 21 14:49:10.301709 2026] [:error] [pid 4822:tid 4846] [client 188.95.65.41:36790] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aecd5iAteFQFwS_23JmLMQAAAVQ"]
[Tue Apr 21 14:49:10.812198 2026] [:error] [pid 4822:tid 4842] [client 188.95.65.41:36792] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aecd5iAteFQFwS_23JmLOgAAAVA"]
[Tue Apr 21 14:49:11.326620 2026] [:error] [pid 4823:tid 4862] [client 188.95.65.41:36806] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aecd5_c8mke3PfHqsxGL6gAAAYk"]
[Tue Apr 21 14:49:11.837778 2026] [:error] [pid 4823:tid 4869] [client 188.95.65.41:36822] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/system/"] [unique_id "aecd5_c8mke3PfHqsxGL8gAAAZA"]
[Tue Apr 21 14:49:12.347506 2026] [:error] [pid 4822:tid 4839] [client 188.95.65.41:36830] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aecd6CAteFQFwS_23JmLQAAAAU0"]
[Tue Apr 21 14:49:12.863295 2026] [:error] [pid 5377:tid 5410] [client 188.95.65.41:36840] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aecd6LBKychFlrHBdvvA1wAAAdg"]
[Tue Apr 21 14:49:13.375066 2026] [:error] [pid 35320:tid 35345] [client 188.95.65.41:36854] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aecd6YJW6fdXWO6agMEBXgAAAA8"]
[Tue Apr 21 14:49:13.910028 2026] [:error] [pid 4777:tid 4801] [client 188.95.65.41:36868] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/template/"] [unique_id "aecd6axXur6bykKyLZRyBgAAAQ0"]
[Tue Apr 21 14:49:14.424244 2026] [:error] [pid 4823:tid 4866] [client 188.95.65.41:36876] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aecd6vc8mke3PfHqsxGMAQAAAY0"]
[Tue Apr 21 14:49:14.933499 2026] [:error] [pid 4823:tid 4867] [client 188.95.65.41:36888] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aecd6vc8mke3PfHqsxGMAwAAAY4"]
[Tue Apr 21 14:49:15.446358 2026] [:error] [pid 5377:tid 5399] [client 188.95.65.41:36900] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aecd67BKychFlrHBdvvA3wAAAc0"]
[Tue Apr 21 14:49:15.964060 2026] [:error] [pid 4777:tid 4794] [client 188.95.65.41:36902] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop/"] [unique_id "aecd66xXur6bykKyLZRyBwAAAQY"]
[Tue Apr 21 14:49:16.475836 2026] [:error] [pid 4822:tid 4827] [client 188.95.65.41:36904] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aecd7CAteFQFwS_23JmLTAAAAUE"]
[Tue Apr 21 14:49:16.982831 2026] [:error] [pid 4777:tid 4797] [client 188.95.65.41:36914] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aecd7KxXur6bykKyLZRyCAAAAQk"]
[Tue Apr 21 14:49:17.491596 2026] [:error] [pid 4823:tid 4861] [client 188.95.65.41:36920] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aecd7fc8mke3PfHqsxGMDAAAAYg"]
[Tue Apr 21 14:49:18.011048 2026] [:error] [pid 4823:tid 4862] [client 188.95.65.41:36928] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "aecd7vc8mke3PfHqsxGMEAAAAYk"]
[Tue Apr 21 14:49:18.525712 2026] [:error] [pid 35415:tid 35427] [client 188.95.65.41:36940] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aecd7kiqDinI4_22zzhFaQAAAMA"]
[Tue Apr 21 14:49:19.044636 2026] [:error] [pid 4822:tid 4842] [client 188.95.65.41:36956] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aecd7yAteFQFwS_23JmLUgAAAVA"]
[Tue Apr 21 14:49:19.554855 2026] [:error] [pid 4777:tid 4811] [client 188.95.65.41:36968] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aecd76xXur6bykKyLZRyDgAAARc"]
[Tue Apr 21 14:49:20.066346 2026] [:error] [pid 4823:tid 4868] [client 188.95.65.41:33898] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin/editor/"] [unique_id "aecd8Pc8mke3PfHqsxGMFwAAAY8"]
[Tue Apr 21 14:49:20.574532 2026] [:error] [pid 4822:tid 4832] [client 188.95.65.41:33912] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/include/"] [unique_id "aecd8CAteFQFwS_23JmLWQAAAUY"]
[Tue Apr 21 14:49:21.081393 2026] [:error] [pid 35415:tid 35440] [client 188.95.65.41:33918] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/include/"] [unique_id "aecd8UiqDinI4_22zzhFawAAAM0"]
[Tue Apr 21 14:49:21.591021 2026] [:error] [pid 4777:tid 4788] [client 188.95.65.41:33924] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/include/"] [unique_id "aecd8axXur6bykKyLZRyEQAAAQA"]
[Tue Apr 21 14:49:22.100079 2026] [:error] [pid 4823:tid 4854] [client 188.95.65.41:33932] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/include/"] [unique_id "aecd8vc8mke3PfHqsxGMHgAAAYE"]
[Tue Apr 21 14:49:22.611452 2026] [:error] [pid 4822:tid 4845] [client 188.95.65.41:33942] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Assets/"] [unique_id "aecd8iAteFQFwS_23JmLYAAAAVM"]
[Tue Apr 21 14:49:23.140401 2026] [:error] [pid 5377:tid 5387] [client 188.95.65.41:33944] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Assets/"] [unique_id "aecd87BKychFlrHBdvvA5wAAAcE"]
[Tue Apr 21 14:49:23.651525 2026] [:error] [pid 4823:tid 4860] [client 188.95.65.41:33960] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Assets/"] [unique_id "aecd8_c8mke3PfHqsxGMIQAAAYc"]
[Tue Apr 21 14:49:24.163773 2026] [:error] [pid 5377:tid 5402] [client 188.95.65.41:33972] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Assets/"] [unique_id "aecd9LBKychFlrHBdvvA6gAAAdA"]
[Tue Apr 21 14:49:24.837661 2026] [:error] [pid 35320:tid 35331] [client 188.95.65.41:33974] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/stories/"] [unique_id "aecd9IJW6fdXWO6agMEBZgAAAAE"]
[Tue Apr 21 14:49:25.346422 2026] [:error] [pid 35320:tid 35342] [client 188.95.65.41:33988] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/stories/"] [unique_id "aecd9YJW6fdXWO6agMEBZwAAAAw"]
[Tue Apr 21 14:49:25.859641 2026] [:error] [pid 35321:tid 35387] [client 188.95.65.41:34002] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/stories/"] [unique_id "aecd9TeHLhVUuu8cVXyKHAAAAEM"]
[Tue Apr 21 14:49:26.373979 2026] [:error] [pid 4823:tid 4854] [client 188.95.65.41:34014] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/images/stories/"] [unique_id "aecd9vc8mke3PfHqsxGMKAAAAYE"]
[Tue Apr 21 14:49:26.885702 2026] [:error] [pid 4777:tid 4812] [client 188.95.65.41:34026] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/"] [unique_id "aecd9qxXur6bykKyLZRyGAAAARg"]
[Tue Apr 21 14:49:27.397120 2026] [:error] [pid 4823:tid 4872] [client 188.95.65.41:34036] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/"] [unique_id "aecd9_c8mke3PfHqsxGMKgAAAZM"]
[Tue Apr 21 14:49:27.908364 2026] [:error] [pid 4822:tid 4848] [client 188.95.65.41:34038] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/"] [unique_id "aecd9yAteFQFwS_23JmLdAAAAVY"]
[Tue Apr 21 14:49:28.418280 2026] [:error] [pid 4822:tid 4847] [client 188.95.65.41:34054] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/"] [unique_id "aecd-CAteFQFwS_23JmLdgAAAVU"]
[Tue Apr 21 14:49:28.930921 2026] [:error] [pid 4822:tid 4826] [client 188.95.65.41:34064] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php/"] [unique_id "aecd-CAteFQFwS_23JmLeQAAAUA"]
[Tue Apr 21 14:49:29.441914 2026] [:error] [pid 4823:tid 4875] [client 188.95.65.41:34066] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php/"] [unique_id "aecd-fc8mke3PfHqsxGMMgAAAZY"]
[Tue Apr 21 14:49:29.975600 2026] [:error] [pid 4822:tid 4846] [client 188.95.65.41:34080] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php/"] [unique_id "aecd-SAteFQFwS_23JmLfgAAAVQ"]
[Tue Apr 21 14:49:30.502004 2026] [:error] [pid 35320:tid 35340] [client 188.95.65.41:40248] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php/"] [unique_id "aecd-oJW6fdXWO6agMEBbAAAAAo"]
[Tue Apr 21 14:49:31.009497 2026] [:error] [pid 4777:tid 4806] [client 188.95.65.41:40264] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aecd-6xXur6bykKyLZRyIgAAARI"]
[Tue Apr 21 14:49:31.522688 2026] [:error] [pid 4822:tid 4839] [client 188.95.65.41:40280] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aecd-yAteFQFwS_23JmLggAAAU0"]
[Tue Apr 21 14:49:32.036280 2026] [:error] [pid 4822:tid 4828] [client 188.95.65.41:40282] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aecd_CAteFQFwS_23JmLhwAAAUI"]
[Tue Apr 21 14:49:32.559745 2026] [:error] [pid 4823:tid 4861] [client 188.95.65.41:40286] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "aecd_Pc8mke3PfHqsxGMOAAAAYg"]
[Tue Apr 21 14:49:33.085452 2026] [:error] [pid 35321:tid 35404] [client 188.95.65.41:40290] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aecd_TeHLhVUuu8cVXyKIQAAAFQ"]
[Tue Apr 21 14:49:33.594539 2026] [:error] [pid 4822:tid 4847] [client 188.95.65.41:40292] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aecd_SAteFQFwS_23JmLiwAAAVU"]
[Tue Apr 21 14:49:34.103742 2026] [:error] [pid 35321:tid 35391] [client 188.95.65.41:40296] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aecd_jeHLhVUuu8cVXyKIgAAAEc"]
[Tue Apr 21 14:49:34.624243 2026] [:error] [pid 35322:tid 35372] [client 188.95.65.41:40306] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwenty/"] [unique_id "aecd_qPoAfV40BTfVKyxUAAAAI8"]
[Tue Apr 21 14:49:35.139661 2026] [:error] [pid 35322:tid 35365] [client 188.95.65.41:40312] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cache/"] [unique_id "aecd_6PoAfV40BTfVKyxUwAAAIg"]
[Tue Apr 21 14:49:35.651704 2026] [:error] [pid 35322:tid 35373] [client 188.95.65.41:40318] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cache/"] [unique_id "aecd_6PoAfV40BTfVKyxVAAAAJA"]
[Tue Apr 21 14:49:36.384934 2026] [:error] [pid 35321:tid 35385] [client 188.95.65.41:40326] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cache/"] [unique_id "aeceADeHLhVUuu8cVXyKKQAAAEE"]
[Tue Apr 21 14:49:36.897188 2026] [:error] [pid 35321:tid 35401] [client 188.95.65.41:40334] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/cache/"] [unique_id "aeceADeHLhVUuu8cVXyKKgAAAFE"]
[Tue Apr 21 14:49:37.406613 2026] [:error] [pid 35415:tid 35441] [client 188.95.65.41:40336] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aeceAUiqDinI4_22zzhFewAAAM4"]
[Tue Apr 21 14:49:37.925327 2026] [:error] [pid 4822:tid 4837] [client 188.95.65.41:40340] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aeceASAteFQFwS_23JmLjgAAAUs"]
[Tue Apr 21 14:49:38.445819 2026] [:error] [pid 4822:tid 4844] [client 188.95.65.41:40356] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aeceAiAteFQFwS_23JmLkQAAAVI"]
[Tue Apr 21 14:49:38.956188 2026] [:error] [pid 4777:tid 4794] [client 188.95.65.41:40366] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "aeceAqxXur6bykKyLZRyLAAAAQY"]
[Tue Apr 21 14:49:39.463774 2026] [:error] [pid 4823:tid 4856] [client 188.95.65.41:40380] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/"] [unique_id "aeceA_c8mke3PfHqsxGMPwAAAYM"]
[Tue Apr 21 14:49:39.970193 2026] [:error] [pid 4823:tid 4854] [client 188.95.65.41:40382] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/"] [unique_id "aeceA_c8mke3PfHqsxGMQAAAAYE"]
[Tue Apr 21 14:49:40.483671 2026] [:error] [pid 4823:tid 4877] [client 188.95.65.41:54708] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/"] [unique_id "aeceBPc8mke3PfHqsxGMRgAAAZg"]
[Tue Apr 21 14:49:40.992173 2026] [:error] [pid 4822:tid 4847] [client 188.95.65.41:54718] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/"] [unique_id "aeceBCAteFQFwS_23JmLswAAAVU"]
[Tue Apr 21 14:49:41.508183 2026] [:error] [pid 4823:tid 4853] [client 188.95.65.41:54724] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "aeceBfc8mke3PfHqsxGMTAAAAYA"]
[Tue Apr 21 14:49:42.016705 2026] [:error] [pid 35321:tid 35399] [client 188.95.65.41:54738] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "aeceBjeHLhVUuu8cVXyKLwAAAE8"]
[Tue Apr 21 14:49:42.754498 2026] [:error] [pid 4777:tid 4791] [client 188.95.65.41:54752] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "aeceBqxXur6bykKyLZRyLgAAAQM"]
[Tue Apr 21 14:49:43.278033 2026] [autoindex:error] [pid 4823:tid 4854] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:43.542867 2026] [autoindex:error] [pid 4823:tid 4861] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:43.807480 2026] [autoindex:error] [pid 4823:tid 4863] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:44.069577 2026] [autoindex:error] [pid 4823:tid 4867] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:44.358180 2026] [autoindex:error] [pid 4823:tid 4864] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:44.633552 2026] [autoindex:error] [pid 4823:tid 4865] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:44.909268 2026] [autoindex:error] [pid 4823:tid 4860] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:45.178677 2026] [autoindex:error] [pid 4823:tid 4867] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:50.939793 2026] [autoindex:error] [pid 4823:tid 4860] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:51.304596 2026] [autoindex:error] [pid 4823:tid 4873] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:51.571028 2026] [autoindex:error] [pid 4823:tid 4853] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:51.844583 2026] [autoindex:error] [pid 4823:tid 4876] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:52.378662 2026] [autoindex:error] [pid 4823:tid 4862] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:52.665158 2026] [autoindex:error] [pid 4823:tid 4870] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:49:52.930777 2026] [autoindex:error] [pid 4823:tid 4855] [client 188.95.65.41:54766] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:50:08.582765 2026] [proxy_fcgi:error] [pid 35415:tid 35428] [client 188.95.65.41:33376] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 14:50:26.109153 2026] [proxy_fcgi:error] [pid 4777:tid 4802] [client 188.95.65.41:33526] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 14:50:26.723408 2026] [proxy_fcgi:error] [pid 4823:tid 4874] [client 188.95.65.41:54766] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 14:50:32.987406 2026] [autoindex:error] [pid 4822:tid 4827] [client 188.95.65.41:35542] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 14:50:43.962253 2026] [proxy_fcgi:error] [pid 35415:tid 35444] [client 188.95.65.41:51654] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 14:50:49.844125 2026] [:error] [pid 4822:tid 4847] [client 188.95.65.41:35542] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aeceSSAteFQFwS_23JmMkAAAAVU"]
[Tue Apr 21 14:50:50.355547 2026] [:error] [pid 4823:tid 4859] [client 188.95.65.41:58696] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aeceSvc8mke3PfHqsxGNEAAAAYY"]
[Tue Apr 21 14:50:50.874751 2026] [:error] [pid 4823:tid 4864] [client 188.95.65.41:58698] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aeceSvc8mke3PfHqsxGNFgAAAYs"]
[Tue Apr 21 14:50:51.385932 2026] [:error] [pid 35322:tid 35377] [client 188.95.65.41:58704] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aeceS6PoAfV40BTfVKyxggAAAJQ"]
[Tue Apr 21 14:50:51.921512 2026] [:error] [pid 4822:tid 4830] [client 188.95.65.41:58716] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aeceSyAteFQFwS_23JmMkQAAAUQ"]
[Tue Apr 21 14:50:52.456386 2026] [:error] [pid 4822:tid 4841] [client 188.95.65.41:58722] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aeceTCAteFQFwS_23JmMlAAAAU8"]
[Tue Apr 21 14:50:52.974842 2026] [:error] [pid 4822:tid 4829] [client 188.95.65.41:58736] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aeceTCAteFQFwS_23JmMmQAAAUM"]
[Tue Apr 21 14:50:53.483386 2026] [:error] [pid 4823:tid 4876] [client 188.95.65.41:58740] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/meta/"] [unique_id "aeceTfc8mke3PfHqsxGNHQAAAZc"]
[Tue Apr 21 14:50:53.995019 2026] [:error] [pid 35321:tid 35398] [client 188.95.65.41:58756] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aeceTTeHLhVUuu8cVXyKWQAAAE4"]
[Tue Apr 21 14:50:54.506562 2026] [:error] [pid 35321:tid 35385] [client 188.95.65.41:58762] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aeceTjeHLhVUuu8cVXyKWwAAAEE"]
[Tue Apr 21 14:50:55.020669 2026] [:error] [pid 35321:tid 35394] [client 188.95.65.41:58772] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aeceTzeHLhVUuu8cVXyKXAAAAEo"]
[Tue Apr 21 14:50:55.535678 2026] [:error] [pid 4822:tid 4846] [client 188.95.65.41:58774] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "aeceTyAteFQFwS_23JmMnQAAAVQ"]
[Tue Apr 21 14:50:56.045386 2026] [:error] [pid 4822:tid 4836] [client 188.95.65.41:58784] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aeceUCAteFQFwS_23JmMoAAAAUo"]
[Tue Apr 21 14:50:56.554080 2026] [:error] [pid 35415:tid 35441] [client 188.95.65.41:58788] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aeceUEiqDinI4_22zzhF3gAAAM4"]
[Tue Apr 21 14:50:57.063955 2026] [:error] [pid 4823:tid 4853] [client 188.95.65.41:58798] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aeceUfc8mke3PfHqsxGNKQAAAYA"]
[Tue Apr 21 14:50:57.804253 2026] [:error] [pid 4822:tid 4836] [client 188.95.65.41:58808] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/"] [unique_id "aeceUSAteFQFwS_23JmMrQAAAUo"]
[Tue Apr 21 14:50:58.313588 2026] [:error] [pid 4822:tid 4827] [client 188.95.65.41:58824] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeceUiAteFQFwS_23JmMrwAAAUE"]
[Tue Apr 21 14:50:58.821016 2026] [:error] [pid 4822:tid 4845] [client 188.95.65.41:58826] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeceUiAteFQFwS_23JmMtAAAAVM"]
[Tue Apr 21 14:50:59.353297 2026] [:error] [pid 35320:tid 35347] [client 188.95.65.41:58840] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeceU4JW6fdXWO6agMEBzwAAABE"]
[Tue Apr 21 14:50:59.859679 2026] [:error] [pid 4777:tid 4811] [client 188.95.65.41:58852] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aeceU6xXur6bykKyLZRylAAAARc"]
[Tue Apr 21 14:51:00.371757 2026] [:error] [pid 4823:tid 4866] [client 188.95.65.41:49596] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aeceVPc8mke3PfHqsxGNMgAAAY0"]
[Tue Apr 21 14:51:00.882517 2026] [:error] [pid 4823:tid 4859] [client 188.95.65.41:49600] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aeceVPc8mke3PfHqsxGNMwAAAYY"]
[Tue Apr 21 14:51:01.417340 2026] [:error] [pid 4823:tid 4854] [client 188.95.65.41:49604] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aeceVfc8mke3PfHqsxGNNwAAAYE"]
[Tue Apr 21 14:51:01.930959 2026] [:error] [pid 4823:tid 4869] [client 188.95.65.41:49610] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "aeceVfc8mke3PfHqsxGNOwAAAZA"]
[Tue Apr 21 14:51:02.439246 2026] [:error] [pid 4823:tid 4875] [client 188.95.65.41:49618] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aeceVvc8mke3PfHqsxGNPgAAAZY"]
[Tue Apr 21 14:51:02.946013 2026] [:error] [pid 4822:tid 4849] [client 188.95.65.41:49622] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aeceViAteFQFwS_23JmMuAAAAVc"]
[Tue Apr 21 14:51:03.457417 2026] [:error] [pid 4822:tid 4845] [client 188.95.65.41:49638] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aeceVyAteFQFwS_23JmMugAAAVM"]
[Tue Apr 21 14:51:03.970921 2026] [:error] [pid 4822:tid 4842] [client 188.95.65.41:49642] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "aeceVyAteFQFwS_23JmMuwAAAVA"]
[Tue Apr 21 14:51:04.481643 2026] [:error] [pid 4777:tid 4802] [client 188.95.65.41:49656] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aeceWKxXur6bykKyLZRymQAAAQ4"]
[Tue Apr 21 14:51:04.991446 2026] [:error] [pid 35320:tid 35331] [client 188.95.65.41:49660] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aeceWIJW6fdXWO6agMEB1QAAAAE"]
[Tue Apr 21 14:51:05.503298 2026] [:error] [pid 4777:tid 4791] [client 188.95.65.41:49676] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aeceWaxXur6bykKyLZRynQAAAQM"]
[Tue Apr 21 14:51:06.016626 2026] [:error] [pid 35320:tid 35352] [client 188.95.65.41:49684] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "aeceWoJW6fdXWO6agMEB2gAAABY"]
[Tue Apr 21 14:51:06.545323 2026] [:error] [pid 5377:tid 5396] [client 188.95.65.41:49698] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aeceWrBKychFlrHBdvvBpAAAAco"]
[Tue Apr 21 14:51:07.057087 2026] [:error] [pid 4822:tid 4832] [client 188.95.65.41:49700] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aeceWyAteFQFwS_23JmMvwAAAUY"]
[Tue Apr 21 14:51:07.571124 2026] [:error] [pid 4822:tid 4828] [client 188.95.65.41:49712] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aeceWyAteFQFwS_23JmMwwAAAUI"]
[Tue Apr 21 14:51:08.084797 2026] [:error] [pid 4777:tid 4800] [client 188.95.65.41:49726] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "aeceXKxXur6bykKyLZRyoQAAAQw"]
[Tue Apr 21 14:51:08.599470 2026] [:error] [pid 4822:tid 4829] [client 188.95.65.41:49742] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aeceXCAteFQFwS_23JmMyAAAAUM"]
[Tue Apr 21 14:51:09.115406 2026] [:error] [pid 4822:tid 4842] [client 188.95.65.41:49744] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aeceXSAteFQFwS_23JmMzAAAAVA"]
[Tue Apr 21 14:51:09.635640 2026] [:error] [pid 35320:tid 35331] [client 188.95.65.41:49748] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aeceXYJW6fdXWO6agMEB4AAAAAE"]
[Tue Apr 21 14:51:10.149658 2026] [:error] [pid 35320:tid 35348] [client 188.95.65.41:39666] [client 188.95.65.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aeceXoJW6fdXWO6agMEB4wAAABI"]
[Tue Apr 21 15:23:21.314784 2026] [:error] [pid 5377:tid 5409] [client 18.221.12.212:35910] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aecl6bBKychFlrHBdvvTswAAAdc"]
[Tue Apr 21 15:23:25.052101 2026] [:error] [pid 35320:tid 35348] [client 18.221.12.212:39474] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "aecl7YJW6fdXWO6agMEOHQAAABI"]
[Tue Apr 21 15:23:25.895484 2026] [:error] [pid 35320:tid 35337] [client 18.221.12.212:39480] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.local"] [unique_id "aecl7YJW6fdXWO6agMEOKQAAAAc"]
[Tue Apr 21 15:23:26.745101 2026] [:error] [pid 4822:tid 4828] [client 18.221.12.212:39484] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.production"] [unique_id "aecl7iAteFQFwS_23Jms_AAAAUI"]
[Tue Apr 21 15:23:27.591702 2026] [:error] [pid 5377:tid 5392] [client 18.221.12.212:39488] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.staging"] [unique_id "aecl77BKychFlrHBdvvT0QAAAcY"]
[Tue Apr 21 15:23:28.435751 2026] [:error] [pid 4822:tid 4847] [client 18.221.12.212:39558] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.development"] [unique_id "aecl8CAteFQFwS_23JmtEgAAAVU"]
[Tue Apr 21 15:23:29.282741 2026] [:error] [pid 4822:tid 4837] [client 18.221.12.212:39570] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.test"] [unique_id "aecl8SAteFQFwS_23JmtJQAAAUs"]
[Tue Apr 21 15:23:30.125685 2026] [:error] [pid 35320:tid 35337] [client 18.221.12.212:39580] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.remote"] [unique_id "aecl8oJW6fdXWO6agMEOOwAAAAc"]
[Tue Apr 21 15:23:30.970319 2026] [:error] [pid 35320:tid 35332] [client 18.221.12.212:39586] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.bak"] [unique_id "aecl8oJW6fdXWO6agMEOQAAAAAI"]
[Tue Apr 21 15:23:31.816921 2026] [:error] [pid 35320:tid 35334] [client 18.221.12.212:39596] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.backup"] [unique_id "aecl84JW6fdXWO6agMEOQgAAAAQ"]
[Tue Apr 21 15:23:32.659675 2026] [:error] [pid 4823:tid 4871] [client 18.221.12.212:39610] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.save"] [unique_id "aecl9Pc8mke3PfHqsxGjzAAAAZI"]
[Tue Apr 21 15:23:33.501681 2026] [:error] [pid 4823:tid 4854] [client 18.221.12.212:39612] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.old"] [unique_id "aecl9fc8mke3PfHqsxGj1wAAAYE"]
[Tue Apr 21 15:23:34.345655 2026] [:error] [pid 4823:tid 4861] [client 18.221.12.212:39620] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.sample"] [unique_id "aecl9vc8mke3PfHqsxGj4QAAAYg"]
[Tue Apr 21 15:23:35.187426 2026] [:error] [pid 4823:tid 4874] [client 18.221.12.212:39636] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.example"] [unique_id "aecl9_c8mke3PfHqsxGj6AAAAZU"]
[Tue Apr 21 15:23:36.031715 2026] [:error] [pid 4823:tid 4876] [client 18.221.12.212:39652] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.dev"] [unique_id "aecl-Pc8mke3PfHqsxGj-AAAAZc"]
[Tue Apr 21 15:23:36.875578 2026] [:error] [pid 4822:tid 4841] [client 18.221.12.212:39668] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.prod"] [unique_id "aecl-CAteFQFwS_23JmtYAAAAU8"]
[Tue Apr 21 15:23:37.712607 2026] [:error] [pid 4822:tid 4838] [client 18.221.12.212:46666] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.stage"] [unique_id "aecl-SAteFQFwS_23JmtZwAAAUw"]
[Tue Apr 21 15:23:38.545627 2026] [:error] [pid 4822:tid 4845] [client 18.221.12.212:46678] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.ci"] [unique_id "aecl-iAteFQFwS_23JmtbgAAAVM"]
[Tue Apr 21 15:23:39.384989 2026] [:error] [pid 35320:tid 35334] [client 18.221.12.212:46680] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.docker"] [unique_id "aecl-4JW6fdXWO6agMEOSgAAAAQ"]
[Tue Apr 21 15:23:40.206000 2026] [:error] [pid 35322:tid 35375] [client 18.221.12.212:46682] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.live"] [unique_id "aecl_KPoAfV40BTfVKy1_gAAAJI"]
[Tue Apr 21 15:23:41.049758 2026] [:error] [pid 35321:tid 35395] [client 18.221.12.212:46692] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.preprod"] [unique_id "aecl_TeHLhVUuu8cVXyPJQAAAEs"]
[Tue Apr 21 15:23:41.882650 2026] [:error] [pid 35320:tid 35332] [client 18.221.12.212:46704] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.uat"] [unique_id "aecl_YJW6fdXWO6agMEOUQAAAAI"]
[Tue Apr 21 15:23:42.704016 2026] [:error] [pid 4823:tid 4859] [client 18.221.12.212:46708] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.dist"] [unique_id "aecl_vc8mke3PfHqsxGkGgAAAYY"]
[Tue Apr 21 15:23:43.524899 2026] [:error] [pid 4823:tid 4861] [client 18.221.12.212:46712] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.swp"] [unique_id "aecl__c8mke3PfHqsxGkIAAAAYg"]
[Tue Apr 21 15:23:44.358515 2026] [:error] [pid 4822:tid 4840] [client 18.221.12.212:46724] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env~"] [unique_id "aecmACAteFQFwS_23JmtfQAAAU4"]
[Tue Apr 21 15:23:45.183708 2026] [:error] [pid 4822:tid 4826] [client 18.221.12.212:46732] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/app/.env"] [unique_id "aecmASAteFQFwS_23JmthgAAAUA"]
[Tue Apr 21 15:23:46.013770 2026] [:error] [pid 35320:tid 35339] [client 18.221.12.212:46736] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/apps/.env"] [unique_id "aecmAoJW6fdXWO6agMEOVgAAAAk"]
[Tue Apr 21 15:23:46.833599 2026] [:error] [pid 4822:tid 4828] [client 18.221.12.212:46750] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/api/.env"] [unique_id "aecmAiAteFQFwS_23JmtkAAAAUI"]
[Tue Apr 21 15:23:47.667787 2026] [:error] [pid 4822:tid 4850] [client 18.221.12.212:59028] [client 18.221.12.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/web/.env"] [unique_id "aecmAyAteFQFwS_23JmtmwAAAVg"]
[Tue Apr 21 15:50:31.261250 2026] [proxy_fcgi:error] [pid 35320:tid 35351] [client 20.91.250.199:29199] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:50:46.020696 2026] [proxy_fcgi:error] [pid 35321:tid 35401] [client 20.91.250.199:51165] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:50:46.294567 2026] [autoindex:error] [pid 53832:tid 53850] [client 20.91.250.199:17149] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:50:55.769801 2026] [autoindex:error] [pid 4823:tid 4854] [client 20.91.250.199:52161] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:50:58.425729 2026] [proxy_fcgi:error] [pid 35321:tid 35400] [client 20.91.250.199:38719] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:51:15.570513 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 20.91.250.199:13774] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:51:16.581685 2026] [proxy_fcgi:error] [pid 35415:tid 35433] [client 20.91.250.199:12494] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:51:17.910356 2026] [autoindex:error] [pid 4823:tid 4854] [client 20.91.250.199:17841] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:51:24.757776 2026] [:error] [pid 4823:tid 4877] [client 20.91.250.199:17841] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhm.php"] [unique_id "aecsfPc8mke3PfHqsxHK-QAAAZg"]
[Tue Apr 21 15:51:26.762230 2026] [:error] [pid 53978:tid 53983] [client 20.91.250.199:26017] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhm.php"] [unique_id "aecsfp1ivsR4hcOSQba6QgAAAoM"]
[Tue Apr 21 15:51:28.049709 2026] [:error] [pid 35322:tid 35381] [client 20.91.250.199:26039] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhm.php"] [unique_id "aecsgKPoAfV40BTfVKzHmQAAAJg"]
[Tue Apr 21 15:51:29.418490 2026] [:error] [pid 35321:tid 35402] [client 20.91.250.199:1347] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhm.php"] [unique_id "aecsgTeHLhVUuu8cVXzFAAAAAFI"]
[Tue Apr 21 15:51:30.673809 2026] [:error] [pid 35321:tid 35390] [client 20.91.250.199:20017] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "aecsgjeHLhVUuu8cVXzFAwAAAEY"]
[Tue Apr 21 15:51:32.115012 2026] [:error] [pid 35321:tid 35394] [client 20.91.250.199:27074] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "aecshDeHLhVUuu8cVXzFCwAAAEo"]
[Tue Apr 21 15:51:33.476118 2026] [:error] [pid 53832:tid 53855] [client 20.91.250.199:16695] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "aecshdzkuxsE_OhM9UIqXAAAAlQ"]
[Tue Apr 21 15:51:34.927030 2026] [:error] [pid 53731:tid 53743] [client 20.91.250.199:36834] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "aecshl2I9THUR-bRVGzhoQAAAgg"]
[Tue Apr 21 15:51:35.816264 2026] [:error] [pid 4823:tid 4857] [client 20.91.250.199:16686] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "aecsh_c8mke3PfHqsxHLAAAAAYQ"]
[Tue Apr 21 15:51:36.557880 2026] [:error] [pid 53978:tid 54001] [client 20.91.250.199:36503] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "aecsiJ1ivsR4hcOSQba6RgAAApU"]
[Tue Apr 21 15:51:37.795924 2026] [:error] [pid 35321:tid 35387] [client 20.91.250.199:36098] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "aecsiTeHLhVUuu8cVXzFGwAAAEM"]
[Tue Apr 21 15:51:38.638858 2026] [:error] [pid 35321:tid 35403] [client 20.91.250.199:21042] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "aecsijeHLhVUuu8cVXzFIAAAAFM"]
[Tue Apr 21 15:51:39.485079 2026] [:error] [pid 35321:tid 35394] [client 20.91.250.199:38221] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "aecsizeHLhVUuu8cVXzFJQAAAEo"]
[Tue Apr 21 15:51:40.216479 2026] [:error] [pid 4823:tid 4871] [client 20.91.250.199:17522] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "aecsjPc8mke3PfHqsxHLCAAAAZI"]
[Tue Apr 21 15:51:41.209642 2026] [:error] [pid 4823:tid 4875] [client 20.91.250.199:38248] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "aecsjfc8mke3PfHqsxHLEAAAAZY"]
[Tue Apr 21 15:51:42.107395 2026] [:error] [pid 4823:tid 4874] [client 20.91.250.199:19999] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "aecsjvc8mke3PfHqsxHLEQAAAZU"]
[Tue Apr 21 15:51:43.454875 2026] [:error] [pid 35321:tid 35392] [client 20.91.250.199:1359] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aecsjzeHLhVUuu8cVXzFOQAAAEg"]
[Tue Apr 21 15:51:45.918945 2026] [:error] [pid 53832:tid 53847] [client 20.91.250.199:21007] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aecskdzkuxsE_OhM9UIqbAAAAkw"]
[Tue Apr 21 15:51:46.743945 2026] [:error] [pid 35321:tid 35401] [client 20.91.250.199:14541] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aecskjeHLhVUuu8cVXzFRgAAAFE"]
[Tue Apr 21 15:51:47.721483 2026] [:error] [pid 35321:tid 35403] [client 20.91.250.199:36102] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "aecskzeHLhVUuu8cVXzFSgAAAFM"]
[Tue Apr 21 15:51:49.314200 2026] [:error] [pid 4823:tid 4856] [client 20.91.250.199:21032] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "aecslfc8mke3PfHqsxHLGQAAAYM"]
[Tue Apr 21 15:51:49.902755 2026] [:error] [pid 53832:tid 53839] [client 20.91.250.199:1550] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "aecsldzkuxsE_OhM9UIqcwAAAkQ"]
[Tue Apr 21 15:51:50.798451 2026] [:error] [pid 53832:tid 53851] [client 20.91.250.199:38260] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "aecsltzkuxsE_OhM9UIqdgAAAlA"]
[Tue Apr 21 15:51:51.641417 2026] [:error] [pid 4823:tid 4873] [client 20.91.250.199:13998] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "aecsl_c8mke3PfHqsxHLGwAAAZQ"]
[Tue Apr 21 15:51:52.429208 2026] [:error] [pid 4823:tid 4857] [client 20.91.250.199:1388] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aecsmPc8mke3PfHqsxHLHAAAAYQ"]
[Tue Apr 21 15:51:53.310423 2026] [:error] [pid 35320:tid 35342] [client 20.91.250.199:21026] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aecsmYJW6fdXWO6agMEn2gAAAAw"]
[Tue Apr 21 15:51:53.975425 2026] [:error] [pid 35415:tid 35434] [client 20.91.250.199:1346] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aecsmUiqDinI4_22zzhbNQAAAMc"]
[Tue Apr 21 15:51:54.749265 2026] [:error] [pid 35321:tid 35395] [client 20.91.250.199:36849] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aecsmjeHLhVUuu8cVXzFcgAAAEs"]
[Tue Apr 21 15:51:55.318593 2026] [:error] [pid 4823:tid 4853] [client 20.91.250.199:36502] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "aecsm_c8mke3PfHqsxHLHwAAAYA"]
[Tue Apr 21 15:51:56.146265 2026] [:error] [pid 35321:tid 35408] [client 20.91.250.199:21021] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "aecsnDeHLhVUuu8cVXzFeQAAAFg"]
[Tue Apr 21 15:51:57.236969 2026] [:error] [pid 35321:tid 35395] [client 20.91.250.199:36154] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "aecsnTeHLhVUuu8cVXzFgAAAAEs"]
[Tue Apr 21 15:51:58.158765 2026] [:error] [pid 4823:tid 4870] [client 20.91.250.199:13968] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "aecsnvc8mke3PfHqsxHLJwAAAZE"]
[Tue Apr 21 15:51:59.088826 2026] [:error] [pid 35321:tid 35384] [client 20.91.250.199:27114] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "aecsnzeHLhVUuu8cVXzFiwAAAEA"]
[Tue Apr 21 15:51:59.811094 2026] [:error] [pid 4823:tid 4862] [client 20.91.250.199:15048] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "aecsn_c8mke3PfHqsxHLKwAAAYk"]
[Tue Apr 21 15:52:00.566885 2026] [:error] [pid 35321:tid 35404] [client 20.91.250.199:13957] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "aecsoDeHLhVUuu8cVXzFkgAAAFQ"]
[Tue Apr 21 15:52:01.564513 2026] [:error] [pid 35321:tid 35385] [client 20.91.250.199:1392] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "aecsoTeHLhVUuu8cVXzFmgAAAEE"]
[Tue Apr 21 15:52:02.186029 2026] [:error] [pid 35321:tid 35396] [client 20.91.250.199:20025] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "aecsojeHLhVUuu8cVXzFnwAAAEw"]
[Tue Apr 21 15:52:02.983160 2026] [:error] [pid 35321:tid 35406] [client 20.91.250.199:15049] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "aecsojeHLhVUuu8cVXzFowAAAFY"]
[Tue Apr 21 15:52:03.862007 2026] [:error] [pid 35321:tid 35403] [client 20.91.250.199:17485] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "aecsozeHLhVUuu8cVXzFqgAAAFM"]
[Tue Apr 21 15:52:04.959570 2026] [:error] [pid 35321:tid 35389] [client 20.91.250.199:21041] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "aecspDeHLhVUuu8cVXzFsAAAAEU"]
[Tue Apr 21 15:52:05.745329 2026] [:error] [pid 54080:tid 54101] [client 20.91.250.199:15071] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aecspYzEbQHHxtmWbaZiPQAAAtM"]
[Tue Apr 21 15:52:06.654008 2026] [:error] [pid 35321:tid 35405] [client 20.91.250.199:15059] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aecspjeHLhVUuu8cVXzFuQAAAFU"]
[Tue Apr 21 15:52:07.664570 2026] [:error] [pid 35321:tid 35396] [client 20.91.250.199:36158] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aecspzeHLhVUuu8cVXzFwwAAAEw"]
[Tue Apr 21 15:52:08.539300 2026] [:error] [pid 53832:tid 53850] [client 20.91.250.199:13982] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aecsqNzkuxsE_OhM9UIqkAAAAk8"]
[Tue Apr 21 15:52:09.255414 2026] [:error] [pid 35321:tid 35406] [client 20.91.250.199:19973] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aecsqTeHLhVUuu8cVXzF0QAAAFY"]
[Tue Apr 21 15:52:09.974924 2026] [:error] [pid 35321:tid 35407] [client 20.91.250.199:1894] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aecsqTeHLhVUuu8cVXzF2AAAAFc"]
[Tue Apr 21 15:52:10.780368 2026] [:error] [pid 53832:tid 53845] [client 20.91.250.199:14013] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aecsqtzkuxsE_OhM9UIqlQAAAko"]
[Tue Apr 21 15:52:11.777593 2026] [:error] [pid 53832:tid 53840] [client 20.91.250.199:43684] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "aecsq9zkuxsE_OhM9UIqmQAAAkU"]
[Tue Apr 21 15:52:12.434211 2026] [:error] [pid 53832:tid 53852] [client 20.91.250.199:14570] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "aecsrNzkuxsE_OhM9UIqnAAAAlE"]
[Tue Apr 21 15:52:13.202305 2026] [:error] [pid 35322:tid 35366] [client 20.91.250.199:17508] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "aecsraPoAfV40BTfVKzHnwAAAIk"]
[Tue Apr 21 15:52:13.834074 2026] [:error] [pid 53832:tid 53845] [client 20.91.250.199:17523] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "aecsrdzkuxsE_OhM9UIqpwAAAko"]
[Tue Apr 21 15:52:14.665059 2026] [:error] [pid 35321:tid 35398] [client 20.91.250.199:17494] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "aecsrjeHLhVUuu8cVXzF8AAAAE4"]
[Tue Apr 21 15:52:15.579980 2026] [:error] [pid 35321:tid 35387] [client 20.91.250.199:20486] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/huya.php"] [unique_id "aecsrzeHLhVUuu8cVXzF9AAAAEM"]
[Tue Apr 21 15:52:16.383122 2026] [:error] [pid 4823:tid 4876] [client 20.91.250.199:14009] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/huya.php"] [unique_id "aecssPc8mke3PfHqsxHLOgAAAZc"]
[Tue Apr 21 15:52:17.067854 2026] [:error] [pid 54080:tid 54100] [client 20.91.250.199:17479] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/huya.php"] [unique_id "aecssYzEbQHHxtmWbaZiRQAAAtI"]
[Tue Apr 21 15:52:17.795967 2026] [:error] [pid 54080:tid 54086] [client 20.91.250.199:20994] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/huya.php"] [unique_id "aecssYzEbQHHxtmWbaZiSgAAAsQ"]
[Tue Apr 21 15:52:18.709870 2026] [:error] [pid 54080:tid 54084] [client 20.91.250.199:14576] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "aecssozEbQHHxtmWbaZiTQAAAsI"]
[Tue Apr 21 15:52:20.149398 2026] [:error] [pid 35321:tid 35406] [client 20.91.250.199:13981] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "aecstDeHLhVUuu8cVXzGBQAAAFY"]
[Tue Apr 21 15:52:47.299549 2026] [proxy_fcgi:error] [pid 35320:tid 35352] [client 20.91.250.199:20007] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:53:04.822111 2026] [proxy_fcgi:error] [pid 53832:tid 53855] [client 20.91.250.199:15103] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:53:05.469130 2026] [proxy_fcgi:error] [pid 54080:tid 54090] [client 20.91.250.199:15085] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:53:17.639797 2026] [autoindex:error] [pid 35321:tid 35397] [client 20.91.250.199:23356] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:53:24.168809 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 20.91.250.199:1913] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:53:33.051734 2026] [:error] [pid 35321:tid 35399] [client 20.91.250.199:14211] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aecs_TeHLhVUuu8cVXzHQgAAAE8"]
[Tue Apr 21 15:53:34.723753 2026] [:error] [pid 53832:tid 53849] [client 20.91.250.199:18647] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aecs_tzkuxsE_OhM9UIrKQAAAk4"]
[Tue Apr 21 15:53:36.382153 2026] [:error] [pid 53978:tid 53992] [client 20.91.250.199:33317] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aectAJ1ivsR4hcOSQba6mQAAAow"]
[Tue Apr 21 15:53:37.607464 2026] [:error] [pid 35322:tid 35371] [client 20.91.250.199:20050] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "aectAaPoAfV40BTfVKzHrQAAAI4"]
[Tue Apr 21 15:53:38.259683 2026] [:error] [pid 35322:tid 35361] [client 20.91.250.199:38671] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aectAqPoAfV40BTfVKzHrwAAAIQ"]
[Tue Apr 21 15:53:38.941075 2026] [:error] [pid 53731:tid 53750] [client 20.91.250.199:38683] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aectAl2I9THUR-bRVGzhyAAAAg8"]
[Tue Apr 21 15:53:39.705461 2026] [:error] [pid 53832:tid 53841] [client 20.91.250.199:17118] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aectA9zkuxsE_OhM9UIrLgAAAkY"]
[Tue Apr 21 15:53:40.597689 2026] [:error] [pid 35321:tid 35400] [client 20.91.250.199:43178] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aectBDeHLhVUuu8cVXzHVwAAAFA"]
[Tue Apr 21 15:53:41.576823 2026] [:error] [pid 4777:tid 4795] [client 20.91.250.199:17133] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aectBaxXur6bykKyLZSLjAAAAQc"]
[Tue Apr 21 15:53:42.513521 2026] [:error] [pid 35321:tid 35387] [client 20.91.250.199:22998] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aectBjeHLhVUuu8cVXzHXAAAAEM"]
[Tue Apr 21 15:53:43.178965 2026] [:error] [pid 4777:tid 4807] [client 20.91.250.199:51191] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aectB6xXur6bykKyLZSLjgAAARM"]
[Tue Apr 21 15:53:43.973289 2026] [:error] [pid 4777:tid 4796] [client 20.91.250.199:42573] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aectB6xXur6bykKyLZSLkwAAAQg"]
[Tue Apr 21 15:53:45.577763 2026] [:error] [pid 35321:tid 35397] [client 20.91.250.199:19519] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aectCTeHLhVUuu8cVXzHXQAAAE0"]
[Tue Apr 21 15:53:46.766790 2026] [:error] [pid 54080:tid 54098] [client 20.91.250.199:34056] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aectCozEbQHHxtmWbaZivAAAAtA"]
[Tue Apr 21 15:53:48.176114 2026] [:error] [pid 4823:tid 4870] [client 20.91.250.199:28794] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aectDPc8mke3PfHqsxHLvQAAAZE"]
[Tue Apr 21 15:53:50.881125 2026] [:error] [pid 35321:tid 35400] [client 20.91.250.199:24844] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aectDjeHLhVUuu8cVXzHbwAAAFA"]
[Tue Apr 21 15:53:52.158460 2026] [:error] [pid 35320:tid 35346] [client 20.91.250.199:30159] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aectEIJW6fdXWO6agMEoKgAAABA"]
[Tue Apr 21 15:53:54.839792 2026] [:error] [pid 35321:tid 35396] [client 20.91.250.199:1089] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aectEjeHLhVUuu8cVXzHggAAAEw"]
[Tue Apr 21 15:53:57.063650 2026] [:error] [pid 54080:tid 54097] [client 20.91.250.199:13284] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aectFYzEbQHHxtmWbaZixgAAAs8"]
[Tue Apr 21 15:53:58.019681 2026] [:error] [pid 53832:tid 53838] [client 20.91.250.199:58537] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "aectFtzkuxsE_OhM9UIrRQAAAkM"]
[Tue Apr 21 15:53:59.427219 2026] [:error] [pid 35321:tid 35390] [client 20.91.250.199:15785] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aectFzeHLhVUuu8cVXzHkQAAAEY"]
[Tue Apr 21 15:54:01.638998 2026] [:error] [pid 4823:tid 4855] [client 20.91.250.199:21429] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aectGfc8mke3PfHqsxHLxwAAAYI"]
[Tue Apr 21 15:54:02.505819 2026] [:error] [pid 35321:tid 35397] [client 20.91.250.199:1686] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aectGjeHLhVUuu8cVXzHlwAAAE0"]
[Tue Apr 21 15:54:03.486330 2026] [:error] [pid 53832:tid 53835] [client 20.91.250.199:1721] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/3.php"] [unique_id "aectG9zkuxsE_OhM9UIrUwAAAkA"]
[Tue Apr 21 15:54:04.643586 2026] [:error] [pid 53832:tid 53854] [client 20.91.250.199:1678] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aectHNzkuxsE_OhM9UIrVgAAAlM"]
[Tue Apr 21 15:54:05.290074 2026] [:error] [pid 53832:tid 53842] [client 20.91.250.199:30157] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aectHdzkuxsE_OhM9UIrXAAAAkc"]
[Tue Apr 21 15:54:07.169223 2026] [:error] [pid 35320:tid 35348] [client 20.91.250.199:12461] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aectH4JW6fdXWO6agMEoPQAAABI"]
[Tue Apr 21 15:54:08.328548 2026] [:error] [pid 35321:tid 35394] [client 20.91.250.199:19001] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4.php"] [unique_id "aectIDeHLhVUuu8cVXzHoQAAAEo"]
[Tue Apr 21 15:54:09.639225 2026] [:error] [pid 35320:tid 35333] [client 20.91.250.199:18968] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "aectIYJW6fdXWO6agMEoPwAAAAM"]
[Tue Apr 21 15:54:10.714427 2026] [:error] [pid 4823:tid 4868] [client 20.91.250.199:58153] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "aectIvc8mke3PfHqsxHL2wAAAY8"]
[Tue Apr 21 15:54:11.368569 2026] [:error] [pid 4823:tid 4853] [client 20.91.250.199:12443] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "aectI_c8mke3PfHqsxHL3gAAAYA"]
[Tue Apr 21 15:54:12.711351 2026] [:error] [pid 53731:tid 53753] [client 20.91.250.199:13023] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/5.php"] [unique_id "aectJF2I9THUR-bRVGzh0gAAAhE"]
[Tue Apr 21 15:54:13.537758 2026] [:error] [pid 4823:tid 4872] [client 20.91.250.199:14067] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aectJfc8mke3PfHqsxHL4gAAAZM"]
[Tue Apr 21 15:54:14.161025 2026] [:error] [pid 54080:tid 54082] [client 20.91.250.199:30114] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aectJozEbQHHxtmWbaZizQAAAsA"]
[Tue Apr 21 15:54:14.803738 2026] [:error] [pid 4823:tid 4853] [client 20.91.250.199:30106] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aectJvc8mke3PfHqsxHL5gAAAYA"]
[Tue Apr 21 15:54:15.804173 2026] [:error] [pid 35321:tid 35385] [client 20.91.250.199:1279] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6.php"] [unique_id "aectJzeHLhVUuu8cVXzHpgAAAEE"]
[Tue Apr 21 15:54:16.646167 2026] [:error] [pid 35321:tid 35395] [client 20.91.250.199:12445] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aectKDeHLhVUuu8cVXzHqAAAAEs"]
[Tue Apr 21 15:54:17.271958 2026] [:error] [pid 53832:tid 53843] [client 20.91.250.199:58130] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aectKdzkuxsE_OhM9UIrbgAAAkg"]
[Tue Apr 21 15:54:18.075645 2026] [:error] [pid 4823:tid 4853] [client 20.91.250.199:22938] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aectKvc8mke3PfHqsxHL7QAAAYA"]
[Tue Apr 21 15:54:18.781840 2026] [:error] [pid 53731:tid 53737] [client 20.91.250.199:22971] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "aectKl2I9THUR-bRVGzh1AAAAgI"]
[Tue Apr 21 15:54:19.726606 2026] [:error] [pid 53731:tid 53738] [client 20.91.250.199:55565] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "aectK12I9THUR-bRVGzh1QAAAgM"]
[Tue Apr 21 15:54:20.663786 2026] [:error] [pid 53731:tid 53748] [client 20.91.250.199:55553] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "aectLF2I9THUR-bRVGzh1wAAAg0"]
[Tue Apr 21 15:54:21.693325 2026] [:error] [pid 54080:tid 54092] [client 20.91.250.199:21103] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "aectLYzEbQHHxtmWbaZi1AAAAso"]
[Tue Apr 21 15:54:22.404046 2026] [:error] [pid 54080:tid 54105] [client 20.91.250.199:36588] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "aectLozEbQHHxtmWbaZi1wAAAtc"]
[Tue Apr 21 15:54:23.771050 2026] [:error] [pid 53978:tid 53988] [client 20.91.250.199:21075] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aectL51ivsR4hcOSQba6uQAAAog"]
[Tue Apr 21 15:54:26.472813 2026] [:error] [pid 35321:tid 35394] [client 20.91.250.199:1236] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aectMjeHLhVUuu8cVXzHtQAAAEo"]
[Tue Apr 21 15:54:28.880379 2026] [:error] [pid 4777:tid 4808] [client 20.91.250.199:24290] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aectNKxXur6bykKyLZSLxQAAARQ"]
[Tue Apr 21 15:54:51.894161 2026] [proxy_fcgi:error] [pid 54080:tid 54099] [client 20.91.250.199:12457] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:55:08.943254 2026] [proxy_fcgi:error] [pid 54080:tid 54087] [client 20.91.250.199:43080] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:55:09.572613 2026] [proxy_fcgi:error] [pid 35320:tid 35334] [client 20.91.250.199:27596] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:55:27.889819 2026] [proxy_fcgi:error] [pid 4777:tid 4799] [client 20.91.250.199:13441] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:55:34.498422 2026] [:error] [pid 35321:tid 35385] [client 20.91.250.199:58211] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aectdjeHLhVUuu8cVXzJhwAAAEE"]
[Tue Apr 21 15:55:35.733673 2026] [:error] [pid 4823:tid 4853] [client 20.91.250.199:18677] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aectd_c8mke3PfHqsxHMlgAAAYA"]
[Tue Apr 21 15:55:37.031403 2026] [:error] [pid 35320:tid 35332] [client 20.91.250.199:57302] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aecteYJW6fdXWO6agMEomgAAAAI"]
[Tue Apr 21 15:55:38.478864 2026] [:error] [pid 4777:tid 4800] [client 20.91.250.199:18646] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "aecteqxXur6bykKyLZSL1wAAAQw"]
[Tue Apr 21 15:55:42.046991 2026] [:error] [pid 53832:tid 53855] [client 20.91.250.199:16117] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aectftzkuxsE_OhM9UIsagAAAlQ"]
[Tue Apr 21 15:55:44.196605 2026] [:error] [pid 54080:tid 54086] [client 20.91.250.199:34439] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aectgIzEbQHHxtmWbaZjQgAAAsQ"]
[Tue Apr 21 15:55:45.877370 2026] [:error] [pid 35321:tid 35390] [client 20.91.250.199:28224] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aectgTeHLhVUuu8cVXzJrwAAAEY"]
[Tue Apr 21 15:55:46.763368 2026] [:error] [pid 53832:tid 53849] [client 20.91.250.199:16087] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "aectgtzkuxsE_OhM9UIsbQAAAk4"]
[Tue Apr 21 15:55:48.303962 2026] [:error] [pid 54080:tid 54092] [client 20.91.250.199:57282] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aecthIzEbQHHxtmWbaZjWwAAAso"]
[Tue Apr 21 15:55:49.169274 2026] [:error] [pid 4777:tid 4795] [client 20.91.250.199:16306] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aecthaxXur6bykKyLZSL5AAAAQc"]
[Tue Apr 21 15:55:53.433352 2026] [:error] [pid 53731:tid 53743] [client 20.91.250.199:34493] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aectiV2I9THUR-bRVGziOQAAAgg"]
[Tue Apr 21 15:55:56.824791 2026] [:error] [pid 4823:tid 4868] [client 20.91.250.199:21913] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "aectjPc8mke3PfHqsxHMswAAAY8"]
[Tue Apr 21 15:55:59.170521 2026] [:error] [pid 53978:tid 53983] [client 20.91.250.199:56873] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aectj51ivsR4hcOSQba66AAAAoM"]
[Tue Apr 21 15:56:00.572655 2026] [:error] [pid 53731:tid 53752] [client 20.91.250.199:22545] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aectkF2I9THUR-bRVGziRQAAAhA"]
[Tue Apr 21 15:56:01.903315 2026] [:error] [pid 35322:tid 35361] [client 20.91.250.199:18654] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aectkaPoAfV40BTfVKzHygAAAIQ"]
[Tue Apr 21 15:56:02.548005 2026] [:error] [pid 53832:tid 53843] [client 20.91.250.199:1493] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uuu.php"] [unique_id "aectktzkuxsE_OhM9UIsoQAAAkg"]
[Tue Apr 21 15:56:04.901039 2026] [:error] [pid 4777:tid 4791] [client 20.91.250.199:22585] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "aectlKxXur6bykKyLZSMCQAAAQM"]
[Tue Apr 21 15:56:06.377550 2026] [:error] [pid 53731:tid 53738] [client 20.91.250.199:42644] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "aectll2I9THUR-bRVGziTAAAAgM"]
[Tue Apr 21 15:56:08.368705 2026] [:error] [pid 53832:tid 53854] [client 20.91.250.199:56832] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "aectmNzkuxsE_OhM9UIsugAAAlM"]
[Tue Apr 21 15:56:09.713832 2026] [:error] [pid 35321:tid 35405] [client 20.91.250.199:24876] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no1.php"] [unique_id "aectmTeHLhVUuu8cVXzJ1gAAAFU"]
[Tue Apr 21 15:56:10.748052 2026] [:error] [pid 4823:tid 4857] [client 20.91.250.199:56892] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "aectmvc8mke3PfHqsxHMzQAAAYQ"]
[Tue Apr 21 15:56:13.719746 2026] [:error] [pid 53832:tid 53836] [client 20.91.250.199:1474] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "aectndzkuxsE_OhM9UIs0wAAAkE"]
[Tue Apr 21 15:56:14.942766 2026] [:error] [pid 35321:tid 35384] [client 20.91.250.199:1500] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "aectnjeHLhVUuu8cVXzJ7AAAAEA"]
[Tue Apr 21 15:56:17.429368 2026] [:error] [pid 4823:tid 4872] [client 20.91.250.199:1529] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "aectofc8mke3PfHqsxHM0wAAAZM"]
[Tue Apr 21 15:56:18.948861 2026] [:error] [pid 53832:tid 53842] [client 20.91.250.199:13696] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "aectotzkuxsE_OhM9UIs3wAAAkc"]
[Tue Apr 21 15:56:20.514135 2026] [:error] [pid 54080:tid 54091] [client 20.91.250.199:21926] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "aectpIzEbQHHxtmWbaZjogAAAsk"]
[Tue Apr 21 15:56:21.815739 2026] [:error] [pid 53731:tid 53742] [client 20.91.250.199:56890] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "aectpV2I9THUR-bRVGziWQAAAgc"]
[Tue Apr 21 15:56:23.367679 2026] [:error] [pid 35321:tid 35398] [client 20.91.250.199:22560] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "aectpzeHLhVUuu8cVXzKAwAAAE4"]
[Tue Apr 21 15:56:24.229793 2026] [:error] [pid 53832:tid 53836] [client 20.91.250.199:32553] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aectqNzkuxsE_OhM9UIs7wAAAkE"]
[Tue Apr 21 15:56:25.765578 2026] [:error] [pid 53978:tid 53994] [client 20.91.250.199:22640] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aectqZ1ivsR4hcOSQba7CQAAAo4"]
[Tue Apr 21 15:56:27.026384 2026] [:error] [pid 35415:tid 35450] [client 20.91.250.199:56847] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aectq0iqDinI4_22zzhbxAAAANc"]
[Tue Apr 21 15:56:28.652558 2026] [:error] [pid 54080:tid 54089] [client 20.91.250.199:22540] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a2.php"] [unique_id "aectrIzEbQHHxtmWbaZjwAAAAsc"]
[Tue Apr 21 15:56:30.231588 2026] [:error] [pid 35321:tid 35392] [client 20.91.250.199:55488] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aectrjeHLhVUuu8cVXzKFAAAAEg"]
[Tue Apr 21 15:56:49.658105 2026] [proxy_fcgi:error] [pid 53978:tid 54001] [client 20.91.250.199:22631] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:57:04.346864 2026] [proxy_fcgi:error] [pid 35321:tid 35402] [client 20.91.250.199:26530] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:57:09.387337 2026] [proxy_fcgi:error] [pid 54080:tid 54106] [client 20.91.250.199:33674] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:57:17.649113 2026] [proxy_fcgi:error] [pid 35321:tid 35405] [client 20.91.250.199:36741] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:57:31.248813 2026] [proxy_fcgi:error] [pid 4823:tid 4857] [client 20.91.250.199:13778] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:57:45.138952 2026] [autoindex:error] [pid 35321:tid 35388] [client 20.91.250.199:43670] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:57:47.284453 2026] [:error] [pid 35321:tid 35399] [client 20.91.250.199:29779] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aect-zeHLhVUuu8cVXzLgwAAAE8"]
[Tue Apr 21 15:57:49.081531 2026] [:error] [pid 53832:tid 53840] [client 20.91.250.199:17533] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aect_dzkuxsE_OhM9UItzgAAAkU"]
[Tue Apr 21 15:57:50.499326 2026] [:error] [pid 53978:tid 53980] [client 20.91.250.199:13974] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aect_p1ivsR4hcOSQba7TwAAAoA"]
[Tue Apr 21 15:57:52.036995 2026] [:error] [pid 35415:tid 35428] [client 20.91.250.199:26563] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "aecuAEiqDinI4_22zzhb8wAAAME"]
[Tue Apr 21 15:57:53.218700 2026] [:error] [pid 4823:tid 4872] [client 20.91.250.199:34528] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aecuAfc8mke3PfHqsxHNYAAAAZM"]
[Tue Apr 21 15:57:54.290029 2026] [:error] [pid 35321:tid 35392] [client 20.91.250.199:1885] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aecuAjeHLhVUuu8cVXzLogAAAEg"]
[Tue Apr 21 15:57:55.217480 2026] [:error] [pid 4823:tid 4876] [client 20.91.250.199:29816] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aecuA_c8mke3PfHqsxHNZQAAAZc"]
[Tue Apr 21 15:57:56.124503 2026] [:error] [pid 4823:tid 4869] [client 20.91.250.199:26571] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aecuBPc8mke3PfHqsxHNZwAAAZA"]
[Tue Apr 21 15:57:57.830385 2026] [:error] [pid 53731:tid 53741] [client 20.91.250.199:16045] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aecuBV2I9THUR-bRVGzilgAAAgY"]
[Tue Apr 21 15:57:59.570372 2026] [:error] [pid 4823:tid 4875] [client 20.91.250.199:17475] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aecuB_c8mke3PfHqsxHNbwAAAZY"]
[Tue Apr 21 15:58:01.279517 2026] [:error] [pid 53832:tid 53855] [client 20.91.250.199:13982] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aecuCdzkuxsE_OhM9UIt5wAAAlQ"]
[Tue Apr 21 15:58:04.284552 2026] [:error] [pid 4823:tid 4862] [client 20.91.250.199:35564] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aecuDPc8mke3PfHqsxHNdQAAAYk"]
[Tue Apr 21 15:58:06.213878 2026] [:error] [pid 35322:tid 35359] [client 20.91.250.199:19993] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aecuDqPoAfV40BTfVKzIFAAAAII"]
[Tue Apr 21 15:58:07.425335 2026] [:error] [pid 35322:tid 35378] [client 20.91.250.199:17435] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aecuD6PoAfV40BTfVKzIGQAAAJU"]
[Tue Apr 21 15:58:09.077716 2026] [:error] [pid 53832:tid 53850] [client 20.91.250.199:19999] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "aecuEdzkuxsE_OhM9UIuCwAAAk8"]
[Tue Apr 21 15:58:09.810657 2026] [:error] [pid 53832:tid 53835] [client 20.91.250.199:21444] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aecuEdzkuxsE_OhM9UIuEAAAAkA"]
[Tue Apr 21 15:58:11.169369 2026] [:error] [pid 4777:tid 4807] [client 20.91.250.199:29289] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aecuE6xXur6bykKyLZSMXwAAARM"]
[Tue Apr 21 15:58:12.378116 2026] [:error] [pid 35320:tid 35350] [client 20.91.250.199:26616] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aecuFIJW6fdXWO6agMEpTAAAABQ"]
[Tue Apr 21 15:58:13.382644 2026] [:error] [pid 53832:tid 53841] [client 20.91.250.199:57801] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aecuFdzkuxsE_OhM9UIuFgAAAkY"]
[Tue Apr 21 15:58:14.789220 2026] [:error] [pid 35321:tid 35404] [client 20.91.250.199:21448] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aecuFjeHLhVUuu8cVXzL0wAAAFQ"]
[Tue Apr 21 15:58:15.947339 2026] [:error] [pid 35321:tid 35390] [client 20.91.250.199:1705] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aecuFzeHLhVUuu8cVXzL2AAAAEY"]
[Tue Apr 21 15:58:16.850833 2026] [:error] [pid 4823:tid 4862] [client 20.91.250.199:31184] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aecuGPc8mke3PfHqsxHNggAAAYk"]
[Tue Apr 21 15:58:17.876711 2026] [:error] [pid 35321:tid 35404] [client 20.91.250.199:12985] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "aecuGTeHLhVUuu8cVXzL4AAAAFQ"]
[Tue Apr 21 15:58:19.421408 2026] [:error] [pid 35321:tid 35389] [client 20.91.250.199:21469] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aecuGzeHLhVUuu8cVXzL6gAAAEU"]
[Tue Apr 21 15:58:21.022203 2026] [:error] [pid 53832:tid 53849] [client 20.91.250.199:21498] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aecuHdzkuxsE_OhM9UIuJAAAAk4"]
[Tue Apr 21 15:58:22.072828 2026] [:error] [pid 53832:tid 53858] [client 20.91.250.199:57821] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aecuHtzkuxsE_OhM9UIuKQAAAlc"]
[Tue Apr 21 15:58:23.856064 2026] [:error] [pid 35320:tid 35352] [client 20.91.250.199:13307] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aecuH4JW6fdXWO6agMEpWAAAABY"]
[Tue Apr 21 15:58:25.094550 2026] [:error] [pid 35321:tid 35387] [client 20.91.250.199:33349] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aecuITeHLhVUuu8cVXzMAgAAAEM"]
[Tue Apr 21 15:58:26.231401 2026] [:error] [pid 53832:tid 53854] [client 20.91.250.199:33360] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aecuItzkuxsE_OhM9UIuPAAAAlM"]
[Tue Apr 21 15:58:27.296205 2026] [:error] [pid 35320:tid 35354] [client 20.91.250.199:30159] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aecuI4JW6fdXWO6agMEpXgAAABg"]
[Tue Apr 21 15:58:28.326608 2026] [:error] [pid 35321:tid 35393] [client 20.91.250.199:57830] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "aecuJDeHLhVUuu8cVXzMEAAAAEk"]
[Tue Apr 21 15:58:29.467717 2026] [:error] [pid 35321:tid 35389] [client 20.91.250.199:12993] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aecuJTeHLhVUuu8cVXzMGQAAAEU"]
[Tue Apr 21 15:58:30.394835 2026] [:error] [pid 53832:tid 53840] [client 20.91.250.199:15749] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aecuJtzkuxsE_OhM9UIuTwAAAkU"]
[Tue Apr 21 15:58:31.135626 2026] [:error] [pid 53832:tid 53843] [client 20.91.250.199:35063] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aecuJ9zkuxsE_OhM9UIuVgAAAkg"]
[Tue Apr 21 15:58:31.959780 2026] [:error] [pid 35321:tid 35396] [client 20.91.250.199:30140] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aecuJzeHLhVUuu8cVXzMHwAAAEw"]
[Tue Apr 21 15:58:33.163974 2026] [:error] [pid 4823:tid 4870] [client 20.91.250.199:30148] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aecuKfc8mke3PfHqsxHNkQAAAZE"]
[Tue Apr 21 15:58:34.088516 2026] [:error] [pid 35321:tid 35399] [client 20.91.250.199:30141] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aecuKjeHLhVUuu8cVXzMJgAAAE8"]
[Tue Apr 21 15:58:34.926286 2026] [:error] [pid 35321:tid 35390] [client 20.91.250.199:30109] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aecuKjeHLhVUuu8cVXzMKQAAAEY"]
[Tue Apr 21 15:58:35.844732 2026] [:error] [pid 53731:tid 53745] [client 20.91.250.199:35020] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "aecuK12I9THUR-bRVGzirQAAAgo"]
[Tue Apr 21 15:58:36.722893 2026] [:error] [pid 54080:tid 54101] [client 20.91.250.199:51240] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aecuLIzEbQHHxtmWbaZkJgAAAtM"]
[Tue Apr 21 15:58:38.082502 2026] [:error] [pid 35321:tid 35407] [client 20.91.250.199:30090] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aecuLjeHLhVUuu8cVXzMNgAAAFc"]
[Tue Apr 21 15:58:38.829299 2026] [:error] [pid 53832:tid 53855] [client 20.91.250.199:30139] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aecuLtzkuxsE_OhM9UIubwAAAlQ"]
[Tue Apr 21 15:58:39.571939 2026] [:error] [pid 53832:tid 53849] [client 20.91.250.199:34089] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "aecuL9zkuxsE_OhM9UIucwAAAk4"]
[Tue Apr 21 15:58:41.391102 2026] [:error] [pid 53978:tid 53993] [client 20.91.250.199:15025] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "aecuMZ1ivsR4hcOSQba7eQAAAo0"]
[Tue Apr 21 15:58:51.035439 2026] [autoindex:error] [pid 35321:tid 35406] [client 20.91.250.199:12465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:58:55.496693 2026] [autoindex:error] [pid 35321:tid 35395] [client 20.91.250.199:12465] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:59:01.034727 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 20.91.250.199:12465] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:59:16.499254 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 20.91.250.199:24285] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:59:27.763094 2026] [proxy_fcgi:error] [pid 53731:tid 53738] [client 20.91.250.199:27596] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:59:28.045528 2026] [:error] [pid 53731:tid 53741] [client 20.91.250.199:55602] [client 20.91.250.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aecuYF2I9THUR-bRVGziyAAAAgY"]
[Tue Apr 21 15:59:39.266976 2026] [autoindex:error] [pid 35321:tid 35398] [client 20.91.250.199:27599] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:59:39.628754 2026] [autoindex:error] [pid 35321:tid 35404] [client 20.91.250.199:34061] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 15:59:44.481355 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 20.91.250.199:34061] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:59:45.922691 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 20.91.250.199:1695] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 15:59:54.801567 2026] [:error] [pid 53832:tid 53850] [client 20.91.250.199:12936] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aecuetzkuxsE_OhM9UIvOAAAAk8"]
[Tue Apr 21 15:59:56.225309 2026] [:error] [pid 35321:tid 35400] [client 20.91.250.199:1707] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aecufDeHLhVUuu8cVXzNbAAAAFA"]
[Tue Apr 21 15:59:57.248179 2026] [:error] [pid 54080:tid 54093] [client 20.91.250.199:21429] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aecufYzEbQHHxtmWbaZkWgAAAss"]
[Tue Apr 21 15:59:58.058248 2026] [:error] [pid 54080:tid 54084] [client 20.91.250.199:33394] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aecufozEbQHHxtmWbaZkXQAAAsI"]
[Tue Apr 21 16:00:00.043144 2026] [:error] [pid 35321:tid 35398] [client 20.91.250.199:1721] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aecugDeHLhVUuu8cVXzNfAAAAE4"]
[Tue Apr 21 16:00:01.292256 2026] [:error] [pid 54080:tid 54096] [client 20.91.250.199:15751] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aecugYzEbQHHxtmWbaZkaAAAAs4"]
[Tue Apr 21 16:00:02.602663 2026] [:error] [pid 53832:tid 53842] [client 20.91.250.199:28758] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aecugtzkuxsE_OhM9UIvQAAAAkc"]
[Tue Apr 21 16:00:03.905622 2026] [:error] [pid 53978:tid 53984] [client 20.91.250.199:28782] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "aecug51ivsR4hcOSQba7tAAAAoQ"]
[Tue Apr 21 16:00:05.439999 2026] [:error] [pid 35321:tid 35399] [client 20.91.250.199:36572] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aecuhTeHLhVUuu8cVXzNlwAAAE8"]
[Tue Apr 21 16:00:07.593137 2026] [:error] [pid 35320:tid 35349] [client 20.91.250.199:13284] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aecuh4JW6fdXWO6agMEppQAAABM"]
[Tue Apr 21 16:00:08.668870 2026] [:error] [pid 53832:tid 53835] [client 20.91.250.199:15781] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aecuiNzkuxsE_OhM9UIvUAAAAkA"]
[Tue Apr 21 16:00:12.286167 2026] [:error] [pid 53832:tid 53859] [client 20.91.250.199:28767] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aecujNzkuxsE_OhM9UIvVQAAAlg"]
[Tue Apr 21 16:00:13.735245 2026] [:error] [pid 53978:tid 53995] [client 20.91.250.199:13282] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aecujZ1ivsR4hcOSQba7vAAAAo8"]
[Tue Apr 21 16:00:14.956219 2026] [:error] [pid 53731:tid 53760] [client 20.91.250.199:21386] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aecujl2I9THUR-bRVGzi3wAAAhg"]
[Tue Apr 21 16:00:16.728599 2026] [:error] [pid 35321:tid 35388] [client 20.91.250.199:28779] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aecukDeHLhVUuu8cVXzNnQAAAEQ"]
[Tue Apr 21 16:00:17.951994 2026] [:error] [pid 53832:tid 53859] [client 20.91.250.199:29191] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "aecukdzkuxsE_OhM9UIvXgAAAlg"]
[Tue Apr 21 16:00:18.803209 2026] [:error] [pid 35322:tid 35365] [client 20.91.250.199:21432] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aecukqPoAfV40BTfVKzIUgAAAIg"]
[Tue Apr 21 16:00:20.988824 2026] [:error] [pid 35321:tid 35394] [client 20.91.250.199:12990] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aeculDeHLhVUuu8cVXzNoAAAAEo"]
[Tue Apr 21 16:00:22.164458 2026] [:error] [pid 53832:tid 53840] [client 20.91.250.199:35058] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aecultzkuxsE_OhM9UIvbwAAAkU"]
[Tue Apr 21 16:00:23.824106 2026] [:error] [pid 54080:tid 54094] [client 20.91.250.199:15792] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "aecul4zEbQHHxtmWbaZklgAAAsw"]
[Tue Apr 21 16:00:24.742529 2026] [:error] [pid 35321:tid 35403] [client 20.91.250.199:35042] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aecumDeHLhVUuu8cVXzNpgAAAFM"]
[Tue Apr 21 16:00:26.204815 2026] [:error] [pid 35320:tid 35351] [client 20.91.250.199:15766] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aecumoJW6fdXWO6agMEptgAAABU"]
[Tue Apr 21 16:00:27.264836 2026] [:error] [pid 35321:tid 35393] [client 20.91.250.199:36567] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aecumzeHLhVUuu8cVXzNtgAAAEk"]
[Tue Apr 21 16:00:28.382372 2026] [:error] [pid 4823:tid 4868] [client 20.91.250.199:21502] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aecunPc8mke3PfHqsxHOTQAAAY8"]
[Tue Apr 21 16:00:29.381533 2026] [:error] [pid 35321:tid 35385] [client 20.91.250.199:57828] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aecunTeHLhVUuu8cVXzNxAAAAEE"]
[Tue Apr 21 16:00:31.284813 2026] [:error] [pid 54080:tid 54086] [client 20.91.250.199:16000] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aecun4zEbQHHxtmWbaZkoAAAAsQ"]
[Tue Apr 21 16:00:33.578503 2026] [:error] [pid 35321:tid 35389] [client 20.91.250.199:42563] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aecuoTeHLhVUuu8cVXzN1QAAAEU"]
[Tue Apr 21 16:00:35.691370 2026] [:error] [pid 35320:tid 35353] [client 20.91.250.199:12975] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aecuo4JW6fdXWO6agMEpvAAAABc"]
[Tue Apr 21 16:00:36.859522 2026] [:error] [pid 53832:tid 53855] [client 20.91.250.199:23007] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aecupNzkuxsE_OhM9UIvkgAAAlQ"]
[Tue Apr 21 16:00:37.847892 2026] [:error] [pid 35321:tid 35402] [client 20.91.250.199:33362] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aecupTeHLhVUuu8cVXzN8gAAAFI"]
[Tue Apr 21 16:00:38.956049 2026] [:error] [pid 53832:tid 53856] [client 20.91.250.199:35024] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aecuptzkuxsE_OhM9UIvmgAAAlU"]
[Tue Apr 21 16:00:39.764958 2026] [:error] [pid 53832:tid 53839] [client 20.91.250.199:36597] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "aecup9zkuxsE_OhM9UIvnAAAAkQ"]
[Tue Apr 21 16:00:40.945179 2026] [:error] [pid 35321:tid 35399] [client 20.91.250.199:36580] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aecuqDeHLhVUuu8cVXzOBAAAAE8"]
[Tue Apr 21 16:00:41.854858 2026] [:error] [pid 53832:tid 53835] [client 20.91.250.199:25378] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aecuqdzkuxsE_OhM9UIvogAAAkA"]
[Tue Apr 21 16:00:44.114829 2026] [:error] [pid 4823:tid 4876] [client 20.91.250.199:23020] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aecurPc8mke3PfHqsxHOVAAAAZc"]
[Tue Apr 21 16:00:45.094281 2026] [:error] [pid 54080:tid 54104] [client 20.91.250.199:12957] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "aecurYzEbQHHxtmWbaZkvQAAAtY"]
[Tue Apr 21 16:00:45.889594 2026] [:error] [pid 4823:tid 4863] [client 20.91.250.199:23036] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aecurfc8mke3PfHqsxHOVwAAAYo"]
[Tue Apr 21 16:00:46.616312 2026] [:error] [pid 53832:tid 53854] [client 20.91.250.199:25401] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aecurtzkuxsE_OhM9UIvqwAAAlM"]
[Tue Apr 21 16:00:47.582135 2026] [:error] [pid 4823:tid 4865] [client 20.91.250.199:1664] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aecur_c8mke3PfHqsxHOWAAAAYw"]
[Tue Apr 21 16:00:48.351515 2026] [:error] [pid 35320:tid 35335] [client 20.91.250.199:23026] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "aecusIJW6fdXWO6agMEpyAAAAAU"]
[Tue Apr 21 16:00:49.191187 2026] [:error] [pid 53832:tid 53838] [client 20.91.250.199:1694] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aecusdzkuxsE_OhM9UIvtAAAAkM"]
[Tue Apr 21 16:00:50.293134 2026] [:error] [pid 53832:tid 53845] [client 20.91.250.199:25359] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aecustzkuxsE_OhM9UIvuQAAAko"]
[Tue Apr 21 16:00:51.264874 2026] [:error] [pid 35321:tid 35397] [client 20.91.250.199:12979] [client 20.91.250.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "aecuszeHLhVUuu8cVXzOMwAAAE0"]
[Tue Apr 21 16:01:08.850453 2026] [proxy_fcgi:error] [pid 35321:tid 35390] [client 20.91.250.199:35069] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 16:01:14.657695 2026] [proxy_fcgi:error] [pid 4823:tid 4868] [client 20.91.250.199:13257] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 16:01:15.263354 2026] [autoindex:error] [pid 4823:tid 4858] [client 20.91.250.199:1665] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 18:11:04.879918 2026] [:error] [pid 35321:tid 35385] [client 216.73.217.92:18060] [client 216.73.217.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.217.92, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aedNODeHLhVUuu8cVXwdbAAAAEE"]
[Tue Apr 21 18:45:23.130445 2026] [proxy_fcgi:error] [pid 53978:tid 53987] [client 185.8.106.232:50584] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 18:45:27.195331 2026] [proxy_fcgi:error] [pid 35321:tid 35392] [client 185.8.106.232:43736] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 18:45:29.155320 2026] [proxy_fcgi:error] [pid 35321:tid 35402] [client 185.8.106.232:43788] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 19:10:30.920465 2026] [:error] [pid 54080:tid 54104] [client 147.182.140.170:59262] [client 147.182.140.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.140.170, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aedbJozEbQHHxtmWbaad3gAAAtY"]
[Tue Apr 21 19:10:32.613657 2026] [:error] [pid 54080:tid 54091] [client 147.182.140.170:59262] [client 147.182.140.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.140.170, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aedbKIzEbQHHxtmWbaad4wAAAsk"]
[Tue Apr 21 19:38:18.265096 2026] [:error] [pid 35321:tid 35399] [client 34.78.180.51:53917] [client 34.78.180.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.180.51, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aedhqjeHLhVUuu8cVXxe2gAAAE8"]
[Tue Apr 21 19:38:21.824821 2026] [:error] [pid 35321:tid 35388] [client 34.78.180.51:53917] [client 34.78.180.51] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aedhrTeHLhVUuu8cVXxe6AAAAEQ"]
[Tue Apr 21 19:38:24.371330 2026] [:error] [pid 35321:tid 35387] [client 34.78.180.51:53917] [client 34.78.180.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.180.51, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aedhsDeHLhVUuu8cVXxe6gAAAEM"]
[Tue Apr 21 19:39:39.073348 2026] [:error] [pid 4823:tid 4873] [client 104.155.9.156:56261] [client 104.155.9.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.155.9.156, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aedh-_c8mke3PfHqsxH0DAAAAZQ"]
[Tue Apr 21 19:39:42.601943 2026] [:error] [pid 4823:tid 4862] [client 104.155.9.156:56261] [client 104.155.9.156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aedh_vc8mke3PfHqsxH0EQAAAYk"]
[Tue Apr 21 19:39:45.508074 2026] [:error] [pid 4823:tid 4853] [client 104.155.9.156:56261] [client 104.155.9.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.155.9.156, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aediAfc8mke3PfHqsxH0FAAAAYA"]
[Tue Apr 21 22:55:21.795621 2026] [proxy_fcgi:error] [pid 4823:tid 4866] [client 172.213.216.244:51612] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:55:37.924528 2026] [proxy_fcgi:error] [pid 53832:tid 53838] [client 172.213.216.244:9675] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:55:44.130664 2026] [proxy_fcgi:error] [pid 54080:tid 54091] [client 172.213.216.244:52741] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:55:58.694171 2026] [proxy_fcgi:error] [pid 35321:tid 35389] [client 172.213.216.244:9688] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:56:01.736032 2026] [proxy_fcgi:error] [pid 54080:tid 54094] [client 172.213.216.244:9700] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:56:09.685076 2026] [:error] [pid 35320:tid 35330] [client 172.213.216.244:51642] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeeQCYJW6fdXWO6agMEEIgAAAAA"]
[Tue Apr 21 22:56:10.249179 2026] [:error] [pid 35415:tid 35437] [client 172.213.216.244:9674] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeeQCkiqDinI4_22zzh-4AAAAMo"]
[Tue Apr 21 22:56:10.893274 2026] [:error] [pid 35321:tid 35396] [client 172.213.216.244:9843] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeeQCjeHLhVUuu8cVXz9kwAAAEw"]
[Tue Apr 21 22:56:11.603197 2026] [:error] [pid 53832:tid 53843] [client 172.213.216.244:51629] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeeQC9zkuxsE_OhM9UJ_fgAAAkg"]
[Tue Apr 21 22:56:12.361923 2026] [:error] [pid 35321:tid 35408] [client 172.213.216.244:52786] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aeeQDDeHLhVUuu8cVXz9mgAAAFg"]
[Tue Apr 21 22:56:13.243263 2026] [:error] [pid 53978:tid 54002] [client 172.213.216.244:59647] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aeeQDZ1ivsR4hcOSQbZCswAAApY"]
[Tue Apr 21 22:56:15.848604 2026] [:error] [pid 53731:tid 53756] [client 172.213.216.244:51608] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aeeQD12I9THUR-bRVGyVegAAAhQ"]
[Tue Apr 21 22:56:16.675276 2026] [:error] [pid 35320:tid 35343] [client 172.213.216.244:9720] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aeeQEIJW6fdXWO6agMEEJQAAAA0"]
[Tue Apr 21 22:56:17.953750 2026] [:error] [pid 35321:tid 35396] [client 172.213.216.244:51599] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeeQETeHLhVUuu8cVXz9pAAAAEw"]
[Tue Apr 21 22:56:18.660175 2026] [:error] [pid 35321:tid 35384] [client 172.213.216.244:52782] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeeQEjeHLhVUuu8cVXz9pQAAAEA"]
[Tue Apr 21 22:56:19.801919 2026] [:error] [pid 53978:tid 53985] [client 172.213.216.244:9681] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeeQE51ivsR4hcOSQbZCvQAAAoU"]
[Tue Apr 21 22:56:20.578402 2026] [:error] [pid 35321:tid 35391] [client 172.213.216.244:9795] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeeQFDeHLhVUuu8cVXz9qwAAAEc"]
[Tue Apr 21 22:56:21.318678 2026] [:error] [pid 35321:tid 35399] [client 172.213.216.244:9685] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bmi.php"] [unique_id "aeeQFTeHLhVUuu8cVXz9rgAAAE8"]
[Tue Apr 21 22:56:22.459542 2026] [:error] [pid 35321:tid 35385] [client 172.213.216.244:9811] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bmi.php"] [unique_id "aeeQFjeHLhVUuu8cVXz9sgAAAEE"]
[Tue Apr 21 22:56:24.770480 2026] [:error] [pid 35321:tid 35395] [client 172.213.216.244:9717] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bmi.php"] [unique_id "aeeQGDeHLhVUuu8cVXz9twAAAEs"]
[Tue Apr 21 22:56:25.381645 2026] [:error] [pid 35320:tid 35339] [client 172.213.216.244:59607] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bmi.php"] [unique_id "aeeQGYJW6fdXWO6agMEEOAAAAAk"]
[Tue Apr 21 22:56:26.244144 2026] [:error] [pid 53978:tid 53999] [client 172.213.216.244:9698] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeeQGp1ivsR4hcOSQbZCwQAAApM"]
[Tue Apr 21 22:56:27.101675 2026] [:error] [pid 53978:tid 53980] [client 172.213.216.244:52738] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeeQG51ivsR4hcOSQbZCwgAAAoA"]
[Tue Apr 21 22:56:28.548595 2026] [:error] [pid 54080:tid 54083] [client 172.213.216.244:59589] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeeQHIzEbQHHxtmWbabWJQAAAsE"]
[Tue Apr 21 22:56:30.785608 2026] [:error] [pid 53978:tid 53990] [client 172.213.216.244:51992] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeeQHp1ivsR4hcOSQbZCzgAAAoo"]
[Tue Apr 21 22:56:32.801077 2026] [:error] [pid 35322:tid 35381] [client 172.213.216.244:52016] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeeQIKPoAfV40BTfVKzkJQAAAJg"]
[Tue Apr 21 22:56:34.733169 2026] [:error] [pid 35320:tid 35335] [client 172.213.216.244:9793] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeeQIoJW6fdXWO6agMEERQAAAAU"]
[Tue Apr 21 22:56:36.426375 2026] [:error] [pid 35320:tid 35337] [client 172.213.216.244:51997] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeeQJIJW6fdXWO6agMEETAAAAAc"]
[Tue Apr 21 22:56:38.295755 2026] [:error] [pid 53731:tid 53735] [client 172.213.216.244:51606] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeeQJl2I9THUR-bRVGyVjwAAAgA"]
[Tue Apr 21 22:56:39.719893 2026] [:error] [pid 53978:tid 53988] [client 172.213.216.244:62633] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeeQJ51ivsR4hcOSQbZC2gAAAog"]
[Tue Apr 21 22:56:40.563471 2026] [:error] [pid 53978:tid 53997] [client 172.213.216.244:52791] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeeQKJ1ivsR4hcOSQbZC3AAAApE"]
[Tue Apr 21 22:56:41.755096 2026] [:error] [pid 4823:tid 4865] [client 172.213.216.244:52025] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeeQKfc8mke3PfHqsxENEAAAAYw"]
[Tue Apr 21 22:56:42.401909 2026] [:error] [pid 35320:tid 35344] [client 172.213.216.244:9823] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeeQKoJW6fdXWO6agMEEWAAAAA4"]
[Tue Apr 21 22:56:42.967137 2026] [:error] [pid 35321:tid 35384] [client 172.213.216.244:59622] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeeQKjeHLhVUuu8cVXz9xgAAAEA"]
[Tue Apr 21 22:56:43.520959 2026] [:error] [pid 53731:tid 53737] [client 172.213.216.244:52774] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeeQK12I9THUR-bRVGyVmQAAAgI"]
[Tue Apr 21 22:56:44.505816 2026] [:error] [pid 53731:tid 53758] [client 172.213.216.244:52781] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeeQLF2I9THUR-bRVGyVmgAAAhY"]
[Tue Apr 21 22:56:45.069806 2026] [:error] [pid 35320:tid 35342] [client 172.213.216.244:52777] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wen.php"] [unique_id "aeeQLYJW6fdXWO6agMEEWQAAAAw"]
[Tue Apr 21 22:56:45.628412 2026] [:error] [pid 35321:tid 35389] [client 172.213.216.244:9706] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aeeQLTeHLhVUuu8cVXz97wAAAEU"]
[Tue Apr 21 22:56:46.473464 2026] [:error] [pid 53978:tid 53988] [client 172.213.216.244:52767] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aeeQLp1ivsR4hcOSQbZC6AAAAog"]
[Tue Apr 21 22:56:47.348987 2026] [:error] [pid 53978:tid 53984] [client 172.213.216.244:59638] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aeeQL51ivsR4hcOSQbZC6gAAAoQ"]
[Tue Apr 21 22:56:48.121377 2026] [:error] [pid 53978:tid 53985] [client 172.213.216.244:51595] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aeeQMJ1ivsR4hcOSQbZC7AAAAoU"]
[Tue Apr 21 22:56:49.174313 2026] [:error] [pid 53978:tid 53989] [client 172.213.216.244:59598] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeeQMZ1ivsR4hcOSQbZC7wAAAok"]
[Tue Apr 21 22:56:50.300571 2026] [:error] [pid 53731:tid 53748] [client 172.213.216.244:59587] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeeQMl2I9THUR-bRVGyVnwAAAg0"]
[Tue Apr 21 22:56:51.663796 2026] [:error] [pid 35415:tid 35444] [client 172.213.216.244:9812] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeeQM0iqDinI4_22zzh-_QAAANE"]
[Tue Apr 21 22:56:52.950014 2026] [:error] [pid 35321:tid 35385] [client 172.213.216.244:9842] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeeQNDeHLhVUuu8cVXz-DwAAAEE"]
[Tue Apr 21 22:56:54.574991 2026] [:error] [pid 35320:tid 35348] [client 172.213.216.244:9821] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeeQNoJW6fdXWO6agMEEZQAAABI"]
[Tue Apr 21 22:56:56.498420 2026] [:error] [pid 35320:tid 35351] [client 172.213.216.244:59593] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeeQOIJW6fdXWO6agMEEbQAAABU"]
[Tue Apr 21 22:56:57.301369 2026] [:error] [pid 4823:tid 4855] [client 172.213.216.244:52772] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeeQOfc8mke3PfHqsxENHgAAAYI"]
[Tue Apr 21 22:56:57.842161 2026] [:error] [pid 53978:tid 53982] [client 172.213.216.244:59029] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeeQOZ1ivsR4hcOSQbZC8gAAAoI"]
[Tue Apr 21 22:56:58.623737 2026] [:error] [pid 35415:tid 35450] [client 172.213.216.244:52737] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeeQOkiqDinI4_22zzh_AQAAANc"]
[Tue Apr 21 22:56:59.521290 2026] [:error] [pid 35415:tid 35447] [client 172.213.216.244:9708] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeeQO0iqDinI4_22zzh_AwAAANQ"]
[Tue Apr 21 22:57:00.471393 2026] [:error] [pid 35415:tid 35441] [client 172.213.216.244:59620] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeeQPEiqDinI4_22zzh_BwAAAM4"]
[Tue Apr 21 22:57:01.223054 2026] [:error] [pid 53978:tid 53981] [client 172.213.216.244:52022] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aeeQPZ1ivsR4hcOSQbZC9wAAAoE"]
[Tue Apr 21 22:57:01.857727 2026] [:error] [pid 35321:tid 35391] [client 172.213.216.244:59596] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeeQPTeHLhVUuu8cVXz-HwAAAEc"]
[Tue Apr 21 22:57:02.604827 2026] [:error] [pid 53832:tid 53856] [client 172.213.216.244:52798] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeeQPtzkuxsE_OhM9UJ_nwAAAlU"]
[Tue Apr 21 22:57:03.147295 2026] [:error] [pid 35321:tid 35398] [client 172.213.216.244:9682] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeeQPzeHLhVUuu8cVXz-IgAAAE4"]
[Tue Apr 21 22:57:03.846133 2026] [:error] [pid 4777:tid 4788] [client 172.213.216.244:9678] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "aeeQP6xXur6bykKyLZS4EwAAAQA"]
[Tue Apr 21 22:57:04.619762 2026] [:error] [pid 53832:tid 53839] [client 172.213.216.244:9818] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aeeQQNzkuxsE_OhM9UJ_ogAAAkQ"]
[Tue Apr 21 22:57:05.302342 2026] [:error] [pid 4823:tid 4877] [client 172.213.216.244:59632] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aeeQQfc8mke3PfHqsxENJgAAAZg"]
[Tue Apr 21 22:57:05.996380 2026] [:error] [pid 54080:tid 54089] [client 172.213.216.244:51977] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aeeQQYzEbQHHxtmWbabWPAAAAsc"]
[Tue Apr 21 22:57:06.522311 2026] [:error] [pid 53731:tid 53737] [client 172.213.216.244:59608] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "aeeQQl2I9THUR-bRVGyVvQAAAgI"]
[Tue Apr 21 22:57:25.937398 2026] [proxy_fcgi:error] [pid 35321:tid 35394] [client 172.213.216.244:9670] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:57:35.402657 2026] [proxy_fcgi:error] [pid 35320:tid 35354] [client 172.213.216.244:52757] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:57:50.911189 2026] [proxy_fcgi:error] [pid 4777:tid 4799] [client 172.213.216.244:9696] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:57:51.794028 2026] [proxy_fcgi:error] [pid 35415:tid 35439] [client 172.213.216.244:9378] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:57:59.298842 2026] [proxy_fcgi:error] [pid 53731:tid 53755] [client 172.213.216.244:51603] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:58:15.256823 2026] [:error] [pid 35321:tid 35403] [client 172.213.216.244:62600] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aeeQhzeHLhVUuu8cVXz_DwAAAFM"]
[Tue Apr 21 22:58:15.800681 2026] [:error] [pid 53978:tid 53996] [client 172.213.216.244:52748] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aeeQh51ivsR4hcOSQbZDfwAAApA"]
[Tue Apr 21 22:58:16.307647 2026] [:error] [pid 35415:tid 35429] [client 172.213.216.244:51584] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aeeQiEiqDinI4_22zzh_JQAAAMI"]
[Tue Apr 21 22:58:17.453664 2026] [:error] [pid 35320:tid 35337] [client 172.213.216.244:9714] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abc.php"] [unique_id "aeeQiYJW6fdXWO6agMEFJAAAAAc"]
[Tue Apr 21 22:58:18.364485 2026] [:error] [pid 35321:tid 35387] [client 172.213.216.244:9829] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeeQijeHLhVUuu8cVXz_FAAAAEM"]
[Tue Apr 21 22:58:18.854420 2026] [:error] [pid 35321:tid 35405] [client 172.213.216.244:51597] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeeQijeHLhVUuu8cVXz_GQAAAFU"]
[Tue Apr 21 22:58:19.353192 2026] [:error] [pid 35321:tid 35399] [client 172.213.216.244:51617] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeeQizeHLhVUuu8cVXz_GgAAAE8"]
[Tue Apr 21 22:58:20.133436 2026] [:error] [pid 35321:tid 35396] [client 172.213.216.244:52027] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "aeeQjDeHLhVUuu8cVXz_HwAAAEw"]
[Tue Apr 21 22:58:21.153075 2026] [:error] [pid 35320:tid 35342] [client 172.213.216.244:9816] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "aeeQjYJW6fdXWO6agMEFKwAAAAw"]
[Tue Apr 21 22:58:22.010451 2026] [:error] [pid 53731:tid 53753] [client 172.213.216.244:9808] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "aeeQjl2I9THUR-bRVGyWVgAAAhE"]
[Tue Apr 21 22:58:22.660501 2026] [:error] [pid 35415:tid 35430] [client 172.213.216.244:9699] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "aeeQjkiqDinI4_22zzh_KQAAAMM"]
[Tue Apr 21 22:58:23.146351 2026] [:error] [pid 4777:tid 4792] [client 172.213.216.244:9840] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "aeeQj6xXur6bykKyLZS4RwAAAQQ"]
[Tue Apr 21 22:58:23.794472 2026] [:error] [pid 53731:tid 53756] [client 172.213.216.244:59633] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeeQj12I9THUR-bRVGyWXAAAAhQ"]
[Tue Apr 21 22:58:25.823767 2026] [:error] [pid 4823:tid 4855] [client 172.213.216.244:51634] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeeQkfc8mke3PfHqsxENYQAAAYI"]
[Tue Apr 21 22:58:26.458924 2026] [:error] [pid 54080:tid 54082] [client 172.213.216.244:52031] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeeQkozEbQHHxtmWbabWfQAAAsA"]
[Tue Apr 21 22:58:27.471740 2026] [:error] [pid 35320:tid 35344] [client 172.213.216.244:59044] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "aeeQk4JW6fdXWO6agMEFLQAAAA4"]
[Tue Apr 21 22:58:28.507507 2026] [:error] [pid 4777:tid 4789] [client 172.213.216.244:51624] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeeQlKxXur6bykKyLZS4SAAAAQE"]
[Tue Apr 21 22:58:29.142518 2026] [:error] [pid 35322:tid 35358] [client 172.213.216.244:51615] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeeQlaPoAfV40BTfVKzkbQAAAIE"]
[Tue Apr 21 22:58:29.877802 2026] [:error] [pid 4777:tid 4802] [client 172.213.216.244:51974] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeeQlaxXur6bykKyLZS4SgAAAQ4"]
[Tue Apr 21 22:58:30.414280 2026] [:error] [pid 35321:tid 35384] [client 172.213.216.244:59593] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeeQljeHLhVUuu8cVXz_NAAAAEA"]
[Tue Apr 21 22:58:31.080595 2026] [:error] [pid 35321:tid 35386] [client 172.213.216.244:9693] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aeeQlzeHLhVUuu8cVXz_NQAAAEI"]
[Tue Apr 21 22:58:31.918193 2026] [:error] [pid 35320:tid 35338] [client 172.213.216.244:51994] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aeeQl4JW6fdXWO6agMEFMgAAAAg"]
[Tue Apr 21 22:58:32.421764 2026] [:error] [pid 35320:tid 35353] [client 172.213.216.244:9690] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aeeQmIJW6fdXWO6agMEFNAAAABc"]
[Tue Apr 21 22:58:32.955500 2026] [:error] [pid 35320:tid 35340] [client 172.213.216.244:51611] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s.php"] [unique_id "aeeQmIJW6fdXWO6agMEFNgAAAAo"]
[Tue Apr 21 22:58:33.494914 2026] [:error] [pid 54080:tid 54092] [client 172.213.216.244:59621] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymn.php"] [unique_id "aeeQmYzEbQHHxtmWbabWhAAAAso"]
[Tue Apr 21 22:58:34.046227 2026] [:error] [pid 35320:tid 35343] [client 172.213.216.244:59062] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymn.php"] [unique_id "aeeQmoJW6fdXWO6agMEFOgAAAA0"]
[Tue Apr 21 22:58:34.678850 2026] [:error] [pid 35322:tid 35359] [client 172.213.216.244:51643] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymn.php"] [unique_id "aeeQmqPoAfV40BTfVKzkcQAAAII"]
[Tue Apr 21 22:58:35.308304 2026] [:error] [pid 35322:tid 35367] [client 172.213.216.244:9794] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymn.php"] [unique_id "aeeQm6PoAfV40BTfVKzkcwAAAIo"]
[Tue Apr 21 22:58:35.850107 2026] [:error] [pid 35320:tid 35342] [client 172.213.216.244:60638] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeQm4JW6fdXWO6agMEFPAAAAAw"]
[Tue Apr 21 22:58:36.332335 2026] [:error] [pid 53978:tid 53985] [client 172.213.216.244:59631] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeQnJ1ivsR4hcOSQbZDpwAAAoU"]
[Tue Apr 21 22:58:37.004095 2026] [:error] [pid 4777:tid 4807] [client 172.213.216.244:51628] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeQnaxXur6bykKyLZS4TwAAARM"]
[Tue Apr 21 22:58:37.703145 2026] [:error] [pid 4823:tid 4871] [client 172.213.216.244:59610] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeQnfc8mke3PfHqsxENaQAAAZI"]
[Tue Apr 21 22:58:39.170052 2026] [:error] [pid 53731:tid 53735] [client 172.213.216.244:9680] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aeeQn12I9THUR-bRVGyWcwAAAgA"]
[Tue Apr 21 22:58:40.033569 2026] [:error] [pid 35320:tid 35340] [client 172.213.216.244:59635] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aeeQoIJW6fdXWO6agMEFRwAAAAo"]
[Tue Apr 21 22:58:40.804305 2026] [:error] [pid 53832:tid 53857] [client 172.213.216.244:9692] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aeeQoNzkuxsE_OhM9UJ_5wAAAlY"]
[Tue Apr 21 22:58:41.959357 2026] [:error] [pid 35320:tid 35331] [client 172.213.216.244:9841] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aeeQoYJW6fdXWO6agMEFTAAAAAE"]
[Tue Apr 21 22:58:43.412654 2026] [:error] [pid 53731:tid 53750] [client 172.213.216.244:52764] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aeeQo12I9THUR-bRVGyWewAAAg8"]
[Tue Apr 21 22:58:44.264487 2026] [:error] [pid 35321:tid 35407] [client 172.213.216.244:51593] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aeeQpDeHLhVUuu8cVXz_VAAAAFc"]
[Tue Apr 21 22:58:45.218158 2026] [:error] [pid 4777:tid 4803] [client 172.213.216.244:51598] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aeeQpaxXur6bykKyLZS4UQAAAQ8"]
[Tue Apr 21 22:58:45.932276 2026] [:error] [pid 53832:tid 53856] [client 172.213.216.244:51623] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms.php"] [unique_id "aeeQpdzkuxsE_OhM9UJ_7AAAAlU"]
[Tue Apr 21 22:58:46.813116 2026] [:error] [pid 53731:tid 53757] [client 172.213.216.244:9348] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aeeQpl2I9THUR-bRVGyWgAAAAhU"]
[Tue Apr 21 22:58:47.512663 2026] [:error] [pid 53978:tid 53990] [client 172.213.216.244:52002] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aeeQp51ivsR4hcOSQbZDvgAAAoo"]
[Tue Apr 21 22:58:48.310953 2026] [:error] [pid 53832:tid 53838] [client 172.213.216.244:9839] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aeeQqNzkuxsE_OhM9UJ_8gAAAkM"]
[Tue Apr 21 22:58:48.882468 2026] [:error] [pid 53978:tid 53999] [client 172.213.216.244:52766] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "aeeQqJ1ivsR4hcOSQbZDxQAAApM"]
[Tue Apr 21 22:58:49.550214 2026] [:error] [pid 53731:tid 53735] [client 172.213.216.244:59605] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeeQqV2I9THUR-bRVGyWhgAAAgA"]
[Tue Apr 21 22:58:50.244575 2026] [:error] [pid 53978:tid 53986] [client 172.213.216.244:9716] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeeQqp1ivsR4hcOSQbZDzwAAAoY"]
[Tue Apr 21 22:58:50.856880 2026] [:error] [pid 53978:tid 53992] [client 172.213.216.244:62650] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeeQqp1ivsR4hcOSQbZD0wAAAow"]
[Tue Apr 21 22:58:51.375933 2026] [:error] [pid 4777:tid 4797] [client 172.213.216.244:52762] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeeQq6xXur6bykKyLZS4VgAAAQk"]
[Tue Apr 21 22:58:52.479521 2026] [:error] [pid 53978:tid 53990] [client 172.213.216.244:52758] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeeQrJ1ivsR4hcOSQbZD4AAAAoo"]
[Tue Apr 21 22:58:53.771669 2026] [:error] [pid 53731:tid 53746] [client 172.213.216.244:9669] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeeQrV2I9THUR-bRVGyWkwAAAgs"]
[Tue Apr 21 22:58:54.353089 2026] [:error] [pid 53731:tid 53754] [client 172.213.216.244:9826] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeeQrl2I9THUR-bRVGyWlwAAAhI"]
[Tue Apr 21 22:58:55.500335 2026] [:error] [pid 35322:tid 35377] [client 172.213.216.244:52785] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aeeQr6PoAfV40BTfVKzkfAAAAJQ"]
[Tue Apr 21 22:58:56.390773 2026] [:error] [pid 35320:tid 35333] [client 172.213.216.244:52021] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aeeQsIJW6fdXWO6agMEFWwAAAAM"]
[Tue Apr 21 22:58:57.498176 2026] [:error] [pid 53731:tid 53742] [client 172.213.216.244:9686] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aeeQsV2I9THUR-bRVGyWowAAAgc"]
[Tue Apr 21 22:58:58.901406 2026] [:error] [pid 35321:tid 35404] [client 172.213.216.244:52779] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aeeQsjeHLhVUuu8cVXz_cgAAAFQ"]
[Tue Apr 21 22:58:59.740276 2026] [:error] [pid 35321:tid 35399] [client 172.213.216.244:9844] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aeeQszeHLhVUuu8cVXz_eQAAAE8"]
[Tue Apr 21 22:59:00.806682 2026] [:error] [pid 53731:tid 53760] [client 172.213.216.244:9725] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "aeeQtF2I9THUR-bRVGyWpwAAAhg"]
[Tue Apr 21 22:59:02.111074 2026] [:error] [pid 35321:tid 35389] [client 172.213.216.244:51646] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "aeeQtjeHLhVUuu8cVXz_igAAAEU"]
[Tue Apr 21 22:59:02.833516 2026] [:error] [pid 4823:tid 4861] [client 172.213.216.244:9809] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "aeeQtvc8mke3PfHqsxENdAAAAYg"]
[Tue Apr 21 22:59:03.756790 2026] [:error] [pid 53978:tid 53995] [client 172.213.216.244:9800] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/900.php"] [unique_id "aeeQt51ivsR4hcOSQbZEBwAAAo8"]
[Tue Apr 21 22:59:04.701138 2026] [:error] [pid 53731:tid 53758] [client 172.213.216.244:9680] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeQuF2I9THUR-bRVGyWrwAAAhY"]
[Tue Apr 21 22:59:06.071008 2026] [:error] [pid 53731:tid 53754] [client 172.213.216.244:52746] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeQul2I9THUR-bRVGyWtQAAAhI"]
[Tue Apr 21 22:59:07.136755 2026] [:error] [pid 53731:tid 53753] [client 172.213.216.244:59619] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeQu12I9THUR-bRVGyWuAAAAhE"]
[Tue Apr 21 22:59:07.704297 2026] [:error] [pid 53731:tid 53752] [client 172.213.216.244:9724] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeQu12I9THUR-bRVGyWugAAAhA"]
[Tue Apr 21 22:59:08.852020 2026] [:error] [pid 4777:tid 4794] [client 172.213.216.244:9670] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jk.php"] [unique_id "aeeQvKxXur6bykKyLZS4XwAAAQY"]
[Tue Apr 21 22:59:09.790821 2026] [:error] [pid 4777:tid 4810] [client 172.213.216.244:52013] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jk.php"] [unique_id "aeeQvaxXur6bykKyLZS4YQAAARY"]
[Tue Apr 21 22:59:10.550502 2026] [:error] [pid 53832:tid 53841] [client 172.213.216.244:9801] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jk.php"] [unique_id "aeeQvtzkuxsE_OhM9UJ__wAAAkY"]
[Tue Apr 21 22:59:11.290851 2026] [:error] [pid 53731:tid 53747] [client 172.213.216.244:51610] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jk.php"] [unique_id "aeeQv12I9THUR-bRVGyWvwAAAgw"]
[Tue Apr 21 22:59:31.982283 2026] [proxy_fcgi:error] [pid 35320:tid 35341] [client 172.213.216.244:52009] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:59:52.163530 2026] [proxy_fcgi:error] [pid 4823:tid 4853] [client 172.213.216.244:51645] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 22:59:58.957350 2026] [proxy_fcgi:error] [pid 53832:tid 53840] [client 172.213.216.244:9401] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 23:00:14.368829 2026] [proxy_fcgi:error] [pid 35320:tid 35350] [client 172.213.216.244:9679] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 23:00:15.342576 2026] [proxy_fcgi:error] [pid 35321:tid 35388] [client 172.213.216.244:59068] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 23:00:20.890704 2026] [:error] [pid 53731:tid 53747] [client 172.213.216.244:52783] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aeeRBF2I9THUR-bRVGyXegAAAgw"]
[Tue Apr 21 23:00:21.437221 2026] [:error] [pid 35321:tid 35405] [client 172.213.216.244:51594] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aeeRBTeHLhVUuu8cVXwAtwAAAFU"]
[Tue Apr 21 23:00:21.962576 2026] [:error] [pid 53978:tid 54003] [client 172.213.216.244:52030] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aeeRBZ1ivsR4hcOSQbZE8wAAApc"]
[Tue Apr 21 23:00:22.701581 2026] [:error] [pid 35321:tid 35393] [client 172.213.216.244:59646] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "aeeRBjeHLhVUuu8cVXwAvgAAAEk"]
[Tue Apr 21 23:00:23.283756 2026] [:error] [pid 35415:tid 35429] [client 172.213.216.244:51630] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboute.php"] [unique_id "aeeRB0iqDinI4_22zzh_WAAAAMI"]
[Tue Apr 21 23:00:23.783731 2026] [:error] [pid 53978:tid 53981] [client 172.213.216.244:51632] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboute.php"] [unique_id "aeeRB51ivsR4hcOSQbZE_AAAAoE"]
[Tue Apr 21 23:00:24.277858 2026] [:error] [pid 53731:tid 53735] [client 172.213.216.244:52790] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboute.php"] [unique_id "aeeRCF2I9THUR-bRVGyXgQAAAgA"]
[Tue Apr 21 23:00:24.880597 2026] [:error] [pid 35321:tid 35392] [client 172.213.216.244:59624] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboute.php"] [unique_id "aeeRCDeHLhVUuu8cVXwAwQAAAEg"]
[Tue Apr 21 23:00:25.960999 2026] [:error] [pid 35321:tid 35389] [client 172.213.216.244:59585] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "aeeRCTeHLhVUuu8cVXwAywAAAEU"]
[Tue Apr 21 23:00:27.913427 2026] [:error] [pid 54080:tid 54093] [client 172.213.216.244:52776] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "aeeRC4zEbQHHxtmWbabXGwAAAss"]
[Tue Apr 21 23:00:28.410488 2026] [:error] [pid 53731:tid 53746] [client 172.213.216.244:52028] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "aeeRDF2I9THUR-bRVGyXiAAAAgs"]
[Tue Apr 21 23:00:28.919592 2026] [:error] [pid 35322:tid 35361] [client 172.213.216.244:9804] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws82.php"] [unique_id "aeeRDKPoAfV40BTfVKzkngAAAIQ"]
[Tue Apr 21 23:00:29.416118 2026] [:error] [pid 35320:tid 35332] [client 172.213.216.244:52736] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aeeRDYJW6fdXWO6agMEGcwAAAAI"]
[Tue Apr 21 23:00:30.187124 2026] [:error] [pid 53832:tid 53838] [client 172.213.216.244:51619] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aeeRDtzkuxsE_OhM9UKAPgAAAkM"]
[Tue Apr 21 23:00:30.750738 2026] [:error] [pid 4777:tid 4792] [client 172.213.216.244:51993] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aeeRDqxXur6bykKyLZS4qAAAAQQ"]
[Tue Apr 21 23:00:31.497536 2026] [:error] [pid 54080:tid 54090] [client 172.213.216.244:52744] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "aeeRD4zEbQHHxtmWbabXIwAAAsg"]
[Tue Apr 21 23:00:31.987170 2026] [:error] [pid 35322:tid 35358] [client 172.213.216.244:51601] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeeRD6PoAfV40BTfVKzknwAAAIE"]
[Tue Apr 21 23:00:32.531985 2026] [:error] [pid 35320:tid 35346] [client 172.213.216.244:59639] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeeREIJW6fdXWO6agMEGgAAAABA"]
[Tue Apr 21 23:00:33.102831 2026] [:error] [pid 53978:tid 54003] [client 172.213.216.244:52788] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeeREZ1ivsR4hcOSQbZFCwAAApc"]
[Tue Apr 21 23:00:33.853668 2026] [:error] [pid 4823:tid 4860] [client 172.213.216.244:59595] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeeREfc8mke3PfHqsxENrgAAAYc"]
[Tue Apr 21 23:00:34.449781 2026] [:error] [pid 4823:tid 4876] [client 172.213.216.244:59600] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aeeREvc8mke3PfHqsxENrwAAAZc"]
[Tue Apr 21 23:00:35.477021 2026] [:error] [pid 4823:tid 4859] [client 172.213.216.244:9838] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aeeRE_c8mke3PfHqsxENsAAAAYY"]
[Tue Apr 21 23:00:36.633897 2026] [:error] [pid 35320:tid 35342] [client 172.213.216.244:9367] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aeeRFIJW6fdXWO6agMEGhAAAAAw"]
[Tue Apr 21 23:00:38.227855 2026] [:error] [pid 53978:tid 53989] [client 172.213.216.244:9802] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "aeeRFp1ivsR4hcOSQbZFKgAAAok"]
[Tue Apr 21 23:00:41.354513 2026] [:error] [pid 53978:tid 53999] [client 172.213.216.244:9700] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeeRGZ1ivsR4hcOSQbZFOwAAApM"]
[Tue Apr 21 23:00:43.157804 2026] [:error] [pid 35320:tid 35339] [client 172.213.216.244:9713] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeeRG4JW6fdXWO6agMEGkQAAAAk"]
[Tue Apr 21 23:00:46.324185 2026] [:error] [pid 4823:tid 4872] [client 172.213.216.244:9391] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeeRHvc8mke3PfHqsxEN0gAAAZM"]
[Tue Apr 21 23:00:47.937103 2026] [:error] [pid 53731:tid 53749] [client 172.213.216.244:59645] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeeRH12I9THUR-bRVGyXqgAAAg4"]
[Tue Apr 21 23:00:50.224341 2026] [:error] [pid 35320:tid 35340] [client 172.213.216.244:59630] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeeRIoJW6fdXWO6agMEGqAAAAAo"]
[Tue Apr 21 23:00:51.385951 2026] [:error] [pid 53731:tid 53747] [client 172.213.216.244:59586] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeeRI12I9THUR-bRVGyXtwAAAgw"]
[Tue Apr 21 23:00:52.151208 2026] [:error] [pid 53978:tid 53999] [client 172.213.216.244:51980] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeeRJJ1ivsR4hcOSQbZFWQAAApM"]
[Tue Apr 21 23:00:52.762508 2026] [:error] [pid 35322:tid 35380] [client 172.213.216.244:9396] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "aeeRJKPoAfV40BTfVKzkpAAAAJc"]
[Tue Apr 21 23:00:53.367659 2026] [:error] [pid 35321:tid 35406] [client 172.213.216.244:60664] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aeeRJTeHLhVUuu8cVXwA8wAAAFY"]
[Tue Apr 21 23:00:53.941587 2026] [:error] [pid 54080:tid 54103] [client 172.213.216.244:9666] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aeeRJYzEbQHHxtmWbabXNQAAAtU"]
[Tue Apr 21 23:00:54.461000 2026] [:error] [pid 4777:tid 4806] [client 172.213.216.244:62624] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aeeRJqxXur6bykKyLZS4sQAAARI"]
[Tue Apr 21 23:00:54.951693 2026] [:error] [pid 35415:tid 35439] [client 172.213.216.244:9797] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aeeRJkiqDinI4_22zzh_YAAAAMw"]
[Tue Apr 21 23:00:55.486604 2026] [:error] [pid 53731:tid 53753] [client 172.213.216.244:9388] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mk.php"] [unique_id "aeeRJ12I9THUR-bRVGyXzwAAAhE"]
[Tue Apr 21 23:00:56.207110 2026] [:error] [pid 35321:tid 35391] [client 172.213.216.244:59627] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mk.php"] [unique_id "aeeRKDeHLhVUuu8cVXwA9QAAAEc"]
[Tue Apr 21 23:00:56.859809 2026] [:error] [pid 35321:tid 35388] [client 172.213.216.244:9798] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mk.php"] [unique_id "aeeRKDeHLhVUuu8cVXwA9wAAAEQ"]
[Tue Apr 21 23:00:57.434082 2026] [:error] [pid 35321:tid 35408] [client 172.213.216.244:51985] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mk.php"] [unique_id "aeeRKTeHLhVUuu8cVXwA-gAAAFg"]
[Tue Apr 21 23:00:57.951277 2026] [:error] [pid 4777:tid 4797] [client 172.213.216.244:9722] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeeRKaxXur6bykKyLZS4swAAAQk"]
[Tue Apr 21 23:00:58.635744 2026] [:error] [pid 53731:tid 53755] [client 172.213.216.244:9694] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeeRKl2I9THUR-bRVGyX1QAAAhM"]
[Tue Apr 21 23:00:59.266561 2026] [:error] [pid 35415:tid 35433] [client 172.213.216.244:52781] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeeRK0iqDinI4_22zzh_YQAAAMY"]
[Tue Apr 21 23:00:59.853784 2026] [:error] [pid 35321:tid 35404] [client 172.213.216.244:51605] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aeeRKzeHLhVUuu8cVXwBAQAAAFQ"]
[Tue Apr 21 23:01:00.486330 2026] [:error] [pid 53731:tid 53756] [client 172.213.216.244:59609] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aeeRLF2I9THUR-bRVGyX2wAAAhQ"]
[Tue Apr 21 23:01:01.023010 2026] [:error] [pid 54080:tid 54089] [client 172.213.216.244:52012] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aeeRLYzEbQHHxtmWbabXQQAAAsc"]
[Tue Apr 21 23:01:02.473335 2026] [:error] [pid 54080:tid 54086] [client 172.213.216.244:59616] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aeeRLozEbQHHxtmWbabXRwAAAsQ"]
[Tue Apr 21 23:01:03.303725 2026] [:error] [pid 35321:tid 35388] [client 172.213.216.244:9799] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aeeRLzeHLhVUuu8cVXwBCAAAAEQ"]
[Tue Apr 21 23:01:04.144202 2026] [:error] [pid 53832:tid 53847] [client 172.213.216.244:52009] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aeeRMNzkuxsE_OhM9UKAZAAAAkw"]
[Tue Apr 21 23:01:05.307745 2026] [:error] [pid 35322:tid 35367] [client 172.213.216.244:9817] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aeeRMaPoAfV40BTfVKzkqwAAAIo"]
[Tue Apr 21 23:01:06.962121 2026] [:error] [pid 54080:tid 54085] [client 172.213.216.244:52023] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aeeRMozEbQHHxtmWbabXTQAAAsM"]
[Tue Apr 21 23:01:08.087791 2026] [:error] [pid 53731:tid 53744] [client 172.213.216.244:51625] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aeeRNF2I9THUR-bRVGyX6QAAAgk"]
[Tue Apr 21 23:01:09.103692 2026] [:error] [pid 53978:tid 54004] [client 172.213.216.244:9815] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeeRNZ1ivsR4hcOSQbZFhAAAApg"]
[Tue Apr 21 23:01:09.864068 2026] [:error] [pid 35321:tid 35394] [client 172.213.216.244:51638] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeeRNTeHLhVUuu8cVXwBEAAAAEo"]
[Tue Apr 21 23:01:10.411698 2026] [:error] [pid 4823:tid 4870] [client 172.213.216.244:9824] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeeRNvc8mke3PfHqsxEN-AAAAZE"]
[Tue Apr 21 23:01:11.216212 2026] [:error] [pid 4823:tid 4864] [client 172.213.216.244:9385] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeeRN_c8mke3PfHqsxEN_AAAAYs"]
[Tue Apr 21 23:01:11.948349 2026] [:error] [pid 53978:tid 54000] [client 172.213.216.244:9405] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeeRN51ivsR4hcOSQbZFjAAAApQ"]
[Tue Apr 21 23:01:12.502032 2026] [:error] [pid 53832:tid 53857] [client 172.213.216.244:9810] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeeRONzkuxsE_OhM9UKAZwAAAlY"]
[Tue Apr 21 23:01:13.498762 2026] [:error] [pid 4823:tid 4870] [client 172.213.216.244:59643] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeeROfc8mke3PfHqsxEOCAAAAZE"]
[Tue Apr 21 23:01:14.325606 2026] [:error] [pid 53731:tid 53748] [client 172.213.216.244:59028] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeeROl2I9THUR-bRVGyX-AAAAg0"]
[Tue Apr 21 23:01:14.844499 2026] [:error] [pid 35322:tid 35370] [client 172.213.216.244:52008] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aeeROqPoAfV40BTfVKzkrgAAAI0"]
[Tue Apr 21 23:01:15.420007 2026] [:error] [pid 53832:tid 53845] [client 172.213.216.244:51611] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aeeRO9zkuxsE_OhM9UKAawAAAko"]
[Tue Apr 21 23:01:16.097503 2026] [:error] [pid 35320:tid 35350] [client 172.213.216.244:9683] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aeeRPIJW6fdXWO6agMEGuQAAABQ"]
[Tue Apr 21 23:01:16.616597 2026] [:error] [pid 35322:tid 35363] [client 172.213.216.244:62640] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aeeRPKPoAfV40BTfVKzkrwAAAIY"]
[Tue Apr 21 23:01:17.342321 2026] [:error] [pid 54080:tid 54082] [client 172.213.216.244:60654] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "aeeRPYzEbQHHxtmWbabXVQAAAsA"]
[Tue Apr 21 23:01:17.852595 2026] [:error] [pid 4777:tid 4797] [client 172.213.216.244:51590] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "aeeRPaxXur6bykKyLZS4wgAAAQk"]
[Tue Apr 21 23:01:39.389728 2026] [proxy_fcgi:error] [pid 4777:tid 4806] [client 172.213.216.244:9818] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 23:01:58.833786 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 172.213.216.244:9686] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 23:01:59.454338 2026] [proxy_fcgi:error] [pid 35320:tid 35354] [client 172.213.216.244:60622] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Tue Apr 21 23:58:09.264709 2026] [:error] [pid 35320:tid 35339] [client 35.202.210.177:57003] [client 35.202.210.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.210.177, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeeekYJW6fdXWO6agME4MQAAAAk"]
[Tue Apr 21 23:58:12.877922 2026] [:error] [pid 35320:tid 35354] [client 35.202.210.177:57003] [client 35.202.210.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeeelIJW6fdXWO6agME4RAAAABg"]
[Tue Apr 21 23:58:15.092557 2026] [:error] [pid 35320:tid 35347] [client 35.202.210.177:57003] [client 35.202.210.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.210.177, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeeel4JW6fdXWO6agME4TQAAABE"]
[Wed Apr 22 00:04:03.505705 2026] [:error] [pid 35320:tid 35331] [client 34.69.238.161:63689] [client 34.69.238.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.238.161, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeef84JW6fdXWO6agME-swAAAAE"]
[Wed Apr 22 00:04:09.331915 2026] [:error] [pid 35320:tid 35354] [client 34.69.238.161:63689] [client 34.69.238.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeef-YJW6fdXWO6agME-zQAAABg"]
[Wed Apr 22 00:04:11.706244 2026] [:error] [pid 35320:tid 35340] [client 34.69.238.161:63689] [client 34.69.238.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.238.161, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aeef-4JW6fdXWO6agME-1wAAAAo"]
[Wed Apr 22 00:52:35.860691 2026] [proxy_fcgi:error] [pid 53978:tid 53993] [client 103.4.122.14:42668] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:52:57.291953 2026] [proxy_fcgi:error] [pid 35321:tid 35404] [client 20.240.53.226:48131] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:53:03.841626 2026] [proxy_fcgi:error] [pid 53978:tid 53986] [client 20.240.53.226:48143] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:53:09.541295 2026] [proxy_fcgi:error] [pid 54080:tid 54085] [client 20.240.53.226:48161] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:53:23.186032 2026] [:error] [pid 53731:tid 53738] [client 20.240.53.226:48090] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sid3.php"] [unique_id "aeerg12I9THUR-bRVGzEdgAAAgM"]
[Wed Apr 22 00:53:24.461420 2026] [:error] [pid 35320:tid 35333] [client 20.240.53.226:48165] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sid3.php"] [unique_id "aeerhIJW6fdXWO6agMFe6gAAAAM"]
[Wed Apr 22 00:53:25.376479 2026] [:error] [pid 54080:tid 54090] [client 20.240.53.226:48072] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sid3.php"] [unique_id "aeerhYzEbQHHxtmWbabzegAAAsg"]
[Wed Apr 22 00:53:26.834465 2026] [:error] [pid 53731:tid 53754] [client 20.240.53.226:48075] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sid3.php"] [unique_id "aeerhl2I9THUR-bRVGzEeQAAAhI"]
[Wed Apr 22 00:53:28.344301 2026] [:error] [pid 53731:tid 53748] [client 20.240.53.226:48182] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aeeriF2I9THUR-bRVGzEfQAAAg0"]
[Wed Apr 22 00:53:31.449842 2026] [:error] [pid 35320:tid 35338] [client 20.240.53.226:48141] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aeeri4JW6fdXWO6agMFe-wAAAAg"]
[Wed Apr 22 00:53:33.015042 2026] [:error] [pid 35320:tid 35352] [client 20.240.53.226:48073] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aeerjYJW6fdXWO6agMFfAgAAABY"]
[Wed Apr 22 00:53:34.206327 2026] [:error] [pid 35321:tid 35408] [client 20.240.53.226:11215] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aeerjjeHLhVUuu8cVXw8IAAAAFg"]
[Wed Apr 22 00:53:35.530403 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:48081] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeerj4JW6fdXWO6agMFfCwAAAAc"]
[Wed Apr 22 00:53:36.251599 2026] [:error] [pid 35321:tid 35392] [client 20.240.53.226:48070] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeerkDeHLhVUuu8cVXw8JAAAAEg"]
[Wed Apr 22 00:53:37.759552 2026] [:error] [pid 35321:tid 35397] [client 20.240.53.226:48128] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeerkTeHLhVUuu8cVXw8JwAAAE0"]
[Wed Apr 22 00:53:39.954268 2026] [:error] [pid 54080:tid 54104] [client 20.240.53.226:48138] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aeerk4zEbQHHxtmWbabzggAAAtY"]
[Wed Apr 22 00:53:42.201760 2026] [:error] [pid 35321:tid 35398] [client 20.240.53.226:48152] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aeerljeHLhVUuu8cVXw8KgAAAE4"]
[Wed Apr 22 00:53:43.591918 2026] [:error] [pid 35320:tid 35331] [client 20.240.53.226:48077] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aeerl4JW6fdXWO6agMFfMgAAAAE"]
[Wed Apr 22 00:53:44.938215 2026] [:error] [pid 53978:tid 54002] [client 20.240.53.226:48177] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aeermJ1ivsR4hcOSQbZpTwAAApY"]
[Wed Apr 22 00:53:46.427310 2026] [:error] [pid 35320:tid 35334] [client 20.240.53.226:48065] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aeermoJW6fdXWO6agMFfPQAAAAQ"]
[Wed Apr 22 00:53:47.633692 2026] [:error] [pid 35321:tid 35401] [client 20.240.53.226:48161] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeermzeHLhVUuu8cVXw8MAAAAFE"]
[Wed Apr 22 00:53:48.358768 2026] [:error] [pid 35320:tid 35336] [client 20.240.53.226:48131] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeernIJW6fdXWO6agMFfRgAAAAY"]
[Wed Apr 22 00:53:49.258976 2026] [:error] [pid 35415:tid 35434] [client 20.240.53.226:48082] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeernUiqDinI4_22zziLWgAAAMc"]
[Wed Apr 22 00:53:50.548918 2026] [:error] [pid 54080:tid 54103] [client 20.240.53.226:48087] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeernozEbQHHxtmWbabzjAAAAtU"]
[Wed Apr 22 00:53:51.665348 2026] [:error] [pid 4777:tid 4798] [client 20.240.53.226:48171] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aeern6xXur6bykKyLZTHRgAAAQo"]
[Wed Apr 22 00:53:52.569653 2026] [:error] [pid 35321:tid 35391] [client 20.240.53.226:48119] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aeeroDeHLhVUuu8cVXw8OAAAAEc"]
[Wed Apr 22 00:53:53.964637 2026] [:error] [pid 53731:tid 53747] [client 20.240.53.226:48064] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aeeroV2I9THUR-bRVGzEjAAAAgw"]
[Wed Apr 22 00:53:55.109143 2026] [:error] [pid 4777:tid 4796] [client 20.240.53.226:11219] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aeero6xXur6bykKyLZTHSgAAAQg"]
[Wed Apr 22 00:53:56.950638 2026] [:error] [pid 53731:tid 53752] [client 20.240.53.226:48163] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aeerpF2I9THUR-bRVGzEkwAAAhA"]
[Wed Apr 22 00:53:58.364934 2026] [:error] [pid 53832:tid 53854] [client 20.240.53.226:48140] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aeerptzkuxsE_OhM9UKUqwAAAlM"]
[Wed Apr 22 00:53:59.361459 2026] [:error] [pid 4777:tid 4789] [client 20.240.53.226:48083] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aeerp6xXur6bykKyLZTHTgAAAQE"]
[Wed Apr 22 00:54:00.876039 2026] [:error] [pid 53832:tid 53845] [client 20.240.53.226:48089] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aeerqNzkuxsE_OhM9UKUrgAAAko"]
[Wed Apr 22 00:54:01.864261 2026] [:error] [pid 4823:tid 4860] [client 20.240.53.226:48129] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeerqfc8mke3PfHqsxEfGgAAAYc"]
[Wed Apr 22 00:54:02.757702 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:48101] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeerqoJW6fdXWO6agMFfUwAAAAc"]
[Wed Apr 22 00:54:03.921046 2026] [:error] [pid 53731:tid 53745] [client 20.240.53.226:48162] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeerq12I9THUR-bRVGzEnwAAAgo"]
[Wed Apr 22 00:54:05.439143 2026] [:error] [pid 35322:tid 35357] [client 20.240.53.226:48091] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeerraPoAfV40BTfVKzt4QAAAIA"]
[Wed Apr 22 00:54:07.236466 2026] [:error] [pid 53978:tid 53996] [client 20.240.53.226:11210] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeerr51ivsR4hcOSQbZpWQAAApA"]
[Wed Apr 22 00:54:09.842806 2026] [:error] [pid 35321:tid 35403] [client 20.240.53.226:48092] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeersTeHLhVUuu8cVXw8TgAAAFM"]
[Wed Apr 22 00:54:11.374471 2026] [:error] [pid 35321:tid 35402] [client 20.240.53.226:48190] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeerszeHLhVUuu8cVXw8UQAAAFI"]
[Wed Apr 22 00:54:12.472646 2026] [:error] [pid 54080:tid 54099] [client 20.240.53.226:48175] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "aeertIzEbQHHxtmWbabzqwAAAtE"]
[Wed Apr 22 00:54:13.742893 2026] [:error] [pid 4777:tid 4808] [client 20.240.53.226:11227] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aeertaxXur6bykKyLZTHWwAAARQ"]
[Wed Apr 22 00:54:15.216696 2026] [:error] [pid 53731:tid 53754] [client 20.240.53.226:11253] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aeert12I9THUR-bRVGzEpwAAAhI"]
[Wed Apr 22 00:54:16.743181 2026] [:error] [pid 4823:tid 4865] [client 20.240.53.226:48086] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aeeruPc8mke3PfHqsxEfJgAAAYw"]
[Wed Apr 22 00:54:18.423640 2026] [:error] [pid 4777:tid 4792] [client 20.240.53.226:48135] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aeeruqxXur6bykKyLZTHXgAAAQQ"]
[Wed Apr 22 00:54:19.485593 2026] [:error] [pid 35321:tid 35407] [client 20.240.53.226:48147] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aeeruzeHLhVUuu8cVXw8YAAAAFc"]
[Wed Apr 22 00:54:20.458657 2026] [:error] [pid 35321:tid 35389] [client 20.240.53.226:48154] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aeervDeHLhVUuu8cVXw8ZQAAAEU"]
[Wed Apr 22 00:54:44.177820 2026] [proxy_fcgi:error] [pid 35320:tid 35332] [client 20.240.53.226:48145] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:55:01.795653 2026] [proxy_fcgi:error] [pid 53978:tid 53990] [client 103.4.122.14:43292] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:55:04.799253 2026] [proxy_fcgi:error] [pid 54080:tid 54085] [client 20.240.53.226:48134] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:55:17.874223 2026] [:error] [pid 35321:tid 35395] [client 20.240.53.226:48174] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws66.php"] [unique_id "aeer9TeHLhVUuu8cVXw83AAAAEs"]
[Wed Apr 22 00:55:20.022829 2026] [:error] [pid 35320:tid 35344] [client 20.240.53.226:11241] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws66.php"] [unique_id "aeer-IJW6fdXWO6agMFf5gAAAA4"]
[Wed Apr 22 00:55:23.113347 2026] [:error] [pid 35321:tid 35386] [client 20.240.53.226:48172] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws66.php"] [unique_id "aeer-zeHLhVUuu8cVXw84AAAAEI"]
[Wed Apr 22 00:55:27.138193 2026] [:error] [pid 53978:tid 53980] [client 20.240.53.226:11240] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws66.php"] [unique_id "aeer_51ivsR4hcOSQbZprAAAAoA"]
[Wed Apr 22 00:55:29.758703 2026] [:error] [pid 35320:tid 35339] [client 20.240.53.226:48102] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file61.php"] [unique_id "aeesAYJW6fdXWO6agMFf9wAAAAk"]
[Wed Apr 22 00:55:30.630618 2026] [:error] [pid 53731:tid 53738] [client 20.240.53.226:48186] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file61.php"] [unique_id "aeesAl2I9THUR-bRVGzE-wAAAgM"]
[Wed Apr 22 00:55:34.415278 2026] [:error] [pid 4823:tid 4873] [client 20.240.53.226:48085] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file61.php"] [unique_id "aeesBvc8mke3PfHqsxEfOQAAAZQ"]
[Wed Apr 22 00:55:36.326335 2026] [:error] [pid 35321:tid 35406] [client 20.240.53.226:48181] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file61.php"] [unique_id "aeesCDeHLhVUuu8cVXw89AAAAFY"]
[Wed Apr 22 00:55:37.199450 2026] [:error] [pid 54080:tid 54105] [client 20.240.53.226:48080] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "aeesCYzEbQHHxtmWbabz7QAAAtc"]
[Wed Apr 22 00:55:38.764777 2026] [:error] [pid 53832:tid 53839] [client 20.240.53.226:48139] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "aeesCtzkuxsE_OhM9UKU1QAAAkQ"]
[Wed Apr 22 00:55:40.382059 2026] [:error] [pid 4823:tid 4855] [client 20.240.53.226:48108] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "aeesDPc8mke3PfHqsxEfPgAAAYI"]
[Wed Apr 22 00:55:43.377730 2026] [:error] [pid 53978:tid 54002] [client 20.240.53.226:48088] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "aeesD51ivsR4hcOSQbZp2wAAApY"]
[Wed Apr 22 00:55:45.318440 2026] [:error] [pid 35320:tid 35336] [client 20.240.53.226:48066] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aeesEYJW6fdXWO6agMFgFAAAAAY"]
[Wed Apr 22 00:55:47.541502 2026] [:error] [pid 53832:tid 53852] [client 20.240.53.226:48169] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aeesE9zkuxsE_OhM9UKU4QAAAlE"]
[Wed Apr 22 00:55:48.782910 2026] [:error] [pid 35320:tid 35349] [client 20.240.53.226:48125] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aeesFIJW6fdXWO6agMFgJQAAABM"]
[Wed Apr 22 00:55:50.455660 2026] [:error] [pid 35320:tid 35347] [client 20.240.53.226:48151] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aeesFoJW6fdXWO6agMFgLgAAABE"]
[Wed Apr 22 00:55:52.505089 2026] [:error] [pid 35321:tid 35405] [client 20.240.53.226:48142] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "aeesGDeHLhVUuu8cVXw9AQAAAFU"]
[Wed Apr 22 00:55:54.075210 2026] [:error] [pid 35321:tid 35390] [client 20.240.53.226:48067] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "aeesGjeHLhVUuu8cVXw9CgAAAEY"]
[Wed Apr 22 00:55:55.023962 2026] [:error] [pid 53832:tid 53844] [client 20.240.53.226:48103] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "aeesG9zkuxsE_OhM9UKU4gAAAkk"]
[Wed Apr 22 00:55:56.095594 2026] [:error] [pid 54080:tid 54091] [client 20.240.53.226:48155] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a5.php"] [unique_id "aeesHIzEbQHHxtmWbabz-gAAAsk"]
[Wed Apr 22 00:55:57.227333 2026] [:error] [pid 35321:tid 35408] [client 20.240.53.226:48111] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aeesHTeHLhVUuu8cVXw9HgAAAFg"]
[Wed Apr 22 00:55:59.134425 2026] [:error] [pid 35320:tid 35336] [client 20.240.53.226:48098] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aeesH4JW6fdXWO6agMFgQAAAAAY"]
[Wed Apr 22 00:56:00.178130 2026] [:error] [pid 35320:tid 35344] [client 20.240.53.226:48079] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aeesIIJW6fdXWO6agMFgQQAAAA4"]
[Wed Apr 22 00:56:02.640457 2026] [:error] [pid 53978:tid 54002] [client 20.240.53.226:48118] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cu.php"] [unique_id "aeesIp1ivsR4hcOSQbZp5wAAApY"]
[Wed Apr 22 00:56:05.120494 2026] [:error] [pid 35320:tid 35345] [client 20.240.53.226:48105] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "aeesJYJW6fdXWO6agMFgWwAAAA8"]
[Wed Apr 22 00:56:06.752611 2026] [:error] [pid 35320:tid 35338] [client 20.240.53.226:11226] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "aeesJoJW6fdXWO6agMFgYgAAAAg"]
[Wed Apr 22 00:56:08.598318 2026] [:error] [pid 35320:tid 35330] [client 20.240.53.226:48107] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "aeesKIJW6fdXWO6agMFgaAAAAAA"]
[Wed Apr 22 00:56:12.265799 2026] [:error] [pid 4777:tid 4790] [client 20.240.53.226:48168] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/amax.php"] [unique_id "aeesLKxXur6bykKyLZTHbwAAAQI"]
[Wed Apr 22 00:56:14.417908 2026] [:error] [pid 35321:tid 35406] [client 20.240.53.226:11261] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mh.php"] [unique_id "aeesLjeHLhVUuu8cVXw9MwAAAFY"]
[Wed Apr 22 00:56:37.937180 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 20.240.53.226:48079] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:56:56.494660 2026] [proxy_fcgi:error] [pid 35320:tid 35330] [client 20.240.53.226:48176] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:57:11.104585 2026] [proxy_fcgi:error] [pid 53731:tid 53759] [client 20.240.53.226:48137] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:57:11.713942 2026] [proxy_fcgi:error] [pid 4777:tid 4799] [client 20.240.53.226:48093] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:57:19.473995 2026] [proxy_fcgi:error] [pid 53731:tid 53756] [client 20.240.53.226:48093] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:57:25.233388 2026] [:error] [pid 35321:tid 35390] [client 20.240.53.226:48158] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeesdTeHLhVUuu8cVXw9hAAAAEY"]
[Wed Apr 22 00:57:27.230317 2026] [:error] [pid 35321:tid 35392] [client 20.240.53.226:11216] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeesdzeHLhVUuu8cVXw9iwAAAEg"]
[Wed Apr 22 00:57:28.574460 2026] [:error] [pid 35321:tid 35403] [client 20.240.53.226:48071] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeseDeHLhVUuu8cVXw9lAAAAFM"]
[Wed Apr 22 00:57:30.217835 2026] [:error] [pid 53731:tid 53737] [client 20.240.53.226:48191] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeesel2I9THUR-bRVGzF7QAAAgI"]
[Wed Apr 22 00:57:31.017673 2026] [:error] [pid 53978:tid 53995] [client 20.240.53.226:48121] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aeese51ivsR4hcOSQbZqWQAAAo8"]
[Wed Apr 22 00:57:31.965196 2026] [:error] [pid 53731:tid 53747] [client 20.240.53.226:48159] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aeese12I9THUR-bRVGzF7gAAAgw"]
[Wed Apr 22 00:57:33.226300 2026] [:error] [pid 4823:tid 4865] [client 20.240.53.226:11242] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aeesffc8mke3PfHqsxEfZAAAAYw"]
[Wed Apr 22 00:57:34.085850 2026] [:error] [pid 53731:tid 53741] [client 20.240.53.226:48096] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aeesfl2I9THUR-bRVGzF9gAAAgY"]
[Wed Apr 22 00:57:35.344944 2026] [:error] [pid 53731:tid 53747] [client 20.240.53.226:48069] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "aeesf12I9THUR-bRVGzGAAAAAgw"]
[Wed Apr 22 00:57:36.220072 2026] [:error] [pid 54080:tid 54087] [client 20.240.53.226:11202] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "aeesgIzEbQHHxtmWbab0VwAAAsU"]
[Wed Apr 22 00:57:37.036176 2026] [:error] [pid 54080:tid 54094] [client 20.240.53.226:48144] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "aeesgYzEbQHHxtmWbab0WQAAAsw"]
[Wed Apr 22 00:57:37.942087 2026] [:error] [pid 35320:tid 35352] [client 20.240.53.226:48074] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "aeesgYJW6fdXWO6agMFg8gAAABY"]
[Wed Apr 22 00:57:38.623581 2026] [:error] [pid 53978:tid 53983] [client 20.240.53.226:11243] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aeesgp1ivsR4hcOSQbZqbwAAAoM"]
[Wed Apr 22 00:57:39.532522 2026] [:error] [pid 4777:tid 4808] [client 20.240.53.226:48132] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aeesg6xXur6bykKyLZTHmQAAARQ"]
[Wed Apr 22 00:57:40.261460 2026] [:error] [pid 54080:tid 54086] [client 20.240.53.226:48189] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aeeshIzEbQHHxtmWbab0XgAAAsQ"]
[Wed Apr 22 00:57:41.141866 2026] [:error] [pid 4823:tid 4868] [client 20.240.53.226:48149] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aeeshfc8mke3PfHqsxEfZgAAAY8"]
[Wed Apr 22 00:57:42.082279 2026] [:error] [pid 53731:tid 53752] [client 20.240.53.226:11214] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aeeshl2I9THUR-bRVGzGCwAAAhA"]
[Wed Apr 22 00:57:42.964033 2026] [:error] [pid 53731:tid 53740] [client 20.240.53.226:48117] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aeeshl2I9THUR-bRVGzGDQAAAgU"]
[Wed Apr 22 00:57:43.740533 2026] [:error] [pid 35415:tid 35436] [client 20.240.53.226:11260] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aeesh0iqDinI4_22zziLnQAAAMk"]
[Wed Apr 22 00:57:44.766961 2026] [:error] [pid 35320:tid 35330] [client 20.240.53.226:48153] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mini.php"] [unique_id "aeesiIJW6fdXWO6agMFg-QAAAAA"]
[Wed Apr 22 00:57:46.457092 2026] [:error] [pid 54080:tid 54103] [client 20.240.53.226:11232] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aeesiozEbQHHxtmWbab0ZgAAAtU"]
[Wed Apr 22 00:57:47.466542 2026] [:error] [pid 4777:tid 4792] [client 20.240.53.226:48112] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aeesi6xXur6bykKyLZTHnwAAAQQ"]
[Wed Apr 22 00:57:48.627437 2026] [:error] [pid 35321:tid 35385] [client 20.240.53.226:48185] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aeesjDeHLhVUuu8cVXw9uwAAAEE"]
[Wed Apr 22 00:57:49.744777 2026] [:error] [pid 35320:tid 35349] [client 20.240.53.226:48133] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aeesjYJW6fdXWO6agMFg_AAAABM"]
[Wed Apr 22 00:57:50.527179 2026] [:error] [pid 54080:tid 54102] [client 20.240.53.226:48180] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mode.php"] [unique_id "aeesjozEbQHHxtmWbab0aQAAAtQ"]
[Wed Apr 22 00:57:53.548822 2026] [:error] [pid 53978:tid 53996] [client 20.240.53.226:11262] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mode.php"] [unique_id "aeeskZ1ivsR4hcOSQbZqiwAAApA"]
[Wed Apr 22 00:57:55.270092 2026] [:error] [pid 35321:tid 35403] [client 20.240.53.226:11221] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mode.php"] [unique_id "aeeskzeHLhVUuu8cVXw9xwAAAFM"]
[Wed Apr 22 00:57:56.416854 2026] [:error] [pid 54080:tid 54091] [client 20.240.53.226:48114] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mode.php"] [unique_id "aeeslIzEbQHHxtmWbab0bgAAAsk"]
[Wed Apr 22 00:57:58.678833 2026] [:error] [pid 4777:tid 4795] [client 20.240.53.226:11217] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aeeslqxXur6bykKyLZTHqgAAAQc"]
[Wed Apr 22 00:58:00.330146 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:11200] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aeesmIJW6fdXWO6agMFhFQAAAAc"]
[Wed Apr 22 00:58:01.198322 2026] [:error] [pid 4777:tid 4800] [client 20.240.53.226:48123] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aeesmaxXur6bykKyLZTHrgAAAQw"]
[Wed Apr 22 00:58:02.004183 2026] [:error] [pid 54080:tid 54098] [client 20.240.53.226:11137] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/1.php"] [unique_id "aeesmozEbQHHxtmWbab0cgAAAtA"]
[Wed Apr 22 00:58:02.908426 2026] [:error] [pid 54080:tid 54085] [client 20.240.53.226:48124] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-block.php"] [unique_id "aeesmozEbQHHxtmWbab0dAAAAsM"]
[Wed Apr 22 00:58:03.744285 2026] [:error] [pid 35320:tid 35353] [client 20.240.53.226:11138] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-block.php"] [unique_id "aeesm4JW6fdXWO6agMFhIAAAABc"]
[Wed Apr 22 00:58:04.980317 2026] [:error] [pid 54080:tid 54103] [client 20.240.53.226:11255] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-block.php"] [unique_id "aeesnIzEbQHHxtmWbab0dgAAAtU"]
[Wed Apr 22 00:58:06.472606 2026] [:error] [pid 35320:tid 35346] [client 20.240.53.226:11212] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-block.php"] [unique_id "aeesnoJW6fdXWO6agMFhKwAAABA"]
[Wed Apr 22 00:58:08.010816 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:48076] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "aeesoIJW6fdXWO6agMFhNgAAAAc"]
[Wed Apr 22 00:58:09.526487 2026] [:error] [pid 53978:tid 53993] [client 20.240.53.226:48176] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "aeesoZ1ivsR4hcOSQbZqpQAAAo0"]
[Wed Apr 22 00:58:12.322990 2026] [:error] [pid 53832:tid 53845] [client 20.240.53.226:48104] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "aeespNzkuxsE_OhM9UKVNAAAAko"]
[Wed Apr 22 00:58:13.627240 2026] [:error] [pid 53978:tid 53985] [client 20.240.53.226:11233] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws88.php"] [unique_id "aeespZ1ivsR4hcOSQbZqqwAAAoU"]
[Wed Apr 22 00:58:15.067590 2026] [:error] [pid 35321:tid 35386] [client 20.240.53.226:11195] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adoms.php"] [unique_id "aeespzeHLhVUuu8cVXw94gAAAEI"]
[Wed Apr 22 00:58:16.638520 2026] [:error] [pid 35320:tid 35331] [client 20.240.53.226:48090] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adoms.php"] [unique_id "aeesqIJW6fdXWO6agMFhUAAAAAE"]
[Wed Apr 22 00:58:18.118647 2026] [:error] [pid 35320:tid 35341] [client 20.240.53.226:48068] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adoms.php"] [unique_id "aeesqoJW6fdXWO6agMFhVwAAAAs"]
[Wed Apr 22 00:58:18.951685 2026] [:error] [pid 4777:tid 4802] [client 20.240.53.226:11224] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adoms.php"] [unique_id "aeesqqxXur6bykKyLZTHsAAAAQ4"]
[Wed Apr 22 00:58:20.259387 2026] [:error] [pid 35321:tid 35408] [client 20.240.53.226:11254] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugin-editor.php"] [unique_id "aeesrDeHLhVUuu8cVXw96QAAAFg"]
[Wed Apr 22 00:58:21.899768 2026] [:error] [pid 53832:tid 53846] [client 20.240.53.226:48179] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugin-editor.php"] [unique_id "aeesrdzkuxsE_OhM9UKVOgAAAks"]
[Wed Apr 22 00:58:48.081653 2026] [proxy_fcgi:error] [pid 4777:tid 4812] [client 20.240.53.226:48131] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:59:03.350521 2026] [proxy_fcgi:error] [pid 35320:tid 35346] [client 20.240.53.226:48095] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:59:07.886809 2026] [proxy_fcgi:error] [pid 53731:tid 53750] [client 20.240.53.226:48140] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:59:13.722372 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 20.240.53.226:48070] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:59:31.687481 2026] [proxy_fcgi:error] [pid 53731:tid 53735] [client 20.240.53.226:48148] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:59:35.654075 2026] [proxy_fcgi:error] [pid 35415:tid 35441] [client 103.4.122.14:44560] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 00:59:44.470065 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:11250] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mk.php"] [unique_id "aeetAIJW6fdXWO6agMFh5gAAAAc"]
[Wed Apr 22 00:59:46.855891 2026] [:error] [pid 35320:tid 35338] [client 20.240.53.226:48141] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mk.php"] [unique_id "aeetAoJW6fdXWO6agMFh9AAAAAg"]
[Wed Apr 22 00:59:49.322661 2026] [:error] [pid 53731:tid 53752] [client 20.240.53.226:11151] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mk.php"] [unique_id "aeetBV2I9THUR-bRVGzGxAAAAhA"]
[Wed Apr 22 00:59:51.546472 2026] [:error] [pid 4823:tid 4868] [client 20.240.53.226:48147] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mk.php"] [unique_id "aeetB_c8mke3PfHqsxEfgQAAAY8"]
[Wed Apr 22 00:59:53.189288 2026] [:error] [pid 53731:tid 53738] [client 20.240.53.226:48188] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "aeetCV2I9THUR-bRVGzG0AAAAgM"]
[Wed Apr 22 00:59:55.561509 2026] [:error] [pid 4777:tid 4802] [client 20.240.53.226:11162] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "aeetC6xXur6bykKyLZTH7QAAAQ4"]
[Wed Apr 22 00:59:57.390103 2026] [:error] [pid 54080:tid 54094] [client 20.240.53.226:48146] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "aeetDYzEbQHHxtmWbab0twAAAsw"]
[Wed Apr 22 00:59:58.657282 2026] [:error] [pid 53832:tid 53844] [client 20.240.53.226:48064] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "aeetDtzkuxsE_OhM9UKVYgAAAkk"]
[Wed Apr 22 01:00:00.045540 2026] [:error] [pid 35321:tid 35390] [client 20.240.53.226:48164] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "aeetEDeHLhVUuu8cVXw_KgAAAEY"]
[Wed Apr 22 01:00:00.868663 2026] [:error] [pid 53832:tid 53838] [client 20.240.53.226:48162] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "aeetENzkuxsE_OhM9UKVZwAAAkM"]
[Wed Apr 22 01:00:01.883394 2026] [:error] [pid 35320:tid 35349] [client 20.240.53.226:11239] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "aeetEYJW6fdXWO6agMFiGQAAABM"]
[Wed Apr 22 01:00:02.541416 2026] [:error] [pid 53832:tid 53849] [client 20.240.53.226:48084] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "aeetEtzkuxsE_OhM9UKVbAAAAk4"]
[Wed Apr 22 01:00:03.276413 2026] [:error] [pid 53832:tid 53845] [client 20.240.53.226:48087] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aeetE9zkuxsE_OhM9UKVbgAAAko"]
[Wed Apr 22 01:00:04.089801 2026] [:error] [pid 53978:tid 53994] [client 20.240.53.226:11228] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aeetFJ1ivsR4hcOSQbZrCwAAAo4"]
[Wed Apr 22 01:00:04.938706 2026] [:error] [pid 35322:tid 35365] [client 20.240.53.226:48167] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aeetFKPoAfV40BTfVKzuRQAAAIg"]
[Wed Apr 22 01:00:05.932550 2026] [:error] [pid 35321:tid 35400] [client 20.240.53.226:48078] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aeetFTeHLhVUuu8cVXw_MgAAAFA"]
[Wed Apr 22 01:00:07.166205 2026] [:error] [pid 35321:tid 35397] [client 20.240.53.226:48173] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rip.php"] [unique_id "aeetFzeHLhVUuu8cVXw_NQAAAE0"]
[Wed Apr 22 01:00:08.493720 2026] [:error] [pid 53832:tid 53841] [client 20.240.53.226:48070] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rip.php"] [unique_id "aeetGNzkuxsE_OhM9UKVcwAAAkY"]
[Wed Apr 22 01:00:09.646967 2026] [:error] [pid 53731:tid 53758] [client 20.240.53.226:48119] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rip.php"] [unique_id "aeetGV2I9THUR-bRVGzG6QAAAhY"]
[Wed Apr 22 01:00:10.684534 2026] [:error] [pid 53731:tid 53743] [client 20.240.53.226:11238] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rip.php"] [unique_id "aeetGl2I9THUR-bRVGzG7AAAAgg"]
[Wed Apr 22 01:00:11.372299 2026] [:error] [pid 4823:tid 4867] [client 20.240.53.226:48160] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeetG_c8mke3PfHqsxEfjgAAAY4"]
[Wed Apr 22 01:00:12.792081 2026] [:error] [pid 4823:tid 4856] [client 20.240.53.226:48083] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeetHPc8mke3PfHqsxEfjwAAAYM"]
[Wed Apr 22 01:00:13.654308 2026] [:error] [pid 53978:tid 53982] [client 20.240.53.226:48156] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeetHZ1ivsR4hcOSQbZrEwAAAoI"]
[Wed Apr 22 01:00:14.596983 2026] [:error] [pid 4777:tid 4810] [client 20.240.53.226:11072] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aeetHqxXur6bykKyLZTH8wAAARY"]
[Wed Apr 22 01:00:15.953328 2026] [:error] [pid 35322:tid 35363] [client 20.240.53.226:48183] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoo.php"] [unique_id "aeetH6PoAfV40BTfVKzuSAAAAIY"]
[Wed Apr 22 01:00:17.637364 2026] [:error] [pid 53832:tid 53846] [client 20.240.53.226:48170] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoo.php"] [unique_id "aeetIdzkuxsE_OhM9UKVeAAAAks"]
[Wed Apr 22 01:00:19.495080 2026] [:error] [pid 53832:tid 53836] [client 20.240.53.226:48128] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoo.php"] [unique_id "aeetI9zkuxsE_OhM9UKVegAAAkE"]
[Wed Apr 22 01:00:20.761590 2026] [:error] [pid 53731:tid 53746] [client 20.240.53.226:11203] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoo.php"] [unique_id "aeetJF2I9THUR-bRVGzG9QAAAgs"]
[Wed Apr 22 01:00:21.550575 2026] [:error] [pid 35320:tid 35353] [client 20.240.53.226:48089] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admlo.php"] [unique_id "aeetJYJW6fdXWO6agMFiXAAAABc"]
[Wed Apr 22 01:00:22.326146 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:48134] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admlo.php"] [unique_id "aeetJoJW6fdXWO6agMFiYQAAAAc"]
[Wed Apr 22 01:00:23.060473 2026] [:error] [pid 53731:tid 53760] [client 20.240.53.226:48081] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admlo.php"] [unique_id "aeetJ12I9THUR-bRVGzG-QAAAhg"]
[Wed Apr 22 01:00:23.878891 2026] [:error] [pid 53731:tid 53745] [client 20.240.53.226:48138] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admlo.php"] [unique_id "aeetJ12I9THUR-bRVGzG_AAAAgo"]
[Wed Apr 22 01:00:24.721278 2026] [:error] [pid 53731:tid 53737] [client 20.240.53.226:48130] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aeetKF2I9THUR-bRVGzHAAAAAgI"]
[Wed Apr 22 01:00:25.714592 2026] [:error] [pid 35320:tid 35343] [client 20.240.53.226:48126] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aeetKYJW6fdXWO6agMFibQAAAA0"]
[Wed Apr 22 01:00:27.981956 2026] [:error] [pid 53731:tid 53745] [client 20.240.53.226:48101] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aeetK12I9THUR-bRVGzHBgAAAgo"]
[Wed Apr 22 01:00:29.218093 2026] [:error] [pid 53978:tid 54000] [client 20.240.53.226:11236] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aeetLZ1ivsR4hcOSQbZrMwAAApQ"]
[Wed Apr 22 01:00:30.271958 2026] [:error] [pid 35321:tid 35389] [client 20.240.53.226:11181] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aeetLjeHLhVUuu8cVXw_TQAAAEU"]
[Wed Apr 22 01:00:31.680018 2026] [:error] [pid 35321:tid 35406] [client 20.240.53.226:11240] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aeetLzeHLhVUuu8cVXw_UgAAAFY"]
[Wed Apr 22 01:00:33.194920 2026] [:error] [pid 35321:tid 35385] [client 20.240.53.226:48092] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aeetMTeHLhVUuu8cVXw_WwAAAEE"]
[Wed Apr 22 01:00:35.542466 2026] [:error] [pid 35320:tid 35338] [client 20.240.53.226:48165] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aeetM4JW6fdXWO6agMFikQAAAAg"]
[Wed Apr 22 01:00:38.588005 2026] [:error] [pid 35321:tid 35395] [client 20.240.53.226:11213] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "aeetNjeHLhVUuu8cVXw_YQAAAEs"]
[Wed Apr 22 01:01:01.805630 2026] [proxy_fcgi:error] [pid 35320:tid 35336] [client 20.240.53.226:48084] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 01:02:13.744506 2026] [proxy_fcgi:error] [pid 54080:tid 54103] [client 103.4.122.14:45280] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 01:06:28.263637 2026] [proxy_fcgi:error] [pid 35321:tid 35402] [client 45.86.202.239:53099] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 01:06:41.073809 2026] [autoindex:error] [pid 35321:tid 35387] [client 45.86.202.231:34911] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:06:45.407437 2026] [autoindex:error] [pid 35321:tid 35395] [client 45.86.202.231:34911] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:06:57.224023 2026] [proxy_fcgi:error] [pid 35321:tid 35396] [client 216.73.217.92:58745] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 01:06:57.346141 2026] [autoindex:error] [pid 35321:tid 35388] [client 45.86.202.231:34911] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:06:59.563052 2026] [autoindex:error] [pid 35321:tid 35398] [client 45.86.202.231:34911] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:06.164944 2026] [autoindex:error] [pid 35321:tid 35401] [client 45.86.202.231:34911] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:06.466894 2026] [autoindex:error] [pid 35321:tid 35403] [client 45.86.202.231:34911] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:06.756319 2026] [autoindex:error] [pid 35321:tid 35398] [client 45.86.202.231:34911] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:07.378272 2026] [proxy_fcgi:error] [pid 35321:tid 35389] [client 45.86.202.231:34911] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 01:07:10.259756 2026] [autoindex:error] [pid 53731:tid 53744] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:10.588757 2026] [autoindex:error] [pid 53731:tid 53752] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:12.827643 2026] [autoindex:error] [pid 53731:tid 53740] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:13.177518 2026] [autoindex:error] [pid 53731:tid 53758] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:13.490129 2026] [autoindex:error] [pid 53731:tid 53754] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:14.110612 2026] [autoindex:error] [pid 53731:tid 53742] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:14.402543 2026] [autoindex:error] [pid 53731:tid 53737] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:14.730489 2026] [autoindex:error] [pid 53731:tid 53756] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:20.342801 2026] [autoindex:error] [pid 53731:tid 53750] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:20.632440 2026] [autoindex:error] [pid 53731:tid 53748] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:21.255669 2026] [autoindex:error] [pid 53731:tid 53736] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:21.572669 2026] [autoindex:error] [pid 53731:tid 53752] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:23.800855 2026] [autoindex:error] [pid 53731:tid 53749] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:24.112044 2026] [autoindex:error] [pid 53731:tid 53754] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:30.207508 2026] [autoindex:error] [pid 53731:tid 53736] [client 45.86.202.239:52845] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 01:07:32.699070 2026] [proxy_fcgi:error] [pid 53731:tid 53754] [client 45.86.202.239:52845] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 01:11:30.618353 2026] [proxy_fcgi:error] [pid 53832:tid 53854] [client 103.4.122.14:47618] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 02:03:26.997229 2026] [autoindex:error] [pid 53978:tid 54004] [client 62.171.170.26:62678] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Apr 22 02:29:33.169222 2026] [proxy_fcgi:error] [pid 4777:tid 4804] [client 103.4.122.14:35798] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140'
[Wed Apr 22 02:39:50.819810 2026] [:error] [pid 35320:tid 35333] [client 70.224.198.136:65396] [client 70.224.198.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.224.198.136, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aefEdoJW6fdXWO6agMGeOwAAAAM"]
[Wed Apr 22 02:40:01.907473 2026] [proxy_fcgi:error] [pid 35320:tid 35345] [client 70.224.198.136:52601] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 02:40:10.144846 2026] [:error] [pid 35320:tid 35339] [client 70.224.198.136:63400] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "aefEioJW6fdXWO6agMGeZAAAAAk"]
[Wed Apr 22 02:40:11.001725 2026] [:error] [pid 53832:tid 53856] [client 70.224.198.136:56048] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/db.sql"] [unique_id "aefEitzkuxsE_OhM9UKmIwAAAlU"]
[Wed Apr 22 02:40:11.815608 2026] [:error] [pid 35415:tid 35441] [client 70.224.198.136:59606] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/dump.sql"] [unique_id "aefEi0iqDinI4_22zziTTAAAAM4"]
[Wed Apr 22 02:40:12.613324 2026] [:error] [pid 53731:tid 53735] [client 70.224.198.136:53814] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/database.sql"] [unique_id "aefEjF2I9THUR-bRVGzpuAAAAgA"]
[Wed Apr 22 02:40:13.355360 2026] [:error] [pid 35320:tid 35354] [client 70.224.198.136:58324] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/backup.sql"] [unique_id "aefEjYJW6fdXWO6agMGecwAAABg"]
[Wed Apr 22 02:40:14.115536 2026] [:error] [pid 35320:tid 35330] [client 70.224.198.136:62948] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/config/db.sql"] [unique_id "aefEjoJW6fdXWO6agMGedwAAAAA"]
[Wed Apr 22 02:40:14.829649 2026] [:error] [pid 53731:tid 53747] [client 70.224.198.136:57887] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/sql/db.sql"] [unique_id "aefEjl2I9THUR-bRVGzpuQAAAgw"]
[Wed Apr 22 02:40:15.586571 2026] [:error] [pid 53731:tid 53752] [client 70.224.198.136:64276] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/data/dump.sql"] [unique_id "aefEj12I9THUR-bRVGzpugAAAhA"]
[Wed Apr 22 02:40:16.304775 2026] [:error] [pid 53978:tid 53981] [client 70.224.198.136:63649] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/backups/database.sql"] [unique_id "aefEkJ1ivsR4hcOSQbaDPQAAAoE"]
[Wed Apr 22 02:40:17.020037 2026] [:error] [pid 53731:tid 53744] [client 70.224.198.136:62111] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/mysql.sql"] [unique_id "aefEkV2I9THUR-bRVGzpvAAAAgk"]
[Wed Apr 22 02:40:17.778713 2026] [:error] [pid 35321:tid 35395] [client 70.224.198.136:50630] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.makifim.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.makifim.com.au"] [uri "/db_backup.sql"] [unique_id "aefEkTeHLhVUuu8cVXxtJAAAAEs"]
[Wed Apr 22 02:53:57.955452 2026] [:error] [pid 35415:tid 35433] [client 2.58.56.211:53122] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aefHxUiqDinI4_22zziT_gAAAMY"]
[Wed Apr 22 02:53:58.484158 2026] [:error] [pid 4777:tid 4805] [client 2.58.56.211:53513] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aefHxqxXur6bykKyLZTSsQAAARE"]
[Wed Apr 22 02:53:58.987318 2026] [:error] [pid 35321:tid 35396] [client 2.58.56.211:53932] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aefHxjeHLhVUuu8cVXxyCQAAAEw"]
[Wed Apr 22 02:54:02.033088 2026] [:error] [pid 54080:tid 54096] [client 2.58.56.211:52329] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aefHyozEbQHHxtmWbaYKOQAAAs4"]
[Wed Apr 22 10:55:00.014897 2026] [autoindex:error] [pid 31755:tid 31771] [client 20.197.44.96:64349] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Apr 22 20:57:52.413482 2026] [:error] [pid 6250:tid 6274] [client 8.213.218.53:55777] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aejF0A-iZeQkqmQVfj4PEQAAAFQ"]
[Wed Apr 22 20:57:53.227803 2026] [:error] [pid 6344:tid 6368] [client 8.213.218.53:55922] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "aejF0UDOTF-pkQnDeUnxmwAAABM"]
[Wed Apr 22 21:27:12.767681 2026] [:error] [pid 6384:tid 6406] [client 45.86.202.35:39587] [client 45.86.202.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aejMsD58M3t15ICeWHVQSAAAANM"]
[Wed Apr 22 21:27:16.862643 2026] [:error] [pid 9085:tid 9106] [client 45.86.202.15:23407] [client 45.86.202.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aejMtN-_-or9vQnlWnqFqAAAAVM"]
[Wed Apr 22 21:27:25.230165 2026] [:error] [pid 6251:tid 6304] [client 45.86.202.18:32709] [client 45.86.202.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aejMvSsFAzbyObL-SQ6FcQAAAJM"]
[Wed Apr 22 21:27:31.398681 2026] [:error] [pid 9085:tid 9100] [client 45.86.202.27:31585] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aejMw9-_-or9vQnlWnqF_AAAAU0"]
[Wed Apr 22 21:27:41.222488 2026] [:error] [pid 9085:tid 9111] [client 45.86.202.46:53737] [client 45.86.202.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aejMzd-_-or9vQnlWnqGGgAAAVg"]
[Wed Apr 22 21:27:43.630212 2026] [:error] [pid 9085:tid 9101] [client 45.86.202.19:56403] [client 45.86.202.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aejMz9-_-or9vQnlWnqGHQAAAU4"]
[Wed Apr 22 21:27:44.165637 2026] [:error] [pid 9085:tid 9100] [client 45.86.202.18:57469] [client 45.86.202.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aejM0N-_-or9vQnlWnqGIAAAAU0"]
[Wed Apr 22 21:27:44.704699 2026] [:error] [pid 9085:tid 9092] [client 45.86.202.36:22291] [client 45.86.202.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aejM0N-_-or9vQnlWnqGJgAAAUU"]
[Wed Apr 22 21:27:45.257420 2026] [:error] [pid 9085:tid 9108] [client 45.86.202.218:26165] [client 45.86.202.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aejM0d-_-or9vQnlWnqGKAAAAVU"]
[Wed Apr 22 21:27:45.813328 2026] [:error] [pid 9085:tid 9093] [client 45.86.202.49:48885] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aejM0d-_-or9vQnlWnqGKgAAAUY"]
[Wed Apr 22 21:27:48.259771 2026] [:error] [pid 9085:tid 9091] [client 45.86.202.42:57495] [client 45.86.202.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aejM1N-_-or9vQnlWnqGMgAAAUQ"]
[Wed Apr 22 21:27:50.930919 2026] [:error] [pid 6384:tid 6405] [client 45.86.202.41:20601] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "aejM1j58M3t15ICeWHVQewAAANI"]
[Wed Apr 22 21:27:55.179225 2026] [:error] [pid 6251:tid 6298] [client 45.86.202.29:64359] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aejM2ysFAzbyObL-SQ6FeQAAAI0"]
[Wed Apr 22 21:27:57.073737 2026] [:error] [pid 6344:tid 6358] [client 45.86.202.26:41691] [client 45.86.202.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aejM3UDOTF-pkQnDeUn7oAAAAAk"]
[Wed Apr 22 21:27:57.942405 2026] [proxy_fcgi:error] [pid 6344:tid 6349] [client 45.86.202.46:32831] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 21:27:58.500901 2026] [:error] [pid 6344:tid 6363] [client 45.86.202.49:48049] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aejM3kDOTF-pkQnDeUn7rAAAAA4"]
[Wed Apr 22 21:28:07.334305 2026] [:error] [pid 9085:tid 9092] [client 45.86.202.12:49313] [client 45.86.202.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aejM59-_-or9vQnlWnqGXAAAAUU"]
[Wed Apr 22 21:28:09.734110 2026] [:error] [pid 9085:tid 9100] [client 45.86.202.41:35357] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aejM6d-_-or9vQnlWnqGZAAAAU0"]
[Wed Apr 22 21:28:12.501269 2026] [:error] [pid 9085:tid 9097] [client 45.86.202.31:42931] [client 45.86.202.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aejM7N-_-or9vQnlWnqGbwAAAUo"]
[Wed Apr 22 21:28:14.978381 2026] [:error] [pid 23776:tid 23797] [client 45.86.202.48:39901] [client 45.86.202.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aejM7rRExf-1pAbSeJv-NgAAAZM"]
[Wed Apr 22 21:28:22.518662 2026] [:error] [pid 6384:tid 6393] [client 45.86.202.39:43591] [client 45.86.202.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aejM9j58M3t15ICeWHVQwQAAAMY"]
[Wed Apr 22 21:28:24.505304 2026] [:error] [pid 9085:tid 9106] [client 45.86.202.219:56979] [client 45.86.202.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aejM-N-_-or9vQnlWnqGyAAAAVM"]
[Wed Apr 22 21:28:27.012433 2026] [:error] [pid 9085:tid 9092] [client 45.86.202.4:39619] [client 45.86.202.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aejM-9-_-or9vQnlWnqG2gAAAUU"]
[Wed Apr 22 21:28:27.574040 2026] [:error] [pid 6384:tid 6391] [client 45.86.202.28:45557] [client 45.86.202.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aejM-z58M3t15ICeWHVQyAAAAMQ"]
[Wed Apr 22 21:28:28.123827 2026] [:error] [pid 6384:tid 6398] [client 45.86.202.8:45607] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aejM_D58M3t15ICeWHVQzAAAAMs"]
[Wed Apr 22 21:28:34.149586 2026] [:error] [pid 6384:tid 6404] [client 45.86.202.10:64801] [client 45.86.202.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aejNAj58M3t15ICeWHVQ1gAAANE"]
[Wed Apr 22 21:28:34.705300 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.8:40701] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aejNAkDOTF-pkQnDeUn76gAAAAI"]
[Wed Apr 22 21:28:35.275330 2026] [:error] [pid 6344:tid 6352] [client 45.86.202.219:40607] [client 45.86.202.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aejNA0DOTF-pkQnDeUn76wAAAAM"]
[Wed Apr 22 21:28:48.573183 2026] [:error] [pid 9085:tid 9096] [client 45.86.202.40:25359] [client 45.86.202.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aejNEN-_-or9vQnlWnqHLQAAAUk"]
[Wed Apr 22 21:28:52.727741 2026] [:error] [pid 9085:tid 9090] [client 45.86.202.37:56041] [client 45.86.202.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.37, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aejNFN-_-or9vQnlWnqHRQAAAUM"]
[Wed Apr 22 21:29:11.793809 2026] [:error] [pid 9085:tid 9110] [client 45.86.202.37:56041] [client 45.86.202.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aejNJ9-_-or9vQnlWnqHbAAAAVc"]
[Wed Apr 22 21:29:16.964330 2026] [:error] [pid 6250:tid 6261] [client 45.86.202.7:39223] [client 45.86.202.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.7, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aejNLA-iZeQkqmQVfj4XPgAAAEc"]
[Wed Apr 22 21:29:20.428697 2026] [:error] [pid 6250:tid 6274] [client 45.86.202.7:39223] [client 45.86.202.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "aejNMA-iZeQkqmQVfj4XSQAAAFQ"]
[Wed Apr 22 21:29:33.575759 2026] [:error] [pid 9085:tid 9103] [client 45.86.202.22:56445] [client 45.86.202.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aejNPd-_-or9vQnlWnqH9gAAAVA"]
[Wed Apr 22 21:29:45.760231 2026] [:error] [pid 23776:tid 23780] [client 45.86.202.24:46537] [client 45.86.202.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aejNSbRExf-1pAbSeJv_awAAAYI"]
[Wed Apr 22 21:29:50.230422 2026] [:error] [pid 6344:tid 6350] [client 45.86.202.37:41273] [client 45.86.202.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aejNTkDOTF-pkQnDeUn8ngAAAAE"]
[Wed Apr 22 21:29:54.928829 2026] [:error] [pid 23776:tid 23799] [client 45.86.202.45:35399] [client 45.86.202.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.45, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aejNUrRExf-1pAbSeJv_jAAAAZU"]
[Wed Apr 22 21:29:56.406838 2026] [:error] [pid 23776:tid 23797] [client 45.86.202.45:35399] [client 45.86.202.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aejNVLRExf-1pAbSeJv_jQAAAZM"]
[Wed Apr 22 21:30:03.770851 2026] [proxy_fcgi:error] [pid 6344:tid 6362] [client 45.86.202.2:33859] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Wed Apr 22 21:30:25.969326 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.7:43153] [client 45.86.202.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aejNcd-_-or9vQnlWnqJEQAAAUg"]
[Wed Apr 22 21:30:30.064938 2026] [:error] [pid 9085:tid 9088] [client 45.86.202.46:45671] [client 45.86.202.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.46, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aejNdt-_-or9vQnlWnqJJgAAAUE"]
[Wed Apr 22 21:30:36.903588 2026] [:error] [pid 9085:tid 9103] [client 45.86.202.46:45671] [client 45.86.202.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aejNfN-_-or9vQnlWnqJOgAAAVA"]
[Wed Apr 22 21:30:39.338657 2026] [:error] [pid 23776:tid 23790] [client 45.86.202.12:51189] [client 45.86.202.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aejNf7RExf-1pAbSeJv_tQAAAYw"]
[Wed Apr 22 21:30:43.265411 2026] [:error] [pid 6344:tid 6364] [client 45.86.202.49:37631] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aejNg0DOTF-pkQnDeUn84gAAAA8"]
[Wed Apr 22 21:30:49.420856 2026] [:error] [pid 9085:tid 9104] [client 45.86.202.10:31765] [client 45.86.202.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aejNid-_-or9vQnlWnqJcwAAAVE"]
[Wed Apr 22 21:30:50.042378 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.47:57035] [client 45.86.202.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aejNikDOTF-pkQnDeUn85gAAAAI"]
[Wed Apr 22 21:30:57.783998 2026] [:error] [pid 9085:tid 9101] [client 45.86.202.9:31987] [client 45.86.202.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aejNkd-_-or9vQnlWnqJlQAAAU4"]
[Wed Apr 22 21:30:58.621405 2026] [:error] [pid 6344:tid 6370] [client 45.86.202.41:53749] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aejNkkDOTF-pkQnDeUn9BgAAABU"]
[Wed Apr 22 21:31:04.304931 2026] [:error] [pid 6384:tid 6388] [client 45.86.202.33:32557] [client 45.86.202.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aejNmD58M3t15ICeWHVRpQAAAME"]
[Wed Apr 22 21:31:10.436361 2026] [:error] [pid 6344:tid 6366] [client 45.86.202.38:32911] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aejNnkDOTF-pkQnDeUn9SgAAABE"]
[Wed Apr 22 21:31:14.284178 2026] [:error] [pid 6384:tid 6397] [client 45.86.202.219:28267] [client 45.86.202.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "aejNoj58M3t15ICeWHVRrQAAAMo"]
[Wed Apr 22 21:31:19.755858 2026] [:error] [pid 6384:tid 6406] [client 45.86.202.28:21617] [client 45.86.202.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aejNpz58M3t15ICeWHVR0wAAANM"]
[Wed Apr 22 21:31:30.883774 2026] [:error] [pid 9085:tid 9094] [client 45.86.202.46:43377] [client 45.86.202.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aejNst-_-or9vQnlWnqKKwAAAUc"]
[Wed Apr 22 21:31:31.432989 2026] [:error] [pid 23776:tid 23801] [client 45.86.202.32:58485] [client 45.86.202.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aejNs7RExf-1pAbSeJv_-AAAAZc"]
[Wed Apr 22 21:31:32.001286 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.1:46535] [client 45.86.202.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aejNtLRExf-1pAbSeJv_-wAAAZA"]
[Wed Apr 22 21:31:32.636152 2026] [:error] [pid 6384:tid 6387] [client 45.86.202.38:58767] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aejNtD58M3t15ICeWHVR3AAAAMA"]
[Wed Apr 22 21:31:35.051739 2026] [:error] [pid 23776:tid 23781] [client 45.86.202.31:25777] [client 45.86.202.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aejNt7RExf-1pAbSeJsACQAAAYM"]
[Wed Apr 22 21:31:35.621812 2026] [:error] [pid 6384:tid 6401] [client 45.86.202.6:26113] [client 45.86.202.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aejNtz58M3t15ICeWHVR4QAAAM4"]
[Wed Apr 22 21:31:39.824868 2026] [:error] [pid 6384:tid 6393] [client 45.86.202.8:58325] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aejNuz58M3t15ICeWHVR7gAAAMY"]
[Wed Apr 22 21:31:40.424327 2026] [:error] [pid 6252:tid 6325] [client 45.86.202.21:42231] [client 45.86.202.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aejNvOtGYuiYb1nWBpRWbgAAAQ0"]
[Wed Apr 22 21:31:40.992037 2026] [:error] [pid 23776:tid 23802] [client 45.86.202.9:63099] [client 45.86.202.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aejNvLRExf-1pAbSeJsAFAAAAZg"]
[Wed Apr 22 21:31:41.563466 2026] [:error] [pid 6251:tid 6288] [client 45.86.202.34:30061] [client 45.86.202.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aejNvSsFAzbyObL-SQ6GCQAAAIM"]
[Wed Apr 22 21:31:42.453089 2026] [:error] [pid 23776:tid 23791] [client 45.86.202.6:33695] [client 45.86.202.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aejNvrRExf-1pAbSeJsAHQAAAY0"]
[Wed Apr 22 21:31:43.734953 2026] [:error] [pid 9085:tid 9104] [client 45.86.202.50:29483] [client 45.86.202.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aejNv9-_-or9vQnlWnqKbQAAAVE"]
[Wed Apr 22 21:31:50.830026 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.45:33521] [client 45.86.202.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aejNxt-_-or9vQnlWnqKiQAAAUg"]
[Wed Apr 22 21:32:03.187866 2026] [:error] [pid 23776:tid 23798] [client 45.86.202.21:25641] [client 45.86.202.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aejN07RExf-1pAbSeJsASgAAAZQ"]
[Wed Apr 22 21:32:06.181595 2026] [:error] [pid 9085:tid 9090] [client 45.86.202.32:56357] [client 45.86.202.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aejN1t-_-or9vQnlWnqKqgAAAUM"]
[Wed Apr 22 21:32:06.981675 2026] [:error] [pid 6252:tid 6318] [client 45.86.202.23:58125] [client 45.86.202.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aejN1utGYuiYb1nWBpRWeQAAAQY"]
[Wed Apr 22 21:32:12.759445 2026] [:error] [pid 6384:tid 6400] [client 45.86.202.7:23121] [client 45.86.202.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aejN3D58M3t15ICeWHVSPQAAAM0"]
[Wed Apr 22 21:32:17.471326 2026] [proxy_fcgi:error] [pid 6251:tid 6289] [client 45.86.202.39:20985] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 21:32:17.773027 2026] [proxy_fcgi:error] [pid 6251:tid 6303] [client 45.86.202.39:20985] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 21:32:18.098165 2026] [proxy_fcgi:error] [pid 6251:tid 6306] [client 45.86.202.39:20985] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 21:32:19.775474 2026] [:error] [pid 6251:tid 6295] [client 45.86.202.39:20985] [client 45.86.202.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aejN4ysFAzbyObL-SQ6GGgAAAIo"]
[Wed Apr 22 21:32:20.375071 2026] [:error] [pid 6252:tid 6333] [client 45.86.202.50:46173] [client 45.86.202.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aejN5OtGYuiYb1nWBpRWigAAARU"]
[Wed Apr 22 21:32:20.988651 2026] [:error] [pid 9085:tid 9101] [client 45.86.202.44:61485] [client 45.86.202.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aejN5N-_-or9vQnlWnqKvgAAAU4"]
[Wed Apr 22 21:32:21.568307 2026] [:error] [pid 9085:tid 9109] [client 45.86.202.6:60125] [client 45.86.202.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aejN5d-_-or9vQnlWnqKwQAAAVY"]
[Wed Apr 22 21:32:22.133721 2026] [:error] [pid 23776:tid 23801] [client 45.86.202.48:31125] [client 45.86.202.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aejN5rRExf-1pAbSeJsAVQAAAZc"]
[Wed Apr 22 21:32:22.734057 2026] [:error] [pid 6252:tid 6326] [client 45.86.202.41:56001] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aejN5utGYuiYb1nWBpRWjQAAAQ4"]
[Wed Apr 22 21:32:24.872503 2026] [:error] [pid 23776:tid 23798] [client 45.86.202.23:58581] [client 45.86.202.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aejN6LRExf-1pAbSeJsAWAAAAZQ"]
[Wed Apr 22 21:32:25.492465 2026] [:error] [pid 9085:tid 9096] [client 45.86.202.42:27547] [client 45.86.202.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aejN6d-_-or9vQnlWnqKzAAAAUk"]
[Wed Apr 22 21:32:26.236419 2026] [:error] [pid 6384:tid 6389] [client 45.86.202.33:53011] [client 45.86.202.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aejN6j58M3t15ICeWHVSmQAAAMI"]
[Wed Apr 22 21:32:26.792958 2026] [:error] [pid 6384:tid 6410] [client 45.86.202.5:52877] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aejN6j58M3t15ICeWHVSnwAAANc"]
[Wed Apr 22 21:32:29.439893 2026] [:error] [pid 9085:tid 9104] [client 45.86.202.3:39809] [client 45.86.202.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aejN7d-_-or9vQnlWnqK1AAAAVE"]
[Wed Apr 22 21:32:30.299461 2026] [:error] [pid 23776:tid 23797] [client 45.86.202.31:56159] [client 45.86.202.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aejN7rRExf-1pAbSeJsAWwAAAZM"]
[Wed Apr 22 21:32:43.108568 2026] [autoindex:error] [pid 6252:tid 6336] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:32:47.187270 2026] [autoindex:error] [pid 6252:tid 6327] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:32:58.406070 2026] [autoindex:error] [pid 6252:tid 6334] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:00.654912 2026] [autoindex:error] [pid 6252:tid 6313] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:06.859357 2026] [autoindex:error] [pid 6252:tid 6327] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:07.204677 2026] [autoindex:error] [pid 6252:tid 6329] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:07.726974 2026] [autoindex:error] [pid 6252:tid 6330] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:11.936381 2026] [autoindex:error] [pid 6252:tid 6323] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:12.247471 2026] [autoindex:error] [pid 6252:tid 6318] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:14.324141 2026] [autoindex:error] [pid 6252:tid 6332] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:14.641390 2026] [autoindex:error] [pid 6252:tid 6325] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:14.969163 2026] [autoindex:error] [pid 6252:tid 6317] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:15.530918 2026] [autoindex:error] [pid 6252:tid 6336] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:15.831377 2026] [autoindex:error] [pid 6252:tid 6335] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:16.128252 2026] [autoindex:error] [pid 6252:tid 6322] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:21.477985 2026] [autoindex:error] [pid 6252:tid 6324] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:21.805659 2026] [autoindex:error] [pid 6252:tid 6315] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:22.373387 2026] [autoindex:error] [pid 6252:tid 6320] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:22.656543 2026] [autoindex:error] [pid 6252:tid 6327] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:24.766007 2026] [autoindex:error] [pid 6252:tid 6328] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:25.048800 2026] [autoindex:error] [pid 6252:tid 6312] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:30.993933 2026] [autoindex:error] [pid 6252:tid 6336] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:34.974629 2026] [autoindex:error] [pid 6252:tid 6316] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:35.558411 2026] [autoindex:error] [pid 6252:tid 6315] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:40.857985 2026] [autoindex:error] [pid 6252:tid 6332] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:41.170034 2026] [autoindex:error] [pid 6252:tid 6325] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:49.305134 2026] [autoindex:error] [pid 6252:tid 6327] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:51.439466 2026] [autoindex:error] [pid 6252:tid 6319] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:53.585244 2026] [autoindex:error] [pid 6252:tid 6323] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:53.986804 2026] [autoindex:error] [pid 6252:tid 6332] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:54.341851 2026] [autoindex:error] [pid 6252:tid 6325] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:54.625336 2026] [autoindex:error] [pid 6252:tid 6312] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:33:57.016941 2026] [autoindex:error] [pid 6252:tid 6335] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:01.117711 2026] [autoindex:error] [pid 6252:tid 6324] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:01.396110 2026] [autoindex:error] [pid 6252:tid 6333] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:07.270721 2026] [autoindex:error] [pid 6252:tid 6327] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:09.494774 2026] [autoindex:error] [pid 6252:tid 6312] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:13.387810 2026] [autoindex:error] [pid 6252:tid 6324] [client 45.86.202.40:43495] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:17.412475 2026] [autoindex:error] [pid 6252:tid 6331] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:17.711810 2026] [autoindex:error] [pid 6252:tid 6323] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:18.000907 2026] [autoindex:error] [pid 6252:tid 6332] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:18.299543 2026] [autoindex:error] [pid 6252:tid 6325] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:18.590936 2026] [autoindex:error] [pid 6252:tid 6318] [client 45.86.202.40:43495] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:30.566095 2026] [autoindex:error] [pid 6384:tid 6396] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:30.869436 2026] [autoindex:error] [pid 6384:tid 6390] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:31.150431 2026] [autoindex:error] [pid 6384:tid 6387] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:32.837191 2026] [autoindex:error] [pid 6384:tid 6411] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:33.113835 2026] [autoindex:error] [pid 6384:tid 6404] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:44.600271 2026] [autoindex:error] [pid 6384:tid 6409] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:44.880779 2026] [autoindex:error] [pid 6384:tid 6391] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:45.218629 2026] [autoindex:error] [pid 6384:tid 6400] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:45.528264 2026] [autoindex:error] [pid 6384:tid 6408] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:45.811082 2026] [autoindex:error] [pid 6384:tid 6392] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:53.696840 2026] [autoindex:error] [pid 6384:tid 6405] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:59.533072 2026] [autoindex:error] [pid 6384:tid 6404] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:34:59.834258 2026] [autoindex:error] [pid 6384:tid 6392] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:02.252306 2026] [autoindex:error] [pid 6384:tid 6391] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:11.823907 2026] [autoindex:error] [pid 6384:tid 6408] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:12.529020 2026] [autoindex:error] [pid 6384:tid 6406] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:12.811338 2026] [autoindex:error] [pid 6384:tid 6387] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:20.442695 2026] [autoindex:error] [pid 6384:tid 6393] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:27.748983 2026] [autoindex:error] [pid 6384:tid 6396] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:46.695605 2026] [autoindex:error] [pid 6384:tid 6396] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:50.662432 2026] [autoindex:error] [pid 6384:tid 6395] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:50.942314 2026] [autoindex:error] [pid 6384:tid 6405] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:55.070472 2026] [autoindex:error] [pid 6384:tid 6395] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:57.135139 2026] [autoindex:error] [pid 6384:tid 6389] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:21.649443 2026] [autoindex:error] [pid 6384:tid 6389] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:25.658488 2026] [autoindex:error] [pid 6384:tid 6396] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:29.565579 2026] [autoindex:error] [pid 6384:tid 6393] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:33.551209 2026] [autoindex:error] [pid 6384:tid 6389] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:35.671125 2026] [autoindex:error] [pid 6384:tid 6402] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:35.950679 2026] [autoindex:error] [pid 6384:tid 6406] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:38.145267 2026] [autoindex:error] [pid 6384:tid 6397] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:38.424852 2026] [autoindex:error] [pid 6384:tid 6390] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:38.705786 2026] [autoindex:error] [pid 6384:tid 6391] [client 45.86.202.19:60631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:45.899831 2026] [autoindex:error] [pid 6250:tid 6257] [client 45.86.202.18:54757] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:36:49.722871 2026] [autoindex:error] [pid 6250:tid 6254] [client 45.86.202.18:54757] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:37:02.306820 2026] [autoindex:error] [pid 6250:tid 6278] [client 45.86.202.18:54757] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:37:02.630557 2026] [autoindex:error] [pid 6250:tid 6277] [client 45.86.202.18:54757] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:37:03.283282 2026] [autoindex:error] [pid 6250:tid 6265] [client 45.86.202.18:54757] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:37:05.482207 2026] [autoindex:error] [pid 6250:tid 6254] [client 45.86.202.18:54757] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:37:19.291539 2026] [autoindex:error] [pid 6250:tid 6270] [client 45.86.202.18:54757] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:37:28.829912 2026] [autoindex:error] [pid 6250:tid 6277] [client 45.86.202.18:54757] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 00:09:12.369548 2026] [proxy_fcgi:error] [pid 23776:tid 23787] [client 4.223.136.67:11336] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:09:20.683914 2026] [:error] [pid 9085:tid 9102] [client 68.218.165.136:28163] [client 68.218.165.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.136, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aejysN-_-or9vQnlWnr0SgAAAU8"]
[Thu Apr 23 00:09:20.718588 2026] [:error] [pid 9085:tid 9110] [client 68.218.165.136:28162] [client 68.218.165.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.165.136, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aejysN-_-or9vQnlWnr0SwAAAVc"]
[Thu Apr 23 00:09:22.818420 2026] [proxy_fcgi:error] [pid 6251:tid 6303] [client 68.218.165.136:28164] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918', referer: http://makifim.com.au/
[Thu Apr 23 00:09:39.068339 2026] [:error] [pid 6344:tid 6353] [client 4.223.136.67:11295] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aejyw0DOTF-pkQnDeUkk8wAAAAQ"]
[Thu Apr 23 00:09:39.685922 2026] [:error] [pid 6384:tid 6399] [client 4.223.136.67:11279] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aejywz58M3t15ICeWHWl9wAAAMw"]
[Thu Apr 23 00:09:40.752130 2026] [:error] [pid 6250:tid 6254] [client 4.223.136.67:11363] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aejyxA-iZeQkqmQVfj43-wAAAEA"]
[Thu Apr 23 00:09:41.685558 2026] [:error] [pid 9085:tid 9110] [client 4.223.136.67:11367] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "aejyxd-_-or9vQnlWnr0fwAAAVc"]
[Thu Apr 23 00:09:42.969947 2026] [:error] [pid 6384:tid 6408] [client 4.223.136.67:11361] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aejyxj58M3t15ICeWHWmAQAAANU"]
[Thu Apr 23 00:09:43.616209 2026] [:error] [pid 6384:tid 6388] [client 4.223.136.67:11344] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aejyxz58M3t15ICeWHWmAwAAAME"]
[Thu Apr 23 00:09:44.173568 2026] [:error] [pid 6250:tid 6271] [client 4.223.136.67:11291] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aejyyA-iZeQkqmQVfj44AAAAAFE"]
[Thu Apr 23 00:09:44.718615 2026] [:error] [pid 6344:tid 6370] [client 4.223.136.67:11285] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "aejyyEDOTF-pkQnDeUkk9gAAABU"]
[Thu Apr 23 00:09:45.282588 2026] [:error] [pid 6344:tid 6369] [client 4.223.136.67:11360] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aejyyUDOTF-pkQnDeUkk9wAAABQ"]
[Thu Apr 23 00:09:45.917980 2026] [:error] [pid 6344:tid 6359] [client 4.223.136.67:11388] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aejyyUDOTF-pkQnDeUkk-gAAAAo"]
[Thu Apr 23 00:09:46.683117 2026] [:error] [pid 6344:tid 6355] [client 4.223.136.67:11371] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aejyykDOTF-pkQnDeUkk_gAAAAY"]
[Thu Apr 23 00:09:47.402336 2026] [:error] [pid 6250:tid 6274] [client 4.223.136.67:11358] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "aejyyw-iZeQkqmQVfj44AwAAAFQ"]
[Thu Apr 23 00:09:48.252042 2026] [:error] [pid 6384:tid 6401] [client 4.223.136.67:11389] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aejyzD58M3t15ICeWHWmDwAAAM4"]
[Thu Apr 23 00:09:48.841004 2026] [:error] [pid 23776:tid 23797] [client 4.223.136.67:11299] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aejyzLRExf-1pAbSeJs7PAAAAZM"]
[Thu Apr 23 00:09:49.482833 2026] [:error] [pid 9085:tid 9088] [client 4.223.136.67:11271] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aejyzd-_-or9vQnlWnr0jQAAAUE"]
[Thu Apr 23 00:09:50.168524 2026] [:error] [pid 6384:tid 6410] [client 4.223.136.67:11284] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "aejyzj58M3t15ICeWHWmEQAAANc"]
[Thu Apr 23 00:09:50.906719 2026] [:error] [pid 6384:tid 6387] [client 4.223.136.67:11353] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-kikikoko.php"] [unique_id "aejyzj58M3t15ICeWHWmEgAAAMA"]
[Thu Apr 23 00:09:51.573626 2026] [:error] [pid 6384:tid 6392] [client 4.223.136.67:11356] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-kikikoko.php"] [unique_id "aejyzz58M3t15ICeWHWmFQAAAMU"]
[Thu Apr 23 00:09:52.272797 2026] [:error] [pid 6384:tid 6391] [client 4.223.136.67:11330] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-kikikoko.php"] [unique_id "aejy0D58M3t15ICeWHWmHQAAAMQ"]
[Thu Apr 23 00:09:52.893496 2026] [:error] [pid 6384:tid 6401] [client 4.223.136.67:11329] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file-kikikoko.php"] [unique_id "aejy0D58M3t15ICeWHWmJQAAAM4"]
[Thu Apr 23 00:09:53.708863 2026] [:error] [pid 6384:tid 6403] [client 4.223.136.67:11332] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aejy0T58M3t15ICeWHWmKwAAANA"]
[Thu Apr 23 00:09:54.450996 2026] [:error] [pid 9085:tid 9097] [client 4.223.136.67:11354] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aejy0t-_-or9vQnlWnr0mAAAAUo"]
[Thu Apr 23 00:09:55.075168 2026] [:error] [pid 9085:tid 9106] [client 4.223.136.67:11281] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aejy09-_-or9vQnlWnr0nAAAAVM"]
[Thu Apr 23 00:09:55.725291 2026] [:error] [pid 23776:tid 23791] [client 4.223.136.67:11352] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aejy07RExf-1pAbSeJs7RwAAAY0"]
[Thu Apr 23 00:09:56.319571 2026] [:error] [pid 6344:tid 6363] [client 4.223.136.67:11283] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ganja.php"] [unique_id "aejy1EDOTF-pkQnDeUklBwAAAA4"]
[Thu Apr 23 00:09:56.959805 2026] [:error] [pid 6250:tid 6256] [client 4.223.136.67:11372] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ganja.php"] [unique_id "aejy1A-iZeQkqmQVfj44BwAAAEI"]
[Thu Apr 23 00:09:57.863180 2026] [:error] [pid 6250:tid 6271] [client 4.223.136.67:11380] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ganja.php"] [unique_id "aejy1Q-iZeQkqmQVfj44CAAAAFE"]
[Thu Apr 23 00:09:58.633414 2026] [:error] [pid 6384:tid 6403] [client 4.223.136.67:8182] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ganja.php"] [unique_id "aejy1j58M3t15ICeWHWmPQAAANA"]
[Thu Apr 23 00:09:59.279880 2026] [:error] [pid 6384:tid 6405] [client 4.223.136.67:11272] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aejy1z58M3t15ICeWHWmRQAAANI"]
[Thu Apr 23 00:09:59.959637 2026] [:error] [pid 6384:tid 6410] [client 4.223.136.67:11385] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aejy1z58M3t15ICeWHWmTgAAANc"]
[Thu Apr 23 00:10:00.742542 2026] [:error] [pid 6250:tid 6265] [client 4.223.136.67:11386] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aejy2A-iZeQkqmQVfj44CgAAAEs"]
[Thu Apr 23 00:10:01.369177 2026] [:error] [pid 6250:tid 6267] [client 4.223.136.67:11265] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aejy2Q-iZeQkqmQVfj44DAAAAE0"]
[Thu Apr 23 00:10:02.159403 2026] [:error] [pid 9085:tid 9096] [client 4.223.136.67:11334] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad821.php"] [unique_id "aejy2t-_-or9vQnlWnr0tAAAAUk"]
[Thu Apr 23 00:10:02.804425 2026] [:error] [pid 23776:tid 23795] [client 4.223.136.67:11298] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad821.php"] [unique_id "aejy2rRExf-1pAbSeJs7TAAAAZE"]
[Thu Apr 23 00:10:03.748274 2026] [:error] [pid 23776:tid 23782] [client 4.223.136.67:8145] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad821.php"] [unique_id "aejy27RExf-1pAbSeJs7UAAAAYQ"]
[Thu Apr 23 00:10:04.768823 2026] [:error] [pid 6344:tid 6370] [client 4.223.136.67:11280] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad821.php"] [unique_id "aejy3EDOTF-pkQnDeUklDQAAABU"]
[Thu Apr 23 00:10:05.608350 2026] [:error] [pid 23776:tid 23781] [client 4.223.136.67:11269] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8210.php"] [unique_id "aejy3bRExf-1pAbSeJs7WAAAAYM"]
[Thu Apr 23 00:10:06.570297 2026] [:error] [pid 9085:tid 9110] [client 4.223.136.67:11274] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8210.php"] [unique_id "aejy3t-_-or9vQnlWnr0wgAAAVc"]
[Thu Apr 23 00:10:07.554310 2026] [:error] [pid 9085:tid 9101] [client 4.223.136.67:11305] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8210.php"] [unique_id "aejy39-_-or9vQnlWnr0yQAAAU4"]
[Thu Apr 23 00:10:08.525744 2026] [:error] [pid 6384:tid 6404] [client 4.223.136.67:11363] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sad8210.php"] [unique_id "aejy4D58M3t15ICeWHWmYQAAANE"]
[Thu Apr 23 00:10:09.693041 2026] [:error] [pid 6344:tid 6356] [client 4.223.136.67:11381] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejy4UDOTF-pkQnDeUklEgAAAAc"]
[Thu Apr 23 00:10:10.493614 2026] [:error] [pid 6384:tid 6409] [client 4.223.136.67:11345] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejy4j58M3t15ICeWHWmZQAAANY"]
[Thu Apr 23 00:10:11.181899 2026] [:error] [pid 9085:tid 9094] [client 4.223.136.67:11368] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejy49-_-or9vQnlWnr01wAAAUc"]
[Thu Apr 23 00:10:12.026042 2026] [:error] [pid 9085:tid 9088] [client 4.223.136.67:11384] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejy5N-_-or9vQnlWnr02wAAAUE"]
[Thu Apr 23 00:10:12.724407 2026] [:error] [pid 23776:tid 23786] [client 4.223.136.67:11390] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "aejy5LRExf-1pAbSeJs7YQAAAYg"]
[Thu Apr 23 00:10:13.489902 2026] [:error] [pid 23776:tid 23784] [client 4.223.136.67:11349] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "aejy5bRExf-1pAbSeJs7YwAAAYY"]
[Thu Apr 23 00:10:14.175404 2026] [:error] [pid 23776:tid 23796] [client 4.223.136.67:8129] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "aejy5rRExf-1pAbSeJs7ZgAAAZI"]
[Thu Apr 23 00:10:15.773655 2026] [:error] [pid 6344:tid 6364] [client 4.223.136.67:11278] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "aejy50DOTF-pkQnDeUklGAAAAA8"]
[Thu Apr 23 00:10:16.851114 2026] [:error] [pid 23776:tid 23801] [client 4.223.136.67:11328] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboute.php"] [unique_id "aejy6LRExf-1pAbSeJs7cwAAAZc"]
[Thu Apr 23 00:10:17.972170 2026] [:error] [pid 9085:tid 9098] [client 4.223.136.67:11359] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboute.php"] [unique_id "aejy6d-_-or9vQnlWnr06AAAAUs"]
[Thu Apr 23 00:10:19.027159 2026] [:error] [pid 9085:tid 9103] [client 4.223.136.67:11311] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboute.php"] [unique_id "aejy69-_-or9vQnlWnr08QAAAVA"]
[Thu Apr 23 00:10:19.839362 2026] [:error] [pid 9085:tid 9109] [client 4.223.136.67:8138] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aboute.php"] [unique_id "aejy69-_-or9vQnlWnr09AAAAVY"]
[Thu Apr 23 00:10:20.611005 2026] [:error] [pid 6344:tid 6362] [client 4.223.136.67:11293] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aejy7EDOTF-pkQnDeUklHgAAAA0"]
[Thu Apr 23 00:10:21.293339 2026] [:error] [pid 6384:tid 6399] [client 4.223.136.67:11313] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aejy7T58M3t15ICeWHWmcQAAAMw"]
[Thu Apr 23 00:10:21.909081 2026] [:error] [pid 6251:tid 6305] [client 4.223.136.67:11289] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aejy7SsFAzbyObL-SQ6dRgAAAJQ"]
[Thu Apr 23 00:10:22.755429 2026] [:error] [pid 6251:tid 6302] [client 4.223.136.67:11364] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aejy7isFAzbyObL-SQ6dSAAAAJE"]
[Thu Apr 23 00:10:23.628201 2026] [:error] [pid 6250:tid 6277] [client 4.223.136.67:11277] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "aejy7w-iZeQkqmQVfj44DwAAAFc"]
[Thu Apr 23 00:10:24.268649 2026] [:error] [pid 9085:tid 9098] [client 4.223.136.67:11346] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "aejy8N-_-or9vQnlWnr0_AAAAUs"]
[Thu Apr 23 00:10:24.860702 2026] [:error] [pid 6384:tid 6391] [client 4.223.136.67:11318] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "aejy8D58M3t15ICeWHWmegAAAMQ"]
[Thu Apr 23 00:10:25.564978 2026] [:error] [pid 6251:tid 6293] [client 4.223.136.67:11264] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wps.php"] [unique_id "aejy8SsFAzbyObL-SQ6dSQAAAIg"]
[Thu Apr 23 00:10:26.122976 2026] [:error] [pid 6252:tid 6334] [client 4.223.136.67:11273] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aejy8utGYuiYb1nWBpRxtQAAARY"]
[Thu Apr 23 00:10:26.710721 2026] [:error] [pid 6251:tid 6286] [client 4.223.136.67:11357] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aejy8isFAzbyObL-SQ6dTAAAAIE"]
[Thu Apr 23 00:10:27.355584 2026] [:error] [pid 6251:tid 6299] [client 4.223.136.67:11374] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aejy8ysFAzbyObL-SQ6dTgAAAI4"]
[Thu Apr 23 00:10:27.994189 2026] [:error] [pid 6344:tid 6370] [client 4.223.136.67:11337] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "aejy80DOTF-pkQnDeUklJAAAABU"]
[Thu Apr 23 00:10:28.555247 2026] [:error] [pid 6251:tid 6291] [client 4.223.136.67:11333] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aejy9CsFAzbyObL-SQ6dUQAAAIY"]
[Thu Apr 23 00:10:29.321196 2026] [:error] [pid 9085:tid 9097] [client 4.223.136.67:11343] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aejy9d-_-or9vQnlWnr1AwAAAUo"]
[Thu Apr 23 00:10:30.127106 2026] [:error] [pid 9085:tid 9095] [client 4.223.136.67:11342] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aejy9t-_-or9vQnlWnr1CAAAAUg"]
[Thu Apr 23 00:10:30.724362 2026] [:error] [pid 9085:tid 9092] [client 4.223.136.67:11301] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "aejy9t-_-or9vQnlWnr1CwAAAUU"]
[Thu Apr 23 00:10:31.987567 2026] [:error] [pid 6384:tid 6388] [client 4.223.136.67:11338] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aejy9z58M3t15ICeWHWmggAAAME"]
[Thu Apr 23 00:10:32.666829 2026] [:error] [pid 6384:tid 6391] [client 4.223.136.67:8150] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aejy-D58M3t15ICeWHWmhQAAAMQ"]
[Thu Apr 23 00:10:33.385437 2026] [:error] [pid 6250:tid 6278] [client 4.223.136.67:11325] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aejy-Q-iZeQkqmQVfj44IgAAAFg"]
[Thu Apr 23 00:10:34.207375 2026] [:error] [pid 6250:tid 6259] [client 4.223.136.67:11356] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "aejy-g-iZeQkqmQVfj44IwAAAEU"]
[Thu Apr 23 00:10:34.994510 2026] [:error] [pid 6252:tid 6322] [client 4.223.136.67:11341] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aejy-utGYuiYb1nWBpRxwwAAAQo"]
[Thu Apr 23 00:10:35.634443 2026] [:error] [pid 6344:tid 6371] [client 4.223.136.67:11340] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/link.php"] [unique_id "aejy-0DOTF-pkQnDeUklKQAAABY"]
[Thu Apr 23 00:10:57.391990 2026] [proxy_fcgi:error] [pid 6384:tid 6388] [client 4.223.136.67:11380] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:11:03.911748 2026] [:error] [pid 6252:tid 6315] [client 4.223.136.67:11276] [client 4.223.136.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "aejzF-tGYuiYb1nWBpRx3gAAAQM"]
[Thu Apr 23 00:11:13.491691 2026] [proxy_fcgi:error] [pid 9085:tid 9089] [client 4.223.136.67:11374] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:11:24.107972 2026] [proxy_fcgi:error] [pid 9085:tid 9101] [client 4.223.136.67:11364] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:11:41.345062 2026] [proxy_fcgi:error] [pid 23776:tid 23801] [client 4.223.136.67:11382] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:11:47.492608 2026] [:error] [pid 9085:tid 9087] [client 4.223.136.67:8078] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aejzQ9-_-or9vQnlWnr2XQAAAUA"]
[Thu Apr 23 00:11:48.244853 2026] [:error] [pid 6384:tid 6405] [client 4.223.136.67:11267] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aejzRD58M3t15ICeWHWm2QAAANI"]
[Thu Apr 23 00:11:49.820455 2026] [:error] [pid 9085:tid 9105] [client 4.223.136.67:11290] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aejzRd-_-or9vQnlWnr2ZAAAAVI"]
[Thu Apr 23 00:11:50.437024 2026] [:error] [pid 9085:tid 9108] [client 4.223.136.67:11391] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "aejzRt-_-or9vQnlWnr2aAAAAVU"]
[Thu Apr 23 00:11:51.070959 2026] [:error] [pid 6384:tid 6395] [client 4.223.136.67:8158] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "aejzRz58M3t15ICeWHWm2wAAAMg"]
[Thu Apr 23 00:11:51.667930 2026] [:error] [pid 6384:tid 6394] [client 4.223.136.67:11292] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "aejzRz58M3t15ICeWHWm3QAAAMc"]
[Thu Apr 23 00:11:52.258945 2026] [:error] [pid 9085:tid 9102] [client 4.223.136.67:8161] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "aejzSN-_-or9vQnlWnr2cAAAAU8"]
[Thu Apr 23 00:11:53.003359 2026] [:error] [pid 6384:tid 6403] [client 4.223.136.67:11314] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wglum1.php"] [unique_id "aejzST58M3t15ICeWHWm4AAAANA"]
[Thu Apr 23 00:11:53.905357 2026] [:error] [pid 6344:tid 6373] [client 4.223.136.67:11302] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "aejzSUDOTF-pkQnDeUklaQAAABg"]
[Thu Apr 23 00:11:54.539215 2026] [:error] [pid 6384:tid 6391] [client 4.223.136.67:8133] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "aejzSj58M3t15ICeWHWm4gAAAMQ"]
[Thu Apr 23 00:11:55.141979 2026] [:error] [pid 6250:tid 6268] [client 4.223.136.67:8171] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "aejzSw-iZeQkqmQVfj44YwAAAE4"]
[Thu Apr 23 00:11:55.793601 2026] [:error] [pid 6250:tid 6255] [client 4.223.136.67:11382] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "aejzSw-iZeQkqmQVfj44ZgAAAEE"]
[Thu Apr 23 00:11:56.572133 2026] [:error] [pid 9085:tid 9092] [client 4.223.136.67:11387] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "aejzTN-_-or9vQnlWnr2eAAAAUU"]
[Thu Apr 23 00:11:57.760802 2026] [:error] [pid 9085:tid 9098] [client 4.223.136.67:11288] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "aejzTd-_-or9vQnlWnr2fwAAAUs"]
[Thu Apr 23 00:11:59.279069 2026] [:error] [pid 6344:tid 6361] [client 4.223.136.67:8067] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "aejzT0DOTF-pkQnDeUklbgAAAAw"]
[Thu Apr 23 00:12:01.400172 2026] [:error] [pid 6252:tid 6315] [client 4.223.136.67:11308] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wgift1.php"] [unique_id "aejzUetGYuiYb1nWBpRyCgAAAQM"]
[Thu Apr 23 00:12:03.338617 2026] [:error] [pid 6344:tid 6364] [client 4.223.136.67:8160] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xynz.php"] [unique_id "aejzU0DOTF-pkQnDeUklcwAAAA8"]
[Thu Apr 23 00:12:06.998387 2026] [:error] [pid 6251:tid 6288] [client 4.223.136.67:8151] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xynz.php"] [unique_id "aejzVisFAzbyObL-SQ6diAAAAIM"]
[Thu Apr 23 00:12:08.877995 2026] [:error] [pid 9085:tid 9101] [client 4.223.136.67:8168] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xynz.php"] [unique_id "aejzWN-_-or9vQnlWnr2kgAAAU4"]
[Thu Apr 23 00:12:09.599134 2026] [:error] [pid 9085:tid 9107] [client 4.223.136.67:11312] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xynz.php"] [unique_id "aejzWd-_-or9vQnlWnr2lAAAAVQ"]
[Thu Apr 23 00:12:10.240641 2026] [:error] [pid 6344:tid 6365] [client 4.223.136.67:11317] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aejzWkDOTF-pkQnDeUkleQAAABA"]
[Thu Apr 23 00:12:11.089028 2026] [:error] [pid 6252:tid 6319] [client 4.223.136.67:8187] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aejzW-tGYuiYb1nWBpRyEQAAAQc"]
[Thu Apr 23 00:12:11.687013 2026] [:error] [pid 9085:tid 9090] [client 4.223.136.67:8093] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aejzW9-_-or9vQnlWnr2lwAAAUM"]
[Thu Apr 23 00:12:12.410628 2026] [:error] [pid 23776:tid 23801] [client 4.223.136.67:11275] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aejzXLRExf-1pAbSeJs8CQAAAZc"]
[Thu Apr 23 00:12:13.061618 2026] [:error] [pid 9085:tid 9097] [client 4.223.136.67:8084] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aejzXd-_-or9vQnlWnr2mgAAAUo"]
[Thu Apr 23 00:12:13.802369 2026] [:error] [pid 9085:tid 9105] [client 4.223.136.67:8092] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aejzXd-_-or9vQnlWnr2nQAAAVI"]
[Thu Apr 23 00:12:14.436781 2026] [:error] [pid 6252:tid 6313] [client 4.223.136.67:8134] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aejzXutGYuiYb1nWBpRyGwAAAQE"]
[Thu Apr 23 00:12:15.112906 2026] [:error] [pid 9085:tid 9110] [client 4.223.136.67:11369] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/press.php"] [unique_id "aejzX9-_-or9vQnlWnr2oQAAAVc"]
[Thu Apr 23 00:12:15.669814 2026] [:error] [pid 6250:tid 6260] [client 4.223.136.67:8072] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aejzXw-iZeQkqmQVfj44bQAAAEY"]
[Thu Apr 23 00:12:16.270584 2026] [:error] [pid 6344:tid 6366] [client 4.223.136.67:11316] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aejzYEDOTF-pkQnDeUklhgAAABE"]
[Thu Apr 23 00:12:16.838287 2026] [:error] [pid 9085:tid 9095] [client 4.223.136.67:11375] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aejzYN-_-or9vQnlWnr2qQAAAUg"]
[Thu Apr 23 00:12:17.570326 2026] [:error] [pid 9085:tid 9090] [client 4.223.136.67:11348] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "aejzYd-_-or9vQnlWnr2qwAAAUM"]
[Thu Apr 23 00:12:18.243965 2026] [:error] [pid 23776:tid 23793] [client 4.223.136.67:8173] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aejzYrRExf-1pAbSeJs8DQAAAY8"]
[Thu Apr 23 00:12:19.070915 2026] [:error] [pid 23776:tid 23781] [client 4.223.136.67:11300] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aejzY7RExf-1pAbSeJs8DwAAAYM"]
[Thu Apr 23 00:12:19.698178 2026] [:error] [pid 23776:tid 23778] [client 4.223.136.67:11279] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aejzY7RExf-1pAbSeJs8EQAAAYA"]
[Thu Apr 23 00:12:20.523150 2026] [:error] [pid 9085:tid 9087] [client 4.223.136.67:8131] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "aejzZN-_-or9vQnlWnr2uAAAAUA"]
[Thu Apr 23 00:12:21.192698 2026] [:error] [pid 6344:tid 6349] [client 4.223.136.67:8169] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "aejzZUDOTF-pkQnDeUkljQAAAAA"]
[Thu Apr 23 00:12:21.857524 2026] [:error] [pid 9085:tid 9107] [client 4.223.136.67:8132] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "aejzZd-_-or9vQnlWnr2uwAAAVQ"]
[Thu Apr 23 00:12:22.590179 2026] [:error] [pid 9085:tid 9096] [client 4.223.136.67:11294] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "aejzZt-_-or9vQnlWnr2vQAAAUk"]
[Thu Apr 23 00:12:23.371546 2026] [:error] [pid 6252:tid 6313] [client 4.223.136.67:11303] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "aejzZ-tGYuiYb1nWBpRyIQAAAQE"]
[Thu Apr 23 00:12:25.138752 2026] [:error] [pid 9085:tid 9102] [client 4.223.136.67:11355] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aejzad-_-or9vQnlWnr2xwAAAU8"]
[Thu Apr 23 00:12:28.100581 2026] [:error] [pid 6344:tid 6370] [client 4.223.136.67:8155] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aejzbEDOTF-pkQnDeUklqAAAABU"]
[Thu Apr 23 00:12:29.765668 2026] [:error] [pid 23776:tid 23798] [client 4.223.136.67:11350] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aejzbbRExf-1pAbSeJs8HwAAAZQ"]
[Thu Apr 23 00:12:31.482792 2026] [:error] [pid 23776:tid 23796] [client 4.223.136.67:8172] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aejzb7RExf-1pAbSeJs8JAAAAZI"]
[Thu Apr 23 00:12:32.607180 2026] [:error] [pid 9085:tid 9110] [client 4.223.136.67:11377] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/view.php"] [unique_id "aejzcN-_-or9vQnlWnr22wAAAVc"]
[Thu Apr 23 00:12:33.442938 2026] [:error] [pid 6344:tid 6372] [client 4.223.136.67:8154] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/view.php"] [unique_id "aejzcUDOTF-pkQnDeUklrwAAABc"]
[Thu Apr 23 00:12:34.186352 2026] [:error] [pid 9085:tid 9106] [client 4.223.136.67:8166] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/view.php"] [unique_id "aejzct-_-or9vQnlWnr23wAAAVM"]
[Thu Apr 23 00:12:34.796392 2026] [:error] [pid 6250:tid 6271] [client 4.223.136.67:11339] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/view.php"] [unique_id "aejzcg-iZeQkqmQVfj44fgAAAFE"]
[Thu Apr 23 00:12:35.525728 2026] [:error] [pid 6384:tid 6398] [client 4.223.136.67:11327] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aejzcz58M3t15ICeWHWnIQAAAMs"]
[Thu Apr 23 00:12:36.154655 2026] [:error] [pid 6252:tid 6318] [client 4.223.136.67:11383] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aejzdOtGYuiYb1nWBpRyKAAAAQY"]
[Thu Apr 23 00:12:36.802028 2026] [:error] [pid 6250:tid 6265] [client 4.223.136.67:11373] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aejzdA-iZeQkqmQVfj44gAAAAEs"]
[Thu Apr 23 00:12:37.492115 2026] [:error] [pid 6384:tid 6390] [client 4.223.136.67:8191] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aejzdT58M3t15ICeWHWnJwAAAMM"]
[Thu Apr 23 00:12:38.056462 2026] [:error] [pid 6384:tid 6405] [client 4.223.136.67:11315] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aejzdj58M3t15ICeWHWnKwAAANI"]
[Thu Apr 23 00:12:38.790045 2026] [:error] [pid 23776:tid 23789] [client 4.223.136.67:8183] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aejzdrRExf-1pAbSeJs8MAAAAYs"]
[Thu Apr 23 00:12:39.447450 2026] [:error] [pid 9085:tid 9104] [client 4.223.136.67:8156] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aejzd9-_-or9vQnlWnr26wAAAVE"]
[Thu Apr 23 00:12:40.055049 2026] [:error] [pid 6344:tid 6366] [client 4.223.136.67:11378] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aejzeEDOTF-pkQnDeUkltgAAABE"]
[Thu Apr 23 00:12:40.648027 2026] [:error] [pid 9085:tid 9109] [client 4.223.136.67:11268] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aejzeN-_-or9vQnlWnr27gAAAVY"]
[Thu Apr 23 00:12:41.286123 2026] [:error] [pid 6384:tid 6401] [client 4.223.136.67:8152] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aejzeT58M3t15ICeWHWnMgAAAM4"]
[Thu Apr 23 00:12:42.052876 2026] [:error] [pid 9085:tid 9100] [client 4.223.136.67:8180] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aejzet-_-or9vQnlWnr28QAAAU0"]
[Thu Apr 23 00:12:42.694047 2026] [:error] [pid 6384:tid 6405] [client 4.223.136.67:8070] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "aejzej58M3t15ICeWHWnOAAAANI"]
[Thu Apr 23 00:12:43.494573 2026] [:error] [pid 23776:tid 23802] [client 4.223.136.67:8081] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aejze7RExf-1pAbSeJs8OAAAAZg"]
[Thu Apr 23 00:13:04.178799 2026] [:error] [pid 6344:tid 6369] [client 4.223.136.67:11310] [client 4.223.136.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aejzkEDOTF-pkQnDeUkl2QAAABQ"]
[Thu Apr 23 00:13:07.443764 2026] [proxy_fcgi:error] [pid 6252:tid 6317] [client 4.223.136.67:11338] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:13:24.048970 2026] [proxy_fcgi:error] [pid 23776:tid 23783] [client 4.223.136.67:11329] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:13:38.513050 2026] [proxy_fcgi:error] [pid 23776:tid 23780] [client 4.223.136.67:11321] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:13:39.684706 2026] [proxy_fcgi:error] [pid 9085:tid 9096] [client 4.223.136.67:11351] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:13:44.256767 2026] [:error] [pid 6384:tid 6405] [client 4.223.136.67:8174] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "aejzuD58M3t15ICeWHWnfgAAANI"]
[Thu Apr 23 00:13:44.952200 2026] [:error] [pid 6252:tid 6314] [client 4.223.136.67:8177] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "aejzuOtGYuiYb1nWBpRyUQAAAQI"]
[Thu Apr 23 00:13:45.560733 2026] [:error] [pid 6384:tid 6390] [client 4.223.136.67:8189] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "aejzuT58M3t15ICeWHWnhAAAAMM"]
[Thu Apr 23 00:13:46.366191 2026] [:error] [pid 6384:tid 6398] [client 4.223.136.67:8141] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/packsin1.php"] [unique_id "aejzuj58M3t15ICeWHWniAAAAMs"]
[Thu Apr 23 00:13:47.151533 2026] [:error] [pid 23776:tid 23786] [client 4.223.136.67:8153] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "aejzu7RExf-1pAbSeJs8rgAAAYg"]
[Thu Apr 23 00:13:49.177822 2026] [:error] [pid 6344:tid 6373] [client 4.223.136.67:11370] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "aejzvUDOTF-pkQnDeUkmEAAAABg"]
[Thu Apr 23 00:13:50.740507 2026] [:error] [pid 23776:tid 23799] [client 4.223.136.67:8065] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "aejzvrRExf-1pAbSeJs8uQAAAZU"]
[Thu Apr 23 00:13:51.802015 2026] [:error] [pid 23776:tid 23785] [client 4.223.136.67:8176] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xs.php"] [unique_id "aejzv7RExf-1pAbSeJs8uwAAAYc"]
[Thu Apr 23 00:13:52.373882 2026] [:error] [pid 23776:tid 23800] [client 4.223.136.67:11306] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "aejzwLRExf-1pAbSeJs8vgAAAZY"]
[Thu Apr 23 00:13:53.046325 2026] [:error] [pid 23776:tid 23801] [client 4.223.136.67:8082] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "aejzwbRExf-1pAbSeJs8wAAAAZc"]
[Thu Apr 23 00:13:53.808546 2026] [:error] [pid 6251:tid 6301] [client 4.223.136.67:11326] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "aejzwSsFAzbyObL-SQ6dzAAAAJA"]
[Thu Apr 23 00:13:54.375212 2026] [:error] [pid 6251:tid 6294] [client 4.223.136.67:8164] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/img.php"] [unique_id "aejzwisFAzbyObL-SQ6dzgAAAIk"]
[Thu Apr 23 00:13:55.169368 2026] [:error] [pid 6344:tid 6361] [client 4.223.136.67:11282] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aejzw0DOTF-pkQnDeUkmFAAAAAw"]
[Thu Apr 23 00:13:55.777494 2026] [:error] [pid 6384:tid 6395] [client 4.223.136.67:11365] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aejzwz58M3t15ICeWHWnlAAAAMg"]
[Thu Apr 23 00:13:56.576121 2026] [:error] [pid 6251:tid 6309] [client 4.223.136.67:8021] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aejzxCsFAzbyObL-SQ6d0gAAAJg"]
[Thu Apr 23 00:13:57.225504 2026] [:error] [pid 6250:tid 6255] [client 4.223.136.67:11320] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "aejzxQ-iZeQkqmQVfj44swAAAEE"]
[Thu Apr 23 00:13:57.901114 2026] [:error] [pid 23776:tid 23780] [client 4.223.136.67:8117] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "aejzxbRExf-1pAbSeJs8ygAAAYI"]
[Thu Apr 23 00:13:58.625364 2026] [:error] [pid 23776:tid 23802] [client 4.223.136.67:8162] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "aejzxrRExf-1pAbSeJs8zwAAAZg"]
[Thu Apr 23 00:13:59.167428 2026] [:error] [pid 6344:tid 6367] [client 4.223.136.67:8128] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "aejzx0DOTF-pkQnDeUkmGgAAABI"]
[Thu Apr 23 00:13:59.807088 2026] [:error] [pid 6344:tid 6354] [client 4.223.136.67:8137] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "aejzx0DOTF-pkQnDeUkmHQAAAAU"]
[Thu Apr 23 00:14:00.516860 2026] [:error] [pid 6251:tid 6307] [client 4.223.136.67:8130] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "aejzyCsFAzbyObL-SQ6d2AAAAJY"]
[Thu Apr 23 00:14:01.121327 2026] [:error] [pid 6252:tid 6313] [client 4.223.136.67:11322] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "aejzyetGYuiYb1nWBpRyYAAAAQE"]
[Thu Apr 23 00:14:01.872094 2026] [:error] [pid 23776:tid 23784] [client 4.223.136.67:8102] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "aejzybRExf-1pAbSeJs81QAAAYY"]
[Thu Apr 23 00:14:02.772793 2026] [:error] [pid 6344:tid 6349] [client 4.223.136.67:8077] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "aejzykDOTF-pkQnDeUkmHwAAAAA"]
[Thu Apr 23 00:14:03.543408 2026] [:error] [pid 23776:tid 23778] [client 4.223.136.67:8188] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "aejzy7RExf-1pAbSeJs82gAAAYA"]
[Thu Apr 23 00:14:04.199951 2026] [:error] [pid 9085:tid 9101] [client 4.223.136.67:8087] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "aejzzN-_-or9vQnlWnr3tQAAAU4"]
[Thu Apr 23 00:14:05.439072 2026] [:error] [pid 23776:tid 23793] [client 4.223.136.67:8111] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "aejzzbRExf-1pAbSeJs84QAAAY8"]
[Thu Apr 23 00:14:07.979908 2026] [:error] [pid 6344:tid 6367] [client 4.223.136.67:11324] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "aejzz0DOTF-pkQnDeUkmJgAAABI"]
[Thu Apr 23 00:14:10.338706 2026] [:error] [pid 6384:tid 6402] [client 4.223.136.67:11296] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aejz0j58M3t15ICeWHWnowAAAM8"]
[Thu Apr 23 00:14:12.332822 2026] [:error] [pid 6250:tid 6259] [client 4.223.136.67:11270] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aejz1A-iZeQkqmQVfj44wAAAAEU"]
[Thu Apr 23 00:14:15.162717 2026] [:error] [pid 6384:tid 6399] [client 4.223.136.67:11379] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aejz1z58M3t15ICeWHWntAAAAMw"]
[Thu Apr 23 00:14:19.172040 2026] [:error] [pid 6384:tid 6391] [client 4.223.136.67:11336] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aejz2z58M3t15ICeWHWnwwAAAMQ"]
[Thu Apr 23 00:14:22.886457 2026] [:error] [pid 6384:tid 6393] [client 4.223.136.67:11286] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/areak1.php"] [unique_id "aejz3j58M3t15ICeWHWnxwAAAMY"]
[Thu Apr 23 00:14:26.716859 2026] [:error] [pid 23776:tid 23794] [client 4.223.136.67:8159] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/areak1.php"] [unique_id "aejz4rRExf-1pAbSeJs9AgAAAZA"]
[Thu Apr 23 00:14:28.293183 2026] [:error] [pid 23776:tid 23797] [client 4.223.136.67:8163] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/areak1.php"] [unique_id "aejz5LRExf-1pAbSeJs9BQAAAZM"]
[Thu Apr 23 00:14:28.988374 2026] [:error] [pid 23776:tid 23784] [client 4.223.136.67:8167] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/areak1.php"] [unique_id "aejz5LRExf-1pAbSeJs9BwAAAYY"]
[Thu Apr 23 00:14:29.602157 2026] [:error] [pid 6384:tid 6389] [client 4.223.136.67:8157] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sallu.php"] [unique_id "aejz5T58M3t15ICeWHWn2wAAAMI"]
[Thu Apr 23 00:14:30.310297 2026] [:error] [pid 6252:tid 6318] [client 4.223.136.67:8099] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sallu.php"] [unique_id "aejz5utGYuiYb1nWBpRygwAAAQY"]
[Thu Apr 23 00:14:31.168711 2026] [:error] [pid 6384:tid 6402] [client 4.223.136.67:8106] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sallu.php"] [unique_id "aejz5z58M3t15ICeWHWn4QAAAM8"]
[Thu Apr 23 00:14:31.782352 2026] [:error] [pid 6344:tid 6350] [client 4.223.136.67:8136] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sallu.php"] [unique_id "aejz50DOTF-pkQnDeUkmWwAAAAE"]
[Thu Apr 23 00:14:32.574118 2026] [:error] [pid 6251:tid 6305] [client 4.223.136.67:11295] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "aejz6CsFAzbyObL-SQ6d8AAAAJQ"]
[Thu Apr 23 00:14:33.326502 2026] [:error] [pid 23776:tid 23800] [client 4.223.136.67:8139] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "aejz6bRExf-1pAbSeJs9GAAAAZY"]
[Thu Apr 23 00:14:34.009765 2026] [:error] [pid 6251:tid 6307] [client 4.223.136.67:11331] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "aejz6isFAzbyObL-SQ6d9gAAAJY"]
[Thu Apr 23 00:14:34.755143 2026] [:error] [pid 6384:tid 6406] [client 4.223.136.67:8142] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "aejz6j58M3t15ICeWHWn5gAAANM"]
[Thu Apr 23 00:14:35.520354 2026] [:error] [pid 6344:tid 6355] [client 4.223.136.67:8127] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aejz60DOTF-pkQnDeUkmYAAAAAY"]
[Thu Apr 23 00:14:36.137774 2026] [:error] [pid 23776:tid 23788] [client 4.223.136.67:8079] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aejz7LRExf-1pAbSeJs9HgAAAYo"]
[Thu Apr 23 00:14:36.771160 2026] [:error] [pid 6344:tid 6372] [client 4.223.136.67:11347] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aejz7EDOTF-pkQnDeUkmZAAAABc"]
[Thu Apr 23 00:14:37.831733 2026] [:error] [pid 23776:tid 23795] [client 4.223.136.67:8144] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "aejz7bRExf-1pAbSeJs9IQAAAZE"]
[Thu Apr 23 00:14:38.647090 2026] [:error] [pid 9085:tid 9111] [client 4.223.136.67:11271] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gz.php"] [unique_id "aejz7t-_-or9vQnlWnr3yAAAAVg"]
[Thu Apr 23 00:14:39.529843 2026] [:error] [pid 9085:tid 9096] [client 4.223.136.67:8005] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gz.php"] [unique_id "aejz79-_-or9vQnlWnr3zgAAAUk"]
[Thu Apr 23 00:14:40.309033 2026] [:error] [pid 6251:tid 6289] [client 4.223.136.67:11299] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gz.php"] [unique_id "aejz8CsFAzbyObL-SQ6d_QAAAIQ"]
[Thu Apr 23 00:14:41.142639 2026] [:error] [pid 9085:tid 9109] [client 4.223.136.67:11291] [client 4.223.136.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gz.php"] [unique_id "aejz8d-_-or9vQnlWnr32wAAAVY"]
[Thu Apr 23 00:15:18.656649 2026] [proxy_fcgi:error] [pid 9085:tid 9108] [client 4.223.136.67:11280] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 00:15:40.894409 2026] [proxy_fcgi:error] [pid 6344:tid 6368] [client 4.223.136.67:11369] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:18:02.779842 2026] [proxy_fcgi:error] [pid 6250:tid 6272] [client 4.231.226.99:14336] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:18:19.091101 2026] [proxy_fcgi:error] [pid 6252:tid 6325] [client 4.231.226.99:14425] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:18:36.163056 2026] [:error] [pid 6384:tid 6410] [client 4.231.226.99:14452] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aekC7D58M3t15ICeWHXF4wAAANc"]
[Thu Apr 23 01:18:37.721709 2026] [:error] [pid 6251:tid 6287] [client 4.231.226.99:14426] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aekC7SsFAzbyObL-SQ6n0AAAAII"]
[Thu Apr 23 01:18:39.525279 2026] [:error] [pid 6384:tid 6394] [client 4.231.226.99:14456] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aekC7z58M3t15ICeWHXF5gAAAMc"]
[Thu Apr 23 01:18:41.259984 2026] [:error] [pid 6384:tid 6398] [client 4.231.226.99:14355] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aekC8T58M3t15ICeWHXF6QAAAMs"]
[Thu Apr 23 01:18:42.356102 2026] [:error] [pid 6384:tid 6411] [client 4.231.226.99:14462] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aekC8j58M3t15ICeWHXF7AAAANg"]
[Thu Apr 23 01:18:43.563286 2026] [:error] [pid 6384:tid 6395] [client 4.231.226.99:14448] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aekC8z58M3t15ICeWHXF8QAAAMg"]
[Thu Apr 23 01:18:44.488728 2026] [:error] [pid 6252:tid 6318] [client 4.231.226.99:14344] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aekC9OtGYuiYb1nWBpR-lAAAAQY"]
[Thu Apr 23 01:18:45.619988 2026] [:error] [pid 6252:tid 6314] [client 4.231.226.99:14433] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aekC9etGYuiYb1nWBpR-lwAAAQI"]
[Thu Apr 23 01:18:46.646449 2026] [:error] [pid 6252:tid 6332] [client 4.231.226.99:14445] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aekC9utGYuiYb1nWBpR-mwAAARQ"]
[Thu Apr 23 01:18:47.741525 2026] [:error] [pid 6252:tid 6319] [client 4.231.226.99:14365] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aekC9-tGYuiYb1nWBpR-nQAAAQc"]
[Thu Apr 23 01:18:49.226154 2026] [:error] [pid 6344:tid 6350] [client 4.231.226.99:6091] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aekC-UDOTF-pkQnDeUk4BQAAAAE"]
[Thu Apr 23 01:18:50.231053 2026] [:error] [pid 6251:tid 6309] [client 4.231.226.99:14444] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aekC-isFAzbyObL-SQ6n2AAAAJg"]
[Thu Apr 23 01:18:51.304082 2026] [:error] [pid 6250:tid 6273] [client 4.231.226.99:14447] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aekC-w-iZeQkqmQVfj5G5QAAAFM"]
[Thu Apr 23 01:18:53.254132 2026] [:error] [pid 9085:tid 9096] [client 4.231.226.99:14436] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aekC_d-_-or9vQnlWnogwAAAAUk"]
[Thu Apr 23 01:18:54.665910 2026] [:error] [pid 9085:tid 9094] [client 4.231.226.99:14414] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aekC_t-_-or9vQnlWnogwgAAAUc"]
[Thu Apr 23 01:18:56.079405 2026] [:error] [pid 6344:tid 6361] [client 4.231.226.99:14342] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aekDAEDOTF-pkQnDeUk4CgAAAAw"]
[Thu Apr 23 01:18:57.185807 2026] [:error] [pid 6250:tid 6267] [client 4.231.226.99:14423] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aekDAQ-iZeQkqmQVfj5G6gAAAE0"]
[Thu Apr 23 01:18:57.936779 2026] [:error] [pid 9085:tid 9104] [client 4.231.226.99:14415] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aekDAd-_-or9vQnlWnog0wAAAVE"]
[Thu Apr 23 01:18:58.676947 2026] [:error] [pid 6384:tid 6403] [client 4.231.226.99:14346] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aekDAj58M3t15ICeWHXF_gAAANA"]
[Thu Apr 23 01:18:59.550910 2026] [:error] [pid 23776:tid 23790] [client 4.231.226.99:14429] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aekDA7RExf-1pAbSeJtV0AAAAYw"]
[Thu Apr 23 01:19:00.201515 2026] [:error] [pid 9085:tid 9092] [client 4.231.226.99:14458] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aekDBN-_-or9vQnlWnog4QAAAUU"]
[Thu Apr 23 01:19:00.758296 2026] [:error] [pid 9085:tid 9095] [client 4.231.226.99:14453] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aekDBN-_-or9vQnlWnog5AAAAUg"]
[Thu Apr 23 01:19:01.471086 2026] [:error] [pid 6344:tid 6354] [client 4.231.226.99:14428] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aekDBUDOTF-pkQnDeUk4EQAAAAU"]
[Thu Apr 23 01:19:02.219040 2026] [:error] [pid 9085:tid 9109] [client 4.231.226.99:14439] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aekDBt-_-or9vQnlWnog7AAAAVY"]
[Thu Apr 23 01:19:02.813684 2026] [:error] [pid 6384:tid 6409] [client 4.231.226.99:14370] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aekDBj58M3t15ICeWHXGBAAAANY"]
[Thu Apr 23 01:19:03.392121 2026] [:error] [pid 6384:tid 6398] [client 4.231.226.99:14431] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aekDBz58M3t15ICeWHXGBQAAAMs"]
[Thu Apr 23 01:19:03.959453 2026] [:error] [pid 6252:tid 6331] [client 4.231.226.99:14454] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aekDB-tGYuiYb1nWBpR-qwAAARM"]
[Thu Apr 23 01:19:04.508193 2026] [:error] [pid 6252:tid 6325] [client 4.231.226.99:14343] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aekDCOtGYuiYb1nWBpR-rQAAAQ0"]
[Thu Apr 23 01:19:05.054107 2026] [:error] [pid 9085:tid 9102] [client 4.231.226.99:14406] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aekDCd-_-or9vQnlWnohAgAAAU8"]
[Thu Apr 23 01:19:05.616251 2026] [:error] [pid 6344:tid 6373] [client 4.231.226.99:14388] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aekDCUDOTF-pkQnDeUk4FAAAABg"]
[Thu Apr 23 01:19:06.330619 2026] [:error] [pid 6344:tid 6366] [client 4.231.226.99:14418] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aekDCkDOTF-pkQnDeUk4FwAAABE"]
[Thu Apr 23 01:19:06.901746 2026] [:error] [pid 6250:tid 6268] [client 4.231.226.99:14397] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aekDCg-iZeQkqmQVfj5G6wAAAE4"]
[Thu Apr 23 01:19:07.459668 2026] [:error] [pid 9085:tid 9088] [client 4.231.226.99:14356] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aekDC9-_-or9vQnlWnohEwAAAUE"]
[Thu Apr 23 01:19:08.028925 2026] [:error] [pid 9085:tid 9098] [client 4.231.226.99:14396] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aekDDN-_-or9vQnlWnohGAAAAUs"]
[Thu Apr 23 01:19:08.807838 2026] [:error] [pid 9085:tid 9111] [client 4.231.226.99:14463] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aekDDN-_-or9vQnlWnohHAAAAVg"]
[Thu Apr 23 01:19:09.394505 2026] [:error] [pid 9085:tid 9097] [client 4.231.226.99:14390] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aekDDd-_-or9vQnlWnohHwAAAUo"]
[Thu Apr 23 01:19:09.972957 2026] [:error] [pid 6384:tid 6408] [client 4.231.226.99:14338] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aekDDT58M3t15ICeWHXGEgAAANU"]
[Thu Apr 23 01:19:10.501376 2026] [:error] [pid 9085:tid 9087] [client 4.231.226.99:14383] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aekDDt-_-or9vQnlWnohJgAAAUA"]
[Thu Apr 23 01:19:11.127678 2026] [:error] [pid 9085:tid 9090] [client 4.231.226.99:14353] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aekDD9-_-or9vQnlWnohKQAAAUM"]
[Thu Apr 23 01:19:11.684184 2026] [:error] [pid 9085:tid 9110] [client 4.231.226.99:14461] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aekDD9-_-or9vQnlWnohLAAAAVc"]
[Thu Apr 23 01:19:12.246029 2026] [:error] [pid 6384:tid 6396] [client 4.231.226.99:14364] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aekDED58M3t15ICeWHXGFQAAAMk"]
[Thu Apr 23 01:19:12.897070 2026] [:error] [pid 9085:tid 9104] [client 4.231.226.99:14449] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aekDEN-_-or9vQnlWnohMQAAAVE"]
[Thu Apr 23 01:19:13.557538 2026] [:error] [pid 9085:tid 9097] [client 4.231.226.99:14400] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aekDEd-_-or9vQnlWnohNQAAAUo"]
[Thu Apr 23 01:19:14.735142 2026] [:error] [pid 9085:tid 9107] [client 4.231.226.99:14410] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-png.php"] [unique_id "aekDEt-_-or9vQnlWnohPwAAAVQ"]
[Thu Apr 23 01:19:15.925618 2026] [:error] [pid 23776:tid 23787] [client 4.231.226.99:14367] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aekDE7RExf-1pAbSeJtV1AAAAYk"]
[Thu Apr 23 01:19:16.624533 2026] [:error] [pid 6344:tid 6361] [client 4.231.226.99:14409] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aekDFEDOTF-pkQnDeUk4IgAAAAw"]
[Thu Apr 23 01:19:17.406616 2026] [:error] [pid 6344:tid 6350] [client 4.231.226.99:14401] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aekDFUDOTF-pkQnDeUk4JQAAAAE"]
[Thu Apr 23 01:19:18.557209 2026] [:error] [pid 23776:tid 23791] [client 4.231.226.99:6088] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "aekDFrRExf-1pAbSeJtV3wAAAY0"]
[Thu Apr 23 01:19:19.894481 2026] [:error] [pid 9085:tid 9107] [client 4.231.226.99:14403] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aekDF9-_-or9vQnlWnohVAAAAVQ"]
[Thu Apr 23 01:19:20.551297 2026] [:error] [pid 6344:tid 6356] [client 4.231.226.99:14385] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aekDGEDOTF-pkQnDeUk4KgAAAAc"]
[Thu Apr 23 01:19:21.452413 2026] [:error] [pid 23776:tid 23784] [client 4.231.226.99:14391] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aekDGbRExf-1pAbSeJtV5QAAAYY"]
[Thu Apr 23 01:19:22.154742 2026] [:error] [pid 9085:tid 9099] [client 4.231.226.99:6100] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "aekDGt-_-or9vQnlWnohYAAAAUw"]
[Thu Apr 23 01:19:22.865012 2026] [:error] [pid 6344:tid 6355] [client 4.231.226.99:14350] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aekDGkDOTF-pkQnDeUk4LQAAAAY"]
[Thu Apr 23 01:19:23.747273 2026] [:error] [pid 6344:tid 6358] [client 4.231.226.99:14417] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aekDG0DOTF-pkQnDeUk4MAAAAAk"]
[Thu Apr 23 01:19:24.467893 2026] [:error] [pid 6384:tid 6387] [client 4.231.226.99:14378] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aekDHD58M3t15ICeWHXGKAAAAMA"]
[Thu Apr 23 01:19:25.753177 2026] [:error] [pid 23776:tid 23783] [client 4.231.226.99:14405] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aekDHbRExf-1pAbSeJtV6gAAAYU"]
[Thu Apr 23 01:19:27.245846 2026] [:error] [pid 6250:tid 6254] [client 4.231.226.99:14349] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "aekDHw-iZeQkqmQVfj5G_wAAAEA"]
[Thu Apr 23 01:19:28.729602 2026] [:error] [pid 9085:tid 9087] [client 4.231.226.99:14393] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "aekDIN-_-or9vQnlWnohewAAAUA"]
[Thu Apr 23 01:19:30.451599 2026] [:error] [pid 6252:tid 6333] [client 4.231.226.99:6108] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "aekDIutGYuiYb1nWBpR-wAAAARU"]
[Thu Apr 23 01:19:31.751801 2026] [:error] [pid 6384:tid 6401] [client 4.231.226.99:14432] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bfil.php"] [unique_id "aekDIz58M3t15ICeWHXGKwAAAM4"]
[Thu Apr 23 01:19:53.094846 2026] [proxy_fcgi:error] [pid 23776:tid 23795] [client 4.231.226.99:14358] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:20:08.660042 2026] [proxy_fcgi:error] [pid 6250:tid 6263] [client 4.231.226.99:14462] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:20:26.308430 2026] [proxy_fcgi:error] [pid 6344:tid 6372] [client 4.231.226.99:14354] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:20:32.231120 2026] [:error] [pid 6344:tid 6367] [client 4.231.226.99:14341] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aekDYEDOTF-pkQnDeUk4WAAAABI"]
[Thu Apr 23 01:20:32.859337 2026] [:error] [pid 6384:tid 6404] [client 4.231.226.99:14376] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aekDYD58M3t15ICeWHXGhgAAANE"]
[Thu Apr 23 01:20:33.468491 2026] [:error] [pid 6252:tid 6317] [client 4.231.226.99:14460] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aekDYetGYuiYb1nWBpR-8AAAAQU"]
[Thu Apr 23 01:20:34.604822 2026] [:error] [pid 23776:tid 23779] [client 4.231.226.99:14352] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aekDYrRExf-1pAbSeJtWUgAAAYE"]
[Thu Apr 23 01:20:35.442466 2026] [:error] [pid 6384:tid 6408] [client 4.231.226.99:14363] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aekDYz58M3t15ICeWHXGjwAAANU"]
[Thu Apr 23 01:20:36.006603 2026] [:error] [pid 9085:tid 9100] [client 4.231.226.99:6111] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aekDZN-_-or9vQnlWnoh7AAAAU0"]
[Thu Apr 23 01:20:36.543080 2026] [:error] [pid 6384:tid 6397] [client 4.231.226.99:14450] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aekDZD58M3t15ICeWHXGmAAAAMo"]
[Thu Apr 23 01:20:37.259797 2026] [:error] [pid 6384:tid 6404] [client 4.231.226.99:14394] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "aekDZT58M3t15ICeWHXGmwAAANE"]
[Thu Apr 23 01:20:37.986567 2026] [:error] [pid 6250:tid 6269] [client 4.231.226.99:14348] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aekDZQ-iZeQkqmQVfj5HJwAAAE8"]
[Thu Apr 23 01:20:38.709939 2026] [:error] [pid 6250:tid 6254] [client 4.231.226.99:14438] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aekDZg-iZeQkqmQVfj5HKQAAAEA"]
[Thu Apr 23 01:20:39.435336 2026] [:error] [pid 9085:tid 9098] [client 4.231.226.99:14378] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aekDZ9-_-or9vQnlWnoh9QAAAUs"]
[Thu Apr 23 01:20:40.368381 2026] [:error] [pid 6344:tid 6373] [client 4.231.226.99:14380] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koiy.php"] [unique_id "aekDaEDOTF-pkQnDeUk4XgAAABg"]
[Thu Apr 23 01:20:41.206711 2026] [:error] [pid 23776:tid 23798] [client 4.231.226.99:14357] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "aekDabRExf-1pAbSeJtWYgAAAZQ"]
[Thu Apr 23 01:20:42.319852 2026] [:error] [pid 23776:tid 23784] [client 4.231.226.99:6105] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "aekDarRExf-1pAbSeJtWZQAAAYY"]
[Thu Apr 23 01:20:42.926836 2026] [:error] [pid 23776:tid 23800] [client 4.231.226.99:14361] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "aekDarRExf-1pAbSeJtWZwAAAZY"]
[Thu Apr 23 01:20:43.787173 2026] [:error] [pid 9085:tid 9094] [client 4.231.226.99:14377] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "aekDa9-_-or9vQnlWnoiAgAAAUc"]
[Thu Apr 23 01:20:44.356117 2026] [:error] [pid 6252:tid 6313] [client 4.231.226.99:6085] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aekDbOtGYuiYb1nWBpR-8gAAAQE"]
[Thu Apr 23 01:20:45.173205 2026] [:error] [pid 6384:tid 6398] [client 4.231.226.99:14407] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aekDbT58M3t15ICeWHXGrAAAAMs"]
[Thu Apr 23 01:20:45.957053 2026] [:error] [pid 9085:tid 9102] [client 4.231.226.99:14398] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aekDbd-_-or9vQnlWnoiCQAAAU8"]
[Thu Apr 23 01:20:46.916490 2026] [:error] [pid 9085:tid 9087] [client 4.231.226.99:6082] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aekDbt-_-or9vQnlWnoiDQAAAUA"]
[Thu Apr 23 01:20:47.658367 2026] [:error] [pid 6384:tid 6397] [client 4.231.226.99:6083] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aekDbz58M3t15ICeWHXGsQAAAMo"]
[Thu Apr 23 01:20:48.409848 2026] [:error] [pid 23776:tid 23795] [client 4.231.226.99:6125] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aekDcLRExf-1pAbSeJtWawAAAZE"]
[Thu Apr 23 01:20:49.263904 2026] [:error] [pid 6250:tid 6274] [client 4.231.226.99:14373] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aekDcQ-iZeQkqmQVfj5HOgAAAFQ"]
[Thu Apr 23 01:20:49.792221 2026] [:error] [pid 6252:tid 6320] [client 4.231.226.99:14382] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "aekDcetGYuiYb1nWBpR-_AAAAQg"]
[Thu Apr 23 01:20:50.334908 2026] [:error] [pid 6384:tid 6402] [client 4.231.226.99:6093] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "aekDcj58M3t15ICeWHXGuAAAAM8"]
[Thu Apr 23 01:20:51.005886 2026] [:error] [pid 6384:tid 6395] [client 4.231.226.99:6021] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "aekDcz58M3t15ICeWHXGuwAAAMg"]
[Thu Apr 23 01:20:51.702602 2026] [:error] [pid 6384:tid 6396] [client 4.231.226.99:6099] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "aekDcz58M3t15ICeWHXGvQAAAMk"]
[Thu Apr 23 01:20:52.429356 2026] [:error] [pid 6250:tid 6275] [client 4.231.226.99:6089] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "aekDdA-iZeQkqmQVfj5HPAAAAFU"]
[Thu Apr 23 01:20:54.358252 2026] [:error] [pid 6250:tid 6263] [client 4.231.226.99:14351] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "aekDdg-iZeQkqmQVfj5HQQAAAEk"]
[Thu Apr 23 01:20:55.059498 2026] [:error] [pid 6384:tid 6408] [client 4.231.226.99:14457] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "aekDdz58M3t15ICeWHXGwAAAANU"]
[Thu Apr 23 01:20:55.631987 2026] [:error] [pid 9085:tid 9094] [client 4.231.226.99:14416] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "aekDd9-_-or9vQnlWnoiIAAAAUc"]
[Thu Apr 23 01:20:56.524370 2026] [:error] [pid 9085:tid 9106] [client 4.231.226.99:6129] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp9.php"] [unique_id "aekDeN-_-or9vQnlWnoiIgAAAVM"]
[Thu Apr 23 01:20:58.059943 2026] [:error] [pid 6384:tid 6389] [client 4.231.226.99:14443] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aekDej58M3t15ICeWHXGwwAAAMI"]
[Thu Apr 23 01:20:59.713299 2026] [:error] [pid 23776:tid 23789] [client 4.231.226.99:14413] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aekDe7RExf-1pAbSeJtWdgAAAYs"]
[Thu Apr 23 01:21:00.760949 2026] [:error] [pid 6251:tid 6299] [client 4.231.226.99:14442] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aekDfCsFAzbyObL-SQ6oEgAAAI4"]
[Thu Apr 23 01:21:01.843781 2026] [:error] [pid 6251:tid 6296] [client 4.231.226.99:14336] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "aekDfSsFAzbyObL-SQ6oFgAAAIs"]
[Thu Apr 23 01:21:03.185554 2026] [:error] [pid 6384:tid 6404] [client 4.231.226.99:6112] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aekDfz58M3t15ICeWHXGywAAANE"]
[Thu Apr 23 01:21:05.160985 2026] [:error] [pid 9085:tid 9105] [client 4.231.226.99:14422] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aekDgd-_-or9vQnlWnoiMAAAAVI"]
[Thu Apr 23 01:21:08.134735 2026] [:error] [pid 9085:tid 9111] [client 4.231.226.99:6141] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aekDhN-_-or9vQnlWnoiNwAAAVg"]
[Thu Apr 23 01:21:09.014398 2026] [:error] [pid 23776:tid 23778] [client 4.231.226.99:6119] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp5.php"] [unique_id "aekDhbRExf-1pAbSeJtWeAAAAYA"]
[Thu Apr 23 01:21:10.007968 2026] [:error] [pid 9085:tid 9105] [client 4.231.226.99:14379] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "aekDht-_-or9vQnlWnoiPQAAAVI"]
[Thu Apr 23 01:21:11.154897 2026] [:error] [pid 6252:tid 6326] [client 4.231.226.99:14420] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "aekDh-tGYuiYb1nWBpR_DQAAAQ4"]
[Thu Apr 23 01:21:11.960994 2026] [:error] [pid 6252:tid 6312] [client 4.231.226.99:14360] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "aekDh-tGYuiYb1nWBpR_DwAAAQA"]
[Thu Apr 23 01:21:13.151479 2026] [:error] [pid 6251:tid 6309] [client 4.231.226.99:14354] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "aekDiSsFAzbyObL-SQ6oGwAAAJg"]
[Thu Apr 23 01:21:14.119020 2026] [:error] [pid 9085:tid 9103] [client 4.231.226.99:6035] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aekDit-_-or9vQnlWnoiSgAAAVA"]
[Thu Apr 23 01:21:14.845556 2026] [:error] [pid 6384:tid 6398] [client 4.231.226.99:6018] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aekDij58M3t15ICeWHXG3gAAAMs"]
[Thu Apr 23 01:21:15.482365 2026] [:error] [pid 6384:tid 6400] [client 4.231.226.99:14387] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aekDiz58M3t15ICeWHXG4AAAAM0"]
[Thu Apr 23 01:21:16.220629 2026] [:error] [pid 6250:tid 6267] [client 4.231.226.99:14362] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aekDjA-iZeQkqmQVfj5HTgAAAE0"]
[Thu Apr 23 01:21:17.187043 2026] [:error] [pid 6250:tid 6254] [client 4.231.226.99:6130] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "aekDjQ-iZeQkqmQVfj5HUQAAAEA"]
[Thu Apr 23 01:21:17.884764 2026] [:error] [pid 6250:tid 6260] [client 4.231.226.99:14437] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "aekDjQ-iZeQkqmQVfj5HVAAAAEY"]
[Thu Apr 23 01:21:18.444987 2026] [:error] [pid 9085:tid 9103] [client 4.231.226.99:6118] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "aekDjt-_-or9vQnlWnoiUwAAAVA"]
[Thu Apr 23 01:21:19.133136 2026] [:error] [pid 9085:tid 9096] [client 4.231.226.99:6028] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Cap.php"] [unique_id "aekDj9-_-or9vQnlWnoiVQAAAUk"]
[Thu Apr 23 01:21:19.870830 2026] [:error] [pid 9085:tid 9111] [client 4.231.226.99:14381] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aekDj9-_-or9vQnlWnoiWQAAAVg"]
[Thu Apr 23 01:21:20.473021 2026] [:error] [pid 23776:tid 23793] [client 4.231.226.99:14408] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aekDkLRExf-1pAbSeJtWggAAAY8"]
[Thu Apr 23 01:21:21.467515 2026] [:error] [pid 6251:tid 6302] [client 4.231.226.99:6102] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aekDkSsFAzbyObL-SQ6oJQAAAJE"]
[Thu Apr 23 01:21:22.080604 2026] [:error] [pid 6251:tid 6294] [client 4.231.226.99:14340] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tfm.php"] [unique_id "aekDkisFAzbyObL-SQ6oKAAAAIk"]
[Thu Apr 23 01:21:22.666814 2026] [:error] [pid 23776:tid 23785] [client 4.231.226.99:14386] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aekDkrRExf-1pAbSeJtWhgAAAYc"]
[Thu Apr 23 01:21:23.243090 2026] [:error] [pid 6384:tid 6392] [client 4.231.226.99:6041] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aekDkz58M3t15ICeWHXG5AAAAMU"]
[Thu Apr 23 01:21:24.021165 2026] [:error] [pid 6384:tid 6402] [client 4.231.226.99:14389] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aekDlD58M3t15ICeWHXG5gAAAM8"]
[Thu Apr 23 01:21:25.408874 2026] [:error] [pid 9085:tid 9089] [client 4.231.226.99:14441] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aekDld-_-or9vQnlWnoiYQAAAUI"]
[Thu Apr 23 01:21:26.473294 2026] [:error] [pid 6384:tid 6395] [client 4.231.226.99:14369] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "aekDlj58M3t15ICeWHXG6wAAAMg"]
[Thu Apr 23 01:21:27.235612 2026] [:error] [pid 6384:tid 6401] [client 4.231.226.99:6026] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "aekDlz58M3t15ICeWHXG7gAAAM4"]
[Thu Apr 23 01:21:28.737959 2026] [:error] [pid 6384:tid 6411] [client 4.231.226.99:6055] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "aekDmD58M3t15ICeWHXG9gAAANg"]
[Thu Apr 23 01:21:50.391765 2026] [proxy_fcgi:error] [pid 6252:tid 6324] [client 4.231.226.99:14404] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:22:06.272275 2026] [proxy_fcgi:error] [pid 9085:tid 9088] [client 4.231.226.99:14431] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:22:20.512993 2026] [proxy_fcgi:error] [pid 6252:tid 6316] [client 4.231.226.99:6095] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:22:23.344101 2026] [proxy_fcgi:error] [pid 9085:tid 9101] [client 4.231.226.99:6098] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Thu Apr 23 01:22:30.340054 2026] [:error] [pid 9085:tid 9103] [client 4.231.226.99:6096] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prosellers8.php"] [unique_id "aekD1t-_-or9vQnlWnojCwAAAVA"]
[Thu Apr 23 01:22:31.196484 2026] [:error] [pid 9085:tid 9106] [client 4.231.226.99:6109] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prosellers8.php"] [unique_id "aekD19-_-or9vQnlWnojDAAAAVM"]
[Thu Apr 23 01:22:31.865674 2026] [:error] [pid 6384:tid 6406] [client 4.231.226.99:6110] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prosellers8.php"] [unique_id "aekD1z58M3t15ICeWHXHWwAAANM"]
[Thu Apr 23 01:22:32.459622 2026] [:error] [pid 9085:tid 9087] [client 4.231.226.99:6117] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/prosellers8.php"] [unique_id "aekD2N-_-or9vQnlWnojEgAAAUA"]
[Thu Apr 23 01:22:33.595503 2026] [:error] [pid 6384:tid 6401] [client 4.231.226.99:14411] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aekD2T58M3t15ICeWHXHXwAAAM4"]
[Thu Apr 23 01:22:34.699342 2026] [:error] [pid 9085:tid 9101] [client 4.231.226.99:6123] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aekD2t-_-or9vQnlWnojGQAAAU4"]
[Thu Apr 23 01:22:35.956845 2026] [:error] [pid 9085:tid 9097] [client 4.231.226.99:14339] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aekD29-_-or9vQnlWnojGwAAAUo"]
[Thu Apr 23 01:22:36.930579 2026] [:error] [pid 6384:tid 6398] [client 4.231.226.99:6062] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aekD3D58M3t15ICeWHXHagAAAMs"]
[Thu Apr 23 01:22:37.722206 2026] [:error] [pid 23776:tid 23790] [client 4.231.226.99:14430] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aekD3bRExf-1pAbSeJtW5QAAAYw"]
[Thu Apr 23 01:22:38.710807 2026] [:error] [pid 6252:tid 6334] [client 4.231.226.99:14347] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aekD3utGYuiYb1nWBpR_agAAARY"]
[Thu Apr 23 01:22:40.254472 2026] [:error] [pid 6250:tid 6276] [client 4.231.226.99:6031] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aekD4A-iZeQkqmQVfj5HiQAAAFY"]
[Thu Apr 23 01:22:41.571855 2026] [:error] [pid 6252:tid 6318] [client 4.231.226.99:6124] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aekD4etGYuiYb1nWBpR_awAAAQY"]
[Thu Apr 23 01:22:42.436709 2026] [:error] [pid 9085:tid 9091] [client 4.231.226.99:6092] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aekD4t-_-or9vQnlWnojNAAAAUQ"]
[Thu Apr 23 01:22:43.435879 2026] [:error] [pid 23776:tid 23789] [client 4.231.226.99:14364] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aekD47RExf-1pAbSeJtW8gAAAYs"]
[Thu Apr 23 01:22:44.394613 2026] [:error] [pid 23776:tid 23778] [client 4.231.226.99:6097] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aekD5LRExf-1pAbSeJtW9QAAAYA"]
[Thu Apr 23 01:22:45.401001 2026] [:error] [pid 6384:tid 6398] [client 4.231.226.99:14404] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aekD5T58M3t15ICeWHXHfwAAAMs"]
[Thu Apr 23 01:22:46.305565 2026] [:error] [pid 6384:tid 6397] [client 4.231.226.99:6070] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aekD5j58M3t15ICeWHXHhwAAAMo"]
[Thu Apr 23 01:22:47.008142 2026] [:error] [pid 6252:tid 6336] [client 4.231.226.99:6058] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aekD5-tGYuiYb1nWBpR_bAAAARg"]
[Thu Apr 23 01:22:47.753195 2026] [:error] [pid 6252:tid 6320] [client 4.231.226.99:6122] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aekD5-tGYuiYb1nWBpR_bQAAAQg"]
[Thu Apr 23 01:22:48.380915 2026] [:error] [pid 6384:tid 6395] [client 4.231.226.99:6037] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aekD6D58M3t15ICeWHXHiwAAAMg"]
[Thu Apr 23 01:22:48.965003 2026] [:error] [pid 6251:tid 6302] [client 4.231.226.99:6044] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aekD6CsFAzbyObL-SQ6oaAAAAJE"]
[Thu Apr 23 01:22:49.576097 2026] [:error] [pid 6251:tid 6303] [client 4.231.226.99:14366] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aekD6SsFAzbyObL-SQ6oaQAAAJI"]
[Thu Apr 23 01:22:50.302343 2026] [:error] [pid 6250:tid 6255] [client 4.231.226.99:6047] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aekD6g-iZeQkqmQVfj5HjQAAAEE"]
[Thu Apr 23 01:22:50.927616 2026] [:error] [pid 6384:tid 6409] [client 4.231.226.99:14337] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aekD6j58M3t15ICeWHXHkAAAANY"]
[Thu Apr 23 01:22:51.760151 2026] [:error] [pid 23776:tid 23785] [client 4.231.226.99:6038] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aekD67RExf-1pAbSeJtXAQAAAYc"]
[Thu Apr 23 01:22:52.361809 2026] [:error] [pid 6251:tid 6300] [client 4.231.226.99:14359] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aekD7CsFAzbyObL-SQ6oawAAAI8"]
[Thu Apr 23 01:22:53.020355 2026] [:error] [pid 6344:tid 6356] [client 4.231.226.99:6131] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aekD7UDOTF-pkQnDeUk42AAAAAc"]
[Thu Apr 23 01:22:53.592480 2026] [:error] [pid 23776:tid 23792] [client 4.231.226.99:14395] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "aekD7bRExf-1pAbSeJtXBwAAAY4"]
[Thu Apr 23 01:22:54.230932 2026] [:error] [pid 6384:tid 6394] [client 4.231.226.99:6132] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aekD7j58M3t15ICeWHXHmAAAAMc"]
[Thu Apr 23 01:22:55.213121 2026] [:error] [pid 23776:tid 23790] [client 4.231.226.99:6071] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aekD77RExf-1pAbSeJtXCwAAAYw"]
[Thu Apr 23 01:22:55.927808 2026] [:error] [pid 6250:tid 6257] [client 4.231.226.99:6101] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aekD7w-iZeQkqmQVfj5HkgAAAEM"]
[Thu Apr 23 01:22:56.615851 2026] [:error] [pid 6384:tid 6405] [client 4.231.226.99:14424] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "aekD8D58M3t15ICeWHXHmwAAANI"]
[Thu Apr 23 01:22:57.397579 2026] [:error] [pid 23776:tid 23785] [client 4.231.226.99:14384] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aekD8bRExf-1pAbSeJtXEAAAAYc"]
[Thu Apr 23 01:22:58.130431 2026] [:error] [pid 6384:tid 6398] [client 4.231.226.99:6020] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aekD8j58M3t15ICeWHXHnQAAAMs"]
[Thu Apr 23 01:22:58.731068 2026] [:error] [pid 6384:tid 6400] [client 4.231.226.99:14446] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aekD8j58M3t15ICeWHXHoQAAAM0"]
[Thu Apr 23 01:22:59.349334 2026] [:error] [pid 6344:tid 6350] [client 4.231.226.99:14421] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aekD80DOTF-pkQnDeUk44QAAAAE"]
[Thu Apr 23 01:22:59.936102 2026] [:error] [pid 6252:tid 6334] [client 4.231.226.99:6036] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ai.php"] [unique_id "aekD8-tGYuiYb1nWBpR_egAAARY"]
[Thu Apr 23 01:23:00.627459 2026] [:error] [pid 9085:tid 9087] [client 4.231.226.99:14345] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ai.php"] [unique_id "aekD9N-_-or9vQnlWnojVgAAAUA"]
[Thu Apr 23 01:23:01.179572 2026] [:error] [pid 6384:tid 6395] [client 4.231.226.99:6126] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ai.php"] [unique_id "aekD9T58M3t15ICeWHXHpAAAAMg"]
[Thu Apr 23 01:23:01.755915 2026] [:error] [pid 6251:tid 6299] [client 4.231.226.99:6040] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ai.php"] [unique_id "aekD9SsFAzbyObL-SQ6obgAAAI4"]
[Thu Apr 23 01:23:02.348190 2026] [:error] [pid 9085:tid 9093] [client 4.231.226.99:6063] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aekD9t-_-or9vQnlWnojWgAAAUY"]
[Thu Apr 23 01:23:02.995104 2026] [:error] [pid 9085:tid 9110] [client 4.231.226.99:6087] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aekD9t-_-or9vQnlWnojWwAAAVc"]
[Thu Apr 23 01:23:03.691357 2026] [:error] [pid 23776:tid 23794] [client 4.231.226.99:6019] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aekD97RExf-1pAbSeJtXGAAAAZA"]
[Thu Apr 23 01:23:04.223133 2026] [:error] [pid 9085:tid 9097] [client 4.231.226.99:6042] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aekD-N-_-or9vQnlWnojXgAAAUo"]
[Thu Apr 23 23:47:10.178583 2026] [autoindex:error] [pid 42973:tid 43057] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:47:19.906681 2026] [autoindex:error] [pid 42973:tid 43067] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:47:48.824655 2026] [autoindex:error] [pid 42973:tid 43058] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:47:54.862076 2026] [autoindex:error] [pid 42973:tid 43065] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:08.813659 2026] [autoindex:error] [pid 42973:tid 43064] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:08.990582 2026] [autoindex:error] [pid 42973:tid 43057] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:09.171280 2026] [autoindex:error] [pid 42973:tid 43047] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:20.489743 2026] [autoindex:error] [pid 42973:tid 43056] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:20.662612 2026] [autoindex:error] [pid 42973:tid 43045] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:27.830036 2026] [autoindex:error] [pid 42973:tid 43062] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:27.999070 2026] [autoindex:error] [pid 42973:tid 43053] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:28.164623 2026] [autoindex:error] [pid 42973:tid 43061] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:28.948002 2026] [autoindex:error] [pid 42973:tid 43067] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:29.113902 2026] [autoindex:error] [pid 42973:tid 43043] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:29.292701 2026] [autoindex:error] [pid 42973:tid 43056] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:47.355690 2026] [autoindex:error] [pid 42973:tid 43051] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:47.524540 2026] [autoindex:error] [pid 42973:tid 43055] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:47.895797 2026] [autoindex:error] [pid 42973:tid 43056] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:48.066199 2026] [autoindex:error] [pid 42973:tid 43066] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:54.494721 2026] [autoindex:error] [pid 42973:tid 43045] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:48:54.665895 2026] [autoindex:error] [pid 42973:tid 43052] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:49:13.743381 2026] [autoindex:error] [pid 42973:tid 43060] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:49:30.732579 2026] [autoindex:error] [pid 42973:tid 43057] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:49:31.158504 2026] [autoindex:error] [pid 42973:tid 43047] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:49:54.367654 2026] [autoindex:error] [pid 42973:tid 43065] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:49:54.549550 2026] [autoindex:error] [pid 42973:tid 43057] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:50:24.593836 2026] [autoindex:error] [pid 42973:tid 43063] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:50:33.150785 2026] [autoindex:error] [pid 42973:tid 43063] [client 173.239.218.57:49659] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 00:00:14.544846 2026] [:error] [pid 64998:tid 65020] [client 72.146.10.201:41933] [client 72.146.10.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepCDoV5EysYcTLjmwjh6gAAAdI"]
[Fri Apr 24 00:00:16.050957 2026] [:error] [pid 42973:tid 43048] [client 72.146.10.201:50240] [client 72.146.10.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepCEG6I0QqmmmLTHE1XIAAAAIU"]
[Fri Apr 24 00:00:18.091789 2026] [:error] [pid 65000:tid 65041] [client 72.146.10.201:27588] [client 72.146.10.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepCEr6vRb9j6psK2ZYHdwAAAgg"]
[Fri Apr 24 00:00:20.301849 2026] [:error] [pid 65000:tid 65044] [client 72.146.10.201:40494] [client 72.146.10.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepCFL6vRb9j6psK2ZYHfgAAAgs"]
[Fri Apr 24 02:01:14.620772 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 172.161.55.226:25538] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:01:43.681975 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 172.161.55.226:28616] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:02:14.613405 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 172.161.55.226:36204] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:02:43.052074 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 172.161.55.226:22413] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:03:03.462028 2026] [:error] [pid 46953:tid 46957] [client 172.161.55.226:59720] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wmore1.php"] [unique_id "aepe10nlpdHh-P6wKbp8KAAAAkE"]
[Fri Apr 24 02:03:10.572356 2026] [:error] [pid 42971:tid 43005] [client 172.161.55.226:37649] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wmore1.php"] [unique_id "aepe3jEP2_5RswrH8bFStgAAABM"]
[Fri Apr 24 02:03:13.455206 2026] [:error] [pid 64967:tid 64982] [client 172.161.55.226:33119] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wmore1.php"] [unique_id "aepe4YAV4GfOOdX8QzqabAAAAY0"]
[Fri Apr 24 02:03:15.894940 2026] [:error] [pid 64998:tid 65026] [client 172.161.55.226:17326] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/saorix1.php"] [unique_id "aepe44V5EysYcTLjmwg6GQAAAdg"]
[Fri Apr 24 02:03:20.665365 2026] [:error] [pid 59700:tid 59721] [client 172.161.55.226:35328] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/saorix1.php"] [unique_id "aepe6JXyGZJFeAIDWtl5wAAAAVM"]
[Fri Apr 24 02:03:25.953109 2026] [:error] [pid 42973:tid 43062] [client 172.161.55.226:34149] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/saorix1.php"] [unique_id "aepe7W6I0QqmmmLTHE2HpQAAAJM"]
[Fri Apr 24 02:03:29.810090 2026] [:error] [pid 59700:tid 59723] [client 172.161.55.226:19303] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/saorix1.php"] [unique_id "aepe8ZXyGZJFeAIDWtl5xAAAAVU"]
[Fri Apr 24 02:05:42.400744 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 172.161.55.226:19205] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:06:19.729615 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 172.161.55.226:34308] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:06:43.578665 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 172.161.55.226:43259] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:07:08.949001 2026] [proxy_fcgi:error] [pid 42972:tid 43037] [client 172.161.55.226:26331] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:07:27.835914 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 172.161.55.226:21063] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:07:52.808574 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 172.161.55.226:38396] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:08:11.491800 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 172.161.55.226:35384] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:08:14.760798 2026] [:error] [pid 64998:tid 65020] [client 172.161.55.226:4531] [client 172.161.55.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.makifim.com.au"] [uri "/tiny.php"] [unique_id "aepgDoV5EysYcTLjmwg8OgAAAdI"]
[Fri Apr 24 02:08:38.204846 2026] [:error] [pid 65000:tid 65057] [client 172.161.55.226:26281] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aepgJr6vRb9j6psK2ZaHfQAAAhg"]
[Fri Apr 24 02:08:41.535686 2026] [:error] [pid 46953:tid 46957] [client 172.161.55.226:53223] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aepgKUnlpdHh-P6wKbp8_wAAAkE"]
[Fri Apr 24 02:08:43.773142 2026] [:error] [pid 64998:tid 65017] [client 172.161.55.226:4678] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aepgK4V5EysYcTLjmwg8ggAAAc8"]
[Fri Apr 24 02:08:47.876052 2026] [:error] [pid 43083:tid 43098] [client 172.161.55.226:46745] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "aepgLzC5hrvNXosL83KwtAAAAM0"]
[Fri Apr 24 02:08:50.304227 2026] [:error] [pid 65000:tid 65043] [client 172.161.55.226:17402] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "aepgMr6vRb9j6psK2ZaHlgAAAgo"]
[Fri Apr 24 02:08:53.854930 2026] [:error] [pid 65000:tid 65052] [client 172.161.55.226:4682] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "aepgNb6vRb9j6psK2ZaHqgAAAhM"]
[Fri Apr 24 02:09:00.338383 2026] [:error] [pid 64998:tid 65021] [client 172.161.55.226:42538] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f6.php"] [unique_id "aepgPIV5EysYcTLjmwg8mAAAAdM"]
[Fri Apr 24 02:09:02.920595 2026] [:error] [pid 65000:tid 65053] [client 172.161.55.226:53200] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/roksad1.php"] [unique_id "aepgPr6vRb9j6psK2ZaHwwAAAhQ"]
[Fri Apr 24 02:09:04.735815 2026] [:error] [pid 42973:tid 43048] [client 172.161.55.226:26246] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/roksad1.php"] [unique_id "aepgQG6I0QqmmmLTHE2JDgAAAIU"]
[Fri Apr 24 02:09:09.200995 2026] [:error] [pid 65000:tid 65039] [client 172.161.55.226:4673] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/roksad1.php"] [unique_id "aepgRb6vRb9j6psK2ZaH1AAAAgY"]
[Fri Apr 24 02:09:17.978930 2026] [:error] [pid 42971:tid 42999] [client 172.161.55.226:27064] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fone1.php"] [unique_id "aepgTTEP2_5RswrH8bFTNAAAAA0"]
[Fri Apr 24 02:09:20.661862 2026] [:error] [pid 42973:tid 43066] [client 172.161.55.226:17372] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fone1.php"] [unique_id "aepgUG6I0QqmmmLTHE2JIQAAAJc"]
[Fri Apr 24 02:09:22.522314 2026] [:error] [pid 59700:tid 59722] [client 172.161.55.226:4877] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fone1.php"] [unique_id "aepgUpXyGZJFeAIDWtl6wAAAAVQ"]
[Fri Apr 24 02:09:24.196009 2026] [:error] [pid 46953:tid 46960] [client 172.161.55.226:18893] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fone1.php"] [unique_id "aepgVEnlpdHh-P6wKbp9CwAAAkQ"]
[Fri Apr 24 02:10:03.074720 2026] [proxy_fcgi:error] [pid 25635:tid 25649] [client 172.161.55.226:34961] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:10:54.815607 2026] [proxy_fcgi:error] [pid 42973:tid 43054] [client 172.161.55.226:30756] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:11:28.367896 2026] [:error] [pid 46953:tid 46980] [client 172.161.55.226:36219] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aepg0EnlpdHh-P6wKbp9WgAAAlc"]
[Fri Apr 24 02:11:36.749314 2026] [:error] [pid 46953:tid 46964] [client 172.161.55.226:16531] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "aepg2EnlpdHh-P6wKbp9XAAAAkg"]
[Fri Apr 24 02:11:47.093152 2026] [:error] [pid 42973:tid 43055] [client 172.161.55.226:5101] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/view.php"] [unique_id "aepg426I0QqmmmLTHE2JsgAAAIw"]
[Fri Apr 24 02:11:51.195950 2026] [:error] [pid 64967:tid 64983] [client 172.161.55.226:16539] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/view.php"] [unique_id "aepg54AV4GfOOdX8QzqbLgAAAY4"]
[Fri Apr 24 02:11:58.740581 2026] [:error] [pid 64967:tid 64971] [client 172.161.55.226:33044] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/view.php"] [unique_id "aepg7oAV4GfOOdX8QzqbLwAAAYI"]
[Fri Apr 24 02:12:01.059846 2026] [:error] [pid 64998:tid 65011] [client 172.161.55.226:32613] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cilus.php"] [unique_id "aepg8YV5EysYcTLjmwg-PgAAAck"]
[Fri Apr 24 02:12:04.670648 2026] [:error] [pid 42972:tid 43036] [client 172.161.55.226:18552] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cilus.php"] [unique_id "aepg9MOAb-3sOknsk4fKdwAAAFQ"]
[Fri Apr 24 02:12:12.957557 2026] [:error] [pid 42972:tid 43017] [client 172.161.55.226:32596] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cilus.php"] [unique_id "aepg_MOAb-3sOknsk4fKewAAAEE"]
[Fri Apr 24 02:12:15.639023 2026] [:error] [pid 65000:tid 65031] [client 172.161.55.226:37646] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cilus.php"] [unique_id "aepg_76vRb9j6psK2ZaJjwAAAgI"]
[Fri Apr 24 02:12:18.430369 2026] [:error] [pid 42973:tid 43057] [client 172.161.55.226:37600] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aephAm6I0QqmmmLTHE2JzQAAAI4"]
[Fri Apr 24 02:12:20.655895 2026] [:error] [pid 42972:tid 43020] [client 172.161.55.226:19666] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aephBMOAb-3sOknsk4fKgwAAAEQ"]
[Fri Apr 24 02:12:22.449500 2026] [:error] [pid 42973:tid 43048] [client 172.161.55.226:33826] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aephBm6I0QqmmmLTHE2J0QAAAIU"]
[Fri Apr 24 02:12:24.376446 2026] [:error] [pid 65000:tid 65044] [client 172.161.55.226:37653] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "aephCL6vRb9j6psK2ZaJmwAAAgs"]
[Fri Apr 24 02:12:47.964403 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 172.161.55.226:33810] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:12:53.306140 2026] [:error] [pid 64998:tid 65003] [client 172.161.55.226:18500] [client 172.161.55.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aephJYV5EysYcTLjmwg-egAAAcE"]
[Fri Apr 24 02:13:37.332036 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 172.161.55.226:46695] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:14:04.263729 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 172.161.55.226:32525] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:14:20.243840 2026] [:error] [pid 42971:tid 42990] [client 172.161.55.226:4727] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aephfDEP2_5RswrH8bFTpgAAAAQ"]
[Fri Apr 24 02:14:22.153034 2026] [:error] [pid 46953:tid 46957] [client 172.161.55.226:4390] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aephfknlpdHh-P6wKbp96AAAAkE"]
[Fri Apr 24 02:14:25.435863 2026] [:error] [pid 59700:tid 59711] [client 172.161.55.226:42895] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aephgZXyGZJFeAIDWtl71wAAAUk"]
[Fri Apr 24 02:14:31.329992 2026] [:error] [pid 64998:tid 65007] [client 172.161.55.226:32119] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fs.php"] [unique_id "aephh4V5EysYcTLjmwg-ygAAAcU"]
[Fri Apr 24 02:14:34.375716 2026] [:error] [pid 65000:tid 65056] [client 172.161.55.226:38664] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/packsin1.php"] [unique_id "aephir6vRb9j6psK2ZaKcAAAAhc"]
[Fri Apr 24 02:14:35.889862 2026] [:error] [pid 65000:tid 65042] [client 172.161.55.226:38670] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/packsin1.php"] [unique_id "aephi76vRb9j6psK2ZaKdwAAAgk"]
[Fri Apr 24 02:14:43.702620 2026] [:error] [pid 64967:tid 64989] [client 172.161.55.226:21015] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/packsin1.php"] [unique_id "aephk4AV4GfOOdX8QzqbgAAAAZQ"]
[Fri Apr 24 02:14:47.858953 2026] [:error] [pid 64998:tid 65018] [client 172.161.55.226:21688] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xs.php"] [unique_id "aephl4V5EysYcTLjmwg-0gAAAdA"]
[Fri Apr 24 02:14:50.825474 2026] [:error] [pid 59700:tid 59703] [client 172.161.55.226:17674] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xs.php"] [unique_id "aephmpXyGZJFeAIDWtl77AAAAUE"]
[Fri Apr 24 02:14:53.037825 2026] [:error] [pid 46953:tid 46959] [client 172.161.55.226:19239] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xs.php"] [unique_id "aephnUnlpdHh-P6wKbp-CQAAAkM"]
[Fri Apr 24 02:14:53.825000 2026] [:error] [pid 43083:tid 43086] [client 172.161.55.226:34316] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xs.php"] [unique_id "aephnTC5hrvNXosL83KxbQAAAME"]
[Fri Apr 24 02:14:55.440081 2026] [:error] [pid 42972:tid 43019] [client 172.161.55.226:4782] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/img.php"] [unique_id "aephn8OAb-3sOknsk4fLZAAAAEM"]
[Fri Apr 24 02:15:00.431180 2026] [:error] [pid 46953:tid 46959] [client 172.161.55.226:44517] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/img.php"] [unique_id "aephpEnlpdHh-P6wKbp-FQAAAkM"]
[Fri Apr 24 02:15:05.598717 2026] [:error] [pid 46953:tid 46962] [client 172.161.55.226:37975] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/img.php"] [unique_id "aephqUnlpdHh-P6wKbp-GgAAAkY"]
[Fri Apr 24 02:15:52.027160 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 172.161.55.226:38065] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:16:33.168010 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 172.161.55.226:30140] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:17:05.848149 2026] [proxy_fcgi:error] [pid 64967:tid 64989] [client 172.161.55.226:26694] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:17:14.257478 2026] [proxy_fcgi:error] [pid 42973:tid 43052] [client 172.161.55.226:53702] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 02:17:39.040868 2026] [:error] [pid 43083:tid 43106] [client 172.161.55.226:26366] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/son1.php"] [unique_id "aepiQzC5hrvNXosL83Kx9wAAANU"]
[Fri Apr 24 02:17:41.140925 2026] [:error] [pid 42972:tid 43018] [client 172.161.55.226:4562] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/son1.php"] [unique_id "aepiRcOAb-3sOknsk4fMVgAAAEI"]
[Fri Apr 24 02:17:49.860560 2026] [:error] [pid 65000:tid 65047] [client 172.161.55.226:26695] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/son1.php"] [unique_id "aepiTb6vRb9j6psK2ZaNKQAAAg4"]
[Fri Apr 24 02:17:56.065868 2026] [:error] [pid 64998:tid 65013] [client 172.161.55.226:64237] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "aepiVIV5EysYcTLjmwhAfwAAAcs"]
[Fri Apr 24 02:18:00.119283 2026] [:error] [pid 65000:tid 65038] [client 172.161.55.226:35764] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "aepiWL6vRb9j6psK2ZaNQQAAAgU"]
[Fri Apr 24 02:18:02.892979 2026] [:error] [pid 64998:tid 65017] [client 172.161.55.226:42924] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "aepiWoV5EysYcTLjmwhAnwAAAc8"]
[Fri Apr 24 02:18:05.896842 2026] [:error] [pid 65000:tid 65047] [client 172.161.55.226:38707] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tx79.php"] [unique_id "aepiXb6vRb9j6psK2ZaNTQAAAg4"]
[Fri Apr 24 02:18:09.451765 2026] [:error] [pid 65000:tid 65051] [client 172.161.55.226:38678] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aepiYb6vRb9j6psK2ZaNaAAAAhI"]
[Fri Apr 24 02:18:15.149252 2026] [:error] [pid 42973:tid 43047] [client 172.161.55.226:46668] [client 172.161.55.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aepiZ26I0QqmmmLTHE2K2QAAAIQ"]
[Fri Apr 24 04:45:10.492546 2026] [proxy_fcgi:error] [pid 19101:tid 19146] [client 51.103.174.167:42277] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:45:26.159078 2026] [proxy_fcgi:error] [pid 19102:tid 19165] [client 51.103.174.167:32147] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:45:45.031414 2026] [proxy_fcgi:error] [pid 52129:tid 52147] [client 51.103.174.167:51541] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:45:58.670189 2026] [:error] [pid 19100:tid 19124] [client 51.103.174.167:41058] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aeqFBrF_hzQs4Cqbiffx1QAAAA4"]
[Fri Apr 24 04:46:03.146169 2026] [:error] [pid 19102:tid 19168] [client 51.103.174.167:30906] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aeqFCwDSgrbLEZbkqD6fjQAAAIQ"]
[Fri Apr 24 04:46:03.944398 2026] [:error] [pid 19101:tid 19139] [client 51.103.174.167:29135] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aeqFC2AHj9bEvrTgbO21aAAAAEI"]
[Fri Apr 24 04:46:05.380930 2026] [:error] [pid 52129:tid 52155] [client 51.103.174.167:32643] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "aeqFDeKCZKf8_u2LKiAkbQAAARY"]
[Fri Apr 24 04:46:07.090275 2026] [:error] [pid 19102:tid 19175] [client 51.103.174.167:5699] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aeqFDwDSgrbLEZbkqD6fuwAAAIs"]
[Fri Apr 24 04:46:08.564596 2026] [:error] [pid 19100:tid 19124] [client 51.103.174.167:29228] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aeqFELF_hzQs4Cqbiffx9AAAAA4"]
[Fri Apr 24 04:46:10.172887 2026] [:error] [pid 19200:tid 19213] [client 51.103.174.167:44455] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aeqFEjQ--M3-tsKAnhFyTgAAAMU"]
[Fri Apr 24 04:46:12.440938 2026] [:error] [pid 19100:tid 19124] [client 51.103.174.167:30403] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "aeqFFLF_hzQs4CqbiffyBQAAAA4"]
[Fri Apr 24 04:46:13.605484 2026] [:error] [pid 52129:tid 52153] [client 51.103.174.167:5532] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aeqFFeKCZKf8_u2LKiAklAAAARQ"]
[Fri Apr 24 04:46:14.776717 2026] [:error] [pid 19100:tid 19129] [client 51.103.174.167:42661] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aeqFFrF_hzQs4CqbiffyEwAAABM"]
[Fri Apr 24 04:46:15.545456 2026] [:error] [pid 52129:tid 52153] [client 51.103.174.167:38589] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aeqFF-KCZKf8_u2LKiAkoAAAARQ"]
[Fri Apr 24 04:46:16.474659 2026] [:error] [pid 52129:tid 52136] [client 51.103.174.167:5837] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "aeqFGOKCZKf8_u2LKiAkqAAAAQM"]
[Fri Apr 24 04:46:17.439602 2026] [:error] [pid 52129:tid 52153] [client 51.103.174.167:42647] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aeqFGeKCZKf8_u2LKiAksQAAARQ"]
[Fri Apr 24 04:46:18.965293 2026] [:error] [pid 52129:tid 52133] [client 51.103.174.167:47066] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aeqFGuKCZKf8_u2LKiAkuAAAAQA"]
[Fri Apr 24 04:46:20.256180 2026] [:error] [pid 52129:tid 52152] [client 51.103.174.167:5546] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aeqFHOKCZKf8_u2LKiAkvgAAARM"]
[Fri Apr 24 04:46:20.798387 2026] [:error] [pid 19100:tid 19121] [client 51.103.174.167:39146] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "aeqFHLF_hzQs4CqbiffyIgAAAAs"]
[Fri Apr 24 04:46:21.787889 2026] [:error] [pid 19100:tid 19113] [client 51.103.174.167:30463] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeqFHbF_hzQs4CqbiffyJwAAAAQ"]
[Fri Apr 24 04:46:22.697784 2026] [:error] [pid 19200:tid 19210] [client 51.103.174.167:5534] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeqFHjQ--M3-tsKAnhFyYQAAAMI"]
[Fri Apr 24 04:46:23.509378 2026] [:error] [pid 19200:tid 19223] [client 51.103.174.167:5564] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeqFHzQ--M3-tsKAnhFyZgAAAM8"]
[Fri Apr 24 04:46:24.202358 2026] [:error] [pid 52129:tid 52138] [client 51.103.174.167:44426] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aeqFIOKCZKf8_u2LKiAk0AAAAQU"]
[Fri Apr 24 04:46:25.352150 2026] [:error] [pid 52129:tid 52149] [client 51.103.174.167:34827] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeqFIeKCZKf8_u2LKiAk1wAAARA"]
[Fri Apr 24 04:46:26.181723 2026] [:error] [pid 52129:tid 52157] [client 51.103.174.167:52140] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeqFIuKCZKf8_u2LKiAk3gAAARg"]
[Fri Apr 24 04:46:26.780292 2026] [:error] [pid 52129:tid 52134] [client 51.103.174.167:52102] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeqFIuKCZKf8_u2LKiAk5AAAAQE"]
[Fri Apr 24 04:46:27.762159 2026] [:error] [pid 19200:tid 19222] [client 51.103.174.167:52155] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "aeqFIzQ--M3-tsKAnhFyegAAAM4"]
[Fri Apr 24 04:46:28.509916 2026] [:error] [pid 19100:tid 19126] [client 51.103.174.167:57202] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aeqFJLF_hzQs4CqbiffyOAAAABA"]
[Fri Apr 24 04:46:29.336764 2026] [:error] [pid 52129:tid 52135] [client 51.103.174.167:31257] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aeqFJeKCZKf8_u2LKiAk9QAAAQI"]
[Fri Apr 24 04:46:30.066506 2026] [:error] [pid 52129:tid 52153] [client 51.103.174.167:5869] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aeqFJuKCZKf8_u2LKiAk_AAAARQ"]
[Fri Apr 24 04:46:32.930135 2026] [:error] [pid 19200:tid 19230] [client 51.103.174.167:57167] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/auth.php"] [unique_id "aeqFKDQ--M3-tsKAnhFyjAAAANY"]
[Fri Apr 24 04:46:35.884062 2026] [:error] [pid 19102:tid 19175] [client 51.103.174.167:52149] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqFKwDSgrbLEZbkqD6gPgAAAIs"]
[Fri Apr 24 04:46:38.624543 2026] [:error] [pid 19200:tid 19228] [client 51.103.174.167:57201] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqFLjQ--M3-tsKAnhFykgAAANQ"]
[Fri Apr 24 04:46:41.296183 2026] [:error] [pid 52129:tid 52140] [client 51.103.174.167:57184] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqFMeKCZKf8_u2LKiAlIwAAAQc"]
[Fri Apr 24 04:46:42.453434 2026] [:error] [pid 52129:tid 52154] [client 51.103.174.167:57153] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqFMuKCZKf8_u2LKiAlKQAAARU"]
[Fri Apr 24 04:46:46.612308 2026] [:error] [pid 52129:tid 52153] [client 51.103.174.167:47055] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeqFNuKCZKf8_u2LKiAlLQAAARQ"]
[Fri Apr 24 04:46:48.256388 2026] [:error] [pid 19100:tid 19120] [client 51.103.174.167:5246] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeqFOLF_hzQs4CqbiffyXQAAAAo"]
[Fri Apr 24 04:46:49.244615 2026] [:error] [pid 52129:tid 52153] [client 51.103.174.167:5701] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "aeqFOeKCZKf8_u2LKiAlPAAAARQ"]
[Fri Apr 24 04:47:16.183213 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 51.103.174.167:33168] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:47:30.153786 2026] [proxy_fcgi:error] [pid 52129:tid 52146] [client 51.103.174.167:61957] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:47:39.387178 2026] [proxy_fcgi:error] [pid 19102:tid 19177] [client 51.103.174.167:5396] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:47:58.463604 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 51.103.174.167:50406] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:48:12.915727 2026] [:error] [pid 19102:tid 19175] [client 51.103.174.167:41853] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeqFjADSgrbLEZbkqD6hZwAAAIs"]
[Fri Apr 24 04:48:14.509712 2026] [:error] [pid 52129:tid 52136] [client 51.103.174.167:46493] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeqFjuKCZKf8_u2LKiAmpQAAAQM"]
[Fri Apr 24 04:48:16.301857 2026] [:error] [pid 52129:tid 52135] [client 51.103.174.167:46514] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeqFkOKCZKf8_u2LKiAmsAAAAQI"]
[Fri Apr 24 04:48:19.983739 2026] [:error] [pid 52129:tid 52156] [client 51.103.174.167:34799] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aeqFk-KCZKf8_u2LKiAm0wAAARc"]
[Fri Apr 24 04:48:22.466512 2026] [:error] [pid 19101:tid 19145] [client 51.103.174.167:60287] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeqFlmAHj9bEvrTgbO22bwAAAEg"]
[Fri Apr 24 04:48:24.902330 2026] [:error] [pid 19102:tid 19180] [client 51.103.174.167:33722] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeqFmADSgrbLEZbkqD6hcgAAAJA"]
[Fri Apr 24 04:48:28.869204 2026] [:error] [pid 19102:tid 19169] [client 51.103.174.167:36892] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeqFnADSgrbLEZbkqD6hggAAAIU"]
[Fri Apr 24 04:48:32.064451 2026] [:error] [pid 19102:tid 19185] [client 51.103.174.167:5472] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aeqFoADSgrbLEZbkqD6hkgAAAJU"]
[Fri Apr 24 04:48:33.238680 2026] [:error] [pid 19200:tid 19210] [client 51.103.174.167:39910] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "aeqFoTQ--M3-tsKAnhF0JgAAAMI"]
[Fri Apr 24 04:48:36.529807 2026] [:error] [pid 19200:tid 19229] [client 51.103.174.167:34757] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "aeqFpDQ--M3-tsKAnhF0RQAAANU"]
[Fri Apr 24 04:48:40.767638 2026] [:error] [pid 19200:tid 19229] [client 51.103.174.167:52043] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "aeqFqDQ--M3-tsKAnhF0XgAAANU"]
[Fri Apr 24 04:48:41.961903 2026] [:error] [pid 19101:tid 19154] [client 51.103.174.167:38664] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "aeqFqWAHj9bEvrTgbO22lgAAAFE"]
[Fri Apr 24 04:48:48.183551 2026] [:error] [pid 52129:tid 52156] [client 51.103.174.167:36885] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aeqFsOKCZKf8_u2LKiAnTAAAARc"]
[Fri Apr 24 04:48:54.595001 2026] [:error] [pid 19100:tid 19115] [client 51.103.174.167:52034] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "aeqFtrF_hzQs4CqbiffzOwAAAAY"]
[Fri Apr 24 04:49:00.188097 2026] [:error] [pid 19200:tid 19213] [client 51.103.174.167:36521] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeqFvDQ--M3-tsKAnhF0tgAAAMU"]
[Fri Apr 24 04:49:02.730137 2026] [:error] [pid 19100:tid 19121] [client 51.103.174.167:42251] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeqFvrF_hzQs4CqbiffzVwAAAAs"]
[Fri Apr 24 04:49:04.405330 2026] [:error] [pid 19100:tid 19129] [client 51.103.174.167:28441] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeqFwLF_hzQs4CqbiffzXwAAABM"]
[Fri Apr 24 04:49:05.827970 2026] [:error] [pid 19200:tid 19209] [client 51.103.174.167:29533] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "aeqFwTQ--M3-tsKAnhF00gAAAME"]
[Fri Apr 24 04:49:07.598468 2026] [:error] [pid 52129:tid 52156] [client 51.103.174.167:29950] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeqFw-KCZKf8_u2LKiAnpQAAARc"]
[Fri Apr 24 04:49:09.554368 2026] [:error] [pid 19102:tid 19174] [client 51.103.174.167:29971] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "aeqFxQDSgrbLEZbkqD6h3wAAAIo"]
[Fri Apr 24 04:49:33.699419 2026] [proxy_fcgi:error] [pid 19100:tid 19133] [client 51.103.174.167:33109] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:49:48.368312 2026] [proxy_fcgi:error] [pid 52129:tid 52134] [client 51.103.174.167:5995] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:50:04.860965 2026] [proxy_fcgi:error] [pid 52129:tid 52147] [client 51.103.174.167:43573] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:50:18.596840 2026] [:error] [pid 19200:tid 19210] [client 51.103.174.167:38611] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aeqGCjQ--M3-tsKAnhF16gAAAMI"]
[Fri Apr 24 04:50:20.051330 2026] [:error] [pid 19102:tid 19188] [client 51.103.174.167:44842] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aeqGDADSgrbLEZbkqD6itgAAAJg"]
[Fri Apr 24 04:50:25.247640 2026] [:error] [pid 19101:tid 19145] [client 51.103.174.167:39468] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aeqGEWAHj9bEvrTgbO24LgAAAEg"]
[Fri Apr 24 04:50:31.969829 2026] [:error] [pid 19102:tid 19184] [client 51.103.174.167:42584] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "aeqGFwDSgrbLEZbkqD6i5gAAAJQ"]
[Fri Apr 24 04:50:38.432432 2026] [:error] [pid 19101:tid 19158] [client 51.103.174.167:50440] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "aeqGHmAHj9bEvrTgbO24QwAAAFU"]
[Fri Apr 24 04:50:43.367167 2026] [:error] [pid 19200:tid 19219] [client 51.103.174.167:39483] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "aeqGIzQ--M3-tsKAnhF2egAAAMs"]
[Fri Apr 24 04:50:46.472424 2026] [:error] [pid 52129:tid 52133] [client 51.103.174.167:50454] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "aeqGJuKCZKf8_u2LKiAppgAAAQA"]
[Fri Apr 24 04:50:48.840439 2026] [:error] [pid 19101:tid 19138] [client 51.103.174.167:31266] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp1.php"] [unique_id "aeqGKGAHj9bEvrTgbO24WAAAAEE"]
[Fri Apr 24 04:50:53.552736 2026] [:error] [pid 19200:tid 19217] [client 51.103.174.167:5609] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp1.php"] [unique_id "aeqGLTQ--M3-tsKAnhF2qQAAAMk"]
[Fri Apr 24 04:50:58.375625 2026] [:error] [pid 52129:tid 52146] [client 51.103.174.167:55740] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp1.php"] [unique_id "aeqGMuKCZKf8_u2LKiApzgAAAQ0"]
[Fri Apr 24 04:50:59.712453 2026] [:error] [pid 19200:tid 19223] [client 51.103.174.167:5552] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp1.php"] [unique_id "aeqGMzQ--M3-tsKAnhF2ygAAAM8"]
[Fri Apr 24 04:51:00.822421 2026] [:error] [pid 19200:tid 19214] [client 51.103.174.167:5535] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "aeqGNDQ--M3-tsKAnhF2zAAAAMY"]
[Fri Apr 24 04:51:02.261504 2026] [:error] [pid 19101:tid 19155] [client 51.103.174.167:45193] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "aeqGNmAHj9bEvrTgbO24ZwAAAFI"]
[Fri Apr 24 04:51:05.966589 2026] [:error] [pid 19102:tid 19167] [client 51.103.174.167:35352] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "aeqGOQDSgrbLEZbkqD6jPgAAAIM"]
[Fri Apr 24 04:51:10.319892 2026] [:error] [pid 19200:tid 19230] [client 51.103.174.167:40888] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acc.php"] [unique_id "aeqGPjQ--M3-tsKAnhF2zwAAANY"]
[Fri Apr 24 04:51:14.497452 2026] [:error] [pid 19102:tid 19164] [client 51.103.174.167:56524] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asasx.php"] [unique_id "aeqGQgDSgrbLEZbkqD6jUQAAAIA"]
[Fri Apr 24 04:51:42.851833 2026] [proxy_fcgi:error] [pid 52129:tid 52146] [client 51.103.174.167:32140] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:51:59.782098 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 51.103.174.167:45182] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 04:52:21.486177 2026] [:error] [pid 19102:tid 19169] [client 51.103.174.167:5166] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aeqGhQDSgrbLEZbkqD6j2gAAAIU"]
[Fri Apr 24 04:52:23.761106 2026] [:error] [pid 52129:tid 52134] [client 51.103.174.167:29595] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aeqGh-KCZKf8_u2LKiAq0gAAAQE"]
[Fri Apr 24 04:52:27.109636 2026] [:error] [pid 19101:tid 19157] [client 51.103.174.167:42269] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aeqGi2AHj9bEvrTgbO24zQAAAFQ"]
[Fri Apr 24 04:52:29.157738 2026] [:error] [pid 52129:tid 52133] [client 51.103.174.167:5791] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shop.php"] [unique_id "aeqGjeKCZKf8_u2LKiAq3gAAAQA"]
[Fri Apr 24 04:52:32.866272 2026] [:error] [pid 19101:tid 19154] [client 51.103.174.167:49907] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aeqGkGAHj9bEvrTgbO241wAAAFE"]
[Fri Apr 24 04:52:41.501371 2026] [:error] [pid 19200:tid 19226] [client 51.103.174.167:49893] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aeqGmTQ--M3-tsKAnhF3jAAAANI"]
[Fri Apr 24 04:52:43.251453 2026] [:error] [pid 19100:tid 19128] [client 51.103.174.167:49858] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "aeqGm7F_hzQs4Cqbiff0vQAAABI"]
[Fri Apr 24 04:52:46.661055 2026] [:error] [pid 19100:tid 19113] [client 51.103.174.167:42277] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aeqGnrF_hzQs4Cqbiff0xQAAAAQ"]
[Fri Apr 24 04:52:47.928297 2026] [:error] [pid 19100:tid 19128] [client 51.103.174.167:40817] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aeqGn7F_hzQs4Cqbiff0ygAAABI"]
[Fri Apr 24 04:52:50.537290 2026] [:error] [pid 19101:tid 19149] [client 51.103.174.167:5158] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aeqGomAHj9bEvrTgbO25AwAAAEw"]
[Fri Apr 24 04:52:53.959346 2026] [:error] [pid 19101:tid 19138] [client 51.103.174.167:56613] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "aeqGpWAHj9bEvrTgbO25DwAAAEE"]
[Fri Apr 24 04:52:56.079419 2026] [:error] [pid 52129:tid 52139] [client 51.103.174.167:45779] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aeqGqOKCZKf8_u2LKiArDAAAAQY"]
[Fri Apr 24 04:52:57.992574 2026] [:error] [pid 19102:tid 19181] [client 51.103.174.167:36584] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aeqGqQDSgrbLEZbkqD6kHwAAAJE"]
[Fri Apr 24 04:53:01.490846 2026] [:error] [pid 52129:tid 52145] [client 51.103.174.167:36551] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aeqGreKCZKf8_u2LKiArLQAAAQw"]
[Fri Apr 24 04:53:04.277773 2026] [:error] [pid 19101:tid 19161] [client 51.103.174.167:59836] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "aeqGsGAHj9bEvrTgbO25HwAAAFg"]
[Fri Apr 24 04:53:12.321412 2026] [:error] [pid 19100:tid 19125] [client 51.103.174.167:44782] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aeqGuLF_hzQs4Cqbiff09AAAAA8"]
[Fri Apr 24 04:53:16.923214 2026] [:error] [pid 19101:tid 19145] [client 51.103.174.167:38150] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "aeqGvGAHj9bEvrTgbO25OwAAAEg"]
[Fri Apr 24 04:53:42.665122 2026] [proxy_fcgi:error] [pid 19101:tid 19161] [client 51.103.174.167:5502] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 10:32:04.526339 2026] [:error] [pid 17721:tid 17782] [client 194.26.192.182:59426] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aerWJOFXXkLeyDnfk_96vAAAAAE"]
[Fri Apr 24 10:32:05.028619 2026] [:error] [pid 22114:tid 22127] [client 194.26.192.182:59532] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aerWJYAuWGz3WlMQjodp6wAAAQo"]
[Fri Apr 24 10:32:05.535328 2026] [:error] [pid 17808:tid 17812] [client 194.26.192.182:59699] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aerWJearbOEFI8qshvI7-AAAAEI"]
[Fri Apr 24 10:32:06.052247 2026] [:error] [pid 22114:tid 22124] [client 194.26.192.182:59993] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aerWJoAuWGz3WlMQjodp-wAAAQc"]
[Fri Apr 24 10:32:06.555321 2026] [:error] [pid 17719:tid 17736] [client 194.26.192.182:60322] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aerWJsTZ9gzEyL1BkPrHXgAAAIk"]
[Fri Apr 24 15:29:46.954090 2026] [autoindex:error] [pid 17720:tid 17757] [client 164.68.118.19:59756] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 24 19:51:32.832923 2026] [proxy_fcgi:error] [pid 17808:tid 17815] [client 135.225.72.245:11653] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:51:45.955882 2026] [proxy_fcgi:error] [pid 17720:tid 17769] [client 135.225.72.245:11726] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:52:10.102682 2026] [proxy_fcgi:error] [pid 4177:tid 4186] [client 135.225.72.245:11673] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:52:10.696874 2026] [proxy_fcgi:error] [pid 4177:tid 4201] [client 135.225.72.245:11658] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:52:33.991131 2026] [:error] [pid 17719:tid 17739] [client 135.225.72.245:11679] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aetZgcTZ9gzEyL1BkPqgdwAAAIw"]
[Fri Apr 24 19:52:34.601415 2026] [:error] [pid 22114:tid 22123] [client 135.225.72.245:11751] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aetZgoAuWGz3WlMQjofjgwAAAQY"]
[Fri Apr 24 19:52:36.235025 2026] [:error] [pid 17721:tid 17801] [client 135.225.72.245:11678] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aetZhOFXXkLeyDnfk_8v0AAAABQ"]
[Fri Apr 24 19:52:39.114602 2026] [:error] [pid 4177:tid 4195] [client 135.225.72.245:11674] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/66.php"] [unique_id "aetZh32asKnvdrSe0x7sgAAAAYo"]
[Fri Apr 24 19:52:39.684421 2026] [:error] [pid 4177:tid 4202] [client 135.225.72.245:11673] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aetZh32asKnvdrSe0x7shAAAAZE"]
[Fri Apr 24 19:52:40.266189 2026] [:error] [pid 17720:tid 17773] [client 135.225.72.245:11714] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aetZiOhlUs6BS3Ng7_WPrgAAANM"]
[Fri Apr 24 19:52:40.851959 2026] [:error] [pid 17720:tid 17771] [client 135.225.72.245:11760] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aetZiOhlUs6BS3Ng7_WPsgAAANE"]
[Fri Apr 24 19:52:41.402175 2026] [:error] [pid 4177:tid 4196] [client 135.225.72.245:11736] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-the.php"] [unique_id "aetZiX2asKnvdrSe0x7siQAAAYs"]
[Fri Apr 24 19:52:42.115996 2026] [:error] [pid 4177:tid 4204] [client 135.225.72.245:11770] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aetZin2asKnvdrSe0x7sjwAAAZM"]
[Fri Apr 24 19:52:42.764844 2026] [:error] [pid 17720:tid 17767] [client 135.225.72.245:11774] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aetZiuhlUs6BS3Ng7_WPugAAAM0"]
[Fri Apr 24 19:52:43.335859 2026] [:error] [pid 17721:tid 17787] [client 135.225.72.245:11757] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aetZi-FXXkLeyDnfk_8v1AAAAAY"]
[Fri Apr 24 19:52:43.895930 2026] [:error] [pid 17721:tid 17781] [client 135.225.72.245:11747] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aetZi-FXXkLeyDnfk_8v1gAAAAA"]
[Fri Apr 24 19:52:44.539545 2026] [:error] [pid 4177:tid 4193] [client 135.225.72.245:11716] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aetZjH2asKnvdrSe0x7skwAAAYg"]
[Fri Apr 24 19:52:45.122308 2026] [:error] [pid 17719:tid 17748] [client 135.225.72.245:11729] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aetZjcTZ9gzEyL1BkPqgiwAAAJU"]
[Fri Apr 24 19:52:45.680575 2026] [:error] [pid 17808:tid 17812] [client 135.225.72.245:11727] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aetZjearbOEFI8qshvIlsgAAAEI"]
[Fri Apr 24 19:52:46.237006 2026] [:error] [pid 4177:tid 4195] [client 135.225.72.245:11656] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aetZjn2asKnvdrSe0x7snQAAAYo"]
[Fri Apr 24 19:52:46.810205 2026] [:error] [pid 4177:tid 4189] [client 135.225.72.245:11737] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aetZjn2asKnvdrSe0x7soQAAAYQ"]
[Fri Apr 24 19:52:47.491045 2026] [:error] [pid 4177:tid 4204] [client 135.225.72.245:11693] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aetZj32asKnvdrSe0x7spwAAAZM"]
[Fri Apr 24 19:52:48.800856 2026] [:error] [pid 4177:tid 4189] [client 135.225.72.245:11720] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aetZkH2asKnvdrSe0x7srwAAAYQ"]
[Fri Apr 24 19:52:51.673744 2026] [:error] [pid 17721:tid 17783] [client 135.225.72.245:11654] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aetZk-FXXkLeyDnfk_8v2wAAAAI"]
[Fri Apr 24 19:52:52.305846 2026] [:error] [pid 17720:tid 17764] [client 135.225.72.245:11768] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aetZlOhlUs6BS3Ng7_WPxwAAAMo"]
[Fri Apr 24 19:52:52.838388 2026] [:error] [pid 4177:tid 4198] [client 135.225.72.245:11743] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aetZlH2asKnvdrSe0x7stwAAAY0"]
[Fri Apr 24 19:52:53.534013 2026] [:error] [pid 4177:tid 4186] [client 135.225.72.245:11763] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aetZlX2asKnvdrSe0x7suwAAAYE"]
[Fri Apr 24 19:52:54.187246 2026] [:error] [pid 4177:tid 4185] [client 135.225.72.245:3059] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aetZln2asKnvdrSe0x7svAAAAYA"]
[Fri Apr 24 19:52:55.460181 2026] [:error] [pid 4177:tid 4196] [client 135.225.72.245:11671] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aetZl32asKnvdrSe0x7sxwAAAYs"]
[Fri Apr 24 19:52:56.040657 2026] [:error] [pid 4177:tid 4185] [client 135.225.72.245:11688] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aetZmH2asKnvdrSe0x7szQAAAYA"]
[Fri Apr 24 19:52:56.598070 2026] [:error] [pid 4177:tid 4193] [client 135.225.72.245:11772] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aetZmH2asKnvdrSe0x7s0wAAAYg"]
[Fri Apr 24 19:52:57.266163 2026] [:error] [pid 17808:tid 17833] [client 135.225.72.245:11690] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aetZmearbOEFI8qshvIlzgAAAFc"]
[Fri Apr 24 19:52:57.809506 2026] [:error] [pid 17808:tid 17834] [client 135.225.72.245:11672] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "aetZmearbOEFI8qshvIl0gAAAFg"]
[Fri Apr 24 19:52:58.347959 2026] [:error] [pid 4177:tid 4190] [client 135.225.72.245:11651] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "aetZmn2asKnvdrSe0x7s4wAAAYU"]
[Fri Apr 24 19:52:58.890373 2026] [:error] [pid 17808:tid 17813] [client 135.225.72.245:11669] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "aetZmuarbOEFI8qshvIl2gAAAEM"]
[Fri Apr 24 19:52:59.439793 2026] [:error] [pid 4177:tid 4192] [client 135.225.72.245:11765] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-png.php"] [unique_id "aetZm32asKnvdrSe0x7s6gAAAYc"]
[Fri Apr 24 19:52:59.978174 2026] [:error] [pid 17720:tid 17769] [client 135.225.72.245:11663] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aetZm-hlUs6BS3Ng7_WPzwAAAM8"]
[Fri Apr 24 19:53:00.586966 2026] [:error] [pid 22114:tid 22141] [client 135.225.72.245:11748] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aetZnIAuWGz3WlMQjofjlgAAARg"]
[Fri Apr 24 19:53:01.237896 2026] [:error] [pid 17808:tid 17832] [client 135.225.72.245:3019] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aetZnearbOEFI8qshvIl4QAAAFY"]
[Fri Apr 24 19:53:01.825518 2026] [:error] [pid 17721:tid 17800] [client 135.225.72.245:11724] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wen.php"] [unique_id "aetZneFXXkLeyDnfk_8v4QAAABM"]
[Fri Apr 24 19:53:02.435339 2026] [:error] [pid 4177:tid 4188] [client 135.225.72.245:11703] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aetZnn2asKnvdrSe0x7s7gAAAYM"]
[Fri Apr 24 19:53:03.040798 2026] [:error] [pid 4177:tid 4200] [client 135.225.72.245:11701] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aetZn32asKnvdrSe0x7s8wAAAY8"]
[Fri Apr 24 19:53:03.654309 2026] [:error] [pid 17720:tid 17755] [client 135.225.72.245:11734] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aetZn-hlUs6BS3Ng7_WP0AAAAME"]
[Fri Apr 24 19:53:04.909713 2026] [:error] [pid 17721:tid 17798] [client 135.225.72.245:11696] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/plugin-install.php"] [unique_id "aetZoOFXXkLeyDnfk_8v4wAAABE"]
[Fri Apr 24 19:53:05.503660 2026] [:error] [pid 17808:tid 17811] [client 135.225.72.245:3031] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aetZoearbOEFI8qshvIl6QAAAEE"]
[Fri Apr 24 19:53:06.245784 2026] [:error] [pid 17720:tid 17772] [client 135.225.72.245:3045] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aetZouhlUs6BS3Ng7_WP3QAAANI"]
[Fri Apr 24 19:53:06.785301 2026] [:error] [pid 17808:tid 17830] [client 135.225.72.245:11723] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aetZouarbOEFI8qshvIl7QAAAFQ"]
[Fri Apr 24 19:53:07.394091 2026] [:error] [pid 4177:tid 4208] [client 135.225.72.245:11773] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aetZo32asKnvdrSe0x7s9QAAAZc"]
[Fri Apr 24 19:53:08.012146 2026] [:error] [pid 22114:tid 22134] [client 135.225.72.245:3024] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aetZpIAuWGz3WlMQjofjpAAAARE"]
[Fri Apr 24 19:53:08.659017 2026] [:error] [pid 22114:tid 22129] [client 135.225.72.245:11766] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aetZpIAuWGz3WlMQjofjpgAAAQw"]
[Fri Apr 24 19:53:09.227498 2026] [:error] [pid 17808:tid 17829] [client 135.225.72.245:11677] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aetZpearbOEFI8qshvIl9QAAAFM"]
[Fri Apr 24 19:53:09.780672 2026] [:error] [pid 17808:tid 17832] [client 135.225.72.245:3058] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aetZpearbOEFI8qshvIl-QAAAFY"]
[Fri Apr 24 19:53:10.380333 2026] [:error] [pid 14531:tid 14534] [client 135.225.72.245:3015] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aetZpnfLU2gw-6KR-Ga7vAAAAUE"]
[Fri Apr 24 19:53:11.102798 2026] [:error] [pid 14531:tid 14541] [client 135.225.72.245:11750] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aetZp3fLU2gw-6KR-Ga7vQAAAUg"]
[Fri Apr 24 19:53:12.549650 2026] [:error] [pid 22114:tid 22141] [client 135.225.72.245:11676] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aetZqIAuWGz3WlMQjofjqAAAARg"]
[Fri Apr 24 19:53:13.276377 2026] [:error] [pid 14531:tid 14537] [client 135.225.72.245:11719] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "aetZqXfLU2gw-6KR-Ga7xQAAAUQ"]
[Fri Apr 24 19:53:13.883874 2026] [:error] [pid 17719:tid 17735] [client 135.225.72.245:11665] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "aetZqcTZ9gzEyL1BkPqguAAAAIg"]
[Fri Apr 24 19:53:14.430967 2026] [:error] [pid 17720:tid 17771] [client 135.225.72.245:11694] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "aetZquhlUs6BS3Ng7_WP5QAAANE"]
[Fri Apr 24 19:53:15.222888 2026] [:error] [pid 17720:tid 17772] [client 135.225.72.245:3040] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "aetZq-hlUs6BS3Ng7_WP5gAAANI"]
[Fri Apr 24 19:53:17.293806 2026] [:error] [pid 17720:tid 17773] [client 135.225.72.245:3030] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/shell.php"] [unique_id "aetZrehlUs6BS3Ng7_WP8gAAANM"]
[Fri Apr 24 19:53:17.995688 2026] [:error] [pid 17719:tid 17742] [client 135.225.72.245:11738] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new.php"] [unique_id "aetZrcTZ9gzEyL1BkPqgugAAAI8"]
[Fri Apr 24 19:53:18.880510 2026] [:error] [pid 17808:tid 17834] [client 135.225.72.245:3056] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new.php"] [unique_id "aetZruarbOEFI8qshvImAQAAAFg"]
[Fri Apr 24 19:53:20.723886 2026] [:error] [pid 17721:tid 17785] [client 135.225.72.245:3033] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new.php"] [unique_id "aetZsOFXXkLeyDnfk_8v9QAAAAQ"]
[Fri Apr 24 19:53:21.446304 2026] [:error] [pid 4177:tid 4206] [client 135.225.72.245:11667] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/new.php"] [unique_id "aetZsX2asKnvdrSe0x7tCAAAAZU"]
[Fri Apr 24 19:53:22.119695 2026] [:error] [pid 17720:tid 17762] [client 135.225.72.245:11739] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetZsuhlUs6BS3Ng7_WP-wAAAMg"]
[Fri Apr 24 19:53:22.906815 2026] [:error] [pid 14531:tid 14536] [client 135.225.72.245:11756] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetZsnfLU2gw-6KR-Ga7zwAAAUM"]
[Fri Apr 24 19:53:24.266393 2026] [:error] [pid 14531:tid 14549] [client 135.225.72.245:11722] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetZtHfLU2gw-6KR-Ga72AAAAVA"]
[Fri Apr 24 19:53:25.955710 2026] [:error] [pid 4177:tid 4202] [client 135.225.72.245:11662] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetZtX2asKnvdrSe0x7tEwAAAZE"]
[Fri Apr 24 19:53:26.554347 2026] [:error] [pid 4177:tid 4209] [client 135.225.72.245:3016] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws48.php"] [unique_id "aetZtn2asKnvdrSe0x7tFQAAAZg"]
[Fri Apr 24 19:53:54.755424 2026] [proxy_fcgi:error] [pid 17720:tid 17774] [client 135.225.72.245:11678] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:54:21.254575 2026] [proxy_fcgi:error] [pid 14531:tid 14538] [client 135.225.72.245:11670] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:54:27.852454 2026] [proxy_fcgi:error] [pid 17719:tid 17738] [client 135.225.72.245:11670] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:54:43.068842 2026] [proxy_fcgi:error] [pid 17808:tid 17820] [client 135.225.72.245:11752] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:54:45.126661 2026] [proxy_fcgi:error] [pid 14531:tid 14541] [client 135.225.72.245:11749] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:54:51.826539 2026] [:error] [pid 17808:tid 17830] [client 135.225.72.245:2944] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aetaC-arbOEFI8qshvImhAAAAFQ"]
[Fri Apr 24 19:54:52.430220 2026] [:error] [pid 17719:tid 17741] [client 135.225.72.245:11659] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aetaDMTZ9gzEyL1BkPqhDgAAAI4"]
[Fri Apr 24 19:54:53.062194 2026] [:error] [pid 22114:tid 22134] [client 135.225.72.245:11711] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aetaDYAuWGz3WlMQjofj5gAAARE"]
[Fri Apr 24 19:54:53.682297 2026] [:error] [pid 22114:tid 22141] [client 135.225.72.245:11753] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inputs.php"] [unique_id "aetaDYAuWGz3WlMQjofj6AAAARg"]
[Fri Apr 24 19:54:54.391562 2026] [:error] [pid 4177:tid 4209] [client 135.225.72.245:2971] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "aetaDn2asKnvdrSe0x7uQAAAAZg"]
[Fri Apr 24 19:54:54.994729 2026] [:error] [pid 4177:tid 4207] [client 135.225.72.245:11718] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "aetaDn2asKnvdrSe0x7uQgAAAZY"]
[Fri Apr 24 19:54:55.607587 2026] [:error] [pid 17720:tid 17759] [client 135.225.72.245:3051] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "aetaD-hlUs6BS3Ng7_WQmwAAAMU"]
[Fri Apr 24 19:54:56.172986 2026] [:error] [pid 17808:tid 17829] [client 135.225.72.245:11745] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bnm.php"] [unique_id "aetaEOarbOEFI8qshvImiwAAAFM"]
[Fri Apr 24 19:54:56.719423 2026] [:error] [pid 17719:tid 17749] [client 135.225.72.245:3017] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aetaEMTZ9gzEyL1BkPqhEwAAAJY"]
[Fri Apr 24 19:54:57.372642 2026] [:error] [pid 4177:tid 4194] [client 135.225.72.245:3068] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aetaEX2asKnvdrSe0x7uRQAAAYk"]
[Fri Apr 24 19:54:59.189860 2026] [:error] [pid 17719:tid 17746] [client 135.225.72.245:3010] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aetaE8TZ9gzEyL1BkPqhFwAAAJM"]
[Fri Apr 24 19:54:59.807979 2026] [:error] [pid 14531:tid 14544] [client 135.225.72.245:11681] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws80.php"] [unique_id "aetaE3fLU2gw-6KR-Ga8ZQAAAUs"]
[Fri Apr 24 19:55:00.425389 2026] [:error] [pid 14531:tid 14537] [client 135.225.72.245:11660] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetaFHfLU2gw-6KR-Ga8aQAAAUQ"]
[Fri Apr 24 19:55:01.111757 2026] [:error] [pid 4177:tid 4195] [client 135.225.72.245:3046] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetaFX2asKnvdrSe0x7uSgAAAYo"]
[Fri Apr 24 19:55:01.804913 2026] [:error] [pid 4177:tid 4188] [client 135.225.72.245:11735] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetaFX2asKnvdrSe0x7uTQAAAYM"]
[Fri Apr 24 19:55:02.459023 2026] [:error] [pid 17808:tid 17829] [client 135.225.72.245:3011] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetaFuarbOEFI8qshvImlAAAAFM"]
[Fri Apr 24 19:55:03.056843 2026] [:error] [pid 4177:tid 4196] [client 135.225.72.245:11755] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aetaF32asKnvdrSe0x7uVgAAAYs"]
[Fri Apr 24 19:55:03.919171 2026] [:error] [pid 17721:tid 17801] [client 135.225.72.245:2953] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aetaF-FXXkLeyDnfk_8wZgAAABQ"]
[Fri Apr 24 19:55:04.503300 2026] [:error] [pid 17719:tid 17740] [client 135.225.72.245:3039] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aetaGMTZ9gzEyL1BkPqhGgAAAI0"]
[Fri Apr 24 19:55:05.077495 2026] [:error] [pid 17721:tid 17784] [client 135.225.72.245:11731] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/s.php"] [unique_id "aetaGeFXXkLeyDnfk_8wZwAAAAM"]
[Fri Apr 24 19:55:05.738812 2026] [:error] [pid 4177:tid 4189] [client 135.225.72.245:2957] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tymn.php"] [unique_id "aetaGX2asKnvdrSe0x7uXgAAAYQ"]
[Fri Apr 24 19:55:06.279685 2026] [:error] [pid 17808:tid 17830] [client 135.225.72.245:11758] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tymn.php"] [unique_id "aetaGuarbOEFI8qshvImlgAAAFQ"]
[Fri Apr 24 19:55:08.005954 2026] [:error] [pid 4177:tid 4198] [client 135.225.72.245:3008] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tymn.php"] [unique_id "aetaHH2asKnvdrSe0x7uZwAAAY0"]
[Fri Apr 24 19:55:08.753631 2026] [:error] [pid 4177:tid 4200] [client 135.225.72.245:3021] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tymn.php"] [unique_id "aetaHH2asKnvdrSe0x7uagAAAY8"]
[Fri Apr 24 19:55:09.411480 2026] [:error] [pid 17720:tid 17754] [client 135.225.72.245:11707] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetaHehlUs6BS3Ng7_WQrAAAAMA"]
[Fri Apr 24 19:55:09.980362 2026] [:error] [pid 17720:tid 17756] [client 135.225.72.245:11713] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetaHehlUs6BS3Ng7_WQrwAAAMI"]
[Fri Apr 24 19:55:10.607004 2026] [:error] [pid 17720:tid 17776] [client 135.225.72.245:11682] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetaHuhlUs6BS3Ng7_WQtAAAANY"]
[Fri Apr 24 19:55:12.214804 2026] [:error] [pid 17721:tid 17786] [client 135.225.72.245:11767] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetaIOFXXkLeyDnfk_8waAAAAAU"]
[Fri Apr 24 19:55:12.812022 2026] [:error] [pid 17721:tid 17794] [client 135.225.72.245:3018] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "aetaIOFXXkLeyDnfk_8waQAAAA0"]
[Fri Apr 24 19:55:14.426651 2026] [:error] [pid 17719:tid 17742] [client 135.225.72.245:11650] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "aetaIsTZ9gzEyL1BkPqhIwAAAI8"]
[Fri Apr 24 19:55:15.047725 2026] [:error] [pid 17719:tid 17751] [client 135.225.72.245:11732] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "aetaI8TZ9gzEyL1BkPqhJAAAAJg"]
[Fri Apr 24 19:55:15.690786 2026] [:error] [pid 22114:tid 22121] [client 135.225.72.245:11740] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp5.php"] [unique_id "aetaI4AuWGz3WlMQjofkAAAAAQQ"]
[Fri Apr 24 19:55:16.239592 2026] [:error] [pid 22114:tid 22131] [client 135.225.72.245:11697] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aetaJIAuWGz3WlMQjofkAQAAAQ4"]
[Fri Apr 24 19:55:16.926579 2026] [:error] [pid 17719:tid 17732] [client 135.225.72.245:2985] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aetaJMTZ9gzEyL1BkPqhJwAAAIU"]
[Fri Apr 24 19:55:17.464050 2026] [:error] [pid 4177:tid 4204] [client 135.225.72.245:11652] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aetaJX2asKnvdrSe0x7ubwAAAZM"]
[Fri Apr 24 19:55:18.021238 2026] [:error] [pid 17721:tid 17796] [client 135.225.72.245:3053] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms.php"] [unique_id "aetaJuFXXkLeyDnfk_8wcAAAAA8"]
[Fri Apr 24 19:55:18.623729 2026] [:error] [pid 17720:tid 17754] [client 135.225.72.245:11668] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aetaJuhlUs6BS3Ng7_WQwgAAAMA"]
[Fri Apr 24 19:55:19.267486 2026] [:error] [pid 4177:tid 4201] [client 135.225.72.245:3012] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aetaJ32asKnvdrSe0x7ucgAAAZA"]
[Fri Apr 24 19:55:19.887429 2026] [:error] [pid 17720:tid 17769] [client 135.225.72.245:3014] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aetaJ-hlUs6BS3Ng7_WQxgAAAM8"]
[Fri Apr 24 19:55:20.540647 2026] [:error] [pid 17720:tid 17765] [client 135.225.72.245:11674] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-access.php"] [unique_id "aetaKOhlUs6BS3Ng7_WQyQAAAMs"]
[Fri Apr 24 19:55:21.192059 2026] [:error] [pid 17720:tid 17775] [client 135.225.72.245:2954] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class-atom.php"] [unique_id "aetaKehlUs6BS3Ng7_WQzQAAANU"]
[Fri Apr 24 19:55:21.722868 2026] [:error] [pid 17720:tid 17766] [client 135.225.72.245:2973] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class-atom.php"] [unique_id "aetaKehlUs6BS3Ng7_WQzwAAAMw"]
[Fri Apr 24 19:55:23.436822 2026] [:error] [pid 14531:tid 14536] [client 135.225.72.245:11656] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class-atom.php"] [unique_id "aetaK3fLU2gw-6KR-Ga8dwAAAUM"]
[Fri Apr 24 19:55:23.999566 2026] [:error] [pid 17721:tid 17784] [client 135.225.72.245:3022] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class-atom.php"] [unique_id "aetaK-FXXkLeyDnfk_8wcwAAAAM"]
[Fri Apr 24 19:55:25.894609 2026] [:error] [pid 4177:tid 4202] [client 135.225.72.245:11661] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aetaLX2asKnvdrSe0x7ueQAAAZE"]
[Fri Apr 24 19:55:26.672364 2026] [:error] [pid 4177:tid 4195] [client 135.225.72.245:11700] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aetaLn2asKnvdrSe0x7uewAAAYo"]
[Fri Apr 24 19:55:27.385912 2026] [:error] [pid 4177:tid 4205] [client 135.225.72.245:11683] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aetaL32asKnvdrSe0x7ugAAAAZQ"]
[Fri Apr 24 19:55:29.026166 2026] [:error] [pid 17808:tid 17833] [client 135.225.72.245:2962] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "aetaMearbOEFI8qshvImngAAAFc"]
[Fri Apr 24 19:55:29.792520 2026] [:error] [pid 17808:tid 17814] [client 135.225.72.245:11715] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/press.php"] [unique_id "aetaMearbOEFI8qshvImnwAAAEQ"]
[Fri Apr 24 19:55:30.422567 2026] [:error] [pid 14531:tid 14547] [client 135.225.72.245:11746] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/press.php"] [unique_id "aetaMnfLU2gw-6KR-Ga8ewAAAU4"]
[Fri Apr 24 19:55:31.048073 2026] [:error] [pid 14531:tid 14548] [client 135.225.72.245:11728] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/press.php"] [unique_id "aetaM3fLU2gw-6KR-Ga8fAAAAU8"]
[Fri Apr 24 19:55:31.642363 2026] [:error] [pid 14531:tid 14535] [client 135.225.72.245:3038] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/press.php"] [unique_id "aetaM3fLU2gw-6KR-Ga8gAAAAUI"]
[Fri Apr 24 19:55:32.224518 2026] [:error] [pid 14531:tid 14551] [client 135.225.72.245:11744] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/900.php"] [unique_id "aetaNHfLU2gw-6KR-Ga8gQAAAVI"]
[Fri Apr 24 19:55:32.839100 2026] [:error] [pid 17808:tid 17818] [client 135.225.72.245:2945] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/900.php"] [unique_id "aetaNOarbOEFI8qshvImpQAAAEg"]
[Fri Apr 24 19:55:34.546866 2026] [:error] [pid 17808:tid 17817] [client 135.225.72.245:11706] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/900.php"] [unique_id "aetaNuarbOEFI8qshvImrAAAAEc"]
[Fri Apr 24 19:55:35.217678 2026] [:error] [pid 14531:tid 14553] [client 135.225.72.245:2946] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/900.php"] [unique_id "aetaN3fLU2gw-6KR-Ga8hQAAAVQ"]
[Fri Apr 24 19:55:35.973932 2026] [:error] [pid 14531:tid 14537] [client 135.225.72.245:11708] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetaN3fLU2gw-6KR-Ga8hwAAAUQ"]
[Fri Apr 24 19:55:36.805662 2026] [:error] [pid 14531:tid 14544] [client 135.225.72.245:11680] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetaOHfLU2gw-6KR-Ga8iAAAAUs"]
[Fri Apr 24 19:55:37.530245 2026] [:error] [pid 17719:tid 17728] [client 135.225.72.245:3035] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetaOcTZ9gzEyL1BkPqhSgAAAIE"]
[Fri Apr 24 19:55:38.317126 2026] [:error] [pid 17721:tid 17794] [client 135.225.72.245:11691] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetaOuFXXkLeyDnfk_8wfwAAAA0"]
[Fri Apr 24 19:55:39.346596 2026] [:error] [pid 4177:tid 4202] [client 135.225.72.245:2903] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aetaO32asKnvdrSe0x7uiAAAAZE"]
[Fri Apr 24 19:55:40.030110 2026] [:error] [pid 4177:tid 4190] [client 135.225.72.245:2984] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aetaPH2asKnvdrSe0x7uiwAAAYU"]
[Fri Apr 24 19:55:41.146398 2026] [:error] [pid 17721:tid 17800] [client 135.225.72.245:2963] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aetaPeFXXkLeyDnfk_8wgAAAABM"]
[Fri Apr 24 19:55:42.356527 2026] [:error] [pid 22114:tid 22129] [client 135.225.72.245:3049] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aetaPoAuWGz3WlMQjofkAwAAAQw"]
[Fri Apr 24 19:55:43.101335 2026] [:error] [pid 14531:tid 14539] [client 135.225.72.245:11649] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "aetaP3fLU2gw-6KR-Ga8kgAAAUY"]
[Fri Apr 24 19:55:43.798274 2026] [:error] [pid 22114:tid 22134] [client 135.225.72.245:3023] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "aetaP4AuWGz3WlMQjofkBQAAARE"]
[Fri Apr 24 19:55:44.434642 2026] [:error] [pid 4177:tid 4200] [client 135.225.72.245:11675] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "aetaQH2asKnvdrSe0x7ukAAAAY8"]
[Fri Apr 24 19:55:45.306844 2026] [:error] [pid 17720:tid 17767] [client 135.225.72.245:11725] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "aetaQehlUs6BS3Ng7_WQ2AAAAM0"]
[Fri Apr 24 19:55:45.880577 2026] [:error] [pid 4177:tid 4202] [client 135.225.72.245:11692] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aetaQX2asKnvdrSe0x7ulwAAAZE"]
[Fri Apr 24 19:55:46.422015 2026] [:error] [pid 4177:tid 4199] [client 135.225.72.245:2972] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aetaQn2asKnvdrSe0x7unQAAAY4"]
[Fri Apr 24 19:55:46.982217 2026] [:error] [pid 4177:tid 4205] [client 135.225.72.245:3027] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aetaQn2asKnvdrSe0x7uoAAAAZQ"]
[Fri Apr 24 19:55:47.560812 2026] [:error] [pid 4177:tid 4201] [client 135.225.72.245:3054] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aa.php"] [unique_id "aetaQ32asKnvdrSe0x7uowAAAZA"]
[Fri Apr 24 19:56:12.829264 2026] [proxy_fcgi:error] [pid 17719:tid 17742] [client 135.225.72.245:11653] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:56:30.519009 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 135.225.72.245:11770] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:56:31.114775 2026] [proxy_fcgi:error] [pid 17720:tid 17754] [client 135.225.72.245:11742] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:56:39.548506 2026] [:error] [pid 17720:tid 17778] [client 160.30.179.124:41732] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "aetad-hlUs6BS3Ng7_WRKQAAANg"]
[Fri Apr 24 19:56:47.818328 2026] [proxy_fcgi:error] [pid 17720:tid 17766] [client 135.225.72.245:11679] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 19:56:59.344201 2026] [:error] [pid 17721:tid 17788] [client 135.225.72.245:2952] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "aetai-FXXkLeyDnfk_8wpwAAAAc"]
[Fri Apr 24 19:57:00.928724 2026] [:error] [pid 17721:tid 17800] [client 135.225.72.245:11759] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "aetajOFXXkLeyDnfk_8wqgAAABM"]
[Fri Apr 24 19:57:02.572595 2026] [:error] [pid 4177:tid 4193] [client 135.225.72.245:3025] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "aetajn2asKnvdrSe0x7viQAAAYg"]
[Fri Apr 24 19:57:03.239058 2026] [:error] [pid 17720:tid 17759] [client 135.225.72.245:11685] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "aetaj-hlUs6BS3Ng7_WRZgAAAMU"]
[Fri Apr 24 19:57:03.844038 2026] [:error] [pid 17720:tid 17777] [client 135.225.72.245:11710] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "aetaj-hlUs6BS3Ng7_WRaQAAANc"]
[Fri Apr 24 19:57:04.547562 2026] [:error] [pid 4177:tid 4196] [client 135.225.72.245:2989] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "aetakH2asKnvdrSe0x7vkAAAAYs"]
[Fri Apr 24 19:57:05.148686 2026] [:error] [pid 4177:tid 4205] [client 135.225.72.245:11699] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "aetakX2asKnvdrSe0x7vlAAAAZQ"]
[Fri Apr 24 19:57:05.759617 2026] [:error] [pid 17721:tid 17782] [client 135.225.72.245:2967] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "aetakeFXXkLeyDnfk_8wrAAAAAE"]
[Fri Apr 24 19:57:06.375897 2026] [:error] [pid 4177:tid 4197] [client 135.225.72.245:11764] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "aetakn2asKnvdrSe0x7vnQAAAYw"]
[Fri Apr 24 19:57:07.024724 2026] [:error] [pid 4177:tid 4190] [client 135.225.72.245:11695] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "aetak32asKnvdrSe0x7voQAAAYU"]
[Fri Apr 24 19:57:08.581250 2026] [:error] [pid 17808:tid 17825] [client 135.225.72.245:3032] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "aetalOarbOEFI8qshvInEQAAAE8"]
[Fri Apr 24 19:57:09.176052 2026] [:error] [pid 17808:tid 17822] [client 135.225.72.245:2925] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "aetalearbOEFI8qshvInGAAAAEw"]
[Fri Apr 24 19:57:12.065897 2026] [:error] [pid 4177:tid 4185] [client 135.225.72.245:3026] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetamH2asKnvdrSe0x7vtQAAAYA"]
[Fri Apr 24 19:57:12.686926 2026] [:error] [pid 4177:tid 4204] [client 135.225.72.245:11689] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetamH2asKnvdrSe0x7vuwAAAZM"]
[Fri Apr 24 19:57:13.288303 2026] [:error] [pid 17721:tid 17792] [client 135.225.72.245:2983] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetameFXXkLeyDnfk_8wswAAAAs"]
[Fri Apr 24 19:57:14.917775 2026] [:error] [pid 17720:tid 17778] [client 135.225.72.245:3002] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetamuhlUs6BS3Ng7_WRegAAANg"]
[Fri Apr 24 19:57:15.507860 2026] [:error] [pid 17808:tid 17827] [client 135.225.72.245:11655] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "aetam-arbOEFI8qshvInIAAAAFE"]
[Fri Apr 24 19:57:16.407994 2026] [:error] [pid 4177:tid 4195] [client 135.225.72.245:3047] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "aetanH2asKnvdrSe0x7vxgAAAYo"]
[Fri Apr 24 19:57:16.975350 2026] [:error] [pid 4177:tid 4190] [client 135.225.72.245:3028] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "aetanH2asKnvdrSe0x7vzAAAAYU"]
[Fri Apr 24 19:57:17.683675 2026] [:error] [pid 17720:tid 17777] [client 135.225.72.245:11726] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tool.php"] [unique_id "aetanehlUs6BS3Ng7_WRfwAAANc"]
[Fri Apr 24 19:57:19.269697 2026] [:error] [pid 17719:tid 17741] [client 135.225.72.245:2993] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "aetan8TZ9gzEyL1BkPqhfwAAAI4"]
[Fri Apr 24 19:57:19.844750 2026] [:error] [pid 17720:tid 17762] [client 135.225.72.245:11709] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "aetan-hlUs6BS3Ng7_WRiQAAAMg"]
[Fri Apr 24 19:57:21.469051 2026] [:error] [pid 17808:tid 17829] [client 135.225.72.245:2900] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "aetaoearbOEFI8qshvInKgAAAFM"]
[Fri Apr 24 19:57:22.031006 2026] [:error] [pid 4177:tid 4204] [client 135.225.72.245:11658] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bgymj.php"] [unique_id "aetaon2asKnvdrSe0x7v1AAAAZM"]
[Fri Apr 24 19:57:22.669851 2026] [:error] [pid 4177:tid 4199] [client 135.225.72.245:11728] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aetaon2asKnvdrSe0x7v2AAAAY4"]
[Fri Apr 24 19:57:23.215653 2026] [:error] [pid 14531:tid 14546] [client 135.225.72.245:3057] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aetao3fLU2gw-6KR-Ga8wgAAAU0"]
[Fri Apr 24 19:57:23.761955 2026] [:error] [pid 17808:tid 17834] [client 135.225.72.245:2988] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aetao-arbOEFI8qshvInMQAAAFg"]
[Fri Apr 24 19:57:24.404520 2026] [:error] [pid 17808:tid 17826] [client 135.225.72.245:11704] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-good.php"] [unique_id "aetapOarbOEFI8qshvInNAAAAFA"]
[Fri Apr 24 19:57:24.989360 2026] [:error] [pid 22114:tid 22133] [client 135.225.72.245:2888] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aetapIAuWGz3WlMQjofkLwAAARA"]
[Fri Apr 24 19:57:25.577770 2026] [:error] [pid 17808:tid 17813] [client 135.225.72.245:2915] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aetapearbOEFI8qshvInOAAAAEM"]
[Fri Apr 24 19:57:27.377077 2026] [:error] [pid 4177:tid 4199] [client 135.225.72.245:3052] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aetap32asKnvdrSe0x7v4wAAAY4"]
[Fri Apr 24 19:57:28.182968 2026] [:error] [pid 22114:tid 22131] [client 135.225.72.245:11679] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aetaqIAuWGz3WlMQjofkMAAAAQ4"]
[Fri Apr 24 19:57:28.829990 2026] [:error] [pid 22114:tid 22128] [client 135.225.72.245:2920] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mk.php"] [unique_id "aetaqIAuWGz3WlMQjofkNgAAAQs"]
[Fri Apr 24 19:57:29.601423 2026] [:error] [pid 17808:tid 17812] [client 135.225.72.245:2918] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mk.php"] [unique_id "aetaqearbOEFI8qshvInPgAAAEI"]
[Fri Apr 24 19:57:30.166260 2026] [:error] [pid 17721:tid 17804] [client 135.225.72.245:3034] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mk.php"] [unique_id "aetaquFXXkLeyDnfk_8wvQAAABc"]
[Fri Apr 24 19:57:30.767180 2026] [:error] [pid 17721:tid 17786] [client 135.225.72.245:11730] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mk.php"] [unique_id "aetaquFXXkLeyDnfk_8wvgAAAAU"]
[Fri Apr 24 19:57:31.399959 2026] [:error] [pid 17808:tid 17828] [client 135.225.72.245:11741] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "aetaq-arbOEFI8qshvInRAAAAFI"]
[Fri Apr 24 19:57:32.016796 2026] [:error] [pid 17808:tid 17819] [client 135.225.72.245:11771] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "aetarOarbOEFI8qshvInRQAAAEk"]
[Fri Apr 24 19:57:33.636570 2026] [:error] [pid 17720:tid 17770] [client 135.225.72.245:11687] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "aetarehlUs6BS3Ng7_WRlwAAANA"]
[Fri Apr 24 19:57:34.299079 2026] [:error] [pid 4177:tid 4188] [client 135.225.72.245:3055] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "aetarn2asKnvdrSe0x7v8gAAAYM"]
[Fri Apr 24 19:57:35.050574 2026] [:error] [pid 14531:tid 14554] [client 135.225.72.245:2977] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "aetar3fLU2gw-6KR-Ga8ywAAAVU"]
[Fri Apr 24 19:57:35.624860 2026] [:error] [pid 4177:tid 4187] [client 135.225.72.245:2976] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "aetar32asKnvdrSe0x7v-wAAAYI"]
[Fri Apr 24 19:57:36.167561 2026] [:error] [pid 17808:tid 17820] [client 135.225.72.245:3065] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "aetasOarbOEFI8qshvInVgAAAEo"]
[Fri Apr 24 19:57:36.763207 2026] [:error] [pid 4177:tid 4204] [client 135.225.72.245:2978] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a4.php"] [unique_id "aetasH2asKnvdrSe0x7wAgAAAZM"]
[Fri Apr 24 19:57:37.389190 2026] [:error] [pid 17721:tid 17788] [client 135.225.72.245:2948] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aetaseFXXkLeyDnfk_8wxQAAAAc"]
[Fri Apr 24 19:57:37.957005 2026] [:error] [pid 22114:tid 22120] [client 135.225.72.245:3041] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aetasYAuWGz3WlMQjofkPAAAAQM"]
[Fri Apr 24 19:57:38.525018 2026] [:error] [pid 4177:tid 4208] [client 135.225.72.245:2964] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aetasn2asKnvdrSe0x7wCAAAAZc"]
[Fri Apr 24 19:57:41.251070 2026] [:error] [pid 4177:tid 4185] [client 135.225.72.245:2907] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aetatX2asKnvdrSe0x7wHQAAAYA"]
[Fri Apr 24 19:57:41.786850 2026] [:error] [pid 17808:tid 17829] [client 135.225.72.245:11678] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rip.php"] [unique_id "aetatearbOEFI8qshvInWQAAAFM"]
[Fri Apr 24 19:57:42.461594 2026] [:error] [pid 4177:tid 4196] [client 135.225.72.245:2904] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rip.php"] [unique_id "aetatn2asKnvdrSe0x7wJQAAAYs"]
[Fri Apr 24 19:57:43.046078 2026] [:error] [pid 17720:tid 17778] [client 135.225.72.245:11774] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rip.php"] [unique_id "aetat-hlUs6BS3Ng7_WRnAAAANg"]
[Fri Apr 24 19:57:43.723341 2026] [:error] [pid 4177:tid 4200] [client 135.225.72.245:3062] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/rip.php"] [unique_id "aetat32asKnvdrSe0x7wLAAAAY8"]
[Fri Apr 24 19:57:44.312008 2026] [:error] [pid 17720:tid 17772] [client 135.225.72.245:3061] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aetauOhlUs6BS3Ng7_WRnwAAANI"]
[Fri Apr 24 19:57:45.870800 2026] [:error] [pid 4177:tid 4187] [client 135.225.72.245:11769] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aetauX2asKnvdrSe0x7wLwAAAYI"]
[Fri Apr 24 19:57:46.454499 2026] [:error] [pid 4177:tid 4202] [client 135.225.72.245:2981] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aetaun2asKnvdrSe0x7wMQAAAZE"]
[Fri Apr 24 19:57:47.082268 2026] [:error] [pid 4177:tid 4206] [client 135.225.72.245:11702] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aetau32asKnvdrSe0x7wNQAAAZU"]
[Fri Apr 24 19:57:47.654427 2026] [:error] [pid 4177:tid 4194] [client 135.225.72.245:3013] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoo.php"] [unique_id "aetau32asKnvdrSe0x7wNgAAAYk"]
[Fri Apr 24 19:57:48.238593 2026] [:error] [pid 4177:tid 4192] [client 135.225.72.245:3063] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoo.php"] [unique_id "aetavH2asKnvdrSe0x7wNwAAAYc"]
[Fri Apr 24 19:57:49.936269 2026] [:error] [pid 17720:tid 17775] [client 135.225.72.245:2958] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoo.php"] [unique_id "aetavehlUs6BS3Ng7_WRuAAAANU"]
[Fri Apr 24 19:57:50.741776 2026] [:error] [pid 4177:tid 4185] [client 135.225.72.245:3020] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoo.php"] [unique_id "aetavn2asKnvdrSe0x7wPgAAAYA"]
[Fri Apr 24 19:57:52.359208 2026] [:error] [pid 22114:tid 22128] [client 135.225.72.245:11653] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admlo.php"] [unique_id "aetawIAuWGz3WlMQjofkQQAAAQs"]
[Fri Apr 24 19:57:52.929911 2026] [:error] [pid 17721:tid 17798] [client 135.225.72.245:2961] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admlo.php"] [unique_id "aetawOFXXkLeyDnfk_8w0gAAABE"]
[Fri Apr 24 19:57:54.527032 2026] [:error] [pid 4177:tid 4194] [client 135.225.72.245:11760] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admlo.php"] [unique_id "aetawn2asKnvdrSe0x7wRAAAAYk"]
[Fri Apr 24 19:57:55.067223 2026] [:error] [pid 4177:tid 4191] [client 135.225.72.245:11657] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admlo.php"] [unique_id "aetaw32asKnvdrSe0x7wSAAAAYY"]
[Fri Apr 24 19:57:55.604861 2026] [:error] [pid 4177:tid 4204] [client 135.225.72.245:3019] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aetaw32asKnvdrSe0x7wTQAAAZM"]
[Fri Apr 24 19:58:15.029920 2026] [proxy_fcgi:error] [pid 14531:tid 14537] [client 135.225.72.245:11660] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:02:42.255165 2026] [:error] [pid 17720:tid 17765] [client 72.146.2.23:64675] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetb4uhlUs6BS3Ng7_WUMwAAAMs"]
[Fri Apr 24 20:03:34.579485 2026] [proxy_fcgi:error] [pid 17719:tid 17744] [client 20.203.128.117:40966] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:04:01.056205 2026] [proxy_fcgi:error] [pid 14531:tid 14537] [client 20.203.128.117:60153] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:04:15.546184 2026] [proxy_fcgi:error] [pid 4177:tid 4198] [client 20.203.128.117:35494] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:04:26.310169 2026] [proxy_fcgi:error] [pid 22114:tid 22117] [client 20.203.128.117:40484] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:04:59.302076 2026] [proxy_fcgi:error] [pid 17808:tid 17817] [client 20.203.128.117:38174] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:05:18.724391 2026] [proxy_fcgi:error] [pid 17721:tid 17797] [client 20.203.128.117:35208] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:05:33.502450 2026] [:error] [pid 4177:tid 4202] [client 20.203.128.117:37880] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aetcjX2asKnvdrSe0x71JgAAAZE"]
[Fri Apr 24 20:05:48.363348 2026] [:error] [pid 4177:tid 4197] [client 20.203.128.117:35227] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jga.php"] [unique_id "aetcnH2asKnvdrSe0x71TQAAAYw"]
[Fri Apr 24 20:05:50.900475 2026] [:error] [pid 17720:tid 17755] [client 20.203.128.117:7011] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aetcnuhlUs6BS3Ng7_WVggAAAME"]
[Fri Apr 24 20:05:54.610890 2026] [:error] [pid 17720:tid 17770] [client 20.203.128.117:56331] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aetcouhlUs6BS3Ng7_WVjwAAANA"]
[Fri Apr 24 20:05:56.998596 2026] [:error] [pid 4177:tid 4186] [client 20.203.128.117:37851] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aetcpH2asKnvdrSe0x71WQAAAYE"]
[Fri Apr 24 20:05:58.214668 2026] [:error] [pid 4177:tid 4203] [client 20.203.128.117:59610] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aetcpn2asKnvdrSe0x71dwAAAZI"]
[Fri Apr 24 20:06:14.714933 2026] [:error] [pid 17808:tid 17834] [client 20.203.128.117:55301] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bmi.php"] [unique_id "aetctuarbOEFI8qshvIqrwAAAFg"]
[Fri Apr 24 20:06:27.670554 2026] [:error] [pid 17721:tid 17795] [client 20.203.128.117:46533] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/byypas.php"] [unique_id "aetcw-FXXkLeyDnfk_8yqAAAAA4"]
[Fri Apr 24 20:07:31.609348 2026] [proxy_fcgi:error] [pid 17720:tid 17762] [client 20.203.128.117:61995] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:08:16.151286 2026] [proxy_fcgi:error] [pid 17721:tid 17791] [client 20.203.128.117:45934] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:08:33.239363 2026] [proxy_fcgi:error] [pid 17808:tid 17810] [client 20.203.128.117:55411] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:08:47.771304 2026] [:error] [pid 14531:tid 14542] [client 20.203.128.117:31819] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eetu.php"] [unique_id "aetdT3fLU2gw-6KR-Ga_cQAAAUk"]
[Fri Apr 24 20:08:52.939093 2026] [:error] [pid 14531:tid 14546] [client 20.203.128.117:37634] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eetu.php"] [unique_id "aetdVHfLU2gw-6KR-Ga_dgAAAU0"]
[Fri Apr 24 20:08:56.042610 2026] [:error] [pid 17719:tid 17751] [client 20.203.128.117:37676] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eetu.php"] [unique_id "aetdWMTZ9gzEyL1BkPqj3AAAAJg"]
[Fri Apr 24 20:08:57.925376 2026] [:error] [pid 17720:tid 17756] [client 20.203.128.117:64412] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/eetu.php"] [unique_id "aetdWehlUs6BS3Ng7_WW0AAAAMI"]
[Fri Apr 24 20:08:59.523673 2026] [:error] [pid 4177:tid 4206] [client 20.203.128.117:63299] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws66.php"] [unique_id "aetdW32asKnvdrSe0x73RwAAAZU"]
[Fri Apr 24 20:09:02.788703 2026] [:error] [pid 17721:tid 17801] [client 20.203.128.117:62046] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws66.php"] [unique_id "aetdXuFXXkLeyDnfk_8zLgAAABQ"]
[Fri Apr 24 20:09:06.868126 2026] [:error] [pid 4177:tid 4205] [client 20.203.128.117:7086] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws66.php"] [unique_id "aetdYn2asKnvdrSe0x73TQAAAZQ"]
[Fri Apr 24 20:09:09.878932 2026] [:error] [pid 4177:tid 4208] [client 20.203.128.117:52396] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws66.php"] [unique_id "aetdZX2asKnvdrSe0x73WQAAAZc"]
[Fri Apr 24 20:09:11.715738 2026] [:error] [pid 17721:tid 17795] [client 20.203.128.117:6664] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file61.php"] [unique_id "aetdZ-FXXkLeyDnfk_8zNAAAAA4"]
[Fri Apr 24 20:09:13.127979 2026] [:error] [pid 22114:tid 22131] [client 20.203.128.117:36269] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file61.php"] [unique_id "aetdaYAuWGz3WlMQjoflkwAAAQ4"]
[Fri Apr 24 20:09:15.486535 2026] [:error] [pid 17721:tid 17785] [client 20.203.128.117:39920] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file61.php"] [unique_id "aetda-FXXkLeyDnfk_8zOQAAAAQ"]
[Fri Apr 24 20:09:22.896567 2026] [:error] [pid 17808:tid 17818] [client 20.203.128.117:49142] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file61.php"] [unique_id "aetdcuarbOEFI8qshvIrAgAAAEg"]
[Fri Apr 24 20:09:24.728289 2026] [:error] [pid 17719:tid 17749] [client 20.203.128.117:64449] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "aetddMTZ9gzEyL1BkPqj5AAAAJY"]
[Fri Apr 24 20:09:26.330789 2026] [:error] [pid 17719:tid 17748] [client 20.203.128.117:58241] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "aetddsTZ9gzEyL1BkPqj5QAAAJU"]
[Fri Apr 24 20:09:30.638371 2026] [:error] [pid 4177:tid 4198] [client 20.203.128.117:6303] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "aetden2asKnvdrSe0x73lgAAAY0"]
[Fri Apr 24 20:09:33.601020 2026] [:error] [pid 17719:tid 17728] [client 20.203.128.117:6287] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/asd.php"] [unique_id "aetdfcTZ9gzEyL1BkPqj6QAAAIE"]
[Fri Apr 24 20:09:36.623990 2026] [:error] [pid 17721:tid 17781] [client 20.203.128.117:26654] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xx.php"] [unique_id "aetdgOFXXkLeyDnfk_8zSwAAAAA"]
[Fri Apr 24 20:10:32.561422 2026] [proxy_fcgi:error] [pid 17721:tid 17787] [client 20.203.128.117:34626] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:10:58.426053 2026] [proxy_fcgi:error] [pid 17808:tid 17816] [client 20.203.128.117:60715] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:11:45.117197 2026] [proxy_fcgi:error] [pid 17719:tid 17747] [client 20.203.128.117:61376] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:12:10.362870 2026] [proxy_fcgi:error] [pid 17720:tid 17768] [client 20.203.128.117:40934] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:12:16.814599 2026] [:error] [pid 17721:tid 17800] [client 20.203.128.117:36432] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/press.php"] [unique_id "aeteIOFXXkLeyDnfk_8zxwAAABM"]
[Fri Apr 24 20:12:19.506666 2026] [:error] [pid 22114:tid 22134] [client 20.203.128.117:6408] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/press.php"] [unique_id "aeteI4AuWGz3WlMQjofl1QAAARE"]
[Fri Apr 24 20:12:23.036810 2026] [:error] [pid 4177:tid 4201] [client 20.203.128.117:57834] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/press.php"] [unique_id "aeteJ32asKnvdrSe0x75TQAAAZA"]
[Fri Apr 24 20:12:30.081657 2026] [:error] [pid 4177:tid 4201] [client 20.203.128.117:6431] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/press.php"] [unique_id "aeteLn2asKnvdrSe0x75WwAAAZA"]
[Fri Apr 24 20:12:34.517153 2026] [:error] [pid 17719:tid 17734] [client 20.203.128.117:43215] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/900.php"] [unique_id "aeteMsTZ9gzEyL1BkPqkQAAAAIc"]
[Fri Apr 24 20:12:37.567096 2026] [:error] [pid 17719:tid 17730] [client 20.203.128.117:37062] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/900.php"] [unique_id "aeteNcTZ9gzEyL1BkPqkRAAAAIM"]
[Fri Apr 24 20:12:42.428361 2026] [:error] [pid 17720:tid 17764] [client 20.203.128.117:36786] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/900.php"] [unique_id "aeteOuhlUs6BS3Ng7_WX-wAAAMo"]
[Fri Apr 24 20:12:44.240599 2026] [:error] [pid 22114:tid 22139] [client 20.203.128.117:51940] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/900.php"] [unique_id "aetePIAuWGz3WlMQjofl5AAAARY"]
[Fri Apr 24 20:12:47.042852 2026] [:error] [pid 14531:tid 14552] [client 20.203.128.117:41208] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeteP3fLU2gw-6KR-GbAQAAAAVM"]
[Fri Apr 24 20:12:52.013761 2026] [:error] [pid 14531:tid 14556] [client 20.203.128.117:7023] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeteRHfLU2gw-6KR-GbAUwAAAVc"]
[Fri Apr 24 20:12:57.249080 2026] [:error] [pid 17808:tid 17832] [client 20.203.128.117:56331] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeteSearbOEFI8qshvIsTwAAAFY"]
[Fri Apr 24 20:13:09.850791 2026] [:error] [pid 17720:tid 17760] [client 20.203.128.117:38884] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/jk.php"] [unique_id "aeteVehlUs6BS3Ng7_WYIwAAAMY"]
[Fri Apr 24 20:13:37.056803 2026] [proxy_fcgi:error] [pid 17719:tid 17731] [client 20.203.128.117:33711] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:13:57.527310 2026] [proxy_fcgi:error] [pid 17808:tid 17814] [client 20.203.128.117:60777] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:13:58.098288 2026] [proxy_fcgi:error] [pid 4177:tid 4207] [client 20.203.128.117:31468] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:14:44.607064 2026] [proxy_fcgi:error] [pid 17720:tid 17776] [client 20.203.128.117:37901] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:15:02.816024 2026] [:error] [pid 17808:tid 17827] [client 20.203.128.117:46357] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaza.php"] [unique_id "aetexuarbOEFI8qshvIs-wAAAFE"]
[Fri Apr 24 20:15:05.242222 2026] [:error] [pid 17808:tid 17819] [client 20.203.128.117:39229] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaza.php"] [unique_id "aeteyearbOEFI8qshvItAAAAAEk"]
[Fri Apr 24 20:15:11.824330 2026] [:error] [pid 17720:tid 17756] [client 20.203.128.117:41023] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaza.php"] [unique_id "aetez-hlUs6BS3Ng7_WZOwAAAMI"]
[Fri Apr 24 20:15:15.574910 2026] [:error] [pid 17721:tid 17798] [client 20.203.128.117:65144] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gaza.php"] [unique_id "aete0-FXXkLeyDnfk_80uAAAABE"]
[Fri Apr 24 20:15:22.720783 2026] [:error] [pid 4177:tid 4209] [client 20.203.128.117:38093] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "aete2n2asKnvdrSe0x77dQAAAZg"]
[Fri Apr 24 20:15:30.797417 2026] [:error] [pid 4177:tid 4190] [client 20.203.128.117:34993] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kj.php"] [unique_id "aete4n2asKnvdrSe0x77pQAAAYU"]
[Fri Apr 24 20:15:32.555296 2026] [:error] [pid 17720:tid 17754] [client 20.203.128.117:34176] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "aete5OhlUs6BS3Ng7_WZUwAAAMA"]
[Fri Apr 24 20:15:35.871161 2026] [:error] [pid 17808:tid 17810] [client 20.203.128.117:6194] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "aete5-arbOEFI8qshvItJgAAAEA"]
[Fri Apr 24 20:15:41.336920 2026] [:error] [pid 4177:tid 4209] [client 20.203.128.117:34187] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "aete7X2asKnvdrSe0x77zwAAAZg"]
[Fri Apr 24 20:15:43.678350 2026] [:error] [pid 17719:tid 17744] [client 20.203.128.117:33019] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aboute.php"] [unique_id "aete78TZ9gzEyL1BkPqk3QAAAJE"]
[Fri Apr 24 20:15:46.002493 2026] [:error] [pid 17808:tid 17824] [client 20.203.128.117:62801] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "aete8uarbOEFI8qshvItPgAAAE4"]
[Fri Apr 24 20:15:48.920962 2026] [:error] [pid 14531:tid 14540] [client 20.203.128.117:34480] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "aete9HfLU2gw-6KR-GbBGAAAAUc"]
[Fri Apr 24 20:15:51.274372 2026] [:error] [pid 4177:tid 4197] [client 20.203.128.117:34989] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "aete932asKnvdrSe0x774gAAAYw"]
[Fri Apr 24 20:15:55.261305 2026] [:error] [pid 17720:tid 17754] [client 20.203.128.117:65137] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ws82.php"] [unique_id "aete--hlUs6BS3Ng7_WZZAAAAMA"]
[Fri Apr 24 20:16:47.940993 2026] [proxy_fcgi:error] [pid 17719:tid 17728] [client 20.203.128.117:37317] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:17:10.766528 2026] [proxy_fcgi:error] [pid 17721:tid 17798] [client 20.203.128.117:35512] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:17:16.942020 2026] [proxy_fcgi:error] [pid 17719:tid 17744] [client 20.203.128.117:33685] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:17:35.100931 2026] [:error] [pid 17808:tid 17817] [client 20.203.128.117:43612] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aetfX-arbOEFI8qshvIttAAAAEc"]
[Fri Apr 24 20:17:40.974769 2026] [:error] [pid 17721:tid 17803] [client 20.203.128.117:31485] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aetfZOFXXkLeyDnfk_81DgAAABY"]
[Fri Apr 24 20:17:46.901149 2026] [:error] [pid 17719:tid 17740] [client 20.203.128.117:33682] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aetfasTZ9gzEyL1BkPqlZQAAAI0"]
[Fri Apr 24 20:17:48.063070 2026] [:error] [pid 17719:tid 17739] [client 20.203.128.117:6669] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aetfbMTZ9gzEyL1BkPqlZwAAAIw"]
[Fri Apr 24 20:17:51.435101 2026] [:error] [pid 4177:tid 4207] [client 20.203.128.117:33681] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aetfb32asKnvdrSe0x78iQAAAZY"]
[Fri Apr 24 20:17:53.237974 2026] [:error] [pid 4177:tid 4193] [client 20.203.128.117:7044] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aetfcX2asKnvdrSe0x78kQAAAYg"]
[Fri Apr 24 20:17:54.739577 2026] [:error] [pid 17720:tid 17773] [client 20.203.128.117:35502] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aetfcuhlUs6BS3Ng7_WaLgAAANM"]
[Fri Apr 24 20:17:57.750597 2026] [:error] [pid 17721:tid 17805] [client 20.203.128.117:45246] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "aetfdeFXXkLeyDnfk_81IgAAABg"]
[Fri Apr 24 20:18:00.789904 2026] [:error] [pid 17720:tid 17760] [client 20.203.128.117:35658] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "aetfeOhlUs6BS3Ng7_WaNQAAAMY"]
[Fri Apr 24 20:18:13.100586 2026] [:error] [pid 4177:tid 4186] [client 20.203.128.117:57803] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/b.php"] [unique_id "aetfhX2asKnvdrSe0x78zQAAAYE"]
[Fri Apr 24 20:18:13.816205 2026] [:error] [pid 4177:tid 4201] [client 20.203.128.117:33676] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aetfhX2asKnvdrSe0x780gAAAZA"]
[Fri Apr 24 20:18:15.173747 2026] [:error] [pid 17719:tid 17742] [client 20.203.128.117:33702] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aetfh8TZ9gzEyL1BkPqlbAAAAI8"]
[Fri Apr 24 20:18:16.231994 2026] [:error] [pid 17719:tid 17750] [client 20.203.128.117:49960] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aetfiMTZ9gzEyL1BkPqlbQAAAJc"]
[Fri Apr 24 20:18:17.368614 2026] [:error] [pid 22114:tid 22119] [client 20.203.128.117:39907] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/grsiuk.php"] [unique_id "aetfiYAuWGz3WlMQjofmmwAAAQI"]
[Fri Apr 24 20:18:19.182602 2026] [:error] [pid 14531:tid 14552] [client 20.203.128.117:39884] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class-api.php"] [unique_id "aetfi3fLU2gw-6KR-GbBqgAAAVM"]
[Fri Apr 24 20:18:22.096434 2026] [:error] [pid 17720:tid 17762] [client 20.203.128.117:6656] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class-api.php"] [unique_id "aetfjuhlUs6BS3Ng7_WaXAAAAMg"]
[Fri Apr 24 20:18:30.198493 2026] [:error] [pid 14531:tid 14538] [client 20.203.128.117:35681] [client 20.203.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-class-api.php"] [unique_id "aetflnfLU2gw-6KR-GbBrwAAAUU"]
[Fri Apr 24 20:19:02.530144 2026] [proxy_fcgi:error] [pid 4177:tid 4194] [client 20.203.128.117:32696] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Fri Apr 24 20:40:46.068789 2026] [:error] [pid 17719:tid 17749] [client 74.7.242.136:60340] [client 74.7.242.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.136, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "aetkzsTZ9gzEyL1BkPqpmAAAAJY"]
[Sat Apr 25 01:28:36.556787 2026] [proxy_fcgi:error] [pid 42755:tid 42766] [client 103.4.122.14:58304] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 01:54:23.624843 2026] [proxy_fcgi:error] [pid 42755:tid 42773] [client 103.4.122.14:33048] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 02:02:06.344177 2026] [proxy_fcgi:error] [pid 42792:tid 42839] [client 20.58.161.206:1195] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 02:02:10.414354 2026] [proxy_fcgi:error] [pid 14989:tid 14993] [client 20.58.161.206:5618] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 02:02:14.427579 2026] [proxy_fcgi:error] [pid 14989:tid 14995] [client 20.58.161.206:1542] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 02:02:16.278121 2026] [:error] [pid 42792:tid 42835] [client 20.58.161.206:1158] [client 20.58.161.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aeuwKNNi9qR4GtafpfHm3wAAAg0"]
[Sat Apr 25 02:02:16.372509 2026] [:error] [pid 42852:tid 42862] [client 20.58.161.206:5923] [client 20.58.161.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aeuwKDMEwxhhak_EhMKmFAAAAkc"]
[Sat Apr 25 02:02:16.433970 2026] [:error] [pid 14989:tid 14994] [client 20.58.161.206:5497] [client 20.58.161.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aeuwKHhRYjsAsZTO4EOwbAAAAAM"]
[Sat Apr 25 02:02:16.496053 2026] [:error] [pid 14989:tid 15005] [client 20.58.161.206:5891] [client 20.58.161.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aeuwKHhRYjsAsZTO4EOwbQAAAA4"]
[Sat Apr 25 02:02:50.606836 2026] [proxy_fcgi:error] [pid 42852:tid 42865] [client 103.4.122.14:33962] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 02:29:11.325492 2026] [:error] [pid 42852:tid 42865] [client 185.213.175.92:44180] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "aeu2dzMEwxhhak_EhMKypQAAAko"]
[Sat Apr 25 02:29:11.336598 2026] [:error] [pid 42852:tid 42869] [client 185.213.175.92:44190] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/HEAD"] [unique_id "aeu2dzMEwxhhak_EhMKypwAAAk4"]
[Sat Apr 25 02:30:59.658399 2026] [proxy_fcgi:error] [pid 42792:tid 42832] [client 103.4.122.14:37326] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 2097152 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 1533'
[Sat Apr 25 02:47:10.562677 2026] [proxy_fcgi:error] [pid 28909:tid 28921] [client 103.4.122.14:39616] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:09:45.017470 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 20.250.14.166:57968] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:09:54.376250 2026] [proxy_fcgi:error] [pid 44320:tid 44370] [client 20.250.14.166:57952] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:09:58.030755 2026] [proxy_fcgi:error] [pid 46083:tid 46092] [client 20.250.14.166:58330] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:10:08.207505 2026] [:error] [pid 46083:tid 46097] [client 20.250.14.166:55416] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aevOIDxw_Zq74vWdjmnsZwAAAQo"]
[Sat Apr 25 04:10:10.135478 2026] [:error] [pid 44319:tid 44341] [client 20.250.14.166:53155] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aevOIszJPAVLUb2pWtI4eAAAAAw"]
[Sat Apr 25 04:10:14.233780 2026] [:error] [pid 46083:tid 46088] [client 20.250.14.166:62171] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aevOJjxw_Zq74vWdjmnsgQAAAQE"]
[Sat Apr 25 04:10:17.048598 2026] [:error] [pid 46083:tid 46105] [client 20.250.14.166:62152] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ayk.php"] [unique_id "aevOKTxw_Zq74vWdjmnshwAAARI"]
[Sat Apr 25 04:10:19.149789 2026] [:error] [pid 46083:tid 46110] [client 20.250.14.166:60690] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infos.php"] [unique_id "aevOKzxw_Zq74vWdjmnsjQAAARY"]
[Sat Apr 25 04:10:20.373666 2026] [:error] [pid 46083:tid 46104] [client 20.250.14.166:58326] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infos.php"] [unique_id "aevOLDxw_Zq74vWdjmnsjgAAARE"]
[Sat Apr 25 04:10:21.400170 2026] [:error] [pid 46083:tid 46108] [client 20.250.14.166:55982] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infos.php"] [unique_id "aevOLTxw_Zq74vWdjmnskwAAARQ"]
[Sat Apr 25 04:10:21.918352 2026] [:error] [pid 44321:tid 44405] [client 20.250.14.166:53180] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infos.php"] [unique_id "aevOLY1b5lV-asWa_Y4F6QAAAJY"]
[Sat Apr 25 04:10:22.664339 2026] [:error] [pid 46083:tid 46090] [client 20.250.14.166:60222] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.php"] [unique_id "aevOLjxw_Zq74vWdjmnslQAAAQM"]
[Sat Apr 25 04:10:23.541200 2026] [:error] [pid 46083:tid 46100] [client 20.250.14.166:57960] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.php"] [unique_id "aevOLzxw_Zq74vWdjmnsmAAAAQ0"]
[Sat Apr 25 04:10:25.812534 2026] [:error] [pid 46083:tid 46096] [client 20.250.14.166:55962] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.php"] [unique_id "aevOMTxw_Zq74vWdjmnspAAAAQk"]
[Sat Apr 25 04:10:27.547181 2026] [:error] [pid 46083:tid 46096] [client 20.250.14.166:37464] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.php"] [unique_id "aevOMzxw_Zq74vWdjmnsqwAAAQk"]
[Sat Apr 25 04:10:28.914322 2026] [:error] [pid 44319:tid 44329] [client 20.250.14.166:55374] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/embed.php"] [unique_id "aevONMzJPAVLUb2pWtI4jQAAAAA"]
[Sat Apr 25 04:10:29.579454 2026] [proxy_fcgi:error] [pid 44320:tid 44369] [client 103.4.122.14:50994] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:10:30.611895 2026] [:error] [pid 46083:tid 46104] [client 20.250.14.166:55382] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/embed.php"] [unique_id "aevONjxw_Zq74vWdjmnstQAAARE"]
[Sat Apr 25 04:10:31.584140 2026] [:error] [pid 46083:tid 46108] [client 20.250.14.166:62157] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/embed.php"] [unique_id "aevONzxw_Zq74vWdjmnsuQAAARQ"]
[Sat Apr 25 04:10:33.231815 2026] [:error] [pid 44320:tid 44378] [client 20.250.14.166:60216] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/embed.php"] [unique_id "aevOOTmFqSpku_dij8hXcQAAAFY"]
[Sat Apr 25 04:10:34.312538 2026] [:error] [pid 44425:tid 44433] [client 20.250.14.166:53173] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stat.php"] [unique_id "aevOOiUl-VlItvY2tR_RsgAAAMY"]
[Sat Apr 25 04:10:35.093899 2026] [:error] [pid 44425:tid 44435] [client 20.250.14.166:46655] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stat.php"] [unique_id "aevOOyUl-VlItvY2tR_RtQAAAMg"]
[Sat Apr 25 04:10:36.242266 2026] [:error] [pid 44319:tid 44335] [client 20.250.14.166:37461] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stat.php"] [unique_id "aevOPMzJPAVLUb2pWtI4jwAAAAY"]
[Sat Apr 25 04:10:37.384039 2026] [:error] [pid 44319:tid 44352] [client 20.250.14.166:50745] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stat.php"] [unique_id "aevOPczJPAVLUb2pWtI4lAAAABc"]
[Sat Apr 25 04:10:38.522452 2026] [:error] [pid 46083:tid 46102] [client 20.250.14.166:50737] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/setup.php"] [unique_id "aevOPjxw_Zq74vWdjmnswgAAAQ8"]
[Sat Apr 25 04:10:39.786218 2026] [:error] [pid 44319:tid 44339] [client 20.250.14.166:46608] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/setup.php"] [unique_id "aevOP8zJPAVLUb2pWtI4lgAAAAo"]
[Sat Apr 25 04:10:40.808693 2026] [:error] [pid 44425:tid 44427] [client 20.250.14.166:50732] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/setup.php"] [unique_id "aevOQCUl-VlItvY2tR_RxAAAAMA"]
[Sat Apr 25 04:10:42.378653 2026] [:error] [pid 46083:tid 46102] [client 20.250.14.166:60169] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/setup.php"] [unique_id "aevOQjxw_Zq74vWdjmnsygAAAQ8"]
[Sat Apr 25 04:10:43.066936 2026] [:error] [pid 46083:tid 46096] [client 20.250.14.166:37498] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/development.php"] [unique_id "aevOQzxw_Zq74vWdjmnszAAAAQk"]
[Sat Apr 25 04:10:43.747414 2026] [:error] [pid 44319:tid 44331] [client 20.250.14.166:60198] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/development.php"] [unique_id "aevOQ8zJPAVLUb2pWtI4mwAAAAI"]
[Sat Apr 25 04:10:44.481633 2026] [:error] [pid 44319:tid 44334] [client 20.250.14.166:62182] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/development.php"] [unique_id "aevORMzJPAVLUb2pWtI4nQAAAAU"]
[Sat Apr 25 04:10:45.432717 2026] [:error] [pid 44425:tid 44427] [client 20.250.14.166:60707] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/development.php"] [unique_id "aevORSUl-VlItvY2tR_RzgAAAMA"]
[Sat Apr 25 04:10:46.134103 2026] [:error] [pid 46083:tid 46107] [client 20.250.14.166:46629] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/environment.php"] [unique_id "aevORjxw_Zq74vWdjmnszQAAARM"]
[Sat Apr 25 04:10:47.564106 2026] [:error] [pid 44425:tid 44437] [client 20.250.14.166:60210] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/environment.php"] [unique_id "aevORyUl-VlItvY2tR_R0gAAAMo"]
[Sat Apr 25 04:10:48.113245 2026] [:error] [pid 44319:tid 44333] [client 20.250.14.166:46633] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/environment.php"] [unique_id "aevOSMzJPAVLUb2pWtI4ogAAAAQ"]
[Sat Apr 25 04:10:48.641105 2026] [:error] [pid 44319:tid 44336] [client 20.250.14.166:55991] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/environment.php"] [unique_id "aevOSMzJPAVLUb2pWtI4pAAAAAc"]
[Sat Apr 25 04:10:49.209703 2026] [:error] [pid 44319:tid 44331] [client 20.250.14.166:60209] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db_config.php"] [unique_id "aevOSczJPAVLUb2pWtI4pQAAAAI"]
[Sat Apr 25 04:10:49.763287 2026] [:error] [pid 44321:tid 44396] [client 20.250.14.166:46605] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db_config.php"] [unique_id "aevOSY1b5lV-asWa_Y4F9wAAAI0"]
[Sat Apr 25 04:10:50.284914 2026] [:error] [pid 44321:tid 44395] [client 20.250.14.166:50738] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db_config.php"] [unique_id "aevOSo1b5lV-asWa_Y4F-QAAAIw"]
[Sat Apr 25 04:10:50.819333 2026] [:error] [pid 44319:tid 44346] [client 20.250.14.166:50724] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db_config.php"] [unique_id "aevOSszJPAVLUb2pWtI4pwAAABE"]
[Sat Apr 25 04:10:51.459068 2026] [:error] [pid 44321:tid 44400] [client 20.250.14.166:57926] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevOS41b5lV-asWa_Y4F_QAAAJE"]
[Sat Apr 25 04:10:52.316342 2026] [:error] [pid 44319:tid 44330] [client 20.250.14.166:58357] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevOTMzJPAVLUb2pWtI4qQAAAAE"]
[Sat Apr 25 04:10:53.103156 2026] [:error] [pid 44425:tid 44445] [client 20.250.14.166:53148] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevOTSUl-VlItvY2tR_R3AAAANI"]
[Sat Apr 25 04:10:54.192174 2026] [:error] [pid 46083:tid 46108] [client 20.250.14.166:46596] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevOTjxw_Zq74vWdjmns0QAAARQ"]
[Sat Apr 25 04:10:54.831303 2026] [:error] [pid 44321:tid 44407] [client 20.250.14.166:62153] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/deploy.php"] [unique_id "aevOTo1b5lV-asWa_Y4GAQAAAJg"]
[Sat Apr 25 04:10:55.675029 2026] [:error] [pid 44425:tid 44438] [client 20.250.14.166:55999] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/deploy.php"] [unique_id "aevOTyUl-VlItvY2tR_R4gAAAMs"]
[Sat Apr 25 04:10:56.328359 2026] [:error] [pid 44319:tid 44329] [client 20.250.14.166:46640] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/deploy.php"] [unique_id "aevOUMzJPAVLUb2pWtI4rQAAAAA"]
[Sat Apr 25 04:10:56.821277 2026] [:error] [pid 46083:tid 46094] [client 20.250.14.166:46607] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/deploy.php"] [unique_id "aevOUDxw_Zq74vWdjmns2gAAAQc"]
[Sat Apr 25 04:10:57.346501 2026] [:error] [pid 46083:tid 46103] [client 20.250.14.166:55404] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apis.php"] [unique_id "aevOUTxw_Zq74vWdjmns3AAAARA"]
[Sat Apr 25 04:10:57.898828 2026] [:error] [pid 46083:tid 46087] [client 20.250.14.166:55969] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apis.php"] [unique_id "aevOUTxw_Zq74vWdjmns3gAAAQA"]
[Sat Apr 25 04:10:58.574594 2026] [:error] [pid 46083:tid 46108] [client 20.250.14.166:55977] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apis.php"] [unique_id "aevOUjxw_Zq74vWdjmns5AAAARQ"]
[Sat Apr 25 04:10:59.112774 2026] [:error] [pid 44320:tid 44378] [client 20.250.14.166:53128] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apis.php"] [unique_id "aevOUzmFqSpku_dij8hXeAAAAFY"]
[Sat Apr 25 04:10:59.707931 2026] [:error] [pid 44321:tid 44397] [client 20.250.14.166:50727] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aevOU41b5lV-asWa_Y4GBAAAAI4"]
[Sat Apr 25 04:11:00.773807 2026] [:error] [pid 44320:tid 44379] [client 20.250.14.166:55402] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aevOVDmFqSpku_dij8hXewAAAFc"]
[Sat Apr 25 04:11:01.755105 2026] [:error] [pid 44320:tid 44372] [client 20.250.14.166:57962] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aevOVTmFqSpku_dij8hXfgAAAFA"]
[Sat Apr 25 04:11:02.381087 2026] [:error] [pid 44321:tid 44393] [client 20.250.14.166:55939] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aevOVo1b5lV-asWa_Y4GBgAAAIo"]
[Sat Apr 25 04:11:03.510990 2026] [:error] [pid 44425:tid 44435] [client 20.250.14.166:46189] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1100.php"] [unique_id "aevOVyUl-VlItvY2tR_R8QAAAMg"]
[Sat Apr 25 04:11:04.150370 2026] [:error] [pid 44425:tid 44438] [client 20.250.14.166:37444] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1100.php"] [unique_id "aevOWCUl-VlItvY2tR_R9AAAAMs"]
[Sat Apr 25 04:11:04.806739 2026] [:error] [pid 44425:tid 44439] [client 20.250.14.166:62162] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1100.php"] [unique_id "aevOWCUl-VlItvY2tR_R9wAAAMw"]
[Sat Apr 25 04:11:24.805131 2026] [proxy_fcgi:error] [pid 44321:tid 44387] [client 20.250.14.166:57945] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:11:38.325063 2026] [proxy_fcgi:error] [pid 44425:tid 44439] [client 20.250.14.166:58355] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:11:41.249840 2026] [proxy_fcgi:error] [pid 46083:tid 46089] [client 20.250.14.166:58309] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:11:56.770146 2026] [proxy_fcgi:error] [pid 44319:tid 44350] [client 20.250.14.166:58305] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:11:57.341669 2026] [proxy_fcgi:error] [pid 44425:tid 44450] [client 20.250.14.166:58345] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 04:12:03.373046 2026] [:error] [pid 44319:tid 44332] [client 20.250.14.166:58314] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevOk8zJPAVLUb2pWtI44QAAAAM"]
[Sat Apr 25 04:12:03.950518 2026] [:error] [pid 44425:tid 44438] [client 20.250.14.166:50729] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevOkyUl-VlItvY2tR_SaQAAAMs"]
[Sat Apr 25 04:12:04.536074 2026] [:error] [pid 44425:tid 44439] [client 20.250.14.166:60684] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevOlCUl-VlItvY2tR_SagAAAMw"]
[Sat Apr 25 04:12:05.079641 2026] [:error] [pid 44425:tid 44429] [client 20.250.14.166:55403] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevOlSUl-VlItvY2tR_SbAAAAMI"]
[Sat Apr 25 04:12:05.618474 2026] [:error] [pid 44425:tid 44432] [client 20.250.14.166:50736] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Black.php"] [unique_id "aevOlSUl-VlItvY2tR_SbwAAAMU"]
[Sat Apr 25 04:12:06.201286 2026] [:error] [pid 44425:tid 44428] [client 20.250.14.166:58331] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Black.php"] [unique_id "aevOliUl-VlItvY2tR_ScQAAAME"]
[Sat Apr 25 04:12:06.706831 2026] [:error] [pid 44319:tid 44331] [client 20.250.14.166:50750] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Black.php"] [unique_id "aevOlszJPAVLUb2pWtI44wAAAAI"]
[Sat Apr 25 04:12:07.254874 2026] [:error] [pid 44425:tid 44433] [client 20.250.14.166:46592] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Black.php"] [unique_id "aevOlyUl-VlItvY2tR_SdAAAAMY"]
[Sat Apr 25 04:12:07.808441 2026] [:error] [pid 44319:tid 44347] [client 20.250.14.166:57974] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infoinfo.php"] [unique_id "aevOl8zJPAVLUb2pWtI46AAAABI"]
[Sat Apr 25 04:12:08.350452 2026] [:error] [pid 44320:tid 44376] [client 20.250.14.166:46616] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infoinfo.php"] [unique_id "aevOmDmFqSpku_dij8hXsQAAAFQ"]
[Sat Apr 25 04:12:08.912706 2026] [:error] [pid 44320:tid 44380] [client 20.250.14.166:55959] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infoinfo.php"] [unique_id "aevOmDmFqSpku_dij8hXsgAAAFg"]
[Sat Apr 25 04:12:09.613668 2026] [:error] [pid 44319:tid 44336] [client 20.250.14.166:60681] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/infoinfo.php"] [unique_id "aevOmczJPAVLUb2pWtI47AAAAAc"]
[Sat Apr 25 05:47:30.407899 2026] [proxy_fcgi:error] [pid 44320:tid 44374] [client 51.107.77.218:46842] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:47:30.979686 2026] [proxy_fcgi:error] [pid 44319:tid 44341] [client 51.107.77.218:29943] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:47:54.995010 2026] [proxy_fcgi:error] [pid 46083:tid 46102] [client 51.107.77.218:25236] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:47:55.550193 2026] [proxy_fcgi:error] [pid 44425:tid 44429] [client 51.107.77.218:33368] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:48:11.202645 2026] [:error] [pid 44425:tid 44444] [client 51.107.77.218:24746] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aevlGyUl-VlItvY2tR_8kQAAANE"]
[Sat Apr 25 05:48:22.838374 2026] [:error] [pid 44425:tid 44438] [client 51.107.77.218:20109] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aevlJiUl-VlItvY2tR_8pQAAAMs"]
[Sat Apr 25 05:48:24.674778 2026] [:error] [pid 44321:tid 44403] [client 51.107.77.218:44959] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "aevlKI1b5lV-asWa_Y4i8AAAAJQ"]
[Sat Apr 25 05:48:28.990230 2026] [:error] [pid 46083:tid 46092] [client 51.107.77.218:37532] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aevlLDxw_Zq74vWdjmklDwAAAQU"]
[Sat Apr 25 05:48:31.103352 2026] [:error] [pid 44320:tid 44379] [client 51.107.77.218:20143] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aevlLzmFqSpku_dij8hu3QAAAFc"]
[Sat Apr 25 05:48:33.205162 2026] [:error] [pid 44425:tid 44445] [client 51.107.77.218:52121] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aevlMSUl-VlItvY2tR_8uwAAANI"]
[Sat Apr 25 05:48:36.157941 2026] [:error] [pid 44425:tid 44435] [client 51.107.77.218:1723] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "aevlNCUl-VlItvY2tR_8wAAAAMg"]
[Sat Apr 25 05:48:39.252722 2026] [:error] [pid 44319:tid 44335] [client 51.107.77.218:30964] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aevlN8zJPAVLUb2pWtJM0QAAAAY"]
[Sat Apr 25 05:48:42.759367 2026] [:error] [pid 44320:tid 44366] [client 51.107.77.218:52151] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aevlOjmFqSpku_dij8hu4gAAAEo"]
[Sat Apr 25 05:48:44.988719 2026] [:error] [pid 44425:tid 44428] [client 51.107.77.218:56494] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aevlPCUl-VlItvY2tR_80QAAAME"]
[Sat Apr 25 05:48:46.563899 2026] [:error] [pid 44425:tid 44439] [client 51.107.77.218:1708] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jga.php"] [unique_id "aevlPiUl-VlItvY2tR_80wAAAMw"]
[Sat Apr 25 05:48:47.760657 2026] [:error] [pid 46083:tid 46092] [client 51.107.77.218:20116] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aevlPzxw_Zq74vWdjmklGAAAAQU"]
[Sat Apr 25 05:48:49.043913 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:44963] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aevlQTxw_Zq74vWdjmklHAAAAQg"]
[Sat Apr 25 05:48:50.980961 2026] [:error] [pid 44320:tid 44367] [client 51.107.77.218:22769] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aevlQjmFqSpku_dij8hu5wAAAEs"]
[Sat Apr 25 05:48:51.982061 2026] [:error] [pid 46083:tid 46105] [client 51.107.77.218:56513] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "aevlQzxw_Zq74vWdjmklIwAAARI"]
[Sat Apr 25 05:48:53.960863 2026] [:error] [pid 46083:tid 46111] [client 51.107.77.218:44951] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bmi.php"] [unique_id "aevlRTxw_Zq74vWdjmklJwAAARc"]
[Sat Apr 25 05:48:57.391883 2026] [:error] [pid 44425:tid 44447] [client 51.107.77.218:1367] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bmi.php"] [unique_id "aevlSSUl-VlItvY2tR_82wAAANQ"]
[Sat Apr 25 05:48:59.482120 2026] [:error] [pid 44425:tid 44446] [client 51.107.77.218:52096] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bmi.php"] [unique_id "aevlSyUl-VlItvY2tR_83gAAANM"]
[Sat Apr 25 05:49:00.397583 2026] [:error] [pid 44321:tid 44385] [client 51.107.77.218:16758] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bmi.php"] [unique_id "aevlTI1b5lV-asWa_Y4i_AAAAII"]
[Sat Apr 25 05:49:01.784145 2026] [:error] [pid 44425:tid 44443] [client 51.107.77.218:22776] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aevlTSUl-VlItvY2tR_84AAAANA"]
[Sat Apr 25 05:49:03.872039 2026] [:error] [pid 46083:tid 46096] [client 51.107.77.218:51492] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aevlTzxw_Zq74vWdjmklLAAAAQk"]
[Sat Apr 25 05:49:06.131648 2026] [:error] [pid 44425:tid 44450] [client 51.107.77.218:1719] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aevlUiUl-VlItvY2tR_8_gAAANc"]
[Sat Apr 25 05:49:07.788803 2026] [:error] [pid 44320:tid 44376] [client 51.107.77.218:28310] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "aevlUzmFqSpku_dij8hu-QAAAFQ"]
[Sat Apr 25 05:49:08.752325 2026] [:error] [pid 44319:tid 44351] [client 51.107.77.218:22772] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "aevlVMzJPAVLUb2pWtJM4wAAABY"]
[Sat Apr 25 05:49:44.234081 2026] [proxy_fcgi:error] [pid 46083:tid 46094] [client 51.107.77.218:44340] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:50:15.898589 2026] [proxy_fcgi:error] [pid 44319:tid 44342] [client 51.107.77.218:1748] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:50:30.261667 2026] [proxy_fcgi:error] [pid 44425:tid 44449] [client 51.107.77.218:19588] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:50:30.833781 2026] [proxy_fcgi:error] [pid 44425:tid 44436] [client 51.107.77.218:49546] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:50:50.756375 2026] [:error] [pid 44321:tid 44386] [client 51.107.77.218:49639] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aevluo1b5lV-asWa_Y4j5AAAAIM"]
[Sat Apr 25 05:50:53.841869 2026] [:error] [pid 44321:tid 44389] [client 51.107.77.218:19662] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aevlvY1b5lV-asWa_Y4j6QAAAIY"]
[Sat Apr 25 05:51:00.693763 2026] [:error] [pid 46083:tid 46092] [client 51.107.77.218:49630] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aevlxDxw_Zq74vWdjmkmIAAAAQU"]
[Sat Apr 25 05:51:02.434568 2026] [:error] [pid 44319:tid 44352] [client 51.107.77.218:50219] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "aevlxszJPAVLUb2pWtJNVAAAABc"]
[Sat Apr 25 05:51:03.659264 2026] [:error] [pid 44321:tid 44389] [client 51.107.77.218:15756] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "aevlx41b5lV-asWa_Y4j_AAAAIY"]
[Sat Apr 25 05:51:04.880098 2026] [:error] [pid 44425:tid 44433] [client 51.107.77.218:50221] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "aevlyCUl-VlItvY2tR_9vgAAAMY"]
[Sat Apr 25 05:51:06.030348 2026] [:error] [pid 44425:tid 44446] [client 51.107.77.218:15791] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "aevlyiUl-VlItvY2tR_9wwAAANM"]
[Sat Apr 25 05:51:07.454662 2026] [:error] [pid 44320:tid 44379] [client 51.107.77.218:50192] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd.php"] [unique_id "aevlyzmFqSpku_dij8hvUwAAAFc"]
[Sat Apr 25 05:51:08.528624 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:53036] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aevlzDxw_Zq74vWdjmkmJwAAAQE"]
[Sat Apr 25 05:51:11.661745 2026] [:error] [pid 46083:tid 46098] [client 51.107.77.218:42018] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aevlzzxw_Zq74vWdjmkmLgAAAQs"]
[Sat Apr 25 05:51:12.706300 2026] [:error] [pid 44425:tid 44439] [client 51.107.77.218:19257] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aevl0CUl-VlItvY2tR_9yQAAAMw"]
[Sat Apr 25 05:51:13.678508 2026] [:error] [pid 44425:tid 44444] [client 51.107.77.218:19222] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "aevl0SUl-VlItvY2tR_9ywAAANE"]
[Sat Apr 25 05:51:14.383323 2026] [:error] [pid 44321:tid 44399] [client 51.107.77.218:19674] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aevl0o1b5lV-asWa_Y4kAQAAAJA"]
[Sat Apr 25 05:51:15.882870 2026] [:error] [pid 46083:tid 46087] [client 51.107.77.218:43673] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aevl0zxw_Zq74vWdjmkmOwAAAQA"]
[Sat Apr 25 05:51:16.677290 2026] [:error] [pid 46083:tid 46101] [client 51.107.77.218:45019] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aevl1Dxw_Zq74vWdjmkmPgAAAQ4"]
[Sat Apr 25 05:51:18.359455 2026] [:error] [pid 44425:tid 44439] [client 51.107.77.218:18702] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "aevl1iUl-VlItvY2tR_90gAAAMw"]
[Sat Apr 25 05:51:20.388820 2026] [:error] [pid 44320:tid 44365] [client 51.107.77.218:45044] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aevl2DmFqSpku_dij8hvZwAAAEk"]
[Sat Apr 25 05:51:25.479515 2026] [:error] [pid 44425:tid 44429] [client 51.107.77.218:53043] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aevl3SUl-VlItvY2tR_93AAAAMI"]
[Sat Apr 25 05:51:27.986610 2026] [:error] [pid 44319:tid 44333] [client 51.107.77.218:52976] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aevl38zJPAVLUb2pWtJNYAAAAAQ"]
[Sat Apr 25 05:51:29.201678 2026] [:error] [pid 44425:tid 44447] [client 51.107.77.218:18720] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "aevl4SUl-VlItvY2tR_96AAAANQ"]
[Sat Apr 25 05:51:30.351270 2026] [:error] [pid 44425:tid 44443] [client 51.107.77.218:52928] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aevl4iUl-VlItvY2tR_96wAAANA"]
[Sat Apr 25 05:51:31.070809 2026] [:error] [pid 44320:tid 44361] [client 51.107.77.218:18763] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aevl4zmFqSpku_dij8hvbwAAAEU"]
[Sat Apr 25 05:51:33.280918 2026] [:error] [pid 44425:tid 44448] [client 51.107.77.218:43648] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aevl5SUl-VlItvY2tR_98QAAANU"]
[Sat Apr 25 05:51:34.320454 2026] [:error] [pid 46083:tid 46089] [client 51.107.77.218:18814] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amax.php"] [unique_id "aevl5jxw_Zq74vWdjmkmSAAAAQI"]
[Sat Apr 25 05:51:36.857527 2026] [:error] [pid 44319:tid 44339] [client 51.107.77.218:52957] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aevl6MzJPAVLUb2pWtJNYwAAAAo"]
[Sat Apr 25 05:51:40.205829 2026] [:error] [pid 44321:tid 44393] [client 51.107.77.218:19657] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aevl7I1b5lV-asWa_Y4kEwAAAIo"]
[Sat Apr 25 05:51:41.772559 2026] [:error] [pid 44425:tid 44443] [client 51.107.77.218:19242] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aevl7SUl-VlItvY2tR_-AgAAANA"]
[Sat Apr 25 05:51:43.600457 2026] [:error] [pid 44425:tid 44431] [client 51.107.77.218:53046] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "aevl7yUl-VlItvY2tR_-BwAAAMQ"]
[Sat Apr 25 05:51:45.773946 2026] [:error] [pid 46083:tid 46094] [client 51.107.77.218:17260] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aevl8Txw_Zq74vWdjmkmYgAAAQc"]
[Sat Apr 25 05:51:46.566426 2026] [:error] [pid 44425:tid 44438] [client 51.107.77.218:19661] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aevl8iUl-VlItvY2tR_-DgAAAMs"]
[Sat Apr 25 05:51:47.194954 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:17248] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Jcrop.php"] [unique_id "aevl8zxw_Zq74vWdjmkmZgAAAQE"]
[Sat Apr 25 05:52:07.570832 2026] [proxy_fcgi:error] [pid 44321:tid 44402] [client 51.107.77.218:24242] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:52:24.496288 2026] [proxy_fcgi:error] [pid 44425:tid 44442] [client 51.107.77.218:45025] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:52:25.049959 2026] [proxy_fcgi:error] [pid 44425:tid 44429] [client 51.107.77.218:15784] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:52:41.275812 2026] [proxy_fcgi:error] [pid 44319:tid 44341] [client 51.107.77.218:41991] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:52:52.483875 2026] [proxy_fcgi:error] [pid 46083:tid 46094] [client 51.107.77.218:50223] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:53:04.036392 2026] [:error] [pid 44425:tid 44431] [client 51.107.77.218:25765] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevmQCUl-VlItvY2tR_-ewAAAMQ"]
[Sat Apr 25 05:53:05.260890 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:19246] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevmQTxw_Zq74vWdjmkmzwAAAQE"]
[Sat Apr 25 05:53:06.375650 2026] [:error] [pid 46083:tid 46096] [client 51.107.77.218:42038] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevmQjxw_Zq74vWdjmkm0QAAAQk"]
[Sat Apr 25 05:53:09.152601 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:43680] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevmRTxw_Zq74vWdjmkm2gAAAQE"]
[Sat Apr 25 05:53:11.203812 2026] [:error] [pid 44319:tid 44339] [client 51.107.77.218:45021] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jk.php"] [unique_id "aevmR8zJPAVLUb2pWtJNngAAAAo"]
[Sat Apr 25 05:53:12.972973 2026] [:error] [pid 44319:tid 44346] [client 51.107.77.218:42017] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jk.php"] [unique_id "aevmSMzJPAVLUb2pWtJNpwAAABE"]
[Sat Apr 25 05:53:13.916014 2026] [:error] [pid 44319:tid 44343] [client 51.107.77.218:25747] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jk.php"] [unique_id "aevmSczJPAVLUb2pWtJNqwAAAA4"]
[Sat Apr 25 05:53:16.210512 2026] [:error] [pid 44425:tid 44430] [client 51.107.77.218:18782] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jk.php"] [unique_id "aevmTCUl-VlItvY2tR_-gwAAAMM"]
[Sat Apr 25 05:53:33.820690 2026] [:error] [pid 44320:tid 44361] [client 51.107.77.218:28910] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aevmXTmFqSpku_dij8hvsQAAAEU"]
[Sat Apr 25 05:53:36.503785 2026] [:error] [pid 44425:tid 44430] [client 51.107.77.218:26863] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aevmYCUl-VlItvY2tR_-ogAAAMM"]
[Sat Apr 25 05:53:38.038301 2026] [:error] [pid 46083:tid 46093] [client 51.107.77.218:1143] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aevmYjxw_Zq74vWdjmknGAAAAQY"]
[Sat Apr 25 05:53:39.070942 2026] [:error] [pid 44321:tid 44392] [client 51.107.77.218:17781] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa.php"] [unique_id "aevmY41b5lV-asWa_Y4kZQAAAIk"]
[Sat Apr 25 05:53:39.906104 2026] [:error] [pid 46083:tid 46091] [client 51.107.77.218:26789] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aevmYzxw_Zq74vWdjmknHgAAAQQ"]
[Sat Apr 25 05:53:40.786426 2026] [:error] [pid 44320:tid 44369] [client 51.107.77.218:43759] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aevmZDmFqSpku_dij8hvtwAAAE0"]
[Sat Apr 25 05:53:41.923685 2026] [:error] [pid 44320:tid 44362] [client 51.107.77.218:34902] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aevmZTmFqSpku_dij8hvuQAAAEY"]
[Sat Apr 25 05:53:42.787231 2026] [:error] [pid 44321:tid 44390] [client 51.107.77.218:34900] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "aevmZo1b5lV-asWa_Y4kbAAAAIc"]
[Sat Apr 25 05:53:43.700272 2026] [:error] [pid 44320:tid 44364] [client 51.107.77.218:27269] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aevmZzmFqSpku_dij8hvuwAAAEg"]
[Sat Apr 25 05:53:44.327252 2026] [:error] [pid 44321:tid 44391] [client 51.107.77.218:29358] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aevmaI1b5lV-asWa_Y4kcwAAAIg"]
[Sat Apr 25 05:53:45.417221 2026] [:error] [pid 44319:tid 44332] [client 51.107.77.218:1880] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aevmaczJPAVLUb2pWtJNvgAAAAM"]
[Sat Apr 25 05:53:46.465161 2026] [:error] [pid 44319:tid 44335] [client 51.107.77.218:39025] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "aevmaszJPAVLUb2pWtJNwAAAAAY"]
[Sat Apr 25 05:53:47.353051 2026] [:error] [pid 44321:tid 44395] [client 51.107.77.218:25287] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aevma41b5lV-asWa_Y4kfgAAAIw"]
[Sat Apr 25 05:53:48.182661 2026] [:error] [pid 46083:tid 46091] [client 51.107.77.218:25299] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aevmbDxw_Zq74vWdjmknIQAAAQQ"]
[Sat Apr 25 05:53:49.425777 2026] [:error] [pid 44320:tid 44372] [client 51.107.77.218:27305] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aevmbTmFqSpku_dij8hvvAAAAFA"]
[Sat Apr 25 05:53:50.259160 2026] [:error] [pid 44425:tid 44446] [client 51.107.77.218:34889] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "aevmbiUl-VlItvY2tR_-rgAAANM"]
[Sat Apr 25 05:53:51.141862 2026] [:error] [pid 44320:tid 44363] [client 51.107.77.218:38978] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aevmbzmFqSpku_dij8hvvgAAAEc"]
[Sat Apr 25 05:53:52.114644 2026] [:error] [pid 44320:tid 44359] [client 51.107.77.218:40264] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aevmcDmFqSpku_dij8hvvwAAAEM"]
[Sat Apr 25 05:53:52.811176 2026] [:error] [pid 44320:tid 44374] [client 51.107.77.218:16311] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aevmcDmFqSpku_dij8hvwwAAAFI"]
[Sat Apr 25 05:53:53.672521 2026] [:error] [pid 44321:tid 44405] [client 51.107.77.218:34851] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "aevmcY1b5lV-asWa_Y4kiAAAAJY"]
[Sat Apr 25 05:53:54.544712 2026] [:error] [pid 44319:tid 44352] [client 51.107.77.218:38997] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "aevmcszJPAVLUb2pWtJNxQAAABc"]
[Sat Apr 25 05:53:55.619663 2026] [:error] [pid 44321:tid 44407] [client 51.107.77.218:34830] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "aevmc41b5lV-asWa_Y4klwAAAJg"]
[Sat Apr 25 05:53:56.353263 2026] [:error] [pid 44425:tid 44430] [client 51.107.77.218:25317] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "aevmdCUl-VlItvY2tR_-uwAAAMM"]
[Sat Apr 25 05:53:57.567300 2026] [:error] [pid 44321:tid 44403] [client 51.107.77.218:34349] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "aevmdY1b5lV-asWa_Y4koAAAAJQ"]
[Sat Apr 25 05:53:58.388393 2026] [:error] [pid 44320:tid 44374] [client 51.107.77.218:38006] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aevmdjmFqSpku_dij8hv0QAAAFI"]
[Sat Apr 25 05:53:59.238798 2026] [:error] [pid 44321:tid 44402] [client 51.107.77.218:34304] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "aevmd41b5lV-asWa_Y4kpAAAAJM"]
[Sat Apr 25 05:54:14.440325 2026] [proxy_fcgi:error] [pid 46083:tid 46111] [client 51.107.77.218:35417] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:54:25.621909 2026] [proxy_fcgi:error] [pid 46083:tid 46099] [client 51.107.77.218:26303] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:55:10.445670 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 51.107.77.218:40926] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:55:20.193949 2026] [proxy_fcgi:error] [pid 44321:tid 44393] [client 51.107.77.218:50251] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:55:29.793896 2026] [proxy_fcgi:error] [pid 44320:tid 44371] [client 51.107.77.218:13973] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 05:55:38.838596 2026] [:error] [pid 44319:tid 44339] [client 51.107.77.218:23783] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aevm2szJPAVLUb2pWtJODwAAAAo"]
[Sat Apr 25 05:55:40.846200 2026] [:error] [pid 46083:tid 46102] [client 51.107.77.218:23778] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aevm3Dxw_Zq74vWdjmkoAwAAAQ8"]
[Sat Apr 25 05:55:43.395130 2026] [:error] [pid 44319:tid 44345] [client 51.107.77.218:23746] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aevm38zJPAVLUb2pWtJOGQAAABA"]
[Sat Apr 25 05:55:45.390514 2026] [:error] [pid 44320:tid 44373] [client 51.107.77.218:15862] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aevm4TmFqSpku_dij8hwMgAAAFE"]
[Sat Apr 25 05:55:48.660545 2026] [:error] [pid 44321:tid 44394] [client 51.107.77.218:23786] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mk.php"] [unique_id "aevm5I1b5lV-asWa_Y4lCAAAAIs"]
[Sat Apr 25 05:55:50.030053 2026] [:error] [pid 44321:tid 44385] [client 51.107.77.218:46742] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mk.php"] [unique_id "aevm5o1b5lV-asWa_Y4lCgAAAII"]
[Sat Apr 25 05:55:51.107911 2026] [:error] [pid 44320:tid 44361] [client 51.107.77.218:40884] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mk.php"] [unique_id "aevm5zmFqSpku_dij8hwQAAAAEU"]
[Sat Apr 25 05:55:52.364887 2026] [:error] [pid 44321:tid 44402] [client 51.107.77.218:24824] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mk.php"] [unique_id "aevm6I1b5lV-asWa_Y4lDgAAAJM"]
[Sat Apr 25 05:55:53.739090 2026] [:error] [pid 44425:tid 44451] [client 51.107.77.218:46730] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aevm6SUl-VlItvY2tR8ALgAAANg"]
[Sat Apr 25 05:55:54.756694 2026] [:error] [pid 44425:tid 44440] [client 51.107.77.218:39615] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aevm6iUl-VlItvY2tR8ANAAAAM0"]
[Sat Apr 25 05:55:56.771436 2026] [:error] [pid 44319:tid 44343] [client 51.107.77.218:42101] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aevm7MzJPAVLUb2pWtJOKAAAAA4"]
[Sat Apr 25 05:55:57.566959 2026] [:error] [pid 46083:tid 46097] [client 51.107.77.218:21951] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "aevm7Txw_Zq74vWdjmkoMAAAAQo"]
[Sat Apr 25 05:55:58.617340 2026] [:error] [pid 46083:tid 46091] [client 51.107.77.218:56513] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aevm7jxw_Zq74vWdjmkoMwAAAQQ"]
[Sat Apr 25 05:56:02.206895 2026] [:error] [pid 44425:tid 44429] [client 51.107.77.218:40946] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aevm8iUl-VlItvY2tR8APgAAAMI"]
[Sat Apr 25 05:56:04.164003 2026] [:error] [pid 44321:tid 44395] [client 51.107.77.218:50272] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aevm9I1b5lV-asWa_Y4lGwAAAIw"]
[Sat Apr 25 05:56:06.089341 2026] [:error] [pid 46083:tid 46112] [client 51.107.77.218:42084] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "aevm9jxw_Zq74vWdjmkoSwAAARg"]
[Sat Apr 25 05:56:07.134202 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:40941] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aevm9zxw_Zq74vWdjmkoTgAAAQE"]
[Sat Apr 25 05:56:08.672009 2026] [:error] [pid 44319:tid 44344] [client 51.107.77.218:35335] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aevm-MzJPAVLUb2pWtJOMAAAAA8"]
[Sat Apr 25 05:56:12.767402 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:24769] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aevm_Dxw_Zq74vWdjmkoWwAAAQg"]
[Sat Apr 25 05:56:14.273895 2026] [:error] [pid 44425:tid 44447] [client 51.107.77.218:46816] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/retu11.PhP7"] [unique_id "aevm_iUl-VlItvY2tR8AQQAAANQ"]
[Sat Apr 25 05:56:15.431315 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:21929] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aevm_zxw_Zq74vWdjmkoZQAAAQE"]
[Sat Apr 25 05:56:17.260094 2026] [:error] [pid 46083:tid 46090] [client 51.107.77.218:56538] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aevnATxw_Zq74vWdjmkoagAAAQM"]
[Sat Apr 25 05:56:18.950708 2026] [:error] [pid 44320:tid 44379] [client 51.107.77.218:42099] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aevnAjmFqSpku_dij8hwTwAAAFc"]
[Sat Apr 25 05:56:20.238798 2026] [:error] [pid 44319:tid 44343] [client 51.107.77.218:46768] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "aevnBMzJPAVLUb2pWtJOMQAAAA4"]
[Sat Apr 25 05:56:21.062862 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:39609] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aevnBTxw_Zq74vWdjmkocQAAAQE"]
[Sat Apr 25 05:56:21.770524 2026] [:error] [pid 44320:tid 44366] [client 51.107.77.218:35328] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aevnBTmFqSpku_dij8hwUwAAAEo"]
[Sat Apr 25 05:56:22.347939 2026] [:error] [pid 46083:tid 46112] [client 51.107.77.218:39578] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aevnBjxw_Zq74vWdjmkodgAAARg"]
[Sat Apr 25 05:56:22.825710 2026] [:error] [pid 46083:tid 46108] [client 51.107.77.218:1423] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "aevnBjxw_Zq74vWdjmkoeQAAARQ"]
[Sat Apr 25 05:56:23.333146 2026] [:error] [pid 44425:tid 44446] [client 51.107.77.218:35338] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aevnByUl-VlItvY2tR8AQwAAANM"]
[Sat Apr 25 05:56:23.828068 2026] [:error] [pid 44425:tid 44431] [client 51.107.77.218:42064] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aevnByUl-VlItvY2tR8ARQAAAMQ"]
[Sat Apr 25 05:56:24.475293 2026] [:error] [pid 44320:tid 44372] [client 51.107.77.218:50250] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aevnCDmFqSpku_dij8hwVAAAAFA"]
[Sat Apr 25 05:56:25.208832 2026] [:error] [pid 44425:tid 44450] [client 51.107.77.218:39564] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoo.php"] [unique_id "aevnCSUl-VlItvY2tR8ASAAAANc"]
[Sat Apr 25 05:56:26.096773 2026] [:error] [pid 44425:tid 44438] [client 51.107.77.218:35380] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "aevnCiUl-VlItvY2tR8ASgAAAMs"]
[Sat Apr 25 05:56:26.732724 2026] [:error] [pid 46083:tid 46089] [client 51.107.77.218:46769] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "aevnCjxw_Zq74vWdjmkofgAAAQI"]
[Sat Apr 25 05:56:27.415622 2026] [:error] [pid 46083:tid 46099] [client 51.107.77.218:56545] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "aevnCzxw_Zq74vWdjmkofwAAAQw"]
[Sat Apr 25 05:56:28.140820 2026] [:error] [pid 44425:tid 44444] [client 51.107.77.218:24781] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admlo.php"] [unique_id "aevnDCUl-VlItvY2tR8ATwAAANE"]
[Sat Apr 25 05:56:28.884534 2026] [:error] [pid 44321:tid 44401] [client 51.107.77.218:21889] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aevnDI1b5lV-asWa_Y4lKAAAAJI"]
[Sat Apr 25 05:56:29.664970 2026] [:error] [pid 44320:tid 44364] [client 51.107.77.218:1304] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aevnDTmFqSpku_dij8hwWAAAAEg"]
[Sat Apr 25 05:56:30.398558 2026] [:error] [pid 44319:tid 44348] [client 51.107.77.218:46845] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aevnDszJPAVLUb2pWtJONQAAABM"]
[Sat Apr 25 05:56:31.066487 2026] [:error] [pid 44321:tid 44389] [client 51.107.77.218:1324] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gcqoa.php"] [unique_id "aevnD41b5lV-asWa_Y4lLAAAAIY"]
[Sat Apr 25 05:56:31.629073 2026] [:error] [pid 44321:tid 44393] [client 51.107.77.218:23222] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aevnD41b5lV-asWa_Y4lTgAAAIo"]
[Sat Apr 25 05:56:32.233850 2026] [:error] [pid 44319:tid 44344] [client 51.107.77.218:46766] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aevnEMzJPAVLUb2pWtJONgAAAA8"]
[Sat Apr 25 05:56:32.969874 2026] [:error] [pid 46083:tid 46112] [client 51.107.77.218:46844] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aevnEDxw_Zq74vWdjmkoqwAAARg"]
[Sat Apr 25 05:56:34.265314 2026] [:error] [pid 46083:tid 46102] [client 51.107.77.218:21940] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "aevnEjxw_Zq74vWdjmkorwAAAQ8"]
[Sat Apr 25 05:56:35.430801 2026] [:error] [pid 46083:tid 46094] [client 51.107.77.218:15852] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "aevnEzxw_Zq74vWdjmkouAAAAQc"]
[Sat Apr 25 05:56:57.027086 2026] [proxy_fcgi:error] [pid 44425:tid 44430] [client 51.107.77.218:1331] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 07:55:33.603711 2026] [proxy_fcgi:error] [pid 44320:tid 44379] [client 158.158.74.32:27185] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 07:55:39.086930 2026] [proxy_fcgi:error] [pid 44319:tid 44351] [client 158.158.74.32:5100] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 07:55:52.739126 2026] [proxy_fcgi:error] [pid 44425:tid 44448] [client 158.158.74.32:62736] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 07:56:07.787030 2026] [proxy_fcgi:error] [pid 44320:tid 44358] [client 158.158.74.32:47093] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 07:56:08.380083 2026] [proxy_fcgi:error] [pid 46083:tid 46103] [client 158.158.74.32:55797] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sat Apr 25 07:56:13.906128 2026] [:error] [pid 46083:tid 46088] [client 158.158.74.32:33479] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.php"] [unique_id "aewDHTxw_Zq74vWdjmlgfwAAAQE"]
[Sat Apr 25 07:56:14.390872 2026] [:error] [pid 44321:tid 44384] [client 158.158.74.32:47054] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.php"] [unique_id "aewDHo1b5lV-asWa_Y4_iAAAAIE"]
[Sat Apr 25 07:56:14.873134 2026] [:error] [pid 44321:tid 44390] [client 158.158.74.32:52353] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.php"] [unique_id "aewDHo1b5lV-asWa_Y4_iQAAAIc"]
[Sat Apr 25 07:56:15.370297 2026] [:error] [pid 44321:tid 44391] [client 158.158.74.32:27472] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aws.php"] [unique_id "aewDH41b5lV-asWa_Y4_jAAAAIg"]
[Sat Apr 25 07:56:15.894789 2026] [:error] [pid 44319:tid 44343] [client 158.158.74.32:52409] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/embed.php"] [unique_id "aewDH8zJPAVLUb2pWtJiegAAAA4"]
[Sat Apr 25 07:56:16.397508 2026] [:error] [pid 46083:tid 46093] [client 158.158.74.32:29535] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/embed.php"] [unique_id "aewDIDxw_Zq74vWdjmlggwAAAQY"]
[Sat Apr 25 07:56:16.877791 2026] [:error] [pid 44425:tid 44434] [client 158.158.74.32:59713] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/embed.php"] [unique_id "aewDICUl-VlItvY2tR8qAgAAAMc"]
[Sat Apr 25 07:56:17.372531 2026] [:error] [pid 44425:tid 44450] [client 158.158.74.32:60154] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/embed.php"] [unique_id "aewDISUl-VlItvY2tR8qCAAAANc"]
[Sat Apr 25 07:56:17.853090 2026] [:error] [pid 44320:tid 44375] [client 158.158.74.32:60147] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stat.php"] [unique_id "aewDITmFqSpku_dij8iG8gAAAFM"]
[Sat Apr 25 07:56:18.354824 2026] [:error] [pid 44319:tid 44352] [client 158.158.74.32:33961] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stat.php"] [unique_id "aewDIszJPAVLUb2pWtJifAAAABc"]
[Sat Apr 25 07:56:18.855211 2026] [:error] [pid 44321:tid 44385] [client 158.158.74.32:54469] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stat.php"] [unique_id "aewDIo1b5lV-asWa_Y4_kAAAAII"]
[Sat Apr 25 07:56:19.348734 2026] [:error] [pid 44320:tid 44356] [client 158.158.74.32:59745] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/stat.php"] [unique_id "aewDIzmFqSpku_dij8iG9QAAAEA"]
[Sat Apr 25 07:56:19.845647 2026] [:error] [pid 44425:tid 44446] [client 158.158.74.32:62803] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/setup.php"] [unique_id "aewDIyUl-VlItvY2tR8qDQAAANM"]
[Sat Apr 25 07:56:20.328918 2026] [:error] [pid 44425:tid 44436] [client 158.158.74.32:46069] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/setup.php"] [unique_id "aewDJCUl-VlItvY2tR8qEAAAAMk"]
[Sat Apr 25 07:56:20.825148 2026] [:error] [pid 46083:tid 46088] [client 158.158.74.32:30922] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/setup.php"] [unique_id "aewDJDxw_Zq74vWdjmlgjQAAAQE"]
[Sat Apr 25 07:56:21.321315 2026] [:error] [pid 44425:tid 44434] [client 158.158.74.32:29567] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/setup.php"] [unique_id "aewDJSUl-VlItvY2tR8qFAAAAMc"]
[Sat Apr 25 07:56:21.825096 2026] [:error] [pid 44321:tid 44401] [client 158.158.74.32:51483] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/development.php"] [unique_id "aewDJY1b5lV-asWa_Y4_kwAAAJI"]
[Sat Apr 25 07:56:22.332899 2026] [:error] [pid 44425:tid 44428] [client 158.158.74.32:54501] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/development.php"] [unique_id "aewDJiUl-VlItvY2tR8qGAAAAME"]
[Sat Apr 25 07:56:22.838652 2026] [:error] [pid 46083:tid 46094] [client 158.158.74.32:49253] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/development.php"] [unique_id "aewDJjxw_Zq74vWdjmlgkgAAAQc"]
[Sat Apr 25 07:56:23.346640 2026] [:error] [pid 46083:tid 46109] [client 158.158.74.32:4951] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/development.php"] [unique_id "aewDJzxw_Zq74vWdjmlgkwAAARU"]
[Sat Apr 25 07:56:23.832547 2026] [:error] [pid 44425:tid 44427] [client 158.158.74.32:33945] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/environment.php"] [unique_id "aewDJyUl-VlItvY2tR8qIAAAAMA"]
[Sat Apr 25 07:56:24.328861 2026] [:error] [pid 44425:tid 44434] [client 158.158.74.32:29877] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/environment.php"] [unique_id "aewDKCUl-VlItvY2tR8qIwAAAMc"]
[Sat Apr 25 07:56:24.840751 2026] [:error] [pid 44320:tid 44368] [client 158.158.74.32:27148] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/environment.php"] [unique_id "aewDKDmFqSpku_dij8iG-AAAAEw"]
[Sat Apr 25 07:56:25.320884 2026] [:error] [pid 44425:tid 44437] [client 158.158.74.32:49223] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/environment.php"] [unique_id "aewDKSUl-VlItvY2tR8qJAAAAMo"]
[Sat Apr 25 07:56:25.821666 2026] [:error] [pid 44425:tid 44441] [client 158.158.74.32:53962] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db_config.php"] [unique_id "aewDKSUl-VlItvY2tR8qJwAAAM4"]
[Sat Apr 25 07:56:26.327371 2026] [:error] [pid 44319:tid 44353] [client 158.158.74.32:62734] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db_config.php"] [unique_id "aewDKszJPAVLUb2pWtJigQAAABg"]
[Sat Apr 25 07:56:26.812479 2026] [:error] [pid 44319:tid 44347] [client 158.158.74.32:51516] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db_config.php"] [unique_id "aewDKszJPAVLUb2pWtJihAAAABI"]
[Sat Apr 25 07:56:27.321115 2026] [:error] [pid 46083:tid 46089] [client 158.158.74.32:47009] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db_config.php"] [unique_id "aewDKzxw_Zq74vWdjmlglwAAAQI"]
[Sat Apr 25 07:56:27.814602 2026] [:error] [pid 46083:tid 46112] [client 158.158.74.32:4953] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aewDKzxw_Zq74vWdjmlgmAAAARg"]
[Sat Apr 25 07:56:28.314290 2026] [:error] [pid 44320:tid 44376] [client 158.158.74.32:58487] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aewDLDmFqSpku_dij8iG-wAAAFQ"]
[Sat Apr 25 07:56:28.807489 2026] [:error] [pid 44320:tid 44371] [client 158.158.74.32:45252] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aewDLDmFqSpku_dij8iG_AAAAE8"]
[Sat Apr 25 07:56:29.309734 2026] [:error] [pid 44321:tid 44384] [client 158.158.74.32:4765] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aewDLY1b5lV-asWa_Y4_nQAAAIE"]
[Sat Apr 25 07:56:29.818482 2026] [:error] [pid 44319:tid 44343] [client 158.158.74.32:49921] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/deploy.php"] [unique_id "aewDLczJPAVLUb2pWtJiiwAAAA4"]
[Sat Apr 25 07:56:30.334628 2026] [:error] [pid 46083:tid 46101] [client 158.158.74.32:27161] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/deploy.php"] [unique_id "aewDLjxw_Zq74vWdjmlgmQAAAQ4"]
[Sat Apr 25 07:56:30.861125 2026] [:error] [pid 44425:tid 44433] [client 158.158.74.32:29539] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/deploy.php"] [unique_id "aewDLiUl-VlItvY2tR8qKwAAAMY"]
[Sat Apr 25 07:56:31.350822 2026] [:error] [pid 44320:tid 44357] [client 158.158.74.32:62757] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/deploy.php"] [unique_id "aewDLzmFqSpku_dij8iHBAAAAEE"]
[Sat Apr 25 07:56:31.843114 2026] [:error] [pid 44320:tid 44372] [client 158.158.74.32:29534] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apis.php"] [unique_id "aewDLzmFqSpku_dij8iHCAAAAFA"]
[Sat Apr 25 07:56:32.325683 2026] [:error] [pid 44425:tid 44447] [client 158.158.74.32:53961] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apis.php"] [unique_id "aewDMCUl-VlItvY2tR8qLgAAANQ"]
[Sat Apr 25 07:56:32.815515 2026] [:error] [pid 44320:tid 44359] [client 158.158.74.32:62807] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apis.php"] [unique_id "aewDMDmFqSpku_dij8iHDwAAAEM"]
[Sat Apr 25 07:56:33.301174 2026] [:error] [pid 44321:tid 44406] [client 158.158.74.32:30968] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/apis.php"] [unique_id "aewDMY1b5lV-asWa_Y4_ngAAAJc"]
[Sat Apr 25 07:56:33.799696 2026] [:error] [pid 46083:tid 46091] [client 158.158.74.32:49254] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aewDMTxw_Zq74vWdjmlgnAAAAQQ"]
[Sat Apr 25 07:56:34.290742 2026] [:error] [pid 44425:tid 44445] [client 158.158.74.32:27184] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aewDMiUl-VlItvY2tR8qMgAAANI"]
[Sat Apr 25 07:56:34.798040 2026] [:error] [pid 44425:tid 44440] [client 158.158.74.32:60112] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aewDMiUl-VlItvY2tR8qNAAAAM0"]
[Sat Apr 25 07:56:35.314867 2026] [:error] [pid 46083:tid 46100] [client 158.158.74.32:33968] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asdf.php"] [unique_id "aewDMzxw_Zq74vWdjmlgngAAAQ0"]
[Sat Apr 25 07:56:35.816224 2026] [:error] [pid 46083:tid 46088] [client 158.158.74.32:54502] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1100.php"] [unique_id "aewDMzxw_Zq74vWdjmlgoAAAAQE"]
[Sat Apr 25 07:56:36.299350 2026] [:error] [pid 46083:tid 46098] [client 158.158.74.32:54524] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1100.php"] [unique_id "aewDNDxw_Zq74vWdjmlgogAAAQs"]
[Sat Apr 25 07:56:36.793074 2026] [:error] [pid 46083:tid 46102] [client 158.158.74.32:29521] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1100.php"] [unique_id "aewDNDxw_Zq74vWdjmlgpQAAAQ8"]
[Sat Apr 25 07:56:37.291871 2026] [:error] [pid 46083:tid 46096] [client 158.158.74.32:46029] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1100.php"] [unique_id "aewDNTxw_Zq74vWdjmlgqgAAAQk"]
[Sat Apr 25 07:56:37.795700 2026] [:error] [pid 44319:tid 44352] [client 158.158.74.32:4560] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/._info.php"] [unique_id "aewDNczJPAVLUb2pWtJijgAAABc"]
[Sat Apr 25 07:56:38.277166 2026] [:error] [pid 44319:tid 44336] [client 158.158.74.32:62722] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/._info.php"] [unique_id "aewDNszJPAVLUb2pWtJikAAAAAc"]
[Sat Apr 25 07:56:38.767883 2026] [:error] [pid 44320:tid 44356] [client 158.158.74.32:60125] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/._info.php"] [unique_id "aewDNjmFqSpku_dij8iHFgAAAEA"]
[Sat Apr 25 07:56:39.257398 2026] [:error] [pid 46083:tid 46112] [client 158.158.74.32:58472] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/._info.php"] [unique_id "aewDNzxw_Zq74vWdjmlgrgAAARg"]
[Sat Apr 25 07:56:39.751291 2026] [:error] [pid 44425:tid 44443] [client 158.158.74.32:46033] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_flag.php"] [unique_id "aewDNyUl-VlItvY2tR8qOwAAANA"]
[Sat Apr 25 07:56:40.255011 2026] [:error] [pid 44425:tid 44433] [client 158.158.74.32:33921] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_flag.php"] [unique_id "aewDOCUl-VlItvY2tR8qPQAAAMY"]
[Sat Apr 25 07:56:40.766720 2026] [:error] [pid 46083:tid 46088] [client 158.158.74.32:27153] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_flag.php"] [unique_id "aewDODxw_Zq74vWdjmlgsQAAAQE"]
[Sat Apr 25 07:56:41.277490 2026] [:error] [pid 46083:tid 46102] [client 158.158.74.32:31660] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_flag.php"] [unique_id "aewDOTxw_Zq74vWdjmlgtQAAAQ8"]
[Sat Apr 25 07:56:41.787313 2026] [:error] [pid 46083:tid 46096] [client 158.158.74.32:58373] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test_info4.php"] [unique_id "aewDOTxw_Zq74vWdjmlgugAAAQk"]
[Sat Apr 25 07:56:42.301608 2026] [:error] [pid 46083:tid 46101] [client 158.158.74.32:62748] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test_info4.php"] [unique_id "aewDOjxw_Zq74vWdjmlgvQAAAQ4"]
[Sat Apr 25 07:56:42.791490 2026] [:error] [pid 44320:tid 44367] [client 158.158.74.32:27192] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test_info4.php"] [unique_id "aewDOjmFqSpku_dij8iHGAAAAEs"]
[Sat Apr 25 07:56:43.272119 2026] [:error] [pid 44425:tid 44435] [client 158.158.74.32:60141] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test_info4.php"] [unique_id "aewDOyUl-VlItvY2tR8qRwAAAMg"]
[Sat Apr 25 07:56:43.761958 2026] [:error] [pid 44319:tid 44329] [client 158.158.74.32:47078] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aewDO8zJPAVLUb2pWtJilAAAAAA"]
[Sat Apr 25 07:56:44.243543 2026] [:error] [pid 44319:tid 44337] [client 158.158.74.32:49938] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aewDPMzJPAVLUb2pWtJilQAAAAg"]
[Sat Apr 25 07:56:44.732006 2026] [:error] [pid 44425:tid 44433] [client 158.158.74.32:4932] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aewDPCUl-VlItvY2tR8qTgAAAMY"]
[Sat Apr 25 07:56:45.228815 2026] [:error] [pid 44425:tid 44428] [client 158.158.74.32:47599] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aewDPSUl-VlItvY2tR8qUQAAAME"]
[Sat Apr 25 07:56:45.727584 2026] [:error] [pid 46083:tid 46107] [client 158.158.74.32:29560] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HsFPDcD.php"] [unique_id "aewDPTxw_Zq74vWdjmlgxAAAARM"]
[Sat Apr 25 07:56:46.209011 2026] [:error] [pid 44425:tid 44436] [client 158.158.74.32:33971] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HsFPDcD.php"] [unique_id "aewDPiUl-VlItvY2tR8qVQAAAMk"]
[Sat Apr 25 07:56:46.725322 2026] [:error] [pid 44321:tid 44390] [client 158.158.74.32:47491] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HsFPDcD.php"] [unique_id "aewDPo1b5lV-asWa_Y4_sAAAAIc"]
[Sat Apr 25 07:56:47.225961 2026] [:error] [pid 46083:tid 46102] [client 158.158.74.32:54485] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/HsFPDcD.php"] [unique_id "aewDPzxw_Zq74vWdjmlgxgAAAQ8"]
[Sat Apr 25 07:56:47.713574 2026] [:error] [pid 46083:tid 46109] [client 158.158.74.32:35068] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.inc.php"] [unique_id "aewDPzxw_Zq74vWdjmlgyAAAARU"]
[Sat Apr 25 07:56:48.197060 2026] [:error] [pid 44425:tid 44447] [client 158.158.74.32:52925] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.inc.php"] [unique_id "aewDQCUl-VlItvY2tR8qWwAAANQ"]
[Sat Apr 25 07:56:48.702994 2026] [:error] [pid 44321:tid 44402] [client 158.158.74.32:38310] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.inc.php"] [unique_id "aewDQI1b5lV-asWa_Y4_swAAAJM"]
[Sat Apr 25 07:56:49.191651 2026] [:error] [pid 46083:tid 46091] [client 158.158.74.32:38738] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/config.inc.php"] [unique_id "aewDQTxw_Zq74vWdjmlgzwAAAQQ"]
[Sat Apr 25 07:56:49.699925 2026] [:error] [pid 46083:tid 46088] [client 158.158.74.32:60152] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpversion.php"] [unique_id "aewDQTxw_Zq74vWdjmlg0QAAAQE"]
[Sat Apr 25 07:56:50.200143 2026] [:error] [pid 44425:tid 44431] [client 158.158.74.32:46587] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpversion.php"] [unique_id "aewDQiUl-VlItvY2tR8qXwAAAMQ"]
[Sat Apr 25 07:56:50.733185 2026] [:error] [pid 44321:tid 44391] [client 158.158.74.32:52910] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpversion.php"] [unique_id "aewDQo1b5lV-asWa_Y4_tAAAAIg"]
[Sat Apr 25 07:56:51.254315 2026] [:error] [pid 46083:tid 46105] [client 158.158.74.32:38748] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpversion.php"] [unique_id "aewDQzxw_Zq74vWdjmlg1gAAARI"]
[Sat Apr 25 07:56:51.741588 2026] [:error] [pid 44320:tid 44378] [client 158.158.74.32:4194] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asus.php"] [unique_id "aewDQzmFqSpku_dij8iHHAAAAFY"]
[Sat Apr 25 07:56:52.322218 2026] [:error] [pid 44320:tid 44366] [client 158.158.74.32:47548] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asus.php"] [unique_id "aewDRDmFqSpku_dij8iHHQAAAEo"]
[Sat Apr 25 07:56:52.820851 2026] [:error] [pid 46083:tid 46109] [client 158.158.74.32:58840] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asus.php"] [unique_id "aewDRDxw_Zq74vWdjmlg2wAAARU"]
[Sat Apr 25 07:56:53.328937 2026] [:error] [pid 46083:tid 46095] [client 158.158.74.32:38758] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asus.php"] [unique_id "aewDRTxw_Zq74vWdjmlg3gAAAQg"]
[Sat Apr 25 07:56:53.818360 2026] [:error] [pid 44319:tid 44347] [client 158.158.74.32:4286] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_version.php"] [unique_id "aewDRczJPAVLUb2pWtJimAAAABI"]
[Sat Apr 25 07:56:54.318889 2026] [:error] [pid 46083:tid 46089] [client 158.158.74.32:4287] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_version.php"] [unique_id "aewDRjxw_Zq74vWdjmlg5gAAAQI"]
[Sat Apr 25 07:56:54.867739 2026] [:error] [pid 44320:tid 44360] [client 158.158.74.32:46535] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_version.php"] [unique_id "aewDRjmFqSpku_dij8iHIwAAAEQ"]
[Sat Apr 25 07:56:55.353964 2026] [:error] [pid 46083:tid 46111] [client 158.158.74.32:36946] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php_version.php"] [unique_id "aewDRzxw_Zq74vWdjmlg7QAAARc"]
[Sat Apr 25 07:56:55.840045 2026] [:error] [pid 44425:tid 44444] [client 158.158.74.32:54525] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abouts.php"] [unique_id "aewDRyUl-VlItvY2tR8qawAAANE"]
[Sat Apr 25 07:56:56.328745 2026] [:error] [pid 44425:tid 44443] [client 158.158.74.32:52875] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abouts.php"] [unique_id "aewDSCUl-VlItvY2tR8qbQAAANA"]
[Sat Apr 25 07:56:56.811436 2026] [:error] [pid 46083:tid 46112] [client 158.158.74.32:4229] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abouts.php"] [unique_id "aewDSDxw_Zq74vWdjmlg8wAAARg"]
[Sat Apr 25 07:56:57.298923 2026] [:error] [pid 46083:tid 46101] [client 158.158.74.32:48385] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abouts.php"] [unique_id "aewDSTxw_Zq74vWdjmlg9AAAAQ4"]
[Sat Apr 25 07:56:57.783757 2026] [:error] [pid 44319:tid 44338] [client 158.158.74.32:47538] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/profmanage.php"] [unique_id "aewDSczJPAVLUb2pWtJimwAAAAk"]
[Sat Apr 25 07:56:58.265942 2026] [:error] [pid 44319:tid 44339] [client 158.158.74.32:56611] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/profmanage.php"] [unique_id "aewDSszJPAVLUb2pWtJinAAAAAo"]
[Sat Apr 25 07:56:58.748383 2026] [:error] [pid 44319:tid 44334] [client 158.158.74.32:48437] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/profmanage.php"] [unique_id "aewDSszJPAVLUb2pWtJinQAAAAU"]
[Sat Apr 25 07:56:59.228864 2026] [:error] [pid 44319:tid 44342] [client 158.158.74.32:5012] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/profmanage.php"] [unique_id "aewDS8zJPAVLUb2pWtJingAAAA0"]
[Sat Apr 25 07:56:59.712807 2026] [:error] [pid 44319:tid 44349] [client 158.158.74.32:4540] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makecvs.php"] [unique_id "aewDS8zJPAVLUb2pWtJioQAAABQ"]
[Sat Apr 25 07:57:00.195108 2026] [:error] [pid 44425:tid 44448] [client 158.158.74.32:58869] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makecvs.php"] [unique_id "aewDTCUl-VlItvY2tR8qcQAAANU"]
[Sat Apr 25 07:57:00.683432 2026] [:error] [pid 44321:tid 44396] [client 158.158.74.32:35063] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makecvs.php"] [unique_id "aewDTI1b5lV-asWa_Y4_twAAAI0"]
[Sat Apr 25 07:57:01.162194 2026] [:error] [pid 44320:tid 44372] [client 158.158.74.32:61645] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makecvs.php"] [unique_id "aewDTTmFqSpku_dij8iHJAAAAFA"]
[Sat Apr 25 07:57:01.659134 2026] [:error] [pid 46083:tid 46097] [client 158.158.74.32:4999] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aewDTTxw_Zq74vWdjmlhAwAAAQo"]
[Sat Apr 25 07:57:02.157810 2026] [:error] [pid 44320:tid 44364] [client 158.158.74.32:4281] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aewDTjmFqSpku_dij8iHJQAAAEg"]
[Sat Apr 25 07:57:02.636641 2026] [:error] [pid 44320:tid 44367] [client 158.158.74.32:38742] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aewDTjmFqSpku_dij8iHJgAAAEs"]
[Sat Apr 25 07:57:03.116352 2026] [:error] [pid 44320:tid 44368] [client 158.158.74.32:4528] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aewDTzmFqSpku_dij8iHJwAAAEw"]
[Sat Apr 25 07:57:03.595901 2026] [:error] [pid 44425:tid 44451] [client 158.158.74.32:38771] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/configuration.php"] [unique_id "aewDTyUl-VlItvY2tR8qcwAAANg"]
[Sat Apr 25 07:57:04.074782 2026] [:error] [pid 46083:tid 46108] [client 158.158.74.32:5027] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/configuration.php"] [unique_id "aewDUDxw_Zq74vWdjmlhDAAAARQ"]
[Sat Apr 25 07:57:04.569589 2026] [:error] [pid 44425:tid 44445] [client 158.158.74.32:58819] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/configuration.php"] [unique_id "aewDUCUl-VlItvY2tR8qdAAAANI"]
[Sat Apr 25 07:57:05.067324 2026] [:error] [pid 44319:tid 44350] [client 158.158.74.32:31605] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/configuration.php"] [unique_id "aewDUczJPAVLUb2pWtJipgAAABU"]
[Sat Apr 25 07:57:05.561603 2026] [:error] [pid 46083:tid 46101] [client 158.158.74.32:35060] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "aewDUTxw_Zq74vWdjmlhEwAAAQ4"]
[Sat Apr 25 07:57:06.062929 2026] [:error] [pid 44320:tid 44376] [client 158.158.74.32:58038] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "aewDUjmFqSpku_dij8iHKQAAAFQ"]
[Sat Apr 25 07:57:06.567390 2026] [:error] [pid 44425:tid 44440] [client 158.158.74.32:4245] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "aewDUiUl-VlItvY2tR8qdQAAAM0"]
[Sat Apr 25 07:57:07.049789 2026] [:error] [pid 46083:tid 46111] [client 158.158.74.32:58834] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "aewDUzxw_Zq74vWdjmlhGgAAARc"]
[Sat Apr 25 07:57:07.540320 2026] [:error] [pid 46083:tid 46088] [client 158.158.74.32:61688] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hkvkjguw.php"] [unique_id "aewDUzxw_Zq74vWdjmlhHgAAAQE"]
[Sat Apr 25 07:57:08.022512 2026] [:error] [pid 44425:tid 44429] [client 158.158.74.32:38274] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hkvkjguw.php"] [unique_id "aewDVCUl-VlItvY2tR8qeQAAAMI"]
[Sat Apr 25 07:57:08.509339 2026] [:error] [pid 44425:tid 44443] [client 158.158.74.32:58783] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hkvkjguw.php"] [unique_id "aewDVCUl-VlItvY2tR8qegAAANA"]
[Sat Apr 25 07:57:08.995453 2026] [:error] [pid 44425:tid 44450] [client 158.158.74.32:52925] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hkvkjguw.php"] [unique_id "aewDVCUl-VlItvY2tR8qfAAAANc"]
[Sat Apr 25 07:57:09.475194 2026] [:error] [pid 44425:tid 44433] [client 158.158.74.32:52922] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Black.php"] [unique_id "aewDVSUl-VlItvY2tR8qfQAAAMY"]
[Sat Apr 25 07:57:09.989544 2026] [:error] [pid 44425:tid 44447] [client 158.158.74.32:38309] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Black.php"] [unique_id "aewDVSUl-VlItvY2tR8qfgAAANQ"]
[Sat Apr 25 07:57:10.489613 2026] [:error] [pid 44321:tid 44398] [client 158.158.74.32:48791] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Black.php"] [unique_id "aewDVo1b5lV-asWa_Y4_vQAAAI8"]
[Sat Apr 25 07:57:10.994476 2026] [:error] [pid 44321:tid 44388] [client 158.158.74.32:53629] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Black.php"] [unique_id "aewDVo1b5lV-asWa_Y4_vwAAAIU"]
[Sat Apr 25 10:31:30.113628 2026] [:error] [pid 46083:tid 46100] [client 94.247.172.129:49386] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "aewngjxw_Zq74vWdjmmlvAAAAQ0"]
[Sun Apr 26 00:32:49.083545 2026] [proxy_fcgi:error] [pid 59896:tid 59912] [client 149.56.160.192:59929] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 00:32:55.228966 2026] [proxy_fcgi:error] [pid 59985:tid 59996] [client 149.56.160.192:49749] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 00:33:25.851033 2026] [proxy_fcgi:error] [pid 3212:tid 3219] [client 149.56.150.112:52651] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:54:27.967988 2026] [proxy_fcgi:error] [pid 59898:tid 59975] [client 158.158.52.225:62424] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:54:43.732537 2026] [proxy_fcgi:error] [pid 3212:tid 3220] [client 158.158.52.225:24333] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:54:45.916124 2026] [proxy_fcgi:error] [pid 59898:tid 59960] [client 158.158.52.225:14291] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:55:02.594737 2026] [proxy_fcgi:error] [pid 59897:tid 59939] [client 158.158.52.225:33596] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:55:02.897945 2026] [autoindex:error] [pid 3212:tid 3232] [client 158.158.52.225:22779] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:55:09.295226 2026] [proxy_fcgi:error] [pid 59897:tid 59943] [client 158.158.52.225:20622] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:55:09.541233 2026] [autoindex:error] [pid 3212:tid 3237] [client 158.158.52.225:22779] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:55:18.072458 2026] [:error] [pid 59896:tid 59919] [client 158.158.52.225:8111] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/one.php"] [unique_id "ae0ABrLLzhtkd-OXUgBe5AAAAFM"]
[Sun Apr 26 01:55:20.176023 2026] [:error] [pid 59898:tid 59966] [client 158.158.52.225:31220] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/one.php"] [unique_id "ae0ACB-4vImxb0kbdzfj0wAAAMw"]
[Sun Apr 26 01:55:27.604200 2026] [:error] [pid 3212:tid 3226] [client 158.158.52.225:50875] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/one.php"] [unique_id "ae0AD_g-28TY8_YLtUfMbwAAAQw"]
[Sun Apr 26 01:55:30.169015 2026] [:error] [pid 59898:tid 59956] [client 158.158.52.225:65311] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/one.php"] [unique_id "ae0AEh-4vImxb0kbdzfj_QAAAMI"]
[Sun Apr 26 01:55:32.783428 2026] [:error] [pid 59898:tid 59964] [client 158.158.52.225:1913] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no20.php"] [unique_id "ae0AFB-4vImxb0kbdzfkBwAAAMo"]
[Sun Apr 26 01:55:33.935799 2026] [:error] [pid 59898:tid 59967] [client 158.158.52.225:38480] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no20.php"] [unique_id "ae0AFR-4vImxb0kbdzfkCQAAAM0"]
[Sun Apr 26 01:55:36.050146 2026] [:error] [pid 59896:tid 59900] [client 158.158.52.225:45485] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no20.php"] [unique_id "ae0AGLLLzhtkd-OXUgBe-gAAAEA"]
[Sun Apr 26 01:55:36.981466 2026] [:error] [pid 59896:tid 59923] [client 158.158.52.225:58080] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no20.php"] [unique_id "ae0AGLLLzhtkd-OXUgBfAQAAAFc"]
[Sun Apr 26 01:55:37.912629 2026] [:error] [pid 59897:tid 59935] [client 158.158.52.225:40324] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-alone.php"] [unique_id "ae0AGfBrrkdzpEbmK4fIFAAAAIg"]
[Sun Apr 26 01:55:40.992831 2026] [:error] [pid 59985:tid 60005] [client 158.158.52.225:21468] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-alone.php"] [unique_id "ae0AHAF_zDvEhKvyTH4H3QAAABI"]
[Sun Apr 26 01:55:44.282855 2026] [:error] [pid 59896:tid 59921] [client 158.158.52.225:7608] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-alone.php"] [unique_id "ae0AILLLzhtkd-OXUgBfHgAAAFU"]
[Sun Apr 26 01:55:45.334327 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:18090] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-alone.php"] [unique_id "ae0AIfg-28TY8_YLtUfMmQAAAQQ"]
[Sun Apr 26 01:55:46.928539 2026] [:error] [pid 3212:tid 3230] [client 158.158.52.225:40373] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "ae0AIvg-28TY8_YLtUfMogAAARA"]
[Sun Apr 26 01:55:47.843337 2026] [:error] [pid 59896:tid 59902] [client 158.158.52.225:1447] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "ae0AI7LLzhtkd-OXUgBfLwAAAEI"]
[Sun Apr 26 01:55:53.464638 2026] [:error] [pid 59896:tid 59921] [client 158.158.52.225:28082] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "ae0AKbLLzhtkd-OXUgBfVgAAAFU"]
[Sun Apr 26 01:55:54.780992 2026] [:error] [pid 59896:tid 59900] [client 158.158.52.225:12497] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yasnu.php"] [unique_id "ae0AKrLLzhtkd-OXUgBfXgAAAEA"]
[Sun Apr 26 01:55:56.107940 2026] [:error] [pid 59896:tid 59917] [client 158.158.52.225:1382] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sl.php"] [unique_id "ae0ALLLLzhtkd-OXUgBfYwAAAFE"]
[Sun Apr 26 01:55:57.110336 2026] [:error] [pid 3212:tid 3227] [client 158.158.52.225:1869] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sl.php"] [unique_id "ae0ALfg-28TY8_YLtUfM1gAAAQ0"]
[Sun Apr 26 01:55:58.003282 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:33029] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sl.php"] [unique_id "ae0ALvg-28TY8_YLtUfM3QAAAQU"]
[Sun Apr 26 01:55:59.893019 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:8176] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sl.php"] [unique_id "ae0AL_g-28TY8_YLtUfM6wAAAQU"]
[Sun Apr 26 01:56:01.886005 2026] [:error] [pid 59896:tid 59920] [client 158.158.52.225:29401] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vuln.php"] [unique_id "ae0AMbLLzhtkd-OXUgBfcAAAAFQ"]
[Sun Apr 26 01:56:05.249464 2026] [:error] [pid 59896:tid 59904] [client 158.158.52.225:12963] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vuln.php"] [unique_id "ae0ANbLLzhtkd-OXUgBfhgAAAEQ"]
[Sun Apr 26 01:56:07.603190 2026] [:error] [pid 59896:tid 59914] [client 158.158.52.225:40365] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vuln.php"] [unique_id "ae0AN7LLzhtkd-OXUgBfjgAAAE4"]
[Sun Apr 26 01:56:11.536277 2026] [:error] [pid 59985:tid 59992] [client 158.158.52.225:53017] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vuln.php"] [unique_id "ae0AOwF_zDvEhKvyTH4IAAAAAAU"]
[Sun Apr 26 01:56:12.625713 2026] [:error] [pid 3212:tid 3220] [client 158.158.52.225:8141] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-temp.php"] [unique_id "ae0APPg-28TY8_YLtUfNDQAAAQY"]
[Sun Apr 26 01:56:22.367909 2026] [autoindex:error] [pid 3212:tid 3223] [client 158.158.52.225:20709] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:56:32.054146 2026] [proxy_fcgi:error] [pid 3212:tid 3215] [client 158.158.52.225:20709] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:57:09.108567 2026] [proxy_fcgi:error] [pid 3212:tid 3228] [client 158.158.52.225:42286] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:57:30.810037 2026] [proxy_fcgi:error] [pid 59985:tid 60009] [client 158.158.52.225:8789] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:57:43.230692 2026] [:error] [pid 3212:tid 3233] [client 158.158.52.225:37851] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "ae0Al_g-28TY8_YLtUfN9gAAARM"]
[Sun Apr 26 01:57:45.521829 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:23890] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "ae0Amfg-28TY8_YLtUfN_AAAARc"]
[Sun Apr 26 01:57:47.205068 2026] [:error] [pid 3212:tid 3221] [client 158.158.52.225:7969] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "ae0Am_g-28TY8_YLtUfOAgAAAQc"]
[Sun Apr 26 01:57:48.876496 2026] [:error] [pid 59898:tid 59975] [client 158.158.52.225:32374] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "ae0AnB-4vImxb0kbdzfkowAAANU"]
[Sun Apr 26 01:57:51.035175 2026] [:error] [pid 59896:tid 59905] [client 158.158.52.225:7251] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "ae0An7LLzhtkd-OXUgBgRgAAAEU"]
[Sun Apr 26 01:57:53.269520 2026] [:error] [pid 59896:tid 59904] [client 158.158.52.225:18114] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "ae0AobLLzhtkd-OXUgBgSgAAAEQ"]
[Sun Apr 26 01:57:54.414455 2026] [:error] [pid 3212:tid 3238] [client 158.158.52.225:18122] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "ae0Aovg-28TY8_YLtUfOEgAAARg"]
[Sun Apr 26 01:57:55.968656 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:48087] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "ae0Ao_g-28TY8_YLtUfOFQAAARQ"]
[Sun Apr 26 01:58:02.237709 2026] [:error] [pid 59897:tid 59927] [client 158.158.52.225:33759] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae0AqvBrrkdzpEbmK4fIiwAAAIA"]
[Sun Apr 26 01:58:03.774858 2026] [:error] [pid 59898:tid 59969] [client 158.158.52.225:23882] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae0Aqx-4vImxb0kbdzfksAAAAM8"]
[Sun Apr 26 01:58:07.528086 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:1026] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae0Ar_g-28TY8_YLtUfOGgAAAQM"]
[Sun Apr 26 01:58:09.505571 2026] [:error] [pid 59898:tid 59955] [client 158.158.52.225:18139] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae0AsR-4vImxb0kbdzfkuAAAAME"]
[Sun Apr 26 01:58:10.852850 2026] [:error] [pid 3212:tid 3222] [client 158.158.52.225:7292] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae0Asvg-28TY8_YLtUfOIAAAAQg"]
[Sun Apr 26 01:58:12.832331 2026] [:error] [pid 59896:tid 59924] [client 158.158.52.225:17423] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae0AtLLLzhtkd-OXUgBgegAAAFg"]
[Sun Apr 26 01:58:16.364094 2026] [:error] [pid 59896:tid 59910] [client 158.158.52.225:18132] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae0AuLLLzhtkd-OXUgBghgAAAEo"]
[Sun Apr 26 01:58:19.362854 2026] [:error] [pid 59897:tid 59944] [client 158.158.52.225:7948] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae0Au_BrrkdzpEbmK4fIkgAAAJE"]
[Sun Apr 26 01:58:20.316296 2026] [:error] [pid 3212:tid 3235] [client 158.158.52.225:1049] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ae0AvPg-28TY8_YLtUfOMwAAARU"]
[Sun Apr 26 01:58:22.067747 2026] [:error] [pid 59896:tid 59917] [client 158.158.52.225:37472] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ae0AvrLLzhtkd-OXUgBgoQAAAFE"]
[Sun Apr 26 01:58:22.960583 2026] [:error] [pid 59896:tid 59903] [client 158.158.52.225:7968] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ae0AvrLLzhtkd-OXUgBgogAAAEM"]
[Sun Apr 26 01:58:23.651534 2026] [:error] [pid 59896:tid 59908] [client 158.158.52.225:37514] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ae0Av7LLzhtkd-OXUgBgpQAAAEg"]
[Sun Apr 26 01:58:24.547679 2026] [:error] [pid 3212:tid 3220] [client 158.158.52.225:8885] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ae0AwPg-28TY8_YLtUfOPAAAAQY"]
[Sun Apr 26 01:58:25.889652 2026] [:error] [pid 59898:tid 59956] [client 158.158.52.225:18127] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ae0AwR-4vImxb0kbdzfkwwAAAMI"]
[Sun Apr 26 01:58:29.224651 2026] [:error] [pid 59897:tid 59927] [client 158.158.52.225:1028] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ae0AxfBrrkdzpEbmK4fIlwAAAIA"]
[Sun Apr 26 01:58:31.119490 2026] [:error] [pid 59985:tid 59995] [client 158.158.52.225:8855] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ae0AxwF_zDvEhKvyTH4I9QAAAAg"]
[Sun Apr 26 01:58:32.306088 2026] [:error] [pid 59897:tid 59947] [client 158.158.52.225:28674] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "ae0AyPBrrkdzpEbmK4fImgAAAJQ"]
[Sun Apr 26 01:58:34.072166 2026] [:error] [pid 59985:tid 60004] [client 158.158.52.225:37448] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "ae0AygF_zDvEhKvyTH4JAwAAABE"]
[Sun Apr 26 01:58:36.491207 2026] [:error] [pid 59898:tid 59967] [client 158.158.52.225:37449] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "ae0AzB-4vImxb0kbdzfkywAAAM0"]
[Sun Apr 26 01:58:37.156531 2026] [:error] [pid 59896:tid 59907] [client 158.158.52.225:37559] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "ae0AzbLLzhtkd-OXUgBgsAAAAEc"]
[Sun Apr 26 01:58:37.997722 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:34246] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "ae0Azfg-28TY8_YLtUfORgAAARI"]
[Sun Apr 26 01:59:00.236999 2026] [autoindex:error] [pid 59985:tid 60010] [client 158.158.52.225:21314] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:59:02.649492 2026] [proxy_fcgi:error] [pid 3212:tid 3233] [client 158.158.52.225:35508] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 01:59:42.789714 2026] [proxy_fcgi:error] [pid 3212:tid 3229] [client 158.158.52.225:1227] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:00:08.995422 2026] [proxy_fcgi:error] [pid 59898:tid 59977] [client 158.158.52.225:28928] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:00:26.259408 2026] [:error] [pid 59896:tid 59918] [client 158.158.52.225:39149] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "ae0BOrLLzhtkd-OXUgBhZgAAAFI"]
[Sun Apr 26 02:00:27.246787 2026] [:error] [pid 59897:tid 59947] [client 158.158.52.225:26904] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "ae0BO_BrrkdzpEbmK4fJHQAAAJQ"]
[Sun Apr 26 02:00:28.928441 2026] [:error] [pid 59898:tid 59974] [client 158.158.52.225:32573] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "ae0BPB-4vImxb0kbdzflNwAAANQ"]
[Sun Apr 26 02:00:33.837988 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:14894] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "ae0BQfg-28TY8_YLtUfPNwAAARE"]
[Sun Apr 26 02:00:38.226652 2026] [:error] [pid 59985:tid 60010] [client 158.158.52.225:9302] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ae0BRgF_zDvEhKvyTH4JhgAAABc"]
[Sun Apr 26 02:00:43.434697 2026] [:error] [pid 59897:tid 59938] [client 158.158.52.225:62219] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ae0BS_BrrkdzpEbmK4fJLAAAAIs"]
[Sun Apr 26 02:00:46.281020 2026] [:error] [pid 59897:tid 59936] [client 158.158.52.225:8902] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ae0BTvBrrkdzpEbmK4fJMwAAAIk"]
[Sun Apr 26 02:00:49.204719 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:8345] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ae0BUfg-28TY8_YLtUfPaAAAAQM"]
[Sun Apr 26 02:00:51.214196 2026] [:error] [pid 3212:tid 3224] [client 158.158.52.225:8735] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae0BU_g-28TY8_YLtUfPdAAAAQo"]
[Sun Apr 26 02:00:53.508798 2026] [:error] [pid 3212:tid 3228] [client 158.158.52.225:37205] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae0BVfg-28TY8_YLtUfPfAAAAQ4"]
[Sun Apr 26 02:00:56.006654 2026] [:error] [pid 59896:tid 59924] [client 158.158.52.225:28957] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae0BWLLLzhtkd-OXUgBhkAAAAFg"]
[Sun Apr 26 02:00:58.622585 2026] [:error] [pid 59898:tid 59955] [client 158.158.52.225:1580] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae0BWh-4vImxb0kbdzflWgAAAME"]
[Sun Apr 26 02:01:00.128415 2026] [:error] [pid 3212:tid 3235] [client 158.158.52.225:23240] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae0BXPg-28TY8_YLtUfPhwAAARU"]
[Sun Apr 26 02:01:03.079506 2026] [:error] [pid 59897:tid 59938] [client 158.158.52.225:23204] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae0BX_BrrkdzpEbmK4fJUAAAAIs"]
[Sun Apr 26 02:01:03.980271 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:50874] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae0BX_g-28TY8_YLtUfPkgAAARQ"]
[Sun Apr 26 02:01:05.359867 2026] [:error] [pid 59896:tid 59903] [client 158.158.52.225:23262] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae0BYbLLzhtkd-OXUgBhpQAAAEM"]
[Sun Apr 26 02:01:06.362831 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:63124] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "ae0BYvg-28TY8_YLtUfPmgAAAQU"]
[Sun Apr 26 02:01:08.703033 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:13649] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "ae0BZPg-28TY8_YLtUfPpQAAAQQ"]
[Sun Apr 26 02:01:09.584934 2026] [:error] [pid 59897:tid 59934] [client 158.158.52.225:1609] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "ae0BZfBrrkdzpEbmK4fJXQAAAIc"]
[Sun Apr 26 02:01:10.488363 2026] [:error] [pid 59985:tid 59991] [client 158.158.52.225:31828] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "ae0BZgF_zDvEhKvyTH4JmwAAAAQ"]
[Sun Apr 26 02:01:11.582671 2026] [:error] [pid 3212:tid 3214] [client 158.158.52.225:16852] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ae0BZ_g-28TY8_YLtUfPrAAAAQA"]
[Sun Apr 26 02:01:12.519779 2026] [:error] [pid 3212:tid 3221] [client 158.158.52.225:50869] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ae0BaPg-28TY8_YLtUfPrQAAAQc"]
[Sun Apr 26 02:01:13.441882 2026] [:error] [pid 3212:tid 3222] [client 158.158.52.225:24353] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ae0Bafg-28TY8_YLtUfPsgAAAQg"]
[Sun Apr 26 02:01:14.796446 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:50873] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ae0Bavg-28TY8_YLtUfPtAAAARE"]
[Sun Apr 26 02:01:16.070017 2026] [:error] [pid 59985:tid 60007] [client 158.158.52.225:25655] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ae0BbAF_zDvEhKvyTH4JpwAAABQ"]
[Sun Apr 26 02:01:17.318072 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:16840] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ae0Bbfg-28TY8_YLtUfPtgAAAQE"]
[Sun Apr 26 02:01:18.568626 2026] [:error] [pid 59898:tid 59959] [client 158.158.52.225:23195] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ae0Bbh-4vImxb0kbdzflZQAAAMU"]
[Sun Apr 26 02:01:19.787424 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:23290] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ae0Bb_g-28TY8_YLtUfPwgAAAQU"]
[Sun Apr 26 02:01:21.508850 2026] [:error] [pid 59896:tid 59910] [client 158.158.52.225:37193] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ae0BcbLLzhtkd-OXUgBhtgAAAEo"]
[Sun Apr 26 02:01:22.331096 2026] [:error] [pid 59896:tid 59915] [client 158.158.52.225:7497] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ae0BcrLLzhtkd-OXUgBhuwAAAE8"]
[Sun Apr 26 02:01:54.164128 2026] [proxy_fcgi:error] [pid 3212:tid 3237] [client 158.158.52.225:58101] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:02:08.977633 2026] [proxy_fcgi:error] [pid 59896:tid 59915] [client 158.158.52.225:7821] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:02:24.413342 2026] [proxy_fcgi:error] [pid 59985:tid 59998] [client 158.158.52.225:7853] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:02:25.625375 2026] [proxy_fcgi:error] [pid 59985:tid 60003] [client 158.158.52.225:46195] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:02:37.251628 2026] [:error] [pid 59896:tid 59917] [client 158.158.52.225:29387] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "ae0BvbLLzhtkd-OXUgBiVgAAAFE"]
[Sun Apr 26 02:02:38.512889 2026] [:error] [pid 3212:tid 3230] [client 158.158.52.225:1644] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "ae0Bvvg-28TY8_YLtUfQmgAAARA"]
[Sun Apr 26 02:02:39.621165 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:50835] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "ae0Bv_g-28TY8_YLtUfQnwAAAQE"]
[Sun Apr 26 02:02:40.488120 2026] [:error] [pid 3212:tid 3228] [client 158.158.52.225:23229] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ol.php"] [unique_id "ae0BwPg-28TY8_YLtUfQpgAAAQ4"]
[Sun Apr 26 02:02:46.801005 2026] [:error] [pid 3212:tid 3221] [client 158.158.52.225:1537] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "ae0Bxvg-28TY8_YLtUfQwQAAAQc"]
[Sun Apr 26 02:02:48.724024 2026] [:error] [pid 3212:tid 3222] [client 158.158.52.225:49356] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "ae0ByPg-28TY8_YLtUfQywAAAQg"]
[Sun Apr 26 02:02:49.577087 2026] [:error] [pid 59985:tid 60010] [client 158.158.52.225:39104] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "ae0ByQF_zDvEhKvyTH4KRQAAABc"]
[Sun Apr 26 02:02:51.270619 2026] [:error] [pid 3212:tid 3235] [client 158.158.52.225:27209] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "ae0By_g-28TY8_YLtUfQ3QAAARU"]
[Sun Apr 26 02:02:53.355844 2026] [:error] [pid 59985:tid 59992] [client 158.158.52.225:33104] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "ae0BzQF_zDvEhKvyTH4KTQAAAAU"]
[Sun Apr 26 02:02:54.411185 2026] [:error] [pid 59985:tid 59989] [client 158.158.52.225:29956] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "ae0BzgF_zDvEhKvyTH4KUgAAAAI"]
[Sun Apr 26 02:02:55.248315 2026] [:error] [pid 59898:tid 59976] [client 158.158.52.225:30006] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "ae0Bzx-4vImxb0kbdzflnQAAANY"]
[Sun Apr 26 02:02:56.324344 2026] [:error] [pid 59896:tid 59903] [client 158.158.52.225:7625] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "ae0B0LLLzhtkd-OXUgBicwAAAEM"]
[Sun Apr 26 02:02:59.390170 2026] [:error] [pid 59896:tid 59908] [client 158.158.52.225:33138] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "ae0B07LLzhtkd-OXUgBifQAAAEg"]
[Sun Apr 26 02:03:01.553395 2026] [:error] [pid 3212:tid 3224] [client 158.158.52.225:29961] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "ae0B1fg-28TY8_YLtUfQ5QAAAQo"]
[Sun Apr 26 02:03:02.289046 2026] [:error] [pid 3212:tid 3228] [client 158.158.52.225:36255] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "ae0B1vg-28TY8_YLtUfQ6QAAAQ4"]
[Sun Apr 26 02:03:03.275401 2026] [:error] [pid 59898:tid 59965] [client 158.158.52.225:49358] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "ae0B1x-4vImxb0kbdzflpgAAAMs"]
[Sun Apr 26 02:03:04.084807 2026] [:error] [pid 59897:tid 59946] [client 158.158.52.225:1192] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae0B2PBrrkdzpEbmK4fJ0AAAAJM"]
[Sun Apr 26 02:03:05.164891 2026] [:error] [pid 59985:tid 59987] [client 158.158.52.225:1206] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae0B2QF_zDvEhKvyTH4KawAAAAA"]
[Sun Apr 26 02:03:06.344250 2026] [:error] [pid 3212:tid 3224] [client 158.158.52.225:15496] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae0B2vg-28TY8_YLtUfQ-QAAAQo"]
[Sun Apr 26 02:03:07.233877 2026] [:error] [pid 59897:tid 59932] [client 158.158.52.225:30534] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae0B2_BrrkdzpEbmK4fJ0wAAAIU"]
[Sun Apr 26 02:03:10.188388 2026] [:error] [pid 59897:tid 59946] [client 158.158.52.225:33137] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae0B3vBrrkdzpEbmK4fJ3QAAAJM"]
[Sun Apr 26 02:03:13.170398 2026] [:error] [pid 59896:tid 59912] [client 158.158.52.225:29969] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae0B4bLLzhtkd-OXUgBijwAAAEw"]
[Sun Apr 26 02:03:15.045709 2026] [:error] [pid 59896:tid 59914] [client 158.158.52.225:33112] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae0B47LLzhtkd-OXUgBimAAAAE4"]
[Sun Apr 26 02:03:16.412954 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:33091] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae0B5Pg-28TY8_YLtUfRBwAAARE"]
[Sun Apr 26 02:03:20.908827 2026] [:error] [pid 59898:tid 59962] [client 158.158.52.225:1392] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "ae0B6B-4vImxb0kbdzflrQAAAMg"]
[Sun Apr 26 02:03:22.366706 2026] [:error] [pid 59896:tid 59904] [client 158.158.52.225:29013] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "ae0B6rLLzhtkd-OXUgBirwAAAEQ"]
[Sun Apr 26 02:03:23.555683 2026] [:error] [pid 59898:tid 59959] [client 158.158.52.225:52396] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "ae0B6x-4vImxb0kbdzflsAAAAMU"]
[Sun Apr 26 02:03:25.253180 2026] [:error] [pid 3212:tid 3230] [client 158.158.52.225:39098] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "ae0B7fg-28TY8_YLtUfRHQAAARA"]
[Sun Apr 26 02:03:31.796751 2026] [:error] [pid 59896:tid 59905] [client 158.158.52.225:36157] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae0B87LLzhtkd-OXUgBivQAAAEU"]
[Sun Apr 26 02:03:34.622016 2026] [:error] [pid 59897:tid 59940] [client 158.158.52.225:7445] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae0B9vBrrkdzpEbmK4fJ7AAAAI0"]
[Sun Apr 26 02:04:03.158553 2026] [autoindex:error] [pid 59898:tid 59961] [client 158.158.52.225:8663] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 02:04:09.308330 2026] [proxy_fcgi:error] [pid 59898:tid 59972] [client 158.158.52.225:8663] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:04:17.119607 2026] [proxy_fcgi:error] [pid 59898:tid 59967] [client 158.158.52.225:35555] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:04:30.301385 2026] [proxy_fcgi:error] [pid 59898:tid 59976] [client 158.158.52.225:1219] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:04:46.660970 2026] [autoindex:error] [pid 3212:tid 3220] [client 158.158.52.225:1528] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 02:04:49.050510 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 158.158.52.225:8136] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:04:49.362685 2026] [autoindex:error] [pid 3212:tid 3220] [client 158.158.52.225:1528] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 02:05:07.207216 2026] [:error] [pid 3212:tid 3225] [client 158.158.52.225:7606] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae0CU_g-28TY8_YLtUfS0QAAAQs"]
[Sun Apr 26 02:05:09.218971 2026] [:error] [pid 59985:tid 60009] [client 158.158.52.225:30054] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae0CVQF_zDvEhKvyTH4LVgAAABY"]
[Sun Apr 26 02:05:10.169934 2026] [:error] [pid 59897:tid 59950] [client 158.158.52.225:29331] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae0CVvBrrkdzpEbmK4fKgQAAAJc"]
[Sun Apr 26 02:05:12.099389 2026] [:error] [pid 59896:tid 59918] [client 158.158.52.225:8540] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae0CWLLLzhtkd-OXUgBjjAAAAFI"]
[Sun Apr 26 02:05:13.359361 2026] [:error] [pid 59897:tid 59936] [client 158.158.52.225:29332] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae0CWfBrrkdzpEbmK4fKigAAAIk"]
[Sun Apr 26 02:05:14.468341 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:22660] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae0CWvg-28TY8_YLtUfS6gAAAQU"]
[Sun Apr 26 02:05:15.566209 2026] [:error] [pid 59898:tid 59955] [client 158.158.52.225:27198] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae0CWx-4vImxb0kbdzfmKgAAAME"]
[Sun Apr 26 02:05:17.341039 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:8816] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae0CXfg-28TY8_YLtUfS7gAAAQE"]
[Sun Apr 26 02:05:18.951436 2026] [:error] [pid 59985:tid 60001] [client 158.158.52.225:34867] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "ae0CXgF_zDvEhKvyTH4LagAAAA4"]
[Sun Apr 26 02:05:21.150516 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:53094] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "ae0CYfg-28TY8_YLtUfTCAAAARI"]
[Sun Apr 26 02:05:22.827197 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:8867] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "ae0CYvg-28TY8_YLtUfTDQAAARQ"]
[Sun Apr 26 02:05:25.139754 2026] [:error] [pid 59985:tid 59993] [client 158.158.52.225:7959] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "ae0CZQF_zDvEhKvyTH4LcAAAAAY"]
[Sun Apr 26 02:05:26.886649 2026] [:error] [pid 59985:tid 60006] [client 158.158.52.225:29355] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "ae0CZgF_zDvEhKvyTH4LdAAAABM"]
[Sun Apr 26 02:05:28.656487 2026] [:error] [pid 3212:tid 3233] [client 158.158.52.225:7960] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "ae0CaPg-28TY8_YLtUfTEgAAARM"]
[Sun Apr 26 02:05:30.986285 2026] [:error] [pid 3212:tid 3227] [client 158.158.52.225:37566] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "ae0Cavg-28TY8_YLtUfTHQAAAQ0"]
[Sun Apr 26 02:05:31.880820 2026] [:error] [pid 59896:tid 59917] [client 158.158.52.225:27188] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "ae0Ca7LLzhtkd-OXUgBjrgAAAFE"]
[Sun Apr 26 02:05:32.971675 2026] [:error] [pid 59985:tid 60009] [client 158.158.52.225:48073] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "ae0CbAF_zDvEhKvyTH4LeAAAABY"]
[Sun Apr 26 02:05:34.360557 2026] [:error] [pid 3212:tid 3220] [client 158.158.52.225:53093] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "ae0Cbvg-28TY8_YLtUfTKAAAAQY"]
[Sun Apr 26 02:05:35.729314 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:20925] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "ae0Cb_g-28TY8_YLtUfTLgAAARE"]
[Sun Apr 26 02:05:37.505982 2026] [:error] [pid 59897:tid 59928] [client 158.158.52.225:20911] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "ae0CcfBrrkdzpEbmK4fKmQAAAIE"]
[Sun Apr 26 02:05:38.389459 2026] [:error] [pid 59897:tid 59931] [client 158.158.52.225:1032] [client 158.158.52.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae0CcvBrrkdzpEbmK4fKngAAAIQ"]
[Sun Apr 26 02:05:41.061595 2026] [:error] [pid 59896:tid 59914] [client 158.158.52.225:37543] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ae0CdbLLzhtkd-OXUgBjxAAAAE4"]
[Sun Apr 26 02:05:42.518471 2026] [:error] [pid 59896:tid 59924] [client 158.158.52.225:24993] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ae0CdrLLzhtkd-OXUgBjyAAAAFg"]
[Sun Apr 26 02:05:44.331758 2026] [:error] [pid 59898:tid 59970] [client 158.158.52.225:48746] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ae0CeB-4vImxb0kbdzfmRAAAANA"]
[Sun Apr 26 02:05:45.883904 2026] [:error] [pid 59985:tid 60007] [client 158.158.52.225:37887] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ae0CeQF_zDvEhKvyTH4LoQAAABQ"]
[Sun Apr 26 02:05:47.246436 2026] [:error] [pid 3212:tid 3230] [client 158.158.52.225:8838] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae0Ce_g-28TY8_YLtUfTUwAAARA"]
[Sun Apr 26 02:05:48.934733 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:35508] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae0CfPg-28TY8_YLtUfTXQAAAQQ"]
[Sun Apr 26 02:05:52.648809 2026] [:error] [pid 59896:tid 59913] [client 158.158.52.225:7951] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae0CgLLLzhtkd-OXUgBj4wAAAE0"]
[Sun Apr 26 02:05:53.583497 2026] [:error] [pid 59898:tid 59977] [client 158.158.52.225:27139] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae0CgR-4vImxb0kbdzfmTQAAANc"]
[Sun Apr 26 02:05:54.446035 2026] [:error] [pid 59897:tid 59933] [client 158.158.52.225:24426] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0CgvBrrkdzpEbmK4fKvQAAAIY"]
[Sun Apr 26 02:05:55.702825 2026] [:error] [pid 59896:tid 59915] [client 158.158.52.225:7734] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0Cg7LLzhtkd-OXUgBj7gAAAE8"]
[Sun Apr 26 02:05:56.771857 2026] [:error] [pid 59897:tid 59942] [client 158.158.52.225:33756] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0ChPBrrkdzpEbmK4fKygAAAI8"]
[Sun Apr 26 02:05:58.050136 2026] [:error] [pid 59896:tid 59914] [client 158.158.52.225:24403] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0ChrLLzhtkd-OXUgBj-AAAAE4"]
[Sun Apr 26 02:05:59.822305 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:1056] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "ae0Ch_g-28TY8_YLtUfTdwAAAQU"]
[Sun Apr 26 02:06:00.702720 2026] [:error] [pid 59897:tid 59940] [client 158.158.52.225:27190] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "ae0CiPBrrkdzpEbmK4fK0gAAAI0"]
[Sun Apr 26 02:06:01.712087 2026] [:error] [pid 59898:tid 59975] [client 158.158.52.225:53183] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "ae0CiR-4vImxb0kbdzfmXAAAANU"]
[Sun Apr 26 02:06:03.376092 2026] [:error] [pid 59896:tid 59910] [client 158.158.52.225:7743] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/k.php"] [unique_id "ae0Ci7LLzhtkd-OXUgBkCwAAAEo"]
[Sun Apr 26 02:06:04.369317 2026] [:error] [pid 59897:tid 59948] [client 158.158.52.225:7740] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ae0CjPBrrkdzpEbmK4fK2QAAAJU"]
[Sun Apr 26 02:06:23.269855 2026] [proxy_fcgi:error] [pid 59985:tid 59999] [client 158.158.52.225:60530] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:06:38.962664 2026] [proxy_fcgi:error] [pid 59985:tid 60001] [client 158.158.52.225:9625] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:06:58.779873 2026] [proxy_fcgi:error] [pid 59985:tid 60009] [client 158.158.52.225:19414] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:07:01.008564 2026] [proxy_fcgi:error] [pid 59896:tid 59910] [client 158.158.52.225:11855] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 02:07:07.824526 2026] [:error] [pid 3212:tid 3229] [client 158.158.52.225:39777] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0Cy_g-28TY8_YLtUfUTwAAAQ8"]
[Sun Apr 26 02:07:09.850453 2026] [:error] [pid 59897:tid 59942] [client 158.158.52.225:1339] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0CzfBrrkdzpEbmK4fLTwAAAI8"]
[Sun Apr 26 02:07:11.960103 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:32482] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0Cz_g-28TY8_YLtUfUVAAAAQE"]
[Sun Apr 26 02:07:13.795303 2026] [:error] [pid 59985:tid 59997] [client 158.158.52.225:37486] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0C0QF_zDvEhKvyTH4MPQAAAAo"]
[Sun Apr 26 02:07:15.679826 2026] [:error] [pid 3212:tid 3229] [client 158.158.52.225:64164] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ae0C0_g-28TY8_YLtUfUZQAAAQ8"]
[Sun Apr 26 02:07:16.986099 2026] [:error] [pid 3212:tid 3235] [client 158.158.52.225:26988] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ae0C1Pg-28TY8_YLtUfUbAAAARU"]
[Sun Apr 26 02:07:18.064405 2026] [:error] [pid 59898:tid 59969] [client 158.158.52.225:25737] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ae0C1h-4vImxb0kbdzfmqwAAAM8"]
[Sun Apr 26 02:07:19.499509 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:40424] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ae0C1_g-28TY8_YLtUfUewAAARY"]
[Sun Apr 26 04:23:06.203027 2026] [proxy_fcgi:error] [pid 8491:tid 8521] [client 20.111.53.4:8428] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 04:23:19.046607 2026] [proxy_fcgi:error] [pid 8491:tid 8500] [client 20.111.53.4:8419] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:08:11.942770 2026] [proxy_fcgi:error] [pid 31273:tid 31360] [client 20.203.174.117:52961] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:08:26.190982 2026] [proxy_fcgi:error] [pid 31273:tid 31361] [client 20.203.174.117:50318] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:08:26.483836 2026] [autoindex:error] [pid 41906:tid 41911] [client 20.203.174.117:50366] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:08:31.793924 2026] [proxy_fcgi:error] [pid 10315:tid 10335] [client 20.203.174.117:52957] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:08:32.058506 2026] [autoindex:error] [pid 41906:tid 41926] [client 20.203.174.117:50366] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:08:47.758998 2026] [proxy_fcgi:error] [pid 10315:tid 10325] [client 20.203.174.117:4878] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:08:48.346636 2026] [proxy_fcgi:error] [pid 41906:tid 41911] [client 20.203.174.117:50366] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:08:57.516808 2026] [autoindex:error] [pid 41906:tid 41918] [client 20.203.174.117:56789] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:09:01.844005 2026] [:error] [pid 41906:tid 41931] [client 20.203.174.117:56789] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhm.php"] [unique_id "ae07fT3-0A3lxw9OXoAeNAAAAZc"]
[Sun Apr 26 06:09:02.907524 2026] [:error] [pid 41906:tid 41926] [client 20.203.174.117:61736] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhm.php"] [unique_id "ae07fj3-0A3lxw9OXoAeOwAAAZI"]
[Sun Apr 26 06:09:03.566290 2026] [:error] [pid 8491:tid 8505] [client 20.203.174.117:47357] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhm.php"] [unique_id "ae07fyq7I7e6CJooQM2VrwAAAMY"]
[Sun Apr 26 06:09:04.406176 2026] [:error] [pid 41906:tid 41927] [client 20.203.174.117:26567] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bhm.php"] [unique_id "ae07gD3-0A3lxw9OXoAeQAAAAZM"]
[Sun Apr 26 06:09:05.057404 2026] [:error] [pid 8491:tid 8501] [client 20.203.174.117:61701] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "ae07gSq7I7e6CJooQM2VsAAAAMI"]
[Sun Apr 26 06:09:05.650265 2026] [:error] [pid 8385:tid 8431] [client 20.203.174.117:56788] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "ae07gTOy7_J84Wx3-oxkAQAAAEc"]
[Sun Apr 26 06:09:06.515876 2026] [:error] [pid 10315:tid 10336] [client 20.203.174.117:4899] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "ae07gqJIw2vjkleLIaCjXAAAARM"]
[Sun Apr 26 06:09:07.642120 2026] [:error] [pid 31273:tid 31355] [client 20.203.174.117:58079] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "ae07g_hcNJEGrATcuEfOCQAAAVA"]
[Sun Apr 26 06:09:08.270367 2026] [:error] [pid 8491:tid 8509] [client 20.203.174.117:46379] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "ae07hCq7I7e6CJooQM2VuQAAAMo"]
[Sun Apr 26 06:09:09.201085 2026] [:error] [pid 8390:tid 8471] [client 20.203.174.117:47324] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "ae07hYGPtFK_i9p5yxQX6wAAAJQ"]
[Sun Apr 26 06:09:09.915208 2026] [:error] [pid 41906:tid 41914] [client 20.203.174.117:50268] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "ae07hT3-0A3lxw9OXoAeeQAAAYY"]
[Sun Apr 26 06:09:10.683986 2026] [:error] [pid 10315:tid 10326] [client 20.203.174.117:61708] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "ae07hqJIw2vjkleLIaCjYwAAAQk"]
[Sun Apr 26 06:09:11.320959 2026] [:error] [pid 10315:tid 10335] [client 20.203.174.117:4874] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "ae07h6JIw2vjkleLIaCjaQAAARI"]
[Sun Apr 26 06:09:11.900991 2026] [:error] [pid 31273:tid 31337] [client 20.203.174.117:58081] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "ae07h_hcNJEGrATcuEfODQAAAUI"]
[Sun Apr 26 06:09:12.475146 2026] [:error] [pid 8385:tid 8439] [client 20.203.174.117:4907] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "ae07iDOy7_J84Wx3-oxkBgAAAE8"]
[Sun Apr 26 06:09:13.055450 2026] [:error] [pid 8390:tid 8462] [client 20.203.174.117:49217] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "ae07iYGPtFK_i9p5yxQX7gAAAIs"]
[Sun Apr 26 06:09:13.663647 2026] [:error] [pid 10315:tid 10334] [client 20.203.174.117:46374] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "ae07iaJIw2vjkleLIaCjbwAAARE"]
[Sun Apr 26 06:09:14.239475 2026] [:error] [pid 10315:tid 10337] [client 20.203.174.117:26604] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "ae07iqJIw2vjkleLIaCjcwAAARQ"]
[Sun Apr 26 06:09:14.827419 2026] [:error] [pid 10315:tid 10326] [client 20.203.174.117:52986] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "ae07iqJIw2vjkleLIaCjdgAAAQk"]
[Sun Apr 26 06:09:15.325748 2026] [:error] [pid 8390:tid 8463] [client 20.203.174.117:49275] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "ae07i4GPtFK_i9p5yxQX8gAAAIw"]
[Sun Apr 26 06:09:15.835653 2026] [:error] [pid 8491:tid 8501] [client 20.203.174.117:49232] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "ae07iyq7I7e6CJooQM2VvAAAAMI"]
[Sun Apr 26 06:09:16.406776 2026] [:error] [pid 31273:tid 31357] [client 20.203.174.117:60635] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "ae07jPhcNJEGrATcuEfOFAAAAVI"]
[Sun Apr 26 06:09:16.936083 2026] [:error] [pid 8491:tid 8519] [client 20.203.174.117:49262] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "ae07jCq7I7e6CJooQM2VvwAAANQ"]
[Sun Apr 26 06:09:17.461858 2026] [:error] [pid 8491:tid 8503] [client 20.203.174.117:58111] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "ae07jSq7I7e6CJooQM2VxAAAAMQ"]
[Sun Apr 26 06:09:17.936646 2026] [:error] [pid 8385:tid 8437] [client 20.203.174.117:60645] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "ae07jTOy7_J84Wx3-oxkCgAAAE0"]
[Sun Apr 26 06:09:18.430270 2026] [:error] [pid 8491:tid 8499] [client 20.203.174.117:46341] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "ae07jiq7I7e6CJooQM2VxQAAAMA"]
[Sun Apr 26 06:09:18.946043 2026] [:error] [pid 8491:tid 8508] [client 20.203.174.117:4924] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "ae07jiq7I7e6CJooQM2VxgAAAMk"]
[Sun Apr 26 06:09:19.570637 2026] [:error] [pid 41906:tid 41910] [client 20.203.174.117:58641] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "ae07jz3-0A3lxw9OXoAelQAAAYI"]
[Sun Apr 26 06:09:20.119198 2026] [:error] [pid 8390:tid 8461] [client 20.203.174.117:50345] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "ae07kIGPtFK_i9p5yxQX9gAAAIo"]
[Sun Apr 26 06:09:20.876090 2026] [:error] [pid 31273:tid 31346] [client 20.203.174.117:58683] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "ae07kPhcNJEGrATcuEfOFgAAAUg"]
[Sun Apr 26 06:09:21.470462 2026] [:error] [pid 31273:tid 31356] [client 20.203.174.117:26613] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "ae07kfhcNJEGrATcuEfOGAAAAVE"]
[Sun Apr 26 06:09:22.000155 2026] [:error] [pid 10315:tid 10318] [client 20.203.174.117:4925] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Xx.php"] [unique_id "ae07kaJIw2vjkleLIaCjfwAAAQE"]
[Sun Apr 26 06:09:22.509011 2026] [:error] [pid 10315:tid 10327] [client 20.203.174.117:61747] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "ae07kqJIw2vjkleLIaCjgAAAAQo"]
[Sun Apr 26 06:09:23.062305 2026] [:error] [pid 41906:tid 41915] [client 20.203.174.117:26615] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "ae07kz3-0A3lxw9OXoAepAAAAYc"]
[Sun Apr 26 06:09:23.625114 2026] [:error] [pid 31273:tid 31361] [client 20.203.174.117:60628] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "ae07k_hcNJEGrATcuEfOIgAAAVY"]
[Sun Apr 26 06:09:24.155714 2026] [:error] [pid 8383:tid 8411] [client 20.203.174.117:49218] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmini.php"] [unique_id "ae07lNFa2S3EsATMdWPCIwAAAA4"]
[Sun Apr 26 06:09:24.798538 2026] [:error] [pid 41906:tid 41924] [client 20.203.174.117:58624] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "ae07lD3-0A3lxw9OXoAeswAAAZA"]
[Sun Apr 26 06:09:25.523489 2026] [:error] [pid 8390:tid 8454] [client 20.203.174.117:52948] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "ae07lYGPtFK_i9p5yxQX_AAAAIM"]
[Sun Apr 26 06:09:26.345166 2026] [:error] [pid 41906:tid 41923] [client 20.203.174.117:50248] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "ae07lj3-0A3lxw9OXoAeuQAAAY8"]
[Sun Apr 26 06:09:26.994726 2026] [:error] [pid 8390:tid 8473] [client 20.203.174.117:5081] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "ae07loGPtFK_i9p5yxQX_wAAAJY"]
[Sun Apr 26 06:09:27.823454 2026] [:error] [pid 10315:tid 10328] [client 20.203.174.117:4871] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae07l6JIw2vjkleLIaCjhQAAAQs"]
[Sun Apr 26 06:09:28.486928 2026] [:error] [pid 8491:tid 8523] [client 20.203.174.117:58080] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae07mCq7I7e6CJooQM2V0AAAANc"]
[Sun Apr 26 06:09:29.196677 2026] [:error] [pid 31273:tid 31346] [client 20.203.174.117:58670] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae07mfhcNJEGrATcuEfOKgAAAUg"]
[Sun Apr 26 06:09:29.816095 2026] [:error] [pid 31273:tid 31349] [client 20.203.174.117:47333] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae07mfhcNJEGrATcuEfOLgAAAUo"]
[Sun Apr 26 06:09:30.386151 2026] [:error] [pid 41906:tid 41918] [client 20.203.174.117:49229] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae07mj3-0A3lxw9OXoAevwAAAYo"]
[Sun Apr 26 06:09:30.908746 2026] [:error] [pid 41906:tid 41922] [client 20.203.174.117:61759] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae07mj3-0A3lxw9OXoAewAAAAY4"]
[Sun Apr 26 06:09:31.513985 2026] [:error] [pid 8491:tid 8517] [client 20.203.174.117:58082] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae07myq7I7e6CJooQM2V1AAAANI"]
[Sun Apr 26 06:09:32.274024 2026] [:error] [pid 10315:tid 10337] [client 20.203.174.117:49224] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae07nKJIw2vjkleLIaCjkQAAARQ"]
[Sun Apr 26 06:09:32.861412 2026] [:error] [pid 31273:tid 31358] [client 20.203.174.117:58668] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "ae07nPhcNJEGrATcuEfONQAAAVM"]
[Sun Apr 26 06:09:33.504402 2026] [:error] [pid 41906:tid 41919] [client 20.203.174.117:49220] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "ae07nT3-0A3lxw9OXoAexwAAAYs"]
[Sun Apr 26 06:09:34.093307 2026] [:error] [pid 31273:tid 31347] [client 20.203.174.117:58092] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "ae07nvhcNJEGrATcuEfONwAAAUk"]
[Sun Apr 26 06:09:34.631078 2026] [:error] [pid 10315:tid 10332] [client 20.203.174.117:5067] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "ae07nqJIw2vjkleLIaCjlgAAAQ8"]
[Sun Apr 26 06:09:35.236736 2026] [:error] [pid 10315:tid 10335] [client 20.203.174.117:58067] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/huya.php"] [unique_id "ae07n6JIw2vjkleLIaCjmAAAARI"]
[Sun Apr 26 06:09:35.822332 2026] [:error] [pid 10315:tid 10327] [client 20.203.174.117:46337] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/huya.php"] [unique_id "ae07n6JIw2vjkleLIaCjnAAAAQo"]
[Sun Apr 26 06:09:36.384509 2026] [:error] [pid 41906:tid 41930] [client 20.203.174.117:58627] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/huya.php"] [unique_id "ae07oD3-0A3lxw9OXoAe0AAAAZY"]
[Sun Apr 26 06:09:36.892743 2026] [:error] [pid 41906:tid 41925] [client 20.203.174.117:4171] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/huya.php"] [unique_id "ae07oD3-0A3lxw9OXoAe0gAAAZE"]
[Sun Apr 26 06:09:37.414921 2026] [:error] [pid 10315:tid 10326] [client 20.203.174.117:5113] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "ae07oaJIw2vjkleLIaCjowAAAQk"]
[Sun Apr 26 06:09:37.969356 2026] [:error] [pid 41906:tid 41912] [client 20.203.174.117:58672] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "ae07oT3-0A3lxw9OXoAe1gAAAYQ"]
[Sun Apr 26 06:09:38.497778 2026] [:error] [pid 41906:tid 41909] [client 20.203.174.117:54708] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "ae07oj3-0A3lxw9OXoAe2QAAAYE"]
[Sun Apr 26 06:09:39.067956 2026] [:error] [pid 41906:tid 41930] [client 20.203.174.117:61805] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "ae07oz3-0A3lxw9OXoAe3gAAAZY"]
[Sun Apr 26 06:09:39.721100 2026] [:error] [pid 10315:tid 10325] [client 20.203.174.117:4162] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "ae07o6JIw2vjkleLIaCjrAAAAQg"]
[Sun Apr 26 06:09:40.205487 2026] [:error] [pid 8383:tid 8399] [client 20.203.174.117:50242] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "ae07pNFa2S3EsATMdWPCJwAAAAI"]
[Sun Apr 26 06:09:40.745162 2026] [:error] [pid 10315:tid 10334] [client 20.203.174.117:4169] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "ae07pKJIw2vjkleLIaCjrgAAARE"]
[Sun Apr 26 06:09:41.235019 2026] [:error] [pid 10315:tid 10328] [client 20.203.174.117:52254] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "ae07paJIw2vjkleLIaCjsAAAAQs"]
[Sun Apr 26 06:09:41.778122 2026] [:error] [pid 8390:tid 8465] [client 20.203.174.117:61434] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "ae07pYGPtFK_i9p5yxQYBAAAAI4"]
[Sun Apr 26 06:09:42.355482 2026] [:error] [pid 31273:tid 31347] [client 20.203.174.117:4149] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "ae07pvhcNJEGrATcuEfOTgAAAUk"]
[Sun Apr 26 06:09:42.880647 2026] [:error] [pid 41906:tid 41911] [client 20.203.174.117:49730] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "ae07pj3-0A3lxw9OXoAe6gAAAYM"]
[Sun Apr 26 06:09:43.413987 2026] [:error] [pid 41906:tid 41931] [client 20.203.174.117:52253] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ewp.php"] [unique_id "ae07pz3-0A3lxw9OXoAe7gAAAZc"]
[Sun Apr 26 06:09:43.910863 2026] [:error] [pid 8491:tid 8524] [client 20.203.174.117:46099] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae07pyq7I7e6CJooQM2V3QAAANg"]
[Sun Apr 26 06:09:44.547303 2026] [:error] [pid 41906:tid 41930] [client 20.203.174.117:4736] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae07qD3-0A3lxw9OXoAe9gAAAZY"]
[Sun Apr 26 06:09:45.064050 2026] [:error] [pid 10315:tid 10341] [client 20.203.174.117:61423] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae07qaJIw2vjkleLIaCjtgAAARg"]
[Sun Apr 26 06:09:45.618804 2026] [:error] [pid 41906:tid 41919] [client 20.203.174.117:58308] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae07qT3-0A3lxw9OXoAe-wAAAYs"]
[Sun Apr 26 06:09:46.149670 2026] [:error] [pid 8491:tid 8520] [client 20.203.174.117:4156] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae07qiq7I7e6CJooQM2V3gAAANU"]
[Sun Apr 26 06:09:46.705504 2026] [:error] [pid 8385:tid 8448] [client 20.203.174.117:64188] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae07qjOy7_J84Wx3-oxkFwAAAFg"]
[Sun Apr 26 06:09:47.220137 2026] [:error] [pid 31273:tid 31358] [client 20.203.174.117:51912] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae07q_hcNJEGrATcuEfOXAAAAVM"]
[Sun Apr 26 06:09:47.728655 2026] [:error] [pid 41906:tid 41921] [client 20.203.174.117:48629] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae07qz3-0A3lxw9OXoAe_wAAAY0"]
[Sun Apr 26 06:09:48.226693 2026] [:error] [pid 41906:tid 41931] [client 20.203.174.117:4784] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ae07rD3-0A3lxw9OXoAfBAAAAZc"]
[Sun Apr 26 06:09:48.756968 2026] [:error] [pid 41906:tid 41919] [client 20.203.174.117:4116] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ae07rD3-0A3lxw9OXoAfCAAAAYs"]
[Sun Apr 26 06:09:49.295629 2026] [:error] [pid 31273:tid 31347] [client 20.203.174.117:52238] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ae07rfhcNJEGrATcuEfOXQAAAUk"]
[Sun Apr 26 06:09:49.791699 2026] [:error] [pid 41906:tid 41930] [client 20.203.174.117:64141] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ae07rT3-0A3lxw9OXoAfDgAAAZY"]
[Sun Apr 26 06:09:50.322713 2026] [:error] [pid 41906:tid 41908] [client 20.203.174.117:4364] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ae07rj3-0A3lxw9OXoAfEwAAAYA"]
[Sun Apr 26 06:09:50.818855 2026] [:error] [pid 41906:tid 41914] [client 20.203.174.117:64130] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ae07rj3-0A3lxw9OXoAfGgAAAYY"]
[Sun Apr 26 06:09:51.377918 2026] [:error] [pid 8491:tid 8512] [client 20.203.174.117:48617] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ae07ryq7I7e6CJooQM2V5AAAAM0"]
[Sun Apr 26 06:09:51.953030 2026] [:error] [pid 31273:tid 31359] [client 20.203.174.117:64478] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lupo.php"] [unique_id "ae07r_hcNJEGrATcuEfOcwAAAVQ"]
[Sun Apr 26 06:09:52.506025 2026] [:error] [pid 41906:tid 41916] [client 20.203.174.117:40772] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "ae07sD3-0A3lxw9OXoAfLAAAAYg"]
[Sun Apr 26 06:09:53.061450 2026] [:error] [pid 41906:tid 41932] [client 20.203.174.117:4397] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "ae07sT3-0A3lxw9OXoAfMAAAAZg"]
[Sun Apr 26 06:09:53.581516 2026] [:error] [pid 41906:tid 41929] [client 20.203.174.117:48464] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "ae07sT3-0A3lxw9OXoAfNAAAAZU"]
[Sun Apr 26 06:09:54.164478 2026] [:error] [pid 8385:tid 8439] [client 20.203.174.117:4096] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "ae07sjOy7_J84Wx3-oxkGQAAAE8"]
[Sun Apr 26 06:09:54.731902 2026] [:error] [pid 8390:tid 8457] [client 20.203.174.117:48474] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "ae07soGPtFK_i9p5yxQYCQAAAIY"]
[Sun Apr 26 06:09:55.322491 2026] [:error] [pid 8390:tid 8451] [client 20.203.174.117:51373] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "ae07s4GPtFK_i9p5yxQYCgAAAIA"]
[Sun Apr 26 06:09:55.933780 2026] [:error] [pid 10315:tid 10336] [client 20.203.174.117:46454] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "ae07s6JIw2vjkleLIaCjvAAAARM"]
[Sun Apr 26 06:09:56.596896 2026] [:error] [pid 10315:tid 10333] [client 20.203.174.117:48481] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/popo.php"] [unique_id "ae07tKJIw2vjkleLIaCjvQAAARA"]
[Sun Apr 26 06:09:57.152277 2026] [:error] [pid 8491:tid 8520] [client 20.203.174.117:64905] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "ae07tSq7I7e6CJooQM2V6gAAANU"]
[Sun Apr 26 06:09:57.780796 2026] [:error] [pid 10315:tid 10326] [client 20.203.174.117:40805] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "ae07taJIw2vjkleLIaCjwgAAAQk"]
[Sun Apr 26 06:09:58.492981 2026] [:error] [pid 10315:tid 10322] [client 20.203.174.117:48510] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/13.php"] [unique_id "ae07tqJIw2vjkleLIaCjxQAAAQU"]
[Sun Apr 26 06:10:13.559217 2026] [autoindex:error] [pid 8491:tid 8518] [client 20.203.174.117:45686] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:10:20.150269 2026] [proxy_fcgi:error] [pid 8385:tid 8434] [client 20.203.174.117:52177] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:10:35.754367 2026] [proxy_fcgi:error] [pid 31273:tid 31347] [client 20.203.174.117:50900] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:10:36.345307 2026] [proxy_fcgi:error] [pid 8491:tid 8503] [client 20.203.174.117:45686] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:10:52.758482 2026] [proxy_fcgi:error] [pid 8390:tid 8457] [client 20.203.174.117:41506] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:11:05.241095 2026] [:error] [pid 8385:tid 8432] [client 20.203.174.117:60946] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "ae07-TOy7_J84Wx3-oxkYgAAAEg"]
[Sun Apr 26 06:11:06.276934 2026] [:error] [pid 10315:tid 10339] [client 20.203.174.117:49942] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "ae07-qJIw2vjkleLIaCkNwAAARY"]
[Sun Apr 26 06:11:07.021572 2026] [:error] [pid 31273:tid 31353] [client 20.203.174.117:47571] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "ae07-_hcNJEGrATcuEfPjgAAAU4"]
[Sun Apr 26 06:11:07.627856 2026] [:error] [pid 31273:tid 31337] [client 20.203.174.117:64188] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "ae07-_hcNJEGrATcuEfPkQAAAUI"]
[Sun Apr 26 06:11:08.442028 2026] [:error] [pid 8390:tid 8474] [client 20.203.174.117:62506] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "ae07_IGPtFK_i9p5yxQYSwAAAJc"]
[Sun Apr 26 06:11:09.670670 2026] [:error] [pid 10315:tid 10317] [client 20.203.174.117:48441] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "ae07_aJIw2vjkleLIaCkPwAAAQA"]
[Sun Apr 26 06:11:10.353649 2026] [:error] [pid 31273:tid 31341] [client 20.203.174.117:52846] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "ae07_vhcNJEGrATcuEfPnAAAAUQ"]
[Sun Apr 26 06:11:11.109761 2026] [:error] [pid 31273:tid 31359] [client 20.203.174.117:55845] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "ae07__hcNJEGrATcuEfPoAAAAVQ"]
[Sun Apr 26 06:11:11.908843 2026] [:error] [pid 8385:tid 8441] [client 20.203.174.117:54243] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ae07_zOy7_J84Wx3-oxkagAAAFE"]
[Sun Apr 26 06:11:12.557300 2026] [:error] [pid 31273:tid 31345] [client 20.203.174.117:60553] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ae08APhcNJEGrATcuEfPowAAAUc"]
[Sun Apr 26 06:11:13.363319 2026] [:error] [pid 10315:tid 10341] [client 20.203.174.117:48398] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ae08AaJIw2vjkleLIaCkRQAAARg"]
[Sun Apr 26 06:11:14.098457 2026] [:error] [pid 31273:tid 31341] [client 20.203.174.117:48434] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ae08AvhcNJEGrATcuEfPpgAAAUQ"]
[Sun Apr 26 06:11:15.009041 2026] [:error] [pid 10315:tid 10337] [client 20.203.174.117:54976] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae08A6JIw2vjkleLIaCkSQAAARQ"]
[Sun Apr 26 06:11:16.037405 2026] [:error] [pid 41906:tid 41920] [client 20.203.174.117:53196] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae08BD3-0A3lxw9OXoAg_QAAAYw"]
[Sun Apr 26 06:11:17.481299 2026] [:error] [pid 8385:tid 8424] [client 20.203.174.117:64441] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae08BTOy7_J84Wx3-oxkcQAAAEA"]
[Sun Apr 26 06:11:18.540084 2026] [:error] [pid 31273:tid 31339] [client 20.203.174.117:62486] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae08BvhcNJEGrATcuEfPrAAAAUM"]
[Sun Apr 26 06:11:19.338152 2026] [:error] [pid 31273:tid 31341] [client 20.203.174.117:50925] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35_S.php"] [unique_id "ae08B_hcNJEGrATcuEfPsAAAAUQ"]
[Sun Apr 26 06:11:20.333755 2026] [:error] [pid 41906:tid 41909] [client 20.203.174.117:63343] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35_S.php"] [unique_id "ae08CD3-0A3lxw9OXoAhAQAAAYE"]
[Sun Apr 26 06:11:21.000369 2026] [:error] [pid 8383:tid 8420] [client 20.203.174.117:49924] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35_S.php"] [unique_id "ae08CNFa2S3EsATMdWPCWAAAABc"]
[Sun Apr 26 06:11:21.972494 2026] [:error] [pid 31273:tid 31344] [client 20.203.174.117:58286] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35_S.php"] [unique_id "ae08CfhcNJEGrATcuEfPvgAAAUY"]
[Sun Apr 26 06:11:22.880417 2026] [:error] [pid 8491:tid 8519] [client 20.203.174.117:52999] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae08Ciq7I7e6CJooQM2WlgAAANQ"]
[Sun Apr 26 06:11:23.786088 2026] [:error] [pid 41906:tid 41930] [client 20.203.174.117:50933] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae08Cz3-0A3lxw9OXoAhBwAAAZY"]
[Sun Apr 26 06:11:24.437458 2026] [:error] [pid 8491:tid 8516] [client 20.203.174.117:52596] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae08DCq7I7e6CJooQM2WmgAAANE"]
[Sun Apr 26 06:11:25.314026 2026] [:error] [pid 8491:tid 8505] [client 20.203.174.117:63321] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae08DSq7I7e6CJooQM2WngAAAMY"]
[Sun Apr 26 06:11:25.946451 2026] [:error] [pid 10315:tid 10328] [client 20.203.174.117:52802] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/111.php"] [unique_id "ae08DaJIw2vjkleLIaCkWAAAAQs"]
[Sun Apr 26 06:11:26.488084 2026] [:error] [pid 10315:tid 10324] [client 20.203.174.117:58256] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/111.php"] [unique_id "ae08DqJIw2vjkleLIaCkWgAAAQc"]
[Sun Apr 26 06:11:27.243048 2026] [:error] [pid 10315:tid 10326] [client 20.203.174.117:52599] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/111.php"] [unique_id "ae08D6JIw2vjkleLIaCkYAAAAQk"]
[Sun Apr 26 06:11:27.860201 2026] [:error] [pid 41906:tid 41909] [client 20.203.174.117:50886] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/111.php"] [unique_id "ae08Dz3-0A3lxw9OXoAhDAAAAYE"]
[Sun Apr 26 06:11:28.566286 2026] [:error] [pid 10315:tid 10338] [client 20.203.174.117:63778] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp1.php"] [unique_id "ae08EKJIw2vjkleLIaCkZQAAARU"]
[Sun Apr 26 06:11:30.157162 2026] [:error] [pid 41906:tid 41911] [client 20.203.174.117:52489] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp1.php"] [unique_id "ae08Ej3-0A3lxw9OXoAhEgAAAYM"]
[Sun Apr 26 06:11:31.022764 2026] [:error] [pid 41906:tid 41928] [client 20.203.174.117:65327] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp1.php"] [unique_id "ae08Ez3-0A3lxw9OXoAhFQAAAZQ"]
[Sun Apr 26 06:11:31.585110 2026] [:error] [pid 41906:tid 41932] [client 20.203.174.117:65298] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp1.php"] [unique_id "ae08Ez3-0A3lxw9OXoAhGAAAAZg"]
[Sun Apr 26 06:11:32.156674 2026] [:error] [pid 41906:tid 41911] [client 20.203.174.117:50936] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "ae08FD3-0A3lxw9OXoAhHgAAAYM"]
[Sun Apr 26 06:11:32.914414 2026] [:error] [pid 8390:tid 8472] [client 20.203.174.117:47046] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "ae08FIGPtFK_i9p5yxQYVQAAAJU"]
[Sun Apr 26 06:11:33.503902 2026] [:error] [pid 8390:tid 8474] [client 20.203.174.117:53967] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "ae08FYGPtFK_i9p5yxQYVgAAAJc"]
[Sun Apr 26 06:11:34.085594 2026] [:error] [pid 31273:tid 31351] [client 20.203.174.117:63342] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aligk.php"] [unique_id "ae08FvhcNJEGrATcuEfP5gAAAUw"]
[Sun Apr 26 06:11:34.771786 2026] [:error] [pid 41906:tid 41912] [client 20.203.174.117:52823] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "ae08Fj3-0A3lxw9OXoAhKgAAAYQ"]
[Sun Apr 26 06:11:35.613681 2026] [:error] [pid 10315:tid 10340] [client 20.203.174.117:63764] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "ae08F6JIw2vjkleLIaCkaQAAARc"]
[Sun Apr 26 06:11:36.326857 2026] [:error] [pid 10315:tid 10324] [client 20.203.174.117:63751] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "ae08GKJIw2vjkleLIaCkbQAAAQc"]
[Sun Apr 26 06:11:36.889903 2026] [:error] [pid 8491:tid 8501] [client 20.203.174.117:50884] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byrgo.php"] [unique_id "ae08GCq7I7e6CJooQM2WowAAAMI"]
[Sun Apr 26 06:11:37.800979 2026] [:error] [pid 31273:tid 31355] [client 20.203.174.117:52517] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "ae08GfhcNJEGrATcuEfP7AAAAVA"]
[Sun Apr 26 06:11:38.637603 2026] [:error] [pid 8491:tid 8520] [client 20.203.174.117:52841] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "ae08Giq7I7e6CJooQM2WqAAAANU"]
[Sun Apr 26 06:11:39.249044 2026] [:error] [pid 8491:tid 8506] [client 20.203.174.117:50895] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "ae08Gyq7I7e6CJooQM2WrAAAAMc"]
[Sun Apr 26 06:11:39.888828 2026] [:error] [pid 8491:tid 8512] [client 20.203.174.117:65320] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwpg.php"] [unique_id "ae08Gyq7I7e6CJooQM2WrwAAAM0"]
[Sun Apr 26 06:11:40.496469 2026] [:error] [pid 10315:tid 10336] [client 20.203.174.117:50940] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ae08HKJIw2vjkleLIaCkcAAAARM"]
[Sun Apr 26 06:11:41.138001 2026] [:error] [pid 41906:tid 41908] [client 20.203.174.117:58290] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ae08HT3-0A3lxw9OXoAhNAAAAYA"]
[Sun Apr 26 06:11:41.791852 2026] [:error] [pid 31273:tid 31363] [client 20.203.174.117:65291] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ae08HfhcNJEGrATcuEfP8gAAAVg"]
[Sun Apr 26 06:11:42.598194 2026] [:error] [pid 8491:tid 8503] [client 20.203.174.117:45433] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ass.php"] [unique_id "ae08Hiq7I7e6CJooQM2WtAAAAMQ"]
[Sun Apr 26 06:11:43.307630 2026] [:error] [pid 41906:tid 41910] [client 20.203.174.117:52516] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ae08Hz3-0A3lxw9OXoAhPAAAAYI"]
[Sun Apr 26 06:11:43.924649 2026] [:error] [pid 41906:tid 41924] [client 20.203.174.117:60971] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ae08Hz3-0A3lxw9OXoAhPgAAAZA"]
[Sun Apr 26 06:11:44.656960 2026] [:error] [pid 8383:tid 8420] [client 20.203.174.117:52530] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ae08INFa2S3EsATMdWPCcAAAABc"]
[Sun Apr 26 06:11:45.232495 2026] [:error] [pid 10315:tid 10337] [client 20.203.174.117:45376] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ae08IaJIw2vjkleLIaCkdQAAARQ"]
[Sun Apr 26 06:11:45.773312 2026] [:error] [pid 41906:tid 41926] [client 20.203.174.117:65325] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ae08IT3-0A3lxw9OXoAhRgAAAZI"]
[Sun Apr 26 06:11:46.323426 2026] [:error] [pid 10315:tid 10340] [client 20.203.174.117:52510] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ae08IqJIw2vjkleLIaCkdwAAARc"]
[Sun Apr 26 06:11:46.921581 2026] [:error] [pid 10315:tid 10341] [client 20.203.174.117:65292] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ae08IqJIw2vjkleLIaCkewAAARg"]
[Sun Apr 26 06:11:47.494044 2026] [:error] [pid 8491:tid 8510] [client 20.203.174.117:45407] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "ae08Iyq7I7e6CJooQM2W3QAAAMs"]
[Sun Apr 26 06:11:48.209223 2026] [:error] [pid 41906:tid 41925] [client 20.203.174.117:63316] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "ae08JD3-0A3lxw9OXoAhUAAAAZE"]
[Sun Apr 26 06:11:48.799331 2026] [:error] [pid 8390:tid 8461] [client 20.203.174.117:63351] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "ae08JIGPtFK_i9p5yxQYZQAAAIo"]
[Sun Apr 26 06:11:49.353808 2026] [:error] [pid 41906:tid 41922] [client 20.203.174.117:50896] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "ae08JT3-0A3lxw9OXoAhUwAAAY4"]
[Sun Apr 26 06:11:49.913923 2026] [:error] [pid 10315:tid 10324] [client 20.203.174.117:63355] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "ae08JaJIw2vjkleLIaCkiQAAAQc"]
[Sun Apr 26 06:11:50.520599 2026] [:error] [pid 41906:tid 41917] [client 20.203.174.117:58299] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "ae08Jj3-0A3lxw9OXoAhVgAAAYk"]
[Sun Apr 26 06:11:51.198777 2026] [:error] [pid 31273:tid 31349] [client 20.203.174.117:52605] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "ae08J_hcNJEGrATcuEfQIQAAAUo"]
[Sun Apr 26 06:11:51.760976 2026] [:error] [pid 8491:tid 8511] [client 20.203.174.117:59821] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "ae08Jyq7I7e6CJooQM2XLAAAAMw"]
[Sun Apr 26 06:11:52.270955 2026] [:error] [pid 8491:tid 8524] [client 20.203.174.117:53990] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "ae08KCq7I7e6CJooQM2XLgAAANg"]
[Sun Apr 26 06:11:52.823185 2026] [:error] [pid 41906:tid 41922] [client 20.203.174.117:50907] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "ae08KD3-0A3lxw9OXoAhXQAAAY4"]
[Sun Apr 26 06:11:53.598281 2026] [:error] [pid 8383:tid 8415] [client 20.203.174.117:47071] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "ae08KdFa2S3EsATMdWPCnQAAABI"]
[Sun Apr 26 06:11:54.118604 2026] [:error] [pid 8385:tid 8427] [client 20.203.174.117:52567] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "ae08KjOy7_J84Wx3-oxkoAAAAEM"]
[Sun Apr 26 06:11:54.802199 2026] [:error] [pid 31273:tid 31339] [client 20.203.174.117:47090] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "ae08KvhcNJEGrATcuEfQJQAAAUM"]
[Sun Apr 26 06:11:55.403464 2026] [:error] [pid 31273:tid 31355] [client 20.203.174.117:52524] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "ae08K_hcNJEGrATcuEfQJgAAAVA"]
[Sun Apr 26 06:11:56.038420 2026] [:error] [pid 31273:tid 31344] [client 20.203.174.117:59491] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "ae08LPhcNJEGrATcuEfQKQAAAUY"]
[Sun Apr 26 06:11:56.717053 2026] [:error] [pid 8385:tid 8448] [client 20.203.174.117:59519] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "ae08LDOy7_J84Wx3-oxkpAAAAFg"]
[Sun Apr 26 06:11:57.318643 2026] [:error] [pid 31273:tid 31351] [client 20.203.174.117:58271] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "ae08LfhcNJEGrATcuEfQLwAAAUw"]
[Sun Apr 26 06:11:57.890309 2026] [:error] [pid 8385:tid 8434] [client 20.203.174.117:53982] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ae08LTOy7_J84Wx3-oxkpQAAAEo"]
[Sun Apr 26 06:11:58.484793 2026] [:error] [pid 31273:tid 31345] [client 20.203.174.117:52492] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inege.php"] [unique_id "ae08LvhcNJEGrATcuEfQMQAAAUc"]
[Sun Apr 26 06:12:18.455445 2026] [proxy_fcgi:error] [pid 41906:tid 41927] [client 20.203.174.117:52825] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:12:33.548123 2026] [proxy_fcgi:error] [pid 31273:tid 31358] [client 20.203.174.117:52813] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:12:34.419320 2026] [proxy_fcgi:error] [pid 8390:tid 8467] [client 20.203.174.117:45436] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:12:48.657192 2026] [proxy_fcgi:error] [pid 8491:tid 8504] [client 20.203.174.117:52593] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:12:53.974574 2026] [:error] [pid 41906:tid 41918] [client 20.203.174.117:52515] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "ae08ZT3-0A3lxw9OXoAhygAAAYo"]
[Sun Apr 26 06:12:54.457362 2026] [:error] [pid 31273:tid 31339] [client 20.203.174.117:52543] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "ae08ZvhcNJEGrATcuEfQlAAAAUM"]
[Sun Apr 26 06:12:55.042156 2026] [:error] [pid 8491:tid 8518] [client 20.203.174.117:58143] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "ae08Zyq7I7e6CJooQM2XXgAAANM"]
[Sun Apr 26 06:12:55.548067 2026] [:error] [pid 8491:tid 8503] [client 20.203.174.117:63318] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "ae08Zyq7I7e6CJooQM2XXwAAAMQ"]
[Sun Apr 26 06:12:56.039496 2026] [:error] [pid 8491:tid 8508] [client 20.203.174.117:50924] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae08aCq7I7e6CJooQM2XYwAAAMk"]
[Sun Apr 26 06:12:56.657209 2026] [:error] [pid 8385:tid 8424] [client 20.203.174.117:50916] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae08aDOy7_J84Wx3-oxkvQAAAEA"]
[Sun Apr 26 06:12:57.248570 2026] [:error] [pid 8383:tid 8410] [client 20.203.174.117:52546] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae08adFa2S3EsATMdWPCzgAAAA0"]
[Sun Apr 26 06:12:57.789778 2026] [:error] [pid 8383:tid 8401] [client 20.203.174.117:60563] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "ae08adFa2S3EsATMdWPCzwAAAAQ"]
[Sun Apr 26 06:12:58.358734 2026] [:error] [pid 8491:tid 8524] [client 20.203.174.117:63773] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae08aiq7I7e6CJooQM2XdwAAANg"]
[Sun Apr 26 06:12:58.941742 2026] [:error] [pid 8383:tid 8409] [client 20.203.174.117:52851] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae08atFa2S3EsATMdWPC0AAAAAw"]
[Sun Apr 26 06:12:59.501328 2026] [:error] [pid 8491:tid 8505] [client 20.203.174.117:50883] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae08ayq7I7e6CJooQM2XgAAAAMY"]
[Sun Apr 26 06:13:00.091134 2026] [:error] [pid 8383:tid 8414] [client 20.203.174.117:52503] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae08bNFa2S3EsATMdWPC0QAAABE"]
[Sun Apr 26 06:13:00.622253 2026] [:error] [pid 8383:tid 8421] [client 20.203.174.117:63780] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "ae08bNFa2S3EsATMdWPC0gAAABg"]
[Sun Apr 26 06:13:02.203755 2026] [:error] [pid 10315:tid 10330] [client 20.203.174.117:52539] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "ae08bqJIw2vjkleLIaClDwAAAQ0"]
[Sun Apr 26 06:13:03.764949 2026] [:error] [pid 8385:tid 8434] [client 20.203.174.117:58249] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "ae08bzOy7_J84Wx3-oxkxAAAAEo"]
[Sun Apr 26 06:13:04.487599 2026] [:error] [pid 8385:tid 8425] [client 20.203.174.117:50892] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "ae08cDOy7_J84Wx3-oxkxgAAAEE"]
[Sun Apr 26 06:13:05.203667 2026] [:error] [pid 10315:tid 10329] [client 20.203.174.117:58146] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "ae08caJIw2vjkleLIaClEwAAAQw"]
[Sun Apr 26 06:13:05.813402 2026] [:error] [pid 8390:tid 8466] [client 20.203.174.117:45403] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "ae08cYGPtFK_i9p5yxQYigAAAI8"]
[Sun Apr 26 06:13:06.595492 2026] [:error] [pid 8491:tid 8520] [client 20.203.174.117:50927] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "ae08ciq7I7e6CJooQM2XkAAAANU"]
[Sun Apr 26 06:13:07.566201 2026] [:error] [pid 8383:tid 8408] [client 20.203.174.117:58274] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "ae08c9Fa2S3EsATMdWPC1gAAAAs"]
[Sun Apr 26 06:13:08.296055 2026] [:error] [pid 8383:tid 8420] [client 20.203.174.117:65340] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae08dNFa2S3EsATMdWPC1wAAABc"]
[Sun Apr 26 06:13:09.204312 2026] [:error] [pid 8491:tid 8502] [client 20.203.174.117:59515] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae08dSq7I7e6CJooQM2XlAAAAMM"]
[Sun Apr 26 06:13:10.404554 2026] [:error] [pid 8390:tid 8459] [client 20.203.174.117:58294] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae08doGPtFK_i9p5yxQYlQAAAIg"]
[Sun Apr 26 06:13:11.461838 2026] [:error] [pid 41906:tid 41916] [client 20.203.174.117:58166] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae08dz3-0A3lxw9OXoAh1wAAAYg"]
[Sun Apr 26 06:13:12.070889 2026] [:error] [pid 41906:tid 41926] [client 20.203.174.117:59802] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae08eD3-0A3lxw9OXoAh2gAAAZI"]
[Sun Apr 26 06:13:12.583067 2026] [:error] [pid 8390:tid 8453] [client 20.203.174.117:45392] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae08eIGPtFK_i9p5yxQYmwAAAII"]
[Sun Apr 26 06:13:13.218868 2026] [:error] [pid 8383:tid 8399] [client 20.203.174.117:63333] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae08edFa2S3EsATMdWPC2AAAAAI"]
[Sun Apr 26 06:13:13.777409 2026] [:error] [pid 8390:tid 8474] [client 20.203.174.117:58259] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae08eYGPtFK_i9p5yxQYnwAAAJc"]
[Sun Apr 26 06:13:14.277861 2026] [:error] [pid 8390:tid 8458] [client 20.203.174.117:52497] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "ae08eoGPtFK_i9p5yxQYowAAAIc"]
[Sun Apr 26 06:13:14.755408 2026] [:error] [pid 8383:tid 8418] [client 20.203.174.117:45400] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "ae08etFa2S3EsATMdWPC2gAAABU"]
[Sun Apr 26 06:13:15.269189 2026] [:error] [pid 8383:tid 8400] [client 20.203.174.117:59481] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "ae08e9Fa2S3EsATMdWPC3QAAAAM"]
[Sun Apr 26 06:13:15.802335 2026] [:error] [pid 41906:tid 41921] [client 20.203.174.117:65299] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "ae08ez3-0A3lxw9OXoAh3QAAAY0"]
[Sun Apr 26 06:13:16.396915 2026] [:error] [pid 10315:tid 10326] [client 20.203.174.117:65337] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "ae08fKJIw2vjkleLIaClJgAAAQk"]
[Sun Apr 26 06:13:16.939565 2026] [:error] [pid 8491:tid 8505] [client 20.203.174.117:45388] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "ae08fCq7I7e6CJooQM2XmgAAAMY"]
[Sun Apr 26 06:13:17.581036 2026] [:error] [pid 31273:tid 31350] [client 20.203.174.117:52596] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "ae08ffhcNJEGrATcuEfQogAAAUs"]
[Sun Apr 26 06:13:18.182812 2026] [:error] [pid 8383:tid 8415] [client 20.203.174.117:53965] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "ae08ftFa2S3EsATMdWPC4AAAABI"]
[Sun Apr 26 06:13:18.705335 2026] [:error] [pid 8390:tid 8474] [client 20.203.174.117:52527] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae08foGPtFK_i9p5yxQYuQAAAJc"]
[Sun Apr 26 06:13:19.208699 2026] [:error] [pid 41906:tid 41918] [client 20.203.174.117:58147] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae08fz3-0A3lxw9OXoAh4wAAAYo"]
[Sun Apr 26 06:13:19.821867 2026] [:error] [pid 41906:tid 41916] [client 20.203.174.117:53987] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae08fz3-0A3lxw9OXoAh5wAAAYg"]
[Sun Apr 26 06:13:20.375349 2026] [:error] [pid 41906:tid 41925] [client 20.203.174.117:52569] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae08gD3-0A3lxw9OXoAh6QAAAZE"]
[Sun Apr 26 06:13:20.982282 2026] [:error] [pid 8385:tid 8439] [client 20.203.174.117:58245] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae08gDOy7_J84Wx3-oxkygAAAE8"]
[Sun Apr 26 06:13:21.552881 2026] [:error] [pid 10315:tid 10335] [client 20.203.174.117:52829] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae08gaJIw2vjkleLIaClMwAAARI"]
[Sun Apr 26 06:13:22.231606 2026] [:error] [pid 10315:tid 10326] [client 20.203.174.117:65304] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae08gqJIw2vjkleLIaClNgAAAQk"]
[Sun Apr 26 06:13:22.872374 2026] [:error] [pid 41906:tid 41919] [client 20.203.174.117:63772] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae08gj3-0A3lxw9OXoAh6wAAAYs"]
[Sun Apr 26 06:13:23.615490 2026] [:error] [pid 41906:tid 41932] [client 20.203.174.117:59463] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae08gz3-0A3lxw9OXoAh8QAAAZg"]
[Sun Apr 26 06:13:24.204925 2026] [:error] [pid 41906:tid 41930] [client 20.203.174.117:65329] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae08hD3-0A3lxw9OXoAh-AAAAZY"]
[Sun Apr 26 06:13:24.742567 2026] [:error] [pid 41906:tid 41931] [client 20.203.174.117:47060] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae08hD3-0A3lxw9OXoAh-wAAAZc"]
[Sun Apr 26 06:13:25.365251 2026] [:error] [pid 8491:tid 8502] [client 20.203.174.117:63795] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae08hSq7I7e6CJooQM2XnAAAAMM"]
[Sun Apr 26 06:13:25.906197 2026] [:error] [pid 31273:tid 31345] [client 20.203.174.117:47103] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ae08hfhcNJEGrATcuEfQqwAAAUc"]
[Sun Apr 26 06:13:26.537443 2026] [:error] [pid 10315:tid 10322] [client 20.203.174.117:58136] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ae08hqJIw2vjkleLIaClVAAAAQU"]
[Sun Apr 26 06:13:27.201011 2026] [:error] [pid 8491:tid 8500] [client 20.203.174.117:53968] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ae08hyq7I7e6CJooQM2XnQAAAME"]
[Sun Apr 26 06:13:27.802351 2026] [:error] [pid 31273:tid 31358] [client 20.203.174.117:63797] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ae08h_hcNJEGrATcuEfQrwAAAVM"]
[Sun Apr 26 06:13:28.397111 2026] [:error] [pid 31273:tid 31363] [client 20.203.174.117:47088] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae08iPhcNJEGrATcuEfQsgAAAVg"]
[Sun Apr 26 06:13:28.920598 2026] [:error] [pid 41906:tid 41919] [client 20.203.174.117:59825] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae08iD3-0A3lxw9OXoAiAAAAAYs"]
[Sun Apr 26 06:13:29.423157 2026] [:error] [pid 31273:tid 31336] [client 20.203.174.117:52806] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae08ifhcNJEGrATcuEfQtQAAAUE"]
[Sun Apr 26 06:13:30.083346 2026] [:error] [pid 31273:tid 31361] [client 20.203.174.117:55854] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae08ivhcNJEGrATcuEfQuwAAAVY"]
[Sun Apr 26 06:13:30.748036 2026] [:error] [pid 8390:tid 8471] [client 20.203.174.117:58252] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "ae08ioGPtFK_i9p5yxQYwAAAAJQ"]
[Sun Apr 26 06:13:31.328471 2026] [:error] [pid 8390:tid 8457] [client 20.203.174.117:52496] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "ae08i4GPtFK_i9p5yxQYxAAAAIY"]
[Sun Apr 26 06:13:31.860871 2026] [:error] [pid 8383:tid 8406] [client 20.203.174.117:52511] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "ae08i9Fa2S3EsATMdWPC7AAAAAk"]
[Sun Apr 26 06:13:32.479913 2026] [:error] [pid 8383:tid 8414] [client 20.203.174.117:53040] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "ae08jNFa2S3EsATMdWPC7QAAABE"]
[Sun Apr 26 06:13:33.180157 2026] [:error] [pid 8383:tid 8416] [client 20.203.174.117:52830] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae08jdFa2S3EsATMdWPC7wAAABM"]
[Sun Apr 26 06:13:33.844514 2026] [:error] [pid 8491:tid 8510] [client 20.203.174.117:47094] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae08jSq7I7e6CJooQM2XoQAAAMs"]
[Sun Apr 26 06:13:34.471675 2026] [:error] [pid 8390:tid 8453] [client 20.203.174.117:65296] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae08joGPtFK_i9p5yxQY0AAAAII"]
[Sun Apr 26 06:13:35.049446 2026] [:error] [pid 31273:tid 31346] [client 20.203.174.117:54001] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae08j_hcNJEGrATcuEfQ0QAAAUg"]
[Sun Apr 26 06:13:35.661915 2026] [:error] [pid 8390:tid 8465] [client 20.203.174.117:49933] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "ae08j4GPtFK_i9p5yxQY1AAAAI4"]
[Sun Apr 26 06:13:36.300413 2026] [:error] [pid 8390:tid 8471] [client 20.203.174.117:50926] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "ae08kIGPtFK_i9p5yxQY1gAAAJQ"]
[Sun Apr 26 06:13:36.914708 2026] [:error] [pid 8383:tid 8403] [client 20.203.174.117:53042] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "ae08kNFa2S3EsATMdWPC9wAAAAY"]
[Sun Apr 26 06:13:37.806836 2026] [:error] [pid 10315:tid 10330] [client 20.203.174.117:58135] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fff.php"] [unique_id "ae08kaJIw2vjkleLIaClXwAAAQ0"]
[Sun Apr 26 06:13:38.454469 2026] [:error] [pid 10315:tid 10321] [client 20.203.174.117:52859] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "ae08kqJIw2vjkleLIaClYwAAAQQ"]
[Sun Apr 26 06:13:39.042501 2026] [:error] [pid 31273:tid 31354] [client 20.203.174.117:58260] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "ae08k_hcNJEGrATcuEfQ1wAAAU8"]
[Sun Apr 26 06:13:39.603873 2026] [:error] [pid 41906:tid 41928] [client 20.203.174.117:45402] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "ae08kz3-0A3lxw9OXoAiCwAAAZQ"]
[Sun Apr 26 06:13:40.256576 2026] [:error] [pid 31273:tid 31362] [client 20.203.174.117:59803] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "ae08lPhcNJEGrATcuEfQ3QAAAVc"]
[Sun Apr 26 06:13:40.809502 2026] [:error] [pid 31273:tid 31349] [client 20.203.174.117:50928] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "ae08lPhcNJEGrATcuEfQ4QAAAUo"]
[Sun Apr 26 06:13:41.420288 2026] [:error] [pid 8385:tid 8432] [client 20.203.174.117:53024] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "ae08lTOy7_J84Wx3-oxk1gAAAEg"]
[Sun Apr 26 06:13:42.012886 2026] [:error] [pid 8491:tid 8509] [client 20.203.174.117:63777] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "ae08liq7I7e6CJooQM2XrAAAAMo"]
[Sun Apr 26 06:13:42.516363 2026] [:error] [pid 8390:tid 8473] [client 20.203.174.117:52592] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "ae08loGPtFK_i9p5yxQY3gAAAJY"]
[Sun Apr 26 06:13:43.105572 2026] [:error] [pid 31273:tid 31351] [client 20.203.174.117:63326] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "ae08l_hcNJEGrATcuEfQ8gAAAUw"]
[Sun Apr 26 06:13:43.786483 2026] [:error] [pid 10315:tid 10332] [client 20.203.174.117:65298] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "ae08l6JIw2vjkleLIaClagAAAQ8"]
[Sun Apr 26 06:13:44.423877 2026] [:error] [pid 41906:tid 41928] [client 20.203.174.117:65314] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "ae08mD3-0A3lxw9OXoAiHAAAAZQ"]
[Sun Apr 26 06:13:45.326141 2026] [:error] [pid 8390:tid 8454] [client 20.203.174.117:52817] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/makeasmtp.php"] [unique_id "ae08mYGPtFK_i9p5yxQY5AAAAIM"]
[Sun Apr 26 06:13:46.511740 2026] [:error] [pid 8385:tid 8441] [client 20.203.174.117:52490] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "ae08mjOy7_J84Wx3-oxk2AAAAFE"]
[Sun Apr 26 06:13:47.253382 2026] [:error] [pid 8491:tid 8499] [client 20.203.174.117:52481] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "ae08myq7I7e6CJooQM2XtQAAAMA"]
[Sun Apr 26 06:13:48.104215 2026] [:error] [pid 41906:tid 41922] [client 20.203.174.117:52553] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "ae08nD3-0A3lxw9OXoAiHgAAAY4"]
[Sun Apr 26 06:13:48.934453 2026] [:error] [pid 10315:tid 10339] [client 20.203.174.117:45419] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "ae08nKJIw2vjkleLIaClbwAAARY"]
[Sun Apr 26 06:13:49.820417 2026] [:error] [pid 41906:tid 41927] [client 20.203.174.117:52564] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae08nT3-0A3lxw9OXoAiIwAAAZM"]
[Sun Apr 26 06:13:50.454903 2026] [:error] [pid 41906:tid 41931] [client 20.203.174.117:58132] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae08nj3-0A3lxw9OXoAiJQAAAZc"]
[Sun Apr 26 06:13:51.261219 2026] [autoindex:error] [pid 10315:tid 10318] [client 20.203.174.117:63305] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:13:57.467455 2026] [autoindex:error] [pid 10315:tid 10333] [client 20.203.174.117:63305] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:14:14.205674 2026] [proxy_fcgi:error] [pid 8491:tid 8506] [client 20.203.174.117:45400] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:14:29.279216 2026] [proxy_fcgi:error] [pid 10315:tid 10336] [client 20.203.174.117:63305] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:14:29.886744 2026] [:error] [pid 8390:tid 8472] [client 20.203.174.117:59422] [client 20.203.174.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae08xYGPtFK_i9p5yxQZgAAAAJU"]
[Sun Apr 26 06:14:30.778127 2026] [proxy_fcgi:error] [pid 31273:tid 31339] [client 20.203.174.117:62169] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:14:35.066628 2026] [autoindex:error] [pid 10315:tid 10335] [client 20.203.174.117:52488] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:14:35.334483 2026] [autoindex:error] [pid 41906:tid 41925] [client 20.203.174.117:62207] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:14:45.123471 2026] [proxy_fcgi:error] [pid 10315:tid 10317] [client 20.203.174.117:52488] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:14:51.005035 2026] [proxy_fcgi:error] [pid 41906:tid 41926] [client 20.203.174.117:62207] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:14:57.011964 2026] [:error] [pid 8491:tid 8503] [client 20.203.174.117:57393] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "ae084Sq7I7e6CJooQM2YCAAAAMQ"]
[Sun Apr 26 06:14:57.583158 2026] [:error] [pid 31273:tid 31360] [client 20.203.174.117:50408] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "ae084fhcNJEGrATcuEfRTQAAAVU"]
[Sun Apr 26 06:14:58.231810 2026] [:error] [pid 8390:tid 8473] [client 20.203.174.117:64967] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "ae084oGPtFK_i9p5yxQZmQAAAJY"]
[Sun Apr 26 06:14:58.847669 2026] [:error] [pid 10315:tid 10337] [client 20.203.174.117:58711] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bs1.php"] [unique_id "ae084qJIw2vjkleLIaCmJQAAARQ"]
[Sun Apr 26 06:14:59.523391 2026] [:error] [pid 31273:tid 31349] [client 20.203.174.117:50416] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae084_hcNJEGrATcuEfRVAAAAUo"]
[Sun Apr 26 06:15:00.489206 2026] [:error] [pid 41906:tid 41924] [client 20.203.174.117:58694] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae085D3-0A3lxw9OXoAjLQAAAZA"]
[Sun Apr 26 06:15:01.390563 2026] [:error] [pid 41906:tid 41925] [client 20.203.174.117:4941] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae085T3-0A3lxw9OXoAjNQAAAZE"]
[Sun Apr 26 06:15:02.157629 2026] [:error] [pid 41906:tid 41926] [client 20.203.174.117:50994] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae085j3-0A3lxw9OXoAjOQAAAZI"]
[Sun Apr 26 06:15:02.800860 2026] [:error] [pid 8491:tid 8508] [client 20.203.174.117:53526] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "ae085iq7I7e6CJooQM2YCgAAAMk"]
[Sun Apr 26 06:15:03.927273 2026] [:error] [pid 10315:tid 10317] [client 20.203.174.117:4953] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "ae0856JIw2vjkleLIaCmKAAAAQA"]
[Sun Apr 26 06:15:05.207393 2026] [:error] [pid 8385:tid 8443] [client 20.203.174.117:51717] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "ae086TOy7_J84Wx3-oxlIQAAAFM"]
[Sun Apr 26 06:15:05.781001 2026] [:error] [pid 8390:tid 8453] [client 20.203.174.117:62124] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axx.php"] [unique_id "ae086YGPtFK_i9p5yxQZpAAAAII"]
[Sun Apr 26 06:15:06.945449 2026] [:error] [pid 31273:tid 31358] [client 20.203.174.117:48006] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "ae086vhcNJEGrATcuEfRXAAAAVM"]
[Sun Apr 26 06:15:07.827919 2026] [:error] [pid 8390:tid 8456] [client 20.203.174.117:46178] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "ae0864GPtFK_i9p5yxQZqQAAAIU"]
[Sun Apr 26 06:15:08.480557 2026] [:error] [pid 31273:tid 31362] [client 20.203.174.117:46160] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "ae087PhcNJEGrATcuEfRYAAAAVc"]
[Sun Apr 26 06:15:09.017718 2026] [:error] [pid 41906:tid 41920] [client 20.203.174.117:46201] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfashell.php"] [unique_id "ae087T3-0A3lxw9OXoAjTQAAAYw"]
[Sun Apr 26 06:15:09.683505 2026] [:error] [pid 41906:tid 41925] [client 20.203.174.117:59057] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "ae087T3-0A3lxw9OXoAjUQAAAZE"]
[Sun Apr 26 06:15:10.586101 2026] [:error] [pid 41906:tid 41923] [client 20.203.174.117:50041] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "ae087j3-0A3lxw9OXoAjWQAAAY8"]
[Sun Apr 26 06:15:11.208740 2026] [:error] [pid 31273:tid 31335] [client 20.203.174.117:53468] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "ae087_hcNJEGrATcuEfRYwAAAUA"]
[Sun Apr 26 06:15:11.975442 2026] [:error] [pid 41906:tid 41912] [client 20.203.174.117:53781] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "ae087z3-0A3lxw9OXoAjZQAAAYQ"]
[Sun Apr 26 06:15:12.674428 2026] [:error] [pid 41906:tid 41924] [client 20.203.174.117:55797] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "ae088D3-0A3lxw9OXoAjagAAAZA"]
[Sun Apr 26 06:15:13.354067 2026] [:error] [pid 31273:tid 31356] [client 20.203.174.117:47814] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "ae088fhcNJEGrATcuEfRZwAAAVE"]
[Sun Apr 26 06:15:14.044886 2026] [:error] [pid 31273:tid 31350] [client 20.203.174.117:55761] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "ae088vhcNJEGrATcuEfRagAAAUs"]
[Sun Apr 26 06:15:14.772116 2026] [:error] [pid 41906:tid 41927] [client 20.203.174.117:47824] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/acp.php"] [unique_id "ae088j3-0A3lxw9OXoAjcQAAAZM"]
[Sun Apr 26 06:15:15.336583 2026] [:error] [pid 41906:tid 41913] [client 20.203.174.117:28267] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "ae088z3-0A3lxw9OXoAjdAAAAYU"]
[Sun Apr 26 06:15:16.127018 2026] [:error] [pid 8491:tid 8517] [client 20.203.174.117:47505] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "ae089Cq7I7e6CJooQM2YGAAAANI"]
[Sun Apr 26 06:15:17.073476 2026] [:error] [pid 8383:tid 8401] [client 20.203.174.117:47839] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "ae089dFa2S3EsATMdWPDMgAAAAQ"]
[Sun Apr 26 06:15:18.149062 2026] [:error] [pid 10315:tid 10341] [client 20.203.174.117:51669] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "ae089qJIw2vjkleLIaCmNgAAARg"]
[Sun Apr 26 06:15:18.958502 2026] [:error] [pid 10315:tid 10335] [client 20.203.174.117:4495] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "ae089qJIw2vjkleLIaCmOgAAARI"]
[Sun Apr 26 06:15:19.794377 2026] [:error] [pid 8390:tid 8468] [client 20.203.174.117:55764] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "ae0894GPtFK_i9p5yxQZsAAAAJE"]
[Sun Apr 26 06:15:20.623470 2026] [:error] [pid 10315:tid 10336] [client 20.203.174.117:53783] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "ae08-KJIw2vjkleLIaCmQAAAARM"]
[Sun Apr 26 06:15:21.263827 2026] [:error] [pid 31273:tid 31345] [client 20.203.174.117:4687] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/g.php"] [unique_id "ae08-fhcNJEGrATcuEfRjwAAAUc"]
[Sun Apr 26 06:15:21.943284 2026] [:error] [pid 41906:tid 41932] [client 20.203.174.117:47858] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "ae08-T3-0A3lxw9OXoAjigAAAZg"]
[Sun Apr 26 06:15:22.738348 2026] [:error] [pid 31273:tid 31336] [client 20.203.174.117:4712] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "ae08-vhcNJEGrATcuEfRpwAAAUE"]
[Sun Apr 26 06:15:23.506228 2026] [:error] [pid 8491:tid 8502] [client 20.203.174.117:53788] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "ae08-yq7I7e6CJooQM2YHQAAAMM"]
[Sun Apr 26 06:15:24.113776 2026] [:error] [pid 31273:tid 31341] [client 20.203.174.117:52647] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "ae08_PhcNJEGrATcuEfRtQAAAUQ"]
[Sun Apr 26 06:15:24.898389 2026] [:error] [pid 8390:tid 8463] [client 20.203.174.117:56361] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ae08_IGPtFK_i9p5yxQZ8QAAAIw"]
[Sun Apr 26 06:15:25.544870 2026] [:error] [pid 41906:tid 41931] [client 20.203.174.117:4485] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ae08_T3-0A3lxw9OXoAjkwAAAZc"]
[Sun Apr 26 06:15:26.263460 2026] [:error] [pid 10315:tid 10332] [client 20.203.174.117:53775] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ae08_qJIw2vjkleLIaCmaAAAAQ8"]
[Sun Apr 26 06:15:26.967771 2026] [:error] [pid 31273:tid 31356] [client 20.203.174.117:48678] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ae08_vhcNJEGrATcuEfR0AAAAVE"]
[Sun Apr 26 06:15:27.818197 2026] [:error] [pid 8491:tid 8519] [client 20.203.174.117:51660] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "ae08_yq7I7e6CJooQM2YHwAAANQ"]
[Sun Apr 26 06:15:28.546248 2026] [:error] [pid 10315:tid 10336] [client 20.203.174.117:51698] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "ae09AKJIw2vjkleLIaCmdgAAARM"]
[Sun Apr 26 06:15:29.421817 2026] [:error] [pid 41906:tid 41918] [client 20.203.174.117:47489] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "ae09AT3-0A3lxw9OXoAjnwAAAYo"]
[Sun Apr 26 06:15:30.079583 2026] [:error] [pid 41906:tid 41928] [client 20.203.174.117:4503] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ew.php"] [unique_id "ae09Aj3-0A3lxw9OXoAjogAAAZQ"]
[Sun Apr 26 06:15:30.702700 2026] [:error] [pid 41906:tid 41909] [client 20.203.174.117:51701] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "ae09Aj3-0A3lxw9OXoAjqQAAAYE"]
[Sun Apr 26 06:15:31.273153 2026] [:error] [pid 31273:tid 31336] [client 20.203.174.117:51702] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "ae09A_hcNJEGrATcuEfR-QAAAUE"]
[Sun Apr 26 06:15:31.817886 2026] [:error] [pid 8383:tid 8403] [client 20.203.174.117:28244] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "ae09A9Fa2S3EsATMdWPDOQAAAAY"]
[Sun Apr 26 06:15:32.341596 2026] [:error] [pid 8385:tid 8440] [client 20.203.174.117:50834] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file21.php"] [unique_id "ae09BDOy7_J84Wx3-oxlKQAAAFA"]
[Sun Apr 26 06:15:33.284338 2026] [:error] [pid 8385:tid 8427] [client 20.203.174.117:57315] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "ae09BTOy7_J84Wx3-oxlLAAAAEM"]
[Sun Apr 26 06:15:33.999382 2026] [:error] [pid 8390:tid 8454] [client 20.203.174.117:53776] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "ae09BYGPtFK_i9p5yxQaaAAAAIM"]
[Sun Apr 26 06:15:34.822876 2026] [:error] [pid 8390:tid 8473] [client 20.203.174.117:57305] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "ae09BoGPtFK_i9p5yxQaaQAAAJY"]
[Sun Apr 26 06:15:35.431947 2026] [:error] [pid 10315:tid 10325] [client 20.203.174.117:45368] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "ae09B6JIw2vjkleLIaCmggAAAQg"]
[Sun Apr 26 06:15:36.862908 2026] [:error] [pid 10315:tid 10322] [client 20.203.174.117:53762] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "ae09CKJIw2vjkleLIaCmhQAAAQU"]
[Sun Apr 26 06:15:38.119798 2026] [:error] [pid 8385:tid 8425] [client 20.203.174.117:47515] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "ae09CjOy7_J84Wx3-oxlMAAAAEE"]
[Sun Apr 26 06:15:38.722223 2026] [:error] [pid 41906:tid 41923] [client 20.203.174.117:52481] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "ae09Cj3-0A3lxw9OXoAj4QAAAY8"]
[Sun Apr 26 06:15:39.886281 2026] [:error] [pid 8491:tid 8515] [client 20.203.174.117:57342] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "ae09Cyq7I7e6CJooQM2YKgAAANA"]
[Sun Apr 26 06:15:40.559292 2026] [:error] [pid 8491:tid 8505] [client 20.203.174.117:50878] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ae09DCq7I7e6CJooQM2YKwAAAMY"]
[Sun Apr 26 06:15:41.453910 2026] [:error] [pid 8491:tid 8507] [client 20.203.174.117:51652] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ae09DSq7I7e6CJooQM2YLQAAAMg"]
[Sun Apr 26 06:15:42.318752 2026] [:error] [pid 41906:tid 41924] [client 20.203.174.117:57304] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ae09Dj3-0A3lxw9OXoAj7gAAAZA"]
[Sun Apr 26 06:15:42.944406 2026] [:error] [pid 31273:tid 31335] [client 20.203.174.117:4725] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "ae09DvhcNJEGrATcuEfSEAAAAUA"]
[Sun Apr 26 06:15:43.750328 2026] [:error] [pid 8385:tid 8424] [client 20.203.174.117:51672] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae09DzOy7_J84Wx3-oxlOgAAAEA"]
[Sun Apr 26 06:15:44.670120 2026] [:error] [pid 31273:tid 31345] [client 20.203.174.117:28236] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae09EPhcNJEGrATcuEfSFQAAAUc"]
[Sun Apr 26 06:15:45.347793 2026] [:error] [pid 31273:tid 31351] [client 20.203.174.117:4697] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae09EfhcNJEGrATcuEfSIwAAAUw"]
[Sun Apr 26 06:15:46.023897 2026] [:error] [pid 10315:tid 10318] [client 20.203.174.117:47499] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae09EqJIw2vjkleLIaCmiQAAAQE"]
[Sun Apr 26 06:15:46.902591 2026] [:error] [pid 10315:tid 10325] [client 20.203.174.117:4511] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ae09EqJIw2vjkleLIaCmjQAAAQg"]
[Sun Apr 26 06:15:47.698619 2026] [:error] [pid 8390:tid 8467] [client 20.203.174.117:45357] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ae09E4GPtFK_i9p5yxQaewAAAJA"]
[Sun Apr 26 06:15:48.493559 2026] [:error] [pid 31273:tid 31356] [client 20.203.174.117:53794] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ae09FPhcNJEGrATcuEfSLwAAAVE"]
[Sun Apr 26 06:15:49.409986 2026] [:error] [pid 31273:tid 31346] [client 20.203.174.117:51663] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ae09FfhcNJEGrATcuEfSNQAAAUg"]
[Sun Apr 26 06:40:06.047733 2026] [:error] [pid 10315:tid 10329] [client 20.104.49.17:7040] [client 20.104.49.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.49.17, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae1CxqJIw2vjkleLIaC3BgAAAQw"]
[Sun Apr 26 06:40:14.075603 2026] [autoindex:error] [pid 10315:tid 10341] [client 20.104.49.17:7040] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:40:14.325997 2026] [autoindex:error] [pid 10315:tid 10322] [client 20.104.49.17:7040] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:40:16.744881 2026] [autoindex:error] [pid 10315:tid 10339] [client 20.104.49.17:7040] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:40:25.293172 2026] [autoindex:error] [pid 10315:tid 10340] [client 20.104.49.17:7040] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:40:27.641435 2026] [:error] [pid 10315:tid 10335] [client 20.104.49.17:7040] [client 20.104.49.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ae1C26JIw2vjkleLIaC3VAAAARI"]
[Sun Apr 26 06:40:28.874894 2026] [proxy_fcgi:error] [pid 10315:tid 10330] [client 20.104.49.17:6963] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:40:29.741339 2026] [autoindex:error] [pid 31273:tid 31359] [client 20.104.49.17:7080] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:40:33.983902 2026] [autoindex:error] [pid 31273:tid 31339] [client 20.104.49.17:7080] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/et-cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:40:36.800940 2026] [:error] [pid 31273:tid 31350] [client 20.104.49.17:7080] [client 20.104.49.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ae1C5PhcNJEGrATcuEfZ3AAAAUs"]
[Sun Apr 26 06:40:37.679406 2026] [autoindex:error] [pid 31273:tid 31344] [client 20.104.49.17:58246] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:40:38.204677 2026] [proxy_fcgi:error] [pid 31273:tid 31345] [client 20.104.49.17:58246] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 06:40:39.066796 2026] [autoindex:error] [pid 10315:tid 10337] [client 20.104.49.17:7041] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 06:40:41.731728 2026] [:error] [pid 10315:tid 10331] [client 20.104.49.17:7041] [client 20.104.49.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ae1C6aJIw2vjkleLIaC4EQAAAQ4"]
[Sun Apr 26 06:40:42.625336 2026] [:error] [pid 8385:tid 8430] [client 20.104.49.17:6917] [client 20.104.49.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "ae1C6jOy7_J84Wx3-oxqwwAAAEY"]
[Sun Apr 26 06:40:43.490726 2026] [:error] [pid 8390:tid 8455] [client 20.104.49.17:58252] [client 20.104.49.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "ae1C64GPtFK_i9p5yxQhdQAAAIQ"]
[Sun Apr 26 06:40:44.352483 2026] [:error] [pid 8390:tid 8474] [client 20.104.49.17:6944] [client 20.104.49.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "ae1C7IGPtFK_i9p5yxQhdwAAAJc"]
[Sun Apr 26 06:40:45.233313 2026] [:error] [pid 31273:tid 31360] [client 20.104.49.17:7089] [client 20.104.49.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "ae1C7fhcNJEGrATcuEfZ9gAAAVU"]
[Sun Apr 26 08:26:00.740363 2026] [proxy_fcgi:error] [pid 22573:tid 22618] [client 20.207.194.44:16514] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 08:26:10.029617 2026] [proxy_fcgi:error] [pid 16515:tid 16523] [client 20.207.194.44:6465] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 08:26:18.457421 2026] [proxy_fcgi:error] [pid 13137:tid 13142] [client 20.207.194.44:6996] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 08:26:24.343277 2026] [:error] [pid 13137:tid 13146] [client 20.207.194.44:6647] [client 20.207.194.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1bsN0RB4J0o4h5neHv8QAAAgY"]
[Sun Apr 26 08:26:24.917934 2026] [:error] [pid 8390:tid 8467] [client 20.207.194.44:7016] [client 20.207.194.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1bsIGPtFK_i9p5yxQ-wAAAAJA"]
[Sun Apr 26 08:26:25.491493 2026] [:error] [pid 13137:tid 13144] [client 20.207.194.44:7015] [client 20.207.194.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1bsd0RB4J0o4h5neHv8gAAAgQ"]
[Sun Apr 26 08:26:26.076566 2026] [:error] [pid 22573:tid 22619] [client 20.207.194.44:7019] [client 20.207.194.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1bsnB3EmQlD4yKUt8ybgAAAYw"]
[Sun Apr 26 09:43:47.321591 2026] [proxy_fcgi:error] [pid 8491:tid 8517] [client 72.146.5.227:28379] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:43:53.897114 2026] [proxy_fcgi:error] [pid 8385:tid 8438] [client 72.146.5.227:52677] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:44:09.624533 2026] [proxy_fcgi:error] [pid 8491:tid 8508] [client 72.146.5.227:52675] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:44:33.443412 2026] [proxy_fcgi:error] [pid 13137:tid 13144] [client 72.146.5.227:62013] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:44:33.985155 2026] [proxy_fcgi:error] [pid 22572:tid 22584] [client 72.146.5.227:28375] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:44:45.204065 2026] [:error] [pid 16515:tid 16539] [client 72.146.5.227:62002] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1uDVtDrUmgHSvpuLzjfQAAAlU"]
[Sun Apr 26 09:44:45.755860 2026] [:error] [pid 22573:tid 22630] [client 72.146.5.227:23693] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1uDXB3EmQlD4yKUt9OOwAAAZc"]
[Sun Apr 26 09:44:46.571062 2026] [:error] [pid 16515:tid 16533] [client 72.146.5.227:61993] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1uDltDrUmgHSvpuLzjggAAAk8"]
[Sun Apr 26 09:44:47.395390 2026] [:error] [pid 16515:tid 16531] [client 72.146.5.227:61981] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1uD1tDrUmgHSvpuLzjhQAAAk0"]
[Sun Apr 26 09:44:48.072884 2026] [:error] [pid 16515:tid 16527] [client 72.146.5.227:28296] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/one.php"] [unique_id "ae1uEFtDrUmgHSvpuLzjhwAAAkk"]
[Sun Apr 26 09:44:48.865394 2026] [:error] [pid 8390:tid 8464] [client 72.146.5.227:41946] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/one.php"] [unique_id "ae1uEIGPtFK_i9p5yxRm5QAAAI0"]
[Sun Apr 26 09:44:49.930763 2026] [:error] [pid 8385:tid 8447] [client 72.146.5.227:32583] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/one.php"] [unique_id "ae1uETOy7_J84Wx3-oyF7gAAAFc"]
[Sun Apr 26 09:44:51.431028 2026] [:error] [pid 8390:tid 8467] [client 72.146.5.227:55506] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/one.php"] [unique_id "ae1uE4GPtFK_i9p5yxRm6gAAAJA"]
[Sun Apr 26 09:44:53.206065 2026] [:error] [pid 22573:tid 22624] [client 72.146.5.227:33258] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "ae1uFXB3EmQlD4yKUt9OTQAAAZE"]
[Sun Apr 26 09:44:54.257578 2026] [:error] [pid 22573:tid 22616] [client 72.146.5.227:55512] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "ae1uFnB3EmQlD4yKUt9OUQAAAYk"]
[Sun Apr 26 09:44:56.356152 2026] [:error] [pid 22572:tid 22596] [client 72.146.5.227:52688] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "ae1uGNXOViWCFU-pZzCYYAAAAVI"]
[Sun Apr 26 09:45:00.345505 2026] [:error] [pid 8390:tid 8463] [client 72.146.5.227:33272] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/006.php"] [unique_id "ae1uHIGPtFK_i9p5yxRm-wAAAIw"]
[Sun Apr 26 09:45:02.630154 2026] [:error] [pid 8385:tid 8448] [client 72.146.5.227:52700] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae1uHjOy7_J84Wx3-oyGBAAAAFg"]
[Sun Apr 26 09:45:05.715686 2026] [:error] [pid 8390:tid 8474] [client 72.146.5.227:18091] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae1uIYGPtFK_i9p5yxRnDgAAAJc"]
[Sun Apr 26 09:45:07.614540 2026] [:error] [pid 13197:tid 13233] [client 72.146.5.227:32621] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae1uI93kktFKdSxTrBuidAAAAsI"]
[Sun Apr 26 09:45:10.273659 2026] [:error] [pid 16574:tid 16625] [client 72.146.5.227:21771] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kikikoko.php"] [unique_id "ae1uJn5MsX8wRQr99nYJVwAAA08"]
[Sun Apr 26 09:45:13.529337 2026] [:error] [pid 8491:tid 8500] [client 72.146.5.227:18096] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae1uKSq7I7e6CJooQM29OQAAAME"]
[Sun Apr 26 09:45:18.455305 2026] [:error] [pid 8390:tid 8464] [client 72.146.5.227:52708] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae1uLoGPtFK_i9p5yxRnJgAAAI0"]
[Sun Apr 26 09:45:21.708085 2026] [:error] [pid 13197:tid 13254] [client 72.146.5.227:55511] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae1uMd3kktFKdSxTrBuifgAAAtY"]
[Sun Apr 26 09:45:24.111201 2026] [:error] [pid 13137:tid 13163] [client 72.146.5.227:21785] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "ae1uNN0RB4J0o4h5neEEkAAAAhY"]
[Sun Apr 26 09:45:26.638153 2026] [:error] [pid 16574:tid 16631] [client 72.146.5.227:32627] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ae1uNn5MsX8wRQr99nYJYwAAA1I"]
[Sun Apr 26 09:45:27.826784 2026] [:error] [pid 13137:tid 13144] [client 72.146.5.227:52719] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ae1uN90RB4J0o4h5neEElgAAAgQ"]
[Sun Apr 26 09:45:28.840489 2026] [:error] [pid 22572:tid 22588] [client 72.146.5.227:23728] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ae1uONXOViWCFU-pZzCYjAAAAUo"]
[Sun Apr 26 09:45:30.721342 2026] [:error] [pid 22573:tid 22623] [client 72.146.5.227:33264] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ae1uOnB3EmQlD4yKUt9OiAAAAZA"]
[Sun Apr 26 09:45:33.265268 2026] [:error] [pid 13137:tid 13146] [client 72.146.5.227:28360] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amxloxxr.php"] [unique_id "ae1uPd0RB4J0o4h5neEEnAAAAgY"]
[Sun Apr 26 09:45:34.786071 2026] [:error] [pid 8390:tid 8467] [client 72.146.5.227:33274] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amxloxxr.php"] [unique_id "ae1uPoGPtFK_i9p5yxRnQgAAAJA"]
[Sun Apr 26 09:45:35.857210 2026] [:error] [pid 8390:tid 8468] [client 72.146.5.227:55504] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amxloxxr.php"] [unique_id "ae1uP4GPtFK_i9p5yxRnRgAAAJE"]
[Sun Apr 26 09:45:36.890186 2026] [:error] [pid 22572:tid 22584] [client 72.146.5.227:41928] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amxloxxr.php"] [unique_id "ae1uQNXOViWCFU-pZzCYmgAAAUY"]
[Sun Apr 26 09:45:37.959789 2026] [:error] [pid 8390:tid 8451] [client 72.146.5.227:41957] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qhupyoon.php"] [unique_id "ae1uQYGPtFK_i9p5yxRnUQAAAIA"]
[Sun Apr 26 09:45:38.667277 2026] [:error] [pid 16515:tid 16532] [client 72.146.5.227:61977] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qhupyoon.php"] [unique_id "ae1uQltDrUmgHSvpuLzjmwAAAk4"]
[Sun Apr 26 09:45:39.718032 2026] [:error] [pid 8390:tid 8459] [client 72.146.5.227:41938] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qhupyoon.php"] [unique_id "ae1uQ4GPtFK_i9p5yxRnVwAAAIg"]
[Sun Apr 26 09:45:40.442664 2026] [:error] [pid 22572:tid 22599] [client 72.146.5.227:41977] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qhupyoon.php"] [unique_id "ae1uRNXOViWCFU-pZzCYnQAAAVU"]
[Sun Apr 26 09:45:41.451147 2026] [:error] [pid 22572:tid 22598] [client 72.146.5.227:55499] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "ae1uRdXOViWCFU-pZzCYpAAAAVQ"]
[Sun Apr 26 09:45:56.485569 2026] [proxy_fcgi:error] [pid 13137:tid 13157] [client 72.146.5.227:41947] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:46:11.422538 2026] [proxy_fcgi:error] [pid 8390:tid 8473] [client 72.146.5.227:28377] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:46:26.700977 2026] [proxy_fcgi:error] [pid 22573:tid 22611] [client 72.146.5.227:52713] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:46:27.248101 2026] [proxy_fcgi:error] [pid 13197:tid 13251] [client 72.146.5.227:63981] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:46:38.604115 2026] [:error] [pid 22573:tid 22630] [client 72.146.5.227:18109] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "ae1ufnB3EmQlD4yKUt9O-QAAAZc"]
[Sun Apr 26 09:46:39.820597 2026] [:error] [pid 13197:tid 13245] [client 72.146.5.227:18084] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "ae1uf93kktFKdSxTrBuixQAAAs0"]
[Sun Apr 26 09:46:43.363812 2026] [:error] [pid 8383:tid 8410] [client 72.146.5.227:28333] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "ae1ug9Fa2S3EsATMdWPbFQAAAA0"]
[Sun Apr 26 09:46:56.515962 2026] [:error] [pid 22573:tid 22616] [client 72.146.5.227:55541] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gelio1.php"] [unique_id "ae1ukHB3EmQlD4yKUt9PEAAAAYk"]
[Sun Apr 26 09:46:59.221992 2026] [:error] [pid 13197:tid 13252] [client 72.146.5.227:41926] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gelio1.php"] [unique_id "ae1uk93kktFKdSxTrBui0AAAAtQ"]
[Sun Apr 26 09:47:02.853424 2026] [:error] [pid 22573:tid 22609] [client 72.146.5.227:21765] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gelio1.php"] [unique_id "ae1ulnB3EmQlD4yKUt9PKwAAAYM"]
[Sun Apr 26 09:47:03.981806 2026] [:error] [pid 8491:tid 8521] [client 72.146.5.227:55524] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gelio1.php"] [unique_id "ae1ulyq7I7e6CJooQM29hgAAANY"]
[Sun Apr 26 09:47:07.467303 2026] [:error] [pid 13197:tid 13251] [client 72.146.5.227:61953] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "ae1um93kktFKdSxTrBui2QAAAtM"]
[Sun Apr 26 09:47:09.055046 2026] [:error] [pid 8383:tid 8400] [client 72.146.5.227:62012] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "ae1undFa2S3EsATMdWPbIAAAAAM"]
[Sun Apr 26 09:47:10.376041 2026] [:error] [pid 22572:tid 22598] [client 72.146.5.227:33229] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "ae1untXOViWCFU-pZzCY7AAAAVQ"]
[Sun Apr 26 09:47:11.178803 2026] [:error] [pid 8491:tid 8509] [client 72.146.5.227:41978] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "ae1unyq7I7e6CJooQM29iAAAAMo"]
[Sun Apr 26 09:47:11.960849 2026] [:error] [pid 16515:tid 16532] [client 72.146.5.227:32616] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "ae1un1tDrUmgHSvpuLzj5gAAAk4"]
[Sun Apr 26 09:47:12.522542 2026] [:error] [pid 22572:tid 22601] [client 72.146.5.227:18049] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "ae1uoNXOViWCFU-pZzCY8AAAAVc"]
[Sun Apr 26 09:47:13.260922 2026] [:error] [pid 22572:tid 22592] [client 72.146.5.227:31322] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "ae1uodXOViWCFU-pZzCY9gAAAU4"]
[Sun Apr 26 09:47:13.987769 2026] [:error] [pid 16515:tid 16525] [client 72.146.5.227:52683] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "ae1uoVtDrUmgHSvpuLzj5wAAAkc"]
[Sun Apr 26 09:47:15.029105 2026] [:error] [pid 8390:tid 8472] [client 72.146.5.227:21811] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axe.php"] [unique_id "ae1uo4GPtFK_i9p5yxRoCwAAAJU"]
[Sun Apr 26 09:47:16.907430 2026] [:error] [pid 16515:tid 16522] [client 72.146.5.227:35114] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axe.php"] [unique_id "ae1upFtDrUmgHSvpuLzj7AAAAkQ"]
[Sun Apr 26 09:47:18.321762 2026] [:error] [pid 8390:tid 8469] [client 72.146.5.227:61979] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axe.php"] [unique_id "ae1upoGPtFK_i9p5yxRoGwAAAJI"]
[Sun Apr 26 09:47:19.479217 2026] [:error] [pid 16515:tid 16535] [client 72.146.5.227:23709] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/axe.php"] [unique_id "ae1up1tDrUmgHSvpuLzj7QAAAlE"]
[Sun Apr 26 09:47:20.970559 2026] [:error] [pid 8390:tid 8473] [client 72.146.5.227:32617] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index0.php"] [unique_id "ae1uqIGPtFK_i9p5yxRoLAAAAJY"]
[Sun Apr 26 09:47:21.914051 2026] [:error] [pid 16574:tid 16625] [client 72.146.5.227:62010] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index0.php"] [unique_id "ae1uqX5MsX8wRQr99nYJlAAAA08"]
[Sun Apr 26 09:47:22.904316 2026] [:error] [pid 8390:tid 8452] [client 72.146.5.227:23702] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index0.php"] [unique_id "ae1uqoGPtFK_i9p5yxRoNQAAAIE"]
[Sun Apr 26 09:47:24.737188 2026] [:error] [pid 22572:tid 22602] [client 72.146.5.227:28400] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index0.php"] [unique_id "ae1urNXOViWCFU-pZzCZCwAAAVg"]
[Sun Apr 26 09:47:25.724905 2026] [:error] [pid 8390:tid 8454] [client 72.146.5.227:18097] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-01ul.php"] [unique_id "ae1urYGPtFK_i9p5yxRoRQAAAIM"]
[Sun Apr 26 09:47:27.203851 2026] [:error] [pid 8491:tid 8515] [client 72.146.5.227:52715] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-01ul.php"] [unique_id "ae1uryq7I7e6CJooQM29lgAAANA"]
[Sun Apr 26 09:47:28.218677 2026] [:error] [pid 8491:tid 8511] [client 72.146.5.227:28351] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-01ul.php"] [unique_id "ae1usCq7I7e6CJooQM29mQAAAMw"]
[Sun Apr 26 09:47:29.140216 2026] [:error] [pid 13137:tid 13162] [client 72.146.5.227:33222] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-01ul.php"] [unique_id "ae1usd0RB4J0o4h5neEFMgAAAhU"]
[Sun Apr 26 09:47:30.156488 2026] [:error] [pid 22572:tid 22598] [client 72.146.5.227:32634] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "ae1ustXOViWCFU-pZzCZGwAAAVQ"]
[Sun Apr 26 09:47:32.217517 2026] [:error] [pid 8390:tid 8463] [client 72.146.5.227:23706] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/e3.php"] [unique_id "ae1utIGPtFK_i9p5yxRoTwAAAIw"]
[Sun Apr 26 09:47:51.604501 2026] [proxy_fcgi:error] [pid 13137:tid 13149] [client 72.146.5.227:55498] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:48:04.651858 2026] [proxy_fcgi:error] [pid 16515:tid 16537] [client 72.146.5.227:28355] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:48:23.695914 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 72.146.5.227:23721] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:48:39.794122 2026] [proxy_fcgi:error] [pid 13197:tid 13239] [client 72.146.5.227:28290] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:48:40.346585 2026] [proxy_fcgi:error] [pid 8390:tid 8474] [client 72.146.5.227:61972] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:48:46.862284 2026] [:error] [pid 22572:tid 22585] [client 72.146.5.227:41936] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iov.php"] [unique_id "ae1u_tXOViWCFU-pZzCZZQAAAUc"]
[Sun Apr 26 09:48:47.898660 2026] [:error] [pid 8390:tid 8455] [client 72.146.5.227:21769] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iov.php"] [unique_id "ae1u_4GPtFK_i9p5yxRpSQAAAIQ"]
[Sun Apr 26 09:48:48.632513 2026] [:error] [pid 22572:tid 22591] [client 72.146.5.227:41933] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iov.php"] [unique_id "ae1vANXOViWCFU-pZzCZZgAAAU0"]
[Sun Apr 26 09:48:49.609190 2026] [:error] [pid 16515:tid 16528] [client 72.146.5.227:18093] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/iov.php"] [unique_id "ae1vAVtDrUmgHSvpuLzkIAAAAko"]
[Sun Apr 26 09:48:50.604700 2026] [:error] [pid 16515:tid 16531] [client 72.146.5.227:21789] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jodohghi.php"] [unique_id "ae1vAltDrUmgHSvpuLzkIQAAAk0"]
[Sun Apr 26 09:48:51.489268 2026] [:error] [pid 8385:tid 8429] [client 72.146.5.227:28411] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jodohghi.php"] [unique_id "ae1vAzOy7_J84Wx3-oyGpwAAAEU"]
[Sun Apr 26 09:48:52.030090 2026] [:error] [pid 8385:tid 8432] [client 72.146.5.227:28309] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jodohghi.php"] [unique_id "ae1vBDOy7_J84Wx3-oyGrAAAAEg"]
[Sun Apr 26 09:48:52.752690 2026] [:error] [pid 8390:tid 8467] [client 72.146.5.227:9474] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jodohghi.php"] [unique_id "ae1vBIGPtFK_i9p5yxRphQAAAJA"]
[Sun Apr 26 09:48:53.705882 2026] [:error] [pid 8390:tid 8452] [client 72.146.5.227:55503] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rendi59.php"] [unique_id "ae1vBYGPtFK_i9p5yxRpiAAAAIE"]
[Sun Apr 26 09:48:54.497266 2026] [:error] [pid 22572:tid 22590] [client 72.146.5.227:18069] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rendi59.php"] [unique_id "ae1vBtXOViWCFU-pZzCZbQAAAUw"]
[Sun Apr 26 09:48:55.497995 2026] [:error] [pid 8491:tid 8499] [client 72.146.5.227:52722] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rendi59.php"] [unique_id "ae1vByq7I7e6CJooQM29vgAAAMA"]
[Sun Apr 26 09:48:57.194004 2026] [:error] [pid 22573:tid 22626] [client 72.146.5.227:55550] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rendi59.php"] [unique_id "ae1vCXB3EmQlD4yKUt9P3AAAAZM"]
[Sun Apr 26 09:48:58.439432 2026] [:error] [pid 22573:tid 22619] [client 72.146.5.227:61981] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rivasqup.php"] [unique_id "ae1vCnB3EmQlD4yKUt9P4wAAAYw"]
[Sun Apr 26 09:49:02.483867 2026] [:error] [pid 16574:tid 16614] [client 72.146.5.227:28415] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rivasqup.php"] [unique_id "ae1vDn5MsX8wRQr99nYJuwAAA0o"]
[Sun Apr 26 09:49:03.969017 2026] [:error] [pid 8390:tid 8466] [client 72.146.5.227:28377] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rivasqup.php"] [unique_id "ae1vD4GPtFK_i9p5yxRplQAAAI8"]
[Sun Apr 26 09:49:04.675903 2026] [:error] [pid 8390:tid 8452] [client 72.146.5.227:33236] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rivasqup.php"] [unique_id "ae1vEIGPtFK_i9p5yxRpmQAAAIE"]
[Sun Apr 26 09:49:05.813479 2026] [:error] [pid 8390:tid 8458] [client 72.146.5.227:23719] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "ae1vEYGPtFK_i9p5yxRpoQAAAIc"]
[Sun Apr 26 09:49:06.616011 2026] [:error] [pid 8385:tid 8439] [client 72.146.5.227:18087] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "ae1vEjOy7_J84Wx3-oyG0gAAAE8"]
[Sun Apr 26 09:49:08.373485 2026] [:error] [pid 8390:tid 8460] [client 72.146.5.227:32605] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "ae1vFIGPtFK_i9p5yxRpuAAAAIk"]
[Sun Apr 26 09:49:11.137430 2026] [:error] [pid 8390:tid 8454] [client 72.146.5.227:21797] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mga.php"] [unique_id "ae1vF4GPtFK_i9p5yxRp2QAAAIM"]
[Sun Apr 26 09:49:13.131588 2026] [:error] [pid 16574:tid 16637] [client 72.146.5.227:18076] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dshtv.php"] [unique_id "ae1vGX5MsX8wRQr99nYJvgAAA1U"]
[Sun Apr 26 09:49:16.966695 2026] [:error] [pid 22573:tid 22620] [client 72.146.5.227:28407] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dshtv.php"] [unique_id "ae1vHHB3EmQlD4yKUt9P8AAAAY0"]
[Sun Apr 26 09:49:19.114140 2026] [:error] [pid 22572:tid 22588] [client 72.146.5.227:32586] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dshtv.php"] [unique_id "ae1vH9XOViWCFU-pZzCZhgAAAUo"]
[Sun Apr 26 09:49:21.161471 2026] [:error] [pid 8390:tid 8463] [client 72.146.5.227:23682] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dshtv.php"] [unique_id "ae1vIYGPtFK_i9p5yxRqBwAAAIw"]
[Sun Apr 26 09:49:22.756749 2026] [:error] [pid 16515:tid 16523] [client 72.146.5.227:55535] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sym403.php"] [unique_id "ae1vIltDrUmgHSvpuLzkLwAAAkU"]
[Sun Apr 26 09:49:23.552648 2026] [:error] [pid 13137:tid 13143] [client 72.146.5.227:28383] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sym403.php"] [unique_id "ae1vI90RB4J0o4h5neEFyAAAAgM"]
[Sun Apr 26 09:49:26.320794 2026] [:error] [pid 8390:tid 8470] [client 72.146.5.227:32582] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sym403.php"] [unique_id "ae1vJoGPtFK_i9p5yxRqEQAAAJM"]
[Sun Apr 26 09:49:27.112215 2026] [:error] [pid 8390:tid 8452] [client 72.146.5.227:20544] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sym403.php"] [unique_id "ae1vJ4GPtFK_i9p5yxRqGQAAAIE"]
[Sun Apr 26 09:49:28.111166 2026] [:error] [pid 8390:tid 8460] [client 72.146.5.227:21806] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/temp1.php"] [unique_id "ae1vKIGPtFK_i9p5yxRqJAAAAIk"]
[Sun Apr 26 09:49:28.779293 2026] [:error] [pid 16515:tid 16535] [client 72.146.5.227:23695] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/temp1.php"] [unique_id "ae1vKFtDrUmgHSvpuLzkNQAAAlE"]
[Sun Apr 26 09:49:30.119314 2026] [:error] [pid 13197:tid 13247] [client 72.146.5.227:32626] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/temp1.php"] [unique_id "ae1vKt3kktFKdSxTrBujIAAAAs8"]
[Sun Apr 26 09:49:30.913778 2026] [:error] [pid 8385:tid 8438] [client 72.146.5.227:23741] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/temp1.php"] [unique_id "ae1vKjOy7_J84Wx3-oyG4wAAAE4"]
[Sun Apr 26 09:49:33.422668 2026] [:error] [pid 8491:tid 8513] [client 72.146.5.227:32613] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae1vLSq7I7e6CJooQM294AAAAM4"]
[Sun Apr 26 09:49:34.280996 2026] [:error] [pid 13137:tid 13160] [client 72.146.5.227:52716] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae1vLt0RB4J0o4h5neEF0wAAAhM"]
[Sun Apr 26 09:49:35.096631 2026] [:error] [pid 13197:tid 13256] [client 72.146.5.227:63945] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae1vL93kktFKdSxTrBujJAAAAtg"]
[Sun Apr 26 09:49:36.385541 2026] [:error] [pid 13197:tid 13250] [client 72.146.5.227:28398] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ae1vMN3kktFKdSxTrBujKAAAAtI"]
[Sun Apr 26 09:49:39.506794 2026] [:error] [pid 16574:tid 16607] [client 72.146.5.227:33226] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ae1vM35MsX8wRQr99nYJxgAAA0M"]
[Sun Apr 26 09:49:40.277225 2026] [:error] [pid 22572:tid 22584] [client 72.146.5.227:28378] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ae1vNNXOViWCFU-pZzCZmwAAAUY"]
[Sun Apr 26 09:49:42.223670 2026] [:error] [pid 8390:tid 8467] [client 72.146.5.227:18079] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "ae1vNoGPtFK_i9p5yxRqNwAAAJA"]
[Sun Apr 26 09:49:59.001037 2026] [proxy_fcgi:error] [pid 13137:tid 13160] [client 72.146.5.227:52689] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:50:14.008719 2026] [proxy_fcgi:error] [pid 8390:tid 8469] [client 72.146.5.227:21790] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:50:32.839778 2026] [proxy_fcgi:error] [pid 22573:tid 22606] [client 72.146.5.227:28405] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:50:33.384858 2026] [proxy_fcgi:error] [pid 13137:tid 13153] [client 72.146.5.227:23705] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:50:43.488132 2026] [:error] [pid 8390:tid 8469] [client 72.146.5.227:41979] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ae1vc4GPtFK_i9p5yxRqwgAAAJI"]
[Sun Apr 26 09:50:45.706116 2026] [:error] [pid 8491:tid 8509] [client 72.146.5.227:21775] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ae1vdSq7I7e6CJooQM2-DAAAAMo"]
[Sun Apr 26 09:50:49.828334 2026] [:error] [pid 13197:tid 13250] [client 72.146.5.227:55530] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ae1ved3kktFKdSxTrBujSwAAAtI"]
[Sun Apr 26 09:50:52.364140 2026] [:error] [pid 8385:tid 8442] [client 72.146.5.227:32627] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ae1vfDOy7_J84Wx3-oyHKQAAAFI"]
[Sun Apr 26 09:50:53.533508 2026] [:error] [pid 8491:tid 8499] [client 72.146.5.227:28292] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filefuns.php"] [unique_id "ae1vfSq7I7e6CJooQM2-FwAAAMA"]
[Sun Apr 26 09:50:55.361149 2026] [:error] [pid 8390:tid 8458] [client 72.146.5.227:55500] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filefuns.php"] [unique_id "ae1vf4GPtFK_i9p5yxRq0gAAAIc"]
[Sun Apr 26 09:50:56.223660 2026] [:error] [pid 22573:tid 22607] [client 72.146.5.227:61977] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filefuns.php"] [unique_id "ae1vgHB3EmQlD4yKUt9Q8AAAAYE"]
[Sun Apr 26 09:50:57.841958 2026] [:error] [pid 22572:tid 22592] [client 72.146.5.227:32638] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/filefuns.php"] [unique_id "ae1vgdXOViWCFU-pZzCaGwAAAU4"]
[Sun Apr 26 09:50:58.877348 2026] [:error] [pid 22573:tid 22629] [client 72.146.5.227:28331] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "ae1vgnB3EmQlD4yKUt9Q9AAAAZY"]
[Sun Apr 26 09:51:00.332313 2026] [:error] [pid 8385:tid 8435] [client 72.146.5.227:28295] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "ae1vhDOy7_J84Wx3-oyHMwAAAEs"]
[Sun Apr 26 09:51:02.757741 2026] [:error] [pid 16515:tid 16519] [client 72.146.5.227:18050] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "ae1vhltDrUmgHSvpuLzkcgAAAkE"]
[Sun Apr 26 09:51:05.032890 2026] [:error] [pid 22573:tid 22626] [client 72.146.5.227:61993] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ay.php"] [unique_id "ae1viXB3EmQlD4yKUt9Q_QAAAZM"]
[Sun Apr 26 09:51:05.774278 2026] [:error] [pid 16574:tid 16616] [client 72.146.5.227:32588] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "ae1viX5MsX8wRQr99nYJ7AAAA0s"]
[Sun Apr 26 09:51:09.613844 2026] [:error] [pid 16515:tid 16531] [client 72.146.5.227:33275] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "ae1vjVtDrUmgHSvpuLzkdwAAAk0"]
[Sun Apr 26 09:51:14.920190 2026] [:error] [pid 13137:tid 13156] [client 72.146.5.227:41965] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "ae1vkt0RB4J0o4h5neEGPgAAAg8"]
[Sun Apr 26 09:51:18.693989 2026] [:error] [pid 8383:tid 8418] [client 72.146.5.227:41981] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "ae1vltFa2S3EsATMdWPb4wAAABU"]
[Sun Apr 26 09:51:20.719621 2026] [:error] [pid 8390:tid 8461] [client 72.146.5.227:55537] [client 72.146.5.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "ae1vmIGPtFK_i9p5yxRq9AAAAIo"]
[Sun Apr 26 09:51:22.583052 2026] [:error] [pid 8390:tid 8474] [client 72.146.5.227:28311] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "ae1vmoGPtFK_i9p5yxRq-AAAAJc"]
[Sun Apr 26 09:51:28.000166 2026] [:error] [pid 13137:tid 13140] [client 72.146.5.227:28333] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "ae1vn90RB4J0o4h5neEGRgAAAgA"]
[Sun Apr 26 09:51:30.412255 2026] [:error] [pid 8390:tid 8453] [client 72.146.5.227:33259] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "ae1vooGPtFK_i9p5yxRrCgAAAII"]
[Sun Apr 26 09:51:34.696316 2026] [:error] [pid 8390:tid 8464] [client 72.146.5.227:33243] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "ae1vpoGPtFK_i9p5yxRrEAAAAI0"]
[Sun Apr 26 09:51:36.120806 2026] [:error] [pid 13137:tid 13161] [client 72.146.5.227:41966] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "ae1vqN0RB4J0o4h5neEGTgAAAhQ"]
[Sun Apr 26 09:51:38.955586 2026] [:error] [pid 22572:tid 22598] [client 72.146.5.227:55526] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "ae1vqtXOViWCFU-pZzCaOQAAAVQ"]
[Sun Apr 26 09:51:40.519517 2026] [:error] [pid 22572:tid 22583] [client 72.146.5.227:61968] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "ae1vrNXOViWCFU-pZzCaQQAAAUU"]
[Sun Apr 26 09:51:58.753008 2026] [proxy_fcgi:error] [pid 22573:tid 22625] [client 72.146.5.227:28413] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:52:14.176315 2026] [proxy_fcgi:error] [pid 22572:tid 22584] [client 72.146.5.227:52677] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:52:30.397349 2026] [proxy_fcgi:error] [pid 22573:tid 22611] [client 72.146.5.227:18080] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:52:30.951162 2026] [proxy_fcgi:error] [pid 8390:tid 8453] [client 72.146.5.227:21805] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:52:48.041001 2026] [:error] [pid 22572:tid 22588] [client 72.146.5.227:30730] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cro.php"] [unique_id "ae1v8NXOViWCFU-pZzCamwAAAUo"]
[Sun Apr 26 09:52:48.945450 2026] [:error] [pid 8491:tid 8502] [client 72.146.5.227:41977] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cro.php"] [unique_id "ae1v8Cq7I7e6CJooQM2-MwAAAMM"]
[Sun Apr 26 09:52:52.395498 2026] [:error] [pid 8491:tid 8509] [client 72.146.5.227:61980] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cro.php"] [unique_id "ae1v9Cq7I7e6CJooQM2-NQAAAMo"]
[Sun Apr 26 09:52:54.582056 2026] [:error] [pid 8491:tid 8514] [client 72.146.5.227:30752] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cro.php"] [unique_id "ae1v9iq7I7e6CJooQM2-OQAAAM8"]
[Sun Apr 26 09:52:57.810864 2026] [:error] [pid 13197:tid 13240] [client 72.146.5.227:32628] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wwx.php"] [unique_id "ae1v-d3kktFKdSxTrBujZAAAAsk"]
[Sun Apr 26 09:53:01.048644 2026] [:error] [pid 8390:tid 8463] [client 72.146.5.227:28329] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wwx.php"] [unique_id "ae1v_YGPtFK_i9p5yxRrugAAAIw"]
[Sun Apr 26 09:53:06.730388 2026] [:error] [pid 8390:tid 8469] [client 72.146.5.227:23722] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wwx.php"] [unique_id "ae1wAoGPtFK_i9p5yxRrxgAAAJI"]
[Sun Apr 26 09:53:08.304836 2026] [:error] [pid 8390:tid 8459] [client 72.146.5.227:35112] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wwx.php"] [unique_id "ae1wBIGPtFK_i9p5yxRrzwAAAIg"]
[Sun Apr 26 09:53:09.217626 2026] [:error] [pid 22572:tid 22600] [client 72.146.5.227:28396] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "ae1wBdXOViWCFU-pZzCasgAAAVY"]
[Sun Apr 26 09:53:10.412806 2026] [:error] [pid 8390:tid 8452] [client 72.146.5.227:32630] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "ae1wBoGPtFK_i9p5yxRr5AAAAIE"]
[Sun Apr 26 09:53:11.260314 2026] [:error] [pid 8390:tid 8457] [client 72.146.5.227:55528] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "ae1wB4GPtFK_i9p5yxRr7AAAAIY"]
[Sun Apr 26 09:53:12.850464 2026] [:error] [pid 8385:tid 8438] [client 72.146.5.227:65212] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/trx24.php"] [unique_id "ae1wCDOy7_J84Wx3-oyHjAAAAE4"]
[Sun Apr 26 09:53:13.729022 2026] [:error] [pid 13197:tid 13231] [client 72.146.5.227:30766] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blox.php"] [unique_id "ae1wCd3kktFKdSxTrBujagAAAsA"]
[Sun Apr 26 09:53:16.514194 2026] [:error] [pid 8390:tid 8459] [client 72.146.5.227:32639] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blox.php"] [unique_id "ae1wDIGPtFK_i9p5yxRsCQAAAIg"]
[Sun Apr 26 09:53:19.398259 2026] [:error] [pid 8383:tid 8419] [client 72.146.5.227:41945] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blox.php"] [unique_id "ae1wD9Fa2S3EsATMdWPcBAAAABY"]
[Sun Apr 26 09:53:20.184021 2026] [:error] [pid 22573:tid 22630] [client 72.146.5.227:32587] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/blox.php"] [unique_id "ae1wEHB3EmQlD4yKUt9RnAAAAZc"]
[Sun Apr 26 09:53:25.252086 2026] [:error] [pid 13137:tid 13147] [client 72.146.5.227:62007] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berax.php"] [unique_id "ae1wFd0RB4J0o4h5neEG7gAAAgc"]
[Sun Apr 26 09:53:29.295933 2026] [:error] [pid 13137:tid 13165] [client 72.146.5.227:30735] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/berax.php"] [unique_id "ae1wGd0RB4J0o4h5neEG8gAAAhg"]
[Sun Apr 26 09:54:08.562520 2026] [proxy_fcgi:error] [pid 13197:tid 13234] [client 72.146.5.227:21803] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:54:23.363032 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 72.146.5.227:65202] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:54:23.942023 2026] [proxy_fcgi:error] [pid 8491:tid 8513] [client 72.146.5.227:28368] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:54:55.939108 2026] [proxy_fcgi:error] [pid 13137:tid 13164] [client 72.146.5.227:28371] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:55:04.631086 2026] [:error] [pid 8390:tid 8470] [client 72.146.5.227:61986] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/miso.php"] [unique_id "ae1weIGPtFK_i9p5yxRsYgAAAJM"]
[Sun Apr 26 09:55:05.863168 2026] [:error] [pid 13137:tid 13143] [client 72.146.5.227:28356] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/miso.php"] [unique_id "ae1wed0RB4J0o4h5neEHTwAAAgM"]
[Sun Apr 26 09:55:07.554401 2026] [:error] [pid 13197:tid 13241] [client 72.146.5.227:30747] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/miso.php"] [unique_id "ae1we93kktFKdSxTrBujkQAAAso"]
[Sun Apr 26 09:55:08.859023 2026] [:error] [pid 16515:tid 16534] [client 72.146.5.227:41983] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/miso.php"] [unique_id "ae1wfFtDrUmgHSvpuLzk6AAAAlA"]
[Sun Apr 26 09:55:10.420217 2026] [:error] [pid 22573:tid 22611] [client 72.146.5.227:21797] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "ae1wfnB3EmQlD4yKUt9SJAAAAYU"]
[Sun Apr 26 09:55:13.251172 2026] [:error] [pid 8385:tid 8429] [client 72.146.5.227:65174] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "ae1wgTOy7_J84Wx3-oyHzQAAAEU"]
[Sun Apr 26 09:55:14.137181 2026] [:error] [pid 13197:tid 13251] [client 72.146.5.227:18103] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "ae1wgt3kktFKdSxTrBujmQAAAtM"]
[Sun Apr 26 09:55:16.052177 2026] [:error] [pid 8385:tid 8424] [client 72.146.5.227:41946] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yuzuru1.php"] [unique_id "ae1whDOy7_J84Wx3-oyHzwAAAEA"]
[Sun Apr 26 09:55:17.484201 2026] [:error] [pid 8390:tid 8462] [client 72.146.5.227:21782] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/checkout.php"] [unique_id "ae1whYGPtFK_i9p5yxRscAAAAIs"]
[Sun Apr 26 09:55:19.465900 2026] [:error] [pid 8385:tid 8433] [client 72.146.5.227:23743] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/checkout.php"] [unique_id "ae1whzOy7_J84Wx3-oyH0wAAAEk"]
[Sun Apr 26 09:55:21.239387 2026] [:error] [pid 8491:tid 8507] [client 72.146.5.227:41942] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/checkout.php"] [unique_id "ae1wiSq7I7e6CJooQM2-cAAAAMg"]
[Sun Apr 26 09:55:22.433584 2026] [:error] [pid 8390:tid 8462] [client 72.146.5.227:30762] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/checkout.php"] [unique_id "ae1wioGPtFK_i9p5yxRsegAAAIs"]
[Sun Apr 26 09:55:23.176631 2026] [:error] [pid 8390:tid 8465] [client 72.146.5.227:55550] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fictioner.php"] [unique_id "ae1wi4GPtFK_i9p5yxRsfQAAAI4"]
[Sun Apr 26 09:55:23.997440 2026] [:error] [pid 8390:tid 8466] [client 72.146.5.227:21764] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fictioner.php"] [unique_id "ae1wi4GPtFK_i9p5yxRsgwAAAI8"]
[Sun Apr 26 09:55:24.843205 2026] [:error] [pid 8390:tid 8452] [client 72.146.5.227:41980] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fictioner.php"] [unique_id "ae1wjIGPtFK_i9p5yxRshwAAAIE"]
[Sun Apr 26 09:55:25.366312 2026] [:error] [pid 16515:tid 16534] [client 72.146.5.227:30757] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fictioner.php"] [unique_id "ae1wjVtDrUmgHSvpuLzk9wAAAlA"]
[Sun Apr 26 09:55:26.257053 2026] [:error] [pid 16574:tid 16635] [client 72.146.5.227:21814] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae1wjn5MsX8wRQr99nYKLgAAA1Q"]
[Sun Apr 26 09:55:27.808322 2026] [:error] [pid 8390:tid 8474] [client 72.146.5.227:32633] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae1wj4GPtFK_i9p5yxRslgAAAJc"]
[Sun Apr 26 09:55:28.810619 2026] [:error] [pid 8390:tid 8461] [client 72.146.5.227:18089] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae1wkIGPtFK_i9p5yxRsmQAAAIo"]
[Sun Apr 26 09:55:29.614977 2026] [:error] [pid 8390:tid 8455] [client 72.146.5.227:30741] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "ae1wkYGPtFK_i9p5yxRsngAAAIQ"]
[Sun Apr 26 09:55:35.483131 2026] [:error] [pid 22573:tid 22608] [client 72.146.5.227:65211] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxa.php"] [unique_id "ae1wl3B3EmQlD4yKUt9SMQAAAYI"]
[Sun Apr 26 09:55:37.972398 2026] [:error] [pid 8491:tid 8505] [client 72.146.5.227:28354] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxa.php"] [unique_id "ae1wmSq7I7e6CJooQM2-dgAAAMY"]
[Sun Apr 26 09:55:41.035359 2026] [:error] [pid 13197:tid 13239] [client 72.146.5.227:61973] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxa.php"] [unique_id "ae1wnd3kktFKdSxTrBujpwAAAsg"]
[Sun Apr 26 09:55:43.394173 2026] [:error] [pid 22573:tid 22626] [client 72.146.5.227:63952] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxa.php"] [unique_id "ae1wn3B3EmQlD4yKUt9SRQAAAZM"]
[Sun Apr 26 09:56:49.075498 2026] [proxy_fcgi:error] [pid 8491:tid 8503] [client 72.146.5.227:19402] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 09:57:05.977893 2026] [proxy_fcgi:error] [pid 22573:tid 22612] [client 72.146.5.227:28398] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 12:17:28.759566 2026] [:error] [pid 22572:tid 22589] [client 137.184.235.240:56886] [client 137.184.235.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "ae2R2NXOViWCFU-pZzDHXAAAAUs"]
[Sun Apr 26 13:58:18.802814 2026] [:error] [pid 8390:tid 8456] [client 64.50.191.32:54962] [client 64.50.191.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "ae2peoGPtFK_i9p5yxTcgQAAAIU"]
[Sun Apr 26 13:58:18.804402 2026] [:error] [pid 8390:tid 8459] [client 64.50.191.32:54946] [client 64.50.191.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php.bak"] [unique_id "ae2peoGPtFK_i9p5yxTchQAAAIg"]
[Sun Apr 26 13:58:18.804537 2026] [:error] [pid 8390:tid 8470] [client 64.50.191.32:54966] [client 64.50.191.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php"] [unique_id "ae2peoGPtFK_i9p5yxTchgAAAJM"]
[Sun Apr 26 13:58:18.805057 2026] [:error] [pid 8390:tid 8472] [client 64.50.191.32:54890] [client 64.50.191.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "ae2peoGPtFK_i9p5yxTciQAAAJU"]
[Sun Apr 26 13:58:18.965515 2026] [:error] [pid 13197:tid 13248] [client 64.50.191.32:54918] [client 64.50.191.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "ae2pet3kktFKdSxTrBu6DgAAAtA"]
[Sun Apr 26 13:58:18.966946 2026] [:error] [pid 8390:tid 8451] [client 64.50.191.32:54838] [client 64.50.191.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "ae2peoGPtFK_i9p5yxTciwAAAIA"]
[Sun Apr 26 13:58:18.968586 2026] [:error] [pid 8390:tid 8459] [client 64.50.191.32:54876] [client 64.50.191.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "ae2peoGPtFK_i9p5yxTcjAAAAIg"]
[Sun Apr 26 13:58:18.969248 2026] [:error] [pid 8390:tid 8470] [client 64.50.191.32:54900] [client 64.50.191.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "ae2peoGPtFK_i9p5yxTcjQAAAJM"]
[Sun Apr 26 13:58:24.229952 2026] [proxy_fcgi:error] [pid 8390:tid 8470] [client 64.50.191.32:54998] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 13:58:26.100205 2026] [proxy_fcgi:error] [pid 22572:tid 22593] [client 64.50.191.32:59214] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 16:10:43.719570 2026] [:error] [pid 22572:tid 22599] [client 5.255.125.79:51866] [client 5.255.125.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "ae3Ig9XOViWCFU-pZzD2gAAAAVU"]
[Sun Apr 26 16:10:43.720199 2026] [:error] [pid 8491:tid 8510] [client 5.255.125.79:51818] [client 5.255.125.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "ae3Igyq7I7e6CJooQM3nVwAAAMs"]
[Sun Apr 26 16:10:43.720596 2026] [:error] [pid 8491:tid 8513] [client 5.255.125.79:51924] [client 5.255.125.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "ae3Igyq7I7e6CJooQM3nWAAAAM4"]
[Sun Apr 26 16:10:43.721147 2026] [:error] [pid 8491:tid 8505] [client 5.255.125.79:51832] [client 5.255.125.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php"] [unique_id "ae3Igyq7I7e6CJooQM3nWQAAAMY"]
[Sun Apr 26 16:10:43.721388 2026] [:error] [pid 22572:tid 22578] [client 5.255.125.79:51852] [client 5.255.125.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "ae3Ig9XOViWCFU-pZzD2gQAAAUA"]
[Sun Apr 26 16:10:43.721841 2026] [:error] [pid 8390:tid 8467] [client 5.255.125.79:51824] [client 5.255.125.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "ae3Ig4GPtFK_i9p5yxQIJQAAAJA"]
[Sun Apr 26 16:10:43.721935 2026] [:error] [pid 8491:tid 8521] [client 5.255.125.79:51800] [client 5.255.125.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/wp-config.php.bak"] [unique_id "ae3Igyq7I7e6CJooQM3nWgAAANY"]
[Sun Apr 26 16:10:43.974317 2026] [:error] [pid 22572:tid 22579] [client 5.255.125.79:51922] [client 5.255.125.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "ae3Ig9XOViWCFU-pZzD2ggAAAUE"]
[Sun Apr 26 16:10:49.211559 2026] [proxy_fcgi:error] [pid 22572:tid 22598] [client 5.255.125.79:51906] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Sun Apr 26 16:10:51.124036 2026] [proxy_fcgi:error] [pid 8383:tid 8402] [client 5.255.125.79:35702] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 02:14:04.594422 2026] [proxy_fcgi:error] [pid 22573:tid 22609] [client 20.219.12.30:6339] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 02:14:10.869961 2026] [proxy_fcgi:error] [pid 8491:tid 8508] [client 20.219.12.30:6352] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 02:14:17.112369 2026] [proxy_fcgi:error] [pid 8491:tid 8521] [client 20.219.12.30:6382] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 02:14:20.366040 2026] [:error] [pid 13137:tid 13153] [client 20.219.12.30:6373] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "ae5V_N0RB4J0o4h5neHPKgAAAgw"]
[Mon Apr 27 02:14:20.916299 2026] [:error] [pid 8390:tid 8474] [client 20.219.12.30:6389] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "ae5V_IGPtFK_i9p5yxTJFAAAAJc"]
[Mon Apr 27 02:14:21.470557 2026] [:error] [pid 8383:tid 8418] [client 20.219.12.30:5727] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "ae5V_dFa2S3EsATMdWO36wAAABU"]
[Mon Apr 27 02:14:22.043311 2026] [:error] [pid 22573:tid 22628] [client 20.219.12.30:5710] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "ae5V_nB3EmQlD4yKUt8-bgAAAZU"]
[Mon Apr 27 07:57:29.555145 2026] [proxy_fcgi:error] [pid 50861:tid 50874] [client 20.215.250.178:63267] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 07:57:49.401574 2026] [proxy_fcgi:error] [pid 50862:tid 50896] [client 20.215.250.178:33107] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 07:57:50.011213 2026] [proxy_fcgi:error] [pid 50861:tid 50868] [client 20.215.250.178:63959] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 07:58:11.714681 2026] [proxy_fcgi:error] [pid 50861:tid 50866] [client 20.215.250.178:39732] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 07:58:19.980399 2026] [:error] [pid 50863:tid 50932] [client 20.215.250.178:39691] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "ae6mm3PaUAmshuFrBc8t4gAAAM0"]
[Mon Apr 27 07:58:21.485292 2026] [:error] [pid 50862:tid 50907] [client 20.215.250.178:9324] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "ae6mnUtKr9IOeW7InlXBqgAAAI8"]
[Mon Apr 27 07:58:22.813369 2026] [:error] [pid 50951:tid 50953] [client 20.215.250.178:28275] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "ae6mnl2pquA9BEfFXTgdkwAAAUA"]
[Mon Apr 27 07:58:25.122475 2026] [:error] [pid 50951:tid 50958] [client 20.215.250.178:28821] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7logs.php"] [unique_id "ae6moV2pquA9BEfFXTgdmAAAAUU"]
[Mon Apr 27 07:58:27.186041 2026] [:error] [pid 50951:tid 50964] [client 20.215.250.178:53089] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6mo12pquA9BEfFXTgdoQAAAUs"]
[Mon Apr 27 07:58:28.365793 2026] [:error] [pid 50951:tid 50975] [client 20.215.250.178:35140] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6mpF2pquA9BEfFXTgdpgAAAVY"]
[Mon Apr 27 07:58:30.979554 2026] [:error] [pid 50863:tid 50941] [client 20.215.250.178:26769] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6mpnPaUAmshuFrBc8t7wAAANY"]
[Mon Apr 27 07:58:33.584833 2026] [:error] [pid 50863:tid 50943] [client 20.215.250.178:35677] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6mqXPaUAmshuFrBc8t9QAAANg"]
[Mon Apr 27 07:58:35.542830 2026] [:error] [pid 50862:tid 50916] [client 20.215.250.178:35159] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ae6mq0tKr9IOeW7InlXBswAAAJg"]
[Mon Apr 27 07:58:37.956733 2026] [:error] [pid 50951:tid 50973] [client 20.215.250.178:39158] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ae6mrV2pquA9BEfFXTgdugAAAVQ"]
[Mon Apr 27 07:58:40.828379 2026] [:error] [pid 50863:tid 50929] [client 20.215.250.178:39686] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ae6msHPaUAmshuFrBc8uAgAAAMo"]
[Mon Apr 27 07:58:42.311703 2026] [:error] [pid 50951:tid 50969] [client 20.215.250.178:28260] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ae6msl2pquA9BEfFXTgdwgAAAVA"]
[Mon Apr 27 07:58:44.579051 2026] [:error] [pid 50863:tid 50927] [client 20.215.250.178:28272] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "ae6mtHPaUAmshuFrBc8uBwAAAMg"]
[Mon Apr 27 07:58:46.043568 2026] [:error] [pid 50863:tid 50936] [client 20.215.250.178:35142] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "ae6mtnPaUAmshuFrBc8uDAAAANE"]
[Mon Apr 27 07:58:48.351202 2026] [:error] [pid 50862:tid 50910] [client 20.215.250.178:39109] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "ae6muEtKr9IOeW7InlXBugAAAJI"]
[Mon Apr 27 07:58:50.038742 2026] [:error] [pid 50861:tid 50882] [client 20.215.250.178:45952] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ctex1.php"] [unique_id "ae6mumCmVQOCiCZfqR5hnwAAABE"]
[Mon Apr 27 07:58:51.828972 2026] [:error] [pid 50862:tid 50894] [client 20.215.250.178:53014] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "ae6mu0tKr9IOeW7InlXBxAAAAII"]
[Mon Apr 27 07:58:54.431335 2026] [:error] [pid 50862:tid 50916] [client 20.215.250.178:34147] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "ae6mvktKr9IOeW7InlXB0AAAAJg"]
[Mon Apr 27 07:59:01.025798 2026] [:error] [pid 50951:tid 50967] [client 20.215.250.178:53099] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "ae6mxV2pquA9BEfFXTgd1gAAAU4"]
[Mon Apr 27 07:59:02.632366 2026] [:error] [pid 50951:tid 50977] [client 20.215.250.178:32144] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lb.php"] [unique_id "ae6mxl2pquA9BEfFXTgd3wAAAVg"]
[Mon Apr 27 07:59:03.644216 2026] [:error] [pid 50951:tid 50973] [client 20.215.250.178:32135] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "ae6mx12pquA9BEfFXTgd4wAAAVQ"]
[Mon Apr 27 07:59:06.067206 2026] [:error] [pid 50863:tid 50939] [client 20.215.250.178:59412] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "ae6mynPaUAmshuFrBc8uIAAAANQ"]
[Mon Apr 27 07:59:09.482858 2026] [:error] [pid 50951:tid 50957] [client 20.215.250.178:29842] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "ae6mzV2pquA9BEfFXTgd-QAAAUQ"]
[Mon Apr 27 07:59:10.513363 2026] [:error] [pid 50863:tid 50919] [client 20.215.250.178:28785] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cilus.php"] [unique_id "ae6mznPaUAmshuFrBc8uJAAAAMA"]
[Mon Apr 27 07:59:13.121191 2026] [:error] [pid 50861:tid 50869] [client 20.215.250.178:58195] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "ae6m0WCmVQOCiCZfqR5hpwAAAAQ"]
[Mon Apr 27 07:59:15.186006 2026] [:error] [pid 50863:tid 50933] [client 20.215.250.178:47408] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mh.php"] [unique_id "ae6m03PaUAmshuFrBc8uMgAAAM4"]
[Mon Apr 27 07:59:46.739968 2026] [proxy_fcgi:error] [pid 50951:tid 50973] [client 20.215.250.178:30652] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:00:02.633202 2026] [proxy_fcgi:error] [pid 50951:tid 50960] [client 20.215.250.178:34740] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:00:03.275572 2026] [proxy_fcgi:error] [pid 50863:tid 50928] [client 20.215.250.178:30616] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:01:15.903766 2026] [:error] [pid 50862:tid 50893] [client 20.215.250.178:34641] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "ae6nS0tKr9IOeW7InlXDDQAAAIE"]
[Mon Apr 27 08:01:17.025825 2026] [:error] [pid 50862:tid 50911] [client 20.215.250.178:59503] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "ae6nTUtKr9IOeW7InlXDEQAAAJM"]
[Mon Apr 27 08:01:18.757264 2026] [:error] [pid 50951:tid 50955] [client 20.215.250.178:9749] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "ae6nTl2pquA9BEfFXTggQQAAAUI"]
[Mon Apr 27 08:01:19.807409 2026] [:error] [pid 50861:tid 50879] [client 20.215.250.178:9740] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/saorix1.php"] [unique_id "ae6nT2CmVQOCiCZfqR5iIwAAAA4"]
[Mon Apr 27 08:01:20.846800 2026] [:error] [pid 50861:tid 50878] [client 20.215.250.178:45958] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "ae6nUGCmVQOCiCZfqR5iJgAAAA0"]
[Mon Apr 27 08:01:26.480166 2026] [:error] [pid 50863:tid 50929] [client 20.215.250.178:46011] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "ae6nVnPaUAmshuFrBc8vnwAAAMo"]
[Mon Apr 27 08:01:31.644534 2026] [:error] [pid 50863:tid 50936] [client 20.215.250.178:9789] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byypas.php"] [unique_id "ae6nW3PaUAmshuFrBc8vpwAAANE"]
[Mon Apr 27 08:01:37.094508 2026] [:error] [pid 50863:tid 50943] [client 20.215.250.178:46006] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "ae6nYXPaUAmshuFrBc8vswAAANg"]
[Mon Apr 27 08:01:38.609149 2026] [:error] [pid 50861:tid 50885] [client 20.215.250.178:9741] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "ae6nYmCmVQOCiCZfqR5iQwAAABQ"]
[Mon Apr 27 08:01:40.801987 2026] [:error] [pid 50862:tid 50901] [client 20.215.250.178:9776] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "ae6nZEtKr9IOeW7InlXDOgAAAIk"]
[Mon Apr 27 08:01:42.998553 2026] [:error] [pid 50951:tid 50975] [client 20.215.250.178:9970] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rip.php"] [unique_id "ae6nZl2pquA9BEfFXTggkAAAAVY"]
[Mon Apr 27 08:01:45.596053 2026] [:error] [pid 50951:tid 50954] [client 20.215.250.178:29876] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "ae6naV2pquA9BEfFXTggnwAAAUE"]
[Mon Apr 27 08:01:49.779724 2026] [:error] [pid 50862:tid 50912] [client 20.215.250.178:9927] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "ae6nbUtKr9IOeW7InlXDVQAAAJQ"]
[Mon Apr 27 08:01:54.870821 2026] [:error] [pid 50863:tid 50931] [client 20.215.250.178:27270] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "ae6ncnPaUAmshuFrBc8v9QAAAMw"]
[Mon Apr 27 08:01:56.672954 2026] [:error] [pid 50863:tid 50932] [client 20.215.250.178:32181] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gptsh.php"] [unique_id "ae6ndHPaUAmshuFrBc8v_QAAAM0"]
[Mon Apr 27 08:01:59.755467 2026] [:error] [pid 50951:tid 50954] [client 20.215.250.178:45977] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ae6nd12pquA9BEfFXTggzAAAAUE"]
[Mon Apr 27 08:02:02.018516 2026] [:error] [pid 50862:tid 50901] [client 20.215.250.178:29826] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ae6nektKr9IOeW7InlXDiQAAAIk"]
[Mon Apr 27 08:02:04.937849 2026] [:error] [pid 50951:tid 50973] [client 20.215.250.178:31125] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ae6nfF2pquA9BEfFXTgg1wAAAVQ"]
[Mon Apr 27 08:02:09.310102 2026] [:error] [pid 50951:tid 50963] [client 20.215.250.178:45999] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "ae6ngV2pquA9BEfFXTgg4QAAAUo"]
[Mon Apr 27 08:02:35.107526 2026] [proxy_fcgi:error] [pid 50951:tid 50957] [client 20.215.250.178:59432] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:02:51.478599 2026] [proxy_fcgi:error] [pid 50951:tid 50958] [client 20.215.250.178:52680] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:02:58.144718 2026] [proxy_fcgi:error] [pid 50951:tid 50965] [client 20.215.250.178:36824] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:03:18.244638 2026] [proxy_fcgi:error] [pid 50863:tid 50920] [client 20.215.250.178:9517] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:03:31.402798 2026] [:error] [pid 50951:tid 50974] [client 20.215.250.178:39318] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ae6n012pquA9BEfFXTgh4gAAAVU"]
[Mon Apr 27 08:03:43.100704 2026] [:error] [pid 50862:tid 50912] [client 20.215.250.178:27798] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ae6n30tKr9IOeW7InlXEewAAAJQ"]
[Mon Apr 27 08:03:56.010879 2026] [:error] [pid 50951:tid 50964] [client 20.215.250.178:26759] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ae6n7F2pquA9BEfFXTgiewAAAUs"]
[Mon Apr 27 08:04:00.506204 2026] [:error] [pid 50863:tid 50942] [client 20.215.250.178:39143] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ae6n8HPaUAmshuFrBc8xSAAAANc"]
[Mon Apr 27 08:04:07.304030 2026] [:error] [pid 50862:tid 50892] [client 20.215.250.178:27799] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ae6n90tKr9IOeW7InlXEpwAAAIA"]
[Mon Apr 27 08:04:09.340022 2026] [:error] [pid 50863:tid 50938] [client 20.215.250.178:9541] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t00l.php"] [unique_id "ae6n-XPaUAmshuFrBc8xXgAAANM"]
[Mon Apr 27 08:04:14.618413 2026] [:error] [pid 50951:tid 50960] [client 20.215.250.178:27783] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp1.php"] [unique_id "ae6n_l2pquA9BEfFXTgixAAAAUc"]
[Mon Apr 27 08:04:18.495760 2026] [:error] [pid 50862:tid 50909] [client 20.215.250.178:39713] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp1.php"] [unique_id "ae6oAktKr9IOeW7InlXEvwAAAJE"]
[Mon Apr 27 08:04:20.116274 2026] [:error] [pid 50951:tid 50956] [client 20.215.250.178:9537] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp1.php"] [unique_id "ae6oBF2pquA9BEfFXTgjEgAAAUM"]
[Mon Apr 27 08:04:22.275381 2026] [:error] [pid 50862:tid 50905] [client 20.215.250.178:53089] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp1.php"] [unique_id "ae6oBktKr9IOeW7InlXEzgAAAI0"]
[Mon Apr 27 08:04:42.529571 2026] [proxy_fcgi:error] [pid 50951:tid 50963] [client 20.215.250.178:36607] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:04:58.359689 2026] [proxy_fcgi:error] [pid 50863:tid 50943] [client 20.215.250.178:58587] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:05:14.375586 2026] [proxy_fcgi:error] [pid 50863:tid 50923] [client 20.215.250.178:59953] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:05:15.016302 2026] [proxy_fcgi:error] [pid 50863:tid 50936] [client 20.215.250.178:45518] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:05:44.633265 2026] [:error] [pid 50862:tid 50904] [client 20.215.250.178:51529] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "ae6oWEtKr9IOeW7InlXFLQAAAIw"]
[Mon Apr 27 08:05:46.518913 2026] [:error] [pid 50951:tid 50962] [client 20.215.250.178:30536] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "ae6oWl2pquA9BEfFXTgkuwAAAUk"]
[Mon Apr 27 08:05:47.748945 2026] [:error] [pid 50951:tid 50971] [client 20.215.250.178:38384] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "ae6oW12pquA9BEfFXTgkvQAAAVI"]
[Mon Apr 27 08:05:50.483544 2026] [:error] [pid 50861:tid 50868] [client 20.215.250.178:27818] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "ae6oXmCmVQOCiCZfqR5kEQAAAAM"]
[Mon Apr 27 08:05:53.677929 2026] [:error] [pid 50951:tid 50975] [client 20.215.250.178:34171] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "ae6oYV2pquA9BEfFXTgk0gAAAVY"]
[Mon Apr 27 08:05:55.415570 2026] [:error] [pid 50863:tid 50933] [client 20.215.250.178:38775] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "ae6oY3PaUAmshuFrBc8yXwAAAM4"]
[Mon Apr 27 08:05:57.463118 2026] [:error] [pid 50863:tid 50931] [client 20.215.250.178:38388] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "ae6oZXPaUAmshuFrBc8yZgAAAMw"]
[Mon Apr 27 08:05:59.605998 2026] [:error] [pid 50951:tid 50958] [client 20.215.250.178:35683] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fsjzs.php"] [unique_id "ae6oZ12pquA9BEfFXTgk3AAAAUU"]
[Mon Apr 27 08:06:03.157988 2026] [:error] [pid 50862:tid 50905] [client 20.215.250.178:51554] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "ae6oa0tKr9IOeW7InlXFPQAAAI0"]
[Mon Apr 27 08:06:04.374327 2026] [:error] [pid 50863:tid 50929] [client 20.215.250.178:39160] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "ae6obHPaUAmshuFrBc8ydQAAAMo"]
[Mon Apr 27 08:06:05.423446 2026] [:error] [pid 50951:tid 50955] [client 20.215.250.178:51559] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "ae6obV2pquA9BEfFXTgk5wAAAUI"]
[Mon Apr 27 08:06:07.008336 2026] [:error] [pid 50862:tid 50909] [client 20.215.250.178:39122] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "ae6ob0tKr9IOeW7InlXFQwAAAJE"]
[Mon Apr 27 08:06:09.930283 2026] [:error] [pid 50863:tid 50921] [client 20.215.250.178:35681] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "ae6ocXPaUAmshuFrBc8yeAAAAMI"]
[Mon Apr 27 08:06:11.876067 2026] [:error] [pid 50862:tid 50899] [client 20.215.250.178:39357] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "ae6oc0tKr9IOeW7InlXFSgAAAIc"]
[Mon Apr 27 08:06:12.988324 2026] [:error] [pid 50863:tid 50924] [client 20.215.250.178:38755] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "ae6odHPaUAmshuFrBc8yfAAAAMU"]
[Mon Apr 27 08:06:15.684312 2026] [:error] [pid 50951:tid 50966] [client 20.215.250.178:45448] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "ae6od12pquA9BEfFXTgk9gAAAU0"]
[Mon Apr 27 08:06:18.823522 2026] [:error] [pid 50951:tid 50975] [client 20.215.250.178:27748] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "ae6oel2pquA9BEfFXTgk_AAAAVY"]
[Mon Apr 27 08:06:21.648037 2026] [:error] [pid 50951:tid 50961] [client 20.215.250.178:27807] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "ae6ofV2pquA9BEfFXTglAAAAAUg"]
[Mon Apr 27 08:06:24.660600 2026] [:error] [pid 50951:tid 50977] [client 20.215.250.178:27717] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "ae6ogF2pquA9BEfFXTglCgAAAVg"]
[Mon Apr 27 08:06:26.915204 2026] [:error] [pid 50862:tid 50892] [client 20.215.250.178:27825] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "ae6ogktKr9IOeW7InlXFYgAAAIA"]
[Mon Apr 27 08:06:27.804418 2026] [:error] [pid 50951:tid 50960] [client 20.215.250.178:27821] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "ae6og12pquA9BEfFXTglDwAAAUc"]
[Mon Apr 27 08:06:29.434426 2026] [:error] [pid 50951:tid 50955] [client 20.215.250.178:38753] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "ae6ohV2pquA9BEfFXTglEwAAAUI"]
[Mon Apr 27 08:06:32.909252 2026] [:error] [pid 50951:tid 50955] [client 20.215.250.178:34170] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "ae6oiF2pquA9BEfFXTglGwAAAUI"]
[Mon Apr 27 08:06:35.111443 2026] [:error] [pid 50863:tid 50922] [client 20.215.250.178:30538] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "ae6oi3PaUAmshuFrBc8ylgAAAMM"]
[Mon Apr 27 08:06:37.221157 2026] [:error] [pid 50863:tid 50920] [client 20.215.250.178:39126] [client 20.215.250.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ae6ojXPaUAmshuFrBc8ymgAAAME"]
[Mon Apr 27 08:07:08.846925 2026] [proxy_fcgi:error] [pid 50861:tid 50880] [client 20.215.250.178:51571] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 08:07:26.545148 2026] [proxy_fcgi:error] [pid 50951:tid 50966] [client 20.215.250.178:27712] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 12:46:51.871967 2026] [autoindex:error] [pid 62607:tid 62627] [client 20.219.12.30:5825] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 12:46:52.030261 2026] [proxy_fcgi:error] [pid 62607:tid 62612] [client 20.219.12.30:5825] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 12:46:54.935083 2026] [autoindex:error] [pid 62607:tid 62625] [client 20.219.12.30:5825] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 12:47:09.417336 2026] [proxy_fcgi:error] [pid 62607:tid 62625] [client 20.219.12.30:5825] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918'
[Mon Apr 27 12:47:20.490269 2026] [:error] [pid 62607:tid 62624] [client 20.219.12.30:6733] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "ae7qWIXk80_zcPo33vePLgAAAE8"]
[Mon Apr 27 12:47:21.080064 2026] [:error] [pid 62509:tid 62530] [client 20.219.12.30:6774] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "ae7qWdwtbauadMz70GF5QAAAAI4"]
[Mon Apr 27 12:47:21.669512 2026] [:error] [pid 62510:tid 62544] [client 20.219.12.30:5330] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "ae7qWYCpoM1jGOxUMpvrSAAAAMA"]
[Mon Apr 27 12:47:22.266752 2026] [:error] [pid 62510:tid 62565] [client 20.219.12.30:6731] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/NewFile.php"] [unique_id "ae7qWoCpoM1jGOxUMpvrSQAAANQ"]
[Mon Apr 27 13:51:54.597890 2026] [:error] [pid 62607:tid 62627] [client 34.55.86.97:49789] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75eoXk80_zcPo33vevqAAAAFI"], referer: http://makifim.com.au/media/system/js/core.js
[Mon Apr 27 17:33:22.848055 2026] [:error] [pid 61339:tid 61347] [client 143.44.165.169:65418] [client 143.44.165.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.169, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae8tYiHHVuv2RN6lIrg_JgAAAEY"]
[Mon Apr 27 17:33:40.116091 2026] [:error] [pid 41011:tid 41069] [client 143.44.165.169:1720] [client 143.44.165.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.44.165.169, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae8tdAsl5QfsSXIdF6E0OQAAAgA"], referer: https://makifim.com.au/wp-login.php?itsec-hb-token=mkfm-backend
[Mon Apr 27 17:33:44.656349 2026] [autoindex:error] [pid 61339:tid 61350] [client 103.4.122.14:45236] AH01276: Cannot serve directory /home/makifimc/public_html/indexing-test/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 20:30:23.193740 2026] [proxy_fcgi:error] [pid 13554:tid 13564] [client 212.102.51.114:60249] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://makifim.com.au/wp-admin/options-general.php
[Mon Apr 27 20:30:31.136385 2026] [proxy_fcgi:error] [pid 13465:tid 13504] [client 212.102.51.114:16843] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918', referer: https://makifim.com.au/wp-admin/options-general.php?page=updraftplus
[Mon Apr 27 20:30:37.009981 2026] [proxy_fcgi:error] [pid 13554:tid 13576] [client 212.102.51.114:15737] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://makifim.com.au/wp-admin/edit.php?post_type=page
[Mon Apr 27 20:30:45.635388 2026] [proxy_fcgi:error] [pid 13554:tid 13580] [client 212.102.51.114:9453] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918', referer: https://makifim.com.au/wp-admin/edit.php?post_type=page
[Mon Apr 27 20:30:51.461495 2026] [proxy_fcgi:error] [pid 13523:tid 13537] [client 212.102.51.114:44910] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://makifim.com.au/wp-admin/post.php?post=14&action=edit
[Mon Apr 27 20:31:17.036946 2026] [proxy_fcgi:error] [pid 13554:tid 13558] [client 212.102.51.114:60691] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918', referer: https://makifim.com.au/wp-admin/edit.php?post_type=page
[Mon Apr 27 20:31:39.293144 2026] [proxy_fcgi:error] [pid 13523:tid 13537] [client 212.102.51.114:43910] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://makifim.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 20:31:54.365085 2026] [proxy_fcgi:error] [pid 13464:tid 13469] [client 212.102.51.114:58994] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://makifim.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 20:32:04.594998 2026] [proxy_fcgi:error] [pid 13523:tid 13540] [client 212.102.51.114:5606] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://makifim.com.au/wp-admin/plugins.php
[Mon Apr 27 20:32:23.005720 2026] [proxy_fcgi:error] [pid 13523:tid 13535] [client 212.102.51.114:45210] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://makifim.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page
[Mon Apr 27 20:32:23.464426 2026] [proxy_fcgi:error] [pid 13523:tid 13547] [client 212.102.51.114:23896] AH01071: Got error 'PHP message: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 8388608 bytes) in /home/makifimc/public_html/wp-content/wflogs/rules.php on line 5918', referer: https://makifim.com.au/wp-admin/admin.php?page=simple_history_admin_menu_page
[Mon Apr 27 20:33:07.684756 2026] [proxy_fcgi:error] [pid 13464:tid 13486] [client 212.102.51.114:14556] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140; PHP message: PHP Warning:  Undefined array key "wp_update_data" in /home/makifimc/public_html/wp-content/plugins/ithemes-security-pro/lib/updater/updates.php on line 140', referer: https://makifim.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 20:34:55.745104 2026] [:error] [pid 13523:tid 13544] [client 212.102.51.114:52227] [client 212.102.51.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.102.51.114, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae9X7-eav51IXKv1ebHoTQAAAJM"], referer: https://makifim.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 20:34:57.187220 2026] [:error] [pid 13523:tid 13533] [client 212.102.51.114:54816] [client 212.102.51.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.102.51.114, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae9X8eeav51IXKv1ebHoTwAAAIg"], referer: https://makifim.com.au/wp-admin/plugins.php?plugin_status=all&paged=1&s
[Mon Apr 27 21:02:41.847402 2026] [:error] [pid 13465:tid 13515] [client 212.102.51.114:25878] [client 212.102.51.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.102.51.114, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae9ecf19I-6GBJQxn_ivoAAAAFQ"]
[Mon Apr 27 21:02:46.377533 2026] [:error] [pid 13554:tid 13572] [client 212.102.51.114:47007] [client 212.102.51.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.102.51.114, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae9ednJx87Dl-xMmL91_iwAAANA"], referer: https://makifim.com.au/wp-login.php?redirect_to=https%3A%2F%2Fmakifim.com.au%2Fwp-admin%2F&reauth=1
[Mon Apr 27 21:15:10.602921 2026] [:error] [pid 13554:tid 13575] [client 212.102.51.114:17867] [client 212.102.51.114] ModSecurity: Warning. String match "get" at REQUEST_METHOD. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "4595"] [id "222212"] [rev "2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "makifim.com.au"] [uri "/wp-admin/edit-comments.php"] [unique_id "ae9hXnJx87Dl-xMmL92GtQAAANM"], referer: https://makifim.com.au/wp-admin/post.php?post=14&action=edit
[Tue Apr 28 00:55:43.977266 2026] [:error] [pid 13554:tid 13573] [client 74.7.242.136:60824] [client 74.7.242.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.136, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ae-VD3Jx87Dl-xMmL93RDAAAANE"]
[Tue Apr 28 01:28:10.008567 2026] [:error] [pid 13465:tid 13509] [client 74.7.227.163:46754] [client 74.7.227.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.7.227.163, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae-cqv19I-6GBJQxn_jp9wAAAE4"], referer: https://makifim.com.au/wp-admin/admin.php?page=twbbwg_photo-gallery
[Tue Apr 28 01:28:50.385378 2026] [autoindex:error] [pid 13465:tid 13497] [client 74.7.227.163:56144] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors
[Tue Apr 28 01:29:11.140575 2026] [autoindex:error] [pid 42612:tid 42770] [client 74.7.227.163:40564] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/images
[Tue Apr 28 01:29:32.243429 2026] [autoindex:error] [pid 48914:tid 48935] [client 74.7.227.163:53002] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/plugins/photo-gallery/booster
[Tue Apr 28 01:29:53.258068 2026] [autoindex:error] [pid 13554:tid 13575] [client 74.7.227.163:46242] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/images
[Tue Apr 28 01:37:59.187999 2026] [:error] [pid 13464:tid 13484] [client 74.7.227.163:46864] [client 74.7.227.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.7.227.163, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae-e92IEa0q6oQ95zvFOVwAAAdA"], referer: https://makifim.com.au/wp-admin/admin.php?page=twbbwg_photo-gallery
[Tue Apr 28 01:41:31.584753 2026] [:error] [pid 13554:tid 13569] [client 74.7.227.163:35778] [client 74.7.227.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.7.227.163, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae-fy3Jx87Dl-xMmL93eAgAAAM0"], referer: https://makifim.com.au/wp-login.php?action=lostpassword
[Tue Apr 28 01:47:13.639977 2026] [:error] [pid 36747:tid 36757] [client 74.7.227.163:51252] [client 74.7.227.163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ae-hIc9QpT00aPhkIcdimgAAAYg"], referer: https://makifim.com.au/author/gbadmin/
[Tue Apr 28 06:10:52.861556 2026] [:error] [pid 14578:tid 14614] [client 103.216.221.90:14431] [client 103.216.221.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.221.90, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae_e7Ongo3AwIJgfSHEDiQAAAEE"], referer: https://makifim.com.au/wp-admin/users.php
[Tue Apr 28 06:10:54.111985 2026] [:error] [pid 14578:tid 14636] [client 103.216.221.90:42967] [client 103.216.221.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.221.90, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae_e7ungo3AwIJgfSHEDjAAAAFc"], referer: https://makifim.com.au/wp-admin/users.php
[Tue Apr 28 07:08:07.224867 2026] [:error] [pid 28455:tid 28467] [client 103.216.221.90:12299] [client 103.216.221.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.221.90, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ae_sVwTrPhRMe37SCBoVYwAAAMk"]
[Tue Apr 28 11:10:56.989419 2026] [:error] [pid 2741:tid 2769] [client 20.203.150.235:17205] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afAlQPp92FeOz1h6ILw_zgAAAVc"]
[Tue Apr 28 11:10:57.976468 2026] [:error] [pid 2741:tid 2770] [client 20.203.150.235:16451] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afAlQfp92FeOz1h6ILw_1AAAAVg"]
[Tue Apr 28 11:10:58.993120 2026] [:error] [pid 2741:tid 2752] [client 20.203.150.235:17214] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afAlQvp92FeOz1h6ILw_2QAAAUY"]
[Tue Apr 28 11:10:59.962127 2026] [:error] [pid 33776:tid 33829] [client 20.203.150.235:12300] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afAlQ1-bEJ2CKP3iKADgVAAAAFU"]
[Tue Apr 28 21:12:27.884954 2026] [:error] [pid 2741:tid 2768] [client 51.13.187.146:39941] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/crgio.php"] [unique_id "afCyO_p92FeOz1h6ILwAswAAAVY"]
[Tue Apr 28 21:12:29.620355 2026] [:error] [pid 33775:tid 33799] [client 51.13.187.146:38106] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/crgio.php"] [unique_id "afCyPZsYOcoQrq88YbUzMAAAANQ"]
[Tue Apr 28 21:12:30.549742 2026] [:error] [pid 50889:tid 50906] [client 51.13.187.146:38129] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/crgio.php"] [unique_id "afCyPozszBr00txEzGhRAAAAAA4"]
[Tue Apr 28 21:12:31.976901 2026] [:error] [pid 33776:tid 33829] [client 51.13.187.146:33185] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/crgio.php"] [unique_id "afCyP1-bEJ2CKP3iKAA6VgAAAFU"]
[Tue Apr 28 21:12:33.087772 2026] [:error] [pid 33775:tid 33801] [client 51.13.187.146:28180] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geforce.php"] [unique_id "afCyQZsYOcoQrq88YbUzNAAAANY"]
[Tue Apr 28 21:12:34.417968 2026] [:error] [pid 33777:tid 33852] [client 51.13.187.146:42496] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geforce.php"] [unique_id "afCyQrXUCFWqmordGGLzxQAAARE"]
[Tue Apr 28 21:12:35.202934 2026] [:error] [pid 2741:tid 2746] [client 51.13.187.146:44953] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geforce.php"] [unique_id "afCyQ_p92FeOz1h6ILwAvQAAAUA"]
[Tue Apr 28 21:12:36.634347 2026] [:error] [pid 33777:tid 33844] [client 51.13.187.146:33821] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/geforce.php"] [unique_id "afCyRLXUCFWqmordGGLzzgAAAQk"]
[Tue Apr 28 21:12:38.405626 2026] [:error] [pid 33777:tid 33859] [client 51.13.187.146:38857] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "afCyRrXUCFWqmordGGLz2AAAARg"]
[Tue Apr 28 21:12:39.171373 2026] [:error] [pid 33777:tid 33840] [client 51.13.187.146:25476] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "afCyR7XUCFWqmordGGLz2gAAAQU"]
[Tue Apr 28 21:12:39.845698 2026] [:error] [pid 33776:tid 33827] [client 51.13.187.146:41879] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "afCyR1-bEJ2CKP3iKAA6XQAAAFM"]
[Tue Apr 28 21:12:40.853278 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:36734] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-load.php"] [unique_id "afCySLXUCFWqmordGGLz4gAAAQw"]
[Tue Apr 28 21:12:41.787034 2026] [:error] [pid 33777:tid 33839] [client 51.13.187.146:38884] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/77.php"] [unique_id "afCySbXUCFWqmordGGLz6AAAAQQ"]
[Tue Apr 28 21:12:43.247791 2026] [:error] [pid 33777:tid 33844] [client 51.13.187.146:27619] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/77.php"] [unique_id "afCyS7XUCFWqmordGGLz7gAAAQk"]
[Tue Apr 28 21:12:44.492731 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:47794] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/77.php"] [unique_id "afCyTLXUCFWqmordGGLz8wAAAQw"]
[Tue Apr 28 21:12:46.135671 2026] [:error] [pid 50889:tid 50905] [client 51.13.187.146:33806] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/77.php"] [unique_id "afCyTozszBr00txEzGhRDQAAAA0"]
[Tue Apr 28 21:12:47.983124 2026] [:error] [pid 33864:tid 33871] [client 51.13.187.146:37343] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.sghb.php"] [unique_id "afCyTzXchLGZ4QggCsko9gAAAIU"]
[Tue Apr 28 21:12:49.635468 2026] [:error] [pid 33777:tid 33857] [client 51.13.187.146:8858] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.sghb.php"] [unique_id "afCyUbXUCFWqmordGGLz_wAAARY"]
[Tue Apr 28 21:12:52.265841 2026] [:error] [pid 33864:tid 33872] [client 51.13.187.146:38848] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.sghb.php"] [unique_id "afCyVDXchLGZ4QggCsko-QAAAIY"]
[Tue Apr 28 21:12:53.171505 2026] [:error] [pid 33864:tid 33866] [client 51.13.187.146:39903] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.sghb.php"] [unique_id "afCyVTXchLGZ4QggCsko-wAAAIA"]
[Tue Apr 28 21:12:54.242876 2026] [:error] [pid 2741:tid 2766] [client 51.13.187.146:48873] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "afCyVvp92FeOz1h6ILwA0QAAAVQ"]
[Tue Apr 28 21:12:55.613468 2026] [:error] [pid 33776:tid 33816] [client 51.13.187.146:37325] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "afCyV1-bEJ2CKP3iKAA6XgAAAEg"]
[Tue Apr 28 21:12:56.472280 2026] [:error] [pid 33864:tid 33867] [client 51.13.187.146:47756] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "afCyWDXchLGZ4QggCskpBAAAAIE"]
[Tue Apr 28 21:12:57.352250 2026] [:error] [pid 33776:tid 33832] [client 51.13.187.146:46392] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "afCyWV-bEJ2CKP3iKAA6YgAAAFg"]
[Tue Apr 28 21:12:58.210937 2026] [:error] [pid 33777:tid 33838] [client 51.13.187.146:29395] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/solo1.php"] [unique_id "afCyWrXUCFWqmordGGL0BwAAAQM"]
[Tue Apr 28 21:12:59.148088 2026] [:error] [pid 50889:tid 50915] [client 51.13.187.146:46351] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/solo1.php"] [unique_id "afCyW4zszBr00txEzGhRGwAAABc"]
[Tue Apr 28 21:13:00.222252 2026] [:error] [pid 50889:tid 50897] [client 51.13.187.146:48296] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/solo1.php"] [unique_id "afCyXIzszBr00txEzGhRHgAAAAU"]
[Tue Apr 28 21:13:01.811295 2026] [:error] [pid 33777:tid 33855] [client 51.13.187.146:48306] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/solo1.php"] [unique_id "afCyXbXUCFWqmordGGL0DAAAARQ"]
[Tue Apr 28 21:13:02.970637 2026] [:error] [pid 50889:tid 50908] [client 51.13.187.146:48922] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "afCyXozszBr00txEzGhRIQAAABA"]
[Tue Apr 28 21:13:04.925135 2026] [:error] [pid 33777:tid 33845] [client 51.13.187.146:43325] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "afCyYLXUCFWqmordGGL0FQAAAQo"]
[Tue Apr 28 21:13:07.355492 2026] [:error] [pid 33776:tid 33810] [client 51.13.187.146:23354] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "afCyY1-bEJ2CKP3iKAA6aQAAAEI"]
[Tue Apr 28 21:13:10.007552 2026] [:error] [pid 50889:tid 50911] [client 51.13.187.146:41816] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "afCyZozszBr00txEzGhRKwAAABM"]
[Tue Apr 28 21:13:12.741410 2026] [:error] [pid 33775:tid 33790] [client 51.13.187.146:36760] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "afCyaJsYOcoQrq88YbUzQQAAAMs"]
[Tue Apr 28 21:13:17.598613 2026] [:error] [pid 33777:tid 33842] [client 51.13.187.146:8607] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "afCybbXUCFWqmordGGL0IwAAAQc"]
[Tue Apr 28 21:13:20.227596 2026] [:error] [pid 33777:tid 33856] [client 51.13.187.146:8306] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "afCycLXUCFWqmordGGL0LgAAARU"]
[Tue Apr 28 21:13:22.401707 2026] [:error] [pid 50889:tid 50911] [client 51.13.187.146:23170] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "afCycozszBr00txEzGhRNwAAABM"]
[Tue Apr 28 21:13:30.118807 2026] [autoindex:error] [pid 33775:tid 33781] [client 51.13.187.146:35070] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 21:13:33.365452 2026] [autoindex:error] [pid 33775:tid 33783] [client 51.13.187.146:35070] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 21:13:48.107463 2026] [autoindex:error] [pid 33775:tid 33779] [client 51.13.187.146:35070] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/twentytwentyfive/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 21:13:48.402661 2026] [autoindex:error] [pid 33775:tid 33791] [client 51.13.187.146:35070] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 21:13:52.235562 2026] [:error] [pid 33775:tid 33792] [client 51.13.187.146:35070] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "afCykJsYOcoQrq88YbUzZgAAAM0"]
[Tue Apr 28 21:13:54.016247 2026] [:error] [pid 33777:tid 33849] [client 51.13.187.146:35070] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "afCykrXUCFWqmordGGL0aAAAAQ4"]
[Tue Apr 28 21:13:55.149603 2026] [:error] [pid 2741:tid 2769] [client 51.13.187.146:8589] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "afCyk_p92FeOz1h6ILwA8gAAAVc"]
[Tue Apr 28 21:13:55.961364 2026] [:error] [pid 33777:tid 33845] [client 51.13.187.146:63376] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "afCyk7XUCFWqmordGGL0awAAAQo"]
[Tue Apr 28 21:13:57.719670 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:23453] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "afCylbXUCFWqmordGGL0cAAAARM"]
[Tue Apr 28 21:14:00.635415 2026] [:error] [pid 33777:tid 33843] [client 51.13.187.146:23480] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "afCymLXUCFWqmordGGL0dAAAAQg"]
[Tue Apr 28 21:14:02.536491 2026] [:error] [pid 33777:tid 33839] [client 51.13.187.146:45552] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "afCymrXUCFWqmordGGL0egAAAQQ"]
[Tue Apr 28 21:14:05.043414 2026] [:error] [pid 33777:tid 33843] [client 51.13.187.146:23230] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ref.php"] [unique_id "afCynbXUCFWqmordGGL0ggAAAQg"]
[Tue Apr 28 21:14:08.753537 2026] [:error] [pid 33777:tid 33842] [client 51.13.187.146:23178] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afCyoLXUCFWqmordGGL0hwAAAQc"]
[Tue Apr 28 21:14:09.423301 2026] [:error] [pid 33777:tid 33858] [client 51.13.187.146:9038] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afCyobXUCFWqmordGGL0iAAAARc"]
[Tue Apr 28 21:14:10.118127 2026] [:error] [pid 50889:tid 50915] [client 51.13.187.146:8578] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afCyoozszBr00txEzGhRSQAAABc"]
[Tue Apr 28 21:14:11.155433 2026] [:error] [pid 33864:tid 33869] [client 51.13.187.146:23470] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afCyozXchLGZ4QggCskpLQAAAIM"]
[Tue Apr 28 21:14:12.137183 2026] [:error] [pid 33864:tid 33871] [client 51.13.187.146:35055] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "afCypDXchLGZ4QggCskpLgAAAIU"]
[Tue Apr 28 21:14:13.399081 2026] [:error] [pid 50889:tid 50898] [client 51.13.187.146:62413] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "afCypYzszBr00txEzGhRTwAAAAY"]
[Tue Apr 28 21:14:14.859480 2026] [:error] [pid 2741:tid 2764] [client 51.13.187.146:63367] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "afCypvp92FeOz1h6ILwA-QAAAVI"]
[Tue Apr 28 21:14:15.665965 2026] [:error] [pid 33777:tid 33855] [client 51.13.187.146:23475] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminer.php"] [unique_id "afCyp7XUCFWqmordGGL0kwAAARQ"]
[Tue Apr 28 21:14:17.313098 2026] [:error] [pid 33775:tid 33790] [client 51.13.187.146:9144] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "afCyqZsYOcoQrq88YbUzbgAAAMs"]
[Tue Apr 28 21:14:18.733019 2026] [:error] [pid 50889:tid 50901] [client 51.13.187.146:23181] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "afCyqozszBr00txEzGhRWQAAAAk"]
[Tue Apr 28 21:14:20.242562 2026] [:error] [pid 2741:tid 2752] [client 51.13.187.146:62441] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "afCyrPp92FeOz1h6ILwA_wAAAUY"]
[Tue Apr 28 21:14:21.467501 2026] [:error] [pid 2741:tid 2768] [client 51.13.187.146:8533] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ktfow.php"] [unique_id "afCyrfp92FeOz1h6ILwBAgAAAVY"]
[Tue Apr 28 21:14:22.342264 2026] [:error] [pid 33775:tid 33791] [client 51.13.187.146:8991] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "afCyrpsYOcoQrq88YbUzcAAAAMw"]
[Tue Apr 28 21:14:23.166327 2026] [:error] [pid 50889:tid 50892] [client 51.13.187.146:9063] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "afCyr4zszBr00txEzGhRYQAAAAA"]
[Tue Apr 28 21:14:24.075284 2026] [:error] [pid 2741:tid 2758] [client 51.13.187.146:23374] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "afCysPp92FeOz1h6ILwBBgAAAUw"]
[Tue Apr 28 21:14:25.211999 2026] [:error] [pid 33776:tid 33821] [client 51.13.187.146:45566] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "afCysV-bEJ2CKP3iKAA6egAAAE0"]
[Tue Apr 28 21:14:26.281727 2026] [:error] [pid 50889:tid 50911] [client 51.13.187.146:23427] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "afCysozszBr00txEzGhRYgAAABM"]
[Tue Apr 28 21:14:28.605497 2026] [:error] [pid 33777:tid 33850] [client 51.13.187.146:23444] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "afCytLXUCFWqmordGGL0rAAAAQ8"]
[Tue Apr 28 21:14:29.380547 2026] [:error] [pid 33777:tid 33858] [client 51.13.187.146:8520] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "afCytbXUCFWqmordGGL0rgAAARc"]
[Tue Apr 28 21:14:30.506042 2026] [:error] [pid 33777:tid 33853] [client 51.13.187.146:63418] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "afCytrXUCFWqmordGGL0sAAAARI"]
[Tue Apr 28 21:14:31.326373 2026] [:error] [pid 33776:tid 33816] [client 51.13.187.146:62414] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afCyt1-bEJ2CKP3iKAA6fAAAAEg"]
[Tue Apr 28 21:14:32.390877 2026] [:error] [pid 33777:tid 33837] [client 51.13.187.146:23447] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afCyuLXUCFWqmordGGL0uAAAAQI"]
[Tue Apr 28 21:14:34.208450 2026] [:error] [pid 33777:tid 33850] [client 51.13.187.146:9095] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afCyurXUCFWqmordGGL0vgAAAQ8"]
[Tue Apr 28 21:14:35.832380 2026] [:error] [pid 2741:tid 2764] [client 51.13.187.146:62410] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afCyu_p92FeOz1h6ILwBGAAAAVI"]
[Tue Apr 28 21:14:36.941126 2026] [:error] [pid 33777:tid 33859] [client 51.13.187.146:63411] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "afCyvLXUCFWqmordGGL0xQAAARg"]
[Tue Apr 28 21:14:38.044905 2026] [:error] [pid 33777:tid 33857] [client 51.13.187.146:8575] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "afCyvrXUCFWqmordGGL0ywAAARY"]
[Tue Apr 28 21:14:38.940015 2026] [:error] [pid 33777:tid 33858] [client 51.13.187.146:9041] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "afCyvrXUCFWqmordGGL00AAAARc"]
[Tue Apr 28 21:14:39.948320 2026] [:error] [pid 33777:tid 33851] [client 51.13.187.146:62427] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "afCyv7XUCFWqmordGGL00wAAARA"]
[Tue Apr 28 21:14:41.424326 2026] [:error] [pid 33777:tid 33849] [client 51.13.187.146:8991] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "afCywbXUCFWqmordGGL02QAAAQ4"]
[Tue Apr 28 21:14:43.519025 2026] [:error] [pid 2741:tid 2755] [client 51.13.187.146:8994] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "afCyw_p92FeOz1h6ILwBJQAAAUk"]
[Tue Apr 28 21:14:45.581417 2026] [:error] [pid 2741:tid 2748] [client 51.13.187.146:23398] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "afCyxfp92FeOz1h6ILwBKgAAAUI"]
[Tue Apr 28 21:14:47.678374 2026] [:error] [pid 33864:tid 33878] [client 51.13.187.146:38912] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "afCyxzXchLGZ4QggCskpNgAAAIw"]
[Tue Apr 28 21:15:12.255625 2026] [:error] [pid 33777:tid 33859] [client 51.13.187.146:38955] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "afCy4LXUCFWqmordGGL1FgAAARg"]
[Tue Apr 28 21:15:15.332950 2026] [:error] [pid 33777:tid 33842] [client 51.13.187.146:33137] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "afCy47XUCFWqmordGGL1HAAAAQc"]
[Tue Apr 28 21:15:16.784751 2026] [:error] [pid 33777:tid 33857] [client 51.13.187.146:33101] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "afCy5LXUCFWqmordGGL1HgAAARY"]
[Tue Apr 28 21:15:19.719269 2026] [:error] [pid 2741:tid 2751] [client 51.13.187.146:37397] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "afCy5_p92FeOz1h6ILwBfAAAAUU"]
[Tue Apr 28 21:15:22.384649 2026] [:error] [pid 2741:tid 2756] [client 51.13.187.146:8546] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xeaq.php"] [unique_id "afCy6vp92FeOz1h6ILwBhAAAAUo"]
[Tue Apr 28 21:15:23.506417 2026] [:error] [pid 50889:tid 50897] [client 51.13.187.146:37438] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xeaq.php"] [unique_id "afCy64zszBr00txEzGhRegAAAAU"]
[Tue Apr 28 21:15:24.562728 2026] [:error] [pid 33776:tid 33822] [client 51.13.187.146:27650] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xeaq.php"] [unique_id "afCy7F-bEJ2CKP3iKAA6iQAAAE4"]
[Tue Apr 28 21:15:29.451280 2026] [:error] [pid 33864:tid 33867] [client 51.13.187.146:35746] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xeaq.php"] [unique_id "afCy8TXchLGZ4QggCskpSQAAAIE"]
[Tue Apr 28 21:15:31.217285 2026] [:error] [pid 33776:tid 33814] [client 51.13.187.146:35722] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up2.php"] [unique_id "afCy81-bEJ2CKP3iKAA6jgAAAEY"]
[Tue Apr 28 21:15:32.939402 2026] [:error] [pid 33776:tid 33824] [client 51.13.187.146:35770] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up2.php"] [unique_id "afCy9F-bEJ2CKP3iKAA6jwAAAFA"]
[Tue Apr 28 21:15:35.602616 2026] [:error] [pid 33775:tid 33803] [client 51.13.187.146:8249] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up2.php"] [unique_id "afCy95sYOcoQrq88YbUzjAAAANg"]
[Tue Apr 28 21:15:39.547063 2026] [:error] [pid 33775:tid 33802] [client 51.13.187.146:27710] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up2.php"] [unique_id "afCy-5sYOcoQrq88YbUzjgAAANc"]
[Tue Apr 28 21:15:40.343377 2026] [:error] [pid 33775:tid 33787] [client 51.13.187.146:62140] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "afCy_JsYOcoQrq88YbUzkQAAAMg"]
[Tue Apr 28 21:15:41.145103 2026] [:error] [pid 33777:tid 33849] [client 51.13.187.146:48296] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "afCy_bXUCFWqmordGGL1PAAAAQ4"]
[Tue Apr 28 21:15:42.806318 2026] [:error] [pid 2741:tid 2769] [client 51.13.187.146:8202] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "afCy_vp92FeOz1h6ILwBlQAAAVc"]
[Tue Apr 28 21:15:45.153894 2026] [:error] [pid 2741:tid 2754] [client 51.13.187.146:27659] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "afCzAfp92FeOz1h6ILwBlwAAAUg"]
[Tue Apr 28 21:15:47.616382 2026] [:error] [pid 33776:tid 33820] [client 51.13.187.146:8901] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "afCzA1-bEJ2CKP3iKAA6mwAAAEw"]
[Tue Apr 28 21:15:49.175943 2026] [:error] [pid 33777:tid 33845] [client 51.13.187.146:38951] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "afCzBbXUCFWqmordGGL1UwAAAQo"]
[Tue Apr 28 21:15:50.085417 2026] [:error] [pid 33776:tid 33830] [client 51.13.187.146:8192] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "afCzBl-bEJ2CKP3iKAA6nwAAAFY"]
[Tue Apr 28 21:15:51.548843 2026] [:error] [pid 50889:tid 50903] [client 51.13.187.146:43206] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "afCzB4zszBr00txEzGhRjwAAAAs"]
[Tue Apr 28 21:15:52.294731 2026] [:error] [pid 33775:tid 33799] [client 51.13.187.146:8935] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afCzCJsYOcoQrq88YbUzlQAAANQ"]
[Tue Apr 28 21:15:55.622074 2026] [:error] [pid 2741:tid 2764] [client 51.13.187.146:35740] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afCzC_p92FeOz1h6ILwBogAAAVI"]
[Tue Apr 28 21:15:58.561778 2026] [:error] [pid 50889:tid 50894] [client 51.13.187.146:9201] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afCzDozszBr00txEzGhRlAAAAAI"]
[Tue Apr 28 21:16:00.829161 2026] [:error] [pid 33776:tid 33832] [client 51.13.187.146:26310] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afCzEF-bEJ2CKP3iKAA6pQAAAFg"]
[Tue Apr 28 21:16:34.324033 2026] [:error] [pid 33776:tid 33827] [client 51.13.187.146:34494] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "afCzMl-bEJ2CKP3iKAA6xwAAAFM"]
[Tue Apr 28 21:16:35.471230 2026] [:error] [pid 33777:tid 33837] [client 51.13.187.146:27660] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "afCzM7XUCFWqmordGGL2agAAAQI"]
[Tue Apr 28 21:16:36.225171 2026] [:error] [pid 33777:tid 33835] [client 51.13.187.146:27709] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "afCzNLXUCFWqmordGGL2bgAAAQA"]
[Tue Apr 28 21:16:37.222428 2026] [:error] [pid 50889:tid 50912] [client 51.13.187.146:33135] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/9.php"] [unique_id "afCzNYzszBr00txEzGhRyAAAABQ"]
[Tue Apr 28 21:16:38.029413 2026] [:error] [pid 2741:tid 2754] [client 51.13.187.146:44354] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "afCzNvp92FeOz1h6ILwByAAAAUg"]
[Tue Apr 28 21:16:38.980149 2026] [:error] [pid 2741:tid 2762] [client 51.13.187.146:27653] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "afCzNvp92FeOz1h6ILwBygAAAVA"]
[Tue Apr 28 21:16:39.863580 2026] [:error] [pid 50889:tid 50906] [client 51.13.187.146:8559] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "afCzN4zszBr00txEzGhRygAAAA4"]
[Tue Apr 28 21:16:40.796169 2026] [:error] [pid 33776:tid 33815] [client 51.13.187.146:33108] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/10.php"] [unique_id "afCzOF-bEJ2CKP3iKAA6ygAAAEc"]
[Tue Apr 28 21:16:41.658418 2026] [:error] [pid 50889:tid 50905] [client 51.13.187.146:62097] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "afCzOYzszBr00txEzGhRywAAAA0"]
[Tue Apr 28 21:16:43.055082 2026] [:error] [pid 33864:tid 33874] [client 51.13.187.146:37404] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "afCzOzXchLGZ4QggCskpmwAAAIg"]
[Tue Apr 28 21:16:44.449834 2026] [:error] [pid 33775:tid 33800] [client 51.13.187.146:62087] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "afCzPJsYOcoQrq88YbUzqQAAANU"]
[Tue Apr 28 21:16:45.908284 2026] [:error] [pid 33864:tid 33870] [client 51.13.187.146:33123] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "afCzPTXchLGZ4QggCskpnAAAAIQ"]
[Tue Apr 28 21:16:46.712362 2026] [:error] [pid 33864:tid 33867] [client 51.13.187.146:27680] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afCzPjXchLGZ4QggCskpnQAAAIE"]
[Tue Apr 28 21:16:47.716576 2026] [:error] [pid 2741:tid 2759] [client 51.13.187.146:8231] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afCzP_p92FeOz1h6ILwBzAAAAU0"]
[Tue Apr 28 21:16:48.641324 2026] [:error] [pid 2741:tid 2756] [client 51.13.187.146:62111] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afCzQPp92FeOz1h6ILwB0AAAAUo"]
[Tue Apr 28 21:16:49.973668 2026] [:error] [pid 33864:tid 33866] [client 51.13.187.146:45628] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afCzQTXchLGZ4QggCskpoAAAAIA"]
[Tue Apr 28 21:16:54.048147 2026] [:error] [pid 50889:tid 50903] [client 51.13.187.146:45575] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "afCzRozszBr00txEzGhR1gAAAAs"]
[Tue Apr 28 21:16:55.316956 2026] [:error] [pid 33864:tid 33882] [client 51.13.187.146:44415] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "afCzRzXchLGZ4QggCskpqAAAAJA"]
[Tue Apr 28 21:16:58.064213 2026] [:error] [pid 33777:tid 33849] [client 51.13.187.146:23417] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "afCzSrXUCFWqmordGGL2nwAAAQ4"]
[Tue Apr 28 21:17:00.886835 2026] [:error] [pid 33777:tid 33836] [client 51.13.187.146:27677] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "afCzTLXUCFWqmordGGL2pwAAAQE"]
[Tue Apr 28 21:17:01.904384 2026] [:error] [pid 50889:tid 50896] [client 51.13.187.146:23409] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afCzTYzszBr00txEzGhR4wAAAAQ"]
[Tue Apr 28 21:17:02.933376 2026] [:error] [pid 33776:tid 33809] [client 51.13.187.146:37398] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afCzTl-bEJ2CKP3iKAA7BwAAAEE"]
[Tue Apr 28 21:17:03.564184 2026] [:error] [pid 33777:tid 33837] [client 51.13.187.146:27693] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afCzT7XUCFWqmordGGL2sgAAAQI"]
[Tue Apr 28 21:17:04.790155 2026] [:error] [pid 33776:tid 33808] [client 51.13.187.146:62095] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afCzUF-bEJ2CKP3iKAA7CQAAAEA"]
[Tue Apr 28 21:17:06.102783 2026] [:error] [pid 33776:tid 33828] [client 51.13.187.146:33089] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "afCzUl-bEJ2CKP3iKAA7DgAAAFQ"]
[Tue Apr 28 21:17:09.260531 2026] [:error] [pid 33776:tid 33810] [client 51.13.187.146:37391] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "afCzVV-bEJ2CKP3iKAA7EgAAAEI"]
[Tue Apr 28 21:17:10.357921 2026] [:error] [pid 33776:tid 33812] [client 51.13.187.146:23407] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "afCzVl-bEJ2CKP3iKAA7FAAAAEQ"]
[Tue Apr 28 21:17:11.415565 2026] [:error] [pid 33777:tid 33841] [client 51.13.187.146:44382] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/no18.php"] [unique_id "afCzV7XUCFWqmordGGL2wQAAAQY"]
[Tue Apr 28 21:17:12.658635 2026] [:error] [pid 33776:tid 33816] [client 51.13.187.146:45582] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "afCzWF-bEJ2CKP3iKAA7FwAAAEg"]
[Tue Apr 28 21:17:13.986473 2026] [:error] [pid 33775:tid 33779] [client 51.13.187.146:38916] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "afCzWZsYOcoQrq88YbUzuwAAAMA"]
[Tue Apr 28 21:17:16.101762 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:38920] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "afCzXLXUCFWqmordGGL2ywAAAQw"]
[Tue Apr 28 21:17:17.033490 2026] [:error] [pid 33777:tid 33853] [client 51.13.187.146:23389] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fine.php"] [unique_id "afCzXbXUCFWqmordGGL2zwAAARI"]
[Tue Apr 28 21:17:18.464591 2026] [:error] [pid 2741:tid 2753] [client 51.13.187.146:37421] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afCzXvp92FeOz1h6ILwB4QAAAUc"]
[Tue Apr 28 21:17:23.084976 2026] [:error] [pid 50889:tid 50906] [client 51.13.187.146:45619] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afCzY4zszBr00txEzGhR6AAAAA4"]
[Tue Apr 28 21:17:24.746311 2026] [:error] [pid 33776:tid 33814] [client 51.13.187.146:23388] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afCzZF-bEJ2CKP3iKAA7IgAAAEY"]
[Tue Apr 28 21:17:25.635970 2026] [:error] [pid 33864:tid 33887] [client 51.13.187.146:33097] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afCzZTXchLGZ4QggCskpsAAAAJU"]
[Tue Apr 28 21:17:27.152310 2026] [:error] [pid 50889:tid 50915] [client 51.13.187.146:33121] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "afCzZ4zszBr00txEzGhR6wAAABc"]
[Tue Apr 28 21:17:28.750726 2026] [:error] [pid 33776:tid 33823] [client 51.13.187.146:38970] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "afCzaF-bEJ2CKP3iKAA7KAAAAE8"]
[Tue Apr 28 21:17:30.654269 2026] [:error] [pid 33777:tid 33843] [client 51.13.187.146:27687] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "afCzarXUCFWqmordGGL24AAAAQg"]
[Tue Apr 28 21:17:53.711203 2026] [:error] [pid 33777:tid 33846] [client 51.13.187.146:33090] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "afCzgbXUCFWqmordGGL3BAAAAQs"]
[Tue Apr 28 21:17:55.686503 2026] [:error] [pid 33777:tid 33842] [client 51.13.187.146:23404] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "afCzg7XUCFWqmordGGL3CQAAAQc"]
[Tue Apr 28 21:17:57.060171 2026] [:error] [pid 33864:tid 33888] [client 51.13.187.146:23395] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "afCzhTXchLGZ4QggCskptgAAAJY"]
[Tue Apr 28 21:17:58.253181 2026] [:error] [pid 33777:tid 33841] [client 51.13.187.146:44386] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/66.php"] [unique_id "afCzhrXUCFWqmordGGL3DAAAAQY"]
[Tue Apr 28 21:17:59.154289 2026] [:error] [pid 33777:tid 33852] [client 51.13.187.146:45625] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "afCzh7XUCFWqmordGGL3DgAAARE"]
[Tue Apr 28 21:18:00.004705 2026] [:error] [pid 33864:tid 33879] [client 51.13.187.146:38114] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "afCziDXchLGZ4QggCskptwAAAI0"]
[Tue Apr 28 21:18:01.286468 2026] [:error] [pid 2741:tid 2751] [client 51.13.187.146:8572] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "afCzifp92FeOz1h6ILwCCQAAAUU"]
[Tue Apr 28 21:18:02.531242 2026] [:error] [pid 2741:tid 2758] [client 51.13.187.146:44387] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "afCzivp92FeOz1h6ILwCCgAAAUw"]
[Tue Apr 28 21:18:03.926927 2026] [:error] [pid 33864:tid 33890] [client 51.13.187.146:38940] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "afCzizXchLGZ4QggCskpuwAAAJg"]
[Tue Apr 28 21:18:05.341279 2026] [:error] [pid 2741:tid 2764] [client 51.13.187.146:8563] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "afCzjfp92FeOz1h6ILwCDwAAAVI"]
[Tue Apr 28 21:18:06.761401 2026] [:error] [pid 50889:tid 50903] [client 51.13.187.146:38113] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "afCzjozszBr00txEzGhSFAAAAAs"]
[Tue Apr 28 21:18:15.121733 2026] [:error] [pid 33777:tid 33843] [client 51.13.187.146:27678] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "afCzl7XUCFWqmordGGL3GAAAAQg"]
[Tue Apr 28 21:18:17.470327 2026] [:error] [pid 33864:tid 33881] [client 51.13.187.146:44388] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afCzmTXchLGZ4QggCskpwAAAAI8"]
[Tue Apr 28 21:18:22.524365 2026] [:error] [pid 2741:tid 2747] [client 51.13.187.146:44391] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afCznvp92FeOz1h6ILwCIgAAAUE"]
[Tue Apr 28 21:18:24.022177 2026] [:error] [pid 2741:tid 2757] [client 51.13.187.146:23423] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afCzoPp92FeOz1h6ILwCJwAAAUs"]
[Tue Apr 28 21:18:24.797438 2026] [:error] [pid 33777:tid 33849] [client 51.13.187.146:23362] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afCzoLXUCFWqmordGGL3LAAAAQ4"]
[Tue Apr 28 21:18:26.198019 2026] [:error] [pid 2741:tid 2765] [client 51.13.187.146:23396] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "afCzovp92FeOz1h6ILwCKwAAAVM"]
[Tue Apr 28 21:18:27.095638 2026] [:error] [pid 33775:tid 33789] [client 51.13.187.146:8404] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "afCzo5sYOcoQrq88YbUzywAAAMo"]
[Tue Apr 28 21:18:28.369847 2026] [:error] [pid 33864:tid 33870] [client 51.13.187.146:38142] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "afCzpDXchLGZ4QggCskpwgAAAIQ"]
[Tue Apr 28 21:18:29.548252 2026] [:error] [pid 33777:tid 33837] [client 51.13.187.146:47715] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/style.php"] [unique_id "afCzpbXUCFWqmordGGL3MgAAAQI"]
[Tue Apr 28 21:18:30.591520 2026] [:error] [pid 33777:tid 33844] [client 51.13.187.146:37390] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afCzprXUCFWqmordGGL3NQAAAQk"]
[Tue Apr 28 21:18:32.956156 2026] [:error] [pid 33777:tid 33845] [client 51.13.187.146:45593] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afCzqLXUCFWqmordGGL3PAAAAQo"]
[Tue Apr 28 21:18:34.309267 2026] [:error] [pid 33777:tid 33850] [client 51.13.187.146:45570] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afCzqrXUCFWqmordGGL3QgAAAQ8"]
[Tue Apr 28 21:18:35.139801 2026] [:error] [pid 33777:tid 33838] [client 51.13.187.146:38135] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afCzq7XUCFWqmordGGL3SQAAAQM"]
[Tue Apr 28 21:18:36.037491 2026] [:error] [pid 33775:tid 33791] [client 51.13.187.146:8542] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCzrJsYOcoQrq88YbUzzwAAAMw"]
[Tue Apr 28 21:18:37.201092 2026] [:error] [pid 33777:tid 33844] [client 51.13.187.146:38118] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCzrbXUCFWqmordGGL3VgAAAQk"]
[Tue Apr 28 21:18:37.980509 2026] [:error] [pid 33776:tid 33825] [client 51.13.187.146:49562] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCzrV-bEJ2CKP3iKAA7SwAAAFE"]
[Tue Apr 28 21:18:38.638673 2026] [:error] [pid 33775:tid 33795] [client 51.13.187.146:49570] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCzrpsYOcoQrq88YbUz0AAAANA"]
[Tue Apr 28 21:18:39.407451 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:38143] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "afCzr7XUCFWqmordGGL3WwAAARM"]
[Tue Apr 28 21:18:40.283854 2026] [:error] [pid 2741:tid 2769] [client 51.13.187.146:38101] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "afCzsPp92FeOz1h6ILwCNQAAAVc"]
[Tue Apr 28 21:18:41.155694 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:8430] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "afCzsbXUCFWqmordGGL3YQAAAQw"]
[Tue Apr 28 21:18:43.133473 2026] [:error] [pid 50889:tid 50901] [client 51.13.187.146:26394] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "afCzs4zszBr00txEzGhSKAAAAAk"]
[Tue Apr 28 21:18:43.827897 2026] [:error] [pid 2741:tid 2754] [client 51.13.187.146:47688] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afCzs_p92FeOz1h6ILwCQQAAAUg"]
[Tue Apr 28 21:18:44.840921 2026] [:error] [pid 33777:tid 33843] [client 51.13.187.146:44458] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afCztLXUCFWqmordGGL3ZAAAAQg"]
[Tue Apr 28 21:18:46.761519 2026] [:error] [pid 33864:tid 33880] [client 51.13.187.146:44454] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afCztjXchLGZ4QggCskpzwAAAI4"]
[Tue Apr 28 21:18:47.824444 2026] [:error] [pid 33864:tid 33884] [client 51.13.187.146:25518] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afCztzXchLGZ4QggCskp0wAAAJI"]
[Tue Apr 28 21:18:48.874643 2026] [:error] [pid 33775:tid 33803] [client 51.13.187.146:27595] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afCzuJsYOcoQrq88YbUz0gAAANg"]
[Tue Apr 28 21:18:49.626976 2026] [:error] [pid 50889:tid 50902] [client 51.13.187.146:44451] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afCzuYzszBr00txEzGhSNQAAAAo"]
[Tue Apr 28 21:18:50.718662 2026] [:error] [pid 50889:tid 50915] [client 51.13.187.146:36726] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afCzuozszBr00txEzGhSOAAAABc"]
[Tue Apr 28 21:18:51.577001 2026] [:error] [pid 33777:tid 33837] [client 51.13.187.146:24266] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afCzu7XUCFWqmordGGL3agAAAQI"]
[Tue Apr 28 21:18:57.698832 2026] [autoindex:error] [pid 33777:tid 33849] [client 51.13.187.146:28198] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 21:19:18.649741 2026] [:error] [pid 33777:tid 33859] [client 51.13.187.146:28198] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "afCz1rXUCFWqmordGGL3mQAAARg"]
[Tue Apr 28 21:19:19.863294 2026] [:error] [pid 33864:tid 33874] [client 51.13.187.146:33778] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "afCz1zXchLGZ4QggCskp3wAAAIg"]
[Tue Apr 28 21:19:20.802979 2026] [:error] [pid 50889:tid 50905] [client 51.13.187.146:43767] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "afCz2IzszBr00txEzGhSRAAAAA0"]
[Tue Apr 28 21:19:21.925638 2026] [:error] [pid 33864:tid 33867] [client 51.13.187.146:28104] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin1.php"] [unique_id "afCz2TXchLGZ4QggCskp4AAAAIE"]
[Tue Apr 28 21:19:22.938837 2026] [:error] [pid 33775:tid 33793] [client 51.13.187.146:28098] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCz2psYOcoQrq88YbUz3AAAAM4"]
[Tue Apr 28 21:19:23.939878 2026] [:error] [pid 33776:tid 33808] [client 51.13.187.146:23297] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCz21-bEJ2CKP3iKAA7WAAAAEA"]
[Tue Apr 28 21:19:24.727380 2026] [:error] [pid 50889:tid 50896] [client 51.13.187.146:23355] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCz3IzszBr00txEzGhSRgAAAAQ"]
[Tue Apr 28 21:19:25.726609 2026] [:error] [pid 2741:tid 2759] [client 51.13.187.146:39968] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCz3fp92FeOz1h6ILwCrwAAAU0"]
[Tue Apr 28 21:19:26.749312 2026] [:error] [pid 33864:tid 33877] [client 51.13.187.146:43728] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCz3jXchLGZ4QggCskp4QAAAIs"]
[Tue Apr 28 21:19:27.613724 2026] [:error] [pid 50889:tid 50907] [client 51.13.187.146:28111] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCz34zszBr00txEzGhSRwAAAA8"]
[Tue Apr 28 21:19:28.711307 2026] [:error] [pid 33777:tid 33848] [client 51.13.187.146:39953] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCz4LXUCFWqmordGGL37QAAAQ0"]
[Tue Apr 28 21:19:30.887115 2026] [:error] [pid 2741:tid 2749] [client 51.13.187.146:43729] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCz4vp92FeOz1h6ILwCsgAAAUM"]
[Tue Apr 28 21:19:31.641510 2026] [:error] [pid 33777:tid 33858] [client 51.13.187.146:48237] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCz47XUCFWqmordGGL39AAAARc"]
[Tue Apr 28 21:19:33.092817 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:43738] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCz5bXUCFWqmordGGL39gAAARM"]
[Tue Apr 28 21:19:35.163439 2026] [:error] [pid 2741:tid 2766] [client 51.13.187.146:41119] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCz5_p92FeOz1h6ILwCtgAAAVQ"]
[Tue Apr 28 21:19:36.718318 2026] [:error] [pid 33777:tid 33843] [client 51.13.187.146:8659] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCz6LXUCFWqmordGGL4AQAAAQg"]
[Tue Apr 28 21:19:39.249565 2026] [:error] [pid 33777:tid 33851] [client 51.13.187.146:48239] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCz67XUCFWqmordGGL4BgAAARA"]
[Tue Apr 28 21:19:40.688541 2026] [:error] [pid 2741:tid 2748] [client 51.13.187.146:62476] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCz7Pp92FeOz1h6ILwCtwAAAUI"]
[Tue Apr 28 21:19:43.163849 2026] [:error] [pid 50889:tid 50893] [client 51.13.187.146:46274] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCz74zszBr00txEzGhSTgAAAAE"]
[Tue Apr 28 21:19:44.001788 2026] [:error] [pid 50889:tid 50906] [client 51.13.187.146:62494] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCz8IzszBr00txEzGhSTwAAAA4"]
[Tue Apr 28 21:19:45.466167 2026] [:error] [pid 50889:tid 50911] [client 51.13.187.146:41796] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afCz8YzszBr00txEzGhSUgAAABM"]
[Tue Apr 28 21:19:46.582991 2026] [:error] [pid 33864:tid 33888] [client 51.13.187.146:41089] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afCz8jXchLGZ4QggCskp7QAAAJY"]
[Tue Apr 28 21:19:47.520373 2026] [:error] [pid 33864:tid 33886] [client 51.13.187.146:8694] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afCz8zXchLGZ4QggCskp8AAAAJQ"]
[Tue Apr 28 21:19:48.861578 2026] [:error] [pid 33776:tid 33823] [client 51.13.187.146:41812] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afCz9F-bEJ2CKP3iKAA7ZAAAAE8"]
[Tue Apr 28 21:19:50.404921 2026] [:error] [pid 33777:tid 33858] [client 51.13.187.146:46298] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCz9rXUCFWqmordGGL4DgAAARc"]
[Tue Apr 28 21:19:51.176577 2026] [:error] [pid 33864:tid 33873] [client 51.13.187.146:41838] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCz9zXchLGZ4QggCskp8gAAAIc"]
[Tue Apr 28 21:19:52.135627 2026] [:error] [pid 33864:tid 33871] [client 51.13.187.146:41851] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCz-DXchLGZ4QggCskp9AAAAIU"]
[Tue Apr 28 21:19:52.962158 2026] [:error] [pid 33864:tid 33880] [client 51.13.187.146:46275] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCz-DXchLGZ4QggCskp9QAAAI4"]
[Tue Apr 28 21:19:53.608066 2026] [:error] [pid 33775:tid 33797] [client 51.13.187.146:48277] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "afCz-ZsYOcoQrq88YbUz4wAAANI"]
[Tue Apr 28 21:19:54.424482 2026] [:error] [pid 50889:tid 50895] [client 51.13.187.146:48296] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "afCz-ozszBr00txEzGhSWQAAAAM"]
[Tue Apr 28 21:19:55.538301 2026] [:error] [pid 33775:tid 33798] [client 51.13.187.146:41821] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "afCz-5sYOcoQrq88YbUz5AAAANM"]
[Tue Apr 28 21:19:56.516141 2026] [:error] [pid 50889:tid 50901] [client 51.13.187.146:48263] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fe5.php"] [unique_id "afCz_IzszBr00txEzGhSXQAAAAk"]
[Tue Apr 28 21:19:57.321704 2026] [:error] [pid 33775:tid 33789] [client 51.13.187.146:39953] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCz_ZsYOcoQrq88YbUz5gAAAMo"]
[Tue Apr 28 21:19:58.884714 2026] [:error] [pid 33775:tid 33793] [client 51.13.187.146:28710] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCz_psYOcoQrq88YbUz5wAAAM4"]
[Tue Apr 28 21:19:59.965638 2026] [:error] [pid 50889:tid 50899] [client 51.13.187.146:48883] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCz_4zszBr00txEzGhSXgAAAAc"]
[Tue Apr 28 21:20:01.524385 2026] [:error] [pid 33775:tid 33791] [client 51.13.187.146:35705] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afC0AZsYOcoQrq88YbUz6QAAAMw"]
[Tue Apr 28 21:20:02.324507 2026] [:error] [pid 33775:tid 33801] [client 51.13.187.146:48852] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afC0ApsYOcoQrq88YbUz6wAAANY"]
[Tue Apr 28 21:20:03.346348 2026] [:error] [pid 33776:tid 33831] [client 51.13.187.146:25415] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afC0A1-bEJ2CKP3iKAA7agAAAFc"]
[Tue Apr 28 21:20:04.187965 2026] [:error] [pid 2741:tid 2750] [client 51.13.187.146:25453] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afC0BPp92FeOz1h6ILwCvAAAAUQ"]
[Tue Apr 28 21:20:05.082395 2026] [:error] [pid 33777:tid 33853] [client 51.13.187.146:48855] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afC0BbXUCFWqmordGGL4FgAAARI"]
[Tue Apr 28 21:20:06.031821 2026] [:error] [pid 33777:tid 33852] [client 51.13.187.146:35068] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afC0BrXUCFWqmordGGL4FwAAARE"]
[Tue Apr 28 21:20:06.798436 2026] [:error] [pid 50889:tid 50912] [client 51.13.187.146:34398] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afC0BozszBr00txEzGhSYQAAABQ"]
[Tue Apr 28 21:20:07.893742 2026] [:error] [pid 2741:tid 2758] [client 51.13.187.146:25446] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afC0B_p92FeOz1h6ILwCvwAAAUw"]
[Tue Apr 28 21:20:08.894666 2026] [:error] [pid 33864:tid 33877] [client 51.13.187.146:35660] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afC0CDXchLGZ4QggCskqBgAAAIs"]
[Tue Apr 28 21:20:09.794596 2026] [:error] [pid 2741:tid 2763] [client 51.13.187.146:48293] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "afC0Cfp92FeOz1h6ILwCwQAAAVE"]
[Tue Apr 28 21:20:10.663211 2026] [:error] [pid 33777:tid 33837] [client 51.13.187.146:48306] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "afC0CrXUCFWqmordGGL4GwAAAQI"]
[Tue Apr 28 21:20:11.366016 2026] [:error] [pid 33777:tid 33836] [client 51.13.187.146:28702] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "afC0C7XUCFWqmordGGL4HQAAAQE"]
[Tue Apr 28 21:20:12.363352 2026] [:error] [pid 33777:tid 33851] [client 51.13.187.146:48861] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "afC0DLXUCFWqmordGGL4HgAAARA"]
[Tue Apr 28 21:20:13.011976 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:25470] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "afC0DbXUCFWqmordGGL4HwAAAQw"]
[Tue Apr 28 21:20:14.029932 2026] [:error] [pid 33777:tid 33839] [client 51.13.187.146:25426] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "afC0DrXUCFWqmordGGL4IgAAAQQ"]
[Tue Apr 28 21:20:14.795734 2026] [:error] [pid 33864:tid 33890] [client 51.13.187.146:35048] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "afC0DjXchLGZ4QggCskqCAAAAJg"]
[Tue Apr 28 21:20:15.375276 2026] [:error] [pid 33775:tid 33794] [client 51.13.187.146:63346] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "afC0D5sYOcoQrq88YbUz_gAAAM8"]
[Tue Apr 28 21:20:16.187144 2026] [:error] [pid 33775:tid 33803] [client 51.13.187.146:48853] [client 51.13.187.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afC0EJsYOcoQrq88YbUz_wAAANg"]
[Tue Apr 28 21:20:21.140476 2026] [autoindex:error] [pid 33777:tid 33852] [client 51.13.187.146:28697] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 21:20:21.409863 2026] [autoindex:error] [pid 33777:tid 33841] [client 51.13.187.146:28697] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 21:20:39.304510 2026] [:error] [pid 33777:tid 33845] [client 51.13.187.146:28697] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drykl.php"] [unique_id "afC0J7XUCFWqmordGGL4aQAAAQo"]
[Tue Apr 28 21:20:39.953596 2026] [:error] [pid 33777:tid 33836] [client 51.13.187.146:34413] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drykl.php"] [unique_id "afC0J7XUCFWqmordGGL4bQAAAQE"]
[Tue Apr 28 21:20:40.588771 2026] [:error] [pid 33777:tid 33856] [client 51.13.187.146:43276] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drykl.php"] [unique_id "afC0KLXUCFWqmordGGL4cgAAARU"]
[Tue Apr 28 21:20:41.543310 2026] [:error] [pid 33864:tid 33870] [client 51.13.187.146:25447] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drykl.php"] [unique_id "afC0KTXchLGZ4QggCskqEgAAAIQ"]
[Tue Apr 28 21:20:42.219608 2026] [:error] [pid 2741:tid 2757] [client 51.13.187.146:63307] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "afC0Kvp92FeOz1h6ILwC1wAAAUs"]
[Tue Apr 28 21:20:43.498989 2026] [:error] [pid 2741:tid 2752] [client 51.13.187.146:43280] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "afC0K_p92FeOz1h6ILwC2wAAAUY"]
[Tue Apr 28 21:20:44.733059 2026] [:error] [pid 2741:tid 2750] [client 51.13.187.146:63318] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "afC0LPp92FeOz1h6ILwC3gAAAUQ"]
[Tue Apr 28 21:20:45.968127 2026] [:error] [pid 2741:tid 2760] [client 51.13.187.146:28672] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "afC0Lfp92FeOz1h6ILwC4QAAAU4"]
[Tue Apr 28 21:20:47.198607 2026] [:error] [pid 33777:tid 33856] [client 51.13.187.146:34384] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "afC0L7XUCFWqmordGGL4dwAAARU"]
[Tue Apr 28 21:20:48.032411 2026] [:error] [pid 33776:tid 33815] [client 51.13.187.146:36793] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "afC0MF-bEJ2CKP3iKAA7cQAAAEc"]
[Tue Apr 28 21:20:49.475905 2026] [:error] [pid 50889:tid 50912] [client 51.13.187.146:48839] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "afC0MYzszBr00txEzGhSbgAAABQ"]
[Tue Apr 28 21:20:50.320873 2026] [:error] [pid 33776:tid 33826] [client 51.13.187.146:34409] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "afC0Ml-bEJ2CKP3iKAA7dAAAAFI"]
[Tue Apr 28 21:20:51.309448 2026] [:error] [pid 33776:tid 33824] [client 51.13.187.146:38118] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "afC0M1-bEJ2CKP3iKAA7dQAAAFA"]
[Tue Apr 28 21:20:52.398596 2026] [:error] [pid 33777:tid 33842] [client 51.13.187.146:28713] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "afC0NLXUCFWqmordGGL4ewAAAQc"]
[Tue Apr 28 21:20:53.312177 2026] [:error] [pid 33775:tid 33779] [client 51.13.187.146:29389] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "afC0NZsYOcoQrq88YbU0BQAAAMA"]
[Tue Apr 28 21:20:54.520793 2026] [:error] [pid 50889:tid 50914] [client 51.13.187.146:36773] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file18.php"] [unique_id "afC0NozszBr00txEzGhSdQAAABY"]
[Tue Apr 28 21:20:55.613936 2026] [:error] [pid 2741:tid 2749] [client 51.13.187.146:43267] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "afC0N_p92FeOz1h6ILwC7AAAAUM"]
[Tue Apr 28 21:20:56.458738 2026] [:error] [pid 2741:tid 2758] [client 51.13.187.146:63354] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "afC0OPp92FeOz1h6ILwC7QAAAUw"]
[Tue Apr 28 21:20:57.246485 2026] [:error] [pid 2741:tid 2766] [client 51.13.187.146:63334] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "afC0Ofp92FeOz1h6ILwC7wAAAVQ"]
[Tue Apr 28 21:20:58.218818 2026] [:error] [pid 2741:tid 2767] [client 51.13.187.146:43316] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "afC0Ovp92FeOz1h6ILwC8gAAAVU"]
[Tue Apr 28 21:21:00.561948 2026] [:error] [pid 50889:tid 50904] [client 51.13.187.146:27687] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afC0PIzszBr00txEzGhSfwAAAAw"]
[Tue Apr 28 21:21:02.092663 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:25419] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afC0PrXUCFWqmordGGL4gAAAAQw"]
[Tue Apr 28 21:21:02.876845 2026] [:error] [pid 50889:tid 50905] [client 51.13.187.146:43299] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afC0PozszBr00txEzGhSjQAAAA0"]
[Tue Apr 28 21:21:03.852015 2026] [:error] [pid 33777:tid 33851] [client 51.13.187.146:43279] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afC0P7XUCFWqmordGGL4hQAAARA"]
[Tue Apr 28 21:21:05.337884 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:63328] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "afC0QbXUCFWqmordGGL4iQAAARM"]
[Tue Apr 28 21:21:08.082304 2026] [:error] [pid 50889:tid 50895] [client 51.13.187.146:40580] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "afC0RIzszBr00txEzGhSqgAAAAM"]
[Tue Apr 28 21:21:10.074749 2026] [:error] [pid 33777:tid 33858] [client 51.13.187.146:34397] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "afC0RrXUCFWqmordGGL4mQAAARc"]
[Tue Apr 28 21:21:11.102626 2026] [:error] [pid 33776:tid 33808] [client 51.13.187.146:34395] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "afC0R1-bEJ2CKP3iKAA7gQAAAEA"]
[Wed Apr 29 00:08:53.864227 2026] [:error] [pid 50889:tid 50903] [client 20.216.144.9:36142] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/crgio.php"] [unique_id "afDblYzszBr00txEzGh1jQAAAAs"]
[Wed Apr 29 00:08:54.659431 2026] [:error] [pid 33776:tid 33831] [client 20.216.144.9:8444] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/crgio.php"] [unique_id "afDbll-bEJ2CKP3iKABV9QAAAFc"]
[Wed Apr 29 00:08:56.608153 2026] [:error] [pid 33864:tid 33882] [client 20.216.144.9:62590] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/crgio.php"] [unique_id "afDbmDXchLGZ4QggCslG1QAAAJA"]
[Wed Apr 29 00:08:57.581494 2026] [:error] [pid 33776:tid 33809] [client 20.216.144.9:41170] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/crgio.php"] [unique_id "afDbmV-bEJ2CKP3iKABV-AAAAEE"]
[Wed Apr 29 00:08:58.893164 2026] [:error] [pid 33864:tid 33867] [client 20.216.144.9:8396] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geforce.php"] [unique_id "afDbmjXchLGZ4QggCslG2AAAAIE"]
[Wed Apr 29 00:09:00.804888 2026] [:error] [pid 33776:tid 33811] [client 20.216.144.9:59354] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geforce.php"] [unique_id "afDbnF-bEJ2CKP3iKABWAAAAAEM"]
[Wed Apr 29 00:09:02.749544 2026] [:error] [pid 33776:tid 33831] [client 20.216.144.9:62566] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geforce.php"] [unique_id "afDbnl-bEJ2CKP3iKABWBwAAAFc"]
[Wed Apr 29 00:09:05.172536 2026] [:error] [pid 33864:tid 33866] [client 20.216.144.9:41171] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/geforce.php"] [unique_id "afDboTXchLGZ4QggCslG3QAAAIA"]
[Wed Apr 29 00:09:10.431386 2026] [:error] [pid 33777:tid 33843] [client 20.216.144.9:26683] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-load.php"] [unique_id "afDbprXUCFWqmordGGI0DgAAAQg"]
[Wed Apr 29 00:09:12.164414 2026] [:error] [pid 33775:tid 33792] [client 20.216.144.9:62616] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-load.php"] [unique_id "afDbqJsYOcoQrq88YbVIIwAAAM0"]
[Wed Apr 29 00:09:15.595782 2026] [:error] [pid 50889:tid 50913] [client 20.216.144.9:59359] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-load.php"] [unique_id "afDbq4zszBr00txEzGh1lQAAABU"]
[Wed Apr 29 00:09:17.691958 2026] [:error] [pid 33777:tid 33842] [client 20.216.144.9:8220] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-load.php"] [unique_id "afDbrbXUCFWqmordGGI0GgAAAQc"]
[Wed Apr 29 00:09:22.250812 2026] [:error] [pid 33777:tid 33840] [client 20.216.144.9:8216] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/77.php"] [unique_id "afDbsrXUCFWqmordGGI0IgAAAQU"]
[Wed Apr 29 00:09:23.328489 2026] [:error] [pid 33777:tid 33845] [client 20.216.144.9:48361] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/77.php"] [unique_id "afDbs7XUCFWqmordGGI0JAAAAQo"]
[Wed Apr 29 00:09:24.179119 2026] [:error] [pid 33776:tid 33819] [client 20.216.144.9:27638] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/77.php"] [unique_id "afDbtF-bEJ2CKP3iKABWEAAAAEs"]
[Wed Apr 29 00:09:25.491371 2026] [:error] [pid 2741:tid 2752] [client 20.216.144.9:8902] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/77.php"] [unique_id "afDbtfp92FeOz1h6ILwwvwAAAUY"]
[Wed Apr 29 00:09:27.736598 2026] [:error] [pid 33775:tid 33779] [client 20.216.144.9:8208] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.sghb.php"] [unique_id "afDbt5sYOcoQrq88YbVIKwAAAMA"]
[Wed Apr 29 00:09:29.681600 2026] [:error] [pid 33776:tid 33823] [client 20.216.144.9:27598] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.sghb.php"] [unique_id "afDbuV-bEJ2CKP3iKABWEwAAAE8"]
[Wed Apr 29 00:09:30.901120 2026] [:error] [pid 2741:tid 2747] [client 20.216.144.9:8213] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.sghb.php"] [unique_id "afDbuvp92FeOz1h6ILwwwwAAAUE"]
[Wed Apr 29 00:09:32.009690 2026] [:error] [pid 50889:tid 50912] [client 20.216.144.9:27609] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.sghb.php"] [unique_id "afDbvIzszBr00txEzGh1qwAAABQ"]
[Wed Apr 29 00:09:34.461660 2026] [:error] [pid 2741:tid 2763] [client 20.216.144.9:41165] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoko.php"] [unique_id "afDbvvp92FeOz1h6ILwwxwAAAVE"]
[Wed Apr 29 00:09:35.577406 2026] [:error] [pid 33777:tid 33835] [client 20.216.144.9:8408] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoko.php"] [unique_id "afDbv7XUCFWqmordGGI0NQAAAQA"]
[Wed Apr 29 00:09:36.721648 2026] [:error] [pid 50889:tid 50902] [client 20.216.144.9:62577] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoko.php"] [unique_id "afDbwIzszBr00txEzGh1sgAAAAo"]
[Wed Apr 29 00:09:37.521598 2026] [:error] [pid 33776:tid 33827] [client 20.216.144.9:41185] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/zoko.php"] [unique_id "afDbwV-bEJ2CKP3iKABWFAAAAFM"]
[Wed Apr 29 00:09:38.156832 2026] [:error] [pid 33777:tid 33848] [client 20.216.144.9:48332] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/solo1.php"] [unique_id "afDbwrXUCFWqmordGGI0OgAAAQ0"]
[Wed Apr 29 00:09:38.792047 2026] [:error] [pid 2741:tid 2753] [client 20.216.144.9:59378] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/solo1.php"] [unique_id "afDbwvp92FeOz1h6ILwwzgAAAUc"]
[Wed Apr 29 00:09:39.842842 2026] [:error] [pid 50889:tid 50911] [client 20.216.144.9:62547] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/solo1.php"] [unique_id "afDbw4zszBr00txEzGh1tgAAABM"]
[Wed Apr 29 00:09:41.509114 2026] [:error] [pid 50889:tid 50914] [client 20.216.144.9:41187] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/solo1.php"] [unique_id "afDbxYzszBr00txEzGh1uAAAABY"]
[Wed Apr 29 00:09:43.720678 2026] [:error] [pid 33775:tid 33789] [client 20.216.144.9:62603] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/locales.php"] [unique_id "afDbx5sYOcoQrq88YbVILgAAAMo"]
[Wed Apr 29 00:09:47.994008 2026] [:error] [pid 33776:tid 33829] [client 20.216.144.9:26686] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/locales.php"] [unique_id "afDby1-bEJ2CKP3iKABWIwAAAFU"]
[Wed Apr 29 00:09:50.728614 2026] [:error] [pid 2741:tid 2761] [client 20.216.144.9:48350] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/locales.php"] [unique_id "afDbzvp92FeOz1h6ILww3QAAAU8"]
[Wed Apr 29 00:10:08.955740 2026] [autoindex:error] [pid 33777:tid 33846] [client 20.216.144.9:8221] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:10:12.123060 2026] [autoindex:error] [pid 33777:tid 33852] [client 20.216.144.9:8221] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:10:33.256902 2026] [autoindex:error] [pid 33777:tid 33841] [client 20.216.144.9:8221] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/twentytwentyfive/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:10:33.534418 2026] [autoindex:error] [pid 33777:tid 33857] [client 20.216.144.9:8221] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:10:36.671946 2026] [:error] [pid 33777:tid 33850] [client 20.216.144.9:8221] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bhm.php"] [unique_id "afDb_LXUCFWqmordGGI0hgAAAQ8"]
[Wed Apr 29 00:10:40.519516 2026] [:error] [pid 50889:tid 50894] [client 20.216.144.9:41175] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bhm.php"] [unique_id "afDcAIzszBr00txEzGh12QAAAAI"]
[Wed Apr 29 00:10:43.171112 2026] [:error] [pid 2741:tid 2757] [client 20.216.144.9:62650] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bhm.php"] [unique_id "afDcA_p92FeOz1h6ILwxIgAAAUs"]
[Wed Apr 29 00:10:44.313460 2026] [:error] [pid 2741:tid 2754] [client 20.216.144.9:8951] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bhm.php"] [unique_id "afDcBPp92FeOz1h6ILwxJgAAAUg"]
[Wed Apr 29 00:10:45.915880 2026] [:error] [pid 2741:tid 2768] [client 20.216.144.9:27631] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xmu.php"] [unique_id "afDcBfp92FeOz1h6ILwxKQAAAVY"]
[Wed Apr 29 00:10:48.486618 2026] [:error] [pid 50889:tid 50896] [client 20.216.144.9:8424] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xmu.php"] [unique_id "afDcCIzszBr00txEzGh13gAAAAQ"]
[Wed Apr 29 00:10:55.818723 2026] [:error] [pid 33777:tid 33837] [client 20.216.144.9:62571] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xmu.php"] [unique_id "afDcD7XUCFWqmordGGI0igAAAQI"]
[Wed Apr 29 00:10:58.891405 2026] [:error] [pid 50889:tid 50892] [client 20.216.144.9:27584] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xmu.php"] [unique_id "afDcEozszBr00txEzGh16wAAAAA"]
[Wed Apr 29 00:11:00.369157 2026] [:error] [pid 33777:tid 33841] [client 20.216.144.9:8928] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ref.php"] [unique_id "afDcFLXUCFWqmordGGI0jQAAAQY"]
[Wed Apr 29 00:11:02.296274 2026] [:error] [pid 33777:tid 33857] [client 20.216.144.9:8926] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ref.php"] [unique_id "afDcFrXUCFWqmordGGI0jgAAARY"]
[Wed Apr 29 00:11:03.762483 2026] [:error] [pid 33864:tid 33882] [client 20.216.144.9:8908] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ref.php"] [unique_id "afDcFzXchLGZ4QggCslHAwAAAJA"]
[Wed Apr 29 00:11:05.282629 2026] [:error] [pid 33777:tid 33836] [client 20.216.144.9:8244] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ref.php"] [unique_id "afDcGbXUCFWqmordGGI0kQAAAQE"]
[Wed Apr 29 00:11:08.275256 2026] [:error] [pid 50889:tid 50914] [client 20.216.144.9:8435] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afDcHIzszBr00txEzGh17gAAABY"]
[Wed Apr 29 00:11:09.178538 2026] [:error] [pid 33777:tid 33842] [client 20.216.144.9:8196] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afDcHbXUCFWqmordGGI0lwAAAQc"]
[Wed Apr 29 00:11:14.465009 2026] [:error] [pid 2741:tid 2751] [client 20.216.144.9:62580] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afDcIvp92FeOz1h6ILwxNAAAAUU"]
[Wed Apr 29 00:11:17.401990 2026] [:error] [pid 33777:tid 33857] [client 20.216.144.9:26682] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afDcJbXUCFWqmordGGI0mgAAARY"]
[Wed Apr 29 00:11:19.515987 2026] [:error] [pid 33777:tid 33847] [client 20.216.144.9:8215] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminer.php"] [unique_id "afDcJ7XUCFWqmordGGI0nAAAAQw"]
[Wed Apr 29 00:11:25.586646 2026] [:error] [pid 33777:tid 33859] [client 20.216.144.9:41180] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminer.php"] [unique_id "afDcLbXUCFWqmordGGI0ngAAARg"]
[Wed Apr 29 00:11:31.326496 2026] [:error] [pid 33776:tid 33822] [client 20.216.144.9:29604] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminer.php"] [unique_id "afDcM1-bEJ2CKP3iKABWTQAAAE4"]
[Wed Apr 29 00:11:58.689424 2026] [autoindex:error] [pid 33777:tid 33852] [client 20.216.144.9:60710] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:12:27.246317 2026] [:error] [pid 33777:tid 33835] [client 20.216.144.9:65179] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awa.php"] [unique_id "afDca7XUCFWqmordGGI02wAAAQA"]
[Wed Apr 29 00:12:29.219429 2026] [:error] [pid 33777:tid 33855] [client 20.216.144.9:56576] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awa.php"] [unique_id "afDcbbXUCFWqmordGGI03AAAARQ"]
[Wed Apr 29 00:12:31.501647 2026] [:error] [pid 33777:tid 33850] [client 20.216.144.9:63276] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awa.php"] [unique_id "afDcb7XUCFWqmordGGI04AAAAQ8"]
[Wed Apr 29 00:12:33.577022 2026] [:error] [pid 33777:tid 33848] [client 20.216.144.9:56634] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awa.php"] [unique_id "afDccbXUCFWqmordGGI04wAAAQ0"]
[Wed Apr 29 00:12:35.046443 2026] [:error] [pid 33864:tid 33885] [client 20.216.144.9:56610] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "afDcczXchLGZ4QggCslHFgAAAJM"]
[Wed Apr 29 00:12:38.291637 2026] [:error] [pid 33776:tid 33809] [client 20.216.144.9:52108] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "afDcdl-bEJ2CKP3iKABWXAAAAEE"]
[Wed Apr 29 00:12:41.124133 2026] [:error] [pid 2741:tid 2753] [client 20.216.144.9:41733] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "afDcefp92FeOz1h6ILwxSgAAAUc"]
[Wed Apr 29 00:12:44.813462 2026] [:error] [pid 2741:tid 2763] [client 20.216.144.9:26495] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "afDcfPp92FeOz1h6ILwxSwAAAVE"]
[Wed Apr 29 00:12:46.345112 2026] [:error] [pid 50889:tid 50899] [client 20.216.144.9:35421] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "afDcfozszBr00txEzGh1_AAAAAc"]
[Wed Apr 29 00:12:49.248560 2026] [:error] [pid 50889:tid 50902] [client 20.216.144.9:50397] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "afDcgYzszBr00txEzGh1_gAAAAo"]
[Wed Apr 29 00:12:54.859916 2026] [:error] [pid 2741:tid 2747] [client 20.216.144.9:35455] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "afDchvp92FeOz1h6ILwxUgAAAUE"]
[Wed Apr 29 00:12:56.821601 2026] [:error] [pid 33777:tid 33856] [client 20.216.144.9:44849] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "afDciLXUCFWqmordGGI08wAAARU"]
[Wed Apr 29 00:12:58.753155 2026] [:error] [pid 50889:tid 50916] [client 20.216.144.9:37605] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tews.php"] [unique_id "afDciozszBr00txEzGh2AgAAABg"]
[Wed Apr 29 00:13:00.652206 2026] [:error] [pid 2741:tid 2759] [client 20.216.144.9:60134] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tews.php"] [unique_id "afDcjPp92FeOz1h6ILwxWAAAAU0"]
[Wed Apr 29 00:13:02.601066 2026] [:error] [pid 33775:tid 33793] [client 20.216.144.9:63270] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tews.php"] [unique_id "afDcjpsYOcoQrq88YbVIWAAAAM4"]
[Wed Apr 29 00:13:05.874002 2026] [:error] [pid 33864:tid 33888] [client 20.216.144.9:63287] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tews.php"] [unique_id "afDckTXchLGZ4QggCslHIgAAAJY"]
[Wed Apr 29 00:13:15.783552 2026] [:error] [pid 2741:tid 2750] [client 20.216.144.9:35453] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moshou.php"] [unique_id "afDcm_p92FeOz1h6ILwxdQAAAUQ"]
[Wed Apr 29 00:13:17.074952 2026] [:error] [pid 33776:tid 33815] [client 20.216.144.9:60135] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moshou.php"] [unique_id "afDcnV-bEJ2CKP3iKABWcwAAAEc"]
[Wed Apr 29 00:13:19.213583 2026] [:error] [pid 33777:tid 33853] [client 20.216.144.9:26479] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moshou.php"] [unique_id "afDcn7XUCFWqmordGGI0_gAAARI"]
[Wed Apr 29 00:13:20.188311 2026] [:error] [pid 33864:tid 33876] [client 20.216.144.9:42274] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/moshou.php"] [unique_id "afDcoDXchLGZ4QggCslHSAAAAIo"]
[Wed Apr 29 00:13:21.077359 2026] [:error] [pid 33864:tid 33879] [client 20.216.144.9:26449] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeaq.php"] [unique_id "afDcoTXchLGZ4QggCslHSQAAAI0"]
[Wed Apr 29 00:13:23.553808 2026] [:error] [pid 50889:tid 50900] [client 20.216.144.9:63248] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xeaq.php"] [unique_id "afDco4zszBr00txEzGh2JAAAAAg"]
[Wed Apr 29 00:13:45.340008 2026] [autoindex:error] [pid 2741:tid 2749] [client 20.216.144.9:50385] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:14:06.385471 2026] [:error] [pid 2741:tid 2768] [client 20.216.144.9:50385] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "afDczvp92FeOz1h6ILwxtwAAAVY"]
[Wed Apr 29 00:14:09.087130 2026] [:error] [pid 2741:tid 2756] [client 20.216.144.9:30728] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "afDc0fp92FeOz1h6ILwxugAAAUo"]
[Wed Apr 29 00:14:10.738829 2026] [:error] [pid 33776:tid 33824] [client 20.216.144.9:37609] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "afDc0l-bEJ2CKP3iKABWlQAAAFA"]
[Wed Apr 29 00:14:12.036809 2026] [:error] [pid 33777:tid 33855] [client 20.216.144.9:63259] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "afDc1LXUCFWqmordGGI1SAAAARQ"]
[Wed Apr 29 00:14:13.061014 2026] [:error] [pid 50889:tid 50907] [client 20.216.144.9:37571] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "afDc1YzszBr00txEzGh2SQAAAA8"]
[Wed Apr 29 00:14:19.686144 2026] [:error] [pid 33864:tid 33886] [client 20.216.144.9:9075] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "afDc2zXchLGZ4QggCslHWgAAAJQ"]
[Wed Apr 29 00:14:20.806188 2026] [:error] [pid 33777:tid 33854] [client 20.216.144.9:52142] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "afDc3LXUCFWqmordGGI1SgAAARM"]
[Wed Apr 29 00:14:22.425280 2026] [:error] [pid 50889:tid 50895] [client 20.216.144.9:63295] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "afDc3ozszBr00txEzGh2SwAAAAM"]
[Wed Apr 29 00:14:26.368088 2026] [:error] [pid 2741:tid 2766] [client 20.216.144.9:9068] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "afDc4vp92FeOz1h6ILwxyAAAAVQ"]
[Wed Apr 29 00:14:27.722698 2026] [:error] [pid 50889:tid 50915] [client 20.216.144.9:28485] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "afDc44zszBr00txEzGh2VAAAABc"]
[Wed Apr 29 00:14:29.255742 2026] [:error] [pid 33777:tid 33857] [client 20.216.144.9:37627] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "afDc5bXUCFWqmordGGI1TgAAARY"]
[Wed Apr 29 00:14:34.444544 2026] [:error] [pid 33775:tid 33786] [client 20.216.144.9:44850] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "afDc6psYOcoQrq88YbVIgQAAAMc"]
[Wed Apr 29 00:14:36.235011 2026] [:error] [pid 33864:tid 33866] [client 20.216.144.9:28520] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "afDc7DXchLGZ4QggCslHawAAAIA"]
[Wed Apr 29 00:14:38.148802 2026] [:error] [pid 2741:tid 2763] [client 20.216.144.9:31976] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "afDc7vp92FeOz1h6ILwx2AAAAVE"]
[Wed Apr 29 00:14:40.048944 2026] [:error] [pid 33777:tid 33856] [client 20.216.144.9:63269] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "afDc8LXUCFWqmordGGI1-gAAARU"]
[Wed Apr 29 00:14:43.839115 2026] [:error] [pid 50889:tid 50895] [client 20.216.144.9:9057] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "afDc84zszBr00txEzGh2dAAAAAM"]
[Wed Apr 29 00:14:45.078983 2026] [:error] [pid 50889:tid 50896] [client 20.216.144.9:52156] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "afDc9YzszBr00txEzGh2dgAAAAQ"]
[Wed Apr 29 00:14:45.744496 2026] [:error] [pid 2741:tid 2760] [client 20.216.144.9:24597] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "afDc9fp92FeOz1h6ILwx5AAAAU4"]
[Wed Apr 29 00:14:47.004063 2026] [:error] [pid 2741:tid 2769] [client 20.216.144.9:31981] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "afDc9_p92FeOz1h6ILwx5QAAAVc"]
[Wed Apr 29 00:14:48.442627 2026] [:error] [pid 33864:tid 33884] [client 20.216.144.9:24622] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "afDc-DXchLGZ4QggCslHfAAAAJI"]
[Wed Apr 29 00:14:49.772544 2026] [:error] [pid 2741:tid 2751] [client 20.216.144.9:28489] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "afDc-fp92FeOz1h6ILwx6wAAAUU"]
[Wed Apr 29 00:14:50.804135 2026] [:error] [pid 2741:tid 2766] [client 20.216.144.9:9036] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "afDc-vp92FeOz1h6ILwx7QAAAVQ"]
[Wed Apr 29 00:14:55.463736 2026] [:error] [pid 50889:tid 50910] [client 20.216.144.9:28494] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "afDc_4zszBr00txEzGh2ewAAABI"]
[Wed Apr 29 00:14:57.677604 2026] [:error] [pid 33864:tid 33879] [client 20.216.144.9:33781] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "afDdATXchLGZ4QggCslHgwAAAI0"]
[Wed Apr 29 00:14:59.856256 2026] [:error] [pid 2741:tid 2762] [client 20.216.144.9:56621] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.php"] [unique_id "afDdA_p92FeOz1h6ILwx_AAAAVA"]
[Wed Apr 29 00:15:01.984166 2026] [:error] [pid 33777:tid 33854] [client 20.216.144.9:28509] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.php"] [unique_id "afDdBbXUCFWqmordGGI2HwAAARM"]
[Wed Apr 29 00:15:54.073949 2026] [:error] [pid 33777:tid 33851] [client 20.216.144.9:30740] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "afDdOrXUCFWqmordGGI2iwAAARA"]
[Wed Apr 29 00:15:56.699636 2026] [:error] [pid 33776:tid 33825] [client 20.216.144.9:27563] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "afDdPF-bEJ2CKP3iKABW3gAAAFE"]
[Wed Apr 29 00:15:58.826166 2026] [:error] [pid 33864:tid 33877] [client 20.216.144.9:24580] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "afDdPjXchLGZ4QggCslHwgAAAIs"]
[Wed Apr 29 00:16:01.036530 2026] [:error] [pid 2741:tid 2767] [client 20.216.144.9:24601] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "afDdQfp92FeOz1h6ILwyQgAAAVU"]
[Wed Apr 29 00:16:05.725368 2026] [:error] [pid 33864:tid 33882] [client 20.216.144.9:29521] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "afDdRTXchLGZ4QggCslHxgAAAJA"]
[Wed Apr 29 00:16:10.571332 2026] [:error] [pid 33777:tid 33841] [client 20.216.144.9:9049] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "afDdSrXUCFWqmordGGI2vAAAAQY"]
[Wed Apr 29 00:16:16.025896 2026] [:error] [pid 33864:tid 33888] [client 20.216.144.9:29514] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "afDdUDXchLGZ4QggCslHzgAAAJY"]
[Wed Apr 29 00:16:18.087523 2026] [:error] [pid 33776:tid 33828] [client 20.216.144.9:33761] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "afDdUl-bEJ2CKP3iKABW7AAAAFQ"]
[Wed Apr 29 00:16:20.125867 2026] [:error] [pid 2741:tid 2766] [client 20.216.144.9:52117] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "afDdVPp92FeOz1h6ILwyWgAAAVQ"]
[Wed Apr 29 00:16:24.984312 2026] [:error] [pid 33777:tid 33835] [client 20.216.144.9:56614] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "afDdWLXUCFWqmordGGI28AAAAQA"]
[Wed Apr 29 00:16:27.234140 2026] [:error] [pid 33777:tid 33840] [client 20.216.144.9:31940] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "afDdW7XUCFWqmordGGI28wAAAQU"]
[Wed Apr 29 00:16:29.640755 2026] [:error] [pid 2741:tid 2755] [client 20.216.144.9:50368] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "afDdXfp92FeOz1h6ILwyZAAAAUk"]
[Wed Apr 29 00:16:31.366275 2026] [:error] [pid 33777:tid 33851] [client 20.216.144.9:29557] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "afDdX7XUCFWqmordGGI2-QAAARA"]
[Wed Apr 29 00:16:32.814943 2026] [:error] [pid 33777:tid 33848] [client 20.216.144.9:33771] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "afDdYLXUCFWqmordGGI2_AAAAQ0"]
[Wed Apr 29 00:16:36.805952 2026] [:error] [pid 33777:tid 33839] [client 20.216.144.9:30746] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a2.php"] [unique_id "afDdZLXUCFWqmordGGI3NgAAAQQ"]
[Wed Apr 29 00:16:39.879680 2026] [:error] [pid 33775:tid 33801] [client 20.216.144.9:29539] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "afDdZ5sYOcoQrq88YbVIswAAANY"]
[Wed Apr 29 00:16:40.815600 2026] [:error] [pid 33776:tid 33808] [client 20.216.144.9:51298] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "afDdaF-bEJ2CKP3iKABXAQAAAEA"]
[Wed Apr 29 00:16:44.207494 2026] [:error] [pid 33777:tid 33847] [client 20.216.144.9:8466] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "afDdbLXUCFWqmordGGI3OgAAAQw"]
[Wed Apr 29 00:16:45.601707 2026] [:error] [pid 50889:tid 50914] [client 20.216.144.9:44184] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/edit.php"] [unique_id "afDdbYzszBr00txEzGh3EQAAABY"]
[Wed Apr 29 00:16:46.831317 2026] [:error] [pid 2741:tid 2753] [client 20.216.144.9:63880] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "afDdbvp92FeOz1h6ILwyeAAAAUc"]
[Wed Apr 29 00:16:48.867398 2026] [:error] [pid 2741:tid 2756] [client 20.216.144.9:44758] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "afDdcPp92FeOz1h6ILwyewAAAUo"]
[Wed Apr 29 00:17:30.649416 2026] [:error] [pid 2741:tid 2750] [client 20.216.144.9:44748] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afDdmvp92FeOz1h6ILwysgAAAUQ"]
[Wed Apr 29 00:17:32.364635 2026] [:error] [pid 50889:tid 50894] [client 20.216.144.9:58819] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afDdnIzszBr00txEzGh3WQAAAAI"]
[Wed Apr 29 00:17:35.037087 2026] [:error] [pid 33777:tid 33847] [client 20.216.144.9:58824] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afDdn7XUCFWqmordGGI3pQAAAQw"]
[Wed Apr 29 00:17:37.206250 2026] [:error] [pid 50889:tid 50907] [client 20.216.144.9:43533] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afDdoYzszBr00txEzGh3XgAAAA8"]
[Wed Apr 29 00:17:40.852795 2026] [:error] [pid 2741:tid 2747] [client 20.216.144.9:61983] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "afDdpPp92FeOz1h6ILwywgAAAUE"]
[Wed Apr 29 00:17:42.016776 2026] [:error] [pid 33776:tid 33820] [client 20.216.144.9:61981] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "afDdpl-bEJ2CKP3iKABXHgAAAEw"]
[Wed Apr 29 00:17:43.051780 2026] [:error] [pid 2741:tid 2751] [client 20.216.144.9:60167] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "afDdp_p92FeOz1h6ILwyyQAAAUU"]
[Wed Apr 29 00:17:43.802554 2026] [:error] [pid 33776:tid 33828] [client 20.216.144.9:47683] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "afDdp1-bEJ2CKP3iKABXIAAAAFQ"]
[Wed Apr 29 00:17:46.793878 2026] [:error] [pid 50889:tid 50894] [client 20.216.144.9:64550] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "afDdqozszBr00txEzGh3ZQAAAAI"]
[Wed Apr 29 00:17:49.459656 2026] [:error] [pid 33777:tid 33837] [client 20.216.144.9:60171] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "afDdrbXUCFWqmordGGI32gAAAQI"]
[Wed Apr 29 00:17:52.672735 2026] [:error] [pid 33776:tid 33819] [client 20.216.144.9:30712] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "afDdsF-bEJ2CKP3iKABXJwAAAEs"]
[Wed Apr 29 00:17:54.087771 2026] [:error] [pid 50889:tid 50899] [client 20.216.144.9:47699] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-blog.php"] [unique_id "afDdsozszBr00txEzGh3bAAAAAc"]
[Wed Apr 29 00:17:55.462461 2026] [:error] [pid 33777:tid 33852] [client 20.216.144.9:32664] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afDds7XUCFWqmordGGI34gAAARE"]
[Wed Apr 29 00:17:58.783617 2026] [:error] [pid 2741:tid 2769] [client 20.216.144.9:30700] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afDdtvp92FeOz1h6ILwy3AAAAVc"]
[Wed Apr 29 00:18:01.534425 2026] [:error] [pid 33864:tid 33869] [client 20.216.144.9:60196] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afDduTXchLGZ4QggCslIHgAAAIM"]
[Wed Apr 29 00:18:02.681043 2026] [:error] [pid 33777:tid 33858] [client 20.216.144.9:8747] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afDdurXUCFWqmordGGI36wAAARc"]
[Wed Apr 29 00:18:04.172421 2026] [:error] [pid 33777:tid 33849] [client 20.216.144.9:8261] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "afDdvLXUCFWqmordGGI37QAAAQ4"]
[Wed Apr 29 00:18:07.259430 2026] [:error] [pid 50889:tid 50897] [client 20.216.144.9:8715] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "afDdv4zszBr00txEzGh3dAAAAAU"]
[Wed Apr 29 00:18:08.940372 2026] [:error] [pid 50889:tid 50904] [client 20.216.144.9:64566] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "afDdwIzszBr00txEzGh3dwAAAAw"]
[Wed Apr 29 00:18:11.062568 2026] [:error] [pid 33777:tid 33846] [client 20.216.144.9:28046] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "afDdw7XUCFWqmordGGI39QAAAQs"]
[Wed Apr 29 00:18:12.666495 2026] [:error] [pid 50889:tid 50907] [client 20.216.144.9:8721] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "afDdxIzszBr00txEzGh3eQAAAA8"]
[Wed Apr 29 00:18:13.504155 2026] [:error] [pid 33864:tid 33883] [client 20.216.144.9:30704] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "afDdxTXchLGZ4QggCslIJgAAAJE"]
[Wed Apr 29 00:18:14.664185 2026] [:error] [pid 33864:tid 33876] [client 20.216.144.9:44107] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "afDdxjXchLGZ4QggCslIJwAAAIo"]
[Wed Apr 29 00:18:16.029532 2026] [:error] [pid 50889:tid 50895] [client 20.216.144.9:50481] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ms-edit.php"] [unique_id "afDdyIzszBr00txEzGh3ewAAAAM"]
[Wed Apr 29 00:18:17.449484 2026] [:error] [pid 2741:tid 2748] [client 20.216.144.9:60178] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afDdyfp92FeOz1h6ILwy8wAAAUI"]
[Wed Apr 29 00:18:18.673466 2026] [:error] [pid 50889:tid 50900] [client 20.216.144.9:47103] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afDdyozszBr00txEzGh3fgAAAAg"]
[Wed Apr 29 00:18:21.144561 2026] [:error] [pid 33777:tid 33836] [client 20.216.144.9:47705] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afDdzbXUCFWqmordGGI3_QAAAQE"]
[Wed Apr 29 00:18:24.875646 2026] [:error] [pid 33777:tid 33858] [client 20.216.144.9:32687] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afDd0LXUCFWqmordGGI3_gAAARc"]
[Wed Apr 29 00:18:26.112656 2026] [:error] [pid 33777:tid 33847] [client 20.216.144.9:8730] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goods.php"] [unique_id "afDd0rXUCFWqmordGGI3_wAAAQw"]
[Wed Apr 29 00:18:27.221819 2026] [:error] [pid 33777:tid 33837] [client 20.216.144.9:47743] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/goods.php"] [unique_id "afDd07XUCFWqmordGGI4AAAAAQI"]
[Wed Apr 29 00:19:05.889118 2026] [autoindex:error] [pid 33864:tid 33880] [client 20.216.144.9:31419] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:19:09.041890 2026] [autoindex:error] [pid 33864:tid 33887] [client 20.216.144.9:31419] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:19:09.294591 2026] [autoindex:error] [pid 33864:tid 33878] [client 20.216.144.9:31419] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:19:18.642661 2026] [:error] [pid 33864:tid 33872] [client 20.216.144.9:31419] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afDeBjXchLGZ4QggCslITQAAAIY"]
[Wed Apr 29 00:19:20.122612 2026] [:error] [pid 33777:tid 33856] [client 20.216.144.9:50456] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afDeCLXUCFWqmordGGI4OgAAARU"]
[Wed Apr 29 00:19:21.767898 2026] [:error] [pid 2741:tid 2755] [client 20.216.144.9:26720] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afDeCfp92FeOz1h6ILwzGgAAAUk"]
[Wed Apr 29 00:19:24.216015 2026] [:error] [pid 33777:tid 33857] [client 20.216.144.9:8521] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afDeDLXUCFWqmordGGI4RgAAARY"]
[Wed Apr 29 00:19:29.215635 2026] [:error] [pid 33777:tid 33842] [client 20.216.144.9:8544] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "afDeEbXUCFWqmordGGI4TgAAAQc"]
[Wed Apr 29 00:19:31.704138 2026] [:error] [pid 33864:tid 33867] [client 20.216.144.9:54093] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "afDeEzXchLGZ4QggCslIUwAAAIE"]
[Wed Apr 29 00:19:33.247520 2026] [:error] [pid 50889:tid 50907] [client 20.216.144.9:54106] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "afDeFYzszBr00txEzGh3ugAAAA8"]
[Wed Apr 29 00:19:34.450140 2026] [:error] [pid 33864:tid 33885] [client 20.216.144.9:8559] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "afDeFjXchLGZ4QggCslIVwAAAJM"]
[Wed Apr 29 00:19:36.402187 2026] [:error] [pid 33777:tid 33836] [client 20.216.144.9:50458] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "afDeGLXUCFWqmordGGI4XQAAAQE"]
[Wed Apr 29 00:19:37.032516 2026] [:error] [pid 33777:tid 33854] [client 20.216.144.9:8887] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "afDeGbXUCFWqmordGGI4XwAAARM"]
[Wed Apr 29 00:19:39.485136 2026] [:error] [pid 50889:tid 50892] [client 20.216.144.9:54130] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "afDeG4zszBr00txEzGh3zQAAAAA"]
[Wed Apr 29 00:19:40.252855 2026] [:error] [pid 50889:tid 50900] [client 20.216.144.9:9010] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/abcd.php"] [unique_id "afDeHIzszBr00txEzGh30AAAAAg"]
[Wed Apr 29 00:19:41.634548 2026] [:error] [pid 2741:tid 2765] [client 20.216.144.9:56520] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "afDeHfp92FeOz1h6ILwzJAAAAVM"]
[Wed Apr 29 00:19:42.286209 2026] [:error] [pid 33777:tid 33858] [client 20.216.144.9:56557] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "afDeHrXUCFWqmordGGI4bwAAARc"]
[Wed Apr 29 00:19:44.265107 2026] [:error] [pid 2741:tid 2755] [client 20.216.144.9:8447] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "afDeIPp92FeOz1h6ILwzJQAAAUk"]
[Wed Apr 29 00:19:45.512732 2026] [:error] [pid 33777:tid 33859] [client 20.216.144.9:50472] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/a1.php"] [unique_id "afDeIbXUCFWqmordGGI4fAAAARg"]
[Wed Apr 29 00:19:48.104898 2026] [:error] [pid 33775:tid 33792] [client 20.216.144.9:8837] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "afDeJJsYOcoQrq88YbVI3wAAAM0"]
[Wed Apr 29 00:19:53.713044 2026] [:error] [pid 50889:tid 50900] [client 20.216.144.9:54120] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "afDeKYzszBr00txEzGh4AAAAAAg"]
[Wed Apr 29 00:19:56.469108 2026] [:error] [pid 33777:tid 33845] [client 20.216.144.9:8410] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "afDeLLXUCFWqmordGGI4lAAAAQo"]
[Wed Apr 29 00:19:57.414849 2026] [:error] [pid 33775:tid 33790] [client 20.216.144.9:62614] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/update/f35.php"] [unique_id "afDeLZsYOcoQrq88YbVI4gAAAMs"]
[Wed Apr 29 00:19:58.457365 2026] [:error] [pid 33776:tid 33817] [client 20.216.144.9:50432] [client 20.216.144.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afDeLl-bEJ2CKP3iKABXUwAAAEk"]
[Wed Apr 29 00:20:01.331121 2026] [:error] [pid 33775:tid 33783] [client 20.216.144.9:61938] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "afDeMZsYOcoQrq88YbVI8AAAAMQ"]
[Wed Apr 29 00:20:02.231431 2026] [:error] [pid 2741:tid 2760] [client 20.216.144.9:8397] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "afDeMvp92FeOz1h6ILwzNwAAAU4"]
[Wed Apr 29 00:20:04.084657 2026] [:error] [pid 33776:tid 33810] [client 20.216.144.9:61903] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "afDeNF-bEJ2CKP3iKABXVwAAAEI"]
[Wed Apr 29 00:20:08.086662 2026] [:error] [pid 33777:tid 33841] [client 20.216.144.9:8402] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/f35.php"] [unique_id "afDeOLXUCFWqmordGGI4sQAAAQY"]
[Wed Apr 29 00:20:09.170090 2026] [:error] [pid 33777:tid 33858] [client 20.216.144.9:8512] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afDeObXUCFWqmordGGI4tgAAARc"]
[Wed Apr 29 00:20:11.705648 2026] [:error] [pid 33777:tid 33844] [client 20.216.144.9:8539] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afDeO7XUCFWqmordGGI4wwAAAQk"]
[Wed Apr 29 00:20:13.391786 2026] [:error] [pid 33777:tid 33855] [client 20.216.144.9:8892] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afDePbXUCFWqmordGGI4zgAAARQ"]
[Wed Apr 29 00:20:15.470992 2026] [:error] [pid 50889:tid 50906] [client 20.216.144.9:54107] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afDeP4zszBr00txEzGh4GwAAAA4"]
[Wed Apr 29 00:20:28.180069 2026] [autoindex:error] [pid 33777:tid 33856] [client 20.216.144.9:8535] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 29 00:21:04.397339 2026] [:error] [pid 33777:tid 33856] [client 20.216.144.9:8535] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "afDecLXUCFWqmordGGI5YgAAARU"]
[Wed Apr 29 00:21:06.538968 2026] [:error] [pid 2741:tid 2752] [client 20.216.144.9:43487] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "afDecvp92FeOz1h6ILwzYAAAAUY"]
[Wed Apr 29 00:21:07.449011 2026] [:error] [pid 2741:tid 2753] [client 20.216.144.9:50437] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "afDec_p92FeOz1h6ILwzZAAAAUc"]
[Wed Apr 29 00:21:11.240415 2026] [:error] [pid 33777:tid 33840] [client 20.216.144.9:50435] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xxx.php"] [unique_id "afDed7XUCFWqmordGGI5cQAAAQU"]
[Wed Apr 29 00:21:12.246719 2026] [:error] [pid 33777:tid 33855] [client 20.216.144.9:50454] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hypo.php"] [unique_id "afDeeLXUCFWqmordGGI5dQAAARQ"]
[Wed Apr 29 00:21:14.631554 2026] [:error] [pid 33864:tid 33885] [client 20.216.144.9:34485] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hypo.php"] [unique_id "afDeejXchLGZ4QggCslIlwAAAJM"]
[Wed Apr 29 00:21:16.350123 2026] [:error] [pid 33776:tid 33823] [client 20.216.144.9:8992] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hypo.php"] [unique_id "afDefF-bEJ2CKP3iKABXdgAAAE8"]
[Wed Apr 29 00:21:18.839273 2026] [:error] [pid 33775:tid 33787] [client 20.216.144.9:47103] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hypo.php"] [unique_id "afDefpsYOcoQrq88YbVJUAAAAMg"]
[Wed Apr 29 00:21:21.783204 2026] [:error] [pid 33776:tid 33824] [client 20.216.144.9:62605] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "afDegV-bEJ2CKP3iKABXggAAAFA"]
[Wed Apr 29 00:21:24.277571 2026] [:error] [pid 50889:tid 50904] [client 20.216.144.9:34432] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "afDehIzszBr00txEzGh4UwAAAAw"]
[Wed Apr 29 00:21:30.480995 2026] [:error] [pid 2741:tid 2753] [client 20.216.144.9:26717] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "afDeivp92FeOz1h6ILwzhQAAAUc"]
[Wed Apr 29 00:21:32.016303 2026] [:error] [pid 33864:tid 33878] [client 20.216.144.9:43479] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "afDejDXchLGZ4QggCslIogAAAIw"]
[Wed Apr 29 00:21:33.308836 2026] [:error] [pid 2741:tid 2758] [client 20.216.144.9:62613] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "afDejfp92FeOz1h6ILwzjQAAAUw"]
[Wed Apr 29 00:21:36.844157 2026] [:error] [pid 2741:tid 2748] [client 20.216.144.9:50466] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "afDekPp92FeOz1h6ILwzkgAAAUI"]
[Wed Apr 29 00:21:39.139528 2026] [:error] [pid 33864:tid 33872] [client 20.216.144.9:47115] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "afDekzXchLGZ4QggCslIqwAAAIY"]
[Wed Apr 29 00:21:40.672125 2026] [:error] [pid 33777:tid 33853] [client 20.216.144.9:47152] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "afDelLXUCFWqmordGGI5hQAAARI"]
[Wed Apr 29 00:21:44.143441 2026] [:error] [pid 33777:tid 33850] [client 20.216.144.9:24592] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afDemLXUCFWqmordGGI5kQAAAQ8"]
[Wed Apr 29 00:21:48.016635 2026] [:error] [pid 33775:tid 33794] [client 20.216.144.9:41766] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afDenJsYOcoQrq88YbVJbAAAAM8"]
[Wed Apr 29 00:21:54.764137 2026] [:error] [pid 33777:tid 33845] [client 20.216.144.9:63884] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afDeorXUCFWqmordGGI5tQAAAQo"]
[Wed Apr 29 00:21:57.599725 2026] [:error] [pid 50889:tid 50910] [client 20.216.144.9:44172] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "afDepYzszBr00txEzGh4aAAAABI"]
[Wed Apr 29 00:22:00.817919 2026] [:error] [pid 33864:tid 33885] [client 20.216.144.9:35439] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "afDeqDXchLGZ4QggCslIugAAAJM"]
[Wed Apr 29 00:22:01.931440 2026] [:error] [pid 2741:tid 2750] [client 20.216.144.9:29518] [client 20.216.144.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/chosen.php"] [unique_id "afDeqfp92FeOz1h6ILwzpAAAAUQ"]
[Wed Apr 29 06:22:29.003741 2026] [:error] [pid 40344:tid 40396] [client 20.220.167.206:27033] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afEzJZ_iiwb4cHXz-Jr6VgAAAdU"]
[Wed Apr 29 06:22:33.539417 2026] [:error] [pid 40343:tid 40363] [client 20.220.167.206:39986] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afEzKWiaWCZjSxz2ZNtr1AAAAY8"]
[Wed Apr 29 06:37:32.295717 2026] [autoindex:error] [pid 56756:tid 56816] [client 213.136.67.3:55128] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Apr 29 15:22:21.502025 2026] [:error] [pid 45289:tid 45296] [client 45.119.85.39:55996] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGxrV_vGmZY7dOOIwrLUAAAA4Q"], referer: https://www.google.com
[Wed Apr 29 15:22:21.502439 2026] [:error] [pid 45289:tid 45296] [client 45.119.85.39:55996] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 17"] [hostname "makifim.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGxrV_vGmZY7dOOIwrLUAAAA4Q"], referer: https://www.google.com
[Wed Apr 29 15:42:11.463458 2026] [:error] [pid 45054:tid 45069] [client 45.119.85.39:53264] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG2U4tL6SUL31r23c-kaAAAAo0"], referer: https://www.google.com
[Wed Apr 29 15:42:11.463538 2026] [:error] [pid 45054:tid 45069] [client 45.119.85.39:53264] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 191"] [hostname "makifim.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG2U4tL6SUL31r23c-kaAAAAo0"], referer: https://www.google.com
[Wed Apr 29 22:01:11.658928 2026] [:error] [pid 21138:tid 21212] [client 103.172.76.104:9257] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afIPJ5uzwUiyMeUnp332rAAAAQ8"]
[Wed Apr 29 22:01:16.342178 2026] [:error] [pid 21536:tid 21550] [client 103.172.76.104:9244] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afIPLCREaVkH9P5H_LQu-AAAAIw"], referer: https://makifim.com.au/wp-login.php?redirect_to=https%3A%2F%2Fmakifim.com.au%2Fwp-admin%2F&reauth=1
[Wed Apr 29 22:02:33.623057 2026] [:error] [pid 47618:tid 47645] [client 52.63.93.51:13960] [client 52.63.93.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.63.93.51, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afIPeXHYUSxIrhce2OArAwAAAVg"], referer: https://makifim.com.au/wp-admin/options.php?adminhash=8f4d6fb4b8ef39927b22b8481246481f
[Wed Apr 29 22:04:30.466181 2026] [:error] [pid 21536:tid 21540] [client 103.172.76.104:9427] [client 103.172.76.104] ModSecurity: Warning. String match "get" at REQUEST_METHOD. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "4595"] [id "222212"] [rev "2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "makifim.com.au"] [uri "/wp-admin/edit-comments.php"] [unique_id "afIP7iREaVkH9P5H_LQvXAAAAII"], referer: https://makifim.com.au/wp-admin/update-core.php?action=do-plugin-upgrade
[Wed Apr 29 22:04:39.855501 2026] [:error] [pid 21536:tid 21549] [client 103.172.76.104:9427] [client 103.172.76.104] ModSecurity: Warning. String match "get" at REQUEST_METHOD. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "4595"] [id "222212"] [rev "2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "makifim.com.au"] [uri "/wp-admin/edit-comments.php"] [unique_id "afIP9yREaVkH9P5H_LQvYwAAAIs"], referer: https://makifim.com.au/wp-admin/edit-comments.php
[Wed Apr 29 22:04:41.094940 2026] [:error] [pid 21536:tid 21551] [client 103.172.76.104:9427] [client 103.172.76.104] ModSecurity: Warning. String match "get" at REQUEST_METHOD. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "4595"] [id "222212"] [rev "2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "makifim.com.au"] [uri "/wp-admin/edit-comments.php"] [unique_id "afIP-SREaVkH9P5H_LQvZQAAAI0"], referer: https://makifim.com.au/wp-admin/edit-comments.php
[Wed Apr 29 22:04:43.839187 2026] [:error] [pid 21536:tid 21561] [client 103.172.76.104:9427] [client 103.172.76.104] ModSecurity: Warning. String match "get" at REQUEST_METHOD. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "4595"] [id "222212"] [rev "2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "makifim.com.au"] [uri "/wp-admin/edit-comments.php"] [unique_id "afIP-yREaVkH9P5H_LQvaAAAAJc"], referer: https://makifim.com.au/wp-admin/edit-comments.php?paged=1
[Wed Apr 29 22:04:45.856117 2026] [:error] [pid 21536:tid 21554] [client 103.172.76.104:9427] [client 103.172.76.104] ModSecurity: Warning. String match "get" at REQUEST_METHOD. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "4595"] [id "222212"] [rev "2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "makifim.com.au"] [uri "/wp-admin/edit-comments.php"] [unique_id "afIP_SREaVkH9P5H_LQvagAAAJA"], referer: https://makifim.com.au/wp-admin/edit-comments.php?comment_status=trash
[Wed Apr 29 22:04:47.048752 2026] [:error] [pid 21536:tid 21556] [client 103.172.76.104:9427] [client 103.172.76.104] ModSecurity: Warning. String match "get" at REQUEST_METHOD. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "4595"] [id "222212"] [rev "2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "makifim.com.au"] [uri "/wp-admin/edit-comments.php"] [unique_id "afIP_yREaVkH9P5H_LQvbAAAAJI"], referer: https://makifim.com.au/wp-admin/edit-comments.php?comment_status=trash
[Wed Apr 29 23:07:01.198577 2026] [:error] [pid 47618:tid 47630] [client 20.215.248.255:34618] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afIelXHYUSxIrhce2OA0PAAAAUk"]
[Wed Apr 29 23:07:02.327966 2026] [:error] [pid 21137:tid 21183] [client 20.215.248.255:33547] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afIelvw-HnaioFPIurV0rAAAAA4"]
[Wed Apr 29 23:07:03.380470 2026] [:error] [pid 21137:tid 21186] [client 20.215.248.255:8551] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afIel_w-HnaioFPIurV0sAAAABE"]
[Wed Apr 29 23:07:04.399042 2026] [:error] [pid 21138:tid 21217] [client 20.215.248.255:8624] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afIemJuzwUiyMeUnp30H6gAAARQ"]
[Thu Apr 30 06:11:10.593363 2026] [:error] [pid 18112:tid 18170] [client 20.215.248.255:33236] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php7"] [unique_id "afKB_iUrJv3y8j6Lm1ucTQAAAFQ"]
[Thu Apr 30 06:11:11.621671 2026] [:error] [pid 18112:tid 18151] [client 20.215.248.255:8937] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php7"] [unique_id "afKB_yUrJv3y8j6Lm1ucTwAAAEE"]
[Thu Apr 30 06:11:12.645514 2026] [:error] [pid 52436:tid 52440] [client 20.215.248.255:48120] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php7"] [unique_id "afKCAALFWPk_P7AfE8flXgAAAUE"]
[Thu Apr 30 06:11:13.673409 2026] [:error] [pid 52436:tid 52449] [client 20.215.248.255:8933] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php7"] [unique_id "afKCAQLFWPk_P7AfE8flYgAAAUo"]
[Thu Apr 30 12:17:19.019011 2026] [:error] [pid 53641:tid 53652] [client 20.215.248.255:42758] [client 20.215.248.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.215.248.255, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afLXz2C119wja3QGeAGsvwAAAYI"]
[Thu Apr 30 12:17:33.169195 2026] [autoindex:error] [pid 53641:tid 53670] [client 20.215.248.255:42758] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 30 12:17:43.556311 2026] [:error] [pid 53641:tid 53659] [client 20.215.248.255:42758] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-2019.php"] [unique_id "afLX52C119wja3QGeAGs3QAAAYc"]
[Thu Apr 30 12:17:44.578413 2026] [:error] [pid 18111:tid 18126] [client 20.215.248.255:8662] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-2019.php"] [unique_id "afLX6GctLbxB7Q1_oK3ntwAAAAQ"]
[Thu Apr 30 12:17:45.603123 2026] [:error] [pid 52350:tid 52377] [client 20.215.248.255:17367] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-2019.php"] [unique_id "afLX6f1j4GHE9hm7bfd6pwAAARM"]
[Thu Apr 30 12:17:46.645869 2026] [:error] [pid 52350:tid 52357] [client 20.215.248.255:44502] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/wp-2019.php"] [unique_id "afLX6v1j4GHE9hm7bfd6qAAAAQA"]
[Thu Apr 30 20:53:27.109292 2026] [autoindex:error] [pid 5733:tid 5808] [client 80.241.213.248:60450] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 01 01:58:36.807946 2026] [autoindex:error] [pid 5733:tid 5791] [client 62.171.177.18:59629] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 01 13:02:00.590410 2026] [:error] [pid 24996:tid 25048] [client 34.154.242.96:47758] [client 34.154.242.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "afQzyCDBq9mMfUWQQeoDkQAAAJI"]
[Fri May 01 14:17:31.019882 2026] [autoindex:error] [pid 25085:tid 25096] [client 75.119.128.178:50339] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 01 23:56:31.920624 2026] [:error] [pid 24996:tid 25057] [client 91.92.243.241:64495] [client 91.92.243.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.241, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afTNLyDBq9mMfUWQQeqP3gAAAJc"]
[Fri May 01 23:56:34.659211 2026] [:error] [pid 24997:tid 25079] [client 91.92.243.241:64925] [client 91.92.243.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.241, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afTNMvOkHa4ScY5oo8zwEwAAANc"]
[Sat May 02 15:29:26.671321 2026] [:error] [pid 51917:tid 51929] [client 35.252.75.232:65516] [client 35.252.75.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.252.75.232, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afWn1q7wZviJ7BgcCi8lfQAAAco"]
[Sat May 02 15:29:30.742158 2026] [:error] [pid 51917:tid 51928] [client 35.252.75.232:65516] [client 35.252.75.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "afWn2q7wZviJ7BgcCi8lggAAAck"]
[Sat May 02 15:29:30.906732 2026] [:error] [pid 51917:tid 51933] [client 35.252.75.232:65516] [client 35.252.75.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.252.75.232, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afWn2q7wZviJ7BgcCi8lgwAAAc4"]
[Sat May 02 15:29:32.917396 2026] [:error] [pid 51950:tid 51986] [client 35.252.75.232:52624] [client 35.252.75.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.252.75.232, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afWn3IoBJzYZ3RKUhdgTgAAAAkY"]
[Sat May 02 15:29:34.904547 2026] [:error] [pid 51950:tid 51981] [client 35.252.75.232:61625] [client 35.252.75.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.252.75.232, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afWn3ooBJzYZ3RKUhdgTgwAAAkE"]
[Sat May 02 15:29:36.977819 2026] [:error] [pid 53434:tid 53450] [client 35.252.75.232:57574] [client 35.252.75.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.252.75.232, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afWn4O9BXmRQcbfsxlxZJQAAAAc"]
[Sat May 02 15:29:38.976511 2026] [:error] [pid 52124:tid 52142] [client 35.252.75.232:65519] [client 35.252.75.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.252.75.232, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afWn4jjabaZ9NMm8eQt2NgAAA40"]
[Sat May 02 15:29:38.976661 2026] [:error] [pid 52124:tid 52142] [client 35.252.75.232:65519] [client 35.252.75.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.252.75.232, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afWn4jjabaZ9NMm8eQt2NgAAA40"]
[Sat May 02 23:15:52.591953 2026] [:error] [pid 52012:tid 52082] [client 85.11.167.90:51490] [client 85.11.167.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.11.167.90, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afYVKEzSWr-8cpS83mjdzAAAA0U"]
[Sun May 03 04:21:23.863742 2026] [:error] [pid 40639:tid 40705] [client 140.245.32.2:56720] [client 140.245.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "afZcw69rkyoICq7qxvFJeQAAAIQ"]
[Sun May 03 07:03:34.245605 2026] [:error] [pid 37127:tid 37202] [client 45.131.195.233:56757] [client 45.131.195.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afaCxv8khJXb5O5aWVXOqQAAAFE"]
[Sun May 03 12:52:59.362402 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:58180] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afbUq_R_A42N-LtDyrv8OgAAAAA"]
[Sun May 03 12:52:59.809691 2026] [:error] [pid 37126:tid 37163] [client 20.43.1.132:33160] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afbUq_R_A42N-LtDyrv8OwAAAAo"]
[Sun May 03 12:53:00.237418 2026] [:error] [pid 37127:tid 37207] [client 20.43.1.132:58218] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afbUrP8khJXb5O5aWVUOAwAAAFU"]
[Sun May 03 12:53:00.659266 2026] [:error] [pid 37127:tid 37200] [client 20.43.1.132:10308] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afbUrP8khJXb5O5aWVUOBAAAAE8"]
[Sun May 03 13:47:08.393300 2026] [autoindex:error] [pid 37126:tid 37160] [client 172.173.121.85:65344] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 13:47:11.619721 2026] [autoindex:error] [pid 37126:tid 37170] [client 172.173.121.85:65344] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 13:47:14.839719 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:65344] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.admin.php"] [unique_id "afbhYvR_A42N-LtDyrsBmQAAAAQ"]
[Sun May 03 13:47:15.957872 2026] [:error] [pid 37126:tid 37171] [client 172.173.121.85:26661] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.admin.php"] [unique_id "afbhY_R_A42N-LtDyrsBmgAAABI"]
[Sun May 03 13:47:18.633348 2026] [:error] [pid 37127:tid 37201] [client 172.173.121.85:26642] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.admin.php"] [unique_id "afbhZv8khJXb5O5aWVUYVQAAAFA"]
[Sun May 03 13:47:20.145103 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:26632] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/.admin.php"] [unique_id "afbhaDhvYFGNwhnPamrVOwAAAQE"]
[Sun May 03 13:47:21.262726 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:26651] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sw.php"] [unique_id "afbhaTSujTvwdzEkjSciLAAAAZg"]
[Sun May 03 13:47:22.303282 2026] [:error] [pid 37127:tid 37194] [client 172.173.121.85:26664] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sw.php"] [unique_id "afbhav8khJXb5O5aWVUYVwAAAEo"]
[Sun May 03 13:47:23.844035 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:26685] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sw.php"] [unique_id "afbha0HBbBLrXh6PBuv9zgAAAVE"]
[Sun May 03 13:47:24.807712 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:65351] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sw.php"] [unique_id "afbhbDSujTvwdzEkjSciLgAAAZI"]
[Sun May 03 13:47:25.358335 2026] [:error] [pid 37126:tid 37173] [client 172.173.121.85:26722] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vuln.php"] [unique_id "afbhbfR_A42N-LtDyrsBoAAAABQ"]
[Sun May 03 13:47:26.385825 2026] [:error] [pid 37126:tid 37168] [client 172.173.121.85:26658] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vuln.php"] [unique_id "afbhbvR_A42N-LtDyrsBogAAAA8"]
[Sun May 03 13:47:26.922706 2026] [:error] [pid 37126:tid 37152] [client 172.173.121.85:26700] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vuln.php"] [unique_id "afbhbvR_A42N-LtDyrsBowAAAAE"]
[Sun May 03 13:47:27.711427 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:26659] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/vuln.php"] [unique_id "afbhbzSujTvwdzEkjSciLwAAAYE"]
[Sun May 03 13:47:28.441716 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:26662] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-temp.php"] [unique_id "afbhcDSujTvwdzEkjSciMAAAAZQ"]
[Sun May 03 13:47:28.935281 2026] [:error] [pid 37127:tid 37206] [client 172.173.121.85:65371] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-temp.php"] [unique_id "afbhcP8khJXb5O5aWVUYWQAAAFQ"]
[Sun May 03 13:47:29.537424 2026] [:error] [pid 37127:tid 37195] [client 172.173.121.85:26697] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-temp.php"] [unique_id "afbhcf8khJXb5O5aWVUYXAAAAEs"]
[Sun May 03 13:47:30.358999 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:26669] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-temp.php"] [unique_id "afbhcv8khJXb5O5aWVUYXQAAAE8"]
[Sun May 03 13:47:31.817486 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:26733] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "afbhc_8khJXb5O5aWVUYXgAAAEM"]
[Sun May 03 13:47:33.074979 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:26748] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "afbhdUHBbBLrXh6PBuv90gAAAUQ"]
[Sun May 03 13:47:34.347663 2026] [:error] [pid 37126:tid 37161] [client 172.173.121.85:26646] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "afbhdvR_A42N-LtDyrsBpwAAAAg"]
[Sun May 03 13:47:35.238642 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:26698] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sxdfrt.php"] [unique_id "afbhdzhvYFGNwhnPamrVPgAAAQU"]
[Sun May 03 13:47:36.206383 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:26683] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afbheDhvYFGNwhnPamrVPwAAAQk"]
[Sun May 03 13:47:37.502896 2026] [:error] [pid 37246:tid 37256] [client 172.173.121.85:26699] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afbheThvYFGNwhnPamrVRAAAAQg"]
[Sun May 03 13:47:38.335595 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:26739] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afbhejhvYFGNwhnPamrVRQAAARA"]
[Sun May 03 13:47:39.265913 2026] [:error] [pid 40386:tid 40408] [client 172.173.121.85:26704] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afbhe1HJDYRXUf3IbRQHbQAAANQ"]
[Sun May 03 13:47:40.041131 2026] [:error] [pid 37126:tid 37151] [client 172.173.121.85:26695] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afbhfPR_A42N-LtDyrsBqgAAAAA"]
[Sun May 03 13:47:41.052113 2026] [:error] [pid 40386:tid 40400] [client 172.173.121.85:26647] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afbhfVHJDYRXUf3IbRQHbgAAAMw"]
[Sun May 03 13:47:42.907920 2026] [:error] [pid 37126:tid 37169] [client 172.173.121.85:26656] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afbhfvR_A42N-LtDyrsBvgAAABA"]
[Sun May 03 13:47:55.680897 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:26747] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-bda.php"] [unique_id "afbhizhvYFGNwhnPamrVSwAAARU"]
[Sun May 03 13:47:56.942063 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:26694] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-bda.php"] [unique_id "afbhjDhvYFGNwhnPamrVTQAAAQ4"]
[Sun May 03 13:47:57.582052 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:65375] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-bda.php"] [unique_id "afbhjTSujTvwdzEkjSciNAAAAYM"]
[Sun May 03 13:47:58.111894 2026] [:error] [pid 40386:tid 40404] [client 172.173.121.85:65306] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/class-bda.php"] [unique_id "afbhjlHJDYRXUf3IbRQHfwAAANA"]
[Sun May 03 13:47:58.584784 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:26734] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bhm.php"] [unique_id "afbhjjhvYFGNwhnPamrVTgAAAQw"]
[Sun May 03 13:47:59.245309 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:65350] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bhm.php"] [unique_id "afbhjzSujTvwdzEkjSciNQAAAY4"]
[Sun May 03 13:47:59.911650 2026] [:error] [pid 40386:tid 40400] [client 172.173.121.85:65296] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bhm.php"] [unique_id "afbhj1HJDYRXUf3IbRQHgQAAAMw"]
[Sun May 03 13:48:00.505546 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:65376] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bhm.php"] [unique_id "afbhkDhvYFGNwhnPamrVUAAAARY"]
[Sun May 03 13:48:01.127389 2026] [:error] [pid 37127:tid 37192] [client 172.173.121.85:26672] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xmu.php"] [unique_id "afbhkf8khJXb5O5aWVUYcgAAAEg"]
[Sun May 03 13:48:01.694756 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:65292] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xmu.php"] [unique_id "afbhkf8khJXb5O5aWVUYcwAAAEc"]
[Sun May 03 13:48:02.836447 2026] [:error] [pid 37127:tid 37193] [client 172.173.121.85:26696] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xmu.php"] [unique_id "afbhkv8khJXb5O5aWVUYfQAAAEk"]
[Sun May 03 13:48:03.441735 2026] [:error] [pid 37127:tid 37196] [client 172.173.121.85:65311] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xmu.php"] [unique_id "afbhk_8khJXb5O5aWVUYgAAAAEw"]
[Sun May 03 13:48:03.986617 2026] [:error] [pid 40386:tid 40410] [client 172.173.121.85:26690] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ref.php"] [unique_id "afbhk1HJDYRXUf3IbRQHhQAAANY"]
[Sun May 03 13:48:04.545737 2026] [:error] [pid 40386:tid 40412] [client 172.173.121.85:26648] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ref.php"] [unique_id "afbhlFHJDYRXUf3IbRQHhgAAANg"]
[Sun May 03 13:48:05.073732 2026] [:error] [pid 37130:tid 37216] [client 172.173.121.85:26626] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ref.php"] [unique_id "afbhlaIu7bmXKXicRk9j3QAAAIM"]
[Sun May 03 13:48:05.489773 2026] [:error] [pid 37130:tid 37235] [client 172.173.121.85:26660] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ref.php"] [unique_id "afbhlaIu7bmXKXicRk9j3gAAAJY"]
[Sun May 03 13:48:06.085930 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:26741] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afbhlv8khJXb5O5aWVUYigAAAEA"]
[Sun May 03 13:48:06.720731 2026] [:error] [pid 40386:tid 40403] [client 172.173.121.85:26663] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afbhllHJDYRXUf3IbRQHhwAAAM8"]
[Sun May 03 13:48:07.217993 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:26713] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afbhl0HBbBLrXh6PBuv96gAAAVI"]
[Sun May 03 13:48:07.830963 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:26666] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-xme.php"] [unique_id "afbhl0HBbBLrXh6PBuv96wAAAUk"]
[Sun May 03 13:48:08.660324 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:26633] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminer.php"] [unique_id "afbhmEHBbBLrXh6PBuv97QAAAUI"]
[Sun May 03 13:48:09.792076 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:65364] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminer.php"] [unique_id "afbhmaIu7bmXKXicRk9j4wAAAIY"]
[Sun May 03 13:48:12.246752 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:26677] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/adminer.php"] [unique_id "afbhnDhvYFGNwhnPamrVVwAAAQk"]
[Sun May 03 13:48:36.967074 2026] [autoindex:error] [pid 37246:tid 37251] [client 172.173.121.85:65377] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 13:48:52.550638 2026] [:error] [pid 37127:tid 37194] [client 172.173.121.85:26668] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ewp.php"] [unique_id "afbhxP8khJXb5O5aWVUY9AAAAEo"]
[Sun May 03 13:48:54.382128 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:26680] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ewp.php"] [unique_id "afbhxkHBbBLrXh6PBuv-YAAAAUg"]
[Sun May 03 13:48:55.331026 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:65283] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ewp.php"] [unique_id "afbhx0HBbBLrXh6PBuv-ZAAAAVI"]
[Sun May 03 13:48:56.302762 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:65354] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ewp.php"] [unique_id "afbhyDhvYFGNwhnPamrV9gAAARg"]
[Sun May 03 13:48:58.395577 2026] [:error] [pid 37127:tid 37188] [client 172.173.121.85:26655] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kikikoko.php"] [unique_id "afbhyv8khJXb5O5aWVUY-QAAAEQ"]
[Sun May 03 13:48:59.902082 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:65373] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kikikoko.php"] [unique_id "afbhy1HJDYRXUf3IbRQHogAAAMI"]
[Sun May 03 13:49:01.611196 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:65346] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kikikoko.php"] [unique_id "afbhzUHBbBLrXh6PBuv-cgAAAVI"]
[Sun May 03 13:49:04.174820 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:65367] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/kikikoko.php"] [unique_id "afbh0DSujTvwdzEkjScicQAAAYI"]
[Sun May 03 13:49:07.042006 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:26736] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "afbh0zSujTvwdzEkjScidgAAAYw"]
[Sun May 03 13:49:09.114050 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:26679] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "afbh1UHBbBLrXh6PBuv-eQAAAVM"]
[Sun May 03 13:49:13.023940 2026] [:error] [pid 37127:tid 37201] [client 172.173.121.85:26627] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "afbh2f8khJXb5O5aWVUZBQAAAFA"]
[Sun May 03 13:49:15.473879 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:26628] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dx.php"] [unique_id "afbh26Iu7bmXKXicRk9kHwAAAIY"]
[Sun May 03 13:49:16.146800 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:65366] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "afbh3KIu7bmXKXicRk9kIQAAAJA"]
[Sun May 03 13:49:17.430303 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:26692] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "afbh3ThvYFGNwhnPamrWCAAAAQk"]
[Sun May 03 13:49:18.749720 2026] [:error] [pid 40386:tid 40388] [client 172.173.121.85:26724] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "afbh3lHJDYRXUf3IbRQHpgAAAMA"]
[Sun May 03 13:49:19.746705 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:26673] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xff.php"] [unique_id "afbh3zSujTvwdzEkjScifQAAAY4"]
[Sun May 03 13:49:20.865073 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:26745] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lupo.php"] [unique_id "afbh4DSujTvwdzEkjScigQAAAYU"]
[Sun May 03 13:49:22.336033 2026] [:error] [pid 40386:tid 40406] [client 172.173.121.85:26678] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lupo.php"] [unique_id "afbh4lHJDYRXUf3IbRQHqgAAANI"]
[Sun May 03 13:49:24.232083 2026] [:error] [pid 37130:tid 37234] [client 172.173.121.85:26625] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lupo.php"] [unique_id "afbh5KIu7bmXKXicRk9kJQAAAJU"]
[Sun May 03 13:49:27.775082 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:65368] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/lupo.php"] [unique_id "afbh51HJDYRXUf3IbRQHtQAAAMI"]
[Sun May 03 13:49:28.948039 2026] [:error] [pid 37127:tid 37192] [client 172.173.121.85:65304] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awa.php"] [unique_id "afbh6P8khJXb5O5aWVUZJQAAAEg"]
[Sun May 03 13:49:30.833368 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:65287] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awa.php"] [unique_id "afbh6kHBbBLrXh6PBuv-hgAAAVU"]
[Sun May 03 13:49:34.527994 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:65374] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awa.php"] [unique_id "afbh7jSujTvwdzEkjScijQAAAYY"]
[Sun May 03 13:49:36.156448 2026] [:error] [pid 37130:tid 37215] [client 172.173.121.85:26721] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/awa.php"] [unique_id "afbh8KIu7bmXKXicRk9kMQAAAII"]
[Sun May 03 13:49:37.482500 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:65358] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "afbh8TSujTvwdzEkjScijgAAAZA"]
[Sun May 03 13:49:39.294556 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:26709] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "afbh80HBbBLrXh6PBuv-kwAAAU4"]
[Sun May 03 13:49:40.722592 2026] [:error] [pid 37130:tid 37231] [client 172.173.121.85:65361] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "afbh9KIu7bmXKXicRk9kMwAAAJI"]
[Sun May 03 13:49:42.437719 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:26643] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/popo.php"] [unique_id "afbh9jhvYFGNwhnPamrWEAAAAQA"]
[Sun May 03 13:49:45.018513 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:65395] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "afbh-TSujTvwdzEkjScimgAAAY4"]
[Sun May 03 13:49:46.322706 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:26717] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "afbh-vR_A42N-LtDyrsB8QAAABM"]
[Sun May 03 13:49:48.716351 2026] [:error] [pid 40386:tid 40401] [client 172.173.121.85:64896] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/13.php"] [unique_id "afbh_FHJDYRXUf3IbRQHxwAAAM0"]
[Sun May 03 13:50:09.575769 2026] [autoindex:error] [pid 40422:tid 40446] [client 172.173.121.85:65320] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 13:50:34.124637 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:65320] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "afbiKkHBbBLrXh6PBuv-3wAAAVU"]
[Sun May 03 13:50:34.802605 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:26708] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "afbiKjhvYFGNwhnPamrWPAAAAQo"]
[Sun May 03 13:50:36.341668 2026] [:error] [pid 37130:tid 37217] [client 172.173.121.85:26691] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "afbiLKIu7bmXKXicRk9kOAAAAIQ"]
[Sun May 03 13:50:37.226000 2026] [:error] [pid 37126:tid 37176] [client 172.173.121.85:65355] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/3.php"] [unique_id "afbiLfR_A42N-LtDyrsCDAAAABc"]
[Sun May 03 13:50:38.435378 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:65327] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "afbiLjhvYFGNwhnPamrWRgAAARQ"]
[Sun May 03 13:50:40.317107 2026] [:error] [pid 40386:tid 40401] [client 172.173.121.85:26728] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "afbiMFHJDYRXUf3IbRQH5QAAAM0"]
[Sun May 03 13:50:42.732268 2026] [:error] [pid 37130:tid 37222] [client 172.173.121.85:26689] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "afbiMqIu7bmXKXicRk9kQAAAAIk"]
[Sun May 03 13:50:46.378828 2026] [:error] [pid 37130:tid 37220] [client 172.173.121.85:65307] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/4.php"] [unique_id "afbiNqIu7bmXKXicRk9kRwAAAIc"]
[Sun May 03 13:50:52.091994 2026] [:error] [pid 40386:tid 40388] [client 172.173.121.85:26637] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "afbiPFHJDYRXUf3IbRQH7wAAAMA"]
[Sun May 03 13:50:57.538530 2026] [:error] [pid 37126:tid 37171] [client 172.173.121.85:26686] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "afbiQfR_A42N-LtDyrsCGAAAABI"]
[Sun May 03 13:50:58.444711 2026] [:error] [pid 37246:tid 37269] [client 172.173.121.85:65343] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "afbiQjhvYFGNwhnPamrWUQAAARM"]
[Sun May 03 13:50:59.554299 2026] [:error] [pid 40386:tid 40391] [client 172.173.121.85:65282] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/5.php"] [unique_id "afbiQ1HJDYRXUf3IbRQH9wAAAMM"]
[Sun May 03 13:51:01.181323 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:65285] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "afbiRThvYFGNwhnPamrWVwAAARQ"]
[Sun May 03 13:51:02.347366 2026] [:error] [pid 37246:tid 37256] [client 172.173.121.85:65006] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "afbiRjhvYFGNwhnPamrWXQAAAQg"]
[Sun May 03 13:51:04.678544 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:64970] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "afbiSEHBbBLrXh6PBuv_DAAAAU8"]
[Sun May 03 13:51:06.944313 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:65000] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/6.php"] [unique_id "afbiSjSujTvwdzEkjScjTAAAAYI"]
[Sun May 03 13:51:10.746549 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:65301] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "afbiTkHBbBLrXh6PBuv_OQAAAU4"]
[Sun May 03 13:51:11.786557 2026] [:error] [pid 37126:tid 37162] [client 172.173.121.85:65383] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "afbiT_R_A42N-LtDyrsCKAAAAAk"]
[Sun May 03 13:51:13.349223 2026] [:error] [pid 37130:tid 37234] [client 172.173.121.85:65384] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "afbiUaIu7bmXKXicRk9kkgAAAJU"]
[Sun May 03 13:51:14.884195 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:26701] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/9.php"] [unique_id "afbiUkHBbBLrXh6PBuv_PwAAAUQ"]
[Sun May 03 13:51:18.104424 2026] [:error] [pid 37246:tid 37273] [client 172.173.121.85:26705] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "afbiVjhvYFGNwhnPamrWeAAAARc"]
[Sun May 03 13:51:21.586806 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:26715] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "afbiWUHBbBLrXh6PBuv_QwAAAUw"]
[Sun May 03 13:51:24.009267 2026] [:error] [pid 40456:tid 40479] [client 172.173.121.85:65390] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "afbiXDSujTvwdzEkjScjVQAAAZU"]
[Sun May 03 13:51:29.694281 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:64997] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/10.php"] [unique_id "afbiYUHBbBLrXh6PBuv_eQAAAVM"]
[Sun May 03 13:51:31.613182 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:65352] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/100.php"] [unique_id "afbiYzhvYFGNwhnPamrWjwAAAQw"]
[Sun May 03 13:52:36.921600 2026] [:error] [pid 37130:tid 37221] [client 172.173.121.85:26732] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fine.php"] [unique_id "afbipKIu7bmXKXicRk9kzQAAAIg"]
[Sun May 03 13:52:40.969105 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:65321] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fine.php"] [unique_id "afbiqDhvYFGNwhnPamrW5gAAARU"]
[Sun May 03 13:52:46.404444 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:26677] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fine.php"] [unique_id "afbirqIu7bmXKXicRk9k1AAAAIA"]
[Sun May 03 13:52:48.360018 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:64987] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fine.php"] [unique_id "afbisP8khJXb5O5aWVUZyAAAAEA"]
[Sun May 03 13:52:49.343557 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:26654] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afbisThvYFGNwhnPamrW8AAAAQ0"]
[Sun May 03 13:52:49.785096 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:26648] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afbisUHBbBLrXh6PBusAuwAAAU8"]
[Sun May 03 13:52:50.326159 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:26696] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afbiskHBbBLrXh6PBusAvQAAAUQ"]
[Sun May 03 13:52:51.214244 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:26640] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afbis0HBbBLrXh6PBusAwgAAAUE"]
[Sun May 03 13:52:52.219410 2026] [:error] [pid 37126:tid 37158] [client 172.173.121.85:26722] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "afbitPR_A42N-LtDyrsCTwAAAAU"]
[Sun May 03 13:52:53.079789 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:65360] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "afbitTSujTvwdzEkjScjpAAAAYM"]
[Sun May 03 13:52:54.116171 2026] [:error] [pid 37130:tid 37232] [client 172.173.121.85:26641] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "afbitqIu7bmXKXicRk9k1wAAAJM"]
[Sun May 03 13:52:54.686898 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:65379] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xa.php"] [unique_id "afbitv8khJXb5O5aWVUZygAAAEU"]
[Sun May 03 13:52:55.706115 2026] [:error] [pid 37127:tid 37192] [client 172.173.121.85:26747] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "afbit_8khJXb5O5aWVUZzAAAAEg"]
[Sun May 03 13:52:56.693723 2026] [:error] [pid 37127:tid 37202] [client 172.173.121.85:65294] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "afbiuP8khJXb5O5aWVUZzwAAAFE"]
[Sun May 03 13:52:58.218574 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:26713] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "afbiukHBbBLrXh6PBusAxgAAAUU"]
[Sun May 03 13:52:58.972319 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:26740] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin.php"] [unique_id "afbiukHBbBLrXh6PBusAxwAAAUE"]
[Sun May 03 13:53:00.461326 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:26730] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "afbivDSujTvwdzEkjScjzwAAAZA"]
[Sun May 03 13:53:01.528477 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:64998] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "afbivTSujTvwdzEkjScj1QAAAYk"]
[Sun May 03 13:53:02.366868 2026] [:error] [pid 37126:tid 37176] [client 172.173.121.85:26638] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "afbivvR_A42N-LtDyrsCWQAAABc"]
[Sun May 03 13:53:03.257897 2026] [:error] [pid 37126:tid 37152] [client 172.173.121.85:65385] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/inege.php"] [unique_id "afbiv_R_A42N-LtDyrsCWwAAAAE"]
[Sun May 03 13:53:04.571095 2026] [:error] [pid 37130:tid 37227] [client 172.173.121.85:26699] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "afbiwKIu7bmXKXicRk9k3QAAAI4"]
[Sun May 03 13:53:05.485339 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:65404] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "afbiwUHBbBLrXh6PBusAywAAAU0"]
[Sun May 03 13:53:06.207868 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:26670] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "afbiwkHBbBLrXh6PBusAzAAAAU4"]
[Sun May 03 13:53:07.092958 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:26642] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "afbiw0HBbBLrXh6PBusA0QAAAVA"]
[Sun May 03 13:53:08.428609 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:65391] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "afbixEHBbBLrXh6PBusA0gAAAUE"]
[Sun May 03 13:53:09.116726 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:26697] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "afbixUHBbBLrXh6PBusA1AAAAUs"]
[Sun May 03 13:53:09.836848 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:65351] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "afbixUHBbBLrXh6PBusA1QAAAUg"]
[Sun May 03 13:53:12.458827 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:26694] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uuu.php"] [unique_id "afbiyEHBbBLrXh6PBusA1gAAAUY"]
[Sun May 03 13:53:15.437329 2026] [:error] [pid 37130:tid 37225] [client 172.173.121.85:26695] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "afbiy6Iu7bmXKXicRk9k4gAAAIw"]
[Sun May 03 13:53:17.362945 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:26667] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "afbizUHBbBLrXh6PBusA3AAAAVg"]
[Sun May 03 13:53:20.307757 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:26652] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "afbi0DhvYFGNwhnPamrW_wAAAQE"]
[Sun May 03 13:53:21.679727 2026] [:error] [pid 40386:tid 40409] [client 172.173.121.85:65315] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/no1.php"] [unique_id "afbi0VHJDYRXUf3IbRQIRQAAANU"]
[Sun May 03 13:53:23.031549 2026] [:error] [pid 37246:tid 37250] [client 172.173.121.85:26671] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "afbi0zhvYFGNwhnPamrXBgAAAQI"]
[Sun May 03 13:53:24.185076 2026] [:error] [pid 37130:tid 37218] [client 172.173.121.85:65371] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "afbi1KIu7bmXKXicRk9lCQAAAIU"]
[Sun May 03 13:53:25.698011 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:64225] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "afbi1aIu7bmXKXicRk9lEgAAAIA"]
[Sun May 03 13:53:27.920792 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:26672] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/w2025.php"] [unique_id "afbi10HBbBLrXh6PBusA4QAAAUc"]
[Sun May 03 13:53:28.972610 2026] [:error] [pid 37127:tid 37198] [client 172.173.121.85:65329] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "afbi2P8khJXb5O5aWVUZ1AAAAE0"]
[Sun May 03 13:53:34.310836 2026] [:error] [pid 40386:tid 40412] [client 172.173.121.85:65356] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fvvff.php"] [unique_id "afbi3lHJDYRXUf3IbRQISwAAANg"]
[Sun May 03 13:54:11.409518 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:26624] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "afbjA1HJDYRXUf3IbRQIagAAAMU"]
[Sun May 03 13:54:13.149993 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:26646] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "afbjBThvYFGNwhnPamrXhQAAAQU"]
[Sun May 03 13:54:14.328104 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:65374] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "afbjBjhvYFGNwhnPamrXjAAAAQM"]
[Sun May 03 13:54:14.879519 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:26726] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/av.php"] [unique_id "afbjBjhvYFGNwhnPamrXjwAAARY"]
[Sun May 03 13:54:16.989122 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:26665] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afbjCDhvYFGNwhnPamrXlAAAARI"]
[Sun May 03 13:54:18.632074 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:26668] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afbjCjhvYFGNwhnPamrXmAAAAQ4"]
[Sun May 03 13:54:21.241904 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:65369] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afbjDTSujTvwdzEkjSckOgAAAZQ"]
[Sun May 03 13:54:24.618325 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:26711] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afbjEDSujTvwdzEkjSckPQAAAYI"]
[Sun May 03 13:54:29.262059 2026] [:error] [pid 37127:tid 37199] [client 172.173.121.85:26634] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "afbjFf8khJXb5O5aWVUaKQAAAE4"]
[Sun May 03 13:54:30.646402 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:65362] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "afbjFkHBbBLrXh6PBusBCQAAAU4"]
[Sun May 03 13:54:32.908038 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:64978] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-act.php"] [unique_id "afbjGEHBbBLrXh6PBusBDQAAAVA"]
[Sun May 03 13:54:42.048754 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:26706] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "afbjIkHBbBLrXh6PBusBHAAAAVI"]
[Sun May 03 13:54:43.700645 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:26739] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "afbjI0HBbBLrXh6PBusBHQAAAUI"]
[Sun May 03 13:54:47.313380 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:26676] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "afbjJ0HBbBLrXh6PBusBJAAAAVY"]
[Sun May 03 13:54:47.984640 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:65355] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/aaa.php"] [unique_id "afbjJ_8khJXb5O5aWVUaNgAAAE8"]
[Sun May 03 13:54:49.506828 2026] [:error] [pid 37130:tid 37223] [client 172.173.121.85:26669] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afbjKaIu7bmXKXicRk9lPwAAAIo"]
[Sun May 03 13:54:51.832008 2026] [:error] [pid 37130:tid 37216] [client 172.173.121.85:65358] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afbjK6Iu7bmXKXicRk9lQgAAAIM"]
[Sun May 03 13:54:53.224873 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:26716] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afbjLTSujTvwdzEkjSckSwAAAYw"]
[Sun May 03 13:54:53.816156 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:26735] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afbjLUHBbBLrXh6PBusBNAAAAUM"]
[Sun May 03 13:54:54.843433 2026] [:error] [pid 37130:tid 37236] [client 172.173.121.85:26690] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afbjLqIu7bmXKXicRk9lRgAAAJc"]
[Sun May 03 13:54:55.867942 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:64963] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afbjLzhvYFGNwhnPamrXnwAAAQ0"]
[Sun May 03 13:54:57.508421 2026] [:error] [pid 40386:tid 40397] [client 172.173.121.85:26632] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afbjMVHJDYRXUf3IbRQIcAAAAMk"]
[Sun May 03 13:55:02.035930 2026] [:error] [pid 37130:tid 37231] [client 172.173.121.85:65346] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afbjNqIu7bmXKXicRk9lTwAAAJI"]
[Sun May 03 13:55:02.710335 2026] [:error] [pid 37127:tid 37199] [client 172.173.121.85:65295] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "afbjNv8khJXb5O5aWVUaQAAAAE4"]
[Sun May 03 13:55:04.243783 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:26693] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "afbjOEHBbBLrXh6PBusBOQAAAUA"]
[Sun May 03 13:55:07.500133 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:26685] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/sbhu.php"] [unique_id "afbjOzhvYFGNwhnPamrXpwAAAQo"]
[Sun May 03 13:55:18.128356 2026] [autoindex:error] [pid 37246:tid 37264] [client 172.173.121.85:26729] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 13:55:44.198951 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:26729] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin1.php"] [unique_id "afbjYDhvYFGNwhnPamrXwgAAAQo"]
[Sun May 03 13:55:45.910419 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:26684] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin1.php"] [unique_id "afbjYTSujTvwdzEkjSckYwAAAZQ"]
[Sun May 03 13:55:46.959734 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:65367] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin1.php"] [unique_id "afbjYv8khJXb5O5aWVUaTgAAAFM"]
[Sun May 03 13:55:48.483706 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:26662] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/admin1.php"] [unique_id "afbjZEHBbBLrXh6PBusBSwAAAVE"]
[Sun May 03 13:55:49.394313 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:26718] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afbjZUHBbBLrXh6PBusBTQAAAUg"]
[Sun May 03 13:55:50.852959 2026] [:error] [pid 37127:tid 37201] [client 172.173.121.85:26626] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afbjZv8khJXb5O5aWVUaUQAAAFA"]
[Sun May 03 13:55:52.751978 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:65345] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afbjaEHBbBLrXh6PBusBVAAAAVU"]
[Sun May 03 13:55:54.601410 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:26649] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afbjajhvYFGNwhnPamrXzQAAAQU"]
[Sun May 03 13:55:55.430416 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:26750] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "afbjazhvYFGNwhnPamrXzgAAAQw"]
[Sun May 03 13:55:56.355576 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:26724] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "afbjbPR_A42N-LtDyrsCmQAAABM"]
[Sun May 03 13:55:56.863846 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:65378] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "afbjbPR_A42N-LtDyrsCmgAAAAQ"]
[Sun May 03 13:55:57.855196 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:26656] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "afbjbfR_A42N-LtDyrsCmwAAAA0"]
[Sun May 03 13:56:02.005100 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:65400] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afbjcjhvYFGNwhnPamrX0gAAAQ4"]
[Sun May 03 13:56:02.777836 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:26734] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afbjckHBbBLrXh6PBusBVgAAAVM"]
[Sun May 03 13:56:08.067739 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:26717] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afbjeDSujTvwdzEkjSckbQAAAY4"]
[Sun May 03 13:56:11.003565 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:26637] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afbje0HBbBLrXh6PBusBXAAAAUw"]
[Sun May 03 13:56:13.169925 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:65382] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afbjfUHBbBLrXh6PBusBXgAAAUM"]
[Sun May 03 13:56:14.824462 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:64976] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afbjfjhvYFGNwhnPamrX0wAAARg"]
[Sun May 03 13:56:15.794764 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:26704] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afbjf0HBbBLrXh6PBusBYAAAAUo"]
[Sun May 03 13:56:17.358929 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:26631] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afbjgTSujTvwdzEkjSckcQAAAZI"]
[Sun May 03 13:56:18.084954 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:26751] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "afbjgkHBbBLrXh6PBusBYgAAAUQ"]
[Sun May 03 13:56:18.687250 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:26658] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "afbjgjSujTvwdzEkjSckdQAAAYE"]
[Sun May 03 13:56:19.081337 2026] [:error] [pid 37246:tid 37265] [client 172.173.121.85:26650] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "afbjgzhvYFGNwhnPamrX1AAAAQ8"]
[Sun May 03 13:56:19.599010 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:65299] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp.php"] [unique_id "afbjg0HBbBLrXh6PBusBZQAAAUc"]
[Sun May 03 13:56:20.708866 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:65344] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afbjhEHBbBLrXh6PBusBZgAAAUw"]
[Sun May 03 13:56:21.136329 2026] [:error] [pid 37246:tid 37255] [client 172.173.121.85:65361] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afbjhThvYFGNwhnPamrX1wAAAQc"]
[Sun May 03 13:56:22.193036 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:64962] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afbjhkHBbBLrXh6PBusBagAAAUM"]
[Sun May 03 13:56:24.632267 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:26681] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afbjiDhvYFGNwhnPamrX2gAAAQU"]
[Sun May 03 13:56:26.939671 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:65348] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "afbjijSujTvwdzEkjSckeAAAAYg"]
[Sun May 03 13:56:28.927607 2026] [:error] [pid 40386:tid 40401] [client 172.173.121.85:26635] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "afbjjFHJDYRXUf3IbRQIggAAAM0"]
[Sun May 03 13:56:33.748908 2026] [:error] [pid 37126:tid 37160] [client 172.173.121.85:65322] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "afbjkfR_A42N-LtDyrsCrAAAAAc"]
[Sun May 03 13:56:35.855647 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:26663] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/fe5.php"] [unique_id "afbjk1HJDYRXUf3IbRQI0AAAAMU"]
[Sun May 03 13:56:37.772108 2026] [:error] [pid 37127:tid 37188] [client 172.173.121.85:26653] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afbjlf8khJXb5O5aWVUaVQAAAEQ"]
[Sun May 03 13:56:40.143743 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:65359] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afbjmP8khJXb5O5aWVUaWAAAAEc"]
[Sun May 03 13:57:05.505563 2026] [:error] [pid 37130:tid 37220] [client 172.173.121.85:26633] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afbjsaIu7bmXKXicRk9laAAAAIc"]
[Sun May 03 13:57:11.624216 2026] [autoindex:error] [pid 40422:tid 40437] [client 172.173.121.85:65372] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 13:57:11.816400 2026] [autoindex:error] [pid 37246:tid 37257] [client 172.173.121.85:65293] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun May 03 13:57:24.498233 2026] [:error] [pid 37246:tid 37273] [client 172.173.121.85:65293] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "afbjxDhvYFGNwhnPamrYJAAAARc"]
[Sun May 03 13:57:28.186057 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:26661] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "afbjyDSujTvwdzEkjSckjgAAAZE"]
[Sun May 03 13:57:29.980869 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:65288] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "afbjyTSujTvwdzEkjScklAAAAZA"]
[Sun May 03 13:57:30.902497 2026] [:error] [pid 40456:tid 40479] [client 172.173.121.85:26737] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gssdd.php"] [unique_id "afbjyjSujTvwdzEkjScklQAAAZU"]
[Sun May 03 13:57:32.589563 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:65365] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afbjzDhvYFGNwhnPamrYJwAAAQ4"]
[Sun May 03 13:57:33.200992 2026] [:error] [pid 40386:tid 40409] [client 172.173.121.85:26627] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afbjzVHJDYRXUf3IbRQJQwAAANU"]
[Sun May 03 13:57:34.175103 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:26689] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afbjzjhvYFGNwhnPamrYMQAAAQM"]
[Sun May 03 13:57:34.861636 2026] [:error] [pid 37246:tid 37255] [client 172.173.121.85:26691] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afbjzjhvYFGNwhnPamrYOQAAAQc"]
[Sun May 03 13:57:35.878964 2026] [:error] [pid 37130:tid 37230] [client 172.173.121.85:65003] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "afbjz6Iu7bmXKXicRk9lbQAAAJE"]
[Sun May 03 13:57:36.717719 2026] [:error] [pid 37127:tid 37190] [client 172.173.121.85:65364] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "afbj0P8khJXb5O5aWVUadAAAAEY"]
[Sun May 03 13:57:37.565685 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:26686] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "afbj0ThvYFGNwhnPamrYPQAAARA"]
[Sun May 03 13:57:38.417075 2026] [:error] [pid 37126:tid 37169] [client 172.173.121.85:26702] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/bs1.php"] [unique_id "afbj0vR_A42N-LtDyrsDCgAAABA"]
[Sun May 03 13:57:39.794082 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:65407] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afbj00HBbBLrXh6PBusCDgAAAU0"]
[Sun May 03 13:57:42.035660 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:65357] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afbj1jSujTvwdzEkjSckngAAAYY"]
[Sun May 03 13:57:42.797336 2026] [:error] [pid 37127:tid 37209] [client 172.173.121.85:26715] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afbj1v8khJXb5O5aWVUadgAAAFc"]
[Sun May 03 13:57:43.609263 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:65384] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afbj10HBbBLrXh6PBusCJAAAAUg"]
[Sun May 03 13:57:44.291510 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:26664] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/axx.php"] [unique_id "afbj2EHBbBLrXh6PBusCJgAAAUU"]
[Sun May 03 13:57:44.703882 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:26682] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/axx.php"] [unique_id "afbj2EHBbBLrXh6PBusCJwAAAVA"]
[Sun May 03 13:57:45.097154 2026] [:error] [pid 37246:tid 37261] [client 172.173.121.85:26721] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/axx.php"] [unique_id "afbj2ThvYFGNwhnPamrYQQAAAQs"]
[Sun May 03 13:57:45.548333 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:65292] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/axx.php"] [unique_id "afbj2UHBbBLrXh6PBusCKQAAAUc"]
[Sun May 03 13:57:45.983913 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:26696] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfashell.php"] [unique_id "afbj2UHBbBLrXh6PBusCKgAAAVQ"]
[Sun May 03 13:57:46.546199 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:26645] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfashell.php"] [unique_id "afbj2kHBbBLrXh6PBusCKwAAAUM"]
[Sun May 03 13:57:47.226326 2026] [:error] [pid 37246:tid 37265] [client 172.173.121.85:65379] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfashell.php"] [unique_id "afbj2zhvYFGNwhnPamrYQgAAAQ8"]
[Sun May 03 13:57:48.069612 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:65329] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/alfashell.php"] [unique_id "afbj3EHBbBLrXh6PBusCLAAAAU0"]
[Sun May 03 13:57:48.802967 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:26655] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "afbj3EHBbBLrXh6PBusCLQAAAUo"]
[Sun May 03 13:57:49.442721 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:65389] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "afbj3UHBbBLrXh6PBusCMAAAAVg"]
[Sun May 03 13:57:50.106146 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:26673] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "afbj3kHBbBLrXh6PBusCMwAAAU8"]
[Sun May 03 13:57:50.572652 2026] [:error] [pid 40386:tid 40396] [client 172.173.121.85:26741] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/gettest.php"] [unique_id "afbj3lHJDYRXUf3IbRQJRgAAAMg"]
[Sun May 03 13:57:51.289463 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:65324] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "afbj30HBbBLrXh6PBusCNwAAAUE"]
[Sun May 03 13:57:51.853778 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:26745] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "afbj30HBbBLrXh6PBusCOAAAAVU"]
[Sun May 03 13:57:52.410568 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:65305] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "afbj4KIu7bmXKXicRk9lcAAAAIA"]
[Sun May 03 13:57:53.006448 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:26680] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/acp.php"] [unique_id "afbj4fR_A42N-LtDyrsDTQAAABM"]
[Sun May 03 13:57:53.608598 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:26748] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file48.php"] [unique_id "afbj4ThvYFGNwhnPamrYQwAAARQ"]
[Sun May 03 13:57:54.301573 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:26636] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file48.php"] [unique_id "afbj4kHBbBLrXh6PBusCPgAAAUk"]
[Sun May 03 13:57:54.695277 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:65280] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file48.php"] [unique_id "afbj4jSujTvwdzEkjSckoQAAAYk"]
[Sun May 03 13:57:55.452620 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:65311] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file48.php"] [unique_id "afbj4zhvYFGNwhnPamrYRQAAAQU"]
[Sun May 03 13:57:56.024492 2026] [:error] [pid 37130:tid 37237] [client 172.173.121.85:64987] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "afbj5KIu7bmXKXicRk9lcQAAAJg"]
[Sun May 03 13:57:56.574807 2026] [:error] [pid 37130:tid 37235] [client 172.173.121.85:64929] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "afbj5KIu7bmXKXicRk9lcwAAAJY"]
[Sun May 03 13:57:57.074770 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:65350] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "afbj5UHBbBLrXh6PBusCQwAAAVU"]
[Sun May 03 13:57:58.065170 2026] [:error] [pid 37130:tid 37220] [client 172.173.121.85:65401] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/g.php"] [unique_id "afbj5qIu7bmXKXicRk9ldQAAAIc"]
[Sun May 03 13:57:58.904174 2026] [:error] [pid 37246:tid 37252] [client 172.173.121.85:65352] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/"] [unique_id "afbj5jhvYFGNwhnPamrYSgAAAQQ"]
[Sun May 03 13:57:59.467444 2026] [:error] [pid 37130:tid 37228] [client 172.173.121.85:26728] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/"] [unique_id "afbj56Iu7bmXKXicRk9leAAAAI8"]
[Sun May 03 13:58:00.386078 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:26688] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/"] [unique_id "afbj6EHBbBLrXh6PBusCSAAAAVc"]
[Sun May 03 13:58:01.169406 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:65373] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-content/"] [unique_id "afbj6UHBbBLrXh6PBusCSQAAAUQ"]
[Sun May 03 13:58:02.379010 2026] [:error] [pid 37246:tid 37261] [client 172.173.121.85:65327] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "afbj6jhvYFGNwhnPamrYTAAAAQs"]
[Sun May 03 13:58:03.663185 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:26730] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "afbj6zhvYFGNwhnPamrYTgAAAQA"]
[Sun May 03 13:58:04.340422 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:65385] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "afbj7DhvYFGNwhnPamrYUAAAARE"]
[Sun May 03 13:58:05.002752 2026] [:error] [pid 37130:tid 37215] [client 172.173.121.85:26725] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/simple.php"] [unique_id "afbj7aIu7bmXKXicRk9legAAAII"]
[Sun May 03 13:58:05.739036 2026] [:error] [pid 37130:tid 37233] [client 172.173.121.85:26731] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ew.php"] [unique_id "afbj7aIu7bmXKXicRk9lfAAAAJQ"]
[Sun May 03 13:58:06.314397 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:26698] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ew.php"] [unique_id "afbj7kHBbBLrXh6PBusCTAAAAUY"]
[Sun May 03 13:58:06.728317 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:26671] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ew.php"] [unique_id "afbj7jhvYFGNwhnPamrYUQAAAQw"]
[Sun May 03 13:58:07.331864 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:26695] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/ew.php"] [unique_id "afbj7zSujTvwdzEkjSckqAAAAYQ"]
[Sun May 03 13:58:08.137115 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:26709] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file21.php"] [unique_id "afbj8EHBbBLrXh6PBusCTgAAAUk"]
[Sun May 03 13:58:09.421109 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:26675] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file21.php"] [unique_id "afbj8UHBbBLrXh6PBusCUQAAAVU"]
[Sun May 03 13:58:09.957772 2026] [:error] [pid 37126:tid 37164] [client 172.173.121.85:26732] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file21.php"] [unique_id "afbj8fR_A42N-LtDyrsDTgAAAAs"]
[Sun May 03 13:58:10.982755 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:65314] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file21.php"] [unique_id "afbj8jSujTvwdzEkjSckqgAAAYo"]
[Sun May 03 13:58:12.538712 2026] [:error] [pid 37246:tid 37252] [client 172.173.121.85:26638] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hypo.php"] [unique_id "afbj9DhvYFGNwhnPamrYVwAAAQQ"]
[Sun May 03 13:58:13.123001 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:26672] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hypo.php"] [unique_id "afbj9UHBbBLrXh6PBusCWAAAAUY"]
[Sun May 03 13:58:13.676156 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:65370] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hypo.php"] [unique_id "afbj9fR_A42N-LtDyrsDTwAAAAQ"]
[Sun May 03 13:58:14.520536 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:26683] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hypo.php"] [unique_id "afbj9kHBbBLrXh6PBusCWwAAAUE"]
[Sun May 03 13:58:15.237055 2026] [:error] [pid 37126:tid 37171] [client 172.173.121.85:65321] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "afbj9_R_A42N-LtDyrsDUAAAABI"]
[Sun May 03 13:58:15.710761 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:26701] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "afbj9zSujTvwdzEkjScktAAAAYQ"]
[Sun May 03 13:58:17.821153 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:65371] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "afbj-UHBbBLrXh6PBusCYAAAAUc"]
[Sun May 03 13:58:19.568711 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:26699] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/file18.php"] [unique_id "afbj-zhvYFGNwhnPamrYXAAAARQ"]
[Sun May 03 13:58:20.286534 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:65302] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "afbj_EHBbBLrXh6PBusCZgAAAU4"]
[Sun May 03 13:58:21.503777 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:26746] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/xwx1.php"] [unique_id "afbj_ThvYFGNwhnPamrYXQAAAQE"]
[Sun May 03 13:58:33.244365 2026] [autoindex:error] [pid 40422:tid 40434] [client 172.173.121.85:26726] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 04 06:26:48.691173 2026] [:error] [pid 57046:tid 57075] [client 20.104.98.52:21020] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "affLqIDA4d1tYGL7mqAmowAAAA4"]
[Mon May 04 06:26:50.473180 2026] [:error] [pid 57048:tid 57130] [client 20.104.98.52:31853] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "affLqoZINtpBgqE164JWbAAAAI0"]
[Mon May 04 06:26:57.330311 2026] [:error] [pid 57048:tid 57125] [client 20.104.98.52:52804] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "affLsYZINtpBgqE164JWdgAAAIg"]
[Mon May 04 06:27:00.901078 2026] [:error] [pid 57047:tid 57104] [client 20.104.98.52:63212] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "affLtFtCAxKLCAMkLV2evQAAAE4"]
[Mon May 04 09:54:41.196741 2026] [:error] [pid 12051:tid 12068] [client 20.9.90.138:5276] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aff8YerVB-w_PyOHK6leYwAAAU8"]
[Mon May 04 09:54:41.982332 2026] [:error] [pid 33186:tid 33199] [client 20.9.90.138:5261] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aff8Ybqlqe0DcmBS9VzujAAAAAo"]
[Mon May 04 09:54:42.753093 2026] [:error] [pid 12051:tid 12066] [client 20.9.90.138:5198] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aff8YurVB-w_PyOHK6lebQAAAU0"]
[Mon May 04 09:54:43.514670 2026] [:error] [pid 11958:tid 11971] [client 20.9.90.138:5259] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "aff8YzAK_o2NLEdfAUk9EgAAAEo"]
[Mon May 04 10:23:51.666795 2026] [autoindex:error] [pid 12022:tid 12040] [client 95.111.235.131:61198] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon May 04 10:32:34.697401 2026] [:error] [pid 33186:tid 33210] [client 45.94.31.15:61274] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afgFQrqlqe0DcmBS9VwB6QAAABU"]
[Mon May 04 10:32:35.195644 2026] [:error] [pid 12051:tid 12076] [client 45.94.31.15:61340] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afgFQ-rVB-w_PyOHK6lrVAAAAVc"]
[Mon May 04 10:32:35.681019 2026] [:error] [pid 12051:tid 12059] [client 45.94.31.15:61403] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afgFQ-rVB-w_PyOHK6lrVQAAAUY"]
[Mon May 04 10:32:38.425649 2026] [:error] [pid 33186:tid 33204] [client 45.94.31.15:61750] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afgFRrqlqe0DcmBS9VwB8AAAAA8"]
[Mon May 04 13:32:43.380515 2026] [:error] [pid 33186:tid 33196] [client 20.2.200.87:3256] [client 20.2.200.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "afgve7qlqe0DcmBS9Vw6cgAAAAc"]
[Mon May 04 13:32:43.864130 2026] [:error] [pid 64610:tid 64634] [client 20.2.200.87:5849] [client 20.2.200.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "afgve2hJ7aZW62UOoWhdjgAAARY"]
[Mon May 04 13:32:44.337559 2026] [:error] [pid 64610:tid 64632] [client 20.2.200.87:5851] [client 20.2.200.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "afgvfGhJ7aZW62UOoWhdjwAAARQ"]
[Mon May 04 13:32:44.825192 2026] [:error] [pid 64610:tid 64624] [client 20.2.200.87:3257] [client 20.2.200.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "afgvfGhJ7aZW62UOoWhdkwAAAQw"]
[Mon May 04 15:45:09.585289 2026] [:error] [pid 61150:tid 61170] [client 136.107.232.91:60617] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "afhOhe8QXWVLiwIGVpc8mAAAAVE"]
[Mon May 04 15:45:10.425488 2026] [:error] [pid 3341:tid 3352] [client 136.107.232.91:63555] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOhk9o3_LordU0wW7q1wAAAIg"]
[Mon May 04 16:06:02.739812 2026] [:error] [pid 61043:tid 61098] [client 103.172.76.104:14696] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afhTap8-LwtfURjiAbBwlwAAAFc"]
[Mon May 04 16:06:06.410735 2026] [:error] [pid 61043:tid 61084] [client 103.172.76.104:13622] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afhTbp8-LwtfURjiAbBwngAAAEk"]
[Mon May 04 16:06:12.063695 2026] [:error] [pid 61043:tid 61092] [client 103.172.76.104:13622] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afhTdJ8-LwtfURjiAbBwtAAAAFE"], referer: https://makifim.com.au/wp-login.php?redirect_to=https%3A%2F%2Fmakifim.com.au%2Fwp-admin%2F&reauth=1
[Mon May 04 16:13:50.390728 2026] [:error] [pid 61043:tid 61090] [client 103.172.76.104:6352] [client 103.172.76.104] ModSecurity: Warning. String match "get" at REQUEST_METHOD. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "4595"] [id "222212"] [rev "2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "makifim.com.au"] [uri "/wp-admin/edit-comments.php"] [unique_id "afhVPp8-LwtfURjiAbB0BwAAAE8"], referer: https://makifim.com.au/wp-admin/edit.php?post_type=pgc_simply_gallery
[Mon May 04 16:31:50.078935 2026] [proxy_fcgi:error] [pid 3341:tid 3368] [client 103.172.76.104:6085] AH01071: Got error 'PHP message: PHP Fatal error:  Maximum execution time of 55 seconds exceeded in /home/makifimc/public_html/wp-content/plugins/gotmls/images/index.php on line 1108', referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=973d69e20a90bca381b1b5ae2b38d15a&GOTMLS_mt=6fc635b156fc72845d1fe19d086f1672
[Mon May 04 16:42:31.955540 2026] [proxy_fcgi:error] [pid 3341:tid 3351] [client 103.172.76.104:17385] AH01071: Got error 'PHP message: PHP Fatal error:  Maximum execution time of 55 seconds exceeded in /home/makifimc/public_html/wp-content/plugins/gotmls/images/index.php on line 1108', referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=973d69e20a90bca381b1b5ae2b38d15a&GOTMLS_mt=6fc635b156fc72845d1fe19d086f1672
[Mon May 04 17:04:15.078797 2026] [proxy_fcgi:error] [pid 61043:tid 61082] [client 103.172.76.104:22406] AH01071: Got error 'PHP message: PHP Fatal error:  Maximum execution time of 55 seconds exceeded in /home/makifimc/public_html/wp-content/plugins/gotmls/images/index.php on line 1108', referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=973d69e20a90bca381b1b5ae2b38d15a&GOTMLS_mt=6fc635b156fc72845d1fe19d086f1672
[Mon May 04 17:09:00.985046 2026] [proxy_fcgi:error] [pid 61150:tid 61165] [client 103.172.76.104:5664] AH01071: Got error 'PHP message: PHP Fatal error:  Maximum execution time of 55 seconds exceeded in /home/makifimc/public_html/wp-content/plugins/gotmls/safe-load/trace.php on line 125', referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=973d69e20a90bca381b1b5ae2b38d15a&GOTMLS_mt=6fc635b156fc72845d1fe19d086f1672
[Mon May 04 17:17:07.588934 2026] [proxy_fcgi:error] [pid 3341:tid 3355] [client 103.172.76.104:15201] AH01067: Failed to read FastCGI header, referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=973d69e20a90bca381b1b5ae2b38d15a&GOTMLS_mt=6fc635b156fc72845d1fe19d086f1672
[Mon May 04 17:17:07.589020 2026] [proxy_fcgi:error] [pid 3341:tid 3355] (104)Connection reset by peer: [client 103.172.76.104:15201] AH01075: Error dispatching request to : , referer: https://makifim.com.au/wp-admin/admin.php?page=GOTMLS-settings&mt=973d69e20a90bca381b1b5ae2b38d15a&GOTMLS_mt=6fc635b156fc72845d1fe19d086f1672
[Tue May 05 03:01:54.805617 2026] [:error] [pid 3341:tid 3349] [client 209.87.169.66:54953] [client 209.87.169.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afjtIk9o3_LordU0wW7lugAAAIU"]
[Tue May 05 07:43:45.091004 2026] [:error] [pid 39072:tid 39109] [client 45.86.200.79:41139] [client 45.86.200.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "afkvMfolSHl4aAnrIosajgAAAEI"]
[Tue May 05 07:43:49.330959 2026] [:error] [pid 39073:tid 39148] [client 45.86.200.87:64185] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkvNf0kT1BNjk46BkdcUQAAAI4"]
[Tue May 05 07:43:50.154998 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.106:23281] [client 45.86.200.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "afkvNnG_NPOxSH0O9aT6MgAAAVM"]
[Tue May 05 07:43:51.290097 2026] [:error] [pid 39178:tid 39202] [client 45.86.200.51:30435] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkvNzaPrgTaiOD_15ugMgAAANY"]
[Tue May 05 07:43:53.542341 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.55:56375] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afkvOSepFwKgA_SKOHgEXQAAARY"]
[Tue May 05 07:43:55.019248 2026] [:error] [pid 39178:tid 39200] [client 45.86.200.78:38995] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afkvOzaPrgTaiOD_15uglwAAANQ"]
[Tue May 05 07:44:02.274290 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.89:55567] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkvQnG_NPOxSH0O9aT8PQAAAUQ"]
[Tue May 05 07:44:03.115084 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.107:59999] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkvQ3G_NPOxSH0O9aT8ZwAAAUA"]
[Tue May 05 07:44:03.661425 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.104:44501] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkvQ3G_NPOxSH0O9aT8gQAAAUs"]
[Tue May 05 07:44:05.268216 2026] [:error] [pid 41055:tid 41076] [client 45.86.200.89:35737] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkvRSepFwKgA_SKOHgFvAAAARI"]
[Tue May 05 07:44:05.801756 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.101:45777] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkvRTaPrgTaiOD_15uhnQAAAMI"]
[Tue May 05 07:44:06.361138 2026] [:error] [pid 39072:tid 39125] [client 45.86.200.111:23621] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkvRvolSHl4aAnrIoscnAAAAFI"]
[Tue May 05 07:44:07.192099 2026] [:error] [pid 39178:tid 39185] [client 45.86.200.78:36131] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkvRzaPrgTaiOD_15uhzQAAAMU"]
[Tue May 05 07:44:09.456732 2026] [:error] [pid 39073:tid 39150] [client 45.86.200.95:28025] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "afkvSf0kT1BNjk46BkdedgAAAJA"]
[Tue May 05 07:44:11.603205 2026] [:error] [pid 39072:tid 39124] [client 45.86.200.98:63489] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afkvS_olSHl4aAnrIosdFgAAAFE"]
[Tue May 05 07:44:12.447952 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.53:32669] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afkvTP0kT1BNjk46Bkde0gAAAJg"]
[Tue May 05 07:44:13.260341 2026] [:error] [pid 39073:tid 39142] [client 45.86.200.73:20155] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afkvTf0kT1BNjk46Bkde7QAAAIg"]
[Tue May 05 07:44:15.533294 2026] [:error] [pid 39073:tid 39156] [client 45.86.200.81:31827] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afkvT_0kT1BNjk46BkdfVwAAAJY"]
[Tue May 05 07:44:16.383339 2026] [:error] [pid 39178:tid 39193] [client 45.86.200.104:53405] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afkvUDaPrgTaiOD_15ui7wAAAM0"]
[Tue May 05 07:44:17.473733 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.58:42619] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "afkvUfolSHl4aAnrIosdzAAAAEo"]
[Tue May 05 07:44:18.283164 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.57:52445] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "afkvUnG_NPOxSH0O9aT-mAAAAVA"]
[Tue May 05 07:44:19.922250 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.87:50399] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkvUzaPrgTaiOD_15ujVAAAAMo"]
[Tue May 05 07:44:20.787013 2026] [:error] [pid 39071:tid 39100] [client 45.86.200.111:38199] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkvVIvmnRMz9gRzix2V3wAAABQ"]
[Tue May 05 07:44:21.607336 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.55:23793] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkvVXG_NPOxSH0O9aT_TQAAAUE"]
[Tue May 05 07:44:22.156140 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.86:24869] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkvViepFwKgA_SKOHgHoQAAARg"]
[Tue May 05 07:44:22.698711 2026] [:error] [pid 39071:tid 39098] [client 45.86.200.88:47321] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkvVovmnRMz9gRzix2WDgAAABI"]
[Tue May 05 07:44:24.130470 2026] [:error] [pid 39072:tid 39122] [client 185.82.72.4:64715] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "afkvWPolSHl4aAnrIosekQAAAE8"]
[Tue May 05 07:44:24.693531 2026] [:error] [pid 39071:tid 39099] [client 45.86.200.54:54157] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "afkvWIvmnRMz9gRzix2WPQAAABM"]
[Tue May 05 07:44:25.242792 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.100:42603] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afkvWXG_NPOxSH0O9aT_6AAAAU0"]
[Tue May 05 07:44:28.126428 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.59:51075] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "afkvXCepFwKgA_SKOHgIWwAAARc"]
[Tue May 05 07:44:29.604875 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.52:21175] [client 45.86.200.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afkvXXG_NPOxSH0O9aQA5wAAAVg"]
[Tue May 05 07:44:33.226819 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.52:21175] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afkvYXG_NPOxSH0O9aQBcwAAAU4"]
[Tue May 05 07:44:34.366153 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.86:29429] [client 45.86.200.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.86, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afkvYjaPrgTaiOD_15uk6AAAAMo"]
[Tue May 05 07:44:34.919571 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.86:29429] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/item.php"] [unique_id "afkvYjaPrgTaiOD_15uk9gAAAMo"]
[Tue May 05 07:44:37.976979 2026] [:error] [pid 41055:tid 41064] [client 45.86.200.85:41525] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afkvZSepFwKgA_SKOHgJKAAAAQY"]
[Tue May 05 07:44:40.958881 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.99:33259] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afkvaPolSHl4aAnrIosgbwAAAEo"]
[Tue May 05 07:44:42.152156 2026] [:error] [pid 39072:tid 39130] [client 185.82.72.3:51845] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afkvavolSHl4aAnrIosgkgAAAFc"]
[Tue May 05 07:44:43.579043 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.97:44305] [client 45.86.200.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.97, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "afkvazaPrgTaiOD_15ulxgAAAMc"]
[Tue May 05 07:44:43.875686 2026] [:error] [pid 39178:tid 39197] [client 45.86.200.97:44305] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afkvazaPrgTaiOD_15ulzAAAANE"]
[Tue May 05 07:44:49.316337 2026] [:error] [pid 39178:tid 39186] [client 45.86.200.92:31913] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afkvcTaPrgTaiOD_15umeQAAAMY"]
[Tue May 05 07:44:58.089388 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.95:27973] [client 45.86.200.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.95, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afkvevolSHl4aAnrIosiAgAAAEY"]
[Tue May 05 07:44:59.265620 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.95:27973] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "afkve_olSHl4aAnrIosiFAAAAFA"]
[Tue May 05 07:45:00.161786 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.85:31249] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/infi.php"] [unique_id "afkvfIvmnRMz9gRzix2ZxAAAAAM"]
[Tue May 05 07:45:01.312169 2026] [:error] [pid 39073:tid 39142] [client 45.86.200.81:53971] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "afkvff0kT1BNjk46BkdjowAAAIg"]
[Tue May 05 07:45:02.843504 2026] [:error] [pid 39178:tid 39180] [client 45.86.200.94:24399] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afkvfjaPrgTaiOD_15un8QAAAMA"]
[Tue May 05 07:45:04.413562 2026] [:error] [pid 39072:tid 39126] [client 45.86.200.108:23511] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "afkvgPolSHl4aAnrIosibgAAAFM"]
[Tue May 05 07:45:06.583399 2026] [:error] [pid 41055:tid 41073] [client 45.86.200.112:27231] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "afkvgiepFwKgA_SKOHgMQAAAAQ8"]
[Tue May 05 07:45:07.419123 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.100:63089] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "afkvg4vmnRMz9gRzix2aWgAAAAM"]
[Tue May 05 07:45:08.875202 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.97:25213] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/edit.php"] [unique_id "afkvhPolSHl4aAnrIosi0wAAAE4"]
[Tue May 05 07:45:10.316406 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.78:58515] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "afkvhv0kT1BNjk46BkdkvgAAAIc"]
[Tue May 05 07:45:11.427059 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.104:27945] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/click.php"] [unique_id "afkvhzaPrgTaiOD_15uoxAAAAMs"]
[Tue May 05 07:45:12.875524 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.80:21343] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "afkviPolSHl4aAnrIosjHAAAAEs"]
[Tue May 05 07:45:15.536984 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.105:43883] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "afkvi3G_NPOxSH0O9aQKAgAAAUM"]
[Tue May 05 07:45:16.071852 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.106:48891] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "afkvjPolSHl4aAnrIosjYQAAAEU"]
[Tue May 05 07:45:16.628738 2026] [:error] [pid 39072:tid 39116] [client 45.86.200.85:38537] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "afkvjPolSHl4aAnrIosjbgAAAEk"]
[Tue May 05 07:45:17.171315 2026] [:error] [pid 39072:tid 39110] [client 45.86.200.53:58915] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "afkvjfolSHl4aAnrIosjfAAAAEM"]
[Tue May 05 07:45:18.077162 2026] [:error] [pid 39072:tid 39120] [client 45.86.200.79:36633] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "afkvjvolSHl4aAnrIosjlQAAAE0"]
[Tue May 05 07:45:18.622895 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.107:51919] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afkvjnG_NPOxSH0O9aQKygAAAUQ"]
[Tue May 05 07:45:19.790870 2026] [:error] [pid 39072:tid 39131] [client 45.86.200.110:22445] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afkvj_olSHl4aAnrIosjwwAAAFg"]
[Tue May 05 07:45:20.359373 2026] [:error] [pid 41055:tid 41078] [client 45.86.200.78:57851] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "afkvkCepFwKgA_SKOHgN5gAAARQ"]
[Tue May 05 07:45:20.929109 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.58:51795] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "afkvkHG_NPOxSH0O9aQLMQAAAVQ"]
[Tue May 05 07:45:21.491565 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.103:21709] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "afkvkXG_NPOxSH0O9aQLSQAAAUk"]
[Tue May 05 07:45:22.509132 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.77:36257] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "afkvkvolSHl4aAnrIoskGgAAAEU"]
[Tue May 05 07:45:23.609355 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.58:63803] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "afkvk_0kT1BNjk46BkdmAwAAAJI"]
[Tue May 05 07:45:25.260286 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.90:46841] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "afkvlXG_NPOxSH0O9aQMAAAAAU4"]
[Tue May 05 07:45:27.771354 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.54:34451] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "afkvl4vmnRMz9gRzix2cZgAAAAM"]
[Tue May 05 07:45:29.184763 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.76:39971] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "afkvmfolSHl4aAnrIoslCgAAAEQ"]
[Tue May 05 07:45:29.773040 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.87:61461] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "afkvmXG_NPOxSH0O9aQMuwAAAUw"]
[Tue May 05 07:45:34.455270 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.103:56785] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afkvnnG_NPOxSH0O9aQNjAAAAVM"]
[Tue May 05 07:45:35.865319 2026] [proxy_fcgi:error] [pid 39178:tid 39192] [client 45.86.200.78:26667] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:36.151305 2026] [proxy_fcgi:error] [pid 39178:tid 39188] [client 45.86.200.78:26667] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:36.436328 2026] [proxy_fcgi:error] [pid 39178:tid 39199] [client 45.86.200.78:26667] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:37.845345 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.78:26667] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "afkvoTaPrgTaiOD_15usJAAAANg"]
[Tue May 05 07:45:38.425396 2026] [:error] [pid 39072:tid 39120] [client 45.86.200.85:47003] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "afkvovolSHl4aAnrIosmNwAAAE0"]
[Tue May 05 07:45:38.966120 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.57:41217] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "afkvoiepFwKgA_SKOHgQLAAAAQQ"]
[Tue May 05 07:45:39.512411 2026] [:error] [pid 39071:tid 39101] [client 45.86.200.83:49863] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "afkvo4vmnRMz9gRzix2d1gAAABU"]
[Tue May 05 07:45:40.047272 2026] [:error] [pid 39073:tid 39138] [client 45.86.200.55:42113] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "afkvpP0kT1BNjk46BkdoAAAAAIQ"]
[Tue May 05 07:45:41.730490 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.95:37143] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "afkvpf0kT1BNjk46BkdoUAAAAJU"]
[Tue May 05 07:45:43.720146 2026] [:error] [pid 39072:tid 39128] [client 185.82.72.4:35141] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "afkvp_olSHl4aAnrIosm1QAAAFU"]
[Tue May 05 07:45:44.302373 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.80:34833] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "afkvqHG_NPOxSH0O9aQPLwAAAUc"]
[Tue May 05 07:45:44.861872 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.55:48495] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "afkvqPolSHl4aAnrIosm-AAAAEQ"]
[Tue May 05 07:45:46.449698 2026] [:error] [pid 41055:tid 41061] [client 45.86.200.96:46331] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "afkvqiepFwKgA_SKOHgQ4QAAAQM"]
[Tue May 05 07:45:48.676400 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.101:38693] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "afkvrIvmnRMz9gRzix2e-AAAAAQ"]
[Tue May 05 07:45:49.510713 2026] [:error] [pid 41055:tid 41060] [client 45.86.200.99:34749] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "afkvrSepFwKgA_SKOHgRHAAAAQI"]
[Tue May 05 07:45:50.605135 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.110:25355] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "afkvrnG_NPOxSH0O9aQQdwAAAUc"]
[Tue May 05 07:45:56.522920 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.83:47129] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "afkvtHG_NPOxSH0O9aQRowAAAVI"]
[Tue May 05 07:45:57.974949 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.55:59301] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "afkvtfolSHl4aAnrIososwAAAFU"]
[Tue May 05 07:45:59.653369 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.104:30125] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "afkvt_olSHl4aAnrIoso8gAAAFU"]
[Tue May 05 07:46:01.543391 2026] [:error] [pid 39073:tid 39142] [client 45.86.200.91:29341] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "afkvuf0kT1BNjk46Bkdq9gAAAIg"]
[Tue May 05 07:46:06.667901 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.89:51729] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "afkvvnG_NPOxSH0O9aQTvQAAAUM"]
[Tue May 05 07:46:07.226520 2026] [:error] [pid 39178:tid 39180] [client 45.86.200.88:42087] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "afkvvzaPrgTaiOD_15uwHgAAAMA"]
[Tue May 05 07:46:08.341595 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.92:48005] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "afkvwHG_NPOxSH0O9aQUBwAAAUQ"]
[Tue May 05 07:46:09.485278 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.55:50393] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "afkvwYvmnRMz9gRzix2g_gAAAAQ"]
[Tue May 05 07:46:11.120057 2026] [:error] [pid 39072:tid 39131] [client 45.86.200.96:54869] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "afkvw_olSHl4aAnrIosqDQAAAFg"]
[Tue May 05 07:46:12.830151 2026] [:error] [pid 39073:tid 39148] [client 45.86.200.110:60489] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afkvxP0kT1BNjk46BkdsFAAAAI4"]
[Tue May 05 07:46:13.376978 2026] [:error] [pid 39178:tid 39194] [client 45.86.200.58:35401] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "afkvxTaPrgTaiOD_15uxOAAAAM4"]
[Tue May 05 07:46:16.389116 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.87:53505] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "afkvyHG_NPOxSH0O9aQVugAAAUk"]
[Tue May 05 07:46:17.258322 2026] [proxy_fcgi:error] [pid 39071:tid 39101] [client 45.86.200.81:53771] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:17.851251 2026] [:error] [pid 39071:tid 39094] [client 45.86.200.81:53771] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/function.php"] [unique_id "afkvyYvmnRMz9gRzix2hpgAAAA4"]
[Tue May 05 07:46:32.644253 2026] [:error] [pid 39178:tid 39197] [client 45.86.200.74:26489] [client 45.86.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/core-plugin/"] [unique_id "afkv2DaPrgTaiOD_15u0DwAAANE"]
[Tue May 05 07:46:53.900569 2026] [autoindex:error] [pid 39178:tid 39200] [client 45.86.200.51:23061] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 08:27:06.488146 2026] [:error] [pid 39071:tid 39089] [client 104.208.114.104:2464] [client 104.208.114.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afk5WovmnRMz9gRzix3fmAAAAAk"]
[Tue May 05 08:27:07.024964 2026] [:error] [pid 39072:tid 39107] [client 104.208.114.104:2552] [client 104.208.114.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afk5W_olSHl4aAnrIouI6AAAAEA"]
[Tue May 05 08:27:07.535043 2026] [:error] [pid 39071:tid 39085] [client 104.208.114.104:2517] [client 104.208.114.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afk5W4vmnRMz9gRzix3fmQAAAAU"]
[Tue May 05 08:27:08.052356 2026] [:error] [pid 39178:tid 39203] [client 104.208.114.104:2521] [client 104.208.114.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afk5XDaPrgTaiOD_15v_RgAAANc"]
[Tue May 05 18:02:27.923543 2026] [:error] [pid 25743:tid 25763] [client 4.193.85.177:2323] [client 4.193.85.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "afnAM2-PCMRhF5DdUnO6EgAAABA"]
[Tue May 05 18:02:28.336450 2026] [:error] [pid 25743:tid 25762] [client 4.193.85.177:6621] [client 4.193.85.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "afnANG-PCMRhF5DdUnO6FAAAAA8"]
[Tue May 05 18:02:28.726536 2026] [:error] [pid 2324:tid 2332] [client 4.193.85.177:6644] [client 4.193.85.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "afnANGqe2hrcI52A1HxFngAAAUY"]
[Tue May 05 18:02:29.134802 2026] [:error] [pid 2324:tid 2340] [client 4.193.85.177:5526] [client 4.193.85.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "afnANWqe2hrcI52A1HxFnwAAAU4"]
[Tue May 05 20:08:51.705483 2026] [:error] [pid 25744:tid 25797] [client 20.205.100.103:1312] [client 20.205.100.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afnd0yR8IuyzjkW06OPswQAAAJc"]
[Tue May 05 20:08:52.217712 2026] [:error] [pid 25744:tid 25774] [client 20.205.100.103:1531] [client 20.205.100.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afnd1CR8IuyzjkW06OPswgAAAIA"]
[Tue May 05 20:08:52.718126 2026] [:error] [pid 25743:tid 25757] [client 20.205.100.103:1861] [client 20.205.100.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afnd1G-PCMRhF5DdUnPfXAAAAAo"]
[Tue May 05 20:08:53.227130 2026] [:error] [pid 25743:tid 25754] [client 20.205.100.103:1486] [client 20.205.100.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "afnd1W-PCMRhF5DdUnPfXgAAAAc"]
[Tue May 05 22:12:20.566555 2026] [:error] [pid 25745:tid 25813] [client 194.62.107.148:27229] [client 194.62.107.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "afn6xJsd7hb7vrvCNBlWxwAAAMw"]
[Tue May 05 23:00:47.434851 2026] [autoindex:error] [pid 2324:tid 2337] [client 207.180.209.135:56585] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue May 05 23:17:54.646294 2026] [:error] [pid 25743:tid 25769] [client 45.154.98.197:58058] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afoKIm-PCMRhF5DdUnMSLQAAABY"]
[Tue May 05 23:17:55.153485 2026] [:error] [pid 2324:tid 2335] [client 45.154.98.197:58208] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afoKI2qe2hrcI52A1Hy3xwAAAUk"]
[Tue May 05 23:17:55.657291 2026] [:error] [pid 2324:tid 2350] [client 45.154.98.197:58349] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afoKI2qe2hrcI52A1Hy3ywAAAVg"]
[Tue May 05 23:17:56.674972 2026] [:error] [pid 25743:tid 25752] [client 45.154.98.197:58615] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afoKJG-PCMRhF5DdUnMSNgAAAAU"]
[Tue May 05 23:27:59.282097 2026] [:error] [pid 25744:tid 25776] [client 40.83.73.145:8855] [client 40.83.73.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php7"] [unique_id "afoMfyR8IuyzjkW06OMTkwAAAII"]
[Tue May 05 23:27:59.907619 2026] [:error] [pid 25744:tid 25788] [client 40.83.73.145:8844] [client 40.83.73.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php7"] [unique_id "afoMfyR8IuyzjkW06OMTlAAAAI4"]
[Tue May 05 23:28:00.436739 2026] [:error] [pid 25744:tid 25775] [client 40.83.73.145:7313] [client 40.83.73.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php7"] [unique_id "afoMgCR8IuyzjkW06OMTlQAAAIE"]
[Tue May 05 23:28:01.003455 2026] [:error] [pid 25835:tid 25854] [client 40.83.73.145:7300] [client 40.83.73.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/randkeyword.php7"] [unique_id "afoMgVDT5nGJyh1439z6lgAAARE"]
[Wed May 06 07:53:54.577707 2026] [:error] [pid 9664:tid 9785] [client 172.215.209.176:44661] [client 172.215.209.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.215.209.176, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "afqDEgH4OZbrg1SjsBO1RwAAAJc"]
[Wed May 06 10:34:43.424602 2026] [:error] [pid 63810:tid 63834] [client 159.223.208.187:56690] [client 159.223.208.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.208.187, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afqow3pnbsN9Zf6i5IEX3gAAAZQ"]
[Wed May 06 10:34:44.443285 2026] [:error] [pid 9653:tid 9703] [client 159.223.208.187:51312] [client 159.223.208.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.208.187, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afqoxKhJ49Xc4dqq0B5sawAAAAU"]
[Wed May 06 10:43:17.003461 2026] [:error] [pid 9659:tid 9753] [client 137.184.152.70:61484] [client 137.184.152.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.152.70, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afqqxfwJnWjd8JHpBttRwgAAANM"]
[Wed May 06 10:43:17.828547 2026] [:error] [pid 9659:tid 9754] [client 137.184.152.70:64869] [client 137.184.152.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.152.70, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afqqxfwJnWjd8JHpBttRwwAAANQ"]
[Wed May 06 10:55:49.671619 2026] [:error] [pid 9653:tid 9710] [client 137.184.152.70:57116] [client 137.184.152.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.152.70, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afqttahJ49Xc4dqq0B5zAAAAAAw"]
[Wed May 06 12:14:08.886270 2026] [autoindex:error] [pid 13414:tid 13439] [client 162.250.121.214:60810] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/plugins/photo-gallery/booster
[Wed May 06 12:14:12.275966 2026] [:error] [pid 592:tid 599] [client 162.250.121.214:60818] [client 162.250.121.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.250.121.214, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afrAFJiX28mb6xLi2PyG2QAAAoM"], referer: https://makifim.com.au/wp-admin/admin.php?page=twbbwg_photo-gallery
[Wed May 06 12:14:32.786573 2026] [autoindex:error] [pid 13443:tid 13468] [client 162.250.121.214:47558] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/images
[Wed May 06 12:14:35.420524 2026] [autoindex:error] [pid 9789:tid 9807] [client 162.250.121.214:47574] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/images
[Wed May 06 12:14:38.051622 2026] [autoindex:error] [pid 9789:tid 9801] [client 162.250.121.214:48398] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors
[Wed May 06 14:41:19.730828 2026] [:error] [pid 9653:tid 9708] [client 140.245.50.113:49298] [client 140.245.50.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "afrij6hJ49Xc4dqq0B6oQwAAAAo"]
[Wed May 06 23:20:51.715681 2026] [:error] [pid 13414:tid 13430] [client 137.184.152.70:64827] [client 137.184.152.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.152.70, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aftcU0uJQpWjVpJTu_ktsgAAAQ4"]
[Wed May 06 23:36:40.693883 2026] [:error] [pid 9789:tid 9801] [client 137.184.152.70:57386] [client 137.184.152.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.152.70, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "aftgCD_YStPJSCHPkUW2BwAAAEo"]
[Thu May 07 01:25:26.597086 2026] [:error] [pid 63810:tid 63835] [client 34.41.51.25:51833] [client 34.41.51.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.41.51.25, counter = 6"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aft5hnpnbsN9Zf6i5IFQYgAAAZU"]
[Thu May 07 01:25:27.087472 2026] [:error] [pid 482:tid 497] [client 34.41.51.25:57130] [client 34.41.51.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.41.51.25, counter = 6"] [hostname "makifim.com.au"] [uri "/"] [unique_id "aft5h8xs8HOc_nWgOW6akQAAAc0"]
[Thu May 07 01:25:27.583271 2026] [:error] [pid 482:tid 485] [client 34.41.51.25:51778] [client 34.41.51.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.41.51.25, counter = 6"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aft5h8xs8HOc_nWgOW6alAAAAcE"]
[Thu May 07 02:29:20.653949 2026] [:error] [pid 9659:tid 9754] [client 104.198.5.22:56407] [client 104.198.5.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.5.22, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afuIgPwJnWjd8JHpBtu9ywAAANQ"]
[Thu May 07 02:29:22.669148 2026] [:error] [pid 9659:tid 9737] [client 104.198.5.22:56407] [client 104.198.5.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "afuIgvwJnWjd8JHpBtu90AAAAMM"]
[Thu May 07 02:29:24.067151 2026] [:error] [pid 9659:tid 9756] [client 104.198.5.22:56407] [client 104.198.5.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.5.22, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afuIhPwJnWjd8JHpBtu91AAAANY"]
[Thu May 07 02:29:25.926969 2026] [:error] [pid 9789:tid 9793] [client 104.198.5.22:61617] [client 104.198.5.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.5.22, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afuIhT_YStPJSCHPkUXb4gAAAEI"]
[Thu May 07 02:29:27.695777 2026] [:error] [pid 9664:tid 9776] [client 104.198.5.22:64717] [client 104.198.5.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.5.22, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afuIhwH4OZbrg1SjsBOHAgAAAI4"]
[Thu May 07 02:29:29.261367 2026] [:error] [pid 482:tid 486] [client 104.198.5.22:64927] [client 104.198.5.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.5.22, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afuIicxs8HOc_nWgOW6qqAAAAcI"]
[Thu May 07 02:29:30.958295 2026] [:error] [pid 9664:tid 9781] [client 104.198.5.22:64979] [client 104.198.5.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.5.22, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afuIigH4OZbrg1SjsBOHFgAAAJM"]
[Thu May 07 02:29:30.958501 2026] [:error] [pid 9664:tid 9781] [client 104.198.5.22:64979] [client 104.198.5.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.198.5.22, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afuIigH4OZbrg1SjsBOHFgAAAJM"]
[Thu May 07 04:43:33.949966 2026] [:error] [pid 29710:tid 29733] [client 52.138.0.210:11584] [client 52.138.0.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afun9f0atTQld9Y2ht_FLQAAANU"]
[Thu May 07 04:43:34.789329 2026] [:error] [pid 29710:tid 29726] [client 52.138.0.210:11634] [client 52.138.0.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afun9v0atTQld9Y2ht_FLwAAAM4"]
[Thu May 07 04:43:35.615646 2026] [:error] [pid 29605:tid 29618] [client 52.138.0.210:11539] [client 52.138.0.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afun94nxrTjETioEY0TTIQAAAAQ"]
[Thu May 07 04:43:36.440628 2026] [:error] [pid 29605:tid 29621] [client 52.138.0.210:11528] [client 52.138.0.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "afun-InxrTjETioEY0TTJgAAAAc"]
[Thu May 07 10:30:46.794275 2026] [:error] [pid 56066:tid 56132] [client 20.43.25.175:46078] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "afv5VkYS8DGwDvklLv6acwAAAMk"]
[Thu May 07 10:30:47.206746 2026] [:error] [pid 56150:tid 56165] [client 20.43.25.175:46040] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "afv5V9u4duXJJeTigXQWngAAAE0"]
[Thu May 07 10:30:47.634144 2026] [:error] [pid 1143:tid 1165] [client 20.43.25.175:45952] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "afv5V5b7qeI8X5VYRr5J2gAAARQ"]
[Thu May 07 10:30:48.048746 2026] [:error] [pid 56065:tid 56115] [client 20.43.25.175:46057] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "afv5WHdV4hYThdnhfxDH-AAAAJM"]
[Thu May 07 10:30:48.461197 2026] [:error] [pid 1143:tid 1167] [client 20.43.25.175:45966] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "afv5WJb7qeI8X5VYRr5J2wAAARY"]
[Thu May 07 10:30:48.880573 2026] [:error] [pid 56065:tid 56111] [client 20.43.25.175:46060] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "afv5WHdV4hYThdnhfxDH-QAAAI8"]
[Thu May 07 10:30:49.291233 2026] [:error] [pid 56066:tid 56133] [client 20.43.25.175:46064] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "afv5WUYS8DGwDvklLv6adQAAAMo"]
[Thu May 07 10:30:49.714584 2026] [:error] [pid 1143:tid 1162] [client 20.43.25.175:45972] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "afv5WZb7qeI8X5VYRr5J3AAAARE"]
[Thu May 07 10:30:50.129465 2026] [:error] [pid 56150:tid 56171] [client 20.43.25.175:46030] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "afv5Wtu4duXJJeTigXQWpAAAAFM"]
[Thu May 07 10:30:50.539421 2026] [:error] [pid 56150:tid 56164] [client 20.43.25.175:45967] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "afv5Wtu4duXJJeTigXQWpwAAAEw"]
[Thu May 07 10:30:50.958535 2026] [:error] [pid 56065:tid 56097] [client 20.43.25.175:46025] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "afv5WndV4hYThdnhfxDH-wAAAIE"]
[Thu May 07 10:30:51.402188 2026] [:error] [pid 56064:tid 56089] [client 20.43.25.175:45984] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "afv5WysGkZZUEf_7QCMVcgAAABQ"]
[Thu May 07 10:30:51.846139 2026] [:error] [pid 56150:tid 56173] [client 20.43.25.175:46032] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "afv5W9u4duXJJeTigXQWqQAAAFU"]
[Thu May 07 10:30:52.269789 2026] [:error] [pid 56066:tid 56129] [client 20.43.25.175:46024] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "afv5XEYS8DGwDvklLv6aeAAAAMY"]
[Thu May 07 10:30:52.686275 2026] [:error] [pid 56150:tid 56172] [client 20.43.25.175:45963] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "afv5XNu4duXJJeTigXQWrgAAAFQ"]
[Thu May 07 10:30:53.099617 2026] [:error] [pid 56065:tid 56104] [client 20.43.25.175:45961] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "afv5XXdV4hYThdnhfxDH_AAAAIg"]
[Thu May 07 10:30:53.511024 2026] [:error] [pid 56066:tid 56145] [client 20.43.25.175:46035] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "afv5XUYS8DGwDvklLv6aeQAAANY"]
[Thu May 07 10:30:53.924175 2026] [:error] [pid 56066:tid 56136] [client 20.43.25.175:46002] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "afv5XUYS8DGwDvklLv6aegAAAM0"]
[Thu May 07 10:30:54.336622 2026] [:error] [pid 56066:tid 56139] [client 20.43.25.175:46049] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "afv5XkYS8DGwDvklLv6afAAAANA"]
[Thu May 07 10:30:54.750167 2026] [:error] [pid 56066:tid 56146] [client 20.43.25.175:46076] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "afv5XkYS8DGwDvklLv6afQAAANc"]
[Thu May 07 10:30:55.161412 2026] [:error] [pid 1143:tid 1168] [client 20.43.25.175:45955] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "afv5X5b7qeI8X5VYRr5J4AAAARc"]
[Thu May 07 10:30:55.606118 2026] [:error] [pid 56150:tid 56166] [client 20.43.25.175:46026] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "afv5X9u4duXJJeTigXQWsgAAAE4"]
[Thu May 07 10:30:56.048036 2026] [:error] [pid 56065:tid 56109] [client 20.43.25.175:46016] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "afv5YHdV4hYThdnhfxDH_gAAAI0"]
[Thu May 07 10:30:56.463859 2026] [:error] [pid 56066:tid 56130] [client 20.43.25.175:46065] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "afv5YEYS8DGwDvklLv6agAAAAMc"]
[Thu May 07 10:30:56.875859 2026] [:error] [pid 56066:tid 56131] [client 20.43.25.175:46059] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "afv5YEYS8DGwDvklLv6agQAAAMg"]
[Thu May 07 10:30:57.287603 2026] [:error] [pid 56064:tid 56078] [client 20.43.25.175:46031] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "afv5YSsGkZZUEf_7QCMVdgAAAAk"]
[Thu May 07 10:30:57.732458 2026] [:error] [pid 56065:tid 56105] [client 20.43.25.175:45958] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "afv5YXdV4hYThdnhfxDIAAAAAIk"]
[Thu May 07 10:30:58.175949 2026] [:error] [pid 1143:tid 1156] [client 20.43.25.175:45954] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "afv5Ypb7qeI8X5VYRr5J4wAAAQs"]
[Thu May 07 10:30:58.593310 2026] [:error] [pid 1143:tid 1155] [client 20.43.25.175:45964] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "afv5Ypb7qeI8X5VYRr5J5AAAAQo"]
[Thu May 07 10:30:59.007847 2026] [:error] [pid 1143:tid 1157] [client 20.43.25.175:46062] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "afv5Y5b7qeI8X5VYRr5J5QAAAQw"]
[Thu May 07 10:30:59.447836 2026] [:error] [pid 56065:tid 56107] [client 20.43.25.175:45928] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "afv5Y3dV4hYThdnhfxDIAgAAAIs"]
[Thu May 07 10:30:59.889538 2026] [:error] [pid 56065:tid 56116] [client 20.43.25.175:46051] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "afv5Y3dV4hYThdnhfxDIBAAAAJQ"]
[Thu May 07 10:31:00.308849 2026] [:error] [pid 56064:tid 56069] [client 20.43.25.175:46042] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "afv5ZCsGkZZUEf_7QCMVewAAAAA"]
[Thu May 07 10:31:00.736737 2026] [:error] [pid 56064:tid 56079] [client 20.43.25.175:46033] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "afv5ZCsGkZZUEf_7QCMVfAAAAAo"]
[Thu May 07 10:31:01.149147 2026] [:error] [pid 56150:tid 56158] [client 20.43.25.175:45971] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "afv5Zdu4duXJJeTigXQWtQAAAEY"]
[Thu May 07 10:31:01.561815 2026] [:error] [pid 56150:tid 56175] [client 20.43.25.175:46050] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "afv5Zdu4duXJJeTigXQWtgAAAFc"]
[Thu May 07 10:31:01.982141 2026] [:error] [pid 56150:tid 56157] [client 20.43.25.175:46070] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "afv5Zdu4duXJJeTigXQWuAAAAEU"]
[Thu May 07 10:31:02.393075 2026] [:error] [pid 1143:tid 1149] [client 20.43.25.175:45981] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "afv5Zpb7qeI8X5VYRr5J_QAAAQQ"]
[Thu May 07 10:31:02.806553 2026] [:error] [pid 1143:tid 1166] [client 20.43.25.175:45900] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "afv5Zpb7qeI8X5VYRr5J_gAAARU"]
[Thu May 07 10:31:03.219621 2026] [:error] [pid 56066:tid 56144] [client 20.43.25.175:46041] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "afv5Z0YS8DGwDvklLv6ajwAAANU"]
[Thu May 07 10:31:03.633300 2026] [:error] [pid 56066:tid 56125] [client 20.43.25.175:46020] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "afv5Z0YS8DGwDvklLv6akAAAAMI"]
[Thu May 07 10:31:04.047966 2026] [:error] [pid 56064:tid 56076] [client 20.43.25.175:45957] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "afv5aCsGkZZUEf_7QCMVfwAAAAc"]
[Thu May 07 10:31:04.460559 2026] [:error] [pid 1143:tid 1156] [client 20.43.25.175:46054] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "afv5aJb7qeI8X5VYRr5KAwAAAQs"]
[Thu May 07 10:31:04.890821 2026] [:error] [pid 56064:tid 56091] [client 20.43.25.175:46058] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "afv5aCsGkZZUEf_7QCMVgAAAABY"]
[Thu May 07 10:31:05.302766 2026] [:error] [pid 56150:tid 56164] [client 20.43.25.175:46043] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "afv5adu4duXJJeTigXQWvgAAAEw"]
[Thu May 07 10:31:05.730916 2026] [:error] [pid 1143:tid 1154] [client 20.43.25.175:46074] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "afv5aZb7qeI8X5VYRr5KBwAAAQk"]
[Thu May 07 10:31:06.147339 2026] [:error] [pid 56150:tid 56174] [client 20.43.25.175:46061] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "afv5atu4duXJJeTigXQWwwAAAFY"]
[Thu May 07 10:31:06.563486 2026] [:error] [pid 56064:tid 56074] [client 20.43.25.175:46067] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "afv5aisGkZZUEf_7QCMVggAAAAU"]
[Thu May 07 10:31:06.985157 2026] [:error] [pid 1143:tid 1147] [client 20.43.25.175:45924] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "afv5apb7qeI8X5VYRr5KGAAAAQI"]
[Thu May 07 10:31:07.396692 2026] [:error] [pid 1143:tid 1164] [client 20.43.25.175:45988] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "afv5a5b7qeI8X5VYRr5KIAAAARM"]
[Thu May 07 10:31:07.814855 2026] [:error] [pid 56150:tid 56168] [client 20.43.25.175:45970] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "afv5a9u4duXJJeTigXQW1AAAAFA"]
[Thu May 07 10:31:08.228096 2026] [:error] [pid 1143:tid 1154] [client 20.43.25.175:46027] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "afv5bJb7qeI8X5VYRr5KKgAAAQk"]
[Thu May 07 10:31:08.641064 2026] [:error] [pid 56065:tid 56106] [client 20.43.25.175:45960] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "afv5bHdV4hYThdnhfxDIHAAAAIo"]
[Thu May 07 10:31:09.060626 2026] [:error] [pid 56064:tid 56079] [client 20.43.25.175:45965] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "afv5bSsGkZZUEf_7QCMViwAAAAo"]
[Thu May 07 10:31:09.513410 2026] [:error] [pid 56150:tid 56167] [client 20.43.25.175:46079] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "afv5bdu4duXJJeTigXQW_gAAAE8"]
[Thu May 07 10:31:09.960542 2026] [:error] [pid 56150:tid 56155] [client 20.43.25.175:45907] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "afv5bdu4duXJJeTigXQXAwAAAEM"]
[Thu May 07 10:31:10.375181 2026] [:error] [pid 1143:tid 1159] [client 20.43.25.175:46013] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "afv5bpb7qeI8X5VYRr5KWQAAAQ4"]
[Thu May 07 10:31:10.796371 2026] [:error] [pid 1143:tid 1166] [client 20.43.25.175:46073] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "afv5bpb7qeI8X5VYRr5KWgAAARU"]
[Thu May 07 10:31:11.211845 2026] [:error] [pid 56066:tid 56132] [client 20.43.25.175:45993] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "afv5b0YS8DGwDvklLv6a1gAAAMk"]
[Thu May 07 10:31:11.639881 2026] [:error] [pid 56150:tid 56165] [client 20.43.25.175:45992] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "afv5b9u4duXJJeTigXQXBQAAAE0"]
[Thu May 07 10:31:12.059655 2026] [:error] [pid 56065:tid 56097] [client 20.43.25.175:46010] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afv5cHdV4hYThdnhfxDIHQAAAIE"]
[Thu May 07 10:31:12.474804 2026] [:error] [pid 56150:tid 56169] [client 20.43.25.175:46005] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afv5cNu4duXJJeTigXQXBgAAAFE"]
[Thu May 07 10:31:12.904316 2026] [:error] [pid 56065:tid 56103] [client 20.43.25.175:46053] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afv5cHdV4hYThdnhfxDIHgAAAIc"]
[Thu May 07 10:31:13.315954 2026] [:error] [pid 56065:tid 56120] [client 20.43.25.175:46069] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afv5cXdV4hYThdnhfxDIHwAAAJg"]
[Thu May 07 10:31:13.744932 2026] [:error] [pid 1143:tid 1155] [client 20.43.25.175:46006] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "afv5cZb7qeI8X5VYRr5KZAAAAQo"]
[Thu May 07 10:31:14.160365 2026] [:error] [pid 1143:tid 1149] [client 20.43.25.175:45994] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "afv5cpb7qeI8X5VYRr5KZwAAAQQ"]
[Thu May 07 10:31:14.571117 2026] [:error] [pid 1143:tid 1153] [client 20.43.25.175:45983] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "afv5cpb7qeI8X5VYRr5KaAAAAQg"]
[Thu May 07 10:31:14.986245 2026] [:error] [pid 1143:tid 1148] [client 20.43.25.175:45997] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "afv5cpb7qeI8X5VYRr5KagAAAQM"]
[Thu May 07 10:31:15.397869 2026] [:error] [pid 1143:tid 1151] [client 20.43.25.175:45979] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "afv5c5b7qeI8X5VYRr5KawAAAQY"]
[Thu May 07 10:31:15.827438 2026] [:error] [pid 56066:tid 56142] [client 20.43.25.175:46023] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "afv5c0YS8DGwDvklLv6a2wAAANM"]
[Thu May 07 10:31:16.239296 2026] [:error] [pid 56066:tid 56126] [client 20.43.25.175:45897] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "afv5dEYS8DGwDvklLv6a3QAAAMM"]
[Thu May 07 10:31:16.665636 2026] [:error] [pid 56066:tid 56131] [client 20.43.25.175:46066] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "afv5dEYS8DGwDvklLv6a3gAAAMg"]
[Thu May 07 10:31:17.083965 2026] [:error] [pid 1143:tid 1163] [client 20.43.25.175:46015] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "afv5dZb7qeI8X5VYRr5KbgAAARI"]
[Thu May 07 10:31:17.496559 2026] [:error] [pid 56066:tid 56143] [client 20.43.25.175:45938] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "afv5dUYS8DGwDvklLv6a4AAAANQ"]
[Thu May 07 10:31:17.910567 2026] [:error] [pid 56064:tid 56088] [client 20.43.25.175:46047] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "afv5dSsGkZZUEf_7QCMVjAAAABM"]
[Thu May 07 10:31:18.321839 2026] [:error] [pid 56065:tid 56109] [client 20.43.25.175:45894] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "afv5dndV4hYThdnhfxDIIQAAAI0"]
[Thu May 07 10:31:18.762759 2026] [:error] [pid 56150:tid 56155] [client 20.43.25.175:45902] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "afv5dtu4duXJJeTigXQXDAAAAEM"]
[Thu May 07 10:31:19.235948 2026] [:error] [pid 56150:tid 56174] [client 20.43.25.175:45898] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "afv5d9u4duXJJeTigXQXDwAAAFY"]
[Thu May 07 10:31:19.687564 2026] [:error] [pid 1143:tid 1162] [client 20.43.25.175:46052] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "afv5d5b7qeI8X5VYRr5KdgAAARE"]
[Thu May 07 10:31:20.127054 2026] [:error] [pid 1143:tid 1148] [client 20.43.25.175:45977] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "afv5eJb7qeI8X5VYRr5KdwAAAQM"]
[Thu May 07 10:31:20.543396 2026] [:error] [pid 1143:tid 1150] [client 20.43.25.175:45990] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afv5eJb7qeI8X5VYRr5KewAAAQU"]
[Thu May 07 10:31:20.955807 2026] [:error] [pid 56150:tid 56153] [client 20.43.25.175:45976] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afv5eNu4duXJJeTigXQXFwAAAEE"]
[Thu May 07 10:31:21.391179 2026] [:error] [pid 1143:tid 1154] [client 20.43.25.175:45905] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afv5eZb7qeI8X5VYRr5KfwAAAQk"]
[Thu May 07 10:31:21.809002 2026] [:error] [pid 1143:tid 1146] [client 20.43.25.175:45987] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afv5eZb7qeI8X5VYRr5KhAAAAQE"]
[Thu May 07 10:31:22.239591 2026] [:error] [pid 56066:tid 56147] [client 20.43.25.175:45969] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "afv5ekYS8DGwDvklLv6a4gAAANg"]
[Thu May 07 10:31:22.651535 2026] [:error] [pid 56150:tid 56160] [client 20.43.25.175:45893] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "afv5etu4duXJJeTigXQXIAAAAEg"]
[Thu May 07 10:31:23.095723 2026] [:error] [pid 56066:tid 56135] [client 20.43.25.175:46008] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "afv5e0YS8DGwDvklLv6a4wAAAMw"]
[Thu May 07 10:31:23.538040 2026] [:error] [pid 56065:tid 56117] [client 20.43.25.175:46055] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "afv5e3dV4hYThdnhfxDIIgAAAJU"]
[Thu May 07 10:31:23.954012 2026] [:error] [pid 56064:tid 56085] [client 20.43.25.175:45945] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afv5eysGkZZUEf_7QCMVjQAAABA"]
[Thu May 07 10:31:24.375193 2026] [:error] [pid 56065:tid 56116] [client 20.43.25.175:45978] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afv5fHdV4hYThdnhfxDIIwAAAJQ"]
[Thu May 07 10:31:24.791851 2026] [:error] [pid 56065:tid 56114] [client 20.43.25.175:46004] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afv5fHdV4hYThdnhfxDIJQAAAJI"]
[Thu May 07 10:31:25.205835 2026] [:error] [pid 1143:tid 1151] [client 20.43.25.175:45985] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afv5fZb7qeI8X5VYRr5KoAAAAQY"]
[Thu May 07 10:31:25.617116 2026] [:error] [pid 56150:tid 56159] [client 20.43.25.175:45912] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afv5fdu4duXJJeTigXQXZQAAAEc"]
[Thu May 07 10:31:26.030693 2026] [:error] [pid 56150:tid 56166] [client 20.43.25.175:46037] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afv5ftu4duXJJeTigXQXZgAAAE4"]
[Thu May 07 10:31:26.442779 2026] [:error] [pid 56066:tid 56129] [client 20.43.25.175:45849] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afv5fkYS8DGwDvklLv6a5wAAAMY"]
[Thu May 07 10:31:26.858704 2026] [:error] [pid 56066:tid 56145] [client 20.43.25.175:45933] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afv5fkYS8DGwDvklLv6a6AAAANY"]
[Thu May 07 10:31:27.300504 2026] [:error] [pid 56150:tid 56167] [client 20.43.25.175:45973] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "afv5f9u4duXJJeTigXQXbQAAAE8"]
[Thu May 07 10:31:27.748588 2026] [:error] [pid 56066:tid 56142] [client 20.43.25.175:45959] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "afv5f0YS8DGwDvklLv6a6QAAANM"]
[Thu May 07 10:31:28.169366 2026] [:error] [pid 1143:tid 1169] [client 20.43.25.175:45974] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "afv5gJb7qeI8X5VYRr5KogAAARg"]
[Thu May 07 10:31:28.584894 2026] [:error] [pid 1143:tid 1164] [client 20.43.25.175:45949] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "afv5gJb7qeI8X5VYRr5KpAAAARM"]
[Thu May 07 10:31:29.009977 2026] [:error] [pid 56150:tid 56152] [client 20.43.25.175:46056] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "afv5gdu4duXJJeTigXQXcAAAAEA"]
[Thu May 07 10:31:29.424250 2026] [:error] [pid 1143:tid 1163] [client 20.43.25.175:45890] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "afv5gZb7qeI8X5VYRr5KpwAAARI"]
[Thu May 07 10:31:29.842392 2026] [:error] [pid 1143:tid 1162] [client 20.43.25.175:45921] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "afv5gZb7qeI8X5VYRr5KqAAAARE"]
[Thu May 07 10:31:30.254764 2026] [:error] [pid 1143:tid 1154] [client 20.43.25.175:45975] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "afv5gpb7qeI8X5VYRr5KqgAAAQk"]
[Thu May 07 10:31:30.677933 2026] [:error] [pid 56150:tid 56154] [client 20.43.25.175:46014] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "afv5gtu4duXJJeTigXQXcwAAAEI"]
[Thu May 07 10:31:31.120437 2026] [:error] [pid 56150:tid 56169] [client 20.43.25.175:46075] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "afv5g9u4duXJJeTigXQXdAAAAFE"]
[Thu May 07 10:31:31.568035 2026] [:error] [pid 56150:tid 56173] [client 20.43.25.175:45906] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "afv5g9u4duXJJeTigXQXdwAAAFU"]
[Thu May 07 10:31:31.982558 2026] [:error] [pid 56150:tid 56167] [client 20.43.25.175:45962] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "afv5g9u4duXJJeTigXQXeQAAAE8"]
[Thu May 07 10:31:32.397074 2026] [:error] [pid 56064:tid 56093] [client 20.43.25.175:45953] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "afv5hCsGkZZUEf_7QCMVjwAAABg"]
[Thu May 07 10:31:32.819642 2026] [:error] [pid 56064:tid 56092] [client 20.43.25.175:45982] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "afv5hCsGkZZUEf_7QCMVkAAAABc"]
[Thu May 07 10:31:33.238586 2026] [:error] [pid 56064:tid 56072] [client 20.43.25.175:45936] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "afv5hSsGkZZUEf_7QCMVkQAAAAM"]
[Thu May 07 10:31:33.654760 2026] [:error] [pid 56066:tid 56130] [client 20.43.25.175:45935] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "afv5hUYS8DGwDvklLv6a7wAAAMc"]
[Thu May 07 10:31:34.069673 2026] [:error] [pid 56064:tid 56077] [client 20.43.25.175:46063] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "afv5hisGkZZUEf_7QCMVlAAAAAg"]
[Thu May 07 10:31:34.481851 2026] [:error] [pid 1143:tid 1147] [client 20.43.25.175:45888] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "afv5hpb7qeI8X5VYRr5KsAAAAQI"]
[Thu May 07 10:31:34.905178 2026] [:error] [pid 1143:tid 1163] [client 20.43.25.175:45950] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "afv5hpb7qeI8X5VYRr5KtQAAARI"]
[Thu May 07 10:31:35.319443 2026] [:error] [pid 56065:tid 56104] [client 20.43.25.175:45989] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "afv5h3dV4hYThdnhfxDIKwAAAIg"]
[Thu May 07 10:31:35.736420 2026] [:error] [pid 56066:tid 56138] [client 20.43.25.175:46039] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "afv5h0YS8DGwDvklLv6a8wAAAM8"]
[Thu May 07 10:31:36.152347 2026] [:error] [pid 56066:tid 56141] [client 20.43.25.175:45895] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "afv5iEYS8DGwDvklLv6a9wAAANI"]
[Thu May 07 10:31:36.593194 2026] [:error] [pid 56065:tid 56103] [client 20.43.25.175:45932] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "afv5iHdV4hYThdnhfxDILAAAAIc"]
[Thu May 07 10:31:37.036168 2026] [:error] [pid 56066:tid 56131] [client 20.43.25.175:46034] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "afv5iUYS8DGwDvklLv6a-wAAAMg"]
[Thu May 07 10:31:37.454269 2026] [:error] [pid 56066:tid 56146] [client 20.43.25.175:45908] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "afv5iUYS8DGwDvklLv6a_QAAANc"]
[Thu May 07 10:31:37.867712 2026] [:error] [pid 1143:tid 1165] [client 20.43.25.175:45910] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "afv5iZb7qeI8X5VYRr5KtwAAARQ"]
[Thu May 07 10:31:38.281657 2026] [:error] [pid 1143:tid 1155] [client 20.43.25.175:45995] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "afv5ipb7qeI8X5VYRr5KuAAAAQo"]
[Thu May 07 10:31:38.695656 2026] [:error] [pid 56064:tid 56081] [client 20.43.25.175:45923] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "afv5iisGkZZUEf_7QCMVmQAAAAw"]
[Thu May 07 10:31:39.140966 2026] [:error] [pid 56066:tid 56141] [client 20.43.25.175:46068] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afv5i0YS8DGwDvklLv6bAgAAANI"]
[Thu May 07 10:31:39.583963 2026] [:error] [pid 1143:tid 1153] [client 20.43.25.175:45915] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afv5i5b7qeI8X5VYRr5KugAAAQg"]
[Thu May 07 10:31:40.003120 2026] [:error] [pid 56064:tid 56086] [client 20.43.25.175:45939] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afv5jCsGkZZUEf_7QCMVmwAAABE"]
[Thu May 07 10:31:40.415722 2026] [:error] [pid 56066:tid 56132] [client 20.43.25.175:45763] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afv5jEYS8DGwDvklLv6bBAAAAMk"]
[Thu May 07 10:31:40.827061 2026] [:error] [pid 56064:tid 56088] [client 20.43.25.175:45956] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "afv5jCsGkZZUEf_7QCMVnQAAABM"]
[Thu May 07 10:31:41.238829 2026] [:error] [pid 56066:tid 56145] [client 20.43.25.175:45934] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "afv5jUYS8DGwDvklLv6bBQAAANY"]
[Thu May 07 10:31:41.653650 2026] [:error] [pid 56065:tid 56112] [client 20.43.25.175:45875] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "afv5jXdV4hYThdnhfxDILQAAAJA"]
[Thu May 07 10:31:42.096381 2026] [:error] [pid 56065:tid 56109] [client 20.43.25.175:46003] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "afv5jndV4hYThdnhfxDILgAAAI0"]
[Thu May 07 10:31:42.537480 2026] [:error] [pid 56066:tid 56143] [client 20.43.25.175:45859] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afv5jkYS8DGwDvklLv6bCAAAANQ"]
[Thu May 07 10:31:42.952137 2026] [:error] [pid 56064:tid 56074] [client 20.43.25.175:46021] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afv5jisGkZZUEf_7QCMVpgAAAAU"]
[Thu May 07 10:31:43.364212 2026] [:error] [pid 56065:tid 56117] [client 20.43.25.175:45839] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afv5j3dV4hYThdnhfxDIMAAAAJU"]
[Thu May 07 10:31:43.776272 2026] [:error] [pid 1143:tid 1152] [client 20.43.25.175:45903] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afv5j5b7qeI8X5VYRr5KvQAAAQc"]
[Thu May 07 10:31:44.188736 2026] [:error] [pid 1143:tid 1169] [client 20.43.25.175:45913] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "afv5kJb7qeI8X5VYRr5KvgAAARg"]
[Thu May 07 10:31:44.600991 2026] [:error] [pid 1143:tid 1163] [client 20.43.25.175:46009] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "afv5kJb7qeI8X5VYRr5KvwAAARI"]
[Thu May 07 10:39:41.718640 2026] [:error] [pid 1143:tid 1153] [client 20.43.25.175:46058] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "afv7bZb7qeI8X5VYRr5N0gAAAQg"]
[Thu May 07 10:39:42.151899 2026] [:error] [pid 1143:tid 1156] [client 20.43.25.175:46036] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "afv7bpb7qeI8X5VYRr5N1QAAAQs"]
[Thu May 07 10:39:42.581444 2026] [:error] [pid 1143:tid 1166] [client 20.43.25.175:46050] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "afv7bpb7qeI8X5VYRr5N1wAAARU"]
[Thu May 07 10:39:43.006852 2026] [:error] [pid 1143:tid 1161] [client 20.43.25.175:46056] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "afv7b5b7qeI8X5VYRr5N2gAAARA"]
[Thu May 07 10:39:43.418777 2026] [:error] [pid 56150:tid 56174] [client 20.43.25.175:46032] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "afv7b9u4duXJJeTigXQZdQAAAFY"]
[Thu May 07 10:39:43.830902 2026] [:error] [pid 1143:tid 1163] [client 20.43.25.175:46063] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "afv7b5b7qeI8X5VYRr5N4AAAARI"]
[Thu May 07 10:39:44.274823 2026] [:error] [pid 1143:tid 1153] [client 20.43.25.175:45958] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "afv7cJb7qeI8X5VYRr5N5AAAAQg"]
[Thu May 07 10:39:44.718613 2026] [:error] [pid 56150:tid 56159] [client 20.43.25.175:46053] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "afv7cNu4duXJJeTigXQZdwAAAEc"]
[Thu May 07 10:39:45.133205 2026] [:error] [pid 1143:tid 1151] [client 20.43.25.175:46042] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "afv7cZb7qeI8X5VYRr5N5QAAAQY"]
[Thu May 07 10:39:45.545333 2026] [:error] [pid 1143:tid 1149] [client 20.43.25.175:45978] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "afv7cZb7qeI8X5VYRr5N5gAAAQQ"]
[Thu May 07 10:39:45.991319 2026] [:error] [pid 1143:tid 1162] [client 20.43.25.175:46026] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "afv7cZb7qeI8X5VYRr5N6gAAARE"]
[Thu May 07 10:39:46.431633 2026] [:error] [pid 56065:tid 56108] [client 20.43.25.175:45971] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "afv7cndV4hYThdnhfxDJ0AAAAIw"]
[Thu May 07 10:39:46.846105 2026] [:error] [pid 56065:tid 56097] [client 20.43.25.175:46051] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "afv7cndV4hYThdnhfxDJ0QAAAIE"]
[Thu May 07 10:39:47.270679 2026] [:error] [pid 56150:tid 56172] [client 20.43.25.175:45962] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "afv7c9u4duXJJeTigXQZegAAAFQ"]
[Thu May 07 10:39:47.683039 2026] [:error] [pid 1143:tid 1149] [client 20.43.25.175:46062] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "afv7c5b7qeI8X5VYRr5N9wAAAQQ"]
[Thu May 07 10:39:48.135667 2026] [:error] [pid 56150:tid 56165] [client 20.43.25.175:46079] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "afv7dNu4duXJJeTigXQZfAAAAE0"]
[Thu May 07 10:39:48.588011 2026] [:error] [pid 56150:tid 56160] [client 20.43.25.175:46019] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "afv7dNu4duXJJeTigXQZfQAAAEg"]
[Thu May 07 10:39:49.002523 2026] [:error] [pid 56065:tid 56118] [client 20.43.25.175:46074] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "afv7dXdV4hYThdnhfxDJ4AAAAJY"]
[Thu May 07 10:39:49.445629 2026] [:error] [pid 56066:tid 56131] [client 20.43.25.175:46075] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "afv7dUYS8DGwDvklLv6cewAAAMg"]
[Thu May 07 10:39:49.920463 2026] [:error] [pid 56066:tid 56134] [client 20.43.25.175:46045] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "afv7dUYS8DGwDvklLv6cfQAAAMs"]
[Thu May 07 10:39:50.412366 2026] [:error] [pid 1143:tid 1161] [client 20.43.25.175:46067] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "afv7dpb7qeI8X5VYRr5N-wAAARA"]
[Thu May 07 10:39:50.871541 2026] [:error] [pid 56066:tid 56140] [client 20.43.25.175:45961] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "afv7dkYS8DGwDvklLv6cgAAAANE"]
[Thu May 07 10:39:51.283119 2026] [:error] [pid 56066:tid 56133] [client 20.43.25.175:46046] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "afv7d0YS8DGwDvklLv6cggAAAMo"]
[Thu May 07 10:39:51.701037 2026] [:error] [pid 56066:tid 56130] [client 20.43.25.175:46040] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "afv7d0YS8DGwDvklLv6cgwAAAMc"]
[Thu May 07 10:39:52.115194 2026] [:error] [pid 1143:tid 1155] [client 20.43.25.175:45955] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "afv7eJb7qeI8X5VYRr5N_gAAAQo"]
[Thu May 07 10:39:52.526600 2026] [:error] [pid 1143:tid 1152] [client 20.43.25.175:46039] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "afv7eJb7qeI8X5VYRr5N_wAAAQc"]
[Thu May 07 10:39:52.944914 2026] [:error] [pid 1143:tid 1159] [client 20.43.25.175:45965] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "afv7eJb7qeI8X5VYRr5OAAAAAQ4"]
[Thu May 07 10:39:53.359599 2026] [:error] [pid 1143:tid 1160] [client 20.43.25.175:46017] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "afv7eZb7qeI8X5VYRr5OAQAAAQ8"]
[Thu May 07 10:39:53.817954 2026] [:error] [pid 56066:tid 56135] [client 20.43.25.175:46037] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "afv7eUYS8DGwDvklLv6ciAAAAMw"]
[Thu May 07 10:39:54.309271 2026] [:error] [pid 1143:tid 1157] [client 20.43.25.175:45984] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "afv7epb7qeI8X5VYRr5OAgAAAQw"]
[Thu May 07 10:39:54.757949 2026] [:error] [pid 1143:tid 1166] [client 20.43.25.175:46034] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "afv7epb7qeI8X5VYRr5OBAAAARU"]
[Thu May 07 10:39:55.185264 2026] [:error] [pid 1143:tid 1161] [client 20.43.25.175:46048] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "afv7e5b7qeI8X5VYRr5OBwAAARA"]
[Thu May 07 10:39:55.645264 2026] [:error] [pid 1143:tid 1162] [client 20.43.25.175:45953] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "afv7e5b7qeI8X5VYRr5OCQAAARE"]
[Thu May 07 10:39:56.117520 2026] [:error] [pid 56066:tid 56128] [client 20.43.25.175:46049] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "afv7fEYS8DGwDvklLv6cjAAAAMU"]
[Thu May 07 10:39:56.531261 2026] [:error] [pid 1143:tid 1150] [client 20.43.25.175:46011] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "afv7fJb7qeI8X5VYRr5ODAAAAQU"]
[Thu May 07 10:39:57.003429 2026] [:error] [pid 1143:tid 1147] [client 20.43.25.175:45968] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "afv7fZb7qeI8X5VYRr5ODQAAAQI"]
[Thu May 07 10:39:57.519575 2026] [:error] [pid 1143:tid 1153] [client 20.43.25.175:46022] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "afv7fZb7qeI8X5VYRr5OEAAAAQg"]
[Thu May 07 10:39:57.983800 2026] [:error] [pid 1143:tid 1159] [client 20.43.25.175:45888] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "afv7fZb7qeI8X5VYRr5OEgAAAQ4"]
[Thu May 07 10:39:58.395730 2026] [:error] [pid 56150:tid 56170] [client 20.43.25.175:45970] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "afv7ftu4duXJJeTigXQZfwAAAFI"]
[Thu May 07 10:39:58.814096 2026] [:error] [pid 56150:tid 56153] [client 20.43.25.175:46047] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "afv7ftu4duXJJeTigXQZgQAAAEE"]
[Thu May 07 10:39:59.224819 2026] [:error] [pid 1143:tid 1162] [client 20.43.25.175:45967] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "afv7f5b7qeI8X5VYRr5OFQAAARE"]
[Thu May 07 10:39:59.643694 2026] [:error] [pid 1143:tid 1148] [client 20.43.25.175:45972] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "afv7f5b7qeI8X5VYRr5OFgAAAQM"]
[Thu May 07 10:40:00.059394 2026] [:error] [pid 56150:tid 56158] [client 20.43.25.175:46041] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "afv7gNu4duXJJeTigXQZhAAAAEY"]
[Thu May 07 10:40:00.475180 2026] [:error] [pid 56150:tid 56161] [client 20.43.25.175:45900] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "afv7gNu4duXJJeTigXQZhgAAAEk"]
[Thu May 07 10:40:00.893447 2026] [:error] [pid 56064:tid 56083] [client 20.43.25.175:46000] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "afv7gCsGkZZUEf_7QCMXOgAAAA4"]
[Thu May 07 10:40:01.315946 2026] [:error] [pid 56150:tid 56164] [client 20.43.25.175:45899] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "afv7gdu4duXJJeTigXQZiAAAAEw"]
[Thu May 07 10:40:01.726316 2026] [:error] [pid 56150:tid 56152] [client 20.43.25.175:45960] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "afv7gdu4duXJJeTigXQZiQAAAEA"]
[Thu May 07 10:40:02.195935 2026] [:error] [pid 56150:tid 56155] [client 20.43.25.175:46057] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "afv7gtu4duXJJeTigXQZjAAAAEM"]
[Thu May 07 10:40:02.658683 2026] [:error] [pid 56065:tid 56111] [client 20.43.25.175:45952] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "afv7gndV4hYThdnhfxDJ4QAAAI8"]
[Thu May 07 10:40:03.073075 2026] [:error] [pid 1143:tid 1164] [client 20.43.25.175:45999] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "afv7g5b7qeI8X5VYRr5OGAAAARM"]
[Thu May 07 10:40:03.517328 2026] [:error] [pid 1143:tid 1160] [client 20.43.25.175:45973] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "afv7g5b7qeI8X5VYRr5OGQAAAQ8"]
[Thu May 07 10:40:03.959874 2026] [:error] [pid 56065:tid 56104] [client 20.43.25.175:46066] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "afv7g3dV4hYThdnhfxDJ4wAAAIg"]
[Thu May 07 10:40:04.419935 2026] [:error] [pid 56065:tid 56107] [client 20.43.25.175:46009] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "afv7hHdV4hYThdnhfxDJ5AAAAIs"]
[Thu May 07 10:40:04.879274 2026] [:error] [pid 56065:tid 56100] [client 20.43.25.175:45956] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "afv7hHdV4hYThdnhfxDJ5QAAAIQ"]
[Thu May 07 10:40:05.299448 2026] [:error] [pid 56150:tid 56171] [client 20.43.25.175:46064] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "afv7hdu4duXJJeTigXQZjgAAAFM"]
[Thu May 07 10:40:05.716539 2026] [:error] [pid 56064:tid 56070] [client 20.43.25.175:46029] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "afv7hSsGkZZUEf_7QCMXPAAAAAE"]
[Thu May 07 10:40:06.136088 2026] [:error] [pid 56065:tid 56101] [client 20.43.25.175:45959] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "afv7hndV4hYThdnhfxDJ5wAAAIU"]
[Thu May 07 10:40:06.552672 2026] [:error] [pid 1143:tid 1149] [client 20.43.25.175:46054] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "afv7hpb7qeI8X5VYRr5OGwAAAQQ"]
[Thu May 07 10:40:06.969112 2026] [:error] [pid 56066:tid 56138] [client 20.43.25.175:45969] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "afv7hkYS8DGwDvklLv6cnAAAAM8"]
[Thu May 07 10:40:07.380604 2026] [:error] [pid 56066:tid 56124] [client 20.43.25.175:46078] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "afv7h0YS8DGwDvklLv6cngAAAME"]
[Thu May 07 10:40:07.797445 2026] [:error] [pid 56066:tid 56132] [client 20.43.25.175:46030] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afv7h0YS8DGwDvklLv6coAAAAMk"]
[Thu May 07 10:40:08.257800 2026] [:error] [pid 1143:tid 1161] [client 20.43.25.175:45979] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afv7iJb7qeI8X5VYRr5OHgAAARA"]
[Thu May 07 10:40:08.768846 2026] [:error] [pid 1143:tid 1157] [client 20.43.25.175:45948] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afv7iJb7qeI8X5VYRr5OIAAAAQw"]
[Thu May 07 10:40:09.278405 2026] [:error] [pid 1143:tid 1148] [client 20.43.25.175:46065] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afv7iZb7qeI8X5VYRr5OIgAAAQM"]
[Thu May 07 10:40:09.746031 2026] [:error] [pid 56150:tid 56161] [client 20.43.25.175:45990] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "afv7idu4duXJJeTigXQZkQAAAEk"]
[Thu May 07 10:40:10.209161 2026] [:error] [pid 56150:tid 56168] [client 20.43.25.175:46071] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "afv7itu4duXJJeTigXQZkwAAAFA"]
[Thu May 07 10:40:10.672729 2026] [:error] [pid 56150:tid 56164] [client 20.43.25.175:46024] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "afv7itu4duXJJeTigXQZlQAAAEw"]
[Thu May 07 10:40:11.092156 2026] [:error] [pid 56150:tid 56152] [client 20.43.25.175:45908] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "afv7i9u4duXJJeTigXQZmAAAAEA"]
[Thu May 07 10:40:11.553312 2026] [:error] [pid 56150:tid 56167] [client 20.43.25.175:46020] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "afv7i9u4duXJJeTigXQZmQAAAE8"]
[Thu May 07 10:40:12.015363 2026] [:error] [pid 56064:tid 56079] [client 20.43.25.175:45903] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "afv7jCsGkZZUEf_7QCMXPwAAAAo"]
[Thu May 07 10:40:12.424873 2026] [:error] [pid 1143:tid 1160] [client 20.43.25.175:45976] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "afv7jJb7qeI8X5VYRr5OJgAAAQ8"]
[Thu May 07 10:40:12.836400 2026] [:error] [pid 1143:tid 1168] [client 20.43.25.175:46069] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "afv7jJb7qeI8X5VYRr5OKAAAARc"]
[Thu May 07 10:40:13.248221 2026] [:error] [pid 56064:tid 56092] [client 20.43.25.175:46072] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "afv7jSsGkZZUEf_7QCMXQQAAABc"]
[Thu May 07 10:40:13.661339 2026] [:error] [pid 56065:tid 56106] [client 20.43.25.175:46028] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "afv7jXdV4hYThdnhfxDJ7AAAAIo"]
[Thu May 07 10:40:14.120486 2026] [:error] [pid 56150:tid 56173] [client 20.43.25.175:45992] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "afv7jtu4duXJJeTigXQZnwAAAFU"]
[Thu May 07 10:40:14.587583 2026] [:error] [pid 1143:tid 1148] [client 20.43.25.175:45993] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "afv7jpb7qeI8X5VYRr5OKwAAAQM"]
[Thu May 07 10:40:14.999450 2026] [:error] [pid 1143:tid 1165] [client 20.43.25.175:45980] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "afv7jpb7qeI8X5VYRr5OLQAAARQ"]
[Thu May 07 10:40:15.411484 2026] [:error] [pid 1143:tid 1167] [client 20.43.25.175:45892] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "afv7j5b7qeI8X5VYRr5OLwAAARY"]
[Thu May 07 10:40:15.823894 2026] [:error] [pid 56150:tid 56162] [client 20.43.25.175:45974] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "afv7j9u4duXJJeTigXQZowAAAEo"]
[Thu May 07 10:40:16.237789 2026] [:error] [pid 1143:tid 1158] [client 20.43.25.175:46005] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "afv7kJb7qeI8X5VYRr5OMgAAAQ0"]
[Thu May 07 10:40:16.651288 2026] [:error] [pid 1143:tid 1147] [client 20.43.25.175:46044] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afv7kJb7qeI8X5VYRr5ONQAAAQI"]
[Thu May 07 10:40:17.066516 2026] [:error] [pid 1143:tid 1151] [client 20.43.25.175:46002] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afv7kZb7qeI8X5VYRr5ONwAAAQY"]
[Thu May 07 10:40:17.478475 2026] [:error] [pid 1143:tid 1168] [client 20.43.25.175:45966] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afv7kZb7qeI8X5VYRr5OOAAAARc"]
[Thu May 07 10:40:17.891158 2026] [:error] [pid 56150:tid 56159] [client 20.43.25.175:45988] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afv7kdu4duXJJeTigXQZpgAAAEc"]
[Thu May 07 10:40:18.310977 2026] [:error] [pid 56150:tid 56171] [client 20.43.25.175:46033] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "afv7ktu4duXJJeTigXQZqAAAAFM"]
[Thu May 07 10:40:18.753152 2026] [:error] [pid 56150:tid 56156] [client 20.43.25.175:45898] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "afv7ktu4duXJJeTigXQZqwAAAEQ"]
[Thu May 07 10:40:19.194117 2026] [:error] [pid 56150:tid 56166] [client 20.43.25.175:46027] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "afv7k9u4duXJJeTigXQZrAAAAE4"]
[Thu May 07 10:40:19.667789 2026] [:error] [pid 56150:tid 56169] [client 20.43.25.175:45924] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "afv7k9u4duXJJeTigXQZrQAAAFE"]
[Thu May 07 10:40:20.141734 2026] [:error] [pid 56066:tid 56137] [client 20.43.25.175:46021] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afv7lEYS8DGwDvklLv6cqQAAAM4"]
[Thu May 07 10:40:20.610276 2026] [:error] [pid 1143:tid 1159] [client 20.43.25.175:46004] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afv7lJb7qeI8X5VYRr5OOwAAAQ4"]
[Thu May 07 10:40:21.140359 2026] [:error] [pid 1143:tid 1162] [client 20.43.25.175:45964] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afv7lZb7qeI8X5VYRr5OPgAAARE"]
[Thu May 07 10:40:21.604364 2026] [:error] [pid 56066:tid 56131] [client 20.43.25.175:45977] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afv7lUYS8DGwDvklLv6crAAAAMg"]
[Thu May 07 10:40:22.037707 2026] [:error] [pid 56066:tid 56124] [client 20.43.25.175:46023] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afv7lkYS8DGwDvklLv6csAAAAME"]
[Thu May 07 10:40:22.459094 2026] [:error] [pid 1143:tid 1156] [client 20.43.25.175:45890] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afv7lpb7qeI8X5VYRr5OQAAAAQs"]
[Thu May 07 10:40:22.881523 2026] [:error] [pid 56064:tid 56088] [client 20.43.25.175:45963] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afv7lisGkZZUEf_7QCMXRQAAABM"]
[Thu May 07 10:40:23.305873 2026] [:error] [pid 56064:tid 56084] [client 20.43.25.175:45941] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afv7lysGkZZUEf_7QCMXRwAAAA8"]
[Thu May 07 10:40:23.718982 2026] [:error] [pid 56066:tid 56129] [client 20.43.25.175:45911] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "afv7l0YS8DGwDvklLv6csQAAAMY"]
[Thu May 07 10:40:24.130900 2026] [:error] [pid 56066:tid 56144] [client 20.43.25.175:45940] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "afv7mEYS8DGwDvklLv6cswAAANU"]
[Thu May 07 10:40:24.552369 2026] [:error] [pid 1143:tid 1152] [client 20.43.25.175:45912] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "afv7mJb7qeI8X5VYRr5OQgAAAQc"]
[Thu May 07 10:40:24.964739 2026] [:error] [pid 1143:tid 1145] [client 20.43.25.175:46059] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "afv7mJb7qeI8X5VYRr5ORQAAAQA"]
[Thu May 07 10:40:25.463329 2026] [:error] [pid 56064:tid 56075] [client 20.43.25.175:45937] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "afv7mSsGkZZUEf_7QCMXUwAAAAY"]
[Thu May 07 10:40:25.957934 2026] [:error] [pid 56066:tid 56142] [client 20.43.25.175:45932] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "afv7mUYS8DGwDvklLv6ctQAAANM"]
[Thu May 07 10:40:26.414187 2026] [:error] [pid 56064:tid 56091] [client 20.43.25.175:46025] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "afv7misGkZZUEf_7QCMXVQAAABY"]
[Thu May 07 10:40:26.826086 2026] [:error] [pid 56065:tid 56108] [client 20.43.25.175:45921] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "afv7mndV4hYThdnhfxDJ8QAAAIw"]
[Thu May 07 10:40:27.268892 2026] [:error] [pid 56065:tid 56099] [client 20.43.25.175:45995] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "afv7m3dV4hYThdnhfxDJ8wAAAIM"]
[Thu May 07 10:40:27.686196 2026] [:error] [pid 56066:tid 56127] [client 20.43.25.175:46070] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "afv7m0YS8DGwDvklLv6cuQAAAMQ"]
[Thu May 07 10:40:28.102539 2026] [:error] [pid 56065:tid 56111] [client 20.43.25.175:46055] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "afv7nHdV4hYThdnhfxDJ9AAAAI8"]
[Thu May 07 10:40:28.516944 2026] [:error] [pid 56064:tid 56069] [client 20.43.25.175:45981] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "afv7nCsGkZZUEf_7QCMXWAAAAAA"]
[Thu May 07 10:40:28.936993 2026] [:error] [pid 56064:tid 56082] [client 20.43.25.175:45919] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "afv7nCsGkZZUEf_7QCMXWQAAAA0"]
[Thu May 07 10:40:29.371944 2026] [:error] [pid 1143:tid 1164] [client 20.43.25.175:45843] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "afv7nZb7qeI8X5VYRr5ORgAAARM"]
[Thu May 07 10:40:29.805151 2026] [:error] [pid 56064:tid 56073] [client 20.43.25.175:45828] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "afv7nSsGkZZUEf_7QCMXXAAAAAQ"]
[Thu May 07 10:40:30.223267 2026] [:error] [pid 56064:tid 56087] [client 20.43.25.175:46011] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "afv7nisGkZZUEf_7QCMXXQAAABI"]
[Thu May 07 10:40:30.696508 2026] [:error] [pid 56065:tid 56103] [client 20.43.25.175:45916] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "afv7nndV4hYThdnhfxDJ9QAAAIc"]
[Thu May 07 10:40:31.158590 2026] [:error] [pid 56064:tid 56078] [client 20.43.25.175:46077] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "afv7nysGkZZUEf_7QCMXYQAAAAk"]
[Thu May 07 10:40:31.580213 2026] [:error] [pid 56064:tid 56079] [client 20.43.25.175:46038] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "afv7nysGkZZUEf_7QCMXYwAAAAo"]
[Thu May 07 10:40:32.024225 2026] [:error] [pid 56066:tid 56146] [client 20.43.25.175:46007] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "afv7oEYS8DGwDvklLv6cygAAANc"]
[Thu May 07 10:40:32.496646 2026] [:error] [pid 56066:tid 56142] [client 20.43.25.175:46003] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "afv7oEYS8DGwDvklLv6cywAAANM"]
[Thu May 07 10:40:32.947279 2026] [:error] [pid 56066:tid 56145] [client 20.43.25.175:46073] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "afv7oEYS8DGwDvklLv6czgAAANY"]
[Thu May 07 10:40:33.360325 2026] [:error] [pid 56066:tid 56128] [client 20.43.25.175:45826] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "afv7oUYS8DGwDvklLv6c0AAAAMU"]
[Thu May 07 10:40:33.774374 2026] [:error] [pid 56064:tid 56091] [client 20.43.25.175:45957] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "afv7oSsGkZZUEf_7QCMXZgAAABY"]
[Thu May 07 10:40:34.194613 2026] [:error] [pid 56064:tid 56085] [client 20.43.25.175:45950] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "afv7oisGkZZUEf_7QCMXZwAAABA"]
[Thu May 07 10:40:34.609453 2026] [:error] [pid 1143:tid 1166] [client 20.43.25.175:45991] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "afv7opb7qeI8X5VYRr5OSQAAARU"]
[Thu May 07 10:40:35.023060 2026] [:error] [pid 1143:tid 1150] [client 20.43.25.175:45920] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "afv7o5b7qeI8X5VYRr5OTAAAAQU"]
[Thu May 07 10:40:35.441295 2026] [:error] [pid 1143:tid 1156] [client 20.43.25.175:45987] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "afv7o5b7qeI8X5VYRr5OUAAAAQs"]
[Thu May 07 10:40:35.856073 2026] [:error] [pid 1143:tid 1145] [client 20.43.25.175:45986] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afv7o5b7qeI8X5VYRr5OVAAAAQA"]
[Thu May 07 10:40:36.269292 2026] [:error] [pid 1143:tid 1158] [client 20.43.25.175:45839] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afv7pJb7qeI8X5VYRr5OWAAAAQ0"]
[Thu May 07 10:40:36.681679 2026] [:error] [pid 1143:tid 1163] [client 20.43.25.175:45897] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afv7pJb7qeI8X5VYRr5OWwAAARI"]
[Thu May 07 10:40:37.141255 2026] [:error] [pid 1143:tid 1165] [client 20.43.25.175:46015] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afv7pZb7qeI8X5VYRr5OYAAAARQ"]
[Thu May 07 10:40:37.603867 2026] [:error] [pid 1143:tid 1147] [client 20.43.25.175:45841] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "afv7pZb7qeI8X5VYRr5OZQAAAQI"]
[Thu May 07 10:40:38.019836 2026] [:error] [pid 56065:tid 56102] [client 20.43.25.175:46006] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "afv7pndV4hYThdnhfxDJ-wAAAIY"]
[Thu May 07 10:40:38.438005 2026] [:error] [pid 56066:tid 56142] [client 20.43.25.175:45925] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "afv7pkYS8DGwDvklLv6c1wAAANM"]
[Thu May 07 10:40:38.853970 2026] [:error] [pid 1143:tid 1149] [client 20.43.25.175:45889] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "afv7ppb7qeI8X5VYRr5OZwAAAQQ"]
[Thu May 07 10:40:39.267315 2026] [:error] [pid 56066:tid 56136] [client 20.43.25.175:45901] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afv7p0YS8DGwDvklLv6c2gAAAM0"]
[Thu May 07 10:40:39.684037 2026] [:error] [pid 1143:tid 1154] [client 20.43.25.175:45846] [client 20.43.25.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afv7p5b7qeI8X5VYRr5OaQAAAQk"]
[Fri May 08 00:27:40.121346 2026] [:error] [pid 15630:tid 15672] [client 35.202.104.16:60723] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afy9fHTithRAi4821qvjbgAAAIw"]
[Fri May 08 00:27:42.247548 2026] [:error] [pid 15630:tid 15665] [client 35.202.104.16:60723] [client 35.202.104.16] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "afy9fnTithRAi4821qvjcQAAAIU"]
[Fri May 08 00:27:44.023898 2026] [:error] [pid 15630:tid 15674] [client 35.202.104.16:60723] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afy9gHTithRAi4821qvjdgAAAI4"]
[Fri May 08 00:27:46.073882 2026] [:error] [pid 15631:tid 15711] [client 35.202.104.16:63104] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afy9gnvP1GkPUuuLfqVvFgAAANg"]
[Fri May 08 00:27:47.995914 2026] [:error] [pid 15715:tid 15740] [client 35.202.104.16:65230] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afy9gyY4dZsLOttMkcfqDQAAARQ"]
[Fri May 08 00:27:49.810502 2026] [:error] [pid 15630:tid 15672] [client 35.202.104.16:53232] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afy9hXTithRAi4821qvjfgAAAIw"]
[Fri May 08 00:27:51.605347 2026] [:error] [pid 15715:tid 15717] [client 35.202.104.16:64940] [client 35.202.104.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.104.16, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afy9hyY4dZsLOttMkcfqFgAAAQA"]
[Fri May 08 00:27:51.605541 2026] [:error] [pid 15715:tid 15717] [client 35.202.104.16:64940] [client 35.202.104.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.202.104.16, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "afy9hyY4dZsLOttMkcfqFgAAAQA"]
[Fri May 08 01:50:06.685658 2026] [autoindex:error] [pid 15715:tid 15742] [client 172.212.180.108:24138] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 01:50:22.231323 2026] [:error] [pid 28098:tid 28114] [client 172.212.180.108:24132] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "afzQ3svhwfljlt8trSpEkwAAAE4"]
[Fri May 08 01:50:25.451775 2026] [:error] [pid 15631:tid 15701] [client 172.212.180.108:16014] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "afzQ4XvP1GkPUuuLfqV8OgAAAM4"]
[Fri May 08 01:50:27.213028 2026] [:error] [pid 15631:tid 15710] [client 172.212.180.108:27793] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "afzQ43vP1GkPUuuLfqV8OwAAANc"]
[Fri May 08 01:50:28.632138 2026] [:error] [pid 15631:tid 15698] [client 172.212.180.108:27784] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "afzQ5HvP1GkPUuuLfqV8PQAAAMs"]
[Fri May 08 01:50:30.948165 2026] [:error] [pid 15715:tid 15739] [client 172.212.180.108:18162] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "afzQ5iY4dZsLOttMkccBLgAAARM"]
[Fri May 08 01:50:32.284319 2026] [:error] [pid 15631:tid 15694] [client 172.212.180.108:14547] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "afzQ6HvP1GkPUuuLfqV8PwAAAMc"]
[Fri May 08 01:50:34.379120 2026] [:error] [pid 15715:tid 15724] [client 172.212.180.108:27787] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "afzQ6iY4dZsLOttMkccBMgAAAQc"]
[Fri May 08 01:50:38.228842 2026] [:error] [pid 15630:tid 15684] [client 172.212.180.108:2633] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "afzQ7nTithRAi4821qvyFQAAAJg"]
[Fri May 08 01:50:41.484859 2026] [:error] [pid 15631:tid 15708] [client 172.212.180.108:16507] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "afzQ8XvP1GkPUuuLfqV8RgAAANU"]
[Fri May 08 01:50:45.044680 2026] [:error] [pid 15715:tid 15725] [client 172.212.180.108:16104] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "afzQ9SY4dZsLOttMkccBPgAAAQg"]
[Fri May 08 01:50:46.157905 2026] [:error] [pid 15715:tid 15743] [client 172.212.180.108:16069] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "afzQ9iY4dZsLOttMkccBQQAAARc"]
[Fri May 08 01:50:47.544965 2026] [:error] [pid 15715:tid 15722] [client 172.212.180.108:15323] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "afzQ9yY4dZsLOttMkccBQwAAAQU"]
[Fri May 08 01:50:49.222332 2026] [:error] [pid 15631:tid 15707] [client 172.212.180.108:17215] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "afzQ-XvP1GkPUuuLfqV8SQAAANQ"]
[Fri May 08 01:50:52.190791 2026] [:error] [pid 28098:tid 28109] [client 172.212.180.108:16100] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "afzQ_Mvhwfljlt8trSpElgAAAEk"]
[Fri May 08 01:50:53.525844 2026] [:error] [pid 12374:tid 12380] [client 172.212.180.108:17179] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "afzQ_Ro3QnNcFDMfKt2IJQAAAYI"]
[Fri May 08 01:50:54.960362 2026] [:error] [pid 12323:tid 12337] [client 172.212.180.108:2282] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "afzQ_tdhHMnGFpc7MDxJogAAAUo"]
[Fri May 08 01:50:56.953288 2026] [:error] [pid 12374:tid 12392] [client 172.212.180.108:26001] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "afzRABo3QnNcFDMfKt2IKgAAAY4"]
[Fri May 08 01:50:59.193651 2026] [:error] [pid 12374:tid 12389] [client 172.212.180.108:15335] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "afzRAxo3QnNcFDMfKt2ILQAAAYs"]
[Fri May 08 01:51:07.671625 2026] [:error] [pid 15631:tid 15694] [client 172.212.180.108:51816] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "afzRC3vP1GkPUuuLfqV8VQAAAMc"]
[Fri May 08 01:51:13.604345 2026] [:error] [pid 12374:tid 12401] [client 172.212.180.108:62842] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "afzRERo3QnNcFDMfKt2ILwAAAZc"]
[Fri May 08 01:51:16.711518 2026] [:error] [pid 12323:tid 12335] [client 172.212.180.108:13774] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "afzRFNdhHMnGFpc7MDxJpQAAAUg"]
[Fri May 08 01:51:20.839504 2026] [:error] [pid 15630:tid 15672] [client 172.212.180.108:14914] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fv.php"] [unique_id "afzRGHTithRAi4821qvyHgAAAIw"]
[Fri May 08 01:51:51.039811 2026] [:error] [pid 15630:tid 15670] [client 172.212.180.108:23035] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzRN3TithRAi4821qvyUAAAAIo"]
[Fri May 08 01:51:56.248414 2026] [:error] [pid 15631:tid 15703] [client 172.212.180.108:13762] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzRPHvP1GkPUuuLfqV8egAAANA"]
[Fri May 08 01:51:58.823463 2026] [:error] [pid 15629:tid 15635] [client 172.212.180.108:20019] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzRPvrIJCALdUrO43ml1AAAAAI"]
[Fri May 08 01:52:00.935718 2026] [:error] [pid 15715:tid 15722] [client 172.212.180.108:13801] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzRQCY4dZsLOttMkccBfQAAAQU"]
[Fri May 08 01:52:02.568002 2026] [:error] [pid 15715:tid 15743] [client 172.212.180.108:46057] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "afzRQiY4dZsLOttMkccBgQAAARc"]
[Fri May 08 01:52:04.701066 2026] [:error] [pid 15715:tid 15737] [client 172.212.180.108:52981] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "afzRRCY4dZsLOttMkccBgwAAARE"]
[Fri May 08 01:52:06.143055 2026] [:error] [pid 15715:tid 15726] [client 172.212.180.108:47783] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "afzRRiY4dZsLOttMkccBhAAAAQk"]
[Fri May 08 01:52:08.385666 2026] [:error] [pid 15630:tid 15675] [client 172.212.180.108:2624] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "afzRSHTithRAi4821qvyVwAAAI8"]
[Fri May 08 01:52:11.310600 2026] [:error] [pid 12323:tid 12337] [client 172.212.180.108:22918] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "afzRS9dhHMnGFpc7MDxJsAAAAUo"]
[Fri May 08 01:52:14.117528 2026] [:error] [pid 15631:tid 15698] [client 172.212.180.108:22922] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "afzRTnvP1GkPUuuLfqV8ggAAAMs"]
[Fri May 08 01:52:15.010072 2026] [:error] [pid 15715:tid 15734] [client 172.212.180.108:34638] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "afzRTyY4dZsLOttMkccBjQAAAQ4"]
[Fri May 08 01:52:18.106347 2026] [:error] [pid 15715:tid 15718] [client 172.212.180.108:46045] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "afzRUiY4dZsLOttMkccBjgAAAQE"]
[Fri May 08 01:52:20.774821 2026] [:error] [pid 15715:tid 15735] [client 172.212.180.108:2884] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afzRVCY4dZsLOttMkccBlwAAAQ8"]
[Fri May 08 01:52:23.678822 2026] [:error] [pid 28098:tid 28109] [client 172.212.180.108:64746] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afzRV8vhwfljlt8trSpExgAAAEk"]
[Fri May 08 01:52:25.617541 2026] [:error] [pid 15630:tid 15675] [client 172.212.180.108:2909] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afzRWXTithRAi4821qvyYQAAAI8"]
[Fri May 08 01:52:28.161076 2026] [:error] [pid 28098:tid 28123] [client 172.212.180.108:46070] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afzRXMvhwfljlt8trSpEyAAAAFc"]
[Fri May 08 01:52:32.430333 2026] [:error] [pid 12374:tid 12397] [client 172.212.180.108:14488] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "afzRYBo3QnNcFDMfKt2IQQAAAZM"]
[Fri May 08 01:52:32.948374 2026] [:error] [pid 15630:tid 15663] [client 172.212.180.108:14854] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "afzRYHTithRAi4821qvyZAAAAIM"]
[Fri May 08 01:52:33.614797 2026] [:error] [pid 15715:tid 15718] [client 172.212.180.108:14473] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "afzRYSY4dZsLOttMkccBqAAAAQE"]
[Fri May 08 01:52:36.997475 2026] [:error] [pid 15631:tid 15703] [client 172.212.180.108:34670] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "afzRZHvP1GkPUuuLfqV8lQAAANA"]
[Fri May 08 01:52:40.263781 2026] [:error] [pid 15715:tid 15742] [client 172.212.180.108:2898] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "afzRaCY4dZsLOttMkccBrgAAARY"]
[Fri May 08 01:52:42.559319 2026] [:error] [pid 15715:tid 15744] [client 172.212.180.108:14877] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "afzRaiY4dZsLOttMkccBsAAAARg"]
[Fri May 08 01:52:44.203922 2026] [:error] [pid 12374:tid 12393] [client 172.212.180.108:2929] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "afzRbBo3QnNcFDMfKt2IRAAAAY8"]
[Fri May 08 01:52:46.811314 2026] [:error] [pid 15629:tid 15649] [client 172.212.180.108:14862] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "afzRbvrIJCALdUrO43ml2QAAABA"]
[Fri May 08 01:52:48.168540 2026] [:error] [pid 15715:tid 15738] [client 172.212.180.108:64733] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cong.php"] [unique_id "afzRcCY4dZsLOttMkccBugAAARI"]
[Fri May 08 01:52:58.868611 2026] [:error] [pid 15715:tid 15731] [client 172.212.180.108:2935] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afzReiY4dZsLOttMkccBzQAAAQs"]
[Fri May 08 01:53:18.887925 2026] [:error] [pid 15631:tid 15694] [client 172.212.180.108:22958] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afzRjnvP1GkPUuuLfqV8rQAAAMc"]
[Fri May 08 01:53:22.743263 2026] [:error] [pid 12374:tid 12401] [client 172.212.180.108:34640] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afzRkho3QnNcFDMfKt2IUAAAAZc"]
[Fri May 08 01:53:27.059754 2026] [:error] [pid 15631:tid 15691] [client 172.212.180.108:64730] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afzRl3vP1GkPUuuLfqV8rwAAAMQ"]
[Fri May 08 01:53:28.340282 2026] [:error] [pid 15715:tid 15734] [client 172.212.180.108:2906] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afzRmCY4dZsLOttMkccCOwAAAQ4"]
[Fri May 08 01:53:31.314447 2026] [:error] [pid 15629:tid 15644] [client 172.212.180.108:15256] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "afzRm_rIJCALdUrO43mmGAAAAAs"]
[Fri May 08 01:53:33.547603 2026] [:error] [pid 15631:tid 15704] [client 172.212.180.108:65310] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "afzRnXvP1GkPUuuLfqV8sQAAANE"]
[Fri May 08 01:53:37.322582 2026] [:error] [pid 12323:tid 12334] [client 172.212.180.108:15294] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "afzRoddhHMnGFpc7MDxJyQAAAUc"]
[Fri May 08 01:53:40.752887 2026] [:error] [pid 12323:tid 12332] [client 172.212.180.108:2231] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "afzRpNdhHMnGFpc7MDxJygAAAUU"]
[Fri May 08 01:53:44.745084 2026] [:error] [pid 15631:tid 15702] [client 172.212.180.108:2210] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afzRqHvP1GkPUuuLfqV8twAAAM8"]
[Fri May 08 01:53:48.160274 2026] [:error] [pid 15630:tid 15677] [client 172.212.180.108:2452] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afzRrHTithRAi4821qvypwAAAJE"]
[Fri May 08 01:53:50.853785 2026] [:error] [pid 12374:tid 12385] [client 172.212.180.108:16808] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afzRrho3QnNcFDMfKt2IUgAAAYc"]
[Fri May 08 01:53:52.876774 2026] [:error] [pid 12374:tid 12389] [client 172.212.180.108:2189] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afzRsBo3QnNcFDMfKt2IVgAAAYs"]
[Fri May 08 01:53:55.484901 2026] [:error] [pid 15715:tid 15735] [client 172.212.180.108:2201] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afzRsyY4dZsLOttMkccCRAAAAQ8"]
[Fri May 08 01:53:57.510985 2026] [:error] [pid 15629:tid 15646] [client 172.212.180.108:2859] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afzRtfrIJCALdUrO43mmOwAAAA0"]
[Fri May 08 01:53:58.619769 2026] [:error] [pid 28098:tid 28111] [client 172.212.180.108:41396] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afzRtsvhwfljlt8trSpE4AAAAEs"]
[Fri May 08 01:53:59.860775 2026] [:error] [pid 28098:tid 28123] [client 172.212.180.108:2872] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afzRt8vhwfljlt8trSpE4QAAAFc"]
[Fri May 08 01:54:00.841370 2026] [:error] [pid 15629:tid 15655] [client 172.212.180.108:14161] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzRuPrIJCALdUrO43mmQAAAABY"]
[Fri May 08 01:54:02.520157 2026] [:error] [pid 12323:tid 12331] [client 172.212.180.108:13483] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzRutdhHMnGFpc7MDxJywAAAUQ"]
[Fri May 08 01:54:05.031318 2026] [:error] [pid 15629:tid 15642] [client 172.212.180.108:41389] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzRvfrIJCALdUrO43mmQwAAAAk"]
[Fri May 08 01:54:06.682267 2026] [:error] [pid 15631:tid 15690] [client 172.212.180.108:51191] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzRvnvP1GkPUuuLfqV8vwAAAMM"]
[Fri May 08 01:54:09.074400 2026] [:error] [pid 15631:tid 15693] [client 172.212.180.108:41402] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "afzRwXvP1GkPUuuLfqV8wgAAAMY"]
[Fri May 08 01:54:13.552660 2026] [:error] [pid 15631:tid 15707] [client 172.212.180.108:2969] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "afzRxXvP1GkPUuuLfqV8yAAAANQ"]
[Fri May 08 01:54:15.809689 2026] [:error] [pid 15629:tid 15651] [client 172.212.180.108:16771] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "afzRx_rIJCALdUrO43mmSgAAABI"]
[Fri May 08 01:54:59.641215 2026] [:error] [pid 15630:tid 15668] [client 172.212.180.108:29371] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "afzR83TithRAi4821qvy0gAAAIg"]
[Fri May 08 01:55:03.950385 2026] [:error] [pid 15631:tid 15697] [client 172.212.180.108:58115] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "afzR93vP1GkPUuuLfqV83AAAAMo"]
[Fri May 08 01:55:08.817820 2026] [:error] [pid 15715:tid 15733] [client 172.212.180.108:2369] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "afzR_CY4dZsLOttMkccChAAAAQ0"]
[Fri May 08 01:55:11.050660 2026] [:error] [pid 12323:tid 12348] [client 172.212.180.108:52882] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "afzR_9dhHMnGFpc7MDxJ0gAAAVU"]
[Fri May 08 01:55:14.794852 2026] [:error] [pid 15715:tid 15742] [client 172.212.180.108:17188] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "afzSAiY4dZsLOttMkccCjwAAARY"]
[Fri May 08 01:55:17.255697 2026] [:error] [pid 15630:tid 15671] [client 172.212.180.108:16065] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "afzSBXTithRAi4821qvy3gAAAIs"]
[Fri May 08 01:55:18.530901 2026] [:error] [pid 15629:tid 15638] [client 172.212.180.108:29308] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "afzSBvrIJCALdUrO43mmagAAAAU"]
[Fri May 08 01:55:19.967662 2026] [:error] [pid 12374:tid 12390] [client 172.212.180.108:51829] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "afzSBxo3QnNcFDMfKt2IYQAAAYw"]
[Fri May 08 01:55:22.416641 2026] [:error] [pid 15630:tid 15660] [client 172.212.180.108:46107] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afzSCnTithRAi4821qvy4QAAAIA"]
[Fri May 08 01:55:28.158931 2026] [:error] [pid 15631:tid 15689] [client 172.212.180.108:29298] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afzSEHvP1GkPUuuLfqV84gAAAMI"]
[Fri May 08 01:55:33.366693 2026] [:error] [pid 12374:tid 12384] [client 172.212.180.108:46117] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afzSFRo3QnNcFDMfKt2IZQAAAYY"]
[Fri May 08 01:55:37.345244 2026] [:error] [pid 15715:tid 15726] [client 172.212.180.108:51834] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "afzSGSY4dZsLOttMkccCogAAAQk"]
[Fri May 08 01:55:39.668996 2026] [:error] [pid 15629:tid 15641] [client 172.212.180.108:2273] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "afzSG_rIJCALdUrO43mmcQAAAAg"]
[Fri May 08 01:55:41.738243 2026] [:error] [pid 15629:tid 15639] [client 172.212.180.108:51809] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "afzSHfrIJCALdUrO43mmcgAAAAY"]
[Fri May 08 01:55:43.673685 2026] [:error] [pid 15629:tid 15643] [client 172.212.180.108:51811] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "afzSH_rIJCALdUrO43mmdAAAAAo"]
[Fri May 08 01:55:47.868364 2026] [:error] [pid 12374:tid 12391] [client 172.212.180.108:29274] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "afzSIxo3QnNcFDMfKt2IaAAAAY0"]
[Fri May 08 01:55:50.105144 2026] [:error] [pid 15630:tid 15667] [client 172.212.180.108:47770] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "afzSJnTithRAi4821qvy7AAAAIc"]
[Fri May 08 01:55:53.222700 2026] [:error] [pid 15630:tid 15675] [client 172.212.180.108:57582] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "afzSKXTithRAi4821qvy8AAAAI8"]
[Fri May 08 01:55:56.159018 2026] [:error] [pid 12323:tid 12348] [client 172.212.180.108:3008] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "afzSLNdhHMnGFpc7MDxJ5QAAAVU"]
[Fri May 08 01:55:57.716369 2026] [:error] [pid 15629:tid 15657] [client 172.212.180.108:52434] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "afzSLfrIJCALdUrO43mmeAAAABg"]
[Fri May 08 01:56:05.423020 2026] [:error] [pid 28098:tid 28105] [client 172.212.180.108:64058] [client 172.212.180.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.212.180.108, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afzSNcvhwfljlt8trSpFEQAAAEU"]
[Fri May 08 01:56:27.476483 2026] [:error] [pid 15715:tid 15738] [client 172.212.180.108:20052] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afzSSyY4dZsLOttMkccCuAAAARI"]
[Fri May 08 01:56:45.252987 2026] [:error] [pid 28098:tid 28115] [client 172.212.180.108:24172] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "afzSXcvhwfljlt8trSpFFgAAAE8"]
[Fri May 08 01:57:51.238128 2026] [:error] [pid 15630:tid 15682] [client 172.212.180.108:15276] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "afzSn3TithRAi4821qvzNQAAAJY"]
[Fri May 08 01:57:56.920920 2026] [:error] [pid 15631:tid 15693] [client 172.212.180.108:24076] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "afzSpHvP1GkPUuuLfqV9DAAAAMY"]
[Fri May 08 01:58:04.525813 2026] [proxy_fcgi:error] [pid 15630:tid 15661] [client 172.212.180.108:15272] AH01071: Got error 'Primary script unknown'
[Fri May 08 01:58:10.337900 2026] [:error] [pid 15630:tid 15678] [client 172.212.180.108:34640] [client 172.212.180.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.212.180.108, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afzSsnTithRAi4821qvzZgAAAJI"]
[Fri May 08 01:58:12.491805 2026] [autoindex:error] [pid 15630:tid 15675] [client 172.212.180.108:34640] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 01:58:15.751512 2026] [:error] [pid 15630:tid 15669] [client 172.212.180.108:15272] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afzSt3TithRAi4821qvzbgAAAIk"]
[Fri May 08 01:58:21.213130 2026] [autoindex:error] [pid 15630:tid 15668] [client 172.212.180.108:34640] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 01:58:24.262958 2026] [:error] [pid 15629:tid 15643] [client 172.212.180.108:2460] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "afzSwPrIJCALdUrO43mmuAAAAAo"]
[Fri May 08 01:58:29.857052 2026] [:error] [pid 15630:tid 15680] [client 172.212.180.108:2491] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "afzSxXTithRAi4821qvzhQAAAJQ"]
[Fri May 08 01:58:33.898069 2026] [:error] [pid 12374:tid 12385] [client 172.212.180.108:18057] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "afzSyRo3QnNcFDMfKt2IqAAAAYc"]
[Fri May 08 01:58:39.154798 2026] [:error] [pid 15630:tid 15669] [client 172.212.180.108:51182] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "afzSz3TithRAi4821qvzkAAAAIk"]
[Fri May 08 01:58:42.266725 2026] [:error] [pid 15630:tid 15662] [client 172.212.180.108:51145] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "afzS0nTithRAi4821qvzmAAAAII"]
[Fri May 08 01:58:49.087054 2026] [:error] [pid 15631:tid 15698] [client 172.212.180.108:41360] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "afzS2XvP1GkPUuuLfqV9QgAAAMs"]
[Fri May 08 01:58:54.646488 2026] [:error] [pid 15629:tid 15641] [client 172.212.180.108:41357] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "afzS3vrIJCALdUrO43mmzwAAAAg"]
[Fri May 08 01:59:02.173493 2026] [:error] [pid 28098:tid 28118] [client 172.212.180.108:13469] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "afzS5svhwfljlt8trSpFUAAAAFI"]
[Fri May 08 01:59:07.116376 2026] [:error] [pid 12323:tid 12339] [client 172.212.180.108:51164] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "afzS69dhHMnGFpc7MDxKKQAAAUw"]
[Fri May 08 01:59:13.532879 2026] [:error] [pid 15715:tid 15744] [client 172.212.180.108:41395] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "afzS8SY4dZsLOttMkccDUwAAARg"]
[Fri May 08 01:59:15.458475 2026] [:error] [pid 15629:tid 15635] [client 172.212.180.108:2841] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "afzS8_rIJCALdUrO43mm7gAAAAI"]
[Fri May 08 01:59:20.153183 2026] [:error] [pid 28098:tid 28110] [client 172.212.180.108:2976] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/log.php"] [unique_id "afzS-Mvhwfljlt8trSpFYAAAAEo"]
[Fri May 08 01:59:50.325757 2026] [:error] [pid 15715:tid 15734] [client 172.212.180.108:16053] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "afzTFiY4dZsLOttMkccDdQAAAQ4"]
[Fri May 08 01:59:57.197195 2026] [:error] [pid 15629:tid 15635] [client 172.212.180.108:21467] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "afzTHfrIJCALdUrO43mnHAAAAAI"]
[Fri May 08 02:00:20.784965 2026] [:error] [pid 15630:tid 15681] [client 172.212.180.108:2348] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "afzTNHTithRAi4821qvz-gAAAJU"]
[Fri May 08 02:00:27.630173 2026] [:error] [pid 15715:tid 15722] [client 172.212.180.108:2306] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "afzTOyY4dZsLOttMkccDjwAAAQU"]
[Fri May 08 02:00:40.599770 2026] [:error] [pid 28098:tid 28116] [client 172.212.180.108:27715] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "afzTSMvhwfljlt8trSpFfwAAAFA"]
[Fri May 08 02:00:41.846963 2026] [:error] [pid 15715:tid 15743] [client 172.212.180.108:2309] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "afzTSSY4dZsLOttMkccDrgAAARc"]
[Fri May 08 02:00:43.703189 2026] [:error] [pid 12374:tid 12380] [client 172.212.180.108:14109] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "afzTSxo3QnNcFDMfKt2I5wAAAYI"]
[Fri May 08 02:00:45.831040 2026] [:error] [pid 28098:tid 28108] [client 172.212.180.108:18710] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "afzTTcvhwfljlt8trSpFgAAAAEg"]
[Fri May 08 02:00:47.380092 2026] [:error] [pid 12323:tid 12342] [client 172.212.180.108:17614] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "afzTT9dhHMnGFpc7MDxKVwAAAU8"]
[Fri May 08 02:00:48.344373 2026] [:error] [pid 15715:tid 15721] [client 172.212.180.108:17637] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "afzTUCY4dZsLOttMkccDvgAAAQQ"]
[Fri May 08 02:00:50.782141 2026] [:error] [pid 12374:tid 12386] [client 172.212.180.108:21472] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "afzTUho3QnNcFDMfKt2I6wAAAYg"]
[Fri May 08 02:00:53.101895 2026] [:error] [pid 28098:tid 28110] [client 172.212.180.108:27754] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ar.php"] [unique_id "afzTVcvhwfljlt8trSpFiAAAAEo"]
[Fri May 08 02:00:54.767120 2026] [:error] [pid 12374:tid 12392] [client 172.212.180.108:17258] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afzTVho3QnNcFDMfKt2I8AAAAY4"]
[Fri May 08 02:00:55.898608 2026] [:error] [pid 15631:tid 15693] [client 172.212.180.108:27775] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afzTV3vP1GkPUuuLfqV9tAAAAMY"]
[Fri May 08 02:00:57.379645 2026] [:error] [pid 15631:tid 15697] [client 172.212.180.108:17236] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afzTWXvP1GkPUuuLfqV9twAAAMo"]
[Fri May 08 02:01:02.077302 2026] [:error] [pid 15715:tid 15733] [client 172.212.180.108:27748] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "afzTXiY4dZsLOttMkccDxgAAAQ0"]
[Fri May 08 02:01:04.189057 2026] [:error] [pid 12323:tid 12341] [client 172.212.180.108:17234] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "afzTYNdhHMnGFpc7MDxKYwAAAU4"]
[Fri May 08 02:01:06.298132 2026] [:error] [pid 12374:tid 12379] [client 172.212.180.108:16846] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "afzTYho3QnNcFDMfKt2I-AAAAYE"]
[Fri May 08 02:01:08.171442 2026] [:error] [pid 12374:tid 12398] [client 172.212.180.108:18714] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "afzTZBo3QnNcFDMfKt2I_AAAAZQ"]
[Fri May 08 02:01:11.624867 2026] [:error] [pid 15630:tid 15674] [client 172.212.180.108:16888] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xx.php"] [unique_id "afzTZ3TithRAi4821qv0OwAAAI4"]
[Fri May 08 02:01:18.272678 2026] [:error] [pid 15629:tid 15638] [client 172.212.180.108:33024] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass4.php"] [unique_id "afzTbvrIJCALdUrO43mnswAAAAU"]
[Fri May 08 02:02:06.761598 2026] [:error] [pid 15630:tid 15662] [client 172.212.180.108:13777] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "afzTnnTithRAi4821qv0hQAAAII"]
[Fri May 08 02:02:10.979444 2026] [:error] [pid 15630:tid 15669] [client 172.212.180.108:13531] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "afzTonTithRAi4821qv0jwAAAIk"]
[Fri May 08 02:02:14.160571 2026] [:error] [pid 15630:tid 15665] [client 172.212.180.108:58134] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "afzTpnTithRAi4821qv0mAAAAIU"]
[Fri May 08 02:02:22.673617 2026] [:error] [pid 28098:tid 28103] [client 172.212.180.108:58114] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "afzTrsvhwfljlt8trSpFoAAAAEM"]
[Fri May 08 02:02:25.407551 2026] [:error] [pid 15715:tid 15743] [client 172.212.180.108:52891] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "afzTsSY4dZsLOttMkccEcwAAARc"]
[Fri May 08 02:02:27.444667 2026] [:error] [pid 28098:tid 28112] [client 172.212.180.108:52904] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "afzTs8vhwfljlt8trSpFpAAAAEw"]
[Fri May 08 02:02:32.524007 2026] [:error] [pid 12323:tid 12339] [client 172.212.180.108:26017] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "afzTuNdhHMnGFpc7MDxKfgAAAUw"]
[Fri May 08 02:02:36.054617 2026] [:error] [pid 15715:tid 15720] [client 172.212.180.108:13711] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "afzTvCY4dZsLOttMkccEeQAAAQM"]
[Fri May 08 02:02:39.588701 2026] [:error] [pid 15630:tid 15683] [client 172.212.180.108:19447] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "afzTv3TithRAi4821qv0twAAAJc"]
[Fri May 08 02:02:46.732484 2026] [:error] [pid 15715:tid 15719] [client 172.212.180.108:2624] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "afzTxiY4dZsLOttMkccEhAAAAQI"]
[Fri May 08 02:02:53.622461 2026] [:error] [pid 28098:tid 28108] [client 172.212.180.108:16509] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "afzTzcvhwfljlt8trSpFugAAAEg"]
[Fri May 08 02:02:57.868745 2026] [:error] [pid 12374:tid 12401] [client 172.212.180.108:2734] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/la.php"] [unique_id "afzT0Ro3QnNcFDMfKt2JMAAAAZc"]
[Fri May 08 02:03:32.292408 2026] [:error] [pid 12374:tid 12391] [client 172.212.180.108:2648] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "afzT9Bo3QnNcFDMfKt2JSQAAAY0"]
[Fri May 08 02:03:35.449246 2026] [:error] [pid 15630:tid 15670] [client 172.212.180.108:14155] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "afzT93TithRAi4821qv05QAAAIo"]
[Fri May 08 02:03:43.180997 2026] [:error] [pid 15630:tid 15679] [client 172.212.180.108:2965] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "afzT_3TithRAi4821qv07wAAAJM"]
[Fri May 08 02:03:51.484726 2026] [:error] [pid 15630:tid 15662] [client 172.212.180.108:17582] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "afzUB3TithRAi4821qv09AAAAII"]
[Fri May 08 02:03:56.665262 2026] [:error] [pid 12374:tid 12383] [client 172.212.180.108:2948] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "afzUDBo3QnNcFDMfKt2JUgAAAYU"]
[Fri May 08 02:03:59.232045 2026] [:error] [pid 15629:tid 15638] [client 172.212.180.108:2866] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "afzUD_rIJCALdUrO43moFQAAAAU"]
[Fri May 08 02:04:00.644261 2026] [:error] [pid 15715:tid 15722] [client 172.212.180.108:52929] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "afzUECY4dZsLOttMkccEwAAAAQU"]
[Fri May 08 02:04:02.383636 2026] [:error] [pid 28098:tid 28112] [client 172.212.180.108:52960] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "afzUEsvhwfljlt8trSpF0wAAAEw"]
[Fri May 08 02:04:04.627787 2026] [:error] [pid 12323:tid 12335] [client 172.212.180.108:64073] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "afzUFNdhHMnGFpc7MDxKoAAAAUg"]
[Fri May 08 02:04:07.304058 2026] [:error] [pid 15630:tid 15674] [client 172.212.180.108:62746] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "afzUF3TithRAi4821qv0_QAAAI4"]
[Fri May 08 02:04:12.887403 2026] [:error] [pid 12374:tid 12393] [client 172.212.180.108:62731] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "afzUHBo3QnNcFDMfKt2JUwAAAY8"]
[Fri May 08 02:04:15.147847 2026] [:error] [pid 12323:tid 12351] [client 172.212.180.108:16430] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "afzUH9dhHMnGFpc7MDxKoQAAAVg"]
[Fri May 08 02:04:17.335719 2026] [:error] [pid 15715:tid 15731] [client 172.212.180.108:16413] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "afzUISY4dZsLOttMkccExgAAAQs"]
[Fri May 08 02:04:26.453420 2026] [:error] [pid 12323:tid 12333] [client 172.212.180.108:52961] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "afzUKtdhHMnGFpc7MDxKowAAAUY"]
[Fri May 08 02:18:09.621139 2026] [autoindex:error] [pid 15715:tid 15733] [client 172.212.180.108:64655] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 02:18:22.298206 2026] [:error] [pid 15715:tid 15722] [client 172.212.180.108:16782] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "afzXbiY4dZsLOttMkccH4gAAAQU"]
[Fri May 08 02:18:25.509341 2026] [:error] [pid 15630:tid 15683] [client 172.212.180.108:17169] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "afzXcXTithRAi4821qv3ZAAAAJc"]
[Fri May 08 02:18:34.780488 2026] [:error] [pid 15715:tid 15737] [client 172.212.180.108:14898] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "afzXeiY4dZsLOttMkccH7AAAARE"]
[Fri May 08 02:18:36.800817 2026] [:error] [pid 15715:tid 15724] [client 172.212.180.108:17211] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xv.php"] [unique_id "afzXfCY4dZsLOttMkccH8AAAAQc"]
[Fri May 08 02:18:40.081600 2026] [:error] [pid 15715:tid 15734] [client 172.212.180.108:52897] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "afzXgCY4dZsLOttMkccH9AAAAQ4"]
[Fri May 08 02:18:43.339697 2026] [:error] [pid 15715:tid 15738] [client 172.212.180.108:27832] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "afzXgyY4dZsLOttMkccH-wAAARI"]
[Fri May 08 02:18:47.429052 2026] [:error] [pid 28098:tid 28104] [client 172.212.180.108:18688] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "afzXh8vhwfljlt8trSpG7AAAAEQ"]
[Fri May 08 02:18:49.612394 2026] [:error] [pid 15629:tid 15646] [client 172.212.180.108:62818] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x56.php"] [unique_id "afzXifrIJCALdUrO43mqCAAAAA0"]
[Fri May 08 02:18:51.878365 2026] [:error] [pid 15630:tid 15684] [client 172.212.180.108:58168] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "afzXi3TithRAi4821qv3cQAAAJg"]
[Fri May 08 02:18:53.011739 2026] [:error] [pid 15715:tid 15743] [client 172.212.180.108:62813] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "afzXjSY4dZsLOttMkccIBgAAARc"]
[Fri May 08 02:18:55.097084 2026] [:error] [pid 15715:tid 15718] [client 172.212.180.108:2918] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "afzXjyY4dZsLOttMkccIDAAAAQE"]
[Fri May 08 02:18:57.221470 2026] [:error] [pid 15715:tid 15735] [client 172.212.180.108:62822] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htaccess.php"] [unique_id "afzXkSY4dZsLOttMkccIEgAAAQ8"]
[Fri May 08 02:19:00.863938 2026] [:error] [pid 15715:tid 15722] [client 172.212.180.108:62826] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "afzXlCY4dZsLOttMkccIGwAAAQU"]
[Fri May 08 02:19:06.986146 2026] [:error] [pid 15629:tid 15636] [client 172.212.180.108:26024] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "afzXmvrIJCALdUrO43mqDgAAAAM"]
[Fri May 08 02:19:11.022819 2026] [:error] [pid 12374:tid 12385] [client 172.212.180.108:46039] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/readme.php"] [unique_id "afzXnxo3QnNcFDMfKt2KjwAAAYc"]
[Fri May 08 02:19:12.900415 2026] [:error] [pid 15629:tid 15644] [client 172.212.180.108:3065] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "afzXoPrIJCALdUrO43mqEgAAAAs"]
[Fri May 08 02:19:15.636904 2026] [:error] [pid 12374:tid 12395] [client 172.212.180.108:21389] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "afzXoxo3QnNcFDMfKt2KkgAAAZE"]
[Fri May 08 02:19:17.495310 2026] [:error] [pid 12374:tid 12398] [client 172.212.180.108:21384] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x50.php"] [unique_id "afzXpRo3QnNcFDMfKt2KkwAAAZQ"]
[Fri May 08 02:19:40.303668 2026] [:error] [pid 15715:tid 15743] [client 172.212.180.108:48324] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "afzXvCY4dZsLOttMkccIZAAAARc"]
[Fri May 08 02:19:41.450953 2026] [:error] [pid 15630:tid 15671] [client 172.212.180.108:2793] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "afzXvXTithRAi4821qv3eAAAAIs"]
[Fri May 08 02:19:43.926820 2026] [:error] [pid 15631:tid 15697] [client 172.212.180.108:22999] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "afzXv3vP1GkPUuuLfqWA2wAAAMo"]
[Fri May 08 02:19:46.252176 2026] [:error] [pid 15715:tid 15737] [client 172.212.180.108:16858] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "afzXwiY4dZsLOttMkccIawAAARE"]
[Fri May 08 02:19:48.120895 2026] [:error] [pid 12323:tid 12334] [client 172.212.180.108:16855] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "afzXxNdhHMnGFpc7MDxLggAAAUc"]
[Fri May 08 02:19:49.252445 2026] [:error] [pid 15715:tid 15724] [client 172.212.180.108:24067] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "afzXxSY4dZsLOttMkccIcgAAAQc"]
[Fri May 08 02:19:51.657392 2026] [:error] [pid 15631:tid 15703] [client 172.212.180.108:15303] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "afzXx3vP1GkPUuuLfqWA3gAAANA"]
[Fri May 08 02:19:54.656048 2026] [:error] [pid 12374:tid 12385] [client 172.212.180.108:16422] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "afzXyho3QnNcFDMfKt2KmQAAAYc"]
[Fri May 08 02:19:56.156582 2026] [:error] [pid 15630:tid 15661] [client 172.212.180.108:31519] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzXzHTithRAi4821qv3fQAAAIE"]
[Fri May 08 02:19:57.925362 2026] [:error] [pid 15630:tid 15676] [client 172.212.180.108:13766] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzXzXTithRAi4821qv3gQAAAJA"]
[Fri May 08 02:20:01.477000 2026] [:error] [pid 15715:tid 15722] [client 172.212.180.108:16393] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzX0SY4dZsLOttMkccIgAAAAQU"]
[Fri May 08 02:20:03.590767 2026] [:error] [pid 15715:tid 15735] [client 172.212.180.108:52405] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzX0yY4dZsLOttMkccIhgAAAQ8"]
[Fri May 08 02:20:06.556609 2026] [:error] [pid 15630:tid 15660] [client 172.212.180.108:51780] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "afzX1nTithRAi4821qv3hQAAAIA"]
[Fri May 08 02:20:09.266283 2026] [:error] [pid 15631:tid 15710] [client 172.212.180.108:2332] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "afzX2XvP1GkPUuuLfqWA5wAAANc"]
[Fri May 08 02:20:12.949950 2026] [:error] [pid 15630:tid 15671] [client 172.212.180.108:51835] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "afzX3HTithRAi4821qv3hwAAAIs"]
[Fri May 08 02:20:14.482581 2026] [:error] [pid 28098:tid 28101] [client 172.212.180.108:52356] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/click.php"] [unique_id "afzX3svhwfljlt8trSpHCAAAAEE"]
[Fri May 08 02:20:19.285642 2026] [:error] [pid 15715:tid 15736] [client 172.212.180.108:26058] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "afzX4yY4dZsLOttMkccIlQAAARA"]
[Fri May 08 02:20:20.945399 2026] [:error] [pid 28098:tid 28123] [client 172.212.180.108:26079] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "afzX5Mvhwfljlt8trSpHDQAAAFc"]
[Fri May 08 02:20:25.290797 2026] [:error] [pid 28098:tid 28109] [client 172.212.180.108:13560] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "afzX6cvhwfljlt8trSpHDgAAAEk"]
[Fri May 08 02:20:26.082051 2026] [:error] [pid 15715:tid 15725] [client 172.212.180.108:62778] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "afzX6iY4dZsLOttMkccImQAAAQg"]
[Fri May 08 02:20:26.982159 2026] [:error] [pid 15715:tid 15739] [client 172.212.180.108:62749] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afzX6iY4dZsLOttMkccImwAAARM"]
[Fri May 08 02:20:29.391785 2026] [:error] [pid 15715:tid 15717] [client 172.212.180.108:64725] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afzX7SY4dZsLOttMkccIngAAAQA"]
[Fri May 08 02:20:33.320921 2026] [:error] [pid 15630:tid 15682] [client 172.212.180.108:20632] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afzX8XTithRAi4821qv3jwAAAJY"]
[Fri May 08 02:20:38.534649 2026] [:error] [pid 15715:tid 15732] [client 172.212.180.108:17253] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "afzX9iY4dZsLOttMkccIowAAAQw"]
[Fri May 08 02:20:50.643799 2026] [:error] [pid 28098:tid 28111] [client 172.212.180.108:14507] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afzYAsvhwfljlt8trSpHGwAAAEs"]
[Fri May 08 02:21:04.879480 2026] [:error] [pid 15715:tid 15737] [client 172.212.180.108:17263] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "afzYECY4dZsLOttMkccI1gAAARE"]
[Fri May 08 02:21:06.245153 2026] [:error] [pid 15630:tid 15665] [client 172.212.180.108:65357] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "afzYEnTithRAi4821qv3mQAAAIU"]
[Fri May 08 02:21:07.919158 2026] [:error] [pid 28098:tid 28103] [client 172.212.180.108:2859] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "afzYE8vhwfljlt8trSpHHgAAAEM"]
[Fri May 08 02:21:09.471601 2026] [:error] [pid 15630:tid 15662] [client 172.212.180.108:17637] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "afzYFXTithRAi4821qv3mwAAAII"]
[Fri May 08 02:21:11.367675 2026] [:error] [pid 15715:tid 15733] [client 172.212.180.108:17654] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afzYFyY4dZsLOttMkccI3wAAAQ0"]
[Fri May 08 02:21:12.513538 2026] [:error] [pid 15715:tid 15720] [client 172.212.180.108:17619] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afzYGCY4dZsLOttMkccI4QAAAQM"]
[Fri May 08 02:21:14.218518 2026] [:error] [pid 15630:tid 15663] [client 172.212.180.108:2694] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afzYGnTithRAi4821qv3ngAAAIM"]
[Fri May 08 02:21:16.208872 2026] [:error] [pid 15715:tid 15723] [client 172.212.180.108:65395] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afzYHCY4dZsLOttMkccI5QAAAQY"]
[Fri May 08 02:21:17.402505 2026] [:error] [pid 15630:tid 15667] [client 172.212.180.108:65406] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afzYHXTithRAi4821qv3nwAAAIc"]
[Fri May 08 02:21:20.251891 2026] [:error] [pid 15630:tid 15678] [client 172.212.180.108:2879] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afzYIHTithRAi4821qv3ogAAAJI"]
[Fri May 08 02:21:23.670204 2026] [:error] [pid 15631:tid 15701] [client 172.212.180.108:2818] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afzYI3vP1GkPUuuLfqWA_QAAAM4"]
[Fri May 08 02:21:27.988811 2026] [:error] [pid 15629:tid 15637] [client 172.212.180.108:21384] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "afzYJ_rIJCALdUrO43mqPwAAAAQ"]
[Fri May 08 02:21:34.262342 2026] [:error] [pid 12323:tid 12328] [client 172.212.180.108:2863] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "afzYLtdhHMnGFpc7MDxLmgAAAUE"]
[Fri May 08 02:21:38.093838 2026] [:error] [pid 15715:tid 15725] [client 172.212.180.108:17568] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "afzYMiY4dZsLOttMkccI_wAAAQg"]
[Fri May 08 02:21:41.537336 2026] [:error] [pid 15715:tid 15738] [client 172.212.180.108:52436] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/autoload_classmap.php"] [unique_id "afzYNSY4dZsLOttMkccJAgAAARI"]
[Fri May 08 02:21:44.539733 2026] [:error] [pid 15629:tid 15647] [client 172.212.180.108:65351] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afzYOPrIJCALdUrO43mqTAAAAA4"]
[Fri May 08 02:21:46.992936 2026] [:error] [pid 28098:tid 28110] [client 172.212.180.108:17577] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afzYOsvhwfljlt8trSpHJwAAAEo"]
[Fri May 08 02:21:48.579799 2026] [:error] [pid 28098:tid 28117] [client 172.212.180.108:14926] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afzYPMvhwfljlt8trSpHLAAAAFE"]
[Fri May 08 02:21:50.131522 2026] [:error] [pid 12374:tid 12391] [client 172.212.180.108:18156] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "afzYPho3QnNcFDMfKt2KsAAAAY0"]
[Fri May 08 02:21:51.861796 2026] [:error] [pid 15715:tid 15722] [client 172.212.180.108:18061] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afzYPyY4dZsLOttMkccJBwAAAQU"]
[Fri May 08 02:21:53.464765 2026] [:error] [pid 15715:tid 15732] [client 172.212.180.108:14531] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afzYQSY4dZsLOttMkccJCgAAAQw"]
[Fri May 08 02:21:55.389654 2026] [:error] [pid 15630:tid 15682] [client 172.212.180.108:17588] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afzYQ3TithRAi4821qv3vwAAAJY"]
[Fri May 08 02:21:58.356261 2026] [:error] [pid 28098:tid 28107] [client 172.212.180.108:20057] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afzYRsvhwfljlt8trSpHLgAAAEc"]
[Fri May 08 02:22:01.015992 2026] [:error] [pid 15629:tid 15653] [client 172.212.180.108:2207] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzYSfrIJCALdUrO43mqTwAAABQ"]
[Fri May 08 02:22:02.889478 2026] [:error] [pid 15630:tid 15664] [client 172.212.180.108:20067] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzYSnTithRAi4821qv3wQAAAIQ"]
[Fri May 08 02:22:30.838479 2026] [:error] [pid 15630:tid 15680] [client 172.212.180.108:14565] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "afzYZnTithRAi4821qv34QAAAJQ"]
[Fri May 08 02:22:31.667595 2026] [:error] [pid 15630:tid 15677] [client 172.212.180.108:52963] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "afzYZ3TithRAi4821qv34gAAAJE"]
[Fri May 08 02:22:33.031884 2026] [:error] [pid 12323:tid 12329] [client 172.212.180.108:52986] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "afzYaddhHMnGFpc7MDxLuQAAAUI"]
[Fri May 08 02:22:36.854068 2026] [:error] [pid 15631:tid 15696] [client 172.212.180.108:14152] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "afzYbHvP1GkPUuuLfqWBGQAAAMk"]
[Fri May 08 02:22:40.464995 2026] [:error] [pid 15715:tid 15734] [client 172.212.180.108:2193] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzYcCY4dZsLOttMkccJMQAAAQ4"]
[Fri May 08 02:22:42.353160 2026] [:error] [pid 15715:tid 15738] [client 172.212.180.108:41417] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzYciY4dZsLOttMkccJNAAAARI"]
[Fri May 08 02:22:44.973362 2026] [:error] [pid 15631:tid 15704] [client 172.212.180.108:52929] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzYdHvP1GkPUuuLfqWBTgAAANE"]
[Fri May 08 02:22:47.271340 2026] [:error] [pid 15630:tid 15679] [client 172.212.180.108:29350] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "afzYd3TithRAi4821qv35wAAAJM"]
[Fri May 08 02:22:49.806749 2026] [:error] [pid 15630:tid 15668] [client 172.212.180.108:65321] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "afzYeXTithRAi4821qv37AAAAIg"]
[Fri May 08 02:22:51.471999 2026] [:error] [pid 15631:tid 15708] [client 172.212.180.108:65286] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "afzYe3vP1GkPUuuLfqWBUAAAANU"]
[Fri May 08 02:22:53.880510 2026] [:error] [pid 15629:tid 15635] [client 172.212.180.108:34633] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "afzYffrIJCALdUrO43mqaAAAAAI"]
[Fri May 08 02:22:58.740072 2026] [:error] [pid 28098:tid 28105] [client 172.212.180.108:64684] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "afzYgsvhwfljlt8trSpHOAAAAEU"]
[Fri May 08 02:23:00.390041 2026] [:error] [pid 15630:tid 15674] [client 172.212.180.108:27807] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "afzYhHTithRAi4821qv39wAAAI4"]
[Fri May 08 02:23:01.948288 2026] [:error] [pid 12323:tid 12339] [client 172.212.180.108:18757] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "afzYhddhHMnGFpc7MDxLyAAAAUw"]
[Fri May 08 02:23:05.354055 2026] [:error] [pid 15715:tid 15719] [client 172.212.180.108:27804] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "afzYiSY4dZsLOttMkccJRQAAAQI"]
[Fri May 08 02:23:09.170948 2026] [:error] [pid 15631:tid 15699] [client 172.212.180.108:18777] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/byp.php"] [unique_id "afzYjXvP1GkPUuuLfqWBWQAAAMw"]
[Fri May 08 02:23:18.741902 2026] [:error] [pid 12323:tid 12333] [client 172.212.180.108:64646] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afzYltdhHMnGFpc7MDxL0QAAAUY"]
[Fri May 08 02:23:20.593776 2026] [:error] [pid 12374:tid 12399] [client 172.212.180.108:41347] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afzYmBo3QnNcFDMfKt2KzwAAAZU"]
[Fri May 08 02:23:22.839128 2026] [:error] [pid 15715:tid 15725] [client 172.212.180.108:64650] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afzYmiY4dZsLOttMkccJVQAAAQg"]
[Fri May 08 02:23:24.368751 2026] [:error] [pid 15629:tid 15644] [client 172.212.180.108:46065] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "afzYnPrIJCALdUrO43mqbwAAAAs"]
[Fri May 08 02:23:27.812874 2026] [:error] [pid 15715:tid 15733] [client 172.212.180.108:46113] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/index.php"] [unique_id "afzYnyY4dZsLOttMkccJWwAAAQ0"]
[Fri May 08 02:23:32.718821 2026] [autoindex:error] [pid 15715:tid 15720] [client 172.212.180.108:17194] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 02:23:33.953505 2026] [proxy_fcgi:error] [pid 15715:tid 15733] [client 172.212.180.108:17194] AH01071: Got error 'PHP message: PHP Warning:  Undefined property: stdClass::$user_email in /home/makifimc/public_html/wp-content/plugins/photo-gallery/wd/includes/deactivate.php on line 69'
[Fri May 08 02:23:34.142402 2026] [:error] [pid 15715:tid 15735] [client 172.212.180.108:17194] [client 172.212.180.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.212.180.108, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afzYpiY4dZsLOttMkccJZgAAAQ8"]
[Fri May 08 02:23:37.100478 2026] [:error] [pid 15715:tid 15744] [client 172.212.180.108:17194] [client 172.212.180.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.212.180.108, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "afzYqSY4dZsLOttMkccJaAAAARg"]
[Fri May 08 02:23:40.763139 2026] [:error] [pid 28098:tid 28108] [client 172.212.180.108:64090] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afzYrMvhwfljlt8trSpHSwAAAEg"]
[Fri May 08 02:23:45.220678 2026] [:error] [pid 15630:tid 15674] [client 172.212.180.108:52917] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "afzYsXTithRAi4821qv4NQAAAI4"]
[Fri May 08 02:23:51.815599 2026] [autoindex:error] [pid 15715:tid 15738] [client 172.212.180.108:17194] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 02:23:53.252607 2026] [:error] [pid 12374:tid 12396] [client 172.212.180.108:3026] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "afzYuRo3QnNcFDMfKt2K3AAAAZI"]
[Fri May 08 02:23:58.581343 2026] [:error] [pid 15630:tid 15681] [client 172.212.180.108:33111] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "afzYvnTithRAi4821qv4PwAAAJU"]
[Fri May 08 02:24:06.468865 2026] [proxy_fcgi:error] [pid 15715:tid 15737] [client 172.212.180.108:62839] AH01071: Got error 'Primary script unknown'
[Fri May 08 02:24:09.285277 2026] [:error] [pid 15715:tid 15717] [client 172.212.180.108:62839] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "afzYySY4dZsLOttMkccJkQAAAQA"]
[Fri May 08 02:24:11.961371 2026] [:error] [pid 15715:tid 15744] [client 172.212.180.108:15357] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "afzYyyY4dZsLOttMkccJlQAAARg"]
[Fri May 08 02:24:13.958532 2026] [:error] [pid 15715:tid 15720] [client 172.212.180.108:16076] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "afzYzSY4dZsLOttMkccJmQAAAQM"]
[Fri May 08 02:24:15.094495 2026] [:error] [pid 28098:tid 28113] [client 172.212.180.108:16123] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/security.php"] [unique_id "afzYz8vhwfljlt8trSpHUQAAAE0"]
[Fri May 08 02:24:16.723090 2026] [:error] [pid 28098:tid 28121] [client 172.212.180.108:24157] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "afzY0Mvhwfljlt8trSpHUgAAAFU"]
[Fri May 08 02:24:18.935157 2026] [:error] [pid 15630:tid 15684] [client 172.212.180.108:57598] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "afzY0nTithRAi4821qv4RwAAAJg"]
[Fri May 08 02:24:21.367955 2026] [:error] [pid 15630:tid 15668] [client 172.212.180.108:47761] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "afzY1XTithRAi4821qv4SQAAAIg"]
[Fri May 08 02:24:22.746723 2026] [:error] [pid 15630:tid 15661] [client 172.212.180.108:24143] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "afzY1nTithRAi4821qv4TQAAAIE"]
[Fri May 08 02:24:25.258031 2026] [:error] [pid 15630:tid 15683] [client 172.212.180.108:26047] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afzY2XTithRAi4821qv4UAAAAJc"]
[Fri May 08 02:24:28.399054 2026] [:error] [pid 15630:tid 15660] [client 172.212.180.108:47774] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afzY3HTithRAi4821qv4VAAAAIA"]
[Fri May 08 02:24:32.647704 2026] [:error] [pid 15715:tid 15741] [client 172.212.180.108:26020] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afzY4CY4dZsLOttMkccJpAAAARU"]
[Fri May 08 02:24:34.787935 2026] [:error] [pid 15715:tid 15725] [client 172.212.180.108:24153] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afzY4iY4dZsLOttMkccJpgAAAQg"]
[Fri May 08 02:24:37.311205 2026] [:error] [pid 15630:tid 15683] [client 172.212.180.108:19339] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "afzY5XTithRAi4821qv4WAAAAJc"]
[Fri May 08 02:24:39.021573 2026] [:error] [pid 15715:tid 15743] [client 172.212.180.108:19353] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "afzY5yY4dZsLOttMkccJqQAAARc"]
[Fri May 08 02:24:40.858450 2026] [:error] [pid 15715:tid 15737] [client 172.212.180.108:13767] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "afzY6CY4dZsLOttMkccJrAAAARE"]
[Fri May 08 02:24:44.816981 2026] [:error] [pid 12323:tid 12347] [client 172.212.180.108:20714] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "afzY7NdhHMnGFpc7MDxL3wAAAVQ"]
[Fri May 08 02:24:47.520905 2026] [:error] [pid 15631:tid 15711] [client 172.212.180.108:2346] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afzY73vP1GkPUuuLfqWBcwAAANg"]
[Fri May 08 02:24:54.017247 2026] [:error] [pid 15715:tid 15730] [client 172.212.180.108:24067] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "afzY9iY4dZsLOttMkccJuQAAAQo"]
[Fri May 08 02:24:58.648281 2026] [:error] [pid 15715:tid 15738] [client 172.212.180.108:52355] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "afzY-iY4dZsLOttMkccJvAAAARI"]
[Fri May 08 02:25:02.195405 2026] [:error] [pid 15630:tid 15668] [client 172.212.180.108:62742] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "afzY_nTithRAi4821qv4XwAAAIg"]
[Fri May 08 02:25:13.372641 2026] [autoindex:error] [pid 15631:tid 15699] [client 172.212.180.108:57514] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 02:25:25.143460 2026] [:error] [pid 12374:tid 12379] [client 172.212.180.108:57534] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "afzZFRo3QnNcFDMfKt2LBAAAAYE"]
[Fri May 08 02:25:32.528643 2026] [:error] [pid 15630:tid 15667] [client 172.212.180.108:14505] [client 172.212.180.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "afzZHHTithRAi4821qv4dgAAAIc"]
[Fri May 08 02:25:42.510958 2026] [:error] [pid 15715:tid 15719] [client 172.212.180.108:13538] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "afzZJiY4dZsLOttMkccJ_QAAAQI"]
[Fri May 08 02:25:44.098493 2026] [:error] [pid 15631:tid 15710] [client 172.212.180.108:2107] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "afzZKHvP1GkPUuuLfqWBowAAANc"]
[Fri May 08 02:25:45.955671 2026] [:error] [pid 15630:tid 15663] [client 172.212.180.108:2053] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "afzZKXTithRAi4821qv4gwAAAIM"]
[Fri May 08 02:25:48.911983 2026] [:error] [pid 12323:tid 12328] [client 172.212.180.108:20617] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ha.php"] [unique_id "afzZLNdhHMnGFpc7MDxL7AAAAUE"]
[Fri May 08 02:25:50.546367 2026] [:error] [pid 15630:tid 15678] [client 172.212.180.108:2082] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "afzZLnTithRAi4821qv4iQAAAJI"]
[Fri May 08 02:25:51.734386 2026] [:error] [pid 15630:tid 15660] [client 172.212.180.108:2708] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "afzZL3TithRAi4821qv4igAAAIA"]
[Fri May 08 02:25:56.806877 2026] [:error] [pid 15631:tid 15697] [client 172.212.180.108:2110] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "afzZNHvP1GkPUuuLfqWBpQAAAMo"]
[Fri May 08 02:25:58.628453 2026] [:error] [pid 15631:tid 15698] [client 172.212.180.108:17237] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gg.php"] [unique_id "afzZNnvP1GkPUuuLfqWBpgAAAMs"]
[Fri May 08 02:26:00.180678 2026] [:error] [pid 15629:tid 15633] [client 172.212.180.108:14936] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "afzZOPrIJCALdUrO43mqqwAAAAA"]
[Fri May 08 02:26:03.648634 2026] [:error] [pid 15631:tid 15701] [client 172.212.180.108:16004] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "afzZO3vP1GkPUuuLfqWBqgAAAM4"]
[Fri May 08 02:26:05.998131 2026] [:error] [pid 15631:tid 15706] [client 172.212.180.108:2690] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "afzZPXvP1GkPUuuLfqWBrgAAANM"]
[Fri May 08 02:26:08.382416 2026] [:error] [pid 15630:tid 15681] [client 172.212.180.108:2719] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/we2.php"] [unique_id "afzZQHTithRAi4821qv4jgAAAJU"]
[Fri May 08 02:26:09.704823 2026] [:error] [pid 15715:tid 15733] [client 172.212.180.108:2983] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "afzZQSY4dZsLOttMkccKAQAAAQ0"]
[Fri May 08 02:26:13.107086 2026] [:error] [pid 15631:tid 15698] [client 172.212.180.108:52963] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "afzZRXvP1GkPUuuLfqWBswAAAMs"]
[Fri May 08 02:26:15.298524 2026] [:error] [pid 15629:tid 15651] [client 172.212.180.108:2947] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "afzZR_rIJCALdUrO43mqsAAAABI"]
[Fri May 08 02:26:18.132076 2026] [:error] [pid 15630:tid 15663] [client 172.212.180.108:2870] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/04.php"] [unique_id "afzZSnTithRAi4821qv4lwAAAIM"]
[Fri May 08 02:26:20.786341 2026] [:error] [pid 15631:tid 15701] [client 172.212.180.108:2068] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "afzZTHvP1GkPUuuLfqWBtQAAAM4"]
[Fri May 08 02:26:24.297684 2026] [:error] [pid 15630:tid 15683] [client 172.212.180.108:17628] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "afzZUHTithRAi4821qv4mgAAAJc"]
[Fri May 08 02:26:27.296529 2026] [:error] [pid 15715:tid 15734] [client 172.212.180.108:2093] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "afzZUyY4dZsLOttMkccKHAAAAQ4"]
[Fri May 08 02:26:31.302289 2026] [:error] [pid 12374:tid 12385] [client 172.212.180.108:52442] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/333.php"] [unique_id "afzZVxo3QnNcFDMfKt2LDwAAAYc"]
[Fri May 08 02:26:34.221264 2026] [:error] [pid 15629:tid 15640] [client 172.212.180.108:2064] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/520.php"] [unique_id "afzZWvrIJCALdUrO43mqtwAAAAc"]
[Fri May 08 02:27:06.272480 2026] [:error] [pid 12374:tid 12388] [client 172.212.180.108:2389] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "afzZeho3QnNcFDMfKt2LLAAAAYo"]
[Fri May 08 02:27:07.821840 2026] [:error] [pid 15631:tid 15702] [client 172.212.180.108:2315] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "afzZe3vP1GkPUuuLfqWBzwAAAM8"]
[Fri May 08 02:27:10.656692 2026] [:error] [pid 15715:tid 15741] [client 172.212.180.108:26063] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "afzZfiY4dZsLOttMkccKJQAAARU"]
[Fri May 08 02:27:12.063020 2026] [:error] [pid 15630:tid 15674] [client 172.212.180.108:41431] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file7.php"] [unique_id "afzZgHTithRAi4821qv4vAAAAI4"]
[Fri May 08 02:27:12.943720 2026] [:error] [pid 15715:tid 15739] [client 172.212.180.108:20685] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "afzZgCY4dZsLOttMkccKKQAAARM"]
[Fri May 08 02:27:17.192222 2026] [:error] [pid 15715:tid 15725] [client 172.212.180.108:41457] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "afzZhSY4dZsLOttMkccKMgAAAQg"]
[Fri May 08 02:27:19.255694 2026] [:error] [pid 15630:tid 15670] [client 172.212.180.108:57473] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "afzZh3TithRAi4821qv4wgAAAIo"]
[Fri May 08 02:27:22.744483 2026] [:error] [pid 15715:tid 15743] [client 172.212.180.108:17552] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "afzZiiY4dZsLOttMkccKNAAAARc"]
[Fri May 08 02:27:26.520954 2026] [:error] [pid 15631:tid 15693] [client 172.212.180.108:2307] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afzZjnvP1GkPUuuLfqWB4QAAAMY"]
[Fri May 08 02:27:28.463888 2026] [:error] [pid 15630:tid 15671] [client 172.212.180.108:64743] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afzZkHTithRAi4821qv4xwAAAIs"]
[Fri May 08 02:27:30.217685 2026] [:error] [pid 12323:tid 12328] [client 172.212.180.108:57498] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afzZktdhHMnGFpc7MDxMCQAAAUE"]
[Fri May 08 02:27:31.862304 2026] [:error] [pid 15630:tid 15684] [client 172.212.180.108:2348] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afzZk3TithRAi4821qv4yAAAAJg"]
[Fri May 08 02:27:33.415174 2026] [:error] [pid 15630:tid 15660] [client 172.212.180.108:17585] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "afzZlXTithRAi4821qv4ygAAAIA"]
[Fri May 08 02:27:34.749548 2026] [:error] [pid 15631:tid 15711] [client 172.212.180.108:26082] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "afzZlnvP1GkPUuuLfqWB4wAAANg"]
[Fri May 08 02:27:36.152898 2026] [:error] [pid 15629:tid 15644] [client 172.212.180.108:20722] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "afzZmPrIJCALdUrO43mq3gAAAAs"]
[Fri May 08 02:27:37.392219 2026] [:error] [pid 15630:tid 15670] [client 172.212.180.108:13777] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nox.php"] [unique_id "afzZmXTithRAi4821qv4zwAAAIo"]
[Fri May 08 02:27:38.738126 2026] [:error] [pid 15631:tid 15692] [client 172.212.180.108:13762] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "afzZmnvP1GkPUuuLfqWB6QAAAMU"]
[Fri May 08 02:27:40.487759 2026] [:error] [pid 15630:tid 15684] [client 172.212.180.108:20686] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "afzZnHTithRAi4821qv41AAAAJg"]
[Fri May 08 02:27:41.771744 2026] [:error] [pid 15715:tid 15720] [client 172.212.180.108:2345] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "afzZnSY4dZsLOttMkccKRQAAAQM"]
[Fri May 08 02:27:45.959005 2026] [:error] [pid 15715:tid 15726] [client 172.212.180.108:57482] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file48.php"] [unique_id "afzZoSY4dZsLOttMkccKRgAAAQk"]
[Fri May 08 02:27:47.439931 2026] [:error] [pid 15715:tid 15737] [client 172.212.180.108:13783] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "afzZoyY4dZsLOttMkccKSQAAARE"]
[Fri May 08 02:27:50.762763 2026] [:error] [pid 15630:tid 15683] [client 172.212.180.108:64716] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "afzZpnTithRAi4821qv44AAAAJc"]
[Fri May 08 02:27:53.220694 2026] [:error] [pid 15715:tid 15740] [client 172.212.180.108:20677] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "afzZqSY4dZsLOttMkccKTwAAARQ"]
[Fri May 08 02:27:56.297702 2026] [:error] [pid 15715:tid 15733] [client 172.212.180.108:20678] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "afzZrCY4dZsLOttMkccKUgAAAQ0"]
[Fri May 08 02:28:00.545600 2026] [:error] [pid 15631:tid 15711] [client 172.212.180.108:57477] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "afzZsHvP1GkPUuuLfqWB7wAAANg"]
[Fri May 08 02:28:01.234541 2026] [:error] [pid 28098:tid 28109] [client 172.212.180.108:2332] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class9.php"] [unique_id "afzZscvhwfljlt8trSpHnwAAAEk"]
[Fri May 08 02:28:26.803755 2026] [:error] [pid 15631:tid 15708] [client 172.212.180.108:17586] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "afzZynvP1GkPUuuLfqWCBwAAANU"]
[Fri May 08 02:28:28.979880 2026] [:error] [pid 15631:tid 15698] [client 172.212.180.108:2312] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "afzZzHvP1GkPUuuLfqWCCQAAAMs"]
[Fri May 08 02:28:32.760538 2026] [:error] [pid 15630:tid 15672] [client 172.212.180.108:57488] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "afzZ0HTithRAi4821qv5BwAAAIw"]
[Fri May 08 02:28:36.246794 2026] [:error] [pid 15715:tid 15736] [client 172.212.180.108:26111] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xaz.php"] [unique_id "afzZ1CY4dZsLOttMkccKawAAARA"]
[Fri May 08 02:28:38.508964 2026] [:error] [pid 15630:tid 15660] [client 172.212.180.108:13820] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "afzZ1nTithRAi4821qv5EgAAAIA"]
[Fri May 08 02:28:40.377872 2026] [:error] [pid 15629:tid 15639] [client 172.212.180.108:17561] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "afzZ2PrIJCALdUrO43mq6AAAAAY"]
[Fri May 08 02:28:42.057206 2026] [:error] [pid 15715:tid 15741] [client 172.212.180.108:26058] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "afzZ2iY4dZsLOttMkccKcwAAARU"]
[Fri May 08 02:28:44.461387 2026] [:error] [pid 15630:tid 15679] [client 172.212.180.108:2315] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/up4.php"] [unique_id "afzZ3HTithRAi4821qv5FAAAAJM"]
[Fri May 08 02:28:45.820959 2026] [:error] [pid 28098:tid 28100] [client 172.212.180.108:20698] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "afzZ3cvhwfljlt8trSpHsQAAAEA"]
[Fri May 08 02:28:46.979937 2026] [:error] [pid 15715:tid 15724] [client 172.212.180.108:57506] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "afzZ3iY4dZsLOttMkccKegAAAQc"]
[Fri May 08 02:28:48.892989 2026] [:error] [pid 15715:tid 15740] [client 172.212.180.108:57478] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "afzZ4CY4dZsLOttMkccKgAAAARQ"]
[Fri May 08 02:28:50.345097 2026] [:error] [pid 15715:tid 15734] [client 172.212.180.108:41445] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1aa.php"] [unique_id "afzZ4iY4dZsLOttMkccKgwAAAQ4"]
[Fri May 08 02:28:51.752067 2026] [:error] [pid 28098:tid 28123] [client 172.212.180.108:41453] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "afzZ48vhwfljlt8trSpHtAAAAFc"]
[Fri May 08 02:28:54.813828 2026] [:error] [pid 12323:tid 12340] [client 172.212.180.108:20716] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "afzZ5tdhHMnGFpc7MDxMGwAAAU0"]
[Fri May 08 02:28:56.106926 2026] [:error] [pid 15715:tid 15736] [client 172.212.180.108:57572] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "afzZ6CY4dZsLOttMkccKhQAAARA"]
[Fri May 08 02:28:57.430539 2026] [:error] [pid 15629:tid 15642] [client 172.212.180.108:20700] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/elp.php"] [unique_id "afzZ6frIJCALdUrO43mq6gAAAAk"]
[Fri May 08 02:28:58.438872 2026] [:error] [pid 15715:tid 15741] [client 172.212.180.108:2245] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "afzZ6iY4dZsLOttMkccKjAAAARU"]
[Fri May 08 02:29:00.089302 2026] [:error] [pid 15715:tid 15732] [client 172.212.180.108:47775] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "afzZ7CY4dZsLOttMkccKjwAAAQw"]
[Fri May 08 02:29:01.665857 2026] [:error] [pid 15630:tid 15674] [client 172.212.180.108:2175] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "afzZ7XTithRAi4821qv5IgAAAI4"]
[Fri May 08 02:29:02.522307 2026] [:error] [pid 15715:tid 15744] [client 172.212.180.108:29310] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtz.php"] [unique_id "afzZ7iY4dZsLOttMkccKkQAAARg"]
[Fri May 08 02:29:03.789024 2026] [:error] [pid 15715:tid 15733] [client 172.212.180.108:57581] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "afzZ7yY4dZsLOttMkccKkwAAAQ0"]
[Fri May 08 02:29:05.069741 2026] [:error] [pid 15630:tid 15675] [client 172.212.180.108:57539] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "afzZ8XTithRAi4821qv5JQAAAI8"]
[Fri May 08 02:29:08.255319 2026] [:error] [pid 15715:tid 15717] [client 172.212.180.108:2271] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "afzZ9CY4dZsLOttMkccKmgAAAQA"]
[Fri May 08 02:29:09.857288 2026] [:error] [pid 15630:tid 15678] [client 172.212.180.108:2273] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/galex.php"] [unique_id "afzZ9XTithRAi4821qv5JwAAAJI"]
[Fri May 08 02:29:11.746531 2026] [:error] [pid 15715:tid 15731] [client 172.212.180.108:19984] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "afzZ9yY4dZsLOttMkccKoAAAAQs"]
[Fri May 08 02:29:13.589477 2026] [:error] [pid 15715:tid 15739] [client 172.212.180.108:29254] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "afzZ-SY4dZsLOttMkccKogAAARM"]
[Fri May 08 02:29:14.791371 2026] [:error] [pid 15631:tid 15703] [client 172.212.180.108:2267] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "afzZ-nvP1GkPUuuLfqWCFQAAANA"]
[Fri May 08 02:29:16.560440 2026] [:error] [pid 15715:tid 15736] [client 172.212.180.108:33102] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xb.php"] [unique_id "afzZ_CY4dZsLOttMkccKpAAAARA"]
[Fri May 08 02:29:18.637638 2026] [:error] [pid 28098:tid 28103] [client 172.212.180.108:48357] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "afzZ_svhwfljlt8trSpHtwAAAEM"]
[Fri May 08 02:29:23.532388 2026] [:error] [pid 15715:tid 15724] [client 172.212.180.108:3038] [client 172.212.180.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ova.php"] [unique_id "afzaAyY4dZsLOttMkccKsgAAAQc"]
[Fri May 08 03:43:36.923626 2026] [:error] [pid 51007:tid 51040] [client 34.97.48.38:51114] [client 34.97.48.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "afzraFMagSGstWKyzzVaaQAAABI"]
[Fri May 08 04:54:49.805668 2026] [:error] [pid 51009:tid 51076] [client 172.212.146.49:4375] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "afz8GeB0GbUWhxgzX9WKYAAAAIA"]
[Fri May 08 04:54:59.209799 2026] [:error] [pid 51008:tid 51067] [client 172.212.146.49:46786] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "afz8I3B58C2Y1tgLtuL3NgAAAFI"]
[Fri May 08 04:55:05.256523 2026] [:error] [pid 51009:tid 51081] [client 172.212.146.49:4680] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "afz8KeB0GbUWhxgzX9WKeAAAAIU"]
[Fri May 08 04:55:07.009028 2026] [:error] [pid 51113:tid 51137] [client 172.212.146.49:36504] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "afz8K0Qfs7sWtqkpQIfz7QAAANY"]
[Fri May 08 04:55:08.975090 2026] [:error] [pid 51007:tid 51022] [client 172.212.146.49:57462] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "afz8LFMagSGstWKyzzVoUAAAAAA"]
[Fri May 08 04:55:16.622317 2026] [:error] [pid 51113:tid 51136] [client 172.212.146.49:4696] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "afz8NEQfs7sWtqkpQIf0IgAAANU"]
[Fri May 08 04:55:18.266618 2026] [:error] [pid 51113:tid 51117] [client 172.212.146.49:4482] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "afz8NkQfs7sWtqkpQIf0JgAAAMI"]
[Fri May 08 04:55:21.265673 2026] [:error] [pid 51007:tid 51032] [client 172.212.146.49:4501] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "afz8OVMagSGstWKyzzVoXgAAAAo"]
[Fri May 08 04:55:26.686459 2026] [:error] [pid 51113:tid 51134] [client 172.212.146.49:4356] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "afz8PkQfs7sWtqkpQIf0QQAAANM"]
[Fri May 08 04:55:30.846351 2026] [:error] [pid 51009:tid 51084] [client 172.212.146.49:4269] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "afz8QuB0GbUWhxgzX9WKnAAAAIg"]
[Fri May 08 04:55:34.482367 2026] [:error] [pid 51008:tid 51056] [client 172.212.146.49:50052] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "afz8RnB58C2Y1tgLtuL3XwAAAEc"]
[Fri May 08 04:55:41.991512 2026] [:error] [pid 51113:tid 51138] [client 172.212.146.49:57426] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "afz8TUQfs7sWtqkpQIf0bwAAANc"]
[Fri May 08 04:55:43.694617 2026] [:error] [pid 51008:tid 51064] [client 172.212.146.49:45059] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "afz8T3B58C2Y1tgLtuL3YgAAAE8"]
[Fri May 08 04:56:22.626028 2026] [:error] [pid 51113:tid 51118] [client 172.212.146.49:53436] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h.php"] [unique_id "afz8dkQfs7sWtqkpQIf0_AAAAMM"]
[Fri May 08 04:56:24.235298 2026] [:error] [pid 51009:tid 51084] [client 172.212.146.49:45577] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h.php"] [unique_id "afz8eOB0GbUWhxgzX9WLDwAAAIg"]
[Fri May 08 04:56:25.974787 2026] [:error] [pid 51113:tid 51115] [client 172.212.146.49:37796] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h.php"] [unique_id "afz8eUQfs7sWtqkpQIf1AwAAAMA"]
[Fri May 08 04:56:27.630276 2026] [:error] [pid 51008:tid 51072] [client 172.212.146.49:47661] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/h.php"] [unique_id "afz8e3B58C2Y1tgLtuL3tAAAAFc"]
[Fri May 08 04:56:29.579017 2026] [:error] [pid 51009:tid 51079] [client 172.212.146.49:58733] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "afz8feB0GbUWhxgzX9WLGQAAAIM"]
[Fri May 08 04:56:35.531023 2026] [:error] [pid 51007:tid 51025] [client 172.212.146.49:58724] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "afz8g1MagSGstWKyzzVosQAAAAM"]
[Fri May 08 04:56:37.467082 2026] [:error] [pid 51113:tid 51127] [client 172.212.146.49:46328] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "afz8hUQfs7sWtqkpQIf1JAAAAMw"]
[Fri May 08 04:56:40.048794 2026] [:error] [pid 51113:tid 51126] [client 172.212.146.49:5018] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "afz8iEQfs7sWtqkpQIf1LgAAAMs"]
[Fri May 08 04:56:42.985697 2026] [:error] [pid 51008:tid 51055] [client 172.212.146.49:42575] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "afz8inB58C2Y1tgLtuL33AAAAEY"]
[Fri May 08 04:56:44.637532 2026] [:error] [pid 51113:tid 51120] [client 172.212.146.49:58736] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "afz8jEQfs7sWtqkpQIf1PgAAAMU"]
[Fri May 08 04:56:48.025526 2026] [:error] [pid 51113:tid 51117] [client 172.212.146.49:4995] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "afz8kEQfs7sWtqkpQIf1SQAAAMI"]
[Fri May 08 04:56:53.860636 2026] [:error] [pid 51009:tid 51076] [client 172.212.146.49:5030] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "afz8leB0GbUWhxgzX9WLLQAAAIA"]
[Fri May 08 04:56:56.821702 2026] [:error] [pid 51009:tid 51085] [client 172.212.146.49:43015] [client 172.212.146.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afz8mOB0GbUWhxgzX9WLMQAAAIk"]
[Fri May 08 04:57:12.019979 2026] [:error] [pid 51009:tid 51099] [client 172.212.146.49:43837] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxl.php"] [unique_id "afz8qOB0GbUWhxgzX9WLQwAAAJc"]
[Fri May 08 04:57:14.909600 2026] [:error] [pid 51007:tid 51040] [client 172.212.146.49:48823] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "afz8qlMagSGstWKyzzVowwAAABI"]
[Fri May 08 04:57:16.885667 2026] [:error] [pid 51113:tid 51119] [client 172.212.146.49:37855] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "afz8rEQfs7sWtqkpQIf1pgAAAMQ"]
[Fri May 08 04:57:18.102464 2026] [:error] [pid 51008:tid 51053] [client 172.212.146.49:43838] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "afz8rnB58C2Y1tgLtuL36wAAAEQ"]
[Fri May 08 04:57:19.982366 2026] [:error] [pid 51008:tid 51059] [client 172.212.146.49:43022] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "afz8r3B58C2Y1tgLtuL37AAAAEo"]
[Fri May 08 04:57:33.125873 2026] [autoindex:error] [pid 51008:tid 51050] [client 172.212.146.49:37875] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 04:57:35.367908 2026] [autoindex:error] [pid 51008:tid 51051] [client 172.212.146.49:37875] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 04:57:37.441008 2026] [autoindex:error] [pid 51008:tid 51049] [client 172.212.146.49:37875] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 04:57:48.668466 2026] [:error] [pid 51009:tid 51084] [client 172.212.146.49:58763] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "afz8zOB0GbUWhxgzX9WLhQAAAIg"]
[Fri May 08 04:57:50.391419 2026] [:error] [pid 51008:tid 51061] [client 172.212.146.49:58783] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "afz8znB58C2Y1tgLtuL4HAAAAEw"]
[Fri May 08 04:57:52.179292 2026] [:error] [pid 51113:tid 51124] [client 172.212.146.49:46849] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "afz80EQfs7sWtqkpQIf17wAAAMk"]
[Fri May 08 04:57:53.957805 2026] [:error] [pid 51008:tid 51063] [client 172.212.146.49:4940] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "afz80XB58C2Y1tgLtuL4IwAAAE4"]
[Fri May 08 04:57:59.098535 2026] [:error] [pid 51113:tid 51115] [client 172.212.146.49:4653] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class892.php"] [unique_id "afz810Qfs7sWtqkpQIf1_wAAAMA"]
[Fri May 08 04:58:01.652352 2026] [:error] [pid 51008:tid 51050] [client 172.212.146.49:52770] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class892.php"] [unique_id "afz82XB58C2Y1tgLtuL4LQAAAEE"]
[Fri May 08 04:58:03.007864 2026] [:error] [pid 51008:tid 51070] [client 172.212.146.49:53984] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class892.php"] [unique_id "afz823B58C2Y1tgLtuL4MAAAAFU"]
[Fri May 08 04:58:07.017392 2026] [:error] [pid 51113:tid 51129] [client 172.212.146.49:52764] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class892.php"] [unique_id "afz830Qfs7sWtqkpQIf2DgAAAM4"]
[Fri May 08 04:58:08.891994 2026] [:error] [pid 51008:tid 51049] [client 172.212.146.49:45533] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "afz84HB58C2Y1tgLtuL4OQAAAEA"]
[Fri May 08 04:58:10.363083 2026] [:error] [pid 51009:tid 51092] [client 172.212.146.49:58799] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "afz84uB0GbUWhxgzX9WLngAAAJA"]
[Fri May 08 04:58:18.174817 2026] [:error] [pid 51008:tid 51054] [client 172.212.146.49:58753] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "afz86nB58C2Y1tgLtuL4SQAAAEU"]
[Fri May 08 04:58:22.505638 2026] [:error] [pid 51008:tid 51050] [client 172.212.146.49:51420] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "afz87nB58C2Y1tgLtuL4UQAAAEE"]
[Fri May 08 04:58:24.568401 2026] [:error] [pid 51113:tid 51131] [client 172.212.146.49:53994] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "afz88EQfs7sWtqkpQIf2RQAAANA"]
[Fri May 08 04:58:27.180472 2026] [:error] [pid 51009:tid 51083] [client 172.212.146.49:53998] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "afz88-B0GbUWhxgzX9WLuAAAAIc"]
[Fri May 08 04:58:28.832692 2026] [:error] [pid 51007:tid 51030] [client 172.212.146.49:54004] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "afz89FMagSGstWKyzzVpFAAAAAg"]
[Fri May 08 04:58:31.608670 2026] [:error] [pid 51009:tid 51083] [client 172.212.146.49:53983] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "afz89-B0GbUWhxgzX9WLxQAAAIc"]
[Fri May 08 04:58:33.528107 2026] [:error] [pid 51008:tid 51066] [client 172.212.146.49:54012] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pucci.php"] [unique_id "afz8-XB58C2Y1tgLtuL4bAAAAFE"]
[Fri May 08 04:58:35.935023 2026] [:error] [pid 51007:tid 51035] [client 172.212.146.49:45567] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pucci.php"] [unique_id "afz8-1MagSGstWKyzzVpHwAAAA0"]
[Fri May 08 04:58:36.516854 2026] [:error] [pid 51008:tid 51050] [client 172.212.146.49:48767] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pucci.php"] [unique_id "afz8_HB58C2Y1tgLtuL4cwAAAEE"]
[Fri May 08 04:58:40.823430 2026] [:error] [pid 51007:tid 51034] [client 172.212.146.49:45541] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pucci.php"] [unique_id "afz9AFMagSGstWKyzzVpJwAAAAw"]
[Fri May 08 04:58:55.493313 2026] [autoindex:error] [pid 51007:tid 51045] [client 172.212.146.49:45517] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 04:59:11.468052 2026] [autoindex:error] [pid 51113:tid 51134] [client 172.212.146.49:45535] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 04:59:22.658506 2026] [autoindex:error] [pid 51113:tid 51117] [client 172.212.146.49:45535] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 04:59:29.989786 2026] [:error] [pid 51009:tid 51098] [client 172.212.146.49:45528] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "afz9MeB0GbUWhxgzX9WNGwAAAJY"]
[Fri May 08 04:59:32.024998 2026] [:error] [pid 51007:tid 51032] [client 172.212.146.49:51462] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "afz9NFMagSGstWKyzzVpWgAAAAo"]
[Fri May 08 04:59:33.279359 2026] [:error] [pid 51009:tid 51100] [client 172.212.146.49:51460] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "afz9NeB0GbUWhxgzX9WNLwAAAJg"]
[Fri May 08 04:59:35.456416 2026] [:error] [pid 51009:tid 51088] [client 172.212.146.49:45504] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "afz9N-B0GbUWhxgzX9WNRgAAAIw"]
[Fri May 08 04:59:37.887410 2026] [:error] [pid 51009:tid 51092] [client 172.212.146.49:53986] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "afz9OeB0GbUWhxgzX9WNUAAAAJA"]
[Fri May 08 04:59:41.313587 2026] [:error] [pid 51009:tid 51095] [client 172.212.146.49:59982] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "afz9PeB0GbUWhxgzX9WNagAAAJM"]
[Fri May 08 04:59:44.716417 2026] [:error] [pid 51009:tid 51098] [client 172.212.146.49:45042] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "afz9QOB0GbUWhxgzX9WNigAAAJY"]
[Fri May 08 04:59:49.527523 2026] [:error] [pid 51113:tid 51136] [client 172.212.146.49:54017] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "afz9RUQfs7sWtqkpQIf4EQAAANU"]
[Fri May 08 04:59:52.964610 2026] [:error] [pid 51009:tid 51084] [client 172.212.146.49:50037] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afz9SOB0GbUWhxgzX9WNzwAAAIg"]
[Fri May 08 04:59:54.628449 2026] [:error] [pid 51009:tid 51092] [client 172.212.146.49:40911] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afz9SuB0GbUWhxgzX9WN1QAAAJA"]
[Fri May 08 04:59:57.372806 2026] [:error] [pid 34318:tid 34334] [client 172.212.146.49:40948] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afz9Tcr3guirgJiKhzAwpAAAAQ4"]
[Fri May 08 05:00:02.119698 2026] [:error] [pid 51009:tid 51097] [client 172.212.146.49:40869] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afz9UuB0GbUWhxgzX9WN4gAAAJU"]
[Fri May 08 05:00:05.769782 2026] [:error] [pid 34318:tid 34339] [client 172.212.146.49:48100] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "afz9Vcr3guirgJiKhzAw4gAAARM"]
[Fri May 08 05:00:08.771084 2026] [:error] [pid 51113:tid 51138] [client 172.212.146.49:50067] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "afz9WEQfs7sWtqkpQIf4RgAAANc"]
[Fri May 08 05:00:10.451286 2026] [:error] [pid 51113:tid 51134] [client 172.212.146.49:4446] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "afz9WkQfs7sWtqkpQIf4SwAAANM"]
[Fri May 08 05:00:23.131489 2026] [:error] [pid 34318:tid 34344] [client 172.212.146.49:4224] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "afz9Z8r3guirgJiKhzAw-AAAARg"]
[Fri May 08 05:01:12.809631 2026] [:error] [pid 51113:tid 51116] [client 172.212.146.49:4290] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "afz9mEQfs7sWtqkpQIf4-gAAAME"]
[Fri May 08 05:01:14.245263 2026] [:error] [pid 34318:tid 34323] [client 172.212.146.49:41290] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "afz9msr3guirgJiKhzAxagAAAQM"]
[Fri May 08 05:01:17.432063 2026] [:error] [pid 51113:tid 51125] [client 172.212.146.49:56853] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "afz9nUQfs7sWtqkpQIf5AgAAAMo"]
[Fri May 08 05:01:22.483367 2026] [:error] [pid 51113:tid 51134] [client 172.212.146.49:4674] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "afz9okQfs7sWtqkpQIf5CwAAANM"]
[Fri May 08 05:01:25.173087 2026] [:error] [pid 51113:tid 51117] [client 172.212.146.49:4698] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "afz9pUQfs7sWtqkpQIf5EwAAAMI"]
[Fri May 08 05:01:29.578619 2026] [:error] [pid 34318:tid 34332] [client 172.212.146.49:56812] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "afz9qcr3guirgJiKhzAxfAAAAQw"]
[Fri May 08 05:01:44.070698 2026] [:error] [pid 51113:tid 51118] [client 172.212.146.49:45609] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "afz9uEQfs7sWtqkpQIf5MwAAAMM"]
[Fri May 08 05:01:55.644449 2026] [:error] [pid 51113:tid 51121] [client 172.212.146.49:53422] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afz9w0Qfs7sWtqkpQIf5RwAAAMY"]
[Fri May 08 05:01:56.872316 2026] [:error] [pid 51113:tid 51125] [client 172.212.146.49:57511] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afz9xEQfs7sWtqkpQIf5SgAAAMo"]
[Fri May 08 05:02:06.255307 2026] [:error] [pid 51008:tid 51051] [client 172.212.146.49:48129] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afz9znB58C2Y1tgLtuL5wwAAAEI"]
[Fri May 08 05:02:07.741361 2026] [:error] [pid 51007:tid 51032] [client 172.212.146.49:50624] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afz9z1MagSGstWKyzzVqAwAAAAo"]
[Fri May 08 05:02:09.602341 2026] [:error] [pid 34318:tid 34332] [client 172.212.146.49:50644] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "afz90cr3guirgJiKhzAx8gAAAQw"]
[Fri May 08 05:03:25.266839 2026] [:error] [pid 34318:tid 34324] [client 172.212.146.49:46313] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afz-Hcr3guirgJiKhzAy0wAAAQQ"]
[Fri May 08 05:03:29.010099 2026] [:error] [pid 34318:tid 34339] [client 172.212.146.49:5083] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afz-Icr3guirgJiKhzAy3AAAARM"]
[Fri May 08 05:03:31.304183 2026] [:error] [pid 34318:tid 34320] [client 172.212.146.49:46863] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afz-I8r3guirgJiKhzAy5AAAAQA"]
[Fri May 08 05:03:33.095541 2026] [:error] [pid 51113:tid 51123] [client 172.212.146.49:46896] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afz-JUQfs7sWtqkpQIf58QAAAMg"]
[Fri May 08 05:03:35.600362 2026] [:error] [pid 34318:tid 34334] [client 172.212.146.49:52064] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "afz-J8r3guirgJiKhzAy8QAAAQ4"]
[Fri May 08 05:03:37.847123 2026] [:error] [pid 51008:tid 51068] [client 172.212.146.49:5049] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "afz-KXB58C2Y1tgLtuL6KQAAAFM"]
[Fri May 08 05:03:43.483511 2026] [:error] [pid 34318:tid 34323] [client 172.212.146.49:4968] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "afz-L8r3guirgJiKhzAzKQAAAQM"]
[Fri May 08 05:03:45.504533 2026] [:error] [pid 51007:tid 51042] [client 172.212.146.49:46909] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "afz-MVMagSGstWKyzzVqKQAAABQ"]
[Fri May 08 05:03:48.864760 2026] [:error] [pid 51007:tid 51036] [client 172.212.146.49:4952] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afz-NFMagSGstWKyzzVqKwAAAA4"]
[Fri May 08 05:03:50.025840 2026] [:error] [pid 34318:tid 34336] [client 172.212.146.49:4996] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afz-Nsr3guirgJiKhzAzZgAAARA"]
[Fri May 08 05:03:54.859714 2026] [:error] [pid 34318:tid 34338] [client 172.212.146.49:4963] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afz-Osr3guirgJiKhzAzfAAAARI"]
[Fri May 08 05:03:57.597993 2026] [:error] [pid 51007:tid 51034] [client 172.212.146.49:37878] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "afz-PVMagSGstWKyzzVqOQAAAAw"]
[Fri May 08 05:03:59.606519 2026] [:error] [pid 51113:tid 51122] [client 172.212.146.49:43055] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afz-P0Qfs7sWtqkpQIf6RwAAAMc"]
[Fri May 08 05:04:01.731830 2026] [:error] [pid 34318:tid 34326] [client 172.212.146.49:42560] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afz-Qcr3guirgJiKhzAzmQAAAQY"]
[Fri May 08 05:04:08.818799 2026] [:error] [pid 34318:tid 34335] [client 172.212.146.49:46328] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afz-SMr3guirgJiKhzAzrQAAAQ8"]
[Fri May 08 05:04:10.711655 2026] [:error] [pid 51113:tid 51132] [client 172.212.146.49:37761] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "afz-SkQfs7sWtqkpQIf6XQAAANE"]
[Fri May 08 05:04:11.285035 2026] [:error] [pid 51113:tid 51118] [client 172.212.146.49:43021] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "afz-S0Qfs7sWtqkpQIf6XwAAAMM"]
[Fri May 08 05:04:14.115439 2026] [:error] [pid 51009:tid 51082] [client 172.212.146.49:46309] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "afz-TuB0GbUWhxgzX9WPVAAAAIY"]
[Fri May 08 05:04:15.468759 2026] [:error] [pid 34318:tid 34333] [client 172.212.146.49:37789] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "afz-T8r3guirgJiKhzAzwwAAAQ0"]
[Fri May 08 05:04:18.878861 2026] [:error] [pid 51008:tid 51071] [client 172.212.146.49:43015] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "afz-UnB58C2Y1tgLtuL6TgAAAFY"]
[Fri May 08 05:04:20.674482 2026] [:error] [pid 51009:tid 51087] [client 172.212.146.49:46293] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "afz-VOB0GbUWhxgzX9WPWwAAAIs"]
[Fri May 08 05:04:44.353840 2026] [:error] [pid 51008:tid 51063] [client 172.212.146.49:42588] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afz-bHB58C2Y1tgLtuL6nwAAAE4"]
[Fri May 08 05:04:47.805143 2026] [:error] [pid 34318:tid 34333] [client 172.212.146.49:37865] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afz-b8r3guirgJiKhzA0PgAAAQ0"]
[Fri May 08 05:04:49.061562 2026] [:error] [pid 34318:tid 34335] [client 172.212.146.49:37874] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afz-ccr3guirgJiKhzA0SQAAAQ8"]
[Fri May 08 05:04:51.016808 2026] [:error] [pid 51113:tid 51124] [client 172.212.146.49:37885] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "afz-c0Qfs7sWtqkpQIf6lQAAAMk"]
[Fri May 08 05:04:53.717063 2026] [:error] [pid 51008:tid 51065] [client 172.212.146.49:43058] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afz-dXB58C2Y1tgLtuL6owAAAFA"]
[Fri May 08 05:04:56.501211 2026] [:error] [pid 51008:tid 51050] [client 172.212.146.49:43053] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afz-eHB58C2Y1tgLtuL6pwAAAEE"]
[Fri May 08 05:04:58.216845 2026] [:error] [pid 34318:tid 34328] [client 172.212.146.49:42596] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afz-esr3guirgJiKhzA0ZwAAAQg"]
[Fri May 08 05:05:02.918919 2026] [:error] [pid 34318:tid 34342] [client 172.212.146.49:37863] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afz-fsr3guirgJiKhzA0cQAAARY"]
[Fri May 08 05:05:08.079514 2026] [:error] [pid 51007:tid 51025] [client 172.212.146.49:5058] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "afz-hFMagSGstWKyzzVqYgAAAAM"]
[Fri May 08 05:05:08.623842 2026] [:error] [pid 51007:tid 51029] [client 172.212.146.49:37824] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "afz-hFMagSGstWKyzzVqZAAAAAc"]
[Fri May 08 05:05:09.902123 2026] [:error] [pid 51007:tid 51034] [client 172.212.146.49:37817] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "afz-hVMagSGstWKyzzVqaQAAAAw"]
[Fri May 08 05:05:12.498129 2026] [:error] [pid 34318:tid 34337] [client 172.212.146.49:43016] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "afz-iMr3guirgJiKhzA0kQAAARE"]
[Fri May 08 05:05:16.395646 2026] [:error] [pid 51113:tid 51138] [client 172.212.146.49:37774] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afz-jEQfs7sWtqkpQIf6tQAAANc"]
[Fri May 08 05:05:17.790475 2026] [:error] [pid 34318:tid 34329] [client 172.212.146.49:47658] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "afz-jcr3guirgJiKhzA0pAAAAQk"]
[Fri May 08 05:05:35.815050 2026] [:error] [pid 34318:tid 34327] [client 172.212.146.49:47673] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afz-n8r3guirgJiKhzA00wAAAQc"]
[Fri May 08 05:05:37.532167 2026] [:error] [pid 51008:tid 51065] [client 172.212.146.49:37868] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afz-oXB58C2Y1tgLtuL65gAAAFA"]
[Fri May 08 05:05:40.015835 2026] [:error] [pid 51113:tid 51121] [client 172.212.146.49:46308] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afz-pEQfs7sWtqkpQIf66AAAAMY"]
[Fri May 08 05:05:41.320709 2026] [:error] [pid 34318:tid 34324] [client 172.212.146.49:47618] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afz-pcr3guirgJiKhzA06gAAAQQ"]
[Fri May 08 05:05:49.612340 2026] [autoindex:error] [pid 51113:tid 51129] [client 172.212.146.49:47635] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:06:03.765478 2026] [autoindex:error] [pid 51113:tid 51130] [client 172.212.146.49:47635] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:06:05.483847 2026] [:error] [pid 34318:tid 34334] [client 172.212.146.49:46281] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afz-vcr3guirgJiKhzA1VAAAAQ4"]
[Fri May 08 05:06:07.338275 2026] [:error] [pid 51113:tid 51126] [client 172.212.146.49:42587] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afz-v0Qfs7sWtqkpQIf7QAAAAMs"]
[Fri May 08 05:06:08.096680 2026] [:error] [pid 51009:tid 51079] [client 172.212.146.49:46292] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afz-wOB0GbUWhxgzX9WP7gAAAIM"]
[Fri May 08 05:06:09.910301 2026] [:error] [pid 34318:tid 34336] [client 172.212.146.49:5062] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afz-wcr3guirgJiKhzA1YwAAARA"]
[Fri May 08 05:06:15.635752 2026] [:error] [pid 51008:tid 51052] [client 172.212.146.49:4996] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afz-x3B58C2Y1tgLtuL7AAAAAEM"]
[Fri May 08 05:06:21.172918 2026] [:error] [pid 51009:tid 51089] [client 172.212.146.49:46290] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afz-zeB0GbUWhxgzX9WQAAAAAI0"]
[Fri May 08 05:06:22.864252 2026] [:error] [pid 51009:tid 51092] [client 172.212.146.49:37830] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afz-zuB0GbUWhxgzX9WQAgAAAJA"]
[Fri May 08 05:06:24.808588 2026] [:error] [pid 34318:tid 34325] [client 172.212.146.49:37794] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "afz-0Mr3guirgJiKhzA1jQAAAQU"]
[Fri May 08 05:06:25.952136 2026] [:error] [pid 34318:tid 34321] [client 172.212.146.49:37778] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afz-0cr3guirgJiKhzA1lwAAAQE"]
[Fri May 08 05:06:39.029856 2026] [:error] [pid 51009:tid 51090] [client 172.212.146.49:47678] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "afz-3-B0GbUWhxgzX9WQJgAAAI4"]
[Fri May 08 05:06:43.521797 2026] [:error] [pid 34318:tid 34329] [client 172.212.146.49:59981] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afz-48r3guirgJiKhzA15wAAAQk"]
[Fri May 08 05:06:47.525632 2026] [:error] [pid 34318:tid 34341] [client 172.212.146.49:43900] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afz-58r3guirgJiKhzA19gAAARU"]
[Fri May 08 05:06:50.566957 2026] [:error] [pid 34318:tid 34342] [client 172.212.146.49:4265] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afz-6sr3guirgJiKhzA2BAAAARY"]
[Fri May 08 05:06:53.511986 2026] [:error] [pid 51008:tid 51054] [client 172.212.146.49:4922] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afz-7XB58C2Y1tgLtuL7QwAAAEU"]
[Fri May 08 05:07:19.780448 2026] [:error] [pid 34318:tid 34340] [client 172.212.146.49:57420] [client 172.212.146.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afz_B8r3guirgJiKhzA2SwAAARQ"]
[Fri May 08 05:07:25.318417 2026] [autoindex:error] [pid 51008:tid 51068] [client 172.212.146.49:39402] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:07:25.703673 2026] [autoindex:error] [pid 51008:tid 51067] [client 172.212.146.49:39402] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:07:36.942807 2026] [:error] [pid 51007:tid 51024] [client 172.212.146.49:39392] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "afz_GFMagSGstWKyzzVqrwAAAAI"]
[Fri May 08 05:07:47.331058 2026] [:error] [pid 34318:tid 34328] [client 172.212.146.49:40921] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "afz_I8r3guirgJiKhzA2jAAAAQg"]
[Fri May 08 05:07:49.100944 2026] [:error] [pid 51009:tid 51096] [client 172.212.146.49:4734] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "afz_JeB0GbUWhxgzX9WQjQAAAJQ"]
[Fri May 08 05:07:51.620130 2026] [:error] [pid 51008:tid 51062] [client 172.212.146.49:43900] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "afz_J3B58C2Y1tgLtuL7qwAAAE0"]
[Fri May 08 05:07:53.207833 2026] [:error] [pid 51008:tid 51061] [client 172.212.146.49:4749] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "afz_KXB58C2Y1tgLtuL7rwAAAEw"]
[Fri May 08 05:07:57.411921 2026] [:error] [pid 51009:tid 51092] [client 172.212.146.49:40891] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "afz_LeB0GbUWhxgzX9WQkQAAAJA"]
[Fri May 08 05:07:58.444033 2026] [:error] [pid 34318:tid 34336] [client 172.212.146.49:48752] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "afz_Lsr3guirgJiKhzA2qQAAARA"]
[Fri May 08 05:08:00.857936 2026] [:error] [pid 34318:tid 34335] [client 172.212.146.49:50109] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "afz_MMr3guirgJiKhzA2sgAAAQ8"]
[Fri May 08 05:08:02.628447 2026] [:error] [pid 51008:tid 51064] [client 172.212.146.49:48758] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "afz_MnB58C2Y1tgLtuL7uwAAAE8"]
[Fri May 08 05:08:04.237372 2026] [:error] [pid 34318:tid 34339] [client 172.212.146.49:50056] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "afz_NMr3guirgJiKhzA2ugAAARM"]
[Fri May 08 05:08:05.842261 2026] [:error] [pid 34318:tid 34337] [client 172.212.146.49:50063] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "afz_Ncr3guirgJiKhzA2wgAAARE"]
[Fri May 08 05:08:07.848340 2026] [:error] [pid 34318:tid 34325] [client 172.212.146.49:44295] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "afz_N8r3guirgJiKhzA2xQAAAQU"]
[Fri May 08 05:08:09.734291 2026] [:error] [pid 51009:tid 51077] [client 172.212.146.49:40835] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "afz_OeB0GbUWhxgzX9WQnAAAAIE"]
[Fri May 08 05:08:14.464984 2026] [:error] [pid 34318:tid 34336] [client 172.212.146.49:40889] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "afz_Psr3guirgJiKhzA22wAAARA"]
[Fri May 08 05:08:15.616162 2026] [:error] [pid 51008:tid 51067] [client 172.212.146.49:45101] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "afz_P3B58C2Y1tgLtuL7ygAAAFI"]
[Fri May 08 05:08:18.433082 2026] [:error] [pid 34318:tid 34341] [client 172.212.146.49:41432] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "afz_Qsr3guirgJiKhzA26QAAARU"]
[Fri May 08 05:08:21.029505 2026] [:error] [pid 51009:tid 51082] [client 172.212.146.49:40855] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "afz_ReB0GbUWhxgzX9WQqgAAAIY"]
[Fri May 08 05:08:22.313802 2026] [:error] [pid 51007:tid 51027] [client 172.212.146.49:50069] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "afz_RlMagSGstWKyzzVqugAAAAU"]
[Fri May 08 05:08:26.016712 2026] [:error] [pid 51113:tid 51126] [client 172.212.146.49:40837] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "afz_SkQfs7sWtqkpQIf8yAAAAMs"]
[Fri May 08 05:08:28.618757 2026] [:error] [pid 34318:tid 34323] [client 172.212.146.49:40887] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "afz_TMr3guirgJiKhzA3AQAAAQM"]
[Fri May 08 05:08:52.245784 2026] [autoindex:error] [pid 34318:tid 34337] [client 172.212.146.49:40843] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:24:14.056202 2026] [:error] [pid 51113:tid 51122] [client 172.212.146.49:52159] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "af0C_kQfs7sWtqkpQIcD_wAAAMc"]
[Fri May 08 05:24:15.634189 2026] [:error] [pid 34318:tid 34335] [client 172.212.146.49:52686] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "af0C_8r3guirgJiKhzBF2AAAAQ8"]
[Fri May 08 05:24:18.427002 2026] [:error] [pid 51008:tid 51067] [client 172.212.146.49:36522] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "af0DAnB58C2Y1tgLtuIA1AAAAFI"]
[Fri May 08 05:24:23.500685 2026] [:error] [pid 34318:tid 34320] [client 172.212.146.49:40876] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "af0DB8r3guirgJiKhzBF9AAAAQA"]
[Fri May 08 05:24:25.695301 2026] [:error] [pid 51009:tid 51080] [client 172.212.146.49:41389] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "af0DCeB0GbUWhxgzX9WV3wAAAIQ"]
[Fri May 08 05:24:34.390110 2026] [:error] [pid 51007:tid 51041] [client 172.212.146.49:40905] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "af0DElMagSGstWKyzzVtsAAAABM"]
[Fri May 08 05:24:42.142969 2026] [:error] [pid 34318:tid 34344] [client 172.212.146.49:4216] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af0DGsr3guirgJiKhzBGUAAAARg"]
[Fri May 08 05:24:43.856142 2026] [:error] [pid 51009:tid 51077] [client 172.212.146.49:39324] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af0DG-B0GbUWhxgzX9WV9AAAAIE"]
[Fri May 08 05:24:46.830841 2026] [:error] [pid 51113:tid 51118] [client 172.212.146.49:4866] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af0DHkQfs7sWtqkpQIcEWQAAAMM"]
[Fri May 08 05:24:50.491450 2026] [:error] [pid 34318:tid 34321] [client 172.212.146.49:4155] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af0DIsr3guirgJiKhzBGggAAAQE"]
[Fri May 08 05:24:52.361122 2026] [:error] [pid 51113:tid 51133] [client 172.212.146.49:41842] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "af0DJEQfs7sWtqkpQIcEYQAAANI"]
[Fri May 08 05:24:55.394384 2026] [:error] [pid 34318:tid 34343] [client 172.212.146.49:50740] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "af0DJ8r3guirgJiKhzBGqQAAARc"]
[Fri May 08 05:24:57.419088 2026] [:error] [pid 51113:tid 51121] [client 172.212.146.49:41800] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "af0DKUQfs7sWtqkpQIcEaQAAAMY"]
[Fri May 08 05:24:59.172672 2026] [:error] [pid 51007:tid 51036] [client 172.212.146.49:41848] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "af0DK1MagSGstWKyzzVtvwAAAA4"]
[Fri May 08 05:25:00.420913 2026] [:error] [pid 51113:tid 51119] [client 172.212.146.49:52088] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "af0DLEQfs7sWtqkpQIcEbgAAAMQ"]
[Fri May 08 05:25:01.414225 2026] [:error] [pid 34318:tid 34332] [client 172.212.146.49:41815] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "af0DLcr3guirgJiKhzBGxQAAAQw"]
[Fri May 08 05:25:42.047589 2026] [:error] [pid 51009:tid 51081] [client 172.212.146.49:4417] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "af0DVuB0GbUWhxgzX9WWTAAAAIU"]
[Fri May 08 05:25:46.897272 2026] [:error] [pid 51113:tid 51136] [client 172.212.146.49:5022] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "af0DWkQfs7sWtqkpQIcE9wAAANU"]
[Fri May 08 05:25:48.830358 2026] [:error] [pid 34318:tid 34342] [client 172.212.146.49:49431] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "af0DXMr3guirgJiKhzBHrgAAARY"]
[Fri May 08 05:25:51.022816 2026] [:error] [pid 34318:tid 34339] [client 172.212.146.49:48122] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "af0DX8r3guirgJiKhzBHvgAAARM"]
[Fri May 08 05:25:52.760831 2026] [:error] [pid 51009:tid 51078] [client 172.212.146.49:53420] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "af0DYOB0GbUWhxgzX9WWXAAAAII"]
[Fri May 08 05:25:54.010094 2026] [:error] [pid 51113:tid 51118] [client 172.212.146.49:44329] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "af0DYkQfs7sWtqkpQIcFDgAAAMM"]
[Fri May 08 05:26:10.393840 2026] [:error] [pid 51113:tid 51122] [client 172.212.146.49:4359] [client 172.212.146.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "af0DckQfs7sWtqkpQIcFRAAAAMc"]
[Fri May 08 05:26:12.879901 2026] [:error] [pid 51009:tid 51093] [client 172.212.146.49:50099] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxl.php"] [unique_id "af0DdOB0GbUWhxgzX9WWfwAAAJE"]
[Fri May 08 05:26:18.428583 2026] [:error] [pid 51113:tid 51120] [client 172.212.146.49:5084] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxl.php"] [unique_id "af0DekQfs7sWtqkpQIcFbgAAAMU"]
[Fri May 08 05:26:20.956823 2026] [:error] [pid 51008:tid 51061] [client 172.212.146.49:37763] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxl.php"] [unique_id "af0DfHB58C2Y1tgLtuIBNgAAAEw"]
[Fri May 08 05:26:21.707498 2026] [:error] [pid 51113:tid 51132] [client 172.212.146.49:50105] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxl.php"] [unique_id "af0DfUQfs7sWtqkpQIcFegAAANE"]
[Fri May 08 05:26:30.875853 2026] [:error] [pid 51113:tid 51133] [client 172.212.146.49:5079] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "af0DhkQfs7sWtqkpQIcFoAAAANI"]
[Fri May 08 05:26:32.858632 2026] [:error] [pid 51009:tid 51099] [client 172.212.146.49:50106] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "af0DiOB0GbUWhxgzX9WWyAAAAJc"]
[Fri May 08 05:26:52.612272 2026] [autoindex:error] [pid 51113:tid 51124] [client 172.212.146.49:37765] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:26:54.806099 2026] [autoindex:error] [pid 51113:tid 51123] [client 172.212.146.49:37765] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:26:56.847576 2026] [autoindex:error] [pid 51113:tid 51117] [client 172.212.146.49:37765] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:27:08.214484 2026] [:error] [pid 51009:tid 51090] [client 172.212.146.49:57412] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "af0DrOB0GbUWhxgzX9WXOAAAAI4"]
[Fri May 08 05:27:09.186688 2026] [:error] [pid 34318:tid 34331] [client 172.212.146.49:5104] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "af0Drcr3guirgJiKhzBI-QAAAQs"]
[Fri May 08 05:27:10.375304 2026] [:error] [pid 51113:tid 51115] [client 172.212.146.49:50093] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "af0DrkQfs7sWtqkpQIcGcAAAAMA"]
[Fri May 08 05:27:11.900714 2026] [:error] [pid 51008:tid 51068] [client 172.212.146.49:4389] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoko.php"] [unique_id "af0Dr3B58C2Y1tgLtuIBYgAAAFM"]
[Fri May 08 05:27:13.601279 2026] [:error] [pid 34318:tid 34330] [client 172.212.146.49:5111] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class892.php"] [unique_id "af0Dscr3guirgJiKhzBJCQAAAQo"]
[Fri May 08 05:27:15.612004 2026] [:error] [pid 34318:tid 34341] [client 172.212.146.49:45041] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class892.php"] [unique_id "af0Ds8r3guirgJiKhzBJFgAAARU"]
[Fri May 08 05:27:18.028636 2026] [:error] [pid 51113:tid 51137] [client 172.212.146.49:5069] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class892.php"] [unique_id "af0DtkQfs7sWtqkpQIcGgwAAANY"]
[Fri May 08 05:27:19.412980 2026] [:error] [pid 34318:tid 34336] [client 172.212.146.49:45040] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class892.php"] [unique_id "af0Dt8r3guirgJiKhzBJIgAAARA"]
[Fri May 08 05:27:20.960824 2026] [:error] [pid 51113:tid 51120] [client 172.212.146.49:4369] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "af0DuEQfs7sWtqkpQIcGjQAAAMU"]
[Fri May 08 05:27:22.265772 2026] [:error] [pid 51008:tid 51066] [client 172.212.146.49:5117] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "af0DunB58C2Y1tgLtuIBaAAAAFE"]
[Fri May 08 05:27:23.182870 2026] [:error] [pid 51008:tid 51062] [client 172.212.146.49:5112] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "af0Du3B58C2Y1tgLtuIBbAAAAE0"]
[Fri May 08 05:27:25.594348 2026] [:error] [pid 51008:tid 51057] [client 172.212.146.49:44323] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/locales.php"] [unique_id "af0DvXB58C2Y1tgLtuIBcQAAAEg"]
[Fri May 08 05:27:29.954078 2026] [:error] [pid 51009:tid 51086] [client 172.212.146.49:5105] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "af0DweB0GbUWhxgzX9WXZwAAAIo"]
[Fri May 08 05:27:35.101342 2026] [:error] [pid 51113:tid 51139] [client 172.212.146.49:50059] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "af0Dx0Qfs7sWtqkpQIcGrgAAANg"]
[Fri May 08 05:27:40.862441 2026] [:error] [pid 51009:tid 51094] [client 172.212.146.49:44998] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "af0DzOB0GbUWhxgzX9WXiwAAAJI"]
[Fri May 08 05:27:42.296830 2026] [:error] [pid 51113:tid 51118] [client 172.212.146.49:4374] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pucci.php"] [unique_id "af0DzkQfs7sWtqkpQIcGxQAAAMM"]
[Fri May 08 05:27:45.026301 2026] [:error] [pid 51009:tid 51097] [client 172.212.146.49:57417] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pucci.php"] [unique_id "af0D0eB0GbUWhxgzX9WXlAAAAJU"]
[Fri May 08 05:27:46.565854 2026] [:error] [pid 51007:tid 51033] [client 172.212.146.49:50067] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pucci.php"] [unique_id "af0D0lMagSGstWKyzzVufgAAAAs"]
[Fri May 08 05:27:47.625214 2026] [:error] [pid 51007:tid 51044] [client 172.212.146.49:5119] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pucci.php"] [unique_id "af0D01MagSGstWKyzzVuhQAAABY"]
[Fri May 08 05:27:51.768046 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:46304] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "af0D18r3guirgJiKhzBJUAAAAQI"]
[Fri May 08 05:27:59.791740 2026] [:error] [pid 51007:tid 51044] [client 172.212.146.49:37822] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "af0D31MagSGstWKyzzVujgAAABY"]
[Fri May 08 05:28:01.476031 2026] [:error] [pid 34318:tid 34344] [client 172.212.146.49:4375] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "af0D4cr3guirgJiKhzBJYAAAARg"]
[Fri May 08 05:28:17.724500 2026] [autoindex:error] [pid 34318:tid 34321] [client 172.212.146.49:50088] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:28:28.161501 2026] [autoindex:error] [pid 34318:tid 34328] [client 172.212.146.49:50088] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:28:34.692973 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:56817] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "af0EAsr3guirgJiKhzBKHQAAAQI"]
[Fri May 08 05:28:38.518323 2026] [:error] [pid 51113:tid 51116] [client 172.212.146.49:46890] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "af0EBkQfs7sWtqkpQIcHigAAAME"]
[Fri May 08 05:28:41.949095 2026] [:error] [pid 34318:tid 34342] [client 172.212.146.49:57499] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "af0ECcr3guirgJiKhzBKPQAAARY"]
[Fri May 08 05:28:43.330813 2026] [:error] [pid 51007:tid 51038] [client 172.212.146.49:56880] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "af0EC1MagSGstWKyzzVunQAAABA"]
[Fri May 08 05:28:49.665806 2026] [:error] [pid 34318:tid 34328] [client 172.212.146.49:57476] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "af0EEcr3guirgJiKhzBKXwAAAQg"]
[Fri May 08 05:28:53.164814 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:56837] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "af0EFcr3guirgJiKhzBKdQAAAQI"]
[Fri May 08 05:28:55.870439 2026] [:error] [pid 34318:tid 34329] [client 172.212.146.49:46848] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2468.php"] [unique_id "af0EF8r3guirgJiKhzBKggAAAQk"]
[Fri May 08 05:29:03.385858 2026] [:error] [pid 51009:tid 51079] [client 172.212.146.49:4677] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "af0EH-B0GbUWhxgzX9WYZgAAAIM"]
[Fri May 08 05:29:05.364056 2026] [:error] [pid 34318:tid 34333] [client 172.212.146.49:45506] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "af0EIcr3guirgJiKhzBKpQAAAQ0"]
[Fri May 08 05:29:13.530272 2026] [:error] [pid 51113:tid 51122] [client 172.212.146.49:52153] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "af0EKUQfs7sWtqkpQIcH6QAAAMc"]
[Fri May 08 05:29:16.358765 2026] [:error] [pid 34318:tid 34343] [client 172.212.146.49:59974] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "af0ELMr3guirgJiKhzBK5AAAARc"]
[Fri May 08 05:29:18.889272 2026] [:error] [pid 34318:tid 34326] [client 172.212.146.49:4636] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "af0ELsr3guirgJiKhzBK8AAAAQY"]
[Fri May 08 05:29:20.517969 2026] [:error] [pid 51113:tid 51130] [client 172.212.146.49:50017] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "af0EMEQfs7sWtqkpQIcH-AAAAM8"]
[Fri May 08 05:29:21.441146 2026] [:error] [pid 51113:tid 51125] [client 172.212.146.49:45070] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "af0EMUQfs7sWtqkpQIcH-wAAAMo"]
[Fri May 08 05:29:23.766375 2026] [:error] [pid 51007:tid 51026] [client 172.212.146.49:4670] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "af0EM1MagSGstWKyzzVuqwAAAAQ"]
[Fri May 08 05:29:25.553061 2026] [:error] [pid 51113:tid 51128] [client 172.212.146.49:53360] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "af0ENUQfs7sWtqkpQIcIAwAAAM0"]
[Fri May 08 05:29:31.508775 2026] [:error] [pid 34318:tid 34339] [client 172.212.146.49:58793] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amdin.php"] [unique_id "af0EO8r3guirgJiKhzBLHwAAARM"]
[Fri May 08 05:30:01.477747 2026] [:error] [pid 34318:tid 34343] [client 172.212.146.49:42544] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tews.php"] [unique_id "af0EWcr3guirgJiKhzBLmAAAARc"]
[Fri May 08 05:30:06.909565 2026] [:error] [pid 51007:tid 51040] [client 172.212.146.49:40869] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tews.php"] [unique_id "af0EXlMagSGstWKyzzVuxwAAABI"]
[Fri May 08 05:30:11.614443 2026] [:error] [pid 34318:tid 34321] [client 172.212.146.49:58702] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tews.php"] [unique_id "af0EY8r3guirgJiKhzBLvAAAAQE"]
[Fri May 08 05:30:16.908666 2026] [:error] [pid 51113:tid 51116] [client 172.212.146.49:4123] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "af0EaEQfs7sWtqkpQIcIhQAAAME"]
[Fri May 08 05:30:17.672094 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:40957] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "af0Eacr3guirgJiKhzBLwwAAAQI"]
[Fri May 08 05:30:20.649072 2026] [:error] [pid 51113:tid 51136] [client 172.212.146.49:36591] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "af0EbEQfs7sWtqkpQIcIiwAAANU"]
[Fri May 08 05:30:22.061581 2026] [:error] [pid 51113:tid 51123] [client 172.212.146.49:36558] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/moshou.php"] [unique_id "af0EbkQfs7sWtqkpQIcIjwAAAMg"]
[Fri May 08 05:30:25.652838 2026] [:error] [pid 34318:tid 34328] [client 172.212.146.49:43025] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "af0Eccr3guirgJiKhzBL2QAAAQg"]
[Fri May 08 05:30:28.576458 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:48762] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "af0EdMr3guirgJiKhzBL5QAAAQI"]
[Fri May 08 05:30:33.276007 2026] [:error] [pid 51009:tid 51088] [client 172.212.146.49:52035] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "af0EeeB0GbUWhxgzX9WY_QAAAIw"]
[Fri May 08 05:30:34.526562 2026] [:error] [pid 51113:tid 51133] [client 172.212.146.49:46815] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "af0EekQfs7sWtqkpQIcIpwAAANI"]
[Fri May 08 05:30:36.358821 2026] [:error] [pid 34318:tid 34328] [client 172.212.146.49:52064] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "af0EfMr3guirgJiKhzBMBgAAAQg"]
[Fri May 08 05:30:37.302402 2026] [:error] [pid 34318:tid 34325] [client 172.212.146.49:46818] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "af0Efcr3guirgJiKhzBMCwAAAQU"]
[Fri May 08 05:30:39.681306 2026] [:error] [pid 51113:tid 51132] [client 172.212.146.49:48706] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "af0Ef0Qfs7sWtqkpQIcIuAAAANE"]
[Fri May 08 05:30:41.784307 2026] [:error] [pid 51008:tid 51063] [client 172.212.146.49:4126] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "af0EgXB58C2Y1tgLtuIB2wAAAE4"]
[Fri May 08 05:30:44.650229 2026] [:error] [pid 34318:tid 34325] [client 172.212.146.49:52080] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "af0EhMr3guirgJiKhzBMKAAAAQU"]
[Fri May 08 05:30:46.268512 2026] [:error] [pid 51008:tid 51055] [client 172.212.146.49:46799] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "af0EhnB58C2Y1tgLtuIB3QAAAEY"]
[Fri May 08 05:30:48.010995 2026] [:error] [pid 51007:tid 51026] [client 172.212.146.49:4116] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "af0EiFMagSGstWKyzzVu7AAAAAQ"]
[Fri May 08 05:30:50.695636 2026] [:error] [pid 34318:tid 34333] [client 172.212.146.49:48708] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "af0Eisr3guirgJiKhzBMQwAAAQ0"]
[Fri May 08 05:31:25.244711 2026] [:error] [pid 34318:tid 34324] [client 172.212.146.49:48704] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "af0Ercr3guirgJiKhzBNDwAAAQQ"]
[Fri May 08 05:31:27.597126 2026] [:error] [pid 34318:tid 34327] [client 172.212.146.49:36563] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "af0Er8r3guirgJiKhzBNFwAAAQc"]
[Fri May 08 05:31:28.901600 2026] [:error] [pid 34318:tid 34320] [client 172.212.146.49:4506] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "af0EsMr3guirgJiKhzBNHQAAAQA"]
[Fri May 08 05:31:32.820941 2026] [:error] [pid 51007:tid 51022] [client 172.212.146.49:60032] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "af0EtFMagSGstWKyzzVu9AAAAAA"]
[Fri May 08 05:31:34.349449 2026] [:error] [pid 51113:tid 51139] [client 172.212.146.49:4756] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "af0EtkQfs7sWtqkpQIcJOQAAANg"]
[Fri May 08 05:31:36.984978 2026] [:error] [pid 51009:tid 51094] [client 172.212.146.49:45586] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "af0EuOB0GbUWhxgzX9WZTAAAAJI"]
[Fri May 08 05:31:39.523305 2026] [:error] [pid 34318:tid 34333] [client 172.212.146.49:60065] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "af0Eu8r3guirgJiKhzBNQgAAAQ0"]
[Fri May 08 05:31:41.056061 2026] [:error] [pid 34318:tid 34343] [client 172.212.146.49:4154] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/nastar.php"] [unique_id "af0Evcr3guirgJiKhzBNTQAAARc"]
[Fri May 08 05:31:43.566063 2026] [:error] [pid 34318:tid 34323] [client 172.212.146.49:46371] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "af0Ev8r3guirgJiKhzBNXgAAAQM"]
[Fri May 08 05:31:51.812559 2026] [:error] [pid 34318:tid 34341] [client 172.212.146.49:4488] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "af0Ex8r3guirgJiKhzBNjgAAARU"]
[Fri May 08 05:31:54.232330 2026] [:error] [pid 51113:tid 51132] [client 172.212.146.49:44305] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "af0EykQfs7sWtqkpQIcJawAAANE"]
[Fri May 08 05:31:55.541593 2026] [:error] [pid 51007:tid 51046] [client 172.212.146.49:44308] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "af0Ey1MagSGstWKyzzVvCAAAABg"]
[Fri May 08 05:32:01.537988 2026] [:error] [pid 34318:tid 34338] [client 172.212.146.49:36593] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "af0E0cr3guirgJiKhzBNvQAAARI"]
[Fri May 08 05:32:02.527270 2026] [:error] [pid 34318:tid 34342] [client 172.212.146.49:46811] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "af0E0sr3guirgJiKhzBNwQAAARY"]
[Fri May 08 05:32:04.781006 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:36607] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "af0E1Mr3guirgJiKhzBNzwAAAQI"]
[Fri May 08 05:32:14.252182 2026] [:error] [pid 51113:tid 51132] [client 172.212.146.49:44328] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "af0E3kQfs7sWtqkpQIcJpAAAANE"]
[Fri May 08 05:32:15.942426 2026] [:error] [pid 34318:tid 34339] [client 172.212.146.49:43037] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "af0E38r3guirgJiKhzBN9QAAARM"]
[Fri May 08 05:32:17.405213 2026] [:error] [pid 34318:tid 34329] [client 172.212.146.49:43046] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "af0E4cr3guirgJiKhzBN-wAAAQk"]
[Fri May 08 05:32:20.776721 2026] [:error] [pid 34318:tid 34343] [client 172.212.146.49:4151] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "af0E5Mr3guirgJiKhzBOCQAAARc"]
[Fri May 08 05:32:22.037838 2026] [:error] [pid 34318:tid 34320] [client 172.212.146.49:4125] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "af0E5sr3guirgJiKhzBODgAAAQA"]
[Fri May 08 05:32:45.850517 2026] [:error] [pid 51009:tid 51098] [client 172.212.146.49:4120] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "af0E_eB0GbUWhxgzX9WZuwAAAJY"]
[Fri May 08 05:32:52.622761 2026] [:error] [pid 51113:tid 51139] [client 172.212.146.49:46797] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "af0FBEQfs7sWtqkpQIcJ9AAAANg"]
[Fri May 08 05:32:57.990576 2026] [:error] [pid 51009:tid 51079] [client 172.212.146.49:4499] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "af0FCeB0GbUWhxgzX9WZ2QAAAIM"]
[Fri May 08 05:32:59.814776 2026] [:error] [pid 34318:tid 34338] [client 172.212.146.49:43019] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "af0FC8r3guirgJiKhzBOpgAAARI"]
[Fri May 08 05:33:03.359376 2026] [:error] [pid 51113:tid 51120] [client 172.212.146.49:46344] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "af0FD0Qfs7sWtqkpQIcKEwAAAMU"]
[Fri May 08 05:33:04.450280 2026] [:error] [pid 34318:tid 34330] [client 172.212.146.49:4593] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "af0FEMr3guirgJiKhzBOugAAAQo"]
[Fri May 08 05:33:06.008482 2026] [:error] [pid 34318:tid 34329] [client 172.212.146.49:44320] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "af0FEsr3guirgJiKhzBOvwAAAQk"]
[Fri May 08 05:33:08.212300 2026] [:error] [pid 51113:tid 51135] [client 172.212.146.49:43054] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "af0FFEQfs7sWtqkpQIcKLQAAANQ"]
[Fri May 08 05:33:11.492296 2026] [:error] [pid 51113:tid 51136] [client 172.212.146.49:44344] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "af0FF0Qfs7sWtqkpQIcKOQAAANU"]
[Fri May 08 05:33:12.177679 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:43026] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "af0FGMr3guirgJiKhzBO1wAAAQI"]
[Fri May 08 05:33:15.226870 2026] [:error] [pid 51008:tid 51049] [client 172.212.146.49:4141] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "af0FG3B58C2Y1tgLtuICUQAAAEA"]
[Fri May 08 05:33:16.653125 2026] [:error] [pid 34318:tid 34332] [client 172.212.146.49:44313] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "af0FHMr3guirgJiKhzBO5QAAAQw"]
[Fri May 08 05:33:17.663736 2026] [:error] [pid 51009:tid 51099] [client 172.212.146.49:4133] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "af0FHeB0GbUWhxgzX9WZ_AAAAJc"]
[Fri May 08 05:33:19.609525 2026] [:error] [pid 51008:tid 51073] [client 172.212.146.49:46837] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "af0FH3B58C2Y1tgLtuICVgAAAFg"]
[Fri May 08 05:33:23.624989 2026] [:error] [pid 34318:tid 34324] [client 172.212.146.49:4142] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "af0FI8r3guirgJiKhzBPDAAAAQQ"]
[Fri May 08 05:33:25.828631 2026] [:error] [pid 34318:tid 34334] [client 172.212.146.49:46810] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-act.php"] [unique_id "af0FJcr3guirgJiKhzBPFAAAAQ4"]
[Fri May 08 05:33:26.851477 2026] [:error] [pid 51113:tid 51117] [client 172.212.146.49:44298] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "af0FJkQfs7sWtqkpQIcKiQAAAMI"]
[Fri May 08 05:33:28.244583 2026] [:error] [pid 51008:tid 51057] [client 172.212.146.49:4119] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "af0FKHB58C2Y1tgLtuICZQAAAEg"]
[Fri May 08 05:33:31.093530 2026] [:error] [pid 51008:tid 51049] [client 172.212.146.49:46796] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "af0FK3B58C2Y1tgLtuICbgAAAEA"]
[Fri May 08 05:33:33.680799 2026] [:error] [pid 51113:tid 51128] [client 172.212.146.49:36555] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "af0FLUQfs7sWtqkpQIcKogAAAM0"]
[Fri May 08 05:33:40.186528 2026] [:error] [pid 34318:tid 34326] [client 172.212.146.49:4589] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "af0FNMr3guirgJiKhzBPQwAAAQY"]
[Fri May 08 05:33:43.347094 2026] [:error] [pid 51113:tid 51135] [client 172.212.146.49:4155] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "af0FN0Qfs7sWtqkpQIcKvAAAANQ"]
[Fri May 08 05:33:54.155147 2026] [autoindex:error] [pid 34318:tid 34324] [client 172.212.146.49:44320] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:34:10.420377 2026] [autoindex:error] [pid 34318:tid 34334] [client 172.212.146.49:44320] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:34:12.283435 2026] [:error] [pid 34318:tid 34341] [client 172.212.146.49:4577] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af0FVMr3guirgJiKhzBP7gAAARU"]
[Fri May 08 05:34:13.114929 2026] [:error] [pid 51008:tid 51067] [client 172.212.146.49:4137] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af0FVXB58C2Y1tgLtuIChwAAAFI"]
[Fri May 08 05:34:14.146094 2026] [:error] [pid 51009:tid 51094] [client 172.212.146.49:46793] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af0FVuB0GbUWhxgzX9WadwAAAJI"]
[Fri May 08 05:34:18.425456 2026] [:error] [pid 34318:tid 34336] [client 172.212.146.49:4578] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af0FWsr3guirgJiKhzBQEgAAARA"]
[Fri May 08 05:34:20.984771 2026] [:error] [pid 34318:tid 34338] [client 172.212.146.49:44323] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "af0FXMr3guirgJiKhzBQIAAAARI"]
[Fri May 08 05:34:30.960042 2026] [:error] [pid 51008:tid 51061] [client 172.212.146.49:4558] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "af0FZnB58C2Y1tgLtuICkwAAAEw"]
[Fri May 08 05:34:33.077645 2026] [:error] [pid 34318:tid 34330] [client 172.212.146.49:44309] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "af0Facr3guirgJiKhzBQawAAAQo"]
[Fri May 08 05:34:34.747270 2026] [:error] [pid 34318:tid 34329] [client 172.212.146.49:36559] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "af0Fasr3guirgJiKhzBQcwAAAQk"]
[Fri May 08 05:34:39.854784 2026] [:error] [pid 34318:tid 34320] [client 172.212.146.49:4573] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "af0Fb8r3guirgJiKhzBQkQAAAQA"]
[Fri May 08 05:34:41.736892 2026] [:error] [pid 51008:tid 51058] [client 172.212.146.49:36547] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "af0FcXB58C2Y1tgLtuICngAAAEk"]
[Fri May 08 05:34:48.921887 2026] [:error] [pid 34318:tid 34321] [client 172.212.146.49:4096] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "af0FeMr3guirgJiKhzBQxQAAAQE"]
[Fri May 08 05:34:52.519320 2026] [:error] [pid 34318:tid 34341] [client 172.212.146.49:43128] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "af0FfMr3guirgJiKhzBQ4gAAARU"]
[Fri May 08 05:34:57.802371 2026] [:error] [pid 51008:tid 51053] [client 172.212.146.49:45115] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "af0FgXB58C2Y1tgLtuICqgAAAEQ"]
[Fri May 08 05:35:04.683417 2026] [:error] [pid 51008:tid 51061] [client 172.212.146.49:59975] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "af0FiHB58C2Y1tgLtuICsAAAAEw"]
[Fri May 08 05:35:06.095379 2026] [:error] [pid 51008:tid 51064] [client 172.212.146.49:39329] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "af0FinB58C2Y1tgLtuICsQAAAE8"]
[Fri May 08 05:35:24.071704 2026] [:error] [pid 34318:tid 34320] [client 172.212.146.49:39320] [client 172.212.146.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "af0FnMr3guirgJiKhzBRnQAAAQA"]
[Fri May 08 05:35:34.428738 2026] [autoindex:error] [pid 51009:tid 51093] [client 172.212.146.49:4304] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:35:35.204894 2026] [autoindex:error] [pid 51009:tid 51094] [client 172.212.146.49:4304] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:35:44.242449 2026] [:error] [pid 34318:tid 34336] [client 172.212.146.49:50100] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "af0FsMr3guirgJiKhzBSNAAAARA"]
[Fri May 08 05:35:53.200836 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:50102] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "af0Fucr3guirgJiKhzBSdwAAAQI"]
[Fri May 08 05:35:54.082031 2026] [:error] [pid 34318:tid 34326] [client 172.212.146.49:46312] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "af0Fusr3guirgJiKhzBSfQAAAQY"]
[Fri May 08 05:35:57.939186 2026] [:error] [pid 34318:tid 34340] [client 172.212.146.49:50065] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "af0Fvcr3guirgJiKhzBSmwAAARQ"]
[Fri May 08 05:36:03.239055 2026] [:error] [pid 51113:tid 51128] [client 172.212.146.49:46274] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "af0Fw0Qfs7sWtqkpQIcMnQAAAM0"]
[Fri May 08 05:36:08.883963 2026] [:error] [pid 51113:tid 51122] [client 172.212.146.49:46278] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "af0FyEQfs7sWtqkpQIcMugAAAMc"]
[Fri May 08 05:36:09.968169 2026] [:error] [pid 34318:tid 34330] [client 172.212.146.49:45048] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "af0Fycr3guirgJiKhzBS4QAAAQo"]
[Fri May 08 05:36:12.282864 2026] [:error] [pid 34318:tid 34330] [client 172.212.146.49:50075] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "af0FzMr3guirgJiKhzBS7AAAAQo"]
[Fri May 08 05:36:16.913428 2026] [:error] [pid 51009:tid 51086] [client 172.212.146.49:5056] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "af0F0OB0GbUWhxgzX9WbcQAAAIo"]
[Fri May 08 05:36:19.577714 2026] [:error] [pid 34318:tid 34335] [client 172.212.146.49:50087] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "af0F08r3guirgJiKhzBTCgAAAQ8"]
[Fri May 08 05:36:28.166283 2026] [:error] [pid 51113:tid 51137] [client 172.212.146.49:50064] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "af0F3EQfs7sWtqkpQIcM-QAAANY"]
[Fri May 08 05:36:29.056828 2026] [:error] [pid 51113:tid 51115] [client 172.212.146.49:45000] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "af0F3UQfs7sWtqkpQIcM-wAAAMA"]
[Fri May 08 05:36:29.940252 2026] [:error] [pid 34318:tid 34336] [client 172.212.146.49:50078] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "af0F3cr3guirgJiKhzBTMwAAARA"]
[Fri May 08 05:36:30.711000 2026] [:error] [pid 51009:tid 51081] [client 172.212.146.49:4363] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "af0F3uB0GbUWhxgzX9WbqgAAAIU"]
[Fri May 08 05:36:31.596981 2026] [:error] [pid 51113:tid 51123] [client 172.212.146.49:50628] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "af0F30Qfs7sWtqkpQIcNBwAAAMg"]
[Fri May 08 05:36:33.057977 2026] [:error] [pid 34318:tid 34342] [client 172.212.146.49:5066] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "af0F4cr3guirgJiKhzBTPwAAARY"]
[Fri May 08 05:36:33.618100 2026] [:error] [pid 34318:tid 34322] [client 172.212.146.49:50095] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "af0F4cr3guirgJiKhzBTQwAAAQI"]
[Fri May 08 05:36:35.081720 2026] [:error] [pid 51009:tid 51081] [client 172.212.146.49:50102] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "af0F4-B0GbUWhxgzX9WbugAAAIU"]
[Fri May 08 05:36:36.603861 2026] [:error] [pid 51009:tid 51084] [client 172.212.146.49:46325] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "af0F5OB0GbUWhxgzX9WbwwAAAIg"]
[Fri May 08 05:36:37.856512 2026] [:error] [pid 51008:tid 51070] [client 172.212.146.49:50092] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "af0F5XB58C2Y1tgLtuIC5wAAAFU"]
[Fri May 08 05:36:39.766721 2026] [:error] [pid 34318:tid 34344] [client 172.212.146.49:4379] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "af0F58r3guirgJiKhzBTZQAAARg"]
[Fri May 08 05:36:41.599580 2026] [:error] [pid 51113:tid 51119] [client 172.212.146.49:50093] [client 172.212.146.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "af0F6UQfs7sWtqkpQIcNIwAAAMQ"]
[Fri May 08 05:36:44.987283 2026] [autoindex:error] [pid 51113:tid 51117] [client 172.212.146.49:48775] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 05:36:47.523083 2026] [autoindex:error] [pid 51113:tid 51128] [client 172.212.146.49:48775] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri May 08 07:53:00.469919 2026] [autoindex:error] [pid 51113:tid 51128] [client 95.111.239.37:51805] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 08 09:36:17.583419 2026] [:error] [pid 61356:tid 61411] [client 4.193.137.131:24812] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "af0-EYx3vpB8oWhUq2PBbAAAAdc"]
[Fri May 08 09:36:17.973429 2026] [:error] [pid 61356:tid 61389] [client 4.193.137.131:24831] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "af0-EYx3vpB8oWhUq2PBbgAAAcE"]
[Fri May 08 09:36:18.347759 2026] [:error] [pid 61356:tid 61394] [client 4.193.137.131:24822] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "af0-Eox3vpB8oWhUq2PBcAAAAcY"]
[Fri May 08 09:36:18.716474 2026] [:error] [pid 51113:tid 51128] [client 4.193.137.131:24768] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xleet.php"] [unique_id "af0-EkQfs7sWtqkpQIdB1AAAAM0"]
[Fri May 08 09:45:57.287446 2026] [:error] [pid 61355:tid 61366] [client 34.186.160.53:38096] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AVfkhJTi30CBXmMn-bwAAAYU"]
[Fri May 08 09:45:57.490131 2026] [:error] [pid 51008:tid 51055] [client 34.186.160.53:37960] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AVXB58C2Y1tgLtuJF8gAAAEY"]
[Fri May 08 09:45:57.751732 2026] [:error] [pid 61356:tid 61397] [client 34.186.160.53:37994] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AVYx3vpB8oWhUq2PErgAAAck"]
[Fri May 08 09:45:58.021429 2026] [:error] [pid 61356:tid 61409] [client 34.186.160.53:38016] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AVox3vpB8oWhUq2PErwAAAdU"]
[Fri May 08 09:45:58.212856 2026] [:error] [pid 61356:tid 61404] [client 34.186.160.53:37904] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AVox3vpB8oWhUq2PEsAAAAdA"]
[Fri May 08 09:45:58.438291 2026] [:error] [pid 51008:tid 51063] [client 34.186.160.53:38126] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AVnB58C2Y1tgLtuJF8wAAAE4"]
[Fri May 08 09:45:58.717000 2026] [:error] [pid 61317:tid 61324] [client 34.186.160.53:37966] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AVs-fFk_CedOCOYtZDQAAAUQ"]
[Fri May 08 09:45:58.934531 2026] [:error] [pid 51008:tid 51061] [client 34.186.160.53:38006] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AVnB58C2Y1tgLtuJF9AAAAEw"]
[Fri May 08 09:45:59.102616 2026] [:error] [pid 51008:tid 51060] [client 34.186.160.53:38046] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AV3B58C2Y1tgLtuJF9QAAAEs"]
[Fri May 08 09:45:59.581203 2026] [:error] [pid 51008:tid 51059] [client 34.186.160.53:38074] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AV3B58C2Y1tgLtuJF9gAAAEo"]
[Fri May 08 09:46:00.109560 2026] [:error] [pid 51008:tid 51056] [client 34.186.160.53:38034] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AWHB58C2Y1tgLtuJF-AAAAEc"]
[Fri May 08 09:46:00.643311 2026] [:error] [pid 51008:tid 51067] [client 34.186.160.53:38060] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AWHB58C2Y1tgLtuJF-gAAAFI"]
[Fri May 08 09:46:00.890199 2026] [:error] [pid 61317:tid 61343] [client 34.186.160.53:38112] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AWM-fFk_CedOCOYtZEQAAAVc"]
[Fri May 08 09:46:01.415141 2026] [:error] [pid 51007:tid 51044] [client 34.186.160.53:38026] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AWVMagSGstWKyzzWiZwAAABY"]
[Fri May 08 09:46:01.685652 2026] [:error] [pid 51113:tid 51115] [client 34.186.160.53:38090] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AWUQfs7sWtqkpQIdDEwAAAMA"]
[Fri May 08 09:46:02.271697 2026] [:error] [pid 51008:tid 51066] [client 34.186.160.53:46662] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js.map"] [unique_id "af1AWnB58C2Y1tgLtuJF-wAAAFE"]
[Fri May 08 09:46:03.598014 2026] [:error] [pid 61355:tid 61385] [client 34.186.160.53:46678] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/photo-gallery/js/scripts.min.js.map"] [unique_id "af1AW_khJTi30CBXmMn-gAAAAZg"]
[Fri May 08 09:46:07.406302 2026] [:error] [pid 61317:tid 61344] [client 34.186.160.53:39476] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/js/scripts.min.js.map"] [unique_id "af1AX8-fFk_CedOCOYtZEwAAAVg"]
[Fri May 08 09:46:09.025745 2026] [:error] [pid 51008:tid 51061] [client 34.186.160.53:39482] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js.map"] [unique_id "af1AYXB58C2Y1tgLtuJGAgAAAEw"]
[Fri May 08 09:46:35.812860 2026] [:error] [pid 61355:tid 61362] [client 34.186.160.53:54768] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/photo-gallery/js/cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js"] [unique_id "af1Ae_khJTi30CBXmMn-6AAAAYE"]
[Fri May 08 09:46:49.042784 2026] [:error] [pid 61356:tid 61390] [client 34.186.160.53:47660] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js"] [unique_id "af1AiYx3vpB8oWhUq2PFFQAAAcI"]
[Fri May 08 09:46:49.065823 2026] [:error] [pid 61356:tid 61407] [client 34.186.160.53:47650] [client 34.186.160.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js"] [unique_id "af1AiYx3vpB8oWhUq2PFFgAAAdM"]
[Fri May 08 10:19:37.013487 2026] [:error] [pid 61355:tid 61374] [client 93.118.41.115:47662] [client 93.118.41.115] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "af1IOfkhJTi30CBXmMkOiAAAAY0"], referer: https://t.co/
[Fri May 08 10:19:37.943415 2026] [:error] [pid 61356:tid 61395] [client 93.118.41.115:47664] [client 93.118.41.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.118.41.115, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "af1IOYx3vpB8oWhUq2PQvwAAAcc"]
[Fri May 08 10:19:40.244169 2026] [:error] [pid 51008:tid 51071] [client 93.118.41.115:47666] [client 93.118.41.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.118.41.115, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IPHB58C2Y1tgLtuJMfwAAAFY"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:19:43.401789 2026] [:error] [pid 51008:tid 51051] [client 93.118.41.115:37810] [client 93.118.41.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.118.41.115, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IP3B58C2Y1tgLtuJMjQAAAEI"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:19:45.289907 2026] [:error] [pid 61356:tid 61399] [client 93.118.41.115:37816] [client 93.118.41.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.118.41.115, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IQYx3vpB8oWhUq2PQyAAAAcs"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:19:47.073304 2026] [:error] [pid 34318:tid 34329] [client 93.118.41.115:37832] [client 93.118.41.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.118.41.115, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IQ8r3guirgJiKhzCf8AAAAQk"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:19:49.157534 2026] [:error] [pid 51009:tid 51088] [client 93.118.41.115:37842] [client 93.118.41.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.118.41.115, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IReB0GbUWhxgzX9XFmAAAAIw"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:19:50.970640 2026] [:error] [pid 51007:tid 51042] [client 93.118.41.115:50310] [client 93.118.41.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.118.41.115, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IRlMagSGstWKyzzWoFAAAABQ"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:19:52.793112 2026] [:error] [pid 34318:tid 34330] [client 93.118.41.115:50322] [client 93.118.41.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.118.41.115, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1ISMr3guirgJiKhzCf9gAAAQo"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:20:44.578853 2026] [:error] [pid 61317:tid 61329] [client 193.148.16.52:53042] [client 193.148.16.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.148.16.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IfM-fFk_CedOCOYtihgAAAUk"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:20:46.619658 2026] [:error] [pid 34318:tid 34331] [client 193.148.16.52:53046] [client 193.148.16.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.148.16.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1Ifsr3guirgJiKhzCgJQAAAQs"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:20:48.928963 2026] [:error] [pid 61356:tid 61391] [client 193.148.16.52:53058] [client 193.148.16.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.148.16.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IgIx3vpB8oWhUq2PRZgAAAcM"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:20:50.822971 2026] [:error] [pid 61317:tid 61322] [client 193.148.16.52:44746] [client 193.148.16.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.148.16.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1Igs-fFk_CedOCOYtilQAAAUI"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:20:52.754415 2026] [:error] [pid 61355:tid 61373] [client 193.148.16.52:44752] [client 193.148.16.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.148.16.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IhPkhJTi30CBXmMkPNAAAAYw"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:20:54.596716 2026] [:error] [pid 61355:tid 61382] [client 193.148.16.52:44768] [client 193.148.16.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.148.16.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IhvkhJTi30CBXmMkPOwAAAZU"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:20:56.499851 2026] [:error] [pid 61317:tid 61337] [client 193.148.16.52:44782] [client 193.148.16.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.148.16.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1IiM-fFk_CedOCOYtimwAAAVE"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:20:58.275546 2026] [:error] [pid 61356:tid 61392] [client 193.148.16.52:44796] [client 193.148.16.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.148.16.52, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1Iiox3vpB8oWhUq2PRcgAAAcQ"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:25:42.753405 2026] [:error] [pid 34318:tid 34340] [client 172.216.10.27:42588] [client 172.216.10.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1Jpsr3guirgJiKhzCgvAAAARQ"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:25:45.001729 2026] [:error] [pid 61317:tid 61344] [client 172.216.10.27:42600] [client 172.216.10.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1Jqc-fFk_CedOCOYtjiwAAAVg"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:25:46.797730 2026] [:error] [pid 51007:tid 51034] [client 172.216.10.27:42604] [client 172.216.10.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1JqlMagSGstWKyzzWo5AAAAAw"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:25:48.745391 2026] [:error] [pid 61355:tid 61381] [client 172.216.10.27:42616] [client 172.216.10.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1JrPkhJTi30CBXmMkQ3AAAAZQ"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:25:50.485654 2026] [:error] [pid 61355:tid 61370] [client 172.216.10.27:42632] [client 172.216.10.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1JrvkhJTi30CBXmMkQ3wAAAYk"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:25:52.237916 2026] [:error] [pid 61355:tid 61366] [client 172.216.10.27:51506] [client 172.216.10.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1JsPkhJTi30CBXmMkQ4QAAAYU"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:25:54.036965 2026] [:error] [pid 51007:tid 51037] [client 172.216.10.27:51540] [client 172.216.10.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.27, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1JslMagSGstWKyzzWo6AAAAA8"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:30:43.240327 2026] [:error] [pid 51008:tid 51062] [client 172.216.10.22:48760] [client 172.216.10.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.22, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1K03B58C2Y1tgLtuJO6gAAAE0"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:30:45.439747 2026] [:error] [pid 61355:tid 61366] [client 172.216.10.22:48768] [client 172.216.10.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.22, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1K1fkhJTi30CBXmMkSvwAAAYU"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:30:47.616951 2026] [:error] [pid 61317:tid 61326] [client 172.216.10.22:48782] [client 172.216.10.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.22, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1K18-fFk_CedOCOYtkrQAAAUY"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:30:49.534141 2026] [:error] [pid 61317:tid 61327] [client 172.216.10.22:48790] [client 172.216.10.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.22, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1K2c-fFk_CedOCOYtksQAAAUc"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:30:51.268043 2026] [:error] [pid 34318:tid 34344] [client 172.216.10.22:42210] [client 172.216.10.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.22, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1K28r3guirgJiKhzChEQAAARg"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:30:52.998206 2026] [:error] [pid 61356:tid 61407] [client 172.216.10.22:42222] [client 172.216.10.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.22, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1K3Ix3vpB8oWhUq2PUqQAAAdM"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:30:54.742641 2026] [:error] [pid 61317:tid 61329] [client 172.216.10.22:42224] [client 172.216.10.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.22, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1K3s-fFk_CedOCOYtktQAAAUk"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:30:56.459972 2026] [:error] [pid 61317:tid 61344] [client 172.216.10.22:42236] [client 172.216.10.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.216.10.22, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1K4M-fFk_CedOCOYtkuQAAAVg"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:35:42.892682 2026] [:error] [pid 61355:tid 61367] [client 84.17.34.45:40544] [client 84.17.34.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.34.45, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1L_vkhJTi30CBXmMkUvQAAAYY"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:35:45.322955 2026] [:error] [pid 51007:tid 51023] [client 84.17.34.45:40550] [client 84.17.34.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.34.45, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1MAVMagSGstWKyzzWqAAAAAAE"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:35:47.137035 2026] [:error] [pid 34318:tid 34338] [client 84.17.34.45:40552] [client 84.17.34.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.34.45, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1MA8r3guirgJiKhzChsQAAARI"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:35:49.278726 2026] [:error] [pid 51007:tid 51031] [client 84.17.34.45:40568] [client 84.17.34.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.34.45, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1MBVMagSGstWKyzzWqBAAAAAk"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:35:51.086524 2026] [:error] [pid 61356:tid 61394] [client 84.17.34.45:43218] [client 84.17.34.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.34.45, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1MB4x3vpB8oWhUq2PV_QAAAcY"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:35:53.028814 2026] [:error] [pid 51113:tid 51121] [client 84.17.34.45:43228] [client 84.17.34.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.34.45, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1MCUQfs7sWtqkpQIdHpQAAAMY"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:40:43.396917 2026] [:error] [pid 61317:tid 61338] [client 138.199.22.133:43428] [client 138.199.22.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.22.133, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1NK8-fFk_CedOCOYtnKQAAAVI"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:40:45.580528 2026] [:error] [pid 51009:tid 51089] [client 138.199.22.133:43444] [client 138.199.22.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.22.133, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1NLeB0GbUWhxgzX9XHWQAAAI0"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:40:47.616349 2026] [:error] [pid 61356:tid 61393] [client 138.199.22.133:43454] [client 138.199.22.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.22.133, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1NL4x3vpB8oWhUq2PX4wAAAcU"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:40:49.680984 2026] [:error] [pid 34318:tid 34331] [client 138.199.22.133:43462] [client 138.199.22.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.22.133, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1NMcr3guirgJiKhzCiKgAAAQs"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 10:40:51.479985 2026] [:error] [pid 61355:tid 61361] [client 138.199.22.133:51514] [client 138.199.22.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.22.133, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af1NM_khJTi30CBXmMkWmgAAAYA"], referer: https://makifim.com.au/wp-login.php
[Fri May 08 11:24:33.551702 2026] [:error] [pid 61355:tid 61369] [client 34.129.140.54:35622] [client 34.129.140.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "af1XcfkhJTi30CBXmMkkGwAAAYg"]
[Fri May 08 22:11:34.922191 2026] [:error] [pid 61356:tid 61402] [client 3.70.138.105:42904] [client 3.70.138.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.70.138.105, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af3vFox3vpB8oWhUq2PZ8AAAAc4"]
[Fri May 08 22:11:39.957370 2026] [:error] [pid 51008:tid 51069] [client 3.70.138.105:41396] [client 3.70.138.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.70.138.105, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af3vG3B58C2Y1tgLtuKzfQAAAFQ"]
[Fri May 08 22:17:10.458453 2026] [:error] [pid 61317:tid 61336] [client 45.154.98.197:58511] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "af3wZs-fFk_CedOCOYvdbgAAAVA"]
[Fri May 08 22:17:10.968734 2026] [:error] [pid 51007:tid 51043] [client 45.154.98.197:53883] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "af3wZlMagSGstWKyzzX8PAAAABU"]
[Fri May 08 22:17:11.486923 2026] [:error] [pid 61356:tid 61402] [client 45.154.98.197:52695] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "af3wZ4x3vpB8oWhUq2Pd1AAAAc4"]
[Fri May 08 22:17:12.507426 2026] [:error] [pid 61317:tid 61340] [client 45.154.98.197:55453] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/txets.php"] [unique_id "af3waM-fFk_CedOCOYvdcgAAAVQ"]
[Sat May 09 00:54:34.145189 2026] [:error] [pid 51008:tid 51060] [client 74.7.227.164:39224] [client 74.7.227.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.164, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "af4VSnB58C2Y1tgLtuLN1wAAAEs"], referer: https://makifim.com.au/
[Sat May 09 00:55:16.176573 2026] [:error] [pid 51113:tid 51130] [client 74.7.227.164:45064] [client 74.7.227.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.164, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "af4VdEQfs7sWtqkpQIeVgwAAAM8"], referer: https://makifim.com.au/
[Sat May 09 01:17:04.182067 2026] [:error] [pid 34318:tid 34327] [client 74.7.227.164:42792] [client 74.7.227.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/1"] [unique_id "af4akMr3guirgJiKhzAAtgAAAQc"], referer: https://makifim.com.au/author/ACS/
[Sat May 09 01:17:44.009389 2026] [:error] [pid 61355:tid 61385] [client 35.201.184.154:45712] [client 35.201.184.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "af4auPkhJTi30CBXmMkjNAAAAZg"]
[Sat May 09 01:20:15.929591 2026] [:error] [pid 51009:tid 51090] [client 47.130.1.189:52512] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "af4bT-B0GbUWhxgzX9WL0AAAAI4"]
[Sat May 09 01:20:18.398671 2026] [:error] [pid 61356:tid 61410] [client 47.130.1.189:52516] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4bUox3vpB8oWhUq2MgywAAAdY"]
[Sat May 09 01:20:32.204396 2026] [:error] [pid 61356:tid 61407] [client 47.130.1.189:52518] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4bYIx3vpB8oWhUq2MhCwAAAdM"]
[Sat May 09 01:20:32.711764 2026] [:error] [pid 34318:tid 34323] [client 47.130.1.189:46880] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4bYMr3guirgJiKhzABgwAAAQM"]
[Sat May 09 01:20:33.146320 2026] [:error] [pid 51009:tid 51098] [client 47.130.1.189:46892] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4bYeB0GbUWhxgzX9WL5gAAAJY"]
[Sat May 09 01:20:33.682998 2026] [:error] [pid 34318:tid 34328] [client 47.130.1.189:46896] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4bYcr3guirgJiKhzABjAAAAQg"]
[Sat May 09 01:20:34.115611 2026] [:error] [pid 51007:tid 51029] [client 47.130.1.189:46908] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4bYlMagSGstWKyzzUXagAAAAc"]
[Sat May 09 01:20:34.558395 2026] [:error] [pid 61356:tid 61393] [client 47.130.1.189:46922] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info"] [unique_id "af4bYox3vpB8oWhUq2MhDwAAAcU"]
[Sat May 09 01:20:34.992112 2026] [:error] [pid 61356:tid 61388] [client 47.130.1.189:46938] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php-info.php"] [unique_id "af4bYox3vpB8oWhUq2MhEgAAAcA"]
[Sat May 09 01:20:35.426108 2026] [:error] [pid 51009:tid 51079] [client 47.130.1.189:46944] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpversion.php"] [unique_id "af4bY-B0GbUWhxgzX9WL7AAAAIM"]
[Sat May 09 01:20:35.862432 2026] [:error] [pid 51009:tid 51099] [client 47.130.1.189:46956] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/_phpinfo.php"] [unique_id "af4bY-B0GbUWhxgzX9WL8AAAAJc"]
[Sat May 09 01:20:36.296567 2026] [:error] [pid 51009:tid 51094] [client 47.130.1.189:46960] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4bZOB0GbUWhxgzX9WL9wAAAJI"]
[Sat May 09 01:20:36.731792 2026] [:error] [pid 51009:tid 51098] [client 47.130.1.189:46976] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/server-info.php"] [unique_id "af4bZOB0GbUWhxgzX9WL-wAAAJY"]
[Sat May 09 01:20:37.168636 2026] [:error] [pid 61356:tid 61404] [client 47.130.1.189:46990] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/server-status.php"] [unique_id "af4bZYx3vpB8oWhUq2MhHQAAAdA"]
[Sat May 09 01:20:37.611823 2026] [:error] [pid 61356:tid 61394] [client 47.130.1.189:47004] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4bZYx3vpB8oWhUq2MhIgAAAcY"]
[Sat May 09 01:20:38.048710 2026] [:error] [pid 61356:tid 61388] [client 47.130.1.189:47006] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/_environment"] [unique_id "af4bZox3vpB8oWhUq2MhKAAAAcA"]
[Sat May 09 01:20:38.482599 2026] [:error] [pid 61356:tid 61389] [client 47.130.1.189:47010] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4bZox3vpB8oWhUq2MhLAAAAcE"]
[Sat May 09 01:20:38.916349 2026] [:error] [pid 61355:tid 61362] [client 47.130.1.189:47020] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4bZvkhJTi30CBXmMkl4AAAAYE"]
[Sat May 09 01:20:39.351935 2026] [:error] [pid 61355:tid 61365] [client 47.130.1.189:41318] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4bZ_khJTi30CBXmMkl4gAAAYQ"]
[Sat May 09 01:20:39.785571 2026] [:error] [pid 51009:tid 51089] [client 47.130.1.189:41320] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4bZ-B0GbUWhxgzX9WMCQAAAI0"]
[Sat May 09 01:20:40.217898 2026] [:error] [pid 51009:tid 51091] [client 47.130.1.189:41332] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4baOB0GbUWhxgzX9WMCwAAAI8"]
[Sat May 09 01:20:40.653056 2026] [:error] [pid 61356:tid 61407] [client 47.130.1.189:41348] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4baIx3vpB8oWhUq2MhMwAAAdM"]
[Sat May 09 01:20:41.088350 2026] [:error] [pid 51009:tid 51084] [client 47.130.1.189:41360] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4baeB0GbUWhxgzX9WMFQAAAIg"]
[Sat May 09 01:20:41.521099 2026] [:error] [pid 61356:tid 61405] [client 47.130.1.189:41372] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4baYx3vpB8oWhUq2MhOAAAAdE"]
[Sat May 09 01:20:41.956939 2026] [:error] [pid 51009:tid 51091] [client 47.130.1.189:41382] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo.php~"] [unique_id "af4baeB0GbUWhxgzX9WMHQAAAI8"]
[Sat May 09 01:20:42.389306 2026] [:error] [pid 34318:tid 34328] [client 47.130.1.189:41392] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php.bak"] [unique_id "af4basr3guirgJiKhzABmQAAAQg"]
[Sat May 09 01:20:42.824807 2026] [:error] [pid 61355:tid 61384] [client 47.130.1.189:41396] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4bavkhJTi30CBXmMkl5gAAAZc"]
[Sat May 09 01:20:43.265253 2026] [:error] [pid 61355:tid 61374] [client 47.130.1.189:41408] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4ba_khJTi30CBXmMkl6QAAAY0"]
[Sat May 09 01:20:43.699772 2026] [:error] [pid 61356:tid 61391] [client 47.130.1.189:41414] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4ba4x3vpB8oWhUq2MhQQAAAcM"]
[Sat May 09 01:20:44.140613 2026] [:error] [pid 61355:tid 61383] [client 47.130.1.189:41426] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4bbPkhJTi30CBXmMkl7AAAAZY"]
[Sat May 09 01:20:44.576926 2026] [:error] [pid 51009:tid 51097] [client 47.130.1.189:41430] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4bbOB0GbUWhxgzX9WMJQAAAJU"]
[Sat May 09 01:20:45.009652 2026] [:error] [pid 51007:tid 51039] [client 47.130.1.189:41434] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4bbVMagSGstWKyzzUXdQAAABE"]
[Sat May 09 01:20:45.445283 2026] [:error] [pid 61356:tid 61389] [client 47.130.1.189:41450] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4bbYx3vpB8oWhUq2MhRgAAAcE"]
[Sat May 09 01:20:45.882332 2026] [:error] [pid 51008:tid 51050] [client 47.130.1.189:41454] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4bbXB58C2Y1tgLtuLWzwAAAEE"]
[Sat May 09 01:20:46.316971 2026] [:error] [pid 61355:tid 61373] [client 47.130.1.189:41460] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4bbvkhJTi30CBXmMkmBAAAAYw"]
[Sat May 09 01:20:46.750808 2026] [:error] [pid 61355:tid 61369] [client 47.130.1.189:41474] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4bbvkhJTi30CBXmMkmBwAAAYg"]
[Sat May 09 01:20:47.182894 2026] [:error] [pid 51008:tid 51069] [client 47.130.1.189:41490] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4bb3B58C2Y1tgLtuLW2AAAAFQ"]
[Sat May 09 01:20:47.616562 2026] [:error] [pid 61355:tid 61361] [client 47.130.1.189:41494] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4bb_khJTi30CBXmMkmDwAAAYA"]
[Sat May 09 01:20:48.050969 2026] [:error] [pid 51113:tid 51120] [client 47.130.1.189:41500] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4bcEQfs7sWtqkpQIeZfgAAAMU"]
[Sat May 09 01:20:48.483133 2026] [:error] [pid 51009:tid 51080] [client 47.130.1.189:41504] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4bcOB0GbUWhxgzX9WMLwAAAIQ"]
[Sat May 09 01:20:48.915989 2026] [:error] [pid 61355:tid 61369] [client 47.130.1.189:41512] [client 47.130.1.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4bcPkhJTi30CBXmMkmGwAAAYg"]
[Sat May 09 01:32:33.373672 2026] [:error] [pid 61356:tid 61409] [client 18.140.98.35:60652] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "af4eMYx3vpB8oWhUq2MoFwAAAdU"]
[Sat May 09 01:32:36.147618 2026] [:error] [pid 51113:tid 51121] [client 18.140.98.35:60668] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4eNEQfs7sWtqkpQIebMAAAAMY"]
[Sat May 09 01:33:01.479031 2026] [:error] [pid 61355:tid 61384] [client 18.140.98.35:40028] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4eTfkhJTi30CBXmMkwcAAAAZc"]
[Sat May 09 01:33:01.912550 2026] [:error] [pid 51009:tid 51093] [client 18.140.98.35:37430] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4eTeB0GbUWhxgzX9WSrgAAAJE"]
[Sat May 09 01:33:02.343870 2026] [:error] [pid 51009:tid 51077] [client 18.140.98.35:37438] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4eTuB0GbUWhxgzX9WSrwAAAIE"]
[Sat May 09 01:33:02.777290 2026] [:error] [pid 61355:tid 61376] [client 18.140.98.35:37450] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4eTvkhJTi30CBXmMkwcQAAAY8"]
[Sat May 09 01:33:03.210248 2026] [:error] [pid 34318:tid 34338] [client 18.140.98.35:37460] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4eT8r3guirgJiKhzADxAAAARI"]
[Sat May 09 01:33:03.642826 2026] [:error] [pid 61355:tid 61370] [client 18.140.98.35:37476] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/info"] [unique_id "af4eT_khJTi30CBXmMkwdQAAAYk"]
[Sat May 09 01:33:04.074918 2026] [:error] [pid 51007:tid 51033] [client 18.140.98.35:37480] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/php-info.php"] [unique_id "af4eUFMagSGstWKyzzUarQAAAAs"]
[Sat May 09 01:33:04.508611 2026] [:error] [pid 51007:tid 51045] [client 18.140.98.35:45770] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/phpversion.php"] [unique_id "af4eUFMagSGstWKyzzUasQAAABc"]
[Sat May 09 01:33:04.939567 2026] [:error] [pid 51007:tid 51029] [client 18.140.98.35:45772] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/_phpinfo.php"] [unique_id "af4eUFMagSGstWKyzzUasgAAAAc"]
[Sat May 09 01:33:05.369473 2026] [:error] [pid 51009:tid 51083] [client 18.140.98.35:45782] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4eUeB0GbUWhxgzX9WSsgAAAIc"]
[Sat May 09 01:33:05.802594 2026] [:error] [pid 51008:tid 51049] [client 18.140.98.35:45792] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/server-info.php"] [unique_id "af4eUXB58C2Y1tgLtuLbdgAAAEA"]
[Sat May 09 01:33:06.236520 2026] [:error] [pid 61356:tid 61396] [client 18.140.98.35:45804] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/server-status.php"] [unique_id "af4eUox3vpB8oWhUq2MoVwAAAcg"]
[Sat May 09 01:33:06.667433 2026] [:error] [pid 61356:tid 61412] [client 18.140.98.35:45820] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4eUox3vpB8oWhUq2MoWwAAAdg"]
[Sat May 09 01:33:07.099866 2026] [:error] [pid 61356:tid 61392] [client 18.140.98.35:45834] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/_environment"] [unique_id "af4eU4x3vpB8oWhUq2MoXgAAAcQ"]
[Sat May 09 01:33:07.530994 2026] [:error] [pid 61355:tid 61382] [client 18.140.98.35:45844] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4eU_khJTi30CBXmMkwhwAAAZU"]
[Sat May 09 01:33:07.962677 2026] [:error] [pid 51008:tid 51055] [client 18.140.98.35:45848] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4eU3B58C2Y1tgLtuLbdwAAAEY"]
[Sat May 09 01:33:08.394805 2026] [:error] [pid 51007:tid 51026] [client 18.140.98.35:45852] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4eVFMagSGstWKyzzUatAAAAAQ"]
[Sat May 09 01:33:08.826786 2026] [:error] [pid 61355:tid 61362] [client 18.140.98.35:45868] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4eVPkhJTi30CBXmMkwkwAAAYE"]
[Sat May 09 01:33:09.263287 2026] [:error] [pid 61356:tid 61388] [client 18.140.98.35:45882] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4eVYx3vpB8oWhUq2MoZwAAAcA"]
[Sat May 09 01:33:09.695223 2026] [:error] [pid 51009:tid 51077] [client 18.140.98.35:45884] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4eVeB0GbUWhxgzX9WSuAAAAIE"]
[Sat May 09 01:33:10.129352 2026] [:error] [pid 61356:tid 61396] [client 18.140.98.35:45896] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4eVox3vpB8oWhUq2MobgAAAcg"]
[Sat May 09 01:33:10.562816 2026] [:error] [pid 51009:tid 51083] [client 18.140.98.35:45900] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4eVuB0GbUWhxgzX9WSuQAAAIc"]
[Sat May 09 01:33:10.995704 2026] [:error] [pid 61355:tid 61383] [client 18.140.98.35:45902] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/phpinfo.php~"] [unique_id "af4eVvkhJTi30CBXmMkwlQAAAZY"]
[Sat May 09 01:33:11.429201 2026] [:error] [pid 61356:tid 61389] [client 18.140.98.35:45916] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/info.php.bak"] [unique_id "af4eV4x3vpB8oWhUq2ModwAAAcE"]
[Sat May 09 01:33:11.868861 2026] [:error] [pid 61356:tid 61401] [client 18.140.98.35:45932] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4eV4x3vpB8oWhUq2MoewAAAc0"]
[Sat May 09 01:33:12.302911 2026] [:error] [pid 51009:tid 51092] [client 18.140.98.35:45934] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4eWOB0GbUWhxgzX9WSvAAAAJA"]
[Sat May 09 01:33:12.737714 2026] [:error] [pid 61355:tid 61363] [client 18.140.98.35:45940] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4eWPkhJTi30CBXmMkwmQAAAYI"]
[Sat May 09 01:33:13.168025 2026] [:error] [pid 51007:tid 51037] [client 18.140.98.35:45944] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4eWVMagSGstWKyzzUaugAAAA8"]
[Sat May 09 01:33:13.602099 2026] [:error] [pid 34318:tid 34337] [client 18.140.98.35:45960] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4eWcr3guirgJiKhzADzgAAARE"]
[Sat May 09 01:33:14.036726 2026] [:error] [pid 34318:tid 34339] [client 18.140.98.35:45966] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4eWsr3guirgJiKhzAD0QAAARM"]
[Sat May 09 01:33:14.467924 2026] [:error] [pid 51009:tid 51087] [client 18.140.98.35:57926] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4eWuB0GbUWhxgzX9WSwAAAAIs"]
[Sat May 09 01:33:14.911585 2026] [:error] [pid 61356:tid 61393] [client 18.140.98.35:57936] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4eWox3vpB8oWhUq2MohgAAAcU"]
[Sat May 09 01:33:15.344133 2026] [:error] [pid 61355:tid 61369] [client 18.140.98.35:57948] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4eW_khJTi30CBXmMkwnQAAAYg"]
[Sat May 09 01:33:15.774342 2026] [:error] [pid 61356:tid 61412] [client 18.140.98.35:57954] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4eW4x3vpB8oWhUq2MojQAAAdg"]
[Sat May 09 01:33:16.207514 2026] [:error] [pid 61355:tid 61381] [client 18.140.98.35:57962] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4eXPkhJTi30CBXmMkwpQAAAZQ"]
[Sat May 09 01:33:16.642454 2026] [:error] [pid 61356:tid 61409] [client 18.140.98.35:57978] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4eXIx3vpB8oWhUq2MokAAAAdU"]
[Sat May 09 01:33:17.073907 2026] [:error] [pid 51113:tid 51130] [client 18.140.98.35:57988] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4eXUQfs7sWtqkpQIebTgAAAM8"]
[Sat May 09 01:33:17.505528 2026] [:error] [pid 61355:tid 61361] [client 18.140.98.35:57992] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4eXfkhJTi30CBXmMkwrQAAAYA"]
[Sat May 09 01:33:17.938782 2026] [:error] [pid 61355:tid 61371] [client 18.140.98.35:58000] [client 18.140.98.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.makifim.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4eXfkhJTi30CBXmMkwtAAAAYo"]
[Sat May 09 01:33:38.775664 2026] [:error] [pid 61355:tid 61372] [client 20.226.81.141:23672] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "af4ecvkhJTi30CBXmMkxVwAAAYs"]
[Sat May 09 01:33:48.484404 2026] [:error] [pid 51009:tid 51080] [client 20.226.81.141:23632] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "af4efOB0GbUWhxgzX9WS6gAAAIQ"]
[Sat May 09 01:33:52.483803 2026] [:error] [pid 51009:tid 51090] [client 20.226.81.141:23569] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wxfyf.php"] [unique_id "af4egOB0GbUWhxgzX9WS7QAAAI4"]
[Sat May 09 01:34:00.103571 2026] [:error] [pid 51009:tid 51096] [client 20.226.81.141:23652] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "af4eiOB0GbUWhxgzX9WS-QAAAJQ"]
[Sat May 09 01:34:06.466800 2026] [:error] [pid 51009:tid 51096] [client 20.226.81.141:23673] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog-header.php"] [unique_id "af4ejuB0GbUWhxgzX9WTAAAAAJQ"]
[Sat May 09 01:34:13.138204 2026] [:error] [pid 51009:tid 51081] [client 20.226.81.141:23577] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "af4eleB0GbUWhxgzX9WTEQAAAIU"]
[Sat May 09 01:34:18.633246 2026] [:error] [pid 61317:tid 61325] [client 20.226.81.141:23675] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "af4ems-fFk_CedOCOYsMtAAAAUU"]
[Sat May 09 01:34:20.192512 2026] [:error] [pid 61355:tid 61375] [client 20.226.81.141:23625] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "af4enPkhJTi30CBXmMkykQAAAY4"]
[Sat May 09 01:34:22.490970 2026] [:error] [pid 61317:tid 61341] [client 20.226.81.141:23609] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sa.php7"] [unique_id "af4ens-fFk_CedOCOYsMvgAAAVU"]
[Sat May 09 01:34:24.709685 2026] [:error] [pid 61317:tid 61332] [client 20.226.81.141:23641] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "af4eoM-fFk_CedOCOYsMwwAAAUw"]
[Sat May 09 01:34:27.854079 2026] [:error] [pid 61356:tid 61391] [client 20.226.81.141:23658] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "af4eo4x3vpB8oWhUq2MpDwAAAcM"]
[Sat May 09 01:34:30.201808 2026] [:error] [pid 51008:tid 51069] [client 20.226.81.141:23637] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "af4epnB58C2Y1tgLtuLbswAAAFQ"]
[Sat May 09 01:34:34.531682 2026] [:error] [pid 51009:tid 51094] [client 20.226.81.141:23645] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/ws49.php"] [unique_id "af4equB0GbUWhxgzX9WTLAAAAJI"]
[Sat May 09 01:35:44.231419 2026] [:error] [pid 51007:tid 51034] [client 20.226.81.141:23620] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "af4e8FMagSGstWKyzzUbPwAAAAw"]
[Sat May 09 01:35:55.244838 2026] [:error] [pid 61356:tid 61407] [client 20.226.81.141:23552] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tool.php"] [unique_id "af4e-4x3vpB8oWhUq2Mp7gAAAdM"]
[Sat May 09 01:36:04.179739 2026] [:error] [pid 61356:tid 61410] [client 20.226.81.141:23640] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "af4fBIx3vpB8oWhUq2Mp9wAAAdY"]
[Sat May 09 01:36:06.878302 2026] [:error] [pid 61356:tid 61401] [client 20.226.81.141:23626] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "af4fBox3vpB8oWhUq2MqAQAAAc0"]
[Sat May 09 01:36:09.092035 2026] [:error] [pid 51009:tid 51085] [client 20.226.81.141:23649] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "af4fCeB0GbUWhxgzX9WUAAAAAIk"]
[Sat May 09 01:36:12.278256 2026] [:error] [pid 51009:tid 51100] [client 20.226.81.141:23668] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "af4fDOB0GbUWhxgzX9WUCAAAAJg"]
[Sat May 09 01:36:17.952966 2026] [:error] [pid 34318:tid 34339] [client 20.226.81.141:23604] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "af4fEcr3guirgJiKhzAEaQAAARM"]
[Sat May 09 01:36:20.208689 2026] [:error] [pid 61355:tid 61372] [client 20.226.81.141:23671] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "af4fFPkhJTi30CBXmMk0XwAAAYs"]
[Sat May 09 01:36:26.166341 2026] [:error] [pid 61355:tid 61371] [client 20.226.81.141:23559] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wtiiy.php"] [unique_id "af4fGvkhJTi30CBXmMk0cwAAAYo"]
[Sat May 09 01:36:33.078138 2026] [:error] [pid 51008:tid 51055] [client 20.226.81.141:23599] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "af4fIXB58C2Y1tgLtuLcSgAAAEY"]
[Sat May 09 01:36:36.413026 2026] [:error] [pid 61355:tid 61362] [client 20.226.81.141:23623] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "af4fJPkhJTi30CBXmMk0iQAAAYE"]
[Sat May 09 01:36:39.056460 2026] [:error] [pid 61356:tid 61399] [client 20.226.81.141:23676] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/init.php"] [unique_id "af4fJ4x3vpB8oWhUq2MqJQAAAcs"]
[Sat May 09 01:37:42.313382 2026] [:error] [pid 51009:tid 51085] [client 20.226.81.141:23670] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "af4fZuB0GbUWhxgzX9WUowAAAIk"]
[Sat May 09 01:37:46.762669 2026] [:error] [pid 61356:tid 61409] [client 20.226.81.141:23560] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "af4faox3vpB8oWhUq2MqmwAAAdU"]
[Sat May 09 01:37:48.775496 2026] [:error] [pid 51008:tid 51065] [client 20.226.81.141:23562] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "af4fbHB58C2Y1tgLtuLcfAAAAFA"]
[Sat May 09 01:37:51.894975 2026] [:error] [pid 51009:tid 51094] [client 20.226.81.141:23600] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/torsa1.php"] [unique_id "af4fb-B0GbUWhxgzX9WUrwAAAJI"]
[Sat May 09 01:37:57.813773 2026] [:error] [pid 51009:tid 51078] [client 20.226.81.141:23644] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "af4fdeB0GbUWhxgzX9WUvwAAAII"]
[Sat May 09 01:37:59.228764 2026] [:error] [pid 61355:tid 61365] [client 20.226.81.141:23630] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "af4fd_khJTi30CBXmMk1XwAAAYQ"]
[Sat May 09 01:38:00.838928 2026] [:error] [pid 51009:tid 51092] [client 20.226.81.141:23646] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "af4feOB0GbUWhxgzX9WUxAAAAJA"]
[Sat May 09 01:38:03.330111 2026] [:error] [pid 34318:tid 34328] [client 20.226.81.141:23678] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a4.php"] [unique_id "af4fe8r3guirgJiKhzAElQAAAQg"]
[Sat May 09 01:38:04.747627 2026] [:error] [pid 34318:tid 34320] [client 20.226.81.141:23557] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "af4ffMr3guirgJiKhzAEmAAAAQA"]
[Sat May 09 01:38:07.622484 2026] [:error] [pid 51007:tid 51034] [client 20.226.81.141:23602] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "af4ff1MagSGstWKyzzUbiQAAAAw"]
[Sat May 09 01:38:11.155895 2026] [:error] [pid 51007:tid 51045] [client 20.226.81.141:23647] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "af4fg1MagSGstWKyzzUbiwAAABc"]
[Sat May 09 01:38:14.419961 2026] [:error] [pid 61317:tid 61321] [client 20.226.81.141:23656] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/myfile.php"] [unique_id "af4fhs-fFk_CedOCOYsNwgAAAUE"]
[Sat May 09 01:38:15.868901 2026] [:error] [pid 61317:tid 61343] [client 20.226.81.141:23664] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "af4fh8-fFk_CedOCOYsNxQAAAVc"]
[Sat May 09 01:38:17.970310 2026] [:error] [pid 61317:tid 61325] [client 20.226.81.141:23657] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "af4fic-fFk_CedOCOYsNygAAAUU"]
[Sat May 09 01:38:22.115925 2026] [:error] [pid 51008:tid 51053] [client 20.226.81.141:23655] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "af4fjnB58C2Y1tgLtuLcpAAAAEQ"]
[Sat May 09 01:38:25.520891 2026] [:error] [pid 61317:tid 61341] [client 20.226.81.141:23619] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "af4fkc-fFk_CedOCOYsN0AAAAVU"]
[Sat May 09 01:38:30.806579 2026] [:error] [pid 61355:tid 61365] [client 20.226.81.141:23675] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "af4flvkhJTi30CBXmMk1iAAAAYQ"]
[Sat May 09 01:38:34.046024 2026] [:error] [pid 61356:tid 61399] [client 20.226.81.141:23659] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "af4fmox3vpB8oWhUq2MqxQAAAcs"]
[Sat May 09 01:38:39.403109 2026] [:error] [pid 61355:tid 61382] [client 20.226.81.141:23617] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cu.php"] [unique_id "af4fn_khJTi30CBXmMk1qAAAAZU"]
[Sat May 09 01:39:19.269500 2026] [:error] [pid 61317:tid 61324] [client 20.226.81.141:23667] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "af4fx8-fFk_CedOCOYsN_gAAAUQ"]
[Sat May 09 01:39:20.512577 2026] [:error] [pid 61356:tid 61409] [client 20.226.81.141:23568] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "af4fyIx3vpB8oWhUq2MrPQAAAdU"]
[Sat May 09 01:39:25.795496 2026] [:error] [pid 61355:tid 61381] [client 20.226.81.141:23663] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "af4fzfkhJTi30CBXmMk2ZQAAAZQ"]
[Sat May 09 01:39:33.607228 2026] [:error] [pid 51009:tid 51088] [client 20.226.81.141:23669] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lowpr.php"] [unique_id "af4f1eB0GbUWhxgzX9WVRQAAAIw"]
[Sat May 09 01:39:37.089364 2026] [:error] [pid 61356:tid 61395] [client 20.226.81.141:23555] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "af4f2Yx3vpB8oWhUq2MrWQAAAcc"]
[Sat May 09 01:39:40.123749 2026] [:error] [pid 51007:tid 51040] [client 20.226.81.141:23660] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "af4f3FMagSGstWKyzzUb7wAAABI"]
[Sat May 09 01:39:43.654148 2026] [:error] [pid 51009:tid 51089] [client 20.226.81.141:23614] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/term.php"] [unique_id "af4f3-B0GbUWhxgzX9WVUAAAAI0"]
[Sat May 09 01:39:57.702593 2026] [:error] [pid 51009:tid 51089] [client 20.226.81.141:23606] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "af4f7eB0GbUWhxgzX9WVgwAAAI0"]
[Sat May 09 01:40:02.211972 2026] [:error] [pid 61356:tid 61401] [client 20.226.81.141:23582] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "af4f8ox3vpB8oWhUq2MrcwAAAc0"]
[Sat May 09 01:40:06.374017 2026] [:error] [pid 61317:tid 61326] [client 20.226.81.141:23579] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "af4f9s-fFk_CedOCOYsOJQAAAUY"]
[Sat May 09 01:40:11.444294 2026] [:error] [pid 51008:tid 51053] [client 20.226.81.141:23576] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "af4f-3B58C2Y1tgLtuLdAQAAAEQ"]
[Sat May 09 01:40:15.121871 2026] [:error] [pid 51008:tid 51055] [client 20.226.81.141:23573] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ortasekerli1.php"] [unique_id "af4f_3B58C2Y1tgLtuLdCAAAAEY"]
[Sat May 09 01:40:56.494656 2026] [:error] [pid 51009:tid 51090] [client 20.226.81.141:23653] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "af4gKOB0GbUWhxgzX9WVxAAAAI4"]
[Sat May 09 01:40:59.324527 2026] [:error] [pid 61356:tid 61407] [client 20.226.81.141:23648] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "af4gK4x3vpB8oWhUq2Mr4wAAAdM"]
[Sat May 09 01:41:02.303372 2026] [:error] [pid 51009:tid 51077] [client 20.226.81.141:23580] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "af4gLuB0GbUWhxgzX9WV1gAAAIE"]
[Sat May 09 01:41:05.276858 2026] [:error] [pid 51008:tid 51066] [client 20.226.81.141:23620] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/jp.php"] [unique_id "af4gMXB58C2Y1tgLtuLdHQAAAFE"]
[Sat May 09 01:41:07.850773 2026] [:error] [pid 61355:tid 61363] [client 20.226.81.141:23677] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/G-In.php"] [unique_id "af4gM_khJTi30CBXmMk3cgAAAYI"]
[Sat May 09 01:41:09.887925 2026] [:error] [pid 61355:tid 61381] [client 20.226.81.141:23561] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/G-In.php"] [unique_id "af4gNfkhJTi30CBXmMk3fwAAAZQ"]
[Sat May 09 01:41:16.904329 2026] [:error] [pid 51008:tid 51051] [client 20.226.81.141:23588] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/G-In.php"] [unique_id "af4gPHB58C2Y1tgLtuLdIQAAAEI"]
[Sat May 09 01:41:22.905913 2026] [:error] [pid 61356:tid 61411] [client 20.226.81.141:23567] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "af4gQox3vpB8oWhUq2MsNQAAAdc"]
[Sat May 09 01:41:25.014174 2026] [:error] [pid 61317:tid 61337] [client 20.226.81.141:23599] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "af4gRc-fFk_CedOCOYsOiQAAAVE"]
[Sat May 09 01:41:29.745680 2026] [:error] [pid 51008:tid 51062] [client 20.226.81.141:23689] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "af4gSXB58C2Y1tgLtuLdMAAAAE0"]
[Sat May 09 01:41:36.694522 2026] [:error] [pid 61317:tid 61340] [client 20.226.81.141:23591] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/file.php"] [unique_id "af4gUM-fFk_CedOCOYsOoAAAAVQ"]
[Sat May 09 01:41:37.642667 2026] [:error] [pid 61355:tid 61379] [client 20.226.81.141:23658] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "af4gUfkhJTi30CBXmMk4NQAAAZI"]
[Sat May 09 01:41:40.365995 2026] [:error] [pid 61356:tid 61398] [client 20.226.81.141:23616] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "af4gVIx3vpB8oWhUq2MsSAAAAco"]
[Sat May 09 01:41:47.064462 2026] [:error] [pid 61355:tid 61366] [client 20.226.81.141:23652] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "af4gW_khJTi30CBXmMk4jAAAAYU"]
[Sat May 09 01:42:29.710563 2026] [:error] [pid 61356:tid 61393] [client 20.226.81.141:23705] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "af4ghYx3vpB8oWhUq2MtGgAAAcU"]
[Sat May 09 01:42:31.912137 2026] [:error] [pid 61356:tid 61399] [client 20.226.81.141:23646] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "af4gh4x3vpB8oWhUq2MtIAAAAcs"]
[Sat May 09 01:42:34.957665 2026] [:error] [pid 61355:tid 61374] [client 20.226.81.141:23664] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "af4givkhJTi30CBXmMk6DQAAAY0"]
[Sat May 09 01:42:43.664137 2026] [:error] [pid 51009:tid 51076] [client 20.226.81.141:23641] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/users.php"] [unique_id "af4gk-B0GbUWhxgzX9WWkAAAAIA"]
[Sat May 09 01:42:46.224344 2026] [:error] [pid 61355:tid 61362] [client 20.226.81.141:23636] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "af4glvkhJTi30CBXmMk6JAAAAYE"]
[Sat May 09 01:42:47.951910 2026] [:error] [pid 51113:tid 51133] [client 20.226.81.141:23629] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "af4gl0Qfs7sWtqkpQIecRwAAANI"]
[Sat May 09 01:42:50.927656 2026] [:error] [pid 61355:tid 61378] [client 20.226.81.141:23666] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "af4gmvkhJTi30CBXmMk6OQAAAZE"]
[Sat May 09 01:42:53.364941 2026] [:error] [pid 34318:tid 34333] [client 20.226.81.141:23577] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "af4gncr3guirgJiKhzAF2QAAAQ0"]
[Sat May 09 01:42:58.941288 2026] [:error] [pid 61355:tid 61373] [client 20.226.81.141:23566] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "af4govkhJTi30CBXmMk6hwAAAYw"]
[Sat May 09 01:43:01.928819 2026] [:error] [pid 61355:tid 61376] [client 20.226.81.141:23627] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "af4gpfkhJTi30CBXmMk6owAAAY8"]
[Sat May 09 01:43:05.684896 2026] [:error] [pid 61355:tid 61363] [client 20.226.81.141:23675] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "af4gqfkhJTi30CBXmMk6uAAAAYI"]
[Sat May 09 01:43:12.259151 2026] [:error] [pid 51009:tid 51091] [client 20.226.81.141:23657] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ox.php"] [unique_id "af4gsOB0GbUWhxgzX9WXFgAAAI8"]
[Sat May 09 01:43:17.879628 2026] [:error] [pid 51009:tid 51094] [client 20.226.81.141:23563] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ox.php"] [unique_id "af4gteB0GbUWhxgzX9WXIgAAAJI"]
[Sat May 09 01:43:20.043303 2026] [:error] [pid 61356:tid 61394] [client 20.226.81.141:23642] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ox.php"] [unique_id "af4guIx3vpB8oWhUq2MtqwAAAcY"]
[Sat May 09 01:43:24.937042 2026] [:error] [pid 61356:tid 61402] [client 20.226.81.141:23640] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "af4gvIx3vpB8oWhUq2MtuAAAAc4"]
[Sat May 09 01:44:24.787916 2026] [:error] [pid 61317:tid 61322] [client 20.226.81.141:23670] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "af4g-M-fFk_CedOCOYsPtQAAAUI"]
[Sat May 09 01:44:29.559570 2026] [:error] [pid 51009:tid 51077] [client 20.226.81.141:23645] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "af4g_eB0GbUWhxgzX9WYPwAAAIE"]
[Sat May 09 01:44:33.895816 2026] [:error] [pid 51007:tid 51029] [client 20.226.81.141:23632] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "af4hAVMagSGstWKyzzUdNgAAAAc"]
[Sat May 09 01:44:37.537682 2026] [:error] [pid 61356:tid 61403] [client 20.226.81.141:23630] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws87.php"] [unique_id "af4hBYx3vpB8oWhUq2MutQAAAc8"]
[Sat May 09 01:44:46.004378 2026] [:error] [pid 61355:tid 61362] [client 20.226.81.141:23569] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "af4hDvkhJTi30CBXmMk8kAAAAYE"]
[Sat May 09 01:44:48.993748 2026] [:error] [pid 61355:tid 61377] [client 20.226.81.141:23568] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "af4hEPkhJTi30CBXmMk8sAAAAZA"]
[Sat May 09 01:44:51.864413 2026] [:error] [pid 34318:tid 34326] [client 20.226.81.141:23558] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "af4hE8r3guirgJiKhzAGNQAAAQY"]
[Sat May 09 01:44:52.971251 2026] [:error] [pid 51008:tid 51054] [client 20.226.81.141:23643] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aa21.php"] [unique_id "af4hFHB58C2Y1tgLtuLeSQAAAEU"]
[Sat May 09 01:44:55.079997 2026] [:error] [pid 51113:tid 51118] [client 20.226.81.141:23606] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "af4hF0Qfs7sWtqkpQIecogAAAMM"]
[Sat May 09 01:44:56.260888 2026] [:error] [pid 61317:tid 61334] [client 20.226.81.141:23603] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "af4hGM-fFk_CedOCOYsP1wAAAU4"]
[Sat May 09 01:45:03.513024 2026] [:error] [pid 61355:tid 61367] [client 20.226.81.141:23572] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "af4hH_khJTi30CBXmMk8-gAAAYY"]
[Sat May 09 01:45:05.493429 2026] [:error] [pid 61317:tid 61339] [client 20.226.81.141:23562] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/okxh.php"] [unique_id "af4hIc-fFk_CedOCOYsP5QAAAVM"]
[Sat May 09 01:45:08.446875 2026] [:error] [pid 61355:tid 61370] [client 20.226.81.141:23555] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "af4hJPkhJTi30CBXmMk9DgAAAYk"]
[Sat May 09 01:45:13.316908 2026] [:error] [pid 61317:tid 61330] [client 20.226.81.141:23674] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "af4hKc-fFk_CedOCOYsP-wAAAUo"]
[Sat May 09 01:46:03.056134 2026] [:error] [pid 61355:tid 61373] [client 20.226.81.141:23637] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "af4hW_khJTi30CBXmMk-DwAAAYw"]
[Sat May 09 01:46:05.511696 2026] [:error] [pid 51113:tid 51136] [client 20.226.81.141:23565] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "af4hXUQfs7sWtqkpQIec2QAAANU"]
[Sat May 09 01:46:09.092767 2026] [:error] [pid 61356:tid 61398] [client 20.226.81.141:23635] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "af4hYYx3vpB8oWhUq2MvWAAAAco"]
[Sat May 09 01:46:11.800078 2026] [:error] [pid 61355:tid 61379] [client 20.226.81.141:23582] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/callback.php"] [unique_id "af4hY_khJTi30CBXmMk-IwAAAZI"]
[Sat May 09 01:46:18.920100 2026] [:error] [pid 61355:tid 61371] [client 20.226.81.141:23595] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sd.php"] [unique_id "af4havkhJTi30CBXmMk-OAAAAYo"]
[Sat May 09 01:46:23.348984 2026] [:error] [pid 61355:tid 61384] [client 20.226.81.141:23553] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sd.php"] [unique_id "af4hb_khJTi30CBXmMk-UAAAAZc"]
[Sat May 09 01:46:26.346628 2026] [:error] [pid 51009:tid 51098] [client 20.226.81.141:23621] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sd.php"] [unique_id "af4hcuB0GbUWhxgzX9WZQQAAAJY"]
[Sat May 09 01:46:32.270567 2026] [:error] [pid 61317:tid 61321] [client 20.226.81.141:23648] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "af4heM-fFk_CedOCOYsRDQAAAUE"]
[Sat May 09 01:46:34.525852 2026] [:error] [pid 61355:tid 61361] [client 20.226.81.141:23638] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "af4hevkhJTi30CBXmMk-ggAAAYA"]
[Sat May 09 01:46:37.128797 2026] [:error] [pid 51007:tid 51022] [client 20.226.81.141:23676] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "af4hfVMagSGstWKyzzUePgAAAAA"]
[Sat May 09 01:46:38.803426 2026] [:error] [pid 51009:tid 51089] [client 20.226.81.141:23560] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gpt-sh.php"] [unique_id "af4hfuB0GbUWhxgzX9WZbwAAAI0"]
[Sat May 09 01:46:48.999982 2026] [:error] [pid 61356:tid 61402] [client 20.226.81.141:23557] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "af4hiIx3vpB8oWhUq2MwIAAAAc4"]
[Sat May 09 01:46:51.912647 2026] [:error] [pid 51007:tid 51022] [client 20.226.81.141:23677] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/domains.php"] [unique_id "af4hi1MagSGstWKyzzUeTAAAAAA"]
[Sat May 09 01:47:30.711408 2026] [:error] [pid 51008:tid 51068] [client 20.226.81.141:23592] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "af4hsnB58C2Y1tgLtuLfHQAAAFM"]
[Sat May 09 01:47:39.415945 2026] [:error] [pid 61355:tid 61379] [client 20.226.81.141:23666] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "af4hu_khJTi30CBXmMlAIAAAAZI"]
[Sat May 09 01:47:44.362674 2026] [:error] [pid 61355:tid 61363] [client 20.226.81.141:23610] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "af4hwPkhJTi30CBXmMlALwAAAYI"]
[Sat May 09 01:47:48.183914 2026] [:error] [pid 51009:tid 51081] [client 20.226.81.141:23664] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "af4hxOB0GbUWhxgzX9WZ2QAAAIU"]
[Sat May 09 01:47:50.129602 2026] [:error] [pid 51113:tid 51121] [client 20.226.81.141:23675] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "af4hxkQfs7sWtqkpQIedsQAAAMY"]
[Sat May 09 01:47:53.456589 2026] [:error] [pid 51007:tid 51026] [client 20.226.81.141:23646] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "af4hyVMagSGstWKyzzUeggAAAAQ"]
[Sat May 09 01:47:56.515898 2026] [:error] [pid 61356:tid 61410] [client 20.226.81.141:23599] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/motu.php"] [unique_id "af4hzIx3vpB8oWhUq2Mw8gAAAdY"]
[Sat May 09 01:47:58.841330 2026] [:error] [pid 51007:tid 51044] [client 20.226.81.141:23679] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "af4hzlMagSGstWKyzzUejAAAABY"]
[Sat May 09 01:48:03.704481 2026] [:error] [pid 51009:tid 51081] [client 20.226.81.141:23671] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "af4h0-B0GbUWhxgzX9WZ8QAAAIU"]
[Sat May 09 01:48:08.210891 2026] [:error] [pid 61356:tid 61397] [client 20.226.81.141:23570] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "af4h2Ix3vpB8oWhUq2MxDgAAAck"]
[Sat May 09 01:48:11.553535 2026] [:error] [pid 61356:tid 61389] [client 20.226.81.141:23617] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albin.php"] [unique_id "af4h24x3vpB8oWhUq2MxFAAAAcE"]
[Sat May 09 01:48:12.657003 2026] [:error] [pid 61355:tid 61370] [client 20.226.81.141:23601] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "af4h3PkhJTi30CBXmMlArQAAAYk"]
[Sat May 09 01:48:16.082951 2026] [:error] [pid 34318:tid 34325] [client 20.226.81.141:23591] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "af4h4Mr3guirgJiKhzAHFQAAAQU"]
[Sat May 09 01:48:19.957326 2026] [:error] [pid 61317:tid 61338] [client 20.226.81.141:23622] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "af4h48-fFk_CedOCOYsSIgAAAVI"]
[Sat May 09 01:48:22.158691 2026] [:error] [pid 51008:tid 51053] [client 20.226.81.141:23673] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fone1.php"] [unique_id "af4h5nB58C2Y1tgLtuLfagAAAEQ"]
[Sat May 09 01:48:27.375872 2026] [:error] [pid 61317:tid 61343] [client 20.226.81.141:23567] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ta0ol.php"] [unique_id "af4h68-fFk_CedOCOYsSOAAAAVc"]
[Sat May 09 01:49:01.143339 2026] [:error] [pid 61355:tid 61382] [client 20.226.81.141:23561] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "af4iDfkhJTi30CBXmMlB9wAAAZU"]
[Sat May 09 01:49:03.937399 2026] [:error] [pid 51113:tid 51131] [client 20.226.81.141:23604] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "af4iD0Qfs7sWtqkpQIed5gAAANA"]
[Sat May 09 01:49:05.843772 2026] [:error] [pid 61355:tid 61367] [client 20.226.81.141:23667] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "af4iEfkhJTi30CBXmMlCGwAAAYY"]
[Sat May 09 01:49:09.686318 2026] [:error] [pid 61317:tid 61333] [client 20.226.81.141:23728] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/green.php"] [unique_id "af4iFc-fFk_CedOCOYsSVwAAAU0"]
[Sat May 09 01:49:13.888821 2026] [:error] [pid 61355:tid 61363] [client 20.226.81.141:23689] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "af4iGfkhJTi30CBXmMlCegAAAYI"]
[Sat May 09 01:49:17.919031 2026] [:error] [pid 51007:tid 51036] [client 20.226.81.141:23618] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "af4iHVMagSGstWKyzzUfCAAAAA4"]
[Sat May 09 01:49:20.147383 2026] [:error] [pid 61317:tid 61342] [client 20.226.81.141:23657] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "af4iIM-fFk_CedOCOYsSaQAAAVY"]
[Sat May 09 01:49:21.765581 2026] [:error] [pid 51113:tid 51126] [client 20.226.81.141:23670] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/b.php"] [unique_id "af4iIUQfs7sWtqkpQIed9gAAAMs"]
[Sat May 09 01:49:25.777026 2026] [:error] [pid 61355:tid 61361] [client 20.226.81.141:23660] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "af4iJfkhJTi30CBXmMlC4AAAAYA"]
[Sat May 09 01:49:28.456561 2026] [:error] [pid 51007:tid 51039] [client 20.226.81.141:23593] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "af4iKFMagSGstWKyzzUfHAAAABE"]
[Sat May 09 01:49:30.477336 2026] [:error] [pid 51008:tid 51050] [client 20.226.81.141:23641] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "af4iKnB58C2Y1tgLtuLfsAAAAEE"]
[Sat May 09 01:49:31.823556 2026] [:error] [pid 61355:tid 61369] [client 20.226.81.141:23668] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws84.php"] [unique_id "af4iK_khJTi30CBXmMlC-AAAAYg"]
[Sat May 09 01:49:35.400005 2026] [:error] [pid 61317:tid 61340] [client 20.226.81.141:23702] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4iL8-fFk_CedOCOYsSggAAAVQ"]
[Sat May 09 01:49:46.581973 2026] [:error] [pid 61356:tid 61392] [client 20.226.81.141:23589] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4iOox3vpB8oWhUq2MyhQAAAcQ"]
[Sat May 09 01:49:48.391349 2026] [:error] [pid 51113:tid 51138] [client 35.252.25.200:34942] [client 35.252.25.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "af4iPEQfs7sWtqkpQIeeEAAAANc"]
[Sat May 09 01:49:50.485657 2026] [:error] [pid 61356:tid 61396] [client 20.226.81.141:23559] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "af4iPox3vpB8oWhUq2MyiAAAAcg"]
[Sat May 09 01:49:54.482800 2026] [:error] [pid 51009:tid 51092] [client 20.226.81.141:23552] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/public/vx.php"] [unique_id "af4iQuB0GbUWhxgzX9Wa4wAAAJA"]
[Sat May 09 01:50:43.650312 2026] [:error] [pid 51007:tid 51031] [client 20.226.81.141:23626] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "af4ic1MagSGstWKyzzUfngAAAAk"]
[Sat May 09 01:50:44.509746 2026] [:error] [pid 61355:tid 61383] [client 20.226.81.141:23588] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "af4idPkhJTi30CBXmMlDtQAAAZY"]
[Sat May 09 01:50:45.736823 2026] [:error] [pid 61356:tid 61394] [client 20.226.81.141:23655] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "af4idYx3vpB8oWhUq2My2wAAAcY"]
[Sat May 09 01:50:48.010741 2026] [:error] [pid 34318:tid 34339] [client 20.226.81.141:23574] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "af4ieMr3guirgJiKhzAHWQAAARM"]
[Sat May 09 01:50:50.268339 2026] [:error] [pid 61317:tid 61341] [client 20.226.81.141:23612] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "af4ies-fFk_CedOCOYsSyQAAAVU"]
[Sat May 09 01:50:52.748669 2026] [:error] [pid 61356:tid 61412] [client 20.226.81.141:23715] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "af4ifIx3vpB8oWhUq2My8wAAAdg"]
[Sat May 09 01:50:54.850754 2026] [:error] [pid 61355:tid 61367] [client 20.226.81.141:23659] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "af4ifvkhJTi30CBXmMlDxQAAAYY"]
[Sat May 09 01:50:58.520633 2026] [:error] [pid 61355:tid 61367] [client 20.226.81.141:23669] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cwclass.php"] [unique_id "af4igvkhJTi30CBXmMlDzwAAAYY"]
[Sat May 09 01:51:00.689805 2026] [:error] [pid 61355:tid 61366] [client 20.226.81.141:23638] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "af4ihPkhJTi30CBXmMlD1gAAAYU"]
[Sat May 09 01:51:03.460249 2026] [:error] [pid 61355:tid 61381] [client 20.226.81.141:23653] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "af4ih_khJTi30CBXmMlD4wAAAZQ"]
[Sat May 09 01:51:05.290201 2026] [:error] [pid 61355:tid 61369] [client 20.226.81.141:23630] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "af4iifkhJTi30CBXmMlD7AAAAYg"]
[Sat May 09 01:51:08.084149 2026] [:error] [pid 51009:tid 51100] [client 20.226.81.141:23640] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0x.php"] [unique_id "af4ijOB0GbUWhxgzX9WbywAAAJg"]
[Sat May 09 01:51:12.264585 2026] [:error] [pid 61355:tid 61363] [client 20.226.81.141:23564] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "af4ikPkhJTi30CBXmMlEDQAAAYI"]
[Sat May 09 01:51:14.090835 2026] [:error] [pid 61355:tid 61362] [client 20.226.81.141:23634] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "af4ikvkhJTi30CBXmMlEDgAAAYE"]
[Sat May 09 01:51:16.487187 2026] [:error] [pid 51008:tid 51071] [client 20.226.81.141:23678] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "af4ilHB58C2Y1tgLtuLgcwAAAFY"]
[Sat May 09 01:51:19.685645 2026] [:error] [pid 51009:tid 51094] [client 20.226.81.141:23642] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/radio.php"] [unique_id "af4il-B0GbUWhxgzX9Wb1wAAAJI"]
[Sat May 09 01:51:22.068044 2026] [:error] [pid 51008:tid 51053] [client 20.226.81.141:23741] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "af4imnB58C2Y1tgLtuLgfAAAAEQ"]
[Sat May 09 01:51:24.974577 2026] [:error] [pid 51009:tid 51076] [client 20.226.81.141:23662] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "af4inOB0GbUWhxgzX9Wb3QAAAIA"]
[Sat May 09 01:51:26.205593 2026] [:error] [pid 51007:tid 51043] [client 20.226.81.141:23644] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "af4inlMagSGstWKyzzUf7QAAABU"]
[Sat May 09 01:51:29.043943 2026] [:error] [pid 51009:tid 51089] [client 20.226.81.141:23581] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zoper1.php"] [unique_id "af4ioeB0GbUWhxgzX9WcAQAAAI0"]
[Sat May 09 01:51:33.796628 2026] [:error] [pid 51009:tid 51086] [client 20.226.81.141:23656] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "af4ipeB0GbUWhxgzX9WcDQAAAIo"]
[Sat May 09 01:51:37.143556 2026] [:error] [pid 61355:tid 61365] [client 20.226.81.141:23674] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "af4iqfkhJTi30CBXmMlENgAAAYQ"]
[Sat May 09 01:51:39.592336 2026] [:error] [pid 61355:tid 61382] [client 20.226.81.141:23688] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/144.php"] [unique_id "af4iq_khJTi30CBXmMlEQAAAAZU"]
[Sat May 09 01:52:11.520340 2026] [:error] [pid 61356:tid 61412] [client 20.226.81.141:23619] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "af4iy4x3vpB8oWhUq2M0QgAAAdg"]
[Sat May 09 01:52:13.062823 2026] [:error] [pid 51009:tid 51078] [client 20.226.81.141:23576] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "af4izeB0GbUWhxgzX9WcegAAAII"]
[Sat May 09 01:52:16.959810 2026] [:error] [pid 61317:tid 61324] [client 20.226.81.141:23729] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "af4i0M-fFk_CedOCOYsTdQAAAUQ"]
[Sat May 09 01:52:20.142161 2026] [:error] [pid 34318:tid 34332] [client 20.226.81.141:23597] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "af4i1Mr3guirgJiKhzAHkgAAAQw"]
[Sat May 09 01:52:22.400192 2026] [:error] [pid 61355:tid 61362] [client 20.226.81.141:23671] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "af4i1vkhJTi30CBXmMlFFgAAAYE"]
[Sat May 09 01:52:25.456384 2026] [:error] [pid 61355:tid 61372] [client 20.226.81.141:23663] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "af4i2fkhJTi30CBXmMlFJAAAAYs"]
[Sat May 09 01:52:29.426776 2026] [:error] [pid 51008:tid 51049] [client 20.226.81.141:23609] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "af4i3XB58C2Y1tgLtuLgyAAAAEA"]
[Sat May 09 01:52:32.049422 2026] [:error] [pid 51009:tid 51080] [client 20.226.81.141:23617] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "af4i4OB0GbUWhxgzX9WclwAAAIQ"]
[Sat May 09 01:52:33.722000 2026] [:error] [pid 61355:tid 61364] [client 20.226.81.141:23573] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "af4i4fkhJTi30CBXmMlFOwAAAYM"]
[Sat May 09 01:52:35.274219 2026] [:error] [pid 51009:tid 51097] [client 20.226.81.141:23615] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "af4i4-B0GbUWhxgzX9WcogAAAJU"]
[Sat May 09 01:52:37.949961 2026] [:error] [pid 61317:tid 61334] [client 20.226.81.141:23582] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "af4i5c-fFk_CedOCOYsTmAAAAU4"]
[Sat May 09 01:52:39.697089 2026] [:error] [pid 51008:tid 51058] [client 20.226.81.141:23566] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bnm.php"] [unique_id "af4i53B58C2Y1tgLtuLg1AAAAEk"]
[Sat May 09 01:52:43.125076 2026] [:error] [pid 61356:tid 61398] [client 20.226.81.141:23621] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "af4i64x3vpB8oWhUq2M0twAAAco"]
[Sat May 09 01:52:46.142213 2026] [:error] [pid 61317:tid 61328] [client 20.226.81.141:23700] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "af4i7s-fFk_CedOCOYsTogAAAUg"]
[Sat May 09 01:52:48.240819 2026] [:error] [pid 51008:tid 51066] [client 20.226.81.141:23583] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "af4i8HB58C2Y1tgLtuLg3gAAAFE"]
[Sat May 09 01:52:49.604749 2026] [:error] [pid 51008:tid 51070] [client 20.226.81.141:23598] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/vanda.php"] [unique_id "af4i8XB58C2Y1tgLtuLg4gAAAFU"]
[Sat May 09 01:52:52.737038 2026] [:error] [pid 61317:tid 61322] [client 20.226.81.141:23586] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "af4i9M-fFk_CedOCOYsTrAAAAUI"]
[Sat May 09 01:52:56.253344 2026] [:error] [pid 61317:tid 61341] [client 20.226.81.141:23646] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "af4i-M-fFk_CedOCOYsTtwAAAVU"]
[Sat May 09 01:52:58.078752 2026] [:error] [pid 51009:tid 51084] [client 20.226.81.141:23677] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "af4i-uB0GbUWhxgzX9Wc0gAAAIg"]
[Sat May 09 01:52:59.948639 2026] [:error] [pid 61356:tid 61395] [client 20.226.81.141:23654] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bgymj.php"] [unique_id "af4i-4x3vpB8oWhUq2M04QAAAcc"]
[Sat May 09 01:53:03.602570 2026] [:error] [pid 61355:tid 61368] [client 20.226.81.141:23585] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "af4i__khJTi30CBXmMlFUAAAAYc"]
[Sat May 09 01:53:07.394261 2026] [:error] [pid 51007:tid 51040] [client 20.226.81.141:23565] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "af4jA1MagSGstWKyzzUgMAAAABI"]
[Sat May 09 01:53:41.495804 2026] [:error] [pid 51008:tid 51060] [client 20.226.81.141:23620] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "af4jJXB58C2Y1tgLtuLhSwAAAEs"]
[Sat May 09 01:53:44.835650 2026] [:error] [pid 61355:tid 61361] [client 20.226.81.141:23553] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "af4jKPkhJTi30CBXmMlFlQAAAYA"]
[Sat May 09 01:53:48.347519 2026] [:error] [pid 61356:tid 61410] [client 20.226.81.141:23647] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "af4jLIx3vpB8oWhUq2M1JwAAAdY"]
[Sat May 09 01:53:50.121597 2026] [:error] [pid 51009:tid 51078] [client 20.226.81.141:23679] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file61.php"] [unique_id "af4jLuB0GbUWhxgzX9WdDQAAAII"]
[Sat May 09 01:53:52.307186 2026] [:error] [pid 51008:tid 51068] [client 20.226.81.141:23595] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eetu.php"] [unique_id "af4jMHB58C2Y1tgLtuLhWAAAAFM"]
[Sat May 09 01:53:57.205309 2026] [:error] [pid 51009:tid 51088] [client 20.226.81.141:23590] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eetu.php"] [unique_id "af4jNeB0GbUWhxgzX9WdIQAAAIw"]
[Sat May 09 01:54:00.324743 2026] [:error] [pid 51007:tid 51028] [client 20.226.81.141:23562] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eetu.php"] [unique_id "af4jOFMagSGstWKyzzUgXAAAAAY"]
[Sat May 09 01:54:03.357944 2026] [:error] [pid 61355:tid 61362] [client 20.226.81.141:23554] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/eetu.php"] [unique_id "af4jO_khJTi30CBXmMlFswAAAYE"]
[Sat May 09 01:54:07.317889 2026] [:error] [pid 51007:tid 51043] [client 20.226.81.141:23569] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drykl.php"] [unique_id "af4jP1MagSGstWKyzzUgXgAAABU"]
[Sat May 09 01:54:12.072936 2026] [:error] [pid 51009:tid 51089] [client 20.226.81.141:23627] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drykl.php"] [unique_id "af4jROB0GbUWhxgzX9WdNAAAAI0"]
[Sat May 09 01:54:14.580780 2026] [:error] [pid 51007:tid 51032] [client 20.226.81.141:23552] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drykl.php"] [unique_id "af4jRlMagSGstWKyzzUgYQAAAAo"]
[Sat May 09 01:54:18.002529 2026] [:error] [pid 61356:tid 61394] [client 20.226.81.141:23623] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/drykl.php"] [unique_id "af4jSox3vpB8oWhUq2M1WwAAAcY"]
[Sat May 09 01:54:23.000831 2026] [:error] [pid 61355:tid 61361] [client 20.226.81.141:23668] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/crgio.php"] [unique_id "af4jTvkhJTi30CBXmMlF1wAAAYA"]
[Sat May 09 01:54:28.620761 2026] [:error] [pid 61356:tid 61393] [client 20.226.81.141:23632] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/crgio.php"] [unique_id "af4jVIx3vpB8oWhUq2M1awAAAcU"]
[Sat May 09 01:55:15.157572 2026] [:error] [pid 51009:tid 51099] [client 20.226.81.141:23560] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/villain.php"] [unique_id "af4jg-B0GbUWhxgzX9WddgAAAJc"]
[Sat May 09 01:55:18.236248 2026] [:error] [pid 61355:tid 61382] [client 20.226.81.141:23676] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/villain.php"] [unique_id "af4jhvkhJTi30CBXmMlGOgAAAZU"]
[Sat May 09 01:55:22.052301 2026] [:error] [pid 51113:tid 51136] [client 20.226.81.141:23689] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/villain.php"] [unique_id "af4jikQfs7sWtqkpQIeeuQAAANU"]
[Sat May 09 01:55:24.964056 2026] [:error] [pid 61356:tid 61396] [client 20.226.81.141:23626] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/villain.php"] [unique_id "af4jjIx3vpB8oWhUq2M2DQAAAcg"]
[Sat May 09 01:55:28.368747 2026] [:error] [pid 61356:tid 61389] [client 20.226.81.141:23661] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX6.php"] [unique_id "af4jkIx3vpB8oWhUq2M2EwAAAcE"]
[Sat May 09 01:55:32.635899 2026] [:error] [pid 61356:tid 61391] [client 20.226.81.141:23743] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX6.php"] [unique_id "af4jlIx3vpB8oWhUq2M2JAAAAcM"]
[Sat May 09 01:55:35.783564 2026] [:error] [pid 61317:tid 61321] [client 20.226.81.141:23568] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX6.php"] [unique_id "af4jl8-fFk_CedOCOYsUZAAAAUE"]
[Sat May 09 01:55:37.467430 2026] [:error] [pid 61355:tid 61375] [client 20.226.81.141:23658] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX6.php"] [unique_id "af4jmfkhJTi30CBXmMlGWwAAAY4"]
[Sat May 09 01:55:39.167400 2026] [:error] [pid 61317:tid 61335] [client 20.226.81.141:23670] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX7.php"] [unique_id "af4jm8-fFk_CedOCOYsUbgAAAU8"]
[Sat May 09 01:55:42.853249 2026] [:error] [pid 51113:tid 51119] [client 20.226.81.141:23564] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX7.php"] [unique_id "af4jnkQfs7sWtqkpQIeevQAAAMQ"]
[Sat May 09 01:55:54.437946 2026] [:error] [pid 61356:tid 61400] [client 20.226.81.141:23630] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX4.php"] [unique_id "af4jqox3vpB8oWhUq2M2RgAAAcw"]
[Sat May 09 01:55:55.774336 2026] [:error] [pid 61356:tid 61395] [client 20.226.81.141:23662] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX4.php"] [unique_id "af4jq4x3vpB8oWhUq2M2SgAAAcc"]
[Sat May 09 01:55:59.024154 2026] [:error] [pid 61356:tid 61402] [client 20.226.81.141:23638] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX4.php"] [unique_id "af4jr4x3vpB8oWhUq2M2VAAAAc4"]
[Sat May 09 01:56:01.841190 2026] [:error] [pid 61356:tid 61396] [client 20.226.81.141:23686] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX4.php"] [unique_id "af4jsYx3vpB8oWhUq2M2XAAAAcg"]
[Sat May 09 01:56:05.155629 2026] [:error] [pid 61356:tid 61395] [client 20.226.81.141:23690] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX5.php"] [unique_id "af4jtYx3vpB8oWhUq2M2YQAAAcc"]
[Sat May 09 01:56:07.315886 2026] [:error] [pid 61355:tid 61382] [client 20.226.81.141:23667] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX5.php"] [unique_id "af4jt_khJTi30CBXmMlGhwAAAZU"]
[Sat May 09 01:56:10.722086 2026] [:error] [pid 61355:tid 61368] [client 20.226.81.141:23602] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX5.php"] [unique_id "af4juvkhJTi30CBXmMlGlAAAAYc"]
[Sat May 09 01:56:44.591338 2026] [:error] [pid 61356:tid 61412] [client 20.226.81.141:23648] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "af4j3Ix3vpB8oWhUq2M2oAAAAdg"]
[Sat May 09 01:56:46.933077 2026] [:error] [pid 61317:tid 61335] [client 20.226.81.141:23656] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "af4j3s-fFk_CedOCOYsUlgAAAU8"]
[Sat May 09 01:56:49.734585 2026] [:error] [pid 61317:tid 61341] [client 20.226.81.141:23640] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "af4j4c-fFk_CedOCOYsUowAAAVU"]
[Sat May 09 01:56:52.204526 2026] [:error] [pid 61356:tid 61411] [client 20.226.81.141:23725] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pass4.php"] [unique_id "af4j5Ix3vpB8oWhUq2M2pgAAAdc"]
[Sat May 09 01:56:53.651102 2026] [:error] [pid 61355:tid 61374] [client 20.226.81.141:23637] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/academy.php"] [unique_id "af4j5fkhJTi30CBXmMlG3gAAAY0"]
[Sat May 09 01:56:55.418307 2026] [:error] [pid 61355:tid 61382] [client 20.226.81.141:23649] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/academy.php"] [unique_id "af4j5_khJTi30CBXmMlG5wAAAZU"]
[Sat May 09 01:57:00.637852 2026] [:error] [pid 51007:tid 51026] [client 20.226.81.141:23655] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/academy.php"] [unique_id "af4j7FMagSGstWKyzzUgwwAAAAQ"]
[Sat May 09 01:57:05.690417 2026] [:error] [pid 61355:tid 61369] [client 20.226.81.141:23561] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/academy.php"] [unique_id "af4j8fkhJTi30CBXmMlG7gAAAYg"]
[Sat May 09 01:57:08.502289 2026] [:error] [pid 51113:tid 51118] [client 20.226.81.141:23633] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lco.php"] [unique_id "af4j9EQfs7sWtqkpQIee3QAAAMM"]
[Sat May 09 01:57:10.409162 2026] [:error] [pid 51113:tid 51120] [client 20.226.81.141:23669] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lco.php"] [unique_id "af4j9kQfs7sWtqkpQIee4QAAAMU"]
[Sat May 09 01:57:11.708772 2026] [:error] [pid 61355:tid 61385] [client 20.226.81.141:23581] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lco.php"] [unique_id "af4j9_khJTi30CBXmMlG-wAAAZg"]
[Sat May 09 01:57:14.793122 2026] [:error] [pid 51008:tid 51056] [client 20.226.81.141:23660] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lco.php"] [unique_id "af4j-nB58C2Y1tgLtuLiBQAAAEc"]
[Sat May 09 01:57:20.305808 2026] [:error] [pid 61355:tid 61372] [client 20.226.81.141:23672] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lgr.php"] [unique_id "af4kAPkhJTi30CBXmMlHIgAAAYs"]
[Sat May 09 01:57:23.913376 2026] [:error] [pid 61356:tid 61389] [client 20.226.81.141:23625] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lgr.php"] [unique_id "af4kA4x3vpB8oWhUq2M21QAAAcE"]
[Sat May 09 01:57:27.675184 2026] [:error] [pid 51009:tid 51080] [client 20.226.81.141:23557] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lgr.php"] [unique_id "af4kB-B0GbUWhxgzX9Wd9QAAAIQ"]
[Sat May 09 01:57:33.483583 2026] [:error] [pid 61317:tid 61344] [client 20.226.81.141:23641] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mac.php"] [unique_id "af4kDc-fFk_CedOCOYsUwQAAAVg"]
[Sat May 09 01:57:41.453060 2026] [:error] [pid 34318:tid 34322] [client 20.226.81.141:23585] [client 20.226.81.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mac.php"] [unique_id "af4kFcr3guirgJiKhzAIdwAAAQI"]
[Sat May 09 02:38:35.042998 2026] [:error] [pid 61355:tid 61372] [client 4.228.101.41:34196] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "af4tq_khJTi30CBXmMlfvQAAAYs"]
[Sat May 09 02:38:37.193420 2026] [:error] [pid 61356:tid 61405] [client 4.228.101.41:22484] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "af4trYx3vpB8oWhUq2NKFAAAAdE"]
[Sat May 09 02:38:38.618828 2026] [:error] [pid 61317:tid 61334] [client 4.228.101.41:14045] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "af4trs-fFk_CedOCOYsePQAAAU4"]
[Sat May 09 02:38:39.934778 2026] [:error] [pid 61356:tid 61403] [client 4.228.101.41:22435] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "af4tr4x3vpB8oWhUq2NKGAAAAc8"]
[Sat May 09 02:38:41.238451 2026] [:error] [pid 51007:tid 51032] [client 4.228.101.41:41453] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "af4tsVMagSGstWKyzzUnpAAAAAo"]
[Sat May 09 02:38:45.441716 2026] [:error] [pid 51007:tid 51030] [client 4.228.101.41:33425] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "af4ttVMagSGstWKyzzUnqwAAAAg"]
[Sat May 09 02:38:54.405470 2026] [:error] [pid 61355:tid 61368] [client 4.228.101.41:22506] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "af4tvvkhJTi30CBXmMlf-AAAAYc"]
[Sat May 09 02:38:56.156728 2026] [:error] [pid 51007:tid 51038] [client 4.228.101.41:36653] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "af4twFMagSGstWKyzzUnuQAAABA"]
[Sat May 09 02:38:58.130985 2026] [:error] [pid 51008:tid 51073] [client 4.228.101.41:36666] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "af4twnB58C2Y1tgLtuLsHwAAAFg"]
[Sat May 09 02:38:59.155968 2026] [:error] [pid 61355:tid 61369] [client 4.228.101.41:36639] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "af4tw_khJTi30CBXmMlgFQAAAYg"]
[Sat May 09 02:39:01.177892 2026] [:error] [pid 34318:tid 34330] [client 4.228.101.41:33457] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "af4txcr3guirgJiKhzAOuAAAAQo"]
[Sat May 09 02:39:02.682072 2026] [:error] [pid 61355:tid 61365] [client 4.228.101.41:22256] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "af4txvkhJTi30CBXmMlgJQAAAYQ"]
[Sat May 09 02:39:04.013250 2026] [:error] [pid 61317:tid 61322] [client 4.228.101.41:39263] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "af4tyM-fFk_CedOCOYseYQAAAUI"]
[Sat May 09 02:39:05.670374 2026] [:error] [pid 51009:tid 51084] [client 4.228.101.41:22295] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "af4tyeB0GbUWhxgzX9WqpQAAAIg"]
[Sat May 09 02:39:06.415995 2026] [:error] [pid 61356:tid 61396] [client 4.228.101.41:22269] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "af4tyox3vpB8oWhUq2NKVQAAAcg"]
[Sat May 09 02:39:07.327300 2026] [:error] [pid 61355:tid 61368] [client 4.228.101.41:22314] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4ty_khJTi30CBXmMlgOQAAAYc"]
[Sat May 09 02:39:09.032220 2026] [:error] [pid 61355:tid 61376] [client 4.228.101.41:22261] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4tzfkhJTi30CBXmMlgTwAAAY8"]
[Sat May 09 02:39:10.211289 2026] [:error] [pid 61356:tid 61403] [client 4.228.101.41:22330] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4tzox3vpB8oWhUq2NKXwAAAc8"]
[Sat May 09 02:39:11.114376 2026] [:error] [pid 61356:tid 61400] [client 4.228.101.41:42791] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4tz4x3vpB8oWhUq2NKZAAAAcw"]
[Sat May 09 02:39:12.710574 2026] [:error] [pid 61355:tid 61383] [client 4.228.101.41:36759] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "af4t0PkhJTi30CBXmMlgYgAAAZY"]
[Sat May 09 02:39:14.044940 2026] [:error] [pid 61356:tid 61388] [client 4.228.101.41:36755] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "af4t0ox3vpB8oWhUq2NKbgAAAcA"]
[Sat May 09 02:39:16.178446 2026] [:error] [pid 34318:tid 34326] [client 4.228.101.41:40833] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "af4t1Mr3guirgJiKhzAOygAAAQY"]
[Sat May 09 02:39:17.023962 2026] [:error] [pid 51009:tid 51095] [client 4.228.101.41:40867] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "af4t1eB0GbUWhxgzX9WqwgAAAJM"]
[Sat May 09 02:39:17.905701 2026] [:error] [pid 61355:tid 61378] [client 4.228.101.41:11405] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "af4t1fkhJTi30CBXmMlgcgAAAZE"]
[Sat May 09 02:39:19.016306 2026] [:error] [pid 61355:tid 61362] [client 4.228.101.41:39252] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "af4t1_khJTi30CBXmMlgdwAAAYE"]
[Sat May 09 02:39:20.490092 2026] [:error] [pid 61355:tid 61363] [client 4.228.101.41:43862] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "af4t2PkhJTi30CBXmMlggAAAAYI"]
[Sat May 09 02:39:21.366253 2026] [:error] [pid 51008:tid 51060] [client 4.228.101.41:11450] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "af4t2XB58C2Y1tgLtuLsNQAAAEs"]
[Sat May 09 02:39:22.303169 2026] [:error] [pid 34318:tid 34330] [client 4.228.101.41:40857] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "af4t2sr3guirgJiKhzAOzwAAAQo"]
[Sat May 09 02:39:25.529046 2026] [:error] [pid 61356:tid 61409] [client 4.228.101.41:40862] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "af4t3Yx3vpB8oWhUq2NKgAAAAdU"]
[Sat May 09 02:39:26.798879 2026] [:error] [pid 51007:tid 51030] [client 4.228.101.41:39235] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "af4t3lMagSGstWKyzzUn0gAAAAg"]
[Sat May 09 02:39:28.752515 2026] [:error] [pid 61355:tid 61384] [client 4.228.101.41:40878] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "af4t4PkhJTi30CBXmMlgrAAAAZc"]
[Sat May 09 02:39:30.599195 2026] [:error] [pid 51008:tid 51064] [client 4.228.101.41:22280] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "af4t4nB58C2Y1tgLtuLsPgAAAE8"]
[Sat May 09 02:39:55.997811 2026] [:error] [pid 61356:tid 61410] [client 4.228.101.41:33888] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "af4t-4x3vpB8oWhUq2NK2wAAAdY"]
[Sat May 09 02:39:57.320909 2026] [:error] [pid 61317:tid 61324] [client 4.228.101.41:33880] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "af4t_c-fFk_CedOCOYsesgAAAUQ"]
[Sat May 09 02:39:59.042323 2026] [:error] [pid 51008:tid 51052] [client 4.228.101.41:52243] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "af4t_3B58C2Y1tgLtuLsWQAAAEM"]
[Sat May 09 02:39:59.865641 2026] [:error] [pid 34318:tid 34331] [client 4.228.101.41:52241] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "af4t_8r3guirgJiKhzAO9wAAAQs"]
[Sat May 09 02:40:01.172397 2026] [:error] [pid 51009:tid 51080] [client 4.228.101.41:43873] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af4uAeB0GbUWhxgzX9WrBwAAAIQ"]
[Sat May 09 02:40:02.125260 2026] [:error] [pid 51008:tid 51068] [client 4.228.101.41:34264] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af4uAnB58C2Y1tgLtuLsYgAAAFM"]
[Sat May 09 02:40:03.696586 2026] [:error] [pid 34318:tid 34323] [client 4.228.101.41:40810] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af4uA8r3guirgJiKhzAPAAAAAQM"]
[Sat May 09 02:40:04.631581 2026] [:error] [pid 51113:tid 51118] [client 4.228.101.41:35281] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af4uBEQfs7sWtqkpQIej4QAAAMM"]
[Sat May 09 02:40:05.439573 2026] [:error] [pid 51007:tid 51026] [client 4.228.101.41:44400] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "af4uBVMagSGstWKyzzUn_wAAAAQ"]
[Sat May 09 02:40:06.489945 2026] [:error] [pid 61317:tid 61344] [client 4.228.101.41:11766] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "af4uBs-fFk_CedOCOYsevwAAAVg"]
[Sat May 09 02:40:07.604222 2026] [:error] [pid 51009:tid 51098] [client 4.228.101.41:44413] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "af4uB-B0GbUWhxgzX9WrEQAAAJY"]
[Sat May 09 02:40:08.646808 2026] [:error] [pid 61317:tid 61337] [client 4.228.101.41:35304] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "af4uCM-fFk_CedOCOYsewwAAAVE"]
[Sat May 09 02:40:10.030436 2026] [:error] [pid 61317:tid 61325] [client 4.228.101.41:11851] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "af4uCs-fFk_CedOCOYseyAAAAUU"]
[Sat May 09 02:40:11.078831 2026] [:error] [pid 51007:tid 51046] [client 4.228.101.41:44385] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "af4uC1MagSGstWKyzzUoBQAAABg"]
[Sat May 09 02:40:12.499728 2026] [:error] [pid 61355:tid 61380] [client 4.228.101.41:52228] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "af4uDPkhJTi30CBXmMlhMAAAAZM"]
[Sat May 09 02:40:14.218047 2026] [:error] [pid 61356:tid 61400] [client 4.228.101.41:13946] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "af4uDox3vpB8oWhUq2NK8QAAAcw"]
[Sat May 09 02:40:15.109386 2026] [:error] [pid 51113:tid 51136] [client 4.228.101.41:11762] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af4uD0Qfs7sWtqkpQIej6wAAANU"]
[Sat May 09 02:40:16.207380 2026] [:error] [pid 51007:tid 51031] [client 4.228.101.41:34885] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af4uEFMagSGstWKyzzUoEAAAAAk"]
[Sat May 09 02:40:17.201562 2026] [:error] [pid 61355:tid 61382] [client 4.228.101.41:35325] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af4uEfkhJTi30CBXmMlhPAAAAZU"]
[Sat May 09 02:40:18.362776 2026] [:error] [pid 51113:tid 51131] [client 4.228.101.41:44407] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af4uEkQfs7sWtqkpQIej8AAAANA"]
[Sat May 09 02:40:19.341803 2026] [:error] [pid 51113:tid 51115] [client 4.228.101.41:13928] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "af4uE0Qfs7sWtqkpQIej9QAAAMA"]
[Sat May 09 02:40:20.536576 2026] [:error] [pid 51008:tid 51058] [client 4.228.101.41:40823] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "af4uFHB58C2Y1tgLtuLsggAAAEk"]
[Sat May 09 02:40:21.589756 2026] [:error] [pid 61355:tid 61365] [client 4.228.101.41:11877] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "af4uFfkhJTi30CBXmMlhSAAAAYQ"]
[Sat May 09 02:40:23.674014 2026] [:error] [pid 61355:tid 61384] [client 4.228.101.41:42991] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "af4uF_khJTi30CBXmMlhUQAAAZc"]
[Sat May 09 02:40:24.443601 2026] [:error] [pid 61356:tid 61409] [client 4.228.101.41:11903] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "af4uGIx3vpB8oWhUq2NK_gAAAdU"]
[Sat May 09 02:40:25.896772 2026] [:error] [pid 61356:tid 61404] [client 4.228.101.41:11447] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "af4uGYx3vpB8oWhUq2NLCQAAAdA"]
[Sat May 09 02:40:26.817504 2026] [:error] [pid 61355:tid 61365] [client 4.228.101.41:35303] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "af4uGvkhJTi30CBXmMlhaAAAAYQ"]
[Sat May 09 02:40:27.807788 2026] [:error] [pid 61317:tid 61320] [client 4.228.101.41:44371] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "af4uG8-fFk_CedOCOYse5gAAAUA"]
[Sat May 09 02:40:29.144057 2026] [:error] [pid 61356:tid 61407] [client 4.228.101.41:11902] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "af4uHYx3vpB8oWhUq2NLGgAAAdM"]
[Sat May 09 02:40:30.202310 2026] [:error] [pid 34318:tid 34339] [client 4.228.101.41:42949] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "af4uHsr3guirgJiKhzAPGwAAARM"]
[Sat May 09 02:40:32.225414 2026] [:error] [pid 61355:tid 61373] [client 4.228.101.41:34935] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "af4uIPkhJTi30CBXmMlhcQAAAYw"]
[Sat May 09 02:40:33.782895 2026] [:error] [pid 51009:tid 51081] [client 4.228.101.41:11911] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "af4uIeB0GbUWhxgzX9WrTgAAAIU"]
[Sat May 09 02:40:35.467650 2026] [:error] [pid 61356:tid 61406] [client 4.228.101.41:42951] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "af4uI4x3vpB8oWhUq2NLJQAAAdI"]
[Sat May 09 02:40:37.593653 2026] [:error] [pid 61356:tid 61406] [client 4.228.101.41:11909] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "af4uJYx3vpB8oWhUq2NLMwAAAdI"]
[Sat May 09 02:40:38.739338 2026] [:error] [pid 61355:tid 61377] [client 4.228.101.41:11930] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "af4uJvkhJTi30CBXmMlhiAAAAZA"]
[Sat May 09 02:40:39.833916 2026] [:error] [pid 61355:tid 61370] [client 4.228.101.41:11861] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "af4uJ_khJTi30CBXmMlhjgAAAYk"]
[Sat May 09 02:40:40.947809 2026] [:error] [pid 61355:tid 61383] [client 4.228.101.41:34925] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "af4uKPkhJTi30CBXmMlhkwAAAZY"]
[Sat May 09 02:40:42.149088 2026] [:error] [pid 51007:tid 51040] [client 4.228.101.41:13907] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "af4uKlMagSGstWKyzzUoVAAAABI"]
[Sat May 09 02:40:43.944763 2026] [:error] [pid 61355:tid 61384] [client 4.228.101.41:34894] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "af4uK_khJTi30CBXmMlhnQAAAZc"]
[Sat May 09 02:40:45.454277 2026] [:error] [pid 61356:tid 61403] [client 4.228.101.41:44476] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "af4uLYx3vpB8oWhUq2NLeQAAAc8"]
[Sat May 09 02:40:48.193507 2026] [:error] [pid 51008:tid 51071] [client 4.228.101.41:35320] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "af4uMHB58C2Y1tgLtuLskAAAAFY"]
[Sat May 09 02:40:49.327479 2026] [:error] [pid 51009:tid 51091] [client 4.228.101.41:43006] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "af4uMeB0GbUWhxgzX9WriQAAAI8"]
[Sat May 09 02:40:51.561284 2026] [:error] [pid 34318:tid 34334] [client 4.228.101.41:11941] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "af4uM8r3guirgJiKhzAPIQAAAQ4"]
[Sat May 09 02:40:53.541957 2026] [:error] [pid 61355:tid 61362] [client 4.228.101.41:18977] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "af4uNfkhJTi30CBXmMlhswAAAYE"]
[Sat May 09 02:48:50.506644 2026] [:error] [pid 61356:tid 61398] [client 4.228.101.41:22217] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "af4wEox3vpB8oWhUq2NRCwAAAco"]
[Sat May 09 02:48:51.663153 2026] [:error] [pid 51009:tid 51096] [client 4.228.101.41:35297] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "af4wE-B0GbUWhxgzX9WwSAAAAJQ"]
[Sat May 09 02:48:52.874048 2026] [:error] [pid 61317:tid 61325] [client 4.228.101.41:36896] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "af4wFM-fFk_CedOCOYshxwAAAUU"]
[Sat May 09 02:48:54.476689 2026] [:error] [pid 51009:tid 51080] [client 4.228.101.41:11891] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "af4wFuB0GbUWhxgzX9WwSwAAAIQ"]
[Sat May 09 02:48:56.782850 2026] [:error] [pid 61355:tid 61381] [client 4.228.101.41:39269] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "af4wGPkhJTi30CBXmMlntgAAAZQ"]
[Sat May 09 02:48:57.749336 2026] [:error] [pid 61355:tid 61376] [client 4.228.101.41:14023] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "af4wGfkhJTi30CBXmMlnuQAAAY8"]
[Sat May 09 02:48:58.809206 2026] [:error] [pid 61356:tid 61393] [client 4.228.101.41:11325] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "af4wGox3vpB8oWhUq2NRFwAAAcU"]
[Sat May 09 02:49:00.908147 2026] [:error] [pid 34318:tid 34337] [client 4.228.101.41:19009] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "af4wHMr3guirgJiKhzARUAAAARE"]
[Sat May 09 02:49:02.391865 2026] [:error] [pid 51007:tid 51022] [client 4.228.101.41:13859] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "af4wHlMagSGstWKyzzUq0gAAAAA"]
[Sat May 09 02:49:06.119029 2026] [:error] [pid 51009:tid 51082] [client 4.228.101.41:33850] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "af4wIuB0GbUWhxgzX9WwXwAAAIY"]
[Sat May 09 02:49:07.160177 2026] [:error] [pid 51009:tid 51078] [client 4.228.101.41:13682] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "af4wI-B0GbUWhxgzX9WwYQAAAII"]
[Sat May 09 02:49:08.872544 2026] [:error] [pid 61355:tid 61371] [client 4.228.101.41:33794] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "af4wJPkhJTi30CBXmMlnzQAAAYo"]
[Sat May 09 02:49:09.653702 2026] [:error] [pid 61356:tid 61398] [client 4.228.101.41:13657] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "af4wJYx3vpB8oWhUq2NRJQAAAco"]
[Sat May 09 02:49:10.461801 2026] [:error] [pid 61317:tid 61344] [client 4.228.101.41:13603] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "af4wJs-fFk_CedOCOYsh1QAAAVg"]
[Sat May 09 02:49:12.265610 2026] [:error] [pid 51008:tid 51070] [client 4.228.101.41:52303] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "af4wKHB58C2Y1tgLtuLvLAAAAFU"]
[Sat May 09 02:49:13.499127 2026] [:error] [pid 61355:tid 61379] [client 4.228.101.41:39161] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "af4wKfkhJTi30CBXmMln2QAAAZI"]
[Sat May 09 02:49:14.247867 2026] [:error] [pid 61317:tid 61322] [client 4.228.101.41:34465] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4wKs-fFk_CedOCOYsh3wAAAUI"]
[Sat May 09 02:49:15.373273 2026] [:error] [pid 51007:tid 51033] [client 4.228.101.41:34454] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4wK1MagSGstWKyzzUq3QAAAAs"]
[Sat May 09 02:49:16.437306 2026] [:error] [pid 61356:tid 61410] [client 4.228.101.41:43512] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4wLIx3vpB8oWhUq2NRLwAAAdY"]
[Sat May 09 02:49:18.096641 2026] [:error] [pid 51009:tid 51085] [client 4.228.101.41:11566] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "af4wLuB0GbUWhxgzX9WwcgAAAIk"]
[Sat May 09 02:49:19.800099 2026] [:error] [pid 61317:tid 61325] [client 4.228.101.41:11541] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "af4wL8-fFk_CedOCOYsh7gAAAUU"]
[Sat May 09 02:49:20.907677 2026] [:error] [pid 51009:tid 51093] [client 4.228.101.41:43041] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "af4wMOB0GbUWhxgzX9WweAAAAJE"]
[Sat May 09 02:49:21.998145 2026] [:error] [pid 61355:tid 61374] [client 4.228.101.41:11520] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "af4wMfkhJTi30CBXmMln5AAAAY0"]
[Sat May 09 02:49:23.052261 2026] [:error] [pid 61317:tid 61327] [client 4.228.101.41:43016] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "af4wM8-fFk_CedOCOYsh8gAAAUc"]
[Sat May 09 02:49:24.475316 2026] [:error] [pid 51009:tid 51090] [client 4.228.101.41:13660] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "af4wNOB0GbUWhxgzX9WwgQAAAI4"]
[Sat May 09 02:49:25.575749 2026] [:error] [pid 51009:tid 51086] [client 4.228.101.41:43484] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "af4wNeB0GbUWhxgzX9WwhwAAAIo"]
[Sat May 09 02:49:26.589426 2026] [:error] [pid 51008:tid 51070] [client 4.228.101.41:11583] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "af4wNnB58C2Y1tgLtuLvNgAAAFU"]
[Sat May 09 02:49:28.315746 2026] [:error] [pid 61356:tid 61397] [client 4.228.101.41:34449] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "af4wOIx3vpB8oWhUq2NRQAAAAck"]
[Sat May 09 02:49:29.097682 2026] [:error] [pid 61317:tid 61325] [client 4.228.101.41:13895] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "af4wOc-fFk_CedOCOYsh8wAAAUU"]
[Sat May 09 02:49:29.857018 2026] [:error] [pid 51008:tid 51067] [client 4.228.101.41:11544] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "af4wOXB58C2Y1tgLtuLvQAAAAFI"]
[Sat May 09 02:49:30.770837 2026] [:error] [pid 61356:tid 61405] [client 4.228.101.41:43498] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "af4wOox3vpB8oWhUq2NRRgAAAdE"]
[Sat May 09 02:49:32.033663 2026] [:error] [pid 51008:tid 51070] [client 4.228.101.41:11550] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "af4wPHB58C2Y1tgLtuLvRQAAAFU"]
[Sat May 09 02:49:32.962966 2026] [:error] [pid 51009:tid 51078] [client 4.228.101.41:43477] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "af4wPOB0GbUWhxgzX9WwjwAAAII"]
[Sat May 09 02:49:33.889677 2026] [:error] [pid 61356:tid 61401] [client 4.228.101.41:11975] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "af4wPYx3vpB8oWhUq2NRUAAAAc0"]
[Sat May 09 02:49:34.643000 2026] [:error] [pid 51009:tid 51092] [client 4.228.101.41:11995] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "af4wPuB0GbUWhxgzX9WwkQAAAJA"]
[Sat May 09 02:49:35.834853 2026] [:error] [pid 51008:tid 51049] [client 4.228.101.41:13682] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "af4wP3B58C2Y1tgLtuLvTQAAAEA"]
[Sat May 09 02:49:36.662882 2026] [:error] [pid 51008:tid 51051] [client 4.228.101.41:39134] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "af4wQHB58C2Y1tgLtuLvTgAAAEI"]
[Sat May 09 02:49:37.400541 2026] [:error] [pid 51113:tid 51134] [client 4.228.101.41:39130] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "af4wQUQfs7sWtqkpQIem-gAAANM"]
[Sat May 09 02:49:38.201531 2026] [:error] [pid 61317:tid 61330] [client 4.228.101.41:43045] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "af4wQs-fFk_CedOCOYsiAgAAAUo"]
[Sat May 09 02:49:39.186383 2026] [:error] [pid 51008:tid 51072] [client 4.228.101.41:52342] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "af4wQ3B58C2Y1tgLtuLvWAAAAFc"]
[Sat May 09 02:49:39.921736 2026] [:error] [pid 51009:tid 51082] [client 4.228.101.41:34472] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "af4wQ-B0GbUWhxgzX9WwlwAAAIY"]
[Sat May 09 02:49:40.636407 2026] [:error] [pid 61356:tid 61396] [client 4.228.101.41:43502] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "af4wRIx3vpB8oWhUq2NRXAAAAcg"]
[Sat May 09 02:49:41.344884 2026] [:error] [pid 61355:tid 61378] [client 4.228.101.41:43027] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "af4wRfkhJTi30CBXmMln7wAAAZE"]
[Sat May 09 02:49:42.168709 2026] [:error] [pid 51009:tid 51083] [client 4.228.101.41:43505] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "af4wRuB0GbUWhxgzX9WwpQAAAIc"]
[Sat May 09 02:49:42.950907 2026] [:error] [pid 51007:tid 51043] [client 4.228.101.41:34475] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "af4wRlMagSGstWKyzzUq-wAAABU"]
[Sat May 09 02:49:43.651422 2026] [:error] [pid 51007:tid 51028] [client 4.228.101.41:13663] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "af4wR1MagSGstWKyzzUq_AAAAAY"]
[Sat May 09 02:49:44.381805 2026] [:error] [pid 61355:tid 61376] [client 4.228.101.41:39110] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "af4wSPkhJTi30CBXmMln9gAAAY8"]
[Sat May 09 02:49:45.165075 2026] [:error] [pid 61355:tid 61372] [client 4.228.101.41:11528] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "af4wSfkhJTi30CBXmMln_AAAAYs"]
[Sat May 09 02:49:45.820228 2026] [:error] [pid 61356:tid 61408] [client 4.228.101.41:11576] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "af4wSYx3vpB8oWhUq2NRawAAAdQ"]
[Sat May 09 02:49:46.499642 2026] [:error] [pid 61355:tid 61362] [client 4.228.101.41:34473] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "af4wSvkhJTi30CBXmMloBwAAAYE"]
[Sat May 09 02:49:47.291646 2026] [:error] [pid 61355:tid 61370] [client 4.228.101.41:11532] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "af4wS_khJTi30CBXmMloDwAAAYk"]
[Sat May 09 02:49:48.141634 2026] [:error] [pid 61355:tid 61384] [client 4.228.101.41:39128] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "af4wTPkhJTi30CBXmMloFgAAAZc"]
[Sat May 09 02:49:48.868954 2026] [:error] [pid 61355:tid 61362] [client 4.228.101.41:13671] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "af4wTPkhJTi30CBXmMloHgAAAYE"]
[Sat May 09 02:50:10.558880 2026] [:error] [pid 61356:tid 61405] [client 4.228.101.41:12005] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "af4wYox3vpB8oWhUq2NRtwAAAdE"]
[Sat May 09 02:50:11.224934 2026] [:error] [pid 34318:tid 34341] [client 4.228.101.41:36840] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "af4wY8r3guirgJiKhzARkgAAARU"]
[Sat May 09 02:50:11.976824 2026] [:error] [pid 34318:tid 34334] [client 4.228.101.41:57964] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "af4wY8r3guirgJiKhzARlAAAAQ4"]
[Sat May 09 02:50:12.703962 2026] [:error] [pid 61356:tid 61395] [client 4.228.101.41:39384] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "af4wZIx3vpB8oWhUq2NRugAAAcc"]
[Sat May 09 02:50:13.547045 2026] [:error] [pid 61356:tid 61409] [client 4.228.101.41:57982] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "af4wZYx3vpB8oWhUq2NRwAAAAdU"]
[Sat May 09 02:50:14.334272 2026] [:error] [pid 51009:tid 51079] [client 4.228.101.41:36830] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "af4wZuB0GbUWhxgzX9WwxAAAAIM"]
[Sat May 09 02:50:15.029548 2026] [:error] [pid 51009:tid 51076] [client 4.228.101.41:36853] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "af4wZ-B0GbUWhxgzX9WwyAAAAIA"]
[Sat May 09 02:50:15.699837 2026] [:error] [pid 61355:tid 61368] [client 4.228.101.41:39414] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "af4wZ_khJTi30CBXmMlotQAAAYc"]
[Sat May 09 02:50:16.392931 2026] [:error] [pid 61355:tid 61374] [client 4.228.101.41:36845] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "af4waPkhJTi30CBXmMlotwAAAY0"]
[Sat May 09 02:50:17.131504 2026] [:error] [pid 51008:tid 51058] [client 4.228.101.41:51670] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "af4waXB58C2Y1tgLtuLveAAAAEk"]
[Sat May 09 02:50:17.895018 2026] [:error] [pid 61317:tid 61321] [client 4.228.101.41:36816] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "af4wac-fFk_CedOCOYsiHQAAAUE"]
[Sat May 09 02:50:18.643161 2026] [:error] [pid 61317:tid 61336] [client 4.228.101.41:12174] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/app.php"] [unique_id "af4was-fFk_CedOCOYsiHwAAAVA"]
[Sat May 09 02:50:19.584746 2026] [:error] [pid 34318:tid 34320] [client 4.228.101.41:41701] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "af4wa8r3guirgJiKhzARmwAAAQA"]
[Sat May 09 02:50:20.333705 2026] [:error] [pid 61355:tid 61366] [client 4.228.101.41:41693] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "af4wbPkhJTi30CBXmMloxAAAAYU"]
[Sat May 09 02:50:21.020086 2026] [:error] [pid 61356:tid 61394] [client 4.228.101.41:51668] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "af4wbYx3vpB8oWhUq2NR0QAAAcY"]
[Sat May 09 02:50:21.865294 2026] [:error] [pid 51007:tid 51044] [client 4.228.101.41:41721] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/txets.php"] [unique_id "af4wbVMagSGstWKyzzUrGgAAABY"]
[Sat May 09 02:50:22.623456 2026] [:error] [pid 61317:tid 61337] [client 4.228.101.41:41673] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "af4wbs-fFk_CedOCOYsiLAAAAVE"]
[Sat May 09 02:50:23.318874 2026] [:error] [pid 61356:tid 61408] [client 4.228.101.41:36850] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "af4wb4x3vpB8oWhUq2NR1gAAAdQ"]
[Sat May 09 02:50:23.991472 2026] [:error] [pid 51009:tid 51078] [client 4.228.101.41:57901] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "af4wb-B0GbUWhxgzX9Ww2wAAAII"]
[Sat May 09 02:50:24.764978 2026] [:error] [pid 34318:tid 34341] [client 4.228.101.41:12169] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "af4wcMr3guirgJiKhzARngAAARU"]
[Sat May 09 02:50:25.456620 2026] [:error] [pid 61356:tid 61388] [client 4.228.101.41:57979] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "af4wcYx3vpB8oWhUq2NR3QAAAcA"]
[Sat May 09 02:50:26.196745 2026] [:error] [pid 61317:tid 61340] [client 4.228.101.41:12183] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "af4wcs-fFk_CedOCOYsiNAAAAVQ"]
[Sat May 09 02:50:26.871465 2026] [:error] [pid 34318:tid 34337] [client 4.228.101.41:57954] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "af4wcsr3guirgJiKhzARowAAARE"]
[Sat May 09 02:50:27.638283 2026] [:error] [pid 61355:tid 61380] [client 4.228.101.41:36812] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "af4wc_khJTi30CBXmMloxwAAAZM"]
[Sat May 09 02:50:28.626775 2026] [:error] [pid 61356:tid 61399] [client 4.228.101.41:39362] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "af4wdIx3vpB8oWhUq2NR4wAAAcs"]
[Sat May 09 02:50:29.407506 2026] [:error] [pid 51113:tid 51126] [client 4.228.101.41:13979] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "af4wdUQfs7sWtqkpQIenFAAAAMs"]
[Sat May 09 02:50:30.222874 2026] [:error] [pid 51007:tid 51034] [client 4.228.101.41:14003] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "af4wdlMagSGstWKyzzUrHwAAAAw"]
[Sat May 09 02:50:31.193468 2026] [:error] [pid 61356:tid 61393] [client 4.228.101.41:39415] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "af4wd4x3vpB8oWhUq2NR5wAAAcU"]
[Sat May 09 02:50:32.034808 2026] [:error] [pid 61356:tid 61389] [client 4.228.101.41:36837] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "af4weIx3vpB8oWhUq2NR6gAAAcE"]
[Sat May 09 02:50:32.999497 2026] [:error] [pid 51113:tid 51137] [client 4.228.101.41:57896] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "af4weEQfs7sWtqkpQIenGAAAANY"]
[Sat May 09 02:50:33.748870 2026] [:error] [pid 51113:tid 51136] [client 4.228.101.41:12120] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "af4weUQfs7sWtqkpQIenGQAAANU"]
[Sat May 09 02:50:34.741966 2026] [:error] [pid 61356:tid 61392] [client 4.228.101.41:36805] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "af4weox3vpB8oWhUq2NR8wAAAcQ"]
[Sat May 09 02:50:35.627619 2026] [:error] [pid 61317:tid 61336] [client 4.228.101.41:14000] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "af4we8-fFk_CedOCOYsiOgAAAVA"]
[Sat May 09 02:50:36.351361 2026] [:error] [pid 34318:tid 34339] [client 4.228.101.41:43956] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "af4wfMr3guirgJiKhzARrgAAARM"]
[Sat May 09 02:50:37.223835 2026] [:error] [pid 51009:tid 51084] [client 4.228.101.41:13982] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "af4wfeB0GbUWhxgzX9Ww5gAAAIg"]
[Sat May 09 02:50:38.122544 2026] [:error] [pid 51007:tid 51040] [client 4.228.101.41:12126] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "af4wflMagSGstWKyzzUrJAAAABI"]
[Sat May 09 02:50:38.853443 2026] [:error] [pid 61355:tid 61372] [client 4.228.101.41:39398] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "af4wfvkhJTi30CBXmMloygAAAYs"]
[Sat May 09 02:50:39.541122 2026] [:error] [pid 61355:tid 61370] [client 4.228.101.41:39192] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "af4wf_khJTi30CBXmMlozQAAAYk"]
[Sat May 09 02:50:40.281266 2026] [:error] [pid 61355:tid 61385] [client 4.228.101.41:57900] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "af4wgPkhJTi30CBXmMlozwAAAZg"]
[Sat May 09 02:50:40.986000 2026] [:error] [pid 61355:tid 61365] [client 4.228.101.41:41727] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "af4wgPkhJTi30CBXmMlo0QAAAYQ"]
[Sat May 09 02:50:41.685448 2026] [:error] [pid 51009:tid 51083] [client 4.228.101.41:41743] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "af4wgeB0GbUWhxgzX9Ww6wAAAIc"]
[Sat May 09 02:50:42.354682 2026] [:error] [pid 61356:tid 61402] [client 4.228.101.41:57892] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "af4wgox3vpB8oWhUq2NSAQAAAc4"]
[Sat May 09 02:50:43.068666 2026] [:error] [pid 61317:tid 61330] [client 4.228.101.41:36814] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "af4wg8-fFk_CedOCOYsiRAAAAUo"]
[Sat May 09 02:50:43.762098 2026] [:error] [pid 51008:tid 51062] [client 4.228.101.41:41756] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "af4wg3B58C2Y1tgLtuLvhAAAAE0"]
[Sat May 09 02:50:44.598373 2026] [:error] [pid 51007:tid 51031] [client 4.228.101.41:11586] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "af4whFMagSGstWKyzzUrKwAAAAk"]
[Sat May 09 02:50:45.335116 2026] [:error] [pid 51009:tid 51078] [client 4.228.101.41:57906] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "af4wheB0GbUWhxgzX9Ww8wAAAII"]
[Sat May 09 02:50:46.018588 2026] [:error] [pid 51009:tid 51081] [client 4.228.101.41:13990] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "af4whuB0GbUWhxgzX9Ww-AAAAIU"]
[Sat May 09 02:50:46.815889 2026] [:error] [pid 51009:tid 51089] [client 4.228.101.41:12153] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "af4whuB0GbUWhxgzX9Ww_QAAAI0"]
[Sat May 09 02:50:47.612663 2026] [:error] [pid 51009:tid 51095] [client 4.228.101.41:12116] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "af4wh-B0GbUWhxgzX9Ww_wAAAJM"]
[Sat May 09 02:50:48.451250 2026] [:error] [pid 51007:tid 51045] [client 4.228.101.41:41760] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "af4wiFMagSGstWKyzzUrLwAAABc"]
[Sat May 09 02:50:49.270897 2026] [:error] [pid 34318:tid 34342] [client 4.228.101.41:41689] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "af4wicr3guirgJiKhzAR2gAAARY"]
[Sat May 09 02:50:50.065867 2026] [:error] [pid 51009:tid 51098] [client 4.228.101.41:41771] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "af4wiuB0GbUWhxgzX9WxAAAAAJY"]
[Sat May 09 02:50:50.822289 2026] [:error] [pid 34318:tid 34343] [client 4.228.101.41:41742] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "af4wisr3guirgJiKhzAR5wAAARc"]
[Sat May 09 02:50:51.919788 2026] [:error] [pid 34318:tid 34331] [client 4.228.101.41:14013] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "af4wi8r3guirgJiKhzAR8wAAAQs"]
[Sat May 09 02:50:52.635932 2026] [:error] [pid 51007:tid 51036] [client 4.228.101.41:13875] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "af4wjFMagSGstWKyzzUrQwAAAA4"]
[Sat May 09 02:50:53.390287 2026] [:error] [pid 61317:tid 61337] [client 4.228.101.41:18975] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "af4wjc-fFk_CedOCOYsiTgAAAVE"]
[Sat May 09 02:50:54.174095 2026] [:error] [pid 61317:tid 61339] [client 4.228.101.41:13955] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "af4wjs-fFk_CedOCOYsiUgAAAVM"]
[Sat May 09 02:50:55.293475 2026] [:error] [pid 51009:tid 51096] [client 4.228.101.41:18986] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "af4wj-B0GbUWhxgzX9WxCQAAAJQ"]
[Sat May 09 02:50:56.322154 2026] [:error] [pid 51009:tid 51097] [client 4.228.101.41:18976] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "af4wkOB0GbUWhxgzX9WxEQAAAJU"]
[Sat May 09 02:50:57.127907 2026] [:error] [pid 61317:tid 61324] [client 4.228.101.41:36488] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "af4wkc-fFk_CedOCOYsiVwAAAUQ"]
[Sat May 09 02:50:58.044318 2026] [:error] [pid 61317:tid 61320] [client 4.228.101.41:11811] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "af4wks-fFk_CedOCOYsiWwAAAUA"]
[Sat May 09 02:50:58.805543 2026] [:error] [pid 51007:tid 51026] [client 4.228.101.41:11780] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "af4wklMagSGstWKyzzUrTQAAAAQ"]
[Sat May 09 02:50:59.529163 2026] [:error] [pid 51008:tid 51051] [client 4.228.101.41:21747] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "af4wk3B58C2Y1tgLtuLvhwAAAEI"]
[Sat May 09 02:51:00.392984 2026] [:error] [pid 61317:tid 61325] [client 4.228.101.41:39072] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "af4wlM-fFk_CedOCOYsiXgAAAUU"]
[Sat May 09 02:51:01.105017 2026] [:error] [pid 61356:tid 61410] [client 4.228.101.41:34553] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "af4wlYx3vpB8oWhUq2NSAgAAAdY"]
[Sat May 09 02:51:01.797280 2026] [:error] [pid 34318:tid 34340] [client 4.228.101.41:34872] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "af4wlcr3guirgJiKhzASOgAAARQ"]
[Sat May 09 02:51:02.524877 2026] [:error] [pid 51007:tid 51023] [client 4.228.101.41:34874] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "af4wllMagSGstWKyzzUrVwAAAAE"]
[Sat May 09 02:51:03.199170 2026] [:error] [pid 61355:tid 61361] [client 4.228.101.41:34543] [client 4.228.101.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "af4wl_khJTi30CBXmMlo7QAAAYA"]
[Sat May 09 04:00:14.517554 2026] [:error] [pid 9186:tid 9238] [client 45.92.229.119:36057] [client 45.92.229.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.119, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af5AzhW4eFOEw1mKOgJe5QAAAEw"]
[Sat May 09 04:13:15.110299 2026] [:error] [pid 9186:tid 9235] [client 47.130.1.189:53746] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "af5D2xW4eFOEw1mKOgJiDwAAAEk"]
[Sat May 09 04:13:17.554696 2026] [:error] [pid 9184:tid 9198] [client 47.130.1.189:53760] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "af5D3YjfODqb_i0Fm99NAAAAAAE"]
[Sat May 09 04:13:17.992077 2026] [:error] [pid 9663:tid 9690] [client 47.130.1.189:53774] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "af5D3ZcWIu01SCxbjwutyQAAARg"]
[Sat May 09 04:13:18.426703 2026] [:error] [pid 9293:tid 9302] [client 47.130.1.189:53790] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "af5D3pR__qEzV5O6Z2OOYwAAAMU"]
[Sat May 09 04:13:18.861506 2026] [:error] [pid 9293:tid 9313] [client 47.130.1.189:53804] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.staging"] [unique_id "af5D3pR__qEzV5O6Z2OOZwAAANA"]
[Sat May 09 04:13:19.300082 2026] [:error] [pid 9293:tid 9312] [client 47.130.1.189:57942] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "af5D35R__qEzV5O6Z2OOagAAAM8"]
[Sat May 09 04:13:19.737970 2026] [:error] [pid 9184:tid 9203] [client 47.130.1.189:57956] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.test"] [unique_id "af5D34jfODqb_i0Fm99NAQAAAAY"]
[Sat May 09 04:13:20.170551 2026] [:error] [pid 9293:tid 9314] [client 47.130.1.189:57962] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.remote"] [unique_id "af5D4JR__qEzV5O6Z2OObgAAANE"]
[Sat May 09 04:13:20.606924 2026] [:error] [pid 9293:tid 9311] [client 47.130.1.189:57966] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "af5D4JR__qEzV5O6Z2OObwAAAM4"]
[Sat May 09 04:13:21.044686 2026] [:error] [pid 9920:tid 9932] [client 47.130.1.189:57976] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "af5D4UxitGYhlzgZb5Y77gAAAco"]
[Sat May 09 04:13:21.478900 2026] [:error] [pid 9187:tid 9276] [client 47.130.1.189:57984] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.save"] [unique_id "af5D4RC7An6gkXsRsaG-nwAAAJc"]
[Sat May 09 04:13:21.913969 2026] [:error] [pid 9184:tid 9220] [client 47.130.1.189:57998] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.old"] [unique_id "af5D4YjfODqb_i0Fm99NAwAAABc"]
[Sat May 09 04:13:22.350125 2026] [:error] [pid 9186:tid 9236] [client 47.130.1.189:58012] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.sample"] [unique_id "af5D4hW4eFOEw1mKOgJiLgAAAEo"]
[Sat May 09 04:13:22.789249 2026] [:error] [pid 9760:tid 9776] [client 47.130.1.189:58020] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.example"] [unique_id "af5D4mIkCp-C_fh0s7L2ZgAAAUo"]
[Sat May 09 04:13:23.221873 2026] [:error] [pid 9920:tid 9928] [client 47.130.1.189:58034] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dev"] [unique_id "af5D40xitGYhlzgZb5Y78wAAAcY"]
[Sat May 09 04:13:23.656347 2026] [:error] [pid 9920:tid 9946] [client 47.130.1.189:58046] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.prod"] [unique_id "af5D40xitGYhlzgZb5Y79AAAAdg"]
[Sat May 09 04:13:24.089360 2026] [:error] [pid 9293:tid 9307] [client 47.130.1.189:58048] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.stage"] [unique_id "af5D5JR__qEzV5O6Z2OOdQAAAMo"]
[Sat May 09 04:13:24.521509 2026] [:error] [pid 9293:tid 9313] [client 47.130.1.189:58058] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.ci"] [unique_id "af5D5JR__qEzV5O6Z2OOewAAANA"]
[Sat May 09 04:13:24.953413 2026] [:error] [pid 9187:tid 9273] [client 47.130.1.189:58072] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.docker"] [unique_id "af5D5BC7An6gkXsRsaG-ogAAAJQ"]
[Sat May 09 04:13:25.389796 2026] [:error] [pid 9663:tid 9668] [client 47.130.1.189:58074] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.live"] [unique_id "af5D5ZcWIu01SCxbjwutzQAAAQI"]
[Sat May 09 04:13:25.823244 2026] [:error] [pid 9187:tid 9275] [client 47.130.1.189:58080] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.preprod"] [unique_id "af5D5RC7An6gkXsRsaG-pAAAAJY"]
[Sat May 09 04:13:26.253772 2026] [:error] [pid 9663:tid 9687] [client 47.130.1.189:58090] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.uat"] [unique_id "af5D5pcWIu01SCxbjwut0AAAARU"]
[Sat May 09 04:13:26.687994 2026] [:error] [pid 9293:tid 9301] [client 47.130.1.189:58100] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.dist"] [unique_id "af5D5pR__qEzV5O6Z2OOfgAAAMQ"]
[Sat May 09 04:13:27.120004 2026] [:error] [pid 9293:tid 9318] [client 47.130.1.189:58114] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.swp"] [unique_id "af5D55R__qEzV5O6Z2OOhAAAANU"]
[Sat May 09 04:13:27.553374 2026] [:error] [pid 9187:tid 9253] [client 47.130.1.189:58120] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env~"] [unique_id "af5D5xC7An6gkXsRsaG-pgAAAIA"]
[Sat May 09 04:13:27.986134 2026] [:error] [pid 9293:tid 9316] [client 47.130.1.189:58136] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env1"] [unique_id "af5D55R__qEzV5O6Z2OOiQAAANM"]
[Sat May 09 04:13:28.419631 2026] [:error] [pid 9187:tid 9258] [client 47.130.1.189:58138] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env2"] [unique_id "af5D6BC7An6gkXsRsaG-qAAAAIU"]
[Sat May 09 04:13:28.854443 2026] [:error] [pid 9663:tid 9678] [client 47.130.1.189:58144] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env_copy"] [unique_id "af5D6JcWIu01SCxbjwut0gAAAQw"]
[Sat May 09 04:13:29.289187 2026] [:error] [pid 9187:tid 9273] [client 47.130.1.189:42788] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.txt"] [unique_id "af5D6RC7An6gkXsRsaG-rQAAAJQ"]
[Sat May 09 04:13:29.723725 2026] [:error] [pid 9293:tid 9313] [client 47.130.1.189:42800] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.json"] [unique_id "af5D6ZR__qEzV5O6Z2OOkAAAANA"]
[Sat May 09 04:13:30.164799 2026] [:error] [pid 9293:tid 9312] [client 47.130.1.189:42810] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.yaml"] [unique_id "af5D6pR__qEzV5O6Z2OOlwAAAM8"]
[Sat May 09 04:13:30.601888 2026] [:error] [pid 9293:tid 9317] [client 47.130.1.189:42822] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.yml"] [unique_id "af5D6pR__qEzV5O6Z2OOmwAAANQ"]
[Sat May 09 04:13:31.036055 2026] [:error] [pid 9293:tid 9312] [client 47.130.1.189:42834] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "af5D65R__qEzV5O6Z2OOnQAAAM8"]
[Sat May 09 04:13:31.468846 2026] [:error] [pid 9293:tid 9309] [client 47.130.1.189:42840] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/apps/.env"] [unique_id "af5D65R__qEzV5O6Z2OOogAAAMw"]
[Sat May 09 04:13:31.906313 2026] [:error] [pid 9663:tid 9666] [client 47.130.1.189:42852] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "af5D65cWIu01SCxbjwut0wAAAQA"]
[Sat May 09 04:13:32.344372 2026] [:error] [pid 9663:tid 9682] [client 47.130.1.189:42856] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/web/.env"] [unique_id "af5D7JcWIu01SCxbjwut1AAAARA"]
[Sat May 09 04:13:32.793971 2026] [:error] [pid 9920:tid 9939] [client 47.130.1.189:42858] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/site/.env"] [unique_id "af5D7ExitGYhlzgZb5Y7-AAAAdE"]
[Sat May 09 04:13:33.228304 2026] [:error] [pid 9293:tid 9305] [client 47.130.1.189:42872] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/public/.env"] [unique_id "af5D7ZR__qEzV5O6Z2OOpwAAAMg"]
[Sat May 09 04:13:33.674506 2026] [:error] [pid 9293:tid 9311] [client 47.130.1.189:42874] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/admin/.env"] [unique_id "af5D7ZR__qEzV5O6Z2OOqAAAAM4"]
[Sat May 09 04:13:34.113792 2026] [:error] [pid 9833:tid 9842] [client 47.130.1.189:42876] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "af5D7iM9JmxIS0KGZUAf5wAAAYQ"]
[Sat May 09 04:13:34.555939 2026] [:error] [pid 9187:tid 9260] [client 47.130.1.189:42890] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/server/.env"] [unique_id "af5D7hC7An6gkXsRsaG-sQAAAIc"]
[Sat May 09 04:13:34.990379 2026] [:error] [pid 9293:tid 9317] [client 47.130.1.189:42900] [client 47.130.1.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/frontend/.env"] [unique_id "af5D7pR__qEzV5O6Z2OOrQAAANQ"]
[Sat May 09 04:48:40.051173 2026] [:error] [pid 9187:tid 9269] [client 18.140.98.35:50458] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "af5MKBC7An6gkXsRsaHO5wAAAJA"]
[Sat May 09 04:48:42.163995 2026] [:error] [pid 9187:tid 9270] [client 18.140.98.35:50472] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "af5MKhC7An6gkXsRsaHO9AAAAJE"]
[Sat May 09 04:48:42.599916 2026] [:error] [pid 9187:tid 9275] [client 18.140.98.35:50486] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.local"] [unique_id "af5MKhC7An6gkXsRsaHO9gAAAJY"]
[Sat May 09 04:48:43.030745 2026] [:error] [pid 9187:tid 9268] [client 18.140.98.35:50496] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.production"] [unique_id "af5MKxC7An6gkXsRsaHO-wAAAI8"]
[Sat May 09 04:48:43.462031 2026] [:error] [pid 9187:tid 9271] [client 18.140.98.35:50504] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.staging"] [unique_id "af5MKxC7An6gkXsRsaHO_wAAAJI"]
[Sat May 09 04:48:43.892300 2026] [:error] [pid 9293:tid 9318] [client 18.140.98.35:50508] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.development"] [unique_id "af5MK5R__qEzV5O6Z2OqvAAAANU"]
[Sat May 09 04:48:44.327009 2026] [:error] [pid 9293:tid 9310] [client 18.140.98.35:59140] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.test"] [unique_id "af5MLJR__qEzV5O6Z2OqwAAAAM0"]
[Sat May 09 04:48:44.763178 2026] [:error] [pid 9293:tid 9303] [client 18.140.98.35:59152] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.remote"] [unique_id "af5MLJR__qEzV5O6Z2OqxAAAAMY"]
[Sat May 09 04:48:45.196008 2026] [:error] [pid 9920:tid 9939] [client 18.140.98.35:59168] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.bak"] [unique_id "af5MLUxitGYhlzgZb5ZKJgAAAdE"]
[Sat May 09 04:48:45.627906 2026] [:error] [pid 9293:tid 9311] [client 18.140.98.35:59180] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.backup"] [unique_id "af5MLZR__qEzV5O6Z2OqywAAAM4"]
[Sat May 09 04:48:46.059828 2026] [:error] [pid 9760:tid 9766] [client 18.140.98.35:59188] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.save"] [unique_id "af5MLmIkCp-C_fh0s7L93AAAAUA"]
[Sat May 09 04:48:46.489878 2026] [:error] [pid 9186:tid 9228] [client 18.140.98.35:59190] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.old"] [unique_id "af5MLhW4eFOEw1mKOgJsfQAAAEI"]
[Sat May 09 04:48:46.924141 2026] [:error] [pid 9293:tid 9299] [client 18.140.98.35:59196] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.sample"] [unique_id "af5MLpR__qEzV5O6Z2Oq2AAAAMI"]
[Sat May 09 04:48:47.360176 2026] [:error] [pid 9293:tid 9307] [client 18.140.98.35:59206] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.example"] [unique_id "af5ML5R__qEzV5O6Z2Oq4AAAAMo"]
[Sat May 09 04:48:47.800444 2026] [:error] [pid 9663:tid 9682] [client 18.140.98.35:59214] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.dev"] [unique_id "af5ML5cWIu01SCxbjwu6GwAAARA"]
[Sat May 09 04:48:48.231137 2026] [:error] [pid 9186:tid 9248] [client 18.140.98.35:59220] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.prod"] [unique_id "af5MMBW4eFOEw1mKOgJsfgAAAFY"]
[Sat May 09 04:48:48.664971 2026] [:error] [pid 9186:tid 9227] [client 18.140.98.35:59230] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.stage"] [unique_id "af5MMBW4eFOEw1mKOgJsgQAAAEE"]
[Sat May 09 04:48:49.097853 2026] [:error] [pid 9833:tid 9857] [client 18.140.98.35:59244] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.ci"] [unique_id "af5MMSM9JmxIS0KGZUAp-wAAAZM"]
[Sat May 09 04:48:49.528586 2026] [:error] [pid 9760:tid 9785] [client 18.140.98.35:59260] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.docker"] [unique_id "af5MMWIkCp-C_fh0s7L93wAAAVM"]
[Sat May 09 04:48:49.962022 2026] [:error] [pid 9663:tid 9684] [client 18.140.98.35:59262] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.live"] [unique_id "af5MMZcWIu01SCxbjwu6IAAAARI"]
[Sat May 09 04:48:50.393484 2026] [:error] [pid 9760:tid 9767] [client 18.140.98.35:59272] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.preprod"] [unique_id "af5MMmIkCp-C_fh0s7L94AAAAUE"]
[Sat May 09 04:48:50.827520 2026] [:error] [pid 9833:tid 9859] [client 18.140.98.35:59286] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.uat"] [unique_id "af5MMiM9JmxIS0KGZUAp_QAAAZU"]
[Sat May 09 04:48:51.264114 2026] [:error] [pid 9186:tid 9244] [client 18.140.98.35:59296] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.dist"] [unique_id "af5MMxW4eFOEw1mKOgJsiAAAAFI"]
[Sat May 09 04:48:51.705873 2026] [:error] [pid 9833:tid 9845] [client 18.140.98.35:59310] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.swp"] [unique_id "af5MMyM9JmxIS0KGZUAqAAAAAYc"]
[Sat May 09 04:48:52.143322 2026] [:error] [pid 9184:tid 9206] [client 18.140.98.35:59316] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env~"] [unique_id "af5MNIjfODqb_i0Fm99ToAAAAAk"]
[Sat May 09 04:48:52.577810 2026] [:error] [pid 9663:tid 9670] [client 18.140.98.35:59332] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env1"] [unique_id "af5MNJcWIu01SCxbjwu6IQAAAQQ"]
[Sat May 09 04:48:53.010372 2026] [:error] [pid 9184:tid 9215] [client 18.140.98.35:59344] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env2"] [unique_id "af5MNYjfODqb_i0Fm99ToQAAABI"]
[Sat May 09 04:48:53.442938 2026] [:error] [pid 9920:tid 9928] [client 18.140.98.35:59358] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env_copy"] [unique_id "af5MNUxitGYhlzgZb5ZKMwAAAcY"]
[Sat May 09 04:48:53.874859 2026] [:error] [pid 9920:tid 9939] [client 18.140.98.35:59372] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.txt"] [unique_id "af5MNUxitGYhlzgZb5ZKNQAAAdE"]
[Sat May 09 04:48:54.307022 2026] [:error] [pid 9920:tid 9946] [client 18.140.98.35:55050] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.json"] [unique_id "af5MNkxitGYhlzgZb5ZKNwAAAdg"]
[Sat May 09 04:48:54.737140 2026] [:error] [pid 9293:tid 9298] [client 18.140.98.35:55054] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.yaml"] [unique_id "af5MNpR__qEzV5O6Z2OrFgAAAME"]
[Sat May 09 04:48:55.169868 2026] [:error] [pid 9293:tid 9311] [client 18.140.98.35:55064] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.yml"] [unique_id "af5MN5R__qEzV5O6Z2OrHAAAAM4"]
[Sat May 09 04:48:55.602136 2026] [:error] [pid 9760:tid 9776] [client 18.140.98.35:55070] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/app/.env"] [unique_id "af5MN2IkCp-C_fh0s7L99wAAAUo"]
[Sat May 09 04:48:56.032146 2026] [:error] [pid 9184:tid 9200] [client 18.140.98.35:55080] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/apps/.env"] [unique_id "af5MOIjfODqb_i0Fm99TogAAAAM"]
[Sat May 09 04:48:56.464982 2026] [:error] [pid 9186:tid 9240] [client 18.140.98.35:55088] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/api/.env"] [unique_id "af5MOBW4eFOEw1mKOgJskgAAAE4"]
[Sat May 09 04:48:56.896316 2026] [:error] [pid 9184:tid 9217] [client 18.140.98.35:55100] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/web/.env"] [unique_id "af5MOIjfODqb_i0Fm99TpwAAABQ"]
[Sat May 09 04:48:57.328348 2026] [:error] [pid 9833:tid 9853] [client 18.140.98.35:55106] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/site/.env"] [unique_id "af5MOSM9JmxIS0KGZUAqBgAAAY8"]
[Sat May 09 04:48:57.762351 2026] [:error] [pid 9833:tid 9847] [client 18.140.98.35:55112] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/public/.env"] [unique_id "af5MOSM9JmxIS0KGZUAqBwAAAYk"]
[Sat May 09 04:48:58.198598 2026] [:error] [pid 9663:tid 9675] [client 18.140.98.35:55120] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/admin/.env"] [unique_id "af5MOpcWIu01SCxbjwu6JwAAAQk"]
[Sat May 09 04:48:58.640038 2026] [:error] [pid 9184:tid 9220] [client 18.140.98.35:55132] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/backend/.env"] [unique_id "af5MOojfODqb_i0Fm99TrwAAABc"]
[Sat May 09 04:48:59.074500 2026] [:error] [pid 9833:tid 9855] [client 18.140.98.35:55134] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/server/.env"] [unique_id "af5MOyM9JmxIS0KGZUAqCAAAAZE"]
[Sat May 09 04:48:59.511484 2026] [:error] [pid 9760:tid 9769] [client 18.140.98.35:55150] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/frontend/.env"] [unique_id "af5MO2IkCp-C_fh0s7L-FAAAAUM"]
[Sat May 09 04:48:59.942367 2026] [:error] [pid 9187:tid 9276] [client 18.140.98.35:55166] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/src/.env"] [unique_id "af5MOxC7An6gkXsRsaHPFAAAAJc"]
[Sat May 09 04:49:00.377010 2026] [:error] [pid 9920:tid 9926] [client 18.140.98.35:55176] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/core/.env"] [unique_id "af5MPExitGYhlzgZb5ZKOgAAAcQ"]
[Sat May 09 04:49:00.809250 2026] [:error] [pid 9760:tid 9776] [client 18.140.98.35:55184] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/core/app/.env"] [unique_id "af5MPGIkCp-C_fh0s7L-HQAAAUo"]
[Sat May 09 04:49:01.241464 2026] [:error] [pid 9187:tid 9261] [client 18.140.98.35:55200] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/config/.env"] [unique_id "af5MPRC7An6gkXsRsaHPGAAAAIg"]
[Sat May 09 04:49:01.675143 2026] [:error] [pid 9186:tid 9246] [client 18.140.98.35:55204] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/private/.env"] [unique_id "af5MPRW4eFOEw1mKOgJslgAAAFQ"]
[Sat May 09 04:49:02.107191 2026] [:error] [pid 9187:tid 9277] [client 18.140.98.35:55214] [client 18.140.98.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/application/.env"] [unique_id "af5MPhC7An6gkXsRsaHPGgAAAJg"]
[Sat May 09 05:12:55.552277 2026] [:error] [pid 9920:tid 9929] [client 20.166.9.204:8922] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "af5R10xitGYhlzgZb5ZRygAAAcc"]
[Sat May 09 05:12:56.068484 2026] [:error] [pid 9187:tid 9263] [client 20.166.9.204:8909] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "af5R2BC7An6gkXsRsaHZ0QAAAIo"]
[Sat May 09 05:12:56.574595 2026] [:error] [pid 9187:tid 9270] [client 20.166.9.204:17723] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "af5R2BC7An6gkXsRsaHZ0gAAAJE"]
[Sat May 09 05:12:57.079131 2026] [:error] [pid 9293:tid 9299] [client 20.166.9.204:16656] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "af5R2ZR__qEzV5O6Z2O2AgAAAMI"]
[Sat May 09 05:12:57.578477 2026] [:error] [pid 9186:tid 9236] [client 20.166.9.204:7953] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5R2RW4eFOEw1mKOgJxawAAAEo"]
[Sat May 09 05:12:58.093891 2026] [:error] [pid 9293:tid 9306] [client 20.166.9.204:7946] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5R2pR__qEzV5O6Z2O2AwAAAMk"]
[Sat May 09 05:12:58.609959 2026] [:error] [pid 9293:tid 9313] [client 20.166.9.204:18157] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5R2pR__qEzV5O6Z2O2BAAAANA"]
[Sat May 09 05:12:59.143748 2026] [:error] [pid 9293:tid 9318] [client 20.166.9.204:6585] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5R25R__qEzV5O6Z2O2BQAAANU"]
[Sat May 09 05:12:59.646628 2026] [:error] [pid 9760:tid 9787] [client 20.166.9.204:4931] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "af5R22IkCp-C_fh0s7ICIAAAAVU"]
[Sat May 09 05:13:00.163336 2026] [:error] [pid 9293:tid 9307] [client 20.166.9.204:15991] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "af5R3JR__qEzV5O6Z2O2CQAAAMo"]
[Sat May 09 05:13:00.697455 2026] [:error] [pid 9833:tid 9854] [client 20.166.9.204:17680] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "af5R3CM9JmxIS0KGZUAttgAAAZA"]
[Sat May 09 05:13:01.216942 2026] [:error] [pid 9187:tid 9264] [client 20.166.9.204:4986] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws88.php"] [unique_id "af5R3RC7An6gkXsRsaHZ2AAAAIs"]
[Sat May 09 05:13:01.721417 2026] [:error] [pid 9184:tid 9206] [client 20.166.9.204:5810] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/r.php"] [unique_id "af5R3YjfODqb_i0Fm99WVQAAAAk"]
[Sat May 09 05:13:02.239339 2026] [:error] [pid 9760:tid 9768] [client 20.166.9.204:12529] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/r.php"] [unique_id "af5R3mIkCp-C_fh0s7ICIgAAAUI"]
[Sat May 09 05:13:02.788793 2026] [:error] [pid 9920:tid 9928] [client 20.166.9.204:2780] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/r.php"] [unique_id "af5R3kxitGYhlzgZb5ZRywAAAcY"]
[Sat May 09 05:13:03.316529 2026] [:error] [pid 9184:tid 9208] [client 20.166.9.204:7978] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/r.php"] [unique_id "af5R34jfODqb_i0Fm99WWAAAAAs"]
[Sat May 09 05:13:03.815853 2026] [:error] [pid 9186:tid 9250] [client 20.166.9.204:12540] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "af5R3xW4eFOEw1mKOgJxcAAAAFg"]
[Sat May 09 05:13:04.315141 2026] [:error] [pid 9920:tid 9932] [client 20.166.9.204:17682] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "af5R4ExitGYhlzgZb5ZRzgAAAco"]
[Sat May 09 05:13:04.813688 2026] [:error] [pid 9186:tid 9239] [client 20.166.9.204:12052] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "af5R4BW4eFOEw1mKOgJxdAAAAE0"]
[Sat May 09 05:13:05.320710 2026] [:error] [pid 9184:tid 9218] [client 20.166.9.204:16880] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "af5R4YjfODqb_i0Fm99WXAAAABU"]
[Sat May 09 05:13:05.835224 2026] [:error] [pid 9663:tid 9690] [client 20.166.9.204:12068] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymi.php"] [unique_id "af5R4ZcWIu01SCxbjwvBSAAAARg"]
[Sat May 09 05:13:06.340366 2026] [:error] [pid 9663:tid 9685] [client 20.166.9.204:9225] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymi.php"] [unique_id "af5R4pcWIu01SCxbjwvBSwAAARM"]
[Sat May 09 05:13:06.885840 2026] [:error] [pid 9187:tid 9258] [client 20.166.9.204:16679] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymi.php"] [unique_id "af5R4hC7An6gkXsRsaHZ2wAAAIU"]
[Sat May 09 05:13:07.401692 2026] [:error] [pid 9187:tid 9255] [client 20.166.9.204:15082] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tymi.php"] [unique_id "af5R4xC7An6gkXsRsaHZ3AAAAII"]
[Sat May 09 05:13:07.900764 2026] [:error] [pid 9833:tid 9861] [client 20.166.9.204:7947] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lolz.php"] [unique_id "af5R4yM9JmxIS0KGZUAtugAAAZc"]
[Sat May 09 05:13:08.449167 2026] [:error] [pid 9187:tid 9253] [client 20.166.9.204:1159] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lolz.php"] [unique_id "af5R5BC7An6gkXsRsaHZ3wAAAIA"]
[Sat May 09 05:13:08.999007 2026] [:error] [pid 9293:tid 9303] [client 20.166.9.204:1644] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lolz.php"] [unique_id "af5R5JR__qEzV5O6Z2O2EQAAAMY"]
[Sat May 09 05:13:09.500850 2026] [:error] [pid 9187:tid 9264] [client 20.166.9.204:15308] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lolz.php"] [unique_id "af5R5RC7An6gkXsRsaHZ4gAAAIs"]
[Sat May 09 05:13:10.025810 2026] [:error] [pid 9920:tid 9925] [client 20.166.9.204:5788] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "af5R5kxitGYhlzgZb5ZR0gAAAcM"]
[Sat May 09 05:13:10.542566 2026] [:error] [pid 9920:tid 9922] [client 20.166.9.204:1172] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "af5R5kxitGYhlzgZb5ZR1AAAAcA"]
[Sat May 09 05:13:11.057225 2026] [:error] [pid 9187:tid 9260] [client 20.166.9.204:17666] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "af5R5xC7An6gkXsRsaHZ5AAAAIc"]
[Sat May 09 05:13:11.590809 2026] [:error] [pid 9663:tid 9669] [client 20.166.9.204:15073] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/asd67.php"] [unique_id "af5R55cWIu01SCxbjwvBTQAAAQM"]
[Sat May 09 05:13:12.124293 2026] [:error] [pid 9663:tid 9688] [client 20.166.9.204:12041] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i6z19N.php"] [unique_id "af5R6JcWIu01SCxbjwvBUAAAARY"]
[Sat May 09 05:13:12.658525 2026] [:error] [pid 9920:tid 9946] [client 20.166.9.204:1943] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i6z19N.php"] [unique_id "af5R6ExitGYhlzgZb5ZR2AAAAdg"]
[Sat May 09 05:13:13.190052 2026] [:error] [pid 9920:tid 9928] [client 20.166.9.204:4806] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i6z19N.php"] [unique_id "af5R6UxitGYhlzgZb5ZR2gAAAcY"]
[Sat May 09 05:13:13.729222 2026] [:error] [pid 9920:tid 9937] [client 20.166.9.204:15869] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/i6z19N.php"] [unique_id "af5R6UxitGYhlzgZb5ZR3AAAAc8"]
[Sat May 09 05:13:14.276121 2026] [:error] [pid 9293:tid 9297] [client 20.166.9.204:4861] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clque.php"] [unique_id "af5R6pR__qEzV5O6Z2O2HgAAAMA"]
[Sat May 09 05:13:14.776789 2026] [:error] [pid 9760:tid 9777] [client 20.166.9.204:1953] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clque.php"] [unique_id "af5R6mIkCp-C_fh0s7ICKAAAAUs"]
[Sat May 09 05:13:15.324997 2026] [:error] [pid 9920:tid 9942] [client 20.166.9.204:2151] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clque.php"] [unique_id "af5R60xitGYhlzgZb5ZR5QAAAdQ"]
[Sat May 09 05:13:15.890331 2026] [:error] [pid 9920:tid 9940] [client 20.166.9.204:3910] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clque.php"] [unique_id "af5R60xitGYhlzgZb5ZR5gAAAdI"]
[Sat May 09 05:13:16.405005 2026] [:error] [pid 9293:tid 9318] [client 20.166.9.204:18476] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ver.php"] [unique_id "af5R7JR__qEzV5O6Z2O2JQAAANU"]
[Sat May 09 05:13:16.939300 2026] [:error] [pid 9186:tid 9241] [client 20.166.9.204:16581] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ver.php"] [unique_id "af5R7BW4eFOEw1mKOgJxdwAAAE8"]
[Sat May 09 05:13:17.456302 2026] [:error] [pid 9293:tid 9297] [client 20.166.9.204:15958] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ver.php"] [unique_id "af5R7ZR__qEzV5O6Z2O2KgAAAMA"]
[Sat May 09 05:13:17.973062 2026] [:error] [pid 9760:tid 9772] [client 20.166.9.204:3959] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-ver.php"] [unique_id "af5R7WIkCp-C_fh0s7ICLgAAAUY"]
[Sat May 09 05:13:18.524080 2026] [:error] [pid 9184:tid 9215] [client 20.166.9.204:1185] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "af5R7ojfODqb_i0Fm99WXwAAABI"]
[Sat May 09 05:13:19.057872 2026] [:error] [pid 9186:tid 9231] [client 20.166.9.204:18472] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "af5R7xW4eFOEw1mKOgJxjwAAAEU"]
[Sat May 09 05:13:19.628699 2026] [:error] [pid 9293:tid 9304] [client 20.166.9.204:11445] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "af5R75R__qEzV5O6Z2O2LwAAAMc"]
[Sat May 09 05:13:20.161542 2026] [:error] [pid 9293:tid 9299] [client 20.166.9.204:18414] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wert.php"] [unique_id "af5R8JR__qEzV5O6Z2O2MwAAAMI"]
[Sat May 09 05:13:20.723932 2026] [:error] [pid 9293:tid 9298] [client 20.166.9.204:18400] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "af5R8JR__qEzV5O6Z2O2OAAAAME"]
[Sat May 09 05:13:21.280232 2026] [:error] [pid 9293:tid 9300] [client 20.166.9.204:15840] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "af5R8ZR__qEzV5O6Z2O2OwAAAMM"]
[Sat May 09 05:13:21.800928 2026] [:error] [pid 9293:tid 9299] [client 20.166.9.204:16620] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "af5R8ZR__qEzV5O6Z2O2PwAAAMI"]
[Sat May 09 05:13:22.366013 2026] [:error] [pid 9293:tid 9301] [client 20.166.9.204:8691] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-blog.php"] [unique_id "af5R8pR__qEzV5O6Z2O2QwAAAMQ"]
[Sat May 09 05:13:22.923139 2026] [:error] [pid 9760:tid 9774] [client 20.166.9.204:2135] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "af5R8mIkCp-C_fh0s7ICOwAAAUg"]
[Sat May 09 05:13:23.535962 2026] [:error] [pid 9663:tid 9677] [client 20.166.9.204:16607] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "af5R85cWIu01SCxbjwvBVAAAAQs"]
[Sat May 09 05:13:24.078724 2026] [:error] [pid 9833:tid 9857] [client 20.166.9.204:9241] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "af5R9CM9JmxIS0KGZUAtwQAAAZM"]
[Sat May 09 05:13:24.611896 2026] [:error] [pid 9920:tid 9939] [client 20.166.9.204:17424] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ng.php"] [unique_id "af5R9ExitGYhlzgZb5ZSEgAAAdE"]
[Sat May 09 05:13:25.171554 2026] [:error] [pid 9187:tid 9263] [client 20.166.9.204:16585] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xslclbn.php"] [unique_id "af5R9RC7An6gkXsRsaHZ-wAAAIo"]
[Sat May 09 05:13:25.674275 2026] [:error] [pid 9187:tid 9253] [client 20.166.9.204:8640] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xslclbn.php"] [unique_id "af5R9RC7An6gkXsRsaHZ_QAAAIA"]
[Sat May 09 05:13:26.201161 2026] [:error] [pid 9187:tid 9275] [client 20.166.9.204:18453] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xslclbn.php"] [unique_id "af5R9hC7An6gkXsRsaHZ_wAAAJY"]
[Sat May 09 05:13:26.719066 2026] [:error] [pid 9760:tid 9768] [client 20.166.9.204:16608] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xslclbn.php"] [unique_id "af5R9mIkCp-C_fh0s7ICQAAAAUI"]
[Sat May 09 05:13:27.269152 2026] [:error] [pid 9293:tid 9305] [client 20.166.9.204:9685] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "af5R95R__qEzV5O6Z2O2TgAAAMg"]
[Sat May 09 05:13:27.833653 2026] [:error] [pid 9663:tid 9671] [client 20.166.9.204:7082] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "af5R95cWIu01SCxbjwvBWAAAAQU"]
[Sat May 09 05:13:28.343651 2026] [:error] [pid 9760:tid 9789] [client 20.166.9.204:4818] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "af5R-GIkCp-C_fh0s7ICRgAAAVc"]
[Sat May 09 05:13:28.897161 2026] [:error] [pid 9760:tid 9778] [client 20.166.9.204:18345] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/less.php"] [unique_id "af5R-GIkCp-C_fh0s7ICRwAAAUw"]
[Sat May 09 05:13:29.417616 2026] [:error] [pid 9663:tid 9680] [client 20.166.9.204:18365] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "af5R-ZcWIu01SCxbjwvBWwAAAQ4"]
[Sat May 09 05:13:29.942005 2026] [:error] [pid 9833:tid 9862] [client 20.166.9.204:4911] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "af5R-SM9JmxIS0KGZUAtxgAAAZg"]
[Sat May 09 05:13:30.497899 2026] [:error] [pid 9920:tid 9944] [client 20.166.9.204:9541] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "af5R-kxitGYhlzgZb5ZSFgAAAdY"]
[Sat May 09 05:13:31.036501 2026] [:error] [pid 9663:tid 9687] [client 20.166.9.204:10131] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/albrt.php"] [unique_id "af5R-5cWIu01SCxbjwvBXAAAARU"]
[Sat May 09 05:13:31.551993 2026] [:error] [pid 9187:tid 9269] [client 20.166.9.204:16616] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "af5R-xC7An6gkXsRsaHaAAAAAJA"]
[Sat May 09 05:13:32.112184 2026] [:error] [pid 9760:tid 9779] [client 20.166.9.204:14895] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "af5R_GIkCp-C_fh0s7ICUwAAAU0"]
[Sat May 09 05:13:32.650277 2026] [:error] [pid 9663:tid 9678] [client 20.166.9.204:1678] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "af5R_JcWIu01SCxbjwvBXwAAAQw"]
[Sat May 09 05:13:33.174997 2026] [:error] [pid 9920:tid 9937] [client 20.166.9.204:6188] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tiny2.php"] [unique_id "af5R_UxitGYhlzgZb5ZSHQAAAc8"]
[Sat May 09 05:13:33.759354 2026] [:error] [pid 9760:tid 9790] [client 20.166.9.204:12661] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an8.php"] [unique_id "af5R_WIkCp-C_fh0s7ICVQAAAVg"]
[Sat May 09 05:13:34.263969 2026] [:error] [pid 9293:tid 9300] [client 20.166.9.204:13948] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an8.php"] [unique_id "af5R_pR__qEzV5O6Z2O2UQAAAMM"]
[Sat May 09 05:13:34.765503 2026] [:error] [pid 9293:tid 9313] [client 20.166.9.204:7081] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an8.php"] [unique_id "af5R_pR__qEzV5O6Z2O2VAAAANA"]
[Sat May 09 05:13:35.295352 2026] [:error] [pid 9293:tid 9303] [client 20.166.9.204:6880] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/an8.php"] [unique_id "af5R_5R__qEzV5O6Z2O2VQAAAMY"]
[Sat May 09 05:13:35.814776 2026] [:error] [pid 9293:tid 9301] [client 20.166.9.204:14905] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "af5R_5R__qEzV5O6Z2O2WgAAAMQ"]
[Sat May 09 05:13:36.351345 2026] [:error] [pid 9293:tid 9307] [client 20.166.9.204:4910] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "af5SAJR__qEzV5O6Z2O2XAAAAMo"]
[Sat May 09 05:13:36.918199 2026] [:error] [pid 9187:tid 9271] [client 20.166.9.204:17455] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "af5SABC7An6gkXsRsaHaAwAAAJI"]
[Sat May 09 05:13:37.434099 2026] [:error] [pid 9293:tid 9309] [client 20.166.9.204:15077] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ww.php"] [unique_id "af5SAZR__qEzV5O6Z2O2YAAAAMw"]
[Sat May 09 05:13:37.978501 2026] [:error] [pid 9293:tid 9313] [client 20.166.9.204:9496] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq.php"] [unique_id "af5SAZR__qEzV5O6Z2O2YwAAANA"]
[Sat May 09 05:13:38.524227 2026] [:error] [pid 9187:tid 9259] [client 20.166.9.204:9598] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq.php"] [unique_id "af5SAhC7An6gkXsRsaHaBwAAAIY"]
[Sat May 09 05:13:39.049113 2026] [:error] [pid 9293:tid 9298] [client 20.166.9.204:13933] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq.php"] [unique_id "af5SA5R__qEzV5O6Z2O2ZwAAAME"]
[Sat May 09 05:13:39.600610 2026] [:error] [pid 9833:tid 9862] [client 20.166.9.204:6898] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zwq.php"] [unique_id "af5SAyM9JmxIS0KGZUAtzQAAAZg"]
[Sat May 09 05:13:40.138395 2026] [:error] [pid 9663:tid 9689] [client 20.166.9.204:17272] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "af5SBJcWIu01SCxbjwvBZwAAARc"]
[Sat May 09 05:13:40.676067 2026] [:error] [pid 9663:tid 9690] [client 20.166.9.204:18530] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "af5SBJcWIu01SCxbjwvBaQAAARg"]
[Sat May 09 05:13:41.175699 2026] [:error] [pid 9663:tid 9681] [client 20.166.9.204:18553] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "af5SBZcWIu01SCxbjwvBbQAAAQ8"]
[Sat May 09 05:13:41.686142 2026] [:error] [pid 9920:tid 9944] [client 20.166.9.204:9518] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new4.php"] [unique_id "af5SBUxitGYhlzgZb5ZSLwAAAdY"]
[Sat May 09 05:13:42.200520 2026] [:error] [pid 9187:tid 9258] [client 20.166.9.204:14706] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55.php"] [unique_id "af5SBhC7An6gkXsRsaHaEQAAAIU"]
[Sat May 09 05:13:42.733266 2026] [:error] [pid 9187:tid 9253] [client 20.166.9.204:14890] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55.php"] [unique_id "af5SBhC7An6gkXsRsaHaFgAAAIA"]
[Sat May 09 05:13:43.283912 2026] [:error] [pid 9293:tid 9313] [client 20.166.9.204:12669] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55.php"] [unique_id "af5SB5R__qEzV5O6Z2O2awAAANA"]
[Sat May 09 05:13:43.791659 2026] [:error] [pid 9293:tid 9321] [client 20.166.9.204:9543] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/55.php"] [unique_id "af5SB5R__qEzV5O6Z2O2bwAAANg"]
[Sat May 09 05:13:44.331196 2026] [:error] [pid 9186:tid 9231] [client 20.166.9.204:9486] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ups.php"] [unique_id "af5SCBW4eFOEw1mKOgJxtgAAAEU"]
[Sat May 09 05:13:44.857865 2026] [:error] [pid 9663:tid 9676] [client 20.166.9.204:11427] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ups.php"] [unique_id "af5SCJcWIu01SCxbjwvBcAAAAQo"]
[Sat May 09 05:13:45.417018 2026] [:error] [pid 9663:tid 9690] [client 20.166.9.204:17471] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ups.php"] [unique_id "af5SCZcWIu01SCxbjwvBcwAAARg"]
[Sat May 09 05:13:45.934295 2026] [:error] [pid 9184:tid 9218] [client 20.166.9.204:7084] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ups.php"] [unique_id "af5SCYjfODqb_i0Fm99WcAAAABU"]
[Sat May 09 05:13:46.467179 2026] [:error] [pid 9663:tid 9670] [client 20.166.9.204:17445] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-demomav.php"] [unique_id "af5SCpcWIu01SCxbjwvBeAAAAQQ"]
[Sat May 09 05:13:47.000171 2026] [:error] [pid 9663:tid 9679] [client 20.166.9.204:6007] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-demomav.php"] [unique_id "af5SCpcWIu01SCxbjwvBfAAAAQ0"]
[Sat May 09 05:13:47.516552 2026] [:error] [pid 9663:tid 9676] [client 20.166.9.204:11579] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-demomav.php"] [unique_id "af5SC5cWIu01SCxbjwvBgAAAAQo"]
[Sat May 09 05:13:48.060666 2026] [:error] [pid 9760:tid 9779] [client 20.166.9.204:2973] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-demomav.php"] [unique_id "af5SDGIkCp-C_fh0s7ICWAAAAU0"]
[Sat May 09 05:13:48.579796 2026] [:error] [pid 9663:tid 9685] [client 20.166.9.204:19006] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/greateb.php"] [unique_id "af5SDJcWIu01SCxbjwvBhQAAARM"]
[Sat May 09 05:13:49.129913 2026] [:error] [pid 9184:tid 9216] [client 20.166.9.204:14717] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/greateb.php"] [unique_id "af5SDYjfODqb_i0Fm99WfAAAABM"]
[Sat May 09 05:13:49.635215 2026] [:error] [pid 9184:tid 9212] [client 20.166.9.204:6128] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/greateb.php"] [unique_id "af5SDYjfODqb_i0Fm99WfQAAAA8"]
[Sat May 09 05:13:50.135660 2026] [:error] [pid 9186:tid 9227] [client 20.166.9.204:6140] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/greateb.php"] [unique_id "af5SDhW4eFOEw1mKOgJxvwAAAEE"]
[Sat May 09 05:13:50.682431 2026] [:error] [pid 9663:tid 9686] [client 20.166.9.204:2948] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "af5SDpcWIu01SCxbjwvBiwAAARQ"]
[Sat May 09 05:13:51.255439 2026] [:error] [pid 9920:tid 9942] [client 20.166.9.204:18977] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "af5SD0xitGYhlzgZb5ZSOgAAAdQ"]
[Sat May 09 05:13:51.797927 2026] [:error] [pid 9833:tid 9843] [client 20.166.9.204:6903] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "af5SDyM9JmxIS0KGZUAt0wAAAYU"]
[Sat May 09 05:13:52.348318 2026] [:error] [pid 9187:tid 9268] [client 20.166.9.204:5966] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/co.php"] [unique_id "af5SEBC7An6gkXsRsaHaHAAAAI8"]
[Sat May 09 05:13:52.852673 2026] [:error] [pid 9187:tid 9256] [client 20.166.9.204:11303] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/shlo.php"] [unique_id "af5SEBC7An6gkXsRsaHaHgAAAIM"]
[Sat May 09 05:13:53.372813 2026] [:error] [pid 9833:tid 9856] [client 20.166.9.204:11163] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/shlo.php"] [unique_id "af5SESM9JmxIS0KGZUAt1wAAAZI"]
[Sat May 09 05:13:53.942598 2026] [:error] [pid 9663:tid 9687] [client 20.166.9.204:11559] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/css/shlo.php"] [unique_id "af5SEZcWIu01SCxbjwvBlQAAARU"]
[Sat May 09 05:14:14.152403 2026] [:error] [pid 9920:tid 9935] [client 20.166.9.204:17346] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "af5SJkxitGYhlzgZb5ZScwAAAc0"]
[Sat May 09 05:14:14.679840 2026] [:error] [pid 9293:tid 9307] [client 20.166.9.204:15486] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "af5SJpR__qEzV5O6Z2O2igAAAMo"]
[Sat May 09 05:14:15.245308 2026] [:error] [pid 9186:tid 9240] [client 20.166.9.204:13699] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "af5SJxW4eFOEw1mKOgJx1wAAAE4"]
[Sat May 09 05:14:15.762384 2026] [:error] [pid 9184:tid 9211] [client 20.166.9.204:14798] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xwx1.php"] [unique_id "af5SJ4jfODqb_i0Fm99WmgAAAA4"]
[Sat May 09 05:14:16.280180 2026] [:error] [pid 9184:tid 9213] [client 20.166.9.204:15442] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xse.php"] [unique_id "af5SKIjfODqb_i0Fm99WnAAAABA"]
[Sat May 09 05:14:16.829683 2026] [:error] [pid 9184:tid 9207] [client 20.166.9.204:11145] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xse.php"] [unique_id "af5SKIjfODqb_i0Fm99WngAAAAo"]
[Sat May 09 05:14:17.361317 2026] [:error] [pid 9293:tid 9314] [client 20.166.9.204:16442] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xse.php"] [unique_id "af5SKZR__qEzV5O6Z2O2kAAAANE"]
[Sat May 09 05:14:17.902139 2026] [:error] [pid 9293:tid 9312] [client 20.166.9.204:8534] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xse.php"] [unique_id "af5SKZR__qEzV5O6Z2O2kgAAAM8"]
[Sat May 09 06:59:49.404900 2026] [:error] [pid 9187:tid 9274] [client 45.130.83.106:26907] [client 45.130.83.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.106, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af5q5RC7An6gkXsRsaH7FgAAAJU"]
[Sat May 09 07:15:19.271500 2026] [:error] [pid 9187:tid 9259] [client 45.130.83.92:29743] [client 45.130.83.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.92, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af5uhxC7An6gkXsRsaEBRgAAAIY"]
[Sat May 09 10:55:07.238488 2026] [:error] [pid 9187:tid 9265] [client 69.4.93.183:53957] [client 69.4.93.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.4.93.183, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "af6iCxC7An6gkXsRsaFArwAAAIw"], referer: https://makifim.com.au/
[Sat May 09 10:55:12.681143 2026] [:error] [pid 9833:tid 9853] [client 69.4.93.183:39053] [client 69.4.93.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.4.93.183, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "af6iECM9JmxIS0KGZUBdnQAAAY8"], referer: https://makifim.com.au/
[Sat May 09 10:55:23.966893 2026] [:error] [pid 9760:tid 9789] [client 69.4.93.183:35015] [client 69.4.93.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.4.93.183, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af6iG2IkCp-C_fh0s7IoNAAAAVc"], referer: https://makifim.com.au/wp-admin/admin.php?page=twbbwg_photo-gallery
[Sat May 09 10:55:33.711415 2026] [autoindex:error] [pid 9833:tid 9844] [client 69.4.93.183:58956] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/plugins/photo-gallery/booster
[Sat May 09 10:55:36.510769 2026] [autoindex:error] [pid 9187:tid 9260] [client 23.229.2.174:57631] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:55:38.345613 2026] [autoindex:error] [pid 9187:tid 9261] [client 38.154.94.221:38903] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:55:40.043071 2026] [autoindex:error] [pid 9663:tid 9680] [client 38.154.82.153:59566] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:55:43.593536 2026] [autoindex:error] [pid 9833:tid 9852] [client 69.4.94.248:44674] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/images
[Sat May 09 10:55:45.401591 2026] [autoindex:error] [pid 9833:tid 9857] [client 38.154.94.220:53993] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:55:47.145873 2026] [autoindex:error] [pid 9186:tid 9241] [client 38.154.82.151:38807] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:55:48.950128 2026] [autoindex:error] [pid 9663:tid 9671] [client 69.4.92.236:60100] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:55:52.473758 2026] [autoindex:error] [pid 9187:tid 9254] [client 23.229.2.174:55826] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/images
[Sat May 09 10:55:54.197230 2026] [autoindex:error] [pid 9184:tid 9197] [client 69.4.94.241:33554] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:55:55.914000 2026] [autoindex:error] [pid 9920:tid 9927] [client 23.229.2.166:39186] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:56:00.381612 2026] [autoindex:error] [pid 9293:tid 9309] [client 38.154.82.158:36506] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:56:08.236287 2026] [autoindex:error] [pid 9293:tid 9309] [client 38.154.94.221:40835] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors
[Sat May 09 10:56:13.207372 2026] [autoindex:error] [pid 9187:tid 9271] [client 38.154.94.210:49057] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:56:15.649983 2026] [autoindex:error] [pid 9293:tid 9304] [client 69.4.92.236:42184] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 10:56:17.701973 2026] [autoindex:error] [pid 9760:tid 9772] [client 69.4.93.2:38787] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Sat May 09 13:58:22.838827 2026] [:error] [pid 9293:tid 9316] [client 192.227.138.144:33836] [client 192.227.138.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.makifim.com.au"] [uri "/"] [unique_id "af7M_pR__qEzV5O6Z2OFygAAANM"], referer: https://www.google.com
[Sat May 09 17:43:53.798984 2026] [:error] [pid 9293:tid 9314] [client 45.130.83.115:27227] [client 45.130.83.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.115, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af8B2ZR__qEzV5O6Z2PGJgAAANE"]
[Sat May 09 18:23:31.140431 2026] [:error] [pid 9920:tid 9932] [client 45.130.83.97:41843] [client 45.130.83.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.97, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af8LI0xitGYhlzgZb5YEXgAAAco"]
[Sun May 10 01:21:22.101034 2026] [:error] [pid 62831:tid 62842] [client 34.166.208.127:57208] [client 34.166.208.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "af9tEuYBNqNhtZ_l7qBl4AAAAAk"]
[Sun May 10 06:00:42.246084 2026] [autoindex:error] [pid 32915:tid 32922] [client 104.37.185.43:48478] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/plugins/photo-gallery/booster
[Sun May 10 06:00:45.212231 2026] [:error] [pid 32915:tid 32924] [client 104.37.185.43:35718] [client 104.37.185.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.185.43, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af-ujTg8EIe76RX8AUacTAAAAQQ"], referer: https://makifim.com.au/wp-admin/admin.php?page=twbbwg_photo-gallery
[Sun May 10 06:01:08.492606 2026] [autoindex:error] [pid 62801:tid 62815] [client 104.37.185.43:46426] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/images
[Sun May 10 06:01:11.214954 2026] [autoindex:error] [pid 32915:tid 32933] [client 104.37.185.43:46440] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/images
[Sun May 10 06:01:13.874534 2026] [autoindex:error] [pid 32915:tid 32939] [client 104.37.185.43:59308] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors
[Sun May 10 06:01:51.174906 2026] [autoindex:error] [pid 32915:tid 32942] [client 207.231.111.48:39776] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/plugins/photo-gallery/booster
[Sun May 10 06:01:54.640956 2026] [:error] [pid 62802:tid 62848] [client 207.231.111.48:39794] [client 207.231.111.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.231.111.48, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af-u0qt9wnaRe0v-MkbHHgAAAEs"], referer: https://makifim.com.au/wp-admin/admin.php?page=twbbwg_photo-gallery
[Sun May 10 09:40:14.320588 2026] [:error] [pid 46330:tid 46396] [client 81.17.100.193:42770] [client 81.17.100.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.17.100.193, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "af_h_oztrhd3evDQvs9CCAAAAE8"]
[Sun May 10 09:40:15.935689 2026] [:error] [pid 52634:tid 52642] [client 81.17.100.193:42784] [client 81.17.100.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "af_h_9wp8XoWCwFb54CmAAAAAMQ"]
[Sun May 10 09:40:19.732728 2026] [:error] [pid 52634:tid 52658] [client 81.17.100.193:37956] [client 81.17.100.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.17.100.193, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "af_iA9wp8XoWCwFb54CmCwAAANQ"]
[Sun May 10 12:10:38.417539 2026] [:error] [pid 52634:tid 52662] [client 102.219.190.2:26573] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFPtwp8XoWCwFb54DPrQAAANg"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:38.423995 2026] [:error] [pid 52634:tid 52653] [client 102.219.190.2:54380] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFPtwp8XoWCwFb54DPrgAAAM8"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:39.859812 2026] [:error] [pid 52634:tid 52660] [client 102.219.190.2:26573] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFP9wp8XoWCwFb54DPsQAAANY"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:40.096551 2026] [:error] [pid 52634:tid 52658] [client 102.219.190.2:54380] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFQNwp8XoWCwFb54DPsgAAANQ"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:41.177365 2026] [:error] [pid 52634:tid 52659] [client 102.219.190.2:26573] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFQdwp8XoWCwFb54DPswAAANU"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:41.482143 2026] [:error] [pid 52634:tid 52644] [client 102.219.190.2:54380] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFQdwp8XoWCwFb54DPtQAAAMY"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:42.510213 2026] [:error] [pid 52634:tid 52654] [client 102.219.190.2:26573] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFQtwp8XoWCwFb54DPtgAAANA"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:42.782817 2026] [:error] [pid 52634:tid 52650] [client 102.219.190.2:54380] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFQtwp8XoWCwFb54DPtwAAAMw"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:43.828595 2026] [:error] [pid 52634:tid 52651] [client 102.219.190.2:26573] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFQ9wp8XoWCwFb54DPuAAAAM0"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:44.009969 2026] [:error] [pid 52634:tid 52657] [client 102.219.190.2:54380] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFRNwp8XoWCwFb54DPuQAAANM"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:45.160165 2026] [:error] [pid 52634:tid 52642] [client 102.219.190.2:26573] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFRdwp8XoWCwFb54DPugAAAMQ"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:10:45.278573 2026] [:error] [pid 52634:tid 52638] [client 102.219.190.2:54380] [client 102.219.190.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.219.190.2, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFRdwp8XoWCwFb54DPuwAAAMA"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:15.750127 2026] [:error] [pid 52634:tid 52660] [client 159.89.192.239:37412] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFY9wp8XoWCwFb54DPyAAAANY"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:15.750146 2026] [:error] [pid 52634:tid 52645] [client 159.89.192.239:37418] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFY9wp8XoWCwFb54DPyQAAAMc"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:17.697151 2026] [:error] [pid 52634:tid 52651] [client 159.89.192.239:37418] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFZdwp8XoWCwFb54DP0gAAAM0"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:18.357759 2026] [:error] [pid 52634:tid 52646] [client 159.89.192.239:37412] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFZtwp8XoWCwFb54DP1QAAAMg"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:18.698902 2026] [:error] [pid 52634:tid 52653] [client 159.89.192.239:37418] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFZtwp8XoWCwFb54DP1wAAAM8"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:19.334627 2026] [:error] [pid 52634:tid 52645] [client 159.89.192.239:37412] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFZ9wp8XoWCwFb54DP2AAAAMc"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:19.576660 2026] [:error] [pid 52634:tid 52655] [client 159.89.192.239:37418] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFZ9wp8XoWCwFb54DP2gAAANE"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:20.351029 2026] [:error] [pid 52634:tid 52642] [client 159.89.192.239:37412] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFaNwp8XoWCwFb54DP6QAAAMQ"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:11:22.140982 2026] [:error] [pid 52634:tid 52655] [client 159.89.192.239:37418] [client 159.89.192.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.239, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAFatwp8XoWCwFb54DP9QAAANE"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:34.140730 2026] [:error] [pid 52634:tid 52640] [client 103.138.48.194:52206] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGZtwp8XoWCwFb54DQuQAAAMI"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:34.141978 2026] [:error] [pid 52634:tid 52649] [client 103.138.48.194:52200] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGZtwp8XoWCwFb54DQugAAAMs"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:36.156492 2026] [:error] [pid 52634:tid 52644] [client 103.138.48.194:52206] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGaNwp8XoWCwFb54DQvAAAAMY"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:36.348456 2026] [:error] [pid 52634:tid 52660] [client 103.138.48.194:52200] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGaNwp8XoWCwFb54DQvQAAANY"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:37.092906 2026] [:error] [pid 52634:tid 52659] [client 103.138.48.194:52206] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGadwp8XoWCwFb54DQvgAAANU"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:37.358713 2026] [:error] [pid 52634:tid 52643] [client 103.138.48.194:52200] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGadwp8XoWCwFb54DQwAAAAMU"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:38.016830 2026] [:error] [pid 52634:tid 52638] [client 103.138.48.194:52206] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGatwp8XoWCwFb54DQwQAAAMA"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:38.382710 2026] [:error] [pid 52634:tid 52648] [client 103.138.48.194:52200] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGatwp8XoWCwFb54DQwgAAAMo"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:38.909449 2026] [:error] [pid 52634:tid 52662] [client 103.138.48.194:52206] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGatwp8XoWCwFb54DQxAAAANg"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:39.370663 2026] [:error] [pid 52634:tid 52650] [client 103.138.48.194:52200] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGa9wp8XoWCwFb54DQxgAAAMw"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:39.845880 2026] [:error] [pid 52634:tid 52661] [client 103.138.48.194:52206] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGa9wp8XoWCwFb54DQxwAAANc"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:40.377964 2026] [:error] [pid 52634:tid 52646] [client 103.138.48.194:52200] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGbNwp8XoWCwFb54DQyQAAAMg"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:40.728045 2026] [:error] [pid 52634:tid 52655] [client 103.138.48.194:52206] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGbNwp8XoWCwFb54DQygAAANE"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:41.334112 2026] [:error] [pid 52634:tid 52657] [client 103.138.48.194:52200] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGbdwp8XoWCwFb54DQywAAANM"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:15:41.655544 2026] [:error] [pid 52634:tid 52640] [client 103.138.48.194:52206] [client 103.138.48.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.48.194, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGbdwp8XoWCwFb54DQzAAAAMI"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:09.008929 2026] [:error] [pid 52634:tid 52658] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGidwp8XoWCwFb54DQ9QAAANQ"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:09.683812 2026] [:error] [pid 46417:tid 46438] [client 103.87.152.226:50220] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGiWInm7mhwgbe48aUsQAAARM"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:10.430602 2026] [:error] [pid 52634:tid 52651] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGitwp8XoWCwFb54DQ-QAAAM0"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:10.729189 2026] [:error] [pid 46417:tid 46435] [client 103.87.152.226:50220] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGimInm7mhwgbe48aUsgAAARA"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:11.371645 2026] [:error] [pid 52634:tid 52642] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGi9wp8XoWCwFb54DQ-gAAAMQ"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:11.760173 2026] [:error] [pid 46417:tid 46425] [client 103.87.152.226:50220] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGi2Inm7mhwgbe48aUtAAAAQY"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:12.319262 2026] [:error] [pid 52634:tid 52659] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGjNwp8XoWCwFb54DQ_AAAANU"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:12.749718 2026] [:error] [pid 46417:tid 46442] [client 103.87.152.226:50220] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGjGInm7mhwgbe48aUtQAAARc"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:13.245897 2026] [:error] [pid 52634:tid 52654] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGjdwp8XoWCwFb54DQ_gAAANA"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:13.744821 2026] [:error] [pid 46417:tid 46437] [client 103.87.152.226:50220] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGjWInm7mhwgbe48aUtgAAARI"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:14.160980 2026] [:error] [pid 52634:tid 52645] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGjtwp8XoWCwFb54DRAQAAAMc"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:14.742357 2026] [:error] [pid 46417:tid 46436] [client 103.87.152.226:50220] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGjmInm7mhwgbe48aUtwAAARE"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:15.062935 2026] [:error] [pid 52634:tid 52651] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGj9wp8XoWCwFb54DRAwAAAM0"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:15.724328 2026] [:error] [pid 46417:tid 46440] [client 103.87.152.226:50220] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGj2Inm7mhwgbe48aUuAAAARU"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:15.960148 2026] [:error] [pid 52634:tid 52661] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGj9wp8XoWCwFb54DRBAAAANc"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:16.723782 2026] [:error] [pid 46417:tid 46429] [client 103.87.152.226:50220] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGkGInm7mhwgbe48aUugAAAQo"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 12:16:16.882347 2026] [:error] [pid 52634:tid 52653] [client 103.87.152.226:50218] [client 103.87.152.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.87.152.226, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agAGkNwp8XoWCwFb54DRBQAAAM8"], referer: https://makifim.com.au/wp-login.php
[Sun May 10 19:03:52.885934 2026] [:error] [pid 16136:tid 16146] [client 176.65.132.73:51322] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agBmGEOBGdmCMnPX0MfqGwAAAIg"]
[Sun May 10 19:03:54.819797 2026] [:error] [pid 16096:tid 16110] [client 176.65.132.73:51351] [client 176.65.132.73] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agBmGq8wyxcrT50p9kvJjQAAAEk"]
[Sun May 10 19:03:55.805748 2026] [:error] [pid 16038:tid 16068] [client 176.65.132.73:51359] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agBmG04hf5Tcsfa2scJM0QAAAYA"]
[Sun May 10 19:03:57.866498 2026] [:error] [pid 16038:tid 16071] [client 176.65.132.73:51379] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agBmHU4hf5Tcsfa2scJM0wAAAYM"]
[Sun May 10 19:04:03.014487 2026] [:error] [pid 16136:tid 16156] [client 176.65.132.73:51406] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agBmI0OBGdmCMnPX0MfqIAAAAJI"]
[Sun May 10 19:04:05.059841 2026] [:error] [pid 16136:tid 16138] [client 176.65.132.73:51452] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agBmJUOBGdmCMnPX0MfqIQAAAIA"]
[Sun May 10 19:04:07.096076 2026] [:error] [pid 16136:tid 16139] [client 176.65.132.73:51472] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agBmJ0OBGdmCMnPX0MfqIgAAAIE"]
[Sun May 10 22:36:05.224485 2026] [autoindex:error] [pid 37030:tid 37051] [client 20.5.8.136:55267] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon May 11 00:01:07.988269 2026] [:error] [pid 16136:tid 16155] [client 34.136.137.71:65100] [client 34.136.137.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.137.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agCrw0OBGdmCMnPX0McZnwAAAJE"]
[Mon May 11 00:01:09.962374 2026] [:error] [pid 16136:tid 16159] [client 34.136.137.71:65100] [client 34.136.137.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agCrxUOBGdmCMnPX0McZogAAAJU"]
[Mon May 11 00:01:11.214174 2026] [:error] [pid 16136:tid 16160] [client 34.136.137.71:65100] [client 34.136.137.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.137.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agCrx0OBGdmCMnPX0McZpAAAAJY"]
[Mon May 11 00:01:12.951894 2026] [:error] [pid 37030:tid 37040] [client 34.136.137.71:60485] [client 34.136.137.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.137.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agCryJrBzfXWwKkDkdbN9gAAAMg"]
[Mon May 11 00:01:14.766114 2026] [:error] [pid 37030:tid 37051] [client 34.136.137.71:62956] [client 34.136.137.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.137.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agCryprBzfXWwKkDkdbN-QAAANM"]
[Mon May 11 00:01:16.459075 2026] [:error] [pid 37030:tid 37047] [client 34.136.137.71:57272] [client 34.136.137.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.137.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agCrzJrBzfXWwKkDkdbN-wAAAM8"]
[Mon May 11 00:01:18.117941 2026] [:error] [pid 16038:tid 16092] [client 34.136.137.71:52561] [client 34.136.137.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.137.71, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agCrzk4hf5Tcsfa2scJrRQAAAZg"]
[Mon May 11 00:01:18.118139 2026] [:error] [pid 16038:tid 16092] [client 34.136.137.71:52561] [client 34.136.137.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.136.137.71, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agCrzk4hf5Tcsfa2scJrRQAAAZg"]
[Mon May 11 03:16:27.318252 2026] [:error] [pid 16038:tid 16089] [client 158.173.67.135:31061] [client 158.173.67.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agDZi04hf5Tcsfa2scKQiwAAAZU"]
[Mon May 11 03:16:28.387383 2026] [:error] [pid 16037:tid 16061] [client 158.173.67.135:36867] [client 158.173.67.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agDZjHzjLQfyYTkAdSSxQAAAABQ"]
[Mon May 11 03:16:29.432900 2026] [:error] [pid 16037:tid 16057] [client 158.173.67.150:27147] [client 158.173.67.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agDZjXzjLQfyYTkAdSSxUgAAABA"]
[Mon May 11 03:16:30.473482 2026] [:error] [pid 54857:tid 54866] [client 158.173.67.110:62391] [client 158.173.67.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agDZjsIMxCDAKjKxP7D_PwAAAUI"]
[Mon May 11 08:01:42.262395 2026] [:error] [pid 65366:tid 65368] [client 34.130.138.245:51926] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/app/.env.local"] [unique_id "agEcZqhVGdYzapDtv-EAxAAAAMA"]
[Mon May 11 08:01:42.262830 2026] [:error] [pid 9335:tid 9353] [client 34.130.138.245:51886] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.docker"] [unique_id "agEcZnmXqumINT8bKREzyQAAARA"]
[Mon May 11 08:01:42.265019 2026] [:error] [pid 35052:tid 35067] [client 34.130.138.245:51896] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/api/.env"] [unique_id "agEcZuHjpNNnFJrMXu2S4QAAAUw"]
[Mon May 11 08:01:42.266283 2026] [:error] [pid 65366:tid 65380] [client 34.130.138.245:51882] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "agEcZqhVGdYzapDtv-EAxQAAAMs"]
[Mon May 11 08:01:42.266685 2026] [:error] [pid 65366:tid 65387] [client 34.130.138.245:51898] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.dev.local"] [unique_id "agEcZqhVGdYzapDtv-EAxgAAANI"]
[Mon May 11 08:01:42.267438 2026] [:error] [pid 65366:tid 65384] [client 34.130.138.245:51912] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/app/.env"] [unique_id "agEcZqhVGdYzapDtv-EAxwAAAM8"]
[Mon May 11 08:01:42.276870 2026] [:error] [pid 65366:tid 65385] [client 34.130.138.245:51920] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.development.local"] [unique_id "agEcZqhVGdYzapDtv-EAyAAAANA"]
[Mon May 11 08:01:42.291337 2026] [:error] [pid 65366:tid 65374] [client 34.130.138.245:51934] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/admin/.env"] [unique_id "agEcZqhVGdYzapDtv-EAygAAAMY"]
[Mon May 11 08:01:42.291392 2026] [:error] [pid 65366:tid 65376] [client 34.130.138.245:51942] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.dev"] [unique_id "agEcZqhVGdYzapDtv-EAyQAAAMg"]
[Mon May 11 08:01:42.295650 2026] [:error] [pid 9335:tid 9337] [client 34.130.138.245:51944] [client 34.130.138.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.local"] [unique_id "agEcZnmXqumINT8bKREzygAAAQA"]
[Mon May 11 08:47:54.960444 2026] [:error] [pid 9335:tid 9358] [client 35.228.36.106:46588] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/swv/js/index.js.map"] [unique_id "agEnOnmXqumINT8bKRE8cAAAARU"]
[Mon May 11 08:47:55.369931 2026] [:error] [pid 9335:tid 9347] [client 35.228.36.106:46578] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/swv/js/index.js.map"] [unique_id "agEnO3mXqumINT8bKRE8cQAAAQo"]
[Mon May 11 08:47:55.768698 2026] [:error] [pid 35052:tid 35055] [client 35.228.36.106:43910] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/swv/js/index.js.map"] [unique_id "agEnO-HjpNNnFJrMXu2eUAAAAUA"]
[Mon May 11 08:47:57.114565 2026] [:error] [pid 65261:tid 65342] [client 35.228.36.106:38480] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/js/index.js.map"] [unique_id "agEnPZu_9uQJeFrcOstKVAAAAJM"]
[Mon May 11 08:47:57.457926 2026] [:error] [pid 65259:tid 65278] [client 35.228.36.106:38496] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js"] [unique_id "agEnPQPsXLnMa32ma5BgVwAAAAo"]
[Mon May 11 08:47:57.485846 2026] [:error] [pid 35052:tid 35072] [client 35.228.36.106:38486] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/swv/js/index.js.map"] [unique_id "agEnPeHjpNNnFJrMXu2eUQAAAVE"]
[Mon May 11 08:47:59.883613 2026] [:error] [pid 35052:tid 35074] [client 35.228.36.106:38504] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/js/scripts.min.js"] [unique_id "agEnP-HjpNNnFJrMXu2eUwAAAVM"]
[Mon May 11 08:48:01.548216 2026] [:error] [pid 65366:tid 65385] [client 35.228.36.106:46092] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/js/smoothscroll.js"] [unique_id "agEnQahVGdYzapDtv-EHBAAAANA"]
[Mon May 11 08:48:04.015057 2026] [:error] [pid 35052:tid 35079] [client 35.228.36.106:46106] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/core/admin/js/common.js"] [unique_id "agEnROHjpNNnFJrMXu2eVwAAAVg"]
[Mon May 11 08:48:04.084830 2026] [:error] [pid 35052:tid 35073] [client 35.228.36.106:46114] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/photo-gallery/js/scripts.min.js.map"] [unique_id "agEnROHjpNNnFJrMXu2eWAAAAVI"]
[Mon May 11 08:48:05.598197 2026] [:error] [pid 35052:tid 35072] [client 35.228.36.106:46118] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js"] [unique_id "agEnReHjpNNnFJrMXu2eZwAAAVE"]
[Mon May 11 08:48:07.222948 2026] [:error] [pid 9335:tid 9349] [client 35.228.36.106:46122] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/et-cache/14/et-divi-dynamic-tb-93-14-late.css"] [unique_id "agEnR3mXqumINT8bKRE8fQAAAQw"]
[Mon May 11 08:48:08.528935 2026] [:error] [pid 35052:tid 35061] [client 35.228.36.106:46124] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/et-cache/14/et-divi-dynamic-tb-93-14.css"] [unique_id "agEnSOHjpNNnFJrMXu2ecgAAAUY"]
[Mon May 11 08:48:10.183972 2026] [:error] [pid 65261:tid 65325] [client 35.228.36.106:46132] [client 35.228.36.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/et-cache/14/et-core-unified-tb-93-deferred-14.min.css"] [unique_id "agEnSpu_9uQJeFrcOstKWQAAAII"]
[Mon May 11 13:03:09.339410 2026] [:error] [pid 35052:tid 35075] [client 34.142.65.60:53682] [client 34.142.65.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agFjDeHjpNNnFJrMXu3i5QAAAVQ"]
[Mon May 11 13:08:52.599697 2026] [:error] [pid 65261:tid 65335] [client 34.130.134.132:50230] [client 34.130.134.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agFkZJu_9uQJeFrcOstpCwAAAIw"]
[Mon May 11 14:31:31.897572 2026] [:error] [pid 58677:tid 58692] [client 34.62.244.82:52836] [client 34.62.244.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agF3wxasRhyteIXf1RUw9AAAAIQ"]
[Mon May 11 23:41:07.579704 2026] [:error] [pid 4685:tid 4688] [client 34.95.19.166:60034] [client 34.95.19.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "agH4k3wrjbU4NZilCZ8rbQAAAQA"]
[Tue May 12 01:33:23.972866 2026] [:error] [pid 58677:tid 58697] [client 176.65.139.168:50710] [client 176.65.139.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "agIS4xasRhyteIXf1RWNCAAAAIk"]
[Tue May 12 19:47:36.000623 2026] [:error] [pid 21242:tid 21269] [client 20.195.185.204:42278] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "agMTV8zeh8JWZob6PnL0owAAAZc"]
[Tue May 12 19:47:37.431012 2026] [:error] [pid 42143:tid 42149] [client 20.195.185.204:4690] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "agMTWUS2WmK92iCO2L0W9AAAAUI"]
[Tue May 12 19:47:38.266690 2026] [:error] [pid 40061:tid 40080] [client 20.195.185.204:3025] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "agMTWrycIKt8hxHMBYv5SwAAANE"]
[Tue May 12 19:47:39.558272 2026] [:error] [pid 42143:tid 42157] [client 20.195.185.204:58520] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "agMTW0S2WmK92iCO2L0W9gAAAUo"]
[Tue May 12 19:47:40.649419 2026] [:error] [pid 21242:tid 21250] [client 20.195.185.204:3008] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "agMTXMzeh8JWZob6PnL0pAAAAYQ"]
[Tue May 12 19:47:42.809423 2026] [:error] [pid 42143:tid 42148] [client 20.195.185.204:3021] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "agMTXkS2WmK92iCO2L0W_wAAAUE"]
[Tue May 12 19:47:45.645849 2026] [:error] [pid 42143:tid 42162] [client 20.195.185.204:3506] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "agMTYUS2WmK92iCO2L0XBwAAAU8"]
[Tue May 12 19:47:48.480298 2026] [:error] [pid 55559:tid 55622] [client 20.195.185.204:21211] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "agMTZNj0hVMLJAOI_fyx5wAAAQQ"]
[Tue May 12 19:47:51.892916 2026] [:error] [pid 42143:tid 42170] [client 20.195.185.204:3033] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "agMTZ0S2WmK92iCO2L0XDAAAAVc"]
[Tue May 12 19:47:53.840139 2026] [:error] [pid 21242:tid 21261] [client 20.195.185.204:27091] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "agMTaczeh8JWZob6PnL0xAAAAY8"]
[Tue May 12 19:47:57.063591 2026] [:error] [pid 21242:tid 21270] [client 20.195.185.204:59039] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "agMTbczeh8JWZob6PnL0zAAAAZg"]
[Tue May 12 19:48:06.310955 2026] [:error] [pid 42143:tid 42151] [client 20.195.185.204:14118] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "agMTdkS2WmK92iCO2L0XHQAAAUQ"]
[Tue May 12 19:48:11.454291 2026] [:error] [pid 21242:tid 21250] [client 20.195.185.204:34729] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "agMTe8zeh8JWZob6PnL04AAAAYQ"]
[Tue May 12 19:48:15.286212 2026] [:error] [pid 42143:tid 42155] [client 20.195.185.204:28103] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "agMTf0S2WmK92iCO2L0XJQAAAUg"]
[Tue May 12 19:48:17.775028 2026] [:error] [pid 39957:tid 40007] [client 20.195.185.204:3174] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "agMTgeAfHHyq0DBh5BJ4zQAAAE8"]
[Tue May 12 19:48:21.756438 2026] [:error] [pid 42143:tid 42153] [client 20.195.185.204:52369] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "agMThUS2WmK92iCO2L0XJgAAAUY"]
[Tue May 12 19:48:23.219732 2026] [:error] [pid 39957:tid 39995] [client 20.195.185.204:59261] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "agMTh-AfHHyq0DBh5BJ40QAAAEM"]
[Tue May 12 19:48:25.390632 2026] [:error] [pid 42143:tid 42157] [client 20.195.185.204:58907] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "agMTiUS2WmK92iCO2L0XKQAAAUo"]
[Tue May 12 19:48:27.173943 2026] [:error] [pid 40061:tid 40085] [client 20.195.185.204:52345] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "agMTi7ycIKt8hxHMBYv5ZQAAANY"]
[Tue May 12 19:48:28.574373 2026] [:error] [pid 40061:tid 40076] [client 20.195.185.204:59239] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "agMTjLycIKt8hxHMBYv5aAAAAM0"]
[Tue May 12 19:48:29.416150 2026] [:error] [pid 39956:tid 39973] [client 20.195.185.204:59230] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "agMTjY2K3wZDsNji3MwJcwAAAAg"]
[Tue May 12 19:48:32.073365 2026] [:error] [pid 42143:tid 42156] [client 20.195.185.204:59217] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "agMTkES2WmK92iCO2L0XLgAAAUk"]
[Tue May 12 19:48:57.108531 2026] [:error] [pid 42143:tid 42162] [client 20.195.185.204:34730] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "agMTqUS2WmK92iCO2L0XTgAAAU8"]
[Tue May 12 19:48:58.294322 2026] [:error] [pid 39957:tid 40007] [client 20.195.185.204:2312] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "agMTquAfHHyq0DBh5BJ42AAAAE8"]
[Tue May 12 19:48:59.633748 2026] [:error] [pid 39957:tid 40005] [client 20.195.185.204:59205] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "agMTq-AfHHyq0DBh5BJ42gAAAE0"]
[Tue May 12 19:49:01.179848 2026] [:error] [pid 39956:tid 39989] [client 20.195.185.204:52402] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "agMTrY2K3wZDsNji3MwJgQAAABg"]
[Tue May 12 19:49:02.910222 2026] [:error] [pid 21242:tid 21270] [client 20.195.185.204:34747] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "agMTrszeh8JWZob6PnL1CAAAAZg"]
[Tue May 12 19:49:04.061076 2026] [:error] [pid 42143:tid 42149] [client 20.195.185.204:25365] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "agMTsES2WmK92iCO2L0XTwAAAUI"]
[Tue May 12 19:49:06.013466 2026] [:error] [pid 21242:tid 21246] [client 20.195.185.204:59214] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "agMTsszeh8JWZob6PnL1DgAAAYA"]
[Tue May 12 19:49:09.234458 2026] [:error] [pid 40061:tid 40079] [client 20.195.185.204:59212] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "agMTtbycIKt8hxHMBYv5dwAAANA"]
[Tue May 12 19:49:10.853810 2026] [:error] [pid 55559:tid 55633] [client 20.195.185.204:20269] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "agMTttj0hVMLJAOI_fyx_gAAAQ4"]
[Tue May 12 19:49:11.780949 2026] [:error] [pid 39958:tid 40025] [client 20.195.185.204:2358] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "agMTt-VI9FVDxXB2Xxh78gAAAIY"]
[Tue May 12 19:49:13.109364 2026] [:error] [pid 39957:tid 40010] [client 20.195.185.204:59226] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "agMTueAfHHyq0DBh5BJ43wAAAFI"]
[Tue May 12 19:49:14.021481 2026] [:error] [pid 40061:tid 40080] [client 20.195.185.204:13457] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-access.php"] [unique_id "agMTurycIKt8hxHMBYv5fAAAANE"]
[Tue May 12 19:49:15.492707 2026] [:error] [pid 55559:tid 55642] [client 20.195.185.204:2344] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "agMTu9j0hVMLJAOI_fyyAAAAARU"]
[Tue May 12 19:49:16.628856 2026] [:error] [pid 39957:tid 40012] [client 20.195.185.204:15297] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "agMTvOAfHHyq0DBh5BJ4-wAAAFQ"]
[Tue May 12 19:49:17.498341 2026] [:error] [pid 21242:tid 21267] [client 20.195.185.204:15302] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "agMTvczeh8JWZob6PnL1JwAAAZU"]
[Tue May 12 19:49:18.917284 2026] [:error] [pid 39958:tid 40019] [client 20.195.185.204:25344] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fun.php"] [unique_id "agMTvuVI9FVDxXB2Xxh79gAAAIA"]
[Tue May 12 19:49:20.450945 2026] [:error] [pid 21242:tid 21270] [client 20.195.185.204:53503] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agMTwMzeh8JWZob6PnL1OgAAAZg"]
[Tue May 12 19:49:21.909192 2026] [:error] [pid 39957:tid 40015] [client 20.195.185.204:15314] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agMTweAfHHyq0DBh5BJ5EAAAAFc"]
[Tue May 12 19:49:26.816363 2026] [:error] [pid 42143:tid 42155] [client 20.195.185.204:25380] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agMTxkS2WmK92iCO2L0XhwAAAUg"]
[Tue May 12 19:49:27.747649 2026] [:error] [pid 39956:tid 39974] [client 20.195.185.204:53534] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agMTx42K3wZDsNji3MwJiAAAAAk"]
[Tue May 12 19:49:29.175380 2026] [:error] [pid 21242:tid 21257] [client 20.195.185.204:20224] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "agMTyczeh8JWZob6PnL1YwAAAYs"]
[Tue May 12 19:49:31.012424 2026] [:error] [pid 21242:tid 21253] [client 20.195.185.204:34733] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "agMTy8zeh8JWZob6PnL1awAAAYc"]
[Tue May 12 19:49:32.267461 2026] [:error] [pid 21242:tid 21259] [client 20.195.185.204:53546] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "agMTzMzeh8JWZob6PnL1bQAAAY0"]
[Tue May 12 19:49:33.961984 2026] [:error] [pid 42143:tid 42150] [client 20.195.185.204:34712] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/explorer/index_.php"] [unique_id "agMTzUS2WmK92iCO2L0XkwAAAUM"]
[Tue May 12 19:49:35.228843 2026] [:error] [pid 55559:tid 55632] [client 20.195.185.204:35351] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "agMTz9j0hVMLJAOI_fyyFAAAAQ0"]
[Tue May 12 19:49:36.696057 2026] [:error] [pid 39956:tid 39973] [client 20.195.185.204:52986] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "agMT0I2K3wZDsNji3MwJiwAAAAg"]
[Tue May 12 19:49:38.471434 2026] [:error] [pid 55559:tid 55618] [client 20.195.185.204:53015] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "agMT0tj0hVMLJAOI_fyyFQAAAQE"]
[Tue May 12 19:49:40.228759 2026] [:error] [pid 42143:tid 42161] [client 20.195.185.204:58371] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-trackback.php"] [unique_id "agMT1ES2WmK92iCO2L0XmQAAAU4"]
[Tue May 12 19:49:41.522600 2026] [:error] [pid 39958:tid 40041] [client 20.195.185.204:35340] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "agMT1eVI9FVDxXB2Xxh7_gAAAJY"]
[Tue May 12 19:49:43.064366 2026] [:error] [pid 40061:tid 40072] [client 20.195.185.204:53018] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "agMT17ycIKt8hxHMBYv5nwAAAMk"]
[Tue May 12 19:49:44.545037 2026] [:error] [pid 39958:tid 40033] [client 20.195.185.204:58709] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "agMT2OVI9FVDxXB2Xxh7_wAAAI4"]
[Tue May 12 19:49:45.594732 2026] [:error] [pid 21242:tid 21254] [client 20.195.185.204:14187] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "agMT2czeh8JWZob6PnL1dgAAAYg"]
[Tue May 12 19:49:47.404783 2026] [:error] [pid 21242:tid 21266] [client 20.195.185.204:36872] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "agMT28zeh8JWZob6PnL1fAAAAZQ"]
[Tue May 12 19:49:49.740443 2026] [:error] [pid 55559:tid 55622] [client 20.195.185.204:28053] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "agMT3dj0hVMLJAOI_fyyGQAAAQQ"]
[Tue May 12 19:49:51.176818 2026] [:error] [pid 39958:tid 40029] [client 20.195.185.204:23031] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "agMT3-VI9FVDxXB2Xxh8AAAAAIo"]
[Tue May 12 19:49:53.263119 2026] [:error] [pid 55559:tid 55634] [client 20.195.185.204:33728] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/new.php"] [unique_id "agMT4dj0hVMLJAOI_fyyGwAAAQ8"]
[Tue May 12 19:49:54.367738 2026] [:error] [pid 39956:tid 39985] [client 20.195.185.204:53948] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "agMT4o2K3wZDsNji3MwJjwAAABQ"]
[Tue May 12 19:50:18.493415 2026] [:error] [pid 39958:tid 40021] [client 20.195.185.204:37894] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "agMT-uVI9FVDxXB2Xxh8DgAAAII"]
[Tue May 12 19:50:19.630411 2026] [:error] [pid 39957:tid 40008] [client 20.195.185.204:39180] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "agMT--AfHHyq0DBh5BJ5UQAAAFA"]
[Tue May 12 19:50:20.697366 2026] [:error] [pid 55559:tid 55638] [client 20.195.185.204:4661] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "agMT_Nj0hVMLJAOI_fyyLQAAARI"]
[Tue May 12 19:50:21.750278 2026] [:error] [pid 55559:tid 55642] [client 20.195.185.204:36173] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "agMT_dj0hVMLJAOI_fyyLgAAARU"]
[Tue May 12 19:50:23.226250 2026] [:error] [pid 42143:tid 42165] [client 20.195.185.204:27898] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "agMT_0S2WmK92iCO2L0X8gAAAVI"]
[Tue May 12 19:50:24.565867 2026] [:error] [pid 21242:tid 21266] [client 20.195.185.204:27898] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "agMUAMzeh8JWZob6PnL1ngAAAZQ"]
[Tue May 12 19:50:25.766991 2026] [:error] [pid 55559:tid 55627] [client 20.195.185.204:54761] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "agMUAdj0hVMLJAOI_fyyLwAAAQk"]
[Tue May 12 19:50:26.886060 2026] [:error] [pid 42143:tid 42162] [client 20.195.185.204:24264] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "agMUAkS2WmK92iCO2L0X9wAAAU8"]
[Tue May 12 19:50:27.863304 2026] [:error] [pid 21242:tid 21260] [client 20.195.185.204:32622] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "agMUA8zeh8JWZob6PnL1nwAAAY4"]
[Tue May 12 19:50:29.649727 2026] [:error] [pid 21242:tid 21246] [client 20.195.185.204:5534] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "agMUBczeh8JWZob6PnL1oQAAAYA"]
[Tue May 12 19:50:31.600751 2026] [:error] [pid 55559:tid 55644] [client 20.195.185.204:4005] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "agMUB9j0hVMLJAOI_fyyMQAAARc"]
[Tue May 12 19:50:33.208105 2026] [:error] [pid 42143:tid 42164] [client 20.195.185.204:54821] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "agMUCUS2WmK92iCO2L0X-QAAAVE"]
[Tue May 12 19:50:34.332526 2026] [:error] [pid 21242:tid 21264] [client 20.195.185.204:20519] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "agMUCszeh8JWZob6PnL1owAAAZI"]
[Tue May 12 19:50:35.632712 2026] [:error] [pid 40061:tid 40072] [client 20.195.185.204:24289] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "agMUC7ycIKt8hxHMBYv5rgAAAMk"]
[Tue May 12 19:50:36.731223 2026] [:error] [pid 39957:tid 40009] [client 20.195.185.204:18571] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "agMUDOAfHHyq0DBh5BJ5XAAAAFE"]
[Tue May 12 19:50:37.549838 2026] [:error] [pid 39956:tid 39982] [client 20.195.185.204:59302] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "agMUDY2K3wZDsNji3MwJlgAAABE"]
[Tue May 12 19:50:39.558396 2026] [:error] [pid 40061:tid 40064] [client 20.195.185.204:5559] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agMUD7ycIKt8hxHMBYv5sQAAAME"]
[Tue May 12 19:50:40.390448 2026] [:error] [pid 55559:tid 55641] [client 20.195.185.204:59267] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agMUENj0hVMLJAOI_fyyMwAAARQ"]
[Tue May 12 19:50:42.290047 2026] [:error] [pid 55559:tid 55640] [client 20.195.185.204:54813] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agMUEtj0hVMLJAOI_fyyNQAAARM"]
[Tue May 12 19:50:43.098997 2026] [:error] [pid 40061:tid 40073] [client 20.195.185.204:36123] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agMUE7ycIKt8hxHMBYv5swAAAMo"]
[Tue May 12 19:57:01.712474 2026] [:error] [pid 55559:tid 55629] [client 20.195.185.204:48497] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "agMVjdj0hVMLJAOI_fyzGgAAAQs"]
[Tue May 12 19:57:02.430525 2026] [:error] [pid 42143:tid 42164] [client 20.195.185.204:59021] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "agMVjkS2WmK92iCO2L0ZqAAAAVE"]
[Tue May 12 19:57:03.121229 2026] [:error] [pid 42143:tid 42150] [client 20.195.185.204:63501] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "agMVj0S2WmK92iCO2L0ZqgAAAUM"]
[Tue May 12 19:57:03.814346 2026] [:error] [pid 39958:tid 40032] [client 20.195.185.204:17546] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sbhu.php"] [unique_id "agMVj-VI9FVDxXB2Xxh8ugAAAI0"]
[Tue May 12 19:57:04.639004 2026] [:error] [pid 21242:tid 21267] [client 20.195.185.204:29624] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "agMVkMzeh8JWZob6PnL3bgAAAZU"]
[Tue May 12 19:57:05.379462 2026] [:error] [pid 21242:tid 21255] [client 20.195.185.204:63512] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "agMVkczeh8JWZob6PnL3bwAAAYk"]
[Tue May 12 19:57:06.137610 2026] [:error] [pid 40061:tid 40070] [client 20.195.185.204:27131] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "agMVkrycIKt8hxHMBYv7KQAAAMc"]
[Tue May 12 19:57:06.796724 2026] [:error] [pid 39958:tid 40042] [client 20.195.185.204:28124] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xda.php"] [unique_id "agMVkuVI9FVDxXB2Xxh8uwAAAJc"]
[Tue May 12 19:57:07.499214 2026] [:error] [pid 40061:tid 40079] [client 20.195.185.204:17555] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "agMVk7ycIKt8hxHMBYv7LAAAANA"]
[Tue May 12 19:57:08.208846 2026] [:error] [pid 40061:tid 40069] [client 20.195.185.204:28142] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "agMVlLycIKt8hxHMBYv7LgAAAMY"]
[Tue May 12 19:57:08.883359 2026] [:error] [pid 39958:tid 40027] [client 20.195.185.204:58510] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "agMVlOVI9FVDxXB2Xxh8vAAAAIg"]
[Tue May 12 19:57:09.569320 2026] [:error] [pid 42143:tid 42151] [client 20.195.185.204:36945] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yellow.php"] [unique_id "agMVlUS2WmK92iCO2L0ZrgAAAUQ"]
[Tue May 12 19:57:10.399188 2026] [:error] [pid 42143:tid 42149] [client 20.195.185.204:5586] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "agMVlkS2WmK92iCO2L0ZrwAAAUI"]
[Tue May 12 19:57:11.233758 2026] [:error] [pid 42143:tid 42171] [client 20.195.185.204:59345] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "agMVl0S2WmK92iCO2L0ZsAAAAVg"]
[Tue May 12 19:57:11.872305 2026] [:error] [pid 39957:tid 40002] [client 20.195.185.204:48460] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "agMVl-AfHHyq0DBh5BJ6zQAAAEo"]
[Tue May 12 19:57:12.628844 2026] [:error] [pid 21242:tid 21254] [client 20.195.185.204:58516] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lib.php"] [unique_id "agMVmMzeh8JWZob6PnL3dQAAAYg"]
[Tue May 12 19:57:13.401868 2026] [:error] [pid 21242:tid 21270] [client 20.195.185.204:28139] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "agMVmczeh8JWZob6PnL3egAAAZg"]
[Tue May 12 19:57:14.160465 2026] [:error] [pid 39958:tid 40020] [client 20.195.185.204:27103] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "agMVmuVI9FVDxXB2Xxh8vwAAAIE"]
[Tue May 12 19:57:14.835644 2026] [:error] [pid 39958:tid 40038] [client 20.195.185.204:59362] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "agMVmuVI9FVDxXB2Xxh8wQAAAJM"]
[Tue May 12 19:57:15.491326 2026] [:error] [pid 39958:tid 40019] [client 20.195.185.204:17778] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ah25.php"] [unique_id "agMVm-VI9FVDxXB2Xxh8wgAAAIA"]
[Tue May 12 19:57:16.160995 2026] [:error] [pid 42143:tid 42152] [client 20.195.185.204:59051] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "agMVnES2WmK92iCO2L0ZuAAAAUU"]
[Tue May 12 19:57:16.899349 2026] [:error] [pid 39957:tid 40001] [client 20.195.185.204:58534] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "agMVnOAfHHyq0DBh5BJ61QAAAEk"]
[Tue May 12 19:57:17.577371 2026] [:error] [pid 40061:tid 40076] [client 20.195.185.204:17774] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "agMVnbycIKt8hxHMBYv7MAAAAM0"]
[Tue May 12 19:57:18.350613 2026] [:error] [pid 39957:tid 40016] [client 20.195.185.204:59058] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/revealability.php"] [unique_id "agMVnuAfHHyq0DBh5BJ61wAAAFg"]
[Tue May 12 19:57:19.047028 2026] [:error] [pid 40061:tid 40087] [client 20.195.185.204:29625] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "agMVn7ycIKt8hxHMBYv7MwAAANg"]
[Tue May 12 19:57:19.853122 2026] [:error] [pid 42143:tid 42160] [client 20.195.185.204:17740] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "agMVn0S2WmK92iCO2L0ZvAAAAU0"]
[Tue May 12 19:57:20.570578 2026] [:error] [pid 40061:tid 40080] [client 20.195.185.204:3064] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "agMVoLycIKt8hxHMBYv7NAAAANE"]
[Tue May 12 19:57:21.216840 2026] [:error] [pid 42143:tid 42151] [client 20.195.185.204:3055] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file4.php"] [unique_id "agMVoUS2WmK92iCO2L0ZvgAAAUQ"]
[Tue May 12 19:57:22.171192 2026] [:error] [pid 40061:tid 40077] [client 20.195.185.204:59360] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "agMVorycIKt8hxHMBYv7NwAAAM4"]
[Tue May 12 19:57:22.941631 2026] [:error] [pid 55559:tid 55625] [client 20.195.185.204:28101] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "agMVotj0hVMLJAOI_fyzHAAAAQc"]
[Tue May 12 19:57:23.677568 2026] [:error] [pid 40061:tid 40070] [client 20.195.185.204:17540] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "agMVo7ycIKt8hxHMBYv7OwAAAMc"]
[Tue May 12 19:57:24.623736 2026] [:error] [pid 40061:tid 40078] [client 20.195.185.204:17594] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/atomlib.php"] [unique_id "agMVpLycIKt8hxHMBYv7QAAAAM8"]
[Tue May 12 19:57:25.606876 2026] [:error] [pid 21242:tid 21251] [client 20.195.185.204:59044] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "agMVpczeh8JWZob6PnL3hwAAAYU"]
[Tue May 12 19:57:26.742997 2026] [:error] [pid 21242:tid 21253] [client 20.195.185.204:5602] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "agMVpszeh8JWZob6PnL3iQAAAYc"]
[Tue May 12 19:57:27.781470 2026] [:error] [pid 42143:tid 42170] [client 20.195.185.204:17753] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "agMVp0S2WmK92iCO2L0ZxwAAAVc"]
[Tue May 12 19:57:28.699689 2026] [:error] [pid 21242:tid 21267] [client 20.195.185.204:48476] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file30.php"] [unique_id "agMVqMzeh8JWZob6PnL3igAAAZU"]
[Tue May 12 19:57:29.474995 2026] [:error] [pid 21242:tid 21255] [client 20.195.185.204:17584] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "agMVqczeh8JWZob6PnL3jAAAAYk"]
[Tue May 12 19:57:30.226102 2026] [:error] [pid 42143:tid 42150] [client 20.195.185.204:5592] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "agMVqkS2WmK92iCO2L0ZywAAAUM"]
[Tue May 12 19:57:31.092679 2026] [:error] [pid 42143:tid 42161] [client 20.195.185.204:5595] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "agMVq0S2WmK92iCO2L0ZzwAAAU4"]
[Tue May 12 19:57:31.831126 2026] [:error] [pid 39956:tid 39973] [client 20.195.185.204:2393] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/forbidals.php"] [unique_id "agMVq42K3wZDsNji3MwKKQAAAAg"]
[Tue May 12 19:57:32.715434 2026] [:error] [pid 55559:tid 55622] [client 20.195.185.204:29598] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "agMVrNj0hVMLJAOI_fyzHgAAAQQ"]
[Tue May 12 19:57:33.555191 2026] [:error] [pid 21242:tid 21260] [client 20.195.185.204:56973] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "agMVrczeh8JWZob6PnL3kAAAAY4"]
[Tue May 12 19:57:34.590667 2026] [:error] [pid 55559:tid 55617] [client 20.195.185.204:2429] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "agMVrtj0hVMLJAOI_fyzIAAAAQA"]
[Tue May 12 19:57:35.668321 2026] [:error] [pid 39957:tid 39992] [client 20.195.185.204:3192] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-firewall.php"] [unique_id "agMVr-AfHHyq0DBh5BJ65QAAAEA"]
[Tue May 12 19:57:36.474192 2026] [:error] [pid 39958:tid 40029] [client 20.195.185.204:28097] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "agMVsOVI9FVDxXB2Xxh8ygAAAIo"]
[Tue May 12 19:57:37.298784 2026] [:error] [pid 39958:tid 40024] [client 20.195.185.204:2377] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "agMVseVI9FVDxXB2Xxh8ywAAAIU"]
[Tue May 12 19:57:38.145474 2026] [:error] [pid 55559:tid 55618] [client 20.195.185.204:17538] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "agMVstj0hVMLJAOI_fyzJAAAAQE"]
[Tue May 12 19:57:38.973085 2026] [:error] [pid 21242:tid 21260] [client 20.195.185.204:2371] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell20211028.php"] [unique_id "agMVsszeh8JWZob6PnL3pAAAAY4"]
[Tue May 12 19:57:39.922070 2026] [:error] [pid 21242:tid 21249] [client 20.195.185.204:2398] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "agMVs8zeh8JWZob6PnL3rAAAAYM"]
[Tue May 12 19:57:40.847694 2026] [:error] [pid 21242:tid 21255] [client 20.195.185.204:4073] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "agMVtMzeh8JWZob6PnL3tAAAAYk"]
[Tue May 12 19:57:41.891579 2026] [:error] [pid 42143:tid 42163] [client 20.195.185.204:17545] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "agMVtUS2WmK92iCO2L0Z-gAAAVA"]
[Tue May 12 19:57:43.149799 2026] [:error] [pid 39958:tid 40037] [client 20.195.185.204:36978] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wuasr.php"] [unique_id "agMVt-VI9FVDxXB2Xxh8zQAAAJI"]
[Tue May 12 19:57:44.032535 2026] [:error] [pid 39957:tid 39996] [client 20.195.185.204:14115] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "agMVuOAfHHyq0DBh5BJ7GQAAAEQ"]
[Tue May 12 19:57:45.105314 2026] [:error] [pid 39956:tid 39967] [client 20.195.185.204:56971] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "agMVuY2K3wZDsNji3MwKMAAAAAI"]
[Tue May 12 19:57:46.055141 2026] [:error] [pid 39956:tid 39985] [client 20.195.185.204:57057] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "agMVuo2K3wZDsNji3MwKMgAAABQ"]
[Tue May 12 19:57:47.014690 2026] [:error] [pid 21242:tid 21256] [client 20.195.185.204:56969] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1index.php"] [unique_id "agMVu8zeh8JWZob6PnL3zgAAAYo"]
[Tue May 12 19:57:48.106960 2026] [:error] [pid 21242:tid 21259] [client 20.195.185.204:59385] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "agMVvMzeh8JWZob6PnL30wAAAY0"]
[Tue May 12 19:57:49.229662 2026] [:error] [pid 42143:tid 42151] [client 20.195.185.204:57036] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "agMVvUS2WmK92iCO2L0aDAAAAUQ"]
[Tue May 12 19:57:50.214932 2026] [:error] [pid 21242:tid 21251] [client 20.195.185.204:29610] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "agMVvszeh8JWZob6PnL34wAAAYU"]
[Tue May 12 19:57:50.945676 2026] [:error] [pid 42143:tid 42169] [client 20.195.185.204:17566] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/png.php"] [unique_id "agMVvkS2WmK92iCO2L0aDQAAAVY"]
[Tue May 12 19:57:51.793702 2026] [:error] [pid 39958:tid 40019] [client 20.195.185.204:56967] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "agMVv-VI9FVDxXB2Xxh80gAAAIA"]
[Tue May 12 19:57:52.537271 2026] [:error] [pid 42143:tid 42165] [client 20.195.185.204:15261] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "agMVwES2WmK92iCO2L0aEAAAAVI"]
[Tue May 12 19:57:53.541352 2026] [:error] [pid 21242:tid 21260] [client 20.195.185.204:59374] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "agMVwczeh8JWZob6PnL37gAAAY4"]
[Tue May 12 19:57:54.428792 2026] [:error] [pid 39957:tid 40009] [client 20.195.185.204:57021] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "agMVwuAfHHyq0DBh5BJ7IQAAAFE"]
[Tue May 12 19:57:55.268051 2026] [:error] [pid 21242:tid 21247] [client 20.195.185.204:59331] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "agMVw8zeh8JWZob6PnL3-QAAAYE"]
[Tue May 12 19:57:56.171781 2026] [:error] [pid 21242:tid 21255] [client 20.195.185.204:4067] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "agMVxMzeh8JWZob6PnL3_QAAAYk"]
[Tue May 12 19:57:57.309970 2026] [:error] [pid 42143:tid 42168] [client 20.195.185.204:2431] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "agMVxUS2WmK92iCO2L0aFAAAAVU"]
[Tue May 12 19:57:58.146324 2026] [:error] [pid 21242:tid 21264] [client 20.195.185.204:2420] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/yas.php"] [unique_id "agMVxszeh8JWZob6PnL4BAAAAZI"]
[Tue May 12 19:57:58.960703 2026] [:error] [pid 21242:tid 21251] [client 20.195.185.204:14138] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "agMVxszeh8JWZob6PnL4BQAAAYU"]
[Tue May 12 19:57:59.768706 2026] [:error] [pid 21242:tid 21253] [client 20.195.185.204:57043] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dropdown.php"] [unique_id "agMVx8zeh8JWZob6PnL4BwAAAYc"]
[Tue May 12 19:58:21.497505 2026] [:error] [pid 21242:tid 21261] [client 20.195.185.204:2413] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "agMV3czeh8JWZob6PnL4bQAAAY8"]
[Tue May 12 19:58:22.325039 2026] [:error] [pid 42143:tid 42147] [client 20.195.185.204:30560] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "agMV3kS2WmK92iCO2L0aKAAAAUA"]
[Tue May 12 19:58:23.031756 2026] [:error] [pid 39958:tid 40039] [client 20.195.185.204:53942] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "agMV3-VI9FVDxXB2Xxh83AAAAJQ"]
[Tue May 12 19:58:23.839856 2026] [:error] [pid 42143:tid 42149] [client 20.195.185.204:10306] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file59.php"] [unique_id "agMV30S2WmK92iCO2L0aKgAAAUI"]
[Tue May 12 19:58:24.954002 2026] [:error] [pid 42143:tid 42148] [client 20.195.185.204:53894] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "agMV4ES2WmK92iCO2L0aKwAAAUE"]
[Tue May 12 19:58:25.767990 2026] [:error] [pid 21242:tid 21250] [client 20.195.185.204:17538] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "agMV4czeh8JWZob6PnL4cQAAAYQ"]
[Tue May 12 19:58:26.547043 2026] [:error] [pid 39958:tid 40029] [client 20.195.185.204:28142] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "agMV4uVI9FVDxXB2Xxh84AAAAIo"]
[Tue May 12 19:58:27.280409 2026] [:error] [pid 39957:tid 39992] [client 20.195.185.204:28067] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lala.php"] [unique_id "agMV4-AfHHyq0DBh5BJ7WQAAAEA"]
[Tue May 12 19:58:28.093028 2026] [:error] [pid 40061:tid 40087] [client 20.195.185.204:40014] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "agMV5LycIKt8hxHMBYv7XAAAANg"]
[Tue May 12 19:58:28.831072 2026] [:error] [pid 39957:tid 40002] [client 20.195.185.204:59190] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "agMV5OAfHHyq0DBh5BJ7XQAAAEo"]
[Tue May 12 19:58:29.777495 2026] [:error] [pid 40061:tid 40067] [client 20.195.185.204:14910] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "agMV5bycIKt8hxHMBYv7XQAAAMQ"]
[Tue May 12 19:58:30.540214 2026] [:error] [pid 55559:tid 55621] [client 20.195.185.204:30588] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-at.php"] [unique_id "agMV5tj0hVMLJAOI_fyzgAAAAQM"]
[Tue May 12 19:58:31.935489 2026] [:error] [pid 39956:tid 39981] [client 20.195.185.204:58738] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agMV542K3wZDsNji3MwKPAAAABA"]
[Tue May 12 19:58:33.050776 2026] [:error] [pid 39956:tid 39976] [client 20.195.185.204:53881] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agMV6Y2K3wZDsNji3MwKPQAAAAs"]
[Tue May 12 19:58:34.487901 2026] [:error] [pid 39958:tid 40021] [client 20.195.185.204:49702] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agMV6uVI9FVDxXB2Xxh84gAAAII"]
[Tue May 12 19:58:36.097655 2026] [:error] [pid 42143:tid 42165] [client 20.195.185.204:58566] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agMV7ES2WmK92iCO2L0aLgAAAVI"]
[Tue May 12 19:58:37.040339 2026] [:error] [pid 21242:tid 21247] [client 20.195.185.204:53557] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "agMV7czeh8JWZob6PnL4dQAAAYE"]
[Tue May 12 19:58:38.431925 2026] [:error] [pid 40061:tid 40072] [client 20.195.185.204:37894] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "agMV7rycIKt8hxHMBYv7YwAAAMk"]
[Tue May 12 19:58:40.412673 2026] [:error] [pid 42143:tid 42156] [client 20.195.185.204:58795] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "agMV8ES2WmK92iCO2L0aLwAAAUk"]
[Tue May 12 19:58:42.050612 2026] [:error] [pid 21242:tid 21252] [client 20.195.185.204:37915] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sys.php"] [unique_id "agMV8szeh8JWZob6PnL4eAAAAYY"]
[Tue May 12 19:58:43.337724 2026] [:error] [pid 21242:tid 21249] [client 20.195.185.204:58971] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "agMV88zeh8JWZob6PnL4ewAAAYM"]
[Tue May 12 19:58:44.268269 2026] [:error] [pid 40061:tid 40069] [client 20.195.185.204:49676] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "agMV9LycIKt8hxHMBYv7ZgAAAMY"]
[Tue May 12 19:58:45.572824 2026] [:error] [pid 55559:tid 55633] [client 20.195.185.204:30480] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "agMV9dj0hVMLJAOI_fyzjAAAAQ4"]
[Tue May 12 19:58:46.663662 2026] [:error] [pid 39957:tid 40008] [client 20.195.185.204:30491] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/lv.php"] [unique_id "agMV9uAfHHyq0DBh5BJ7ewAAAFA"]
[Tue May 12 19:58:47.795755 2026] [:error] [pid 40061:tid 40073] [client 20.195.185.204:58792] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "agMV97ycIKt8hxHMBYv7aAAAAMo"]
[Tue May 12 19:58:48.727015 2026] [:error] [pid 40061:tid 40081] [client 20.195.185.204:10883] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "agMV-LycIKt8hxHMBYv7aQAAANI"]
[Tue May 12 19:58:49.831485 2026] [:error] [pid 39958:tid 40037] [client 20.195.185.204:30525] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "agMV-eVI9FVDxXB2Xxh84wAAAJI"]
[Tue May 12 19:58:51.040659 2026] [:error] [pid 55559:tid 55644] [client 20.195.185.204:59200] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "agMV-9j0hVMLJAOI_fyzjwAAARc"]
[Tue May 12 19:58:52.240915 2026] [:error] [pid 21242:tid 21254] [client 20.195.185.204:27037] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "agMV_Mzeh8JWZob6PnL4fQAAAYg"]
[Tue May 12 19:58:53.349698 2026] [:error] [pid 39957:tid 40002] [client 20.195.185.204:37960] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "agMV_eAfHHyq0DBh5BJ7gwAAAEo"]
[Tue May 12 19:58:54.656708 2026] [:error] [pid 42143:tid 42167] [client 20.195.185.204:48400] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "agMV_kS2WmK92iCO2L0aOgAAAVQ"]
[Tue May 12 19:58:55.632351 2026] [:error] [pid 39958:tid 40036] [client 20.195.185.204:58983] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/db.php"] [unique_id "agMV_-VI9FVDxXB2Xxh85QAAAJE"]
[Tue May 12 19:58:56.926388 2026] [:error] [pid 39957:tid 40011] [client 20.195.185.204:48431] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "agMWAOAfHHyq0DBh5BJ7hgAAAFM"]
[Tue May 12 19:58:58.613624 2026] [:error] [pid 40061:tid 40065] [client 20.195.185.204:30466] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "agMWArycIKt8hxHMBYv7bAAAAMI"]
[Tue May 12 19:59:00.058992 2026] [:error] [pid 21242:tid 21258] [client 20.195.185.204:32594] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "agMWBMzeh8JWZob6PnL4hAAAAYw"]
[Tue May 12 19:59:01.397584 2026] [:error] [pid 21242:tid 21269] [client 20.195.185.204:27031] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.php"] [unique_id "agMWBczeh8JWZob6PnL4hgAAAZc"]
[Tue May 12 19:59:03.939416 2026] [:error] [pid 42143:tid 42158] [client 20.195.185.204:58975] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "agMWB0S2WmK92iCO2L0aPAAAAUs"]
[Tue May 12 19:59:05.649167 2026] [:error] [pid 21242:tid 21251] [client 20.195.185.204:32622] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "agMWCczeh8JWZob6PnL4jAAAAYU"]
[Tue May 12 19:59:07.640499 2026] [:error] [pid 39957:tid 39998] [client 20.195.185.204:39228] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "agMWC-AfHHyq0DBh5BJ7kAAAAEY"]
[Tue May 12 19:59:09.299045 2026] [:error] [pid 21242:tid 21247] [client 20.195.185.204:58373] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "agMWDczeh8JWZob6PnL4jwAAAYE"]
[Tue May 12 19:59:10.627454 2026] [:error] [pid 21242:tid 21257] [client 20.195.185.204:39174] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "agMWDszeh8JWZob6PnL4kQAAAYs"]
[Tue May 12 19:59:12.560544 2026] [:error] [pid 39956:tid 39987] [client 20.195.185.204:36186] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "agMWEI2K3wZDsNji3MwKQAAAABY"]
[Tue May 12 19:59:14.932762 2026] [:error] [pid 21242:tid 21261] [client 20.195.185.204:36193] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "agMWEszeh8JWZob6PnL4lwAAAY8"]
[Tue May 12 19:59:15.959095 2026] [:error] [pid 21242:tid 21256] [client 20.195.185.204:32597] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ok.php"] [unique_id "agMWE8zeh8JWZob6PnL4mAAAAYo"]
[Tue May 12 19:59:18.454853 2026] [:error] [pid 39956:tid 39967] [client 20.195.185.204:2347] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/samll.php"] [unique_id "agMWFo2K3wZDsNji3MwKQgAAAAI"]
[Wed May 13 01:10:56.443564 2026] [:error] [pid 39958:tid 40020] [client 3.140.188.14:56049] [client 3.140.188.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.140.188.14, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agNfIOVI9FVDxXB2XxiTiQAAAIE"]
[Wed May 13 03:34:43.637452 2026] [autoindex:error] [pid 55559:tid 55617] [client 141.98.11.120:52936] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed May 13 07:21:38.504935 2026] [autoindex:error] [pid 3259:tid 3261] [client 95.111.239.37:49974] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu May 14 05:42:59.177737 2026] [:error] [pid 63033:tid 63045] [client 84.233.195.149:65257] [client 84.233.195.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agTwY1MY49UWn5BpqVZKLgAAAQo"]
[Thu May 14 05:43:00.216298 2026] [:error] [pid 11690:tid 11701] [client 84.233.195.157:50530] [client 84.233.195.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agTwZCnxWuLN8Hptw8luQwAAAMI"]
[Thu May 14 05:43:01.254845 2026] [:error] [pid 63033:tid 63052] [client 84.233.195.153:61172] [client 84.233.195.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agTwZVMY49UWn5BpqVZKNAAAARE"]
[Thu May 14 05:43:02.295631 2026] [:error] [pid 11581:tid 11612] [client 84.233.195.151:54975] [client 84.233.195.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agTwZv0vF48FbzpvQMWFKQAAAA8"]
[Thu May 14 12:30:18.828188 2026] [:error] [pid 47721:tid 47730] [client 192.96.159.129:64642] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "agVP2nEmh7_G0hfOa6uBswAAAYc"]
[Thu May 14 20:45:58.591441 2026] [:error] [pid 11588:tid 11671] [client 142.248.80.35:44842] [client 142.248.80.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "agXEBtUr21rOixkeGKayBwAAAJM"]
[Thu May 14 20:45:59.144988 2026] [:error] [pid 47721:tid 47729] [client 142.248.80.35:50268] [client 142.248.80.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/app/.env"] [unique_id "agXEB3Emh7_G0hfOa6sgdQAAAYY"]
[Thu May 14 20:45:59.146126 2026] [:error] [pid 47721:tid 47736] [client 142.248.80.35:50252] [client 142.248.80.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.local"] [unique_id "agXEB3Emh7_G0hfOa6sgdgAAAY0"]
[Thu May 14 20:45:59.146690 2026] [:error] [pid 47721:tid 47727] [client 142.248.80.35:50274] [client 142.248.80.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/api/.env"] [unique_id "agXEB3Emh7_G0hfOa6sgdwAAAYQ"]
[Thu May 14 20:45:59.148335 2026] [:error] [pid 11588:tid 11673] [client 142.248.80.35:50258] [client 142.248.80.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.production"] [unique_id "agXEB9Ur21rOixkeGKayDgAAAJU"]
[Thu May 14 20:45:59.149664 2026] [:error] [pid 11581:tid 11615] [client 142.248.80.35:50286] [client 142.248.80.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/backend/.env"] [unique_id "agXEB_0vF48FbzpvQMUlkwAAABI"]
[Fri May 15 00:09:52.971417 2026] [:error] [pid 11581:tid 11601] [client 146.148.6.181:56908] [client 146.148.6.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "agXz0P0vF48FbzpvQMVYoQAAAAQ"]
[Fri May 15 01:07:29.516908 2026] [:error] [pid 47721:tid 47731] [client 34.96.188.205:53694] [client 34.96.188.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "agYBUXEmh7_G0hfOa6tIRQAAAYg"]
[Fri May 15 03:01:39.659098 2026] [:error] [pid 11690:tid 11703] [client 142.248.80.191:20938] [client 142.248.80.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "agYcEynxWuLN8Hptw8laDwAAAMQ"]
[Fri May 15 03:01:39.659809 2026] [:error] [pid 11690:tid 11721] [client 142.248.80.191:20918] [client 142.248.80.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "agYcEynxWuLN8Hptw8laEAAAANY"]
[Fri May 15 03:01:39.678748 2026] [:error] [pid 11581:tid 11607] [client 142.248.80.191:20914] [client 142.248.80.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "agYcE_0vF48FbzpvQMV7eAAAAAo"]
[Fri May 15 03:01:39.692751 2026] [:error] [pid 63033:tid 63042] [client 142.248.80.191:20906] [client 142.248.80.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "agYcE1MY49UWn5BpqVYeOwAAAQc"]
[Fri May 15 03:01:39.751123 2026] [:error] [pid 11582:tid 11644] [client 142.248.80.191:20922] [client 142.248.80.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/app/.env"] [unique_id "agYcE_uw2cmFDpGcKhBNjwAAAFM"]
[Fri May 15 03:01:39.990742 2026] [:error] [pid 11581:tid 11602] [client 142.248.80.191:20950] [client 142.248.80.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "agYcE_0vF48FbzpvQMV7eQAAAAU"]
[Fri May 15 09:54:16.260895 2026] [:error] [pid 1190:tid 1266] [client 34.155.13.64:55976] [client 34.155.13.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agZ8yNqiXrD7hne4gFbIUwAAAI4"]
[Fri May 15 10:31:11.958164 2026] [:error] [pid 51234:tid 51249] [client 34.150.154.168:54562] [client 34.150.154.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agaFb972N9CbeiqcqgPfPgAAAU0"]
[Fri May 15 11:58:48.889309 2026] [:error] [pid 1189:tid 1234] [client 35.205.208.178:44702] [client 35.205.208.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agaZ-Ae36qIGegR4kcmbvgAAAEk"]
[Fri May 15 12:25:03.951987 2026] [:error] [pid 1189:tid 1241] [client 34.154.187.130:43756] [client 34.154.187.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agagHwe36qIGegR4kcmggwAAAFA"]
[Fri May 15 12:25:05.800314 2026] [:error] [pid 1189:tid 1232] [client 34.154.187.130:33678] [client 34.154.187.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agagIQe36qIGegR4kcmgiAAAAEc"]
[Fri May 15 12:51:11.024031 2026] [:error] [pid 9307:tid 9372] [client 34.88.180.7:59602] [client 34.88.180.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agamPyC43jY1IRzK5VYpgAAAAMc"]
[Fri May 15 12:51:12.678307 2026] [:error] [pid 9304:tid 9332] [client 34.88.180.7:54936] [client 34.88.180.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "agamQNzcINh7UFIbVoF4-wAAABY"]
[Fri May 15 16:13:04.913425 2026] [:error] [pid 30208:tid 30224] [client 43.159.148.45:54919] [client 43.159.148.45] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:_wpnonce" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "makifim.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "agbVjpmLMCJujX-JTvggGQAAAI4"]
[Fri May 15 16:13:04.913614 2026] [proxy_fcgi:error] [pid 30208:tid 30224] (20014)Internal error (specific information not available): [client 43.159.148.45:54919] AH01075: Error dispatching request to : (passing brigade to output filters)
[Fri May 15 18:47:42.340045 2026] [:error] [pid 9392:tid 9404] [client 52.234.45.177:61929] [client 52.234.45.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.234.45.177, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agb5ztBWJIjH1U9zGfbIlgAAAQo"]
[Fri May 15 22:37:44.631547 2026] [:error] [pid 30240:tid 30257] [client 206.189.91.190:51962] [client 206.189.91.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "agcvuK8ckHvaA6bpewtz1AAAAU8"]
[Sat May 16 01:08:23.064421 2026] [:error] [pid 30240:tid 30249] [client 34.16.58.0:51639] [client 34.16.58.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.58.0, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agdTB68ckHvaA6bpewuFsgAAAUc"]
[Sat May 16 01:08:25.091580 2026] [:error] [pid 30240:tid 30251] [client 34.16.58.0:51639] [client 34.16.58.0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agdTCa8ckHvaA6bpewuFtgAAAUk"]
[Sat May 16 01:08:26.272556 2026] [:error] [pid 30240:tid 30242] [client 34.16.58.0:51639] [client 34.16.58.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.58.0, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agdTCq8ckHvaA6bpewuFugAAAUA"]
[Sat May 16 01:08:27.993792 2026] [:error] [pid 9305:tid 9358] [client 34.16.58.0:51688] [client 34.16.58.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.58.0, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agdTC95FZyBmdCM8GsGggwAAAFQ"]
[Sat May 16 01:08:29.676648 2026] [:error] [pid 30208:tid 30221] [client 34.16.58.0:60301] [client 34.16.58.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.58.0, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agdTDZmLMCJujX-JTvhNhQAAAIs"]
[Sat May 16 01:08:31.380951 2026] [:error] [pid 9305:tid 9357] [client 34.16.58.0:58696] [client 34.16.58.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.58.0, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agdTD95FZyBmdCM8GsGghAAAAFM"]
[Sat May 16 01:08:33.068822 2026] [:error] [pid 30272:tid 30294] [client 34.16.58.0:54197] [client 34.16.58.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.16.58.0, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agdTEXvc_jSFaQ_7_wciwQAAAZQ"]
[Sat May 16 01:08:33.068970 2026] [:error] [pid 30272:tid 30294] [client 34.16.58.0:54197] [client 34.16.58.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.16.58.0, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agdTEXvc_jSFaQ_7_wciwQAAAZQ"]
[Sat May 16 03:04:39.186987 2026] [:error] [pid 9307:tid 9389] [client 20.151.108.19:64266] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agduRyC43jY1IRzK5VZ3WQAAANg"]
[Sat May 16 03:04:40.169865 2026] [:error] [pid 59522:tid 59574] [client 20.151.108.19:54896] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agduSIKyKAkpeBAoLCZizQAAA9M"]
[Sat May 16 03:04:40.873162 2026] [:error] [pid 59202:tid 59210] [client 20.151.108.19:54961] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agduSEORbjeqf1CKQ2KF4AAAAgM"]
[Sat May 16 03:04:41.517769 2026] [:error] [pid 9392:tid 9411] [client 20.151.108.19:54927] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agduSdBWJIjH1U9zGfYLLwAAARE"]
[Sat May 16 03:21:49.080424 2026] [:error] [pid 20872:tid 20920] [client 20.151.108.19:64288] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test5.php"] [unique_id "agdyTWcF5PYJwdIc5syBCgAAAEA"]
[Sat May 16 03:21:49.530875 2026] [:error] [pid 20974:tid 20984] [client 20.151.108.19:54947] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test5.php"] [unique_id "agdyTX63JiVR5E5C_9031QAAAMg"]
[Sat May 16 03:21:49.986206 2026] [:error] [pid 20872:tid 20935] [client 20.151.108.19:54849] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test5.php"] [unique_id "agdyTWcF5PYJwdIc5syBDwAAAE8"]
[Sat May 16 03:21:50.428960 2026] [:error] [pid 20872:tid 20938] [client 20.151.108.19:64266] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test5.php"] [unique_id "agdyTmcF5PYJwdIc5syBEgAAAFI"]
[Sat May 16 03:21:50.848261 2026] [:error] [pid 20866:tid 20904] [client 20.151.108.19:54966] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mih.php"] [unique_id "agdyTrB8yHa0VttkNZoc7wAAAAs"]
[Sat May 16 03:21:51.268106 2026] [:error] [pid 20974:tid 20978] [client 20.151.108.19:54927] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mih.php"] [unique_id "agdyT363JiVR5E5C_9031wAAAMI"]
[Sat May 16 03:21:51.710895 2026] [:error] [pid 20873:tid 20954] [client 20.151.108.19:54882] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mih.php"] [unique_id "agdyT0ofXuNFEgwEBPr9FQAAAIc"]
[Sat May 16 03:21:52.147610 2026] [:error] [pid 20974:tid 20976] [client 20.151.108.19:54870] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mih.php"] [unique_id "agdyUH63JiVR5E5C_9032wAAAMA"]
[Sat May 16 03:21:52.571752 2026] [:error] [pid 20866:tid 20901] [client 20.151.108.19:54943] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zero.php"] [unique_id "agdyULB8yHa0VttkNZoc8QAAAAg"]
[Sat May 16 03:21:52.995301 2026] [:error] [pid 20872:tid 20931] [client 20.151.108.19:54962] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zero.php"] [unique_id "agdyUGcF5PYJwdIc5syBGgAAAEs"]
[Sat May 16 03:21:53.419183 2026] [:error] [pid 20974:tid 20988] [client 20.151.108.19:64262] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zero.php"] [unique_id "agdyUX63JiVR5E5C_9035gAAAMw"]
[Sat May 16 03:21:53.843250 2026] [:error] [pid 20866:tid 20914] [client 20.151.108.19:64283] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zero.php"] [unique_id "agdyUbB8yHa0VttkNZoc9AAAABU"]
[Sat May 16 03:21:54.269365 2026] [:error] [pid 20873:tid 20954] [client 20.151.108.19:64264] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koala.php"] [unique_id "agdyUkofXuNFEgwEBPr9JgAAAIc"]
[Sat May 16 03:21:54.700895 2026] [:error] [pid 20974:tid 20993] [client 20.151.108.19:54967] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koala.php"] [unique_id "agdyUn63JiVR5E5C_9038QAAANE"]
[Sat May 16 03:21:55.150141 2026] [:error] [pid 20872:tid 20927] [client 20.151.108.19:64297] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koala.php"] [unique_id "agdyU2cF5PYJwdIc5syBHgAAAEc"]
[Sat May 16 03:21:55.580524 2026] [:error] [pid 20974:tid 20994] [client 20.151.108.19:54910] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/koala.php"] [unique_id "agdyU363JiVR5E5C_9039wAAANI"]
[Sat May 16 03:21:56.010065 2026] [:error] [pid 20974:tid 20983] [client 20.151.108.19:64279] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mac.php"] [unique_id "agdyVH63JiVR5E5C_903-AAAAMc"]
[Sat May 16 03:21:56.443138 2026] [:error] [pid 20974:tid 20997] [client 20.151.108.19:54916] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mac.php"] [unique_id "agdyVH63JiVR5E5C_903-QAAANU"]
[Sat May 16 03:21:56.874104 2026] [:error] [pid 20974:tid 20984] [client 20.151.108.19:64275] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mac.php"] [unique_id "agdyVH63JiVR5E5C_903_AAAAMg"]
[Sat May 16 03:21:57.321247 2026] [:error] [pid 20974:tid 21000] [client 20.151.108.19:54924] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mac.php"] [unique_id "agdyVX63JiVR5E5C_903_gAAANg"]
[Sat May 16 03:21:57.739471 2026] [:error] [pid 20974:tid 20978] [client 20.151.108.19:54945] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hayuk.php"] [unique_id "agdyVX63JiVR5E5C_904AAAAAMI"]
[Sat May 16 03:21:58.180527 2026] [:error] [pid 20866:tid 20905] [client 20.151.108.19:64257] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hayuk.php"] [unique_id "agdyVrB8yHa0VttkNZoc_gAAAAw"]
[Sat May 16 03:21:58.622294 2026] [:error] [pid 20873:tid 20970] [client 20.151.108.19:54863] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hayuk.php"] [unique_id "agdyVkofXuNFEgwEBPr9UQAAAJc"]
[Sat May 16 03:21:59.096510 2026] [:error] [pid 20872:tid 20935] [client 20.151.108.19:64249] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hayuk.php"] [unique_id "agdyV2cF5PYJwdIc5syBKwAAAE8"]
[Sat May 16 03:21:59.559536 2026] [:error] [pid 20872:tid 20936] [client 20.151.108.19:54975] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0d.php"] [unique_id "agdyV2cF5PYJwdIc5syBLAAAAFA"]
[Sat May 16 03:21:59.988995 2026] [:error] [pid 20873:tid 20964] [client 20.151.108.19:54955] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0d.php"] [unique_id "agdyV0ofXuNFEgwEBPr9YAAAAJE"]
[Sat May 16 03:22:00.433964 2026] [:error] [pid 52550:tid 52572] [client 20.151.108.19:54908] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0d.php"] [unique_id "agdyWAtoMZ5uB5Xu9TLxjgAAARI"]
[Sat May 16 03:22:00.935940 2026] [:error] [pid 52550:tid 52563] [client 20.151.108.19:54873] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/0d.php"] [unique_id "agdyWAtoMZ5uB5Xu9TLxjwAAAQk"]
[Sat May 16 03:22:01.389090 2026] [:error] [pid 20873:tid 20947] [client 20.151.108.19:54928] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wefile.php"] [unique_id "agdyWUofXuNFEgwEBPr9awAAAIA"]
[Sat May 16 03:22:01.815769 2026] [:error] [pid 20974:tid 20983] [client 20.151.108.19:64274] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wefile.php"] [unique_id "agdyWX63JiVR5E5C_904CgAAAMc"]
[Sat May 16 03:22:02.244128 2026] [:error] [pid 20974:tid 20977] [client 20.151.108.19:54869] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wefile.php"] [unique_id "agdyWn63JiVR5E5C_904DQAAAME"]
[Sat May 16 03:22:02.676780 2026] [:error] [pid 52550:tid 52571] [client 20.151.108.19:54906] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wefile.php"] [unique_id "agdyWgtoMZ5uB5Xu9TLxkAAAARE"]
[Sat May 16 03:22:03.107487 2026] [:error] [pid 20866:tid 20896] [client 20.151.108.19:54854] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp3.php"] [unique_id "agdyW7B8yHa0VttkNZoc_wAAAAM"]
[Sat May 16 03:22:03.552730 2026] [:error] [pid 20974:tid 20979] [client 20.151.108.19:54893] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp3.php"] [unique_id "agdyW363JiVR5E5C_904EgAAAMM"]
[Sat May 16 03:22:03.970974 2026] [:error] [pid 52550:tid 52573] [client 20.151.108.19:54898] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp3.php"] [unique_id "agdyWwtoMZ5uB5Xu9TLxkgAAARM"]
[Sat May 16 03:22:04.418971 2026] [:error] [pid 20872:tid 20944] [client 20.151.108.19:64271] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/casp3.php"] [unique_id "agdyXGcF5PYJwdIc5syBMwAAAFg"]
[Sat May 16 03:22:04.845232 2026] [:error] [pid 20974:tid 20997] [client 20.151.108.19:64261] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "agdyXH63JiVR5E5C_904GgAAANU"]
[Sat May 16 03:22:05.295972 2026] [:error] [pid 20873:tid 20947] [client 20.151.108.19:54920] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "agdyXUofXuNFEgwEBPr9egAAAIA"]
[Sat May 16 03:22:05.719778 2026] [:error] [pid 20873:tid 20966] [client 20.151.108.19:54958] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "agdyXUofXuNFEgwEBPr9gQAAAJM"]
[Sat May 16 03:22:06.140417 2026] [:error] [pid 20873:tid 20959] [client 20.151.108.19:54862] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/unvouc.php"] [unique_id "agdyXkofXuNFEgwEBPr9hwAAAIw"]
[Sat May 16 03:22:06.586735 2026] [:error] [pid 20873:tid 20955] [client 20.151.108.19:54936] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "agdyXkofXuNFEgwEBPr9iQAAAIg"]
[Sat May 16 03:22:07.006207 2026] [:error] [pid 20873:tid 20947] [client 20.151.108.19:54915] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "agdyX0ofXuNFEgwEBPr9iwAAAIA"]
[Sat May 16 03:22:07.514094 2026] [:error] [pid 20873:tid 20962] [client 20.151.108.19:54931] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "agdyX0ofXuNFEgwEBPr9kAAAAI8"]
[Sat May 16 03:22:07.940389 2026] [:error] [pid 20873:tid 20969] [client 20.151.108.19:64278] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "agdyX0ofXuNFEgwEBPr9kwAAAJY"]
[Sat May 16 03:22:08.360043 2026] [:error] [pid 20873:tid 20971] [client 20.151.108.19:64248] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agdyYEofXuNFEgwEBPr9lAAAAJg"]
[Sat May 16 03:22:08.789473 2026] [:error] [pid 20866:tid 20900] [client 20.151.108.19:64259] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agdyYLB8yHa0VttkNZodCgAAAAc"]
[Sat May 16 03:22:09.211476 2026] [:error] [pid 20866:tid 20898] [client 20.151.108.19:64268] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agdyYbB8yHa0VttkNZodCwAAAAU"]
[Sat May 16 03:22:09.636660 2026] [:error] [pid 20873:tid 20959] [client 20.151.108.19:64304] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agdyYUofXuNFEgwEBPr9lwAAAIw"]
[Sat May 16 03:22:10.077611 2026] [:error] [pid 20872:tid 20922] [client 20.151.108.19:54914] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agdyYmcF5PYJwdIc5syBPQAAAEI"]
[Sat May 16 03:22:10.529409 2026] [:error] [pid 20873:tid 20960] [client 20.151.108.19:54856] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agdyYkofXuNFEgwEBPr9mgAAAI0"]
[Sat May 16 03:22:10.954073 2026] [:error] [pid 20873:tid 20949] [client 20.151.108.19:54853] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agdyYkofXuNFEgwEBPr9nAAAAII"]
[Sat May 16 03:22:11.384789 2026] [:error] [pid 20866:tid 20904] [client 20.151.108.19:59163] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agdyY7B8yHa0VttkNZodDwAAAAs"]
[Sat May 16 03:22:11.813761 2026] [:error] [pid 52550:tid 52554] [client 20.151.108.19:54959] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "agdyYwtoMZ5uB5Xu9TLxoAAAAQA"]
[Sat May 16 03:22:12.236723 2026] [:error] [pid 52550:tid 52561] [client 20.151.108.19:54905] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "agdyZAtoMZ5uB5Xu9TLxowAAAQc"]
[Sat May 16 03:22:12.668037 2026] [:error] [pid 52550:tid 52578] [client 20.151.108.19:54946] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "agdyZAtoMZ5uB5Xu9TLxpAAAARg"]
[Sat May 16 03:22:13.086305 2026] [:error] [pid 52550:tid 52571] [client 20.151.108.19:64317] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-links.php"] [unique_id "agdyZQtoMZ5uB5Xu9TLxpgAAARE"]
[Sat May 16 03:22:13.512291 2026] [:error] [pid 52550:tid 52573] [client 20.151.108.19:64197] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/wp-info.php"] [unique_id "agdyZQtoMZ5uB5Xu9TLxpwAAARM"]
[Sat May 16 03:22:13.934539 2026] [:error] [pid 20873:tid 20966] [client 20.151.108.19:59150] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/wp-info.php"] [unique_id "agdyZUofXuNFEgwEBPr9nQAAAJM"]
[Sat May 16 03:22:14.370110 2026] [:error] [pid 20866:tid 20908] [client 20.151.108.19:54951] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/wp-info.php"] [unique_id "agdyZrB8yHa0VttkNZodEAAAAA8"]
[Sat May 16 03:22:14.793019 2026] [:error] [pid 20873:tid 20971] [client 20.151.108.19:64280] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/upload/wp-info.php"] [unique_id "agdyZkofXuNFEgwEBPr9ngAAAJg"]
[Sat May 16 03:22:15.220578 2026] [:error] [pid 20974:tid 20984] [client 20.151.108.19:64258] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agdyZ363JiVR5E5C_904JgAAAMg"]
[Sat May 16 03:22:15.651537 2026] [:error] [pid 52550:tid 52569] [client 20.151.108.19:54904] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agdyZwtoMZ5uB5Xu9TLxrQAAAQ8"]
[Sat May 16 03:22:16.067632 2026] [:error] [pid 52550:tid 52570] [client 20.151.108.19:54930] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agdyaAtoMZ5uB5Xu9TLxrgAAARA"]
[Sat May 16 03:22:16.485769 2026] [:error] [pid 52550:tid 52559] [client 20.151.108.19:54972] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agdyaAtoMZ5uB5Xu9TLxsAAAAQU"]
[Sat May 16 03:22:16.919452 2026] [:error] [pid 52550:tid 52555] [client 20.151.108.19:64256] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/half.php"] [unique_id "agdyaAtoMZ5uB5Xu9TLxswAAAQE"]
[Sat May 16 03:22:17.337281 2026] [:error] [pid 20873:tid 20965] [client 20.151.108.19:54892] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/half.php"] [unique_id "agdyaUofXuNFEgwEBPr9nwAAAJI"]
[Sat May 16 03:22:17.772632 2026] [:error] [pid 52550:tid 52561] [client 20.151.108.19:54947] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/half.php"] [unique_id "agdyaQtoMZ5uB5Xu9TLxtQAAAQc"]
[Sat May 16 03:22:18.191513 2026] [:error] [pid 20873:tid 20963] [client 20.151.108.19:64292] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/half.php"] [unique_id "agdyakofXuNFEgwEBPr9oAAAAJA"]
[Sat May 16 03:22:18.625765 2026] [:error] [pid 52550:tid 52564] [client 20.151.108.19:64293] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2P.php"] [unique_id "agdyagtoMZ5uB5Xu9TLxugAAAQo"]
[Sat May 16 03:22:19.043936 2026] [:error] [pid 20873:tid 20951] [client 20.151.108.19:54942] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2P.php"] [unique_id "agdya0ofXuNFEgwEBPr9ogAAAIQ"]
[Sat May 16 03:22:19.492190 2026] [:error] [pid 20873:tid 20953] [client 20.151.108.19:59165] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2P.php"] [unique_id "agdya0ofXuNFEgwEBPr9owAAAIY"]
[Sat May 16 03:22:19.941550 2026] [:error] [pid 20974:tid 20988] [client 20.151.108.19:54894] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2P.php"] [unique_id "agdya363JiVR5E5C_904JwAAAMw"]
[Sat May 16 03:22:20.407422 2026] [:error] [pid 20974:tid 21000] [client 20.151.108.19:64290] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tires.php"] [unique_id "agdybH63JiVR5E5C_904KAAAANg"]
[Sat May 16 03:22:20.911555 2026] [:error] [pid 20974:tid 20977] [client 20.151.108.19:54974] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tires.php"] [unique_id "agdybH63JiVR5E5C_904KQAAAME"]
[Sat May 16 03:22:21.410201 2026] [:error] [pid 52550:tid 52568] [client 20.151.108.19:54950] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tires.php"] [unique_id "agdybQtoMZ5uB5Xu9TLxwAAAAQ4"]
[Sat May 16 03:22:21.843025 2026] [:error] [pid 52550:tid 52555] [client 20.151.108.19:59151] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tires.php"] [unique_id "agdybQtoMZ5uB5Xu9TLxwgAAAQE"]
[Sat May 16 03:22:22.292282 2026] [:error] [pid 20873:tid 20955] [client 20.151.108.19:54878] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "agdybkofXuNFEgwEBPr9pwAAAIg"]
[Sat May 16 03:22:22.737064 2026] [:error] [pid 52550:tid 52571] [client 20.151.108.19:54872] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "agdybgtoMZ5uB5Xu9TLxxgAAARE"]
[Sat May 16 03:22:23.179646 2026] [:error] [pid 20873:tid 20948] [client 20.151.108.19:64254] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "agdyb0ofXuNFEgwEBPr9qQAAAIE"]
[Sat May 16 03:22:23.611577 2026] [:error] [pid 52550:tid 52567] [client 20.151.108.19:54896] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aevly.php"] [unique_id "agdybwtoMZ5uB5Xu9TLxyQAAAQ0"]
[Sat May 16 03:22:24.045728 2026] [:error] [pid 52550:tid 52575] [client 20.151.108.19:64270] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agdycAtoMZ5uB5Xu9TLxzAAAARU"]
[Sat May 16 03:22:24.475964 2026] [:error] [pid 20873:tid 20960] [client 20.151.108.19:54895] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agdycEofXuNFEgwEBPr9qwAAAI0"]
[Sat May 16 03:22:24.987807 2026] [:error] [pid 20872:tid 20933] [client 20.151.108.19:54929] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agdycGcF5PYJwdIc5syBQgAAAE0"]
[Sat May 16 03:22:25.444013 2026] [:error] [pid 52550:tid 52555] [client 20.151.108.19:54868] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agdycQtoMZ5uB5Xu9TLx0gAAAQE"]
[Sat May 16 03:22:25.911293 2026] [:error] [pid 20866:tid 20910] [client 20.151.108.19:59173] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "agdycbB8yHa0VttkNZodFAAAABE"]
[Sat May 16 03:22:26.333291 2026] [:error] [pid 20866:tid 20916] [client 20.151.108.19:64314] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "agdycrB8yHa0VttkNZodFQAAABc"]
[Sat May 16 03:22:26.775973 2026] [:error] [pid 20873:tid 20961] [client 20.151.108.19:64229] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "agdyckofXuNFEgwEBPr9rQAAAI4"]
[Sat May 16 03:22:27.281520 2026] [:error] [pid 20872:tid 20930] [client 20.151.108.19:54881] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-block.php"] [unique_id "agdyc2cF5PYJwdIc5syBRAAAAEo"]
[Sat May 16 03:22:27.726053 2026] [:error] [pid 20974:tid 20982] [client 20.151.108.19:64281] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/like.php"] [unique_id "agdyc363JiVR5E5C_904LgAAAMY"]
[Sat May 16 03:22:28.192740 2026] [:error] [pid 52550:tid 52578] [client 20.151.108.19:54901] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/like.php"] [unique_id "agdydAtoMZ5uB5Xu9TLx1gAAARg"]
[Sat May 16 03:22:28.647406 2026] [:error] [pid 20974:tid 20996] [client 20.151.108.19:54937] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/like.php"] [unique_id "agdydH63JiVR5E5C_904MQAAANQ"]
[Sat May 16 03:22:29.113519 2026] [:error] [pid 20974:tid 20981] [client 20.151.108.19:54858] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/like.php"] [unique_id "agdydX63JiVR5E5C_904MwAAAMU"]
[Sat May 16 03:22:29.536481 2026] [:error] [pid 20974:tid 20997] [client 20.151.108.19:54948] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "agdydX63JiVR5E5C_904NgAAANU"]
[Sat May 16 03:22:29.991184 2026] [:error] [pid 52550:tid 52563] [client 20.151.108.19:54888] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "agdydQtoMZ5uB5Xu9TLx1wAAAQk"]
[Sat May 16 03:22:30.433923 2026] [:error] [pid 20872:tid 20924] [client 20.151.108.19:54921] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "agdydmcF5PYJwdIc5syBRgAAAEQ"]
[Sat May 16 03:22:30.904025 2026] [:error] [pid 20872:tid 20923] [client 20.151.108.19:64276] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/kj.php"] [unique_id "agdydmcF5PYJwdIc5syBRwAAAEM"]
[Sat May 16 03:22:31.321087 2026] [:error] [pid 20872:tid 20941] [client 20.151.108.19:54885] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "agdyd2cF5PYJwdIc5syBSQAAAFU"]
[Sat May 16 03:22:31.747102 2026] [:error] [pid 20873:tid 20958] [client 20.151.108.19:54867] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "agdyd0ofXuNFEgwEBPr9rgAAAIs"]
[Sat May 16 03:22:32.203342 2026] [:error] [pid 52550:tid 52574] [client 20.151.108.19:64223] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "agdyeAtoMZ5uB5Xu9TLx2AAAARQ"]
[Sat May 16 03:22:32.633755 2026] [:error] [pid 52550:tid 52556] [client 20.151.108.19:54871] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/.well-known/about.php"] [unique_id "agdyeAtoMZ5uB5Xu9TLx2QAAAQI"]
[Sat May 16 03:22:33.082225 2026] [:error] [pid 20974:tid 20989] [client 20.151.108.19:54922] [client 20.151.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "agdyeX63JiVR5E5C_904OwAAAM0"]
[Sat May 16 03:22:33.506186 2026] [:error] [pid 20974:tid 20976] [client 20.151.108.19:54865] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "agdyeX63JiVR5E5C_904PgAAAMA"]
[Sat May 16 03:22:33.938606 2026] [:error] [pid 20974:tid 20999] [client 20.151.108.19:54860] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "agdyeX63JiVR5E5C_904QAAAANc"]
[Sat May 16 03:22:34.353998 2026] [:error] [pid 52550:tid 52569] [client 20.151.108.19:64300] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "agdyegtoMZ5uB5Xu9TLx2wAAAQ8"]
[Sat May 16 03:22:34.791824 2026] [:error] [pid 20866:tid 20911] [client 20.151.108.19:59074] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "agdyerB8yHa0VttkNZodHQAAABI"]
[Sat May 16 03:22:35.218624 2026] [:error] [pid 20872:tid 20925] [client 20.151.108.19:54969] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bob.php"] [unique_id "agdye2cF5PYJwdIc5syBSgAAAEU"]
[Sat May 16 03:22:35.664650 2026] [:error] [pid 52550:tid 52561] [client 20.151.108.19:64220] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bob.php"] [unique_id "agdyewtoMZ5uB5Xu9TLx3AAAAQc"]
[Sat May 16 03:22:36.122407 2026] [:error] [pid 20872:tid 20934] [client 20.151.108.19:64301] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bob.php"] [unique_id "agdyfGcF5PYJwdIc5syBTAAAAE4"]
[Sat May 16 03:22:36.545612 2026] [:error] [pid 52550:tid 52560] [client 20.151.108.19:59160] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bob.php"] [unique_id "agdyfAtoMZ5uB5Xu9TLx3QAAAQY"]
[Sat May 16 03:22:36.969348 2026] [:error] [pid 20872:tid 20942] [client 20.151.108.19:59154] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spawns.php"] [unique_id "agdyfGcF5PYJwdIc5syBTgAAAFY"]
[Sat May 16 03:22:37.402486 2026] [:error] [pid 20872:tid 20944] [client 20.151.108.19:54875] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spawns.php"] [unique_id "agdyfWcF5PYJwdIc5syBTwAAAFg"]
[Sat May 16 03:22:37.820397 2026] [:error] [pid 20974:tid 21000] [client 20.151.108.19:54964] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spawns.php"] [unique_id "agdyfX63JiVR5E5C_904RwAAANg"]
[Sat May 16 03:22:38.270669 2026] [:error] [pid 20872:tid 20935] [client 20.151.108.19:59175] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/spawns.php"] [unique_id "agdyfmcF5PYJwdIc5syBUQAAAE8"]
[Sat May 16 03:22:38.687967 2026] [:error] [pid 20873:tid 20959] [client 20.151.108.19:64291] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t3s.php"] [unique_id "agdyfkofXuNFEgwEBPr9tAAAAIw"]
[Sat May 16 03:22:39.132952 2026] [:error] [pid 20873:tid 20952] [client 20.151.108.19:54848] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t3s.php"] [unique_id "agdyf0ofXuNFEgwEBPr9tgAAAIU"]
[Sat May 16 03:22:39.552667 2026] [:error] [pid 52550:tid 52575] [client 20.151.108.19:54907] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t3s.php"] [unique_id "agdyfwtoMZ5uB5Xu9TLx4QAAARU"]
[Sat May 16 03:22:39.993635 2026] [:error] [pid 20873:tid 20955] [client 20.151.108.19:64198] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/t3s.php"] [unique_id "agdyf0ofXuNFEgwEBPr9twAAAIg"]
[Sat May 16 03:22:40.417463 2026] [:error] [pid 20974:tid 20989] [client 20.151.108.19:54940] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "agdygH63JiVR5E5C_904SwAAAM0"]
[Sat May 16 03:22:40.847452 2026] [:error] [pid 20872:tid 20932] [client 20.151.108.19:64267] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "agdygGcF5PYJwdIc5syBUwAAAEw"]
[Sat May 16 03:22:41.268941 2026] [:error] [pid 20872:tid 20930] [client 20.151.108.19:64285] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "agdygWcF5PYJwdIc5syBVAAAAEo"]
[Sat May 16 03:22:41.689942 2026] [:error] [pid 20974:tid 20985] [client 20.151.108.19:54863] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "agdygX63JiVR5E5C_904TAAAAMk"]
[Sat May 16 03:22:42.154829 2026] [:error] [pid 20872:tid 20929] [client 20.151.108.19:54864] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "agdygmcF5PYJwdIc5syBWAAAAEk"]
[Sat May 16 03:22:42.577922 2026] [:error] [pid 20866:tid 20908] [client 20.151.108.19:64203] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "agdygrB8yHa0VttkNZodIQAAAA8"]
[Sat May 16 03:22:43.008712 2026] [:error] [pid 20974:tid 20996] [client 20.151.108.19:64199] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "agdyg363JiVR5E5C_904UgAAANQ"]
[Sat May 16 03:22:43.462822 2026] [:error] [pid 20872:tid 20927] [client 20.151.108.19:64312] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/x/"] [unique_id "agdyg2cF5PYJwdIc5syBWwAAAEc"]
[Sat May 16 03:22:43.883738 2026] [:error] [pid 20974:tid 21000] [client 20.151.108.19:64224] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agdyg363JiVR5E5C_904VAAAANg"]
[Sat May 16 03:22:44.320917 2026] [:error] [pid 20974:tid 20992] [client 20.151.108.19:64305] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agdyhH63JiVR5E5C_904VgAAANA"]
[Sat May 16 03:22:44.753368 2026] [:error] [pid 20974:tid 20978] [client 20.151.108.19:54887] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agdyhH63JiVR5E5C_904WAAAAMI"]
[Sat May 16 03:22:45.212875 2026] [:error] [pid 20974:tid 20989] [client 20.151.108.19:59116] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agdyhX63JiVR5E5C_904WgAAAM0"]
[Sat May 16 03:22:45.650491 2026] [:error] [pid 20872:tid 20934] [client 20.151.108.19:54939] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agdyhWcF5PYJwdIc5syBXwAAAE4"]
[Sat May 16 03:22:46.094683 2026] [:error] [pid 20974:tid 20994] [client 20.151.108.19:59180] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agdyhn63JiVR5E5C_904XgAAANI"]
[Sat May 16 03:22:46.519762 2026] [:error] [pid 20872:tid 20922] [client 20.151.108.19:54968] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agdyhmcF5PYJwdIc5syBYAAAAEI"]
[Sat May 16 03:22:46.954401 2026] [:error] [pid 20974:tid 20999] [client 20.151.108.19:59147] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agdyhn63JiVR5E5C_904YgAAANc"]
[Sat May 16 03:23:03.846339 2026] [autoindex:error] [pid 20974:tid 20997] [client 20.151.108.19:64286] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat May 16 03:23:14.082612 2026] [autoindex:error] [pid 58587:tid 58609] [client 20.151.108.19:54952] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat May 16 03:23:17.714056 2026] [:error] [pid 58587:tid 58617] [client 20.151.108.19:54913] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sl.php"] [unique_id "agdypRfo18by17rjDulZFQAAABM"]
[Sat May 16 03:23:18.137116 2026] [:error] [pid 58588:tid 58629] [client 20.151.108.19:64222] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sl.php"] [unique_id "agdypq9IBukIqfGSZk3pMgAAAEQ"]
[Sat May 16 03:23:18.550605 2026] [:error] [pid 58587:tid 58598] [client 20.151.108.19:64315] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sl.php"] [unique_id "agdyphfo18by17rjDulZFgAAAAA"]
[Sat May 16 03:23:18.980091 2026] [:error] [pid 58588:tid 58631] [client 20.151.108.19:54926] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sl.php"] [unique_id "agdypq9IBukIqfGSZk3pMwAAAEY"]
[Sat May 16 03:23:19.406942 2026] [:error] [pid 58587:tid 58609] [client 20.151.108.19:64273] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-temp.php"] [unique_id "agdypxfo18by17rjDulZGAAAAAs"]
[Sat May 16 03:23:19.825249 2026] [:error] [pid 58685:tid 58699] [client 20.151.108.19:64192] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-temp.php"] [unique_id "agdyp_o8RwHP0JRnajX9nAAAAMw"]
[Sat May 16 03:23:20.240084 2026] [:error] [pid 58685:tid 58702] [client 20.151.108.19:64246] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-temp.php"] [unique_id "agdyqPo8RwHP0JRnajX9nwAAAM8"]
[Sat May 16 03:23:20.655952 2026] [:error] [pid 58589:tid 58659] [client 20.151.108.19:54902] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-temp.php"] [unique_id "agdyqHyiv8hWE29s3ca2pAAAAIc"]
[Sat May 16 03:23:21.087420 2026] [:error] [pid 58685:tid 58708] [client 20.151.108.19:64211] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agdyqfo8RwHP0JRnajX9owAAANU"]
[Sat May 16 03:23:21.510888 2026] [:error] [pid 58685:tid 58711] [client 20.151.108.19:54884] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agdyqfo8RwHP0JRnajX9pQAAANg"]
[Sat May 16 03:23:21.935843 2026] [:error] [pid 58685:tid 58691] [client 20.151.108.19:64226] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agdyqfo8RwHP0JRnajX9qQAAAMQ"]
[Sat May 16 03:23:22.352321 2026] [:error] [pid 58685:tid 58694] [client 20.151.108.19:64296] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agdyqvo8RwHP0JRnajX9qgAAAMc"]
[Sat May 16 03:23:22.786099 2026] [:error] [pid 58685:tid 58698] [client 20.151.108.19:59168] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "agdyqvo8RwHP0JRnajX9rAAAAMs"]
[Sat May 16 03:23:23.207443 2026] [:error] [pid 58685:tid 58692] [client 20.151.108.19:64245] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "agdyq_o8RwHP0JRnajX9rgAAAMU"]
[Sat May 16 03:23:23.629899 2026] [:error] [pid 58685:tid 58706] [client 20.151.108.19:54909] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "agdyq_o8RwHP0JRnajX9sQAAANM"]
[Sat May 16 03:23:24.072705 2026] [:error] [pid 58589:tid 58666] [client 20.151.108.19:59157] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xmu.php"] [unique_id "agdyrHyiv8hWE29s3ca2pwAAAI4"]
[Sat May 16 03:23:24.494918 2026] [:error] [pid 58588:tid 58639] [client 20.151.108.19:59124] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "agdyrK9IBukIqfGSZk3pNwAAAE4"]
[Sat May 16 03:23:24.912918 2026] [:error] [pid 58587:tid 58615] [client 20.151.108.19:59171] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "agdyrBfo18by17rjDulZGQAAABE"]
[Sat May 16 03:23:25.328517 2026] [:error] [pid 58685:tid 58711] [client 20.151.108.19:64228] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "agdyrfo8RwHP0JRnajX9tgAAANg"]
[Sat May 16 03:23:25.755720 2026] [:error] [pid 58685:tid 58687] [client 20.151.108.19:64196] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/mode.php"] [unique_id "agdyrfo8RwHP0JRnajX9uAAAAMA"]
[Sat May 16 03:23:26.213938 2026] [:error] [pid 58588:tid 58627] [client 20.151.108.19:59176] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agdyrq9IBukIqfGSZk3pQAAAAEI"]
[Sat May 16 03:23:26.686904 2026] [:error] [pid 58589:tid 58670] [client 20.151.108.19:54891] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agdyrnyiv8hWE29s3ca2qwAAAJI"]
[Sat May 16 03:23:27.117304 2026] [:error] [pid 58588:tid 58636] [client 20.151.108.19:59083] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agdyr69IBukIqfGSZk3pSQAAAEs"]
[Sat May 16 03:23:27.566551 2026] [:error] [pid 58589:tid 58674] [client 20.151.108.19:54911] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agdyr3yiv8hWE29s3ca2rQAAAJY"]
[Sat May 16 03:23:27.985047 2026] [:error] [pid 58589:tid 58652] [client 20.151.108.19:64260] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agdyr3yiv8hWE29s3ca2rgAAAIA"]
[Sat May 16 03:23:28.676581 2026] [:error] [pid 58589:tid 58656] [client 20.151.108.19:59138] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agdysHyiv8hWE29s3ca2sQAAAIQ"]
[Sat May 16 03:23:29.187480 2026] [:error] [pid 58589:tid 58659] [client 20.151.108.19:64237] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agdysXyiv8hWE29s3ca2swAAAIc"]
[Sat May 16 03:23:29.760586 2026] [:error] [pid 58589:tid 58658] [client 20.151.108.19:64310] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agdysXyiv8hWE29s3ca2tgAAAIY"]
[Sat May 16 03:23:30.383659 2026] [:error] [pid 58589:tid 58663] [client 20.151.108.19:59186] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "agdysnyiv8hWE29s3ca2uAAAAIs"]
[Sat May 16 03:23:31.239617 2026] [:error] [pid 58587:tid 58600] [client 20.151.108.19:64308] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "agdysxfo18by17rjDulZHgAAAAI"]
[Sat May 16 03:23:31.800454 2026] [:error] [pid 58588:tid 58626] [client 20.151.108.19:64318] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "agdys69IBukIqfGSZk3pUwAAAEE"]
[Sat May 16 03:23:32.457533 2026] [:error] [pid 58587:tid 58602] [client 20.151.108.19:64252] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/puc.php"] [unique_id "agdytBfo18by17rjDulZIAAAAAQ"]
[Sat May 16 03:23:32.965465 2026] [:error] [pid 58587:tid 58606] [client 20.151.108.19:54970] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "agdytBfo18by17rjDulZIQAAAAg"]
[Sat May 16 03:23:33.436095 2026] [:error] [pid 58589:tid 58672] [client 20.151.108.19:64282] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "agdytXyiv8hWE29s3ca2uwAAAJQ"]
[Sat May 16 03:23:33.872121 2026] [:error] [pid 58588:tid 58649] [client 20.151.108.19:64221] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "agdyta9IBukIqfGSZk3pWAAAAFg"]
[Sat May 16 03:23:34.307363 2026] [:error] [pid 58589:tid 58655] [client 20.151.108.19:64250] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/themes.php"] [unique_id "agdytnyiv8hWE29s3ca2vQAAAIM"]
[Sat May 16 03:23:34.742029 2026] [:error] [pid 58589:tid 58659] [client 20.151.108.19:54877] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agdytnyiv8hWE29s3ca2vwAAAIc"]
[Sat May 16 03:23:35.244759 2026] [:error] [pid 58589:tid 58661] [client 20.151.108.19:51007] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agdyt3yiv8hWE29s3ca2wgAAAIk"]
[Sat May 16 03:23:35.724462 2026] [:error] [pid 58589:tid 58664] [client 20.151.108.19:64303] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agdyt3yiv8hWE29s3ca2xAAAAIw"]
[Sat May 16 03:23:36.167026 2026] [:error] [pid 58588:tid 58625] [client 20.151.108.19:59169] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agdyuK9IBukIqfGSZk3pYAAAAEA"]
[Sat May 16 03:23:36.603045 2026] [:error] [pid 58589:tid 58669] [client 20.151.108.19:64287] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "agdyuHyiv8hWE29s3ca2yQAAAJE"]
[Sat May 16 03:23:37.075660 2026] [:error] [pid 58588:tid 58628] [client 20.151.108.19:59167] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "agdyua9IBukIqfGSZk3pYQAAAEM"]
[Sat May 16 03:23:37.500662 2026] [:error] [pid 58589:tid 58674] [client 20.151.108.19:64263] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "agdyuXyiv8hWE29s3ca2ygAAAJY"]
[Sat May 16 03:23:37.919015 2026] [:error] [pid 58588:tid 58631] [client 20.151.108.19:64232] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/awa.php"] [unique_id "agdyua9IBukIqfGSZk3pZAAAAEY"]
[Sat May 16 03:23:38.368027 2026] [:error] [pid 58587:tid 58608] [client 20.151.108.19:50974] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "agdyuhfo18by17rjDulZJAAAAAo"]
[Sat May 16 03:23:38.804564 2026] [:error] [pid 58587:tid 58612] [client 20.151.108.19:64207] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "agdyuhfo18by17rjDulZJQAAAA4"]
[Sat May 16 03:23:39.272713 2026] [:error] [pid 58588:tid 58644] [client 20.151.108.19:54899] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "agdyu69IBukIqfGSZk3pZwAAAFM"]
[Sat May 16 03:23:39.721971 2026] [:error] [pid 58589:tid 58665] [client 20.151.108.19:54851] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "agdyu3yiv8hWE29s3ca2zgAAAI0"]
[Sat May 16 03:23:40.186566 2026] [:error] [pid 58589:tid 58659] [client 20.151.108.19:54886] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "agdyvHyiv8hWE29s3ca2zwAAAIc"]
[Sat May 16 03:23:40.624272 2026] [:error] [pid 58589:tid 58657] [client 20.151.108.19:59187] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "agdyvHyiv8hWE29s3ca20QAAAIU"]
[Sat May 16 03:23:41.047749 2026] [:error] [pid 58589:tid 58666] [client 20.151.108.19:59137] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "agdyvXyiv8hWE29s3ca20wAAAI4"]
[Sat May 16 03:23:41.479158 2026] [:error] [pid 58588:tid 58642] [client 20.151.108.19:59193] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/p.php"] [unique_id "agdyva9IBukIqfGSZk3pawAAAFE"]
[Sat May 16 03:23:41.937551 2026] [:error] [pid 58685:tid 58706] [client 20.151.108.19:59158] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agdyvfo8RwHP0JRnajX9xAAAANM"]
[Sat May 16 03:23:42.374144 2026] [:error] [pid 58589:tid 58671] [client 20.151.108.19:59177] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agdyvnyiv8hWE29s3ca21gAAAJM"]
[Sat May 16 03:23:42.885610 2026] [:error] [pid 58685:tid 58702] [client 20.151.108.19:54957] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agdyvvo8RwHP0JRnajX9xgAAAM8"]
[Sat May 16 03:23:43.370490 2026] [:error] [pid 58589:tid 58658] [client 20.151.108.19:54874] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agdyv3yiv8hWE29s3ca22AAAAIY"]
[Sat May 16 03:23:43.787915 2026] [:error] [pid 58685:tid 58700] [client 20.151.108.19:54857] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "agdyv_o8RwHP0JRnajX9xwAAAM0"]
[Sat May 16 03:23:44.242371 2026] [:error] [pid 58589:tid 58652] [client 20.151.108.19:64234] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "agdywHyiv8hWE29s3ca22QAAAIA"]
[Sat May 16 03:23:44.696322 2026] [:error] [pid 58685:tid 58704] [client 20.151.108.19:54944] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "agdywPo8RwHP0JRnajX9yAAAANE"]
[Sat May 16 03:23:45.166420 2026] [:error] [pid 58589:tid 58654] [client 20.151.108.19:54932] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bthil.php"] [unique_id "agdywXyiv8hWE29s3ca22wAAAII"]
[Sat May 16 03:23:45.596781 2026] [:error] [pid 58589:tid 58655] [client 20.151.108.19:64286] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "agdywXyiv8hWE29s3ca23AAAAIM"]
[Sat May 16 03:23:46.038663 2026] [:error] [pid 58589:tid 58665] [client 20.151.108.19:59079] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "agdywnyiv8hWE29s3ca23QAAAI0"]
[Sat May 16 03:23:46.484723 2026] [:error] [pid 58589:tid 58662] [client 20.151.108.19:59188] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "agdywnyiv8hWE29s3ca24QAAAIo"]
[Sat May 16 03:23:46.935647 2026] [:error] [pid 58589:tid 58666] [client 20.151.108.19:54963] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/shell.php"] [unique_id "agdywnyiv8hWE29s3ca24wAAAI4"]
[Sat May 16 03:23:47.373739 2026] [:error] [pid 58589:tid 58656] [client 20.151.108.19:54889] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "agdyw3yiv8hWE29s3ca25QAAAIQ"]
[Sat May 16 03:23:47.859250 2026] [:error] [pid 58589:tid 58671] [client 20.151.108.19:50921] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "agdyw3yiv8hWE29s3ca25gAAAJM"]
[Sat May 16 03:23:48.327088 2026] [:error] [pid 58588:tid 58644] [client 20.151.108.19:59185] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "agdyxK9IBukIqfGSZk3pcwAAAFM"]
[Sat May 16 03:23:48.760995 2026] [:error] [pid 58589:tid 58674] [client 20.151.108.19:59196] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/seo.php"] [unique_id "agdyxHyiv8hWE29s3ca26AAAAJY"]
[Sat May 16 03:23:49.213886 2026] [:error] [pid 58588:tid 58636] [client 20.151.108.19:50950] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "agdyxa9IBukIqfGSZk3pdQAAAEs"]
[Sat May 16 03:23:49.640442 2026] [:error] [pid 58589:tid 58663] [client 20.151.108.19:54919] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "agdyxXyiv8hWE29s3ca26gAAAIs"]
[Sat May 16 03:23:50.056423 2026] [:error] [pid 58589:tid 58665] [client 20.151.108.19:64311] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "agdyxnyiv8hWE29s3ca27QAAAI0"]
[Sat May 16 03:23:50.482532 2026] [:error] [pid 58685:tid 58690] [client 20.151.108.19:64210] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "agdyxvo8RwHP0JRnajX90QAAAMM"]
[Sat May 16 03:23:50.922910 2026] [:error] [pid 58685:tid 58693] [client 20.151.108.19:64319] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "agdyxvo8RwHP0JRnajX90wAAAMY"]
[Sat May 16 03:23:51.339672 2026] [:error] [pid 58685:tid 58692] [client 20.151.108.19:59086] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "agdyx_o8RwHP0JRnajX91QAAAMU"]
[Sat May 16 03:23:51.764609 2026] [:error] [pid 58685:tid 58696] [client 20.151.108.19:59184] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "agdyx_o8RwHP0JRnajX91wAAAMk"]
[Sat May 16 03:23:52.180789 2026] [:error] [pid 58685:tid 58704] [client 20.151.108.19:54938] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "agdyyPo8RwHP0JRnajX92QAAANE"]
[Sat May 16 03:23:52.625077 2026] [:error] [pid 58588:tid 58645] [client 20.151.108.19:64208] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "agdyyK9IBukIqfGSZk3pdwAAAFQ"]
[Sat May 16 03:23:53.043618 2026] [:error] [pid 58588:tid 58640] [client 20.151.108.19:59195] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "agdyya9IBukIqfGSZk3peAAAAE8"]
[Sat May 16 03:23:53.475711 2026] [:error] [pid 58685:tid 58695] [client 20.151.108.19:64313] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "agdyyfo8RwHP0JRnajX92wAAAMg"]
[Sat May 16 03:23:53.928772 2026] [:error] [pid 58589:tid 58656] [client 20.151.108.19:54956] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "agdyyXyiv8hWE29s3ca28gAAAIQ"]
[Sat May 16 03:23:54.392059 2026] [:error] [pid 58587:tid 58619] [client 20.151.108.19:64269] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "agdyyhfo18by17rjDulZKwAAABU"]
[Sat May 16 03:23:54.817376 2026] [:error] [pid 58589:tid 58671] [client 20.151.108.19:50884] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "agdyynyiv8hWE29s3ca29AAAAJM"]
[Sat May 16 03:23:55.257921 2026] [:error] [pid 58588:tid 58642] [client 20.151.108.19:64255] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "agdyy69IBukIqfGSZk3peQAAAFE"]
[Sat May 16 03:23:55.721847 2026] [:error] [pid 58588:tid 58648] [client 20.151.108.19:59073] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "agdyy69IBukIqfGSZk3pewAAAFc"]
[Sat May 16 03:23:56.146138 2026] [:error] [pid 58587:tid 58600] [client 20.151.108.19:59140] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "agdyzBfo18by17rjDulZLQAAAAI"]
[Sat May 16 03:23:56.571195 2026] [:error] [pid 58589:tid 58658] [client 20.151.108.19:43977] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "agdyzHyiv8hWE29s3ca29wAAAIY"]
[Sat May 16 03:23:56.993488 2026] [:error] [pid 58685:tid 58699] [client 20.151.108.19:59107] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "agdyzPo8RwHP0JRnajX93QAAAMw"]
[Sat May 16 03:23:57.415389 2026] [:error] [pid 58685:tid 58709] [client 20.151.108.19:64294] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "agdyzfo8RwHP0JRnajX93gAAANY"]
[Sat May 16 03:23:57.845516 2026] [:error] [pid 58685:tid 58687] [client 20.151.108.19:54949] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "agdyzfo8RwHP0JRnajX93wAAAMA"]
[Sat May 16 03:23:58.260914 2026] [:error] [pid 58685:tid 58689] [client 20.151.108.19:50951] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "agdyzvo8RwHP0JRnajX94AAAAMI"]
[Sat May 16 03:23:58.725718 2026] [:error] [pid 58685:tid 58688] [client 20.151.108.19:54859] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "agdyzvo8RwHP0JRnajX97AAAAME"]
[Sat May 16 03:23:59.145823 2026] [:error] [pid 58685:tid 58687] [client 20.151.108.19:54890] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2026w.php"] [unique_id "agdyz_o8RwHP0JRnajX99AAAAMA"]
[Sat May 16 03:23:59.585320 2026] [:error] [pid 58588:tid 58629] [client 20.151.108.19:64209] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "agdyz69IBukIqfGSZk3pfQAAAEQ"]
[Sat May 16 03:24:00.008292 2026] [:error] [pid 58589:tid 58665] [client 20.151.108.19:64269] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "agdy0Hyiv8hWE29s3ca2_QAAAI0"]
[Sat May 16 03:24:00.438660 2026] [:error] [pid 58589:tid 58675] [client 20.151.108.19:59148] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "agdy0Hyiv8hWE29s3ca2_gAAAJc"]
[Sat May 16 03:24:00.860672 2026] [:error] [pid 58685:tid 58688] [client 20.151.108.19:59142] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "agdy0Po8RwHP0JRnajX9_wAAAME"]
[Sat May 16 03:24:01.276853 2026] [:error] [pid 58685:tid 58706] [client 20.151.108.19:64216] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "agdy0fo8RwHP0JRnajX-AQAAANM"]
[Sat May 16 03:24:01.696722 2026] [:error] [pid 58685:tid 58709] [client 20.151.108.19:59095] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "agdy0fo8RwHP0JRnajX-BQAAANY"]
[Sat May 16 03:24:02.126472 2026] [:error] [pid 58587:tid 58620] [client 20.151.108.19:54900] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "agdy0hfo18by17rjDulZMQAAABY"]
[Sat May 16 03:24:02.555542 2026] [:error] [pid 58589:tid 58670] [client 20.151.108.19:64277] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xa.php"] [unique_id "agdy0nyiv8hWE29s3ca3AgAAAJI"]
[Sat May 16 03:24:02.978339 2026] [:error] [pid 58589:tid 58664] [client 20.151.108.19:59153] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agdy0nyiv8hWE29s3ca3BAAAAIw"]
[Sat May 16 03:24:03.407556 2026] [:error] [pid 58588:tid 58628] [client 20.151.108.19:59161] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agdy069IBukIqfGSZk3pfwAAAEM"]
[Sat May 16 03:24:03.845797 2026] [:error] [pid 58589:tid 58669] [client 20.151.108.19:54965] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agdy03yiv8hWE29s3ca3BQAAAJE"]
[Sat May 16 03:24:04.264045 2026] [:error] [pid 58588:tid 58632] [client 20.151.108.19:59089] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agdy1K9IBukIqfGSZk3pgAAAAEc"]
[Sat May 16 03:24:04.689922 2026] [:error] [pid 58587:tid 58612] [client 20.151.108.19:59108] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "agdy1Bfo18by17rjDulZMwAAAA4"]
[Sat May 16 03:24:05.117998 2026] [:error] [pid 58588:tid 58643] [client 20.151.108.19:50882] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "agdy1a9IBukIqfGSZk3pggAAAFI"]
[Sat May 16 03:24:05.561615 2026] [:error] [pid 58587:tid 58611] [client 20.151.108.19:64219] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "agdy1Rfo18by17rjDulZNAAAAA0"]
[Sat May 16 03:24:06.041561 2026] [:error] [pid 58587:tid 58614] [client 20.151.108.19:59118] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w2025.php"] [unique_id "agdy1hfo18by17rjDulZNgAAABA"]
[Sat May 16 03:24:06.467784 2026] [:error] [pid 58588:tid 58649] [client 20.151.108.19:59149] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "agdy1q9IBukIqfGSZk3pgwAAAFg"]
[Sat May 16 03:24:06.923047 2026] [:error] [pid 58589:tid 58655] [client 20.151.108.19:59156] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "agdy1nyiv8hWE29s3ca3CgAAAIM"]
[Sat May 16 03:24:07.355776 2026] [:error] [pid 58589:tid 58665] [client 20.151.108.19:59172] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "agdy13yiv8hWE29s3ca3DAAAAI0"]
[Sat May 16 03:24:07.777855 2026] [:error] [pid 58588:tid 58639] [client 20.151.108.19:54912] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fvvff.php"] [unique_id "agdy169IBukIqfGSZk3phAAAAE4"]
[Sat May 16 03:24:08.217921 2026] [:error] [pid 58589:tid 58675] [client 20.151.108.19:64295] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agdy2Hyiv8hWE29s3ca3DQAAAJc"]
[Sat May 16 03:24:08.660470 2026] [:error] [pid 58685:tid 58703] [client 20.151.108.19:59192] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agdy2Po8RwHP0JRnajX-CQAAANA"]
[Sat May 16 03:24:09.099014 2026] [:error] [pid 58685:tid 58705] [client 20.151.108.19:64200] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agdy2fo8RwHP0JRnajX-CgAAANI"]
[Sat May 16 03:24:09.528944 2026] [:error] [pid 58589:tid 58670] [client 20.151.108.19:50961] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agdy2Xyiv8hWE29s3ca3EAAAAJI"]
[Sat May 16 03:24:09.971397 2026] [:error] [pid 58685:tid 58701] [client 20.151.108.19:64195] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agdy2fo8RwHP0JRnajX-DAAAAM4"]
[Sat May 16 03:24:10.399695 2026] [:error] [pid 58587:tid 58602] [client 20.151.108.19:64215] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agdy2hfo18by17rjDulZPAAAAAQ"]
[Sat May 16 03:24:10.819472 2026] [:error] [pid 58587:tid 58598] [client 20.151.108.19:59100] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agdy2hfo18by17rjDulZPQAAAAA"]
[Sat May 16 03:24:11.242077 2026] [:error] [pid 58587:tid 58606] [client 20.151.108.19:59126] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agdy2xfo18by17rjDulZPgAAAAg"]
[Sat May 16 03:24:11.667556 2026] [:error] [pid 58588:tid 58638] [client 20.151.108.19:64202] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "agdy269IBukIqfGSZk3piQAAAE0"]
[Sat May 16 03:24:12.095319 2026] [:error] [pid 58587:tid 58610] [client 20.151.108.19:64218] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "agdy3Bfo18by17rjDulZQAAAAAw"]
[Sat May 16 03:24:12.513669 2026] [:error] [pid 58588:tid 58640] [client 20.151.108.19:59105] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "agdy3K9IBukIqfGSZk3pigAAAE8"]
[Sat May 16 03:24:12.936033 2026] [:error] [pid 58588:tid 58633] [client 20.151.108.19:59113] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "agdy3K9IBukIqfGSZk3piwAAAEg"]
[Sat May 16 03:24:13.357596 2026] [:error] [pid 58588:tid 58642] [client 20.151.108.19:59155] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "agdy3a9IBukIqfGSZk3pjgAAAFE"]
[Sat May 16 03:24:13.777258 2026] [:error] [pid 58589:tid 58666] [client 20.151.108.19:64193] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "agdy3Xyiv8hWE29s3ca3EgAAAI4"]
[Sat May 16 03:24:14.221590 2026] [:error] [pid 58588:tid 58646] [client 20.151.108.19:59190] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "agdy3q9IBukIqfGSZk3pkQAAAFU"]
[Sat May 16 03:24:14.642648 2026] [:error] [pid 58587:tid 58613] [client 20.151.108.19:59123] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f6.php"] [unique_id "agdy3hfo18by17rjDulZRAAAAA8"]
[Sat May 16 03:24:15.068806 2026] [:error] [pid 58587:tid 58619] [client 20.151.108.19:64242] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "agdy3xfo18by17rjDulZRgAAABU"]
[Sat May 16 03:24:15.494370 2026] [:error] [pid 58587:tid 58617] [client 20.151.108.19:43980] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "agdy3xfo18by17rjDulZRwAAABM"]
[Sat May 16 03:24:15.926786 2026] [:error] [pid 58589:tid 58657] [client 20.151.108.19:50986] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "agdy33yiv8hWE29s3ca3FgAAAIU"]
[Sat May 16 03:24:29.843246 2026] [autoindex:error] [pid 58589:tid 58652] [client 20.151.108.19:54864] AH01276: Cannot serve directory /home/makifimc/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat May 16 03:24:37.817991 2026] [:error] [pid 58685:tid 58695] [client 20.151.108.19:59144] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agdy9fo8RwHP0JRnajX-NgAAAMg"]
[Sat May 16 03:24:38.283610 2026] [:error] [pid 58588:tid 58626] [client 20.151.108.19:59194] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agdy9q9IBukIqfGSZk3pugAAAEE"]
[Sat May 16 03:24:38.734186 2026] [:error] [pid 58966:tid 58980] [client 20.151.108.19:59115] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agdy9j-7_O97aNXIlTYJZQAAAQw"]
[Sat May 16 03:24:39.159756 2026] [:error] [pid 58589:tid 58658] [client 20.151.108.19:54879] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agdy93yiv8hWE29s3ca3SwAAAIY"]
[Sat May 16 03:24:39.576273 2026] [:error] [pid 58685:tid 58707] [client 20.151.108.19:64231] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agdy9_o8RwHP0JRnajX-OQAAANQ"]
[Sat May 16 03:24:39.996241 2026] [:error] [pid 58685:tid 58703] [client 20.151.108.19:54883] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agdy9_o8RwHP0JRnajX-OgAAANA"]
[Sat May 16 03:24:40.423314 2026] [:error] [pid 58966:tid 58983] [client 20.151.108.19:59135] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agdy-D-7_O97aNXIlTYJZgAAAQ8"]
[Sat May 16 03:24:40.847712 2026] [:error] [pid 58588:tid 58629] [client 20.151.108.19:50959] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agdy-K9IBukIqfGSZk3puwAAAEQ"]
[Sat May 16 03:24:41.265342 2026] [:error] [pid 58966:tid 58986] [client 20.151.108.19:50994] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "agdy-T-7_O97aNXIlTYJZwAAARI"]
[Sat May 16 03:24:41.707642 2026] [:error] [pid 58966:tid 58990] [client 20.151.108.19:64284] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "agdy-T-7_O97aNXIlTYJaAAAARY"]
[Sat May 16 03:24:42.135380 2026] [:error] [pid 58588:tid 58649] [client 20.151.108.19:64233] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "agdy-q9IBukIqfGSZk3pvQAAAFg"]
[Sat May 16 03:24:42.553299 2026] [:error] [pid 58587:tid 58600] [client 20.151.108.19:59097] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "agdy-hfo18by17rjDulZWAAAAAI"]
[Sat May 16 03:24:42.971003 2026] [:error] [pid 58685:tid 58696] [client 20.151.108.19:59082] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agdy-vo8RwHP0JRnajX-QQAAAMk"]
[Sat May 16 03:24:43.497409 2026] [:error] [pid 58685:tid 58708] [client 20.151.108.19:59094] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agdy-_o8RwHP0JRnajX-QwAAANU"]
[Sat May 16 03:24:43.930293 2026] [:error] [pid 58685:tid 58688] [client 20.151.108.19:54925] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agdy-_o8RwHP0JRnajX-RAAAAME"]
[Sat May 16 03:24:44.363804 2026] [:error] [pid 58685:tid 58698] [client 20.151.108.19:54903] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agdy_Po8RwHP0JRnajX-RQAAAMs"]
[Sat May 16 03:24:44.799646 2026] [:error] [pid 58685:tid 58687] [client 20.151.108.19:59072] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "agdy_Po8RwHP0JRnajX-RwAAAMA"]
[Sat May 16 03:24:45.225824 2026] [:error] [pid 58589:tid 58661] [client 20.151.108.19:59121] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "agdy_Xyiv8hWE29s3ca3TgAAAIk"]
[Sat May 16 03:24:45.661322 2026] [:error] [pid 58685:tid 58701] [client 20.151.108.19:50963] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "agdy_fo8RwHP0JRnajX-SwAAAM4"]
[Sat May 16 03:24:46.082531 2026] [:error] [pid 58966:tid 58972] [client 20.151.108.19:50984] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "agdy_j-7_O97aNXIlTYJcAAAAQQ"]
[Sat May 16 03:24:46.525518 2026] [:error] [pid 58589:tid 58671] [client 20.151.108.19:50899] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agdy_nyiv8hWE29s3ca3UAAAAJM"]
[Sat May 16 03:24:46.952139 2026] [:error] [pid 58588:tid 58625] [client 20.151.108.19:64194] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agdy_q9IBukIqfGSZk3pwQAAAEA"]
[Sat May 16 03:24:47.387000 2026] [:error] [pid 58587:tid 58621] [client 20.151.108.19:59136] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agdy_xfo18by17rjDulZWQAAABc"]
[Sat May 16 03:24:47.819211 2026] [:error] [pid 58966:tid 58977] [client 20.151.108.19:59133] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agdy_z-7_O97aNXIlTYJdQAAAQk"]
[Sat May 16 03:24:48.243504 2026] [:error] [pid 58966:tid 58975] [client 20.151.108.19:54861] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agdzAD-7_O97aNXIlTYJdgAAAQc"]
[Sat May 16 03:24:48.675526 2026] [:error] [pid 58966:tid 58980] [client 20.151.108.19:64235] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agdzAD-7_O97aNXIlTYJdwAAAQw"]
[Sat May 16 03:24:49.097254 2026] [:error] [pid 58685:tid 58708] [client 20.151.108.19:64204] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agdzAfo8RwHP0JRnajX-UgAAANU"]
[Sat May 16 03:24:49.525335 2026] [:error] [pid 58588:tid 58644] [client 20.151.108.19:51002] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agdzAa9IBukIqfGSZk3pwwAAAFM"]
[Sat May 16 03:24:49.952561 2026] [:error] [pid 58685:tid 58706] [client 20.151.108.19:59164] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "agdzAfo8RwHP0JRnajX-VAAAANM"]
[Sat May 16 03:24:50.374489 2026] [:error] [pid 58685:tid 58695] [client 20.151.108.19:50914] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "agdzAvo8RwHP0JRnajX-VwAAAMg"]
[Sat May 16 03:24:50.792963 2026] [:error] [pid 58685:tid 58703] [client 20.151.108.19:54866] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "agdzAvo8RwHP0JRnajX-WAAAANA"]
[Sat May 16 03:24:51.230463 2026] [:error] [pid 58589:tid 58672] [client 20.151.108.19:50941] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/av.php"] [unique_id "agdzA3yiv8hWE29s3ca3UwAAAJQ"]
[Sat May 16 03:24:51.646310 2026] [:error] [pid 58685:tid 58691] [client 20.151.108.19:64217] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "agdzA_o8RwHP0JRnajX-XAAAAMQ"]
[Sat May 16 03:24:52.087791 2026] [:error] [pid 58587:tid 58602] [client 20.151.108.19:50973] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/abcd.php"] [unique_id "agdzBBfo18by17rjDulZWgAAAAQ"]
[Sat May 16 03:24:52.512633 2026] [:error] [pid 58587:tid 58598] [client 20.151.108.19:59088] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "agdzBBfo18by17rjDulZWwAAAAA"]
[Sat May 16 03:24:52.951624 2026] [:error] [pid 58685:tid 58692] [client 20.151.108.19:54973] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "agdzBPo8RwHP0JRnajX-XgAAAMU"]
[Sat May 16 03:24:53.384155 2026] [:error] [pid 58587:tid 58608] [client 20.151.108.19:50972] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "agdzBRfo18by17rjDulZXAAAAAo"]
[Sat May 16 03:24:53.810037 2026] [:error] [pid 58685:tid 58704] [client 20.151.108.19:59159] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "agdzBfo8RwHP0JRnajX-YQAAANE"]
[Sat May 16 03:24:54.229947 2026] [:error] [pid 58589:tid 58676] [client 20.151.108.19:64247] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "agdzBnyiv8hWE29s3ca3VQAAAJg"]
[Sat May 16 03:24:54.647717 2026] [:error] [pid 58685:tid 58706] [client 20.151.108.19:50967] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "agdzBvo8RwHP0JRnajX-ZgAAANM"]
[Sat May 16 03:24:55.075345 2026] [:error] [pid 58685:tid 58695] [client 20.151.108.19:50944] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "agdzB_o8RwHP0JRnajX-ZwAAAMg"]
[Sat May 16 03:24:55.493694 2026] [:error] [pid 58685:tid 58702] [client 20.151.108.19:59166] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/update/f35.php"] [unique_id "agdzB_o8RwHP0JRnajX-aAAAAM8"]
[Sat May 16 03:24:55.906512 2026] [:error] [pid 58589:tid 58652] [client 20.151.108.19:54933] [client 20.151.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "agdzB3yiv8hWE29s3ca3VwAAAIA"]
[Sat May 16 03:24:56.328105 2026] [:error] [pid 58685:tid 58709] [client 20.151.108.19:54971] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "agdzCPo8RwHP0JRnajX-awAAANY"]
[Sat May 16 03:24:56.758539 2026] [:error] [pid 58685:tid 58705] [client 20.151.108.19:50962] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "agdzCPo8RwHP0JRnajX-bAAAANI"]
[Sat May 16 03:24:57.180004 2026] [:error] [pid 58589:tid 58662] [client 20.151.108.19:64299] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "agdzCXyiv8hWE29s3ca3WQAAAIo"]
[Sat May 16 03:24:57.600767 2026] [:error] [pid 58685:tid 58700] [client 20.151.108.19:44012] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "agdzCfo8RwHP0JRnajX-bwAAAM0"]
[Sat May 16 03:24:58.039107 2026] [:error] [pid 58685:tid 58696] [client 20.151.108.19:64227] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agdzCvo8RwHP0JRnajX-cgAAAMk"]
[Sat May 16 03:24:58.465570 2026] [:error] [pid 58685:tid 58688] [client 20.151.108.19:64298] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agdzCvo8RwHP0JRnajX-dAAAAME"]
[Sat May 16 03:24:58.889066 2026] [:error] [pid 58685:tid 58695] [client 20.151.108.19:59101] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agdzCvo8RwHP0JRnajX-dQAAAMg"]
[Sat May 16 03:24:59.321844 2026] [:error] [pid 58685:tid 58701] [client 20.151.108.19:54961] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "agdzC_o8RwHP0JRnajX-eAAAAM4"]
[Sat May 16 03:24:59.763955 2026] [:error] [pid 58966:tid 58990] [client 20.151.108.19:59132] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "agdzCz-7_O97aNXIlTYJgwAAARY"]
[Sat May 16 03:25:00.194407 2026] [:error] [pid 58966:tid 58987] [client 20.151.108.19:54852] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "agdzDD-7_O97aNXIlTYJhQAAARM"]
[Sat May 16 03:25:00.619510 2026] [:error] [pid 58588:tid 58636] [client 20.151.108.19:64201] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "agdzDK9IBukIqfGSZk3pxQAAAEs"]
[Sat May 16 03:25:01.082751 2026] [:error] [pid 58966:tid 58969] [client 20.151.108.19:50964] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "agdzDT-7_O97aNXIlTYJiQAAAQE"]
[Sat May 16 03:25:01.548290 2026] [:error] [pid 58588:tid 58631] [client 20.151.108.19:50949] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agdzDa9IBukIqfGSZk3pxgAAAEY"]
[Sat May 16 03:25:01.992882 2026] [:error] [pid 58966:tid 58974] [client 20.151.108.19:59090] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agdzDT-7_O97aNXIlTYJjQAAAQY"]
[Sat May 16 03:25:02.423671 2026] [:error] [pid 58966:tid 58975] [client 20.151.108.19:59130] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agdzDj-7_O97aNXIlTYJjwAAAQc"]
[Sat May 16 03:25:02.845457 2026] [:error] [pid 58966:tid 58979] [client 20.151.108.19:64316] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "agdzDj-7_O97aNXIlTYJkQAAAQs"]
[Sat May 16 03:25:03.271336 2026] [:error] [pid 58588:tid 58647] [client 20.151.108.19:50923] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agdzD69IBukIqfGSZk3pxwAAAFY"]
[Sat May 16 03:25:03.695509 2026] [:error] [pid 58966:tid 58990] [client 20.151.108.19:64306] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agdzDz-7_O97aNXIlTYJlQAAARY"]
[Sat May 16 03:25:04.142636 2026] [:error] [pid 58966:tid 58987] [client 20.151.108.19:59078] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agdzED-7_O97aNXIlTYJmgAAARM"]
[Sat May 16 03:25:04.589503 2026] [:error] [pid 58966:tid 58986] [client 20.151.108.19:50997] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "agdzED-7_O97aNXIlTYJnwAAARI"]
[Sat May 16 03:25:05.019500 2026] [:error] [pid 58966:tid 58972] [client 20.151.108.19:50928] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "agdzET-7_O97aNXIlTYJoQAAAQQ"]
[Sat May 16 03:25:05.457765 2026] [:error] [pid 58587:tid 58599] [client 20.151.108.19:59139] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "agdzERfo18by17rjDulZaQAAAAE"]
[Sat May 16 03:25:05.914156 2026] [:error] [pid 58587:tid 58600] [client 20.151.108.19:50954] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "agdzERfo18by17rjDulZawAAAAI"]
[Sat May 16 03:25:06.415771 2026] [:error] [pid 58966:tid 58983] [client 20.151.108.19:59096] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/gettest.php"] [unique_id "agdzEj-7_O97aNXIlTYJqQAAAQ8"]
[Sat May 16 03:25:06.897250 2026] [:error] [pid 58587:tid 58598] [client 20.151.108.19:43976] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agdzEhfo18by17rjDulZbAAAAAA"]
[Sat May 16 03:25:07.343608 2026] [:error] [pid 58685:tid 58702] [client 20.151.108.19:59178] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agdzE_o8RwHP0JRnajX-hAAAAM8"]
[Sat May 16 03:25:07.769535 2026] [:error] [pid 58685:tid 58711] [client 20.151.108.19:59081] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agdzE_o8RwHP0JRnajX-hgAAANg"]
[Sat May 16 03:25:08.219828 2026] [:error] [pid 58685:tid 58691] [client 20.151.108.19:64251] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "agdzFPo8RwHP0JRnajX-iAAAAMQ"]
[Sat May 16 03:25:08.672719 2026] [:error] [pid 58685:tid 58710] [client 20.151.108.19:54935] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "agdzFPo8RwHP0JRnajX-iQAAANc"]
[Sat May 16 03:25:09.099268 2026] [:error] [pid 58588:tid 58629] [client 20.151.108.19:64240] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "agdzFa9IBukIqfGSZk3pywAAAEQ"]
[Sat May 16 03:25:09.541405 2026] [:error] [pid 58587:tid 58613] [client 20.151.108.19:44026] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "agdzFRfo18by17rjDulZdAAAAA8"]
[Sat May 16 03:25:09.992202 2026] [:error] [pid 58966:tid 58977] [client 20.151.108.19:50908] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "agdzFT-7_O97aNXIlTYJrgAAAQk"]
[Sat May 16 03:25:10.433029 2026] [:error] [pid 58966:tid 58982] [client 20.151.108.19:50966] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "agdzFj-7_O97aNXIlTYJrwAAAQ4"]
[Sat May 16 03:25:10.866579 2026] [:error] [pid 58685:tid 58709] [client 20.151.108.19:59092] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "agdzFvo8RwHP0JRnajX-igAAANY"]
[Sat May 16 03:25:11.304405 2026] [:error] [pid 58685:tid 58705] [client 20.151.108.19:50970] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "agdzF_o8RwHP0JRnajX-jAAAANI"]
[Sat May 16 03:25:11.740366 2026] [:error] [pid 58966:tid 58975] [client 20.151.108.19:50936] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "agdzFz-7_O97aNXIlTYJsQAAAQc"]
[Sat May 16 03:25:12.165066 2026] [:error] [pid 58685:tid 58697] [client 20.151.108.19:54932] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "agdzGPo8RwHP0JRnajX-jQAAAMo"]
[Sat May 16 03:25:12.586343 2026] [:error] [pid 58588:tid 58639] [client 20.151.108.19:50881] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "agdzGK9IBukIqfGSZk3pzgAAAE4"]
[Sat May 16 03:25:13.010431 2026] [:error] [pid 58966:tid 58991] [client 20.151.108.19:43938] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "agdzGT-7_O97aNXIlTYJsgAAARc"]
[Sat May 16 03:25:13.457306 2026] [:error] [pid 58966:tid 58986] [client 20.151.108.19:50937] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "agdzGT-7_O97aNXIlTYJtAAAARI"]
[Sat May 16 03:25:13.880102 2026] [:error] [pid 58966:tid 58968] [client 20.151.108.19:59122] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "agdzGT-7_O97aNXIlTYJtgAAAQA"]
[Sat May 16 03:25:14.361010 2026] [:error] [pid 58966:tid 58981] [client 20.151.108.19:50960] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "agdzGj-7_O97aNXIlTYJuQAAAQ0"]
[Sat May 16 03:25:14.782748 2026] [:error] [pid 58966:tid 58974] [client 20.151.108.19:64253] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "agdzGj-7_O97aNXIlTYJvAAAAQY"]
[Sat May 16 03:25:15.207324 2026] [:error] [pid 58966:tid 58970] [client 20.151.108.19:54876] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "agdzGz-7_O97aNXIlTYJvgAAAQI"]
[Sat May 16 03:25:15.629927 2026] [:error] [pid 58588:tid 58642] [client 20.151.108.19:50895] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "agdzG69IBukIqfGSZk3pzwAAAFE"]
[Sat May 16 03:25:16.050627 2026] [:error] [pid 58588:tid 58627] [client 20.151.108.19:50907] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "agdzHK9IBukIqfGSZk3p0QAAAEI"]
[Sat May 16 03:25:16.485918 2026] [:error] [pid 58966:tid 58989] [client 20.151.108.19:59156] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "agdzHD-7_O97aNXIlTYJwAAAARU"]
[Sat May 16 03:25:16.904376 2026] [:error] [pid 58966:tid 58976] [client 20.151.108.19:50976] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hypo.php"] [unique_id "agdzHD-7_O97aNXIlTYJwgAAAQg"]
[Sat May 16 03:25:17.340398 2026] [:error] [pid 58966:tid 58985] [client 20.151.108.19:64272] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agdzHT-7_O97aNXIlTYJxAAAARE"]
[Sat May 16 03:25:17.761912 2026] [:error] [pid 58966:tid 58992] [client 20.151.108.19:59170] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agdzHT-7_O97aNXIlTYJxgAAARg"]
[Sat May 16 03:25:18.191956 2026] [:error] [pid 58966:tid 58986] [client 20.151.108.19:50911] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agdzHj-7_O97aNXIlTYJxwAAARI"]
[Sat May 16 03:25:18.616339 2026] [:error] [pid 58966:tid 58968] [client 20.151.108.19:59106] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agdzHj-7_O97aNXIlTYJygAAAQA"]
[Sat May 16 03:25:19.036794 2026] [:error] [pid 58588:tid 58645] [client 20.151.108.19:59076] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "agdzH69IBukIqfGSZk3p0wAAAFQ"]
[Sat May 16 03:25:19.473581 2026] [:error] [pid 58966:tid 58974] [client 20.151.108.19:54954] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "agdzHz-7_O97aNXIlTYJzQAAAQY"]
[Sat May 16 03:25:19.895003 2026] [:error] [pid 58966:tid 58972] [client 20.151.108.19:64265] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "agdzHz-7_O97aNXIlTYJzwAAAQQ"]
[Sat May 16 03:25:20.319982 2026] [:error] [pid 58587:tid 58601] [client 20.151.108.19:51004] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "agdzIBfo18by17rjDulZdQAAAAM"]
[Sat May 16 03:25:20.769869 2026] [:error] [pid 58966:tid 58982] [client 20.151.108.19:59075] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agdzID-7_O97aNXIlTYJ0QAAAQ4"]
[Sat May 16 03:25:21.197718 2026] [:error] [pid 58966:tid 58973] [client 20.151.108.19:50971] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agdzIT-7_O97aNXIlTYJ1AAAAQU"]
[Sat May 16 03:25:21.627186 2026] [:error] [pid 58966:tid 58979] [client 20.151.108.19:54918] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agdzIT-7_O97aNXIlTYJ1gAAAQs"]
[Sat May 16 03:25:22.054340 2026] [:error] [pid 58587:tid 58618] [client 20.151.108.19:64243] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agdzIhfo18by17rjDulZdgAAABQ"]
[Sat May 16 03:25:22.488864 2026] [:error] [pid 58966:tid 58988] [client 20.151.108.19:50995] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/00.php"] [unique_id "agdzIj-7_O97aNXIlTYJ2gAAARQ"]
[Sat May 16 03:25:22.942465 2026] [:error] [pid 58589:tid 58652] [client 20.151.108.19:43993] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/00.php"] [unique_id "agdzInyiv8hWE29s3ca3YgAAAIA"]
[Sat May 16 03:25:23.426422 2026] [:error] [pid 58966:tid 58992] [client 20.151.108.19:44002] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/00.php"] [unique_id "agdzIz-7_O97aNXIlTYJ3QAAARg"]
[Sat May 16 03:25:23.888452 2026] [:error] [pid 58685:tid 58689] [client 20.151.108.19:64307] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/00.php"] [unique_id "agdzI_o8RwHP0JRnajX-jwAAAMI"]
[Sat May 16 03:25:24.369750 2026] [:error] [pid 58966:tid 58981] [client 20.151.108.19:59109] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/als.php"] [unique_id "agdzJD-7_O97aNXIlTYJ3wAAAQ0"]
[Sat May 16 03:25:24.820844 2026] [:error] [pid 58587:tid 58607] [client 20.151.108.19:44010] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/als.php"] [unique_id "agdzJBfo18by17rjDulZdwAAAAk"]
[Sat May 16 03:25:25.286252 2026] [:error] [pid 58588:tid 58648] [client 20.151.108.19:50992] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/als.php"] [unique_id "agdzJa9IBukIqfGSZk3p1QAAAFc"]
[Sat May 16 03:25:25.967047 2026] [:error] [pid 58588:tid 58631] [client 20.151.108.19:50985] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/als.php"] [unique_id "agdzJa9IBukIqfGSZk3p1gAAAEY"]
[Sat May 16 03:25:26.390937 2026] [:error] [pid 58588:tid 58629] [client 20.151.108.19:50902] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pol.php"] [unique_id "agdzJq9IBukIqfGSZk3p2QAAAEQ"]
[Sat May 16 03:25:26.831126 2026] [:error] [pid 58587:tid 58612] [client 20.151.108.19:50955] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pol.php"] [unique_id "agdzJhfo18by17rjDulZfAAAAA4"]
[Sat May 16 03:25:27.247723 2026] [:error] [pid 58588:tid 58630] [client 20.151.108.19:64309] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pol.php"] [unique_id "agdzJ69IBukIqfGSZk3p3gAAAEU"]
[Sat May 16 03:25:27.696183 2026] [:error] [pid 58587:tid 58608] [client 20.151.108.19:50968] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/pol.php"] [unique_id "agdzJxfo18by17rjDulZfQAAAAo"]
[Sat May 16 03:25:28.116005 2026] [:error] [pid 58685:tid 58706] [client 20.151.108.19:43987] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-amdin.php"] [unique_id "agdzKPo8RwHP0JRnajX-lQAAANM"]
[Sat May 16 03:25:28.530838 2026] [:error] [pid 58587:tid 58606] [client 20.151.108.19:43982] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-amdin.php"] [unique_id "agdzKBfo18by17rjDulZgAAAAAg"]
[Sat May 16 03:25:28.952619 2026] [:error] [pid 58685:tid 58693] [client 20.151.108.19:50991] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-amdin.php"] [unique_id "agdzKPo8RwHP0JRnajX-lgAAAMY"]
[Sat May 16 03:25:29.421429 2026] [:error] [pid 58685:tid 58702] [client 20.151.108.19:50989] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-amdin.php"] [unique_id "agdzKfo8RwHP0JRnajX-mAAAAM8"]
[Sat May 16 03:25:29.839433 2026] [:error] [pid 58966:tid 58985] [client 20.151.108.19:59112] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "agdzKT-7_O97aNXIlTYJ5wAAARE"]
[Sat May 16 03:25:30.264042 2026] [:error] [pid 58588:tid 58644] [client 20.151.108.19:43984] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "agdzKq9IBukIqfGSZk3p5AAAAFM"]
[Sat May 16 03:25:30.720430 2026] [:error] [pid 58966:tid 58986] [client 20.151.108.19:44008] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "agdzKj-7_O97aNXIlTYJ6gAAARI"]
[Sat May 16 03:25:31.151913 2026] [:error] [pid 58588:tid 58643] [client 20.151.108.19:50987] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sf.php"] [unique_id "agdzK69IBukIqfGSZk3p5QAAAFI"]
[Sat May 16 03:25:31.596145 2026] [:error] [pid 58587:tid 58620] [client 20.151.108.19:64225] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "agdzKxfo18by17rjDulZggAAABY"]
[Sat May 16 03:25:32.044403 2026] [:error] [pid 58685:tid 58698] [client 20.151.108.19:50891] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "agdzLPo8RwHP0JRnajX-nAAAAMs"]
[Sat May 16 03:25:32.463920 2026] [:error] [pid 58966:tid 58977] [client 20.151.108.19:54952] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "agdzLD-7_O97aNXIlTYJ8AAAAQk"]
[Sat May 16 03:25:32.898158 2026] [:error] [pid 58966:tid 58987] [client 20.151.108.19:59110] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file5.php"] [unique_id "agdzLD-7_O97aNXIlTYJ8gAAARM"]
[Sat May 16 03:25:33.345329 2026] [:error] [pid 58685:tid 58707] [client 20.151.108.19:40917] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "agdzLfo8RwHP0JRnajX-nQAAANQ"]
[Sat May 16 03:25:33.782763 2026] [:error] [pid 58966:tid 58988] [client 20.151.108.19:59091] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "agdzLT-7_O97aNXIlTYJ9gAAARQ"]
[Sat May 16 03:25:34.233093 2026] [:error] [pid 58966:tid 58986] [client 20.151.108.19:40913] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "agdzLj-7_O97aNXIlTYJ-QAAARI"]
[Sat May 16 03:25:34.700943 2026] [:error] [pid 58966:tid 58970] [client 20.151.108.19:59125] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "agdzLj-7_O97aNXIlTYJ-wAAAQI"]
[Sat May 16 03:25:35.134269 2026] [:error] [pid 58966:tid 58982] [client 20.151.108.19:59179] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agdzLz-7_O97aNXIlTYJ_QAAAQ4"]
[Sat May 16 03:25:35.617480 2026] [:error] [pid 58685:tid 58704] [client 20.151.108.19:59198] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "agdzL_o8RwHP0JRnajX-owAAANE"]
[Sat May 16 03:25:55.416523 2026] [:error] [pid 58966:tid 58974] [client 20.151.108.19:40903] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nx.php"] [unique_id "agdzQz-7_O97aNXIlTYKOwAAAQY"]
[Sat May 16 03:25:55.859142 2026] [:error] [pid 58685:tid 58696] [client 20.151.108.19:50983] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nx.php"] [unique_id "agdzQ_o8RwHP0JRnajX-rgAAAMk"]
[Sat May 16 03:25:56.318782 2026] [:error] [pid 58966:tid 58979] [client 20.151.108.19:50980] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nx.php"] [unique_id "agdzRD-7_O97aNXIlTYKPQAAAQs"]
[Sat May 16 03:25:56.764339 2026] [:error] [pid 58966:tid 58975] [client 20.151.108.19:50926] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/nx.php"] [unique_id "agdzRD-7_O97aNXIlTYKPgAAAQc"]
[Sat May 16 03:25:57.240774 2026] [:error] [pid 58685:tid 58692] [client 20.151.108.19:50880] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dr.php"] [unique_id "agdzRfo8RwHP0JRnajX-rwAAAMU"]
[Sat May 16 03:25:57.793695 2026] [:error] [pid 58685:tid 58693] [client 20.151.108.19:64205] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dr.php"] [unique_id "agdzRfo8RwHP0JRnajX-sQAAAMY"]
[Sat May 16 03:25:58.257359 2026] [:error] [pid 58966:tid 58986] [client 20.151.108.19:59174] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dr.php"] [unique_id "agdzRj-7_O97aNXIlTYKQQAAARI"]
[Sat May 16 03:25:58.792209 2026] [:error] [pid 58966:tid 58983] [client 20.151.108.19:59146] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/dr.php"] [unique_id "agdzRj-7_O97aNXIlTYKQwAAAQ8"]
[Sat May 16 03:25:59.292842 2026] [:error] [pid 58966:tid 58970] [client 20.151.108.19:44023] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xamp.php"] [unique_id "agdzRz-7_O97aNXIlTYKRgAAAQI"]
[Sat May 16 03:25:59.749737 2026] [:error] [pid 58966:tid 58981] [client 20.151.108.19:59104] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xamp.php"] [unique_id "agdzRz-7_O97aNXIlTYKRwAAAQ0"]
[Sat May 16 03:26:00.232637 2026] [:error] [pid 58966:tid 58984] [client 20.151.108.19:54850] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xamp.php"] [unique_id "agdzSD-7_O97aNXIlTYKSQAAARA"]
[Sat May 16 03:26:00.708676 2026] [:error] [pid 58589:tid 58664] [client 20.151.108.19:44000] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xamp.php"] [unique_id "agdzSHyiv8hWE29s3ca3aAAAAIw"]
[Sat May 16 03:26:01.189194 2026] [:error] [pid 58588:tid 58640] [client 20.151.108.19:44017] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cA3bHIkVhgP.php"] [unique_id "agdzSa9IBukIqfGSZk3p6gAAAE8"]
[Sat May 16 03:26:01.650361 2026] [:error] [pid 58589:tid 58665] [client 20.151.108.19:50892] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cA3bHIkVhgP.php"] [unique_id "agdzSXyiv8hWE29s3ca3aQAAAI0"]
[Sat May 16 03:26:02.087911 2026] [:error] [pid 58589:tid 58653] [client 20.151.108.19:50896] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cA3bHIkVhgP.php"] [unique_id "agdzSnyiv8hWE29s3ca3agAAAIE"]
[Sat May 16 03:26:02.521988 2026] [:error] [pid 58589:tid 58671] [client 20.151.108.19:44007] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cA3bHIkVhgP.php"] [unique_id "agdzSnyiv8hWE29s3ca3awAAAJM"]
[Sat May 16 03:26:02.953286 2026] [:error] [pid 58966:tid 58973] [client 20.151.108.19:50935] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clas11.php"] [unique_id "agdzSj-7_O97aNXIlTYKSgAAAQU"]
[Sat May 16 03:26:03.402916 2026] [:error] [pid 58685:tid 58711] [client 20.151.108.19:50945] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clas11.php"] [unique_id "agdzS_o8RwHP0JRnajX-tQAAANg"]
[Sat May 16 03:26:03.838353 2026] [:error] [pid 58685:tid 58708] [client 20.151.108.19:59134] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clas11.php"] [unique_id "agdzS_o8RwHP0JRnajX-tgAAANU"]
[Sat May 16 03:26:04.301957 2026] [:error] [pid 58588:tid 58642] [client 20.151.108.19:59127] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/clas11.php"] [unique_id "agdzTK9IBukIqfGSZk3p6wAAAFE"]
[Sat May 16 06:14:57.104662 2026] [autoindex:error] [pid 24979:tid 24984] [client 194.163.174.253:61836] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat May 16 07:11:39.328194 2026] [:error] [pid 24874:tid 24937] [client 20.62.204.16:31821] [client 20.62.204.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.62.204.16, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ageoK8iii6x3XidYGHGmuQAAAII"]
[Sat May 16 07:11:40.972184 2026] [:error] [pid 5602:tid 5624] [client 20.62.204.16:31821] [client 20.62.204.16] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ageoLNzTTsu77r3UIsnRwAAAARQ"]
[Sat May 16 09:20:57.323387 2026] [:error] [pid 5602:tid 5619] [client 190.159.36.43:44112] [client 190.159.36.43] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agfGedzTTsu77r3UIsn6iwAAAQ8"]
[Sat May 16 10:06:24.138990 2026] [:error] [pid 24867:tid 24888] [client 20.219.138.223:1845] [client 20.219.138.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agfRICDgFLCgyKq-zmYGvwAAAAc"]
[Sat May 16 10:06:24.759368 2026] [:error] [pid 24979:tid 24991] [client 20.219.138.223:1939] [client 20.219.138.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agfRILvSFUQiwLaOL2pdJQAAAMo"]
[Sat May 16 10:06:25.353064 2026] [:error] [pid 24979:tid 24994] [client 20.219.138.223:1989] [client 20.219.138.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agfRIbvSFUQiwLaOL2pdJwAAAM0"]
[Sat May 16 10:06:25.987879 2026] [:error] [pid 24979:tid 24988] [client 20.219.138.223:2018] [client 20.219.138.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agfRIbvSFUQiwLaOL2pdKAAAAMc"]
[Sat May 16 18:08:46.578876 2026] [:error] [pid 24979:tid 24996] [client 176.65.139.232:47122] [client 176.65.139.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aghCLrvSFUQiwLaOL2qbWAAAAM8"]
[Sat May 16 20:42:59.461668 2026] [:error] [pid 61361:tid 61386] [client 4.188.224.227:2690] [client 4.188.224.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aghmU5Zojzbt3jGziNl-DQAAAVc"]
[Sat May 16 20:43:00.027469 2026] [:error] [pid 24869:tid 24924] [client 4.188.224.227:2168] [client 4.188.224.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aghmVOxo3FMprMltYl45wwAAAFA"]
[Sat May 16 20:43:00.581470 2026] [:error] [pid 61463:tid 61488] [client 4.188.224.227:2136] [client 4.188.224.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aghmVDXdL1WU7nYXPmT4yQAAAdc"]
[Sat May 16 20:43:01.141321 2026] [:error] [pid 61411:tid 61420] [client 4.188.224.227:2635] [client 4.188.224.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "aghmVWVkiEwGnPL_dvEZwgAAAYc"]
[Sat May 16 21:05:53.787800 2026] [:error] [pid 61361:tid 61379] [client 185.220.175.199:42674] [client 185.220.175.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aghrsZZojzbt3jGziNmA9QAAAVA"]
[Sun May 17 02:44:22.987305 2026] [:error] [pid 24874:tid 24949] [client 20.200.208.199:4054] [client 20.200.208.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agi7Bsiii6x3XidYGHHwxQAAAI4"]
[Sun May 17 02:44:23.550695 2026] [:error] [pid 61411:tid 61425] [client 20.200.208.199:4722] [client 20.200.208.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agi7B2VkiEwGnPL_dvFJtgAAAYw"]
[Sun May 17 02:44:24.162857 2026] [:error] [pid 24979:tid 24984] [client 20.200.208.199:3928] [client 20.200.208.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agi7CLvSFUQiwLaOL2rKowAAAMM"]
[Sun May 17 02:44:24.737170 2026] [:error] [pid 24979:tid 24994] [client 20.200.208.199:3139] [client 20.200.208.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agi7CLvSFUQiwLaOL2rKpQAAAM0"]
[Sun May 17 04:13:47.221897 2026] [:error] [pid 59060:tid 59077] [client 20.219.31.81:1216] [client 20.219.31.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agjP-_vwvq3bndkPE4m7uAAAAAg"]
[Sun May 17 04:13:47.805155 2026] [:error] [pid 59166:tid 59172] [client 20.219.31.81:1425] [client 20.219.31.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agjP-0_puQ1I47_0UrieowAAAMQ"]
[Sun May 17 04:13:48.392499 2026] [:error] [pid 36652:tid 36674] [client 20.219.31.81:1230] [client 20.219.31.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agjP_DZrzQadnZADvj_1vwAAARQ"]
[Sun May 17 04:13:48.985475 2026] [:error] [pid 59062:tid 59124] [client 20.219.31.81:6974] [client 20.219.31.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agjP_D4V9GkVWmCFmGar-AAAAIE"]
[Sun May 17 07:40:16.021441 2026] [:error] [pid 59060:tid 59087] [client 103.253.27.67:63883] [client 103.253.27.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "agkAYPvwvq3bndkPE4nKrgAAABI"]
[Sun May 17 07:40:22.261188 2026] [:error] [pid 59061:tid 59096] [client 103.253.27.67:63893] [client 103.253.27.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "agkAZoYS410zAmsYkoL78AAAAEA"]
[Sun May 17 09:13:03.987140 2026] [:error] [pid 59062:tid 59135] [client 74.7.243.128:59866] [client 74.7.243.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.128, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agkWHz4V9GkVWmCFmGbLqwAAAIw"], referer: https://makifim.com.au/
[Sun May 17 11:06:37.286599 2026] [:error] [pid 36652:tid 36678] [client 92.118.39.29:58690] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "agkwvTZrzQadnZADvj85iQAAARg"]
[Sun May 17 13:03:22.757851 2026] [:error] [pid 17234:tid 17248] [client 192.96.159.129:63431] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "aglMGtJ4QOrYRCeDR2g_RgAAAUw"]
[Sun May 17 22:22:19.313831 2026] [:error] [pid 10835:tid 10892] [client 5.255.127.166:42428] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "agnPG0k8lW0-dtknLl813QAAAhM"]
[Sun May 17 22:22:19.313959 2026] [:error] [pid 11079:tid 11125] [client 5.255.127.166:42442] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "agnPG2eR3-DrxhvUqxEJXQAAAlU"]
[Sun May 17 22:22:22.090213 2026] [:error] [pid 59062:tid 59146] [client 5.255.127.166:42456] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "agnPHj4V9GkVWmCFmGY6AQAAAJc"]
[Sun May 17 22:22:22.564031 2026] [:error] [pid 59062:tid 59128] [client 5.255.127.166:40736] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "agnPHj4V9GkVWmCFmGY6AgAAAIU"]
[Sun May 17 22:22:22.573706 2026] [:error] [pid 59062:tid 59135] [client 5.255.127.166:40988] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "agnPHj4V9GkVWmCFmGY6CwAAAIw"]
[Sun May 17 22:22:22.575635 2026] [:error] [pid 59062:tid 59124] [client 5.255.127.166:40770] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.bak"] [unique_id "agnPHj4V9GkVWmCFmGY6DAAAAIE"]
[Sun May 17 22:22:22.597811 2026] [:error] [pid 10835:tid 10887] [client 5.255.127.166:40820] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.backup"] [unique_id "agnPHkk8lW0-dtknLl814AAAAg4"]
[Sun May 17 22:22:22.599367 2026] [:error] [pid 10834:tid 10852] [client 5.255.127.166:40900] [client 5.255.127.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "agnPHhISNQ_Nf83-Vpq40gAAAcY"]
[Sun May 17 22:43:51.089785 2026] [:error] [pid 11079:tid 11118] [client 104.198.233.119:57521] [client 104.198.233.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.233.119, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agnUJ2eR3-DrxhvUqxEMMgAAAk4"]
[Sun May 17 22:43:53.076435 2026] [:error] [pid 11079:tid 11109] [client 104.198.233.119:57521] [client 104.198.233.119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agnUKWeR3-DrxhvUqxEMNQAAAkg"]
[Sun May 17 22:43:54.277902 2026] [:error] [pid 11079:tid 11105] [client 104.198.233.119:57521] [client 104.198.233.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.233.119, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agnUKmeR3-DrxhvUqxEMNwAAAkU"]
[Sun May 17 22:43:55.984698 2026] [:error] [pid 59166:tid 59184] [client 104.198.233.119:57536] [client 104.198.233.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.233.119, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agnUK0_puQ1I47_0Urj1ygAAANA"]
[Sun May 17 22:43:57.642139 2026] [:error] [pid 59166:tid 59177] [client 104.198.233.119:62399] [client 104.198.233.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.233.119, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agnULU_puQ1I47_0Urj1ywAAAMk"]
[Sun May 17 22:43:59.336793 2026] [:error] [pid 59062:tid 59145] [client 104.198.233.119:62406] [client 104.198.233.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.233.119, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agnULz4V9GkVWmCFmGY--wAAAJY"]
[Sun May 17 22:44:01.024731 2026] [:error] [pid 59166:tid 59179] [client 104.198.233.119:63924] [client 104.198.233.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.233.119, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agnUMU_puQ1I47_0Urj1zAAAAMs"]
[Sun May 17 22:44:01.024870 2026] [:error] [pid 59166:tid 59179] [client 104.198.233.119:63924] [client 104.198.233.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.198.233.119, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agnUMU_puQ1I47_0Urj1zAAAAMs"]
[Mon May 18 00:35:21.590535 2026] [:error] [pid 59060:tid 59082] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.161.151, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agnuSfvwvq3bndkPE4n_sQAAAA0"], referer: https://duckduckgo.com/
[Mon May 18 00:35:28.503776 2026] [:error] [pid 59060:tid 59088] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agnuUPvwvq3bndkPE4n_twAAABM"], referer: https://www.google.com/search?q=wordpress+2026
[Mon May 18 00:35:28.605381 2026] [:error] [pid 59060:tid 59078] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.161.151, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agnuUPvwvq3bndkPE4n_uAAAAAk"], referer: https://makifim.com.au/wp-login.php
[Mon May 18 00:35:31.808078 2026] [:error] [pid 59060:tid 59075] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.161.151, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agnuU_vwvq3bndkPE4n_ugAAAAY"], referer: https://makifim.com.au/wp-login.php
[Mon May 18 00:35:32.700029 2026] [:error] [pid 59060:tid 59092] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.161.151, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agnuVPvwvq3bndkPE4n_uwAAABc"], referer: https://makifim.com.au/wp-login.php
[Mon May 18 00:35:34.517742 2026] [:error] [pid 59060:tid 59093] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.161.151, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agnuVvvwvq3bndkPE4n_vQAAABg"], referer: https://makifim.com.au/wp-login.php
[Mon May 18 00:35:35.440946 2026] [:error] [pid 59060:tid 59083] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.161.151, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agnuV_vwvq3bndkPE4n_vgAAAA4"], referer: https://makifim.com.au/wp-login.php
[Mon May 18 00:35:37.186757 2026] [:error] [pid 59060:tid 59087] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.161.151, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agnuWfvwvq3bndkPE4n_wAAAABI"], referer: https://makifim.com.au/wp-login.php
[Mon May 18 00:35:38.091979 2026] [:error] [pid 59060:tid 59080] [client 103.59.161.151:65501] [client 103.59.161.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.161.151, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agnuWvvwvq3bndkPE4n_wQAAAAs"], referer: https://makifim.com.au/wp-login.php
[Mon May 18 03:54:57.654966 2026] [:error] [pid 20777:tid 20806] [client 193.176.211.197:48309] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/"] [unique_id "agodEYHClf0EYFQBeRE44gAAABQ"]
[Mon May 18 03:54:58.023085 2026] [:error] [pid 20884:tid 20905] [client 193.176.211.189:38861] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "agodEnv9K_lRldrJG3Ob1QAAANM"]
[Mon May 18 03:54:58.382290 2026] [:error] [pid 20778:tid 20825] [client 193.176.211.187:30821] [client 193.176.211.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit-tags.php"] [unique_id "agodEmb9K2_TPGoCpArk1QAAAEc"]
[Mon May 18 03:54:58.716724 2026] [:error] [pid 20779:tid 20859] [client 193.176.211.165:32829] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin.php"] [unique_id "agodEiF3Tl5ZGU-QyEDH5gAAAI0"]
[Mon May 18 03:54:59.038712 2026] [:error] [pid 20778:tid 20833] [client 193.176.211.186:40279] [client 193.176.211.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wpx/"] [unique_id "agodE2b9K2_TPGoCpArk1gAAAE8"]
[Mon May 18 03:54:59.382292 2026] [:error] [pid 20778:tid 20832] [client 193.176.211.175:39881] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/Nxploited/Nx.php"] [unique_id "agodE2b9K2_TPGoCpArk2AAAAE4"]
[Mon May 18 03:54:59.735177 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.160:58201] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/filemanager.php"] [unique_id "agodEyF3Tl5ZGU-QyEDH6AAAAJI"]
[Mon May 18 03:55:00.082640 2026] [:error] [pid 20779:tid 20846] [client 193.176.211.173:44531] [client 193.176.211.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "agodFCF3Tl5ZGU-QyEDH6QAAAIA"]
[Mon May 18 03:55:00.420156 2026] [:error] [pid 20779:tid 20856] [client 193.176.211.182:45701] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "agodFCF3Tl5ZGU-QyEDH6gAAAIo"]
[Mon May 18 03:55:00.781839 2026] [:error] [pid 20779:tid 20851] [client 193.176.211.199:33997] [client 193.176.211.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/"] [unique_id "agodFCF3Tl5ZGU-QyEDH7AAAAIU"]
[Mon May 18 03:55:01.123921 2026] [:error] [pid 20884:tid 20890] [client 193.176.211.181:62421] [client 193.176.211.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agodFXv9K_lRldrJG3Ob2QAAAMQ"]
[Mon May 18 03:55:01.491035 2026] [:error] [pid 20778:tid 20824] [client 193.176.211.168:64709] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/"] [unique_id "agodFWb9K2_TPGoCpArk2wAAAEY"]
[Mon May 18 03:55:01.824471 2026] [:error] [pid 20884:tid 20898] [client 193.176.211.177:65465] [client 193.176.211.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/users.php"] [unique_id "agodFXv9K_lRldrJG3Ob2wAAAMw"]
[Mon May 18 03:55:02.148319 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.154:23121] [client 193.176.211.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "agodFnv9K_lRldrJG3Ob3QAAAMg"]
[Mon May 18 03:55:02.486589 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.173:34547] [client 193.176.211.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "agodFnv9K_lRldrJG3Ob3gAAAMI"]
[Mon May 18 03:55:02.984229 2026] [:error] [pid 20884:tid 20901] [client 193.176.211.170:40237] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "agodFnv9K_lRldrJG3Ob4AAAAM8"]
[Mon May 18 03:55:03.585680 2026] [:error] [pid 20884:tid 20889] [client 193.176.211.175:35993] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "agodF3v9K_lRldrJG3Ob4QAAAMM"]
[Mon May 18 03:55:04.190431 2026] [:error] [pid 20779:tid 20847] [client 193.176.211.183:45891] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "agodGCF3Tl5ZGU-QyEDH7gAAAIE"]
[Mon May 18 03:55:04.836196 2026] [:error] [pid 20777:tid 20796] [client 193.176.211.165:38369] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/classwithtostring.php"] [unique_id "agodGIHClf0EYFQBeRE44wAAAAo"]
[Mon May 18 03:55:05.178735 2026] [:error] [pid 20778:tid 20843] [client 193.176.211.169:49449] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/item.php"] [unique_id "agodGWb9K2_TPGoCpArk3gAAAFg"]
[Mon May 18 03:55:05.737897 2026] [:error] [pid 20779:tid 20848] [client 193.176.211.152:39929] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/admin.php"] [unique_id "agodGSF3Tl5ZGU-QyEDH8wAAAII"]
[Mon May 18 03:55:06.082257 2026] [:error] [pid 20779:tid 20855] [client 193.176.211.197:33019] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/"] [unique_id "agodGiF3Tl5ZGU-QyEDH9QAAAIk"]
[Mon May 18 03:55:06.433162 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.193:61183] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "agodGiF3Tl5ZGU-QyEDH9gAAAJI"]
[Mon May 18 03:55:06.787276 2026] [:error] [pid 20777:tid 20789] [client 193.176.211.151:56861] [client 193.176.211.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/edit-tags.php"] [unique_id "agodGoHClf0EYFQBeRE45AAAAAM"]
[Mon May 18 03:55:07.123042 2026] [:error] [pid 20777:tid 20810] [client 193.176.211.167:62851] [client 193.176.211.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agodG4HClf0EYFQBeRE45QAAABg"]
[Mon May 18 03:55:07.482416 2026] [:error] [pid 20779:tid 20853] [client 193.176.211.197:42719] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "agodGyF3Tl5ZGU-QyEDH-AAAAIc"]
[Mon May 18 03:55:07.828403 2026] [:error] [pid 20779:tid 20851] [client 193.176.211.193:31777] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/updates.php"] [unique_id "agodGyF3Tl5ZGU-QyEDH-QAAAIU"]
[Mon May 18 03:55:08.152541 2026] [:error] [pid 20779:tid 20867] [client 193.176.211.156:51253] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/"] [unique_id "agodHCF3Tl5ZGU-QyEDH-gAAAJU"]
[Mon May 18 03:55:08.487438 2026] [:error] [pid 20779:tid 20868] [client 193.176.211.184:61219] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/1.php"] [unique_id "agodHCF3Tl5ZGU-QyEDH_AAAAJY"]
[Mon May 18 03:55:08.830130 2026] [:error] [pid 20779:tid 20848] [client 193.176.211.156:51877] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "agodHCF3Tl5ZGU-QyEDH_gAAAII"]
[Mon May 18 03:55:09.180534 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.169:53415] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "agodHSF3Tl5ZGU-QyEDIAAAAAJI"]
[Mon May 18 03:55:09.532619 2026] [:error] [pid 20779:tid 20846] [client 193.176.211.195:31781] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "agodHSF3Tl5ZGU-QyEDIAwAAAIA"]
[Mon May 18 03:55:09.885938 2026] [:error] [pid 20777:tid 20802] [client 193.176.211.162:26491] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah.php"] [unique_id "agodHYHClf0EYFQBeRE45wAAABA"]
[Mon May 18 03:55:10.232192 2026] [:error] [pid 20777:tid 20806] [client 193.176.211.172:59907] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-config-sample.php"] [unique_id "agodHoHClf0EYFQBeRE46AAAABQ"]
[Mon May 18 03:55:10.581071 2026] [:error] [pid 20778:tid 20825] [client 193.176.211.164:26641] [client 193.176.211.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/"] [unique_id "agodHmb9K2_TPGoCpArk4AAAAEc"]
[Mon May 18 03:55:10.922665 2026] [:error] [pid 20778:tid 20833] [client 193.176.211.160:25497] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/"] [unique_id "agodHmb9K2_TPGoCpArk4QAAAE8"]
[Mon May 18 03:55:11.277860 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.197:46297] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "agodH2b9K2_TPGoCpArk4wAAAFI"]
[Mon May 18 03:55:11.623272 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.166:28417] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "agodH3v9K_lRldrJG3Ob6AAAAMI"]
[Mon May 18 03:55:11.948390 2026] [:error] [pid 20777:tid 20807] [client 193.176.211.157:54557] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "agodH4HClf0EYFQBeRE46QAAABU"]
[Mon May 18 03:55:12.314944 2026] [:error] [pid 20778:tid 20820] [client 193.176.211.151:52471] [client 193.176.211.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/radio.php"] [unique_id "agodIGb9K2_TPGoCpArk5AAAAEI"]
[Mon May 18 03:55:12.638175 2026] [:error] [pid 20778:tid 20824] [client 193.176.211.192:63411] [client 193.176.211.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/"] [unique_id "agodIGb9K2_TPGoCpArk5QAAAEY"]
[Mon May 18 03:55:12.980836 2026] [:error] [pid 20884:tid 20886] [client 193.176.211.169:44037] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/"] [unique_id "agodIHv9K_lRldrJG3Ob6gAAAMA"]
[Mon May 18 03:55:13.325896 2026] [:error] [pid 20884:tid 20902] [client 193.176.211.170:53431] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agodIXv9K_lRldrJG3Ob6wAAANA"]
[Mon May 18 03:55:13.648059 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.170:32023] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files/"] [unique_id "agodIWb9K2_TPGoCpArk5gAAAEQ"]
[Mon May 18 03:55:13.982941 2026] [:error] [pid 20778:tid 20818] [client 193.176.211.197:35305] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "agodIWb9K2_TPGoCpArk5wAAAEA"]
[Mon May 18 03:55:14.322577 2026] [:error] [pid 20884:tid 20896] [client 193.176.211.196:23619] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "agodInv9K_lRldrJG3Ob7AAAAMo"]
[Mon May 18 03:55:14.678923 2026] [:error] [pid 20884:tid 20897] [client 193.176.211.172:56199] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "agodInv9K_lRldrJG3Ob7QAAAMs"]
[Mon May 18 03:55:15.022959 2026] [:error] [pid 20884:tid 20903] [client 193.176.211.162:51441] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/"] [unique_id "agodI3v9K_lRldrJG3Ob7wAAANE"]
[Mon May 18 03:55:15.349666 2026] [:error] [pid 20777:tid 20795] [client 193.176.211.160:42109] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "agodI4HClf0EYFQBeRE46gAAAAk"]
[Mon May 18 03:55:15.681244 2026] [:error] [pid 20884:tid 20904] [client 193.176.211.184:33473] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "agodI3v9K_lRldrJG3Ob8QAAANI"]
[Mon May 18 03:55:16.029174 2026] [:error] [pid 20884:tid 20887] [client 193.176.211.152:36045] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "agodJHv9K_lRldrJG3Ob8gAAAME"]
[Mon May 18 03:55:16.350347 2026] [:error] [pid 20778:tid 20828] [client 193.176.211.182:52701] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin.php"] [unique_id "agodJGb9K2_TPGoCpArk6wAAAEo"]
[Mon May 18 03:55:16.686074 2026] [:error] [pid 20778:tid 20837] [client 193.176.211.179:34073] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agodJGb9K2_TPGoCpArk7AAAAFM"]
[Mon May 18 03:55:17.026248 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.165:62403] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/x.php"] [unique_id "agodJSF3Tl5ZGU-QyEDICAAAAJI"]
[Mon May 18 03:55:17.349372 2026] [:error] [pid 20884:tid 20906] [client 193.176.211.196:24651] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/"] [unique_id "agodJXv9K_lRldrJG3Ob9wAAANQ"]
[Mon May 18 03:55:17.681838 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.157:44083] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/"] [unique_id "agodJXv9K_lRldrJG3Ob-AAAANg"]
[Mon May 18 03:55:18.039559 2026] [:error] [pid 20778:tid 20823] [client 193.176.211.168:32387] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "agodJmb9K2_TPGoCpArk7QAAAEU"]
[Mon May 18 03:55:18.387527 2026] [:error] [pid 20778:tid 20819] [client 193.176.211.184:26065] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/config.php"] [unique_id "agodJmb9K2_TPGoCpArk7wAAAEE"]
[Mon May 18 03:55:18.721851 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.183:46419] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/"] [unique_id "agodJnv9K_lRldrJG3Ob-QAAANc"]
[Mon May 18 03:55:19.086346 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.182:60433] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "agodJ3v9K_lRldrJG3Ob-gAAAM0"]
[Mon May 18 03:55:19.600091 2026] [:error] [pid 20779:tid 20850] [client 193.176.211.176:63883] [client 193.176.211.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system.php"] [unique_id "agodJyF3Tl5ZGU-QyEDICQAAAIQ"]
[Mon May 18 03:55:20.039297 2026] [:error] [pid 20778:tid 20824] [client 193.176.211.158:64229] [client 193.176.211.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/"] [unique_id "agodKGb9K2_TPGoCpArk8QAAAEY"]
[Mon May 18 03:55:20.384842 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.57:20857] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/.well-known/"] [unique_id "agodKGb9K2_TPGoCpArk8gAAAEQ"]
[Mon May 18 03:55:20.730342 2026] [:error] [pid 20778:tid 20829] [client 193.176.211.185:51447] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agodKGb9K2_TPGoCpArk9AAAAEs"]
[Mon May 18 03:55:21.134811 2026] [:error] [pid 20777:tid 20790] [client 193.176.211.169:55551] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "agodKYHClf0EYFQBeRE47AAAAAQ"]
[Mon May 18 03:55:21.482556 2026] [:error] [pid 20779:tid 20865] [client 193.176.211.199:32901] [client 193.176.211.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/log.php"] [unique_id "agodKSF3Tl5ZGU-QyEDICgAAAJM"]
[Mon May 18 03:55:21.823070 2026] [:error] [pid 20778:tid 20826] [client 193.176.211.169:46439] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/"] [unique_id "agodKWb9K2_TPGoCpArk9gAAAEg"]
[Mon May 18 03:55:22.187162 2026] [:error] [pid 20779:tid 20860] [client 193.176.211.185:61997] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/maint/"] [unique_id "agodKiF3Tl5ZGU-QyEDICwAAAI4"]
[Mon May 18 03:55:22.525187 2026] [:error] [pid 20779:tid 20861] [client 193.176.211.168:31043] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/simple.php"] [unique_id "agodKiF3Tl5ZGU-QyEDIDAAAAI8"]
[Mon May 18 03:55:22.890895 2026] [:error] [pid 20779:tid 20867] [client 193.176.211.191:38577] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ab.php"] [unique_id "agodKiF3Tl5ZGU-QyEDIDQAAAJU"]
[Mon May 18 03:55:23.220352 2026] [:error] [pid 20779:tid 20856] [client 193.176.211.167:63271] [client 193.176.211.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "agodKyF3Tl5ZGU-QyEDIDgAAAIo"]
[Mon May 18 03:55:23.543369 2026] [:error] [pid 20777:tid 20786] [client 193.176.211.172:60947] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-wlx.php"] [unique_id "agodK4HClf0EYFQBeRE48QAAAAA"]
[Mon May 18 03:55:23.882491 2026] [:error] [pid 20777:tid 20810] [client 193.176.211.194:25601] [client 193.176.211.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "agodK4HClf0EYFQBeRE49AAAABg"]
[Mon May 18 03:55:24.224405 2026] [:error] [pid 20778:tid 20833] [client 193.176.211.157:55447] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "agodLGb9K2_TPGoCpArk-QAAAE8"]
[Mon May 18 03:55:24.547309 2026] [:error] [pid 20779:tid 20868] [client 193.176.211.173:52617] [client 193.176.211.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "agodLCF3Tl5ZGU-QyEDIDwAAAJY"]
[Mon May 18 03:55:24.881410 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.189:28251] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/"] [unique_id "agodLGb9K2_TPGoCpArk-gAAAFI"]
[Mon May 18 03:55:25.226408 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.185:32897] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "agodLSF3Tl5ZGU-QyEDIEgAAAJI"]
[Mon May 18 03:55:25.581554 2026] [:error] [pid 20779:tid 20847] [client 193.176.211.188:38851] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/Transport/"] [unique_id "agodLSF3Tl5ZGU-QyEDIFAAAAIE"]
[Mon May 18 03:55:25.922004 2026] [:error] [pid 20779:tid 20853] [client 193.176.211.175:26039] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-file.php"] [unique_id "agodLSF3Tl5ZGU-QyEDIFgAAAIc"]
[Mon May 18 03:55:26.246540 2026] [:error] [pid 20777:tid 20795] [client 193.176.211.155:29925] [client 193.176.211.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/m.php"] [unique_id "agodLoHClf0EYFQBeRE4-wAAAAk"]
[Mon May 18 03:55:26.582875 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.183:58373] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "agodLmb9K2_TPGoCpArk_gAAAEQ"]
[Mon May 18 03:55:26.921546 2026] [:error] [pid 20777:tid 20788] [client 193.176.211.181:52747] [client 193.176.211.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "agodLoHClf0EYFQBeRE4_QAAAAI"]
[Mon May 18 03:55:27.280111 2026] [:error] [pid 20779:tid 20852] [client 193.176.211.154:30575] [client 193.176.211.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/a.php"] [unique_id "agodLyF3Tl5ZGU-QyEDIGQAAAIY"]
[Mon May 18 03:55:27.621442 2026] [:error] [pid 20778:tid 20843] [client 193.176.211.172:27447] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "agodL2b9K2_TPGoCpArlAAAAAFg"]
[Mon May 18 03:55:27.980072 2026] [:error] [pid 20777:tid 20790] [client 193.176.211.164:22627] [client 193.176.211.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/admin.php"] [unique_id "agodL4HClf0EYFQBeRE4_gAAAAQ"]
[Mon May 18 03:55:28.322976 2026] [:error] [pid 20778:tid 20825] [client 193.176.211.188:37277] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "agodMGb9K2_TPGoCpArlAgAAAEc"]
[Mon May 18 03:55:28.684691 2026] [:error] [pid 20778:tid 20832] [client 193.176.211.156:22895] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "agodMGb9K2_TPGoCpArlBAAAAE4"]
[Mon May 18 03:55:29.031889 2026] [:error] [pid 20777:tid 20796] [client 193.176.211.195:60263] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/admin/function.php"] [unique_id "agodMYHClf0EYFQBeRE5AAAAAAo"]
[Mon May 18 03:55:29.384847 2026] [:error] [pid 20777:tid 20804] [client 193.176.211.198:31169] [client 193.176.211.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/"] [unique_id "agodMYHClf0EYFQBeRE5AQAAABI"]
[Mon May 18 03:55:29.725826 2026] [:error] [pid 20884:tid 20906] [client 193.176.211.191:56589] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "agodMXv9K_lRldrJG3Ob_QAAANQ"]
[Mon May 18 03:55:30.052365 2026] [:error] [pid 20884:tid 20893] [client 193.176.211.181:44789] [client 193.176.211.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "agodMnv9K_lRldrJG3Ob_gAAAMc"]
[Mon May 18 03:55:30.414210 2026] [:error] [pid 20777:tid 20797] [client 193.176.211.180:27029] [client 193.176.211.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agodMoHClf0EYFQBeRE5AgAAAAs"]
[Mon May 18 03:55:30.790648 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.185:26849] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/header.php"] [unique_id "agodMnv9K_lRldrJG3Ob_wAAANg"]
[Mon May 18 03:55:31.133088 2026] [:error] [pid 20777:tid 20806] [client 193.176.211.194:38589] [client 193.176.211.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "agodM4HClf0EYFQBeRE5BAAAABQ"]
[Mon May 18 03:55:31.457907 2026] [:error] [pid 20777:tid 20795] [client 193.176.211.163:65371] [client 193.176.211.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "agodM4HClf0EYFQBeRE5BQAAAAk"]
[Mon May 18 03:55:31.825418 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.57:53373] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/packed.php"] [unique_id "agodM3v9K_lRldrJG3OcAwAAAM0"]
[Mon May 18 03:55:32.149296 2026] [:error] [pid 20778:tid 20835] [client 193.176.211.155:22189] [client 193.176.211.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "agodNGb9K2_TPGoCpArlDQAAAFE"]
[Mon May 18 03:55:32.480371 2026] [:error] [pid 20778:tid 20826] [client 193.176.211.184:45981] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/about.php"] [unique_id "agodNGb9K2_TPGoCpArlDwAAAEg"]
[Mon May 18 03:55:32.885675 2026] [:error] [pid 20778:tid 20831] [client 193.176.211.195:20921] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agodNGb9K2_TPGoCpArlEQAAAE0"]
[Mon May 18 03:55:33.281591 2026] [:error] [pid 20884:tid 20904] [client 193.176.211.153:45141] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "agodNXv9K_lRldrJG3OcBgAAANI"]
[Mon May 18 03:55:33.637875 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.198:54613] [client 193.176.211.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "agodNXv9K_lRldrJG3OcBwAAAMI"]
[Mon May 18 03:55:33.982673 2026] [:error] [pid 20884:tid 20901] [client 193.176.211.191:35205] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "agodNXv9K_lRldrJG3OcCAAAAM8"]
[Mon May 18 03:55:35.082028 2026] [:error] [pid 20779:tid 20849] [client 193.176.211.153:63081] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agodNyF3Tl5ZGU-QyEDIIQAAAIM"]
[Mon May 18 03:55:35.628522 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.152:37983] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content.php"] [unique_id "agodN3v9K_lRldrJG3OcEQAAANg"]
[Mon May 18 03:55:35.949852 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.191:34517] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/gk.php"] [unique_id "agodN3v9K_lRldrJG3OcEwAAAM0"]
[Mon May 18 03:55:36.284175 2026] [:error] [pid 20779:tid 20862] [client 193.176.211.174:50365] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/"] [unique_id "agodOCF3Tl5ZGU-QyEDIIgAAAJA"]
[Mon May 18 03:55:36.826857 2026] [:error] [pid 20779:tid 20850] [client 193.176.211.159:44217] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/config.php"] [unique_id "agodOCF3Tl5ZGU-QyEDIJgAAAIQ"]
[Mon May 18 03:55:37.183467 2026] [:error] [pid 20884:tid 20897] [client 193.176.211.169:45293] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/"] [unique_id "agodOXv9K_lRldrJG3OcFgAAAMs"]
[Mon May 18 03:55:37.518480 2026] [:error] [pid 20884:tid 20887] [client 193.176.211.198:39205] [client 193.176.211.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "agodOXv9K_lRldrJG3OcFwAAAME"]
[Mon May 18 03:55:37.841057 2026] [:error] [pid 20779:tid 20870] [client 193.176.211.183:40299] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "agodOSF3Tl5ZGU-QyEDIJwAAAJg"]
[Mon May 18 03:55:38.182873 2026] [:error] [pid 20777:tid 20797] [client 193.176.211.190:33137] [client 193.176.211.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "agodOoHClf0EYFQBeRE5EAAAAAs"]
[Mon May 18 03:55:38.518812 2026] [:error] [pid 20779:tid 20852] [client 193.176.211.195:38609] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/login.php"] [unique_id "agodOiF3Tl5ZGU-QyEDIKAAAAIY"]
[Mon May 18 03:55:38.841211 2026] [:error] [pid 20884:tid 20907] [client 193.176.211.199:38015] [client 193.176.211.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/IXR/"] [unique_id "agodOnv9K_lRldrJG3OcGwAAANU"]
[Mon May 18 03:55:39.180874 2026] [:error] [pid 20779:tid 20851] [client 193.176.211.166:37937] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/plugin/"] [unique_id "agodOyF3Tl5ZGU-QyEDIKgAAAIU"]
[Mon May 18 03:55:39.524758 2026] [:error] [pid 20779:tid 20856] [client 193.176.211.184:34515] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "agodOyF3Tl5ZGU-QyEDIKwAAAIo"]
[Mon May 18 03:55:39.883549 2026] [:error] [pid 20884:tid 20897] [client 193.176.211.180:53285] [client 193.176.211.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/buy.php"] [unique_id "agodO3v9K_lRldrJG3OcHQAAAMs"]
[Mon May 18 03:55:40.228706 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.186:26597] [client 193.176.211.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agodPHv9K_lRldrJG3OcHgAAAMg"]
[Mon May 18 03:55:40.580833 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.156:23709] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "agodPHv9K_lRldrJG3OcHwAAAMY"]
[Mon May 18 03:55:40.935662 2026] [:error] [pid 20884:tid 20907] [client 193.176.211.179:49729] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/options.php"] [unique_id "agodPHv9K_lRldrJG3OcIAAAANU"]
[Mon May 18 03:55:41.283392 2026] [:error] [pid 20884:tid 20896] [client 193.176.211.191:60131] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/panel.php"] [unique_id "agodPXv9K_lRldrJG3OcIQAAAMo"]
[Mon May 18 03:55:41.628636 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.182:48437] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "agodPXv9K_lRldrJG3OcIwAAAMk"]
[Mon May 18 03:55:41.977243 2026] [:error] [pid 20779:tid 20848] [client 193.176.211.178:37793] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agodPSF3Tl5ZGU-QyEDILgAAAII"]
[Mon May 18 03:55:42.317871 2026] [:error] [pid 20884:tid 20904] [client 193.176.211.198:52511] [client 193.176.211.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-good.php"] [unique_id "agodPnv9K_lRldrJG3OcJwAAANI"]
[Mon May 18 03:55:42.678034 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.193:29103] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "agodPnv9K_lRldrJG3OcKwAAAMY"]
[Mon May 18 03:55:43.028579 2026] [:error] [pid 20884:tid 20907] [client 193.176.211.171:63049] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "agodP3v9K_lRldrJG3OcLQAAANU"]
[Mon May 18 03:55:43.397480 2026] [:error] [pid 20777:tid 20790] [client 193.176.211.197:52233] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/class.php"] [unique_id "agodP4HClf0EYFQBeRE5GgAAAAQ"]
[Mon May 18 03:55:43.729073 2026] [:error] [pid 20778:tid 20827] [client 193.176.211.196:38129] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-bes.php"] [unique_id "agodP2b9K2_TPGoCpArlFAAAAEk"]
[Mon May 18 03:55:44.080773 2026] [:error] [pid 20778:tid 20818] [client 193.176.211.200:34139] [client 193.176.211.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/"] [unique_id "agodQGb9K2_TPGoCpArlFQAAAEA"]
[Mon May 18 03:55:44.438970 2026] [:error] [pid 20778:tid 20838] [client 193.176.211.189:55383] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/themes.php"] [unique_id "agodQGb9K2_TPGoCpArlFgAAAFQ"]
[Mon May 18 03:55:44.783876 2026] [:error] [pid 20778:tid 20831] [client 193.176.211.160:34585] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "agodQGb9K2_TPGoCpArlFwAAAE0"]
[Mon May 18 03:55:45.125648 2026] [:error] [pid 20777:tid 20805] [client 193.176.211.188:28359] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "agodQYHClf0EYFQBeRE5HQAAABM"]
[Mon May 18 03:55:45.482230 2026] [:error] [pid 20779:tid 20857] [client 193.176.211.170:49357] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/"] [unique_id "agodQSF3Tl5ZGU-QyEDINQAAAIs"]
[Mon May 18 03:55:45.819919 2026] [:error] [pid 20779:tid 20858] [client 193.176.211.154:63189] [client 193.176.211.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "agodQSF3Tl5ZGU-QyEDINgAAAIw"]
[Mon May 18 03:55:46.182226 2026] [:error] [pid 20777:tid 20786] [client 193.176.211.167:42003] [client 193.176.211.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "agodQoHClf0EYFQBeRE5HgAAAAA"]
[Mon May 18 03:55:46.539376 2026] [:error] [pid 20779:tid 20856] [client 193.176.211.191:45743] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/config.php"] [unique_id "agodQiF3Tl5ZGU-QyEDIOAAAAIo"]
[Mon May 18 03:55:46.900499 2026] [:error] [pid 20777:tid 20797] [client 193.176.211.190:57339] [client 193.176.211.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "agodQoHClf0EYFQBeRE5IAAAAAs"]
[Mon May 18 03:55:47.238097 2026] [:error] [pid 20779:tid 20848] [client 193.176.211.190:42267] [client 193.176.211.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/root.php"] [unique_id "agodQyF3Tl5ZGU-QyEDIOwAAAII"]
[Mon May 18 03:55:47.589336 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.58:62973] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "agodQyF3Tl5ZGU-QyEDIPQAAAJI"]
[Mon May 18 03:55:47.926246 2026] [:error] [pid 20778:tid 20830] [client 193.176.211.151:56965] [client 193.176.211.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "agodQ2b9K2_TPGoCpArlGQAAAEw"]
[Mon May 18 03:55:48.288622 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.172:41097] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "agodRGb9K2_TPGoCpArlGgAAAFI"]
[Mon May 18 03:55:48.622103 2026] [:error] [pid 20778:tid 20828] [client 193.176.211.155:39281] [client 193.176.211.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/"] [unique_id "agodRGb9K2_TPGoCpArlGwAAAEo"]
[Mon May 18 03:55:48.982553 2026] [:error] [pid 20778:tid 20833] [client 193.176.211.191:28549] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wa/"] [unique_id "agodRGb9K2_TPGoCpArlHQAAAE8"]
[Mon May 18 03:55:49.321991 2026] [:error] [pid 20777:tid 20795] [client 193.176.211.162:20733] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/network/"] [unique_id "agodRYHClf0EYFQBeRE5IgAAAAk"]
[Mon May 18 03:55:49.648787 2026] [:error] [pid 20777:tid 20799] [client 193.176.211.154:63487] [client 193.176.211.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mini.php"] [unique_id "agodRYHClf0EYFQBeRE5IwAAAA0"]
[Mon May 18 03:55:50.018386 2026] [:error] [pid 20778:tid 20842] [client 193.176.211.168:27315] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "agodRmb9K2_TPGoCpArlHgAAAFc"]
[Mon May 18 03:55:50.521930 2026] [:error] [pid 20779:tid 20860] [client 193.176.211.171:44259] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "agodRiF3Tl5ZGU-QyEDIQgAAAI4"]
[Mon May 18 03:55:50.884876 2026] [:error] [pid 20777:tid 20792] [client 193.176.211.156:33759] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/mah/function.php"] [unique_id "agodRoHClf0EYFQBeRE5JwAAAAY"]
[Mon May 18 03:55:51.229658 2026] [:error] [pid 20778:tid 20818] [client 193.176.211.174:55753] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "agodR2b9K2_TPGoCpArlIAAAAEA"]
[Mon May 18 03:55:51.553559 2026] [:error] [pid 20778:tid 20838] [client 193.176.211.187:55319] [client 193.176.211.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system_log.php"] [unique_id "agodR2b9K2_TPGoCpArlIgAAAFQ"]
[Mon May 18 03:55:51.919671 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.192:61287] [client 193.176.211.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "agodRyF3Tl5ZGU-QyEDIRAAAAJE"]
[Mon May 18 03:55:52.283190 2026] [:error] [pid 20779:tid 20865] [client 193.176.211.162:50053] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/"] [unique_id "agodSCF3Tl5ZGU-QyEDIRQAAAJM"]
[Mon May 18 03:55:52.633126 2026] [:error] [pid 20777:tid 20806] [client 193.176.211.176:32921] [client 193.176.211.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/t.php"] [unique_id "agodSIHClf0EYFQBeRE5KwAAABQ"]
[Mon May 18 03:55:53.186709 2026] [:error] [pid 20778:tid 20829] [client 193.176.211.58:27845] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/worksec.php"] [unique_id "agodSWb9K2_TPGoCpArlIwAAAEs"]
[Mon May 18 03:55:53.530307 2026] [:error] [pid 20884:tid 20900] [client 193.176.211.188:43099] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "agodSXv9K_lRldrJG3OcLwAAAM4"]
[Mon May 18 03:55:53.883363 2026] [:error] [pid 20884:tid 20907] [client 193.176.211.154:38631] [client 193.176.211.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "agodSXv9K_lRldrJG3OcMAAAANU"]
[Mon May 18 03:55:54.218591 2026] [:error] [pid 20884:tid 20896] [client 193.176.211.167:54449] [client 193.176.211.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/"] [unique_id "agodSnv9K_lRldrJG3OcMQAAAMo"]
[Mon May 18 03:55:54.541703 2026] [:error] [pid 20778:tid 20828] [client 193.176.211.162:53171] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "agodSmb9K2_TPGoCpArlKAAAAEo"]
[Mon May 18 03:55:54.886017 2026] [:error] [pid 20777:tid 20801] [client 193.176.211.162:39731] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "agodSoHClf0EYFQBeRE5LgAAAA8"]
[Mon May 18 03:55:55.227165 2026] [:error] [pid 20778:tid 20820] [client 193.176.211.182:54729] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/lock360.php"] [unique_id "agodS2b9K2_TPGoCpArlKgAAAEI"]
[Mon May 18 03:55:55.551347 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.178:32881] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "agodS3v9K_lRldrJG3OcMgAAANc"]
[Mon May 18 03:55:55.881983 2026] [:error] [pid 20778:tid 20827] [client 193.176.211.168:60379] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "agodS2b9K2_TPGoCpArlLQAAAEk"]
[Mon May 18 03:55:56.237112 2026] [:error] [pid 20777:tid 20792] [client 193.176.211.174:41133] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "agodTIHClf0EYFQBeRE5MgAAAAY"]
[Mon May 18 03:55:56.581704 2026] [:error] [pid 20884:tid 20908] [client 193.176.211.196:54521] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/"] [unique_id "agodTHv9K_lRldrJG3OcMwAAANY"]
[Mon May 18 03:55:56.920382 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.185:30237] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "agodTHv9K_lRldrJG3OcNAAAAMk"]
[Mon May 18 03:55:57.280421 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.183:59353] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "agodTXv9K_lRldrJG3OcNwAAAM0"]
[Mon May 18 03:55:57.635440 2026] [:error] [pid 20884:tid 20886] [client 193.176.211.165:52355] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "agodTXv9K_lRldrJG3OcOQAAAMA"]
[Mon May 18 03:55:57.979863 2026] [:error] [pid 20779:tid 20867] [client 193.176.211.156:38483] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "agodTSF3Tl5ZGU-QyEDIRwAAAJU"]
[Mon May 18 03:55:58.328399 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.169:28859] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/css/admin.php"] [unique_id "agodTnv9K_lRldrJG3OcOgAAAMg"]
[Mon May 18 03:55:58.683855 2026] [:error] [pid 20777:tid 20797] [client 193.176.211.159:62747] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/"] [unique_id "agodToHClf0EYFQBeRE5MwAAAAs"]
[Mon May 18 03:55:59.025612 2026] [:error] [pid 20777:tid 20793] [client 193.176.211.178:48795] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "agodT4HClf0EYFQBeRE5NAAAAAc"]
[Mon May 18 03:55:59.349454 2026] [:error] [pid 20777:tid 20795] [client 193.176.211.157:25893] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css.php"] [unique_id "agodT4HClf0EYFQBeRE5NQAAAAk"]
[Mon May 18 03:55:59.680846 2026] [:error] [pid 20779:tid 20854] [client 193.176.211.165:48359] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "agodTyF3Tl5ZGU-QyEDISAAAAIg"]
[Mon May 18 03:56:00.021830 2026] [:error] [pid 20777:tid 20792] [client 193.176.211.168:47859] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "agodUIHClf0EYFQBeRE5NgAAAAY"]
[Mon May 18 03:56:00.346086 2026] [:error] [pid 20777:tid 20787] [client 193.176.211.185:50855] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "agodUIHClf0EYFQBeRE5OAAAAAE"]
[Mon May 18 03:56:00.710547 2026] [:error] [pid 20884:tid 20907] [client 193.176.211.152:58899] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ws.php"] [unique_id "agodUHv9K_lRldrJG3OcPQAAANU"]
[Mon May 18 03:56:01.083056 2026] [:error] [pid 20777:tid 20786] [client 193.176.211.166:23981] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "agodUYHClf0EYFQBeRE5OwAAAAA"]
[Mon May 18 03:56:01.425688 2026] [:error] [pid 20778:tid 20832] [client 193.176.211.171:37863] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "agodUWb9K2_TPGoCpArlMgAAAE4"]
[Mon May 18 03:56:01.781974 2026] [:error] [pid 20778:tid 20819] [client 193.176.211.153:23337] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/maint/includes/"] [unique_id "agodUWb9K2_TPGoCpArlMwAAAEE"]
[Mon May 18 03:56:03.284645 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.177:32735] [client 193.176.211.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/preformatted/"] [unique_id "agodUyF3Tl5ZGU-QyEDISwAAAJE"]
[Mon May 18 03:56:03.626608 2026] [:error] [pid 20779:tid 20866] [client 193.176.211.160:49575] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "agodUyF3Tl5ZGU-QyEDITAAAAJQ"]
[Mon May 18 03:56:03.982585 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.172:22143] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/user.php"] [unique_id "agodU3v9K_lRldrJG3OcPgAAANc"]
[Mon May 18 03:56:04.690584 2026] [:error] [pid 20777:tid 20798] [client 193.176.211.161:58069] [client 193.176.211.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "agodVIHClf0EYFQBeRE5PQAAAAw"]
[Mon May 18 03:56:05.020332 2026] [:error] [pid 20779:tid 20849] [client 193.176.211.194:42341] [client 193.176.211.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/module.php"] [unique_id "agodVSF3Tl5ZGU-QyEDITQAAAIM"]
[Mon May 18 03:56:05.632895 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.188:60223] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/about.php"] [unique_id "agodVXv9K_lRldrJG3OcQAAAANg"]
[Mon May 18 03:56:05.955564 2026] [:error] [pid 20777:tid 20804] [client 193.176.211.158:50195] [client 193.176.211.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dx.php"] [unique_id "agodVYHClf0EYFQBeRE5PwAAABI"]
[Mon May 18 03:56:07.313997 2026] [:error] [pid 20778:tid 20826] [client 193.176.211.156:63511] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/missing/"] [unique_id "agodV2b9K2_TPGoCpArlNgAAAEg"]
[Mon May 18 03:56:07.636826 2026] [:error] [pid 20778:tid 20838] [client 193.176.211.57:43085] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-signin.php"] [unique_id "agodV2b9K2_TPGoCpArlOQAAAFQ"]
[Mon May 18 03:56:08.083766 2026] [:error] [pid 20779:tid 20855] [client 193.176.211.196:58143] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/buy.php"] [unique_id "agodWCF3Tl5ZGU-QyEDIUwAAAIk"]
[Mon May 18 03:56:08.439881 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.183:35661] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "agodWHv9K_lRldrJG3OcQQAAAMg"]
[Mon May 18 03:56:08.785138 2026] [:error] [pid 20777:tid 20810] [client 193.176.211.175:26801] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "agodWIHClf0EYFQBeRE5QwAAABg"]
[Mon May 18 03:56:09.187610 2026] [:error] [pid 20779:tid 20850] [client 193.176.211.191:56471] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/system_core.php"] [unique_id "agodWSF3Tl5ZGU-QyEDIVAAAAIQ"]
[Mon May 18 03:56:09.581481 2026] [:error] [pid 20884:tid 20902] [client 193.176.211.166:30581] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/admin.php"] [unique_id "agodWXv9K_lRldrJG3OcQwAAANA"]
[Mon May 18 03:56:09.983669 2026] [:error] [pid 20884:tid 20900] [client 193.176.211.186:63153] [client 193.176.211.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "agodWXv9K_lRldrJG3OcRAAAAM4"]
[Mon May 18 03:56:10.324719 2026] [:error] [pid 20884:tid 20907] [client 193.176.211.193:33421] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/"] [unique_id "agodWnv9K_lRldrJG3OcRQAAANU"]
[Mon May 18 03:56:10.681760 2026] [:error] [pid 20779:tid 20858] [client 193.176.211.155:29987] [client 193.176.211.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/config.php"] [unique_id "agodWiF3Tl5ZGU-QyEDIVQAAAIw"]
[Mon May 18 03:56:11.336250 2026] [:error] [pid 20777:tid 20791] [client 193.176.211.162:26461] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "agodW4HClf0EYFQBeRE5RQAAAAU"]
[Mon May 18 03:56:11.680150 2026] [:error] [pid 20778:tid 20835] [client 193.176.211.183:63521] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/button/"] [unique_id "agodW2b9K2_TPGoCpArlOgAAAFE"]
[Mon May 18 03:56:12.029195 2026] [:error] [pid 20777:tid 20803] [client 193.176.211.169:53351] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/login.php"] [unique_id "agodXIHClf0EYFQBeRE5RgAAABE"]
[Mon May 18 03:56:12.382002 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.178:26005] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/database.php"] [unique_id "agodXCF3Tl5ZGU-QyEDIVwAAAJE"]
[Mon May 18 03:56:12.730837 2026] [:error] [pid 20779:tid 20866] [client 193.176.211.159:36431] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "agodXCF3Tl5ZGU-QyEDIWQAAAJQ"]
[Mon May 18 03:56:13.100891 2026] [:error] [pid 20884:tid 20905] [client 193.176.211.153:60069] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "agodXXv9K_lRldrJG3OcRwAAANM"]
[Mon May 18 03:56:13.479320 2026] [:error] [pid 20777:tid 20801] [client 193.176.211.179:29761] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/gallery/"] [unique_id "agodXYHClf0EYFQBeRE5RwAAAA8"]
[Mon May 18 03:56:13.838769 2026] [:error] [pid 20884:tid 20893] [client 193.176.211.152:33445] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "agodXXv9K_lRldrJG3OcSAAAAMc"]
[Mon May 18 03:56:14.178442 2026] [:error] [pid 20777:tid 20808] [client 193.176.211.151:28817] [client 193.176.211.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "agodXoHClf0EYFQBeRE5SAAAABY"]
[Mon May 18 03:56:14.535688 2026] [:error] [pid 20777:tid 20805] [client 193.176.211.188:41053] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "agodXoHClf0EYFQBeRE5SQAAABM"]
[Mon May 18 03:56:14.879117 2026] [:error] [pid 20779:tid 20859] [client 193.176.211.195:40227] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "agodXiF3Tl5ZGU-QyEDIWwAAAI0"]
[Mon May 18 03:56:15.234048 2026] [:error] [pid 20778:tid 20830] [client 193.176.211.174:38325] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/media-text/"] [unique_id "agodX2b9K2_TPGoCpArlPAAAAEw"]
[Mon May 18 03:56:15.583345 2026] [:error] [pid 20777:tid 20800] [client 193.176.211.184:52779] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/we.php"] [unique_id "agodX4HClf0EYFQBeRE5SgAAAA4"]
[Mon May 18 03:56:15.939213 2026] [:error] [pid 20884:tid 20903] [client 193.176.211.163:43045] [client 193.176.211.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "agodX3v9K_lRldrJG3OcSwAAANE"]
[Mon May 18 03:56:16.287728 2026] [:error] [pid 20777:tid 20788] [client 193.176.211.152:30229] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/files.php"] [unique_id "agodYIHClf0EYFQBeRE5SwAAAAI"]
[Mon May 18 03:56:16.634316 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.57:57215] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "agodYHv9K_lRldrJG3OcTQAAAMI"]
[Mon May 18 03:56:16.983277 2026] [:error] [pid 20884:tid 20889] [client 193.176.211.185:35361] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wmore1.php"] [unique_id "agodYHv9K_lRldrJG3OcTgAAAMM"]
[Mon May 18 03:56:17.380149 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.166:48605] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "agodYXv9K_lRldrJG3OcUAAAAMY"]
[Mon May 18 03:56:17.787267 2026] [:error] [pid 20779:tid 20857] [client 193.176.211.189:53361] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "agodYSF3Tl5ZGU-QyEDIXgAAAIs"]
[Mon May 18 03:56:18.127618 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.184:38999] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "agodYnv9K_lRldrJG3OcUwAAANc"]
[Mon May 18 03:56:18.488661 2026] [:error] [pid 20779:tid 20852] [client 193.176.211.165:44515] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/file.php"] [unique_id "agodYiF3Tl5ZGU-QyEDIXwAAAIY"]
[Mon May 18 03:56:18.822745 2026] [:error] [pid 20884:tid 20891] [client 193.176.211.157:42577] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "agodYnv9K_lRldrJG3OcVgAAAMU"]
[Mon May 18 03:56:19.179852 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.153:20879] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "agodY3v9K_lRldrJG3OcVwAAAMI"]
[Mon May 18 03:56:19.526503 2026] [:error] [pid 20884:tid 20889] [client 193.176.211.173:26801] [client 193.176.211.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agodY3v9K_lRldrJG3OcWQAAAMM"]
[Mon May 18 03:56:19.892711 2026] [:error] [pid 20779:tid 20856] [client 193.176.211.185:55947] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/"] [unique_id "agodYyF3Tl5ZGU-QyEDIYQAAAIo"]
[Mon May 18 03:56:20.233538 2026] [:error] [pid 20777:tid 20794] [client 193.176.211.173:20237] [client 193.176.211.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "agodZIHClf0EYFQBeRE5UAAAAAg"]
[Mon May 18 03:56:20.580657 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.188:36971] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "agodZGb9K2_TPGoCpArlPQAAAFI"]
[Mon May 18 03:56:21.182801 2026] [:error] [pid 20779:tid 20849] [client 193.176.211.165:34507] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wp-config-backup.php"] [unique_id "agodZSF3Tl5ZGU-QyEDIYwAAAIM"]
[Mon May 18 03:56:21.525706 2026] [:error] [pid 20779:tid 20847] [client 193.176.211.180:27263] [client 193.176.211.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/"] [unique_id "agodZSF3Tl5ZGU-QyEDIZAAAAIE"]
[Mon May 18 03:56:21.848151 2026] [:error] [pid 20779:tid 20867] [client 193.176.211.165:31895] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/vx.php"] [unique_id "agodZSF3Tl5ZGU-QyEDIZQAAAJU"]
[Mon May 18 03:56:22.182013 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.189:47757] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "agodZnv9K_lRldrJG3OcWwAAANc"]
[Mon May 18 03:56:22.535437 2026] [:error] [pid 20779:tid 20846] [client 193.176.211.190:28745] [client 193.176.211.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme/about.php"] [unique_id "agodZiF3Tl5ZGU-QyEDIZwAAAIA"]
[Mon May 18 03:56:22.881806 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.173:64471] [client 193.176.211.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/install.php"] [unique_id "agodZnv9K_lRldrJG3OcXAAAANg"]
[Mon May 18 03:56:23.225272 2026] [:error] [pid 20777:tid 20810] [client 193.176.211.193:28147] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/accordion/"] [unique_id "agodZ4HClf0EYFQBeRE5UQAAABg"]
[Mon May 18 03:56:25.027783 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.165:59919] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "agodaXv9K_lRldrJG3OcYAAAAMI"]
[Mon May 18 03:56:25.381755 2026] [:error] [pid 20779:tid 20852] [client 193.176.211.159:56513] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "agodaSF3Tl5ZGU-QyEDIaQAAAIY"]
[Mon May 18 03:56:25.728893 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.168:28293] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/shell.php"] [unique_id "agodaSF3Tl5ZGU-QyEDIagAAAJE"]
[Mon May 18 03:56:26.081725 2026] [:error] [pid 20884:tid 20908] [client 193.176.211.181:25587] [client 193.176.211.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/css/"] [unique_id "agodanv9K_lRldrJG3OcYQAAANY"]
[Mon May 18 03:56:26.429468 2026] [:error] [pid 20884:tid 20900] [client 193.176.211.174:54899] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist"] [unique_id "agodanv9K_lRldrJG3OcYwAAAM4"]
[Mon May 18 03:56:26.781158 2026] [:error] [pid 20884:tid 20897] [client 193.176.211.192:48775] [client 193.176.211.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/login.php"] [unique_id "agodanv9K_lRldrJG3OcZAAAAMs"]
[Mon May 18 03:56:27.122452 2026] [:error] [pid 20884:tid 20893] [client 193.176.211.163:36151] [client 193.176.211.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "agoda3v9K_lRldrJG3OcZQAAAMc"]
[Mon May 18 03:56:27.482708 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.57:62533] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "agoda3v9K_lRldrJG3OcaAAAAMI"]
[Mon May 18 03:56:27.884092 2026] [:error] [pid 20779:tid 20865] [client 193.176.211.157:30363] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/pomo/"] [unique_id "agodayF3Tl5ZGU-QyEDIbQAAAJM"]
[Mon May 18 03:56:28.226215 2026] [:error] [pid 20779:tid 20851] [client 193.176.211.151:56585] [client 193.176.211.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "agodbCF3Tl5ZGU-QyEDIbgAAAIU"]
[Mon May 18 03:56:28.687885 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.178:40891] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/222.php"] [unique_id "agodbCF3Tl5ZGU-QyEDIbwAAAJI"]
[Mon May 18 03:56:29.027507 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.196:60561] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/spacer/"] [unique_id "agodbXv9K_lRldrJG3OcbAAAAMY"]
[Mon May 18 03:56:29.381343 2026] [:error] [pid 20779:tid 20855] [client 193.176.211.162:58125] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/panel.php"] [unique_id "agodbSF3Tl5ZGU-QyEDIcwAAAIk"]
[Mon May 18 03:56:29.720135 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.181:40375] [client 193.176.211.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "agodbXv9K_lRldrJG3OcbgAAAMg"]
[Mon May 18 03:56:30.079201 2026] [:error] [pid 20778:tid 20842] [client 193.176.211.158:32211] [client 193.176.211.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "agodbmb9K2_TPGoCpArlQQAAAFc"]
[Mon May 18 03:56:30.425721 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.179:45023] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "agodbmb9K2_TPGoCpArlQgAAAEQ"]
[Mon May 18 03:56:30.761617 2026] [:error] [pid 20779:tid 20854] [client 193.176.211.198:55323] [client 193.176.211.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "agodbiF3Tl5ZGU-QyEDIdAAAAIg"]
[Mon May 18 03:56:31.083685 2026] [:error] [pid 20778:tid 20839] [client 193.176.211.195:41323] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "agodb2b9K2_TPGoCpArlRAAAAFU"]
[Mon May 18 03:56:31.423313 2026] [:error] [pid 20778:tid 20835] [client 193.176.211.165:20749] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-file-manager-pro/"] [unique_id "agodb2b9K2_TPGoCpArlRQAAAFE"]
[Mon May 18 03:56:31.783222 2026] [:error] [pid 20779:tid 20858] [client 193.176.211.171:24163] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-file-manager-pro/fm_backup/"] [unique_id "agodbyF3Tl5ZGU-QyEDIdgAAAIw"]
[Mon May 18 03:56:32.121797 2026] [:error] [pid 20778:tid 20829] [client 193.176.211.58:26857] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/cgi-bin/cgi-bin/config.php"] [unique_id "agodcGb9K2_TPGoCpArlRwAAAEs"]
[Mon May 18 03:56:32.444430 2026] [:error] [pid 20778:tid 20830] [client 193.176.211.199:46057] [client 193.176.211.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/system.php"] [unique_id "agodcGb9K2_TPGoCpArlSAAAAEw"]
[Mon May 18 03:56:32.781520 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.195:58189] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/lato/"] [unique_id "agodcHv9K_lRldrJG3OcbwAAANg"]
[Mon May 18 03:56:33.139751 2026] [:error] [pid 20884:tid 20896] [client 193.176.211.159:49755] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/backup.php"] [unique_id "agodcXv9K_lRldrJG3OccQAAAMo"]
[Mon May 18 03:56:33.482031 2026] [:error] [pid 20884:tid 20908] [client 193.176.211.162:49505] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/backup.php"] [unique_id "agodcXv9K_lRldrJG3OccgAAANY"]
[Mon May 18 03:56:33.826828 2026] [:error] [pid 20884:tid 20891] [client 193.176.211.178:33499] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/login.php"] [unique_id "agodcXv9K_lRldrJG3OcdAAAAMU"]
[Mon May 18 03:56:34.183537 2026] [:error] [pid 20778:tid 20828] [client 193.176.211.154:62531] [client 193.176.211.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/languages/themes/test.php"] [unique_id "agodcmb9K2_TPGoCpArlSgAAAEo"]
[Mon May 18 03:56:34.527209 2026] [:error] [pid 20778:tid 20841] [client 193.176.211.188:62959] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Text/system_core.php"] [unique_id "agodcmb9K2_TPGoCpArlTAAAAFY"]
[Mon May 18 03:56:34.882964 2026] [:error] [pid 20778:tid 20842] [client 193.176.211.199:56403] [client 193.176.211.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/maintenance.php"] [unique_id "agodcmb9K2_TPGoCpArlUAAAAFc"]
[Mon May 18 03:56:35.224643 2026] [:error] [pid 20778:tid 20818] [client 193.176.211.198:44363] [client 193.176.211.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "agodc2b9K2_TPGoCpArlUQAAAEA"]
[Mon May 18 03:56:35.987527 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.182:54631] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/666.php"] [unique_id "agodcyF3Tl5ZGU-QyEDIegAAAJI"]
[Mon May 18 03:56:36.581048 2026] [:error] [pid 20778:tid 20829] [client 193.176.211.57:55527] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/nic.php"] [unique_id "agoddGb9K2_TPGoCpArlUwAAAEs"]
[Mon May 18 03:56:36.924060 2026] [:error] [pid 20778:tid 20832] [client 193.176.211.191:65179] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/Molla1.5.6/wp-content/users.php"] [unique_id "agoddGb9K2_TPGoCpArlVQAAAE4"]
[Mon May 18 03:56:37.281076 2026] [:error] [pid 20779:tid 20853] [client 193.176.211.152:64365] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/p-includes/admin.php"] [unique_id "agoddSF3Tl5ZGU-QyEDIfAAAAIc"]
[Mon May 18 03:56:37.620850 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.174:38297] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/mmenu.php"] [unique_id "agoddWb9K2_TPGoCpArlVgAAAFI"]
[Mon May 18 03:56:37.981334 2026] [:error] [pid 20884:tid 20893] [client 193.176.211.163:36867] [client 193.176.211.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "agoddXv9K_lRldrJG3OcdgAAAMc"]
[Mon May 18 03:56:38.326605 2026] [:error] [pid 20884:tid 20887] [client 193.176.211.187:38889] [client 193.176.211.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/classwithtostring.php"] [unique_id "agoddnv9K_lRldrJG3OceAAAAME"]
[Mon May 18 03:56:38.683672 2026] [:error] [pid 20778:tid 20842] [client 193.176.211.195:39613] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/elementor/google-fonts/fonts/"] [unique_id "agoddmb9K2_TPGoCpArlWQAAAFc"]
[Mon May 18 03:56:39.020385 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.158:59063] [client 193.176.211.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/contact-form-7/base-theme.php"] [unique_id "agoddyF3Tl5ZGU-QyEDIfwAAAJE"]
[Mon May 18 03:56:39.342343 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.172:33673] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/heading/"] [unique_id "agodd3v9K_lRldrJG3OceQAAAMI"]
[Mon May 18 03:56:39.680801 2026] [:error] [pid 20884:tid 20906] [client 193.176.211.166:61743] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/geck.php"] [unique_id "agodd3v9K_lRldrJG3OcewAAANQ"]
[Mon May 18 03:56:40.023668 2026] [:error] [pid 20884:tid 20904] [client 193.176.211.171:20947] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wf-logs.php"] [unique_id "agodeHv9K_lRldrJG3OcfAAAANI"]
[Mon May 18 03:56:40.348311 2026] [:error] [pid 20884:tid 20905] [client 193.176.211.163:47731] [client 193.176.211.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/wp-conflg.php"] [unique_id "agodeHv9K_lRldrJG3OcfgAAANM"]
[Mon May 18 03:56:40.685455 2026] [:error] [pid 20778:tid 20831] [client 193.176.211.173:33701] [client 193.176.211.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/home.php"] [unique_id "agodeGb9K2_TPGoCpArlXAAAAE0"]
[Mon May 18 03:56:41.027083 2026] [:error] [pid 20778:tid 20837] [client 193.176.211.170:51479] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/cgi-bin/cgi-bin/upload.php"] [unique_id "agodeWb9K2_TPGoCpArlXQAAAFM"]
[Mon May 18 03:56:41.384151 2026] [:error] [pid 20778:tid 20832] [client 193.176.211.194:27141] [client 193.176.211.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/cgi-bin/panel.php"] [unique_id "agodeWb9K2_TPGoCpArlXgAAAE4"]
[Mon May 18 03:56:41.721128 2026] [:error] [pid 20884:tid 20907] [client 193.176.211.177:59869] [client 193.176.211.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "agodeXv9K_lRldrJG3OcfwAAANU"]
[Mon May 18 03:56:42.044978 2026] [:error] [pid 20778:tid 20824] [client 193.176.211.165:26083] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-date/wp-login.php"] [unique_id "agodemb9K2_TPGoCpArlYAAAAEY"]
[Mon May 18 03:56:42.385626 2026] [:error] [pid 20779:tid 20849] [client 193.176.211.197:39619] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/templates/wp-login.php"] [unique_id "agodeiF3Tl5ZGU-QyEDIgwAAAIM"]
[Mon May 18 03:56:42.736968 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.153:41921] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "agodenv9K_lRldrJG3OcgQAAAMk"]
[Mon May 18 03:56:43.082927 2026] [:error] [pid 20779:tid 20851] [client 193.176.211.58:22247] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "agodeyF3Tl5ZGU-QyEDIhQAAAIU"]
[Mon May 18 03:56:43.423157 2026] [:error] [pid 20777:tid 20801] [client 193.176.211.152:60759] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-pagination-previous/wp-login.php"] [unique_id "agode4HClf0EYFQBeRE5UgAAAA8"]
[Mon May 18 03:56:43.783175 2026] [:error] [pid 20777:tid 20808] [client 193.176.211.174:52947] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/rss/wp-login.php"] [unique_id "agode4HClf0EYFQBeRE5UwAAABY"]
[Mon May 18 03:56:44.122700 2026] [:error] [pid 20884:tid 20890] [client 193.176.211.188:23361] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/"] [unique_id "agodfHv9K_lRldrJG3OchQAAAMQ"]
[Mon May 18 03:56:44.446619 2026] [:error] [pid 20884:tid 20901] [client 193.176.211.170:47355] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/"] [unique_id "agodfHv9K_lRldrJG3OchgAAAM8"]
[Mon May 18 03:56:44.783553 2026] [:error] [pid 20778:tid 20827] [client 193.176.211.189:54093] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/"] [unique_id "agodfGb9K2_TPGoCpArlYgAAAEk"]
[Mon May 18 03:56:45.126891 2026] [:error] [pid 20778:tid 20828] [client 193.176.211.58:33883] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/about.php"] [unique_id "agodfWb9K2_TPGoCpArlYwAAAEo"]
[Mon May 18 03:56:45.688612 2026] [:error] [pid 20778:tid 20823] [client 193.176.211.189:30625] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-title/about.php"] [unique_id "agodfWb9K2_TPGoCpArlZwAAAEU"]
[Mon May 18 03:56:46.029829 2026] [:error] [pid 20778:tid 20831] [client 193.176.211.175:47289] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/wp-login.php"] [unique_id "agodfmb9K2_TPGoCpArlaQAAAE0"]
[Mon May 18 03:56:46.380029 2026] [:error] [pid 20778:tid 20830] [client 193.176.211.182:52445] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/rss/about.php"] [unique_id "agodfmb9K2_TPGoCpArlawAAAEw"]
[Mon May 18 03:56:46.724189 2026] [:error] [pid 20778:tid 20824] [client 193.176.211.200:53105] [client 193.176.211.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/Core/wp-login.php"] [unique_id "agodfmb9K2_TPGoCpArlbAAAAEY"]
[Mon May 18 03:56:47.085789 2026] [:error] [pid 20777:tid 20805] [client 193.176.211.177:40731] [client 193.176.211.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/templates/about.php"] [unique_id "agodf4HClf0EYFQBeRE5VAAAABM"]
[Mon May 18 03:56:47.425563 2026] [:error] [pid 20884:tid 20905] [client 193.176.211.183:22193] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "agodf3v9K_lRldrJG3OciQAAANM"]
[Mon May 18 03:56:47.748504 2026] [:error] [pid 20777:tid 20788] [client 193.176.211.175:52543] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/wp-login.php"] [unique_id "agodf4HClf0EYFQBeRE5VgAAAAI"]
[Mon May 18 03:56:48.083746 2026] [:error] [pid 20778:tid 20843] [client 193.176.211.169:51135] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/rss/"] [unique_id "agodgGb9K2_TPGoCpArlbwAAAFg"]
[Mon May 18 03:56:48.422601 2026] [:error] [pid 20884:tid 20891] [client 193.176.211.170:48353] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/src/Core/about.php"] [unique_id "agodgHv9K_lRldrJG3OciwAAAMU"]
[Mon May 18 03:56:48.749552 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.194:65249] [client 193.176.211.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/pullquote/wp-login.php"] [unique_id "agodgHv9K_lRldrJG3OcjAAAAMY"]
[Mon May 18 03:56:49.082499 2026] [:error] [pid 20884:tid 20902] [client 193.176.211.182:55645] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-title/wp-login.php"] [unique_id "agodgXv9K_lRldrJG3OcjwAAANA"]
[Mon May 18 03:56:49.430134 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.164:47811] [client 193.176.211.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "agodgWb9K2_TPGoCpArldgAAAFI"]
[Mon May 18 03:56:49.780800 2026] [:error] [pid 20779:tid 20857] [client 193.176.211.180:28893] [client 193.176.211.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-pagination-previous/about.php"] [unique_id "agodgSF3Tl5ZGU-QyEDIigAAAIs"]
[Mon May 18 03:56:50.122513 2026] [:error] [pid 20777:tid 20794] [client 193.176.211.180:55433] [client 193.176.211.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/comment-date/about.php"] [unique_id "agodgoHClf0EYFQBeRE5WAAAAAg"]
[Mon May 18 03:56:50.450046 2026] [:error] [pid 20777:tid 20797] [client 193.176.211.162:25113] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/wp-login.php"] [unique_id "agodgoHClf0EYFQBeRE5WQAAAAs"]
[Mon May 18 03:56:50.786252 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.189:52997] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/pullquote/about.php"] [unique_id "agodgnv9K_lRldrJG3OckwAAANg"]
[Mon May 18 03:56:51.122102 2026] [:error] [pid 20778:tid 20827] [client 193.176.211.193:33483] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/preformatted/about.php"] [unique_id "agodg2b9K2_TPGoCpArleQAAAEk"]
[Mon May 18 03:56:51.479142 2026] [:error] [pid 20884:tid 20906] [client 193.176.211.191:43187] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/about.php"] [unique_id "agodg3v9K_lRldrJG3OclAAAANQ"]
[Mon May 18 03:56:51.819345 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.153:32773] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-title/istsgd.php"] [unique_id "agodg3v9K_lRldrJG3OclQAAAM0"]
[Mon May 18 03:56:52.182604 2026] [:error] [pid 20884:tid 20891] [client 193.176.211.157:51349] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/code/about.php"] [unique_id "agodhHv9K_lRldrJG3OclgAAAMU"]
[Mon May 18 03:56:52.521981 2026] [:error] [pid 20884:tid 20886] [client 193.176.211.179:61855] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/social-links/wp-login.php"] [unique_id "agodhHv9K_lRldrJG3OclwAAAMA"]
[Mon May 18 03:56:52.844250 2026] [:error] [pid 20884:tid 20908] [client 193.176.211.180:42351] [client 193.176.211.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/about.php"] [unique_id "agodhHv9K_lRldrJG3OcmgAAANY"]
[Mon May 18 03:56:53.187386 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.179:44435] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/preformatted/wp-login.php"] [unique_id "agodhXv9K_lRldrJG3OcmwAAAMg"]
[Mon May 18 03:56:53.530620 2026] [:error] [pid 20884:tid 20890] [client 193.176.211.171:20083] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/templates/"] [unique_id "agodhXv9K_lRldrJG3OcnAAAAMQ"]
[Mon May 18 03:56:53.854203 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.174:35459] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "agodhXv9K_lRldrJG3OcnQAAAMk"]
[Mon May 18 03:56:54.220106 2026] [:error] [pid 20778:tid 20825] [client 193.176.211.159:44269] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-pagination-previous/"] [unique_id "agodhmb9K2_TPGoCpArlfgAAAEc"]
[Mon May 18 03:56:54.886511 2026] [:error] [pid 20779:tid 20870] [client 193.176.211.165:59987] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/"] [unique_id "agodhiF3Tl5ZGU-QyEDIjQAAAJg"]
[Mon May 18 03:56:55.221213 2026] [:error] [pid 20779:tid 20848] [client 193.176.211.166:60615] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/social-links/about.php"] [unique_id "agodhyF3Tl5ZGU-QyEDIjgAAAII"]
[Mon May 18 03:56:55.587759 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.183:62959] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "agodh3v9K_lRldrJG3OcogAAAMY"]
[Mon May 18 03:56:55.939668 2026] [:error] [pid 20779:tid 20867] [client 193.176.211.181:44257] [client 193.176.211.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-wp-site-edit.php"] [unique_id "agodhyF3Tl5ZGU-QyEDIkAAAAJU"]
[Mon May 18 03:56:56.282636 2026] [:error] [pid 20778:tid 20826] [client 193.176.211.191:60423] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentynineteen/sass/site/header/"] [unique_id "agodiGb9K2_TPGoCpArlhAAAAEg"]
[Mon May 18 03:56:56.643503 2026] [:error] [pid 20779:tid 20847] [client 193.176.211.196:27883] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/media-time.php"] [unique_id "agodiCF3Tl5ZGU-QyEDIkwAAAIE"]
[Mon May 18 03:56:56.989395 2026] [:error] [pid 20778:tid 20832] [client 193.176.211.167:26773] [client 193.176.211.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/veq/aaa.php"] [unique_id "agodiGb9K2_TPGoCpArlhwAAAE4"]
[Mon May 18 03:56:57.351504 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.178:55151] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-featured-image/"] [unique_id "agodiXv9K_lRldrJG3OcqAAAAMk"]
[Mon May 18 03:56:57.688092 2026] [:error] [pid 20778:tid 20841] [client 193.176.211.169:27925] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/riode/inc/add-on/live-search/"] [unique_id "agodiWb9K2_TPGoCpArliAAAAFY"]
[Mon May 18 03:56:58.030045 2026] [:error] [pid 20777:tid 20803] [client 193.176.211.187:47083] [client 193.176.211.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/literata/"] [unique_id "agodioHClf0EYFQBeRE5XAAAABE"]
[Mon May 18 03:56:58.386223 2026] [:error] [pid 20777:tid 20801] [client 193.176.211.57:43819] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "agodioHClf0EYFQBeRE5XQAAAA8"]
[Mon May 18 03:56:58.738750 2026] [:error] [pid 20779:tid 20857] [client 193.176.211.186:31621] [client 193.176.211.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/term-description/"] [unique_id "agodiiF3Tl5ZGU-QyEDIlgAAAIs"]
[Mon May 18 03:56:59.099101 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.193:24009] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/shortcode/"] [unique_id "agodi3v9K_lRldrJG3OcqwAAAM0"]
[Mon May 18 03:56:59.486882 2026] [:error] [pid 20884:tid 20903] [client 193.176.211.177:28331] [client 193.176.211.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/math/"] [unique_id "agodi3v9K_lRldrJG3OcrAAAANE"]
[Mon May 18 03:57:01.244057 2026] [:error] [pid 20778:tid 20831] [client 193.176.211.57:61247] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Utility/"] [unique_id "agodjWb9K2_TPGoCpArliQAAAE0"]
[Mon May 18 03:57:01.583143 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.162:41525] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/crop/index.php"] [unique_id "agodjWb9K2_TPGoCpArliwAAAEQ"]
[Mon May 18 03:57:02.386490 2026] [:error] [pid 20884:tid 20886] [client 193.176.211.194:59877] [client 193.176.211.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/"] [unique_id "agodjnv9K_lRldrJG3OcrwAAAMA"]
[Mon May 18 03:57:02.733888 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.175:38663] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/abilities-api/wp-conflg.php"] [unique_id "agodjiF3Tl5ZGU-QyEDIlwAAAJE"]
[Mon May 18 03:57:03.082280 2026] [:error] [pid 20779:tid 20852] [client 193.176.211.172:35687] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/class-wp-image.php"] [unique_id "agodjyF3Tl5ZGU-QyEDImAAAAIY"]
[Mon May 18 03:57:03.428886 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.161:43437] [client 193.176.211.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/fonts/bott.php"] [unique_id "agodj3v9K_lRldrJG3OcsQAAAMg"]
[Mon May 18 03:57:03.782149 2026] [:error] [pid 20884:tid 20890] [client 193.176.211.155:64165] [client 193.176.211.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/admin.php"] [unique_id "agodj3v9K_lRldrJG3OcsgAAAMQ"]
[Mon May 18 03:57:04.125195 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.58:59827] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/chosen.php"] [unique_id "agodkHv9K_lRldrJG3OcswAAAMk"]
[Mon May 18 03:57:04.481614 2026] [:error] [pid 20884:tid 20900] [client 193.176.211.160:31067] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "agodkHv9K_lRldrJG3OctAAAAM4"]
[Mon May 18 03:57:04.882893 2026] [:error] [pid 20779:tid 20870] [client 193.176.211.197:59359] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/zsdhb.php"] [unique_id "agodkCF3Tl5ZGU-QyEDImQAAAJg"]
[Mon May 18 03:57:05.234070 2026] [:error] [pid 20884:tid 20896] [client 193.176.211.179:29569] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/revision-long.php"] [unique_id "agodkXv9K_lRldrJG3OctQAAAMo"]
[Mon May 18 03:57:05.583885 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.170:29527] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/getid3-exception.php"] [unique_id "agodkXv9K_lRldrJG3OctwAAAM0"]
[Mon May 18 03:57:05.925839 2026] [:error] [pid 20884:tid 20904] [client 193.176.211.188:58419] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/class-json-restful.php"] [unique_id "agodkXv9K_lRldrJG3OcuAAAANI"]
[Mon May 18 03:57:06.287337 2026] [:error] [pid 20884:tid 20903] [client 193.176.211.185:53747] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/xml.php"] [unique_id "agodknv9K_lRldrJG3OcugAAANE"]
[Mon May 18 03:57:06.627510 2026] [:error] [pid 20778:tid 20819] [client 193.176.211.160:41895] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/revision-path.php"] [unique_id "agodkmb9K2_TPGoCpArlkAAAAEE"]
[Mon May 18 03:57:06.988729 2026] [:error] [pid 20884:tid 20889] [client 193.176.211.182:29311] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/build/irys/"] [unique_id "agodknv9K_lRldrJG3OcuwAAAMM"]
[Mon May 18 03:57:07.837587 2026] [:error] [pid 20778:tid 20820] [client 193.176.211.168:36349] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/details/xmu.php"] [unique_id "agodk2b9K2_TPGoCpArlkQAAAEI"]
[Mon May 18 03:57:08.182071 2026] [:error] [pid 20778:tid 20843] [client 193.176.211.180:60005] [client 193.176.211.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/modern/dist/resources/js/tal/admin.php"] [unique_id "agodlGb9K2_TPGoCpArlkgAAAFg"]
[Mon May 18 03:57:08.528851 2026] [:error] [pid 20778:tid 20831] [client 193.176.211.156:41917] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/l10n/build/dist/cache/cache/uploads/build/uco/"] [unique_id "agodlGb9K2_TPGoCpArlkwAAAE0"]
[Mon May 18 03:57:08.883140 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.174:32125] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "agodlGb9K2_TPGoCpArllAAAAEQ"]
[Mon May 18 03:57:09.228156 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.196:58971] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/images/chosen.php"] [unique_id "agodlXv9K_lRldrJG3OcwAAAANc"]
[Mon May 18 03:57:09.581990 2026] [:error] [pid 20779:tid 20867] [client 193.176.211.171:42223] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/hlex/hlex2.php"] [unique_id "agodlSF3Tl5ZGU-QyEDImwAAAJU"]
[Mon May 18 03:57:09.933463 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.197:58709] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/view-source/ioxi-o2.php"] [unique_id "agodlSF3Tl5ZGU-QyEDInAAAAJI"]
[Mon May 18 03:57:10.282300 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.197:46735] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/cache/classwithtostring.php"] [unique_id "agodlnv9K_lRldrJG3OcwQAAAM0"]
[Mon May 18 03:57:10.622713 2026] [:error] [pid 20884:tid 20891] [client 193.176.211.153:31679] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elex/1.php"] [unique_id "agodlnv9K_lRldrJG3OcwgAAAMU"]
[Mon May 18 03:57:10.983947 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.181:65251] [client 193.176.211.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/elex/elex.php"] [unique_id "agodlnv9K_lRldrJG3OcxQAAAMY"]
[Mon May 18 03:57:11.383895 2026] [:error] [pid 20884:tid 20908] [client 193.176.211.199:26681] [client 193.176.211.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/maintenance.php"] [unique_id "agodl3v9K_lRldrJG3OcxgAAANY"]
[Mon May 18 03:57:11.731458 2026] [:error] [pid 20884:tid 20898] [client 193.176.211.57:37875] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/database/index.php"] [unique_id "agodl3v9K_lRldrJG3OcygAAAMw"]
[Mon May 18 03:57:12.079663 2026] [:error] [pid 20884:tid 20887] [client 193.176.211.57:21875] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/includes/builder/feature/ajax-data/"] [unique_id "agodmHv9K_lRldrJG3OcywAAAME"]
[Mon May 18 03:57:12.496949 2026] [:error] [pid 20777:tid 20786] [client 193.176.211.171:65105] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/Divi/includes/builder/"] [unique_id "agodmIHClf0EYFQBeRE5YwAAAAA"]
[Mon May 18 03:57:13.283966 2026] [:error] [pid 20777:tid 20798] [client 193.176.211.162:42961] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/goodbarber/models/media.php"] [unique_id "agodmYHClf0EYFQBeRE5ZAAAAAw"]
[Mon May 18 03:57:13.621413 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.153:55877] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dev.ndmd.kn/wp-includes/Text/231.php"] [unique_id "agodmXv9K_lRldrJG3OczwAAAMY"]
[Mon May 18 03:57:13.943379 2026] [:error] [pid 20884:tid 20897] [client 193.176.211.58:55167] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/classwithtostring.php"] [unique_id "agodmXv9K_lRldrJG3Oc0QAAAMs"]
[Mon May 18 03:57:14.284438 2026] [:error] [pid 20884:tid 20900] [client 193.176.211.175:62879] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "agodmnv9K_lRldrJG3Oc2AAAAM4"]
[Mon May 18 03:57:14.627764 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.184:48755] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/dev.ndmd.kn/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "agodmnv9K_lRldrJG3Oc3wAAAM0"]
[Mon May 18 03:57:14.953351 2026] [:error] [pid 20884:tid 20905] [client 193.176.211.58:50679] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wppa-depot/wp-conflg.php"] [unique_id "agodmnv9K_lRldrJG3Oc5wAAANM"]
[Mon May 18 03:57:15.284687 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.197:40537] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/interactivity-api/wp-conflg.php"] [unique_id "agodm3v9K_lRldrJG3Oc6gAAAMg"]
[Mon May 18 03:57:15.621709 2026] [:error] [pid 20779:tid 20846] [client 193.176.211.159:59637] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xjkuda.php"] [unique_id "agodmyF3Tl5ZGU-QyEDInwAAAIA"]
[Mon May 18 03:57:15.944870 2026] [:error] [pid 20777:tid 20791] [client 193.176.211.175:31337] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/login.php"] [unique_id "agodm4HClf0EYFQBeRE5ZgAAAAU"]
[Mon May 18 03:57:16.284678 2026] [:error] [pid 20884:tid 20892] [client 193.176.211.162:23109] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/duplicator-pro/ctrls/class.web.services.php"] [unique_id "agodnHv9K_lRldrJG3Oc7gAAAMY"]
[Mon May 18 03:57:16.624412 2026] [:error] [pid 20778:tid 20834] [client 193.176.211.179:64273] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/min.php"] [unique_id "agodnGb9K2_TPGoCpArllwAAAFA"]
[Mon May 18 03:57:16.982595 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.160:27187] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/wordpress-6.9.1-partial-0/wordpress/wp-admin/admin.php"] [unique_id "agodnHv9K_lRldrJG3Oc8AAAAMI"]
[Mon May 18 03:57:17.331327 2026] [:error] [pid 20777:tid 20806] [client 193.176.211.153:27783] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/wordpress-6.9.1-partial-0/wordpress/wp-includes/home.php"] [unique_id "agodnYHClf0EYFQBeRE5ZwAAABQ"]
[Mon May 18 03:57:17.681808 2026] [:error] [pid 20884:tid 20903] [client 193.176.211.185:34203] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/enhanced-text-widget1/analyst/src/403x.php"] [unique_id "agodnXv9K_lRldrJG3Oc8gAAANE"]
[Mon May 18 03:57:18.021977 2026] [:error] [pid 20884:tid 20905] [client 193.176.211.189:40189] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/backup.php"] [unique_id "agodnnv9K_lRldrJG3Oc8wAAANM"]
[Mon May 18 03:57:18.383874 2026] [:error] [pid 20884:tid 20901] [client 193.176.211.198:37985] [client 193.176.211.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "agodnnv9K_lRldrJG3Oc9QAAAM8"]
[Mon May 18 03:57:20.322686 2026] [:error] [pid 20778:tid 20820] [client 193.176.211.154:64247] [client 193.176.211.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wolf.php"] [unique_id "agodoGb9K2_TPGoCpArlngAAAEI"]
[Mon May 18 03:57:20.645527 2026] [:error] [pid 20778:tid 20823] [client 193.176.211.165:63717] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/postnews.php"] [unique_id "agodoGb9K2_TPGoCpArloAAAAEU"]
[Mon May 18 03:57:20.984604 2026] [:error] [pid 20884:tid 20900] [client 193.176.211.174:42149] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/maxro.php"] [unique_id "agodoHv9K_lRldrJG3Oc-gAAAM4"]
[Mon May 18 03:57:21.322907 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.187:37889] [client 193.176.211.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/akismet/_inc/img/PRffc.php"] [unique_id "agodoSF3Tl5ZGU-QyEDIpAAAAJE"]
[Mon May 18 03:57:21.680386 2026] [:error] [pid 20778:tid 20831] [client 193.176.211.158:52939] [client 193.176.211.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/wpvivid_uploads/wp-conflg.php"] [unique_id "agodoWb9K2_TPGoCpArlogAAAE0"]
[Mon May 18 03:57:22.026701 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.57:34285] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/eroor.php"] [unique_id "agodomb9K2_TPGoCpArlowAAAEQ"]
[Mon May 18 03:57:22.383549 2026] [:error] [pid 20778:tid 20837] [client 193.176.211.196:50251] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/btx25.php"] [unique_id "agodomb9K2_TPGoCpArlpAAAAFM"]
[Mon May 18 03:57:22.729372 2026] [:error] [pid 20779:tid 20859] [client 193.176.211.171:40245] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/users.php"] [unique_id "agodoiF3Tl5ZGU-QyEDIpgAAAI0"]
[Mon May 18 03:57:23.080155 2026] [:error] [pid 20779:tid 20866] [client 193.176.211.166:27631] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/yosxb.php"] [unique_id "agodoyF3Tl5ZGU-QyEDIpwAAAJQ"]
[Mon May 18 03:57:23.423872 2026] [:error] [pid 20778:tid 20833] [client 193.176.211.158:47987] [client 193.176.211.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-cache-sys/class-payment.php"] [unique_id "agodo2b9K2_TPGoCpArlpgAAAE8"]
[Mon May 18 03:57:23.748373 2026] [:error] [pid 20777:tid 20789] [client 193.176.211.163:56757] [client 193.176.211.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "agodo4HClf0EYFQBeRE5awAAAAM"]
[Mon May 18 03:57:24.083876 2026] [:error] [pid 20778:tid 20842] [client 193.176.211.157:42479] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/column/classwithtostring.php"] [unique_id "agodpGb9K2_TPGoCpArlpwAAAFc"]
[Mon May 18 03:57:24.419456 2026] [:error] [pid 20779:tid 20865] [client 193.176.211.58:49445] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/parts/"] [unique_id "agodpCF3Tl5ZGU-QyEDIrAAAAJM"]
[Mon May 18 03:57:24.741565 2026] [:error] [pid 20884:tid 20891] [client 193.176.211.175:37277] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp-cache-sys/file.php"] [unique_id "agodpHv9K_lRldrJG3Oc_QAAAMU"]
[Mon May 18 03:57:25.081538 2026] [:error] [pid 20779:tid 20868] [client 193.176.211.185:47317] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/chillbud/inc/content/templates/"] [unique_id "agodpSF3Tl5ZGU-QyEDIrwAAAJY"]
[Mon May 18 03:57:25.425548 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.196:42407] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/revslider/admin/assets/js/plugins/admin.php"] [unique_id "agodpSF3Tl5ZGU-QyEDIsAAAAJE"]
[Mon May 18 03:57:25.783459 2026] [:error] [pid 20778:tid 20818] [client 193.176.211.185:56565] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/wp-load.php"] [unique_id "agodpWb9K2_TPGoCpArlqgAAAEA"]
[Mon May 18 03:57:26.177817 2026] [:error] [pid 20779:tid 20852] [client 193.176.211.191:51805] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/js_composer/assets/lib/bower/vcIconPicker/themes/xmlrpc.php"] [unique_id "agodpiF3Tl5ZGU-QyEDIsgAAAIY"]
[Mon May 18 03:57:26.534142 2026] [:error] [pid 20778:tid 20828] [client 193.176.211.165:20899] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/js_composer/assets/lib/bower/nivoslider/themes/module.php"] [unique_id "agodpmb9K2_TPGoCpArlqwAAAEo"]
[Mon May 18 03:57:26.882190 2026] [:error] [pid 20884:tid 20897] [client 193.176.211.152:53679] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/sodium_compat/wp-conflg.php"] [unique_id "agodpnv9K_lRldrJG3OdAgAAAMs"]
[Mon May 18 03:57:27.221081 2026] [:error] [pid 20779:tid 20867] [client 193.176.211.156:53195] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/login.php"] [unique_id "agodpyF3Tl5ZGU-QyEDItAAAAJU"]
[Mon May 18 03:57:27.543893 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.178:56799] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/themes/api.php"] [unique_id "agodp2b9K2_TPGoCpArlrQAAAEQ"]
[Mon May 18 03:57:27.883995 2026] [:error] [pid 20777:tid 20798] [client 193.176.211.180:21869] [client 193.176.211.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/js/tinymce/plugins/wp-load.php"] [unique_id "agodp4HClf0EYFQBeRE5cAAAAAw"]
[Mon May 18 03:57:28.281855 2026] [:error] [pid 20779:tid 20853] [client 193.176.211.200:21633] [client 193.176.211.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/users.php"] [unique_id "agodqCF3Tl5ZGU-QyEDItgAAAIc"]
[Mon May 18 03:57:28.789515 2026] [:error] [pid 20778:tid 20834] [client 193.176.211.57:23121] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/js_composer/assets/js/frontend_editor/vendors/plugins/xmlrpc.php"] [unique_id "agodqGb9K2_TPGoCpArlrgAAAFA"]
[Mon May 18 03:57:29.122495 2026] [:error] [pid 20777:tid 20806] [client 193.176.211.181:64333] [client 193.176.211.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/js_composer/assets/lib/vc_chart/"] [unique_id "agodqYHClf0EYFQBeRE5cwAAABQ"]
[Mon May 18 03:57:29.449033 2026] [:error] [pid 20779:tid 20846] [client 193.176.211.190:36601] [client 193.176.211.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/js/codemirror/"] [unique_id "agodqSF3Tl5ZGU-QyEDIuAAAAIA"]
[Mon May 18 03:57:29.782259 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.193:35623] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/js_composer/assets/lib/vc_chart/about.php"] [unique_id "agodqWb9K2_TPGoCpArlrwAAAFI"]
[Mon May 18 03:57:30.128506 2026] [:error] [pid 20779:tid 20868] [client 193.176.211.164:62921] [client 193.176.211.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/the-events-calendar/common/vendor/vendor-prefixed/monolog/monolog/about.php"] [unique_id "agodqiF3Tl5ZGU-QyEDIuQAAAJY"]
[Mon May 18 03:57:30.451386 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.164:46929] [client 193.176.211.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/essential-grid/public/assets/font/fontello/css/about.php"] [unique_id "agodqnv9K_lRldrJG3OdAwAAAMk"]
[Mon May 18 03:57:30.784954 2026] [:error] [pid 20884:tid 20889] [client 193.176.211.168:20331] [client 193.176.211.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/yosxb.php"] [unique_id "agodqnv9K_lRldrJG3OdCAAAAMM"]
[Mon May 18 03:57:31.127272 2026] [:error] [pid 20884:tid 20906] [client 193.176.211.186:36125] [client 193.176.211.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/222.php"] [unique_id "agodq3v9K_lRldrJG3OdDgAAANQ"]
[Mon May 18 03:57:31.485160 2026] [:error] [pid 20884:tid 20897] [client 193.176.211.178:53565] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "agodq3v9K_lRldrJG3OdEwAAAMs"]
[Mon May 18 03:57:31.825578 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.183:52315] [client 193.176.211.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentynineteen/sass/forms/"] [unique_id "agodq3v9K_lRldrJG3OdFwAAANg"]
[Mon May 18 03:57:32.183763 2026] [:error] [pid 20777:tid 20800] [client 193.176.211.167:61457] [client 193.176.211.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-patterns/mmm.php"] [unique_id "agodrIHClf0EYFQBeRE5eQAAAA4"]
[Mon May 18 03:57:32.527480 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.57:27027] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/widgets-form-function.php"] [unique_id "agodrCF3Tl5ZGU-QyEDIugAAAJE"]
[Mon May 18 03:57:32.883360 2026] [:error] [pid 20778:tid 20826] [client 193.176.211.190:36215] [client 193.176.211.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/true.php"] [unique_id "agodrGb9K2_TPGoCpArlsQAAAEg"]
[Mon May 18 03:57:33.225750 2026] [:error] [pid 20779:tid 20856] [client 193.176.211.187:22959] [client 193.176.211.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Proxy/"] [unique_id "agodrSF3Tl5ZGU-QyEDIuwAAAIo"]
[Mon May 18 03:57:33.548176 2026] [:error] [pid 20777:tid 20788] [client 193.176.211.184:20783] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/assets/wp-canser.php"] [unique_id "agodrYHClf0EYFQBeRE5fAAAAAI"]
[Mon May 18 03:57:33.883893 2026] [:error] [pid 20884:tid 20898] [client 193.176.211.184:22545] [client 193.176.211.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/Requests/src/Exception/177.php"] [unique_id "agodrXv9K_lRldrJG3OdIwAAAMw"]
[Mon May 18 03:57:34.234699 2026] [:error] [pid 20884:tid 20900] [client 193.176.211.185:47955] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/certificates/doc.php"] [unique_id "agodrnv9K_lRldrJG3OdJAAAAM4"]
[Mon May 18 03:57:36.032624 2026] [:error] [pid 20778:tid 20827] [client 193.176.211.165:26909] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/mariju.php"] [unique_id "agodsGb9K2_TPGoCpArlswAAAEk"]
[Mon May 18 03:57:36.383005 2026] [:error] [pid 20778:tid 20818] [client 193.176.211.186:39437] [client 193.176.211.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/install-helper-new.php"] [unique_id "agodsGb9K2_TPGoCpArltQAAAEA"]
[Mon May 18 03:57:37.192016 2026] [:error] [pid 20778:tid 20828] [client 193.176.211.157:53467] [client 193.176.211.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/site-title-restful.php"] [unique_id "agodsWb9K2_TPGoCpArltgAAAEo"]
[Mon May 18 03:57:37.523487 2026] [:error] [pid 20777:tid 20803] [client 193.176.211.158:26969] [client 193.176.211.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/options-discussion-statement.php"] [unique_id "agodsYHClf0EYFQBeRE5ggAAABE"]
[Mon May 18 03:57:37.849350 2026] [:error] [pid 20779:tid 20848] [client 193.176.211.159:62297] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "agodsSF3Tl5ZGU-QyEDIwwAAAII"]
[Mon May 18 03:57:38.183999 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.186:22477] [client 193.176.211.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/uploads/connects.php"] [unique_id "agodsnv9K_lRldrJG3OdQAAAAMI"]
[Mon May 18 03:57:38.536955 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.193:32541] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/well-known/acme-challenge/g/assets/msbp/admin.php"] [unique_id "agodsnv9K_lRldrJG3OdQwAAAMk"]
[Mon May 18 03:57:38.882855 2026] [:error] [pid 20779:tid 20847] [client 193.176.211.178:52013] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/upload.php"] [unique_id "agodsiF3Tl5ZGU-QyEDIxQAAAIE"]
[Mon May 18 03:57:39.233317 2026] [:error] [pid 20884:tid 20886] [client 193.176.211.166:63907] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wp/content/aswfy/admin.php"] [unique_id "agods3v9K_lRldrJG3OdRQAAAMA"]
[Mon May 18 03:57:39.582803 2026] [:error] [pid 20884:tid 20890] [client 193.176.211.171:22421] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/rute.php"] [unique_id "agods3v9K_lRldrJG3OdSQAAAMQ"]
[Mon May 18 03:57:39.924263 2026] [:error] [pid 20779:tid 20849] [client 193.176.211.196:48693] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/htt.php"] [unique_id "agodsyF3Tl5ZGU-QyEDIzAAAAIM"]
[Mon May 18 03:57:40.247571 2026] [:error] [pid 20777:tid 20794] [client 193.176.211.152:20373] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/query-pagination/yosxb.php"] [unique_id "agodtIHClf0EYFQBeRE5jQAAAAg"]
[Mon May 18 03:57:40.582047 2026] [:error] [pid 20777:tid 20799] [client 193.176.211.185:58825] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ezra-backup/"] [unique_id "agodtIHClf0EYFQBeRE5jgAAAA0"]
[Mon May 18 03:57:40.925774 2026] [:error] [pid 20884:tid 20902] [client 193.176.211.187:43995] [client 193.176.211.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/custom-cms/"] [unique_id "agodtHv9K_lRldrJG3OdUgAAANA"]
[Mon May 18 03:57:41.248345 2026] [:error] [pid 20777:tid 20791] [client 193.176.211.196:43533] [client 193.176.211.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/default/"] [unique_id "agodtYHClf0EYFQBeRE5kAAAAAU"]
[Mon May 18 03:57:41.581603 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.161:64691] [client 193.176.211.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/joel-test123/"] [unique_id "agodtWb9K2_TPGoCpArlugAAAFI"]
[Mon May 18 03:57:41.927363 2026] [:error] [pid 20777:tid 20790] [client 193.176.211.182:46313] [client 193.176.211.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/okbkh/content-"] [unique_id "agodtYHClf0EYFQBeRE5kgAAAAQ"]
[Mon May 18 03:57:42.251924 2026] [:error] [pid 20884:tid 20908] [client 193.176.211.188:30885] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/simple.php"] [unique_id "agodtnv9K_lRldrJG3OdVAAAANY"]
[Mon May 18 03:57:42.582469 2026] [:error] [pid 20884:tid 20903] [client 193.176.211.195:29297] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/simple.php"] [unique_id "agodtnv9K_lRldrJG3OdVgAAANE"]
[Mon May 18 03:57:42.934328 2026] [:error] [pid 20884:tid 20889] [client 193.176.211.57:28421] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/simple.php"] [unique_id "agodtnv9K_lRldrJG3OdWQAAAMM"]
[Mon May 18 03:57:43.285816 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.165:48845] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/css/wp-conflg.php"] [unique_id "agodtyF3Tl5ZGU-QyEDI1AAAAJE"]
[Mon May 18 03:57:43.617814 2026] [:error] [pid 20779:tid 20869] [client 193.176.211.153:39625] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/img/bg/chosen.php"] [unique_id "agodtyF3Tl5ZGU-QyEDI1gAAAJc"]
[Mon May 18 03:57:43.941172 2026] [:error] [pid 20779:tid 20854] [client 193.176.211.200:33239] [client 193.176.211.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "agodtyF3Tl5ZGU-QyEDI1wAAAIg"]
[Mon May 18 03:57:44.281407 2026] [:error] [pid 20778:tid 20822] [client 193.176.211.197:33015] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ashyihk.php"] [unique_id "agoduGb9K2_TPGoCpArlwQAAAEQ"]
[Mon May 18 03:57:44.622063 2026] [:error] [pid 20778:tid 20837] [client 193.176.211.163:53381] [client 193.176.211.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/ads-txt/inc/wap1.php"] [unique_id "agoduGb9K2_TPGoCpArlwgAAAFM"]
[Mon May 18 03:57:44.981354 2026] [:error] [pid 20779:tid 20849] [client 193.176.211.174:56313] [client 193.176.211.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "agoduCF3Tl5ZGU-QyEDI2QAAAIM"]
[Mon May 18 03:57:45.319098 2026] [:error] [pid 20778:tid 20821] [client 193.176.211.158:29223] [client 193.176.211.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "agoduWb9K2_TPGoCpArlwwAAAEM"]
[Mon May 18 03:57:45.648663 2026] [:error] [pid 20778:tid 20833] [client 193.176.211.173:23973] [client 193.176.211.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/cache/tmp/dofault.php"] [unique_id "agoduWb9K2_TPGoCpArlxQAAAE8"]
[Mon May 18 03:57:46.130762 2026] [:error] [pid 20778:tid 20839] [client 193.176.211.170:60445] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentyfive/parts/"] [unique_id "agodumb9K2_TPGoCpArlxgAAAFU"]
[Mon May 18 03:57:46.454104 2026] [:error] [pid 20884:tid 20901] [client 193.176.211.175:28573] [client 193.176.211.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/css/colors/sunrise/file.php"] [unique_id "agodunv9K_lRldrJG3OdXgAAAM8"]
[Mon May 18 03:57:46.785133 2026] [:error] [pid 20778:tid 20818] [client 193.176.211.167:24259] [client 193.176.211.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/abilities-api/chosen.php"] [unique_id "agodumb9K2_TPGoCpArlxwAAAEA"]
[Mon May 18 03:57:47.183428 2026] [:error] [pid 20778:tid 20823] [client 193.176.211.163:65517] [client 193.176.211.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/database/database.php"] [unique_id "agodu2b9K2_TPGoCpArlyQAAAEU"]
[Mon May 18 03:57:47.516817 2026] [:error] [pid 20778:tid 20836] [client 193.176.211.172:50119] [client 193.176.211.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/images/user/"] [unique_id "agodu2b9K2_TPGoCpArlywAAAFI"]
[Mon May 18 03:57:47.841452 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.159:27115] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade-temp-backup/photo-gallery/"] [unique_id "agodu3v9K_lRldrJG3OdYAAAANc"]
[Mon May 18 03:57:48.184171 2026] [:error] [pid 20884:tid 20900] [client 193.176.211.161:37861] [client 193.176.211.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/images/"] [unique_id "agodvHv9K_lRldrJG3OdYgAAAM4"]
[Mon May 18 03:57:48.519896 2026] [:error] [pid 20884:tid 20888] [client 193.176.211.162:25059] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/mu-plugins/block-library/"] [unique_id "agodvHv9K_lRldrJG3OdZAAAAMI"]
[Mon May 18 03:57:48.878102 2026] [:error] [pid 20884:tid 20893] [client 193.176.211.188:38809] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/ai1wm-backups/ID3/"] [unique_id "agodvHv9K_lRldrJG3OdaQAAAMc"]
[Mon May 18 03:57:49.278980 2026] [:error] [pid 20884:tid 20902] [client 193.176.211.179:51049] [client 193.176.211.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-links.php"] [unique_id "agodvXv9K_lRldrJG3OdawAAANA"]
[Mon May 18 03:57:49.626847 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.169:59201] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/dist/admin-ui/"] [unique_id "agodvXv9K_lRldrJG3OdbQAAAMg"]
[Mon May 18 03:57:49.950448 2026] [:error] [pid 20884:tid 20887] [client 193.176.211.164:34429] [client 193.176.211.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/user_data/SafetyTips/"] [unique_id "agodvXv9K_lRldrJG3OdbgAAAME"]
[Mon May 18 03:57:50.285279 2026] [:error] [pid 20884:tid 20905] [client 193.176.211.189:56289] [client 193.176.211.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/js/widgets/ws88.php"] [unique_id "agodvnv9K_lRldrJG3OdcAAAANM"]
[Mon May 18 03:57:50.685041 2026] [:error] [pid 20884:tid 20908] [client 193.176.211.199:50767] [client 193.176.211.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/images/media/zo.php"] [unique_id "agodvnv9K_lRldrJG3OdcgAAANY"]
[Mon May 18 03:57:51.025677 2026] [:error] [pid 20884:tid 20896] [client 193.176.211.166:37447] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "agodv3v9K_lRldrJG3OddAAAAMo"]
[Mon May 18 03:57:51.381152 2026] [:error] [pid 20779:tid 20846] [client 193.176.211.161:22153] [client 193.176.211.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "agodvyF3Tl5ZGU-QyEDI2wAAAIA"]
[Mon May 18 03:57:51.722187 2026] [:error] [pid 20779:tid 20863] [client 193.176.211.171:46303] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/users.php"] [unique_id "agodvyF3Tl5ZGU-QyEDI3AAAAJE"]
[Mon May 18 03:57:52.085965 2026] [:error] [pid 20779:tid 20861] [client 193.176.211.153:63913] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/100.php"] [unique_id "agodwCF3Tl5ZGU-QyEDI3QAAAI8"]
[Mon May 18 03:57:52.426616 2026] [:error] [pid 20779:tid 20859] [client 193.176.211.152:22229] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/zo.php"] [unique_id "agodwCF3Tl5ZGU-QyEDI3wAAAI0"]
[Mon May 18 03:57:52.749520 2026] [:error] [pid 20884:tid 20902] [client 193.176.211.199:47761] [client 193.176.211.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wpxml.php"] [unique_id "agodwHv9K_lRldrJG3OddwAAANA"]
[Mon May 18 03:57:53.081656 2026] [:error] [pid 20779:tid 20870] [client 193.176.211.153:41693] [client 193.176.211.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/cgi-bin/upload.php"] [unique_id "agodwSF3Tl5ZGU-QyEDI4AAAAJg"]
[Mon May 18 03:57:53.428741 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.159:63921] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/users.php"] [unique_id "agodwXv9K_lRldrJG3OdeAAAANc"]
[Mon May 18 03:57:53.782057 2026] [:error] [pid 20779:tid 20868] [client 193.176.211.167:59977] [client 193.176.211.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/fonts/lato/wp-content/plugins/photo-gallery/admin/controllers/images/"] [unique_id "agodwSF3Tl5ZGU-QyEDI4QAAAJY"]
[Mon May 18 03:57:54.127083 2026] [:error] [pid 20779:tid 20855] [client 193.176.211.200:60969] [client 193.176.211.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/sitemaps/providers/fonts/"] [unique_id "agodwiF3Tl5ZGU-QyEDI4gAAAIk"]
[Mon May 18 03:57:54.488368 2026] [:error] [pid 20884:tid 20894] [client 193.176.211.176:63089] [client 193.176.211.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/theme-compat/patterns/"] [unique_id "agodwnv9K_lRldrJG3OdeQAAAMg"]
[Mon May 18 03:57:54.827688 2026] [:error] [pid 20884:tid 20906] [client 193.176.211.191:48439] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/rithin.php"] [unique_id "agodwnv9K_lRldrJG3OdegAAANQ"]
[Mon May 18 03:57:55.186468 2026] [:error] [pid 20777:tid 20804] [client 193.176.211.164:29141] [client 193.176.211.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/zdata.php"] [unique_id "agodw4HClf0EYFQBeRE5lAAAABI"]
[Mon May 18 03:57:55.535898 2026] [:error] [pid 20884:tid 20905] [client 193.176.211.195:20799] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/upgrade/chosen.php"] [unique_id "agodw3v9K_lRldrJG3OdewAAANM"]
[Mon May 18 03:57:55.923279 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.197:56629] [client 193.176.211.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/wp-comand.php"] [unique_id "agodw3v9K_lRldrJG3OdfAAAANg"]
[Mon May 18 03:57:57.881999 2026] [:error] [pid 20884:tid 20901] [client 193.176.211.159:57553] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/wp-pages.php"] [unique_id "agodxXv9K_lRldrJG3OdfQAAAM8"]
[Mon May 18 03:57:58.230588 2026] [:error] [pid 20778:tid 20839] [client 193.176.211.191:51935] [client 193.176.211.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/block-supports/wp-conflg.php"] [unique_id "agodxmb9K2_TPGoCpArlzwAAAFU"]
[Mon May 18 03:57:58.582816 2026] [:error] [pid 20884:tid 20903] [client 193.176.211.188:30881] [client 193.176.211.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/news-portal/admins-dir.php"] [unique_id "agodxnv9K_lRldrJG3OdfwAAANE"]
[Mon May 18 03:57:58.978351 2026] [:error] [pid 20884:tid 20899] [client 193.176.211.198:28537] [client 193.176.211.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/module.tag.lyrics3-class.php"] [unique_id "agodxnv9K_lRldrJG3OdgAAAAM0"]
[Mon May 18 03:57:59.785520 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.162:48179] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/network/theme-install-variable.php"] [unique_id "agodx3v9K_lRldrJG3OdhAAAANc"]
[Mon May 18 03:58:00.127654 2026] [:error] [pid 20778:tid 20818] [client 193.176.211.190:28673] [client 193.176.211.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/post-excerpt/themes/"] [unique_id "agodyGb9K2_TPGoCpArl0QAAAEA"]
[Mon May 18 03:58:00.483147 2026] [:error] [pid 20778:tid 20831] [client 193.176.211.152:38779] [client 193.176.211.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/dt-the7/lib/jquery-sticky/theme-compat/"] [unique_id "agodyGb9K2_TPGoCpArl0wAAAE0"]
[Mon May 18 03:58:00.829732 2026] [:error] [pid 20778:tid 20841] [client 193.176.211.160:54911] [client 193.176.211.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/user/upgrade/"] [unique_id "agodyGb9K2_TPGoCpArl1AAAAFY"]
[Mon May 18 03:58:01.182866 2026] [:error] [pid 20777:tid 20810] [client 193.176.211.171:29575] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/customize/pki-validation/"] [unique_id "agodyYHClf0EYFQBeRE5lwAAABg"]
[Mon May 18 03:58:01.792387 2026] [:error] [pid 20777:tid 20786] [client 193.176.211.185:23049] [client 193.176.211.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/backups/admin.php"] [unique_id "agodyYHClf0EYFQBeRE5mAAAAAA"]
[Mon May 18 03:58:02.488123 2026] [:error] [pid 20779:tid 20864] [client 193.176.211.162:37413] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/admin.php"] [unique_id "agodyiF3Tl5ZGU-QyEDI5QAAAJI"]
[Mon May 18 03:58:02.827663 2026] [:error] [pid 20779:tid 20865] [client 193.176.211.57:23165] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentytwentytwo/"] [unique_id "agodyiF3Tl5ZGU-QyEDI5gAAAJM"]
[Mon May 18 03:58:03.180447 2026] [:error] [pid 20779:tid 20846] [client 193.176.211.170:55029] [client 193.176.211.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins-off/core.php"] [unique_id "agodyyF3Tl5ZGU-QyEDI5wAAAIA"]
[Mon May 18 03:58:03.578731 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.178:30829] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/my-custom-theme/config.php"] [unique_id "agody3v9K_lRldrJG3OdjAAAANg"]
[Mon May 18 03:58:03.931172 2026] [:error] [pid 20884:tid 20901] [client 193.176.211.171:51163] [client 193.176.211.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/theme/config.php"] [unique_id "agody3v9K_lRldrJG3OdjQAAAM8"]
[Mon May 18 03:58:04.284712 2026] [:error] [pid 20884:tid 20896] [client 193.176.211.156:55419] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/my-custom-theme/admin.php"] [unique_id "agodzHv9K_lRldrJG3OdjwAAAMo"]
[Mon May 18 03:58:04.633074 2026] [:error] [pid 20884:tid 20902] [client 193.176.211.156:55887] [client 193.176.211.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/maxcoach/"] [unique_id "agodzHv9K_lRldrJG3OdkAAAANA"]
[Mon May 18 03:58:04.983830 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.58:63937] [client 193.176.211.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/min.php"] [unique_id "agodzHv9K_lRldrJG3OdkQAAANc"]
[Mon May 18 03:58:05.328145 2026] [:error] [pid 20884:tid 20893] [client 193.176.211.159:64457] [client 193.176.211.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/config.php"] [unique_id "agodzXv9K_lRldrJG3OdkgAAAMc"]
[Mon May 18 03:58:05.649657 2026] [:error] [pid 20779:tid 20847] [client 193.176.211.193:33777] [client 193.176.211.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/kqsksia/classwithtostring.php"] [unique_id "agodzSF3Tl5ZGU-QyEDI6AAAAIE"]
[Mon May 18 03:58:05.988807 2026] [:error] [pid 20778:tid 20824] [client 193.176.211.166:32865] [client 193.176.211.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/man.php"] [unique_id "agodzWb9K2_TPGoCpArl4gAAAEY"]
[Mon May 18 03:58:06.336632 2026] [:error] [pid 20778:tid 20820] [client 193.176.211.165:64655] [client 193.176.211.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks/pullquote/1.php"] [unique_id "agodzmb9K2_TPGoCpArl4wAAAEI"]
[Mon May 18 03:58:06.793972 2026] [:error] [pid 20884:tid 20910] [client 193.176.211.187:57107] [client 193.176.211.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/oceanwp/sass/base/1.php"] [unique_id "agodznv9K_lRldrJG3OdmAAAANg"]
[Mon May 18 03:58:07.127651 2026] [:error] [pid 20778:tid 20829] [client 193.176.211.162:30697] [client 193.176.211.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "makifim.com.au"] [uri "/wp-includes/blocks-other.php"] [unique_id "agodz2b9K2_TPGoCpArl5AAAAEs"]
[Mon May 18 03:58:07.489321 2026] [:error] [pid 20884:tid 20895] [client 193.176.211.177:58123] [client 193.176.211.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/wp-wlx.php"] [unique_id "agodz3v9K_lRldrJG3OdmQAAAMk"]
[Mon May 18 03:58:07.820112 2026] [:error] [pid 20884:tid 20907] [client 193.176.211.169:52867] [client 193.176.211.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/media-upload-double.php"] [unique_id "agodz3v9K_lRldrJG3OdmgAAANU"]
[Mon May 18 03:58:08.183061 2026] [:error] [pid 20779:tid 20861] [client 193.176.211.178:58265] [client 193.176.211.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-admin/includes/class-wp-filesystem-ftpsockets-more.php"] [unique_id "agod0CF3Tl5ZGU-QyEDI6wAAAI8"]
[Mon May 18 03:58:08.536639 2026] [:error] [pid 20884:tid 20909] [client 193.176.211.195:31179] [client 193.176.211.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "agod0Hv9K_lRldrJG3OdnQAAANc"]
[Mon May 18 03:58:08.882745 2026] [:error] [pid 20884:tid 20891] [client 193.176.211.57:22117] [client 193.176.211.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "agod0Hv9K_lRldrJG3OdngAAAMU"]
[Mon May 18 04:37:33.674931 2026] [:error] [pid 20884:tid 20886] [client 20.219.0.106:2432] [client 20.219.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agonDXv9K_lRldrJG3OmUAAAAMA"]
[Mon May 18 04:37:34.245435 2026] [:error] [pid 63115:tid 63138] [client 20.219.0.106:3422] [client 20.219.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agonDuz_ApFcYdejvGfZ4wAAARU"]
[Mon May 18 04:37:34.809456 2026] [:error] [pid 20778:tid 20833] [client 20.219.0.106:2205] [client 20.219.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agonDmb9K2_TPGoCpArrxwAAAE8"]
[Mon May 18 04:37:35.740144 2026] [:error] [pid 63115:tid 63124] [client 20.219.0.106:2498] [client 20.219.0.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agonD-z_ApFcYdejvGfZ5wAAAQc"]
[Mon May 18 11:01:54.841243 2026] [:error] [pid 36579:tid 36582] [client 38.154.82.158:41190] [client 38.154.82.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.154.82.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agqBIl-aoZxBfgL5vDw1JgAAAEA"], referer: https://makifim.com.au/
[Mon May 18 11:02:00.450878 2026] [:error] [pid 36491:tid 36517] [client 38.154.82.158:34768] [client 38.154.82.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.154.82.158, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "agqBKE555B9CZb6D60l2KQAAAVY"], referer: https://makifim.com.au/
[Mon May 18 11:02:12.026107 2026] [:error] [pid 44046:tid 44069] [client 38.154.82.158:45436] [client 38.154.82.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.154.82.158, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agqBNIYF4k2jfXJBXk3SqgAAAZU"], referer: https://makifim.com.au/wp-admin/admin.php?page=twbbwg_photo-gallery
[Mon May 18 11:02:22.029638 2026] [autoindex:error] [pid 44087:tid 44101] [client 38.154.82.158:45239] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/plugins/photo-gallery/booster
[Mon May 18 11:02:23.919992 2026] [autoindex:error] [pid 36492:tid 36544] [client 69.4.94.248:39497] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:25.773719 2026] [autoindex:error] [pid 36492:tid 36535] [client 38.154.82.147:46291] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:27.658007 2026] [autoindex:error] [pid 36492:tid 36529] [client 38.154.82.153:50561] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:32.718766 2026] [autoindex:error] [pid 36579:tid 36603] [client 23.229.2.156:45703] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/images
[Mon May 18 11:02:34.507553 2026] [autoindex:error] [pid 36579:tid 36591] [client 38.154.94.210:43149] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:36.409044 2026] [autoindex:error] [pid 36492:tid 36530] [client 38.154.94.221:38989] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:38.327716 2026] [autoindex:error] [pid 44046:tid 44048] [client 38.154.94.220:36544] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:42.039893 2026] [autoindex:error] [pid 36492:tid 36526] [client 38.154.82.153:53965] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/images
[Mon May 18 11:02:43.932335 2026] [autoindex:error] [pid 36492:tid 36534] [client 38.154.82.147:36516] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:45.688351 2026] [autoindex:error] [pid 36579:tid 36582] [client 69.4.92.234:37532] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:47.558317 2026] [autoindex:error] [pid 36493:tid 36564] [client 69.4.93.183:57204] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:51.155873 2026] [autoindex:error] [pid 44087:tid 44097] [client 38.154.82.151:57071] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors
[Mon May 18 11:02:52.898402 2026] [autoindex:error] [pid 43916:tid 43940] [client 38.154.94.221:49996] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:54.821699 2026] [autoindex:error] [pid 36493:tid 36553] [client 38.154.94.210:53713] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:02:56.582845 2026] [autoindex:error] [pid 36493:tid 36573] [client 69.4.92.234:60954] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/
[Mon May 18 11:35:09.299170 2026] [:error] [pid 44087:tid 44094] [client 194.62.107.135:34929] [client 194.62.107.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "agqI7W5HPHbH9GK7l6zJewAAAcU"]
[Tue May 19 00:03:17.800521 2026] [:error] [pid 36491:tid 36504] [client 20.204.82.247:3866] [client 20.204.82.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "ags4RU555B9CZb6D60npFwAAAUk"]
[Tue May 19 00:03:18.451709 2026] [:error] [pid 36493:tid 36550] [client 20.204.82.247:1668] [client 20.204.82.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "ags4RgynkzQB5nM668rZeAAAAQE"]
[Tue May 19 00:03:19.049312 2026] [:error] [pid 44046:tid 44072] [client 20.204.82.247:1998] [client 20.204.82.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "ags4R4YF4k2jfXJBXk0JMQAAAZg"]
[Tue May 19 00:03:19.663004 2026] [:error] [pid 36492:tid 36541] [client 20.204.82.247:1689] [client 20.204.82.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "ags4R2CVlogrkn9m2w4SCAAAABM"]
[Tue May 19 04:10:19.858944 2026] [:error] [pid 38814:tid 38821] [client 20.204.82.247:3920] [client 20.204.82.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agtyKwvkKuBwP0epzWc-bwAAAMU"]
[Tue May 19 04:10:20.434224 2026] [:error] [pid 38814:tid 38832] [client 20.204.82.247:3136] [client 20.204.82.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agtyLAvkKuBwP0epzWc-cgAAANA"]
[Tue May 19 04:10:20.999112 2026] [:error] [pid 38814:tid 38825] [client 20.204.82.247:3137] [client 20.204.82.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agtyLAvkKuBwP0epzWc-dgAAAMk"]
[Tue May 19 04:10:21.569792 2026] [:error] [pid 38814:tid 38818] [client 20.204.82.247:3142] [client 20.204.82.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/404.php"] [unique_id "agtyLQvkKuBwP0epzWc-egAAAMI"]
[Tue May 19 04:48:43.209377 2026] [:error] [pid 38814:tid 38825] [client 103.65.237.216:50496] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/sftp-config.json"] [unique_id "agt7KwvkKuBwP0epzWdEtwAAAMk"]
[Tue May 19 11:57:57.912558 2026] [autoindex:error] [pid 41573:tid 41579] [client 104.37.185.36:37046] AH01276: Cannot serve directory /home/makifimc/public_html/wp-content/plugins/photo-gallery/booster/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://makifim.com.au/wp-content/plugins/photo-gallery/booster
[Tue May 19 11:58:03.577625 2026] [:error] [pid 46896:tid 46904] [client 104.37.185.36:47994] [client 104.37.185.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.185.36, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "agvfy6CHyzL3Ci9LGE0qEAAAAYY"], referer: https://makifim.com.au/wp-admin/admin.php?page=twbbwg_photo-gallery
[Tue May 19 15:44:13.221999 2026] [:error] [pid 29622:tid 29637] [client 20.29.119.167:14253] [client 20.29.119.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agwUzTkOqPKWkPs_P15IOwAAAg0"]
[Tue May 19 15:44:17.576647 2026] [:error] [pid 38697:tid 38730] [client 20.29.119.167:5694] [client 20.29.119.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agwU0aXP9pP6Kgt-msQnMgAAAA8"]
[Tue May 19 15:44:19.311019 2026] [:error] [pid 38814:tid 38838] [client 20.29.119.167:5868] [client 20.29.119.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agwU0wvkKuBwP0epzWeHngAAANY"]
[Tue May 19 15:44:21.221296 2026] [:error] [pid 46815:tid 46839] [client 20.29.119.167:5789] [client 20.29.119.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "agwU1SPnRhJOmA06LgpgpwAAAVY"]
[Wed May 20 04:46:14.919020 2026] [:error] [pid 59244:tid 59253] [client 194.62.107.101:43417] [client 194.62.107.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "agzMFrxU0SdQQE7pLs2thwAAAAA"]
[Wed May 20 09:46:44.690844 2026] [autoindex:error] [pid 41279:tid 41338] [client 185.217.125.16:62015] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed May 20 14:18:26.610629 2026] [:error] [pid 7731:tid 7750] [client 20.104.227.76:42705] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "ag1SMn9qQlHXbkl2nEuZ_QAAAZE"]
[Wed May 20 14:18:27.128433 2026] [:error] [pid 44059:tid 44070] [client 20.104.227.76:42747] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "ag1SMxfFs-oSOOcyjyzK_wAAAQk"]
[Wed May 20 14:18:27.641313 2026] [:error] [pid 41278:tid 41330] [client 20.104.227.76:42637] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "ag1SM_WiNKASEfiGdwaVjQAAAFU"]
[Wed May 20 14:18:28.079611 2026] [:error] [pid 7731:tid 7752] [client 20.104.227.76:42678] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class.php"] [unique_id "ag1SNH9qQlHXbkl2nEuaAAAAAZM"]
[Wed May 20 14:18:28.673776 2026] [:error] [pid 7731:tid 7748] [client 20.104.227.76:42690] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "ag1SNH9qQlHXbkl2nEuaBAAAAY8"]
[Wed May 20 14:18:29.273395 2026] [:error] [pid 41364:tid 41380] [client 20.104.227.76:42693] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "ag1SNRKTmyvxtNXrN-iRWgAAAI4"]
[Wed May 20 14:18:29.713969 2026] [:error] [pid 41279:tid 41343] [client 20.104.227.76:42645] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "ag1SNbEFyfaehGZbt4xxRwAAAMc"]
[Wed May 20 14:18:30.447164 2026] [:error] [pid 44059:tid 44068] [client 20.104.227.76:42750] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/goods.php"] [unique_id "ag1SNhfFs-oSOOcyjyzLBAAAAQc"]
[Wed May 20 14:18:31.359862 2026] [:error] [pid 41278:tid 41319] [client 20.104.227.76:42697] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "ag1SN_WiNKASEfiGdwaVkAAAAEo"]
[Wed May 20 14:18:31.966615 2026] [:error] [pid 7731:tid 7739] [client 20.104.227.76:42628] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "ag1SN39qQlHXbkl2nEuaGwAAAYY"]
[Wed May 20 14:18:32.577251 2026] [:error] [pid 7731:tid 7745] [client 20.104.227.76:42725] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "ag1SOH9qQlHXbkl2nEuaHgAAAYw"]
[Wed May 20 14:18:33.337816 2026] [:error] [pid 7731:tid 7737] [client 20.104.227.76:41383] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/info.php"] [unique_id "ag1SOX9qQlHXbkl2nEuaIgAAAYQ"]
[Wed May 20 14:18:33.831967 2026] [:error] [pid 7664:tid 7667] [client 20.104.227.76:39744] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ag1SOXZ8s7o3eiqT2kvMuwAAAUA"]
[Wed May 20 14:18:34.817011 2026] [:error] [pid 7664:tid 7685] [client 20.104.227.76:39790] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ag1SOnZ8s7o3eiqT2kvMvAAAAVI"]
[Wed May 20 14:18:36.271983 2026] [:error] [pid 7731:tid 7752] [client 20.104.227.76:41345] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ag1SPH9qQlHXbkl2nEuaKAAAAZM"]
[Wed May 20 14:18:37.458093 2026] [:error] [pid 7731:tid 7756] [client 20.104.227.76:42666] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/as.php"] [unique_id "ag1SPX9qQlHXbkl2nEuaKwAAAZc"]
[Wed May 20 14:18:38.275933 2026] [:error] [pid 41278:tid 41315] [client 20.104.227.76:39806] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aw.php"] [unique_id "ag1SPvWiNKASEfiGdwaVlQAAAEY"]
[Wed May 20 14:18:39.117619 2026] [:error] [pid 7664:tid 7683] [client 20.104.227.76:41172] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aw.php"] [unique_id "ag1SP3Z8s7o3eiqT2kvMvQAAAVA"]
[Wed May 20 14:18:39.777017 2026] [:error] [pid 7731:tid 7746] [client 20.104.227.76:39762] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aw.php"] [unique_id "ag1SP39qQlHXbkl2nEuaLAAAAY0"]
[Wed May 20 14:18:40.524002 2026] [:error] [pid 41278:tid 41316] [client 20.104.227.76:39756] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aw.php"] [unique_id "ag1SQPWiNKASEfiGdwaVlwAAAEc"]
[Wed May 20 14:18:41.049187 2026] [:error] [pid 41364:tid 41366] [client 20.104.227.76:41374] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bb.php"] [unique_id "ag1SQRKTmyvxtNXrN-iRcAAAAIA"]
[Wed May 20 14:18:41.496290 2026] [:error] [pid 41364:tid 41374] [client 20.104.227.76:42684] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bb.php"] [unique_id "ag1SQRKTmyvxtNXrN-iRcQAAAIg"]
[Wed May 20 14:18:41.995572 2026] [:error] [pid 41364:tid 41379] [client 20.104.227.76:39792] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bb.php"] [unique_id "ag1SQRKTmyvxtNXrN-iRcgAAAI0"]
[Wed May 20 14:18:42.651102 2026] [:error] [pid 7731:tid 7737] [client 20.104.227.76:39779] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bb.php"] [unique_id "ag1SQn9qQlHXbkl2nEuaLwAAAYQ"]
[Wed May 20 14:18:43.359602 2026] [:error] [pid 41278:tid 41327] [client 20.104.227.76:42742] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ag1SQ_WiNKASEfiGdwaVmAAAAFI"]
[Wed May 20 14:18:43.880914 2026] [:error] [pid 41278:tid 41312] [client 20.104.227.76:42734] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ag1SQ_WiNKASEfiGdwaVmQAAAEM"]
[Wed May 20 14:18:44.341087 2026] [:error] [pid 41278:tid 41310] [client 20.104.227.76:39770] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ag1SRPWiNKASEfiGdwaVmgAAAEE"]
[Wed May 20 14:18:44.898792 2026] [:error] [pid 41277:tid 41294] [client 20.104.227.76:41205] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/about.php"] [unique_id "ag1SRLTTCltJmboB5uflcAAAAAw"]
[Wed May 20 14:18:45.569695 2026] [:error] [pid 41278:tid 41325] [client 20.104.227.76:41363] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "ag1SRfWiNKASEfiGdwaVmwAAAFA"]
[Wed May 20 14:18:46.124171 2026] [:error] [pid 7664:tid 7677] [client 20.104.227.76:42715] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "ag1SRnZ8s7o3eiqT2kvMwgAAAUo"]
[Wed May 20 14:18:46.667346 2026] [:error] [pid 7664:tid 7686] [client 20.104.227.76:42748] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "ag1SRnZ8s7o3eiqT2kvMwwAAAVM"]
[Wed May 20 14:18:47.181541 2026] [:error] [pid 41277:tid 41291] [client 20.104.227.76:42692] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/222.php"] [unique_id "ag1SR7TTCltJmboB5uflcgAAAAk"]
[Wed May 20 14:18:47.658640 2026] [:error] [pid 7731:tid 7757] [client 20.104.227.76:42713] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "ag1SR39qQlHXbkl2nEuaMAAAAZg"]
[Wed May 20 14:18:48.121914 2026] [:error] [pid 41277:tid 41300] [client 20.104.227.76:39777] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "ag1SSLTTCltJmboB5uflcwAAABI"]
[Wed May 20 14:18:48.620842 2026] [:error] [pid 41278:tid 41311] [client 20.104.227.76:42730] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "ag1SSPWiNKASEfiGdwaVnQAAAEI"]
[Wed May 20 14:18:49.119977 2026] [:error] [pid 41364:tid 41378] [client 20.104.227.76:42675] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test1.php"] [unique_id "ag1SSRKTmyvxtNXrN-iRdAAAAIw"]
[Wed May 20 14:18:49.697563 2026] [:error] [pid 41279:tid 41358] [client 20.104.227.76:42664] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "ag1SSbEFyfaehGZbt4xxTgAAANY"]
[Wed May 20 14:18:50.359840 2026] [:error] [pid 44059:tid 44062] [client 20.104.227.76:42639] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "ag1SShfFs-oSOOcyjyzLGwAAAQE"]
[Wed May 20 14:18:50.916578 2026] [:error] [pid 44059:tid 44072] [client 20.104.227.76:42660] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "ag1SShfFs-oSOOcyjyzLHAAAAQs"]
[Wed May 20 14:18:51.703105 2026] [:error] [pid 7731:tid 7747] [client 20.104.227.76:42709] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-mail.php"] [unique_id "ag1SS39qQlHXbkl2nEuaMwAAAY4"]
[Wed May 20 14:18:52.218539 2026] [:error] [pid 7731:tid 7752] [client 20.104.227.76:42738] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "ag1STH9qQlHXbkl2nEuaNQAAAZM"]
[Wed May 20 14:18:52.796213 2026] [:error] [pid 7731:tid 7742] [client 20.104.227.76:41190] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "ag1STH9qQlHXbkl2nEuaNgAAAYk"]
[Wed May 20 14:18:53.446375 2026] [:error] [pid 7731:tid 7756] [client 20.104.227.76:39768] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "ag1STX9qQlHXbkl2nEuaNwAAAZc"]
[Wed May 20 14:18:53.961923 2026] [:error] [pid 41279:tid 41353] [client 20.104.227.76:41380] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp.php"] [unique_id "ag1STbEFyfaehGZbt4xxUgAAANE"]
[Wed May 20 14:18:54.462690 2026] [:error] [pid 41364:tid 41383] [client 20.104.227.76:39781] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ag1SThKTmyvxtNXrN-iRdwAAAJE"]
[Wed May 20 14:18:55.476937 2026] [:error] [pid 41277:tid 41296] [client 20.104.227.76:41379] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ag1ST7TTCltJmboB5ufldAAAAA4"]
[Wed May 20 14:18:56.173074 2026] [:error] [pid 44059:tid 44067] [client 20.104.227.76:41365] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ag1SUBfFs-oSOOcyjyzLHQAAAQY"]
[Wed May 20 14:18:56.776590 2026] [:error] [pid 44059:tid 44079] [client 20.104.227.76:42653] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/adminfuns.php"] [unique_id "ag1SUBfFs-oSOOcyjyzLHgAAARI"]
[Wed May 20 14:18:57.276229 2026] [:error] [pid 7664:tid 7670] [client 20.104.227.76:42661] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "ag1SUXZ8s7o3eiqT2kvMxgAAAUM"]
[Wed May 20 14:18:58.048467 2026] [:error] [pid 44059:tid 44075] [client 20.104.227.76:42685] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "ag1SUhfFs-oSOOcyjyzLHwAAAQ4"]
[Wed May 20 14:18:58.511761 2026] [:error] [pid 44059:tid 44070] [client 20.104.227.76:41364] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "ag1SUhfFs-oSOOcyjyzLIQAAAQk"]
[Wed May 20 14:18:59.072531 2026] [:error] [pid 7664:tid 7667] [client 20.104.227.76:42626] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/php8.php"] [unique_id "ag1SU3Z8s7o3eiqT2kvMyAAAAUA"]
[Wed May 20 14:18:59.744767 2026] [:error] [pid 7731:tid 7745] [client 20.104.227.76:42680] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "ag1SU39qQlHXbkl2nEuaOQAAAYw"]
[Wed May 20 14:19:00.462468 2026] [:error] [pid 44059:tid 44073] [client 20.104.227.76:41213] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "ag1SVBfFs-oSOOcyjyzLJQAAAQw"]
[Wed May 20 14:19:00.991035 2026] [:error] [pid 7731:tid 7746] [client 20.104.227.76:42665] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "ag1SVH9qQlHXbkl2nEuaOgAAAY0"]
[Wed May 20 14:19:01.543048 2026] [:error] [pid 7664:tid 7682] [client 20.104.227.76:41352] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ioxi-o.php"] [unique_id "ag1SVXZ8s7o3eiqT2kvMygAAAU8"]
[Wed May 20 14:19:01.989328 2026] [:error] [pid 7731:tid 7738] [client 20.104.227.76:41366] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "ag1SVX9qQlHXbkl2nEuaOwAAAYU"]
[Wed May 20 14:19:02.521342 2026] [:error] [pid 41364:tid 41368] [client 20.104.227.76:42727] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "ag1SVhKTmyvxtNXrN-iRegAAAII"]
[Wed May 20 14:19:03.016954 2026] [:error] [pid 7664:tid 7676] [client 20.104.227.76:42671] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "ag1SV3Z8s7o3eiqT2kvMywAAAUk"]
[Wed May 20 14:19:03.462955 2026] [:error] [pid 7731:tid 7753] [client 20.104.227.76:42642] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/edit.php"] [unique_id "ag1SV39qQlHXbkl2nEuaPwAAAZQ"]
[Wed May 20 14:19:03.904298 2026] [:error] [pid 41278:tid 41313] [client 20.104.227.76:39751] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "ag1SV_WiNKASEfiGdwaVoAAAAEQ"]
[Wed May 20 14:19:04.381177 2026] [:error] [pid 44059:tid 44076] [client 20.104.227.76:41344] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "ag1SWBfFs-oSOOcyjyzLKAAAAQ8"]
[Wed May 20 14:19:04.828131 2026] [:error] [pid 7731:tid 7736] [client 20.104.227.76:37937] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "ag1SWH9qQlHXbkl2nEuaQgAAAYM"]
[Wed May 20 14:19:05.292589 2026] [:error] [pid 7731:tid 7750] [client 20.104.227.76:39775] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sid3.php"] [unique_id "ag1SWX9qQlHXbkl2nEuaRAAAAZE"]
[Wed May 20 14:19:05.752818 2026] [:error] [pid 41278:tid 41323] [client 20.104.227.76:39785] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/load.php"] [unique_id "ag1SWfWiNKASEfiGdwaVoQAAAE4"]
[Wed May 20 14:19:06.290351 2026] [:error] [pid 41279:tid 41358] [client 20.104.227.76:42625] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/load.php"] [unique_id "ag1SWrEFyfaehGZbt4xxXgAAANY"]
[Wed May 20 14:19:06.861695 2026] [:error] [pid 7731:tid 7746] [client 20.104.227.76:42699] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/load.php"] [unique_id "ag1SWn9qQlHXbkl2nEuaRwAAAY0"]
[Wed May 20 14:19:07.414777 2026] [:error] [pid 7664:tid 7689] [client 20.104.227.76:42627] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/load.php"] [unique_id "ag1SW3Z8s7o3eiqT2kvMzAAAAVY"]
[Wed May 20 14:19:08.006821 2026] [:error] [pid 41278:tid 41314] [client 20.104.227.76:42649] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "ag1SXPWiNKASEfiGdwaVogAAAEU"]
[Wed May 20 14:19:08.584527 2026] [:error] [pid 41279:tid 41342] [client 20.104.227.76:41384] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "ag1SXLEFyfaehGZbt4xxYAAAAMY"]
[Wed May 20 14:19:09.036619 2026] [:error] [pid 41279:tid 41349] [client 20.104.227.76:39757] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "ag1SXbEFyfaehGZbt4xxYQAAAM0"]
[Wed May 20 14:19:09.534269 2026] [:error] [pid 7664:tid 7668] [client 20.104.227.76:42739] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/166.php"] [unique_id "ag1SXXZ8s7o3eiqT2kvMzQAAAUE"]
[Wed May 20 14:19:10.200144 2026] [:error] [pid 41278:tid 41328] [client 20.104.227.76:42712] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "ag1SXvWiNKASEfiGdwaVpQAAAFM"]
[Wed May 20 14:19:10.832415 2026] [:error] [pid 44059:tid 44079] [client 20.104.227.76:42658] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "ag1SXhfFs-oSOOcyjyzLKwAAARI"]
[Wed May 20 14:19:11.522516 2026] [:error] [pid 7664:tid 7674] [client 20.104.227.76:41399] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "ag1SX3Z8s7o3eiqT2kvMzgAAAUc"]
[Wed May 20 14:19:12.127286 2026] [:error] [pid 41278:tid 41321] [client 20.104.227.76:42729] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/test.php"] [unique_id "ag1SYPWiNKASEfiGdwaVqAAAAEw"]
[Wed May 20 14:19:12.748769 2026] [:error] [pid 44059:tid 44065] [client 20.104.227.76:39780] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo/info.php"] [unique_id "ag1SYBfFs-oSOOcyjyzLLwAAAQQ"]
[Wed May 20 14:19:13.213633 2026] [:error] [pid 7731:tid 7757] [client 20.104.227.76:37890] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo/info.php"] [unique_id "ag1SYX9qQlHXbkl2nEuaSQAAAZg"]
[Wed May 20 14:19:13.661404 2026] [:error] [pid 7731:tid 7736] [client 20.104.227.76:41388] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo/info.php"] [unique_id "ag1SYX9qQlHXbkl2nEuaSgAAAYM"]
[Wed May 20 14:19:14.140502 2026] [:error] [pid 7731:tid 7740] [client 20.104.227.76:39799] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/phpinfo/info.php"] [unique_id "ag1SYn9qQlHXbkl2nEuaTAAAAYc"]
[Wed May 20 14:19:14.632500 2026] [:error] [pid 7664:tid 7669] [client 20.104.227.76:41212] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "ag1SYnZ8s7o3eiqT2kvM0AAAAUI"]
[Wed May 20 14:19:15.157177 2026] [:error] [pid 7731:tid 7744] [client 20.104.227.76:41360] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "ag1SY39qQlHXbkl2nEuaTwAAAYs"]
[Wed May 20 14:19:15.649607 2026] [:error] [pid 41364:tid 41372] [client 20.104.227.76:42694] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "ag1SYxKTmyvxtNXrN-iRfAAAAIY"]
[Wed May 20 14:19:16.270299 2026] [:error] [pid 7731:tid 7751] [client 20.104.227.76:39805] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-the.php"] [unique_id "ag1SZH9qQlHXbkl2nEuaUAAAAZI"]
[Wed May 20 14:19:16.885965 2026] [:error] [pid 41278:tid 41316] [client 20.104.227.76:42633] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ag1SZPWiNKASEfiGdwaVqQAAAEc"]
[Wed May 20 14:19:17.337923 2026] [:error] [pid 7731:tid 7733] [client 20.104.227.76:39767] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ag1SZX9qQlHXbkl2nEuaUwAAAYA"]
[Wed May 20 14:19:18.029619 2026] [:error] [pid 44059:tid 44073] [client 20.104.227.76:39793] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ag1SZhfFs-oSOOcyjyzLMQAAAQw"]
[Wed May 20 14:19:18.536823 2026] [:error] [pid 41278:tid 41325] [client 20.104.227.76:42647] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/CDX2.php"] [unique_id "ag1SZvWiNKASEfiGdwaVrAAAAFA"]
[Wed May 20 14:19:19.052481 2026] [:error] [pid 7731:tid 7743] [client 20.104.227.76:42667] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/profile.php"] [unique_id "ag1SZ39qQlHXbkl2nEuaWwAAAYo"]
[Wed May 20 14:19:19.805151 2026] [:error] [pid 41279:tid 41357] [client 20.104.227.76:41361] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/profile.php"] [unique_id "ag1SZ7EFyfaehGZbt4xxYwAAANU"]
[Wed May 20 14:19:20.325894 2026] [:error] [pid 7664:tid 7687] [client 20.104.227.76:42743] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/profile.php"] [unique_id "ag1SaHZ8s7o3eiqT2kvM0gAAAVQ"]
[Wed May 20 14:19:22.612113 2026] [:error] [pid 7664:tid 7680] [client 20.104.227.76:41354] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/profile.php"] [unique_id "ag1SanZ8s7o3eiqT2kvM1QAAAU0"]
[Wed May 20 14:19:24.666952 2026] [:error] [pid 41278:tid 41333] [client 20.104.227.76:42624] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws80.php"] [unique_id "ag1SbPWiNKASEfiGdwaVrwAAAFg"]
[Wed May 20 14:19:44.106077 2026] [:error] [pid 44059:tid 44084] [client 20.104.227.76:42656] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxa.php"] [unique_id "ag1SgBfFs-oSOOcyjyzLZgAAARc"]
[Wed May 20 14:19:44.613207 2026] [:error] [pid 44059:tid 44081] [client 20.104.227.76:41401] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxa.php"] [unique_id "ag1SgBfFs-oSOOcyjyzLaAAAARQ"]
[Wed May 20 14:19:45.269781 2026] [:error] [pid 7731:tid 7751] [client 20.104.227.76:41402] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxa.php"] [unique_id "ag1SgX9qQlHXbkl2nEuacgAAAZI"]
[Wed May 20 14:19:45.867353 2026] [:error] [pid 41278:tid 41318] [client 20.104.227.76:42718] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxa.php"] [unique_id "ag1SgfWiNKASEfiGdwaVuwAAAEk"]
[Wed May 20 14:19:46.380615 2026] [:error] [pid 7664:tid 7671] [client 20.104.227.76:41355] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index0.php"] [unique_id "ag1SgnZ8s7o3eiqT2kvM2QAAAUQ"]
[Wed May 20 14:19:47.024718 2026] [:error] [pid 41277:tid 41289] [client 20.104.227.76:41211] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index0.php"] [unique_id "ag1Sg7TTCltJmboB5uflhQAAAAc"]
[Wed May 20 14:19:47.607466 2026] [:error] [pid 7664:tid 7674] [client 20.104.227.76:39761] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index0.php"] [unique_id "ag1Sg3Z8s7o3eiqT2kvM2gAAAUc"]
[Wed May 20 14:19:48.227356 2026] [:error] [pid 41278:tid 41317] [client 20.104.227.76:41378] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index0.php"] [unique_id "ag1ShPWiNKASEfiGdwaVvQAAAEg"]
[Wed May 20 14:19:49.027708 2026] [:error] [pid 41278:tid 41326] [client 20.104.227.76:42631] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kz.php"] [unique_id "ag1ShfWiNKASEfiGdwaVvgAAAFE"]
[Wed May 20 14:19:49.709555 2026] [:error] [pid 41278:tid 41313] [client 20.104.227.76:42629] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kz.php"] [unique_id "ag1ShfWiNKASEfiGdwaVvwAAAEQ"]
[Wed May 20 14:19:50.464646 2026] [:error] [pid 7664:tid 7686] [client 20.104.227.76:39801] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kz.php"] [unique_id "ag1ShnZ8s7o3eiqT2kvM3gAAAVM"]
[Wed May 20 14:19:50.981985 2026] [:error] [pid 7664:tid 7669] [client 20.104.227.76:39747] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-kz.php"] [unique_id "ag1ShnZ8s7o3eiqT2kvM3wAAAUI"]
[Wed May 20 14:19:51.489501 2026] [:error] [pid 44059:tid 44061] [client 20.104.227.76:41381] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/19.php"] [unique_id "ag1ShxfFs-oSOOcyjyzLaQAAAQA"]
[Wed May 20 14:19:52.163590 2026] [:error] [pid 7731:tid 7733] [client 20.104.227.76:39752] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/19.php"] [unique_id "ag1SiH9qQlHXbkl2nEuadAAAAYA"]
[Wed May 20 14:19:52.850369 2026] [:error] [pid 44059:tid 44079] [client 20.104.227.76:42723] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/19.php"] [unique_id "ag1SiBfFs-oSOOcyjyzLagAAARI"]
[Wed May 20 14:19:53.344140 2026] [:error] [pid 7664:tid 7680] [client 20.104.227.76:41356] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/19.php"] [unique_id "ag1SiXZ8s7o3eiqT2kvM4QAAAU0"]
[Wed May 20 14:19:53.791841 2026] [:error] [pid 7664:tid 7681] [client 20.104.227.76:41159] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ag1SiXZ8s7o3eiqT2kvM4gAAAU4"]
[Wed May 20 14:19:54.322376 2026] [:error] [pid 7731:tid 7736] [client 20.104.227.76:39796] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ag1Sin9qQlHXbkl2nEuadQAAAYM"]
[Wed May 20 14:19:54.990118 2026] [:error] [pid 44059:tid 44069] [client 20.104.227.76:42714] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ag1SihfFs-oSOOcyjyzLbQAAAQg"]
[Wed May 20 14:19:55.572412 2026] [:error] [pid 7731:tid 7745] [client 20.104.227.76:37898] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/11.php"] [unique_id "ag1Si39qQlHXbkl2nEuadgAAAYw"]
[Wed May 20 14:19:56.064446 2026] [:error] [pid 7731:tid 7750] [client 20.104.227.76:42638] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "ag1SjH9qQlHXbkl2nEuadwAAAZE"]
[Wed May 20 14:19:56.530708 2026] [:error] [pid 44059:tid 44080] [client 20.104.227.76:42663] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "ag1SjBfFs-oSOOcyjyzLbwAAARM"]
[Wed May 20 14:19:57.050603 2026] [:error] [pid 7731:tid 7738] [client 20.104.227.76:39807] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "ag1SjX9qQlHXbkl2nEuaeQAAAYU"]
[Wed May 20 14:19:57.730911 2026] [:error] [pid 7664:tid 7673] [client 20.104.227.76:37844] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/w.php"] [unique_id "ag1SjXZ8s7o3eiqT2kvM5AAAAUY"]
[Wed May 20 14:19:58.253813 2026] [:error] [pid 7731:tid 7741] [client 20.104.227.76:41346] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "ag1Sjn9qQlHXbkl2nEuaewAAAYg"]
[Wed May 20 14:19:58.695161 2026] [:error] [pid 7664:tid 7676] [client 20.104.227.76:41404] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "ag1SjnZ8s7o3eiqT2kvM5wAAAUk"]
[Wed May 20 14:19:59.229570 2026] [:error] [pid 7664:tid 7689] [client 20.104.227.76:42700] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "ag1Sj3Z8s7o3eiqT2kvM6AAAAVY"]
[Wed May 20 14:19:59.672515 2026] [:error] [pid 7664:tid 7674] [client 20.104.227.76:39782] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ws78.php"] [unique_id "ag1Sj3Z8s7o3eiqT2kvM6gAAAUc"]
[Wed May 20 14:20:00.189779 2026] [:error] [pid 41278:tid 41323] [client 20.104.227.76:41347] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "ag1SkPWiNKASEfiGdwaVwAAAAE4"]
[Wed May 20 14:20:00.737569 2026] [:error] [pid 44059:tid 44077] [client 20.104.227.76:39769] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "ag1SkBfFs-oSOOcyjyzLcgAAARA"]
[Wed May 20 14:20:01.339707 2026] [:error] [pid 41278:tid 41314] [client 20.104.227.76:39758] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "ag1SkfWiNKASEfiGdwaVwQAAAEU"]
[Wed May 20 14:20:02.113907 2026] [:error] [pid 7664:tid 7691] [client 20.104.227.76:39759] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xxx.php"] [unique_id "ag1SknZ8s7o3eiqT2kvM6wAAAVg"]
[Wed May 20 14:20:02.572271 2026] [:error] [pid 7664:tid 7669] [client 20.104.227.76:39745] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ag1SknZ8s7o3eiqT2kvM7AAAAUI"]
[Wed May 20 14:20:03.224695 2026] [:error] [pid 7731:tid 7738] [client 20.104.227.76:42688] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ag1Sk39qQlHXbkl2nEuajAAAAYU"]
[Wed May 20 14:20:03.737683 2026] [:error] [pid 44059:tid 44073] [client 20.104.227.76:42736] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ag1SkxfFs-oSOOcyjyzLhwAAAQw"]
[Wed May 20 14:20:04.218858 2026] [:error] [pid 44059:tid 44061] [client 20.104.227.76:37918] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a7.php"] [unique_id "ag1SlBfFs-oSOOcyjyzLjgAAAQA"]
[Wed May 20 14:20:04.711428 2026] [:error] [pid 41278:tid 41332] [client 20.104.227.76:37897] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag1SlPWiNKASEfiGdwaVwwAAAFc"]
[Wed May 20 14:20:05.226695 2026] [:error] [pid 41364:tid 41383] [client 20.104.227.76:37893] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag1SlRKTmyvxtNXrN-iR3gAAAJE"]
[Wed May 20 14:20:05.696044 2026] [:error] [pid 41364:tid 41369] [client 20.104.227.76:42641] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag1SlRKTmyvxtNXrN-iR4AAAAIM"]
[Wed May 20 14:20:06.204656 2026] [:error] [pid 41364:tid 41389] [client 20.104.227.76:42652] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag1SlhKTmyvxtNXrN-iR4gAAAJc"]
[Wed May 20 14:20:06.678991 2026] [:error] [pid 44059:tid 44063] [client 20.104.227.76:41155] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "ag1SlhfFs-oSOOcyjyzLkwAAAQI"]
[Wed May 20 14:20:07.283665 2026] [:error] [pid 41279:tid 41356] [client 20.104.227.76:41171] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "ag1Sl7EFyfaehGZbt4xxbQAAANQ"]
[Wed May 20 14:20:07.830156 2026] [:error] [pid 44059:tid 44075] [client 20.104.227.76:42646] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "ag1SlxfFs-oSOOcyjyzLlAAAAQ4"]
[Wed May 20 14:20:08.409502 2026] [:error] [pid 44059:tid 44084] [client 20.104.227.76:39746] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a1.php"] [unique_id "ag1SmBfFs-oSOOcyjyzLlgAAARc"]
[Wed May 20 14:20:09.027660 2026] [:error] [pid 41277:tid 41306] [client 20.104.227.76:41358] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "ag1SmbTTCltJmboB5uflhwAAABg"]
[Wed May 20 14:20:09.568679 2026] [:error] [pid 44059:tid 44077] [client 20.104.227.76:37837] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "ag1SmRfFs-oSOOcyjyzLlwAAARA"]
[Wed May 20 14:20:10.016117 2026] [:error] [pid 41277:tid 41301] [client 20.104.227.76:42740] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "ag1SmrTTCltJmboB5ufliAAAABM"]
[Wed May 20 14:20:10.460626 2026] [:error] [pid 7664:tid 7675] [client 20.104.227.76:42698] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/d.php"] [unique_id "ag1SmnZ8s7o3eiqT2kvM7wAAAUg"]
[Wed May 20 14:20:10.963479 2026] [:error] [pid 41279:tid 41353] [client 20.104.227.76:42668] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ag1SmrEFyfaehGZbt4xxbgAAANE"]
[Wed May 20 14:20:11.405702 2026] [:error] [pid 41279:tid 41339] [client 20.104.227.76:42634] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ag1Sm7EFyfaehGZbt4xxbwAAAMM"]
[Wed May 20 14:20:11.886314 2026] [:error] [pid 41364:tid 41386] [client 20.104.227.76:41208] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ag1SmxKTmyvxtNXrN-iR5AAAAJQ"]
[Wed May 20 14:20:12.339672 2026] [:error] [pid 41364:tid 41372] [client 20.104.227.76:37824] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xff.php"] [unique_id "ag1SnBKTmyvxtNXrN-iR5QAAAIY"]
[Wed May 20 14:20:12.806594 2026] [:error] [pid 7664:tid 7688] [client 20.104.227.76:41163] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ag1SnHZ8s7o3eiqT2kvM8QAAAVU"]
[Wed May 20 14:20:13.470436 2026] [:error] [pid 41364:tid 41375] [client 20.104.227.76:42716] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ag1SnRKTmyvxtNXrN-iR5gAAAIk"]
[Wed May 20 14:20:14.005768 2026] [:error] [pid 44059:tid 44085] [client 20.104.227.76:41196] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ag1SnhfFs-oSOOcyjyzLmAAAARg"]
[Wed May 20 14:20:14.461005 2026] [:error] [pid 41279:tid 41338] [client 20.104.227.76:41394] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bal.php"] [unique_id "ag1SnrEFyfaehGZbt4xxcQAAAMI"]
[Wed May 20 14:20:14.922053 2026] [:error] [pid 44059:tid 44080] [client 20.104.227.76:42677] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "ag1SnhfFs-oSOOcyjyzLmgAAARM"]
[Wed May 20 14:20:15.386981 2026] [:error] [pid 7664:tid 7672] [client 20.104.227.76:42749] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "ag1Sn3Z8s7o3eiqT2kvM8gAAAUU"]
[Wed May 20 14:20:15.832397 2026] [:error] [pid 41277:tid 41302] [client 20.104.227.76:42707] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "ag1Sn7TTCltJmboB5ufliQAAABQ"]
[Wed May 20 14:20:16.289060 2026] [:error] [pid 44059:tid 44063] [client 20.104.227.76:41194] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xltt.php"] [unique_id "ag1SoBfFs-oSOOcyjyzLngAAAQI"]
[Wed May 20 14:20:16.730309 2026] [:error] [pid 41278:tid 41316] [client 20.104.227.76:42669] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/son.php"] [unique_id "ag1SoPWiNKASEfiGdwaVxgAAAEc"]
[Wed May 20 14:20:17.231757 2026] [:error] [pid 44059:tid 44084] [client 20.104.227.76:37828] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/son.php"] [unique_id "ag1SoRfFs-oSOOcyjyzLoAAAARc"]
[Wed May 20 14:20:17.732115 2026] [:error] [pid 41364:tid 41366] [client 20.104.227.76:39786] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/son.php"] [unique_id "ag1SoRKTmyvxtNXrN-iR5wAAAIA"]
[Wed May 20 14:20:18.177212 2026] [:error] [pid 7664:tid 7667] [client 20.104.227.76:39788] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/son.php"] [unique_id "ag1SonZ8s7o3eiqT2kvM8wAAAUA"]
[Wed May 20 14:20:18.712592 2026] [:error] [pid 44059:tid 44074] [client 20.104.227.76:41182] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "ag1SohfFs-oSOOcyjyzLpAAAAQ0"]
[Wed May 20 14:20:19.215780 2026] [:error] [pid 44059:tid 44085] [client 20.104.227.76:41382] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "ag1SoxfFs-oSOOcyjyzLqAAAARg"]
[Wed May 20 14:20:19.771046 2026] [:error] [pid 7664:tid 7685] [client 20.104.227.76:39791] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "ag1So3Z8s7o3eiqT2kvM9QAAAVI"]
[Wed May 20 14:20:20.344830 2026] [:error] [pid 44059:tid 44080] [client 20.104.227.76:42744] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/doc.php"] [unique_id "ag1SpBfFs-oSOOcyjyzLqQAAARM"]
[Wed May 20 14:20:20.794411 2026] [:error] [pid 44059:tid 44072] [client 20.104.227.76:41199] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zo.php"] [unique_id "ag1SpBfFs-oSOOcyjyzLqgAAAQs"]
[Wed May 20 14:20:21.234597 2026] [:error] [pid 44059:tid 44066] [client 20.104.227.76:41362] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zo.php"] [unique_id "ag1SpRfFs-oSOOcyjyzLqwAAAQU"]
[Wed May 20 14:20:21.672472 2026] [:error] [pid 41278:tid 41325] [client 20.104.227.76:41188] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zo.php"] [unique_id "ag1SpfWiNKASEfiGdwaVyAAAAFA"]
[Wed May 20 14:20:22.121359 2026] [:error] [pid 44059:tid 44078] [client 20.104.227.76:42654] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/zo.php"] [unique_id "ag1SphfFs-oSOOcyjyzLrAAAARE"]
[Wed May 20 14:20:22.576308 2026] [:error] [pid 44059:tid 44067] [client 20.104.227.76:41370] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ag1SphfFs-oSOOcyjyzLrQAAAQY"]
[Wed May 20 14:20:23.032678 2026] [:error] [pid 41279:tid 41348] [client 20.104.227.76:41210] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ag1Sp7EFyfaehGZbt4xxcgAAAMw"]
[Wed May 20 14:20:23.489392 2026] [:error] [pid 44059:tid 44084] [client 20.104.227.76:42640] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ag1SpxfFs-oSOOcyjyzLrwAAARc"]
[Wed May 20 14:20:23.935483 2026] [:error] [pid 44059:tid 44075] [client 20.104.227.76:39802] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/xper1.php"] [unique_id "ag1SpxfFs-oSOOcyjyzLsAAAAQ4"]
[Wed May 20 14:20:24.472041 2026] [:error] [pid 44059:tid 44081] [client 20.104.227.76:42691] [client 20.104.227.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/tiny.php"] [unique_id "ag1SqBfFs-oSOOcyjyzLsQAAARQ"]
[Wed May 20 14:20:24.914827 2026] [:error] [pid 41364:tid 41376] [client 20.104.227.76:42632] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "ag1SqBKTmyvxtNXrN-iR6QAAAIo"]
[Wed May 20 14:20:25.413113 2026] [:error] [pid 41364:tid 41390] [client 20.104.227.76:41214] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "ag1SqRKTmyvxtNXrN-iR6wAAAJg"]
[Wed May 20 14:20:25.944653 2026] [:error] [pid 41278:tid 41310] [client 20.104.227.76:42643] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/s1.php"] [unique_id "ag1SqfWiNKASEfiGdwaVyQAAAEE"]
[Wed May 20 14:20:26.381573 2026] [:error] [pid 41277:tid 41304] [client 20.104.227.76:42673] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/de.php"] [unique_id "ag1SqrTTCltJmboB5ufljQAAABY"]
[Wed May 20 14:20:26.970762 2026] [:error] [pid 41278:tid 41329] [client 20.104.227.76:41375] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/de.php"] [unique_id "ag1SqvWiNKASEfiGdwaVzAAAAFQ"]
[Wed May 20 14:20:27.487150 2026] [:error] [pid 41277:tid 41288] [client 20.104.227.76:37915] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/de.php"] [unique_id "ag1Sq7TTCltJmboB5ufljgAAAAY"]
[Wed May 20 14:20:27.922031 2026] [:error] [pid 41279:tid 41354] [client 20.104.227.76:42648] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/de.php"] [unique_id "ag1Sq7EFyfaehGZbt4xxcwAAANI"]
[Wed May 20 14:20:28.453977 2026] [:error] [pid 41364:tid 41387] [client 20.104.227.76:41180] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "ag1SrBKTmyvxtNXrN-iR7QAAAJU"]
[Wed May 20 14:20:29.037985 2026] [:error] [pid 41279:tid 41341] [client 20.104.227.76:41186] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "ag1SrbEFyfaehGZbt4xxdAAAAMU"]
[Wed May 20 14:20:29.608014 2026] [:error] [pid 41278:tid 41326] [client 20.104.227.76:37913] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "ag1SrfWiNKASEfiGdwaVzgAAAFE"]
[Wed May 20 14:20:30.106171 2026] [:error] [pid 44059:tid 44083] [client 20.104.227.76:42636] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/1a.php"] [unique_id "ag1SrhfFs-oSOOcyjyzLtQAAARY"]
[Wed May 20 14:20:30.678454 2026] [:error] [pid 7731:tid 7749] [client 20.104.227.76:37842] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "ag1Srn9qQlHXbkl2nEuakAAAAZA"]
[Wed May 20 14:20:31.218065 2026] [:error] [pid 7731:tid 7740] [client 20.104.227.76:41373] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "ag1Sr39qQlHXbkl2nEuakQAAAYc"]
[Wed May 20 14:20:31.719115 2026] [:error] [pid 41364:tid 41388] [client 20.104.227.76:37045] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "ag1SrxKTmyvxtNXrN-iR8AAAAJY"]
[Wed May 20 14:20:32.162014 2026] [:error] [pid 44059:tid 44080] [client 20.104.227.76:42751] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/2.php"] [unique_id "ag1SsBfFs-oSOOcyjyzLugAAARM"]
[Wed May 20 14:20:32.716509 2026] [:error] [pid 44059:tid 44067] [client 20.104.227.76:42701] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ag1SsBfFs-oSOOcyjyzLuwAAAQY"]
[Wed May 20 14:20:33.497487 2026] [:error] [pid 7664:tid 7669] [client 20.104.227.76:37827] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ag1SsXZ8s7o3eiqT2kvM-wAAAUI"]
[Wed May 20 14:20:34.123922 2026] [:error] [pid 44059:tid 44084] [client 20.104.227.76:39783] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ag1SshfFs-oSOOcyjyzLvQAAARc"]
[Wed May 20 14:20:34.721352 2026] [:error] [pid 44059:tid 44071] [client 20.104.227.76:42735] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f35.php"] [unique_id "ag1SshfFs-oSOOcyjyzLvgAAAQo"]
[Wed May 20 14:20:35.175112 2026] [:error] [pid 44059:tid 44061] [client 20.104.227.76:42717] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sky.php"] [unique_id "ag1SsxfFs-oSOOcyjyzLwQAAAQA"]
[Wed May 20 14:20:35.612085 2026] [:error] [pid 41277:tid 41294] [client 20.104.227.76:42630] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sky.php"] [unique_id "ag1Ss7TTCltJmboB5uflkQAAAAw"]
[Wed May 20 14:20:36.077339 2026] [:error] [pid 7664:tid 7680] [client 20.104.227.76:42711] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sky.php"] [unique_id "ag1StHZ8s7o3eiqT2kvM_gAAAU0"]
[Wed May 20 14:20:36.577698 2026] [:error] [pid 7664:tid 7675] [client 20.104.227.76:41371] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sky.php"] [unique_id "ag1StHZ8s7o3eiqT2kvM_wAAAUg"]
[Wed May 20 14:20:37.082227 2026] [:error] [pid 7731:tid 7752] [client 20.104.227.76:37923] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "ag1StX9qQlHXbkl2nEualQAAAZM"]
[Wed May 20 14:20:37.616627 2026] [:error] [pid 44059:tid 44070] [client 20.104.227.76:41191] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "ag1StRfFs-oSOOcyjyzLxwAAAQk"]
[Wed May 20 14:20:38.203371 2026] [:error] [pid 44059:tid 44080] [client 20.104.227.76:41387] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "ag1SthfFs-oSOOcyjyzLyQAAARM"]
[Wed May 20 14:20:38.740709 2026] [:error] [pid 44059:tid 44079] [client 20.104.227.76:41167] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/man.php"] [unique_id "ag1SthfFs-oSOOcyjyzLywAAARI"]
[Wed May 20 14:20:39.314514 2026] [:error] [pid 44059:tid 44071] [client 20.104.227.76:41372] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ag1StxfFs-oSOOcyjyzLzgAAAQo"]
[Wed May 20 14:20:39.913930 2026] [:error] [pid 44059:tid 44061] [client 20.104.227.76:37856] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ag1StxfFs-oSOOcyjyzL0AAAAQA"]
[Wed May 20 14:20:40.379035 2026] [:error] [pid 7664:tid 7673] [client 20.104.227.76:37946] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ag1SuHZ8s7o3eiqT2kvNAgAAAUY"]
[Wed May 20 14:20:41.049420 2026] [:error] [pid 41364:tid 41387] [client 20.104.227.76:39797] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ms-edit.php"] [unique_id "ag1SuRKTmyvxtNXrN-iR_wAAAJU"]
[Wed May 20 14:20:41.646082 2026] [:error] [pid 44059:tid 44080] [client 20.104.227.76:41203] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/7.php"] [unique_id "ag1SuRfFs-oSOOcyjyzL0QAAARM"]
[Wed May 20 14:21:01.668478 2026] [:error] [pid 41364:tid 41378] [client 20.104.227.76:37912] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ag1SzRKTmyvxtNXrN-iSEAAAAIw"]
[Wed May 20 14:21:02.102836 2026] [:error] [pid 44059:tid 44064] [client 20.104.227.76:42734] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ag1SzhfFs-oSOOcyjyzL5wAAAQM"]
[Wed May 20 14:21:02.547923 2026] [:error] [pid 44059:tid 44061] [client 20.104.227.76:37876] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ag1SzhfFs-oSOOcyjyzL6AAAAQA"]
[Wed May 20 14:21:03.098208 2026] [:error] [pid 44059:tid 44062] [client 20.104.227.76:37826] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/tx79.php"] [unique_id "ag1SzxfFs-oSOOcyjyzL6QAAAQE"]
[Wed May 20 14:21:03.625808 2026] [:error] [pid 41277:tid 41301] [client 20.104.227.76:42651] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "ag1Sz7TTCltJmboB5ufllQAAABM"]
[Wed May 20 14:21:04.180073 2026] [:error] [pid 41278:tid 41325] [client 20.104.227.76:41198] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "ag1S0PWiNKASEfiGdwaV1AAAAFA"]
[Wed May 20 14:21:04.727561 2026] [:error] [pid 41278:tid 41310] [client 20.104.227.76:41353] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "ag1S0PWiNKASEfiGdwaV1QAAAEE"]
[Wed May 20 14:21:05.177300 2026] [:error] [pid 44059:tid 44077] [client 20.104.227.76:37909] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-class.php"] [unique_id "ag1S0RfFs-oSOOcyjyzL7AAAARA"]
[Wed May 20 14:21:05.760143 2026] [:error] [pid 44059:tid 44074] [client 20.104.227.76:39750] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "ag1S0RfFs-oSOOcyjyzL7QAAAQ0"]
[Wed May 20 14:21:06.402357 2026] [:error] [pid 44059:tid 44082] [client 20.104.227.76:42706] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "ag1S0hfFs-oSOOcyjyzL7gAAARU"]
[Wed May 20 14:21:07.039204 2026] [:error] [pid 41364:tid 41369] [client 20.104.227.76:37845] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "ag1S0xKTmyvxtNXrN-iSEgAAAIM"]
[Wed May 20 14:21:07.573422 2026] [:error] [pid 44059:tid 44079] [client 20.104.227.76:37899] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/8.php"] [unique_id "ag1S0xfFs-oSOOcyjyzL7wAAARI"]
[Wed May 20 14:21:08.013648 2026] [:error] [pid 44059:tid 44065] [client 20.104.227.76:41357] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "ag1S1BfFs-oSOOcyjyzL8QAAAQQ"]
[Wed May 20 14:21:08.498273 2026] [:error] [pid 41277:tid 41302] [client 20.104.227.76:39784] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "ag1S1LTTCltJmboB5uflmAAAABQ"]
[Wed May 20 14:21:08.941131 2026] [:error] [pid 41277:tid 41285] [client 20.104.227.76:41348] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "ag1S1LTTCltJmboB5uflmQAAAAM"]
[Wed May 20 14:21:09.393490 2026] [:error] [pid 41279:tid 41354] [client 20.104.227.76:37891] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/options.php"] [unique_id "ag1S1bEFyfaehGZbt4xxfgAAANI"]
[Wed May 20 14:21:09.838029 2026] [:error] [pid 44059:tid 44068] [client 20.104.227.76:36993] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f5.php"] [unique_id "ag1S1RfFs-oSOOcyjyzL8gAAAQc"]
[Wed May 20 14:21:10.325133 2026] [:error] [pid 44059:tid 44078] [client 20.104.227.76:41393] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f5.php"] [unique_id "ag1S1hfFs-oSOOcyjyzL8wAAARE"]
[Wed May 20 14:21:10.883622 2026] [:error] [pid 41279:tid 41351] [client 20.104.227.76:37932] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f5.php"] [unique_id "ag1S1rEFyfaehGZbt4xxgAAAAM8"]
[Wed May 20 14:21:11.827328 2026] [:error] [pid 7731:tid 7739] [client 20.104.227.76:41200] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/f5.php"] [unique_id "ag1S139qQlHXbkl2nEuanwAAAYY"]
[Wed May 20 14:21:12.300783 2026] [:error] [pid 7664:tid 7678] [client 20.104.227.76:41153] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "ag1S2HZ8s7o3eiqT2kvNBwAAAUs"]
[Wed May 20 14:21:12.839902 2026] [:error] [pid 41279:tid 41337] [client 20.104.227.76:41202] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "ag1S2LEFyfaehGZbt4xxgQAAAME"]
[Wed May 20 14:21:13.286204 2026] [:error] [pid 44059:tid 44074] [client 20.104.227.76:41349] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "ag1S2RfFs-oSOOcyjyzL-QAAAQ0"]
[Wed May 20 14:21:13.781898 2026] [:error] [pid 44059:tid 44070] [client 20.104.227.76:37860] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alpha.php"] [unique_id "ag1S2RfFs-oSOOcyjyzL-gAAAQk"]
[Wed May 20 14:21:14.234381 2026] [:error] [pid 41278:tid 41326] [client 20.104.227.76:37840] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/son1.php"] [unique_id "ag1S2vWiNKASEfiGdwaV2QAAAFE"]
[Wed May 20 14:21:14.693741 2026] [:error] [pid 41279:tid 41344] [client 20.104.227.76:41181] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/son1.php"] [unique_id "ag1S2rEFyfaehGZbt4xxggAAAMg"]
[Wed May 20 14:21:15.154629 2026] [:error] [pid 7664:tid 7679] [client 20.104.227.76:41192] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/son1.php"] [unique_id "ag1S23Z8s7o3eiqT2kvNCAAAAUw"]
[Wed May 20 14:21:15.676300 2026] [:error] [pid 41277:tid 41304] [client 20.104.227.76:37905] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/son1.php"] [unique_id "ag1S27TTCltJmboB5uflmgAAABY"]
[Wed May 20 14:21:16.200703 2026] [:error] [pid 41278:tid 41313] [client 20.104.227.76:37888] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "ag1S3PWiNKASEfiGdwaV2wAAAEQ"]
[Wed May 20 14:21:16.772255 2026] [:error] [pid 41278:tid 41323] [client 20.104.227.76:37895] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "ag1S3PWiNKASEfiGdwaV3AAAAE4"]
[Wed May 20 14:21:17.367718 2026] [:error] [pid 41278:tid 41324] [client 20.104.227.76:42745] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "ag1S3fWiNKASEfiGdwaV3QAAAE8"]
[Wed May 20 14:21:17.977832 2026] [:error] [pid 41277:tid 41298] [client 20.104.227.76:42659] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ggb.php"] [unique_id "ag1S3bTTCltJmboB5uflmwAAABA"]
[Wed May 20 14:21:18.480823 2026] [:error] [pid 41279:tid 41349] [client 20.104.227.76:42704] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amxloxxr.php"] [unique_id "ag1S3rEFyfaehGZbt4xxgwAAAM0"]
[Wed May 20 14:21:18.995430 2026] [:error] [pid 41278:tid 41332] [client 20.104.227.76:36994] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amxloxxr.php"] [unique_id "ag1S3vWiNKASEfiGdwaV3gAAAFc"]
[Wed May 20 14:21:19.593508 2026] [:error] [pid 7731:tid 7751] [client 20.104.227.76:41201] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/amxloxxr.php"] [unique_id "ag1S339qQlHXbkl2nEuaoAAAAZI"]
[Wed May 20 14:21:20.049140 2026] [:error] [pid 7664:tid 7675] [client 20.104.227.76:39760] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "ag1S4HZ8s7o3eiqT2kvNCwAAAUg"]
[Wed May 20 14:21:20.595021 2026] [:error] [pid 7664:tid 7681] [client 20.104.227.76:36840] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "ag1S4HZ8s7o3eiqT2kvNDAAAAU4"]
[Wed May 20 14:21:21.146962 2026] [:error] [pid 41277:tid 41283] [client 20.104.227.76:41156] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "ag1S4bTTCltJmboB5uflnAAAAAE"]
[Wed May 20 14:21:21.582746 2026] [:error] [pid 7731:tid 7756] [client 20.104.227.76:41376] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/ss.php"] [unique_id "ag1S4X9qQlHXbkl2nEuaoQAAAZc"]
[Wed May 20 14:21:22.058075 2026] [:error] [pid 7731:tid 7736] [client 20.104.227.76:41197] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "ag1S4n9qQlHXbkl2nEuaogAAAYM"]
[Wed May 20 14:21:22.554591 2026] [:error] [pid 7731:tid 7750] [client 20.104.227.76:42719] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "ag1S4n9qQlHXbkl2nEuapAAAAZE"]
[Wed May 20 14:21:23.097807 2026] [:error] [pid 41278:tid 41331] [client 20.104.227.76:37939] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "ag1S4_WiNKASEfiGdwaV3wAAAFY"]
[Wed May 20 14:21:23.535886 2026] [:error] [pid 7731:tid 7738] [client 20.104.227.76:37872] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/sadcut1.php"] [unique_id "ag1S439qQlHXbkl2nEuapwAAAYU"]
[Wed May 20 14:21:23.997711 2026] [:error] [pid 41279:tid 41342] [client 20.104.227.76:41209] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "ag1S47EFyfaehGZbt4xxhAAAAMY"]
[Wed May 20 14:21:24.571497 2026] [:error] [pid 7664:tid 7667] [client 20.104.227.76:37917] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "ag1S5HZ8s7o3eiqT2kvNDQAAAUA"]
[Wed May 20 14:21:25.104942 2026] [:error] [pid 41279:tid 41346] [client 20.104.227.76:42724] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "ag1S5bEFyfaehGZbt4xxhQAAAMo"]
[Wed May 20 14:21:25.660659 2026] [:error] [pid 44059:tid 44072] [client 20.104.227.76:39754] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/rh.php"] [unique_id "ag1S5RfFs-oSOOcyjyzL_QAAAQs"]
[Wed May 20 14:21:26.171669 2026] [:error] [pid 41278:tid 41315] [client 20.104.227.76:41160] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/99.php"] [unique_id "ag1S5vWiNKASEfiGdwaV4AAAAEY"]
[Wed May 20 14:21:26.868857 2026] [:error] [pid 41279:tid 41345] [client 20.104.227.76:42708] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/99.php"] [unique_id "ag1S5rEFyfaehGZbt4xxhgAAAMk"]
[Wed May 20 14:21:27.466198 2026] [:error] [pid 41277:tid 41297] [client 20.104.227.76:35662] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/99.php"] [unique_id "ag1S57TTCltJmboB5uflnQAAAA8"]
[Wed May 20 14:21:27.977852 2026] [:error] [pid 41279:tid 41356] [client 20.104.227.76:37027] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/99.php"] [unique_id "ag1S57EFyfaehGZbt4xxiAAAANQ"]
[Wed May 20 14:21:28.504024 2026] [:error] [pid 41279:tid 41339] [client 20.104.227.76:42741] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "ag1S6LEFyfaehGZbt4xxiQAAAMM"]
[Wed May 20 14:21:29.134410 2026] [:error] [pid 7731:tid 7753] [client 20.104.227.76:37924] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "ag1S6X9qQlHXbkl2nEuaqQAAAZQ"]
[Wed May 20 14:21:29.703694 2026] [:error] [pid 41277:tid 41284] [client 20.104.227.76:41368] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "ag1S6bTTCltJmboB5uflngAAAAI"]
[Wed May 20 14:21:30.269296 2026] [:error] [pid 41277:tid 41294] [client 20.104.227.76:41187] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/layout.php"] [unique_id "ag1S6rTTCltJmboB5uflnwAAAAw"]
[Wed May 20 14:21:30.800855 2026] [:error] [pid 41277:tid 41291] [client 20.104.227.76:42655] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "ag1S6rTTCltJmboB5ufloAAAAAk"]
[Wed May 20 14:21:31.469218 2026] [:error] [pid 41364:tid 41389] [client 20.104.227.76:41377] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "ag1S6xKTmyvxtNXrN-iSEwAAAJc"]
[Wed May 20 14:21:32.070863 2026] [:error] [pid 41277:tid 41300] [client 20.104.227.76:41350] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "ag1S7LTTCltJmboB5ufloQAAABI"]
[Wed May 20 14:21:32.570834 2026] [:error] [pid 44059:tid 44080] [client 20.104.227.76:41157] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/12.php"] [unique_id "ag1S7BfFs-oSOOcyjyzL_gAAARM"]
[Wed May 20 14:21:33.044888 2026] [:error] [pid 41364:tid 41371] [client 20.104.227.76:37931] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "ag1S7RKTmyvxtNXrN-iSFAAAAIU"]
[Wed May 20 14:21:33.577395 2026] [:error] [pid 44059:tid 44075] [client 20.104.227.76:37018] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "ag1S7RfFs-oSOOcyjyzL_wAAAQ4"]
[Wed May 20 14:21:34.377150 2026] [:error] [pid 41277:tid 41286] [client 20.104.227.76:37896] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "ag1S7rTTCltJmboB5uflowAAAAQ"]
[Wed May 20 14:21:34.996689 2026] [:error] [pid 41278:tid 41325] [client 20.104.227.76:41154] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/fs.php"] [unique_id "ag1S7vWiNKASEfiGdwaV4wAAAFA"]
[Wed May 20 14:21:35.742064 2026] [:error] [pid 44059:tid 44068] [client 20.104.227.76:37863] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "ag1S7xfFs-oSOOcyjyzMAQAAAQc"]
[Wed May 20 14:21:36.341854 2026] [:error] [pid 44059:tid 44078] [client 20.104.227.76:42722] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "ag1S8BfFs-oSOOcyjyzMAgAAARE"]
[Wed May 20 14:21:36.912927 2026] [:error] [pid 7664:tid 7676] [client 20.104.227.76:42731] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "ag1S8HZ8s7o3eiqT2kvNDwAAAUk"]
[Wed May 20 14:21:37.476804 2026] [:error] [pid 41364:tid 41386] [client 20.104.227.76:41397] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/aaa.php"] [unique_id "ag1S8RKTmyvxtNXrN-iSFgAAAJQ"]
[Wed May 20 14:21:37.982548 2026] [:error] [pid 41364:tid 41372] [client 20.104.227.76:36815] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag1S8RKTmyvxtNXrN-iSFwAAAIY"]
[Wed May 20 14:21:38.512096 2026] [:error] [pid 41364:tid 41375] [client 20.104.227.76:37052] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag1S8hKTmyvxtNXrN-iSGAAAAIk"]
[Wed May 20 14:21:39.011773 2026] [:error] [pid 41278:tid 41318] [client 20.104.227.76:41206] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag1S8_WiNKASEfiGdwaV5QAAAEk"]
[Wed May 20 14:21:39.505141 2026] [:error] [pid 44059:tid 44069] [client 20.104.227.76:36820] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag1S8xfFs-oSOOcyjyzMBAAAAQg"]
[Wed May 20 14:21:40.066585 2026] [:error] [pid 7731:tid 7752] [client 20.104.227.76:37865] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ag1S9H9qQlHXbkl2nEuarQAAAZM"]
[Wed May 20 14:21:40.775419 2026] [:error] [pid 7731:tid 7735] [client 20.104.227.76:39774] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ag1S9H9qQlHXbkl2nEuargAAAYI"]
[Wed May 20 14:21:41.306371 2026] [:error] [pid 41278:tid 41330] [client 20.104.227.76:37925] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ag1S9fWiNKASEfiGdwaV5wAAAFU"]
[Wed May 20 14:21:41.783051 2026] [:error] [pid 41278:tid 41319] [client 20.104.227.76:37929] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/a5.php"] [unique_id "ag1S9fWiNKASEfiGdwaV6AAAAEo"]
[Wed May 20 14:21:42.238790 2026] [:error] [pid 41278:tid 41313] [client 20.104.227.76:39755] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "ag1S9vWiNKASEfiGdwaV6gAAAEQ"]
[Wed May 20 14:21:42.676496 2026] [:error] [pid 41278:tid 41314] [client 20.104.227.76:42644] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "ag1S9vWiNKASEfiGdwaV7QAAAEU"]
[Wed May 20 14:21:43.191096 2026] [:error] [pid 44059:tid 44077] [client 20.104.227.76:39765] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "ag1S9xfFs-oSOOcyjyzMBQAAARA"]
[Wed May 20 14:21:43.629060 2026] [:error] [pid 41278:tid 41324] [client 20.104.227.76:41173] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/hplfuns.php"] [unique_id "ag1S9_WiNKASEfiGdwaV7gAAAE8"]
[Wed May 20 14:21:44.075154 2026] [:error] [pid 44059:tid 44083] [client 20.104.227.76:37847] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ag1S-BfFs-oSOOcyjyzMBwAAARY"]
[Wed May 20 14:21:44.588623 2026] [:error] [pid 44059:tid 44084] [client 20.104.227.76:37943] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ag1S-BfFs-oSOOcyjyzMCAAAARc"]
[Wed May 20 14:21:45.038321 2026] [:error] [pid 41278:tid 41332] [client 20.104.227.76:35692] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ag1S-fWiNKASEfiGdwaV7wAAAFc"]
[Wed May 20 14:21:45.660331 2026] [:error] [pid 44059:tid 44074] [client 20.104.227.76:39789] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/bolt.php"] [unique_id "ag1S-RfFs-oSOOcyjyzMCQAAAQ0"]
[Wed May 20 14:21:46.181275 2026] [:error] [pid 44059:tid 44070] [client 20.104.227.76:41193] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "ag1S-hfFs-oSOOcyjyzMCgAAAQk"]
[Wed May 20 14:21:46.712867 2026] [:error] [pid 7731:tid 7739] [client 20.104.227.76:42670] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "ag1S-n9qQlHXbkl2nEuasAAAAYY"]
[Wed May 20 14:21:47.254870 2026] [:error] [pid 7731:tid 7751] [client 20.104.227.76:42728] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "ag1S-39qQlHXbkl2nEuasQAAAZI"]
[Wed May 20 14:21:47.723470 2026] [:error] [pid 41277:tid 41306] [client 20.104.227.76:41178] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/inputs.php"] [unique_id "ag1S-7TTCltJmboB5uflpAAAABg"]
[Wed May 20 14:21:48.255468 2026] [:error] [pid 41277:tid 41296] [client 20.104.227.76:37883] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "ag1S_LTTCltJmboB5uflpQAAAA4"]
[Wed May 20 14:21:48.856497 2026] [:error] [pid 44059:tid 44081] [client 20.104.227.76:37024] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "ag1S_BfFs-oSOOcyjyzMDAAAARQ"]
[Wed May 20 14:21:49.450731 2026] [:error] [pid 7731:tid 7750] [client 20.104.227.76:37838] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "ag1S_X9qQlHXbkl2nEuaswAAAZE"]
[Wed May 20 14:21:50.021567 2026] [:error] [pid 41278:tid 41331] [client 20.104.227.76:37914] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/file2.php"] [unique_id "ag1S_vWiNKASEfiGdwaWBwAAAFY"]
[Wed May 20 14:21:50.493201 2026] [:error] [pid 41278:tid 41322] [client 20.104.227.76:37874] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "ag1S_vWiNKASEfiGdwaWDQAAAE0"]
[Wed May 20 14:21:51.320864 2026] [:error] [pid 7731:tid 7745] [client 20.104.227.76:36995] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "ag1S_39qQlHXbkl2nEuatgAAAYw"]
[Wed May 20 14:21:51.933605 2026] [:error] [pid 41278:tid 41310] [client 20.104.227.76:37903] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "ag1S__WiNKASEfiGdwaWDgAAAEE"]
[Wed May 20 14:21:52.469816 2026] [:error] [pid 7664:tid 7668] [client 20.104.227.76:41367] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/index/function.php"] [unique_id "ag1TAHZ8s7o3eiqT2kvNEQAAAUE"]
[Wed May 20 14:21:53.082877 2026] [:error] [pid 41364:tid 41373] [client 20.104.227.76:39763] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "ag1TARKTmyvxtNXrN-iSPgAAAIc"]
[Wed May 20 14:21:53.705567 2026] [:error] [pid 44059:tid 44076] [client 20.104.227.76:41158] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "ag1TARfFs-oSOOcyjyzMIgAAAQ8"]
[Wed May 20 14:21:54.381930 2026] [:error] [pid 7731:tid 7741] [client 20.104.227.76:42696] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "ag1TAn9qQlHXbkl2nEuatwAAAYg"]
[Wed May 20 14:21:55.159167 2026] [:error] [pid 41278:tid 41311] [client 20.104.227.76:37906] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wk/index.php"] [unique_id "ag1TA_WiNKASEfiGdwaWFQAAAEI"]
[Wed May 20 14:21:55.805492 2026] [:error] [pid 41364:tid 41382] [client 20.104.227.76:37869] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "ag1TAxKTmyvxtNXrN-iSTQAAAJA"]
[Wed May 20 14:21:56.312218 2026] [:error] [pid 7664:tid 7671] [client 20.104.227.76:42719] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "ag1TBHZ8s7o3eiqT2kvNEgAAAUQ"]
[Wed May 20 14:21:56.843054 2026] [:error] [pid 7664:tid 7691] [client 20.104.227.76:41170] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "ag1TBHZ8s7o3eiqT2kvNEwAAAVg"]
[Wed May 20 14:21:57.490897 2026] [:error] [pid 41279:tid 41353] [client 20.104.227.76:41407] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/alfa.php"] [unique_id "ag1TBbEFyfaehGZbt4xxtQAAANE"]
[Wed May 20 14:21:57.938281 2026] [:error] [pid 41364:tid 41369] [client 20.104.227.76:41161] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-theme.php"] [unique_id "ag1TBRKTmyvxtNXrN-iSTwAAAIM"]
[Wed May 20 14:21:58.458369 2026] [:error] [pid 7731:tid 7740] [client 20.104.227.76:35654] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-theme.php"] [unique_id "ag1TBn9qQlHXbkl2nEuauQAAAYc"]
[Wed May 20 14:21:58.979324 2026] [:error] [pid 7731:tid 7747] [client 20.104.227.76:37911] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-theme.php"] [unique_id "ag1TBn9qQlHXbkl2nEuauwAAAY4"]
[Wed May 20 14:21:59.581868 2026] [:error] [pid 7664:tid 7690] [client 20.104.227.76:37030] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-theme.php"] [unique_id "ag1TB3Z8s7o3eiqT2kvNFQAAAVc"]
[Wed May 20 14:22:18.413498 2026] [autoindex:error] [pid 7731:tid 7752] [client 20.104.227.76:39800] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed May 20 14:22:22.115131 2026] [:error] [pid 7731:tid 7750] [client 20.104.227.76:35666] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ag1THn9qQlHXbkl2nEubBAAAAZE"]
[Wed May 20 14:22:22.745321 2026] [:error] [pid 44059:tid 44071] [client 20.104.227.76:37848] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ag1THhfFs-oSOOcyjyzMVgAAAQo"]
[Wed May 20 14:22:23.356916 2026] [:error] [pid 44059:tid 44062] [client 20.104.227.76:37949] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ag1THxfFs-oSOOcyjyzMWgAAAQE"]
[Wed May 20 14:22:23.882645 2026] [:error] [pid 44059:tid 44077] [client 20.104.227.76:36819] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/100.php"] [unique_id "ag1THxfFs-oSOOcyjyzMXQAAARA"]
[Wed May 20 14:22:24.419595 2026] [:error] [pid 41277:tid 41288] [client 20.104.227.76:41400] [client 20.104.227.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "makifim.com.au"] [uri "/fm.php"] [unique_id "ag1TILTTCltJmboB5ufl8wAAAAY"]
[Wed May 20 14:22:24.959743 2026] [:error] [pid 41277:tid 41306] [client 20.104.227.76:37933] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.ph"] [unique_id "ag1TILTTCltJmboB5ufl9AAAABg"]
[Wed May 20 14:22:25.407691 2026] [:error] [pid 41277:tid 41282] [client 20.104.227.76:42689] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.ph"] [unique_id "ag1TIbTTCltJmboB5ufl9QAAAAA"]
[Wed May 20 14:22:25.874080 2026] [:error] [pid 41278:tid 41332] [client 20.104.227.76:35694] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.ph"] [unique_id "ag1TIfWiNKASEfiGdwaWJwAAAFc"]
[Wed May 20 14:22:26.330775 2026] [:error] [pid 7731:tid 7734] [client 20.104.227.76:36842] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/z.ph"] [unique_id "ag1TIn9qQlHXbkl2nEubCAAAAYE"]
[Wed May 20 14:34:02.294662 2026] [:error] [pid 41279:tid 41345] [client 34.46.57.55:58277] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2rEFyfaehGZbt4xzTAAAAMk"]
[Wed May 20 17:57:35.968723 2026] [:error] [pid 7731:tid 7747] [client 38.154.97.38:43258] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/sitemap.xml"] [unique_id "ag2Fj39qQlHXbkl2nEvYVwAAAY4"]
[Wed May 20 17:57:35.968723 2026] [:error] [pid 7731:tid 7744] [client 38.154.97.38:48337] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/robots.txt"] [unique_id "ag2Fj39qQlHXbkl2nEvYWAAAAYs"]
[Wed May 20 17:57:35.991666 2026] [:error] [pid 44059:tid 44068] [client 38.154.97.38:59748] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ag2FjxfFs-oSOOcyjyz8MwAAAQc"]
[Wed May 20 17:57:37.347090 2026] [:error] [pid 41279:tid 41348] [client 38.154.97.38:41315] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/sitemap.xml"] [unique_id "ag2FkbEFyfaehGZbt4yFLQAAAMw"]
[Wed May 20 17:57:37.347119 2026] [:error] [pid 41279:tid 41337] [client 38.154.97.38:39785] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/robots.txt"] [unique_id "ag2FkbEFyfaehGZbt4yFLAAAAME"]
[Wed May 20 17:57:37.974329 2026] [:error] [pid 7731:tid 7752] [client 38.154.97.38:41738] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||makifim.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ag2FkX9qQlHXbkl2nEvYXgAAAZM"], referer: http://makifim.com.au
[Thu May 21 00:39:59.224425 2026] [:error] [pid 41279:tid 41349] [client 35.187.151.196:52408] [client 35.187.151.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "ag3j37EFyfaehGZbt4y4-AAAAM0"]
[Thu May 21 09:55:59.111699 2026] [:error] [pid 49884:tid 49967] [client 20.206.78.203:8082] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ag5mL65MPpsTNNHWS6gHqQAAAJQ"]
[Thu May 21 09:55:59.112149 2026] [:error] [pid 49982:tid 50000] [client 20.206.78.203:9685] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "ag5mL2FwIDa5Tf8O4bZa8AAAANA"]
[Thu May 21 09:55:59.438350 2026] [:error] [pid 9189:tid 9230] [client 20.206.78.203:9796] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ag5mL5vTDh1NbYizKVw4AQAAAgs"]
[Thu May 21 09:55:59.438482 2026] [:error] [pid 49982:tid 49993] [client 20.206.78.203:9695] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "ag5mL2FwIDa5Tf8O4bZa8QAAAMk"]
[Thu May 21 09:55:59.753612 2026] [:error] [pid 49884:tid 49961] [client 20.206.78.203:8111] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "ag5mL65MPpsTNNHWS6gHqgAAAI4"]
[Thu May 21 09:55:59.757922 2026] [:error] [pid 49884:tid 49953] [client 20.206.78.203:9710] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ag5mL65MPpsTNNHWS6gHqwAAAIY"]
[Thu May 21 09:56:00.687162 2026] [:error] [pid 9189:tid 9243] [client 20.206.78.203:3952] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ag5mMJvTDh1NbYizKVw4BAAAAhg"]
[Thu May 21 09:56:00.687763 2026] [:error] [pid 9189:tid 9220] [client 20.206.78.203:3957] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "ag5mMJvTDh1NbYizKVw4BQAAAgE"]
[Thu May 21 09:56:01.636402 2026] [:error] [pid 9189:tid 9225] [client 20.206.78.203:8122] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "ag5mMZvTDh1NbYizKVw4BgAAAgY"]
[Thu May 21 09:56:01.640446 2026] [:error] [pid 51613:tid 51620] [client 20.206.78.203:8101] [client 20.206.78.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ag5mMWbP0MDvqrVnweqr_AAAAQU"]
[Thu May 21 11:02:52.938709 2026] [:error] [pid 49884:tid 49956] [client 54.66.5.154:15626] [client 54.66.5.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.66.5.154, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag513K5MPpsTNNHWS6gcwgAAAIk"], referer: https://makifim.com.au/wp-admin/about.php
[Thu May 21 11:02:58.453341 2026] [:error] [pid 9189:tid 9227] [client 54.66.5.154:21174] [client 54.66.5.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.66.5.154, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag514pvTDh1NbYizKVxFIAAAAgg"], referer: https://makifim.com.au/wp-admin/
[Thu May 21 11:17:28.590898 2026] [autoindex:error] [pid 9188:tid 9199] [client 95.111.239.37:50058] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu May 21 23:24:12.789112 2026] [:error] [pid 49884:tid 49964] [client 34.150.255.112:65195] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jnK5MPpsTNNHWS6gYGwAAAJE"]
[Thu May 21 23:36:41.762350 2026] [:error] [pid 49884:tid 49955] [client 173.239.224.147:53887] [client 173.239.224.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ahax.php"] [unique_id "ag8mia5MPpsTNNHWS6gbHgAAAIg"]
[Thu May 21 23:36:42.164931 2026] [:error] [pid 49884:tid 49949] [client 173.239.224.174:53095] [client 173.239.224.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ag8miq5MPpsTNNHWS6gbIAAAAII"]
[Fri May 22 07:02:19.632334 2026] [:error] [pid 58782:tid 58800] [client 35.206.65.53:59076] [client 35.206.65.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.206.65.53, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag-O-4xsdTFafgO8vhSy6wAAARA"], referer: https://makifim.com.au/login/
[Fri May 22 07:03:32.182309 2026] [:error] [pid 58813:tid 58831] [client 35.206.65.53:43696] [client 35.206.65.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.206.65.53, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag-PRJ6yyKWDKULhxJ0DNwAAAU8"], referer: https://makifim.com.au/login/
[Fri May 22 10:24:17.555504 2026] [:error] [pid 15583:tid 15611] [client 138.68.238.96:53002] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag--UXnaOncRcIm17YWqmwAAABc"]
[Fri May 22 10:24:18.240161 2026] [:error] [pid 58813:tid 58827] [client 138.68.238.96:54576] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag--Up6yyKWDKULhxJ0mgQAAAUs"]
[Fri May 22 11:17:25.390496 2026] [:error] [pid 15585:tid 15658] [client 138.68.238.96:61432] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag_KxSKb-vB41AF-LC3GEQAAAIs"]
[Fri May 22 11:24:25.256832 2026] [:error] [pid 15585:tid 15650] [client 138.68.238.96:50799] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag_MaSKb-vB41AF-LC3IxgAAAIM"]
[Fri May 22 11:32:14.307075 2026] [:error] [pid 15585:tid 15648] [client 138.68.238.96:62334] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag_OPiKb-vB41AF-LC3LowAAAIE"]
[Fri May 22 11:40:15.511016 2026] [:error] [pid 15679:tid 15686] [client 138.68.238.96:62069] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag_QHyh8tgGc38WJ-GzR6gAAAMU"]
[Fri May 22 11:48:47.004390 2026] [:error] [pid 58782:tid 58803] [client 138.68.238.96:51240] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ag_SH4xsdTFafgO8vhTeogAAARM"]
[Fri May 22 17:11:07.745351 2026] [:error] [pid 15585:tid 15658] [client 34.93.63.75:58332] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdqyKb-vB41AF-LC1JFgAAAIs"]
[Fri May 22 17:11:08.325803 2026] [:error] [pid 15585:tid 15671] [client 34.93.63.75:60314] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feed/"] [unique_id "ahAdrCKb-vB41AF-LC1JRwAAAJg"]
[Fri May 22 17:59:26.121176 2026] [:error] [pid 15679:tid 15688] [client 104.168.4.138:56368] [client 104.168.4.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/HEAD"] [unique_id "ahAo_ih8tgGc38WJ-Gw7PwAAAMc"]
[Fri May 22 17:59:30.481735 2026] [:error] [pid 15585:tid 15662] [client 104.168.4.138:49876] [client 104.168.4.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.production"] [unique_id "ahApAiKb-vB41AF-LC1XTQAAAI8"]
[Fri May 22 17:59:30.829688 2026] [:error] [pid 15585:tid 15669] [client 104.168.4.138:49842] [client 104.168.4.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.git/config"] [unique_id "ahApAiKb-vB41AF-LC1XTgAAAJY"]
[Fri May 22 17:59:30.939709 2026] [:error] [pid 15679:tid 15696] [client 104.168.4.138:49848] [client 104.168.4.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "ahApAih8tgGc38WJ-Gw7RAAAAM8"]
[Fri May 22 17:59:30.940607 2026] [:error] [pid 15584:tid 15643] [client 104.168.4.138:49868] [client 104.168.4.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.local"] [unique_id "ahApAt9Z_TVLbNEx52gVAwAAAFc"]
[Fri May 22 17:59:30.940699 2026] [:error] [pid 15585:tid 15652] [client 104.168.4.138:49894] [client 104.168.4.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/backend/.env"] [unique_id "ahApAiKb-vB41AF-LC1XUAAAAIU"]
[Fri May 22 17:59:30.941620 2026] [:error] [pid 15585:tid 15660] [client 104.168.4.138:49902] [client 104.168.4.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/api/.env"] [unique_id "ahApAiKb-vB41AF-LC1XUQAAAI0"]
[Fri May 22 17:59:31.278688 2026] [:error] [pid 15585:tid 15665] [client 104.168.4.138:49882] [client 104.168.4.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env.development"] [unique_id "ahApAyKb-vB41AF-LC1XUwAAAJI"]
[Fri May 22 17:59:34.788545 2026] [:error] [pid 58782:tid 58799] [client 104.168.4.138:49912] [client 104.168.4.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.168.4.138, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahApBoxsdTFafgO8vhQTTQAAAQ8"]
[Fri May 22 17:59:34.794720 2026] [:error] [pid 15585:tid 15654] [client 104.168.4.138:49978] [client 104.168.4.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.168.4.138, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahApBiKb-vB41AF-LC1XYwAAAIc"]
[Fri May 22 21:09:23.864672 2026] [:error] [pid 15585:tid 15664] [client 34.139.11.251:59779] [client 34.139.11.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.11.251, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBVgyKb-vB41AF-LC2QbgAAAJE"]
[Fri May 22 21:09:25.860586 2026] [:error] [pid 15585:tid 15647] [client 34.139.11.251:59779] [client 34.139.11.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBVhSKb-vB41AF-LC2QcwAAAIA"]
[Fri May 22 21:09:27.242818 2026] [:error] [pid 15585:tid 15657] [client 34.139.11.251:59779] [client 34.139.11.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.11.251, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBVhyKb-vB41AF-LC2QeAAAAIo"]
[Fri May 22 21:09:29.031528 2026] [:error] [pid 15679:tid 15701] [client 34.139.11.251:52780] [client 34.139.11.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.11.251, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBViSh8tgGc38WJ-GxmqgAAANQ"]
[Fri May 22 21:09:30.887386 2026] [:error] [pid 15583:tid 15603] [client 34.139.11.251:63947] [client 34.139.11.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.11.251, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBVinnaOncRcIm17YUbkQAAAA8"]
[Fri May 22 21:09:32.637129 2026] [:error] [pid 15679:tid 15695] [client 34.139.11.251:63877] [client 34.139.11.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.11.251, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBVjCh8tgGc38WJ-GxmsQAAAM4"]
[Fri May 22 21:09:34.393306 2026] [:error] [pid 15584:tid 15635] [client 34.139.11.251:52486] [client 34.139.11.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.11.251, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBVjt9Z_TVLbNEx52g4lgAAAE8"]
[Fri May 22 21:09:34.393460 2026] [:error] [pid 15584:tid 15635] [client 34.139.11.251:52486] [client 34.139.11.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.139.11.251, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBVjt9Z_TVLbNEx52g4lgAAAE8"]
[Fri May 22 22:34:37.844696 2026] [:error] [pid 58813:tid 58829] [client 34.12.190.65:54731] [client 34.12.190.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.190.65, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBpfZ6yyKWDKULhxJ2XhgAAAU0"]
[Fri May 22 22:34:40.272000 2026] [:error] [pid 58813:tid 58825] [client 34.12.190.65:54731] [client 34.12.190.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBpgJ6yyKWDKULhxJ2XiQAAAUk"]
[Fri May 22 22:34:41.723173 2026] [:error] [pid 58813:tid 58826] [client 34.12.190.65:54731] [client 34.12.190.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.190.65, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBpgZ6yyKWDKULhxJ2XjAAAAUo"]
[Fri May 22 22:34:43.813671 2026] [:error] [pid 15584:tid 15621] [client 34.12.190.65:51991] [client 34.12.190.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.190.65, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBpg99Z_TVLbNEx52hHdQAAAEE"]
[Fri May 22 22:34:45.912018 2026] [:error] [pid 15584:tid 15622] [client 34.12.190.65:64467] [client 34.12.190.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.190.65, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBphd9Z_TVLbNEx52hHdgAAAEI"]
[Fri May 22 22:34:47.937012 2026] [:error] [pid 15679:tid 15687] [client 34.12.190.65:63445] [client 34.12.190.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.190.65, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBphyh8tgGc38WJ-Gx8iQAAAMY"]
[Fri May 22 22:34:50.540914 2026] [:error] [pid 58813:tid 58832] [client 34.12.190.65:54562] [client 34.12.190.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.190.65, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBpip6yyKWDKULhxJ2XjgAAAVA"]
[Fri May 22 22:34:50.541081 2026] [:error] [pid 58813:tid 58832] [client 34.12.190.65:54562] [client 34.12.190.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.12.190.65, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBpip6yyKWDKULhxJ2XjgAAAVA"]
[Fri May 22 22:59:11.492962 2026] [:error] [pid 58782:tid 58798] [client 136.119.23.189:57399] [client 136.119.23.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.23.189, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvP4xsdTFafgO8vhQ48gAAAQ4"]
[Fri May 22 22:59:13.527052 2026] [:error] [pid 58782:tid 58799] [client 136.119.23.189:57399] [client 136.119.23.189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makifim.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makifim.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBvQYxsdTFafgO8vhQ49QAAAQ8"]
[Fri May 22 22:59:14.720435 2026] [:error] [pid 58782:tid 58802] [client 136.119.23.189:57399] [client 136.119.23.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.23.189, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvQoxsdTFafgO8vhQ49wAAARI"]
[Fri May 22 22:59:16.384435 2026] [:error] [pid 15679:tid 15697] [client 136.119.23.189:63697] [client 136.119.23.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.23.189, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvRCh8tgGc38WJ-GyBiwAAANA"]
[Fri May 22 22:59:18.053779 2026] [:error] [pid 58813:tid 58830] [client 136.119.23.189:64973] [client 136.119.23.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.23.189, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvRp6yyKWDKULhxJ2adgAAAU4"]
[Fri May 22 22:59:19.777023 2026] [:error] [pid 15583:tid 15601] [client 136.119.23.189:58406] [client 136.119.23.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.23.189, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvR3naOncRcIm17YU3dwAAAA0"]
[Fri May 22 22:59:21.457619 2026] [:error] [pid 15679:tid 15683] [client 136.119.23.189:52110] [client 136.119.23.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.23.189, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvSSh8tgGc38WJ-GyBjgAAAMI"]
[Fri May 22 22:59:21.457789 2026] [:error] [pid 15679:tid 15683] [client 136.119.23.189:52110] [client 136.119.23.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.119.23.189, counter = 6"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBvSSh8tgGc38WJ-GyBjgAAAMI"]
[Fri May 22 23:40:48.084054 2026] [:error] [pid 15583:tid 15603] [client 138.68.238.96:58008] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ahB5AHnaOncRcIm17YVERAAAAA8"]
[Fri May 22 23:55:26.836580 2026] [:error] [pid 58782:tid 58797] [client 138.68.238.96:50620] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ahB8boxsdTFafgO8vhQ_ZwAAAQ0"]
[Sat May 23 00:10:06.520038 2026] [:error] [pid 15583:tid 15603] [client 138.68.238.96:49655] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ahB_3nnaOncRcIm17YVQ_gAAAA8"]
[Sat May 23 00:24:42.875823 2026] [:error] [pid 58813:tid 58823] [client 138.68.238.96:58978] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ahCDSp6yyKWDKULhxJ2piQAAAUc"]
[Sat May 23 00:39:11.268712 2026] [:error] [pid 58782:tid 58794] [client 138.68.238.96:64499] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ahCGr4xsdTFafgO8vhRHfgAAAQo"]
[Sat May 23 00:53:38.938491 2026] [:error] [pid 15679:tid 15694] [client 138.68.238.96:61448] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ahCKEih8tgGc38WJ-GygPQAAAM0"]
[Sat May 23 01:08:06.915072 2026] [:error] [pid 15584:tid 15638] [client 138.68.238.96:62814] [client 138.68.238.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.238.96, incrementing brute counter"] [hostname "makifim.com.au"] [uri "/wp-login.php"] [unique_id "ahCNdt9Z_TVLbNEx52hg-QAAAFI"]
[Sat May 23 07:27:27.394092 2026] [autoindex:error] [pid 25876:tid 25897] [client 20.200.215.186:5579] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat May 23 07:27:43.959005 2026] [:error] [pid 25876:tid 25900] [client 20.200.215.186:5579] [client 20.200.215.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahDmbwSpWUCKPezIBJCWagAAARY"]
[Sat May 23 07:27:44.530470 2026] [:error] [pid 25876:tid 25897] [client 20.200.215.186:6241] [client 20.200.215.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahDmcASpWUCKPezIBJCWbAAAARM"]
[Sat May 23 07:27:45.139467 2026] [:error] [pid 31039:tid 31044] [client 20.200.215.186:5604] [client 20.200.215.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahDmcaIYDYo8WvA5zLJ00QAAAMM"]
[Sat May 23 07:27:45.803692 2026] [:error] [pid 30942:tid 31018] [client 20.200.215.186:6248] [client 20.200.215.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahDmcdUosz64YFiBlG3McgAAAI8"]
[Sat May 23 09:52:28.255975 2026] [:error] [pid 30940:tid 30967] [client 185.198.240.211:27147] [client 185.198.240.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ahEIXJqUP2XZmzp7RDqfbAAAABI"]
[Sat May 23 12:02:30.227734 2026] [autoindex:error] [pid 25876:tid 25889] [client 164.68.127.128:50790] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun May 24 04:07:19.135794 2026] [:error] [pid 50871:tid 50881] [client 45.133.176.9:46385] [client 45.133.176.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.9, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahII9-cdOvA3ACH24lePagAAAAE"]
[Sun May 24 04:07:24.077907 2026] [:error] [pid 50978:tid 51010] [client 45.133.176.10:25931] [client 45.133.176.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.10, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahII_Cu0qFnUKJJuyO5t0wAAANc"]
[Sun May 24 04:07:28.967102 2026] [:error] [pid 58797:tid 58808] [client 45.133.176.25:64709] [client 45.133.176.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.25, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJAPzoIKLVypLB5NgF0QAAAUg"]
[Sun May 24 04:07:33.794908 2026] [:error] [pid 58918:tid 58944] [client 45.133.176.46:52069] [client 45.133.176.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.46, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJBaT5tvv40jh4HYbhLAAAAZg"]
[Sun May 24 04:07:40.827659 2026] [:error] [pid 58918:tid 58941] [client 45.133.176.21:64559] [client 45.133.176.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.21, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJDKT5tvv40jh4HYbhSAAAAZU"]
[Sun May 24 04:07:50.468119 2026] [:error] [pid 50871:tid 50889] [client 45.133.176.27:33977] [client 45.133.176.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.27, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJFucdOvA3ACH24lePkwAAAAg"]
[Sun May 24 04:08:25.984308 2026] [:error] [pid 50872:tid 50921] [client 45.133.176.30:31045] [client 45.133.176.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.30, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIJOUbX_GQ5p_34ISZKMAAAAEg"]
[Sun May 24 10:43:14.211503 2026] [:error] [pid 2639:tid 2661] [client 100.52.201.197:53496] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "ahJlwkzQncQTd0Z0Oe_rwwAAARQ"]
[Sun May 24 10:43:20.617338 2026] [:error] [pid 49775:tid 49791] [client 100.52.201.197:52202] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/credentials"] [unique_id "ahJlyIvZb8G6T8WpI1g0FwAAAA4"]
[Sun May 24 10:43:25.152581 2026] [:error] [pid 2639:tid 2654] [client 100.52.201.197:52226] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env"] [unique_id "ahJlzUzQncQTd0Z0Oe_r8AAAAQ0"]
[Sun May 24 10:43:26.191662 2026] [:error] [pid 49775:tid 49791] [client 100.52.201.197:55066] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.local"] [unique_id "ahJlzovZb8G6T8WpI1g0JQAAAA4"]
[Sun May 24 10:43:27.340544 2026] [:error] [pid 49775:tid 49799] [client 100.52.201.197:55082] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.production"] [unique_id "ahJlz4vZb8G6T8WpI1g0KwAAABY"]
[Sun May 24 10:43:28.681568 2026] [:error] [pid 49775:tid 49784] [client 100.52.201.197:55098] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.staging"] [unique_id "ahJl0IvZb8G6T8WpI1g0NQAAAAc"]
[Sun May 24 10:43:29.771059 2026] [:error] [pid 49775:tid 49786] [client 100.52.201.197:55102] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.development"] [unique_id "ahJl0YvZb8G6T8WpI1g0PAAAAAk"]
[Sun May 24 10:43:31.859365 2026] [:error] [pid 49744:tid 49764] [client 100.52.201.197:55116] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.test"] [unique_id "ahJl0zsE5kPdFpUbbHF4mwAAANI"]
[Sun May 24 10:43:33.021518 2026] [:error] [pid 2639:tid 2646] [client 100.52.201.197:38862] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.remote"] [unique_id "ahJl1UzQncQTd0Z0Oe_sBgAAAQU"]
[Sun May 24 10:43:34.162028 2026] [:error] [pid 49744:tid 49758] [client 100.52.201.197:38878] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.bak"] [unique_id "ahJl1jsE5kPdFpUbbHF4nwAAAMw"]
[Sun May 24 10:43:35.252039 2026] [:error] [pid 49744:tid 49752] [client 100.52.201.197:38882] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.backup"] [unique_id "ahJl1zsE5kPdFpUbbHF4pAAAAMY"]
[Sun May 24 10:43:36.909103 2026] [:error] [pid 49689:tid 49734] [client 100.52.201.197:38886] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.save"] [unique_id "ahJl2AaxiY3NxLUD97UpXQAAAJA"]
[Sun May 24 10:43:38.440078 2026] [:error] [pid 2639:tid 2651] [client 100.52.201.197:38898] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.old"] [unique_id "ahJl2kzQncQTd0Z0Oe_sFQAAAQo"]
[Sun May 24 10:43:39.606149 2026] [:error] [pid 49688:tid 49710] [client 100.52.201.197:38900] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.sample"] [unique_id "ahJl22YoQ9V6a_4pBshtwQAAAFM"]
[Sun May 24 10:43:40.726528 2026] [:error] [pid 2639:tid 2658] [client 100.52.201.197:38906] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.example"] [unique_id "ahJl3EzQncQTd0Z0Oe_sGgAAARE"]
[Sun May 24 10:43:41.838383 2026] [:error] [pid 49688:tid 49697] [client 100.52.201.197:38912] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.dev"] [unique_id "ahJl3WYoQ9V6a_4pBshtxwAAAEY"]
[Sun May 24 10:43:42.850386 2026] [:error] [pid 49689:tid 49729] [client 100.52.201.197:38928] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.prod"] [unique_id "ahJl3gaxiY3NxLUD97UpbQAAAIs"]
[Sun May 24 10:43:44.018567 2026] [:error] [pid 49775:tid 49800] [client 100.52.201.197:33698] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.stage"] [unique_id "ahJl4IvZb8G6T8WpI1g0UgAAABc"]
[Sun May 24 10:43:45.230540 2026] [:error] [pid 2639:tid 2646] [client 100.52.201.197:33706] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.ci"] [unique_id "ahJl4UzQncQTd0Z0Oe_sHgAAAQU"]
[Sun May 24 10:43:46.396821 2026] [:error] [pid 49775:tid 49797] [client 100.52.201.197:33708] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.docker"] [unique_id "ahJl4ovZb8G6T8WpI1g0VgAAABQ"]
[Sun May 24 10:43:48.299834 2026] [:error] [pid 49689:tid 49741] [client 100.52.201.197:33718] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.live"] [unique_id "ahJl5AaxiY3NxLUD97UpdAAAAJc"]
[Sun May 24 10:43:49.631285 2026] [:error] [pid 49775:tid 49788] [client 100.52.201.197:33730] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.preprod"] [unique_id "ahJl5YvZb8G6T8WpI1g0XQAAAAs"]
[Sun May 24 10:43:50.877219 2026] [:error] [pid 49775:tid 49781] [client 100.52.201.197:33742] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.uat"] [unique_id "ahJl5ovZb8G6T8WpI1g0XwAAAAQ"]
[Sun May 24 10:43:52.139385 2026] [:error] [pid 2639:tid 2654] [client 100.52.201.197:33750] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.dist"] [unique_id "ahJl6EzQncQTd0Z0Oe_sLgAAAQ0"]
[Sun May 24 10:43:53.352520 2026] [:error] [pid 49744:tid 49756] [client 100.52.201.197:34420] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.swp"] [unique_id "ahJl6TsE5kPdFpUbbHF4sgAAAMo"]
[Sun May 24 10:43:54.506298 2026] [:error] [pid 49744:tid 49754] [client 100.52.201.197:34430] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env~"] [unique_id "ahJl6jsE5kPdFpUbbHF4tgAAAMg"]
[Sun May 24 10:43:55.767755 2026] [:error] [pid 49689:tid 49737] [client 100.52.201.197:34438] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env1"] [unique_id "ahJl6waxiY3NxLUD97UpdgAAAJM"]
[Sun May 24 10:43:56.959936 2026] [:error] [pid 49775:tid 49779] [client 100.52.201.197:34440] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env2"] [unique_id "ahJl7IvZb8G6T8WpI1g0aAAAAAI"]
[Sun May 24 10:43:58.072083 2026] [:error] [pid 49744:tid 49761] [client 100.52.201.197:34448] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env_copy"] [unique_id "ahJl7jsE5kPdFpUbbHF4uwAAAM8"]
[Sun May 24 10:43:59.210840 2026] [:error] [pid 49688:tid 49700] [client 100.52.201.197:34450] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.txt"] [unique_id "ahJl72YoQ9V6a_4pBsht0AAAAEk"]
[Sun May 24 10:44:00.322580 2026] [:error] [pid 49744:tid 49754] [client 100.52.201.197:34454] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.json"] [unique_id "ahJl8DsE5kPdFpUbbHF4wQAAAMg"]
[Sun May 24 10:44:01.667742 2026] [:error] [pid 2639:tid 2652] [client 100.52.201.197:34462] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.yaml"] [unique_id "ahJl8UzQncQTd0Z0Oe_sMwAAAQs"]
[Sun May 24 10:44:02.783635 2026] [:error] [pid 49689:tid 49728] [client 100.52.201.197:34468] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.env.yml"] [unique_id "ahJl8gaxiY3NxLUD97UpegAAAIo"]
[Sun May 24 10:44:04.292594 2026] [:error] [pid 49775:tid 49795] [client 100.52.201.197:55012] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/app/.env"] [unique_id "ahJl9IvZb8G6T8WpI1g0eAAAABI"]
[Sun May 24 10:44:05.303813 2026] [:error] [pid 49775:tid 49780] [client 100.52.201.197:55026] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/apps/.env"] [unique_id "ahJl9YvZb8G6T8WpI1g0fAAAAAM"]
[Sun May 24 10:44:06.824179 2026] [:error] [pid 49775:tid 49797] [client 100.52.201.197:55034] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/api/.env"] [unique_id "ahJl9ovZb8G6T8WpI1g0hAAAABQ"]
[Sun May 24 10:44:08.009276 2026] [:error] [pid 49775:tid 49781] [client 100.52.201.197:55050] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/web/.env"] [unique_id "ahJl-IvZb8G6T8WpI1g0iAAAAAQ"]
[Sun May 24 10:44:09.227659 2026] [:error] [pid 49775:tid 49782] [client 100.52.201.197:55052] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/site/.env"] [unique_id "ahJl-YvZb8G6T8WpI1g0kAAAAAU"]
[Sun May 24 10:44:10.428948 2026] [:error] [pid 49775:tid 49790] [client 100.52.201.197:55058] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/public/.env"] [unique_id "ahJl-ovZb8G6T8WpI1g0kQAAAA0"]
[Sun May 24 10:44:11.377935 2026] [:error] [pid 49775:tid 49785] [client 100.52.201.197:55074] [client 100.52.201.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/admin/.env"] [unique_id "ahJl-4vZb8G6T8WpI1g0kwAAAAg"]
[Sun May 24 14:29:25.234944 2026] [:error] [pid 23497:tid 23518] [client 170.64.224.245:44514] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahKaxSPlV47QcYwd2v-oogAAAVI"]
[Sun May 24 14:29:25.359958 2026] [:error] [pid 2639:tid 2658] [client 170.64.224.245:44496] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahKaxUzQncQTd0Z0Oe87GAAAARE"]
[Sun May 24 14:29:25.376414 2026] [:error] [pid 2639:tid 2662] [client 170.64.224.245:44506] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahKaxUzQncQTd0Z0Oe87GQAAARU"]
[Sun May 24 14:29:25.532710 2026] [:error] [pid 23497:tid 23512] [client 170.64.224.245:44502] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKaxSPlV47QcYwd2v-oowAAAUw"]
[Sun May 24 14:29:27.757665 2026] [:error] [pid 23497:tid 23524] [client 170.64.224.245:44510] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKaxyPlV47QcYwd2v-opQAAAVg"]
[Sun May 24 14:29:27.765405 2026] [:error] [pid 2639:tid 2664] [client 170.64.224.245:44520] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKax0zQncQTd0Z0Oe87GgAAARc"]
[Sun May 24 14:29:27.771655 2026] [:error] [pid 23497:tid 23514] [client 170.64.224.245:44522] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKaxyPlV47QcYwd2v-opgAAAU4"]
[Sun May 24 14:29:27.779556 2026] [:error] [pid 2639:tid 2654] [client 170.64.224.245:44534] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKax0zQncQTd0Z0Oe87GwAAAQ0"]
[Sun May 24 14:29:27.786173 2026] [:error] [pid 2639:tid 2642] [client 170.64.224.245:44532] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKax0zQncQTd0Z0Oe87HAAAAQE"]
[Sun May 24 14:29:27.794572 2026] [:error] [pid 49744:tid 49749] [client 170.64.224.245:44512] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKaxzsE5kPdFpUbbHGtggAAAMM"]
[Sun May 24 14:29:27.794799 2026] [:error] [pid 2639:tid 2656] [client 170.64.224.245:44554] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKax0zQncQTd0Z0Oe87HQAAAQ8"]
[Sun May 24 14:29:27.810800 2026] [:error] [pid 2639:tid 2651] [client 170.64.224.245:44538] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKax0zQncQTd0Z0Oe87HgAAAQo"]
[Mon May 25 00:09:47.005317 2026] [:error] [pid 11280:tid 11285] [client 170.64.238.42:32840] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "ahMiy4Rn5s7laoSxy1QxqwAAAEA"]
[Mon May 25 00:09:47.097719 2026] [:error] [pid 11368:tid 11393] [client 170.64.238.42:45154] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.makifim.com.au"] [uri "/.git/config"] [unique_id "ahMiy4fq_sTmmtTKm1Ve4AAAARc"]
[Mon May 25 06:54:23.454689 2026] [:error] [pid 21606:tid 21623] [client 46.151.182.172:61211] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ahOBn2swdp0RYkH5t9XF7wAAAU8"]
[Mon May 25 06:54:23.983038 2026] [:error] [pid 50423:tid 50441] [client 46.151.182.172:57425] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ahOBn6JWO7En4nKEQ3g5XwAAARA"]
[Mon May 25 06:54:24.529375 2026] [:error] [pid 50423:tid 50427] [client 46.151.182.172:49921] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ahOBoKJWO7En4nKEQ3g5bAAAAQI"]
[Mon May 25 06:54:25.246859 2026] [:error] [pid 9303:tid 9341] [client 46.151.182.172:55992] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ahOBoX3bQScbssitjPQ-ygAAAEc"]
[Mon May 25 06:54:25.827795 2026] [:error] [pid 9304:tid 9378] [client 46.151.182.172:55655] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/"] [unique_id "ahOBoeVEV2qpMC_1UzSNGwAAAJE"]
[Mon May 25 07:09:20.282450 2026] [:error] [pid 50423:tid 50448] [client 104.28.214.122:38467] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFIKJWO7En4nKEQ3g-tAAAARc"]
[Mon May 25 07:09:20.740057 2026] [:error] [pid 50423:tid 50442] [client 104.28.214.122:38544] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/chosen.php"] [unique_id "ahOFIKJWO7En4nKEQ3g-ugAAARE"]
[Mon May 25 07:09:22.302369 2026] [:error] [pid 9304:tid 9372] [client 104.28.214.122:38795] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/file.php"] [unique_id "ahOFIuVEV2qpMC_1UzSWBQAAAIs"]
[Mon May 25 07:09:23.810373 2026] [:error] [pid 50423:tid 50434] [client 104.28.246.122:24292] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/flower.php"] [unique_id "ahOFI6JWO7En4nKEQ3g-1AAAAQk"]
[Mon May 25 07:09:24.257089 2026] [:error] [pid 9302:tid 9314] [client 104.28.214.122:38483] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/gifclass.php"] [unique_id "ahOFJC1RaFfTSnDQnqFbqQAAAAc"]
[Mon May 25 07:09:24.707432 2026] [:error] [pid 9304:tid 9378] [client 104.28.246.122:60676] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/bless.php"] [unique_id "ahOFJOVEV2qpMC_1UzSWFAAAAJE"]
[Mon May 25 07:09:25.153568 2026] [:error] [pid 21606:tid 21613] [client 104.28.214.122:20375] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahOFJWswdp0RYkH5t9XJnAAAAUU"]
[Mon May 25 07:09:25.599717 2026] [:error] [pid 9303:tid 9334] [client 104.28.214.122:19972] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/blurbs.php"] [unique_id "ahOFJX3bQScbssitjPRD_wAAAEA"]
[Mon May 25 09:31:19.592537 2026] [autoindex:error] [pid 62515:tid 62519] [client 161.97.142.128:55918] AH01276: Cannot serve directory /home/makifimc/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon May 25 12:13:42.836560 2026] [autoindex:error] [pid 62515:tid 62520] [client 4.225.163.177:26863] AH01276: Cannot serve directory /home/makifimc/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 25 12:14:00.015406 2026] [:error] [pid 62515:tid 62522] [client 4.225.163.177:26863] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahPMiBig0_XsOwmnrv-jkAAAAMU"]
[Mon May 25 12:14:01.290372 2026] [:error] [pid 62428:tid 62493] [client 4.225.163.177:9869] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahPMiZNosGBa7mui3VThxAAAAIk"]
[Mon May 25 12:14:02.587195 2026] [:error] [pid 62427:tid 62476] [client 4.225.163.177:26873] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahPMivMUa83fc4GDyBwqdwAAAVM"]
[Mon May 25 12:14:03.696104 2026] [:error] [pid 62427:tid 62457] [client 4.225.163.177:55802] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/class-t.api.php"] [unique_id "ahPMi_MUa83fc4GDyBwqeQAAAUA"]
[Tue May 26 06:17:11.649642 2026] [:error] [pid 55988:tid 56003] [client 173.239.214.44:64047] [client 173.239.214.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "makifim.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ahTKZ_3kVIz2sql52sdicwAAAQw"]
[Tue May 26 17:05:07.360365 2026] [:error] [pid 55988:tid 56010] [client 34.11.17.55:58439] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViQ_3kVIz2sql52sdhhQAAARM"]
[Tue May 26 17:05:08.238312 2026] [:error] [pid 20025:tid 20088] [client 34.11.17.55:53437] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "makifim.com.au"] [uri "/feed/"] [unique_id "ahViRH7k8Vts-JPOkgXPqgAAAFc"]
[Tue May 26 19:23:51.419614 2026] [:error] [pid 36497:tid 36517] [client 176.65.139.236:38758] [client 176.65.139.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makifim.com.au"] [uri "/.env"] [unique_id "ahWCx7jKQWM1gBmBY4i3eQAAAMc"]
[Tue May 26 19:40:17.462737 2026] [:error] [pid 33977:tid 34002] [client 74.7.242.31:42814] [client 74.7.242.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.31, incrementing ddos counter"] [hostname "makifim.com.au"] [uri "/xmlrpc.php"] [unique_id "ahWGoe9cnSDNAU9sYPi72gAAABY"], referer: https://makifim.com.au/